[{"errata_id": "1", "doc-id": "RFC4954", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   S: 220-smtp.example.com ESMTP Server", "correct_text": "   S: 220 smtp.example.com ESMTP Server", "notes": "There are 3 instances of this (one on p. 7 and two on p. 8). \n", "submit_date": "2007-07-19", "submitter_name": "Rob Siemborski", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2", "doc-id": "RFC4907", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.4.2", "orig_text": "   In order to address\n   this problem, \"Packetization Layer Path MTU Discovery\" [RFC4821] does\n   depend on the delivery of ICMP messages.", "correct_text": "   In order to address\n   this problem, \"Packetization Layer Path MTU Discovery\" [RFC4821] does\n   not depend on the delivery of ICMP messages.\n", "notes": "", "submit_date": "2007-06-25", "submitter_name": "Stephane Bortzmeyer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3", "doc-id": "RFC4884", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "The one's complement of the one's complement sum of the data\nstructure, with the checksum field replaced by zero for the\npurpose of computing the checksum.", "correct_text": "The one's complement of the one's complement sum of the ICMP\nExtension Structure, with the checksum field replaced by zero for\nthe purpose of computing the checksum.\n", "notes": "", "submit_date": "2007-05-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4", "doc-id": "RFC4866", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "                                                           Enhanced\r\n    Router Optimization does not make assumptions on the relationship\r\n    ^^^^^^\r\n    between mobile and correspondent nodes.", "correct_text": "                                                           Enhanced\r\n    Route Optimization does not make assumptions on the relationship\r\n    ^^^^^  \r\n    between mobile and correspondent nodes.", "notes": "Page 43, 1st paragraph", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Christian Vogt", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5", "doc-id": "RFC4853", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "RFC 3852, section 5.1, the next to the last paragraph says:", "correct_text": "RFC 3852, section 5.1, the last paragraph says:\n", "notes": "", "submit_date": "2007-05-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6", "doc-id": "RFC4812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "The running page footer displays the wrong status of the document; \nthe footer displays \"Experimental\".  However, RFC 4812 is an \nInformational document.  The status is displayed correctly in \nthe document header and in the RFC index.\n\n\n", "submit_date": "2007-03-29", "submitter_name": "Abhay Roy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7", "doc-id": "RFC4790", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "collation-id    = collation-prefix \";\" collation-core-name", "correct_text": "collation-id    = collation-scope \";\" collation-core-name", "notes": "Submitted to the RFC Editor by Chris Newman.\r\nAlso reported by Alfred Hoenes 2007-04-10.", "submit_date": "2007-03-29", "submitter_name": "Filip Navara", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8", "doc-id": "RFC4782", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   The QS Nonce in the\r\n   Response is set to the received value of the QS Nonce in the Quick-\r\n   Start Option.", "correct_text": "   The QS Nonce in the\r\n   Response is set to the received value of the QS Nonce in the Quick-\r\n   Start Option.\r\n\r\n   If the TCP host has sufficient receive buffer space, it could\r\n   estimate the required buffer space as the product of the approved\r\n   Quick-Start rate and the round-trip time, and advertise a receive\r\n   window based on this required buffer space.  This receive window\r\n   should allow the other TCP host to fully use the approved Quick-Start\r\n   Request.\r\n\r\n   If the TCP host doesn't know the round-trip time, the TCP host\r\n   could use an estimate of the round-trip time in calculating the\r\n   required buffer space.  Alternately, the TCP host could base the\r\n   advertised receive window on the available buffer space, without\r\n   calculating the buffer space required for the other TCP host to\r\n   fully use the approved Quick-Start Request.\r\n\r\n   If the Quick-Start Response is sent in a SYN/ACK packet, then\r\n   window scaling of the receive window is not allowed [RFC1323];\r\n   if necessary, the TCP host could send a scaled receive window\r\n   in a separate ACK packet following the SYN/ACK packet.", "notes": "Clarification regarding the receive window.\r\n\r\nfrom pending", "submit_date": "2007-04-10", "submitter_name": "Michael Scharf", "verifier_id": "", "verifier_name": "Sally Floyd", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "9", "doc-id": "RFC4753", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   The Diffie-Hellman public value is obtained by concatenating the x\r\n   and y values.\r\n\r\n   The format of the Diffie-Hellman shared secret value is the same as\r\n   that of the Diffie-Hellman public value.", "correct_text": "", "notes": "The last paragraph is incorrect.  The Diffie-Hellman shared secret \r\ncontains only the x value.  The y value is not included in the shared \r\nsecret.\r\n\r\n\r\n\r\n", "submit_date": "2007-04-23", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "10", "doc-id": "RFC4746", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.7", "orig_text": "   Consequently, EAP-PAX requires the use of a\r\n   Diffie-Hellman group with modulus larger than 3000.  ", "correct_text": "   Consequently, EAP-PAX requires the use of a\r\n   Diffie-Hellman group with modulus larger than 3000 bits. \r\n", "notes": "Provide units.", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "11", "doc-id": "RFC4746", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   These 52+L octets are then attached to the packet as the payload.", "correct_text": "   These 54+L octets are then attached to the packet as the payload.", "notes": "Correction based on preceding text (page 16) and Figure 8\r\n", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "12", "doc-id": "RFC4742", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "   [RFC4721]  Enns, R., Ed., \"NETCONF Configuration Protocol\", RFC 4721,\r\n              December 2006.", "correct_text": "   [RFC4741]  Enns, R., Ed., \"NETCONF Configuration Protocol\", RFC 4741, \r\n              December 2006.", "notes": "RFC4742 refers throughout to the NETCONF specification as RFC4721, even though NETCONF is really specified in RFC4741.\r\n\r\nfrom pending", "submit_date": "2007-03-30", "submitter_name": "Heikki Kortti", "verifier_id": "", "verifier_name": null, "update_date": "2021-04-01 04:31:11"}, {"errata_id": "13", "doc-id": "RFC4730", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   DRegexCharacter  = DIGIT / \"A\" / \"B\" / \"C\" / \"D\" / \"R\" / \"*\" / \"#\" /\r\n                              \"a\" / \"b\" / \"c\" / \"d\" / \"r\"", "correct_text": "   DRegexCharacter  = DIGIT / \"A\" / \"B\" / \"C\" / \"D\" / \"R\" / \"X\" / \"*\" / \"#\"\r\n                              \"a\" / \"b\" / \"c\" / \"d\" / \"r\" / \"x\"", "notes": "The ABNF for DRegex (page 29) is missing an 'x'.", "submit_date": "2006-11-30", "submitter_name": "Eric Burger", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "14", "doc-id": "RFC4705", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "   [IKEv2]    Kaufman, C., \"The Internet Key Exchange (IKEv2) Protocol\",\n              RFC 2306, December 2005.                ", "correct_text": "   [IKEv2]    Kaufman, C., \"The Internet Key Exchange (IKEv2) Protocol\",\n              RFC 4306, December 2005.\n", "notes": "\n", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5154", "doc-id": "RFC8017", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2.4", "orig_text": "SHA-256          sha224WithRSAEncryption     ::= {pkcs-1 14}", "correct_text": "SHA-224          sha224WithRSAEncryption     ::= {pkcs-1 14}", "notes": "Good catch.  Confirmed.\r\n\r\nBackground:  The addition of SHA224 support to PKCS #1 required a few minor technical updates in PKCS #1 v2.2 compared to v2.1, and to the corresponding RFC8017 compared to RFC3447.  PKCS #1 v2.2 got the correct update, but RFC8017 didn't -- presumably a copy-and-paste error.  My oversight in reviewing the edits.  Thanks, Joost, for pointing it out.", "submit_date": "2017-10-12", "submitter_name": "Joost Rijneveld", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "15", "doc-id": "RFC4701", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "   However, it should be noted that an attacker that has some knowledge,\r\n   such as of MAC addresses commonly used in DHCP client identification\r\n   data, may be able to discover the client's DHCP identify by using a\r\n   brute-force attack.  ", "correct_text": "   However, it should be noted that an attacker that has some knowledge,\r\n   such as of MAC addresses commonly used in DHCP client identification\r\n   data, may be able to discover the client's DHCP identity by using a\r\n   brute-force attack.  \r\n", "notes": "", "submit_date": "2006-11-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "16", "doc-id": "RFC4698", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   o  Most specific: Given a set of networks, the network or networks\r\n      that are more specific than zero or more specific of the other\r\n      networks in the set, and that are not less specific of any of the\r\n      networks in the set.\r\n\r\n   o  Least specific: Given a set of networks, the network or networks\r\n      that are not more specific to any of the other networks in the\r\n      set.", "correct_text": "   o  Most specific: Given a set of networks, the network or networks\r\n      that are more specific than zero or more of the other networks in\r\n      the set, and that are not less specific than any of the networks\r\n      in the set.\r\n\r\n   o  Least specific: Given a set of networks, the network or networks\r\n      that are not more specific than any of the other networks in the\r\n      set.\r\n", "notes": "from pending", "submit_date": "2006-11-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "17", "doc-id": "RFC4695", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "In this errata, we briefly summarize several errata to RFC 4695,\nreported by Alfred Hoenes. The listed errata either fix normative\nproblem in RFC 4695, or describe editorial errata that may be\nparticularly confusing to the implementor.\n\nThe presentation below is brief. See the main text of\n<draft-ietf-avt-rfc4695-bis-00.txt> for a bis version of RFC 4695 that\nintegrates the fixes listed below in a more-complete way, and also\nincludes many other editorial fixes.\n\nJohn Lazzaro, lazzaro@eecs.berkeley.edu\n\n---\n\n[1] In Appendix C.1 and Appendix C.2.3 of RFC 4695, an ABNF rule\nrelated to System Chapter X is incorrectly defined as:\n\n       <parameter> = \"__\" <h-list> [\"_\" <h-list>] \"__\"\n\nThe correct version of this rule is:\n\n       <parameter> = \"__\" <h-list> *( \"_\" <h-list> ) \"__\"\n\n[2] In Appendix C.6.3 of RFC 4695, the URIs permitted to be assigned\nto the \"url\" parameter are not stated clearly.  URIs assigned to \"url\"\nMUST specify either HTTP or HTTP over TLS transport protocols.\n\nIn Appendix C.7.1 and C.7.2 of RFC 4695, the transport\ninteroperability requirements for the \"url\" parameter are not stated\nclearly.  For both C.7.1 and C.7.2, HTTP is REQUIRED and HTTP over TLS\nis OPTIONAL.\n\n[3] Both fmtp lines in both session description examples in Appendix\nC.7.2 of RFC 4695 contain instances of the same syntax error (a\nmissing \";\" at a line wrap after \"cm_used=2M0.1.2\").\n\n[4] In Appendix D of RFC 4695, all uses of \"*ietf-extension\" in rules\nare in error, and should be replaced with \"ietf-extension\".  Likewise,\nall uses of \"*extension\" are in error, and should be replaced with\n\"extension\".  This bug incorrectly lets the null token be assigned to\nthe j_sec, j_update, render, smf_info, and subrender parameters.\n\n[5] In Appendix D of RFC 4695, the definitions of the <command-type>\nand <chapter-rules> incorrectly allow lowercase letters to appear in\nthese strings. The correct definitions of these rules appear below:\n    command-type =   [A] [B] [C] [F] [G] [H] [J] [K] [M]\n                    [N] [P] [Q] [T] [V] [W] [X] [Y] [Z]\n\n   chapter-list =   [A] [B] [C] [D] [E] [F] [G] [H] [J] [K]\n                    [M] [N] [P] [Q] [T] [V] [W] [X] [Y] [Z]\n\n   A        = %x41\n   B        = %x42\n   C        = %x43\n   D        = %x44\n   E        = %x45\n   F        = %x46\n   G        = %x47\n   H        = %x48\n   J        = %x4A\n   K        = %x4B\n   M        = %x4D\n   N        = %x4E\n   P        = %x51\n   Q        = %x52\n   T        = %x54\n   V        = %x56\n   W        = %x57\n   X        = %x58\n   Y        = %x59\n   Z        = %x5A\n\n[6] In Appendix D of RFC 4695, the definitions of the <four-octet>,\n<nonzero-four-octet>, and <midi-chan> are incorrect.  The correct\ndefinitions of these rules appear below:\n    nonzero-four-octet =  (NZ-DIGIT 0*8(DIGIT))\n                       / (%x30-33 9(DIGIT))\n                       / (\"4\" %x30-31 8(DIGIT))\n                       / (\"42\" %x30-38 7(DIGIT))\n                       / (\"429\" %x30-33 6(DIGIT))\n                       / (\"4294\" %x30-38 5(DIGIT))\n                       / (\"42949\" %x30-35 4(DIGIT))\n                       / (\"429496\" %x30-36 3(DIGIT))\n                       / (\"4294967\" %x30-31 2(DIGIT))\n                       / (\"42949672\" %x30-38 (DIGIT))\n                       / (\"429496729\" %x30-34)\n\n   four-octet        = \"0\" / nonzero-four-octet\n   midi-chan         = DIGIT / (\"1\" %x30-35)\n   DIGIT             = %x30-39\n   NZ-DIGIT          = %x31-39\n\n[7] In Appendix D of RFC4695, the rule <hex-octet> is\nincorrect.  The correct definition of this rule appears below.\n    hex-octet   = %x30-37 U-HEXDIG\n   U-HEXDIG    = DIGIT / A / B / C / D / E / F\n\n   ; DIGIT as defined in [5] above\n   ; A, B, C, D, E, F as defined in [4] above\n\n[8] In Appendix D of RFC4695, the rules <base64-unit> and\n<base64-pad> are defined unclearly.  The rewritten rules\nappear below:\n    base64-unit = 4(base64-char)\n   base64-pad  = (2(base64-char) \"==\") / (3(base64-char) \"=\")\n\n", "correct_text": "", "notes": "", "submit_date": "2007-01-18", "submitter_name": "John Lazzaro", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5790", "doc-id": "RFC6241", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Sections 7.8, 7.9, and 8.4.1", "orig_text": "OLD:\r\n\r\n7.8.  <close-session>\r\n\r\n   Description:  Request graceful termination of a NETCONF session.\r\n\r\n      When a NETCONF server receives a <close-session> request, it will\r\n      gracefully close the session.  The server will release any locks\r\n      and resources associated with the session and gracefully close\r\n      any associated connections.  Any NETCONF requests received after\r\n      a <close-session> request will be ignored.\r\n\r\n   Positive Response:  If the device was able to satisfy the request, an\r\n      <rpc-reply> is sent that includes an <ok> element.\r\n\r\n   Negative Response:  An <rpc-error> element is included in the\r\n      <rpc-reply> if the request cannot be completed for any reason.\r\n\r\n   Example:\r\n\r\n     <rpc message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <close-session/>\r\n     </rpc>\r\n\r\n     <rpc-reply message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <ok/>\r\n     </rpc-reply>\r\n\r\nNEW\r\n\r\n7.8.  <close-session>\r\n\r\n   Description:  Request graceful termination of a NETCONF session.\r\n\r\n      When a NETCONF server receives a <close-session> request, it will\r\n      gracefully close the session.  The server will release any locks\r\n      and resources associated with the session and gracefully close any\r\n      associated connections.  Any NETCONF requests received after a\r\n      <close-session> request will be ignored.\r\n\r\n      For details on what happens if a NETCONF server receives a \r\n      <close-session> request while processing a confirmed commit,\r\n      please refer to Section 8.4.\r\n\r\n   Positive Response:  If the device was able to satisfy the request, an\r\n      <rpc-reply> is sent that includes an <ok> element.\r\n\r\n   Negative Response:  An <rpc-error> element is included in the\r\n      <rpc-reply> if the request cannot be completed for any reason.\r\n\r\n   Example:\r\n\r\n     <rpc message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <close-session/>\r\n     </rpc>\r\n\r\n     <rpc-reply message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <ok/>\r\n     </rpc-reply>\r\n\r\nOLD\r\n\r\n7.9.  <kill-session>\r\n\r\n   Description:  Force the termination of a NETCONF session.\r\n\r\n      When a NETCONF entity receives a <kill-session> request for an\r\n      open session, it will abort any operations currently in process,\r\n      release any locks and resources associated with the session, and\r\n      close any associated connections.\r\n\r\n      If a NETCONF server receives a <kill-session> request while\r\n      processing a confirmed commit (Section 8.4), it MUST restore the\r\n      configuration to its state before the confirmed commit was issued.\r\n\r\n      Otherwise, the <kill-session> operation does not roll back\r\n      configuration or other device state modifications made by the\r\n      entity holding the lock.\r\n\r\n   Parameters:\r\n\r\n      session-id:  Session identifier of the NETCONF session to be\r\n         terminated.  If this value is equal to the current session ID,\r\n         an \"invalid-value\" error is returned.\r\n\r\n   Positive Response:  If the device was able to satisfy the request, an\r\n      <rpc-reply> is sent that includes an <ok> element.\r\n\r\n   Negative Response:  An <rpc-error> element is included in the\r\n      <rpc-reply> if the request cannot be completed for any reason.\r\n\r\n\r\n   Example:\r\n\r\n     <rpc message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <kill-session>\r\n         <session-id>4</session-id>\r\n       </kill-session>\r\n     </rpc>\r\n\r\n     <rpc-reply message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <ok/>\r\n     </rpc-reply>\r\n\r\nNEW\r\n\r\n7.9.  <kill-session>\r\n\r\n   Description:  Force the termination of a NETCONF session.\r\n\r\n      When a NETCONF entity receives a <kill-session> request for an\r\n      open session, it will abort any operations currently in process,\r\n      release any locks and resources associated with the session, and\r\n      close any associated connections.\r\n\r\n      For details on what happens if a NETCONF server receives a \r\n      <kill-session> request while processing a confirmed commit,\r\n      please refer to Section 8.4.\r\n\r\n      Otherwise, the <kill-session> operation does not roll back\r\n      configuration or other device state modifications made by the\r\n      entity holding the lock.\r\n\r\n   Parameters:\r\n\r\n      session-id:  Session identifier of the NETCONF session to be\r\n         terminated.  If this value is equal to the current session ID,\r\n         an \"invalid-value\" error is returned.\r\n\r\n   Positive Response:  If the device was able to satisfy the request, an\r\n      <rpc-reply> is sent that includes an <ok> element.\r\n\r\n   Negative Response:  An <rpc-error> element is included in the\r\n      <rpc-reply> if the request cannot be completed for any reason.\r\n\r\n\r\n   Example:\r\n\r\n     <rpc message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <kill-session>\r\n         <session-id>4</session-id>\r\n       </kill-session>\r\n     </rpc>\r\n\r\n     <rpc-reply message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <ok/>\r\n     </rpc-reply>\r\n\r\n\r\nSection 8.4.1\r\n\r\nOLD:\r\n\r\n   If the device reboots for any reason before the confirm timeout\r\n   expires, the server MUST restore the configuration to its state\r\n   before the confirmed commit was issued.\r\n\r\nNEW:\r\n\r\n   If the device reboots for any reason before the confirm timeout\r\n   expires, the server MUST restore the configuration to its state\r\n   before the confirmed commit was issued, unless the confirmed commit \r\n   also included a <persist> element, in which case the server MAY\r\n   continue the confirmed commit procedure.\r\n", "correct_text": "", "notes": "This Errata modifies three different sections, Sections 7.8, 7.9 and 8.4.1. The changes in Section 7.8 and 7.9 defer the description of the behavior of confirmed commit to Section 8.4.1.", "submit_date": "2019-07-23", "submitter_name": "Mahesh Jethanandani", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "18", "doc-id": "RFC4684", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "This RFC was briefly posted with a misspelling in the title.\nIt was reposted with \"Internet Protcol\" corrected to \"Internet Protocol\".\n\n\n", "submit_date": "2006-11-28", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "19", "doc-id": "RFC4679", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.1", "orig_text": "      The slot identifier does not exceed 6 characters in length, and the port\n      identifier does not exceed 3 characters in length using a '\\' as a\n      delimiter.", "correct_text": "      The slot identifier does not exceed 6 characters in length, and the port\r\n      identifier does not exceed 3 characters in length using a '/' as a\r\n      delimiter.\r\n", "notes": "", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "20", "doc-id": "RFC4678", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "...will only be considered if \r\nthe Trust flag is set while the state of the load balancer/scheduler is set.", "correct_text": "... will only be considered if \r\nthe Trust flag has been set with a Set LB State message.\r\n", "notes": "also applies to section 7.2\r\n\r\nfrom pending", "submit_date": "2006-11-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "21", "doc-id": "RFC4677", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.1", "orig_text": " There are six kinds of RFCs:\r\n\r\n   o  Proposed standards\r\n   o  Draft standards\r\n   o  Internet standards (sometimes called \"full standards\")\r\n   o  Informational documents\r\n   o  Experimental protocols\r\n   o  Historic documents", "correct_text": "  There are seven kinds of RFCs:\r\n\r\n   o  Proposed standards\r\n   o  Draft standards\r\n   o  Internet standards (sometimes called \"full standards\")\r\n   o  Best Current Practice documents\r\n   o  Informational documents\r\n   o  Experimental protocols\r\n   o  Historic documents", "notes": "This enumeration omits the \"Best Current Practice\" documents.\r\nThe approval process for BCPs is quite different than Informational\r\nRFCs. Because BCPs are so important, including their role in publishing\r\nthe the IETF Standards Process itself, they shoudl be included in this\r\nlist.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2161", "doc-id": "RFC3398", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2.6.1", "orig_text": "504 Version Not Supported            127 Interworking (+)\r\n", "correct_text": "505 Version Not Supported            127 Interworking (+)\r\n", "notes": "504 appears twice with different text. From the context, it looks like the text in the second entry is correct, and the number is wrong.", "submit_date": "2010-04-13", "submitter_name": "Andrew Miller", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "22", "doc-id": "RFC4676", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "  option-code:  OPTION_GEOCONF_CIVIC (37)", "correct_text": "  option-code:  OPTION_GEOCONF_CIVIC (36)", "notes": "\n\n", "submit_date": "2006-11-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "23", "doc-id": "RFC4676", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1", "orig_text": "   In addition, if a network provides civic location information via\r\n   both DHCPv4 and DHCPv6, the information conveyed by two protocols\r\n   MUST be the same.", "correct_text": "   In addition, if a network provides civic location information via\r\n   both DHCPv4 and DHCPv6, the information conveyed by the two protocols\r\n   MUST be the same.\r\n", "notes": "", "submit_date": "2006-11-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2570", "doc-id": "RFC5810", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Figure 1", "orig_text": "\r\nFigure 1 does not have a line joining CE2 and FE2 with Fp..", "correct_text": "Figure 1 should have a line joining CE2 and FE2 with Fp..\r\n", "notes": "This is just a description of how to fix.\r\nI think this form can be improved so i can\r\nenter descriptive text instead of s/orig/new approach\n --VERIFIER NOTES-- \nAfter discussion with the WG, it was agreed that the figure deliberately reproduces a figure from RFC 3746 and should be left unchanged.", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "24", "doc-id": "RFC4675", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "       The String field is at least one octet in length and contains the\r\n       VLAN Name as defined in [IEEE-802.1Q] clause 12.10.2.1.3 (a).\r\n       [RFC3629] UTF-8 encoded 10646 characters are RECOMMENDED, but a\r\n       robust implementation SHOULD support the field as undistinguished\r\n       octets.", "correct_text": "       The String field is at least one octet in length and contains the\r\n       VLAN Name as defined in [IEEE-802.1Q] clause 12.10.2.1.3 (a).\r\n       [RFC3629] UTF-8 encoded ISO 10646 characters are RECOMMENDED, but a\r\n       robust implementation SHOULD support the field as undistinguished\r\n       octets.\r\n", "notes": "", "submit_date": "2006-09-19", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "25", "doc-id": "RFC4673", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "hundredths of a second", "correct_text": "centiseconds", "notes": "Why not use the common ISO-standard unit-multiple name, \"centiseconds\" (abbreviation: \"cs\"), instead of the long-winded \"hundredths of a second\" ?\r\n\r\nThis applies to the UNITS and the DESCRIPTION clause of\r\n  - radiusDynAuthServerCounterDiscontinuity  (RFC 4673, page 17),\r\n\r\nfrom pending\r\n\r\n--VERIFIER COMMENT--\r\nwell, yes, centiseconds can be used as well but both terms are the same.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stefaan De Cnodder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "26", "doc-id": "RFC4672", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "(for RFC 4672 and 4673)\r\n\r\nAs specified in RFC 3410 and Part 1 of STD 62, RFC 3411, and\r\nre-stated in the boilerplate Section 3, \"The Internet-Standard\r\nManagement Framework\", there's just one single\r\nManagement Information Base (MIB) comprised of various \"MIB modules\".\r\nThus, throughout the titles and the text bodies of the RFCs, the\r\nproper term, \"RADIUS ... MIB module\" should be used consistently,\r\ninstead of the rather sluggish \"RADIUS ... MIB\".\r\n", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stefaan De Cnodder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "27", "doc-id": "RFC4670", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the radiusAccClientRetransmissionsOBJECT-TYPE declaration says:", "orig_text": "         DESCRIPTION\r\n               \"The number of RADIUS Accounting-Request packets\r\n                retransmitted to this RADIUS accounting server.\r\n                Retransmissions include retries where the\r\n                Identifier and Acct-Delay have been updated, as\r\n                well as those in which they remain the same.\"", "correct_text": "         DESCRIPTION\r\n               \"The number of RADIUS Accounting-Request packets\r\n                retransmitted to this RADIUS accounting server.\r\n                Retransmissions include retries where the\r\n                Identifier and Acct-Delay have been updated, as\r\n                well as those in which they remained the same.\"\r\n", "notes": "for temporal consistency\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nthe difference is not clear   ", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "28", "doc-id": "RFC4669", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The DESCRIPTION clause of the radiusAuthServResetTime OBJECT-TYPE declaration says:", "orig_text": "                \"If the server has a persistent state (e.g., a process)\r\n                 and supports a 'reset' operation (e.g., can be told to\r\n                 re-read configuration files), this value will be the\r\n                 time elapsed (in hundredths of a second) since the\r\n                 server was 'reset.'", "correct_text": "                \"If the server has a persistent state (e.g., a process)\r\n                 and supports a 'reset' operation (e.g., can be told to\r\n                 re-read configuration files), this value will be the\r\n|                time elapsed (in centiseconds) since the\r\n|                server was 'reset'. ", "notes": "The original description does not conform to the 'rational quoting' style required by the RFC authoring guidelines.\r\n\r\nAlso, why not use the common ISO-standard unit-multiple name, \"centiseconds\" (abbreviation: \"cs\"), instead of the long-winded \"hundredths of a second\" ?\r\n\r\nThis also applies to the DESCRIPTION clauses of\r\n  - radiusAuthServUpTime  (RFC 4669, top of page 7),\r\n\r\nfrom pending", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "29", "doc-id": "RFC4668", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "[[Around the page break from page 8 to page 9, and once more,\r\nnear the top of page 14]]\r\n\r\n   --\r\n   -- AccessRequests + PendingRequests + ClientTimeouts =\r\n   -- Successfully received\r\n   --", "correct_text": "   --\r\n   -- AccessRequests - PendingRequests - ClientTimeouts =\r\n   -- Successfully received\r\n   --", "notes": "I strongly suspect that this is wrong (-- and it does not either\r\nmatch the presentation style of the formulae above in the text).\r\nConceptually, it makes no sense to count 'PendingRequests' and\r\n'ClientTimeouts' as 'Successfully received', and the subsequent\r\nDESCRIPTION clauses strongly support my suspicion that both\r\ninstances of this formula in fact be as above.\r\n\r\nfrom pending", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2397", "doc-id": "RFC4985", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "Within Section 2, the 3rd-to-last paragraph on page 3 says:\r\n\r\n   Even though this name form is based on the service resource record\r\n   (SRV RR) definition in RFC 2782 [N3] and may be used to enhance\r\n   subsequent authentication of DNS-based service discovery, this\r\n   standard does not define any new conditions or requirements regarding\r\n|  use of SRV RR for service discovery or where and when such use is\r\n   appropriate.\r\n              ^^\r\n", "correct_text": "It should say:\r\n\r\n   Even though this name form is based on the service resource record\r\n   (SRV RR) definition in RFC 2782 [N3] and may be used to enhance\r\n   subsequent authentication of DNS-based service discovery, this\r\n   standard does not define any new conditions or requirements regarding\r\n|  the use of SRV RRs for service discovery or where and when such use\r\n   ^^^^           ^^^\r\n   is appropriate.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2399", "doc-id": "RFC4985", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "The last paragraph of Section 1, on page 2 of RFC 4985, says:\r\n\r\n   v\r\n|  Current dNSName GeneralName Subject Alternative name form only\r\n   provides for DNS host names to be expressed in \"preferred name\r\n   syntax\", as specified by RFC 1034 [N4].  [...]\r\n\r\n", "correct_text": "It should say:\r\n\r\n   vvvvv\r\n|  The current dNSName GeneralName Subject Alternative name form only\r\n   provides for DNS host names to be expressed in \"preferred name\r\n   syntax\", as specified by RFC 1034 [N4].  [...]", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "93", "doc-id": "RFC4430", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "[editorial nits moved to errata ID 1770]\r\n\r\n(7)  Section 4.2.7 (page 22/23)\r\n\r\n(7a) Item (1b) above applies, and plaintext vs. ciphertext is unclear.\r\n\r\nThe initial text and Figure 13 unfortunately do not properly make\r\nthe distinction between unencrypted (plaintext) and encrypted\r\n(ciphertext) values and fields.\r\nThe presentation on page 22 needs clarification, according to the\r\nnote given on page 23:\r\n\r\n   The coverage of the encrypted data begins at InnerNextPload so that\r\n   the first payload's type is kept confidential.  Thus, the number of\r\n   encrypted octets is PayloadLength - 4.\r\n\r\nOn page 22, the text and Figure 13,\r\n\r\n|  The KINK_ENCRYPT payload encapsulates other KINK payloads and is\r\n|  encrypted using the session key and the algorithm specified by its\r\n   etype.  This payload MUST be the final one in the outer payload chain\r\n|  of the message.  The KINK_ENCRYPT payload MUST be encrypted before\r\n   the final KINK checksum is applied.\r\n\r\n     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n|   +---------------+---------------+---------------+---------------+\r\n|   | Next Payload  |   RESERVED    |         Payload Length        |\r\n    +---------------+---------------+---------------+---------------+\r\n    | InnerNextPload|                   RESERVED2                   |\r\n    +---------------+---------------+---------------+---------------+\r\n    |                         Payload (variable)                    |\r\n    +---------------+---------------+---------------+---------------+\r\n\r\n|                    Figure 13:  KINK_ENCRYPT Payload\r\n\r\nshould say:\r\n\r\n|  The KINK_ENCRYPT payload encapsulates other KINK payloads and its\r\n|  value is encrypted using the session key and the algorithm specified\r\n   by its etype.  This payload MUST be the final one in the outer\r\n|  payload chain of the message.  The plaintext KINK_ENCRYPT payload\r\n|  value MUST be encrypted before the final KINK checksum is applied.\r\n\r\n     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +---------------+---------------+---------------+---------------+\r\n    | Next Payload  |   RESERVED    |         Payload Length        |\r\n    +---------------+---------------+---------------+---------------+\r\n|   |                                                               |\r\n|   ~       encrypted KINK_ENCRYPT Payload value (variable)         ~\r\n|   |                                                               |\r\n    +---------------+---------------+---------------+---------------+\r\n\r\n|                    Figure 13a:  KINK_ENCRYPT Payload\r\n\r\n(I have chosen the more descriptive filed name,\r\n'encrypted KINK_ENCRYPT Payload value' over the more fuzzy term,\r\n'encryption payload' used in the text on page 23.)\r\n\r\nAfter the first bullet on page 23,\r\n\r\n     o    Next Payload, RESERVED, Payload Length -- Defined in the\r\n          beginning of this section.  This payload is the last one in a\r\n          message, and accordingly, the Next Payload field must be\r\n          KINK_DONE (0).\r\n\r\nThe following text and figure should be inserted:\r\n\r\n     o    encrypted KINK_ENCRYPT Payload value -- This is the\r\n          encrypted form of the plaintext form of the KINK_ENCRYPT\r\n          Payload value in the following format:\r\n\r\n     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +---------------+---------------+---------------+---------------+\r\n    | InnerNextPload|                   RESERVED2                   |\r\n    +---------------+---------------+---------------+---------------+\r\n    |                   KINK Payloads (variable)                    |\r\n    +---------------+---------------+---------------+---------------+\r\n\r\n|          Figure 13b:  unencrypted KINK_ENCRYPT Payload value\r\n\r\n   Fields:\r\n\r\n\r\n(7b)  typo, and (7a) continued\r\n\r\nThe final paragraph of Section 4.2.7, on page 23, says:\r\n\r\n                     vvvvvvvvvvvvvvvvvv\r\n|  The format of the encryption payload follows the normal Kerberos\r\n   semantics.  Its content is the output of an encrypt function defined\r\n   in the Encryption Algorithm Profile section of [KCRYPTO].  Parameters\r\n   such as encrypt function itself, specific-key, and initial state are\r\n   defined with the etype.  [...]\r\n   itself and there may be some garbage data at the end of the decrypted\r\n   plaintext.  A KINK implementation MUST be prepared to ignore such\r\n   padding after the last sub-payload inside the KINK_ENCRYPT payload.\r\n   [...]\r\n\r\nIt should say:\r\n\r\n                     vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  The format of the encrypted KINK_ENCRYPT Payload value follows the\r\n   normal Kerberos semantics.  Its content is the output of an encrypt\r\n   function defined in the Encryption Algorithm Profile section of\r\n|  [KCRYPTO].  Parameters such as the encrypt function itself, specific-\r\n   key, and initial state are defined with the etype.  [...]\r\n", "correct_text": "", "notes": "\r\nItems (1)..(7) have been revised on the author's comments received.\r\nIn particular, item (7) has been revised substantially to achieve\r\na selfconsistent presentation in accordance with the author's intent.\r\nI propose to incorporate the above items (1)..(7) and (9) directly\r\ninto an RFC Errata Note.\r\nItem (8), and perhaps item (7) as well, still needs judgement from\r\nthe RFC authors.\r\n\r\n------------------------------------------------\r\nERRATA RESPONSE:\r\nFrom: Unknown Name (though from this email: Shouichi.Sakane@jp.yokogawa.com)\r\nCould someone verify 1a, 4b and 9b ?\r\n\r\nfrom pending", "submit_date": "2006-07-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "30", "doc-id": "RFC4664", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "                  Attachment        PSN           Attachment\r\n                   Circuits        tunnel          Circuits\r\n                                     +\r\n           +-----+                 pseudo                    +-----+\r\n           |     |                  wire                     |     |\r\n           | CE1 |--+                                     +--| CE2 |\r\n           |     |  |    +-----+   +-----+     +-----+    |  |     |\r\n           +-----+  +----|---- |   |  P  |     | ----+----+  +-----+\r\n                         |VPWS\\---|-----|-----|/VPWS|\r\n                         | PE1 |===|=====|=====| PE2 |\r\n                         |    /|---|-----|-----|\\\\    |\r\n           +-----+  +----|---- |   |     |     | ----|----+  +-----+\r\n           |     |  |    +-----+   +-----+     +-----+    |  |     |\r\n           | CE3 |--+                                     +--| CE4 |\r\n           |     |                                           |     |\r\n           +-----+                                           +-----+", "correct_text": "                  Attachment        PSN           Attachment\r\n                   Circuits        tunnel          Circuits\r\n                                     +\r\n           +-----+                 pseudo                    +-----+\r\n           |     |                  wire                     |     |\r\n           | CE1 |--+                                     +--| CE2 |\r\n           |     |  |    +-----+   +-----+     +-----+    |  |     |\r\n           +-----+  +----|---- |   |  P  |     | ----+----+  +-----+\r\n                         |VPWS\\|---|-----|-----|/VPWS|\r\n                         | PE1 |===|=====|=====| PE2 |\r\n                         |    /|---|-----|-----|\\    |\r\n           +-----+  +----|---- |   |     |     | ----|----+  +-----+\r\n           |     |  |    +-----+   +-----+     +-----+    |  |     |\r\n           | CE3 |--+                                     +--| CE4 |\r\n           |     |                                           |     |\r\n           +-----+                                           +-----+\r\n", "notes": "from pending", "submit_date": "2006-11-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "31", "doc-id": "RFC4661", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.2", "orig_text": "   [17]  Roach, A. B., Campbell, B., and J. Rosenberg, \"A Session\r\n         Initiation Protocol (SIP) Event Notification Extension for\r\n         Resource Lists\", RFC 4663, September 2006.", "correct_text": "   [17]  Roach, A. B., Campbell, B., and J. Rosenberg, \"A Session\r\n         Initiation Protocol (SIP) Event Notification Extension for\r\n         Resource Lists\", RFC 4662, August 2006.\r\n", "notes": "", "submit_date": "2006-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "32", "doc-id": "RFC4660", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.1", "orig_text": "   [4]  Roach, A.B., Campbell, B., and J. Rosenberg, \"A Session\r\n        Initiation Protocol (SIP) Event Notification Extension for\r\n        Resource Lists\", RFC 4663, September 2006.", "correct_text": "   [4]  Roach, A.B., Campbell, B., and J. Rosenberg, \"A Session\r\n        Initiation Protocol (SIP) Event Notification Extension for\r\n        Resource Lists\", RFC 4662, August 2006.", "notes": "", "submit_date": "2006-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "33", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1) word omission\r\n\r\nIn Section 1, the first text line on page 2 says:\r\n\r\n   There is work done in IETF to develop key management schemes.  [..]", "correct_text": "\r\nIt should say:\r\n\r\n|  There is work done in the IETF to develop key management schemes.\r\n   [..]", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2388", "doc-id": "RFC2132", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "A DHCP server of \"server\"is an Internet host that returns configuration parameters to DHCP clients.\r\n", "correct_text": "A DHCP server or \"server\" is an Internet host that returns configuration parameters to DHCP clients.", "notes": "", "submit_date": "2010-07-21", "submitter_name": "Muhammad Yousaf", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2396", "doc-id": "RFC4985", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "The second paragraph of Section 5 (on page 6 of RFC 4985) says:\r\n\r\n   When X.509 certificates enhanced with the name form specified in this\r\n   standard is used to enhance authentication of service discovery based\r\n   on an SRV RR query to a DNS server, all security considerations of\r\n   RFC 2782 applies.\r\n\r\n\r\n", "correct_text": "   When X.509 certificates enhanced with the name form specified in this\r\n|  standard are used to enhance authentication of service discovery\r\n   based on an SRV RR query to a DNS server, all security considerations\r\n   of RFC 2782 applies.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2424", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "On mid-page 34, there is the code:\r\n\r\n/*\r\n * add \"length\" to the length\r\n */\r\nstatic uint32_t addTemp;\r\n#define SHA224_256AddLength(context, length)               \\\r\n  (addTemp = (context)->Length_Low, (context)->Corrupted = \\\r\n    (((context)->Length_Low += (length)) < addTemp) &&     \\\r\n    (++(context)->Length_High == 0) ? 1 : 0)\r\n\r\nIt should say (modifying the last line):\r\n\r\n/*\r\n * add \"length\" to the length\r\n */\r\nstatic uint32_t addTemp;\r\n#define SHA224_256AddLength(context, length)               \\\r\n  (addTemp = (context)->Length_Low, (context)->Corrupted = \\\r\n    (((context)->Length_Low += (length)) < addTemp) &&     \\\r\n    (++(context)->Length_High == 0) ? shaInputTooLong : shaSuccess )\r\n\r\nRationale:  Same as for item (7) above.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2427", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "Similar to item (9) and (16) above, the Description of SHA256Result\r\ncontains improper wording and unpleasent formatting. Additionally,\r\ncounting 32 elements as ranging from the \"0th\" up to the \"32nd\" is\r\nunpleasant and wrong -- it would indicate 33 elements (octets) !\r\n\r\nOn page 39, the RFC says:\r\n\r\n * Description:\r\n *   This function will return the 256-bit message\r\n *   digest into the Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the 32nd element.\r\n\r\nFor correctness and consistency, and for improved readability,\r\nit should say:\r\n\r\n * Description:\r\n *   This function will return the 256-bit message digest\r\n *   into the Message_Digest array provided by the caller.\r\n *   NOTE:\r\n *    The first octet of the hash is stored in the element with index 0,\r\n *    the last octet of the hash in the element with index 31.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "94", "doc-id": "RFC4428", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  [missing articles]\r\n\r\nIn Section 4.1, the third paragraph on page 7 says:\r\n\r\n   In pre-OTN networks, a failure may be masked by intermediate O-E-O\r\n   based Optical Line System (OLS), preventing a Photonic Cross-Connect\r\n   (PXC) from detecting upstream failures.  In such cases, failure\r\n   detection may be assisted by an out-of-band communication channel,\r\n   and failure condition may be reported to the PXC control plane.  This\r\n   can be provided by using [RFC4209] extensions that deliver IP\r\n   message-based communication between the PXC and the OLS control\r\n   plane.  [...]\r\n\r\nIt should say:\r\n\r\n|  In pre-OTN networks, a failure may be masked by an intermediate O-E-O\r\n   based Optical Line System (OLS), preventing a Photonic Cross-Connect\r\n   (PXC) from detecting upstream failures.  In such cases, failure\r\n   detection may be assisted by an out-of-band communication channel,\r\n|  and a failure condition may be reported to the PXC control plane.\r\n   This can be provided by using [RFC4209] extensions that deliver IP\r\n   message-based communication between the PXC and the OLS control\r\n   plane.  [...]\r\n\r\n\r\n(2)  [unexpected break]\r\n\r\nAgain on page 7, later on in the same paragraph as mentioned above,\r\nthe RFC says:\r\n\r\n           [...].  If the intermediate OLS supports electrical (digital)\r\n   mechanisms, using the LMP communication channel, these failure\r\n|  conditions are reported to\r\n|\r\n   the PXC and subsequent recovery actions are performed as described in\r\n   Section 5.  As such, from the control plane viewpoint, this mechanism\r\n   turns the OLS-PXC-composed system into a single logical entity, thus\r\n   having the same failure management mechanisms as any other O-E-O\r\n   capable device.\r\n\r\nIt should say:\r\n\r\n           [...].  If the intermediate OLS supports electrical (digital)\r\n   mechanisms, using the LMP communication channel, these failure\r\n|  conditions are reported to the PXC and subsequent recovery actions\r\n   are performed as described in Section 5.  As such, from the control\r\n   plane viewpoint, this mechanism turns the OLS-PXC-composed system\r\n   into a single logical entity, thus having the same failure management\r\n   mechanisms as any other O-E-O capable device.\r\n\r\n\r\n(3)  [incomplete wording]\r\n\r\nAt the end of Section 4.1, in the last bullet, on page 8, the RFC says:\r\n\r\n     o with out-of-band communication between entities: entities are\r\n       physically separated, but an out-of-band communication channel is\r\n       provided between them (e.g., using [RFCF4204]).\r\n\r\nIt should say (according to the Verifier):\r\n\r\n     o with out-of-band communication between entities: entities are\r\n       physically separated, but an out-of-band communication channel is\r\n|      provided between them (e.g., using LMP [RFC4204]).\r\n\r\n\r\n(4)  [unexpected blank line]\r\n\r\nIn Section 5.5.1, the diagram for option '2. Overbooking', near the\r\nbottom of page 22, suffers from an unexpected blank line.\r\n\r\nThe RFC says:\r\n\r\n                    +----- Dedicated (for instance: 1+1, 1:1, etc.)\r\n                    |\r\n                    |\r\n|\r\n                    +----- Shared (for instance: 1:N, M:N, etc.)\r\n                    |\r\n   Level of         |\r\n   Overbooking -----+----- Unprotected (for instance: 0:1, 0:N)\r\n\r\nIt should say:\r\n\r\n                    +----- Dedicated (for instance: 1+1, 1:1, etc.)\r\n                    |\r\n                    |\r\n                    +----- Shared (for instance: 1:N, M:N, etc.)\r\n                    |\r\n   Level of         |\r\n   Overbooking -----+----- Unprotected (for instance: 0:1, 0:N)\r\n\r\n\r\n(5)  [typo: missing underscore]\r\n\r\nIn Section 7.2, the second-to-last paragraph on page 29 says:\r\n\r\n   In SONET/SDH environments, one typically considers the VT_SPE/LOVC\r\n   and STS SPE/HOVC as independent layers (for example, VT_SPE/LOVC LSP\r\n   uses the underlying STS_SPE/HOVC LSPs as links).  [...]\r\n\r\nIt should say:\r\n\r\n   In SONET/SDH environments, one typically considers the VT_SPE/LOVC\r\n|  and STS_SPE/HOVC as independent layers (for example, VT_SPE/LOVC LSP\r\n   uses the underlying STS_SPE/HOVC LSPs as links).  [...]\r\n\r\n\r\n(6)  [singular-->plural]\r\n\r\nIn Section 8, the second-to-last paragraph on page 33 says:\r\n\r\n                              [...].  For instance, it is obvious that\r\n   providing a 1+1 LSP protection minimizes the LSP downtime (in case of\r\n|  failure) while being non-scalable and consuming recovery resource\r\n   without enabling any extra-traffic.\r\n                                                                   ^^\r\nIt should say:\r\n\r\n                              [...].  For instance, it is obvious that\r\n   providing a 1+1 LSP protection minimizes the LSP downtime (in case of\r\n|  failure) while being non-scalable and consuming recovery resources\r\n   without enabling any extra-traffic.\r\n\r\n\r\n(7)  [singular-->plural]\r\n\r\nThe third paragraph of Section 8.2, on page 34, says:\r\n\r\n                          [...].  Dynamic restoration enables on-demand\r\n   path computation based on the information received through failure\r\n   notification message, and as such, it is more robust with respect to\r\n   the failure scenario scope.\r\n\r\nIt should say (according to the Verifier):\r\n\r\n                          [...].  Dynamic restoration enables on-demand\r\n   path computation based on the information received through failure\r\n|  notification message(s), and as such, it is more robust with respect to\r\n   the failure scenario scope.\r\n\r\n\r\n(8)  [singular-->plural]\r\n\r\nAt the bottom of page 35, Section 8.3 of RFC 4428 says:\r\n\r\n                          [...].  Recovery schemes, in particular\r\n   restoration, with pre-signaled resource reservation (with or without\r\n   pre-selection) should be capable of reserving an adequate amount of\r\n   resource to ensure recovery from any specific set of failure events,\r\n   such as any single SRLG failure, any two SRLG failures, etc.\r\n\r\nIt should say:\r\n\r\n                          [...].  Recovery schemes, in particular\r\n   restoration, with pre-signaled resource reservation (with or without\r\n   pre-selection) should be capable of reserving an adequate amount of\r\n|  resources to ensure recovery from any specific set of failure events,\r\n   such as any single SRLG failure, any two SRLG failures, etc.\r\n\r\n\r\n(9)  [punctuation: adjustment for 'logical quoting']\r\n\r\nIn Section 12.2, some Informative References, as found in the RFC,\r\ndo not conform to the RFC style guidelines regarding 'logical quoting'.\r\n\r\nE.g., the RFC says, at the bottom of page 44:\r\n\r\n   [BOUILLET]   E. Bouillet, et al., \"Stochastic Approaches to Compute\r\n                Shared Meshed Restored Lightpaths in Optical Network\r\n|               Architectures,\" IEEE Infocom 2002, New York City, June\r\n                2002.\r\n                             ^^\r\nIt should say:\r\n\r\n   [BOUILLET]   E. Bouillet, et al., \"Stochastic Approaches to Compute\r\n                Shared Meshed Restored Lightpaths in Optical Network\r\n|               Architectures\", IEEE Infocom 2002, New York City, June\r\n                2002.\r\n\r\nSimilar changes should be applied to the following entries on page 45:\r\n\r\n   [DEMEESTER]\r\n   [GLI]\r\n   [KODIALAM1]\r\n   [KODIALAM2]\r\n   [MANCHESTER]\r\n   [T1.105]\r\n   [WANG]\r\n   [G.707]\r\n   [G.709]\r\n\r\nand on page 46:\r\n\r\n   [G.783]\r\n   [G.798]\r\n   [G.841]\r\n   [G.842]\r\n   [G.874]", "correct_text": "", "notes": "from pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dimitri Papadimitriou", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "95", "doc-id": "RFC4427", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   Note that the restoration resources must be pre-computed, must\r\n   be signaled, and may be selected a priori, but may not cross-\r\n   connected.  Thus, the restoration LSP is not able to carry any\r\n   extra-traffic.", "correct_text": "   Note that the restoration resources must be pre-computed, must\r\n   be signaled, and may be selected a priori, but may not be cross-\r\n   connected.  Thus, the restoration LSP is not able to carry any\r\n   extra-traffic.", "notes": "missing verb\r\n\r\nfrom pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dimitri Papadimitriou", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2571", "doc-id": "RFC5810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1.6", "orig_text": "multiple errors in a single leaf PATH-DATA/FULLDATA-TLB, the FE can", "correct_text": "multiple errors in a single leaf PATH-DATA/FULLDATA-TLV, the FE can", "notes": "", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2404", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.3", "orig_text": "   Oracle AuthO()\r\n   --------------\r\n      A = ALG(K,C)\r\n      C = C + 1\r\n      Return O to B\r\n\r\n   Oracle VerO(A)\r\n   --------------\r\n      i = C\r\n      While (i <= C + s - 1 and Win == FALSE) do\r\n         If A == ALG(K,i) then Win = TRUE; C = i + 1\r\n         Else i = i + 1\r\n      Return Win to B", "correct_text": "   Oracle AuthO()\r\n   --------------\r\n      A = ALG(K,C)\r\n      C = C + 1\r\n|     Return A to B\r\n\r\n   Oracle VerO(A)\r\n   --------------\r\n|     i = C'\r\n|     While (i <= C' + s - 1 and Win == FALSE) do\r\n|        If A == ALG(K,i) then Win = TRUE; C' = i + 1\r\n         Else i = i + 1\r\n      Return Win to B", "notes": "another typo, and continuation of Errata ID 2402.\r\n\r\nStill in Appendix A.3, the text on the upper half of page 19 contains\r\na wrong (undefined) variable name 'O' which should be 'A' instead,\r\nand it should be adapted according to [Errata ID 2402].", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2398", "doc-id": "RFC2453", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "A proof is given in [2] that this algorithm ....", "correct_text": "A proof is given in [5] that this algorithm....", "notes": "On page 8\r\nCorrect the reference.", "submit_date": "2010-07-29", "submitter_name": "Zdenek", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2406", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A.4.3 says:", "orig_text": "   Proposition 2 ------------- Suppose m = 10^Digit < 2^31, and let\r\n   (q,r) = IntDiv(2^31,m).  Let B be any adversary attacking HOTP-IDEAL\r\n   using v verification oracle queries and a <= 2^c - s authenticator\r\n   oracle queries.  Then [...]\r\n", "correct_text": "  Proposition 2\r\n  -------------\r\n\r\n  Suppose m = 10^Digit < 2^31, and let (q,r) = IntDiv(2^31,m).  Let B\r\n  be any adversary attacking HOTP-IDEAL using v verification oracle\r\n  queries and a <= 2^c - s authenticator oracle queries.  Then  [...]", "notes": "", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2408", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "C", "orig_text": "       // These are used to calculate the check-sum digits.\r\n|      //                                0  1  2  3  4  5  6  7  8  9\r\n       private static final int[] doubleDigits =\r\n                       { 0, 2, 4, 6, 8, 1, 3, 5, 7, 9 };", "correct_text": "       // These are used to calculate the check-sum digits.\r\n|      //                0  1  2  3  4  5  6  7  8  9\r\n       private static final int[] doubleDigits =\r\n                       { 0, 2, 4, 6, 8, 1, 3, 5, 7, 9 };", "notes": "formatting.\r\n\r\nIn Appendix C, the source text in the upper half of page 28\r\ncontains an improperly formatted comment -- obviously intended\r\nto illustrate the subsequent declaration, the comment must be\r\naligned with that declaration.", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2415", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.1", "orig_text": "The initial Description in the file, on page 18 of the RFC, says:\r\n\r\n                                             vvvvvvvvvvvvvvvvvv\r\n *  Description:\r\n *      This file implements the Secure Hash Signature Standard\r\n *      algorithms as defined in the National Institute of Standards\r\n *      and Technology Federal Information Processing Standards\r\n *      Publication (FIPS PUB) 180-1 published on April 17, 1995, 180-2\r\n *      published on August 1, 2002, and the FIPS PUB 180-2 Change\r\n *      Notice published on February 28, 2004.\r\n", "correct_text": "It should say:\r\n\r\n *  Description:\r\n|*      This file implements the Secure Hash Algorithms\r\n *      as defined in the National Institute of Standards\r\n *      and Technology Federal Information Processing Standards\r\n *      Publication (FIPS PUB) 180-1 published on April 17, 1995, 180-2\r\n *      published on August 1, 2002, and the FIPS PUB 180-2 Change\r\n *      Notice published on February 28, 2004.", "notes": "Avoiding the term \"Signature\" in accordance with the Standards\r\nmentioned.  The NIST consistently uses the acronyms \"SHA\" for\r\n\"Secure Hash Algorithm\" and \"SHS\" for \"Secure Hash Standard\"\r\nand precisely distinguished between these two terms.", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2426", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "Similar to item (9) above, the Description comment of SHA224Result\r\ncontains improper wording and unpleasent formatting. Additionally,\r\ncounting 28 elements as ranging from the \"0th\" up to the \"28th\" is\r\nunpleasant and wrong -- it would indicate 29 elements (octets) !\r\n\r\nOn mid-page 36, the RFC says:\r\n\r\n * Description:\r\n *   This function will return the 224-bit message\r\n *   digest into the Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the 28th element.\r\n\r\nFor correctness and consistency, and for improved readability,\r\nit should say:\r\n\r\n * Description:\r\n *   This function will return the 224-bit message digest\r\n *   into the Message_Digest array provided by the caller.\r\n *   NOTE:\r\n *    The first octet of the hash is stored in the element with index 0,\r\n *    the last octet of the hash in the element with index 27.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2455", "doc-id": "RFC4322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.3", "orig_text": "The first senrtence of Section 9.3, on page 34, says:\r\n\r\n   Tunnels sometimes go down because the remote end crashes,\r\n   disconnects, or has a network link break.  [...]\r\n\r\nThe 'line break' might occor at any place within the network,\r\nnot just at the 'remote end'.\r\nTherefore, the text should better say:\r\n\r\n   Tunnels sometimes go down because the remote end crashes,\r\n|  disconnects, or a network link break occurs.  [...]", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "34", "doc-id": "RFC4646", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B says:", "orig_text": " sl-rozaj (Resian dialect of Slovenian", "correct_text": " sl-rozaj (Resian dialect of Slovenian)", "notes": "Missing \")\"", "submit_date": "2006-09-29", "submitter_name": "", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5156", "doc-id": "RFC2819", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "device has to deal with more than own management station", "correct_text": "device has to deal with more than one management station", "notes": "Seems to be carried forward from RFC 1757", "submit_date": "2017-10-16", "submitter_name": "Joel Nelson", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "429", "doc-id": "RFC2486", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "    nai         = username / ( username \"@\" realm )\n    username    = dot-string\n    realm       = realm \".\" label", "correct_text": "    realm       = [realm \".\"] label\n", "notes": "", "submit_date": "2003-02-12", "submitter_name": "Jonathan Rosenberg", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "430", "doc-id": "RFC2464", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The URL in this reference is incorrect:\n", "orig_text": "   [EUI64] \"Guidelines For 64-bit Global Identifier (EUI-64)\",\n           http://standards.ieee.org/db/oui/tutorials/EUI64.html", "correct_text": "   [EUI64] \"Guidelines For 64-bit Global Identifier (EUI-64)\",\n           http://standards.ieee.org/regauth/oui/tutorials/EUI64.html\n", "notes": "", "submit_date": "2004-04-29", "submitter_name": "Peter Koch", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "35", "doc-id": "RFC4641", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1.1", "orig_text": "   Pre-publish key rollover involves four stages as follows:\r\n\r\n      ----------------------------------------------------------------\r\n      initial         new DNSKEY       new RRSIGs      DNSKEY removal\r\n      ----------------------------------------------------------------\r\n      SOA0            SOA1             SOA2            SOA3\r\n      RRSIG10(SOA0)   RRSIG10(SOA1)    RRSIG11(SOA2)   RRSIG11(SOA3)\r\n\r\n      DNSKEY1         DNSKEY1          DNSKEY1         DNSKEY1\r\n      DNSKEY10        DNSKEY10         DNSKEY10        DNSKEY11\r\n      DNSKEY11         DNSKEY11\r\n      RRSIG1 (DNSKEY) RRSIG1 (DNSKEY)  RRSIG1(DNSKEY)  RRSIG1 (DNSKEY)\r\n      RRSIG10(DNSKEY) RRSIG10(DNSKEY)  RRSIG11(DNSKEY) RRSIG11(DNSKEY)\r\n      ----------------------------------------------------------------", "correct_text": "   Pre-publish key rollover involves four stages as follows:\r\n\r\n      ----------------------------------------------------------------\r\n      initial         new DNSKEY       new RRSIGs      DNSKEY removal\r\n      ----------------------------------------------------------------\r\n      SOA0            SOA1             SOA2            SOA3\r\n      RRSIG10(SOA0)   RRSIG10(SOA1)    RRSIG11(SOA2)   RRSIG11(SOA3)\r\n\r\n      DNSKEY1         DNSKEY1          DNSKEY1         DNSKEY1\r\n      DNSKEY10        DNSKEY10         DNSKEY10        DNSKEY11\r\n|                     DNSKEY11         DNSKEY11\r\n      RRSIG1 (DNSKEY) RRSIG1 (DNSKEY)  RRSIG1(DNSKEY)  RRSIG1 (DNSKEY)\r\n      RRSIG10(DNSKEY) RRSIG10(DNSKEY)  RRSIG11(DNSKEY) RRSIG11(DNSKEY)\r\n      ----------------------------------------------------------------\r\n\r\n                         Pre-Publish Key Rollover", "notes": "The mis-alignment of the indicated line breaks the intended\r\npresentation of the procedure; cf. subsequent RFC text.\r\n\r\n\r\nfrom pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Olaf Kolkman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "36", "doc-id": "RFC4640", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "   [RFC3776]     Galvin, J., \"IAB and IESG Selection, Confirmation, and\r\n                 Recall Process: Operation of the Nominating and Recall\r\n                 Committees\", BCP 10, RFC 3777, June 2004.", "correct_text": "   [RFC3776]     Arkko, J., Devarapalli, V., and F. Dupont, \"Using IPsec to \r\n                 Protect Mobile IPv6 Signaling Between Mobile Nodes and Home \r\n                 Agents\", RFC 3776, June 2004.", "notes": "In Section 12, near the bottom of page 20, a strange accident must\r\nhave hit the Ref. tagged [RFC3776]. This indeed should be a citation of the Mobile IP related RFC 3776, but it is a citiation of the unrelated RFC 3777.\r\n", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "37", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "The Description of SHA1PadMessage, on page 30, says:\r\n\r\n * Description:\r\n *   According to the standard, the message must be padded to an\r\n *   even 512 bits. The first padding bit must be a '1'. The last\r\n *   64 bits represent the length of the original message. All bits\r\n *   in between should be 0. This helper function will pad the\r\n *   message according to those rules by filling the Message_Block\r\n *   array accordingly. When it returns, it can be assumed that the\r\n *   message digest has been computed.\r\n\r\nFor clarity, it should say:\r\n\r\n * Description:\r\n|*   According to the standard, the message must be padded to the next\r\n|*   proper multiple of 512 bits. The first padding bit must be a '1'.\r\n *   The last 64 bits represent the length of the original message.\r\n *   All bits in between should be 0. This helper function will pad\r\n *   the message according to those rules by filling the Message_Block\r\n *   array accordingly. When it returns, it can be assumed that the\r\n *   message digest has been computed.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2421", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "The Description of SHA1ProcessMessageBlock, on page 31, says:\r\n\r\n * Parameters:\r\n *   None.\r\n\r\nThis is not true, as can be seen subsequently in the source code.\r\nThe RFC should say:\r\n\r\n * Parameters:\r\n *   context: [in/out]\r\n *     The SHA context to update", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2422", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "The initial Description in this file, on page 33, says:\r\n\r\n * Description:\r\n *   This file implements the Secure Hash Signature Standard\r\n *   algorithms as defined in the National Institute of Standards\r\n *   and Technology Federal Information Processing Standards\r\n *   Publication (FIPS PUB) 180-1 published on April 17, 1995, 180-2\r\n *   published on August 1, 2002, and the FIPS PUB 180-2 Change\r\n *   Notice published on February 28, 2004.\r\n\r\nIt should say:\r\n\r\n * Description:\r\n *   This file implements the Secure Hash Algorithms SHA-224 and\r\n *   SHA-256, as defined in the National Institute of Standards\r\n *   and Technology Federal Information Processing Standards\r\n *   Publication (FIPS PUB) 180-2 published on August 1, 2002, and\r\n *   the FIPS PUB 180-2 Change Notice published on February 28, 2004.\r\n\r\nRationale:\r\n\r\nFIPS-PUB 180-1 only specified SHA-1, neither SHA-224 nor SHA-256.\r\nFIPS-PUB 180-2 has introduced SHA-256 (and SHA-384 and SHA-512 as\r\nwell), and SHA-224 has been introduced by the \"Change Notice 1\".\r\nThus, citation of FIPS PUB 180-1 is void and inappropriate in the\r\ncontext of SHA-224 and SHA-256.\r\nAvoiding the term \"Signature\" also conforms to the above Standards\r\n-- cf. item (4) and (5) above.\r\nRestricting the text to the scope of the file -- cf. item (5) above.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2423", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "The comment text, near the bottom of page 33, says:\r\n\r\n * Caveats:\r\n *   SHA-224 and SHA-256 are designed to work with messages less\r\n *   than 2^64 bits long. This implementation uses SHA224/256Input()\r\n *   to hash the bits that are a multiple of the size of an 8-bit\r\n *   character, and then uses SHA224/256FinalBits() to hash the\r\n *   final few bits of the input.\r\n\r\nIt should better say -- cf. item (6) above:\r\n\r\n * Caveats:\r\n *   SHA-224 and SHA-256 are designed to work with messages less\r\n *   than 2^64 bits long. This implementation uses SHA224/256Input()\r\n *   to hash the bits that are a multiple of the size of an 8-bit\r\n|*   character, and then optionally uses SHA224/256FinalBits()\r\n *   to hash the final few bits of the input.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2241", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "12.2.", "orig_text": "   The fingerprint of a V3 key is formed by hashing the body (but not\r\n   the two-octet length) of the MPIs that form the key material (public\r\n   modulus n, followed by exponent e) with MD5.", "correct_text": "   The fingerprint of a V3 key is formed by hashing the concatenation\r\n   of the bodies of the MPIs (MPI without two-octet length) that form\r\n   the key material (public modulus n, followed by exponent e) with MD5.", "notes": "There are two bodies and one hash.\r\n\r\nChanged to editorial.\n --VERIFIER NOTES-- \nIt could have been: \r\n\r\n... by hashing the body (but not the two-octet length) of the two MPIs \r\n                                                              ^^^\r\n\r\nBut, it's clear from the parenthetical that there are two MPIs.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2429", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "The Description of SHA224_256PadMessage, near the bottom of page 40,\r\nsays:\r\n\r\n * Description:\r\n *   According to the standard, the message must be padded to an\r\n *   even 512 bits. The first padding bit must be a '1'. The\r\n *   last 64 bits represent the length of the original message.\r\n *   All bits in between should be 0. This helper function will pad\r\n *   the message according to those rules by filling the\r\n *   Message_Block array accordingly. When it returns, it can be\r\n *   assumed that the message digest has been computed.\r\n\r\nFor clarity, it should say (cf. item (10) above):\r\n\r\n * Description:\r\n|*   According to the standard, the message must be padded to the next\r\n|*   proper multiple of 512 bits. The first padding bit must be a '1'.\r\n *   The last 64 bits represent the length of the original message.\r\n *   All bits in between should be 0. This helper function will pad\r\n *   the message according to those rules by filling the\r\n *   Message_Block array accordingly. When it returns, it can be\r\n *   assumed that the message digest has been computed.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2435", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "Within the '#ifdef USE_32BIT_ONLY' macro definition branch of the\r\nfile, on mid-page 50 the RFC says:\r\n\r\n/*\r\n * add \"length\" to the length\r\n */\r\nstatic uint32_t addTemp[4] = { 0, 0, 0, 0 };\r\n#define SHA384_512AddLength(context, length) (                        \\\r\n    addTemp[3] = (length), SHA512_ADDTO4((context)->Length, addTemp), \\\r\n    (context)->Corrupted = (((context)->Length[3] == 0) &&            \\\r\n       ((context)->Length[2] == 0) && ((context)->Length[1] == 0) &&  \\\r\n       ((context)->Length[0] < 8)) ? 1 : 0 )\r\n\r\nIt should say:\r\n\r\n/*\r\n * add \"length\" to the length\r\n */\r\nstatic uint32_t addTemp[4] = { 0, 0, 0, 0 };\r\n#define SHA384_512AddLength(context, length) (                        \\\r\n    addTemp[3] = (length), SHA512_ADDTO4((context)->Length, addTemp), \\\r\n    (context)->Corrupted = (((context)->Length[0] < addTemp[3]) &&    \\\r\n       ((context)->Length[1] == 0) && ((context)->Length[1] == 0) &&  \\\r\n       ((context)->Length[0] == 0)) ? shaInputTooLong : shaSuccess )\r\n\r\nRationale:\r\n\r\nThe context words  Lenght[0] ... Length[3]  represent the unsigned\r\n128-bit-wide running (bit-)length of the message text hash so far,\r\nin most-significant word first order.\r\nThe code fragment above is intended to add to this value the\r\nunsigned 32-bit value (uint32_t) length, and to detect overflow\r\n(to 2^128 and above).\r\nThe given code is wrong.\r\n(Apparently it has never been tested with messages long enough to\r\nexhibit this misbehaviour.)\r\nOther parts of the sample code show how this can be done correctly\r\nin the case of long accumulators consisting of two 32-bit words\r\n-- cf. the code snippits in item (7) and (14) above, and item (27)\r\nbelow, as well,\r\nThe replacement code corrects this issue.\r\n\r\nFurthermore, the original code suffers from the same problem as\r\nin item (7) and (14) above; this has been corrected accordingly,\r\nas well.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2437", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "The sample code presents almost all formal function arguments of type\r\narray with predefined (constant) length with this explicit length.\r\nContrary to that, the function prototypes for SHA384_512Reset do not\r\nsupply the expected size of the formal argument 'H0'.\r\nThis inconsistency should be corrected -- as in item (18) above.\r\n\r\nThere are two instances of the issue (see item (xx) below for\r\nanother two similar instances, with the function declarations):\r\n\r\n(28a)\r\nWithin the function prototype definition part of the\r\n  '#ifdef USE_32BIT_ONLY'\r\nbranch of the sample code, near the bottom of page 50, the RFC says:\r\n\r\nstatic int SHA384_512Reset(SHA512Context *context, uint32_t H0[]);\r\n\r\nFor consistency and clarity, it should say:\r\n\r\nstatic int SHA384_512Reset(SHA512Context *context,\r\n                           uint32_t H0[SHA512HashSize/4]);\r\n\r\n(28b)\r\nWithin the function prototype definition part of the\r\n  '#else /* !USE_32BIT_ONLY */'\r\nbranch of the sample code, near the bottom of page 51, the RFC says:\r\n\r\nstatic int SHA384_512Reset(SHA512Context *context, uint64_t H0[]);\r\n\r\nFor consistency and clarity, it should say:\r\n\r\nstatic int SHA384_512Reset(SHA512Context *context,\r\n                           uint64_t H0[SHA512HashSize/8]);", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2441", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "Similar to item (9), (16), (17), (22), (29), and (30) above, the\r\nDescription of SHA384_512ResultN contains improper wording.\r\nAdditionally, counting 48/64 elements as ranging from the \"0th\" up to\r\nthe \"48th/64nd\" is unpleasant and wrong -- that erroneously indicates\r\n49/65 elements (octets) !\r\n\r\nOn page 65/66, the RFC says:\r\n\r\n * Description:\r\n *   This helper function will return the 384-bit or 512-bit message\r\n<< page break >>\r\n *   digest into the Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the 48th/64th element.\r\n\r\nFor correctness, it should say:\r\n\r\n * Description:\r\n *   This helper function will return the 384-bit or 512-bit message\r\n<< page break >>\r\n *   digest into the Message_Digest array provided by the caller.\r\n *   NOTE:\r\n *    The first octet of the hash is stored in the element with index 0,\r\n *    the last octet of the hash in the element with index 47/63.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "38", "doc-id": "RFC4632", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2", "orig_text": "   3.  Eventual exhaustion of the 32-bit IPv4 address space.\r\n\r\n       It was clear that then-current rates of Internet growth would\r\n       cause the first two problems to become critical sometime between\r\n       1993 and 1995.  Work already in progress on topological\r\n       assignment of addressing for Connectionless Network Service\r\n       (CLNS), which was presented to the community at the Boulder IETF\r\n       in December of 1990, led to thoughts on how to re-structure the\r\n       32-bit IPv4 address space to increase its lifespan.  Work in the\r\n       ROAD group followed and eventually resulted in the publication of\r\n       [RFC1338], and later, [RFC1519].\r\n\r\n       The design and deployment of CIDR was intended to solve these\r\n       problems by providing a mechanism to slow the growth of global\r\n       routing tables and to reduce the rate of consumption of IPv4\r\n       address space.  It did not and does not attempt to solve the\r\n       third problem, which is of a more long-term nature; instead, it\r\n       endeavors to ease enough of the short- to mid-term difficulties\r\n       to allow the Internet to continue to function efficiently while\r\n       progress is made on a longer-term solution.\r\n\r\n       More historical background on this effort and on the ROAD group\r\n       may be found in [RFC1380] and at [LWRD].\r\n\r\n3.  Classless Addressing as a Solution", "correct_text": "   3.  Eventual exhaustion of the 32-bit IPv4 address space.\r\n\r\n   It was clear that then-current rates of Internet growth would\r\n   cause the first two problems to become critical sometime between\r\n   1993 and 1995.  Work already in progress on topological\r\n   assignment of addressing for Connectionless Network Service\r\n   (CLNS), which was presented to the community at the Boulder IETF\r\n   in December of 1990, led to thoughts on how to re-structure the\r\n   32-bit IPv4 address space to increase its lifespan.  Work in the\r\n   ROAD group followed and eventually resulted in the publication of\r\n   [RFC1338], and later, [RFC1519].\r\n\r\n   The design and deployment of CIDR was intended to solve these\r\n   problems by providing a mechanism to slow the growth of global\r\n   routing tables and to reduce the rate of consumption of IPv4\r\n   address space.  It did not and does not attempt to solve the\r\n   third problem, which is of a more long-term nature; instead, it\r\n   endeavors to ease enough of the short- to mid-term difficulties\r\n   to allow the Internet to continue to function efficiently while\r\n   progress is made on a longer-term solution.\r\n\r\n   More historical background on this effort and on the ROAD group\r\n   may be found in [RFC1380] and at [LWRD].\r\n\r\n3.  Classless Addressing as a Solution", "notes": "In Section 2, on page 4 of RFC 4632, the text after the\r\nenumerated item '3.' up to the end of the section is indented\r\ntoo much (by 4 columns), making it erroneously appear to belong\r\nto that item '3.'\r\n\r\n--VERIFIER COMMENT--\r\nThank you very much for your eagle eyes and your comments.  I agree\r\nwith all of them.  If you had submitted them during the Internet-draft\r\nprocess, I would make all of these modifications immediately.\r\nHowever, now that the RFC is issued, I believe that we should be quite\r\na bit more conservative before issuing Errata, so as to not congest\r\nthe Errata and obscure vital and substantive changes that might affect\r\nactual interoperability of standards interpretation.  With that view\r\nin mind, I'd like to suggest that we not issue any Errata at this\r\ntime.  I look forward to your input on subsequent draft documents.\r\n", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tony Li", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "585", "doc-id": "RFC1321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "/* Round 4. */\r\n   /* Let [abcd k s t] denote the operation\r\n        a = b + ((a + I(b,c,d) + X[k] + T[i]) <<< s). */", "correct_text": "/* Round 4. */\r\n   /* Let [abcd k s i] denote the operation\r\n        a = b + ((a + I(b,c,d) + X[k] + T[i]) <<< s). */", "notes": "", "submit_date": "2002-06-14", "submitter_name": "Gregory Smith", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2242", "doc-id": "RFC4880", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "13.1.3.", "orig_text": "   mL = intended length in octets of the encoded message, at least tLen\r\n        + 11, where tLen is the octet length of the DER encoding T of a\r\n        certain value computed during the encoding operation", "correct_text": "   emLen = intended length in octets of the encoded message, at least\r\n        tLen + 11, where tLen is the octet length of the DER encoding T\r\n        of a certain value computed during the encoding operation", "notes": "In the following text it is called emLen.\r\n\r\nChanged to editorial.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6808", "doc-id": "RFC4568", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.2", "orig_text": "srtp-crypto-suite   = \"AES_CM_128_HMAC_SHA1_32\" /\r\n                            \"F8_128_HMAC_SHA1_32\" /\r\n                            \"AES_CM_128_HMAC_SHA1_80\" /\r\n                            srtp-crypto-suite-ext\r\n", "correct_text": "srtp-crypto-suite   = \"AES_CM_128_HMAC_SHA1_32\" /\r\n                            \"F8_128_HMAC_SHA1_80\" /\r\n                            \"AES_CM_128_HMAC_SHA1_80\" /\r\n                            srtp-crypto-suite-ext\r\n", "notes": "Section 6.2.3 uses 80 bit for F8 (IANA registration)", "submit_date": "2022-01-05", "submitter_name": "Fritz", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "39", "doc-id": "RFC4631", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7", "orig_text": "      In lmpDataLinkTable:\r\n   {", "correct_text": "   In lmpDataLinkTable:\r\n   {", "notes": "spurious indentation\r\n\r\nfrom pending\r\n\r\n--VERIFIER COMMENT--\r\nWhile many of these comments would undoubtedly have led to a more polished \r\nfinal RFC it is fortunate that none of them makes the document in any way \r\nharder to read or less technically meaningful. I am sure that if and when \r\nthe RFC progresses from Proposed Standard to Draft Standard we can look back \r\nat this list to ensure that your comments are addressed.\r\n\r\nIn future, however, I would urge you to make comments on the content and \r\nformat of CCAMP documents as they progress through the working group or \r\nduring IETF last call. Comments made later than that are very unlikely to be \r\nconsidered by the authors for inclusion, but comments made earlier in the \r\nprocess are very likely to be included.\r\n\r\nObviously, if issues of technical clarity or understanding do come up later \r\nthan this, we can address them through Errata while a new revision of the \r\nRFC is prepared. On the other hand, Errata are probably not well used for \r\nrecording small format errors in the text as these are not strictly errors \r\nof content or substance.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "40", "doc-id": "RFC4623", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5", "orig_text": "     0                   1                   2                   3\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n    |M|H|0|0|0|0|    Length         |              0                |\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\n    |x|S|B|E|x|x|x|x|              Sequence Number                  |\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |x|S|B|E|x|x|x|x|              Sequence Number                  |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Extraneous part of the AVP Header in Figure 6.", "submit_date": "2006-10-25", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "41", "doc-id": "RFC4619", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   The main functions required to support frame relay PW by a\r\n   Provider Edge (PE) include:", "correct_text": "   The main functions required to support frame relay PWs by a\r\n   Provider Edge (PE) include:\r\n", "notes": "from pending", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Andrew G. Malis", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "42", "doc-id": "RFC4612", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   Additional information:\r\n\r\n      Magic number(s):  File extension(s):  Macintosh File Type Code(s):", "correct_text": "   Additional information:\r\n\r\n      Magic number(s):\r\n      File extension(s):\r\n      Macintosh File Type Code(s):", "notes": "line folding issue", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "55", "doc-id": "RFC4570", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6", "orig_text": "        Purpose:            See this document\r\n        Reference:          This document\r\n        Values:             See this document, and registrations below", "correct_text": "        Purpose:            See RFC 4632\r\n        Reference:          RFC 4632\r\n        Values:             See RFC 4632", "notes": "The filled out SDP attribute registration template in the IANA\r\nConsiderations (Section 6) on page 10 contains improper wording\r\n-- either just being garbage (there are no 'registrations below'\r\nin the RFC), or getting inappropriate when extracted from the RFC\r\nand included in a stand-alone IANA document.\r\n\r\n--VERIFIER COMMENT--\r\nThanks for the comments.  It would have been nice if these very minor\r\nerrors could have been corrected prior to RFC publication.  However,\r\nI'm not convinced that they are significant enough to warrant a RFC\r\nErrata note.  (If, however, the RFC editor disagrees, then I could\r\ncertainly go ahead and do this.)", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ross Finlayson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "56", "doc-id": "RFC4567", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "The abstract says:", "orig_text": "   General guidelines are also given on how the framework should be used\r\n   together with SIP and RTSP.  The usage with the Multimedia Internet\r\n   KEYing (MIKEY) key management protocol is also defined.", "correct_text": "   General guidelines are also given on how the framework should be used\r\n   together with SIP and SAP.  The usage with the Multimedia Internet\r\n   KEYing (MIKEY) key management protocol is also defined.", "notes": " As can be seen from the title and the body of the RFC, and\r\nas has been correctly stated in the first paragraph of the Abstract,\r\nthe RFC primarily deals with SDP and RTSP; it \"also\" considers the use\r\nof the SDP extensions with SIP (Section 4.1.2) and SAP (Section 4.1.3).\r\nHence, SAP should be mentioned in the second paragraph of the Abstract\r\ninstead of RTSP.", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "57", "doc-id": "RFC4566", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  typo\r\n\r\nOn page 7 of RFC 4566, Section 4.6 says:\r\n\r\n   The SDP specification recommends the use of the ISO 10646 character\r\n|  sets in the UTF-8 encoding [5] to allow many different languages to\r\n   be represented.  However, to assist in compact representations, SDP\r\n   also allows other character sets such as ISO 8859-1 to be used when\r\n   desired.  Internationalisation only applies to free-text fields\r\n   (session name and background information), and not to SDP as a whole.\r\n\r\nIt should say:\r\n\r\n   The SDP specification recommends the use of the ISO 10646 character\r\n|  set in the UTF-8 encoding [5] to allow many different languages to\r\n   be represented.  However, to assist in compact representations, SDP\r\n   also allows other character sets such as ISO 8859-1 to be used when\r\n   desired.  Internationalisation only applies to free-text fields\r\n   (session name and background information), and not to SDP as a whole.\r\n\r\n\r\n(2)  inconsistent specification\r\n\r\nContrary to the text in Section 4.6 (see above), Section 5 of RFC 4566\r\nspecifies, at the bottom of page 7:\r\n\r\n   An SDP session description is entirely textual using the ISO 10646\r\n   character set in UTF-8 encoding.  SDP field names and attribute names\r\n   use only the US-ASCII subset of UTF-8, but textual fields and\r\n   attribute values MAY use the full ISO 10646 character set.  [...]\r\n\r\nThese conflicting specifications might become a source of\r\ninteroperability problems, and therefore, the conflict should be\r\nresolved by a clarification !!!\r\n\r\nNote: Subsequent text in sections 5.* specifies behaviour related\r\nto the \"a=charset\" attribute required if other charsets than UTF-8\r\nare used in certain fields; therefore, the latter exclusive UTF-8\r\nrule is most probably too restrictive and hence inappropriate.\r\n\r\n\r\n(3)  misleading text / inconsistency + typo (missing article)\r\n\r\nStill in Section 5, the second-to-last paragraph on page 8 of RFC 4566\r\nsays:\r\n\r\n   An SDP session description consists of a session-level section\r\n   followed by zero or more media-level sections.  The session-level\r\n   part starts with a \"v=\" line and continues to the first media-level\r\n|  section.  Each media-level section starts with an \"m=\" line and\r\n|  continues to the next media-level section or end of the whole session\r\n   description.  In general, session-level values are the default for\r\n   all media unless overridden by an equivalent media-level value.\r\n\r\nThe second sentence does not accomodate for an important corner case\r\nmentioned in the first sentence, and thus should be amended with\r\nsimilar wording as below. The third sentence is imprecise as well,\r\nbecause the \"or\" does not uniquely select the 'right' condition.\r\n\r\nIt should better say:\r\n\r\n   An SDP session description consists of a session-level section\r\n   followed by zero or more media-level sections.  The session-level\r\n   part starts with a \"v=\" line and continues to the first media-level\r\n|  section (or the end of the whole description, whichever comes first).\r\n   Each media-level section starts with an \"m=\" line and continues to\r\n|  the next media-level section or the end of the whole session\r\n|  description - whichever comes first.  In general, session-level\r\n   values are the default for all media unless overridden by an\r\n   equivalent media-level value.\r\n\r\n\r\n(4)  significant mis-specification\r\n\r\nIn the \"Session description\" block, on top of page 9, the RFC says:\r\n\r\n         c=* (connection information -- not required if included in\r\n              all media)\r\n         b=* (zero or more bandwidth information lines)\r\n\r\nIt should say:\r\n\r\n         c=* (connection information -- not required if included in\r\n              all media descriptions)\r\n         b=* (zero or more bandwidth information lines)\r\n\r\nRationale:\r\nStrictly differentiating between \"media\" and \"media description\"\r\nis always required to avoid confusion! ...\r\nAnd connection information is rarely (if ever) seen in the media!\r\n\r\n\r\n(5)  improper wording related with IP addresses\r\n\r\nIP addresses (in IPv4 and IPv6) are always assigned to an interface,\r\nnot to a host or 'machine'.  Therefore, a Standards Track RFC\r\nshould never talk about  '*the* IP address of a machine'.\r\nFQDNs are also not necessarily unique for a 'machine', e.g. a server\r\nhaving multiple, 'role-based' FQDNs.\r\n\r\nTherefore, in Section 5.2, the last paragraph on page 11,\r\n\r\n|  <unicast-address> is the address of the machine from which the\r\n      session was created.  For an address type of IP4, this is either\r\n|     the fully qualified domain name of the machine or the dotted-\r\n|     decimal representation of the IP version 4 address of the machine.\r\n|     For an address type of IP6, this is either the fully qualified\r\n      domain name of the machine or the compressed textual\r\n|     representation of the IP version 6 address of the machine.  For\r\n      both IP4 and IP6, the fully qualified domain name is the form that\r\n|     SHOULD be given unless this is unavailable, in which case the\r\n      globally unique address MAY be substituted.  A local IP address\r\n      MUST NOT be used in any context where the SDP description might\r\n      leave the scope in which the address is meaningful (for example, a\r\n      local address MUST NOT be included in an application-level\r\n      referral that might leave the scope).\r\n\r\nshould say:\r\n\r\n|  <unicast-address> is an address of the machine from which the\r\n      session was created.  For an address type of IP4, this is either\r\n|     a fully qualified domain name of the machine or the dotted-\r\n|     decimal representation of an IP version 4 address of the machine.\r\n|     For an address type of IP6, this is either a fully qualified\r\n      domain name of the machine or the compressed textual\r\n|     representation of an IP version 6 address of the machine.  For\r\n      both IP4 and IP6, the fully qualified domain name is the form that\r\n|     SHOULD be given unless this is unavailable, in which case a\r\n      globally unique address MAY be substituted.  A local IP address\r\n      MUST NOT be used in any context where the SDP description might\r\n      leave the scope in which the address is meaningful (for example, a\r\n      local address MUST NOT be included in an application-level\r\n      referral that might leave the scope).\r\n\r\n\r\n(6)  improper term used\r\n\r\na)\r\nSection 5.6 twice uses the term, \"conference\", where IMHO, according\r\nto the definitions given in Section 2, the term, \"session\" should\r\nbe used.  This change makes the text better conform with the\r\nclassification of the \"e=\" and \"p=\" lines on page 9, as well.\r\n\r\nThe first textual paragraph of Section 5.6, on page 13, says:\r\n\r\n   The \"e=\" and \"p=\" lines specify contact information for the person\r\n|  responsible for the conference.  This is not necessarily the same\r\n|  person that created the conference announcement.\r\n\r\nIt should say:\r\n\r\n   The \"e=\" and \"p=\" lines specify contact information for the person\r\n|  responsible for the session.  This is not necessarily the same person\r\n|  that created the session announcement.\r\n\r\nb)\r\nAnother instance of this issue occurs in Section 5.7, at the bottom\r\nof page 14.  There, the RFC says:\r\n\r\n   o  Sessions using an IPv4 multicast connection address MUST also have\r\n      a time to live (TTL) value present in addition to the multicast\r\n      address.  The TTL and the address together define the scope with\r\n|     which multicast packets sent in this conference will be sent.  TTL\r\n      values MUST be in the range 0-255.  [...]\r\n\r\nIt should say:\r\n\r\n   o  Sessions using an IPv4 multicast connection address MUST also have\r\n      a time to live (TTL) value present in addition to the multicast\r\n      address.  The TTL and the address together define the scope with\r\n|     which multicast packets sent in this session will be sent.  TTL\r\n      values MUST be in the range 0-255.  [...]\r\n\r\nc)\r\nFinally, the last sentence of the second paragraph of Section 5.13,\r\non page 21,\r\n\r\n                                                   [...].  Attribute\r\n   fields can also be added before the first media field; these\r\n   \"session-level\" attributes convey additional information that applies\r\n   to the conference as a whole rather than to individual media.\r\n\r\nshould say, accordingly:\r\n\r\n                                                   [...].  Attribute\r\n   fields can also be added before the first media field; these\r\n   \"session-level\" attributes convey additional information that applies\r\n|  to the session as a whole rather than to individual media.\r\n\r\n\r\n(7)  clarification\r\n\r\nThe second paragraph of Section 5.9, on page 17, says:\r\n\r\n   The first and second sub-fields give the start and stop times,\r\n   respectively, for the session.  These values are the decimal\r\n   representation of Network Time Protocol (NTP) time values in seconds\r\n   since 1900 [13].  To convert these values to UNIX time, subtract\r\n   decimal 2208988800.\r\n\r\nTo make the time base unique and absolute, the time zone (UTC) needs to\r\nbe specified.\r\nHence, the RFC should say:\r\n\r\n   The first and second sub-fields give the start and stop times,\r\n   respectively, for the session.  These values are the decimal\r\n   representation of Network Time Protocol (NTP) time values in seconds\r\n|  since 1900, UTC [13].  To convert these values to UNIX time, subtract\r\n   decimal 2208988800.\r\n\r\n\r\n(8)  typo (missing article)\r\n\r\nThe second text paragraph of section 5.10, on page 18, says:\r\n\r\n   To make description more compact, times may also be given in units of\r\n   days, hours, or minutes.  [...]\r\n\r\nIt should say:\r\n\r\n|  To make the description more compact, times may also be given in\r\n   units of days, hours, or minutes.  [...]\r\n\r\n\r\n(9)  legacy term not replaced\r\n\r\nSince the advent of SIP and the Offer/Answer Model for SDP, it is\r\nno more appropriate, in a general context, to name a\r\n'session description' just a 'session announcement'.\r\n\r\nThe final paragraph of Section 5.11, on page 19, says:\r\n\r\n   If a session is likely to last several years, it is expected that the\r\n   session announcement will be modified periodically rather than\r\n   transmit several years' worth of adjustments in one session\r\n   announcement.\r\n\r\nIt should say therefore:\r\n\r\n   If a session is likely to last several years, it is expected that the\r\n|  session description will be modified periodically rather than\r\n|  transmitting several years' worth of adjustments in one session\r\n|  description.\r\n\r\n\r\n(10) clarification of 'charset' related terminology, plus typos\r\n\r\nSection 5.13 makes use of legacy terminology related to character\r\nsets and \"charsets\".  It should use the stable, IESG policy based\r\nIETF terminology.\r\n\r\na)\r\nHence, the first paragraph on page 22:\r\n\r\n   Attribute values are octet strings, and MAY use any octet value\r\n   except 0x00 (Nul), 0x0A (LF), and 0x0D (CR).  By default, attribute\r\n   values are to be interpreted as in ISO-10646 character set with UTF-8\r\n   encoding.  Unlike other text fields, attribute values are NOT\r\n   normally affected by the \"charset\" attribute as this would make\r\n   comparisons against known values problematic.  However, when an\r\n   attribute is defined, it can be defined to be charset dependent, in\r\n   which case its value should be interpreted in the session charset\r\n   rather than in ISO-10646.\r\n\r\nshould better say:\r\n\r\n   Attribute values are octet strings, and MAY use any octet value\r\n   except 0x00 (Nul), 0x0A (LF), and 0x0D (CR).  By default, attribute\r\n|  values are to be interpreted as in the ISO-10646 character set with\r\n   UTF-8 encoding.  Unlike other text fields, attribute values are NOT\r\n   normally affected by the \"charset\" attribute as this would make\r\n   comparisons against known values problematic.  However, when an\r\n   attribute is defined, it can be defined to be charset dependent, in\r\n   which case its value should be interpreted in the session charset\r\n   rather than in UTF-8.\r\n\r\nNote: RFC 1815 has been deprecated; 'ISO-10646' is *not* considered a\r\n\"charset\", whereas 'UTF-8' is.\r\n\r\nb)\r\nIn Section 6, at the bottom of page 28, the RFC says:\r\n\r\n      a=charset:<character set>\r\n\r\n         This specifies the character set to be used to display the\r\n         session name and information data.  By default, the ISO-10646\r\n         character set in UTF-8 encoding is used.  If a more compact\r\n         representation is required, other character sets may be used.\r\n         For example, the ISO 8859-1 is specified with the following SDP\r\n         attribute:\r\n\r\n            a=charset:ISO-8859-1\r\n\r\nThe above headline should say:\r\n\r\n      a=charset:<charset>\r\n\r\nor perhaps even better:\r\n\r\n      a=charset:<IANA-charset>\r\n\r\nand the text body above should be changed to say:\r\n\r\n|        This specifies the character set and encoding (\"charset\") to be\r\n|        used for the session name and information data.  By default,\r\n|        the ISO-10646 character set in UTF-8 encoding (charset \"UTF-8\")\r\n         is used.  If a more compact representation is required, other\r\n|        charsets may be used.  For example, the ISO 8859-1 charset is\r\n         specified with the following SDP attribute:\r\n         [...]\r\n\r\nNote: The session description does not determine how parts of it\r\nare *displayed* (theres may be some transcoding used, and fonts\r\nor typefaces, etc., the charset must only be specified for SDP.)\r\n\r\nThe subsequent text on page 29,\r\n\r\n         This is a session-level attribute and is not dependent on\r\n         charset.  The charset specified MUST be one of those registered\r\n         with IANA, such as ISO-8859-1.  The character set identifier is\r\n         a US-ASCII string and MUST be compared against the IANA\r\n         identifiers using a case-insensitive comparison.  If the\r\n         identifier is not recognised or not supported, all strings that\r\n         are affected by it SHOULD be regarded as octet strings.\r\n\r\n         Note that a character set specified MUST still prohibit the use\r\n         of bytes 0x00 (Nul), 0x0A (LF), and 0x0d (CR).  Character sets\r\n         requiring the use of these characters MUST define a quoting\r\n         mechanism that prevents these bytes from appearing within text\r\n         fields.\r\n\r\nshould be changed to say (fixing typos as well):\r\n\r\n         This is a session-level attribute and is not dependent on\r\n         charset.  The charset specified MUST be one of those registered\r\n|        with IANA, such as ISO-8859-1.  The charset identifier is a\r\n         US-ASCII string and MUST be compared against the IANA\r\n         identifiers using a case-insensitive comparison.  If the\r\n         identifier is not recognised or not supported, all strings that\r\n         are affected by it SHOULD be regarded as octet strings.\r\n\r\n|        Note that a charset specified MUST still prohibit the use of\r\n|        bytes 0x00 (NUL), 0x0A (LF), and 0x0D (CR).  Charsets requiring\r\n         the use of these characters MUST define a quoting mechanism\r\n         that prevents these bytes from appearing within text fields.\r\n\r\n\r\n(11)  language related issues, plus typos\r\n\r\nThe RFC text on pp. 29/30 does not properly distinguish between, and\r\nmesses up, the specifics of session content (and its language[s]) and\r\nthe session *description* content (and the language[s] used therein).\r\n\r\nNote: I show more context than absolutely necessary to perform the\r\nrecommended changes, to make these better understandable.\r\n\r\na)\r\nOn mid-page 29, RFC 4566 says:\r\n\r\n      a=sdplang:<language tag>\r\n\r\n         This can be a session-level attribute or a media-level\r\n         attribute.  As a session-level attribute, it specifies the\r\n         language for the session description.  As a media-level\r\n         attribute, it specifies the language for any media-level SDP\r\n         information field associated with that media.  Multiple sdplang\r\n         attributes can be provided either at session or media level if\r\n|        multiple languages in the session description or media use\r\n|        multiple languages, in which case the order of the attributes\r\n|        indicates the order of importance of the various languages in\r\n|        the session or media from most important to least important.\r\n\r\n(The last half-sentence is wrong and inappropriate.)\r\n\r\nIt should better say:\r\n\r\n      a=sdplang:<language tag>\r\n\r\n         This can be a session-level attribute or a media-level\r\n         attribute.  As a session-level attribute, it specifies the\r\n         language for the session description.  As a media-level\r\n         attribute, it specifies the language for any media-level SDP\r\n         information field associated with that media.  Multiple sdplang\r\n         attributes can be provided either at session or media level if\r\n|        multiple languages in the session or media description use\r\n|        multiple languages.\r\n\r\nb)\r\nSkipping one paragraph, the next one says:\r\n\r\n         The \"sdplang\" attribute value must be a single RFC 3066\r\n         language tag in US-ASCII [9].  It is not dependent on the\r\n         charset attribute.  An \"sdplang\" attribute SHOULD be specified\r\n|        when a session is of sufficient scope to cross geographic\r\n         boundaries where the language of recipients cannot be assumed,\r\n|        or where the session is in a different language from the\r\n         locally assumed norm.\r\n\r\nIt should say:\r\n\r\n         The \"sdplang\" attribute value must be a single RFC 3066\r\n         language tag in US-ASCII [9].  It is not dependent on the\r\n         charset attribute.  An \"sdplang\" attribute SHOULD be specified\r\n|        when a session description is of sufficient scope to cross\r\n         geographic boundaries where the language of recipients cannot\r\n|        be assumed, or where the session description is in a different\r\n         language from the locally assumed norm.\r\n\r\nc)\r\nNext, in the explanations for:\r\n\r\n      a=lang:<language tag>\r\n\r\nextending from page 29 to page 30,\r\n\r\n         This can be a session-level attribute or a media-level\r\n         attribute.  As a session-level attribute, it specifies the\r\n         default language for the session being described.  As a media-\r\n         level attribute, it specifies the language for that media,\r\n  <<page break>>\r\n         overriding any session-level language specified.  Multiple lang\r\n         attributes can be provided either at session or media level if\r\n|        the session description or media use multiple languages, in\r\n         which case the order of the attributes indicates the order of\r\n         importance of the various languages in the session or media\r\n         from most important to least important.\r\n\r\nshould be corrected to say:\r\n\r\n         This can be a session-level attribute or a media-level\r\n         attribute.  As a session-level attribute, it specifies the\r\n         default language for the session being described.  As a media-\r\n         level attribute, it specifies the language for that media,\r\n  <<page break>>\r\n         overriding any session-level language specified.  Multiple lang\r\n         attributes can be provided either at session or media level if\r\n|        the session or media use multiple languages, in which case the\r\n         order of the attributes indicates the order of importance of\r\n|        the various languages in the session or media, from most\r\n         important to least important.\r\n\r\n\r\n\r\n\r\nNote: In the meantime (since the publication of RFC 4566), RFC 3066\r\nhas been superseded by RFC 4646 plus RFC 4647, now together denoted\r\nas BCP 47.\r\n\r\n\r\n(12)  typo\r\n\r\nOn page 31, in the second paragraph of Section 7, RFC 4566 says:\r\n\r\n            [...].  Many different transport protocols may be used to\r\n   distribute session description, and the nature of the authentication\r\n   will differ from transport to transport.  [...]\r\n\r\nIt should say:\r\n\r\n            [...].  Many different transport protocols may be used to\r\n|  distribute session descriptions, and the nature of the authentication\r\n   will differ from transport to transport.  [...]\r\n\r\n\r\n(13)  SDP Grammar issues  (ABNF in Section 9, p. 39 ff.),\r\n\r\na)\r\nThe rule for 'repeat-interval'  (page 41)  could easily have\r\nre-used (incorporated) the 'integer' rule:\r\n\r\n   repeat-interval =     POS-DIGIT *DIGIT [fixed-len-time-unit]\r\n\r\nis equivalent to:\r\n\r\n   repeat-interval =     integer [fixed-len-time-unit]\r\n\r\nb)\r\nThe rule for FQDN, at the bottom of page 42, is wrong;\r\nFQDNs really should allow up to 255 characters!\r\n                         v\r\n|  FQDN =                4*(alpha-numeric / \"-\" / \".\")\r\n                         ; fully qualified domain name as specified\r\n                         ; in RFC 1035 (and updates)\r\n\r\nBecause details are not gived (can be found at other places),\r\nthis rule should perhaps be only minimally corrected to say:\r\n\r\n|  FQDN =                *(alpha-numeric / \"-\" / \".\")\r\n                         ; fully qualified domain name as specified\r\n                         ; in RFC 1035 (and updates)\r\n\r\n\r\nAt a minimum, serious issues should be addressed,\r\ne.g. (2), (10), (11), and the ABNF mistake (13b).", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\nWhile you raise a number of valid minor issues, I see nothing which\r\nneeds urgent attention or correction. I'll keep a record of these\r\nissues, to be included if there is a revision to RFC 4566, but I see\r\nno need to submit an errata note to the RFC Editor.\r\n", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "58", "doc-id": "RFC4557", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "The corresponding padata-value field [RFC4120] contains the DER [X60]\r\n   encoding of the following ASN.1 type:", "correct_text": "The corresponding padata-value field [RFC4120] contains the DER [X690]\r\n   encoding of the following ASN.1 type:\r\n", "notes": "", "submit_date": "2006-10-31", "submitter_name": "Tom Petch", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "59", "doc-id": "RFC4550", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "   In particular, examples assume that Lemonade\r\n   Submit and IMAP servers support all Lemonade extensions described in\r\n   this document, so they don't show how to deal with absence of an\r\n   extension.", "correct_text": "   In particular, examples assume that Lemonade\r\n   Submit and IMAP servers support all Lemonade extensions described in\r\n   this document, so they don't show how to deal with the absence of an\r\n   extension.", "notes": "missing article", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "60", "doc-id": "RFC4545", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  typo in Abstract\r\n\r\nThe Abstract, on page 1 of RFC 4545, contains the sentence:\r\n\r\n   [...]\r\n   In particular, it defines objects for managing user identities and\r\n|  the names, addresses, and credentials required manage access control,\r\n   for use with various protocols.  [...]\r\n\r\nThe text should say (filling in the missing 'to'):\r\n\r\n   In particular, it defines objects for managing user identities and\r\n|  the names, addresses, and credentials required to manage access\r\n   control, for use with various protocols.  [...]\r\n\r\n\r\n(2)  typo in Section 5\r\n\r\nThe first paragraph of Section 5, on page 4 of RFC 4545, says:\r\n\r\n   The User-based Security Model (USM) [RFC3414] also defines the\r\n   concept of a user, defining authentication and privacy protocols and\r\n   their credentials.  The definition of USM includes the SNMP-USER-\r\n|  BASED-SM-MIB module allows configuration of SNMPv3 user credentials\r\n   to protect SNMPv3 messages.  [...]\r\n\r\nThe text should say (filling in the missing 'that'):\r\n\r\n   The User-based Security Model (USM) [RFC3414] also defines the\r\n   concept of a user, defining authentication and privacy protocols and\r\n   their credentials.  The definition of USM includes the SNMP-USER-\r\n|  BASED-SM-MIB module that allows configuration of SNMPv3 user\r\n   credentials to protect SNMPv3 messages.  [...]\r\n\r\n\r\n(3)  clarification in Section 7\r\n\r\nThe first paragraph of Section 7, on page 5 of RFC 4545, says:\r\n\r\n|  This MIB module structure is intended to allow the configuration of a\r\n   list of user identities, each with a list of names, addresses,\r\n|  credentials, and certificates that, when combined, will distinguish\r\n   that identity.\r\n\r\nThe wording should be enhanced, and the reference to certificates\r\nshould be removed -- these apparently have been excluded from the\r\nMIB in the published version.\r\n\r\nTherefore, the text should perhaps better say:\r\n\r\n|  This MIB module's structure is intended to allow the configuration of\r\n   a list of user identities, each with a list of names, addresses, and\r\n|  credentials that, when combined, will distinguish that identity.\r\n\r\n\r\n(4)  improper DESCRIPTION text\r\n\r\nThe DESCRIPTION clause for the ipsAuthIdentAddrAttributesTable\r\nOBJECT-TYPE, on page 19, says:\r\n\r\n       DESCRIPTION\r\n           \"A list of address ranges that are allowed to serve\r\n           as the endpoint addresses of a particular identity.\r\n           An address range includes a starting and ending address\r\n|          and an optional netmask, and an address type indicator,\r\n           which can specify whether the address is IPv4, IPv6,\r\n           FC-WWPN, or FC-WWNN.\"\r\n\r\nThis text improperly mentions the use of netmasks, which has been\r\nexplicitely excluded from the MIB module, as can be seen from the\r\nsubsequent IpsAuthIdentAddrAttributesEntry syntax, and as explained\r\nin the last paragraph of Section 7.5, on page 8 of the RFC.\r\n\r\nTherefore, this clause should say:\r\n\r\n       DESCRIPTION\r\n           \"A list of address ranges that are allowed to serve\r\n           as the endpoint addresses of a particular identity.\r\n           An address range includes a starting and ending address,\r\n|          and an address type indicator, which can specify whether\r\n           the address is IPv4, IPv6, FC-WWPN, or FC-WWNN.\"\r\n\r\n\r\n(5)  redundant MIB objects -- serious danger of inconsistency\r\n\r\nConceptually, rows of the ipsAuthCredChap, ipsAuthCredSrp, and\r\nipsAuthCredKerberos tables are a variant record (union in \"C\")\r\ncontained in the corresponding rows of the ipsAuthCredential table.\r\nThe DESCRIPTION clauses make clear, that the 'life' of the former\r\ntable rows is directly coupled to the 'life' of the latter rows --\r\nfor example, the DESCRIPTION clause of the ipsAuthCredAuthMethod\r\nOBJECT-TYPE says:\r\n\r\n           When a row is created in this table, a corresponding\r\n           row must be created by the management station\r\n           in a corresponding table specified by this value.\r\n\r\n           When a row is deleted from this table, the corresponding\r\n           row must be automatically deleted by the agent in\r\n           the corresponding table specified by this value.\r\n\r\nIMHO, it is inconsistent to have the agent delete the row, but\r\nlet the management station create the row; the SETting of an\r\nipsAuthCredAuthMethod object should create the corresponding row.\r\nAccording to this explanantion and the identical indexing structure\r\nof the four tables, the agent thus is directed to maintain exactly\r\none of those variant rows, matching the current value of a given\r\nipsAuthCredAuthMethod instance.\r\n\r\nIn the published version of the IPS-AUTH-MIB module, the rows\r\nof the basic ipsAuthCredentialAttributesTable contains objects of\r\nRowStatus and StorageType syntax that are used to create/activate/\r\ndelete an ipsAuthCredentialAttributesEntry conceptual row, and to\r\nspecify the persistence behaviour of that row, respectively.\r\n\r\nTherefore, IMHO it makes no sense, and it entails the danger of\r\nfundamental semantic inconsistencies in the MIB module, to also\r\nmaintain objects of RowStatus and StorageType syntax in the\r\nvariant table rows.\r\nE.g.,\r\n- no `active` row can exist in the ipsAuthCredChapAttributesTable\r\n  without a corresponding `active` row in the\r\n  ipsAuthCredentialAttributesTable;\r\n- no ipsAuthCredChapAttributesEntry can be created by the manager,\r\n  that MUST be done automatically by the agent when the\r\n  ipsAuthCredAuthMethod instance is set to ipsAuthMethodChap;\r\n- the ipsAuthCredentialAttributesEntry should be set inactive,\r\n  if desired, and not the ipsAuthCredChapAttributesEntry;\r\n- the StorageType of both entries MUST be exactly the same.\r\n\r\nTherefore, IMHO the objects\r\n  o   ipsAuthCredChapRowStatus,\r\n  o   ipsAuthCredChapStorageType,\r\n  o   ipsAuthCredSrpRowStatus,\r\n  o   ipsAuthCredSrpStorageType,\r\n  o   ipsAuthCredKerbRowStatus,  and\r\n  o   ipsAuthCredKerbStorageType\r\nshould be deprecated as soon as possible, and its MAX-ACCESS\r\nchanged to read-only, with explanation added to the DESCRIPTION\r\nclauses that the values of these objects (if implemented), are\r\nagent maintained mirrors of the corresponding ipsAuthCredRowStatus\r\nand ipsAuthCredStorageType objects, respectively.\r\n\r\nAdditionally, it should be specified that a ipsAuthCredRowStatus\r\ninstance must not be set to `active` unless the proper credentials\r\nhave been set in the appropriate ipsAuthCred* \"detail\" row.\r\n\r\nIf it is decided that automatic row creation by the agent should\r\nnot be specified for backwards compatibility, at least the\r\nipsAuthCred*StorageType objects should be deprecated.\r\n\r\n\r\n(6)  clarification in compliance statement\r\n\r\nThe DESCRIPTION clause of the ipsAuthComplianceV1 MODULE-COMPLIANCE\r\nsays:\r\n\r\n       DESCRIPTION\r\n           \"Initial version of compliance statement based on\r\n           initial version of this MIB module.\r\n\r\n           The Instance and Identity groups are mandatory;\r\n           at least one of the other groups (Name, Address,\r\n|          Credential, Certificate) is also mandatory for\r\n           any given implementation.\"\r\n\r\nSimilar to item (3) above, the reference to 'Certificate' is\r\ninappropriate and should be deleted; additionally, the plural\r\nform of 'Credential' should be used.\r\n\r\nThus, this clause should say:\r\n\r\n       DESCRIPTION\r\n           \"Initial version of compliance statement based on\r\n           initial version of this MIB module.\r\n\r\n           The Instance and Identity groups are mandatory;\r\n           at least one of the other groups (Name, Address,\r\n|          Credentials) is also mandatory for any given\r\n           implementation.\"\r\n\r\n\r\n(7)  incomplete citations\r\n\r\nThe following References are incomplete according to RFC-Ed policy;\r\nthey should be amended by  \"STD 62, \"  just before the RFC number.\r\n\r\nIn Section 11, on page 40, the entry:\r\n\r\n   [RFC3411]  Harrington, D., Presuhn, R., and B. Wijnen, \"An\r\n              Architecture for Describing Simple Network Management\r\n              Protocol (SNMP) Management Frameworks\", RFC 3411, December\r\n              2002.\r\n\r\nshould say:\r\n\r\n   [RFC3411]  Harrington, D., Presuhn, R., and B. Wijnen, \"An\r\n              Architecture for Describing Simple Network Management\r\n              Protocol (SNMP) Management Frameworks\", STD 62, RFC 3411,\r\n              December 2002.\r\n\r\nIn Section 12, on page 41, the entry:\r\n\r\n   [RFC3414]  Blumenthal, U. and B. Wijnen, \"User-based Security Model\r\n              (USM) for version 3 of the Simple Network Management\r\n              Protocol (SNMPv3)\", RFC 3414, December 2002.\r\n\r\nshould say:\r\n\r\n   [RFC3414]  Blumenthal, U. and B. Wijnen, \"User-based Security Model\r\n              (USM) for version 3 of the Simple Network Management\r\n              Protocol (SNMPv3)\", STD 62, RFC 3414, December 2002.", "correct_text": "", "notes": "I make use of change bars ('|' in column 1) to emphasize the\r\nlocation of textual issues and/or proposed textual changes.\r\nModified text is re-adjusted according to RFC formatting rules.\r\n\r\nThe items below are listed (and enumerated) in RFC text sequence.\r\nItem (5) apparently is a serious issue.\r\nAll other items are simple errata.\r\n\r\nfrom pending", "submit_date": "2006-06-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "431", "doc-id": "RFC2462", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "It currently says:\n", "orig_text": "2.  TERMINOLOGY\n\n   IP - Internet Protocol Version 6.  The terms IPv4 and are used\n        only in contexts where necessary to avoid ambiguity.", "correct_text": "2.  TERMINOLOGY\n\n   IP - Internet Protocol Version 6.  The terms IPv4 and IPv6 are used\n        only in contexts where necessary to avoid ambiguity.", "notes": "", "submit_date": "2004-08-10", "submitter_name": "Tim Shepard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "43", "doc-id": "RFC4606", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  use of \"N\"\r\n\r\nIn Section 2.1 of RFC 4606, on page 6, the explanations for\r\nthe NCC field contain the Note:\r\n\r\n   Note 2: When a transparent STS-N/STM-N signal is requested that is\r\n   limited to a single contiguously concatenated STS-Nc_SPE/VC-4-Nc, the\r\n   signal type must be STS-N/STM-N, RCC with flag 1, NCC set to 1.\r\n\r\nSuch text (and similar) contains an unfortunate mess-up of two\r\ndistinct uses of \"N\", with different range of admissible values\r\nfor STS-N and STM-N.\r\nThis becomes particularly confusing in phrases like\r\n\"a single contiguously concatenated STS-Nc_SPE/VC-4-Nc\".\r\nI strongly recommend to avoid this overloaded use of \"N\"\r\nin a single context.\r\nUsing \"M\" for one of these two \"N\"s instead, i.e. talking\r\nabout \"STS-M/STM-N\", or talking about \"STS-<3*N>/STM-N\" or\r\neven \"STS-3N/STM-N\", would remove the ambiguity and add to\r\nthe clarity of the text.\r\n\r\n\r\n(3)  continuation of (1)\r\n\r\nWithin section 3, the numbered rules on mid-page 13 would also\r\nbenefit from application of the arguments given in item (1) above:\r\n\r\n   1.  S=1->N is the index of a particular STS-3/AUG-1 inside an\r\n       STS-N/STM-N multiplex.  S is only significant for SONET STS-N\r\n       (N>1) and SDH STM-N (N>0).  S must be 0 and ignored for STS-1 and\r\n       STM-0.\r\n\r\nshould better be specified as:\r\n\r\n   1.  S=1->N is the index of a particular STS-3/AUG-1 inside an\r\n|      STS-3N/STM-N multiplex.\r\n|      S is only significant for SONET STS-3N and SDH STM-N (N>0).\r\n       S must be 0 and ignored for STS-1 and STM-0.\r\n\r\nand\r\n\r\n   2.  U=1->3 is the index of a particular STS-1_SPE/VC-3 within an\r\n       STS-3/AUG-1.  U is only significant for SONET STS-N (N>1) and SDH\r\n       STM-N (N>0).  U must be 0 and ignored for STS-1 and STM-0.\r\n\r\nshould better be specified as:\r\n\r\n   2.  U=1->3 is the index of a particular STS-1_SPE/VC-3 within an\r\n       STS-3/AUG-1.\r\n|      U is only significant for SONET STS-3N and SDH STM-N (N>0).\r\n       U must be 0 and ignored for STS-1 and STM-0.\r\n", "correct_text": "", "notes": "Erratum 43 has been duplicated to allow separate treatment of the different elements reported. This copy is used to address the rejected parts. The rest of the Erratum is now 2804.\n --VERIFIER NOTES-- \nPoints 1) and 3) are rejected. Although the repeated use of \"N\" could lead a reader to be confused, this is common usage amongst writers on TDM, and the readership within CCAMP has so far been unconfused.   ", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2807", "doc-id": "RFC3677", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Category: Standards Track", "correct_text": "Category: Best Current Practice", "notes": "", "submit_date": "2011-05-13", "submitter_name": "Pete Resnick", "verifier_id": "", "verifier_name": "Olaf Kolkman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2808", "doc-id": "RFC2184", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   Content-Type: application/x-stuff\r\n    title*1*=us-ascii'en'This%20is%20even%20more%20\r\n    title*2*=%2A%2A%2Afun%2A%2A%2A%20\r\n    title*3=\"isn't it!\"", "correct_text": "   Content-Type: application/x-stuff\r\n    title*0*=us-ascii'en'This%20is%20even%20more%20\r\n    title*1*=%2A%2A%2Afun%2A%2A%2A%20\r\n    title*2=\"isn't it!\"", "notes": "Verifier Note: Corrected in RFC 2231", "submit_date": "2001-04-14", "submitter_name": "Terje Braten", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2809", "doc-id": "RFC6167", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Phillips, et al.              Informational                     [Page 1]\r\n\f\r\nRFC 6167                     jms\" URI Scheme                  April 2011", "correct_text": "Phillips, et al.              Informational                     [Page 1]\r\n\f\r\nRFC 6167                     \"jms\" URI Scheme                 April 2011", "notes": "This is a typing error, I believe - one inverted comma is missing here.", "submit_date": "2011-05-14", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "44", "doc-id": "RFC4601", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": " Normative References say:", "orig_text": "   [6]  Holbrook, H. and B. Cain, \"Source-Specific Multicast for IP\",\r\n        RFC 4507, August 2006.", "correct_text": "   [6]  Holbrook, H. and B. Cain, \"Source-Specific Multicast for IP\", RFC \r\n        4607, August 2006.", "notes": "Reference [6] in RFC 4601 is wrong, it says SSM for IP is\r\nRFC 4507 when it is RFC 4607.", "submit_date": "2006-11-07", "submitter_name": "Stephen Nadas", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "45", "doc-id": "RFC4596", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5.1", "orig_text": "Y2 represents an audio/video phone that should only used\r\nwhen needed.", "correct_text": "Y2 represents an audio/video phone that should only be\r\nused when needed.", "notes": "word omission\r\n\r\nfrom pending", "submit_date": "2006-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "46", "doc-id": "RFC4592", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  [improper/misleading wording]\r\n\r\nIn the explanations to the Example in Section 2.2.1, RFC 4592\r\n(near the top of page 9) says:\r\n\r\n|  The following responses would not be synthesized from any of the\r\n|  wildcards in the zone:\r\n\r\nThis wording is improper/misleading.\r\nPerhaps, the RFC should better say:\r\n\r\n|  The following queries would not cause RRs to be synthesized for the\r\n|  answer from any of the wildcards in the zone:\r\n\r\n\r\n(2)  [typo]\r\n\r\nThe last paragraph of Section 2.2.2, on page 10, says:\r\n\r\n   As RFC 1034 also defines \"an authoritative name error indicating that\r\n|  the name does not exist\" in section 4.3.1, so this apparently is not\r\n   the intent of the original definition, justifying the need for an\r\n   updated definition in the next section.\r\n\r\n\"As ..., so ...\" is redundant.\r\nThus, the RFC should say instead:\r\n\r\n   As RFC 1034 also defines \"an authoritative name error indicating that\r\n|  the name does not exist\" in section 4.3.1, this apparently is not the\r\n   intent of the original definition, justifying the need for an updated\r\n   definition in the next section.\r\n\r\n\r\n(3)  [typo]\r\n\r\nIn Section 3.3.1, the 4th paragraph, on page 12, says:\r\n\r\n   A source of synthesis does not guarantee having a RRSet to use for\r\n   synthesis.  The source of synthesis could be an empty non-terminal.\r\n\r\nIt should say:\r\n\r\n|  A source of synthesis does not guarantee having an RRSet to use for\r\n   synthesis.  The source of synthesis could be an empty non-terminal.\r\n\r\n\r\n(4)  [typo]\r\n\r\nIn Section 3.3.3, the last paragraph on page 13 says:\r\n\r\n   This is essentially the same text in part 'a' covering the processing\r\n   of CNAME RRSets.\r\n\r\nIt should say:\r\n\r\n|  This is essentially the same text as in part 'a' covering the\r\n   processing of CNAME RRSets.\r\n\r\n\r\n(5)  [incomplete change in example?]\r\n\r\nIn Section 4.4, the second-to-last paragraph on page 16 says:\r\n\r\n   The DNAME specification is not clear on whether DNAME records in a\r\n   cache are used to rewrite queries.  In some interpretations, the\r\n   rewrite occurs; in others, it does not.  Allowing for the occurrence\r\n   of rewriting, queries for \"sub.a.b.example. A\" may be rewritten as\r\n|  \"sub.foo.bar.tld. A\" by the former caching server and may be\r\n|  rewritten as \"sub.a.foo.bar.tld. A\" by the latter.  Coherency is\r\n   lost, and an operational nightmare ensues.\r\n\r\n\"tld.\" does never appear in the preceding text; apparently it has\r\nbeen replaced there by \"example.net.\"\r\nTherefore, the RFC should say instead:\r\n\r\n   The DNAME specification is not clear on whether DNAME records in a\r\n   cache are used to rewrite queries.  In some interpretations, the\r\n   rewrite occurs; in others, it does not.  Allowing for the occurrence\r\n   of rewriting, queries for \"sub.a.b.example. A\" may be rewritten as\r\n|  \"sub.foo.bar.example.net. A\" by the former caching server and may be\r\n|  rewritten as \"sub.a.foo.bar.example.net. A\" by the latter.  Coherency\r\n   is lost, and an operational nightmare ensues.\r\n", "correct_text": "", "notes": "from pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "47", "doc-id": "RFC4590", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "Digest-Nextnonce        106\r\nDigest-Response-Auth    107 ", "correct_text": "", "notes": "\n --VERIFIER NOTES-- \nitis unclear what is wrong   ", "submit_date": "2006-09-21", "submitter_name": "Alexander Schrab", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "144", "doc-id": "RFC4283", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "   In addition, IANA has created a new namespace for the subtype field\r\n   of the Mobile Node Identifier option.  The currently allocated values\r\n   are as follows:\r\n\r\n   NAI (defined in [RFC4282]).", "correct_text": "   In addition, IANA has created a new namespace for the subtype field\r\n   of the Mobile Node Identifier option.  The currently allocated values\r\n   are as follows:\r\n\r\n      1  --  NAI (defined in [RFC4282]).", "notes": "", "submit_date": "2005-12-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "145", "doc-id": "RFC4280", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   Broadcast and Multicast Service Controller Domain Name List\r\n   for DHCPv4", "correct_text": "   Broadcast and Multicast Service Controller Domain Name List\r\n   Option for DHCPv4", "notes": "\r\n", "submit_date": "2005-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "146", "doc-id": "RFC4277", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Relationship to RFC 1773\r\n\r\nWhile studying RFC 4277, and re-reading its predecessor, RFC 1773,\r\nit became more and more unclear to me why RFC 1773 has not simply\r\nbeen declared being obsoleted by RFC 4277 - or perhaps being done\r\nso by RFC 4277 plus RFC 4276.\r\n\r\nAlmost all material contained in RFC 1773 has been expanded upon\r\nin RFC 4277; only a few historical noted have been dropped -\r\nwhich arguably are of no more interest from the point of view\r\nof current standardization and implementation efforts.\r\n\r\nHence, RFC 4277 apparently is a perfect replacement for RFC 1773,\r\nand it would have added to clarity about the status of the memos\r\nmaking this visible in the RFC index by means of a pair of\r\nrelated  OBSOLETED BY  and  OBSOLETES  notes.\r\n\r\n\r\n(2)  Inconsistencies with References\r\n\r\nThere are a few issues with References in RFC 4277:\r\n\r\n(2a)\r\n\r\nRFC 1965 had been obsoleted by RFC 3065, as noted in the text,\r\nand consistently, the Ref. [RFC1965] has been placed into the\r\nInformative References (Section 22.2), whereas [RFC3065] has\r\nbeen recorded as a Normative Reference.  That's pretty o.k.\r\n\r\nA similar relation exists between RFC 1966 and RFC 2796 (that\r\nhad obsoleted the former), and the text contains a similar,\r\nparallel treatment of this RFC pair as the pair noted above.\r\nNevertheless, the Ref. [RFC1966] has been placed in Section\r\n22.1, Normative References.\r\nThat seems to be inappropriate and inconsistent; [RFC1996]\r\nshould have been filed as an Informative Reference.\r\n\r\n(2b)\r\n\r\nThe first sentence of Section 3, on page 3, contains a citation to\r\n\"[BGP-MIB]\" that can be assumed from the context to mean RFC 4273,\r\nbut there's no such entry in Section 22 !\r\n\r\nConsistently with (2a) above, the Ref. [RFC1657] from Section 22.1\r\nshould better have been placed into Section 22.2, and instead of it,\r\na new entry [BGP-MIB] pointing to RFC 4273 inserted into the\r\nNormative References, Section 22.1.\r\n\r\n\r\nThe following text might be considered for inclusion in an RFC\r\nErrata Note for RFC 4277 to resolve isuues (2a) and (2b):\r\n\r\n-----\r\nRFC 4271, in Section 22.1, \"Normative References\", on page 17,\r\ncontains entries labeled  '[RFC1966]'  and  '[RFC1657]' .\r\nThese entries should have been placed into Section 22.2,\r\n\"Informative References\", instead.\r\n\r\nAdditionally, another entry should be added to Section 22.1 :\r\n\r\n   [BGP-MIB]   Haas, J., Ed. and S. Hares, Ed., \"Definitions of Managed\r\n               Objects for BGP-4\", RFC 4273, January 2006.\r\n-----\r\n\r\n\r\n(3)  further errata (typos)\r\n\r\n(3a)\r\n\r\nThe example network topology diagram in Section 8, on mid-page 8,\r\n\r\n                     /---- transit B ----\\\r\n         end-customer                     transit A----\r\n                     /---- transit C ----\\\r\n\r\nshould say:\r\n\r\n                     /---- transit B ----\\\r\n         end-customer                     transit A----\r\n                     \\---- transit C ----/\r\n\r\nRationale: cf. RFC 1773 !\r\n\r\n(3b)\r\n\r\nConforming to standard IPsec terminology, the first sentence\r\nin Section 17.2 of RFC 4277 (on page 14),\r\n\r\n                                    vvv\r\n   BGP can run over IPsec, either in a tunnel or in transport mode,\r\n   where the TCP portion of the IP packet is encrypted.  [...]\r\n\r\nshould better say:\r\n                                           vvvvvv\r\n|  BGP can run over IPsec, either in tunnel mode or in transport mode,\r\n   where the TCP portion of the IP packet is encrypted.  [...]\r\n\r\nor even, omitting that first 'mode' entirely,\r\n\r\n|  BGP can run over IPsec, either in tunnel or in transport mode, where\r\n   the TCP portion of the IP packet is encrypted.  [...]\r\n\r\n(3c)\r\n\r\nThe last sentence in Section 21 of RFC 4277, on page 16,\r\n\r\n   Finally, we'd like to think the IDR WG for general and specific input\r\n   that contributed to this document.\r\n\r\nshould say:\r\n                           v\r\n|  Finally, we'd like to thank the IDR WG for general and specific input\r\n   that contributed to this document.", "correct_text": "", "notes": "from pending", "submit_date": "2006-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "432", "doc-id": "RFC2459", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Appendix D.3: ", "orig_text": "   0587 03 81 81      47: . BIT STRING", "correct_text": "   0587 03 81 81      129: . BIT STRING\n", "notes": "", "submit_date": "2001-02-13", "submitter_name": "Yaron Sella", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "495", "doc-id": "RFC2119", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "1. MUST   This word, or the terms \"REQUIRED\" or \"SHALL\", mean that the\r\n   definition is an absolute requirement of the specification.\r\n\r\n", "correct_text": "1. MUST   This word, or the terms \"REQUIRED\" or \"SHALL\", means that the\r\n   definition is an absolute requirement of the specification.\r\n", "notes": " \r\n", "submit_date": "2001-05-31", "submitter_name": "Davidson, Malcolm", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "48", "doc-id": "RFC4588", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   The following MIME subtype name and parameters are introduced in this\r\n   document: \"rtx\", \"rtx-time\", and \"apt\".\r\n\r\n   The binding used for the retransmission stream to the payload type\r\n   number is indicated by an rtpmap attribute.  The MIME subtype name\r\n   used in the binding is \"rtx\".\r\n\r\n   The \"apt\" (associated payload type) parameter MUST be used to map the\r\n   retransmission payload type to the associated original stream payload\r\n   type.  If multiple original payload types are used, then multiple\r\n   \"apt\" parameters MUST be included to map each original payload type\r\n   to a different retransmission payload type.\r\n", "correct_text": "   The following MIME subtype name and parameters are introduced in this\r\n   document: \"rtx\", \"rtx-time\", and \"apt\".\r\n\r\n   The binding used for the retransmission stream to the payload type\r\n   number is indicated by an rtpmap attribute.  The MIME subtype name\r\n   used in the binding is \"rtx\".  The MIME type of the retransmission\r\n   stream MUST be the same as the MIME type of the original stream.\r\n\r\n   The \"apt\" (associated payload type) parameter MUST be used to map the\r\n   retransmission payload type to the associated original stream payload\r\n   type.  If multiple original payload types are used, then multiple\r\n   \"apt\" parameters MUST be included to map each original payload type\r\n   to a different retransmission payload type.", "notes": "This text only addresses the use of the media *sub*-type.  Apparently,\r\nit is implied that the media *type* of the associated streams match,\r\nbut I could not find a statement to this end in the RFC.\r\n\r\n(In accordance with the language of RFC 4588, but contrary to BCP 13,\r\n RFC 4288, I have again used the traditional wording \"MIME type\" here\r\n instead of the currently recommended \"media type\".)\r\n\r\nfrom pending\r\n\r\n--VERIFIER COMMENT--\r\n\r\nThanks for your comments. However, I don't consider them worth of correction. Most are just editorial nits, some of which are even wrong. So, for the time being as Joerg said:\r\n\r\n\"We will be happy to archive these and migt consider them if we do a revision of the RFC. But an errata document would only make sense if there is something seriously hindering interoperability. I have not seen anything falling into this category (well, and there are implementations out there from the spec).\"", "submit_date": "2006-08-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Jose Rey", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "49", "doc-id": "RFC4587", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n(1)  \"Updates\" relationship missing in RFC header & RFC index\r\n\r\nIn the Introduction (3rd paragraph on page 3) the RFC says:\r\n\r\n   This document obsoletes RFC 2032 and updates the \"video/h261\" media\r\n   type that was registered in RFC 3555.\r\n\r\nSimilar wording is in Section 6.1 (see below).\r\n\r\nTherefore, I expect that the RFC heading should have been amended\r\nby a \"Updates: 3555\" line, and that this relationship be visible in\r\nthe RFC index.\r\n\r\n\r\n(2)  Misleading packetization specification\r\n\r\nOn page 4, in the first paragraph of Section 3.2, RFC 4587 says:\r\n\r\n   [..].  The 512-bit frames are then interlaced with an audio stream\r\n   and transmitted over px 64 kbps circuits according to specification\r\n   H.221 [H221].\r\n                        ^^^^^^^^^^\r\n\r\nFor clarity, it should say:\r\n\r\n   [..].  The 512-bit frames are then interlaced with an audio stream\r\n   and transmitted over p x 64 kbps circuits according to specification\r\n   H.221 [H221].\r\n                        ^^^^^^^^^^^\r\n\r\n(and/or replace the 'x' by an asterisk, '*' !)\r\n\r\n(2')\r\nThe same issue recurs on page 15, in the first item of Section 11.1,\r\nthe Normative Reference, [H261] .\r\n\r\n\r\n(3)  Improper frequency specification\r\n\r\nAccording to the applicable ISO standards on Measures and Weights,\r\nthere is never a special sign to be written between the numeric value\r\nand the physical unit of any dimensioned physical value.\r\n(Preferrably, there should not even be any white space between.)\r\n\r\nTherefore, in Section 4.1 of RFC 4587, at the bottom of page 5,\r\nwhere the RFC says:\r\n\r\n         [...].  For H.261 video streams, the RTP timestamp is based on\r\n|    a 90-kHz clock.  This clock rate is a multiple of the natural H.261\r\n     frame rate (i.e., 30000/1001 or approximately 29.97 Hz).  [...]\r\n\r\nit in fact should say:\r\n\r\n         [...].  For H.261 video streams, the RTP timestamp is based on\r\n|    a 90 kHz clock.  This clock rate is a multiple of the natural H.261\r\n     frame rate (i.e., 30000/1001 or approximately 29.97 Hz).  [...]\r\n\r\n(Rigorous application of the above principles, taking 'bit' as a unit\r\nspecification, would also forbid data amount spellings like \"512-bit\"\r\nin item (2) above!)\r\n\r\n\r\n(4)  misaligned 'ruler lines' above data format diagrams\r\n\r\nAccording to legacy and current RFC author guidelines, the ruler lines\r\nabove the two data format diagrams on page 6 (within Section 4.1):\r\n\r\n|      0                   1                   2                   3\r\n        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nshould be indented as follows:\r\n\r\n|       0                   1                   2                   3\r\n        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\n(5)  improper wording (2 instances)\r\n\r\nNear the top of page 7, the explanations for the (I) and (V) bits\r\nboth contain the sentence:\r\n\r\n                   vvvvvvv\r\n       [...].  The meaning of this bit should not be changed during the\r\n      course of the RTP session.\r\n\r\nThis is abuse of language.\r\nThe *meaning* of the bit -- i.e., the bit *values* -- is given in the\r\ntext preceding the quoted sentence, and thus intrinsically cannot be\r\nchanged during the course of the RTP session.\r\nWhat in fact should not be changed during the RTP session is the\r\n*value* of these bits!\r\n\r\nTherefore, the RFC should say (in both places):\r\n\r\n                   vvvvv\r\n|      [...].  The value of this bit should not be changed during the\r\n      course of the RTP session.\r\n\r\n\r\n(6)  typo\r\n\r\nIn Section 5, on page 9, the last sentence of the bullet (3) says:\r\n\r\n                                [...].  This mode is particularly\r\n        efficient in point-to-point connection or when the number of\r\n        decoders is low.\r\n\r\nIt should say:\r\n                                [...].  This mode is particularly\r\n|       efficient in a point-to-point connection or when the number of\r\n        decoders is low.\r\n\r\nor:\r\n                                [...].  This mode is particularly\r\n|       efficient in point-to-point connections or when the number of\r\n        decoders is low.\r\n\r\n\r\n(7)  misleading section headlines\r\n\r\nIn the RFC text, Section\r\n\r\n  6.  IANA Considerations\r\n\r\ncontains the following sub-sections:\r\n\r\n  6.1.  Media Type Registrations\r\n\r\n  6.1.1.  Registration of MIME Media Type video/H261\r\n\r\n  6.2.  SDP Parameters\r\n\r\n  6.2.1.  Usage with the SDP Offer Answer Model\r\n\r\nOnly Section 6.1[.1] contains information addressed to the IANA.\r\nTherefore, for clarity (and to avoid undue burden for the IANA),\r\nthe first two of the headlines quoted above should effectively be\r\nexchanged.  And, there is only one (1) registration!\r\nHence, singular should be used.\r\n\r\nFurthermore, the text of Section 6.1 contains improper wording\r\nand has no trailing fullstop (dot) character:\r\n\r\n|  This section describes the media types and names associated with this\r\n|  payload format.  The section updates the previous registered version\r\n   in RFC 3555 [RFC3555].  This registration uses the template defined\r\n|  in RFC 4288 [RFC4288]\r\n\r\nThus, the headline\r\n\r\n6.  IANA Considerations\r\n\r\nshould be corrected to say, e.g.:\r\n\r\n6.  Media Type video/H261\r\n\r\nand\r\n\r\n6.1.  Media Type Registrations\r\n\r\n   [... paragraph quoted above ... ]\r\n\r\nshould be replaced by:\r\n\r\n6.1  IANA Considerations\r\n\r\n|  This section describes the media type and parameters associated with\r\n|  this payload format.  It updates the previous registered version in\r\n   RFC 3555 [RFC3555].  This registration uses the template defined\r\n|  in RFC 4288 [RFC4288].\r\n\r\n\r\n(8)  typo\r\n\r\nThe last sentence (of the last bullet) of Section 6.2, on page 12,\r\nsays:\r\n                                     [...].  These parameters are\r\n      expressed as a MIME media type string, in the form of as a\r\n      semicolon-separated list of parameters\r\n                                                           ^^^^\r\nIt should say:\r\n                                     [...].  These parameters are\r\n|     expressed as a MIME media type string, in the form of a\r\n      semicolon-separated list of parameters\r\n\r\n\r\n(9)  typo and misleading wording in Section 6.2.1\r\n\r\nThe first paragraph of Section 6.2.1, on page 12, says:\r\n\r\n   When H.261 is offered over RTP using SDP in an Offer/Answer model\r\n   [RFC3264] the following considerations are necessary.\r\n\r\nThis could easily be misunderstood as talking about an\r\n'SDP offer over RTP'.\r\nThe RFC should say instead (exchanging two pairs of words):\r\n\r\n   When H.261 over RTP is offered using SDP in an Offer/Answer model\r\n   [RFC3264] the following considerations are necessary.\r\n\r\nSubsequently, the paragraph with the headline \"Picture sizes and MPI\",\r\n\r\n   Supported picture sizes and their corresponding minimum picture\r\n   interval (MPI) information for H.261 can be combined.  All picture\r\n   sizes may be advertised to the other party, or only a subset of it.\r\n   Using the recvonly or sendrev direction attribute, a terminal SHOULD\r\n   announce those picture sizes (with their MPIs) that it is willing to\r\n   receive.  For example, CIF=2 means that receiver can receive a CIF\r\n   picture and that the frame rate SHALL be less then 15 frames per\r\n   second.\r\n\r\nShould be corrected and clarified to say:\r\n\r\n   Supported picture sizes and their corresponding minimum picture\r\n   interval (MPI) information for H.261 can be combined.  All picture\r\n   sizes may be advertised to the other party, or only a subset of it.\r\n|  Using the recvonly or sendrec direction attribute, a terminal SHOULD\r\n   announce those picture sizes (with their MPIs) that it is willing to\r\n|  receive.  For example, CIF=2 means that the SDP sender can receive a\r\n   CIF picture and that the frame rate SHALL be less then 15 frames per\r\n   second.\r\n\r\n(There is no 'sendrev' direction attribute, and it is important to\r\nexplicitely differentiate between senders and receivers of SDP and\r\nmedia, respectively!)\r\n\r\nFinally, the second paragraph on page 13,\r\n\r\n   An example of media representation in SDP is as follows CIF at 15\r\n   frames per second, QCIF at 30 frames per second and annex D\r\n\r\nshould better say:\r\n\r\n|  An example of media representation in SDP is as follows:\r\n   CIF at 15 frames per second, QCIF at 30 frames per second and annex D\r\n\r\nor, perhaps even better:\r\n\r\n|  An example of media representation in SDP, for CIF at 15 frames per\r\n|  second, QCIF at 30 frames per second and annex D, is as follows:\r\n", "correct_text": "", "notes": "from pending", "submit_date": "2006-10-31", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "50", "doc-id": "RFC4586", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   We can see that in configurations where both agents use the new\r\n   timing rules each of them uses, at most, about 2.5% of the session\r\n   bandwidth for RTP, which sums up to 5% of the session bandwidth for\r\n   both.", "correct_text": "   We can see that in configurations where both agents use the new\r\n   timing rules each of them uses, at most, about 2.5% of the session\r\n   bandwidth for RTCP, which sums up to 5% of the session bandwidth for\r\n   both.  ", "notes": "RTP -> RTCP\r\n\r\nfrom pending", "submit_date": "2006-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "51", "doc-id": "RFC4585", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Errors (11)-(19) of 19", "orig_text": "(11)  [formatting issue]\r\n\r\nIn Section 6, the text around the page break from page 31 to page 32\r\nis not formatted properly.\r\nThe RFC says:\r\n\r\n      [...]\r\n      audio and DTMF) or when codec changes occur, the payload type\r\n      information may need to be conveyed explicitly as part of the FB\r\n      message.  This applies to all\r\n << page break >>\r\n      payload-specific as well as application layer FB messages.  It is\r\n      up to the specification of an FB message to define how payload\r\n      type information is transmitted.\r\n\r\nIt should say:\r\n\r\n      [...]\r\n      audio and DTMF) or when codec changes occur, the payload type\r\n      information may need to be conveyed explicitly as part of the FB\r\n      message.  This applies to all payload-specific as well as\r\n << page break >>\r\n      application layer FB messages.  It is up to the specification of\r\n      an FB message to define how payload type information is\r\n      transmitted.\r\n\r\n\r\n(12)  [inconsistent text]\r\n\r\nStill in Section 6, the second paragraph on page 32 (immediately\r\nfollowing the text quotation in item (11) above) says:\r\n\r\n                         vvv\r\n|  This document defines two transport layer and three (video) payload-\r\n   specific FB messages as well as a single container for application\r\n   layer FB messages.  Additional transport layer and payload-specific\r\n   FB messages MAY be defined in other documents and MUST be registered\r\n   through IANA (see Section 9, \"IANA Considerations\").\r\n\r\nIt should say:\r\n                         vvv\r\n|  This document defines one transport layer and three (video) payload-\r\n   specific FB messages as well as a single container for application\r\n   layer FB messages.  Additional transport layer and payload-specific\r\n   FB messages MAY be defined in other documents and MUST be registered\r\n   through IANA (see Section 9, \"IANA Considerations\").\r\n\r\nRationale:\r\nCf. the third paragraph of Section 6, on page 31, and\r\nthe subsequent pages, in particular page 34, where the\r\nsecond paragraph of Section 6.2 says:\r\n\r\n|  A single general purpose transport layer FB message is defined in\r\n   this document: Generic NACK.  It is identified by means of the FMT\r\n   parameter as follows:\r\n\r\n   [...]\r\n\r\n(And so it does, per Section 6.2.1.)\r\n\r\n\r\n(13)  [incomplete specification?]\r\n\r\nWithin Section 6.1, the last paragraph on page 33 says:\r\n\r\n   Each RTCP feedback packet MUST contain at least one FB message in the\r\n   FCI field.  Sections 6.2 and 6.3 define for each FCI type, whether or\r\n   not multiple FB messages MAY be compressed into a single FCI field.\r\n|  If this is the case, they MUST be of the same type, i.e., same FMT.\r\n|  If multiple types of feedback messages, i.e., several FMTs, need to\r\n   be conveyed, then several RTCP FB messages MUST be generated and\r\n   SHOULD be concatenated in the same compound RTCP packet.\r\n\r\nI strongly suspect -- and this is supported by the examples in the\r\nRFC -- that feedback packets to be combined MUST also have the same\r\npayload type (PT), not only agree in their FMT values.\r\nOtherwise, there would be no way to carry the different PT values\r\nin the FB message according to the format specified in Figure 3.\r\n\r\nTherefore, the RFC should say:\r\n\r\n   Each RTCP feedback packet MUST contain at least one FB message in the\r\n   FCI field.  Sections 6.2 and 6.3 define for each FCI type, whether or\r\n   not multiple FB messages MAY be compressed into a single FCI field.\r\n|  If this is the case, they MUST be of the same type, i.e., same PT and\r\n|  the same FMT.  If multiple types of feedback messages, i.e., several\r\n|  PTs and/or several FMTs, need to be conveyed, then several RTCP FB\r\n   messages MUST be generated and SHOULD be concatenated in the same\r\n   compound RTCP packet.\r\n\r\n(Authors, please supply alternative wording, if you desire.)\r\n\r\nNote:\r\nPerhaps, this issue arised because of the slightly differing\r\nsemantics implied for the various usages of the term \"FB message\"\r\nin Section 6.1 -- (a) the whole RTCP FB message, and (b) a semantic\r\nentity carried in the FCI field of that RTCP message.\r\nFuture updates to the RFC might try further clarifications of the\r\ntext to avoid this subtle sematic overloading.\r\n\r\n\r\n(14)  [missing article]\r\n\r\nThe last paragraph of Section 6.3, at the bottom of page 35, says:\r\n\r\n   The following subsections define the FCI formats for the payload-\r\n|  specific FB messages, Section 6.4 defines FCI format for the\r\n   application layer FB message.\r\n\r\nIt should say:\r\n\r\n   The following subsections define the FCI formats for the payload-\r\n|  specific FB messages, Section 6.4 defines the FCI format for the\r\n   application layer FB message.\r\n\r\n\r\n(15)  [extraneous words]\r\n\r\nThe second paragraph of Section 6.3.1.1, on page 36, says:\r\n\r\n   Other RTP payload specifications such as RFC 2032 [6] already define\r\n|  a feedback mechanism for some for certain codecs.  An application\r\n   supporting both schemes MUST use the feedback mechanism defined in\r\n   this specification when sending feedback.  For backward compatibility\r\n   reasons, such an application SHOULD also be capable to receive and\r\n   react to the feedback scheme defined in the respective RTP payload\r\n   format, if this is required by that payload format.\r\n\r\nIt should say:\r\n\r\n   Other RTP payload specifications such as RFC 2032 [6] already define\r\n|  a feedback mechanism for certain codecs.  An application supporting\r\n   both schemes MUST use the feedback mechanism defined in this\r\n   specification when sending feedback.  For backward compatibility\r\n   reasons, such an application SHOULD also be capable to receive and\r\n   react to the feedback scheme defined in the respective RTP payload\r\n   format, if this is required by that payload format.\r\n\r\n\r\n(16)  [misleading wording]\r\n\r\nThe first paragraph of Section 6.3.2.2, on page 37, says:\r\n\r\n                                                     vvvvv\r\n|  The Slice Loss Indication uses one additional FCI field, the content\r\n   of which is depicted in Figure 6.  The length of the FB message MUST\r\n   be set to 2+n, with n being the number of SLIs contained in the FCI\r\n   field.\r\n\r\nTo avoid the semantic overloading of the word \"field\", it should\r\nperhaps better say:\r\n                                                     vvvv\r\n|  The Slice Loss Indication uses one additional FCI word, the content\r\n   of which is depicted in Figure 6.  The length of the FB message MUST\r\n   be set to 2+n, with n being the number of SLIs contained in the FCI\r\n   field.\r\n\r\n\r\n(17)  [typo]\r\n\r\nThe first paragraph of Section 6.3.3.1, on page 39, says:\r\n\r\n                             v\r\n                                   [...].  As this reference picture is\r\n|  temporally further away then usual, the resulting predictively coded\r\n   picture will use more bits.\r\n\r\nIt should say:\r\n                             v\r\n                                   [...].  As this reference picture is\r\n|  temporally further away than usual, the resulting predictively coded\r\n   picture will use more bits.\r\n\r\n\r\n(18)  [inappropriate wording]\r\n\r\nThe first paragraph of Section 8, on page 42, says:\r\n\r\n   RTP packets transporting information with the proposed payload format\r\n   are subject to the security considerations discussed in the RTP\r\n   specification [1] and in the RTP/AVP profile specification [2].  This\r\n   profile does not specify any additional security services.\r\n\r\nThe wording of the first sentence is inappropriate for this RFC.\r\n(It perhaps has been copied unchanged from an RFC with an RTP Payload\r\nspecification.)\r\n\r\nRFC 4585 should say instead:\r\n\r\n|  RTP packets transporting information as defined in various payload\r\n|  formats supporting this profile are subject to the security\r\n   considerations discussed in the RTP specification [1] and in the\r\n   RTP/AVP profile specification [2].  This profile does not specify any\r\n   additional security services.\r\n\r\n\r\n(19)  [redundant Ref.]\r\n\r\nThe Normative Reference [7] (in Section 11.1, on page 48) and\r\nthe Informative Reference [20] (in Section 11.2, on page 49)\r\nboth point to RFC 3448.\r\n([7] and [20] are referred to once each in the RFC text.)\r\n\r\nThis is unusual and unexpected.  Only one pointer to RFC 3448\r\nshould have been specified.  Authors, please check.\r\n", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\nThanks for the review.  I have only quickly skimmed your comments\r\nand there does not seem to be anything serious.\r\n\r\nWe will be happy to archive these and migt consider them if\r\nwe do a revision of the RFC.  But an errata document would\r\nonly make sense if there is something seriously hindering\r\ninteroperability.  I have not seen anything falling into this\r\ncategory (well, and there are implementations out there from\r\nthe spec).\r\n", "submit_date": "2006-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Joerg Ott", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "111", "doc-id": "RFC4366", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  imprecise syntax description for `ciphersuites`\r\n\r\nThis is an issue inherited from RFC 2246, RFC 3546, and RFC 4346;\r\nI already have reported this issue against RFC 4346 (and RFC 4347\r\nas well).\r\n\r\nSection 7.4.1.2 of RFC 4346, on page 37 of RFC 4346 defines the syntax:\r\n\r\n      uint8 CipherSuite[2];    /* Cryptographic suite selector */\r\n\r\nAccording to the specifications given in Section 4.3 of RFC 4346,\r\nvectors of type CipherSuite strictly must have byte lengths being\r\na multiple of 2.\r\nThis also means that the upper bound for a varaiable-length array\r\nof type CipherSuite should always be a multiple of 2.\r\n\r\nHence, the declaration in Section 2.1 of RFC 4366 (on page 5),\r\nan extended version of the basic declaration in Section 7.4.1.2\r\nof RFC 4346 (on top of page 38), stating\r\n\r\n         struct {\r\n             ProtocolVersion client_version;\r\n             Random random;\r\n             SessionID session_id;\r\n             CipherSuite cipher_suites<2..2^16-1>;\r\n             CompressionMethod compression_methods<1..2^8-1>;\r\n             Extension client_hello_extension_list<0..2^16-1>;\r\n         } ClientHello;\r\n\r\nshould better say:\r\n\r\n         struct {\r\n             ProtocolVersion client_version;\r\n             Random random;\r\n             SessionID session_id;\r\n|            CipherSuite cipher_suites<2..2^16-2>;\r\n             CompressionMethod compression_methods<1..2^8-1>;\r\n             Extension client_hello_extension_list<0..2^16-1>;\r\n         } ClientHello;\r\n\r\n\r\n(2)  incomplete semantics specified for \"server_name\" extension\r\n\r\nSection 3.1 of RFC 4366, on page 9, defines the \"server_name\"\r\nextension as containing a *list* of `ServerName` structures.\r\n\r\nOn page 10, the same section says:\r\n\r\n   It is RECOMMENDED that clients include an extension of type\r\n   \"server_name\" in the client hello whenever they locate a server by a\r\n   supported name type.\r\n\r\n   A server that receives a client hello containing the \"server_name\"\r\n   extension MAY use the information contained in the extension to guide\r\n   its selection of an appropriate certificate to return to the client,\r\n   and/or other aspects of security policy.  In this event, the server\r\n   SHALL include an extension of type \"server_name\" in the (extended)\r\n   server hello.  The \"extension_data\" field of this extension SHALL be\r\n   empty.\r\n\r\n   If the server understood the client hello extension but does not\r\n|  recognize the server name, it SHOULD send an \"unrecognized_name\"\r\n             ^^^\r\n   alert (which MAY be fatal).\r\n\r\nand on page 19, Section 4 defines the error alert,\r\n\r\n   -  \"unrecognized_name\": this alert is sent by servers that receive a\r\n|     server_name extension request, but do not recognize the server\r\n      name.  This message MAY be fatal.                   ^^^\r\n\r\nAll these clauses apparently state the semantics for the \"server_name\"\r\nextension solely in the case where the data field of the extension in\r\nthe (extended) Client Hello contains a *single* `ServerName` structure.\r\n\r\nIMHO, if the client, as allowed by the syntax, indeed specifies\r\nmultiple names in the \"server_name\" extension -- a feature that\r\nseems to be useful in certain scenarios --, it needs to get feedback\r\nfrom the server as to which of the specified names has been used for\r\nthe purpose described in the second paragraph cited above.\r\nHence, the server should better be instructed by the specification\r\nto include the selected name in the \"server_name\" extension returned\r\nto the client in the (extended) Server Hello.\r\nFor backwards compatibility, the specification should perhaps\r\nprescribe to omit this feedback, reverting to the specification\r\ncited above) in the case that the Client Hello received contained\r\nonly a single server name.\r\n\r\nIn parallel, the semantics of the \"unrecognized_name\" alerts should\r\nbe amended to mean: all received names are unrecognized.\r\n\r\n\r\n(3)  incomplete / outdated referencing text\r\n\r\nThe paragraph of Section 3.2 spanning from page 11 to page 12, says:\r\n\r\n                               [...].  For example, if the negotiated\r\n<page break>\r\n   length is 2^9=512, then for currently defined cipher suites (those\r\n   defined in [TLS], [KERB], and [AESSUITES]), and when null compression\r\n   is used, the record layer output can be at most 793 bytes: 5 bytes of\r\n   headers, 512 bytes of application data, 256 bytes of padding, and 20\r\n   bytes of MAC.  [...]\r\n\r\nThis apparently is not up to date.  I propose to either substitute\r\n\"[TLSbis],\" for \"[TLS],\" in the text above -- thus referring only to\r\ncurrent specifications --, or even to substitute \"[TLS] and [TLSbis],\"\r\nfor \"[TLS],\" there -- thus honoring to the predecessor.\r\n\r\n\r\n(4)   spurious blank line\r\n\r\nWithin Section 3.6, the 5th paragraph on page 18 is interrupted\r\nby a blank line in the middle of a sentence.\r\nPerhaps this is a formatting artifact inherited from the page break\r\nthat was at this place in the text in RFC 3546.\r\n\r\nThus, the text body:\r\n\r\n   Servers return a certificate response along with their certificate by\r\n   sending a \"CertificateStatus\" message immediately after the\r\n   \"Certificate\" message (and before any \"ServerKeyExchange\" or\r\n   \"CertificateRequest\" messages).  If a server returns a\r\n|\r\n   \"CertificateStatus\" message, then the server MUST have included an\r\n   extension of type \"status_request\" with empty \"extension_data\" in the\r\n   extended server hello.\r\n\r\nshould be joined to say:\r\n\r\n   Servers return a certificate response along with their certificate by\r\n   sending a \"CertificateStatus\" message immediately after the\r\n   \"Certificate\" message (and before any \"ServerKeyExchange\" or\r\n   \"CertificateRequest\" messages).  If a server returns a\r\n   \"CertificateStatus\" message, then the server MUST have included an\r\n   extension of type \"status_request\" with empty \"extension_data\" in the\r\n   extended server hello.\r\n\r\n\r\n(5)  punctuation issue in Informative Reference\r\n\r\nThe following Informative Reference entry on page 28 contains\r\nsyntactically inconsistent punctuation:\r\n\r\n   [MAILINGLIST]  J. Mikkelsen, R. Eberhard, and J. Kistler, \"General\r\n                  ClientHello extension mechanism and virtual hosting,\"\r\n                  ietf-tls mailing list posting, August 14, 2000.\r\n\r\nshould say:\r\n\r\n   [MAILINGLIST]  J. Mikkelsen, R. Eberhard, and J. Kistler, \"General\r\n|                 ClientHello extension mechanism and virtual hosting\",\r\n                  ietf-tls mailing list posting, August 14, 2000.", "correct_text": "", "notes": "All excerpts from the RFC text are taken literally, keeping their\r\noriginal formatting, and modified text is formatted in conformance\r\nwith RFC guidelines again.\r\n\r\nI use change bars ('|' in column 1) and casual up/down pointing\r\ntags ('^^^' / 'vvv' marks in extra lines) to emphasize the location\r\nof textual issues and/or proposed textual enhancements/corrections.\r\n\r\nIssue (2) above certainly needs discussion; perhaps you know what\r\nonce was intended.  The other issues seem to be straightforward.\r\n\r\nfrom pending", "submit_date": "2006-05-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "David Hopwood", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "112", "doc-id": "RFC4365", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "       If these are desired, they must be provided by mechanisms that\r\n       are outside the scope of the VPN mechanisms.  For instance, the\r\n       users can use secure protocols on an end-to-end basis, e.g.,\r\n       IPsec, Secure Shell (SSH), Secure Sockets Layer (SSL), etc.\r\n\r\n", "correct_text": "\r\n\r\n       If these are desired, they must be provided by mechanisms that\r\n       are outside the scope of the VPN mechanisms.  For instance, the\r\n       users can use secure protocols on an end-to-end basis, e.g.,\r\n|      IPsec, Secure Shell (SSH), Transport Layer Security (TLS), etc.\r\n                                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n\r\n", "notes": "", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2938", "doc-id": "RFC6321", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.1.2", "orig_text": "These are an IC:latitude element and an IC:longitude\r\nelement, each of which contains float values.", "correct_text": " These are an IC:latitude element and an IC:longitude\r\n element, each of which contains a float value.", "notes": "The existing text erroneously suggests that multiple values could be contained by each element.", "submit_date": "2011-08-15", "submitter_name": "Hamish Lawson", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2464", "doc-id": "RFC1123", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1.2.6", "orig_text": "            IMPLEMENTATION:\r\n                 The format of the 227 reply to a PASV command is not\r\n                 well standardized.  In particular, an FTP client cannot\r\n                 assume that the parentheses shown on page 40 of RFC-959\r\n                 will be present (and in fact, Figure 3 on page 43 omits\r\n                 them).", "correct_text": "            IMPLEMENTATION:\r\n                 The format of the 227 reply to a PASV command is not\r\n                 well standardized.  In particular, an FTP client cannot\r\n                 assume that the parentheses shown on page 40 of RFC-959\r\n                 will be present (and in fact, Figure 3 on page 45 omits\r\n                 them).", "notes": "In RFC 959, Figure 3 is actually on page 45, not page 43.\n --VERIFIER NOTES-- \n   I see figure 3 at the top of page 45.", "submit_date": "2010-08-15", "submitter_name": "Anthony Bryan", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "274", "doc-id": "RFC3420", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Normative References, it says:", "orig_text": "   [1]  Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, A.,\n        Peterson, J., Sparks, R., Handley, M. and E. Schooler, \"SIP:\n        Session Initiation Protocol\", RFC 3265, June 2002.", "correct_text": "   [1]  Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, A.,\n        Peterson, J., Sparks, R., Handley, M. and E. Schooler, \"SIP:\n        Session Initiation Protocol\", RFC 3261, June 2002.", "notes": "", "submit_date": "2005-06-08", "submitter_name": "Ged Davies", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "275", "doc-id": "RFC3420", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The \"short title\" in the page headings, is missing an 's'.  \n\nIt currently says:\n", "orig_text": "Internet Media Type message/ipfrag  ", "correct_text": "Internet Media Type message/sipfrag  ", "notes": "\n", "submit_date": "2004-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "52", "doc-id": "RFC4584", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.6", "orig_text": "   IPv6 Neighbor Discovery changes are also defined in\r\n   <netinet/icmp6.h>.\r\n\r\n      New 'Home Agent' flag in router advertisement:  #define\r\n      ND_RA_FLAG_HOMEAGENT   0x20  /* Home Agent flag in RA */\r\n\r\n      New Router flag with prefix information of the home agent:\r\n      #define  ND_OPT_PI_FLAG_ROUTER  0x20  /* Router flag in PI */\r\n \r\n   As per the Mobile IPv6 specification [2], Section 7.2, a Home Agent\r\n   MUST include at least one prefix option with the Router Address (R)\r\n   bit set.  Advanced Socket API [1] defines data structure for prefix\r\n   option as follows:", "correct_text": "   IPv6 Neighbor Discovery changes are also defined in\r\n   <netinet/icmp6.h>.\r\n\r\n   New 'Home Agent' flag in router advertisement:\r\n \r\n      #define  ND_RA_FLAG_HOMEAGENT   0x20  /* Home Agent flag in RA */\r\n\r\n   New Router flag with prefix information of the home agent:\r\n \r\n      #define  ND_OPT_PI_FLAG_ROUTER  0x20  /* Router flag in PI */\r\n\r\n   As per the Mobile IPv6 specification [2], Section 7.2, a Home Agent\r\n   MUST include at least one prefix option with the Router Address (R)\r\n   bit set.  The Advanced Socket API [1] defines a data structure for\r\n   the prefix option as follows:\r\n", "notes": "separation of machine readable text and RFC text, and missing articles\r\n\r\nfrom pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Samita Chakrabarti", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "53", "doc-id": "RFC4577", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(2)  [orphaned inter-section references]\r\n\r\nSection 4.2.4 of RFC 4577 contains three (3) distinct references\r\nto itself.  This cannot have been intended.\r\n\r\nWithin Section 4.2.2, the last two paragraphs on page 11 say:\r\n\r\n                                                           vvvvv\r\n   A Domain Identifier is an eight-byte quantity that is a valid BGP\r\n|  Extended Communities attribute, as specified in Section 4.2.4.  If a\r\n   particular OSPF instance has a non-NULL Domain Identifier, when\r\n   routes from that OSPF instance are distributed by BGP as VPN-IPv4\r\n   routes, the routes MUST carry the Domain Identifier Extended\r\n   Communities attribute that corresponds to the OSPF instance's Primary\r\n   Domain Identifier.  If the OSPF instance's Domain Identifier is NULL,\r\n   the Domain Identifier Extended Communities attribute MAY be omitted\r\n   when routes from that OSPF instance are distributed by BGP;\r\n   alternatively, a value of the Domain Identifier Extended Communities\r\n|  attribute that represents NULL (see Section 4.2.4) MAY be carried\r\n   with the route.\r\n                                               ^^^^^\r\n   If the OSPF instances of an OSPF domain are given one or more non-\r\n   NULL Domain Identifiers, this procedure allows us to determine\r\n   whether a particular OSPF-originated VPN-IPv4 route belongs to the\r\n   same domain as a given OSPF instance.  We can then determine whether\r\n   the route should be redistributed to that OSPF instance as an inter-\r\n   area route or as an OSPF AS-external route.  Details can be found in\r\n|  Sections 4.2.4 and 4.2.8.1.\r\n            ^^^^^\r\n\r\nI am not sure what really was intended to say.  Perhaps, the\r\nsecond instance of \"4.2.4\" should be replaced by \"4.2.6\".\r\n\r\nPlease check and supply corrected text.\r\n\r\n", "correct_text": "", "notes": "The references to section 4.2.4 should be changed to 4.2.6", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3111", "doc-id": "RFC4447", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.3", "orig_text": "a) The first paragraph of Section 6.3, on page 22, says:\r\n\r\n   As mentioned above, the Group ID field of the PWid FEC element, or\r\n   the PW Grouping ID TLV used with the Generalized ID FEC element, can\r\n   be used to withdraw all PW labels associated with a particular PW\r\n   group.  [...]\r\n\r\nIt should say:\r\n\r\n   As mentioned above, the Group ID field of the PWid FEC element, or\r\n|  the PW Grouping ID TLV used with the Generalized PWid FEC element,\r\n   can be used to withdraw all PW labels associated with a particular PW\r\n   group.  [...]\r\n\r\nb) The second paragraph of Section 6.3, on top of page 23, says:\r\n\r\n   If the Generalized FEC element is used, the AGI, SAII, and TAII are\r\n   not present, the PW information length field is set to 0, the PW\r\n   Grouping ID TLV is included, the Interface Parameters TLV is not\r\n   present, and the Label TLV is not present.  For the purpose of this\r\n   document, this is called the \"wild card withdraw procedure\", and all\r\n   PEs implementing this design are REQUIRED to accept such withdrawn\r\n   message but are not required to send it.  Note that the PW Grouping\r\n   ID TLV only applies to PWs using the Generalized ID FEC element,\r\n   while the Group ID only applies to PWid FEC element.\r\n\r\nIt should say:\r\n\r\n|  If the Generalized PWid FEC element is used, the AGI, SAII, and TAII\r\n   are not present, the PW information length field is set to 0, the PW\r\n   Grouping ID TLV is included, the Interface Parameters TLV is not\r\n   present, and the Label TLV is not present.  For the purpose of this\r\n   document, this is called the \"wild card withdraw procedure\", and all\r\n   PEs implementing this design are REQUIRED to accept such withdrawn\r\n   message but are not required to send it.  Note that the PW Grouping\r\n|  ID TLV only applies to PWs using the Generalized PWid FEC element,\r\n   while the Group ID only applies to PWid FEC element.", "correct_text": "", "notes": " --VERIFIER NOTES-- \r\nThe terminology in the RFC is correct. \r\nIt is the \"generalized PW FEC Element\" and not the \"generalized PWid FEC element\"", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3125", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.5.1.1", "orig_text": "        /*\r\n         * Calculate offset, delay and dispersion, then pass to the\r\n         * clock filter.  Note carefully the implied processing.  The\r\n         * first-order difference is done directly in 64-bit arithmetic,\r\n         * then the result is converted to floating double.  All further\r\n         * processing is in floating-double arithmetic with rounding\r\n         * done by the hardware.  This is necessary in order to avoid\r\n         * overflow and preserve precision.\r\n         *\r\n         * The delay calculation is a special case.  In cases where the\r\n         * server and client clocks are running at different rates and\r\n         * with very fast networks, the delay can appear negative.  In\r\n         * order to avoid violating the Principle of Least Astonishment,\r\n         * the delay is clamped not less than the system precision.\r\n         */\r\n        if (p->pmode == M_BCST) {\r\n                offset = LFP2D(r->xmt - r->dst);\r\n                delay = BDELAY;\r\n                disp = LOG2D(r->precision) + LOG2D(s.precision) + PHI *\r\n                    2 * BDELAY;\r\n        } else {\r\n                offset = (LFP2D(r->rec - r->org) + LFP2D(r->dst -\r\n                    r->xmt)) / 2;\r\n                delay = max(LFP2D(r->dst - r->org) - LFP2D(r->rec -\r\n                    r->xmt), LOG2D(s.precision));\r\n                disp = LOG2D(r->precision) + LOG2D(s.precision) + PHI *\r\n                    LFP2D(r->dst - r->org);\r\n        }\r\n        clock_filter(p, offset, delay, disp);\r\n", "correct_text": "        /*\r\n         * Calculate offset, delay and dispersion, then pass to the\r\n         * clock filter.  Note carefully the implied processing.  The\r\n         * first-order difference is done directly in 64-bit arithmetic,\r\n         * then the result is converted to floating double.  All further\r\n         * processing is in floating-double arithmetic with rounding\r\n         * done by the hardware.  This is necessary in order to avoid\r\n         * overflow and preserve precision.\r\n         *\r\n         * The delay calculation is a special case.  In cases where the\r\n         * server and client clocks are running at different rates and\r\n         * with very fast networks, the delay can appear negative.  In\r\n         * order to avoid violating the Principle of Least Astonishment,\r\n         * the delay is clamped not less than the system precision.\r\n         */\r\n        if (p->pmode == M_BCST) {\r\n                offset = LFP2D(r->xmt - r->dst);\r\n                delay = BDELAY;\r\n                disp = LOG2D(r->precision) + LOG2D(s.precision) + PHI *\r\n                    2 * BDELAY;\r\n        } else {\r\n                offset = (LFP2D(r->rec - r->org) + LFP2D(r->xmt -\r\n                    r->dst)) / 2;\r\n                delay = max(LFP2D(r->dst - r->org) - LFP2D(r->xmt -\r\n                    r->rec), LOG2D(s.precision));\r\n                disp = LOG2D(r->precision) + LOG2D(s.precision) + PHI *\r\n                    LFP2D(r->dst - r->org);\r\n        }\r\n        clock_filter(p, offset, delay, disp);\r\n", "notes": "Calculations of 'offset' and 'delay' have terms that are incorrectly swapped.  In the calculation of 'offset', term 'r->dst' should be 'r->xmt', and term 'r->xmt' should be 'r->dst'.  In the calculation of 'delay', term 'r->rec' should be 'r->xmt', and term 'r->xmt' should be 'r->rec'.\r\n\r\nSee the text from section 8:\r\n\r\n   \"In the figure, the first packet transmitted by A contains only the\r\n   origin timestamp t1, which is then copied to T1.  B receives the\r\n   packet at t2 and copies t1 to T1 and the receive timestamp t2 to T2.\r\n   At this time or some time later at t3, B sends a packet to A\r\n   containing t1 and t2 and the transmit timestamp t3.  All three\r\n   timestamps are copied to the corresponding state variables.  A\r\n   receives the packet at t4 containing the three timestamps t1, t2, and\r\n   t3 and the destination timestamp t4.  These four timestamps are used\r\n   to compute the offset and delay of B relative to A, as described\r\n   below.\r\n\r\n...\r\n\r\n   \"The four most recent timestamps, T1 through T4, are used to compute\r\n   the offset of B relative to A\r\n\r\n   theta = T(B) - T(A) = 1/2 * [(T2-T1) + (T3-T4)]\r\n\r\n   and the round-trip delay\r\n\r\n   delta = T(ABA) = (T4-T1) - (T3-T2).\"\r\n\r\nNoting that, from the perspective of A at time t4:\r\n\r\nT1 = t1 = origin timestamp (r->org)\r\nT2 = t2 = receive timestamp (r->rec)\r\nT3 = t3 = transmit timestamp (r->xmt)\r\nT4 = t4 = destination timestamp (r->dst)\r\n\r\nAn alternative correction would be to change the '+' to a '-' in the calculation of 'offset', and change the '-' to a '+' in the calculation of 'delay'.  However, this would deviate from the operators used in the formulas from section 8.", "submit_date": "2012-02-16", "submitter_name": "Richard Walters", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "54", "doc-id": "RFC4571", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   The Audio/Video Profile (AVP, [RFC3550]) for the Real-time Transport\r\n   Protocol (RTP, [RFC3551]) does not define a method for framing RTP\r\n   and RTP Control Protocol (RTCP) packets onto connection-oriented\r\n   transport protocols (such as TCP).  However, earlier versions of", "correct_text": "   The Audio/Video Profile (AVP, [RFC3551]) for the Real-time Transport\r\n   Protocol (RTP, [RFC3550]) does not define a method for framing RTP\r\n   and RTP Control Protocol (RTCP) packets onto connection-oriented\r\n   transport protocols (such as TCP).  However, earlier versions of", "notes": "\r\nApparently, the RFC numbers have been permuted inadvertently.", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "276", "doc-id": "RFC3418", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the text, it says:  ", "orig_text": "   6.1.  Informative References", "correct_text": "   6.2.  Informative References\n", "notes": "", "submit_date": "2003-08-22", "submitter_name": "Glenn M. Keeni", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "277", "doc-id": "RFC3415", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Section A.1: ", "orig_text": "   (a) \"system\"       (subtree 1.3.6.1.2.1.1)      [RFC3918]\n   (b) \"snmp\"         (subtree 1.3.6.1.2.1.11)     [RFC3918]", "correct_text": "   (a) \"system\"       (subtree 1.3.6.1.2.1.1)      [RFC3418]\n   (b) \"snmp\"         (subtree 1.3.6.1.2.1.11)     [RFC3418]\n", "notes": "", "submit_date": "2002-12-27", "submitter_name": "Guan Hai Bing", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "311", "doc-id": "RFC3271", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   Internet is for everyone - but it won't be if it cannot keep up with\r\n   the explosive demand for its services, so we must dedicate ourselves\r\n   to continuing its technological evolution and development of the\r\n   technical standards the lie at the heart of the Internet revolution.\r\n", "correct_text": "   Internet is for everyone - but it won't be if it cannot keep up with\r\n   the explosive demand for its services, so we must dedicate ourselves\r\n   to continuing its technological evolution and development of the\r\n   technical standards that lie at the heart of the Internet revolution.\r\n", "notes": "", "submit_date": "2002-08-01", "submitter_name": "vinton g. cerf\"", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "61", "doc-id": "RFC4544", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(9)  common problem with indiscontinuity tagging\r\n\r\nThe Session Stats Table defines and admits High-Capacity (64-bit)\r\nand Low-Capacity (32-bit) octet counters.\r\nIf both types of counters are implemented, according to the\r\nDESCRIPTION clauses of all these counters,\r\n\r\n        [...]\r\n        If this counter has suffered a discontinuity, the time of the\r\n        last discontinuity is indicated in iscsiSsnDiscontinuityTime.\"\r\n\r\nHence, iscsiSsnDiscontinuityTime must indicate discontinuities\r\nin the HC and the LC counters, i.e. it must be changed whenever\r\none of the LC counters wraps back to zero, making it almost\r\nuseless for efficient surveillance of discontinuities in all\r\nthe other counters covered by this object.\r\nPerhaps, as it has been done in a few other IETF MIBs in the past,\r\ninclusion of additional 32-bit counters yielding the high part\r\n(most significant 32 bits) of the HC counters for use with SNMPv1\r\nmanagement stations would have allowed to change the semantics of\r\niscsiSsnDiscontinuityTime to avoid too frequent changes.", "correct_text": "", "notes": "\n --VERIFIER NOTES-- \nItem (9) - the situation in which \"one of the LC counters wraps back to\r\nzero\" is a regular increment of a continuous counter, i.e., it\r\nis not a discontinuity.  Thus, this item is unfounded.", "submit_date": "2006-07-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "62", "doc-id": "RFC4543", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "In ENCR_NULL_AUTH_AES_GMAC, the IV is not included in either the  \r\nplaintext or the additional authenticated data.", "correct_text": "In AES-GCM-ESP, the IV is not included in either the plaintext or  \r\nthe additional authenticated data.", "notes": "This error might confuse the reader because it makes the text  \r\ncontradict Figure 4.", "submit_date": "2006-07-06", "submitter_name": "David McGrew", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "63", "doc-id": "RFC4541", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   Additionally, if a non-Querier switch spoofs any General Queries (as\r\n   addressed in Section 2.1 above, for Spanning Tree topology changes),\r\n   the switch should use the null IP source address (::) when sending\r\n   said queries.  When such proxy queries are received, they must not be\r\n   included in the Querier election process.", "correct_text": "   Additionally, if a non-Querier switch spoofs any General Queries (as\r\n   addressed in Section 2.1 above, for Spanning Tree topology changes),\r\n   the switch should use the unspecified IP source address (::) when\r\n   sending said queries.  When such proxy queries are received, they\r\n   must not be included in the Querier election process.\r\n", "notes": "The term, \"null\" IP address is inappropriate, according to the current\r\nIPv6 Address Architecture document.  RFC 4541 should use the proper\r\nterm, \"unspecified\" address (cf. Section 2.5.2 of RFC 4291).\r\n\r\nfrom pending", "submit_date": "2006-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Morten Jagd Christensen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "64", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "There are three terminology issues\r\n\r\na)\r\nThe combination of the two roles of \"Group Controller\" and\r\n\"Key Server\" is usually abbreviated as  \"GC/KS\" , and such\r\ndoes RFC 4534.  Consistently, the full expansion should be\r\nspelled  \"Group Controller / Key Server\"  to match the \"/\"\r\npresent in the acronym and to avoid the mis-understandable\r\nunstructured word grouping, \"Group Controller Key Server\".\r\n\r\nThis affects Section 3.2, in the second line on page 7, and\r\nthe second line of Section B.1.1, on page 13.\r\n\r\nb)\r\nIMHO, the wording, \"[the] rekey\" is sluggish and should be\r\nreplaced by \"[the] rekeying\".\r\nThis affects the Section titles,\r\n\"3.3. Rekey Policy\", that better should be: \"3.3. Rekeying Policy\"\r\nas well as\r\n    \"B.5. GSAKMPv1 Rekey Policy\"  and all\r\n    \"B.5.*. Rekey ___\"  , and\r\n    \"B.6. GSAKMPv1 Rekey Policy ASN.1 Module\"\r\n\r\nOther changes:\r\n  \"rekey protocol\" --> \"rekeying protocol\"  and\r\n  \"rekey message\"  --> \"rekeying message\"    (Section 3, page 5),\r\n  \"Rekey SA\"       --> \"Rekeying SA\"   and\r\n  \"During Rekey,\"  --> \"During Rekeying,\"    (Section 3.3, page 7),\r\n  \"Rekey SAs\"      --> \"Rekeying SAs\"        (Appendix B, page 13),\r\n  \"Rekey Protocol\" --> \"Rekeying Protocol\" (2x) ,\r\n  \"rekey policy\"   --> \"rekeying policy\"   (2x) ,\r\n  \"rekey messages\" --> \"rekeying messages\" ,\r\n  \"rekey event\"    --> \"rekeying event\"    (2x) ,\r\n  \"rekey message\"  --> \"rekeying message\" ,\r\n  \"rekey interval\" --> \"rekeying interval\" ,\r\n  \"rekey process\"  --> \"rekeying process\" ,\r\n  \"the rekey\"      --> \"the rekeying\" ,\r\n  \"rekey delivery\" --> \"rekeying delivery\" ,\r\n  \"handle rekey.\"  --> \"handle rekeying.\" ,  (all in B.5., on page 22),\r\n  etc. ...\r\n  \"", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2373", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\n\r\nIn Section 1, the last indented paragraph on page 4 says:\r\n\r\n      However, the Diffie-Hellman key agreement protocol is known for\r\n      its subtle security strengths in that it is able to provide full\r\n      perfect forward secrecy (PFS) and further have to both parties\r\n      actively involved in session key generation.  This special\r\n      security property (despite the somewhat higher computational\r\n      costs) makes Diffie-Hellman techniques attractive in practice.", "correct_text": "It should say:\r\n\r\n      However, the Diffie-Hellman key agreement protocol is known for\r\n      its subtle security strengths in that it is able to provide full\r\n|     perfect forward secrecy (PFS) and further have both parties\r\n      actively involved in session key generation.  This special\r\n      security property (despite the somewhat higher computational\r\n      costs) makes Diffie-Hellman techniques attractive in practice.", "notes": "", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "127", "doc-id": "RFC4314", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": "   The client has specified the \"d\" right in the SETACL command above\r\n   and it expands to \"et\" on the server:\r\n\r\n               C: A002 getacl INBOX/Drafts\r\n               S: * ACL INBOX Fred rwipslxcetda David lrswideta\r\n               S: A002 OK Getacl complete", "correct_text": "   The client has specified the \"d\" right in the SETACL command above\r\n   and it expands to \"et\" on the server:\r\n\r\n               C: A002 getacl INBOX/Drafts\r\n               S: * ACL INBOX/Drafts Fred rwipslxcetda David lrswideta\r\n               S: A002 OK Getacl complete\r\n", "notes": "", "submit_date": "2005-12-31", "submitter_name": "Arnaud Taddei", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2309", "doc-id": "RFC5903", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "   [Err9]         RFC Errata, Errata ID 9, RFC 4753,\r\n                  <http://www.rfc-editor.org>.\r\n", "correct_text": "   [Err9]         RFC Errata, Errata ID 9, RFC 4753; see\r\n                  <http://www.rfc-editor.org/info/rfc4753>.\r\n", "notes": "Rationale:\r\nA less experienced reader will likely have difficulties locating\r\nthe Errata entry given only the RFC Editor home page URL.\r\nThe RFC 'info' URIs have been introduced by RFC 5741 to provide\r\nstable canonical URIs for all information related to a given RFC;\r\nthus, the proper stable URI should be provided in the reference entry.\n --VERIFIER NOTES-- \nThe reference entry for Errata ID 9 is similar to how errata were referenced in previous RFCs (5550 and 5724). The URL of the main RFC Editor page was used intentionally, rather than the URL of the specific Errata ID or the RFC's info page (as in Alfred's corrected text).    ", "submit_date": "2010-06-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2393", "doc-id": "RFC4409", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "The list of SMTP extensions provided on page 10 of RFC 4409\r\nunfortunately is incomplete.  As far as I can see, the following\r\nRFCs with SMTP extensions predate the publication of RFC 4409:\r\n\r\n  o  RFC 2645  -- ATRN\r\n  o  RFC 2852  -- DELIVERBY\r\n  o  RFC 3865 (+ RFC 4095)  -- NO-SOLICITING\r\n  o  RFC 4141  -- CONPERM, CONNEG\r\n[ o  RFC 4405 ]\r\n", "correct_text": "", "notes": "Quickly browsing these RFCs, I found that only RFC 4405 has\r\nfollowed the specification in Section 7 of RFC 2476 (literally\r\ncarried over to RFC 4409):\r\n\r\n   Future SMTP extensions SHOULD explicitly specify if they are valid on\r\n   the Submission port.\r\n\r\nand contains a definitive statement to this end.\r\nRFC 4405 therefore arguably might be excluded from the list.\r\n\r\nIt would have been useful to have a complete list, with the\r\nproper applicability keywords for the above SMTP extensions.\r\n", "submit_date": "2006-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2401", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   Let IntDiv(a,b) denote the integer division algorithm that takes\r\n|  input integers a, b where a >= b >= 1 and returns integers (q,r)\r\n|\r\n   the quotient and remainder, respectively, of the division of a by b.\r\n   (Thus, a = bq + r and 0 <= r < b.)", "correct_text": "   Let IntDiv(a,b) denote the integer division algorithm that takes\r\n|  input integers a, b where  b >= 1  and returns integers (q,r), the\r\n   quotient and remainder, respectively, of the division of a by b.\r\n   (Thus, a = bq + r and 0 <= r < b.)", "notes": "inappropriate restriction specified + formatting flaw.\r\n\r\nOn page 17, Appendix A.1:\r\nThe restriction  \"a >= b\"  is not necessary and in fact inappropriate; the additional blank line seems to be an artifact of the editing process.  Thus, the above text should better read [as above].\r\n", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2413", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "The last two text lines of Section 3, on mid-page 6, say:\r\n                                 v\r\n|            ROTL^n(x) = ROTR^(w-x)(x)\r\n\r\n             ROTR^n(x) = ROTL^(w-n)(x)", "correct_text": "They should say:\r\n                                 v\r\n|            ROTL^n(x) = ROTR^(w-n)(x)\r\n\r\n             ROTR^n(x) = ROTL^(w-n)(x)", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "65", "doc-id": "RFC4532", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   Servers indicate their support for this extended operation by\r\n   providing a whoamiOID object identifier as a value of the\r\n   'supportedExtension' attribute type in their root DSE.  The server\r\n   SHOULD advertise this extension only when the client is willing and\r\n                                             ^^^^^^^^^^\r\n   able to perform this operation.   ", "correct_text": "   Servers indicate their support for this extended operation by\r\n   providing a whoamiOID object identifier as a value of the\r\n   'supportedExtension' attribute type in their root DSE.  The server\r\n   SHOULD advertise this extension only when it is willing\r\n                                             ^^\r\n   and able to perform this operation.\r\n", "notes": "As far as I can see, the last sentence there is misleading and\r\ndoes not match the operational scenario; and hence, it should be\r\nclarified.  According to the recommendations given, the client\r\nwill not try the operation if the OID is not offered by the server,\r\nand hence the server cannot know whether the client is willing\r\nto send the whoami Request; and in this case, the *server* will\r\nperform the operation, i.e., send the whoami Response.", "submit_date": "2006-07-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "66", "doc-id": "RFC4529", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   The control may be attached to any update operation to support\r\n   conditional addition, deletion, modification, and renaming of the\r\n   target object.  The asserted condition is evaluated as an integral\r\n   part the operation.", "correct_text": "   The control may be attached to any update operation to support\r\n   conditional addition, deletion, modification, and renaming of the\r\n   target object.  The asserted condition is evaluated as an integral\r\n|  part of the operation.\r\n       ^^^^", "notes": "from pending", "submit_date": "2006-07-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "67", "doc-id": "RFC4526", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4", "orig_text": "   Subject: Request for LDAP Protocol Mechanism Registration Object\n   Identifier: 1.3.6.1.4.1.4203.1.5.3 Description: True/False filters\n   Person & email address to contact for further information:\n        Kurt Zeilenga <kurt@openldap.org> Usage: Feature Specification:\n   RFC 4526 Author/Change Controller: IESG Comments: none", "correct_text": "   Subject: Request for LDAP Protocol Mechanism Registration\r\n   Object Identifier: 1.3.6.1.4.1.4203.1.5.3\r\n   Description: True/False filters\r\n   Person & email address to contact for further information:\r\n        Kurt Zeilenga <kurt@openldap.org>\r\n   Usage: Feature\r\n   Specification: RFC 4526\r\n   Author/Change Controller: IESG\r\n   Comments: none\r\n\r\n", "notes": "\n --VERIFIER NOTES-- \n   Although the RFC text has unfortunate line breaks, the registration with the IANA is accurate at http://www.iana.org/assignments/ldap-parameters", "submit_date": "2006-07-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "147", "doc-id": "RFC4275", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "   [RFC4274]  Haas, J. and S. Hares, Eds., \"Definitions of Managed\r\n              Objects for the Fourth Version of Border Gateway Protocol\r\n              (BGP-4)\", RFC 4274, January 2006.", "correct_text": "   [RFC4273]  Haas, J. and S. Hares, Eds., \"Definitions of Managed\r\n              Objects for BGP-4\", RFC 4273, January 2006.", "notes": "All references in the text to RFC 4274 ( '[RFC4274]' )\r\nshould be changed to RFC 4273 ( '[RFC4273]' ).", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2572", "doc-id": "RFC5810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "global", "orig_text": "The text on KEYINFO-TLV examples could be a little confusing.\r\n\r\nThe grammar is:\r\nKEYINFO-TLV := KeyID FULLDATA-TLV\r\nwhere the FULLDATA-TLV carries the KEYDATA. \r\nHowever, the examples dont show the text as being carried in the\r\nFULLDATA-TLV instead they would show something along the lines of:\r\nKEYINFO-TLV = KeyID=1, KEY_DATA=100\r\n", "correct_text": "The best way to represent this is:\r\nKEYINFO-TLV, V= {1, FULLDATA-TLV V={100}}\r\n", "notes": "", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2573", "doc-id": "RFC5810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2 and App D.", "orig_text": "Section 7.2\r\nKEY_ID  (in two places)\r\n\r\n\r\nAppendix D\r\nKEYDATA", "correct_text": "Section 7.2\r\nKeyID   (both times)\r\n\r\n\r\nAppendix D\r\nKEY_DATA\r\n", "notes": "There is some small inconsistency in spelling the terms\r\nKeyID and KeyData. Sometimes the text refers to KEY_ID and \r\nKEY_DATA and sometimes KeyID and KEYDATA.\r\n", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2877", "doc-id": "RFC5473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "   o  The Class of Service field: ClassOfServiceIPv4 in [RFC5102], with\r\n      a type of 5 and a length of 1 octet.\r\n", "correct_text": "   o  The Class of Service field: ipClassOfService in [RFC5102], with\r\n      a type of 5 and a length of 1 octet.\r\n", "notes": "s/ClassOfServiceIPv4/ipClassOfService/ per IANA IPFIX registry, #5.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "68", "doc-id": "RFC4524", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  referential inconsistency\r\n\r\nThe second paragraph of Section 1, on page 3 of RFC 4524, says:\r\n\r\n   In the years that followed, X.500 Directory Services have evolved to\r\n   incorporate new capabilities and even new protocols.  In particular,\r\n   the Lightweight Directory Access Protocol (LDAP) [RFC4510] was\r\n   introduced in the early 1990s [RFC1487], with Version 3 of LDAP\r\n   introduced in the late 1990s [RFC2251] and subsequently revised in\r\n|  2005 [RFC4510].\r\n\r\nIt should say:\r\n\r\n   In the years that followed, X.500 Directory Services have evolved to\r\n   incorporate new capabilities and even new protocols.  In particular,\r\n   the Lightweight Directory Access Protocol (LDAP) [RFC4510] was\r\n   introduced in the early 1990s [RFC1487], with Version 3 of LDAP\r\n   introduced in the late 1990s [RFC2251] and subsequently revised in\r\n|  2006 [RFC4510].\r\n      ^\r\n\r\n(Rationale: RFC 451x and RFC 452x have been published in June 2006.)\r\n\r\n\r\n(2)  typos\r\n\r\n(2a) The third paragraph of Section 1, on page 3 of RFC 4524, says:\r\n\r\n|  While much of the material in RFC 1274 has been superceded by\r\n   subsequently published ITU-T Recommendations and IETF RFCs, [...]\r\n\r\nIt should say:\r\n                                                        v\r\n|  While much of the material in RFC 1274 has been superseded by\r\n   subsequently published ITU-T Recommendations and IETF RFCs, [...]\r\n\r\n(2b) The third paragraph of Section 1.1, on page 3, says:\r\n\r\n   The description of the 'domain' object class provided in this\r\n|  document supercedes that found in RFC 2247.  That is, Section 3.4 of\r\n   this document replaces Section 5.2 of [RFC2247].\r\n\r\nIt should say:\r\n\r\n   The description of the 'domain' object class provided in this\r\n|  document supersedes that found in RFC 2247.  That is, Section 3.4 of\r\n   this document replaces Section 5.2 of [RFC2247].\r\n\r\n\r\n(3)  extraneous (duplicated) text\r\n\r\nWithin Section 3.1 of RFC 4524, the first line on page 14,\r\n\r\n   3.3.  documentSeriesExample:\r\n\r\nshould say:\r\n\r\n      Example:\r\n\r\n\r\n(4)  incomplete information\r\n\r\nWithin Appendix A of RFC 4524, I miss a note describing the fate\r\nof the 'pilotOrganization' object class (RFC 1274, Section 8.3.13).\r\n\r\nKurt:\r\n  For completeness, it would be nice if you could provide\r\n  supplementary text (similar to, and perhaps to be inserted\r\n  after, section A.3 of RFC 4524) detailing the intentions of\r\n  the authors regarding that object class.", "correct_text": "", "notes": " RFC 451x and RFC 452x have been published in June 2006.\r\n\r\nfrom pending", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "69", "doc-id": "RFC4521", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 2.5 (page 5) -- Ref. tags\r\n\r\nThe text,\r\n                                      vvvvvvvv\r\n   Numerous elements of LDAP are described using ASN.1 [X.680] and are\r\n|  encoded using a particular subset [Protocol, Section 5.2] of the\r\n   Basic Encoding Rules (BER) [X.690].  To allow reuse of\r\n   parsers/generators used in implementing the LDAP \"core\" technical\r\n   specification [RFC4510], it is RECOMMENDED that extension elements\r\n   (e.g., extension specific contents of controlValue, requestValue,\r\n   responseValue fields) described by ASN.1 and encoded using BER be\r\n|  subjected to the restrictions of [Protocol, Section 5.2].\r\n                                     ^^^^^^^^\r\nshould say:\r\n\r\n   Numerous elements of LDAP are described using ASN.1 [X.680] and are\r\n|  encoded using a particular subset [RFC4511, Section 5.1] of the\r\n   Basic Encoding Rules (BER) [X.690].  To allow reuse of\r\n   parsers/generators used in implementing the LDAP \"core\" technical\r\n   specification [RFC4510], it is RECOMMENDED that extension elements\r\n   (e.g., extension specific contents of controlValue, requestValue,\r\n   responseValue fields) described by ASN.1 and encoded using BER be\r\n|  subjected to the restrictions of [RFC4511, Section 5.1].\r\n\r\n[ Note: the tags *and* the section numbers need correction! ]\r\n\r\n\r\n(2)  Section 3.1 (page 6), 3rd and 4th paragraph -- Ref. tags\r\n\r\nThe text:\r\n\r\n   An existing operation MAY be extended to return IntermediateResponse\r\n|  messages [Protocol, Section 4.13].\r\n             ^^^^^^^^                                   vvvvvvvv\r\n   Specifications of controls SHALL NOT attach additional semantics to\r\n|  the criticality of controls beyond those defined in [Protocol,\r\n   Section 4.1.11].  A specification MAY mandate the criticality take on\r\n   a particular value (e.g., TRUE or FALSE), where appropriate.\r\n\r\nshould say:\r\n\r\n   An existing operation MAY be extended to return IntermediateResponse\r\n|  messages [RFC4511, Section 4.13].\r\n\r\n   Specifications of controls SHALL NOT attach additional semantics to\r\n|  the criticality of controls beyond those defined in [RFC4511, Section\r\n   4.1.11].  A specification MAY mandate the criticality take on a\r\n   particular value (e.g., TRUE or FALSE), where appropriate.\r\n\r\n\r\n(3)  Section 3.1.2 (page 7), 3rd paragraph -- typo\r\n\r\nThe text:\r\n\r\n   It is RECOMMENDED that designers consider alternative mechanisms for\r\n   providing the function.  For example, an extended operation issued\r\n   subsequent to the Start TLS operation (hence, protected by the\r\n   security layers negotiated by the Start TLS operation) might be used\r\n|  to provided the desired function.\r\n             ^\r\nshould say:\r\n\r\n   It is RECOMMENDED that designers consider alternative mechanisms for\r\n   providing the function.  For example, an extended operation issued\r\n   subsequent to the Start TLS operation (hence, protected by the\r\n   security layers negotiated by the Start TLS operation) might be used\r\n|  to provide the desired function.\r\n\r\n\r\n(4)  Section 3.1.4 (page 8), 2nd bullet -- typo\r\n\r\nThe text:\r\n                                                  vvvv\r\n|     -  consistency: The resulting DIT state must be conform to schema\r\n         and other constraints.\r\n\r\nshould say:\r\n\r\n|     -  consistency: The resulting DIT state must conform to schema and\r\n         other constraints.\r\n\r\n\r\n(5)  Section 3.2 (page 8) -- Ref. tag\r\n\r\nThe text:\r\n                        vvvvvvvv\r\n|  Extended Operations [Protocol, Section 4.12] are the RECOMMENDED\r\n   mechanism for defining new operations.  [...]\r\n\r\nshould say:\r\n\r\n|  Extended Operations [RFC4511, Section 4.12] are the RECOMMENDED\r\n   mechanism for defining new operations.  [...]\r\n\r\n\r\n(6)  Section 3.4 (page 9), 1st paragraph -- Ref. tag\r\n\r\nThe text:\r\n                              vvvvvvvv\r\n|  Unsolicited notifications [Protocol, Section 4.4] offer a capability\r\n   for the server to notify the client of events not associated with the\r\n   operation currently being processed.\r\n\r\nshould say:\r\n\r\n|  Unsolicited notifications [RFC4511, Section 4.4] offer a capability\r\n   for the server to notify the client of events not associated with the\r\n   operation currently being processed.\r\n\r\n\r\n(7)  Section 4 (page 9) -- Ref. tags\r\n\r\nThe text:\r\n                                  vvvvvvvv\r\n|  LDAP allows limited extension [Protocol, Section 4] of the LDAP ASN.1\r\n|  definition [Protocol, Appendix B] to be made.\r\n               ^^^^^^^^\r\nshould say:\r\n\r\n|  LDAP allows limited extension [RFC4511, Section 4] of the LDAP ASN.1\r\n|  definition [RFC4511, Appendix B] to be made.\r\n\r\n\r\n(8)  Section 5 (page 10), 1st paragraph -- Ref. tag\r\n\r\nThe text:\r\n\r\n   Extensions defining LDAP schema elements SHALL provide schema\r\n|  definitions conforming with syntaxes defined in [Models, Section\r\n   4.1].  [...]\r\n                                                    ^^^^^^\r\nshould say:\r\n\r\n   Extensions defining LDAP schema elements SHALL provide schema\r\n|  definitions conforming with syntaxes defined in [RFC4512, Section\r\n   4.1].  [...]\r\n\r\n\r\n(9)  Section 9.1 (page 13) -- duplicate entry\r\n\r\nThe entry at the bottom of page 13,\r\n\r\n   [RFC4512]  Zeilenga, K., \"Lightweight Directory Access Protocol\r\n              (LDAP): Directory Information Models\", RFC 4512, June\r\n              2006.\r\n\r\nshould be deleted.\r\nThis entry is a duplicate, and it recurs on page 14, at the proper\r\nplace according to the collation order (by ascending RFC#).", "correct_text": "", "notes": "Most important issue:\r\nApparently, the update of the Reference tags within the text has\r\nbeen performed incompletely after the assignment of RFC numbers\r\nto those many LDAP I-Ds, leaving 'unsatisfied' tags in the text\r\n(not listed in the References Sections), wherever these tags give\r\ndetailed citations, specifying a section or an Appendix there.\r\n\r\nThe errata detail items below are listed in textual order.\r\nI use change bars and tag lines to emphasize the corrections\r\nproposed and/or the issues in the original text.\r\nChanged text is re-adjusted to conform to RFC formatting rules.\r\n\r\nfrom pending", "submit_date": "2006-06-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "70", "doc-id": "RFC4519", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nAppendix A says:", "orig_text": "      18. Removed Section 2.4 (Source).  Replaced the source table with\r\n          explicit references for each definition.", "correct_text": "      18. Removed Section 4 (Source).  Replaced the source table with\r\n          explicit references for each definition.", "notes": "", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "71", "doc-id": "RFC4516", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A.2", "orig_text": "   Changed the text indicate that RFC 2255 is replaced ...", "correct_text": "   Changed the text to indicate that RFC 2255 is replaced ...", "notes": " ", "submit_date": "2006-06-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "72", "doc-id": "RFC4515", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   The first example shows use of the matching rule \"caseExactMatch.\"", "correct_text": "   The first example shows use of the matching rule \"caseExactMatch\".", "notes": "Source: apps", "submit_date": "2006-06-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "73", "doc-id": "RFC4514", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   This example shows the method of escaping of a special characters\r\n   appearing in a common name:", "correct_text": "   This example shows the method of escaping of special characters\r\n   appearing in a common name:", "notes": "Source: apps", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "74", "doc-id": "RFC4512", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(E1)  text truncation (?)\r\n\r\nApparently, the text of the first paragraph of Section 3.2,\r\non page 18 of RFC 4512, has been truncated inadvertently.\r\nThe RFC text says:\r\n\r\n   A subentry is a \"special sort of entry, known by the Directory, used\r\n   to hold information associated with a subtree or subtree refinement\"\r\n|  [X.501].  Subentries are used in Directory to hold for administrative\r\n|  and operational purposes as defined in [X.501].  Their use in LDAP is\r\n   detailed in [RFC3672].\r\n\r\nI suspect that it should in fact say:\r\n\r\n   A subentry is a \"special sort of entry, known by the Directory, used\r\n   to hold information associated with a subtree or subtree refinement\"\r\n|  [X.501].  Subentries are used in the Directory to hold attributes for\r\n|  administrative and operational purposes as defined in [X.501].  Their\r\n   use in LDAP is detailed in [RFC3672].\r\n\r\n\r\n(E2)  typo\r\n\r\nIn Section 4.1.7.1, near the bottom of page 30, the explanation,\r\n\r\n     FORM is specifies the name form associated with this DIT structure\r\n         rule;\r\n\r\nshould say:\r\n\r\n|    FORM specifies the name form associated with this DIT structure\r\n         rule;\r\n\r\n\r\n(E3)  typo\r\n\r\nThe first paragraph of Section 5.1, on page 36, says:\r\n\r\n   An LDAP server SHALL provide information about itself and other\r\n   information that is specific to each server.  This is represented as\r\n   a group of attributes located in the root DSE, which is named with\r\n|  the DN with zero RDNs (whose [RFC4514] representation is as the\r\n   zero-length string).\r\n\r\nIt should say:\r\n\r\n   An LDAP server SHALL provide information about itself and other\r\n   information that is specific to each server.  This is represented as\r\n   a group of attributes located in the root DSE, which is named with\r\n|  the DN with zero RDNs (whose [RFC4514] representation is the zero-\r\n   length string).\r\n\r\n\r\n(E4)  word omission\r\n\r\nThe second paragraph of Section A.2.1, on page 49, says:\r\n\r\n   The <descr> syntax was changed to disallow semicolon (U+003B)\r\n   characters in order to appear to be consistent its natural language\r\n   specification \"descr is the syntactic representation of an object\r\n   descriptor, which consists of letters and digits, starting with a\r\n   letter\".  In a related change, the statement \"an AttributeDescription\r\n   can be used as the value in a NAME part of an\r\n   AttributeTypeDescription\" was deleted.  RFC 2252 provided no\r\n   specification of the semantics of attribute options appearing in NAME\r\n   fields.\r\n\r\nIt should say:\r\n\r\n   The <descr> syntax was changed to disallow semicolon (U+003B)\r\n|  characters in order to appear to be consistent with its natural\r\n   language specification \"descr is the syntactic representation of an\r\n   object descriptor, which consists of letters and digits, starting\r\n   with a letter\".\r\n   In a related change, the statement \"an AttributeDescription can be\r\n   used as the value in a NAME part of an AttributeTypeDescription\" was\r\n   deleted.  RFC 2252 provided no specification of the semantics of\r\n   attribute options appearing in NAME fields.\r\n\r\n\r\nAnd these are my side notes for future consideration.\r\nThere are a couple of missing articles in the RFC text.\r\nI have noted the following places:\r\n\r\n\r\n(N1)\r\n\r\nIn Section 4.1.1, on page 24, the explanation,\r\n\r\n   where:\r\n     <numericoid> is object identifier assigned to this object class;\r\n     [...]\r\n\r\nshould better say:\r\n\r\n   where:\r\n|    <numericoid> is the object identifier assigned to this object\r\n         class;\r\n     [...]\r\n\r\n\r\n(N2)\r\n\r\nIn Section 4.1.2,\r\n\r\na) on page 25, the literally same correction as (N1) applies, and\r\n\r\nb) the explanation:\r\n\r\n     SYNTAX identifies value syntax by object identifier and may suggest\r\n         a minimum upper bound;\r\n\r\nshould better say:\r\n\r\n|    SYNTAX identifies the value syntax by its object identifier and may\r\n         suggest a minimum upper bound;\r\n\r\nc) Finally, on top of page 26, the paragraph,\r\n\r\n   If SUP field is provided, the EQUALITY, ORDERING, and SUBSTRING\r\n   fields, if not specified, take their value from the supertype.\r\n\r\nshould better say:\r\n\r\n|  If the SUP field is provided, the EQUALITY, ORDERING, and SUBSTRING\r\n   fields, if not specified, take their value from the supertype.\r\n\r\n\r\n(N3)\r\n\r\nIn Section 4.1.3, on page 27, -- similarly to (N1) --\r\nthe explanation,\r\n\r\n   where:\r\n     <numericoid> is object identifier assigned to this matching rule;\r\n     [...]\r\n\r\nshould better say:\r\n\r\n   where:\r\n     <numericoid> is the object identifier assigned to this matching\r\n         rule;\r\n     [...]\r\n\r\n\r\n(N4)\r\n\r\nIn Section 4.1.7.2, on page 31, -- again like in (N1) --\r\nthe explanation,\r\n\r\n   where:\r\n     <numericoid> is object identifier that identifies this name form;\r\n     [...]\r\n\r\nshould better say:\r\n\r\n   where:\r\n     <numericoid> is the object identifier that identifies this name\r\n         form;\r\n     [...]\r\n\r\n\r\n(N5)\r\n\r\nThe final sentence of Section 4.2, i.e. the 3rd paragraph on page 33,\r\nsays:\r\n\r\n   The following subsections provide attribute type definitions for each\r\n   of schema definition attribute types.\r\n\r\nIt should say:\r\n\r\n   The following subsections provide attribute type definitions for each\r\n|  of the schema definition attribute types.", "correct_text": "", "notes": "Source: apps", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2282", "doc-id": "RFC4823", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4.4", "orig_text": "Item 8 in Section 7.4.4, on page 27 says:\r\n\r\n   8.  The \"failed\" disposition type MAY NOT be used for the situation\r\n       in which there is some problem in processing the message other\r\n|      than interpreting the request for an MDN.  The \"processed\" or\r\n|      other disposition type with appropriate disposition modifiers is\r\n       to be used in such situations.\r\n", "correct_text": "   8.  The \"failed\" disposition type MAY NOT be used for the situation\r\n       in which there is some problem in processing the message other\r\n|      than interpreting the request for an MDN.  The \"processed\"\r\n|      disposition type with appropriate disposition modifiers MUST be\r\n       used in such situations.\r\n", "notes": "The ABNF given in Section 7.4.3, on page 25,\r\n\r\n     AS3-disposition-type = \"processed\" / \"failed\"\r\n\r\nexplicitely excludes \"other\" disposition types.\r\n\r\n\r\nSource: apps", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "75", "doc-id": "RFC4511", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(2)  Typo\r\n\r\nSection 2, on page 4, contains the paragraph:\r\n                                        v\r\n|  The term \"SASL layer\" refers to Simply Authentication and Security\r\n   Layer (SASL) services used in providing security services, as well as\r\n   associations established by these services.\r\n\r\nIt should say:\r\n                                        v\r\n|  The term \"SASL layer\" refers to Simple Authentication and Security\r\n   Layer (SASL) services used in providing security services, as well as\r\n   associations established by these services.\r\n\r\n\r\n(3)  Misrepresented relationship between ISO 10646 and Unicode\r\n\r\nSection 4.1.2 unfortunately has not corrected a misconception\r\ninitially spelled out in RFC 2251.\r\n\r\nThe first paragraph of Section 4.1.2, on page 7, says:\r\n\r\n   The LDAPString is a notational convenience to indicate that, although\r\n   strings of LDAPString type encode as ASN.1 OCTET STRING types, the\r\n|  [ISO10646] character set (a superset of [Unicode]) is used, encoded\r\n   following the UTF-8 [RFC3629] algorithm.  [...]\r\n\r\nThe (..) enclosed note on the relationship of ISO 10646 and Unicode\r\nis *not* appropriate, as far as I know:\r\n\r\nUnicode covers exactly the same character repertoire as ISO 10646,\r\nbut it *adds* a lot of *semantics* to ISO 10646.\r\nThe character repertoire synchronization between ISO 10646 and\r\nUnicode is said to hold since 1993, and it is promised for all\r\nfuture updates.\r\n(Details can be found in Section 1.4 and Appendix C of\r\nThe Unicode Standard (book and online version), verbatim\r\nidentical in the Unicode 3.0 and Unicode 4.0 versions.)\r\n\r\nIn particular, this congruence holds for Unicode 3.2.0\r\n(and the coordinated edition of ISO 10646) that has been\r\nmade the invariable base for the new LDAP specs.\r\n\r\nTherefore, the above sentence should perhaps better be\r\ncorrected to say:\r\n\r\n   The LDAPString is a notational convenience to indicate that, although\r\n   strings of LDAPString type encode as ASN.1 OCTET STRING types, the\r\n|  [ISO10646] character set (as detailed in [Unicode]) is used, encoded\r\n   following the UTF-8 [RFC3629] algorithm.  [...]\r\n\r\n(or similar).\r\n\r\n\r\n(4)  Typo (word omission)\r\n\r\nThe 3rd paragraph of Section 4.2.2, on page 18, says:\r\n\r\n   If the client receives a BindResponse where the resultCode is set to\r\n   protocolError, it is to assume that the server does not support this\r\n|  version of LDAP.  While the client may be able proceed with another\r\n   version of this protocol (which may or may not require closing and\r\n   re-establishing the transport connection), how to proceed with\r\n   another version of this protocol is beyond the scope of this\r\n   document.  Clients that are unable or unwilling to proceed SHOULD\r\n   terminate the LDAP session.\r\n\r\nIt should say:\r\n                                                 vvvv\r\n|            [...].  While the client may be able to proceed with\r\n   another version of this protocol (which may or may not require\r\n   closing and re-establishing the transport connection), how to proceed\r\n   with another version of this protocol is beyond the scope of this\r\n   document.  [...]\r\n\r\n\r\nItems (2)..(4) above might be considered for an Errata Note\r\nto be posted to the RFC Editor's \"RFC Errata\" web pages.\r\nI propose that you submit an Author's Errata Note, based on the\r\nmaterial presented above, and/or choosing alternate text for (3).", "correct_text": "", "notes": "In any case, these items should be noted for future reference,\r\nwhenever once another revision of these RFCs is to be produced,\r\ne.g., for advancement on the Standards Track.\r\n\r\n[note: (1) contained general comments and has been removed.]\r\n\r\nAuthor saving on file for possible revision.\r\n\r\nfrom pending", "submit_date": "2006-06-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Jim Sermersheim", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2584", "doc-id": "RFC5782", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "Rand and Vixie created a \r\nDNS-based distribution scheme that quickly became more popular than \r\nthe original BGP distribution. ", "correct_text": "Eric Ziegast, who was a system administrator for Vixie Enterprises \r\nwhere the RBL was hosted, created a DNS-based distribution scheme \r\nthat quickly became more popular than the original BGP distribution.", "notes": "Vixie asked me to make this correction, to properly credit the inventor of DNSBLs.", "submit_date": "2010-10-26", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2585", "doc-id": "RFC6036", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "   84% support or plan DNS Authentication, Authorization, Accounting,\r\n   and Auditing (AAAA) queries over IPv6, and all but one of these\r\n   include reverse DNS lookup for IPv6.", "correct_text": "   84% support or plan DNS AAAA queries over IPv6, and all but one of\r\n   these include reverse DNS lookup for IPv6.\r\n", "notes": "AAAA is not an acronym in this context; it is an RR type.", "submit_date": "2010-10-27", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "219", "doc-id": "RFC3877", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "ituAlarmPerceivedSeverity        critical (3)", "correct_text": "alarmModelState                  3", "notes": "\nHowever,\n ituAlarmPerceivedSeverity        critical (3)\nshould be mapped to\n alarmModelState                  6\nTo match the mapping shown in Section 5.4:\n              alarmModelState -> ituAlarmPerceivedSeverity\n                    1        ->         clear (1)\n                    2        ->         indeterminate (2)\n                    3        ->         warning (6)\n                    4        ->         minor (5)\n                    5        ->         major (4)\n                    6        ->         critical (3)\n\n", "submit_date": "2005-08-08", "submitter_name": "Andreas Politze", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "76", "doc-id": "RFC4506", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1) Section 6.2, page 18 - typo (word omission)\r\n\r\nThe words in the 9th line of the text,\r\n\r\n    [...] \"followed by one or hexadecimal digits\" [...]\r\n\r\nshould say:\r\n\r\n    [...] \"followed by one or more hexadecimal digits\" [...]\r\n                             ^^^^^^\r\n\r\n(2) Section 8, 2nd paragraph (page 22) - typo\r\n\r\nThe RFC says:\r\n\r\n   Care must be take to properly encode and decode data to avoid\r\n   attacks.  [...]\r\n\r\nit should say:\r\n                    vv\r\n   Care must be taken to properly encode and decode data to avoid\r\n   attacks.  [...]\r\n\r\n\r\n(3) Subtle inconsistency between Section 6.1 and Section 6.2\r\n\r\nOn page 17, Section 6.1 states the Notational Convention:\r\n\r\n   (2) Terminal symbols are strings of characters surrounded by\r\n       double quotes.\r\n       ^^^^^^\r\nNevertheless, throughout the new Section 6.2 (on page 18), all\r\nterminal symbols, e.g. the \"generalized digits\" -- the terminals\r\nto build octal, decimal, and hexadecimal constants, are specified\r\nas characters surrounded by *single* quotes.\r\n                             ^^^^^^\r\nAlthough this style perhaps was inspired by the `C` language,\r\nIMHO, its use is inconsistent in that context.", "correct_text": "", "notes": "from pending", "submit_date": "2006-05-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "77", "doc-id": "RFC4502", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  clarification\r\n\r\nThe RFC 4502 text in Section 2.2, under bullet 3), on page 5,\r\nsays:\r\n\r\n         Bit     Definition\r\n\r\n         6       For WAN media, this bit is set for packets\r\n                 coming from one direction and cleared for\r\n                 packets coming from the other direction.\r\n                 It is an implementation-specific matter\r\n|                as to which bit is assigned to which\r\n                 direction, but it must be consistent for\r\n                 all packets received by the agent.  [...]\r\n\r\nThis text certainly is intended to always (and only) cover bit #6.\r\nTherefore, the wording, \"which bit is assigned\" is misleading;\r\nit should be \"which [bit] value is assigned\".\r\n\r\nThus, the above snippit sould better say:\r\n\r\n         Bit     Definition\r\n\r\n         6       For WAN media, this bit is set for packets\r\n                 coming from one direction and cleared for\r\n                 packets coming from the other direction.\r\n                 It is an implementation-specific matter\r\n|                as to which bit value is assigned to which\r\n                 direction, but it must be consistent for\r\n                 all packets received by the agent.  [...]\r\n\r\n\r\n(2)  Ref. issue\r\n\r\nIn Section 3.2, the third paragraph on page 9 says:\r\n\r\n   In the RMON MIB [RFC2819], the EntryStatus textual convention was\r\n   introduced to provide this mutual exclusion function.  Since then,\r\n   this function was added to the SNMP framework as the RowStatus\r\n   textual convention.  The RowStatus textual convention is used for the\r\n   definition of all new tables.\r\n\r\nThis text unfortunately has turned wrong by updating the (obsolete)\r\nreference \"[RFC1757]\" (in RFC 2102) to \"[RFC2819]\".\r\n(-- A very unusual event! --)\r\nThe text in RFC 2102 was correct, because RFC 1757 predates the\r\ninvention of the 'RowStatus' TC which was finalized in STD 58.\r\nBut STD 58 predates RFC 2819, and therefore, the clause,\r\n     vvvvvvvvvv\r\n|    Since then,\r\n     this function was added to the SNMP framework\r\n     as the RowStatus textual convention.\r\nhas turned wrong by the replacement of the Ref.!\r\n\r\n(NOTE: RFC 2819 in fact still makes use of the 'EntryStatus' TC,\r\n which already had been introduced in RFC 1271, the predecessor\r\n of RFC 1757 !)\r\n\r\nTo correct this issue without causing a need to update the\r\nReferences of RFC 4502 as well, I propose the following substitute\r\ntext as an Erratum for the text snippit above:\r\n\r\n          vvvvvvvvvvvvvvvvvvvv\r\n|  In the predecessors of the RMON MIB [RFC2819], the EntryStatus\r\n   textual convention was introduced to provide this mutual exclusion\r\n   function.  Since then, this function was added to the SNMP framework\r\n   as the RowStatus textual convention.  The RowStatus textual\r\n   convention is used for the definition of all new tables.\r\n\r\n\r\n(3)  outdated Ref.\r\n\r\nThe DESCRIPTION clause of the protocolDirID OBJECT-TYPE,\r\non page 21/22 of RFC 4502, says:\r\n\r\n    DESCRIPTION\r\n        \"A unique identifier for a particular protocol.  Standard\r\n        identifiers will be defined in such a manner that they\r\n<< page break >>\r\n        can often be used as specifications for new protocols - i.e.,\r\n        a tree-structured assignment mechanism that matches the\r\n        protocol encapsulation 'tree' and that has algorithmic\r\n        assignment mechanisms for certain subtrees.  See RFC 2074 for\r\n        more details.\r\n\r\n        [...]\r\n\r\nRFC 2074 has been obsoleted by RFC 2895 and RFC 2896.\r\nTherefore, the last sentence of this paragraph should better say:\r\n\r\n                                             [...].  See RFC 2895 and\r\n        RFC 2896 for more details.\r\n\r\n\r\n(4)  MIB indexing issue #1\r\n\r\nAs stated in the text added by RFC 4502 to the DESCRIPTION clause\r\nof the addressMapEntry OBJECT-TYPE, the addressMapTable might run\r\nin problems due to the cumulative length of its index object\r\ninstances.\r\n\r\nTherefore, I suspect that it might have been better to replace the\r\nlast index object, addressMapSource, by an object mirroring the\r\naddressMapControlIndex object (direct use of addressMapControlIndex\r\nas the *last* index object might not be considered a valid option).\r\n\r\nNOTE:\r\nI know that it it too late now for any change, unfortunately.\r\n\r\n\r\n(5)  MIB indexing issue #2\r\n\r\nThe DESCRIPTION clause of the TimeFilter TEXTUAL-CONVENTION,\r\non page 16, explains that an index object of type TimeFilter\r\nshould be included as the *first* INDEX component for a time-\r\nfiltered table:\r\n\r\n      A time-filtered conceptual table is created by inserting a\r\n      single object of SYNTAX TimeFilter as the first INDEX component\r\n      in a copy of an existing basic conceptual table (i.e., any\r\n      SEQUENCE without a TimeFilter INDEX component).  [...]\r\n\r\nThe RMON2 MIB does not follow this rule for the following tables:\r\n  - nlHostTable,\r\n  - nlMatrixSDTable,\r\n  - nlMatrixDSTable,\r\n  - alHostTable,\r\n  - alMatrixSDTable, and\r\n  - alMatrixDSTable.\r\n\r\nSince there are arguably good reasons for the present indexing\r\nstructure of these tables, it might perhaps have been better\r\nto have the above DESCRIPTION of the TC modified to accommodate\r\nfor the existing practice.\r\n\r\n\r\n(6)  textual issue\r\n\r\nThe first paragraph of the DESCRIPTION clause for the\r\nalMatrixTopNControlRateBase OBJECT-TYPE, on page 78, says:\r\n\r\n        \"This object controls which alMatrix[SD/DS] entry that the\r\n        alMatrixTopNEntries are sorted by, which view of the matrix\r\n        table that will be used, as well as which table the results\r\n        will be reported in.\r\n\r\nIt should perhaps better say (deleting 2 x 'that'):\r\n\r\n|       \"This object controls which alMatrix[SD/DS] entry the\r\n        alMatrixTopNEntries are sorted by, which view of the matrix\r\n|       table will be used, as well as which table the results\r\n        will be reported in.\r\n\r\n\r\n(7)  wrong numerical limits in ASN.1 comment\r\n\r\nThe ASN.1 comments on the User History Collection Group,\r\nin the second paragraph on page 86, says:\r\n\r\n-- A sample value is stored in two objects - an absolute value and\r\n-- a status object.  This allows numbers from -(2G-1) to +4G to be\r\n-- stored.  The status object also indicates whether a sample is\r\n-- valid.  This allows data collection to continue if periodic\r\n-- retrieval of a particular instance fails for any reason.\r\n\r\nBased on the specification of usrHistoryAbsValue and\r\nusrHistoryValStatus (on page93/94), I strongly suspect that the\r\nspecified limits are wrong, and that this text should say:\r\n\r\n-- A sample value is stored in two objects - an absolute value and\r\n-- a status object.  This allows numbers from -(4G-1) to +(4G-1) to\r\n-- be stored.  The status object also indicates whether a sample is\r\n-- valid.  This allows data collection to continue if periodic\r\n-- retrieval of a particular instance fails for any reason.\r\n\r\n\r\n(8)  inappropriate semantics specified in DESCRIPTION text\r\n     for objects in the usrHistoryControlTable\r\n\r\nThe DESCRIPTION clause of the usrHistoryControlBucketsRequested and\r\nusrHistoryControlBucketsGranted objects (on page 87/88) seem to be\r\ngarbled a bit.\r\n\r\nThe latter contains the (3rd) paragraph:\r\n\r\n        The associated usrHistoryControlBucketsRequested object\r\n        should be set before or at the same time as this object\r\n        to allow the probe to accurately estimate the resources\r\n        required for this usrHistoryControlEntry.\r\n\r\nThis makes no sense here, because the usrHistoryControlBucketsGranted\r\nobject is read-only, and hence cannot be set.\r\n\r\nI strongly suspect that a similar coupling in fact is needed\r\nfor the usrHistoryControlObjects object in relation to the\r\nusrHistoryControlBucketsRequested object:\r\nThe probe cannot estimate the internal resource requirements,\r\nand hence determine the value of usrHistoryControlBucketsGranted\r\nwithout knowing the values of both the usrHistoryControlObjects\r\nand the usrHistoryControlBucketsRequested objects in a row.\r\n\r\nTherefore, I suspect that the above paragraph should be deleted,\r\nand re-inserted with a slight modification as the new second\r\nparagraph into the usrHistoryControlBucketsRequested DESCRIPTION\r\nclause, saying:\r\n                                        vvvvvvv\r\n|       The associated usrHistoryControlObjects object\r\n        should be set before or at the same time as this object\r\n        to allow the probe to accurately estimate the resources\r\n        required for this usrHistoryControlEntry.\r\n\r\n(I intentionally have omitted the appropriate line re-folding\r\n here for clarity.)\r\n\r\n\r\n(9)  two typos\r\n\r\nThe DESCRIPTION clause of the ControlString TEXTUAL-CONVENTION,\r\non page 95, contains two typos:\r\n\r\nThe paragraph:\r\n\r\n           ^w  Wait for the reply string that follows, which is\r\n               terminated by the next command or the end of string.\r\n               Partial and case-insensitive matching is applied, i.e.,\r\n               if the reply string (any case combination) is found\r\n               anywhere in the received string, then the a match is\r\n               found.  If the current timeout elapses without a match,\r\n               then the remaining control string is ignored.\r\n\r\nshould say (deleting 'the' in 'the a') :\r\n\r\n           ^w  Wait for the reply string that follows, which is\r\n               terminated by the next command or the end of string.\r\n               Partial and case-insensitive matching is applied, i.e.,\r\n               if the reply string (any case combination) is found\r\n|              anywhere in the received string, then a match is found.\r\n               If the current timeout elapses without a match, then\r\n               the remaining control string is ignored.\r\n\r\nThe 4th-to-last line of page 95,\r\n\r\n           ^    0x1C\r\n\r\nshould say:\r\n\r\n           ^\\    0x1C\r\n\r\n\r\n(10)  textual clarification\r\n\r\nIn the Appendix of RFC 4502 (Section 8), the paragraph below\r\nthe pseudo-code on page 133 says:\r\n\r\n   The agent applies this function regardless of the lastActivationTime\r\n   of the conceptual row in question.  In other words, counter\r\n   discontinuities are ignored (i.e., a conceptual row is deleted and\r\n   then re-created later).  An agent should consider an object instance\r\n   'changed' when it is created (either at restart time for scalars and\r\n   static objects, or row-creation-time for dynamic tables).\r\n\r\nIt should better say:\r\n\r\n   The agent applies this function regardless of the lastActivationTime\r\n   of the conceptual row in question.  In other words, counter\r\n|  discontinuities (e.g., a conceptual row is deleted and then re-\r\n|  created later) are ignored.  An agent should consider an object\r\n   instance 'changed' when it is created (either at restart time for\r\n   scalars and static objects, or row-creation-time for dynamic tables).", "correct_text": "", "notes": "from pending", "submit_date": "2006-06-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "78", "doc-id": "RFC4501", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   In particular, the \"dnsname\" field of the DNS URI is to be\r\n   considered an internationalized domain name (IDN) unaware\r\n   domain name slot, in the terminology of RFC 3940 [14].", "correct_text": "   In particular, the \"dnsname\" field of the DNS URI is to be\r\n   considered an internationalized domain name (IDN) unaware\r\n   domain name slot, in the terminology of RFC 3490 [14].", "notes": "Reference 14 is RFC 3490 not RFC 3940.", "submit_date": "2006-05-23", "submitter_name": "Yitzchak M. Gottlieb", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "79", "doc-id": "RFC4483", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Inconsistent Ref. to URI Specification\r\n\r\nThe text of RFC 4483 repeatedly refers to  \"RFC2396 [7]\" .\r\nThis is misleading.\r\nEvery occurrence of \"RFC 2396\" should be replaced by \"RFC 3986\".\r\n\r\nNote: Section 10.1. Normative References, holds the proper\r\n      reference to STD 66, RFC 3986 in its item [7] !\r\n\r\n\r\n(2)  Outdated Ref. to HTTP 1.1 Specification\r\n\r\nItem [4] of Section 10.1 Normative References, points to the\r\noutdated original specification for HTTP 1.1, RFC 2016,\r\nwhich has been obsoleted by RFC 2616, 7 years ago.\r\n\r\nSince the HTTP ETAG mechanism (referred to in the text of RFC 4483)\r\nhas been clarified substantially in RFC 2616, the reference to\r\n\"RFC2068 [4]\" in Section 4, near the bottom of page 5 of RFC 4483,\r\nshould bhave been \"RFC2616 [4]\", and the item [4] of Section 10.1,\r\non page 15 of RFC 4483, should be replaced by a citation of RFC 2616\r\naccording to `rfc-ref.txt`.\r\n\r\n\r\n(3)  (Mis)Use of SIP Terminology\r\n\r\nUnfortunately, RFC 4483 substantially adds to the confusion\r\nof precisely defined SIP (and other) terminology.\r\n\r\nIn particular, *all* occurrences of the term \"Header[s]\" in RFC 4483\r\nshould be corrected to say \"Header Field[s]\".\r\n\r\nRFC 4485, published just 2 weeks ahead of RFC 4483, explicitely\r\nposes the requirement for SIP extension documents to follow the\r\nestablished SIP terminology -- cf. Section 4.3 of RFC 4485\r\n(page 10), which says:\r\n\r\n   Careful attention must be paid to the actual usage of terminology.\r\n   Many documents misuse the terms header, header field, and header\r\n   field values, for example.  Document authors SHOULD do a careful\r\n   review of their documents for proper usage of these terms.\r\n\r\nSee also RFC 4249, Section 3.1.1 (page 3) for a similar statement on\r\nthe proper usage of these terms in the context of IMF and MIME, and\r\nrelated (extension) specifications.", "correct_text": "", "notes": "from pending", "submit_date": "2006-06-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2310", "doc-id": "RFC5923", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2", "orig_text": "[[ in the last paragraph at the bottom of page 13: ]]\r\n\r\n   The server, if it decides to reuse the connection, MUST cache in the\r\n   alias table the identity (or identities) of the client as they appear\r\n|  in the X.509 certificate subjectAlternativeName extension field.  [...]\r\n                                   ^^^^^^^^^^^", "correct_text": "   The server, if it decides to reuse the connection, MUST cache in the\r\n   alias table the identity (or identities) of the client as they appear\r\n|  in the X.509 certificate subjectAltName extension field.  [...]\r\n                                   ^^^", "notes": "Rationale:\r\n  Mis-spelling of the defined certificate extension name --\r\n  see (for example) RFC 5280.", "submit_date": "2010-06-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "312", "doc-id": "RFC3267", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "   The FT field and the Q bit are defined in the same way as in\n   Section 4.1.2. The P bits are padding and MUST be set to 0.", "correct_text": "   The FT field and the Q bit are defined in the same way as in\n   Section 4.3.2. The P bits are padding and MUST be set to 0.\n", "notes": "", "submit_date": "2002-07-29", "submitter_name": "Frederic Turgis", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "313", "doc-id": "RFC3266", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "Section 1 refers to RFC 2328 as follows:\n\n   Accordingly, the address type \"IP6\" indicating an IPv6 address,\n   should be allowed in the connection field, \"c=\", of the SDP.  The\n   ABNF already reflects this, though the \"Connection Data\" text under\n   section 6 of RFC 2328 currently only defines the \"IP4\" address type.\n                    ^^^^\nIt should refer to RFC 2327.\n", "correct_text": "", "notes": "", "submit_date": "2004-01-15", "submitter_name": "Bernie Hoeneisen", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "314", "doc-id": "RFC3265", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the Header: ", "orig_text": "   Updates: 2543", "correct_text": "   Updates: 3261\n", "notes": "", "submit_date": "2002-07-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "315", "doc-id": "RFC3262", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "This document obsoletes RFC 2543.\n", "submit_date": "2002-07-04", "submitter_name": "Steve Conner", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "316", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Section 25.1: ", "orig_text": "     digest-uri-value  =  rquest-uri ; Equal to request-uri as\r\n                          specified by HTTP/1.1 ", "correct_text": "     digest-uri-value  =  request-uri ; Equal to request-uri as\r\n                          specified by HTTP/1.1\r\n", "notes": "", "submit_date": "2003-10-03", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "317", "doc-id": "RFC3253", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "The WebDAV working group maintains an errata list for RFC3253 at:\r\nhttp://www.webdav.org/deltav/protocol/rfc3253-issues-list.htm", "submit_date": "2003-10-11", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "318", "doc-id": "RFC3247", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   Finally, there is an additional recommendation in [6] that an EF\r\n   compliant node SHOULD NOT reorder packets within a micorflow.", "correct_text": "   Finally, there is an additional recommendation in [6] that an EF\r\n   compliant node SHOULD NOT reorder packets within a microflow.\r\n", "notes": "micorflow --> microflow", "submit_date": "2006-02-02", "submitter_name": "\"laercio cruvinel\"", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "319", "doc-id": "RFC3245", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "4.2. Name server operator requirements\n\n   RFC 2870 (http://www.ietf.org/rfc/rfc2780.txt) describes the\n   requirements for operating DNS root servers.\"", "correct_text": "4.2. Name server operator requirements\n\n   RFC 2870 (http://www.ietf.org/rfc/rfc2870.txt) describes the\n   requirements for operating DNS root servers.\"\n", "notes": "", "submit_date": "2004-01-02", "submitter_name": "Derrick D. Daugherty", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "449", "doc-id": "RFC2407", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "The section 4 header is missing from the document.  Presently, the document is structured as follows:\n\n1. Abstract\n2. Introduction\n3. Terms and definitions\n   4.1  IPSEC naming scheme\n   4.2  IPSEC situation definition\n...etc.\n", "submit_date": "2004-03-04", "submitter_name": "Jan Wuyts", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "80", "doc-id": "RFC4479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   It is central to this model that each attribute\r\n   is affiliated with the service, person, or device because they\r\n   describe that service, presentity, or device.  This is in contrast to\r\n   a model whereby the attributes are associated with the service,\r\n   presentity, or device because they were reported by that service,\r\n   presentity, or device. ", "correct_text": "   It is central to this model that each attribute\r\n   is affiliated with the service, person, or device because they\r\n   describe that service, person, or device.  This is in contrast to\r\n   a model whereby the attributes are associated with the service,\r\n   person, or device because they were reported by that service,\r\n   person, or device.  ", "notes": "\r\nRegarding the definition from Section 2, on top of page 4 of the RFC,\r\n\r\n   Presentity:  A presentity combines devices, services, and person\r\n      information for a complete picture of a user's presence status on\r\n      the network.\r\n\r\nIMHO the term \"presentity\" should have been replaced by \"person\" to keep this text passage\r\nconsistent with the terminology introduced in Section 2.", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "81", "doc-id": "RFC4470", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "             ).com 3600 IN NSEC +.com ( RRSIG NSEC )", "correct_text": "            \\).com 3600 IN NSEC \\+.com ( RRSIG NSEC )", "notes": "Line should use the escape characters as defined in RFC 1035.", "submit_date": "2006-05-09", "submitter_name": "Sam Weiler", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "82", "doc-id": "RFC4455", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  typo\r\n\r\nSection 3.5 of RFC 4455, on page 11, says:\r\n\r\n   The management of SCSI commands is beyond the scope of this MIB\r\n|  module.  Future SCSI Command MIB module can link to this MIB module,\r\n   through the use of Object Identifiers (OIDs) or INDEX values of\r\n   appropriate tables.\r\n\r\nIt should say:\r\n                                          v\r\n   The management of SCSI commands is beyond the scope of this MIB\r\n|  module.  Future SCSI Command MIB modules can link to this MIB module,\r\n   through the use of Object Identifiers (OIDs) or INDEX values of\r\n   appropriate tables.\r\n\r\n\r\n(2)  typo\r\n\r\nSection 4.1 of RFC 4455, on page 11, says:\r\n\r\n   The scsiDeviceGroup group contains the objects general to each SCSI\r\n   instance: instance, device, and port objects.  It contains also the\r\n   objects referring to the transport(s) used by those SCSI instances.\r\n|  This group is mandatory for all SCSI managed system.\r\n\r\nIt should say:\r\n\r\n   The scsiDeviceGroup group contains the objects general to each SCSI\r\n   instance: instance, device, and port objects.  It contains also the\r\n   objects referring to the transport(s) used by those SCSI instances.\r\n|  This group is mandatory for all SCSI managed systems.\r\n                                                      ^\r\n\r\n(3)  word omission\r\n\r\nThe second paragraph of Section 4.7, on page 12, says:\r\n\r\n   Managed systems acting as a SCSI target device and port and running\r\n|  at high speed supporting should implement this group.\r\n\r\nIt should say:\r\n\r\n   Managed systems acting as a SCSI target device and port and running\r\n|  at high speed supporting statistics should implement this group.\r\n                           ^^^^^^^^^^^\r\n\r\n\r\n(4)  word omission\r\n\r\nThe second paragraph of Section 4.11, on page 13, says:\r\n\r\n   Managed systems acting as a SCSI initiator device and port and\r\n   running at high speed supporting should implement this group.\r\n\r\nIt should say:\r\n\r\n   Managed systems acting as a SCSI initiator device and port and\r\n|  running at high speed supporting statistics should implement this\r\n   group.\r\n                                   ^^^^^^^^^^^\r\n\r\n(5)  text truncation\r\n\r\nThe DESCRIPTION clause of the scsiTransportFCP OBJECT-IDENTITY,\r\non page 24, says:\r\n\r\n        \"This identity identifies a Fibre Channel Protocol for SCSI,\r\n        Second Version.\"\r\n\r\nThis sentence omits the most significant word, \"transport\".\r\nIt should say:\r\n\r\n        \"This identity identifies a Fibre Channel Protocol for SCSI,\r\n|       Second Version, transport.\"\r\n                      ^^^^^^^^^^^\r\nor:\r\n                                 vvvvvvvvvvvvvvvvvvv\r\n|       \"This identity identifies transport via the Fibre Channel\r\n        Protocol for SCSI, Second Version.\"\r\n\r\n\r\n(6)  incomplete description, and incomplete functionality ??\r\n\r\nThe DESCRIPTION clause of the scsiPortBusyStatuses OBJECT-TYPE,\r\non page 30, says:\r\n\r\n        [...]\r\n        Discontinuities in the value of this counter can occur at re-\r\n        initialization of the management system.\"\r\n\r\nAdmittedly, this is true, but more importantly, the counter can\r\nwrap back from 2^32-1 to 0 !!!\r\nThat should be noted there, and it should be detectable by means\r\nof some 'discontinuity time stamp' object in the MIB module.\r\n\r\n\r\n(7)  as (6) above\r\n\r\nThe same issue as stated in item (6) above also holds for the\r\nscsiIntrDevOutResets OBJECT-TYPE, on page 33.\r\n\r\n\r\n(8)  as (6) above\r\n\r\nThe same issue as stated in item (6) above also holds for all\r\ncounters in the SCSI Initiator Port Table, i.e. the DESCRIPTIONs\r\nof the scsiIntrPortOutCommands, scsiIntrPortWrittenMegaBytes,\r\nscsiIntrPortReadMegaBytes, and scsiIntrPortHSOutCommands\r\nOBJECT-TYPEs, on page 35.\r\n\r\n\r\n(9)  typo\r\n\r\nThe ASN.1 comment on top of page 36,\r\n\r\n   -- SCSI target device discovered or authorized to attach each of the\r\n   -- SCSI initiator ports of each SCSI initiator device of each\r\n   -- instance.\r\n\r\nshould say:\r\n                        v\r\n|  -- SCSI target devices discovered or authorized to attach each of the\r\n   -- SCSI initiator ports of each SCSI initiator device of each\r\n   -- instance.\r\n\r\n\r\n(10)  typo (spurious word)\r\n\r\nThe DESCRIPTION clause of the scsiDscTgtIndex OBJECT-TYPE, on page 37,\r\nsays:\r\n\r\n        \"This object is an arbitrary integer used to uniquely identify\r\n        a particular SCSI target device either discovered by, or\r\n|       configured for use with, one or more ports scsiDscTgtName of\r\n        a particular device within a particular SCSI instance.\"\r\n\r\nThe spurious word \"scsiDscTgtName\" should be deleted.\r\nThus, it should say:\r\n\r\n        \"This object is an arbitrary integer used to uniquely identify\r\n        a particular SCSI target device either discovered by, or\r\n|       configured for use with, one or more ports of a particular\r\n        device within a particular SCSI instance.\"\r\n\r\n\r\n(11)  typo (spurious word)\r\n\r\nThe DESCRIPTION clause of the scsiDscTgtDevOrPort OBJECT-TYPE,\r\non page 37, says:\r\n\r\n        \"This object indicates whether this entry describes a\r\n|       configured SCSI target device name (and applies to all ports\r\n        on the identified SCSI target device) or an individual SCSI\r\n        target port.\"\r\n\r\nThe spurious word \"name\" should be deleted.\r\nThus, it should say:\r\n\r\n        \"This object indicates whether this entry describes a\r\n|       configured SCSI target device (and applies to all ports\r\n        on the identified SCSI target device) or an individual SCSI\r\n        target port.\"\r\n\r\n\r\n(12)  similar to (6), and semantic overloading\r\n\r\nThe DESCRIPTION clause of the scsiDscTgtInCommands OBJECT-TYPE,\r\non page 38, says:\r\n\r\n         [...]\r\n         Discontinuities in the value of this counter can occur at re-\r\n         initialization of the management system, and at other times as\r\n         indicated by the value of scsiDscTgtLastCreation.\"\r\n\r\nThe literally same wording is repeated on page 39 in the DESCRIPTION\r\nclauses of the OBJECT-TYPEs\r\n-  scsiDscTgtWrittenMegaBytes,\r\n-  scsiDscTgtReadMegaBytes, and\r\n-  scsiDscTgtHSInCommands.\r\n\r\nSee the explanations for item (6) above.\r\n\r\nThe DESCRIPTION clause of the scsiDscTgtLastCreation OBJECT-TYPE,\r\nat the bottom of page 39, says:\r\n\r\n        \"This object represents the value of sysUpTime when this row\r\n|       was created.\"\r\n\r\nCounter wrap-around isn't table row creation.\r\nThus, isn't the above referral heavy semantic overloading of\r\n\"Last Creation\" time ??\r\n\r\n\r\n(13)  typo\r\n\r\nThe ASN.1 comment near the bottom of page 43,\r\n\r\n|  --***** Table of SCSI Target Device Attached to local SCSI\r\n   --***** Initiator Ports\r\n\r\nshould say:\r\n                                      v\r\n|  --***** Table of SCSI Target Devices Attached to local SCSI\r\n   --***** Initiator Ports\r\n\r\n\r\n(14)  as (6) above\r\n\r\nThe DESCRIPTION clauses, on page 49, of the OBJECT-TYPEs\r\n-  scsiTgtPortInCommands,\r\n-  scsiTgtPortWrittenMegaBytes,\r\n-  scsiTgtPortReadMegaBytes, and\r\n-  scsiTgtPortHSInCommands\r\ncontain the sentence,\r\n\r\n        Discontinuities in the value of this counter can occur at re-\r\n        initialization of the management system.\"\r\n\r\nthe explanations given for item (6) above apply here as well.\r\n\r\n\r\n(15)  improper wording\r\n\r\nThe DESCRIPTION clause of the scsiTgtPortHSInCommands OBJECT-TYPE,\r\non page 49, says:\r\n\r\n        \"This object represents the number of commands received.  This\r\n|       object provides support for systems that can quickly generate a\r\n        large number of commands because they run at high speed.\r\n        [...]\r\n\r\nBecause this object counts *incoming* commands, the word \"generate\"\r\nis considered improper and should be replaced by \"accept\" (or similar):\r\n\r\n        \"This object represents the number of commands received.  This\r\n|       object provides support for systems that can quickly accept a\r\n        large number of commands because they run at high speed.\r\n        [...]\r\n\r\n\r\n(16)  like (12) above\r\n\r\nThe SCSI Authorized Initiator table suffers from the same problems\r\nas the Target Device Discovered Table (Item (12) above):\r\n\r\nThe DESCRIPTION clauses (on pages 52/53) of the OBJECT-TYPEs\r\n-  scsiAuthIntrAttachedTimes,\r\n-  scsiAuthIntrOutCommands,\r\n-  scsiAuthIntrReadMegaBytes,\r\n-  scsiAuthIntrWrittenMegaBytes, and\r\n-  scsiAuthIntrHSOutCommands\r\neach contain the identical sentence:\r\n\r\n        Discontinuities in the value of this counter can occur at re-\r\n        initialization of the management system, and at other times as\r\n        indicated by the value of scsiAuthIntrLastCreation.\"\r\n\r\nand the DESCRIPTION clause of the scsiAuthIntrLastCreation OBJECT-TYPE,\r\non page 53, says:\r\n\r\n        \"This object indicates the value of sysUpTime when this row was\r\n        last created.\"\r\n\r\nCounter wrap-around isn't table row creation.\r\nThus, isn't the above referral heavy semantic overloading of\r\n\"Last Creation\" time ??\r\n\r\n\r\n(17)  again, like (12) above\r\n\r\nThe SCSI LU table suffers from the same problems as above:\r\n\r\nThe DESCRIPTION clauses (on pages 60..62) of the OBJECT-TYPEs\r\n-  scsiLuInCommands,\r\n-  scsiLuReadMegaBytes,\r\n-  scsiLuWrittenMegaBytes,\r\n-  scsiLuInResets,\r\n-  scsiLuOutTaskSetFullStatus, and\r\n-  scsiLuHSInCommands\r\neach contain the identical sentence:\r\n\r\n        Discontinuities in the value of this counter can occur at re-\r\n        initialization of the management system, and at other times as\r\n        indicated by the value of scsiLuLastCreation.\"\r\n\r\nwhile the DESCRIPTION clause of the scsiLuLastCreation OBJECT-TYPE,\r\non page 62, says:\r\n\r\n        \"This object indicates the value of sysUpTime when this row was\r\n        last created.\"\r\n\r\nAgain, counter wrap-around isn't table row creation.\r\nThus, isn't the above referral heavy semantic overloading of\r\n\"Last Creation\" time ??\r\n\r\n\r\n(18)  MIB structure inconsistency ???\r\n\r\nOn page 66, RFC 4455 says:\r\n\r\n   --********************** Notifications ******************************\r\n|  -- scsiNotifications OBJECT IDENTIFIER ::= { scsiMIB  2 }\r\n                                                        ^^^\r\n\r\n   scsiNotificationsPrefix OBJECT IDENTIFIER\r\n                                ::= { scsiNotifications 0 }\r\n\r\nThis is very notable, since on page 23, the same RFC has\r\nspecified:\r\n\r\n   --****************** Structure of the MIB **************************\r\n|  scsiNotifications OBJECT IDENTIFIER ::= { scsiMIB 0 }\r\n   [...]\r\n                                                    ^^^\r\n\r\nAt least, giving different values for the same object name\r\n(though one instance is in an ASN.1 comment) is irritating.\r\n\r\nThe trailing OID component '0' is required for SNMPv1 backwards\r\ncompatibility.  Since it is already contained in the effective\r\n'scsiNotifications' OID (as specified on page 23), the additional\r\nintroduction of 'scsiNotificationsPrefix' seems to be very\r\nredundant.  Its use could be easily substituted by the use of\r\n'scsiNotifications' in the two NOTIFICATION-TYPE invocations\r\non page 66, which would have resulted in the OID assignments,\r\n\r\n   scsiTgtDeviceStatusChanged NOTIFICATION-TYPE\r\n      [...]\r\n   ::= { scsiNotifications 1 }\r\n\r\nand\r\n\r\n   scsiLuStatusChanged NOTIFICATION-TYPE\r\n      [...]\r\n   ::= { scsiNotifications 2 }\r\n\r\nas usual in IETF MIBs.\r\n\r\nThat is now too late to be corrected, but the misleading ASN.1 comment\r\non page 66 of the RFC, as noted above, should be corrected to say:\r\n\r\n   --********************** Notifications ******************************\r\n|  -- scsiNotifications OBJECT IDENTIFIER ::= { scsiMIB  0 }\r\n                                                        ^^^\r\n\r\n(19)  typo\r\n\r\nThe ASN.1 comment on page 67,\r\n\r\n      -- Conditionally mandatory groups to be included with\r\n      -- the mandatory groups when the implementation has\r\n|     -- SCSI target device.\r\n\r\nshould say:\r\n\r\n      -- Conditionally mandatory groups to be included with\r\n      -- the mandatory groups when the implementation has\r\n|     -- SCSI target devices.\r\n                           ^\r\n\r\n(20)  typo\r\n\r\nThe DESCRIPTION clause of the scsiInitiatorDeviceGroup OBJECT-GROUP\r\ninvocation, on page 71, says:\r\n\r\n        \"This group is relevant for s SCSI initiator device and port.\"\r\n\r\nshould say:\r\n                                    v\r\n|       \"This group is relevant for a SCSI initiator device and port.\"\r\n\r\nor even better:\r\n\r\n|       \"This group is relevant for SCSI initiator devices and ports.\"\r\n\r\n\r\n(21)  duplicate / redundant text\r\n\r\nSection 10, on page 76, contains the 5th paragraph:\r\n\r\n   We assume an HBA as the SCSI initiator device and a disk as the SCSI\r\n   target device.  We assume that the SCSI target device has one logical\r\n   unit, addressed by Logical Unit Number set to 0 (LUN0), which is the\r\n   default LUN.  Parallel SCSI has only port identifiers, no port names.\r\n   The transport pointer for parallel SCSI is set to 0 since there is no\r\n   reference transport (SPI) MIB module.\r\n\r\nThis text is a slightly modified restatement of what is said in the\r\ndirectly preceeding paragraph.\r\nThus, this paragraph should be deleted.", "correct_text": "", "notes": "Notes from Keith:\r\nI think the only one of your corrections which is needed to avoid the\r\npossibility of causing confusion to a reader is the one regarding the\r\nOID of scsiNotifications.  If an RFC Errata Note is created because\r\nof that one, and all the other typos that you have found are also\r\nincluded in the same RFC Errata Note, then my fear is that the one\r\nwhich could be important will get buried in the triviality of the\r\nothers.  Thus, I suggest that an RFC Errata Note, if created, should\r\nonly mention the OID of scsiNotifications.\r\n\r\nI don't believe there are any items which need to be considered by the\r\nWG for a future update to the MIB module.\r\n\r\nfrom pending", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Keith McCloghrie", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "83", "doc-id": "RFC4455", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Page 66 says:", "orig_text": " --********************** Notifications ******************************\r\n -- scsiNotifications OBJECT IDENTIFIER ::= { scsiMIB  2 }", "correct_text": " --********************** Notifications ******************************\r\n -- scsiNotifications OBJECT IDENTIFIER ::= { scsiMIB  0 }", "notes": "There are two issues here:\r\n\r\n1) a typo in the ASN.1 comments.  The correct OID is { scsiMIB 0 } because\r\nthat's what the MIB compiler will process, i.e., the MIB compiler will\r\nnot process the ASN.1 comment.  It is not too late to correct the typo\r\nin the ASN.1 comment.\r\n\r\n2) In the development of the MIB, the change to use the OID structure\r\nrecommended by Appendix D of RFC 4181 caused the use of\r\nscsiNotificationsPrefix (as the means to include zero in the OIDs of\r\nthe notifications) to become no longer necessary, and it would have\r\nbeen better if it had been removed.  But, it is now too late to remove\r\nscsiNotificationsPrefix.", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Keith McCloghrie", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "84", "doc-id": "RFC4450", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "    This experiment would have been completely useless without\r\n    participation of the members of the old-standards mailing list.\r\n    Most notably, Pekka Savalo, Bob...", "correct_text": "    This experiment would have been completely useless without\r\n    participation of the members of the old-standards mailing list.\r\n    Most notably, Pekka Savola, Bob...", "notes": "Typo in Pekka Savola's name", "submit_date": "2006-03-29", "submitter_name": "Sam Weiler", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "85", "doc-id": "RFC4448", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "1)  a subtle typo\r\n\r\nSection 4.5 of RFC 4448, on top of page 12, says:\r\n\r\n   The Ethernet PW management model follows the general PW management\r\n   model defined in [RFC3985] and [PWE3-MIB].  Many common PW management\r\n   facilities are provided here, with no additional Ethernet specifics\r\n   necessary.  Ethernet-specific parameters are defined in an additional\r\n   MIB module, [PW-MIB].\r\n\r\nIt should say, replacing \"here\" by \"there\":\r\n\r\n   The Ethernet PW management model follows the general PW management\r\n   model defined in [RFC3985] and [PWE3-MIB].  Many common PW management\r\n|  facilities are provided there, with no additional Ethernet specifics\r\n   necessary.  Ethernet-specific parameters are defined in an additional\r\n   MIB module, [PW-MIB].\r\n\r\n\r\n(2)  terminological issue / violation of reference model\r\n\r\nSection 4.4.1 of RFC 4448, on pp. 9/10, says:\r\n\r\n--- snip ---\r\n   When the PE receives an Ethernet frame, and the frame has a VLAN tag,\r\n   we can distinguish two cases:\r\n\r\n      1. The tag is service-delimiting.  This means that the tag was\r\n         placed on the frame by some piece of service provider-operated\r\n         equipment, and the tag is used by the service provider to\r\n         distinguish the traffic.  For example, LANs from different\r\n         customers might be attached to the same service provider\r\n         switch, which applies VLAN tags to distinguish one customer's\r\n         traffic from another's, and then forwards the frames to the PE.\r\n\r\n      2. The tag is not service-delimiting.  This means that the tag was\r\n         placed in the frame by a piece of customer equipment, and is\r\n         not meaningful to the PE.\r\n\r\n   Whether or not the tag is service-delimiting is determined by local\r\n   configuration on the PE.\r\n--- snip ---\r\n\r\nIMHO, this is a very unfortunate explanation.\r\n\r\na) The term, \"service delimiting\", apparently here is defined\r\n   by the origin of the tag, not by its function.\r\n   I do not believe that this is the appropriate way to deal with;\r\n   later on in RFC 4448, it (reasonably) seems to be permitted\r\n   that a service-delimiting tag has been provided by a CE device!\r\n\r\nb) The situation described in bullet 1), with a provider owned\r\n   switch, removes the PW terminating entity from the provider\r\n   *edge*, turning it from a \"PE\" device into a \"P\" device,\r\n   which is highly inconsistent with the service model developed\r\n   in Section 1 of RFC 4448, and leads to a clash in terminology.\r\n   To stay within that model, the \"coloring\" function described\r\n   in bullet 1) must conceptionally be performed by the NSP\r\n   function *within* the (PW terminating) PE device. (And it might\r\n   as well be performed in customer equipment, i.e. at the CE.)\r\n\r\nPerhaps, the above text should be improved.\r\nI'll try at a first proposal:\r\n\r\n--- snip ---\r\n   When the PE receives an Ethernet frame, and the frame has a VLAN tag,\r\n   we can distinguish two cases:\r\n\r\n      1. The tag is service-delimiting.\r\n\t This means that the tag was introduced for the single purpose\r\n\t of identifying the frame for the PW service, e.g., to select a\r\n\t specific PW for transmission of the frame.  A service-\r\n\t delimiting tag may have been added on the CE side or in the\r\n         (conceptual) NSP function of the PE edge.\r\n\t Ordinarily, any service-delimiting tag will not be transmitted\r\n\t over the PW, i.e., it will be removed before PW encapsulation.\r\n\r\n      2. The tag is not service-delimiting.  This means that the tag is\r\n         not meaningful to the PW endpoints and must be transmitted over\r\n\t the PW.\r\n\t Such tag usually was placed in the frame by a piece of customer\r\n\t equipment, but it might as well be added or modified by the NSP\r\n\t function of the PW terminating PE device.\r\n\r\n   Whether or not the tag is service-delimiting is determined by local\r\n   configuration on the PE.\r\n--- snip ---", "correct_text": "", "notes": "from pending", "submit_date": "2006-05-25", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "86", "doc-id": "RFC4447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract says:", "orig_text": "   It is also possible to use pseudowires to\r\n   provide low-rate Time Division Multiplexed and a Synchronous Optical\r\n   NETworking circuit emulation over an MPLS-enabled network.  This\r\n   document specifies a protocol for establishing and maintaining the\r\n   pseudowires, using extensions to Label Distribution Protocol (LDP).\r\n   Procedures for encapsulating Layer 2 PDUs are specified in a set of\r\n   companion documents.", "correct_text": "   It is also possible to use pseudowires to\r\n|  provide low-rate Time Division Multiplexed and Synchronous Optical\r\n   NETworking circuit emulation over an MPLS-enabled network.  This\r\n   document specifies a protocol for establishing and maintaining the\r\n|  pseudowires, using extensions to the Label Distribution Protocol\r\n   (LDP).  Procedures for encapsulating Layer 2 PDUs are specified in a\r\n   set of companion documents.", "notes": "use of articles", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "87", "doc-id": "RFC4444", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "(2)  issue: non-use of appropriate TC (?)\r\n\r\nThe isisCircLevelIDOctet OBJECT-TYPE macro instance, on page 36,\r\ncontains the SYNTAX clause:\r\n\r\n    isisCircLevelIDOctet OBJECT-TYPE\r\n        SYNTAX Unsigned32(0..255)\r\n\r\nAfter comparison with similar context in the RFC, I suspect that it\r\nwould be appropriate to use the IsisUnsigned8TC TEXTUAL-CONVENTION\r\nin this place as well:\r\n\r\n    isisCircLevelIDOctet OBJECT-TYPE\r\n|       SYNTAX IsisUnsigned8TC\r\n\r\n\r\n(3)  issue: unexpected indexing\r\n\r\nAs described in the SMIv2 RFCs, RFC 4444 extends various tables\r\nby \"reusing\" of common index objects.  Surprisingly, there are\r\ntwo deviations from this practice I cannot detect any reason for:\r\n\r\n(3.1)\r\nThe isisSystemCounterTable (page 39 ff.) is indexed by the fresh,\r\nindependant index object, \"isisSysStatLevel\", while IMHO it would\r\nhave been logical to use the already defined index object of the\r\nisisSysLevelTable (page 25 ff.), \"isisSysLevelIndex\", for this\r\npurpose as well.\r\n\r\n(3.2)\r\nThe isisPacketCounterTable (page 46 ff.) is indexed in the 2nd place\r\nby the fresh, independant index object, \"isisPacketCountLevel\",\r\nwhile IMHO it would have been logical to use the full index structure\r\nof the isisCircLevelTable (page 34 ff.), including the index object,\r\n\"isisCircLevelIndex\" in the second place, for this purpose as well.\r\n\r\n\r\n(4)  issue: many unusual UNITS clauses\r\n\r\nThe UNITS clause is intended a to contains a textual definition of\r\nthe units associated with the object (according to RFC 2578, Section\r\n7.2).  Network management systems usually provide for narrow label\r\nspace in their display screens - expecting usual [physical] unit\r\nnames like \"bytes\", \"kilobytes\", \"seconds\", \"centiseconds\", \"Mbps\",\r\n\"packets\", \"frames\", \"cells\", \"percent\", etc.\r\n\r\nFor most packet counters, RFC 4444 specifies very unusual, lengthy\r\ntexts in the UNITS clauses that duplicate the text given in the\r\nrespective DESCRIPTION clauses.\r\nThis style should better have been avoided and might be noted as\r\nan issue for any potential future update to RFC 4444.\r\n\r\nFor example, the isisPacketCountCSNP OBJECT-TYPE declaration, on\r\npage 49 :\r\n\r\n    isisPacketCountCSNP OBJECT-TYPE\r\n        SYNTAX Counter32\r\n|       UNITS \"Number of IS-IS CSNP frames seen in this direction at\r\n|            this level\"\r\n        MAX-ACCESS read-only\r\n        STATUS current\r\n        DESCRIPTION\r\n            \"The number of IS-IS CSNPs seen in this\r\n             direction at this level.\"\r\n        REFERENCE \"{ISIS.aoi iSISControlPDUsSent (43)}\"\r\n    ::= { isisPacketCounterEntry 7 }\r\n\r\nshould perhaps better say:\r\n\r\n    isisPacketCountCSNP OBJECT-TYPE\r\n        SYNTAX Counter32\r\n|       UNITS \"frames\"\r\n        MAX-ACCESS read-only\r\n        STATUS current\r\n        DESCRIPTION\r\n            \"The number of IS-IS CSNPs seen in this\r\n             direction at this level.\"\r\n        REFERENCE \"{ISIS.aoi iSISControlPDUsSent (43)}\"\r\n    ::= { isisPacketCounterEntry 7 }\r\n\r\n\r\n(5)  errata(?): overly restrictive RowStatus object descriptions\r\n\r\nSome tables with conceptual rows that can be dynamically added\r\nor deleted, contain a control object with SYNTAX RowStatus\r\nand other control objects, e.g. with SYNTAX IsisAdminState.\r\n\r\nI expect that the latter objects have been intended to control\r\nthe activity of \"live\" table rows, without the need to deactivate\r\nthese rows via the RowStatus object before setting the AdminState\r\nto \"on\" or \"off\", so much the more the support for the\r\n'notInServcie' state of the RowStatus objects is explicitely\r\n\"not required\".  Therefore, I strongly suspect that some RowStatus\r\nobject DESCRIPTION clauses have unintentionally been worded overly\r\nrestrictive and should been corrected to allow AdminStatus changes.\r\n\r\nSome other such clauses contain statements that are void due to the\r\nlack of accessible objects in those tables they could be applied to.\r\n\r\nI have identified the following instances of these issues:\r\n\r\n(5.3)\r\n\r\nThe DESCRIPTION clause of the isisCircExistState OBJECT-TYPE macro\r\ninstance, on page 31, says:\r\n\r\n        DESCRIPTION\r\n            \"The existence state of this circuit.  Setting the state\r\n             to 'notInService' halts the generation and processing of\r\n             IS-IS protocol PDUs on this circuit.  Setting the state\r\n             to destroy will also erase any configuration associated\r\n             with the circuit.  Support for 'createAndWait' and\r\n             'notInService' is not required.\r\n\r\n|            A row entry cannot be modified when the value of this\r\n|            object is 'active'.\"\r\n\r\nIt should perhaps instead say:\r\n\r\n        DESCRIPTION\r\n            \"The existence state of this circuit.  Setting the state\r\n             to 'notInService' halts the generation and processing of\r\n             IS-IS protocol PDUs on this circuit.  Setting the state\r\n             to destroy will also erase any configuration associated\r\n             with the circuit.  Support for 'createAndWait' and\r\n             'notInService' is not required.\r\n\r\n|            Any other accessible object in this table row, except\r\n|            isisCircAdminState, cannot be modified when the value\r\n|            of this object is 'active'.\"\r\n\r\n(5.4)\r\n\r\nThe DESCRIPTION clause of the isisRAExistState OBJECT-TYPE macro\r\ninstance, on page 58, says:\r\n\r\n        DESCRIPTION\r\n            \"The existence state of this Reachable Address.  This\r\n             object follows the ManualOrAutomatic behaviors.  Support\r\n             for 'createAndWait' and 'notInService' is not required.\r\n\r\n|            A row entry cannot be modified when the value of this\r\n|            object is 'active'.\"\r\n\r\nIt should perhaps instead say:\r\n\r\n        DESCRIPTION\r\n            \"The existence state of this Reachable Address.  This\r\n             object follows the ManualOrAutomatic behaviors.  Support\r\n             for 'createAndWait' and 'notInService' is not required.\r\n\r\n|            Any other accessible object in this table row, except\r\n|            isisRAAdminState, cannot be modified when the value\r\n|            of this object is 'active'.\"\r\n\r\n(5.5)\r\n\r\nThe DESCRIPTION clause of the isisIPRAExistState OBJECT-TYPE macro\r\ninstance, on page 65, says:\r\n\r\n        DESCRIPTION\r\n            \"The state of this IP Reachable Address.  This object\r\n             follows the ExistenceState and ManualOrAutomatic\r\n             behaviors.  Support for 'createAndWait' and\r\n             'notInService' is not required.\r\n\r\n|            A row entry cannot be modified when the value of this\r\n|            object is 'active'.\"\r\n\r\nIt should perhaps instead say:\r\n\r\n        DESCRIPTION\r\n            \"The state of this IP Reachable Address.  This object\r\n             follows the ExistenceState and ManualOrAutomatic\r\n             behaviors.  Support for 'createAndWait' and\r\n             'notInService' is not required.\r\n\r\n|            Any other accessible object in this table row, except\r\n|            isisIPRAAdminState, cannot be modified when the value\r\n|            of this object is 'active'.\"\r\n\r\n\r\n(8)  issue: on-the-wire inefficiency in notifications\r\n\r\nWhile admittedly the indexing structure of the MIB tables,\r\nand the resulting lack of suitable accessible objects, apparently has\r\nforced the introduction of the unusual and unusually large collection\r\nof special objects with 'MAX-ACCESS accessible-for-notify'\r\n(on pp. 71..74), some redundancies and inefficiencies in the\r\nobject groupings for notifications remain.  Repeatedly, the\r\nnumber of objects could have been reduced by including properly\r\nindexed objects into the notifications object groups instead of\r\nseparate \"special\" objects.  But this might have been considered\r\nacceptable for the sake of a consistent object grouping style.\r\n\r\nBut there is one redundancy that could easily have been avoided.\r\nThe isisDatabaseOverload NOTIFICATION-TYPE declaration, on page 74,\r\n\r\n    isisDatabaseOverload NOTIFICATION-TYPE\r\n        OBJECTS {\r\n            isisNotificationSysLevelIndex,\r\n            isisSysLevelState\r\n        }\r\n\r\nincludes the object, \"isisSysLevelState\", that already carries\r\nthe required SysLevelIndex in the index part of its OID, because\r\nit is contained in the isisSysLevelTable.\r\nTherefore, without any loss of information for the receiver of the\r\nnotification, this declaration could have been simplified to specify:\r\n\r\n    isisDatabaseOverload NOTIFICATION-TYPE\r\n        OBJECTS {\r\n            isisSysLevelState\r\n        }", "correct_text": "", "notes": "This Errata Note has been split with some elements moved to EID 3321.\r\n\r\nAll excerpts from the RFC text are taken literally, keeping their\r\noriginal formatting, and modified text is formatted in conformance\r\nwith RFC guidelines again.\r\n\r\nI use change bars ('|' in column 1) and casual up/down pointing\r\ntags ('^^^' / 'vvv' marks in extra lines) to emphasize the location\r\nof textual issues and/or proposed textual enhancements/corrections.\r\n\r\nNaturally, items (3) and (8) cannot be addressed any more\r\n\"after the fact\" (i.e. publication of the RFC), and item (4)\r\nshould be addressed in a future update.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \n(2) Rejected. Too late for this change. No functional effect.\r\n(3) Rejected. This is discussion not errata.\r\n(4) Rejected. Nothing wrong with original text.\r\n(5.3) Rejected. Pointless wordsmithing.\r\n(5.4) Rejected. Pointless wordsmithing.\r\n(5.5) Rejected. Pointless wordsmithing.\r\n(8) Rejected. This is discussion not errata.   ", "submit_date": "2006-05-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "92", "doc-id": "RFC4433", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.3.1", "orig_text": "   The following table summarizes the behavior of the Assigned HA, based\r\n   on the value of the destination IP address and Home Agent field of\r\n   the Registration Request.\r\n\r\n   Dest IP Addr   HA field      Processing at Assigned HA\r\n   ------------  ------------ ----------------------------------\r\n...\r\n\r\n     Table 1: Registration Request Handling at Assigned HA\r\n", "correct_text": "   The following table summarizes the behavior of the Requested HA,\r\n   based on the value of the destination IP address and the Home Agent\r\n   Address field of the Registration Request.\r\n\r\n   Dest IP Addr   HA field      Processing at Requested HA\r\n   ------------  ------------ ----------------------------------\r\n...\r\n     Table 1: Registration Request Handling at the Requested HA\r\n\r\n", "notes": "According to, e.g., the explanations in bullet 1 of Section 5.3,\r\n\"Assigned HA\" is not correct; the term to be used is \"Requested HA\";\r\nit will eventually become the \"Assigned HA\" if the conditions\r\nmentioned are met, but the behaviour described strictly applies\r\nto the \"Requested HA\" role.\r\n\r\nfrom pending", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3322", "doc-id": "RFC5162", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6", "orig_text": "A VANISHED response sent because of an EXPUNGE or UID EXPUNGE command\r\nor because messages were expunged in other connections (i.e., the\r\nVANISHED response without the EARLIER tag) also decrements the number\r\nof messages in the mailbox; it is not necessary for the server to\r\nsend an EXISTS response with the new value.  It also decrements\r\nmessage sequence numbers for each successive message in the mailbox\r\n(see the example at the end of this section).  Note that a VANISHED\r\nresponse caused by EXPUNGE, UID EXPUNGE, or messages expunged in\r\nother connections SHOULD only contain UIDs for messages expunged\r\nsince the last VANISHED/EXPUNGE response sent for the currently\r\nopened mailbox or since the mailbox was opened.  That is, servers\r\nSHOULD NOT send UIDs for previously expunged messages, unless\r\nexplicitly requested to do so by the UID FETCH (VANISHED) command.\r\n\r\nNote that client implementors must take care to properly decrement\r\nthe number of messages in the mailbox even if a server violates this\r\nlast SHOULD or repeats the same UID multiple times in the returned\r\nUID set.  In general, this means that a client using this extension\r\nshould either avoid using message numbers entirely, or have a\r\ncomplete mapping of UIDs to message sequence numbers for the selected\r\nmailbox.", "correct_text": "A VANISHED response sent because of an EXPUNGE or UID EXPUNGE command\r\nor because messages were expunged in other connections (i.e., the\r\nVANISHED response without the EARLIER tag) also decrements the number\r\nof messages in the mailbox; it is not necessary for the server to\r\nsend an EXISTS response with the new value.  It also decrements\r\nmessage sequence numbers for each successive message in the mailbox\r\n(see the example at the end of this section).\r\n\r\nNote that a VANISHED response caused by EXPUNGE, UID EXPUNGE, or\r\nmessages expunged in other connections MUST only contain UIDs for\r\nmessages expunged since the last VANISHED/EXPUNGE response sent for\r\nthe currently opened mailbox or since the mailbox was opened.  That is,\r\nservers MUST NOT send UIDs for previously expunged messages, unless\r\nexplicitly requested to do so by the UID FETCH (VANISHED) command.\r\nThis is required to prevent a possible race condition where new arrivals\r\nfor which the UID is not yet known by the client are expunged.", "notes": "If the servers were allowed to send VANISHED responses referring to non-existing UIDs, there's a possible race condition when new arrivals are expunged.  This is due to the sequence-UID assymetry of EXISTS vs. VANISHED.\r\n\r\nNew arrivals are reported through EXISTS and their UIDs are not known to the client. Suppose the following scenario where two messages exist and their UIDs are 10 and 11. Two more messages arrive:\r\n\r\n* 4 EXISTS\r\n* VANISHED 12:20\r\n\r\nThe client has no way of knowing whether the two new arrivals have UIDs falling into the 12:20 range. As such, the client doesn't know whether there are two, three or four messages in the mailbox at this point.\r\n\r\nSee http://mailman2.u.washington.edu/pipermail/imap-protocol/2012-June/001781.html for details.\n --VERIFIER NOTES-- \nThis is a clear change to the intention of the document and is too large a change to be appropriate to an erratum. There is a problem here, but it is more properly handled by new work, which is being undertaken as http://datatracker.ietf.org/doc/draft-kundrat-qresync-arrived/", "submit_date": "2012-08-16", "submitter_name": "Jan Kundr\u00e1t", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3323", "doc-id": "RFC5162", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "The \"ENABLE QRESYNC\"/\"ENABLE QRESYNC CONDSTORE\" command\r\nalso tells the server that it SHOULD start sending VANISHED responses\r\n(see Section 3.6) instead of EXPUNGE responses.", "correct_text": "The \"ENABLE QRESYNC\"/\"ENABLE QRESYNC CONDSTORE\" command\r\nalso tells the server that it MUST start sending VANISHED responses\r\n(see Section 3.6) instead of EXPUNGE responses.", "notes": "The explicit allowance for EXPUNGE being sent instead of VANISHED means that clients still have to maintain a full sequence-to-UID mapping, otherwise there is a risk of losing synchronization. Given that QRESYNC itself is an optional extension, I find it hard to imagine a case where the server cannot send a proper VANISHED response.\r\n\r\nIf this errata gets accepted, it will require rather heavy editing of the document; the notion of EXPUNGE responses being allowed is followed throughout the whole RFC, including the examples.\n --VERIFIER NOTES-- \nThe fact that this is a change to a normative requirement of the document, and (as the notes say) the fact that it would cause extensive changes to the rest of the document, makes it inappropriate as an erratum.", "submit_date": "2012-08-16", "submitter_name": "Jan Kundr\u00e1t", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "88", "doc-id": "RFC4443", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  text omission ???\r\n\r\nI suspect that something went wrong in the publication process\r\nfor RFC 4443, leading to significant text omission.\r\n\r\nSymptoms:\r\n\r\no  Text on top of page 5 apparently *continues* specifications\r\n   that are not in the published text;\r\n\r\no  Appendix A contains the change item:\r\n\r\n   - Added specification that all ICMP error messages shall have exactly\r\n     32 bits of type-specific data, so that receivers can reliably find\r\n     the embedded invoking packet even when they don't recognize the\r\n     ICMP message Type.\r\n\r\n   I could not find any text in the body of the RFC corresponding\r\n   to this statement.\r\n\r\nTherefore, I suspect that general specifications for ICMPv6 error\r\nmessages have been dropped inadvertently from the end of Section\r\n2.1, at the bottom of page 4 in the published text, or that even\r\na subsection dealing with the peculiar requirements for ICMPv6\r\nerror messages has been dropped, just leaving in the published text\r\nthe single sentence at top of page 5.\r\n\r\nI expect the missing text to depict the general structure of the\r\nMessage Body of ICMPv6 error messages with all related explanations,\r\naccording to the above mentioned change note.\r\n\r\nAppendix A also states:\r\n\r\n   - Removed the general packet format from Section 2.1.  It refers to\r\n     Sections 3 and 4 for packet formats now.\r\n\r\nThis is not literally true.  The general format *is* in Section 2.1.\r\nBut in fact, it would be logical to have the (missing) specifications\r\nfor error messages -- including the 4 lines of test on top of page 5 --\r\nincorporated into (the start of) Section 3 (*before* the heading for\r\nSection 3.1.) instead of the end of Section 2.1.\r\n\r\n\r\n(2)  possible textual improvement\r\n\r\nin the lower third of page 3, Section 2.1 says:\r\n\r\n   The code field depends on the message type.  It is used to create an\r\n   additional level of message granularity.\r\n\r\nIt should perhaps better say:\r\n\r\n   The code field depends on the message type.  It is used to create an\r\n   additional level of message type granularity.\r\n                              ^^^^^^\r\n\r\n(3)  reference to old IPsec Architecture document\r\n\r\nSection 5.1, at the bottom of page 15, has been updated to point\r\nto the new IPsec Architecture document, RFC 4301, via the reference\r\ntag [SEC-ARCH].  But immediately below, in the first paragraph of\r\nSection 5.2, on top of page 16, the RFC text says:\r\n\r\n   ICMP messages may be subject to various attacks.  A complete\r\n   discussion can be found in the IP Security Architecture [IPv6-SA].\r\n   [...]\r\n\r\nIt remains unclear why the reference is made to the previous IPsec\r\nArchitecture document, RFC 2401, in this case.\r\nIn fact, RFC 4301 has simplified ICMP handling by the introduction\r\nof ICMP Type+Code as a Traffic Selector for the SPD, and therefore\r\ncontains restructured text on ICMP message processing.\r\nNevertheless, as far as I can see, RFC 4301 has not removed\r\nsignificant ICMP security related material from RFC 2401.\r\nThus, IMHO there is no reason to explicitely refer to the obsoleted\r\nspecification, RFC 2401 [IPv6-SA], instead of the current one,\r\nRFC 4301 [SEC-ARCH].\r\n\r\n\r\n(4)  more issues with references\r\n\r\nAccording to Appendix A, RFC 4443 has\r\n\r\n   - Separated References into Normative and Informative.\r\n\r\nThe latest RFC Authoring Internet draft revisions\r\n(cf. draft-rfc-editor-rfc2223bis-xx\r\n and draft-hoffman-rfc-author-guide-01)\r\nall have included the definition:\r\n     Normative references specify documents that must be read\r\n     to understand or implement the technology in the document,\r\n     or whose technology must be present for the technology in\r\n     the new RFC to work.  [...] an informative reference might\r\n     provide background or historical information to the reader.\r\n     [...]\r\n\r\nThe separation performed does not match this definition.\r\n\r\n(4a)\r\nRFC 4443 refers to RFC 792 and RFC 1122 to point out the analogy\r\nto ICMP[v4], but it is a self-contained specification, and ICMPv6\r\ndoes not rely on the implementation of ICMP[v4] -- IPv6 only nodes\r\nare possible and even expected for the (far?) future.\r\nTherefore, the references [RFC-792] and [RFC-1122] should better\r\nhave been placed into section 7.2, Informative References, instead\r\nof Section 7.1, Normative References.\r\n\r\n(4b)\r\nRFC 4443 also lists in Section 7.1, Normative References, the\r\nreference to its obsoleted predecessor, RFC 2463 [RFC-2463].\r\nThis is a fatal lock on the Standards Track for RFC 4443:\r\nRFC 4443 can *not* be advanced above the level of RFC 2463,\r\nif the written procedures are taken literally !\r\n(Also, RFC 4443 contains all material from RFC 2463, and thus\r\nRFC 2463 is not needed to understand and/or implement RFC 4443.)\r\n\r\nTherefore, all references to obsoleted documents should be\r\nnamed Informative, and in the case of RFC 4443, [RFC-2463]\r\nshould have been moved into Section 7.2 as well.\r\n\r\n(4c)\r\nThe old IPv6 Addressing Architecture document, RFC 3513, has been\r\nreplaced by RFC 4291, published more than 5 weeks before RFC 4443.\r\n\r\nTherefore, in Section 7.2 of RFC 4443, the Informative Reference\r\n[IPv6-ADDR] should be have been changed to point to RFC 4291\r\ninstead of the obsolete RFC 3513.\r\n\r\n(4d)\r\nWhen following my recommendations in item (3) above, the\r\nInformative Reference [IPv6-SA] is not needed any more;\r\nits role has been taken over by the Reference [SEC-ARCH].\r\n\r\n\r\n(5)  misleading change note\r\n\r\nThe second bulleted item in Appendix A,\r\n\r\n   - Corrected typos in Section 2.4, where references to sub-bullet e.2\r\n     were supposed to be references to e.3.\r\n\r\napparently is not correct; it must have been introduced in the\r\ndraft history, referring to a change in the draft.\r\nThe references in RFC 2463 to sub-bullet (e.2) were correct.\r\nRFC 4443 has inserted a new item (e.2) into the list, incrementing\r\nthe numbers of the previous sub-bullet (e.2) and all subsequent\r\nsub-bullets, thus making it necessary to increment the references.\r\nPerhaps, the latter had not been done in an early draft revision,\r\nand has then been corrected in a later one.\r\nThus, the above change note should not have been included in RFC 4443.", "correct_text": "", "notes": "from pending", "submit_date": "2006-04-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "89", "doc-id": "RFC4439", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "\r\nThe DESCRIPTION clause for the\r\nt11FamAutoReconfigure OBJECT-TYPE macro invocation says:", "orig_text": "           If value of this object is 'true', the switch will\r\n           send an RCF (ReConfigureFabric) to rebuild the\r\n           Fabric.", "correct_text": "           If the value of this object is 'true', the switch will\r\n           send an RCF (ReConfigureFabric) to rebuild the\r\n           Fabric.\r\n", "notes": "", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "90", "doc-id": "RFC4438", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The DESCRIPTION clause of the t11NsRegClassOfSvc OBJECT-TYPE,on page 16/17, says:", "orig_text": "           \"The class of service indicator.  This object is an\r\n           array of bits that contain a bit map of the classes of\r\n           service supported by the associated port.  If a bit in\r\n           this object is 1, it indicates that the class of\r\n           service is supported by the associated port.  When a\r\n           bit is set to 0, it indicates that no class of service\r\n           is supported by this Nx_Port.\r\n\r\n           If this object has not been not registered for a port,\r\n           then the instance for that port is not instantiated.\"", "correct_text": "           \"The class of service indicator.  This object is an\r\n           array of bits that contain a bit map of the classes of\r\n           service supported by the associated port.  If a bit in\r\n           this object is 1, it indicates that the class of\r\n           service is supported by the associated port.  When all\r\n           bits are set to 0, it indicates that no class of\r\n           service is supported by this Nx_Port.\r\n\r\n           If this object has not been registered for a port,\r\n           then the instance for that port is not instantiated.\"\r\n", "notes": "", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Keith McCloghrie", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "91", "doc-id": "RFC4436", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": "   If a valid ARP Reply is received, the MAC address in the sender\n   hardware address field (ar$sha) in the ARP Reply is matched against\n   the target hardware address field (ar$tpa) in the ARP Request, and\n   the IPv4 address in the sender protocol address field (ar$spa) of the\n   ARP Reply is matched against the target protocol address field\n   (ar$tpa) in the ARP Request.  If a match is found, then the host\n   continues to use that IPv4 address, subject to the lease re-\n   acquisition and expiration behavior described in Section 4.4.5 of the\n   DHCP specification [RFC2131].", "correct_text": "   If a valid ARP Reply is received, where:\n   \n   (a) the address in the sender hardware address field (ar$sha) is\n       the MAC address of the node being tested for, and\n   (b) the address in the sender protocol address field (ar$spa) is\n       the IPv4 address of the node being tested for,\n   \n   then the host concludes that its candidate IPv4 address is valid\n   for this network and may continue to be used, subject to the lease\n   re-acquisition and expiration behavior described in Section 4.4.5\n   of the DHCP specification [RFC2131].\n", "notes": "", "submit_date": "2007-01-01", "submitter_name": "Bernard Aboba", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7016", "doc-id": "RFC7839", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.1", "orig_text": "   Length\r\n      4\r\n\r\n   Operator-Identifier\r\n      The Operator-Identifier is a variable-length Private Enterprise\r\n      Number (PEN) ...", "correct_text": "   Length\r\n      4\r\n\r\n   Operator-Identifier\r\n      The Operator-Identifier is a 32-bit Private Enterprise\r\n      Number (PEN) ...", "notes": "Either the length is 4, and the contents are 32-bits.  Or the length is >1, and the length is variable.\r\n\r\nMy guess is that the intention is to have a fixed length.  The variable-length encoding from RFC 6757 is likely not needed here.\r\n\r\n\r\n*** verifier note ***\r\nSee Bernie Volz's reply in https://mailarchive.ietf.org/arch/msg/dhcwg/Y4yaYwaqxS0B2nWw5f4xER2fSMk/", "submit_date": "2022-07-07", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2022-07-12 12:31:43"}, {"errata_id": "8119", "doc-id": "RFC7707", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.1.1", "orig_text": "1.  The \"Universal\" bit (bit 6, from left to right) of the address is \r\nset to 1.", "correct_text": "1.  The \"Universal\" bit (bit 7, from left to right) of the address is \r\nset to 1.", "notes": "The \"Universal\" bit is the bit #7 and not the bit #6.\n --VERIFIER NOTES-- \n   Per https://mailarchive.ietf.org/arch/msg/opsec/Qjj4KSQ-xFy7ZjPCwHTM_jiJKj4/", "submit_date": "2024-09-24", "submitter_name": "Anvar Durmanov", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-28 17:46:31"}, {"errata_id": "96", "doc-id": "RFC4425", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nInformative References say:", "orig_text": "   [14] Handley, M., Schulzrinne, H., Schooler, E., and J. Rosenberg,\r\n        \"SIP: Session Initiation Protocol\", RFC 2543, March 1999.", "correct_text": "   [14] Rosenberg, J., Schulzrinne, H., Camarillo, G., Johnston, A., Peterson, J., \r\n        Sparks, R., Handley, M., and E. Schooler, \"SIP: Session Initiation \r\n        Protocol\", RFC 3261, June 2002.", "notes": "\r\nInformative reference points to RFC 2543, but this has been outdated by RFC 3261.\r\nRFC 4425 gives an Informative Reference [14] to the SIP\r\nspecification, used only once, in section 4.7; but the\r\ncitation in section 10.2 points to the far outdated RFC 2543\r\nthat has been superseded by RFC 3261 on Jul  2  2002.\r\nBecause this obsolescence has happened so long ago, I have\r\nconjectured that it must have been ignored purposely following\r\nsubtle considerations, and it is not an editorial oversight.", "submit_date": "2006-03-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "97", "doc-id": "RFC4410", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  [contradiction in specification]\r\n\r\nThe last paragraph of Section 2, on page 6 of RFC 4410, says:\r\n\r\n   SRMP is intended for general use under applications that need its\r\n                             vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  services and may exist in parallel instances on the same host.  The\r\n   UDP port is therefore established ad hoc from available application\r\n   ports; accordingly, it would not be appropriate to have a well-known\r\n   port for SRMP.\r\n\r\nContrary to that, the first paragraph of Section 4.7, on page 15,\r\nsays:\r\n   vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  Each host will have a single instance of SRMP supporting all of its\r\n   applications.  Thus, the sender's source rate is the sum of the rates\r\n   of all the clients of the same multicast group.\r\n\r\nWhat's true ?   What's been intended ???\r\n\r\n\r\n(2)  [simple erratum: inconsistent spelling]\r\n\r\nAt the bottom of page 7, Section 3.2 says:\r\n\r\n   Receiver_Timestamp:\r\n|     16 bits   Echo of the Receiver_Time_Stamp field (in milliseconds)\r\n                of the receiver feedback message.  If the sender has\r\n                time delay between receiving the feedback and echoing\r\n                the timestamp, it MUST adjust the Receiver_Timestamp\r\n                value to compensate.\r\n\r\nTo adjust with the diagram on top of page 7 and the remainder of the\r\ntext, 'Receiver_Time_Stamp' should be spelled out 'Receiver_Timestamp'\r\nhere as well.\r\nThus, the RFC should say:\r\n\r\n   Receiver_Timestamp:\r\n|     16 bits   Echo of the Receiver_Timestamp field (in milliseconds)\r\n                of the receiver feedback message.  If the sender has\r\n                time delay between receiving the feedback and echoing\r\n                the timestamp, it MUST adjust the Receiver_Timestamp\r\n                value to compensate.\r\n\r\n\r\n(3)  [inconsistent message layout - danger of interoperability problems]\r\n\r\nThe diagram of the Bundle Header Format (Section 3.2, on page 7),\r\n\r\n      0              8              16             24             32\r\n      +--------------+--------------+--------------+--------------+\r\n      |Version| Type |fb_nr | flag  |        bundle_SN            |\r\n      +--------------+--------------+--------------+--------------+\r\n      |                       Sender_ID                           |\r\n      +--------------+--------------+--------------+--------------+\r\n      |                       Receiver_ID                         |\r\n      +--------------+--------------+--------------+--------------+\r\n      |       Sender_Timestamp      |    Receiver_Timestamp       |\r\n      +--------------+--------------+--------------+--------------+\r\n      |            ...                                            |\r\n\r\n\r\nand the diagram of the Feedback Message Format (Section 3.3, on page 9),\r\n\r\n      0              8              16             24             32\r\n      +--------------+--------------+--------------+--------------+\r\n      |Version| Type | fb_nr| flag  |             X_r             |\r\n      +--------------+--------------+--------------+--------------+\r\n      |       Sender_Timestamp      |    Receiver_Timestamp       |\r\n      +--------------+--------------+--------------+--------------+\r\n      |                       Sender_ID                           |\r\n      +--------------+--------------+--------------+--------------+\r\n      |                      Receiver_ID                          |\r\n      +--------------+--------------+--------------+--------------+\r\n\r\nshow a surprising inconsistency in the order of the (otherwise\r\ncomparable) words {Sender_ID, Receiver_ID, S/R_Timestamps} .\r\nI suspect that this might give rise to implementation faults,\r\nleading to interoperability problems.\r\nIt better would have been avoided from the beginning by using\r\nthe same order of the fields.\r\n\r\nBTW: It strikes that in Section 3.2, the sequence of the field\r\nexplanations does not agree with the order in the diagram (as is\r\nthe case throughout the remainder of the RFC); instead, the\r\nexplanations of just those four fields is given in the order\r\nof the diagram and explanation sequence in Section 3.3.\r\nTherefore, the reader could be lead to the conjecture that the\r\ndiagram in Section 3.2 is in error and in fact should be aligned\r\nwith the diagram in Section 3.3.\r\n\r\n\r\n(4)  [simple erratum: word twister]\r\n\r\nIn Section 3.6, near the top of page 12, the RFC says:\r\n\r\n   Length:\r\n      16 bits  Length of the payload data in octets (does not the\r\n               include header).\r\n\r\nIt should say:\r\n\r\n   Length:\r\n|     16 bits  Length of the payload data in octets (does not include\r\n|              the header).\r\n\r\n\r\n(5)  [simple errata: inconsistent terminology]\r\n\r\nContrary to the remainder of the RFC text, Section 3.7 uses the\r\nfield name \"Sender Address\".  To avoid the unfortunate embedded\r\nspace character, and to align this section with the remainder\r\nof the RFC, the term \"Sender_ID\" should be used.\r\nTherefore:\r\n\r\na) the diagram on page 12,\r\n\r\n      0              8              16             24             32\r\n      +--------------+--------------+--------------+--------------+\r\n      |Version| Type |111 |  00000  |          reserved           |\r\n      +--------------+--------------+--------------+--------------+\r\n      |                            DSN                            |\r\n      +--------------+--------------+--------------+--------------+\r\n|     |                      Sender Address                       |\r\n      +--------------+--------------+--------------+--------------+\r\n\r\nshould be corrected to say:\r\n\r\n      0              8              16             24             32\r\n      +--------------+--------------+--------------+--------------+\r\n      |Version| Type |111 |  00000  |          reserved           |\r\n      +--------------+--------------+--------------+--------------+\r\n      |                            DSN                            |\r\n      +--------------+--------------+--------------+--------------+\r\n|     |                         Sender_ID                         |\r\n      +--------------+--------------+--------------+--------------+\r\n\r\nb) the explanation (at the bottom of page 12),\r\n\r\n|  Sender_ID:\r\n|     The IP address of the sender of the message being NACKed.\r\n\r\nshould be corrected to say:\r\n\r\n|  Sender_ID:\r\n|     The ID of the sender of the message being NACKed.\r\n\r\nSee also item (6) below for the full rationale.\r\n\r\n\r\n(6)  [incomplete specification - IPv4-centric]\r\n\r\nIn Section 4.2, the second paragraph on page 14 says:\r\n\r\n   Also, the bundle length MUST NOT exceed LENGTH_MAX.  If adding a new\r\n   SRMP message will produce a greater length, the SRMP daemon MUST\r\n   initialize a new bundle for the new SRMP messages, and the current\r\n|  bundle should be transmitted immediately.  The recommended value for\r\n|  LENGTH_MAX is 1454 bytes (Ethernet MTU minus IP and UDP header\r\n|  lengths).\r\n\r\nSimilarly, the first paragraph of Section 4.6, on page 15, says:\r\n\r\n   TFMCC is designed for traffic with a fixed message size.  The maximum\r\n|  bundle size (including header) for SRMP is set to a configurable\r\n|  maximum, typically 1454 bytes (Ethernet MTU minus IP and UDP header\r\n|  lengths).  The bundle size will be used in a TCP throughput equation,\r\n   to get a desired source rate.  However, in SRMP, the message size is\r\n   variable because:\r\n\r\nWithout mention, the marked phrases are strictly IPv4-centric;\r\nthey do not apply to the case of IPv6.\r\n\r\nThe latter scenario is not excluded in the text, and the phrase,\r\n\"IPv4 addresses may be used.\" in the description of all Sender_ID\r\nand Receiver_ID fields supports the suspicion that IPv6 in fact\r\nwas intended to be supported.\r\n\r\nPlease supply improved wording for both text fragments.\r\n\r\n\r\n(7)  [simple erratum: grammar (singular/plural mismatch)]\r\n\r\nThe first paragraph of Section 5, on page 17, says:\r\n\r\n   SRMP operates in three distinct transmission modes in order to\r\n   deliver varying levels of reliability: Mode 0 for multicast data that\r\n|  does not require reliable transmission, Mode 1 for data that must be\r\n   received reliably by all members of a multicast group, and Mode 2 for\r\n   data that must be received reliably by a single dynamically\r\n   determined member of a multicast group.\r\n\r\nIt should say:\r\n\r\n   SRMP operates in three distinct transmission modes in order to\r\n   deliver varying levels of reliability: Mode 0 for multicast data that\r\n|  do not require reliable transmission, Mode 1 for data that must be\r\n   received reliably by all members of a multicast group, and Mode 2 for\r\n   data that must be received reliably by a single dynamically\r\n   determined member of a multicast group.\r\n\r\nRationale: \"data\" *is\" plural.\r\n", "correct_text": "", "notes": "from pending", "submit_date": "2006-08-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "98", "doc-id": "RFC4409", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "Issues with References:\r\n\r\na) Section 12 of RFC 4409 contains the entry:\r\n\r\n   [ESMTP]           Klensin, J., Freed, N., Rose, M., Stefferud, E.,\r\n                     and D. Crocker, \"SMTP Service Extensions\", STD 10,\r\n                     RFC 1869, November 1995.\r\n\r\n   `STD 10` in fact should be `(ex) STD 10` according to rfcxx00.txt .\r\n   The material from RFC 1869 has been incorporated into RFC 2821,\r\n   and RFC 1869 has been reclassified to Historic.\r\n\r\n   Therefore, this reference should not have been listed as a\r\n   Normative Reference.  The Ref. to RFC 2821 in fact catches all.\r\n\r\n\r\n   Section 12 of RFC 4409, under [SMTP-MTA] also contains the entry:\r\n\r\n                     Partridge, C., \"Mail routing and the domain\r\n                     system\", STD 10, RFC 974, January 1986.\r\n\r\n   `STD 10` in fact should better have been `(ex) STD 14` --\r\n   rfcxx00.txt says: \"Now Historic.\"                  ^^\r\n\r\n   The non-obsolete material from RFC 974 has been incorporated\r\n   into RFC 2821 and RFC 974 has been reclassified as Historic.\r\n\r\n   Therefore, this reference should not have been listed as a\r\n   Normative Reference.  The Ref. to RFC 2821 in fact catches all.\r\n\r\n\r\n   Finally, the subsequent entry,\r\n\r\n                     Braden, R., \"Requirements for Internet Hosts -\r\n                     Application and Support\", STD 3, RFC 1123, October\r\n                     1989.\r\n\r\n   also is not needed any more, because the SMTP related material\r\n   in RFC 1123 has been revised and incorporated into RFC 2821\r\n   as well.  The Ref. to RFC 2821 in fact catches all.\r\n\r\n\r\nb) Section 13 of RFC 4409, under [MESSAGE-FORMAT] contains the entry:\r\n\r\n                     Braden, R., \"Requirements for Internet Hosts -\r\n                     Application and Support\", STD 3, RFC 1123, October\r\n                     1989.\r\n\r\n   Similarly to the last item above, the IMF related material from\r\n   RFC 1233 has been revised and incorporated into RFC 2822; thus\r\n   this Ref. is not really needed any more.\r\n   The Ref. to RFC 2822 in fact catches all.\r\n\r\n\r\nc) Section 13 of RFC 4409 contains the entry:\r\n\r\n   [IPSEC]           Kent, S. and R. Atkinson, \"Security Architecture\r\n                     for the Internet Protocol\", RFC 2401, November\r\n                     1998.\r\n\r\n   This Ref. was already outdated at the time of publication of\r\n   RFC 4409; it should point to the current IPSEC Architecture\r\n   document, RFC 4301 !\r\n\r\n   BTW:\r\n   This apparently is a `viral` legacy issue -- RFC 2476 also\r\n   contained an outdated Ref., to the predecessor of RFC 2401 !", "correct_text": "", "notes": "", "submit_date": "2006-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "99", "doc-id": "RFC4408", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "1) On page 1, in the IESG notes, \"aParticipants\" should be\r\n   \"Participants\".\r\n\r\n2) On page 40, the US-ASCII normative reference has an incorrectly\r\n   indented second paragraph.  Instead of:\r\n\r\n   [US-ASCII] American National Standards Institute (formerly United\r\n              States of America Standards Institute), \"USA Code for\r\n              Information Interchange, X3.4\", 1968.\r\n\r\n   ANSI X3.4-1968 has been replaced by newer versions with slight\r\n              modifications, but the 1968 version remains definitive for\r\n              the Internet.\r\n\r\n   it should be:\r\n\r\n   [US-ASCII] American National Standards Institute (formerly United\r\n              States of America Standards Institute), \"USA Code for\r\n              Information Interchange, X3.4\", 1968.\r\n\r\n              ANSI X3.4-1968 has been replaced by newer versions with\r\n              slight modifications, but the 1968 version remains\r\n              definitive for the Internet.", "correct_text": "", "notes": "", "submit_date": "2006-05-16", "submitter_name": "Wayne Schlitt", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "100", "doc-id": "RFC4407", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)\r\nOn page 3 of RFC 4407, the third paragraph,\r\n\r\n   Note that the results of this algorithm are only as truthful as the\r\n   headers contained in the message; if a message contains fraudulent or\r\n   incorrect headers, this algorithm will yield an incorrect result.\r\n   [...]\r\n\r\nshould say:\r\n\r\n   Note that the results of this algorithm are only as truthful as the\r\n|  header fields contained in the message; if a message contains\r\n|  fraudulent or incorrect header fields, this algorithm will yield an\r\n   incorrect result.\r\n   [...]\r\n\r\n\r\n(2)\r\nOn page 3, the first sentence in Section 2,\r\n\r\n   The PRA of a message is determined by the following algorithm:\r\n\r\nshould say more precisely:\r\n\r\n   The PRA of a message is determined by the following algorithm,\r\n   applied to the message header (i.e., the first mail header within\r\n   the message, in case of a MIME message):\r\n\r\n\r\n(3)\r\nSubsequently, within the description of the six steps of the\r\nalgorithm (on page 3/4), the term `header` should always be replaced\r\nby `header field`, and `headers` should always be replaced by\r\n`header fields` (total of 16 occurrences).\r\n\r\n\r\n(4)\r\nOn page 4 (just below the emumerated algorithm steps), the paragraph,\r\n\r\n   For the purposes of this algorithm, a header field is \"non-empty\" if\r\n   and only if it contains any non-whitespace characters.  Header fields\r\n   that are otherwise relevant but contain only whitespace are ignored\r\n   and treated as if they were not present.\r\n\r\nshould say:\r\n\r\n   For the purposes of this algorithm, a header field is \"non-empty\" if\r\n|  and only if its body contains any non-whitespace characters.  Header\r\n|  fields that are otherwise relevant but contain only whitespace bodies\r\n   are ignored and treated as if they were not present.\r\n\r\n(5)\r\nImmediately following the paragraph mentioned above in item (4), still\r\non page 4, the substitutions from item (3) above should be applied to\r\nthe next two paragraphs and the last paragraph of Section 2 as well\r\n(total of 8 occurrences).\r\n\r\n\r\n(6)\r\nOn page 5, the first paragraph of section 3,\r\n\r\n   The PRA, as described by this document, is extracted from message\r\n   headers that have historically not been verified.  Thus, anyone using\r\n   the PRA for any purpose MUST be aware that the headers from which it\r\n   is derived might be fraudulent, malicious, malformed, and/or\r\n   incorrect.  [...]\r\n\r\nshould say (apply item (3) above twice):\r\n\r\n   The PRA, as described by this document, is extracted from message\r\n|  header fields that have historically not been verified.  Thus, anyone\r\n|  using the PRA for any purpose MUST be aware that the header fields\r\n   from which it is derived might be fraudulent, malicious, malformed,\r\n   and/or incorrect.  [...]\r\n\r\nand the second paragraph of Section 3,\r\n\r\n   A message's PRA will often be extracted from a header field that is\r\n   not normally displayed by existing mail user agent software.  If the\r\n   PRA is used as part of a mechanism to authenticate the message's\r\n   origin, the message SHOULD NOT be displayed with an indication of its\r\n   authenticity (positive or negative) without the PRA header field also\r\n   being displayed.\r\n\r\nshould say:\r\n\r\n   A message's PRA will often be extracted from a header field that is\r\n   not normally displayed by existing mail user agent software.  If the\r\n   PRA is used as part of a mechanism to authenticate the message's\r\n   origin, the message SHOULD NOT be displayed with an indication of its\r\n|  authenticity (positive or negative) without the PRA header field body\r\n   also being displayed.", "correct_text": "", "notes": "The RFC adds to the trouble of mis-used\r\nterminology from the Internet Message Format (IMF) framework;\r\nit repeatedly confuses the precisely defined terms, 'header',\r\n'header field', and 'header field body'.\r\n\r\nThe most recent summary of the IETF standardized IMF terminology\r\n(from RFC 2822 et al.) can be found on page 3 of RFC 4249:\r\n\r\n\r\n 3.1.1.  Standard Terminology\r\n\r\n   Terms related to the Internet Message Format are defined in\r\n   [N2.RFC2822].  Authors specifying extension header fields should use\r\n   the same terms in the same manner in order to provide clarity and\r\n*  avoid confusion.  For example, a \"header\" [I1.FYI18], [N2.RFC2822] is\r\n*  comprised of \"header fields\", each of which has a \"field name\" and\r\n*  usually has a \"field body\".  Each message may have multiple\r\n*  \"headers\", viz. a message header and MIME-part [N4.RFC2046] headers.\r\n\r\n*  A message header has a Date header field (i.e., a field with field\r\n*  name \"Date\").  However, there is no \"Date header\"; use of such non-\r\n*  standard terms is likely to lead to confusion, possibly resulting in\r\n*  interoperability failures of implementations.\r\n\r\n\r\nFor details, see Sections 2.1 and 2.2 of RFC 2822 and other places.\r\nI also recommend the terminology sections in RFC 4021 and RFC 3864.\r\n\r\nfrom pending", "submit_date": "2006-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "101", "doc-id": "RFC4404", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   The FCIP Entity table contains information about this entity's\r\n   existing instances of FCIP entities.", "correct_text": "   The FCIP Entity table contains information about this device's\r\n   existing instances of FCIP entities.", "notes": "The present text is almost recursive nonsense.\r\n* Section 2. explains the terminology.\r\n* The DESCRIPTION clause of the fcipEntityInstanceTable OBJECT-TYPE\r\n  definition (on page 9) correctly states:\r\n\r\n           \"Information about this FCIP device's existing instances of\r\n            FCIP entities.\"\r\n                                        ^^^^^^\r\n\r\nfrom pending", "submit_date": "2006-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "102", "doc-id": "RFC4396", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.4", "orig_text": "For TYPE 3 units containing the last (trailing) modifier fragment,...", "correct_text": "For TYPE 3 units containing the complete modifiers,...", "notes": "from pending", "submit_date": "2006-03-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "122", "doc-id": "RFC4334", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(1)\r\n\r\nIn the 3rd paragraph of section 1, on page 2 RFC 4334 says:\r\n\r\n   For example, the same wireless station might use IEEE 802.1X to\r\n   authenticate to a corporate IEEE 802.11 WLAN and a public IEEE 802.11\r\n   \"hotspot.\"  [...]\r\n           ^^\r\nThe syntax error of that sentence should be corrected to say:\r\n\r\n   For example, the same wireless station might use IEEE 802.1X to\r\n   authenticate to a corporate IEEE 802.11 WLAN and a public IEEE 802.11\r\n|  \"hotspot\".  [...]\r\n           ^^\r\n\r\n(2)\r\n\r\nAt the end of the 2nd paragraph of section 5, on page 6, the RFC says:\r\n\r\n                           [...].  Whenever this SSID disclosure is a\r\n   concern, different peer certificates ought to be used for the each\r\n   WLAN.\r\n                                                         ^^^^^^^^^^^^\r\nIt should say:\r\n\r\n                           [...].  Whenever this SSID disclosure is a\r\n|  concern, different peer certificates ought to be used for each WLAN.\r\n\r\n\r\n(3)\r\n\r\nIn Section 7.1, on page 7, the Normative Reference,\r\n\r\n                                               vvv\r\n   [EAP]       Aboba, B., Blunk, L., Vollbrechtand, J., Carlson, J.,\r\n               and H. Levkowetz, \"Extensible Authentication Protocol\r\n               (EAP)\", RFC 3748, June 2004.\r\n\r\nshould say:\r\n\r\n|  [EAP]       Aboba, B., Blunk, L., Vollbrecht, J., Carlson, J., and\r\n|              H. Levkowetz, Ed., \"Extensible Authentication Protocol\r\n               (EAP)\", RFC 3748, June 2004.\r\n\r\nand on page 8, the Normative Reference,\r\n\r\n                                       v\r\n   [X.690]     ITU-T Recommendation X.660 Information Technology - ASN.1\r\n               encoding rules: Specification of Basic Encoding Rules\r\n               (BER), Canonical Encoding Rules (CER) and Distinguished\r\n               Encoding Rules (DER), 1997.\r\n\r\nshould say:\r\n                                       v\r\n|  [X.690]     ITU-T Recommendation X.690 Information Technology - ASN.1\r\n               encoding rules: Specification of Basic Encoding Rules\r\n               (BER), Canonical Encoding Rules (CER) and Distinguished\r\n               Encoding Rules (DER), 1997.", "correct_text": "", "notes": "  *  The minor item (1) is included for completeness.\r\n  *  Items (1) and (2) are inherited from RFC 3770. \r\n\r\nfrom pending", "submit_date": "2006-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "383", "doc-id": "RFC2813", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   The presence of a prefix is indicated with a single leading ASCII\r\n   colon character (':', 0x3b), which MUST be the first character of the\r\n                         ^^^^\r\n   message itself.", "correct_text": "   The presence of a prefix is indicated with a single leading ASCII\r\n   colon character (':', 0x3a), which MUST be the first character of the\r\n                         ^^^^\r\n   message itself.\r\n", "notes": "", "submit_date": "2006-08-28", "submitter_name": "Huang Xiangkui", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "103", "doc-id": "RFC4389", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  typo??\r\n\r\nThe last paragraph of section 5 of RFC 4389, on page 12, says:\r\n\r\n   A receives this NA, processing it as usual.  Hence it creates a\r\n   neighbor entry for B on interface 2 in the REACHABLE state and\r\n   records the link-layer address p1.\r\n\r\nSince the packet described has been sent out by node P, on its\r\ninterface '1', to node A, and A has only a single interface\r\ninvolved in the scenarion, with link layer address 'a' (as explained\r\nat the beginning of section 5), \"on interface 2\" is improper in the\r\nsnippit above.  (This may be the result of incomplete adaptation\r\nafter a copy-and-paste operation.)  A minimal correction to resolve\r\nthis issue might be to name the receive interface by its link layer\r\naddress, hence changing the text above to say:\r\n\r\n   A receives this NA, processing it as usual.  Hence it creates a\r\n   neighbor entry for B on interface 'a' in the REACHABLE state and\r\n   records the link-layer address p1.\r\n\r\nor alternatively, more detailed:\r\n\r\n   A receives this NA, processing it as usual.  Hence it creates a\r\n   neighbor entry for B on the interface with link layer address 'a'\r\n   in the REACHABLE state and records the link-layer address p1.\r\n\r\n\r\n(2)  typo!\r\n\r\nThe 3rd paragraph of Section 9, on page 13, says:\r\n\r\n   This document does not introduce any new mechanisms for the\r\n   protection of proxy Neighbor Discovery.  That is, it does not provide\r\n   a mechanism from authorizing certain devices to act as proxies, and\r\n   it does not provide extensions to SEND to make it possible to use\r\n   both SEND and proxies at the same time.  [...]\r\n\r\nIt should perhaps better say ( applying 's/from/for/' ) :\r\n\r\n   This document does not introduce any new mechanisms for the\r\n   protection of proxy Neighbor Discovery.  That is, it does not provide\r\n|  a mechanism for authorizing certain devices to act as proxies, and\r\n   it does not provide extensions to SEND to make it possible to use\r\n   both SEND and proxies at the same time.  [...]\r\n\r\n\r\n(3)  outdated reference\r\n\r\nIn Section 11, Normative References, RFC 4389 contains the entry\r\n(on page 14) [ICMPv6], pointing to RFC 2463.\r\nBut exactly 3 weeks before RFC 4389, RFC 4443 has been published\r\nobsoleting and replacing RFC 2463.  Hence that entry should have\r\nbeen updated to properly point to RFC 4443 instead.\r\n\r\n\r\nIf you agree with my 'diagnosis', I recommend that you submit an\r\nAuthor's Errata Note for RFC 4389 covering the three issues\r\nlisted above.  But if you prefer, I can instead submit an Errata\r\nNote on my own, with your consent mailed to the RFC-Editor.", "correct_text": "", "notes": "from pending", "submit_date": "2006-04-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "104", "doc-id": "RFC4388", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "(1)  [word omission]\r\n\r\nThe second paragraph of section 4.2 of RFC 4388 says:\r\n\r\n   The DHCP Server MIB effort [DHCPMIB] grew out of traffic engineering\r\n   and troubleshooting activities at large DHCP installations, and is\r\n   primarily intended as a method of gathering performance statistics\r\n   about servers the load presented to them.\r\n\r\nIt should perhaps better say:\r\n\r\n   The DHCP Server MIB effort [DHCPMIB] grew out of traffic engineering\r\n   and troubleshooting activities at large DHCP installations, and is\r\n   primarily intended as a method of gathering performance statistics\r\n|  about servers and the load presented to them.\r\n                ^^^^^\r\n\r\n\r\n(2)  [improper wording]\r\n\r\nRFC 4388 repeatedly talks about\r\n\r\n   \"[an] IP address most recently accessed by a client\"\r\n                                  ^^^^^^^^^^^\r\nwhere, IMHO, it should talk about\r\n\r\n|  \"[an] IP address most recently assigned to a client\"\r\n                                  ^^^^^^^^^^^\r\nRationale:\r\n  The client may access any IP address at any time.  Such access\r\n  is mostly unrelated to the protocol described in RFC 4338.\r\n\r\nThe affected places in the text I found are:\r\n- Section 5, first paragraph of both the second and the third\r\n  bulleted items, on page 10 / 11, respectively;\r\n- Last paragraph on page 17 (within section 6.4.1).\r\n\r\n\r\n(3)  [incomplete specification]\r\n\r\nThe second paragraph of Section 6.4.1, on page 17, says:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n   DHCPLEASEUNASSIGNED message.\r\n\r\nIt should in fact say:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n|  DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message returned.\r\n   ^^^^^^^^^^^^^^^^^^^^^                           ^^^^^^^^^\r\n\r\nRationale:\r\n  From the remaining text, it can be inferred that the \"ciaddr\"\r\n  field from the DHCPLEASEQUERY message should be copied to an\r\n  DHCPRELEASEACTIVE reply message as well -- cf. section 6.4.2.\r\n\r\nIMHO, this copy should be performed generally, i.e. also in the case\r\ndescribed by the subsequent paragraph:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n   DHCPLEASEUNKNOWN message must be returned.\r\n\r\nthat therefore might be amended to say:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned, with that IP address\r\n|  set in the \"ciaddr\" field.\r\n\r\n[The original 'must' should be a 'MUST' because the alternatives\r\nare also specified as a 'MUST' -- or else the specification would\r\nbe incomplete.]\r\n\r\nTaken together, it might be preferable to restate this fact by\r\nonly changing the first paragraph cited above as follows, and leave\r\nthe second paragraph unchanged with the exception of the 'must':\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n|  DHCPLEASEQUERY message, then that IP address MUST be set in the\r\n|  \"ciaddr\" field of any reply returned.\r\n\r\n|  If that IP address is one managed by the DHCP server, then it MUST\r\n|  reply with a DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message.\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned.\r\n\r\nPlease comment on which alternative you prefer.", "correct_text": "", "notes": "This errata has been split to 3517 and 3518.\r\n\r\nVerified status applies only to item (1).", "submit_date": "2006-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "105", "doc-id": "RFC4368", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   C-FR  RFC 3034 defines a label-switching-controlled Frame Relay\r\n         (LC-FR) interface.  Packets traversing such an interface carry\r\n         labels in the DLCI field\r\n\r\n   C-ATM RFC 3035 defines a label-switching-controlled ATM (LC-ATM)\r\n         interface as an ATM interface controlled by the label switching\r\n         control component. ", "correct_text": "   LC-FR\r\n         RFC 3034 defines a label-switching-controlled Frame Relay\r\n         (LC-FR) interface.  Packets traversing such an interface carry\r\n         labels in the DLCI field\r\n\r\n   LC-ATM\r\n         RFC 3035 defines a label-switching-controlled ATM (LC-ATM)\r\n         interface as an ATM interface controlled by the label switching\r\n         control component. ", "notes": "The acronyms, \"C-FR\" and \"C-ATM\", do not appear elsewhere in the text.\r\nApparently, the first column has been cut off.", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "106", "doc-id": "RFC4384", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)\r\n\r\nRFC 4384, in the table legend on page 6, and in Section 6,\r\nat the bottom of page 9, refers to ISO 3166-2 for numeric\r\ncountry codes.  This is not correct.\r\n\r\nISO 3166-2 specifies codes for *subdivisions* of countries,\r\ne.g. the States of the U.S.A., or the provinces of Canada.\r\n\r\nThe numeric Country Codes apparently used in RFC 4384 in fact\r\nare defined and maintained as a part of ISO 3166-1 !\r\nThat Standard contains 3 tables: 2-character, 3-character,\r\nand numeric Country Codes.  Unfortunately, only the first\r\ntable (also used for ccTLDs in the DNS) is made publicly\r\n(online) available by ISO; apparently this has generally\r\nraised the impression that ISO 3166-1 just comprised that\r\nsingle table.  (This might have been the background for\r\nmentioning ISO 3166-2 in the RFC.)\r\n\r\nISO certainly would appreciate if many people bought the\r\nISO 3166-2 database when looking for the numeric country\r\ncodes, but probably neither ISOC/IETF nor the RFC author\r\nwould be participating in such earnings of ISO  :-)\r\n\r\nTherefore, I propose to correct this flaw by means of an\r\nRFC Errata Note, as follows:\r\n\r\n\r\nRFC 4384, on mid-page 6, says:\r\n\r\n    <CC> is the 10-bit ISO-3166-2 country code [ISO3166]\r\n\r\nWhere it should say:\r\n\r\n    <CC> is the 10-bit ISO-3166-1 country code [ISO3166]\r\n                               ^^^\r\n\r\nAccordingly, the final sentence of Section 6, on page 9,\r\nsaying:\r\n\r\n                             [...].  Henk Uijterwaal suggested the use\r\n   of the ISO-3166-2 country codes.\r\n\r\nshould say:\r\n\r\n                             [...].  Henk Uijterwaal suggested the use\r\n   of the ISO-3166-1 numeric country codes.\r\n                   ^^^^^^^^^\r\n\r\n\r\n(2)\r\n\r\nAccording to the explanation in Section 3 (page 5), the <Value>\r\nfiled is 16 bit wide, and the last sentence on page 5 in Section 4\r\nemphasized the split format \"<AS>:<Value>\".  (The references to\r\n<Value> in section 4.1 are consistent with that terminology.)\r\n\r\nTherefore, in the table on page 6, the \"<AS>:\" leaders in the\r\ncolumn titled \"Value\" are inappropriate.\r\nPerhaps, a 'minimally invasive' correction should modify the\r\nheadline, not the table entries:\r\n\r\nThe headline of the table on page 6,\r\n\r\n       Category                                 Value\r\n\r\nshould say:\r\n\r\n       Category                              <AS>:<Value>\r\n\r\n\r\n(3)\r\n\r\nThe encoding diagram in section 4.2, on page 9, apparently\r\ncontains the concrete sample value, '0x10F2' (from the\r\nimmediately preceding example in Section 4.1), where it\r\nprobably should contain the abstract notion \"<Value>\".\r\nThe literal encoding as presented is misleading, hence\r\nthe following correction seems to be appropriate:\r\n\r\nRFC 4384, in section 4.2 on page 9 contains the diagram:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |      0x02     |    0x0008     |    Global Administrator       |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     | Global Administrator (cont.)  |           0x10F2              |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nThis diagram should say:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |      0x02     |    0x0008     |    Global Administrator       |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     | Global Administrator (cont.)  |           <Value>             |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\n(4)\r\n\r\nRFC 4384 makes a Normative Reference to RFC 1771.\r\nBut, almost 3 weeks ahead of the publication of RFC 4384,\r\nRFC 1771 has been obsoleted by RFC 4271.\r\n\r\nHas this obsolete reference been made intentionally (I cannot\r\nsee any immediate reason for doing so) -- or is it just an\r\neditorial oversight?", "correct_text": "", "notes": "from pending", "submit_date": "2006-02-27", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "107", "doc-id": "RFC4380", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  Inconsistency on cryptographic algorithm (MAC) requirements\r\n\r\nWithin section 5.2.2, on the upper half of page 21, RFC 4380 states:\r\n\r\n   To maximize interoperability, this specification defines a default\r\n   algorithm in which the authentication value is computed according the\r\n|  HMAC specification [RFC2104] and the SHA1 function [FIPS-180].\r\n   Clients and servers may agree to use HMAC combined with a different\r\n   function, or to use a different algorithm altogether, such as for\r\n   example AES-XCBC-MAC-96 [RFC3566].\r\n\r\n   The default authentication algorithm is based on the HMAC algorithm\r\n   according to the following specifications:\r\n\r\n|  - the hash function shall be the SHA1 function [FIPS-180].\r\n   - the secret value shall be the shared secret with which the client\r\n     was configured.\r\n\r\nContrary to that, within Section 7.2.1, in the paragraph extending\r\nfrom page 39 to page 40, the same RFC says:\r\n\r\n   If the shared secret contains sufficient entropy, the attacker would\r\n   have to defeat the one-way function used to compute the\r\n   authentication value.  This specification suggests a default\r\n<<page break>>\r\n|  algorithm combining HMAC and MD5.  If the protection afforded by MD5\r\n   was not deemed sufficient, clients and servers can agree to use a\r\n   different algorithm, e.g., SHA1.\r\n\r\nI have been educated repeatedly that Security Considerations in RFCs\r\ncontain normative content when describing protocol behaviour.\r\nTherefore, it should not happen that text in Security Considerations\r\ncontradicts normative content of other sections of an RFC.\r\n\r\nRegarding the well known security issues that make MD5 appear much\r\nweaker than SHA-1, according to contemporary comprehension by the\r\ncryptographic community, the former specification (Section 5.2.2)\r\nseems to be the better choice.\r\nI therefore strongly recommend to publish an Author's Errata Note\r\nfor RFC 4380 correcting Section 7.2.1, replacing the snippit above\r\nby text conforming to the rules specified in Section 5.2.2, e.g.:\r\n\r\n   If the shared secret contains sufficient entropy, the attacker would\r\n   have to defeat the one-way function used to compute the\r\n|  authentication value.  This specification defines a default algorithm\r\n|  combining HMAC and SHA-1.  Clients and servers can agree to use a\r\n|  different message authentication algorithm, e.g. AES-XCBC-MAC-96.\r\n|  See Section 5.2.2 for details.\r\n\r\n\r\n(2)  Incomplete IANA Considerations\r\n\r\nSection 9 of RFC 4380, on page 50, says:\r\n\r\n   This memo documents a request to IANA to allocate a 32-bit Teredo\r\n   IPv6 service prefix, as specified in Section 2.6, and a Teredo IPv4\r\n   multicast address, as specified in Section 2.17.\r\n\r\nIt should say:\r\n\r\n|  On requests documented in this memo, IANA has allocated a 32-bit\r\n|  Teredo IPv6 service prefix, as specified in Section 2.6, a Teredo\r\n|  IPv4 multicast address, as specified in Section 2.17, and a Teredo\r\n|  UDP Port number, as specified in Section 2.7.\r\n\r\nRationale:\r\nAs per publication of the RFC, these assignments *have been* performed\r\nby the IANA; I propose modified wording reflecting this fact.\r\nApparently, an IANA assignment also has been performed on behalf of the\r\nTeredo proposal as documented in Section 2.7; for completeness, this\r\nassignment should be mentioned in the IANA Considerations section as\r\nwell.  This will also serve as an easy-to-find \"pointer\" for readers\r\nlooking for the purpose of the assignment found in the IANA registry.\r\n\r\n\r\n(3)  Various typos\r\n\r\nI have found a couple of apparent typos in RFC 4380.  The sub-items\r\n below are pre-formatted for easy inclusion into an RFC errata note.\r\n\r\n\r\n(3.1) Section 5.2.2, page 21\r\n\r\nThe first paragraph on page 21 contains the sentence:\r\n\r\n                                           [...].  Before transmission,\r\n   the authentication value is computed according to the specified\r\n   algorithm; on reception, the same algorithm is used to compute a\r\n   target value from the content of the receive packet.  [...]\r\n\r\nIt should say:\r\n\r\n                                           [...].  Before transmission,\r\n   the authentication value is computed according to the specified\r\n   algorithm; on reception, the same algorithm is used to compute a\r\n|  target value from the content of the received packet.  [...]\r\n                                               ^\r\n\r\n(3.2) Section 5.2.3, page 23\r\n\r\nThe second paragraph on page 23 [numbered list item 4)] says:\r\n\r\n      [...].  The client SHOULD reply with a unicast Teredo bubble, sent\r\n   to the source IPv4 address and source port of the local discovery\r\n   bubble; the IPv6 source address of the bubble will be set to local\r\n   Teredo IPv6 address; [...]\r\n\r\nIt should say:\r\n\r\n      [...].  The client SHOULD reply with a unicast Teredo bubble, sent\r\n   to the source IPv4 address and source port of the local discovery\r\n|  bubble; the IPv6 source address of the bubble will be set to the local\r\n   Teredo IPv6 address; [...]\r\n                                                                ^^^^\r\n\r\n(3.3) Section 5.2.7, page 27\r\n\r\nThe long paragraph in the middle of page 27 says:\r\n\r\n                                              [...].  If the secondary\r\n   qualification fails, the interval determination procedure will not be\r\n   used, and the interval value will remain to the default value, 30\r\n   seconds.  [...]\r\n\r\nIt should say:\r\n\r\n                                              [...].  If the secondary\r\n   qualification fails, the interval determination procedure will not be\r\n|  used, and the interval value will remain at the default value, 30\r\n   seconds.  [...]\r\n                                           ^^^^\r\n\r\n(3.4) Section 5.2.9, page 30\r\n\r\nThe last paragraph of Section 5.2.9 says:\r\n\r\n            [...]  The nonce value and the date at which the packet was\r\n   sent will be documented in a provisional peer entry for the IPV6\r\n   destination.  The ICMPv6 packet will then be sent [...]\r\n\r\nIt should say:\r\n\r\n            [...]  The nonce value and the date at which the packet was\r\n|  sent will be documented in a provisional peer entry for the IPv6\r\n   destination.  The ICMPv6 packet will then be sent [...]\r\n                                                               ^^^^\r\n\r\n(3.5) Section 7.2, page 39\r\n\r\nThe last sentence of Section 7.2 says:\r\n\r\n      [...]  The attacker may have one of two objectives: it may try to\r\n   deny service to the Teredo client by providing it with an address\r\n   that is in fact unreachable, or it may try to insert itself as a\r\n   relay for all client communications, effectively enabling a variety\r\n   of \"man-in-the-middle\" attack.\r\n\r\nIt should say:\r\n\r\n      [...]  The attacker may have one of two objectives: it may try to\r\n   deny service to the Teredo client by providing it with an address\r\n   that is in fact unreachable, or it may try to insert itself as a\r\n   relay for all client communications, effectively enabling a variety\r\n|  of \"man-in-the-middle\" attacks.\r\n                                ^\r\n\r\n\r\n(4)  Formatting issue\r\n\r\nRFC 4380 contains a striking number of spurious blank lines inserted\r\nin the middle of running text, interrupting proper paragraph formating.\r\n\r\nBrowsing through RFC 4380, I have found such spurious blank lines on\r\npages 23, 30, 33, 35, 41, 44, and 46.", "correct_text": "", "notes": "from pending", "submit_date": "2006-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "108", "doc-id": "RFC4379", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": " 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|      Type = 1 (FEC TLV)       |          Length = 12          |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": " 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|      Type = 1 (FEC TLV)       |          Length = 32          |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "According to Section 3.3 of the LDP specification, RFC 3036,\r\nthe Lenght element of LDP TLVs measures the size of the Value\r\nelement in bytes.\r\nTherefore, 'Length = 12' is wrong, it should be 'Length = 32'.\r\n\r\nfrom pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "109", "doc-id": "RFC4377", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   One-hop Delay:             The fixed delay experienced by a packet to\r\n                              reach the next hop resulting from the of\r\n                              the propagation latency, the transmission\r\n                              latency, and the processing latency.", "correct_text": "   One-hop Delay:             The fixed delay experienced by a packet to\r\n                              reach the next hop resulting from the sum\r\n                              of the propagation latency, the\r\n                              transmission latency, and the processing\r\n                              latency.", "notes": "Fix word omission. Insert \"sum\"\r\n", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "110", "doc-id": "RFC4367", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   >From this model, it is clear that three entities in the system can\r\n   potentially make false assumptions about the service provided by the\r\n   server.", "correct_text": "   From this model, it is clear that three entities in the system can\r\n   potentially make false assumptions about the service provided by the\r\n   server.", "notes": "", "submit_date": "2006-02-26", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2894", "doc-id": "RFC5473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "inPacketDeltaCount", "correct_text": "packetDeltaCount", "notes": "s/inPacketDeltaCount/packetDeltaCount/ (three times)\r\n\r\n- including figure 10.\r\n\r\nPer [RFC5102] and IANA's IPFIX registry, the correct name is \"packetDeltaCount\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2909", "doc-id": "RFC6313", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Figure 15", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        Set ID = 2             |      Length = 16 octets       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Template ID = 257       |       Field Count = 2         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0| observationTimeMicroSec=324 |       Field Length = 8        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|   digestHashValue = 326     |       Field Length = 4        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        Set ID = 2             |      Length = 16 octets       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Template ID = 257       |       Field Count = 2         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0| observationTimeMicrosec=324 |       Field Length = 8        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|   digestHashValue = 326     |       Field Length = 4        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "s/observationTimeMicroSec/observationTimeMicrosec/\r\n\r\nPer RFC5477 and IANA's IPFIX registry, the correct name is \"observationTimeMicroseconds\".", "submit_date": "2011-08-02", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "113", "doc-id": "RFC4364", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  Section 1 (Introduction)\r\n\r\nThe 1st paragraph on page 3 contains the sentence:\r\n\r\n                       [...].  The PE routers distribute, to the CE\r\n   routers in a particular VPN, the routes from other the CE routers in\r\n   that VPN.  [...]\r\n\r\nIt should say:\r\n\r\n                       [...].  The PE routers distribute, to the CE\r\n|  routers in a particular VPN, the routes from the other CE routers in\r\n   that VPN.  [...]\r\n                                                ^^^^^^^^^\r\n\r\n\r\n(2)  Section 3.3 (Populating the VRFs)\r\n\r\nThe last paragraph of Section 3.3, on mid-page 12, says:\r\n\r\n   If an attachment circuit leads to a site which is in multiple VPNs,\r\n   the attachment circuit may still associated with a single VRF, in\r\n   which case the VRF will contain routes from the full set of VPNs of\r\n   which the site is a member.\r\n\r\nIt should say:\r\n                                   vvvv\r\n   If an attachment circuit leads to a site which is in multiple VPNs,\r\n|  the attachment circuit may still be associated with a single VRF, in\r\n   which case the VRF will contain routes from the full set of VPNs of\r\n   which the site is a member.\r\n\r\n\r\n(3)  Section 6 (Maintaining Proper Isolation of VPNs)\r\n\r\nAt the bottom of page 26, and extending to page 27, the text says:\r\n\r\n   The first condition ensure that any labeled packets received from\r\n   non-backbone routers have a legitimate and properly assigned label at\r\n<< page break >>\r\n   the top of the label stack.  [...]\r\n\r\nIt should say:\r\n                             vv\r\n|  The first condition ensures that any labeled packets received from\r\n   non-backbone routers have a legitimate and properly assigned label at\r\n<< page break >>\r\n   the top of the label stack.  [...]\r\n\r\n\r\n(4)  Section 7 (How PEs Learn Routes from CEs)\r\n\r\nThe descrition of 'technique #4', on mid-page 28 says:\r\n\r\n      4. The PE and CE routers may be BGP peers, and the CE router may\r\n         use BGP (in particular, EBGP to tell the PE router the set of\r\n         address prefixes that are at the CE router's site. (This\r\n         technique can be used in stub VPNs or transit VPNs.)\r\n\r\nIt should say:\r\n                                    vvv\r\n      4. The PE and CE routers may be BGP peers, and the CE router may\r\n|        use BGP (in particular, EBGP) to tell the PE router the set of\r\n         address prefixes that are at the CE router's site. (This\r\n         technique can be used in stub VPNs or transit VPNs.)\r\n\r\n\r\n(5)  Section 9 (Carriers' Carriers)\r\n\r\nThe last paragraph at the bottom of page 31 contains the sentence:\r\n\r\n                                                       [...].  All that\r\n   is required is that the external routes be known to whatever routers\r\n   are responsible for putting the label stack on a hitherto unlabeled\r\n   packet and that there be label switched path that leads from those\r\n   routers to their BGP peers at other sites.  [...]\r\n\r\nIt should say:\r\n\r\n                                                       [...].  All that\r\n   is required is that the external routes be known to whatever routers\r\n   are responsible for putting the label stack on a hitherto unlabeled\r\n|  packet and that there be a label switched path that leads from those\r\n   routers to their BGP peers at other sites.  [...]\r\n                           ^^^", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').\r\n\r\nfrom pending", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "123", "doc-id": "RFC4327", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "RFC 4327 makes use of the TruthValue textual convention defined in RFC\r\n2579.\r\n\r\nSeveral places in the text identify the enumerations of the textual\r\nconvention (\"true\" and \"false\") using their names and their numeric values\r\n(1 and 2 respectively).\r\n\r\nHowever, several references to the enumerations of the textual convention\r\nuse the incorrect numeric values.\r\n\r\nAll references to the enumerations of this textual convention in this RFC\r\nshould take the names (\"true\" and \"false\") as the definitive settings, and\r\nshould disregard the numeric values when stated incorrectly.\r\n\r\n", "submit_date": "2006-01-18", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "124", "doc-id": "RFC4326", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "When in the Reassembly State, the Receiver reads a 2-byte SNDU Length \r\nfield from the TS Packet payload. If the value is less than or equal to \r\n4, or equal to 0xFFFF, the Receiver discards the Current SNDU and", "correct_text": "When in the Reassembly State, the Receiver reads the first two bytes \r\nfrom the TS Packet payload. This value forms the first 2 bytes of the \r\nSNDU base header, which is a combination of the D-bit and the \r\nSNDU-Length. If the combined value is less than or equal to 4, or equal \r\nto 0xFFFF (i.e. D=1 and SNDU Length = 32768), the Receiver MUST discard \r\nthe Current SNDU and", "notes": "- Usage of last byte in a TS-Packet.\r\nSource: Bernhard Collini-Nocker & Gorry Fairhurst, 15th February 2006", "submit_date": "2006-08-02", "submitter_name": "Gorry Fairhurst", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "125", "doc-id": "RFC4322", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "General", "orig_text": "It's a pity that RFC 4322, published a few days *after* the new IPsec\r\nRFCs including the IKEv2 specification (RFC 4306), does not give a\r\nperspective on Opportunistic Encryption in the context of IKEv2.", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').\n --VERIFIER NOTES-- \nNo action proposed.", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2459", "doc-id": "RFC3413", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "           OBJECT snmpNotifyType\r\n           SYNTAX INTEGER {\r\n               trap(1)\r\n           }\r\n           MIN-ACCESS    read-only\r\n           DESCRIPTION\r\n               \"Create/delete/modify access is not required.\r\n                Support of the value notify(2) is not required.\"\r\n", "correct_text": "           OBJECT snmpNotifyType\r\n           SYNTAX INTEGER {\r\n               trap(1)\r\n           }\r\n           MIN-ACCESS    read-only\r\n           DESCRIPTION\r\n               \"Create/delete/modify access is not required.\r\n                Support of the value inform(2) is not required.\"", "notes": "the enumeration value as stated:  notify(2)\r\nthe enumeration value should be:  inform(2)\r\n\r\nThis appears in section 4.2.1, \"Definitions\" for the SNMP-NOTIFICATION-MIB spanning the page break between page 54 and 55 and contained within the snmpNotifyBasicCompliance macro.", "submit_date": "2010-08-07", "submitter_name": "Mark Ellison", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "128", "doc-id": "RFC4312", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "\r\nInformative References need to be updated\r\n\r\nRationale:\r\nRFC 4312 apparently has been published a bit later than, but\r\nclosely coordinated with, the new IPsec document suite (RFC 430x).\r\n\r\nAccordingly, the Normative Reference [ESP] of RFC 4312 points to\r\nthe new ESP RFC 4303, as expected.\r\n\r\nBut surprisingly, the Informative References are not updated\r\nsimilarly.\r\nI would have expected [ARCH] pointing to RFC 4301 (that has\r\nobsoleted RFC 2401), and at least an additional Ref. to IKEv2\r\n(RFC 4306, which substantially amends/updates the old RFC 2409\r\n[IKE]) -- with title and text of Section 4 slightly adapted.\r\nThe current text and Ref. [IKE] even might lead to the mis-\r\nconception that the Camellia cipher would not be suitable for\r\nuse with IKEv2 (a statement certainly not intended by you).\r\n", "submit_date": "2006-02-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "114", "doc-id": "RFC4352", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(1)\r\n\r\nIn Section 4.3.2.3 of RFC 4352, the first formula line on page 18,\r\n\r\n      TS(i) = TS(i-1) + (DISi + 1) * frame duration,    2 < i < n\r\n\r\nshould say:\r\n\r\n      TS(i) = TS(i-1) + (DISi + 1) * frame duration,    2 <= i <= n\r\n\r\n\r\n(2)\r\n\r\nThe 'Example Algorithm' in Section 4.5.1, on page 27, in the second\r\nhalf of Step 1, says:\r\n\r\n   Return recovered timestamps as\r\n   x(n) = t0 + n*L1 and associated ISF equal to isf0,\r\n   for 0 < n < (t1 - t0)/L0\r\n   goto End\r\n\r\nThis pseudocode fragment should say:\r\n\r\n   for 0 < n < (t1 - t0)/L0\r\n      Return recovered timestamps as\r\n      x(n) = t0 + n*L0 and associated ISF equal to isf0\r\n   goto End\r\n\r\n\r\n(3)\r\n\r\nIn Section 7.2, on page 32, the second item of the unnumbered list\r\nsays:\r\n\r\n   -  The media type (payload format name) is used in SDP \"a=rtpmap\" as\r\n      the encoding name.  [...]\r\n\r\nIt should say:\r\n\r\n   -  The media subtype (payload format name) is used in SDP \"a=rtpmap\"\r\n      as the encoding name.  [...]\r\n\r\n\r\n(4)\r\n\r\nWithin the second paragraph on page 33, Section 7.2.1 of RFC 4352\r\nsays:\r\n                                            [...]  As any receiver will\r\n      be capable of receiving stereo frame type and perform local mixing\r\n      within the AMR-WB+ decoder, there is normally only one reason to\r\n      restrict to mono only: to avoid spending bit-rate on data that are\r\n      not utilized if the front-end is only capable of mono.\r\n\r\nIt should say:\r\n                                            [...]  As any receiver will\r\n      be capable of receiving stereo frame types and perform local\r\n      mixing within the AMR-WB+ decoder, there is normally only one\r\n      reason to restrict to mono only: to avoid spending bit-rate on\r\n      data that are not utilized if the front-end is only capable of\r\n      mono.", "correct_text": "", "notes": "from pending", "submit_date": "2006-02-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "115", "doc-id": "RFC4347", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  typo\r\n\r\nAt the top of page 3, Section 1 of RFC 4347 says:\r\n\r\n                [...].  Unfortunately, although application layer\r\n   security protocols generally provide superior security properties\r\n   (e.g., end-to-end security in the case of S/MIME), they typically\r\n   requires a large amount of effort to design -- in contrast to the\r\n   relatively small amount of effort required to run the protocol over\r\n   TLS.\r\n\r\nIt should say:\r\n\r\n                [...].  Unfortunately, although application layer\r\n   security protocols generally provide superior security properties\r\n   (e.g., end-to-end security in the case of S/MIME), they typically\r\n|  require a large amount of effort to design -- in contrast to the\r\n   relatively small amount of effort required to run the protocol over\r\n   TLS.\r\n\r\n\r\n(2)  imprecise data description for `ciphersuites`\r\n\r\nThis is an issue inherited from RFC 4346 -- see my errata submission\r\non that RFC.  For convenience, I repeat the details here.\r\n\r\nSection 7.4.1.2 of RFC 4346 (on p. 12 of RFC 4346) defines the syntax:\r\n\r\n      uint8 CipherSuite[2];    /* Cryptographic suite selector */\r\n\r\nAccording to the specifications given in Section 4.3 of RFC 4346,\r\nvectors of type CipherSuite strictly must have byte lengths being a\r\nmultiple of 2.\r\nThis also means that the upper bound for a varaiable-length array\r\nof type CipherSuite should always be a multiple of 2.\r\n\r\nHence, the declaration in Section 4.2.1 of RFC 4347, on page 12,\r\n\r\n      struct {\r\n        ProtocolVersion client_version;\r\n        Random random;\r\n        SessionID session_id;\r\n        opaque cookie<0..32>;                             // New field\r\n        CipherSuite cipher_suites<2..2^16-1>;\r\n        CompressionMethod compression_methods<1..2^8-1>;\r\n      } ClientHello;\r\n\r\nshould say:\r\n\r\n      struct {\r\n        ProtocolVersion client_version;\r\n        Random random;\r\n        SessionID session_id;\r\n        opaque cookie<0..32>;                             // New field\r\n|       CipherSuite cipher_suites<2..2^16-2>;\r\n        CompressionMethod compression_methods<1..2^8-1>;\r\n      } ClientHello;\r\n\r\nThis change should be applied to the syntax summary in section 4.3.2,\r\non mid-page 21, as well.\r\n\r\n\r\n(3)  missing white space\r\n\r\nIn Section 4.2.2 of RFC 4347, the lines on top of page 14,\r\n\r\n          case hello_verify_request: HelloVerifyRequest;  // New type\r\n          case server_hello:  ServerHello;\r\n          case certificate:Certificate;\r\n          case server_key_exchange: ServerKeyExchange;\r\n          case certificate_request: CertificateRequest;\r\n          case server_hello_done:ServerHelloDone;\r\n          case certificate_verify:  CertificateVerify;\r\n          case client_key_exchange: ClientKeyExchange;\r\n          case finished:Finished;\r\n\r\nshould say:\r\n\r\n          case hello_verify_request: HelloVerifyRequest;  // New type\r\n          case server_hello:         ServerHello;\r\n|         case certificate:          Certificate;\r\n          case server_key_exchange:  ServerKeyExchange;\r\n          case certificate_request:  CertificateRequest;\r\n|         case server_hello_done:    ServerHelloDone;\r\n          case certificate_verify:   CertificateVerify;\r\n          case client_key_exchange:  ClientKeyExchange;\r\n|         case finished:             Finished;\r\n\r\nThis change should be applied to the syntax summary in section 4.3.2,\r\non top of page 21, as well.\r\n\r\n\r\n(4)  copy-and-paste issue (?)\r\n\r\nOn page 20, the first declaration in Section 4.3.2,\r\n\r\n      enum {\r\n        hello_request(0), client_hello(1), server_hello(2),\r\n        hello_verify_request(3),                          // New field\r\n        certificate(11), server_key_exchange (12),\r\n        certificate_request(13), server_hello_done(14),\r\n        certificate_verify(15), client_key_exchange(16),\r\n        finished(20), (255)\r\n      } HandshakeType;\r\n\r\nshould say, using the appropriate term:\r\n\r\n      enum {\r\n        hello_request(0), client_hello(1), server_hello(2),\r\n|       hello_verify_request(3),                          // New value\r\n        certificate(11), server_key_exchange (12),\r\n        certificate_request(13), server_hello_done(14),\r\n        certificate_verify(15), client_key_exchange(16),\r\n        finished(20), (255)\r\n      } HandshakeType;\r\n\r\n\r\n(5)  Outdated Informative References\r\n\r\nRFC 4347 has been published several months after the new IPsec RFCs.\r\nIt therefore would have been preferrable to have the following\r\nreferences updated:\r\n\r\n   [AH]   :  RFC 2402  -->  RFC 4302\r\n\r\n   [ESP]  :  RFC 2406  -->  RFC 4303\r\n\r\nBTW: The Ref. \"[AH]\" does *not* appear anywhere in the text!\r\n\r\nAlso, The DCCP RFCs have been published a few weeks before RFC 4347;\r\ntherefore, the following Ref. update would have been appropriate:\r\n\r\n   [DCCP] :  \"Work in Progress\"  -->  RFC 4340, March 2006.\r\n\r\n\r\n(6)  unexpected / inappropriate Reference\r\n\r\nPage 23 contains the inappropriate Informative Reference:\r\n\r\n   [PHOTURIS] Karn, P. and W. Simpson, \"ICMP Security Failures\r\n              Messages\", RFC 2521, March 1999.\r\n\r\nThis clearly should be:\r\n\r\n|  [PHOTURIS] Karn, P. and W. Simpson, \"Photuris: Session-Key Management\r\n|             Protocol\", RFC 2522, March 1999.\r\n\r\n(Cf. the citations to [PHOTURIS], in Section 4.2.1, on page 11.)", "correct_text": "", "notes": "All excerpts from the RFC text are taken keeping their original\r\nformatting, and modified text is formatted in conformance with\r\nRFC guidelines again.\r\n\r\nI use change bars ('|' in column 1) and casual up/down pointing\r\ntags ('^^^' / 'vvv' marks in extra lines) to emphasize the location\r\nof textual issues and/or proposed textual enhancements/corrections.\r\n\r\nfrom pending", "submit_date": "2006-05-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "116", "doc-id": "RFC4346", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Following references should all be to Section 12:\r\n\r\nSection 6:\r\n# See Section 11 for IANA Considerations for ContentType values.\r\n\r\nSection 7.2.2:\r\n# See Section 11 for IANA Considerations for alert values.\r\n\r\nSection 7.4:\r\n# See Section 11 for IANA Considerations for these values.\r\n\r\nSection 7.4.4:\r\n# Additional information describing the role of IANA in the allocation\r\n# of ClientCertificateType code points is described in Section 11.\r\n\r\nfrom pending", "submit_date": "2006-05-11", "submitter_name": "David Hopwood", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "117", "doc-id": "RFC4346", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(C2)  imprecise data description for `ciphersuites`\r\n\r\nSection 7.4.1.2, on page 37 defines the syntax:\r\n\r\n      uint8 CipherSuite[2];    /* Cryptographic suite selector */\r\n\r\nAccording to the specifications given in Section 4.3, vectors\r\nof type CipherSuite strictly must have byte lengths being a\r\nmultiple of 2.\r\nThis also means that the upper bound for a varaiable-length array\r\nof type CipherSuite should always be a multiple of 2.\r\nHence, the declaration in Section 7.4.1.2, on top of page 38,\r\n\r\n      struct {\r\n          ProtocolVersion client_version;\r\n          Random random;\r\n          SessionID session_id;\r\n          CipherSuite cipher_suites<2..2^16-1>;\r\n          CompressionMethod compression_methods<1..2^8-1>;\r\n      } ClientHello;\r\n\r\nshould better say:\r\n\r\n      struct {\r\n          ProtocolVersion client_version;\r\n          Random random;\r\n          SessionID session_id;\r\n|         CipherSuite cipher_suites<2..2^16-2>;\r\n          CompressionMethod compression_methods<1..2^8-1>;\r\n      } ClientHello;\r\n\r\nThis issue recurs in Appendix A.4.1 (2nd line from bottom of p.57)\r\nand at various places in other TLS RFCs, in particular in RFC 4347\r\nand RFC 4366 -- see my errata messages for these RFCs.\r\n\r\nHistorical Note:\r\n  In SSL 2.0, the CipherSuite construct was 3 bytes long.\r\n  Because 3 divides 2^16-1,  <3..2^16-1>  was an appropriate size\r\n  range then.  The issue has been introduced with SSL 3.0.\r\n\r\n\r\n(C3)  missing Reference\r\n\r\nAppendix B, at the bottom of page 66, contains the Glossary item:\r\n\r\n   RC2\r\n      A block cipher developed by Ron Rivest at RSA Data Security, Inc.\r\n      [RSADSI] described in [RC2].\r\n\r\nThere is no such Reference \"[RSADSI]\" in the Informative References\r\nSection, on pp. 82 ff. -- apparently, it has been prematurely deleted\r\nfrom RFC 2246.  Perhaps, nothing would be lost when replacing the\r\nabove Glossary item by:\r\n\r\n   RC2\r\n      A block cipher developed by Ron Rivest described in [RC2].\r\n\r\n\r\n(C4)  Outdated Normative Reference\r\n\r\nRFC 4346 has been jointly published with RFC 4366, which has\r\nobsoleted RFC 3546.\r\nTherefore, it would have been much more consistent to replace,\r\nin the Normative References Section, on page 82, the entry:\r\n\r\n   [TLSEXT]   Blake-Wilson, S., Nystrom, M., Hopwood, D., Mikkelsen, J.,\r\n              and T. Wright, \"Transport Layer Security (TLS)\r\n              Extensions\", RFC 3546, June 2003.\r\n\r\nby:\r\n\r\n   [TLSEXT]   Blake-Wilson, S., Nystrom, M., Hopwood, D., Mikkelsen, J.,\r\n              and T. Wright, \"Transport Layer Security (TLS)\r\n|             Extensions\", RFC 4366, April 2006.\r\n                               ^^^^^^^^^^^^^^^^\r\n\r\n(C5)  unexpected / inappropriate Reference\r\n\r\nPage 83 contains the inappropriate Informative Reference:\r\n\r\n   [TCP]      Hellstrom, G. and P. Jones, \"RTP Payload for Text\r\n              Conversation\", RFC 4103, June 2005.\r\n\r\nThis clearly should be:\r\n\r\n|  [TCP]      Postel, J., \"Transmission Control Protocol\", STD 7,\r\n|             RFC 793, September 1981.\r\n\r\n(Cf. the single citation to [TCP], in the first paragraph of Section 1,\r\non page 4.)\r\n\r\n\r\nSimple textual issues (errata)\r\n==============================\r\n\r\n(E1)  typo\r\n\r\nThe second paragraph of Section 3 of RFC 4346, on page 6, says:\r\n\r\n   This document is not intended to supply any details of service\r\n   definition or of interface definition, although it does cover select\r\n   areas of policy as they are required for the maintenance of solid\r\n   security.\r\n\r\nIt should perhaps say:\r\n\r\n   This document is not intended to supply any details of service\r\n   definition or of interface definition, although it does cover\r\n|  selected areas of policy as they are required for the maintenance of\r\n   solid security.\r\n\r\n(E2)  copy-and-paste error (?)\r\n\r\nAt the bottom of page 11, Section 4.7 of RFC 4346 says:\r\n\r\n   In public key encryption, a public key algorithm is used to encrypt\r\n   data in such a way that it can be decrypted only with the matching\r\n   private key.  A public-key-encrypted element is encoded as an opaque\r\n   vector <0..2^16-1>, where the length is specified by the signing\r\n   algorithm and key.\r\n\r\nIt should say:\r\n\r\n   In public key encryption, a public key algorithm is used to encrypt\r\n   data in such a way that it can be decrypted only with the matching\r\n   private key.  A public-key-encrypted element is encoded as an opaque\r\n|  vector <0..2^16-1>, where the length is specified by the encrypting\r\n   algorithm and key.\r\n                                                            ^^^^^^^^^^\r\n\r\n(E3)  typo\r\n\r\nThe beginning of the first paragraph of Section 6.1, on page 15,\r\n\r\n   A TLS connection state is the operating environment of the TLS Record\r\n   Protocol.  It specifies a compression algorithm, and encryption\r\n   algorithm, and a MAC algorithm.  In addition, the parameters for\r\n\r\nshould say (replacing \"and\" by \"an\"):\r\n\r\n   A TLS connection state is the operating environment of the TLS Record\r\n|  Protocol.  It specifies a compression algorithm, an encryption\r\n   algorithm, and a MAC algorithm.  In addition, the parameters for\r\n\r\n\r\n(E4)  word twister\r\n\r\nNear the bottom of page 15, Section 6.1 says:\r\n\r\n   compression algorithm\r\n      An algorithm to be used for data compression.  This specification\r\n      must include all information the algorithm requires compression.\r\n\r\nIt should perhaps say:\r\n\r\n   compression algorithm\r\n      An algorithm to be used for data compression.  This specification\r\n|     must include all information the compression algorithm requires.\r\n\r\n\r\n(E5)  improper indentation\r\n\r\nIn Section 7.4.1.1, on page 36, a headline is indented too much;\r\nthe text,\r\n\r\n         Structure of this message:\r\n\r\n             struct { } HelloRequest;\r\n\r\n   Note: This message MUST NOT be included ...\r\n\r\nshould say:\r\n\r\n|  Structure of this message:\r\n\r\n             struct { } HelloRequest;\r\n\r\n   Note: This message MUST NOT be included ...\r\n\r\n\r\n(E6)  improper line (un)folding and irregular indentation\r\n\r\nIn Section 7.4.1.2, at the bottom of page 36, the text,\r\n\r\n      struct {\r\n         uint32 gmt_unix_time;\r\n         opaque random_bytes[28];\r\n      } Random;\r\n\r\n   gmt_unix_time The current time and date in standard UNIX 32-bit\r\n      format (seconds since the midnight starting Jan 1, 1970, GMT,\r\n      ignoring leap seconds) according to the sender's internal clock.\r\n      Clocks are not required to be set correctly by the basic TLS\r\n      Protocol; higher-level or application protocols may define\r\n      additional requirements.\r\n\r\n         random_bytes\r\n             28 bytes generated by a secure random number generator.\r\n\r\nfollowing the layout style followed in the remainder of the document\r\nshould be formatted as:\r\n\r\n      struct {\r\n         uint32 gmt_unix_time;\r\n         opaque random_bytes[28];\r\n      } Random;\r\n\r\n|  gmt_unix_time\r\n|     The current time and date in standard UNIX 32-bit\r\n      format (seconds since the midnight starting Jan 1, 1970, GMT,\r\n      ignoring leap seconds) according to the sender's internal clock.\r\n      Clocks are not required to be set correctly by the basic TLS\r\n      Protocol; higher-level or application protocols may define\r\n      additional requirements.\r\n\r\n|  random_bytes\r\n|     28 bytes generated by a secure random number generator.\r\n\r\n\r\n(E7)  improper line (un)folding\r\n\r\nThe last paragraph of Section 7.4.1.3, on page 40,\r\n\r\n   compression_method The single compression algorithm selected by the\r\n      server from the list in ClientHello.compression_methods.  For\r\n      resumed sessions this field is the value from the resumed session\r\n      state.\r\n\r\nconsistently should be formatted as:\r\n\r\n|  compression_method\r\n|     The single compression algorithm selected by the server from the\r\n      list in ClientHello.compression_methods.  For resumed sessions\r\n      this field is the value from the resumed session state.\r\n\r\n\r\n(E8)  improper line (un)folding and irregular indentation\r\n\r\nIn Section 7.4.7.1, on page 48, the clauses,\r\n\r\n      client_version The latest (newest) version supported by the\r\n         client.  This is used to detect version roll-back attacks.\r\n         Upon receiving the premaster secret, the server SHOULD check\r\n         that this value matches the value transmitted by the client in\r\n         the client hello message.\r\n\r\n      random\r\n          46 securely-generated random bytes.\r\n\r\nconsistently should be formatted as:\r\n\r\n|     client_version\r\n|        The latest (newest) version supported by the client.  This is\r\n         used to detect version roll-back attacks.  Upon receiving the\r\n         premaster secret, the server SHOULD check that this value\r\n         matches the value transmitted by the client in the client hello\r\n         message.\r\n\r\n      random\r\n|        46 securely-generated random bytes.\r\n\r\nand subsequently, the clause,\r\n\r\n      pre_master_secret\r\n          This random value is generated by the client and is used to\r\n          generate the master secret, as specified in Section 8.1.\r\n\r\nshould be:\r\n\r\n      pre_master_secret\r\n|        This random value is generated by the client and is used to\r\n|        generate the master secret, as specified in Section 8.1.\r\n\r\n\r\n(E9)  spurious text line\r\n\r\nDuring the removal of the \"EXPORT\" ciper suites from Appendix C,\r\na text line from RFC 2246 has been left there inadvertently.\r\nThe table, at the bottom of page 68,\r\n\r\n      Key\r\n      Exchange\r\n      Algorithm     Description                        Key size limit\r\n\r\n      DHE_DSS       Ephemeral DH with DSS signatures   None\r\n      DHE_RSA       Ephemeral DH with RSA signatures   None\r\n      DH_anon       Anonymous DH, no signatures        None\r\n      DH_DSS        DH with DSS-based certificates     None\r\n      DH_RSA        DH with RSA-based certificates     None\r\n|                                                      RSA = none\r\n      NULL          No key exchange                    N/A\r\n      RSA           RSA key exchange                   None\r\n\r\nshould say:\r\n\r\n      Key\r\n      Exchange\r\n      Algorithm     Description                        Key size limit\r\n\r\n      DHE_DSS       Ephemeral DH with DSS signatures   None\r\n      DHE_RSA       Ephemeral DH with RSA signatures   None\r\n      DH_anon       Anonymous DH, no signatures        None\r\n      DH_DSS        DH with DSS-based certificates     None\r\n      DH_RSA        DH with RSA-based certificates     None\r\n      NULL          No key exchange                    N/A\r\n      RSA           RSA key exchange                   None\r\n\r\n\r\n(E10) improper language\r\n\r\nDuring the addition of the third protocol variant, text in Appendix E\r\nhas become improper, stiil talking about \"both\" versions.\r\n\r\nThe second paragraph of Appendix E, on page 71,\r\n\r\n   TLS versions 1.1 and 1.0, and SSL 3.0 are very similar; thus,\r\n   supporting both is easy.  TLS clients who wish [...]\r\n              ^^^^\r\nshould say, e.g.:\r\n\r\n   TLS versions 1.1 and 1.0, and SSL 3.0 are very similar; thus,\r\n|  supporting all is easy.  TLS clients who wish [...]\r\n              ^^^\r\n\r\n\r\n(E11) improper line (un)folding\r\n\r\nAppendix E.1, near the bottom on page 73, contains the clause:\r\n\r\n   challenge The client challenge to the server for the server to\r\n      identify itself is a (nearly) arbitrary-length random.  The TLS\r\n      server will right-justify the challenge data to become the\r\n      ClientHello.random data (padded with leading zeroes, if\r\n      necessary), as specified in this protocol specification.  If the\r\n      length of the challenge is greater than 32 bytes, only the last 32\r\n      bytes are used.  It is legitimate (but not necessary) for a V3\r\n      server to reject a V2 ClientHello that has fewer than 16 bytes of\r\n      challenge data.\r\n\r\nThis should be formatted as:\r\n\r\n|  challenge\r\n|     The client challenge to the server for the server to identify\r\n      itself is a (nearly) arbitrary-length random.  The TLS server will\r\n      right-justify the challenge data to become the ClientHello.random\r\n      data (padded with leading zeroes, if necessary), as specified in\r\n      this protocol specification.  If the length of the challenge is\r\n      greater than 32 bytes, only the last 32 bytes are used.  It is\r\n      legitimate (but not necessary) for a V3 server to reject a V2\r\n      ClientHello that has fewer than 16 bytes of challenge data.\r\n\r\n\r\n\r\n(E12) punctuation issues in References\r\n\r\nThe following Normative Reference entries on page 81/82 contain\r\nsyntactically inconsistent punctuation.\r\n\r\n   [AES]      National Institute of Standards and Technology,\r\n              \"Specification for the Advanced Encryption Standard (AES)\"\r\n              FIPS 197.  November 26, 2001.\r\nshould say:\r\n   [AES]      National Institute of Standards and Technology,\r\n              \"Specification for the Advanced Encryption Standard\r\n|             (AES)\", FIPS 197.  November 26, 2001.\r\n                    ^\r\n\r\n   [3DES]     W. Tuchman, \"Hellman Presents No Shortcut Solutions To\r\n              DES,\" IEEE Spectrum, v. 16, n. 7, July 1979, pp. 40-41.\r\nshould say:\r\n   [3DES]     W. Tuchman, \"Hellman Presents No Shortcut Solutions To\r\n|             DES\", IEEE Spectrum, v. 16, n. 7, July 1979, pp. 40-41.\r\n                 ^^\r\n\r\n   [DES]      ANSI X3.106, \"American National Standard for Information\r\n              Systems-Data Link Encryption,\" American National Standards\r\n              Institute, 1983.\r\nshould say:\r\n   [DES]      ANSI X3.106, \"American National Standard for Information\r\n|             Systems-Data Link Encryption\", American National Standards\r\n              Institute, 1983.\r\n                                          ^^\r\n\r\n   [DSS]      NIST FIPS PUB 186-2, \"Digital Signature Standard,\"\r\n              National Institute of Standards and Technology, U.S.\r\n              Department of Commerce, 2000.\r\nshould say:                                                   vv\r\n|  [DSS]      NIST FIPS PUB 186-2, \"Digital Signature Standard\",\r\n              National Institute of Standards and Technology, U.S.\r\n              Department of Commerce, 2000.\r\n\r\n\r\n   [SHA]      NIST FIPS PUB 180-2, \"Secure Hash Standard,\" National\r\n              Institute of Standards and Technology, U.S. Department of\r\n              Commerce., August 2001.\r\nshould say:                                             vv\r\n|  [SHA]      NIST FIPS PUB 180-2, \"Secure Hash Standard\", National\r\n              Institute of Standards and Technology, U.S. Department of\r\n              Commerce., August 2001.\r\n\r\n\r\nSimilarly, the following Informative Reference entry on page 83,\r\n\r\n   [RSA]      R. Rivest, A. Shamir, and L. M. Adleman, \"A Method for\r\n              Obtaining Digital Signatures and Public-Key\r\n              Cryptosystems,\" Communications of the ACM, v. 21, n. 2,\r\n              Feb 1978, pp.  120-126.\r\n\r\nshould say:\r\n\r\n   [RSA]      R. Rivest, A. Shamir, and L. M. Adleman, \"A Method for\r\n              Obtaining Digital Signatures and Public-Key\r\n|             Cryptosystems\", Communications of the ACM, v. 21, n. 2,\r\n              Feb 1978, pp.  120-126.\r\n\r\n\r\n(E13) mis-spelled author name in Informative Reference\r\n\r\nThe name of Alan O. Freier has been mis-spelled on page 83, in the\r\nInformative Reference,\r\n\r\n   [SSL3]     A. Frier, P. Karlton, and P. Kocher, \"The SSL 3.0\r\n              Protocol\", Netscape Communications Corp., Nov 18, 1996.\r\n\r\nwhich should say:\r\n                   vv\r\n|  [SSL3]     A. Freier, P. Karlton, and P. Kocher, \"The SSL 3.0\r\n              Protocol\", Netscape Communications Corp., Nov 18, 1996.", "correct_text": "", "notes": "(Item C1 split to separate Errata ID 1896)\r\n\r\nAll excerpts from the RFC text are taken keeping their original\r\nformatting, and modified text is formatted in conformance with\r\nRFC guidelines again.\r\n\r\nI use change bars ('|' in column 1) and casual up/down pointing\r\ntags ('^^^' / 'vvv' marks in extra lines) to emphasize the location\r\nof textual issues and/or proposed textual enhancements/corrections.\r\n\r\nfrom pending", "submit_date": "2006-05-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "118", "doc-id": "RFC4345", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   [MIRONOV]  Mironov, I., \"(Not So) Random Shuffles of RC4\", Advances\r\n              in Cryptology -- CRYPTO 2002: 22nd Annual International\r\n              Cryptology Conference, August 2002,\r\n              <http://eprint.iacr.org/2002/067.pdf>.", "correct_text": "   [MIRONOV]  Mironov, I., \"(Not So) Random Shuffles of RC4\", Advances\r\n              in Cryptology -- CRYPTO 2002: 22nd Annual International\r\n              Cryptology Conference, August 2002, full version at\r\n              <http://crypto.stanford.edu/~mironov/papers/rc4full.pdf>\r\n", "notes": "", "submit_date": "2006-02-07", "submitter_name": "Ben Harris", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "119", "doc-id": "RFC4343", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "   The key words \"MUST\", \"MUST NOT\", \"REQUIRED\", \"SHALL\", \"SHALL NOT\",\r\n   \"SHOULD\", \"SHOULD NOT\", \"RECOMMENDED\", \"MAY\", and \"OPTIONAL\" in this\r\n   document are to be interpreted as described in [RFC2119].", "correct_text": "   The key words \"MUST\" and \"MAY\" in this document are to be\r\n   interpreted as described in [RFC2119].\r\n", "notes": "\r\nOther than in the above-quoted sentence, there are no\r\ninstances of \"MUST NOT\", \"REQUIRED\", \"SHALL\", \"SHALL NOT\", SHOULD\",\r\n\"SHOULD NOT\", \"RECOMMENDED\", or \"OPTIONAL\" in the RFC (and the\r\ninstances above surely cannot be interpreted as described in RFC\r\n2119; they are mere labels in the context of that sentence).\n --VERIFIER NOTES-- \nThe keyword paragraph is standard, and although words are mentioned that are later not used, this is not an error.   ", "submit_date": "2006-02-26", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "120", "doc-id": "RFC4339", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3.3", "orig_text": "   4.  It is sub-optimal to utilize the radio resources in 3GPP networks\r\n       for DHCPv6 messages if there is a simpler alternative is\r\n       available.\r\n \r\n\r\n", "correct_text": "   4.  It is sub-optimal to utilize the radio resources in 3GPP networks\r\n       for DHCPv6 messages if there is a simpler alternative available.", "notes": "from pending", "submit_date": "2006-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "121", "doc-id": "RFC4337", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "   Security considerations: See section 5 of RFC 4337.\r\n", "correct_text": "   Security considerations: See section 4 of RFC 4337.\r\n", "notes": " \r\n\r\nThe Security Considerations *are* in Section 4 of RFC 4337.\r\nNote:  This must have been a last-minute \"fix\", the draft was o.k.\r\n\r\nI recommend to have the IANA update the registrations accordingly.", "submit_date": "2006-03-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2336", "doc-id": "RFC5777", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.8", "orig_text": "The Absolute-Start-Fractional-Seconds AVP (AVP Code 567) is of type\r\nUnsigned32.  The value specifies the fractional seconds that are\r\nadded to Absolute-Start-Time value in order to determine when the\r\ntime window starts.  If this AVP is absent from the Time-Of-Day-\r\nCondition AVP, then the fractional seconds are assumed to be zero.", "correct_text": "The Absolute-Start-Fractional-Seconds AVP (AVP Code 567) is of type\r\nUnsigned32.  The value specifies the fractional seconds that are\r\nadded to Absolute-Start-Time value in order to determine when the\r\ntime window starts.  The Absolute-Start-Fractional-Seconds represent \r\na 32-bit fraction field giving a precision of about 232 picoseconds \r\n( 1/((2^32)-1)) seconds ).  If this AVP is absent from the Time-Of-Day-\r\nCondition AVP, then the fractional seconds are assumed to be zero.\r\nSee the Network Time Protocol [RFC 1305] for more precision.", "notes": "The AVP description lacked a explanation about what a fractional second is.", "submit_date": "2010-07-19", "submitter_name": "Francois Bard", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2460", "doc-id": "RFC4398", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "2.  The CERT Resource Record\r\n\r\n   The CERT resource record (RR) has the structure given below.  Its RR\r\n   type code is 37.\r\n\r\n                       1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |             type              |             key tag           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   algorithm   |                                               /\r\n   +---------------+            certificate or CRL                 /\r\n   /                                                               /\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-|", "correct_text": "2.  The CERT Resource Record\r\n\r\n   The CERT resource record (RR) has the structure given below.  Its RR\r\n   type code is 37.\r\n\r\n                        1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |             type              |             key tag           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   algorithm   |                                               /\r\n   +---------------+            certificate or CRL                 /\r\n   /                                                               /\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-|", "notes": "In Section 2 (The CERT Resource Record) the table describing the wire format of the CERT RR is misaligned in such a way that it could lead to technical ambiguity of field positions within the packet structure.", "submit_date": "2010-08-07", "submitter_name": "Paul Freeman", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2461", "doc-id": "RFC5310", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4", "orig_text": "The authentication data for the IS-IS IIH PDUs MUST be computed after\r\nthe IS-IS Hello (IIH) has been padded to the MTU size, if padding is \r\nnot explicitly disabled.", "correct_text": "The authentication data for the IS-IS IIH PDUs MUST be computed after\r\nthe IS-IS Hello (IIH) has been padded to the MTU size, if padding is\r\nnot explicitly disabled.\r\n\r\nISes (routers) that implement CRYPTO_AUTH authentication and initiate LSP\r\npurges MUST remove the body of the LSP and add the authentication TLV.  ", "notes": "The RFC ignores the case of when an IS initiates a purge.  Purges MUST be authenticated explicitly, otherwise the default protocol machinery will leave open a trivial attack.\n --VERIFIER NOTES-- \nThis issue appears to be correct, but does not qualify as something that can be addressed through the Errata System because it is a functional change to the document, not a typo. If the WG feels that it needs to be addressed, this should be captured in a new I-D.\r\n", "submit_date": "2010-08-12", "submitter_name": "Tony Li", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2462", "doc-id": "RFC5310", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.5", "orig_text": "An implementation MAY have a transition mode where it includes\r\nCRYPTO_AUTH information in the PDUs but does not verify this\r\ninformation.  This is provided as a transition aid for networks in\r\nthe process of migrating to the new CRYPTO_AUTH-based authentication\r\nschemes.", "correct_text": "An implementation MAY have a transition mode where it includes\r\nCRYPTO_AUTH information in the PDUs but does not verify this\r\ninformation.  This is provided as a transition aid for networks in\r\nthe process of migrating to the new CRYPTO_AUTH-based authentication\r\nschemes.\r\n\r\nISes implementing CRYPTO_AUTH authentication MUST NOT accept\r\nunauthenticated purges.   ISes MUST NOT accept purges that contain\r\nTLVs other than the authentication TLV.  These restrictions are\r\nnecessary to prevent a hostile system from receiving an LSP, setting\r\nthe Remaining Lifetime field to zero, and flooding it, thereby\r\ninitiating a purge without knowing the authentication password.", "notes": "The RFC ignores the case of purges.  With explicit definition, purge packets would not include authentication, which would open a trivial vector for attack.\n --VERIFIER NOTES-- \nThis issue appears to be correct, but does not qualify as something that can be addressed through the Errata System because it is a functional change to the document, not a typo. If the WG feels that it needs to be addressed, this should be captured in a new I-D.   ", "submit_date": "2010-08-12", "submitter_name": "Tony Li", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2463", "doc-id": "RFC3435", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix G", "orig_text": "On Page no 206 at the bottom you will see following :\r\n\r\nStep 2 - Delete Connection (dlcx) from ca to rgw2\r\n\r\n   Requests rgw2 to delete the connection \"67890af54c9\":\r\n\r\n      dlcx 2055 aaln/1@rgw1.whatever.net mgcp 1.0\r\n      c: 9876543210abcdef\r\n      i: 67890af54c9\r\n", "correct_text": "Step 2 - Delete Connection (dlcx) from ca to rgw2\r\n\r\n   Requests rgw2 to delete the connection \"67890af54c9\":\r\n\r\n      dlcx 2055 aaln/1@rgw2.whatever.net mgcp 1.0\r\n      c: 9876543210abcdef\r\n      i: 67890af54c9\r\n", "notes": "1. Need to visit Following link :\r\nhttp://tools.ietf.org/rfc/rfc3435.txt\r\n\r\n2. Go to Appendix G:\r\n\r\nAppendix G: Example Call Flows....................................194\r\n   G.3    Connection Deletion........................................206\r\n   G.3.1  Residential Gateway to Residential Gateway.................206   \r\n\r\n3. On Page no 206 at the bottom you will see following :\r\n\r\nStep 2 - Delete Connection (dlcx) from ca to rgw2\r\n\r\n   Requests rgw2 to delete the connection \"67890af54c9\":\r\n\r\n      dlcx 2055 aaln/1@rgw1.whatever.net mgcp 1.0\r\n      c: 9876543210abcdef\r\n      i: 67890af54c9\r\n\r\nit should be rgw2 i guess.\r\n\r\n-- NOTE from reviewing AD: This change affects page 207, not page 206.", "submit_date": "2010-08-13", "submitter_name": "Vishal Grover", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3544", "doc-id": "RFC5155", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "o  The Next Hashed Owner Name field is represented as an unpadded\r\n   sequence of case-insensitive base32 digits, without whitespace.", "correct_text": "o  The Next Hashed Owner Name field is represented as an unpadded \r\n   sequence of case-insensitive base32hex digits, without whitespace.", "notes": "RFC 4648 Section 7 says: 'This encoding may be referred to as \"base32hex\".  This encoding should not be regarded as the same as the \"base32\" encoding and should not be referred to as only \"base32\".'\r\n\r\nThere are many spots in RFC 5155 that use the term base32 where base32hex is the appropriate term. Section 3.3 above is the most important, but Section 1.1 uses the term as well Section 3 paragraph 4 and Section 3.2 paragraph 8.", "submit_date": "2013-03-10", "submitter_name": "Andy Newton", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "384", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "   The presence of a prefix is indicated with a single leading ASCII\n   colon character (':', 0x3b), which MUST be the first character of\n   the message itself. ", "correct_text": "   The presence of a prefix is indicated with a single leading ASCII\n   colon character (':', 0x3a), which MUST be the first character of\n   the message itself.\n", "notes": "", "submit_date": "2002-12-16", "submitter_name": "Jeroen Peschier", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "385", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "  chanstring =  %x01-07 / %x08-09 / %x0B-0C / %x0E-1F / %x21-2B", "correct_text": "  chanstring =  %x01-06 / %x08-09 / %x0B-0C / %x0E-1F / %x21-2B", "notes": "", "submit_date": "2004-06-10", "submitter_name": "Alejandro Grijalba", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "129", "doc-id": "RFC4309", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "On page 6, the second paragraph of Section 5 says:\r\n\r\n   Sequence Numbers are conveyed canonical network byte order.  Extended\r\n   Sequence Numbers are conveyed canonical network byte order, placing\r\n   the high-order 32 bits first and the low-order 32 bits second.\r\n   Canonical network byte order is fully described in RFC 791, Appendix\r\n   B.\r\n\r\nThe text should perhaps better say:\r\n\r\n   Sequence Numbers are conveyed in canonical network byte order.\r\n   Extended Sequence Numbers are conveyed in canonical network byte\r\n   order, placing the high-order 32 bits first and the low-order 32 bits\r\n   second.  Canonical network byte order is fully described in RFC 791,\r\n   Appendix B.\r\n\r\nThe second half-sentence of the second sentence might even be considered\r\nredundant, fully comprised by the term 'canonical network byte order',\r\nand hence be omitted entirely.  Doing that, and following the maxim of\r\n\"making RFC text as simple as possible\", the above text might be\r\nabreviated to say:\r\n\r\n   Sequence Numbers and Extended Sequence Numbers are conveyed in\r\n   canonical network byte order.  Canonical network byte order is fully\r\n   described in RFC 791, Appendix B.\r\n\r\nFinally, considering that the SPI is a 32-bit number and covered by\r\nthe same ordering rule as well, the text might - even shorter - say:\r\n\r\n   All fields are conveyed in canonical network byte order.  Canonical\r\n   network byte order is fully described in RFC 791, Appendix B.\r\n\r\nPlease decide whether the initial text correction deserves an\r\nErrata Note, possibly including the additional enhancement(s).", "correct_text": "", "notes": "word omissions - and opportunity to simplify the text\r\n\r\nNOTE (2006-02-13)\r\nI do not think that any of these will lead to confusion or\r\ninteroperability concerns.  Thus, I do not think that they warrant \r\nthe time and other resources need to generate Errata.\r\nRuss Housley\r\n\r\nfrom pending", "submit_date": "2006-02-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "130", "doc-id": "RFC4309", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nPage heading says:", "orig_text": "RFC 4309           Using AEC CCM Mode with IPsec ESP       December 2005", "correct_text": "RFC 4309           Using AES CCM Mode with IPsec ESP       December 2005", "notes": "\r\nIn RFC 4309 the page headings have a typo AES is misspelled as AEC.", "submit_date": "2006-01-05", "submitter_name": "Aaron Cohen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "131", "doc-id": "RFC4307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.3", "orig_text": "   IKEv2 defines several possible algorithms for Transfer Type 1\r\n   (encryption).  These are defined below with their implementation\r\n   status.", "correct_text": "   IKEv2 defines several possible algorithms for Transform Type 1\r\n   (encryption).  These are defined below with their implementation\r\n   status.\r\n", "notes": "", "submit_date": "2006-02-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "132", "doc-id": "RFC4305", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the header, it says:", "orig_text": "Obsoletes: 2404, 2406       ", "correct_text": "Obsoletes: 2402, 2406\n", "notes": "", "submit_date": "2006-02-20", "submitter_name": "Donald Eastlake III", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "133", "doc-id": "RFC4303", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.4", "orig_text": "   NOTE: For IPv6 -- For bump-in-the-stack and bump-in-the-wire\r\n   implementations, it will be necessary to examine all the extension\r\n   headers to determine if there is a fragmentation header and hence\r\n   that the packet needs reassembling prior to IPsec processing.", "correct_text": "   NOTE: For IPv6 -- For bump-in-the-stack and bump-in-the-wire\r\n   implementations, it will be necessary to examine all the extension\r\n   headers to determine if there is a fragmentation header, and either\r\n   the More flag or the Fragment Offset is non-zero. If so that packet\r\n   needs reassembling prior to IPsec processing.\r\n", "notes": "", "submit_date": "2006-01-12", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "134", "doc-id": "RFC4302", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.4", "orig_text": "   NOTE: For IPv6 -- For bump-in-the-stack and bump-in-the-wire\r\n   implementations, it will be necessary to examine all the extension\r\n   headers to determine if there is a fragmentation header and hence\r\n   that the packet needs reassembling prior to IPsec processing.\r\n", "correct_text": "   NOTE: For IPv6 -- For bump-in-the-stack and bump-in-the-wire\r\n   implementations, it will be necessary to examine all the extension\r\n   headers to determine if there is a fragmentation header, and either\r\n   the More flag or the Fragment Offset is non-zero. If so that packet\r\n   needs reassembling prior to IPsec processing.\r\n", "notes": "", "submit_date": "2006-01-12", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "135", "doc-id": "RFC4301", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A2 says:", "orig_text": "       Option/Extension Name                  Reference\r\n       -----------------------------------    ---------\r\n       MUTABLE BUT PREDICTABLE -- included in ICV calculation\r\n         Routing (Type 0)                    [DH98]\r\n\r\n       BIT INDICATES IF OPTION IS MUTABLE (CHANGES UNPREDICTABLY DURING\r\n       TRANSIT)\r\n         Hop-by-Hop options                  [DH98]\r\n         Destination options                 [DH98]\r\n\r\n       NOT APPLICABLE\r\n         Fragmentation                       [DH98]\r\n", "correct_text": "       Option/Extension Name                  Reference\r\n       -----------------------------------    ---------\r\n       MUTABLE BUT PREDICTABLE\r\n       -- included in ICV calculation\r\n         Routing (Type 0)                       [DH98]\r\n\r\n       BIT INDICATES IF OPTION IS MUTABLE\r\n       (CHANGES UNPREDICTABLY DURING TRANSIT)\r\n         Hop-by-Hop options                     [DH98]\r\n         Destination options                    [DH98]\r\n\r\n       NOT APPLICABLE\r\n         Fragmentation                          [DH98]", "notes": "Perhaps it should be formatted as shown above to avoid the overlap of the columns.", "submit_date": "2006-03-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "136", "doc-id": "RFC4296", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.1", "orig_text": "  void        rdma_read(socket_t s, ddp_addr_t s, ddp_addr_t d)", "correct_text": "  rdma_read(socket_t s, ddp_addr_t s, length_t l, ddp_addr_t d)", "notes": "This is inconsistent with the detailed description of that primitive\r\ngiven subsequently on page 15 (2nd-to-last list paragraph), which\r\nspecifies four (4) arguments.\r\n\r\nThe latter, detailed spec is the appropriate version.", "submit_date": "2006-01-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "lars.eggert@nokia.com", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3545", "doc-id": "RFC5939", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.1", "orig_text": "     a=acap:2 a=pcfg:1 t=1 a=1   ;Not allowed to embed \"pcfg\"\r\n", "correct_text": "     a=acap:2 pcfg:1 t=1 a=1   ;Not allowed to embed \"pcfg\"\r\n", "notes": "The existing text, with \"a=\" before \"pcfg\", is outright syntactically incorrect per the syntax in the first paragraph of the section.  The correction is needed for the text to be the intended demonstration of a semantic error.", "submit_date": "2013-03-11", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "143", "doc-id": "RFC4285", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n                       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n                       |  Option Type  | Option Length |  Subtype      |\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       |                  Mobility SPI                                 |", "correct_text": "        0                   1                   2                   3\r\n        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n                       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n                       |  Option Type  | Option Length |  Subtype      |\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       |                  Mobility SPI                                 |\r\n", "notes": "", "submit_date": "2006-02-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "386", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "   244    RPL_STATSHLINE      244  RPL_STATSSLINE", "correct_text": "   244    RPL_STATSHLINE      245  RPL_STATSSLINE\n", "notes": "", "submit_date": "2003-01-18", "submitter_name": "Konstantin Zemlyak", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "137", "doc-id": "RFC4295", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(7)  description too unspecific, and punctuation\r\n\r\nThe DESCRIPTION clause of the mip6HaCompliance2 MODULE-COMPLIANCE,\r\non page 95, says:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB and\r\n                   support monitoring of the home agent\r\n|                  functionality specifically the Home Agent List\r\n|                  and the home-agent-registration-related statistics,\r\n                   There are a number of INDEX objects [...]\r\n\r\nfor reasons as in item (5) and item (6) above,\r\nit should better say:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB and\r\n|                  support detailed monitoring of the home agent\r\n|                  functionality, specifically the Home Agent List\r\n|                  and the home-agent-registration-related statistics.\r\n                   There are a number of INDEX objects [...]\r\n\r\n\r\n(8)  punctuation, and extraneous blank line\r\n\r\nThe DESCRIPTION clause of the mip6HaCompliance3 MODULE-COMPLIANCE,\r\non page 96, says:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB and\r\n                   support monitoring and control of the home agent\r\n|                  functionality specifically the Home Agent List\r\n|                  and the home-agent-registration-related statistics,\r\n|\r\n                   There are a number of INDEX objects [...]\r\n\r\nIt should say (see above items for rationale and similarity):\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB and\r\n                   support monitoring and control of the home agent\r\n|                  functionality, specifically the Home Agent List\r\n|                  and the home-agent-registration-related statistics.\r\n                   There are a number of INDEX objects [...]\r\n\r\n\r\n(9)  punctuation, and extraneous blank line\r\n\r\nThe DESCRIPTION clause of the mip6HaReadOnlyCompliance2\r\nMODULE-COMPLIANCE, on page 99, says:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB without support\r\n                   for read-write (i.e., in read-only mode) and\r\n                   support monitoring of the home agent\r\n|                  functionality specifically the Home Agent List\r\n                   and the home-agent-registration-related statistics.\r\n|\r\n                   There are a number of INDEX objects [...]\r\n\r\nIt should say (see above items for rationale and similarity):\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB without support\r\n                   for read-write (i.e., in read-only mode) and\r\n                   support monitoring of the home agent\r\n|                  functionality, specifically the Home Agent List\r\n                   and the home-agent-registration-related statistics.\r\n                   There are a number of INDEX objects [...]\r\n\r\n\r\n(10) punctuation, and extraneous blank line\r\n\r\nThe DESCRIPTION clause of the mip6HaReadOnlyCompliance3\r\nMODULE-COMPLIANCE, on page 101, says:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB without support\r\n                   for read-write (i.e., in read-only mode) and\r\n?                  support monitoring and control of the home agent\r\n|                  functionality specifically the Home Agent List\r\n|                  and the home-agent-registration-related statistics,\r\n|\r\n                   There are a number of INDEX objects [...]\r\n\r\nIt should say (see above items for rationale and similarity):\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB without support\r\n                   for read-write (i.e., in read-only mode) and\r\n                   support monitoring and control of the home agent\r\n|                  functionality, specifically the Home Agent List\r\n|                  and the home-agent-registration-related statistics.\r\n                   There are a number of INDEX objects [...]\r\n\r\nFurthermore, arguably the words \"and control\" should better be\r\ndeleted since write access is not required.", "correct_text": "", "notes": "The items below are presented in RFC textual order.\r\nI use change bars ('|' in column 1) and occasionally\r\nup/down pointing marker lines ('^^^'/'vvv') to emphasize\r\nthe location of textual issues and/or proposed corrections.\r\nModified text has been re-adjusted to match RFC formatting\r\nrules, where appropriate.\r\n\r\nfrom pending", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3554", "doc-id": "RFC4447", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2", "orig_text": "-  Group ID\r\n\r\n   An arbitrary 32-bit value that represents a group of PWs that is\r\n   used to create groups in the PW space.  The group ID is intended\r\n   to be used as a port index, or a virtual tunnel index.  To\r\n   simplify configuration, a particular PW ID at ingress could be\r\n   part of the virtual tunnel for transport to the egress router.", "correct_text": "-  Group ID\r\n\r\n   An arbitrary 32-bit value that represents a group of PWs that is\r\n   used to create groups in the PW space.  The group ID is intended\r\n   to be used as a port index, or a virtual tunnel index.  To\r\n|  simplify configuration, a particular PW Group ID at ingress could\r\n   be part of the virtual tunnel for transport to the egress router.", "notes": "\"PW ID\" should in fact be \"PW Group ID\"", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3555", "doc-id": "RFC4447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3.2", "orig_text": "(2nd-to-last paragraph on page 13)\r\n\r\n   The PW information length field contains the length of the SAII,\r\n   TAII, and AGI, combined in octets.  If this value is 0, then it\r\n|  references all PWs using the specified grouping ID.  In this case,\r\n   there are no other FEC element fields (AGI, SAII, etc.) present, nor\r\n   any interface parameters TLVs.", "correct_text": "   The PW information length field contains the length of the SAII,\r\n   TAII, and AGI, combined in octets.  If this value is 0, then it\r\n|  references all PWs using the grouping ID (specifed in the PW grouping\r\n|  ID TLV).  In this case, there are no other FEC element fields (AGI,\r\n   SAII, etc.) present, nor any interface parameters TLVs.", "notes": "To make the context more clear", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3557", "doc-id": "RFC6896", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "encoded as a HEX string holding the number\r\nof seconds since the UNIX epoch", "correct_text": "encoded as a DECIMAL string holding the number\r\nof seconds since the UNIX epoch", "notes": "The examples in Appendix A use decimal numbers for ATIME (eg ATIME: 1347265955), not hexadecimal.", "submit_date": "2013-03-18", "submitter_name": "James Manger", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3558", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.1.4.2", "orig_text": "In Table 5 Section 5.1 Page 342, NFS4ERR_DQUOT is defined as error number 69:\r\n\r\n    \"| NFS4ERR_DQUOT | 69 | Section 15.1.4.2 |\"\r\n\r\nHowever, in Section 15.1.4.2 Page 349 it is identified as error code 19:\r\n\r\n    \"15.1.4.2. NFS4ERR_DQUOT (Error Code 19)\"", "correct_text": "    \"15.1.4.2. NFS4ERR_DQUOT (Error Code 69)\"\r\n\r\n", "notes": "I believe NFS4ERR_DQUOT is in fact 69 and the reference to error code 19 in Section 15.1.4.2 is a typo.\r\n\r\nIn RFC 3010, Error Code 19 was assigned to \"NFS4ERR_NODEV\" but that association appears to have suffered the same fate as RFC 3010 itself and there is no mention of NFS4ERR_NODEV in RFC 3530 which rendered that RFC obsolete.", "submit_date": "2013-03-19", "submitter_name": "Cal Turney", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3559", "doc-id": "RFC5655", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "(none)", "correct_text": "Units:   milliseconds", "notes": "collectionTimeMilliseconds requires units of milliseconds.\r\n\r\nCompare with sections 8.2.7 and 8.2.14 in the same document.\r\n\r\nIANA's IPFIX IE registry requires the corresponding update.", "submit_date": "2013-03-20", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3560", "doc-id": "RFC5655", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2.11 + .18", "orig_text": "(none)", "correct_text": "Range: The valid range is 0-0.", "notes": "8.2.11 messageScope requires a value of 0 (\"The value of this Information Element MUST be written as 0\") but no range is given. The range should say \"0-0\". (Compare with text in RFC 5102).\r\n\r\nSimilarly for 8.2.18 sessionScope.\r\n\r\nNote to IANA: the changes are already done in the IPFIX registry, via the IE doctors (draft-ietf-ipfix-ie-doctors-07 procedure)", "submit_date": "2013-03-20", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "138", "doc-id": "RFC4294", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1) Page 7, Section 4.4\r\n\r\nThe RFC 4294 text says:\r\n\r\n  4.4.  ICMP for the Internet Protocol Version 6 (IPv6) - RFC 2463\r\n\r\n     ICMPv6 [RFC-2463] MUST be supported.\r\n\r\nIt should say:\r\n\r\n  4.4.  ICMP for the Internet Protocol Version 6 (IPv6) - RFC 4443\r\n\r\n     ICMPv6 [RFC-4443] MUST be supported.\r\n\r\nThe title of Section 4.4 in the Table of Contents should be\r\nadapted accordingly.\r\n\r\nRationale: RFC 4443 (replacing and obsoleting RFC 2463) has been\r\npublished exactly 3 weeks before RFC 4294, and hence should be\r\nused as the currently valid reference.\r\n\r\n\r\n(2) Page 7, Section 4.5.1\r\n\r\nRFC 4294 says:\r\n\r\n  4.5.1.  IP Version 6 Addressing Architecture - RFC 3513\r\n\r\n     The IPv6 Addressing Architecture [RFC-3513] MUST be supported as\r\n     updated by [RFC-3879].\r\n\r\nIt should say:\r\n\r\n  4.5.1.  IP Version 6 Addressing Architecture - RFC 4291\r\n\r\n     The IPv6 Addressing Architecture [RFC-4291] MUST be supported.\r\n\r\nRationale: RFC 4291 (replacing and obsoleting RFC 3513, and thereby\r\nincorporating RFC 3879) has been published more than 8 weeks before\r\nRFC 4294, and hence should be used as the currently valid reference.\r\n\r\n\r\n(3) Page 8, Section 5.1\r\n\r\nRFC 4294 says:\r\n\r\n     DNS is described in [RFC-1034], [RFC-1035], [RFC-3152], [RFC-3363],\r\n     and [RFC-3596].  [...]\r\n\r\nIt should say:\r\n\r\n     DNS is described in [RFC-1034], [RFC-1035], [RFC-3363], and\r\n     [RFC-3596].  [...]\r\n\r\nAnd subsequently, where RFC 4294 says,\r\n\r\n  -  reverse addressing in ip6.arpa using PTR records [RFC-3152];\r\n\r\nit should say:\r\n\r\n  -  reverse addressing in ip6.arpa using PTR records [RFC-3596];\r\n\r\nRationale: RFC 3152 has been obsoleted and incorporated into RFC 3596.\r\n\r\n\r\n(4) Page 10, Section 6.1.1\r\n\r\nRFC 4294 says:\r\n\r\n  6.1.1.  Transition Mechanisms for IPv6 Hosts and Routers - RFC 2893\r\n\r\nIt should say:\r\n\r\n  6.1.1.  Transition Mechanisms for IPv6 Hosts and Routers - RFC 4213\r\n\r\nRationale: RFC 4213 (replacing and obsoleting RFC 2893) has been\r\npublished more than 6 months before RFC 4294, and hence should be\r\nused consistently as the currently valid reference.  (The text body\r\nof the section has been updated accordingly, before publication.)\r\n\r\n\r\n(5) Page 11, Section 8.2\r\n\r\nRFC 4294 says:\r\n\r\n  8.2.  Security Protocols\r\n\r\n     ESP [RFC-4303] MUST be supported.  AH [RFC-4302] MUST be supported.\r\n\r\nIt should say:\r\n\r\n  8.2.  Security Protocols\r\n\r\n     ESP [RFC-4303] MUST be supported.  AH [RFC-4302] MAY be supported.\r\n\r\nRationale: The new IPsec RFCs purposely have changed the requirement\r\nlevel for AH.  From RFC 4301, page 9, 1st paragraph of Section 3.2 :\r\n\r\n               [...]  IPsec implementations MUST support ESP and MAY\r\n   support AH. (Support for AH has been downgraded to MAY because\r\n   experience has shown that there are very few contexts in which ESP\r\n   cannot provide the requisite security services.  Note that ESP can be\r\n   used to provide only integrity, without confidentiality, making it\r\n   comparable to AH in most contexts.)\r\n\r\nIn Section 13, RFC 4301 lists the differences from RFC 2401,\r\nand it states on page 74:\r\n\r\n   o Support for AH in both IPv4 and IPv6 is no longer required.\r\n\r\nRFC 4294 does not give any arguments to override these statements.\r\n\r\n(The IPsec references in RFC 4294 apparently have been changed\r\n shortly before publication without due adaptation of the text.)\r\n\r\n\r\n(6) Section 12.1, Normative References :\r\n\r\n- The reference [RFC-2463] should be replaced by a reference to\r\n  RFC 4443 according to item (1) above.\r\n\r\n- The reference [RFC-3152] (last item on page 14) should be deleted.\r\n  That RFC has been obsoleted long time ago, and the material has been\r\n  incorporated into RFC 3596 (see the entry [RFC-3596] on page 15)\r\n  according to item (3) above.\r\n\r\n- The reference [RFC-3513] should be replaced by an entry [RFC-4291],\r\n  containing the proper reference to RFC 4291, according to item (2)\r\n  above.\r\n\r\n- The reference [RFC-3879] is not needed any more according to\r\n  item (2) above; the material from RFC 3879 has been incorporated\r\n  into RFC 4291, the successor of RFC 3513 -- see item (2) above.", "correct_text": "", "notes": "from pending\n --VERIFIER NOTES-- \nThis RFC is obsolete and new implementations should be referring to RFC 6434.   ", "submit_date": "2006-04-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "139", "doc-id": "RFC4294", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   Those nodes are NOT RECOMMENDED to support the experimental A6 and\r\n   DNAME Resource Records [RFC-3363].\r\n", "correct_text": "   Those nodes are NOT RECOMMENDED to support the experimental A6\r\n   Resource Records [RFC-3363].\r\n", "notes": "", "submit_date": "2006-04-11", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "140", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.11", "orig_text": "   The circumstances used in the compliance section are implementing\r\n   IPv4, IPv6, or IPv6 router functions and having a bandwidth of less\r\n   than 20MB, between 20MB and 650MB, or greater than 650MB.", "correct_text": "   The circumstances used in the compliance section are implementing\r\n   IPv4, IPv6, or IPv6 router functions and having a bandwidth of less\r\n|  than 20Mbps, between 20Mbps and 650Mbps, or greater than 650Mbps.", "notes": "from pending", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2484", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(4)  Section 6.2 -- missing article\r\n\r\nThe second paragraph of Section 6.2, on mid-page 17, says:\r\n\r\n                                 [...].  When the integrity bit is set\r\n|  in the LSP_REQUIRED_ATTRIBUTE object, Resv message MUST NOT be sent\r\n   upstream until all Resv messages have been received from the\r\n   downstream neighbors.\r\n\r\nMissing indefinite article.", "correct_text": "                                 [...].  When the integrity bit is set\r\n|  in the LSP_REQUIRED_ATTRIBUTE object, a Resv message MUST NOT be sent\r\n   upstream until all Resv messages have been received from the\r\n   downstream neighbors.\r\n", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3546", "doc-id": "RFC4122", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "The version number is in the most significant 4 bits of the time\r\nstamp (bits 4 through 7 of the time_hi_and_version field).", "correct_text": "The version number is in the most significant 4 bits of the time\r\nstamp (bits 0 through 3 of the time_hi_and_version field).", "notes": "We use network order (as far as I know, we use network order in this RFC both for bits and bytes). So, the most significant bits comes first and they are located in first bytes. So, 0 through 3.\r\n\r\n---VERIFIER NOTES ---\r\nThis erratum is correct as far as it goes, but, given other text in the RFC, so is erratum 1957.  There is a pervasive problem in this RFC with inconsistent and unclear usage of bit numbering, which switches between several conventions.  The diagram in Section 4.1.2 uses left-to-right bit numbering (the most significant bit is numbered 0), but much of the text (such as in Section 4.2.2) uses right-to-left bit numbering (the least significant bit is numbered 0).  Most of the text uses big-ending byte order (network byte order), but some seems to assume little-ending, probably mistakes that come from the authors' familiarity with that convention.\r\n\r\nWith respect to the text in question, the first sentence of Section 4.1.3, we have the following situation:\r\n\r\n- The original text is correct if we assume right-to-left bit numbering and little-endian byte order.\r\n\r\n- Erratum 1957 is correct if we assume right-to-left bit numbering and big-endian byte order.  This change also makes the first sentence of Section 4.1.3 consistent with the sixth bullet in Section 4.2.2.\r\n\r\n- Erratum 3546 is correct if we assume left-to-right bit numbering and big-endian byte order.\r\n\r\nIn the end, the real point is that this document needs a revision that carefully and thoroughly fixes every instance of byte numbering (or removes the byte numbering and refers only to \"most significant\" and \"least significant\").  Such a revision should also double-check the sample code in Appendix A to be sure it works in both big-ending and little-endian machines.\r\n\r\nHappily, it's not likely that misunderstandings here will cause actual interoperability problems: this isn't a situation where things need to be disassembled and reassembled.  The algorithm merely turns a UUID into a URN, and the URN is thereafter a \"black box\", an unchanged identifier.  The only issue would be whether different interpretations of the document would turn two different UUIDs into the same URN, and, given the number of bits involved, the likelihood of collisions in practice is small.", "submit_date": "2013-03-14", "submitter_name": "Askar Safin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3547", "doc-id": "RFC6844", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "s7.2", "orig_text": "auth         Reserved                [HB2011]\r\npath         Reserved                [HB2011]\r\npolicy       Reserved                [HB2011]", "correct_text": "auth         Reserved                [RFC6844]\r\npath         Reserved                [RFC6844]\r\npolicy       Reserved                [RFC6844]", "notes": "Better to use the datatracker history to find the values than the expired drafts.", "submit_date": "2013-03-15", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3548", "doc-id": "RFC4295", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "(in the DESCRIPTION clause of the mip6HCNodeOutPkts OBJECT-TYPE\r\ndeclaration, in the 12th line on page 28)\r\n\r\nThis object is a 64-bit version of mip6NodeOutOctets.", "correct_text": "This object is a 64-bit version of mip6NodeOutPkts.", "notes": "The DESCRIPTION clause of the mip6HCNodeOutPkts OBJECT-TYPE\r\ndeclaration, on page 28 of RFC 4295, apparently has been\r\ncloned from another object without proper editing, and thus\r\nrefers to a wrong object, mip6NodeOutOctets, where it should\r\nrefer to the object, mip6NodeOutPkts.", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3580", "doc-id": "RFC6550", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.9.1", "orig_text": "   1.   Let C1 send a DAO containing a Target T with a Path Control\r\n        10000000b.  Node N stores an entry associating 10000000b with\r\n        the Path Control field for C1 and Target T.\r\n\r\n   2.   Let C2 send a DAO containing a Target T with a Path Control\r\n        00010000b.  Node N stores an entry associating 00010000b with\r\n        the Path Control field for C1 and Target T.\r\n\r\n   3.   Let C3 send a DAO containing a Target T with a Path Control\r\n        00001100b.  Node N stores an entry associating 00001100b with\r\n        the Path Control field for C1 and Target T.", "correct_text": "   1.   Let C1 send a DAO containing a Target T with a Path Control\r\n        10000000b.  Node N stores an entry associating 10000000b with\r\n        the Path Control field for C1 and Target T.\r\n\r\n   2.   Let C2 send a DAO containing a Target T with a Path Control\r\n        00010000b.  Node N stores an entry associating 00010000b with\r\n        the Path Control field for C2 and Target T.\r\n\r\n   3.   Let C3 send a DAO containing a Target T with a Path Control\r\n        00001100b.  Node N stores an entry associating 00001100b with\r\n        the Path Control field for C3 and Target T.", "notes": "Bullet 2 and 3 seem wrong. I believe \"C1\" should be replaced by \"C2\" in bullet 2 and \"C1\" should be replaced by \"C3\" in bullet 3.\r\n\r\nThis issue was initially reported by Federico Consoli on the ROLL WG mailing list.", "submit_date": "2013-04-04", "submitter_name": "Tony Cheneau", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "141", "doc-id": "RFC4288", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.2", "orig_text": "    A Media type of \"image\" indicates that the content specifies or more\r\n    separate images that require appropriate hardware to display. ...", "correct_text": "    A Media type of \"image\" indicates that the content specifies one or\r\n    more separate images that require appropriate hardware to display.\r\n    ...\r\n", "notes": "", "submit_date": "2005-12-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "142", "doc-id": "RFC4286", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.2", "orig_text": "  3.1.2.  AdvertisementJitter\r\n\r\n     This is the maximum time (in seconds) by which the\r\n     AdvertisementInterval is perturbed for each unsolicited\r\n     Advertisement.  Note that the purpose of this jitter is to avoid\r\n     synchronization of multiple routers on a network, hence choosing a\r\n     value of zero is discouraged.  This value MUST be an integer no less\r\n     than 0 seconds and no greater than AdvertisementInterval.\r\n\r\n     The AdvertisementJitter MUST be  0.025*AdvertisementInterval .", "correct_text": "  3.1.2.  AdvertisementJitter\r\n\r\n     This is the maximum time (in seconds) by which the\r\n     AdvertisementInterval is perturbed for each unsolicited\r\n     Advertisement.  Note that the purpose of this jitter is to avoid\r\n     synchronization of multiple routers on a network.\r\n     The value of AdvertisementJitter is not independently configurable;\r\n     it is a variable derived internally within the implementation\r\n     from the configured value for AdvertisementInterval.\r\n\r\n    The AdvertisementJitter MUST be set to 0.025*AdvertisementInterval.\r\n", "notes": "", "submit_date": "2005-12-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "400", "doc-id": "RFC2663", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6", "orig_text": "   the NAT device cannot safely assume that the segments containing\n   FINs or SYNs will be the last packets of the session (i.e., there\n   could be retransmissions).", "correct_text": "   the NAT device cannot safely assume that the segments containing\n   FINs or RSTs will be the last packets of the session (i.e., there\n   could be retransmissions).\n", "notes": "", "submit_date": "2002-11-14", "submitter_name": "Javier Waisbrot", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "401", "doc-id": "RFC2661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "SSHTRESH", "correct_text": "SSTHRESH\r\n", "notes": "Occurs 3 times.\r\n\r\nfrom pending", "submit_date": "2007-03-17", "submitter_name": "Ming Deng", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "402", "doc-id": "RFC2656", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   [2]  The Harvest Information Discovery and Access System:\n        <URL:http://harvest.transarc.com/>", "correct_text": "   [2]  Harvest: A distributed Search System:\n        <URL:http://harvest.sourceforge.net/>\n", "notes": "", "submit_date": "2002-09-04", "submitter_name": "Kang-Jin Lee", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4322", "doc-id": "RFC7511", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "", "correct_text": "Additional security considerations of overexposure to solar \r\nradiation, or buffer-bloat in culturally important places, \r\nleading to excessive delayed packets, directly attributed\r\nto forgetting sunscreen, excessive adult beverages, etc, \r\nWILL result in a decreased reliability.\r\n\r\nThere are no actions requested at this time.", "notes": "", "submit_date": "2015-04-01", "submitter_name": "Joe Klein", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "148", "doc-id": "RFC4274", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\nThe final paragraph on page 8,\r\n\r\n   The following table illustrates typical memory requirements of a\r\n   router running BGP.  We denote the average number of routes\r\n   advertised by each peer as N, the total number of unique AS paths as\r\n   A, the mean AS distance of the Internet as M (distance at the level\r\n   of an autonomous system, expressed in terms of the number of\r\n   autonomous systems), the number of octets required to store a network\r\n   as R, and the number of bytes required to store one AS in an AS path\r\n|  as P.  It is assumed that each network is encoded as four bytes, each\r\n   AS is encoded as two bytes, and each networks is reachable via some\r\n|  fraction of all the peers (# BGP peers/per net).  For purposes of the\r\n|  estimates here, we will calculate MR = (((N * R) + (M * A) * P) * S).\r\n                                                             ^^^^ ^^^^\r\n\r\nand the table on page 9,\r\n                                       vvvvvvvvvvvvvvvvvvv\r\n|  # Networks  Mean AS Distance # ASes # BGP peers/per net   Memory Req\r\n|      (N)             (M)        (A)          (P)              (MR)\r\n   ----------  ---------------- ------ ------------------- -------------\r\n     100,000           20         3,000         20           10,400,000\r\n     100,000           20        15,000         20           20,000,000\r\n     120,000           10        15,000        100           78,000,000\r\n     140,000           15        20,000        100          116,000,000\r\n\r\nexhibit additional issues:\r\n\r\n- The text defines 'P' as\r\n    \"the number of bytes required to store one AS in an AS path\"\r\n  while apparently in the table (P) means\r\n    \"# BGP peers/per net\".\r\n\r\n- 'S' in the formula in the last line of page 9 is not defined\r\n  anywhere in the text.\r\n\r\n- \"# BGP peers/per net\" IMHO does not even make sense in the\r\n  context of BGP, since BGP speakers represent ASes, not networks\r\n  (prefixes).\r\n\r\nI do not have a proposal for an easy way to get rid of these\r\ninconsistencies.\r\nPlease check.\r\n\r\n", "correct_text": "", "notes": "There is clearly a problem with the text, but it does not impact interoperability and should be looked at when the RFC is revised.", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3778", "doc-id": "RFC4456", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "The Non-Client peer must be fully meshed but the Client\r\n   peers need not be fully meshed.", "correct_text": "The Non-Client peers must be fully meshed but the Client\r\n   peers need not be fully meshed.", "notes": "This is a typo. Figure 4 shows multiple Non-Client peers.\r\nBut the text is referring to \"The Non-Client peer\". It should be\r\n\"The Non-Client peers\".", "submit_date": "2013-10-30", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3777", "doc-id": "RFC4274", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n(5)  like (4)\r\n\r\nSection 6.1.2, on page 8, exhibits similar symptoms as noted above.\r\nThe RFC says:\r\n\r\n   To quantify the worst-case memory requirements for BGP, we denote the\r\n   total number of networks in the Internet as N, the mean AS distance\r\n   of the Internet as M (distance at the level of an autonomous system,\r\n   expressed in terms of the number of autonomous systems), the total\r\n   number of unique AS paths as A.  Then the worst-case memory\r\n   requirements (MR) can be expressed as\r\n\r\n           MR = O(N + (M * A))\r\n\r\n   Because a mean AS distance M is a slow moving function of the\r\n   interconnectivity (\"meshiness\") of the Internet, for all practical\r\n   purposes the worst-case router memory requirements are on the order\r\n|  of the total number of networks in the Internet multiplied by the\r\n|  number of peers that the local system is peering with.  [...]\r\n\r\nApparently, the first part of that text has been revised eliminating\r\nthe role of the peering count.  Thus the last sentence should have\r\nbeen updated accordingly, to make it match the new formula.\r\n\r\nThe second paragraph thus perhaps should say:\r\n\r\n   Because a mean AS distance M is a slow moving function of the\r\n   interconnectivity (\"meshiness\") of the Internet, for all practical\r\n   purposes the worst-case router memory requirements are on the order\r\n|  of the total number of networks in the Internet.  [...]\r\n\r\n\r\n", "correct_text": "", "notes": "from errata 148\r\n\r\nRather than follow this suggestion (and drop the number of peers term out of the prose) it may be more would be more accurate to insert a number of peers term into the formula, e.g. MR = O(P * (N + (M * A))), where P is the number of peers.\r\n\r\nThis does not impact interoperability and thus should be looked at in any future update of the RFC.", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2586", "doc-id": "RFC2045", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.", "orig_text": "   All of the header fields defined in this document are subject to the\r\n   general syntactic rules for header fields specified in RFC 822.  In\r\n   particular, all of these header fields except for Content-Disposition\r\n   can include RFC 822 comments, which have no semantic content and\r\n   should be ignored during MIME processing.\r\n\r\n", "correct_text": "   All of the header fields defined in this document are subject to the\r\n   general syntactic rules for header fields specified in RFC 822.  In\r\n   particular, all of these header fields\r\n   can include RFC 822 comments, which have no semantic content and\r\n   should be ignored during MIME processing.\r\n\r\n", "notes": "A header field Content-Disposition is not defined in this document.  Therefore, the header fields defined in this document do not contain a field Content-Disposition and the exception is not necessary.  It is also misleading because it looks as if the exception affected the Content-Disposition field defined in RFC2813 while it does not.", "submit_date": "2010-10-28", "submitter_name": "Christopher Yeleighton", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2587", "doc-id": "RFC5303", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "Add a clause e) to the end of \"Sending point-to-point IIH PDUs\" (section 8.2.3 of [ISIS]):\r\n\r\n", "correct_text": "Add a clause e) to the end of \"Sending point-to-point IIH PDUs\" (section 8.2.4 of [ISIS]):\r\n", "notes": "Though the ISIS reference name in \"Normative References\" have been updated to \"International Standard 10589:2002, Second Edition, 2002\" , the section reference was still to first edition of ISO/IEC 10589", "submit_date": "2010-10-29", "submitter_name": "Mohammad Fahad Imteyaz", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2588", "doc-id": "RFC5303", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "The current three-way \r\nstate of the adjacency with its neighbor on the link (as defined \r\nin new section 8.2.4.1.1 introduced later in the document) SHALL \r\nbe reported in the Adjacency Three-Way State field.", "correct_text": "The current three-way \r\nstate of the adjacency with its neighbor on the link (as defined \r\nin new section 8.2.5.1.1 introduced later in the document) SHALL \r\nbe reported in the Adjacency Three-Way State field.", "notes": "Though the ISIS reference name in \"Normative References\" have been updated to \"International Standard 10589:2002, Second Edition, 2002\" , the section reference was still to first edition of ISO/IEC 10589.", "submit_date": "2010-10-29", "submitter_name": "Mohammad Fahad Imteyaz", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2589", "doc-id": "RFC5303", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "Add a section 8.2.4.1.1, \"Three-Way Handshake\", immediately prior to \"IIH PDU Processing\" (section 8.2.4.2 of [ISIS]):\r\n", "correct_text": "Add a section 8.2.5.1.1, \"Three-Way Handshake\", immediately prior to \"IIH PDU Processing\" (section 8.2.5.2 of [ISIS]):", "notes": "Though the ISIS reference name in \"Normative References\" have been updated to \"International Standard 10589:2002, Second Edition, 2002\" , the section reference was still to first edition of ISO 10589.", "submit_date": "2010-10-29", "submitter_name": "Mohammad Fahad Imteyaz", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "403", "doc-id": "RFC2655", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   [2]  The Harvest Information Discovery and Access System:\n        <URL:http://harvest.transarc.com/>", "correct_text": "   [2]  Harvest: A distributed Search System:\n        <URL:http://harvest.sourceforge.net/>\n", "notes": "", "submit_date": "2002-09-04", "submitter_name": "Kang-Jin Lee", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3776", "doc-id": "RFC4274", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(4)  inconsistency in updated text\r\n\r\nThe text of section 6.1 has been revised substantially from its\r\npredecessor, RFC 1774.  Unfortunately, the modifications have\r\nnot been performed incompletely, leading to near-nonsense text.\r\nSection 6.1, on page 7, says:\r\n\r\n   Immediately after the initial BGP connection setup, BGP peers\r\n   exchange complete sets of routing information.  If we denote the\r\n   total number of routes in the Internet as N, the total path\r\n   attributes (for all N routes) received from a peer as A, and assume\r\n   that the networks are uniformly distributed among the autonomous\r\n   systems, then the worst-case amount of bandwidth consumed during the\r\n|  initial exchange between a pair of BGP speakers (P) is\r\n\r\n|          BW = O((N + A) * P)\r\n                         ^^^^                     ^^^^^\r\n\r\nThis makes no sense -- obviously you can't multiply by a non-numeric\r\nquantity P, \"a pair of BGP speakers\".\r\n\r\nI strongly suspect that it was the intention to say:\r\n\r\n   Immediately after the initial BGP connection setup, BGP peers\r\n   exchange complete sets of routing information.  If we denote the\r\n   total number of routes in the Internet as N, the total path\r\n   attributes (for all N routes) received from a peer as A, and assume\r\n   that the networks are uniformly distributed among the autonomous\r\n   systems, then the worst-case amount of bandwidth consumed during the\r\n|  initial exchange between a pair of BGP speakers is\r\n\r\n|          BW = O((N + A))\r\n\r\nPlease verify.\r\n\r\n\r\n", "correct_text": "", "notes": "from errata 148\r\n\r\nThis has no impact on interoperability. It should be looked at on any update of the RFC.", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3775", "doc-id": "RFC4274", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\n(7)  some Ref's inappropriately named Normative\r\n\r\nThe References \"[BGP-VULN]\" and \"[SBGP]\" do not fulfill the\r\ncriteria for being used as Normative References.\r\nTheir inclusion in Section 11.1, on page 14, might formally be\r\nseen as inhibiting the progress of BGP-4 on the Standards Track.", "correct_text": "", "notes": "This was considered OK by the IETF and IESG of the time.\n --VERIFIER NOTES-- \nThe status of these references will have been considered by the IETF and the IESG of the time. The authors and reviewers of any future BGP document will evaluate the correct status of the references that they use.", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6809", "doc-id": "RFC8986", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.10", "orig_text": "When N receives a packet whose IPv6 DA is S and S is a local End.DX2\r\nSID", "correct_text": "When N receives a packet whose IPv6 DA is S and S is a local End.DX2V\r\nSID\r\n", "notes": "Looks like a typo in the original text", "submit_date": "2022-01-05", "submitter_name": "Yuya Kawakami", "verifier_id": "", "verifier_name": "Andrew Alston", "update_date": "2022-05-26 13:30:42"}, {"errata_id": "2590", "doc-id": "RFC5303", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "      A received Point-to-Point IIH PDU may or may not contain the\r\n      Point-to-Point Three-Way Adjacency option.  If it does not, the\r\n      link is assumed to be functional in both directions, and the\r\n      procedures described in section 8.2.4.2 are followed.\r\n", "correct_text": "      A received Point-to-Point IIH PDU may or may not contain the\r\n      Point-to-Point Three-Way Adjacency option.  If it does not, the\r\n      link is assumed to be functional in both directions, and the\r\n      procedures described in section 8.2.5.2 are followed.\r\n", "notes": "Though the ISIS reference name in \"Normative References\" have been updated to \"International Standard 10589:2002, Second Edition, 2002\" , the section reference was still to first edition of ISO 10589.", "submit_date": "2010-10-29", "submitter_name": "Mohammad Fahad Imteyaz", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2591", "doc-id": "RFC5303", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "      If the Neighbor System ID and Neighbor Extended Local Circuit ID\r\n      fields match those of the local system, or are not present, the\r\n      procedures described in section 8.2.4.2 are followed with the\r\n      following changes:\r\n", "correct_text": "      If the Neighbor System ID and Neighbor Extended Local Circuit ID\r\n      fields match those of the local system, or are not present, the\r\n      procedures described in section 8.2.5.2 are followed with the\r\n      following changes:\r\n", "notes": "Though the ISIS reference name in \"Normative References\" have been updated to \"International Standard 10589:2002, Second Edition, 2002\" , the section reference was still to first edition of ISO 10589.", "submit_date": "2010-10-29", "submitter_name": "Mohammad Fahad Imteyaz", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "150", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1.1", "orig_text": "The Phase 1 decision function is a separate process,f which completes \r\nwhen it has no further work to do.", "correct_text": "The Phase 1 decision function is a separate process, which completes \r\nwhen it has no further work to do.\r\n", "notes": "Clearly an editorial issue with a stray \"f\" in there. \r\n", "submit_date": "2006-01-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-05-28 12:09:55"}, {"errata_id": "152", "doc-id": "RFC4253", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "12", "orig_text": "    SSH_MSG_DISCONNECT             1\r\n    SSH_MSG_IGNORE                 2\r\n    SSH_MSG_UNIMPLEMENTED          3\r\n    SSH_MSG_DEBUG                  4\r\n    SSH_MSG_SERVICE_REQUEST        5\r\n    SSH_MSG_SERVICE_ACCEPT         6\r\n    SSH_MSG_KEXINIT                20\r\n    SSH_MSG_NEWKEYS                21\r\n", "correct_text": "    SSH_MSG_DISCONNECT             1\r\n    SSH_MSG_IGNORE                 2\r\n    SSH_MSG_UNIMPLEMENTED          3\r\n    SSH_MSG_DEBUG                  4\r\n    SSH_MSG_SERVICE_REQUEST        5\r\n    SSH_MSG_SERVICE_ACCEPT         6\r\n    SSH_MSG_KEXINIT                20\r\n    SSH_MSG_NEWKEYS                21\r\n    SSH_MSG_KEXDH_INIT             30\r\n    SSH_MSG_KEXDH_REPLY            3\r\n", "notes": "\n --VERIFIER NOTES-- \nErrata IDs 152 and 1408 are combined to 1486.", "submit_date": "2006-01-23", "submitter_name": "denis bider", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "153", "doc-id": "RFC4241", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "       The CPE should return ICMPv6 Destination Unreachable message to\r\n   a source address or silently discard the packets, when the original\r\n   packet is destined for the unassigned prefix in the delegated prefix.", "correct_text": "       The CPE should return an ICMPv6 Destination Unreachable message\r\n   to the source address or silently discard the packet when the original\r\n   packet is destined for an unassigned prefix in the delegated prefix.\r\n", "notes": "", "submit_date": "2005-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "349", "doc-id": "RFC3030", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   The following dialogue illustrates the use of the large message\n   extension to send a BINARYMIME object to two recipients using the\n   CHUNKING and PIPELINING extensions:\n\n   R: \n   R: 220 cnri.reston.va.us SMTP service ready\n   S: EHLO ymir.claremont.edu\n   R: 250-cnri.reston.va.us says hello\n   R: 250-PIPELINING\n   R: 250-BINARYMIME\n   R: 250 CHUNKING\n   S: MAIL FROM: BODY=BINARYMIME\n   S: RCPT TO:\n   S: RCPT TO:\n   R: 250 ... Sender and BINARYMIME ok\n   R: 250 ... Recipient ok\n   R: 250 ... Recipient ok\n   S: BDAT 100000\n   S: (First 10000 octets of canonical MIME message data)", "correct_text": "", "notes": "You can see the last line is missing a 0.\n", "submit_date": "2003-01-14", "submitter_name": "Emmanuel Papirakis", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3788", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   An endpoint shall keep a counter on the total number of consecutive\r\n   retransmissions to its peer (this includes retransmissions to all the\r\n   destination transport addresses of the peer if it is multi-homed),\r\n   including unacknowledged HEARTBEAT chunks.  \r\n", "correct_text": "An endpoint shall keep a counter on the total number of consecutive\r\nretransmissions to its peer (this includes data retransmissions \r\nto all the destination transport addresses of the peer if it is \r\nmulti-homed),including the number of unacknowledged HEARTBEAT \r\nchunks observed on the path which currently is used for data \r\ntransfer. Unacknowledged HEARTBEAT chunks observed on paths \r\ndifferent from the path currently used for data transfer shall \r\nnot increment the association error counter, as this could lead \r\nto association closure even if the path which \r\ncurrently is used for data transfer is available (but idle). \r\n", "notes": "RFC4960 Endpoint Failure detection mechanism is deficient in that \r\nHB failures on some failing paths may take the association down, even \r\nif other paths are working perfectly, but simply at the time no data \r\nor HBs are being sent on the working paths.\r\n\r\nThe situation occurs when the association is idle \r\n(no data is being transmitted) and the HBI settings on \r\nthe failing paths are much more aggressive than the HBI \r\nset on the working paths. RFC6458 allows for specification \r\nof the HBI on a per destination address whereby\r\nsuch in-homogeneous setting of the HBI can occur.\r\n\r\nThe solution proposed to the issue is to demand that\r\nHB failures observed on paths different from the path \r\ncurrently used for data transfer do\r\nnot contribute to the association error counter. \r\nHB failures observed on the path currently used for \r\ndata transfer, when this path is idle, \r\n shall contribute to the association error counter. \r\nThereby supporting Endpoint Failure detection when the\r\nassociation is idle. When the association is transmitting data, \r\nthe fate of the data transmissions and retransmissions \r\nwill serve to instantiate Endpoint Failure detection.", "submit_date": "2013-11-06", "submitter_name": "Karen Nielsen", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3774", "doc-id": "RFC4274", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\n(6)  typos / grammar\r\n\r\nIn Section 10, the second paragraph on page 13 says:\r\n\r\n|  BGP uses TCP MD5 option for validating data and protecting against\r\n   spoofing of TCP segments exchanged between its sessions.  The usage\r\n   of TCP MD5 option for BGP is described at length in [RFC2385].  The\r\n   TCP MD5 Key management is discussed in [RFC3562].  BGP data\r\n|  encryption is provided using the IPsec mechanism, which encrypts the\r\n|  IP payload data (including TCP and BGP data).  The IPsec mechanism\r\n|  can be used in both the transport mode and the tunnel mode.  The\r\n|  IPsec mechanism is described in [RFC2406].  Both the TCP MD5 option\r\n|  and the IPsec mechanism are not widely deployed security mechanisms\r\n   for BGP in today's Internet.  Hence, it is difficult to gauge their\r\n|  real performance impact when using with BGP.  However, because both\r\n|  the mechanisms are TCP- and IP-based security mechanisms, the Link\r\n   Bandwidth, CPU utilization and router memory consumed by BGP would be\r\n|  the same as any other TCP- and IP-based protocols.\r\n\r\nIt should say, correcting grammar and unclear semantics:\r\n\r\n|  BGP uses the TCP MD5 option for validating data and protecting\r\n   against spoofing of TCP segments exchanged between its sessions.  The\r\n   usage of TCP MD5 option for BGP is described at length in [RFC2385].\r\n   The TCP MD5 Key management is discussed in [RFC3562].  BGP data\r\n|  encryption is provided using the IPsec ESP mechanism, which encrypts\r\n|  the IP payload data (including TCP and BGP data).  The IPsec ESP\r\n|  mechanism can be used in both transport mode and tunnel mode.  The\r\n|  IPsec ESP mechanism is described in [RFC2406].  Both the TCP MD5\r\n|  option and IPsec ESP are not widely deployed security mechanisms\r\n   for BGP in today's Internet.  Hence, it is difficult to gauge their\r\n|  real performance impact when used with BGP.  However, because both\r\n|  mechanisms are TCP- and IP-based security mechanisms, the Link\r\n   Bandwidth, CPU utilization and router memory consumed by BGP would be\r\n   the same as any for other TCP- and IP-based protocols.\r\n\r\n(I am in doubt whether the last sentence is appropriate;\r\n at least, \"the same as\" should better be replaced by \"similar as\".\r\n Preferrably, I would delete that sentence.)\r\n\r\nFinally, the 4th paragraph on page 13,\r\n                                                      v\r\n|  Such flexible TCP- and IP-based security mechanisms, allow BGP to\r\n   prevent insertion/deletion/modification of BGP data, any snooping of\r\n   the data, session stealing, etc.  [...]\r\n\r\nshould say:\r\n\r\n|  Such flexible TCP- and IP-based security mechanisms allow BGP to\r\n   prevent insertion/deletion/modification of BGP data, any snooping of\r\n   the data, session stealing, etc.  [...]\r\n\r\n\r\n", "correct_text": "", "notes": "from errata 148", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3773", "doc-id": "RFC4274", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(3)  typos (multiple missing articles)\r\n\r\nSection 4 of RFC 4274, on page 6, says:\r\n\r\n   Whenever a BGP speaker detects an error in a peer connection, it\r\n   shuts down the peer and changes its FSM state to IDLE.  BGP speaker\r\n   requires a Start event to re-initiate an idle peer connection.  If\r\n   the error remains persistent and BGP speaker generates a Start event\r\n   automatically, then it may result in persistent peer flapping.\r\n   Although peer oscillation is found to be wide-spread in BGP\r\n   implementations, methods for preventing persistent peer oscillations\r\n   are outside the scope of base BGP specification.\r\n\r\n\r\n", "correct_text": "It should say:\r\n\r\n   Whenever a BGP speaker detects an error in a peer connection, it\r\n|  shuts down the peer and changes its FSM state to IDLE.  A BGP speaker\r\n   requires a Start event to re-initiate an idle peer connection.  If\r\n|  the error remains persistent and the BGP speaker generates a Start\r\n   event automatically, then it may result in persistent peer flapping.\r\n   Although peer oscillation is found to be wide-spread in BGP\r\n   implementations, methods for preventing persistent peer oscillations\r\n|  are outside the scope of the base BGP specification.\r\n\r\n", "notes": "from errata 148", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3772", "doc-id": "RFC4274", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(2)  typo\r\n\r\nSection 2.3 contains (on page 5) the state description:\r\n\r\n   ACTIVE:         State in which BGP peer is trying to acquire a peer\r\n|                  by listening and accepting TCP connection.\r\n\r\n\r\n\r\n", "correct_text": "   ACTIVE:         State in which BGP peer is trying to acquire a peer\r\n|                  by listening and accepting a TCP connection.\r\n                                             ^^^\r\n\r\n(An alternative correction, replacing 'connection' by 'connections',\r\n does not precisely reflect the desired behaviour.)\r\n\r\n\r\n", "notes": "from errata 148", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2581", "doc-id": "RFC5797", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   | STOU  | base | Store Unique      | a    | o    | 959, 1123        |", "correct_text": "   | STOU  | base | Store Unique      | s    | o    | 959, 1123        |", "notes": "RFC0959 has defined STOU as FTP (S)ervice command, but not (A)ccess Control command", "submit_date": "2010-10-19", "submitter_name": "VicTor Smirnoff", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2582", "doc-id": "RFC3447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1.2", "orig_text": "   4. If Result = \"consistent,\" output \"valid signature.\" Otherwise,\r\n      output \"invalid signature.\"", "correct_text": "   4. If Result = \"consistent\", output \"valid signature\".  Otherwise,\r\n      output \"invalid signature\".", "notes": "This report acually addresses a previous report, EID=2177,\r\nand provides an improved version of the corrected text.\r\n\r\nNote to Verifier: Please merge this Errata Note with EID=2177;\r\n  i.e. update the Corrected Text there as shown above, and reject\r\n  this Errata Note.", "submit_date": "2010-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2583", "doc-id": "RFC5518", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "If the DKIM signature contains an i= field, the domain name from\r\nthat field is used; otherwise, the domain name from the DKIM\r\nsignature d= field is used.", "correct_text": "The domain name from the DKIM signature d= field is used.", "notes": "RFC 5672 clarifies that the d= domain is the primary identity in a DKIM signature.", "submit_date": "2010-10-26", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5003", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "   o  Receive Unacknowledged Message\r\n\r\n      Format: RECEIVE_UNACKED(data retrieval id, buffer address, buffer\r\n              size, [,stream id] [, stream sequence number] [,partial\r\n              flag] [,payload protocol-id])", "correct_text": "   O) Receive Unacknowledged Message\r\n\r\n      Format: RECEIVE_UNACKED(data retrieval id, buffer address, buffer\r\n              size, [,stream id] [, stream sequence number] [,partial\r\n              flag] [,payload protocol-id])", "notes": "This is part of a lettered list of items, and surrounding sublists use lowercase \"o\" as a bullet. This item appears to have been mis-corrected to an \"o\" sublist item when it should be item \"O)\" of the primary list, as evidenced by the preceding item \"N)\" and following \"P)\"", "submit_date": "2017-04-24", "submitter_name": "Max Mattes", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "154", "doc-id": "RFC4240", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   A number of MIME registrations, which could be used here, have\r\n   parameters, for instance, video/DV.  To accommodate this, and retain\r\n   compatibility with the SIP URI structure, the MIME-type parameter\r\n   separator (semicolon, %3b) and value separator (equal, %d3) MUST be\r\n   escaped.  For example:                                 ^^^\r\n\r\n   sip:annc@ms.example.net; \\\r\n       play=file://fs.example.net//clips/my-intro.dvi; \\\r\n       content-type=video/mpeg%3bencode%d3314M-25/625-50", "correct_text": "   A number of MIME registrations, which could be used here, have\r\n   parameters, for instance, video/DV.  To accommodate this, and retain\r\n   compatibility with the SIP URI structure, the MIME-type parameter\r\n   separator (semicolon, %3b) and value separator (equal, %3d) MUST be\r\n   escaped.  For example:\r\n\r\n   sip:annc@ms.example.net; \\\r\n       play=file://fs.example.net//clips/my-intro.dvi; \\\r\n       content-type=video/mpeg%3bencode%3d314M-25/625-50\r\n", "notes": "", "submit_date": "2006-01-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "155", "doc-id": "RFC4238", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "   This specification registers the E2U+VPIM and E2U+Voice services\r\n   according to the specifications and guidelines in RFC 3761 [ENUM]\r\n   and the definitions in this document.", "correct_text": "   This specification registers the E2U+VPIM:LDAP and E2U+VPIM:Mailto\r\n   services according to the specifications and guidelines in RFC 3761\r\n   [ENUM] and the definitions in this document.", "notes": "[Note: The RFC text uses \"<uri_schema_name>\" vs. \"<uri_schema_name>:\"\r\n in a non-systematical manner. I suspect the difference is not meant to\r\n be significant in the text. Systematical usage of only one of these\r\n two styles would be preferrable in derived (and other future) work.\r\n I have intentionally omitted the trailing \":\" after \"Mailto\" above.]", "submit_date": "2005-11-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "156", "doc-id": "RFC4237", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   IANA has registered an LDAP Object Identifier for use in this\r\n   technical specification, according to the following template:", "correct_text": "   IANA has registered an LDAP Object Identifier for use in this\r\n   technical specification, according to the following template.\r\n   This Object Identifier, 1.3.6.1.1.11, is referred to as the\r\n   \"IANA-ASSIGNED-OID\" in the body of this memo.\r\n", "notes": "", "submit_date": "2005-11-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "157", "doc-id": "RFC4237", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   (IANA-ASSIGNED-OID.1 NAME 'vPIMUser'\r\n           SUP 'top'\r\n           ...          )", "correct_text": "   (IANA-ASSIGNED-OID.1.1 NAME 'vPIMUser'\r\n           SUP 'top'\r\n           ...          )", "notes": "Note: IANA assigned OID 1.3.6.1.1.11 to IANA-ASSIGNED-OID. See <http://www.iana.org/assignments/ldap-parameters>.\r\n", "submit_date": "2005-11-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "158", "doc-id": "RFC4235", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "      <?xml version=\"1.0\"?>\n      <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\n                   version=\"0\" notify-state=\"full\"\n                   entity=\"sip:alice@example.com\">\n      </dialog-info>", "correct_text": "      <?xml version=\"1.0\"?>\n      <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\n                   version=\"0\" state=\"full\"\n                   entity=\"sip:alice@example.com\">\n      </dialog-info>", "notes": "The proposed version of text is consistent with the rest of the document,\r\nincluding the schema in section 4.4.\r\n", "submit_date": "2006-10-24", "submitter_name": "Michael Procter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "159", "doc-id": "RFC4234", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "    External representations of terminal value characters will vary\r\n    according to constraints in the storage or transmission environment.\r\n    Hence, the same ABNF-based grammar may have multiple external\r\n    encodings, such as one for a 7-bit US-ASCII environment, another for\r\n    a binary octet environment, and still a different one when 16-bit\r\n    Unicode is used.  Encoding details are beyond the scope of ABNF,\r\n    although Appendix A (Core) provides definitions for a 7-bit US-ASCII\r\n    environment as has been common to much of the Internet.", "correct_text": "    External representations of terminal value characters will vary\r\n    according to constraints in the storage or transmission environment.\r\n    Hence, the same ABNF-based grammar may have multiple external\r\n    encodings, such as one for a 7-bit US-ASCII environment, another for\r\n    a binary octet environment, and still a different one when 16-bit\r\n    Unicode is used.  Encoding details are beyond the scope of ABNF,\r\n    although Appendix B (CORE ABNF OF ABNF) provides definitions for\r\n    a 7-bit US-ASCII environment as has been common to much of the\r\n    Internet.\r\n", "notes": "\n --VERIFIER NOTES-- \n   Fixed in RFC 5234.", "submit_date": "2006-01-31", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "160", "doc-id": "RFC4234", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.10", "orig_text": "         Strings, Names formation\r\n\r\n         Comment\r\n\r\n         Value range\r\n\r\n         Repetition\r\n\r\n         Grouping, Optional\r\n\r\n         Concatenation\r\n\r\n         Alternative\r\n", "correct_text": "         Strings, Names formation\r\n\r\n         Comment\r\n\r\n         Value range\r\n\r\n         Grouping, Optional\r\n\r\n         Repetition\r\n\r\n         Concatenation\r\n\r\n         Alternative\r\n\r\n", "notes": "This re-ordering aligns the table with the prose description and the\r\nmeta-grammar in section 4.", "submit_date": "2005-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "161", "doc-id": "RFC4229", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "\r\nReference tags for RFC 2109 [5] should be replaced by reference tags for RFC 2965 [15].\r\n\r\nRationale:\r\nRFC 2109 [5] has been obsoleted by RFC 2965 [15], and the latter\r\napparently contains the current specification for the Set-Cookie\r\n(and the Set-Cookie2) Header Field.\r\n\r\nNevertheless, the registration for 'Set-Cookie' in Subsection\r\n2.1.96 of RFC 4229 (on page 36) refers to RFC 2109 [5] as the\r\nnormative Specification document.\r\n\r\nI suspect that this particular Registration should be updated\r\nimmediately to point to RFC 2965 [15] .\r\n", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4702", "doc-id": "RFC7849", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   This document defines a profile that is a superset of the connection\r\n   to IPv6 cellular networks defined in the IPv6 for Third Generation\r\n   Partnership Project (3GPP) Cellular Hosts document.  This document\r\n   defines a profile that is a superset of the connections to IPv6\r\n   cellular networks defined in \"IPv6 for Third Generation Partnership\r\n   Project (3GPP) Cellular Hosts\" (RFC 7066).\r\n\r\n   Both mobile hosts and mobile devices with the capability to share\r\n   their 3GPP mobile connectivity are in scope.\r\n", "correct_text": "   This document defines a profile that is a superset of the connection \r\n   to IPv6 cellular networks defined in \"IPv6 for Third Generation  \r\n   Partnership Project (3GPP) Cellular Hosts\" (RFC 7066).  This document \r\n   defines an IPv6 profile that a number of operators recommend in order \r\n   to connect 3GPP mobile devices to an IPv6-only or dual-stack wireless \r\n   network (including a 3GPP cellular network) with a special focus on \r\n   IPv4 service continuity features. \r\n\r\n   Both mobile hosts and mobile devices with the capability to share \r\n   their 3GPP mobile connectivity are in scope.  ", "notes": "The first occurrence seems to be an older duplicate.", "submit_date": "2016-05-28", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "162", "doc-id": "RFC4227", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "   Although service provisioning is a policy matter, at a minimum, all\r\n   implementations MUST provide the following tuning profiles:\r\n\r\n   for authentication: http://iana.org/beep/SASL/DIGEST-MD5\r\n\r\n   for confidentiality: http://iana.org/beep/TLS (using the\r\n      TLS_RSA_WITH_AES_EDE_CBC_SHA cipher)\r\n\r\n   for both: http://iana.org/beep/TLS (using the\r\n      TLS_RSA_WITH_AES_EDE_CBC_SHA cipher supporting client-side\r\n      certificates)\r\n", "correct_text": "   Although service provisioning is a policy matter, at a minimum, all\r\n   implementations MUST provide the following tuning profiles:\r\n\r\n   for authentication: http://iana.org/beep/SASL/DIGEST-MD5\r\n\r\n   for confidentiality: http://iana.org/beep/TLS (using the\r\n      TLS_RSA_WITH_AES_128_CBC_SHA cipher)\r\n\r\n   for both: http://iana.org/beep/TLS (using the\r\n      TLS_RSA_WITH_AES_128_CBC_SHA cipher supporting client-side\r\n      certificates)\r\n", "notes": "--VERIFIER NOTES--\r\nIt was first reported to us by Alfred H\u00eenes with helpful comments by Philip\r\nNesser.", "submit_date": "2006-02-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Eamon O'Tuathail", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "163", "doc-id": "RFC4226", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "   Oracle AuthO()\n   --------------\n      A = ALG(K,C)\n      C = C + 1\n      Return O to B", "correct_text": "   Oracle AuthO()\n   --------------\n      A = ALG(K,C)\n      C = C + 1\n      Return A to B\n             ^^", "notes": "\nSection A.4.1, Paragraph 3, Lemma 1 definition, top of page 19\n\nThe description of Lemma 1 defines P_ {N,m} (z) using the term Z_ {n}\nand it should actually be Z_ {N}.\n           P_{N,m}(z) = Pr [x mod m = z : x randomly pick in Z_{n}]\nShould be:\n           P_{N,m}(z) = Pr [x mod m = z : x randomly pick in Z_{N}]\n                                                              ^^^\n\nSection E.2, Paragraph 4, bottom of page 32\n    32^8 > 10^12 so the security of an 8-alphanumeric HOTP code is\n   significantly better than a 9-digit HOTP value.\nShould be:\n    32^8 > 10^12 so the security of an 8-alphanumeric HOTP code is\n   significantly better than a 12-digit HOTP value.\n                               ^^\n\nIn Author's Addresses, Page 35, David Naccache's contact information should be:\n\n    David Naccache\n   ENS, DI\n   45 rue d'Ulm\n   75005 Paris, France\n   and\n   Information Security Group,\n   Royal Holloway,\n   University of London, Egham,\n   Surrey TW20 0EX, UK\n\n   EMail: david.naccache@ens.fr, david.naccache@rhul.ac.uk\n\n", "submit_date": "2005-12-26", "submitter_name": "M'Raihi, David", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "165", "doc-id": "RFC4217", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nAbstract says:", "orig_text": "This document\r\n   is intended to provide TLS support for FTP in a similar way to that\r\n   provided for SMTP in RFC 2487, \"SMTP Service Extension for Secure\r\n   SMTP over Transport Layer Security\", and HTTP in RFC 2817, \"Upgrading\r\n   to TLS Within HTTP/1.1.\".", "correct_text": "This document\r\n   is intended to provide TLS support for FTP in a similar way to that\r\n   provided for SMTP in RFC 3207, \"SMTP Service Extension for Secure\r\n   SMTP over Transport Layer Security\", and HTTP in RFC 2817, \"Upgrading\r\n   to TLS Within HTTP/1.1.\".", "notes": "\r\nthe remainder of the text (including the References section)\r\ncorrectly refers to RFC 3207 that once had obsoleted RFC 2487", "submit_date": "2005-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "166", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "     algorithmIdentifier  identifiers the signature algorithm and an\r\n     associated parameters used to produce the POP value.\r\n\r\n     signature  contains the POP value produce.", "correct_text": "     algorithmIdentifier  identifies the signature algorithm and\r\n     associated parameters used to produce the POP value.\r\n\r\n     signature  contains the POP value produced\r\n", "notes": "  ", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "190", "doc-id": "RFC4052", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "   [6]  Trowbridge, S., Bradner, S., and F. Baker, \"Procedure for\n        Handling Liaison Statements Between Standards Bodies\",\n        June 2004.", "correct_text": "   [6]  Trowbridge, S., Bradner, S., and F. Baker, \"Procedures for \n        Handling Liaison Statements to and from the IETF\", BCP 103, \n        RFC 4053, April 2005.\n", "notes": "\nAlso reported by Loa Andersson <loa@pi.se> on Mon, 25 Jul 2005 14:21:06 +0200.\n\n\n", "submit_date": "2005-05-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "191", "doc-id": "RFC4051", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.5", "orig_text": "Identifier:\r\n  http://www.w3.org/2001/04/xmldsig-more/rsa-ripemd160\r\n\r\n...\r\n\r\n<SignatureMethod\r\n  Algorithm=\"http://www.w3.org/2001/04/xmldsig-more/rsa-ripemd160\" />\r\n", "correct_text": "Identifier:\r\n  http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160\r\n\r\n...\r\n\r\n<SignatureMethod\r\n  Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160\" />", "notes": "In Section 2.3.5, the two URLs should have their right-most slash (\"/\") replaced with a pound sign (\"#\").", "submit_date": "2005-11-08", "submitter_name": "Donald Eastlake III", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "220", "doc-id": "RFC3866", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   A server SHOULD indicate that it supports storing attributes with\n   language tag options in the DIT by publishing 1.3.6.1.4.1.4203.1.5.4\n   as a value of the root DSE.", "correct_text": "   A server SHOULD indicate that it supports storing attributes with\n   language tag options in the DIT by publishing 1.3.6.1.4.1.4203.1.5.4\n   as a value of the \"supportedFeatures\" [RFC3674] attribute of the root \n   DSE.", "notes": "\n\nIn section 5, it says:\n\n    Implementators of this specification should take care that their use\n   of language tag options does not impede proper function of\n   implementations which do not support language tags.\n\nIt should say:\n\n    Implementors of this specification should take care that their use\n   of language tag options does not impede proper function of\n   implementations which do not support language tags.\n\n\n\n", "submit_date": "2004-08-18", "submitter_name": "Kurt D. Zeilenga", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "221", "doc-id": "RFC3866", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   An entry may contain multiple attributes with same\n   attribute type but different combinations of language tag (and other)\n   options.", "correct_text": "   An entry may contain multiple attributes with the same\n   attribute type but different combinations of language tag (and other)\n   options.\n", "notes": "", "submit_date": "2004-08-31", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "350", "doc-id": "RFC3028", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.1", "orig_text": "   mebi-, or 1,048,576 (2^20) times the value of the number; and G\n   specifies tebi-, or 1,073,741,824 (2^30) times the value of the\n   number [BINARY-SI].", "correct_text": "    mebi-, or 1,048,576 (2^20) times the value of the number; and G\n    specifies gibi-, or 1,073,741,824 (2^30) times the value of the\n    number [BINARY-SI].\n", "notes": "", "submit_date": "2003-09-22", "submitter_name": "Piotr Kucharski", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "351", "doc-id": "RFC3024", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "    Upon receipt of a Registration Reply that satisfies validity\n    checks,", "correct_text": "    Upon receipt of a Registration Request that satisfies validity\n    checks,\n", "notes": "", "submit_date": "2003-06-02", "submitter_name": "Gabriel Montenegro", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "352", "doc-id": "RFC3023", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.13", "orig_text": "   {BOM}<?xml encoding=\"utf-16\"?>\n\n   or\n\n   {BOM}<?xml?>", "correct_text": "   {BOM}<?xml encoding=\"utf-16\"?>\n", "notes": "", "submit_date": "2003-05-09", "submitter_name": "Murata Makoto", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "167", "doc-id": "RFC4207", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "           [...]  The format of the TraceMonitor message is as\r\n  follows:\r\n\r\n   <TraceMonitor Message> ::= <Common Header> <MESSAGE_ID>\r\n                              <LOCAL_INTERFACE_ID> <TRACE>", "correct_text": "<< THIS CHANGE IS REJECTED >>\r\n<< See the Notes field for the revised editorial change. >>\r\n\r\n           [...]  The format of the TraceMonitor message is as\r\n  follows:\r\n\r\n   <TraceMonitor Message> ::= <Common Header> <MESSAGE_ID>\r\n                              <LOCAL_INTERFACE_ID>\r\n                              <TRACE> ...", "notes": "<Original note>\r\n>   RFC 4207 defines the syntax of the TraceMonitor message in Section\r\n>   4.1.1, on page 6.\r\n>   Similarly, the TraceMonitorAck and TraceMonitorNack Messages are\r\n>   specified in Sections 4.1.2 and 4.1.3, respectively, on page 8.\r\n>\r\n>   While the former specifies a single <TRACE> object to appear\r\n>   in a TraceMonitor message, the latter specs uses wording like\r\n>   \"all of the TRACE Objects in a TraceMonitor message\" or\r\n>   \"TRACE object value(s)\".\r\n>\r\n>   IMHO, it makes much sense to indeed allow multiple TRACE Objects\r\n>   (with different trace types, but all related to a single Interface)\r\n>   in a single TraceMonitor Message.\r\n</Original note>\r\n\r\nCCAMP consensus on this issue is that the BNF is correct. That is, only a single instance of the <TRACE> object is permitted on the <TraceMonitor Message> or any of the other messages. \r\n\r\nThe text in the various sections is factually correct when it says things like \"all the Trace Objects...\" However, this is misleading and should be changed to be singlular in all cases.", "submit_date": "2005-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "170", "doc-id": "RFC4187", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.5", "orig_text": "          |                            +------------------------------+\r\n          |                            | Server does not accept       |\r\n          |                            | The fast re-authentication   |\r\n          |                            | Identity                     |\r\n          |                            +------------------------------+\r\n          |                                                       |\r\n          :                                                       :\r\n          :                                                       :\r\n\r\n\r\n          :                                                       :\r\n          :                                                       :\r\n          |     EAP-Request/AKA-Identity                          |\r\n          |     (AT_FULLAUTH_ID_REQ)                              |\r\n          |<------------------------------------------------------|", "correct_text": "          |                            +------------------------------+\r\n          |                            | Server does not accept       |\r\n          |                            | The fast re-authentication   |\r\n          |                            | Identity                     |\r\n          |                            +------------------------------+\r\n          |                                                       |\r\n          |     EAP-Request/AKA-Identity                          |\r\n          |     (AT_FULLAUTH_ID_REQ)                              |\r\n          |<------------------------------------------------------|", "notes": "In Section 4.2.5, Figure 9 (on page 31) contains six lines that\r\nmight erroneously be misunderstod to indicate the omission of\r\nsome protocol steps (which is not the case).\r\nI suspect that this is an artifact from a draft version where\r\nFigure 9 was split over two pages; after joining the parts,\r\nthese continuation indicators have become ambiguous, and hence\r\nshould be deleted.\r\n\r\nfrom pending", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "171", "doc-id": "RFC4186", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   Length\r\n\r\n         Indicates the length of this attribute in multiples of four\r\n         bytes.  The maximum length of an attribute is 1024 bytes.  The\r\n         length includes the Attribute Type and Length bytes.", "correct_text": "   Length\r\n\r\n         Indicates the length of this attribute in multiples of four\r\n         bytes.  The maximum length of an attribute is 1020 bytes.  The\r\n         length includes the Attribute Type and Length bytes.", "notes": "  As there is no offset defined, the maximum encoded Length value\r\n  of 255 corresponds to a total of 4*255 = 1020 octets.\r\n\r\nNote:\r\n  Other protocols incorporate an offset of -1 in similar cases, e.g.,\r\n  when a TLV Length field comprises the length of the 'T' and 'L',\r\n  also removing the artificially designed-in error case (Length=0),\r\n  that otherwise must be checked for by all implementations!\r\n  Some people speak of bad protocol design when encountering\r\n  Length fields that do not indicate the true length of an object\r\n  value proper, which might be zero.\r\n\r\nfrom pending", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Henry Haverinen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "172", "doc-id": "RFC4182", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "RFC 3032 states on page 4:", "correct_text": "RFC 3032 states on page 5:\r\n", "notes": "Wrong page number in reference.", "submit_date": "2005-09-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "173", "doc-id": "RFC4181", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.1.1", "orig_text": " - For integer-valued enumerations:\n\n      - INTEGER is REQUIRED; - Integer32, Unsigned32, and Gauge32 MUST\n      NOT be used.", "correct_text": "- For integer-valued enumerations:\n\n      - INTEGER is REQUIRED;\n      - Integer32, Unsigned32, and Gauge32 MUST NOT be used.\n", "notes": "", "submit_date": "2005-11-01", "submitter_name": "C. M. Heard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "174", "doc-id": "RFC4173", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "\r\nTwo normative references have been obsoleted:\r\n\r\n    RFC 2396 ( Ref. \"[Lee98]\" )\r\nand\r\n    RFC 2732 ( Ref. \"[Hinden99]\" )\r\n\r\nhave both been obsoleted by RFC 3986 == STD 66 (published in\r\nJanuary 2005) !\r\n\r\nAffected pieces of RFC 4173:\r\n- Both Ref's appear once (and together) near the bottom of\r\n  page 4 (in the 6th-to-last line).\r\n- Normative References section, bottom of page 9 + top of page 10\n --VERIFIER NOTES-- \nIndependent of the publication date, the work on the draft that\r\nbecame this RFC significantly predates publication of RFC 3986.\r\nThe references to those two RFCs are correct, and the obsoleted\r\nstatus of the RFCs can be readily determined from the RFC Editor's\r\ndatabase.   ", "submit_date": "2005-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "213", "doc-id": "RFC3891", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "  INVITE sip:bob@bobster.example.org\r\n   To: <sip:bob@example.org>\r\n   From: <sip:alice@phone2.example.org>;tag=8983\r\n   Call-ID: 09870@phone2.example.org\r\n   CSeq: 1 INVITE\r\n   Contact: <sip:alice@phone2.example.org>\r\n   Require: replaces\r\n   Replaces: 425928@bobster.example.org;to-tag=7743;from-tag=6472\r\n<mailto:425928@bobster.example.org;to-tag=7743;from-tag=6472>  ", "correct_text": "  INVITE sip:bob@bobster.example.org\r\n   To: <sip:bob@example.org>\r\n   From: <sip:alice@phone2.example.org>;tag=8983\r\n   Call-ID: 09870@phone2.example.org\r\n   CSeq: 1 INVITE\r\n   Contact: <sip:alice@phone2.example.org>\r\n   Require: replaces\r\n   Replaces: 425928@bobster.example.org;to-tag=8983;from-tag=7743\r\n<mailto:425928@bobster.example.org;to-tag=8983;from-tag=7743>   \r\n", "notes": "", "submit_date": "2005-07-26", "submitter_name": "Rb Srikanth", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "214", "doc-id": "RFC3887", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "     All optional text provided with the COMMENT command are ignored.", "correct_text": "     All optional text provided with the COMMENT command is ignored.", "notes": "", "submit_date": "2004-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "215", "doc-id": "RFC3887", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11", "orig_text": "           ...Thus, if an MTQP client/server pair decide to use TLS\r\n     confidentially,...", "correct_text": "           ... Thus, if an MTQP client/server pair decides to use TLS\r\n     confidentially, ...\r\n", "notes": "", "submit_date": "2005-11-07", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "353", "doc-id": "RFC3015", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Section Annex B ", "orig_text": "   V4hex                = 1*3(DIGIT) ; \"0\"..\"225\"", "correct_text": "   V4hex                = 1*3(DIGIT) ; \"0\"..\"255\"\n", "notes": "", "submit_date": "2001-09-04", "submitter_name": "Brian Rosen", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "175", "doc-id": "RFC4171", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "   STORAGE NODE       iSCSI Name                   *      *        *\r\n                      iSCSI Node Type                     *        *\r\n                      Alias                               *\r\n                      iSCSI SCN Bitmap                    *\r\n                      iSCSI Node Index                    *\r\n                      WWNN Token\r\n                      iSCSI AuthMethod\r\n                      iSCSI Node Certificate\r\n                      ^^^^^^^^^^^^^^^^^^^^^^", "correct_text": "   STORAGE NODE       iSCSI Name                   *      *        *\r\n                      iSCSI Node Type                     *        *\r\n                      Alias                               *\r\n                      iSCSI SCN Bitmap                    *\r\n                      iSCSI Node Index                    *\r\n                      WWNN Token\r\n                      iSCSI AuthMethod", "notes": "Section 4.1.1 refers to 'iSCSI Node Certificate', which is never defined in the document.\r\n\r\nFrom David Black:\r\nThe comment appears to be correct, and the actual Errata should\r\nbe to remove the following line from Section 4.1.1  of RFC\r\n4171 (iSNS) because it is not supported by the iSNS protocol:\r\n\r\n                     iSCSI Node Certificate", "submit_date": "2006-06-23", "submitter_name": "Hannes Reinecke", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "176", "doc-id": "RFC4157", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Section 2 should be consistent with the systematic use of the term \"URI instead of \"URL\"\r\n\r\nRationale:\r\nRFC 3986 (== STD 66), in section 1.1.3., at the bottom of page 7,\r\nspecifies:\r\n\r\n... Future specifications and related documentation should\r\nuse the general term \"URI\" rather than the more restrictive terms\r\n\"URL\" and \"URN\" [RFC3305].\r\n\r\nAdmittedly, RFC1630 and RFC 1738 used the term \"URL\" -- but that\r\nwas long before RFC 3986!", "submit_date": "2005-09-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "177", "doc-id": "RFC4156", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Section 2 should be consistent with the systematic use of the term \"URI instead of \"URL\"\r\n\r\nRationale:\r\nRFC 3986 (== STD 66), in section 1.1.3., at the bottom of page 7,\r\nspecifies:\r\n\r\n       ...  Future specifications and related documentation should\r\n   use the general term \"URI\" rather than the more restrictive terms\r\n   \"URL\" and \"URN\" [RFC3305].\r\n\r\nAdmittedly, RFC1630 and RFC 1738 used the term \"URL\" -- but that\r\nwas long before RFC 3986!", "submit_date": "2005-09-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "178", "doc-id": "RFC4151", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "[2] should refer to RFC 5234\r\n[5] should refer to RFC 4122", "correct_text": "", "notes": "RFC 2234 was obsoleted by RFC 5234.", "submit_date": "2005-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "179", "doc-id": "RFC4147", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "     F800::/6              Reserved by IETF        RFC3513\n     FA00::/7              Reserved by IETF        RFC3513\n     FC00::/7              Reserved by IETF        RFC3513", "correct_text": "     F800::/6              Reserved by IETF        RFC3513\n     FC00::/7              Reserved by IETF        RFC3513", "notes": " Section 2 states \"There are no overlapping address blocks in the first\ncolumn\", but the address blocks F800::/6 and FA00::/7\noverlap. Therefore, the address block FA00::/7 should be removed from the table.", "submit_date": "2005-08-29", "submitter_name": "Mark Doll", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "181", "doc-id": "RFC4140", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "This kind of dynamic hierarchy (or anchoring) is only recommended for cases where \r\ninter-AR u0movement is not frequent.", "correct_text": "This kind of dynamic hierarchy (or anchoring) is only recommended for cases where \r\ninter-AR movement is not frequent.\r\n", "notes": "", "submit_date": "2006-08-23", "submitter_name": "Teemu Huovila", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "182", "doc-id": "RFC4140", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "1.)  There are a couple of issues with the citations given\r\n     in Appendix A, on pp. 24-27 :\r\n\r\n1.1) I suspect that the repeated occurrences of \"[5]\" should\r\n     in fact be \"[4]\" (the Fast Handover RFC 4068).\r\n\r\n1.2) The final phrase at the bottom of page 26 should obviously\r\n     refer to RFC 4067 (CXTP) instead of a \"work in progress\"\r\n     (add appropriate ref to section 14.2.!)\r\n\r\n1.3) The citations \"[6]\" on page 27 apparently make no sense --\r\n     SEND does not update RFC 4068.  I suspect a reference to\r\n     some \"work in progress\" would have been appropriate.\r\n\r\n2.)  Minor typos and proposed textual improvements\r\n\r\n2.1) On p.8, in line 5 (i.e. the end of section 4.1.):\r\n     instead of \"introduced in future\" the text might perhaps\r\n     better say: \"introduced in the future\".\r\n\r\n2.2) On p. 14, in the bottom line (at the end of section 7.1.),\r\n     the final \".\" is missing.\r\n\r\n2.3) On p. 16, in the 2nd-to-last paragraph of section 7.2.,\r\n     The phrase \"RCoA is then bound to ...\" should perhaps better\r\n     say: \"The RCoA is then bound to ...\".\r\n\r\n2.4) On page 19, in the final line of section 9.2., the word\r\n     \"movement\" is mis-spelled \"u0movement\".\r\n\r\n2.5) On page 20, in the enumerated list at the end of section 12.,\r\n     I propose to remove the \"The\" in all 3 items, aligning with\r\n     the titles of the subsequent sections 12.1. - 12.3.", "correct_text": "[see above]", "notes": "from pending\r\n\r\n\r\n\r\n\r\n\n --VERIFIER NOTES-- \nRFC 4140 has been obsoleted by RFC 5380.", "submit_date": "2005-09-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "216", "doc-id": "RFC3886", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "IANA has registered the SMTP extension defined in section 3.", "correct_text": "IANA has registered the MIME subtype defined in section 3.", "notes": "The text of RFC 3886, Section 5. (on page 8) appears to by copied\r\nunchanged from RFC 3885 and thus does not fit the context of\r\nRFC 3886.", "submit_date": "2004-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "217", "doc-id": "RFC3886", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "      That body consists of one or more \"fields\" formatted to\r\n                                                           ^^\r\n      according to...", "correct_text": "      That body consists of one or more \"fields\" formatted\r\n      according to...", "notes": "Extra \"to\".\r\n", "submit_date": "2004-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "218", "doc-id": "RFC3886", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "      A Message Tracking Status Motification (MTSN) is intended to be\r\n      returned as the body of a Message Tracking request [RFC-MTRK-MTQP].\r\n                                                 ^^^^^^^", "correct_text": "      A Message Tracking Status Motification (MTSN) is intended to be\r\n      returned as the body of a Message Tracking response [RFC-MTRK-MTQP].\r\n                                                 ^^^^^^^^", "notes": "", "submit_date": "2004-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "354", "doc-id": "RFC3010", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "RFC 3010 claims that it obsoletes RFC 1813 and RFC 1094, when in fact it does not.\n", "submit_date": "2002-06-11", "submitter_name": "Matthew Wilcox", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "183", "doc-id": "RFC4133", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.12.1", "orig_text": "     For example, the entPhysicalUris object may be used to encode a URI\r\n     containing a Common Language Equipment Identifier (CLEI) URN for\r\n     the managed physical entity.  The URN name space for CLEIs is\r\n     defined in [RFCYYYY], and the CLEI format is defined in\r\n     [T1.213][T1.213a].  For example, an entPhysicalUris instance may\r\n     have the value of\r\n\r\n        URN:CLEI:D4CE18B7AA\r\n\r\n     [RFC3986] and [RFCYYYY] identify this as a URI in the CLEI URN name\r\n     space.  The specific CLEI code, D4CE18B7AA, is based on the example\r\n     provided in [T1.213a].", "correct_text": "     For example, the entPhysicalUris object may be used to encode a URI\r\n     containing a Common Language Equipment Identifier (CLEI) URN for\r\n     the managed physical entity.  The URN name space for CLEIs is\r\n     defined in [RFC4152], and the CLEI format is defined in\r\n     [T1.213][T1.213a].  For example, an entPhysicalUris instance may\r\n     have the value of\r\n\r\n        URN:CLEI:D4CE18B7AA\r\n\r\n     [RFC3986] and [RFC4152] identify this as a URI in the CLEI URN name\r\n     space.  The specific CLEI code, D4CE18B7AA, is based on the example\r\n     provided in [T1.213a].\r\n", "notes": "", "submit_date": "2005-09-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "184", "doc-id": "RFC4122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "The UUIDs generated from the same name in two different namespaces\r\n       should be different with (very high probability).", "correct_text": "The UUIDs generated from the same name in two different namespaces\r\n       should be different (with very high probability).", "notes": "The brackets should be set similarly to the other points.", "submit_date": "2006-05-03", "submitter_name": "Tim Wilson-Brown", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "185", "doc-id": "RFC4117", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "      |--------------------(4) INVITE SDP TA------------------->|\n      |                            |                            |\n      |<--------------------(5) 200 OK SDP B--------------------|\n      |                            |                            |\n      |-------------------------(6) ACK------------------------>|\n      |                            |                            |\n      |--------(7) INVITE--------->|                            |\n      |                            |                            |\n      |<---(8) 200 OK SDP TA+TB  --|                            |\n      |                            |                            |\n      |--------------------(9) INVITE SDP TA------------------->|", "correct_text": "      |--------------------(4) INVITE SDP TB------------------->|\n      |                            |                            |\n      |<--------------------(5) 200 OK SDP B--------------------|\n      |                            |                            |\n      |-------------------------(6) ACK------------------------>|\n      |                            |                            |\n      |--------(7) INVITE--------->|                            |\n      |                            |                            |\n      |<---(8) 200 OK SDP TA+TB  --|                            |\n      |                            |                            |\n      |--------------------(9) INVITE SDP TB------------------->|\n", "notes": "", "submit_date": "2005-08-22", "submitter_name": "Gonzalo Camarillo", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "186", "doc-id": "RFC4114", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.2", "orig_text": "   Example <info> response:\n\n   [...]\n   S:    <domain:name>3.8.0.0.6.9.2.3.6.1.4.4.e164.arpa</domain:name>\n   S:    <domain:roid>EXAMPLE1-REP</domain:roid>\n   S:    <domain:status s=\"ok\"/>\n   S:    <domain:registrant>jd1234</domain:registrant>\n   S:    <domain:contact type=\"admin\">sh8013</domain:contact>\n   S:    <domain:contact type=\"tech\">sh8013</domain:contact>\n   S:    <domain:ns>\n   S:     <domain:hostObj>ns1.example.com</domain:hostObj>\n   S:     <domain:hostObj>ns2.example.com</domain:hostObj>\n   S:    </domain:ns>\n   S:    <domain:host>ns1.example.com</domain:host>\n   S:    <domain:host>ns2.example.com</domain:host>\n   S:    <domain:clID>ClientX</domain:clID>\n   S:    <domain:crID>ClientY</domain:crID>\n   [...]", "correct_text": "   Example <info> response:\n\n   [...]\n   S:    <domain:name>3.8.0.0.6.9.2.3.6.1.4.4.e164.arpa</domain:name>\n   S:    <domain:roid>EXAMPLE1-REP</domain:roid>\n   S:    <domain:status s=\"ok\"/>\n   S:    <domain:registrant>jd1234</domain:registrant>\n   S:    <domain:contact type=\"admin\">sh8013</domain:contact>\n   S:    <domain:contact type=\"tech\">sh8013</domain:contact>\n   S:    <domain:ns>\n   S:     <domain:hostObj>ns1.example.com</domain:hostObj>\n   S:     <domain:hostObj>ns2.example.com</domain:hostObj>\n   S:    </domain:ns>\n   S:    <domain:clID>ClientX</domain:clID>\n   S:    <domain:crID>ClientY</domain:crID>\n   [...]", "notes": "\n There is the <domain:host> that should list the \"fully qualified names \nof the subordinate host objects that exist under this superordinate domain object.\"  \nAs the <domain:name> is not \"example.com:, those <domain:host> elements should be \nremoved.\n\n", "submit_date": "2005-06-21", "submitter_name": "Bernie Hoeneisen", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "187", "doc-id": "RFC4113", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nDESCRIPTION clause of 'udpEndpointRemotePort' says:", "orig_text": "       The remote port number for this UDP endpoint.  If\r\n       datagrams from any remote system are to be accepted,\r\n       this value is zero.", "correct_text": "       The remote port number for this UDP endpoint.  If\r\n       datagrams from any remote port are to be accepted,\r\n       this value is zero.\r\n", "notes": "", "submit_date": "2005-06-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "188", "doc-id": "RFC4060", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   The additional fundamental frequency and voicing class information is\n   compressed for each frame pair.  The pitch for the first frame of the\n   FP is quantized to 7 bits and the second frame is differentially\n   quantized to 7 bits. ", "correct_text": "   The additional fundamental frequency and voicing class information is\n   compressed for each frame pair.  The pitch for the first frame of the\n   FP is quantized to 7 bits and the second frame is differentially\n   quantized to 5 bits. \n", "notes": "", "submit_date": "2005-05-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "189", "doc-id": "RFC4057", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.6", "orig_text": "                                                          Network\n   management will not need to support both IPv4 and IPv6 and view nodes\n   as dual stacks.", "correct_text": "                                                          Network\n   management will need to support both IPv4 and IPv6 and view nodes\n   as dual stacks.\n", "notes": "", "submit_date": "2005-06-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "355", "doc-id": "RFC3003", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "   * NOTE: The audio/MPS mime type is in use in addition to the\n   audio/mpeg. ", "correct_text": "   * NOTE: The audio/MPA mime type is in use in addition to the\n   audio/mpeg. \n", "notes": "", "submit_date": "2000-11-22", "submitter_name": "Colin Perkins", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "356", "doc-id": "RFC2985", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The Table of Contents says:", "orig_text": "5.6  Attributes defined in S/MIMIE .............................. 18", "correct_text": "5.6  Attributes defined in S/MIME ..............................  18\r\n", "notes": "", "submit_date": "2000-12-13", "submitter_name": "Robert Moskowitz", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "192", "doc-id": "RFC4043", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A.2.  1993 ASN.1 Module says:\n", "orig_text": "Appendix A.2.  1993 ASN.1 Module\n\nPKIXpermanentidentifier93 {iso(1) identified-organization(3) dod(6)\n       internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)\n       id-mod-perm-id-93(29) }\n\n   DEFINITIONS EXPLICIT TAGS ::=\n\n   BEGIN\n\n   -- EXPORTS ALL --\n\n   IMPORTS\n\n        id-pkix\n              FROM PKIX1Explicit88 { iso(1) identified-organization(3)\n              dod(6) internet(1) security(5) mechanisms(5) pkix(7)\n              id-mod(0) id-pkix1-explicit(18) }\n               -- from [RFC3280]\n\n        ATTRIBUTE\n              FROM InformationFramework {joint-iso-itu-t ds(5) module(1)\n              informationFramework(1) 4};\n               -- from [X.501]\n\n   -- Permanent identifier Object Identifiers\n\n   id-on   OBJECT IDENTIFIER ::= { id-pkix 8 }\n\n   id-on-permanentIdentifier   OBJECT IDENTIFIER ::= { id-on 3 }\n\n   -- Permanent Identifier\n\n   permanentIdentifier ATTRIBUTE ::= {\n          WITH SYNTAX     PermanentIdentifier\n          ID              id-on-permanentIdentifier }\n\n   PermanentIdentifier ::= SEQUENCE {\n        identifierValue    UTF8String             OPTIONAL,\n                        -- if absent, use the serialNumber attribute\n                        -- if there is a single such attribute present\n                        -- in the subject DN\n        assigner           OBJECT IDENTIFIER      OPTIONAL\n                        -- if absent, the assigner is\n                        -- the certificate issuer\n}\n\nEND", "correct_text": "Appendix A.2.  1993 ASN.1 Module\n\n   PKIXpermanentidentifier93 {iso(1) identified-organization(3) dod(6)\n       internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)\n       id-mod-perm-id-93(29) }\n\n   DEFINITIONS EXPLICIT TAGS ::=\n\n   BEGIN\n\n   -- EXPORTS ALL --\n\n    IMPORTS\n        OTHER-NAME\n            FROM CertificateExtensions {joint-iso-itu-t ds(5) module(1)\n              certificateExtensions(26) 4} ;\n              -- from Module CertificateExtensions (X.509:03/2000)\n\n\n   -- Permanent identifier Object Identifiers\n\n   id-pkix  OBJECT IDENTIFIER  ::=  { iso(1)\n       identified-organization(3) dod(6) internet(1)security(5)\n       mechanisms(5) pkix(7) }\n\n   id-on   OBJECT IDENTIFIER ::= { id-pkix 8 }\n\n   id-on-permanentIdentifier   OBJECT IDENTIFIER ::= { id-on 3 }\n\n\n   -- Permanent Identifier\n\n   permanentIdentifier OTHER-NAME ::=\n     { PermanentIdentifier IDENTIFIED BY id-on-permanentIdentifier }\n\n   PermanentIdentifier ::= SEQUENCE {\n        identifierValue    UTF8String             OPTIONAL,\n                        -- if absent, use the serialNumber attribute\n                        -- if there is a single such attribute present\n                        -- in the subject DN\n        assigner           OBJECT IDENTIFIER      OPTIONAL\n                        -- if absent, the assigner is\n                        -- the certificate issuer\n   }\n\n   END\n", "notes": "\n", "submit_date": "2007-02-07", "submitter_name": "Denis Pinkas", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "193", "doc-id": "RFC4034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In Appendix B.1, it says: ", "orig_text": "                                                              For a\n   DNSKEY RR with algorithm 1, the key tag is defined to be the most\n   significant 16 bits of the least significant 24 bits in the public\n   key modulus (in other words, the 4th to last and 3rd to last octets\n   of the public key modulus).", "correct_text": "                                                              For a\n   DNSKEY RR with algorithm 1, the key tag is defined to be the most\n   significant 16 bits of the least significant 24 bits in the public\n   key modulus (in other words, the 3rd to last and 2nd to last octets\n   of the public key modulus).\n", "notes": "", "submit_date": "2005-06-21", "submitter_name": "Donald E. Eastlake III", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "194", "doc-id": "RFC4029", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "   Offering native service as quickly as possible is important.  In the\n   meantime, however, a 6to4 relay may be provided in the meantime for\n   optimized 6to4 connectivity and may also be combined with a tunnel\n   broker for extended functionality. ", "correct_text": "   Offering native service as quickly as possible is important.  In the\n   meantime, however, a 6to4 relay may be provided for optimized 6to4 \n   connectivity and may also be combined with a tunnel broker for extended \n   functionality. ", "notes": "\nIn Section 12, it says:\n    [UNMANEVA]     Huitema, C., Austein, R., Satapati, S., van der Pol,\n                  R., \"Evaluation of Transition Mechanisms for Unmanaged\n                  Networks\", Work in Progress.\n...\n   [DNSGUIDE]     Durand, A., Ihren, J., \"DNS IPv6 transport operational\n                  guidelines\", Work in Progress.\nIt should say:\n    [UNMANEVA]     Huitema, C., Austein, R., Satapati, S., and R. van der Pol, \n                  \"Evaluation of IPv6 Transition Mechanisms for Unmanaged \n                  Networks\", RFC 3904, September 2004.\n...\n   [DNSGUIDE]     Durand, A. and J. Ihren, \"DNS IPv6 Transport Operational \n                  Guidelines\", BCP 91, RFC 3901, September 2004.\n\n\n\n", "submit_date": "2005-06-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "195", "doc-id": "RFC4026", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.10", "orig_text": "   VPN Forwarding Instance (VFI) is a logical entity that resides in a\r\n   PE that includes the router information base and forwarding\r\n   information base for a VPN instance [L3VPN-FRAME].", "correct_text": "   VPN Forwarding Instance (VFI) is a logical entity that resides in a\r\n   PE that includes the route information base and forwarding\r\n   information base for a VPN instance [L3VPN-FRAME].\r\n", "notes": "", "submit_date": "2006-08-17", "submitter_name": "", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "196", "doc-id": "RFC4010", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "    P[i]          The ith plaintext key data block\r\n     C[i]          The ith ciphertext data block\r\n     A             The 64-bit integrity check register\r\n     R[i]          An array of 64-bit registers where\r\n                   i = 0, 1, 2, ..., n\r\n     A[t], R[i][t] The contents of registers A and R[i] after\r\n                   encryption step t.", "correct_text": "    P[i]          The ith (64-bit) plaintext key data block\r\n                  where i = 1, 2, ..., n\r\n    C[i]          The ith (64-bit) ciphertext data block\r\n                  where i = 0, 1, 2, ..., n\r\n     A             The 64-bit integrity check register\r\n     R[i]          An array of 64-bit registers where\r\n                  i = 1, 2, ..., n\r\n     A[t], R[t][i] The contents of registers A and R[i] after\r\n                   encryption step t.", "notes": "", "submit_date": "2005-02-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "197", "doc-id": "RFC4009", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5", "orig_text": " seedCDCParameter ::= OCTET STRING  -- 128-bit Initialization Vector", "correct_text": "seedCDCParameter ::= OCTET STRING (SIZE(16))\r\n                       -- 128-bit Initialization Vector\r\n", "notes": "", "submit_date": "2005-03-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "199", "doc-id": "RFC3981", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A says:", "orig_text": "he whois application protocol label refers to RFC 954 [19].", "correct_text": "he whois application protocol label refers to RFC 3912 [19].", "notes": "", "submit_date": "2005-01-09", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "200", "doc-id": "RFC3978", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "      (B) to prepare or allow the preparation of translations of the RFC\n          into languages other than English.", "correct_text": "      (B) to prepare or allow the preparation of translations of the RFC\n          into languages other than English,", "notes": "In Section 5.3, it says:\n    This notice can be used on IETF Contributions that are intended to\n   provide background information to educate and to facilitate\n   discussions within IETF working groups but are not intended to be\n   published as an RFCs.\nIt should say:\n    This notice can be used on IETF Contributions that are intended to\n   provide background information to educate and to facilitate\n   discussions within IETF working groups but are not intended to be\n   published as RFCs.\n\n\n", "submit_date": "2005-07-02", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2574", "doc-id": "RFC5810", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix D", "orig_text": "Note 1:   This emulates adding a new nexthop entry and then\r\n          atomically updating the L3 entries pointing to an old NH to\r\n          point to a new one.", "correct_text": "Note 1:   This emulates adding a new nexthop entry and then\r\n          atomically updating the L3 entry that pointed to the\r\n          old NH to point to the new one.", "notes": "Example 13 text (not the example) claims you can use a single KEYINFO to \r\nmatch multiple L3 entries.\r\nYou cannot use KEYINFO to match multiple table entries. The model \r\nRFC 5812 section 4.5.3 is clear that you can only match one entry.\r\n", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "201", "doc-id": "RFC3967", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Normative references to HMAC in future IETF Standards Track documents should always refer to FIPS-198 instead of RFC 2104.", "orig_text": "reading the fresh RFC 3967 (== BCP 97), I found that this memo uses\r\nexamples which are well known, but not very appropriate, for the\r\ndesired purpose:\r\n\r\n(1)\r\n    HMAC [RFC2104]\r\n\r\nThis algorithm - since almost three years - is a US Federal\r\nInformation Processing Standard!\r\n\r\n( FIPS PUB 198, issued '2002 March 6' ;\r\n  to download a PDF copy (updated '2002 April 8'), see\r\n  <http://crc.nist.gov/publications/fips/index.html> )\r\n\r\nThis is an active standard published by a recognized standards body.\r\nTherefore, *Normative References* to HMAC in future IETF Standards\r\nTrack documents should always refer to FIPS-198 instead of RFC 2104 !\r\n\r\n\r\n", "correct_text": "[see above]", "notes": "Remark 1:\n  FIPS-198 in turn refers to RFC 2104 as a readily available\n  source document for the algorithm, but gives a detailed,\n  independent description of the algorithm and its application.\n\nRemark 2:\n  Expect alternative MAC algorithms like UMAC, TTMAC, EMAC,\n  and RMAC to get formally standardized soon by various Standards\n  Bodies. For example, the former three Algorithms are already\n  (since Feb. 2003) recommended for new applications to be used in\n  the public administration and economy within the European Union.\n  This has been the result of the NESSIE project - an open contest\n  similar to the AES contest of NIST's), see\n  <http://www.cryptonessie.org/> .\n\nfrom pending\n --VERIFIER NOTES-- \n2021-10-06: moved from Held for Document Update to Rejected per request from Murray Kucherawy.  This erratum was reviewed while working on a bis document.", "submit_date": "2005-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2025-05-06 21:11:31"}, {"errata_id": "202", "doc-id": "RFC3966", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.5", "orig_text": "        +1-212-555-1 would not be a valid global context, ...", "correct_text": "        +1-212-555-01 would not be a valid global context, ...", "notes": " Although tiny typo, it could possibly be distorting the meaning.", "submit_date": "2004-12-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Henning Schulzrinne", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "203", "doc-id": "RFC3966", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "isdn-subaddress      = \";isub=\" 1*uric", "correct_text": "isdn-subaddress      = \";isub=\" 1*paramchar\r\n", "notes": "", "submit_date": "2005-03-01", "submitter_name": "Henning Schulzrinne", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "204", "doc-id": "RFC3965", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Normative Reference says:", "orig_text": "   [5]  Buckley, R., Venable, D., McIntyre, L., Parsons, G., and J.\n        Rafferty, \"File Format for Internet Fax\", RFC 3949, November\n        2004.\n", "correct_text": "   [5]  Buckley, R., Venable, D., McIntyre, L., Parsons, G., and J.\n        Rafferty, \"File Format for Internet Fax\", RFC 3949, February\n        2005.\n", "notes": " \n [RFC3949] had not yet been published when [RFC3965] was in December, 2004.", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "205", "doc-id": "RFC3965", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Informative References", "orig_text": "[19] Ramsdell, B., \"S/MIME Version 3 Message Specification\", RFC 2633, June 1999.", "correct_text": "[19] Ramsdell, B., \"S/MIME Version 3 Message Specification\", RFC 3851, June 1999.", "notes": "from pending\r\n", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "206", "doc-id": "RFC3965", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "   \r\nThe Normative Reference [3] should be deleted from section 6.1., on page 10.\r\n\r\nRationale:   \r\n   References [1] and [2] from RFC 2305 have been updated, from\r\n   pointers to RFC 821 and RFC 822, to pointers to RFC 2821 and\r\n   RFC 2822, respectively.  The (normative) updates to RFC 821 and RFC 822 contained in\r\n   STD 3, RFC 1123 [3], have been incorporated into RFC 2821\r\n   and RFC 2822, respectively, which obsolete their predecessors.\r\n   Hence, the reference to RFC 1123 is no more needed in RFC 3965,\r\n   and in fact it is not mentioned in the textual body any more.\r\n", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "207", "doc-id": "RFC3961", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Unicode character g-clef used throughout the document says:", "orig_text": "           \"g-clef    U+1011E   F0 9D 84 9E\"", "correct_text": "           \"g-clef    U+1D11E   F0 9D 84 9E\"", "notes": "", "submit_date": "2006-04-05", "submitter_name": "Weijun Wang", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "208", "doc-id": "RFC3939", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Informative Reference includes [RFC2806]; however, [RFC2806] has been obsoleted by [RFC3966].  All citations and references should reflect this throughout the document.\n\n", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "209", "doc-id": "RFC3933", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "\tThe I-D must state an explicit \"sunset\" timeout\r\n\ttypically, not to exceed one year after adoption.", "correct_text": "\tThe I-D must state an explicit \"sunset\" timeout,\r\n\ttypically not to exceed one year after adoption.\r\n", "notes": "", "submit_date": "2006-02-15", "submitter_name": "John C Klensin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "210", "doc-id": "RFC3931", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "SSHTRESH", "correct_text": "SSTHRESH\r\n", "notes": "Occurs 3 times.\r\n\r\nfrom pending.", "submit_date": "2007-05-09", "submitter_name": "Ming Deng", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "211", "doc-id": "RFC3931", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4.5", "orig_text": "      This AVP MAY be hidden (the H bit MAY be 0 or 1).  The M bit for\n      this AVP SHOULD be set to 0, but MAY vary (see Section 5.2).  The\n      Length (before hiding) of this AVP is 32.", "correct_text": "     \n      This AVP MAY be hidden (the H bit MAY be 0 or 1).  The M bit for\n      this AVP SHOULD be set to 0, but MAY vary (see Section 5.2).  The\n      Length (before hiding) of this AVP is 24.\n", "notes": "\n\n", "submit_date": "2005-10-31", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "212", "doc-id": "RFC3920", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In Appendix C.1, add the following three lines directly after the opening <xs:schema> tag:", "orig_text": "  <xs:import namespace='jabber:client'/>\r\n  <xs:import namespace='jabber:server'/>\r\n  <xs:import namespace='jabber:server:dialback'/>", "correct_text": "", "notes": "", "submit_date": "2004-11-05", "submitter_name": "Peter Saint-Andre", "verifier_id": "", "verifier_name": null, "update_date": "2022-01-25 17:42:39"}, {"errata_id": "4703", "doc-id": "RFC7841", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "", "correct_text": "", "notes": "Sections 3.3 through 3.6 should have been subsections of 3.2, as they describe parts of \"status of this memo\". See also RFC 5741 which has this right.", "submit_date": "2016-05-30", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "357", "doc-id": "RFC2978", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "(1) All references in RFC 2978 to RFC 2184 should be replaced by RFC\n    2231.  RFC 2231 obsoleted RFC 2184 before RFC 2978 was published.\n\n(2) The fact that vertical bar and backslash characters are now\n    excluded from charset names was a change from RFC 2278 that should\n    have been noted in section 7.\n", "submit_date": "2003-02-09", "submitter_name": "Ned Freed", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "358", "doc-id": "RFC2939", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "   DHCP protocol messages are identified by the 'DHCP Message Type'\n   option (option code 51).", "correct_text": "   DHCP protocol messages are identified by the 'DHCP Message Type'\n   option (option code 53).\n", "notes": "", "submit_date": "2001-09-04", "submitter_name": "Tyler Tidman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "222", "doc-id": "RFC3852", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "          IF (originatorInfo is present) AND\r\n             ((any certificates with a type of other are present) OR\r\n             (any crls with a type of other are present))\r\n          THEN version is 4\r\n          ELSE\r\n             IF ((originatorInfo is present) AND\r\n                (any version 2 attribute certificates are present)) OR\r\n                (any RecipientInfo structures include pwri) OR\r\n                (any RecipientInfo structures include ori)\r\n             THEN version is 3\r\n             ELSE\r\n                IF (originatorInfo is absent) OR\r\n                   (unprotectedAttrs is absent) OR\r\n                   (all RecipientInfo structures are version 0)\r\n                THEN version is 0\r\n                ELSE version is 2\r\n", "correct_text": "          IF (originatorInfo is present) AND\r\n             ((any certificates with a type of other are present) OR\r\n             (any crls with a type of other are present))\r\n          THEN version is 4\r\n          ELSE\r\n             IF ((originatorInfo is present) AND\r\n                (any version 2 attribute certificates are present)) OR\r\n                (any RecipientInfo structures include pwri) OR\r\n                (any RecipientInfo structures include ori)\r\n             THEN version is 3\r\n             ELSE\r\n                IF (originatorInfo is absent) AND\r\n                   (unprotectedAttrs is absent) AND\r\n                   (all RecipientInfo structures are version 0)\r\n                THEN version is 0\r\n                ELSE version is 2\r\n", "notes": " ", "submit_date": "2005-01-22", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "223", "doc-id": "RFC3834", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   A Service Responder MAY deliver the response to the address(es) from\n   the >From field, or to another address from the request payload,\n   provided this behavior is precisely defined in the specification for\n   that service. ", "correct_text": "   A Service Responder MAY deliver the response to the address(es) from\n   the From field, or to another address from the request payload,\n   provided this behavior is precisely defined in the specification for\n   that service. ", "notes": "\n\n", "submit_date": "2004-09-01", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "224", "doc-id": "RFC3829", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "  [IANALDAP]    Hodges, J. and R. Morgan, \"Lightweight Directory Access\n                Protocol (v3): Technical Specification\", RFC 3377,\n                September 2002.", "correct_text": "  [IANALDAP]    Zeilenga, K., \"Internet Assigned Authority (IANA)\n                Considerations for the Lightweight Directory Access\n                Protocol (LDAP)\", RFC 3383, September 2002.\n", "notes": "\n", "submit_date": "2004-09-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "225", "doc-id": "RFC3822", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Lines 274 and 333 say:", "orig_text": "template-version=0.1", "correct_text": "template-version=1.0", "notes": "", "submit_date": "2004-11-22", "submitter_name": "David Peterson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "236", "doc-id": "RFC3742", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   the invariant is maintained so that the congestion window is\n   increased during slow-start by at most max_ssthresh/2 MSS per round-\n   trip time. ", "correct_text": "   the invariant is maintained that the congestion window is\n   increased during slow-start by at most max_ssthresh MSS per\n   round-trip time (and at least max_ssthresh/2 MSS per round-trip\n   time).", "notes": "\nLater in Section 2:\n    it\n   takes:\n\n      log(max_ssthresh) + (cwnd - max_ssthresh)/(max_ssthresh/2)\n\n   round-trip times to reach a congestion window of cwnd, for a\n   congestion window greater than max_ssthresh.\nShould be:\n    it\n   takes at least:\n\n      log(max_ssthresh) + (cwnd - max_ssthresh)/(max_ssthresh)\n\n   and at most:\n\n      log(max_ssthresh) + (cwnd - max_ssthresh)/(max_ssthresh/2)\n\n   round-trip times to reach a congestion window of cwnd, for a\n   congestion window greater than max_ssthresh.\n\nLater in Section 2:\n    Thus, with Limited Slow-Start with max_ssthresh set to 100 MSS, it\n   would take 836 round-trip times to reach a congestion window of\n   83,000 packets,\nShould be:\n    Thus, with Limited Slow-Start with max_ssthresh set to 100 MSS, it\n   would take at least 836 round-trip times to reach a congestion window of\n   83,000 packets,\n\n", "submit_date": "2005-06-08", "submitter_name": "Sally Floyd", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "237", "doc-id": "RFC3741", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Please see the corresponding W3C document:\n\nhttp://www.w3.org/TR/xml-exc-c14n\n\n\nPlease see the pointer to the W3C errata:\n\nhttp://www.w3.org/2002/07/xml-exc-c14n-errata\n\n\n", "submit_date": "2004-03-26", "submitter_name": "Donald Eastlake III", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "238", "doc-id": "RFC3733", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.4", "orig_text": "   S:    <result code=\"1000\">\n   S:      <msg>Command completed successfully</msg>", "correct_text": "   S:    <result code=\"1001\">\n   S:      <msg>Command completed successfully; action pending</msg>\n", "notes": "", "submit_date": "2004-05-13", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "239", "doc-id": "RFC3730", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.9.2.3", "orig_text": "S:    <msgQ count=\"4\" id=\"12346\"/>", "correct_text": "S:    <msgQ count=\"4\" id=\"12345\"/>", "notes": "Author knows the best :-).", "submit_date": "2004-11-22", "submitter_name": "\"Scott Hollenbeck\"", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "240", "doc-id": "RFC3730", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.9.2.3", "orig_text": "A <poll> acknowledgement response notes the number of messages remaining in\r\nthe queue and the ID of the next message available for retrieval.", "correct_text": "A <poll> acknowledgement response notes the ID of the message that has been\r\nacknowledged and the number of messages remaining in the queue.", "notes": " ", "submit_date": "2004-11-17", "submitter_name": "\"Scott Hollenbeck\"", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "241", "doc-id": "RFC3720", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.6.1", "orig_text": "The only exception is if a discovery session (see Section 2.3 iSCSI Session Types) is to be established.\r\n\r\n", "correct_text": "The only exception is if a discovery session (see Section 3.3 iSCSI Session Types) is to be established.", "notes": "Section 2.3 --> Section 3.3", "submit_date": "2004-09-01", "submitter_name": "Julian Satran", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "242", "doc-id": "RFC3715", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   [RFC2663]    Srisuresh, P. and M. Holdredge, \"IP Network Address\n                Translator (NAT) Terminology and Considerations\", RFC\n                2663, August 1999.", "correct_text": "   [RFC2663]    Srisuresh, P. and M. Holdrege, \"IP Network Address\n                Translator (NAT) Terminology and Considerations\", RFC\n                2663, August 1999.\n", "notes": "", "submit_date": "2004-03-13", "submitter_name": "Matt Holdrege", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "243", "doc-id": "RFC3712", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "[RFC2279] has been obsoleted by [RFC3629].  All citations to [RFC2279] should refer to [RFC3629].\n\n\n      [RFC3629]   Yergeau, F., \"UTF-8, a Transformation Format of ISO\n                  10646\", RFC 3629, STD 63, November 2003.\n\n", "submit_date": "2004-09-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4323", "doc-id": "RFC6214", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.  Security", "orig_text": "", "correct_text": "", "notes": "New Physical and Link layer problem have been discovered and should be addressed in this RFC, and they are:\r\n1. Avian IP carriers are competing for air space with Unmanned Aerial Vehicle (UAV), and as such have a higher probability of packet collision at Layer 1 has increase in retransmissions.\r\n2. On path Avian IP carrier dropouts, caused by draughts, may also lead to a connection loss, and increase in retransmission.", "submit_date": "2015-04-01", "submitter_name": "Joe Klein", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "227", "doc-id": "RFC3815", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "MplsFecEntry is defined as:", "orig_text": "      MplsFecEntry ::= SEQUENCE {\r\n          mplsFecIndex               IndexInteger,\r\n          mplsFecType                INTEGER,\r\n          mplsFecAddrType            InetAddressType,\r\n          mplsFecAddr                InetAddress,\r\n          mplsFecAddrPrefixLength    InetAddressPrefixLength,\r\n          mplsFecStorageType         StorageType,\r\n          mplsFecRowStatus           RowStatus\r\n      }", "correct_text": "      MplsFecEntry ::= SEQUENCE {\r\n          mplsFecIndex               IndexInteger,\r\n          mplsFecType                INTEGER,\r\n          mplsFecAddrPrefixLength    InetAddressPrefixLength,\r\n          mplsFecAddrType            InetAddressType,\r\n          mplsFecAddr                InetAddress,\r\n          mplsFecStorageType         StorageType,\r\n          mplsFecRowStatus           RowStatus\r\n      }\r\n\r\n", "notes": " \r\n \r\nBecause the OID assignments are:\r\n\r\nmplsFecAddrPrefixLength - mplsFecEntry.3\r\nmplsFecAddrType         - mplsFecEntry.4\r\nmplsFecAddr             - mplsFecEntry.5\n --VERIFIER NOTES-- \nAfter discussion with an author (Joan Cucchiara), a MIB Doctor (Mike Heard), and an MPLS MIB expert (Tom Nadeau), we conclude that no change is required.\r\n\r\nIn the words of Mike Heard...\r\n\r\n  While this may be a poor practice, I don't think it actually\r\n  violates RFC 2578.  As far as I can see, the only thing it\r\n  actually says is this:\r\n\r\n  7.10.  Mapping of the OBJECT-TYPE value\r\n   ...\r\n     (2) If the object corresponds to a conceptual row, then at least one\r\n         assignment, one for each column in the conceptual row, is present\r\n         beneath that object.  The administratively assigned name for each\r\n         column is derived by appending a unique, positive sub-identifier to\r\n         the administratively assigned name for the conceptual row.\r\n\r\n  which does not put any ordering constraints on the sub-identifiers.\r\n\r\n  Unless there is something that I have missed, it seems to me that\r\n  this is not actually an erratum.\r\n\r\n", "submit_date": "2005-02-13", "submitter_name": "Michael Kirkham", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "228", "doc-id": "RFC3813", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "mplsLsrModuleReadOnlyCompliance", "orig_text": "    OBJECT       mplsInSegmentNPop\r\n    SYNTAX       Integer32 (1..1)\r\n    MIN-ACCESS   read-only\r\n    DESCRIPTION \"Write access is not required.  This object\r\n                 SHOULD be set to 1 if it is read-only.", "correct_text": "    OBJECT       mplsInSegmentNPop\r\n    SYNTAX       Integer32 (1)\r\n    MIN-ACCESS   read-only\r\n    DESCRIPTION \"Write access is not required.  This object\r\n                 SHOULD be set to 1 if it is read-only.", "notes": "Ref: RFC 2578, section 11.1:\r\n\r\n                 - when a pair of values is specified, the first value\r\n                   must be less than the second value.\r\n", "submit_date": "2005-02-13", "submitter_name": "Michael Kirkham", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "229", "doc-id": "RFC3813", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nDescription says:", "orig_text": "       \"For creating, modifying, and deleting this row.\r\n        When a row in this table has a row in the active(1)\r\n        state, no objects in this row except this object\r\n        and the mplsXCStorageType can be modified. \"", "correct_text": "       \"For creating, modifying, and deleting this row.\r\n        When a row in this table has a row in the active(1)\r\n        state, no objects in this row except this object, the \r\n        mplsXCStorageType and the mplsXCAdminStatus can be modified.\"", "notes": "", "submit_date": "2004-11-17", "submitter_name": "Stefan Winter", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "230", "doc-id": "RFC3783", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   and a Target Session Identifying Handler (TSIH) - each identifying\n   one end of the same session.", "correct_text": "   and a Target Session Identifying Handle (TSIH) - each identifying\n   one end of the same session.", "notes": "", "submit_date": "2004-05-28", "submitter_name": "Eddy Quicksall", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "231", "doc-id": "RFC3782", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   When not in Fast Recovery, the value of the state variable \"recover\"\n   should be pulled along with the value of the state variable for\n   acknowledgments (typically, \"snd_una\") so that, when large amounts of\n   data have been sent and acked, the sequence space does not wrap and\n   falsely indicate that Fast Recovery should not be entered (Section 3,\n   step 1, last paragraph).", "correct_text": "   When updating the Cumulative Acknowledgement field outside of\n   Fast Recovery, the \"recover\" state variable may also need to be\n   updated in order to continue to permit possible entry into Fast\n   Recovery (Section 3, step 1).  This issue arises when an update\n   of the Cumulative Acknowledgement field results in a sequence\n   wraparound that affects the ordering between the Cumulative\n   Acknowledgement field and the \"recover\" state variable.  Entry\n   into Fast Recovery is only possible when the Cumulative\n   Acknowledgment field covers more than the \"recover\" state variable.", "notes": "\n", "submit_date": "2004-06-07", "submitter_name": "Sally Floyd", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "232", "doc-id": "RFC3777", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "  One possible selection method is described in RFC 2777 [1].", "correct_text": "  One possible selection method is described in RFC 3797 [1].", "notes": "\r\nReferences point to RFC 3797, not RFC 2777:\r\n   [1] Eastlake, 3rd, D., \"Publicly Verifiable Nominations Committee\r\n       (Nomcom) Random Selection\", RFC 3797, June 2004.\r\n\r\nRFC 3797 has obsoleted RFC 2777", "submit_date": "2006-08-31", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "233", "doc-id": "RFC3770", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   id-aca-wlanSSID  OBJECT IDENTIFIER ::= { id-aca 6 }\n", "correct_text": "   id-aca-wlanSSID  OBJECT IDENTIFIER ::= { id-aca 7 }\n", "notes": " ", "submit_date": "2005-01-22", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "234", "doc-id": "RFC3770", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "    The WLAN SSID attribute certificate attribute is identified by\r\n    id-aca-wlanSSID.\r\n\r\n      id-aca  OBJECT IDENTIFIER  ::=  { iso(1) identified-organization(3)\r\n        dod(6) internet(1) security(5) mechanisms(5) pkix(7) 10 }\r\n\r\n      id-aca-wlanSSID  OBJECT IDENTIFIER ::= { id-aca 6 }\r\n", "correct_text": "    The WLAN SSID attribute certificate attribute is identified by\r\n    id-aca-wlanSSID.\r\n\r\n      id-aca  OBJECT IDENTIFIER  ::=  { iso(1) identified-organization(3)\r\n        dod(6) internet(1) security(5) mechanisms(5) pkix(7) 10 }\r\n\r\n      id-aca-wlanSSID  OBJECT IDENTIFIER ::= { id-aca 7 }\r\n", "notes": "This same error is repeated in the ASN.1 Module (Section 8).", "submit_date": "2005-01-22", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "235", "doc-id": "RFC3744", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Issues and resolutions regarding this document can be reviewed at:\n\nhttp://greenbytes.de/tech/webdav/draft-reschke-rfc3744bis-issues.html\n\n\n\n", "submit_date": "2004-05-26", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "244", "doc-id": "RFC3712", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "     Note:  This attribute is based on 'printer-uri-supported', 'uri-\r\n     authentication-supported', and `'uri-security-supported' (called the\r\n     'Three Musketeers' because they are parallel ordered attributes)\r\n", "correct_text": "     Note:  This attribute is based on 'printer-uri-supported', 'uri-\r\n     authentication-supported', and 'uri-security-supported' (called the\r\n     'Three Musketeers' because they are parallel ordered attributes)\r\n", "notes": " \r\n  Extraneous \"`\" in 2nd line.\r\n", "submit_date": "2004-09-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "245", "doc-id": "RFC3712", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "References", "orig_text": "     \r\n      [RFC2717]   Petke, R. and I. King, \"Registration Procedures for URL\r\n                  Scheme Names\", RFC 2717, November 1999.\r\n\r\n      [RFC2718]   Masinter, L., Alvestrand, H., Zigmond, D. and R. Petke,\r\n                  \"Guidelines for new URL Schemes\", BCP 19, RFC 2718,\r\n                  November 1999.\r\n\r\n      [RFC2978]   Freed, N. and J.Postel, \"IANA Charset Registration\r\n                  Procedures\", RFC2978, October 2000.\r\n", "correct_text": "     \r\n      [RFC2717]   Petke, R. and I. King, \"Registration Procedures for URL\r\n                  Scheme Names\", RFC 2717, BCP 35, November 1999.\r\n\r\n      [RFC2718]   Masinter, L., Alvestrand, H., Zigmond, D. and R. Petke,\r\n                  \"Guidelines for new URL Schemes\", RFC 2718, November\r\n                  1999.\r\n\r\n      [RFC2978]   Freed, N. and J.Postel, \"IANA Charset Registration\r\n                  Procedures\", RFC2978, BCP 19, October 2000.", "notes": "", "submit_date": "2004-09-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "246", "doc-id": "RFC3696", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   The exact rule is that any ASCII character, including control\r\n   characters, may appear quoted, or in a quoted string.  When quoting\r\n   is needed, the backslash character is used to quote the following\r\n   character.  For example\r\n\r\n      Abc\\@def@example.com\r\n\r\n   is a valid form of an email address.  Blank spaces may also appear,\r\n   as in\r\n\r\n      Fred\\ Bloggs@example.com\r\n\r\n   The backslash character may also be used to quote itself, e.g.,\r\n\r\n      Joe.\\\\Blow@example.com", "correct_text": "   The exact rule is that any ASCII character, including control\r\n   characters, may appear quoted, or in a quoted string.  When quoting\r\n   is needed, the backslash character is used to quote the following\r\n   character.  For example\r\n\r\n      \"Abc\\@def\"@example.com\r\n\r\n   is a valid form of an email address.  Blank spaces may also appear,\r\n   as in\r\n\r\n      \"Fred\\ Bloggs\"@example.com\r\n\r\n   The backslash character may also be used to quote itself, e.g.,\r\n\r\n      \"Joe.\\\\Blow\"@example.com", "notes": "", "submit_date": "2005-07-09", "submitter_name": "John C. Klensin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "247", "doc-id": "RFC3647", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "On page 68, it says:\n", "orig_text": "   ------------------------------------------------------\n   4.6.6 Archive Collection System\n         (Internal or External)                 5.5.6\n   ------------------------------------------------------\n   4.6.6 Procedures to Obtain and\n         Verify Archive Information             5.5.7\n   ------------------------------------------------------", "correct_text": "   ------------------------------------------------------\n   4.6.6 Archive Collection System\n         (Internal or External)                 5.5.6\n   ------------------------------------------------------\n   4.6.7 Procedures to Obtain and\n         Verify Archive Information             5.5.7\n   ------------------------------------------------------\n", "notes": "", "submit_date": "2004-04-21", "submitter_name": "Daniel Montpetit", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "248", "doc-id": "RFC3633", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "   If a requesting router receives an IA_PD with T1 greater than T2, and\r\n   both T1 and T2 are greater than 0, the client discards the IA_PD\r\n   option and processes the remainder of the message as though the\r\n   delegating router had not included the IA_PD option.", "correct_text": "   If a requesting router receives an IA_PD with T1 greater than T2, and\r\n   both T1 and T2 are greater than 0, the requesting router discards the IA_PD\r\n   option and processes the remainder of the message as though the\r\n   delegating router had not included the IA_PD option.\r\n", "notes": " ", "submit_date": "2006-06-15", "submitter_name": "Hideshi Enokihara", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "249", "doc-id": "RFC3625", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "    VRAT            = %x76 %x72 %x61 %x74", "correct_text": "", "notes": "This rule is important because without it, it isn't clear whether the \n\"vrat\" string is capitalized (like \"RIFF\" and \"QLCM\") or not (like \n\"fmt \" and \"data\").", "submit_date": "2005-08-30", "submitter_name": "Richard Walters", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "250", "doc-id": "RFC3588", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.3.2", "orig_text": "   Message Format\n\n      <RAA>  ::= < Diameter Header: 258, PXY >\n                 < Session-Id >\n                 { Result-Code }\n                 { Origin-Host }\n                 { Origin-Realm }\n                 [ User-Name ]\n                 [ Origin-State-Id ]\n                 [ Error-Message ]\n                 [ Error-Reporting-Host ]\n               * [ Failed-AVP ]\n               * [ Redirect-Host ]\n                 [ Redirect-Host-Usage ]\n                 [ Redirect-Host-Cache-Time ]\n               * [ Proxy-Info ]\n               * [ AVP ]", "correct_text": "   Message Format\n\n      <RAA>  ::= < Diameter Header: 258, PXY >\n                 < Session-Id >\n                 { Result-Code }\n                 { Origin-Host }\n                 { Origin-Realm }\n                 [ User-Name ]\n                 [ Origin-State-Id ]\n                 [ Error-Message ]\n                 [ Error-Reporting-Host ]\n               * [ Failed-AVP ]\n               * [ Redirect-Host ]\n                 [ Redirect-Host-Usage ]\n                 [ Redirect-Max-Cache-Time ]\n               * [ Proxy-Info ]\n               * [ AVP ]", "notes": "\n\n", "submit_date": "2004-10-02", "submitter_name": "Alan McNamee", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "251", "doc-id": "RFC3588", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.5.2", "orig_text": "   Message Format\n\n      <DWA>  ::= < Diameter Header: 280 >\n                 { Result-Code }\n                 { Origin-Host }\n                 { Origin-Realm }\n                 [ Error-Message ]\n               * [ Failed-AVP ]\n                 [ Original-State-Id ]", "correct_text": "   Message Format\n\n      <DWA>  ::= < Diameter Header: 280 >\n                 { Result-Code }\n                 { Origin-Host }\n                 { Origin-Realm }\n                 [ Error-Message ]\n               * [ Failed-AVP ]\n                 [ Origin-State-Id ]", "notes": "\n", "submit_date": "2004-10-02", "submitter_name": "Alan McNamee", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "272", "doc-id": "RFC3445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Values for the key protocol octet are incorrect. They should be:", "orig_text": "        VALUE   Protocol\r\n\r\n          0      -reserved\r\n          1     reserved (was TLS)\r\n          2     reserved (was email)\r\n          3     dnssec\r\n          4     reserved (was IPSEC)\r\n         5-255   reserved", "correct_text": "", "notes": "Rationale: Looking at RFC2535, the values are the original assignments.  The\r\nnumbers in RFC3445 are incorrect and don't match.  I guess since the\r\nregistry was closed, they are all reserved now and no one double checked.\r\n\r\nRFC 2535 has the original correct assignments, and the registry is correct\r\nin stating that they are now all reserved.  ", "submit_date": "2005-02-22", "submitter_name": "\"Scott Rose\"", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "273", "doc-id": "RFC3424", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The center page header:", "orig_text": "   IAB Considerations for UNSAP Across NAT", "correct_text": "   IAB Considerations for UNSAF Across NAT\n", "notes": "", "submit_date": "2002-11-19", "submitter_name": "Leslie Daigle", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5013", "doc-id": "RFC7250", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "   IANA has allocated two new TLS extensions, client_certificate_type\r\n   and server_certificate_type, from the \"TLS ExtensionType Values\"\r\n   subregistry defined in [RFC5246].", "correct_text": "   IANA has allocated two new code points, 19 (0x13) and 20 (0x14), for\r\n   client_certificate_type and server_certificate_type, respectively,\r\n   in the \"TLS ExtensionType Values\" subregistry defined in [RFC5246].", "notes": "", "submit_date": "2017-05-10", "submitter_name": "i", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-11-11 18:54:11"}, {"errata_id": "252", "doc-id": "RFC3542", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In section 10.2 (page 41), the RFC says:\n", "orig_text": "      int inet6_opt_append(void *extbuf, socklen_t extlen, int offset,\n                           uint8_t type, socklen_t len, uint_t align,\n                           void **databufp);\n", "correct_text": "      int inet6_opt_append(void *extbuf, socklen_t extlen, int offset,\n                           uint8_t type, socklen_t len, uint8_t align,\n                           void **databufp);\n", "notes": "Similarly, the following part of Section 15 (page 55)\n\n       <netinet/in.h>    int inet6_opt_append(void *, socklen_t, int,\n                                             uint8_t, socklen_t, uint_t,\n                                             void **);\n\nShould actually be:\n\n       <netinet/in.h>    int inet6_opt_append(void *, socklen_t, int,\n                                             uint8_t, socklen_t,\n                                             uint8_t, void **);\n\nThat is, \"uint_t\" should be replaced with \"uint8_t\".\n\n", "submit_date": "2004-02-12", "submitter_name": "Tatuya JINMEI", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "253", "doc-id": "RFC3542", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.3", "orig_text": "   This cmsghdr will be passed to every socket that sets the\n   IPV6_RECVPATHMTU socket option, even if the socket is non-connected.\n   Note that this also means an application that sets the option may\n   receive an IPV6_MTU ancillary data item for each ICMP too big error\n   the node receives, including such ICMP errors caused by other\n   applications on the node.", "correct_text": "   This cmsghdr will be passed to every socket that sets the\n   IPV6_RECVPATHMTU socket option, even if the socket is non-connected.\n   Note that this also means an application that sets the option may\n   receive an IPV6_PATHMTU ancillary data item for each ICMP too big error\n   the node receives, including such ICMP errors caused by other\n   applications on the node.", "notes": "Change: IPV6_MTU should be IPV6_PATHMTU.", "submit_date": "2005-06-26", "submitter_name": "Hideaki Yoshifuji", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "254", "doc-id": "RFC3537", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "    PAD          :  38be62", "correct_text": "    PAD          :  be62fe", "notes": "\n", "submit_date": "2004-10-14", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "255", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.1.8.", "orig_text": "This sequence establishes the use of an lock_owner and associated \nsequence number.\n\nShould be \"a lock_owner\"", "correct_text": "If server replica or a server immigrating a filesystem agrees to\n\nShould be \"If a server replica\"", "notes": "\nIn Section 9.3.2.  Data Caching and File Locking, Last Paragraph:\n\n by flushing to the server more data upon an LOCKU than is covered by \nthe locked range.\n\nShould be \"a LOCKU\"\n\n", "submit_date": "2004-02-03", "submitter_name": "Jon Bauman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "256", "doc-id": "RFC3525", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Errata can be found in the ITU-T Implementor's Guide at:\nhttp://www.itu.int/itudoc/itu-t/com16/implgd/h248.1v1.html\n", "submit_date": "2005-09-13", "submitter_name": "Tom Taylor", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "257", "doc-id": "RFC3525", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nAppendix I says:", "orig_text": "   MEGACO/1 [125.125.125.111]:55555 Reply = 50006 {\r\n    Context = 5000 {Modify = A4445} }", "correct_text": "   MEGACO/1 [125.125.125.111]:55555 Reply = 50006 {\r\n    Context = 5000 {Modify = A5555} }\r\n", "notes": "", "submit_date": "2005-04-28", "submitter_name": "Chen Rui", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "258", "doc-id": "RFC3507", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Errata for this document can be found at:\nhttp://www.measurement-factory.com/std/icap/\n\n\n\n", "submit_date": "2005-07-18", "submitter_name": "Alex Rousskov", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "261", "doc-id": "RFC3501", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "Section 2.3.1.1, page 8:\r\n        old:\r\n   A 32-bit value assigned to each message, which when used with the\r\n   unique identifier validity value (see below) forms a 64-bit value\r\n   that MUST NOT refer to any other message in the mailbox or any\r\n   subsequent mailbox with the same name forever.  Unique identifiers\r\n   [...]\r\n        new:\r\n   An unsigned 32-bit value assigned to each message, which when used\r\n   with the unique identifier validity value (see below) forms a 64-bit\r\n   value that MUST NOT refer to any other message in the mailbox or any\r\n   subsequent mailbox with the same name forever.  Unique identifiers\r\n   [...]\r\n-----\r\n\r\nSection 2.3.1.1, page 9:\r\n        old:\r\n   Associated with every mailbox are two values which aid in unique\r\n   identifier handling: the next unique identifier value and the unique\r\n   identifier validity value.\r\n        new:\r\n   Associated with every mailbox are two 32-bit unsigned values which\r\n   aid in unique identifier handling: the next unique identifier value\r\n   (UIDNEXT) and the unique identifier validity value (UIDVALIDITY).\r\n-----\r\n\r\nSection 5.1.3, page 19:\r\n        old:\r\n   All other characters (octet values 0x00-0x1f and 0x7f-0xff) are\r\n   represented in modified BASE64, with a further modification from\r\n   [UTF-7] that \",\" is used instead of \"/\".  Modified BASE64 MUST NOT be\r\n   used to represent any printing US-ASCII character which can represent\r\n   itself.\r\n        new:\r\n   All other characters (octet values 0x00-0x1f and 0x7f-0xff) are\r\n   represented in modified BASE64, with a further modification from\r\n   [UTF-7] that \",\" is used instead of \"/\".  Modified BASE64 MUST NOT be\r\n   used to represent any printing US-ASCII character which can represent\r\n   itself.  Only characters inside the modified BASE64 alphabet are          \r\n   permitted in modified BASE64 text.\r\n-----\r\n\r\nSection 5.4, page 22:\r\n        old:\r\n   If a server has an inactivity autologout timer, the duration of that\r\n   timer MUST be at least 30 minutes.  The receipt of ANY command from     \r\n   the client during that interval SHOULD suffice to reset the\r\n   autologout timer.\r\n        new:\r\n   If a server has an inactivity autologout timer that applies to\r\n   sessions after authentication, the duration of that timer MUST be at\r\n   least 30 minutes.  The receipt of ANY command from the client during\r\n   that interval SHOULD suffice to reset the autologout timer.\r\n\r\nSection 5.5, page 22:\r\n          old:\r\n        Note: UID FETCH, UID STORE, and UID SEARCH are different\r\n        commands from FETCH, STORE, and SEARCH.  If the client\r\n        sends a UID command, it must wait for a completion result     \r\n        response before sending a command with message sequence\r\n        numbers.\r\n          new:\r\n        Note: EXPUNGE responses are permitted while UID FETCH,\r\n        UID STORE, and UID SEARCH are in progress.  If the client\r\n        sends a UID command, it must wait for a completion result\r\n        response before sending a command which uses message\r\n        sequence numbers (this may include UID SEARCH).  Any\r\n        message sequence numbers in an argument to UID SEARCH       \r\n        are associated with messages prior to the effect of any     \r\n        untagged EXPUNGE returned by the UID SEARCH.\r\n-----\r\n\r\nSection 6.2.1, page 27:\r\n        old:\r\n      Once [TLS] has been started, the client MUST discard cached      \r\n      information about server capabilities and SHOULD re-issue the    \r\n      CAPABILITY command.  This is necessary to protect against man-in-\r\n      the-middle attacks which alter the capabilities list prior to\r\n      STARTTLS.  The server MAY advertise different capabilities after\r\n      STARTTLS.\r\n        new:\r\n      Once [TLS] has been started, the client MUST discard cached\r\n      information about server capabilities and SHOULD re-issue the\r\n      CAPABILITY command.  This is necessary to protect against man-in-\r\n      the-middle attacks which alter the capabilities list prior to\r\n      STARTTLS.  The server MAY advertise different capabilities, and\r\n      in particular SHOULD NOT advertise the STARTTLS capability, after\r\n      a successful STARTTLS command.\r\n-----\r\n\r\nSection 6.2.2, page 28:\r\n        old:\r\n      The authentication protocol exchange consists of a series of\r\n      server challenges and client responses that are specific to the\r\n      authentication mechanism.  A server challenge consists of a  \r\n      command continuation request response with the \"+\" token followed \r\n      by a BASE64 encoded string.  The client response consists of a    \r\n      single line consisting of a BASE64 encoded string.  If the client\r\n      wishes to cancel an authentication exchange, it issues a line\r\n      consisting of a single \"*\".  If the server receives such a  \r\n      response, it MUST reject the AUTHENTICATE command by sending a\r\n      tagged BAD response.\r\n        new:\r\n      The authentication protocol exchange consists of a series of           \r\n      server challenges and client responses that are specific to the\r\n      authentication mechanism.  A server challenge consists of a\r\n      command continuation request response with the \"+\" token followed\r\n      by a BASE64 encoded string.  The client response consists of a\r\n      single line consisting of a BASE64 encoded string.  If the client\r\n      wishes to cancel an authentication exchange, it issues a line    \r\n      consisting of a single \"*\".  If the server receives such a           \r\n      response, or if it receives an invalid BASE64 string (e.g.\r\n      characters outside the BASE64 alphabet, or non-terminal \"=\"), it\r\n      MUST reject the AUTHENTICATE command by sending a tagged BAD\r\n      response.\r\n\r\nSection 6.3.4, page 36:\r\n        old:\r\n      It is permitted to delete a name that has inferior hierarchical\r\n      names and does not have the \\Noselect mailbox name attribute.  In\r\n      this case, all messages in that mailbox are removed, and the name\r\n      will acquire the \\Noselect mailbox name attribute.\r\n        new:\r\n      It is permitted to delete a name that has inferior hierarchical \r\n      names and does not have the \\Noselect mailbox name attribute.  If\r\n      the server implementation does not permit deleting the name while\r\n      inferior hierarchical names exists the \\Noselect mailbox name\r\n      attribute is set for that name.  In any case, all messages in\r\n      that mailbox are removed by the DELETE command.\r\n-----\r\n\r\nSection 6.3.10, page 44:\r\n        old:\r\n   Responses:  untagged responses: STATUS\r\n        new:\r\n   Responses:  REQUIRED untagged response: STATUS\r\n-----\r\n\r\nSection 6.4.3, page 49:\r\n        old:\r\n      The EXPUNGE command permanently removes all messages that have the\r\n      \\Deleted flag set from the currently selected mailbox.  Before   \r\n      returning an OK to the client, an untagged EXPUNGE response is\r\n      sent for each message that is removed.\r\n        new:   \r\n      The EXPUNGE command permanently removes all messages that have the\r\n      \\Deleted flag set from the currently selected mailbox.  Before\r\n      returning an OK to the client, an untagged EXPUNGE response is\r\n      sent for each message that is removed.  Note that if any messages\r\n      with the \\Recent flag set are expunged, an untagged RECENT response\r\n      is sent after the untagged EXPUNGE(s) to update the client's count\r\n      of RECENT messages.\r\n-----\r\n\r\nSection 6.4.4, page 50:\r\n        old:\r\n      [MIME-IMB] content transfer encodings, and [MIME-HDRS] strings in\r\n      [RFC-2822]/[MIME-IMB] headers, MUST be decoded before comparing\r\n      text in a [CHARSET] other than US-ASCII.  US-ASCII MUST be     \r\n      supported; other [CHARSET]s MAY be supported.\r\n        new:\r\n      [MIME-IMB] content transfer encodings, and [MIME-HDRS] strings in \r\n      [RFC-2822]/[MIME-IMB] headers, MUST be decoded before comparing  \r\n      text.  US-ASCII MUST be supported; other [CHARSET]s MAY be supported.\r\n-----\r\n\r\nSection 6.4.4, page 50:   \r\n        old:\r\n      In all search keys that use strings, a message matches the key if      \r\n      the string is a substring of the field.  The matching is       \r\n      case-insensitive.\r\n        new:\r\n      In all search keys that use strings, a message matches the key if\r\n      the string is a substring of the associated text.  The matching is\r\n      case-insensitive.  Note that the empty string is a substring; this\r\n      is useful when doing a HEADER search.\r\n-----\r\n\r\nSection 6.4.4, page 54:\r\n        old:   \r\n               C: A284 SEARCH CHARSET UTF-8 TEXT {6}\r\n               C: XXXXXX\r\n               S: * SEARCH 43\r\n               S: A284 OK SEARCH completed\r\n        new:\r\n               C: A284 SEARCH CHARSET UTF-8 TEXT {6}\r\n               S: + Ready for literal text\r\n               C: XXXXXX\r\n               S: * SEARCH 43\r\n               S: A284 OK SEARCH completed\r\n-----\r\n\r\nSection 7.2.2, page 70:\r\n        old:\r\n      If it is not feasible for the server to determine whether or not\r\n      the mailbox is \"interesting\", or if the name is a \\Noselect name,\r\n      the server SHOULD NOT send either \\Marked or \\Unmarked.\r\n        new:\r\n      If it is not feasible for the server to determine whether or not\r\n      the mailbox is \"interesting\", the server SHOULD NOT send either\r\n      \\Marked or \\Unmarked.  The server MUST NOT send more than one of\r\n      \\Marked, \\Unmarked, and \\Noselect for a single mailbox, and MAY\r\n      send none of these.\r\n-----\r\n\r\nSection 7.4.2, page 75:\r\n        old:\r\n         body location\r\n            A string list giving the body content URI as defined in\r\n            [LOCATION].\r\n        new:\r\n         body location\r\n            A string giving the body content URI as defined in      \r\n            [LOCATION].\r\n\r\nSection 7.4.2, page 77:\r\n        old:\r\n         body location\r\n            A string list giving the body content URI as defined in\r\n            [LOCATION].\r\n        new:\r\n         body location\r\n            A string giving the body content URI as defined in       \r\n            [LOCATION].\r\n\r\n\r\nFormal Syntax, Page 84:\r\n        old:\r\nCHAR8           = %x01-ff\r\n                    ; any OCTET except NUL, %x00\r\n        new:\r\nCHAR8           = %x01-ff \r\n                    ; any OCTET except NUL, %x00\r\n\r\ncharset         = atom / quoted\r\n-----\r\n\r\nFormal Syntax, Page 89:\r\n        old:\r\nresp-text-code  = \"ALERT\" /\r\n                  \"BADCHARSET\" [SP \"(\" astring *(SP astring) \")\" ] /\r\n        new:\r\nresp-text-code  = \"ALERT\" /\r\n                  \"BADCHARSET\" [SP \"(\" charset *(SP charset) \")\" ] /\r\n-----          \r\n\r\nFormal Syntax, Page 89: \r\n        old:\r\nsearch          = \"SEARCH\" [SP \"CHARSET\" SP astring] 1*(SP search-key)\r\n        new:\r\nsearch          = \"SEARCH\" [SP \"CHARSET\" SP charset] 1*(SP search-key)\r\n-----\r\n\r\nFormal Syntax, Page 90:      \r\n        old:\r\nsequence-set    = (seq-number / seq-range) *(\",\" sequence-set)\r\n        new:\r\nsequence-set    = (seq-number / seq-range) [\",\" sequence-set]\r\n-----       \r\n\r\nFormal Syntax, Page 90:\r\n        old:\r\nstatus-att-list =  status-att SP number *(SP status-att SP number)\r\n        new:\r\nstatus-att-val  = (\"MESSAGES\" SP number) / (\"RECENT\" SP number) /    \r\n                  (\"UIDNEXT\" SP nz-number) / (\"UIDVALIDITY\" SP nz-number) /\r\n                  (\"UNSEEN\" SP number)\r\n\r\nstatus-att-list =  status-att-val *(SP status-att-val)\r\n-----\r\n\r\nIANA Considerations, Page 94:\r\n        new:\r\n    GSSAPI/Kerberos/SASL service names are registered by publishing a\r\n    standards track or IESG approved experimental RFC.  The registry\r\n    is currently located at:\r\n\r\n         http://www.iana.org/assignments/gssapi-service-names       \r\n\r\n    As this specification defines the \"imap\" service name previously\r\n    defined in RFC 1731, the registry will be updated accordingly.\r\n-----       \r\n\r\n\r\nNormative References, Page 95:\r\n        old:\r\n   [LANGUAGE-TAGS]       Alvestrand, H., \"Tags for the Identification of\r\n                         Languages\", BCP 47, RFC 3066, January 2001. \r\n        new:\r\n   [LANGUAGE-TAGS]       Alvestrand, H., \"Content Language Headers\",\r\n                         RFC 3282, May 2002.\r\n\r\n\r\nAppendix B, Page 103:    \r\n        new:\r\n   115) Add support for Content-Location to BODYSTRUCTURE.", "correct_text": "[see above] ", "notes": "from pending", "submit_date": "2007-06-13", "submitter_name": "Mark Crispin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "264", "doc-id": "RFC3494", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the \"Dependent Specifications\" section, it says: \n", "orig_text": "RFC 1781 is a technical specification for \"User Friendly Naming\"\nwhich replies on particular syntaxes described in RFC 1779.", "correct_text": "RFC 1781 is a technical specification for \"User Friendly Naming\"\nwhich relies on particular syntaxes described in RFC 1779.", "notes": "", "submit_date": "2004-10-15", "submitter_name": "Marshall Price", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "265", "doc-id": "RFC3492", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4", "orig_text": "   where maxint is the greatest integer for which maxint + 1 cannot be\n   represented.", "correct_text": "   where maxint is the maximum value of an integer variable.\n", "notes": "", "submit_date": "2003-04-28", "submitter_name": "Adam Costello", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "266", "doc-id": "RFC3490", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   The ToUnicode output never contains more code points than its\n   input.\n\nThis is not true; I have constructed a counterexample.  ", "correct_text": "    The Punycode decoder can never output more code points than it\n    inputs, but Nameprep can, and therefore ToUnicode can.\n", "notes": "", "submit_date": "2003-04-28", "submitter_name": "Adam Costello", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "267", "doc-id": "RFC3473", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "OLD:", "orig_text": "    [RFC2402]        Kent, S. and R. Atkinson, \"IP Authentication\n                     Header\", RFC 2401, November 1998.\n\n    [RFC2406]        Kent, S. and R. Atkinson, \"IP Encapsulating\n                     Security Payload (ESP)\", RFC 2401, November 1998.", "correct_text": "    [RFC2402]        Kent, S. and R. Atkinson, \"IP Authentication\n                     Header\", RFC 2402, November 1998.\n\n    [RFC2406]        Kent, S. and R. Atkinson, \"IP Encapsulating\n                     Security Payload (ESP)\", RFC 2406, November 1998.\n", "notes": "", "submit_date": "2003-02-16", "submitter_name": "Steve Conner", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "268", "doc-id": "RFC3470", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.13", "orig_text": "   \"numeric entity reference\"  ", "correct_text": "   \"numeric character reference\"", "notes": "Section 4.16:\n    \"In XML instances all white space is considered significant and\n   is by default visible to processing applications.\"\nShould be:\n    \"In XML instances, white space is often significant and visible\n   to processing applications.\"\n\n", "submit_date": "2003-04-25", "submitter_name": "Larry Masinter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "269", "doc-id": "RFC3461", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   A reference is made to RFC 1123, section 2.3.3, which does not exist. \n \n   The correct section in RFC 1123 is 5.3.3.\n", "correct_text": "", "notes": "", "submit_date": "2003-03-31", "submitter_name": "Mieke Van de Kamp", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "270", "doc-id": "RFC3448", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "If the sender does not receive a feedback report for two round\r\ntrip times, it cuts its sending rate in half.", "correct_text": "If the sender does not receive a feedback report for four round\r\ntrip times, it cuts its sending rate in half.", "notes": "Nofeedback timeout: Correct an inconsistency in the document.\r\n\r\n(collected by Sally Floyd, 2004-06-11)", "submit_date": "2003-03-04", "submitter_name": "Joerg Widmer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7019", "doc-id": "RFC3986", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "B", "orig_text": "^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?", "correct_text": "^(([^:/?#]+):#)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?", "notes": "Added the missing '#\" delimiter.\n --VERIFIER NOTES-- \nIn rejecting this Errata report I note that the reported error is not an error, but a deliberate decision of the authors and working group. The change, therefore, if it is to be applied needs to be achieved through a consensus document and definitely not via an errata report.", "submit_date": "2022-07-10", "submitter_name": "Tim McSweeney", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-07-12 10:42:42"}, {"errata_id": "278", "doc-id": "RFC3414", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.1", "orig_text": "   4) Prepend K2 to the result of the step 4 and calculate MD5 digest\n      over it according to [RFC1321].  Take the first 12 octets of the\n      final digest - this is Message Authentication Code (MAC).", "correct_text": "   4) Prepend K2 to the result of the step 3 and calculate MD5 digest\n      over it according to [RFC1321].  Take the first 12 octets of the\n      final digest - this is Message Authentication Code (MAC).", "notes": "In Section 7.3.1:\n    4) Prepend K2 to the result of the step 4 and calculate SHA digest\n      over it according to [SHA-NIST].  Take the first 12 octets of\n      the final digest - this is Message Authentication Code (MAC).\nShould be:\n    4) Prepend K2 to the result of the step 3 and calculate SHA digest\n      over it according to [SHA-NIST].  Take the first 12 octets of\n      the final digest - this is Message Authentication Code (MAC).\n\n", "submit_date": "2003-10-28", "submitter_name": "Piotr Bandur", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "279", "doc-id": "RFC3413", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.1.1", "orig_text": "   (2) If appropriate outgoing management target information cannot be\n       found, the proxy forwarder increments the snmpProxyDrops\n       counter [RFC1907], and then calls the Dispatcher using the\n       returnResponsePdu abstract service interface.", "correct_text": "   (2) If appropriate outgoing management target information cannot be\n       found, the proxy forwarder increments the snmpProxyDrops\n       counter [RFC3418], and then calls the Dispatcher using the\n       returnResponsePdu abstract service interface. ", "notes": "In Sections 3.2 and 4.1.2: \n    by [RFC1905]\nShould be:\n    by [RFC3416]\n\n", "submit_date": "2002-12-27", "submitter_name": "Guan Hai Bing", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "280", "doc-id": "RFC3413", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Section 4.2.1, page 50, in DESCRIPTION clause of snmpNotifyFilterTable: ", "orig_text": "       A more complete discussion of notification filtering \n       can be found in section 6. of [SNMP-APPL].\" ", "correct_text": "       A more complete discussion of notification filtering \n       can be found in section 6. of RFC3413.\" ", "notes": "\nAdditionally, page 52, in DESCRIPTION clause of snmpNotifyFilterType: \n\n        filter.  A more detailed discussion of the use of this \n       object can be found in section 6. of [SNMP-APPL].\" \n\nIt should be: \n\n        filter.  A more detailed discussion of the use of this \n       object can be found in section 6. of RFC3413.\" \n\n\n", "submit_date": "2004-02-20", "submitter_name": "Eduardo Cardona", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "281", "doc-id": "RFC3410", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.2", "orig_text": "  [15] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser,\n       \"Coexistence between Version 1 and Version 2 of the Internet-\n       Standard Network Management Framework\", RFC 2576, January 1996.", "correct_text": "  [15] Case, J., McCloghrie, K., Rose, M. and S. Waldbusser,\n       \"Coexistence between Version 1 and Version 2 of the Internet-\n       Standard Network Management Framework\", RFC 1908, January 1996.\n", "notes": "", "submit_date": "2003-01-29", "submitter_name": "C. M. Heard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "282", "doc-id": "RFC3404", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5", "orig_text": "   See the\r\n   Additional Information Processing section of RFC 3404 for more\r\n   information on NAPTR records and the Additional Information section\r\n   of a DNS response packet.", "correct_text": "   See the\r\n   Additional Information Processing section of RFC 3403 for more\r\n   information on NAPTR records and the Additional Information section\r\n   of a DNS response packet.", "notes": "wrong reference to RFC 3404 (must be RFC 3403)", "submit_date": "2006-10-05", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "283", "doc-id": "RFC3401", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "Part Three: The Domain Name System (DNS) Database\" (RFC 3402) [1]", "correct_text": "Part Three: The Domain Name System (DNS) Database\" (RFC 3403) [2]\r\n", "notes": "", "submit_date": "2005-12-29", "submitter_name": "Olaf M. Kolkman", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "284", "doc-id": "RFC3394", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "     P[i]          The ith plaintext key data block\r\n     C[i]          The ith ciphertext data block\r\n     A             The 64-bit integrity check register\r\n     R[i]          An array of 64-bit registers where\r\n                      i = 0, 1, 2, ..., n\r\n     A[t], R[i][t] The contents of registers A and R[i] after encryption\r\n                      step t.", "correct_text": "     P[i]          The ith (64-bit) plaintext key data block\r\n                   where i = 1, 2, ..., n\r\n     C[i]          The ith (64-bit) ciphertext data block\r\n                   where i = 0, 1, 2, ..., n\r\n     A             The 64-bit integrity check register\r\n     R[i]          An array of 64-bit registers where\r\n                   i = 1, 2, ..., n\r\n    A[t], R[t][i]  The contents of registers A and R[i] after encryption\r\n                   step t.", "notes": "", "submit_date": "2005-02-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "285", "doc-id": "RFC3389", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "In section 5.1, it says:\n\n         m=audio 49230 RTP/AVP 101 102\n         a=rtpmap:101 G7221/16000\n         a=fmtp:121 bitrate=24000\n         a=rtpmap:102 CN/16000", "correct_text": "         m=audio 49230 RTP/AVP 101 102\n         a=rtpmap:101 G7221/16000\n         a=fmtp:101 bitrate=24000\n                ^^^\n         a=rtpmap:102 CN/16000\n", "notes": "", "submit_date": "2004-01-22", "submitter_name": "Magnus Westerlund", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2337", "doc-id": "RFC5777", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.10", "orig_text": "The Absolute-End-Fractional-Seconds AVP (AVP Code 569) is of type\r\nUnsigned32.  The value specifies the fractional seconds that are\r\nadded to Absolute-End-Time value in order to determine when the time\r\nwindow ends.  If this AVP is absent from the Time-Of-Day-Condition\r\nAVP, then the fractional seconds are assumed to be zero.", "correct_text": "The Absolute-Start-Fractional-Seconds AVP (AVP Code 569) is of type\r\nUnsigned32.  The value specifies the fractional seconds that are\r\nadded to Absolute-End-Time value in order to determine when the time\r\nwindow ends.  The Absolute-End-Fractional-Seconds represent \r\na 32-bit fraction field giving a precision of about 232 picoseconds \r\n( 1/((2^32)-1)) seconds ).  If this AVP is absent from the Time-Of-Day-\r\nCondition AVP, then the fractional seconds are assumed to be zero.\r\nSee the Network Time Protocol [RFC 1305] for more precision.", "notes": "The AVP description lacked a explanation about what a fractional second is.", "submit_date": "2010-07-19", "submitter_name": "Francois Bard", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "306", "doc-id": "RFC3280", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   [X.660]     ITU-T Recommendation X.660 Information Technology - ASN.1\n               encoding rules: Specification of Basic Encoding Rules\n               (BER), Canonical Encoding Rules (CER) and Distinguished\n               Encoding Rules (DER), 1997.\n\n   [X.690]     ITU-T Recommendation X.690 Information Technology - Open\n               Systems Interconnection - Procedures for the operation of\n               OSI Registration Authorities: General procedures, 1992.", "correct_text": "   [X.660]     ITU-T Recommendation X.660 Information Technology - Open\n               Systems Interconnection - Procedures for the operation of\n               OSI Registration Authorities: General procedures, 1992.\n\n   [X.690]     ITU-T Recommendation X.690 Information Technology - ASN.1\n               encoding rules: Specification of Basic Encoding Rules\n               (BER), Canonical Encoding Rules (CER) and Distinguished\n               Encoding Rules (DER), 1997.", "notes": "", "submit_date": "2005-08-01", "submitter_name": "Olivier Dierick", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "286", "doc-id": "RFC3385", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   ///////////////////////////////////////////////////////////////////////\n   // File:  CRC32_D1.v\n   // Date:  Mon Nov 18 18:51:31 2002\n   //\n   // Copyright (C) 1999 Easics NV.\n   // This source file may be used and distributed without restriction\n   // provided that this copyright statement is not removed from the file\n   // and that any derivative work contains the original copyright notice\n   // and the associated disclaimer.\n   //\n   // THIS SOURCE FILE IS PROVIDED \"AS IS\" AND WITHOUT ANY EXPRESS\n   // OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED\n   // WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.\n   //\n   // Purpose: Verilog module containing a synthesizable CRC function\n   //   * polynomial: p(0 to 32) := \"100000101111011000111011011110001\"\n   //   * data width: 1\n   //\n   // Info: jand@easics.be (Jan Decaluwe)\n   //       http://www.easics.com\n   ///////////////////////////////////////////////////////////////////////\n\n\n   module CRC32_D1;\n \n     // polynomial: p(0 to 32) := \"100000101111011000111011011110001\"\n     // data width: 1\n     function [31:0] nextCRC32_D1;\n\n       input Data;\n       input [31:0] CRC;\n \n       reg [0:0] D;\n       reg [31:0] C;\n       reg [31:0] NewCRC;\n\n     begin\n\n       D[0] = Data;\n       C = CRC;\n\n       NewCRC[0] = D[0] ^ C[31];\n       NewCRC[1] = C[0];\n       NewCRC[2] = C[1];\n       NewCRC[3] = C[2];\n       NewCRC[4] = C[3];\n       NewCRC[5] = C[4];\n       NewCRC[6] = D[0] ^ C[5] ^ C[31];\n       NewCRC[7] = C[6];\n       NewCRC[8] = D[0] ^ C[7] ^ C[31];\n       NewCRC[9] = D[0] ^ C[8] ^ C[31];\n       NewCRC[10] = D[0] ^ C[9] ^ C[31];\n       NewCRC[11] = D[0] ^ C[10] ^ C[31];\n       NewCRC[12] = C[11];\n       NewCRC[13] = D[0] ^ C[12] ^ C[31];\n       NewCRC[14] = D[0] ^ C[13] ^ C[31];\n       NewCRC[15] = C[14];\n       NewCRC[16] = C[15];\n       NewCRC[17] = C[16];\n       NewCRC[18] = D[0] ^ C[17] ^ C[31];\n       NewCRC[19] = D[0] ^ C[18] ^ C[31];\n       NewCRC[20] = D[0] ^ C[19] ^ C[31];\n       NewCRC[21] = C[20];\n       NewCRC[22] = D[0] ^ C[21] ^ C[31];\n       NewCRC[23] = D[0] ^ C[22] ^ C[31];\n       NewCRC[24] = C[23];\n       NewCRC[25] = D[0] ^ C[24] ^ C[31];\n       NewCRC[26] = D[0] ^ C[25] ^ C[31];\n       NewCRC[27] = D[0] ^ C[26] ^ C[31];\n       NewCRC[28] = D[0] ^ C[27] ^ C[31];\n       NewCRC[29] = C[28];\n       NewCRC[30] = C[29];\n       NewCRC[31] = C[30];\n\n       nextCRC32_D1 = NewCRC;\n\n     end\n\n     endfunction\n\n   endmodule\n", "correct_text": "", "notes": "", "submit_date": "2002-11-18", "submitter_name": "Vicente Cavanna", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "287", "doc-id": "RFC3377", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "This document updates RFCs 2251-2256, 2829 and 2830.\n", "submit_date": "2002-09-26", "submitter_name": "Jeff Hodges", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "288", "doc-id": "RFC3372", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "References to Figures 3, 5, and 7 should refer to Figures 2, 3, and 4, respectively.\n", "submit_date": "2002-09-22", "submitter_name": "Feng Zhang", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "289", "doc-id": "RFC3370", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   [CMS]       Housley, R., \"Cryptographic Message Syntax\", RFC 3269,\n               August 2002.", "correct_text": "   [CMS]       Housley, R., \"Cryptographic Message Syntax\", RFC 3369,\n               August 2002.\n", "notes": "", "submit_date": "2003-05-13", "submitter_name": "Henning Schulzrinne", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "290", "doc-id": "RFC3369", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.2", "orig_text": "    AttributeCertificateVersion1\n        { iso(1) member-body(2) us(840) rsadsi(113549)\n          pkcs(1) pkcs-9(9) smime(16) modules(0) v1AttrCert(15) }\n\n    DEFINITIONS EXPLICIT TAGS ::=\n    BEGIN", "correct_text": "", "notes": "The tagging should be EXPLICIT instead of IMPLICIT.\n\n\n", "submit_date": "2004-03-12", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "291", "doc-id": "RFC3369", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Several object identifiers (OIDs) have been omitted from the ASN.1 module in section 12.1; however, these OIDs are fully discussed in the body of the document. On page 46 of RFC 3369, the following object identifiers need to be inserted before the end o", "orig_text": "       -- Content Type Object Identifiers\n \n       id-ct-contentInfo OBJECT IDENTIFIER ::= { iso(1) member-body(2)\n          us(840) rsadsi(113549) pkcs(1) pkcs9(9) smime(16) ct(1) 6 }\n \n       id-data OBJECT IDENTIFIER ::= { iso(1) member-body(2)\n          us(840) rsadsi(113549) pkcs(1) pkcs7(7) 1 }\n \n       id-signedData OBJECT IDENTIFIER ::= { iso(1) member-body(2)\n          us(840) rsadsi(113549) pkcs(1) pkcs7(7) 2 }\n \n       id-envelopedData OBJECT IDENTIFIER ::= { iso(1) member-body(2)\n          us(840) rsadsi(113549) pkcs(1) pkcs7(7) 3 }\n \n       id-digestedData OBJECT IDENTIFIER ::= { iso(1) member-body(2)\n          us(840) rsadsi(113549) pkcs(1) pkcs7(7) 5 }\n \n       id-encryptedData OBJECT IDENTIFIER ::= { iso(1) member-body(2)\n          us(840) rsadsi(113549) pkcs(1) pkcs7(7) 6 }\n \n       id-ct-authData OBJECT IDENTIFIER ::= { iso(1) member-body(2)\n          us(840) rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) \n          ct(1) 2 }\n", "correct_text": "", "notes": "", "submit_date": "2003-03-03", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "292", "doc-id": "RFC3369", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13", "orig_text": "   [CMSALG]    Housley, R., \"Cryptographic Message Syntax (CMS)\n               Algorithms\", RFC 3269, August 2002.", "correct_text": "   [CMSALG]    Housley, R., \"Cryptographic Message Syntax (CMS)\n               Algorithms\", RFC 3370, August 2002.\n", "notes": "", "submit_date": "2003-01-23", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "293", "doc-id": "RFC3339", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   The presence of optional punctuation would violate this characteristic.", "correct_text": "   If the format allows optional punctuation or white space then this \n   characteristic can be violated.", "notes": "In Appendix A, it says:\n Time:\n\n   time-hour         = 2DIGIT ; 00-24\n   time-minute       = 2DIGIT ; 00-59\n   time-second       = 2DIGIT ; 00-58, 00-59, 00-60 based on\n                              ; leap-second rules\n   time-fraction     = (\",\" / \".\") 1*DIGIT\n   time-numoffset    = (\"+\" / \"-\") time-hour [[\":\"] time-minute]\n   time-zone         = \"Z\" / time-numoffset\n\n   timeopt-hour      = \"-\" / (time-hour [\":\"])\n   timeopt-minute    = \"-\" / (time-minute [\":\"])\n\n   timespec-hour     = time-hour [[\":\"] time-minute [[\":\"] time-second]]\n   timespec-minute   = timeopt-hour time-minute [[\":\"] time-second]\n   timespec-second   = \"-\" timeopt-minute time-second\n   timespec-base     = timespec-hour / timespec-minute / timespec-second\n\n   time              = timespec-base [time-fraction] [time-zone]\n\n   iso-date-time     = date \"T\" time\nIt should say:\n Time:\n\n   time-hour         = 2DIGIT ; 00-23\n   time-minute       = 2DIGIT ; 00-59\n   time-second       = 2DIGIT ; 00-58, 00-59, 00-60 based on\n                              ; leap-second rules\n   time-fraction     = (\",\" / \".\") 1*DIGIT\n   time-numoffset    = (\"+\" / \"-\") time-hour [[\":\"] time-minute]\n   time-zone         = \"Z\" / time-numoffset\n\n   timeopt-hour      = \"-\" / (time-hour [\":\"])\n   timeopt-minute    = \"-\" / (time-minute [\":\"])\n\n   timespec-hour     = time-hour [[\":\"] time-minute [[\":\"] time-second]]\n   timespec-minute   = timeopt-hour time-minute [[\":\"] time-second]\n   timespec-second   = \"-\" timeopt-minute time-second\n   timespec-base     = timespec-hour / timespec-minute / timespec-second\n                       / timespec-midnight\n   timespec-midnight = \"24\" [[\":\"] \"00\" [[\":\"] \"00\"]]\n\n   time              = timespec-base [time-fraction] [time-zone]\n\n   iso-date-time     = date \"T\" time\n\nIn the third paragraph of Appendix A, it states \"ISO 8601 is not clear on \nwhether an hour of 24 is permissible only if minutes and seconds are 0. \nThis assumes that an hour of 24 is permissible in any context.\"\n\nThis is clarified in the 2000 edition which says:\n    5.3 Time of the day\n\n   The representation of the hour by [24] is only allowed to indicate\n   midnight, see 5.3.2.\nThat would result in the following ABNF change:\n  time-hour         = 2DIGIT ; 00-23\nand additions:\n  timespec-midnight = \"24\" [[\":\"] \"00\" [[\":\"] \"00\"]]\n  timespec-base     =/ timespec-midnight\n", "submit_date": "2005-05-26", "submitter_name": "Tony Finch", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "294", "doc-id": "RFC3315", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "20.1.2", "orig_text": "   The relay agent copies the source address from the IP datagram in\r\n   which the message was received from the client into the peer-address\r\n   field in the Relay-forward message and sets the hop-count field to\r\n   the value of the hop-count field in the received message incremented\r\n   by 1.", "correct_text": "   The relay agent copies the source address from the IP datagram in\r\n   which the message was received from the relay agent into the peer-address\r\n   field in the Relay-forward message and sets the hop-count field to\r\n   the value of the hop-count field in the received message incremented\r\n   by 1.\r\n", "notes": " ", "submit_date": "2006-06-29", "submitter_name": "Hideshi Enokihara", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "359", "doc-id": "RFC2927", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   Content-Type: text/directory; profile=\"schema-ldap-0\";charset=\"utf-8\"\n   Content-Transfer-Encoding: Quoted-Printable\n   ldapSchemas: ( 1.2.3.4 NAME 'bogus schema' CLASSES ( top $ thing ) =\n   ATTRIBUTES ( objectClass $ name ) SYNTAXES ( =\n   1.3.6.1.4.1.1466.115.121.1.38 $ 1.3.6.1.4.1.1466.115.121.1.15 ) )", "correct_text": "   Content-Type: text/directory; profile=\"schema-ldap-0\";charset=\"utf-8\"\n   Content-Transfer-Encoding: Quoted-Printable\n   \n   ldapSchemas: ( 1.2.3.4 NAME 'bogus schema' CLASSES ( top $ thing ) =\n   ATTRIBUTES ( objectClass $ name ) SYNTAXES ( =\n   1.3.6.1.4.1.1466.115.121.1.38 $ 1.3.6.1.4.1.1466.115.121.1.15 ) )\n", "notes": "", "submit_date": "2002-01-04", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "360", "doc-id": "RFC2925", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   \"Generated at the completion of a ping test when the\n   corresponding pingCtlTrapGeneration object is set to\n   testCompletion(4).\"", "correct_text": "   \"Generated at the completion of a ping test when the\n   corresponding pingCtlTrapGeneration object is set to\n   testCompletion(2).\"\n", "notes": "", "submit_date": "2002-03-26", "submitter_name": "Randy Presuhn", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1059", "doc-id": "RFC1810", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the References, it says:", "orig_text": "   [7] Touch, J., Optimized MD5 software, <ftp://ftp.isi.edu/pub/hpcc-\r\n       papers/touch/md5-opt.tar>.\r\n", "correct_text": "   [7] Touch, J., Optimized MD5 software, <ftp://ftp.isi.edu/pub/hpcc-\r\n       papers/touch/md5-opt.tar.Z>.\r\n", "notes": "I noticed a broken link. \r\n(the final \".Z\" is missing)", "submit_date": "2007-08-28", "submitter_name": "Denis Duault", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "295", "doc-id": "RFC3315", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "18.2.7", "orig_text": "   After all the addresses have been processed, the server generates a\r\n   Reply message and includes a Status Code option with the value\r\n   Success, a Server Identifier option with the server's DUID, and a\r\n   Client Identifier option with the client's DUID.  For each IA in the\r\n   Decline message for which the server has no binding information, the\r\n   server adds an IA option using the IAID from the Release message and\r\n   includes a Status Code option with the value NoBinding in the IA\r\n   option.  No other options are included in the IA option.", "correct_text": "   After all the addresses have been processed, the server generates a\r\n   Reply message and includes a Status Code option with the value\r\n   Success, a Server Identifier option with the server's DUID, and a\r\n   Client Identifier option with the client's DUID.  For each IA in the\r\n   Decline message for which the server has no binding information, the\r\n   server adds an IA option using the IAID from the Decline message and\r\n   includes a Status Code option with the value NoBinding in the IA\r\n   option.  No other options are included in the IA option.\r\n", "notes": "", "submit_date": "2006-06-29", "submitter_name": "Hideshi Enokihara", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "296", "doc-id": "RFC3314", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "     At that meeting, a decision was made to\r\n     form a design team to write a document offering advice\r\n     from the IPv6 WG to the 3GPP community, regarding\r\n     their use of IPv6.", "correct_text": "     At that meeting, a decision was made\r\n     form a design team to write a document offering advice\r\n     from the IPv6 WG to the 3GPP community, regarding\r\n     their use of IPv6.\r\n", "notes": "\n --VERIFIER NOTES-- \nThe original text is grammatically correct.", "submit_date": "2005-03-28", "submitter_name": "Shiang-Ming Huang", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "297", "doc-id": "RFC3305", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.1", "orig_text": "*  'issn' defined by \"Using The ISSN as URN within an ISSN-URN\r\n         Namespace\" (RFC 3043) [4]", "correct_text": "*  'issn' defined by \"Using The ISSN as URN within an ISSN-URN\r\n         Namespace\" (RFC 3044) [4]\r\n", "notes": "", "submit_date": "2005-10-10", "submitter_name": "Tom Petch", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "298", "doc-id": "RFC3300", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   --------   Internet Official Protocol Standards                3003 1*", "correct_text": "   --------   Internet Official Protocol Standards                3300 1*", "notes": "", "submit_date": "2002-11-15", "submitter_name": "Siegfried Schmitt", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "299", "doc-id": "RFC3297", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "     Date: Wed,20 Sep 1995 00:18:00 (EDT)-0400", "correct_text": "       Date: Wed,20 Sep 1995 00:18:00 -0400 (EDT)", "notes": "\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:19:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:19:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:21:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:21:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:22:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:22:00 -0400 (EDT)\n\n\nIn section 8.2:\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:19:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:19:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:22:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:22:00 -0400 (EDT)\n\n\nIn section 8.3:\n\nOLD:\n\n        Date: Wed, 20 Sep 1995 00:18:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed, 20 Sep 1995 00:18:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:19:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:19:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:21:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:21:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:22:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:22:00 -0400 (EDT)\n\n\nIn section 8.4:\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:18:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:18:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:19:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:19:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:21:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:21:00 -0400 (EDT)\n\n\nOLD:\n\n        Date: Wed,20 Sep 1995 00:22:00 (EDT)-0400\n\nNEW:\n\n        Date: Wed,20 Sep 1995 00:22:00 -0400 (EDT)\n\n", "submit_date": "2004-05-06", "submitter_name": "Graham Klyne", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "307", "doc-id": "RFC3279", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "   This document specifies algorithm identifiers and ASN.1 [X.660]\n   encoding formats for digital signatures and subject public keys used\n   in the Internet X.509 Public Key Infrastructure (PKI).", "correct_text": "   This document specifies algorithm identifiers and ASN.1 [X.690]\n   encoding formats for digital signatures and subject public keys used\n   in the Internet X.509 Public Key Infrastructure (PKI).", "notes": "\nIn Section 4, it says:\n    [X.660]        ITU-T Recommendation X.660 Information Technology -\n                  ASN.1 encoding rules: Specification of Basic Encoding\n                  Rules (BER), Canonical Encoding Rules (CER) and\n                  Distinguished Encoding Rules (DER), 1997.\nIt should say:\n    [X.690]        ITU-T Recommendation X.660 Information Technology -\n                  ASN.1 encoding rules: Specification of Basic Encoding\n                  Rules (BER), Canonical Encoding Rules (CER) and\n                  Distinguished Encoding Rules (DER), 1997.\n\n\n\n", "submit_date": "2005-08-01", "submitter_name": "Olivier Dierick", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "308", "doc-id": "RFC3275", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "A list of errata can be found at: http://www.w3.org/2001/10/xmldsig-errata\n", "submit_date": "2002-04-18", "submitter_name": "Joseph Reagle", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "309", "doc-id": "RFC3272", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "   The Internet evolved from the APARNET and adopted dynamic routing\n   algorithms with distributed control to determine the paths that\n   packets should take en-route to their destinations.", "correct_text": "   The Internet evolved from the ARPANET and adopted dynamic routing\n   algorithms with distributed control to determine the paths that\n   packets should take en-route to their destinations.\n", "notes": "", "submit_date": "2002-06-18", "submitter_name": "Jean-Michel Grimaldi", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "310", "doc-id": "RFC3271", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "   Internet is for everyone - but it won't be if it cannot keep up\n   with the explosive demand for its services, so we must dedicate\n   ourselves to continuing its technological evolution and development\n   of the technical standards the lie at the heart of the Internet\n   revolution.", "correct_text": "   Internet is for everyone - but it won't be if it cannot keep up\n   with the explosive demand for its services, so we must dedicate\n   ourselves to continuing its technological evolution and development\n   of the technical standards that lie at the heart of the Internet\n   revolution.\n", "notes": "", "submit_date": "2002-07-31", "submitter_name": "Robert deMallac", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5005", "doc-id": "RFC2100", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "References", "orig_text": "   [4]  Stearns, TS, _Old Possum's Book of Practical Cats_.", "correct_text": "   [4]  Eliot, TS, _Old Possum's Book of Practical Cats_.", "notes": "\"Stearns\" was T. S. Eliot's middle name.  Old Possum's Book of Practical Cats was published under the name \"T. S. Eliot\".\r\n", "submit_date": "2017-04-28", "submitter_name": "Ben Harris", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "300", "doc-id": "RFC3289", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "In the process of implementing the RFC 3289 DiffServ MIB, the following\nerrors and discrepancies were noted.\n\n1. In the diffServClfrTable description (second paragraph),\ndiffServClfrStatus should be diffServClfrStorage.  This is an\nunderstandability issue.\n\n2. The diffServClfrElementStatus description indicates that this entry\ncannot be deleted if there is a RowPointer pointing to it.  A RowPointer\nis not used to select a classifier element, but rather the\ndiffServClfrId and diffServClfrElementId index values.  Consequently,\nthe diffServClfrElementTable does not require a UsageCounter or a\nDestroyFlag.  This is an understandability issue.\n\n3. In the diffServActionSpecific description (third paragraph)\nerroneously references a meter.  This is an understandability issue.\n\n4. The diffServMinRateAbsolute description indicates that zero is a\nvalid value.  The SYNTAX range indicates (1..4294967295), but should be\n(0..4294967295).  This is an understandability issue and a MIB\nimplementation issue.\n\n5. The diffServMinRateRelative description indicates that zero is a\nvalid value and that the values are in units of 1/1000 of 1.  The SYNTAX\nrange indicates (1..4294967295), but should be (0..1000).  This is an\nunderstandability issue and a MIB implementation issue.\n\n6. The diffServMaxRateAbsolute description indicates that zero is a\nvalid value.  The SYNTAX range indicates (1..4294967295), but should be\n(0..4294967295).  This is an understandability issue and a MIB\nimplementation issue.\n\n7. The diffServMaxRateRelative description indicates that zero is a\nvalid value and that the values are in units of 1/1000 of 1.  The SYNTAX\nrange indicates (1..4294967295), but should be (0..1000).  This is an\nunderstandability issue and a MIB implementation issue.\n", "submit_date": "2002-08-08", "submitter_name": "Tom Irwin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "301", "doc-id": "RFC3289", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "1.  During implementation, there has been some confusion on the \"reuse\nof structural elements\" in section 2.2.  It is clear from the comments\nand the MIB that counters cannot be effectively reused.  What appears\nconfusing is the case when an entire (or partial) DiffServ tree used for\na specific interface ifIndex and direction is reused.  Is the DiffServ\ntree in this case just a template such that all of the data path\nelements are replicated (counters will not work properly) for another\ninterface?  This seems reasonable since other data path elements such as\nqueues and schedulers are clearly interface dependent. It is important\nto remove this ambiguity since the RowPointer usage does not prohibit\nthis \"not generally recommended\" application.  What is the intent?\n\n2. Minor update in section 3.2.2:\n     ' Differentiated Services Code Point ' to\n     ' Differentiated Services Code Point, including \"any\" '\n\n3. Figure 9b in section 3.7.2.1 is somewhat difficult at first to follow\ndue to how the multiplexing is shown in the Yellow \"Count Action\" (an\naction only has a single input).\n", "submit_date": "2002-08-27", "submitter_name": "Tom Irwin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "302", "doc-id": "RFC3281", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.6", "orig_text": "   Clearance ::= SEQUENCE {\n           policyId            [0] OBJECT IDENTIFIER,\n           classList           [1] ClassList DEFAULT {unclassified},\n           securityCategories  [2] SET OF SecurityCategory OPTIONAL\n   }", "correct_text": "   Clearance ::= SEQUENCE {\n           policyId            OBJECT IDENTIFIER,\n           classList           ClassList DEFAULT {unclassified},\n           securityCategories  SET OF SecurityCategory OPTIONAL\n   }", "notes": "The differences in tagging arose due to an unnoticed technical corrigendum (TC-2) being applied to the X.501 document during preparation of RFC 3281. The X.501 format is the correct form and will be included in a future update of RFC 3281. Implementers SHOULD modify their decoding functions to accept either format and, even if claiming RFC 3281 conformance, SHOULD output the (correct) X.501 format pending the issuing of a corrected RFC at which point the incorrect RFC 3281 format will no longer be specified.", "submit_date": "2003-03-07", "submitter_name": "Stephen Farrell", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "303", "doc-id": "RFC3281", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "             AttributeCertificateInfo ::= SEQUENCE {\n                  version              AttCertVersion  -- version is v2,", "correct_text": "             AttributeCertificateInfo ::= SEQUENCE {\n                  version              AttCertVersion,  -- version is v2,\n", "notes": "", "submit_date": "2004-08-26", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "304", "doc-id": "RFC3281", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "    The AC then contains the ciphertext inside its signed data.  The\n    EnvelopedData (id-envelopedData) ContentType is used, and the\n    content field will contain the EnvelopedData type.", "correct_text": "    Within EnvelopedData, the encapuslatedContentInfo identifies the\n    content type carried withing the ciphertext.  In this case, the \n    contentType field of encapsulatedContentInfo MUST contain\n    id-ct-attrCertEncAttrs, which has the following value:\n\n       attrCertEncAttrs OBJECT IDENTIFIER ::=\n             { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)\n\t     pkcs9(9)\n               id-smime(16) id-ct(1) 14 }\n", "notes": "\n", "submit_date": "2002-07-30", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "305", "doc-id": "RFC3280", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.3", "orig_text": "   For each distribution point (DP) in the certificate CRL distribution\r\n   points extension, for each corresponding CRL in the local CRL cache,\r\n   while ((reasons_mask is not all-reasons) and (cert_status is\r\n   UNREVOKED)) perform the following:\r\n\r\n      (a)  Update the local CRL cache by obtaining a complete CRL, a\r\n      delta CRL, or both, as required:", "correct_text": "   For each distribution point (DP) in the certificate CRL distribution\r\n   points extension, for each corresponding CRL in the local CRL cache,\r\n   while ((reasons_mask is not all-reasons) and (cert_status is\r\n   UNREVOKED)) perform the following:\r\n\r\n   (l)  Set the reasons_mask state variable to the union of\r\n        its previous value and the value of the interim_reasons_mask\r\n        state variable.\r\n\r\n      (a)  Update the local CRL cache by obtaining a complete CRL, a\r\n      delta CRL, or both, as required:\r\n", "notes": "", "submit_date": "2002-11-11", "submitter_name": "Takashi Ito", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2338", "doc-id": "RFC5245", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15.1", "orig_text": "extension-att-name    = byte-string    ;from RFC 4566\r\n", "correct_text": "extension-att-name    = token    ;from RFC 4566\r\n", "notes": "\"extension-att-name\" may contain the SP (0x20) as defined for \"byte-string\" in  RFC 4566.\r\nThe 'SP' character cannot be allowed within \"extension-att-name\" as it is also used as delimiter between \"extension-att-name\" and \"extension-att-value\".", "submit_date": "2010-07-20", "submitter_name": "Reif, Frank", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2625", "doc-id": "RFC4234", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix B.2", "orig_text": "   Externally, data are represented as \"network virtual ASCII\" (namely,\r\n   7-bit US-ASCII in an 8-bit field), with the high (8th) bit set to\r\n   zero.", "correct_text": "   Externally, data are represented as \"network virtual ASCII\" (namely,\r\n   7-bit US-ASCII in an 8-bit field, with the high (8th) bit set to\r\n   zero).", "notes": "This change should make it clear (as in RFC 2234) that the phrase,\r\n\"with the high (8th) bit set to zero\" is an intrinsic part of the\r\nfull definition of \"network virtual ASCII\", and not the specification\r\nof an exception -- or an additional manipulation for the purpose of\r\nABNF -- to \"network virtual ASCII\".", "submit_date": "2005-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "320", "doc-id": "RFC3220", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "\r\nIn Section 3.6.1.2 (after current page 41), insert the following text:", "orig_text": "   The Lifetime field is chosen as follows:\r\n\r\n    -  If the mobile node is registering with a foreign agent, the\r\n       Lifetime SHOULD NOT exceed the value in the Registration Lifetime\r\n       field of the Agent Advertisement message received from the\r\n       foreign agent.  When the method by which the care-of address is\r\n       learned does not include a Lifetime, the default ICMP Router\r\n       Advertisement Lifetime (1800 seconds) MAY be used.\r\n\r\n    -  The mobile node MAY ask a home agent to delete a particular\r\n       mobility binding, by sending a Registration Request with the\r\n       care-of address for this binding, with the Lifetime field set to\r\n       zero (Section 3.8.2).\r\n\r\n    -  Similarly, a Lifetime of zero is used when the mobile node\r\n       deregisters all care-of addresses, such as upon returning home.\r\n\r\n   The Home Address field MUST be set to the mobile node's home address,\r\n   if this information is known.  Otherwise, the Home Address MUST be\r\n   set to zeroes.\r\n\r\n   The Home Agent field MUST be set to the address of the mobile node's\r\n   home agent, if the mobile node knows this address.  Otherwise, the\r\n   mobile node MAY use dynamic home agent address resolution to learn\r\n   the address of its home agent.  In this case, the mobile node MUST\r\n   set the Home Agent field to the subnet-directed broadcast address\r\n   of the mobile node's home network.  Each home agent receiving such\r\n   a Registration Request with a broadcast destination address MUST\r\n   reject the mobile node's registration and SHOULD return a rejection\r\n   Registration Reply indicating its unicast IP address for use by the\r\n   mobile node in a future registration attempt.\r\n\r\n   The Care-of Address field MUST be set to the value of the particular\r\n   care-of address that the mobile node wishes to (de)register.  In the\r\n   special case in which a mobile node wishes to deregister all care-of\r\n   addresses, it MUST set this field to its home address.\r\n\r\n   The mobile node chooses the Identification field in accordance with\r\n   the style of replay protection it uses with its home agent.  This is\r\n   part of the mobility security association the mobile node shares with\r\n   its home agent.  See Section 5.7 for the method by which the mobile\r\n   node computes the Identification field.\r\n\r\n\r\n3.6.1.3. Extensions\r\n\r\n   This section describes the ordering of any mandatory and any optional\r\n   Extensions that a mobile node appends to a Registration Request.\r\n   This following ordering MUST be followed:", "correct_text": "", "notes": "\n --VERIFIER NOTES-- \nRFC 3220 has been obsoleted by RFC 3344.   ", "submit_date": "2002-04-23", "submitter_name": "\"Charles E. Perkins\"", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "321", "doc-id": "RFC3220", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.7", "orig_text": "   Whatever method is used, the low-order 32 bits of the Identification\r\n   MUST be copied unchanged from the Registration Request to the Reply.\r\n   The foreign agent uses those bits (and the mobile node's home\r\n   address) to match Registration Requests with corresponding replies.\r\n   of any Registration Reply are identical to the bits it sent in the\r\n   Registration Request.", "correct_text": "   Whatever method is used, the low-order 32 bits of the Identification\r\n   MUST be copied unchanged from the Registration Request to the Reply.\r\n   The foreign agent uses those bits (and the mobile node's home\r\n   address) to match Registration Requests with corresponding replies.\r\n   The mobile node MUST verify that the low-order 32 bits of any Registration \r\n   Reply are identical to the bits it sent in the Registration Request.", "notes": "\n --VERIFIER NOTES-- \nRFC 3220 has been obsoleted by RFC 3344.   ", "submit_date": "2002-04-23", "submitter_name": "\"Charles E. Perkins\"", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "322", "doc-id": "RFC3219", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.3.1.1", "orig_text": "   -  If the LS is configured to use the MultiExitDisc attribute to\n      break ties, and the candidate routes differ in the value of the\n      MultiExitDisc attribute, then select the route that has the\n      lowest value of MultiExitDisc, else\n   -  Select the route that was advertised by the external LS that\n      has the lowest TRIP Identifier.", "correct_text": "   -  If the LS is configured to use the MultiExitDisc attribute to\n      break ties, and the candidate routes differ in the value of the\n      MultiExitDisc attribute, then select the route that has the\n      highest value of MultiExitDisc, else\n   -  Select the route that was advertised by the external LS that\n      has the lowest ITAD number.\n", "notes": "", "submit_date": "2002-09-06", "submitter_name": "Jonathan Rosenberg", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "376", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "   MAIL (or SEND, SOML, or SAML) MUST NOT be\r\n   sent if a mail transaction is already open, i.e., it should be sent\r\n   only if no mail transaction had been started in the session, or it\r\n   the previous one successfully concluded with a successful DATA  ^^ \r\n   command, or if the previous one was aborted with a RSET.", "correct_text": "   MAIL (or SEND, SOML, or SAML) MUST NOT be\r\n   sent if a mail transaction is already open, i.e., it should be sent\r\n   only if no mail transaction had been started in the session, or if\r\n   the previous one successfully concluded with a successful DATA\r\n   command, or if the previous one was aborted with a RSET.", "notes": "", "submit_date": "2004-03-23", "submitter_name": "Joel Woods", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "377", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "   Two types of information is used to rank the host addresses: multiple\r\n   MX records, and multihomed hosts.", "correct_text": "   Two types of information are used to rank the host addresses: multiple\r\n   MX records, and multihomed hosts.", "notes": "The verb in that sentence should be \"are\" not \"is\".\r\n", "submit_date": "2002-10-17", "submitter_name": "Richard O. Hammer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "378", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7", "orig_text": "   In general, the availability of Mail eXchanger records in the domain\n   name system [22, 27] makes the use of explicit source routes in the\n   Internet mail system unnecessary.  Many historical problems with\n   their interpretation have made their use undesirable.", "correct_text": "   In general, the availability of Mail eXchanger records in the domain\n   name system [22, 27] makes the use of explicit source routes in the\n   Internet mail system unnecessary.  Many historical problems with the \n   interpretation of explicit source routes have made their use undesirable.", "notes": "", "submit_date": "2002-10-03", "submitter_name": "Richard O. Hammer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "379", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5.5", "orig_text": "   All other types of messages (i.e., any message which is not required\r\n   by a standards-track RFC to have a null reverse-path) SHOULD be sent\r\n   with with a valid, non-null reverse-path.", "correct_text": "   All other types of messages (i.e., any message which is not required\r\n   by a standards-track RFC to have a null reverse-path) SHOULD be sent\r\n   with a valid, non-null reverse-path.", "notes": "", "submit_date": "2004-03-31", "submitter_name": "Joel Woods", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "380", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "For a more complete collection of revisions, please see \r\ndraft-klensin-rfc2821bis-00.txt and the mailing list discussions.\r\n\r\nThe mailing list information is:\r\n\r\nList-Archive: <http://www.imc.org/ietf-smtp/mail-archive/>\r\nList-ID: <ietf-smtp.imc.org>\r\nList-Subscribe: <mailto:ietf-smtp-request@imc.org?body=subscribe>\r\n", "correct_text": "", "notes": "", "submit_date": "2005-09-10", "submitter_name": "John C Klensin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "381", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7", "orig_text": "and subsequent distribution.  SMTP, as specified here, is not ideally\r\nsuited for this role, and work is underway on standardized mail\r\nsubmission protocols that might eventually supercede the current practices.  \r\n                                           ^^^^^^^^^", "correct_text": "and subsequent distribution.  SMTP, as specified here, is not ideally\r\nsuited for this role, and work is underway on standardized mail\r\nsubmission protocols that might eventually supersede the current practices.  ", "notes": "", "submit_date": "2004-01-12", "submitter_name": "Vincent Lefevre", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8099", "doc-id": "RFC7692", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.2.3.3", "orig_text": "The first 2 octets (0xc1 0x0b)\r\nare the WebSocket frame header (FIN=1, RSV1=1, RSV2=0, RSV3=0,\r\nopcode=text, MASK=0, Payload length=7).", "correct_text": "The first 2 octets (0xc1 0x0b)\r\nare the WebSocket frame header (FIN=1, RSV1=1, RSV2=0, RSV3=0,\r\nopcode=text, MASK=0, Payload length=11).", "notes": "The example frame has a payload length of 11, not 7.", "submit_date": "2024-09-11", "submitter_name": "Amichai Rothman", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "323", "doc-id": "RFC3208", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   Options:\n\n      This field encodes binary indications of the presence and\n      significance of any options.  It also directly encodes some\n      options.\n\n      bit 0 set => One or more Option Extensions are present\n\n      bit 1 set => One or more Options are network-significant\n\n         Note that this bit is clear when OPT_FRAGMENT and/or\n         OPT_JOIN are the only options present.\n\n      bit 6 set => Packet is a parity packet for a transmission\n\t group\n      of variable sized packets (OPT_VAR_PKTLEN).  Only present\n\t when\n      OPT_PARITY is also present.\n\n      bit 7 set => Packet is a parity packet (OPT_PARITY)\n\n      Bits are numbered here from left (0 = MSB) to right (7 =\n\t LSB).\n\n      All the other options (option extensions) are encoded in\n      extensions to the PGM header.", "correct_text": "   Options:\n\n      This field encodes binary indications of the presence and\n      significance of any options.  It also directly encodes some\n      options.\n\n      bit 7 set => One or more Option Extensions are present\n\n      bit 6 set => One or more Options are network-significant\n\n         Note that this bit is clear when OPT_FRAGMENT and/or\n         OPT_JOIN are the only options present.\n\n      bit 1 set => Packet is a parity packet for a transmission\n\t group\n      of variable sized packets (OPT_VAR_PKTLEN).  Only present\n\t when\n      OPT_PARITY is also present.\n\n      bit 0 set => Packet is a parity packet (OPT_PARITY)\n\n      Bits are numbered here from left (0 = MSB) to right (7 =\n\t LSB).\n\n      All the other options (option extensions) are encoded in\n      extensions to the PGM header.\n", "notes": "", "submit_date": "2002-09-17", "submitter_name": "Lorenzo Vicisano", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "324", "doc-id": "RFC3207", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "The document is missing a reference: </ORIG>   [MIME-SEC] Galvin, J., Murphy, S., Crocker, S., and Freed, N.,\n               \"Security Multiparts for MIME: Multipart/Signed and\n               Multipart/Encrypted\", RFC 1847, October 1995.\n</CORR>\n", "submit_date": "2002-02-13", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "325", "doc-id": "RFC3204", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the Authors Address Section: ", "orig_text": "   Francois Audet\n   Nortel Networks\n   4301 Great America Parkway\n   Santa Clara, CA 95054, USA\n   EMail: mzonoun@nortelnetworks.com\n\n   Mo Zonoun\n   Nortel Networks\n   4301 Great America Parkway\n   Santa Clara, CA 95054, USA\n   EMail: audet@nortelnetworks.com", "correct_text": "   Francois Audet\n   Nortel Networks\n   4301 Great America Parkway\n   Santa Clara, CA 95054, USA\n   EMail: audet@nortelnetworks.com\n\n   Mo Zonoun\n   Nortel Networks\n   4301 Great America Parkway\n   Santa Clara, CA 95054, USA\n   EMail: mzonoun@nortelnetworks.com\n", "notes": "", "submit_date": "2001-12-13", "submitter_name": "Francois Audet", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "326", "doc-id": "RFC3189", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "      a=fmtp:113 encode=SD-VCR/525-60\r\n      a=fmtp:113 audio=none", "correct_text": "     a=fmtp:113 encode=SD-VCR/525-60 audio=none", "notes": "", "submit_date": "2005-03-10", "submitter_name": "Stephen Casner", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "327", "doc-id": "RFC3180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   The IANA has allocated 223/8 as per RFC 2770 [RFC2770].", "correct_text": "   The IANA has allocated 233/8 as per RFC 2770 [RFC2770].\n", "notes": "", "submit_date": "2001-10-22", "submitter_name": "Steve Mattson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "328", "doc-id": "RFC3174", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the Reference Section, it says:\n", "orig_text": "   [FIPS 180-1] \"Secure Hash Standard\", United States of American,\n                National Institute of Science and Technology, Federal\n                Information Processing Standard (FIPS) 180-1, April\n                1993.", "correct_text": "   [FIPS 180-1] \"Secure Hash Standard\", United States of America,\n                National Institute of Science and Technology, Federal\n                Information Processing Standard (FIPS) 180-1, April\n                1993.", "notes": "\n\"United States of American\" changed to \"United States of America\"", "submit_date": "2004-03-20", "submitter_name": "Christian Staudenmayer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2628", "doc-id": "RFC4757", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "nonce (edata.Confounder, 8);\r\nmemcpy (edata.Data, data);\r\nedata.Checksum = HMAC (K2, edata);", "correct_text": "nonce (edata.Confounder, 8);\r\nmemcpy (edata.Data, data);\r\nedata.Checksum = HMAC (K2, concat(edata.Confounder, edata.Data));", "notes": "", "submit_date": "2010-11-12", "submitter_name": "Matthias Schertler", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "361", "doc-id": "RFC2919", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3", "orig_text": "The syntax of the List-Id header follows:\r\n\r\n   list-id-header = \"List-ID:\" [phrase] \"<\" list-id \">\" CRLF", "correct_text": "The syntax of the List-Id header follows:\r\n\r\n   list-id-header = \"List-Id:\" [phrase] \"<\" list-id \">\" CRLF", "notes": " In order to bring it in line with the examples, and with common usage (by\r\nthe RFC, the List-ID is correct) most mail readers use the example and\r\ndo not consider the LHS case insensitive, since the RFC says:\r\n\r\nThe list header fields are subject to the encoding and character restrictions for mail headers as described in [RFC822].\r\n\r\nRFC822, while it says that most headers are character insensitive, does\r\nnot mandate that, and RFC 2919 only mandates that the List-Id: header is\r\nsubject to *encoding* and *character restrictions*, and does not say it\r\nneeds to adhere to case insensitivity.\r\n\r\nTherefore, the proposed change above will bring things more in line with common\r\nusage.\n --VERIFIER NOTES-- \nHeader field names are case insensitive per use of string literals from RFC 2234.", "submit_date": "2002-08-08", "submitter_name": "Trish Lynch", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "362", "doc-id": "RFC2916", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "* IN NAPTR 100 10 \"u\" \"ldap+E2U\" \"!^+46(.*)$!ldap://ldap.se/cn=01!\" .", "correct_text": "* IN NAPTR 100 10 \"u\" \"ldap+E2U\" \"!^+46(.*)$!ldap://ldap.se/cn=0\\1!\" .\r\n", "notes": "", "submit_date": "2000-09-27", "submitter_name": "Dr. Carsten Bormann", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "363", "doc-id": "RFC2916", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Erratum reported says that it should be:", "orig_text": "* IN NAPTR 100 10 \"u\" \"ldap+E2U\" \"!^+46(.*)$!ldap://ldap.se/cn=0\\1!\" .", "correct_text": "* IN NAPTR 100 10 \"u\" \"ldap+E2U\" \"!^+46(.*)$!ldap://ldap.se/cn=0\\\\1!\" .", "notes": "A double backslash is needed as single backslash is the escape\r\nchararacter in the presentation format of a TXT element.\r\nThe on wire format requires a single backslash which results\r\nin a double backslash in the presentation format.\r\n", "submit_date": "2006-04-12", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "364", "doc-id": "RFC2911", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13", "orig_text": "\"redirection\" - 0x0200 to 0x02FF", "correct_text": "\"redirection\" - 0x0300 to 0x03FF", "notes": "", "submit_date": "2002-07-17", "submitter_name": "Tom Hastings", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "382", "doc-id": "RFC2820", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "The abstract says:", "orig_text": "   This document describes the fundamental requirements of an access\r\n   control list (ACL) model for the Lightweight Directory Application\r\n   Protocol (LDAP) directory service.  \r\n", "correct_text": "   This document describes the fundamental requirements of an access\r\n   control list (ACL) model for the Lightweight Directory Access\r\n   Protocol (LDAP) directory service.  \r\n", "notes": " ", "submit_date": "2005-01-06", "submitter_name": "Hallvard B Furuseth", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "329", "doc-id": "RFC3174", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "    /*\r\n     *  Initialize the first 16 words in the array W\r\n     */\r\n    for(t = 0; t < 16; t++)\r\n    {\r\n        W[t] = context->Message_Block[t * 4] << 24;\r\n        W[t] |= context->Message_Block[t * 4 + 1] << 16;\r\n        W[t] |= context->Message_Block[t * 4 + 2] << 8;\r\n        W[t] |= context->Message_Block[t * 4 + 3];\r\n    }", "correct_text": "    /*\r\n     *  Initialize the first 16 words in the array W\r\n     */\r\n    for(t = 0; t < 16; t++)\r\n    {\r\n        W[t] = (uint32_t)(context->Message_Block[t * 4]) << 24;\r\n        W[t] |= (uint32_t)(context->Message_Block[t * 4 + 1]) << 16;\r\n        W[t] |= context->Message_Block[t * 4 + 2] << 8;\r\n        W[t] |= context->Message_Block[t * 4 + 3];\r\n    }", "notes": "Note that Message_Block is an array of \"integers of >= 16 bits\" as described in \"sha1.h\" but W[] is an array of unsigned 32-bit integers.\r\n\r\nWhile this works fine in many compilers, some compilers (e.g. Dynamic C v9.25) processing the line:\r\n\r\n        W[t] = context->Message_Block[t * 4] << 24;\r\n\r\nwill take the 16 bit integer \"context->Message_Block[t * 4]\" and shift it left 24 bits, and then assign the resulting (still) 16 bit integer to the 32 bit integer W[t].\r\n\r\nThis will lead to a different (and undesired) result than the intended behavior of first promoting the 16 bit integer \"context->Message_Block[t * 4]\" to a 32 bit integer, and *then* shifting that 32 bit integer left 24 times, and storing the result in W[t].\r\n\r\nThe solution is to use an explicit cast. The last two lines of code in the for loop can remain as they are, as they will not suffer from the above problem and do not need the explicit cast.\r\n ", "submit_date": "2006-06-01", "submitter_name": "Ben Davis", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "330", "doc-id": "RFC3165", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "       SYNTAX      Integer32 (1..2147483647)", "correct_text": "       SYNTAX      Integer32 (0..2147483647)\n", "notes": "", "submit_date": "2001-09-03", "submitter_name": "Juergen Schoenwaelder", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "331", "doc-id": "RFC3119", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   the encoding name SHALL be \"mp3\" (the same as the MIME subtype).", "correct_text": "   the encoding name SHALL be \"mpa-robust\" (the same as the MIME\n   subtype). ", "notes": "Appendix A:\n    \"backpointer\": the size (in bytes) of the backpointer for this\n   frame \nShould be:\n    \"backpointer\": the value (expressed in bytes) of the backpointer for\n   this frame\nAppendix A2:\n    In the function \"insertDummyADUsIfNecessary()\":\n   curADU\nShould be:\n    prevADU\nAppendix B2:\n    The two occurrences of \"32\" should be \"256\"\n\n", "submit_date": "2001-11-03", "submitter_name": "Ross Finlayson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "332", "doc-id": "RFC3108", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6", "orig_text": "   The base specification for SDP, RFC 2327 [1], allows the definition f\n   new attributes.  In keeping with this spirit, some of the attributes\n   defined in this document can also be used in SDP descriptions of IP\n   nd other non-ATM sessions.  For example, the 'vsel', 'dsel' and\n   'fsel' attributes defined below refer generically to codec-s.  These\n   can be bed for service-specific codec negotiation and assignment in\n   non-ATM s well as ATM applications.", "correct_text": "   The base specification for SDP, RFC 2327 [1], allows the definition of\n   new attributes.  In keeping with this spirit, some of the attributes\n   defined in this document can also be used in SDP descriptions of IP\n   and other non-ATM sessions.  For example, the 'vsel', 'dsel' and\n   'fsel' attributes defined below refer generically to codecs.  These\n   can be used for service-specific codec negotiation and assignment in\n   non-ATM as well as ATM applications.", "notes": "In Section 5.6.3: (First, Second and Third Bulleted items in List)\n    *  The 'silenceSupp' attribute, used to indicate the use of of\n      voice activity detection for silence suppression, and to\n      optionally parameterize the silence suppression function.\n\n   *  The 'ecan'  attribute, used to indicate the use of of echo\n      cancellation, and to parameterize the this function.\n\n   *  The 'gc' attribute, used to indicate the use of of gain\n      control, and to parameterize the this function.\nShould be:\n    *  The 'silenceSupp' attribute, used to indicate the use of\n      voice activity detection for silence suppression, and to\n      optionally parameterize the silence suppression function.\n\n   *  The 'ecan'  attribute, used to indicate the use of echo\n      cancellation, and to parameterize the this function.\n\n   *  The 'gc' attribute, used to indicate the use of gain\n      control, and to parameterize the this function.\nIn Section 5.6.3.3:\n    When present, the 'ecan' attribute s is used to indicate the use or\n   non-use of echo cancellation.  There can be several 'ecan' lines in\n   an SDP description.\nShould be:\n    When present, the 'ecan' attribute is used to indicate the use or\n   non-use of echo cancellation.  There can be several 'ecan' lines in\n   an SDP description.\nIn Section 5.6.6: (First numbered item)\n    (1)  The originating media gateway controller (OMGC) initiates\n        service-level call establishment by sending the appropriate\n        controlsmessage to the originating media gateway (OMG).\nShould be:\n    (1)  The originating media gateway controller (OMGC) initiates\n        service-level call establishment by sending the appropriate\n        control message to the originating media gateway (OMG).\nIn Section 6: (Sixth definition from top)\n    <vci>                Virtual Circui t    Decimal or hex equivalent\n                        Identifier          of 16 bits\nShould be:\n    <vci>                Virtual Circuit     Decimal or hex equivalent\n                        Identifier          of 16 bits\n\n", "submit_date": "2002-05-22", "submitter_name": "Rajesh Kumar", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "333", "doc-id": "RFC3104", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the References section, \"Holdrege\" is spelled incorrectly.  It says:\n", "orig_text": "   [NAT-TERMS] Srisuresh, P. and M. Holdredge, \"IP Network Address\n               Translator (NAT) Terminology and Considerations\", RFC\n               2663, August 1999.", "correct_text": "   [NAT-TERMS] Srisuresh, P. and M. Holdrege, \"IP Network Address\n               Translator (NAT) Terminology and Considerations\", RFC\n               2663, August 1999.", "notes": "\n\n\n", "submit_date": "2004-03-13", "submitter_name": "Matt Holdrege", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "334", "doc-id": "RFC3083", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   docsBpiCmAuthState      OBJECT-TYPE\r\n   SYNTAX                  INTEGER {\r\n    \r\n                                   authWait(2),\r\n                                   authorized(3),\r\n                                   reauthWait(4),\r\n                                   authRejectWait(5)", "correct_text": "   docsBpiCmAuthState      OBJECT-TYPE\r\n   SYNTAX                  INTEGER {\r\n\r\n                                   start(1),\r\n                                   authWait(2),\r\n                                   authorized(3),\r\n                                   reauthWait(4),\r\n                                   authRejectWait(5)\r\n", "notes": "2014-07-14: comma added. Thanks to Mark Ellison for the correction.", "submit_date": "2001-04-10", "submitter_name": "Rich Woundy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "335", "doc-id": "RFC3069", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "customer C and resides in it's own virtual LAN, VLAN C.", "correct_text": "customer C and resides in its own virtual LAN, VLAN C.", "notes": "Notes/ Ooops.  Ouch!", "submit_date": "2007-06-06", "submitter_name": "Bob Braden", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "336", "doc-id": "RFC3066", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "   This will ensure that, for example, a user who implements \"hwi\"\n   (Hawaiian), which currently has no 2-letter code, will not find his\n   or her data invalidated by eventual addition of a 2-letter code for\n   that language.", "correct_text": "   This will ensure that, for example, a user who implements \"haw\"\n   (Hawaiian), which currently has no 2-letter code, will not find his\n   or her data invalidated by eventual addition of a 2-letter code for\n   that language.\n", "notes": "", "submit_date": "2002-07-30", "submitter_name": "David Hopwood", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "337", "doc-id": "RFC3066", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   URL: http://www.loc.gov/standards/iso639", "correct_text": "   http://www.loc.gov/standards/iso639-2/\n", "notes": "", "submit_date": "2001-02-01", "submitter_name": "Dr. Carsten Bormann", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "375", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.5", "orig_text": "  When an SMTP server returns a permanent error status (5yz) code after\r\n  the DATA command is completed with <CRLF>.<CRLF>, it MUST NOT make\r\n  any subsequent attempt to deliver that message. ", "correct_text": "  When an SMTP server returns a transient failure status (4yz) code after\r\n  the DATA command is completed with <CRLF>.<CRLF>, it MUST NOT make\r\n  any subsequent attempt to deliver that message. ", "notes": " Fixed in RFC 5321.", "submit_date": "2004-11-23", "submitter_name": "Jochen Topf", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "338", "doc-id": "RFC3065", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "\r\nAppendix A says:", "orig_text": "   The most notable change from [1] is that of reversing the values\r\n   AS_CONFED_SEQUENCE(4) and AS_CONFED_SET(3) to those defined in\r\n   section \"AS_CONFED Segment Type Extension\".  The reasoning for this\r\n   is that in the initial implementation, which was already widely\r\n   deployed, they were implemented backwards from [4], and as such,\r\n   subsequent implementations implemented them backwards as well.  In\r\n   order to foster interoperability and compliance with deployed\r\n   implementations, they've therefore been changed here as well. ", "correct_text": "    The most notable change from [5] is that of reversing the values\r\n    AS_CONFED_SEQUENCE(4) and AS_CONFED_SET(3) to those defined in\r\n    section \"AS_CONFED Segment Type Extension\".  The reasoning foridely\r\n    deployed, they were implemented backwards from [4], and as such,\r\n    subsequent implementations implemented them backwards as well.  In\r\n    order to foster interoperability and compliance with deployed\r\n    implementations, they've therefore been changed here as well.", "notes": "\r\nThere is an error in line 1 of Appendix A (RFC 3065). reference \r\nto document [1] is wrong and must be changed to [5].\r\n\n --VERIFIER NOTES-- \n   Nikolai Malykh made an error in the submission of this erratum which was corrected in erratum 339.", "submit_date": "2006-01-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "339", "doc-id": "RFC3065", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nAppendix A says:", "orig_text": "    The most notable change from [1] is that of reversing the values\r\n    AS_CONFED_SEQUENCE(4) and AS_CONFED_SET(3) to those defined in\r\n    section \"AS_CONFED Segment Type Extension\".  The reasoning for this\r\n    is that in the initial implementation, which was already widely\r\n    deployed, they were implemented backwards from [4], and as such,\r\n    subsequent implementations implemented them backwards as well.  In\r\n    order to foster interoperability and compliance with deployed\r\n    implementations, they've therefore been changed here as well. ", "correct_text": "    The most notable change from [4] is that of reversing the values\r\n    AS_CONFED_SEQUENCE(4) and AS_CONFED_SET(3) to those defined in\r\n    section \"AS_CONFED Segment Type Extension\".  The reasoning foridely\r\n    deployed, they were implemented backwards from [4], and as such,\r\n    subsequent implementations implemented them backwards as well.  In\r\n    order to foster interoperability and compliance with deployed\r\n    implementations, they've therefore been changed here as well.", "notes": "\r\nSorry for mistype error in my previous message.\r\nThere is a mistype error in line 1 of Appendix A (RFC 3065). reference \r\nto document [1] is wrong and must be changed to [4].", "submit_date": "2006-01-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "340", "doc-id": "RFC3062", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "   Traditionally, LDAP users where identified by the Distinguished Name\n   [RFC2253] of a directory entry and this entry contained a userPassword\n   [RFC2256] attribute containing one or more passwords.", "correct_text": "   Traditionally, LDAP users were identified by the Distinguished\n   Name [RFC2253] of a directory entry and this entry contained a\n   userPassword [RFC2256] attribute containing one or more passwords.\n", "notes": "", "submit_date": "2001-03-07", "submitter_name": "Kurt Zeilenga", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "341", "doc-id": "RFC3056", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "then\r\napply any security checks (see Section 8);", "correct_text": "then\r\napply any security checks (see Section 9);", "notes": "", "submit_date": "2002-11-20", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "342", "doc-id": "RFC3052", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "In Section 7, Sid Nag has reverted back to his original EMail address: \n\n   thinker@monmouth.com\n", "submit_date": "2002-11-20", "submitter_name": "Sid Nag", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "343", "doc-id": "RFC3047", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   Encoding considerations:\n         This type is only defined for transfer via RTP as specified\n\t in a Work in Progress.", "correct_text": "   Encoding considerations:\n         This type is only defined for transfer via RTP as specified\n\t in RFC 3047.\n", "notes": "", "submit_date": "2002-06-04", "submitter_name": "Colin Perkins", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "344", "doc-id": "RFC3037", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "   LDP is also useful in situations that require efficient hop-by-hop\n   routed tunnels, such as MPLS-based VPN architectures [RFC2574] and\n   tunneling between BGP border routers.  ", "correct_text": "   LDP is also useful in situations that require efficient hop-by-hop\n   routed tunnels, such as MPLS-based VPN architectures [RFC2547] and\n   tunneling between BGP border routers.\n", "notes": "", "submit_date": "2001-01-29", "submitter_name": "Elena Taguer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "345", "doc-id": "RFC3036", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "\r\nA reference for [Dobb] is missing.\r\n\r\nRationale:\r\nIn section 2.9.1, there is a mention of a problem\r\nwith MD5. The text refers to [Dobb] but the\r\nreference section contains no citation.\r\n\n --VERIFIER NOTES-- \nRFC3036 has been obsoleted by RFC5036.\r\nThe text that gives rise to this issue is a direct quote from RFC 2385. That reference should be explored to determine the full implications of the text.", "submit_date": "2006-04-13", "submitter_name": "Barbara Denny", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "346", "doc-id": "RFC3036", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.1.2.2", "orig_text": "   If the TLV type is >= 0x8000 (high order bit 1) the TLV is\n   silently dropped.  Section \"Unknown TLV in Known Message Type\"\n   elaborates on this behavior.", "correct_text": "", "notes": "There is no section with this title.  The sentence in question should\nhave been deleted.  It refers to a section that was deleted in a\nversion of the I-D that led to the RFC.\n", "submit_date": "2001-02-01", "submitter_name": "Elena Taguer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "347", "doc-id": "RFC3032", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4.4", "orig_text": "C. If possible, transmit the ICMP Destination Unreachable \r\n    Message to the source of the of the discarded datagram. ", "correct_text": "C. If possible, transmit the ICMP Destination Unreachable \r\n    Message to the source of the discarded datagram. ", "notes": "As you can see, the text \"of the\" on the second line is \r\nrepeated twice. \r\n", "submit_date": "2006-01-25", "submitter_name": "Mario Zoppetti", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "348", "doc-id": "RFC3031", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "   LDP                       Label Distribution Protocol\r\n   L2                        Layer 2 L3                        Layer 3\r\n   LSP                       Label Switched Path", "correct_text": "   LDP                       Label Distribution Protocol\r\n   L2                        Layer 2 \r\n   L3                        Layer 3\r\n   LSP                       Label Switched Path", "notes": "there is a missing CR/LF", "submit_date": "2005-03-01", "submitter_name": "John Kristoff", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5006", "doc-id": "RFC8086", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   Section 3.1.9 of [RFC8085] discusses the congestion considerations\r\n   for design and use of UDP tunnels;", "correct_text": "   Section 3.1.11 of [RFC8085] discusses the congestion considerations\r\n   for design and use of UDP tunnels;", "notes": "There appears to be an incorrect reference to 3.1.9 that should refer to 3.1.11.", "submit_date": "2017-04-28", "submitter_name": "Donald Eastlake", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "365", "doc-id": "RFC2883", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.3", "orig_text": "         Transmitted    Received    ACK Sent\n         Segment        Segment     (Including SACK Blocks)\n\n         500-999        500-999     1000\n         1000-1499      (data packet dropped)\n         1500-1999      (delayed)\n         2000-2499      (data packet dropped)\n         2500-2999      (delayed)\n         3000-3499      (data packet dropped)\n         3500-3999      3500-3999   1000, SACK=3500-4000\n         1000-1499      (data packet dropped)\n         1500-2999      1500-1999   1000, SACK=1500-2000, 3500-4000\n                        2000-2499   1000, SACK=2000-2500, 1500-2000,\n                                            3500-4000\n                        1500-2999   1000, SACK=1500-2000, 1500-3000,\n                                               ---------\n                                            3500-4000", "correct_text": "         Transmitted    Received    ACK Sent\n         Segment        Segment     (Including SACK Blocks)\n\n         500-999        500-999     1000\n         1000-1499      (data packet dropped)\n         1500-1999      (delayed)\n         2000-2499      (data packet dropped)\n         2500-2999      (delayed)\n         3000-3499      (data packet dropped)\n         3500-3999      3500-3999   1000, SACK=3500-4000\n         1000-1499      (data packet dropped)\n         1500-2999      1500-1999   1000, SACK=1500-2000, 3500-4000\n                        2500-2999   1000, SACK=2500-3000, 1500-2000,\n                                            3500-4000\n                        1500-2999   1000, SACK=1500-2000, 1500-3000,\n                                               ---------\n                                            3500-4000", "notes": "", "submit_date": "2004-06-21", "submitter_name": "Noritoshi Demizu", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "366", "doc-id": "RFC2873", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the References Section: ", "orig_text": "   [RFC2597] Heinanen, J., Baker, F., Weiss, W. and J. Wroclawski,\n             \"Assured Forwarding PHB Group\", RFC 2587, June 1999.", "correct_text": "   [RFC2597] Heinanen, J., Baker, F., Weiss, W. and J. Wroclawski,\n             \"Assured Forwarding PHB Group\", RFC 2597, June 1999.\n", "notes": "", "submit_date": "2001-11-06", "submitter_name": "Kurt D. Zeilenga", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "367", "doc-id": "RFC2867", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "            Acct-Multi-Session-Id (51)", "correct_text": "            Acct-Multi-Session-Id (50)\n", "notes": "   ", "submit_date": "2005-05-31", "submitter_name": "Unai Pildain", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "368", "doc-id": "RFC2865", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.18", "orig_text": "   Multiple Reply-Message's MAY be included and if any are displayed,\n   they MUST be displayed in the same order as they appear in the\n   packet.", "correct_text": "   Multiple Reply-Messages MAY be included and if any are displayed,\n   they MUST be displayed in the same order as they appear in the\n   packet.\n", "notes": "", "submit_date": "2002-09-12", "submitter_name": "Aaron Webb", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "369", "doc-id": "RFC2858", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "    As specified in this document, the MPL_REACH_NLRI and MP_UNREACH_NLRI\r\n    attributes contain the Subsequence Address Family Identifier (SAFI)\r\n    field. The SAFI name space is defined in Section 9. ...", "correct_text": "", "notes": "\r\nThere isn't SAFI name space definition in RFC 2858. This name name space \r\ndefinition presents in obsoleted RFC 2283 but completely removed from \r\nRFC 2858.", "submit_date": "2006-01-19", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "370", "doc-id": "RFC2858", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nIANA Considerations say:", "orig_text": "\"...  The SAFI name space is defined in Section 9....\"", "correct_text": "\"...  The SAFI name space is defined in Section 5....\"\r\n", "notes": "", "submit_date": "2005-02-04", "submitter_name": "Tom Petch", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "371", "doc-id": "RFC2846", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": " global-phone = \"+\" 1*( DIGIT , written-sep )", "correct_text": " global-phone = \"+\" 1*( DIGIT / written-sep )", "notes": "", "submit_date": "2004-05-28", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "372", "doc-id": "RFC2827", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9", "orig_text": "   [9]  Thanks to: Craig Huegen; See:\r\n        http://www.quadrunner.com/~chuegen/smurf.txt.", "correct_text": "   [9]  Thanks to: Craig Huegen; See:\r\n        http://www.pentics.net/denial-of-service/white-papers/smurf.html.", "notes": " Tried to preserve the old URL, but could not. \n --VERIFIER NOTES-- \nAccording to the RFC editor: \r\n\r\nThe URL was correct at the time of publication, so we don't consider\r\nthis an erratum.  That is, we don't believe errata should be used\r\nto update things that were true at the time of publication.  I think\r\nusing the errata in this way muddies the system. \r\n\r\nAdditionally, using Google search\r\non \"Craig Huegen\" returns a link to \"Index of Craig Huegen's\r\nDenial-of-Service papers and presentations\", which seems sufficient.\r\n\r\n", "submit_date": "2002-11-20", "submitter_name": "Craig A. Huegen", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "373", "doc-id": "RFC2822", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.6", "orig_text": "   unstructured    =       *([FWS] utext) [FWS]", "correct_text": "   unstructured    =       *([FWS] utext) (*WSP / obs-FWS)", "notes": "A prominent example is the <subject> defined in section 3.6.5:\r\n\r\n   subject         =       \"Subject:\" unstructured CRLF\r\n\r\nExpanding the [FWS] at the end (ignoring <obs-FWS>) results in:\r\n\r\n   subject = \"Subject:\" *([FWS] utext) [[*WSP CRLF] 1*WSP] CRLF\r\n\r\n\r\nAlexey: note that this was fixed in RFC 5322 (which obsoleted RFC 2821) in a slightly different way.\r\n", "submit_date": "2006-01-10", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2810", "doc-id": "RFC3226", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "DNSSEC OK[OK] specifies how ...", "correct_text": "DNSSEC OK[RFC3225] specifies how ...", "notes": "Reference \"link\" is broken.", "submit_date": "2011-05-18", "submitter_name": "Edward Lewis", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2811", "doc-id": "RFC3110", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "Leading zero bytes are permitted in the RSA/SHA1 algorithm signature.", "correct_text": "Leading zero bytes MUST be added to the RSA/SHA1 algorithm signature \r\nso that the signature size in bytes is equal to the size of n in bytes.", "notes": "The Original Text implies that zero-padding of RSA signaturs is optional, however the underlying standard requires zero padding, http://tools.ietf.org/html/rfc2437#section-8.1.1\r\n\r\n\"4. Convert the signature representative s to a signature S of length k octets: S = I2OSP (s, k)\"\r\n\r\nwhere k is the length of the modulus in bytes. If the extra bytes are not added, standard RSA libraries will fail to verify the signature about 1% of the time when the padding occurs.", "submit_date": "2011-05-21", "submitter_name": "George Barwood", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2629", "doc-id": "RFC4616", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   Specifications for IETF protocols that indicate that this\r\n   mechanism is an applicable authentication mechanism MUST mandate that\r\n   implementations support an strong data security service, such as TLS.", "correct_text": "   Specifications for IETF protocols that indicate that this\r\n   mechanism is an applicable authentication mechanism MUST mandate that\r\n   implementations support a strong data security service, such as TLS.", "notes": "Just a typo in \"a strong data security service\".", "submit_date": "2010-11-12", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "387", "doc-id": "RFC2810", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "   In IRC the channel has a role equivalent to that of the multicast\n   group; their existence is dynamic and the actual conversation carried\n   out on a channel MUST only be sent to servers which are supporting\n   users on a given channel.  Moreover, the message SHALL only be sent\n   once to every local link as each server is responsible to fan the\n   original message to ensure that it will reach all the recipients.\n\n   The following examples all refer to Figure 2.", "correct_text": "   In IRC the channel has a role equivalent to that of the multicast\n   group; their existence is dynamic and the actual conversation carried\n   out on a channel MUST only be sent to servers which are supporting\n   users on a given channel.  Moreover, the message SHALL only be sent\n   once to every local link as each server is responsible to fan the\n   original message to ensure that it will reach all the recipients.\n\n   The following examples all refer to Figure 1.", "notes": "\nThere is no \"Figure 2\".", "submit_date": "2004-02-25", "submitter_name": "Christophe Kalt", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "388", "doc-id": "RFC2786", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The title was mis-spelled: ", "orig_text": "   Diffie-Helman USM Key Management Information Base and Textual\n   Convention ", "correct_text": "   Diffie-Hellman USM Key Management Information Base and Textual\n   Convention\n", "notes": "", "submit_date": "2001-08-17", "submitter_name": "David Harrington", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "389", "doc-id": "RFC2764", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "There is a case of sections being numbered wrong: ", "orig_text": "   5.3.3.1 Stub Link Connectivity Scenarios ........................ 30\n   5.3.3.1 Routing Protocol Instance ............................... 31\n", "correct_text": "", "notes": "", "submit_date": "2001-02-01", "submitter_name": "Elena Taguer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "390", "doc-id": "RFC2763", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   A router may also optionally insert this TLV in it's pseudo node LSP\n   for the association of a symbolic name to a local LAN.", "correct_text": "   A router may also optionally insert this TLV in its pseudo node LSP\n   for the association of a symbolic name to a local LAN.\n", "notes": "", "submit_date": "2002-06-28", "submitter_name": "Brian Vine", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "391", "doc-id": "RFC2759", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.3", "orig_text": "  0-to-256-unicode-char Password:\n  4D 79 50 77\n\n  16-octet PasswordHash:\n  FC 15 6A F7 ED CD 6C 0E DD E3 33 7D 42 7F 4E AC", "correct_text": "  0-to-256-char Password:\n  4D 79 50 77\n\n  0-to-256-unicode-char NtPassword:\n  4D 00 79 00 50 00 77 00\n\n  16-octet NtPasswordHash:\n  FC 15 6A F7 ED CD 6C 0E DD E3 33 7D 42 7F 4E AC\n", "notes": "", "submit_date": "2002-08-26", "submitter_name": "Andrew Roughan", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "392", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3.2", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3               |       1       |  Packet length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Router ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Area ID                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Checksum            |  Instance ID  |      0         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Interface ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Rtr Pri    |             Options                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        HelloInterval         |        RouterDeadInterval      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                   Designated Router ID                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                Backup Designated Router ID                    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Neighbor ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    ...                              |\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3        |       1       |         Packet length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Router ID                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                           Area ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           Checksum            |  Instance ID  |      0        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Interface ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Rtr Pri    |              Options                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         HelloInterval         |        RouterDeadInterval     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Designated Router ID                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 Backup Designated Router ID                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Neighbor ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "393", "doc-id": "RFC2740", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "   Link-local unicast addresses are assigned from the IPv6 address\r\n   range FF80/10.", "correct_text": "   Link-local unicast addresses are assigned from the IPv6 address\r\n   range FE80::/10.\r\n", "notes": " \r\n The IPv6 link-local address range is incorrect.", "submit_date": "2003-02-22", "submitter_name": "Acee Lindem", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "394", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.2", "orig_text": "The Interface ID appears in Hello packets sent out the interface,\r\nthe link-local-LSA originated by router for the attached link, and\r\nthe router-LSA originated by the router-LSA for the associated area.", "correct_text": "The Interface ID appears in Hello packets sent out the interface,\r\nthe link-local-LSA originated by router for the attached link, and\r\nthe router-LSA originated by the router for the associated area.\r\n", "notes": "", "submit_date": "2001-08-21", "submitter_name": "Wu Qian", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "395", "doc-id": "RFC2737", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the header:", "orig_text": "   Network Working Group                                      K. McCloghrie\n   Request for Comments: 2737                           Cisco Systems, Inc.\n   Obsoletes: 2037                                               A. Bierman\n                                                        Cisco Systems, Inc.\n                                                              December 1999", "correct_text": "   Network Working Group                                      K. McCloghrie\n   Request for Comments: 2737                           Cisco Systems, Inc.\n   Obsoletes: 2037                                               A. Bierman\n   Category: Standards Track                            Cisco Systems, Inc.\n                                                              December 1999\n", "notes": "", "submit_date": "2001-09-21", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "396", "doc-id": "RFC2731", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11", "orig_text": "   [HARVEST]        Harvest Web Indexing.\n                    http://www.tardis.ed.ac.uk/harvest/", "correct_text": "   [HARVEST]        Harvest: A distributed Search System.\n                    http://harvest.sourceforge.net/\n", "notes": "", "submit_date": "2002-09-04", "submitter_name": "Kang-Jin Lee", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "397", "doc-id": "RFC2681", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "Then the 50th percentile would be 110 msec, since 90 msec and 100\r\nmsec are smaller and 110 msec and 'undefined' are larger.", "correct_text": "Then the 50th percentile would be 110 msec, since 90 msec and 100 msec\r\nare smaller and 500 msec and 'undefined' are larger.  See Section 11.3\r\nof [1] for computing percentiles.", "notes": " Corrected text suggested by Matt Zekauskas (matt@internet2.edu).", "submit_date": "2002-11-18", "submitter_name": "Andrew Main", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "398", "doc-id": "RFC2679", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   Then the 50th percentile would be 110 msec, since 90 msec and 100\r\n   msec are smaller and 110 msec and 'undefined' are larger.", "correct_text": "   Then the 50th percentile would be 110 msec, since 90 msec and 100\r\n   msec are smaller and 500 msec and 'undefined' are larger.  See\r\n   Section 11.3 of [1] for computing percentiles.", "notes": " See the list of samples immediately preceding that paragraph.", "submit_date": "2002-11-18", "submitter_name": "Andrew Main", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "399", "doc-id": "RFC2676", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "    0       8       16\n    |       |       |\n    -----------------\n   |EXP| MANT        |\n    -----------------", "correct_text": "    0       8       15\n    |       |       |\n    -----------------\n   |EXP| MANT        |\n    -----------------\n", "notes": "", "submit_date": "2002-07-09", "submitter_name": "Jussi Savolainen", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8962", "doc-id": "RFC1436", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "C: Opens Connection.\r\nC: Sends Selector String, Tab, Search String.\r\nS: Sends Menu Entity.", "correct_text": "C: Opens Connection.\r\nS: Accepts Connection\r\nC: Sends Selector String, Tab, Search String.\r\nS: Sends Menu Entity.", "notes": "The \"Full-Text Search Transaction\" section lacks the \"S: Accepts Connection\" step of the transaction.\r\n\r\n(tangentially, the \"Accepts Connection\" vs \"Accepts connection\" is inconsistent throughout the document, so it wouldn't hurt to choose one capitalization and stick to it)", "submit_date": "2026-06-04", "submitter_name": "Tim Chase", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-05 19:01:52"}, {"errata_id": "404", "doc-id": "RFC2645", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "   If the authentication used by the customer does not provide access to\r\n   all of the domains specified in ATRN, the provider MUST NOT send mail\r\n   for any domains to the customer; the provider MUST reject the ATRN\r\n   command with a 450 code.", "correct_text": "   If the authentication used by the customer does not provide access to\r\n   all of the domains specified in ATRN, the provider MUST NOT send mail\r\n   for any domains to the customer; the provider MUST reject the ATRN\r\n   command with a 550 code.", "notes": "This seems to be contrary to SMTP's theory of reply codes:\r\n\r\nA rule of thumb to determine whether a reply fits into the 4yz or the 5yz category (see below)        is that replies are 4yz if they can be successful if repeated\r\nwithout any change in command form or in properties of the sender\r\nor receiver (that is, the command is repeated identically and the\r\nreceiver does not put up a new implementation.)\r\n\r\nIf the ODMR client repeats the ATRN request in this situation, it will be rejected again. So a 550 response would be more appropriate.\r\n\r\n", "submit_date": "2005-08-30", "submitter_name": "Tony Finch", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "405", "doc-id": "RFC2633", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "   This may be useful in an environment were automatic signature\n   verification is desired, as no private key material is required to\n   verify a signature.", "correct_text": "   This may be useful in an environment where automatic signature\n   verification is desired, as no private key material is required to\n   verify a signature.\n", "notes": "", "submit_date": "2003-03-12", "submitter_name": "Joni Yrjana", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "406", "doc-id": "RFC2630", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.2.2", "orig_text": "The RSA signature algorithm is defined in RFC 2347 [NEWPKCS#1].  RFC\r\n2347 specifies the use of the RSA signature algorithm with the SHA-1\r\nand MD5 message digest algorithms.", "correct_text": "The RSA signature algorithm is defined in RFC 2437 [NEWPKCS#1].  RFC\r\n2437 specifies the use of the RSA signature algorithm with the SHA-1\r\nand MD5 message digest algorithms.", "notes": "", "submit_date": "2000-12-26", "submitter_name": "Joseph Baran", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "407", "doc-id": "RFC2625", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "1. This table applies only to FC-4 related data, such as IP and\r\n   ARP packets. This table does not apply to link services and\r\n   other non-FC-4 sequences (PLOGI, for example) that must occur\r\n   for normal operation.", "correct_text": "1. This table does not apply to FARP-REQ and FARP-REPLY.", "notes": "", "submit_date": "2003-07-21", "submitter_name": "Elizabeth G. Rodriguez", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "408", "doc-id": "RFC2616", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6", "orig_text": "   The Internet Assigned Numbers Authority (IANA) acts as a registry for\n   transfer-coding value tokens. Initially, the registry contains the\n   following tokens: \"chunked\" (section 3.6.1), \"identity\" (section\n   3.6.2), \"gzip\" (section 3.5), \"compress\" (section 3.5), and\n   \"deflate\" (section 3.5).", "correct_text": "", "notes": "There is no section 3.6.2; there is no such thing as Transfer-Coding:\nidentity in the RFC 2616 specification (note that there would not be\nquotes  around \"identity\" in the actual header!).", "submit_date": "2001-10-08", "submitter_name": "Greg Robson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "410", "doc-id": "RFC2617", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "All known errata for this HTTP RFC will be found at: \r\nhttp://purl.org/NET/http-errata and \r\nhttp://www.w3.org/Protocols/HTTP/1.1/rfc2616bis/issues/\r\n\r\n", "submit_date": "2001-01-05", "submitter_name": "Scott Lawrence", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "411", "doc-id": "RFC2616", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14.3", "orig_text": "The Accept-Encoding request-header field is similar to Accept, but\r\nrestricts the content-codings (section 3.5) that are acceptable in\r\nthe response.\r\n\r\n       Accept-Encoding  = \"Accept-Encoding\" \":\"\r\n\r\n                          1#( codings [ \";\" \"q\" \"=\" qvalue ] )\r\n       codings          = ( content-coding | \"*\" )\r\n\r\n Examples of its use are:\r\n\r\n       Accept-Encoding: compress, gzip\r\n       Accept-Encoding:\r\n       Accept-Encoding: *\r\n       Accept-Encoding: compress;q=0.5, gzip;q=1.0\r\n       Accept-Encoding: gzip;q=1.0, identity; q=0.5, *;q=0", "correct_text": "The Accept-Encoding request-header field is similar to Accept, but\r\nrestricts the content-codings (section 3.5) that are acceptable in\r\nthe response.\r\n\r\n       Accept-Encoding  = \"Accept-Encoding\" \":\"\r\n\r\n                          1#( codings [ \";\" \"q\" \"=\" qvalue ] )\r\n       codings          = ( content-coding | \"*\" )\r\n\r\n Examples of its use are:\r\n\r\n       Accept-Encoding: compress, gzip\r\n       Accept-Encoding: *\r\n       Accept-Encoding: compress;q=0.5, gzip;q=1.0\r\n       Accept-Encoding: gzip;q=1.0, identity; q=0.5, *;q=0", "notes": "As you can see, Accept-Encoding has to consist of 1 or more ( codings [ \";\"\r\n\"q\" \"=\" qvalue ] ).  So you can't just leave the value of \"Accept-Encoding:\"\r\nempty.  The second example is, therefore, incorrect.\r\n\r\n------------------------------------------------\r\nAlexey: This issue was fixed in HTTPBIS WG, see <http://trac.tools.ietf.org/wg/httpbis/trac/ticket/25>", "submit_date": "2006-10-31", "submitter_name": "WooJin Chung", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "412", "doc-id": "RFC2616", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "From Scott Lawrence:\r\nAll known errata for this HTTP RFC will be found at: \r\nhttp://purl.org/NET/http-errata and \r\nhttp://www.w3.org/Protocols/HTTP/1.1/rfc2616bis/issues/\r\n\r\n\r\n", "submit_date": "2001-01-05", "submitter_name": "Justin Erenkrantz", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "424", "doc-id": "RFC2544", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "The authors understand that it will take a considerable period of time \nto perform all of the recommended tests nder  all of the recommended \nconditions. We believe that the results are worth the effort.  Appendix \nA lists some of the tests and conditions that we believe should be \nincluded for specific cases.", "correct_text": "The authors understand that it will take a considerable period of time \nto perform all of the recommended tests under all of the recommended \nconditions.  We believe that the results are worth the effort.  Appendix \nA lists some of the tests and conditions that we believe should be \nincluded for specific cases.", "notes": "\n", "submit_date": "2004-09-08", "submitter_name": "Shiang-Ming Huang", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "425", "doc-id": "RFC2527", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the NOTES Section: ", "orig_text": "   1 The ABA Digital Signature Guidelines can be purchased from the ABA.\n     See http://www.abanet.com for ordering details.", "correct_text": "   1 The ABA Digital Signature Guidelines can be purchased from the ABA.\n     See http://www.abanet.org for ordering details.\n", "notes": "", "submit_date": "2002-08-05", "submitter_name": "Sid Sidner", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "426", "doc-id": "RFC2518", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "Errata for this document can be found at: http://www.webdav.org/wg/rfcdev/issues.htm\n", "submit_date": "2002-05-11", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "427", "doc-id": "RFC2516", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "Host MAC address using a key known only to the Access > Concentrator.", "correct_text": "Host MAC address using a key known only to the Access Concentrator.", "notes": "There is an unnecessary \">\" symbol.", "submit_date": "2006-10-06", "submitter_name": "Saravanan Kesavan", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "413", "doc-id": "RFC2597", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "For example, if traffic conditioning actions at the ingress of the\r\nprovider DS domain make sure that an AF class in the DS nodes is only\r\nmoderately loaded by packets with the lowest drop precedence value\r\nand is not overloaded by packets with the two lowest drop precedence\r\nvalues, then the AF class can offer a high level of forwarding\r\nassurance for packets that are within the subscribed profile (i.e.,\r\nmarked with the lowest drop precedence value) and offer up to two\r\nlower levels of forwarding assurance for the excess traffic.", "correct_text": "For example, if traffic conditioning actions at the ingress of the\r\nprovider DS domain make sure that an AF class in the DS nodes is only\r\nmoderately loaded by packets with the lowest drop precedence value\r\nand is not overloaded by packets with the two higher drop precedence\r\nvalues, then the AF class can offer a high level of forwarding\r\nassurance for packets that are within the subscribed profile (i.e.,\r\nmarked with the lowest drop precedence value) and offer up to two\r\nlower levels of forwarding assurance for the excess traffic.\r\n", "notes": "", "submit_date": "2005-05-24", "submitter_name": "Bud", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "414", "doc-id": "RFC2581", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   The algorithms outlined in [Hoe96,FF96,MM96a,MM6b] follow the\n   principles of the basic four congestion control algorithms outlined\n   in this document.", "correct_text": "   The algorithms outlined in [Hoe96,FF96,MM96a,MM96b] follow the\n   principles of the basic four congestion control algorithms outlined\n   in this document.", "notes": "\n", "submit_date": "2004-06-10", "submitter_name": "Noritoshi Demizu", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "415", "doc-id": "RFC2579", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.1", "orig_text": "   \"The RowStatus textual convention is used to manage the\n   creation and deletion of conceptual rows, and is used as the\n   value of the SYNTAX clause for the status column of a\n   conceptual row (as described in Section 7.7.1 of [2].)", "correct_text": "   \"The RowStatus textual convention is used to manage the\n   creation and deletion of conceptual rows, and is used as the\n   value of the SYNTAX clause for the status column of a\n   conceptual row (as described in Section 7.1.12 of [2].)\n", "notes": "", "submit_date": "2001-12-07", "submitter_name": "Juergen Schoenwaelder", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "416", "doc-id": "RFC2579", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The DateAndTime textual convention did not originally define a special\nvalue which can be used in situations where a DateAndTime value is\nunknown or for some other reason not available. Several MIB modules on\nthe IETF standards-track use the value '0000", "orig_text": "              2       3    month                     1..12\n              3       4    day                       1..31", "correct_text": "              2       3    month                 0 | 1..12\n              3       4    day                   0 | 1..31\n", "notes": "\n", "submit_date": "2004-07-27", "submitter_name": "Juergen Schoenwaelder", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "417", "doc-id": "RFC2579", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "RFC 2579 lists an invalid range for the year in the DateAndTime TC:\n\n            field  octets  contents                  range\n            -----  ------  --------                  -----\n              1      1-2   year*                     0..65536", "correct_text": "            field  octets  contents                  range\n            -----  ------  --------                  -----\n              1      1-2   year*                     0..65535\n", "notes": "", "submit_date": "2001-07-31", "submitter_name": "Juergen Schoenwaelder", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "418", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the reference: ", "orig_text": "   [REL]           Levinson, E., \"The MIME Multipart/Related Content-\n                   Type\", RFC 2389, August 1998.", "correct_text": "", "notes": "The RFC number cited is incorrect; it should be RFC 2387. ", "submit_date": "2001-01-07", "submitter_name": "Les Kramer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "419", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "resolution of relative URIs). However, URI-s in Content-Location\r\nheaders (if absolute, or resolvable to absolute URIs) SHOULD still\r\nbe", "correct_text": "resolution of relative URIs). However, URIs in Content-Location\r\nheaders (if absolute, or resolvable to absolute URIs) SHOULD still be", "notes": "", "submit_date": "2002-01-21", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "420", "doc-id": "RFC2548", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7.9", "orig_text": "   Description\r\n\r\n      The MS-Secondary-NBNS-Server Attribute is used to indicate the\r\n      address of the secondary DNS server to be used by the PPP peer.\r\n      It MAY be included in both Access-Accept and Accounting-Request\r\n      packets.", "correct_text": "   Description\r\n\r\n      The MS-Secondary-NBNS-Server Attribute is used to indicate the\r\n      address of the secondary NetBIOS Name Server (NBNS) [18] server to\r\n      be used by the PPP peer.  It MAY be included in both Access-Accept\r\n      and Accounting-Request packets.\r\n\r\n", "notes": "", "submit_date": "2005-02-04", "submitter_name": "Hans-Ake Lund", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "421", "doc-id": "RFC2544", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   Since the tester both sends the test traffic and receives\n   it back, after the traffic has been forwarded but the DUT, the tester\n   can easily determine if all of the transmitted packets were received\n   and verify that the correct packets were received.", "correct_text": "   Since the tester both sends the test traffic and receives\n   it back, after the traffic has been forwarded by the DUT, the tester\n   can easily determine if all of the transmitted packets were received\n   and verify that the correct packets were received.\n", "notes": "", "submit_date": "2002-08-07", "submitter_name": "Lu Jian Xiong", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "422", "doc-id": "RFC2544", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Section 26.1 says:", "orig_text": "    Procedure:  Send a specific number of frames at a specific rate\r\n    through the DUT and then count the frames that are transmitted by the\r\n    DUT. If the count of offered frames is equal to the count of received\r\n    frames, the fewer frames are received than were transmitted, the rate\r\n    of the offered stream is reduced and the test is rerun.", "correct_text": "       Procedure:\r\n       Send a specific number of frames at a specific rate through the\r\n       DUT and then count the frames that are transmitted by the DUT. If\r\n       the count of offered frames is equal to the count of received\r\n       frames, the rate of the offered stream is raised and the test\r\n       rerun.  If fewer frames are received than were transmitted, the\r\n       rate of the offered stream is reduced and the test is rerun.\r\n", "notes": "", "submit_date": "2006-11-05", "submitter_name": "Al Morton", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "423", "doc-id": "RFC2544", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Section C.2.2: ", "orig_text": "   The network addresses 192.18.0.0 through 198.19.255.255 are have been\n   assigned to the BMWG by the IANA for this purpose.", "correct_text": "   The network addresses 198.18.0.0 through 198.19.255.255 have been\n   assigned to the BMWG by the IANA for this purpose.\n", "notes": "", "submit_date": "2001-09-20", "submitter_name": "Scott Campbell", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "428", "doc-id": "RFC2486", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   x           = %x00-7F\n                 ; all 127 ASCII characters, no exception", "correct_text": "   special     = \"<\" / \">\" / \"(\" / \")\" / \"[\" / \"]\" / \"\\\" / \".\"\n                  / \",\" / \";\" / \":\" / \"@\" / %x22  / Ctl\n                 ; %x22 is '\"'\n", "notes": "", "submit_date": "2000-08-31", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "433", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Examples in various sections (2.4, 2.4.18, etc.)", "orig_text": "     DESCRIPTION;ALTREP=\"http://www.wiz.org\":The Fall'98 Wild Wizards\r\n       Conference - - Las Vegas, NV, USA\r\n[...]\r\n\r\n     DESCRIPTION;ALTREP=\"CID:<part3.msg.970415T083000@host.com>\":Project\r\n       XYZ Review Meeting will include the following agenda items: (a)\r\n       Market Overview, (b) Finances, (c) Project Management\r\n[...]\r\n     ORGANIZER;SENT-BY:\"MAILTO:sray@host.com\":MAILTO:jsmith@host.com\r\n[...]\r\n     LOCATION:Conference Room - F123, Bldg. 002\r\n\r\n     LOCATION;ALTREP=\"http://xyzcorp.com/conf-rooms/f123.vcf\":\r\n      Conference Room - F123, Bldg. 002\r\n[...]\r\n\r\n      Atlanta, Georgia END:VEVENT END:VCALENDAR\r\n[...]\r\n     CATEGORY:Project Report, XYZ, Weekly Meeting\r\n\r\n[...]\r\n      Participants: John Smith, Jane Doe, Jim Dandy\\n-It was", "correct_text": "     DESCRIPTION;ALTREP=\"http://www.wiz.org\":The Fall'98 Wild Wizards\r\n       Conference - - Las Vegas\\, NV\\, USA\r\n[...]\r\n\r\n     DESCRIPTION;ALTREP=\"CID:<part3.msg.970415T083000@host.com>\":Project\r\n       XYZ Review Meeting will include the following agenda items: (a)\r\n       Market Overview\\, (b) Finances\\, (c) Project Management\r\n[...]\r\n     ORGANIZER;SENT-BY=\"mailto:sray@host.com\":mailto:jsmith@host.com\r\n[...]\r\n     LOCATION:Conference Room - F123\\, Bldg. 002\r\n\r\n     LOCATION;ALTREP=\"http://xyzcorp.com/conf-rooms/f123.vcf\":\r\n      Conference Room - F123\\, Bldg. 002\r\n[...]\r\n\r\n      Atlanta\\, Georgia END:VEVENT END:VCALENDAR\r\n[...]\r\n     CATEGORIES:Project Report,XYZ,Weekly Meeting\r\n\r\n[...]\r\n      Participants: John Smith\\, Jane Doe\\, Jim Dandy\\n-It was", "notes": "This report comes from the following diff.\r\n\r\nThe following diff on RFC 2445 as archived also incorporates the\r\nchange to Section 4.2.18 reported by Tilghman Lesher on 2003-01-12.\r\n\r\n960c960\r\n<        Conference - - Las Vegas, NV, USA\r\n- ---\r\n>        Conference - - Las Vegas\\, NV\\, USA\r\n1027c1027\r\n<        Market Overview, (b) Finances, (c) Project Management\r\n- ---\r\n>        Market Overview\\, (b) Finances\\, (c) Project Management\r\n1664c1664\r\n<      ORGANIZER;SENT-BY:\"mailto:sray@host.com\":mailto:jsmith@host.com\r\n- ---\r\n>      ORGANIZER;SENT-BY=\"mailto:sray@host.com\":mailto:jsmith@host.com\r\n4699c4699\r\n<      LOCATION:Conference Room - F123, Bldg. 002\r\n- ---\r\n>      LOCATION:Conference Room - F123\\, Bldg. 002\r\n4702c4702\r\n<       Conference Room - F123, Bldg. 002\r\n- ---\r\n>       Conference Room - F123\\, Bldg. 002\r\n7626c7626\r\n<       Atlanta, Georgia END:VEVENT END:VCALENDAR\r\n- ---\r\n>       Atlanta\\, Georgia END:VEVENT END:VCALENDAR\r\n7760c7760\r\n<      CATEGORY:Project Report, XYZ, Weekly Meeting\r\n- ---\r\n>      CATEGORIES:Project Report,XYZ,Weekly Meeting\r\n7763c7763\r\n<      Definition\r\n- ---\r\n>        Definition\r\n7765c7765\r\n<       Participants: John Smith, Jane Doe, Jim Dandy\\n-It was\r\n- ---\r\n>       Participants: John Smith\\, Jane Doe\\, Jim Dandy\\n-It was\r\n", "submit_date": "2004-01-07", "submitter_name": "Dave Flater", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "434", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.7", "orig_text": "    Example:\r\n\r\n      ATTACH;FMTYPE=IMAGE/JPEG;ENCODING=BASE64;VALUE=BINARY:MIICajC\r\n       CAdOgAwIBAgICBEUwDQYJKoZIhvcNAQEEBQAwdzELMAkGA1UEBhMCVVMxLDA\r\n       qBgNVBAoTI05ldHNjYXBlIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMRw\r\n       <...remainder of \"BASE64\" encoded binary data...>", "correct_text": "    Example:\r\n\r\n      ATTACH;FMTTYPE=IMAGE/JPEG;ENCODING=BASE64;VALUE=BINARY:MIICajC\r\n               ^\r\n       CAdOgAwIBAgICBEUwDQYJKoZIhvcNAQEEBQAwdzELMAkGA1UEBhMCVVMxLDA\r\n       qBgNVBAoTI05ldHNjYXBlIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMRw\r\n       <...remainder of \"BASE64\" encoded binary data...>", "notes": "Typo in FMTTYPE.\r\n", "submit_date": "2005-10-10", "submitter_name": "Ryan King", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "435", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.18", "orig_text": "   ORGANIZER;SENT-BY:\"MAILTO:sray@host.com\":MAILTO:jsmith@host.com", "correct_text": "   ORGANIZER;SENT-BY=\"MAILTO:sray@host.com\":MAILTO:jsmith@host.com\n", "notes": "", "submit_date": "2003-01-11", "submitter_name": "Tilghman Lesher", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "436", "doc-id": "RFC2426", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nPage 33 says:", "orig_text": "   ;For name=\"CATEGORIES\"\r\n   param        = text-param\r\n        ; Only text parameters allowed\r\n\r\n   value        = text-list", "correct_text": "   ;For name=\"CATEGORIES\"\r\n   param        = text-param\r\n        ; Only text parameters allowed\r\n\r\n   value        = text-value-list\r\n", "notes": "", "submit_date": "2002-08-01", "submitter_name": "Vincent Ricard", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "437", "doc-id": "RFC2426", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   ;For name=\"NICKNAME\"\r\n   param        = text-param\r\n        ; Text parameters allowed\r\n   value        = text-list", "correct_text": "   ;For name=\"NICKNAME\"\r\n   param        = text-param\r\n        ; Text parameters allowed\r\n   value        = text-value-list\r\n", "notes": "", "submit_date": "2002-08-01", "submitter_name": "Vincent Ricard", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "438", "doc-id": "RFC2426", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nSection 4 (p. 33) says:", "orig_text": "  ;For name=\"CATEGORIES\"\r\n   param        = text-param\r\n        ; Only text parameters allowed\r\n\r\n   value        = text-list", "correct_text": "", "notes": "It should say:\r\n   ;For name=\"CATEGORIES\"\r\n   param        = text-param\r\n        ; Only text parameters allowed\r\n\r\n   value        = text-value-list\r\n</CORR>", "submit_date": "2002-08-01", "submitter_name": "Vincent Ricard", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "439", "doc-id": "RFC2426", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   ;For name=\"NICKNAME\"\r\n   param        = text-param\r\n        ; Text parameters allowed\r\n   value        = text-list", "correct_text": "   ;For name=\"NICKNAME\"\r\n   param        = text-param\r\n        ; Text parameters allowed\r\n   value        = text-value-list\r\n", "notes": "", "submit_date": "2002-08-01", "submitter_name": "Vincent Ricard", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "450", "doc-id": "RFC2396", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "   The query component is a string of information to be interpreted by\r\n   the resource.\r\n\r\n      query         = *uric\r\n\r\n   Within a query component, the characters \";\", \"/\", \"?\", \":\", \"@\",\r\n   \"&\", \"=\", \"+\", \",\", and \"$\" are reserved.", "correct_text": "", "notes": "   Section 3.4, \"Query Component\", of RFC 2396 (URI syntax)  refers to the \r\n   \"/\" character as being reserved.\r\n\r\n   Reserving this character creates an inconsistency for some of today's \r\n   web servers, which confuse part of the Query Component as being part of \r\n   the Path Component when the \"/\" character is present in the Query\r\n   Component.\r\n\r\n   The \"/\" character should only be permitted in the Path Component of a \r\n   URI, and elsewhere in the URI it should be escaped by using it's hex\r\n   value.\r\n", "submit_date": "2001-04-26", "submitter_name": "Carl Douglas", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "451", "doc-id": "RFC2396", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.2", "orig_text": "   A URN differs from a URL in that it's primary purpose is persistent\n   labeling of a resource with an identifier.", "correct_text": "   A URN differs from a URL in that its primary purpose is persistent\n   labeling of a resource with an identifier.\n", "notes": "", "submit_date": "2002-09-18", "submitter_name": "Marc Warne", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "496", "doc-id": "RFC2119", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   In particular, they MUST only be used where it is actually required\n   for interoperation or to limit behavior which has potential for\n   causing harm (e.g., limiting retransmisssions)  For example, they\n   must not be used to try to impose a particular method on\n   implementors where the method is not required for interoperability.   ", "correct_text": "   In particular, they MUST only be used where it is actually required\n   for interoperation or to limit behavior which has potential for\n   causing harm (e.g., limiting retransmissions).  For example, they\n   must not be used to try to impose a particular method on\n   implementors where the method is not required for interoperability.\n", "notes": "", "submit_date": "2001-01-31", "submitter_name": "Kurt Zeilenga", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "577", "doc-id": "RFC792", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "On p. 16 and 18, it says:", "orig_text": "   IP Fields:\r\n\r\n   Type", "correct_text": "   ICMP Fields:\r\n\r\n   Type", "notes": "On page 16, the section 'Timestamp and Timestamp Reply Messages' has\r\nthe header 'IP Fields:' - first mentioned after the graph and then\r\nagain after 'Addresses'.  The second one should actually be 'ICMP\r\nFields:'.  This error also occurs in the discussion of the\r\n'Information Request and Information Reply Message' on page 18.   \r\n\r\nThe second 'IP Fields:' section of these two sets of message\r\ndescriptions are really talking about fields in the ICMP header not\r\nthe IP header.\r\n\r\n[This report was updated 2009-03-11 to specify the original and corrected text, as indicated by Nikolai Malykh.]", "submit_date": "2002-09-09", "submitter_name": "Beren Sanders", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "440", "doc-id": "RFC2421", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "    Date: Mon, 26 Aug 93 10:20:20 -0700 (CDT)\r\n    MIME-Version: 1.0  (Voice 2.0)\r\n    Content-type: Multipart/Voice-Message; Version=2.0;\r\n      Boundary=\"MessageBoundary\"\r\n    Content-Transfer-Encoding: 7bit\r\n    Message-ID: ABCD-123456789@VM2.mycompany.com\r\n\r\n    --MessageBoundary\r\n    Content-type: Audio/32KADPCM\r\n    Content-Transfer-Encoding: Base64\r\n    Content-Disposition: inline; voice=Originator-Spoken-Name\r\n    Content-Language: en-US\r\n    Content-ID: part3@VM2-4321", "correct_text": "    Date: Thu, 26 Aug 1993 10:20:20 -0700 (CDT)\r\n    MIME-Version: 1.0  (Voice 2.0)\r\n    Content-type: Multipart/Voice-Message; Version=2.0;\r\n      Boundary=\"MessageBoundary\"\r\n    Content-Transfer-Encoding: 7bit\r\n    Message-ID: <ABCD-123456789@VM2.mycompany.com>\r\n\r\n    --MessageBoundary\r\n    Content-type: Audio/32KADPCM\r\n    Content-Transfer-Encoding: Base64\r\n    Content-Disposition: inline; voice=Originator-Spoken-Name\r\n    Content-Language: en-US\r\n    Content-ID: <part3@VM2-4321.mycompany.com>", "notes": "Date inconsistency. 4-digit year. Message-ID, Content-ID\r\nsyntax (missing <>) and semantics.", "submit_date": "2002-01-06", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "441", "doc-id": "RFC2421", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "\r\nAppendix B says:", "orig_text": "   SOUND;TYPE=32KADPCM;ENCODING=URI: CID:<part1@VM2-4321>\r\n   REV:19951031T222710Z\r\n   VERSION: 3.0\r\n   END:VCARD\r\n\r\n   --MessageBoundary_\r\n", "correct_text": "   SOUND;TYPE=32KADPCM;ENCODING=URI: CID:<part1@VM2-4321>\r\n   REV:19951031T222710Z\r\n   VERSION: 3.0\r\n   END:VCARD\r\n\r\n   --MessageBoundary--", "notes": " RFC 2046 multipart message close delimiter syntax.", "submit_date": "2002-01-07", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "442", "doc-id": "RFC2421", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "Date: Mon, 26 Aug 93 10:20:20 -0700 (CDT)\r\n   MIME-Version: 1.0  (Voice 2.0)\r\n   Content-type: Multipart/Voice-Message; Version=2.0;\r\n     Boundary=\"MessageBoundary\"\r\n   Content-Transfer-Encoding: 7bit\r\n   Message-ID: 123456789@VM2.mycompany.com\r\n   Sensitivity: Private\r\n   Importance: High\r\n\r\n   --MessageBoundary\r\n   Content-type: Audio/32KADPCM\r\n   Content-Transfer-Encoding: Base64\r\n   Content-Disposition: inline; voice=Originator-Spoken-Name\r\n   Content-Language: en-US\r\n   Content-ID: part1@VM2-4321", "correct_text": "Date: Thu, 26 Aug 1993 10:20:20 -0700 (CDT)\r\n   MIME-Version: 1.0  (Voice 2.0)\r\n   Content-type: Multipart/Voice-Message; Version=2.0;\r\n     Boundary=\"MessageBoundary\"\r\n   Content-Transfer-Encoding: 7bit\r\n   Message-ID: <123456789@VM2.mycompany.com>\r\n   Sensitivity: Private\r\n   Importance: High\r\n\r\n   --MessageBoundary\r\n   Content-type: Audio/32KADPCM\r\n   Content-Transfer-Encoding: Base64\r\n   Content-Disposition: inline; voice=Originator-Spoken-Name\r\n   Content-Language: en-US\r\n   Content-ID: <part1@VM2-4321.mycompany.com>", "notes": "Date inconsistency. 4-digit year number.\r\nMessage-ID syntax error (angle brackets required); likewise\r\nfor Content-ID.  In addition, Content-ID requires a fully-qualified\r\ndomain name as it must be world-unique, like a Message-ID.\r\nRFC 1911 section 12 has a similar example with similar errors\r\nin the date and message-id fields.", "submit_date": "2002-01-06", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "443", "doc-id": "RFC2421", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.4", "orig_text": "Date: Wed, 28 Jul 96 10:08:49 -0800 (PST)", "correct_text": "Date: Sun, 28 Jul 1996 10:08:49 -0800 (PST)", "notes": "RFC 822, section 5.2 prohibits date inconsistency\r\nbetween day-of-week and date (see also RFC 2822, sect. 3.3).\r\nRFC 1123 section 5.2.14 strongly encourages use of 4-digit\r\nyear numbers; RFC 2822 mandates them. These errors also appear\r\nin RFC 1911 section 4.2.", "submit_date": "2002-01-06", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "444", "doc-id": "RFC2421", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "|   Date: Mon, 26 Aug 93 8:23:10 -0500 (EST)\r\n    Content-type: Multipart/Voice-Message; Version=2.0;\r\n      Boundary=\"MessageBoundary2\"\r\n    Content-Transfer-Encoding: 7bit\r\n    MIME-Version: 1.0  (Voice 2.0)\r\n\r\n    --MessageBoundary2\r\n    Content-type: Audio/32KADPCM\r\n    Content-Transfer-Encoding: Base64\r\n    Content-Disposition: inline; voice=Originator-Spoken-Name\r\n    Content-Language: en-US\r\n|   Content-ID: part6@VM2-4321\r\n", "correct_text": "|   Date: Thu, 26 Aug 1993 8:23:10 -0500 (EST)\r\n    Content-type: Multipart/Voice-Message; Version=2.0;\r\n      Boundary=\"MessageBoundary2\"\r\n    Content-Transfer-Encoding: 7bit\r\n    MIME-Version: 1.0  (Voice 2.0)\r\n\r\n    --MessageBoundary2\r\n    Content-type: Audio/32KADPCM\r\n    Content-Transfer-Encoding: Base64\r\n    Content-Disposition: inline; voice=Originator-Spoken-Name\r\n    Content-Language: en-US\r\n|   Content-ID: <part6@VM2-4321.mycompany.com>", "notes": "Date inconsistency. 4-digit year. Content-ID syntax (missing <>) and\r\nsemantics (need to use fully qualified domain name).\r\n\r\n", "submit_date": "2002-01-06", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "445", "doc-id": "RFC2421", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "15", "orig_text": "    Content-type: message/disposition-notification\r\n\r\n    Reporting-UA: gregs-laptop.dallas.company.com (Unified FooMail 3.0)\r\n\r\n    Original-Recipient: rfc822;22722@vm.company.com", "correct_text": "    Content-type: message/disposition-notification\r\n\r\n    Reporting-UA: gregs-laptop.dallas.company.com (Unified FooMail 3.0)\r\n    Original-Recipient: rfc822;22722@vm.company.com", "notes": " RFC 2298 does not permit extra CRLFs between fields\r\nin a MDN.  See the BNF in RFC 2298 section 3 (note that the CRLFs\r\nthere are the ones that terminate each header field).", "submit_date": "2002-01-31", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "446", "doc-id": "RFC2421", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Appendix B: ", "orig_text": "   SOUND;TYPE=32KADPCM;ENCODING=URI: CID:<part1@VM2-4321>\n   REV:19951031T222710Z\n   VERSION: 3.0\n   END:VCARD\n\n   --MessageBoundary_", "correct_text": "   SOUND;TYPE=32KADPCM;ENCODING=URI: CID:<part1@VM2-4321>\n   REV:19951031T222710Z\n   VERSION: 3.0\n   END:VCARD\n\n   --MessageBoundary--\n", "notes": "", "submit_date": "2002-01-07", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "447", "doc-id": "RFC2421", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15", "orig_text": "     Date: Mon, 26 Aug 93 8:23:10 -0500 (EST)", "correct_text": "     Date: Mon, 26 Aug 93 08:23:10 -0500 (EST)\n", "notes": "", "submit_date": "2003-10-04", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "448", "doc-id": "RFC2417", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   IMPORTS\n       MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP\n           FROM SNMPv2-CONF\n       snmpModules, MODULE-IDENTITY, NOTIFICATION-TYPE, Counter32,\n           Integer32, Unsigned32, OBJECT-TYPE, IpAddress\n           FROM SNMPv2-SMI", "correct_text": "   IMPORTS\n       MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP\n           FROM SNMPv2-CONF\n       mib-2, MODULE-IDENTITY, NOTIFICATION-TYPE, Counter32,\n           Integer32, Unsigned32, OBJECT-TYPE, IpAddress\n           FROM SNMPv2-SMI\n", "notes": "", "submit_date": "2003-08-11", "submitter_name": "C. M. Heard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "452", "doc-id": "RFC2396", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C ", "orig_text": "C.1.  Normal Examples\r\n       ...\r\n      ?y            =  http://a/b/c/?y\r\n       ...\r\n", "correct_text": "", "notes": "Appendix C shows an example of a relative URI Reference of \"?y\" with \r\nrespect to the base URI \"http://a/b/c/d;p?q\".  However, according to the \r\ncollected syntax that appears in Appendix A, \"?y\" doesn't appear to be a \r\nvalid relative URI reference.  The syntactic category URI-reference must \r\nbegin with an absoluteURI, a relativeURI or a pound sign.  An absoluteURI \r\nbegins with a scheme, which cannot begin with a question mark; a \r\nrelativeURI begins with a net_path or abs_path, both of which begin with a \r\nslash, or with a rel_path.  A rel_path begins with a non-empty \r\nrel_segment, which again cannot begin with a question mark.\r\n\r\n\r\nAlexey: this was fixed in RFC 3986 (the example is correct).\r\n\r\n", "submit_date": "2001-11-12", "submitter_name": "Henry Zongaro", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "453", "doc-id": "RFC2395", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "-", "correct_text": "   [Deutsch96] Deutsch, P., \"DEFLATE Compressed Data Format\r\n               Specification version 1.3\", RFC 1951, May 1996.", "notes": "the above reference (cited in Section 5) should appear.", "submit_date": "2000-08-30", "submitter_name": "John Border", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "454", "doc-id": "RFC2392", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   example, \"cid:foo4%25foo1@bar.net\" corresponds to\n\n     Content-ID: <foo4%25foo1@bar.net>", "correct_text": "   example, \"cid:foo4%25foo1@bar.net\" corresponds to\n\n     Content-ID: <foo4%foo1@bar.net>\n", "notes": "", "submit_date": "2002-03-07", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "455", "doc-id": "RFC2373", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the reference: ", "orig_text": "   [TRAN]    Gilligan, R., and E. Nordmark, \"Transition Mechanisms for\n             IPv6 Hosts and Routers\", RFC 1993, April 1996.", "correct_text": "", "notes": "the RFC number cited is incorrect; it should be RFC 1933. \n", "submit_date": "2000-10-31", "submitter_name": "Tim Hutchinson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "456", "doc-id": "RFC2373", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": " It appears that the ABNF grammar for textual representations of IPv6 addresses as detailed in Appendix B of RFC 2373 is not correct in its treatment of IPv6 addresses with a trailing IPv4 address.  Specifically, section 2.2.3 of the RFC states that:", "orig_text": " \"::13.1.83.3\" \r\n", "correct_text": "      IPv6address = dcolon | hexpart\r\n\r\n      IPv4address = 1*3DIGIT \".\" 1*3DIGIT \".\" 1*3DIGIT \".\" 1*3DIGIT\r\n      IPv6prefix  = hexpart \"/\" 1*2DIGIT\r\n\r\n      dcolon  = \"::\" | \"::\" hexseq [ \":\" IPv4address ] | \"::\" [ IPv4address ]\r\n      hexpart = hexseq | hexseq \":\" IPv4address | hexseq dcolon\r\n      hexseq  = hex4 *( \":\" hex4)\r\n      hex4    = 1*4HEXDIG", "notes": "According to the grammar in Appendix B, this is not a valid IPv6\r\naddress; there is no provision for a double colon followed by an IPv4\r\naddress.  However, the grammar does allow for a double colon, followed by\r\na colon, followed by an IPv4 address.  In other words, \":::13.1.83.3\" is a\r\nvalid address according to the grammar and \"::13.1.83.3\" is not.\r\n\r\nI blame the discrepancy on the grammar simply because I feel that the\r\nintent of the RFC was clearly to prefer two colons over three colons\r\nbefore a trailing IPv4 address.  This seems to match the behavior of\r\nexisting applications.\n --VERIFIER NOTES-- \nThis RFC has been replaced by RFC 3513   ", "submit_date": "2001-07-26", "submitter_name": "Mark Meiss", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "457", "doc-id": "RFC2362", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Throughout the document: ", "orig_text": "   [Figures are present only in the postscript version]", "correct_text": "", "notes": "There is no postscript version available. ", "submit_date": "2001-01-03", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "471", "doc-id": "RFC2236", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   Varying this setting allows IGMPv2 routers to tune the \"leave\r\n   latency\" (the time between the moment the last host leaves a group\r\n   and when the routing protocol is notified that there are no more\r\n   members), as discussed in section 7.8.  It also allows tuning of the\r\n   burstiness of IGMP traffic on a subnet, as discussed in section 7.3", "correct_text": "   Varying this setting allows IGMPv2 routers to tune the \"leave\r\n   latency\" (the time between the moment the last host leaves a group\r\n   and when the routing protocol is notified that there are no more\r\n   members), as discussed in section 8.8.  It also allows tuning of the\r\n   burstiness of IGMP traffic on a subnet, as discussed in section 8.3", "notes": "Section 2.2 2nd para refers to section 7.8 and 7.3 neither of which\r\nexist.  It should refer to 8.8 and 8.3.", "submit_date": "2006-11-28", "submitter_name": "Stephen Nadas (RL/TNT)", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "472", "doc-id": "RFC2234", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.9", "orig_text": "3.9  ; Comment\n\n   A semi-colon starts a comment that continues to the end of line.\n   This is a simple way of including useful notes in parallel with the\n   specifications.\n\n        comment        =  \";\" *(WSP / VCHAR) CRLF", "correct_text": "   char-val       =  DQUOTE *(%x20-21 / %x23-7E) DQUOTE\n                          ; quoted string of SP and VCHAR\n                             without DQUOTE\n\n   prose-val      =  \"<\" *(%x20-3D / %x3F-7E) \">\"\n                          ; bracketed string of SP and VCHAR\n                             without angles\n                          ; prose description, to be used as\n                             last resort\n\n   CHAR           =  %x01-7F\n                          ; any 7-bit US-ASCII character,\n                             excluding NUL", "notes": "Should be:\n    char-val       =  DQUOTE *(%x20-21 / %x23-7E) DQUOTE\n                          ; quoted string of SP and VCHAR\n                          ;  without DQUOTE\n\n   prose-val      =  \"<\" *(%x20-3D / %x3F-7E / c-wsp) \">\"\n                          ; bracketed, possibly multiline string\n                          ; of SP and VCHAR without angles\n                          ; prose description, to be used as\n                          ; last resort\n\n   CHAR           =  %x01-7F\n                          ; any 7-bit US-ASCII character,\n                          ;  excluding NUL\n\n", "submit_date": "2001-11-19", "submitter_name": "Tanaka Akira", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "473", "doc-id": "RFC2234", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "Note:   The following list of known errors in RFC 2234 is for\n        historical reference only.  All known errors in RFC 2234 are\n        believed to have been resolved in RFC 4234, which obsoletes RFC\n        2234.\n\n", "submit_date": "2006-12-13", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4741", "doc-id": "RFC6120", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "1.  The 'id' attribute is REQUIRED for IQ stanzas.\r\n\r\n\u2026\r\n\r\n3.  An entity that receives a stanza of type \"get\" or \"set\" MUST\r\n    reply with an IQ respones of type \"result\" or \"error\".  The\r\n    response MUST preserve the 'id' attribute of the request (or be\r\n    empty if the generated stanza did not include an 'id' attribute).", "correct_text": "1.  The 'id' attribute is REQUIRED for IQ stanzas.\r\n\r\n\u2026\r\n\r\n3.  An entity that receives a stanza of type \"get\" or \"set\" MUST\r\n    reply with an IQ respones of type \"result\" or \"error\".  The\r\n    response MUST preserve the 'id' attribute of the request, or\r\n    send an appropriate error if the generated stanza did not\r\n    include an 'id' attribute.", "notes": "If the received IQ had an empty ID then it was not valid per point 1 and clients and servers cannot key on the ID (eg. for key mapped lists of IQs pending receipt or dispatch of a reply). An appropriate error or other behavior should be defined if the 'id' is meant to be REQUIRED, otherwise, if point 3 is correct, then 'id' should not be REQUIRED.", "submit_date": "2016-07-13", "submitter_name": "Sam Whited", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "458", "doc-id": "RFC2327", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "      An example of a static payload type is u-law PCM coded single\r\n      channel audio sampled at 8KHz.  This is completely defined in the\r\n      RTP Audio/Video profile as payload type 0, so the media field for\r\n      such a stream sent to UDP port 49232 is:\r\n\r\n                            m=video 49232 RTP/AVP 0\r\n\r\n      An example of a dynamic payload type is 16 bit linear encoded\r\n      stereo audio sampled at 16KHz.  If we wish to use dynamic RTP/AVP\r\n      payload type 98 for such a stream, additional information is\r\n      required to decode it:\r\n\r\n                           m=video 49232 RTP/AVP 98", "correct_text": "      An example of a static payload type is u-law PCM coded single\r\n      channel audio sampled at 8KHz.  This is completely defined in the\r\n      RTP Audio/Video profile as payload type 0, so the media field for\r\n      such a stream sent to UDP port 49232 is:\r\n\r\n                            m=audio 49232 RTP/AVP 0\r\n\r\n      An example of a dynamic payload type is 16 bit linear encoded\r\n      stereo audio sampled at 16KHz.  If we wish to use dynamic RTP/AVP\r\n      payload type 98 for such a stream, additional information is\r\n      required to decode it:\r\n\r\n                           m=audio 49232 RTP/AVP 98", "notes": "The examples refer to audio but show the media type as \"video\".  I believe \r\nthe author intended to put \"m=audio\" but \"m=video\" was put in by mistake.", "submit_date": "2005-08-01", "submitter_name": "Richard Walters", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "459", "doc-id": "RFC2327", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the document, the following characters should be replaced with corrected text. ", "orig_text": "       '|' should be  '/'\n       '\"\"\"' and '\"' should be 'DQUOTE'\n       '0x01..0x09'  should be '%x01-09'\n", "correct_text": "", "notes": "The date reported was not recorded. The estimate is during 2000.", "submit_date": "2000-12-31", "submitter_name": "Not recorded", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3504", "doc-id": "RFC4948", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "As a result, not only is there no limit to what a host may do, but\r\nalso there is no trace after the event of what a host may have done.", "correct_text": "As a result, not only there is no limit to what a host may do, but \r\nalso there is no trace of what a host may have done.", "notes": "1. 'is' in the first part of the sentence is not at the correct place.\r\n\r\n2. 'after the event' is making the sentence improper.", "submit_date": "2013-03-01", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "474", "doc-id": "RFC2234", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "    prose-val      =  \"<\" *(%x20-3D / %x3F-7E / c-wsp) \">\"\r\n                           ; bracketed, possibly multiline string\r\n                           ; of SP and VCHAR without angles\r\n                           ; prose description, to be used as\r\n                           ; last resort", "correct_text": "    prose-val      =  \"<\" *(%x20-3D / %x3F-7E) \">\"\r\n                           ; bracketed string of SP and VCHAR\r\n                           ; without angles\r\n                           ; prose description, to be used as\r\n                           ; last resort\r\n", "notes": "Alexey: As per RFC 5234.\r\n", "submit_date": "2005-04-11", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "475", "doc-id": "RFC2234", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.7", "orig_text": "   That is, exactly <N> occurences of <element>.", "correct_text": "   That is, exactly <n> occurences of <element>.\n", "notes": "", "submit_date": "2002-12-13", "submitter_name": "El defeKto 2000", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "476", "doc-id": "RFC2231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   A single quote is used to separate the character set, language, and\n   actual value information in the parameter value string, and an\n   percent sign is used to flag octets encoded in hexadecimal.", "correct_text": "   A single quote is used to separate the character set, language, and\n   actual value information in the parameter value string, and a\n   percent sign is used to flag octets encoded in hexadecimal.\n", "notes": "", "submit_date": "2003-02-09", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "477", "doc-id": "RFC2231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "    extended-parameter := (extended-initial-name \"=\"\r\n                          extended-value) /\r\n                         (extended-other-names \"=\"\r\n                          extended-other-values)", "correct_text": "    extended-parameter := (extended-initial-name \"=\"\r\n                          extended-initial-value) /\r\n                         (extended-other-names \"=\"\r\n                          extended-other-values)\r\n\r\n", "notes": "", "submit_date": "2001-04-17", "submitter_name": "Shuhei KOBAYASHI", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "478", "doc-id": "RFC2231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   encoded-word := \"=?\" charset [\"*\" language] \"?\" encoded-text \"?=\"", "correct_text": "   encoded-word := \"=?\" charset [\"*\" language] \"?\" encoding \"?\"\n                   encoded-text \"?=\"\n", "notes": "", "submit_date": "2001-11-24", "submitter_name": "Jeffrey Stedfast", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "479", "doc-id": "RFC2213", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "            TimeInterval, TEXTUAL-CONVENTION, RowStatus,\r\n            TruthValue                               FROM SNMPv2-TC", "correct_text": "            TimeInterval, TEXTUAL-CONVENTION, RowStatus,\r\n            TruthValue, TestAndIncr            FROM SNMPv2-TC\r\n", "notes": "", "submit_date": "2005-09-12", "submitter_name": "Orly Nicklass", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "480", "doc-id": "RFC2202", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the Appendix, it says:\n", "orig_text": "           /**** Outter Digest ****/\n\n           SHAInit(&octx) ;\n\n           /* Pad the key for outter digest */", "correct_text": "           /**** Outer Digest ****/\n\n           SHAInit(&octx) ;\n\n           /* Pad the key for outer digest */", "notes": "\n", "submit_date": "2004-05-05", "submitter_name": "Deron Meranda", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "539", "doc-id": "RFC1771", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "Total Path Attribute Length:\n\n          This 2-octet unsigned integer indicates the total length of\n\t  the Path Attributes field in octets.  Its value must allow\n\t  the length of the Network Layer Reachability field to be\n\t  determined as specified below. \n\n          A value of 0 indicates that no Network Layer Reachability\n          Information field is present in this UPDATE message.", "correct_text": "          A value of 0 indicates that the Path Attributes field is\n\t  not present in this UPDATE message.\n", "notes": "", "submit_date": "2003-10-01", "submitter_name": "Pete Young", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "540", "doc-id": "RFC1724", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "            rip2IfConfAuthKey\n                OCTET STRING (SIZE(0..16)),", "correct_text": "            rip2IfConfAuthKey\n                OCTET STRING,\n", "notes": "", "submit_date": "2004-05-27", "submitter_name": "Orly Nicklass", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "578", "doc-id": "RFC791", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "Note that this is consistent with the the datagram total length field (of \r\ncourse, the header is counted in the total length and not in the \r\nfragments).", "correct_text": "Note that this is consistent with the datagram total length field (of \r\ncourse, the header is counted in the total length and not in the \r\nfragments).\r\n", "notes": "", "submit_date": "2006-02-18", "submitter_name": "Yin Shuming", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "461", "doc-id": "RFC2308", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "7.2 Dead / Unreachable Server (OPTIONAL)\r\n\r\n   Dead / Unreachable servers are servers that fail to respond in any\r\n   way to a query or where the transport layer has provided an\r\n   indication that the server does not exist or is unreachable.  A\r\n   server may be deemed to be dead or unreachable if it has not\r\n   responded to an outstanding query within 120 seconds.\r\n\r\n   Examples of transport layer indications are:\r\n\r\n      ICMP error messages indicating host, net or port unreachable.\r\n      TCP resets\r\n      IP stack error messages providing similar indications to those above.\r\n\r\n   A server MAY cache a dead server indication.  If it does so it MUST\r\n   NOT be deemed dead for longer than five (5) minutes.  The indication\r\n   MUST be stored against query tuple <query name, type, class, server\r\n   IP address> unless there was a transport layer indication that the\r\n   server does not exist, in which case it applies to all queries to\r\n   that specific IP address.", "correct_text": "7.2 Dead / Unreachable Server (OPTIONAL)\r\n\r\n   Dead / Unreachable servers are servers that fail to respond in any\r\n   way to a query or where the transport layer has provided an\r\n   indication that the server does not exist or is unreachable.  A\r\n   server may be deemed to be dead or unreachable if it has not\r\n   responded to an outstanding query within 120 seconds.\r\n\r\n   Examples of transport layer indications are:\r\n\r\n      ICMP error messages indicating host, net or port unreachable.\r\n      TCP resets\r\n      IP stack error messages providing similar indications to those above.\r\n\r\n   A resolver MAY cache a dead server indication.  If it does so it MUST\r\n   NOT be deemed dead for longer than five (5) minutes.  The indication\r\n   MUST be stored against query tuple <query name, type, class, server\r\n   IP address> unless there was a transport layer indication that the\r\n   server does not exist, in which case it applies to all queries to\r\n   that specific IP address.", "notes": "Last sentence says, \"A server MAY cache a dead server indication.\".\r\nBut, this \"server\" is typo, I think.\r\nThis \"server\" should be \"resolver\" because section 7.1's last sentence uses \"resolver\".", "submit_date": "2006-02-01", "submitter_name": "Hideshi Enokihara", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "462", "doc-id": "RFC2307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "        ( nisSchema.2.4 NAME 'ipProtocol' SUP top STRUCTURAL\r\n          DESC 'Abstraction of an IP protocol. Maps a protocol number\r\n                to one or more names. The distinguished value of the cn\r\n                attribute denotes the protocol's canonical name'\r\n          MUST ( cn $ ipProtocolNumber $ description )\r\n          MAY description )", "correct_text": "        ( nisSchema.2.4 NAME 'ipProtocol' SUP top STRUCTURAL\r\n          DESC 'Abstraction of an IP protocol. Maps a protocol number\r\n                to one or more names. The distinguished value of the cn\r\n                attribute denotes the protocol's canonical name'\r\n          MUST ( cn $ ipProtocolNumber )\r\n          MAY description )\r\n", "notes": "", "submit_date": "2004-11-25", "submitter_name": "Pierre Beyssac", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "463", "doc-id": "RFC2286", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the Appendix: ", "orig_text": "/* The HMAC_SHA1 transform looks like:", "correct_text": "/* The HMAC_RMD160 transform looks like:\r\n\r\n ", "notes": "", "submit_date": "2002-09-17", "submitter_name": "Kevin Springle", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "464", "doc-id": "RFC2281", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "Section 2, \"Conditions of Use\" was mistakenly included in the\ndocument and is incorrect.\n\nCurrent information on ownership claims for protocols documented\nin RFCs is available from http://www.ietf.org/ietf/IPR.\n", "submit_date": "2003-05-22", "submitter_name": "Bob Braden", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "465", "doc-id": "RFC2268", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   RC2Version ::= INTEGER -- 1-1024\n\n   RC2 in CBC mode has two parameters: an 8-byte initialization vector\n   (IV) and a version number in the range 1-1024 which specifies in a\n   roundabout manner the number of effective key bits to be used for\n   the RC2 encryption/decryption.", "correct_text": "   RC2Version ::= INTEGER -- 0-1024\n\n   RC2 in CBC mode has two parameters: an 8-byte initialization vector\n   (IV) and a version number in the range 0-1024 which specifies in a\n   roundabout manner the number of effective key bits to be used for\n   the RC2 encryption/decryption.\n", "notes": "", "submit_date": "2001-10-17", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "466", "doc-id": "RFC2254", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   greater = \">=\"", "correct_text": "   greater than or equal = \">=\"\n", "notes": "", "submit_date": "2002-10-30", "submitter_name": "Charles Bates", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "467", "doc-id": "RFC2252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.33", "orig_text": "        ruleidentifiers = ruleidentifier |", "correct_text": "        ruleidentifiers = ruleidentifier /", "notes": "\r\n", "submit_date": "2003-10-15", "submitter_name": "Mark Wahl", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "468", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "return-metadata = nil / string / value-list / acl", "correct_text": "return-metadata = nil / string / number / value-list / acl\r\n                ;; number is only used for \"size\" metadata items\r\n                ;; acl is only used for \"acl\" metadata items\r\n", "notes": "Bug/clarification in formal syntax (where it doesn't match examples).\r\n   \r\n\r\n", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "469", "doc-id": "RFC2421", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15", "orig_text": "   Content-type: message/disposition-notification\n\n   Reporting-UA: gregs-laptop.dallas.company.com (Unified FooMail 3.0)\n\n   Original-Recipient: rfc822;22722@vm.company.com", "correct_text": "   Content-type: message/disposition-notification\n\n   Reporting-UA: gregs-laptop.dallas.company.com (Unified FooMail 3.0)\n   Original-Recipient: rfc822;22722@vm.company.com\n", "notes": "", "submit_date": "2002-01-31", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "470", "doc-id": "RFC2236", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "        These two messages are differentiated by the Group Address, as\r\n        described in section 1.4 .  Membership Query messages are\r\n        referred to simply as \"Query\" messages.\r\n", "correct_text": "        These two messages are differentiated by the Group Address, as\r\n        described in section 2.4 .  Membership Query messages are\r\n        referred to simply as \"Query\" messages.\r\n", "notes": " ", "submit_date": "2004-12-17", "submitter_name": "Jesse Norell", "verifier_id": "", "verifier_name": "Ross Callon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "492", "doc-id": "RFC2126", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "All errata for these documents can be found at: http://purl.org/net/http-errata\r\n\r\n----------------------\r\nThis report was mistakenly posted based on a typo (2126 vs. 2616) \r\nin a message from 2002, and thus has been rejected. ", "submit_date": "2002-03-21", "submitter_name": "Larry Masinter", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "493", "doc-id": "RFC2119", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "2. MUST NOT   This phrase, or the phrase \"SHALL NOT\", mean that the\r\n   definition is an absolute prohibition of the specification.", "correct_text": "2. MUST NOT   This phrase, or the phrase \"SHALL NOT\", means that the\r\n   definition is an absolute prohibition of the specification.\r\n", "notes": "", "submit_date": "2001-05-31", "submitter_name": "Davidson, Malcolm", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "494", "doc-id": "RFC2119", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "(e.g., limiting retransmisssions)", "correct_text": "(e.g., limiting retransmissions)", "notes": "", "submit_date": "2001-05-31", "submitter_name": "Davidson, Malcolm", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "481", "doc-id": "RFC2202", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   test_case =     7\n   key =           0xaa repeated 80 times\n   key_len =       80\n   data =          \"Test Using Larger Than Block-Size Key and Larger\n                   Than One Block-Size Data\"\n   data_len =      73\n   digest =        0xe8e99d0f45237d786d6bbaa7965c7808bbff1a91\n   data_len =      20\n   digest =        0x4c1a03424b55e07fe7f27be1d58bb9324a9a5a04\n   digest-96 =     0x4c1a03424b55e07fe7f27be1\n\n   test_case =     6\n   key =           0xaa repeated 80 times\n   key_len =       80\n   data =          \"Test Using Larger Than Block-Size Key - Hash Key\n   First\"\n   data_len =      54\n   digest =        0xaa4ae5e15272d00e95705637ce8a3b55ed402112\n   \n   test_case =     7\n   key =           0xaa repeated 80 times\n   key_len =       80\n   data =          \"Test Using Larger Than Block-Size Key and Larger\n                   Than One Block-Size Data\"\n   data_len =      73\n   digest =        0xe8e99d0f45237d786d6bbaa7965c7808bbff1a91", "correct_text": "   test_case =     7\n   key =           0xaa repeated 80 times\n   key_len =       80\n   data =          \"Test Using Larger Than Block-Size Key and Larger\n                   Than One Block-Size Data\"\n   data_len =      73\n   digest =        0xe8e99d0f45237d786d6bbaa7965c7808bbff1a91\n", "notes": "", "submit_date": "2002-09-17", "submitter_name": "Kevin Springle", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "482", "doc-id": "RFC2196", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "On page 21, it says:", "orig_text": "A firewall is any one of several mechanisms used to control and watch\r\naccess to and from a network for the purpose of protecting it.  A\r\nfirewall acts as a gateway through which all traffic to and from the\r\nprotected network and/or systems passes.  Firewalls help to place\r\nlimitations on the amount and type of communication that takes place\r\nbetween the protected network and the another network (e.g., the\r\nInternet, or another piece of the site's network).", "correct_text": "A firewall is any one of several mechanisms used to control and watch\r\naccess to and from a network for the purpose of protecting it.  A\r\nfirewall acts as a gateway through which all traffic to and from the\r\nprotected network and/or systems passes.  Firewalls help to place\r\nlimitations on the amount and type of communication that takes place\r\nbetween the protected network and another network (e.g., the\r\nInternet, or another piece of the site's network).", "notes": "removed extraneous \"the\".", "submit_date": "2004-10-13", "submitter_name": "IETF Secretariat", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "483", "doc-id": "RFC2192", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "     imessagelist     = enc_mailbox [ \"?\" enc_search ] [uidvalidity]", "correct_text": "     imessagelist     = enc_mailbox [uidvalidity] [ \"?\" enc_search ]", "notes": "Wrong order of fields", "submit_date": "2005-02-09", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "484", "doc-id": "RFC2184", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   This specification changes this ABNF to:\r\n\r\n   encoded-word := \"=?\" charset [\"*\" language] \"?\" encoded-text \"?=\"", "correct_text": "   This specification changes this ABNF to:\r\n\r\n   encoded-word := \"=?\" charset [\"*\" language] \"?\" encoding \"?\"\r\n                   encoded-text \"?=\"\r\n", "notes": "", "submit_date": "2001-04-14", "submitter_name": "Terje Braten", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "485", "doc-id": "RFC2183", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   NOTE ON PARAMETER VALUE LENGHTS: A short (length <= 78 characters)", "correct_text": "   NOTE ON PARAMETER VALUE LENGTHS: A short (length <= 78 characters)\n", "notes": "", "submit_date": "2002-01-05", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "486", "doc-id": "RFC2132", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.6", "orig_text": "    Code   Len  Type\n   +-----+-----+-----+\n   |  53 |  1  | 1-9 |\n   +-----+-----+-----+", "correct_text": "    Code   Len  Type\n   +-----+-----+-----+\n   |  53 |  1  | 1-8 |\n   +-----+-----+-----+\n", "notes": "", "submit_date": "2001-12-12", "submitter_name": "George V. Neville-Neil", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "487", "doc-id": "RFC2132", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.18", "orig_text": "3.18. Swap Server\r\n\r\n   This specifies the IP address of the client's swap server.\r\n\r\n   The code for this option is 16 and its length is 4.\r\n\r\n    Code   Len    Swap Server Address\r\n   +-----+-----+-----+-----+-----+-----+\r\n   |  16 |  n  |  a1 |  a2 |  a3 |  a4 |\r\n   +-----+-----+-----+-----+-----+-----+", "correct_text": "3.18. Swap Server\r\n\r\n   This specifies the IP address of the client's swap server.\r\n\r\n   The code for this option is 16 and its length is 4.\r\n\r\n    Code   Len    Swap Server Address\r\n   +-----+-----+-----+-----+-----+-----+\r\n   |  16 |  4  |  a1 |  a2 |  a3 |  a4 |\r\n   +-----+-----+-----+-----+-----+-----+\r\n", "notes": "", "submit_date": "2002-09-24", "submitter_name": "\"Tyler Tidman\"", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "488", "doc-id": "RFC2131", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "In other related work, the path minimum transmission unit (MTU) discovery\r\nalgorithm can determine the MTU of an arbitrary internet path [14].", "correct_text": "In other related work, the path maximum transmission unit (MTU) discovery\r\nalgorithm can determine the MTU of an arbitrary internet path [14].\r\n", "notes": "", "submit_date": "2006-03-23", "submitter_name": "Robert Floyd Jr", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "489", "doc-id": "RFC2131", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1 number 5", "orig_text": "     The client times out and retransmits the DHCPREQUEST message if the\r\n     client receives neither a DHCPACK or a DHCPNAK message.  \r\n     ...\r\n     If the client\r\n     receives neither a DHCPACK or a DHCPNAK message after employing the\r\n     retransmission algorithm, the client reverts to INIT state and\r\n     restarts the initialization process. ", "correct_text": "     The client times out and retransmits the DHCPREQUEST message if the\r\n     client receives neither a DHCPACK nor a DHCPNAK message.  \r\n     ...\r\n     If the client\r\n     receives neither a DHCPACK nor a DHCPNAK message after employing the\r\n     retransmission algorithm, the client reverts to INIT state and\r\n     restarts the initialization process. ", "notes": "\r\n\r\n", "submit_date": "2004-04-29", "submitter_name": "Soohong Daniel Park", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "490", "doc-id": "RFC2131", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "Normally, DHCP servers and BOOTP relay agents attempt to deliver\r\nDHCPOFFER, DHCPACK and DHCPNAK messages directly to the client using\r\nuicast delivery.", "correct_text": "Normally, DHCP servers and BOOTP relay agents attempt to deliver\r\nDHCPOFFER, DHCPACK and DHCPNAK messages directly to the client using\r\nunicast delivery.", "notes": "typo (uicast -> unicast). Updated 2013-06-05. Thanks to Carlos Prendes for the correction.", "submit_date": "2004-01-13", "submitter_name": "Sreeni R. Nair", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "491", "doc-id": "RFC2127", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "All errata for these documents can be found at: http://purl.org/net/http-errata\r\n\r\n----------------------\r\nThis report was mistakenly posted based on a typo (2127 vs. 2617) \r\nin a message from 2002, and thus has been rejected. ", "submit_date": "2002-03-21", "submitter_name": "Larry Masinter", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4742", "doc-id": "RFC7530", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "section-6.2.", "orig_text": "https://tools.ietf.org/html/rfc7530#section-6.2.1\r\n\r\n   The client can use the OPEN or ACCESS\r\n   operations to check access without modifying or reading data or\r\n   metadata.", "correct_text": "   The client can use the OPEN or ACCESS\r\n   operations to check access without modifying or reading data.", "notes": "Whenever client does OPEN/ACCESS call, there is an inadvertent change in the Last Access time of the file. Hence we think that the Metadata is modified due to OPEN/ACCESS call.  Hence the Suggestion is to change the text as above.", "submit_date": "2016-07-15", "submitter_name": "Manju Karthik", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "497", "doc-id": "RFC2119", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "3. SHOULD   This word, or the adjective \"RECOMMENDED\", mean that there\r\n   may exist valid reasons in particular circumstances to ignore a\r\n   particular item, but the full implications must be understood and\r\n   carefully weighed before choosing a different course.\r\n\r\n4. SHOULD NOT   This phrase, or the phrase \"NOT RECOMMENDED\" mean that\r\n   there may exist valid reasons in particular circumstances when the\r\n   particular behavior is acceptable or even useful, but the full\r\n   implications should be understood and the case carefully weighed\r\n   before implementing any behavior described with this label.", "correct_text": "3. SHOULD   This word, or the adjective \"RECOMMENDED\", mean that there\r\n   may exist valid reasons in particular circumstances to ignore a\r\n   particular item, but the full implications should be understood and\r\n   carefully weighed before choosing a different course.\r\n\r\n4. SHOULD NOT   This phrase, or the phrase \"NOT RECOMMENDED\" mean that\r\n   there may exist valid reasons in particular circumstances when the\r\n   particular behavior is acceptable or even useful, but the full\r\n   implications should be understood and the case carefully weighed\r\n   before implementing any behavior described with this label.", "notes": "OR should say:\r\n 3. SHOULD   This word, or the adjective \"RECOMMENDED\", mean that there\r\n   may exist valid reasons in particular circumstances to ignore a\r\n   particular item, but the full implications is understood and\r\n   carefully weighed before choosing a different course.\r\n\r\n4. SHOULD NOT   This phrase, or the phrase \"NOT RECOMMENDED\" mean that\r\n   there may exist valid reasons in particular circumstances when the\r\n   particular behavior is acceptable or even useful, but the full\r\n   implications should be understood and the case carefully weighed\r\n   before implementing any behavior described with this label.\r\n\r\n\r\nThe change request is \"must\" to \"should\".\r\nIt may be self definition.\r\nFor the balance of SHOULD and SHOULD NOT , it should use \"should\", not\r\n\"must\". \n --VERIFIER NOTES-- \nThe full implications MUST be understood in order to ignore a \"SHOULD\" or \"SHOULD NOT\" statement in a specification.   ", "submit_date": "2006-07-10", "submitter_name": "Kiyoshi Ogawa", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "498", "doc-id": "RFC2119", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "4. SHOULD NOT   This phrase, or the phrase \"NOT RECOMMENDED\" mean that\r\n   there may exist valid reasons in particular circumstances when the\r\n   particular behavior is acceptable or even useful, but the full\r\n   implications should be understood and the case carefully weighed\r\n   before implementing any behavior described with this label.", "correct_text": "4. SHOULD NOT   This phrase, or the phrase \"NOT RECOMMENDED\", means that\r\n   there may exist valid reasons in particular circumstances when the\r\n   particular behavior is acceptable or even useful, but the full\r\n   implications should be understood and the case carefully weighed\r\n   before implementing any behavior described with this label.\r\n", "notes": "", "submit_date": "2001-05-31", "submitter_name": "Davidson, Malcolm", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "499", "doc-id": "RFC2119", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "       The key words \"MUST\", \"MUST NOT\", \"REQUIRED\", \"SHALL\", \"SHALL\r\n       NOT\", \"SHOULD\", \"SHOULD NOT\", \"RECOMMENDED\",  \"MAY\", and\r\n       \"OPTIONAL\" in this document are to be interpreted as described in\r\n       RFC 2119.", "correct_text": "       The key words \"MUST\", \"MUST NOT\", \"REQUIRED\", \"SHALL\", \"SHALL\r\n       NOT\", \"SHOULD\", \"SHOULD NOT\", \"RECOMMENDED\", \"NOT \r\n       RECOMMENDED\",  \"MAY\", and \"OPTIONAL\" in this document are to \r\n       be interpreted as described in RFC 2119.", "notes": "The phrase \"NOT RECOMMENDED\" is missing from this sentence.", "submit_date": "2006-01-09", "submitter_name": "Anders Langmyr", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "500", "doc-id": "RFC2119", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "3. SHOULD   This word, or the adjective \"RECOMMENDED\", mean that there\r\n   may exist valid reasons in particular circumstances to ignore a\r\n   particular item, but the full implications must be understood and\r\n   carefully weighed before choosing a different course.", "correct_text": "3. SHOULD   This word, or the adjective \"RECOMMENDED\", means that there\r\n   may exist valid reasons in particular circumstances to ignore a\r\n   particular item, but the full implications must be understood and\r\n   carefully weighed before choosing a different course.\r\n", "notes": "", "submit_date": "2001-05-31", "submitter_name": "Davidson, Malcolm", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "501", "doc-id": "RFC2104", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "        MD5Update(&context, k_ipad, 64)      /* start with inner pad */\r\n", "correct_text": "        MD5Update(&context, k_ipad, 64);     /* start with inner pad */\r\n", "notes": " \r\n", "submit_date": "2005-06-23", "submitter_name": "Gregory Ogonowski", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "502", "doc-id": "RFC2092", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.", "orig_text": "   Triggered RIP will NOT fuction properly (and should NOT be used) if a\n   routing information will be retained/advertised for an arbitrarily\n   long period of time (until an update in the opposite direction fails\n   to obtain a response).", "correct_text": "   Triggered RIP will NOT function properly (and should NOT be used) if a\n   routing information will be retained/advertised for an arbitrarily\n   long period of time (until an update in the opposite direction fails\n   to obtain a response).\n", "notes": "", "submit_date": "2004-03-30", "submitter_name": "Kwan Jong Yoo", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "503", "doc-id": "RFC2060", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.8", "orig_text": "   Example:    C: A999 UID FETCH 4827313:4828442 FLAGS\n               S: * 23 FETCH (FLAGS (\\Seen) UID 4827313)\n               S: * 24 FETCH (FLAGS (\\Seen) UID 4827943)\n               S: * 25 FETCH (FLAGS (\\Seen) UID 4828442)\n               S: A999 UID FETCH completed", "correct_text": "   Example:    C: A999 UID FETCH 4827313:4828442 FLAGS\n               S: * 23 FETCH (FLAGS (\\Seen) UID 4827313)\n               S: * 24 FETCH (FLAGS (\\Seen) UID 4827943)\n               S: * 25 FETCH (FLAGS (\\Seen) UID 4828442)\n               S: A999 OK UID FETCH completed", "notes": "A list of known errata can be found at: ftp://ftp.cac.washington.edu/mail/rfc2060-errata ", "submit_date": "2002-05-28", "submitter_name": "Mathieu Fenniak", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "554", "doc-id": "RFC1319", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   Padding is performed as follows: \"i\" bytes of value \"i\" are appended\n   to the message so that the length in bytes of the padded message\n   becomes congruent to 0, modulo 16. At least one byte and at most 16\n   16 bytes are appended.", "correct_text": "   Padding is performed as follows: \"i\" bytes of value \"i\" are appended\n   to the message so that the length in bytes of the padded message\n   becomes congruent to 0, modulo 16. At least one byte and at most \n   16 bytes are appended.\n", "notes": "", "submit_date": "2002-01-30", "submitter_name": "Jem Berkes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "579", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "On page 21, it says:", "orig_text": "The intitial contents of the route data area must be zero.", "correct_text": "The initial contents of the route data area must be zero.", "notes": "", "submit_date": "2004-06-16", "submitter_name": "Pavel Uvarov", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "580", "doc-id": "RFC783", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "Any transsfer begins with a request to read or write a file, which also \r\nserves to request a connection.", "correct_text": "Any transfer begins with a request to read or write a file, which also \r\nserves to request a connection.", "notes": "from pending", "submit_date": "2006-02-18", "submitter_name": "\"Yin Shuming\"", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "504", "doc-id": "RFC2047", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   (2) An 'encoded-word' may appear within a 'comment' delimited by \"(\" and\n       \")\", i.e., wherever a 'ctext' is allowed.  More precisely, the RFC\n       822 ABNF definition for 'comment' is amended as follows:\n\n       comment = \"(\" *(ctext / quoted-pair / comment / encoded-word) \")\"\n\n       A \"Q\"-encoded 'encoded-word' which appears in a 'comment' MUST NOT\n       contain the characters \"(\", \")\" or \"\n       'encoded-word' that appears in a 'comment' MUST be separated from\n       any adjacent 'encoded-word' or 'ctext' by 'linear-white-space'.", "correct_text": "   (2) An 'encoded-word' may appear within a 'comment' delimited by \"(\" and\n       \")\", i.e., wherever a 'ctext' is allowed.  More precisely, the RFC\n       822 ABNF definition for 'comment' is amended as follows:\n\n       comment = \"(\" *(ctext / quoted-pair / comment / encoded-word) \")\"\n\n       A \"Q\"-encoded 'encoded-word' which appears in a 'comment' MUST NOT\n       contain the characters \"(\", \")\" or \"\\\".  In addition, an\n       'encoded-word' that appears in a 'comment' MUST be separated from\n       any adjacent 'encoded-word' or 'ctext' by 'linear-white-space'.\n", "notes": "", "submit_date": "2001-11-10", "submitter_name": "Jose M. Cainzos", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "506", "doc-id": "RFC2047", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   especials = \"(\" / \")\" / \"<\" / \">\" / \"@\" / \",\" / \";\" / \":\" / \"\r\n               <\"> / \"/\" / \"[\" / \"]\" / \"?\" / \".\" / \"=\"", "correct_text": "   especials = \"(\" / \")\" / \"<\" / \">\" / \"@\" / \",\" / \";\" / \":\" / \"\\\" /\r\n               <\"> / \"/\" / \"[\" / \"]\" / \"?\" / \".\" / \"=\"\r\n", "notes": "Also reported by Jon Steinhart 2002-01-17, but corrected by Bruce Lilly. ", "submit_date": "2003-02-13", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "507", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.5", "orig_text": "      Date: Mon, 22 Mar 1994 13:34:51 +0000", "correct_text": "      Date: Tue, 22 Mar 1994 13:34:51 +0000 ", "notes": "", "submit_date": "2003-10-04", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "508", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A states: ", "orig_text": "     discard-text := *(*text CRLF)", "correct_text": "     discard-text := *(*text CRLF) *text\n", "notes": "", "submit_date": "2001-10-04", "submitter_name": "Herman Meerlo", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "509", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "9.  Security Considerations", "correct_text": "8.  Security Considerations", "notes": "In the Table of Contents, the Security Considerations is listed to be in Section 8.  However, in the text, both the Security Considerations and Authors' Addresses are in Section 9; there is no Section 8.\r\n\r\n", "submit_date": "2004-02-03", "submitter_name": "Steve Bellovin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "510", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.5", "orig_text": "undesireble \r\n\r\nseperate", "correct_text": "undesirable\r\n\r\nseparate", "notes": "Spelling errors.", "submit_date": "2001-12-22", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "511", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "    (2)   image -- image data.  \"Image\" requires a display device\r\n          (such as a graphical display, a graphics printer, or a\r\n          FAX machine) to view the information. An initial\r\n          subtype is defined for the widely-used image format\r\n          JPEG. .  subtypes are defined for two widely-used image\r\n          formats, jpeg and gif.", "correct_text": "    (2)   image -- image data.  \"Image\" requires a display device\r\n          (such as a graphical display, a graphics printer, or a\r\n          FAX machine) to view the information. Subtypes are defined\r\n          for two widely-used image formats, jpeg and gif.\r\n", "notes": "The sentence previous to the last should be deleted, as it is covered by the last sentence.\r\n\r\n", "submit_date": "2005-01-06", "submitter_name": "Lars Kasper", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "512", "doc-id": "RFC2045", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "     tspecials :=  \"(\" / \")\" / \"<\" / \">\" / \"@\" /\r\n                   \",\" / \";\" / \":\" / \"\\\" / <\">\r\n                   \"/\" / \"[\" / \"]\" / \"?\" / \"=\"", "correct_text": "     tspecials :=  \"(\" / \")\" / \"<\" / \">\" / \"@\" /\r\n                   \",\" / \";\" / \":\" / \"\\\" / <\"> /\r\n                   \"/\" / \"[\" / \"]\" / \"?\" / \"=\"", "notes": "Missing alternative separator on the second line.\r\n", "submit_date": "2005-02-24", "submitter_name": "Ned Freed", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "513", "doc-id": "RFC2040", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   This mode handles any length of plaintext and produces ciphertext \r\n   whose length matches the plaintext length.  ", "correct_text": "   This mode handles any length of plaintext longer than one\r\n   block and produces ciphertext whose length matches the\r\n   plaintext length.", "notes": "", "submit_date": "2004-03-22", "submitter_name": "Bob Baldwin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "514", "doc-id": "RFC2040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   1. Exclusive-or Pn-1 with the previous ciphertext\r\n      block, Cn-2, to create Xn-1.", "correct_text": "   1. Exclusive-or Pn-1 with the previous ciphertext\r\n      block, Cn-2, to create Xn-1.  For short messages where\r\n      Cn-2 does not exist, use IV.", "notes": "", "submit_date": "2004-03-26", "submitter_name": "Bob Baldwin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "515", "doc-id": "RFC2030", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "T  = ((T2 - T1) + (T3 - T4)) / 2.", "correct_text": "T  = ((T2 - T1) + (T4 - T3)) / 2.", "notes": "Because T4 always will be greater than (or equal to) T3\r\n\r\nFor example assume\r\nT1 = 1\r\nT2 = 3\r\nT3 = 4\r\nT4 = 6\r\nCase 1: As per the given formula the local clock offset will be\r\n                T = ((3 - 1) + (4 - 6)) / 2  = 0 which is wrong\r\nCase 2: As per the corrected formula the local clock offset will be\r\n                T = ((3 - 1)+ (6 - 4)) / 2 = 2 which is correct", "submit_date": "2005-12-16", "submitter_name": "vijeeshep", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "516", "doc-id": "RFC2030", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1", "orig_text": "   Each SNTP packet is transmitted as tht TS-Userdata\r\n   parameter of a T-UNITDATA Request primitive.", "correct_text": "   Each SNTP packet is transmitted as the TS-Userdata\r\n   parameter of a T-UNITDATA Request primitive.", "notes": "", "submit_date": "2002-11-12", "submitter_name": "Ben Fountain", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "517", "doc-id": "RFC2030", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   d = (T4 - T1) - (T2 - T3)     t = ((T2 - T1) + (T3 - T4)) / 2.", "correct_text": "   d = (T4 - T1) - (T3 - T2)     t = ((T2 - T1) + (T3 - T4)) / 2.\n", "notes": "", "submit_date": "2001-05-04", "submitter_name": "David L. Mills", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "518", "doc-id": "RFC2030", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   Note that when calculating the correspondence, 2000 is not a\n   leap year. ", "correct_text": "", "notes": "Please disregard above statement regarding Leap Year, as the year 2000\nwas indeed a Leap Year.", "submit_date": "2001-03-16", "submitter_name": "Joe Hutcheson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "581", "doc-id": "RFC31", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   This size declaration should appear at the end of the\n   message description; thus, forcing the reader to postpone an early\n   consideration of bit details. xmodmap -e \"add lock = Caps_Lock\"", "correct_text": "   This size declaration should appear at the end of the\n   message description; thus, forcing the reader to postpone an early\n   consideration of bit details. \n", "notes": "", "submit_date": "2000-09-25", "submitter_name": "Jim Ursetto", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "519", "doc-id": "RFC2030", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "      Field Name              Unicast/Anycast          Multicast\n                              Request    Reply\n      ----------------------------------------------------------\n      LI                      0          0-2           0-2\n      VN                      1-4        copied from   1-4\n                                         request\n      Mode                    3          4             5\n      Stratum                 0          1-14          1-14\n      Poll                    0          ignore        ignore", "correct_text": "\n      Field Name              Unicast/Anycast          Multicast\n                              Request    Reply\n      ----------------------------------------------------------\n      LI                      0          0-2           0-2\n      VN                      1-4        copied from   1-4\n                                         request\n      Mode                    3          4             5\n      Stratum                 0          1-15          1-15\n      Poll                    0          ignore        ignore\n", "notes": "", "submit_date": "2003-07-18", "submitter_name": "Akinori Shoji", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "520", "doc-id": "RFC2030", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   An important provision in this document is the reinterpretation of\r\n   certain NTP Versino 4 header fields which provide for IPv6 and OSI\r\n   addressing and optional anycast extensions designed specifically for\r\n   multicast service. \r\n", "correct_text": "   An important provision in this document is the reinterpretation of\r\n   certain NTP Version 4 header fields which provide for IPv6 and OSI\r\n   addressing and optional anycast extensions designed specifically for\r\n   multicast service.\r\n", "notes": "", "submit_date": "2002-11-12", "submitter_name": "Ben Fountain", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "521", "doc-id": "RFC2028", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "The IAB appoints the IETF chair and is responsible for approving\r\nother IESG candidates put forward by the IETF nominating committee.", "correct_text": "Full IAB members, including the IETF chair, are selected and \r\nappointed according to the procedures defined in [E].", "notes": "The document references include:\r\n\r\n   [E] Galvin, J (Ed.), \"IAB and IESG Selection, Confirmation, and\r\n   Recall Process: Operation of the Nominating and Recall Committees\",\r\n   RFC 2027, October 1996.\r\n\r\nOf course, this document has been revised since RFC 2028 was written.", "submit_date": "2006-03-21", "submitter_name": "Pete Resnick", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "522", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.4", "orig_text": "   \"The IETF takes no position regarding the validity or scope of\n   any intellectual property or other rights that might be claimed\n   to  pertain to the implementation or use of the technology\n   described in this document or the extent to which any license\n   under such rights might or might not be available; neither does\n   it represent that it has made any effort to identify any such\n   rights.  Information on the IETF's procedures with respect to\n   rights in standards-track and standards-related documentation\n   can be found in BCP-11...\"", "correct_text": "", "notes": "The reference to BCP-11 should be to BCP-9 (RFC 2026 itself).", "submit_date": "2002-08-01", "submitter_name": "Scott Bradner", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "523", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "    This variance procedure is for use when a one-time waving of some\r\n    provision of this document is felt to be required.", "correct_text": "    This variance procedure is for use when a one-time waiving of some\r\n    provision of this document is felt to be required.", "notes": "", "submit_date": "2003-10-07", "submitter_name": "Morris M. Keesan", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "524", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   Some RFCs standardize the results of community deliberations about\n   statements of principle or conclusions about what is the best way to\n   perform some operations or IETF process function.  These RFCs form\n   the specification has been adopted as a BCP, it is given the\n   additional label \"BCPxxx\", but it keeps its RFC number and its place\n   in the RFC series. (see section 5)", "correct_text": "   Some RFCs standardize the results of community deliberations about\r\n   statements of principle or conclusions about what is the best way to\r\n   to perform some operations or IETF process function.  These RFCs form\r\n   the 'BCP' (Best Current Practice) subseries of the RFC series.  When \r\n   a specification has been adopted as a BCP, it is given the \r\n   additional label \"BCPxxx\", but it keeps its RFC number and its place\r\n   in the RFC series. (see section 5)", "notes": "The following words are missing:\r\n\r\n'BCP' (Best Current Practice) subseries of the RFC Series. When a", "submit_date": "2002-12-30", "submitter_name": "Bob Harvey", "verifier_id": "", "verifier_name": null, "update_date": "2023-01-27 20:52:36"}, {"errata_id": "555", "doc-id": "RFC1319", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "      ...\n      /* Process each 16-word block. */\n      For i = 0 to N/16-1 do\n\n         /* Checksum block i. */\n         For j = 0 to 15 do\n            Set c to M[i*16+j].\n            Set C[j] to S[c xor L].\n            Set L to C[j].\n          end /* of loop on j */\n       end /* of loop on i */\n\n   The 16-byte checksum C[0 ... 15] is appended to the message. Let\n   M[0\n   with checksum), where N' = N + 16.", "correct_text": "      ...\n      /* Process each 16-word block. */\n      For i = 0 to N/16-1 do\n\n         /* Checksum block i. */\n         For j = 0 to 15 do\n            Set c to M[i*16+j].\n            Set C[j] to C[j] xor S[c xor L].\n            Set L to C[j].\n          end /* of loop on j */\n       end /* of loop on i */\n\n   The 16-byte checksum C[0 ... 15] is appended to the (padded)\n   message.\n   Let M[0..N'-1] be the message with padding and checksum appended,\n   where N' = N + 16.\n", "notes": "", "submit_date": "2002-02-11", "submitter_name": "David Hopwood", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "556", "doc-id": "RFC1180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "In Section 5.10, Table 12 - Delta's Route Table: \r\n\r\n[Based on Figure 9] Network \"factory\" should correspond to Delta Interface #2;\r\nNetwork \"accounting\" should correspond to Delta Interface #3.", "correct_text": "", "notes": "", "submit_date": "2000-02-28", "submitter_name": "Chao Yel", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "557", "doc-id": "RFC1158", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4.2", "orig_text": "   egp(5),\n   ggp(6),\n   hello(7),\n   rip(8),\n   is-is(9),\n   es-is(10),\n   ciscoIgrp(11),\n   bbnSpfIgp(12),\n   ospf(13)\n   bgp(14)", "correct_text": "   egp(5),\n   ggp(6),\n   hello(7),\n   rip(8),\n   is-is(9),\n   es-is(10),\n   ciscoIgrp(11),\n   bbnSpfIgp(12),\n   ospf(13),\n   bgp(14)\n", "notes": "", "submit_date": "2002-03-27", "submitter_name": "Vincent Berger", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "558", "doc-id": "RFC1123", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.5", "orig_text": "Host names of up to 635 characters |2.1 |x| | | | | ", "correct_text": "Host names of up to 63 characters |2.1 |x| | | | | ", "notes": " Section 2.1 says \"Host software MUST handle host names of up to 63 characters\" and doesn't mention the number 635 at all. ", "submit_date": "2003-02-12", "submitter_name": "Ben Harris", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "559", "doc-id": "RFC1122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "Section 1.1.3 incorrectly implies that all support protocols are \nat the Application layer.  In particular, it mentions that support \nprotocol RARP (Reverse ARP), which is not an application-layer protocol.\n", "correct_text": "", "notes": "", "submit_date": "2002-10-19", "submitter_name": "Grzegorz R. Gryczka", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "525", "doc-id": "RFC2021", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION of probeDownloadAction uses the wrong INTEGER definitions for downloadToPROM and downloadToRAM. \n\nOn page 92, it reads: ", "orig_text": "   probeDownloadAction  OBJECT-TYPE\n    SYNTAX     INTEGER {\n                  notDownloading(1),\n                  downloadToPROM(2),\n                  downloadToRAM(3)\n               }\n    MAX-ACCESS read-write\n    STATUS     current\n    DESCRIPTION\n        \"When this object is set to downloadToRAM(2) or\n        downloadToPROM(3), the device will discontinue its\n        normal operation and begin download of the image specified\n        by probeDownloadFile from the server specified by\n        probeDownloadTFTPServer using the TFTP protocol.  If\n        downloadToRAM(2) is specified, the new image is copied\n        to RAM only (the old image remains unaltered in the flash\n        EPROM).  If downloadToPROM(3) is specified\n        the new image is written to the flash EPROM\n        memory after its checksum has been verified to be correct.\n        When the download process is completed, the device will\n\twarm boot to restart the newly loaded application.\n        When the device is not downloading, this object will have\n        a value of notDownloading(1).\"\n    ::= { probeConfig 8 }", "correct_text": "probeDownloadAction  OBJECT-TYPE\n    SYNTAX     INTEGER {\n                  notDownloading(1),\n                  downloadToPROM(2),\n                  downloadToRAM(3)\n               }\n    MAX-ACCESS read-write\n    STATUS     current\n    DESCRIPTION\n        \"When this object is set to downloadToRAM(3) or\n        downloadToPROM(2), the device will discontinue its\n        normal operation and begin download of the image specified\n        by probeDownloadFile from the server specified by\n        probeDownloadTFTPServer using the TFTP protocol.  If\n        downloadToRAM(3) is specified, the new image is copied\n        to RAM only (the old image remains unaltered in the flash\n        EPROM).  If downloadToPROM(2) is specified\n        the new image is written to the flash EPROM\n        memory after its checksum has been verified to be correct.\n        When the download process is completed, the device will\n        warm boot to restart the newly loaded application.\n        When the device is not downloading, this object will have\n        a value of notDownloading(1).\"\n    ::= { probeConfig 8 }\n", "notes": "", "submit_date": "2002-06-25", "submitter_name": "Frank McKiernan", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "526", "doc-id": "RFC2015", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "&railing whitespace that occurs on lines in order to ensure  =20", "correct_text": "& trailing whitespace that occurs on lines in order to ensure  =20", "notes": "", "submit_date": "2004-01-11", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "527", "doc-id": "RFC1979", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   Length\n\n      3", "correct_text": "   Length\n\n      4\n", "notes": "", "submit_date": "2003-11-03", "submitter_name": "Bartlomiej Molenda", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "528", "doc-id": "RFC1959", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   <dn> ::= a string as defined in RFC 1485", "correct_text": "   <dn> ::= a string as defined in RFC 1779\n", "notes": "", "submit_date": "2001-02-07", "submitter_name": "Kurt D. Zeilenga", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "529", "doc-id": "RFC1939", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "          The server should never reuse an\n          unique-id in a given maildrop, for as long as the entity\n          using the unique-id exists.", "correct_text": "          The server should never reuse a\n          unique-id in a given maildrop for as long as the maildrop\n          exists.\n", "notes": "", "submit_date": "2003-11-02", "submitter_name": "Bernard Treine", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "530", "doc-id": "RFC1936", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "            4-bit carry-lookahead 2's complement adder:\n                    a,b : input data\n                    p   : carry propagate, where pi = ai*bi = (ai)(bi)\n                    g   : carry generate, where gi = ai + bi", "correct_text": "             4-bit carry-lookahead 2's complement adder:\n                    a,b : input data\n                    p   : carry propagate, where pi = ai + bi\n                    g   : carry generate, where gi = ai*bi = (ai)(bi)", "notes": "Note:  This change affects only page 4; the PLD code is known correct.\n", "submit_date": "2005-05-11", "submitter_name": "Joe Touch", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "531", "doc-id": "RFC1927", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "          1) they should not be used on data flines which might end\n             up in the hands of very small children", "correct_text": "          1) they should not be used on data files which might end up\n             in the hands of very young children\n", "notes": "", "submit_date": "2003-10-07", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "532", "doc-id": "RFC1925", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   the word is \"agglutinate\", not \"aglutenate\"\n", "correct_text": "", "notes": "", "submit_date": "2003-04-08", "submitter_name": "John Ioannidis", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "533", "doc-id": "RFC1915", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the Title: ", "orig_text": "                           Variance for\n               The PPP Connection Control Protocol\n                               and\n               The PPP Encryption Control Protocol", "correct_text": "                           Variance for\n               The PPP Compression Control Protocol\n                               and\n               The PPP Encryption Control Protocol\n", "notes": "", "submit_date": "2002-02-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "534", "doc-id": "RFC1894", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.4", "orig_text": "   Received: from nsfnet-relay.ac.uk by sun2.nsfnet-relay.ac.uk\n             id <g.12954-0@sun2.nsfnet-relay.ac.uk>;\n   Sun, 10 Jul 1994 00:36:51 +0100\n   To: owner-info-mime@cs.utk.edu\n   Date: Sun, 10 Jul 1994 00:36:51 +0100\n   Subject: WARNING: message delayed at \"nsfnet-relay.ac.uk\"\n   content-type: multipart/report; report-type=delivery-status;\n         boundary=foobar", "correct_text": "   Received: from nsfnet-relay.ac.uk by sun2.nsfnet-relay.ac.uk\n             id <g.12954-0@sun2.nsfnet-relay.ac.uk>;\n             Sun, 10 Jul 1994 00:36:51 +0100\n   To: owner-info-mime@cs.utk.edu\n   Date: Sun, 10 Jul 1994 00:36:51 +0100\n   Subject: WARNING: message delayed at \"nsfnet-relay.ac.uk\"\n   MIME-Version: 1.0\n   content-type: multipart/report; report-type=delivery-status;\n         boundary=foobar\n", "notes": "", "submit_date": "2002-02-25", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "535", "doc-id": "RFC1891", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "   DISCUSSION: RFC 1123, section 2.3.3 requires error notifications to\r\n   be sent with a NULL return address (\"reverse-path\").", "correct_text": "   DISCUSSION: RFC 1123, section 5.3.3 requires error notifications to\r\n   be sent with a NULL return address (\"reverse-path\"). ", "notes": "RFC 1123, section 2.3.3., does not exist. The correct section is 5.3.3.", "submit_date": "2002-10-21", "submitter_name": "Florian Weimer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "536", "doc-id": "RFC1867", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Every occurance of the string:", "orig_text": "   , boundary=", "correct_text": "   ; boundary=\n", "notes": "", "submit_date": "2002-03-09", "submitter_name": "Dirk Nimmich", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "537", "doc-id": "RFC1812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "   ROUTE:4.\r\n        Lougheed, K., and Y.  Rekhter, \"A Border Gateway Protocol 3\r\n        (BGP-3)\", RFC 1267, cisco, T.J. Watson Research Center, IBM\r\n        Corp., October 1991.", "correct_text": "   ROUTE:4.\r\n        Rekhter, Y. and T. Li, \"A Border Gateway Protocol 4 (BGP-4)\", \r\n        RFC 1771, March 1995.\r\n", "notes": "", "submit_date": "2005-05-12", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "538", "doc-id": "RFC1812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3.1", "orig_text": "   Although it was not designed as an exterior gateway protocol, RIP\r\n   (described in Section [7.2.4]) is sometimes used for inter-AS\r\n   routing.", "correct_text": "   Although it was not designed as an exterior gateway protocol, RIP\r\n   (described in Appendix F.2) is sometimes used for inter-AS\r\n   routing.", "notes": "", "submit_date": "2005-05-12", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4743", "doc-id": "RFC4130", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.3, A.4", "orig_text": "A.3.  Signed, Encrypted Message Requesting a Signed, Asynchronous\r\n      Receipt\r\n\r\n   Message-ID: <#as2_company#01#a4260as2_companyout#>\r\n   Date: Thu, 19 Dec 2002 15:04:18 GMT\r\n   From: me@example.com\r\n   Subject: Async MDN request\r\n   Mime-Version: 1.0\r\n   Content-Type: application/pkcs7-mime;\r\n     smime-type=enveloped-data; name=smime.p7m\r\n   Content-Transfer-Encoding: binary\r\n   Content-Disposition: attachment; filename=smime.p7m\r\n   Recipient-Address: 10.240.1.2//\r\n   Disposition-Notification-To:\r\n     http://10.240.1.2:8201/exchange/as2_company\r\n   Disposition-Notification-Options: signed-receipt-protocol=optional,\r\n    pkcs7-signature; signed-receipt-micalg=optional,sha1\r\n   Receipt-Delivery-Option:\r\n     http://10.240.1.2:8201/exchange/as2_company\r\n   AS2-From: as2_company\r\n   AS2-To: \"AS2 Test\"\r\n   AS2-Version: 1.1\r\n   Host: 10.240.1.2:8101\r\n   Connection: close\r\n   Content-Length: 3428\r\n\r\n     [omitted binary encrypted data]\r\n\r\n\r\n\r\nMoberg & Drummond           Standards Track                    [Page 44]\r\n\f\r\nRFC 4130     AS2 for Business Data Interchange Using HTTP      July 2005\r\n\r\n\r\nA.4.  Asynchronous MDN for Message A.3, Above\r\n\r\n   POST / HTTP/1.1\r\n   Host: 10.240.1.2:8201\r\n   Connection: close, TE\r\n   TE: trailers, deflate, gzip, compress\r\n   User-Agent: RPT-HTTPClient/0.3-3I (Windows 2000)\r\n   Date: Thu, 19 Dec 2002 15:03:38 GMT\r\n   Message-ID: <AS2-20021219_030338@as2_company.dgi_th>\r\n   AS2-Version: 1.1\r\n   Mime-Version: 1.0\r\n   Recipient-Address:\r\n   http://10.240.1.2:8201/exchange/as2_company\r\n   AS2-To: as2_company\r\n   AS2-From: \"AS2 Test\"\r\n   Subject: Your Requested MDN Response\r\n   From: as2debug@example.com\r\n   Accept-Encoding: deflate, gzip, x-gzip, compress, x-compress\r\n   Content-Type: multipart/signed; micalg=sha1;\r\n     protocol=\"application/pkcs7-signature\";\r\n     boundary=\"----=_Part_337_6452266.1040310218750\"\r\n   Content-Length: 3103\r\n\r\n   ------=_Part_337_6452266.1040310218750\r\n   Content-Type: multipart/report;\r\n     report-type=disposition-notification;\r\n     boundary=\"----=_Part_336_6069110.1040310218718\"\r\n\r\n   ------=_Part_336_6069110.1040310218718\r\n   Content-Type: text/plain; charset=us-ascii\r\n   Content-Transfer-Encoding: 7bit\r\n\r\n   The message <x12.edi> sent to Recipient <AS2 Test> on Thu, 19 Dec\r\n   2002 15:04:18 GMT with Subject <async MDN request> has been received.\r\n   The EDI Interchange was successfully decrypted, and its integrity was\r\n   verified.  In addition, the sender of the message, Sender\r\n   <as2_company> at Location http://10.240.1.2:8201/exchange/as2_company\r\n   was authenticated as the originator of the message.  There is no\r\n   guarantee, however, that the EDI interchange was syntactically\r\n   correct, or that it was received by the EDI application/translator.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMoberg & Drummond           Standards Track                    [Page 45]\r\n\f\r\nRFC 4130     AS2 for Business Data Interchange Using HTTP      July 2005\r\n\r\n\r\n   ------=_Part_336_6069110.1040310218718\r\n   Content-Type: message/disposition-notification\r\n   Content-Transfer-Encoding: 7bit\r\n\r\n   Reporting-UA: AS2@test:8101\r\n   Original-Recipient: rfc822; \"AS2 Test\"\r\n   Final-Recipient: rfc822; \"AS2 Test\"\r\n   Original-Message-ID: <#as2_company#01#a4260as2_companyout#>\r\n   Disposition: automatic-action/MDN-sent-automatically;\r\n     processed\r\n   Received-Content-MIC: Hes6my+vIxIYxmvsA+MNpEOTPAc=, sha1\r\n\r\n   ------=_Part_336_6069110.1040310218718--\r\n\r\n   ------=_Part_337_6452266.1040310218750\r\n   Content-Type: application/pkcs7-signature; name=smime.p7s\r\n   Content-Transfer-Encoding: base64\r\n   Content-Disposition: attachment; filename=smime.p7s\r\n\r\n   BhbWjEfbyXoTAS/H0zpnEqLqbaBh29y2v82b8bdeGw8pipBQWmf53hIcqHGM\r\n   4ZBF3CHw5Wrf1JIE+8TwOzdbal30zeChw88WfRfD7c/j1fIA8sxsujvf2d9j\r\n   UxCUga8BVdVB9kH0Geexytyt0KvWQXfaEEcgZGUAAAAAAAA=\r\n\r\n   ------=_Part_337_6452266.1040310218750-", "correct_text": "A.3.  Signed, Encrypted Message Requesting a Signed, Asynchronous\r\n      Receipt\r\n\r\n   Message-ID: <#as2_company#01#a4260as2_companyout#>\r\n   Date: Thu, 19 Dec 2002 15:04:18 GMT\r\n   From: me@example.com\r\n   Subject: Async MDN request\r\n   Mime-Version: 1.0\r\n   Content-Type: application/pkcs7-mime;\r\n     smime-type=enveloped-data; name=smime.p7m\r\n   Content-Transfer-Encoding: binary\r\n   Content-Disposition: attachment; filename=smime.p7m\r\n   Recipient-Address: 10.240.1.2//\r\n   Disposition-Notification-To:\r\n     http://10.240.1.2:58201/exchange/as2_company\r\n   Disposition-Notification-Options: signed-receipt-protocol=optional,\r\n    pkcs7-signature; signed-receipt-micalg=optional,sha1\r\n   Receipt-Delivery-Option:\r\n     http://10.240.1.2:58201/exchange/as2_company\r\n   AS2-From: as2_company\r\n   AS2-To: \"AS2 Test\"\r\n   AS2-Version: 1.1\r\n   Host: 10.240.1.2:58101\r\n   Connection: close\r\n   Content-Length: 3428\r\n\r\n     [omitted binary encrypted data]\r\n\r\n\r\n\r\nMoberg & Drummond           Standards Track                    [Page 44]\r\n\f\r\nRFC 4130     AS2 for Business Data Interchange Using HTTP      July 2005\r\n\r\n\r\nA.4.  Asynchronous MDN for Message A.3, Above\r\n\r\n   POST / HTTP/1.1\r\n   Host: 10.240.1.2:58201\r\n   Connection: close, TE\r\n   TE: trailers, deflate, gzip, compress\r\n   User-Agent: RPT-HTTPClient/0.3-3I (Windows 2000)\r\n   Date: Thu, 19 Dec 2002 15:03:38 GMT\r\n   Message-ID: <AS2-20021219_030338@as2_company.dgi_th>\r\n   AS2-Version: 1.1\r\n   Mime-Version: 1.0\r\n   Recipient-Address:\r\n   http://10.240.1.2:58201/exchange/as2_company\r\n   AS2-To: as2_company\r\n   AS2-From: \"AS2 Test\"\r\n   Subject: Your Requested MDN Response\r\n   From: as2debug@example.com\r\n   Accept-Encoding: deflate, gzip, x-gzip, compress, x-compress\r\n   Content-Type: multipart/signed; micalg=sha1;\r\n     protocol=\"application/pkcs7-signature\";\r\n     boundary=\"----=_Part_337_6452266.1040310218750\"\r\n   Content-Length: 3103\r\n\r\n   ------=_Part_337_6452266.1040310218750\r\n   Content-Type: multipart/report;\r\n     report-type=disposition-notification;\r\n     boundary=\"----=_Part_336_6069110.1040310218718\"\r\n\r\n   ------=_Part_336_6069110.1040310218718\r\n   Content-Type: text/plain; charset=us-ascii\r\n   Content-Transfer-Encoding: 7bit\r\n\r\n   The message <x12.edi> sent to Recipient <AS2 Test> on Thu, 19 Dec\r\n   2002 15:04:18 GMT with Subject <async MDN request> has been received.\r\n   The EDI Interchange was successfully decrypted, and its integrity was\r\n   verified.  In addition, the sender of the message, Sender\r\n   <as2_company> at Location \r\n   http://10.240.1.2:58201/exchange/as2_company\r\n   was authenticated as the originator of the message.  There is no\r\n   guarantee, however, that the EDI interchange was syntactically\r\n   correct, or that it was received by the EDI application/translator.\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMoberg & Drummond           Standards Track                    [Page 45]\r\n\f\r\nRFC 4130     AS2 for Business Data Interchange Using HTTP      July 2005\r\n\r\n\r\n   ------=_Part_336_6069110.1040310218718\r\n   Content-Type: message/disposition-notification\r\n   Content-Transfer-Encoding: 7bit\r\n\r\n   Reporting-UA: AS2@test:58101\r\n   Original-Recipient: rfc822; \"AS2 Test\"\r\n   Final-Recipient: rfc822; \"AS2 Test\"\r\n   Original-Message-ID: <#as2_company#01#a4260as2_companyout#>\r\n   Disposition: automatic-action/MDN-sent-automatically;\r\n     processed\r\n   Received-Content-MIC: Hes6my+vIxIYxmvsA+MNpEOTPAc=, sha1\r\n\r\n   ------=_Part_336_6069110.1040310218718--\r\n\r\n   ------=_Part_337_6452266.1040310218750\r\n   Content-Type: application/pkcs7-signature; name=smime.p7s\r\n   Content-Transfer-Encoding: base64\r\n   Content-Disposition: attachment; filename=smime.p7s\r\n\r\n   BhbWjEfbyXoTAS/H0zpnEqLqbaBh29y2v82b8bdeGw8pipBQWmf53hIcqHGM\r\n   4ZBF3CHw5Wrf1JIE+8TwOzdbal30zeChw88WfRfD7c/j1fIA8sxsujvf2d9j\r\n   UxCUga8BVdVB9kH0Geexytyt0KvWQXfaEEcgZGUAAAAAAAA=\r\n\r\n   ------=_Part_337_6452266.1040310218750-", "notes": "Port numbers used in examples need to either refer to the intended service (e.g., 80 for HTTP) or use dynamic ports (49152-65535). The examples provided used examples in the assigned User ports range (8101, 8201) both as source and destination, and neither is appropriate for the example service described.\r\n\r\nThe simplest change was to add a \"5\" in front of the numbers, placing them in the dynamic range (e.g., 58101, 58201).", "submit_date": "2016-07-15", "submitter_name": "Joe Touch", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 21:15:39"}, {"errata_id": "541", "doc-id": "RFC1712", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "the definitions for Latitude and Longitude are swapped.\r\n\r\nI believe this can be considered a typo as the actual values in the\r\nresource record can (and should) be kept in their current order.=20\r\n\r\nThe correct descriptions are (in general terms):=20\r\n    Latitude is the degrees North or South of the Equator and can be\r\nreferenced with a range of -90 to +90.=20\r\n    Longitude is the degrees East or West of the prime meridian and can\r\nbe referenced with a range of -180 to +180.\r\n\r\nBelow is my attempt to write the errata.  If someone wants to make\r\nsuggestion about how the errata should be written, please tell me and I\r\nwill make a go at doing it as requested.\r\n\r\n    Art Coleman   acoleman@verisign.com\r\n\r\n\r\nIn RFC 1712 the terms Latitude and Longitude are swapped in that each\r\nwas given the other's definition. =20\r\nAlso the preferred order of the terms is Latitude then Longitude.  In\r\naddition to matching the terms with their correct definitions, this\r\nordering is also addressed.\r\n\r\nIn Section 3, page 3 is a table, it says:\r\n\r\n        MSB                                        LSB=20\r\n        +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+=20\r\n        /                 LONGITUDE                  /=20\r\n        +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+=20\r\n        /                  LATITUDE                  /=20\r\n        +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+=20\r\n        /                  ALTITUDE                  /=20\r\n        +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n\r\nIt should say:\r\n\r\n        MSB                                        LSB=20\r\n        +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+=20\r\n        /                  LATITUDE                  /=20\r\n        +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+=20\r\n        /                 LONGITUDE                  /=20\r\n        +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+=20\r\n        /                  ALTITUDE                  /=20\r\n        +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n\r\nRational: It is only the terms that are being corrected, the value\r\nranges associated with the first (-90..90) and second (-180..180)\r\narguments are in the preferred order.\r\n\r\n\r\nIn Section 3, page 3 under 'where:', it says:\r\n\r\n   LONGITUDE The real number describing the longitude encoded as a=20\r\n             printable string. The precision is limited by 256 charcters\r\n\r\n             within the range -90..90 degrees. Positive numbers=20\r\n             indicate locations north of the equator.\r\n\r\n   LATITUDE The real number describing the latitude encoded as a=20\r\n            printable string. The precision is limited by 256 charcters=20\r\n            within the range -180..180 degrees. Positive numbers=20\r\n            indicate locations east of the prime meridian.\r\n\r\nIs should say:\r\n\r\n   LATITUDE The real number describing the latitude encoded as a=20\r\n            printable string. The precision is limited by 256 characters\r\n\r\n            within the range -90..90 degrees. Positive numbers=20\r\n            indicate locations north of the equator.\r\n\r\n   LONGITUDE The real number describing the longitude encoded as a=20\r\n             printable string. The precision is limited by 256\r\ncharacters=20\r\n             within the range -180..180 degrees. Positive numbers=20\r\n             indicate locations east of the prime meridian.\r\n\r\nRational: to match the terms with their correct definitions, and fix the\r\nspelling of the word 'characters'.\r\n\r\n\r\nIn Section 4, page 3, it says:\r\n\r\n   GPOS has the following format:=20\r\n           <owner> <ttl> <class> GPOS <longitude> <latitude> <altitude>\r\n\r\nIt should say:\r\n\r\n   GPOS has the following format:=20\r\n           <owner> <ttl> <class> GPOS <latitude> <longitude> <altitude>\r\n\r\nRational: It is only the terms that are being corrected, the value\r\nranges associated with the first (-90..90) and second (-180..180)\r\narguments are in the preferred order.\r\n\r\n\r\nIn Section 4, page 4, it says:\r\n\r\n   The owner, ttl, and class fields are optional and default to the last\r\n\r\n   defined value if omitted. The longitude is a floating point number=20\r\n   ranging from -90 to 90 with positive values indicating locations=20\r\n   north of the equator.  For example Perth, Western Australia is=20\r\n   located at 32^ 7` 19\" south of the equator which would be specified=20\r\n   as -32.68820.  The latitude is a number ranging from -180.0 to 180.0.\r\n\r\n   For example Perth, Western Australia is located at 116^ 2' 25\" east=20\r\n   of the prime meridian which would be specified as 116.86520.  Curtin=20\r\n   University, Perth is also 10 meters above sea-level.\r\n\r\nIt should say:\r\n\r\n   The owner, ttl, and class fields are optional and default to the last\r\n\r\n   defined value if omitted. The latitude is a floating point number=20\r\n   ranging from -90 to 90 with positive values indicating locations=20\r\n   north of the equator.  For example Perth, Western Australia is=20\r\n   located at 32^ 7` 19\" south of the equator which would be specified=20\r\n   as -32.68820.  The longitude is a number ranging from -180.0 to\r\n180.0.=20\r\n   For example Perth, Western Australia is located at 116^ 2' 25\" east=20\r\n   of the prime meridian which would be specified as 116.86520.  Curtin=20\r\n   University, Perth is also 10 meters above sea-level.\r\n\r\nRational: to match the terms with their correct definitions.", "correct_text": "", "notes": "from pending", "submit_date": "2006-03-09", "submitter_name": "\"Coleman, Arthur\"", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "542", "doc-id": "RFC1662", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the References Section:", "orig_text": "   [1]   Simpson, W., Editor, \"The Point-to-Point Protocol (PPP)\", \n         STD 50, RFC 1661, Daydreamer, July 1994.", "correct_text": "   [1]   Simpson, W., Editor, \"The Point-to-Point Protocol (PPP)\", \n         STD 51, RFC 1661, Daydreamer, July 1994.\n", "notes": "", "submit_date": "2002-03-07", "submitter_name": "Charles Cranford", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "560", "doc-id": "RFC1071", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "        while( count > 1 )  {\n           /*  This is the inner loop */\n               sum += * (unsigned short) addr++;\n               count -= 2;", "correct_text": "        while( count > 1 )  {\n           /*  This is the inner loop */\n               sum += * (unsigned short *) addr++;\n               count -= 2;", "notes": "", "submit_date": "2004-04-05", "submitter_name": "Tim Moors", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "561", "doc-id": "RFC1036", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.4", "orig_text": "   If the message is submitted in response to another message (e.g.,\n   is a follow-up) the default subject should begin with the four\n   characters \"Re:\", and the \"References\" line is required.", "correct_text": "   If the message is submitted in response to another message (e.g.,\n   is a follow-up) the default subject should begin with the four\n   characters \"Re: \", and the \"References\" line is required.\n", "notes": "", "submit_date": "2001-05-17", "submitter_name": "Florian Weimer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "567", "doc-id": "RFC1002", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.16", "orig_text": "WAIT FOR ACKNOWLEDGEMENT (WACK) RESPONSE\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          NULL (0x0020)        |         IN (0x0001)           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "The values for the first field (the resource record type) are defined above\r\nin section 4.2.1.3.  RESOURCE RECORD:\r\n\r\n   NULL       0x000A   NULL Resource Record (See WAIT FOR\r\n                       ACKNOWLEDGEMENT RESPONSE)\r\n   NB         0x0020   NetBIOS general Name Service Resource Record\r\n                       (See NB_FLAGS and NB_ADDRESS, below)", "notes": "\r\nThe value for type NULL is defined as 0x000A and the\r\ncomment specifically mentions WACK responses.  The value shown in the packet\r\nlayout is 0x0020, the value for NB resource records, the most common value\r\nfor this field.  In truth, I can't get Windows boxes to respond to this\r\npacket as documented with either value in that field.\r\n", "submit_date": "2001-04-26", "submitter_name": "Sir Dystic", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "568", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   The use of a \"Set Data Type\" transaction was proposed in RFC 294 in\n   January 1982. ", "correct_text": "   The use of a \"Set Data Type\" transaction was proposed in RFC 294 in\n   January 1972.\n", "notes": "", "submit_date": "2001-01-03", "submitter_name": "Juan Li", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "569", "doc-id": "RFC951", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "How can the server send an IP datagram to the client, if the client doesnt \r\nknow its own IP address (yet)?", "correct_text": "How can the server send an IP datagram to the client, if the client doesn't \r\nknow its own IP address (yet)?\r\n", "notes": "", "submit_date": "2006-02-18", "submitter_name": "\"Yin Shuming\"", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "570", "doc-id": "RFC894", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Section Frame Format: ", "orig_text": "   The minimum length of the data field of a packet sent over an\n   Ethernet is 1500 octets, thus the maximum length of an IP datagram\n   sent over an Ethernet is 1500 octets.", "correct_text": "   The maximum length of the data field of a packet sent over an\n   Ethernet is 1500 octets, thus the maximum length of an IP datagram\n   sent over an Ethernet is 1500 octets.\n", "notes": "", "submit_date": "2001-03-28", "submitter_name": "Gerald Park", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "571", "doc-id": "RFC854", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "Neither can unilaterally seize control from the other; rather the \r\ncontrolling end must relinguish its control explicitly.\r\n                     ^^^^^^^^^^", "correct_text": "Neither can unilaterally seize control from the other; rather the \r\ncontrolling end must relinquish its control explicitly.\r\n                     ^^^^^^^^^^", "notes": "", "submit_date": "2006-08-18", "submitter_name": "SungWoon Lee", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "572", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "The format of data blocks exchanged within the a network will generally not \r\nbe of concern to us.", "correct_text": "The format of data blocks exchanged within the network will generally not \r\nbe of concern to us.", "notes": "from pending", "submit_date": "2006-02-18", "submitter_name": "\"Yin Shuming\"", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "582", "doc-id": "RFC5", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Forward, it says:", "orig_text": "It was generally agreed beforehand that the runmning of interactive\r\nprograms across the network was the first problem that would be\r\nfaced.", "correct_text": "It was generally agreed beforehand that the running of interactive\r\nprograms across the network was the first problem that would be\r\nfaced.\r\n", "notes": "", "submit_date": "2005-05-23", "submitter_name": "Zhang Xin Liang", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "543", "doc-id": "RFC1661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4", "orig_text": "On reception of a Configure-Reject, the Identifier field MUST\r\nmatch that of the last transmitted Configure-Request.\r\nAdditionally, the Configuration Options in a Configure-Reject MUST\r\nbe a proper subset of those in the last transmitted Configure-\r\nRequest.  Invalid packets are silently discarded.", "correct_text": "On reception of a Configure-Reject, the Identifier field MUST\r\nmatch that of the last transmitted Configure-Request.\r\nAdditionally, the Configuration Options in a Configure-Reject MUST\r\nbe a subset of those in the last transmitted Configure-\r\nRequest.  Invalid packets are silently discarded.", "notes": "The word \"proper\" should be deleted. (I discussed this a while ago with \r\nthe author, Bill Simpson, and he agreed.)\r\n\r\nIf A is a subset of B, then set A contains only elements that are also in \r\nset B, up to and including all the elements of B (in which case A == B).\r\n\r\nIf A is a PROPER subset of B, then A contains only elements that are in \r\nB, up to BUT NOT including all the elements of B.\r\n\r\nIn this case, the word \"proper\" is just a mistake, perhaps added because \r\nsomeone thought it made the sentence sound better, without realizing that \r\nthe mathematical term \"proper subset\" has a specific precise meaning, \r\nwhich is the wrong meaning in this case. As written in the RFC, the \r\nsentence states that if a Configure-Request packet has n Configuration \r\nOptions in it, ALL of which are not recognizable or not acceptable, then \r\nwhen the implementation returns its Configure-Reject packet, it's only \r\nallowed to indicate that up to n-1 options were rejected, when in truth \r\nALL were rejected. Removing the word \"proper\" removes this unintended and \r\nincorrect limitation.", "submit_date": "2006-09-27", "submitter_name": "Stuart Cheshire", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "544", "doc-id": "RFC1542", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "  If a client falls into this category, it SHOULD set (to 1) the\r\n  newly-defined BROADCAST flag in the 'flags' field of BOOTREPLY\r\n  messages it generates.  This will provide a hint to BOOTP servers\r\n  and relay agents that they should attempt to broadcast their\r\n  BOOTREPLY messages to the client.", "correct_text": "  If a client falls into this category, it SHOULD set (to 1) the\r\n  newly-defined BROADCAST flag in the 'flags' field of BOOTREQUEST\r\n  messages it generates.  This will provide a hint to BOOTP servers\r\n  and relay agents that they should attempt to broadcast their BOOTREPLY\r\n  messages to the client.", "notes": "(i.e. the first instance of \"BOOTREPLY\" should be \"BOOTREQUEST\".)\r\n", "submit_date": "2002-10-24", "submitter_name": "Grzegorz R. Gryczka", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "545", "doc-id": "RFC1534", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   Any message received by a DHCP server that includes a 'DHCP message\n   type' (51) option is assumed to have been sent by a DHCP client.", "correct_text": "   Any message received by a DHCP server that includes a 'DHCP message\n   type' (53) option is assumed to have been sent by a DHCP client.\n", "notes": "", "submit_date": "2001-09-05", "submitter_name": "Tyler Tidman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "546", "doc-id": "RFC1531", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.4", "orig_text": "   Any DHCPACK messages that arrive with an 'xid' that does not match the\n   When the client receives a DHCPACK from the server, the client\n   computes the lease expiration time as the sum of the time at which the\n   client sent the DHCPREQUEST message and the duration of the lease in\n   the DHCPACK message.", "correct_text": "   Any DHCPACK messages that arrive with an 'xid' that does not match the\n   'xid' of the client's DHCPREQUEST message are silently discarded.\n   When the client receives a DHCPACK from the server, the client\n   computes the lease expiration time as the sum of the time at which the\n   client sent the DHCPREQUEST message and the duration of the lease in\n   the DHCPACK message.  \n", "notes": "", "submit_date": "2001-10-31", "submitter_name": "Jim Withnall", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "547", "doc-id": "RFC1517", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "   It has become clear that the first two of these problems are likely\n   to become critical in the near term.  Classless Inter-Domain\n   Routing (CIDR) ttempts to deal with these problems by defining a\n   mechanism to slow the growth of routing tables and reduce the need\n   to allocate new IP network numbers.", "correct_text": "   It has become clear that the first two of these problems are likely\n   to become critical in the near term.  Classless Inter-Domain\n   Routing (CIDR) attempts to deal with these problems by defining a\n   mechanism to slow the growth of routing tables and reduce the need\n   to allocate new IP network numbers.\n", "notes": "", "submit_date": "2002-03-30", "submitter_name": "Mr. Sharky", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "548", "doc-id": "RFC1413", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   3)   The 512 character limit on user IDs and the 64\r\n        character limit on tokens should be understood to mean\r\n        as follows: a) No new token (i.e., OPSYS or ERROR-TYPE)\r\n        token will be defined that has a length greater than 64", "correct_text": "   3)   The 512 character limit on user IDs and the 64\r\n        character limit on tokens should be understood to mean\r\n        as follows: a) No new token (i.e., OPSYS or ERROR-TYPE)\r\n        will be defined that has a length greater than 64", "notes": "", "submit_date": "2004-08-17", "submitter_name": "Tymon Rzes'niowiecki", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "549", "doc-id": "RFC1340", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "On page 87, it says:", "orig_text": "SUN OS 3.5\r\nSUN OS 4.0", "correct_text": "SUN-OS-3.5\r\nSUN-OS-4.0", "notes": "The white space isn't supposed to be accepted as part of a system name.\r\n\r\n\r\n", "submit_date": "2002-07-08", "submitter_name": "Jean Delvare", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "550", "doc-id": "RFC1321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Section A.4: ", "orig_text": "   #define MD MD5", "correct_text": "   #define MD 5\n", "notes": "", "submit_date": "2001-01-19", "submitter_name": "Matt Borland", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "551", "doc-id": "RFC1321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "   /* Round 3. */\r\n   /* Let [abcd k s t] denote the operation\r\n        a = b + ((a + H(b,c,d) + X[k] + T[i]) <<< s). */\r\n   /* Do the following 16 operations. */", "correct_text": "   /* Round 3. */\r\n   /* Let [abcd k s i] denote the operation\r\n        a = b + ((a + H(b,c,d) + X[k] + T[i]) <<< s). */\r\n   /* Do the following 16 operations. */", "notes": "", "submit_date": "2002-06-14", "submitter_name": "Gregory Smith", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "552", "doc-id": "RFC1321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "   the each bit of F(X,Y,Z) will be independent", "correct_text": "   then each bit of F(X,Y,Z) will be independent\n", "notes": "", "submit_date": "2000-04-12", "submitter_name": "Michael Amling", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "553", "doc-id": "RFC1321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A says:", "orig_text": "  printf\r\n (\"MD%d time trial. Digesting %d %d-byte blocks ...\", MD,\r\n  TEST_BLOCK_LEN, TEST_BLOCK_COUNT);", "correct_text": "  printf\r\n (\"MD%d time trial. Digesting %d %d-byte blocks ...\", MD,\r\n  TEST_BLOCK_COUNT, TEST_BLOCK_LEN);", "notes": "", "submit_date": "2006-11-15", "submitter_name": "Gennaro Prota", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2630", "doc-id": "RFC5988", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "  ext-name-star  = parmname \"*\" ; reserved for RFC2231-profiled\r\n                                ; extensions.  Whitespace NOT\r\n                                ; allowed in between.", "correct_text": "  ext-name-star  = parmname \"*\" ; reserved for RFC5987-profiled\r\n                                ; extensions.  Whitespace NOT\r\n                                ; allowed in between.", "notes": "RFC5987 clarifies RFC2231 for use in HTTP. The update in RFC5988 left two mentions of RFC2231 which should be updated.", "submit_date": "2010-11-13", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "562", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.2", "orig_text": "                         +-----------------------------------------+\r\n           Header        |         OPCODE=RESPONSE, ID=997         |\r\n                         +-----------------------------------------+\r\n          Question       |QTYPE=A, QCLASS=IN, QNAME=VENERA.ISI.EDU |\r\n                         +-----------------------------------------+\r\n           Answer        |  VENERA.ISI.EDU  A IN 10.1.0.52         |\r\n                         +-----------------------------------------+\r\n          Authority      |                 <empty>                 |\r\n                         +-----------------------------------------+\r\n         Additional      |                 <empty>                 |\r\n                         +-----------------------------------------+\r\n", "correct_text": "                         +-----------------------------------------+\r\n           Header        |      OPCODE=IQUERY, ID=997, QR=1        |\r\n                         +-----------------------------------------+\r\n          Question       |QTYPE=A, QCLASS=IN, QNAME=VENERA.ISI.EDU |\r\n                         +-----------------------------------------+\r\n           Answer        |  VENERA.ISI.EDU  A IN 10.1.0.52         |\r\n                         +-----------------------------------------+\r\n          Authority      |                 <empty>                 |\r\n                         +-----------------------------------------+\r\n         Additional      |                 <empty>                 |\r\n                         +-----------------------------------------+", "notes": "There is an error in the Header line. It should be\r\n\"OPCODE=IQUERY, ID=997, QR=1\" because the OPCODE does not have a \r\nvalue of RESPONSE (see Section 4.1.1). \r\n", "submit_date": "2003-02-09", "submitter_name": "CFeng", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "563", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "Because these files are text files several special encodings are\r\nnecessary to allow arbitrary data to be loaded. In particular:\r\n\r\n                of the root.\r\n\r\n@               A free standing @ is used to denote the current origin.", "correct_text": "Because these files are text files several special encodings are\r\nnecessary to allow arbitrary data to be loaded. In particular:\r\n\r\n@               A free standing @ is used to denote the current origin.", "notes": "\"of the root.\" makes no sense here.", "submit_date": "2006-03-04", "submitter_name": "Allan Edward Prentice", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "564", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   The usual mail address <local-part>@<mail-domain> is mapped into a\n   domain name by converting <local-part> into a single label\n   (regardles of dots it contains), converting <mail-domain> into a\n   domain name using the usual text format for domain names (dots\n   denote label breaks), and concatenating the two to form a single\n   domain name. ", "correct_text": "   The usual mail address <local-part>@<mail-domain> is mapped into a\n   domain name by converting <local-part> into a single label\n   (regardless of dots it contains), converting <mail-domain> into a\n   domain name using the usual text format for domain names (dots\n   denote label breaks), and concatenating the two to form a single\n   domain name.\n", "notes": "", "submit_date": "2003-02-06", "submitter_name": "Chlisin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "565", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "This bit specifies specifies whether the requester wants recursive service \r\nfor this query. Clients may.....", "correct_text": "This bit specifies whether the requester wants recursive service for this \r\nquery. Clients may.....\r\n", "notes": "", "submit_date": "2006-02-18", "submitter_name": "\"Yin Shuming\"", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "566", "doc-id": "RFC1033", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7", "orig_text": "           SRI.COM.  NS\r\n*Here-->>  KL.SRI.COM.  KL.SRI.COM.  A 10.1.0.2.", "correct_text": "            SRI.COM.     NS  KL.SRI.COM.  \r\n*Here-->>   KL.SRI.COM.  A   10.1.0.2.", "notes": "  You can refer to RR \"NS  (Name Server)\" on Page 6 in the same RFC for the reason.\n --VERIFIER NOTES-- \n   The status of this document is UNKNOWN. This means that it is so old, that it should not be used as a reference. There is really no way to know if the syntax that you point out was valid in 1987, when the document was published.\r\n\r\nMaybe we should transition the document to HISTORIC?", "submit_date": "2002-05-05", "submitter_name": "\"CFeng\"", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "573", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A number of details in RFC 793 were corrected, modified, or clarified in RFC 1122.  Familiarity with RFC 1122 and more recent TCP documents is imperative before any implementation of RFC 793 is attempted.", "orig_text": "TCP Feature             RFC 793 Ref       See RFC 1122 Section\r\n\r\nReceived PUSH bit\tSection 2.8\t\t4.2.2.2\t\r\nUrgent Pointer\t\tSection 3.1\t\t4.2.2.4\r\nTCP state diagram\tSection 3.2, p.23\t4.2.2.8\r\nSimultaneous Open\tSection 3.4, Fig 8\t4.2.2.10\r\nRetransmission Timeout\tSection 3.7\t\t4.2.2.15, 4.2.3.1\r\nEvent Processing\tSection 3.9\t\t4.2.2.20\r\n", "correct_text": "", "notes": "", "submit_date": "2007-02-22", "submitter_name": "Robert Braden", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "574", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In Section 3.7, page 43, it says:", "orig_text": "                     If the the user signals a push function then the\r\n      data must be sent even if it is a small segment.", "correct_text": "                     If the user signals a push function then the\r\n      data must be sent even if it is a small segment.\r\n", "notes": "", "submit_date": "2005-05-22", "submitter_name": "Yin Shuming", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "575", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "    If there are several pending passive OPENs (recorded in TCBs) with the\r\n    same local socket, an foreign active OPEN ...", "correct_text": "    If there are several pending passive OPENs (recorded in TCBs) with\r\n    the same local socket, a foreign active OPEN ...\r\n", "notes": "", "submit_date": "2003-10-29", "submitter_name": "Morris M. Keesan", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "576", "doc-id": "RFC792", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Introduction, fourth paragraph, it says:", "orig_text": "Also ICMP messages are only sent about errors in handling fragment zero of\r\nfragemented datagrams.  (Fragment zero has the fragment offeset equal\r\nzero).", "correct_text": "Also ICMP messages are only sent about errors in handling fragment zero of\r\nfragmented datagrams.  (Fragment zero has the fragment offset equal\r\nzero).", "notes": "", "submit_date": "2004-03-26", "submitter_name": "Arun Darlie Koshy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "583", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "On page 23, it says:", "orig_text": "The intitial contents of the timestamp data area must be zero \r\nor internet address/zero pairs.", "correct_text": "The initial contents of the timestamp data area must be zero \r\nor internet address/zero pairs.", "notes": "Spelling error.", "submit_date": "2004-06-16", "submitter_name": "Pavel Uvarov", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "584", "doc-id": "RFC1123", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "[TELNET:9] \"Telnet End-Of-Record Option,\" J. Postel, RFC-855, December 1983. \r\n", "correct_text": "[TELNET:9] \"Telnet End-Of-Record Option,\" J. Postel, RFC-885, December 1983.", "notes": "RFC 855 is \"Telnet Option Specifications\"; RFC 885 is \"Telnet end of record option\".", "submit_date": "2003-02-12", "submitter_name": "Ben Harris", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "586", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.3.1", "orig_text": "    4. The contributor represents that contribution properly\r\n       acknowledge major contributors.\r\n\r\n    5. The contribuitor, the organization (if any) he represents and\r\n       the owners of any proprietary rights in the contribution, agree\r\n       that no information in the contribution is confidential and\r\n       that the ISOC and its affiliated organizations may freely\r\n       disclose any information in the contribution.", "correct_text": "    4. The contributor represents that the contribution properly\r\n       acknowledges major contributors.\r\n\r\n    5. The contributor, the organization (if any) he represents and\r\n       the owners of any proprietary rights in the contribution, agree\r\n       that no information in the contribution is confidential and\r\n       that the ISOC and its affiliated organizations may freely\r\n       disclose any information in the contribution.", "notes": "verb agreement (\"acknowledges\") and spelling correction (\"contributor\")", "submit_date": "2003-10-07", "submitter_name": "Morris M. Keesan", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "587", "doc-id": "RFC2040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "6. Decrypt En to create Pn-1.", "correct_text": "6. Decrypt En and exclusive-or with Cn-2 to create Pn-1.\r\n   For short messages where Cn-2 does not exist, use the IV.", "notes": "", "submit_date": "2004-03-22", "submitter_name": "Bob Baldwin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "588", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.2.2", "orig_text": "Date: Fri, 26 Mar 1993 12:59:38 -0500 (EST)\r\nSubject: Audio mail\r\nMessage-ID: <anotherid@foo.com>", "correct_text": "Date: Fri, 26 Mar 1993 12:59:38 -0500 (EST)\r\nMessage-ID: <anotherid@foo.com>\r\nSubject: Audio mail", "notes": "", "submit_date": "2001-12-22", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "589", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.3.7", "orig_text": "Content-Type: message/external-body;\r\n              access-type=mail-server\r\n              server=\"listserv@bogus.bitnet\";\r\n              expiration=\"Fri, 14 Jun 1991 19:13:14 -0400 (EDT)\"", "correct_text": "Content-Type: message/external-body;\r\n              access-type=mail-server;\r\n              server=\"listserv@bogus.bitnet\";\r\n              expiration=\"Fri, 14 Jun 1991 19:13:14 -0400 (EDT)\"", "notes": "Semicolons were missing.", "submit_date": "2001-12-22", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "590", "doc-id": "RFC2231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   Content-Type: application/x-stuff\r\n    title*0*=us-ascii'en'This%20is%20even%20more%20\r\n    title*1*=%2A%2A%2Afun%2A%2A%2A%20\r\n    title*2=\"isn't it!\"", "correct_text": "   Content-Type: application/x-stuff;\r\n    title*0*=us-ascii'en'This%20is%20even%20more%20;\r\n    title*1*=%2A%2A%2Afun%2A%2A%2A%20;\r\n    title*2=\"isn't it!\"", "notes": "", "submit_date": "2001-04-17", "submitter_name": "Shuhei KOBAYASHI", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "591", "doc-id": "RFC2252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "           [ \"EQUALITY\" woid              ; Matching Rule name\r\n           [ \"ORDERING\" woid              ; Matching Rule name", "correct_text": "           [ \"EQUALITY\" woid ]            ; Matching Rule name\r\n           [ \"ORDERING\" woid ]            ; Matching Rule name", "notes": "", "submit_date": "2003-10-15", "submitter_name": "Mark Wahl", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "592", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.2", "orig_text": "        C    ciphertext to be decrypted, an octet string of length k,\r\n             where k = 2hLen + 2\r\n", "correct_text": "        C    ciphertext to be decrypted, an octet string of length k,\r\n             where k >= 2hLen + 2\r\n", "notes": "In the \"Input:\" section, near the top of the page, the condition\r\nspecified for 'k' is too restrictive. {This becomes clear from\r\nthe context - see e.g. 'step 1. c.' in mid-page 22.}\r\n", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "593", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1.2", "orig_text": "           b. Apply the RSADP decryption primitive (Section 5.1.2) to the\r\n\t   RSA private key K and the ciphertext representative c to\r\n           produce an integer message representative m:\r\n   \r\n       ", "correct_text": "       b. Apply the RSADP decryption primitive (Section 5.1.2) to the\r\n          RSA private key K and the ciphertext representative c to\r\n          produce an integer message representative m:", "notes": "The first line of 'step 2. b.', is indented too much (by 3 chars)", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "594", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "       c. Convert the message representative m to an encoded message\r\n          EM of length k octets (see Section 4.1):\r\n\r\n             EM' = I2OSP (m, k).\r\n ", "correct_text": "       c. Convert the message representative m to an encoded message\r\n          EM of length k octets (see Section 4.1):\r\n\r\n             EM = I2OSP (m, k).\r\n\r\n", "notes": "    In 'step 2. c.', in fact \"EM\" is computed, not \"EM'\" -- as stated\r\n    in the text; see also 'step 3.' below.", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4712", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2.1.3.1.", "orig_text": "   ACE4_DELETE\r\n\r\n      Operation(s) affected:\r\n\r\n         REMOVE", "correct_text": "   ACE4_DELETE\r\n\r\n      Operation(s) affected:\r\n\r\n         REMOVE\r\n\r\n         RENAME", "notes": "ACE4_DELETE on the source file may allow a rename to proceed in cases where the user does not have ACE4_DELETE_CHILD on the source directory. It may also affect the ability of the user to be able to RENAME if there is an existing file in the target directory with the target name.\r\n\r\nAD notes based on Chuck Lever's input. \r\no\tThe text in RFC 5661 Section 6.2.1.3.1 matches the text in RFC 7530 Section 6.2.1.3.1. Are updaed of RFC 7530 also needed for this reason?\r\no\tShould the Notes section of the errata be added to Section 6.2.1.3.2?\r\no\tA consideration is if there are already server implementations that reject RENAME operations in these cases, or do all server implementations permit RENAME?\r\no\tThis is held so that the issues can be addressed in rfc5661bis after further discussion.\r\no\tAdditional Editorial correction: The Discussion subsections of ACE4_DELETE and ACE4_DELETE are missing the word \"how\". \r\n", "submit_date": "2016-06-16", "submitter_name": "Trond Myklebust", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-09-03 11:11:06"}, {"errata_id": "609", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Section A.2 The Options field: ", "orig_text": "                         1                     2\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8  9  0  1  2  3\r\n    -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+--+--+--+--+--+--+\r\n     | | | | | | | | | | | | | | | | | |DC| R| N|MC| E|V6|\r\n    -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+--+--+--+--+--+--+", "correct_text": "                            1                     2\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8  9  0  1  2  3\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+--+--+--+--+--+--+\r\n   | | | | | | | | | | | | | | | | | | |DC| R| N|MC| E|V6|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+--+--+--+--+--+--+", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "611", "doc-id": "RFC4342", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "      Its four data bytes indicate the rate at which\r\n      the receiver has received data since it last sent an\r\n      acknowledgement, in bytes per second.  To calculate this receive\r\n      rate, the receiver sets t to the larger of the estimated round-\r\n      trip time and the time since the last Receive Rate option was\r\n      sent.", "correct_text": "      Its four data bytes indicate the rate at which\r\n      the receiver has received data over the last round-trip time,\r\n      in bytes per second.  To calculate the time interval t for\r\n      calculating this receive rate, the receiver follows Section\r\n      6.2 of [RFC3448].", "notes": "This errata updates RFC 4342 to use the definition of the receive rate \r\nas specified in RFC 3448.", "submit_date": "2007-10-24", "submitter_name": "Sally Floyd", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "595", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "                                  +-----------+\r\n                                  |     M     |\r\n                                  +-----------+\r\n                                        |\r\n                                        V\r\n                                      Hash\r\n                                        |\r\n                                        V\r\n                          +--------+----------+----------+\r\n                     M' = |Padding1|  mHash   |   salt   |\r\n                          +--------+----------+----------+\r\n                                         |\r\n               +--------+----------+     V\r\n         DB =  |Padding2|maskedseed|   Hash\r\n               +--------+----------+     |\r\n                         |               |\r\n                         V               |    +--+\r\n                        xor <--- MGF <---|    |bc|\r\n                         |               |    +--+\r\n                         |               |      |\r\n                         V               V      V\r\n               +-------------------+----------+--+\r\n         EM =  |    maskedDB       |maskedseed|bc|\r\n               +-------------------+----------+--+\r\n", "correct_text": "                                  +-----------+\r\n                                  |     M     |\r\n                                  +-----------+\r\n                                        |\r\n                                        V\r\n                                      Hash\r\n                                        |\r\n                                        V\r\n                          +--------+----------+----------+\r\n                     M' = |Padding1|  mHash   |   salt   |\r\n                          +--------+----------+----------+\r\n                                         |\r\n               +--------+----------+     V\r\n         DB =  |Padding2|   salt   |   Hash\r\n               +--------+----------+     |\r\n                         |               |\r\n                         V               |    +--+\r\n                        xor <--- MGF <---|    |bc|\r\n                         |               |    +--+\r\n                         |               |      |\r\n                         V               V      V\r\n               +-------------------+----------+--+\r\n         EM =  |    maskedDB       |     H    |bc|\r\n               +-------------------+----------+--+\r\n", "notes": "    Figure 2 names two fields \"maskedseed\" which in fact are _very_\r\n    different, and this nomenclature matches neither the figure\r\n    caption given nor the subsequent text -- see e.g. 'step 6.' and \r\n    'step 8.' on page 39 and 'step 12.' on page 40.", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "596", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "       SHA-512: (0x)30 51 30 0d 06 09 60 86 48 01 65 03 04 02 03 05 00\r\n                       04 40 || H.\r\n", "correct_text": "       SHA-512: (0x)30 51 30 0d 06 09 60 86 48 01 65 03 04 02 03 05 00\r\n                    04 40 || H.\r\n", "notes": "The second line of the last example of 'Note 1.' (for SHA-512) is indented too much (by 3 chars).", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "597", "doc-id": "RFC4679", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.17", "orig_text": "Valid values for the sub-fields are as follows:\r\n\r\n      Data Link\r\n\r\n         0x01 AAL5\r\n         0x02 Ethernet", "correct_text": "Valid values for the sub-fields are as follows:\r\n\r\n      Data Link\r\n\r\n         0x00 AAL5\r\n         0x01 Ethernet\r\n", "notes": "\"Data Link\" values in the Value field of the Access-Loop-Encapsulation (Section 3.3.17, paragraph 14) are incorrect, should start from 0x00 and not 0x01 (see TR-101).", "submit_date": "2007-10-03", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": "Vince Mammoliti", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "598", "doc-id": "RFC4623", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |M|H|0|0|0|0|    Length         |              0                |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |              MRU              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |M|H|0|0|0|0|    Length         |              0                |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               94              |              MRU              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Missing \"Attribute Type\" in the AVP Header of Figure 4.", "submit_date": "2006-10-25", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "599", "doc-id": "RFC4623", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4", "orig_text": "     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |M|H|0|0|0|0|    Length         |              0                |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |              MRRU             |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |M|H|0|0|0|0|    Length         |              0                |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |               95              |              MRRU             |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Missing \"Attribute Type\" in the AVP Header of Figure 5.", "submit_date": "2006-10-25", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8625", "doc-id": "RFC4086", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.3.", "orig_text": "Despite meeting all the tests suggested by Knuth, that sequence is unsuitable\r\nfor cryptographic us, as adversaries must be assumed to have copies\r\nof all commonly published \"random\" sequences and to be able to spot\r\nthe source and predict future values.", "correct_text": "Despite meeting all the tests suggested by Knuth, that sequence is unsuitable\r\nfor cryptographic use, as adversaries must be assumed to have copies\r\nof all commonly published \"random\" sequences and to be able to spot\r\nthe source and predict future values.", "notes": "Simple typo; missing \"e\" in the expression \"for cryptographic us,\".", "submit_date": "2025-11-02", "submitter_name": "mrrccc", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-11-05 21:05:19"}, {"errata_id": "610", "doc-id": "RFC4342", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "      2. A Receive Rate option, defined in Section 8.3, specifying the\r\n         rate at which data was received since the last DCCP-Ack was\r\n         sent.", "correct_text": "      2. A Receive Rate option, defined in Section 8.3, specifying the\r\n         rate at which data was received over the last round-trip time.", "notes": "Section 8.3 of RFC 4342 (DCCP CCID 3) specifies that the Receive\r\nRate option reports the receive rate since the last feedback packet\r\nwas sent.  In contrast, Section 6.2 of RFC 3448 (TFRC) specifies\r\nthat the feedback packet reports the receive rate over the last\r\nround-trip time.  As a result, the receive rate specified by\r\nRFC 4342 differs from that of TFRC for a feedback packet after an\r\nidle period; the receive rate report specified in RFC 4342 reports\r\nthe receive rate over the entire idle period.  The receive rate\r\nreported by RFC 4342 also differs from that of TFRC for an early\r\nfeedback packet reporting a new loss event.  This errata updates\r\nRFC 4342 to use the definition of the receive rate as specified in\r\nRFC 3448.", "submit_date": "2007-10-24", "submitter_name": "Sally Floyd", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "631", "doc-id": "RFC3987", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "[semicolon outside]\r\n\"http://example.org/ros&#233\";", "correct_text": "[semicolon inside]\r\n\"http://example.org/ros&#233;\"", "notes": "In ALL cases, the final semicolon has to be inside the double quotes, not outside. See the example above.\r\n\r\nfrom pending", "submit_date": "2007-06-26", "submitter_name": "Martin Duerst", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1060", "doc-id": "RFC2631", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "This reference is cited in Section 1, but does not appear in the\r\nReferences section. It should be added:\r\n\r\n[DH76]  W. Diffie and M. E. Hellman, \"New Directions in Cryptography\",\r\n        IEEE Transactions on Information Theory, vol. IT-22, Nov. 1976, \r\n        pp: 644-654.", "correct_text": "", "notes": "", "submit_date": "2007-09-13", "submitter_name": "Javier Ader", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "600", "doc-id": "RFC4623", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6", "orig_text": "     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |M|H|0|0|0|0|    Length         |              0                |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |T|L|x|x|S|x|O|P|B|E|x|x|  Ver  |          Length (opt)         |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |T|L|x|x|S|x|O|P|B|E|x|x|  Ver  |          Length (opt)         |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |           Tunnel ID           |           Session ID          |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |             Ns (opt)          |             Nr (opt)          |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |      Offset Size (opt)        |    Offset pad... (opt)        |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Extraneous part of the AVP Header in Figure 7.", "submit_date": "2006-10-25", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "601", "doc-id": "RFC4866", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   If the Binding Update message is authenticated based on the CGA  \r\n   property of the mobile node's home address or by a proof of the\r\n   mobile node's knowledge of a permanent home keygen token, the\r\n   lifetime for the binding SHOULD be set to the maximum of\r\n                                                 ^^^^^^^\r\n   MAX_CGA_BINDING_LIFETIME and the value specified in the Lifetime\r\n   field of the Binding Update message.", "correct_text": "   If the Binding Update message is authenticated based on the CGA\r\n   property of the mobile node's home address or by a proof of the\r\n   mobile node's knowledge of a permanent home keygen token, the\r\n   lifetime for the binding SHOULD be set to the minimum of\r\n                                                 ^^^^^^^      \r\n   MAX_CGA_BINDING_LIFETIME and the value specified in the Lifetime\r\n   field of the Binding Update message.", "notes": "Page 21, 1st paragraph", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Christian Vogt", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "602", "doc-id": "RFC4866", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "                                          If the Binding Update message\r\n   is authenticated through a proof of the mobile node's reachability at\r\n   the home address, then the lifetime for the binding SHOULD be set to\r\n   the maximum of MAX_RR_BINDING_LIFETIME [1] and the value specified in\r\n       ^^^^^^^\r\n   the Lifetime field of the Binding Update message.\r\n\r\n", "correct_text": "                                          If the Binding Update message\r\n   is authenticated through a proof of the mobile node's reachability at\r\n   the home address, then the lifetime for the binding SHOULD be set to\r\n   the minimum of MAX_RR_BINDING_LIFETIME [1] and the value specified in\r\n       ^^^^^^^\r\n   the Lifetime field of the Binding Update message.\r\n", "notes": "Page 21, 1st paragraph", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Christian Vogt", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "603", "doc-id": "RFC4866", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "                                                       The correspondent\r\n    node may in either case grant a further reduced lifetime, but it MUST\r\n         ^^^\r\n    NOT accept a higher lifetime.", "correct_text": "                                                       The correspondent\r\n    node MAY in either case grant a further reduced lifetime, but it MUST\r\n         ^^^\r\n    NOT accept a higher lifetime.", "notes": "Page 21, 1st paragraph", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Christian Vogt", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "604", "doc-id": "RFC4782", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "The TCP host SHOULD set its congestion window cwnd to QS-cwnd only if\r\nQS-cwnd is greater than cwnd; otherwise, QS-cwnd is ignored.", "correct_text": "The TCP host SHOULD set its congestion window cwnd to QS-cwnd\r\nonly if QS-cwnd is greater than cwnd; otherwise, QS-cwnd is\r\nignored. In either case, the sender can transmit up to the\r\nminimum of the cwnd and the receiver's advertised window rwnd,\r\nas specified in [RFC2581].", "notes": "Clarification regarding the receive window.\r\n\r\nfrom pending", "submit_date": "2007-04-10", "submitter_name": "Michael Scharf", "verifier_id": "", "verifier_name": "Sally Floyd", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "605", "doc-id": "RFC4717", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "- ATM One-to-one Cell Mode\r\n- AAL5 PDU Frame Mode", "correct_text": "- ATM One-to-one Cell Mode  - PW Types: 0x000C and 0x000D\r\n- AAL5 PDU Frame Mode       - PW Type:  0x000E", "notes": "\n --VERIFIER NOTES-- \n   The author has correctly named the PW types and the reader can find the numeric identifier in both RFC4446 and the IANA registry. Thus the restatement of the numeric identifier is unnecessary.", "submit_date": "2007-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "606", "doc-id": "RFC2617", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "These headers are instances of the Proxy-Authenticate and\r\nProxy-Authorization headers specified in sections 10.33 and 10.34 of the\r\nHTTP/1.1 specification [2] ...", "correct_text": "These headers are instances of the Proxy-Authenticate and\r\nProxy-Authorization headers specified in sections 14.33 and 14.34 of the\r\nHTTP/1.1 specification [2] ...", "notes": "Wrong section references in RFC 2616.\r\n\r\nReported by Julian Reschke on an IETF mailing list.", "submit_date": "2007-10-17", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "607", "doc-id": "RFC4627", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "      object = begin-object [ member *( value-separator member ) ]\r\n      end-object\r\n", "correct_text": "      object = begin-object [ member *( value-separator member ) ]\r\n               end-object\r\n", "notes": "(edited by Alexey): Wrong indentation on the second line of the ABNF production, otherwise this is not legal ABNF.\r\n\r\n", "submit_date": "2007-10-17", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "608", "doc-id": "RFC3958", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.5", "orig_text": "iana-registered-protocol  = ALPHA *31ALPHANUM", "correct_text": "Maybe:\r\n\r\niana-registered-protocol  = ALPHA *31ALPHANUM\r\nALPHANUM =  ALPHA / DIGIT", "notes": "The ALPHANUM production is missing from the grammar (and is not in\r\nRFC 4234 either).\r\n\r\nAlexey: this was obsoleted by Erratum # 2106.\r\n\n --VERIFIER NOTES-- \nObsoleted by Erratum # 2106, which fixed this properly.\r\n", "submit_date": "2007-10-17", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2631", "doc-id": "RFC5988", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "   The example below shows an instance of the Link header encoding\r\n   multiple links, and also the use of RFC 2231 encoding to encode both\r\n   non-ASCII characters and language information.", "correct_text": "   The example below shows an instance of the Link header encoding\r\n   multiple links, and also the use of RFC 5987 encoding to encode both\r\n   non-ASCII characters and language information.", "notes": "RFC5987 clarifies RFC2231 for use in HTTP. The update in RFC5988 left two mentions of RFC2231 which should be updated.", "submit_date": "2010-11-13", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "612", "doc-id": "RFC4342", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "        ", "correct_text": "      Assume that the sender receives two feedback packets with \r\n      Acknowledgement Numbers A1 and A2, respectively.  Further assume\r\n      that the sender sent no data packets in between Sequence Numbers\r\n      A1+1 and A2, inclusive.  (All those packets must have been pure\r\n      acknowledgements, Sync and SyncAck packets, and so forth.)  Then\r\n      the sender MAY, at its discretion, ignore the second feedback\r\n      packet's Receive Rate option.  Note that when the sender decides\r\n      to ignore such an option, it MUST NOT reset the nofeedback timer\r\n      as it normally would; the nofeedback timer will expire as if the\r\n      second feedback packet had not been received.", "notes": "This is a new paragraph to be added to the end of Section 8.3.\r\nIt specifies that if the interval covered by a feedback packet doesn't include \r\nany data packets, then the sender doesn't have to use the reported receive rate.", "submit_date": "2007-10-24", "submitter_name": "Sally Floyd", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "613", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   acl                = \"(\" [acl-identrights *(SP acl-identrights)] \")\"\r\n                              *(SPACE acl-identrights)] \")\"", "correct_text": "   acl                = \"(\" [acl-identrights *(SP acl-identrights)] \")\"", "notes": "", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "614", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "[Formal syntax for UPDATECONTEXT was missing.] \r\n", "correct_text": "command-updatectx  = \"UPDATECONTEXT\" 1*(SP context)\r\n", "notes": "", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "615", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.6.2", "orig_text": "   Example:    C: Z4S9 DELETEDSINCE \"/folder/site/\" 19951205103412\r\n               S: Z4S9 DELETED \"blurdybloop\"\r\n               S: Z4S9 DELETED \"anteaters\"\r\n               S: Z4S9 OK \"DELETEDSINCE completed\"\r\n               C: Z4U3 DELETEDSINCE \"/folder/site/\" 19951009040854\r\n               S: Z4U3 NO (TOOOLD) \"Don't have that information\"\r\n", "correct_text": "   Example:    C: Z4S9 DELETEDSINCE \"/folder/site/\" \"19951205103412\"\r\n               S: Z4S9 DELETED \"blurdybloop\"\r\n               S: Z4S9 DELETED \"anteaters\"\r\n               S: Z4S9 OK \"DELETEDSINCE completed\"\r\n               C: Z4U3 DELETEDSINCE \"/folder/site/\" \"19951009040854\"\r\n               S: Z4U3 NO (TOOOLD) \"Don't have that information\"\r\n ", "notes": "Fix DELETEDSINCE example to include quotes around timestamps\r\n\r\n", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "616", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "\"count\" metadata-type is not documented in prose.  Will be removed in next revision.", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "617", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "command-lang       = \"LANG\" *(SP lang-tag)", "correct_text": "command-lang       = \"LANG\" 1*(SP lang-tag)", "notes": "Formal syntax for LANG command didn't require at least one language tag.  Since it doesn't make sense to change the language to an unspecified value, the ABNF needs to be changed.", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "618", "doc-id": "RFC1122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.5", "orig_text": "  OPEN to broadcast/multicast IP Address         |4.2.3.14| | | | |x|\r\n  Silently discard seg to bcast/mcast addr       |4.2.3.14|x| | | | |\r\n", "correct_text": "  OPEN to broadcast/multicast IP Address         |4.2.3.10| | | | |x|\r\n  Silently discard seg to bcast/mcast addr       |4.2.3.10|x| | | | |\r\n", "notes": "", "submit_date": "2007-10-25", "submitter_name": "Bob Braden", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "619", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.5.", "orig_text": "    C: A049 SEARCH \"/addressbook/~/public\" RETURN (\"addressbook.Alias\"\r\n           \"addressbook.Email\") MAKECONTEXT ENUMERATE \"blob\" LIMIT 100 1\r\n           SORT (\"addressbook.Alias\" \"i;octet\") NOT EQUAL\r\n           \"addressbook.Email\" NIL", "correct_text": "    C: A049 SEARCH \"/addressbook/~/public\" RETURN (\"addressbook.Alias\"\r\n           \"addressbook.Email\") MAKECONTEXT ENUMERATE \"blob\" LIMIT 100 1\r\n           SORT (\"addressbook.Alias\" \"i;octet\") NOT EQUAL\r\n           \"addressbook.Email\" \"i;octet\" NIL\r\n\r\n", "notes": "One SEARCH example is missing comparator in EQUAL statement.\r\n\r\n", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "620", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "Need to use entry-path on notifications when DEPTH > 1 is specified.\r\n\r\n", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "621", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "Note explicitly that client commands must be transmitted in full\r\nbefore starting a new command. This includes literals and the\r\nAUTHENTICATE exchange.", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "622", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "", "correct_text": "", "notes": "Note that \"revocation of rights\" is also know as \"negative rights\".\r\n\r\n", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "623", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6.1.", "orig_text": "An atom consists of one to 1024 non-special characters.  It must\r\nbegin with a letter.  Atoms are used for protocol keywords.", "correct_text": "", "notes": "Need to define the term \"non-special\" as equivalent to the syntax for \"ATOM-CHAR\".", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "624", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6.2.", "orig_text": "A number consists of one or more digit characters, and represents a\r\nnumeric value.  Numbers are restricted to the range of an unsigned\r\n32-bit integer: 0 < number < 4,294,967,296.\r\n", "correct_text": "", "notes": "Permit number to include 0 to match formal syntax.", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "625", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.5.", "orig_text": "   UTC  Universal Coordinated Time as maintained by the Bureau\r\n        International des Poids et Mesures (BIPM).", "correct_text": "", "notes": "\"Universal Coordinated Time\" should be \"Coordinated Universal Time\".\r\n", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "626", "doc-id": "RFC2244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.", "orig_text": "An ACL is represented by a multi-value with each value containing an \r\nidentifier followed by a tab character followed by the rights. ", "correct_text": "", "notes": "This is incorrect and should be deleted from the document. The formal syntax in errata 1 is normative.\r\n", "submit_date": "2001-01-23", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "627", "doc-id": "RFC2286", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the Appendix: ", "orig_text": "    /* if key is longer than 64 bytes reset it to key=SHA1(key) */", "correct_text": "   /* if key is longer than 64 bytes reset it to key=RMD160(key) */", "notes": "\r\n", "submit_date": "2002-09-17", "submitter_name": "Kevin Springle", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "629", "doc-id": "RFC3987", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Syntaxical. ", "correct_text": "Syntactical. ", "notes": "from pending", "submit_date": "2007-06-26", "submitter_name": "Martin Duerst", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "632", "doc-id": "RFC4028", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "If the incoming request contains a Supported header field with a\r\nvalue 'timer' but does not contain a Session-Expires header, it means\r\nthat the UAS is indicating support for timers but is not requesting\r\none.", "correct_text": "If the incoming request contains a Supported header field with a\r\nvalue 'timer' but does not contain a Session-Expires header, it means\r\nthat the UAC is indicating support for timers but is not requesting\r\none.", "notes": "I believe that in the first sentence, the reference to \"...the UAS is\r\nindicating support....\" should read \"... the UAC is indicating\r\nsupport...\"\r\n", "submit_date": "2007-06-25", "submitter_name": "Ervin Wittner", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "633", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.1", "orig_text": "                             +----------+---------+-------+\r\n                        DB = |  lHash   |    PS   |   M   |\r\n                             +----------+---------+-------+\r\n                                            |\r\n                  +----------+              V\r\n                  |   seed   |--> MGF ---> xor\r\n                  +----------+              |\r\n                        |                   |\r\n               +--+     V                   |\r\n               |00|    xor <----- MGF <-----|\r\n               +--+     |                   |\r\n                 |      |                   |\r\n                 V      V                   V\r\n               +--+----------+----------------------------+\r\n         EM =  |00|maskedSeed|          maskedDB          |\r\n               +--+----------+----------------------------+", "correct_text": "                             +----------+--------+--+-------+\r\n                        DB = |  lHash   |   PS   |01|   M   |\r\n                             +----------+--------+--+-------+\r\n                                            |\r\n                  +----------+              V\r\n                  |   seed   |--> MGF ---> xor\r\n                  +----------+              |\r\n                        |                   |\r\n               +--+     V                   |\r\n               |00|    xor <----- MGF <-----|\r\n               +--+     |                   |\r\n                 |      |                   |\r\n                 V      V                   V\r\n               +--+----------+------------------------------+\r\n         EM =  |00|maskedSeed|          maskedDB            |\r\n               +--+----------+------------------------------+", "notes": "", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "635", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2.3", "orig_text": "       * maskGenAlgorithm identifies the mask generation function.  It\r\n         shall be an algorithm ID with an OID in the set\r\n\r\n         PKCS1MGFAlgorithms (see Appendix A.2.1).  The default mask\r\n         generation function is MGF1 with SHA-1.  For MGF1 (and more\r\n         generally, ...", "correct_text": "       * maskGenAlgorithm identifies the mask generation function.  It\r\n         shall be an algorithm ID with an OID in the set\r\n         PKCS1MGFAlgorithms (see Appendix A.2.1).  The default mask\r\n         generation function is MGF1 with SHA-1.  For MGF1 (and more\r\n         generally, ...", "notes": "The bulleted section for 'maskGenAlgorithm' contains an unexpected\r\nblank line within the second sentence.\r\n\r\n\r\n\r\n\r\n \r\n", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3362", "doc-id": "RFC6110", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Table of Contents\r\n-----------------\r\nOLD\r\n      12.16. The @nma:unique Annotation ..............................74\r\n\r\n\r\nSec. 5.3, entry in Table 2:\r\n---------------------------\r\nOLD\r\n        | @nma:unique               | 10.55              |      |\r\n\r\nSec. 10.55:\r\n-----------\r\nOLD\r\n\r\n   This statement is mapped to the @nma:unique attribute.  ARGUMENT MUST\r\n   be translated so that every node identifier in each of its components\r\n   is prefixed with the namespace prefix of the local module, unless the\r\n   prefix is already present.  The result of this translation then\r\n   becomes the value of the @nma:unique attribute.\r\n\r\n   For example, assuming that the local module prefix is \"ex\",\r\n\r\n   unique \"foo ex:bar/baz\"\r\n\r\n   is mapped to the following attribute/value pair:\r\n\r\n   nma:unique=\"ex:foo ex:bar/ex:baz\"\r\n\r\nSec. 11.2, second paragraph:\r\n----------------------------\r\nOLD\r\n\r\n   In a Schematron schema generated by the second mapping step, the\r\n   basic unit of organization is a rule represented by the <sch:rule>\r\n   element.  The following NETMOD-specific annotations from the hybrid\r\n   schema (henceforth called \"semantic annotations\") are mapped to\r\n   corresponding Schematron rules: <nma:must>, @nma:key, @nma:unique,\r\n   @nma:max-elements, @nma:min-elements, @nma:when, @nma:leafref, @nma:\r\n   leaf-list, and also @nma:mandatory appearing as an attribute of <rng:\r\n   choice> (see Section 11.2.1).\r\n\r\nSec. 12.16 (including its title):\r\n---------------------------------\r\nOLD\r\n\r\n12.16.  The @nma:unique Annotation\r\n\r\n   The mapping of this annotation is almost identical as for @nma:key,\r\n   see Section 12.8, with two small differences:\r\n\r\n   o  The value of @nma:unique is a list of descendant schema node\r\n      identifiers rather than simple leaf names.  However, the XPath\r\n      expressions specified in Section 12.8 work without any\r\n      modifications if the descendant schema node identifiers are\r\n      substituted for k_1, k_2, ..., k_n.\r\n\r\n   o  The message appearing as the text of <sch:report> is different:\r\n      \"Violated uniqueness for list CONTELEM\".\r\n\r\nAppendix A:\r\n-----------\r\nOLD\r\n\r\n  <define name=\"unique-attribute\">\r\n    <optional>\r\n      <attribute name=\"nma:unique\">\r\n        <list>\r\n          <data type=\"token\"/>\r\n        </list>\r\n      </attribute>\r\n    </optional>\r\n  </define>\r\n\r\n\r\n", "correct_text": "Table of Contents\r\n-----------------\r\nNEW\r\n      12.16. The <nma:unique> Annotation ..............................74\r\n\r\nSec. 5.3, entry in Table 2:\r\n---------------------------\r\nNEW\r\n        | <nma:unique>              | 10.55              |      |\r\n\r\nSec. 10.55:\r\n-----------\r\n\r\nNEW\r\n\r\n   This statement is mapped to the <nma:unique> element.  ARGUMENT MUST\r\n   be translated so that every node identifier in each of its components\r\n   is prefixed with the namespace prefix of the local module, unless the\r\n   prefix is already present.  The result of this translation then\r\n   becomes the value of the @tag attribute which is attached to the\r\n   <nma:unique> element.\r\n\r\n   For example, assuming that the local module prefix is \"ex\",\r\n\r\n   unique \"foo ex:bar/baz\"\r\n\r\n   is mapped to the following annotation element:\r\n\r\n   <nma:unique tag=\"ex:foo ex:bar/ex:baz\"/>\r\n\r\nSec. 11.2, second paragraph:\r\n----------------------------\r\nNEW\r\n\r\n   In a Schematron schema generated by the second mapping step, the\r\n   basic unit of organization is a rule represented by the <sch:rule>\r\n   element.  The following NETMOD-specific annotations from the hybrid\r\n   schema (henceforth called \"semantic annotations\") are mapped to\r\n   corresponding Schematron rules: <nma:must>, <nma:unique>, @nma:key,\r\n   @nma:max-elements, @nma:min-elements, @nma:when, @nma:leafref, @nma:\r\n   leaf-list, and also @nma:mandatory appearing as an attribute of <rng:\r\n   choice> (see Section 11.2.1).\r\n\r\nSec. 12.16 (including its title):\r\n---------------------------------\r\n12.16.  The <nma:unique> Annotation\r\n\r\n   The mapping of this annotation is similar to @nma:key,\r\n   see Section 12.8, with two small differences:\r\n\r\n   o  The value of the @tag attribute of <nma:unique> is a list of\r\n      descendant schema node identifiers rather than simple leaf names.\r\n      However, the XPath expressions specified in Section 12.8 work\r\n      without any modifications if the descendant schema node\r\n      identifiers are substituted for k_1, k_2, ..., k_n.\r\n\r\n   o  The message appearing as the text of <sch:report> is different:\r\n      \"Violated uniqueness of NODES\", where NODES is the value of the\r\n      @tag attribute.\r\n\r\nAppendix A:\r\n-----------\r\nNEW\r\n\r\n  <define name=\"unique-element\">\r\n    <element name=\"nma:unique\">\r\n      <attribute name=\"tag\">\r\n        <list>\r\n          <data type=\"token\"/>\r\n        </list>\r\n      </attribute>\r\n    </element>\r\n  </define>", "notes": "The 'unique' YANG statement, which is a substatement of 'list', has the cardinality of \"0..n\". Multiple sibling 'unique' statements cannot be mapped to a single @nma:unique attribute in the hybrid schema. Therefore, an XML element, <nma:unique>, has to be used for mapping the 'unique' statement instead of the attribute, much like the it is done for the 'must' statement.\r\n\r\nThis change to the mapping of the 'unique' statement is realized by changing the text of Section 10.55. Several other sections are also affected by this change.", "submit_date": "2012-09-21", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "646", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.3", "orig_text": "Content-Location: images/ietflogo2.gif\r\n; Note - Relative Content-Location is resolved by base\r\n; specified in the Multipart/Related Content-Location heading", "correct_text": "Content-Location: images/ietflogo2.gif\r\nComments: Note - Relative Content-Location is resolved by base\r\nspecified in the Multipart/Related Content-Location heading", "notes": "", "submit_date": "2002-01-21", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "647", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.3", "orig_text": "Content-Location: images/ietflogo2.gif\r\n; Note - Relative Content-Location is resolved by base\r\n; specified in the Multipart/Related Content-Location heading", "correct_text": "Content-Location: images/ietflogo2.gif\r\nComments: Note - Relative Content-Location is resolved by base\r\nspecified in the Multipart/Related Content-Location heading", "notes": "", "submit_date": "2002-01-21", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "648", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.6", "orig_text": "Content-ID: <foo3@foo1@bar.net>", "correct_text": "Content-ID: <foo3.foo1@bar.net>", "notes": "", "submit_date": "2002-01-21", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "649", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.6", "orig_text": "Content-Type: multipart/related; boundary=\"boundary-example-2\";\r\n          type=\"text/html\"\r\n--boundary-example-2", "correct_text": "Content-Type: multipart/related; boundary=\"boundary-example-2\";\r\n          type=\"text/html\"\r\n\r\n--boundary-example-2", "notes": "\r\n", "submit_date": "2002-01-21", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "650", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.6", "orig_text": "Content-ID: <foo4@foo1@bar.net>", "correct_text": "Content-ID: <foo4.foo1@bar.net>", "notes": "\r\n", "submit_date": "2002-01-21", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "651", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.6", "orig_text": "Content-Type: multipart/related; boundary=\"boundary-example-3\";\r\n          type=\"text/html\"\r\n--boundary-example-3\r\nContent-Type: text/html;charset=\"US-ASCII\"\r\nContent-ID: <4@foo@bar.net>", "correct_text": "Content-Type: multipart/related; boundary=\"boundary-example-3\";\r\n          type=\"text/html\"\r\n\r\n--boundary-example-3\r\nContent-Type: text/html;charset=\"US-ASCII\"\r\nContent-ID: <4.foo@bar.net>\r\n\r\n", "notes": "\r\n\r\n", "submit_date": "2002-01-21", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3008", "doc-id": "RFC6351", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "### Section 3.3: vCard Format Specification\r\n#\r\n# 3.3\r\niana-token = xsd:string { pattern = \"[a-zA-Z0-9-]+\" }\r\nx-name = xsd:string { pattern = \"x-[a-zA-Z0-9-]+\" }\r\n", "correct_text": "### Section 3.3: vCard Format Specification\r\n#\r\n# 3.3\r\niana-token = xsd:string { pattern = \"[a-zA-Z0-9\\-]+\" }\r\nx-name = xsd:string { pattern = \"x-[a-zA-Z0-9\\-]+\" }\r\n", "notes": "The minus sign has to be escaped with a backslash.", "submit_date": "2011-10-31", "submitter_name": "Torsten Fusswinkel", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "682", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.1", "orig_text": "Content-Type set to \"application/coffee-pot-command\".", "correct_text": "Content-Type set to \"message/coffeepot\".", "notes": "There is a discrepancy in RFC2324 regarding the content type for HTCPCP \r\nrequests. In section 2.1.1, the MIME type is \r\n\"application/coffee-pot-command\", while in section 4 the MIME type is \r\n\"message/coffepot\".\r\n\r\n--VERIFIER NOTE--\r\nThis change will make section 2.1.1 consistent with section 4.", "submit_date": "2002-11-20", "submitter_name": "Andrew Cook", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "636", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.1", "orig_text": "Six hash functions are given as examples for the encoding methods\r\nin this document: MD2 [33], MD5 [41], SHA-1 [38], and the\r\nproposed algorithms SHA-256, SHA-384, and SHA-512 [39].", "correct_text": "Six hash functions are given as examples for the encoding methods\r\nin this document: MD2 [33], MD5 [41], and the algorithms SHA-1,\r\nSHA-256, SHA-384, and SHA-512 [38'].", "notes": "RFC 3447 has been published on Feb 04, 2003 (according to the\r\ntime stamp of rfc3447.txt on <ftp://ftp.rfc-editor.org/in-notes/>).\r\n\r\nThe new \"Secure Hash Standard\", FIPS Pub 180-2 had been published\r\non \"2002 August 1\" and became \"effective on February 1, 2003\" as\r\nspecified on page ii of FIPS 180-2, \"9. Implementation Schedule\".\r\n\r\nBoth events predate the publishing date of RFC 3447.\r\n\r\nTherefore, the first sentence of the second paragraph on page 53 should be as noted above.", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "638", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "F", "orig_text": "[38]  National Institute of Standards and Technology (NIST).\r\n      FIPS Publication 180-1: Secure Hash Standard.  April 1994.\r\n\r\n[39]  National Institute of Standards and Technology (NIST).\r\n      Draft FIPS 180-2: Secure Hash Standard.  Draft, May 2001.\r\n      Available from http://www.nist.gov/sha/.", "correct_text": "[38]  National Institute of Standards and Technology (NIST).\r\n      FIPS Publication 180-2: Secure Hash Standard.  August\r\n      2002.\r\n\r\n", "notes": "RFC 3447 has been published on Feb 04, 2003 (according to the\r\ntime stamp of rfc3447.txt on <ftp://ftp.rfc-editor.org/in-notes/>).\r\n\r\nThe new \"Secure Hash Standard\", FIPS Pub 180-2 had been published\r\non \"2002 August 1\" and became \"effective on February 1, 2003\" as\r\nspecified on page ii of FIPS 180-2, \"9. Implementation Schedule\".\r\n\r\nBoth events predate the publishing date of RFC 3447.\r\n\r\nThe reference should be updated as noted above.\r\n", "submit_date": "2003-08-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "639", "doc-id": "RFC3217", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "   This section contains a RC2 Key Wrap example. Intermediate values\r\n   corresponding to the named items in section 4.1 are given in\r\n   hexadecimal.", "correct_text": "   This section contains a RC2 Key Wrap example. Intermediate values\r\n   corresponding to the named items in section 4.1 are given in\r\n   hexadecimal. In this example, the effective key length parameter for\r\n   the RC2 algorithm should be 40 bits.\r\n\r\n==========================================\r\n\r\nRC2 Effective Key Bits: 40\r\n\r\nCEK is (16 bytes):\r\n b7 0a 25 fb c9 d8 6a 86 05 0c e0 d7 11 ea d4 d9\r\n\r\nLENGTH is: 16\r\n\r\nLCEK is (17 bytes):\r\n 10 b7 0a 25 fb c9 d8 6a 86 05 0c e0 d7 11 ea d4\r\n d9\r\n\r\nPAD is (7 bytes):\r\n 48 45 cc e7 fd 12 50\r\n\r\nLCEKPAD is (24 bytes):\r\n 10 b7 0a 25 fb c9 d8 6a 86 05 0c e0 d7 11 ea d4\r\n d9 48 45 cc e7 fd 12 50\r\n\r\nSHA-1 Digest is (20 bytes):\r\n 0a 6f f1 9f db 40 49 88 a2 fa ee 2e 53 37 12 98\r\n 7e ca 48 06\r\n\r\nICV is (8 bytes):\r\n 0a 6f f1 9f db 40 49 88\r\n\r\nLCEKPADICV is (32 bytes):\r\n 10 b7 0a 25 fb c9 d8 6a 86 05 0c e0 d7 11 ea d4\r\n d9 48 45 cc e7 fd 12 50 0a 6f f1 9f db 40 49 88\r\n\r\nIV is (8 bytes):\r\n c7 d9 00 59 b2 9e 97 f7\r\n\r\nKEK (16 bytes):\r\n fd 04 fd 08 06 07 07 fb 00 03 fe ff fd 02 fe 05\r\n\r\nTEMP1 (32 bytes):\r\n a0 1d a2 59 37 93 12 60 e4 8c 55 f5 04 ce 70 b8\r\n ac 8c d7 9e ff 8e 99 32 9f a9 8a 07 a3 1f f7 a7\r\n\r\nTEMP2 (40 bytes):\r\n c7 d9 00 59 b2 9e 97 f7 a0 1d a2 59 37 93 12 60\r\n e4 8c 55 f5 04 ce 70 b8 ac 8c d7 9e ff 8e 99 32\r\n 9f a9 8a 07 a3 1f f7 a7\r\n\r\nTEMP3 (40 bytes):\r\n a7 f7 1f a3 07 8a a9 9f 32 99 8e ff 9e d7 8c ac\r\n b8 70 ce 04 f5 55 8c e4 60 12 93 37 59 a2 1d a0\r\n f7 97 9e b2 59 00 d9 c7\r\n\r\nFinalIV (8 bytes):\r\n 4a dd a2 2c 79 e8 21 05\r\n\r\nKEK (16 bytes):\r\n fd 04 fd 08 06 07 07 fb 00 03 fe ff fd 02 fe 05\r\n\r\nRESULT (40 bytes):\r\n 70 e6 99 fb 57 01 f7 83 33 30 fb 71 e8 7c 85 a4\r\n 20 bd c9 9a f0 5d 22 af 5a 0e 48 d3 5f 31 38 98\r\n 6c ba af b4 b2 8d 4f 35\r\n\r\n==========================================\r\n\r\nRC2 Effective Key Bits: 128\r\n\r\nCEK is (16 bytes):\r\n b7 0a 25 fb c9 d8 6a 86 05 0c e0 d7 11 ea d4 d9\r\n\r\nLENGTH is: 16\r\n\r\nLCEK is (17 bytes):\r\n 10 b7 0a 25 fb c9 d8 6a 86 05 0c e0 d7 11 ea d4\r\n d9\r\n\r\nPAD is (7 bytes):\r\n 48 45 cc e7 fd 12 50\r\n\r\nLCEKPAD is (24 bytes):\r\n 10 b7 0a 25 fb c9 d8 6a 86 05 0c e0 d7 11 ea d4\r\n d9 48 45 cc e7 fd 12 50\r\n\r\nSHA-1 Digest is (20 bytes):\r\n 0a 6f f1 9f db 40 49 88 a2 fa ee 2e 53 37 12 98\r\n 7e ca 48 06\r\n\r\nICV is (8 bytes):\r\n 0a 6f f1 9f db 40 49 88\r\n\r\nLCEKPADICV is (32 bytes):\r\n 10 b7 0a 25 fb c9 d8 6a 86 05 0c e0 d7 11 ea d4\r\n d9 48 45 cc e7 fd 12 50 0a 6f f1 9f db 40 49 88\r\n\r\nIV is (8 bytes):\r\n c7 d9 00 59 b2 9e 97 f7\r\n\r\nKEK (16 bytes):\r\n fd 04 fd 08 06 07 07 fb 00 03 fe ff fd 02 fe 05\r\n\r\nTEMP1 (32 bytes):\r\n 03 5e 97 2a b1 5c c4 c9 c4 a0 3d ba a3 5a 21 66\r\n 67 e4 3e bc a2 67 46 ae 86 08 db c8 9e 64 ca 29\r\n\r\nTEMP2 (40 bytes):\r\n c7 d9 00 59 b2 9e 97 f7 03 5e 97 2a b1 5c c4 c9\r\n c4 a0 3d ba a3 5a 21 66 67 e4 3e bc a2 67 46 ae\r\n 86 08 db c8 9e 64 ca 29\r\n\r\nTEMP3 (40 bytes):\r\n 29 ca 64 9e c8 db 08 86 ae 46 67 a2 bc 3e e4 67\r\n 66 21 5a a3 ba 3d a0 c4 c9 c4 5c b1 2a 97 5e 03\r\n f7 97 9e b2 59 00 d9 c7\r\n\r\nFinalIV (8 bytes):\r\n 4a dd a2 2c 79 e8 21 05\r\n\r\nKEK (16 bytes):\r\n fd 04 fd 08 06 07 07 fb 00 03 fe ff fd 02 fe 05\r\n\r\nRESULT (40 bytes):\r\n f4 d8 02 1c 1e a4 63 d2 17 a9 eb 69 29 ff a5 77\r\n 36 d3 e2 03 86 c9 09 93 83 5b 4b e4 ad 8d 8a 1b\r\n c6 3b 25 de 2b f7 79 93\r\n", "notes": "The text is silent about the RC2 parameter that indicates the effective key size.  This errata resolves the ambiguity.\r\n\r\nTo aid implementors, this errata includes two examples.  The first one matches section 4.4 and uses a 40-bit effective key size.  The second one uses a 128-bit effective key size.  Many thanks to Peter Yee for generating the examples and Blake Ramsdell for checking them.", "submit_date": "2007-10-28", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "640", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "DESCRIPTION;ALTREP=\"http://www.wiz.org\":The Fall'98 Wild Wizards\r\n  Conference - - Las Vegas, NV, USA", "correct_text": "DESCRIPTION;ALTREP=\"http://www.wiz.org\":The Fall'98 Wild Wizards\r\n  Conference - - Las Vegas\\, NV\\, USA", "notes": "", "submit_date": "2004-01-07", "submitter_name": "Dave Flater", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "641", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "DESCRIPTION;ALTREP=\"CID:<part3.msg.970415T083000@host.com>\":Project\r\nXYZ Review Meeting will include the following agenda items: (a)\r\nMarket Overview, (b) Finances, (c) Project Management", "correct_text": "DESCRIPTION;ALTREP=\"CID:<part3.msg.970415T083000@host.com>\":Project\r\nXYZ Review Meeting will include the following agenda items: (a)\r\nMarket Overview\\, (b) Finances\\, (c) Project Management\r\n", "notes": "\r\n\r\n\r\n\r\n\r\n      \r\n", "submit_date": "2004-01-07", "submitter_name": "Dave Flater", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "642", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.8.1.7", "orig_text": "LOCATION:Conference Room - F123, Bldg. 002\r\n\r\nLOCATION;ALTREP=\"http://xyzcorp.com/conf-rooms/f123.vcf\":\r\nConference Room - F123, Bldg. 002\r\n", "correct_text": "LOCATION:Conference Room - F123\\, Bldg. 002\r\n\r\nLOCATION;ALTREP=\"http://xyzcorp.com/conf-rooms/f123.vcf\":\r\nConference Room - F123\\, Bldg. 002\r\n", "notes": "", "submit_date": "2004-01-07", "submitter_name": "Dave Flater", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "643", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "DESCRIPTION:Networld+Interop Conference\r\nand Exhibit\\nAtlanta World Congress Center\\n\r\nAtlanta, Georgia END:VEVENT END:VCALENDAR\r\n", "correct_text": "DESCRIPTION:Networld+Interop Conference\r\nand Exhibit\\nAtlanta World Congress Center\\n\r\nAtlanta\\, Georgia END:VEVENT END:VCALENDAR\r\n", "notes": "", "submit_date": "2004-01-07", "submitter_name": "Dave Flater", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "644", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "CATEGORY:Project Report, XYZ, Weekly Meeting\r\nDESCRIPTION:Project xyz Review Meeting Minutes\\n\r\nAgenda\\n1. Review of project version 1.0 requirements.\\n2.\r\nDefinition\r\nof project processes.\\n3. Review of project schedule.\\n\r\nParticipants: John Smith, Jane Doe, Jim Dandy\\n-It was", "correct_text": "CATEGORIES:Project Report,XYZ,Weekly Meeting\r\nDESCRIPTION:Project xyz Review Meeting Minutes\\n\r\nAgenda\\n1. Review of project version 1.0 requirements.\\n2.\r\nDefinition of project processes.\\n3. Review of project schedule.\\n\r\nParticipants: John Smith\\, Jane Doe\\, Jim Dandy\\n-It was\r\n", "notes": "The following change addresses the escaping of commas and two\r\nunrelated issues:  the spurious CATEGORY property and a line wrapping\r\nerror.", "submit_date": "2004-01-07", "submitter_name": "Dave Flater", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "645", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.2", "orig_text": "Content-Type: multipart/related; boundary=\"boundary-example\";\r\n       type=\"text/html\"; start=\"<foo3@foo1@bar.net>\"\r\n\r\n--boundary-example\r\nContent-Type: text/html;charset=\"US-ASCII\"\r\nContent-ID: <foo3@foo1@bar.net>", "correct_text": "Content-Type: multipart/related; boundary=\"boundary-example\";\r\n       type=\"text/html\"; start=\"<foo3.foo1@bar.net>\"\r\n\r\n--boundary-example\r\nContent-Type: text/html;charset=\"US-ASCII\"\r\nContent-ID: <foo3.foo1@bar.net>", "notes": "\r\n\r\n", "submit_date": "2002-01-21", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4713", "doc-id": "RFC6184", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.1", "orig_text": "profile-level-id:\r\n         A base16 [7] (hexadecimal) representation of the following\r\n         three bytes in the sequence parameter", "correct_text": "profile-level-id:\r\n         A base16 [7] (hexadecimal) representation of the following\r\n         six bytes in the sequence parameter", "notes": "profile-level-id is composed of three 2-byte length fields.\n --VERIFIER NOTES-- \nThe original text is correct; 3 bytes in the binary representation become 6 text characters in base16. ", "submit_date": "2016-06-17", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-07 09:13:01"}, {"errata_id": "652", "doc-id": "RFC2616", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "4.If the message uses the media type \"multipart/byteranges\", and the\r\n  ransfer-length is not otherwise specified, then this self-\r\n  elimiting media type defines the transfer-length. This media type\r\n  UST NOT be used unless the sender knows that the recipient can arse\r\n  it; the presence in a request of a Range header with ultiple byte-\r\n  range specifiers from a 1.1 client implies that the lient can parse\r\n  multipart/byteranges responses.", "correct_text": "4.If the message uses the media type \"multipart/byteranges\", and the\r\n  Transfer-length is not otherwise specified, then this self-\r\n  delimiting media type defines the transfer-length. This media type\r\n  MUST NOT be used unless the sender knows that the recipient can parse\r\n  it; the presence in a request of a Range header with multiple byte-\r\n  range specifiers from a 1.1 client implies that the client can parse\r\n  multipart/byteranges responses.", "notes": "Missing the first character of 6 words.", "submit_date": "2000-12-23", "submitter_name": "Justin Erenkrantz", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "653", "doc-id": "RFC2616", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.3", "orig_text": "Each of these representations is termed a `varriant'.", "correct_text": "Each of these representations is termed a `variant'.\r\n\r\n", "notes": "", "submit_date": "2000-12-23", "submitter_name": "Justin Erenkrantz", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "655", "doc-id": "RFC2625", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "       1. This is REQUIRED for FC-4 (IP and ARP) packets\r\n\r\n         - Routing bits of R_CTL field MUST indicate Device Data\r\n           frames (0000)\r\n         - Information Category of R_CTL field MUST indicate\r\n           Unsolicited Data (0100)", "correct_text": "       1. This is REQUIRED for FC-4 (IP and ARP) packets\r\n\r\n         - Routing bits of R_CTL field MUST indicate Device Data\r\n           frames (0000)\r\n         - Information Category of R_CTL field MUST indicate\r\n           Unsolicited Data (0100)\r\n           \r\n           This does not apply to FARP-REQ and FARP-REPLY.", "notes": "Add a blank line and the sentence:\r\nThis does not apply to FARP-REQ and FARP-REPLY.\r\nindented as shown so that it applies to both bulleted items.", "submit_date": "2003-07-21", "submitter_name": "Elizabeth G. Rodriguez", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "656", "doc-id": "RFC2625", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "E.4.2", "orig_text": "      Code Points for FC Frame with FARP-REQ Command for MATCH_WW_PN_NN\r\n +---+----------------+----------------+----------------+------------+\r\n |Wrd|    <31:24>     |    <23:16>     |    <15:08>     |    <07:00> |\r\n +---+----------------+----------------+----------------+------------+\r\n | 0 |    0x04        |                     D_ID =                   |\r\n |   |                |    0xFF             0xFF              0xFF   |\r\n +---+----------------+----------------+----------------+------------+\r\n | 1 |    0x00        |                     S_ID                     |\r\n +---+----------------+----------------+----------------+------------+\r\n | 2 |    0x05        |                     F_CTL                    |\r\n +---+----------------+----------------+----------------+------------+\r\n | 3 |   SEQ_ID       |     0x20       |          SEQ_CNT            |\r\n +---+----------------+----------------+----------------+------------+\r\n\r\n", "correct_text": "      Code Points for FC Frame with FARP-REQ Command for MATCH_WW_PN_NN\r\n +---+----------------+----------------+----------------+------------+\r\n |Wrd|    <31:24>     |    <23:16>     |    <15:08>     |    <07:00> |\r\n +---+----------------+----------------+----------------+------------+\r\n | 0 |    0x22        |                     D_ID =                   |\r\n |   |                |    0xFF             0xFF              0xFF   |\r\n +---+----------------+----------------+----------------+------------+\r\n | 1 |    0x00        |                     S_ID                     |\r\n +---+----------------+----------------+----------------+------------+\r\n | 2 |    0x01        |                     F_CTL                    |\r\n +---+----------------+----------------+----------------+------------+\r\n | 3 |   SEQ_ID       |     0x00       |          SEQ_CNT            |\r\n +---+----------------+----------------+----------------+------------+", "notes": "This embodies three changes:\r\n- R_CTL (word 0, bits 31:24) should be 0x22, not 0x04\r\n- TYPE (word 2, bits 31:24) should be 0x01, not 0x05\r\n- DF_CTL (word 3, bits 23:16) should be 0x00, not 0x20\r\n", "submit_date": "2003-07-21", "submitter_name": "Elizabeth G. Rodriguez", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "674", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1.1", "orig_text": "Normally, the response to EHLO will be a multiline reply.  Each line\r\nof the response contains a keyword and, optionally, one or more\r\nparameters.  Following the normal syntax for multiline replies, these\r\nkeyworks follow the code (250) and a hyphen for all but the last\r\n^^^^^^^^", "correct_text": "Normally, the response to EHLO will be a multiline reply.  Each line\r\nof the response contains a keyword and, optionally, one or more\r\nparameters.  Following the normal syntax for multiline replies, these\r\nkeywords follow the code (250) and a hyphen for all but the last\r\n", "notes": "Should be \"keywords\".\r\n", "submit_date": "2004-01-12", "submitter_name": "Vincent Lefevre", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "675", "doc-id": "RFC4368", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "    [...].  Note that mplsLcAtmStdUnlabTrafVci and mplsLcAtmStdCtrlVci\r\n   MUST not be equal; nor should mplsLcAtmStdCtrlVpi or\r\n   mplsLcAtmStdUnlabTrafVpi be equal.\r\n", "correct_text": "  Note that the VPI/VCI pair used for unlabeled traffic \r\n  (mplsLcAtmStdUnlabTrafVpi, mplsLcAtmStdUnlabTrafVci) MUST NOT equal\r\n  the VPI/VIC pair used for control traffic (mplsLcAtmStdCtrlVpi,\r\n  mplsLcAtmStdCtrlVci).\r\n", "notes": "The  (Vpi, Vci) - *pairs*  must not be equal for every\r\nmplsLcAtmStdInterfaceConfEntry.", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "676", "doc-id": "RFC4377", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   Furthermore, the automation of path liveliness is desired in cases\r\n   where large numbers of LSPs might be tested.  [...]", "correct_text": "|  Furthermore, the automation of path liveliness testing is desired in\r\n   cases where large numbers of LSPs might be tested.  [...]", "notes": "Fix word omission. Insert \"testing\"\r\n", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "677", "doc-id": "RFC4377", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.11.1", "orig_text": "      (1) At an ingress LSR, accounting of traffic through LSPs that\r\n|         begin at each egress in question.\r\n          ^^^^^\r\n\r\n      (2) At an intermediate LSR, accounting of traffic through LSPs for\r\n|         each pair of ingress to egress.\r\n                               ^^ \r\n            v\r\n|     (3) At egress LSR, accounting of traffic through LSPs for each\r\n          ingress.", "correct_text": "      (1) At an ingress LSR, accounting of traffic through LSPs that\r\n|         end at each egress in question.\r\n\r\n      (2) At an intermediate LSR, accounting of traffic through LSPs for\r\n|         each pair of ingress and egress.\r\n\r\n|     (3) At an egress LSR, accounting of traffic through LSPs for each\r\n          ingress.", "notes": "Fix wrong wording in bullet (1) [s/begin/end/]\r\n\r\nMinor typos in bullets (2) and (3).\r\n", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2376", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "Figure 1 in Section 3, on page 8, says:\r\n\r\n               Initiator                        Responder\r\n\r\n   I_message = HDR, T, RAND, [IDi], IDr,\r\n               {SP}, DHi, KEMAC\r\n                    ----------------------->   R_message = HDR, T,\r\n                                                [IDr], IDi, DHr,\r\n                                                DHi, KEMAC\r\n                    <----------------------\r\n\r\n\r\n", "correct_text": "To avoid optional empty protocol elements,\r\nit should perhaps better say:\r\n\r\n               Initiator                        Responder\r\n\r\n|  I_message = HDR, T, RAND, [IDi,] IDr,\r\n               {SP}, DHi, KEMAC\r\n                    ----------------------->   R_message = HDR, T,\r\n|                                               [IDr,] IDi, DHr,\r\n                                                DHi, KEMAC\r\n                    <----------------------\r\n\r\n\r\n\r\n Similar corrections would be suitable in Section 3.1 for Figure 2,\r\non page 10.\r\n", "notes": "error in message syntax notation:\r\n", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "657", "doc-id": "RFC2625", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "E.4.2", "orig_text": "             Code Points for FC Frame with FARP-REPLY Command\r\n +---+----------------+----------------+----------------+------------+\r\n |Wrd|    <31:24>     |    <23:16>     |    <15:08>     |    <07:00> |\r\n +---+----------------+----------------+----------------+------------+\r\n | 0 |    0x04        |                     D_ID                     |\r\n +---+----------------+----------------+----------------+------------+\r\n | 1 |    0x00        |                     S_ID                     |\r\n +---+----------------+----------------+----------------+------------+\r\n | 2 |    0x05        |                     F_CTL                    |\r\n +---+----------------+----------------+----------------+------------+\r\n | 3 |   SEQ_ID       |     0x20       |          SEQ_CNT            |\r\n +---+----------------+----------------+----------------+------------+", "correct_text": "             Code Points for FC Frame with FARP-REPLY Command\r\n +---+----------------+----------------+----------------+------------+\r\n |Wrd|    <31:24>     |    <23:16>     |    <15:08>     |    <07:00> |\r\n +---+----------------+----------------+----------------+------------+\r\n | 0 |    0x23        |                     D_ID                     |\r\n +---+----------------+----------------+----------------+------------+\r\n | 1 |    0x00        |                     S_ID                     |\r\n +---+----------------+----------------+----------------+------------+\r\n | 2 |    0x01        |                     F_CTL                    |\r\n +---+----------------+----------------+----------------+------------+\r\n | 3 |   SEQ_ID       |     0x00       |          SEQ_CNT            |\r\n +---+----------------+----------------+----------------+------------+", "notes": "This embodies three changes:\r\n- R_CTL (word 0, bits 31:24) should be 0x23, not 0x04\r\n- TYPE (word 2, bits 31:24) should be 0x01, not 0x05\r\n- DF_CTL (word 3, bits 23:16) should be 0x00, not 0x20\r\n", "submit_date": "2003-07-21", "submitter_name": "Elizabeth G. Rodriguez", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "658", "doc-id": "RFC2630", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Reference", "orig_text": "NEWPKCS#1  Kaliski, B., \"PKCS #1: RSA Encryption, Version 2.0\",\r\n           RFC 2347, October 1998.", "correct_text": "NEWPKCS#1  Kaliski, B., \"PKCS #1: RSA Encryption, Version 2.0\",\r\n           RFC 2437, October 1998.\r\n", "notes": "", "submit_date": "2000-12-26", "submitter_name": "Joseph Baran", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "659", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3.3", "orig_text": "    0                  1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3        |       2       |        Packet length          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                           Router ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                             Area ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           Checksum            |  Instance ID  |      0        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       0       |                 Options                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        Interface MTU         |       0        |0|0|0|0|0|I|M|MS\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    DD sequence number                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                     An LSA Header                           -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    ...                              |\r\n\r\n", "correct_text": "\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3        |       2       |         Packet length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Router ID                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                           Area ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           Checksum            |  Instance ID  |      0        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       0       |                 Options                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         Interface MTU         |       0       |0|0|0|0|0|I|M|MS\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     DD sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                      An LSA Header                          -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5007", "doc-id": "RFC5309", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "For the ARP implementation (which checks that the subnet of the source \r\naddress of the ARP request matches the local interface address), \r\nthis check needs to be relaxed for the unnumbered p2p-over-lan circuits.", "correct_text": "For the ARP implementation (which checks that the subnet of the source \r\naddress of the ARP request matches the local interface address), \r\nthis check needs to be relaxed for the p2p-over-lan circuits \r\n(both numbered and unnumbered).", "notes": "Consider the following situation: \r\n1.\tTwo routers, R1 and R2, are connected by a physical P2P  Ethernet link\r\n2.\tOSPFv2 is enabled on the interfaces representing the endpoints of this link. \r\n3.      From the OSPF POV these interfaces:\r\no\tAre configured as P2P\r\no\tBelong to the same area\r\no\tAre assigned with IP addresses and subnet masks yielding different subnets\r\n4.    ARP check mentioned in the problematic text is not relaxed.\r\n\r\nUnder this conditions:\r\n-Both R1 and R2 will accept Hello messages sent by the other router \r\n(becase it ignores subnet in Hello messages received via P2P interfaces)\r\n- Adjacency between R1 and R2 will progress to FULL state (because all OSPFv2 messages \r\nwill be sent with AllSPFRouters multicast IPv4 address)\r\n- Unicast traffic sent by R1 to R2 (and vice versa) will be blackholed because ARP \r\nwill not resolve addresses assigned to the corresponding interfaces.\n --VERIFIER NOTES-- \nRFC 5309 introduced the possibility of supporting an unnumbered configuration on a LAN. Statements in this RFC regarding ARP concerns are therefore deliberately limited to this new configuration.\r\n\r\nFor IS-IS, RFC 3787 Section 10 discusses concerns regarding mismatched subnets on numbered links.\r\n\r\nFor OSPF it is well known that there are some existing implementations which have supported mismatched subnets for many years.\r\n\r\nAny concerns with ARP behavior  in support of mismatched subnets on numbered LANs is out of scope of RFC 5309.\r\n\r\n[https://mailarchive.ietf.org/arch/msg/isis-wg/aCFWc8KuE8xEy0-qIrN63odct1o/?qid=623f2d68947e2ec849fb2e2a7f2e6242]", "submit_date": "2017-04-30", "submitter_name": "Alexander Vainshtein", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "678", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "25.1", "orig_text": "On page 220, it says \"The TEXT-UTF8-TRIM rule is used for descriptive\r\nfield contents that are n t quoted strings, where leading and trailing\r\nLWS is not meaningful.\"  (And no, I'm not talking about the \"n t\"\r\ntypo.)  The rule for TEXT-UTF8-TRIM is\r\n\r\n TEXT-UTF8-TRIM  = 1*TEXT-UTF8char *(*LWS TEXT-UTF8char)\r\n TEXT-UTF8char = %x21-7E / UTF8-NONASCII\r\n\r\nwhich pretty clearly says that the final character of TEXT-UTF8-TRIM\r\ncannot be whitespace.  TEXT-UTF8-TRIM appears only as the value of a\r\nheader field, and the rule for message-header does not generate\r\ntrailing whitespace either.\r\n\r\nSo the text talks about trailing whitespace, which seems reasonable\r\nbecause whitespace is allowed in many other places, but the grammar\r\ndoes not allow it.  Was trailing whitespace intended?", "correct_text": "[not submitted]", "notes": "from pending", "submit_date": "2006-08-14", "submitter_name": "Matthew S. Harris", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "679", "doc-id": "RFC1001", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "I found something strange in rfc1001\r\nMaybe my code is wrong, but it returns \"Tge NetBIOS tame\"\r\ninstead of \"The NetBIOS name\" when I try to encode\r\nFEGHGFCAEOGFHEECEJEPFDCAHEGBGNGF\r\n\r\n\"For example, the NetBIOS name \"The NetBIOS name\" in the NetBIOS scope\r\n\"SCOPE.ID.COM\" would be represented at level one by the ASCII\r\n\r\ncharacter string:\r\n\r\nFEGHGFCAEOGFHEECEJEPFDCAHEGBGNGF.SCOPE.ID.COM\"", "correct_text": "[not submitted]", "notes": "from pending", "submit_date": "2002-02-25", "submitter_name": "Anvish", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "683", "doc-id": "RFC1195", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3", "orig_text": "In chapter '3.3 Addressing Routers in ISIS Packets' the RFC describes a\r\nstandard procedure\r\nfor deriving NSAP-addresses for IS in IP-only environments. However, the\r\nDFI as well as the AA\r\nare defined to be 'xx' and 'xx xx xx' respectively, which represents\r\nneither a valid decimal nor\r\nhexadecimal value.", "correct_text": "[not submitted]", "notes": "from pending", "submit_date": "2003-03-04", "submitter_name": "Joerg Ammon", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "685", "doc-id": "RFC4307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.4", "orig_text": "Transfer Type 2 Algorithms are pseudo-random functions used to\r\ngenerate random values when needed.", "correct_text": "Transform Type 2 Algorithms are pseudo-random functions used to\r\ngenerate random values when needed.", "notes": "from pending", "submit_date": "2006-02-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "686", "doc-id": "RFC3461", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   The \"addr-type\" portion MUST be an IANA-registered electronic mail\r\n   address-type (as defined in [3]), while the \"xtext\" portion contains\r\n   an encoded representation of the original recipient address using the\r\n   rules in section 5 of this document.  The entire ORCPT parameter MAY\r\n   be up to 500 characters in length.", "correct_text": "   The \"addr-type\" portion MUST be an IANA-registered electronic mail\r\n   address-type (as defined in [3]), while the \"xtext\" portion contains\r\n   an encoded representation of the original recipient address using the\r\n   rules in section 4 of this document.  The entire ORCPT parameter MAY\r\n                    ^\r\n   be up to 500 characters in length.", "notes": "xtext encoding is described in Section 4, not in Section 5", "submit_date": "2004-08-10", "submitter_name": "Valdis Kletniek", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "687", "doc-id": "RFC4307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.5", "orig_text": "Transfer Type 3 Algorithms are Integrity algorithms used to protect\r\ndata against tampering.", "correct_text": "Transform Type 3 Algorithms are Integrity algorithms used to protect\r\ndata against tampering.", "notes": "from pending", "submit_date": "2006-02-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "688", "doc-id": "RFC4307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "Like other contemporary RFCs, RFC 4307 seems to have been infected\r\nby a common 'virus'. In the case or RFC 4307, the first sentence of the Introduction has been inadvertantly split by a spurious blank line.", "correct_text": "", "notes": "from pending", "submit_date": "2006-02-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "660", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3.4", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3           |       3       |     Packet length          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                             Router ID                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                             Area ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Checksum               |  Instance ID  |      0      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |              0                  |        LS type              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Link State ID                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Advertising Router                      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       ...                     |\r\n\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3        |       3       |         Packet length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Router ID                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                           Area ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           Checksum            |  Instance ID  |      0        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               0               |           LS type             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "661", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3.5", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3        |       4       |         Packet length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Router ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Area ID                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Checksum            |  Instance ID  |      0         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                           # LSAs                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                            +-+\r\n   |                            LSAs                               |\r\n   +-                                                            +-+\r\n   |                    ...                              |\r\n\r\n", "correct_text": "\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3        |       4       |         Packet length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Router ID                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                           Area ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           Checksum            |  Instance ID  |      0        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                            # LSAs                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                            +-+\r\n   |                             LSAs                              |\r\n   +-                                                            +-+\r\n   |                             ...                               |\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2377", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n\r\n(6) missing comma, causing possible mis-interpretation\r\n\r\nThe last sentence of Section 3, at the bottom of page 9, says:\r\n\r\n                                        [...].  The HMAC SHALL be\r\n   computed over the entire message, excluding the MAC field using\r\n   auth_key; see also section 4.2.", "correct_text": "It should say:\r\n\r\n                                        [...].  The HMAC SHALL be\r\n|  computed over the entire message, excluding the MAC field, using\r\n   auth_key; see also section 4.2.\r\n\r\nor perhaps even better and clearer:\r\n\r\n                                        [...].  The HMAC SHALL be\r\n|  computed (using auth_key) over the entire message excluding the MAC\r\n|  field; see also section 4.2.", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "710", "doc-id": "RFC3281", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "   Note: [X.509-2000] defines the extension syntax as a \"SEQUENCE OF\r\n   Targets\".  Conforming AC issuer implementations MUST only produce one\r\n   \"Targets\" element.  Confirming AC users MUST be able to accept a\r\n   \"SEQUENCE OF Targets\".  If more than one Targets element is found in\r\n   an AC, the extension MUST be treated as if all Target elements had\r\n   been found within one Targets element.", "correct_text": "   Note: [X.509-2000] defines the extension syntax as a \"SEQUENCE OF\r\n   Targets\".  Conforming AC issuer implementations MUST only produce one\r\n   \"Targets\" element.  Conforming AC users MUST be able to accept a\r\n   \"SEQUENCE OF Targets\".  If more than one Targets element is found in\r\n   an AC, the extension MUST be treated as if all Target elements had\r\n   been found within one Targets element.", "notes": "Confirming -> Conforming", "submit_date": "2006-12-20", "submitter_name": "Gidon Moont", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "711", "doc-id": "RFC3965", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "a) Change the first sentence of section 2.1.3, on page 4, from:\r\n\r\n  \"An offramp gateway that operate as an MTA serving multiple users\r\n   SHOULD use SMTP;\" ...\r\n\r\nto:\r\n\r\n| \"An offramp gateway that operates as an MTA serving multiple users\r\n   SHOULD use SMTP;\" ...\r\n\r\nb) Change the first sentence of section 2.2.4, on page 4, from:\r\n\r\n  \"A single multi-page document SHOULD be sent as a single multi- page\r\n   TIFF file, even though recipients MUST process multipart/mixed\r\n   containing multiple TIFF files.\"\r\n\r\nto:\r\n\r\n| \"A single multi-page document SHOULD be sent as a single multi-page\r\n   TIFF file, even though recipients MUST process multipart/mixed\r\n   containing multiple TIFF files.\"\r\n\r\nc) Change section 5.1. on page 6 from:\r\n\r\n  \"This specification is based on use of existing Internet mail.  To\r\n   maintain interoperability with Internet mail, any security to be\r\n   provided should be part of the of the Internet security\r\n   infrastructure, rather than a new mechanism or some other mechanism\r\n   outside of the Internet infrastructure.\"\r\n\r\nto:\r\n\r\n| \"This specification is based on the use of existing Internet mail.\r\n   To maintain interoperability with Internet mail, any security to be\r\n|  provided should be part of the Internet security infrastructure,\r\n   rather than a new mechanism or some other mechanism outside of the\r\n   Internet infrastructure.\"\r\n\r\nd) Change the final sentence of section 5.2, on page 6, from:\r\n\r\n                 ... \"This section reviews relevant concerns about\r\n   Internet mail for IFax environments, as well as considering the\r\n   potential problems which can result of integrating the existing G3Fax\r\n   service with Internet mail.\"\r\n\r\nto:\r\n                 ... \"This section reviews relevant concerns about\r\n   Internet mail for IFax environments, as well as considering the\r\n|  potential problems which can result from integrating the existing\r\n   G3Fax service with Internet mail.\"\r\n\r\ne) Change the first paragraph of section 5.2.1, on page 6, from:\r\n\r\n   \"The actual sender of the message might not be the same as that\r\n   specified in the Sender or From fields of the message content headers\r\n   or the MAIL FROM address from the SMTP envelope.\"\r\n\r\nto:\r\n\r\n   \"The actual sender of the message might not be the same as that\r\n   specified in the Sender or From fields of the message content headers\r\n|  or the MAIL FROM address in the SMTP envelope.\"\r\n\r\nf) Change the second-to-last paragraph of section 5.2.2, on page 7,\r\nfrom:\r\n\r\n  \"Originator authentication entails the use of weak or strong\r\n   mechanisms, such as cleartext keywords or encryption-based\r\n   data-signing, respectively, to determine and validate the identify\r\n   of the sender and assess permissions accordingly.\"\r\n\r\nto:\r\n\r\n  \"Originator authentication entails the use of weak or strong\r\n   mechanisms, such as cleartext keywords or encryption-based\r\n|  data-signing, respectively, to determine and validate the identity\r\n   of the sender and assess permissions accordingly.\"\r\n\r\ng) Change the first sentence of the last paragraph of section 5.2.3,\r\non page 8, from:\r\n\r\n  \"Typically authorization needs to be associated to specific senders\r\n   and specific messages, in order to prevent a \"replay\" attack which\r\n   causes and earlier authorization to enable a later dial-out by a\r\n   different (and unauthorized) sender.\" ...\r\n\r\nto:\r\n\r\n| \"Typically authorization needs to be associated with specific senders\r\n   and specific messages, in order to prevent a \"replay\" attack which\r\n|  causes an earlier authorization to enable a later dial-out by a\r\n   different (and unauthorized) sender.\" ...", "correct_text": "[see above]", "notes": "from pending   ", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "724", "doc-id": "RFC4758", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.4 says:", "orig_text": "    <ServerHello\r\n      xmlns=3D\r\n      \"http://www.rsasecurity.com/rsalabs/otps/schemas/2005/12/ct-kip#\"\r\n      xmlns:ds=3D\"http://www.w3.org/2000/09/xmldsig#\"\r\n      xmlns:xsi=3D\"http://www.w3.org/2001/XMLSchema-instance\"\r\n      Version=3D\"1.0\" SessionID=3D\"4114\" Status=3D\"Success\">", "correct_text": "    <ServerHello\r\n      xmlns=3D\r\n      \"http://www.rsasecurity.com/rsalabs/otps/schemas/2005/12/ct-kip#\"\r\n      xmlns:ds=3D\"http://www.w3.org/2000/09/xmldsig#\"\r\n      xmlns:xsi=3D\"http://www.w3.org/2001/XMLSchema-instance\"\r\n      Version=3D\"1.0\" SessionID=3D\"4114\" Status=3D\"Continue\">", "notes": "from pending", "submit_date": "2007-01-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Nystrom", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "725", "doc-id": "RFC4758", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix D says:", "orig_text": "n = ROUND( dsLen / bLen )", "correct_text": "n = CEILING( dsLen / bLen )", "notes": "Appendix D repeatedly uses the \"ROUND\" function where in fact it\r\nshould use the \"CEILING function (3 instances: on pp. 49, 51, and 52).\r\n\r\nfrom pending", "submit_date": "2007-01-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Nystrom", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "662", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3.6", "orig_text": "\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3              |       5       |  Packet length          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Router ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Area ID                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Checksum            |  Instance ID  |      0         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                        An LSA Header                        -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    ...                              |\r\n\r\n", "correct_text": "\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      3        |       5       |         Packet length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Router ID                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                           Area ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           Checksum            |  Instance ID  |      0        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                         An LSA Header                       -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "663", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.2", "orig_text": "\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           LS age             |           LS type              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Advertising Router                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    LS sequence number                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        LS checksum           |             length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n", "correct_text": "\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            LS age             |           LS type             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Link State ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     LS sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         LS checksum           |             length            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "664", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.3", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           LS age             |0|0|1|          1               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Advertising Router                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    LS sequence number                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        LS checksum           |             length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    0  |W|V|E|B|            Options                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |       0       |          Metric               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                      Interface ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                   Neighbor Interface ID                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Neighbor Router ID                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |       0       |          Metric               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                      Interface ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                   Neighbor Interface ID                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Neighbor Router ID                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                             ...                               |\r\n\r\n\r\n\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            LS age             |0|0|1|          1              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Link State ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     LS sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         LS checksum           |             length            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    0  |W|V|E|B|             Options                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |       0       |           Metric              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Interface ID                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Neighbor Interface ID                      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Neighbor Router ID                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |       0       |           Metric              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Interface ID                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Neighbor Interface ID                      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Neighbor Router ID                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "665", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.4", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           LS age             |0|0|1|          2               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Advertising Router                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    LS sequence number                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        LS checksum           |             length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      0               |              Options                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Attached Router                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                             ...                               |\r\n\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            LS age             |0|0|1|          2              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Link State ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     LS sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         LS checksum           |             length            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      0        |              Options                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Attached Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "680", "doc-id": "RFC2834", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "On page 19 :\r\n\r\nData sizes and field meaning:\r\n     ar$hrd  16 bits  Hardware type\r\n     ar$pro  16 bits  Protocol type of the protocol fields below\r\n     ar$op   16 bits  Operation code (request, reply, or NAK)\r\n     ar$pln   8 bits  byte length of each protocol address\r\n     ar$rhl   8 bits  requester's HIPPI hardware address length (q)\r\n     ar$thl   8 bits  target's HIPPI hardware address length (x)\r\n     ar$rpa  32 bits  requester's protocol address\r\n     ar$tpa  32 bits  target's protocol address\r\n     ar$rha  qbytes   requester's HIPPI Hardware address\r\n     ar$tha  xbytes   target's HIPPI Hardware address\r\n\r\nOn page 20, there is :\r\n\r\nWhere :\r\n     ar$hrd  - SHALL contain 28. (HIPARP)\r\n     ar$pro  - SHALL contain the IP protocol code 2048 (decimal).\r\n     ar$op   - SHALL contain the operational value (decimal):\r\n               1  for   HARP_REQUESTs\r\n               2  for   HARP_REPLYs\r\n               8  for InHARP_REQUESTs\r\n               9  for InHARP_REPLYs\r\n               10 for   HARP_NAK\r\n     ar$pln  - SHALL contain 4.\r\n     ar$rln  - SHALL contain 10 IF this is a HIPPI-800 HW address \r\n               ELSE, for HIPPI-6400, it SHALL contain 6.\r\n     ar$thl  - SHALL contain 10 IF this is a HIPPI-800 HW address\r\n               ELSE, for HIPPI-6400, it SHALL contain 6.\r\n     ar$rha  - in requests and NAKs it SHALL contain the requester's\r\n               HW address. In replies it SHALL contain the target\r\n               port's HW address.\r\n     ar$rpa  - in requests and NAKs it SHALL contain the requester's IP\r\n               address if known, otherwise zero.\r\n               In other replies it SHALL contain the target\r\n               port's IP address.\r\n     ar$tha  - in requests and NAKs it SHALL contain the target's\r\n               HW address if known, otherwise zero.\r\n               In other replies it SHALL contain the requester's\r\n               HW addressA.\r\n     ar$tpa  - in requests and NAKs it SHALL contain the\r\n               target's IP address if known, otherwise zero.\r\n               In other replies it SHALL contain the requester's\r\n               IP address.", "correct_text": "On page 19 :\r\n\r\nData sizes and field meaning:\r\n     ar$hrd  16 bits  Hardware type\r\n     ar$pro  16 bits  Protocol type of the protocol fields below\r\n     ar$op   16 bits  Operation code (request, reply, or NAK)\r\n     ar$pln   8 bits  byte length of each protocol address\r\n     ar$rhl   8 bits  requester's HIPPI hardware address length (q)\r\n     ar$thl   8 bits  target's HIPPI hardware address length (x)\r\n     ar$rpa  32 bits  requester's protocol address\r\n     ar$tpa  32 bits  target's protocol address\r\n     ar$rha  qbytes   requester's HIPPI Hardware address\r\n     ar$tha  xbytes   target's HIPPI Hardware address\r\n\r\nOn page 20, there is :\r\n\r\nWhere :\r\n     ar$hrd  - SHALL contain 28. (HIPARP)\r\n     ar$pro  - SHALL contain the IP protocol code 2048 (decimal).\r\n     ar$op   - SHALL contain the operational value (decimal):\r\n               1  for   HARP_REQUESTs\r\n               2  for   HARP_REPLYs\r\n               8  for InHARP_REQUESTs\r\n               9  for InHARP_REPLYs\r\n               10 for   HARP_NAK\r\n     ar$pln  - SHALL contain 4.\r\n     ar$rhl  - SHALL contain 10 IF this is a HIPPI-800 HW address\r\n               ELSE, for HIPPI-6400, it SHALL contain 6.\r\n     ar$thl  - SHALL contain 10 IF this is a HIPPI-800 HW address\r\n               ELSE, for HIPPI-6400, it SHALL contain 6.\r\n     ar$rha  - in requests and NAKs it SHALL contain the requester's\r\n               HW address. In replies it SHALL contain the target\r\n               port's HW address.\r\n     ar$rpa  - in requests and NAKs it SHALL contain the requester's IP\r\n               address if known, otherwise zero.\r\n               In other replies it SHALL contain the target\r\n               port's IP address.\r\n     ar$tha  - in requests and NAKs it SHALL contain the target's\r\n               HW address if known, otherwise zero.\r\n               In other replies it SHALL contain the requester's\r\n               HW addressA.\r\n     ar$tpa  - in requests and NAKs it SHALL contain the\r\n               target's IP address if known, otherwise zero.\r\n               In other replies it SHALL contain the requester's\r\n               IP address.", "notes": "The descriptive text references ar$rln rather than the correct ar$rhl.", "submit_date": "2002-03-24", "submitter_name": "Sebastian Kulpa", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "667", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.5", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           LS age             |0|0|1|          3               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Advertising Router                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    LS sequence number                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        LS checksum           |             length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      0               |                  Metric                |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | PrefixLength  | PrefixOptions |             (0)               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Address Prefix                         |\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n ", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            LS age             |0|0|1|          3              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Link State ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     LS sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         LS checksum           |             length            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      0        |                  Metric                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | PrefixLength  | PrefixOptions |              (0)              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Address Prefix                        |\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "668", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.6", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           LS age             |0|0|1|        4                 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Advertising Router                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    LS sequence number                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        LS checksum           |             length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      0               |          Options                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      0               |          Metric                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Destination Router ID                      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            LS age             |0|0|1|        4                |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Link State ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     LS sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         LS checksum           |             length            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      0        |                  Options                      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      0        |                  Metric                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Destination Router ID                     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "669", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.7", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           LS age             |0|1|0|          5               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Advertising Router                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    LS sequence number                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        LS checksum           |             length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        |E|F|T|                 Metric                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | PrefixLength  | PrefixOptions |     Referenced LS Type        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Address Prefix                         |\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                Forwarding Address (Optional)                -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           External Route Tag (Optional)                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               Referenced Link State ID (Optional)             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            LS age             |0|1|0|          5              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Link State ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     LS sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         LS checksum           |             length            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         |E|F|T|                 Metric                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | PrefixLength  | PrefixOptions |     Referenced LS Type        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Address Prefix                        |\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                             -+ \r\n   |                                                               |\r\n   +-                 Forwarding Address (Optional)               -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                  External Route Tag (Optional)                |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                Referenced Link State ID (Optional)            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "671", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.8", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           LS age             |0|0|0|           8              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     LS sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        LS checksum           |             length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Rtr Pri    |                Options                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                Link-local Interface Address                 -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         # prefixes                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  PrefixLength | PrefixOptions |             (0)               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Address Prefix                         |\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  PrefixLength | PrefixOptions |             (0)               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Address Prefix                         |\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            LS age             |0|0|0|           8             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Link State ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                      Advertising Router                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                      LS sequence number                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         LS checksum           |             length            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Rtr Pri    |                 Options                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-                 Link-local Interface Address                -+\r\n   |                                                               |\r\n   +-                                                             -+\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          # prefixes                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  PrefixLength | PrefixOptions |              (0)              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Address Prefix                        |\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  PrefixLength | PrefixOptions |              (0)              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Address Prefix                        |\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "672", "doc-id": "RFC2740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.9", "orig_text": "    0                  1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           LS age             |0|0|1|            9             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Link State ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    Advertising Router                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    LS sequence number                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        LS checksum           |             length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         # prefixes           |     Referenced LS type         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                  Referenced Link State ID                     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               Referenced Advertising Router                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  PrefixLength | PrefixOptions |          Metric               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Address Prefix                          |\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  PrefixLength | PrefixOptions |          Metric               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Address Prefix                          |\r\n   |                             ...                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\n\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            LS age             |0|0|1|            9            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Link State ID                          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Advertising Router                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     LS sequence number                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         LS checksum           |             length            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          # prefixes           |     Referenced LS type        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                   Referenced Link State ID                    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                Referenced Advertising Router                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  PrefixLength | PrefixOptions |           Metric              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Address Prefix                         |\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  PrefixLength | PrefixOptions |           Metric              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Address Prefix                         |\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n", "notes": "", "submit_date": "2002-01-17", "submitter_name": "John Moy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "673", "doc-id": "RFC2821", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1.1", "orig_text": "available), the client SHOULD send an address literal (see section\r\n4.1.3), optionally followed by information that will help to identify\r\nthe client system.  y The SMTP server identifies itself to the SMTP\r\n                   ^^^", "correct_text": "available), the client SHOULD send an address literal (see section\r\n4.1.3), optionally followed by information that will help to identify\r\nthe client system.  The SMTP server identifies itself to the SMTP\r\n                    ", "notes": "The \"y\" should be removed.\r\n", "submit_date": "2004-01-12", "submitter_name": "Vincent Lefevre", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2378", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "Extraneous (duplicate) word error:\r\n\r\nIn Section 4.1, the last sentence on page 11, says:\r\n\r\n   Other defined next payload values defined in [2] SHALL not be applied\r\n   to DHHMAC.", "correct_text": "It should say:\r\n\r\n|  Other next payload values defined in [2] SHALL not be applied to\r\n   DHHMAC.", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "689", "doc-id": "RFC3886", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3.5, 3.3.6, 3.3.7", "orig_text": "(on page 7):\r\n\r\n a) in section 3.3.5 replace:\r\n\r\n     \"The Remote-MTA field is defined as in section Reference 2.3.5 of\r\n      [RFC-DSN-STAT].\" ...\r\n                                                   ^^^^^^^^^^\r\n    by:\r\n\r\n     \"The Remote-MTA field is defined as in section 2.3.5 of\r\n      [RFC-DSN-STAT].\" ...\r\n\r\n b) in section 3.3.6 replace:\r\n\r\n     \"The Last-Attempt-Date field is defined as in section Reference 2.3.7\r\n      of [RFC-DSN-STAT].\" ...\r\n                                                          ^^^^^^^^^^\r\n    by:\r\n\r\n     \"The Last-Attempt-Date field is defined as in section 2.3.7 of\r\n      [RFC-DSN-STAT].\" ...\r\n\r\n c) in section 3.3.7 replace:\r\n\r\n     \"The Will-Retry-Until field is defined as in section Reference 2.3.9\r\n      of [RFC-DSN-STAT].\" ...\r\n                                                   ^^^^^^^^^^\r\n    by:\r\n\r\n     \"The Will-Retry-Until field is defined as in section 2.3.9 of\r\n      [RFC-DSN-STAT].\" ...", "correct_text": "[see above]", "notes": "The first line of these sections seem to have inherited some\r\nundue editing history inserting the appropriate references;\r\nthe word \"Reference\" should be removed in every case.\r\n\r\nfrom pending", "submit_date": "2004-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "690", "doc-id": "RFC4307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "On pages 3 and 4 of RFC 4307, the text in Section 3.1.3 through\r\nSection 3.1.5 contains three instances of the same typo,\r\ntalking about    [algorithms of] \"Transfer Type <n>\"  , where it\r\nshould refer to  [algorithms of] \"Transform Type <n>\".", "correct_text": "", "notes": "typo breaking IPsec terminology\r\n\r\nfrom pending", "submit_date": "2006-02-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "691", "doc-id": "RFC3798", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "(1) disposition types\r\n=====================\r\nThe dispositions \"denied\" and \"failed\" were removed from the\r\ndocument reflecting the lack of implementation or usage ...\r\n\r\n\r\nNow, the syntax production \"disposition-type\" in section 3.2.6. (on\r\npage 14) and section 7. (on mid-page 22) has been changed to read:\r\n\r\n    disposition-type = \"displayed\" / \"deleted\"\r\n\r\nThis means that the RFC 2298 disposition types \"dispatched\" and\r\n\"processed\" have been removed from the syntax definitions as well!\r\n\r\nThus, either Appendix A lacks mentioning these removals  OR  these\r\nitems should not have been removed from the syntax definitions.\r\n\r\nNevertheless, all these disposition types removed from the syntax are\r\nmentioned at many places throughout RFC 3798:\r\n\r\no  \"dispatched\" :\r\n\r\n   - section 3.2.6. , final paragraph of the section on page 16\r\n   - section 4. , third-to-last bullet on page 17\r\n   - section 4. , first bullet on page 18\r\n\r\no  \"processed\" :\r\n\r\n   - section 4. , third-to-last bullet on page 17\r\n   - section 4. , first bullet on page 18\r\n   - section 5. , 4th paragraph on page 18\r\n\r\no  \"denied\" :\r\n\r\n   - section 2.1. , bottom of page 4\r\n   - section 2.1. , end of 3rd paragraph on page 5\r\n   - section 4. , third-to-last bullet on page 17\r\n   - section 4. , first bullet on page 18\r\n   - section 6.2. , end of first paragraph on page 19\r\n\r\no  \"failed\" :\r\n\r\n   - section 2.2. , middle of second-to-last paragraph on page 6\r\n   - section 2.2. , middle of second paragraph on page 7 (twice)\r\n   - section 2.2. , third paragraph on page 7 (twice)\r\n   - section 3.2.7. , in 2nd text line, on page 16\r\n                    (mis-spelled \"failure\" there)\r\n   - section 4. , third-to-last bullet on page 17\r\n   - section 4. , first bullet on page 18\r\n\r\nAll these places in the text deal with the issue/sending/generation\r\nof MDNs with the named deprecated disposition types (it would be\r\nacceptable to talk about what to do with *received* such disposition\r\ntypes for backwards compatibility with RFC 2298) !\r\n", "correct_text": "[not submitted]", "notes": "from pending\n --VERIFIER NOTES-- \nClearly this document is a mess. The solution is to publish an RFC that cleans up the mess (and verifies that there is indeed consensus to remove the \"denied\" and \"failed\" dispositions), not to handle this via the errata process.   ", "submit_date": "2004-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "692", "doc-id": "RFC3798", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Several", "orig_text": "(2) disposition modifiers\r\n=========================\r\n\r\n  The disposition modifiers \"warning\", \"superseded\", \"expired\",\r\n  \"mailbox-terminated\" have not seen actual implementation. They have\r\n  been deleted from this document.\r\n\r\n\r\nAccordingly, the syntax production \"disposition-type\" in section 3.2.6.\r\n(on page 14) and section 7. (on mid-page 22) has been changed to read:\r\n\r\n    disposition-modifier = \"error\" / disposition-modifier-extension\r\n\r\nNevertheless, one of these 'removed' modifiers disposition is\r\nmentioned in the text of RFC 3798:\r\n\r\no  \"warning\" :\r\n\r\n   - section 3.2.7. , 3rd line of text on page 16\r\n\r\n", "correct_text": "<Remove any references to \"warning\">", "notes": "Alexey: The editors have this change in their editorial copy of -bis.", "submit_date": "2004-10-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "693", "doc-id": "RFC4255", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "The RDATA for a SSHFP RR consists of an algorithm number, fingerprint\r\ntype and the fingerprint of the public host key.\r\n\r\n        1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 2 3 3\r\n        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |   algorithm   |    fp type    |                               /", "correct_text": "[not submitted]", "notes": "Section 3.1 has a packet format picture, and the upper row of bit \r\nnumbers seems to have been shifted to the left.\r\n\r\nfrom pending", "submit_date": "2006-02-10", "submitter_name": "Sam Weiler", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "694", "doc-id": "RFC2911", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13, Appendix B", "orig_text": "The top half (128 values) of each range (0x0n40 to 0x0nFF, for \r\nn = 0 to 5) is reserved for vendor use within each status code\r\nclass. ", "correct_text": "The top half (128 values) of each range (0x0n80 to 0x0nFF, for \r\nn = 0 to 5) is reserved for vendor use within each status code\r\nclass.   ", "notes": "\r\n\r\n\r\n", "submit_date": "2002-07-17", "submitter_name": "Tom Hastings", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6810", "doc-id": "RFC8707", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "In typical OAuth deployments the authorization sever is in a position\r\nto observe and track a significant amount of user and client behavior.", "correct_text": "In typical OAuth deployments, the authorization server is in a position\r\nto observe and track a significant amount of user and client behavior.", "notes": "1. typo: sever -> server\r\n2. I think we also need a comma after \"In typical OAuth deployments\" because it is an introductory phrase, but maybe a native English speaker can confirm.", "submit_date": "2022-01-05", "submitter_name": "Jan Goebel", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 14:49:51"}, {"errata_id": "726", "doc-id": "RFC4326", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "The most significant bit of the Length field carries the value of the \r\nDestination Address Absent Field, the D-bit", "correct_text": "The most significant bit of the first byte of the SNDU base header \r\ncarries the value of the Destination Address Absent Field, the D-bit\r\n", "notes": "- Length field description refers to a 16-bit value.\r\nSource: Bernhard Collini-Nocker, 15th February 2006", "submit_date": "2006-08-02", "submitter_name": "Gorry Fairhurst", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "727", "doc-id": "RFC4326", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Example A.2, it says:", "orig_text": "| HDR | 0x00 | 0x00 | 0xB1 | ... | C180 | 0x00 | 0x65 |", "correct_text": "| HDR | 0x00 | 0x00 | 0xB1 | ... | C180 | 0x00 | 0xB5 |", "notes": "- Misrepresentation of hex byte in example, Change /0x65/0xB5/\r\nSource: Karsten Siebert, 26th February 2006", "submit_date": "2006-08-02", "submitter_name": "Gorry Fairhurst", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "728", "doc-id": "RFC3666", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "F2 INVITE Alice -> Proxy1", "correct_text": "F2 INVITE NGW 1 -> Proxy1", "notes": "", "submit_date": "2005-01-11", "submitter_name": "Mani Devarajan", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2471", "doc-id": "RFC3315", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "17.1.3", "orig_text": "The client MUST ignore any Advertise message that includes a Status\r\nCode option containing the value NoAddrsAvail, with the exception\r\nthat the client MAY display the associated status message to the\r\nuser.", "correct_text": "The client MUST ignore any IAs in an Advertise message that includes \r\na Status Code option containing the value NoAddrsAvail, with the \r\nexception that the client MAY display the associated status message \r\nto the user.", "notes": "", "submit_date": "2010-08-17", "submitter_name": "Ole Troan", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "695", "doc-id": "RFC3468", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The header says:", "orig_text": "Network Working Group                                       L. Andersson\r\nRequest for Comments: 3468                                    Consultant\r\nCategory: Informational                                       G. Swallow\r\n                                                           Cisco Systems\r\n                                                           February 2003", "correct_text": "Network Working Group                                       L. Andersson\r\nRequest for Comments: 3468                                    Consultant\r\nUpdates: 3212, 3472, 3475, 3476                               G. Swallow\r\nCategory: Informational                                    Cisco Systems\r\n                                                           February 2003", "notes": "RFC3468 documents the MPLS WG's decision to ice CR-LDP. \r\nHowever, RFC3468 is not marked as updating RFC3212 (CR-LDP base spec) in the registry.\r\n\r\nThe RFCs updated by 3468 are:\r\n3212, 3472, 3475, 3476\r\n\r\n[Note that the RFC Editor index has been updated accordingly, but the document itself remains incorrect.]\r\n\r\nOriginally sent by Adrian Farrel.\r\n\r\nfrom pending", "submit_date": "2004-10-23", "submitter_name": "Alex Zinin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "696", "doc-id": "RFC3031", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.20", "orig_text": "For example, a set of distinct address prefixes might all have the same\r\negress node, and label swapping might be used only to get the the traffic \r\nto the egress node. ", "correct_text": "For example, a set of distinct address prefixes might all have the same\r\negress node, and label swapping might be used only to get the traffic \r\nto the egress node. \r\n", "notes": "Notice the double 'the'.", "submit_date": "2005-03-01", "submitter_name": "John Kristoff", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "697", "doc-id": "RFC3056", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "apply any security checks (see Section 8);", "correct_text": "apply any security checks (see Section 9);\r\n", "notes": "\r\n", "submit_date": "2002-11-20", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "698", "doc-id": "RFC3926", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1) On page 31, the Informative Reference \"[21]\" is inconsistent;\r\n    author, title, and publication month / year match RFC 2047,\r\n    *not* \"RFC 1521\" as stated there.\r\n\r\n(2) The first use of reference \"[21]\" appears on page 27, in the\r\n    10th line of the 2nd paragraph. There, \"RFC 2047\" _might_ be\r\n    what you meant (together with [20] pointing to RFC 2048).\r\n\r\n    Now, unfortunately, the current basic MIME specifications,\r\n    RFC 2045..2049, do not contain a substantial general\r\n    discussion of security issues.\r\n\r\n    The RFC 2045 and RFC 2049 \"Security Considerations\" just\r\n    refer to RFC 2046.\r\n    But RFC 2046 for this purpose refers to two specific media\r\n    type explanations / 'informal registrations' contained in\r\n    the body of that memo, and to RFC 2048, which in turn\r\n    does *NOT* contain a \"Security Considerations\" section.\r\n(NB:\r\n    - RFC 2048 just describes the registration PROCEDURES and\r\n      states the Security Considerations *requirement* for any\r\n      such registrations.\r\n    - The formal ['skeleton'] Registrations for the basic MIME\r\n      content types / subtypes from RFC 1521 - Appendix F -\r\n      unfortunately have been lost on their [expected] way\r\n      into RFC 2046. )\r\n\r\n    RFC 2047, in particular, is an extreme:\r\n      \"Security issues are not discussed in this memo.\"\r\n    (Section 10 on page 14).\r\n\r\n    Therefore I suspect that \"RFC 2047\" might indeed NOT be\r\n    what you wanted to refer to in loc. cit.  Perhaps the\r\n    combination of RFC 2046 and RFC 2048 would have been\r\n    the most appropriate selection for this citation.\r\n\r\n(3) The second use of reference \"[21]\" in RFC 3926 appears\r\n    2 lines further down in the same paragraph on page 27,\r\n    explicitely referring to RFC 1521.\r\n    The final statement there on RFC 1521,\r\n       \"... even though its protocol is obsoleted \r\n       by RFC 2048 [20].\"\r\n\r\n    as well does not seem to be very appropriate for me:\r\n    It might be disputable whether one should talk about a\r\n    \"protocol\" when talking about message/document format\r\n    descriptions, but more substantially, the major part\r\n    of RFC 1521 has been superseded by RFC 2046 - see (2)\r\n    above - while RFC 2048 only supersedes Appendix E of\r\n    RFC 1521, which at the time of its publication already\r\n    had been \"updated\" (i.e. obsoleted) by RFC 1590.\r\n\r\nTherefore, it might be appropriate to replace the impacted\r\nbad Informative Reference citation [21] on page 31 of RFC 3926\r\nby two citations (e.g. [21]' and [23]), one for RFC 1521 and\r\none for RFC 2046, and to modify the above mentioned phrase.", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2004-11-10", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "712", "doc-id": "RFC4583", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  [clarification]\r\n\r\nSection 4 of RFC 4583, near the top of page 4, says:\r\n\r\n   If an 'm' line in an offer contains a 'floorctrl' attribute, the\r\n   answerer MUST include one in the corresponding 'm' line in the\r\n   answer.  [...]\r\n\r\nIt should better say:\r\n\r\n   If a SDP media description in an offer contains a 'floorctrl'\r\n   attribute, the answerer accepting that media MUST include one in the\r\n   corresponding media description of the answer.  [...]\r\n\r\n\r\n(2)  [clarification]\r\n\r\nSection 6 of RFC 4583, on mid-page 5, says:\r\n\r\n   The 'floorid' attribute is used in BFCP 'm' lines.  [...]\r\n\r\nIt should better say:\r\n\r\n   The 'floorid' attribute is used in the SDP media description for BFCP\r\n   media.  [...]\r\n\r\n\r\nPlease comment.", "correct_text": "[not submitted]", "notes": "It's always the abuse of language, talking about an SDP attribute\r\nas being used \"in\" an SDP 'm' line, where in fact the attribute is\r\njust a media-level attribute, occurring as a standalone line in an\r\nSDP media description, i.e. the SDP part introduced by the particular\r\n'm' line.\r\n\r\nThis is, at best, a bit confusing.\r\n\r\nfrom pending", "submit_date": "2006-12-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "713", "doc-id": "RFC4758", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7.1", "orig_text": "   The XML format for CT-KIP messages have been designed to be\r\n   extensible.  [...]  ", "correct_text": "   The XML format for CT-KIP messages has been designed to be\r\n   extensible.  [...]", "notes": "from pending", "submit_date": "2007-01-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Nystrom", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "714", "doc-id": "RFC4758", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8.2", "orig_text": "     </xs:sequence>\r\n     <xs:attribute name=\"id\" type=\"xs:ID\"/>\r\n   </xs:complexType>", "correct_text": "      </xs:sequence>\r\n    </xs:complexType>", "notes": "from pending", "submit_date": "2007-01-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Nystrom", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "731", "doc-id": "RFC4612", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "   Consider the following example, which describes a media stream that\r\n   allows the transport of G.711 audio and T.38 fax information:\r\n\r\n   m=audio 6800 RTP/AVP 0 98 a=rtpmap:98 t38/8000 a=fmtp:98\r\n   T38FaxVersion=2;T38FaxRateManagement=transferredTCF", "correct_text": "   Consider the following example, which describes a media stream that\r\n   allows the transport of G.711 audio and T.38 fax information:\r\n\r\n      m=audio 6800 RTP/AVP 0 98\r\n      a=rtpmap:98 t38/8000\r\n      a=fmtp:98 T38FaxVersion=2;T38FaxRateManagement=transferredTCF", "notes": "line folding issue", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "732", "doc-id": "RFC4612", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   [2]  Handley, M. and V. Jacobson, \"SDP: Session Description\r\n        Protocol\", RFC 2327, April 1998.", "correct_text": "   [2]  Handley, M., Jacobson, V., and C. Perkins, \"SDP: Session \r\n        Description Protocol\", RFC 4566, July 2006.", "notes": "Item [2] refers to RFC 2327.\r\nThat RFC had been obsoleted by RFC 4566 at the time of publication\r\nof RFC 4612 (RFC 4566 had been published 3 weeks before RFC 4612).", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2430", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "Near the bottom of page 43, the Description of SHA224_256Reset says:\r\n\r\n * Description:\r\n *   This helper function will initialize the SHA256Context in\r\n *   preparation for computing a new SHA256 message digest.\r\n\r\nFor completeness and consistency, it should say:\r\n\r\n * Description:\r\n *   This helper function will initialize the SHA256Context in\r\n|*   preparation for computing a new SHA-224 or SHA-256 message digest.\r\n                                     ^^^^^^^^^^    ^", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "699", "doc-id": "RFC4227", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.1", "orig_text": "     If the authority component contains a domain name and a port number,\r\n     e.g.,\r\n\r\n        soap.beep://stockquoteserver.example.com:1026\r\n\r\n     then the DNS is queried for the A Resource Records corresponding to\r\n     the domain name, and the port number is used directly.\r\n\r\n     If the authority component contains a domain name and no port number,\r\n     e.g.,\r\n\r\n         soap.beep://stockquoteserver.example.com\r\n\r\n     the Service Record algorithm [11] is used with a service parameter of\r\n     \"soap-beep\" and a protocol parameter of \"tcp\" to determine the IP/TCP\r\n     addressing information.  If no appropriate SRV RRs are found (e.g.,\r\n     for \"_soap-beep._tcp.stockquoteserver.example.com\"), then the DNS is\r\n     queried for the A RRs corresponding to the domain name and the port\r\n     number used is assigned by the IANA for the registration in Section\r\n     8.4.", "correct_text": "     If the authority component contains a domain name and a port number,\r\n     e.g.,\r\n\r\n       \tsoap.beep://stockquoteserver.example.com:1026\r\n\r\n     then the DNS is queried for the Address Records (i.e. \"A\" for\r\n     IPv4, \"AAAA\" for IPv6 based on the host resolver specifications) \r\n     corresponding to the domain name, and the port number is used directly.\r\n\r\n     If the authority component contains a domain name and no port number,\r\n     e.g.,\r\n\r\n           soap.beep://stockquoteserver.example.com\r\n\r\n     the Service Record algorithm [11] is used with a service parameter of\r\n     \"soap-beep\" and a protocol parameter of \"tcp\" to determine the IP/TCP\r\n     addressing information.  If no appropriate SRV RRs are found (e.g.,\r\n     for \"_soap-beep._tcp.stockquoteserver.example.com\"), then the DNS is\r\n     queried for the Address RRs corresponding to the domain name     \r\n     and the port number used is assigned by the IANA for the registration\r\n     in Section 8.4.", "notes": "--VERIFIER NOTES--\r\nIt was first reported to us by Alfred H\u00eenes with helpful comments by Philip\r\nNesser.", "submit_date": "2006-02-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Eamon O'Tuathail", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "700", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7", "orig_text": "One procedure for determining a retransmission time out is given here as an \r\nillustration.", "correct_text": "One procedure for determining a retransmission timeout is given here as an \r\nillustration.", "notes": "from pending", "submit_date": "2006-02-18", "submitter_name": "\"Yin Shuming\"", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "701", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.8", "orig_text": "since it will be specified in detail by the specification of the lowel \r\nlevel protocol.", "correct_text": "since it will be specified in detail by the specification of the lower \r\nlevel protocol.", "notes": "from pending", "submit_date": "2006-02-18", "submitter_name": "\"Yin Shuming\"", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "715", "doc-id": "RFC4360", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "Section 3.1. defines the Extended Community extended type classes\r\n0x00ss and 0x40ss, as does Section 3.2. for the type classes 0x01ss\r\nand 0x41ss, and Section 3.3. for the type classes 0x03ss and 0x43ss\r\n(where 'ss' is the Sub-Type).\r\nThese classes are also covered by the IANA Considerations section.\r\n\r\nSection 4. and Section 5. of RFC 4360 both define extended types\r\nwhere \"the value of the high-order octet of the Type field ... can\r\nbe 0x00, 0x01, or 0x02\".\r\nThere is no formal definition for the latter case, Type = 0x02ss,\r\nin the whole RFC, and the subtypes 0x0202 and 0x0203 are not covered\r\nby the IANA considerations section.\r\n>From text in Section 4. and 5., it can be concluded, that perhaps\r\nthe layout from Section 3.1. should be applicable in this case as\r\nwell, but that's all I could find!\r\n\r\nWas type 0x02ss deprecated during the evolution of the draft,\r\nor has the definition of that extended type been ommitted\r\naccidentially from the RFC ?", "correct_text": "[see above]", "notes": "This was addressed by RFC5668.", "submit_date": "2006-02-27", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "716", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "        +--------+--------+--------+--------+\r\n        |10001000|00000010|    Stream ID    |\r\n        +--------+--------+--------+--------+\r\n         Type=136 Length=4", "correct_text": "        +--------+--------+--------+--------+\r\n        |10001000|00000100|    Stream ID    |\r\n        +--------+--------+--------+--------+\r\n         Type=136 Length=4\r\n\r\nRationale:\r\n\r\nThis number count the length which is 4 and not 2.\r\n10 in binary is 2 in decimal, 100 in binary is 4 in decimal.\r\n\r\nThe option-length octet counts the option-type octet and the \r\noption-length octet as well as the option-data octets.(see page 15)\r\nThe length is 4 for the Stream identifier option as we have 4 bytes and \r\nit is well written in page 16 of RFC 791:\r\n\r\nThe following internet options are defined:\r\n\r\n      CLASS NUMBER LENGTH DESCRIPTION\r\n      ----- ------ ------ -----------\r\n        0     0      -    End of Option list.  This option occupies only\r\n                          1 octet; it has no length octet.\r\n        0     1      -    No Operation.  This option occupies only 1\r\n                          octet; it has no length octet.\r\n        0     2     11    Security.  Used to carry Security,\r\n                          Compartmentation, User Group (TCC), and\r\n                          Handling Restriction Codes compatible with DOD\r\n                          requirements.\r\n        0     3     var.  Loose Source Routing.  Used to route the\r\n                          internet datagram based on information\r\n                          supplied by the source.\r\n        0     9     var.  Strict Source Routing.  Used to route the\r\n                          internet datagram based on information\r\n                          supplied by the source.\r\n        0     7     var.  Record Route.  Used to trace the route an\r\n                          internet datagram takes.\r\n        0     8      4    Stream ID.  Used to carry the stream\r\n                          identifier.\r\n        2     4     var.  Internet Timestamp.", "notes": "from pending", "submit_date": "2007-01-03", "submitter_name": "Damien Mattei", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "717", "doc-id": "RFC4301", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  [typo]\r\n\r\nIn section 4.1, on page 14, RFC 4301 says:\r\n\r\n   DISCUSSION: Although the DSCP [NiBlBaBL98, Gro02] and Explicit\r\n   Congestion Notification (ECN) [RaFlBl01] fields are not \"selectors\",\r\n   as that term in used in this architecture, the sender will need a\r\n   mechanism to direct packets with a given (set of) DSCP values to the\r\n   appropriate SA.  This mechanism might be termed a \"classifier\".\r\n\r\nIt should say ( s/in used/is used/ ) :\r\n\r\n   DISCUSSION: Although the DSCP [NiBlBaBL98, Gro02] and Explicit\r\n   Congestion Notification (ECN) [RaFlBl01] fields are not \"selectors\",\r\n|  as that term is used in this architecture, the sender will need a\r\n   mechanism to direct packets with a given (set of) DSCP values to the\r\n   appropriate SA.  This mechanism might be termed a \"classifier\".\r\n\r\n(2)  [textual improvement]\r\n\r\nIn section 4.4.3.2, the last lines on page 45 say:\r\n\r\n                                                      [...].  An entry\r\n   used with certificate-based authentication MAY include additional\r\n   data to facilitate certificate revocation status, e.g., a list of\r\n << page break >>\r\n   appropriate OCSP responders or CRL repositories, [...]\r\n\r\nThis seems to make not much sense. It should perhaps say:\r\n\r\n                                                      [...].  An entry\r\n   used with certificate-based authentication MAY include additional\r\n   data to facilitate certificate revocation status determination, e.g.,\r\n   a list of appropriate OCSP responders or CRL repositories, [...]\r\n\r\n(3)  [typo]\r\n\r\nThe second paragraph of section 4.4.3.3, on page 46, says:\r\n\r\n   If the entry indicates that the IKE ID is to be used, then the PAD\r\n   entry ID field defines the authorized set of IDs.  If the entry\r\n   indicates that child SAs traffic selectors are to be used, then an\r\n   additional data element is required, in the form of IPv4 and/or IPv6\r\n   address ranges. [...]\r\n\r\nIt should say ( s/SAa/SA/ ) :\r\n\r\n   If the entry indicates that the IKE ID is to be used, then the PAD\r\n   entry ID field defines the authorized set of IDs.  If the entry\r\n|  indicates that child SA traffic selectors are to be used, then an\r\n   additional data element is required, in the form of IPv4 and/or IPv6\r\n   address ranges. [...]\r\n\r\n(4)  [textual consistency]\r\n\r\nBelow the table on page 59, section 5.1.2.2 says:\r\n\r\n    Notes:\r\n\r\n      (1) - (6) See Section 5.1.2.1.\r\n\r\nIt should say:\r\n\r\n    Notes:\r\n\r\n|     (1) - (3), (5), (6)  See Section 5.1.2.1.\r\n\r\n\r\n(5)  [typo]\r\n\r\nThe second paragraph of App. D.2, on page 89, says:\r\n\r\n                                                    [...]. (If we choose\r\n   to allow carriage of fragments on transport mode SAs for IPv6, the\r\n   problems arises in that context as well.)\r\n          ^     ^^\r\n\r\nThere obviously is a singular/plural mismatch.\r\nThe text should say:\r\n                                                    [...]. (If we choose\r\n   to allow carriage of fragments on transport mode SAs for IPv6, the\r\n|  problem arises in that context as well.)\r\n\r\n\r\n(6)  Insufficient IPcomp integration\r\n\r\nAt the end of section 3.1, on page 10, RFC 4301 says:\r\n\r\n   IPsec optionally supports negotiation of IP compression [SMPT01],\r\n   motivated in part by the observation that when encryption is employed\r\n   within IPsec, it prevents effective compression by lower protocol\r\n   layers.\r\n\r\nIt has also been observed that payload compression can help counter\r\nTPA.  Thus, there are at least two reasons for a tight integration\r\nof IPComp with IPsec.\r\nBut I could not find any 'hook' in RFC 4301 (and in RFC 4302 / 4303\r\nas well) for the concrete support of IPComp in ESP / AH IPsec SAs.\r\n\r\nIKEv2 (RFC 4306) roughly allows negotiation of IPComp, but how shall\r\nthat be triggered and work, in an interoperable way, if there are no\r\narchitectural provisions for the support of IPComp designed in into\r\nthe IPsec databases (SPD, SAD) as described in RFC 4301 ????\r\n\r\n\r\n(7)  Insufficient integration with QoS (DS)\r\n\r\nThe steps taken for the integration with Differentiated Services\r\nare half-hearted.  The processing rules specified for the DSCP\r\nfield in the IP header[s] remain incomplete as long as there is\r\nno specified interoperable way to use DSCP as an selector as well.\r\n\r\nIMHO, the discussion on page 14 of RFC 4301 is misleading because\r\nDS classification and treatment needs to be done independent from\r\nIPsec treatment.\r\nIn many scenarios, e.g. on 'hosts' or 'QoS gateways' that must\r\nperform fine-grained traffic classification, DS treatment must\r\nbe performed strictly before IPsec treatment in the outbound\r\ncase (and after IPsec in the inbound case), to make ULP fields\r\naccessible to the DS classifiers.\r\nIPsec should then be capable of guaranteeing the same security\r\ntreatment of all packets of certain traffic class to a given\r\ndestination.\r\n\r\nI still have problems to imagine how DS integration could be\r\nachieved with the processing model of section 5.1 of RFC 4301.\r\n\r\nAt the end of section 3.1, on page 10, RFC 4301 says:\r\n\r\n\r\n(8)  Inconsistent DS Field handling specified in Section 5.1.2.x\r\n\r\nThe IPv6 related table in section 5.1.2.2 contains the line,\r\n\r\n        DS Field         copied from inner hdr (5)    no change (9)\r\n\r\nand the subsequent Notes give a lengthy explanation under (9).\r\n\r\nContrary to that, the corresponding table line for IPv4, in section\r\n5.1.2.1 on page 57, is *not* linked to such a note.\r\n\r\nI cannot see any reason precluding the application of the arguments\r\ngiven in Note (9) of section 5.1.2.2 to the IPv4 case as well.\r\n\r\nHave I missed any significant point there?\r\n\r\n\r\n(9)  SA negotiation -- capability mismatch with IKEv2\r\n\r\nSee section 4.4.1.2, second paragraph.", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2006-03-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "718", "doc-id": "RFC4758", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8.3", "orig_text": "      <xs:attribute name=3D\"Version\" type=3D\"ct-kip:VersionType\"/>\r\n    </xs:complexType>\r\n", "correct_text": "      <xs:attribute name=3D\"Version\" type=3D\"VersionType\"/>\r\n    </xs:complexType>\r\n", "notes": "from pending", "submit_date": "2007-01-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Nystrom", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "720", "doc-id": "RFC4758", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.9.3", "orig_text": "    <xs:complexContent>\r\n      <xs:extension base=3D\"ExtensionType\">\r\n        <xs:sequence>", "correct_text": "    <xs:complexContent>\r\n      <xs:extension base=3D\"AbstractExtensionType\">\r\n         <xs:sequence>", "notes": "from pending", "submit_date": "2007-01-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Nystrom", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "721", "doc-id": "RFC4303", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)\r\n\r\nSection 2.1 of RFC 4303 re-states a lot of material from the\r\nIPsec Architecture document, RFC 4301, without being able to\r\npresent all the details.  SPI selection has become a quite\r\ncomplicated procedure with subtle details, which all can be\r\nfound in RFC 4301.\r\n\r\nIMHO, it would have been very much preferrable to replace most\r\nof the text in section 2.1 by a short referral to RFC 4301.\r\nAny replication of specification entails the danger of\r\ninconsistencies and raises the question of \"truth weight\"\r\nfor the concurring specifications; it is better to avoid\r\nsuch \"races\" from the beginning.\r\n\r\nThis same issue applies to section 2.4 of RFC 2402. (By accident,\r\nI have forgotten to mention it in my comments on that document.)\r\n\r\nMore concretely, I would have preferred the replacement of the\r\nsecond up to the second-to-last paragraph of section 2.1 of RFC 4303,\r\non pages 10/11,\r\n\r\n  For a unicast SA, the SPI can be used by itself to specify an SA, or\r\n  it may be used in conjunction with the IPsec protocol type (in this\r\n  ...\r\n\r\n  ...\r\n  ...\r\n  ...\r\n\r\n  ...\r\n  multicast address, and source address.  An Any-Source Multicast group\r\n  SA requires only an SPI and a destination multicast address as an\r\n  identifier.\r\n\r\nby a short note, e.g.\r\n\r\n  All implementations of ESP MUST support the Security Association\r\n  Database (SAD) as specified in the IPsec Archtecture document\r\n  [Ken-Arch] and the SA lookup procedures for unicast traffic\r\n  specified therein.  ESP implementations SHOULD support extensions\r\n  to the SAD and the SA lookup procedures specified in documents\r\n  amending [Ken-Arch], e.g. for multicast traffic or mobility support,\r\n  if they intend to provide ESP support for such scenarios.\r\n\r\nA similar change would be applicable to RFC 4302, section 2.4,\r\npages 6/7.\r\n\r\n\r\n(2)\r\n\r\nIn section 3.4.3, on the lower half of page 29, RFC 4303 says:\r\n\r\n                                                    [...].  In either\r\n   case, if the integrity check fails, the receiver MUST discard the\r\n   received IP datagram as invalid; this is an auditable event.  The\r\n   audit log entry for this event SHOULD include the SPI value,\r\n   [...]\r\n\r\nBecause the audit log details are in a separate sentence, the logical\r\nhierarchy implied by using one semicolon and one full stop is brocken.\r\nIt would have been better to say:\r\n                                                    [...].  In either\r\n   case, if the integrity check fails, the receiver MUST discard the\r\n|  received IP datagram as invalid.  This is an auditable event.  The\r\n   audit log entry for this event SHOULD include the SPI value,\r\n   [...]\r\n\r\nSimilar punctuation already is used in many places of the RFC.\r\n\r\n\r\n(3)\r\n\r\nAs mentioned in section 7, section 3.4 has been reorganized from\r\nRFC 2406.\r\nDuring that process, the perhaps most important part of ESP inbound\r\npacket processing has disappeared from the section headlines:\r\ndecryption !\r\n\r\nTo cover what's inside, and to make that locatable in the ToC,\r\nperhaps the section headline,\r\n\r\n 3.4.4.  Integrity Check Value Verification\r\n\r\non page 30, and in the ToC, should be modified to read:\r\n\r\n 3.4.4.  Integrity Check Value Verification and Payload Decryption\r\n\r\nI would like to recommend that you submit an RFC Errata Note to\r\ncatch this issue.\r\n\r\n\r\n(4)\r\n\r\nIn section 3.4.4.2, the same issue as (2) above also applies to\r\nthe item numbered \"2.\" on page 32.\r\n\r\n\r\n(5)  References\r\n\r\nRFC 4306 repeatedly refers to its predecessor, RFC 2406, but it omits\r\ngiving a formal (Informative) Reference to that document in Section\r\n10.2 on page 37.\r\n\r\nPerhaps it would also have been worth noting that a *full* version\r\nof the research paper [Kra01] can be found on IACR ePrint, document\r\n2001/040.\r\n\r\n\r\n(6)  Appendix A\r\n\r\nAs mentioned in my comments on RFC 4302, this appendix is the more\r\ncomplete and hence preferrable text compared to App. B of RFC 4302.\r\nThere is one exception:\r\nThe formatting of tha last part of A2.1 ia less pleasant.\r\nTo enhance readability, it is always preferrable not to break\r\nsimple expressions apart by line breaks, whenever possible.  In\r\nthis case, simple relational expressions are broken into 2 lines.\r\n\r\nRFC 4303, on page 40, says:\r\n\r\n   In checking for replayed packets,\r\n\r\n      + Under Case A: If Seql >= Bl (where Bl = Tl - W + 1) AND Seql <=\r\n        Tl, then check the corresponding bit in the window to see if\r\n        this Seql has already been seen.  If yes, reject the packet.  If\r\n        no, perform integrity check (see Appendix A2.2. below for\r\n        determination of Seqh).\r\n\r\n      + Under Case B: If Seql >= Bl (where Bl = Tl - W + 1) OR Seql <=\r\n        Tl, then check the corresponding bit in the window to see if\r\n        this Seql has already been seen.  If yes, reject the packet.  If\r\n        no, perform integrity check (see Appendix A2.2. below for\r\n        determination of Seqh).\r\n\r\nThe formatting in RFC 4302 of the same text (with the already\r\nmentioned typo there corrected, and the Appendix name adapted),\r\nis better:\r\n\r\n   In checking for replayed packets,\r\n\r\n      + Under Case A: If Seql >= Bl (where Bl = Tl - W + 1) AND\r\n        Seql <= Tl, then check the corresponding bit in the window to\r\n        see if this Seql has already been seen.  If yes, reject the\r\n        packet.  If no, perform integrity check (see Appendix A2.2\r\n        below for determination of Seqh).\r\n\r\n      + Under Case B: If Seql >= Bl (where Bl = Tl - W + 1) OR\r\n        Seql <= Tl, then check the corresponding bit in the window to\r\n        see if this Seql has already been seen.  If yes, reject the\r\n        packet.  If no, perform integrity check (see Appendix A2.2\r\n        below for determination of Seqh).\r\n\r\nBut I would even have preferred this formatting:\r\n\r\n   In checking for replayed packets,\r\n\r\n      + Under Case A:\r\n        If Seql >= Bl (where Bl = Tl - W + 1) AND Seql <= Tl,\r\n        then check the corresponding bit in the window to see if this\r\n        Seql has already been seen.  If yes, reject the packet.\r\n        If no, perform integrity check (see Appendix A2.2 below for\r\n        determination of Seqh).\r\n\r\n      + Under Case B:\r\n        If Seql >= Bl (where Bl = Tl - W + 1) OR Seql <= Tl,\r\n        then check the corresponding bit in the window to see if this\r\n        Seql has already been seen.  If yes, reject the packet.\r\n        If no, perform integrity check (see Appendix A2.2 below for\r\n        determination of Seqh).", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2006-03-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "722", "doc-id": "RFC4758", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A says:", "orig_text": "    <xs:complexType name=3D\"PayloadType\">\r\n      <xs:annotation>\r\n        <xs:documentation xml:lang=3D\"en\">\r\n        </xs:documentation>\r\n      </xs:annotation>", "correct_text": "    <xs:complexType name=3D\"PayloadType\">\r\n      <xs:annotation>\r\n        <xs:documentation xml:lang=3D\"en\">\r\n         Currently, only the nonce is defined.  In future versions,\r\n         other payloads may be defined, e.g., for one-roundtrip\r\n         initialization protocols.\r\n      </xs:documentation>\r\n    </xs:annotation>", "notes": "documentation was missing\r\n\r\nfrom pending", "submit_date": "2007-01-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Nystrom", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "723", "doc-id": "RFC4758", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.2 says:", "orig_text": "    <CT-KIPTrigger\r\n      xmlns=3D [...]", "correct_text": "    <?xml version=3D\"1.0\" encoding=3D\"UTF-8\"?>\r\n    <CT-KIPTrigger\r\n      xmlns=3D [...]", "notes": "from pending", "submit_date": "2007-01-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Nystrom", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "852", "doc-id": "RFC4143", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "       $ORIGIN 4.3.2.1.6.7.9.8.6.4.e164.arpa\r\n         IN NAPTR 10 10 \"u\" \"E2U+ifax:mailto\"\r\n                                \"!^.*$!mailto:toyo@example.com!\"", "correct_text": "       $ORIGIN 4.3.2.1.6.7.9.8.6.4.e164.arpa\r\n         IN NAPTR 10 10 \"u\" \"E2U+ifax:mailto\"\r\n                                \"!^.*$!mailto:toyo@example.com!\" .\r\n", "notes": "This NAPTR record is missing the REPLACEMENT field (see RFC 3403).\r\n(Note the additional point at the end of the example.)\r\n", "submit_date": "2007-01-31", "submitter_name": "Matthias Wimmer", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "702", "doc-id": "RFC3966", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12", "orig_text": "Fate of \"fax\" and \"modem\" URI schemes\r\n\r\nRFC 3966 re-defines the \"tel\" URI scheme and obsoletes RFC 2806\r\nwhich defined (and registered) three URI schemes: \"tel\", \"fax\",\r\nand \"modem\". Section 12 of RFC 3966 (on page 15) merely states:\r\n\r\n\"references to ... fax and modem URIs ... have been removed.\"\r\n\r\n\r\nThere are *no* IANA considerations included in RFC 3966 regarding\r\nthe latter URIs.\r\n\r\nHence it is not clear whether these URIs are to be regarded as\r\ninformally \"deprecated\" or \"de-registered\" by this RFC, and therefore\r\nshould be marked accordingly in the IANA 'URI Schemes' reqistry.\r\n\r\nIf however, by existing policy, URI schemes cannot be \"deprecated\"\r\nor \"de-registered\", the RFC 3966 meta-information should be changed\r\nto say \"Updates: 2806\" instead of \"Obsoletes: 2806\", and another\r\nerrata note should be filed to change the RFC 3966 heading\r\naccordingly, to avoid the situation of having no more 'valid'\r\ndocumentation for two registered URI schemes.\r\n", "correct_text": "[see above] ", "notes": "The fate of the \"fax\" and \"modem\" URI schemes should be made clear,\r\nformally, and in an appropriate way.\r\n\r\nHenning Schulzrinne:\r\nRequires discussion in the IPTEL working group, where I suggest you \r\ntake this discussion. I have my personal opinions as to the deployment \r\nand deployability of the 'fax' URI scheme, but that's not particularly \r\nrelevant. I suspect a separate document that performs the appropriate \r\ndesignation (e.g., historical) would be called for, rather than changing \r\n3996.\r\n\r\n\r\nfrom pending", "submit_date": "2004-12-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "703", "doc-id": "RFC783", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "The mode field contains the string \"netascii\", \"octec\", or \"mail\" (or any \r\ncomibnation of upper and lower case, such as \"NETASCII\", \"NetAscii\", etc.) \r\nin netascii indicating the three modes defined in the protocol.", "correct_text": "The mode field contains the string \"netascii\", \"octec\", or \"mail\" (or any \r\ncombination of upper and lower case, such as \"NETASCII\", \"NetAscii\", etc.) \r\nin netascii indicating the three modes defined in the protocol.", "notes": "spelling error: comibnation/combination\r\n\r\nfrom pending\r\n", "submit_date": "2006-02-18", "submitter_name": "\"Yin Shuming\"", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "704", "doc-id": "RFC3920", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.6", "orig_text": "It has been brought to my attention that in Section 6.6 of RFC 3920, the \r\nprotocol snippet in Step 11 is as follows:\r\n \r\n    <stream:stream\r\n        xmlns='jabber:client'\r\n        xmlns:stream='http://etherx.jabber.org/streams'\r\n        from='example.com'\r\n        id='s2s_345'\r\n        version='1.0'>\r\n    <stream:features/>\r\n \r\nBecause this is a server-to-server example, the xmlns for that stream \r\nheader should instead be 'jabber:server'.\r\n ", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2004-12-08", "submitter_name": "Peter Saint-Andre", "verifier_id": "", "verifier_name": null, "update_date": "2022-01-25 17:42:29"}, {"errata_id": "705", "doc-id": "RFC4327", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  [plaintext flaw]\r\n\r\nIn the final paragraph of Section 7, on page 8, RFC 4327 says:\r\n\r\n   In parallel with the entry created in the lmpTeLinkTable, an entry\r\n   may be created in the teLinkTable of TE Link MIB module\r\n   [RFC4220].\r\n\r\nIt should better say:\r\n\r\n   In parallel with the entry created in the lmpTeLinkTable, an entry\r\n|  may be created in the teLinkTable of the TE Link MIB module\r\n   [RFC4220].\r\n                                       ^^^^^\r\n\r\n(2)  [plaintext flaw]\r\n\r\nIn the second paragraph of Section 8, at the bottom of page 8,\r\nRFC 4327 says:\r\n\r\n                        [...].  The interrelation of entries in the\r\n   ifTable is defined by Interfaces Stack Group defined in [RFC2863].\r\n\r\nIt should say:\r\n\r\n                        [...].  The interrelation of entries in the\r\n|  ifTable is defined by the Interfaces Stack Group defined in\r\n   [RFC2863].\r\n                        ^^^^^\r\n\r\n\r\n(3)  LmpInterval TEXTUAL-CONVENTION  (page 12)\r\n\r\nThe clause,\r\n\r\n   DESCRIPTION\r\n       \"The interval delay in milliseconds.\"\r\n\r\nperhaps should better say:\r\n\r\n   DESCRIPTION\r\n|      \"The delay interval in milliseconds.\"\r\n\r\nor even:\r\n\r\n   DESCRIPTION\r\n|      \"The interval period for a periodically performed LMP operation,\r\n|       in milliseconds.\"\r\n\r\n\r\n(4)  LmpRetransmitInterval TEXTUAL-CONVENTION  (page 12)\r\n\r\nThe clause,\r\n\r\n   DESCRIPTION\r\n       \"The retransmission interval delay in milliseconds.\"\r\n\r\nperhaps should better say:\r\n\r\n   DESCRIPTION\r\n|      \"The retransmission delay interval in milliseconds.\"\r\n\r\nor even better:\r\n\r\n   DESCRIPTION\r\n|      \"The (initial) retransmission interval in milliseconds.\"\r\n\r\n\r\n(5)  lmpNbrRetransmitInterval OBJECT-TYPE  (page 14)\r\n\r\nThe sentence in the DESCRIPTION clause,\r\n\r\n   \"[...]  This object ... is used to implement congestion-handling\r\n   mechanism as defined in Section 10 of the Link Management Protocol\r\n   specification, which is based on RFC 2914.\"\r\n\r\nshould perhaps better say:\r\n                                               vvvvv\r\n|  \"[...]  This object ... is used to implement the congestion-handling\r\n   mechanism as defined in Section 10 of the Link Management Protocol\r\n   specification, which is based on RFC 2914.\"\r\n\r\n\r\n(6)  lmpNbrRetryLimit OBJECT-TYPE  (page 14)\r\n\r\nThe correction from item (5) above should be applied here as well.\r\n\r\n\r\n(7)  lmpCcRemoteAddressType OBJECT-TYPE  (page 20)\r\n\r\n   DESCRIPTION\r\n       \"This value represents the remote control channel IP address\r\n        type.  In point-to-point configuration, this value can be set\r\n        to unknown(0).\"\r\n   ::= { lmpControlChannelEntry 6 }\r\n\r\nshould better say:\r\n\r\n   DESCRIPTION\r\n       \"This value represents the remote control channel IP address\r\n|       type.  In point-to-point configurations, this value can be set\r\n        to unknown(0).\"\r\n   ::= { lmpControlChannelEntry 6 }\r\n                                              ^\r\n\r\n[ The possible alternative, \"In a point-to-point configuration, ...\"\r\n  is not proposed here, to maintain a style similar to the minimal\r\n  change for the next object -- see (8) below.]\r\n\r\n\r\n(8)  lmpCcRemoteIpAddr OBJECT-TYPE  (page 20)\r\n\r\n   DESCRIPTION\r\n       \"[...]\r\n        Control channel must be numbered on non-point-to-point\r\n        configuration.  For point-to-point configuration, the\r\n        remote control channel address can be of type unknown\r\n        in which case this object must be a zero-length string.  The\r\n        lmpCcRemoteId object then identifies the unnumbered\r\n        address.\"\r\n   ::= { lmpControlChannelEntry 7 }\r\n\r\nshould better say:\r\n\r\n   DESCRIPTION\r\n       \"[...]\r\n|       The control channel must be numbered on non-point-to-point\r\n|       configurations.  For point-to-point configurations, the\r\n        remote control channel address can be of type unknown\r\n        in which case this object must be a zero-length string.  The\r\n        lmpCcRemoteId object then identifies the unnumbered\r\n        address.\"\r\n   ::= { lmpControlChannelEntry 7 }\r\n\r\n\r\n(11)  lmpControlChannelPerfEntry OBJECT-TYPE  (page 24)\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table is created by a LMP-enabled device for\r\n        every control channel.  lmpCcCounterDiscontinuityTime is used\r\n        to indicate potential discontinuity for all counter objects\r\n        in this table.\"\r\n\r\nThe latter is not true.\r\nIn this MIB module, the discontinuity is monitored per table *entry*\r\n(conceptual row), not for the table as a whole -- see the DESCRIPTIONs\r\nfor lmp<*>DiscontinuityTime later in the RFC.\r\n\r\nTherefore, the above clause should say:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table is created by a LMP-enabled device for\r\n        every control channel.  lmpCcCounterDiscontinuityTime is used\r\n        to indicate potential discontinuity for all counter objects\r\n|       in this entry (conceptual row).\"\r\n\r\n\r\n(12)  lmpCcChannelStatusAckSent OBJECT-TYPE  (page 34)\r\n\r\nThe clause,\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of ChannelStatus messages\r\n        that have been sent on this control channel.\"\r\n   ::= { lmpControlChannelPerfEntry 47 }\r\n\r\nrefers to the wrong message type; it should say:\r\n\r\n   DESCRIPTION\r\n|      \"This object counts the number of ChannelStatusAck messages\r\n        that have been sent on this control channel.\"\r\n   ::= { lmpControlChannelPerfEntry 47 }\r\n\r\n\r\n(14)  lmpTeLinkPerfEntry OBJECT-TYPE  (page 42)\r\n\r\nThe correction from item (11) above is to be applied here as well:\r\n\r\nReplace:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table is created by an LMP-enabled device for\r\n        every TE link.  lmpTeCounterDiscontinuityTime is used\r\n        to indicate potential discontinuity for all counter objects\r\n        in this table.\"\r\n\r\nby:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table is created by an LMP-enabled device for\r\n        every TE link.  lmpTeCounterDiscontinuityTime is used\r\n        to indicate potential discontinuity for all counter objects\r\n|       in this entry (conceptual row).\"\r\n\r\n\r\n(15)  lmpTeEndVerifyRetransmit OBJECT-TYPE  (page 45/46)\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of EndVerify messages that\r\n        have been retransmitted over this control channel.\"\r\n   ::= { lmpTeLinkPerfEntry 12 }\r\n\r\nis inappropriate.  In accordance with the text supplied for the\r\nother objects in the LMP TE Link Performance Table, it should say:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of EndVerify messages that\r\n|       have been retransmitted for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 12 }\r\n\r\n\r\n(16)  lmpTeTestStatusFailureRetransmit OBJECT-TYPE  (page 47)\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of TestStatusFailure messages\r\n        that have been retransmitted on this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 20 }\r\n\r\nshould say:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of TestStatusFailure messages\r\n        that have been retransmitted for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 20 }\r\n\r\n[ According to Section 12.5.8. of the LMP specification [RFC 4204],\r\n  LMP TestStatusFailure messages are transmitted over the control\r\n  channel; hence, \"retransmitted *on* this TE Link\" is wrong! ]\r\n\r\n\r\n(17)  lmpTeLinkSummaryRetransmit OBJECT-TYPE  (page 48)\r\n\r\nThe correction from item (15) above is to be applied here as well:\r\n\r\nReplace:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of LinkSummary messages that\r\n        have been retransmitted over this control channel.\"\r\n   ::= { lmpTeLinkPerfEntry 25 }\r\n\r\nby:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of LinkSummary messages that\r\n|       have been retransmitted for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 25 }\r\n\r\n\r\n(18)  lmpTeChannelStatusAckSent OBJECT-TYPE  (page 50)\r\n\r\nThe correction from item (12) above is to be applied here as well:\r\n\r\nReplace:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of ChannelStatus messages\r\n        that have been sent for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 34 }\r\n\r\nby:\r\n\r\n   DESCRIPTION\r\n|      \"This object counts the number of ChannelStatusAck messages\r\n        that have been sent for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 34 }\r\n\r\n\r\n(20)  lmpDataLinkPerfEntry OBJECT-TYPE  (page 55)\r\n\r\nThe correction from item (11) above is to be applied here as well:\r\n\r\nReplace:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table contains information about\r\n        the LMP performance counters for the data-bearing links.\r\n        lmpDataLinkDiscontinuityTime is used to indicate potential\r\n        discontinuity for all counter objects in this table.\"\r\n\r\nby:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table contains information about\r\n        the LMP performance counters for the data-bearing links.\r\n        lmpDataLinkDiscontinuityTime is used to indicate potential\r\n|       discontinuity for all counter objects in this entry.\"\r\n\r\n\r\n(21)  lmpNotificationMaxRate OBJECT-TYPE  (page 57/58)\r\n\r\nThe DESCRIPTION text near the top of page 58 says:\r\n\r\n                        [...].  For instance, a network of 100 nodes\r\n        with 5 links of 128 wavelengths each and a link verification\r\n        of 1 minute with no more than 10% of the links failed at any\r\n        given time would have 1 notification per second sent from\r\n        each node, or 100 notifications per second for the whole\r\n        network.  The rest of the notifications are negligible\r\n        compared to this number.\r\n\r\n        To alleviate the congestion problem, the\r\n        lmpNotificationMaxRate object can be used to implement a\r\n        throttling mechanism.  It is also possible to enable/disable\r\n        certain type of notifications.\r\n\r\nIt should say, correcting two flaws (line breaks adjusted):\r\n\r\n                        [...].  For instance, a network of 100 nodes\r\n        with 5 links of 128 wavelengths each and a link verification\r\n|       interval of 1 minute with no more than 10% of the links failed\r\n        at any given time would have 1 notification per second sent\r\n        from each node, or 100 notifications per second for the whole\r\n        network.  The rest of the notifications are negligible\r\n        compared to this number.\r\n\r\n        To alleviate the congestion problem, the\r\n        lmpNotificationMaxRate object can be used to implement a\r\n        throttling mechanism.  It is also possible to enable/disable\r\n|       certain types of notifications.\r\n\r\n\r\n(23)  lmpControlChannelGroup OBJECT-GROUP  (page 72)\r\n\r\nAt the bottom of page 72, the RFC says:\r\n\r\n   DESCRIPTION\r\n          \"Objects that can be used to configure LMP interface.\"\r\n\r\nIt should say:\r\n\r\n   DESCRIPTION\r\n|         \"Objects that can be used to configure LMP interfaces.\"\r\n", "correct_text": "[see above]", "notes": "Verifier's analysis:\r\n\r\n1.  Yes. Editorial nit.\r\n2.  Yes. Editorial nit.\r\n3.  Yes. Editorial nit.\r\n4.  Yes. Editorial nit.\r\n5.  Yes. Editorial nit.\r\n6.  Yes. Editorial nit.\r\n7.  Yes. Editorial nit.\r\n8.  Yes. Editorial nit.\r\n11. Yes. Editorial change of substance.\r\n12. Yes. Editorial change of substance.\r\n14. Yes. Editorial change of substance.\r\n15. Yes. Editorial change of substance.\r\n16. Yes. Editorial change of substance.\r\n17. Yes. Editorial change of substance.\r\n18. Yes. Editorial change of substance.\r\n20. Yes. Editorial change of substance.\r\n21. Yes. Editorial nit.\r\n23. Yes. Editorial nit.\r\n\r\nRejected items have been moved to Errata ID 1938.", "submit_date": "2006-02-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "706", "doc-id": "RFC3967", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Normative references to HMAC in future IETF Standards Track documents should always refer to FIPS-198 instead of RFC 2104.", "orig_text": "(2)\r\n    MD5 [RFC1321]\r\n\r\nAccording to the contemporary cryptographic literature, protocols\r\nshould now better use SHA-xxx (xxx = [1 / ] 224 / 256 / 384 / 512)\r\nas a cryptographic hashing primitive instead of MD5.\r\n\r\nSee\r\n- FIPS PUB 180-2, issued '2002 August 1', and amended by\r\n  Change Note 1, issued '2004 February 25', for SHA-224,\r\nand\r\n- RFC 3174 (for SHA-1) and RFC 3874 (for SHA-224) -- based on above.\r\n\r\nFIPS 180-2 should be used for Normative References in future IETF\r\nStandards Track documents.\r\n\r\n\r\n", "correct_text": "[see above]", "notes": "Remark 3:\r\n  SHA-1 (as well as MD5) already is no more recommended for new\r\n  applications to be used in the public administration and economy\r\n  within the European Union, see the URL given in Remark 2 above!\r\n\r\nfrom pending\n --VERIFIER NOTES-- \n2021-10-06: moved from Held for Document Update to Rejected per request from Murray Kucherawy.  This erratum was reviewed while working on a bis document.", "submit_date": "2005-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2021-10-06 18:47:32"}, {"errata_id": "707", "doc-id": "RFC3944", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "One general inconsistency observed throughout the text, is related\r\nto the use of 'architecture' (singular) vs. 'architectures' (plural).\r\nSince the H.350 series recommendations describe a *single*\r\n[LDAP directory] architecture [extension], I propose to modify the\r\ntext to use the singular form in a consistent manner as noted below.\r\n\r\nFurther, there are a lot of places where I miss expected articles\r\n('the' / 'a' / 'an') -- even in the text that is said to be copied\r\nfrom the ITU-T Recommendations.\r\n(1)\r\n\r\nChange the first 4 (identical) lines of\r\n-  'Abstract' on page 1,  and\r\n-  '1. Scope' on page 3, from :\r\n\r\n  \"The International Telecommunications Union Standardization Sector\r\n   (ITU-T) has created the H.350 series of Recommendations that specify\r\n   directory services architectures in support of multimedia\r\n   conferencing protocols.  The goal of the architecture is to\" ...\r\n                                        ^^^^^^^^^^^^^^^^!!\r\nto:\r\n\r\n  \"The International Telecommunications Union Standardization Sector\r\n   (ITU-T) has created the H.350 series of Recommendations that specify\r\n|  a directory services architecture in support of multimedia\r\n   conferencing protocols.  The goal of the architecture is to\" ...\r\n\r\n\r\n(2)\r\n\r\nChange the second paragraph of '1. Scope' on page 3:\r\n\r\n  \"H.350 architectures are not intended to change the operation of\r\n   multimedia conferencing protocols in any way.  Rather, they are meant\r\n   to standardize the way the already defined protocol elements are\r\n   stored in a directory, so that they can be accessed in a standardized\r\n   manner.\"\r\n\r\nto:\r\n\r\n| \"The H.350 architecture is not intended to change the operation of\r\n|  multimedia conferencing protocols in any way.  Rather, it is meant\r\n   to standardize the way the already defined protocol elements are\r\n   stored in a directory, so that they can be accessed in a standardized\r\n   manner.\"\r\n\r\n\r\n(3)\r\n\r\nIn lines 2..4 of '4.1. Scope' on page 4, change:\r\n\r\n                                   ... \"Standardized directory services\r\n   can support association of persons with endpoints, searchable white\r\n   pages, and clickable dialling.\"  ...\r\n\r\nto:\r\n\r\n                                   ... \"Standardized directory services\r\n|  can support the association of persons with endpoints, searchable white\r\n   pages, and clickable dialling.\"  ...\r\n\r\n\r\n(4)\r\n\r\nIn the bottom half of the second paragraph of section 4.1. on\r\npage 5, change:\r\n                                                  ... \"Each of these\r\n   disparate systems can access the same underlying data source,\r\n   reducing or eliminating the need to coordinate separate management of\r\n   each system.  A significant benefit to the user is that the\r\n   management of this data can be incorporated into existing customer\r\n   management tools, allowing for quick and flexible scaling up of\r\n   applications.  Indeed, many technology providers have already\r\n   incorporate LDAP into their products, but have been forced to do so\r\n   without benefit of a standardized schema.\" ...\r\n\r\nto:\r\n                                                  ... \"Each of these\r\n   disparate systems can access the same underlying data source,\r\n|  reducing or eliminating the need to coordinate the separate management\r\n   of each system.  A significant benefit to the user is that the\r\n   management of this data can be incorporated into existing customer\r\n   management tools, allowing for quick and flexible scaling up of\r\n   applications.  Indeed, many technology providers have already\r\n   incorporate LDAP into their products, but have been forced to do so\r\n|  without the benefit of a standardized schema.\" ...\r\n\r\n\r\n(5)\r\n\r\nIn lines 3..7 of the forth paragraph of section 4.1. on page 5,\r\nchange:\r\n                                                 ... \"LDAP provides a\r\n   convenient storage location that can be accessed by both call server\r\n   and endpoint; thus it is possible to use the directory to support\r\n   endpoint configuration, which is important for simplified operation\r\n   and supporting user mobility.\"\r\n\r\nto:\r\n                                                 ... \"LDAP provides a\r\n   convenient storage location that can be accessed by both call server\r\n|  and endpoint; thus it is possible to use the directory to support the\r\n   endpoint configuration, which is important for simplified operation\r\n   and supporting user mobility.\"\r\n\r\n\r\n(6)\r\n\r\nIn the bottom half of the sixth paragraph of section 4.1. on page 6,\r\nchange:\r\n                                ... \"Similarly, commObject contains a\r\n   pointer, called commOwner, which points to the individual or resource\r\n   that is associated with the commObject.  In this way, people or\r\n   resources can be associated with endpoints.  The only change required\r\n   in the enterprise directory is the addition of the simple object\r\n   class commURI.  CommObject data may be instantiated in the same or in\r\n   entirely separate directories, thus allowing flexibility in\r\n   implementation.\"\r\n\r\nto:\r\n\r\n|                               ... \"Similarly, each commObject contains a\r\n   pointer, called commOwner, which points to the individual or resource\r\n   that is associated with the commObject.  In this way, people or\r\n   resources can be associated with endpoints.  The only change required\r\n|  to the enterprise directory is the addition of the simple object\r\n   class commURI.  CommObject data may be instantiated in the same or in\r\n|  an entirely separate directory, thus allowing flexibility in\r\n   implementation.\"\r\n\r\n\r\n(7)\r\n\r\nIn the first lines of the final paragraph of section 4.1.2.1,\r\non page 9, change:\r\n\r\n  \"Note that this example and approach demonstrate extension of the\r\n   general commObject object class, and not any individual H.350.x\r\n   classes.\" ...\r\n\r\nto:\r\n\r\n| \"Note that this example and approach demonstrate an extension of the\r\n   general commObject object class, and not any individual H.350.x\r\n   classes.\" ...\r\n\r\n\r\n(8)\r\n\r\nIn the first line of section 4.2., on page 10, change:\r\n\r\n  \"Auxiliary object class that contains the commURI attribute.\" ...\r\n\r\nto:\r\n\r\n| \"An Auxiliary object class that contains the commURI attribute.\" ...\r\n\r\n\r\n(9)\r\n\r\nChange the 'definition' clause of section 5.2.4., on page 20, from:\r\n\r\n       \"Address which specifies the domain location of SIP proxy within\r\n   a domain.  RFC 3261 defines the role of the SIP proxy.\"\r\n\r\nto:\r\n\r\n|      \"Address which specifies the domain location of a SIP proxy within\r\n   a domain.  RFC 3261 defines the role of the SIP proxy.\"\r\n\r\n\r\n(10)\r\n\r\nIn the first two lines of the second paragraph of section 7.,\r\non page 27, change:\r\n\r\n  \"H.350 does not alter the security architectures of any particular\r\n   protocol.\"\r\n\r\nto:\r\n\r\n| \"H.350 does not alter the security architecture of any particular\r\n   protocol.\"", "correct_text": "[see above]", "notes": "", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "708", "doc-id": "RFC3939", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "according to BCP 90\r\n(= RFC 3864), the new IMAIL Header Fields, \"Caller-ID\" and\r\n\"Caller-Name\", as well should get formal IANA registrations listed\r\nin the RFC, using the templates from section 4.2. of RFC 3864 !\r\n", "correct_text": "[none submitted]", "notes": "Perhaps, a citation to BCP 90 would also have been appropriate.\r\n\r\nfrom pending", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "709", "doc-id": "RFC3939", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "Minor textual improvements:\r\n\r\na) Change the first line of section 6.1., on page 6, from\r\n\r\n  \"The intent of these headers are to record telephone number that is\r\n   sent by the analog phone system with an incoming call without\r\n   alteration or interpretation.\" ...\r\n\r\nto:\r\n\r\n| \"The intent of these headers are to record the telephone number that\r\n                                             ^^^\r\n   is sent by the analog phone system with an incoming call without\r\n   alteration or interpretation.\" ...\r\n\r\nb) In the first line of section '10. Acknowledgments', on page 9,\r\nchange:\r\n\r\n  \"The previous authors of versions of this document were Derrick Dunne\r\n   and Jason Collins.\" ...\r\n\r\nto:\r\n\r\n| \"The authors of previous versions of this document were Derrick Dunne\r\n   and Jason Collins.\" ...", "correct_text": "[see above]", "notes": "", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4950", "doc-id": "RFC6022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2 (2,3)", "orig_text": "<get-schema\r\n           xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring\">\r\n             <identifer>bar</identifer>\r\n             <version>2008-06-01</version>\r\n           </get-schema>\r\n\r\na. Via <get-schema> using identifer parameter:\r\n\r\n <get-schema\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring\">\r\n           <identifer>bar-types</identifer>\r\n         </get-schema>", "correct_text": "<get-schema\r\n           xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring\">\r\n             <identifier>bar</identifier>\r\n             <version>2008-06-01</version>\r\n           </get-schema>\r\n\r\na. Via <get-schema> using identifier parameter:\r\n\r\n <get-schema\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring\">\r\n           <identifier>bar-types</identifier>\r\n         </get-schema>", "notes": "", "submit_date": "2017-02-24", "submitter_name": "Andreas Walden", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "733", "doc-id": "RFC3781", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "  Integer64 ::=\r\n       [APPLICATION 10]\r\n           IMPLICIT INTEGER (-9223372036854775808..9223372036854775807)\r\n\r\n   Unsigned64\r\n       [APPLICATION 11]\r\n           IMPLICIT INTEGER (0..18446744073709551615)\r\n\r\n   Float32\r\n       [APPLICATION 12]\r\n           IMPLICIT OCTET STRING (SIZE (4))\r\n\r\n   Float64\r\n       [APPLICATION 13]\r\n           IMPLICIT OCTET STRING (SIZE (8))\r\n\r\n   Float128\r\n       [APPLICATION 14]\r\n           IMPLICIT OCTET STRING (SIZE (16))\r\n\r\n", "correct_text": "  Integer64 ::=\r\n       [APPLICATION 10]\r\n           IMPLICIT INTEGER (-9223372036854775808..9223372036854775807)\r\n\r\n   Unsigned64 ::=\r\n       [APPLICATION 11]\r\n           IMPLICIT INTEGER (0..18446744073709551615)\r\n\r\n   Float32 ::=\r\n       [APPLICATION 12]\r\n           IMPLICIT OCTET STRING (SIZE (4))\r\n\r\n   Float64 ::=\r\n       [APPLICATION 13]\r\n           IMPLICIT OCTET STRING (SIZE (8))\r\n\r\n   Float128 ::=\r\n       [APPLICATION 14]\r\n           IMPLICIT OCTET STRING (SIZE (16))\r\n\r\n", "notes": "", "submit_date": "2005-02-13", "submitter_name": "Michael Kirkham", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "734", "doc-id": "RFC3970", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5, page 16", "orig_text": "   teTunnelLPOctets OBJECT-TYPE\r\n       SYNTAX       Counter32\r\n       MAX-ACCESS   read-only\r\n       STATUS       current\r\n       DESCRIPTION \"The number of octets that have been forwarded over\r\n                    the Tunnel.\r\n\r\n                    Discontinuities in the value of this counter can\r\n                    occur at re-initialization of the management system\r\n                    and at other times, as indicated by the value of\r\n                    teTunnelDiscontinuityTimer.\r\n                   \"\r\n       ::= { teTunnelEntry 14 }\r\n\r\n   teTunnelLPPackets OBJECT-TYPE\r\n       SYNTAX       Counter32\r\n       MAX-ACCESS   read-only\r\n       STATUS       current\r\n       DESCRIPTION \"The number of packets that have been forwarded over\r\n                    the Tunnel.\r\n                    Discontinuities in the value of this counter can\r\n                    occur at re-initialization of the management system\r\n                    and at other times, as indicated by the value of\r\n                    teTunnelDiscontinuityTimer.\r\n                   \"\r\n       ::= { teTunnelEntry 15 }", "correct_text": "[not submitted]", "notes": "The DESCRIPTION clauses of\r\n    -  teTunnelOctects and teTunnelLPOctects\r\n    -  teTunnelPackets and teTunnelLPPackets\r\nare pairwise identical, respectively.\r\n\r\nThere is no precise description of the precise meaning of\r\nthese  \"teTunnelLPxxx\"  objects.\r\nAdmittedly, one might guess from the SYNTAX clauses of these\r\nobjects that \"LP\" stands for 'lower part' -- meaning that the\r\nvalue of a \"teTunnelLPOctets\" object should always equal the\r\nvalue of the corresponding \"teTunnelOctets\" object MODULO 2^32\r\n(and similarly for the \"...Packets\" objects), but this is not\r\nstated in the text.\r\n\r\nFurthermore, unfortunately the naming of these objects does\r\nnot conform to the conventional naming style used in (almost)\r\nall IETF standards track MIB modules with High Capacity\r\ncounters, e. g.  \"xxxOctets\"  and  \"xxxHCOctets\" .\r\nThe above interpretation would be more manifest if this\r\nstandard naming convention would have been followed.\r\n\r\nNow, given that the naming of the objects cannot be changed\r\nany more, it would certainly be useful to have a textual\r\nclarification of these DESCRIPTIONs posted on the RFC Editor's\r\nRFC-Errata web page.\r\n\r\n[from pending]", "submit_date": "2005-02-25", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "joel jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "735", "doc-id": "RFC4591", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "   With L2TPv3 as the tunneling protocol, the packet resulted from the\r\n   encapsulation is N bytes longer than Frame Relay frame without the\r\n   opening and closing HDLC flags or FCS.  The value of N depends on the\r\n   following fields:\r\n\r\n", "correct_text": "  With L2TPv3 as the tunneling protocol, the packet resulting from the\r\n  encapsulation is N bytes longer than the Frame Relay frame without\r\n  the opening and closing HDLC flags or FCS.  The value of N depends on\r\n  the following fields:\r\n", "notes": "", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "736", "doc-id": "RFC4550", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "   [IMAP-DISC] Melnikov, A., \"Synchronization operations for\r\n               disconnected IMAP4 clients\", Work in Progress, October\r\n               2004.\r\n", "correct_text": "   [IMAP-DISC] Melnikov, A., Ed., \"Synchronization Operations for \r\n               Disconnected IMAP4 Clients\", RFC 4549, June 2006.\r\n\r\n\r\n", "notes": "This I-D has been published -- synchronized with RFC 4550 -- as RFC 4549. \r\n\r\nfrom pending", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "737", "doc-id": "RFC3816", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "1a)\r\n  Section 4.1.2., near the bottom of page 5, says:\r\n\r\n                                                  \"...  But when\r\n   accessing the rohcInstanceTable (and the rohcContextTable that shares\r\n   a part of its index with the rohcInstanceTable) there are many cases\r\n   where either a compressor contexts or a decompressor contexts are of\r\n   interest.  ...\"\r\n\r\n  It should say:\r\n\r\n                                                  \"...  But when\r\n   accessing the rohcInstanceTable (and the rohcContextTable that shares\r\n   a part of its index with the rohcInstanceTable) there are many cases\r\n|  where either a compressor context or a decompressor context are of\r\n   interest.  ...\"\r\n\r\n1b)\r\n  Section 4.3.1., near the bottom of page 8, says:\r\n\r\n                 \"...  For compressor contexts it optionally contains\r\n   managed object containing the numbers of allowed and used packet\r\n   sizes.  ...\"\r\n\r\n  It should say:\r\n\r\n                 \"...  For compressor contexts it optionally contains\r\n|  managed objects containing the numbers of allowed and used packet\r\n   sizes.  ...\"\r\n\r\n\r\n2) Textual issues in the ROHC-MIB definition\r\n\r\n2a)\r\n  The DESCRIPTION clause of the `RohcChannelIdentifierOrZero'\r\n  TEXTUAL-CONVENTION (near the bottom of page 10),\r\n\r\n         \"A number identifying a channel.\r\n          The value of 0 is indicates that\r\n          no channel is identified.\"\r\n\r\n   should be:\r\n\r\n         \"A number identifying a channel.\r\n|         The value of 0 indicates that\r\n          no channel is identified.\"\r\n\r\n2b)\r\n  The DESCRIPTION clause for `rohcChannelEntry' (extending from\r\n  the last 2 lines on page 11 to page 12) contains inappropriate\r\n  text -- obviously borrowed from the Script MIB (RFC 3165,\r\n  page 18, last 3 lines) and unintentionally left un-edited:\r\n\r\n     \"An entry describing a particular script.  Every script that\r\n      is stored in non-volatile memory is required to appear in\r\n      this script table.\r\n\r\n      Note ...\"\r\n\r\n  This should be replaced by appropriate text, e.g.,\r\n\r\n|    \"An entry describing a particular ROHC channel.\r\n\r\n      Note ...\"\r\n\r\n  [ Please add whatever you consider appropriate here! ]\r\n\r\n2c)\r\n  The DESCRIPTION clause for `rohcChannelFeedbackFor', on page 13,\r\n  seems to me to be not strict enough. Perhaps,\r\n\r\n      \"If no feedback information is transferred on this channel,\r\n       then the value of this ID is 0.  If the channel type is set\r\n       to notInUse(1), then the value of this object must be 0.\r\n       If the channel type is rohc(2) and the value of this object\r\n       is a valid channel ID, then feedback information is\r\n       piggy-backed on the ROHC channel.  If the channel type is\r\n\r\n  should be replaced by:\r\n\r\n      \"If no feedback information is transferred on this channel,\r\n       then the value of this ID is 0.  If the channel type is set\r\n       to notInUse(1), then the value of this object must be 0.\r\n       If the channel type is rohc(2) and the value of this object\r\n|      is non-zero, then feedback information for this channel is\r\n|      piggy-backed and/or interspersed on the same ROHC channel;\r\n|      hence the value of this object must be equal to the value\r\n|      of the indexing rohcChannelID.  If the channel type is\r\n       dedicatedFeedback(3), ...\"\r\n\r\n  [or similar].\r\n\r\n  Rationale:\r\n  As far as I understand RFC 3095 (Section 5.2.2 et al.),\r\n  it is not possible to intersperse or/and piggyback feedback\r\n  information of another channel on a ROHC channel carrying\r\n  payload packets.\r\n\r\n2d)\r\n  The DESCRIPTION clause for `rohcInstanceVendor', on page 15,\r\n  contains two issues. Its first sentence contains the word\r\n  \"description\" instead of \"compression\", and the second sentence\r\n  is subject to mis-interpretation due to unfortunate placement of\r\n  the words \"allocated for the vendor\".\r\n  I propose to change the text:\r\n\r\n      \"An object identifier that identifies the vendor who\r\n       provides the implementation of robust header description.\r\n       This object identifier SHALL point to the object identifier\r\n       directly below the enterprise object identifier\r\n       {1 3 6 1 4 1} allocated for the vendor. ...\r\n\r\n  to better read:\r\n\r\n      \"An object identifier that identifies the vendor who\r\n|      provides the implementation of robust header compression.\r\n       This object identifier SHALL point to the object identifier\r\n|      allocated for the vendor directly below the `enterprise'\r\n|      object identifier {1 3 6 1 4 1}. ...\r\n\r\n\r\n2e)\r\n  The DESCRIPTION clause for `rohcInstanceContextStorageTime',\r\n  on page 17, says:\r\n\r\n                      ... .  The value of this object is used\r\n     to initialize rohcContexStorageTime object when a new\r\n     context is created.\r\n     Changing ...\r\n\r\n  where it should better say:\r\n\r\n                      ... .  The value of this object is used\r\n|    to initialize the rohcContexStorageTime object when a new\r\n     context is created.\r\n     Changing ...\r\n\r\n2f)\r\n  To better distinguish the counters for payload (i. e. IP) packets\r\n  from the counters IR packets, I recommend to enhance the sentence:\r\n\r\n      \"Counter of all packets passing this instance.\"\r\n\r\n  to read:\r\n\r\n|     \"Counter of all IP packets passing this instance.\"\r\n\r\n  in the DESCRIPTION clauses of following two objects:\r\n\r\n  o   `rohcInstancePackets'       (page 18),\r\n  o   `rohcContextPackets'        (page 25).\r\n\r\n2g)\r\n  The DESCRIPTION clause for `rohcProfileVendor', on page 21,\r\n  contains the same two issues as the DESCRIPTION clause for\r\n  `rohcInstanceVendor'. Hence, the modification given above,\r\n  under 2d), should be applied here as well.\r\n\r\n2h)\r\n  The DESCRIPTION clause for `rohcProfileNegotiated', on page 21,\r\n  contains a small typo. It says:\r\n\r\n     \"When retrieved, this boolean object returns true\r\n      if the profile has been negotiated to be used at\r\n      the instance, i.e., is supported also be the\r\n      corresponding compressor/decompressor.\"\r\n\r\n  It should say:\r\n\r\n     \"When retrieved, this boolean object returns true\r\n      if the profile has been negotiated to be used at\r\n|     the instance, i.e., is supported also by the\r\n      corresponding compressor/decompressor.\"\r\n\r\n2i)\r\n  The DESCRIPTION clause for `rohcContextStorageTime', on page 24,\r\n  contains an improper self-reference. Therefore, replace the text:\r\n\r\n               ... .  This object returns  the remaining time\r\n      that the row may exist before it is aged out.  The object\r\n      is initialized with the value of the  associated\r\n      rohcContextStorageTime object.  After expiration ...\r\n\r\n  by:\r\n\r\n               ... .  This object returns the remaining time\r\n      that the row may exist before it is aged out.  The object\r\n      is initialized with the value of the associated\r\n|     rohcInstanceContextStorageTime object.  After expiration ...\r\n\r\n          ^^^^^^^^\r\n\r\n2j)\r\n  The DESCRIPTION clauses for `ContextAllPacketsMeanSize' and\r\n  `rohcContextAllHeadersMeanSize', on page 28, are concluded with\r\n  the sentence:\r\n\r\n      The mean value is given in byte rounded to the next\r\n      integer value.\"\r\n\r\n  This should be:\r\n\r\n      The mean value is given in bytes rounded to the next\r\n      integer value.\"\r\n\r\n  [ Note: I wished this RFC (and many other MIB RFCs, too) would\r\n    make frequent use of the UNITS clause specified in STD 58 ! ]\r\n\r\n\r\n3) Textual issues in the ROHC-RTP-MIB definition\r\n\r\n3a)\r\n  The DESCRIPTION clause for `rohcRtpContextNACKs', on page 42,\r\n  says:\r\n\r\n     \"The number of all dynamic negative feedbacks (ACK) sent\r\n      or received in this context, respectively.\r\n      ...\"\r\n\r\n  It should say:\r\n\r\n|    \"The number of all dynamic negative feedbacks (NACK) sent\r\n      or received in this context, respectively.\r\n      ...\"\r\n\r\n3b)\r\n  The DESCRIPTION clause for `rohcRtpContextSNACKs', on page 42,\r\n  says:\r\n\r\n     \"The number of all static negative feedbacks (ACK) sent\r\n      or received in this context, respectively.\r\n      ...\"\r\n\r\n  It should say:\r\n\r\n|    \"The number of all static negative feedbacks (STATIC-NACK)\r\n|     sent or received in this context, respectively.\r\n      ...\"", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2005-02-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "738", "doc-id": "RFC4595", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   [NIST.180-1.1995]\r\n              National Institute of Standards and Technology, \"Secure\r\n              Hash Standard\", NIST 180-1, April 1995.", "correct_text": "   [NIST.180-2.2002]\r\n              National Institute of Standards and Technology, \"Secure\r\n              Hash Standard\", NIST 180-2, August 2002.", "notes": "The current revision of the NIST's Secure Hash Standard is\r\n   \"FIPS-PUB 180-2 + Change Notice 1\",\r\nissued \"2004 Feb 25\", which has added SHA-224 to the repertoire.\r\n\r\nIf NIST publications are used as References in IETF publications,\r\ncurrent revisions should be used.\r\n\r\nIn the case of SHA-1, perhaps preferrably, RFC 3174 is available\r\nas a (secondary) dedicated reference that will not change.", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "745", "doc-id": "RFC4427", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "   At the egress node, the normal traffic is selected\r\n|  from either its working or one of the protection LSP/span.\r\n\r\n   Unprotected extra traffic can be transported over the M protection\r\n|  LSP/span whenever the protection LSPs/spans is not used to carry a\r\n   normal traffic.\r\n", "correct_text": "   At the egress node, the normal traffic is selected\r\n|  from either its working or one of the protection LSPs/spans.\r\n\r\n   Unprotected extra traffic can be transported over the M protection\r\n|  LSPs/spans whenever the protection LSPs/spans is not used to carry a\r\n   normal traffic.\r\n", "notes": "singular-->plural\r\n\r\nfrom pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dimitri Papadimitriou", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "747", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "The Description of SHA224_256ProcessMessageBlock, on top of page 42,\r\nsays:\r\n\r\n * Description:\r\n *   This function will process the next 512 bits of the message\r\n *   stored in the Message_Block array.\r\n\r\nConsistently with the remainder of the test, it should say:\r\n\r\n * Description:\r\n|*   This helper function will process the next 512 bits of the\r\n *   message stored in the Message_Block array.\r\n", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1061", "doc-id": "RFC4646", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "ASCCHAR    = %x21-25 / %x27-7E / UNICHAR ; Note: AMPERSAND is %x26\r\nUNICHAR    = \"&#x\" 2*6HEXDIG \";\"", "correct_text": "ASCCHAR    = %x21-25 / %x27-7E / UNICHAR ; Note: AMPERSAND is %x26\r\nUNICHAR    = %x26.23.78 2*6HEXDIG \";\"    ; starts with \"&#x\" ", "notes": "It has to be a lower case \"x\", i.e. %x78 in RFC 5234 ABNF.\r\n(All quoted strings in ABNF are case-insensitive.)", "submit_date": "2007-11-09", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1102", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 10. Per-interface (S,G) Assert State machine ...............84", "correct_text": "Figure 10. Per-interface (S,G) Assert State machine ............84-85", "notes": "Figure 1 occurs on pages 84-85, is listed as occurring on page 84.\n --VERIFIER NOTES-- \nList of figures is like a table of contents and only needs to point to the first page on which the figure can be found.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "739", "doc-id": "RFC4584", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "All instances of", "orig_text": "IPV6 and ICMPV6\r\n\r\nFor example, in section 5:\r\n\r\n   Legacy IPv6 applications/implementations using the Advanced Socket\r\n   API [1] mechanisms, upon receiving Home Address destination options\r\n   or Routing headers(Type 2), will discard the packet as per Sections\r\n   4.2 and 4.4 of IPV6 Protocol [3] specification, respectively;\r\n   otherwise, they should properly handle the Home Address destination\r\n   option and the Routing Header Type 2 specified in this document.", "correct_text": "IPv6 and ICMPv6\r\n\r\nFor example, should say (also incorporating other corrections):\r\n\r\n   Legacy IPv6 applications/implementations using the Advanced Socket\r\n   API [1] mechanisms, upon receiving Home Address destination options\r\n   or Routing headers (Type 2), will discard the packet as per Sections\r\n   4.2 and 4.4 of the IPv6 Protocol [3] specification, respectively;\r\n   otherwise, they should properly handle the Home Address destination\r\n   option and the Routing Header Type 2 specified in this document.\r\n", "notes": "unusual capitalization\r\n\r\nOther places affected are:\r\n  Section 5.1, 1st paragraph (page 17);\r\n  Section 5.3, 1st paragraph (page 19);\r\n  Section 6.1, 1st paragraph (page 21)\r\n\r\nfrom pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Samita Chakrabarti", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "740", "doc-id": "RFC4584", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "   Any user-level implementation or application that sends the Home\r\n   address destination option through ancillary data objects should\r\n   follow the order extension header defined in this document when using\r\n   IPV6_MIPDSTOPTS socket options.", "correct_text": "   Any user-level implementation or application that sends the Home\r\n   address destination option through ancillary data objects should\r\n|  follow the order of extension headers defined in this document when\r\n|  using the IPV6_MIPDSTOPTS socket options.", "notes": "from pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Samita Chakrabarti", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "741", "doc-id": "RFC4584", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   This specification recommends that the IPv6 RAW sockets mechanism\r\n   send and receive Mobility Header (MH) packets.  The behavior is\r\n|  similar to ICMPV6 processing, where the kernel passes a copy of the\r\n   mobility header packet to the receiving socket.  Depending on the\r\n   implementation, the kernel may process the mobility header in\r\n   addition to passing the mobility header to the application.  In order\r\n   to comply with the restriction in the Advanced Sockets API for IPv6\r\n   [1], applications should set the IPV6_CHECKSUM socket option with\r\n   IPPROTO_MH protocol RAW Sockets.  A Mobile IPv6 implementation that\r\n   supports the Mobile IPv6 API must implement Mobility Header API\r\n   checksum calculations by default at the kernel for both incoming and\r\n   outbound paths.  A Mobile IPv6 implementation must not return error\r\n   on the IPV6_CHECKSUM socket option setting, even if the socket option\r\n   is a NO-OP function for that implementation because it verifies the\r\n   checksum at the kernel level.  The Mobility Header checksum procedure\r\n   is described in the Mobile IPv6 Protocol [2] specification.  Again,\r\n   for application portability it is recommended that the applications\r\n   set the IPV6_CHECKSUM socket option along with the RAW sockets for\r\n   IPPROTO_MH protocol.", "correct_text": "   This specification recommends that the IPv6 RAW sockets mechanism\r\n   send and receive Mobility Header (MH) packets.  The behavior is\r\n|  similar to ICMPv6 processing; the kernel passes a copy of the\r\n   mobility header packet to the receiving socket.  Depending on the\r\n   implementation, the kernel may process the mobility header in\r\n   addition to passing the mobility header to the application.  In order\r\n   to comply with the restriction in the Advanced Sockets API for IPv6\r\n   [1], applications should set the IPV6_CHECKSUM socket option with\r\n   IPPROTO_MH protocol RAW Sockets.  A Mobile IPv6 implementation that\r\n   supports the Mobile IPv6 API must implement Mobility Header API\r\n|  checksum calculations by default in the kernel for both incoming and\r\n   outbound paths.  A Mobile IPv6 implementation must not return an\r\n   error on the IPV6_CHECKSUM socket option setting, even if the socket\r\n   option is a NO-OP function for that implementation because it\r\n   verifies the checksum at the kernel level.  The Mobility Header\r\n   checksum procedure is described in the Mobile IPv6 Protocol [2]\r\n   specification.  Again, for application portability it is recommended\r\n   that the applications set the IPV6_CHECKSUM socket option along with\r\n|  the RAW sockets for the IPPROTO_MH protocol.", "notes": "misleading wording\r\n\r\nfrom pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Samita Chakrabarti", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "742", "doc-id": "RFC4379", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1) [[posted separately.]]\r\n\r\n(2)  Section 3.3.1 -- formating error\r\n\r\nThe second encoding diagram on page 27,\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |0 0\r\n   0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 0 0 0 0 0| +-+-+-\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |0 1 0 1\r\n   0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1| +-+-+-+-+-\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |0 1 0 1 0 1\r\n   0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1| +-+-+-+-+-+-+-\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |0 1 0 1 0 1 0 1\r\n   0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1| +-+-+-+-+-+-+-+-+-\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |0 1 0 1 0 1 0 1 0 1\r\n   0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1| +-+-+-+-+-+-+-+-+-\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nshould say:\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 0 0 0 0 0 0 0|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1 0 1|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\n(3)  Section 4.4 -- word omission\r\n\r\nOn page 35, the RFC text contains the bullet:\r\n\r\n   Best-return-code:  contains the return code for the echo reply packet\r\n                      as currently best known.  As algorithm progresses,\r\n                      this code may change depending on the results of\r\n                      further checks that it performs.\r\n\r\nIt should say:\r\n\r\n   Best-return-code:  contains the return code for the echo reply packet\r\n|                     as currently best known.  As the algorithm\r\n                      progresses, this code may change depending on the\r\n                      results of further checks that it performs.\r\n\r\n\r\n(4)  Section 4.4 -- word omission in pseudo-code comment\r\n\r\nOn page 38, within the pseudocode comment, the RFC says:\r\n\r\n         [...]\r\n         may be greater than Label-stack-depth.  To be consistent with\r\n         the above stack-depths, the bottom is considered to entry 1.\r\n         */\r\n\r\nIt should say:\r\n\r\n         [...]\r\n         may be greater than Label-stack-depth.  To be consistent with\r\n|        the above stack-depths, the bottom is considered to be entry 1.\r\n         */\r\n\r\n\r\n(5)  Section 4.4 -- wrong internal section reference\r\n\r\nThe last paragraph of section 4.4 (Step 7.), on page 40, says:\r\n\r\n      Send an MPLS echo reply with a Return Code of Best-return-code,\r\n      and a Return Subcode of Best-rtn-subcode.  Include any TLVs\r\n      created during the above process.  The procedures for sending\r\n|     the echo reply are found in subsection 4.4.1.\r\n                                             ^^^^^\r\nIt should say:\r\n\r\n      Send an MPLS echo reply with a Return Code of Best-return-code,\r\n      and a Return Subcode of Best-rtn-subcode.  Include any TLVs\r\n      created during the above process.  The procedures for sending\r\n|     the echo reply are found in subsection 4.5.\r\n\r\n\r\n(6)  Section 5.1 -- outdated Normative Reference\r\n\r\nOn page 43, the tag  [NTP]  points to RFC 2030.\r\nAt the time of publication of RFC 4377, RFC 2030 already had been\r\nobsoleted by RFC 4330.\r\nTherefore, the text after  [NTP]  should be replaced by the\r\nrfc-ref.txt entry for RFC 4330.\r\n\r\n\r\n(7)  Section 6 -- typo\r\n\r\nAt the end of the second paragraph on page 4, the RFC says:\r\n\r\n                                    [...].  However, to provide a\r\n   stronger defense, an implementation MAY also validate the TimeStamp\r\n|  Sent by requiring and exact match on this field.\r\n                       ^\r\n\r\nIt should say:\r\n\r\n                                    [...].  However, to provide a\r\n   stronger defense, an implementation MAY also validate the TimeStamp\r\n|  Sent by requiring an exact match on this field.", "correct_text": "", "notes": "from pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "743", "doc-id": "RFC4427", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "   Failure notification phase is used 1) to inform intermediate nodes\r\n   that LSP(s)/span(s) failure has occurred and has been detected and 2)\r\n   to inform the recovery deciding entities (which can correspond to any\r\n   intermediate or end-point of the failed LSP/span) that the\r\n   corresponding LSP/span is not available.", "correct_text": "|  The failure notification phase is used 1) to inform intermediate\r\n   nodes that LSP(s)/span(s) failure has occurred and has been detected\r\n   and 2) to inform the recovery deciding entities (which can correspond\r\n   to any intermediate or end-point of the failed LSP/span) that the\r\n   corresponding LSP/span is not available.\r\n", "notes": "missing article\r\n\r\nfrom pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dimitri Papadimitriou", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "744", "doc-id": "RFC4302", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)\r\n\r\nRFC 4301, in section 13, \"Differences from RFC 2401\", in the\r\nsecond bulleted item (near the top of page 73) states:\r\n\r\n   o There is no longer a requirement to support nested SAs or \"SA\r\n     bundles\".  [...]\r\n\r\nAnd later on, on page 74:\r\n\r\n   o Support for AH in both IPv4 and IPv6 is no longer required.\r\n\r\nTherefore, the paragraph on page 10 of RFC 4302,\r\n\r\n   ESP and AH headers can be combined in a variety of modes.  The IPsec\r\n   Architecture document describes the combinations of security\r\n   associations that must be supported.\r\n                     ^^^^^^^^^^^^^^^^^\r\nentails more or less a \"NOPE\".  If something like the second\r\nsentence is still desired, it might better say, e.g.,\r\n\r\n   ESP and AH headers can be combined in a variety of modes.  The IPsec\r\n   Architecture document briefly describes the methods to configure\r\n   such combinations of security associations.\r\n\r\n\r\n(2)\r\n\r\nOn page 25, Appendix A1 presents a table classifying the IPv4 options.\r\nWithin that table, the second column is partially misaligned.\r\n\r\n\r\n(3)\r\n\r\nOn page 26, the table within Appendix A2 classifying the IPv6\r\nextension headers,\r\n\r\n       Option/Extension Name                  Reference\r\n       -----------------------------------    ---------\r\n       MUTABLE BUT PREDICTABLE -- included in ICV calculation\r\n         Routing (Type 0)                    [DH98]\r\n\r\n       BIT INDICATES IF OPTION IS MUTABLE (CHANGES UNPREDICTABLY DURING\r\n       TRANSIT)\r\n         Hop-by-Hop options                  [DH98]\r\n         Destination options                 [DH98]\r\n\r\n       NOT APPLICABLE\r\n         Fragmentation                       [DH98]\r\n\r\nperhaps would have better been formatted like:\r\n\r\n       Option/Extension Name                  Reference\r\n       -----------------------------------    ---------\r\n       MUTABLE BUT PREDICTABLE\r\n       -- included in ICV calculation\r\n         Routing (Type 0)                       [DH98]\r\n\r\n       BIT INDICATES IF OPTION IS MUTABLE\r\n       (CHANGES UNPREDICTABLY DURING TRANSIT)\r\n         Hop-by-Hop options                     [DH98]\r\n         Destination options                    [DH98]\r\n\r\n       NOT APPLICABLE\r\n         Fragmentation                          [DH98]\r\n\r\nto avoid the overlap of the columns.\r\n\r\n\r\n(4)\r\n\r\nIn Appendix B2.1, at one place on page 30, the variable\r\n\"seqh\" is mis-spelled as \"seqH\" (this is in the 6th-to-last\r\nline of Appendix B2.1).\r\n\r\n\r\n(5)\r\n\r\nAppendix B, as a whole, is a [near] duplicate of Appendix A of\r\nRFC 4303; the latter does not contain the typo from item (4)\r\nabove, and it contains extended and improved explanations in\r\nthe third subsection -- corresponding to page 32 of RFC 4302.\r\n\r\nReaders and potential implementors need to read both Appendices\r\njust to detect that they are in fact essentially the same spec.\r\n\r\nIMHO, it would have been better to avoid this re-specification,\r\nand instead have pointers to the (better, and mandatory!) ESP\r\nAppendix placed into the AH RFC.\r\nHaving a single specification always avoids disagreement or\r\ninconsistency, and it facilitates the maintenance of the spec.\r\n\r\n\r\n(6)\r\n\r\nFinally:\r\nI would have appreciated the introduction of an explicit version\r\nnumbering for AH, e.g. rename:\r\n      AH as per RFC 1826  to  AHv1,\r\n      AH as per RFC 2402  to  AHv2  or  AHv2.0,   and\r\n      AH as per RFC 4302  to  AHv3  or  AHv2.1\r\n(or similar).\r\n\r\nThis would make it easier to specify / identify versions and/or\r\nversion specific behaviour in implementations, without having\r\nto refer to the RFC numbers explicitely. (Similar numbering has\r\nproven very useful with protocols like BGP, SNMP, IMAP, POP, etc.)", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2006-03-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3722", "doc-id": "RFC2445", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.8.7.3", "orig_text": "Conformance: This property can be specified in the \"EVENT\", \"VTODO\",\r\n\"VJOURNAL\" or \"VTIMEZONE\" calendar components.", "correct_text": "Conformance: This property can be specified in the \"VEVENT\", \"VTODO\",\r\n\"VJOURNAL\" or \"VTIMEZONE\" calendar components.", "notes": "Verifier notes:\r\nI'm marking this \"hold for document update\", according to the IESG's policy on errata\r\nhandling... but note that this document has already been updated: it is obsoleted by\r\nRFC 5545, and this version (RFC 2445) should no longer be used.  (And this typo was\r\ncorrected in RFC 5545, I'm happy to say.)", "submit_date": "2013-09-11", "submitter_name": "Alfie John", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1103", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 11. Per-interface (*,G) Assert State machine ...............92", "correct_text": "Figure 11. Per-interface (*,G) Assert State machine ............92-93", "notes": "Figure 1 occurs on pages 92-93, is listed as occurring on page 92.\n --VERIFIER NOTES-- \nList of figures is like a table of contents and only needs to point to the first page on which the figure can be found.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2432", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "The initial Description in this file, on page 45, says:\r\n\r\n * Description:\r\n *   This file implements the Secure Hash Signature Standard\r\n *   algorithms as defined in the National Institute of Standards\r\n *   and Technology Federal Information Processing Standards\r\n *   Publication (FIPS PUB) 180-1 published on April 17, 1995, 180-2\r\n *   published on August 1, 2002, and the FIPS PUB 180-2 Change\r\n *   Notice published on February 28, 2004.\r\n\r\nIt should say:\r\n\r\n * Description:\r\n *   This file implements the Secure Hash Algorithms SHA-384 and\r\n *   SHA-512, as defined in the National Institute of Standards\r\n *   and Technology Federal Information Processing Standards\r\n *   Publication (FIPS PUB) 180-2 published on August 1, 2002, and\r\n *   the FIPS PUB 180-2 Change Notice published on February 28, 2004.\r\n\r\nRationale:\r\n\r\nFIPS-PUB 180-1 only specified SHA-1, neither SHA-384 nor SHA-512.\r\nFIPS-PUB 180-2 has introduced SHA-384 and SHA-512 (and SHA-256 as\r\nwell), and the \"Change Notice 1\" has introduced SHA-224.\r\nThus, citation of FIPS PUB 180-1 is void and inappropriate in the\r\ncontext of SHA-384 and SHA-512.\r\nAvoiding the term \"Signature\" also conforms to the above Standards\r\n-- cf. item (4), (5), and (12) above.\r\nRestricting the text to the scope of the file -- cf. item (5) and\r\n(12) above.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2436", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "Within the '#ifndef USE_32BIT_ONLY' macro definition branch of the\r\nfile, on mid-page 51 the RFC says:\r\n\r\n/*\r\n * add \"length\" to the length\r\n */\r\nstatic uint64_t addTemp;\r\n#define SHA384_512AddLength(context, length)                   \\\r\n   (addTemp = context->Length_Low, context->Corrupted =        \\\r\n    ((context->Length_Low += length) < addTemp) &&             \\\r\n    (++context->Length_High == 0) ? 1 : 0)\r\n\r\nIt should say:\r\n\r\n/*\r\n * add \"length\" to the length\r\n */\r\nstatic uint64_t addTemp;\r\n#define SHA384_512AddLength(context, length)                   \\\r\n   (addTemp = (context)->Length_Low, (context)->Corrupted =    \\\r\n    (((context)->Length_Low += length) < addTemp) &&           \\\r\n    (++(context)->Length_High == 0) ? shaInputTooLong : shaSuccess )\r\n\r\nRationale:\r\n\r\nSame as for item (7) and (14) above, cf. item (26) as well.\r\n\r\nAdditionally, parentheses have been added around all invocations of\r\nthe macro argument `context` to protect it against various artifacts,\r\nas has been done consistently in the remainder of the sample code.\r\n", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2438", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "Similar to item (9), (16), (17), and (22) above, the Description\r\nof SHA384Result contains improper wording and unpleasent formatting.\r\nAdditionally, counting 48 elements as ranging from the \"0th\" up to the\r\n\"48th\" is unpleasant and wrong -- indicating 49 elements (octets) !\r\n\r\nNear the bottom of page 53, the RFC says:\r\n\r\n * Description:\r\n *   This function will return the 384-bit message\r\n *   digest into the Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the 48th element.\r\n\r\nFor correctness and consistency, and for improved readability,\r\nit should say:\r\n\r\n * Description:\r\n *   This function will return the 384-bit message digest\r\n *   into the Message_Digest array provided by the caller.\r\n *   NOTE:\r\n *    The first octet of the hash is stored in the element with index 0,\r\n *    the last octet of the hash in the element with index 47.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2445", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.3", "orig_text": "On mid-page 75, the comment within the function hmacReset says:\r\n\r\n   * The HMAC transform looks like:\r\n   *\r\n   * SHA(K XOR opad, SHA(K XOR ipad, text))\r\n   *\r\n   * where K is an n byte key.\r\n   * ipad is the byte 0x36 repeated blocksize times\r\n   * opad is the byte 0x5c repeated blocksize times\r\n   * and text is the data being protected.\r\n\r\nIt should say:\r\n\r\n   * The HMAC transform looks like:\r\n   *\r\n   * SHA(K XOR opad, SHA(K XOR ipad, text))\r\n   *\r\n|  * where K is an n byte key, 0-padded to a total of blocksize bytes,\r\n|  * ipad is the byte 0x36 repeated blocksize times,\r\n|  * opad is the byte 0x5c repeated blocksize times,\r\n   * and text is the data being protected.\r\n\r\nRationale:\r\n\r\nWithout the addition, the 'XOR' operations in the formula are\r\nundefined.  Additionally, punctuation is made uniform.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2447", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.4", "orig_text": "The initial Description of the file, as presented on page 78,\r\ncontains in its first paragraph the lines:\r\n\r\n *      the seven tests documented for each algorithm in\r\n *        \"The Secure Hash Algorithm Validation System (SHAVS)\",\r\n *        three of which are bit-level tests\r\n *        (http://csrc.nist.gov/cryptval/shs/SHAVS.pdf)\r\n\r\nFor clarity, it should better say:\r\n\r\n *      the seven tests documented for each algorithm in\r\n|*        \"The Secure Hash Algorithm Validation System (SHAVS)\"\r\n|*        (http://csrc.nist.gov/cryptval/shs/SHAVS.pdf),\r\n|*        three of which are bit-level tests\r\n", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2449", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.4", "orig_text": "On mid-page 91, there is the comment:\r\n\r\n/*\r\n * Print the string, converting non-printable characters to hex \"## \".\r\n */\r\n\r\nIt should say:\r\n\r\n/*\r\n * Print the string, converting all characters to hex \"## \".\r\n */\r\n\r\nRationale:\r\n\r\nThere is a significant mismatch between the comment and the\r\nsubsequent code.\r\nThis is being resolved by the replacement text.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "892", "doc-id": "RFC2616", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "4.  If the message uses the media type \"multipart/byteranges\", and the\r\n     ransfer-length is not otherwise specified, then this self-\r\n     elimiting media type defines the transfer-length.", "correct_text": "4.  If the message uses the media type \"multipart/byteranges\", and the\r\n     transfer-length is not otherwise specified, then this self-\r\n     elimiting media type defines the transfer-length.\r\n", "notes": "", "submit_date": "2006-10-31", "submitter_name": "WooJin Chung", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "893", "doc-id": "RFC4698", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "If there are exact\r\nmatch networks in the set from (1), they both must appear in the\r\nresult set. ", "correct_text": "If there are exact\r\nmatch networks in the set from (1), they all must appear in the\r\nresult set. ", "notes": "from pending", "submit_date": "2006-11-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1104", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.6", "orig_text": "immediate_olist(*,G) =\r\n       joins(*,G) (+) pim_include(*,G) (-) lost_assert(*,G)\r\n", "correct_text": "immediate_olist(*,G) =\r\n       ( joins(*,G) (+) pim_include(*,G) ) (-) lost_assert(*,G)\r\n\r\n-or-\r\n\r\nimmediate_olist(*,G) =\r\n       joins(*,G) (+) ( pim_include(*,G) (-) lost_assert(*,G) )\r\n", "notes": "Left or right associativity is not established at the beginning of this document, so it is necessary to clarify which operation happens first: (+) or (-).", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2478", "doc-id": "RFC5938", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2 and 3.4", "orig_text": "a) [[ second-to-last para of Section 3.2: ]]\r\n\r\n   The Server MUST respond with one or more Start-N-Ack messages (which\r\n   SHOULD be sent as quickly as possible).  Start-N-Ack messages SHALL\r\n|  have the format defined in the next session.\r\n                                         ^^\r\n\r\nb) [[ last para of Section 3.4: ]]\r\n\r\n   The Server MUST respond with one or more Stop-N-Ack messages (which\r\n   SHOULD be sent as quickly as possible).  Stop-N-Ack messages SHALL\r\n|  have the format defined in the next session.\r\n                                         ^^", "correct_text": "a)\r\n\r\n   The Server MUST respond with one or more Start-N-Ack messages (which\r\n   SHOULD be sent as quickly as possible).  Start-N-Ack messages SHALL\r\n|  have the format defined in the next section.\r\n                                         ^^\r\n\r\nb)\r\n\r\n   The Server MUST respond with one or more Stop-N-Ack messages (which\r\n   SHOULD be sent as quickly as possible).  Stop-N-Ack messages SHALL\r\n|  have the format defined in the next section.\r\n                                         ^^", "notes": "Rationale: potentially confusing typo (iterated)!", "submit_date": "2010-08-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "748", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "Similar to item (9), (16), (17), (22), and (29) above, the Description\r\nof SHA512Result contains improper wording and unpleasent formatting.\r\nAdditionally, counting 64 elements as ranging from the \"0th\" up to the\r\n\"64th\" is unpleasant and wrong -- indicating 65 elements (octets) !\r\n\r\nNear the bottom of page 44, the RFC says:\r\n\r\n * Description:\r\n *   This function will return the 512-bit message\r\n *   digest into the Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the 64th element.\r\n\r\n\r\nFor correctness and consistency, and for improved readability,\r\nit should say:\r\n\r\n * Description:\r\n *   This function will return the 512-bit message digest\r\n *   into the Message_Digest array provided by the caller.\r\n *   NOTE:\r\n *    The first octet of the hash is stored in the element with index 0,\r\n *    the last octet of the hash in the element with index 63.\r\n\r\n", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2439", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "The Description of SHA384_512PadMessage, on page 58, says:\r\n\r\n * Description:\r\n *   According to the standard, the message must be padded to an\r\n *   even 1024 bits. The first padding bit must be a '1'. The\r\n *   last 128 bits represent the length of the original message.\r\n *   All bits in between should be 0. This helper function will\r\n *   pad the message according to those rules by filling the\r\n *   Message_Block array accordingly. When it returns, it can be\r\n *   assumed that the message digest has been computed.\r\n\r\nFor clarity, it should say (cf. items (10) and (19) above):\r\n\r\n * Description:\r\n|*   According to the standard, the message must be padded to the next\r\n|*   proper multiple of 1024 bits. The first padding bit must be a '1'.\r\n *   The last 128 bits represent the length of the original message.\r\n *   All bits in between should be 0. This helper function will\r\n *   pad the message according to those rules by filling the\r\n *   Message_Block array accordingly. When it returns, it can be\r\n *   assumed that the message digest has been computed.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2443", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.3", "orig_text": "The code for (the message oriented) function hmac,\r\non page 73/74, reads:\r\n\r\nint hmac(SHAversion whichSha, const unsigned char *text, int text_len,\r\n    const unsigned char *key, int key_len,\r\n    uint8_t digest[USHAMaxHashSize])\r\n<< page break >>\r\n{\r\n  HMACContext ctx;\r\n  return hmacReset(&ctx, whichSha, key, key_len) ||\r\n         hmacInput(&ctx, text, text_len) ||\r\n         hmacResult(&ctx, digest);\r\n}\r\n\r\nIt should say:\r\n\r\nint hmac(SHAversion whichSha,\r\n         const unsigned char *message_array, int length,\r\n         const unsigned char *key, int key_len,\r\n         uint8_t digest[USHAMaxHashSize])\r\n<< page break >>\r\n{\r\n  HMACContext ctx;\r\n  return hmacReset(&ctx, whichSha, key, key_len) ||\r\n         hmacInput(&ctx, message_array, length) ||\r\n         hmacResult(&ctx, digest);\r\n}\r\n\r\nRationale:\r\n\r\nThe argument names `message_array` and `length` are used\r\nthroughout the sample code, including the Description of the\r\nfunction hmac, on page 73.\r\nThe code shown above was not aligned with this practise and\r\nhence inconsistent with the Description.\r\nThis has been resolved by the proposed update, bay changing\r\nthe names of 'text' and 'text_len'.\r\n\r\n>>>>>  NOTE / Caution :\r\n>>>>>\r\n>>>>>  Similar (and additional) inconsistencies between the\r\n>>>>>  argument names in the 'Parameters:' documentation\r\n>>>>>  and the variable names used in the subsequent code\r\n>>>>>  exist for all hmac* functions, on pages 74..77 ;\r\n>>>>>  in particular, the described 'context' is always\r\n>>>>>  named `ctx` in the code.\r\n>>>>>  Also, capitalization of the leading \"HMAC\"/\"hmac\"\r\n>>>>>  in the function names is totally inconsistent.\r\n>>>>>\r\n>>>>>  Resolution of these issues is left as an exercise\r\n>>>>>  to the reader of this note -- or the author of any\r\n>>>>>  future update of the sample code.\r\n>>>>>\r\n>>>>>  Furthermore, the use of \"characters\" as units of the\r\n>>>>>  message_text in the descriptions is dangerous in the\r\n>>>>>  days of Unicode and UTF-8; \"characters\" should better\r\n>>>>>  be replaced by \"octets\" throughout hmac.c !\r\n", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2456", "doc-id": "RFC4322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.2", "orig_text": "Within the details of step 5, the text on page 38, lacks of a\r\nsub-step label.\r\nThe text,\r\n\r\n   (5J) DNS replies with public key of initiator.\r\n        Upon successfully authenticating the peer, the connection\r\n        instance makes a transition to authenticated OE peer on SG-B.\r\n        The format of the TXT record returned is described in\r\n        Section 5.2.\r\n        Responder replies with ID and authentication.\r\n        SG-B sends its ID along with authentication material, completing\r\n        the phase 1 negotiation.\r\n   (5L) IKE phase 2 negotiation.\r\n        [...]\r\n\r\nshould say:\r\n\r\n   (5J) DNS replies with public key of initiator.\r\n        Upon successfully authenticating the peer, the connection\r\n        instance makes a transition to authenticated OE peer on SG-B.\r\n        The format of the TXT record returned is described in\r\n        Section 5.2.\r\n|  (5K) Responder replies with ID and authentication.\r\n        SG-B sends its ID along with authentication material, completing\r\n        the phase 1 negotiation.\r\n   (5L) IKE phase 2 negotiation.\r\n        [...]", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2458", "doc-id": "RFC4322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.3", "orig_text": "The second paragraph of Section 12.3 (on page 41) says:\r\n\r\n   The design of ISAKMP/IKE, and its use of cookies, defend against many\r\n   kinds of denial of service.  [...]\r\n\r\nIt should say:\r\n                                                           v\r\n|  The design of ISAKMP/IKE, and its use of cookies, defends against\r\n   many kinds of denial of service.  [...]", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8627", "doc-id": "RFC1939", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "TOP msg n\r\n\r\n         Arguments:\r\n             a message-number (required) which may NOT refer to to a\r\n             message marked as deleted, and a non-negative number\r\n             of lines (required)", "correct_text": "TOP msg n\r\n\r\n         Arguments:\r\n             a message-number (required) which may NOT refer to a\r\n             message marked as deleted, and a non-negative number\r\n             of lines (required)", "notes": "Double consecutive appearance of word \"to\" in TOP arguments explanation.", "submit_date": "2025-11-05", "submitter_name": "Mikel Bernal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-11-05 21:13:51"}, {"errata_id": "2472", "doc-id": "RFC3315", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "17.2.2", "orig_text": "If the server will not assign any addresses to any IAs in a\r\nsubsequent Request from the client, the server MUST send an Advertise\r\nmessage to the client that includes only a Status Code option with\r\ncode NoAddrsAvail and a status message for the user, a Server\r\nIdentifier option with the server's DUID, and a Client Identifier\r\noption with the client's DUID.", "correct_text": "If the server will not assign any addresses to an IA in a\r\nsubsequent Request from the client, the server MUST send an Advertise\r\nmessage to the client that includes the IA containing a Status Code \r\noption with status code NoAddrsAvail and a status message for the \r\nuser, a Server Identifier option with the server's DUID, and a Client \r\nIdentifier option with the client's DUID. The server SHOULD include \r\nother stateful IA options (like IA_PD) and other configuration options \r\nin the Advertise message.", "notes": "", "submit_date": "2010-08-17", "submitter_name": "Ole Troan", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2473", "doc-id": "RFC5918", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3, last para", "orig_text": "   This document specifies one FEC Element Type instance (e.g., Prefix\r\n   FEC) for the 'Typed Wildcard FEC Element' in Section 6.\r\n", "correct_text": "   This document specifies one FEC Element Type instance (i.e., Prefix\r\n   FEC) for the 'Typed Wildcard FEC Element' in Section 6.\r\n", "notes": "Adjust the semantics:    s!e.g.!i.e.!", "submit_date": "2010-08-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2474", "doc-id": "RFC5918", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6, pg.7", "orig_text": "[[ below Figure 3: ]]\r\n\r\n      Len FEC Type Info: Two octets.  It MUST be set to 0x0002.\r\n", "correct_text": "      Len FEC Type Info: One octet.  It MUST be set to 0x02.\r\n", "notes": "The 'FEC Element Type' field is specified as a single octet in\r\nSection 3 (Figure 1 and subsequent field description on pg.4/5);\r\nFigure 3 also matches Figure 1.", "submit_date": "2010-08-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2475", "doc-id": "RFC5919", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3,1st para", "orig_text": "   When an LDP speaker receives a Label Request message for a Typed\r\n|  Wildcard FEC (e.g., a particular FEC Element Type) from a peer, the\r\n   LDP speaker determines the set of bindings (as per any local\r\n   filtering policy) to advertise to the peer for the FEC type specified\r\n   by the request.  [...]", "correct_text": "   When an LDP speaker receives a Label Request message for a Typed\r\n|  Wildcard FEC (i.e., a particular FEC Element Type) from a peer, the\r\n   LDP speaker determines the set of bindings (as per any local\r\n   filtering policy) to advertise to the peer for the FEC type specified\r\n   by the request.  [...]", "notes": "The parenthetical clause does not give an example, it gives\r\nan explanation; therefore, to avoid confusion,  s!e.g.!i.e.!\r\n\r\nNote: Same issue as addressed by EID=2473 for RFC 5918.", "submit_date": "2010-08-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2476", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.3.", "orig_text": "For instance, a value of -18 \r\ncorresponds to a precision of about one microsecond.", "correct_text": "For instance, a value of -20 \r\ncorresponds to a precision of about one microsecond.", "notes": "2**-20 = 0.954 usec\r\n2**-18 = 3.815 usec", "submit_date": "2010-08-19", "submitter_name": "Joerg Weilbier", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3583", "doc-id": "RFC5520", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.3", "orig_text": "The format of a PCReq message is as follows:\r\n\r\n   <PCReq Message>::= <Common Header>\r\n                      [<SVEC-list>]\r\n                      <request-list>\r\n\r\n   where:\r\n\r\n      <svec-list>::=<SVEC>[<svec-list>]\r\n      <request-list>::=<request>[<request-list>]\r\n", "correct_text": "The format of a PCReq message is as follows:\r\n\r\n   <PCReq Message>::= <Common Header>\r\n                      [<svec-list>]\r\n                      <request-list>\r\n\r\n   where:\r\n\r\n      <svec-list>::=<SVEC>[<svec-list>]\r\n      <request-list>::=<request>[<request-list>]\r\n", "notes": "The corrected text is as RFC5440 section 6.4, the editorial difference is <SVEC-list> in RFC5520 and in RFC5440 is <svec-list>.", "submit_date": "2013-04-07", "submitter_name": "Abdussalam Baryun", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "770", "doc-id": "RFC3376", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "If new query is Group and Source Specific query and there is pending \r\nresponse for this group and recorded source list for the group is empty \r\n(i.e. previous query was Group Specific query)", "correct_text": "[see note]", "notes": "In section 5.2 of RFC 3376, 5 sequential steps are given to handle the \r\nreceived query from the multicast router.\r\nI feel the following case is not handled properly in these steps (see above)\r\n\r\nIn this case, source list will be cleared as per step 4 of section 5.2. \r\nBut I feel the source list should be recorded to generate the report \r\naccordingly.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nThe RFC is correct in saying that recorded source-list should be cleared if the newly received query is group-specific query.", "submit_date": "2006-03-21", "submitter_name": "Rajesh Garg", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "771", "doc-id": "RFC4235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "direction=\"receiver\">", "correct_text": "direction=\"recipient\">", "notes": "Occurs on pages 28, 29 (2 times), and 30.\r\n\r\nThe proposed version of text is consistent with the rest of the document,\r\nincluding the schema in section 4.4.\r\n\r\nfrom pending", "submit_date": "2007-01-14", "submitter_name": "Nicolas-Peter Pohland", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "772", "doc-id": "RFC4048", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Section 4", "orig_text": "IANA Considerations, of RFC 4048 omitted to request IANA\r\nto release IPv6 option type code 11-0-00011 = 195 decimal, C3 hexadecimal.\r\n", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2005-07-28", "submitter_name": "Brian E Carpenter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "773", "doc-id": "RFC3588", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "AVP Format\r\n\r\n   <Vendor-Specific-Application-Id> ::=3D < AVP Header: 260 >\r\n                                     1* [ Vendor-Id ]\r\n                                     0*1{ Auth-Application-Id }\r\n                                     0*1{ Acct-Application-Id }", "correct_text": "", "notes": "for  1* [ Vendor-Id ], is it required or optional?=20\r\nIn my understanding, [ ] represent \"optional\", which means allowing none =\r\nof=20\r\nthis type AVP appear, but 1* means at least one needed, Is it =\r\ninconsistent?\r\nThe same problem for 0*1{ Auth-Application-Id } and  0*1{ =\r\nAcct-Application-Id }.\r\n\r\nCan it is be issued as RFC bug for RFC errata?\r\n\r\nfrom pending", "submit_date": "2006-04-13", "submitter_name": "Alan McNamee", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "774", "doc-id": "RFC4235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "<xs:attribute name=\"display-name\" type=\"xs:string\"", "correct_text": "<xs:attribute name=\"display\" type=\"xs:string\"", "notes": "The proposed version of text is consistent with the rest of the document,\r\nespecially with all examples and has been implemented by several\r\nmanufacturers this way.\r\n\r\nfrom pending", "submit_date": "2007-01-14", "submitter_name": "Nicolas-Peter Pohland", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1759", "doc-id": "RFC3611", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3", "orig_text": "\"recv-rtt\"", "correct_text": "\"rcvr-rtt\"", "notes": "Sec. 6.3 describes the SDP attribute in Sec. 5.1, but erroneously calls it \"recv-rtt\" whereas it is in fact \"rcvr-rtt\". The IANA, following Sec. 6.3, had recorded \"recv-rtt\" but has corrected this and now records \"rcvr-rtt\".", "submit_date": "2009-04-07", "submitter_name": "Timur Friedman", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2477", "doc-id": "RFC5935", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7, pg.11", "orig_text": "   In accordance with RFC 3688 [RFC3688], the IANA XML registry has been\r\n   updated with the following namespace and schema registrations\r\n   associated with this document:\r\n\r\n   o  urn:ietf:params:xml:ns:smi:base:1.0\r\n\r\n|  o  urn:ietf:params:xml:schema:base:1.0", "correct_text": "   In accordance with RFC 3688 [RFC3688], the IANA XML registry has been\r\n   updated with the following namespace and schema registrations\r\n   associated with this document:\r\n\r\n   o  urn:ietf:params:xml:ns:smi:base:1.0\r\n\r\n|  o  urn:ietf:params:xml:schema:smi:base:1.0\r\n", "notes": "Rationale: \"smi:\" component missing in schema registration;\r\n  Section 7.2 provides the correct URI.\r\n  The registry entry at IANA is correct as well.\r\n\r\nRemark:\r\n  Also, the ASCII transliteration of the last name of the submitter\r\n  of this note is misspelled in the last paragraph of Section 8.", "submit_date": "2010-08-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "749", "doc-id": "RFC2069", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4", "orig_text": "RfC 2069 (digest access authentication) chapter 2.4 is an example,\r\nthe userame is \"Mufasa\", the password is \"CircleOfLife\":\r\n\r\n| username=\"Mufasa\",\r\n| realm=\"testrealm@host.com\",\r\n| nonce=\"dcd98b7102dd2f0e8b11d0f600bfb0c093\",\r\n| uri=\"/dir/index.html\",\r\n| response=\"e966c932a9242554e42c8ee200cec7f6\",\r\n| opaque=\"5ccc069c403ebaf9f0171e9517f40e41\"\r\n\r\nThe \"respose\" is MD5( MD5( A1 ) || ':' || nonce || ':' || MD5( A2 ))\r\n\r\nMD5( A1 ) = MD5( username || ':' || realm || ':' || password )\r\n          = MD5( \"Mufasa:testrealm@host.com:CircleOfLife\" )\r\n          = \"4945ecf42b1bb868634058a845bedde8\"\r\n\r\nMD5( A2 ) = MD5( Method || ':' || digest-uri-value )\r\n          = MD5( \"GET:/dir/index.html\" )\r\n          = \"39aff3a2bab6126f332b942af96d3366\"\r\n\r\nThis results in a response = \"1949323746fe6a43ef61f9606e7febea\"\r\ninstead of the shown value = \"e966c932a9242554e42c8ee200cec7f6\".\r\n\r\nQuick reality check, the RFC 2617 example uses the same values\r\n    username = \"Mufasa\"\r\n    nonce    = \"dcd98b7102dd2f0e8b11d0f600bfb0c093\"\r\n    realm    = \"testrealm@host.com\"\r\n    A2       = \"GET:/dir/index.html\"\r\nwith a slightly different\r\n    password = \"Circle Of Life\"\r\nresulting in MD5( A1 ) = \"939e7578ed9e3c518a452acee763bce9\"\r\n\r\nThe \"respose\" is MD5( MD5( A1 ) || ':' || X || ':' || MD5( A2 ))\r\nfor X = \"dcd98b7102dd2f0e8b11d0f600bfb0c093:00000001:0a4f113b:auth\"\r\nand here the response = \"6629fae49393a05397450978507c4ef1\" works as\r\nexpected.", "correct_text": "[not submitted]", "notes": "I've tried to contact two of the RFC 2069 authors about this issue,\r\nbut got no reply.\r\n\r\nAlexey: note that this problem was addressed in RFC 2617.\r\n", "submit_date": "2005-02-06", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "750", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.4", "orig_text": "on mid-page 96, the code section,\r\n\r\n  if (bitcount > 0)\r\n    err = keyarray ? hmacFinalBits(&hmac, bits, bitcount) :\r\n                   USHAFinalBits(&sha, bits, bitcount);\r\n  if (err != shaSuccess) {\r\n    fprintf(stderr, \"hashfile(): %s Error %d.\\n\",\r\n            keyarray ? \"hmacResult\" : \"shaResult\", err);\r\n    if (hashfp != stdin) fclose(hashfp);\r\n    return err;\r\n  }\r\n\r\nshould in fact say:\r\n\r\n  if (bitcount > 0)\r\n    err = keyarray ? hmacFinalBits(&hmac, bits, bitcount) :\r\n                   USHAFinalBits(&sha, bits, bitcount);\r\n  if (err != shaSuccess) {\r\n    fprintf(stderr, \"hashfile(): %s Error %d.\\n\",\r\n            keyarray ? \"hmacFinalBits\" : \"shaFinalBits\", err);\r\n    if (hashfp != stdin) fclose(hashfp);\r\n    return err;\r\n  }\r\n\r\nRationale:\r\n\r\nSelf-evident; perhaps cloning error.\r\n", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2450", "doc-id": "RFC4322", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "The 2nd paragraph on page 3 says:\r\n\r\n                     [...].  A future document [IPSECKEY] will describe\r\n   a variation that complies with RFC 3445.  [...]\r\n\r\nThe reference  [IPSECKEY]  has been updated before publication of\r\nRFC 4322 to point to RFC 4025 (cf. the first entry in Section 14.2,\r\non page 42).  Hence this wording in not appropriate and inconsistent.\r\nThe text should say:\r\n                             vvvvvvvv                  vvv       v\r\n|                    [...].  Another document [IPSECKEY] describes\r\n   a variation that complies with RFC 3445.  [...]", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2451", "doc-id": "RFC4322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "The last paragraph of that section, on page 4, says:\r\n\r\n                                                            [...].  The\r\n   mechanism described here, however, does provides an additional way to\r\n   distribute the authentication materials; it is a public key method\r\n   that does not require deployment of an X.509 based infrastructure.\r\n\r\nIt should say:\r\n                                                 vvv\r\n                                                            [...].  The\r\n|  mechanism described here, however, does provide an additional way to\r\n   distribute the authentication materials; it is a public key method\r\n   that does not require deployment of an X.509 based infrastructure.", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2457", "doc-id": "RFC4322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.2", "orig_text": "The final paragraph of Section 11.2, on page 39, says:\r\n\r\n      SG-A sends the datagram saved at step (5) through the newly\r\n      created tunnel to SG-B, where it gets decrypted and forwarded.\r\n      Bob receives it at (7) and replies at (8).  SG-B already has a\r\n|     tunnel up with G1 and uses it.  [...]\r\n                     ^^\r\n\"G1\" is undefined; apparently, it should be \"SG-A\".\r\nHence, this snippit should say:\r\n\r\n      SG-A sends the datagram saved at step (5) through the newly\r\n      created tunnel to SG-B, where it gets decrypted and forwarded.\r\n      Bob receives it at (7) and replies at (8).  SG-B already has a\r\n|     tunnel up with SG-A and uses it.  [...]\r\n                     ^^^^", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2465", "doc-id": "RFC3627", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "   [ICMPv3]    Conta, A., Deering, S., \"Internet Control Message\r\n               Protocol (ICMPv6)\", Work in Progress.\r\n", "correct_text": "   [ICMPv6]    Conta, A., Deering, S., \"Internet Control Message\r\n               Protocol (ICMPv6)\", Work in Progress.\r\n", "notes": "Pointer to this reference should be fixed accordingly (i.e., s/ICMPv3/ICMPv6/ across the document)", "submit_date": "2010-08-15", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2466", "doc-id": "RFC4291", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2.2", "orig_text": "In order to make writing addresses containing zero\r\n      bits easier, a special syntax is available to compress the zeros.\r\n      The use of \"::\" indicates one or more groups of 16 bits of zeros.\r\n      The \"::\" can only appear once in an address.", "correct_text": "In order to make writing addresses containing zero\r\n      bits easier, a special syntax is available to compress the zeros.\r\n      The use of \"::\" indicates two or more groups of 16 bits of zeros.\r\n      The \"::\" can only appear once in an address.", "notes": " --VERIFIER NOTES-- \r\nBob Hinden evaluated this errata:\r\n\r\nI believe that this errata should be rejected.  This was discussed on the v6ops mailing list around February 25, 2011.  I responded: \r\n\r\n http://www.ietf.org/mail-archive/web/v6ops/current/msg07741.html\r\n\r\nThe thread starts at:\r\n\r\n http://www.ietf.org/mail-archive/web/v6ops/current/msg07722.html\r\n\r\nAlso, two errata were filed based on this one (Errata ID: 2735, Errata ID: 2702) that I think should also be rejected as they assume that this errata was correct.\r\n   ", "submit_date": "2010-08-16", "submitter_name": "Michael Rushton", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2467", "doc-id": "RFC5321", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1.3", "orig_text": "   IPv6-comp      = [IPv6-hex *5(\":\" IPv6-hex)] \"::\"\r\n                  [IPv6-hex *5(\":\" IPv6-hex)]\r\n                  ; The \"::\" represents at least 2 16-bit groups of\r\n                  ; zeros.  No more than 6 groups in addition to the\r\n                  ; \"::\" may be present.\r\n\r\n   IPv6v4-full    = IPv6-hex 5(\":\" IPv6-hex) \":\" IPv4-address-literal\r\n\r\n   IPv6v4-comp    = [IPv6-hex *3(\":\" IPv6-hex)] \"::\"\r\n                  [IPv6-hex *3(\":\" IPv6-hex) \":\"]\r\n                  IPv4-address-literal\r\n                  ; The \"::\" represents at least 2 16-bit groups of\r\n                  ; zeros.  No more than 4 groups in addition to the\r\n                  ; \"::\" and IPv4-address-literal may be present.", "correct_text": "   IPv6-comp      = [IPv6-hex *6(\":\" IPv6-hex)] \"::\"\r\n                  [IPv6-hex *6(\":\" IPv6-hex)]\r\n                  ; The \"::\" represents at least 1 16-bit groups of\r\n                  ; zeros.  No more than 7 groups in addition to the\r\n                  ; \"::\" may be present.\r\n\r\n   IPv6v4-full    = IPv6-hex 5(\":\" IPv6-hex) \":\" IPv4-address-literal\r\n\r\n   IPv6v4-comp    = [IPv6-hex *4(\":\" IPv6-hex)] \"::\"\r\n                  [IPv6-hex *4(\":\" IPv6-hex) \":\"]\r\n                  IPv4-address-literal\r\n                  ; The \"::\" represents at least 1 16-bit groups of\r\n                  ; zeros.  No more than 5 groups in addition to the\r\n                  ; \"::\" and IPv4-address-literal may be present.", "notes": "As per RFC 4291 and RFC 3986, \"::\" can represent a single 16-bit group of zeroes.\n --VERIFIER NOTES-- \nAs per RFC 5952:\r\n\r\n4.2.2.  Handling One 16-Bit 0 Field\r\n\r\n   The symbol \"::\" MUST NOT be used to shorten just one 16-bit 0 field.\r\n   For example, the representation 2001:db8:0:1:1:1:1:1 is correct, but\r\n   2001:db8::1:1:1:1:1 is not correct.", "submit_date": "2010-08-16", "submitter_name": "Michael Rushton", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2468", "doc-id": "RFC3633", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12.1 / 12.2", "orig_text": " Section 12.1:\r\n   Upon the receipt of a valid Reply message, for each IA_PD the\r\n   requesting router assigns a subnet from each of the delegated\r\n   prefixes to each of the links to which the associated interfaces are\r\n   attached, with the following exception: the requesting router MUST\r\n   NOT assign any delegated prefixes or subnets from the delegated\r\n   prefix(es) to the link through which it received the DHCP message\r\n   from the delegating router.", "correct_text": " Section 12.1:\r\n   Upon the receipt of a valid Reply message, for each IA_PD the\r\n   requesting router assigns a subnet from each of the delegated\r\n   prefixes to each of the links to which the associated interfaces are\r\n   attached.\r\n\r\nNew last paragraph of 12.2:\r\n  When the DR delegates prefixes to a Requesting Router, the\r\n  Requesting Router has sole authority for assignment of those\r\n  prefixes, and the Delegating Router MUST NOT assign any prefixes\r\n  from that delegated prefix to any of its own links.", "notes": "This change clarifies that the authority over the address space is delegated to the RR (Requesting Router). Moving the use restriction for the address space from the DR (Delegating Router) to the RR (Requesting Router).\r\n\r\n2011-08-02: Notes updated per request from Ole Troan and Leaf Yeh.", "submit_date": "2010-08-17", "submitter_name": "Ole Troan", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2469", "doc-id": "RFC3633", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.1", "orig_text": "The requesting router MUST ignore any Advertise message that includes\r\na Status Code option containing the value NoPrefixAvail, with the\r\nexception that the requesting router MAY display the associated\r\nstatus message to the user.", "correct_text": "The requesting router MUST ignore any IA_PDs in an Advertise message\r\nthat includes a Status Code option containing the value NoPrefixAvail, \r\nwith the exception that the requesting router MAY display the \r\nassociated status message to the user.", "notes": "", "submit_date": "2010-08-17", "submitter_name": "Ole Troan", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "806", "doc-id": "RFC3454", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "C. Prohibition tables\r\n\r\n   The tables in this appendix consist of lines with one prohibited code\r\n   point per line.  The format of the lines are the value of the code\r\n   point, a semicolon, and a comment which is the name of the code\r\n   point.", "correct_text": "[see Notes]", "notes": "This is not true as the tables in this appendix consist of lines with\r\none prohibited code point _range_ per line.  The format of the lines\r\nare the value of the starting code point of the range, a hyphen,\r\nthe value of the ending code point of the range, a semicolon,\r\nand a comment which is the informal name of the range in square brackets.\r\nIf the range contains only one code point, then the hyphen and the ending\r\ncode point value are omitted, and the comment contains the name of\r\nthe code point without brackets.\r\n\r\nfrom pending", "submit_date": "2006-04-27", "submitter_name": "Sergiusz Wolicki", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "807", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "[[Page 16, Hdsl2ShdslPerfCurrDayCount, second paragraph in the description]]\r\n\r\n       Hdsl2Shdsl1DayIntevalCount, and the current interval gauge", "correct_text": "       Hdsl2Shdsl1DayIntervalCount, and the current interval gauge", "notes": "from pending", "submit_date": "2007-01-07", "submitter_name": "Clay Sikes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "808", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "[[Page 17, Hdsl2ShdslPerfIntervalThreshold , description]]\r\n\r\n       a 15-minute interval numbers at most 900, objects of this", "correct_text": "       a 15-minute interval numbers is at most 900, objects of this", "notes": "from pending", "submit_date": "2007-01-07", "submitter_name": "Clay Sikes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "809", "doc-id": "RFC4567", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1) [[posted separately.]]\r\n \r\n(2)  inappropriate text (cut&paste error?)\r\n\r\nOn page 6, the explanation below the ABNF in Section 3.2 says:\r\n\r\n   where KMPID is as defined in Section 3 of this memo, \"base64\" as\r\n   defined in [SDPnew], and \"URI\" as defined in Section 3 of [RFC3986].\r\n\r\nIt should say:\r\n\r\n   where KMPID is as defined in Section 3 of this memo and \"URI\" as\r\n   defined in Section 3 of [RFC3986].\r\n\r\nRationale: \"base64\" does not appear in the ABNF of Section 3.2 !\r\n\r\n\r\n(3)  incomplete sentence\r\n\r\nThe first paragraph of Section 4.1.1, on page 8, says:\r\n\r\n   The processing when SDP is used is slightly different according to\r\n   the way SDP is transported, and if it uses an offer/answer or\r\n   announcement.  The processing can be divided into four different\r\n   steps:\r\n\r\nIt should say:\r\n\r\n   The processing when SDP is used is slightly different according to\r\n   the way SDP is transported, and if it uses an offer/answer or\r\n|  announcement model.  The processing can be divided into four\r\n   different steps:\r\n\r\n\r\n(4)  misleading word omission\r\n\r\nWithin Section 5.4, the explanation at top of page 21,\r\n\r\n   Each RTSP header is inserted in the SETUP related to the audio and\r\n   video separately:\r\n\r\nshould be clarified to say:\r\n\r\n|  A key management RTSP header is inserted in the SETUP related to the\r\n   audio and video separately:\r\n\r\n\r\n(5)  suspected inconsistency\r\n\r\nThe last paragraph of Section 7, on page 22, says:\r\n\r\n   The server will need to be able to know the identity of the client\r\n   before creating and sending a MIKEY message.  [...]\r\n\r\nIMHO, it is not clear how this fits with the text on page 14.\r\nPerhaps, a 3-way handshake with client auth in DESCRIBE could\r\nbe considered.\r\n\r\n\r\n(6)  inconsistency between ABNF and IANA registrations\r\n\r\nPerhaps, a late change to the ABNF in the body of the RFC has lead\r\nto inconsistencies in the filled out IANA registration templates\r\nas presented in Section 9.1 and 9.3; in particular, the hypothetical\r\nattribute name \"key-mgmt-att-field\" referred to in fact should be just\r\n\"key-mgmt\"; \"key-mgmt-att-field\" is the name of the ABNF production\r\nrule (introduced in  Section 3.1) for this literal; in the template\r\nthe literal name of the attribute is needed.\r\n\r\nTherefore:\r\n\r\nIn Section 9.1, near the bottom of page 25, change\r\n\r\n      SDP Attribute Field (\"att-field\"):\r\n\r\n        Name:               key-mgmt-att-field\r\n\r\nto say:\r\n\r\n      SDP Attribute Field (\"att-field\"):\r\n\r\n        Name:               key-mgmt\r\n\r\nand in Section 9.3, on page 26, change\r\n\r\n   Purpose:        Usage of MIKEY with the key-mgmt-att-field\r\n                    attribute and the keymgmt RTSP header\r\n\r\nto say:\r\n\r\n|  Purpose:        Usage of MIKEY with the key-mgmt SDP attribute\r\n                    and the keymgmt RTSP header\r\n\r\n[ I also have added \"SDP\" for additional clarification. ]\r\n\r\n\r\n(7)  missing articles\r\n\r\nThe first paragraph of the Abstract, on page 1 of RFC 4567, says:\r\n\r\n   This document defines general extensions for Session Description\r\n   Protocol (SDP) and Real Time Streaming Protocol (RTSP) to carry\r\n   messages, as specified by a key management protocol, in order to\r\n   secure the media.  [...]\r\n\r\nIt should say:\r\n\r\n|  This document defines general extensions for the Session Description\r\n|  Protocol (SDP) and the Real Time Streaming Protocol (RTSP) to carry\r\n   messages, as specified by a key management protocol, in order to\r\n   secure the media.  [...]\r\n\r\n\r\n(8)  missing article\r\n\r\nNear the top of page 7, the paragraph,\r\n\r\n   We define one new RTSP status code to report error due to any failure\r\n   during the key management processing (Section 4.2):\r\n\r\nshould say:\r\n\r\n|  We define one new RTSP status code to report an error due to any\r\n   failure during the key management processing (Section 4.2):\r\n\r\n\r\n(9)  missing article\r\n\r\nWithin Section 4.2, the last bullet on page 15 says:\r\n\r\n   * Key management responses for the initial establishment of security\r\n     parameters for an individual media SHALL only be included in SETUP\r\n     for the corresponding media stream.\r\n\r\nIt should say:\r\n\r\n   * Key management responses for the initial establishment of security\r\n|    parameters for an individual media SHALL only be included in the\r\n     SETUP for the corresponding media stream.\r\n\r\n\r\n(10)  typo (singular/plural mismatch)\r\n\r\nWithin Section 5.2, the explanation of the example, in the lower\r\nhalf of page 19,\r\n\r\n   The client checks the validity of the received MIKEY message, and, in\r\n   case of successful verification, it accept the message.  [...]\r\n\r\nshould say:\r\n\r\n   The client checks the validity of the received MIKEY message, and, in\r\n|  case of successful verification, it accepts the message.  [...]", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1259", "doc-id": "RFC5012", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8, pg.19", "orig_text": "   Ma14.  Resilience to mapping server failure:  The mapping protocol\r\n      MUST support a mechanism that enables the client to fail over to\r\n      different (replica) mapping server.\r\n", "correct_text": "   Ma14.  Resilience to mapping server failure:  The mapping protocol\r\n|     MUST support a mechanism that enables the client to fail over to a\r\n      different (replica) mapping server.\r\n", "notes": "insert missing \"a\"", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2470", "doc-id": "RFC3633", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.2", "orig_text": "If the delegating router will not assign any prefixes to any IA_PDs\r\nin a subsequent Request from the requesting router, the delegating\r\nrouter MUST send an Advertise message to the requesting router that\r\nincludes the IA_PD with no prefixes in the IA_PD and a Status Code\r\noption in the IA_PD containing status code NoPrefixAvail and a status\r\nmessage for the user, a Server Identifier option with the delegating\r\nrouter's DUID and a Client Identifier option with the requesting\r\nrouter's DUID.", "correct_text": "If the delegating router will not assign any prefixes to an IA_PD\r\nin a subsequent Request from the requesting router, the delegating\r\nrouter MUST send an Advertise message to the requesting router that\r\nincludes the IA_PD with no prefixes in the IA_PD and a Status Code\r\noption in the IA_PD containing status code NoPrefixAvail and a status\r\nmessage for the user, a Server Identifier option with the delegating\r\nrouter's DUID and a Client Identifier option with the requesting\r\nrouter's DUID. The server SHOULD include other stateful IA options\r\n(like IA_NA) and other configuration options in the Advertise message.", "notes": "Edited by Ralph Droms on 2010-08-20 to correct reference to IA_NA (was IA_PD) in last line.", "submit_date": "2010-08-17", "submitter_name": "Ole Troan", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "751", "doc-id": "RFC4009", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(A)\r\n>\r\n> Unfortunately, within a few lines in the RFC text, the variable name 'X'\r\n> gets used for two very distinct purposes and contexts:\r\n>\r\n>   o   X = X0 || X1 || X2 || X3                            (2)\r\n>       ... the 32 bit wide input to the function G\r\n>\r\n>   o   X used as formal argument in the defining equations for\r\n>       the 'SS-boxes' SS0 ... SS3\r\n>       ... a single octet (8 bit wide entity),\r\n>           [application of the formulas - see (3) below - will\r\n>            substitute X0, ..., X3 in turn for the arguments]\r\n>\r\n> Perhaps, it would have been better to use another symbol, e.g. 'x', for the\r\n> latter purpose.\r\n>\r\n>\r\n> (B)\r\n>\r\n> As far as I can see, feeding the definition of the SS-boxes given in the\r\n> last 4 text/formule lines on page 3 into the formula on top of page 4,\r\n>\r\n>      Z = SS0(X0) ^ SS1(X1) ^ SS2(X2) ^ SS3(X3)            (3)\r\n>\r\n> does ***NOT*** yield the same result as using the primary defining formulas\r\n> given for Z0  ... Z3  in the first formula block of section 2.2., together\r\n> with\r\n>\r\n>      Z = Z0 || Z1 || Z2 || Z3                             (1).\r\n>\r\n> I suspect a mis-ordering in the use of m0 ... m3 in the equations defining\r\n> SS0 ... SS3 :\r\n>\r\n> With regard to the formulas (1), (2), and (3) (as numbered above), the\r\n> 'matrix' pattern of the 4x4 terms in braces { ... } , obtained from the\r\n> formula block defining SS0 ... SS3 by substitution of Xi for the argument of\r\n> SSi (i=0,1,2,3) - as required in (3) -, should be the matrix transpose of\r\n> the pattern of the same terms in braces appearing in the formula block\r\n> defining Z0 ... Z3 , e. g. the first 'column' of {...} terms for SSi()\r\n> should contain the {...} terms appearing in the formula for Z0.\r\n> But this is not the case.\r\n>\r\n> Therefore, I suspect that the last 6 text/formula lines on page 3 of RFC\r\n> 4009 should in fact read (including the enhancement from (A)\r\n> above):\r\n>\r\n>   \"\r\n>   To increase the efficiency of the G function, four extended S-boxes\r\n>   'SS-box' (See Appendix A.2) are defined as follows:\r\n>\r\n>    SS0(x)= {S1(x) & m0} || {S1(x) & m1} || {S1(x) & m2} || {S1(x) & m3}\r\n>    SS1(x)= {S2(x) & m1} || {S2(x) & m2} || {S2(x) & m3} || {S2(x) & m0}\r\n>    SS2(x)= {S1(x) & m2} || {S1(x) & m3} || {S1(x) & m0} || {S1(x) & m1}\r\n>    SS3(x)= {S2(x) & m3} || {S2(x) & m0} || {S2(x) & m1} || {S2(x) & m2}\r\n>   \"\r\n>\r\n>\r\n\r\n> In this case, I also recommend to include a textual enhancement for the\r\n> first sentence of section 2.3., replacing:\r\n>\r\n>     \"The key schedule generates each round subkeys.\"\r\n> by:\r\n>     \"The key schedule generates subkeys for each round.\"\r\n>\r\n> And finally, for completeness, it would have been useful as well to give\r\n> additional Informational Reference(s) for the seedMAC (and the\r\n> [seed]CBC) algorithm(s)/construct(s) mentioned in section 2.5. - e.g.  RFC\r\n> 3610 (and RFC 2451 / NIST SP 800-38A) [?].", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2005-02-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "752", "doc-id": "RFC4009", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(C)\r\n\r\nFirst, a formal issue with the ASN.1 given in the RFC text:\r\n\r\nIn the ASN.1 definitions in section 2.5., it would perhaps be more\r\nnatural and consistent with the requirements from the text (and the\r\nASN.1 comment already present there!) to give an explicit SIZE\r\nrestriction in the definition of the syntax of the initialization\r\nvector for SEED in CBC mode (which indeed *MUST* be 16 octets long).\r\nTo this end, I recommend to replace the 7th text line of section 2.5.,\r\n\r\n  \"seedCDCParameter ::= OCTET STRING  -- 128-bit Initialization Vector\"\r\n\r\nby:\r\n\r\n| \"seedCDCParameter ::= OCTET STRING (SIZE(16))\r\n|                       -- 128-bit Initialization Vector\"\r\n\r\n\r\n(D)\r\n\r\nThe text in section 2.2. talks about two basic 8x8 S-boxes, named\r\n\"S1\" and \"S2\".  Contrary to that, Appendix A.1. (on page 7) gives\r\ntables for \"S-Box S0\" and \"S-Box S1\".\r\n\r\nIt would be easier to change the headlines in Appendix A.1.,\r\nbut, given the numbering style of all other formula elements,\r\nit is certainly be more appropriate and consistent to modify the\r\nequations in section 2.2., replacing \"S1\" by \"S0\", and \"S2\" by \"S1\".\r\n\r\nI'll give a full replacement text for section 2.2. below, covering\r\nthis issue as well.\r\n\r\n\r\n[ Now, returning to the open issue ... ]\r\n(B)\r\n\r\nIn short, sorry, I do NOT agree with your definition of the SS-boxes.\r\nIt does not conform with the primary definition of the function G.\r\n\r\nBelow, I'll give you a detailed step-by-step explanation, using a\r\nconcrete example, for the reasoning already presented in my first\r\nmail.\r\n\r\nNote: For brevity and due to the email line length restriction,\r\n  in the subsequent reasoning, I will omit the braces '{ ... }'\r\n  around the ANDed terms, making use of the usual precedence rule\r\n  for multiplication over addition and the facts that\r\n  - the '^' operation is the normal addition in the 8 / 32 dimensional\r\n    vector spaces over GF(2) we are working on,\r\n  - '&' representing the 8 / 32 fold tensor product of the scalar\r\n    multiplication over GF(2) .\r\n\r\nI repeat and extend the numeration of the formulas from my first\r\nemail, already applying item (D).\r\n\r\n   X = X0 || X1 || X2 || X3                                       (2)\r\n\r\n       ... the 32 bit wide input to the function G;\r\n\r\n   Z = Z0 || Z1 || Z2 || Z3                                       (1)\r\n\r\n       ... the 32 bit wide output of the function G applied to X;\r\n           with the 8-bit wide components computed by the application\r\n           of the two S-Boxes S0 and S1 via the equations:\r\n\r\n   Z0 = S0(X0) & m0 ^ S1(X1) & m1 ^ S0(X2) & m2 ^ S1(X3) & m3     (1.0)\r\n   Z1 = S0(X0) & m1 ^ S1(X1) & m2 ^ S0(X2) & m3 ^ S1(X3) & m0     (1.1)\r\n   Z2 = S0(X0) & m2 ^ S1(X1) & m3 ^ S0(X2) & m0 ^ S1(X3) & m1     (1.2)\r\n   Z3 = S0(X0) & m3 ^ S1(X1) & m0 ^ S0(X2) & m1 ^ S1(X3) & m2     (1.3)\r\n\r\n    with    m0 = 0xFC , m1 = 0xF3 , m2 = 0xCF , and m3 = 0x3F     (1.4)\r\n\r\n\r\nThe alternate description of the Function G is to be\r\n\r\n   Z = SS0(X0) ^ SS1(X1) ^ SS2(X2) ^ SS3(X3)                      (3)\r\n\r\nwhere, below, I'll try \"my\" version of the SS-Box definition ...\r\n\r\n   SS0(x) = S0(x) & m0 || S0(x) & m1 || S0(x) & m2 || S0(x) & m3  (4.0)\r\n   SS1(x) = S1(x) & m1 || S1(x) & m2 || S1(x) & m3 || S1(x) & m0  (4.1)\r\n   SS2(x) = S0(x) & m2 || S0(x) & m3 || S0(x) & m0 || S0(x) & m1  (4.2)\r\n   SS3(x) = S1(x) & m3 || S1(x) & m0 || S1(x) & m1 || S1(x) & m2  (4.3)\r\n\r\n... and the version from the text (with the formal changes already\r\n    discussed properly applied) ...\r\n\r\n   SS0(x) = S0(x) & m3 || S0(x) & m2 || S0(x) & m1 || S0(x) & m0  (5.0)\r\n   SS1(x) = S1(x) & m0 || S1(x) & m3 || S1(x) & m2 || S1(x) & m1  (5.1)\r\n   SS2(x) = S0(x) & m1 || S0(x) & m0 || S0(x) & m3 || S0(x) & m2  (5.2)\r\n   SS3(x) = S1(x) & m2 || S1(x) & m1 || S1(x) & m0 || S1(x) & m3  (5.3)\r\n\r\n\r\nWith these notations, let's challenge the example octet sequence\r\n\r\n   X0 = 0x09 , X1 = 0x11 , X2 = 0xE1 , X3 = 0xF9                  (6a)\r\n\r\ni.e., by (2) :      X = (0x) 09 11 E1 F9                          (6b)\r\n\r\nApplying the tables from Appendix A.1., we obtain  (*)  :\r\n\r\n   S0(X0) = 0x43 ,\r\n   S1(X1) = 0x62 ,\r\n   S0(X2) = 0xB9 ,\r\n   S1(X3) = 0x4C .\r\n\r\n\r\nTo first compute Z with the original definition of G, substituting\r\n(*) and (1.4) into (1.0) .. (1.3), we obtain, step by step:\r\n\r\n   Z0 = S0(X0) & m0 ^ S1(X1) & m1 ^ S0(X2) & m2 ^ S1(X3) & m3     (1.0)\r\n      = 0x43 & 0xFC ^ 0x62 & 0xF3 ^ 0xB9 & 0xCF ^ 0x4C & 0x3F\r\n      =     0x40    ^     0x62    ^     0x89    ^     0x0C\r\n==>\r\n   Z0 = 0xA7                                                      (7.0)\r\n\r\n   Z1 = S0(X0) & m1 ^ S1(X1) & m2 ^ S0(X2) & m3 ^ S1(X3) & m0     (1.1)\r\n      = 0x43 & 0xF3 ^ 0x62 & 0xCF ^ 0xB9 & 0x3F ^ 0x4C & 0xFC\r\n      =     0x43    ^     0x42    ^     0x39    ^     0x4C\r\n==>\r\n   Z1 = 0x74                                                      (7.1)\r\n\r\n   Z2 = S0(X0) & m2 ^ S1(X1) & m3 ^ S0(X2) & m0 ^ S1(X3) & m1     (1.2)\r\n      = 0x43 & 0xCF ^ 0x62 & 0x3F ^ 0xB9 & 0xFC ^ 0x4C & 0xF3\r\n      =     0x43    ^     0x22    ^     0xB8    ^     0x40\r\n==>\r\n   Z2 = 0x99                                                      (7.2)\r\n\r\n   Z3 = S0(X0) & m3 ^ S1(X1) & m0 ^ S0(X2) & m1 ^ S1(X3) & m2     (1.3)\r\n      = 0x43 & 0x3F ^ 0x62 & 0xFC ^ 0xB9 & 0xF3 ^ 0x4C & 0xCF\r\n      =     0x03    ^     0x60    ^     0xB1    ^     0x4C\r\n==>\r\n   Z3 = 0x9E                                                      (7.3)\r\n\r\nPutting (7.0) .. (7.3) together using (1), we get the byte sequence\r\n\r\n   Z = Z0 || Z1 || Z2 || Z3                                       (1)\r\n==>\r\n   Z = (0x) A7 74 99 9E                                           (7)\r\n\r\n\r\nNow let's see what happens when we apply \"my\" definition of the\r\nSS-Boxes, substituting (6a), (*), and (1.4) into (4.0) .. (4.3) :\r\n\r\n   SS0(X0) = S0(X0) & m0 || S0(X0) & m1 || S0(X0) & m2 || S0(X0) & m3\r\n           = 0x43 & 0xFC || 0x43 & 0xF3 || 0x43 & 0xCF || 0x43 & 0x3F\r\n           =     0x40    ||     0x43    ||     0x43    ||     0x03\r\n==>\r\n   SS0(X0) = (0x) 40 43 43 03                                     (8.0)\r\n\r\n   SS1(X1) = S1(X1) & m1 || S1(X1) & m2 || S1(X1) & m3 || S1(X1) & m0\r\n           = 0x62 & 0xF3 || 0x62 & 0xCF || 0x62 & 0x3F || 0x62 & 0xFC\r\n           =     0x62    ||     0x42    ||     0x22    ||     0x60\r\n==>\r\n   SS1(X1) = (0x) 62 42 22 60                                     (8.1)\r\n\r\n   SS2(X2) = S0(X2) & m2 || S0(X2) & m3 || S0(X2) & m0 || S0(X2) & m1\r\n           = 0xB9 & 0xCF || 0xB9 & 0x3F || 0xB9 & 0xFC || 0xB9 & 0xF3\r\n           =     0x89    ||     0x39    ||     0xB8    ||     0xB1\r\n==>\r\n   SS2(X2) = (0x) 89 39 B8 B1                                     (8.2)\r\n\r\n   SS3(X3) = S1(X3) & m3 || S1(X3) & m0 || S1(X3) & m1 || S1(X3) & m2\r\n           = 0x4C & 0x3F || 0x4C & 0xFC || 0x4C & 0xF3 || 0x4C & 0xCF\r\n           =     0x0C    ||     0x4C    ||     0x40    ||     0x4C\r\n==>\r\n   SS3(X3) = (0x) 0C 4C 40 4C                                     (8.3)\r\n\r\nNote: Please observe that the terms in (8.0) .. (8.3) are indeed\r\n  the same terms as in (7.0) .. (7.3), but in 4x4 matrix transposed\r\n  order -- as stated abstractly in my first email.\r\n\r\nSumming up (8.0) .. (8.3) according to (3), we get what should be\r\nthe alternate definition of G(X) :\r\n\r\n   Z = SS0(X0) ^ SS1(X1) ^ SS2(X2) ^ SS3(X3)                      (3)\r\n     = (0x) 40 43 43 03  ^                         --  from (8.0)\r\n       (0x) 62 42 22 60  ^                         --  from (8.1)\r\n       (0x) 89 39 B8 B1  ^                         --  from (8.2)\r\n       (0x) 0C 4C 40 4C                            --  from (8.3)\r\n==>         -----------\r\n   Z = (0x) A7 74 99 9E                                           (8)\r\n\r\nObviously, (8) indeed is identical to (7).\r\n\r\n\r\nFinally, let's look for what we get with your definition of the\r\nSS-Boxes, substituting (6a), (*), and (1.4) into (5.0) .. (5.3) :\r\n\r\n   SS0(X0) = S0(X0) & m3 || S0(X0) & m2 || S0(X0) & m1 || S0(X0) & m0\r\n           = 0x43 & 0x3F || 0x43 & 0xCF || 0x43 & 0xF3 || 0x43 & 0xFC\r\n           =     0x03    ||     0x43    ||     0x43    ||     0x40\r\n==>\r\n   SS0(X0) = (0x) 03 43 43 40                                     (9.0)\r\n\r\n   SS1(X1) = S1(X1) & m0 || S1(X1) & m3 || S1(X1) & m2 || S1(X1) & m1\r\n           = 0x62 & 0xFC || 0x62 & 0x3F || 0x62 & 0xCF || 0x62 & 0xF3\r\n           =     0x60    ||     0x22    ||     0x42    ||     0x62\r\n==>\r\n   SS1(X1) = (0x) 60 22 42 62                                     (9.1)\r\n\r\n   SS2(X2) = S0(X2) & m1 || S0(X2) & m0 || S0(X2) & m3 || S0(X2) & m2\r\n           = 0xB9 & 0xF3 || 0xB9 & 0xFC || 0xB9 & 0x3F || 0xB9 & 0xCF\r\n           =     0xB1    ||     0xB8    ||     0x39    ||     0x89\r\n==>\r\n   SS2(X2) = (0x) B1 B8 39 89                                     (9.2)\r\n\r\n   SS3(X3) = S1(X3) & m2 || S1(X3) & m1 || S1(X3) & m0 || S1(X3) & m3\r\n           = 0x4C & 0xCF || 0x4C & 0xF3 || 0x4C & 0xFC || 0x4C & 0x3F\r\n           =     0x4C    ||     0x40    ||     0x4C    ||     0x0C\r\n==>\r\n   SS3(X3) = (0x) 4C 40 4C 0C                                     (8.3)\r\n\r\nSumming up (9.0) .. (9.3) according to (3), we get\r\n\r\n   Z = SS0(X0) ^ SS1(X1) ^ SS2(X2) ^ SS3(X3)                      (3)\r\n     = (0x) 03 43 43 40  ^                         --  from (9.0)\r\n       (0x) 60 22 42 62  ^                         --  from (9.1)\r\n       (0x) B1 B8 39 89  ^                         --  from (9.2)\r\n       (0x) 4C 40 4C 0C                            --  from (9.3)\r\n==>         -----------\r\n   Z = (0x) 9E 99 74 A7                                           (9)\r\n\r\nThis is NOT the same as (7).\r\n\r\n\r\nIn fact, it is the byte-reversed sequence from (7) .\r\n\r\n-- Bingo!\r\nTaking a closer look at (5.0) .. (5.3), I now see that indeed the\r\nterms in these equations are in the reverse concatenation sequence\r\ncompared to (4.0) .. (4.3) !\r\n\r\nAfter a detailed inspection of the tables given in Appendix A.2.\r\nof RFC 4009, it now becomes clear that -- disregarding the IETF\r\nconventions to represent all binary data in network byte order,\r\nand without any further notice of this fact -- these tables do NOT\r\nrepresent octect sequences (as expected from the presentation of\r\nabove formula using octet concatenation, not arithmetic left-shift\r\nor multiply-by-256 operations), BUT the hexadecimal representation\r\nof the proper 4-octet sequences improperly cast into 32 bit numbers\r\non a 'little endian' processor, i.e., without using the ntohl()\r\nintrinsic!\r\n\r\nI suspect that your definition of the SS-boxes (5.0) .. (5.3) has\r\nbeen inadvertently retrofitted to match the values given in the\r\ntables in Appendix A.2., again re-formulating the printed byte\r\norder (which is NOT the storage byte order [= octet concatenation\r\norder] in a little endian processor) using the octet concatenation\r\nnotation / formalism.\r\n\r\nBecause definition of the function G according to section 2.2. does\r\nnot make use of 32-bit integer arithmetic operations, I recommend\r\nto clarify the situation by\r\no   giving formula (4.0) .. (4.3) for the SS-Boxes, consistent\r\n    with the other formulas, and\r\no   stating explicitely in Appendix A.2. that these tables give\r\n    byte reversed presentations of the octet sequences to be\r\n    used as the output of the SS-boxes.\r\n\r\n\r\nTo catch up, here's my proposed replacement text for the whole\r\nsection 2.2. of RFC 4009, covering the issues (A), (B), and (D)\r\nmentioned so far:\r\n\r\n---------------- cut here -------------------------------\r\n\r\n2.2.  The Function G\r\n\r\n   The function G has two layers: a layer of two 8x8 S-boxes, S0 and\r\n   S1, and a layer of block permutation of sixteen 8-bit sub-blocks.\r\n   The output octet sequence Z (= Z0 || Z1 || Z2 || Z3) of the\r\n   function G with the four-octet input X (= X0 || X1 || X2 || X3)\r\n   is as follows:\r\n\r\n    Z0 = {S0(X0) & m0} ^ {S1(X1) & m1} ^ {S0(X2) & m2} ^ {S1(X3) & m3}\r\n    Z1 = {S0(X0) & m1} ^ {S1(X1) & m2} ^ {S0(X2) & m3} ^ {S1(X3) & m0}\r\n    Z2 = {S0(X0) & m2} ^ {S1(X1) & m3} ^ {S0(X2) & m0} ^ {S1(X3) & m1}\r\n    Z3 = {S0(X0) & m3} ^ {S1(X1) & m0} ^ {S0(X2) & m1} ^ {S1(X3) & m2}\r\n\r\n   where  m0 = 0xFC , m1 = 0xF3 , m2 = 0xCF , and m3 = 0x3F .\r\n\r\n   To increase the efficiency of the calculation of the function G, four\r\n   extended S-boxes with 4-octet output ('SS-boxes', see Appendix A.2.)\r\n   are defined as follows:\r\n\r\n    SS0(x) = {S0(x) & m0} || {S0(x) & m1} || {S0(x) & m2} || {S0(x) & m3}\r\n    SS1(x) = {S1(x) & m1} || {S1(x) & m2} || {S1(x) & m3} || {S1(x) & m0}\r\n    SS2(x) = {S0(x) & m2} || {S0(x) & m3} || {S0(x) & m0} || {S0(x) & m1}\r\n    SS3(x) = {S1(x) & m3} || {S1(x) & m0} || {S1(x) & m1} || {S1(x) & m2}\r\n\r\n   Hereby, the function G can be defined as follows:\r\n\r\n      Z = G(X) = SS0(X0) ^ SS1(X1) ^ SS2(X2) ^ SS3(X3)  .\r\n\r\n   This alternate definition of the function G is faster than the\r\n   original definition but it takes 16 times the memory to store\r\n   the four SS-boxes compared to the two original S-boxes.\r\n\r\n---------------- cut here -------------------------------\r\n\r\n\r\nImmediately below the headline of Appendix A.2., on page 8,\r\nI propose to insert the following text (or similar):\r\n\r\n   \"The following tables specify the byte-reversed SS-box values,\r\n    i.e., the first octet to be returned from the function G\r\n    (named Z0 in section 2.2.), is obtained by XORing together\r\n    the rightmost bytes from the appropriate entries looked up\r\n    in the following four tables, etc.\"\r\n\r\n\r\n(E)\r\n\r\nThe above discussion, and the observed deviation from the IETF\r\nstandard ('network') byte ordering convention, immediately raises\r\nadditional byte ordering concerns for\r\n-  the definition of the round function F in section 2.1., and\r\n-  the Key Schedule definition given in section 2.3.\r\n\r\nThe function G -- as defined in section 2.2. -- operates on a four-\r\noctet sequence and returns a four-octet sequence, according to the\r\nformulae labelled (1) and (2) above.\r\n\r\nThe definition of the round function F and the key schedule make use of\r\nseveral multi-byte INTEGER arithmetic operations, in particular 32-bit\r\n(mod 2^32) addition and subtraction, on input and output values of the\r\nfunction G, and the key schedule uses circular shift operations on\r\nconcatenated (64 bit) intermediate key blocks.\r\n\r\nWith regard to the observations made above, I now suspect that some\r\nof the implicit 'cast' operations (between octet sequences and multi-\r\nbyte integers) involved in the round functions and the key schedule\r\nmight also be formulated in a little-endian centric way, omitting the\r\nnecessary application of the htonl() and ntohl() intrinsics when\r\nproducing the test cases in Appendix B.  (I did not have the time\r\nto verify that.)\r\n\r\nFor the sake of interoperability, it SHOULD be clarified whether the\r\nformulae given for R0' and R1' in section 2.1., and for Ki0 and Ki1\r\nin section 2.3., as well as the constant's values tabulated in the\r\nlatter section, are specified according to IEFT standard byte ordering\r\nrules, or with implicit little-endian byte order in mind.\r\n\r\n", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2005-02-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "810", "doc-id": "RFC4237", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "I suspect that the OID value given in Section 2 is not correct.\r\nIt does not match the one listed in section 4.2, on page 10,\r\n4th text line.\r\n\r\nTherefore I propose the following erratum:\r\n\r\nRFC 4237, at the beginning of Section 2, on page 3, says:\r\n\r\n   (IANA-ASSIGNED-OID.1 NAME 'vPIMUser'\r\n           SUP 'top'\r\n           ...          )\r\n\r\nit should say:\r\n                       vv\r\n   (IANA-ASSIGNED-OID.1.1 NAME 'vPIMUser'\r\n           SUP 'top'\r\n           ...          )", "correct_text": "[see above]", "notes": "from pending\n --VERIFIER NOTES-- \nDuplicate of the erratum # 157.\r\n", "submit_date": "2005-11-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "811", "doc-id": "RFC4640", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n(1)  typo/grammar\r\n\r\nOn page 3 of RFC 4640, the seconf paragraph of Section 1.2 says:\r\n\r\n   Typically, bootstrapping happens when a mobile node does not have all\r\n   the information it needs to set up the Mobile IPv6 service.  This\r\n   includes, but is not limited to, situations in which the mobile node\r\n   does not having any information when it boots up for the first time\r\n   (out of the box), or does not retain any information during reboots.\r\n\r\nIt should say:\r\n\r\n   Typically, bootstrapping happens when a mobile node does not have all\r\n   the information it needs to set up the Mobile IPv6 service.  This\r\n   includes, but is not limited to, situations in which the mobile node\r\n|  does not have any information when it boots up for the first time\r\n   (out of the box), or does not retain any information during reboots.\r\n\r\n\r\n(2)  missing line break\r\n\r\nNear the end of Section 1.3, on page 5, there should be an additional\r\nblank line above the term \"Home Mobility Service Provider\".\r\n\r\n\r\n(3)  typo\r\n\r\nOn page 6, the last sub-bullet of the first bulleted list in Section 3\r\nsays:\r\n\r\n      *  IPsec Security Association (SA) between MN and HA, Intenet Key\r\n         Exchange Protocol (IKE) pre-shared secret between MN and HA\r\n\r\nIt should say:\r\n                                                                v\r\n|     *  IPsec Security Association (SA) between MN and HA, Internet Key\r\n         Exchange Protocol (IKE) pre-shared secret between MN and HA\r\n\r\n\r\n(4)  grammar (singluar/plural mismatch)\r\n\r\nThe first sentence of Section 5.1.3, on page 9, says:\r\n                                                      vv\r\n|  The home agent discovery protocol does not support an \"opportunistic\"\r\n|  or local discovery mechanisms in an ASP's local access network.  [..]\r\n                               ^\r\nIt either should say:\r\n\r\n   The home agent discovery protocol does not support an \"opportunistic\"\r\n|  or local discovery mechanism in an ASP's local access network.  [..]\r\n\r\nor it should say:\r\n\r\n|  The home agent discovery protocol does not support \"opportunistic\" or\r\n   local discovery mechanisms in an ASP's local access network.  [..]\r\n\r\nPlease decide what was intended.\r\n\r\n\r\n(5)  missing articles\r\n\r\nThe last paragraph of Section 5.3.1, on page 11, says:\r\n\r\n   Bootstrapping does not explicitly try to solve this problem of home\r\n   network renumbering when MN is in dormant mode.  If the MN can\r\n   configure itself after it 'comes back on' by reinitiating the\r\n   bootstrapping process, then network renumbering problem is fixed as a\r\n   side effect.\r\n\r\nIt should better say:\r\n\r\n   Bootstrapping does not explicitly try to solve this problem of home\r\n|  network renumbering when the MN is in dormant mode.  If the MN can\r\n   configure itself after it 'comes back on' by reinitiating the\r\n|  bootstrapping process, then the network renumbering problem is fixed\r\n   as a side effect.\r\n\r\n\r\n(6)  missing article\r\n\r\nThe second paragraph of Section 7, on page 13, says:\r\n\r\n   For each scenario, the underlying assumptions are described.  The\r\n   basic assumption is that there is a trust relationship between mobile\r\n   user and the MSA.  Typically, [...]\r\n\r\nIt should better say:\r\n\r\n   For each scenario, the underlying assumptions are described.  The\r\n|  basic assumption is that there is a trust relationship between the\r\n   mobile user and the MSA.  Typically, [...]\r\n\r\n\r\n(7)  missing article\r\n\r\nThe second paragraph of Section 7.2, on page 14, says:\r\n\r\n   Figure 1 describes an AAA design example for integrated ASP scenario.\r\n\r\nIt should better say:\r\n\r\n   Figure 1 describes an AAA design example for the integrated ASP\r\n   scenario.\r\n\r\n\r\n(8)  flawed artwork\r\n\r\nFigure 2, on page 15,\r\n\r\n                +--------------+   +--------+\r\n                |              |   |Serving |\r\n                | ASP          |   | MSP    |\r\n   +----+    +-----+           |   | +----+ |\r\n   | MN |--- | NAS |           |   | | HA | |  +-------------------+\r\n   +----+    +-----+           |===| +----+ |  | MSA               |\r\n                | \\            |   |    \\   || (e.g., corporate NW)|\r\n                |  \\ +------+  |   |     \\     | +-------+         |\r\n                |   -|AAA-NA|  |   |      -------|AAA-MIP|         |\r\n                |    +------+  |   |        |  | +-------+         |\r\n                +------------  +   +--------+  +-------------------+\r\n\r\nshould perhaps be corrected/improved to:\r\n\r\n                +--------------+   +--------+\r\n                |              |   |Serving |\r\n                | ASP          |   | MSP    |\r\n   +----+    +-----+           |   | +----+ |\r\n   | MN |--- | NAS |           |   | | HA | |  +-------------------+\r\n   +----+    +-----+           |===| +----+ |  | MSA (e.g.,        |\r\n                | \\            |   |    \\   |  |      corporate NW)|\r\n                |  \\ +------+  |   |     \\  |  | +-------+         |\r\n                |   -|AAA-NA|  |   |      -------|AAA-MIP|         |\r\n                |    +------+  |   |        |  | +-------+         |\r\n                +------------  +   +--------+  +-------------------+\r\n\r\n[ Note: I intentionally have refrained from horizontally extending\r\n  the box on the rigth side of the figure, which would have been\r\n  possible while still conforming to RFC formatting rules. ]\r\n\r\n\r\n\r\n(9)  word omissions\r\n\r\nWithin the large first paragraph of Section 9.1, at the bottom of\r\npage 17, there are two word omissions:\r\n\r\nIn the 2nd line of the paragraph, replace\r\n\r\n\t  ... between the home agent and mobile node\r\nby:\r\n          ... between the home agent and the mobile node\r\n\r\nand in the 5th line from the bottom of the page, insert \"be\", changing\r\n\r\n                                   [...].  The best way to minimize the\r\n   probability of such a compromise is to have the cryptographic\r\n   material only known or calculable by the two end nodes that share the\r\n   SA -- in this case, the home agent and mobile node.  [...]\r\n\r\nto:\r\n                                   [...].  The best way to minimize the\r\n   probability of such a compromise is to have the cryptographic\r\n|  material only be known or calculable by the two end nodes that share\r\n   the SA -- in this case, the home agent and mobile node.  [...]\r\n\r\n\r\n(10) [[posted separately.]]", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "812", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "[[Page 18, Hdsl2ShdslWirePair , description]]\r\n\r\n       wire), and G.shdsl.bis support an optional third pair", "correct_text": "       wire), and G.shdsl.bis lines support an optional third pair", "notes": "from pending", "submit_date": "2007-01-07", "submitter_name": "Clay Sikes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "813", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "[[Page 45, hdsl2ShdslSpanConfMinLineRate, description]]\r\n\r\n       If the minimum line rate equals the maximum line rate\r\n       (hdsl2ShdslSpanMaxLineRate), the line rate is considered\r\n       'fixed'.", "correct_text": "       If the minimum line rate equals the maximum line rate\r\n       (hdsl2ShdslSpanConfMaxLineRate), the line rate is considered\r\n       'fixed'.", "notes": "from pending", "submit_date": "2007-01-07", "submitter_name": "Clay Sikes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "814", "doc-id": "RFC4641", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   [3]   Kolkman, O., Schlyter, J., and E. Lewis, \"Domain Name System\r\n         KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP)\r\n         Flag\", RFC 3757, May 2004.\r\n", "correct_text": "[should be omitted.]", "notes": "RFC 3757 has been formally obsoleted by (and incorporated into)\r\nthe new DNSSEC RFCs, RFC 4033..4035.\r\nTherefore, RFC 3757 should not appear as a Normative Reference\r\nin new RFCs any more.\r\n\r\nThe two instances where [3] is cited in the text,\r\n  - page  6, Section 3.1,   first paragraph,  and\r\n  - page 24, Section 4.1.1, second paragraph\r\nshould have been changed to refer to [5], RFC 4034, instead.\r\n\r\n\r\nfrom pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "815", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "[[Page 46, hdsl2ShdslSpanConfMaxLineRate, description]]\r\n\r\n       If the minimum line rate equals the maximum line rate\r\n        (hdsl2ShdslSpanMaxLineRate), the line rate is considered\r\n        'fixed'.", "correct_text": "       If the minimum line rate (hdsl2ShdslSpanConfMinLineRate) equals\r\n        the maximum line rate, the line rate is considered\r\n        'fixed'.", "notes": "from pending", "submit_date": "2007-01-07", "submitter_name": "Clay Sikes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "816", "doc-id": "RFC4282", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "Unfortunately, the text of that RFC does not fully reflect the\r\nestablished state of the IETF standards, by referring to obsolete\r\ndocuments (e.g., ex STD 10, RFC 821) and ignoring effective updates,\r\ne.g., STD 3, RFC 1123, and RFC 2821.\r\n\r\nIn particular, the text of RFC 4282 repeatedly (e.g. in Section\r\n2.6.) emphasizes making a deviation from established standards\r\nfor host / domain names.\r\n\r\nThis is not true!\r\nThe pretended deviation in fact reflects the current standards.\r\n\r\nThe modification to RFC 952, RFC 821, et al. has already been\r\nintroduced into the IETF Standards by STD 3, RFC 1123 (Host\r\nRequirements, Part II), published 16 years ago, in October 1989.\r\nSection 2.1 of that RFC, on page 13, says:\r\n\r\n    \"One aspect of host name syntax is hereby changed: the\r\n     restriction on the first character is relaxed to allow\r\n     either a letter or a digit. Host software MUST support\r\n     this more liberal syntax.\"\r\n\r\nand continues saying:\r\n\r\n    \"Host software MUST handle host names of up to 63 characters\r\n     and SHOULD handle host names of up to 255 characters.\"\r\n\r\nTherefore, it would have been strongly advisable to point out\r\non page 6 of RFC 4282, in Section 2.2, first bullet, that the\r\nnamed rules in RFC 2865 **DO NOT CONFORM** with STD 3 !!!\r\n\r\nNote: IMHO, it is a fundamental design flaw of RADIUS and certain\r\nother protocols using TLVs, AVPs, -- or however similar protocol\r\nobjects are named -- to specify that the 'length' information\r\n(being stored in a single octet) is to comprise the cumulative\r\nsize of the Type, Length and Value fields, instead of just giving\r\nthe size of the Value (payload) field; the latter solution would\r\nalways allow to fully exhaust the total range of an 8-bit unsigned\r\nLength and thereby allow payload octet strings of size 0..255 !\r\n\r\n\r\nSimilarly, RFC 4282 ignores the standardization state of the\r\nproprietary historic tunnelling protocols that have served as\r\n'precursors with major deficiencies to learn from' for the\r\ndevelopment of L2TP, the only comparable protocol named in \r\nRFC 4282 that is on the IETF Standards Track.\r\n\r\n  o   L2F [RFC2341] has been published for information only\r\n      as a Historic RFC 'ab initio'.\r\n\r\n  o   PPTP [RFC2637] has purposely been rejected by the IETF --\r\n      because of its well known significant security flaws, among\r\n      other issues, and the Informational RFC 2637 has been\r\n      published with a very clear IESG Note to this end.\r\n\r\nI am surprised that a new Standards Track RFC is getting published\r\nthat repeatedly refers to obsolete protocols equally as to official\r\nprotocols, in a manner that does not make clear the distinction.\r\nThe continued unreflected use of PPTP, in particular, is seen by\r\nmajor security consultants as 'one of the most widespread trojan\r\nhorses' in the current Internet.  We should do everything to\r\ncommunicate and emphasize the 1998/1999 decisions of the IETF and\r\nIESG and the reasons behind it, and push the evolved standards!\r\n\r\n", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2005-12-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "835", "doc-id": "RFC4778", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.3", "orig_text": "   SSH may not be supported on legacy equipment.  In some cases,\r\n   changing the host name of a device requires an SSH rekey event since\r\n   the key is based on some combination of host name, Message\r\n   Authentication Code (MAC) address, and time.", "correct_text": "   SSH may not be supported on legacy equipment.  In some cases,\r\n   changing the host name of a device requires an SSH rekey event since\r\n   the key is based on some combination of host name, Media Access\r\n   Control (MAC) address, and time.\r\n\r\n(Or perhaps simply, and more generally, use \"link layer address\"\r\n in place of \"Media Access Control (MAC) address\".)\r\n\r\n\r\n", "notes": "wrong acronym expansion", "submit_date": "2007-02-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Merike Kaeo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "753", "doc-id": "RFC4282", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   c           =/ %x80-FF ; UTF-8-Octet      allowed (not in RFC 2486)\r\n                          ; Where UTF-8-octet is any octet in the\r\n                          ; multi-octet UTF-8 representation of a\r\n                          ; unicode codepoint above %x7F.\r\n                          ; Note that c must also satisfy rules in\r\n                          ; Section 2.4, including, for instance,\r\n                          ; checking that no prohibited output is\r\n                          ; used (see also Section 2.3 of\r\n                          ; [RFC4013]).\r\n   x           =  %x00-FF ; all 128 ASCII characters, no exception;\r\n                          ; as well as all UTF-8-octets as defined\r\n                          ; above (this was not allowed in\r\n                          ; RFC 2486).  Note that x must nevertheless\r\n                          ; again satisfy the Section 2.4 rules.", "correct_text": "[see below]", "notes": "Shouldn't that be s/FF/F4/ as in STD 63, or maybe s/FF/FD/ ?\n --VERIFIER NOTES-- \nThere is no clear suggested change. The chairs are aware about issues with RFC 4282, and believe that a new document is probably required to address them. \r\n   ", "submit_date": "2006-08-14", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "755", "doc-id": "RFC1034", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "Section 6.1. ends this way:\r\n\r\n  Relative and absolute domain names may be freely intermixed in a\r\n  master\r\n\r\nwhich is incomplete.  It's unclear exactly how that sentence may have\r\nbeen intended to end, but minimally I would suggeste it at least\r\nterminated with 'file.'.\r\n\r\nSection 6.2.8. in the diagram shows 'QTYPE=A', but should be of\r\ntype 'CNAME' based on the context of the example.", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2006-03-13", "submitter_name": "John Kristoff", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "756", "doc-id": "RFC3189", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "      a=fmtp: 112 encode=SD-VCR/525-60\r\n      a=fmtp: 112 audio=bundled\r\n      a=fmtp: 113 encode=306M/525-60\r\n      a=fmtp: 113 audio=bundled", "correct_text": "      a=fmtp:112 encode=SD-VCR/525-60 audio=bundled\r\n      a=fmtp:113 encode=306M/525-60 audio=bundled", "notes": "from pending", "submit_date": "2005-03-10", "submitter_name": "Stephen Casner", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "757", "doc-id": "RFC4282", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6", "orig_text": "   The BNF of the realm portion allows the realm to begin with a digit,\r\n   which is not permitted by the BNF described in [RFC1035].  This\r\n   change was made to reflect current practice; although not permitted\r\n   by the BNF described in [RFC1035], Fully Qualified Domain Names\r\n   (FQDNs) such as 3com.com are commonly used and accepted by current\r\n   software.", "correct_text": "[not supplied]", "notes": "section 2.6 missed the update of the hostname syntax in\r\nRFC 1123, section 2.1.\r\n\r\nRFC 1123 (STD 3) 2.1 allows labels starting with a <digit>\r\nin fully qualified domain names of a host, RFC 1035 (STD 13)\r\n2.3.1 still wants labels starting with a <letter>.", "submit_date": "2005-12-13", "submitter_name": "Peter Koch", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "836", "doc-id": "RFC3779", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.3.1", "orig_text": "The ASIdentifiers type is a SEQUENCE containing one or more forms of\r\nautonomous system identifiers -- AS numbers (in the asnum element) or\r\nrouting domain identifiers (in the rdi element).  When the ASIdentifiers type\r\ncontains multiple forms of identifiers, the asnum\r\nentry MUST precede the rdi entry.  AS numbers are used by BGP, and\r\nrouting domain identifiers are specified in the IDRP [RFC1142].", "correct_text": "[see Notes]", "notes": "IDRP was never defined in an RFC, only by ISO 10747.\r\n\r\nfrom pending", "submit_date": "2006-06-21", "submitter_name": "Randy Bush", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "843", "doc-id": "RFC4778", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "Studying the recently published RFC 4788 (EVRCB)\r\nauthored by you, and comparing it with similar recent\r\npublications,  I'm surprised to find a quite unusual\r\nsyntax used in the 'a=fmtp' SDP lines there.\r\n\r\nUsually, media type parameters included into 'a=fmtp' SDP lines\r\nare separated by semicolons as in the MIME type declaration.\r\n\r\nThe most recent RFC formally specifying this behaviour was\r\nRFC 4749, Section 6.2 of which says:\r\n\r\n   o  Any remaining parameters go in the SDP \"a=fmtp\" attribute by\r\n      copying them directly from the media type string as a semicolon\r\n      separated list of parameter=value pairs.\r\n\r\nAs another example, RFC 4396, in section 9.1, explicitely specifies\r\nthe syntax as:\r\n        a=fmtp:<dynamic payload type>\r\n               <parameter name>=<value>[,<value>]\r\n               [; <parameter name>=<value>]\r\n\r\nNote: This is *not* ABNF, as can be ssen from the context there.\r\n      Matching RFC-4234 ABNF should have been stated there as:\r\n        a=fmtp:<dynamic-payload-type>\r\n               <parameter-name> \"=\" <value> *(\",\" <value>)\r\n               *(\";\" <parameter-name> \"=\" <value> *(\",\" <value>))\r\n\r\nThis was common practice over many years.\r\n\r\nSection 6.7 of RFC 4788 deviates from this practice, omitting\r\nthe semicolon in the examples.  From the prose description,\r\nit is not quite clear whether the phrase,\r\n    \"... copying it directly from the MIME media type string\"\r\nwas meant to comprise the separating semicolons often considered\r\npart of MIME type parameters as well, or not.\r\nUnfortunately, no precise formal description (ABNF) is given.\r\nThe examples given all omit the usual semicolons, e.g.:\r\n\r\n     a=fmtp:97 silencesupp=1 dtxmax=32 dtxmin=12 hangover=1\r\n                            ^         ^         ^\r\n\r\nHas this omission been done intentionally?\r\n\r\nIf yes, what have been the reasons to do so?\r\n  I fear that the unusual definition might cause\r\n  interoperability problems; at least it makes the use\r\n  of uniform parsing of 'a=fmtp' SDP lines impossible.", "correct_text": "[not submitted]", "notes": "from pending", "submit_date": "2007-01-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "844", "doc-id": "RFC3161", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4.2", "orig_text": "   unacceptedExtension (16),\r\n     -- the requested extension is not supported by the TSA\r\n    addInfoNotAvailable (17)\r\n      -- the additional information requested could not be understood\r\n      -- or is not available\r\n    systemFailure       (25)\r\n      -- the request cannot be handled due to system failure  }", "correct_text": "   unacceptedExtension (16),\r\n     -- the requested extension is not supported by the TSA\r\n    addInfoNotAvailable (17),\r\n      -- the additional information requested could not be understood\r\n      -- or is not available\r\n    systemFailure       (25)\r\n      -- the request cannot be handled due to system failure  }", "notes": "Missing comma after the descriptor of the OID of PKIFailureInfo,\r\nat the end of line \"addInfoNotAvailable (17).\r\n\r\nfrom pending", "submit_date": "2007-01-31", "submitter_name": "Stefan Doerpinghaus", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "845", "doc-id": "RFC4763", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   o It is based on well-established Bellare-Rogaway mutual\r\n     authentication protocol.", "correct_text": "   o It is based on the well-established Bellare-Rogaway mutual\r\n     authentication protocol.\r\n", "notes": "", "submit_date": "2007-02-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "894", "doc-id": "RFC4698", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   Using reverse\r\n   DNS tree presents problems for IP address delegation (for example,\r\n   delegations do not fall into byte boundaries, unlike reverse DNS),\r\n   and DNS does not currently contain any information regarding\r\n   autonomous system delegation.", "correct_text": "   Using the reverse\r\n   DNS tree presents problems for IP address delegation (for example,\r\n   delegations do not fall into byte boundaries, unlike reverse DNS),\r\n   and DNS does not currently contain any information regarding\r\n   autonomous system delegation.", "notes": "missing article\r\n\r\nSource: apps", "submit_date": "2006-11-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "758", "doc-id": "RFC4256", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "\"Information Requests\", on page 5, RFC 4256 says:\r\n\r\n   The language tag is deprecated and SHOULD be the empty string.  It\r\n   may be removed in a future revision of this specification.  Instead,\r\n   the server SHOULD select the language used based on the tags\r\n   communicated during key exchange [SSH-TRANS].\r\n\r\n   If the language tag is not the empty string, the server SHOULD use\r\n   the specified language for any messages sent to the client as part of\r\n   this protocol.  The language tag SHOULD NOT be used for language\r\n   selection for messages outside of this protocol.  If the server does\r\n   not support the requested language, the language to be used is\r\n   implementation-dependent.", "correct_text": "[see Notes]", "notes": "[Replace by errata ID 1678]\r\n\r\n(These two paragraphs apparently have been copied from Section 3.1\r\nwithout change.)\r\n\r\nThis specification makes no sense here:\r\n\r\nThe Information Request is sent from the *server* to the client,\r\nand it already contains strings that *do* make use of a particular\r\nlanguage/locale.\r\n\r\nThe one and only useful interpretation of the 'language tag'\r\nin the Information Request message is that it specifies the\r\nlanguage/locale used for building the 'instruction' and 'prompt'\r\nstrings in the request.\r\nThis parallels the use of the language tag, e.g., in the\r\nDisconnection Message of the SSH Transport Layer Protocol\r\n(cf. RFC 4253, Sect. 11.1).\r\n\r\nNOTE:  The client might have announced a locale *list* in the\r\ninitial exchange, and the server should choose from that list;\r\nthe actual choice [for a particular message with text strings]\r\nneeds to be communicated to the client.\r\n\r\nNOTE:  In multi-stage authentication, the backend authentication\r\nmechanisms will be the source of all these strings, and the SSH\r\nserver might have no choice than to just report the locale used\r\nby each backend mechanism to the client; such mechanisms easily\r\ncould make use of different locales - hence the locale needs to\r\nbe announced per message from the server in this context!\r\n\r\nNOTE:  RFC 4253 recommends to send empty language tags fields in\r\nthe initial exchange; this makes the 'language tag' field in all\r\nSSH protocol messages containing text to be presented to the user\r\n*very* desirable !\r\n\r\nTherefore, the 'language tag' should also better *not* be deprecated\r\nin the SSH_MSG_USERAUTH_INFO_REQUEST message!\r\n\r\nfrom pending\n --VERIFIER NOTES-- \n   [Replaced by errata ID 1678]", "submit_date": "2006-03-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "759", "doc-id": "RFC4588", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  [missing article]\r\n\r\nWithin Section 4 of RFC 4588, the second paragraph on page 8 says:\r\n\r\n            [...].  See Section 8.1 for the specification of how the\r\n   mapping between original and retransmission payload types is done\r\n|  with Session Description Protocol (SDP).\r\n\r\nIt should say:\r\n\r\n            [...].  See Section 8.1 for the specification of how the\r\n   mapping between original and retransmission payload types is done\r\n|  with the Session Description Protocol (SDP).\r\n       ^^^^^\r\n\r\n\r\n(2)  [improper wording]\r\n\r\nThe 4th paragraph of Section 6.3, on page 12, says:\r\n\r\n            [...].  In such cases, an appropriate \"reorder delay\"\r\n   algorithm may not actually be timer based, but packet based.  For\r\n|  example, if n number of packets are received after a gap is detected,\r\n   then it may be assumed that the packet was truly lost rather than out\r\n   of order.  This may turn out to be far easier to code on some\r\n   platforms as a very short fixed FIFO packet buffer as opposed to the\r\n   timer-based mechanism.\r\n\r\nIt should say:\r\n\r\n            [...].  In such cases, an appropriate \"reorder delay\"\r\n   algorithm may not actually be timer based, but packet based.  For\r\n|  example, if n packets are received after a gap is detected, then it\r\n   may be assumed that the packet was truly lost rather than out of\r\n   order.  This may turn out to be far easier to code on some platforms\r\n   as a very short fixed FIFO packet buffer as opposed to the timer-\r\n   based mechanism.\r\n\r\n(Alternatively, use  \"if a number n of packets ...\"  instead of the\r\n offending \"if n number of packets ...\" )\r\n\r\n\r\n(3)  [word omission]\r\n\r\nIn the first paragraph of Section 6.4, on page 13, RFC 4588 says:\r\n\r\n   [...]                                      v\r\n|  Sending NACKs only in regular RTCP compound decreases the maximum\r\n   delay between detecting an original packet loss and being able to\r\n   send a NACK for that packet.  Implementers should consider the\r\n   possible implications of this fact for the application being used.\r\n\r\nIt should say:\r\n\r\n   [...]                                      vvvvvvvvv\r\n|  Sending NACKs only in regular RTCP compound packets decreases the\r\n   maximum delay between detecting an original packet loss and being\r\n   able to send a NACK for that packet.  Implementers should consider\r\n   the possible implications of this fact for the application being\r\n   used.\r\n\r\n\r\n(4)  [[posted separately.]]\r\n\r\n\r\n(5)  [word omission]\r\n\r\nLater on in Section 8.1, on mid-page 15, the RFC says:\r\n\r\n      v\r\n|  The syntax is as follows:\r\n\r\n      a=fmtp:<number> apt=<apt-value>;rtx-time=<rtx-time-val>\r\n\r\nIt should say:\r\n\r\n      vvvvv\r\n|  The SDP syntax is as follows:\r\n\r\n      a=fmtp:<number> apt=<apt-value>;rtx-time=<rtx-time-val>\r\n\r\n(There also is a syntax for these parameters when written in a full\r\n MIME media type specification; this is not presented in the RFC,\r\n but it must be distinguished from the SDP syntax presented!)\r\n\r\n\r\n(6)  [excessive text]\r\n\r\nThe final paragraph of Section 8.6, on mid-page 20, says:\r\n\r\n   In the following sections, some example SDP descriptions are\r\n|  presented.  In some of these examples, long lines are folded to meet\r\n|  the column width constraints of this document; the backslash (\"\\\") at\r\n|  the end of a line and the carriage return that follows it should be\r\n|  ignored.\r\n\r\nIt would suffice to say:\r\n\r\n   In the following sections, some example SDP descriptions are\r\n|  presented.\r\n\r\nRationale:\r\nAs will be shown below, in the examples given in Section 8.7,\r\nthere in fact is no need to perform this artificial line folding.\r\n\r\n\r\n(7)  [simplification for improved clarity]\r\n\r\nThe artificial line folding in the examples in Section 8.7 can be\r\navoided without change in the indentation, while still conforming\r\nwith the line length limitations:\r\n\r\na) In the upper half of page 21, the lines,\r\n\r\n   a=fmtp:98 profile-level-id=8;config=01010000012000884006682C209\\\r\n   0A21F\r\n\r\nshould read:\r\n\r\n   a=fmtp:98 profile-level-id=8;config=01010000012000884006682C2090A21F\r\n\r\nb) In the lower half of page 21, the lines,\r\n\r\n   a=fmtp:96 profile-level-id=8;config=01010000012000884006682C209\\\r\n   0A21F\r\n\r\nshould read:\r\n\r\n   a=fmtp:96 profile-level-id=8;config=01010000012000884006682C2090A21F\r\n\r\nc) In the upper half of page 22, the lines,\r\n\r\n   a=fmtp:96 profile-level-id=8;config=01010000012000884006682C209\\\r\n   0A21F\r\n\r\nshould read:\r\n\r\n   a=fmtp:96 profile-level-id=8;config=01010000012000884006682C2090A21F\r\n\r\n\r\n(8)  [clarification]\r\n\r\nOn mid-page 21, the text in Section 8.7 says:\r\n\r\n   A special case of the SDP description is a description that contains\r\n   only one original session \"m\" line and one retransmission session \"m\"\r\n   line, the grouping is then obvious and FID semantics MAY be omitted\r\n   in this special case only.\r\n\r\nIt should better say:\r\n\r\n   A special case of the SDP description is a description that contains\r\n   only one original session \"m\" line and one retransmission session \"m\"\r\n|  line, the grouping is then obvious and lines with grouping syntax\r\n   (FID semantics) MAY be omitted in this special case only.\r\n\r\nRationale:\r\nIt is impossible to only omit *semantics*.\r\nCertain *lines* are omitted there -- the lines with grouping syntax\r\n(and FID semantics).\r\nAlternatively, \"(FID semantics)\" might be omitted entirely from\r\nthe changed text, as well.\r\n\r\n\r\n(9)  [word omission -- clarification]\r\n\r\nThe first paragraph of Section 10.2, on page 25, says:\r\n\r\n   This section shows how to combine retransmissions with layered\r\n   encoding in multicast sessions.  Note that the retransmission\r\n   framework is offered only for small multicast applications.  Refer to\r\n   RFC 2887 [10] for a discussion of the problems of NACK implosion,\r\n   severe congestion caused by feedback traffic, in large-group reliable\r\n   multicast applications.\r\n\r\nIt should better say:\r\n\r\n   This section shows how to combine retransmissions with layered\r\n   encoding in multicast sessions.  Note that the retransmission\r\n   framework is offered only for small multicast applications.  Refer to\r\n|  RFC 2887 [10] for a discussion of the problems of NACK implosion, and\r\n   severe congestion caused by feedback traffic, in large-group reliable\r\n   multicast applications.\r\n                                                                     ^^^\r\n\r\n\r\n(10)  [word omission]\r\n\r\nIn the first paragraph on page 27, text within Section 13 says:\r\n\r\n                                            [...].  Refer to Section 9.1\r\n   of the Secure Real-Time Transport Protocol (SRTP) [12] for a\r\n|  discussion the implications of two-time pads and how to avoid them.\r\n             ^\r\n\r\nIt should say:\r\n                                                    vvvvvvvvvvvvvvv\r\n                                            [...].  Refer to Section 9.1\r\n|  of the Secure Real-Time Transport Protocol (SRTP) specification [12]\r\n|  for a discussion of the implications of two-time pads and how to\r\n   avoid them.\r\n                   ^^^^\r\n\r\n(11)  [inconsistency]\r\n\r\nIn the fourth bullet on page 29, Appendix A.1 says:\r\n\r\n   * avg-rtcp-size is approximated by 120 bytes.  This is a rounded-up\r\n     average of 2 SRs, one for each SSRC, containing 40/8/28/32 bytes\r\n     for IPv6/UDP/SR/SDES with CNAME, thus making 105 bytes each; and a\r\n     RR with 40/8/64/32 bytes for IPv6/UDP/2*RR/SDES, making 157 bytes.\r\n     [...]\r\n\r\nI cannot follow these computations:\r\n    40+8+28+32 = 105  ???   and   40+8+64+32 = 157  ???\r\nWhat is wrong there?\r\nAuthors, please correct !\r\n\r\nBTW:\r\nWhat follows in the text essentially does not depend on the exact\r\nfigures, the rough order of magnitude is all that is needed.\r\nBut the presentation should be self-consistent.\r\n\r\n\r\n(12)  [improvement of wording]\r\n\r\nIn the 6th bullet of Appendix A.1, the text on page 29/30 says:\r\n\r\n        [...].  This means that if a packet is requested for\r\n     retransmission a maximum of 2 times, the corresponding generic NACK\r\n     report block requesting that particular packet is sent in two\r\n << page break >>\r\n|    consecutive RTCP compounds; likewise, if it is requested for\r\n     retransmission 10 times, then the generic NACK is sent 10 times.\r\n     [...]\r\n\r\nIt should say:\r\n\r\n        [...].  This means that if a packet is requested for\r\n     retransmission a maximum of 2 times, the corresponding generic NACK\r\n     report block requesting that particular packet is sent in two\r\n << page break >>\r\n|    consecutive RTCP compound packets; likewise, if it is requested for\r\n     retransmission 10 times, then the generic NACK is sent 10 times.\r\n     [...]\r\n\r\n\r\n(13)  [missing argument / clarification]\r\n\r\nOn page 31, Appendix A.2 says:\r\n                                               vv\r\n|  To find an estimate of the buffering time, T(), that a streaming\r\n   server shall use in order to enable a given number of retransmissions\r\n   for each packet, N.  [...]\r\n\r\nIt should say:\r\n                                               vvv\r\n|  To find an estimate of the buffering time, T(N), that a streaming\r\n   server shall use in order to enable a given number of retransmissions\r\n   for each packet, N.  [...]\r\n\r\n\r\n(14)  [fractional sign]\r\n\r\nWithin the tables in Appendix A.4, on pages 32 and 33, the RFC text\r\nuses the comma (\",\") as the fractional sign (central european style).\r\nIn IETF documents, the decimal point (\".\") should be used instead.\r\n\r\n\r\nAuthors, Please comment.\r\nItems (4) / (11) need agreement / text correction from you.\r\nItems (6) + (7) might be considered non-esssential.\r\nAll other items seem to be straightforward and suitable for\r\ninclusion in an Errata Note.\r\n", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\n\r\n\r\nThanks for your comments. However, I don't consider them worth of correction. Most are just editorial nits, some of which are even wrong. So, for the time being as Joerg said:\r\n\r\n\"We will be happy to archive these and migt consider them if we do a revision of the RFC.  But an errata document would only make sense if there is something seriously hindering interoperability.  I have not seen anything falling into this category (well, and there are implementations out there from the spec).\"\r\n", "submit_date": "2006-08-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Jose Rey", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "760", "doc-id": "RFC2821", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.4.1", "orig_text": "In several places, RFC2821 refers to \"section 2.4.1.\".\r\nUnfortunately there *is* no section 2.4.1.  To be quite honest, I'm\r\nreally not sure what the intended section number is.  It doesn't\r\nappear obvious to me.", "correct_text": "[not submitted]", "notes": "from pending", "submit_date": "2005-05-12", "submitter_name": "Wayne Schlitt", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "761", "doc-id": "RFC4596", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "3.1. Routing of INVITE and MESSAGE to Different UA\r\n", "correct_text": "3.1. Routing of INVITE and MESSAGE to Different UAs\r\n", "notes": "from pending", "submit_date": "2006-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "762", "doc-id": "RFC4073", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "In the module heading and in the IMPORTS clause of the ASN.1 module\r\nof RFC 4073 (Appendix A on page 7), the textual label for the\r\nsub-identifier 9 of the OBJECT IDENTIFIER 1.2.840.113549.1 is\r\nspelled \"pkcs-9(9)\".\r\nBut, ALL other (#=4) appearances of this same sub-identifier in the\r\ntext of RFC 4073 use the spelling \"pkcs9(9)\" (without the '-').\r\n\r\nI've tried to resolve this inconsistency going \"back to the roots\",\r\nand unfortunately found a big mess! (see detailed list below)\r\n\r\nBasically, PKCS#9 v2.0 from RSA Labs and its ASCII-fication RFC 2985\r\nshould be considered the primary reference because this spec contains\r\nthe definition of the OBJECT IDENTIFIER 1.2.840.113549.1.9 .\r\nThere, the spelling consistently is  \"pkcs-9(9)\" .\r\n\r\nThis notation style is strictly followed in all PKCS publications\r\nfrom RSA (as far as I could verify), and in most RFCs related to\r\nPKCS/CMS/PKIX. I've found 24 RFCs of this kind.\r\n\r\nBut there are two RFCs using the spelling \"pkcs9(9)\" (without the '-')\r\nexclusively.\r\n\r\nAnd finally, I found 8 RFCs - including RFC 4073 and your RFC 4049,\r\nas well - using both spellings mixed without any recognizable pattern.\r\n\r\nHere are the detailed results of my RFC scan - with shortened titles,\r\nand some content oriented grouping applied:\r\n\r\n'pkcs-9(9)' only :\r\n----------------\r\n  2985 - PKCS #9\r\n\r\n  2311 - S/MIME v.2 Message Specification,\r\n  2312 - S/MIME v.2 Certificate Handling,\r\n  2633 - S/MIME v.3 Message Specification\r\n  3114 - Company Classifying Policy via S/MIME Security Label\r\n  3183 - Domain Security Services using S/MIME\r\n  3850 - S/MIME v.3.1 Certificate Handling\r\n  3855 - Transporting S/MIME Objects in X.400\r\n\r\n  2459 - PKIX Certificate and CRL Profile  [ obsoleted by: 3280 ]\r\n  3280 - PKIX Certificate and CRL Profile\r\n\r\n  2511 - PKIX Certificate Request Messages\r\n  3029 - PKIX Data Validation and Certification Server Protocols\r\n\r\n  2797 - Certificate Mgmt Messages over CMS\r\n  3161 - PKIX Time-Stamp Protocol\r\n\r\n  3125 - Electronic Signature Policies\r\n\r\n  3211 - Password-based Encryption for CMS  [ obsoleted by: 3369+3370 ]\r\n  3274 - Compressed Data Content for CMS\r\n\r\n  2875 - D-H Proof-of-Posession\r\n  3185 - Reuse of CMS CEKs\r\n  3217 - Triple-DES and RC2 Key Wrapping\r\n  3370 - CMS Algorithms\r\n  3537 - HMAC Key Wrapping with 3DES or AES\r\n  3560 - RSAES-OAEP Key Transport in CMS\r\n  3565 - Use of AES Encryption in CMS\r\n\r\n'pkcs9(9)' only :\r\n---------------\r\n  3657 - Use of Camellia Encryption in CMS\r\n  4010 - Use of SEED Encryption in CMS\r\n\r\nmixed spelling :\r\n--------------\r\n  2630 - CMS  [ obsoleted by: 3369+3370 ]\r\n  3369 - CMS  [ obsoleted by: 3852 ]\r\n  3852 - CMS\r\n\r\n  2634 - Enhanced Security Services for S/MIME\r\n  3851 - S/MIME v.3.1 Message Specification\r\n\r\n  3126 - Electronic Signature Formats for lon-term signatures\r\n\r\n  4049 - BinaryTime\r\n\r\n  4073 - Multiple Content in CMS\r\n\r\nNote: I fear that there might exist similar inconsistencies for other\r\n====  object identifiers (verification: t.b.d.)\r\n\r\n\r\nSo, what should be done?\r\nIt certainly would be VERY preferable to follow identifier naming\r\nliterally, always and strictly, once published in a normatively\r\nreferable way.\r\nAt least, we should ensure a consistent use of already defined\r\nidentifiers to be followed in future IETF publications.\r\nAdditionally, it might be considered to post Errata Notes for some\r\n(or all non-obsoleted) RFCs in the 2nd and 3rd category above\r\n(i.e., RFCs 2634, 3126, 3657, 3851, 3852, 4010, 4049, 4073).\r\n", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2005-05-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "763", "doc-id": "RFC4596", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "The may prefer to reach\r\nthe user on a device that supports video (because a video-conference\r\nis desired).  \r\n", "correct_text": "They may prefer to reach\r\nthe user on a device that supports video (because a video-conference\r\nis desired). ", "notes": "from pending", "submit_date": "2006-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "764", "doc-id": "RFC2028", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "The IAB is also responsible for reviewing and approving the charters of new Working Groups that are proposed for the IETF.", "correct_text": "The formation of a working group requires a charter which is primarily negotiated \r\nbetween a prospective working group Chair and the relevant Area \r\nDirector(s), although final approval is made by the IESG with advice \r\nfrom the Internet Architecture Board (IAB).", "notes": "from pending", "submit_date": "2006-03-21", "submitter_name": "Pete Resnick", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "765", "doc-id": "RFC2234", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "page 5:\r\n\r\n        LINEAR WHITE SPACE:  Concatenation is ...\r\n        ...\r\n        ...\r\n        ...\r\n        ...                          ... to be freelyPand\r\n        implicitlyPinterspersed around ...\r\n        \r\npresumably, each \"P\" character should be a parenthesis and a space ??\r\n", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2005-05-19", "submitter_name": "Keith McCloghrie", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "766", "doc-id": "RFC4586", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.3", "orig_text": "|  We have shown that the limitations of RTP AVPF profile do not\r\n   generate such high delay in the feedback messages that the\r\n   performance of NEWPRED is degraded for sessions from 32 kbps to 2\r\n   Mbps.", "correct_text": "|  We have shown that the limitations of the RTP AVPF profile do not\r\n   generate such high delay in the feedback messages that the\r\n   performance of NEWPRED is degraded for sessions from 32 kbps to 2\r\n   Mbps.  ", "notes": "missing article\r\n\r\nfrom pending", "submit_date": "2006-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "767", "doc-id": "RFC4113", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "The DESCRIPTION clause of 'udpEndpointRemoteAddressType',\r\n    at the bottom of page 10,\r\n\r\n       \"The address type of udpEndpointRemoteAddress.  Only\r\n       IPv4, IPv4z, IPv6, and IPv6z addresses are expected, or\r\n       unknown(0) if datagrams for all remote IP addresses are\r\n       accepted. ...\"     ", "correct_text": "       \"The address type of udpEndpointRemoteAddress.  Only\r\n       IPv4, IPv4z, IPv6, and IPv6z addresses are expected, or\r\n       unknown(0) if datagrams from all remote IP addresses are\r\n       accepted. ...\"\r\n                               ^^^^      \r\n", "notes": "from pending", "submit_date": "2005-06-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "768", "doc-id": "RFC4585", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Errors (1)-(10) of 19", "orig_text": "(1)\r\n\r\nSection 1.1 of RFC 4585, on mid-page 4, says:\r\n\r\n   Feedback (FB) message:\r\n      An RTCP message as defined in this document is used to convey\r\n      information about events observed at a receiver -- in addition to\r\n      long-term receiver status information that is carried in RTCP\r\n      receiver reports (RRs) -- back to the sender of the media stream.\r\n|     For the sake of clarity, feedback message is referred to as FB\r\n|     message throughout this document.\r\n\r\nI do not see how and why using the abbreviation might have improved\r\n*clarity* of the text; apparently, it has been used for *brevity* .\r\nTherefore, the two tagged lines should better say:\r\n\r\n|     For the sake of brevity, feedback message is referred to as FB\r\n|     message throughout this document.\r\n\r\nSimilarly, at the bottom of page 4, where the RFC says:\r\n\r\n   Feedback (FB) threshold:\r\n      The FB threshold indicates the transition between Immediate\r\n      Feedback and Early RTCP mode.  [...]\r\n      [...]\r\n      to application designers and is not used in any calculations.  For\r\n|     the sake of clarity, the term feedback threshold is referred to as\r\n      FB threshold throughout this document.\r\n\r\nThe last 3 lines should better say:\r\n\r\n      to application designers and is not used in any calculations.  For\r\n|     the sake of brevity, the term feedback threshold is referred to as\r\n      FB threshold throughout this document.\r\n\r\n\r\n(2)\r\n\r\nThe first bulleted item in Section 3.1, on page 7, says:\r\n                                                    vvvvvvvvvvvvv\r\n|  o  Status reports are contained in sender report (SR)/received report\r\n      (RR) packets and are transmitted at regular intervals as part of\r\n      compound RTCP packets (which also include source description\r\n      (SDES) and possibly other messages); these status reports provide\r\n      an overall indication for the recent reception quality of a media\r\n      stream.\r\n\r\nFor *clarity*, it perhaps should better say -- not binding together the\r\nwords intended to being separated by the slash marking the alternative:\r\n                                                        vvv\r\n|  o  Status reports are contained in sender report (SR) / received\r\n      report (RR) packets and are transmitted at regular intervals as\r\n      part of compound RTCP packets (which also include source\r\n      description (SDES) and possibly other messages); these status\r\n      reports provide an overall indication for the recent reception\r\n      quality of a media stream.\r\n\r\n\r\n(3)  [missing article]\r\n\r\nIn Section 3.4, on mid-page 11, RFC 4585 says:\r\n\r\n   j) Let T_fd be the actual (randomized) delay for the transmission of\r\n      FB message in response to an event at time t0.\r\n\r\nIt should say:\r\n\r\n   j) Let T_fd be the actual (randomized) delay for the transmission of\r\n|     a FB message in response to an event at time t0.\r\n      ^^\r\n\r\n(4)  [inappropriate wording]\r\n\r\nThe algorithm in Section 3.5.2, at the bottom of page 16, contains\r\nthe sub-step:\r\n\r\n      4b) If allow_early == TRUE, then R MUST schedule an Early RTCP\r\n          packet for te = t0 + RND * T_dither_max with RND being a\r\n|         pseudo random function evenly distributed between 0 and 1.\r\n                        ^^^^^^^^\r\n\r\nThis wording is inappropriate.  RND is not a *function* (that's code!),\r\nbut a *number*, the function *value*.  Therefore, the RFC should say:\r\n\r\n      4b) If allow_early == TRUE, then R MUST schedule an Early RTCP\r\n          packet for te = t0 + RND * T_dither_max with RND being a\r\n|         pseudo random number evenly distributed between 0 and 1.\r\n                        ^^^^^^\r\n\r\n\r\n(5)  [inappropriate wording]\r\n\r\nThe algorithm in Section 3.5.3, at the top of page 19, says:\r\n\r\n   2. Otherwise, a temporary value T_rr_current_interval is calculated\r\n      as follows:\r\n\r\n         T_rr_current_interval = RND*T_rr_interval\r\n\r\n|     with RND being a pseudo random function evenly distributed between\r\n      0.5 and 1.5.  This dithered value is used to determine one of the\r\n      following alternatives:\r\n\r\nSimilar to item (4) above, the RFC should say instead:\r\n\r\n   2. Otherwise, a temporary value T_rr_current_interval is calculated\r\n      as follows:\r\n\r\n         T_rr_current_interval = RND*T_rr_interval\r\n\r\n|     with RND being a pseudo random number evenly distributed between\r\n      0.5 and 1.5.  This dithered value is used to determine one of the\r\n      following alternatives:\r\n\r\n\r\n(6)  [typo / dup. wording]\r\n\r\nSection 3.6.2 of RFC 4585, on mid-page 21, says:\r\n\r\n   Example: If a 256-kbit/s video with 30 fps is transmitted through a\r\n   network with an MTU size of some 1,500 bytes, then, in most cases,\r\n|  each frame would fit in into one packet leading to a packet rate of\r\n   30 packets per second.  [...]\r\n\r\nIt should say:\r\n\r\n   Example: If a 256-kbit/s video with 30 fps is transmitted through a\r\n   network with an MTU size of some 1,500 bytes, then, in most cases,\r\n|  each frame would fit into one packet leading to a packet rate of\r\n   30 packets per second.  [...]\r\n\r\n\r\n(7)  [wrong ref. tag]\r\n\r\nOn mid-page 23, Section 4.1 of RFC 4585 says:\r\n\r\n                             vvv\r\n|  The AV profile defined in [4] is referred to as \"AVP\" in the context\r\n   of, e.g., the Session Description Protocol (SDP) [3].  The profile\r\n   specified in this document is referred to as \"AVPF\".\r\n\r\nThere apparently is a confusion of the ref. tags used.\r\nThe RFC should say:\r\n                             vvv\r\n|  The AV profile defined in [2] is referred to as \"AVP\" in the context\r\n   of, e.g., the Session Description Protocol (SDP) [3].  The profile\r\n   specified in this document is referred to as \"AVPF\".\r\n\r\n\r\n(8)  [missing article]\r\n\r\nIn Section 4.2, near the top of page 25, the ABNF production:\r\n\r\n      rtcp-fb-pt         = \"*\"   ; wildcard: applies to all formats\r\n|                        / fmt   ; as defined in SDP spec\r\n\r\nshould better say, improving the ABNF comment text:\r\n\r\n      rtcp-fb-pt         = \"*\"   ; wildcard: applies to all formats\r\n|                        / fmt   ; as defined in the SDP spec\r\n                                                ^^^^^\r\n\r\n\r\n(9)  [inconsistent specification]\r\n\r\nIn Section 4.2, the ABNF on page 25 contains the following productions:\r\n\r\n      rtcp-fb-val        = \"ack\" rtcp-fb-ack-param\r\n                         / [...]\r\nand\r\n      rtcp-fb-ack-param  = SP \"rpsi\"\r\n                         / SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string]\r\n|                        / ; empty\r\n\r\nThis means that the feedback type \"ack\" *MAY* have parameters.\r\n\r\nContrary to that, below the ABNF, the RFC explains:\r\n\r\n   Feedback type \"ack\":\r\n\r\n      This feedback type indicates that positive acknowledgements for\r\n      feedback are supported.\r\n\r\n      The feedback type \"ack\" MUST only be used if the media session is\r\n      allowed to operate in ACK mode as defined in Section 3.6.1.\r\n\r\n|     Parameters MUST be provided to further distinguish different types\r\n|     of positive acknowledgement feedback.\r\n\r\n      [...]\r\n\r\nThe *MUST* in the tagged lines contradicts the ABNF.\r\n\r\nAuthors, please resolve the issue:\r\n\r\nEither have the ABNF changed by omission of the tagged line above,\r\n\r\n|                        / ; empty\r\n\r\nor change the tagged explanation lines to say:\r\n\r\n|     Parameters MAY be provided to further distinguish different types\r\n|     of positive acknowledgement feedback.\r\n\r\n\r\n(10)  [incomplete specification, and an extraneous word]\r\n\r\nAt the bottom of page 26, Section 4.2 of RFC 4585 says:\r\n\r\n   Other feedback types <rtcp-fb-id>:\r\n\r\n      Other documents MAY define additional types of feedback; to keep\r\n      the grammar extensible for those cases, the rtcp-fb-id is\r\n|     introduced as a placeholder.  A new feedback scheme name MUST to\r\n      be unique (and thus MUST be registered with IANA).  Along with a\r\n|     new name, its semantics, packet formats (if necessary), and rules\r\n      for its operation MUST be specified.\r\n\r\nIt should say:\r\n\r\n   Other feedback types <rtcp-fb-id>:\r\n\r\n      Other documents MAY define additional types of feedback; to keep\r\n      the grammar extensible for those cases, the rtcp-fb-id is\r\n|     introduced as a placeholder.  A new feedback scheme name MUST be\r\n      unique (and thus MUST be registered with IANA).  Along with a new\r\n|     new name, its semantics, possible parameters, packet formats (if\r\n      necessary), and rules for its operation MUST be specified.\r\n\r\nRationale:\r\n\r\na) \"MUST to be unique\" should be \"MUST be unique\".\r\n\r\nb) Syntax and semantics of parameters (if any) obviously MUST be\r\n   specified as well.  The RFC text in the IANA Considerations\r\n   (Section 9) already reflects this requirement.\r\n   For completeness and clarity, it should be stated here as well.\r\n   I have proposed minimal additional wording -- you might choose\r\n   alternative words.", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\nThanks for the review.  I have only quickly skimmed your comments\r\nand there does not seem to be anything serious.\r\n\r\nWe will be happy to archive these and migt consider them if\r\nwe do a revision of the RFC.  But an errata document would\r\nonly make sense if there is something seriously hindering\r\ninteroperability.  I have not seen anything falling into this\r\ncategory (well, and there are implementations out there from\r\nthe spec).\r\n", "submit_date": "2006-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Joerg Ott", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "895", "doc-id": "RFC4468", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "X.7.8 Trust relationship required", "correct_text": "X.7.14 Trust relationship required", "notes": "Incorrect Enhanced Status Code. See <http://www.iana.org/assignments/smtp-enhanced-status-codes> for more details.\r\n", "submit_date": "2007-04-11", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "775", "doc-id": "RFC2288", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "Once you have written RFC 2288 that defined three URN namespaces:\r\n  ISSN, ISBN, and SICI.\r\nThe IANA \"urn-namespaces\" registry does not (and probably never\r\ndid) contain any pointers to RFC 2288.\r\n\r\nMeanwhile, the 'ISSN' URN namespace definition has been restated\r\nin RFC 3044, including an IANA registration -- according to and\r\nusing the template specified in RFC 2611 (BCP 33) [that in the\r\nmeantime has been obsoleted itself by RFC 3406 (BCP 66)] --,\r\nand 'ISSN' currently appears as formal URN namespace #3 in the\r\nIANA URN namespaces registry.\r\n\r\nSimilarly, the 'ISBN' URN namespace definition has been restated\r\nin RFC 3187, including an IANA registration -- according to and\r\nusing the template specified in RFC 2611 --, and 'ISBN' currently\r\nappears as formal URN namespace #9 in the IANA registry.\r\n\r\nNow, RFC 2288 is *NOT* declared \"Obsoleted\" in the RFC index.\r\nContrary to that, the 'SICI' URN namespace does *NOT* appear\r\nin the current IANA URN namespaces registry.\r\nThus the fate of the 'SICI' namespace and the status of RFC 2288\r\nis questionable and unclear.\r\n\r\nI suspect that RFC 2288 should be considered obsoleted, and\r\n'SICI' should be considered deprecated.\r\n\r\nSo, what's to do in this case ?\r\n\r\nAccording to my understanding of the established procedures,\r\nthe Informational RFC 2288 cannot easily be re-classified as\r\nHistoric, and a specific footnote about the deprecated 'SICI'\r\nnamespace would not be easily entered into the IANA registry.\r\nTherefore, to make the situation clearly understandable for\r\neveryone, it seems easiest to have the RFC-Ed add the note\r\n   '(Obsoleted by 3044, RFC 3187)'\r\nto the RFC index entry for RFC 2288.", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2005-09-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "776", "doc-id": "RFC4450", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)\r\n\r\nNear the top of page 3, section 3 of RFC 4450 states the\r\nreasons for removal from the list -- i.e. *not* moving\r\nto HISTORIC state:\r\n  o  RFC 1584  -- an expected future dependency;\r\n  o  RFC 1755  -- believed to be actively in use.\r\n\r\nNevertheless, these two RFCs have been moved to HISTORIC\r\nstatus along with the publication of RFC 4450, as can be\r\nseen in rfcxx00.txt .\r\nThis is quite surprising. (Perhaps, you know what happened.)\r\n\r\nPreferrably, the final RFC text would better have been\r\ncoordinated with the actual Standards Actions performed --\r\nfor example, by addition of an IESG statement explaining the\r\ndeviation from the text.\r\n\r\n\r\n(2)\r\n\r\nDue to the 'numeric limitation' applied (restriction to RFCs\r\nwith numbers in the range ~700...2000) there are now a couple\r\nof RFCs that have lost their 'normative background'.\r\n\r\nFor example, the higher level SNA MIBs (RFCs 2051, (2155->)2455,\r\n2456, 2457, and 2582) more or less depend on the now deprecated\r\nbasic SNA node MIBs, RFCs (1665->)1666 and 1747.  [ \"xx->yy\"\r\nis my shorthand notation for \"RFC xx obsoleted by RFC yy\". ]\r\nArguably, in this case, these dependant RFCs might be considered\r\ncandidates for a move to HISTORIC as well.\r\nBut there certainly are other cases as well (I have not yet\r\nchecked all the details).\r\n\r\nIt therefore should perhaps be considered to repeat the\r\nRFC 4450 'experiment' with an extended numeric range of RFCs,\r\ne.g. up to RFC 2500.\r\n\r\n\r\n(3)\r\n\r\nOn the other hand, the restriction to Standards Track documents\r\nhas other undesired implications:\r\n\r\na) In the past, usually at least an Experimental RFC has been\r\npublished as a first try for a new protocol (or an Informational\r\nRFC, in the case of a third-party protocol), before a Standards\r\nTrack version has been developed.  Unfortunately, in this process\r\nit obviously has been avoided very often to formally OBSOLETE\r\nthe predecessor RFC[s] when the Standards Track version has been\r\npublished.  (Similar undue 'politeness' can be observed, e.g.,\r\non the transition path of MIBs from SMIv1 to SMIv2.)\r\nCaused by RFC 4450 we now have non-deprecated RFCs predating\r\nRFCs moved to HISTORIC state.\r\n(The example instances I've been aware of at first glance, though\r\nstill being listed as EXPERIMENTAL in the RFC index, fortunately\r\nalready had been removed in the past from the 'Experimental RFCs'\r\nSection of rfcxx00.txt .)\r\nIt would be very useful, for clarity, to move these RFCs to\r\nHISTORIC status as well.\r\n\r\nb) There are 'companion documents' to Standards Track RFCs that\r\nhave been published as Informational RFCs for various (legitimate)\r\nreasons.  These RFCs are outdated with their respective related\r\nspecifications, and as such, for clarity, should better be moved\r\nto HISTORIC status as well.\r\n\r\nFor example, IMHO the following Informational and Experimental RFCs,\r\nbeing closely related to RFCs that now have been deprecated, should\r\nbe considered candidates for deprecation (being made HISTORIC) as\r\nwell, for clarity, consistency, and/or historical context:\r\n\r\no  RFC 1477 (IDPR Introduction);\r\no  RFC 1482 (NSFNET Policy-Based Routing Database) -- IDPR related;\r\no  RFC 1585 (MOSPF Analysis and Experience) -- depending on RFC 1584;\r\no  RFC 1593 (SNA APPN Node MIB) -- 1st ed., eff.->2155->4255;\r\no  RFC 1634 (IPX over WAN Media) -- successor to RFC 1551, the siblings\r\n            of which (RFCs 1552 and 1553) have been made HISTORIC;\r\no  RFC 1791 (TCP+UDP over IPX);     \\  both still in\r\no  RFC 1792 (TCP/IPX MIB);          /  rfcxx00.txt !\r\no  RFC 1834 (WHOIS++ Introduction);\r\no  RFC 1875 (UNINETT PCA Policy) -- based on PEM.\r\n\r\nIt might therefore perhaps be useful to perform a RFC 4450 like\r\n'experiment' for Informational and Experimental RFCs as well.\r\n\r\n\r\n(4)\r\n\r\nThe restriction in the RFC 4450 effort on Proposed Standards\r\ndetracts from the fact that there are [Full] Standard RFCs as\r\nwell which are clearly outdated, or of questionable quality and/or\r\nprecision.\r\nMy personal (incomplete) hot list of candidates comprises:\r\n     STDs 15, 16, 17, 19, 35, 40, 42, 44, 49\r\n(Other legacy Standards doubtlessly should be updated, e.g.\r\nSTDs 5, 7, 13.)\r\n\r\nNote: In particular the situation with STDs 16+17 is annoying.\r\n      Replacements are established, but vendors do not switch\r\n      to SMIv2 and the newer MIBs (and do not offer SNMPv3,\r\n      with its improved security features!) because these old\r\n      specifications are still listed as Standard.\r\n\r\nI also strongly suspect that there are a few Draft Standard RFCs\r\nthat might be considered outdated.\r\n\r\nIt therefore might be worth repeating the RFC 4450 'experiment'\r\nfor Draft and Full Standards as well.", "correct_text": "[see above]", "notes": "From Eliot Lear <lear@cisco.com>\r\n\r\nAlfred,\r\n\r\nThanks for taking the time to read the document.  I'd like to encourage\r\nyou to share your comments with the newtrk working group.  You can find\r\ninformation on how to subscribe by going to http://www.ietf.org and\r\nclicking on \"Working Groups\".\r\n\r\nAs to your specific comments...\r\n\r\nAlfred ? wrote:\r\n> Hello,\r\n> I'd like to send you a few comments on the recently \r\n> published RFC 4450 (Cruft Removal) authored by you.\r\n>\r\n> First of all, thanks for your effort!\r\n>\r\n> After reading the RFC and looking into the changes\r\n> performed to rfcxx00.txt, I noticed a few issues. \r\n>\r\n>\r\n> (1)\r\n>\r\n> Near the top of page 3, section 3 of RFC 4450 states the\r\n> reasons for removal from the list -- i.e. *not* moving\r\n> to HISTORIC state:\r\n>   o  RFC 1584  -- an expected future dependency;          \r\n>   o  RFC 1755  -- believed to be actively in use.         \r\n>\r\n> Nevertheless, these two RFCs have been moved to HISTORIC\r\n> status along with the publication of RFC 4450, as can be       \r\n> seen in rfcxx00.txt .\r\n> This is quite surprising. (Perhaps, you know what happened.)\r\n>\r\n> Preferrably, the final RFC text would better have been     \r\n> coordinated with the actual Standards Actions performed --\r\n> for example, by addition of an IESG statement explaining the\r\n> deviation from the text.\r\n>\r\n\r\nThere was intended to be no deviation from the text.  The RFC Editor is\r\nalso the one who keeps track of how specifications are classified.       \r\n>\r\n> (2)\r\n>\r\n> Due to the 'numeric limitation' applied (restriction to RFCs\r\n> with numbers in the range ~700...2000) there are now a couple\r\n> of RFCs that have lost their 'normative background'.\r\n>\r\n> For example, the higher level SNA MIBs (RFCs 2051, (2155->)2455,\r\n> 2456, 2457, and 2582) more or less depend on the now deprecated\r\n> basic SNA node MIBs, RFCs (1665->)1666 and 1747.  [ \"xx->yy\"\r\n> is my shorthand notation for \"RFC xx obsoleted by RFC yy\". ]\r\n> Arguably, in this case, these dependant RFCs might be considered\r\n> candidates for a move to HISTORIC as well.\r\n> But there certainly are other cases as well (I have not yet\r\n> checked all the details).\r\n>\r\n> It therefore should perhaps be considered to repeat the\r\n> RFC 4450 'experiment' with an extended numeric range of RFCs,\r\n> e.g. up to RFC 2500.\r\n>\r\n\r\nI believe the problem you refer to would occur no matter what point we\r\nstop.  Also, at this time the normative limitation is being reconsidered.\r\n\r\n>      \r\n> (3)\r\n>\r\n> On the other hand, the restriction to Standards Track documents      \r\n> has other undesired implications:\r\n>\r\n> a) In the past, usually at least an Experimental RFC has been\r\n> published as a first try for a new protocol (or an Informational\r\n> RFC, in the case of a third-party protocol), before a Standards\r\n> Track version has been developed.  Unfortunately, in this process\r\n> it obviously has been avoided very often to formally OBSOLETE\r\n> the predecessor RFC[s] when the Standards Track version has been\r\n> published.  (Similar undue 'politeness' can be observed, e.g.,\r\n> on the transition path of MIBs from SMIv1 to SMIv2.)\r\n> Caused by RFC 4450 we now have non-deprecated RFCs predating\r\n> RFCs moved to HISTORIC state.\r\n> (The example instances I've been aware of at first glance, though\r\n> still being listed as EXPERIMENTAL in the RFC index, fortunately\r\n> already had been removed in the past from the 'Experimental RFCs'\r\n> Section of rfcxx00.txt .)\r\n> It would be very useful, for clarity, to move these RFCs to\r\n> HISTORIC status as well.\r\n> \r\n> b) There are 'companion documents' to Standards Track RFCs that\r\n> have been published as Informational RFCs for various (legitimate)\r\n> reasons.  These RFCs are outdated with their respective related\r\n> specifications, and as such, for clarity, should better be moved\r\n> to HISTORIC status as well.\r\n> \r\n\r\nI think it's a matter of how you want to use the marking of \"HISTORIC\".\r\nI apply it only to specifications that are only on the standards track.\r\nYou are correct that these docs are related, and the ISD effort would\r\nprobably merge them, but it's not clear to me how that would affect status.\r\n> For example, IMHO the following Informational and Experimental RFCs,\r\n> being closely related to RFCs that now have been deprecated, should\r\n> be considered candidates for deprecation (being made HISTORIC) as\r\n> well, for clarity, consistency, and/or historical context:\r\n>\r\n> o  RFC 1477 (IDPR Introduction);\r\n> o  RFC 1482 (NSFNET Policy-Based Routing Database) -- IDPR related;    \r\n> o  RFC 1585 (MOSPF Analysis and Experience) -- depending on RFC 1584;\r\n> o  RFC 1593 (SNA APPN Node MIB) -- 1st ed., eff.->2155->4255;\r\n> o  RFC 1634 (IPX over WAN Media) -- successor to RFC 1551, the siblings\r\n>             of which (RFCs 1552 and 1553) have been made HISTORIC;\r\n> o  RFC 1791 (TCP+UDP over IPX);     \\  both still in\r\n> o  RFC 1792 (TCP/IPX MIB);          /  rfcxx00.txt !\r\n> o  RFC 1834 (WHOIS++ Introduction);\r\n> o  RFC 1875 (UNINETT PCA Policy) -- based on PEM.\r\n> \r\n> It might therefore perhaps be useful to perform a RFC 4450 like\r\n> 'experiment' for Informational and Experimental RFCs as well.\r\n> \r\n> \r\n> (4)\r\n> \r\n> The restriction in the RFC 4450 effort on Proposed Standards\r\n> detracts from the fact that there are [Full] Standard RFCs as\r\n> well which are clearly outdated, or of questionable quality and/or\r\n> precision.\r\n> My personal (incomplete) hot list of candidates comprises:\r\n>      STDs 15, 16, 17, 19, 35, 40, 42, 44, 49\r\n> (Other legacy Standards doubtlessly should be updated, e.g.\r\n> STDs 5, 7, 13.)\r\n>\r\n> Note: In particular the situation with STDs 16+17 is annoying.\r\n>       Replacements are established, but vendors do not switch\r\n>       to SMIv2 and the newer MIBs (and do not offer SNMPv3,\r\n>       with its improved security features!) because these old        \r\n>       specifications are still listed as Standard.\r\n>\r\n> I also strongly suspect that there are a few Draft Standard RFCs\r\n> that might be considered outdated.\r\n> \r\n> It therefore might be worth repeating the RFC 4450 'experiment'  \r\n> for Draft and Full Standards as well.\r\n> \r\n\r\nAnd you might want to run that experiment.  We had to start somewhere.\r\nThere is clearly more cruft.\r\n\r\nThanks,\r\n\r\nEliot\r\n\r\nfrom pending", "submit_date": "2006-03-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "777", "doc-id": "RFC4234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4", "orig_text": "   A range of alternative numeric values can be specified compactly,\r\n   using dash (\"-\") to indicate the range of alternative values.  Hence:\r\n\r\n         DIGIT       =  %x30-39\r\n\r\n   is equivalent to:\r\n\r\n         DIGIT       =  \"0\" / \"1\" / \"2\" / \"3\" / \"4\" / \"5\" / \"6\" /\r\n\r\n                        \"7\" / \"8\" / \"9\"", "correct_text": "[not supplied]", "notes": "The word equivalent is correct only when US-ASCII character set is used, since:\r\n\r\nDIGIT       =  %x30-39 ; \r\nmeans any hexadecimal value between 0x30 and 0x39, \r\n\r\nwhile\r\n\r\nDIGIT       =  \"0\" / \"1\" / \"2\" / \"3\" / \"4\" / \"5\" / \"6\" / \"7\" / \"8\" / \"9\" ; \r\nmeans any digit from 0 thru 9.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nAs per Note in Section 2.3:\r\n\r\n      ABNF strings are case-insensitive and the character set for these\r\n      strings is us-ascii.\r\n\r\nSo these 2 representations *are* equivalent.\r\n", "submit_date": "2006-09-18", "submitter_name": "Zoltan Ordogh", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "778", "doc-id": "RFC4234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "In Appendix B.1, it says:", "orig_text": "         CHAR           =  %x01-7F\r\n                                ; any 7-bit US-ASCII character,\r\n                                ;  excluding NUL", "correct_text": "[see below]", "notes": "NUL is not defined.\r\n\r\nSuggestions:\r\n(1)\r\nRe-write the document in a character-encoding-independent manner.\r\n(2)\r\nAdd definition of NUL (or NULL) as terminating null character - watch =\r\nout for character encoding!\r\n(3)\r\nAdd definition of NOTNULL as any character but terminating null =\r\ncharacter - watch out for character encoding!\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nNUL is defined in US-ASCII.\r\n", "submit_date": "2006-09-18", "submitter_name": "Zoltan Ordogh", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "779", "doc-id": "RFC4133", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2", "orig_text": " [RFCYYYY]     Tesink, K. and R. Fox, \"A Uniform Resource Name (URN) \r\n               Namespace for the CLEI Code\", RFC YYYY, August 2005.\r\n\r\n", "correct_text": " [RFC4152]     Tesink, K. and R. Fox, \"A Uniform Resource Name (URN)\r\n               Namespace for the CLEI Code\", RFC 4152, August 2005.", "notes": "", "submit_date": "2005-09-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "780", "doc-id": "RFC4235", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\r\n    xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\r\n     xsi:schemaLocation=\"urn:ietf:params:xml:ns:dialog-info\"\r\n     version=\"1\" state=\"full\">\r\n", "correct_text": "   <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\r\n    xmlns:xsi=\" <http://www.w3.org/2001/XMLSchema-instance>\r\nhttp://www.w3.org/2001/XMLSchema-instance\"\r\n     xsi:schemaLocation=\"urn:ietf:params:xml:ns:dialog-info\"\r\n     version=\"1\" state=\"full\" entity=\"sip:alice@example.com\">", "notes": "According to the schema in section 4.4 the attribute \"entity\" must appear on\r\nelement \"dialog-info\".\r\n\r\nfrom pending", "submit_date": "2007-01-14", "submitter_name": "Nicolas-Peter Pohland", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "781", "doc-id": "RFC4235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "          <local>\r\n            <target uri=\"sip:alice@pc33.example.com\"/>\r\n              <param pname=\"+sip.rendering\" pval=\"yes\"/>\r\n          </local>", "correct_text": "           <local>\r\n            <target uri=\"sip:alice@pc33.example.com\">\r\n              <param pname=\"+sip.rendering\" pval=\"yes\"/>\r\n            </target>\r\n          </local>", "notes": "The <param> element must be enclosed by the <target> element.\r\n\r\nfrom pending", "submit_date": "2007-01-14", "submitter_name": "Nicolas-Peter Pohland", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "782", "doc-id": "RFC2250", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": " Payload Type: Distinct payload types should be assigned\r\n          for video elementary streams and audio elementary streams.\r\n          See [4] for payload type assignments.\r\n\r\n        M bit:  For video, set to 1 on packet containing MPEG frame\r\n          end code, 0 otherwise.  For audio, set to 1 on first packet of\r\n          a \"talk-spurt,\" 0 otherwise.\r\n\r\n        PT:  MPEG video or audio stream ID.\r\n\r\n", "correct_text": "[see notes]", "notes": "Payload Type and PT mean the same in RTP header\r\nSo, there exists a repetition.\r\n\r\nfrom pending", "submit_date": "2005-09-26", "submitter_name": "Vishal B S", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "830", "doc-id": "RFC4342", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   The sender's measurement of the round-trip time uses the Elapsed Time\r\n   and/or Timestamp Echo option contained in feedback packets, as\r\n   described in Section 8.2. The Elapsed Time option is required, while\r\n   the Timestamp Echo option is not.  The sender maintains an average\r\n   round-trip time heavily weighted on the most recent measurements.", "correct_text": "   The sender's measurement of the round-trip time uses DCCP's mechanisms\r\n   for round-trip time measurement.  This includes Elapsed Time and/or\r\n   Timestamp Echo options.  As described in Section 8.2, feedback packets\r\n   must carry an Elapsed Time option; Timestamp Echo is optional.\r\n   The sender maintains an average round-trip time heavily weighted on the\r\n   most recent measurements.  Senders MAY use any available round-trip time\r\n   measurements, including from the initial Request-Response packet exchange,\r\n   to maintain this average.  This differs from [RFC 3448], which constrains\r\n   round-trip time measurements to feedback packets only.", "notes": "Clarification of round-trip time measurement.\r\n\r\nReported By: Eddie Kohler and Sally Floyd, from Gerrit Renker and Arjuna Sathiaseelan \r\n\r\nfrom pending", "submit_date": "2007-02-07", "submitter_name": "Eddie Kohler", "verifier_id": "", "verifier_name": "", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "783", "doc-id": "RFC4234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": " The following clarifications apply to the meta-grammar in section 4.\r\n\r\na) Near the bottom of page 10, the rule:\r\n\r\n         repetition     =  [repeat] element\r\n\r\n   should say:\r\n\r\n|        repetition     =  ( [repeat] element ) / option\r\n\r\n   At the top of page 11, the rule:\r\n\r\n         element        =  rulename / group / option /\r\n                           char-val / num-val / prose-val\r\n\r\n   should say:\r\n\r\n|        element        =  rulename / group /\r\n                           char-val / num-val / prose-val\r\n\r\n   These changes have the effect to formally disallow\r\n   a <repeat> element in front of an <option>\r\n   -- a senseless construct formerly unexpectedly allowed.\r\n\r\nb) On page 11, the last rule:\r\n\r\n         prose-val      =  \"<\" *(%x20-3D / %x3F-7E) \">\"\r\n                               ; bracketed string of SP and VCHAR\r\n                               ;  without angles\r\n                               ; prose description, to be used as\r\n                               ;  last resort\r\n   should say:\r\n\r\n         prose-val      =  \"<\" *(%x20-3D / %x3F-7E) \">\"\r\n|                              ; bracketed string of:\r\n|                              ;  SP and VCHAR without closing angle\r\n                               ; prose description, to be used as\r\n                               ;  last resort\r\n\r\n   This change aligns the comment with the formal rule.\r\n", "correct_text": "[see above]  ", "notes": "from pending\n --VERIFIER NOTES-- \nPeter: The authors have consensus that these are stylistic issues and therefore are not errors.", "submit_date": "2005-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2626", "doc-id": "RFC5279", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "", "correct_text": "", "notes": "   Furthermore, the second example presented in Section 3 of RFC 5279\r\n   does not precisely match the pattern indicated in the above clause;\r\n   instead, it tries to suggest that\r\n\r\n      urn:3gpp:acme.foo-serv       \r\n\r\n   defines a '3gpp' URN\r\n\r\n      ... identified by the \"3gpp-urn\" value \"acme\".\r\n\r\n   This contradiction seems to be a hint that the authors indeed\r\n   want to define a structured NSS with <3gpp-urn> being the most\r\n   significant part, and the period character used to separate it\r\n   from a potentially following more specific part of the '3gpp' URN.\r\n   Yet, there's no syntax definition in the RFC that would support\r\n   this precisely.\r\n", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2379", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n missing comma, causing possible mis-interpretation\r\n\r\n\r\nThe last sentence of the second paragraph of Section 4.2,\r\non page 12, says:\r\n\r\n          [...].  The HMAC is then calculated over the entire MIKEY\r\n   message, excluding the MAC field using auth_key as described in [2]\r\n   section 5.2, and then stored within the MAC field.", "correct_text": "It should say:\r\n\r\n          [...].  The HMAC is then calculated over the entire MIKEY\r\n|  message, excluding the MAC field, using auth_key as described in [2]\r\n   section 5.2, and then stored within the MAC field.\r\n\r\nor perhaps even better and clearer:\r\n\r\n|         [...].  The HMAC is then calculated using auth_key, over the\r\n|  entire MIKEY message, excluding the MAC field, as described in [2]\r\n   section 5.2, and then stored within the MAC field.", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "831", "doc-id": "RFC4314", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "The MYRIGHTS command returns the set of rights that the user has to\r\nmailbox in an untagged MYRIGHTS reply.\r\n", "correct_text": "The MYRIGHTS command returns the set of rights that the user has to\r\nthe mailbox in an untagged MYRIGHTS reply.\r\n", "notes": "from pending", "submit_date": "2005-12-31", "submitter_name": "Arnaud Taddei", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "832", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "I would like to show you an ambiguity in RFC 3261.\r\n\r\nThe ABNF for SIP in RFC 3261 page 227 defines header Accept as \r\n\"Accept = \"Accept\" HCOLON [accept-range *(COMMA accept-range)].\r\n\r\nExpanding this form we have:\r\n\r\nAccept = \"Accept\" HCOLON [( (...) *(SEMI m-parameter) *(SEMI \r\naccept-param) ) *(COMMA accept-range)]\r\n\r\nFor example we can have\r\n\r\nAccept: \r\napplication/sdp;m_extension_parameter=value1;accept_extension_param=value2;q=0.5\r\nWe know from RFC 3261 that q is an accept-param.\r\nWe don't know how to consider the first two unknown parameters: how to \r\ndistinguish from m-parameter and accept-param?\r\n\r\nWhile in other cases RFC 3261 shows the rules to solve ambiguities (for \r\nexample how to consider the parameters in a Contact URI if the URI is \r\nnot enclosed in angular brackets) I have not found any suggestion for \r\nthis specific case in RFC 3261.", "correct_text": "[not submitted]", "notes": "from pending", "submit_date": "2006-01-11", "submitter_name": "Marco Ambu", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "833", "doc-id": "RFC4778", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "(2)  Section 2.1.2 -- typo\r\n\r\nThe final paragraph of Section 2.1.2, on page 9, says:\r\n\r\n|  How ISPs manage these logins vary greatly, although many of the\r\n   larger ISPs employ some sort of AAA mechanism to help automate\r\n   privilege-level authorization and utilize the automation to bypass\r\n   the need for a second authentication step.  [...]\r\n\r\nIt should say:\r\n                                   vvv\r\n|  How ISPs manage these logins varies greatly, although many of the\r\n   larger ISPs employ some sort of AAA mechanism to help automate\r\n   privilege-level authorization and utilize the automation to bypass\r\n   the need for a second authentication step.  [...]\r\n\r\n\r\n(3)  Section 2.2 -- typo\r\n\r\nThe first paragraph of Section 2.2, on page 10, says:\r\n\r\n                         [...].  Note that while many of the security\r\n   concerns and practices are the same for OOB management and in-band\r\n   management, most ISPs prefer an OOB management system, since access\r\n|  to the devices that make up this management network are more\r\n   vigilantly protected and considered to be less susceptible to\r\n   malicious activity.\r\n\r\nIt should say:\r\n\r\n                         [...].  Note that while many of the security\r\n   concerns and practices are the same for OOB management and in-band\r\n   management, most ISPs prefer an OOB management system, since access\r\n|  to the devices that make up this management network is more\r\n   vigilantly protected and considered to be less susceptible to\r\n   malicious activity.\r\n\r\n\r\n(4)  Section 2.2.2 -- typo, and mis-wording\r\n\r\n(4a)\r\nWithin Section 2.2.2, the 4th paragraph on page 13 says:\r\n\r\n                                             [...].  Most large ISPs\r\n   have multiple SNMP systems accessing their routers so it takes more\r\n|  then one maintenance period to get all the strings fixed in all the\r\n   right systems.  SNMP RW is not used and is disabled by configuration.\r\n     ^\r\nIt should say:\r\n\r\n                                             [...].  Most large ISPs\r\n   have multiple SNMP systems accessing their routers so it takes more\r\n|  than one maintenance period to get all the strings fixed in all the\r\n   right systems.  SNMP RW is not used and is disabled by configuration.\r\n\r\n(4b)\r\nThe next (5th) paragraph on page 13 says:\r\n\r\n   Access control is strictly enforced for infrastructure devices by\r\n|  using stringent filtering rules.  A limited set of IP addresses are\r\n   allowed to initiate connections to the infrastructure devices and are\r\n|  specific to the services to which they are to limited (i.e., SSH and\r\n   SNMP).\r\n                                             ^^^^\r\nI suspect that it was intended to say:\r\n\r\n   Access control is strictly enforced for infrastructure devices by\r\n|  using stringent filtering rules.  A limited set of IP addresses is\r\n|  allowed to initiate connections to the infrastructure devices, and\r\n|  these addresses are specifically limited to the respective services\r\n|  (i.e., SSH and SNMP).\r\n\r\n(or use similar wording).\r\n\r\n\r\n(5)  Section 2.2.3 -- word twister\r\n\r\nIn Section 2.2.3, on page 15, the 3rd bullet says:\r\n\r\n   o  Data Origin Authentication - Management traffic is strictly\r\n      filtered to allow only specific IP addresses to have access to the\r\n|     infrastructure devices.  This does not alleviate risk the from\r\n      spoofed traffic, although when combined with edge filtering using\r\n      BCP38 [RFC2827] and BCP84 [RFC3704] guidelines (discussed in\r\n      Section 2.5), then the risk of spoofing is mitigated, barring a\r\n      compromised internal system.  [...]\r\n\r\nIt should say:\r\n\r\n   o  Data Origin Authentication - Management traffic is strictly\r\n      filtered to allow only specific IP addresses to have access to the\r\n|     infrastructure devices.  This does not alleviate the risk from\r\n      spoofed traffic, although when combined with edge filtering using\r\n      BCP38 [RFC2827] and BCP84 [RFC3704] guidelines (discussed in\r\n      Section 2.5), then the risk of spoofing is mitigated, barring a\r\n      compromised internal system.  [...]\r\n\r\n\r\n(6)  Section 2.3 -- typo\r\n\r\nThe 1st sentence of Section 2.3, on top of page 16, says:\r\n\r\n   This section refers to how traffic is handled that traverses the\r\n|  network infrastructure device.  [...]\r\n\r\nIt should say:\r\n\r\n   This section refers to how traffic is handled that traverses the\r\n|  network infrastructure devices.  [...]\r\n                                ^\r\n\r\n(7)  Section 2.3.4 -- typo\r\n\r\nThe last paragraph of Section 2.3.4, on page 18, says:\r\n\r\n                                        [...].  One such example is at\r\n|  edge boxes, where up to 1000 T1s connecting into a router with an\r\n   OC-12 (Optical Carrier) uplink.  [...]\r\n                                           ^^^\r\nIt should say:\r\n\r\n                                        [...].  One such example is at\r\n|  edge boxes, where up to 1000 T1s connect into a router with an OC-12\r\n   (Optical Carrier) uplink.  [...]\r\n\r\n\r\n(8)  Section 2.5.2 -- typos\r\n\r\n(8a)\r\nThe first paragraph of Section 2.5.2, on page 24, says:\r\n\r\n   Images and configurations are stored on specific hosts that have\r\n   limited access.  All access and activity relating to these hosts are\r\n|  authenticated and logged via AAA services.  When uploaded/downloading\r\n   any system software or configuration files, either TFTP, FTP, or SCP\r\n   can be used.  Where possible, SCP is used to secure the data transfer\r\n   and FTP is generally never used.  All SCP access is username/password\r\n   authenticated but since this requires an interactive shell, most ISPs\r\n   will use shared key authentication to avoid the interactive shell.\r\n   While TFTP access does not have any security measures, it is still\r\n   widely used, especially in OOB management scenarios.  Some ISPs\r\n|  implement IP-based restriction on the TFTP server, while some custom\r\n   written TFTP servers will support MAC-based authentication.  The\r\n   MAC-based authentication is more common when using TFTP to bootstrap\r\n   routers remotely.\r\n\r\nIt should say:\r\n\r\n   Images and configurations are stored on specific hosts that have\r\n   limited access.  All access and activity relating to these hosts are\r\n|  authenticated and logged via AAA services.  When uploading /\r\n   downloading any system software or configuration files, either TFTP,\r\n   FTP, or SCP can be used.  Where possible, SCP is used to secure the\r\n   data transfer and FTP is generally never used.  All SCP access is\r\n   username/password authenticated but since this requires an\r\n   interactive shell, most ISPs will use shared key authentication to\r\n   avoid the interactive shell.  While TFTP access does not have any\r\n   security measures, it is still widely used, especially in OOB\r\n|  management scenarios.  Some ISPs implement IP-based restrictions on\r\n   the TFTP server, while some custom written TFTP servers will support\r\n   MAC-based authentication.  The MAC-based authentication is more\r\n   common when using TFTP to bootstrap routers remotely.\r\n\r\n(8b)\r\nThe second paragraph of Section 2.5.2, on page 24, says:\r\n\r\n   [...]                      v     vv\r\n|  In at least one environment these, tools are Kerberized to take\r\n   advantage of automated authentication (not confidentiality).\r\n   'Rancid' is one popular publicly available tool for detecting\r\n   configuration and system changes.\r\n\r\nIt should say:\r\n\r\n   [...]                      vv     v\r\n|  In at least one environment, these tools are Kerberized to take\r\n   advantage of automated authentication (not confidentiality).\r\n   'Rancid' is one popular publicly available tool for detecting\r\n   configuration and system changes.\r\n\r\n\r\n(9)  Appendix A.2 -- typo\r\n\r\nThe second bullet in Appendix A.2, on page 34, says:\r\n                             vvvvvvvvvv\r\n|  o  IP Source Route Option can allows attackers to establish stealth\r\n      TCP connections.\r\n\r\nIt should say:\r\n\r\n|  o  IP Source Route Option can allow attackers to establish stealth\r\n      TCP connections.", "correct_text": "[not submitted]", "notes": "Merike Kaeo wrote:\r\n\"The spelling/typos I'm not so sure make that much of a difference for anyone reading them and would prefer that they not be used.\"\r\n\r\nfrom pending", "submit_date": "2007-02-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Merike Kaeo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "834", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "E.4", "orig_text": "   1) C-client >= C-server\r\n   2) C-client - C-server <= s\r\n   3) Check that HOTP client is valid HOTP(K,C-Client)\r\n   4) If true, the server sets C to C-client + 1 and client is\r\n      authenticated                           ^^^\r\n                              ^^^             ^^^", "correct_text": "   1) C-client >= C-server\r\n   2) C-client - C-server <= s\r\n|  3) Check that HOTP client is valid HOTP(K,C-client)\r\n|  4) If true, the server sets C-server to C-client + 1 and client is\r\n      authenticated", "notes": "Lines up with Errata ID 2402.\r\n\r\nThe enumeration in Appendix E.4, on page 34, contains inconsistent\r\nvariable namings (cf. [Errata ID 2402]!).\r\nTo make it self-consistent, change as detailed.", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2410", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix III", "orig_text": "   Mankins, David, Dan Franklin, and Buzz Owen, \"Directory Oriented FTP\r\n   Commands\", RFC 776, BBN, December 1980.\r\n", "correct_text": "   Mankins, David, Dan Franklin, and Buzz Owen, \"Directory Oriented FTP\r\n   Commands\", RFC 775, BBN, December 1980.\r\n", "notes": "Typo.\r\nRFC 775 \"Directory Oriented FTP Commands\"\r\nRFC 776 \"Assigned Numbers\"", "submit_date": "2010-08-03", "submitter_name": "Anthony Bryan", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2411", "doc-id": "RFC959", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "      type\r\n\r\n         The data representation type used for data transfer and\r\n         storage.  Type implies certain transformations between the time\r\n         of data storage and data transfer.  The representation types\r\n         defined in FTP are described in the Section on Establishing\r\n         Data Connections.\r\n", "correct_text": "      type\r\n\r\n         The data representation type used for data transfer and\r\n         storage.  Type implies certain transformations between the time\r\n         of data storage and data transfer.  The representation types\r\n         defined in FTP are described in the Section on Data Representation\r\n         and Storage.\r\n", "notes": "The representation types defined in FTP are described in Section 3.1, Data Representation and Storage, or more specifically Section 3.1.1, Data Types.", "submit_date": "2010-08-03", "submitter_name": "Anthony Bryan", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "784", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "                              +---------+ ---------\\      active OPEN  \r\n                              |  CLOSED |            \\    -----------  \r\n                              +---------+<---------\\   \\   create TCB  \r\n                                |     ^              \\   \\  snd SYN    \r\n                   passive OPEN |     |   CLOSE        \\   \\           \r\n                   ------------ |     | ----------       \\   \\         \r\n                    create TCB  |     | delete TCB         \\   \\       \r\n                                V     |                      \\   \\     \r\n                              +---------+            CLOSE    |    \\   \r\n                              |  LISTEN |          ---------- |     |  \r\n                              +---------+          delete TCB |     |  \r\n                   rcv SYN      |     |     SEND              |     |  \r\n                  -----------   |     |    -------            |     V  \r\n +---------+      snd SYN,ACK  /       \\   snd SYN          +---------+\r\n |         |<-----------------           ------------------>|         |\r\n |   SYN   |                    rcv SYN                     |   SYN   |\r\n |   RCVD  |<-----------------------------------------------|   SENT  |\r\n |         |                    snd ACK                     |         |\r\n |         |------------------           -------------------|         |\r\n +---------+   rcv ACK of SYN  \\       /  rcv SYN,ACK       +---------+\r\n   |           --------------   |     |   -----------                  \r\n   |                  x         |     |     snd ACK                    \r\n   |                            V     V                                \r\n   |  CLOSE                   +---------+                              \r\n   | -------                  |  ESTAB  |                              \r\n   | snd FIN                  +---------+                              \r\n   |                   CLOSE    |     |    rcv FIN                     \r\n   V                  -------   |     |    -------                     \r\n +---------+          snd FIN  /       \\   snd ACK          +---------+\r\n |  FIN    |<-----------------           ------------------>|  CLOSE  |\r\n | WAIT-1  |------------------                              |   WAIT  |\r\n +---------+          rcv FIN  \\                            +---------+\r\n   | rcv ACK of FIN   -------   |                            CLOSE  |  \r\n   | --------------   snd ACK   |                           ------- |  \r\n   V        x                   V                           snd FIN V  \r\n +---------+                  +---------+                   +---------+\r\n |FINWAIT-2|                  | CLOSING |                   | LAST-ACK|\r\n +---------+                  +---------+                   +---------+\r\n   |                rcv ACK of FIN |                 rcv ACK of FIN |  \r\n   |  rcv FIN       -------------- |    Timeout=2MSL -------------- |  \r\n   |  -------              x       V    ------------        x       V  \r\n    \\ snd ACK                 +---------+delete TCB         +---------+\r\n     ------------------------>|TIME WAIT|------------------>| CLOSED  |\r\n                              +---------+                   +---------+\r\n\r\n                      TCP Connection State Diagram\r\n                               Figure 6.", "correct_text": "[not supplied]", "notes": "Compare with RFC 1122:\r\n\r\n\" 4.2.2.8  TCP Connection State Diagram: RFC-793 Section 3.2,\r\n    page 23\r\n\r\n    There are several problems with this diagram:\r\n\r\n    (a)  The arrow from SYN-SENT to SYN-RCVD should be labeled\r\n         with \"snd SYN,ACK\", to agree with the text on page 68\r\n         and with Figure 8.\"\r\n\r\nEither RFC1122 is wrong (in which case *it* needs an Errata entry), or\r\nRFC793 is wrong, in which case *it* needs an Errata entry.  They can't\r\nboth be right!\r\n\r\nBecause of the above protocol diagram change given in RFC1122 (and others\r\nin the same section), RFC1122 should also be mentioned as \"updating\"\r\nRFC793, and RFC793 should be documented as being \"updated by\" RFC1122.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nThe RFC Editor has been instructed to indicate in their database and web pages that RFC1122 updates RFC0793. This errata has hence been addressed.   ", "submit_date": "2006-09-22", "submitter_name": "Ian D. Allen", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "785", "doc-id": "RFC4235", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1", "orig_text": "      <?xml version=\"1.0\"?>\r\n      <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\r\n                   version=\"2\"\r\n                   state=\"full\"\r\n                   entity=\"sip:alice@example.com\">\r\n        <dialog id=\"as7d900as8\" call-id=\"a84b4c76e66710\"\r\n                local-tag=\"1928301774\" remote-tag=\"456887766\"\r\n                direction=\"initiator\">\r\n          <state>early</state>\r\n        </dialog>\r\n        <dialog id=\"as7d900as8\" call-id=\"a84b4c76e66710\"\r\n                local-tag=\"1928301774\" remote-tag=\"hh76a\"\r\n                direction=\"initiator\">\r\n          <state>early</state>\r\n        </dialog>\r\n      </dialog-info>", "correct_text": "      <?xml version=\"1.0\"?>\r\n      <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\r\n                   version=\"2\"\r\n                   state=\"full\"\r\n                   entity=\"sip:alice@example.com\">\r\n        <dialog id=\"1000\" call-id=\"a84b4c76e66710\"\r\n                local-tag=\"1928301774\" remote-tag=\"456887766\"\r\n                direction=\"initiator\">\r\n          <state>early</state>\r\n        </dialog>\r\n        <dialog id=\"1001\" call-id=\"a84b4c76e66710\"\r\n                local-tag=\"1928301774\" remote-tag=\"hh76a\"\r\n                direction=\"initiator\">\r\n          <state>early</state>\r\n        </dialog>\r\n      </dialog-info>\r\n\r\n[[or something similar with the id values differing]]\r\n\r\nRationale:\r\n \r\nQuote from RFC 4235:\r\n \r\n\"4.1.1.  Dialog Element\r\n \r\n    ...\r\n \r\n   For a caller, the id is created when an INVITE request is sent.  When\r\n   a 1xx response with a tag, or a 2xx response is received, the dialog\r\n   is formally created.  The id remains unchanged.  However, if an\r\n   additional 1xx or 2xx is received, resulting in the creation of\r\n   another dialog (and resulting FSM), that dialog is allocated a new\r\n   id.\r\n\r\n    ...\"\r\n \r\nThe id of the dialog is a hash value of the call-id, local-tag and\r\nremote-tag of the dialog. Therefore, the values of the ids in the example MUST not be identical.", "notes": "from pending", "submit_date": "2007-01-15", "submitter_name": "Nicolas-Peter Pohland", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "786", "doc-id": "RFC4188", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)\r\n\r\nThere is a significant inconsistency in the newly introduced\r\nconformance information with respect to the new\r\n'dot1dStpPortPathCost32' object:\r\n\r\nThe  bridgeCompliance4188 MODULE-COMPLIANCE  macro\r\n(at the bottom of page 37 and the top of page 38) says:\r\n\r\n    GROUP   dot1dStpPortGroup2\r\n        DESCRIPTION\r\n           \"Implementation of this group is mandatory for\r\n            bridges that support the Spanning Tree Protocol.\"\r\n\r\n    GROUP   dot1dStpPortGroup3\r\n        DESCRIPTION\r\n           \"Implementation of this group is mandatory for bridges\r\n            that support the Spanning Tree Protocol and 32-bit path\r\n            costs.  In particular, this includes devices supporting\r\n            IEEE 802.1t and IEEE 802.1w.\"\r\n\r\nNow (see upper half of page 34), both dot1dStpPortGroup2 and\r\ndot1dStpPortGroup3 contain the object 'dot1dStpPortPathCost32'.\r\nThus the net result of the above text is that we have two\r\noverlapping but different requirements for that object, and\r\nthat the object 'dot1dStpPortPathCost' is not covered by\r\nthe bridgeCompliance4188 statement at all.\r\n\r\nBut, looking at the description clauses for dot1dStpPortPathCost\r\n(on top of page 22) and dot1dStpPortPathCost32 (on page 23)\r\nI conjecture that the original intent was to ALWAYS have\r\ndot1dStpPortPathCost instantiated in rows of the\r\ndot1dStpPortTable (as before, per RFC 1493), and to take\r\n(the new semantics of) the special (max.) value 65535 for\r\nthat object as an indication that dot1dStpPortPathCost32 has\r\nalso been instantiated in the respective row; therefore, I\r\nexpect that dot1dStpPortPathCost should be included in the\r\nconditionally mandatory groups named in bridgeCompliance4188.\r\n\r\nThe easiest way to remedy this inconsistency would be to modify\r\nthe OBJECTS list of the OBJECT-GROUP dot1dStpPortGroup2 by\r\nreplacing 'dot1dStpPortPathCost32' by 'dot1dStpPortPathCost'.\r\nBut then the definition of dot1dStpPortGroup2 would-be-word\r\nby word identical to the definition of dot1dStpPortGroup (!)\r\nand it might be better to replace 'dot1dStpPortGroup' for\r\n'dot1dStpPortGroup2' on the first line of the text fragment\r\ncited above (bottom of page 37).\r\n\r\nPerhaps, an OBJECT clause mentioning the new semantics of the\r\nmax. value for dot1dStpPortPathCost in the past-RFC1493\r\ncontext migth be appropriate as well.\r\n\r\nI think that a correction is needed for this issue and would\r\nlike to receive your comment before formally submitting an\r\nerrata note to the RFC editor.\r\n\r\na) Replace:\r\n\r\n    dot1dTpPortInFrames OBJECT-TYPE\r\n        ...\r\n        DESCRIPTION\r\n           \"The number of frames that have been received by this\r\n            port from its segment.  Note that a frame received on the\r\n            interface corresponding to this port is only counted by\r\n            this object if and only if it is for a protocol being\r\n            processed by the local bridging function, including\r\n            bridge management frames.\"\r\n\r\n   by:\r\n\r\n    dot1dTpPortInFrames OBJECT-TYPE\r\n        ...\r\n        DESCRIPTION\r\n           \"The number of frames that have been received by this\r\n            port from its segment.  Note that a frame received on\r\n            the interface corresponding to this port is counted by\r\n            this object if and only if it is consumed by the local\r\n            bridging function, including bridge management frames.\"\r\n\r\nb) Replace:\r\n\r\n    dot1dTpPortOutFrames OBJECT-TYPE\r\n        ...\r\n        DESCRIPTION\r\n           \"The number of frames that have been transmitted by this\r\n            port to its segment.  Note that a frame transmitted on\r\n            the interface corresponding to this port is only counted\r\n            by this object if and only if it is for a protocol being\r\n            processed by the local bridging function, including\r\n            bridge management frames.\"\r\n   by:\r\n\r\n    dot1dTpPortOutFrames OBJECT-TYPE\r\n        ...\r\n        DESCRIPTION\r\n           \"The number of frames that have been transmitted by this\r\n            port to its segment.  Note that a frame transmitted on\r\n            the interface corresponding to this port is counted by\r\n            this object if and only if it originates from a local\r\n            bridging function, including bridge management frames.\"\r\n", "correct_text": "[see above]\r\n", "notes": "Please correct me if this proposal does not match the original\r\nintent of these DESCRIPTIONs.\r\n(Concern: If the bridge is manageable, the management agent might\r\nreside on the bridge that in this case would have an IP address and\r\nperform the SNMP protocol stack and/or other IP protocols as well.\r\nIt might be the case that it was intended to include such locally\r\ndestined/originated packets of non-IEEE802.1D functions into the\r\nabove counters as well.\r\nImportant remark: IEEE802.1D clause 14.6.1.1.3, e.g., includes\r\n\"BPDUs, frames addressed to the Bridge as an end station, and\r\nframes that were submitted to the forwarding process\" into the\r\n'Frames Received' count! Therefore, the REFERENCE clauses pointing\r\nto that 802.1D clause might be considered inappropriate as well,\r\nfor both objects.)\r\n\r\n\r\nfrom pending", "submit_date": "2005-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "787", "doc-id": "RFC3404", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   There is opportunity for significant optimization here.  RFC 3404\r\n   defines that Additional Information section may be available.  In\r\n   this case the the SRV records may be returned as additional\r\n   information for terminal NAPTRs lookups (as well as the A records for\r\n   those SRVs).  This is a significant optimization.", "correct_text": "    There is opportunity for significant optimization here.  RFC 3403\r\n    defines that Additional Information section may be available.  In\r\n    this case the the SRV records may be returned as additional\r\n    information for terminal NAPTRs lookups (as well as the A records for\r\n    those SRVs).  This is a significant optimization.", "notes": "wrong reference to RFC 3404 (must be RFC 3403)\r\n\r\nfrom pending", "submit_date": "2006-10-05", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "788", "doc-id": "RFC4235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "          <state reason=\"cancelled\">terminated</state>\r\n \r\n          <state reason=\"replaced\">terminated</state>\r\n \r\n          <state reason=\"replaced\">confirmed</state>\r\n \r\n          <state reason=\"remote-bye\">terminated</state>", "correct_text": "          <state event=\"cancelled\">terminated</state>\r\n \r\n          <state event=\"replaced\">terminated</state>\r\n \r\n          <state event=\"replaced\">confirmed</state>\r\n \r\n          <state event=\"remote-bye\">terminated</state>", "notes": "The \"state\" element does not have a \"reason\" attribute. It is called \"event\"\r\nby definition in section 4.1.2. and the schema in 4.4.\r\n\r\nfrom pending", "submit_date": "2007-01-15", "submitter_name": "Nicolas-Peter Pohland", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "789", "doc-id": "RFC2516", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "   While the AC-Cookie is useful against some DOS attacks, it can not\r\n   protect against all DOS attacks and an Access Concentrator MAY employ\r\n   other means to protect resources.\r\n\r\n   While the AC-Cookie is useful against some DOS attacks, it can not\r\n   protect against all DOS attacks and an Access Concentrator MAY employ\r\n   other means to protect resources.", "correct_text": "   While the AC-Cookie is useful against some DOS attacks, it can not\r\n   protect against all DOS attacks and an Access Concentrator MAY employ\r\n   other means to protect resources.", "notes": "sentence is repeated.", "submit_date": "2006-10-06", "submitter_name": "Saravanan Kesavan", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "846", "doc-id": "RFC4795", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": "as described in Section 4.2", "correct_text": "as described in Section 4.1\r\n\r\n\r\nThe description of the Tentative bit should read as follows:\r\n\r\n   T       Tentative.  The 'T'entative bit is set in a response if the\r\n           responder is authoritative for a UNIQUE name, but has not yet\r\n           verified the uniqueness of the name, and it is cleared in all\r\n           other cases.  A responder MUST ignore the 'T' bit in a query,\r\n           if set.  A response with the 'T' bit set is silently\r\n           discarded by the sender, except if it is received in reply to\r\n           a uniqueness query issued according to the rules in Section\r\n           4.1, in which case, a conflict has been detected and that\r\n           conflict MUST be resolved as described in Section 4.1.", "notes": "from pending", "submit_date": "2007-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bernard Aboba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "790", "doc-id": "RFC4641", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1.2", "orig_text": "   Double signature ZSK rollover involves three stages as follows:\r\n\r\n      ----------------------------------------------------------------\r\n      initial             new DNSKEY         DNSKEY removal\r\n      ----------------------------------------------------------------\r\n      SOA0                SOA1               SOA2\r\n      RRSIG10(SOA0)       RRSIG10(SOA1)      RRSIG11(SOA2)\r\n      RRSIG11(SOA1)\r\n\r\n      DNSKEY1             DNSKEY1            DNSKEY1\r\n      DNSKEY10            DNSKEY10           DNSKEY11\r\n      DNSKEY11\r\n      RRSIG1(DNSKEY)      RRSIG1(DNSKEY)     RRSIG1(DNSKEY)\r\n      RRSIG10(DNSKEY)     RRSIG10(DNSKEY)    RRSIG11(DNSKEY)\r\n      RRSIG11(DNSKEY)\r\n      ----------------------------------------------------------------\r\n\r\n                Double Signature Zone Signing Key Rollover", "correct_text": "   Double signature ZSK rollover involves three stages as follows:\r\n\r\n      ----------------------------------------------------------------\r\n      initial             new DNSKEY         DNSKEY removal\r\n      ----------------------------------------------------------------\r\n      SOA0                SOA1               SOA2\r\n      RRSIG10(SOA0)       RRSIG10(SOA1)      RRSIG11(SOA2)\r\n|                         RRSIG11(SOA1)\r\n\r\n      DNSKEY1             DNSKEY1            DNSKEY1\r\n      DNSKEY10            DNSKEY10           DNSKEY11\r\n|                         DNSKEY11\r\n      RRSIG1(DNSKEY)      RRSIG1(DNSKEY)     RRSIG1(DNSKEY)\r\n      RRSIG10(DNSKEY)     RRSIG10(DNSKEY)    RRSIG11(DNSKEY)\r\n|                         RRSIG11(DNSKEY)\r\n      ----------------------------------------------------------------\r\n\r\n                Double Signature Zone Signing Key Rollover", "notes": "The mis-alignment of the indicated 3 lines breaks the\r\nintended presentation of the procedure; cf. subsequent RFC text.\r\n\r\nThe initial report was corrected by Yue Luo 2007-11-16 so that \"RRSIG11\" in the last row is in \"New DNSKEY\" stage instead of \"initial\" stage.", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Olaf Kolkman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "791", "doc-id": "RFC4641", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "As the chain of\r\ntrust really is \"a chain\", there is not much sense in making one of\r\nthe keys in the chain several times larger then the others. ", "correct_text": "As the chain of\r\ntrust really is \"a chain\", there is not much sense in making one of\r\nthe keys in the chain several times larger than the others. ", "notes": "then -> than\r\n\r\nfrom pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "792", "doc-id": "RFC4641", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1.2", "orig_text": "   Making sure that the \"new DNSKEY\" phase lasts until the signature\r\n   expiration time of the data in initial version of the zone is\r\n   recommended. ", "correct_text": "   Making sure that the \"new DNSKEY\" phase lasts until the signature\r\n|  expiration time of the data in the initial version of the zone is\r\n   recommended.  ", "notes": "missing article\r\n\r\nfrom pending\r\n", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "793", "doc-id": "RFC4181", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.9", "orig_text": "\" ... .  Two point are worth reiterating:\"", "correct_text": " \" ... .  Two points are worth reiterating:\"", "notes": "Originally from Alfred Hoenes\r\n\r\nfrom pending", "submit_date": "2005-11-01", "submitter_name": "C. M. Heard", "verifier_id": "", "verifier_name": "C. M. Heard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "794", "doc-id": "RFC4181", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "\"... -- if the draft does not contains a verbatim copy ...\"", "correct_text": "\"... -- if the draft does not contain a verbatim copy ...\"", "notes": "Originally from Alfred Hoenes\r\n\r\nfrom pending", "submit_date": "2005-11-01", "submitter_name": "C. M. Heard", "verifier_id": "", "verifier_name": "C. M. Heard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "796", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.5", "orig_text": "       =2=    SHDSL optional wire-pair-2 (Not applicable to HDSL2)", "correct_text": "       =2=    SHDSL optional wire-pair-2 (Not applicable to HDSL2)\r\n                  and SHDSL.bis optional wire-pair-3 and wire-pair-4\r\n                  (not applicable to HDSL2 and 'classic' SHDSL)\r\n", "notes": "from pending", "submit_date": "2007-01-07", "submitter_name": "Clay Sikes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "797", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "SHDSL segment endpoints.  These profiles are defined in the\r\nhdsl2ShdslEndpointAlarmConfProfileTable.\r\n\r\nThe index value for this profile is a locally-unique ...", "correct_text": "SHDSL segment endpoints.  These profiles are defined in the\r\nhdsl2ShdslEndpointAlarmConfProfileTable.\r\n\r\nThe index value for these profiles is a locally-unique ...", "notes": "from pending", "submit_date": "2007-01-07", "submitter_name": "Clay Sikes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "798", "doc-id": "RFC4211", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Key Encipherment Keys, in the lower part of page 10, in the two (doubly indented) paragraphs explaining the components of 'agreeMAC', uses improper names for these components -- cf. the ASN.1 syntax for PKMACValue at the top of page 9. The RFC says:\r\n\r\n        vvvvvv\r\n        macAlg contains the algorithm identifying the method used to\r\n        compute the MAC value.\r\n\r\n        macValue contains the computed MAC value.\r\n        ^^^^^^^^\r\n\r\nIt should say (I propose to make use of hierarchical subfield\r\nnotation):\r\n\r\n        agreeMAC.algID  contains the algorithm identifying the method\r\n        used to compute the MAC value.\r\n\r\n        agreeMAC.value  contains the computed MAC value.\r\n\r\n\r\n", "correct_text": "[see above]     ", "notes": "\n --VERIFIER NOTES-- \nThe implication of doing the second level of indentation indicates that\r\nthese fields are in the type referenced by the agreeMac field.  Note that the same thing occurs just above for subsequentMessage.  The type definition occurred in the previous section 4.1.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2340", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "In the last paragraph on page 11 says:\r\n\r\n      identifier contains a name that the CA/RA can associate with the\r\n      requestor.  This will generally be either the DN of a certificate\r\n      or a text token passed and known to both the requestor and the\r\n      CA/RA.  ...", "correct_text": "identifier contains a name that the CA/RA can associate with the requestor.\r\nThis will generally be either a portion of either a subject name or subject\r\nalternative name (either from an existing certificate or from the\r\ncertificate request) or a text token passed and known to both the requestor\r\nand the CA/RA.  ", "notes": "The location of the DN material will vary based on the question of whether\r\nthis is an archive operator or a POP operation.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2342", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "In the first text line on page 15, says:\r\n\r\n   The fields of PEMParameter have the following meaning:\r\n                  ^\r\n\r\nIt should say:\r\n                  v\r\n   The fields of PBMParameter have the following meaning:", "correct_text": "[see above]     ", "notes": "Rationale: an OCR problem???\r\n\r\nChanged to editorial.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2380", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\nmissing article:\r\n\r\nThe last paragraph on page 13, i.e. the 2nd bullet in Section 5.2, says:\r\n\r\n   * Eavesdropping of other, transmitted keying information: DHHMAC\r\n     protocol does not explicitly transmit the TGK at all.  [...]", "correct_text": "It should say:\r\n\r\n|  * Eavesdropping of other, transmitted keying information: The DHHMAC\r\n     protocol does not explicitly transmit the TGK at all.  [...]", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2358", "doc-id": "RFC4683", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "The ASN.1 at the bottom of page 11 says:\r\n\r\n        SIM ::= SEQUENCE {\r\n            hashAlg          AlgorithmIdentifier,\r\n            authorityRandom  OCTET STRING,   -- RA-chosen random number\r\n                                             -- used in computation of\r\n                                             -- pEPSI\r\n|           pEPSI            OCTET STRING    -- hash of HashContent\r\n                                             -- with algorithm hashAlg\r\n        }\r\n\r\nIt should say:\r\n\r\n        SIM ::= SEQUENCE {\r\n            hashAlg          AlgorithmIdentifier,\r\n            authorityRandom  OCTET STRING,   -- RA-chosen random number\r\n                                             -- used in computation of\r\n                                             -- pEPSI\r\n|           pEPSI            OCTET STRING    -- hash of hash of\r\n|                                            -- HashContent with\r\n                                             -- algorithm hashAlg\r\n        }", "correct_text": "See above.", "notes": "Rationale:\r\n  PEPSI is an iterated hash; see Section 4.4 where the last\r\n  line on page 9 says,\r\n        where  PEPSI = H(H(P || R || SIItype || SII))\r\n                           -----------------v-------\r\n  and Section 5.2 for the definition of HashContent.", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2359", "doc-id": "RFC4683", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "At the bottom of page 12, Section 5.3 says:\r\n\r\n   id-regEPEPSI OBJECT IDENTIFIER ::= { id-pkip 3 }\r\n\r\nFor instance, a note should be added at the bottom of page 12:\r\n\r\n   id-regEPEPSI OBJECT IDENTIFIER ::= { id-pkip 3 }\r\n|\r\n|  where id-pkip is defined in [RFC4211].", "correct_text": "See above.", "notes": "The OID, 'id-pkip' is neither defined within RFC 4683 nor imported.\r\nEventually, I found it being defined in RFC 4211.\r\nThat should be made explicit in Section 5.3 of RFC 4683 !", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2361", "doc-id": "RFC4683", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.2", "orig_text": "The first entry in Section 11.2 (at the bottom of page 15) says:\r\n\r\n   [LDAPBIS STRPREP] Zeilenga, K., \"LDAP: Internationalized String\r\n                     Preparation\", Work in Progress.", "correct_text": "See below.", "notes": "Apparently, this should have been replaced by the proper quotation\r\nfor RFC 4518 from rfc-ref.txt.\r\n\r\nRationale: RFC 4518 has been published four months before RFC 4683!\r\n", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2363", "doc-id": "RFC4683", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A", "orig_text": "Near the bottom of page 18, the RFC says:\r\n\r\n|      -- The content of this type conforms to RFC 2279\r\n                                               ^^^^^^^^\r\nIt should say:\r\n\r\n|      -- The content of this type conforms to STD 63, RFC 3629", "correct_text": "See above.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2368", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "Within Section B.1.3.1, the last paragraph on page 16 is unexpectedly\r\npartially indented.\r\n\r\nThe RFC says:\r\n\r\n   OpInfo provides configuration data for the operation of GSAKMP\r\n       registration.  timeOut indicates the elapsed amount of time\r\n       before a sent message is considered to be misrouted or lost.  It\r\n       is specified as the timestamp type LifeDate, previously defined\r\n       in the core token.  terse informs a GC/KS whether the group\r\n       should be operated in terse (TRUE) or verbose (FALSE) mode.  The\r\n       optional timestamp field indicates whether a timestamp (TRUE) or\r\n       a nonce (FALSE) is used for anti-replay protection.  If the field\r\n       is absent, the use of nonces is the default mode for GSAKMP\r\n       registration.\r\n\r\nIt should say:\r\n\r\n   OpInfo provides configuration data for the operation of GSAKMP\r\n   registration.  timeOut indicates the elapsed amount of time before a\r\n   sent message is considered to be misrouted or lost.  It is specified\r\n   as the timestamp type LifeDate, previously defined in the core token.\r\n   terse informs a GC/KS whether the group should be operated in terse\r\n   (TRUE) or verbose (FALSE) mode.  The optional timestamp field\r\n   indicates whether a timestamp (TRUE) or a nonce (FALSE) is used for\r\n   anti-replay protection.  If the field is absent, the use of nonces is\r\n   the default mode for GSAKMP registration.", "correct_text": "It should say:\r\n\r\n   OpInfo provides configuration data for the operation of GSAKMP\r\n   registration.  timeOut indicates the elapsed amount of time before a\r\n   sent message is considered to be misrouted or lost.  It is specified\r\n   as the timestamp type LifeDate, previously defined in the core token.\r\n   terse informs a GC/KS whether the group should be operated in terse\r\n   (TRUE) or verbose (FALSE) mode.  The optional timestamp field\r\n   indicates whether a timestamp (TRUE) or a nonce (FALSE) is used for\r\n   anti-replay protection.  If the field is absent, the use of nonces is\r\n   the default mode for GSAKMP registration.", "notes": "", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2370", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\nSection B.5.4.2, on page 24, says:\r\n                                           v\r\n|  The GSAKMP protocol specification defined an interpretation of the\r\n   Logical Key Hierarchy (LKH) protocol as a rekey method.  [...]", "correct_text": "It should say:\r\n                                           v\r\n|  The GSAKMP protocol specification defines an interpretation of the\r\n   Logical Key Hierarchy (LKH) protocol as a rekey method.  [...]", "notes": "", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "847", "doc-id": "RFC4795", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "could be caused by coexistence", "correct_text": "could be caused by the coexistence", "notes": "from pending", "submit_date": "2007-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bernard Aboba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "848", "doc-id": "RFC4795", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "sent to an LLMNR multicast addresses defined in Section 2", "correct_text": "sent to one of the LLMNR multicast addresses defined in Section 2", "notes": "from pending", "submit_date": "2007-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bernard Aboba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "849", "doc-id": "RFC4795", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "TTL field in the IPV4 header MAY be set", "correct_text": "TTL in the IPv4 header MAY be set", "notes": "from pending", "submit_date": "2007-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bernard Aboba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "850", "doc-id": "RFC4795", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "The first paragraph should include an additional sentence:\r\n\r\n\"Responses for non-UNIQUE names are always sent with the 'T' bit clear.\"", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2007-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bernard Aboba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "896", "doc-id": "RFC4468", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "554 5.7.8 URL resolution requires trust relationship", "correct_text": "554 5.7.14 URL resolution requires trust relationship", "notes": "Incorrect Enhanced Status Code. See <http://www.iana.org/assignments/smtp-enhanced-status-codes> for more details.\r\n", "submit_date": "2007-04-11", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "919", "doc-id": "RFC4728", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "         When the Opt Data Len is greater than that required for\r\n         the fixed portion of the Route Error plus the necessary\r\n         Type-Specific Information as indicated by the Option Type\r\n         value in the option, the remaining octets are interpreted as\r\n         extensions.", "correct_text": "         When the Opt Data Len is greater than that required for\r\n         the fixed portion of the Route Error plus the necessary\r\n         Type-Specific Information as indicated by the Error Type\r\n         value in the option, the remaining octets are interpreted as\r\n         extensions.", "notes": "As can be seen from the context, the \"Type-Specific Information\" is\r\ndependent on the \"Error Type\" field value, not the \"Option Type\"\r\nfield value.", "submit_date": "2007-04-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2390", "doc-id": "RFC5246", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2.3.3", "orig_text": "   The additional authenticated data, which we denote as\r\n   additional_data, is defined as follows:\r\n\r\n      additional_data = seq_num + TLSCompressed.type +\r\n                        TLSCompressed.version + TLSCompressed.length;\r\n\r\n   where \"+\" denotes concatenation.\r\n\r\n   The aead_output consists of the ciphertext output by the AEAD\r\n   encryption operation.  The length will generally be larger than\r\n   TLSCompressed.length, but by an amount that varies with the AEAD\r\n   cipher.  Since the ciphers might incorporate padding, the amount of\r\n   overhead could vary with different TLSCompressed.length values.  Each\r\n   AEAD cipher MUST NOT produce an expansion of greater than 1024 bytes.\r\n   Symbolically,", "correct_text": "   The additional authenticated data, which we denote as\r\n   additional_data, is defined as follows:\r\n\r\n      additional_data = seq_num + TLSCompressed.type +\r\n                        TLSCompressed.version + TLSCompressed.length;\r\n\r\n   where \"+\" denotes concatenation.\r\n\r\n   The aead_output consists of the ciphertext output by the AEAD\r\n   encryption operation.  The length will generally be larger than\r\n   TLSCompressed.length, but by an amount that varies with the AEAD\r\n   cipher.  Each AEAD cipher MUST NOT produce an expansion of greater\r\n   than 1024 bytes.  Symbolically,", "notes": "I suggest leaving the sentence about padding out. The value for TLSCompressed.length is required by additional_data for both encryption and decryption. Therefore, it must be possible to determine the TLSCompressed.length from the ciphertext before decryption.\r\n\r\nIn practice this is done by subtracting the integrity check value length from the ciphertext length, where the integrity check value length is defined by each AEAD cipher separately. If the cipher incorporates variable padding, it is impossible to calculate the TLSCompressed.length without an explicit value sent for each ciphertext separately. Therefore to avoid confusion, it would be better not to mention anything about padding at all.\r\n\r\n(issue discussed on tls@ietf.org and with Eric Rescorla, result of both discussions was that padding in AEAD ciphers doesn't seem to be possible with the current specification)", "submit_date": "2010-07-23", "submitter_name": "Juho V\u00e4h\u00e4-Herttua", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "799", "doc-id": "RFC4632", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "(1) [[posted separately.]]\r\n\r\n(2)  typo (word replication)\r\n\r\nIn the second paragraph of Section 5.2, at the bottom of page 12,\r\nRFC 4632 says:\r\n\r\n                                             [...].  If the \"child\"\r\n   network were to lose internal connectivity to 192.168.65.0/24 (which\r\n|  is part of its aggregate), traffic from the \"parent\" to the to the\r\n   \"child\" destined for 192.168.65.1 will follow the \"child's\"\r\n   advertised route.  [...]\r\n                                                        ^^^^^^^^^^^^^\r\nIt should say:\r\n\r\n                                             [...].  If the \"child\"\r\n   network were to lose internal connectivity to 192.168.65.0/24 (which\r\n|  is part of its aggregate), traffic from the \"parent\" to the \"child\"\r\n   destined for 192.168.65.1 will follow the \"child's\" advertised route.\r\n   [...]\r\n\r\n\r\n(3)  garbled sentence\r\n\r\nThe second paragraph of Section 7, on page 18, says:\r\n\r\n   A description of techniques to populate the IN-ADDR.ARPA zone when\r\n   and used address that blocks that do not align to octet boundaries is\r\n   described in [RFC2317].\r\n\r\nApparently, this sentence is garbled; as written, it makes no sense.\r\nPerhaps, it was intended to say:\r\n\r\n   A description of techniques to populate the IN-ADDR.ARPA zone when\r\n|  used address blocks do not align to octet boundaries is described in\r\n   [RFC2317].\r\n\r\n\r\n(4)  typo (singular/plural mismatch)\r\n\r\nOn page 19, the second enumerated bullet in Section 9 says:\r\n\r\n   2.  Acceleration of the exponential trend in late 1993 and early 1994\r\n       as CIDR \"supernet\" blocks were first assigned by the NIC and\r\n       routed as separate legacy class-C networks by service provider.\r\n\r\nIt should say:\r\n\r\n   2.  Acceleration of the exponential trend in late 1993 and early 1994\r\n       as CIDR \"supernet\" blocks were first assigned by the NIC and\r\n|      routed as separate legacy class-C networks by service providers.\r\n                                                                     ^\r\n\r\n\r\n(5)  incomplete status change of legacy documents\r\n\r\nSection 11 (pp. 21/22) re-classifies a couple of legacy RFCs as\r\nHistoric.\r\nUnfortunately, there are additional documents closely related to\r\nthese re-classified documents left alone -- and apparently still\r\ncurrent.\r\nIMHO, it would have been much clearer to also re-classify RFC 1797\r\nand RFC 1879 as Historic, as well.\r\n\r\nNote:\r\nAdmittedly, there may be a gap in the IETF document maintenance\r\nprocedures not formally allowing Informational and Experimental\r\nRFCs to be re-classified as Historic.  If this was the reason for\r\nomitting the named RFCs from Section 11 of RFC 4632, it would\r\nperhaps have been useful to \"obsolete\" these RFCs by RFC 4632.\r\nThis situation is bound to recur with more Informational RFCs\r\npublished as companion documents to Standards Track RFCs;\r\nthus, a general procedural solution should be sought to visibly\r\n(in the RFC index) 'outdate' such RFCs when updates get published.\r\n", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\nThank you very much for your eagle eyes and your comments.  I agree\r\nwith all of them.  If you had submitted them during the Internet-draft\r\nprocess, I would make all of these modifications immediately.\r\nHowever, now that the RFC is issued, I believe that we should be quite\r\na bit more conservative before issuing Errata, so as to not congest\r\nthe Errata and obscure vital and substantive changes that might affect\r\nactual interoperability of standards interpretation.  With that view\r\nin mind, I'd like to suggest that we not issue any Errata at this\r\ntime.  I look forward to your input on subsequent draft documents.\r\n", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tony Li", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "800", "doc-id": "RFC4217", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.5", "orig_text": "\"...  This contrasts the with situation when ...\"\r\n\r\n", "correct_text": "\"...  This contrasts with the situation when ...\"", "notes": "from pending", "submit_date": "2005-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "801", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "2.  Modified all rates such that their rates are only", "correct_text": "2.  Modified all rates such that they are only", "notes": "from pending", "submit_date": "2007-01-07", "submitter_name": "Clay Sikes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "802", "doc-id": "RFC4570", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "   Applications and hosts may also\r\n   share the source-filter information with network elements (e.g., with\r\n   routers using [IGMPv3]) so they can potentially perform the traffic\r\n|  filtering operation further \"upstream,\" closer to the source(s).", "correct_text": "   Applications and hosts may also\r\n   share the source-filter information with network elements (e.g., with\r\n   routers using [IGMPv3]) so they can potentially perform the traffic\r\n|  filtering operation further \"upstream\", closer to the source(s).", "notes": "quoting style\r\n\r\nfrom pending\r\n\r\n--VERIFIER COMMENT--\r\nThanks for the comments.  It would have been nice if these very minor\r\nerrors could have been corrected prior to RFC publication.  However,\r\nI'm not convinced that they are significant enough to warrant a RFC\r\nErrata note.  (If, however, the RFC editor disagrees, then I could\r\ncertainly go ahead and do this.)\r\n", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ross Finlayson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "803", "doc-id": "RFC4217", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.5", "orig_text": " \"o  The various people who have help author this document ...\"\r\n", "correct_text": "\"o  The various people who have helped [to] author this document ...\"\r\n\r\nor:\r\n\r\n\"o  The various people who have helped the author of this document ...\"", "notes": "from pending", "submit_date": "2005-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "804", "doc-id": "RFC4570", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "   Use of source-filters do not\r\n   corrupt the ASM semantics but provide more control for receivers, at\r\n   their discretion.", "correct_text": "|  Use of source-filters does not\r\n|  corrupt the ASM semantics but provides more control for receivers, at\r\n   their discretion.", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\nThanks for the comments.  It would have been nice if these very minor\r\nerrors could have been corrected prior to RFC publication.  However,\r\nI'm not convinced that they are significant enough to warrant a RFC\r\nErrata note.  (If, however, the RFC editor disagrees, then I could\r\ncertainly go ahead and do this.)", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ross Finlayson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "805", "doc-id": "RFC4141", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(1)\r\n\r\nIn Section 1.2, the last paragraph at the bottom of page 4 says:\r\n\r\n     *  three MIME Content header fields (Content-Convert, Content-\r\n        Previous and *  Content-Features) that specify appropriate\r\n        content header fields and record conversions that have been\r\n        performed.\r\n\r\nIt should say:\r\n\r\n     *  three MIME Content header fields (Content-Convert, Content-\r\n|       Previous and Content-Features) that specify appropriate\r\n        content header fields and record conversions that have been\r\n        performed.\r\n\r\n\r\n(2)\r\n\r\nIn Section 3, the fourth paragraph on page 6 says:\r\n\r\n   When CONPERM is used, conversions are performed by the first ESMTP\r\n   host that can obtain both the originator's permission and information\r\n   about the capabilities supported by the recipient.  If a relay or\r\n   client is unable to transmit the message to a next-hop that supports\r\n   CONPERM or to perform appropriate conversion, then it terminates\r\n   message transmission and returns a [DSNSMTP, DSNFMT, SYSCOD] to the\r\n   originator, with status code 5.6.3 (Conversion required but not\r\n   supported).\r\n\r\nIt should say:\r\n\r\n   When CONPERM is used, conversions are performed by the first ESMTP\r\n   host that can obtain both the originator's permission and information\r\n   about the capabilities supported by the recipient.  If a relay or\r\n   client is unable to transmit the message to a next-hop that supports\r\n   CONPERM or to perform appropriate conversion, then it terminates\r\n|  message transmission and returns a Delivery Status Notification (DSN)\r\n   [DSNSMTP, DSNFMT, SYSCOD] to the originator, with status code 5.6.3\r\n   (Conversion required but not supported).\r\n\r\nRationale:  Probably, that triple of RFCs should not be sent  :-)\r\nThe proposed text change conforms to the current authoring style\r\nguides for I-Ds / RFCs, spelling out the abbreviation 'MDN' at its\r\nfirst occurrance in the text.\r\n\r\n\r\n(3)\r\n\r\nSimilarly, the final NOTE in Section 3, on page 9, says:\r\n\r\n         NOTE: An originator MAY validate any conversions that are made\r\n         by requesting a positive [DSNSMTP].  ...\r\n\r\nwhere it should better say:\r\n\r\n         NOTE: An originator MAY validate any conversions that are made\r\n|        by requesting a positive DSN [DSNSMTP].  ...\r\n\r\n\r\n(4)\r\n\r\nThe second item of the first enumerated list in Section 3.3,\r\non page 12, contains a (visually hidden) word replication.\r\nThe text says:\r\n\r\n      2) MUST return a DSN notification to the originator, with status\r\n         code 5.6.3 (Conversion required but not supported).  [DSNSMTP,\r\n         DSNFMT, SYSCOD]\r\n\r\nIt should say:\r\n\r\n|     2) MUST return a DSN to the originator, with status code 5.6.3\r\n         (Conversion required but not supported).  [DSNSMTP, DSNFMT,\r\n         SYSCOD]\r\n\r\nRationale: The trailing \"N\" of \"DSN\" already stands for \"notification\".\r\n\r\n\r\n(5)\r\n\r\nTo make the spelling of [E]SMTP keywords and verbs consistent within\r\nthe text, the headline of Section 4.2 (on page 13),\r\n\r\n  4.2.  CONPERM Parameter to Mail-From\r\n\r\nshould better use uppercaes spelling as well, to read:\r\n\r\n  4.2.  CONPERM Parameter to MAIL-FROM\r\n\r\n\r\n(6)\r\n\r\nThe ABNF given in Section 7, on page 16, and Section 8, on page 17,\r\ndoes not fully conform to the contemporary (RFC 2822) style.\r\nThe ABNF in Section 7 omits the explicit specification of white\r\nspace usage that presumably has been intended.\r\nThe ABNF in Section 8 inserts a paramount of CFWS.\r\n\r\nNOTE:\r\n- RFC 2822 has deprecated the use of white space between header\r\n  field names and the subsequent \":\" and, as far as I can see,\r\n  comments have not been allowed at such places by RFC 822,\r\n  and aren't by the \"obsolete syntax\" in RFC 2822.\r\n- RFC 2822 has carefully made [C]FWS an intrinsic part of many\r\n  low-level syntactic constructs to improve readability of the\r\n  high-level ABNF productions. Thus, CFWS should not be inserted\r\n  again where it is (logically) already present.\r\n\r\nFurthermore, the spelling of ABNF production names should be\r\nself-consistent within a certain field. RFC 2822 makes use of\r\nlowercase production (rule) names for teh syntactic description\r\nof the Internet Message Format; therefore it seems preferrable\r\nto follow this style when defining IMF extensions.\r\n\r\nIn the light of these explanations (and detailed inspection of\r\nRFC 2822), the ABNF productions in Section 7 :\r\n\r\n      Convert =                \"Content-convert\" \":\"\r\n                               permitted\r\n\r\n      Permitted =              \"ANY\" / \"NONE\" / permitted-list\r\n\r\nshould perhaps be re-written as :\r\n\r\n      convert =           \"Content-convert:\" [CFWS] permitted\r\n\r\n      permitted =         \"ANY\" / \"NONE\" / permitted-list\r\n\r\nand the ABNF productions in Section 8 :\r\n\r\n      previous =          \"Content-Previous\" [CFWS] \":\"\r\n                          [CFWS]\r\n                          date by type\r\n\r\n      date =              \"Date \" [CFWS] date-time [CFWS] \";\"\r\n                          [CFWS]\r\n\r\n      by =                \"By \" [CFWS] domain [CFWS] \";\"\r\n                          [CFWS]\r\n\r\nshould perhaps be re-written as :\r\n\r\n      previous =          \"Content-Previous:\" date by type\r\n\r\n      date =              \"Date \" [CFWS] date-time \";\" [CFWS]\r\n\r\n      by =                \"By \" domain \";\" [CFWS]\r\n\r\nor even (disallowing comments after \"Date \" - like RFC 2822 does):\r\n\r\n      previous =          \"Content-Previous:\" date by type\r\n\r\n      date =              \"Date \" date-time \";\" [CFWS]\r\n\r\n      by =                \"By \" domain \";\" [CFWS]\r\n\r\n\r\n(7)\r\n\r\nThe examples in Section 9 contain improperly truncated references\r\nto MIME Content-Types.\r\nThe following line that appears\r\n  -  in Section 9.1 in the 3rd text line on page 18,\r\nand\r\n  -  in Section 9.2 in the 10th text line :\r\n\r\n   C: <<RFC 2822 message with MIME Content-Type:TIFF-FX\r\n\r\nshould, in both cases, read:\r\n\r\n   C: <<RFC 2822 message with MIME Content-Type: image/TIFF-FX\r\n\r\n\r\n(8)\r\n\r\nIn Appendix C, the headline:\r\n\r\n  Appendix C.  MIME Content-Type Registrations\r\n\r\nshould say:\r\n\r\n  Appendix C.  MIME Header Field Registrations\r\n\r\n\r\n(9)\r\n\r\nPerhaps, in Appendix C, the IANA should have been directed to\r\nadd to the MIME Header Registration for \"Content-Features:\"\r\nan additional reference to RFC 4141.\r\nE.g., add on page 25, before the \"Authors' Addresses\":\r\n\r\n  C.3.  Content-Features\r\n\r\n    This memo substantially amends the specification of the\r\n    MIME Header Field \"Content-Features:\" registered by [[FEAT].\r\n    The IANA should include into the 'Specification document(s)'\r\n    clause of that registration a pointer to RFC 4141.\r\n\r\n", "correct_text": "[see above]\r\n", "notes": "From Dave Crocker:\r\n\r\nI congratulate you on such an excellent job of proof-reading. I certainly do\r\nrecommend that you post your note on the errata page.\r\n\r\nAll of your points are worth considering.  Some entail simple errors and\r\nsome entail matters of taste.\r\n\r\nI believe that the errors you cite do not change the substance of the\r\nspecification, although the question of white space syntax could formally   \r\ninvolve a meaningful technical error.  (Normally it would be clear that it\r\nis significant; given the history of RFC733/RFC722/RFC2822 and the slow\r\nadoption of 2822, I'm not too worried that the error in our document will\r\nhurt real-world interoperability.\r\n\r\nfrom pending", "submit_date": "2005-11-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dave Crocker", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2339", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B", "orig_text": "Near the middle of page 32, contains the following [commented out] ASN.1, and ASN.1 comment:\r\n\r\n  -- UTF8String ::= [UNIVERSAL 12] IMPLICIT OCTET STRING\r\n         -- The contents of this type correspond to RFC 2279.\r\n                                                        ^^^^\r\n\r\nThe RFC should say:\r\n\r\n  -- UTF8String ::= [UNIVERSAL 12] IMPLICIT OCTET STRING\r\n         -- The contents of this type correspond to RFC 3629.", "correct_text": "[see above]     ", "notes": "RFC 2279 has been obsoleted by RFC 3629 == STD 63 \"long\" ago.\r\n\r\nI am aware of the fact that the UTF-8 definition in RFC 3629\r\nsyntactically and semantically by intention is a proper subset\r\nof the definition in RFC 2279 (restriction to possible Unicode\r\ncodepoints with up to 24-bit representation).\r\n\r\nThus, it might be true that the reference to RFC 2279 has been\r\nused intentionally in this ASN.1 comment, e.g., because RFC 3280\r\n[PROFILE] (pre-3629!) referred to RFC 2279 in that context.\r\nBut, regarding the STD status of RFC 3629, a standards track RFC\r\nlike RFC 4211 should, in this case, present explicit arguments\r\nfor the deviation from STD 63. (It doesn't.)", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "817", "doc-id": "RFC4619", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  [[posted separately.]]\r\n\r\n\r\n(2)  improper wording (mismatch with what follows)\r\n\r\nOn page 3, the last paragraph above Figure 1 says:\r\n                                                     v      vvv\r\n   The following figure describes the reference models that are derived\r\n   from [RFC3985] to support the frame relay PW emulated services.\r\n\r\nIt should say:\r\n\r\n|  The following figure describes the reference model that is derived\r\n   from [RFC3985] to support the frame relay PW emulated services.\r\n\r\n\r\n(3)  typo (missing article)\r\n\r\nWithin Section 5, the 2nd list item on page 6 says:\r\n\r\n   - Frame relay Local Management Interface (LMI) is terminated locally\r\n     in the PE connected to the frame relay attachment circuit.\r\n\r\nIt should say:\r\n\r\n|  - The Frame relay Local Management Interface (LMI) is terminated\r\n     locally in the PE connected to the frame relay attachment circuit.\r\n\r\n\r\n(4)  missing article\r\n\r\nThe last bullet within Section 7.2, near the top of page 8, says:\r\n\r\n   - Payload\r\n\r\n     The payload field corresponds to X.36/X.76 frame relay frame\r\n     information field with the following components removed: bit/byte\r\n     stuffing, frame relay header, and FCS.  [...]\r\n\r\nIt should say:\r\n\r\n   - Payload\r\n\r\n|    The payload field corresponds to an X.36/X.76 frame relay frame\r\n     information field with the following components removed: bit/byte\r\n     stuffing, frame relay header, and FCS.  [...]\r\n\r\n\r\n(5)  typos/grammar\r\n\r\nThe last bulleted item in Section 7.6.2, on top of page 12, says:\r\n\r\n                                        vvvvvv\r\n|  - Otherwise, if the payload is longer, then the length specified in\r\n|    the control word padding characters are removed according to the\r\n     length field.\r\n                     ^\r\n\r\nIt should say:\r\n                                        v  v\r\n|  - Otherwise, if the payload is longer than the length specified in\r\n|    the control word, padding characters are removed according to the\r\n     length field.\r\n                     ^\r\n\r\n(6)  typo\r\n\r\nThe second sentence in the first paragraph of Section 7.9, on page 12,\r\n\r\n                                                           v\r\n           [...].  If the PE detects a service-affecting condition for a\r\n|  particular DLCI, as defined in [Q933] Q.933, Annex A.5, sited in IA\r\n   FRF1.1, the PE MUST communicate to the remote PE the status of the PW\r\n   that corresponds to the frame relay DLCI status.  [...]\r\n\r\nshould say:\r\n                                                           v\r\n           [...].  If the PE detects a service-affecting condition for a\r\n|  particular DLCI, as defined in [Q933] Q.933, Annex A.5, cited in IA\r\n   FRF1.1, the PE MUST communicate to the remote PE the status of the PW\r\n   that corresponds to the frame relay DLCI status.  [...]\r\n\r\n\r\n(7)  typo/grammar\r\n\r\nThe last sentence in the second paragraph of Section 7.9, on page 12,\r\n\r\n   [...].  The IANA allocation registry of \"Pseudowire Type\" is defined\r\n   in [RFC4446] along with initial allocated values.\r\n\r\nshould say:\r\n\r\n|  [...].  The IANA allocation registry of \"Pseudowire Types\" is defined\r\n|  in [RFC4446] along with initially allocated values.\r\n", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Andrew G. Malis", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "818", "doc-id": "RFC4288", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "Two small editorial issues:\r\n\r\n- Perhaps as an artifact of the conversion of text from an existing\r\n  RFC to a revised memo in I-D format and finally back to RFC format,\r\n  along with repeated re-pagination, it can be observed from time to\r\n  time that there appear unexpected blank lines in RFC text which\r\n  visually break sentences apart.  This recurring arifact has hit\r\n  RFC 4288 near the top of its pages #8 and #10.", "correct_text": "[not submitted]", "notes": "I assume you're referring to the break between \"linear\" and \"sequence\". I agree\r\nit should not have been there.\r\n\r\nfrom pending", "submit_date": "2005-12-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "819", "doc-id": "RFC4241", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "      [ ....mising text ... ]\r\n      IA_PD option and IA_PD Prefix options for the chosen prefix(es)\r\n      back to the PE.\r\n", "correct_text": "     ", "notes": "The 3rd paragraph of the indented, bulleted enumeration in\r\nSection 2.3 contains only a fragment of a sentence.\r\n\r\nThe second bulleted paragraph covers this, the unbulleted third para\r\nseems to be unneccessary, probably a fragment from a former edit;\r\njust delete it.", "submit_date": "2005-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "820", "doc-id": "RFC4449", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "The title of RFC 4449 is: \r\n\r\nSecuring Mobile IPv6 Route Optimization Using a Static Shared Key\r\n\r\nHowever, the pages title is: \r\n\r\nRFC 4449           Shared Data for Precomputable Kbm           June 2006\r\n", "correct_text": "[not submitted]", "notes": "They differ sufficiently enough that a reader think that he is  \r\nnot reading the right document!\r\n\r\nfrom pending", "submit_date": "2007-01-09", "submitter_name": "Marc Blanchet", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "821", "doc-id": "RFC4241", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "Second paragraph of Section 2.6:\r\n\r\n   Devices connected to user network may learn a recursive DNS server\r\n   address with the mechanism described in [RFC3736].\r\n\r\n\r\nAnd the first sentence in Section 2.8:\r\n\r\n   ICMPv6 Echo Request will be sent to the user network for connectivity\r\n   monitoring in the service.\r\n", "correct_text": "Second paragraph of Section 2.6:\r\n\r\n   Devices connected to the user network may learn a recursive DNS\r\n   server address with the mechanism described in [RFC3736].\r\n\r\nAnd the first sentence in Section 2.8:\r\n\r\n   ICMPv6 Echo Requests will be sent to the user network for\r\n   connectivity monitoring in the service.\r\n", "notes": "", "submit_date": "2005-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "822", "doc-id": "RFC4636", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In the header, it does not include any relationship to other RFCs.", "orig_text": "", "correct_text": "Updates: 3344", "notes": "Section 4 of RFC 4636, on page 3, clearly states:\r\n\r\n   This document updates the Mobile IP base specification [4] regarding\r\n   the procedures followed by the foreign agent in the case that the\r\n   home agent fails authentication.  [...]\r\n\r\n... and [4] is RFC 3344.\r\n\r\nI expected the line in the RFC heading, and appropriate links in the RFC index.\r\n\r\nHas this been omitted by accident, or have there been strong\r\narguments to omit this significant link ?\r\nIn the former case, can that be corrected 'after the fact' ?", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "823", "doc-id": "RFC4204", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)\r\n\r\nSection 10 specifies the required behaviour of *aperiodic*\r\ntransmission retries with exponential backoff.\r\n\r\n(1a)\r\nNevertheless, at various places the text talks about \"periodically\"\r\ntransmitting certain messages.  It should better say \"repeated[ly]\".\r\n\r\nExamples for this issue are:\r\n  -  Section 11.1.1, page 28 : introduction, and\r\n     the paragraphs labelled \"ConfSend:\" and \"Active:\" ;\r\n  -  Section 11.1.2, page 30, text for event '12a)' ;\r\n  -  Section 11.2.1, page 32 : introduction, and\r\n     the paragraphs labelled \"Init:\" and \"Up:\" ;\r\n  -  Section 11.3.1, page 35 : paragraph labelled \"Test:\" ;\r\n  -  Section 12.3.1, page 42, last paragraph;\r\n  -  Section 12.4, page 43, last paragraph;\r\n  -  Section 12.5.1, page 44, last paragraph;\r\n  -  Section 12.5.4, first line on page 46;\r\n  -  Section 12.5.6, final paragraph on page 46 (twice);\r\n  -  Section 12.6.1, second paragraph on page 48.\r\n\r\n(1b)\r\nAt the bottom of page 26, Section 10.1 defines the following\r\nparameter:\r\n\r\n   Rapid retry limit Rl:\r\n\r\n      Rl is the maximum number of times a message will be transmitted\r\n      without being acknowledged.\r\n\r\nThe naming of this variable is very unfortunate because in similar\r\ncontexts in protocol design, the \"retry limit\" customarily defines the\r\n(maximum) number of *re*-tries -- with 0 meaning no retries at all,\r\n1 meaning a single retry, etc.\r\nThe definition given means that the maximum number of retries will\r\nbe  <Rl> - 1 , thereby restricting the allowed range for <Rl> to 1\r\nor above, excluding the value 0, without mentioning this fact.\r\n\r\nBecause Section 10.2 codifies the abovementioned definition and this\r\ncertainly should not be changed after the fact of publication as an\r\nRFC, it might be advisable to post a warning note pointing to the\r\nspecific semantics of 'retry limit' with LMP, the admitted value\r\nrange, and in particular the use '1' for <Rl> to inhibit retries.\r\n\r\n\r\n(2)\r\n\r\nSection 12.2, on page 41, codifies an (unfortunately very popular)\r\ndesign flaw: the 'Length' field in LMP objects is specified as\r\ncomprising the cumulative size of the object contents *and* the\r\nobject prefix (4 bytes).  This unnecessarily creates illegal\r\nvalues (0..3) for 'Length' which must be checked for in all\r\nimplementations.  It would have been very muck preferrable to have\r\n'Length' just giving the size of the object contents (in bytes),\r\nwhereby Length=0 would be the very mnemonic (and most efficiently\r\ntestable) condition for empty object content\r\n\r\n[Note: In the case of LMP objects the 16 bit width of length does\r\n not constitute an artificial limitation to the size of the object\r\n contents, because the whole message must be shorter than 2**16\r\n bytes. This *is* a problem, e.g., for RADIUS with its single-octet\r\n 'Length' !]\r\n\r\n\r\n(3)\r\n\r\nIn Section 13.2, on page 51, the explanatory text after the diagram\r\nfor 'C-Type = 1' says:\r\n\r\n  Node_Id:\r\n\r\n     This identities the node that originated the LMP packet.\r\n                ^\r\nwhere it should say:\r\n\r\n  Node_Id:\r\n\r\n     This identifies the node that originated the LMP packet.\r\n                ^\r\nSimilarly, following the diagram for 'C-Type = 2', the same section\r\nsays at the top of page 52:\r\n\r\n   Node_Id:\r\n\r\n      This identities the remote node.\r\n                 ^\r\nwhere it should say:\r\n\r\n  Node_Id:\r\n\r\n      This identifies the remote node.\r\n                 ^\r\n\r\n(4) Section 13.8\r\n\r\na) The explanation for \"Flags:\" on page 57 contains the improperly\r\nindented and punctuated entry:\r\n\r\n      vvv\r\n         0x0002 Data Link Type\r\n\r\n            If set, the data links to be verified are ports, otherwise\r\n            they are component links\r\n                                    ^\r\nIt should specify instead:\r\n\r\n      0x0002 Data Link Type\r\n\r\n            If set, the data links to be verified are ports, otherwise\r\n            they are component links.\r\n                                    ^\r\n\r\nb) The explanation for \"Verify Transport Mechanism:\", on top of\r\npage 58, contains:\r\n\r\n      0x8000 Payload:Test Message transmitted in the payload\r\n                    ^^\r\nIt should say:\r\n\r\n      0x8000 Payload: Test Message transmitted in the payload\r\n                    ^^^\r\n\r\n\r\n(5) Wavelength encodings\r\n\r\nThis issue is related to:\r\n  -  Section 13.8, on page 57/58,  and\r\n  -  Section 13.12.1, on page 64 plus Section 13.12.1.2 on page 65.\r\n\r\nObviously -- and unfortunately --, RFC 4204 avoids specifying the\r\nadmissible encoding[s] and the related units for data elements\r\nspecifying Wavelengths.\r\n\r\nI suspect there could not be reached consensus on a single encoding\r\nstyle.  Nevertheless it would have been very desirable for the sake\r\nof interoperability to specify a (small) set of standard encodings,\r\ne.g.:\r\n  -  IEEE floating point, units: meters;\r\n  -  unsigned32, units: nanometers (or picometers?);\r\n  -  unsigned32 implementation specific wavelength identifiers;\r\n  -  0 always meaning: 'implicit / known by out-of-band methods'.\r\n\r\nAll occurences on 'Wavelength' data elements would have allowed for\r\nthe addition of some kind of 'wavelength encoding selector', e.g.\r\nas a 2-/3-/4-bit subfield of the already present 'Flags' field,\r\nor separate values of the already present 'subobject type'.\r\n\r\n\r\n(6)\r\nSection 13.12.1 says:\r\n\r\n    This is used to identify the local Interface Switching Type of the TE link as defined in [RFC3471].\r\n\r\nIt should say:\r\n\r\n    This is used to identify the local Interface Switching Type of the Data link as defined in [RFC3471]. \r\n\r\n(7)\r\n\r\nSection 16, near the bottom of page 77, contains wording inconsistent\r\nthe remainder of this section and with other parts of the document.\r\nThe two paragraphs:\r\n\r\n   The policy for allocating values out of the LMP Object Class name\r\n   space is part of the definition of the specific Class instance.  When\r\n   a Class is defined, its definition must also include a description of\r\n   the policy under which the Object Class names are allocated.\r\n\r\n   The policy for allocating values out of the LMP Sub-object Class name\r\n   space is part of the definition of the specific Class instance.  When\r\n   a Class is defined, its definition must also include a description of\r\n   the policy under which sub-objects are allocated.\r\n\r\nshould better say:\r\n                                                                vvvv\r\n   The policy for allocating values out of the LMP Object Class type\r\n   (C-type) name space is part of the definition of the specific Class\r\n   instance.  When a Class is defined, its definition must also include\r\n   a description of the policy under which the Object Class types are\r\n   allocated.\r\n\r\n   The policy for allocating values out of the LMP Sub-object Class type\r\n   (C-type) name space is part of the definition of the specific Class\r\n   instance.  When a Class is defined, its definition must also include\r\n   a description of the policy under which sub-objects are allocated.\r\n\r\n[Notes:\r\n The primary name space is the Class type (C-type) name space because\r\n its management is essential for interoperability; the class names are\r\n subordinated additional labels for the human reader and implementor.\r\n Above, I have added \"(C-type)\" for clarity; this is not absolutely\r\n necessary, if you dislike the repetition here.\r\n]\r\n\r\n\r\n(8)\r\n\r\nThere's another small typo in Section 16, at mid-page 82:\r\nThe headline:\r\n\r\n   o CHANNEL_STATUS_REQUESTClass name (14)\r\n\r\nshould be:\r\n\r\n   o CHANNEL_STATUS_REQUEST Class name (14)\r\n", "correct_text": "[see above] ", "notes": "from pending", "submit_date": "2005-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "824", "doc-id": "RFC4636", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "   The extension in this document improves the security features of\r\n   Mobile IPv4 by allowing the mobile node to be assured of the\r\n   authenticity of the information supplied within a Registration\r\n   Request. ", "correct_text": "   The extension in this document improves the security features of\r\n   Mobile IPv4 by allowing the mobile node to be assured of the\r\n   authenticity of the information supplied within a Registration\r\n   Reply. ", "notes": "From the body of the RFC, I would have expected to find \"Reply\"\r\nas the last word of that sentence -- cf. Section 1, 2nd sentence,\r\nand Section 4, 1st sentence.\r\n\r\nfrom pending", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2454", "doc-id": "RFC4322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5", "orig_text": "The first paragraph of Section 4.5, on page 25, says:\r\n\r\n   The implementation described (FreeS/WAN 1.98) neither uses DNSSEC\r\n   directly to explicitly verify the authenticity of zone information,\r\n   nor uses the NSEC records to provide authentication of the absence of\r\n   a TXT or KEY record.  [...]\r\n\r\nIt should say:\r\n\r\n   The implementation described (FreeS/WAN 1.98) neither uses DNSSEC\r\n   directly to explicitly verify the authenticity of zone information,\r\n|  nor does it use the NSEC records to provide authentication of the\r\n   absence of a TXT or KEY record.  [...]\r\n\r\n(or similar).", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1735", "doc-id": "RFC5148", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   [7]  Clausen, T., Dearlove, C., Dean, J., and C. Adjih, \"Generalized\r\n        MANET Packet/Message Format\", Work in Progress.", "correct_text": "   [7]  Clausen, T., Dearlove, C., Dean, J., and C. Adjih,\r\n              \"Generalized MANET Packet/Message Format\", RFC 5444,\r\n              February 2009.", "notes": "draft-ietf-manet-packetbb (\"Generalized MANET Packet/Message Format\") was published as RFC5444. RFC5148 should, therefore, reference this archival document (RFC5444) rather than the Internet Draft.\n --VERIFIER NOTES-- \nAt the time of publication of RFC 5148 (February 2008), RFC 5444 had not been published and could only be cited as an Internet-Draft. RFC 5444 was not published until February 2009.\r\n\r\nA future update of RFC 5148 can resolve this. Otherwise, the IETF's datatracker resolves the reference for the inquisitive reader. ", "submit_date": "2009-03-22", "submitter_name": "Thomas Clausen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "825", "doc-id": "RFC4631", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1) [[posted separately.]]\r\n\r\n(2)  [plaintext flaw]\r\n\r\nIn the second paragraph of Section 8, near the bottom of page 9,\r\nRFC 4631 says:\r\n\r\n                        [...].  The interrelation of entries in the\r\n   ifTable is defined by Interfaces Stack Group defined in [RFC2863].\r\n\r\nIt should say:\r\n\r\n                        [...].  The interrelation of entries in the\r\n|  ifTable is defined by the Interfaces Stack Group defined in\r\n   [RFC2863].\r\n                        ^^^^^\r\n\r\n\r\n(2') [punctuation] -- legacy, but not reported for RFC 4327\r\n\r\nConformant to the punctuation newly introduced in the REFERENCE\r\nclauses, parts of the DESCRIPTION subclauses of the MODULE-IDENTITY\r\nmacro invocation should also be amended with a trailing full-stop:\r\n\r\nOn top of page 13, change:\r\n\r\n        This revision published as RFC 4631\"\r\n   REVISION\r\n       \"200601110000Z\"  -- 11 January 2006\r\n   DESCRIPTION\r\n       \"Initial version published as RFC 4327\"\r\n   ::= { transmission 227 }\r\n\r\nto say:\r\n\r\n|       This revision published as RFC 4631.\"\r\n   REVISION\r\n       \"200601110000Z\"  -- 11 January 2006\r\n   DESCRIPTION\r\n|      \"Initial version published as RFC 4327.\"\r\n   ::= { transmission 227 }\r\n\r\n\r\n(3)  LmpInterval TEXTUAL-CONVENTION  (page 13)\r\n\r\nThe clause,\r\n\r\n   DESCRIPTION\r\n       \"The interval delay in milliseconds.\"\r\n\r\nperhaps should better say:\r\n\r\n   DESCRIPTION\r\n|      \"The delay interval in milliseconds.\"\r\n\r\nor even:\r\n\r\n   DESCRIPTION\r\n|      \"The interval period for a periodically performed LMP operation,\r\n|       in milliseconds.\"\r\n\r\n[Rationale: It's not the interval that's getting delayed ...]\r\n\r\n\r\n(4)  LmpRetransmitInterval TEXTUAL-CONVENTION  (page 13)\r\n\r\nThe clause,\r\n\r\n   DESCRIPTION\r\n       \"The retransmission interval delay in milliseconds.\"\r\n\r\nperhaps should better say:\r\n\r\n   DESCRIPTION\r\n|      \"The retransmission delay interval in milliseconds.\"\r\n\r\nor even better:\r\n\r\n   DESCRIPTION\r\n|      \"The (initial) retransmission interval in milliseconds.\"\r\n\r\n[Rationale: It's not the interval that's getting delayed ...]\r\n\r\n\r\n(old #5)  lmpNbrRetransmitInterval OBJECT-TYPE  (page 15)  -- resolved\r\n\r\n(new #5)  lmpNbrRetransmitInterval OBJECT-TYPE  (page 15)\r\n          -- legacy, but originally not reported\r\n\r\nThere's an extraneous blank line in the middle of the REFERENCE clause\r\nthat should be deleted (cf. lmpNbrRetryLimit OBJECT-TYPE, below).\r\n\r\n\r\n(old #6)  lmpNbrRetryLimit OBJECT-TYPE  (page 15)  -- resolved\r\n\r\n(new #6)  lmpCcUnderlyingIfIndex and lmpCcIsIf OBJECT-TYPEs  (page 20)\r\n          -- newly introduced\r\n\r\nThe punctuation within the DESCRIPTION clauses for these objects\r\nhas been changed using one semicolon each.\r\nIMHO, this is unfortunate because it might be misinterpreted as\r\nexcluding the subsequent half-sentences from the initial \"If\"\r\ncondition in these sentences that in fact are also preconditions\r\nfor the statements now after the semicolons.\r\n\r\n\r\n(7)  lmpCcRemoteAddressType OBJECT-TYPE  (page 21)\r\n\r\n   DESCRIPTION\r\n       \"This value represents the remote control channel IP address\r\n        type.  In point-to-point configuration, this value can be set\r\n        to unknown(0).\"\r\n   ::= { lmpControlChannelEntry 6 }\r\n\r\nshould better say:\r\n\r\n   DESCRIPTION\r\n       \"This value represents the remote control channel IP address\r\n|       type.  In point-to-point configurations, this value can be set\r\n        to unknown(0).\"\r\n   ::= { lmpControlChannelEntry 6 }\r\n                                              ^\r\n\r\n[ The possible alternative, \"In a point-to-point configuration, ...\"\r\n  is not proposed here, to maintain a style similar to the minimal\r\n  change for the next object -- see (8) below.]\r\n\r\n\r\n(8)  lmpCcRemoteIpAddr OBJECT-TYPE  (page 21) -- partially resolved\r\n\r\n   DESCRIPTION\r\n       \"[...]\r\n        The Control channel must be numbered on non-point-to-point\r\n        configuration.  For point-to-point configuration, the\r\n        remote control channel address can be of type unknown\r\n        in which case this object must be a zero-length string.  The\r\n        lmpCcRemoteId object then identifies the unnumbered\r\n        address.\"\r\n   ::= { lmpControlChannelEntry 7 }\r\n\r\nshould better say:\r\n\r\n   DESCRIPTION\r\n       \"[...]\r\n        The control channel must be numbered on non-point-to-point\r\n|       configurations.  For point-to-point configurations, the\r\n        remote control channel address can be of type unknown\r\n        in which case this object must be a zero-length string.  The\r\n        lmpCcRemoteId object then identifies the unnumbered\r\n        address.\"\r\n   ::= { lmpControlChannelEntry 7 }\r\n\r\n\r\n(9)  lmpCcHelloInterval OBJECT-TYPE  (page 22)\r\n\r\nAn established 'default' specifies the value of a (newly created)\r\ntabular object to be used when this object is not SET explicitely.\r\nThe default is never 'set', it is defined in the specification.\r\nHence,\r\n\r\n   DESCRIPTION\r\n       \"This object specifies the value of the HelloInterval\r\n        parameter.  The default value for this object should be\r\n        set to lmpCcHelloIntervalDefault.\"\r\n   ::= { lmpControlChannelEntry 10 }\r\n\r\nshould better say:\r\n\r\n   DESCRIPTION\r\n       \"This object specifies the value of the HelloInterval\r\n|       parameter.  The default value to be used for this object\r\n|       is lmpCcHelloIntervalDefault.\"\r\n   ::= { lmpControlChannelEntry 10 }\r\n\r\n\r\n(9')   lmpCcHelloIntervalMin OBJECT-TYPE  (page 22) ,\r\n(9'')  lmpCcHelloIntervalMax OBJECT-TYPE  (page 22) ,\r\n(10)   lmpCcHelloDeadInterval OBJECT-TYPE  (page 23) ,\r\n(10')  lmpCcHelloDeadIntervalMin OBJECT-TYPE  (page 23) , and\r\n(10'') lmpCcHelloDeadIntervalMax OBJECT-TYPE  (page 23)\r\n\r\nThe change from item (9) above should be applied there similarly:\r\n\r\nReplace the phrase,\r\n\r\n           \"[...].  The default value for this object should be\r\n        set to lmp<*>Default.\"\r\n\r\nby:\r\n\r\n|          \"[...].  The default value to be used for this object\r\n|       is lmp<*>Default.\"\r\n\r\nusing, at all instances, the appropriate value for the placeholder <*>.\r\n\r\n\r\n(11)  lmpControlChannelPerfEntry OBJECT-TYPE  (page 25)\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table is created by a LMP-enabled device for\r\n        every control channel.  lmpCcCounterDiscontinuityTime is used\r\n        to indicate potential discontinuity for all counter objects\r\n        in this table.\"\r\n\r\nThe latter is not true.\r\nIn this MIB module, the discontinuity is monitored per table *entry*\r\n(conceptual row), not for the table as a whole -- see the DESCRIPTIONs\r\nfor lmp<*>DiscontinuityTime later in the RFC.\r\n\r\nTherefore, the above clause should say:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table is created by a LMP-enabled device for\r\n        every control channel.  lmpCcCounterDiscontinuityTime is used\r\n        to indicate potential discontinuity for all counter objects\r\n|       in this entry (conceptual row).\"\r\n\r\n\r\n(12)  lmpCcChannelStatusAckSent OBJECT-TYPE  (page 35)\r\n\r\nThe clause,\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of ChannelStatus messages\r\n        that have been sent on this control channel.\"\r\n   ::= { lmpControlChannelPerfEntry 47 }\r\n\r\nrefers to the wrong message type; it should say:\r\n\r\n   DESCRIPTION\r\n|      \"This object counts the number of ChannelStatusAck messages\r\n        that have been sent on this control channel.\"\r\n   ::= { lmpControlChannelPerfEntry 47 }\r\n\r\n\r\n(13)  lmpTeLinkEntry OBJECT-TYPE  (page 37)\r\n\r\nThe DESCRIPTION clause contains the sentence:\r\n\r\n                                                      [...].  The\r\n        administrative status value is controlled from the ifEntry.\r\n        [...]\r\n\r\nThis sentence should say:\r\n\r\n                                                      [...].  The\r\n|       administrative status is controlled from the ifEntry.\r\n        [...]\r\n\r\n\r\n(13') lmpLinkVerifyTransportMechanism OBJECT-TYPE  (page 41)  -- new\r\n\r\nMissing punctution between the two parts of the REFERENCE clause:\r\n\r\n   REFERENCE\r\n       \"Link Management Protocol, RFC 4204\r\n        Synchronous Optical Network (SONET)/Synchronous Digital\r\n        Hierarchy (SDH) Encoding for Link Management Protocol (LMP)\r\n        Test Messages, RFC 4207.\"\r\n\r\nshould say:\r\n\r\n   REFERENCE\r\n       \"Link Management Protocol, RFC 4204.\r\n        Synchronous Optical Network (SONET)/Synchronous Digital\r\n        Hierarchy (SDH) Encoding for Link Management Protocol (LMP)\r\n        Test Messages, RFC 4207.\"\r\n\r\n[... or use a semicolon after \"RFC 4204\".]\r\n[Note: This item not reported for RFC 4327 -- there was a page\r\n break effectively hiding the issue.]\r\n\r\n\r\n(14)  lmpTeLinkPerfEntry OBJECT-TYPE  (page 43)\r\n\r\nThe correction from item (11) above is to be applied here as well:\r\n\r\nReplace:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table is created by an LMP-enabled device for\r\n        every TE link.  lmpTeCounterDiscontinuityTime is used\r\n        to indicate potential discontinuity for all counter objects\r\n        in this table.\"\r\n\r\nby:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table is created by an LMP-enabled device for\r\n        every TE link.  lmpTeCounterDiscontinuityTime is used\r\n        to indicate potential discontinuity for all counter objects\r\n|       in this entry (conceptual row).\"\r\n\r\n\r\n(15)  lmpTeEndVerifyRetransmit OBJECT-TYPE  (page 46)\r\n      -- rationale given now extended\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of EndVerify messages that\r\n        have been retransmitted over this control channel.\"\r\n   ::= { lmpTeLinkPerfEntry 12 }\r\n\r\nis inappropriate -- it does not match the indexing structure of the\r\nLMP TE Link Performance Table.  In accordance with the text supplied\r\nfor the other objects in this Table, it should say:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of EndVerify messages that\r\n|       have been retransmitted for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 12 }\r\n\r\n\r\n(16)  lmpTeTestStatusFailureRetransmit OBJECT-TYPE  (page 48)\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of TestStatusFailure messages\r\n        that have been retransmitted on this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 20 }\r\n\r\nshould say:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of TestStatusFailure messages\r\n        that have been retransmitted for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 20 }\r\n\r\n[ According to Section 12.5.8. of the LMP specification [RFC 4204],\r\n  LMP TestStatusFailure messages are transmitted over the control\r\n  channel; hence, \"retransmitted *on* this TE Link\" is wrong! ]\r\n\r\n\r\n(17)  lmpTeLinkSummaryRetransmit OBJECT-TYPE  (page 49)\r\n\r\nThe correction from item (15) above is to be applied here as well:\r\n\r\nReplace:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of LinkSummary messages that\r\n        have been retransmitted over this control channel.\"\r\n   ::= { lmpTeLinkPerfEntry 25 }\r\n\r\nby:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of LinkSummary messages that\r\n|       have been retransmitted for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 25 }\r\n\r\n\r\n(18)  lmpTeChannelStatusAckSent OBJECT-TYPE  (page 50)\r\n\r\nThe correction from item (12) above is to be applied here as well:\r\n\r\nReplace:\r\n\r\n   DESCRIPTION\r\n       \"This object counts the number of ChannelStatus messages\r\n        that have been sent for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 34 }\r\n\r\nby:\r\n\r\n   DESCRIPTION\r\n|      \"This object counts the number of ChannelStatusAck messages\r\n        that have been sent for this TE link.\"\r\n   ::= { lmpTeLinkPerfEntry 34 }\r\n\r\n\r\n(19)  lmpDataLinkEntry OBJECT-TYPE  (page 52)\r\n\r\nThe correction from item (13) above is to be applied here as well:\r\n\r\nThe sentence in the DESCRIPTION clause,\r\n\r\n                   [...].  The administrative status value is\r\n        controlled from the ifEntry.  [...]\r\n\r\nshould say:\r\n\r\n|                  [...].  The administrative status is controlled\r\n        from the ifEntry.  [...]\r\n\r\n\r\n(20)  lmpDataLinkPerfEntry OBJECT-TYPE  (page 56)\r\n\r\nThe correction from item (11) above is to be applied here as well:\r\n\r\nReplace:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table contains information about\r\n        the LMP performance counters for the data-bearing links.\r\n        lmpDataLinkDiscontinuityTime is used to indicate potential\r\n        discontinuity for all counter objects in this table.\"\r\n\r\nby:\r\n\r\n   DESCRIPTION\r\n       \"An entry in this table contains information about\r\n        the LMP performance counters for the data-bearing links.\r\n        lmpDataLinkDiscontinuityTime is used to indicate potential\r\n|       discontinuity for all counter objects in this entry.\"\r\n\r\n\r\n(21a) lmpNotificationMaxRate OBJECT-TYPE  (page 58)\r\n      -- item was numbered (21) previously; recent punctuation\r\n         updates now incorporated in text below\r\n\r\nThe DESCRIPTION text (near the end of its 2nd paragraph, ff.) says:\r\n\r\n                        [...].  For instance, a network of 100 nodes\r\n        with 5 links of 128 wavelengths each and a link verification\r\n        of 1 minute, with no more than 10% of the links failed at any\r\n        given time, would have 1 notification per second sent from\r\n        each node, or 100 notifications per second for the whole\r\n        network.  The rest of the notifications are negligible\r\n        compared to this number.\r\n\r\n        To alleviate the congestion problem, the\r\n        lmpNotificationMaxRate object can be used to implement a\r\n        throttling mechanism.  It is also possible to enable/disable\r\n        certain type of notifications.\r\n\r\nIt should say, correcting two flaws (line breaks adjusted):\r\n\r\n                        [...].  For instance, a network of 100 nodes\r\n        with 5 links of 128 wavelengths each and a link verification\r\n|       interval of 1 minute, with no more than 10% of the links failed\r\n        at any given time, would have 1 notification per second sent\r\n        from each node, or 100 notifications per second for the whole\r\n        network.  The rest of the notifications are negligible\r\n        compared to this number.\r\n\r\n        To alleviate the congestion problem, the\r\n        lmpNotificationMaxRate object can be used to implement a\r\n        throttling mechanism.  It is also possible to enable/disable\r\n|       certain types of notifications.\r\n\r\n\r\n(21b) lmpUnprotected NOTIFICATION-TYPE  (page 61)  -- newly introduced\r\n\r\nIn the DESCRIPTION clause,\r\n\r\n                             [...].  If the remaining operational\r\n        control channel fails, then there will be no more control\r\n        channels between the pair of nodes and all the TE links\r\n|       between the pair of nodes, will go to degraded state.  [...]\r\n                                 ^\r\n\r\nthe newly added comma makes no sense, it separates the noun from the\r\nverb after 'and'; this sentence should say:\r\n\r\n                             [...].  If the remaining operational\r\n        control channel fails, then there will be no more control\r\n        channels between the pair of nodes and all the TE links\r\n|       between the pair of nodes will go to degraded state.  [...]\r\n\r\nPerhaps, a comma migth instead be inserted before the 'and':\r\n\r\n                             [...].  If the remaining operational\r\n        control channel fails, then there will be no more control\r\n|       channels between the pair of nodes, and all the TE links\r\n|       between the pair of nodes will go to degraded state.  [...]\r\n\r\n\r\n(21c) lmpModuleReadOnlyCompliance MODULE-COMPLIANCE, restriction\r\n      clause for (lmpDataLinkTable) OBJECT lmpDataLinkIPAddr  (page 71)\r\n\r\n      DESCRIPTION\r\n          \"The size of the data-bearing link IP address depends on\r\n           the type of data-bearing link.  Data-bearing link IP\r\n           address size is zero if the link is unnumbered, four if\r\n           the link IP address is IPv4, and sixteen if the link IP\r\n           address is IPv6.\"\r\n\r\nshould better say:\r\n\r\n      DESCRIPTION\r\n          \"The size of the data-bearing link IP address depends on\r\n|          the type of data-bearing link.  The data-bearing link IP\r\n           address size is zero if the link is unnumbered, four if\r\n           the link IP address is IPv4, and sixteen if the link IP\r\n           address is IPv6.\"\r\n\r\n\r\n(22)  lmpNodeGroup OBJECT-GROUP  (page 72)\r\n\r\nThe RFC says:\r\n\r\n   DESCRIPTION\r\n          \"Collection of objects that represent LMP node\r\n           configuration.\"\r\n   ::= { lmpGroups 1 }\r\n\r\nIt should say:\r\n\r\n   DESCRIPTION\r\n|         \"Collection of objects that represents the LMP node\r\n           configuration.\"\r\n   ::= { lmpGroups 1 }\r\n\r\n[ In fact, it is *the collection* (singular) that represents\r\n  the node configuration! ]\r\n\r\n\r\n(23)  lmpControlChannelGroup OBJECT-GROUP  (page 72/73)\r\n\r\nOn mid-pge 73, the RFC says:\r\n\r\n   DESCRIPTION\r\n          \"Objects that can be used to configure LMP interface.\"\r\n\r\nIt should say:\r\n\r\n   DESCRIPTION\r\n|         \"Objects that can be used to configure LMP interfaces.\"\r\n\r\n\r\n(24)  lmpDataLinkGroup OBJECT-GROUP  (page 77)\r\n\r\nSimilar to item (22) above, the clause,\r\n\r\n   DESCRIPTION\r\n          \"Collection of objects that represent data-bearing link\r\n           configuration.\"\r\n   ::= { lmpGroups 9 }\r\n\r\nshould better say:\r\n\r\n   DESCRIPTION\r\n          \"Collection of objects that represents data-bearing link\r\n           configurations.\"\r\n   ::= { lmpGroups 9 }", "correct_text": "", "notes": "Some of the errata listed above correspond to errata also reported for RFC 4327 (referred to as \"old\").\r\n\r\nfrom pending\r\n\r\n--VERIFIER COMMENT--\r\nWhile many of these comments would undoubtedly have led to a more polished \r\nfinal RFC it is fortunate that none of them makes the document in any way \r\nharder to read or less technically meaningful. I am sure that if and when \r\nthe RFC progresses from Proposed Standard to Draft Standard we can look back \r\nat this list to ensure that your comments are addressed.\r\n\r\nIn future, however, I would urge you to make comments on the content and \r\nformat of CCAMP documents as they progress through the working group or \r\nduring IETF last call. Comments made later than that are very unlikely to be \r\nconsidered by the authors for inclusion, but comments made earlier in the \r\nprocess are very likely to be included.\r\n\r\nObviously, if issues of technical clarity or understanding do come up later \r\nthan this, we can address them through Errata while a new revision of the \r\nRFC is prepared. On the other hand, Errata are probably not well used for \r\nrecording small format errors in the text as these are not strictly errors \r\nof content or substance.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "826", "doc-id": "RFC4268", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)\r\n\r\nIn the CONTACT-INFO clauses of both MODULE-IDENTITY instances\r\n(page 6 and page 10), apparently a text line (between the two\r\nHTTP URIs given) has been blanked out inadvertently; usually,\r\n        \"Working Group Charter:\"\r\nappears at similar places in other MIB definitions.\r\n\r\n\r\n(2) [typo]\r\n\r\nThe DESCRIPTION clause of the EntityAlarmStatus TEXTUAL-CONVENTION\r\ndeclaration contains a funny 'byte twist'.\r\n It says (near the middle of page 8):\r\n\r\n       When the 'value of underRepair' is set, the resource is\r\n       currently being repaired, ...\r\n\r\nIt should say:\r\n\r\n       When the value of 'underRepair' is set, the resource is\r\n       currently being repaired, ...\r\n\r\n\r\n(3) \r\nIn the DESCRIPTION clause of the entStateAdmin OBJECT-TYPE says:\r\n\r\n    Setting this object to 'notSupported' will result in an 'inconsistentValue' error. [...]\r\n\r\nIt should say:\r\n\r\n    Setting this object to 'unknown' will result in an 'inconsistentValue' error. [...]\r\n\r\nNotes:\r\n\r\n\r\n    This is inconsistent with the value range for the EntityAdminState\r\n    TEXTUAL-CONVENTION describing the syntax of this object.\r\n    (Perhaps there's some history behind the scene.)\r\n\r\n(4) [typo/grammar]\r\n\r\nThe fourth paragraph of the DESCRIPTION clause of the entStateOper\r\nOBJECT-TYPE, 10 text lines from the bottom of page 12, says:\r\n\r\n       A value of 'testing' means that entity currently being\r\n       tested and cannot therefore report whether it is\r\n       operational or not.\r\n\r\nIt should perhaps better say:\r\n                                                       vvvv\r\n       A value of 'testing' means that entity currently is\r\n       being tested and cannot therefore report whether it\r\n       is operational or not.\r\n\r\n\r\n(5) [editing omission?]\r\n\r\nThe DESCRIPTION clause of the entStateStandby OBJECT-TYPE, near\r\nmid-page 14, says:\r\n\r\n       Some entities will exhibit only a subset of the\r\n       remaining standby state values.  [...]\r\n       ^^^^^^^^^^\r\nPerhaps this text has been 'cloned' without full adaptation.\r\nSince, in this case, no possible value of the object has been\r\nexcluded by the text, the word \"remaining\" is inappropriate in\r\nthis context.  Therefore, this clause should better say:\r\n\r\n       Some entities will exhibit only a subset of the\r\n       standby state values.  [...]\r\n\r\n\r\n(6) + (7)  [typo/grammar]\r\n\r\nThe second paragraph of the DESCRIPTION clause of each of the\r\ntwo NOTIFICATION-TYPE declarations, near the bottom of page 14\r\nand near the top of page 15, contains the sentence:\r\n\r\n       The entity this notification refers can be identified by\r\n       extracting the entPhysicalIndex from one of the\r\n       variable bindings.  [...]\r\n\r\nPreferrably, this sentence should better say (in both instances):\r\n\r\n                                          vvvv\r\n       The entity this notification refers to can be identified\r\n       by extracting the entPhysicalIndex from one of the\r\n       variable bindings.  [...]    ", "correct_text": "[see above]       ", "notes": "from pending", "submit_date": "2005-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "827", "doc-id": "RFC4119", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "On mid-page 8, RFC 4119 specifies:\r\n                                                     [...]  If the\r\n    value in the 'retention-expires' element has already passed when\r\n    the Location Recipient receives the Location Object, the Recipient\r\n    MUST discard the Location Object immediately.\r\n\r\nNow, RFC 4119 contains examples of Location Objects. Thus, the reader\r\nof RFC 4119 (or his workstation) becomes a Location Recipient.\r\nBut those examples of Location Objects contained in RFC 4119 specify\r\na 'retention-expires' date that has passed *long before* the\r\npublication of RFC 4119.\r\nTherefore, every reader of RFC 4119, and every system receiving a\r\ncopy of RFC 4119, MUST immediately discard the RFC; moreover,\r\neven the RFC editor SHOULD NOT ever have processed the draft!\r\n\r\nBut in this case, the above rule would not have become effective,\r\nmaking these actions, creation and reading of the RFC, legitimate\r\nagain ...", "correct_text": "[see above]", "notes": "from pending\r\n\r\nFrom the RAI reviewer: Strictly speaking, only the Location Objects contained in the RFC4119 MUST be discarded. Since this would only remove the examples from the RFC and not the specifiction, the RFC would remain effective, if somewhat less convenient to use.\n --VERIFIER NOTES-- \n   ", "submit_date": "2005-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "828", "doc-id": "RFC4314", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.1", "orig_text": "Example:       C: A003 Setacl INBOX/Drafts Byron lrswikda\r\n               S: A001 OK Setacl complete\r\n               C: A002 getAcl INBOX/Drafts\r\n               S: * ACL INBOX Fred rwipslxcetda Byron lrswikcdeta\r\n               S: A002 OK Getacl complete", "correct_text": "Example:       C: A003 Setacl INBOX/Drafts Byron lrswikda\r\n               S: A003 OK Setacl complete\r\n               C: A004 getAcl INBOX/Drafts\r\n               S: * ACL INBOX/Drafts Fred rwipslxcetda Byron lrswikcdeta\r\n               S: A004 OK Getacl complete", "notes": "from pending", "submit_date": "2005-12-31", "submitter_name": "Arnaud Taddei", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "829", "doc-id": "RFC4342", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   Translating this to the packet-based congestion control of CCID 3,\r\n   the initial CCID 3 sending rate is allowed to be at least two packets\r\n   per RTT, and at most four packets per RTT, depending on the packet\r\n   size.  The initial rate is only allowed to be three or four packets\r\n   per RTT when, in terms of segment size, that translates to at most\r\n   4380 bytes per RTT.", "correct_text": "   Therefore, in contrast to [RFC3448], the initial CCID 3 sending rate\r\n   is allowed to be at least two packets per RTT, and at most four\r\n   packets per RTT, depending on the packet size.  The initial rate is\r\n   only allowed to be three or four packets per RTT when, in terms of\r\n   segment size, that translates to at most 4380 bytes per RTT.  This\r\n   might be implemented, for example, by setting the initial sending\r\n   rate to min(4*s, max(2*s, 4380 bytes)), where \"s\" as usual is the\r\n   packet size in bytes.", "notes": "Clarification of initial sending rates.\r\n\r\nReported By: Eddie Kohler and Sally Floyd, from Gerrit Renker and Arjuna Sathiaseelan \r\n\r\nfrom pending", "submit_date": "2007-02-07", "submitter_name": "Eddie Kohler", "verifier_id": "", "verifier_name": "", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7020", "doc-id": "RFC7951", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.8", "orig_text": "An \"identityref\" value is represented as a string -- the name of an\r\nidentity.  If the identity is defined in a module other than the leaf\r\nnode containing the identityref value, the namespace-qualified form\r\n(Section 4) MUST be used.  Otherwise, both the simple and namespace-\r\nqualified forms are permitted.", "correct_text": "An \"identityref\" value is represented as a string -- the name of an\r\nidentity.  If the identity is defined in a module other than the leaf or\r\nleaf-list node containing the identityref value, the namespace-qualified\r\nform (Section 4) MUST be used.  Otherwise, both the simple and namespace-\r\nqualified forms are permitted.", "notes": "The original text omitted leaf-list nodes, which may also be of \"identityref\" type.", "submit_date": "2022-07-11", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 14:33:22"}, {"errata_id": "2412", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "Section 3 of RFC 4634, on page 5, defines the elementary word\r\noperations to be used subsequently in the text, including the\r\nleft shift operation, '<<'.  Unfortunately, the right shift\r\noperation '>>' is used frequently as well, but not defined\r\nin Section 3.\r\n\r\nI propose to amend the second paragraph of Section 3, on page 5,\r\n\r\n   In the operations below, x<<n is obtained as follows: discard the\r\n   left-most n bits of x and then pad the result with n zeroed bits on\r\n   the right (the result will still be the same number of bits).", "correct_text": "to read:\r\n\r\n   In the operations below, x<<n is obtained as follows: discard the\r\n   left-most n bits of x and then pad the result with n zeroed bits on\r\n   the right (the result will still be the same number of bits).\r\n|  Similarly, x>>n is obtained as follows: discard the right-most n bits\r\n|  of x and then prepend the result with n zeroed bits on the left (the\r\n|  result will still be the same number of bits).", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2428", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "The sample code presents almost all formal function arguments of type\r\narray with predefined (constant) length with this explicit length.\r\nContrary to that, the definition of SHA256Result does not supply\r\nthe expected size of the formal argument 'Message_Digest'.\r\n\r\nAt the bottom of page 39, RFC 4634 says:\r\n\r\nint SHA256Result(SHA256Context *context, uint8_t Message_Digest[])\r\n{\r\n\r\nFor consistency and clarity, it should say:\r\n\r\nint SHA256Result(SHA256Context *context,\r\n                 uint8_t Message_Digest[SHA256HashSize])\r\n{", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2431", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "Similar to item (9), (16), and (17) above, the Description of\r\nSHA224_256ResultN contains improper wording. Additionally,\r\ncounting 28/32 elements as ranging from the \"0th\" up to the\r\n\"28th/32nd\" is unpleasant and wrong -- that erroneously indicates\r\n29/33 elements (octets) !\r\n\r\nNear the bottom of page 44, the RFC says:\r\n\r\n * Description:\r\n *   This helper function will return the 224-bit or 256-bit message\r\n *   digest into the Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the 28th/32nd element.\r\n\r\nFor correctness and consistency, it should say:\r\n\r\n * Description:\r\n *   This helper function will return the 224-bit or 256-bit message\r\n *   digest into the Message_Digest array provided by the caller.\r\n *   NOTE:\r\n *    The first octet of the hash is stored in the element with index 0,\r\n *    the last octet of the hash in the element with index 27/31.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2433", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "The comment text, near the top of page 46, says:\r\n\r\n * Caveats:\r\n *   SHA-384 and SHA-512 are designed to work with messages less\r\n *   than 2^128 bits long. This implementation uses\r\n *   SHA384/512Input() to hash the bits that are a multiple of the\r\n *   size of an 8-bit character, and then uses SHA384/256FinalBits()\r\n *   to hash the final few bits of the input.\r\n\r\nIt should better say -- cf. item (6) and (13) above:\r\n\r\n * Caveats:\r\n *   SHA-384 and SHA-512 are designed to work with messages less\r\n *   than 2^128 bits long. This implementation uses SHA384/512Input()\r\n *   to hash the bits that are a multiple of the size of an 8-bit\r\n|*   character, and optionally then uses SHA384/256FinalBits()\r\n *   to hash the final few bits of the input.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2442", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "The Description for USHAResult, on top of page 69, says:\r\n\r\n * Description:\r\n *   This function will return the 160-bit message digest into the\r\n *   Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the 19th element.\r\n\r\nIt should say:\r\n\r\n * Description:\r\n *   This function will return the message digest of the appropriate\r\n *   bit size, as returned by USHAHashSizeBits(whichSHA) for the\r\n *   'whichSHA' value used in the preceeding call to USHAReset,\r\n *   into the Message_Digest array provided by the caller.\r\n\r\nRationale:\r\n\r\nThe given text roughly matches the SHA-1 case, it is wrong for all\r\nother cases.  The arguments presented for items (9), (16), (17),\r\n(22), (29), (30), and (33) above apply as well.\r\nThe changed text tries to remain precise while avoiding too much\r\nrepetition of facts presented elsewhere in the sample code.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2444", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.3", "orig_text": "The Description of hmacResult, on top of page 77, says:\r\n\r\n * Description:\r\n *   This function will return the N-byte message digest into the\r\n *   Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the Nth element.\r\n\r\nIt should perhaps just say:\r\n\r\n * Description:\r\n *   This function will return the N-byte message digest into the\r\n *   Message_Digest array provided by the caller.\r\n\r\nRationale:\r\nCf. items (9), (16), (17), (22), (29), (30), and (33) above.\r\nFull replacement text for the last two lines is deemed unnecessary.\r\n", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2446", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.3", "orig_text": "The Description of hmacResult, on top of page 77, says:\r\n\r\n * Description:\r\n *   This function will return the N-byte message digest into the\r\n *   Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the Nth element.\r\n\r\nIt should perhaps just say:\r\n\r\n * Description:\r\n *   This function will return the N-byte message digest into the\r\n *   Message_Digest array provided by the caller.\r\n\r\nRationale:\r\nCf. items (9), (16), (17), (22), (29), (30), and (33) above.\r\nFull replacement text for the last two lines is deemed unnecessary.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2351", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.5.4", "orig_text": "On page 24, defines:\r\n\r\n     RekeyMethod ::= SEQUENCE {\r\n       rekeyMethodType  OBJECT IDENTIFIER,\r\n|      rekeyMethodInfo  OCTET STRING\r\n     }", "correct_text": "Add the following clarification immediately after the ASN.1:\r\n\r\nThe OCTET STRING in each of these is an opaque blob whose\r\nprocessing is subsequently defined in the vendor or domain-specific types.\r\n", "notes": "Why doesn't it use the \"ANY DEFINED BY ...\" syntax construct for\r\n'rekeyMethodInfo' ?\r\n\r\nSubsequent definitions in B.5.4.{1,2} define the syntax of\r\ntwo possible instantiations of RekeyMethod, with syntax NULL\r\nand INTEGER, respectively, for the rekeyMethodInfo element.\r\nThat doesn't match!", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "837", "doc-id": "RFC4229", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(2)\r\n\r\nRFC 2068 [4] has been obsoleted by RFC 2616 [11], and the latter\r\npurposely has omitted a few elements of HTTP from the former\r\nspecification because of \"detected problems\" and/or \"lack of\r\nimplementation\" -- cf. Section 19.6 of RFC 2616.\r\nThus, there is no more current specification for these elements.\r\nAccording to my understanding that means that these elements\r\neffectively have been deprecated by RFC 2616.\r\n\r\nAmong those (deprecated) elements of HTTP 1.1 are the HTTP Header\r\nFields:\r\n         -  Content-Base\r\n         -  Content-Version\r\n         -  Derived-From\r\n         -  Keep-Alive\r\n         -  Link\r\n         -  Public\r\n         -  URI\r\n\r\nAs expected, the Registrations for these HTTP Header Fields, as\r\npresented in RFC 4229, consistently all refer to RFC 2068 [4] as\r\nthe (obsolete) 'Specification document' -- but, very surprisingly,\r\nthe registered 'Status' entries for these Header Fields all contain:\r\n\"standard\" instead of \"deprecated\".\r\n\r\nAccording to my understanding of IETF procedures, a feature or\r\nprotocol element must not be named \"standard\" if its specification\r\nhas been officially obsoleted / deprecated by a Standards Track RFC.\r\n\r\nHence, IMHO the IANA Registrations for the above mentioned HTTP\r\nHeader Fields (Subsections 2.1.{21,33,41,59,62,89,108} of RFC 4229\r\nshould be immediately corrected to contain 'Status: deprecated\".\r\n", "correct_text": "[see above]", "notes": "(Note: A status of \"deprecated\" still allows standards conformant\r\nimplementations to implement any such feature or protocol element\r\nfor the sake of backwards compatibility!)\n --VERIFIER NOTES-- \n   This is not an appropriate subject for an erratum. \r\n   Please take this up with the IANA or, better yet, \r\n   write an Internet-Draft. --Peter Saint-Andre", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "838", "doc-id": "RFC4319", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "after studying the recently published RFC 4319 authored by you\r\nI'd like to report the textual issues I found in that memo.  \r\n\r\nI use change bars '|' in column 1 and '^^^' / 'vvv' style tags on \r\nextar lines to emphasize the location of the textual issues and/or    \r\nthe proposed corrections.\r\nIf necessary, I also have adjusted the line folding of proposed \r\ntext to keep it conformant with RFC formatting rules.\r\n\r\n\r\n(1)\r\n\r\nApparently, Figure 2 on page 10 has not been adapted from RFC 3276\r\nto remain aligned with the extensions covered by RFC 4319.      \r\nTo keep the changes minimal, I propose to just amend the Figure         \r\ncaption, replacing:\r\n\r\n       Key:  <////> HDSL2/SHDSL span\r\n             <~~~~> HDSL2/SHDSL segment\r\n             =1=    HDSL2/SHDSL wire-pair-1\r\n             =2=    SHDSL optional wire-pair-2 (Not applicable to HDSL2)\r\n             C      Customer side segment endpoint (modem)\r\n             N      Network side segment endpoint (modem)             \r\n\r\nby:\r\n\r\n       Key:  <////> HDSL2/SHDSL span\r\n             <~~~~> HDSL2/SHDSL segment\r\n             =1=    HDSL2/SHDSL wire-pair-1\r\n|            =2=    SHDSL optional wire-pair-2 (not applicable to HDSL2)\r\n|                   and SHDSL.bis optional wire-pair-3 and wire-pair-4\r\n|                   (not applicable to HDSL2 and 'classic' SHDSL)\r\n             C      Customer side segment endpoint (modem)\r\n             N      Network side segment endpoint (modem)\r\n\r\n\r\n(2)\r\n\r\nSection 2.7, on page 11, contains a bulleted list with two entries.\r\nIt turns out that the second (indented) paragraph of the 2nd bullet\r\nin fact applies to both entries and hence should\r\n  -  not be indented so much, and\r\n  -  be adapted for plural grammar.\r\nThus, the paragraph saying:\r\n                            vvv      vv\r\n      The index value for this profile is a locally-unique\r\n      administratively-assigned name for the profile having the textual\r\n      convention 'SnmpAdminString' (RFC 3411 [RFC3411]).\r\n\r\nshould be modified to say:\r\n                         vvv       vv\r\n|  The index value for these profiles is a locally-unique\r\n|  administratively-assigned name for the profile having the textual\r\n|  convention 'SnmpAdminString' (RFC 3411 [RFC3411]).\r\n\r\n\r\n(3)\r\n\r\nThe REVISION / DESCRIPTION clause pairs in MODULE-IDENTITY macro\r\ninvocations preferrably should be formulated in an 'update-friendly'\r\nmanner, i.e. such that the text does not need to be modified when\r\nanother revision of the MIB module is published in the future.\r\n\r\nTherefore, I propose to change the DESCRIPTION clause for the\r\nRFC 4319 revision of the HDSL2-SHDSL-LINE-MIB, at the bottom of\r\npage 15 to follow this requirement.\r\nThe text there contains improper wording as well, the correction\r\nof which justifies a combined Erratum entry.\r\nHence, the lines:\r\n\r\n   REVISION    \"200512070000Z\" -- December 7, 2005\r\n   DESCRIPTION \"This version, published as RFC 4319.\r\n         The following changes have been made in this version:\r\n           1.  Added a 3rd and 4th wire pair.\r\n           2.  Modified all rates such that their rates are only\r\n               constrained by an unsigned 32-bit value and not by\r\n               what today's perceived technology limitations are.\r\n\r\nshould be changed to say:\r\n\r\n   REVISION    \"200512070000Z\" -- December 7, 2005\r\n|  DESCRIPTION \"Revised version, published as RFC 4319.\r\n         The following changes have been made in this version:\r\n           1.  Added a 3rd and 4th wire pair.\r\n|          2.  Modified all rates such that they are only\r\n               constrained by an unsigned 32-bit value and not by\r\n               what today's perceived technology limitations are.\r\n\r\n\r\n(3)\r\n\r\nOn page 16 (lower half), the 2nd paragraph of the DESCRIPTION clause\r\nof the Hdsl2ShdslPerfCurrDayCount TEXTUAL-CONVENTION contains a mis-\r\nspelled syntax name (of another TEXTUAL-CONVENTION).\r\n\r\nThe sentence,\r\n\r\n                                [ ... ]  At that time, the value of the\r\n         gauge is stored in the previous 1-day history interval, as\r\n         defined in a companion object of type\r\n         Hdsl2Shdsl1DayIntevalCount, and the current interval gauge\r\n         is restarted at zero.\r\n\r\nshould say:\r\n\r\n                                [ ... ]  At that time, the value of the\r\n         gauge is stored in the previous 1-day history interval, as\r\n         defined in a companion object of type\r\n|        Hdsl2Shdsl1DayIntervalCount, and the current interval gauge\r\n         is restarted at zero.\r\n                           ^\r\n\r\n\r\n(4)\r\n\r\nOn page 17 (lower half), the DESCRIPTION clause of the\r\nHdsl2ShdslPerfIntervalThreshold TEXTUAL-CONVENTION suffers from the\r\nlack of a verb in its 2nd sentence.\r\nThe paragraph,\r\n\r\n        \"This convention defines a range of values that may be set in\r\n         a fault threshold alarm control.  As the number of seconds in\r\n         a 15-minute interval numbers at most 900, objects of this type\r\n         may have a range of 0...900, where the value of 0 disables the\r\n         alarm.\"\r\n\r\nshould say:\r\n\r\n        \"This convention defines a range of values that may be set in\r\n         a fault threshold alarm control.  As the number of seconds in\r\n|        a 15-minute interval numbers is at most 900, objects of this\r\n         type may have a range of 0...900, where the value of 0 disables\r\n         the alarm.\"\r\n\r\n\r\n(5)\r\n\r\nOn page 18, there is a word omission in the DESCRIPTION clause of the\r\nHdsl2ShdslWirePair TEXTUAL-CONVENTION.\r\nThe paragraph,\r\n\r\n        \"This is the referenced pair of wires in an HDSL2/SHDSL segment.\r\n         HDSL2 only supports a single pair (wirePair1 or two wire),\r\n         SHDSL lines support an optional second pair (wirePair2 or four\r\n         wire), and G.shdsl.bis support an optional third pair\r\n         (wirePair3 or six wire) and an optional fourth pair\r\n         (wirePair4 or eight wire).\"\r\n\r\nshould say:\r\n\r\n        \"This is the referenced pair of wires in an HDSL2/SHDSL segment.\r\n         HDSL2 only supports a single pair (wirePair1 or two wire),\r\n         SHDSL lines support an optional second pair (wirePair2 or four\r\n|        wire), and G.shdsl.bis lines support an optional third pair\r\n         (wirePair3 or six wire) and an optional fourth pair\r\n         (wirePair4 or eight wire).\"\r\n\r\n\r\n(6)\r\n\r\nOn pages 45..49 it would be very useful to have REFERENCE clauses\r\nadded to the OBJECT-TYPE declarations for the technology specific\r\nobjects in the Span Configuration Profile Table (similarly to what\r\nhas been done for the OBJECT-TYPE declarations for the objects in\r\nthe Unit Inventory Group, on pp. 24..27).\r\n\r\n\r\n(7)\r\n\r\nThe DESCRIPTION clause of the hdsl2ShdslSpanConfMinLineRate OBJECT-\r\nTYPE declaration contains a reference to a truncated object name.\r\n\r\nThat clause says:\r\n\r\n        \"This object configures the minimum transmission rate for\r\n         the associated SHDSL Line in bits-per-second (bps) and includes\r\n         both payload (user data) and any applicable framing overhead.\r\n         If the minimum line rate equals the maximum line rate\r\n         (hdsl2ShdslSpanMaxLineRate), the line rate is considered\r\n         'fixed'.  If the minimum line rate is less than the\r\n         maximum line rate, the line rate is considered\r\n         'rate-adaptive'.\"\r\n\r\nIt should say:\r\n\r\n        \"This object configures the minimum transmission rate for\r\n         the associated SHDSL Line in bits-per-second (bps) and includes\r\n         both payload (user data) and any applicable framing overhead.\r\n         If the minimum line rate equals the maximum line rate\r\n|        (hdsl2ShdslSpanConfMaxLineRate), the line rate is considered\r\n         'fixed'.  If the minimum line rate is less than the\r\n         maximum line rate, the line rate is considered\r\n         'rate-adaptive'.\"\r\n\r\n\r\n(8)\r\n\r\nThe DESCRIPTION clauses of OBJECT-TYPE declarations preferrably\r\nshould be 'self-centric', i.e. describe context as seen from\r\nthe respective object. Therefore, text replications from one object\r\nto another object without proper adaptation are sub-optimal, at best.\r\nIn particular, referencing an object within its DESCRIPTION clause\r\nby name, while omitting to call another object (referenced there)\r\nby its name does not add much to the clarity of the DESCRIPTION.\r\n\r\nTherefore, I propose to slightly modify the DESCRIPTION clause of\r\nthe hdsl2ShdslSpanConfMaxLineRate OBJECT-TYPE declaration, on top\r\nof page 46.  This clause is affected by issue (7) as well.\r\n\r\nThe clause says:\r\n\r\n        \"This object configures the maximum transmission rate for\r\n         the associated SHDSL Line in bits-per-second (bps) and includes\r\n         both payload (user data) and any applicable framing overhead.\r\n         If the minimum line rate equals the maximum line rate\r\n         (hdsl2ShdslSpanMaxLineRate), the line rate is considered\r\n         'fixed'.  If the minimum line rate is less than the\r\n         maximum line rate, the line rate is considered\r\n         'rate-adaptive'.\"\r\n\r\nIt better should say:\r\n\r\n        \"This object configures the maximum transmission rate for\r\n         the associated SHDSL Line in bits-per-second (bps) and includes\r\n         both payload (user data) and any applicable framing overhead.\r\n|        If the minimum line rate (hdsl2ShdslSpanConfMinLineRate) equals\r\n|        the maximum line rate the line rate is considered 'fixed'.\r\n         If the minimum line rate is less than the maximum line rate,\r\n         the line rate is considered 'rate-adaptive'.\"\r\n\r\n\r\n(9)\r\n\r\nOn pages 47/48, the DESCRIPTION clauses for the four objects:\r\n    hdsl2ShdslSpanConfCurrCondTargetMarginDown,\r\n    hdsl2ShdslSpanConfWorstCaseTargetMarginDown,\r\n    hdsl2ShdslSpanConfCurrCondTargetMarginUp,  and\r\n    hdsl2ShdslSpanConfWorstCaseTargetMarginUp\r\ncontain mainly identical text.  This emphasizes the similarities\r\nbetween these objects but leaves the reader alone as to the use and\r\ndiffering purpose of the objects.  It would be very desirable to\r\nhave additional expanatory text added to these four descriptions\r\nto clarify the intended use (e.g., as an alarm limit).\r\n\r\n    ", "correct_text": "[see above]  ", "notes": "from pending", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "839", "doc-id": "RFC4240", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(2)  [ minor textual improvement ]\r\n\r\nIn the final paragraph of section 3.3, on mid-page 11, perhaps\r\nthe words \"most anything\" should be replaced by \"almost anything\".\r\n\r\n\r\n(3)  [ textual improvement ]\r\n\r\nThe last paragraph on page 12 (within Section 4.1.) apparently\r\ncontains a plural/singular inconsistency.\r\nThe text says:\r\n                                         vvv                      vvv\r\n   The media server presents the parameters as environment variables in\r\n   the connection object.  Specifically, the parameter appears in the\r\n   connection.sip tree.                             ^^^     ^^^\r\n\r\nIt should better say:\r\n\r\n   The media server presents the parameters as environment variables in\r\n|  the connection object.  Specifically, the parameters appear in the\r\n   connection.sip tree.\r\n\r\n\r\n(4)  [ inconsistent terminology ]\r\n\r\nI suspect that section 5 contains an unintentional inconsistency\r\nin the terminology used:\r\nThe syntax element represented by the 'uniqueIdentifier' part\r\nof the example in the 9th line of Section 5 apparently is\r\nreferred to as the \"conf-id value\" in various places (once\r\non page 13, 11th text line from the bottom of the page, and\r\n4 occurrences on page 14 (text lines 3, 9, 12, and 13).\r\nBut in the 'Formal Syntax' Section 5.2., this syntactic\r\nelement is named \"instance-id\" (see bottom of page 16).\r\nIt certainly would be preferrable to always use the same\r\nterminology; you should decide which term should be used.\r\n\r\n\r\n(5)  [ editorial artifact ]\r\n\r\nThe call flow diagram on page 15 unnecessarily 'overflows'\r\nto page 16.  The two first text lines on page 16,\r\n\r\n     |       |        |                  |                   |\r\n     |       |        |                  |                   |\r\n\r\ndo not carry any useful information and might better have been\r\nsuppressed.\r\n\r\n\r\n(6)  [ mismatch between diagram and explanation ]\r\n\r\nSubsequently, near the top of page 16, the explanation of the\r\ncall flow diagram on page 15 says:\r\n\r\n   Note that the above call flow does not show any 100 TRYING messages\r\n   that would typically flow from the Application Server to the UACs;\r\n   nor does it show the ACKs from the UACs to the Application Server or\r\n   from the Application Server to the Media Server.\r\n\r\nThe latter is not true; the diagram in fact DOES show these ACKs !\r\nTherefore, this paragraph should be shortened to just say:\r\n\r\n   Note that the above call flow does not show any 100 TRYING messages\r\n   that would typically flow from the Application Server to the UACs.\r\n\r\n\r\n(7)  [ confusion between concrete and abstract parameter names ]\r\n\r\nIn the 'IANA Considerations' Section 6., on page 17, the\r\nregistered lines mix concrete (real) parameter names (like\r\n'play') with the meta-parameter name 'extension' in a way\r\nthat might mislead the reader to taking 'extension' as a\r\nconcrete parameter name as well.\r\n>From Section 3.3., it can clearly be seen that this is merely\r\na placeholder for any additional parameter that might be\r\nstandardized in the future.\r\nI'm seriously in doubt whether it is a good idea to register\r\nthis meta-parameter.  Rather, future standards defining\r\nconcrete instances for the 'extension-param' should register\r\nthose concrete parameter names.\r\n\r\nI therefore propose to delete the final line from the list,\r\n\r\n   Parameter Name    Predefined Values    Reference\r\n   --------------    -----------------    ---------\r\n      .                      .               .\r\n      .                      .               .\r\n      .                      .               .\r\n|  extension                 no           RFC 4240\r\n\r\nand from the actual IANA registration performed.\r\n\r\n\r\n(8)  [ legacy left in text? ]\r\n\r\nThe 3rd paragraph of Section 7, on page 17, says:\r\n\r\n   This document explicitly addresses this issue.  The user names\r\n   described in the text (namely annc, ivr, dialog, and conf) are\r\n   available for whatever local use a given SIP user agent or proxy\r\n   wishes for them.  [ ... ]\r\n\r\nThe user name, 'ivr', does not appear in the remainder of the text.\r\nAdmittedly omitting any detailed research, I suspect its occurrence\r\nto be an improper left-over from earlier drafts.\r\nThus, this text should say:\r\n\r\n   This document explicitly addresses this issue.  The user names\r\n|  described in the text (namely annc, dialog, and conf) are\r\n   available for whatever local use a given SIP user agent or proxy\r\n   wishes for them.  [ ... ]\r\n", "correct_text": "[see above]  \r\n", "notes": "from pending", "submit_date": "2006-01-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "840", "doc-id": "RFC4515", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "The ASN.1 term, `AttributeValue`, has been replaced by\r\n`AssertionValue` wherever it was used previously.\r\nHence, in Section 2 (on page 3) of RFC 4515\r\n\r\n- the ASN.1 line\r\n\r\n        AttributeValue ::= OCTET STRING\r\n\r\n  is not needed any more and might have been omitted, and\r\n\r\n- in the subsequent explanation, the sentence,\r\n\r\n        [...]  The AttributeValue and AssertionValue OCTET STRING have\r\n   the form defined in [RFC4517].  [...]\r\n\r\n  might have been shortened to say:\r\n\r\n        [...]  The AssertionValue OCTET STRING has the form defined ib\r\n   [RFC4517].  [...]", "correct_text": "", "notes": "Source: apps", "submit_date": "2006-06-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "841", "doc-id": "RFC2184", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   initial-section := \"*1\"\r\n\r\n   other-sections := \"*\" ((\"2\" / \"3\" / \"4\" / \"5\" /\r\n                           \"6\" / \"7\" / \"8\" / \"9\") *DIGIT) /\r\n                          (\"1\" 1*DIGIT))", "correct_text": "   initial-section := \"*0\"\r\n\r\n   other-sections := \"*\" (\"1\" / \"2\" / \"3\" / \"4\" / \"5\" /\r\n                          \"6\" / \"7\" / \"8\" / \"9\") *DIGIT)", "notes": "Corrected in RFC 2231", "submit_date": "2001-04-14", "submitter_name": "Terje Braten", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2812", "doc-id": "RFC2319", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "Abstract\r\n\r\n   This document provides information about character encoding KOI8-U\r\n   (KOI8 Ukrainian) wich is a de-facto standard in Ukrainian Internet\r\n   community.  KOI8-U is compatible with KOI8-R (RFC 1489) in all\r\n   Russian letters and extends it with four Ukrainian letters which\r\n   locations are compliant with ISO-IR-111.  The official site of KOI8-U\r\n   Working Group is http://www.net.ua.\r\n", "correct_text": "Abstract\r\n\r\n   This document provides information about character encoding KOI8-U\r\n   (KOI8 Ukrainian) which is a de-facto standard in Ukrainian Internet\r\n   community.  KOI8-U is compatible with KOI8-R (RFC 1489) in all\r\n   Russian letters and extends it with four Ukrainian letters which\r\n   locations are compliant with ISO-IR-111.  The official site of KOI8-U\r\n   Working Group is http://www.net.ua.\r\n", "notes": "A typo in \"which\": s/wich/which", "submit_date": "2011-05-22", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2813", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   The character mnemonics hav been used to table a number of coded\r\n   character sets.", "correct_text": "   The character mnemonics have been used to table a number of coded\r\n   character sets.", "notes": "s/hav/have: a typo", "submit_date": "2011-05-22", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2814", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   exportedFlowTotalCount\r\n                           The total number of Flow Records that the\r\n                           Exporting Process successfully sent to the\r\n                           Collecting Process since the Exporting\r\n                           Process re-initialization.", "correct_text": "   exportedFlowRecordTotalCount\r\n                           The total number of Flow Records that the\r\n                           Exporting Process successfully sent to the\r\n                           Collecting Process since the Exporting\r\n                           Process re-initialization.", "notes": "The exportedFlowRecordTotalCount Information Element (42) is incorrectly referenced in the text in this section as exportedFlowTotalCount.", "submit_date": "2011-05-24", "submitter_name": "Brian Trammell", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "842", "doc-id": "RFC3220", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "Correction 2: to be inserted before the line on page 74\r\n\tstarting \"of any Registration...\"\r\n\r\n========================================================================\r\n      The mobile node MUST verify that the low-order 32 bits\r\n========================================================================", "correct_text": "[see above]", "notes": "from pending\n --VERIFIER NOTES-- \nRFC 3220 has been obsoleted by RFC 3344.   ", "submit_date": "2002-04-23", "submitter_name": "\"Charles E. Perkins\"", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "851", "doc-id": "RFC4795", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "   In order to enable ongoing detection of name conflicts, when an LLMNR\r\n   sender receives multiple LLMNR responses to a query, it MUST check if\r\n   the 'C' bit is clear in any of the responses.  If so, the sender\r\n\r\n   SHOULD send another query for the same name, type, and class, this\r\n   time with the 'C' bit set, with the potentially conflicting resource\r\n   records included in the additional section.", "correct_text": "   In order to enable ongoing detection of name conflicts, when an LLMNR\r\n   sender receives multiple LLMNR responses to a query, it MUST check if\r\n   the 'C' bit is clear in any of the responses.  If so, the sender\r\n   SHOULD send another query for the same name, type, and class, this\r\n   time with the 'C' bit set, with the potentially conflicting resource\r\n   records included in the additional section.", "notes": "The second paragraph has an interspersed blank line inserted. \r\n\r\nfrom pending", "submit_date": "2007-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bernard Aboba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "853", "doc-id": "RFC4529", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   When the control is attached to an LDAP request, the processing of\r\n   the request is conditional on the evaluation of the Filter as applied\r\n   against the target of the operation.  If the Filter evaluates to\r\n   TRUE, then the request is processed normally.  If the Filter\r\n   evaluates to FALSE or Undefined, then assertionFailed (122)\r\n   resultCode is returned, and no further processing is performed.", "correct_text": "   When the control is attached to an LDAP request, the processing of\r\n   the request is conditional on the evaluation of the Filter as applied\r\n   against the target of the operation.  If the Filter evaluates to\r\n   TRUE, then the request is processed normally.  If the Filter\r\n|  evaluates to FALSE or Undefined, then the assertionFailed (122)\r\n   resultCode is returned, and no further processing is performed.", "notes": "Missing an article.", "submit_date": "2006-07-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "854", "doc-id": "RFC2939", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   [3] Droms, R. and K. Fong, \"NetWare/IP Domain Name and Information\",\r\n       RFC 2142, November 1997.", "correct_text": "   [3] Droms, R. and K. Fong, \"NetWare/IP Domain Name and Information\",\r\n       RFC 2242, November 1997.", "notes": "References to RFC 2142 should be to 2242. \r\n\r\nfrom pending", "submit_date": "2007-02-02", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "855", "doc-id": "RFC2489", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   [3] Droms, R. and K. Fong, \"NetWare/IP Domain Name and Information\",\r\n       RFC 2142, November 1997.", "correct_text": "   [3] Droms, R. and K. Fong, \"NetWare/IP Domain Name and Information\",\r\n       RFC 2242, November 1997.", "notes": "References to RFC 2142 should be to 2242.\r\n\r\nfrom pending", "submit_date": "2007-02-02", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "856", "doc-id": "RFC4721", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Ruler line misalignment\r\n\r\nIn Section 2, on page 4, the two ruler lines on top of Figure 1\r\nare misaligned; they should be indented one more column.\r\n\r\nThe same issue holds for Figure 2 in Section 4, on page 11,\r\nand for Figure 3 in Section 5, on page 12.\r\n\r\n\r\n(2)  missing article\r\n\r\nIn the first paragraph of Section 3.1, on page 5,\r\n    \"... specified in Mobile IP specification ...\"\r\nshould better say:\r\n    \"... specified in the Mobile IP specification ...\" .\r\n                     ^^^^^\r\n\r\n(3)  Inconsistent/incomplete change of terminology\r\n\r\nRFC 4721 has changed the terms used to specify various protocol\r\nelements.  Yet these changes have not been performed consistently\r\nthroughout the memo.\r\n\r\nI have observed the following places where updates have been omitted:\r\n\r\n- Section 3.1, page 6, 4th paragraph:\r\n   \"(MN-AAA)\"  should say:  \"(Mobile-AAA)\"\r\n\r\n- Section 3.5, page 11, 3rd paragraph:\r\n   \"MN-AAA\"  should say:  \"Mobile-AAA\"\r\n\r\n- Section 11, last paragraph on page 16:\r\n   \"MN-AAA\"  should say:  \"Mobile-AAA\"\r\n\r\n- Section 11, first paragraph on page 17:\r\n   \"Mobile Node - Foreign Agent (MN-FA)\"  should say:  \"Mobile-Foreign\"\r\n\r\n- Appendix B, first line on page 22:\r\n\r\n     BAD_AUTHENTICATION\r\n  should say:\r\n     'mobile node failed authentication'\r\n\r\n- Appendix E, on page 24:\r\n\r\n     send_error(STALE_CHALLENGE)\r\n  should say:\r\n     send_error(stale_challenge)\r\n\r\n  and\r\n\r\n     send_error(UNKNOWN_CHALLENGE);\r\n  should say:\r\n     send_error(unknown_challenge);\r\n\r\nAlso, Appendix D makes repeated use of \"MN-FA Authentication\",\r\nbut that is not so closely related to the extension now named\r\ndifferently, and thus can perhaps be left unchanged.\r\n\r\n\r\n(4)  Section 11 -- logical grouping\r\n\r\nIn Section 11, the (new) final paragraph is an adjunct to the fourth\r\nindented paragraph (second paragraph on page 17) and should better\r\nhave been unified with that one; the new codes are already covered\r\nby the wording there!\r\n\r\n\r\n(5)  Appendix A -- typo\r\n\r\nIn the 7th bullet (onpage 20), \"compare to\" should say: \"compared to\" .\r\n", "correct_text": "[not submitted]", "notes": "I would like to submit a few comments, drawing your attention\r\nto some textual flaws left over in the text.\r\nThese might not be worth of an RFC Errata Note, but you should\r\nat least make note thereof, for consideration in any future work\r\nderived from this specification.\r\n\r\nfrom pending", "submit_date": "2007-02-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "857", "doc-id": "RFC4181", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.9", "orig_text": "Two point are worth reiterating:", "correct_text": "Two points are worth reiterating:", "notes": "from pending", "submit_date": "2005-10-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "C. M. Heard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "858", "doc-id": "RFC4181", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A says:", "orig_text": "8.) IPR Notice -- if the draft does not contains a verbatim copy of", "correct_text": "8.) IPR Notice -- if the draft does not contain a verbatim copy of", "notes": "from pending", "submit_date": "2005-10-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "C. M. Heard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "859", "doc-id": "RFC4303", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "The 'version numbering' issue (as reported as item (6) for RFC 4302)\r\n\r\nI would have appreciated the introduction of an explicit version\r\nnumbering for ESP, e.g. rename:\r\n      ESP as per RFC 1827  to  ESPv1,\r\n      ESP as per RFC 2406  to  ESPv2  or  ESPv2.0,   and\r\n      ESP as per RFC 4303  to  ESPv3  or  ESPv2.1\r\n(or similar).\r\n\r\nThis would make it easier to specify / identify versions and/or\r\nversion specific behaviour in implementations, without having\r\nto refer to the RFC numbers explicitely. (Similar numbering has\r\nproven very useful with protocols like BGP, SNMP, IMAP, POP, etc.)", "correct_text": "", "notes": "from pending", "submit_date": "2006-03-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "860", "doc-id": "RFC4518", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   COMBINING GRAPHEME JOINER (U+034F) and VARIATION SELECTORs \r\n   (U+180B-180D, FF00-FE0F) code points are also mapped to nothing. ", "correct_text": "   COMBINING GRAPHEME JOINER (U+034F) and VARIATION SELECTORs \r\n   (U+180B-180D, FE00-FE0F) code points are also", "notes": "FF00-FE0F should be FE00-FE0F\r\n\r\nfrom pending", "submit_date": "2007-02-23", "submitter_name": "Stephane PERBELLINI", "verifier_id": "", "verifier_name": "Kurt Zeilenga", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "861", "doc-id": "RFC4695", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "[[From the lines in the modified ABNF]]\r\n\r\n   P        = %x51\r\n   Q        = %x52", "correct_text": "   P        = %x50\r\n   Q        = %x51", "notes": "ASCII, `man ascii` on any UNIX system, RFC 20, et al.\r\n(There must have been some EBCDIC spirit pouring into the ASCII world.)\r\n\r\nfrom pending", "submit_date": "2007-02-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "862", "doc-id": "RFC2152", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In \"UTF-7 Definition\", it says:", "orig_text": "Such characters\r\ninclude control characters such as carriage returns and line\r\nfeeds; thus, a Unicode shifted sequence always terminates at the\r\nof a line.", "correct_text": "Such characters\r\ninclude control characters such as carriage returns and line\r\nfeeds; thus, a Unicode shifted sequence always terminates at the\r\nend of a line.", "notes": "missing word", "submit_date": "2006-05-16", "submitter_name": "Christian Aymon", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7661", "doc-id": "RFC5280", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "      (g)  cross-certification:  Two CAs exchange information used in\r\n           establishing a cross-certificate.  A cross-certificate is a\r\n           certificate issued by one CA to another CA that contains a CA\r\n           signature key used for issuing certificates.", "correct_text": "      (g)  cross-certification:  Two CAs exchange information used in\r\n           establishing a cross-certificate.", "notes": "The removed sentence is factually inaccurate and misleading: \"A cross-certificate is a certificate issued by one CA to another CA that contains a CA signature key used for issuing certificates.\" \r\nA \"signature key used for issuing certificates\" would be a private key.  A certificate simply does not contain a private key.  A definition of \"cross-certificate\" for the purpose of this RFC is already provided in section 3.2, so there is no point in elaborating here.  \r\n(The definition given in section 3.2 conflicts with the narrower, and more generally used, definition given in RFC 4949, but that is beside the point.)", "submit_date": "2023-09-28", "submitter_name": "Benjamin Strauss", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-29 15:17:30"}, {"errata_id": "863", "doc-id": "RFC4291", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "   Nodes must not originate a packet to a multicast address whose scop\r\n   field contains the reserved value 0; if such a packet is received, it\r\n   must be silently dropped.  Nodes should not originate a packet to a\r\n   multicast address whose scop field contains the reserved value F; ...", "correct_text": "   Nodes must not originate a packet to a multicast address whose scope\r\n   field contains the reserved value 0; if such a packet is received, it\r\n   must be silently dropped.  Nodes should not originate a packet to a\r\n   multicast address whose scope field contains the reserved value F; ...", "notes": "Typo: scop --> scope (2 times)\r\n\r\n-- RATIONALE FOR REJECTION --\r\n\r\nThis isn't a typo. The field is named \"scop\".  See Section 2.7:\r\n\r\n   scop is a 4-bit multicast scope value used to limit the scope of \r\n   the multicast group.\r\n\r\nThanks to Bob Hinden for pointing this out.\r\n \r\nThis report was incorrectly marked \"Verified\" from 2007-11-01 to 2008-12-03.", "submit_date": "2007-03-02", "submitter_name": "Yelland Mr Michael", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "864", "doc-id": "RFC4291", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "   Routers must not forward any multicast packets beyond of the scope\r\n   indicated by the scop field in the destination multicast address.\r\n", "correct_text": "   Routers must not forward any multicast packets beyond the scope\r\n   indicated by the scope field in the destination multicast address.\r\n", "notes": "Typo: scop --> scope; extraneous \"of\"\r\n\r\n-- RATIONALE FOR REJECTION --\r\n\r\nThis isn't a typo. The field is named \"scop\".  See Section 2.7:\r\n\r\n   scop is a 4-bit multicast scope value used to limit the scope of \r\n   the multicast group.\r\n\r\nThanks to Bob Hinden for pointing this out.\r\n \r\nThis report was incorrectly marked \"Verified\" from 2007-11-01 to 2008-12-03.\r\n\r\n[There is an extraneous \"of\", which has been listed in a separate report: Errata ID 1627.]", "submit_date": "2007-03-02", "submitter_name": "Yelland Mr Michael", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "865", "doc-id": "RFC4291", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "   Nodes must not originate a packet to a multicast address whose scop\r\n   field contains the reserved value 0; if such a packet is received, it\r\n   must be silently dropped.  Nodes should not originate a packet to a\r\n   multicast address whose scop field contains the reserved value F; ...", "correct_text": "   Nodes must not originate a packet to a multicast address whose scope\r\n   field contains the reserved value 0; if such a packet is received, it\r\n   must be silently dropped.  Nodes should not originate a packet to a\r\n   multicast address whose scope field contains the reserved value F; ...", "notes": "Typo: scop --> scope (2 times)\r\n\r\n-- RATIONALE FOR REJECTION --\r\n\r\nThis isn't a typo. The field is named \"scop\".  See Section 2.7:\r\n\r\n   scop is a 4-bit multicast scope value used to limit the scope of \r\n   the multicast group.\r\n\r\nThanks to Bob Hinden for pointing this out.\r\n \r\nThis report was incorrectly marked \"Verified\" from 2007-11-01 to 2008-12-03.", "submit_date": "2007-03-02", "submitter_name": "Yelland Mr Michael", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5157", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "14", "orig_text": "  key-predicate-expr  = node-identifier *WSP \"=\" *WSP quoted-string", "correct_text": "  key-predicate-expr  = node-identifier *WSP \"=\" *WSP \r\n        (quoted-string / integer-value / decimal-value)", "notes": "An instance identifier is forced to specify every key value to be a string\r\neven though the YANG key leaf type could be a numeric type.\r\nXPath does not require a quoted string here, just YANG.\r\n\r\nOld:  /top/list[idx=\"4\"]\r\nNew: /top/list[idx=4]\n --VERIFIER NOTES-- \n Hi,\r\n\r\nTo be clear, I am withdrawing this errata because existing implementations\r\nmay not accept a numeric literal in an instance-identifier.\r\nI think this should be addressed in YANG 2.0 and this thread should be\r\nrecorded in the yang-next issue trac ker.\r\n\r\nAndy", "submit_date": "2017-10-16", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "920", "doc-id": "RFC4728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.5", "orig_text": "      Opt Data Len\r\n\r\n         8-bit unsigned integer.  Length of the option, in octets,\r\n         excluding the Option Type and Opt Data Len fields.", "correct_text": "      Opt Data Len\r\n\r\n         8-bit unsigned integer.  Length of the option, in octets,\r\n         excluding the Option Type and Opt Data Len fields. In the\r\n         basic form of this Option, this field has the value 2.\r\n         (See Section 7.4.1 for an extended version of this Option.)", "notes": "Provide specific value of the length field.\r\n\r\nfrom pending", "submit_date": "2007-04-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dave Maltz", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "921", "doc-id": "RFC4660", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1) [[posted separately.]]\r\n\r\n(2)  general issue: presentation/formatting of XML text\r\n\r\nAlthough it carries no functional relevance, uniform formatting\r\nand consistent indentation of XML text significantly adds to\r\nthe readability and furthers the understanding of the structure.\r\nUnfortunately, there are many places in the two RFCs where --\r\nperhaps as a result of the use of various tools in the publication\r\nprocess -- non-uniform and inconsistent indentation in XML text\r\nimpedes the readability of the XML schemata and the XML examples.\r\n\r\nAt a minimum, pairing opening and closing XML tags, if on different\r\nlines, should be indented by the same amount of white space,\r\nand XML elements on the same hierarchical level (within another\r\nXML element) should be indented equally.\r\n\r\nFor brevity of this message, I omit detailing the numerous places\r\naffected I have marked in my printed copies of the two RFCs.\r\n\r\n\r\n(3)  repeated word replications and grammar  (RFC 4660)\r\n\r\nThe second paragraph of Section 3.3.1 of RFC 4660, at the bottom\r\nof page 3, says:\r\n\r\n   A SUBSCRIBE request destined to a list URI [4] MAY include multiple\r\n   filters specific to individual resources.  This is achieved by\r\n   including multiple <filter> elements with different URIs of resources\r\n|  in each of those elements.  This resource specific resource-specific\r\n|  filter are processed first before any list specific list-specific\r\n|  filter, if any.  The list specific list-specific filter may or may\r\n   not include a URI.\r\n\r\nIt should perhaps say:\r\n\r\n   A SUBSCRIBE request destined to a list URI [4] MAY include multiple\r\n   filters specific to individual resources.  This is achieved by\r\n   including multiple <filter> elements with different URIs of resources\r\n|  in each of those elements.  This resource-specific filter is\r\n|  processed first, before any list-specific filter, if any.  The\r\n|  list-specific filter may or may not include a URI.\r\n\r\n\r\n(4)  distorting extra blank line   (RFC4660)\r\n\r\nThe example scenario description in Section 4.1 of RFC 4660,\r\non top of page 8, are made less comprehensible by the additional\r\nblank line in between:\r\n\r\n   List1 (list1@example.com) on RLS1 has: bob@example.com\r\n\r\n   list2@biloxi.com\r\n\r\nShould perhaps better say:\r\n\r\n   List1 (list1@example.com) on RLS1 has: bob@example.com\r\n   list2@biloxi.com\r\n\r\nor even better:\r\n\r\n   List1 (list1@example.com) on RLS1 has:\r\n     bob@example.com list2@biloxi.com\r\n\r\n\r\n(5)  inappropriate Section headlines   (RFC4660)\r\n\r\nThe ToC and the body of RFC 4660 (on page 9) contains the Section\r\nheadlines:\r\n\r\n 5.  Server Operation\r\n\r\n 5.1.  NOTIFY Bodies\r\n\r\nshould better say:\r\n\r\n 5.  Notifier Operation\r\n\r\n 5.1   SUBSCRIBE Bodies\r\n\r\nRationale:\r\n\r\nObviously, these titles are inappropriate.\r\n\r\na) The document deals with two kinds of 'server' roles:\r\n     *  Resource List Server (RLS),  and\r\n     *  SIP servers in the Notifier role\r\n   Since Section 4 deals with RLS behaviour (and does tell so\r\n   in its headline), and Section 5 deals with Notifier behaviour,\r\n   the latter should tell so as well, and not pretend to be\r\n   applicable to server operation in general.\r\n\r\nb) NOTIFY bodies/content are dealt with in Section 5.3 ff.\r\n   As can be seen immediately, Section 5.1 talks about\r\n   SUBSCRIBE bodies.\r\n\r\n\r\n(6)  typo/grammar  (RFC 4660)\r\n\r\nWithin Section 5.2.1, at the bottom of page 10, RFC 4660 says:\r\n\r\n                                 [...].  Notifiers belonging to the\r\n|  domain MUST apply the filter to all notifications it sends for that\r\n   subscription, unless policy dictates otherwise.\r\n                                                     ^^^^^^^^\r\nIt should say:\r\n\r\n                                 [...].  Notifiers belonging to the\r\n|  domain MUST apply the filter to all notifications they send for that\r\n   subscription, unless policy dictates otherwise.\r\n                                                     ^^^^^^^^^\r\n\r\n\r\n(7)  placement of text ??   (RFC 4660)\r\n\r\nThe first paragraph of Section 5.3, on page 11,\r\n\r\n   Upon receiving the SUBSCRIBE with the filter, the notifier SHOULD\r\n   retain the filter as long as the subscription persists.  The filter\r\n   MAY be incorporated within an existing subscription (in an active\r\n   dialog) by sending a re-SUBSCRIBE that includes the filter in the\r\n   body.\r\n\r\napparently should have been moved up to the end of Section 5.2\r\nbecause it is related to behaviour during\r\n   \"Notifier Processing of SUBSCRIBE Requests\" == Section 5.2\r\n\r\n\r\n(8)  improper use of articles  (RFC 4660)\r\n\r\nThere are two related issues with text in the 2nd and 3rd paragraph\r\nof Section 5.3, on mid-page 11:\r\n\r\n   If the response sent to the SUBSCRIBE was a \"202\" and the \"202\" was\r\n|  chosen because the filter could not be accepted that time, the NOTIFY\r\n   MAY be used to terminate the subscription if the filter is found\r\n   unacceptable.\r\n\r\n|  As described in [3], the NOTIFY message MAY contain a body that\r\n   describes the state of the resource.  This body is in one of the\r\n   formats listed in the Accept header field of the SUBSCRIBE, or in the\r\n   package-specific default if the Accept header field is omitted.\r\n\r\nThe first occurrence of \"the NOTIFY\" is improper because this is the\r\nfirst place the text talks about a NOTIFY message in this context.\r\nThe definite article should either be omitted entirely, or better\r\nbe replaced by \"a NOTIFY message\".\r\nThe second \"the NOTIFY\" is improper because it (re-)states a general\r\nproperty of all NOTIFY messages, not of a specific NOTIFY message.\r\nTherefore, the above text should say:\r\n\r\n   If the response sent to the SUBSCRIBE was a \"202\" and the \"202\" was\r\n|  chosen because the filter could not be accepted that time, a NOTIFY\r\n   maeeage MAY be used to terminate the subscription if the filter is\r\n   found unacceptable.\r\n\r\n|  As described in [3], a NOTIFY message MAY contain a body that\r\n   describes the state of the resource.  This body is in one of the\r\n   formats listed in the Accept header field of the SUBSCRIBE, or in the\r\n   package-specific default if the Accept header field is omitted.\r\n\r\n\r\n(9)  missing articles  (RFC 4660)\r\n\r\nWithin Section 7.1.3, near the top of page 20, where RFC 4660 says:\r\n\r\n   Notification containing both tuples is sent to the subscriber in this\r\n   case:\r\n\r\nit should better say:\r\n\r\n|  A Notification containing both tuples is sent to the subscriber in\r\n   this case:\r\n\r\nand within Section 7.2.3, in the upper half of page 26, where the RFC\r\nsays:\r\n\r\n   Notification to the subscriber is created, taking into account the\r\n   <trigger> and <what> elements:\r\n\r\nit should better say:\r\n\r\n|  A Notification to the subscriber is created, taking into account the\r\n   <trigger> and <what> elements:\r\n", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "922", "doc-id": "RFC4728", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.6", "orig_text": "      Opt Data Len\r\n\r\n         8-bit unsigned integer.  Length of the option, in octets,\r\n         excluding the Option Type and Opt Data Len fields.\r\n", "correct_text": "      Opt Data Len\r\n\r\n         8-bit unsigned integer.  Length of the option, in octets,\r\n         excluding the Option Type and Opt Data Len fields.  In this\r\n         case, the value of this field is always 10.", "notes": "Provide specific length value.\r\n\r\nDave Maltz wrote:\r\n\"disagree. I'd prefer the original wording.\"\r\n\r\nfrom pending", "submit_date": "2007-04-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dave Maltz", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "923", "doc-id": "RFC4661", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.5", "orig_text": "   A user wants to know if a group of his friends is available for\r\n   gaming.  He orders notifications about the current status and future\r\n   changes of the game-specific presence information.", "correct_text": "   A user wants to know if a group of his friends is available for\r\n   gaming.  He orders notifications about the current status and future\r\n|  changes of the (hypothetical) game-specific presence information.\r\n", "notes": "The example in Section 6.5 of RFC 4661 makes us of an XML namespace\r\n\"game-ext\".\r\nI strongly suspect that this is a hypothetical namespace; at least,\r\nit currently does not appear in the IANA XML namespace sub-registry.\r\nIf this is the case, this fact should have been communicated to the\r\nRFC reader, e.g. by changing the text above.\r\n\r\nfrom pending", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "924", "doc-id": "RFC4728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "      Flow Identification\r\n\r\n         The flow ID for this flow, as described in Section 3.5.1.", "correct_text": "      Flow Identifier\r\n\r\n         The flow ID for this flow, as described in Section 3.5.1.", "notes": "Terminology inconsistency.\r\n\r\nfrom pending", "submit_date": "2007-04-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dave Maltz", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "925", "doc-id": "RFC4661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "significant issues with filter syntax  ( ABNF in RFC 4661 )\r\n\r\nMany of the filter examples in RFC 4661 and RFC 4660 do not conform\r\nwith the ABNF presented in Section 5, on page 11, of RFC 4661.\r\nFurther, that ABNF allows unexpected, strange instantiations of\r\n'elem-path', and there's at least one significant semantical\r\nambiguity in the syntax described.\r\n\r\nBecause I am a bloody XML and XML XPATH layman, I am not in a\r\nposition to exactly diagnose what is wrong, and to quickly propose\r\nsuitable corrections, in a way that keeps the specification as\r\nclose to XPATH as possible.\r\n\r\nI just present some of the strange outcomes of strict application\r\nof the RFC 4661 ABNF and a few pointers to examples in the RFC\r\ntext that do not conform with that syntax.\r\n\r\na) ambiguous semantics / insufficient syntax\r\n\r\nThe ABNF production,\r\n\r\n   expression = \"[\" (elem-expr / attr-expr)\r\n                         1*[oper (elem-expr / attr-expr)] \"]\"\r\nentails\r\n\r\n   oper = \"and\" / \"or\"\r\n\r\nAccordingly, these rules allow to build up expressions containing\r\nmultiple terms of the form  '(elem-expr / attr-expr)'  separated\r\nby \"and\" and/or \"or\" operators.\r\nThere are no operator precedence rules specified, and there's no\r\npossibility to insert parentheses to build sub-expressions / groups\r\nto enforce the desired operator precedence.\r\nThus, it remains unclear whether, e.g., an expression of the form,\r\n     [ <expr1> or <expr2> and <expr3> ]\r\nmeans:\r\n     [ <expr1> or ( <expr2> and <expr3> ) ]\r\n(corresponding to commonly used precedence rules),\r\nor:\r\n     [ ( <expr1> or <expr2> ) and <expr3> ]\r\n(corresponding to simple left-to-right operator evaluation).\r\n\r\nb)  strange productions (#1)\r\n\r\nThe ABNF production,\r\n\r\n   elem-path = (element / \"*\") 1*[\"/\" / \"*\" / element] [\"*\" / element]\r\n\r\ntogether with:\r\n\r\n   element = [ns] string\r\n   ns = string \":\"\r\n\r\nadmits 'elem-path' values of strange and unexpected forms, e.g.,\r\n\r\n   ****\r\n   *<ns_string1>:<elem_string1><elem_string2><ns_strind3>:<elem_string3>\r\n\r\nwithout any intervening separator characters.\r\n\r\nI am quite sure that this was not intended.\r\n\r\nLooking at the 'elem-path' production, it can be observed:\r\nThe construction '1*[ ... ]' apparently does not make much\r\nsense; since a group in brackets, '[ ... ]', means \"optional\",\r\nthis construction would be equivalent to the simpler '*( ...)'.\r\nPerhaps, the  '1*[ ... ]' group should look similar to the\r\n'1*( ... )'  group in\r\n   elem-reference =  \"/\" 1*(\"/\" / \"/*\" / (\"/\" element))\r\nincluding the required \"/\" in all alternatives.\r\nThis also make the final, optional group questionable.\r\n\r\nc)  strange productions (#2)\r\n\r\nThe ABNF productions,\r\n   reference = elem-reference / attr-reference\r\n   attr-reference = reference attribute\r\ntogether with:\r\n   attribute = \"@\" [ns] string\r\n   ns = string \":\"\r\nadmits 'reference' values with multiple attribute references like\r\n   <elem-reference>@<ns1>:<attr1>@<attr2>@<attr3>@<ns4>:<attr4>\r\n\r\nI am quite sure that this was not intended.\r\n\r\nc)  front end of examples not matching the syntax\r\n\r\nSuccessive substitution of the ABNF productions of RFC 4661 leads\r\nto the following observations:\r\n\r\n  *  each 'elem-reference' must start with a double-slash, \"//\" ;\r\n  *  each 'reference' starts with an 'elem-reference',\r\n     and hence it must start with a double-slash;\r\n  *  each 'selection' starts with a 'reference,\r\n     and hence it must start with a double-slash.\r\n\r\nMany examples do not conform to this restriction, starting from\r\nthe short examples at the bottom of page 11 up to many of the\r\ndetailed XML examples in both RFCs.\r\n\r\nd)  back end of examples not matching the syntax\r\n\r\nFurther observations from the ABNF:\r\n  *  (un-escaped) square brackets, \"[\" and \"]\" only appear\r\n     in the 'expression' production, forming the leading and\r\n     the trailing character of it, respectively;\r\n  *  each 'selection' contains at most one 'expression', and\r\n     this 'expression' is the trailing part of the 'selection;\r\n  *  hence, each 'selection' contains at most one matching pair\r\n     of square brackets, and if it does, the \"]\" must be the\r\n     last character of it.\r\n\r\nThere are examples given, e.g. in Section 6.1 of RFC 4661,\r\non top of page 13, and in Section 6.6 of RFC 4661, on page 15,\r\nwhere this restriction is not adhered to!\r\n\r\n\r\nFinal conclusion:  Apparently, all (or most) examples presented\r\nare expected to be crafted as intended, i.e. with valid syntax.\r\nHence, the ABNF needs to be substantially reworked to allow\r\nproduction of these examples, and to really produce exactly what\r\nit should.  Otherwise, implementations based on the ABNF will\r\ndrastically fail, will not conform to the intended behaviour,\r\nand will not be interoperable with implementations not based\r\non the ABNF of RFC 4661.", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "926", "doc-id": "RFC4728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "   The behavior of a node processing a packet containing DSR Options\r\n   header with both a DSR Source Route option and a Route Request option\r\n   is unspecified.", "correct_text": "   The behavior of a node processing a packet containing a DSR Options\r\n   header with both a DSR Source Route option and a Route Request option\r\n   is unspecified.", "notes": "missing article.\r\n\r\nfrom pending", "submit_date": "2007-04-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dave Maltz", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "866", "doc-id": "RFC4234", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix A says:", "orig_text": "    External representations of terminal value characters will vary\r\n    according to constraints in the storage or transmission environment.\r\n    Hence, the same ABNF-based grammar may have multiple external\r\n    encodings, such as one for a 7-bit US-ASCII environment, another for\r\n    a binary octet environment, and still a different one when 16-bit\r\n    Unicode is used.  Encoding details are beyond the scope of ABNF,\r\n    although Appendix A (Core) provides definitions for a 7-bit US-ASCII\r\n    environment as has been common to much of the Internet.", "correct_text": "    External representations of terminal value characters will vary\r\n    according to constraints in the storage or transmission environment.\r\n    Hence, the same ABNF-based grammar may have multiple external\r\n    encodings, such as one for a 7-bit US-ASCII environment, another for\r\n    a binary octet environment, and still a different one when 16-bit\r\n    Unicode is used.  Encoding details are beyond the scope of ABNF,\r\n    although Appendix B (Core) provides definitions for a 7-bit US-ASCII\r\n    environment as has been common to much of the Internet.", "notes": "Appendix A\" by \"Appendix B\" here.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \n   Fixed in RFC 5234.", "submit_date": "2007-03-02", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "867", "doc-id": "RFC4668", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "misleading RFC title, including abuse of defined terms\r\n(for RFCs 4668 - 4671)\r\n\r\nIMHO, the RFC titles, \"RADIUS ... MIB for IPv6\" are misleading.\r\nIn fact, the new RFCs extend the RADIUS MIB modules to cover\r\nIPv6, but they are not IPv6 specific!\r\nPerhaps, better wording would have been \"... for IPv4 and IPv6\".\r\n\r\nFurthermore, a very 'popular' clash of terms shines up here.\r\nAs specified in RFC 3410 and Part 1 of STD 62, RFC 3411, and\r\nre-stated in the boilerplate Section 3, \"The Internet-Standard\r\nManagement Framework\", of all four RFCs, there's just one single\r\nManagement Information Base (MIB) comprised of various \"MIB modules\".\r\nThus, throughout the titles and the text bodies of the RFCs, the\r\nproper term, \"RADIUS ... MIB module\" should be used instead of the\r\nrather sluggish \"RADIUS ... MIB\".", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "868", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": " ;For name=3D\"AGENT\"\r\n   param        =3D agent-inline-param\r\n\r\n   param        =3D/ agent-refer-param\r\n\r\n   value        =3D agent-inline-value\r\n        ; Value and parameter MUST match\r\n\r\n   value        =3D/ agent-refer-value\r\n        ; Value and parameter MUST match\r\n\r\n   agent-inline-param =3D \"\"\r\n        ; No parameters allowed\r\n\r\n   agent-refer-param =3D \"VALUE\" \"=3D\" \"uri\"\r\n        ; Only value parameter allowed\r\n\r\n   agent-inline-value =3D text-value\r\n        ; Value MUST be a valid vCard object\r\n\r\n   agent-refer-value =3D uri\r\n        ; URI MUST refer to image content of given type", "correct_text": " ;For name=3D\"AGENT\"\r\n   param        =3D agent-inline-param\r\n\r\n   param        =3D/ agent-refer-param\r\n\r\n   value        =3D agent-inline-value\r\n        ; Value and parameter MUST match\r\n\r\n   value        =3D/ agent-refer-value\r\n        ; Value and parameter MUST match\r\n\r\n   agent-inline-param =3D \"\"\r\n        ; No parameters allowed\r\n\r\n   agent-refer-param =3D \"VALUE\" \"=3D\" \"uri\"\r\n        ; Only value parameter allowed\r\n\r\n   agent-inline-value =3D text-value\r\n        ; Value MUST be a valid vCard object\r\n\r\n   agent-refer-value =3D uri\r\n        ; URI MUST refer a valid vCard object\r\n", "notes": "- Presumably, the comment from img-refer-value was copied, but it was\r\nnot modified.\r\n- The correction is consistent with comment for agent-inline-value.\r\n- The purpose of AGENT type is \"To specify information about another\r\nperson who will act on behalf of the individual or resource associated\r\nwith the vCard.\" (Section 3.5.4)\r\n", "submit_date": "2007-03-18", "submitter_name": "Javier Godoy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "869", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   ;For name=\"SOURCE\"\r\n   param        = source-param\r\n        ; No parameters allowed\r\n", "correct_text": "   ;For name=\"SOURCE\"\r\n   param        = source-param\r\n        ; Only source parameters allowed\r\n", "notes": "Corrected the comment.\r\n", "submit_date": "2007-03-25", "submitter_name": "Javier Godoy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2394", "doc-id": "RFC2328", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.", "orig_text": "Table 5: Backbone distances calculated by Routers RT3 and RT4\r\n\r\n                              dist  from   dist  from\r\n                              RT3          RT4\r\n\r\n                   to  Ia     20           27\r\n                   to  Ib     15           22", "correct_text": "Table 5: Backbone distances calculated by Routers RT3 and RT4.\r\n\r\n                              dist  from   dist  from\r\n                              RT3          RT4\r\n\r\n                   to  Ia     15           22\r\n\t\t   to  Ib     20           27", "notes": "From RT3 and RT4 perspective the Ia is the nearest interface while Ib is at the remote side of the link connecting RT6 to RT10.\r\n\r\n", "submit_date": "2010-07-29", "submitter_name": "Andrea Ceschia", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "870", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": " ;For name=3D\"UID\"\r\n   param        =3D \"\"\r\n        ; No parameters allowed\r\n\r\n   value        =3D text-value", "correct_text": " ;For name=\"UID\"\r\n   param        = \"TYPE\" \"=\" (iana-token / x-name)\r\n        ; Only the TYPE parameter is allowed.\r\n\r\n   value        = text-value\r\n", "notes": "Section 3.6.7 (p. 23) \"UID Type Definition\" says:\r\n\r\n   The type can include the type parameter \"TYPE\" to specify the format\r\n   of the identifier. The TYPE parameter value should be an IANA\r\n   registered identifier format. The value can also be a non-standard\r\n   format.\r\n\r\nAlexey: edited as per feedback from Simon Perreault.\r\n", "submit_date": "2007-03-25", "submitter_name": "Javier Godoy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "871", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   adr-type     =3D \"dom\" / \"intl\" / \"postal\" / \"parcel\" / \"home\"\r\n                / \"work\" / \"pref\" / iana-type / x-name\r\n                                    ^^^^^^^^^\r\n", "correct_text": "   adr-type     =3D \"dom\" / \"intl\" / \"postal\" / \"parcel\" / \"home\"\r\n                / \"work\" / \"pref\" / iana-token / x-name\r\n                                    ^^^^^^^^^^\r\n", "notes": "iana-type is not defined in given ABNF, but iana-token is. This is\r\nthe only reference to iana-type in the document, so it is likely to be a\r\ntypo.\r\n\r\n   iana-token   =3D 1*(ALPHA / DIGIT / \"-\")\r\n        ; vCard type or parameter identifier registered with IANA\r\n", "submit_date": "2007-03-25", "submitter_name": "Javier Godoy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "927", "doc-id": "RFC4728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.6.2", "orig_text": "   -  Set the Protocol field of the IP header to the protocol number\r\n      assigned for DSR (48).", "correct_text": "   -  Set the Protocol field of the previous header to the protocol\r\n      number assigned for DSR (48).", "notes": "The procedure specified in Section 8.6.2 is a bit misleading in its\r\nlast step; if followed literally, it will mess up the packet in the\r\ncase that there is any Hop-by-Hop Options header present after the\r\nIP header.\r\n\r\nfrom pending", "submit_date": "2007-04-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dave Maltz", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "872", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   BEGIN:vCard\r\n   VERSION:3.0\r\n   FN:Frank Dawson\r\n   ORG:Lotus Development Corporation\r\n   ADR;TYPE=3DWORK,POSTAL,PARCEL:;;6544 Battleford Drive\r\n    ;Raleigh;NC;27613-3502;U.S.A.\r\n   TEL;TYPE=3DVOICE,MSG,WORK:+1-919-676-9515\r\n   TEL;TYPE=3DFAX,WORK:+1-919-676-9564\r\n   EMAIL;TYPE=3DINTERNET,PREF:Frank_Dawson@Lotus.com\r\n   EMAIL;TYPE=3DINTERNET:fdawson@earthlink.net\r\n   URL:http://home.earthlink.net/~fdawson\r\n   END:vCard\r\n\r\n\r\n   BEGIN:vCard\r\n   VERSION:3.0\r\n   FN:Tim Howes\r\n   ORG:Netscape Communications Corp.\r\n   ADR;TYPE=3DWORK:;;501 E. Middlefield Rd.;Mountain View;\r\n    CA; 94043;U.S.A.\r\n   TEL;TYPE=3DVOICE,MSG,WORK:+1-415-937-3419\r\n   TEL;TYPE=3DFAX,WORK:+1-415-528-4164\r\n   EMAIL;TYPE=3DINTERNET:howes@netscape.com\r\n   END:vCard", "correct_text": "   BEGIN:vCard\r\n   VERSION:3.0\r\n   FN:Frank Dawson\r\n|  N:Dawson;Frank;;;\r\n   ORG:Lotus Development Corporation\r\n   ADR;TYPE=WORK,POSTAL,PARCEL:;;6544 Battleford Drive\r\n    ;Raleigh;NC;27613-3502;U.S.A.\r\n   TEL;TYPE=VOICE,MSG,WORK:+1-919-676-9515\r\n   TEL;TYPE=FAX,WORK:+1-919-676-9564\r\n   EMAIL;TYPE=INTERNET,PREF:Frank_Dawson@Lotus.com\r\n   EMAIL;TYPE=INTERNET:fdawson@earthlink.net\r\n   URL:http://home.earthlink.net/~fdawson\r\n   END:vCard\r\n\r\n\r\n   BEGIN:vCard\r\n   VERSION:3.0\r\n   FN:Tim Howes\r\n|  N:Howes;Tim;;;\r\n   ORG:Netscape Communications Corp.\r\n   ADR;TYPE=WORK:;;501 E. Middlefield Rd.;Mountain View;\r\n    CA; 94043;U.S.A.\r\n   TEL;TYPE=VOICE,MSG,WORK:+1-415-937-3419\r\n   TEL;TYPE=FAX,WORK:+1-415-528-4164\r\n   EMAIL;TYPE=INTERNET:howes@netscape.com\r\n   END:vCard\r\n", "notes": "- \"Profile special notes: The vCard object MUST contain the FN, N and\r\nVERSION types.\" (Section 1) N was missing in the original information.\r\n", "submit_date": "2007-03-25", "submitter_name": "Javier Godoy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "873", "doc-id": "RFC3964", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "    src_v6 = 2002:1234:1234::1 (forged address of the target 6to4 node)\r\n    dst_v6 = 2002:0900:0002::1 (valid address)\r\n    src_v4 = 8.0.0.1           (valid or invalid address)\r\n    dst_v4 = 9.0.0.2           (valid address, matches dst_v6)\r\n", "correct_text": "    src_v6 = 2002:1234:1234::1 (forged address of the target 6to4 node)\r\n    dst_v6 = 2001:db8::1       (valid address)\r\n    src_v4 = 8.0.0.1           (valid or invalid address)", "notes": "copy/paste error.  Traffic is sent to the native IPv6 node, so the \r\ndestination address should be non-2002::/16.  When 6to4 is not used, \r\ndst_v4 is not applicable so it could be removed.\r\n\r\nfrom pending", "submit_date": "2007-03-26", "submitter_name": "Peter Su", "verifier_id": "", "verifier_name": "Pekka Savola", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "874", "doc-id": "RFC3964", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.5", "orig_text": "    The policy control is usually enacted by applying restrictions to\r\n    where the routing information for 2002::/16 and/or 192.188.99.0/24\r\n    (if the anycast address used [3]) will spread.", "correct_text": "    The policy control is usually enacted by applying restrictions to\r\n    where the routing information for 2002::/16 and/or 192.88.99.0/24\r\n    (if the anycast address used [3]) will spread.", "notes": "typo in the anycast address.\r\n\r\n\r\nfrom pending", "submit_date": "2007-03-26", "submitter_name": "Peter Su", "verifier_id": "", "verifier_name": "Pekka Savola", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "876", "doc-id": "RFC4669", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "misleading RFC title, including abuse of defined terms \r\n(for RFCs 4668 - 4671) \r\n\r\nmisleading RFC title, including abuse of defined terms \r\n(for RFCs 4668 - 4671)\r\n\r\nIMHO, the RFC titles, \"RADIUS ... MIB for IPv6\" are misleading.\r\nIn fact, the new RFCs extend the RADIUS MIB modules to cover\r\nIPv6, but they are not IPv6 specific!\r\nPerhaps, better wording would have been \"... for IPv4 and IPv6\".\r\n\r\nFurthermore, a very 'popular' clash of terms shines up here.\r\nAs specified in RFC 3410 and Part 1 of STD 62, RFC 3411, and\r\nre-stated in the boilerplate Section 3, \"The Internet-Standard\r\nManagement Framework\", of all four RFCs, there's just one single\r\nManagement Information Base (MIB) comprised of various \"MIB modules\".\r\nThus, throughout the titles and the text bodies of the RFCs, the\r\nproper term, \"RADIUS ... MIB module\" should be used instead of the\r\nrather sluggish \"RADIUS ... MIB\".", "correct_text": "", "notes": "from pending\n --VERIFIER NOTES-- \nno change in title is needed at this stage - ipV6 covers also ipv4n titles   ", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "877", "doc-id": "RFC4670", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "misleading RFC title, including abuse of defined terms \r\n(for RFCs 4668 - 4671)\r\n\r\nIMHO, the RFC titles, \"RADIUS ... MIB for IPv6\" are misleading.\r\nIn fact, the new RFCs extend the RADIUS MIB modules to cover\r\nIPv6, but they are not IPv6 specific!\r\nPerhaps, better wording would have been \"... for IPv4 and IPv6\".\r\n\r\nFurthermore, a very 'popular' clash of terms shines up here.\r\nAs specified in RFC 3410 and Part 1 of STD 62, RFC 3411, and\r\nre-stated in the boilerplate Section 3, \"The Internet-Standard\r\nManagement Framework\", of all four RFCs, there's just one single\r\nManagement Information Base (MIB) comprised of various \"MIB modules\".\r\nThus, throughout the titles and the text bodies of the RFCs, the\r\nproper term, \"RADIUS ... MIB module\" should be used instead of the\r\nrather sluggish \"RADIUS ... MIB\".", "correct_text": "", "notes": "from pending\n --VERIFIER NOTES-- \nno title change needed - ipv6 covers also previous ipv4 support   ", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "928", "doc-id": "RFC4872", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14.1", "orig_text": "[[Within the explanations for the PROTECTION Object, on mid-page 32]]\r\n\r\nReserved: 5 bits", "correct_text": "Reserved: 6 bits", "notes": "See the artwork of the object on page 31 and count the bits.\r\n\r\nfrom pending", "submit_date": "2007-05-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "929", "doc-id": "RFC4872", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.1", "orig_text": "   The primary path route is specified via the PRIMARY_PATH_ROUTE object\r\n   (PPRO).  The Primary Path Route Class Number (Class-Num) of form\r\n   0bbbbbbb 38.", "correct_text": "   The primary path route is specified via the PRIMARY_PATH_ROUTE object\r\n   (PPRO).  The Primary Path Route Class Number (Class-Num) of form\r\n   0bbbbbbb is 38.\r\n       \r\nor even:\r\n\r\n   The primary path route is specified via the PRIMARY_PATH_ROUTE object\r\n   (PPRO).  The Primary Path Route Class Number (Class-Num) of form\r\n   0bbbbbbb assigned by IANA is 38.", "notes": "Missing verb.\r\n\r\nfrom pending", "submit_date": "2007-05-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "930", "doc-id": "RFC4872", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.1", "orig_text": "   The contents of a PRIMARY_PATH_ROUTE object are a series of\r\n   variable-length data items called subobjects (see Section 15.3).", "correct_text": "   The contents of a PRIMARY_PATH_ROUTE object are a series of\r\n   variable-length data items called subobjects (see Section 15.2).", "notes": "Referred to wrong section.  15.3 --> 15.2\r\n\r\nfrom pending", "submit_date": "2007-05-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "878", "doc-id": "RFC4824", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "                   SFS       \\0/     \\0__     0/_     0/\r\n                              |       |       |       |\\\r\n                             / \\     / \\     / \\     / \\\r\n                              U       V       W       X\r\n                   IP-SFS    ACK     KAL     NAK     RTR\r\n\r\n                   -----------------------------------------\r\n\r\n                   SFS        0__     0__\r\n                             /|       |\\\r\n                             / \\     / \\\r\n                              Y       Z\r\n                   IP-SFS    RTT    unused", "correct_text": "                   SFS       \\0/     |0       0/_     0/\r\n                              |       |\\      |       |\\\r\n                             / \\     / \\     / \\     / \\\r\n                              U       V       W       X\r\n                   IP-SFS    ACK     KAL     NAK     RTR\r\n\r\n                   -----------------------------------------\r\n\r\n                   SFS       \\0__     0__\r\n                              |       |\\\r\n                             / \\     / \\\r\n                              Y       Z\r\n                   IP-SFS    RTT    unused", "notes": "The illustrated SFS for symbol 'Y', signifying control signal 'RTT',\r\nis depicted as identical with symbol 'M', which signals nibble value\r\n0x0C.  This means that some implementations may break off receipt with\r\nan error on receiving 0x0C and interpreting it as RTT, while others\r\nmay see RTT and interpret it as a spurious 0x0C, and ignore it.\r\n\r\nReferences [JCroft, Wikipedia] gives a different way of signalling 'Y',\r\nwhich does not coincide with any of the other symbols.  This\r\ndiscrepancy between the current specification and the references may\r\nalso result in both implementation and execution differences, as some\r\ninterfaces may already have signal 'Y' hard-coded according to [JCroft]\r\nor [Wikipedia], which will result in transmission of an SFS which will\r\nnot be understood by an interface that follows the current specification\r\nstrictly.\r\n\r\nAuthor: Errors in the forms of SFS representation for SFS V/KAL and SFS Y/RTT.\r\n\r\nfrom pending", "submit_date": "2007-04-08", "submitter_name": "Henrik Levkowetz", "verifier_id": "", "verifier_name": "Jogi Hofmueller", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "879", "doc-id": "RFC4671", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "misleading RFC title, including abuse of defined terms \r\n(for RFCs 4668 - 4671)\r\n\r\nIMHO, the RFC titles, \"RADIUS ... MIB for IPv6\" are misleading.\r\nIn fact, the new RFCs extend the RADIUS MIB modules to cover\r\nIPv6, but they are not IPv6 specific!\r\nPerhaps, better wording would have been \"... for IPv4 and IPv6\".\r\n\r\nFurthermore, a very 'popular' clash of terms shines up here.\r\nAs specified in RFC 3410 and Part 1 of STD 62, RFC 3411, and\r\nre-stated in the boilerplate Section 3, \"The Internet-Standard\r\nManagement Framework\", of all four RFCs, there's just one single\r\nManagement Information Base (MIB) comprised of various \"MIB modules\".\r\nThus, throughout the titles and the text bodies of the RFCs, the\r\nproper term, \"RADIUS ... MIB module\" should be used instead of the\r\nrather sluggish \"RADIUS ... MIB\".", "correct_text": "", "notes": "from pending\n --VERIFIER NOTES-- \nno title change needed - ipv6 covers also previous ipv4 support      ", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "880", "doc-id": "RFC4824", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   IP-SFS adapts the standard SFSS to encode an alphabet of 16 signals\r\n   (flag patterns) to represent data values 0-15 (Section 3.2.1) and 9\r\n   signals to represent control functions (Section 3.2.2).  With 16 data\r\n   signals, IP-SFS transmission is based upon 4-bit nibbles, two per\r\n   octet.  Each of the signal patterns defined in Section 3.2 is called\r\n   an SFS.", "correct_text": "   IP-SFS adapts the standard SFSS to encode an alphabet of 16 signals\r\n   (flag patterns) to represent data values 0-15 (Section 3.3) and 9\r\n   signals to represent control functions (Section 3.4).  With 16 data\r\n   signals, IP-SFS transmission is based upon 4-bit nibbles, two per\r\n   octet.  Each of the signal patterns defined in Section 3.2 is called\r\n   an SFS.", "notes": "In Section 3. reference is made to sections 3.2.1 and 3.2.2, which\r\ndon't exist.  I believe you meant to refer to 3.3 and 3.4 respectively.\r\n\r\nfrom pending", "submit_date": "2007-04-08", "submitter_name": "Henrik Levkowetz", "verifier_id": "", "verifier_name": "Jogi Hofmueller", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "881", "doc-id": "RFC4671", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "[[DESCRIPTION clause of the radiusAuthServResetTime OBJECT-TYPE declaration]]\r\n\r\n                \"If the server has a persistent state (e.g., a process)\r\n                 and supports a 'reset' operation (e.g., can be told to\r\n                 re-read configuration files), this value will be the\r\n                 time elapsed (in hundredths of a second) since the\r\n                 server was 'reset.'  For software that does not\r\n                 have persistence or does not support a 'reset'\r\n                 operation, this value will be zero.\"", "correct_text": "                \"If the server has a persistent state (e.g., a process)\r\n                 and supports a 'reset' operation (e.g., can be told to\r\n                 re-read configuration files), this value will be the\r\n                 time elapsed (in hundredths of a second) since the\r\n                 server was 'reset'.  For software that does not\r\n                 have persistence or does not support a 'reset'\r\n                 operation, this value will be zero.\"", "notes": "This does not conform to the 'rational quoting' style required\r\nby the RFC authoring guidelines.\r\n\r\nfrom pending", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "882", "doc-id": "RFC4671", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "hundredths of a second", "correct_text": "centiseconds", "notes": "Why not use the common ISO-standard unit-multiple name, \"centiseconds\" (abbreviation: \"cs\"), instead of the long-winded \"hundredths of a second\" ?\r\n\r\nThis applies to the DESCRIPTION clauses of\r\n  - radiusAccServUpTime  (RFC 4671, page 7),\r\n  - radiusAccServResetTime  (RFC 4671, page 7),\r\n\r\nfrom pending", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "884", "doc-id": "RFC4668", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "hundredths of a second", "correct_text": "centiseconds", "notes": "Why not use the common ISO-standard unit-multiple name, \"centiseconds\" (abbreviation: \"cs\"), instead of the long-winded \"hundredths of a second\" ?\r\n\r\nThis applies to the DESCRIPTION clauses of\r\n  - radiusAuthClientRoundTripTime  (RFC 4668, page 8),\r\n  - radiusAuthClientExtRoundTripTime  (RFC 4668, page 13)\r\n\r\nfrom pending", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2352", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.5.6", "orig_text": "On page 25, defines:\r\n\r\n     Reliability ::= SEQUENCE {\r\n       reliabilityMechanism   OBJECT IDENTIFIER,\r\n|      reliabilityMechContent OCTET STRING\r\n     }\r\n\r\n   The reliability mechanism is defined by an OBJECT IDENTIFIER and the\r\n   information needed to operate that mechanism is defined as\r\n|  reliabilityMechContent and is an OCTET STRING (as before).", "correct_text": "Add the following clarification immediately after last paragraph:\r\n\r\nThe OCTET STRING in each of these is an opaque blob whose\r\nprocessing is subsequently defined in the vendor or domain-specific types.\r\n", "notes": "whereas the subsequent definitions in B.5.6.{1,2,3} define the syntax\r\nof three possible instantiations of Reliability, with syntax NULL,\r\nINTEGER, and IA5String, respectively, for the reliabilityMechContent\r\nelement.\r\nAgain, that doesn't match!", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5158", "doc-id": "RFC8216", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.4.1", "orig_text": "The value is a quoted-string that specifies an ordered, backslash-\r\nseparated (\"/\") list of parameters.", "correct_text": "The value is a quoted-string that specifies an ordered, forward slash-\r\nseparated (\"/\") list of parameters.", "notes": "Confirmed by authors that this is a forward slash.", "submit_date": "2017-10-17", "submitter_name": "Daniel Tashjian", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "885", "doc-id": "RFC4673", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "I am surprised that the 'OID anchor' of the RADIUS-DYNAUTH-xxx-MIB\r\nmodules does not match the OID hierarchy used in the other RADIUS\r\nMIB modules published/updated concurrently.\r\nI would have expected the new RADIUS MIB modules to be assigned OIDs\r\nin the following, hierarchical way (using abbreviated notation):\r\n\r\n  radiusMIB                  { mib-2 67 }  -- legacy, assigned by IANA\r\n  radiusDynAuth              { radiusMIB 3 }       -- new\r\n  RADIUS-DYNAUTH-CLIENT-MIB  { radiusDynAuth 1 }   -- new\r\n  RADIUS-DYNAUTH-SERVER-MIB  { radiusDynAuth 2 }   -- new\r\n\r\ninstead of obtaining separate IANA assignments for the MIB module\r\nOIDs, directly under mib-2.\r\n\r\nHas there been a strong reason for this deviation from the established\r\npattern?", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\nYes, there is a strong reason for it. In fact original in the first\r\nversions of the draft, it was as follows:\r\n\r\n    radiusDynamicAuthorization    OBJECT IDENTIFIER ::= { radiusMIB 3 }\r\n\r\n    radiusDynAuthServerMIBObjects OBJECT IDENTIFIER ::=\r\n                                          { radiusDynAuthServerMIB 1 }\r\n\r\n    radiusDynAuthServer           OBJECT IDENTIFIER ::=\r\n                                   { radiusDynAuthServerMIBObjects 1 }\r\n\r\n\r\ncheck\r\nhttp://www.watersprings.org/pub/id/draft-decnodder-radext-dynauth-server-mib-00.txt\r\n\r\nThe reason for not doing so was that this was more difficult to\r\nmaintain. It was discussed at the mailinglist but I should search in the\r\narchives to find it back.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stefaan De Cnodder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "886", "doc-id": "RFC4672", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(for RFC 4672 and 4673)\r\n\r\nI am surprised that the 'OID anchor' of the RADIUS-DYNAUTH-xxx-MIB\r\nmodules does not match the OID hierarchy used in the other RADIUS\r\nMIB modules published/updated concurrently.\r\nI would have expected the new RADIUS MIB modules to be assigned OIDs\r\nin the following, hierarchical way (using abbreviated notation):\r\n\r\n  radiusMIB                  { mib-2 67 }  -- legacy, assigned by IANA\r\n  radiusDynAuth              { radiusMIB 3 }       -- new\r\n  RADIUS-DYNAUTH-CLIENT-MIB  { radiusDynAuth 1 }   -- new\r\n  RADIUS-DYNAUTH-SERVER-MIB  { radiusDynAuth 2 }   -- new\r\n\r\ninstead of obtaining separate IANA assignments for the MIB module\r\nOIDs, directly under mib-2.\r\n\r\nHas there been a strong reason for this deviation from the established\r\npattern?\r\n", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\nYes, there is a strong reason for it. In fact original in the first\r\nversions of the draft, it was as follows:\r\n\r\n    radiusDynamicAuthorization    OBJECT IDENTIFIER ::= { radiusMIB 3 }\r\n\r\n    radiusDynAuthServerMIBObjects OBJECT IDENTIFIER ::=\r\n                                          { radiusDynAuthServerMIB 1 }\r\n\r\n    radiusDynAuthServer           OBJECT IDENTIFIER ::=\r\n                                   { radiusDynAuthServerMIBObjects 1 }\r\n\r\n\r\ncheck\r\nhttp://www.watersprings.org/pub/id/draft-decnodder-radext-dynauth-server-mib-00.txt\r\n\r\nThe reason for not doing so was that this was more difficult to\r\nmaintain. It was discussed at the mailinglist but I should search in the\r\narchives to find it back.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stefaan De Cnodder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "887", "doc-id": "RFC4672", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "severe MIB module structural problem\r\n-- issue instantiated similarly in both RFC 4672 and 4673\r\n\r\nLet's start with RFC 4672 and the RADIUS-DYNAUTH-CLIENT-MIB module.\r\n\r\nOn page 5 of RFC 4672, two module-global scalar objects are specified;\r\nthe DESCRIPTION clause of the\r\nradiusDynAuthClientDisconInvalidServerAddresses OBJECT-TYPE says:\r\n\r\n                                           [...].  This counter may\r\n                 experience a discontinuity when the DAC module\r\n                 (re)starts, as indicated by the value of\r\n                 radiusDynAuthClientCounterDiscontinuity.\"\r\n\r\nand the literally same sentence appears again in the DESCRIPTION\r\nclause of the radiusDynAuthClientCoAInvalidServerAddresses OBJECT-TYPE.\r\n\r\nThis would make sense iff radiusDynAuthClientCounterDiscontinuity\r\nwould have been defined as another module-global scalar MIB object.\r\nBut unfortunately, radiusDynAuthClientCounterDiscontinuity is a\r\ntabular row object in the radiusDynAuthServerTable, with separate\r\ninstances for every radiusDynAuthServerIndex instantiated there.\r\nSo, which object instance should be taken for reference ???\r\nMoreover, should ever the radiusDynAuthServerTable be empty,\r\nno such CounterDiscontinuity objects would be instantiated,\r\ninvalidating the semantical integrity of the MIB module.\r\n\r\nThus, let's take a closer look at the DESCRIPTION clause of the\r\nradiusDynAuthClientCounterDiscontinuity OBJECT-TYPE, on page 17\r\nof the RFC:\r\n\r\n          DESCRIPTION\r\n                \"The time (in hundredths of a second) since the\r\n                 last counter discontinuity.  A discontinuity may\r\n                 be the result of a reinitialization of the DAC\r\n                 module within the managed entity.\"\r\n\r\nIt remains unclear which scope was intended, i.e. whether \"the last\r\ncounter discontinuity\" was meant to just cover the counters within\r\nthe same conceptual row of the table, of it was meant to cover all\r\nthe counter objects in the MIB module.\r\nIf the former interpretation is to be accepted, the references\r\nto this object from the scalar objects' DESCRIPTIONS quoted above\r\nwould be severely ambiguous.\r\nIn case of the latter interpretation, the semantics of this object\r\nindeed do not depend in any way on the conceptual row, i.e. the\r\nrelated radiusDynAuthServerIndex instance; but if an object of\r\nthe same semantics appears in every table row instantiated, all\r\nof its instances must have the same value at any point in time.\r\nHence, the object with that semantics should have been modeled\r\nas a module-global scalar object, and not as a tabular object !!!\r\n\r\nIMHO, such a single, module-global scalar object would perhaps be\r\nsufficient for the desired purpose.\r\n\r\nIn a similar way, the module-global scalar counters in the\r\nRADIUS-DYNAUTH-SERVER-MIB module,\r\nradiusDynAuthServerDisconInvalidClientAddresses and\r\nadiusDynAuthServerCoAInvalidClientAddresses,\r\nas specified on page 6 of RFC 4673, refer to the object,\r\nradiusDynAuthServerCounterDiscontinuity,\r\nwhich turns out to be a tabular row object in the\r\nradiusDynAuthClientTable, not another scalar object,\r\nthus leading to the same kind of ambiguity.\r\n\r\nTaken altogether, the specifications are ambigous and will certainly\r\nlead to interoperability problems.\r\n\r\nI strongly propose to revise these MIB module specifications as\r\nsoon as possible.", "correct_text": "", "notes": "from pending\r\n\r\n\r\n--VERIFIER COMMENT--\r\nseems to be correct. The scalars do not have a discontinuity object.\r\nThat sentence should be removed or either an object has to be added. It\r\nseems that the other mibs like RFC4668 also does not have such an object\r\nfor the scalars while it has a discontinuity timer for the objects in\r\nthe table... It should be for all or for none I would think.\r\n", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stefaan De Cnodder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "888", "doc-id": "RFC4673", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "severe MIB module structural problem\r\n-- issue instantiated similarly in both RFC 4672 and 4673\r\n\r\nLet's start with RFC 4672 and the RADIUS-DYNAUTH-CLIENT-MIB module.\r\n\r\nOn page 5 of RFC 4672, two module-global scalar objects are specified;\r\nthe DESCRIPTION clause of the\r\nradiusDynAuthClientDisconInvalidServerAddresses OBJECT-TYPE says:\r\n\r\n                                           [...].  This counter may\r\n                 experience a discontinuity when the DAC module\r\n                 (re)starts, as indicated by the value of\r\n                 radiusDynAuthClientCounterDiscontinuity.\"\r\n\r\nand the literally same sentence appears again in the DESCRIPTION\r\nclause of the radiusDynAuthClientCoAInvalidServerAddresses OBJECT-TYPE.\r\n\r\nThis would make sense iff radiusDynAuthClientCounterDiscontinuity\r\nwould have been defined as another module-global scalar MIB object.\r\nBut unfortunately, radiusDynAuthClientCounterDiscontinuity is a\r\ntabular row object in the radiusDynAuthServerTable, with separate\r\ninstances for every radiusDynAuthServerIndex instantiated there.\r\nSo, which object instance should be taken for reference ???\r\nMoreover, should ever the radiusDynAuthServerTable be empty,\r\nno such CounterDiscontinuity objects would be instantiated,\r\ninvalidating the semantical integrity of the MIB module.\r\n\r\nThus, let's take a closer look at the DESCRIPTION clause of the\r\nradiusDynAuthClientCounterDiscontinuity OBJECT-TYPE, on page 17\r\nof the RFC:\r\n\r\n          DESCRIPTION\r\n                \"The time (in hundredths of a second) since the\r\n                 last counter discontinuity.  A discontinuity may\r\n                 be the result of a reinitialization of the DAC\r\n                 module within the managed entity.\"\r\n\r\nIt remains unclear which scope was intended, i.e. whether \"the last\r\ncounter discontinuity\" was meant to just cover the counters within\r\nthe same conceptual row of the table, of it was meant to cover all\r\nthe counter objects in the MIB module.\r\nIf the former interpretation is to be accepted, the references\r\nto this object from the scalar objects' DESCRIPTIONS quoted above\r\nwould be severely ambiguous.\r\nIn case of the latter interpretation, the semantics of this object\r\nindeed do not depend in any way on the conceptual row, i.e. the\r\nrelated radiusDynAuthServerIndex instance; but if an object of\r\nthe same semantics appears in every table row instantiated, all\r\nof its instances must have the same value at any point in time.\r\nHence, the object with that semantics should have been modeled\r\nas a module-global scalar object, and not as a tabular object !!!\r\n\r\nIMHO, such a single, module-global scalar object would perhaps be\r\nsufficient for the desired purpose.\r\n\r\nIn a similar way, the module-global scalar counters in the\r\nRADIUS-DYNAUTH-SERVER-MIB module,\r\nradiusDynAuthServerDisconInvalidClientAddresses and\r\nadiusDynAuthServerCoAInvalidClientAddresses,\r\nas specified on page 6 of RFC 4673, refer to the object,\r\nradiusDynAuthServerCounterDiscontinuity,\r\nwhich turns out to be a tabular row object in the\r\nradiusDynAuthClientTable, not another scalar object,\r\nthus leading to the same kind of ambiguity.\r\n\r\nTaken altogether, the specifications are ambigous and will certainly\r\nlead to interoperability problems.\r\n\r\nI strongly propose to revise these MIB module specifications as\r\nsoon as possible.", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\nseems to be correct. The scalars do not have a discontinuity object.\r\nThat sentence should be removed or either an object has to be added. It\r\nseems that the other mibs like RFC4668 also does not have such an object\r\nfor the scalars while it has a discontinuity timer for the objects in\r\nthe table... It should be for all or for none I would think.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stefaan De Cnodder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "889", "doc-id": "RFC4672", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "hundredths of a second\r\n", "correct_text": "centiseconds", "notes": "Why not use the common ISO-standard unit-multiple name, \"centiseconds\" (abbreviation: \"cs\"), instead of the long-winded \"hundredths of a second\" ?\r\n\r\nThis applies to the UNITS and the DESCRIPTION clauses of\r\n  - radiusDynAuthClientRoundTripTime         (RFC 4672, page 7),\r\n  - radiusDynAuthClientCounterDiscontinuity  (RFC 4672, page 17),\r\n\r\nfrom pending\r\n\r\n--VERIFIER COMMENT--\r\nwell, yes, centiseconds can be used as well but both terms are the same.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stefaan De Cnodder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "890", "doc-id": "RFC4672", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In Section 4", "orig_text": "The DESCRIPTION clauses of several OBJECT-TYPE invocations \r\ncontain the same spurious fragment of a sentence:\r\n\r\n   [...].  Disconnect-NAK packets received from unknown addresses.\r\n\r\nThis fragment apparently has been copied inadvertently from the\r\nDESCRIPTION clause for radiusDynAuthClientDisconInvalidServerAddress,\r\nand it should be deleted afterwards, in all instances:\r\n\r\n  - radiusDynAuthClientCoAInvalidServerAddresses  (page 5),\r\n  - radiusDynAuthClientDisconRequests  (page 8),\r\n  - radiusDynAuthClientDisconAuthOnlyRequests  (page 8), and\r\n  - radiusDynAuthClientDisconRetransmissions  (page 8).", "correct_text": "", "notes": "from pending\r\n\r\n--VERIFIER COMMENT--\r\ncorrect, this sentence has to be removed everywhere.", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stefaan De Cnodder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "891", "doc-id": "RFC4673", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "[[DESCRIPTION clause of the radiusDynAuthServCoAUserSessChanged on page 15]]\r\n\r\n       DESCRIPTION\r\n             \"The number of user sessions authorization\r\n              changed for the CoA-Requests received from this\r\n              Dynamic Authorization Client.", "correct_text": "       DESCRIPTION\r\n|            \"The number of user sessions with authorization\r\n              changed for the CoA-Requests received from this\r\n              Dynamic Authorization Client.  [...]", "notes": "word omission\r\n\r\nfrom pending", "submit_date": "2006-11-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5159", "doc-id": "RFC5429", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.1, 2.2", "orig_text": "non-US-ACSII", "correct_text": "non-US-ASCII", "notes": "Typo in \"ASCII\". The original text occurs five times in Section 2.1.1, once in Section 2.2.", "submit_date": "2017-10-17", "submitter_name": "Stan Kalisch", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "897", "doc-id": "RFC4820", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "   This chunk is used to pad an SCTP packet.  A PAD chunk can be used to\r\n   enlarge the packet by 4 to 65536 bytes in steps of 4 bytes.  An SCTP\r\n   packet MAY contain multiple PAD chunks.", "correct_text": "   This chunk is used to pad an SCTP packet.  A PAD chunk can be used to\r\n   enlarge the packet by 4 to 65532 bytes in steps of 4 bytes.  An SCTP\r\n   packet MAY contain multiple PAD chunks.", "notes": "The text below Figure 1 explains:\r\n\r\n   \"Length: 2 bytes (unsigned integer)\r\n      This value holds the length of the Padding Data plus 4\"\r\n\r\nBecause a 2-byte unsigned integer can accept values ranging\r\nfrom 0 to 65535 and it can be inferred from the above text that\r\n`Length` should be divisible by 4, the maximum value possible\r\nfor `Length`, and hence the maximum padding size is  65532  !\r\n                                                         \r\n(In the spirit of the SCTP specification, I do not recommend to\r\n change the definition of `Length` allowing 0 to encode 65536.)\n --VERIFIER NOTES-- \nDiscussion between authors and errata submitter resulted in an agreement that this errata is in fact incorrect.   ", "submit_date": "2007-04-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "898", "doc-id": "RFC4433", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "In RFC 4433 paragraph 3.4, the extension is specified as skippable with type=139.  \r\nHowever the extension is specified in the \"Long Extension\r\nFormat\", which should be used for non-skippable extensions only according\r\nto RFC 3344 paragraph 1.10.\r\n", "correct_text": "The extension should be specified in the \"Short Extension Format\" which\r\nis used for skippable extensions in accordance to RFC 3344 paragraph\r\n1.11.\r\n", "notes": "This problem was reported by L\u00e1szl\u00f3 Moln\u00e1r.\r\n\r\nfrom pending", "submit_date": "2007-04-11", "submitter_name": "Kent Leung", "verifier_id": "", "verifier_name": "", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "899", "doc-id": "RFC3659", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5", "orig_text": "   That those pathnames all exist does not imply that the TVFS sever\r\n   will necessarily grant any kind of access rights to the named paths,\r\n   or that access to the same file via different pathnames will\r\n   necessarily be granted equal rights.", "correct_text": "   That those pathnames all exist does not imply that the TVFS server\r\n   will necessarily grant any kind of access rights to the named paths,\r\n   or that access to the same file via different pathnames will\r\n   necessarily be granted equal rights.", "notes": "typo: sever --> server\r\n\r\nfrom pending", "submit_date": "2007-04-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "900", "doc-id": "RFC3659", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   The MLST and MLSD commands also extend the FTP protocol as presented\r\n   in STD 9, RFC 959 [3] and STD 3, RFC 1123 [9] to allow that\r\n   transmission of 8-bit data over the control connection.", "correct_text": "   The MLST and MLSD commands also extend the FTP protocol as presented\r\n   in STD 9, RFC 959 [3] and STD 3, RFC 1123 [9] to allow the\r\n   transmission of 8-bit data over the control connection.", "notes": "typo: that --> the\r\n\r\nfrom pending", "submit_date": "2007-04-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3533", "doc-id": "RFC3971", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   Non-SEND node\r\n\r\n      An IPv6 node that does not implement this specification but uses\r\n      only the Neighbor Discovery protocol defined in RFCs 2461 and\r\n|     2462, as updated, without security.", "correct_text": "   Non-SEND node\r\n\r\n      An IPv6 node that does not implement this specification but uses\r\n      only the Neighbor Discovery protocol defined in RFCs 2461 and\r\n|     2462, without security.", "notes": "  Perhaps, there once was a reference to some work in progress,\r\n  e.g., what has become RFC 4311, or the 2461bis and 2462bis I-Ds,\r\n  and this reference was been removed only partially.  Cleanup!\r\n  For an alternative text change, see the next item.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3534", "doc-id": "RFC3971", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "                         [...]  This section is not normative, and if\r\n   this section and the original Neighbor Discovery RFCs are in\r\n|  conflict, the original RFCs, as updated, take precedence.", "correct_text": "                         [...]  This section is not normative, and if\r\n   this section and the original Neighbor Discovery RFCs are in\r\n|  conflict, the original RFCs, or any updates to these, take\r\n   precedence.", "notes": "It is unclear what has been intended here.  The rationale for Errata ID 3533\r\nmight apply here as well.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3535", "doc-id": "RFC3971", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6.4.1", "orig_text": "         A link-local unicast address assigned to the sending interface,\r\n|        or to the unspecified address if no address is assigned to the\r\n         sending interface.", "correct_text": "         A link-local unicast address assigned to the sending interface,\r\n|        or the unspecified address if no address is assigned to the\r\n         sending interface.", "notes": "spurious word / grammar, and a clarification\n --VERIFIER NOTES-- \n   The original text is fine.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "991", "doc-id": "RFC2812", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "shortname  =  ( letter / digit ) *( letter / digit / \"-\" )\r\n              *( letter / digit )\r\n              ; as specified in RFC 1123 [HNAME]", "correct_text": "shortname  =  ( letter / digit ) [ *( letter / digit / \"-\" ) ( letter / digit ) ]", "notes": ">From RFC 1123:\r\n\r\n   2.1  Host Names and Numbers\r\n\r\n      The syntax of a legal Internet host name was specified in RFC-952\r\n      [DNS:4].  One aspect of host name syntax is hereby changed: the\r\n      restriction on the first character is relaxed to allow either a\r\n      letter or a digit.  Host software MUST support this more liberal\r\n      syntax.\r\n\r\n\r\nIn RFC 952 the definition of a shortname looks like this\r\n\r\n<name>  ::=3D <let>[*[<let-or-digit-or-hyphen>]<let-or-digit>]\r\n\r\nfrom pending", "submit_date": "2007-06-10", "submitter_name": "Stefan Hoffmeister", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1105", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.6", "orig_text": "immediate_olist(S,G) =\r\n       joins(S,G) (+) pim_include(S,G) (-) lost_assert(S,G)\r\n", "correct_text": "immediate_olist(S,G) =\r\n       ( joins(S,G) (+) pim_include(S,G) ) (-) lost_assert(S,G)\r\n\r\n-or-\r\n\r\nimmediate_olist(S,G) =\r\n       joins(S,G) (+) ( pim_include(S,G) (-) lost_assert(S,G) )\r\n", "notes": "Left or right associativity is not established at the beginning of this document, so it is necessary to clarify which operation happens first: (+) or (-).", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1146", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.5", "orig_text": "However, we recommend storing this\r\n   information if possible, as it reduces latency converging to stable\r\n   operating conditions after a failure causing a change of DR.  This\r\n   information is used by the pim_exclude(S,G) macro described in\r\n   Section 4.1.6.\r\n", "correct_text": "However, we RECOMMEND storing this\r\n   information if possible, as it reduces latency converging to stable\r\n   operating conditions after a failure causing a change of DR.  This\r\n   information is used by the pim_exclude(S,G) macro described in\r\n   Section 4.1.6.\r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "901", "doc-id": "RFC3659", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.5.4", "orig_text": "   The create fact indicates when a file, or directory, was first\r\n   created.  Exactly what \"creation\" is for this purpose is not\r\n   specified here, and may vary from server to server.  About all that\r\n   can be said about the value returned is that it can never indicate a\r\n   later time than the modify fact.", "correct_text": "   The create fact indicates when a file, or directory, was first\r\n   created.  Exactly what \"creation\" is for this purpose is not\r\n   specified here, and may vary from server to server.", "notes": "It is one of the benefits of 'Create' timestamps for directory\r\nentries that there is *no* enforced relationship between that\r\ntimestamp and the 'Modify' timestamp related to the file *content*.\r\n\r\nWe still support legacy systems from Hewlett-Packard that indeed\r\nmaintain three timestamps per directory entry: 'Create', 'Modify',\r\nand 'Access'.  The very useful behaviour of the File System and\r\nthe proprietary Networking Services is as follows: If you move a\r\nfile to another directory or copy it (within a system, or across\r\nthe network), the 'Modify' timestamp does not change (since the\r\nfile content is unchanged from what it was then), only the 'Create'\r\ntimestamp of the new directory entry is set to the current time.\r\n(This means the 'Modify' timestamp behaves like a 'last update'\r\ntimestamp embedded in the file content, e.g., in a PDF file.)\r\nIn this case, the create fact would have to be *later* than the\r\nmodify fact, for RFC 3659.  Naturally, if a file was being edited,\r\nthe 'Modify' timestamp changes and will then be later than the\r\n'Create' timestamp.\r\nThe natural behaviour of a hypothetical FTP client implementing\r\nRFC 3659 in such environment, when performing a 'get' operation,\r\nwould be to obtain the modify timestamp of the remote file via\r\nMLSx or MDTM and, after performing the RETR (and, perhaps verifying\r\nthe 'atomicity' of the transfer via another MDTM that should deliver\r\nthe same response again) setting the 'Modify' timestamp of the local\r\ncopy of the file to the moment corresponding to the MDTM result\r\nvalue (or the modify fact value from the MLSx).\n --VERIFIER NOTES-- \nThis is a technical change that may be against the consensus of a WG and therefore is not appropriate for an erratum.", "submit_date": "2007-04-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "902", "doc-id": "RFC4664", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1) [[posted separately.]]\r\n\r\n(2)  improper indentation\r\n\r\nThe final paragraphs of Section 2.2, on page 8,\r\n\r\n        There may be other models as well, some of which are\r\n        combinations of the 3 models above.  Different models may have\r\n        different characteristics, and different scopes of\r\n        applicability.\r\n\r\n        Each VPLS solution should specify the model or models that it is\r\n        supporting.  Each solution should also specify the necessary\r\n        bridge functionality that its bridge modules must support.\r\n\r\n        This framework does not specify the way in which bridge control\r\n        protocols are used on the Emulated LANs.\r\n\r\napparently should not be (visually) part of the \"Model 3\" explanation.\r\nTherefore, the same indentation level should be used as before for\r\nthe body of the section, above the model enumeration:\r\n\r\n   There may be other models as well, some of which are combinations of\r\n   the 3 models above.  Different models may have different\r\n   characteristics, and different scopes of applicability.\r\n\r\n   Each VPLS solution should specify the model or models that it is\r\n   supporting.  Each solution should also specify the necessary bridge\r\n   functionality that its bridge modules must support.\r\n\r\n   This framework does not specify the way in which bridge control\r\n   protocols are used on the Emulated LANs.\r\n\r\n\r\n(3)  missing word\r\n\r\nOn page 20, in the first list item of Section 3.2.7.1, the text,\r\n\r\n      - Customer Traffic Prioritization: L2VPN services could be best\r\n        effort or QoS guaranteed.  Traffic from one customer might need\r\n        to be prioritized over others when sharing same network\r\n        resources.  [...]\r\n\r\nshould say:\r\n\r\n      - Customer Traffic Prioritization: L2VPN services could be best\r\n        effort or QoS guaranteed.  Traffic from one customer might need\r\n|       to be prioritized over others when sharing the same network\r\n        resources.  [...]\r\n                                                  ^^^^^\r\n\r\n(4)  extraneous word\r\n\r\nIn section 3.4, the 2nd-to-last paragraph on page 30 says:\r\n\r\n   A further issue arises if the PE bridges run bridge control protocols\r\n   with each other over the Emulated LAN.  Bridge control protocols are\r\n|  generally designed to run in over a real LAN and may presume, for\r\n   their proper functioning, certain characteristics of the LAN, such as\r\n   low latency and sequential delivery.  [...]\r\n\r\nIt should better say:\r\n\r\n   A further issue arises if the PE bridges run bridge control protocols\r\n   with each other over the Emulated LAN.  Bridge control protocols are\r\n|  generally designed to run over a real LAN and may presume, for\r\n   their proper functioning, certain characteristics of the LAN, such as\r\n   low latency and sequential delivery.  [...]\r\n\r\n\r\n(5)  typo\r\n\r\nIn section 3.4.3, the 2nd paragrph on page 34 says:\r\n\r\n   Relative to the VPLS there are three different possibilities for\r\n   allocate functions to a device in such a position in the provider\r\n   network:\r\n\r\nIt should better say:\r\n\r\n   Relative to the VPLS there are three different possibilities for\r\n|  allocating functions to a device in such a position in the provider\r\n   network:\r\n\r\n\r\n(6)  typo\r\n\r\nIn Section 4, the 5th paragraph on page 38 says:\r\n\r\n   Thus, for inter-SP control connections, it is advisable to use some\r\n   sort of cryptographic authentication procedure.  Control protocols\r\n|  which used TCP may use the TCP MD5 option to provide a measure of\r\n   PE-PE authentication; this requires at least one shared secret\r\n   between SPs.  [...]\r\n\r\nIt should better say:\r\n\r\n   Thus, for inter-SP control connections, it is advisable to use some\r\n   sort of cryptographic authentication procedure.  Control protocols\r\n|  which use TCP may use the TCP MD5 option to provide a measure of\r\n   PE-PE authentication; this requires at least one shared secret\r\n   between SPs.  [...]\r\n\r\n\r\n(7)  outdated References\r\n\r\nSection 7, on page 41, contains two outdated Informative References:\r\n\r\nRFC 1771 has been obsoleted by RFC 4271, and RFC 2796 has been\r\nobsoleted by RFC 4456, where both new RFCs have been published\r\nfar ahead of RFC 4664.\r\n\r\nTherefore,\r\n-  the tag \"[RFC1771]\" should have been replaced by \"[RFC4271]\", and\r\n-  the tag \"[RFC2796]\" should have been replaced by \"[RFC4456]\"\r\n(throughout the body of RFC 4664), and the related entries\r\nin Section 7 updated accordingly.", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "903", "doc-id": "RFC3659", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "                                 [...].  Unless the \"media-type\" fact is\r\n   provided in a MLSx response nor is any advice given here that would\r\n   allow determining the content type.  [...]", "correct_text": "                                 [...].  Unless the \"media-type\" fact is\r\n   provided in a MLSx response, no advice is given here that would allow\r\n   determining the content type.  [...]", "notes": "This sentence apparently is garbled a bit.\r\n\r\nfrom pending", "submit_date": "2007-04-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "904", "doc-id": "RFC4607", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "16", "orig_text": "   [RFC3513]     Hinden, R. and S. Deering, \"Internet Protocol Version 6\r\n                 (IPv6) Addressing Architecture\", RFC 3513, April 2003.", "correct_text": "   [RFC4291]    Hinden, R. and S. Deering, \"IP Version 6 Addressing \r\n                Architecture\", RFC 4291, February 2006.", "notes": "Unfortunately, Section 1 (first paragraph) and Section 11\r\nof RFC 4607 refer to the previous IPv6 Address Architecture\r\ndocument, RFC 3513, that has been superseded by RFC 4291 (February 2006).\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nAt the time of document approval for 4607, 4291 had not been published and the authors needed to make a normative reference to an RFC and not to an I-D.\r\n\r\nHowever, this is not an issue because anyone tracking the reference to 3513 will find that it has been obsoleted by 4291 and will read the correct document.", "submit_date": "2006-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "905", "doc-id": "RFC4607", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "problems with IPv6 SSM address range, and with related text\r\n\r\nThe 4th paragraph of Section 1, on page 3, RFC 4607 says:\r\n\r\n   Addresses in the range FF3x::4000:0001 through FF3x::7FFF:FFFF are\r\n   reserved in [IPv6-MALLOC] for allocation by IANA.  Addresses in the\r\n   range FF3x::8000:0000 through FF3x::FFFF:FFFF are allowed for dynamic\r\n   allocation by a host, as described in [IPv6-MALLOC].  Addresses in\r\n   the range FF3x::0000:0000 through FF3x::3FFF:FFFF are invalid IPv6\r\n   SSM addresses.  ([IPv6-MALLOC] indicates that FF3x::0000:0001 to\r\n   FF3x::3FFF:FFFF must set P=0 and T=0, but for SSM, [IPv6-UBM]\r\n   mandates that  P=1 and T=1, hence their designation as invalid.)  ...\r\n\r\nI see a lot of problems in that reasoning.\r\n\r\na) The most obvious issue first:\r\nAs far as I can see, RFC 3307 [IPv6-MALLOC] only requires for\r\n\"Permanent IPv6 Multicast Addresses\":\r\n\r\n   Multicast addresses assigned by IANA MUST have the T bit set to 0 and\r\n   the P bit set to 0.\r\n\r\n(RFC 3307, Section 4, top of page 4)\r\n\r\nThis restriction is not mentioned for other cases.\r\n\r\nSince the '3' nibbles in \"FF3x::0000:0000 through FF3x::3FFF:FFFF\"\r\njust mean P=1 and T=1 (cf. RFC 3306 [IPv6-UBM], Section 4, pp. 2/3),\r\nIMHO the phrase from the above quotation,\r\n                  [IPv6-MALLOC] indicates that FF3x::0000:0001 to\r\n   FF3x::3FFF:FFFF must set P=0 and T=0,\r\nis neither logical nor conclusive.  Hence the final conclusion,\r\n                   \"hence their designation as invalid.\"\r\ndoes not hold.\r\n\r\nPerhaps it would have been much more simple and clear to just\r\ndeclare the range FF3x::0000:0000 through FF3x::3FFF:FFFF as\r\nreserved or invalid -- without giving any reason.\r\n\r\nb) Delving into further details of RFC 3307, one can find that\r\nSection 4.2 reserves the range 0x40000000 to 0x7FFFFFFF for\r\n\"Permanent IPv6 Multicast Group Identifiers\" with the intent that\r\nassignments in that range hold\r\n   \"regardless of the upper 96 bits of the multicast address\".\r\n\r\nOn the other hand, the current IPv6 Addressing Architecture document\r\nclearly states that\r\n   T=0 means  \"well known\" / \"permanently-assiged\" / IANA allocated,\r\nwhile\r\n   T=1 means  \"transient\" / \"dynamically allocated\".\r\nUnder this rule, the above \"regardless\" in RFC 3307 is partially\r\ninvalid, because upper 96 bits containing T=1 are not allowed for\r\nIANA allocated MC addresses.\r\n\r\n[Note: Perhaps, this statement is also inappropriate, because\r\n RFC 3307 initially states (in Section 4, at the bottom of page 3):\r\n   ....  The following guidelines assume that the prefix of the\r\n   multicast address has been initialized according to [ADDRARCH] or\r\n   [UNIMCAST].\r\n and both specifications quoted restrict or fix the values of some\r\n of these upper 96 bits ...]\r\n\r\nHence, there is a subtle conflict between RFC 3307 and RFC 4291 !\r\n\r\nc) Taking the ADDRARCH and RFC 3307 rules together, it is clear\r\nthat the first sentence of the RFC 4607 quotation above,\r\n   Addresses in the range FF3x::4000:0001 through FF3x::7FFF:FFFF are\r\n   reserved in [IPv6-MALLOC] for allocation by IANA.\r\ndoes not hold, as T=1 in these addresses !\r\n\r\nLater on, in Section 9 (IANA Cosiderations, page 15), RFC 4607 says:\r\n\r\n   IANA allocates IPv4 addresses in the range 232.0.0.1 through\r\n   232.0.0.255 and IPv6 addresses in the range FF3x:4000:0001 to\r\n   FF3x::7FFF:FFFF.  [...]\r\n\r\nThe latter clearly contradicts RFC 4291 for this reason (T=1).\r\n\r\nTherefore, this range might better have been reserved/forbidden,\r\nor excluded from the IPv6 SSM address range.\r\n\r\n\r\nTaking all together:\r\nThere are serious conflicts between RFC 4291, RFC 3307, and RFC 4607.\r\n\r\nSadly enough, it seems that it was not a good idea to assign\r\nFF3x::/32 for IPv6 SSM.\r\n\r\nI'm sure that RFC 4291 should NOT be called in question.\r\n\r\nPerhaps, it would have been better to restrict the IPv6 SSM range to\r\nFF3x::8000:0000/31, and *not* provide for any subrange available\r\nfor specific IANA assignments.\r\nThen, should there really arise the serious need for IANA allocated,\r\nspecific IPv6 SSM addresses, another (small) range (with T=0 and P=0)\r\ncould be assigned additionally for this purpose.\r\n\r\n[Note 1: Thus, this address range would indeed fall under the regime\r\n of Section 4.1 of RFC 3307, \"Permanent IPv6 Multicast Addresses\".\r\n Note 2: T=0 + P=1 would necessitate a formal update to RFC 3306 that\r\n does not allow this combination, and maybe to RFC 3956 as well.]", "correct_text": "", "notes": "from pending\n --VERIFIER NOTES-- \nThis Errata Report is rejected because it constitutes a significant technical change to the specification. This rejection makes no judgement about whether the issues raised are right or wrong.\r\n\r\nIn considering the issues raised in this Errata Report readers are also invited to consider draft-ietf-6man-multicast-addr-arch-update that may be related work.", "submit_date": "2006-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "906", "doc-id": "RFC4607", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.5", "orig_text": "applied to all source address", "correct_text": "applied to all source addresses", "notes": "from pending", "submit_date": "2006-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "907", "doc-id": "RFC4821", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8", "orig_text": "   Since protocols that do not implement PLPMTUD are still subject to\r\n   problems due to ICMP black holes, it may be desirable to limit to\r\n   these protocols to \"safe\" MTUs likely to work on any path (e.g., 1280\r\n   bytes).  Allow any protocol implementing PLPMTUD to operate over the\r\n   full range supported by the lower layer.\r\n\r\nThere is an extra \"to\" in the first sentence.  It should read \"...it may\r\nbe desirable to limit these protocols to safe MTUs....\".\r\n\r\nIn the last one of the references at the end.....\r\n\r\n   [frag-errors]   Heffner, J., \"IPv4 Reassembly Errors at High Data\r\n                   Rates\", Work in Progress, December 2007.\r\n\r\n\r\nThe year is clearly wrong.\r\n", "correct_text": "[not submitted]", "notes": "Ooops, we all missed these....\r\n\r\nI don't think these warrant errata, but that is your call..\r\n\r\nThanks,\r\n--MM--\r\n\r\nfrom pending", "submit_date": "2007-04-15", "submitter_name": "Ron Broersm", "verifier_id": "", "verifier_name": "Matt Mathis", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "908", "doc-id": "RFC4824", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   [...].  If the link partner ready to receive, it returns an RTR\r\n   signal.\r\n\r\n", "correct_text": "   [...].  If the link partner is ready to receive, it returns an RTR\r\n   signal.", "notes": "word omission\r\n\r\nfrom pending", "submit_date": "2007-04-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Jogi Hofmueller", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "909", "doc-id": "RFC4824", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "RFC 4824 completely fails to appropriatey point out the benefits and\r\nmerits of IP-SFS, and to perform a fair comparison with industry\r\nstandard strenght security for common wireless protocols.\r\n\r\nApparently, IP-SFS provides for industry standard Wireless Equivalent\r\nPrivacy (WEP).  It *is* a wireless protocol!  Its interfaces do not\r\nconsume electrical power (if used under daylight conditions) and do not\r\nproduce any electromagnetical interference.  The former property\r\nresults in great applicability to developing economies that lack\r\nsubstantial ubiquitous electrical power distribution but have a lot of\r\ncheap manpower available, but it also makes IP-SFS great for countries\r\nwith instable electrical power distribution systems, like the U.S.\r\n(and, yet currently still to a lesser degree, Europe).  Both properties\r\ntogether make IP-SFS strictly immune to any modern cryptanalytical\r\nmethods based on the variation of power consumption over time and to\r\nthe suspected industry espionage by the electronical 'sky ears' still\r\ndeployed in Europe and otherwise mostly idle, since the end of the Cold\r\nWar.\r\n\r\nFurthermore, IP-SFS apparently is very well suited for environments\r\nwith stringent legal requirements for the war against the Axis of\r\nEvil, with its step-by-step increasing legal custody of privacy and\r\npolitical correctness of content to be performed / enforced by\r\nlegal authorities and cooperating access and content providers.\r\n\r\nThat should make IP-SFS particularly interesting for the emerging\r\ninfrastructure of the .cn domain (and for many other countries,\r\nas well).\r\n\r\nTo change the disadvantageous presentation of IP-SFS and to address\r\nat least a few of its benefits, I recommend to change, via an RFC\r\nErrata Note, the first paragraph of Section 5,\r\n\r\n|  By its nature of line-of-sight signaling, IP-SFS is considered\r\n|  insecure.  The transmission of sensitive data over IP-SFS is strongly\r\n|  discouraged unless security is provided by higher level protocols.\r\n\r\nto say:\r\n\r\n|  By its nature of line-of-sight signaling, IP-SFS is considered to\r\n|  provide industry strength wireless equivalent security and privacy\r\n|  (WEP).  The transmission of sensitive data over IP-SFS is strongly\r\n|  discouraged unless security is provided by legal environments or\r\n|  corporate guidelines of conduct, impending punishment of the\r\n|  interfaces, or other higher level protocols.\r\n\r\n\r\n:-)", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2007-04-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Jogi Hofmueller", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "910", "doc-id": "RFC4877", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   The packet formats for tunneled mobile prefix discovery messages are\r\n   very similar to the tunneled Binding Update and Binding\r\n   Acknowledgment with the with the home address as the source address\r\n   in the inner IP header.", "correct_text": "   The packet formats for tunneled mobile prefix discovery messages are\r\n   very similar to the tunneled Binding Update and Binding\r\n   Acknowledgment with the home address as the source address in the\r\n   inner IP header.", "notes": "from pending", "submit_date": "2007-04-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "911", "doc-id": "RFC4877", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "   o  The home agent MUST use the Type 2 Routing header in Binding\r\n      Acknowledgements and Mobile Prefix Advertisements sent to the\r\n      mobile node when transport mode IPsec protection is used, again\r\n      due to the need to have the home address visible when the policy\r\n      checks are made.", "correct_text": "   o  The home agent MUST use the Type 2 Routing header in Binding\r\n      Acknowledgements and Mobile Prefix Advertisements sent to the\r\n      mobile node when transport mode IPsec protection is used, again\r\n      due to the need to have the home address be visible when the\r\n      policy checks are made.", "notes": "omission of verb\r\n\r\nfrom pending", "submit_date": "2007-04-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "912", "doc-id": "RFC4877", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "          [...].  The use of sequence number in the ESP header to\r\n      provide anti-replay protection is optional because the sequence\r\n      numbers in the Binding Updates provide anti-replay protection.", "correct_text": "          [...].  The use of the sequence number in the ESP header to\r\n      provide anti-replay protection is optional because the sequence\r\n      numbers in the Binding Updates provide anti-replay protection.", "notes": "missing article\r\n\r\nfrom pending", "submit_date": "2007-04-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "913", "doc-id": "RFC4877", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "                   [...].  This case uses IPsec tunnel mode SA with the\r\n       protocol selector set to 'any'.", "correct_text": "                   [...].  This case uses IPsec tunnel mode SAs with\r\n       the protocol selector set to 'any'.", "notes": "SA --> SAs\r\n\r\nfrom pending", "submit_date": "2007-04-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "914", "doc-id": "RFC4541", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   Initial allocation of IPv6 multicast addresses, as described in\r\n   [RFC3307], however, cover only the lower 32 bits of group ID.", "correct_text": "   The Initial allocation of IPv6 multicast addresses, as described in\r\n   [RFC3307], however, covers only the lower 32 bits of group ID.\r\n", "notes": "from pending", "submit_date": "2006-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Morten Jagd Christensen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "915", "doc-id": "RFC4828", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.1 says:", "orig_text": "                   (1.184 Kbps Maximum TFRC Data Sending Rate)", "correct_text": "                   (1184 Kbps Maximum TFRC Data Sending Rate)", "notes": "The caption for Table 7 is wrong.\r\n\r\nfrom pending", "submit_date": "2007-04-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sally Floyd", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "917", "doc-id": "RFC4728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   -  In DSR, the route returned in each Route Reply that is received by\r\n      the initiator of a Route Discovery (or that is learned from the\r\n      header of overhead packets, as described in Section 8.1.4)\r\n      represents a complete path (a sequence of links) leading to the\r\n      destination node.  [...]", "correct_text": "   -  In DSR, the route returned in each Route Reply that is received by\r\n      the initiator of a Route Discovery (or that is learned from the\r\n      header of overheard packets, as described in Section 8.1.4)\r\n      represents a complete path (a sequence of links) leading to the\r\n      destination node.  [...]", "notes": "Text was inteded to not talk about \"overhead\" packets, but (promiscuously) \"overheard\" packets!\r\n\r\nfrom pending", "submit_date": "2007-04-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dave Maltz", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "918", "doc-id": "RFC4661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6.1", "orig_text": "   Previous XML\r\n   document\" in this context refers to the raw version of the most\r\n   recent XML document that was sent to the subscriber, before the\r\n   filters were applied to it.", "correct_text": "   \"Previous XML\r\n   document\" in this context refers to the raw version of the most\r\n   recent XML document that was sent to the subscriber, before the\r\n   filters were applied to it.", "notes": "missing quotation marks\r\n\r\nfrom pending", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2354", "doc-id": "RFC4683", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "The first paragraph of Section 4.2, on page 9 of RFC 4683 says:\r\n\r\n   The user selects a password as one of the input values for computing\r\n   the SIM.  The strength of the password is critical to protection of\r\n|  the user's SII, in the following sense.  If an attacker has a\r\n|  candidate SII value, and wants to determine whether the SIM value in\r\n|  a specific subject certificate, P is the only protection for the SIM.\r\n   [...]\r\n\r\nThe marked (3rd) sentence does not parse; apparently something is\r\nmissing, or the word \"whether\" has to be deleted, as follows:\r\n\r\n                                    [...].  If an attacker has a\r\n|  candidate SII value, and wants to determine the SIM value in a\r\n   specific subject certificate, P is the only protection for the SIM.\r\n   [...]", "correct_text": "See above.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "931", "doc-id": "RFC4872", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.2", "orig_text": "   An empty PPRO with no subobjects is considered illegal.  If there is\r\n   no first subobject, the corresponding Path message is also in error,\r\n   and the receiving node SHOULD return a PathErr message with the new\r\n   error code/sub-code \"Routing Problem/Bad PRIMARY_PATH_ROUTE object\".", "correct_text": "   An empty PPRO has no subobjects and is considered illegal.  A node\r\n   receiving a Path message containing an empty PPRO SHOULD return a\r\n   PathErr message with the new error code/sub-code \"Routing Problem/\r\n   Bad PRIMARY_PATH_ROUTE object\".", "notes": "The original problem report said...\r\n\r\n   According to the text, PPROs are only admitted in Path messages.\r\n   PPROs \"with no first subobject\" carry no subobjects at all.\r\n   It is unclear why the text tries to distinguish these 'too cases'\r\n   and uses the word, \"also\", in the second sentence.\r\n\r\n   Something significant might have been lost in the text,\r\n   which cannot be concluded from the context.\r\n   In this case, please supply the missing clues.\r\n   Otherwise, the RFC should read unambiguously as supplied above.\r\n\r\n...and proposed the text...\r\n\r\n   An empty PPRO with no subobjects is considered illegal.  A node\r\n   receiving an empty PPRO SHOULD return a PathErr message with the new\r\n   error code/sub-code \"Routing Problem/Bad PRIMARY_PATH_ROUTE object\".\r\n\r\nThis proposal is rejected in favor of the corrected text because it lost some of the meaning.", "submit_date": "2007-05-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "932", "doc-id": "RFC4872", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "16", "orig_text": "   The ASSOCIATION object is used to associate LSPs with each other.", "correct_text": "[not submitted]", "notes": "The second paragraph of Section 16 is a literal restatement of the\r\nfirst sentence of the same section, on the same page (37).\r\nTherefore, the last text line of Section 16 (above), should be deleted.", "submit_date": "2007-05-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "933", "doc-id": "RFC4872", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "16.2", "orig_text": "   Similarly, terminating nodes receiving a Path message with a\r\n   PROTECTION object requiring association between working and recovery\r\n   LSPs MUST include an ASSOCIATION object.  Otherwise, such nodes MUST\r\n   return a PathErr message with the new error code/sub-code \"Routing\r\n   Problem/PROTECTION object not Applicable\".\r\n", "correct_text": "   Similarly, a Path message with a PROTECTION object requiring\r\n   association between working and recovery LSPs MUST include an\r\n   ASSOCIATION object.  Terminating nodes receiving such Path message\r\n   without an ASSOCIATION object MUST return a PathErr message with the\r\n   new error code/sub-code \"Routing Problem/PROTECTION object not\r\n   Applicable\".", "notes": "", "submit_date": "2007-05-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "982", "doc-id": "RFC3032", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.2", "orig_text": "      Since an ICMP message is never sent as a result of receiving an ICMP\r\n      message,", "correct_text": "      Since an ICMP message is never sent as a result of receiving an ICMP\r\n      error message,", "notes": "As explained in RFC 1122 section 3.2.2 :\r\n\r\n        An ICMP error message MUST NOT be sent as the result of\r\n        receiving:\r\n\r\n         *    an ICMP error message, or\r\n\r\nClearly, ICMP messages *are* sent in responce to other ICMP messages. For example, during ping processing an ICMP echo-reply message is generated as \r\nthe result of an echo-request message. ", "submit_date": "2007-05-18", "submitter_name": "Stephane Bortzmeyer", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "983", "doc-id": "RFC3304", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "   [MCFW]    Srisuresh, S., Kuthan, J., Rosenberg, J., Molitor, A. and\r\n             A.  Rayhan, \"Middlebox communication architecture and\r\n             framework\", RFC 3303, Date.*", "correct_text": "   [MCFW]    Srisuresh, P., Kuthan, J., Rosenberg, J., Molitor, A. and\r\n             A.  Rayhan, \"Middlebox communication architecture and\r\n             framework\", RFC 3303, August 2002.", "notes": "from pending", "submit_date": "2007-05-25", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "984", "doc-id": "RFC4733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   Legal event codes range from 0 to 255.  The initial registry content\r\n   is shown in Table 7, and consists of the sixteen events defined in\r\n   Section 3 of this document.  The remaining codes have the following\r\n   disposition:\r\n\r\n   o  codes 17-22, 50-51, 90-95, 113-120, 169, and 206-255 are available\r\n      for assignment;\r\n\r\n   o  codes 23-40, 49, and 52-63 are reserved for events defined in\r\n      [16];\r\n\r\n   o  codes 121-137 and 174-205 are reserved for events defined in [17];\r\n\r\n   o  codes 16, 41-48, 64-88, 96-112, 138-168, and 170-173 are reserved\r\n      in the first instance for specifications reviving the\r\n      corresponding RFC 2833 events, and in the second instance for\r\n      general assignment after all other codes have been assigned.\r\n\r\n", "correct_text": "   Legal event codes range from 0 to 255.  The initial registry content\r\n   is shown in Table 7, and consists of the sixteen events defined in\r\n   Section 3 of this document.  The remaining codes have the following\r\n   disposition:\r\n\r\n|  o  codes 17-22, 50-51, 90-95, 113-120, 169, and 212-255 are available\r\n      for assignment;\r\n                                                   ^^^\r\n\r\n   o  codes 23-40, 49, and 52-63 are reserved for events defined in\r\n      [16];\r\n\r\n|  o  codes 121-137, 144-159, and 174-211 are reserved for events\r\n      defined in [17];\r\n                   ^^^^^^^^^^         ^^^\r\n                          vv             vvvvvvvvvv\r\n|  o  codes 16, 41-48, 64-89, 96-112, 138-143, 160-168, and 170-173 are\r\n      reserved in the first instance for specifications reviving the\r\n      corresponding RFC 2833 events, and in the second instance for\r\n      general assignment after all other codes have been assigned.\r\n", "notes": "Section 7 of RFC 4733, in the lower half of page 39,\r\nspecifies the initial content of the IANA maintained\r\naudio-telephone-event-registry subregistry, as intended\r\nfor after publication of RFC 4733 -- see (1a) below.\r\n\r\nAdditionally, in Appendix A, on page 47, RFC 4733 restates this\r\ninformation and summarizes the disposition of the legacy event\r\ncode assignments from the obsoleted RFC 2833, in particular,\r\nTable 8 represents the current assignments and dispositions,\r\nas per RFC 4733 -- see (1b) below.\r\n\r\nUnfortunately, there are significant inconsistencies between\r\nthese two text blocks.  Looking into Ref. [17] of RFC 4733,\r\nthe ietf-avt-rfc2833biscas draft, it turns out that both\r\ntext blocks are also inconsistent with that future RFC.\r\nConsequently, the current IANA file is also affected.\r\n\r\nfrom pending", "submit_date": "2006-12-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tom Taylor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "992", "doc-id": "RFC3080", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.1.1", "orig_text": "   The answer number (\"ansno\") must be a non-negative integer (in the\r\n   range 0..4294967295) and must have a different value than all other\r\n   answers in progress for the message being replied to.", "correct_text": "   The answer number (\"ansno\") must be a non-negative integer (in the\r\n   range 0..2147483647) and must have a different value than all other\r\n   answers in progress for the message being replied to.", "notes": "Page 8 says:\r\n\r\n   channel    = 0..2147483647\r\n   msgno      = 0..2147483647\r\n   more       = \".\" / \"*\"\r\n   seqno      = 0..4294967295\r\n   size       = 0..2147483647\r\n   ansno      = 0..2147483647\r\n\r\nIf page 8 is correct, page then 9 needs to be changed to suggested text above.\r\n\r\nfrom pending", "submit_date": "2007-06-13", "submitter_name": "Ozz Nixon", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "994", "doc-id": "RFC4408", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "See this page for discussion of errata for RFC 4408:\r\n<http://www.openspf.org/RFC_4408/Errata>", "correct_text": "", "notes": "Alexey: if there is interest in revising the document, then it should be updated to incorporate some changes suggested on the above web page.", "submit_date": "2007-11-06", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "995", "doc-id": "RFC4895", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11", "orig_text": "   [1]  Rivest, R., \"The MD5 Message-Digest Algorithm\", RFC 1321,\r\n        April 1992.", "correct_text": "[should be omitted]", "notes": "RFC 4895 contains an unused normative reference to RFC 1321", "submit_date": "2007-09-27", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "934", "doc-id": "RFC4872", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "17", "orig_text": "   This section presents the RSVP message-related formats as modified by\r\n   this document.  Unmodified RSVP message formats are not listed.", "correct_text": "   This section presents the RSVP-TE message-related formats as modified\r\n   by this document.  Unmodified RSVP-TE message formats are not listed.", "notes": "The first paragraph of Section 17 does not confine the scope of the\r\nspecification as it would be appropriate.\r\n\r\n'Classic' RSVP (RFC 2205) is neither covered nor affected by the subsequently specified message formats.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nCompare with Erratum 945.\r\n\r\nSame reason for rejection...\r\n\r\nAlthough it is true that there is some common distinction between \"classic\" RSVP and RSVP-TE, the IP protocol number is the same, and the message numbers (and registry) are the same. In essence, there is just one protocol with two uses. ", "submit_date": "2007-05-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1736", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4.22.", "orig_text": "            0      1      2      3      4      5      6      7\r\n         +------+------+------+------+------+------+------+------+\r\n         | MCv4 | RES. | RES. |  T   |   IPv6 multicast scope    |\r\n         +------+------+------+------+------+------+------+------+", "correct_text": "            0      1      2      3      4      5      6      7\r\n         +------+------+------+------+------+------+------+------+\r\n         |   IPv6 multicast scope    |  T   | RES. | RES. | MCv4 |\r\n         +------+------+------+------+------+------+------+------+\r\n", "notes": "The diagram is back to front.", "submit_date": "2009-03-24", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "935", "doc-id": "RFC4873", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "Section 2\r\n\r\nNear the end of the second-to-last paragraph on page 5, RFC 4873 says:\r\n\r\n                                                        [...].  The\r\n   branch node of a recovery LSP creates an SRRO by copying the RRO from\r\n|  the Resv message of associated recovery LSP into a new SRRO object.\r\n   Any SRROs present in the recovery LSP's Resv message are also copied.\r\n\r\nIt should say:\r\n                                                        [...].  The\r\n   branch node of a recovery LSP creates an SRRO by copying the RRO from\r\n|  the Resv message of the associated recovery LSP into a new SRRO\r\n   object.  Any SRROs present in the recovery LSP's Resv message are\r\n   also copied.\r\n\r\nRationale:  missing article.\r\n\r\n\r\nSection 3.2\r\n\r\nOn page 7, the last sentence of Section 3.2 says:\r\n\r\n|              [...].  This object MUST NOT be used when association is\r\n   made according to the methods defined in [RFC4090].\r\n\r\nIt should say:\r\n\r\n|              [...].  This object MUST NOT be used when an association\r\n   is made according to the methods defined in [RFC4090].\r\n\r\nRationale:  missing article.\r\n\r\n\r\nSection 4.1\r\n\r\nOn page 8, Section 4.1 says:\r\n\r\n                   [...].  This includes the definition of subobjects\r\n|  defined for EXPLICIT_ROUTE object.  The class of the\r\n   SECONDARY_EXPLICIT_ROUTE object is 200 (of the form 11bbbbbb).\r\n\r\nIt should say:\r\n\r\n                   [...].  This includes the definition of subobjects\r\n|  defined for the EXPLICIT_ROUTE object.  The class of the\r\n   SECONDARY_EXPLICIT_ROUTE object is 200 (of the form 11bbbbbb).\r\n\r\nRationale:  missing article.\r\n\r\n\r\nSection 4.2\r\n\r\nIn the second paragraph on page 10, Section 4.2 says:\r\n\r\n|  At a branch node, the SERO, together with the Path message of LSP\r\n   being recovered, provides the information to create the recovery LSP.\r\n   [...]\r\n\r\nIt should say:\r\n\r\n|  At a branch node, the SERO, together with the Path message of the LSP\r\n   being recovered, provides the information to create the recovery LSP.\r\n   [...]\r\n\r\nRationale:  missing article.\r\n\r\n\r\nSection 4.2.1\r\n\r\nNear the bottom of page 10, the first paragraph of Section 4.2.1 says:\r\n\r\n                                                          [...].  The\r\n|  processing of these events depend on a number of factors.\r\n\r\nIt should say:\r\n                                                          [...].  The\r\n|  processing of these events depends on a number of factors.\r\n                                    ^\r\nRationale:  grammar.\r\n\r\n\r\nSection 4.3.2\r\n\r\nThe second sentence of Section 4.3.2 says:\r\n\r\n|                      [...].  When a branch or merge node receives\r\n   notification of an LSP failure and it is unable to recover from that\r\n   failure, [...]\r\n\r\nIt should say:\r\n|                      [...].  When a branch or merge node receives a\r\n   notification of an LSP failure and it is unable to recover from that\r\n   failure, [...]\r\n\r\nRationale:  missing article.\r\n\r\n\r\nSection 6.2\r\n\r\nThe last sentence of the third paragraph of Section 6.2,\r\non mid-page 17, says:\r\n\r\n                                                             [...].  The\r\n   dynamically identified information, together with the Path message of\r\n|  LSP being recovered, is used to create the recovery LSP.\r\n\r\nIt should say:\r\n                                                             [...].  The\r\n   dynamically identified information, together with the Path message of\r\n|  the LSP being recovered, is used to create the recovery LSP.\r\n\r\nRationale:  missing article.\r\n\r\n", "correct_text": "[see above]", "notes": "editorial nits.\r\n\r\nfrom pending", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "936", "doc-id": "RFC4873", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.3", "orig_text": "  In general, objects in a recovery LSP are created based on the\r\n  corresponding objects in the LSP being protected.  [...]", "correct_text": "[not submitted]", "notes": "IMHO makes use of too sluggish language; talking about\r\n\"objects in a recovery LSP\" or \"objects in the LSP being protected\"\r\nshould be avoided because it messes up the essentials of [G]MPLS,\r\nthe separation of the data plane carrying arbitrary labeled data\r\npackets and the control plane (with RSVP-TE carrying the TE objects).\r\nUnfortunately, similar language recurs at other places in the RFC;\r\nfor the sake of brevity, I refrain from listing all those instances\r\nbelow.\r\n\r\nI would appreciate very much future derived and/or related work to\r\nreturn to a more precise language.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nThere has long been a conflation of \"LSP\" to mean the data plane entity (connection) and the also the control plane state necessary to maintain the data plane entity. The body of people working in the MPLS and CCAMP working groups are used to this and can readily deduce which meaning is intended. Additional text is added when the author believes it is important to make an explicity distinction.\r\n\r\nSince this Erratum is not specifically actionable on this RFC, it is rejected.", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "937", "doc-id": "RFC4873", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.4", "orig_text": "   Recovery LSP removal follows standard procedures defined in [RFC3209]\r\n   and [RFC3473].  This includes with and without setting the\r\n   administrative status.", "correct_text": "   Recovery LSP removal follows standard procedures defined in [RFC3209]\r\n   and [RFC3473].  These procedures include LSP removal with and without\r\n   setting the administrative status flags described in Section 7 of\r\n   [RFC3473].", "notes": "", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "938", "doc-id": "RFC4447", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.3.2.2", "orig_text": "5.3.2.2.  PW Grouping TLV", "correct_text": "5.3.2.2.  PW Grouping ID TLV", "notes": "change to section title, for terminological consistency", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3556", "doc-id": "RFC3875", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "   The AUTH_TYPE variable identifies any mechanism used by the server to\r\n   authenticate the user.  It contains a case-insensitive value defined\r\n   by the client protocol or server implementation.\r\n\r\n   For HTTP, if the client request required authentication for external\r\n   access, then the server MUST set the value of this variable from the\r\n   'auth-scheme' token in the request Authorization header field.\r\n\r\n      AUTH_TYPE      = \"\" | auth-scheme\r\n      auth-scheme    = \"Basic\" | \"Digest\" | extension-auth\r\n      extension-auth = token\r\n\r\n   HTTP access authentication schemes are described in RFC 2617 [5].", "correct_text": "[see below]", "notes": "The current definition of AUTH_TYPE is flawed, namely then when several authentication methods have been used.\r\nOne example would be to have first some SSL/TLS client certificate authentication and then (afterwards) HTTP Basic Authentication.\r\nOther examples are e.g. Apache HTTPD's SSL/FakeBasicAuth, where the SSL certs DN is mapped to the HTTP Basic Authentication username (i.e. the CGI REMOTE_USER variable).\r\n\r\nRight now, AUTH_TYPE provides not syntax to encode several layers of authentication types, so the behaviour of webservers is basically undefined (e.g. Apache omits AUTH_TYPE in conjunction with SSL altogether (see https://issues.apache.org/bugzilla/show_bug.cgi?id=45058), which is also problematic, as much software depends on it).\r\n\r\n\r\nI see two possible solutions:\r\n\r\n1) Extend the syntax to allow lists of authentication types be specified.\r\nA syntax like this would be possible:\r\n<1st authentication type>;<2nd authentication type>;<3rd authentication type>\r\nand so on, no trailing \";\" required.\r\nThe \";\" seems to be a possible largely backwards compatible separator as right now:\r\n     auth-scheme    = \"Basic\" | \"Digest\" | extension-auth\r\n     extension-auth = token\r\nwith\r\n      token         = 1*<any CHAR except CTLs or separators>\r\n      separator     = \"(\" | \")\" | \"<\" | \">\" | \"@\" | \",\" | \";\" | \":\" |\r\n                      \"\\\" | <\"> | \"/\" | \"[\" | \"]\" | \"?\" | \"=\" | \"{\" |\r\n                      \"}\" | SP | HT\r\n\r\nIn the example above (where first SSL client auth took place, then Basic auth) this would look like e.g. \"TLS_client_certificate;Basic\" (a name for SSL/TLS client certificate authentication would need to be found).\r\n\r\n\r\n2) Define AUTH_TYPE explicitly to describe the authentication type at _plain_ HTTP level.\r\nI would like this solution less, as it seems less mighty and future-proof.\r\n\r\n\r\nCheers,\r\nChris.\r\n\r\nThis erratum points out a flaw in RFC 3875, and suggests some improvements to it - of these, (1) seems the simplest.  However, this change would require a new RFC, so I'm setting this to \"Hold for update\" now.\r\n\r\nNevil", "submit_date": "2013-03-18", "submitter_name": "Christoph Anton Mitterer", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "940", "doc-id": "RFC4534", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.4", "orig_text": "omission in ASN.1 module\r\n\r\nSection B.3, on pp. 20/21, gives a textual introduction with ASN.1\r\nsnippits to, and Section B.4, on pp. 21/22 gives the formal ASN.1\r\nmodule for, GSAKMPv1 De-Registration.\r\n\r\nUnfortunately, there's a significant inconsistency between these\r\ntwo sources of data structure and syntax.\r\n\r\nOn page 20, in Section B.3 the RFC says:\r\n\r\n     GSAKMPv1DeRegistrationInfo ::= SEQUENCE {\r\n       leaveMechanisms  SEQUENCE OF LeaveMechanisms,\r\n|      terse            BOOLEAN,\r\n       transport        Transport\r\n     }\r\n\r\nOn page 21, in Section B.4 the RFC says:\r\n\r\n   GSAKMPv1DeRegistrationInfo ::= SEQUENCE {\r\n     leaveMechanisms SEQUENCE OF LeaveMechanisms,\r\n     transport       Transport\r\n   }\r\n\r\nObviously, the line\r\n       terse            BOOLEAN,\r\nhas been lost on its way into the ASN.1 module, and should be\r\nre-inserted to make it consistent with the text.", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2355", "doc-id": "RFC4683", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "On page 10, the second-to-last paragraph of Section 4.4 says:\r\n\r\n   Note that a secure communication channel MUST be used to pass P and\r\n|  SII passing from the end entity to the RA, to protect them from\r\n   disclosure or modification.\r\n\r\nIt should say:\r\n\r\n   Note that a secure communication channel MUST be used to pass P and\r\n|  SII from the end entity to the RA, to protect them from disclosure or\r\n   modification.", "correct_text": "See above.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5160", "doc-id": "RFC6550", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.7.4", "orig_text": "The DAG Metric Container option MAY be present in DIO or DAO\r\nmessages, and its format is as follows:", "correct_text": "The DAG Metric Container option MAY be present in the DIO\r\nmessage, and its format is as follows:", "notes": "The DAG Metric Container is not defined as one of the valid options in Section 6.4.3.", "submit_date": "2017-10-18", "submitter_name": "Remous-Aris Koutsiamanis", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3116", "doc-id": "RFC5944", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.7.2", "orig_text": "Section 3.7.2 \"Receiving Registration Requests\" says:\r\n\r\nOtherwise, if the foreign agent does not serve the mobile node as a home\r\nagent,\r\n   the foreign agent rejects the Registration Request with Code 194\r\n   (Invalid Home Agent Address).\r\n\r\nAnother entry for \"Invalid Home Agent Address\" is indicated in Section 3.4: \r\n\r\n        194 Invalid Home Agent Address\r\n\r\n\r\n", "correct_text": "For Section 3.7.2 \"Receiving Registration Requests\", it should say:\r\n\r\nOtherwise, if the foreign agent does not serve the mobile node as a home\r\nagent,\r\nthe foreign agent rejects the Registration Request with Code 116\r\n(Invalid Home Agent Address).\r\n\r\nFor the entry for \"Invalid Home Agent Address\" in Section 3.4, it should say:\r\n\r\n        116 Invalid Home Agent Address", "notes": "The Code 194 was incorrectly registered under the range for Error Codes from the Foreign Agent (64-127).  The mobile note (Invalid Home Agent Address) is a registration under denied by the foreign agent, and so the mobile note should be changed to the Code 116 for Invalid Home Agent Address in the range for Error Codes from the Foreign Agent.  The Code 194 has been reserved in the range for Error Codes from the Gateway Foreign Agent (194-200).", "submit_date": "2012-02-07", "submitter_name": "Pearl Liang", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3117", "doc-id": "RFC3312", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "The port number of every \"m=\" line MUST be set to zero, but the connection address is arbitrary.\r\n\r\nThe desired status line corresponding to the precondition that\r\ntriggered the failure MUST use the \"failure\" strength-tag, as shown\r\nin the example below:\r\n\r\n      m=audio 20000 RTP/AVP 0\r\n      a=des:qos failure e2e send\r\n\r\n", "correct_text": "The port number of every \"m=\" line MUST be set to zero, but the connection address is arbitrary.\r\n\r\nThe desired status line corresponding to the precondition that\r\ntriggered the failure MUST use the \"failure\" strength-tag, as shown\r\nin the example below:\r\n\r\n      m=audio 0 RTP/AVP 0\r\n      a=des:qos failure e2e send\r\n", "notes": "The G711U codec's payload type 0 that appears in the m-line, probably led to the typo error with the incorrect port number (20000 instead of 0).", "submit_date": "2012-02-08", "submitter_name": "Beis Grigorios", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3115", "doc-id": "RFC4447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "(page 8, the first 2 tables)\r\n\r\n   This document specifies the following new TLVs to be used with LDP:\r\n\r\n   TLV                    Specified in Section     Defined for Message\r\n   ===================================================================\r\n   PW Status TLV                  5.4.2            Notification\r\n   PW Interface Parameters TLV    5.3.2.1          FEC\r\n   PW Grouping  ID TLV            5.3.2.2          FEC\r\n\r\n\r\n   Additionally, the following new FEC element types are defined:\r\n\r\n   FEC Element Type        Specified in Section    Defined for Message\r\n   ===================================================================\r\n   0x80                            5.2             FEC\r\n   0x81                            5.3             FEC", "correct_text": "   This document specifies the following new TLVs to be used with LDP:\r\n\r\n   TLV                      Specified in Section   Defined for Message\r\n   ===================================================================\r\n   PW Status TLV                    5.4.2          Notification\r\n|  PW Interface Parameters TLV      5.3.2.1        with FEC TLV\r\n|  PW Grouping ID TLV               5.3.2.2        with FEC TLV\r\n\r\n\r\n   Additionally, the following new FEC element types are defined:\r\n\r\n|  FEC Element Type     FEC Element Name          Specified in Section\r\n   ===================================================================\r\n|  0x80                 PWid                               5.2\r\n|  0x81                 Generalized PWid                   5.3", "notes": "wrong term(s) used in table(s).\r\nApparently, \"FEC\" is not appropriate in the last column of the first\r\ntable, and \"Defined for Message\" makes no sense in the second table,\r\nwhere only \"FEC\" appears, as \"FEC\" is not an LDP message, it is a TLV.\r\nPerhaps, the latter column is dispensable, in favor of a new column\r\nshowing the name of the FEC element.\r\n\r\n-- VERIFIER NOTES --\r\nThe editors should look at this if there is an update.\r\n\r\nThe table is a quick index to information about a specific FEC and likely will be removed in a future version of this RFC.", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1132", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.9", "orig_text": "   All PIM control messages have IP protocol number 103.", "correct_text": "   All PIM control messages have IP protocol number 103, per RFC 1700.", "notes": "The IP protocol assignment information is given without a reference to RFC 1700/STD 2.\n --VERIFIER NOTES-- \nPer RFC 3232, RFC 1700 is replaced by an online database. A reference is no longer appropriate.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1133", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.9.2", "orig_text": "     Holdtime is the amount of time a receiver must keep the neighbor\r\n     reachable, in seconds.  If the Holdtime is set to '0xffff', the\r\n     receiver of this message never times out the neighbor.  This may be\r\n     used with dial-on-demand links, to avoid keeping the link up with\r\n     periodic Hello messages.\r\n", "correct_text": "", "notes": "Holdtime is tunable by the sender and is required to be kept by the receiver.  This coupled with the \u201cinfinity\u201d metric 0xffff produces the conditions necessary for a Denial of Service to be possible.  This is not addressed in section 6.1.1 (Forged Link-Local Messages) or 6.4 (Denial-of-Service Attacks).  Additionally, utilizing AH will not solve this issue as Hello messages instantiate state upon receipt and this state constitutes the \u201cservice\u201d that is abused in this form of attack.  A tunable option to accept a maximum Holdtime for security purposes would resolve this condition.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1134", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.9.2", "orig_text": "The T bit specifies the ability of the\r\n     sending router to disable joins suppression.  \r\n", "correct_text": "The T bit specifies the ability of the\r\n     sending router to disable join suppression.  \r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1135", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Sections 6.4 and A.2", "orig_text": "   The rationale for this is that there is no way in PIM-SM to prune\r\n   traffic off the (*,*,RP) tree, except by Joining the (*,G) tree and\r\n   then pruning each source individually.\r\n", "correct_text": "", "notes": "The paragraph beginning \u201cThe rationale for this\u2026\u201d describes a condition where a small cause can have a great effect \u2013 a (*,*,RP) join could cause state that, if it is not needed, requires a (*,G) join and many prunes for each source.  This is mentioned as the last point in section 6.4, but section 6.4 fails to mention that \u201cundoing\u201d this state requires a join followed by multiple prunes.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2360", "doc-id": "RFC4683", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "The 3rd paragraph of RFC 4683 says:\r\n\r\n   This protocol assumes that Bob is a trustworthy relying party who\r\n|  will not reuse the Alice's information.  [...]\r\n                  ^^^^\r\nIt should say:\r\n\r\n   This protocol assumes that Bob is a trustworthy relying party who\r\n|  will not reuse Alice's information.  [...]", "correct_text": "See above.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3114", "doc-id": "RFC4447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.4.2", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|   Notification (0x0001)     |      Message Length           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Message ID                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Status (TLV)                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                      PW Status TLV                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           PWId FEC TLV or Generalized ID FEC TLV              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|   Notification (0x0001)     |      Message Length           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Message ID                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Status (TLV)                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                      PW Status TLV                            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |      FEC TLV with  PWId or Generalized PWId FEC Element       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |                      PW Grouping ID TLV                       |\r\n|  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "message diagram incomplete.\r\n\r\nRationale:\r\na) using defined terms verbatim\r\nb) final TLV added: PW Grouping ID TLV\r\n\r\n-- VERIFIER NOTES --\r\nThe editors should consider this in an future revision, but as the PW Grouping ID TLV is optional it could be addressed in the diagram or with a note.", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3113", "doc-id": "RFC4447", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.4.2", "orig_text": "   The PW FEC TLV SHOULD not include the interface parameter sub-TLVs,\r\n   as they are ignored in the context of this message.  When a PE's\r\n   attachment circuit encounters an error, use of the PW Notification\r\n   Message allows the PE to send a single \"wild card\" status message,\r\n   using a PW FEC TLV with only the group ID set, to denote this change\r\n   in status for all affected PW connections.  This status message\r\n   contains either the PW FEC TLV with only the group ID set, or else it\r\n   contains the Generalized FEC TLV with only the PW Grouping ID TLV.\r\n\r\n   As mentioned above, the Group ID field of the PWid FEC element, or\r\n   the PW Grouping ID TLV used with the Generalized ID FEC element, can\r\n   be used to send a status notification for all arbitrary sets of PWs.\r\n   [...]", "correct_text": "|  The PWid FEC element SHOULD NOT include the interface parameter\r\n   sub-TLVs, as they are ignored in the context of this message.  When\r\n   a PE's attachment circuit encounters an error, use of the PW\r\n   Notification Message allows the PE to send a single \"wild card\"\r\n|  status message, using a PWid FEC element with only the group ID set,\r\n   to denote this change in status for all affected PW connections.\r\n|  This status message contains either a FEC TLV with a PWid FEC element\r\n|  with only the group ID set, or else it contains a FEC TLV with a\r\n|  Generalized PWid FEC element together with only the PW Grouping ID\r\n   TLV.\r\n\r\n   As mentioned above, the Group ID field of the PWid FEC element, or\r\n|  the PW Grouping ID TLV used with the Generalized PWid FEC element,\r\n   can be used to send a status notification for all arbitrary sets of\r\n   PWs.\r\n   [...]", "notes": "clarifications, terms and wording\r\n\r\n--VERIFIER NOTES-- \r\n   The terminology was correct at the time of writing.", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3112", "doc-id": "RFC4447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "                          [...].  If one endpoint prefers to use the\r\n   control word but the other does not, the one that prefers not to use\r\n|  it is has no extra protocol to execute; it just waits for a Label\r\n   Mapping message that has c=0.", "correct_text": "                          [...].  If one endpoint prefers to use the\r\n   control word but the other does not, the one that prefers not to use\r\n|  it has no extra protocol to execute; it just waits for a Label\r\n   Mapping message that has c=0.", "notes": "typo (spurious word)", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "939", "doc-id": "RFC4873", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "   o new text:\r\n      If a message contains multiple NOTIFY_REQUEST objects, only the\r\n      first object used is in notification.  Subsequent NOTIFY_REQUEST\r\n      objects MUST be propagated in the order received.", "correct_text": "   o new text:\r\n      If a message contains multiple NOTIFY_REQUEST objects, only the\r\n      first object is used to supply the information used to build and\r\n      send a notification. Subsequent NOTIFY_REQUEST objects MUST be\r\n      propagated in the order received.", "notes": "The original proposed text (below) is rejected because the presence of the NOTIFY_REQUEST object is not a trigger.\r\n   o new text:\r\n      If a message contains multiple NOTIFY_REQUEST objects, only the\r\n      first object is used to potentially trigger a notification.\r\n      Subsequent NOTIFY_REQUEST objects MUST be propagated in the order\r\n      received.", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1136", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Index", "orig_text": "Not reproduced here.", "correct_text": "Due to the number of change recommendations to the index, I am not reproducing the index entries here.  The list of definitions that I was able to determine are given below.  Some definitions are not given and these are marked below.\r\n\r\nAddress_List\t31*\r\nAssert(*,G)\t128*\r\nAssert(S,G)\t128*\r\nAssertCancel(*,G)\t99*\r\nAssertCancel(S,G) \t99*\r\nAssertTimer(*,G,I) \tnot listed X\r\nAssertTimer(S,G,I) \tnot listed X\r\nAssertTrackingDesired(*,G,I)\t93*\r\nAssertTrackingDesired(S,G,I) \t86*\r\nAssertWinner(*,G,I)\t100*\r\nAssertWinner(S,G,I)\t100*\r\nAssertWinnerMetric(*,G,I)\t101*\r\nAssertWinnerMetric(S,G,I)\t101*\r\nassert_metric\t98*\r\nAssert_Override_Interval\t132*\r\nAssert_Time\t132*\r\nAT(*,G,I)\t129*\r\nAT(S,G,I)\t129*\r\nCheckSwitchToSpt(S,G) \t28*\r\nCouldAssert(*,G,I)\t93*\r\nCouldAssert(S,G,I)\t86*\r\nCouldRegister(S,G)\t41*\r\nDefault_Hello_Holdtime\tnot listed X\r\nDirectlyConnected(S) \t27*\r\nDownstreamJPState(*,*,RP,I) \t45* (state of FSM in section 4.5.1)\r\nDownstreamJPState(*,G,I) \t49* (state of FSM in section 4.5.2)\r\nDownstreamJPState(S,G,I) \t53* (state of FSM in section 4.5.3)\r\nDownstreamJPState(S,G,rpt,I)\t56* (state of FSM in section 4.5.4)\r\nDR(I)\t33*\r\ndr_is_better(a,b,I)\t33*\r\nDR_Priority\t31*\r\nEffective_Override_Interval(I)\t36*\r\nEffective_Propagation_Delay(I)\t\t35*\r\nET(*,*,RP,I)\t128*\r\nET(*,G,I)\t128*\r\nET(S,G,I)\t129*\r\nET(S,G,rpt,I)\t129*\r\nGenID\t31*\r\nHash_Function\tnot listed X\r\nHello_Holdtime\t\t131*\r\nHello_Period\t130*\r\nHT(I)\t31*\r\nIGMP\t6*\r\nimmediate_olist(*,*,RP)\t22*\r\nimmediate_olist(*,G)\t22*\r\nimmediate_olist(S,G)\t22*\r\ninfinite_assert_metric()\t99*\r\ninherited_olist(S,G)\t22*\r\ninherited_olist(S,G,rpt)\t22*\r\nI_Am_Assert_Loser(*,G,I)\tnot listed X\r\nI_Am_Assert_Loser(S,G,I)\tnot listed X\r\nI_am_DR(I)\t33*\r\nI_am_RP(G)\t44*\r\nJ/P_Holdtime\t131*\r\nJ/P_Override_Interval(I)\t132*\r\nJoinDesired(*,*,RP)\t64*\r\nJoinDesired(*,G)\t68*\r\nJoinDesired(S,G)\t73*\r\njoins(*,*,RP(G))\tnot listed X\r\njoins(*,*,RP)\t23*\r\njoins(*,G)\t23*\r\njoins(S,G)\t23*\r\nJT(*,*,RP)\t129*\r\nJT(*,G)\t\t129*\r\nJT(S,G)\t\t129*\r\nKAT(S,G)\t129*\r\nKeepaliveTimer(S,G)\tnot listed X\r\nKeepalive_Period\t134*\r\nlan_delay_enabled(I)\t35*\r\nLAN_Prune_Delay\tnot listed X\r\nlocal_receiver_exclude(S,G,I)\t23*\r\nlocal_receiver_include(*,G,I)\tnot listed X\r\nlocal_receiver_include(S,G,I)\tnot listed X\r\nlost_assert(*,G)\t\t24*\r\nlost_assert(*,G,I)\t100*\r\nlost_assert(S,G)\t\t24*\r\nlost_assert(S,G,I)\t100*\r\nlost_assert(S,G,rpt)\t24*\r\nlost_assert(S,G,rpt,I)\t100*\r\nMBGP\t6*\r\nMFIB\t6*\r\nMLD\t6*\r\nMRIB\t6*\r\nMRIB.next_hop(host)\t25*\r\nmy_assert_metric(*,G,I)\tnot listed X\r\nmy_assert_metric(S,G,I)\t98*\r\nNBR(Interface,IP_address)\tnot listed X\r\nNLT(N,I)\tnot listed X\r\nOT(S,G,rpt)\t77*\r\nOverride_Interval(I)\t130? (Why is it termed a \u201cvariable\u201d?)\r\npacket_arrives_on_rp_tunnel(pkt)\t43*\r\npim_exclude(S,G)\t22*\r\npim_include(*,G)\t22*\r\npim_include(S,G)\t22*\r\nPPT(*,*,RP,I)\tnot listed X\r\nPPT(*,G,I)\tnot listed X\r\nPPT(S,G,I)\tnot listed X\r\nPPT(S,G,rpt,I)\tnot listed X\r\nPropagation_Delay(I)\t130? (Why is it termed a \u201cvariable\u201d?)\r\nPropagation_delay_default\t130*\r\nPruneDesired(S,G,rpt)\t79*\r\nprunes(S,G,rpt)\t\t23*\r\nRegister-Stop(*,G)\tnot listed X\r\nRegister-Stop(S,G)\tnot listed X\r\nRegister-StopTimer(S,G)\tnot listed X\r\nRegister_Probe_Time\t135*\r\nRegister_Suppression_Time\t135*\r\nRP(G)\tnot listed X\r\nRPF\t6*\r\nRPF\u2019(*,G)\t24*\r\nRPF\u2019(S,G)\t25*\r\nRPF\u2019(S,G,rpt)\t24*\r\nRPF_interface\tnot listed X\r\nRPF_interface(host)\tnot listed X\r\nRPFJoinDesired(G)\t79*\r\nrpt_assert_metric(G,I)\tnot listed X\r\nRST(S,G)\t135?\r\nSPTbit(S,G)\tnot listed X\r\nspt_assert_metric(S,I)\t98*\r\nSSM\t106*\r\nSuppression_Enabled(I)\t\t36*\r\nSwitchToSptDesired(S,G)\t28*\r\nTIB\t6*\r\nTriggered_Hello_Delay\t\t130*\r\nt_joinsuppress\tnot listed X\r\nt_override\t133*\r\nt_override_default\t130*\r\nt_periodic\t133*\r\nt_suppressed\t133*\r\nUpdate_SPTbit(S,G,iif)\t\t29*\r\nUpstreamJPState(S,G)\t\tnot listed X\r\n", "notes": "The locations of the definitions of functions are not given.  Given that there are so many functions, it would be useful to have a notation that indicates this.  I propose adding a \u201c*\u201d next to the page reference that contains the definition of that function as well as adding an explanatory note to the index, such as:\r\n\r\nFor function definitions, see the pages marked with an asterisk (*).", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2243", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "13.9.", "orig_text": "   OpenPGP CFB mode uses an initialization vector (IV) of all zeros, and\r\n   prefixes the plaintext with BS+2 octets of random data, such that\r\n   octets BS+1 and BS+2 match octets BS-1 and BS.  It does a CFB\r\n   resynchronization after encrypting those BS+2 octets.\r\n\r\n   Thus, for an algorithm that has a block size of 8 octets (64 bits),\r\n   the IV is 10 octets long and octets 7 and 8 of the IV are the same as\r\n   octets 9 and 10.  For an algorithm with a block size of 16 octets\r\n   (128 bits), the IV is 18 octets long, and octets 17 and 18 replicate\r\n   octets 15 and 16.  Those extra two octets are an easy check for a\r\n   correct key.", "correct_text": "   OpenPGP CFB mode uses an initialization vector (IV) of all zeros, and\r\n   prefixes the plaintext with BS+2 octets of random data, such that\r\n   octets BS+1 and BS+2 match octets BS-1 and BS.  It does a CFB\r\n   resynchronization after encrypting those BS+2 octets.\r\n\r\n   Thus, for an algorithm that has a block size of 8 octets (64 bits),\r\n   the virtual IV is 10 octets long and octets 7 and 8 of the virtual IV\r\n   are the same as octets 9 and 10.  For an algorithm with a block size\r\n   of 16 octets (128 bits), the virtual IV is 18 octets long, and octets\r\n   17 and 18 replicate octets 15 and 16. Those extra two octets are an\r\n   easy check for a correct key.\"", "notes": "'IV' is used in a contradicting manner.\r\n\r\nChanged to editorial.\r\n\r\nFrom Jon. C.: This is a marvelous re-wording of a confusing process. I really like the \u201cvirtual IV\u201d mentioned. However, the suggested change omitted the final sentence, which is the whole reason for the virtual IV. I have restored that sentence.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "941", "doc-id": "RFC4873", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   The format of a SECONDARY_RECORD_ROUTE object is the same as a\r\n   RECORD_ROUTE object, Class number 21.  This includes the definition\r\n   of subobjects defined for RECORD_ROUTE object.  The class of the\r\n   SECONDARY_RECORD_ROUTE object is 201 (of the form 11bbbbbb).", "correct_text": "   The format of a SECONDARY_RECORD_ROUTE object is the same as that of\r\n   a RECORD_ROUTE object, Class number 21.  This includes the definition\r\n   of subobjects defined for the RECORD_ROUTE object.  The class of the\r\n   SECONDARY_RECORD_ROUTE object is 201 (of the form 11bbbbbb).", "notes": "The proposed text change (below) is rejected in favor of more correct English.\r\n   The format of a SECONDARY_RECORD_ROUTE object is the same as for a\r\n   RECORD_ROUTE object, Class number 21.  This includes the definition\r\n   of subobjects defined for the RECORD_ROUTE object.  The class of the\r\n   SECONDARY_RECORD_ROUTE object is 201 (of the form 11bbbbbb).", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "942", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.5.7", "orig_text": "On page 26, defines:\r\n\r\n     SubGCKSInfo ::= SEQUENCE {\r\n       subGCKSScheme OBJECT IDENTIFIER,\r\n|      sGCKSContent  OCTET STRING\r\n     }", "correct_text": "Add the following clarification immediately after the ASN.1:\r\n\r\nThe OCTET STRING in each of these is an opaque blob whose\r\nprocessing is subsequently defined in the vendor or domain-specific types.", "notes": "Whereas the subsequent definitions in B.5.7.{1,2} define the syntax\r\nof two possible instantiations of SubGCKSInfo, with syntax NULL and\r\nSEQUENCE { ... }, respectively, for the sGCKSContent element.\r\nAgain, that doesn't match!", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2353", "doc-id": "RFC4683", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "On page 6 of RFC 4683, I found two typos:\r\n\r\n(1a)\r\nThe first sentence,\r\n\r\n|  The following cryptography symbols are defined in this document.\r\n                            ^\r\nshould say:\r\n\r\n|  The following cryptographic symbols are defined in this document.\r\n                            ^^\r\n(1b)\r\nThe 6th entry,\r\n\r\n       PEPSI      Privacy-Enhanced Protected Subject Information.\r\n                  Calculated from the input value P, R, SIItype, SII\r\n|                 using two iteration of H().\r\n                                    ^\r\nshould say:\r\n\r\n       PEPSI      Privacy-Enhanced Protected Subject Information.\r\n                  Calculated from the input value P, R, SIItype, SII\r\n|                 using two iterations of H().\r\n                                    ^^", "correct_text": "See above.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "943", "doc-id": "RFC4873", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "   LSP Segment Recovery Flags are carried in the PROTECTION object of\r\n   the same C-Type defined in [RFC4872].  The format of the flags are:", "correct_text": "   LSP Segment Recovery Flags are carried in the PROTECTION object of\r\n   C-Type 2 defined in [RFC4872].  The format of the modifed PROTECTION\r\n   object carrying these flags is:", "notes": "The subsequent diagram depicts the full object, not only the (new) flags.", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "944", "doc-id": "RFC4873", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "The rules given in the two paragraphs on top of page 18,\r\n\r\n   The resulting Path message is used to create the recovery LSP.  While\r\n   the recovery LSP exists, the PROTECTION object in the original Path\r\n   message  (unless overridden by local policy) MUST also be updated\r\n   with the In-Place bit set (1).  From this point on, Standard Path\r\n   message processing is used in processing the resulting and original\r\n   Path messages.\r\n\r\n   The merge node of a dynamically controlled recovery LSP SHOULD reset\r\n   (0) the In-Place bit in the PROTECTION object of the outgoing Path\r\n   message associated with the terminated recovery LSP.\r\n\r\napparently make dynamic 'overlapping' segment protection impossible.\r\n\r\nOne scenario that came to my mind was node failure protection\r\nenvisioned to be implemented by recovery LSPs for the primary LSP\r\nA-B-C-D-E-F-G, depicted as follows:\r\n\r\n                  H ----- I   J ----- K\r\n                 /         \\ /         \\\r\n          A --- B --- C --- D --- E --- F --- G\r\n           \\         / \\         / \\         /\r\n            L ----- M   N ----- O   P ----- Q\r\n\r\nThe specified rules apparently inhibit the setup of such overlapping\r\nsegment protection LSPs.  Has this been intended ?", "correct_text": "[see above]", "notes": "from pending\n --VERIFIER NOTES-- \nThis is not an Erratum. If there is technical discussion to be had about the function enabled or prohibited by the specification, and the requirements for the provision of services in a network, these need to be taken to the CCAMP mailing list and might result in a revision to the RFC or a new draft.", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "996", "doc-id": "RFC4446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   0x0008  SONET/SDH Circuit Emulation Service Over\r\n     MPLS [CEP]\r\n\r\n   ...\r\n\r\n   0x0010  SONET/SDH Circuit Emulation over Packet [CEP]\r\n", "correct_text": "   0x0008  SONET/SDH Circuit Emulation Service Over\r\n     MPLS Encapsulation [CEM]\r\n\r\n  ...\r\n\r\n   0x0010  SONET/SDH Circuit Emulation over Packet\r\n     [RFC4842]\r\n\r\n", "notes": "The 0x0008 value should not have been listed as\r\nallocated to [CEP], now [RFC 4842], only the 0x0010 value is\r\nprovided for [CEP].  The 0x0008 value should be associated\r\nwith \"SONET/SDH Circuit Emulation Service Over MPLS\r\nEncapsulation [CEM]\", and a corresponding informative\r\nreference for [CEM] provided.\r\n\r\nThe IANA PW Type registry has been updated to correct this\r\nerror.", "submit_date": "2007-10-08", "submitter_name": "Danny McPherson", "verifier_id": "", "verifier_name": "Mark Townsley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "998", "doc-id": "RFC4941", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "The second paragraph of Section 6 refers to the Source Address\r\nSelection API Extension without giving any reference.  The related\r\nInternet-Draft in the meantime has been published as RFC 5014,\r\nless than two weeks after RFC 4941.\r\nIt would have been useful to place a pointer to that work-in-progress\r\n(or the RFC, if publication were coordinated).\r\n", "correct_text": "", "notes": "", "submit_date": "2007-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1147", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "      RPF_interface(RP) is the interface the MRIB indicates would be\r\n      used to route packets to RP, except at the RP when it is the\r\n", "correct_text": "      RPF_interface(RP) is the interface the MRIB indicates would be\r\n      used to route packets to the RP, except at the RP when it is the\r\n", "notes": "Missing word.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2244", "doc-id": "RFC2827", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "By mentioning the method, he was concerned about encouraging it's use.", "correct_text": "By mentioning the method, he was concerned about encouraging its use.", "notes": "/it's/ s/'//", "submit_date": "2010-04-28", "submitter_name": "Justin Pryzby", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "945", "doc-id": "RFC4873", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "   This section presents the RSVP message related formats as modified by\r\n   this document.  Where they differ, formats for unidirectional LSPs\r\n   are presented separately from bidirectional LSPs.", "correct_text": "   This section presents the RSVP-TE message related formats as modified\r\n   by this document.  Where they differ, formats for unidirectional LSPs\r\n   are presented separately from bidirectional LSPs.", "notes": "Does not confine the scope of the specification as it\r\nwould be appropriate.\r\n\r\n  'Classic' RSVP (RFC 2205) is neither covered nor affected by the\r\n  subsequently specified (extended) message formats.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nAlthough it is true that there is some common distinction between \"classic\" RSVP and RSVP-TE, the IP protocol number is the same, and the message numbers (and registry) are the same. In essence, there is just one protocol with two uses. ", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "946", "doc-id": "RFC4678", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "   ", "correct_text": "  -", "notes": "Section 7.3.2 says: \r\n  \"o  Interval: These two bytes indicate a recommended polling interval\r\n      for the load balancer to use.  The Group Workload Manager is\r\n      stating that any polling interval smaller than the suggested\r\n      interval would probably retrieve values before they have had a\r\n      chance to change.\"\r\n\r\nbut it does not mention the intended *unit* for this Interval.\r\n\r\nfrom pending", "submit_date": "2006-11-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "947", "doc-id": "RFC4742", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   In order to allow NETCONF traffic to be easily identified and\r\n   filtered by firewalls and other network devices, NETCONF servers MUST\r\n   default to providing access to the \"netconf\" SSH subsystem only when\r\n   the SSH session is established using the IANA-assigned TCP port\r\n   <830>.", "correct_text": "   In order to allow NETCONF traffic to be easily identified and\r\n   filtered by firewalls and other network devices, NETCONF servers MUST\r\n   default to providing access to the \"netconf\" SSH subsystem only when\r\n   the SSH session is established using the IANA-assigned TCP port\r\n   830.", "notes": "<830> --> 830\r\n\r\nfrom pending", "submit_date": "2007-05-10", "submitter_name": "Eliot Lear", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "948", "doc-id": "RFC4742", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   [user@client]$ ssh -s server.example.org -p <830> netconf", "correct_text": "  [user@client]$ ssh -s server.example.org -p 830 netconf", "notes": "<830> --> 830\r\n\r\nfrom pending", "submit_date": "2007-05-10", "submitter_name": "Eliot Lear", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "949", "doc-id": "RFC4678", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.5.2", "orig_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      | Set Member State Reply(0x1025)|Size of SetMemberStateReply TLV|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Return Code  |\r\n      +-+-+-+-+-+-+-+-+", "correct_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      | Set Member State Reply(0x1065)|Size of SetMemberStateReply TLV|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Return Code  |\r\n      +-+-+-+-+-+-+-+-+", "notes": "Assuming the correct values are in section 4.2.\r\nFurther, 7.5.1.  Set Member State Request has 1060,\r\nagreeing with section 4.2.\r\n\r\n\r\nfrom pending", "submit_date": "2006-11-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "950", "doc-id": "RFC4678", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3.2", "orig_text": "   o  Interval: These two bytes indicate a recommended polling interval\r\n      for the load balancer to use.  The Group Workload Manager is\r\n      stating that any polling interval smaller than the suggested\r\n      interval would probably retrieve values before they have had a\r\n      chance to change.\r\n", "correct_text": "  o  Interval: These two bytes indicate a recommended polling interval\r\n      (number of seconds) for the load balancer to use.  The Group\r\n      Workload Manager is stating that any polling interval smaller than\r\n      the suggested  interval would probably retrieve values before they\r\n      have had a chance to change.\r\n", "notes": "does not mention the intended *unit* for this Interval -- seconds /\r\ncentiseconds / milliseconds ???\r\n\r\nSection 7.3 seems to say the Intervals are in seconds.\r\n\r\nfrom pending", "submit_date": "2006-11-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "951", "doc-id": "RFC4678", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.6.2", "orig_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |   Set LB State Reply (0x1025) | Size of Set LB State Reply TLV|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Return Code  |\r\n      +-+-+-+-+-+-+-+-+", "correct_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |   Set LB State Reply (0x1055) | Size of Set LB State Reply TLV|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Return Code  |\r\n      +-+-+-+-+-+-+-+-+", "notes": "Assuming the correct values are in section 4.2.\r\n\r\nfrom pending", "submit_date": "2006-11-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8629", "doc-id": "RFC9595", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A.", "orig_text": "   {\r\n     \"ietf-sid-file:sid-file\": {\r\n       \"module-name\": \"ietf-system\",\r\n       \"module-revision\": \"2014-08-06\",\r\n       \"description\": \"Example '.sid' file\",\r\n       \"dependency-revision\": [\r\n         {\r\n           \"module-name\": \"ietf-yang-types\",\r\n           \"module-revision\": \"2013-07-15\"\r\n         },\r\n         {\r\n           \"module-name\": \"ietf-inet-types\",\r\n           \"module-revision\": \"2013-07-15\"\r\n         },\r\n         {\r\n           \"module-name\": \"ietf-netconf-acm\",\r\n           \"module-revision\": \"2018-02-14\"\r\n         },\r\n         {\r\n           \"module-name\": \"iana-crypt-hash\",\r\n           \"module-revision\": \"2014-08-06\"\r\n         }\r\n       ],\r\n       \"assignment-range\": [\r\n         {\r\n           \"entry-point\": \"1700\",\r\n           \"size\": \"100\"\r\n         }\r\n       ],\r\n       \"item\": [\r\n         {\r\n           \"namespace\": \"module\",\r\n           \"identifier\": \"ietf-system\",\r\n           \"sid\": \"1700\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"authentication-method\",\r\n           \"sid\": \"1701\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"local-users\",\r\n           \"sid\": \"1702\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"radius\",\r\n           \"sid\": \"1703\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"radius-authentication-type\",\r\n           \"sid\": \"1704\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"radius-chap\",\r\n           \"sid\": \"1705\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"radius-pap\",\r\n           \"sid\": \"1706\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"authentication\",\r\n           \"sid\": \"1707\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"dns-udp-tcp-port\",\r\n           \"sid\": \"1708\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"local-users\",\r\n           \"sid\": \"1709\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"ntp\",\r\n           \"sid\": \"1710\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"ntp-udp-port\",\r\n           \"sid\": \"1711\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"radius\",\r\n           \"sid\": \"1712\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"radius-authentication\",\r\n           \"sid\": \"1713\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"timezone-name\",\r\n           \"sid\": \"1714\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:set-current-datetime\",\r\n           \"sid\": \"1715\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:set-current-datetime/input\",\r\n           \"sid\": \"1775\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:set-current-datetime/input/\\\r\n                                                      current-datetime\",\r\n           \"sid\": \"1776\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system\",\r\n           \"sid\": \"1717\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-restart\",\r\n           \"sid\": \"1718\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-shutdown\",\r\n           \"sid\": \"1719\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state\",\r\n           \"sid\": \"1720\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/clock\",\r\n           \"sid\": \"1721\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/clock/boot-datetime\\\r\n                                                                      \",\r\n           \"sid\": \"1722\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/clock/current-\\\r\n                                                              datetime\",\r\n           \"sid\": \"1723\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform\",\r\n           \"sid\": \"1724\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform/machine\",\r\n           \"sid\": \"1725\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform/os-name\",\r\n           \"sid\": \"1726\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform/os-release\\\r\n                                                                      \",\r\n           \"sid\": \"1727\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform/os-version\\\r\n                                                                      \",\r\n           \"sid\": \"1728\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication\",\r\n           \"sid\": \"1729\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user\",\r\n           \"sid\": \"1730\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user-\\\r\n                                                  authentication-order\",\r\n           \"sid\": \"1731\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                                        authorized-key\",\r\n           \"sid\": \"1732\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                              authorized-key/algorithm\",\r\n           \"sid\": \"1733\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                               authorized-key/key-data\",\r\n           \"sid\": \"1734\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                                   authorized-key/name\",\r\n           \"sid\": \"1735\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/name\",\r\n           \"sid\": \"1736\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                                              password\",\r\n           \"sid\": \"1737\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock\",\r\n           \"sid\": \"1738\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock/timezone-name\",\r\n           \"sid\": \"1739\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock/timezone-utc-offset\\\r\n                                                                      \",\r\n           \"sid\": \"1740\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/contact\",\r\n           \"sid\": \"1741\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver\",\r\n           \"sid\": \"1742\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/options\",\r\n           \"sid\": \"1743\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/options/\\\r\n                                                              attempts\",\r\n           \"sid\": \"1744\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/options/\\\r\n                                                               timeout\",\r\n           \"sid\": \"1745\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/search\",\r\n           \"sid\": \"1746\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server\",\r\n           \"sid\": \"1747\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/name\",\r\n           \"sid\": \"1748\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/udp-\\\r\n                                                               and-tcp\",\r\n           \"sid\": \"1749\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/udp-\\\r\n                                                       and-tcp/address\",\r\n           \"sid\": \"1750\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/udp-\\\r\n                                                          and-tcp/port\",\r\n           \"sid\": \"1751\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/hostname\",\r\n           \"sid\": \"1752\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/location\",\r\n           \"sid\": \"1753\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp\",\r\n           \"sid\": \"1754\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/enabled\",\r\n           \"sid\": \"1755\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server\",\r\n           \"sid\": \"1756\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/association-\\\r\n                                                                  type\",\r\n           \"sid\": \"1757\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/iburst\",\r\n           \"sid\": \"1758\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/name\",\r\n           \"sid\": \"1759\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/prefer\",\r\n           \"sid\": \"1760\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/udp\",\r\n           \"sid\": \"1761\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/udp/address\",\r\n           \"sid\": \"1762\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/udp/port\",\r\n           \"sid\": \"1763\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius\",\r\n           \"sid\": \"1764\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/options\",\r\n           \"sid\": \"1765\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/options/attempts\",\r\n           \"sid\": \"1766\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/options/timeout\",\r\n           \"sid\": \"1767\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server\",\r\n           \"sid\": \"1768\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/\\\r\n                                                   authentication-type\",\r\n           \"sid\": \"1769\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/name\",\r\n           \"sid\": \"1770\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/udp\",\r\n           \"sid\": \"1771\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/udp/address\\\r\n                                                                      \",\r\n           \"sid\": \"1772\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/udp/\\\r\n                                                   authentication-port\",\r\n           \"sid\": \"1773\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/udp/shared-\\\r\n                                                                secret\",\r\n           \"sid\": \"1774\"\r\n         }\r\n       ]\r\n     }\r\n   }", "correct_text": "   {\r\n     \"ietf-sid-file:sid-file\": {\r\n       \"module-name\": \"ietf-system\",\r\n       \"module-revision\": \"2014-08-06\",\r\n       \"description\": \"Example sid file\",\r\n       \"dependency-revision\": [\r\n         {\r\n           \"module-name\": \"ietf-yang-types\",\r\n           \"module-revision\": \"2013-07-15\"\r\n         },\r\n         {\r\n           \"module-name\": \"ietf-inet-types\",\r\n           \"module-revision\": \"2013-07-15\"\r\n         },\r\n         {\r\n           \"module-name\": \"ietf-netconf-acm\",\r\n           \"module-revision\": \"2018-02-14\"\r\n         },\r\n         {\r\n           \"module-name\": \"iana-crypt-hash\",\r\n           \"module-revision\": \"2014-08-06\"\r\n         }\r\n       ],\r\n       \"assignment-range\": [\r\n         {\r\n           \"entry-point\": \"1700\",\r\n           \"size\": \"100\"\r\n         }\r\n       ],\r\n       \"item\": [\r\n         {\r\n           \"namespace\": \"module\",\r\n           \"identifier\": \"ietf-system\",\r\n           \"sid\": \"1700\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"authentication-method\",\r\n           \"sid\": \"1701\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"local-users\",\r\n           \"sid\": \"1702\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"radius\",\r\n           \"sid\": \"1703\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"radius-authentication-type\",\r\n           \"sid\": \"1704\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"radius-chap\",\r\n           \"sid\": \"1705\"\r\n         },\r\n         {\r\n           \"namespace\": \"identity\",\r\n           \"identifier\": \"radius-pap\",\r\n           \"sid\": \"1706\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"authentication\",\r\n           \"sid\": \"1707\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"dns-udp-tcp-port\",\r\n           \"sid\": \"1708\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"local-users\",\r\n           \"sid\": \"1709\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"ntp\",\r\n           \"sid\": \"1710\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"ntp-udp-port\",\r\n           \"sid\": \"1711\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"radius\",\r\n           \"sid\": \"1712\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"radius-authentication\",\r\n           \"sid\": \"1713\"\r\n         },\r\n         {\r\n           \"namespace\": \"feature\",\r\n           \"identifier\": \"timezone-name\",\r\n           \"sid\": \"1714\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:set-current-datetime\",\r\n           \"sid\": \"1715\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:set-current-datetime/input\",\r\n           \"sid\": \"1716\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:set-current-datetime/input/\\\r\n                                                      current-datetime\",\r\n           \"sid\": \"1717\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:set-current-datetime/output\",\r\n           \"sid\": \"1718\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system\",\r\n           \"sid\": \"1719\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-restart\",\r\n           \"sid\": \"1720\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-restart/input\",\r\n           \"sid\": \"1721\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-restart/output\",\r\n           \"sid\": \"1722\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-shutdown\",\r\n           \"sid\": \"1723\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-shutdown/input\",\r\n           \"sid\": \"1724\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-shutdown/output\",\r\n           \"sid\": \"1725\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state\",\r\n           \"sid\": \"1726\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/clock\",\r\n           \"sid\": \"1727\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/clock/boot-datetime\\\r\n                                                                      \",\r\n           \"sid\": \"1728\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/clock/current-\\\r\n                                                              datetime\",\r\n           \"sid\": \"1729\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform\",\r\n           \"sid\": \"1730\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform/machine\",\r\n           \"sid\": \"1731\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform/os-name\",\r\n           \"sid\": \"1732\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform/os-release\\\r\n                                                                      \",\r\n           \"sid\": \"1733\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system-state/platform/os-version\\\r\n                                                                      \",\r\n           \"sid\": \"1734\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication\",\r\n           \"sid\": \"1735\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user\",\r\n           \"sid\": \"1736\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user-\\\r\n                                                  authentication-order\",\r\n           \"sid\": \"1737\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                                        authorized-key\",\r\n           \"sid\": \"1738\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                              authorized-key/algorithm\",\r\n           \"sid\": \"1739\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                               authorized-key/key-data\",\r\n           \"sid\": \"1740\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                                   authorized-key/name\",\r\n           \"sid\": \"1741\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/name\",\r\n           \"sid\": \"1742\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/authentication/user/\\\r\n                                                              password\",\r\n           \"sid\": \"1743\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock\",\r\n           \"sid\": \"1744\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock/timezone\",\r\n           \"sid\": \"1745\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock/timezone/timezone-\\\r\n                                                                  name\",\r\n           \"sid\": \"1746\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock/timezone/timezone-\\\r\n                                                    name/timezone-name\",\r\n           \"sid\": \"1747\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock/timezone/timezone-\\\r\n                                                            utc-offset\",\r\n           \"sid\": \"1748\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/clock/timezone/timezone-\\\r\n                                        utc-offset/timezone-utc-offset\",\r\n           \"sid\": \"1749\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/contact\",\r\n           \"sid\": \"1750\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver\",\r\n           \"sid\": \"1751\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/options\",\r\n           \"sid\": \"1752\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/options/\\\r\n                                                              attempts\",\r\n           \"sid\": \"1753\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/options/\\\r\n                                                               timeout\",\r\n           \"sid\": \"1754\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/search\",\r\n           \"sid\": \"1755\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server\",\r\n           \"sid\": \"1756\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/name\",\r\n           \"sid\": \"1757\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/\\\r\n                                                             transport\",\r\n           \"sid\": \"1758\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/\\\r\n                                                 transport/udp-and-tcp\",\r\n           \"sid\": \"1759\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/\\\r\n                                     transport/udp-and-tcp/udp-and-tcp\",\r\n           \"sid\": \"1760\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/\\\r\n                             transport/udp-and-tcp/udp-and-tcp/address\",\r\n           \"sid\": \"1761\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/dns-resolver/server/\\\r\n                                transport/udp-and-tcp/udp-and-tcp/port\",\r\n           \"sid\": \"1762\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/hostname\",\r\n           \"sid\": \"1763\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/location\",\r\n           \"sid\": \"1764\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp\",\r\n           \"sid\": \"1765\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/enabled\",\r\n           \"sid\": \"1766\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server\",\r\n           \"sid\": \"1767\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/association-\\\r\n                                                                  type\",\r\n           \"sid\": \"1768\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/iburst\",\r\n           \"sid\": \"1769\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/name\",\r\n           \"sid\": \"1770\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/prefer\",\r\n           \"sid\": \"1771\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/transport\",\r\n           \"sid\": \"1772\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/transport/udp\",\r\n           \"sid\": \"1773\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/transport/udp/\\\r\n                                                                   udp\",\r\n           \"sid\": \"1774\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/transport/udp/\\\r\n                                                           udp/address\",\r\n           \"sid\": \"1775\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/ntp/server/transport/udp/\\\r\n                                                              udp/port\",\r\n           \"sid\": \"1776\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius\",\r\n           \"sid\": \"1777\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/options\",\r\n           \"sid\": \"1778\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/options/attempts\",\r\n           \"sid\": \"1779\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/options/timeout\",\r\n           \"sid\": \"1780\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server\",\r\n           \"sid\": \"1781\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/\\\r\n                                                   authentication-type\",\r\n           \"sid\": \"1782\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/name\",\r\n           \"sid\": \"1783\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/transport\",\r\n           \"sid\": \"1784\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/transport/\\\r\n                                                                   udp\",\r\n           \"sid\": \"1785\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/transport/\\\r\n                                                               udp/udp\",\r\n           \"sid\": \"1786\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/transport/\\\r\n                                                       udp/udp/address\",\r\n           \"sid\": \"1787\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/transport/\\\r\n                                           udp/udp/authentication-port\",\r\n           \"sid\": \"1788\"\r\n         },\r\n         {\r\n           \"namespace\": \"data\",\r\n           \"identifier\": \"/ietf-system:system/radius/server/transport/\\\r\n                                                 udp/udp/shared-secret\",\r\n           \"sid\": \"1789\"\r\n         }\r\n       ]\r\n     }\r\n   }\r\n", "notes": "The example .sid file contains several issues. The autogeneration process is not follow faithfully (see SID 1775 for 'identifier' \"/ietf-system:set-current-datetime/input\" breaking the SID assignment order). There are assignments missing for rpc/action input/output, choice and case schema nodes (e.g. \"/ietf-system:set-current-datetime/output\", \"/ietf-system:system/clock/timezone\", \"/ietf-system:system/clock/timezone/timezone-name\", ...).", "submit_date": "2025-11-10", "submitter_name": "Vojtech Vilimek", "verifier_id": "", "verifier_name": null, "update_date": "2025-11-12 20:04:52"}, {"errata_id": "956", "doc-id": "RFC4186", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.14", "orig_text": "   The value field of the AT_MAC attribute contains two reserved bytes\r\n   followed by a keyed message authentication code (MAC).  The MAC is\r\n|  calculated over the whole EAP packet and concatenated with optional\r\n   message-specific data, with the exception that the value field of the\r\n   MAC attribute is set to zero when calculating the MAC.", "correct_text": "   The value field of the AT_MAC attribute contains two reserved bytes\r\n   followed by a keyed message authentication code (MAC).  The MAC is\r\n|  calculated over the whole EAP packet, concatenated with optional\r\n   message-specific data, with the exception that the value field of the\r\n   MAC attribute is set to zero when calculating the MAC.", "notes": "  \"The MAC is calculated ... and concatenated ...\"\r\ncould easily be misunderstood.\r\nFrom the context it can be concluded that the potential ambiguity\r\nshould be resolved and clarified by omitting the word 'and',\r\nand replacing it by a comma.\r\n\r\nfrom pending", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Henry Haverinen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "957", "doc-id": "RFC4186", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(1) [[posted separately.]]\r\n(2) [[posted separately.]]\r\n\r\n(3)  [missing article]\r\n\r\nWithin Section 1, the 2nd paragraph on page 5 says:\r\n\r\n   EAP-SIM specifies optional support for protecting the privacy of\r\n   subscriber identity using the same concept as the GSM, which uses\r\n   pseudonyms/temporary identifiers.  [...]\r\n\r\nIt should say:\r\n\r\n|  EAP-SIM specifies optional support for protecting the privacy of the\r\n   subscriber identity using the same concept as the GSM, which uses\r\n   pseudonyms/temporary identifiers.  [...]\r\n\r\n\r\n(4)  [missing article]\r\n\r\nSection 2, near the bottom of page 6, says:\r\n\r\n   Fast Re-authentication Username\r\n\r\n         The username portion of fast re-authentication identity,\r\n         i.e., not including any realm portions.\r\n\r\nIt should say:\r\n\r\n   Fast Re-authentication Username\r\n\r\n|        The username portion of the fast re-authentication identity,\r\n         i.e., not including any realm portions.\r\n\r\n\r\n(5)  [missing article]\r\n\r\nThe first paragraph of Section 4.2.3, on page 19, says:\r\n\r\n   If EAP-SIM peer is started upon receiving an EAP-Request/Identity\r\n   message, then the peer MAY use an EAP-SIM identity in the EAP-\r\n   Response/Identity packet.  [...]\r\n\r\nIt should say:\r\n\r\n|  If the EAP-SIM peer is started upon receiving an EAP-Request/Identity\r\n   message, then the peer MAY use an EAP-SIM identity in the EAP-\r\n   Response/Identity packet.  [...]\r\n\r\n\r\n(6)  [missing article]\r\n\r\nThe Section title (on page 19 and in the ToC),\r\n                                            v\r\n4.2.4.  Server Operation in the Beginning of EAP-SIM Exchange\r\n\r\nshould better say:\r\n                                            vvvv\r\n4.2.4.  Server Operation in the Beginning of an EAP-SIM Exchange\r\n\r\n\r\n(7)  [misleading continuation indicator]\r\n\r\nIn Section 4.3.6, Figure 7 (on page 29) contains for lines that\r\nmight erroneously be misunderstod to indicate the omission of\r\nsome protocol steps (which is not the case).\r\nI suspect that this is an artifact from a draft version where\r\nFigure 7 was split over two pages; after joining the parts,\r\nthese continuation indicators have become ambiguous, and hence\r\nshould be deleted.\r\n\r\nOn mid-page 29, the lines:\r\n\r\n       |     EAP-Request/SIM/Start                             |\r\n       |     (AT_FULLAUTH_ID_REQ, AT_VERSION_LIST)             |\r\n       |<------------------------------------------------------|\r\n       |                                                       |\r\n       :                                                       :\r\n       :                                                       :\r\n       :                                                       :\r\n       :                                                       :\r\n       |EAP-Response/SIM/Start                                 |\r\n       |(AT_IDENTITY with a pseudonym identity, AT_NONCE_MT,   |\r\n       | AT_SELECTED_VERSION)                                  |\r\n       |------------------------------------------------------>|\r\n\r\nshould say:\r\n\r\n       |     EAP-Request/SIM/Start                             |\r\n       |     (AT_FULLAUTH_ID_REQ, AT_VERSION_LIST)             |\r\n       |<------------------------------------------------------|\r\n       |                                                       |\r\n       |EAP-Response/SIM/Start                                 |\r\n       |(AT_IDENTITY with a pseudonym identity, AT_NONCE_MT,   |\r\n       | AT_SELECTED_VERSION)                                  |\r\n       |------------------------------------------------------>|\r\n\r\n\r\n(8)  [grammar / articles]\r\n\r\nWithin Section 5.3, the text on top of page 32,\r\n\r\n   If the EAP server supports fast re-authentication, it MAY include the\r\n|  skippable AT_NEXT_REAUTH_ID attribute in the encrypted data of\r\n   EAP-Request/SIM/Challenge message (Section 9.3).  This attribute\r\n   contains a new fast re-authentication identity for the next fast\r\n   re-authentication.  The attribute also works as a capability flag\r\n|  that, indicating that the server supports fast re-authentication, and\r\n   that the server wants to continue using fast re-authentication within\r\n   the current context.  The peer MAY ignore this attribute, in which\r\n   case it MUST use full authentication next time.  If the peer wants to\r\n   use re-authentication, it uses this fast re-authentication identity\r\n|  on next authentication.  Even if the peer has a fast\r\n   re-authentication identity, [...]\r\n\r\nshould say:\r\n\r\n   If the EAP server supports fast re-authentication, it MAY include the\r\n|  skippable AT_NEXT_REAUTH_ID attribute in the encrypted data of the\r\n   EAP-Request/SIM/Challenge message (Section 9.3).  This attribute\r\n   contains a new fast re-authentication identity for the next fast\r\n   re-authentication.  The attribute also works as a capability flag,\r\n|  indicating that the server supports fast re-authentication, and\r\n   that the server wants to continue using fast re-authentication within\r\n   the current context.  The peer MAY ignore this attribute, in which\r\n   case it MUST use full authentication next time.  If the peer wants to\r\n   use re-authentication, it uses this fast re-authentication identity\r\n|  on the next authentication.  Even if the peer has a fast\r\n   re-authentication identity, [...]\r\n\r\n\r\n(9)  [misleading continuation indicator, again]\r\n\r\nRepetition of the issue described in item (7) above:\r\n\r\nIn Section 5.4, in Figure 8 (on page 35), the 4 lines:\r\n\r\n       :                                                       :\r\n       :                                                       :\r\n       :                                                       :\r\n       :                                                       :\r\n\r\nshould be deleted, because these might erroneously be misunderstood\r\nas indicating the omission of some protocol steps.\r\n\r\n\r\n(10)  [missing article]\r\n\r\nIn Section 7, the paragraph at the bottom of page 43 says:\r\n\r\n   The notation n*Kc in the formula above denotes the n Kc values\r\n   concatenated.  The Kc keys are used in the same order as the RAND\r\n|  challenges in AT_RAND attribute.  NONCE_MT denotes the NONCE_MT value\r\n   (not the AT_NONCE_MT attribute, but only the nonce value).  The\r\n   Version List includes the 2-byte-supported version numbers from\r\n   AT_VERSION_LIST, in the same order as in the attribute.  [...]\r\n\r\nIt should say:\r\n\r\n   The notation n*Kc in the formula above denotes the n Kc values\r\n   concatenated.  The Kc keys are used in the same order as the RAND\r\n|  challenges in the AT_RAND attribute.  NONCE_MT denotes the NONCE_MT\r\n   value (not the AT_NONCE_MT attribute, but only the nonce value).\r\n   The Version List includes the 2-byte-supported version numbers from\r\n   AT_VERSION_LIST, in the same order as in the attribute.  [...]\r\n", "correct_text": "", "notes": "from pending", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Henry Haverinen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "958", "doc-id": "RFC4779", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  Section 5.2 -- bad acronym expansion\r\n\r\nWithin Section 5.2, bullet B. on page 11 says:\r\n\r\n   B.  Problems with IPv6 Neighbor Discovery (ND) on CM and CMTS.  In\r\n|      IPv4, these devices rely on Internet Group Multicast Protocol\r\n       (IGMP) join messages to track membership of hosts that are part\r\n       of a particular IP multicast group.  [...]\r\n\r\nIt should say:\r\n\r\n   B.  Problems with IPv6 Neighbor Discovery (ND) on CM and CMTS.  In\r\n|      IPv4, these devices rely on Internet Group Management Protocol\r\n       (IGMP) join messages to track membership of hosts that are part\r\n       of a particular IP multicast group.  [...]\r\n\r\n\r\n(2)  Section 5.2.1.3 -- typo / missing article\r\n\r\nThe first paragraph of Section 5.2.1.3, on top of page 14 says:\r\n\r\n                                                 [...].  In order to do\r\n   that, the CM and CMTS must forward Neighbor Discovery (ND) packets\r\n|  between ER and the hosts attached to the CM.\r\n          ^\r\nIt should say:\r\n\r\n                                                 [...].  In order to do\r\n   that, the CM and CMTS must forward Neighbor Discovery (ND) packets\r\n|  between the ER and the hosts attached to the CM.\r\n          ^^^^^\r\n\r\n\r\n(3)  Section 5.2.1.4 -- typo / missing article\r\n\r\nThe first paragraph of Section 5.2.1.4, on mid-page 14 says:\r\n\r\n                    [...].  If there is a GWR present, it will also use\r\n|  static default route to the ER.\r\n\r\nIt should say:\r\n\r\n                    [...].  If there is a GWR present, it will also use\r\n|  a static default route to the ER.\r\n   ^^\r\n\r\n\r\n(4)  Section 5.2.2 -- typo / missing article\r\n\r\nOn page 15, the text for scenario #2 says:\r\n\r\n   [...]\r\n   This scenario is also easy to deploy since the cable operator just\r\n|  needs to add GWR at the customer site.\r\n               ^\r\nIt should say:\r\n\r\n   [...]\r\n   This scenario is also easy to deploy since the cable operator just\r\n|  needs to add a GWR at the customer site.\r\n               ^^^\r\n\r\n\r\n(5)  Section 5.2.2.2.3 -- wrong article\r\n\r\nOn page 18, the second paragraph of Section 5.2.2.2.3 says:\r\n\r\n   The GWR will use its IPv4 address to source the tunnel to the ER.\r\n|  The tunnel endpoint will be the IPv4 address of the ER.  [...]\r\n                               ^^^\r\nIt should say:\r\n\r\n   The GWR will use its IPv4 address to source the tunnel to the ER.\r\n|  The tunnel endpoint will be an IPv4 address of the ER.  [...]\r\n                               ^^\r\n\r\nRationale:\r\n  Since IP addresses usually identify *interfaces* and routers\r\n  presumably have more than one IP interface, it is improper\r\n  to talk about *the* IP address of a router.\r\n\r\n\r\n(6)  Section 5.2.2.3 -- improper text in figure ?\r\n\r\nOn page 19, Figure 5.2.2.3 is:\r\n\r\n                           +-----------+   +-------------+\r\n     +-----+  +-------+    |   Cable   |   | CMTS / Edge |\r\n     |Host |--|  CM   |----|  (HFC)    |---|             |=>ISP\r\n     +-----+  +-------+    |  Network  |   |   Router    | Network\r\n                           +-----------+   +-------------+\r\n\r\n|    |-------||---------------------------||---------------|\r\n|     IPv4/v6              IPv4/v6              IPv4/v6\r\n\r\nBecause all parts of the network shown are dual-stack, it makes\r\nno sense to show two boundaries between similar regions.\r\nHence, the figure should better be:\r\n\r\n                           +-----------+   +-------------+\r\n     +-----+  +-------+    |   Cable   |   | CMTS / Edge |\r\n     |Host |--|  CM   |----|  (HFC)    |---|             |=>ISP\r\n     +-----+  +-------+    |  Network  |   |   Router    | Network\r\n                           +-----------+   +-------------+\r\n\r\n|    |-----------------------------------------------------|\r\n|                          IPv4/v6\r\n\r\n\r\n(7)  Section 5.2.2.5.2\r\n\r\nThe first paragraph of Section 5.2.2.5.2, at the bottom of page 22,\r\nsays:\r\n\r\n   Since the CM/GWR is dual stack, it can receive an IPv4 or IPv6\r\n   address using DHCP for management purposes.  As the GWR functionality\r\n|  is embedded in the CM, it will need an IPv6 address for forwarding\r\n   data traffic.  IPv6 address assignment for the CM/GWR and host can be\r\n   done via DHCPv6 or DHCP-PD.\r\n\r\nApparently, to be able to *forward* IPv6 traffic, the GWR needs at least\r\ntwo IPv6 addresses.  Therefore, the RFC should perhaps better say:\r\n\r\n   Since the CM/GWR is dual stack, it can receive an IPv4 or IPv6\r\n   address using DHCP for management purposes.  As the GWR functionality\r\n|  is embedded in the CM, it will need IPv6 addresses for forwarding\r\n   data traffic.  IPv6 address assignment for the CM/GWR and host can be\r\n   done via DHCPv6 or DHCP-PD.\r\n\r\n\r\n(8)  Section 5.2.3 -- missing articles\r\n\r\nThe first paragraph of Section 5.2.3 says, at the top of page 24:\r\n\r\n                          [...].  MLDv2 is almost identical to IGMPv3\r\n|  and also supports ASM (Any-Source Multicast) and SSM (Source-Specific\r\n   Multicast) service models.\r\n\r\nIt should say:\r\n\r\n                          [...].  MLDv2 is almost identical to IGMPv3\r\n|  and also supports the ASM (Any-Source Multicast) and the SSM (Source-\r\n   Specific Multicast) service models.\r\n\r\n\r\n(9)  Section 6.2.1.2 -- typo\r\n\r\nOn page 30, the bullet B. within Section 6.2.1.2 says:\r\n\r\n             v\r\n       The later option allows it to contact a remote DHCPv6 server, if\r\n       needed.  [...]\r\n\r\nIt should say:\r\n             vv\r\n|      The latter option allows it to contact a remote DHCPv6 server, if\r\n       needed.  [...]\r\n\r\n\r\n(10)  Section 6.2.2 -- typo\r\n\r\nIn the last paragraph on page 31, Section 6.2.2 says:\r\n\r\n                                 v\r\n|  This solution scales better then the Point-to-Point, but since there\r\n   is only one PPP session per ATM PVC, the subscriber can choose a\r\n   single ISP service at a time.\r\n\r\nIt should say:\r\n                                 v\r\n|  This solution scales better than the Point-to-Point, but since there\r\n   is only one PPP session per ATM PVC, the subscriber can choose a\r\n   single ISP service at a time.\r\n\r\n\r\n(11)  Section 6.3 -- clarity\r\n\r\nThe last paragraph of Section 6.3 (second paragraph on page 39) says:\r\n\r\n   This facilitates the deployment of multicast services.  The\r\n   discussion of this section applies to all the multicast sections in\r\n|  the document.\r\n     ^\r\nIt should say:\r\n\r\n   This facilitates the deployment of multicast services.  The\r\n   discussion of this section applies to all the multicast sections in\r\n|  this document.\r\n     ^^\r\n\r\n(12)  Section 6.3.1 -- grammar / typos\r\n\r\nThe first paragraph of Section 6.3.1, on page 39, says:\r\n      v\r\n|  Any Source Multicast (ASM) is useful for Service Providers that\r\n   intend to support the forwarding of multicast traffic of their\r\n   customers.  It is based on the Protocol Independent Multicast -\r\n   Sparse Mode (PIM-SM) protocol and it is more complex to manage\r\n   because of the use of Rendezvous Points (RPs).  With IPv6, static RP\r\n|  and Bootstrap Router [BSR] can be used for RP-to-group mapping\r\n   similar to IPv4.  [...]\r\n\r\nIt should say:\r\n      v\r\n|  Any-Source Multicast (ASM) is useful for Service Providers that\r\n   intend to support the forwarding of multicast traffic of their\r\n   customers.  It is based on the Protocol Independent Multicast -\r\n   Sparse Mode (PIM-SM) protocol and it is more complex to manage\r\n   because of the use of Rendezvous Points (RPs).  With IPv6, static RP\r\n|  and Bootstrap Routers [BSR] can be used for RP-to-group mapping\r\n   similar to IPv4.  [...]\r\n\r\nAlternatively, the last sentence above could be reworded to say:\r\n\r\n   because of the use of Rendezvous Points (RPs).  With IPv6, static RP\r\n|  and the Bootstrap Router protocol [BSR] can be used for RP-to-group\r\n   mapping similar to IPv4.  [...]\r\n\r\n\r\n(13)  Section 8.1 -- multiple flaws\r\n\r\nNear the end of the first paragraph on page 56, Section 8.1 says:\r\n\r\n              [...].  The AP forwards all the packets coming to/from\r\n|  host to the Edge Router.  The underlying connection between the AP\r\n|  and Edge Router could be based on any access layer technology such as\r\n   HFC/Cable, FTTH, xDSL, etc.\r\n\r\nIt should say:\r\n\r\n              [...].  The AP forwards all the packets coming to/from\r\n|  hosts to the Edge Router.  The underlying connection between the AP\r\n|  and the Edge Router could be based on any access layer technology\r\n   such as HFC/Cable, FTTH, xDSL, etc.\r\n\r\nIn the second paragraph on page 56, Section 8.1 says:\r\n\r\n|                [...].  In most of the cases, SP assigns a limited\r\n   number of public IP addresses to its customers.  [...]\r\n\r\nIt should say:\r\n                                               vvvv\r\n|                [...].  In most of the cases, the SP assigns a limited\r\n   number of public IP addresses to its customers.  [...]\r\n\r\nAt the end of the section (near the bottom of page 56), the RFC says:\r\n\r\n|  A. Layer 2 NAP with Layer 3 termination at NSP Edge Router\r\n\r\n|  B. Layer 3 aware NAP with Layer 3 termination at Access Router\r\n\r\nIt should say either:\r\n\r\n|  A. Layer 2 NAP with Layer 3 termination at an NSP Edge Router\r\n\r\n|  B. Layer 3 aware NAP with Layer 3 termination at an Access Router\r\n\r\nor:\r\n\r\n|  A. Layer 2 NAP with Layer 3 termination at NSP Edge Routers\r\n\r\n|  B. Layer 3 aware NAP with Layer 3 termination at Access Routers\r\n\r\n\r\n(14)  Section 8.1.1 -- grammar\r\n\r\nThe first paragraph of Section 8.1.1, at the bottom of page 56, says:\r\n\r\n   When a Layer 2 switch is present between AP and Edge Router, the AP\r\n|  and Layer 2 switch continues to work as a bridge, forwarding IPv4 and\r\n   IPv6 packets from WLAN Host/Router to Edge Router and vice versa.\r\n\r\nIt should say:\r\n\r\n   When a Layer 2 switch is present between AP and Edge Router, the AP\r\n|  and Layer 2 switch continue to work as a bridge, forwarding IPv4 and\r\n   IPv6 packets from WLAN Host/Router to Edge Router and vice versa.\r\n\r\n\r\n(15)  Section 8.1.2\r\n\r\nOn page 59, the second paragraph of Section 8.1.2 says:\r\n\r\n   When the WLAN Host initiates the connection, the AAA authentication\r\n|  and association process with WLAN AP will be similar, as explained in\r\n   Section 8.1.1.\r\n                               ^                       ^\r\nIt should say:\r\n\r\n   When the WLAN Host initiates the connection, the AAA authentication\r\n|  and association process with the WLAN AP will be similar as explained\r\n   in Section 8.1.1.\r\n                               ^^^^^                       ^\r\n\r\n(16)  Section 8.1.2.2 -- clarification needed\r\n\r\nOn page 60, bullet C. of Section 8.1.2.2 says:\r\n\r\n       vv                                                             vv\r\n|  C.  It can use its link-local address to communicate with the ER.  It\r\n       can also dynamically acquire through stateless auto-configuration\r\n       the address for the link between itself and the ER.  [...]\r\n\r\nThe double \"it\" is unclear and inprecise.  (The immediately preceding\r\nsentences refer to three different entities, the DHCP server, the\r\nAccess Router, and the Edge Router -- which one is \"it\" ?)\r\n\r\nPresumably, it was intended to refer to the Access Router, and not to\r\nthe AAA Server, but -- according to Figure 8.1.2 -- only the latter\r\npotentially has a common link with the ER and hence can use link-local\r\naddresses, whereas the AR is connected to the ER via the Access\r\nProvider Network that might comprise multiple IP hops on the route\r\nfrom AR to ER.\r\n\r\nIt should say (text provided by Adeel):\r\n\r\nThe Access Router can dynamically acquire through stateless address auto-configuration the address for the link between itself and the ER. This step is followed by a request via DHCP-PD for a\r\n+prefix shorter than /64 that in turn is divided in /64s and assigned to its interfaces connecting the hosts on the customer site.\r\n\r\n\r\n(17)  Section 8.1.2.3 -- missing article\r\n\r\nThe last paragraph of Section 8.1.2.3, on mid-page 61, says:\r\n\r\n   If the Access Router is owned by the SP, then the Access Router will\r\n|  also run IPv6 IGP, and will be part of the SP IPv6 routing domain\r\n   (OSPFv3 or IS-IS).  [...]\r\n\r\nIt should say:\r\n\r\n   If the Access Router is owned by the SP, then the Access Router will\r\n|  also run an IPv6 IGP, and will be part of the SP IPv6 routing domain\r\n   (OSPFv3 or IS-IS).  [...]\r\n\r\n\r\n(18)  Section 8.1.3 -- missing articles\r\n\r\nSection 8.1.3, near the bottom of page 61, says:\r\n\r\n   PPP Terminated Aggregation (PTA) and L2TPv2 Access Aggregation (LAA)\r\n   models, as discussed in Sections 6.2.2 and 6.2.3, respectively, can\r\n   also be deployed in IPv6 WLAN environment.\r\n\r\nIt should say:\r\n\r\n|  The PPP Terminated Aggregation (PTA) and L2TPv2 Access Aggregation\r\n   (LAA) models, as discussed in Sections 6.2.2 and 6.2.3, respectively,\r\n|  can also be deployed in an IPv6 WLAN environment.\r\n\r\n\r\n(19)  Section 8.1.3.1 -- missing articles\r\n\r\nAt the bottom of page 61, the first paragraph Section 8.1.3.1 says:\r\n                                   v\r\n|  While deploying the PTA model in IPv6 WLAN environment, the Access\r\n   Router is Layer 3 aware and it has to be upgraded to support IPv6.\r\n\r\nIt should say:\r\n                                   vvvv\r\n|  While deploying the PTA model in an IPv6 WLAN environment, the Access\r\n   Router is Layer 3 aware and it has to be upgraded to support IPv6.\r\n\r\nThe bottom line on page 61,\r\n                                            v\r\n|  Figure 8.1.3.1 describes the PTA Model in IPv6 WLAN environment.\r\n\r\nshould say:\r\n                                            vvvv\r\n|  Figure 8.1.3.1 describes the PTA Model in an IPv6 WLAN environment.\r\n\r\nAlternatively, \"the\" could be inserted in place of \"an\", in both cases.\r\n\r\n\r\n(20)  Section 8.1.3.2\r\n\r\nOn page 62, the literally same changes as presented in item (19)\r\nshould be applied as well.\r\n\r\n\r\n(21)  Section 8.2 -- multiple grammar issues\r\n\r\nThe first paragraph on top of page 64 says:\r\n\r\n                                  vvvvv\r\n|  It is important to note that in the shared wireless environments,\r\n   multicast can have a significant bandwidth impact.  [...]\r\n\r\nIt should say:\r\n                                  v\r\n|  It is important to note that in shared wireless environments,\r\n   multicast can have a significant bandwidth impact.  [...]\r\n\r\nThe second paragraph on page 64 says:\r\n\r\n                          vvvvvv\r\n|  The IPv6 WLAN Hosts can also join desired multicast groups as long as\r\n   they are enabled to support MLDv1 or MLDv2.  [...]\r\n\r\nIt should say:\r\n                          v\r\n|  The IPv6 WLAN Hosts can join desired multicast groups as long as they\r\n   are enabled to support MLDv1 or MLDv2.  [...]\r\n\r\n(Rationale:\r\n \"also\" lacks similar context in preceding that might be resumed here.)\r\n\r\nThe third paragraph on page 64 says:\r\n                                        vvvvv\r\n|                [...].  The Edge Router has also needs to be enabled\r\n|  for PIM-SSM in order to receive joins from IPv6 WLAN Hosts or WLAN/\r\n   Access Router (if present), and send joins towards the SP core.\r\n\r\nIt should say:\r\n                                        v\r\n|                [...].  The Edge Router also needs to be enabled for\r\n|  PIM-SSM in order to receive joins from IPv6 WLAN Hosts or the WLAN/\r\n   Access Router (if present), and send joins towards the SP core.\r\n\r\nThe sixth paragraph on page 64 says:\r\n                                    vvvvv\r\n|  This problem is inherited by WLAN that can impact both IPv4 and IPv6\r\n   multicast packets; it is not specific to IPv6 multicast.\r\n\r\nIt should say:\r\n                                    vvvvv\r\n|  This problem is inherited by WLANs and can impact both IPv4 and IPv6\r\n   multicast packets; it is not specific to IPv6 multicast.\r\n\r\nFinally, the last paragraph on page 64 says:\r\n                       v\r\n|  While deploying WLAN (IPv4 or IPv6), one should adjust their\r\n   broadcast/multicast settings if they are in danger of dropping\r\n   application dependent frames.  [...]\r\n\r\nIt should say:\r\n                       vv\r\n|  While deploying WLANs (IPv4 or IPv6), one should adjust their\r\n   broadcast/multicast settings if they are in danger of dropping\r\n   application dependent frames.  [...]\r\n\r\n\r\n(22)  Section 8.3 -- improper article\r\n\r\nThe third paragraph of Section 8.3, on mid-page 65 says:\r\n\r\n        [...]  The same IPv4 QoS concepts and methodologies should be\r\n|  applied for the IPv6 as well.\r\n              ^^^^^\r\nIt should say:\r\n\r\n        [...]  The same IPv4 QoS concepts and methodologies should be\r\n|  applied for IPv6 as well.\r\n              ^\r\n\r\n(23)  Section 8.4 -- word twister\r\n\r\nThe first paragraph of Section 8.4, near the bottom of page 65, says:\r\n\r\n                                                  vvvvvvvvvvvvvvvvv\r\n|  There are limited changes that have to be done for WLAN the Host/\r\n   Router in order to enhance security.  [...]\r\n\r\nIt should say:\r\n                                                  vvvvvvvvvvvvvvvvv\r\n|  There are limited changes that have to be done for the WLAN Host/\r\n   Router in order to enhance security.  [...]\r\n\r\n\r\n(24)  Section 10\r\n\r\nThe last sub-item of item (21) above recurs in Section 10.\r\nAt the end of bullet E. , near the bottom of page 72, the RFC says:\r\n\r\n                        vvvvv\r\n                                            [...].  This problem is\r\n|      inherited by WLAN that can impact both IPv4 and IPv6 multicast\r\n       packets; it is not specific to IPv6 multicast.\r\n\r\nIt should say:\r\n                        vvvvv\r\n                                            [...].  This problem is\r\n|      inherited by WLANs and can impact both IPv4 and IPv6 multicast\r\n       packets; it is not specific to IPv6 multicast.\r\n", "correct_text": "[see above]", "notes": "Authors verified changes.  Did not split into multiple items.\r\n\r\nfrom pending.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2212", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.3.", "orig_text": "     - Two-octet field holding the left 16 bits of the signed hash\r\n       value.\r\n   ...\r\n   The left 16 bits of the hash are included in the Signature packet to\r\n   provide a quick test to reject some invalid signatures.", "correct_text": "     - Two-octet field holding the high 16 bits of the signed hash\r\n       value.\r\n   ...\r\n   The high 16 bits (first two octets) of the hash are included in the\r\n   Signature packet to provide a quick test to reject some invalid\r\n   signatures.", "notes": "Use exactly the sentence from 5.2.2.\r\n\r\nleft is misleading. It could be remaining (from leave). And there are\r\ncultures where the last letters of a line are on the left side.\r\nThe convention is high digit before (not left of) low digit (which may\r\nbe odd for Arabs).\n --VERIFIER NOTES-- \nLike errata 2210, but here Constantin corrects to \u201chigh\u201d rather than \u201cfirst.\u201d I don\u2019t believe either is so misleading as to warrant a change.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "952", "doc-id": "RFC4851", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "Section 3.2.1 -- terminological mismatch\r\n\r\nOnly in this section, the RFC uses the spelling \"SessionID\" (4 x);\r\nthroughout the remainder of the text, \"Session ID\" is used.\r\n\r\n\r\nSection 3.2.3 -- typo\r\n\r\nIn the 3rd text line of Section 3.2.3, on page 12,\r\nthe RFC test:\r\n\r\n             ... contains a empty Session ID\r\nshould say:\r\n             ... contains an empty Session ID\r\n                            ^\r\n\r\nSection 3.3.1 -- typo\r\n\r\nIn the second line of the last paragraph of Section 3.3.1,\r\non page 13, the RFC text:\r\n\r\n             ... If either indicates failure. then the method is\r\nshould say:\r\n             ... If either indicates failure, then the method is\r\n                                            ^\r\n\r\nSection 3.7 -- typo\r\n\r\nIn the first line of the second paragraph of Section 3.7,\r\nthe RFC text:\r\n\r\n   Since EAP is an lock-step protocol, [...]\r\n                 ^\r\nshould say:\r\n\r\n   Since EAP is a lock-step protocol, [...]\r\n\r\n\r\nSection 5.5 -- typo\r\n\r\nIn the third line of Section 5.5 (on page 35), as in many other\r\nplaces in the RFC, the initial\r\n\r\n   Where\r\n\r\nshould be\r\n\r\n   where\r\n\r\n\r\nSection 6 -- inconsistent use of established terms\r\n\r\nThe RFC 2434 requirements terms are spelled inconsistently.\r\nFor uniformity, at the bottom of page 36,\r\n\r\n           ... based on specifications required ...\r\n                        ^            ^ ^\r\nshould be:\r\n           ... based on Specification Required ...\r\n\r\nand in the fourth line on page 37,\r\n\r\n           ... on a specification required basis ...\r\n                    ^             ^\r\nshould be:\r\n           ... on a Specification Required basis ...\r\n\r\n\r\nSection 7.4.1 -- typos\r\n\r\nthere are two typos in the last part of the first paragraph\r\nof Section 7.4.1; the lines on top of page 40,\r\n                      vvv\r\n|  is unauthenticated an may not have any relevance to the authenticated\r\n   identity.  EAP-FAST implementations should not attempt to compare any\r\n   identity disclosed in the initial cleartext EAP Identity response\r\n|  packet with those Identities authenticated in Phase 2\r\n                                                        ^\r\nshould say:\r\n                        v\r\n|  is unauthenticated and may not have any relevance to the authenticated\r\n   identity.  EAP-FAST implementations should not attempt to compare any\r\n   identity disclosed in the initial cleartext EAP Identity response\r\n|  packet with those Identities authenticated in Phase 2.", "correct_text": "[see above]", "notes": "editorial nits.\r\n\r\nfrom pending.", "submit_date": "2007-05-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "953", "doc-id": "RFC4851", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.9", "orig_text": "      Action\r\n\r\n         The Action field is two octets.  Values include:\r\n\r\n            Process-TLV\r\n\r\n            Negotiate-EAP", "correct_text": "      Action\r\n\r\n         The Action field is two octets.  Values include:\r\n\r\n         1  Process-TLV\r\n\r\n         2  Negotiate-EAP", "notes": "The 'Action' code points to be dropped from the final text.\r\n\r\nfrom pending", "submit_date": "2007-05-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "954", "doc-id": "RFC4746", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "(1)  [typo]\r\n\r\nOn page 6 of RFC 4746, the 1st paragraph of Section 2.1 says:\r\n\r\n   PAX_STD is a simple nonce-based authentication using the strong\r\n   long-term key.  [...]\r\n\r\nIt should say:\r\n\r\n|  PAX_STD is a simple nonce-based authentication using a strong\r\n   long-term key.  [...]\r\n\r\n\r\n(2)  [missing article]\r\n\r\nWithin Section 2.2, near the bottom of page 8, RFC 4746 says:\r\n\r\n   When using EAP-PAX with Wireless LAN, clients SHOULD validate that\r\n   the certificate's wlanSSID extension matches the SSID of the network\r\n   to which it is currently authenticating.\r\n\r\nIt should say:\r\n\r\n|  When using EAP-PAX with a Wireless LAN, clients SHOULD validate that\r\n   the certificate's wlanSSID extension matches the SSID of the network\r\n   to which it is currently authenticating.\r\n\r\n\r\n(3)  [missing article]\r\n\r\nOn page 9, the 1st paragraph of Section 2.3 says:\r\n\r\n   Messages PAX_STD-2, PAX_STD-3, PAX_SEC-4, PAX_SEC-5, and PAX_ACK\r\n   contain optional component ADE.  [...]\r\n\r\nIt should say:\r\n\r\n   Messages PAX_STD-2, PAX_STD-3, PAX_SEC-4, PAX_SEC-5, and PAX_ACK\r\n|  contain an optional component ADE.  [...]\r\n\r\n\r\n(4)  [extraneous word]\r\n\r\nThe 2nd paragraph of Section 4, at the bottom of page 19, says:\r\n\r\n                                          [...].  Also note that the\r\n   security of PAX can be proved using under the Random Oracle model.\r\n\r\nIt should say:\r\n                                          [...].  Also note that the\r\n|  security of PAX can be proved under the Random Oracle model.\r\n", "correct_text": "", "notes": "Corrects minor editorial errors.", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2074", "doc-id": "RFC5681", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   A detailed rationale and discussion of the IW setting is provided in\r\n   [RFC3390].", "correct_text": "   A detailed rationale and discussion of the IW setting is provided in\r\n   [RFC3390].  The IW value for the case when (SMSS > 1095 bytes) and (SMSS <= \r\n   2190 bytes) is changed from RFC3390.  The new definition will keep early \r\n   values of cwnd at a multiple of SMSS and avoid transmitting partial segments.", "notes": "Hopefully, I surmised the reason for the change correctly.", "submit_date": "2010-03-15", "submitter_name": "Herbie Robinson", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "955", "doc-id": "RFC4823", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(A)\r\n\r\nFirst of all, it is annoying to find this RFC notoriously neglecting\r\ncontemporary standard IETF terminology, using the sluggish and\r\nconfusing \"header\" where in fact \"header field\" should be used.\r\n\r\nPlease refer to RFC 2822, RFC 3864, RFC 4021, and RFC 4249\r\nfor the proper definitions of the established IETF terminology.\r\n\r\nTo quote from page 3 of RFC 4249:\r\n\r\n3.1.1.  Standard Terminology\r\n\r\n   Terms related to the Internet Message Format are defined in\r\n   [N2.RFC2822].  Authors specifying extension header fields should use\r\n   the same terms in the same manner in order to provide clarity and\r\n   avoid confusion.  For example, a \"header\" [I1.FYI18], [N2.RFC2822] is\r\n   comprised of \"header fields\", each of which has a \"field name\" and\r\n   usually has a \"field body\".  Each message may have multiple\r\n   \"headers\", viz. a message header and MIME-part [N4.RFC2046] headers.\r\n\r\n   A message header has a Date header field (i.e., a field with field\r\n   name \"Date\").  However, there is no \"Date header\"; use of such non-\r\n   standard terms is likely to lead to confusion, possibly resulting in\r\n   interoperability failures of implementations.\r\n\r\nThere's only a single place in the RFC where the correct term,\r\n\"header field\" is used!\r\n\r\nThere are much too many instances of this primary issue to mention\r\nin detail -- there are roughly 60 instances of this flaw, starting\r\nwith the title of Section 5, in the ToC, \"AS3-Specific Headers\".\r\n\r\n\r\n(B)\r\n\r\nFurther textual flaws are presented in RFC textual order.\r\nI use change bars ('|' in column 1) and occasionally\r\nup/down pointing marker lines ('^^^'/'vvv') to emphasize\r\nthe location of textual issues and/or proposed corrections.\r\nModified text has been re-adjusted to match RFC formatting\r\nrules, where appropriate.\r\n\r\n\r\n(1)  Section 2.3.1  -- indentation\r\n\r\nIn Section 2.3.1, the second-to-last list item on page 5 says:\r\n\r\n                      vv\r\n|  Non-repudiation of NRR is a \"legal event\" that occurs when the\r\n   receipt (NRR)        original sender of an EDI/EC interchange has\r\n                        verified the signed receipt coming back from the\r\n                        receiver.  NRR IS NOT a functional or a\r\n                        technical message.\r\n\r\nIt should say:\r\n                      vv\r\n|  Non-repudiation of   NRR is a \"legal event\" that occurs when the\r\n   receipt (NRR)        original sender of an EDI/EC interchange has\r\n                        verified the signed receipt coming back from the\r\n                        receiver.  NRR IS NOT a functional or a\r\n                        technical message.\r\n\r\n\r\n(2)  Section 3.7\r\n\r\nThe RFC says:\r\n\r\n   This Internet RFC defines how a Message Disposition Notification\r\n|  (MDN)is requested, as well as the format and syntax of the MDN.  [..]\r\n\r\nIt should say:\r\n\r\n   This Internet RFC defines how a Message Disposition Notification\r\n|  (MDN) is requested, as well as the format and syntax of the MDN.  [..]\r\n        ^\r\n\r\n(3)  Section 6.3.2\r\n\r\nBeyond issue (A), there are multiple other flaws in the text of\r\nSection 6.3.2; the RFC says (on page 16):\r\n\r\n                          [...].  The Content-Transfer-Encoding header\r\n   SHOULD NOT be used; if the header is present, it SHOULD have a value\r\n   of binary or 8-bit.  The absence of this header or the use of\r\n   alternate values such as \"base64\" or \"quoted-printable\" MUST NOT\r\n   result in transaction failure.  Content transfer encoding of MIME\r\n   parts within the AS3 message are similarly constrained.\r\n\r\nIt should say:\r\n\r\n                          [...].  The Content-Transfer-Encoding header\r\n|  field SHOULD NOT be used; if this header field is present anyway, it\r\n|  SHOULD have a value of binary or 8-bit.  The absence of this header\r\n|  field or the use of alternate field values such as \"base64\" or\r\n|  \"quoted-printable\" MUST NOT result in transaction failure.  The\r\n|  Content-Transfer-Encoding of MIME bodies within the AS3 message is\r\n|  similarly constrained.\r\n\r\nNote:\r\nUsually, only the *body* of a MIME entity (a RFC 2822 message or a MIME\r\nbody part) is subject to transfer encoding -- cf. RFC 2045, Section 2;\r\nthe MIME header (yes, in this case it's the `header`!) is subject to\r\nencoding according to RFC 2047 and RFC 2231.  Thus, it is essential\r\nhere to distinguish precisely between these terms.\r\n\r\n\r\n(4)  Appendix A.2\r\n\r\nNear the bottom of page 38, there's a typo in the Note #1.\r\nThe RFC says:\r\n                     v\r\n|     1. The lines proceeded with \"&\" are what the signature is\r\n         calculated over.\r\n\r\nIt should say:\r\n                     v\r\n|     1. The lines preceeded with \"&\" are what the signature is\r\n         calculated over.", "correct_text": "[see above]", "notes": "Source: apps", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2285", "doc-id": "RFC4991", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "The XML Schema presented in Section 3 contains, in the lower half\r\nof page 4, the following type declaration:\r\n\r\n   <complexType name=\"octetsType\">\r\n     <choice>\r\n|      <element name=\"exceedsMaximum\">\r\n|        <complexType/>\r\n|      </element>\r\n       <element name=\"octets\" type=\"positiveInteger\" />\r\n     </choice>\r\n   </complexType>\r\n", "correct_text": "   <complexType name=\"octetsType\">\r\n     <choice>\r\n|      <element name=\"exceedsMaximum\" />\r\n       <element name=\"octets\" type=\"positiveInteger\" />\r\n     </choice>\r\n   </complexType>\r\n", "notes": "Source: apps", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2283", "doc-id": "RFC4823", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9", "orig_text": "Quoting S/MIME Version 2 for encryption strength and 40-bit encryption\r\nis ridiculously outdated, IMHO !\r\nUnfortunately, it is still necessary to remind readers that 56-bit\r\nstrength (DES) is much too weak today!\r\n", "correct_text": "", "notes": "Source: apps", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "959", "doc-id": "RFC4187", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  [misleading wording]\r\n\r\nIn Section 3, the RFC text at the bottom of page 13 says:\r\n\r\n            [...].  In certain circumstances, shown in Figure 4, it is\r\n   possible for the sequence numbers to get out of sequence.\r\n\r\nThis sentence is misleading. Figure 4 only shows the *discovery*\r\nof the de-synchronization; it does not show 'certain circumstances'\r\nthat might lead to this problem.\r\n\r\n\r\n(2)  [typo]\r\n\r\nOn page 18, the second paragraph of Section 4.1.1.7 says:\r\n\r\n                                                         [...].  It is\r\n   recommended that the EAP servers implement some centralized mechanism\r\n   to allow all EAP servers of the home operator to map pseudonyms\r\n|  generated by other severs to the permanent identity.  [...]\r\n                      ^^^^^^\r\nIt should say:\r\n                                                         [...].  It is\r\n   recommended that the EAP servers implement some centralized mechanism\r\n   to allow all EAP servers of the home operator to map pseudonyms\r\n|  generated by other servers to the permanent identity.  [...]\r\n                        ^\r\n\r\n(3)  [missing article]\r\n\r\nThe last paragraph of Section 4.1.1.8, on page 20, says:\r\n\r\n   If the peer does not receive a new pseudonym username in the\r\n   EAP-Request/AKA-Challenge message, the peer MAY use an old pseudonym\r\n   username instead of the permanent username on next full\r\n   authentication.  [...]\r\n\r\nIt should say:\r\n\r\n   If the peer does not receive a new pseudonym username in the\r\n   EAP-Request/AKA-Challenge message, the peer MAY use an old pseudonym\r\n|  username instead of the permanent username on the next full\r\n   authentication.  [...]\r\n                                                ^^^^^\r\n\r\n(4)  [grammar / misleading punctuation]\r\n\r\nThe last paragraph of Section 4.1.2.1, on page 22, says:\r\n\r\n   Please note that only the EAP-AKA peer and the EAP-AKA server process\r\n|  the AT_IDENTITY attribute and entities that pass through; EAP packets\r\n   do not process this attribute.  [...]\r\n                            ^                              ^^\r\nIt should say:\r\n\r\n   Please note that only the EAP-AKA peer and the EAP-AKA server process\r\n|  the AT_IDENTITY attribute, and entities that pass through EAP packets\r\n   do not process this attribute.  [...]\r\n                            ^^                              ^\r\n\r\n\r\n(5)  [missing article]\r\n\r\nThe first paragraph of Section 4.1.3, on top of page 23, says:\r\n\r\n|  If EAP-AKA peer is started upon receiving an EAP-Request/Identity\r\n   message, then the peer MAY use an EAP-AKA identity in the EAP-\r\n   Response/Identity packet.  [...]\r\n\r\nIt should say:\r\n\r\n|  If an EAP-AKA peer is started upon receiving an EAP-Request/Identity\r\n   message, then the peer MAY use an EAP-AKA identity in the EAP-\r\n   Response/Identity packet.  [...]\r\n\r\n\r\n(6)  [grammar]\r\n\r\nThe second paragraph of Section 4.1.4, on mid-page 23, says:\r\n\r\n   If the server chooses to not ignore the contents of\r\n|  EAP-Response/Identity, then the server may already receive an EAP-AKA\r\n|  identity in this packet.  However, if the EAP server has not received\r\n   any EAP-AKA peer identity (permanent identity, pseudonym identity, or\r\n   fast re-authentication identity) from the peer when sending the first\r\n   EAP-AKA request, or if the EAP server has received an\r\n   EAP-Response/Identity packet but the contents do not appear to be a\r\n   valid permanent identity, pseudonym identity, or a re-authentication\r\n   identity, then the server MUST request an identity from the peer\r\n   using one of the methods below.\r\n\r\nIt should say:\r\n\r\n   If the server chooses to not ignore the contents of\r\n|  EAP-Response/Identity, then the server may already have received an\r\n   EAP-AKA identity in this packet.  However, if the EAP server has not\r\n   received any EAP-AKA peer identity (permanent identity, pseudonym\r\n   identity, or fast re-authentication identity) from the peer when\r\n   sending the first EAP-AKA request, or if the EAP server has received\r\n   an EAP-Response/Identity packet but the contents do not appear to be\r\n   a valid permanent identity, pseudonym identity, or a\r\n   re-authentication identity, then the server MUST request an identity\r\n   from the peer using one of the methods below.\r\n\r\n\r\n(7)  [misleading wording]\r\n\r\nOn page 25, the first paragraph of Section 4.1.6 says:\r\n\r\n   The section above specifies two possible ways the peer can operate\r\n   upon receipt of AT_PERMANENT_ID_REQ because a received\r\n   AT_PERMANENT_ID_REQ does not necessarily originate from the valid\r\n|  network.  However, an active attacker may transmit an\r\n   EAP-Request/AKA-Identity packet with an AT_PERMANENT_ID_REQ attribute\r\n   to the peer, in an effort to find out the true identity of the user.\r\n   If the peer does not want to reveal its permanent identity, then the\r\n   peer sends the EAP-Response/AKA-Client-Error packet with the error\r\n   code \"unable to process packet\", and the authentication exchange\r\n   terminates.\r\n\r\nIt should say:\r\n\r\n   The section above specifies two possible ways the peer can operate\r\n   upon receipt of AT_PERMANENT_ID_REQ because a received\r\n   AT_PERMANENT_ID_REQ does not necessarily originate from the valid\r\n|  network.  In fact, an active attacker may transmit an\r\n   EAP-Request/AKA-Identity packet with an AT_PERMANENT_ID_REQ attribute\r\n   to the peer, in an effort to find out the true identity of the user.\r\n   If the peer does not want to reveal its permanent identity, then the\r\n   peer sends the EAP-Response/AKA-Client-Error packet with the error\r\n   code \"unable to process packet\", and the authentication exchange\r\n   terminates.\r\n\r\n\r\n(8)  [[posted separately.]]\r\n\r\n(9)  [missing article]\r\n\r\nThe 4th paragraph of Section 5.1, near the bottom of page 32, says:\r\n\r\n                                  [...].  For example, on the second\r\n|  fast re-authentication, counter value is two or greater, etc.  The\r\n   AT_COUNTER attribute is encrypted.\r\n\r\nIt should say:\r\n\r\n                                  [...].  For example, on the second\r\n|  fast re-authentication, the counter value is two or greater, etc.\r\n   The AT_COUNTER attribute is encrypted.\r\n\r\n\r\n(10)  [missing article]\r\n\r\nThe first paragraph of Section 5.3, near the bottom of page 33, says:\r\n\r\n                                                     [...].  If the EAP\r\n   server supports fast re-authentication, it MAY include the skippable\r\n|  AT_NEXT_REAUTH_ID attribute in the encrypted data of EAP- Request/-\r\n   AKA-Challenge message.  This attribute contains a new\r\n   re-authentication identity for the next fast re-authentication.  [..]\r\n\r\nIt should say:\r\n                                                     [...].  If the EAP\r\n   server supports fast re-authentication, it MAY include the skippable\r\n|  AT_NEXT_REAUTH_ID attribute in the encrypted data of the EAP-\r\n   Request/-AKA-Challenge message.  This attribute contains a new\r\n   re-authentication identity for the next fast re-authentication.  [..]\r\n\r\n(The spurious blank after \"EAP-\" disappears due to the new line break.)\r\n\r\n\r\n(11)  IMPORTANT -- [misleading continuation indicator, again]\r\n\r\nRepetition of the issue described in item (8) above:\r\n\r\nIn Section 5.4, in Figure 10 (on page 36), the 6 lines:\r\n\r\n       :                                                       :\r\n       :                                                       :\r\n\r\n\r\n       :                                                       :\r\n       :                                                       :\r\n\r\nshould be deleted, because these might erroneously be misunderstood\r\nas indicating the omission of some protocol steps.\r\n\r\n\r\n(12)  [missing article]\r\n\r\nThe last paragraph of Section 5.5, on page 38, says:\r\n\r\n   It should be noted that in this case, peer identity is only\r\n   transmitted in the AT_IDENTITY attribute at the beginning of the\r\n   whole EAP exchange.  The fast re-authentication identity used in this\r\n   AT_IDENTITY attribute will be used in key derivation (see Section 7).\r\n\r\nIt should say:\r\n\r\n|  It should be noted that in this case, the peer identity is only\r\n   transmitted in the AT_IDENTITY attribute at the beginning of the\r\n   whole EAP exchange.  The fast re-authentication identity used in this\r\n   AT_IDENTITY attribute will be used in key derivation (see Section 7).\r\n\r\n\r\n(13)  [missing article]\r\n\r\nWithin Section 6.1, the 3rd paragraph on page 39 says:\r\n\r\n                                         [...].  A re-authentication\r\n   round is considered successful only if the peer has successfully\r\n   verified AT_MAC and AT_COUNTER attributes, and does not include the\r\n   AT_COUNTER_TOO_SMALL attribute in EAP-Response/AKA-Reauthentication.\r\n\r\nIt should say:\r\n                                         [...].  A re-authentication\r\n   round is considered successful only if the peer has successfully\r\n|  verified the AT_MAC and AT_COUNTER attributes, and does not include\r\n   the AT_COUNTER_TOO_SMALL attribute in EAP-Response/AKA-\r\n   Reauthentication.\r\n\r\n\r\n(14)  [grammar / articles]\r\n\r\nWithin Section 8.1, the text at the bottom page 46,\r\n\r\n   Attributes numbered within the range 0 through 127 are called\r\n   non-skippable attributes.  When an EAP-AKA peer encounters a\r\n   non-skippable attribute type that the peer does not recognize, the\r\n|  peer MUST send the EAP-Response/AKA-Client-Error packet, and the\r\n   authentication exchange terminates.  If an EAP-AKA server encounters\r\n   a non-skippable attribute that the server does not recognize, then\r\n|  the server sends EAP-Request/AKA-Notification packet with an\r\n   [<page break>]\r\n   [...]\r\n\r\nshould say:\r\n\r\n   Attributes numbered within the range 0 through 127 are called\r\n   non-skippable attributes.  When an EAP-AKA peer encounters a\r\n   non-skippable attribute type that the peer does not recognize, the\r\n|  peer MUST send an EAP-Response/AKA-Client-Error packet, and the\r\n   authentication exchange terminates.  If an EAP-AKA server encounters\r\n   a non-skippable attribute that the server does not recognize, then\r\n|  the server sends an EAP-Request/AKA-Notification packet with an\r\n   [<page break>]\r\n   [...]\r\n\r\n(15)  [missing article]\r\n\r\nSection 9, on page 48 says:\r\n\r\n|                           [...].  Message format is specified in\r\n   Section 8.1.\r\n\r\nIt should say:\r\n\r\n|                           [...].  The message format is specified in\r\n   Section 8.1.\r\n\r\n\r\n(16)  IMPORTANT -- misleading specification !\r\n\r\nOn page 63, the 2nd paragraph of Section 10.15 says:\r\n\r\n   The value field of the AT_MAC attribute contains two reserved bytes\r\n   followed by a keyed message authentication code (MAC).  The MAC is\r\n|  calculated over the whole EAP packet and concatenated with optional\r\n   message-specific data, with the exception that the value field of the\r\n   MAC attribute is set to zero when calculating the MAC.  [...]\r\n\r\nIt should say:\r\n\r\n   The value field of the AT_MAC attribute contains two reserved bytes\r\n   followed by a keyed message authentication code (MAC).  The MAC is\r\n|  calculated over the whole EAP packet, concatenated with optional\r\n   message-specific data, with the exception that the value field of the\r\n   MAC attribute is set to zero when calculating the MAC.  [...]\r\n\r\nRationale:\r\n  \"The MAC is calculated ... and concatenated ...\"\r\ncould easily be misunderstood.  From the context it can be\r\nconcluded that the potential ambiguity should be resolved and\r\nclarified by omitting the word 'and', and replacing it by a comma.\r\n\r\n\r\n(17)  [improper, extraneous wording]\r\n\r\nIn Section 10.15, the second-to-last paragraph on page 63 says:\r\n\r\n|  The MAC algorithm is HMAC-SHA1-128 [RFC2104] keyed hash value.  (The\r\n   HMAC-SHA1-128 value is obtained from the 20-byte HMAC-SHA1 value by\r\n   truncating the output to 16 bytes.  Hence, the length of the MAC is\r\n   16 bytes.)  The derivation of the authentication key (K_aut) used in\r\n   the calculation of the MAC is specified in Section 7.\r\n\r\nIt should say:\r\n\r\n|  The MAC algorithm is HMAC-SHA1-128 [RFC2104].  (The HMAC-SHA1-128\r\n   value is obtained from the 20-byte HMAC-SHA1 value by truncating the\r\n   output to 16 bytes.  Hence, the length of the MAC is 16 bytes.)  The\r\n   derivation of the authentication key (K_aut) used in the calculation\r\n   of the MAC is specified in Section 7.\r\n\r\nRationale: Beyond grammar, don't mess up 'algorithm' and 'value' !\r\n\r\n\r\n(17)  [missing article]\r\n\r\nThe second text paragraph of Section 10.18, on page 65, says:\r\n\r\n   The value field of the AT_NONCE_S attribute contains two reserved\r\n   bytes followed by a random number (16 bytes) that is freshly\r\n   generated by the server for this EAP-AKA fast re-authentication.  The\r\n   random number is used as challenge for the peer and also as a seed\r\n   value for the new keying material.  [...]\r\n\r\nIt should say:\r\n\r\n   The value field of the AT_NONCE_S attribute contains two reserved\r\n   bytes followed by a random number (16 bytes) that is freshly\r\n   generated by the server for this EAP-AKA fast re-authentication.  The\r\n|  random number is used as a challenge for the peer and also as a seed\r\n   value for the new keying material.  [...]\r\n\r\n\r\n(18)  [misleading wording]\r\n\r\nWithin Section 11, the second text paragraph on page 67 says:\r\n\r\n                        [...].  The following attribute types are\r\n   specified in this document in [EAP-SIM]:\r\n                             ^\r\nIt should say:\r\n\r\n                        [...].  The following attribute types are\r\n|  specified in this document and in [EAP-SIM]:\r\n                             ^^^^^\r\n\r\n(19) [[posted separately.]]", "correct_text": "", "notes": "Whereas most items just should be noted for consideration when\r\npreparing future derived work, at least items (8), (11), and (16)\r\nseem to deserve an Errata Note.\r\n\r\nfrom pending", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Henry Haverinen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "960", "doc-id": "RFC3971", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   Neighbor Discovery Protocol (NDP)\r\n\r\n|     The IPv6 Neighbor Discovery Protocol [7, 8].\r\n\r\n      The Neighbor Discovery Protocol is a part of ICMPv6 [6].", "correct_text": "   Neighbor Discovery Protocol (NDP)\r\n\r\n|     The IPv6 Neighbor Discovery Protocol [4, 5].\r\n\r\n      The Neighbor Discovery Protocol is a part of ICMPv6 [6].\r\n", "notes": "wrong reference tags. See Section 12.1, on page 50; the proper references are RFC 2461 [4] and RFC 2462 [5].", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2245", "doc-id": "RFC5226", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "The IESG can (and should) reject a request if another path for registration is available that is more appropriate and there is no compelling reason to use that path.\r\n\r\n", "correct_text": "The IESG can (and should) reject a request if another path for registration is available that is more appropriate and there is no compelling reason not to use that path.", "notes": "", "submit_date": "2010-05-06", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5161", "doc-id": "RFC5869", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "(where the constant concatenated to the end of each T(n) is a\r\nsingle octet.)\r\n", "correct_text": "(where the constant concatenated to the end of each T(n) is a\r\nsingle octet with value mod(n, 256).)\r\n", "notes": "It's clear what the values of the octets are supposed to be, but the text doesn't actually say what they are.", "submit_date": "2017-10-20", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3536", "doc-id": "RFC3971", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.4.1", "orig_text": "|     ICMP length (derived from the IP length) MUST be 8 or more octets.", "correct_text": "|  The ICMP length (derived from the IP length) MUST be greater than 8\r\n   octets.", "notes": "The last paragraph of Section 6.4.1, at the bottom of page 31, has several issues.\r\n\r\nFirst of all, this sentence apparently does *not* belong to the\r\ndiscussion of `Valid Options` above it; hence, it should be indented\r\none step less.\r\n\r\nNext, I propose to add an initial article, 'The'.\r\n\r\nBut most importantly, I suspect that the ICMP lenght specification,\r\n >= 8 , in fact should be:  > 8 .\r\nUnfortunately I cannot find a precise statement specifying clearly\r\nthat the Trust Anchor option is mandatory in the Certification Path\r\nSolicitation Message, but the explanation 9 lines before the end of\r\nthe section,\r\n\r\n         The first (or only) Trust Anchor option MUST contain a DER\r\n         Encoded X.501 Name; see Section 6.4.3.\r\n\r\nIMHO in fact does imply this.\r\n\r\nIf that is correct, the final line should be updated as above.\r\n\r\nRalph Droms - verifier note:\r\n\r\nAs the current text is not incorrect and there is some question about the issue, I will mark the errata as \"hold for document update\"", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3537", "doc-id": "RFC3971", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4.2", "orig_text": "   The ICMP length (derived from the IP length) MUST be 8 or more\r\n   octets.", "correct_text": "   The ICMP length (derived from the IP length) MUST be greater than 8\r\n   octets.\r\n", "notes": "Similar to the rationale for Errata ID 3536, I suspect that\r\nthe Certification Path Advertisement Message will always include\r\nat least one Option.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3538", "doc-id": "RFC3971", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.3", "orig_text": "   Length\r\n\r\n      The length of the option (including the Type, Length, Name Type,\r\n|     Pad Length, and Name fields), in units of 8 octets.", "correct_text": "   Length\r\n\r\n      The length of the option (including the Type, Length, Name Type,\r\n|     Pad Length, Name, and Padding fields), in units of 8 octets.", "notes": "mis-specification ?\r\nRationale: See the explanation for the 'Padding' field, at the bottom of page 35.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3539", "doc-id": "RFC3971", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.4", "orig_text": "   Length\r\n\r\n      The length of the option (including the Type, Length, Cert Type,\r\n|     Pad Length, and Certificate fields), in units of 8 octets.", "correct_text": "   Length\r\n\r\n      The length of the option (including the Type, Length, Cert Type,\r\n|     Reserved, Certificate, and Padding fields), in units of 8 octets.", "notes": "mis-specification ?\r\n\r\nRationale:\r\n  Apparently, there's no 'Pad Length' field in the Certificate Option;\r\n  the artwork on top of page 36 shows a 'Reserved' field in the same\r\n  octet where the Trust Anchor Option carries a 'Pad Length' field,\r\n  and the text contains a description of that 'Reserved' field.\r\n  According to the explanation for the 'Padding' field at the bottom\r\n  of page 36, the length of the 'Padding' field must be derived\r\n  implicitely from the ASN.1 encoding of the 'Certificate' field,\r\n  and the 'Length' field comprises the length of the 'Padding' field.\r\n\r\nNote:\r\n  Because the extensible format potentially allows for other Cert Type\r\n  values and other Certificate encodings, I am in doubt whether the\r\n  decision to include a Reserved octet in place of a Pad Length octet\r\n  was very wise.\r\n  The current description of the 'Reserved' field will admit a future\r\n  revision of that decision.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3540", "doc-id": "RFC3971", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.5", "orig_text": "                                                  Future, backward-\r\n|  compatible changes to the protocol may specify the contents of the\r\n|  Reserved field or add new options; backward-incompatible changes may\r\n   use different Code values.", "correct_text": "                                                  Future, backward-\r\n|  compatible changes to the protocol MAY specify the contents of the\r\n|  Reserved field or add new options; backward-incompatible changes MUST\r\n   use different Code values.", "notes": "Section 6.4.5 vs. Section 6.4.6 -- contradiction!\r\n\r\nContrary to 6.4.5, the first paragraph of Section 6.4.6 says:\r\n\r\n                                                  Future, backward-\r\ncompatible changes to the protocol MAY specify the contents of the\r\nReserved field or add new options; backward-incompatible changes MUST\r\nuse different Code values.\r\n\r\nI suspect that the first \"may\" above should be a \"MAY\" and the second\r\n\"may\" should have been a \"MUST\" as well.\r\n\r\nIf that's correct, the first paragraph of Section 6.4.5 should be corrected as above.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3541", "doc-id": "RFC3971", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4.6", "orig_text": "   If there are multiple missing certificates, additional CPS\r\n|  messages can be sent after getting a response to first one.  However,\r\n   the complete retrieval process may last at most CPS_RETRY_MAX\r\n   seconds.", "correct_text": "   If there are multiple missing certificates, additional CPS\r\n|  messages can be sent after getting a response to the first one.\r\n   However, the complete retrieval process may last at most\r\n   CPS_RETRY_MAX seconds.\r\n", "notes": "missing article", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2362", "doc-id": "RFC4683", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A", "orig_text": "The change exposed in Errata 2358 has to be applied to the\r\ncollected ASN.1 as well.", "correct_text": "", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3244", "doc-id": "RFC6249", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.1", "orig_text": "Digest: SHA-256=MWVkMWQxYTRiMzk5MDQ0MzI3NGU5NDEyZTk5OWY1ZGFmNzgyZTJlO\r\nDYzYjRjYzFhOTlmNTQwYzI2M2QwM2U2MQ==", "correct_text": "Digest: SHA-256=9HVXcpSXzGTuTNHu/JcJIggAJSzgRWF8GzWGCMe8hgo=", "notes": "This error appears in the following sections:\r\n1.1.  Example Metalink Server Response\r\n6.  Cryptographic Hashes of Whole Documents\r\n7.  Client / Server Multi-Source Download Interaction (2 occurrences in this section)\r\n\r\nOriginally noted in the aria2 forums:\r\nhttp://sourceforge.net/apps/phpbb/aria2/viewtopic.php?f=1&t=133#p649", "submit_date": "2012-06-04", "submitter_name": "Tatsuhiro Tsujikawa", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2400", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "   The reason for masking the most significant bit of P is to avoid\r\n   confusion about signed vs. unsigned modulo computations.  Different\r\n   processors perform these operations differently, and masking out the\r\n|  signed bit removes all ambiguity.\r\n       ^^\r\n   Implementations MUST extract a 6-digit code at a minimum and possibly\r\n   7 and 8-digit code.  Depending on security requirements, Digit = 7 or\r\n   more SHOULD be considered in order to extract a longer HOTP value.", "correct_text": "   The reason for masking the most significant bit of P is to avoid\r\n   confusion about signed vs. unsigned modulo computations.  Different\r\n   processors perform these operations differently, and masking out the\r\n|  sign bit removes all ambiguity.\r\n\r\n   Implementations MUST extract a 6-digit code at a minimum and possibly\r\n|  7 and 8-digit codes.  Depending on security requirements, Digit = 7\r\n   or more SHOULD be considered in order to extract a longer HOTP value.", "notes": "Editorial fixes.\r\n\r\nre: the text of Section 5.3, in the 2nd and 3rd paragraph on page 7.", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3542", "doc-id": "RFC3971", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.4", "orig_text": "   This specification also does not apply to addresses\r\n|  generated by the IPv6 stateless address autoconfiguration from a\r\n   fixed interface identifiers (such as EUI-64).\r\n\r\n...\r\n\r\n|  The Target Address in Neighbor Advertisement is required to be equal\r\n   to the source address of the packet, except in proxy Neighbor\r\n   Discovery, which is not supported by this specification.", "correct_text": "   This specification also does not apply to addresses\r\n|  generated by the IPv6 stateless address autoconfiguration from fixed\r\n   interface identifiers (such as EUI-64).\r\n\r\n...\r\n\r\n|  The Target Address in a Neighbor Advertisement is required to be\r\n   equal to the source address of the packet, except in proxy Neighbor\r\n   Discovery, which is not supported by this specification.", "notes": "a spurious article and 2 missing articles\r\n\r\nVerifier note (Ralph Droms):  The first fix still isn't correct; should be:\r\n\r\n\r\n   This specification also does not apply to addresses\r\n|  generated by IPv6 stateless address autoconfiguration from fixed\r\n   interface identifiers (such as EUI-64).\r\n", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3543", "doc-id": "RFC3971", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "|  There may not be cryptographic binding in SEND between the link layer\r\n   frame address and the IPv6 address.  An unsecured link layer could\r\n   allow nodes to spoof the link layer address of other nodes.", "correct_text": "|  There may not be a cryptographic binding in SEND between the link\r\n   layer frame address and the IPv6 address.  An unsecured link layer\r\n   could allow nodes to spoof the link layer address of other nodes.", "notes": "missing article", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "961", "doc-id": "RFC4875", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  Section 4.5 -- syntax / punctuation issue\r\n\r\nIn the first paragraph of Section 4.5, on page 7, RFC 4875 says:\r\n                                           vv\r\n|           [...].  The < [<EXPLICIT_ROUTE>], <S2L_SUB_LSP> > tuple\r\n   represents the S2L sub-LSP and is referred to as the sub-LSP\r\n   descriptor.  [...]\r\n\r\nObviously, the tagged comma should be *inside* the square brackets:\r\n                                           vv\r\n|           [...].  The < [<EXPLICIT_ROUTE>,] <S2L_SUB_LSP> > tuple\r\n   represents the S2L sub-LSP and is referred to as the sub-LSP\r\n   descriptor.  [...]\r\n\r\nThe same issue recurs in the third paragraph of Section 4.5, on the\r\nsame page.\r\n\r\nAt similar places in the RFC, e.g. in the first paragraph of\r\nSection 5.2.1, the comma is omitted entirely in the tuple notation.\r\nThat is very unusual.\r\n\r\n\r\n(2)  Section 5.2.1 -- typo (text reformatting problem ?)\r\n\r\nIn the 5th line of the last-paragraph of Section 5.2.1,\r\n    \"Sub- Group\"   should be spelled   \"Sub-Group\" .\r\n\r\n\r\n(3)  Section 6.1 -- bad internal reference, and missing article\r\n\r\nWithin Section 6.1, the first text lines on page 17 say:\r\n\r\n|  The S2L sub-LSP flow descriptor has the same format as S2L sub-LSP\r\n|  descriptor in section 4.1 with the difference that a\r\n   P2MP_SECONDARY_RECORD_ROUTE object is used in place of a P2MP\r\n   SECONDARY_EXPLICIT_ROUTE object.  [...]\r\n\r\nThe RFC should say, inserting the missing article and correcting\r\nthe reference to point to Section 5.1 :\r\n\r\n|  The S2L sub-LSP flow descriptor has the same format as the S2L\r\n|  sub-LSP descriptor in section 5.1 with the difference that a\r\n   P2MP_SECONDARY_RECORD_ROUTE object is used in place of a P2MP\r\n   SECONDARY_EXPLICIT_ROUTE object.  [...]\r\n\r\n\r\n(4)  Section 6.2 -- missing article\r\n\r\nThe second paragraph of Section 6.2, on mid-page 17, says:\r\n\r\n                                 [...].  When the integrity bit is set\r\n|  in the LSP_REQUIRED_ATTRIBUTE object, Resv message MUST NOT be sent\r\n   upstream until all Resv messages have been received from the\r\n   downstream neighbors.\r\n\r\nIt should say:\r\n\r\n                                 [...].  When the integrity bit is set\r\n|  in the LSP_REQUIRED_ATTRIBUTE object, a Resv message MUST NOT be sent\r\n   upstream until all Resv messages have been received from the\r\n   downstream neighbors.\r\n\r\n\r\n(5)  Section 8.2 -- text duplication and inconsistency\r\n\r\nThe second paragraph of Section 8.2 (on page 23),\r\n\r\n   A transit LSR sets the Sub-Group Originator ID in the FILTER_SPEC\r\n   object(s) of a Resv message to the value that was received in the\r\n   corresponding Path message.  If any of the incoming Resv messages\r\n   corresponding to a single Path message carry a RESV_CONFIRM object,\r\n   then the LSR MUST include a RESV_CONFIRM object in the corresponding\r\n   Resv message that it sends upstream.  If the Sub-Group Originator ID\r\n   is its own address, then it MUST set the receiver address in the\r\n   RESV_CONFIRM object to this address, else it MUST propagate the\r\n   object unchanged.\r\n\r\nshould be deleted entirely !\r\n\r\nRationale:\r\n  The first two sentences in this paragraph are repeated almost\r\n  literally in the subsequent (third) paragraph of the section.\r\n  The third (last) sentence above essentially is superseeded, in\r\n  a more precise manner, by the second and the third bullet at the\r\n  bottom of page 23.\r\n  But, perhaps most importantly, the first bullet there handles a\r\n  subcase not covered by, and hence mis-specified, by that sentence!\r\n\r\n  Apparently, the lower half of page 23 is a revised revision of\r\n  the quoted second paragraph, which should have been deleted.\r\n\r\n\r\n(6)  Section 10.2 -- clarification including mismatched angle\r\n                     brackets, word omissions, and punctuation\r\n\r\nWithin Section 10.2, the third paragraph on page 26 says:\r\n\r\n   [...]\r\n|  A newly received Path message that matches SESSION object and Sender\r\n   Tunnel Address, LSP ID, Sub-Group Originator ID> with existing Path\r\n|  state carrying the same or different Sub-Group_ID, referred to Sub-\r\n|  Group_ID(n) is processed as follows:\r\n\r\nIt should say:\r\n\r\n   [...]\r\n|  A newly received Path message that matches in SESSION object and\r\n|  <Sender Tunnel Address, LSP ID, Sub-Group Originator ID> with\r\n|  existing Path state carrying the same or a different Sub-Group_ID,\r\n|  referred to as Sub-Group_ID(n), is processed as follows:\r\n\r\nOr even better, a bit reworded for enhanced readability:\r\n\r\n   [...]\r\n|  A newly received Path message with SESSION object and <Sender Tunnel\r\n|  Address, LSP ID, Sub-Group Originator ID> tuple matching existing\r\n|  Path state carrying the same or a different Sub-Group_ID, referred to\r\n|  as Sub-Group_ID(n), is processed as follows:\r\n\r\n\r\n(7)  Section 11.3\r\n\r\nEstablished language in IETF (and other) publications is \"tear down\",\r\nnot simply \"tear\", when it comes to the deletion of connections etc.\r\n\r\nTherefore, while not really wrong, I would have appreciated the\r\nfollowing changes:\r\n\r\n- in the 5th line of the 3rd paragraph of Section 11.3 (on page 28):\r\n       \"It does not tear any other branches ...\"\r\n  -->  \"It does not tear down any other branches ...\"\r\n\r\n- in the 5th paragraph of Section 11.3, in the last text line on p.28:\r\n       \"... that are explicitely torn ...\"\r\n  -->  \"... that are explicitely torn down ...\"\r\n\r\n[ I note this minor issue just for consideration in the preparation\r\n  of future / derived work. ]\r\n\r\n\r\n(8)  Section 15.1.2 -- another typo\r\n\r\nOn page 31, in the 6th line of the first paragraph of Section 15.1.2,\r\n\r\n  \"being backed- up\"  should be  \"being backed up\"\r\n\r\n[ The hyphenated form, \"backed-up\" is only appropriate in adverbial\r\n  context, e.g., \"a backed-up LSP\". ]\r\n\r\n\r\n(9)  Section 16 -- typo/grammar\r\n\r\nWithin Section 16, the third paragraph on page 34 says:\r\n\r\n   There maybe overhead for an operator to configure ...\r\n\r\nIt should say:\r\n\r\n   There may be overhead for an operator to configure ...\r\n            ^\r\n\r\nRationale: Otherwise, the sentence lacks of a verb.\r\n\r\n\r\n(10)  Section 17 -- bad internal reference\r\n\r\nWithin Section 17, in the second paragraph on page 35, the reader\r\nis referred to:\r\n                 \"Figure 2 in section 24\"\r\nwhich should be:\r\n                 \"Figure 2 in Appendix A\"\r\n\r\n\r\n(11)  Section 18 -- typo (text reformatting problem ?)\r\n\r\nWithin Section 18, at the bottom of page 35,\r\n    \"re- merge\"  should be  \"re-merge\"\r\n\r\n\r\n(12)  Section 19\r\n\r\n(12a) -- lack of precision / completeness\r\n\r\nThe sub-sections of Section 19 mostly remain a bit unspecific with\r\nrespect to Class *numbers* (only Section 19.3 does supply these),\r\nwhereas C-Type values always are specified fully.\r\n\r\nFor uniformity and completeness, and for the ease of the reader,\r\nthe following changes/amendments (determined after IANA lookup)\r\nshould be applied -- adopting the style of the RFC text from\r\nSection 19.3 --, to the lines immediately above the class data\r\nstructure diagrams (I use abbreviated, diff-like notation):\r\n\r\no  in Section 19.1.1 (on mid-page 39):\r\n\r\n   Class = SESSION, P2MP_LSP_TUNNEL_IPv4 C-Type = 13\r\n--\r\n   SESSION Class = 1, P2MP_LSP_TUNNEL_IPv4 C-Type = 13\r\n\r\no  in Section 19.1.2 (on page 40):\r\n\r\n   Class = SESSION, P2MP_LSP_TUNNEL_IPv6 C-Type = 14\r\n--\r\n   SESSION Class = 1, P2MP_LSP_TUNNEL_IPv6 C-Type = 14\r\n\r\no  in Section 19.2.1 (on top of page 41):\r\n\r\n   Class = SENDER_TEMPLATE, P2MP_LSP_TUNNEL_IPv4 C-Type = 12\r\n--\r\n   SENDER_TEMPLATE Class = 11, P2MP_LSP_TUNNEL_IPv4 C-Type = 12\r\n\r\no  in Section 19.2.2 (on top of page 42):\r\n\r\n   Class = SENDER_TEMPLATE, P2MP_LSP_TUNNEL_IPv6 C-Type = 13\r\n--\r\n   SENDER_TEMPLATE Class = 11, P2MP_LSP_TUNNEL_IPv6 C-Type = 13\r\n\r\no  in Section 19.4.1 (at the bottom of page 43):\r\n\r\n   Class = FILTER_SPEC, P2MP LSP_IPv4 C-Type = 12\r\n--\r\n   FILTER_SPEC Class = 10, P2MP LSP_IPv4 C-Type = 12\r\n\r\no  in Section 19.4.2 (at the top of page 44):\r\n\r\n   Class = FILTER_SPEC, P2MP LSP_IPv6 C-Type = 13\r\n--\r\n   FILTER_SPEC Class = 10, P2MP LSP_IPv6 C-Type = 13\r\n\r\no  in Section 19.5 (on page 44):\r\n\r\n                       The class of the P2MP SERO is the same as the\r\n   SERO defined in [RFC4873].\r\n--\r\n                       The class of the P2MP SERO is 200, as assigned\r\n   for the SERO in [RFC4873].\r\n\r\no  in Section 19.6 (on page 44):\r\n\r\n                The class of the P2MP SRRO is the same as the SRRO\r\n   defined in [RFC4873].\r\n--\r\n                The class of the P2MP SRRO is 201, as assigned for\r\n   the SRRO in [RFC4873].\r\n\r\n\r\n(12b) -- unusual presentation\r\n\r\nIt is unusual to present the explanations of fields in a diagram\r\nin a sequence that does not correspond to the sequence of the\r\nfields therein.\r\n\r\nTherefore, I would have appreciated it to find ...\r\n\r\no  in Section 19.2.1 (on page 41) the explanation for \"LSP ID\"\r\n   not at the bottom of the list, but at the second position,\r\n   below the explanation for \"IPv4 tunnel sender address\";\r\n\r\nand\r\n\r\no  in Section 19.2.2 (on page 42) the explanation for \"LSP ID\"\r\n   not at the bottom of the list, but at the second position,\r\n   below the explanation for \"IPv6 tunnel sender address\";\r\n\r\n\r\n(13)  Section 20.2 -- similar to (12a)\r\n\r\nContrary to Section 20.1, Section 20.2 is silent about the class\r\nnumbers.  As in item (12a) above, for consistency and completeness,\r\nthe following changes should be applied, in accordance with the\r\nstyle of the IANA registry file and Section 20.1 :\r\n\r\n   Class Name = SESSION\r\n--\r\n     1  Class Name = SESSION\r\n\r\n\r\n   Class Name = SENDER_TEMPLATE\r\n--\r\n    11  Class Name = SENDER_TEMPLATE\r\n\r\n\r\n   Class Name = FILTER_SPEC\r\n--\r\n    10  Class Name = FILTER_SPEC\r\n\r\n\r\n   Class Name = SECONDARY_EXPLICIT_ROUTE (Defined in [RFC4873])\r\n--\r\n   200  Class Name = SECONDARY_EXPLICIT_ROUTE\r\n\r\n\r\n   Class Name = SECONDARY_RECORD_ROUTE (Defined in [RFC4873])\r\n--\r\n   201  Class Name = SECONDARY_RECORD_ROUTE\r\n\r\n\r\n[ Note:\r\n  I have deleted the repeated refs to RFC 4873 for uniformity;\r\n  this information is already present in Section 19, it might\r\n  only have been interesting here for the IANA in the I-D phase. ]\r\n", "correct_text": "[see above]", "notes": "I strongly recommend to at least address items (3), (5), (6),\r\nand (10) by an RFC Errata Note; I leave it to your decision which\r\nother items to include additionally; IMHO, items (1), (12a), and\r\n(13) should get high priority among these.\r\n\r\nfrom pending\n --VERIFIER NOTES-- \nMultipart Erratum split into Errata 2481-2494", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "962", "doc-id": "RFC4684", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "and the Next-hop attribute shall be set of the local\r\naddress for that session.", "correct_text": "[see below]", "notes": "Changing 'set of' to 'set to' does not help as it begs the question what\r\nsession?  Route reflectors have BGP sessions with route reflector clients, other\r\nroute reflectors and with other BGP speakers that are not involved with route\r\nreflection.  Looking at the I-D, this is precisely the end of a line and I\r\nwonder if it is a line or two of text that has gone missing.  So change of to to\r\nand I might raise an erratum on the grounds that it does not make sense:-)\r\n\r\nfrom pending", "submit_date": "2006-11-29", "submitter_name": "Tom Petch", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "963", "doc-id": "RFC4684", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "As the origin-as field cannot be interpreted as a prefix.", "correct_text": "[see below]", "notes": "I cannot parse as a sentence (note that, in this memo, 'as' is sometimes the English conjunction, sometimes an abbreviation for Autonomous System)\r\n\r\nfrom pending", "submit_date": "2006-11-29", "submitter_name": "Tom Petch", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "964", "doc-id": "RFC4684", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "withdrawls", "correct_text": "withdrawals", "notes": "from pending", "submit_date": "2006-11-29", "submitter_name": "Tom Petch", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "965", "doc-id": "RFC4836", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 3 -- 'rational' quotation -- [legacy]\r\n\r\nAt the end of the first paragraph of Section 3, on page 4 of RFC 4836,\r\n\r\n|  \"interface MAUs.\"\r\n                  ^^\r\nshould be written as:\r\n\r\n|  \"interface MAUs\".\r\n                  ^^\r\n\r\nRationale: AFAICS, This is the only place left in the RFC violating\r\n  RFC-Ed policy on 'rational' quotation.\r\n\r\n\r\n(2)  Section 3.1 -- typos -- [new]\r\n\r\nThe third paragraph of Section 3.1 says:\r\n\r\n|  In addition, the new definitions are added to the IANA-maintained MIB\r\n|  module, to support Ethernet in the First Mile (EFM) and 10GBASE-CX4\r\n   interfaces, defined in [...]\r\n\r\nIt should say:\r\n\r\n|  In addition, new definitions are added to the IANA-maintained MIB\r\n|  module to support Ethernet in the First Mile (EFM) and 10GBASE-CX4\r\n   interfaces, defined in [...]\r\n\r\nRationale:\r\na) '*the* new definitions' seems to be inappropriate because these\r\n   new definitions have not been introduced so far in the text;\r\nb) the comma separates the subject and the verb in the sentence,\r\n   which better should be avoided.\r\n\r\n\r\n(3)  Section 3.2.1 -- typo / text formatting -- [new]\r\n\r\nIn the second paragraph of Section 3.2.1, in the 5th line from the\r\nbottom of page 5,  \"non- 10GBASE-W type\"  should be spelled\r\n\"non-10GBASE-W type\".\r\n\r\nNote to the RFC-Ed:\r\n  Aparently, this is a recurring text-reformatting problem\r\n  which I have observed multiple times in various recent RFCs.\r\n  According to my experience, matches to the regular expression\r\n    /[a-z0-9]- [a-z0-9]/  (in case-ignoring mode)\r\n  will help find similar problems -- unfortunately, there are\r\n  perfectly feasible matches as well, but finding the candidate\r\n  flaws as always is the first step required.  Maybe, something\r\n  like that search can be added to your nits-checking toolkit.\r\n\r\n(4)  Section 3.4 -- table formatting -- [new]\r\n\r\nIn the tables on pages 7 / 8, the structure of the IEEE Managed\r\nObject names has been hidden even more by the added separator\r\nlines.  E.g., in Table 1, on top of page 7, the table formatting\r\nIMHO hides the fact that  \"oMAU\"  is the prefix to all subsequent\r\n(partial) object names, and neaer the bottom of page 7, the\r\n'group change' to the next prefix \"oAutoNegotiation\" is not\r\nobvious any more.\r\nPerhaps this is an artifact of new tools used.\r\nThe most simple suggestion for improving the visible grouping in\r\nsuch tables that comes to my mind is to use modified separator lines\r\nfor grouping, and omit the column separator in group headlines, e.g.,\r\n\r\n- on top of page 7, modify:\r\n\r\n   +----------------------------------+--------------------------------+\r\n   | IEEE 802.3 Managed Object        | Corresponding SNMP Object      |\r\n   +----------------------------------+--------------------------------+\r\n   | oMAU                             |                                |\r\n   +----------------------------------+--------------------------------+\r\n   | .aMAUID                          | rpMauIndex or ifMauIndex or    |\r\n   |                                  | broadMauIndex                  |\r\n   +----------------------------------+--------------------------------+\r\n   | ....                             | ...                            |\r\n\r\nto:\r\n\r\n   +----------------------------------+--------------------------------+\r\n   | IEEE 802.3 Managed Object        | Corresponding SNMP Object      |\r\n   +==================================+================================+\r\n   | oMAU                                                              |\r\n   +----------------------------------+--------------------------------+\r\n   | .aMAUID                          | rpMauIndex or ifMauIndex or    |\r\n   |                                  | broadMauIndex                  |\r\n   +----------------------------------+--------------------------------+\r\n   | ....                             | ...                            |\r\n\r\n- and near the bottom of page 7, change:\r\n\r\n   | ...                              | ...                            |\r\n   +----------------------------------+--------------------------------+\r\n   | .nJabber                         | rpMauJabberTrap or             |\r\n   |                                  | ifMauJabberTrap                |\r\n   +----------------------------------+--------------------------------+\r\n   | oAutoNegotiation                 |                                |\r\n   +----------------------------------+--------------------------------+\r\n   | .aAutoNegID                      | ifMauIndex                     |\r\n   +----------------------------------+--------------------------------+\r\n   | ...                              | ...                            |\r\n\r\nto:\r\n\r\n   | ...                              | ...                            |\r\n   +----------------------------------+--------------------------------+\r\n   | .nJabber                         | rpMauJabberTrap or             |\r\n   |                                  | ifMauJabberTrap                |\r\n   +==================================+================================+\r\n   | oAutoNegotiation                                                  |\r\n   +----------------------------------+--------------------------------+\r\n   | .aAutoNegID                      | ifMauIndex                     |\r\n   +----------------------------------+--------------------------------+\r\n   | ...                              | ...                            |\r\n\r\n\r\nAn additional artifact has subtly changed the apparent semantics\r\nin table 2, on page 8.  The 'Reason for exclusion' given for\r\noAutoNegotiation.aAutoNegLocalSelectorAbility in fact applies\r\nto all three objetcs in the oAutoNegotiation group.  The published\r\nform of the table does not properly represent this fact.  In HTML,\r\nthe corresponding cell could be given a vertical span of three rows.\r\nIncorporating the modification for better grouping support proposed\r\nabove, the Table 2,\r\n\r\n   +------------------------------------+------------------------------+\r\n   | IEEE 802.3 Managed Object          | Reason for exclusion         |\r\n   +------------------------------------+------------------------------+\r\n   | oMAU                               |                              |\r\n   +------------------------------------+------------------------------+\r\n   | .aIdleErrorCount                   | Only useful for 100BaseT2,   |\r\n   |                                    | which is not widely          |\r\n   |                                    | implemented.                 |\r\n   +------------------------------------+------------------------------+\r\n   | oAutoNegotiation                   |                              |\r\n   +------------------------------------+------------------------------+\r\n   | .aAutoNegLocalSelectorAbility      | Only needed for support of   |\r\n   |                                    | isoethernet (802.9a), which  |\r\n   |                                    | is not supported by MAU-MIB. |\r\n   +------------------------------------+------------------------------+\r\n   | .aAutoNegAdvertisedSelectorAbility |                              |\r\n   +------------------------------------+------------------------------+\r\n   | .aAutoNegReceivedSelectorAbility   |                              |\r\n   +------------------------------------+------------------------------+\r\n\r\nshould perhaps better be presented as:\r\n\r\n   +------------------------------------+------------------------------+\r\n   | IEEE 802.3 Managed Object          | Reason for exclusion         |\r\n   +====================================+==============================+\r\n   | oMAU                                                              |\r\n   +------------------------------------+------------------------------+\r\n   | .aIdleErrorCount                   | Only useful for 100BaseT2,   |\r\n   |                                    | which is not widely          |\r\n   |                                    | implemented.                 |\r\n   +====================================+==============================+\r\n   | oAutoNegotiation                                                  |\r\n   +------------------------------------+------------------------------+\r\n   | .aAutoNegLocalSelectorAbility      | Only needed for support of   |\r\n   +------------------------------------+ isoethernet (802.9a), which  |\r\n   | .aAutoNegAdvertisedSelectorAbility | is not supported by the MAU- |\r\n   +------------------------------------+ MIB.                         |\r\n   | .aAutoNegReceivedSelectorAbility   |                              |\r\n   +------------------------------------+------------------------------+\r\n\r\nNote: I have also added the missing article in front of \"MAU-MIB\".\r\n\r\n\r\n(5)  Section 4 (MAU-MIB Module)\r\n\r\n(5a)  rpMauMediaAvailable -- missing article -- [new]\r\n\r\nThe DESCRIPTION clause in the rpMauMediaAvailable OBJECT-TYPE macro\r\ninvocation, at the bottom of page 16, says:\r\n                                             v\r\n|         DESCRIPTION \"This object identifies Media Available state of\r\n                      the MAU, complementary to the rpMauStatus.  [...]\r\n\r\nIt should say:\r\n                                             vvvvv\r\n|         DESCRIPTION \"This object identifies the Media Available state\r\n                      of the MAU, complementary to the rpMauStatus.\r\n                      [...]\r\n\r\n(5b)  ifMauMediaAvailable -- missing article -- [new]\r\n\r\nSimilarly to the preceding item, the DESCRIPTION clause in the\r\nifMauMediaAvailable OBJECT-TYPE declaration, on top of page 23, says:\r\n                                             v\r\n|         DESCRIPTION \"This object identifies Media Available state of\r\n                      the MAU, complementary to the ifMauStatus.  [...]\r\n\r\nIt should say:\r\n                                             vvvvv\r\n|         DESCRIPTION \"This object identifies the Media Available state\r\n                      of the MAU, complementary to the ifMauStatus.\r\n                      [...]\r\n\r\n(5c)  ifMauTypeListBits              (page 27\r\n(5d)  ifMauAutoNegCapabilityBits     (page 33)\r\n(5e)  ifMauAutoNegCapAdvertisedBits  (page 34)\r\n(5f)  ifMauAutoNegCapReceivedBits    (page 34)\r\n\r\nFor completeness and uniformity, it would be useful to amend the\r\ntextual references to the bOther bit value in the DESCRIPTION clauses\r\nof these OBJECT-TYPE declarations by adding the numerical value in\r\nparentheses, as it has been done in all similar places in the text:\r\n\r\nChange   \"bOther\"   -->   \"bOther(0)\" .\r\n\r\n(5g)  ifMauAutoNegCapability -- tabular formatting -- [legacy]\r\n\r\nThe latest additions to the table in the DESCRIPTION clause of the\r\ndeprecated ifMauAutoNegCapability OBJECT-TYPE declaration have not\r\nbeen aligned properly.\r\nNear the top of page 32, the RFC says:\r\n\r\n                       [...]\r\n                       17       (reserved)\r\n                       18       (reserved)\r\n|                      19      100BASE-T2 half duplex mode\r\n|                      20      100BASE-T2 full duplex mode\r\n                               ^^\r\nIt should say:\r\n\r\n                       [...]\r\n                       17       (reserved)\r\n                       18       (reserved)\r\n|                      19       100BASE-T2 half duplex mode\r\n|                      20       100BASE-T2 full duplex mode\r\n                               ^^\r\n\r\n(5h)  mauIfGrp100Mbs -- spurious blank line -- [legacy/repagination]\r\n\r\nPerhaps as an artifact of the text reformatting (new pagination),\r\nthere now is a spurious blank line in the mauIfGrp100Mbs OBJECT-GROUP\r\nmacro invocation, on top of page 40.\r\nThe RFC says:\r\n\r\n                      }\r\n|\r\n          STATUS      deprecated\r\n\r\nIt should say:\r\n\r\n                      }\r\n          STATUS      deprecated\r\n\r\nNote to the RFC-Ed:\r\n  This is a recurring artifact observed repeatedly in MIB modules,\r\n  but also in other places; where older editions of the text\r\n  (previous RFC or I-D) had a page break and this is removed\r\n  in the RFC, sometimes such spurious blank line(s) remain.\r\n\r\n(5i)  mauModRpCompl2 -- spurious blank line -- [legacy/repagination]\r\n\r\nSimilarly as above, the mauModRpCompl2 MODULE-COMPLIANCE macro\r\ninvocation contains a spurious blank line, after the 8th non-blank\r\ntext line on page 45.\r\nThe RFC says:\r\n\r\n              GROUP       rpMauNotifications\r\n|\r\n              DESCRIPTION \"Implementation of this group is recommended\r\n                          for MAUs attached to repeater ports.\"\r\n\r\nIt should say:\r\n\r\n              GROUP       rpMauNotifications\r\n              DESCRIPTION \"Implementation of this group is recommended\r\n                          for MAUs attached to repeater ports.\"\r\n\r\n(5j)  mauModIfCompl3 -- lost blank line -- [legacy/repagination]\r\n\r\nIn contrast to the two preceding items, in the mauModIfCompl3\r\nMODULE-COMPLIANCE macro invocation, a separating blank line\r\nhas been lost.\r\nAt the top of page 46, the RFC says:\r\n\r\n              GROUP       mauIfGrpAutoNeg2\r\n              DESCRIPTION \"Implementation of this group is mandatory\r\n                          for MAUs that support managed\r\n                          auto-negotiation.\"\r\n              GROUP       mauIfGrpAutoNeg1000Mbps\r\n              DESCRIPTION \"Implementation of this group is mandatory\r\n                          [...]\r\n\r\nIt should say:\r\n\r\n              GROUP       mauIfGrpAutoNeg2\r\n              DESCRIPTION \"Implementation of this group is mandatory\r\n                          for MAUs that support managed\r\n                          auto-negotiation.\"\r\n|\r\n              GROUP       mauIfGrpAutoNeg1000Mbps\r\n              DESCRIPTION \"Implementation of this group is mandatory\r\n                          [...]\r\n\r\n\r\n(6)  Section 5 (IANA-MAU-MIB Module)\r\n\r\n(6a)  IANAifMauTypeListBits TC -- formatting -- [legacy++]\r\n\r\nThe SYNTAX clause of the IANAifMauTypeListBits TEXTUAL-CONVENTION,\r\non page 48 of RFC 4836, contains three blank lines.\r\nI suspect that these initially were intended to visually group\r\nthe lines according to the speed classes; but this was never\r\nhandled correctly; e.g., in :\r\n\r\n       SYNTAX       BITS {\r\n              bOther(0),          -- other or unknown\r\n              bAUI(1),            -- AUI\r\n              b10base5(2),        -- 10BASE-5\r\n              bFoirl(3),          -- FOIRL\r\n|\r\n              b10base2(4),        -- 10BASE-2\r\n\r\na break would perhaps have been appropiate below bOther(0), not\r\nbelow bFoirl(3), thus not disrupting the group of 10 Mbps MAU types,\r\ni.e.:\r\n\r\n       SYNTAX       BITS {\r\n              bOther(0),          -- other or unknown\r\n|\r\n              bAUI(1),            -- AUI\r\n              b10base5(2),        -- 10BASE-5\r\n              bFoirl(3),          -- FOIRL\r\n              b10base2(4),        -- 10BASE-2\r\n\r\nIn RFC 3636, there was a page break between the 10 Mbps MAU types\r\nand the 100 Mbps MAU types; in RFC 4836, there's no separating blank\r\nline there.\r\nThe addition of the new MAU types (on page 49) finally has made\r\nthis grouping scheme impossible/obsolete.\r\n\r\nI therefore recommend to remove these embedded separating blank lines\r\nfrom the IANA-MAU-MIB module at the next update, under the control of\r\nthe designated expert.\r\n\r\n(6b)  IANAifMauMediaAvailable -- typo -- [new]\r\n\r\nWithin the DESCRIPTION clause of the IANAifMauMediaAvailable TC,\r\nin the first line of the last paragraph on page 51, a comma has\r\nbeen dropped.\r\nFor consistency of style and grammar, I recommend to change back\r\nin the IANA-MAU-MIB module (at the next update) the line,\r\n\r\n         For 10 Gb/s the enumerations map to value of the link_fault\r\n\r\nto say:\r\n\r\n         For 10 Gb/s, the enumerations map to value of the link_fault\r\n\r\n(6c)  OBJECT IDENTITIES for MAU types -- visual enhancement\r\n\r\nFor enhanced readability, I also recommend to insert additional blank\r\nlines below the ASN.1 comments, \"-----  new since ...\" in the section\r\nlisting the OBJECT IDENTITIES for MAU types.\r\n\r\nThis could be done at the next regular update of the IANA-MAU-MIB\r\nmodule, at the places corresponding to page 56, 57, 59, and 60 in\r\nRFC 4836, respectively; e.g. (on page 56), change\r\n\r\n     ------ new since RFC 1515:\r\n     dot3MauType10BaseTHD OBJECT-IDENTITY\r\n        STATUS     current\r\n        [...]\r\nto:\r\n\r\n     ------ new since RFC 1515:\r\n|\r\n     dot3MauType10BaseTHD OBJECT-IDENTITY\r\n        STATUS     current\r\n        [...]\r\n\r\n\r\n(7)  Section 7 -- missing article -- [new]\r\n\r\nThe first paragraph of Section 7, on page 63, says:\r\n\r\n                        v\r\n|  This document defines first version of the IANA-maintained IANA-MAU-\r\n   MIB module.  [...]\r\n\r\nIt should say:\r\n                        vvvvv\r\n|  This document defines the first version of the IANA-maintained IANA-\r\n   MAU-MIB module.  [...]", "correct_text": "[see above]", "notes": "After studying the recently published RFC 4836 (revised MAU MIB)\r\nauthored/edited by you, I would like to submit a few comments,\r\npointing out some minor textual flaws I found in the RFC text.\r\n\r\nSome of these are legacy flaws (I had decided not to report\r\npreviously) or instances of recurring editorial issues, but\r\nsome have been newly introduced.\r\n\r\nThe intent of this note is to make you aware of the issues,\r\nand to possibly address these in future related / derived work.\r\nAlthough published policy would perhaps admit the publication\r\nof an RFC Errata Note, IMHO that is not necessary in this case.\r\n\r\nfrom pending", "submit_date": "2007-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2246", "doc-id": "RFC4740", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.12.1", "orig_text": "The SIP-User-Data AVP (AVP Code 390) is of type UTF8String and\r\ncontains a string that identifies the type of user data included in\r\nthe SIP-User-Data AVP (Section 9.12).\r\n\r\n", "correct_text": "The SIP-User-Data-Type AVP (AVP Code 390) is of type UTF8String and\r\n                 ^^^^^\r\ncontains a string that identifies the type of user data included in\r\nthe SIP-User-Data AVP (Section 9.12).\r\n", "notes": "", "submit_date": "2010-05-06", "submitter_name": "Miguel A. Garcia", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "989", "doc-id": "RFC4876", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A says:", "orig_text": "Example 4:\r\n\r\n|  serviceSearchDescriptor: email:ou=\\\\mar\\\\\\\\keting,\\\\\"?base\r\n   attributeMap: email:cn=name\r\n\r\n|  base: ou=\\\\mar\\\\keting,\"\r\n   scope: base\r\n   filter (&(objectclass=inetOrgPerson)(name~=Jane Hernandez))", "correct_text": "    serviceSearchDescriptor: email:ou=\\\\mar\\\\\\\\keting\\\",?base\r\n    attributeMap: email:cn=name\r\n\r\n    base: ou=\\mar\\\\keting\",o=airius.com\r\n    scope: base\r\n    filter (&(objectclass=inetOrgPerson)(name~=Jane Hernandez))\r\n", "notes": "Issues:\r\n\r\n-  unescaping of `\\\\mar` should give `\\mar` , not `\\\\mar`\r\n-  to obtain `ing,\"` , the escaped version should be `ing,\\\"'\r\n(This presentation is biased to attribute one error each to the\r\n two tagged lines - you might have intended another version.)\r\n\r\nDiscussed this with author, corrected version as above, with comment\r\n\"I have moved the quote to before the comma (since that is more of a \r\nconstructive example) and properly escaped it, as well as properly \r\nprocessed the first escaped backslash.\"\r\n\r\n", "submit_date": "2007-05-27", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "990", "doc-id": "RFC4876", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A says:", "orig_text": "Example 6:\r\n\r\n   serviceSearchDescriptor: email:??(&(objectclass=person)\r\n|                                   (ou=Org1 \\\\\\\\(temporary\\\\\\\\)))\r\n\r\n   base: o=airius.com\r\n   scope: sub\r\n|  filter: (&((&(objectclass=person)(ou=Org1 \\\\(Temporary\\\\)))\r\n             (cn~=Jane Henderson)))\r\n", "correct_text": "Example 6:\r\n\r\n   serviceSearchDescriptor: email:??(&(objectclass=person)\r\n|                                   (ou=Org1 \\\\\\\\(temporary\\\\\\\\)))\r\n\r\n   base: o=airius.com\r\n   scope: sub\r\n|  filter: (&((&(objectclass=person)(ou=Org1 \\\\(temporary\\\\)))\r\n             (cn~=Jane Henderson)))\r\n", "notes": "There's a spelling mismatch in capitalization:\r\n   'temporary'   <-->  'Temporary'\r\n\r\nfrom pending", "submit_date": "2007-05-27", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "966", "doc-id": "RFC4187", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12.7", "orig_text": "   As described in Section 8, EAP-AKA allows the protocol to be extended\r\n   by defining new attribute types.  When defining such attributes, it\r\n   should be noted that any extra attributes included in\r\n   EAP-Request/AKA-Identity or EAP-Response/AKA-Identity packets are not\r\n   included in the MACs later on, and thus some other precautions must\r\n   be taken to avoid modifications to them.\r\n", "correct_text": "   As described in Section 8, EAP-AKA allows the protocol to be extended\r\n   by defining new attribute types.  When defining such attributes, it\r\n   should be noted that the AT_CHECKCODE attribute (see Section 10.13)\r\n   can be used to achieve the protection of extra attributes included in\r\n   EAP-Request/AKA-Identity or EAP-Response/AKA-Identity packets.", "notes": "This text is too pessimistic.  The reader's attention should be\r\ndirected to Section 10.13 of the RFC.  The (late) introduction of\r\nthe AT_CHECKCODE concept, as explained there, has taken care of\r\nthis issue; implementations should make use of this attribute.\r\n\r\nfrom pending", "submit_date": "2006-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Henry Haverinen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "967", "doc-id": "RFC3973", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.6.1", "orig_text": "   assert_metric\r\n   my_assert_metric(S,G,I) {\r\n     if (CouldAssert(S,G,I) == TRUE) {\r\n       return spt_assert_metric(S,G,I)\r\n     } else {\r\n       return infinite_assert_metric()\r\n     }\r\n   }", "correct_text": "   assert_metric\r\n   my_assert_metric(S,G,I) {\r\n     if (CouldAssert(S,G,I) == TRUE) {\r\n       return spt_assert_metric(S,I)\r\n     } else {\r\n       return infinite_assert_metric()\r\n     }\r\n   }", "notes": "In Section 4.6.1, spt_assert_metric(S,I) is defined to have two\r\nparameters, not three.\r\n\r\nfrom pending [error in data transfer corrected 2/15/08.]", "submit_date": "2007-05-16", "submitter_name": "Mark Doll", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "968", "doc-id": "RFC3973", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.6.1", "orig_text": "   assert_metric\r\n   spt_assert_metric(S,I) {\r\n     return {0,MRIB.pref(S),MRIB.metric(S),my_addr(I)}\r\n   }", "correct_text": "   assert_metric\r\n   spt_assert_metric(S,I) {\r\n     return {MRIB.pref(S),MRIB.metric(S),my_addr(I)}\r\n   }", "notes": "In Section 4.6.1, assert_metric is defined to be a 3-tuple, not a\r\n4-tuple.", "submit_date": "2007-05-16", "submitter_name": "Mark Doll", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "969", "doc-id": "RFC3973", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.6.1", "orig_text": "   assert_metric\r\n   infinite_assert_metric() {\r\n     return {1,infinity,infinity,0}\r\n   }", "correct_text": "   assert_metric\r\n   infinite_assert_metric() {\r\n     return {infinity,infinity,0}\r\n   }", "notes": "In Section 4.6.1, assert_metric is defined to be a 3-tuple, not a\r\n4-tuple.", "submit_date": "2007-05-16", "submitter_name": "Mark Doll", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "970", "doc-id": "RFC3973", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "Remark: In Section 4.7.10 it says, the 4th value is \"The Rendezvous Point Tree\r\nbit. Set to 0 for PIM-DM. Ignored upon receipt.\"", "correct_text": "[not submitted]", "notes": "from pending\n --VERIFIER NOTES-- \nThis Erratum is complaining that this RFC defines a bit, but then marks it as outside the scope of this document. \r\n\r\nWhile this is bad practice, it does not break any rules and is not grounds for an Erratum. It might be justifiable e use of the bit if anyone is interested.\r\n\r\nFurthermore, the Erratum does not make any specific point or propose and resolution.   ", "submit_date": "2007-05-16", "submitter_name": "Mark Doll", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "971", "doc-id": "RFC4783", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  Section 3.1.1\r\n\r\n(1a) -- enhancement\r\n\r\nIn the past, it has turned out to be a useful practice to\r\npresent constant values in diagrams of message (parts)\r\nwherever appropriate.  That practice is a service to the\r\nreader and it enhances the readability of the document.\r\n\r\nTherefore, I would have appreciated fo find the constant values\r\nlisted in the TLV diagrams in section 3.1.1, on pages 6-8.\r\n\r\nFor instance, in the upper half of page 6, RFC 4783 says:\r\n\r\n   The Reference Count TLV has the following format:\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|     |              Type             |             Length            |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                        Reference Count                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nIt might better have said:\r\n\r\n   The Reference Count TLV has the following format:\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|     |           Type = 512          |           Length = 8          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                        Reference Count                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n(1b) -- typo / grammar / terminology\r\n\r\nNear the end of Section 3.1.1, in the explanation for the Error\r\nString field in the Error String TLV, at the top of page 9,\r\nthe RFC says:\r\n\r\n                                     [...].  The contents of error\r\n         string are implementation dependent.  [...]\r\n\r\nIt should better say either:\r\n\r\n                                     [...].  The contents of error\r\n|        strings are implementation dependent.  [...]\r\n               ^\r\nor, directly quoting the proper name of the field:\r\n                                                             v\r\n|                                    [...].  The contents of Error\r\n|        String are implementation dependent.  [...]\r\n         ^\r\n\r\n\r\n(2)  Section 5 -- typo/grammar + missing article\r\n\r\nOn page 15, the RFC text in Section 5 says:\r\n\r\n   IANA administered assignment of new values for namespaces defined in\r\n   this document and reviewed in this section.\r\n\r\nIt should better say:\r\n\r\n   vvvv\r\n|  The IANA administered assignment of new values for namespaces defined\r\n|  in this document is reviewed in this section.\r\n                    ^^\r\n\r\n(3)  Section 5.2 -- alignment and ref. tagging\r\n\r\nOn page 16, Section 5.2 says:\r\n\r\n   IANA made the following assignments in the \"Interface_ID Types\"\r\n   section of the \"GMPLS Signaling Parameters\" registry located at\r\n   http://www.iana.org/assignments/gmpls-sig-parameters.\r\n\r\n      512 8 REFERENCE_COUNT     RFC 4783\r\n      513 8 SEVERITY            RFC 4783\r\n      514 8 GLOBAL_TIMESTAMP    RFC 4783\r\n      515 8 LOCAL_TIMESTAMP     RFC 4783\r\n      516 variable ERROR_STRING RFC 4783\r\n\r\nThere are multiple problems with that text:\r\n\r\na) Tabular alignment should be maintained for readability.\r\n\r\nb) The IANA file contails full references, and hence the\r\n   reference tags should be written in the usual [RFCxxxx] style.\r\n\r\nc) The referenced \"Interface_ID Types\" section of the IANA file\r\n   contains a third column entitled \"Format\"; yet, the above text\r\n   does not specify the intended content of that column for the\r\n   newly registered values.  Consequently, IANA has entered (by\r\n   copy & paste from previous entries?) the nonsensical value\r\n   \"See below\" into this column, for all 5 new lines ('below'\r\n   in the IANA file, there is only the new section according to\r\n   Section 5.3 of this RFC, and the References section!)\r\n\r\nTo address all these issues, including filling in the missing\r\ncolumn, the RFC should perhaps better say in Section 5.2\r\n(substitute alternate text if you prefer):\r\n\r\n   IANA made the following assignments in the \"Interface_ID Types\"\r\n   section of the \"GMPLS Signaling Parameters\" registry located at\r\n   http://www.iana.org/assignments/gmpls-sig-parameters.\r\n\r\n|  Type   Length  Format        Description                    Reference\r\n|  -----  ------  ------------  -----------------------------  ---------\r\n|    512       8  see RFC 4873  REFERENCE_COUNT                [RFC4783]\r\n|    513       8  see RFC 4873  SEVERITY                       [RFC4783]\r\n|    514       8  see RFC 4873  GLOBAL_TIMESTAMP               [RFC4783]\r\n|    515       8  see RFC 4873  LOCAL_TIMESTAMP                [RFC4783]\r\n|    516  varies  see RFC 4873  ERROR_STRING                   [RFC4783]\r\n\r\nI strongly recommend to address this issue by an RFC Errata Note\r\nand have the IANA update the \"Interface_ID Types\" section\r\naccordingly.\r\n\r\n\r\n(4)  Section 5.3\r\n\r\n(4a) -- ref. tagging\r\n\r\nAs in item (3) b) above, the text in the table in Section 5.3\r\n(on mid-page 16),\r\n                                                v\r\n|  Value       Name                              Reference\r\n   ----------- -------------------------------- -----------------\r\n   0x80000000  Reflect (R)                      [RFC3473/RFC3471]\r\n   0x00000010  Inhibit Alarm Communication (I)  RFC 4783\r\n   0x00000004  Testing (T)                      [RFC3473/RFC3471]\r\n   [...]\r\n\r\nshould better say (also adjusting an alignment flaw):\r\n\r\n|  Value       Name                             Reference\r\n   ----------- -------------------------------- -----------------\r\n   0x80000000  Reflect (R)                      [RFC3473/RFC3471]\r\n|  0x00000010  Inhibit Alarm Communication (I)  [RFC4783]\r\n   0x00000004  Testing (T)                      [RFC3473/RFC3471]\r\n   [...]\r\n\r\n(4b) -- missing IANA policy statement\r\n\r\nAdditionally, the RFC did not specify the assignment policy\r\nfor this new sub-reistry.  Should it be \"Standards Action\" ?\r\n\r\nThis should be formally decided, communicated to the IANA, and\r\ndocumented in an associated note in the registry file.\r\n\r\n\r\n(5)  Section 5.4 -- ref. tagging\r\n\r\nSimilarly as in (4a) above, the new registry line presented\r\nin Section 5.4, near the bottom of page 16 says:\r\n\r\n   31  Alarms                               RFC 4783\r\n\r\nIt should say:\r\n\r\n   31  Alarms                               [RFC4783]", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2007-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "985", "doc-id": "RFC4733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A, Table 8, says:", "orig_text": "   +-------------+---------------------------------------+-------------+\r\n   | Event Codes | RFC 2833 Description                  | Disposition |\r\n   +-------------+---------------------------------------+-------------+\r\n   |        0-15 | DTMF digits                           | RFC 4733    |\r\n   |          16 | Line flash (deprecated)               | Reserved    |\r\n   |       23-31 | Unused                                | [16]        |\r\n   |       32-40 | Data and fax                          | [16]        |\r\n   |       41-48 | Data and fax (V.8bis, deprecated)     | Reserved    |\r\n   |       52-63 | Unused                                | [16]        |\r\n   |       64-89 | E.182 line events (deprecated)        | Reserved    |\r\n   |      96-112 | Country-specific line events          | Reserved    |\r\n   |             | (deprecated)                          |             |\r\n   |     121-127 | Unused                                | [17]        |\r\n   |     128-137 | Trunks: MF 0-9                        | [17]        |\r\n   |     138-143 | Trunks: other MF (deprecated)         | Reserved    |\r\n   |     144-159 | Trunks: ABCD signalling               | [17]        |\r\n   |     160-168 | Trunks: various (deprecated)          | Reserved    |\r\n   |     170-173 | Trunks: various (deprecated)          | Reserved    |\r\n   |     174-205 | Unused                                | [17]        |\r\n   +-------------+---------------------------------------+-------------+\r\n", "correct_text": "   +-------------+---------------------------------------+-------------+\r\n   | Event Codes | RFC 2833 Description                  | Disposition |\r\n   +-------------+---------------------------------------+-------------+\r\n   |        0-15 | DTMF digits                           | RFC 4733    |\r\n   |          16 | Line flash (deprecated)               | Reserved    |\r\n   |       23-31 | Unused                                | [16]        |\r\n   |       32-40 | Data and fax                          | [16]        |\r\n   |       41-48 | Data and fax (V.8bis, deprecated)     | Reserved    |\r\n|  |          49 | Calling Tone                          | [16]        |\r\n   |       52-63 | Unused                                | [16]        |\r\n   |       64-89 | E.182 line events (deprecated)        | Reserved    |\r\n   |      96-112 | Country-specific line events          | Reserved    |\r\n   |             | (deprecated)                          |             |\r\n   |     121-127 | Unused                                | [17]        |\r\n   |     128-137 | Trunks: MF 0-9                        | [17]        |\r\n   |     138-143 | Trunks: other MF (deprecated)         | Reserved    |\r\n   |     144-159 | Trunks: ABCD signalling               | [17]        |\r\n   |     160-168 | Trunks: various (deprecated)          | Reserved    |\r\n   |     170-173 | Trunks: various (deprecated)          | Reserved    |\r\n|  |     174-211 | Unused                                | [17]        |\r\n   +-------------+---------------------------------------+-------------+\r\n", "notes": "Section 7 of RFC 4733, in the lower half of page 39,\r\nspecifies the initial content of the IANA maintained\r\naudio-telephone-event-registry subregistry, as intended\r\nfor after publication of RFC 4733 -- see (1a) below.\r\n\r\nAdditionally, in Appendix A, on page 47, RFC 4733 restates this\r\ninformation and summarizes the disposition of the legacy event\r\ncode assignments from the obsoleted RFC 2833, in particular,\r\nTable 8 represents the current assignments and dispositions,\r\nas per RFC 4733 -- see (1b) below.\r\n\r\nUnfortunately, there are significant inconsistencies between\r\nthese two text blocks.  Looking into Ref. [17] of RFC 4733,\r\nthe ietf-avt-rfc2833biscas draft, it turns out that both\r\ntext blocks are also inconsistent with that future RFC.\r\nConsequently, the current IANA file is also affected.\r\n\r\nfrom pending", "submit_date": "2006-12-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tom Taylor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "986", "doc-id": "RFC4733", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.6.2", "orig_text": "the current duration of tone signal", "correct_text": "the current duration of a tone signal", "notes": "from pending", "submit_date": "2006-12-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "987", "doc-id": "RFC4733", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "Magnus Westerland", "correct_text": "Magnus Westerlund", "notes": "from pending", "submit_date": "2006-12-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "988", "doc-id": "RFC4876", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 3.1 -- word omission in DESC\r\n\r\nOn page 9, the RFC says:\r\n\r\n   ( 1.3.6.1.4.1.11.1.3.1.1.15 NAME 'serviceAuthenticationMethod'\r\n|    DESC 'Specifies types authentication methods either\r\n     used, required, or supported by a particular service'\r\n     EQUALITY caseIgnoreMatch\r\n     SUBSTR caseIgnoreSubstringsMatch\r\n     SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )\r\n\r\nIt should say:\r\n\r\n   ( 1.3.6.1.4.1.11.1.3.1.1.15 NAME 'serviceAuthenticationMethod'\r\n|    DESC 'Specifies types of authentication methods either\r\n     used, required, or supported by a particular service'\r\n     EQUALITY caseIgnoreMatch\r\n     SUBSTR caseIgnoreSubstringsMatch\r\n     SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )\r\n\r\n\r\n(2)  Section 4.6 -- typo/grammar\r\n\r\nOn page 19, just above the headline 'Example:', the RFC says:\r\n\r\n|        The authors' belief that the user community is more familiar\r\n         with the search filter syntax described by RFC 4515 than with\r\n         that described by the enhancedSearchGuide syntax.\r\n\r\nIt should say either:\r\n\r\n|        The authors' belief is that the user community is more familiar\r\n         with the search filter syntax described by RFC 4515 than with\r\n         that described by the enhancedSearchGuide syntax.\r\n\r\nor, even simpler:\r\n\r\n|        The authors believe that the user community is more familiar\r\n         with the search filter syntax described by RFC 4515 than with\r\n         that described by the enhancedSearchGuide syntax.\r\n\r\n\r\n(3)  Section 4.13 -- missing articles\r\n\r\nOn page 26, the RFC says:\r\n\r\n   Example:\r\n\r\n      Suppose a DUA is acting on behalf of an email service.  By default\r\n      the \"email\" service uses the \"mail\", \"cn\", and \"sn\" attributes to\r\n|     discover mail addresses in entries created using inetOrgPerson\r\n      object class [RFC2789].  However, the email service has been\r\n|     deployed in an environment that uses entries created using\r\n      \"employee\" object class.  [...]\r\n\r\nIt should perhaps better say:\r\n\r\n      Suppose a DUA is acting on behalf of an email service.  By default\r\n      the \"email\" service uses the \"mail\", \"cn\", and \"sn\" attributes to\r\n|     discover mail addresses in entries created using the inetOrgPerson\r\n      object class [RFC2789].  However, the email service has been\r\n|     deployed in an environment that uses entries created using the\r\n      \"employee\" object class.  [...]", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2007-05-27", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2369", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "Section B.5.4.1, on page 24, says:\r\n                                           vv       vvv\r\n|  The group defined to work without a rekey protocols supporting it is\r\n   supported by the rekeyMethodType NONE.  [...]", "correct_text": "It should say:\r\n                                            vvvv       vv\r\n|  The group defined to work without a rekeying protocol supporting it\r\n   is supported by the rekeyMethodType NONE.  [...]", "notes": "", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5162", "doc-id": "RFC7232", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A", "orig_text": "   The ETag header field ABNF has been changed to not use quoted-string,\r\n   thus avoiding escaping issues.  (Section 2.3)", "correct_text": "   The ETag header field ABNF has been changed to not use quoted-string,\r\n   thus avoiding escaping issues. Furthermore, it now disallows the\r\n   space character. (Section 2.3)", "notes": "(This entry in the changes section is incomplete)", "submit_date": "2017-10-20", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "972", "doc-id": "RFC4804", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 4.2 -- word omissions\r\n\r\nWithin Section 4.2, the first paragraph on page 11 says:\r\n\r\n                                                        [...].  The\r\n   Router Alert is not set in the E2E Path message.\r\n|              ^\r\nIt should say:\r\n\r\n                                                        [...].  The\r\n   Router Alert bit is not set in the E2E Path message.\r\n|              ^^^^^\r\n\r\nEqually, tha first line of the third paragraph on page 11,\r\n                                                           v\r\n|  Regardless of the encapsulation method, the Router Alert is not set.\r\n\r\nshould say:\r\n                                                           vvvvv\r\n|  Regardless of the encapsulation method, the Router Alert bit is not\r\n   set.\r\n\r\n\r\n(2)  Section 4.4 -- another word omission\r\n\r\nAs above, in the second-to-last paragraph of Section 4.4, on page 12,\r\nthe RFC says:\r\n                                                 [...].  The\r\n|  Deaggregator also sets the Router Alert.\r\n                                          ^\r\nIt should say:\r\n                                                 [...].  The\r\n|  Deaggregator also sets the Router Alert bit.\r\n                                          ^^^^^\r\n\r\n(3)  Section 4.5 -- typo / spurious word\r\n\r\nThe second paragraph of section 4.5, on mid-page 12, says:\r\n\r\n                                                            [...].  This\r\n   includes performing admission control for the segment downstream of\r\n   the Deaggregator and forwarding the E2E Resv message to the PHOP\r\n|  signaled earlier in the E2E Path message and which identifies the\r\n   Aggregator.  [...]\r\n                                           ^^^^^\r\nIt should say:\r\n                                                            [...].  This\r\n   includes performing admission control for the segment downstream of\r\n   the Deaggregator and forwarding the E2E Resv message to the PHOP\r\n|  signaled earlier in the E2E Path message which identifies the\r\n   Aggregator.  [...]\r\n                                           ^\r\n\r\n(4)  Section 4.6 -- yet another word omission\r\n\r\nOn page 14, the last sentence of Section 4.6 says:\r\n\r\n                                           [...].  The Deaggregator also\r\n|  sets the Router Alert.\r\n                        ^\r\nIt should say:\r\n                                           [...].  The Deaggregator also\r\n|  sets the Router Alert bit.\r\n                        ^^^^^\r\n\r\n(5)  Section 4.9 --  missing articles\r\n\r\nWithin Section 4.9, the last footnote on page 15 says:\r\n\r\n     (4)  Aggregator selects final TE tunnel, checks that there is\r\n          sufficient bandwidth on TE tunnel, and forwards E2E Resv to\r\n          PHOP.  If final tunnel is different from tunnel tentatively\r\n          selected, the Aggregator re-sends an E2E Path with an updated\r\n          IF_ID RSVP_HOP and possibly an updated ADSPEC.\r\n\r\nIt should say:\r\n\r\n     (4)  Aggregator selects final TE tunnel, checks that there is\r\n|         sufficient bandwidth on the TE tunnel, and forwards E2E Resv\r\n|         to the PHOP.  If the final tunnel is different from the tunnel\r\n          tentatively selected, the Aggregator re-sends an E2E Path with\r\n          an updated IF_ID RSVP_HOP and possibly an updated ADSPEC.\r\n\r\n\r\n(6)  Section 6 -- word omissions, and punctuation\r\n\r\nThe text in the numbered items in Section 6 consists of full\r\nsentences starting with a capital letter.  Therefore all these\r\nparagraphs should terminate in a full-stop.  Also, the word\r\n'tuple' is missing twice.  Hence:\r\n\r\nThe RFC says (on page 16):\r\n\r\n      (1)  The E2E RSVP reservation is a per-flow reservation where the\r\n|          flow is characterized by the usual 5-tuple\r\n                                                     ^\r\n      (2)  The E2E reservation is an aggregate reservation for multiple\r\n           flows as described in [RSVP-AGG] or [RSVP-GEN-AGG] where the\r\n           set of flows is characterized by the <source address,\r\n|          destination address, DSCP>\r\n                                     ^\r\n      (3)  The E2E reservation is a reservation for an IPsec protected\r\n           flow.  For example, where the flow is characterized by the\r\n|          <source address, destination address, SPI> as described in\r\n           [RSVP-IPSEC].\r\n                                                     ^\r\nIt should say:\r\n\r\n      (1)  The E2E RSVP reservation is a per-flow reservation where the\r\n|          flow is characterized by the usual 5-tuple.\r\n                                                     ^\r\n      (2)  The E2E reservation is an aggregate reservation for multiple\r\n           flows as described in [RSVP-AGG] or [RSVP-GEN-AGG] where the\r\n           set of flows is characterized by the <source address,\r\n|          destination address, DSCP> tuple.\r\n                                     ^^^^^^^\r\n      (3)  The E2E reservation is a reservation for an IPsec protected\r\n           flow.  For example, where the flow is characterized by the\r\n|          <source address, destination address, SPI> tuple as described\r\n           in [RSVP-IPSEC].\r\n                                                     ^^^^^^^\r\n\r\n(7)  Section 8 -- typos\r\n\r\n(7a)\r\n\r\nThe 7th text line of Section 18, on mid-page 18, says:\r\n\r\n|  The mechanisms protect [...]\r\n      ^\r\nIt should say:\r\n\r\n|  These mechanisms protect [...]\r\n      ^^^\r\n\r\n(7b)\r\n\r\nThe 4th paragraph on page 19 says:\r\n\r\n   Section 5 of [RSVP-AGG] also discusses a security issue specific to\r\n   RSVP aggregation related to the necessary modification of the IP\r\n|  Protocol number in RSVP E2E Path messages that traverses the\r\n   aggregation region.  [...]\r\n                                                          ^^\r\nIt should say:\r\n\r\n   Section 5 of [RSVP-AGG] also discusses a security issue specific to\r\n   RSVP aggregation related to the necessary modification of the IP\r\n|  Protocol number in RSVP E2E Path messages that traverse the\r\n   aggregation region.  [...]\r\n                                                          ^", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2007-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "973", "doc-id": "RFC4397", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "   [RFC3473]        Berger, L., Ed., \"Generalized Multi-Protocol Label\r\n                    Switching (GMPLS) Signaling Functional Description\",\r\n                    RFC 3471, January 2003.", "correct_text": "   [RFC3473]        Berger, L., Ed., \"Generalized Multi-Protocol Label\r\n                    Switching (GMPLS) Signaling Resource ReserVation\r\n                    Protocol-Traffic Engineering (RSVP-TE) Extensions\",\r\n                    RFC 3473, January 2003.", "notes": "from pending", "submit_date": "2006-12-16", "submitter_name": "Steve Conner", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "974", "doc-id": "RFC4340", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.6.4", "orig_text": "[text below should be added to the end of the section]", "correct_text": "   FGSR and FGSS values always satisfy FGSR <= GSR and FGSS <= GSS,\r\n   where GSR and GSS are the Greatest Sequence Numbers Received by and\r\n   Sent from this endpoint.  These constraints MUST be enforced even\r\n   when GSR and GSS wrap, as they might in a long connection.\r\n   Implementations SHOULD thus check FGSR and FGSS after every packet\r\n   received or sent, as follows.  (Wmax is the maximum allowed value for\r\n   the Sequence Window feature; see Section 7.5.2.)\r\n\r\n         If FGSR > GSR, then FGSR := GSR - Wmax.\r\n         If FGSS > GSS, then FGSS := GSS - Wmax.\r\n\r\n   Alternate implementations that correctly handle sequence number\r\n   wrapping are also acceptable.", "notes": "One technical omission has been found concerning the FGSR and FGSS\r\nvariables used to detect reordering of feature negotiation options.  We\r\nsuggest adding the above paragraph to the end of Section 6.6.4, on Page\r\n42.\r\n\r\nvia Alfred Hoenes\r\n\r\nfrom pending", "submit_date": "2006-07-11", "submitter_name": "Eddie Kohler", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "975", "doc-id": "RFC4230", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "Section 3.1 says:\r\n\r\n   o  Keyed Message Digest:\r\n\r\n       The Keyed Message Digest is a security mechanism built into RSVP\r\n|      that used to provide integrity protection of a signaling message\r\n       (including its sequence number). \r\n\r\nIt should say:\r\n\r\n   o  Keyed Message Digest:\r\n\r\n       The Keyed Message Digest is a security mechanism built into RSVP\r\n|      that is used to provide integrity protection of a signaling\r\n       message (including its sequence number).\r\n\r\nSection 3.4 -- word omissions\r\n\r\nIn the first paragraph on page 11, Section 3.4 says:\r\n\r\n                                             [...].  If user identity\r\n|        confidentiality is provided, then the policy locator has to be\r\n         encrypted with the public key of the recipient.  How to obtain\r\n         this public key is not described in the document.  This detail\r\n         may be specified in a concrete architecture in which RSVP is\r\n         used.\r\n\r\nIt should say:\r\n                           vvvvvvv\r\n                                             [...].  If user identity\r\n|        confidentiality is to be provided, then the policy locator has\r\n         to be encrypted with the public key of the recipient.  How to\r\n         obtain this public key is not described in the document.  This\r\n         detail may be specified in a concrete architecture in which\r\n         RSVP is used.\r\n\r\nRationale: Better balance the two parts of the tagged sentence!\r\n\r\n\r\nSection 4.3 -- word omission\r\n\r\nWithin Section 4.3, near the bottom of page 27, the first paragraph\r\nunder the headline (6) Performance says:\r\n                                                             v\r\n|                                       [...].  Otherwise, it difficult\r\n       to say which identifier is used to index the security\r\n       association.\r\n\r\nIt should say:\r\n                                                             vvv\r\n|                                       [...].  Otherwise, it is\r\n       difficult to say which identifier is used to index the security\r\n       association.\r\n\r\n\r\nSection 5.4 -- spurious blank line\r\n\r\nOn top of page 36, the text in the last bullet, (3), of Section 5.4\r\ncontains a spurious blank line, perhaps a page reformating artifact.\r\nThe RFC says:\r\n\r\n   (3) It is assumed that SPIs do not change during the lifetime of the\r\n       established QoS reservation.  If a new IPsec SA is created, then\r\n|\r\n       a new SPI is allocated for the security association.  [...]\r\n\r\nIt should say:\r\n\r\n   (3) It is assumed that SPIs do not change during the lifetime of the\r\n       established QoS reservation.  If a new IPsec SA is created, then\r\n       a new SPI is allocated for the security association.  [...]\r\n\r\n\r\nSection 5.6 -- a typo and a word omission\r\n\r\nThe second paragraph on page 37 says:\r\n\r\n                              v\r\n|  If an RSVP message can taket more than one possible path, then the\r\n   IPsec engine will experience difficulties protecting the message.\r\n   Even if the RSVP daemon installs a traffic selector with the\r\n   destination IP address, still, no distinguishing element allows\r\n   selection of the correct security association for one of the possible\r\n|  RSVP nodes along the path.  Even if it possible to apply IPsec\r\n   protection (in tunnel mode) for RSVP signaling messages by\r\n   incorporating some additional information, there is still the\r\n   possibility that the tunneled messages do not recognize a path change\r\n   in a non-RSVP router.  [...]\r\n\r\nIt should say:\r\n\r\n|  If an RSVP message can take more than one possible path, then the\r\n   IPsec engine will experience difficulties protecting the message.\r\n   Even if the RSVP daemon installs a traffic selector with the\r\n   destination IP address, still, no distinguishing element allows\r\n   selection of the correct security association for one of the possible\r\n|  RSVP nodes along the path.  Even if it is possible to apply IPsec\r\n   protection (in tunnel mode) for RSVP signaling messages by\r\n   incorporating some additional information, there is still the\r\n   possibility that the tunneled messages do not recognize a path change\r\n   in a non-RSVP router.  [...]\r\n\r\n\r\nSection 5.7 -- spurious blank line\r\n\r\nSimilar as noted in item (6) above, there is a spurious blank line\r\nin the first paragraph of Section 5.7.\r\nOn top of page 38, the RFC says:\r\n\r\n   mechanism, but authentication might, in many cases, be insufficient\r\n   for authorization.  The communication procedures defined for policy\r\n|\r\n   objects [42] can be improved to support the more efficient per-\r\n   channel financial settlement model by avoiding policy handling\r\n   between inter-domain networks at a signaling message granularity.\r\n   [...]\r\n\r\nIt should say:\r\n\r\n   mechanism, but authentication might, in many cases, be insufficient\r\n   for authorization.  The communication procedures defined for policy\r\n   objects [42] can be improved to support the more efficient per-\r\n   channel financial settlement model by avoiding policy handling\r\n   between inter-domain networks at a signaling message granularity.\r\n   [...]\r\n\r\n\r\nSection 9.2 -- typo/punctuation\r\n\r\nWithin Section 9.2, the first entry on top of page 42 says:\r\n\r\n   [21]  Dobbertin, H., Bosselaers, A., and B. Preneel, \"RIPEMD-160: A\r\n|        strengthened version of RIPEMD in Fast Software Encryption\",\r\n         LNCS vol. 1039, pp. 71-82, 1996.\r\n\r\nIt should say:\r\n\r\n   [21]  Dobbertin, H., Bosselaers, A., and B. Preneel, \"RIPEMD-160: A\r\n|        strengthened version of RIPEMD\", in: Fast Software Encryption,\r\n         LNCS vol. 1039, pp. 71-82, 1996.\r\n", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2007-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "976", "doc-id": "RFC4230", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   The sending system needs to maintain the following attributes in such\r\n   a security association [1]:\r\n\r\n      [...]\r\n\r\n      o  Latest sequence number (received with this key identifier)", "correct_text": "   The sending system needs to maintain the following attributes in such\r\n   a security association [1]:\r\n\r\n     [...]\r\n\r\n      o  Latest sequence number (sent with this key identifier)", "notes": "received --> sent\r\n\r\nfrom pending", "submit_date": "2007-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "977", "doc-id": "RFC4230", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4", "orig_text": "        [...].  The RSVP INTEGRITY object (outer object) covers the\r\n   entire RSVP message, whereas the POLICY_DATA INTEGRITY object only\r\n   covers objects within the POLICY_DATA element.\r\n", "correct_text": "[not submitted]", "notes": "The subsequent Figure 1 (on top of page 10)\r\ndoes *not* depict this security relevant object at all.\r\n\r\nHas there something been fost from Figure 1 ?\r\n\r\n\r\nfrom pending", "submit_date": "2007-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "980", "doc-id": "RFC4340", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "In Section 6.6.4, Page 41, it says:\r\n\r\n              (Change and/or Confirm).  This value is initialized to\r\n              ISR - 1.\r\n\r\nIt should say:\r\n\r\n              (Change and/or Confirm).  This value is initialized to\r\n              ISR - 1, where ISR is the Initial Sequence Number Received\r\n              from the other endpoint.  (ISR and other sequence number\r\n              variables are defined in Section 7.1.)\r\n\r\nIn Section 6.6.4, Page 41, it says:\r\n\r\n              reordering.  FGSS is initialized to ISS.\r\n\r\nIt should say:\r\n\r\n              reordering.  FGSS is initialized to ISS, the Initial\r\n              Sequence Number Sent by this endpoint.\r\n\r\n\r\nIn Section 7.5.2, Page 49, it says:\r\n\r\n    getting out sync after bursts of loss,\r\n\r\nIt should say:\r\n\r\n    getting out of sync after bursts of loss,\r\n\r\n\r\nIn Section 8.1.2, Page 60, it says:\r\n\r\n            intepreting the four-character result as a 32-bit big-endian\r\n\r\nIt should say:\r\n\r\n            interpreting the four-character result as a 32-bit big-endian\r\n\r\n\r\nIn Appendix A, Page 116, it says:\r\n\r\n    right to left.  The implementation maintains five variables, aside\r\n\r\nIt should say:\r\n\r\n    right to left.  The implementation maintains four variables, aside\r\n\r\nAnd it says:\r\n\r\n       acknowledged in the buffer.  This corresponds to the \"head\"\r\n\r\nIt should say:\r\n\r\n       acknowledged in the buffer.  This corresponds to the \"buf_head\"\r\n\r\nOn Page 117, it says:\r\n\r\n    Ack Vector, it remembers four variables:\r\n\r\nIt should say:\r\n\r\n    Ack Vector, it remembers five variables:\r\n\r\n\r\nIn Section A.3, Page 121, it says:\r\n\r\n    HC-Sender packet 3, so the HC-Sender has now received HC-Receiver's\r\n\r\nIt should say:\r\n\r\n    HC-Sender packet 3, so the HC-Sender has now received the HC-Receiver's\r\n\r\n\r\nIn Section A.4, Page 122, it says:\r\n\r\n    a single acknowledgement number tells HC-Receiver how much ack\r\n\r\nIt should say:\r\n\r\n    a single acknowledgement number tells the HC-Receiver how much ack\r\n", "correct_text": "", "notes": "via Alfred Hoenes\r\n\r\nfrom pending", "submit_date": "2006-07-11", "submitter_name": "Eddie Kohler", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "981", "doc-id": "RFC4842", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(0)  Title of the RFC <--> Scope / applicability (Section 2)\r\n\r\nThe second paragraph of Section 2 says:\r\n\r\n   This document provides encapsulation formats and semantics for\r\n|  emulating SONET/SDH circuits and services over MPLS packet-switched\r\n   networks (PSNs).  [...]\r\n                                                  ^^^^\r\n\r\nUp to now, pseudowire encapsulations (and signaling protocol elements)\r\nhave been defined for MPLS and L2TPv3 in the data plane.\r\n\r\nPrevious PWE3 documents had developed a clear language for their scope,\r\nsaying (omitting the canonical expansion of acronyms),\r\n   \"... over MPLS [Networks]\",\r\n   \"... over L2TPv3\",           or\r\n   \"... over Packet [Networks]\" iff applicable to MPLS *and* L2TPv3.\r\n\r\nConfusingly and unfortunately, the title of RFC 4842 breaks that\r\nclear naming scheme.\r\n\r\n\r\n(1)  Section 4 -- acronym expansion\r\n\r\nOn page 5, Section 4 of RFC 4842 contains the lines:\r\n\r\n                           vvvv\r\n|  STM-n  Synchronous Transport Module-n (SDH)\r\n   STS-n  Synchronous Transport Signal-n (SONET)\r\n\r\nI'm getting confused.\r\n>From most publicly available sources, I've been accustomed to expect:\r\n\r\n                           vvv\r\n|  STM-n  Synchronous Transfer Module-n (SDH)\r\n   STS-n  Synchronous Transport Signal-n (SONET)\r\n\r\nSo, what's true?  Please check.\r\n\r\n\r\n(2)  Section 5.2 -- missing article\r\n\r\nThe first paragraph of Section 5.2, near the bottom of page 7, says:\r\n                                           v\r\n|  The CEP header supports both a basic and extended mode.  The Basic\r\n   CEP header provides the minimum functionality necessary to accurately\r\n   emulate a SONET/SDH circuit over a PSN.  [...]\r\n\r\nIt should say:\r\n                                           vvvv\r\n|  The CEP header supports both a basic and an extended mode.  The Basic\r\n   CEP header provides the minimum functionality necessary to accurately\r\n   emulate a SONET/SDH circuit over a PSN.  [...]\r\n\r\n\r\n(3)  Section 5.3\r\n\r\n(3a)  -- missing article\r\n\r\nIn the lower half of page 10, Section 5.3 contains the explanation:\r\n\r\n   Sequence Number [0:15]:  The packet sequence number MUST continuously\r\n      cycle from 0 to 0xFFFF.  It is generated and processed in\r\n      accordance with the rules established in [RTP].  The CEP receiver\r\n      MUST sequence packets according to the Sequence Number field of\r\n|     the CEP header and MAY verify correct sequencing using RTP\r\n      Sequence Number field.\r\n                                                            ^\r\nIt should say:\r\n\r\n   Sequence Number [0:15]:  The packet sequence number MUST continuously\r\n      cycle from 0 to 0xFFFF.  It is generated and processed in\r\n      accordance with the rules established in [RTP].  The CEP receiver\r\n      MUST sequence packets according to the Sequence Number field of\r\n|     the CEP header and MAY verify correct sequencing using the RTP\r\n      Sequence Number field.\r\n                                                            ^^^^^\r\n\r\n(3b)  -- surprising timestamp clock frequency\r\n\r\nThe next bullet on page 10 says:\r\n\r\n   Timestamp [0:31]:  Timestamp values are used in accordance with the\r\n      rules established in [RTP].  Frequency of the clock used for\r\n|     generating timestamps MUST be 19.44 MHz based on a local\r\n      reference.\r\n                                    ^^^^^^^^^\r\n\r\nThis frequency value is surprising (for me).\r\nI could not derive any immediate relationship to wellknown SONET/SDH\r\nbit or frame rates, etc. -- cf. Tables 4 & 5 in Appendix A of the RFC.\r\nIf the specified value is correct, please give me a hint on its origin;\r\notherwise, please have it corrected in an RFC Errata Note.\r\n\r\n\r\n(4)  Section 10.1 -- missing article\r\n\r\nWithin Section 10.1, in the second paragraph on page 20, the RFC says:\r\n                                  v\r\n|  UAS-CEP SHALL be declared after configurable number of consecutive\r\n   SES-CEP, and cleared after a configurable number of consecutive\r\n   seconds without SES-CEP.  Default value for each is 10 seconds.\r\n\r\nIt should say:\r\n                                  vvv\r\n|  UAS-CEP SHALL be declared after a configurable number of consecutive\r\n   SES-CEP, and cleared after a configurable number of consecutive\r\n   seconds without SES-CEP.  Default value for each is 10 seconds.\r\n\r\n\r\n(5)  Section 11.2.1.1 -- confusing bit field specifications\r\n\r\nIn Section 11.2.1.1, Figure 7 and the long paragraph extending from\r\nthe bottom of page 23 to the top of page 24 say:\r\n\r\n   The STS-1 EBM has the following format:\r\n\r\n       0                   1                   2\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  VTG7 |  VTG6 |  VTG5 |  VTG4 |  VTG3 |  VTG2 |  VTG1 |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n          Figure 7: Equipped Bit Mask (EBM) for Fractional STS-1\r\n\r\n   The 28 bits of the EBM are divided into groups of 4 bits, each\r\n   corresponding to a different VTG within the STS container.  All 4\r\n   bits are used to indicate whether VT1.5 (T1) tributaries are carried\r\n|  within a VTG.  The first 3 bits read from right to left are used to\r\n   indicate whether VT2 (E1) tributaries are carried within a VTG.  The\r\n|  first 2 bits are used to indicate whether VT3 (DS1C) tributaries are\r\n|  carried within a VTG.  The rightmost bit is used to indicate whether\r\n   a VT6 (DS2) is carried within the VTG.  The VTs within the VTG are\r\n   numbered from right to left, starting from the first VT as the first\r\n   bit on the right.  For example, the EBM of a fully occupied STS-1\r\n<< page break >>>\r\n   with VT1.5 tributaries is all ones, while that of an STS-1 fully\r\n   occupied with VT2 (E1) tributaries has the binary value\r\n|  0111011101110111011101110111.\r\n\r\nOoops!\r\n\r\na)\r\nIf you have a numbered bit field, e.g., the VTG7 field:\r\n\r\n       0 1 2 3 4 5\r\n      +-+-+-+-+-+-+-\r\n      |  VTG7 |  ...\r\n      +-+-+-+-+-+-\r\n\r\nand denote the binary representation of its value accordingly:\r\n         <vtg7> = < b0, b1, b2, b3 >,\r\nthen \"The *first* 3 bits read from right to left\", apparently\r\nspecifies the number with the (bit-reversed) binary representation\r\n                  < b2, b1, b0 > .\r\n\r\nThat does not correspond to the final example given, and it is not\r\nreally compatible with the last sentence before the page break.\r\n\r\nSimilarly, \"the first 2 bits\" used for VT3 / DS1C would be\r\n  < b0, b1 >  -- or should it be (again, bit-revered)  < b1, b0 >  ??\r\n\r\nFinally, \"the rightmost bit\" is used for VT6 / DS2, i.e.  < b3 > .\r\n\r\nThat seems fuzzy, at best.\r\n\r\nAssuming that the example is correct, I strongly suspect that the\r\n'active' bit groups are intended to be right justified in the 4-bit\r\ngroups, in any case, und that thus text above in fact should say:\r\n\r\n   The 28 bits of the EBM are divided into groups of 4 bits, each\r\n   corresponding to a different VTG within the STS container.  All 4\r\n   bits are used to indicate whether VT1.5 (T1) tributaries are carried\r\n|  within a VTG.  The 3 rightmost bits in a bit group are used to\r\n|  indicate whether VT2 (E1) tributaries are carried within a VTG.\r\n|  The 2 rightmost bits in a bit group are used to indicate whether\r\n|  VT3 (DS1C) tributaries are carried within a VTG.  The rightmost bit\r\n   is used to indicate whether a VT6 (DS2) is carried within the VTG.\r\n   The VTs within the VTG are numbered from right to left, starting from\r\n   the first VT as the first bit on the right.  [...]\r\n\r\nb)\r\nFurther confusion arises from the fact that the above specification\r\noverloads the field in a four-fold way but does not give any hint\r\nas to how this overloading is encoded / disambiguated.\r\n\r\nI've scratched my head for quite a time, looking for the appropriate\r\nhooks to properly decode the field.\r\nMuch later in the text, it eventually turns out that this information\r\nmust be signalled out-of-band.\r\n\r\nFor clarity and precision, this fact should have been stated clearly\r\nwithin Section 11.2.1.1.\r\n\r\n\r\n(6)  Section 11.2.1.2\r\n\r\nThere's a mismatch in the notation between the formula given in\r\nSection 11.2.1.2, on mid-page 24, and the subsequent explanations.\r\nThe RFC says:\r\n                                                           vvv\r\n|     B3[i]'(t) = B3[i](t-1) || B3[i]'(t-1) || B3[i](t) || B*3[i](t-1)\r\n\r\n|     Where:\r\n\r\n         B3[i]   = the existing B3[i] value in the incoming signal\r\n         B3[i]'  = the new (compensated) B3[i] value\r\n|        B3*[i]  = the B3[i] value of the unequipped VTs in the\r\n                   incoming signal\r\n         ||  =  exclusive OR operator\r\n         t   =  the time of the current frame\r\n         t-1 =  the time of the previous frame\r\n\r\nIMHO, the notation 'B3*[i]' , as explained is the proper notation,\r\nand the  'B*3'  in the formula should be changed accordingly.\r\nFurthermore, the second line should be 'editorially reworked' for\r\nproper indentation (as the text above and below) and capitalization.\r\n\r\nHence, the RFC should say:\r\n                                                           vvv\r\n|     B3[i]'(t) = B3[i](t-1) || B3[i]'(t-1) || B3[i](t) || B3*[i](t-1)\r\n\r\n|   where:\r\n\r\n         B3[i]   = the existing B3[i] value in the incoming signal\r\n         B3[i]'  = the new (compensated) B3[i] value\r\n         B3*[i]  = the B3[i] value of the unequipped VTs in the\r\n                   incoming signal\r\n         ||  =  exclusive OR operator\r\n         t   =  the time of the current frame\r\n         t-1 =  the time of the previous frame\r\n\r\n\r\n(7)  Section 11.2.2.1 -- missing article\r\n\r\nThe last paragraph of Section 11.2.2.1, at the bottom of page 25,\r\nsays:\r\n\r\n   A T3 is encapsulated asynchronously into a VC-3 container as\r\n|  described in Section 10.1.2.1 of [G.707].  VC-3 container has only 85\r\n   data columns, which is identical to the STS-1 container with the two\r\n   fixed stuff columns 30 and 59 removed.  Other than that, the mapping\r\n   is identical.\r\n\r\nIt should say:\r\n                                              vv\r\n   A T3 is encapsulated asynchronously into a VC-3 container as\r\n|  described in Section 10.1.2.1 of [G.707].  A VC-3 container has only\r\n   85 data columns, which is identical to the STS-1 container with the\r\n   two fixed stuff columns 30 and 59 removed.  Other than that, the\r\n   mapping is identical.\r\n\r\n\r\n(8)  Section 11.2.3.1 -- onother missing article\r\n\r\nThe third paragraph of Section 11.2.3.1, near the bottom of page 27,\r\nsays:\r\n                                                               v\r\n|  [...].  This is the equivalent of multiplexing 7 VTGs within STS-1\r\n   container in SONET terminology, except for the location of the fixed\r\n   columns.\r\n\r\nIt should say:\r\n                                                               vvvv\r\n|  [...].  This is the equivalent of multiplexing 7 VTGs within an STS-1\r\n   container in SONET terminology, except for the location of the fixed\r\n   columns.\r\n\r\n\r\n(9)  Section 11.2.3.2\r\n\r\n(9a)  -- bad term / extraneous word\r\n\r\nThe first paragraph of Section 11.2.3.2, on top of page 28, says:\r\n\r\n   The fractional VC-4 CEP header uses the VC-4 CEP header defined in\r\n   this document.  Optionally, an additional 12-byte header extension\r\n|  word is added.\r\n   ^^^^^\r\nIt should say:\r\n\r\n   The fractional VC-4 CEP header uses the VC-4 CEP header defined in\r\n   this document.  Optionally, an additional 12-byte header extension\r\n|  is added.\r\n\r\nRationale:  There are no such \"12-byte words\", AFAICS.\r\n\r\n(9b)  -- confusing bit field specifications, again\r\n\r\nSimilar issues as explained in item (5) above also hold for the (long)\r\nsecond paragraph below Figure 10, on mid-page 29.\r\nAgain, I strongly suspect that the text,\r\n\r\n      [...].  All 4 bits are used to indicate whether VC-11 (T1)\r\n|  tributaries are carried within a TUG-2.  The first 3 bits read right\r\n|  to left are used to indicate whether VC-12 (E1) tributaries are\r\n|  carried within a TUG-2.  The first bit is used to indicate that a\r\n   VC-2 is carried within a TUG-2.  The VCs within the TUG-2 are\r\n   numbered from right to left, starting from the first VC as the first\r\n   bit on the right.  For example, [...]\r\n\r\nin fact should say:\r\n\r\n      [...].  All 4 bits are used to indicate whether VC-11 (T1)\r\n|  tributaries are carried within a TUG-2.  The rightmost 3 bits are\r\n   used to indicate whether VC-12 (E1) tributaries are carried within a\r\n|  TUG-2.  The rightmost bit is used to indicate that a VC-2 is carried\r\n   within a TUG-2.  The VCs within the TUG-2 are numbered from right to\r\n   left, starting from the first VC as the first bit on the right.  For\r\n   example, [...]\r\n\r\n(9c)  -- typo / singular/plural mismatch\r\n\r\nThe last paragraph of Section 11.2.3.2, near the bottom of page 29,\r\nsays:\r\n                                     vv\r\n|           [...].  The A bit indicate the reason for removal of the\r\n   entire TUG-3 columns.  [...]\r\n\r\nIt should say:\r\n                                     vvv\r\n|           [...].  The A bit indicates the reason for removal of the\r\n   entire TUG-3 columns.  [...]\r\n\r\n\r\n(10)  Section 12  -- item (0) and its bad consequences\r\n\r\nIn Section 12, we unfortunately return to the issue explained in\r\nitem (0) above.\r\n\r\nWithin Section 12, the first paragraph on page 31 says:\r\n\r\n   The PW Type field in PWid Forwarding Equivalence Class (FEC) and PW\r\n|  generalized ID FEC elements MUST be set to SONET/SDH Circuit\r\n|  Emulation over Packet (CEP) [PWE3-IANA].\r\n\r\nIn RFC 4446 [PWE3-IANA], on page 3, I find *two* assignments:\r\n\r\n   PW type Description                                      Reference\r\n   ===================================================================\r\n   0x0008  SONET/SDH Circuit Emulation Service Over MPLS    [CEP]\r\n   0x0010  SONET/SDH Circuit Emulation over Packet          [CEP]\r\n\r\nHence, apparently Section 12 refers to PW type 0x0010.\r\n\r\nBecause there is an independent 'PW type' namespace for L2TPv3 and\r\nRFC 4446 was MPLS-specific (although its title didn't say so!),\r\nit could be concluded from the above that PW type 0x0010 was\r\nintended for use over MPLS *and* L2TPv3, with a corresponding\r\nassignment for L2TPv3 to be performed in another document, whereas\r\nPW type 0x0008 apparently was reserved for an MPLS specific CEP\r\nsolution, and both were expected to be specified in the same document.\r\n\r\nSince RFC 4842 is MPLS-only, it could be expected that it would\r\nmake use of that MPLS-specific PW type, 0x0008, not of 0x0010 !\r\nTherefore, the above quoted text in Section 12 comes to great\r\nsurprise!\r\n\r\nThe IANA registry (today) still lists theses two lines as above,\r\nwhere [CEP] is:\r\n\r\n  [CEP]    \"SONET/SDH Circuit Emulation Service Over Packet (CEP)\",\r\n           draft-ietf-pwe3-sonet-11.txt (work in progress)\r\n\r\nTherefore:  What's the matter here ?\r\n\r\nApparently, RFC 4842 *is* the successor ot that I-D.\r\n\r\nHas PW type 0x0008 been abandoned ?\r\nOr is Section 12 wrong, and it should refer to PW type 0x0008 ?\r\n\r\nIn former case, the IANA registry should be updated, deprecating and\r\nperhaps permanently reserving 0x0008, and 0x0010 should be renamed\r\nto reflect its use (and all that should have been noted in Section 15\r\nof RFC 4842!), e.g.:\r\n\r\n   PW type Description                                      Reference\r\n   ===================================================================\r\n   0x0008  - deprecated - / -reserved -                     [IESG]\r\n   0x0010  SONET/SDH Circuit Emulation over MPLS            [RFC4842]\r\n\r\n\r\n(11)  Section 15 -- omissions\r\n\r\nAs explained in the preceding item, IANA has not properly updated\r\nthe pwe3-parameters registry upon publication od RFC 4842.\r\n\r\nThis is certainly due to missing instructions in Section 15,\r\nwhich merely states (on page 35):\r\n\r\n   IANA considerations for pseudowires are covered in [PWE3-IANA].  CEP\r\n   does not introduce additional requirements from IANA.\r\n\r\nThis section should have been instructed to link one of the above\r\nmentioned PW types to RFC 4842, and perform the intended disposition\r\nwith the other one.\r\n\r\nWhatever the plans currently are, the IANA registry should be\r\nupdated accordingly and as soon as possible, to reduce the confusion.\r\n\r\n\r\n(12)  Appendix A -- incomplete information\r\n\r\nOn mid-page 36, just below Table 4, Appendix A says:\r\n\r\n   [...]\r\n   A number of STS-1s may also be linked together to form a super-rate\r\n|  signal with only one SPE.  The optical super-rate signal is denoted\r\n   as OC-Nc, which has a higher payload capacity than OC-N.\r\n\r\nFor completeness and clarity, the super-rate signal mentioned should\r\nbe named.  According to the layman's guess (please correct if I am\r\nwrong!), the RFC should say:\r\n\r\n   [...]\r\n   A number of STS-1s may also be linked together to form a super-rate\r\n|  signal denoted STS-Nc, with only one SPE.  The optical super-rate\r\n   signal is denoted as OC-Nc, which has a higher payload capacity than\r\n   OC-N.", "correct_text": "[see above]", "notes": "Authors sent email about those that should be posted.  They were posted as verified; the others are rejected.\r\n\r\nfrom pending", "submit_date": "2007-05-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Cohen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2391", "doc-id": "RFC4641", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix C", "orig_text": "", "correct_text": "", "notes": "There are some NSEC-related errors in the example zone. The NSEC record is missing from the zone apex (though its RRSIG is present). The TTL on the NSEC and RRSIG NSEC records for a.example.net should be the same as the zone's SOA minimum TTL, i.e. 28800 not 86400.", "submit_date": "2010-07-23", "submitter_name": "Tony Finch", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2838", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "on page 72, description of the Established state:\r\n\r\nIf the HoldTimer_Expires event occurs (Event 10), the local system:\r\n ...[list of actions to take]...", "correct_text": "If the HoldTimer_Expires event occurs (Event 10), the local system:\r\n - deletes all routes associated with this connection\r\n ...[list of actions in original text]...\r\n", "notes": "All other transitions from Established to Idle explicitly state that all routes associated with the connection are deleted.  This transition should as well.", "submit_date": "2011-06-16", "submitter_name": "Jamie Taylor", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3245", "doc-id": "RFC5404", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "7.1.  Media Type Definition\r\n\r\nint-delay:  \r\n         int-delay = \"int-delay:\" source-delay *(\",\" source-delay)\r\n         source-delay = SSRC \":\" delay-value\r\n         SSRC = 1*8HEXDIG ; The 32-bit SSRC encoded in hex format\r\n         delay-value = 1*5DIGIT ; The delay value in milliseconds\r\n \r\n         Example: int-delay=ABCD1234:1000,4321DCB:640\r\n \r\n         NOTE: No white space allowed in the parameter before the end of\r\n         all the value pairs\r\n", "correct_text": "         int-delay = \"int-delay=\" source-delay *(\",\" source-delay)\r\n         source-delay = SSRC \":\" delay-value\r\n         SSRC = 1*8HEXDIG ; The 32-bit SSRC encoded in hex format\r\n         delay-value = 1*5DIGIT ; The delay value in milliseconds\r\n \r\n         Example: int-delay=ABCD1234:1000,4321DCB:640\r\n \r\n         NOTE: No white space allowed in the parameter before the end of\r\n         all the value pairs\r\n", "notes": "int-delay ABNF does not match example mention in RFC.\r\n\r\n\"int-delay:\" need to change to \"int-delay=\" \r\n\r\n7.2.  Mapping to SDP\r\n   o  Any remaining parameters go in the SDP \"a=fmtp\" attribute by\r\n      copying them directly from the media type parameter string as a\r\n      semicolon-separated list of parameter=value pairs.\r\nAs per section 7.2 int-delay parameter should be part of a=fmtp line and it should have parameter as parameter=value pair.\r\n\r\nBut as per ABNF it should be int-delay:<value>\r\n\r\nAlso example mentions that int-delay=<value>", "submit_date": "2012-06-04", "submitter_name": "Ravi Kumar", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "999", "doc-id": "RFC4717", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  incomplete/missing specification of PW types\r\n\r\nRFC 4446 (by means of reference update from drafts to published RFCs)\r\nand the IANA \"pwe3-parameters\" registry refer to this document for\r\nthe allocation and description of a couple of (MPLS) Pseudowire Types.\r\nTherefore, this memo should be explicit, precisely give the proper\r\ninformation, and not leave the reader alone with some apparent\r\nambiguities in the registry.  (Unfortunately, the RFC uses\r\ndescriptive text labels for the PW types that do not match the\r\ntext listed as the 'Descriptions' in the MPLS PW Type registry.)\r\n\r\nExcluding the PW type 0x001E assigned for the MFA, IANA lists seven\r\nATM PW types.  I (hopefully) was able to identify most of these in\r\nRFC 4717, but the role of PW type 0x0003 initially remained unclear;\r\nthis gap in the meantime has been closed by RFC 4816, taking over\r\nthe 'ownership' for that PW type.\r\n\r\nTo fill in the gap, the following clarifications should be posted\r\nin an RFC errata note for RFC 4717 (please correct if I'm wrong);\r\nbecause there also is a L2TPv3 Pseudowire Type (sub-)registry\r\n(in the IANA \"l2tp-parameters\" registry) I also use the precise\r\nterm, \"MPLS PW Type\", in the proposed clarifications.\r\n\r\n(1a)  Section 5.1.1\r\n\r\nThe initial text of Section 5.1.1 (on page 7 of RFC 4717) says:\r\n\r\n   This control word is used in the following encapsulation modes:\r\n\r\n     - ATM One-to-one Cell Mode\r\n     - AAL5 PDU Frame Mode\r\n\r\nIt should say:\r\n\r\n   This control word is used in the following encapsulation modes:\r\n\r\n|    - ATM One-to-one Cell Mode  - MPLS PW types 0x000C and 0x000D\r\n|    - AAL5 PDU Frame Mode       - MPLS PW type 0x000E\r\n\r\n(1b)  Section 5.1.2\r\n\r\nThe initial text of Section 5.1.2 (on page 8 of RFC 4717) says:\r\n\r\n   This control word is used in the following encapsulation modes:\r\n\r\n     - ATM N-to-one Cell Mode\r\n     - AAL5 SDU Frame Mode\r\n\r\nIt should say:\r\n\r\n   This control word is used in the following encapsulation modes:\r\n\r\n|    - ATM N-to-one Cell Mode  - MPLS PW types 0x0009 and 0x000A\r\n|    - AAL5 SDU Frame Mode     - MPLS PW type 0x0002\r\n\r\n(1c)  see item (6a) below!\r\n\r\n(1d)  missing IANA Considerations\r\n\r\nNOTE:\r\n  Would the above clarifications have been included in the RFC,\r\n  it should also have contained an IANA Considerations Section.\r\n  In the meantime, after some complaints and interventions, the\r\n  IANA \"pwe3-parameters\" registry has been updated to contain the\r\n  proper pointers to RFC 4717 for the abovementioned six PW Types.\r\n\r\n\r\n(2)  Section 5.1.2 -- misleading specification due to omission.\r\n\r\nOn top of page 9, Section 5.1.2 says:\r\n\r\n   The next 4 bits provide space for carrying protocol-specific flags.\r\n   These are defined in the protocol-specific details below.\r\n|\r\n|  The next 6 bits provide a length field, which is used as follows:\r\n   [...]\r\n\r\n'The next 6 bits' is misleading; as indicated in the (unnumbered)\r\nfigure at the bottom of page 8, there is a 2-bit 'Res' field between\r\nthe Flags field and the Length field; unfortunately, the text lacks\r\nany description of that field.\r\nTo fill this gap, the above text should be amended to say:\r\n\r\n   The next 4 bits provide space for carrying protocol-specific flags.\r\n   These are defined in the protocol-specific details below.\r\n\r\n|  The subsequent 2-bit Res field is reserved; it SHOULD be set to 0\r\n|  by the sending PE and ignored by the receiving PE.\r\n|\r\n|  The next 6 bits provide a length field, which is used as follows:\r\n   [...]\r\n\r\nNote: 'SHOULD' is appropriate as future (optional) specifications\r\n      might assign semantics to that field.\r\n\r\n\r\n(3)  Section 5.4 -- word omission\r\n\r\nSection 5.4 (on page 10 of RFC 4717) says:\r\n\r\n   The setting of the TTL value in the PW label is application\r\n|  dependent.  In any case, [RFC3032] TTL processing procedure,\r\n   including handling of expired TTLs, MUST be followed.\r\n\r\nIt should say:\r\n\r\n   The setting of the TTL value in the PW label is application\r\n|  dependent.  In any case, the [RFC3032] TTL processing procedure,\r\n   including handling of expired TTLs, MUST be followed.\r\n\r\n\r\n(4)  Section 6.3 -- word omission\r\n\r\nOn page 14, Section 6.3 of RFC 4717 contains the numbered item:\r\n\r\n|      -iv. The Length of AAL5 frame may exceed the MTU of the PSN.\r\n            This requires fragmentation, which may not be available to\r\n            all nodes at the PW endpoint.\r\n\r\nThe RFC should say:\r\n\r\n|      -iv. The Length of an AAL5 frame may exceed the MTU of the PSN.\r\n            This requires fragmentation, which may not be available to\r\n            all nodes at the PW endpoint.\r\n\r\n\r\n(5)  Section 7.4 -- distorting typo\r\n\r\nThe initial text of Section 7.4 (on page 17 of RFC 4717) contains\r\nthe line:\r\n\r\n|    - (b) On the ATM side of the PW\r\n                                  ^^\r\nThis is misleading.  It certainly should say:\r\n\r\n|    - (b) On the ATM side of the PE\r\n                                  ^^\r\n\r\n(6)  Section 8 -- misleading short text / lack of precision\r\n\r\nSection 8 of RFC 4717 (on page 18) says:\r\n\r\n   The N-to-one mode (N >= 1) described in this document allows a\r\n   service provider to offer an ATM PVC- or SVC-based service across a\r\n   network.  The encapsulation allows multiple ATM VCCs or VPCs to be\r\n   carried within a single PSN tunnel.  A service provider may also use\r\n   N-to-one mode to provision either one VCC or one VPC on a tunnel.\r\n   This section defines the VCC and VPC cell relay services over a PSN\r\n   and their applicability.\r\n\r\nFor clarity and added precision, it should say:\r\n\r\n   The N-to-one mode (N >= 1) described in this document allows a\r\n   service provider to offer an ATM PVC- or SVC-based service across a\r\n|  packet switched network.  The encapsulation allows multiple ATM VCCs\r\n   or VPCs to be carried within a single PSN tunnel.  A service provider\r\n   may also use N-to-one mode to provision either one VCC or one VPC on\r\n   a tunnel.  This section defines the VCC and VPC cell relay services\r\n   over a PSN and their applicability.\r\n\r\n\r\n(7)  Section 8.1 -- various clarifications\r\n\r\n(7a)  missing applicability statement for PW Types -- also (1c) above\r\n\r\nThe initial paragraph of Section 8.1 (on page 19 of RFC 4717) says:\r\n\r\n   This section describes the general encapsulation format for ATM over\r\n   PSN pseudowires.\r\n\r\nAccording to the expanations in item (1) above, it should say:\r\n\r\n   This section describes the general encapsulation format for ATM over\r\n|  PSN pseudowires used with the MPLS PW types 0x0009 and 0x000A (for\r\n|  VCC and VPC transport, respectively) described in Section 5.1.2.\r\n\r\nNote: As could be seen later, after the publication of RFC 4816,\r\nthis format is reused there.  Thus, it might be even better to say:\r\n\r\n   This section describes the general encapsulation format for ATM over\r\n|  PSN pseudowires used with the MPLS PW types 0x0009 and 0x000A (for\r\n|  VCC and VPC transport, respectively) described in Section 5.1.2,\r\n|  and PW Type 0x0003 (transparent cell transport [RFC-to-be-4816]).\r\n\r\nAccordingly, an Informative Reference to the work-in-progress\r\npredecessor of RFC 4816 would have to be added to Section 18.\r\n\r\n(7b)  inprecise wording not reflecting requirements language elsewhere\r\n\r\nIn Section 8.1, the 3rd paragraph below Figure 4 (on mid-page 19)\r\nsays:\r\n\r\n|  As shown above, in Figure 4, the ATM Control Word is inserted before\r\n|  the ATM service payload.  It may contain a length field and a\r\n   sequence number field in addition to certain control bits needed to\r\n   carry the service.\r\n\r\nTaken literally, this text is misleading and partially contradicts\r\nthe requirements specified in Section 5.1 (in the second paragraph\r\non page 7).  In particular, the entire ATM control word (the 3rd word\r\nin Figure 4) is optional, and *not* the various bit fields therein.\r\nTo properly reflect these requirements, the RFC should says instead:\r\n\r\n|  As shown above, in Figure 4, the optional ATM Control Word (if\r\n|  present) is inserted before the ATM service payload. It contains a\r\n   length field and a sequence number field in addition to certain\r\n   control bits needed to carry the service.\r\n\r\n(7c)  bad grammar\r\n\r\nWithin Section 8.1, the last paragraph on page 20 says:\r\n\r\n     * When multiple VCCs or VPCs are transported in one pseudowire,\r\n       VPI/VCI values MUST be unique.  When the multiple VCCs or VPCs\r\n|      are from different a physical transmission path, it may be\r\n                         ^^^                          ^\r\n       necessary to assign unique VPI/VCI values to the ATM connections.\r\n       If they are from the same physical transmission path, the VPI/VCI\r\n       values are unique.\r\n\r\nIt should say:\r\n\r\n     * When multiple VCCs or VPCs are transported in one pseudowire,\r\n       VPI/VCI values MUST be unique.  When the multiple VCCs or VPCs\r\n|      are from different physical transmission paths, it may be\r\n                         ^                          ^^\r\n       necessary to assign unique VPI/VCI values to the ATM connections.\r\n       If they are from the same physical transmission path, the VPI/VCI\r\n       values are unique.\r\n\r\n(7d)  Improper use of RFC 2119 keywords\r\n\r\nAccording to RFC 2119, 'MUST' requirements do not admit exceptions.\r\nIf exceptional behavior is to be admitted via 'MAY' clauses, the\r\ngenerally preferred behavior must be specified with 'SHOULD'.\r\n\r\nThus in the light of the explanation at the bottom of page 20\r\n-- quoted and clarified above in (7c) --, the two bullets on top\r\nof page 21,\r\n\r\n     * VPI\r\n\r\n|      The ingress router MUST copy the VPI field from the incoming cell\r\n       into this field.  For particular emulated VCs, the egress router\r\n       MAY generate a new VPI and ignore the VPI contained in this\r\n       field.\r\n\r\n     * VCI\r\n\r\n|      The ingress router MUST copy the VCI field from the incoming ATM\r\n       cell header into this field.  For particular emulated VCs, the\r\n       egress router MAY generate a new VCI.\r\n\r\nshould say:\r\n\r\n     * VPI\r\n\r\n|      The ingress router SHOULD copy the VPI field from the incoming\r\n       cell into this field.  For particular emulated VCs, the egress\r\n       router MAY generate a new VPI and ignore the VPI contained in\r\n       this field.\r\n\r\n     * VCI\r\n\r\n|      The ingress router SHOULD copy the VCI field from the incoming\r\n       ATM cell header into this field.  For particular emulated VCs,\r\n       the egress router MAY generate a new VCI.\r\n\r\n\r\n(8)  Sections 9.3 ff. -- alignment flaws in artwork\r\n\r\n(8a)\r\nWithin Section 9.3, the top part of Figure 8 on page 24 contains\r\na misaligned border;\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               PSN Transport Header (As Required)              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |                      Pseudowire Header                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | [...]\r\n\r\nshould be:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               PSN Transport Header (As Required)              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |                      Pseudowire Header                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | [...]\r\n\r\nThe same flaw recurs ...\r\n\r\n(8b)  within Section 9.4.1, in Figure 9 on page 25;\r\n(8c)  within Section 9.4.1, in Figure 10 on page 26;\r\n(8d)  within Section 11.1, in Figure 12 on page 29;\r\n\r\n\r\n(9)  Section 9.4.1 -- word omission\r\n\r\nOn mid-page 25, the bullet,\r\n\r\n     * VCI Bits\r\n\r\n|      The 16-bit Virtual Circuit Identifier (VCI) incorporates ATM\r\n       Layer VCI value of the cell.\r\n\r\nshould say:\r\n\r\n     * VCI Bits\r\n\r\n|      The 16-bit Virtual Circuit Identifier (VCI) incorporates the ATM\r\n       Layer VCI value of the cell.\r\n\r\n\r\n(10)  Section 10.1 -- multiple mis-specifications\r\n\r\n(10a)\r\nAs will be explained below, the initial part of Section 10.1\r\n(on page 27) comprises several issues.\r\n\r\nThe RFC says:\r\n\r\n|  The AAL5 CPCS-SDU is prepended by the following header:\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |  Res  |T|E|C|U|Res|  Length   |   Sequence Number (Optional)  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              \"                                |\r\n   |                     ATM cell or AAL5 CPCS-SDU                 |\r\n   |                              \"                                |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                  Figure 11: AAL5 CPCS-SDU Encapsulation\r\n\r\nIt should say:\r\n\r\n|  The AAL5 CPCS-SDU or OAM cell is prepended the ATM Control Word:\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |0 0 0 0|T|E|C|U|Res|  Length   |     Sequence Number (or 0)    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n|    Figure 11: Control Word used with AAL5 CPCS-SDU Encapsulation\r\n\r\nRationale:\r\n\r\n(a.1)\r\nThe text is wrong and misleading; the figure does not (merely) show\r\n'the prepended header' (i.e., the \"ATM Control Word\", according to\r\nother parts of this RFC), but the payload as well!\r\nThe top level structure of the encapsulation is specified in Figure 4;\r\nhence, it suffices to specify the details of the Control Word here.\r\nAccordingly, the above replacement omits the payload and presents\r\na modified figure caption.\r\n\r\n(a.2)\r\nThe 4 most significant bits of the ATM Control Word MUST be all zero.\r\nDenoting the field as 'reserved' is misleading; future specifications\r\nMUST NOT change the value.  See Section 5.1.2 of this RFC, RFC 4385,\r\nand the recently published RFC 4928 for additional explanation!\r\n\r\n(a.3)\r\nThe 'Sequence Number' field is *not* optional in the control word,\r\nas erroneously might be deduced from the original version of the\r\nfigure; it MUST always be present; according to Section 5.1.2, only\r\nthe *processing* of this field is optional, and the reserved value 0\r\nis *not* a valid sequence number; it indicates non-use of sequence\r\nnumber processing.  Hence, the lower half of the ATM Control Word\r\neither contains a sequence number or 0.\r\n\r\n(10b)\r\nThe T bit explanation (in the lower half of page 27) contains\r\nmisleading and inappropriate wording related to Figure 4.\r\nFigure 4 generally applies for both the proper AAL5 CPCS-SDU payload\r\nor the case of an ATM OAM cell payload.  Furthermore, it should be\r\nnoted that Section 8.1 (which contains and explains Figure 4)\r\nspecifies the Flags field as 'reserved, should be set to 0'.\r\nThis is incompatible with the subsequent text that requires the T bit\r\nto be set to 1 for an OAM cell.  Therefore, to avoid confusion,\r\nthe clause referencing to Figure 4 should better be deleted from\r\nthe T bit explanation.\r\n\r\nHence, the text,\r\n\r\n       Bit (T) of the control word indicates whether the packet contains\r\n       an ATM admin cell or an AAL5 payload.  If T = 1, the packet\r\n|      contains an ATM admin cell, encapsulated according to the N-to-\r\n|      one cell relay encapsulation, Figure 4.  If not set, the PDU\r\n       contains an AAL5 payload.  The ability to transport an ATM cell\r\n       in the AAL5 SDU mode is intended to provide a means of enabling\r\n       administrative functionality over the AAL5 VCC (though it does\r\n       not endeavor to preserve user-cell and admin-cell\r\n       arrival/transport ordering).\r\n\r\nshould say:\r\n\r\n       Bit (T) of the control word indicates whether the packet contains\r\n       an ATM admin cell or an AAL5 payload.  If T = 1, the packet\r\n|      contains an ATM admin cell.  If T = 0, the PDU contains an AAL5\r\n       payload.  The ability to transport an ATM cell in the AAL5 SDU\r\n       mode is intended to provide a means of enabling administrative\r\n       functionality over the AAL5 VCC (though it does not endeavor to\r\n       preserve user-cell and admin-cell arrival/transport ordering).\r\n\r\n(10c)  incomplete specification\r\n\r\nThe description of the fields in Figure 11 is incomplete.\r\nAs a service to the reader, for completeness the following\r\ntext should be added at the end of Section 10.1:\r\n\r\n|  For a description of the Length and Sequence Number fields, see\r\n|  Section 5.1.2.\r\n\r\n\r\n(11)  Section 11.1 -- surprising/confusing specification details\r\n\r\n(11a)  danger of confusion - or a mis-specification?\r\n\r\nThe placement of the U and E bits in the Control Word shown in\r\nFigure 12 (on page 29) comes to surprise.\r\n\r\nApparently, the two bits are exchanged relatively to their placement\r\nwithin the PTI field in the Control Word shown in Figure 10\r\n(on page 26).\r\n\r\nIf this has been done intentionally, it might surprise some\r\nimplementors, leading to interoperability problems.\r\nIn this case, a specific warning should have been added to the\r\nRFC text in Section 11.1, somewhere below Figure 12, e.g.:\r\n\r\n|  Warning to implementors: The order of the E and U bit is reversed\r\n|  relative to their placement in the PTI field of the ATM cell header.\r\n|  Section 11.2.2 below details the bit manipulations to be done by\r\n|  the receiving PE.\r\n\r\nBut if this is an unintentional oversight, the Control Word part\r\nof Figure 12,\r\n\r\n                                                            [...]  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |0 0 0 0| Resvd |   Optional Sequence Number    |M|V| Res |U|E|C|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | [...]\r\n\r\nshould be corrected to say:\r\n\r\n                                                            [...]  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |0 0 0 0| Resvd |   Optional Sequence Number    |M|V| Res |E|U|C|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | [...]\r\n                                                              ^ ^\r\nNote:\r\n  In this case, the procedures laid out in Section 11.2.2\r\n  could easily be collapsed to a simple bit field transfer!\r\n\r\n(11b)  lack of precision\r\n\r\nBelow Figure 12, the RFC text on page 29 says:\r\n\r\n   The M, V, Res, and C bits are as defined earlier for VCC One-to-one\r\n   cell mode.\r\n\r\nFor clarity and completeness, it should say:\r\n\r\n   The M, V, Res, and C bits are as defined earlier for VCC One-to-one\r\n|  cell mode.  M must be set to 1 and V must be set to 0 for AAL5 PDU\r\n|  Encapsulation; further details regarding the C bit are given below.\r\n\r\n\r\n(12)  Section 11.2.1 -- internal mis-ref.\r\n\r\nThe 3rd bullet in Section 11.2.1, near the bottom of page 30, says:\r\n\r\n     - The E and C bits of the fragment shall be set as defined in\r\n|      section 9.\r\n               ^\r\nIt should say:\r\n\r\n     - The E and C bits of the fragment shall be set as defined in\r\n|      section 11.1.\r\n               ^^^^\r\n\r\nRationale:\r\n  As explained above for item (11a), the specification of these bits in\r\n  Section 11.1 is contrary to their (hidden) use in Sections 8 and 9.\r\n\r\n\r\n(13)  Section 11.2.2 -- significant typo (wrong bit field name)\r\n\r\nSection 11.2.2 (on page 31) contains the bullet:\r\n\r\n      -iii. The least significant bit for the last ATM cell in the PSN\r\n|           frame is set to the value of the UU bit of Figure 12.\r\n                                             ^^\r\nIt should say:\r\n\r\n      -iii. The least significant bit for the last ATM cell in the PSN\r\n|           frame is set to the value of the U bit of Figure 12.\r\n                                             ^\r\n\r\n(14)  Section 12 -- internal mis-refs\r\n\r\nThe last paragraph of Section 12 (on page 32) says:\r\n\r\n   In both the ATM-to-PSN and PSN-to-ATM directions, the method used to\r\n   transfer the CLP and EFCI information of the individual cells into\r\n   the ATM-specific field, or flags, of the PW packet is described in\r\n|  detail in sections 6 through 9 for each encapsulation mode.\r\n                      ^         ^\r\nIt should say:\r\n\r\n   In both the ATM-to-PSN and PSN-to-ATM directions, the method used to\r\n   transfer the CLP and EFCI information of the individual cells into\r\n   the ATM-specific field, or flags, of the PW packet is described in\r\n|  detail in sections 8 through 11 for each encapsulation mode.\r\n                      ^         ^^\r\n\r\n(15)  Abuse of language\r\n\r\n'AAL5' stands for \"ATM Adaptation Layer 5\".  Hence, the wording\r\n\"ATM AAL5\" is a replication considered a rough abuse of language.\r\n\r\nAll occurrences of \"ATM AAL5\" in the RFC should be corrected to \"AAL5\".", "correct_text": "", "notes": "\n --VERIFIER NOTES-- \n   This complex, multi-part, erratum has been split into a number of errata to make it easier for the reader to determine the resolution of the components. Some components have been verified, some rejected and some deferred. To guard against an editing error I am leaving 999 itself untouched, but in rejected state lest it is necessary to inspect the original erratum text.\r\n\r\nThe reader is revered to the other errata raised against RFC4717 to determine the resolution of each element of this errata.", "submit_date": "2007-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1000", "doc-id": "RFC5063", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "(1)  Document title and Abstract\r\n\r\nOver the years, there have been arising different of flavors of RSVP.\r\nIn particular, RSVP-TE, based on the seminal RFC 3209, addresses\r\nquite distinct requirements than the original, QoS oriented, basic\r\nRSVP, and it follows a distinguished service model.\r\nIt has been good practice to clearly distinguish between RSVP-TE\r\nand the basic RSVP in the titles of RFCs published in the last\r\nyears.  Unfortunately, this has not been done for RFC 5063.\r\n\r\nBTW:\r\n  Some of the extensions to RSVP-TE published in RFC 3473, in\r\n  particular those reused and amended per RFC 5063, apparently\r\n  are not only applicable to GMPLS, but also to 'classical' MPLS /\r\n  MPLS Traffic Engineering.  The mentioning of 'GMPLS' in the\r\n  title of RFC 5063 therefore seems to unnecessarily narrow the\r\n  scope of the RFC.  The body of RFC 5063, e.g. the text in the\r\n  Introduction, seems to strongly support this point of view.\r\n\r\nTherefore, it might perhaps have been preferable to make the title\r\nof RFC 5063 (omitting the expansion of acronyms, anecdotally anyway\r\nonly performed partially in the published title):\r\n\r\n             Extensions to RSVP-TE Graceful Restart\r\n\r\nAccordingly, the Abstract of the document should better talk about\r\nRSVP-TE than (pure) RSVP, in its first paragraph.\r\n\r\n\r\n(2)  Section 1 -- word omission\r\n\r\nWithin Section 1 of RFC 5063, in the 4th paragraph on page 4,\r\nthe RFC says:\r\n\r\n                                  [...].  The downstream RSVP neighbor\r\n   can indicate its ability to send RecoveryPath messages by including\r\n|  the Capability object with the RecoveryPath Transmit Enabled set in\r\n   its Hello messages to the restarting node.  [...]\r\n\r\nIt should say:\r\n\r\n                                  [...].  The downstream RSVP neighbor\r\n   can indicate its ability to send RecoveryPath messages by including\r\n|  the Capability object with the RecoveryPath Transmit Enabled bit set\r\n   in its Hello messages to the restarting node.  [...]\r\n                                                                ^^^^\r\n\r\nNote: This correction is in accordance with the language used\r\n      in other places in the RFC, in particular the immediate\r\n      preceding sentence in the same paragraph.\r\n\r\n\r\n(3)  Section 4.2 -- incomplete specification\r\n\r\nWithin Section 4.2, the artwork on page 6 depicting the Capability\r\nobject includes the RSVP object header and specifies the constant\r\nvalues applicable for the Class-Num and C-Type field.\r\nContrary to that, it does not specify the value of the Length field\r\n(that is equally constant for the new object) -- neither in the\r\ndiagram, nor does it supply explanatory text for that field (that\r\ncould have pointed to the fundamental specification and/or directly\r\nspecified the value).\r\nFor simplicity, I propose to correct the diagram.\r\nThe RFC says:\r\n\r\n   The format of a Capability object is:\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|     |            Length             | Class-Num(134)|  C-Type  (1)  |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                         Reserved                        |T|R|S|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nFor the sake of completeness of the specification, the RFC should say:\r\n\r\n   The format of a Capability object is:\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|     |           Length (8)          | Class-Num(134)|  C-Type  (1)  |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                         Reserved                        |T|R|S|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\n(4)   Section 4.4.2 -- potentially misleading omission of article\r\n\r\nIn the 2nd-to-last paragraph of Section 4.4.2, on top of page 9\r\nRFC 5063 says:\r\n\r\n                                              [...].  If the restarting\r\n   node expects to recover RSVP state by the receipt and processing of\r\n|  RecoveryPath messages, it MUST follow procedures defined in Section\r\n   4.5.2, with the downstream RSVP neighbor.\r\n\r\nIt should say:\r\n                                              [...].  If the restarting\r\n   node expects to recover RSVP state by the receipt and processing of\r\n   RecoveryPath messages, it MUST follow the procedures defined in\r\n   Section 4.5.2, with the downstream RSVP neighbor.\r\n\r\nRationale:\r\n  Without the omitted 'the', the reference is to an unspecified set\r\n  of procedures there, which might be misleading.  For the sake of\r\n  clarity and precision, the article should be supplied.\r\n\r\nThis issue recurs in subsequent parts of the text.\r\nSimilar corrections will be listed below in shorthand notation,\r\nreferring to this item.\r\n\r\n\r\n(5)  Section 4.5.2.1 -- grammar / terminology\r\n\r\nOn page 11, at the end of the first paragraph of Section 4.5.2.1,\r\nthe RFC says:\r\n\r\n                                              [...].  If there is\r\n   resynchronized state and there is no MESSAGE_ID object or reliable\r\n   message delivery [RFC2961] is not supported, the node SHOULD send a\r\n|  trigger Path message, and, consider the message as processed.\r\n          ^\r\nIt should say:\r\n\r\n                                              [...].  If there is\r\n   resynchronized state and there is no MESSAGE_ID object or reliable\r\n   message delivery [RFC2961] is not supported, the node SHOULD send a\r\n|  triggered Path message, and, consider the message as processed.\r\n          ^^^\r\n\r\nRationale: \"a trigger Path message\" might well be misunderstood\r\n  to be a quite different concept than \"a triggered Path message\".\r\n  The latter is the proper term.\r\n\r\nThis issue recurs in subsequent parts of the text.\r\nSimilar corrections will be listed below in shorthand notation,\r\nreferring to this item.\r\n\r\n\r\n(6)  Section 4.5.2.2 -- grammar / terminology\r\n\r\nAs a corollary to item (5) above, in Section 4.5.2.2 the second\r\nline of the last paragraph on page 12 should be corrected:\r\n  \"a trigger Path message\"  -->  \"a triggered Path message\"\r\n\r\n\r\n(7)  Section 5 -- word omission, and spurious word\r\n\r\nThe second paragraph of Section 5, on mid-page 14, says:\r\n\r\n   Selective transmission of RecoveryPath messages is controlled much\r\n|  the same way transmission of Path or Resv messages is controlled with\r\n   standard Summary Refresh, see [RFC2961].  In standard Summary\r\n   Refresh, an Srefresh message is sent by a node to identify to its\r\n|  neighbor about Path and Resv state that is locally installed and\r\n   available.  [...]\r\n\r\nIt should say:\r\n\r\n   Selective transmission of RecoveryPath messages is controlled much\r\n|  the same way as transmission of Path or Resv messages is controlled\r\n   with standard Summary Refresh, see [RFC2961].  In standard Summary\r\n   Refresh, an Srefresh message is sent by a node to identify to its\r\n|  neighbor Path and Resv state that is locally installed and available.\r\n   [...]\r\n\r\n\r\n(8)   Section 5.2.1 -- potentially misleading omission of article\r\n\r\nAs a corollary to item (4) above, the text in the 3rd paragraph of\r\nSection 5.2.1, at the bottom of page 16 should be corrected:\r\n\r\n   \"revert to normal procedures defined in Section 4.5.1\"\r\n---\r\n   \"revert to the normal procedures defined in Section 4.5.1\"\r\n\r\n\r\n(9)  Section 5.3.2 -- grammar / terminology\r\n\r\nAs a corollary to item (5) above, in the second paragraph of\r\nSection 5.3.2 (on mid-page 19), apply the corrections:\r\n\r\n    \"a trigger Path message\"      -->  \"a triggered Path message\"\r\nand\r\n    \"such trigger Path message\"   -->  \"such triggered Path message\"\r\n\r\n\r\n(10)  Section 5.3.3 -- potentially misleading omission of article\r\n\r\nAs another corollary to item (4) above, the text in the first\r\nparagraph of Section 5.3.3, near the bottom of page 19 should be\r\ncorrected:\r\n\r\n              [...].  Processing of MESSAGE_ID NACKs with the\r\n|  RecoveryPath Flag set (1) also follows procedures defined in\r\n   [RFC2961] unless explicitly modified in this section.\r\n---\r\n              [...].  Processing of MESSAGE_ID NACKs with the\r\n|  RecoveryPath Flag set (1) also follows the procedures defined in\r\n   [RFC2961] unless explicitly modified in this section.\r\n\r\n", "correct_text": "", "notes": "[Adrian Farrel]\r\n(1) No change needed. Inclusion of \"GMPLS\" in the title indicates that this is the GMPLS extensions to the TE extensions to RSVP.\r\n(5), (6) and (9) \"trigger Path message\" is correct. The name of the Path message is a trigger Path message.\r\n(7) Insertion of \"as\" is not required in US English.\r\n\r\n", "submit_date": "2007-10-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1001", "doc-id": "RFC4480", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The header on every page says:", "orig_text": "RFC 4480                          RIPD                         July 2006", "correct_text": "RFC 4480                          RPID                         July 2006", "notes": "", "submit_date": "2007-09-07", "submitter_name": "John Huang", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1002", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3.1", "orig_text": "      (DAV:needs-privilege): The DAV:bind privilege MUST be granted to\r\n               ^          ^\r\n      the current user on the parent collection of the Request-URI.", "correct_text": "      (DAV:need-privileges): The DAV:bind privilege MUST be granted to\r\n               ^         ^\r\n      the current user on the parent collection of the Request-URI.", "notes": "As per RFC 3744.\r\n", "submit_date": "2007-07-14", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1003", "doc-id": "RFC3696", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   In addition to restrictions on syntax, there is a length limit on\r\n   email addresses.  That limit is a maximum of 64 characters (octets)\r\n   in the \"local part\" (before the \"@\") and a maximum of 255 characters\r\n   (octets) in the domain part (after the \"@\") for a total length of 320\r\n   characters.  Systems that handle email should be prepared to process\r\n   addresses which are that long, even though they are rarely\r\n   encountered.", "correct_text": "   In addition to restrictions on syntax, there is a length limit on\r\n   email addresses.  That limit is a maximum of 64 characters (octets)\r\n   in the \"local part\" (before the \"@\") and a maximum of 255 characters\r\n   (octets) in the domain part (after the \"@\") for a total length of 320\r\n   characters. However, there is a restriction in RFC 2821 on the length of an\r\n   address in MAIL and RCPT commands of 256 characters.  Since addresses\r\n   that do not fit in those fields are not normally useful, the upper\r\n   limit on address lengths should normally be considered to be 256.\r\n\r\n   \r\n", "notes": "", "submit_date": "2005-07-09", "submitter_name": "John C. Klensin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2839", "doc-id": "RFC5912", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14", "orig_text": "", "correct_text": "", "notes": "anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificatePolicies 0 } does not appear in the PKIX1Implicit-2009 module.  It appears in the body of RFC 5280 and in the corresponding ASN.1 module in RFC 5280.", "submit_date": "2011-06-16", "submitter_name": "Carl Wallace", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1014", "doc-id": "RFC4978", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "RFC 4978 vs. RFC 5032 -- mismatch in UPDATES clauses\r\n\r\nWithin two weeks, two RFCs have been published specifying amendments\r\nto the IMAP protocol:\r\n\r\n  o  RFC 4978  -- COMPRESS\r\n\r\n  o  RFC 5032  -- WITHIN Search\r\n\r\nBoth IMAP extensions are similarly structured and arguably RFC 4978\r\nmodifies IMAP behaviour specified in RFC 3501 (and other IMAP\r\nextension specifications: IMAP TLS and SASL) to a much greater extent\r\nthan RFC 5032 does.\r\n\r\nNevertheless and surprisingly, only RFC 5032 has the line,\r\n  Updates: 3501\r\nin its document header and hence in its RFC index metadata.\r\n\r\nThis is apparently inconsistent.\r\n\r\nAn update to the RFC metadata incoporating the relation\r\n     \"RFC 4978 updates RFC 3501\"\r\nwould be welcome as well.", "correct_text": "", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1015", "doc-id": "RFC4968", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 1 -- mis-expansion of acronym\r\n\r\nAt the bottom of page 2, Section 1 of RFC 4968 says:\r\n\r\n                   [...].  Another method is to treat the IEEE 802.16\r\n|  MAC (Message Authentication Code) transport connections between an MS\r\n   (Mobile Station) and BS (Base Station) as point-to-point IP links so\r\n   that the IP protocols (e.g., ARP (Address Resolution Protocol), IPv6\r\n   Neighbor Discovery) can be run without any problems.\r\n\r\nIt should say:\r\n\r\n                   [...].  Another method is to treat the IEEE 802.16\r\n|  MAC (Media Access Control) transport connections between an MS\r\n   (Mobile Station) and BS (Base Station) as point-to-point IP links so\r\n   that the IP protocols (e.g., ARP (Address Resolution Protocol), IPv6\r\n   Neighbor Discovery) can be run without any problems.\r\n\r\n\r\n(2)  Section 3.1 -- typo/grammar\r\n\r\nThe first paragraph of Section 3.1 says, at the bottom of page 3:\r\n             v\r\n                                  [...].  The following figures\r\n|  illustrates a high-level view of this link model wherein [...]\r\n\r\nIt should say:\r\n\r\n                                  [...].  The following figures\r\n|  illustrate a high-level view of this link model wherein [...]\r\n\r\n\r\n(3)  missing articles\r\n\r\n(3a)\r\nThe RFC text regularly uses \"to an AR\", \"via the AR\", etc.\r\nIt also should not omit the article 'the' in \"of the AR\"\r\nand in other context.\r\n\r\nFor instance:\r\n\r\n- Section 3.1, 1st paragraph (page 5), 7th line:\r\n    \"support of AR\"           -->   \"support of the AR\"\r\n\r\n- Section 3.1.4.2 (page 6), 2nd line:\r\n    \"backend process in AR\"   -->   \"backend process in the AR\"\r\n\r\n- Section 3.1.4.4 (page 6), 3rd line:\r\n    \"the MS and AR\"           -->   \"the MS and the AR\"\r\n\r\n(3b)\r\nSimilar inconsistent use/non-use of the article occurs for \"BS\".\r\nFor instance,\r\n\r\n- Section 3.3.4.6 (page 11), 2nd line:\r\n    \"implemented in BS\"       -->   \"implemented in the BS\"\r\n\r\n- Section 4, first paragraph on page 12, last line:\r\n    \"sends a single RA to BS\" -->   \"sends a single RA to the BS\"\r\n\r\n- Section 4, last paragraph (page 12), 2nd line:\r\n    \"sent by the AR to BS\"    -->   \"sent by the AR to the BS\"\r\n\r\n(3c)\r\nFinally, I found inconsistent use of the article for \"Ethernet CS\"\r\nin the first paragraph of Section 7, on page 13.  The RFC says:\r\n\r\n   Ethernet-Like Link models would be used when the deployment requires\r\n|  the use of Ethernet CS, as this is the only model being proposed for\r\n   the Ethernet CS and running IPv6 over Ethernet is well understood.\r\n\r\nIt should say:\r\n\r\n   Ethernet-Like Link models would be used when the deployment requires\r\n|  the use of the Ethernet CS, as this is the only model being proposed\r\n   for the Ethernet CS and running IPv6 over Ethernet is well\r\n   understood.\r\n\r\n\r\n(4)  grammar / word omission\r\n\r\nOn page 9, Section 3.2.3.6 contains the bullet:\r\n\r\n|  1.  Each MS is assigned a separate VLAN when IEEE 802.1X [12] or each\r\n       MS must have an L2 tunnel to the AR to aggregate all the\r\n|      connections to the MS and present these set of connections as an\r\n       interface to the IPv6 layer.\r\n\r\nThis sentence does not parse.  Perhaps, it should say:\r\n\r\n|  1.  Each MS is assigned a separate VLAN when IEEE 802.1X [12] is used\r\n       or each MS must have an L2 tunnel to the AR to aggregate all the\r\n|      connections to the MS and present this set of connections as an\r\n       interface to the IPv6 layer.\r\n\r\n\r\n(5)  extraneous word\r\n\r\nThe last sentence of Section 3.3.4.2 (on page 11) says:\r\n\r\n   Nevertheless, in case of bridging, direct inter-MSs communication may\r\n|  not be not allowed due to restrictions from the service providers.\r\n   ^^^^^^^^^^\r\n\r\nIt should say:\r\n\r\n   Nevertheless, in case of bridging, direct inter-MSs communication may\r\n|  not be allowed due to restrictions from the service providers.\r\n   ^^^^^^\r\n\r\n\r\n(6)  References\r\n\r\nIn Section 11.2, in the entries [4] and [5], a space character should\r\nhave been inserted after \"Part 16:\" .\r\nDo these two documents really have the same title ?\r\n", "correct_text": "", "notes": "", "submit_date": "2007-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Jari Arkko", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1016", "doc-id": "RFC4958", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4.1", "orig_text": "a Media Access Controller (MAC) frame", "correct_text": "a Media Access Control (MAC) frame", "notes": "", "submit_date": "2007-08-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ken Carlberg", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1017", "doc-id": "RFC4958", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "mostly likely", "correct_text": "most likely", "notes": "", "submit_date": "2007-08-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ken Carlberg", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1018", "doc-id": "RFC4956", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  typo (technical error)\r\n\r\nWithin Section 4.2.2.2. of RFC 4956, the last sentence of the\r\nparagraph on top of page 8 contains a wrong RCODE value.\r\nThe RFC says:\r\n\r\n                v\r\n                                 [...].  In particular, a NOERROR/NODATA\r\n|  (i.e., RCODE=3, but the answer section is empty) response to a DS\r\n   query may be proven by an Opt-In flagged covering NSEC record, rather\r\n   than an NSEC record matching the query name.\r\n\r\nIt should say:\r\n                v\r\n                                 [...].  In particular, a NOERROR/NODATA\r\n|  (i.e., RCODE=0, but the answer section is empty) response to a DS\r\n   query may be proven by an Opt-In flagged covering NSEC record, rather\r\n   than an NSEC record matching the query name.\r\n\r\nRationale: See RCODE list in RFC 1035 [1], page 27, and RFC 2181 [8].\r\n\r\n\r\n(2)  missing article\r\n\r\nStill on page 8, an article is missing in the third bullet\r\nin Section 4.2.4 .\r\nThe RFC says:\r\n\r\n   o  sending a NOERROR/NODATA response when query type is DS and the\r\n|     covering NSEC is tagged as Opt-In, unless NSEC record's owner name\r\n      matches the query name.\r\n                                               ^\r\nIt should say:\r\n\r\n   o  sending a NOERROR/NODATA response when query type is DS and the\r\n|     covering NSEC is tagged as Opt-In, unless the NSEC record's owner\r\n      name matches the query name.\r\n                                               ^^^^^\r\n\r\n(3)  inconsistency\r\n\r\nThere's a small inconsistency in the presentation of DNS querys\r\n(and responses) in Section 6.\r\nIn almost all instances, in that context the text gives domain\r\nnames with the DNS 'root label', the trailing dot.\r\nYet, in the second line of the first paragraph on page 10,\r\nthis dot is missing twice.\r\n\r\nThe RFC says:\r\n\r\n   In this example, a query for a signed RRset (e.g., \"FIRST-\r\n|  SECURE.EXAMPLE A\") or a secure delegation (\"WWW.SECOND-SECURE.EXAMPLE\r\n   A\") will result in a standard DNSSEC response.\r\n\r\nIt should say:\r\n\r\n   In this example, a query for a signed RRset (e.g., \"FIRST-\r\n|  SECURE.EXAMPLE. A\") or a secure delegation (\"WWW.SECOND-\r\n|  SECURE.EXAMPLE. A\") will result in a standard DNSSEC response.\r\n                 ^\r\n\r\n(4)  text truncation\r\n\r\nIn Section 9, on top of page 13, the list of acknowledged people\r\napparently has been truncated.\r\n\r\nThe RFC says:\r\n          v\r\n|     Mats Kolkman, Edward Lewis, Ted Lindgreen, Rip Loomis, Bill\r\n      Manning, Dan Massey, Scott Rose, Mike Schiraldi, Jakob Schlyter,\r\n      Brian Wellington.\r\n\r\nThe -09 draft had the following list:\r\n\r\n|     Mats Dufberg, Miek Gieben, Olafur Gudmudsson, Bob Halley, Olaf\r\n      Kolkman, Edward Lewis, Ted Lindgreen, Rip Loomis, Bill Manning,\r\n      Dan Massey, Scott Rose, Mike Schiraldi, Jakob Schlyter, Brian\r\n      Wellington.\r\n\r\nAFAICS, most probably the draft was o.k. and the bulk of the first\r\nline of that list has been lost in the publication process.\r\n\r\n\r\n(5)  references\r\n\r\nRFC 3655 [3] and RFC 3090 [10] have been incorporated into, and\r\nformally been obsoleted by RFC 4033..35 [4][5][6].\r\n\r\nIMHO, it is therefore inappropriate to list [3] as a Normative\r\nReference in Section 10.1, and it it of questionable benefit\r\nto list both [3] and [10] at all in Section 10.\r\n\r\n\r\nI apologize for not having caught and reported items (1)..(3) and\r\n(5) when I once studied the -09 draft version of the document;\r\nitem (4) is new.\r\n\r\nI strongly recommend to post an RFC Errata Note covering at least\r\nitems (1) and (4).\r\n", "correct_text": "", "notes": "", "submit_date": "2007-08-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1148", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "      # or Assert(*,G) message to be sent out interface iif.", "correct_text": "      # or Assert(*,G) message to be sent out iif.", "notes": "\u201cshould be sent out interface iif\u201d is redundant as \u201ciif\u201d stands for \u201cincoming interface\u201d and this expands to: \u201cshould be sent out interface incoming interface\u201d, which is redundant.\n --VERIFIER NOTES-- \nIn this case \"iif\" is the identifier of an interface. It reads better as it is.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1004", "doc-id": "RFC3696", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   +-------------------------+-----------------------------+-----------+\r\n   |      Email address      |         MAILTO URL          |   Notes   |\r\n   +-------------------------+-----------------------------+-----------+\r\n   |     Joe@example.com     |  mailto:joe@example.com     |     1     |\r\n\r\n...\r\n\r\n   Notes on Table\r\n\r\n   1.  No characters appear in the email address that require escaping,\r\n       so the body of the MAILTO URL is identical to the email address.", "correct_text": "   +-------------------------+-----------------------------+-----------+\r\n   |      Email address      |         MAILTO URL          |   Notes   |\r\n   +-------------------------+-----------------------------+-----------+\r\n   |     Joe@example.com     |  mailto:Joe@example.com     |     1     |\r\n\r\n...\r\n\r\n   Notes on Table\r\n\r\n   1.  No characters appear in the email address that\r\n       require escaping, so the body of the MAILTO URL is\r\n       identical to the email address.  Because the local part\r\n       of email addresses may be treated as case-sensitive by\r\n       the system hosting the mailbox (see RFC 2821, Section\r\n       4.1.2), \"mailto:joe@example.com\" would not be a valid\r\n       URL for the mailbox Joe@example.com even though, if the\r\n       recommendations of RFC 2821 are followed, it would work\r\n       as a synonym.  See also Section 6.2.3 of RFC 3986.", "notes": "", "submit_date": "2007-09-09", "submitter_name": "Charles Curran", "verifier_id": "", "verifier_name": "John C. Klensin", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1005", "doc-id": "RFC5065", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  obsolete reference tag - #1\r\n\r\nApparently, some reference tags have not been updated when the\r\n'References' Section (10.) has been modified to incorporate\r\ncurrent versions of the relevant documents.\r\n\r\nThe second paragraph of Section 1, on page 3 of RFC 5065, says:\r\n\r\n   This scaling problem has been well documented and a number of\r\n|  proposals have been made to alleviate this, such as [RFC2796] and\r\n   [RFC1863] (made historic by [RFC4223]).  [...]\r\n\r\nRFC 2796 has been obsoleted by RFC 4456, and Section 10.2 only\r\ncontains an entry for [RFC4456], which is only used in the\r\nsecond paragraph of Section 2, but no entry for [RFC 2796].\r\n\r\nTherefore, the above sentence should better say:\r\n\r\n   This scaling problem has been well documented and a number of\r\n|  proposals have been made to alleviate this, such as [RFC4456] and\r\n   [RFC1863] (made historic by [RFC4223]).  [...]\r\n\r\nor, if you prefer, for the sake of historical precision:\r\n\r\n   This scaling problem has been well documented and a number of\r\n|  proposals have been made to alleviate this, such as [RFC4456]\r\n|  (first version published in [RFC 2796]) and [RFC1863] (made historic\r\n   by [RFC4223]).  [...]\r\n\r\nFor the latter variant, an entry for [RFC2796] must be restored into\r\nSection 10.2, as well.\r\n\r\n\r\n(2)  sluggish / imprecise language\r\n\r\nThe third paragraph of Section 4, at the bottom of page 5, says:\r\n\r\n   A BGP speaker receiving an AS_PATH attribute containing an autonomous\r\n|  system matching its own AS Confederation Identifier SHALL treat the\r\n   path in the same fashion as if it had received a path containing its\r\n   own AS number.\r\n\r\nPreferably, the text should not mess up the terms 'autonomous system'\r\nand 'autonomous system number'.\r\nThus, it should say:\r\n\r\n   A BGP speaker receiving an AS_PATH attribute containing an autonomous\r\n|  system number matching its own AS Confederation Identifier SHALL\r\n   treat the path in the same fashion as if it had received a path\r\n   containing its own AS number.\r\n\r\n\r\n(3)  misleading specification, with bad wording\r\n\r\nIn Section 4.1, the bullets b) 1) (on page 6) and c) 2) (on page 7)\r\nhave been amended by instructions for the case of AS_PATH segment\r\noverflow.  Although the details of the action necessary according\r\nto the spirit of BGP differ in a small, but important way, the\r\nsame wording is used in both cases.  That might be very misleading.\r\nI propose to explicitely specify the AS number to be inserted in\r\nboth cases, using the terms defined in Section 1.2.\r\n\r\nFurthermore, the word 'prepend' is abused in the last part of the\r\namendments and might even be misleading.\r\nI propose to use 'include' in there, as the text already does in\r\nsimilar context, for instance in the immediately subsequent bullets.\r\n\r\nTherefore, the text in bullet b) 1) (on page 6),\r\n\r\n                     [...].  If the act of prepending will cause an\r\n         overflow in the AS_PATH segment (i.e., more than 255 ASs), it\r\n         SHOULD prepend a new segment of type AS_CONFED_SEQUENCE and\r\n|        prepend its own AS number to this new segment.\r\n         ^^^^^^^         ^^^^^^^^^ ^^\r\nshould say:\r\n\r\n                     [...].  If the act of prepending will cause an\r\n         overflow in the AS_PATH segment (i.e., more than 255 ASs), it\r\n         SHOULD prepend a new segment of type AS_CONFED_SEQUENCE and\r\n|        include its own Member-AS number in this new segment.\r\n         ^^^^^^^         ^^^^^^^^^^^^^^^^ ^^\r\n\r\nSimilarly, the identical text in bullet c) 2) (on page 7),\r\n\r\n                     [...].  If the act of prepending will cause an\r\n         overflow in the AS_PATH segment (i.e., more than 255 ASs), it\r\n|        SHOULD prepend a new segment of type AS_SEQUENCE and prepend\r\n|        its own AS number to this new segment.\r\n                 ^^^^^^^^^ ^^                                 ^^^^^^^\r\n\r\nshould say:\r\n\r\n                     [...].  If the act of prepending will cause an\r\n         overflow in the AS_PATH segment (i.e., more than 255 ASs), it\r\n|        SHOULD prepend a new segment of type AS_SEQUENCE and include\r\n|        its own AS Condeferation Identifier in this new segment.\r\n                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^               ^^^^^^^\r\n\r\n(4)  textual enhancement\r\n\r\nStill in Section 4.1, in the lower half of pgae 7, the bullets a) and\r\nb) under headline:\r\n\r\n   When a BGP speaker originates a route then:\r\n\r\ndeal with similar cases using (almost) similar wording.\r\nBullet b) says:\r\n\r\n   b) the originating speaker includes its own Member-AS Number in a\r\n      path segment, of type AS_CONFED_SEQUENCE, in the AS_PATH attribute\r\n      of all UPDATE messages sent to BGP speakers located in neighboring\r\n|     Member Autonomous Systems that are members of the local\r\n      confederation.  [...]\r\n\r\nTo finalize the similarity, and to remove the unnecessary repetition\r\nof the word 'member', it would perhaps have been better to say:\r\n\r\n   b) the originating speaker includes its own Member-AS Number in a\r\n      path segment, of type AS_CONFED_SEQUENCE, in the AS_PATH attribute\r\n      of all UPDATE messages sent to BGP speakers located in neighboring\r\n|     autonomous systems that are members of the local confederation.\r\n      [...]\r\n\r\n\r\n(5)  typo, and unnecessarily differing case\r\n\r\nThe last paragraph of the new Section 5 says:\r\n\r\n         vv\r\n|  It is a error for a BGP speaker to receive an update message from a\r\n   confederation peer that is not in the same Member-AS that does not\r\n   have AS_CONFED_SEQUENCE as the first segment.  [...]\r\n\r\nTo correct the grammar, and to harmonize the case of 'UPDATE message'\r\nthroughout the whole section, it should say:\r\n\r\n         vvv\r\n|  It is an error for a BGP speaker to receive an UPDATE message from a\r\n   confederation peer that is not in the same Member-AS that does not\r\n   have AS_CONFED_SEQUENCE as the first segment.  [...]\r\n\r\nAlternatively, perhaps, the obstinate double 'that' could easily be\r\nremoved as well:\r\n\r\n         vvv\r\n|  It is an error for a BGP speaker to receive an UPDATE message from a\r\n|  confederation peer not located in the same Member-AS that does not\r\n   have AS_CONFED_SEQUENCE as the first segment.  [...]\r\n\r\n\r\n(6)  grammar\r\n\r\nThe first paragraph of Section 6, on top of page 10, says:\r\n\r\n                                             vv\r\n|  All BGP speakers participating as members of a confederation MUST\r\n   recognize the AS_CONFED_SET and AS_CONFED_SEQUENCE segment type\r\n   extensions to the AS_PATH attribute.\r\n\r\nIMHO, it should be  ... participating *in* ...\r\nThus, the RFC should say:\r\n                                             vv\r\n|  All BGP speakers participating as members in a confederation MUST\r\n   recognize the AS_CONFED_SET and AS_CONFED_SEQUENCE segment type\r\n   extensions to the AS_PATH attribute.\r\n\r\n\r\n(7)  obsolete reference tag - #2\r\n\r\nSection 8 (at the bottom of page 10) says:\r\n\r\n   This extension to BGP does not change the underlying security issues\r\n   inherent in the existing BGP protocol, such as those described in\r\n|  [RFC2385] and [BGP-VULN].\r\n                  ^^^^^^^^\r\n\r\nThere is no such reference tag '[BGP-VULN]' in Section 10.\r\nApparently, the RFC should say:\r\n\r\n   This extension to BGP does not change the underlying security issues\r\n   inherent in the existing BGP protocol, such as those described in\r\n|  [RFC2385] and [RFC4272].\r\n                  ^^^^^^^\r\n\r\n\r\n(8)  obsolete reference tag - #3\r\n\r\nThe first paragraph of Section 9, on top of page 11, says:\r\n\r\n   The general concept of BGP confederations was taken from IDRP's\r\n   Routing Domain Confederations [ISO10747].  Some of the introductory\r\n|  text in this document was taken from [RFC2796].\r\n                                            ^^^^\r\n\r\nAs in item (1) above, either the tag '[RFC2796]' is updated:\r\n\r\n   The general concept of BGP confederations was taken from IDRP's\r\n   Routing Domain Confederations [ISO10747].  Some of the introductory\r\n|  text in this document was taken from [RFC4456].\r\n                                            ^^^^\r\n\r\nor an entry for '[RFC2796]' must be restored into Section 10.2 .\r\n\r\n\r\n(9)  obsolete RFCs listed as Normative References ?!?\r\n\r\nRFC 5065, on page 11, lists its obsolete predecessors as Normative\r\nReferences, [RFC1965] and [RFC3065], in Section 10.1.\r\n\r\nAccording to common sense, general practice, and the rules for\r\nNormative References, I would have preferred to see these entries\r\nplaced into Section 10.2, as Informative References.\r\n", "correct_text": "", "notes": "This proposed no normative changes, and the clarifications do not appear to be urgent.", "submit_date": "2007-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1006", "doc-id": "RFC5052", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1.2", "orig_text": "... the last source block is L-((L-1)/E) rounded down to the nearest\r\ninteger)*E octets in length.", "correct_text": "... the last source block is L-floor((L-1)/E)*E octets in length.", "notes": "Apparently, this sections has been crafted to give a formulation of\r\nthe algorithm avoiding the distinction between various cases, and in\r\nparticular a separate formulation for the \"regular\" corner case of\r\nan object that can be partitioned exactly into blocks of equal size.\r\nThe formulae given in Section 9.1.2 make use of the standard\r\nfunctions 'ceil' and 'floor' (restated in Section 9.1), but the\r\nfinal paragraph of the section, at the bottom of page 19, tries to\r\nparaphrase the 'floor' function (see above).\r\n\r\nBTW:\r\nMany FEC schemes are only prepared to deal with encoding symbols of\r\nequal size.  To accommodate this, wouldn't it therefore have been\r\npreferable to specify padding (to full size E) of the last symbol of\r\nthe last block, for the purpose of this common, default algorithm ?\r\n\r\n\r\n--- VERIFIER NOTES ---\r\nIt is the typical case (not a non-standard case) that the object size is not\r\nan even multiple of some nice encoding source block length, and thus\r\ntypically A_small not= A_large.   Furthermore, it is the typical case that L\r\nis not a multiple of E.  Thus, what you characterize as the \"regular\" case\r\nis actually quite atypical in the real-world.\r\n\r\nAlso, any application can pad out the last source symbol of a source block\r\nif it wants if the FEC encoder/decoder can't handle it, the specification\r\ndoes not mandate a particular implementation.  On the other hand, it is\r\nunnecessary, and usually wasteful, to actually send those padding bytes over\r\nthe wire, and this specification specifies what is sent on the wire and how.\r\nThis is why it is like it is.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Michael Luby", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1007", "doc-id": "RFC5035", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A", "orig_text": "At the end of Appendix A, near the bottom of page 15, the last\r\ntwo ASN.1 definitions are joined on one line.  Apart from a major\r\ndecrease in readability, this in fact might be wrong in ASN.1.\r\n\r\nThe RFC says:\r\n\r\n   Hash ::= OCTET STRING  IssuerSerial ::= SEQUENCE {\r\n        issuer                   GeneralNames,\r\n        serialNumber             CertificateSerialNumber\r\n   }\r\n\r\nIt should say:\r\n\r\n   Hash ::= OCTET STRING\r\n\r\n   IssuerSerial ::= SEQUENCE {\r\n        issuer                   GeneralNames,\r\n        serialNumber             CertificateSerialNumber\r\n   }\r\n\r\n(Note: I have indented the original/replacement RFC text by 3 columns\r\n to make it better distinguishable in this context.)", "correct_text": "See above.", "notes": "See above.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1008", "doc-id": "RFC5002", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Author*                      Informational                      [Page X]", "correct_text": "Camarillo & Blanco           Informational                      [Page X]", "notes": "", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1009", "doc-id": "RFC4992", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   C:           (chunk 1)\r\n   C: 0x44      (LC=no,DC=yes,CT=sd)\r\n   C: 0x00 0x11 (chunk length=11)", "correct_text": "   C:           (chunk 1)\r\n   C: 0x44      (LC=no,DC=yes,CT=sd)\r\n   C: 0x00 0x12 (chunk length=18)", "notes": "Apparently, there is an inconsistency in chunk 1 of the first request block, closely related to errata ID 2830, and this has nurtured my suspicion reported there that perhaps the 'mechanism data length' field has been added late in the draft history, without sufficient care.\r\n\r\nThe first chunk data field has the following components:\r\n      SASL mechanism \"PLAIN\"         ... 1 +  5 octets\r\n      10 octets of SASL PLAIN data   ... 2 + 10 octets\r\nThis sums up to (decimal) 18 octets, or 0x12.\r\n\r\n[Separated out other errata from this one. This was the last erratum originally reported in 1009.]", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2837", "doc-id": "RFC4648", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "16.2", "orig_text": "http://zgp.org/pipermail/p2p-hackers/2001-September/000315.html", "correct_text": "http://zgp.org/pipermail/p2p-hackers/2001-September/000316.html", "notes": "The same \"off by one\" issue was already present in RFC 3548 (obsoleted by RFC 4648).  The archived article 315 has another author.  Articles 316 and 319 are from the author noted in the RFCs, belong to a discussion of \"web-safe base64\" formats (incl. hex. + base32 alternatives), and specify the relevant base64 modification:\r\n\r\n316 is shorter than 319, and nearer to the erroneous 315, so that was likely the intended article.", "submit_date": "2011-06-15", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2381", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\n\r\n [missing \"/\"]\r\n\r\nThe 3rd paragraph on page 14, i.e. the 4th bullet in Section 5.2, says:\r\n\r\n   * Man-in-the-middle attacks: Such attacks threaten the security of\r\n     exchanged, non-authenticated messages.  Man-in-the-middle attacks\r\n     usually come with masquerade and or loss of message integrity (see\r\n     below).  [...]", "correct_text": "It should say:\r\n\r\n   * Man-in-the-middle attacks: Such attacks threaten the security of\r\n     exchanged, non-authenticated messages.  Man-in-the-middle attacks\r\n|    usually come with masquerade and/or loss of message integrity (see\r\n     below).  [...]", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2840", "doc-id": "RFC2004", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   Protocol    |S|  reserved   |        Header Checksum        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 Original Destination Address                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   :            (if present) Original Source Address               :\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n ", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 Original Destination Address                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   :            (if present) Original Source Address               :\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   Protocol    |S|  reserved   |        Header Checksum        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n ", "notes": "given that:\r\n- The ip4 header has variable size ( >20 octets )\r\n- The suggested extra header has variable size ( 8 or 12 octets )\r\n- The S bit to distinguish the suggested header size is located\r\n  inside the second octet of the suggested header\r\n- The only size information is about the sum of both headers\r\n\r\nThe implication is that the S bit cannot be located.\r\n\r\nMy opinion to correct this problem is just to change \r\nthe order of elements inside the suggested header.\n --VERIFIER NOTES-- \nThe proposed change is a protocol modification and must go through the standardization process.   ", "submit_date": "2011-06-17", "submitter_name": "Francesco Balzarini", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2841", "doc-id": "RFC4230", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "In addition to host-based authentication with the INTEGRITY object inside the\r\nRSVP message, user-based authentication is available as introduced in [2].", "correct_text": "In addition to host-based authentication with the INTEGRITY object inside the\r\nRSVP message, user-based authentication is available as introduced in [7].", "notes": "This wrong cross-reference appears at least in the HTML version of RFC4230, at http://tools.ietf.org/html/rfc4230.\r\n\r\nReference [2] is \"RSVP Extensions for Policy Control\", RFC 2750, while it should be Reference [7] \"Identity Representation for RSVP\", RFC 3182.", "submit_date": "2011-06-17", "submitter_name": "Marco Molteni", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2842", "doc-id": "RFC3405", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3; 12", "orig_text": "3. Registration Policies\r\n\r\n   The creation of a given URI scheme or URN namespace id (NID) follows\r\n   the appropriate registration documents for those spaces.  URI schemes\r\n   follow \"Registration Procedures for URL Scheme Names\" (RFC 2717)\r\n   [10].  URN namespace ids follow \"URN Namespace Definition Mechanisms\"\r\n   (RFC 2611) (or updates thereto) [9].\r\n\r\n3.1 URI.ARPA Registration\r\n\r\n3.1.1 Only Schemes in the IETF Tree Allowed\r\n\r\n   In order to be inserted into the URI.ARPA zone, the subsequent URI\r\n   scheme MUST be registered under the IETF URI tree.  The requirements\r\n   for this tree are specified in [10].\r\n\r\n[ . . . ]\r\n\r\n   [9]   Faltstrom, P., Iannella, R., Daigle, L. and D. van Gulik, \"URN\r\n         Namespace Definition Mechanisms\", BCP 33, RFC 2611, October\r\n         1998.\r\n\r\n   [10]  Petke, R. and I. King, \"Registration Procedures for URL Scheme\r\n         Names\", BCP 35, RFC 2717, January 1999.", "correct_text": "3. Registration Policies\r\n\r\n   The creation of a given URI scheme or URN namespace id (NID) follows\r\n   the appropriate registration documents for those spaces.  URI schemes\r\n   follow \"Guidelines and Registration Procedures for New URI Schemes\" \r\n   (RFC 4395) [10].  URN namespace ids follow \"Uniform Resource Names (URN)\r\n   Namespace Definition Mechanisms\" (RFC 3406) (or updates thereto) [9].\r\n\r\n3.1 URI.ARPA Registration\r\n\r\n3.1.1 Only Schemes in the IETF Tree Allowed\r\n\r\n   In order to be inserted into the URI.ARPA zone, the subsequent URI\r\n   scheme's specification MUST be first approved by IESG (formerly known\r\n   as IETF Tree URI schemes, per [11]).\r\n\r\n\r\n[ . . . ]\r\n\r\n   [9]   Daigle, L., van Gulik, D., Iannella, R., and P. Faltstrom,\r\n         \"Uniform Resource Names (URN) Namespace Definition Mechanisms\",\r\n         BCP 66, RFC 3406, October 2002.\r\n\r\n   [10]  Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n         Registration Procedures for New URI Schemes\", BCP 35, RFC 4395,\r\n         February 2006.\r\n\r\n   [11]  Petke, R. and I. King, \"Registration Procedures for URL Scheme\r\n         Names\", BCP 35, RFC 2717, January 1999.", "notes": "RFC 4395 eliminated URI schemes trees; this erratum is to incorporate this change.  Moreover, references are updated.\n --VERIFIER NOTES-- \nThis erratum is rejected in accordance with <http://www.ietf.org/iesg/statement/errata-processing.html>. In particular, this erratum \"proposes a change to the RFC that should be done by publishing a new RFC that replaces the current RFC\". Therefore, \"if the change is to be considered for future updates of the document, it should be proposed using channels other than the errata process, such as a WG mailing list\".", "submit_date": "2011-06-23", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2843", "doc-id": "RFC2460", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "In response to an IPv6 packet that is sent to an IPv4 destination\r\n(i.e., a packet that undergoes translation from IPv6 to IPv4), the\r\noriginating IPv6 node may receive an ICMP Packet Too Big message\r\nreporting a Next-Hop MTU less than 1280.  In that case, the IPv6 node\r\nis not required to reduce the size of subsequent packets to less than\r\n1280, but must include a Fragment header in those packets so that the\r\nIPv6-to-IPv4 translating router can obtain a suitable Identification\r\nvalue to use in resulting IPv4 fragments.  Note that this means the\r\npayload may have to be reduced to 1232 octets (1280 minus 40 for the\r\nIPv6 header and 8 for the Fragment header), and smaller still if\r\nadditional extension headers are used.", "correct_text": "(delete paragraph)", "notes": "This requirement makes it impossible to offer services over IPv6 without keeping per-flow state in the server node. There is no reason why IPv4 fragmentation cannot be used after translation to IPv4.\n --VERIFIER NOTES-- \nThis would be a fundamental change to the IPv6 protocol specification.  Such a proposal would need to be formally proposed as an internet draft.   ", "submit_date": "2011-06-24", "submitter_name": "Florian Weimer", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2844", "doc-id": "RFC5780", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.5", "orig_text": "RESPONSE-PORT is a 16-bit unsigned integer in network byte order \r\nfollowed by 2 bytes of padding. Allowable values of RESPONSE-PORT \r\nare 0-65536.", "correct_text": "RESPONSE-PORT is a 16-bit unsigned integer in network byte order \r\nfollowed by 2 bytes of padding. Allowable values of RESPONSE-PORT \r\nare 0-65535.", "notes": "The 16-bit unsigned int range is 0-65535 (0x0000 - 0xffff).  65536 can't be represented inside a a 16-bit.", "submit_date": "2011-06-25", "submitter_name": "John Selbie", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1010", "doc-id": "RFC4993", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.5", "orig_text": "The first paragraph of Section 3.1.5, on page 97of RFC 4993, says:\r\n\r\n|  A payload type with version information ('vi') MUST be conformant to\r\n   the XML defined in [8] and use the <versions> element as the root\r\n   element.", "correct_text": "|  A payload type with version information ('vi') sent from the server\r\n|  to the client MUST be conformant to the XML defined in [8] and use\r\n   the <versions> element as the root element.", "notes": "As mentioned in other places of the text, this requirements language\r\nis improper because it is intended to allow clients to send this\r\ntype of chunk as well, with unspecified (perhaps empty) content,\r\nto be ignored by the server.\r\n\r\nNote: This issue is a replication of the issue detailed in item (A.3)\r\nfor RFC 4992.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4714", "doc-id": "RFC6184", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "To simplify the handling and matching of these configurations, the\r\nsame RTP payload type number used in the offer SHOULD also be used\r\nin the answer, as specified in [8]\r\n\r\n[8] points to RFC 3264 \"An Offer/Answer Model with the Session\r\nDescription Protocol (SDP)\"", "correct_text": "", "notes": "The above statement is wrong. RFC 3264 does not mandate the same payload\r\ntype in both the offer and the answer. In fact, RFC 3264 section 5.1 states:\r\n\r\n   For sendonly RTP streams, the payload type\r\n   numbers indicate the value of the payload type field in RTP packets\r\n   the offerer is planning to send for that codec.  For sendrecv RTP\r\n   streams, the payload type numbers indicate the value of the payload\r\n   type field the offerer expects to receive, and would prefer to send.\r\n   \r\n   However, for sendonly and sendrecv streams, the answer might indicate\r\n   different payload type numbers for the same codecs, in which case,\r\n   the offerer MUST send with the payload type numbers from the answer.\n --VERIFIER NOTES-- \n   Rejected based on discussion on avtcore and payload lists. (3264 does in fact include the SHOULD).", "submit_date": "2016-06-17", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2321", "doc-id": "RFC5644", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "Figure 2 is ambiguous for two reasons:\r\n\r\nUse \"X\" for both types of nodes: 1) the graphic only labels intermediate nodes with \"X\" and 2) both \"nodes that are points of interest\" and \"nodes that are not points of interest\" are label \"X\" in the note following the graphic. Thus there is no difference between nodes that are points of interest and those that are not, and the distinction between the two types is not apparent\r\n\r\nThe destination node \"Dst\" has no representation in the \"Hosts\" identifier column.  the \"Dst\" label is in the same vertical column as the Hosts", "correct_text": "Change a subset of intermediate nodes (all currently labeled X) to \"Y\". Change the second line of the note to read \"'Y' are nodes thatare not points of interest.\r\n\r\nShift the \"Hosts column to the left to provide vertical separation for \"Dst\". Label \"Dst\" as \"K\" in the hosts column.", "notes": "It would be useful to clarify if the nodes that are points of interest must be contiguous or if the subset can truly be selected in an arbitrary fashion.  For a contiguous subset of point of interest nodes it is suggested that it would be useful to associate this with a higher abstract architectural construct (container) since the group might well align with a physical or administrative segment, or provider specific segment of the network.  This would aid in modeling the system for performance management applications since a one to one relationship can be created between the higher level container object and the segment object", "submit_date": "2010-07-09", "submitter_name": "Cypryan T. Klish II", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1011", "doc-id": "RFC4991", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10", "orig_text": "Section 10 (on page 10) is confusing due to missing appropriate\r\nstructuring, misleadingly joining the two distinct registrations.\r\n\r\nThe RFC says (I have omitted blank lines in the bullets for the\r\nsake of better readability in the context of this message):\r\n\r\n------\r\n10.  IANA Considerations\r\n\r\n10.1.  XML Namespace URN Registration\r\n\r\n   This document makes use of the XML namespace and schema registry\r\n   specified in XML_URN [7].  Accordingly, the following registrations\r\n   have been made by IANA:\r\n\r\n   o  XML Namespace URN/URI:\r\n      *  urn:ietf:params:xml:ns:iris-transport\r\n\r\n   o  Contact:\r\n      *  Andrew Newton <andy@hxr.us>\r\n\r\n   o  XML:\r\n      *  None\r\n\r\n   o  XML Schema URN/URI:\r\n      *  urn:ietf:params:xml:schema:iris-transport\r\n\r\n   o  Contact:\r\n      *  Andrew Newton <andy@hxr.us>\r\n\r\n   o  XML:\r\n      *  The XML Schema specified in Section 3\r\n------\r\n\r\nPerhaps, it should better say:\r\n\r\n------\r\n10.  IANA Considerations\r\n\r\n   This document makes use of the XML namespace and schema registry\r\n   specified in XML_URN [7].  Accordingly, the following registrations\r\n   have been made by IANA:\r\n\r\n10.1.  XML Namespace URN Registration\r\n\r\n   o  XML Namespace URN/URI:\r\n      *  urn:ietf:params:xml:ns:iris-transport\r\n\r\n   o  Contact:\r\n      *  Andrew Newton <andy@hxr.us>\r\n\r\n   o  XML:\r\n      *  None\r\n\r\n10.2.  XML Schema URN/URI Registration\r\n\r\n   o  XML Schema URN/URI:\r\n      *  urn:ietf:params:xml:schema:iris-transport\r\n\r\n   o  Contact:\r\n      *  Andrew Newton <andy@hxr.us>\r\n\r\n   o  XML:\r\n      *  The XML Schema specified in Section 3\r\n------\r\n\r\nFurthermore, all occurrences of \"URN/URI\" might better have been\r\nshortened to \"URN\" there, for brevity and clarity.", "correct_text": "", "notes": "", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2286", "doc-id": "RFC5728", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "REVISION \"200907201200Z\"\r\nDESCRIPTION\r\n\"Revision of this MIB module, following MIB doctor review\r\nand adjustments based on the MIB authoring guidelines\r\nfrom the IETF.\"\r\n::= { transmission 239 }\r\n", "correct_text": "REVISION \"201002161200Z\"\r\nDESCRIPTION \r\n    \"Revision of the SatLabs DVB-RCS MIB module.\r\n    This version is published as RFC 5728.\"\r\nREVISION \"200907201200Z\"\r\nDESCRIPTION\r\n    \"Revision of this MIB module, following MIB doctor review\r\n    and adjustments based on the MIB authoring guidelines\r\n    from the IETF.\"\r\n::= { transmission 239 }", "notes": "DESCRIPTION clause for the LAST-UPDATED version of the MIB is missing.", "submit_date": "2010-05-21", "submitter_name": "Stephane Combes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2287", "doc-id": "RFC5728", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4.2", "orig_text": "Both dvbRcsRcstNetwork.dvbRcsNetworkLanIpAddress (Traffic) ", "correct_text": "Both dvbRcsRcstNetwork.dvbRcsNetworkLanInetAddress (Traffic) \r\n", "notes": "typo", "submit_date": "2010-05-21", "submitter_name": "Stephane Combes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1012", "doc-id": "RFC4985", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "RFC 4985 repeatedly uses inprecise terms like \"domain name\",\r\n\"DNS domain name\", or even merely the pattern \"host.example.com\"\r\n(in Section 4), in places where preferably the established precise\r\nterm \"fully qualified domain name\" (FQDN) should have been used.", "correct_text": "", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1019", "doc-id": "RFC4954", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "|  When compared to RFC 2554, this document deprecates use of the 538\r\n   response code, adds a new Enhanced Status Code, adds a requirement to\r\n|  support SASLprep profile for preparing authorization identities,\r\n|  recommends use of RFC 3848 transmission types in the Received trace\r\n|  header field, and clarifies interaction with SMTP PIPELINING\r\n   [PIPELINING] extension.\r\n", "correct_text": "|  When compared to RFC 2554, this document deprecates the use of the\r\n   538 response code, adds a new Enhanced Status Code, adds a\r\n|  requirement to support the SASLprep profile for preparing\r\n|  authorization identities, recommends the use of RFC 3848 transmission\r\n|  types in the Received trace header field, and clarifies the\r\n|  interaction with the SMTP PIPELINING [PIPELINING] extension.", "notes": "missing articles", "submit_date": "2007-08-25", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2417", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "The comment text, at the bottom of page 24, says:\r\n\r\n *  Caveats:\r\n *      SHA-1 is designed to work with messages less than 2^64 bits\r\n *      long. This implementation uses SHA1Input() to hash the bits\r\n *      that are a multiple of the size of an 8-bit character, and then\r\n *      uses SHA1FinalBits() to hash the final few bits of the input.\r\n */", "correct_text": "It should better say:\r\n\r\n *  Caveats:\r\n *      SHA-1 is designed to work with messages less than 2^64 bits\r\n *      long. This implementation uses SHA1Input() to hash the bits\r\n *      that are a multiple of the size of an 8-bit character, and then\r\n|*      optionally uses SHA1FinalBits() to hash the final few bits of\r\n *      the input.\r\n */", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1149", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.2", "orig_text": "   Basically, Update_SPTbit will set the SPTbit if we have the\r\n   appropriate (S,G) join state, and if the packet arrived on the\r\n   correct upstream interface for S, and if one or more of the following\r\n   conditions applies:\r\n", "correct_text": "See notes", "notes": "Should \u201cBasically, Update_SPTbit will set\u201d be \u201cBasically, Update_SPTbit(S,G,iif) will set\u201d?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2418", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "Near the top of page 25, there is the code:\r\n\r\n/*\r\n * add \"length\" to the length\r\n */\r\nstatic uint32_t addTemp;\r\n#define SHA1AddLength(context, length)                     \\\r\n    (addTemp = (context)->Length_Low,                      \\\r\n     (context)->Corrupted =                                \\\r\n        (((context)->Length_Low += (length)) < addTemp) && \\\r\n        (++(context)->Length_High == 0) ? 1 : 0)\r\n", "correct_text": "It should say (modifying the last line):\r\n\r\n/*\r\n * add \"length\" to the length\r\n */\r\nstatic uint32_t addTemp;\r\n#define SHA1AddLength(context, length)                     \\\r\n    (addTemp = (context)->Length_Low,                      \\\r\n     (context)->Corrupted =                                \\\r\n        (((context)->Length_Low += (length)) < addTemp) && \\\r\n        (++(context)->Length_High == 0) ? shaInputTooLong : shaSuccess )", "notes": "As can be found on page 19 (upper half), sha.h contains:\r\n\r\n#ifndef _SHA_enum_\r\n#define _SHA_enum_\r\n/*\r\n *  All SHA functions return one of these values.\r\n */\r\nenum {\r\n    shaSuccess = 0,\r\n    shaNull,            /* Null pointer parameter */\r\n    shaInputTooLong,    /* input data too long */\r\n    shaStateError,      /* called Input after FinalBits or Result */\r\n    shaBadParam         /* passed a bad parameter */\r\n};\r\n#endif /* _SHA_enum_ */\r\n\r\nThis leaves it to the compiler to assign values, but ordinarily,\r\n  shaNull          will be assigned the value 1,\r\n  shaInputTooLong  will be assigned the value 2, etc. ...\r\n\r\nThe value assigned to context->Corrupted in the #define listed\r\nabove will later on repeatedly be used to generate return values,\r\nvia code lines:\r\n                 return context->Corrupted;\r\n\r\nThese return values are expected to be SHA_enum values.\r\nIn the case where Corrupted gets assigned the value 0, it apparently\r\nwas intended to eventually get the return value 'shaSuccess', and\r\nin the case where Corrupted gets assigned the value 1, it apparently\r\nwas intended to eventually get the return value 'shaInputTooLong'.\r\nWith the code shown above, the former will work, but the latter\r\nwill usually *not* work as intended.\r\n\r\nTo obtain portable source code behaving as documented, the proposed\r\nchange has to be applied.", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1013", "doc-id": "RFC4982", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 3 -- typo ??\r\n\r\nIn the second bullet on mid-page 3, Section 3 twice talks about\r\n\"Care-off Adress\".  That is potentially misleading.\r\nThe RFC should use the proper term from Mobile IP, \"Care-of Adress\".\r\n\r\n\r\n(2)  Section 4.1\r\n\r\n(2a)  underspecification; needs clarification\r\n\r\nIn the 3rd paragraph on page 5, Section 4.1 says (on mid-page 5):\r\n\r\n                                                [...].  So for instance,\r\n   the Sec value 000 would mean that the hash function used is SHA-1 and\r\n|  the 0 bits of hash2 (as defined in RFC 3972) must be 0.  Sec value of\r\n|  001 could be that the hash function used is SHA-1 and the 16 bits of\r\n   hash2 (as defined in RFC 3972) must be zero.  [...]\r\n\r\nIt should perhaps better say, to avoid possible misinterpretation:\r\n\r\n                                                [...].  So for instance,\r\n   the Sec value 000 would mean that the hash function used is SHA-1 and\r\n|  the 0 bits of hash2 (as defined in RFC 3972) must be 0.  The Sec value\r\n|  001 could indicate that the hash function used is SHA-1 and the 16\r\n|  leftmost bits of hash2 (as defined in RFC 3972) must be zero.  [...]\r\n\r\nNote: \"leftmost\" is the essential clarification; the other changes\r\n      attempt further subordinate improvements of the language.\r\n\r\n(2b)  wording/clarification\r\n\r\nIn the middle of the last paragraph on page 5, Section 4.1 talks\r\nabout                     \"a last resource option\" .\r\nShouldn't that have been  \"a last resort option\"   ?", "correct_text": "", "notes": "", "submit_date": "2007-08-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1228", "doc-id": "RFC5109", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.3", "orig_text": "In Figure 18,\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 RTP Header (RED) - 6 octets                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 RTP Header (RED) - 12 octets                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "", "submit_date": "2008-01-03", "submitter_name": "Adam Li", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1229", "doc-id": "RFC5109", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.3", "orig_text": "In Figure 21,\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 RTP Header (RED) - 6 octets                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 RTP Header (RED) - 12 octets                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "", "submit_date": "2008-01-03", "submitter_name": "Adam Li", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4671", "doc-id": "RFC7601", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "   The \"ptype\" in the ABNF above indicates the general type of property\r\n   being described by the result being reported, upon which the reported\r\n                                             ^^^^^\r\n   result was based.  Coupled with the \"property\", which is more\r\n   specific, they indicate from which particular part of the message the\r\n   reported data were extracted.\r\n                    ^^^^\r\n\r\n", "correct_text": "   The \"ptype\" in the ABNF above indicates the general type of property\r\n   being described by the value being reported, upon which the reported\r\n                                             ^^^^^\r\n   result was based.  Coupled with the \"property\", which is more\r\n   specific, they indicate from which particular part of the message the\r\n   reported \"pvalue\"s were extracted.\r\n                    ^^^^^^^^\r\n\r\n", "notes": "The original text can be understood in multiple ways, depending on the meaning attributed to the term \"result\".  The corrected text I submit is one of the possible interpretations.  Note that if the first appearance of the term is assumed to be the ABNF \"result\", then ptype becomes an attribute of method, thereby setting a limit of one ptype per resinfo, as coincidentally it actually is.", "submit_date": "2016-04-18", "submitter_name": "Ale", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1239", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.1.1", "orig_text": "   Attributes of <audio>:\r\n\r\n   o  url - required, no default value: The URL of the content to be\r\n      retrieved and played.  The target may be a local or remote (NFS)\r\n      \"file://\" scheme URL or an \"http://\" or \"https://\" scheme URL.  If\r\n      the URL is not fully qualified and a \"baseurl\" attribute was set,\r\n      the value of the \"baseurl\" attribute will be prepended to this\r\n      value to generate the target URL.\r\n", "correct_text": "< see Notes >", "notes": "Again, the RFC should make use of standard terminology\r\nestablished in the IETF.\r\nSTD 66, RFC 3986 should be used here.\r\nThe attribute, 'url', should better have been named 'uri'.\r\n\r\nConsequently, all subsequent references to an URL w.r.t. this\r\nattribute should be replaced by \"URI\" or \"URI reference\", as\r\nappropriate.\r\n\r\nAuthors comment: This is really an Editorial erratum.  If it were to be changed, it should be changed consistently throughout the document.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1240", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.1.1.", "orig_text": "   o  gain - optional, default value \"0\": Sets the absolute gain to be\r\n      applied to the content URL.  [...]\r\n", "correct_text": "   o  gain - optional, default value \"0\": Sets the absolute gain to be\r\n      applied to the content specified by the URI.  [...]\r\n", "notes": "Sluggish language --\r\ncan't mute an URI, or apply gain to an URI !   :-)\r\n\r\nNote that other errata request the change from URL to URI throughout.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1020", "doc-id": "RFC4954", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9", "orig_text": "(4)  Section 9 -- distorted sentence\r\n\r\nThe 4th paragraph of Section 9, on mid-page 14, says:\r\n\r\n  [...]\r\n  The AUTH=<> parameter prevents such an attack from causing a relayed\r\n|  message and, in the absence of other envelope authentication, from\r\n|  picking up the authentication of the relay client.\r\n\r\nIMHO, this sentence is distorted and potentially misleading.\r\nThe RFC should perhaps better say:\r\n\r\n  [...]\r\n  The AUTH=<> parameter prevents such an attack from causing a relayed\r\n|  message, in the absence of other envelope authentication, to pick up\r\n  the authentication of the relay client.\r\n\r\nThis is essentially what RFC 2554 said in this place, and which makes\r\nmuch more sense to me.", "correct_text": "-", "notes": "---VERIFIER NOTE---\r\nI tend to disagree in this case. The \"and\" was certainly missing in the original text. I also think the new version is more readable.\r\n", "submit_date": "2007-08-25", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1021", "doc-id": "RFC4954", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "  Note:\r\n       For the purposes of this discussion, \"authenticated identity\"\r\n       refers to the identity (if any) derived from the authorization\r\n|      identity of previous AUTH command, while the terms \"authorized\r\n       identity\" and \"supplied <mailbox>\" refer to the sender identity\r\n       that is being associated with a particular message.\r\n", "correct_text": "  Note:\r\n       For the purposes of this discussion, \"authenticated identity\"\r\n       refers to the identity (if any) derived from the authorization\r\n|      identity of the previous AUTH command, while the terms\r\n       \"authorized identity\" and \"supplied <mailbox>\" refer to the\r\n       sender identity that is being associated with a particular\r\n       message.  ", "notes": "missing article\r\n\r\nfrom pending", "submit_date": "2007-08-25", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1022", "doc-id": "RFC4954", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "   Additional security considerations for [PLAIN] over\r\n|  [TLS] are mentioned in Section 15 of this document.\r\n", "correct_text": "   Additional security considerations for [PLAIN] over\r\n|  [TLS] are mentioned in Section 14 of this document.", "notes": "wrong document-internal reference\r\n\r\nfrom pending", "submit_date": "2007-08-25", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1023", "doc-id": "RFC5008", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  Section 3  (nit)\r\n\r\nIn the first sentence of Section 3 (on page 3), the acronym expansion\r\nperformed should better have been accompanied by the insertion of the\r\ndefinite article.\r\n\r\nThe RFC says:\r\n\r\n   This section specifies the conventions employed by implementations\r\n|  that support Elliptic Curve Digital Signature Algorithm (ECDSA).  The\r\n   direction set by RFC 3278 [CMSECC] is followed, but additional\r\n   message digest algorithms and additional elliptic curves are\r\n   employed.  [...]\r\n\r\nIt should perhaps better say:\r\n\r\n   This section specifies the conventions employed by implementations\r\n|  that support the Elliptic Curve Digital Signature Algorithm (ECDSA).\r\n   The direction set by RFC 3278 [CMSECC] is followed, but additional\r\n   message digest algorithms and additional elliptic curves are\r\n   employed.  [...]\r\n\r\n\r\n(2)  Section 4.3 -- imprecise text, danger of ambiguity / confusion\r\n\r\nIn Section 4.3, near the bottom of page 9, a new paragraph has been\r\ninserted in the part describing the [SEC1] KDF in general:\r\n\r\n   To generate a key-encryption key, one or more KM blocks are\r\n   generated, incrementing Counter appropriately, until enough material\r\n   has been generated.  The KM blocks are concatenated left to right:\r\n\r\n      KEK = KM ( counter=1 ) || KM ( counter=2 ) ...\r\n\r\n\r\nBut near the end of Section 4.3, on mid-page 10, the original text\r\nfrom the draft has been left unchanged:\r\n\r\n|  To generate a key-encryption key, one KM block is generated, with a\r\n   Counter value of 0x00000001:\r\n\r\n      KEK = KM ( 1 ) = Hash ( Z || Counter=1 || ECC-CMS-SharedInfo )\r\n\r\n\r\nThese two different, but very similar statements might well lead to\r\nconfusion.\r\n\r\nAs already indicated above, apparently the former text shall describe\r\nthe [SEC1] KDF in general, and the latter is intended to describe the\r\nrestricted particular use of that KDF in the context of S/MIME.\r\n\r\nTherefore, the RFC should perhaps better have stated, in place of\r\nthe latter text:\r\n\r\n                                   vvvvvvvvvvvvvvvvvvvvvv\r\n|  To generate a key-encryption key for Suite B in S/MIME, one KM block\r\n   is generated, with a Counter value of 0x00000001:\r\n\r\n      KEK = KM ( 1 ) = Hash ( Z || Counter=1 || ECC-CMS-SharedInfo )\r\n\r\n________\r\nNote:\r\n It might have been even more suitable to have that text be moved up,\r\n making it part of the indented explanation of the 'Counter' element\r\n (2nd paragraph on page 10), where it could have been kept shorter:\r\n\r\n      Counter is a 32-bit unsigned number, represented in network byte\r\n      order.  Its initial value MUST be 0x00000001 for any key\r\n      derivation operation.  In Suite B, Security Level 1 and Security\r\n      Level 2, exactly one iteration is needed; the Counter is not\r\n|     incremented; i.e., one KM block is generated, with a Counter value\r\n|     of 0x00000001:\r\n|\r\n|        KEK = KM ( 1 ) = Hash ( Z || Counter=1 || ECC-CMS-SharedInfo )\r\n________\r\n\r\nAs a minimally invasive change, I recommend posting the above\r\nclarification (or any proper alternate text of your choice)\r\nas an RFC Errata Note.\r\n", "correct_text": "-", "notes": "---VERIFIER NOTE---\r\nThanks for the careful review.  I do not believe that these are worth the effort for an errata.", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1024", "doc-id": "RFC4948", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "for example, a bug in the BIND packet was discovered", "correct_text": "for example, a bug in the BIND package was discovered", "notes": "from pending", "submit_date": "2007-09-15", "submitter_name": "Stephane Bortzmeyer", "verifier_id": "", "verifier_name": "Olaf Kolkman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1025", "doc-id": "RFC4940", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.7", "orig_text": "          vvvvvvv                     v\r\n|  OSPFv2 Options Registry (Section 2.1)\r\n\r\n   Value Description Reference\r\n   ----- ----------- ---------\r\n   0x01  B-bit       [RFC2328]\r\n|  0x02  W-bit       [RFC2328]\r\n   0x04  V-bit       [RFC2328]\r\n   0x08  W-bit       [RFC1584]\r\n   0x10  Nt-bit      [RFC3101]", "correct_text": "          vvvvvvvvvvvvvvvvv                     vvv\r\n|  OSPFv2 Router Properties Registry (Section 2.4.2)\r\n\r\n   Value Description Reference\r\n   ----- ----------- ---------\r\n   0x01  B-bit       [RFC2328]\r\n|  0x02  E-bit       [RFC2328]\r\n   0x04  V-bit       [RFC2328]\r\n   0x08  W-bit       [RFC1584]\r\n   0x10  Nt-bit      [RFC3101]", "notes": "Apparently, the headline has been erroneously copied from Section 5.1\r\nwithout performing the necessary edits.\r\nThe duplicate occurrence of \"W-Bit\" in the table is striking -\r\nSection A.4.2 of RFC 2328 normatively gives the correct name of bit\r\n0x02, and the Appendices of RFC 3101 and RFC 1584 correctly replicate\r\nthe field names as stated in RFC 2328 (and its predecessors).", "submit_date": "2007-08-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1026", "doc-id": "RFC4939", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(2)  Section 5 (MIB Module)\r\n\r\n(2a,b)  isnsNumPortals and isnsNumPortalGroups  (page 26)\r\n\r\nThe DESCRIPTION clauses of the isnsNumPortals and isnsNumPortalGroups\r\nOBJECT-TYPE declarations deviate from the wording for used the\r\nrelated 'sibling' MIB objects making the text a bit too unspecific.\r\nThe replacement text proposed below is aligned with the text pattern\r\nused throughout the upper part of page 26.\r\n\r\n(2a)\r\nFor isnsNumPortals, the RFC says:\r\n\r\n          DESCRIPTION\r\n|     \"The current total number of Portals registered in iSNS.\r\n       This is the number of rows in isnsRegPortalTable.\"\r\n\r\nIt should perhaps better say:\r\n                                                         vvvvv\r\n          DESCRIPTION\r\n|     \"The current total number of Portals registered in this iSNS\r\n|      instance.  This is the number of rows in isnsRegPortalTable.\"\r\n       ^^^^^^^^\r\n(2b)\r\nFor isnsNumPortalGroups, the RFC says:\r\n\r\n          DESCRIPTION\r\n|     \"The current total number of Portal Groups registered in\r\n|      iSNS.  This is the number of rows in isnsRegPgTable.\"\r\n\r\nIt should perhaps better say:\r\n                                                              vvvvv\r\n          DESCRIPTION\r\n|     \"The current total number of Portal Groups registered in this\r\n|      iSNS instance.  This is the number of rows in isnsRegPgTable.\"\r\n           ^^^^^^^^^\r\n\r\n(2d)  isnsDdIscsiMemberName  (page 36)\r\n\r\nThe DESCRIPTION clause of the isnsDdIscsiMemberName OBJECT-TYPE\r\ndeclaration says:\r\n\r\n       [...]\r\n       The node index used for a specific node name is only\r\n       persistent across iSNS Server reinitializations for nodes\r\n       that are in a Discovery Domain (DD) or are registered\r\n|      control nodes.  This value is only required during row\r\n|      creation if the storage node is not yet registered in the\r\n|      iSNS Server instance.  If the storage node is not yet\r\n|      registered, then the iSCSI Name MUST be provided with the\r\n|      iSCSI node index during row creation in order to create the\r\n|      1-to-1 mapping.\"\r\n\r\nThe tagged text makes almost no sense here, and should better have\r\nbeen omitted, because row creation (and deletion) via SNMP in the\r\nisnsDdIscsiMemberTable is not supported by (this version of) the\r\nMIB module.\r\n\r\nHence, The RFC should better simply say:\r\n       [...]\r\n       The node index used for a specific node name is only\r\n       persistent across iSNS Server reinitializations for nodes\r\n       that are in a Discovery Domain (DD) or are registered\r\n|      control nodes.\"\r\n\r\n\r\n(2e)  isnsDdPortalMemberEntry  (page 37)\r\n\r\nThe DESCRIPTION clause of the isnsDdPortalMemberEntry OBJECT-TYPE\r\ndeclaration says:\r\n\r\n      \"Each entry indicates an explicit addition of a portal to a\r\n       discovery domain.  The explicit addition of an entity portal\r\n       to a discovery domain indicates the portal is preferred for\r\n       access to nodes of the entity for this discovery domain.\r\n       Registered Portal Group objects are used in iSCSI to\r\n|      indicate mapping of portals to nodes across all discovery\r\n       domains.  Portals that have been explicitly mapped to a\r\n|      discovery domain will be returned as part of a query that\r\n       is scoped to that discovery domain.  If no portal of an\r\n       entity has been explicitly mapped to a discovery domain,\r\n       then all portals of the entity that provide access to a\r\n       storage node are returned as part of a query.  The table\r\n       indexes are the server instance, the DD ID of the Discovery\r\n       Domain, and the Portal Index of the portal.\"\r\n\r\nIn the coupled context od SNMP and iSNS, the bare term 'query' is\r\nambiguous and its use might lead to some confusion.\r\nClosely reading all other text in the document related to the\r\nDD Portal Membership table, isnsDdPortalMemberTable, has indicated\r\nto me that it makes only sense to talk about iSNS queries in the\r\ncontext of the second tag mark above.\r\nFurther, IMHO an article is missing in the first tagged line above.\r\n\r\nAltogether, the RFC should better say:\r\n\r\n      \"Each entry indicates an explicit addition of a portal to a\r\n       discovery domain.  The explicit addition of an entity portal\r\n       to a discovery domain indicates the portal is preferred for\r\n       access to nodes of the entity for this discovery domain.\r\n       Registered Portal Group objects are used in iSCSI to\r\n|      indicate the mapping of portals to nodes across all discovery\r\n       domains.  Portals that have been explicitly mapped to a\r\n|      discovery domain will be returned as part of an iSNS query\r\n       that is scoped to that discovery domain.  If no portal of an\r\n       entity has been explicitly mapped to a discovery domain,\r\n       then all portals of the entity that provide access to a\r\n       storage node are returned as part of a query.  The table\r\n       indexes are the server instance, the DD ID of the Discovery\r\n       Domain, and the Portal Index of the portal.\"\r\n\r\n\r\n(2i)  isnsServerNotificationGroup  (page 75)\r\n\r\nAt the very end of the MIB module, the isnsServerNotificationGroup\r\nNOTIFICATION-GROUP declaration says:\r\n\r\n      isnsServerNotificationGroup  NOTIFICATION-GROUP\r\n          NOTIFICATIONS {\r\n             isnsServerStart,\r\n             isnsServerShutdown\r\n                        }\r\n          STATUS                  current\r\n          DESCRIPTION\r\n|     \"iSNS Server Notification managed objects.\"\r\n             ::= { isnsGroups 10 }\r\n\r\nThat DESCRIPTION clause IMHO is misleading and could easily be\r\nconfused with the DESCRIPTION clause of the isnsNotificationsObjGroup\r\nOBJECT-GROUP declaration saying:\r\n      \"iSNS Notification managed objects.\"\r\n\r\nPerhaps, the phrase used for the isnsServerNotificationGroup (marked\r\nabove) should better be:\r\n\r\n|     \"iSNS Server Notifications.\"", "correct_text": "", "notes": "confusion-reducing clarifications to Description clauses", "submit_date": "2007-09-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1027", "doc-id": "RFC4938", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5", "orig_text": "|  The PADQ must carry a single Metric Tag TYPE, which contains the\r\n   following fields:", "correct_text": "|  The PADQ must carry a single Metric Tag TLV, which contains the\r\n   following fields:", "notes": "clarification", "submit_date": "2007-08-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2382", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\n(11) missing comma (potential for mis-interpretation)\r\n\r\nThe second paragraph on page 15 (within Section 5.2) says:\r\n\r\n   * Identity protection: Like MIKEY, identity protection is not a major\r\n     design requirement for MIKEY-DHHMAC, either; see [2].  No security\r\n     protocol is known so far that is able to provide the objectives of\r\n     DHHMAC as stated in section 5.3, including identity protection\r\n     within just a single roundtrip.  [...]", "correct_text": "It should say:\r\n\r\n   * Identity protection: Like MIKEY, identity protection is not a major\r\n     design requirement for MIKEY-DHHMAC, either; see [2].  No security\r\n     protocol is known so far that is able to provide the objectives of\r\n|    DHHMAC as stated in section 5.3, including identity protection,\r\n     within just a single roundtrip.  [...]", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1028", "doc-id": "RFC4938", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   In-band credit management allows credits to be incrementally granted\r\n   with each PPP Session Stage packet.  These in-band incremental credit\r\n|  grants are not explicitly unacknowledged.  However, they are\r\n   reflected in the in-band credit flow from the peer node.", "correct_text": "   In-band credit management allows credits to be incrementally granted\r\n   with each PPP Session Stage packet.  These in-band incremental credit\r\n|  grants are not explicitly acknowledged.  However, they are reflected\r\n   in the in-band credit flow from the peer node.", "notes": "I strongly suspect that in the second sentence,\r\n      \"not explicitly unacknowledged\"\r\nis an erroneous double negation and should be\r\n      \"not explicitly acknowledged\" .", "submit_date": "2007-08-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1029", "doc-id": "RFC4938", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   Packets received when granted credits that have been exhausted\r\n   are discarded.", "correct_text": "   When granted credits have been exhausted, any further packets\r\n   received are discarded.", "notes": "That sentence does not parse.  Perhaps, the word 'that' should be\r\ndeleted.\r\n\r\nYes - I've supplied a sentence that makes it clearer.", "submit_date": "2007-08-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1030", "doc-id": "RFC4935", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  Section 4 -- missing articles\r\n\r\nOn page 5 of RFC 4935, the last paragraph of Section 4 says:\r\n\r\n   This MIB imports some common Textual Conventions from T11-TC-MIB\r\n   [RFC4439] and from T11-FC-NAME-SERVER-MIB [RFC4438].  It also imports\r\n   URLString from NETWORK-SERVICES-MIB [RFC2788].\r\n\r\nIt should perhaps better say:\r\n\r\n|  This MIB imports some common Textual Conventions from the T11-TC-MIB\r\n|  [RFC4439] and from the T11-FC-NAME-SERVER-MIB [RFC4438].  It also\r\n|  imports URLString from the NETWORK-SERVICES-MIB [RFC2788].\r\n\r\n\r\n(2)  Section 5.3 -- typo\r\n\r\nThe first paragraph of Section 5.3, on page 6, says:\r\n                                                          v\r\n|  With multiple Fabrics, each Fabric has its own instances of the\r\n   Fabric-related management instrumentation.  [...]\r\n\r\nIt should say:\r\n\r\n|  With multiple Fabrics, each Fabric has its own instance of the\r\n   Fabric-related management instrumentation.  [...]\r\n\r\n\r\n(3)  Section 5.4 -- unspecific text\r\n\r\nSection 5.4, on top of page 7, says:\r\n\r\n   This section describes the six MIB groups contained in the MIB\r\n|  module.\r\n\r\nIt should more specifically say, e.g.:\r\n\r\n   This section describes the six MIB groups contained in the MIB\r\n|  module defined in Section 6.\r\n         ^^^^^^^^^^^^^^^^^^^^^\r\n\r\n(4)  Section 6\r\n\r\n\r\n(4a) improper use of term\r\n\r\nIn the DESCRIPTION clause of MODULE-IDENTITY invocation, in the first\r\nline on page 10, the term \"MIB\" should be replaced by the standards-\r\nconformant term \"MIB module\".\r\n\r\n\r\n(4b) missing article\r\n\r\nIn the DESCRIPTION clause of the t11FcsFabricDiscoveryTable OBJECT-TYPE\r\ndeclaration, on top of page 15, the RFC says:\r\n\r\n            \"This table contains control information for discovery\r\n            of Fabric configuration by switches.\r\n\r\nIt should better say:\r\n                                                         vvvv\r\n|           \"This table contains control information for the discovery\r\n            of Fabric configuration by switches.\r\n\r\n\r\n(4c) word replication\r\n\r\nIn the DESCRIPTION clause of the t11FcsFabricDiscoveryStart OBJECT-TYPE\r\ndeclaration, on mid-page 16, the RFC says:\r\n                                                              vvvvv\r\n                                     [...].  It is recommended that\r\n            whenever an instance of this object is set to 'start',\r\n|           that the desired range be specified at the same time by\r\n            ^^^^^\r\n            setting the corresponding instances of\r\n            t11FcsFabricDiscoveryRangeLow and\r\n            t11FcsFabricDiscoveryRangeHigh.\r\n\r\nIt should better say:\r\n\r\n                                     [...].  It is recommended that\r\n            whenever an instance of this object is set to 'start',\r\n|           the desired range be specified at the same time by\r\n            setting the corresponding instances of\r\n            t11FcsFabricDiscoveryRangeLow and\r\n            t11FcsFabricDiscoveryRangeHigh.\r\n\r\n\r\n(4d) mis-specification\r\n\r\nThe DESCRIPTION clause of the t11FcsIeMgmtAddrListIndex OBJECT-TYPE\r\ndeclaration, at the bottom of page 21, says:\r\n\r\n            \"The management address list for this Interconnect Element.\r\n|           This object points to an entry in the\r\n            t11FcsMgmtAddrListTable.\"\r\n\r\nThis is not true.  Cf. the corresponding description of the\r\nT11FcListIndexPointerOrZero TEXTUAL-CONVENTION and the description\r\nclauses for the t11FcsMgmtAddrListTable pointed to by this object.\r\nIn fact, this object points to a 'slice' in the\r\nt11FcsMgmtAddrListTable, namely the set of entries with common\r\nthird index equal to the value of the row instance of this object.\r\n\r\nTherefore, the RFC should say either:\r\n\r\n            \"The management address list for this Interconnect Element.\r\n|           This object points to a particular list in the\r\n            t11FcsMgmtAddrListTable.\"\r\n\r\nor:\r\n\r\n            \"The management address list for this Interconnect Element.\r\n|           This object points to a set of entries in the\r\n            t11FcsMgmtAddrListTable.\"\r\n\r\nThis issue recurs.\r\nSimilar changes need to be applied to the occurrences of \"an entry\"\r\nin the DESCRIPTION clauses of the following OBJECT-TYPE declarations:\r\n\r\n(4e)\r\n  - t11FcsPortAttachPortNameIndex (at the bottom of page 25),\r\n\r\n(4f)\r\n  - t11FcsPlatformNodeNameListIndex (on page 30),  and\r\n\r\n(4g)\r\n  - t11FcsPlatformMgmtAddrListIndex (on page 30),\r\n\r\n\r\n(4h) insufficient / inappropriate specification\r\n\r\nThe DESCRIPTION clause of the t11FcsPlatformSysMgmtAddr OBJECT-TYPE\r\ndeclaration (on page 32) says:\r\n\r\n|           \"A list of management addresses for the platform.\"\r\n\r\nThis is misleading; taken literally, it would replicate precisely\r\nthe semantics specified for the t11FcsPlatformMgmtAddrListIndex\r\nobject (on page 30).  This cannot have been intended.\r\n\r\nI strongly suspect that the RFC should say instead:\r\n\r\n|           \"A list of management addresses for the hosting\r\n|            system of the platform.\"\r\n\r\n\r\n(4i) incomplete specification\r\n\r\nThe DESCRIPTION clause of the t11FcsDiscoveryCompleteNotify\r\nNOTIFICATION-TYPE declaration (near the bottom of page 40) says:\r\n\r\n            \"This notification is generated by the Fabric\r\n            Configuration Server on the completion of the\r\n            discovery of Fabrics in the range that has\r\n|           t11FcsFabricDiscoveryRangeLow at its low end.\"\r\n\r\nThis is incomplete and misleading;\r\nthe upper limit of the Fabric index needs to be specified as well.\r\n\r\nThus, the RFC should say:\r\n\r\n            \"This notification is generated by the Fabric\r\n            Configuration Server on the completion of the\r\n            discovery of Fabrics in the range that has\r\n|           t11FcsFabricDiscoveryRangeLow at its low end and\r\n|           t11FcsFabricDiscoveryRangeHigh at its high end.\"\r\n\r\n\r\nIMHO, in particular the items (4a) and (4d) ... (4i) above\r\ndeserve being addressed by an appropriate RFC Errata Note.\r\n", "correct_text": "", "notes": "", "submit_date": "2007-09-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1031", "doc-id": "RFC4928", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "|  It is REQUIRED, however, that applications depend upon in-order\r\n   packet delivery restrict the first nibble values to 0x0 and 0x1.", "correct_text": "|  It is REQUIRED, however, that applications depending upon in-order\r\n   packet delivery restrict the first nibble values to 0x0 and 0x1.", "notes": "The original sounds like:\r\n  It is REQUIRED that applications depend upon in-order packet delivery\r\nTherefore, the sentence should be clarified and corrected as above.", "submit_date": "2007-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1032", "doc-id": "RFC4919", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 1 -- minor textual flaw\r\n\r\nThe second paragraph of Section 1, on page 2 of RFC 4919, says:\r\n\r\n   This document gives an overview of LoWPANs and describes how they\r\n   benefit from IP and, in particular, IPv6 networking.  It describes\r\n|  LoWPAN requirements with regards to the IP layer and the above, and\r\n   spells out the underlying assumptions of IP for LoWPANs.  [...]\r\n\r\nPerhaps, it should better say:\r\n\r\n   This document gives an overview of LoWPANs and describes how they\r\n   benefit from IP and, in particular, IPv6 networking.  It describes\r\n|  LoWPAN requirements with regards to the IP layer and the layers\r\n   above, and spells out the underlying assumptions of IP for LoWPANs.\r\n   [...]\r\n\r\nor shorter:\r\n\r\n   This document gives an overview of LoWPANs and describes how they\r\n   benefit from IP and, in particular, IPv6 networking.  It describes\r\n|  LoWPAN requirements with regards to the IP layer and above, and\r\n   spells out the underlying assumptions of IP for LoWPANs.  [...]\r\n\r\n\r\n(2)  Section 2 -- minor indentation flaw\r\n\r\nNear the top of page 3, Section 2 of RFC 4919 contains the numbered\r\nbullet:\r\n\r\n       v\r\n|  7.  Large number of devices expected to be deployed during the\r\n        lifetime of the technology.  This number is expected to dwarf\r\n        the number of deployed personal computers, for example.\r\n\r\nThis should perhaps better have been formatted as:\r\n\r\n       vv\r\n|  7.   Large number of devices expected to be deployed during the\r\n        lifetime of the technology.  This number is expected to dwarf\r\n        the number of deployed personal computers, for example.\r\n\r\n\r\n(3)  Sections 5 and 8.2 -- misleading reference tag\r\n\r\nApparently during a last minute change before publication, an attempt\r\nhas been made to update the references to the most current versions\r\navailable, and that has resulted in the misfortunate introduction\r\ninto the text (Section 5, first line on page 8, and Section 8.2,\r\nsecond entry), of the improper and misleading reference tag,\r\n'[6LoWPAN]', in place of an appropriate and mnemonic reference tag\r\nlike '[RFC2462bis]' for to-be-RFC4862.\r\n\r\n\r\n(4)  Section 8.2 -- wrong Informative Reference given\r\n\r\nThe RFC text in Section 5 (bullet 5. on page 8) makes reference to\r\nthe SNMPv3 umbrella document, RFC 3410, using the tag '[RFC3410]'.\r\n\r\nBut in place of the proper citation of RFC 3410, Section 8.2\r\ncontains an unexpected quotation to RFC 3411, tagged '[RFC3411]';\r\nthe latter tag does not appear anywhere else in the RFC text.\r\n\r\nTherefore, the entry [RFC3411] should have been replaced by an\r\nentry [RFC3410] !\r\n", "correct_text": "", "notes": "", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1062", "doc-id": "RFC4034", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "   3.  if the type of the RR is NS, MD, MF, CNAME, SOA, MB, MG, MR, PTR,\r\n       HINFO, MINFO, MX, HINFO, RP, AFSDB, RT, SIG, PX, NXT, NAPTR, KX,\r\n       SRV, DNAME, A6, RRSIG, or NSEC, all uppercase US-ASCII letters in\r\n       the DNS names contained within the RDATA are replaced by the\r\n       corresponding lowercase US-ASCII letters;", "correct_text": "[not supplied]", "notes": "Compare with RFC 3597 (section 7):\r\n\r\n   \"As a courtesy to implementors, it is hereby noted that the complete\r\n   set of such previously published RR types that contain embedded\r\n   domain names, and whose DNSSEC canonical form therefore involves\r\n   downcasing according to the DNS rules for character comparisons,\r\n   consists of the RR types NS, MD, MF, CNAME, SOA, MB, MG, MR, PTR,\r\n   HINFO, MINFO, MX, HINFO, RP, AFSDB, RT, SIG, PX, NXT, NAPTR, KX, SRV,\r\n   DNAME, and A6.\"\r\n\r\nAlmost exactly the same list.  One HINFO too much is no issue,\r\nbut if this actually should be TXT it's a real typo.\r\n\r\nneither TXT nor HINFO contain domain names in RDATA, so it's a bug in both\r\nRFC 3597 and 4034, although one that doesn't hurt. One could also argue that the list lacks NSAP-PTR, but then that's as obsolete as MD ans MF.", "submit_date": "2005-09-13", "submitter_name": "Peter Koch", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1063", "doc-id": "RFC3597", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   As a courtesy to implementors, it is hereby noted that the complete\r\n   set of such previously published RR types that contain embedded\r\n   domain names, and whose DNSSEC canonical form therefore involves\r\n   downcasing according to the DNS rules for character comparisons,\r\n   consists of the RR types NS, MD, MF, CNAME, SOA, MB, MG, MR, PTR,\r\n   HINFO, MINFO, MX, HINFO, RP, AFSDB, RT, SIG, PX, NXT, NAPTR, KX, SRV,\r\n   DNAME, and A6.", "correct_text": "[not supplied]", "notes": "Compare with RFC 4034 (section 6.2):\r\n\r\n   \"3.  if the type of the RR is NS, MD, MF, CNAME, SOA, MB, MG, MR, PTR,\r\n       HINFO, MINFO, MX, HINFO, RP, AFSDB, RT, SIG, PX, NXT, NAPTR, KX,\r\n       SRV, DNAME, A6, RRSIG, or NSEC, all uppercase US-ASCII letters in\r\n       the DNS names contained within the RDATA are replaced by the\r\n       corresponding lowercase US-ASCII letters;\"\r\n\r\nAlmost exactly the same list.  One HINFO too much is no issue,\r\nbut if this actually should be TXT it's a real typo.\r\n\r\nneither TXT nor HINFO contain domain names in RDATA, so it's a bug in both\r\nRFC 3597 and 4034, although one that doesn't hurt. One could also argue that the list lacks NSAP-PTR, but then that's as obsolete as MD ans MF.", "submit_date": "2005-09-13", "submitter_name": "Peter Koch", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4686", "doc-id": "RFC5443", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "", "correct_text": "(At the end of the section)\r\n\r\nIn case of OSPF while router advertises maximum cost, virtual link(s)\r\nthat cross link under question, could be broken. This is because\r\nvirtual link, which underlying path has cost greater than 0xFFFF,\r\nconsidered as inoperational. As a result, virtually connected area(s)\r\ncould be isolated from backbone.", "notes": "In case there are two or more links on path taken by virtual link, and one of them has max link cost, path metric will exceed value 0xffff. As a result virtual link will become inoperational.\n --VERIFIER NOTES-- \n   This update requires consensus by the Working Group.", "submit_date": "2016-05-06", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1033", "doc-id": "RFC4909", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "                            1                   2                   3\r\n        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|      ! Next   !      Type     !            Length             !\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|      !       OMA BCAST S/LTKM Subtype  (variable length)      ~\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                Figure 1: OMA BCAST MIKEY General Extension", "correct_text": "                            1                   2                   3\r\n        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|      ! Next payload  !      Type     !            Length             !\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|      !       OMA BCAST S/LTKM Subtype  (variable length)             ~\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                Figure 1: OMA BCAST MIKEY General Extension", "notes": "After cross-checking with the basic MIKEY specification, RFC 3830,\r\nSection 6.15, I conclude that most probably the figure should be as above.", "submit_date": "2007-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1034", "doc-id": "RFC4906", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "               0x8008   CEM [CEM]", "correct_text": "               0x0008   CEM [CEM]", "notes": "This is a typo in the VC Type assignment list in this document.\r\n\r\nThe correct value (0x0008) is in the IANA MPLS Pseudowire Types Registry\r\nand in the CEM specification (RFC5143)", "submit_date": "2007-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1035", "doc-id": "RFC4906", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Abstract -- another erroneous acronym expansion\r\n\r\nIn the Abstract of RFC 4906,\r\n\r\n      \"Synchronized Optical Network (SONET)\"\r\n               ^^^^\r\nshould say:\r\n\r\n      \"Synchronous Optical Network (SONET)\"\r\n               ^^^\r\n\r\n\r\n(2)  Section 5.2.1 -- missing punctuation\r\n\r\nSection 5.2.1 (on page 6 of RFC 4906) says:\r\n\r\n   ATM AAL5 Common Part Convergence Sublayer - Service Data Units\r\n|  (CPCS-SDUs) are encapsulated according to [RFC4905] ATM AAL5 CPCS-SDU\r\n   mode.  [...]\r\n                                                      ^\r\nIt should say:\r\n\r\n   ATM AAL5 Common Part Convergence Sublayer - Service Data Units\r\n|  (CPCS-SDUs) are encapsulated according to [RFC4905], ATM AAL5 CPCS-\r\n   SDU mode.  [...]\r\n                                                      ^^\r\n\r\n(3)  [[posted separately.]]\r\n\r\n\r\n(4)  Section 6.1 -- missing punctuation\r\n\r\nOn mid-page 11, the explanation for 'Payload Bytes' says:\r\n\r\n        A 2-octet value indicating the number of TDM payload octets\r\n|       contained in all packets on the CEM stream from 48 to 1,023\r\n        octets.  [...]\r\n                                                  ^\r\nIt should says:\r\n\r\n        A 2-octet value indicating the number of TDM payload octets\r\n|       contained in all packets on the CEM stream, from 48 to 1,023\r\n        octets.  [...]\r\n                                                  ^^\r\n\r\n(5)  Section 9 -- punctuation\r\n\r\nOn page 18, the [ANSI.T1.105] entry of Section 9 does not use the\r\n'rational quotation' style requested for RFCs in all related\r\ndocuments (RFC Author guides).\r\nThe RFC says:\r\n\r\n   [ANSI.T1.105] American National Standards Institute, \"Synchronous\r\n|                Optical Network Formats,\" ANSI T1.105-1995.\r\n                                        ^^\r\nIt should say:\r\n\r\n   [ANSI.T1.105] American National Standards Institute, \"Synchronous\r\n|                Optical Network Formats\", ANSI T1.105-1995.\r\n                                        ^^\r\n", "correct_text": "", "notes": "", "submit_date": "2007-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1036", "doc-id": "RFC4905", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "IMHO, RFC 4905 contains inappropriate text copied literally from\r\nRFC 4906, in two places:\r\n   a)  at the end of the Abstract, and\r\n   b)  at the end of Section 3\r\n\r\nThe last sentence in a) says:\r\n\r\n      [...]  This document describes the so-called \"draft-martini\"\r\n   protocol, which has since been superseded by the Pseudowire Emulation\r\n   Edge to Edge Working Group specifications described in RFC 4447 and\r\n   related documents.\r\n\r\nThe last sentence in b) says:\r\n                                                           [...].  The\r\n   PWE3 Label Distribution Protocol control protocol document [RFC4447],\r\n   which is backward compatible with this document, MUST be used for all\r\n   new implementations of this protocol.\r\n\r\nRoughly, RFC 4447 is the Standards Track successor of RFC 4906;\r\nthus, both sentences are perfectly proper in the context of RFC 4906,\r\nbut they should have been replaced by more specific text matching\r\nthe technical contents of RFC 4905 and listing the corresponding\r\nStandards Track documents.\r\n", "correct_text": "", "notes": "\n --VERIFIER NOTES-- \nThis text concerned was included during the preparation of the original \"draft-martini\" drafts for publication as documents of historical interest to the IETF.\r\n\r\nThe text is harmless, and there is unlikely to be any value to the community in expending effort on corrected text.\r\n\r\nNormally an issue like this would be held for update, but there will be no update to this document.", "submit_date": "2007-08-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1037", "doc-id": "RFC4889", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section titles -- missing articles\r\n\r\nThe following section titles:\r\n\r\n       5.5.1.  Binding to the Location of Parent Mobile Router\r\nand\r\n       5.5.3.  Binding to the Location of Root Mobile Router\r\n\r\napparently lack of tha article after \"of\", and should therefore\r\nbetter have been written as:\r\n\r\n       5.5.1.  Binding to the Location of the Parent Mobile Router\r\nand\r\n       5.5.3.  Binding to the Location of the Root Mobile Router\r\n\r\nor perhaps alternatively, even shorter:\r\n\r\n       5.5.1.  Binding to the Parent Mobile Router's Location\r\nand\r\n       5.5.3.  Binding to the Root Mobile Router's Location\r\n\r\n\r\n(2)  Section 1 -- a typo and sluggish wording\r\n\r\n(2a)\r\nThe first paragraph of Section 1 says:\r\n\r\n   Network Mobility Route Optimization Problem Statement [1] describes\r\n|  operational limitations and overheads incurred in a deployment of\r\n   Network Mobility (NEMO) Basic Support [2], which could be alleviated\r\n   by a set of NEMO Route Optimization techniques to be defined.\r\n\r\nIt should perhaps better have used the singular, \"overhead\",\r\nand stated:\r\n\r\n   Network Mobility Route Optimization Problem Statement [1] describes\r\n|  operational limitations and overhead incurred in a deployment of\r\n   Network Mobility (NEMO) Basic Support [2], which could be alleviated\r\n   by a set of NEMO Route Optimization techniques to be defined.\r\n\r\n(2b)\r\nThe last paragraph of Section 1 says:\r\n\r\n                      [...].  A point to note is that since this\r\n   document discusses aspects of Route Optimization, the reader may\r\n|  assume that a mobile network or a mobile host is away when they are\r\n   mentioned throughout this document, unless it is explicitly specified\r\n   that they are at home.\r\n\r\nThe sluggish abbreviated pure \"away\" should better have been avoided,\r\nstating:\r\n                      [...].  A point to note is that since this\r\n   document discusses aspects of Route Optimization, the reader may\r\n|  assume that a mobile network or a mobile host is away from home when\r\n   they are mentioned throughout this document, unless it is explicitly\r\n   specified that they are at home.\r\n\r\n\r\n(3)  Section 2\r\n\r\nAs in item (2a) above, in the 4th bullet of Section 2, near the\r\nbottom of page 4,  \"overheads\"  should perhaps better b replaced by\r\nthe singular form, \"overhead\".\r\n\r\n\r\n(4)  Section 3.1 -- missing article\r\n\r\nThe initial paragraph of Section 3.1, on mid-page 6, says:\r\n\r\n|                 [...].  With the use of Correspondent Router, Route\r\n   Optimization session is terminated at the Correspondent Router on\r\n   behalf of the Correspondent Node.  As long as the Correspondent\r\n   Router is located \"closer\" to the Correspondent Node ...\r\n\r\nIt should better say:\r\n                                                               vvvv\r\n|                 [...].  With the use of Correspondent Router, the\r\n   Route Optimization session is terminated at the Correspondent Router\r\n   on behalf of the Correspondent Node.  As long as the Correspondent\r\n   Router is located \"closer\" to the Correspondent Node ...\r\n\r\n\r\n(5)  Section 3.2.1 -- mis-wording\r\n\r\nThe last paragraph/sentence of Section 3.1.2, at the bottom of\r\npage 8, does not parse.\r\n\r\nThe RFC says:\r\n\r\n   An example of this approach include Reverse Routing Header (RRH)\r\n   [10].\r\n\r\nIt should perhaps say either:\r\n\r\n   An example of this approach can be found in Reverse Routing Header\r\n   (RRH) [10].\r\n\r\nor simply:\r\n\r\n   Reverse Routing Header (RRH) [10] is an example of this approach.\r\n\r\n\r\n(6)  Section 3.3 -- typo\r\n\r\nThe first paragraph of Section 3.3, on mid-page 9, says:\r\n\r\n   An infrastructure-based optimization is an approach where\r\n   optimization is carried out fully in the infrastructure.  One example\r\n   is to make use of Mobility Anchor Points (MAPs) such as defined in\r\n   HMIPv6 [13] to optimize routes between themselves.  Another example\r\n|  is to make use of proxy Home Agent such as defined in the global Home\r\n   Agent to Home Agent (HAHA) protocol [14].  A proxy Home Agent acts as\r\n   a Home Agent for the Mobile Node, and acts as a Mobile Node for the\r\n   Home Agent, Correspondent Node, Correspondent Router, and other\r\n   proxies.  In particular, the proxy Home Agent terminates the MRHA\r\n   tunnel and the associated encryption, extracts the packets, and re-\r\n   encapsulates them to the destination.  In this case, proxy Home\r\n   Agents are distributed in the infrastructure and each Mobile Router\r\n   binds to the closest proxy.  [...]\r\n\r\nIt should use the plural of \"Home Agent\" in the 5th line,\r\nand thus say:\r\n\r\n   An infrastructure-based optimization is an approach where\r\n   optimization is carried out fully in the infrastructure.  One example\r\n   is to make use of Mobility Anchor Points (MAPs) such as defined in\r\n   HMIPv6 [13] to optimize routes between themselves.  Another example\r\n|  is to make use of proxy Home Agents such as defined in the global\r\n   Home Agent to Home Agent (HAHA) protocol [14].  A proxy Home Agent\r\n   acts as a Home Agent for the Mobile Node, and acts as a Mobile Node\r\n   for the Home Agent, Correspondent Node, Correspondent Router, and\r\n   other proxies.  In particular, the proxy Home Agent terminates the\r\n   MRHA tunnel and the associated encryption, extracts the packets, and\r\n   re-encapsulates them to the destination.  In this case, proxy Home\r\n   Agents are distributed in the infrastructure and each Mobile Router\r\n   binds to the closest proxy.  [...]\r\n\r\n\r\n(7)  Section 4.1 -- singular/plural mismatches\r\n\r\nWithin Section 4.1, at the bottom of page 1, ...\r\n\r\n(7a)\r\nthe 2nd paragraph says:\r\n\r\n|        [...].  This effect will be especially significant for wireless\r\n|  environment where bandwidth is relatively limited.\r\n\r\nwhere it should say:\r\n                                                               vv\r\n|        [...].  This effect will be especially significant for a\r\n   wireless environment where bandwidth is relatively limited.\r\n\r\nor:\r\n\r\n         [...].  This effect will be especially significant for wireless\r\n|  environments where bandwidth is relatively limited.\r\n              ^\r\nand ...\r\n\r\n(7b)\r\nthe 3rd paragraph says:\r\n\r\n|  It is possible to moderate the effect of Signaling Storm by\r\n   incorporating mechanisms such as [...]\r\n\r\nwhere it should say:\r\n                                            vv\r\n|  It is possible to moderate the effect of a Signaling Storm by\r\n   incorporating mechanisms such as [...]\r\n\r\nor:\r\n                                                           v\r\n|  It is possible to moderate the effect of Signaling Storms by\r\n   incorporating mechanisms such as [...]\r\n\r\n(Please choose!)\r\n\r\n\r\n(8)  Section 4.2 -- missing article and singular/plural mismatch\r\n\r\nThe 1st paragraph of Section 4.2, on page 12, says:\r\n\r\n                                  v\r\n   It is expected that NEMO Route Optimization will be more complicated\r\n|  than NEMO Basic Support.  Thus, complexity of nodes that are required\r\n   to incorporate new functionalities to support NEMO Route Optimization\r\n|  would be higher than those required to provide NEMO Basic Support.\r\n                        ^^^^^\r\nIt should say:\r\n                                  vvvvv\r\n   It is expected that NEMO Route Optimization will be more complicated\r\n|  than NEMO Basic Support.  Thus, the complexity of nodes that are\r\n   required to incorporate new functionalities to support NEMO Route\r\n|  Optimization would be higher than that required to provide NEMO\r\n   Basic Support.\r\n                                     ^^^^\r\n\r\n(9)  Section 4.3 -- missing articles\r\n\r\nThe 1st paragraph of Section 4.3, on mid-page 12, says:\r\n                                                            v\r\n|  Due to the diversity of locations of different nodes that Mobile\r\n                                                     v\r\n|  Network Node may signal with and the complexity of NEMO Route\r\n   Optimization procedure that may cause several rounds of signaling\r\n   messages, a NEMO Route Optimization procedure may take a longer time\r\n   to finish its handoff than that in NEMO Basic Support.  [...]\r\n\r\nIt should say:\r\n                                                            vvv\r\n|  Due to the diversity of locations of different nodes that a Mobile\r\n                                                     vvv\r\n|  Network Node may signal with and the complexity of a NEMO Route\r\n   Optimization procedure that may cause several rounds of signaling\r\n   messages, a NEMO Route Optimization procedure may take a longer time\r\n   to finish its handoff than that in NEMO Basic Support.  [...]\r\n\r\n\r\n(10)  Section 4.4 -- missing article\r\n\r\nThe first paragraph of Section 4.4, on top of page 13, says:\r\n\r\n                         v\r\n   In order to support NEMO Route Optimization, some nodes need to be\r\n|  changed or upgraded.  Smaller number of nodes required to be changed\r\n   will allow for easier adoption of the NEMO Route Optimization\r\n   solution in the Internet and create less impact on existing Internet\r\n   infrastructure.  [...]\r\n\r\nIt should say:\r\n                         vvv\r\n   In order to support NEMO Route Optimization, some nodes need to be\r\n|  changed or upgraded.  A smaller number of nodes required to be\r\n   changed will allow for easier adoption of the NEMO Route Optimization\r\n   solution in the Internet and create less impact on existing Internet\r\n   infrastructure.  [...]\r\n\r\n\r\n(11)  Section 4.6\r\n\r\nIn the first paragraph of Section 4.6, in place of:\r\n\r\n   ... keep track of the states of all Route Optimization sessions.\r\n                              ^\r\nthe RFC should preferably say:\r\n\r\n   ... keep track of the state of all Route Optimization sessions.\r\n\r\n\r\n(12)  Section 5\r\n\r\nThe list item:\r\n\r\n   3.  How is Route Optimization capabilities detected?\r\n\r\nshould better say:\r\n\r\n   3.  How are Route Optimization capabilities detected?\r\nor:\r\n   3.  How is Route Optimization capability detected?\r\n\r\n... depending on whether you expect a variety or finer granularity of\r\nRoute Optimization capabilities vs. a single 'block' of procedures.\r\nMany parts of the memo make it likely that there might be various\r\nsolutions for various senarios, and hence the former expectation\r\nbe more appropriate.\r\n\r\n\r\n(13)  [[posted separately as Technical.]]\r\n\r\n\r\n(14)  Section 5.1.3\r\n\r\nThe 3rd paragraph of Section 5.1.3, on top of page 18, says:\r\n\r\n   A deployment consideration with respect to the use of Correspondent\r\n|  Router is the location of the Correspondent Router relative to the\r\n   Correspondent Node.  [...]\r\n\r\nIt should say:\r\n         v\r\n   A deployment consideration with respect to the use of Correspondent\r\n|  Routers is the location of the Correspondent Router relative to the\r\n   Correspondent Node.  [...]\r\n\r\n\r\n(15)  Section 5.2\r\n\r\nThe first paragraphh of Section 5.2 (still on page 18) says:\r\n\r\n                                                       [...].  However,\r\n   when the mobile node is within a nested mobile network, the detection\r\n   of the mobility of upstream Mobile Routers may need to be conveyed to\r\n|  the nested Mobile Network Node.  This might incur longer signaling\r\n   delay as discussed in Section 4.3.\r\n\r\nIt should say:\r\n                                                       [...].  However,\r\n   when the mobile node is within a nested mobile network, the detection\r\n   of the mobility of upstream Mobile Routers may need to be conveyed to\r\n|  the nested Mobile Network Node.  This might incur a longer signaling\r\n   delay as discussed in Section 4.3.\r\n                                                     ^^\r\n\r\n(16)  Section 5.3 -- grammar\r\n\r\nThe first paragraphh of Section 5.3, on mid-page 19, says:\r\n\r\n   The question here is how the initiator of Route Optimization knows\r\n   whether the Correspondent Entity supports the functionality required\r\n|  to established a Route Optimization session.  [...]\r\n               ^^^\r\n\r\nThis sentence does not parse.\r\nIt should say:\r\n\r\n   The question here is how the initiator of Route Optimization knows\r\n   whether the Correspondent Entity supports the functionality required\r\n|  to establish a Route Optimization session.  [...]\r\n               ^\r\n\r\n(17)  Section 5.5\r\n\r\nThe first paragraphh of Section 5.5, near the bottom of page 20, says:\r\n               v\r\n|  In order for route to be optimized, it is generally necessary for the\r\n   Correspondent Entity to create a binding between the address and the\r\n   location of the Mobile Network Node.  This can be done in the\r\n   following ways:\r\n\r\nIt should say:\r\n               vvv\r\n|  In order for a route to be optimized, it is generally necessary for\r\n   the Correspondent Entity to create a binding between the address and\r\n   the location of the Mobile Network Node.  This can be done in the\r\n   following ways:\r\n\r\n\r\n(18)  Section 5.5.1\r\n\r\n(18a) section headline -- see item (1) above\r\n\r\n(18b) headline of second bullet on page 21\r\n\r\nThe RFC says:\r\n\r\n|  o  Sending Information of Parent Mobile Router\r\n                            ^\r\nIt should say:\r\n\r\n|  o  Sending Information of the Parent Mobile Router\r\n                            ^^^^^\r\nThis issue recurs several times in the text;\r\nI omit to mention these details.\r\n\r\n(18c)\r\nAt the bottom of page 22, the RFC says:\r\n\r\n   One advantage shared by all the approaches listed here is that only\r\n   mobility protocol is affected.  [...]\r\n\r\nIt should say:\r\n\r\n   One advantage shared by all the approaches listed here is that only\r\n|  the mobility protocol is affected.  [...]\r\n   ^^^^\r\n\r\n\r\n(19)  Section 5.5.3\r\n\r\n(19a) section headline -- see item (1) above\r\n\r\n(19b)\r\nThe third paragraph of the first bullet of Section 5.5.3, just below\r\nthe page break to page 25, says:\r\n\r\n                              [...].  However, it requires the access\r\n<< page break >>\r\n|     router (or some other entity within the access network) and Mobile\r\n|     Router to possess prefix delegation functionality, and also\r\n      maintain information on what prefix is delegated to which node.\r\n|     How to efficiently assign a subset of Mobile Network Prefix to\r\n      child Mobile Routers could be an issue because Mobile Network\r\n      Nodes may dynamically join and leave with an unpredictable\r\n      pattern.  [...]\r\n\r\nIt should say:\r\n                              [...].  However, it requires the access\r\n<< page break >>                                                 vvvv\r\n|     router (or some other entity within the access network) and the\r\n      Mobile Router to possess prefix delegation functionality, and also\r\n|     to maintain information on what prefix is delegated to which node.\r\n      ^^^                                   vvvv\r\n|     How to efficiently assign a subset of the Mobile Network Prefix to\r\n      child Mobile Routers could be an issue because Mobile Network\r\n      Nodes may dynamically join and leave with an unpredictable\r\n      pattern.  [...]\r\n\r\n(Alternatively, use \"a\" in place of the inserted \"the\".)\r\n\r\n\r\n(20)  Section 5.6\r\n\r\nThe 2nd paragraph of Section 5.6, on topof page 27, says:\r\n\r\n          [...].  Off-plane signaling, on the other hand, sends\r\n|  signaling messages independently from the data packet.  [...]\r\n                                                       ^^\r\nIt should say:\r\n\r\n          [...].  Off-plane signaling, on the other hand, sends\r\n|  signaling messages independently from the data packets.  [...]\r\n                                                       ^^^\r\n\r\n(21)  Section 5.8.1\r\n\r\nThe last paragraph of Section 5.8.1, on page 30, says:\r\n\r\n                                                [...].  There is also a\r\n|  proposed mechanism in [23] for Mobile Network Node to delegate some\r\n   rights to their Mobile Routers, which may be used to allow the Mobile\r\n   Routers to prove their authenticities to Correspondent Entities when\r\n   establishing Route Optimization sessions on behalf of the Mobile\r\n   Network Nodes.\r\n\r\nIt should say:\r\na                                                    v\r\n                                                [...].  There is also a\r\n|  proposed mechanism in [23] for Mobile Network Nodes to delegate some\r\n   rights to their Mobile Routers, which may be used to allow the Mobile\r\n   Routers to prove their authenticities to Correspondent Entities when\r\n   establishing Route Optimization sessions on behalf of the Mobile\r\n   Network Nodes.", "correct_text": "", "notes": "", "submit_date": "2007-09-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1038", "doc-id": "RFC4889", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.2", "orig_text": "   Traditionally, it has been generally\r\n   avoided having state information in the routers to increase\r\n   proportionally with the number of pairs of communicating peers.", "correct_text": "[see below]", "notes": "This is not true for the vast majority of IPv4 routers deployed\r\ntoday, the typical NAT/NAPT 'SOHO' access routers, which all need to\r\nkeep *per flow* state -- increasing even more, proportionally with\r\nthe number of transport 'sessions' between communicating peers!", "submit_date": "2007-09-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1295", "doc-id": "RFC4996", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1", "orig_text": "7.1.  Initialization and Refresh (IR) Packets", "correct_text": "7.1.  Initialization and Refresh (IR and IR-DYN) Packets", "notes": "See GLOBAL errata report on IR <-> IR-DYN for rationale.\n --VERIFIER NOTES-- \n   Authors and WG chairs are of the opinion that it is reasonably clear that IR is both a class of packets type. So from the context it should be understandable when the class is meant rather than the specific type. And clarification would also require major changes in several docs. ", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1296", "doc-id": "RFC4996", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1, p.37", "orig_text": "      Payload: The payload of the corresponding original packet, if any.\r\n      The payload consists of all data after the last octet of the TCP\r\n|     header to end of the uncompressed packet.  The presence of a\r\n      payload is inferred from the packet length.\r\n", "correct_text": "      Payload: The payload of the corresponding original packet, if any.\r\n      The payload consists of all data after the last octet of the TCP\r\n|     header to the end of the uncompressed packet.  The presence of a\r\n      payload is inferred from the packet length.\r\n", "notes": "Location is last paragraph in unnumbered subsection on IR packet type.", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2213", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.3.", "orig_text": "     - Two-octet scalar octet count for following hashed subpacket data.\r\n     - Hashed subpacket data set (zero or more subpackets).\r\n     - Two-octet scalar octet count for the following unhashed subpacket\r\n       data. \r\n     - Unhashed subpacket data set (zero or more subpackets).", "correct_text": "     - Two-octet scalar octet count for following hashincluded subpacket\r\n       data.\r\n     - Hashincluded subpacket data set (zero or more subpackets).\r\n     - Two-octet scalar octet count for the following not hashincluded\r\n       subpacket data. \r\n     - Not hashincluded subpacket data set (zero or more subpackets).", "notes": "The first field does not contain a hash. But it is included in the hash.\r\nUnhashing is the reverse of hashing, which is hopefully unfeasible.\n --VERIFIER NOTES-- \nThis is incorrect.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1039", "doc-id": "RFC4888", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  outdated / inappropriate Reference\r\n\r\nThe second bullet in Section 2.1 of RFC 4888, on top of page 5, says:\r\n\r\n              [...].  For instance, given a voice application using an 8\r\n      kbps algorithm (e.g., G.729) and taking a voice sample every 20 ms\r\n|     (as in RFC 1889 [6]), the packet transmission rate will be 50\r\n      packets per second.  [...]\r\n\r\nand Section 6.2, on page 12, contains the details for the ref. [6].\r\n\r\nRFC 1889 has long been obsoleted by STD 64, RFC 3550.\r\nFurthermore, I seriously doubt whether the reference to the core\r\nRTP specification is appropriate here; most probably, a reference\r\nto the RTP A/V profile specification, STD 65, RFC 3551, would have\r\nbeen much more appropriate, because Section 4.5.6 of that RFC\r\ncontains the current specification with the relevant details\r\nfor the G.729 codec mentioned in the example.\r\n\r\n\r\n(2)  textual issues in Section 1\r\n\r\nThe first paragraph of Section 1, on page 3 of RFC 4888, says:\r\n\r\n   With current Network Mobility (NEMO) Basic Support [1], all\r\n   communications to and from nodes in a mobile network must go through\r\n   the bi-directional tunnel established between the Mobile Router and\r\n   its Home Agent (also known as the MRHA tunnel) when the mobile\r\n|  network is away.  Although such an arrangement allows Mobile Network\r\n   Nodes to reach and be reached by any node on the Internet,\r\n   limitations associated to the base protocol degrade overall\r\n   performance of the network and, ultimately, can prevent all\r\n   communications to and from the Mobile Network Nodes.\r\n\r\nIt should perhaps better say, inserting \"from home\" for clarification:\r\n\r\n   With current Network Mobility (NEMO) Basic Support [1], all\r\n   communications to and from nodes in a mobile network must go through\r\n   the bi-directional tunnel established between the Mobile Router and\r\n   its Home Agent (also known as the MRHA tunnel) when the mobile\r\n|  network is away from home.  Although such an arrangement allows\r\n   Mobile Network Nodes to reach and be reached by any node on the\r\n   Internet, limitations associated to the base protocol degrade overall\r\n   performance of the network and, ultimately, can prevent all\r\n   communications to and from the Mobile Network Nodes.\r\n\r\nIn the subsequent second paragraph of Section 1,\r\n\r\n   Some of these concerns already exist with Mobile IPv6 [4] and were\r\n   addressed by the mechanism known as Route Optimization, which is part\r\n   of the base protocol.  With Mobile IPv6, Route Optimization mostly\r\n|  improves the end-to-end path between the Mobile Node and\r\n   Correspondent Node, with an additional benefit of reducing the load\r\n   of the Home Network, thus its name.\r\n\r\nperhaps another article \"the\" should have been inserted:\r\n\r\n   Some of these concerns already exist with Mobile IPv6 [4] and were\r\n   addressed by the mechanism known as Route Optimization, which is part\r\n   of the base protocol.  With Mobile IPv6, Route Optimization mostly\r\n|  improves the end-to-end path between the Mobile Node and the\r\n   Correspondent Node, with an additional benefit of reducing the load\r\n   of the Home Network, thus its name.\r\n\r\n\r\n(3) Appendix A,  Section A.4.3\r\n\r\nIn the last paragraph of Section A.4.3, at the bottom of page 21,\r\nRFC 4888 says:\r\n\r\n              [...].  This is particularly useful for a short-term\r\n   communications that may easily be retried if it fails.  [...]\r\n\r\nthe phrase\r\n            \"a short-term communications\"\r\n\r\nshould have been corrected to say either\r\n\r\n            \"a short-term communication\"\r\nor:\r\n            \"short-term communications\" .", "correct_text": "", "notes": "", "submit_date": "2007-09-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1040", "doc-id": "RFC4886", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   R13: NEMO support signaling over the bi-directional must be\r\n        minimized.", "correct_text": "  R13: NEMO support signaling over the bi-directional tunnel must be\r\n       minimized.\r\n", "notes": "word omission", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Thierry Ernst", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1041", "doc-id": "RFC4885", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2", "orig_text": "                                   _____\r\n                   _           _  |     |\r\n                  |_|-|  _  |-|_|-|     |-|        _\r\n                   _  |-|_|=|  \\  |_____| |  _  |-|_|\r\n                  |_|-|     |             |-|_|-|\r\n                                             \\  |\r\n                  MNNs   MR   AR  Internet   AR    HA\r\n\r\n              Figure 6: Multihoming: MR with multiple E-faces", "correct_text": "[not supplied]", "notes": "(1) The term 'E-faces' used in the figure caption does not appear\r\n    anywhere else in the text.  I suspect this is a sluggish\r\n    contraction of the defined term, 'egress interfaces', and IMHO,\r\n    it should better have been avoided in favor of the latter.\r\n\r\n(2) The artwork does *not* visually represent in any way the\r\n    essential point pretended (and perhaps intended) to be shown\r\n    in the figure: *multiple* egress interfaces of the MR.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2364", "doc-id": "RFC5035", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "On mid-page 6, Section 4 of RFC 5035 gives the following text as part\r\nof the new Section 5.4.1.1, Certificate Identification Version 2 :\r\n\r\n   The fields of ESSCertIDv2 are defined as follows:\r\n\r\n   hashAlgorithm\r\n      contains the identifier of the algorithm used in computing\r\n      certHash.\r\n\r\n   certHash\r\n      is computed over the entire DER-encoded certificate (including the\r\n|     signature) using the SHA-1 algorithm.\r\n\r\n   [...]\r\n\r\nThe core reason for the new Cert ID version is algorithm agility.\r\nTherefore, specifying SHA-1 here does not make any sense (and it\r\nwould turn the hashAlgorithm field useless) !\r\n\r\nThe 'certHash' field explanation should say:\r\n\r\n   certHash\r\n      is computed over the entire DER-encoded certificate (including the\r\n|     signature) using the algorithm specified by hashAlgorithm.\r\n                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^", "correct_text": "See above.", "notes": "See above.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2365", "doc-id": "RFC5035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "The first paragraph of Section 6, on page 8, says:\r\n\r\n   (Note: This section does not present new material.  This section\r\n|  contains the original contents of Section 5.4 in [ESS], which are\r\n   retained with minor changes in this specification to achieve\r\n   backwards compatibility.)\r\n\r\nThe section number given therein is wrong; it should be 5.4.1 :\r\n\r\n   (Note: This section does not present new material.  This section\r\n|  contains the original contents of Section 5.4.1 in [ESS], which are\r\n   retained with minor changes in this specification to achieve\r\n   backwards compatibility.)", "correct_text": "See above.", "notes": "See above.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2366", "doc-id": "RFC5035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "On top of page 7, Section 6 of RFC 5035 says:\r\n\r\n   The fields of ESSCertID are defined as follows:\r\n\r\n   certHash\r\n|     is computed over the entire DER-encoded certificate (including the\r\n|     signature).\r\n\r\n   [...]\r\n\r\nThis is the counterpart to the issue explained in errata 2634.\r\nIn the original Cert ID (v1) described here, the signature algorithm\r\nis fixed and should be specified explicitely as SHA-1 in the\r\ndescription of the certHash field :\r\n\r\n   certHash\r\n|     is computed over the entire DER-encoded certificate (including the\r\n|     signature), using the SHA-1 algorithm.\r\n                ^^^^^^^^^^^^^^^^^^^^^^^^^^^", "correct_text": "See above.", "notes": "See above.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4408", "doc-id": "RFC7401", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.4", "orig_text": "     .   +---------+  recv I2, send R2                       |         |\r\n   +---->| I1-SENT |--------------------------------------+  |         |\r\n   |     +---------+            +----------------------+  |  |         |\r\n   |          | recv R2,        | recv I2, send R2     |  |  |         |\r\n   |          v send I2         |                      v  v  v         |\r\n   |       +---------+          |                    +---------+       |\r\n   |  +--->| I2-SENT |----------+     +--------------| R2-SENT |<---+  |\r\n   |  |    +---------+                |              +---------+    |  |", "correct_text": "     .   +---------+  recv I2, send R2                       |         |\r\n   +---->| I1-SENT |--------------------------------------+  |         |\r\n   |     +---------+            +----------------------+  |  |         |\r\n   |          | recv R1,        | recv I2, send R2     |  |  |         |\r\n   |          v send I2         |                      v  v  v         |\r\n   |       +---------+          |                    +---------+       |\r\n   |  +--->| I2-SENT |----------+     +--------------| R2-SENT |<---+  |\r\n   |  |    +---------+                |              +---------+    |  |", "notes": "This state machine figure is informative.  Normative (correct) specification for the I1-SENT to I2-SENT state transition (due to recv R1 event) is in Section 6.8.", "submit_date": "2015-07-03", "submitter_name": "Tom Henderson", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1042", "doc-id": "RFC4856", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   [6]  Schulzrinne, H., Casner, S., Frederick, R. and V. Jacobson,\r\n        \"RTP:  A Transport Protocol for Real-Time Applications\", RFC\r\n        3550, July 2003.\r\n\r\n...\r\n\r\n   [8]  Schulzrinne, H., Casner, S., Frederick, R. and V. Jacobson,\r\n        \"RTP:  A Transport Protocol for Real-Time Applications\", RFC\r\n        3550, July 2003.", "correct_text": "   [6]  Schulzrinne, H., Casner, S., Frederick, R. and V. Jacobson,\r\n        \"RTP:  A Transport Protocol for Real-Time Applications\", STD\r\n        64, RFC 3550, July 2003.", "notes": "I find two Normative References, [6] and [8],\r\nthat *both* point to RFC 3550, the RTP specification.\r\n\r\nI first thought there might something have gone wrong,\r\ne.g., another ref. intended.  Yet, it doesn't look like\r\nthat from the quotations in the text, in Section 2.1.1\r\nand Section 4.\r\n\r\nFurthermore, the ref. tag [6] in Section 2.1.1 is embedded\r\nin an IANA registration template, where such ref. tags should\r\nbe avoided generally (as has been done in all similar cases\r\nin the text: in Sections 2.1.2 - 2.1.19 and 2.2.1).\r\nRemoving that spurious tag orphans ref. [6] in RFC 4856 entirely.\r\n\r\nPerhaps, it would have been better to add a formal ref. to RFC 3550\r\nat the very beginning of the RFC, in the first sentence of Section 1:\r\n\r\n   This document updates the media type registrations initially\r\n   specified in RFC 3555 for the Real-time Transport Protocol (RTP)\r\n   payload formats defined in the RTP Profile for Audio and Video\r\n   Conferences, RFC 3551 [1], as subtypes under the \"audio\" and \"video\"\r\n   media types.  [...]\r\n---                                                                vvvv\r\n   This document updates the media type registrations initially\r\n|  specified in RFC 3555 for the Real-time Transport Protocol (RTP) [8]\r\n   payload formats defined in the RTP Profile for Audio and Video\r\n   Conferences, RFC 3551 [1], as subtypes under the \"audio\" and \"video\"\r\n   media types.  [...]\r\n\r\nBTW:\r\n  The usual RFC references include the 'special series' names\r\n  as well; has there been a particular reason to omit \"STD64, \"\r\n  from the ref. to RFC 3550?\r\n  In RFC 4855, this observation also holds, for RFC 3550 and\r\n  for RFC 3551 (STD 65) as well.", "submit_date": "2007-03-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1043", "doc-id": "RFC4852", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "  [IPSEC]  Eastlake 3rd, D., \"Cryptographic Algorithm Implementation\r\n           Requirements for Encapsulating Security Payload (ESP) and\r\n           Authentication Header (AH)\", RFC 4305, December 2005.", "correct_text": "  [IPSEC]  Kent, S. and K. Seo, \"Security Architecture for the\r\n           Internet Protocol\", RFC 4301, December 2005.", "notes": "a) RFC 4305 has been obsoleted by RFC 4835, published two weeks\r\n   before RFC 4852.\r\n\r\nb) The single use of \"[IPSEC]\" in the text is totally unrelated to\r\n   specific cryptographic algorithms and their support in IPsec;\r\n   it refers to IPsec in general, as a framework to secure IPv6 ND.\r\n\r\nc) The primary reference for IPsec alway should be the latest IPsec\r\n   Architecture document, currently RFC 4301, and not a subordinate\r\n   document with recommendations for cryptographic algorithm support\r\n   like RFC 4305/4835, subject to relatively frequent updates.", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1044", "doc-id": "RFC4852", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "   [TSPB]   Blanchet, M., and F. Parent, \"IPv6 Tunnel Broker with the\r\n|           Tunnel Setup Protocol (TSP\", Work in Progress, August 2005.", "correct_text": "   [TSPB]   Blanchet, M., and F. Parent, \"IPv6 Tunnel Broker with the\r\n|           Tunnel Setup Protocol (TSP)\", Work in Progress, August 2005.", "notes": "Matching parenthesis missing.", "submit_date": "2007-05-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1045", "doc-id": "RFC4747", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "[in the DESCRIPTION of t11vfLocallyEnabledOperStatus, page 13]\r\n \r\n      DESCRIPTION\r\n           \"This object is used to report the operational status of\r\n            Virtual Fabric tagging on this Port.\r\n\r\n            SET operation   Description\r\n            --------------  -------------------------------------------\r\n            off(1)          Virtual Fabric tagging is disabled on this\r\n                            Port.\r\n\r\n            on(2)           Virtual Fabric tagging is enabled on this\r\n                            Port.\"", "correct_text": "       DESCRIPTION\r\n           \"This object is used to report the operational status of\r\n            Virtual Fabric tagging on this Port.\r\n\r\n            Operational-Status Description\r\n            ------------------ -------------------------------------\r\n            off(1)             Virtual Fabric tagging is disabled on\r\n                               this Port.\r\n\r\n            on(2)              Virtual Fabric tagging is enabled on\r\n                               this Port.\"", "notes": "--VERIFIER NOTES--\r\n\r\nt11vfLocallyEnabledOperStatus is a read-only object -- which means it\r\nit does not have \"SET operation\"s.  So, the problem is the line in\r\nt11vfLocallyEnabledOperStatus's DESCRIPTION shown above.\r\n\r\n[Aside: traditionally, \"operational status\" is always read-only, as in\r\nifOperStatus in RFC 2863.]", "submit_date": "2007-09-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Keith McCloghrie", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1046", "doc-id": "RFC4747", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "[in the DESCRIPTION of t11vfLocallyEnabledTable, page 12]\r\n \r\n       DESCRIPTION\r\n           \"A table for assigning and reporting operational status of\r\n            locally-enabled Virtual Fabric IDs to Ports.  The set of\r\n            Virtual Fabrics operational on the Port is the bit-wise\r\n            'AND' of the set of locally-enabled VF_IDs of this Port\r\n            and the locally-enabled VF_IDs of the attached Port.\"", "correct_text": "       DESCRIPTION\r\n           \"A table for reporting operational status of\r\n            locally-enabled Virtual Fabric IDs to Ports.  The set of\r\n            Virtual Fabrics operational on the Port is the bit-wise\r\n            'AND' of the set of locally-enabled VF_IDs of this Port\r\n            and the locally-enabled VF_IDs of the attached Port.\"", "notes": "--VERIFIER NOTES--\r\n\r\nThis phrase makes it seem like t11vfLocallyEnabledTable is \r\nread-write and needs to be changed.\r\n\r\nThe only reaon this table has a RowStatus object (and a StorageType) is \r\nso that a management application can limit the rows in the table to be \r\nonly those which it is interested in.  It doesn't allow the operational\r\nstatus to be changed.  Therefore the words \"assigning and\" need to be\r\nremoved, so that the definition is as above.\r\n", "submit_date": "2007-09-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Keith McCloghrie", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1047", "doc-id": "RFC4683", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A", "orig_text": "", "correct_text": "id-pkip\r\n FROM PKIXCRMF-2005\r\n  { iso(1) identified-organization(3) dod(6) internet(1) security(5)\r\n    mechanisms(5) pkix(7) id-mod(0) id-mod-crmf2005(36) }\r\n", "notes": "As exposed in Errata 2359 above, the OID 'id-pkip' used on page 19\r\nneeds to be IMPORTed from the PKIXCRMF-2005 ASN.1 module in\r\nAppendix B of RFC 4211 -- otherwise the PKIXSIM ASN.1 module\r\nin Appendix A of RFC 4683 will not compile.", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2383", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\n\r\n(12) extraneous word\r\n\r\nThe 3rd paragraph on page 18 (within Section 5.3) says:\r\n\r\n     If a very high security level is desired for long-term secrecy of\r\n     the negotiated Diffie-Hellman shared secret, longer hash values may\r\n     be deployed, such as SHA256, SHA384, or SHA512 provide, possibly in\r\n|    conjunction with stronger Diffie-Hellman groups.  This is left as\r\n     for further study.", "correct_text": "It should say:\r\n     \r\n|                                              [...].  This is left for\r\n     further study.", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1048", "doc-id": "RFC4553", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "There are two distinct \"PWE3 Pseudowire Type\" namespaces maintained\r\nby IANA:\r\n\r\n  - the 'L2TPv3 Pseudowire Types' subregistry of the\r\n    \"l2tp-parameters\" registry, rooted in RFC 3831, and\r\n\r\n  - the 'MPLS Pseudowire Type' subregistry of the \"pwe3-parameters\"\r\n    registry, rooted in RFC 4446.\r\n\r\nFrom the text of RFC 4553, it might be concluded that it was intended\r\nto make identical PW type allocations in both subregistries for SAToP,\r\nas has been done before in a similar manner in PWE3 RFCs dealing with\r\n\"<any> over MPLS PWs\" and \"<any> over L2TPv3 PWs\".\r\n\r\nBut the IANA Considerations (Section 11) of RFC 4553 simply state,\r\n\r\n   Allocation of PW types for the corresponding SAToP PWs is defined in\r\n   [RFC4446].\r\n\r\n... and RFC 4446 has only registered the following assignments for SAToP\r\nover MPLS:\r\n\r\n   0x0011  Structure-agnostic E1 over Packet                [SAToP]\r\n   0x0012  Structure-agnostic T1 (DS1) over Packet          [SAToP]\r\n   0x0013  Structure-agnostic E3 over Packet                [SAToP]\r\n   0x0014  Structure-agnostic T3 (DS3) over Packet          [SAToP]\r\n\r\nLooking into the two IANA registries quoted above, it can be seen\r\nthat indeed only \"pwe3-parameters\" contains these assignments,\r\nwhereas they are not listed in \"l2tp-parameters\".\r\n\r\nApparently, this has been overseen by all parties involved!\r\n\r\nIf this conclusion applies, you should urgently:\r\n\r\n(1) submit an Author's RFC Errata Note for RFC 4553 to the RFC-Ed\r\n    with an amendment to Section 11, e.g.:\r\n\r\n    IANA should perform the same assignemnts in the L2TPv3 Pseudowire\r\n    Type subregistry.\r\n\r\n(2) Request this action from IANA.", "correct_text": "", "notes": "\n --VERIFIER NOTES-- \n   The IANA registry has been updated to correctly reflect the assignment of PW types 0x0011 to 0x0014 to RFC4553. Signalling of TDM PWS over L2TPv3 was not specified until RFC5611, thus L2TPv3 PW type assignments were out of scope of RFC4553.\r\n\r\nThese IANA assignments would not be re-requested in a future version of this document and an implementer would not be misled by the existing IANA text, thus\r\nreject seems to be the most appropriate state for this erratum.", "submit_date": "2007-03-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1049", "doc-id": "RFC4340", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.6.8", "orig_text": "      The Ack\r\n      Ratio feature takes two-byte, non-zero integer values, so a\r\n      \"Change L(Ack Ratio, 0)\" option is never valid.", "correct_text": "      The Sequence Window feature takes six-byte, non-zero integer\r\n      values, with a minimum valid value of 32, so a \"Change\r\n      L(Sequence Window, 0)\" option is never valid.", "notes": "reported by Gerrit Renker", "submit_date": "2007-09-01", "submitter_name": "Sally Floyd", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1050", "doc-id": "RFC3605", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   rtcp-attribute =  \"a=rtcp:\" port  [nettype space addrtype space\r\n                         connection-address] CRLF", "correct_text": "   rtcp-attribute =  \"a=rtcp:\" port  [space nettype space addrtype space\r\n                         connection-address] CRLF\r\n", "notes": "There must be a space between \"port\" and \"nettype\".", "submit_date": "2007-09-13", "submitter_name": "Alexandre Machado", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1051", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "25.1", "orig_text": "    srvr           =  [ [ userinfo \"@\" ] hostport ]", "correct_text": "    srvr           =  [ [ userinfo ] hostport ]", "notes": "The character \"@\" should not appear in this rule since it already appears at the end of the rule \"userinfo\":\r\n\r\nuserinfo         =  ( user / telephone-subscriber ) [ \":\" password ] \"@\"\r\n\r\nAccording to the use of rule \"userinfo\" in other rules such as \"SIP-URI\" and \"SIPS-URI\", the correct place of character \"@\" is really at the end of rule \"userinfo\" and not in all other rules using it.", "submit_date": "2007-08-23", "submitter_name": "Alexandre Machado", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1052", "doc-id": "RFC4957", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 3\r\n\r\nWithin Section 3, the second paragraph on page 6 says:\r\n\r\n                               [...].  Therefore, there exist cases\r\n|  where IP-layer configuration may have to change even without the IP\r\n   layer receiving a link up notification.  [...]\r\n\r\nIt should perhaps better say, adding the article:\r\n\r\n                               [...].  Therefore, there exist cases\r\n|  where the IP-layer configuration may have to change even without the\r\n   IP layer receiving a link up notification.  [...]\r\n\r\nThe last paragraph of Section 3 says:\r\n                                                     vvvvvv\r\n|  The link-layer process leading to a link up event depend on the link\r\n   technology.  [...]\r\n\r\nIt should better say:\r\n                                                     vvvvvvv\r\n|  The link-layer process leading to a link up event depends on the link\r\n   technology.  [...]\r\n\r\n\r\n(2)  Section 4\r\n\r\nIn the first paragraph of Section 4 (on page 13), the RFC says:\r\n\r\n                                      [...].  In addition, wireless\r\n   networks such as 802.11 are susceptible to an attack called the \"Evil\r\n   Twin\" attack where an attacker sets up an Access Point with the same\r\n|  SSID as a legitimate one and gets the use to connect to the fake\r\n   access point instead of the real one.  [...]\r\n                                         ^^^\r\nThe tagged word 'use' apparently should be 'user' :\r\n\r\n                                      [...].  In addition, wireless\r\n   networks such as 802.11 are susceptible to an attack called the \"Evil\r\n   Twin\" attack where an attacker sets up an Access Point with the same\r\n|  SSID as a legitimate one and gets the user to connect to the fake\r\n   access point instead of the real one.  [...]\r\n                                         ^^^^\r\n\r\n(3)  Section 7.1\r\n\r\n- In Section 7.1 (on page 14), the first entry is apparently\r\n  truncated:\r\n\r\n                                                          vvvv\r\n|  [CDMA2K]        \"cdma2000 Wireless IP Network Standard\",  ,\r\n                   December 2000.", "correct_text": "", "notes": "", "submit_date": "2007-08-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1053", "doc-id": "RFC33", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "On page 3, it says:", "orig_text": "   It is important to remember that there are 356 links\r\n   in each direction and that no relationship among these is imposed by\r\n   the network.", "correct_text": "   It is important to remember that there are 256 links\r\n   in each direction and that no relationship among these is imposed by\r\n   the network.", "notes": "", "submit_date": "2007-08-13", "submitter_name": "Noel Chiappa", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1054", "doc-id": "RFC2453", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.4", "orig_text": "RIP implementations must also limit the rate which\r\nof triggered updates may be trandmitted.", "correct_text": "RIP implementations must also limit the rate at\r\nwhich triggered updates may be transmitted.", "notes": "", "submit_date": "2007-08-27", "submitter_name": "Nataraja Kumar Kota", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1055", "doc-id": "RFC4474", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   The verifier processes this certificate\r\n   in the usual ways, including checking that it has not expired, that\r\n   the chain is valid back to a trusted certification authority (CA),\r\n   and that it does not appear on revocation lists.  Once the\r\n   certificate is acquired, it MUST be validated following the\r\n   procedures in RFC 3280 [9].", "correct_text": "   The verifier processes this certificate in the usual ways,\r\n   including checking that it has not expired, that the chain is valid\r\n   back to a trusted certification authority (CA), and that it does\r\n   not appear on revocation lists.  To fetch certificate chains, the\r\n   certificate can use the SubjectInfoAccess and techniques such as\r\n   RFC 4387 can be used to retrieve the chain.  Once the certificate\r\n   is acquired, it MUST be validated following the procedures in RFC\r\n   3280 [9].", "notes": "insert a new sentence", "submit_date": "2007-07-12", "submitter_name": "Cullen Jennings", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1056", "doc-id": "RFC4474", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   This document introduces a new logical role for SIP entities called a\r\n   server.", "correct_text": "   This document introduces a new logical role for SIP entities called a\r\n   verifier.", "notes": "change server to verifier.", "submit_date": "2007-07-12", "submitter_name": "Cullen Jennings", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1057", "doc-id": "RFC4474", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.1", "orig_text": "   Content-Length: 147", "correct_text": "   Content-Length: ...", "notes": "There are two places where this occurs in section 10.1.", "submit_date": "2007-07-12", "submitter_name": "Cullen Jennings", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1058", "doc-id": "RFC4474", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "   Identity = \"Identity\" HCOLON signed-identity-digest\r\n   signed-identity-digest = LDQUOT 32LHEX RDQUOT", "correct_text": "   Identity = \"Identity\" HCOLON signed-identity-digest\r\n   signed-identity-digest = quoted-string", "notes": "", "submit_date": "2007-07-12", "submitter_name": "Cullen Jennings", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1064", "doc-id": "RFC4842", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.2.1.1", "orig_text": "   The 28 bits of the EBM are divided into groups of 4 bits, each\r\n   corresponding to a different VTG within the STS container.  All 4 \r\n   bits are used to indicate whether VT1.5 (T1) tributaries are carried\r\n   within a VTG.  The first 3 bits read from right to left are used to\r\n   indicate whether VT2 (E1) tributaries are carried within a VTG.  The\r\n   first 2 bits are used to indicate whether VT3 (DS1C) tributaries are    \r\n   carried within a VTG.", "correct_text": "   The 28 bits of the EBM are divided into groups of 4 bits, each\r\n   corresponding to a different VTG within the STS container.  All 4\r\n   bits are used to indicate whether VT1.5 (T1) tributaries are carried\r\n   within a VTG.  The 3 rightmost bits in a bit group are used to    \r\n   indicate whether VT2 (E1) tributaries are carried within a VTG.\r\n   The 2 rightmost bits in a bit group are used to indicate whether  \r\n   VT3 (DS1C) tributaries are carried within a VTG.", "notes": "   Replaced 'first 3 bits read from right to left' with '3 rightmost\r\n   bits' and similarly 'first 2 bits' with '2 rightmost bits'. The\r\n   new text avoids possible confusion with regards to the position\r\n   of the relevant bits.\r\n\r\nfrom pending", "submit_date": "2007-05-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1065", "doc-id": "RFC4842", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "B3[i]'(t) = B3[i](t-1) || B3[i]'(t-1) || B3[i](t) || B*3[i](t-1)", "correct_text": "B3[i]'(t) = B3[i](t-1) || B3[i]'(t-1) || B3[i](t) || B3*[i](t-1)", "notes": "   The notation B*3 was replaced with the notation B3* which is\r\n   consistent with the definitions.\r\n\r\nfrom pending", "submit_date": "2007-05-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1066", "doc-id": "RFC4842", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.2.3.2", "orig_text": "                     All 4 bits are used to indicate whether VC-11 (T1)    \r\n   tributaries are carried within a TUG-2.  The first 3 bits read right\r\n   to left are used to indicate whether VC-12 (E1) tributaries are\r\n   carried within a TUG-2.  The first bit is used to indicate that a\r\n   VC-2 is carried within a TUG-2.", "correct_text": "                     All 4 bits are used to indicate whether VC-11 (T1)\r\n   tributaries are carried within a TUG-2.  The rightmost 3 bits are \r\n   used to indicate whether VC-12 (E1) tributaries are carried within a\r\n   TUG-2.  The rightmost bit is used to indicate that a VC-2 is carried\r\n   within a TUG-2.", "notes": "   Replaced 'first 3 bits read from right to left' with '3 rightmost\r\n   bits' and similarly 'first 2 bits' with '2 rightmost bits'. The\r\n   new text avoids possible confusion with regards to the position\r\n   of the relevant bits.\r\n\r\nfrom pending", "submit_date": "2007-05-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1067", "doc-id": "RFC3126", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "   RevocationValues ::=  SEQUENCE {\r\n      crlVals           [0] SEQUENCE OF CertificateList     OPTIONAL,\r\n      ocspVals          [1] SEQUENCE OF BasicOCSPResponse   OPTIONAL,\r\n      otherRevVals      [2] OtherRevVals\r\n   }", "correct_text": "  RevocationValues ::=  SEQUENCE {\r\n     crlVals           [0] SEQUENCE OF CertificateList     OPTIONAL,\r\n     ocspVals          [1] SEQUENCE OF BasicOCSPResponse   OPTIONAL,\r\n     otherRevVals      [2] OtherRevVals                    OPTIONAL\r\n     }", "notes": "\"OPTIONAL\" is present in ETSI TS 101 733 V1.4.0", "submit_date": "2003-02-13", "submitter_name": "Petra Barzin", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1068", "doc-id": "RFC4918", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.4.7", "orig_text": "     If: (Not <urn:uuid:181d4fae-7d8c-11d0-a765-00a0c91e6bf2>\r\n     <urn:uuid:58f202ac-22cf-11d1-b12d-002035b29092>) ", "correct_text": "     If: (Not <urn:uuid:181d4fae-7d8c-11d0-a765-00a0c91e6bf2>\r\n          <urn:uuid:58f202ac-22cf-11d1-b12d-002035b29092>) ", "notes": "Indentation is relevant here. In the published form, the second line would be a separate (invalid) HTTP header, not a continuation line.", "submit_date": "2007-11-13", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1069", "doc-id": "RFC2396", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "   A URN differs from a URL in that it's primary purpose is persistent\r\n   labeling of a resource with an identifier.", "correct_text": "   A URN differs from a URL in that its primary purpose is persistent\r\n   labeling of a resource with an identifier.", "notes": "a possessive its", "submit_date": "2005-09-14", "submitter_name": "Dave Singer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1070", "doc-id": "RFC4237", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "vPIMRfc822Mailbox                A      IANA-ASSIGNED-OID.2.1\r\nvPIMTelephoneNumber              A      IANA-ASSIGNED-OID.2.2", "correct_text": "vPIMTelephoneNumber                   A  1.3.6.1.1.11.2.1  \r\nvPIMRfc822Mailbox                     A  1.3.6.1.1.11.2.2  \r\n", "notes": "", "submit_date": "2005-11-02", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1071", "doc-id": "RFC4237", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "Because ADPCM is a required format, the audio32kadpcm value must be\r\nlisted if this attribute is present.", "correct_text": "Because ADPCM is a required format, the audio/32kadpcm value must\r\nbe listed if this attribute is present.", "notes": "", "submit_date": "2005-11-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1072", "doc-id": "RFC4270", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   Hash algorithms are used by cryptographers in a variety of security\r\n   protocols, for a variety of purposes, at all levels of the Internet\r\n   protocol stack.  They are used because they have two security\r\n   properties: to be one way and collision free.", "correct_text": "   Hash algorithms are used by cryptographers in a variety of security\r\n   protocols, for a variety of purposes, at all levels of the Internet\r\n   protocol stack.  They are used because they have two security\r\n   properties: to be one-way and collision-free.\r\n", "notes": "Note the \" one way and collision free.\"  On the face of it, as plain\r\nEnglish, this is nonsense.  In cryptographic terminology, I believe\r\nthe correct expression is \" one-way and collision-free.\"", "submit_date": "2005-12-02", "submitter_name": "Henrik Levkowetz", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1260", "doc-id": "RFC5012", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "   Ma15.  Traceable resolution:  The mapping protocol SHOULD support the\r\n|     ability of the mapping client to be able to determine the entity\r\n      or entities that provided the emergency address resolution\r\n      information.\r\n", "correct_text": "   Ma15.  Traceable resolution:  The mapping protocol SHOULD support the\r\n|     ability of the mapping client to determine the entity or entities\r\n      that provided the emergency address resolution information.\r\n", "notes": "double replication :  ability to   <->  to be able to    :-)\n --VERIFIER NOTES-- \nPartial report repeated in errata 1263   ", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4687", "doc-id": "RFC6243", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "     typedef status-type {\r\n        description \"Interface status\";\r\n        type enumeration {\r\n          enum ok;\r\n          enum 'waking up';\r\n          enum 'not feeling so good';\r\n          enum 'better check it out';\r\n          enum 'better call for help';\r\n        }\r\n        default ok;\r\n     }\r\n", "correct_text": "     typedef status-type {\r\n        description \"Interface status\";\r\n        type enumeration {\r\n          enum up;\r\n          enum 'waking up';\r\n          enum 'not feeling so good';\r\n          enum 'better check it out';\r\n          enum 'better call for help';\r\n        }\r\n        default up;\r\n     }\r\n", "notes": "The examples in appendix A use the value 'up' and not the value 'ok'.", "submit_date": "2016-05-08", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1073", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1.3.4", "orig_text": "sip:user@host?Subject=foo&Call-Info=<http://www.foo.com>", "correct_text": "sip:user@host?Subject=foo&Call-Info=%3Chttp://www.foo.com%3E ", "notes": "[from pending]\r\nI would like to show you an error in RFC 3261. I've discussed in\r\nSIP-implementors mailing list too.\r\n\r\nin RFC 3261 page 44 par 8.1.3.4 there is an example of URI (contact URI)\r\nwith uri headers:\r\n\r\nsip:user@host?Subject=foo&Call-Info=<http://www.foo.com>\r\n\r\nI've noticed that URI header \"Call-Info\" has a value with characters not\r\nallowed in uri headers.\r\n\r\nThe BNF says that an header value must contain characters in   \r\nhnv-unreserved or unreserved or escaped but '<' and '>' are not in that set.\r\n\r\nThe right example should be the following:\r\nsip:user@host?Subject=foo&Call-Info=%3Chttp://www.foo.com%3E  ", "submit_date": "2005-12-15", "submitter_name": "Marco Ambu", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2026-03-18 01:39:05"}, {"errata_id": "1074", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "", "orig_text": "Section 2.2. says:\r\n\r\n  - Where there tradeoffs between the cost of acquiring data, the\r\n\r\nbut should probably say:\r\n\r\n  - Where there are tradeoffs between the cost of acquiring data, the\r\n\r\nSection 3.6.2. says:\r\n\r\n  For example, suppose a name server was processing a query with for\r\n\r\nbut should probably simply say:\r\n\r\n  For example, suppose a name server was processing a query for\r\n\r\nSection 4.3.4. misspells 'because':\r\n\r\n  This feature can be particularly important in a system which\r\n  implements naming short shorts that use search lists beacuse\r\n", "correct_text": "[see above]", "notes": "from pending", "submit_date": "2006-03-13", "submitter_name": "John Kristoff", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1075", "doc-id": "RFC4346", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.7", "orig_text": "PKCS #1 block type 0 or type 1, as described in [PKCS1A].", "correct_text": "PKCS #1 block type 1, as described in [PKCS1A].", "notes": "", "submit_date": "2006-02-26", "submitter_name": "Eric Rescorla", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1076", "doc-id": "RFC2595", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.4", "orig_text": "- A \"*\" wildcard character MAY be used as the left-most name\r\n     component in the certificate.  For example, *.example.com would\r\n     match a.example.com, foo.example.com, etc. but would not match\r\n     example.com.", "correct_text": "- A \"*\" wildcard character MAY be used for the left-most name\r\n     components in the certificate.  For example, *.example.com would\r\n     match a.example.com, foo.example.com, etc. but would not match\r\n     example.com or foo.bar.example.com.  *.*.example.com would match \r\n     foo.bar.example.com but would not match foo.example.com.", "notes": "It seems the original wording unintentionally disallowed certificates with *.* wildcards.\r\n\r\nAlexey: The submitted errata indicated that multiple wildcards were allowed (e.g., *.*.a.com matches foo.bar.a.com but not foo.com). This is too large of a change to make with an errata. The Security and Application ADs feel a consensus call would be required to make that change. Further, the current practice is to allow only one at the leftmost position. This is being documented in draft-saintandre-tls-server-id-check and its intended to be a BCP.", "submit_date": "2007-11-14", "submitter_name": "Joseph Shraibman", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1082", "doc-id": "RFC2142", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "MAILBOX        SERVICE             SPECIFICATIONS\r\n[...]\r\nUSENET         NNTP                [RFC977]\r\nNEWS           NNTP                Synonym for USENET\r\n", "correct_text": "MAILBOX        SERVICE             SPECIFICATIONS\r\n[...]\r\nUSENET         NNTP                [RFC1849]\r\nNEWSMASTER     NNTP                Synonym for USENET\r\n", "notes": "RFC 977 (obsoleted by RFC 3977) as well as RFC 1036 (obsoleted by RFC.ietf-usefor-usefor) don't specify r\u00f4le accounts USENET or NEWS.\r\n\r\nSection 1 states that \"Other protocols have defacto standards for well known mailbox names, such as <USENET@domain> for NNTP (see [RFC977])\", however the IETF USEFOR WG didn't add just as little as an informative reference to RFC 2142.\r\n\r\nIESG NOTE (2010-09-15): The foregoing text is corrupted, however the intent is clearly that [son-of-1036] is the proper reference for the USENET mailbox convention; note that in March 2010 [son-of-1036] was published as RFC 1849. --Peter Saint-Andre", "submit_date": "2007-11-20", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1083", "doc-id": "RFC822", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.4.", "orig_text": "                    Muhammed              atom\r\n                    .                     special\r\n                    (I am  the greatest)  comment\r\n                    Ali                   atom\r\n                    @                     atom\r\n                    (the)                 comment\r\n                    Vegas                 atom\r\n                    .                     special\r\n                    WBA                   atom", "correct_text": "                    Muhammed              atom\r\n                    .                     special\r\n                    (I am  the greatest)  comment\r\n                    Ali                   atom\r\n                    @                     special\r\n                    (the)                 comment\r\n                    Vegas                 atom\r\n                    .                     special\r\n                    WBA                   atom", "notes": "Apparently an artifact introduced by copying and incompletely adapting the example in RFC733, section III.B.e, which uses the atom \"at\" instead of the special \"@\".", "submit_date": "2007-11-21", "submitter_name": "Peter Backes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1084", "doc-id": "RFC1535", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Public vs...", "orig_text": "   it it is possible to \"intercept\" the search by matching against an", "correct_text": "   it is possible to \"intercept\" the search by matching against an", "notes": "", "submit_date": "2007-11-27", "submitter_name": "Justin Pryzby", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1085", "doc-id": "RFC1535", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Solution(s)", "orig_text": "starburst,astro.DESERTU.EDU,", "correct_text": "starburst.astro.DESERTU.EDU,\r\n\r\n(only 90% sure about this change)", "notes": "", "submit_date": "2007-11-27", "submitter_name": "Justin Pryzby", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1086", "doc-id": "RFC1725", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "Note that if the number of lines requested by the POP3\r\nclient is greater than than the number of lines in the\r\n                  ^^^^\r\nbody, then the POP3 server sends the entire message.", "correct_text": "Note that if the number of lines requested by the POP3\r\nclient is greater than the number of lines in the body,\r\nthen the POP3 server sends the entire message.", "notes": "Extraneous \"than\" in discussion of TOP command.", "submit_date": "2007-11-29", "submitter_name": "Joseph Bowbeer", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3584", "doc-id": "RFC952", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the header, it says:", "orig_text": "(none)", "correct_text": "Updates: RFC 952", "notes": "The text of RFC 1123 clearly states is updating RFC 952, but it is not called out as updating RFC 952.\r\n\r\nRFC 1123 section 2.1 states:\r\n\r\n\"The syntax of a legal Internet host name was specified in RFC-952 [DNS:4].  One aspect of host name syntax is hereby changed: the restriction on the first character is relaxed to allow either a letter or a digit.  Host software MUST support this more liberal syntax.\"\r\n", "submit_date": "2013-04-08", "submitter_name": "Matthew Gast", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1077", "doc-id": "RFC2818", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "    Matching is performed using the matching rules specified by\r\n   [RFC2459].  If more than one identity of a given type is present in\r\n   the certificate (e.g., more than one dNSName name, a match in any one\r\n   of the set is considered acceptable.) Names may contain the wildcard\r\n   character * which is considered to match any single domain name\r\n   component or component fragment. E.g., *.a.com matches foo.a.com but\r\n   not bar.foo.a.com. f*.com matches foo.com but not bar.com.", "correct_text": "   Matching is performed using the matching rules specified by\r\n   [RFC2459].  If more than one identity of a given type is present in\r\n   the certificate (e.g., more than one dNSName name), a match in any one\r\n   of the set is considered acceptable.  Names may contain the wildcard\r\n   character * which is considered to match any single domain name\r\n   component or component fragment. E.g., *.a.com matches foo.a.com but\r\n   not bar.foo.a.com and f*.com matches foo.com but not bar.com.", "notes": "The submitted errata indicated that multiple wildcards were allowed (e.g., *.*.a.com matches foo.bar.a.com but not foo.com).  This is too large of a change to make with an errata.  The Security and Application ADs feel a consensus call would be required to make that change.  Further, the current practice is to allow only one at the leftmost position.  This is being documented in draft-saintandre-tls-server-id-check-09 and its intended to be a BCP.\r\n\r\nThe errata does however correct a misplaced parentheses, and uses semi-colons to separate examples.", "submit_date": "2007-11-14", "submitter_name": "Joseph Shraibman", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1078", "doc-id": "RFC4409", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "NO-SOLICITING  Notification of no soliciting MAY       [Msg-Track]\r\n", "correct_text": "NO-SOLICITING  Notification of no soliciting MAY       [No-soliciting]\r\n\r\nAnd a new reference in Section 13:\r\n\r\n   [No-soliciting] C. Malamud, \"A No Soliciting Simple Mail Transfer\r\n                   Protocol (SMTP) Service Extension\", RFC 3865,\r\n                   September 2004.", "notes": "Section 13 says:\r\n\r\n   [Msg-Track]       Allman, E. and T. Hansen, \"SMTP Service Extension\r\n                     for Message Tracking\", RFC 3885, September 2004.\r\n\r\nWhich is not correct for NO-SOLICITING, which is defined in RFC 3865", "submit_date": "2006-06-26", "submitter_name": "Stephane Bortzmeyer", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1080", "doc-id": "RFC2938", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "(h.QGEOPMCF02P09QC016CEPU22FO)\r\nwhere\r\n(h.QGEOPMCF02P09QC016CEPU22FO) :-\r\n (| (& (ua-media=continuous) (dpi=200) (dpi-xyratio=200/100)\r\n       (color=Binary) (paper-size=B4) (image-coding=MH) )\r\n    (& (ua-media=continuous) (dpi=200) (dpi-xyratio=200/100)\r\n       (color=Binary) (paper-size=B4) (image-coding=MR) )\r\n    (& (ua-media=stationery) (dpi=300) (dpi-xyratio=1)\r\n       (color=Binary) (paper-size=A4) (image-coding=JBIG) )\r\n    (& (ua-media=transparency) (dpi=300) (dpi-xyratio=1)\r\n\r\n       (color=Binary) (paper-size=A4) (image-coding=JBIG) ) )\r\nend", "correct_text": "(h.U965DKFHDGT0344VRHI6OONIBS)\r\nwhere\r\n(h.U965DKFHDGT0344VRHI6OONIBS) :-\r\n (| (& (ua-media=continuous) (dpi=200) (dpi-xyratio=200/100)\r\n       (color=Binary) (paper-size=B4) (image-coding=MH) )\r\n    (& (ua-media=continuous) (dpi=200) (dpi-xyratio=200/100)\r\n       (color=Binary) (paper-size=B4) (image-coding=MR) )\r\n    (& (ua-media=stationery) (dpi=300) (dpi-xyratio=1)\r\n       (color=Binary) (paper-size=A4) (image-coding=JBIG) )\r\n    (& (ua-media=transparency) (dpi=300) (dpi-xyratio=1)\r\n       (color=Binary) (paper-size=A4) (image-coding=JBIG) ) )\r\nend", "notes": "In an MD5 test suite the other three RFC 2938 examples work as expected", "submit_date": "2007-11-19", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1081", "doc-id": "RFC1123", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "                        However, a valid host name can never\r\nhave the dotted-decimal form #.#.#.#, since at least the\r\nhighest-level component label will be alphabetic.", "correct_text": "                        However, a valid host name can never\r\nhave the dotted-decimal form #.#.#.#, since at least the\r\nhighest-level component label will be not all-numeric.", "notes": "RFC 3696 section 2 states: \"There is an additional rule that essentially requires that top-level domain names not be all-numeric.\"  The eleven IDN test TLDs created in September 2007 contain hyphen-minus as specified in the IDNA RFCs.\n --VERIFIER NOTES-- \n   This errata is in conflict with errata 1353.  A new I-D and community consensus are probably needed.", "submit_date": "2007-11-20", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1088", "doc-id": "RFC1939", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "Note that if the number of lines requested by the POP3\r\nclient is greater than than the number of lines in the\r\nbody, then the POP3 server sends the entire message. \r\n", "correct_text": "Note that if the number of lines requested by the POP3\r\nclient is greater than the number of lines in the body,\r\nthen the POP3 server sends the entire message. \r\n", "notes": "Extraneous \"than\" in discussion of TOP command.", "submit_date": "2007-11-29", "submitter_name": "Joseph Bowbeer", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1089", "doc-id": "RFC4566", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "IP6-multicast =       hexpart [ \"/\" integer ]\r\n\r\nIP6-address =         hexpart [ \":\" IP4-address ]\r\n\r\nhexpart =             hexseq / hexseq \"::\" [ hexseq ] /\r\n                              \"::\" [ hexseq ]\r\n\r\nhexseq  =             hex4 *( \":\" hex4)\r\n\r\nhex4    =             1*4HEXDIG", "correct_text": "IP6-multicast =       IP6-address [ \"/\" integer ]\r\n\r\nIP6-address =                                      6( h16 \":\" ) ls32\r\n                          /                       \"::\" 5( h16 \":\" ) ls32\r\n                          / [               h16 ] \"::\" 4( h16 \":\" ) ls32\r\n                          / [ *1( h16 \":\" ) h16 ] \"::\" 3( h16 \":\" ) ls32\r\n                          / [ *2( h16 \":\" ) h16 ] \"::\" 2( h16 \":\" ) ls32\r\n                          / [ *3( h16 \":\" ) h16 ] \"::\"    h16 \":\"   ls32\r\n                          / [ *4( h16 \":\" ) h16 ] \"::\"              ls32\r\n                          / [ *5( h16 \":\" ) h16 ] \"::\"              h16\r\n                          / [ *6( h16 \":\" ) h16 ] \"::\"\r\n\r\nh16 =                 1*4HEXDIG\r\n\r\nls32 =                ( h16 \":\" h16 ) / IP4-address", "notes": "Correct IPv6 ABNF.", "submit_date": "2007-12-06", "submitter_name": "Colin Perkins", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1090", "doc-id": "RFC4308", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "<none>", "correct_text": "2.4 Hash Algorithm for IKEv1\r\n\r\nThis document does not specify a hash algorithm to negotiate for IKEv1. Any hash algorithm can be used; SHA-1 is a common choice. No hash algorithm is needed for IKEv2.", "notes": "This was accidentally omitted during the discussion of this document.", "submit_date": "2007-12-08", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1261", "doc-id": "RFC5031", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2 (p.11)", "orig_text": "   [LOST]     Hardie, T., \"LoST: A Location-to-Service Translation\r\n|             Protocol\", Work in Progress, March 2007.\r\n", "correct_text": "   [LOST]     Hardie, T., \"LoST: A Location-to-Service Translation\r\n|             Protocol\", Work in Progress, August 2007.\r\n", "notes": "Outdated reference.\r\n\r\nThe publication of RFC 5012 and this RFC (5031) apparently has been\r\ncoordinated.  Hence, both RFCs should refer to the same version of\r\nthis particular work in progress.", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1091", "doc-id": "RFC5092", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "[URI-GEN] defines four forms of relative URLs: <inetwork-path>,\r\n<iabsolute-path>, <irelative-path>, and <ipath-empty>.  Their syntax\r\nis defined in Section 11.", "correct_text": "[URI-GEN] defines four forms of relative URLs: <network-path>,\r\n<absolute-path>, <relative-path>, and <path-empty>.  This document\r\nintroduces more restricted, IMAP-specific syntax corresponding to\r\nthese non-terminals, <inetwork-path>, <iabsolute-path>,\r\n<irelative-path>, and <ipath-empty>.  Their syntax is defined\r\nin Section 11.", "notes": "[URI-GEN] doesn't define <inetwork-path>, <iabsolute-path>, <irelative-path>, and <ipath-empty>, they are defined in the RFC 5092.\r\n\r\nThe issue was identified by Alfred H\u0153nes <ah@tr-sys.de>, he also suggested the new text.", "submit_date": "2007-12-10", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1092", "doc-id": "RFC5092", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In Appendix A, it says:", "orig_text": "/* Copyright (C) The IETF Trust (2007).  This version of\r\n   sample C code is part of RFC XXXX; see the RFC itself\r\n   for full legal notices.\r\n\r\n   Regarding this sample C code (or any portion of it), the authors\r\n   make no guarantees and are not responsible for any damage\r\n   resulting from its use.  The authors grant irrevocable permission\r\n   to anyone to use, modify, and distribute it in any way that does\r\n   not diminish the rights of anyone else to use, modify, and\r\n   distribute it, provided that redistributed derivative works do\r\n   not contain misleading author or version information.\r\n\r\n   Derivative works need not be licensed under similar terms.\r\n */", "correct_text": "/* Copyright (C) The IETF Trust (2007).  This version of\r\n   sample C code is part of RFC 5092; see the RFC itself\r\n   for full legal notices.\r\n\r\n   Regarding this sample C code (or any portion of it), the authors\r\n   make no guarantees and are not responsible for any damage\r\n   resulting from its use.  The authors grant irrevocable permission\r\n   to anyone to use, modify, and distribute it in any way that does\r\n   not diminish the rights of anyone else to use, modify, and\r\n   distribute it, provided that redistributed derivative works do\r\n   not contain misleading author or version information.\r\n\r\n   Derivative works need not be licensed under similar terms.\r\n */", "notes": "Changed RFC XXXX to RFC 5092.\r\n\r\nThe issue was reported by Alfred H\u0153nes <ah@tr-sys.de>.", "submit_date": "2007-12-10", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1093", "doc-id": "RFC2327", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "The following unit specification characters are allowed:\r\n\r\n                         d - days (86400 seconds)\r\n                        h - minutes (3600 seconds)\r\n                         m - minutes (60 seconds)", "correct_text": "The following unit specification characters are allowed:\r\n\r\n                         d - days (86400 seconds)\r\n                        h - hours (3600 seconds)\r\n                         m - minutes (60 seconds)", "notes": "I believe the author means \"h\" for \"hours\" and \"m\" for \"minutes\" unambiguously.", "submit_date": "2007-12-17", "submitter_name": "Jim Bell", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1094", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Table of Con", "orig_text": "A.2.  Sources Internal to the PIM-SM Domain ...................144", "correct_text": "A.2. Sources Internal to the PIM-SM Domain ...................144", "notes": "One extra space is listed after the heading and before the item.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1095", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 1. Per-(S,G) register state machine at a DR ................38", "correct_text": "Figure 1. Per-(S,G) register state machine at a DR ................39", "notes": "Figure 1 occurs on page 39, is listed as occurring on page 38.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1096", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 4. Downstream per-interface (S,G) state machine ............53", "correct_text": "Figure 4. Downstream per-interface (S,G) state machine ............54", "notes": "Figure 1 occurs on page 54, is listed as occurring on page 53.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1097", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 5. Downstream per-interface (S,G,rpt) state machine ........57", "correct_text": "Figure 5. Downstream per-interface (S,G,rpt) state machine ........58", "notes": "Figure 1 occurs on page 58, is listed as occurring on page 57.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1098", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 6. Upstream (*,*,RP) state machine .........................62", "correct_text": "Figure 6. Upstream (*,*,RP) state machine ......................63-64", "notes": "Figure 1 occurs on pages 63-64, is listed as occurring on page 62.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1099", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 7. Upstream (*,G) state machine ............................67", "correct_text": "Figure 7. Upstream (*,G) state machine .........................67-68", "notes": "Figure 1 occurs on pages 67-68, is listed as occurring on page 67.\n --VERIFIER NOTES-- \nList of figures is like a table of contents and only needs to point to the first page on which the figure can be found.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1100", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 8. Upstream (S,G) state machine ............................71", "correct_text": "Figure 8. Upstream (S,G) state machine .........................72-73", "notes": "Figure 1 occurs on page 72-73, is listed as occurring on page 71.\n --VERIFIER NOTES-- \nList of figures is like a table of contents and only needs to point to the first page on which the figure can be found.   ", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1101", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "List of Figu", "orig_text": "Figure 9. Upstream (S,G,rpt) state machine for triggered\r\n             messages ................................................77\r\n", "correct_text": "Figure 9. Upstream (S,G,rpt) state machine for triggered\r\n             messages ................................................78\r\n", "notes": "Figure 1 occurs on page 78, is listed as occurring on page 77.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3723", "doc-id": "RFC4967", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "Thus, the digit 2 is the first row, second column, and consists of\r\n   770Hz and 1209Hz frequencies mixed together.", "correct_text": "Thus, the digit 2 is the first row, second column, and consists of\r\n   697Hz and 1336Hz frequencies mixed together.", "notes": "As per the specification, DTMF is a 4 x 4 matrix with four row frequencies (697, 770, 852, 941 Hz) and four column frequencies (1209, 1336, 1477, 1633 Hz).\r\nThus correct matrix for digit 2 should be (697Hz, 1336Hz)", "submit_date": "2013-09-12", "submitter_name": "Gagandeep Singh", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1106", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.6", "orig_text": "inherited_olist(S,G,rpt) =\r\n           ( joins(*,*,RP(G)) (+) joins(*,G) (-) prunes(S,G,rpt) )\r\n       (+) ( pim_include(*,G) (-) pim_exclude(S,G))\r\n       (-) ( lost_assert(*,G) (+) lost_assert(S,G,rpt) )\r\n", "correct_text": "inherited_olist(S,G,rpt) =\r\n           ( ( ( joins(*,*,RP(G)) (+) joins(*,G) ) (-) prunes(S,G,rpt) )\r\n       (+) ( pim_include(*,G) (-) pim_exclude(S,G)) )\r\n       (-) ( lost_assert(*,G) (+) lost_assert(S,G,rpt) )\r\nOr:\r\ninherited_olist(S,G,rpt) =\r\n           ( ( joins(*,*,RP(G)) (+) joins(*,G) ) (-) prunes(S,G,rpt) )\r\n       (+) ( ( pim_include(*,G) (-) pim_exclude(S,G))\r\n       (-) ( lost_assert(*,G) (+) lost_assert(S,G,rpt) ) )\r\nOr:\r\ninherited_olist(S,G,rpt) =\r\n           ( ( joins(*,*,RP(G)) (+) ( joins(*,G) (-) prunes(S,G,rpt) ) )\r\n       (+) ( pim_include(*,G) (-) pim_exclude(S,G)) )\r\n       (-) ( lost_assert(*,G) (+) lost_assert(S,G,rpt) )\r\nOr:\r\ninherited_olist(S,G,rpt) =\r\n           ( joins(*,*,RP(G)) (+) ( joins(*,G) (-) prunes(S,G,rpt) ) )\r\n       (+) ( ( pim_include(*,G) (-) pim_exclude(S,G))\r\n       (-) ( lost_assert(*,G) (+) lost_assert(S,G,rpt) ) )\r\n", "notes": "Left or right associativity is not established at the beginning of this document, so it is necessary to clarify which operations happens first.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1107", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.6", "orig_text": "   inherited_olist(S,G) =\r\n       inherited_olist(S,G,rpt) (+)\r\n       joins(S,G) (+) pim_include(S,G) (-) lost_assert(S,G)\r\n", "correct_text": "   inherited_olist(S,G) =\r\n       inherited_olist(S,G,rpt) (+)\r\n       joins(S,G) (+) ( pim_include(S,G) (-) lost_assert(S,G) )\r\nOr:\r\n   inherited_olist(S,G) =\r\n       ( inherited_olist(S,G,rpt) (+)\r\n       joins(S,G) (+) pim_include(S,G) ) (-) lost_assert(S,G)\r\nOr:\r\n   inherited_olist(S,G) =\r\n       inherited_olist(S,G,rpt) (+)\r\n       ( ( joins(S,G) (+) pim_include(S,G) ) (-) lost_assert(S,G) )\r\n", "notes": "Left or right associativity is not established at the beginning of this document, so it is necessary to clarify which operations happens first.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1108", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Second, we check to see if the SPTbit should be set because we've now\r\n   switched from the RP tree to the SPT.\r\n", "correct_text": "See notes", "notes": "The dependent clause does not follow from the independent clause.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1109", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Data-triggered PIM-Assert messages sent from the above forwarding\r\n   code should be rate-limited in a implementation-dependent manner.\r\n", "correct_text": "Data-triggered PIM-Assert messages sent from the above forwarding\r\n   code should be rate-limited in an implementation-dependent manner.\r\n", "notes": "Misspelling", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1110", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "void\r\n     CheckSwitchToSpt(S,G) {\r\n       if ( ( pim_include(*,G) (-) pim_exclude(S,G)\r\n              (+) pim_include(S,G) != NULL )\r\n            AND SwitchToSptDesired(S,G) ) {\r\n", "correct_text": "void\r\n     CheckSwitchToSpt(S,G) {\r\n       if ( ( ( pim_include(*,G) (-) pim_exclude(S,G) )\r\n              (+) pim_include(S,G) != NULL )\r\n            AND SwitchToSptDesired(S,G) ) {\r\n\r\nOr:\r\n\r\nvoid\r\n     CheckSwitchToSpt(S,G) {\r\n       if ( ( pim_include(*,G) (-) ( pim_exclude(S,G)\r\n              (+) pim_include(S,G) != NULL ) )\r\n            AND SwitchToSptDesired(S,G) ) {\r\n", "notes": "Left or right associativity is not established at the beginning of this document, so it is necessary to clarify which operations happens first.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1111", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.2", "orig_text": "3.  Noone wants the packet on the RP tree.", "correct_text": "3.  No one wants the packet on the RP tree.", "notes": "Misspelling", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1112", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "     We note that some implementations do not send Hello messages on\r\n     point-to-point interfaces.  This is non-compliant behavior.  A\r\n     compliant PIM router MUST send Hello messages, even on point-to-\r\n     point interfaces.\r\n", "correct_text": "   We note that some implementations do not send Hello messages on\r\n   point-to-point interfaces.  This is non-compliant behavior.  A\r\n   compliant PIM router MUST send Hello messages, even on point-to-\r\n   point interfaces.\r\n", "notes": "It is not clear why this text is indented.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1329", "doc-id": "RFC1042", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Frame Format", "orig_text": "      The minimum packet size used with ARP is 24 octets, which is 20\r\n      (ARP with 2 octet hardware addresses and 4 octet protocol\r\n      addresses) + 8 (LLC+SNAP header) = 24 octets (not including the\r\n      MAC header).\r\n", "correct_text": "      The minimum packet size used with ARP is 28 octets, which is 20\r\n      (ARP with 2 octet hardware addresses and 4 octet protocol\r\n      addresses) + 8 (LLC+SNAP header) = 28 octets (not including the\r\n      MAC header).\r\n", "notes": "", "submit_date": "2008-02-25", "submitter_name": "Mark Taunton", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1330", "doc-id": "RFC1042", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Frame Format", "orig_text": "      In typical situations, the packet size used with ARP is 32 octets,\r\n      which is 28 (ARP with 6 octet hardware addresses and 4 octet\r\n      protocol addresses) + 8 (LLC+SNAP header) = 32 octets (not\r\n      including the MAC header).\r\n\r\n", "correct_text": "      In typical situations, the packet size used with ARP is 36 octets,\r\n      which is 28 (ARP with 6 octet hardware addresses and 4 octet\r\n      protocol addresses) + 8 (LLC+SNAP header) = 36 octets (not\r\n      including the MAC header).\r\n\r\n", "notes": "Further instance of arithmetic error, previously reported in the preceding paragraph.", "submit_date": "2008-02-25", "submitter_name": "Mark Taunton", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7667", "doc-id": "RFC5662", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "   /// /*\r\n   ///  * Program number is in the transient range since the client\r\n   ///  * will assign the exact transient program number and provide\r\n   ///  * that to the server via the SETCLIENTID operation.\r\n   ///  */\r\n   /// program NFS4_CALLBACK {\r\n", "correct_text": "   /// /*\r\n   ///  * Program number is in the transient range since the client\r\n   ///  * will assign the exact transient program number and provide\r\n   ///  * that to the server via the CREATE_SESSION or\r\n   ///  * BACKCHANNEL_CTL operations.\r\n   ///  */\r\n   /// program NFS4_CALLBACK {\r\n", "notes": "SETCLIENTID operation is NFSv4.0 specific operation. NFSv4.1 uses CREATE_SESSION or BACKCHANNEL_CTL operation for setting backchannel parameters.", "submit_date": "2023-10-06", "submitter_name": "Pali Roh\u00e1r", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "1113", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.1/6.1.1", "orig_text": "   The Generation_Identifier (GenID) Option SHOULD be included in all\r\n   Hello messages.  The GenID option contains a randomly generated\r\n   32-bit value that is regenerated each time PIM forwarding is started\r\n   or restarted on the interface, including when the router itself\r\n   restarts.  When a Hello message with a new GenID is received from a\r\n   neighbor, any old Hello information about that neighbor SHOULD be\r\n   discarded and superseded by the information from the new Hello\r\n   message.  This may cause a new DR to be chosen on that interface.\r\n", "correct_text": "", "notes": "Section 6.1.1, item 2 only considers the possibility of falsified Designated Router election results, it does not consider state thrash due to falsified Hello messages with new Generation_Identifier Options.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1114", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "   Before an interface goes down or changes primary IP address, a Hello\r\n   message with a zero HoldTime should be sent immediately (with the old\r\n   IP address if the IP address changed).  This will cause PIM neighbors\r\n   to remove this neighbor (or its old IP address) immediately.  After\r\n   an interface has changed its IP address, it MUST send a Hello message\r\n   with its new IP address.  If an interface changes one of its\r\n   secondary IP addresses, a Hello message with an updated Address_List\r\n   option and a non-zero HoldTime should be sent immediately.  This will\r\n   cause PIM neighbors to update this neighbor's list of secondary\r\n   addresses immediately.\r\n", "correct_text": "", "notes": "Section 6.1.1, item 2 only considers the possibility of falsified Designated Router election results, it does not consider forged Hello messages with zero HoldTime or with altered Address_List options.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1115", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "     We note that some PIM implementations do not send Hello messages on\r\n     point-to-point interfaces and thus cannot perform DR election on\r\n     such interfaces.  This is non-compliant behavior.  DR election MUST\r\n     be performed on ALL active PIM-SM interfaces.\r\n", "correct_text": "See notes.", "notes": "Are the different references to PIM and PIM-SM intentional?  Does PIM-DM enter into this?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1116", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.3", "orig_text": "In addition to the information recorded for the DR Election, the\r\n   following per neighbor information is obtained from the LAN Prune\r\n   Delay Hello option:\r\n", "correct_text": "In addition to the information recorded for the DR Election, the\r\n   following per-neighbor information is obtained from the LAN Prune\r\n   Delay Hello option:\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1117", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.3", "orig_text": "   When all routers on a link are in a position to negotiate a\r\n   Propagation Delay different from the default, the largest value from\r\n   those advertised by each neighbor is chosen.  The function for\r\n   computing the Effective_Propagation_Delay of interface I is:\r\n\r\n\u2026\r\n\r\n   When all routers on a link are in a position to negotiate an Override\r\n   Interval different from the default, the largest value from those\r\n   advertised by each neighbor is chosen.  The function for computing\r\n   the Effective Override Interval of interface I is:\r\n", "correct_text": "   When all routers on a link are in a position to negotiate a\r\n   Propagation Delay different from the default, the largest value from\r\n   those advertised by each neighbor is chosen.  The function for\r\n   computing the Effective Propagation Delay of interface I is:\r\n\r\n\u2026\r\n\r\n   When all routers on a link are in a position to negotiate an Override\r\n   Interval different from the default, the largest value from those\r\n   advertised by each neighbor is chosen.  The function for computing\r\n   the Effective Override Interval of interface I is:\r\n", "notes": "Inconsistency.  Either \u201cEffective_Override_Interval\u201d should be used or \u201cEffective Override Interval\u201d should be used.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1118", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.1", "orig_text": "+------------++-------------+-------------+--------------+-------------+\r\n|            ||-> J state   | -> PP state | -            | -> NI state |\r\n|Join (J)    ||restart      | start Prune-|              |             |\r\n|            ||Expiry Timer | Pending     |              |             |\r\n|            ||             | Timer       |              |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n|Prune-      ||-> J state   | -> PP state | -> NI state  | -> NI state |\r\n|Pending (PP)||restart      |             | Send Prune-  |             |\r\n|            ||Expiry Timer |             | Echo(*,*,RP) |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n", "correct_text": "", "notes": "In state Join, when event \u201cReceive Prune (*,*,RP)\u201d occurs and also in state Prune Pending, when event \u201cExpiry Timer Expires\u201d occurs, a situation occurs where an interface will be pruned possibly more rapidly than expected as in J state, when prune is received, PP state is entered and Prune-pending timer is started, but Expiry timer is not reset/halted/etc and this does have an effect in PP state.  This issue is not handled in the detailed description on page 48.  Is this intentional?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2247", "doc-id": "RFC4567", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "key-mgmt-spec = \"prot\" \"=\" KMPID \";\" [\"uri\" \"=\" %22 URI %22 \";\"] ", "correct_text": "key-mgmt-spec = \"prot\" \"=\" KMPID \";\" [\"uri\" \"=\" %22 URI %22 \";\"] [\"data\" \"=\" %22 base64 %22 \";\"]", "notes": "There is an inconsistency between the ABNF for key-mgmt-spec on page 6 and the two SETUP examples on top of page 21.  In both examples a field data=\"...\" is present in the keymgmt header, but the ABNF on page 6 does not allow for it.  The suggested correction solves the inconsistency.\r\n\r\n\r\n--- From reviewer Dale Worley --\r\nThe grammar needs additional work because key-mgmt-spec is not\r\ncorrectly attached to the original ABNF, and the production provided\r\ndoes not allow the parameters to appear in any order.  In addition,the\r\nterminating CRLF is not shown in the ABNF.  A more correct version is:\r\n\r\n  extension-header =/ KeyMgmt\r\n(Is this the correct nonterminal to extend?  RFC 4567 section 3.2 does\r\nnot make it clear what sort of header \"KeyMgmt\" is.)\r\n\r\n  KeyMgmt = \"KeyMgmt\" \":\" key-mgmt-spec 0*(\",\" key-mgmt-spec) CRLF\r\n\r\n  key-mgmt-spec = \"prot\" \"=\" KMPID 0*(key-mgmt-spec-param)\r\n\r\n  key-mgmt-spec-param = \";\" \"uri\" \"=\" %22 URI %22\r\n                      / \";\" \"data\" \"=\" %22 base64 %22\r\n\r\nThe whole situation is troublesome because the RFC does not make it\r\nclear to what degree the 'prot', 'uri', and 'data' elements are\r\nrequired to be in a certain order.  Given that many headers are copied\r\nfrom HTTP, the implication is that the first element (that is,\r\n\"prot=KMPID\") must appear in the first position, but the following\r\nelements (\"uri\" and \"data\") may be in any order.  But current practice\r\nmay have de-facto standardized a different rule.  We need some input\r\nfrom someone who is familiar with current practice.\r\n\r\n------\r\nThe MMUSIC WG list was polled and the responses were that allowing these parameters to appear in any order was an acceptable technical solution.\r\n", "submit_date": "2010-05-06", "submitter_name": "Riccardo Bernardini", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1119", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.1", "orig_text": "          The action \"Send PruneEcho(*,*,RP)\" is triggered when the\r\n          router stops forwarding on an interface as a result of a\r\n          prune.  A PruneEcho(*,*,RP) is simply a Prune(*,*,RP) message\r\n          sent by the upstream router on a LAN with its own address in\r\n          the Upstream Neighbor Address field.  Its purpose is to add\r\n          additional reliability so that if a Prune that should have\r\n          been overridden by another router is lost locally on the LAN,\r\n          then the PruneEcho may be received and cause the override to\r\n          happen.  A PruneEcho(*,*,RP) need not be sent on an interface\r\n          that contains only a single PIM neighbor during the time this\r\n          state machine was in Prune-Pending state.\r\n", "correct_text": "", "notes": "Forged PruneEcho messages could operate as a form of Denial-of-Service (effectively the same as a Prune(*,*,RP) in this context).  The issue is resolved by using AH, but it is not listed as one of the forged message types in section 6.1.1.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1120", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.5.2", "orig_text": "+------------++--------------------------------------------------------+\r\n|            ||                         Event                          |\r\n|            ++-------------+--------------+-------------+-------------+\r\n|Prev State  ||Receive      | Receive      | Prune-      | Expiry Timer|\r\n|            ||Join(*,G)    | Prune(*,G)   | Pending     | Expires     |\r\n|            ||             |              | Timer       |             |\r\n|            ||             |              | Expires     |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|            ||-> J state   | -> NI state  | -           | -           |\r\n|NoInfo (NI) ||start Expiry |              |             |             |\r\n|            ||Timer        |              |             |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|            ||-> J state   | -> PP state  | -           | -> NI state |\r\n|Join (J)    ||restart      | start Prune- |             |             |\r\n|            ||Expiry Timer | Pending      |             |             |\r\n|            ||             | Timer        |             |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|Prune-      ||-> J state   | -> PP state  | -> NI state | -> NI state |\r\n|Pending (PP)||restart      |              | Send Prune- |             |\r\n|            ||Expiry Timer |              | Echo(*,G)   |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n", "correct_text": "+------------++--------------------------------------------------------+\r\n|            ||                         Event                          |\r\n|            ++-------------+--------------+-------------+-------------+\r\n|Prev State  ||Receive      | Receive      | Prune-      | Expiry Timer|\r\n|            ||Join(*,G)    | Prune(*,G)   | Pending     | Expires     |\r\n|            ||             |              | Timer       |             |\r\n|            ||             |              | Expires     |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|            ||-> J state   | -            | -           | -           |\r\n|NoInfo (NI) ||start Expiry |              |             |             |\r\n|            ||Timer        |              |             |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|            ||-> J state   | -> PP state  | -           | -> NI state |\r\n|Join (J)    ||restart      | start Prune- |             |             |\r\n|            ||Expiry Timer | Pending      |             |             |\r\n|            ||             | Timer        |             |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|Prune-      ||-> J state   |              | -> NI state | -> NI state |\r\n|Pending (PP)||restart      |              | Send Prune- |             |\r\n|            ||Expiry Timer |              | Echo(*,G)   |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n", "notes": "In NoInfo state and in the Prune Pending state, upon receipt of the \u201cReceive Prune(*,G)\u201d event, there is an explicit state transition back to its own state.  These seem redundant.\n --VERIFIER NOTES-- \nIt is perfectly possible to parse this with a basic knowledge of the protocol states and events.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1121", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.4", "orig_text": "     Prune-Pending (PP)\r\n          The router has received a Prune(S,G,rpt) on this interface\r\n          from a downstream neighbor and is waiting to see whether the\r\n          prune will be overridden by another downstream router.  For\r\n          forwarding purposes, the Prune-Pending state functions exactly\r\n          like the NoInfo state.\r\n", "correct_text": "", "notes": "If a single Prune(S,G,rpt) stops forwarding, then traffic can be interrupted even when it is still needed.  There is a random delay between 0 and Effective_Override_Interval(I) (0 \u2013 2.5 seconds by specification defaults) in which traffic stops until it is overridden and traffic starts flowing again.  This appears to be an optimization for efficiency vs. reliability.  I believe that this should be noted and made into an optional optimization.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1122", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.4", "orig_text": "   On unnumbered interfaces on point-to-point links, the router's\r\n   address should be the same as the source address it chose for the\r\n   Hello message it sent over that interface.  However, on point-to-\r\n   point links we also recommend that PIM Join/Prune messages with an\r\n   upstream neighbor address field of all zeros are also accepted.\r\n", "correct_text": "   On unnumbered interfaces on point-to-point links, the router's\r\n   address SHOULD be the same as the source address it chose for the\r\n   Hello message it sent over that interface.  However, on point-to-\r\n   point links we also RECOMMEND that PIM Join/Prune messages with an\r\n   upstream neighbor address field of all zeros are also accepted.\r\n", "notes": "RFC 2119 keywords are not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1123", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.4", "orig_text": "   these state transitions in this state machine must not occur,\r\n   although seeing such a packet may cause state transitions in other\r\n   state machines.\r\n", "correct_text": "   these state transitions in this state machine MUST NOT occur,\r\n   although seeing such a packet may cause state transitions in other\r\n   state machines.\r\n", "notes": "RFC 2119 keywords are not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2248", "doc-id": "RFC3552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5.1", "orig_text": "modifying with the kernel or installing new drivers.  ", "correct_text": "modifying the kernel or installing new drivers.  ", "notes": "Correct poor grammar.", "submit_date": "2010-05-07", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Danny McPherson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1144", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "   Local membership is the result of the local source-specific\r\n   membership mechanism (such as IGMP version 3) running on that\r\n   interface and specifying that this particular source should be\r\n   included.  As stored here, this state is the resulting state after\r\n   any IGMPv3 inconsistencies have been resolved.  It need not be kept\r\n   if this router is not the DR on that interface unless this router won\r\n   a (S,G) assert on this interface for this group.\r\n", "correct_text": "   Local membership is the result of the local source-specific\r\n   membership mechanism (such as IGMP version 3) running on that\r\n   interface and specifying that this particular source should be\r\n   included.  As stored here, this state is the resulting state after\r\n   any IGMPv3 inconsistencies have been resolved.  It need not be kept\r\n   if this router is not the DR on that interface unless this router won\r\n   an (S,G) assert on this interface for this group.\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1145", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.4", "orig_text": "  However, we\r\n   recommend storing this information if possible, as it reduces latency\r\n   converging to stable operating conditions after a failure causing a\r\n   change of DR.  This information is used by the pim_include(S,G) macro\r\n   described in Section 4.1.6.\r\n", "correct_text": "  However, we\r\n   RECOMMEND storing this information if possible, as it reduces latency\r\n   converging to stable operating conditions after a failure causing a\r\n   change of DR.  This information is used by the pim_include(S,G) macro\r\n   described in Section 4.1.6.\r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6848", "doc-id": "RFC4291", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "Note: [EUI-64] actually defines 0xFF and 0xFF as the bits to be\r\n         inserted to create an IEEE EUI-64 identifier from an IEEE MAC-\r\n         48 identifier.", "correct_text": "Note: [EUI-64] actually defines 0xFF and 0xFE as the bits to be\r\n         inserted to create an IEEE EUI-64 identifier from an IEEE MAC-\r\n         48 identifier.", "notes": "Just seems to be a typo\r\n\r\n-- Verifier note --\r\nThis is indeed a minor typo as the rest of the RFC is clear that 0xFF and 0xFE are used.", "submit_date": "2022-02-12", "submitter_name": "Fabrice Verrac", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2022-04-06 05:22:32"}, {"errata_id": "1124", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.4", "orig_text": "          The compound Join/Prune message contains a Prune(S,G,rpt).\r\n\r\n          The (S,G,rpt) downstream state machine on interface I\r\n          transitions back to the Prune state.  The Expiry Timer (ET) is\r\n          restarted, set to maximum of its current value and the\r\n          HoldTime from the triggering Join/Prune message.\r\n", "correct_text": "          A compound Join/Prune message containing a Prune(S,G<rpt) is \r\n          received on interface I with its Upstream Neighbor Address \r\n          set to the router\u2019s primary IP address on I.\r\n\r\n          The (S,G,rpt) downstream state machine on interface I\r\n          transitions back to the Prune state.  The Expiry Timer (ET) is\r\n          restarted, set to maximum of its current value and the\r\n          HoldTime from the triggering Join/Prune message.\r\n", "notes": "This section does not consider \u201cUpstream Neighbor Address\u201d as does \u201cReceive Prune(S,G,rpt)\u201d in \u201cTransitions from Prune State\u201d on page 60 or \u201cReceive Prune(S,G,rpt)\u201d in \u201cTransitions from Prune-Pending State\u201d on page 59.  Is that information not important in this state transition?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1125", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.5.7", "orig_text": "+----------------------------------------------------------------------+\r\n|                         In Joined (J) State                          |\r\n+-----------------+-----------------+-----------------+----------------+\r\n| Timer Expires   | See Join(S,G)   | See Prune(S,G)  | See Prune      |\r\n|                 | to RPF'(S,G)    | to RPF'(S,G)    | (S,G,rpt) to   |\r\n|                 |                 |                 | RPF'(S,G)      |\r\n+-----------------+-----------------+-----------------+----------------+\r\n| Send            | Increase Join   | Decrease Join   | Decrease Join  |\r\n| Join(S,G); Set  | Timer to        | Timer to        | Timer to       |\r\n| Join Timer to   | t_joinsuppress  | t_override      | t_override     |\r\n| t_periodic      |                 |                 |                |\r\n+-----------------+-----------------+-----------------+----------------+\r\n", "correct_text": "+----------------------------------------------------------------------+\r\n|                         In Joined (J) State                          |\r\n+-----------------+-----------------+-----------------+----------------+\r\n|  Event          | Timer Expires   | See Join(S,G)   | See Prune(S,G)  |\r\n|                 |                 | to RPF'(S,G)    | to RPF'(S,G)    |\r\n|                 |                 |                 |\r\n+-----------------+-----------------+-----------------+----------------+\r\n|  Action         | Send            | Increase Join   | Decrease Join   |\r\n|                 | Join(S,G); Set  | Timer to        | Timer to        |\r\n|                 | Join Timer to   | t_joinsuppress  | t_override      |\r\n|                 | t_periodic      |                 |                 |\r\n+-----------------+-----------------+-----------------+----------------+\r\n", "notes": "The remaining portions would be inserted into the left portion of the remaining table on Page 73 and the two overflowing items in that table would go into a continuation beneath the table on Page 73.\n --VERIFIER NOTES-- \nIt is perfectly possible to parse this with a basic knowledge of the protocol states and events.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1126", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5.7", "orig_text": "See pages 72-76", "correct_text": "See notes", "notes": "The figure given on pages 72-73 lists additional state changes, the last three of which are \u201cRPF\u2019(S,G) changes not due to an Assert\u201d, \u201cRPF\u2019(S,G) GenID changes\u201d, \u201cRPF\u2019(S,G) changes due to an Assert\u201d, but the order given in the descriptions after the diagram on pages 74-76 lists the last three as: \u201cRPF\u2019(S,G) changes due to an Assert\u201d, \u201cRPF\u2019(S,G) changes not due to an Assert\u201d, and \u201cRPF\u2019(S,G) GenID changes.\u201d", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1127", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5.9", "orig_text": "See pages 78-80", "correct_text": "See notes", "notes": "The figure given on page 78 lists additional state changes.  The order given does not match the order given in the detailed descriptions that follow on pages 79-80.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1128", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.6.1", "orig_text": "CouldAssert(S,G,I) =\r\n     SPTbit(S,G)==TRUE\r\n     AND (RPF_interface(S) != I)\r\n     AND (I in ( ( joins(*,*,RP(G)) (+) joins(*,G) (-) prunes(S,G,rpt) )\r\n                 (+) ( pim_include(*,G) (-) pim_exclude(S,G) )\r\n                 (-) lost_assert(*,G)\r\n                 (+) joins(S,G) (+) pim_include(S,G) ) )\r\n", "correct_text": "Too many possibilities to list.", "notes": "Left or right associativity is not established at the beginning of this document, so it is necessary to clarify which operation happens first: (+) or (-).", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1129", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6.1", "orig_text": "     An (S,G) data packet arrives on interface I, AND\r\n          CouldAssert(S,G,I)==TRUE\r\n          An (S,G) data packet arrived on an downstream interface that\r\n          is in our (S,G) outgoing interface list.  We optimistically\r\n          assume that we will be the assert winner for this (S,G), and\r\n          so we transition to the \"I am Assert Winner\" state and perform\r\n          Actions A1 (below), which will initiate the assert negotiation\r\n          for (S,G).\r\n", "correct_text": "     An (S,G) data packet arrives on interface I, AND\r\n          CouldAssert(S,G,I)==TRUE\r\n          An (S,G) data packet arrived on a downstream interface that\r\n          is in our (S,G) outgoing interface list.  We optimistically\r\n          assume that we will be the assert winner for this (S,G), and\r\n          so we transition to the \"I am Assert Winner\" state and perform\r\n          Actions A1 (below), which will initiate the assert negotiation\r\n          for (S,G).\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1130", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6.1", "orig_text": "     A4:  Send AssertCancel(S,G).\r\n          Delete assert info (AssertWinner(S,G,I) and\r\n          AssertWinnerMetric(S,G,I) will then return their default\r\n          values).\r\n\r\n     A5:  Delete assert info (AssertWinner(S,G,I) and\r\n          AssertWinnerMetric(S,G,I) will then return their default\r\n          values).\r\n", "correct_text": "     A4:  Send AssertCancel(S,G).\r\n          Delete assert info (AssertWinner(S,G,I) and\r\n          AssertWinnerMetric(S,G,I) will then return to their default\r\n          values).\r\n\r\n     A5:  Delete assert info (AssertWinner(S,G,I) and\r\n          AssertWinnerMetric(S,G,I) will then return to their default\r\n          values).\r\n", "notes": "Missing words.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1131", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.7.2", "orig_text": "   The protocol requires that all routers hash to the same RP within a\r\n   domain (except for transients).  The following hash function must be\r\n   used in each router:\r\n", "correct_text": "See notes.", "notes": "The term \u201ctransients\u201d is not defined in section 2.1.  Does this refer to the same \u201ctransients\u201d as in RFC 1112, section2, paragraph 3?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1137", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Index", "orig_text": "Index not reproduced here.", "correct_text": "Due to the number of change recommendations to the index, I am not reproducing the index entries here.\r\n\r\nAssertTimer(*,G,I) page 16 (no explicit function reference is found, but it is referred to on the page)\r\nAssertTimer(*,G,I) page 24 (missing on the page referred)\r\nAssertTimer(*,G,I) page 132 (missing on the page referred)\r\n\r\nAssertTimer(S,G,I) page 18 (no explicit function reference is found, but it is referred to on the page)\r\nAssertTimer(S,G,I) page 24 (missing on the page referred)\r\nAssertTimer(S,G,I) page 132 (missing on the page referred)\r\n\r\nAssertWinner(*,G,I) page 16 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nAssertWinner(S,G,I) page 18 (no explicit function reference is found, but it is referred to on the page)\r\nAssertWinner(S,G,I) page 100 (duplicate reference)\r\n\r\nAssertWinnerMetric(*,G,I) page 16 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nAssertWinnerMetric(S,G,I) page 18 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nAT(*,G,I) page 16 (no explicit function reference is found, but it is referred to on the page)\r\nAT(*,G,I) page 24 (missing on the page referred)\r\nAT(*,G,I) page 91 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nAT(S,G,I) page 18 (no explicit function reference is found, but it is referred to on the page)\r\nAT(S,G,I) page 24 (missing on the page referred)\r\nAT(S,G,I) page 84 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nCouldRegister(S,G) page 39 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nDirectlyConnected(S) page 27 (duplicate reference)\r\n\r\ndr_is_better(a,b,I) page 33 (duplicate reference)\r\n\r\nET(*,*,RP,I) page 15 (no explicit function reference is found, but it is referred to on the page)\r\nET(*,*,RP,I) page 46 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nET(*,G,I) page 16 (no explicit function reference is found, but it is referred to on the page)\r\nET(*,G,I) page 50 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nET(S,G,I) page 18 (no explicit function reference is found, but it is referred to on the page)\r\nET(S,G,I) page 53 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nET(S,G,rpt,I) page 20 (no explicit function reference is found, but it is referred to on the page)\r\nET(S,G,rpt,I) page 57 (no explicit function reference is found, but it is referred to on the page)\r\nET(S,G,rpt,I) page 59 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nHash_Function page 12 (no explicit function reference is found, but it is referred to on the page)\r\nHash_Function page 105 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nIGMP page 17 (missing on the page referred)\r\nIGMP page 23 (missing on the page referred)\r\nIGMP page 105 (missing on the page referred)\r\n\r\nJ/P_Holdtime page 47 (no explicit function reference is found, but it is referred to on the page)\r\nJ/P_Holdtime page 51 (no explicit function reference is found, but it is referred to on the page)\r\nJ/P_Holdtime page 55 (no explicit function reference is found, but it is referred to on the page)\r\nJ/P_Holdtime page 59 (no explicit function reference is found, but it is referred to on the page)\r\nJ/P_Holdtime page 65 (no explicit function reference is found, but it is referred to on the page)\r\nJ/P_Holdtime page 69 (no explicit function reference is found, but it is referred to on the page)\r\nJ/P_Holdtime page 74 (no explicit function reference is found, but it is referred to on the page)\r\nJ/P_Holdtime page 121 (no explicit function reference is found, but it is referred to on the page)\r\nJ/P_Holdtime page 133 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nJoinDesired(*,G) page 17 (missing on the page referred)\r\n\r\njoins(*,*,RP) page 86 (missing on the page referred)\r\njoins(*,*,RP) page 93 (missing on the page referred)\r\n\r\nJT(*,*,RP) page 15 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nJT(*,G) page 16 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nJT(S,G) page 18 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nKAT(S,G) page 18 (no explicit function reference is found, but it is referred to on the page)\r\nKAT(S,G) page 26 (missing on the page referred)\r\nKAT(S,G) page 27 (missing on the page referred)\r\nKAT(S,G) page 28 (missing on the page referred)\r\nKAT(S,G) page 41 (missing on the page referred)\r\nKAT(S,G) page 43 (missing on the page referred)\r\nKAT(S,G) page 73 (missing on the page referred)\r\nKAT(S,G) page 108 (missing on the page referred)\r\n\r\nKeepaliveTimer(S,G) page 18 (no explicit function reference is found, but it is referred to on the page)\r\nKeepaliveTimer(S,G) page 26 (missing on the page referred)\r\nKeepaliveTimer(S,G) page 27 (duplicate reference)\r\nKeepaliveTimer(S,G) page 108 (missing on the page referred)\r\nKeepaliveTimer(S,G) page 129 (missing on the page referred)\r\nKeepaliveTimer(S,G) page 134 (missing on the page referred)\r\n\r\nLAN_Prune_Delay page 31 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nlocal_receiver_include(S,G,I) page 23 (missing on the page referred)\r\n\r\nNext line duplicates the previous line (reference on page 144 is correct)\r\n\r\nMFIB page 13 (missing on the page referred)\r\n\r\nMLD page 17 (missing on the page referred)\r\nMLD page 23 (missing on the page referred)\r\nMLD page 105 (missing on the page referred)\r\n\r\nMRIB page 66 (duplicate reference)\r\nMRIB page 75 (missing on the page referred)\r\n\r\nNBR(Interface,IP address) page 37 (missing on the page referred)\r\n\r\nOT(S,G,rpt) page 20 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nOverride_Interval(I) page 14 (missing on the page referred)\r\nOverride_Interval(I) page 34 (missing on the page referred)\r\nOverride_Interval(I) page 132 (missing on the page referred)\r\n\r\npim_exclude(S,G) page 22 (duplicate reference)\r\n\r\npim_include(*,G) page 22 (duplicate reference)\r\n\r\npim_include(S,G) page 22 (duplicate reference)\r\n\r\nPPT(*,*,RP,I) page 15 (no explicit function reference is found, but it is referred to on the page)\r\nPPT(*,*,RP,I) page 46 (missing on the page referred)\r\n\r\nPPT(*,G,I) page 16 (no explicit function reference is found, but it is referred to on the page)\r\nPPT(*,G,I) page 50 (missing on the page referred)\r\n\r\nPPT(S,G,I) page 18 (no explicit function reference is found, but it is referred to on the page)\r\nPPT(S,G,I) page 53 (missing on the page referred)\r\n\r\nPPT(S,G,rpt,I) page 20 (no explicit function reference is found, but it is referred to on the page)\r\nPPT(S,G,rpt,I) page 57 (missing on the page referred)\r\nPPT(S,G,rpt,I) page 59 (missing on the page referred)\r\n\r\nPropagation_Delay(I) page 31 (missing on the page referred)\r\nPropagation_Delay(I) page 132 (missing on the page referred)\r\n\r\nRegister-StopTimer(S,G) page 38 (missing on the page referred)\r\nRegister-StopTimer(S,G) page 39 (missing on the page referred)\r\nRegister-StopTimer(S,G) page 129 (missing on the page referred)\r\nRegister-StopTimer(S,G) page 135 (no explicit function reference is found, but it is referred to on the page)\r\n\r\nRP(G)  page 5 (missing on the page referred)\r\nRP(G) page 99 (missing on the page referred)\r\n\r\nRPF\u2019(*,G) page 101 (missing on the page referred)\r\n\r\nRPF\u2019(S,G) page 101 (missing on the page referred)\r\n\r\nrpt_assert_metric(G,I) page 99 (missing on the page referred)\r\n\r\nRST(S,G) page 38 (missing on the page referred)\r\nRST(S,G) page 39 (missing on the page referred)\r\n\r\nSPTbit(S,G) page 19 (no explicit function reference is found, but it is referred to on the page)\r\nSPTbit(S,G) page 53 (no explicit function reference is found, but it is referred to on the page)\r\nSPTbit(S,G) page 86 (duplication reference)\r\nSPTbit(S,G) page 108 (missing on the page referred)\r\n\r\nSSM page 10 (missing on the page referred)\r\n\r\nSwitchToSptDesired(S,G) page 28 (duplicate reference)\r\n\r\nt_joinsuppress page 64 (missing on the page referred)\r\nt_joinsuppress page 68 (missing on the page referred)\r\n\r\nt_suppressed page 73 (missing on the page referred)\r\n", "notes": "The items above are referred to in the Index, but were not found at the locations specified in the Index.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1138", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Index", "orig_text": "Not reproduced here.", "correct_text": "Due to the number of change recommendations to the index, I am not reproducing the index entries here.\r\n\r\nGenID page 14\r\n\r\nRPF page 15 \r\n\r\nIGMP page 16\r\nMLD page 16\r\n\r\nJoinDesired(*,G) page 17\r\nMRIB page 17\r\n\r\nIGMP page 19\r\n\r\npim_exclude(S,G) page 21\r\nimmediate_olist(S,G) page 21\r\ninherited_olist(S,G) page 21\r\ninherited_olist(S,G,rpt) page 21\r\nimmediate_olist(*,*,RP) page 21\r\nimmediate_olist(*,G) page 21\r\n\r\nlost_assert(S,G,rpt) page 22\r\ninherited_olist(S,G,rpt) page 22\r\nlocal_receiver_include(*,G,I) page 22\r\nlocal_receiver_include(S,G,I) page 22\r\nIGMP page 22\r\nMLD page 22\r\n\r\nNBR(Interface,IP_address) page 24\r\n\r\nI_Am_Assert_Loser(S,G,I) page 25\r\nAssertWinner(S,G,I) page 25\r\nRPF_interface(Interface,IP_address) page 25\r\nRPF\u2019(*,G) page 25\r\nRPF\u2019(S,G,rpt) page 25\r\nRPF\u2019(*,G) page 25\r\nAssert(S,G) page 25\r\nRPF_interface(host) page 25\r\nRP(G) page 25\r\nI_Am_Assert_Loser(*,G,I) page 25\r\n\r\nRPF_interface(host) page 26\r\nMRIB page 26\r\n\r\nRP(G) page 27\r\n\r\ninherited_olist(S,G) page 28\r\ninherited_olist(S,G,rpt) page 28\r\nUpdate_SPTbit(S,G,iif) page 28\r\nUpstreamJPState(S,G) page 28\r\nKeepalive_Period page 28\r\n\r\nRP(G) page 29\r\nI_Am_Assert_Loser(S,G,I) page 29\r\nAssert(S,G) page 29\r\n\r\nRPF\u2019(S,G) page 30\r\nRPF\u2019(*,G) page 30\r\nAssert(S,G) page 30\r\nJoinDesired(S,G) page 30\r\n\r\nGenID page 32\r\n\r\nMRIB page 37\r\n\r\nRegister_Probe_Time page 40\r\nRegister_Suppression_Time page 40\r\n\r\nRegister-Stop(S,G) page 42\r\n\r\ninherited_olist(S,G,rpt) page 43\r\n\r\nKeepaliveTimer(S,G) page 44\r\ninherited_olist(S,G) page 44\r\n\r\nRPF_interface(host) page 62\r\n\r\nJoinDesired(*,*,RP) page 63\r\nt_periodic page 63\r\nMRIB page 63\r\nt_joinsuppress page 63\r\nt_override page 63\r\n\r\nRPF_interface(host) page 64\r\n\r\nJoinDesired(*,*,RP) page 65\r\nimmediate_olist(*,*,RP) page 65\r\nNBR(Interface,IP_address) page 65\r\nRPF_interface(host) page 65\r\nMRIB page 65\r\nt_periodic page 65\r\nt_override page 65\r\n\r\nRPF_interface(host) page 66\r\nt_periodic page 66\r\nt_override page 66\r\n\r\nJoinDesired(*,G) page 67\r\nt_periodic page 67\r\nt_joinsuppress page 67\r\nt_override page 67\r\n\r\nJoinDesired(*,*,RP) page 68\r\nAssertWinner(*,G,I) page 68\r\n\r\nJoinDesired(*,G) page 69\r\nimmediate_olist(*,G) page 69 \r\nRPF\u2019(*,G) page 69\r\nt_periodic page 69\r\nRP(G) page 69\r\n\r\nt_override page 70\r\nRPF_interface(host) page 70\r\nRP(G) page 70\r\nt_periodic page 70\r\n\r\nMRIB page 71\r\n\r\nJoinDesired(S,G) page 72\r\nt_periodic page 72\r\nSPTbit(S,G) page 72\r\nRPF\u2019(S,G) page 72 \r\nt_joinsuppress page 72\r\nt_override page 72\r\n\r\nRPF\u2019(S,G) page 73\r\n\r\nJoinDesired(S,G) page 74\r\ninherited_olist(S,G) page 74\r\nRPF\u2019(S,G) page 74\r\n\r\nt_override page 75\r\nRPF\u2019(S,G) page 75\r\nRPF_interface(host) page 75\r\n\r\nt_periodic page 76\r\nt_override page 76\r\n\r\nPruneDesired(S,R,rpt) page 78\r\nRPTJoinDesired(G) page 78\r\ninherited_olist(S,G,rpt) page 78\r\nRPF\u2019(S,G,rpt) page 78 \r\nRPF\u2019(*,G) page 78\r\n\r\nRP(G) page 79\r\n\r\nt_override page 80\r\nRPF\u2019(S,G,rpt) page 80\r\nRPF\u2019(*,G) page 80\r\n\r\nRPF\u2019(S,G,rpt) page 81 \r\nPruneDesired(S,G,rpt) page 81\r\n\r\nAssert(*,G) page 82\r\nRPF\u2019(*,G) page 82\r\nJoinDesired(*,G) page 82\r\nJoinDesired(*,*,RP) page 82\r\n\r\nAssertTrackingDesired(S,G,I) page 84\r\n\r\nRPF_interface(host) page 85\r\n\r\njoins(*,*,RP) page 86\r\nlost_assert(S,G,I) page 86\r\n\r\nGenID page 89\r\n\r\nRPF_interface(host) page 90\r\nAssert(S,G) page 90\r\nUpstreamJPState(S,G) page 90\r\n\r\nAssertTrackingDesired(*,G,I) page 92\r\n\r\njoins(*,*,RP) page 93\r\n\r\nGenID page 96\r\n\r\nRPF_interface(host) page 97\r\nRP(G) page 97\r\nAssert(*,G) page 97\r\n\r\nrpt_assert_metric(G,I) page 98\r\ninfinite_assert_metric() page 98\r\nrpt_assert_metric(G,I) page 98\r\n\r\nMRIB page 99\r\n\r\nRP(G) page 100\r\nAssertWinnerMetric(S,G,I) page 100\r\nAssert(S,G) page 100\r\nAssert(*,G) page 100\r\n\r\nAssert(S,G) page 101\r\nAssert(*,G) page 101\r\nAssertWinner(S,G,I) page 101\r\nMRIB page 101\r\n\r\nRPF\u2019(*,G) page 102\r\n\r\nIGMP page 104\r\nMLD page 104\r\n\r\nSSM page 107\r\n\r\nSSM page 108\r\nAssert(S,G) page 108\r\n\r\nTriggered_Hello_Delay page 131\r\nDefault_Hello_Holdtime page 131\r\nHello_Period page 131\r\nJT(*,G) page 131\r\n\r\nAssertTimer(*,G,I) page 132\r\nAssertTimer(S,G,I) page 132\r\n\r\nEffective_Override_Interval(I) page 133\r\n\r\nRegister_Suppression_Time page 134\r\nRegister_Probe_Time page 134\r\n\r\nSSM page 137\r\n\r\nRPF_interface(host) page 144 \r\n\r\nlocal_receiver_include(S,G,I) page 145\r\nlocal_receiver_include(*,G,I) page 145\r\nDownstreamJPState(*,G,I) page 145\r\nDownstreamJPState(S,G,rpt,I) page 145\r\n", "notes": "Functions were found in the document that were mentioned in the Index, but there was no reference given in the Index.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1139", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Index", "orig_text": "Not reproduced here", "correct_text": "Due to the number of change recommendations to the index, I am not reproducing the index entries here.\r\n\r\nNotJoined(*,*,RP) page 15\r\n\r\nNotJoined(*,G) page 16\r\n\r\nNotJoined(S,G) page 18\r\n\r\nPrune(*,*,RP) page 15\r\n\r\nJoin(*,G) page 17\r\nPrune(*,G) page 17\r\n\r\nJoin(S,G) page 19\r\nPrune(S,G) page 19\r\n\r\nPrune(S,G,rpt) page 21\r\nJoin(*,G) page 21\r\n\r\nPrune(S,G,rpt) page 25\r\nJoin(*,G) page 25\r\n\r\nJoin(S,G) page 29\r\nPrune(S,G,rpt) page 29\r\n\r\nPrune(*,*,RP) page 46\r\nJoin(*,*,RP) page 46\r\n\r\nJoin(*,*,RP) page 47\r\nPrune(*,*,RP) page 47\r\n\r\nPrune(*,*,RP) page 48\r\nJoin(*,*,RP) page 48\r\n\r\nPrune(*,*,RP) page 49\r\nJoin(*,G) page 49\r\nPrune(*,G) page 49\r\n\r\nJoin(*,G) page 50\r\nPrune(*,G) page 50\r\n\r\nJoin(*,G) page 51\r\nPrune(*,G) page 51\r\n\r\nJoin(*,G) page 52\r\n\r\nPrune(*,G) page 52\r\n\r\nJoin(S,G) page 54\r\nPrune(S,G) page 54\r\n\r\nPruneEcho(*,*,RP) page 46\r\n\r\nPruneEcho(*,*,RP) page 48\r\n\r\nPruneEcho(*,*,RP) page 49\r\n\r\nPruneEcho(*,G) page 50\r\n\r\nPruneEcho(*,G) page 52\r\n\r\nPruneEcho(S,G) page 54\r\n\r\nJoin(S,G) page 55\r\nPrune(S,G) page 55\r\n\r\nPruneEcho(S,G) page 56\r\nPrune(S,G) page 56\r\n\r\nPrune(S,G,rpt) page 57\r\n\r\nJoin(*,G) page 58\r\nJoin(S,G,rpt) page 58\r\nPrune(S,G,rpt) page 58\r\n\r\nPrune(S,G,rpt) page 59\r\nJoin(*,G) page 59\r\nJoin(S,G,rpt) page 59\r\n\r\nJoin(*,G) page 60\r\nJoin(S,G,rpt) page 60\r\nPrune(S,G,rpt) page 60\r\n\r\nPrune(S,G,rpt) page 61\r\nPrune(*,G) page 61\r\nJoin(*,*,RP) page 61\r\nJoin(*,G) page 61\r\n\r\nJoin(*,*,RP) page 62\r\nPrune(*,*,RP) page 62\r\n\r\nPrune(*,*,RP) page 63\r\n\r\nJoin(*,*,RP) page 64\r\nPrune(*,*,RP) page 64\r\n\r\nPrune(*,*,RP) page 65\r\n\r\nJoin(*,*,RP) page 65\r\n\r\nJoin(*,*,RP) page 63\r\n\r\nJoin(*,*,RP) page 66\r\nPrune(*,*,RP) page 66\r\n\r\nJoin(*,G) page 66\r\nPrune(*,G) page 66\r\n\r\nJoin(*,G) page 67\r\nPrune(*,G) page 67\r\n\r\nJoin(S,G) page 73\r\nPrune(*,G) page 73\r\n\r\nJoin(*,G) page 68\r\nPrune(*,G) page 68\r\n\r\nPrune(*,G) page 69\r\nJoin(*,G) page 69\r\n\r\nJoin(*,G) page 70\r\nPrune(*,G) page 70\r\n\r\nJoin(S,G) page 71\r\nPrune(S,G) page 71\r\nPrune(S,G,rpt) page 71\r\n\r\nJoin(S,G) page 74\r\nPrune(S,G) page 74\r\n\r\nPrune(*,G) page 75 \r\nPrune(S,G,rpt) page 75\r\n\r\nJoin(S,G) page 76\r\nPrune(S,G) page 76\r\n\r\nPrune(S,G,rpt) page 76\r\nJoin(*,G) page 76\r\nJoin(S,G,rpt) page 76\r\n\r\nJoin(S,G,rpt) page 77\r\n\r\nPrune(S,G,rpt) page 78\r\nJoin(S,G,rpt) page 78\r\nPrune(S,G) page 78\r\n\r\nJoin(S,G,rpt) page 79\r\nPrune(S,G,rpt) page 79\r\n\r\nPrune(S,G) page 80\r\nJoin(S,G,rpt) page 80\r\nPrune(S,G,rpt) page 80\r\n\r\nPrune(S,G,rpt) page 81\r\nJoin(*,G) page 81\r\nJoin(*,*,RP) page 81\r\nJoin(S,G,rpt) page 81\r\n\r\nPrune(S,G,rpt) page 82\r\nJoin(*,G) page 82\r\nPrune(S,G,rpt) page 82\r\nJoin(*,*,RP) page 82\r\nPrune(*,G) page 82\r\nPrune(*,*,RP) page 82\r\n\r\nJoin(*,*,RP) page 83\r\nPrune(S,G,rpt) page 83\r\n\r\nJoin(S,G) page 85\r\n\r\nJoin(S,G) page 90\r\n\r\nJoin(*,G) page 93\r\nJoin(*,*,RP) page 93\r\n\r\nJoin(*,G) page 97\r\nJoin(*,*,RP) page 97\r\n\r\nJoin(*,G) page 101\r\nJoin(S,G) page 101\r\n\r\nJoin(S,G) page 102\r\nJoin(*,*,RP) page 102\r\nJoin(*,G) page 102\r\nPrune(S,G,rpt) page 102\r\nJoin(S,G,rpt) page 102\r\n\r\nJoin(*,G) page 125\r\nPrune(*,G) page 125\r\nJoin(S,G,rpt) page 125\r\nPrune(S,G,rpt) page 125\r\nJoin(S,G) page 125\r\nPrune(S,G) page 125\r\nJoin(*,*,RP) page 125\r\nPrune(*,*,RP) page 125\r\n\r\nJoin(S,G) page 143\r\n\r\nJoin(*,*,RP) page 144\r\n\r\nJoined(*,*,RP) page 15\r\n\r\nJoined(*,G) page 16\r\n\r\nJoined(S,G) page 18 \r\n\r\nJoin(S,G) page 72\r\n\r\nPrune(S,G) page 72\r\nPrune(S,G,rpt) page 72\r\n\r\nJoin(S,G,rpt) page 82\r\n\r\nIGMPv3 page 19\r\n\r\nIGMPv3 page 20\r\n\r\nIGMPv3 page 21\r\n\r\nRPTNotJoined(G) page 20\r\nNotPruned(S,G,rpt) page 20\r\nPruned(S,G,rpt) page 20\r\n\r\nRPTNotJoined(G) page 77\r\n\r\nPruned(S,G,rpt) page 77\r\nNotPruned(S,G,rpt) page 77\r\n\r\nRPTNotJoined(G) page 78\r\nPruned(S,G,rpt) page 78\r\nNotPruned(S,G,rpt) page 78\r\n\r\nRPTNotJoined(host) page 80\r\n\r\nRPTNotJoined(host) page 81\r\nPruned(S,G,rpt) page 81\r\nNotPruned(S,G,rpt) page 81\r\n\r\nimmediate_olist(S,G,rpt) page 21\r\n\r\nPMBR(S,G) page 43\r\n\r\nRP_Keepalive_Period page 43\r\n\r\nnext_hop(host) page 63\r\n\r\nnext_hop(host) page 65\r\n\r\nnext_hop(host) page 66\r\n\r\nAssert(*,*,RP) page 82\r\n\r\npref(S) page 98\r\nmetric(S) page 98\r\n\r\nmy_ip_address(I) page 98\r\n\r\npref(S) page 99\r\nmetric(S) page 99\r\n\r\nmy_ip_address(I) page 99\r\n\r\nValue(G,M,C) page 105\r\nC(i) page 105\r\n\r\npref(S) page 128\r\nmetric(S) page 128\r\n", "notes": "Some functions were found in the document that did not have any entry in the Index.  These are itemized above.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1140", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   Upstream\r\n         Towards the root of the tree.  The root of tree may be either\r\n         the source or the RP, depending on the context.\r\n", "correct_text": "   Upstream\r\n         Towards the root of the tree.  The root of the tree may be either\r\n         the source or the RP, depending on the context.\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1141", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "  This\r\n   election is performed using PIM Assert messages, which resolve the\r\n   problem in favor of the upstream router that has (S,G) state; or, if\r\n   neither or both router has (S,G) state, then the problem is resolved\r\n   in favor of the router with the best metric to the RP for RP trees,\r\n   or the best metric to the source to source-specific trees.\r\n", "correct_text": "  This\r\n   election is performed using PIM Assert messages, which resolve the\r\n   problem in favor of the upstream router that has (S,G) state; or, if\r\n   neither or both router has (S,G) state, then the problem is resolved\r\n   in favor of the router with the best metric to the RP for RP trees,\r\n   or the best metric to the source for source-specific trees.\r\n", "notes": "Word choice.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1142", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "  We recommend storing this information if", "correct_text": "  We RECOMMEND storing this information if", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1143", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "none", "correct_text": "PIM (*,G) Join/Prune state begins with a Join(*,G) sent to the RP.  The metric to \r\nthe RP is kept in the MRIB.  Because the RP for this group can be any of several \r\nPIM routers, the source of the metric information in the MRIB is populated by any \r\nof the mechanisms discussed in section 4.7.", "notes": "PIM state begins with a join for a group sent towards the RP.  It is not readily evident that the BSR keeps a list of current RPs for use in the hash function to map groups onto these RPs in order to seed our state.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1465", "doc-id": "RFC4490", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "Using the secret key corresponding to the originatorKey publicKey and\r\nthe recipient's public key, the algorithm VKO GOST R 34.10-94 or VKO\r\nGOST R 34.10-2001 (described in [CPALGS]) is applied to produce the\r\nKEK.", "correct_text": "Using the private key corresponding to the originatorKey publicKey and\r\nthe recipient's public key, the algorithm VKO GOST R 34.10-94 or VKO\r\nGOST R 34.10-2001 (described in [CPALGS]) is applied to produce the\r\nKEK.", "notes": "Russian-English terminology translation bug", "submit_date": "2008-07-09", "submitter_name": "Serguei Leontiev", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1150", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "   The LAN Prune Delay Option SHOULD be included in all Hello messages\r\n   sent on multi-access LANs.  This option advertises a router's\r\n   capability to use values other than the defaults for the\r\n   Propagation_Delay and Override_Interval, which affect the setting of\r\n   the Prune-Pending, Upstream Join, and Override Timers (defined in\r\n   Section 4.10).\r\n", "correct_text": "   The LAN Prune Delay Option SHOULD be included in all Hello messages\r\n   sent on multi-access LANs.  This option advertises a router's\r\n   capability to use values other than the defaults for the\r\n   Propagation_Delay(I) and Override_Interval, which affect the setting of\r\n   the Prune-Pending, Upstream Join, and Override Timers (defined in\r\n   Section 4.10).\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1151", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "   PIM implementers should enforce a lower bound on the permitted values\r\n   for this delay to allow for scheduling and processing delays within\r\n   their router.  \r\n", "correct_text": "   PIM implementers SHOULD enforce a lower bound on the permitted values\r\n   for this delay to allow for scheduling and processing delays within\r\n   their router.  \r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1152", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4.2", "orig_text": "   Note (+): Implementations are advised not to make this a special\r\n      case, but to arrange that this path rejoin the normal packet\r\n      forwarding path.  \r\n", "correct_text": "   Note (+): Implementations are SHOULD NOT to make this a special\r\n      case, but to arrange that this path rejoin the normal packet\r\n      forwarding path.  \r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1153", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.5.1", "orig_text": "+------------++--------------------------------------------------------+\r\n|            ||                          Event                         |\r\n|            ++-------------+-------------+--------------+-------------+\r\n|Prev State  ||Receive      | Receive     | Prune-       | Expiry Timer|\r\n|            ||Join(*,*,RP) | Prune       | Pending      | Expires     |\r\n|            ||             | (*,*,RP)    | Timer        |             |\r\n|            ||             |             | Expires      |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n|            ||-> J state   | -> NI state | -            | -           |\r\n|NoInfo (NI) ||start Expiry |             |              |             |\r\n|            ||Timer        |             |              |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n|            ||-> J state   | -> PP state | -            | -> NI state |\r\n|Join (J)    ||restart      | start Prune-|              |             |\r\n|            ||Expiry Timer | Pending     |              |             |\r\n|            ||             | Timer       |              |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n|Prune-      ||-> J state   | -> PP state | -> NI state  | -> NI state |\r\n|Pending (PP)||restart      |             | Send Prune-  |             |\r\n|            ||Expiry Timer |             | Echo(*,*,RP) |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n", "correct_text": "+------------++--------------------------------------------------------+\r\n|            ||                          Event                         |\r\n|            ++-------------+-------------+--------------+-------------+\r\n|Prev State  ||Receive      | Receive     | Prune-       | Expiry Timer|\r\n|            ||Join(*,*,RP) | Prune       | Pending      | Expires     |\r\n|            ||             | (*,*,RP)    | Timer        |             |\r\n|            ||             |             | Expires      |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n|            ||-> J state   | -           | -            | -           |\r\n|NoInfo (NI) ||start Expiry |             |              |             |\r\n|            ||Timer        |             |              |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n|            ||-> J state   | -> PP state | -            | -> NI state |\r\n|Join (J)    ||restart      | start Prune-|              |             |\r\n|            ||Expiry Timer | Pending     |              |             |\r\n|            ||             | Timer       |              |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n|Prune-      ||-> J state   | -           | -> NI state  | -> NI state |\r\n|Pending (PP)||restart      |             | Send Prune-  |             |\r\n|            ||Expiry Timer |             | Echo(*,*,RP) |             |\r\n+------------++-------------+-------------+--------------+-------------+\r\n", "notes": "At the intersection of \u201cNoInfo (NI)\u201d and \u201cReceivePrune(*,*,RP)\u201d it is noted that there is a change of state to \u201cNI\u201d, which is the current state \u2013 this is unnecessary.  At the intersection of \u201cPrunePending (PP)\u201d and \u201cReceivePrune(*,*,RP)\u201d it is noted that there is a change of state to \u201cPP\u201d, which is the current state \u2013 this is unnecessary.\n --VERIFIER NOTES-- \nIt is perfectly possible to parse this with a basic knowledge of the protocol states and events.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1154", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.1", "orig_text": "   The transition events \"Receive Join(*,*,RP)\" and \"Receive\r\n   Prune(*,*,RP)\" imply receiving a Join or Prune targeted to this\r\n   router's primary IP address on the received interface.  If the\r\n   upstream neighbor address field is not correct, these state\r\n   transitions in this state machine must not occur, although seeing\r\n   such a packet may cause state transitions in other state machines.\r\n\r\n   On unnumbered interfaces on point-to-point links, the router's\r\n   address should be the same as the source address it chose for the\r\n   Hello message it sent over that interface.  However, on point-to-\r\n   point links we also recommend that for backwards compatibility\r\n", "correct_text": "   The transition events \"Receive Join(*,*,RP)\" and \"Receive\r\n   Prune(*,*,RP)\" imply receiving a Join or Prune targeted to this\r\n   router's primary IP address on the received interface.  If the\r\n   upstream neighbor address field is not correct, these state\r\n   transitions in this state machine MUST NOT occur, although seeing\r\n   such a packet MAY cause state transitions in other state machines.\r\n\r\n   On unnumbered interfaces on point-to-point links, the router's\r\n   address should be the same as the source address it chose for the\r\n   Hello message it sent over that interface.  However, on point-to-\r\n   point links it is also RECOMMENDED that for backwards compatibility\r\n", "notes": "RFC 2119 keywords are not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1155", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5.1", "orig_text": "PIM\r\n   Join/Prune messages with an upstream neighbor address field of all\r\n   zeros are also accepted.\r\n", "correct_text": "PIM\r\n   Join/Prune messages with an upstream neighbor address field of all\r\n   zeros also be accepted.\r\n", "notes": "Word choice.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1156", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.2", "orig_text": "  If the upstream neighbor address\r\n   field is not correct, these state transitions in this state machine\r\n   must not occur, although seeing such a packet may cause state\r\n   transitions in other state machines.\r\n", "correct_text": "  If the upstream neighbor address\r\n   field is not correct, these state transitions in this state machine\r\n   MUST NOT occur, although seeing such a packet MAY cause state\r\n   transitions in other state machines.\r\n", "notes": "RFC 2119 keywords are not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1157", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.2", "orig_text": "   point links we also recommend that for backwards compatibility PIM\r\n   Join/Prune messages with an upstream neighbor address field of all\r\n   zeros are also accepted.\r\n", "correct_text": "   point links we also recommend that for backwards compatibility PIM\r\n   Join/Prune messages with an upstream neighbor address field of all\r\n   zeros are also accepted.\r\n", "notes": "RFC 2119 keywords are not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4688", "doc-id": "RFC6243", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5.2", "orig_text": "   If the operation attribute contains the value 'create', and the data\r\n   node already exists in the target configuration datastore, then the\r\n   server MUST return an <rpc-error> response with an 'invalid-value'\r\n   error-tag.", "correct_text": "   If the operation attribute contains the value 'create', and the data\r\n   node already exists in the target configuration datastore, then the\r\n   server MUST return an <rpc-error> response with an 'data-exists'\r\n   error-tag.", "notes": "According to RFC6241 section 7.2 the behavior for the 'create' operation is: \" If the configuration data exists, an <rpc-error> element is returned with an <error-tag> value of \"data-exists\". \"", "submit_date": "2016-05-08", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1158", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.5.3", "orig_text": "+------------++--------------------------------------------------------+\r\n|            ||                         Event                          |\r\n|            ++-------------+--------------+-------------+-------------+\r\n|Prev State  ||Receive      | Receive      | Prune-      | Expiry Timer|\r\n|            ||Join(S,G)    | Prune(S,G)   | Pending     | Expires     |\r\n|            ||             |              | Timer       |             |\r\n|            ||             |              | Expires     |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|            ||-> J state   | -> NI state  | -           | -           |\r\n|NoInfo (NI) ||start Expiry |              |             |             |\r\n|            ||Timer        |              |             |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|            ||-> J state   | -> PP state  | -           | -> NI state |\r\n|Join (J)    ||restart      | start Prune- |             |             |\r\n|            ||Expiry Timer | Pending      |             |             |\r\n|            ||             | Timer        |             |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|Prune-      ||-> J state   | -> PP state  | -> NI state | -> NI state |\r\n|Pending (PP)||restart      |              | Send Prune- |             |\r\n|            ||Expiry Timer |              | Echo(S,G)   |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n", "correct_text": "+------------++--------------------------------------------------------+\r\n|            ||                         Event                          |\r\n|            ++-------------+--------------+-------------+-------------+\r\n|Prev State  ||Receive      | Receive      | Prune-      | Expiry Timer|\r\n|            ||Join(S,G)    | Prune(S,G)   | Pending     | Expires     |\r\n|            ||             |              | Timer       |             |\r\n|            ||             |              | Expires     |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|            ||-> J state   | -            | -           | -           |\r\n|NoInfo (NI) ||start Expiry |              |             |             |\r\n|            ||Timer        |              |             |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|            ||-> J state   | -> PP state  | -           | -> NI state |\r\n|Join (J)    ||restart      | start Prune- |             |             |\r\n|            ||Expiry Timer | Pending      |             |             |\r\n|            ||             | Timer        |             |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n|Prune-      ||-> J state   | -            | -> NI state | -> NI state |\r\n|Pending (PP)||restart      |              | Send Prune- |             |\r\n|            ||Expiry Timer |              | Echo(S,G)   |             |\r\n+------------++-------------+--------------+-------------+-------------+\r\n", "notes": "At the intersection of \u201cNoInfo (NI)\u201d and \u201cReceivePrune(S,G)\u201d it is noted that there is a change of state to \u201cNI\u201d, which is the current state \u2013 this is unnecessary.  At the intersection of \u201cPrunePending (PP)\u201d and \u201cReceivePrune(S,G)\u201d it is noted that there is a change of state to \u201cPP\u201d, which is the current state \u2013 this is unnecessary.\n --VERIFIER NOTES-- \nIt is perfectly possible to parse this with a basic knowledge of the protocol states and events.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1159", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.4", "orig_text": "Figure 5.", "correct_text": "", "notes": "Why isn\u2019t (S,G) state considered for the (S,G,rpt) state machine (depicted in Figure 5 on page 58)?  Wouldn\u2019t an (S,G) join have an effect up on (S,G,rpt)?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1160", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.4", "orig_text": "     Receive Prune(S,G,rpt)\r\n          The compound Join/Prune message contains a Prune(S,G,rpt).\r\n\r\n          The (S,G,rpt) downstream state machine on interface I\r\n          transitions back to the Prune-Pending state.  The Expiry Timer\r\n          (ET) is restarted, set to maximum of its current value and the\r\n          HoldTime from the triggering Join/Prune message.\r\n", "correct_text": "None suggested.", "notes": "Infinite toggle for every pair of routers where one wants (*,G) and the other wants (*,G) and (S,G,rpt).  State moves from Prune -> PruneTmp -> NI -> Prune for the (S,G,rpt) state machine.  This causes upstream thrash with Join(S,G,rpt) followed by Prune(S,G,rpt) in continual succession.  Which causes Prune (S,G,rpt) state to be state limited to never actually enter Prune state (NI -> PP -> NI).", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1161", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.6", "orig_text": "     bool JoinDesired(*,G) {\r\n        if (immediate_olist(*,G) != NULL OR\r\n            (JoinDesired(*,*,RP(G)) AND\r\n             AssertWinner(*, G, RPF_interface(RP(G))) != NULL))\r\n            return TRUE\r\n        else\r\n            return FALSE\r\n     }\r\n\r\n   JoinDesired(*,G) is true when the router has forwarding state that\r\n   would cause it to forward traffic for G using shared tree state.\r\n   Note that although JoinDesired is true, the router's sending of a\r\n   Join(*,G) message may be suppressed by another router sending a\r\n   Join(*,G) onto the upstream interface.\r\n", "correct_text": "", "notes": "When would immediate_olist(*,G) be NULL and forwarding state exist?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1466", "doc-id": "RFC4490", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "Using the secret key corresponding to the GostR3410-\r\nTransportParameters ephemeralPublicKey and the recipient's public\r\nkey, the algorithm VKO GOST R 34.10-94 or VKO GOST R 34.10-2001\r\n(described in [CPALGS]) is applied to produce the KEK.", "correct_text": "Using the private key corresponding to the GostR3410-\r\nTransportParameters ephemeralPublicKey and the recipient's public\r\nkey, the algorithm VKO GOST R 34.10-94 or VKO GOST R 34.10-2001\r\n(described in [CPALGS]) is applied to produce the KEK.", "notes": "Russian-English terminology translation bug", "submit_date": "2008-07-09", "submitter_name": "Serguei Leontiev", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1467", "doc-id": "RFC4357", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "13.2", "orig_text": "   [RFDSL]       \"Russian Federal Digital Signature Law\", 10 Jan 2002 N\r\n                 1-FZ\r\n", "correct_text": "   [RFDSL]       \"Russian Federal Electronic Digital Signature Law\",\r\n                 10 Jan 2002 N 1-FZ.\r\n", "notes": "Russian-English terminology translation bug", "submit_date": "2008-07-09", "submitter_name": "Serguei Leontiev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2249", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.5.5.2.1.5", "orig_text": "   Once a CB_LAYOUTRECALL of LAYOUTRECALL4_FSID is sent, the server MUST\r\n   NOT allow the client to use any layout stateid that refers to a file\r\n   with the specified fsid except for LAYOUTCOMMIT operations.  Once the\r\n   client receives a CB_LAYOUTRECALL of LAYOUTRECALL4_ALL, it MUST NOT\r\n   use any layout stateid that refers to a file with the specified fsid\r\n   except for LAYOUTCOMMIT operations.", "correct_text": "   Once a CB_LAYOUTRECALL of LAYOUTRECALL4_FSID is sent, the server MUST\r\n   NOT allow the client to use any layout stateid that refers to a file\r\n   with the specified fsid except for LAYOUTCOMMIT operations.  Once the\r\n   client receives a CB_LAYOUTRECALL of LAYOUTRECALL4_FSID, it MUST NOT\r\n   use any layout stateid that refers to a file with the specified fsid\r\n   except for LAYOUTCOMMIT operations.", "notes": "Copy/paste error from the previous paragraph. s/_ALL/_FSID/ in the second sentence of the corrected paragraph.", "submit_date": "2010-05-10", "submitter_name": "Michael Eisler", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2058", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.2.5", "orig_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 5 represents Property Match Filtering.\r\n\r\n   * In this filter, there is a mix of information from the packet and\r\n     information from the router.", "correct_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 5 represents Property Match Filtering.\r\n\r\n   * In this filter, there is a mix of information from the packet and\r\n     information from the router.\r\n\r\n   * IPFIX Reduced Size Encoding [RFC5101] has been used for the\r\n     selectorId field.", "notes": "Addition of \"Reduced Size Encoding\" note per Errata ID 2052.", "submit_date": "2010-02-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2059", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.2.6", "orig_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 6 represents Hash-based Filtering\r\n     using the BOB algorithm.", "correct_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 6 represents Hash-based Filtering\r\n     using the BOB algorithm.\r\n\r\n   * IPFIX Reduced Size Encoding [RFC5101] has been used for the\r\n     selectorId field.", "notes": "Addition of \"Reduced Size Encoding\" note per Errata ID 2052.", "submit_date": "2010-02-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2251", "doc-id": "RFC3944", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "  (https//:videnet.unc.edu)\r\n\r\n", "correct_text": "| (https://videnet.unc.edu)\r\n", "notes": "Corrected a HTTPS URI.", "submit_date": "2005-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1162", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.7", "orig_text": "     RPF'(*,G) changes not due to an Assert\r\n          An event occurred that caused the next hop towards the RP for\r\n          G to change.  This may be caused by a change in the MRIB\r\n          routing database or the group-to-RP mapping.  Note that this\r\n          transition does not occur if an Assert is active and the\r\n          upstream interface does not change.\r\n\r\n          The upstream (*,G) state machine remains in Joined state.\r\n          Send Join(*,G) to the new upstream neighbor, which is the new\r\n          value of RPF'(*,G).  Send Prune(*,G) to the old upstream\r\n          neighbor, which is the old value of RPF'(*,G).  Use the new\r\n          value of RP(G) in the Prune(*,G) message or all zeros if RP(G)\r\n          becomes unknown (old value of RP(G) may be used instead to\r\n          improve behavior in routers implementing older versions of\r\n          this spec).  Set the Join Timer (JT) to expire after\r\n          t_periodic seconds.\r\n", "correct_text": "", "notes": "Sending the Prune(*,G) may help state issues, but if the change in MRIB was spurious or there was a situation where a difference of opinion in lower route costs exists, some traffic may be dropped until the MRIB becomes consistent again.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1163", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5.7", "orig_text": "If a (S,G) Assert occurs on the upstream interface,", "correct_text": "If an (S,G) Assert occurs on the upstream interface,", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1164", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5.7", "orig_text": "and this changes\r\n   the this router's idea of the upstream neighbor,\r\n", "correct_text": "and this changes\r\n   the router's idea of the upstream neighbor,\r\n\r\n-or-\r\n\r\nand this changes\r\n   this router's idea of the upstream neighbor,\r\n", "notes": "Word choice.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1165", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5.7", "orig_text": "   In addition, if MRIB changes", "correct_text": "   In addition, if the MRIB changes", "notes": "Missing word.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1166", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.7", "orig_text": "          The upstream (S,G) state machine remains in Joined state.  If\r\n          the Join Timer is set to expire in more than t_override\r\n          seconds, reset it so that it expires after t_override seconds.\r\n", "correct_text": "          The upstream (S,G) state machine remains in Joined state.  If\r\n          the Join Timer is set to expire in more than t_override\r\n          seconds, reset it so that it expires after t_override seconds.  If the \r\n          Join Timer is set to expire in less than t_override seconds, leave it   \r\n          unchanged.\r\n", "notes": "It would make the Join Timer clearer to understand if an explicit statement was made indicating that if the Join Timer is less than t_override, it should be left unchanged.  This needs to be made for \u201cSee Prune(S,G) to RPF\u2019(S,G)\u201d, \u201cSee Prune(S,G,rpt) to RPF\u2019(S,G)\u201d, and \u201cSee Prune(*,G) to RPF\u2019(S,G)\u201d.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1167", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.7", "orig_text": "          The upstream (S,G) state machine remains in Joined state.\r\n          Send Join(S,G) to the new upstream neighbor, which is the new\r\n          value of RPF'(S,G).  Send Prune(S,G) to the old upstream\r\n          neighbor, which is the old value of RPF'(S,G).  Set the Join\r\n          Timer (JT) to expire after t_periodic seconds.\r\n", "correct_text": "", "notes": "Sending the Prune(*,G) may help state issues, but if the change in MRIB was spurious or there was a situation where a difference of opinion in lower route costs exists, some traffic may be dropped until the MRIB becomes consistent again.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1168", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.8", "orig_text": "       # Note: we joined the shared tree, but there was an (S,G) assert\r\n       # and the source tree RPF neighbor is different.\r\n", "correct_text": "", "notes": "In the comments on the \u201celse\u201d clause, why would we think that we were on the shared tree if the SPTbit is false?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1169", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.9", "orig_text": "   In addition, there is an (S,G,rpt) Override Timer, OT(S,G,rpt), which\r\n   is used to delay triggered Join(S,G,rpt) messages to prevent\r\n   implosions of triggered messages.\r\n", "correct_text": "", "notes": "What does \u201cimplosions of triggered messages\u201d refer to?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1268", "doc-id": "RFC5089", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2 mid-p.8", "orig_text": "   Pref-Y field: PCE's preference for inter-layer TE LSP computation.\r\n       ^^", "correct_text": "   PrefY field: PCE's preference for inter-layer TE LSP computation.\r\n       ^", "notes": "May be confusing.\r\n\r\nRestore consistency with artwork on the same page as well as subsequent\r\ntext (and RFC 5088 as well).\r\n\r\n\r\nFurther minor typographical flaws in this RFC,\r\nnoted here for quality control purposes:\r\n\r\na) Section 4.2, 2nd paragraph:\r\n              ... more than once only ...\r\n   should be\r\n              ... more than once, only ...\r\n   (as in RFC 5088);\r\n\r\nb) Section 9.1: missing white space after the5 bullets (dash characters),\r\n   cf. RFC 5088;\r\n\r\nc) Section 11.2: orphaned punctuation in '[PCEP]' entry --\r\n   cf. footnote in Editorial Errata Report for RFC 5088.", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4575", "doc-id": "RFC959", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.", "orig_text": "         User-PI - Server A                User-PI - Server B\r\n         ------------------                ------------------\r\n\r\n         C->A : Connect                    C->B : Connect\r\n         C->A : PASV\r\n         A->C : 227 Entering Passive Mode. A1,A2,A3,A4,a1,a2\r\n                                           C->B : PORT A1,A2,A3,A4,a1,a2\r\n                                           B->C : 200 Okay\r\n         C->A : STOR                       C->B : RETR\r\n                   B->A : Connect to HOST-A, PORT-a\r\n", "correct_text": "         User-PI - Server A                User-PI - Server B\r\n         ------------------                ------------------\r\n\r\n         C->A : Connect                    C->B : Connect\r\n         C->A : PASV\r\n         A->C : 227 Entering Passive Mode. (A1,A2,A3,A4,a1,a2).\r\n                                           C->B : PORT A1,A2,A3,A4,a1,a2\r\n                                           B->C : 200 Okay\r\n         C->A : STOR                       C->B : RETR\r\n                   B->A : Connect to HOST-A, PORT-a\r\n", "notes": "The reply code for 227 in sections 4.2.1 and 4.2.2. shows <host-port> surrounded by parenthesis with a period at the end, whereas the example in section 5.2 does not.\n --VERIFIER NOTES-- \nAs Section 4.2 states, only the numeric value of the reply code is significant to the protocol; the text is intended for human readers.  The parentheses and period are not significant.", "submit_date": "2016-01-01", "submitter_name": "Dave Mackay", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1170", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.9", "orig_text": "+------------++--------------------------------------------------------+\r\n|            ||                           Event                        |\r\n|            ++--------------+--------------+-------------+------------+\r\n|Prev State  || PruneDesired | PruneDesired | RPTJoin     | inherited_ |\r\n|            || (S,G,rpt)    | (S,G,rpt)    | Desired(G)  | olist      |\r\n|            || ->True       | ->False      | ->False     | (S,G,rpt)  |\r\n|            ||              |              |             | ->non-NULL |\r\n+------------++--------------+--------------+-------------+------------+\r\n|RPTNotJoined|| -> P state   | -            | -           | -> NP state|\r\n|(G) (NJ)    ||              |              |             |            |\r\n+------------++--------------+--------------+-------------+------------+\r\n|Pruned      || -            | -> NP state  | -> NJ state | -          |\r\n|(S,G,rpt)   ||              | Send Join    |             |            |\r\n|(P)         ||              | (S,G,rpt)    |             |            |\r\n+------------++--------------+--------------+-------------+------------+\r\n|NotPruned   || -> P state   | -            | -> NJ state | -          |\r\n|(S,G,rpt)   || Send Prune   |              | Cancel OT   |            |\r\n|(NP)        || (S,G,rpt);   |              |             |            |\r\n|            || Cancel OT    |              |             |            |\r\n+------------++--------------+--------------+-------------+------------+\r\n", "correct_text": "", "notes": "In the intersection of \u201cRPTNotJoined(G)\u201d and \u201cPruneDesired(S,G,rpt) -> True\u201d, the state table indicates that the result is to move into \u201cPruned(S,G,rpt)\u201d state.  This occurs again in the text on pages 80 and 81.  Why would join state be entered for (*,G)  simply in order to prune (S,G,rpt)?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1171", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.5.9", "orig_text": "+----------------------------------------------------------------------+\r\n|                    In NotPruned(S,G,rpt) State                       |\r\n+----------+--------------+--------------+--------------+--------------+\r\n|Override  | See Prune    | See Join     | See Prune    | RPF'         |\r\n|Timer     | (S,G,rpt) to | (S,G,rpt) to | (S,G) to     | (S,G,rpt) -> |\r\n|expires   | RPF'         | RPF'         | RPF'         | RPF' (*,G)   |\r\n|          | (S,G,rpt)    | (S,G,rpt)    | (S,G,rpt)    |              |\r\n+----------+--------------+--------------+--------------+--------------+\r\n|Send Join | OT = min(OT, | Cancel OT    | OT = min(OT, | OT = min(OT, |\r\n|(S,G,rpt);| t_override)  |              | t_override)  | t_override)  |\r\n|Leave OT  |              |              |              |              |\r\n|unset     |              |              |              |              |\r\n+----------+--------------+--------------+--------------+--------------+\r\n", "correct_text": "See notes", "notes": "The table at the bottom of page 78 does not indicate what the rows are as opposed to the columns.  It appears that the first row consists of events and the second row consists of actions to take upon receiving those events while in the \u201cNotPruned(S,G,rpt) State\u201d.\n --VERIFIER NOTES-- \nIt is perfectly possible to parse this with a basic knowledge of the protocol states and events.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1172", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5.9", "orig_text": "  If the router was previously in RPTNotJoined(G)\r\n      state, then there is no need to trigger an action in this state\r\n      machine because sending a Prune(S,G,rpt) is handled by the rules\r\n      for sending the Join(*,G) or Join(*,*,RP).\r\n", "correct_text": "See notes.", "notes": "A reference to a page would be very helpful at the end of the event description in reference to the \u201crules for sending the Join(*,G) or Join(*,*,RP).\u201d", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1173", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.6.4", "orig_text": "+----------------------------------------------------------------------+\r\n|                         In NoInfo (NI) State                         |\r\n+---------------+-------------------+------------------+---------------+\r\n| Receive       |  Receive Assert   |  Data arrives    |  Receive      |\r\n| Inferior      |  with RPTbit      |  from S to G on  |  Acceptable   |\r\n| Assert with   |  set and          |  I and           |  Assert with  |\r\n| RPTbit clear  |  CouldAssert      |  CouldAssert     |  RPTbit clear |\r\n| and           |  (S,G,I)          |  (S,G,I)         |  and AssTrDes |\r\n| CouldAssert   |                   |                  |  (S,G,I)      |\r\n| (S,G,I)       |                   |                  |               |\r\n+---------------+-------------------+------------------+---------------+\r\n| -> W state    |  -> W state       |  -> W state      |  -> L state   |\r\n| [Actions A1]  |  [Actions A1]     |  [Actions A1]    |  [Actions A6] |\r\n+---------------+-------------------+------------------+---------------+\r\n\r\n+----------------------------------------------------------------------+\r\n|                   In I Am Assert Winner (W) State                    |\r\n+----------------+------------------+-----------------+----------------+\r\n| Assert Timer   |   Receive        |  Receive        |  CouldAssert   |\r\n| Expires        |   Inferior       |  Preferred      |  (S,G,I) ->    |\r\n|                |   Assert         |  Assert         |  FALSE         |\r\n+----------------+------------------+-----------------+----------------+\r\n| -> W state     |   -> W state     |  -> L state     |  -> NI state   |\r\n| [Actions A3]   |   [Actions A3]   |  [Actions A2]   |  [Actions A4]  |\r\n+----------------+------------------+-----------------+----------------+\r\n", "correct_text": "See notes.", "notes": "The tables at the bottom of page 84 do not indicate what the rows are as opposed to the columns.  It appears that the first rows consist of events and the second rows consist of actions to take upon receiving those events while in the \u201cNoInfo\u201d state and \u201cI AM Assert Winner\u201d state.\n --VERIFIER NOTES-- \nIt is perfectly possible to parse this with a basic knowledge of the protocol states and events.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1297", "doc-id": "RFC4996", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2, p.39", "orig_text": "|  The ROHC-TCP IR-CR packet follows the general format of the ROHC CR\r\n   packet, as defined in [RFC4164], Section 3.5.2.  [...]\r\n   ", "correct_text": "   The ROHC-TCP IR-CR packet follows the general format of the ROHC\r\n|  IR-CR packet, as defined in [RFC4164], Section 3.5.2.  [...]\r\n ", "notes": "RFC 4996 should use precise terminology established in RFC 4995\r\nand RFC 4164.\r\n\"CR\" does not appear anywhere in both RFCs (and it does not recur in\r\nRFC 4996 as well); \"IR-CR\" should be used for clarity and precision.\r\n\r\nChair reply: It should be IR-CR and there is no CR defined in the document, but I think most people will understand the sentence. Still, if/when we update this document we should make this correction. So hold for update.", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2384", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\n(13) extraneous words (left over from changing the sentence?)\r\n\r\nThe last lines on page 18 (within Section 5.3) say:\r\n\r\n     Public-key infrastructures may not always be available in certain\r\n     environments, nor may they be deemed adequate for real-time\r\n     multimedia applications when additional steps are taken for\r\n     certificate validation and certificate revocation methods with\r\n     additional roundtrips into account.", "correct_text": "The RFC should say:\r\n\r\n     Public-key infrastructures may not always be available in certain\r\n     environments, nor may they be deemed adequate for real-time\r\n     multimedia applications when additional steps are taken for\r\n     certificate validation or certificate revocation methods require\r\n     additional roundtrips.", "notes": "Minor edits to corrected text by Tim Polk.", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2191", "doc-id": "RFC4306", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.", "orig_text": "whose type code appears in the first octet.  The reasoning behind\r\nnot setting the critical bit for payloads defined in this document\r\nis that all implementations MUST understand all payload types\r\ndefined in this document and therefore must ignore the Critical\r\nbit's value.  Skipped payloads are expected to have valid Next", "correct_text": "?", "notes": "Difficult to understand. More explanation needed:\r\nAn implementation of IKE which is older than 2.0 does not know about the\r\ncritical bit and will skip an unknown payload. This behaviour fits to\r\ncleared critical bit.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1174", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.6.1", "orig_text": "+---------------------------------------------------------------------+\r\n|                   In I Am Assert Loser (L) State                    |\r\n+-------------+-------------+-------------+-------------+-------------+\r\n|Receive      |Receive      |Receive      |Assert Timer |Current      |\r\n|Preferred    |Acceptable   |Inferior     |Expires      |Winner's     |\r\n|Assert       |Assert with  |Assert or    |             |GenID        |\r\n|             |RPTbit clear |Assert       |             |Changes or   |\r\n|             |from Current |Cancel from  |             |NLT Expires  |\r\n|             |Winner       |Current      |             |             |\r\n|             |             |Winner       |             |             |\r\n+-------------+-------------+-------------+-------------+-------------+\r\n|-> L state   |-> L state   |-> NI state  |-> NI state  |-> NI state  |\r\n|[Actions A2] |[Actions A2] |[Actions A5] |[Actions A5] |[Actions A5] |\r\n+-------------+-------------+-------------+-------------+-------------+\r\n\r\n+----------------------------------------------------------------------+\r\n|                    In I Am Assert Loser (L) State                    |\r\n+----------------+-----------------+------------------+----------------+\r\n| AssTrDes       |  my_metric ->   |  RPF_interface   |  Receive       |\r\n| (S,G,I) ->     |  better than    |  (S) stops       |  Join(S,G) on  |\r\n| FALSE          |  winner's       |  being I         |  interface I   |\r\n|                |  metric         |                  |                |\r\n+----------------+-----------------+------------------+----------------+\r\n| -> NI state    |  -> NI state    |  -> NI state     |  -> NI State   |\r\n| [Actions A5]   |  [Actions A5]   |  [Actions A5]    |  [Actions A5]  |\r\n+----------------+-----------------+------------------+----------------+\r\n", "correct_text": "See notes.", "notes": "The table at the top of page 85 does not indicate what the rows are as opposed to the columns.  It appears that the first row consists of events and the second row consists of actions to take upon receiving those events while in the \u201cI Am Assert Loser\u201d state.\n --VERIFIER NOTES-- \nIt is perfectly possible to parse this with a basic knowledge of the protocol states and events.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1175", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6.2", "orig_text": "  It must not\r\n      forward packets for G onto interface I with the exception of\r\n      traffic from sources for which is has (S,G) \"I am Assert Winner\"\r\n      state.\r\n", "correct_text": "  It must not\r\n      forward packets for G onto interface I with the exception of\r\n      traffic from sources for which it has (S,G) \"I am Assert Winner\"\r\n      state.\r\n", "notes": "Misspelling (\"is\" -> \"it\").", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3780", "doc-id": "RFC6749", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "A client MAY use the \"client_id\" request parameter to identify itself\r\n   when sending requests to the token endpoint.", "correct_text": "A public client MAY use the \"client_id\" request parameter to identify \r\nitself when sending requests to the token endpoint.", "notes": "Note from AD: The provided link doesn't exactly demonstrate consensus, but the change makes sense, hence this is marked \"Held for Document Update\".\r\n\r\nFrom Submitter: The current text may mislead confidential clients to sent their client_id in the request body in addition to their client_id and client_secret in the BASIC authz header. This leads to unnecessary duplication and ambiguities. \r\n\r\nThere has been consensus on the list that the intention of this sentence was to advise _public_ clients to identity themselves towards the token endpoint in order to mitigate substitution attacks and allow for logging. Confidential clients need to authenticate anyway, this sentence should be narrowed down to public clients only. \r\n\r\nsee http://www.ietf.org/mail-archive/web/oauth/current/msg12005.html\r\n\r\nThis issue was discovered in the course of the OpenID Connect Interop testings.", "submit_date": "2013-11-04", "submitter_name": "Torsten Lodderstedt", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1176", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.6.2", "orig_text": "+----------------------------------------------------------------------+\r\n|                         In NoInfo (NI) State                         |\r\n+-----------------------+-----------------------+----------------------+\r\n| Receive Inferior      |  Data arrives for G   |  Receive Acceptable  |\r\n| Assert with RPTbit    |  on I and             |  Assert with RPTbit  |\r\n| set and               |  CouldAssert          |  set and AssTrDes    |\r\n| CouldAssert(*,G,I)    |  (*,G,I)              |  (*,G,I)             |\r\n+-----------------------+-----------------------+----------------------+\r\n| -> W state            |  -> W state           |  -> L state          |\r\n| [Actions A1]          |  [Actions A1]         |  [Actions A2]        |\r\n+-----------------------+-----------------------+----------------------+\r\n\r\n+---------------------------------------------------------------------+\r\n|                    In I Am Assert Winner (W) State                  |\r\n+----------------+-----------------+-----------------+----------------+\r\n| Assert Timer   |  Receive        |  Receive        |  CouldAssert   |\r\n| Expires        |  Inferior       |  Preferred      |  (*,G,I) ->    |\r\n|                |  Assert         |  Assert         |  FALSE         |\r\n+----------------+-----------------+-----------------+----------------+\r\n| -> W state     |  -> W state     |  -> L state     |  -> NI state   |\r\n| [Actions A3]   |  [Actions A3]   |  [Actions A2]   |  [Actions A4]  |\r\n+----------------+-----------------+-----------------+----------------+\r\n", "correct_text": "See notes.", "notes": "The tables at the bottom of page 92 do not indicate what the rows are as opposed to the columns.  It appears that the first rows consist of events and the second rows consist of actions to take upon receiving those events while in the \u201cNoInfo\u201d state and the \u201cI Am Assert Winner\u201d state.\n --VERIFIER NOTES-- \nThis is perfectly easy to parse having an understanding of the states and events for the protocol.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1618", "doc-id": "RFC5387", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4, pg.15", "orig_text": "   BTNS is intended for services open to the public but for which\r\n   protected associations are desired, and for services that can be\r\n   authenticated at higher layers in the protocol stack.  BTNS can also\r\n   provide some level of protection for private services when the\r\n|  alternative BTNS is no protection at all.", "correct_text": "   BTNS is intended for services open to the public but for which\r\n   protected associations are desired, and for services that can be\r\n   authenticated at higher layers in the protocol stack.  BTNS can also\r\n   provide some level of protection for private services when the\r\n|  alternative to BTNS is no protection at all.\r\n              ^^^^", "notes": "Rationale: Distorting word omission.", "submit_date": "2008-11-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1619", "doc-id": "RFC2616", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "   4.If the message uses the media type \"multipart/byteranges\", and the\r\n     ransfer-length is not otherwise specified, then this self-\r\n     elimiting media type defines the transfer-length. This media type\r\n     UST NOT be used unless the sender knows that the recipient can arse\r\n     it; the presence in a request of a Range header with ultiple byte-\r\n     range specifiers from a 1.1 client implies that the lient can parse\r\n     multipart/byteranges responses.", "correct_text": "   4.If the message uses the media type \"multipart/byteranges\", and the\r\n     transfer-length is not otherwise specified, then this self-\r\n     delimiting media type defines the transfer-length. This media type\r\n     MUST NOT be used unless the sender knows that the recipient can parse\r\n     it; the presence in a request of a Range header with multiple byte-\r\n     range specifiers from a 1.1 client implies that the client can parse\r\n     multipart/byteranges responses.", "notes": "> \"ransfer-length\" should be \"transfer-length\"\r\n> \"self-elimiting\" should be \"self-delimiting\";\r\n> \"UST\"should be \"MUST\";\r\n> \"arse\"should be \"parse\";\r\n> \"ultiple\"should be \"multiple\";\r\n> \"lient\"should be \"client\";", "submit_date": "2008-11-25", "submitter_name": "Heming Hou", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1620", "doc-id": "RFC2744", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.15", "orig_text": "   Since some application-level protocols may wish to use tokens emitted\r\n   by gss_wrap() to provide \"secure framing\", implementations must\r\n   support derivation of MICs from zero-length messages.", "correct_text": "   Since some application-level protocols may wish to use tokens emitted\r\n   by gss_get_mic() to provide \"secure framing\", implementations must\r\n   support derivation of MICs from zero-length messages.", "notes": "", "submit_date": "2008-11-25", "submitter_name": "Ben Harris", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2632", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "11.", "orig_text": "    Cost\r\n        The link state cost of the path to the destination.  For all\r\n        paths except type 2 external paths this describes the entire\r\n        path's cost.  For Type 2 external paths, this field describes\r\n        the cost of the portion of the path internal to the AS. ", "correct_text": "    Cost\r\n        The link state cost of the path to the destination.  For all\r\n        paths except type 2 external paths this describes the entire\r\n        path's cost.  For Type 1 external paths, this field describes\r\n        the cost of the portion of the path both internal and external\r\n        to the AS.  ", "notes": "'Type 2 cost' is listed in the subsequent 'field' description for section 11 (The Routing Table Structure).\n --VERIFIER NOTES-- \nThe text is correct as written in the RFC.\r\n\r\n", "submit_date": "2010-11-13", "submitter_name": "Dave Cowley", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1177", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.6.2", "orig_text": "+---------------------------------------------------------------------+\r\n|                    In I Am Assert Loser (L) State                   |\r\n+-------------+-------------+-------------+-------------+-------------+\r\n|Receive      |Receive      |Receive      |Assert Timer |Current      |\r\n|Preferred    |Acceptable   |Inferior     |Expires      |Winner's     |\r\n|Assert with  |Assert from  |Assert or    |             |GenID        |\r\n|RPTbit set   |Current      |Assert       |             |Changes or   |\r\n|             |Winner with  |Cancel from  |             |NLT Expires  |\r\n|             |RPTbit set   |Current      |             |             |\r\n|             |             |Winner       |             |             |\r\n+-------------+-------------+-------------+-------------+-------------+\r\n|-> L state   |-> L state   |-> NI state  |-> NI state  |-> NI state  |\r\n|[Actions A2] |[Actions A2] |[Actions A5] |[Actions A5] |[Actions A5] |\r\n+-------------+-------------+-------------+-------------+-------------+\r\n\r\n+----------------------------------------------------------------------+\r\n|                    In I Am Assert Loser (L) State                    |\r\n+----------------+----------------+-----------------+------------------+\r\n| AssTrDes       | my_metric ->   |  RPF_interface  |  Receive         |\r\n| (*,G,I) ->     | better than    |  (RP(G)) stops  |  Join(*,G) or    |\r\n| FALSE          | Winner's       |  being I        |  Join            |\r\n|                | metric         |                 |  (*,*,RP(G)) on  |\r\n|                |                |                 |  Interface I     |\r\n+----------------+----------------+-----------------+------------------+\r\n| -> NI state    | -> NI state    |  -> NI state    |  -> NI State     |\r\n| [Actions A5]   | [Actions A5]   |  [Actions A5]   |  [Actions A5]    |\r\n+----------------+----------------+-----------------+------------------+\r\n", "correct_text": "See notes.", "notes": "The tables at the top of page 93 do not indicate what the rows are as opposed to the columns.  It appears that the first rows consist of events and the second rows consist of actions to take upon receiving those events while in the \u201cI Am Assert Loser\u201d state.\n --VERIFIER NOTES-- \nThis is perfectly easy to parse having an understanding of the states and events for the protocol.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1178", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6.2", "orig_text": "See notes.", "correct_text": "See notes.", "notes": "The figure given on page 92 lists state changes which are \u201cAssert Timer Expires\u201d, \u201cReceive Inferior Assert\u201d, \u201cReceive Preferred Assert\u201d, and \u201cCouldAssert(*,G,I) -> FALSE\u201d, but the order given in the descriptions after the diagram on page 95 does not match this order.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1179", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6.2", "orig_text": "     A4:  Send AssertCancel(*,G).\r\n          Delete assert info (AssertWinner(*,G,I) and\r\n          AssertWinnerMetric(*,G,I) will then return their default\r\n          values).\r\n\r\n     A5:  Delete assert info (AssertWinner(*,G,I) and\r\n          AssertWinnerMetric(*,G,I) will then return their default\r\n          values).\r\n", "correct_text": "     A4:  Send AssertCancel(*,G).\r\n          Delete assert info (AssertWinner(*,G,I) and\r\n          AssertWinnerMetric(*,G,I) will then return to their default\r\n          values).\r\n\r\n     A5:  Delete assert info (AssertWinner(*,G,I) and\r\n          AssertWinnerMetric(*,G,I) will then return to their default\r\n          values).\r\n", "notes": "Missing words.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1180", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6.5", "orig_text": "  In this case, it needs to ignore the assert state\r\n   if it will win the assert once the SPTbit is set.\r\n", "correct_text": "  In this case, it needs to ignore the assert state\r\n   if it will win the assert once the SPT bit is set.\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1181", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.6.5", "orig_text": "       Rationale: This avoids keeping state alive on the (S,G) tree when\r\n       only (*,G) downstream members are left.  Also, it avoids sending\r\n       (S,G,rpt) joins to a router that is not on the (*,G) tree.  This\r\n       behavior might be confusing although this specification does\r\n       indicate that such a join should be dropped.\r\n", "correct_text": "       Rationale: This avoids keeping state alive on the (S,G) tree when\r\n       only (*,G) downstream members are left.  Also, it avoids sending\r\n       (S,G,rpt) joins to a router that is not on the (*,G) tree.  This\r\n       behavior might be confusing although this specification does\r\n       indicate that such a join SHOULD be dropped.\r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1182", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.9", "orig_text": "Type Types for specific PIM messages.  PIM Types are:", "correct_text": "Type\r\n Types for specific PIM messages.  PIM Types are:\r\n", "notes": "Spacing.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1183", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.9.5", "orig_text": "   Holdtime\r\n        The amount of time a receiver must keep the Join/Prune state\r\n        alive, in seconds.  If the Holdtime is set to '0xffff', the\r\n        receiver of this message should hold the state until canceled by\r\n        the appropriate canceling Join/Prune message, or timed out\r\n        according to local policy.  This may be used with dial-on-demand\r\n        links, to avoid keeping the link up with periodic Join/Prune\r\n        messages.\r\n\r\n        Note that the HoldTime must be larger than the\r\n        J/P_Override_Interval(I).\r\n", "correct_text": "   Holdtime\r\n        The amount of time a receiver MUST keep the Join/Prune state\r\n        alive, in seconds.  If the Holdtime is set to '0xffff', the\r\n        receiver of this message SHOULD hold the state until canceled by\r\n        the appropriate canceling Join/Prune message, or timed out\r\n        according to local policy.  This MAY be used with dial-on-demand\r\n        links, to avoid keeping the link up with periodic Join/Prune\r\n        messages.\r\n\r\n        Note that the HoldTime MUST be larger than the\r\n        J/P_Override_Interval(I).\r\n", "notes": "RFC 2119 keywords are not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1184", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.9.5.1", "orig_text": "  Each wildcard group set may contain one or more\r\n        (*,*,RP) source list entries in either the Joined or Pruned\r\n        lists.\r\n\r\n        A (*,*,RP) source list entry may only exist in a wildcard group\r\n        set.  When added to a Joined source list, this type of source\r\n        entry expresses the router's interest in receiving traffic for\r\n        all groups mapping to the specified RP.  \r\n", "correct_text": "  Each wildcard group set MAY contain one or more\r\n        (*,*,RP) source list entries in either the Joined or Pruned\r\n        lists.\r\n\r\n        A (*,*,RP) source list entry MAY only exist in a wildcard group\r\n        set.  When added to a Joined source list, this type of source\r\n        entry expresses the router's interest in receiving traffic for\r\n        all groups mapping to the specified RP.  \r\n", "notes": "RFC 2119 keywords are not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4324", "doc-id": "RFC5841", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   In more detail:\r\n\r\n           +--------+--------+--------+--------+\r\n           |00011001|00000100|00111010|00101001|\r\n           +--------+--------+--------+--------+\r\n            Kind=25  Length=4 ASCII :  ASCII )\r\n\r\n           +--------+--------+--------+--------+--------+\r\n           |00011001|00000101|00111110|00111010|01000000|\r\n           +--------+--------+--------+--------+--------+\r\n            Kind=25  Length=5 ASCII >  ACSII :  ASCII @", "correct_text": "   In more detail:\r\n\r\n           +--------+--------+--------+--------+\r\n           |00011001|00000100|00111010|00101001|\r\n           +--------+--------+--------+--------+\r\n            Kind=25  Length=4 ASCII :  ASCII )\r\n\r\n           +--------+--------+--------+--------+--------+\r\n           |00011001|00000101|00111110|00111010|01000000|\r\n           +--------+--------+--------+--------+--------+\r\n            Kind=25  Length=5 ASCII >  ASCII :  ASCII @", "notes": "Misspelled word ASCII as ACSII.", "submit_date": "2015-04-01", "submitter_name": "Jussi Judin", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1185", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.9.5.1", "orig_text": "  Each group-\r\n        specific set may contain (*,G), (S,G,rpt), and (S,G) source list\r\n        entries in the Joined or Pruned lists.\r\n\r\n     (*,G)\r\n          The (*,G) source list entry is used in Join/Prune messages\r\n          sent towards the RP for the specified group.  It expresses\r\n          interest (or lack thereof) in receiving traffic sent to the\r\n          group through the Rendezvous-Point shared tree.  There may\r\n          only be one such entry in both the Joined and Pruned lists of\r\n          a group-specific set.\r\n\r\n          (*,G) source list entries have the Source-Address set to the\r\n          address of the RP for group G, the Source-Address Mask-Len set\r\n          to the full length of the IP address, and both the WC and RPT\r\n          bits of the Encoded-Source-Address set.\r\n\r\n     (S,G,rpt)\r\n          The (S,G,rpt) source list entry is used in Join/Prune messages\r\n          sent towards the RP for the specified group.  It expresses\r\n          interest (or lack thereof) in receiving traffic through the\r\n          shared tree sent by the specified source to this group.  For\r\n          each source address, the entry may exist in only one of the\r\n          Joined and Pruned source lists of a group-specific set, but\r\n          not both.\r\n\r\n          (S,G,rpt) source list entries have the Source-Address set to\r\n          the address of the source S, the Source-Address Mask-Len set\r\n          to the full length of the IP address, and the WC bit cleared\r\n          and the RPT bit set in the Encoded-Source-Address.\r\n\r\n     (S,G)\r\n          The (S,G) source list entry is used in Join/Prune messages\r\n          sent towards the specified source.  It expresses interest (or\r\n          lack thereof) in receiving traffic through the shortest path\r\n          tree sent by the source to the specified group.  For each\r\n          source address, the entry may exist in only one of the Joined\r\n          and Pruned source lists of a group-specific set, but not both.\r\n", "correct_text": "  Each group-\r\n        specific set MAY contain (*,G), (S,G,rpt), and (S,G) source list\r\n        entries in the Joined or Pruned lists.\r\n\r\n     (*,G)\r\n          The (*,G) source list entry is used in Join/Prune messages\r\n          sent towards the RP for the specified group.  It expresses\r\n          interest (or lack thereof) in receiving traffic sent to the\r\n          group through the Rendezvous-Point shared tree.  There MUST \r\n          be one such entry in both the Joined and Pruned lists of\r\n          a group-specific set.\r\n\r\n          (*,G) source list entries have the Source-Address set to the\r\n          address of the RP for group G, the Source-Address Mask-Len set\r\n          to the full length of the IP address, and both the WC and RPT\r\n          bits of the Encoded-Source-Address set.\r\n\r\n     (S,G,rpt)\r\n          The (S,G,rpt) source list entry is used in Join/Prune messages\r\n          sent towards the RP for the specified group.  It expresses\r\n          interest (or lack thereof) in receiving traffic through the\r\n          shared tree sent by the specified source to this group.  For\r\n          each source address, the entry MUST exist in only one of the\r\n          Joined and Pruned source lists of a group-specific set, but\r\n          not both.\r\n\r\n          (S,G,rpt) source list entries have the Source-Address set to\r\n          the address of the source S, the Source-Address Mask-Len set\r\n          to the full length of the IP address, and the WC bit cleared\r\n          and the RPT bit set in the Encoded-Source-Address.\r\n\r\n     (S,G)\r\n          The (S,G) source list entry is used in Join/Prune messages\r\n          sent towards the specified source.  It expresses interest (or\r\n          lack thereof) in receiving traffic through the shortest path\r\n          tree sent by the source to the specified group.  For each\r\n          source address, the entry MUST exist in only one of the Joined\r\n          and Pruned source lists of a group-specific set, but not both.\r\n", "notes": "RFC 2119 keywords are not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1186", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.9.5.1", "orig_text": "   o Combining a (*,G) Join and a (S,G,rpt) Join entry in the same\r\n     message is redundant as the (*,G) entry covers the information\r\n     provided by the (S,G,rpt) entry.\r\n", "correct_text": "   o Combining a (*,G) Join and an (S,G,rpt) Join entry in the same\r\n     message is redundant as the (*,G) entry covers the information\r\n     provided by the (S,G,rpt) entry.\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1187", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.9.5.1", "orig_text": "   o The same applies for a (*,G) Prunes and (S,G,rpt) Prunes.", "correct_text": "   o The same applies for a (*,G) Prune and (S,G,rpt) Prunes.", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1188", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.9.5.1", "orig_text": "   o The combination of a (*,G) Prune and a (S,G,rpt) Join is also not\r\n     generated.\r\n", "correct_text": "   o The combination of a (*,G) Prune and an (S,G,rpt) Join is also not\r\n     generated.\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1189", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.9.5.1", "orig_text": "  o As Join/Prune messages are targeted to a single PIM neighbor,\r\n     including both a (S,G) Join and a (S,G,rpt) Prune in the same\r\n     message is usually redundant.  \r\n", "correct_text": "  o As Join/Prune messages are targeted to a single PIM neighbor,\r\n     including both an (S,G) Join and an (S,G,rpt) Prune in the same\r\n     message is usually redundant.  \r\n", "notes": "Misspellings.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2252", "doc-id": "RFC3945", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.2", "orig_text": "   One can classify LSPs into one of a small set of service levels.\r\n   Among other things, these service levels define the reliability\r\n   characteristics of the LSP.  The service level associated with a\r\n   given LSP is mapped to one or more P&R schemes during LSP\r\n   establishment.  An advantage that mapping is that an LSP may use\r\n   different P&E schemes in different segments of a network (e.g., some\r\n   links may be span protected, whilst other segments of the LSP may\r\n   utilize ring protection).  These details are likely to be service\r\n   provider specific.\r\n", "correct_text": "   One can classify LSPs into one of a small set of service levels.\r\n   Among other things, these service levels define the reliability\r\n   characteristics of the LSP.  The service level associated with a\r\n   given LSP is mapped to one or more P&R schemes during LSP\r\n   establishment.  An advantage that mapping is that an LSP may use\r\n   different P&R schemes in different segments of a network (e.g., some\r\n   links may be span protected, whilst other segments of the LSP may\r\n   utilize ring protection).  These details are likely to be service\r\n   provider specific.\r\n", "notes": "Mistype error\r\nThe change is...\r\ns/P&E/P&R/ in the 6th line", "submit_date": "2010-05-12", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2253", "doc-id": "RFC2560", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "UnknownInfo ::= NULL -- this can be replaced with an enumeration", "correct_text": "UnknownInfo ::= NULL", "notes": "The is no way to change this without making existing decoders fail decoding the answer.  The comment should therefore be removed\r\n\r\nThe same line exists in the ASN.1 module and should be removed there as well.", "submit_date": "2010-05-12", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2254", "doc-id": "RFC5877", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   ... MIME media type ...", "correct_text": "   ... media type ...", "notes": "The adaptation to RFC 4288 has been performed in an incomplete manner.\r\n\"MIME\" should better have been removed from the Abstract (1 instance)\r\nand the first paragraph of Section 1 (2 instances) as well.", "submit_date": "2010-05-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2255", "doc-id": "RFC5861", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3, pg.3", "orig_text": "   Note that this directive does not affect freshness; stale cached\r\n   responses that are used SHOULD still be visibly stale when sent\r\n|  (i.e., have a non-zero Age header and a warning header, as per HTTP's\r\n|  requirements).\r\n", "correct_text": "   Note that this directive does not affect freshness; stale cached\r\n   responses that are used SHOULD still be visibly stale when sent\r\n|  (i.e., have a non-zero Age header field and a Warning header field,\r\n   as per HTTP's requirements).\r\n                                    ^^^^^^       ^             ^^^^^^", "notes": "Rationale:\r\n- inconsistent use of standard terminology, and\r\n- inconsistent capitalization of header field names.\r\n\r\n(These issues recur in the last paragraph of Section 4.)", "submit_date": "2010-05-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8496", "doc-id": "RFC6919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "   For example: \"Applications that take advantage of typed links should\r\n   consider the attack vectors opened by automatically following,\r\n   trusting, or otherwise using links gathered from HTTP headers.\"\r\n   [RFC5988]", "correct_text": "   For example: \"Applications that take advantage of typed links SHOULD\r\n   CONSIDER the attack vectors opened by automatically following,\r\n   trusting, or otherwise using links gathered from HTTP headers.\"\r\n   [RFC5988]", "notes": "Similar to the logic in RFC8174, all the the examples SHOULD use all capitals\n --VERIFIER NOTES-- \n Thanks for the report.  The examples quote actual RFCs.  Maybe the wording should have been thought about at the time.", "submit_date": "2025-07-03", "submitter_name": "Josh McKinney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-04 10:00:00"}, {"errata_id": "1190", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.9.5.1", "orig_text": "   o The combination of a (S,G) Prune and a (S,G,rpt) Join could\r\n     possibly be used by a router to switch from receiving a particular\r\n     source on the shortest-path tree back to receiving it on the shared\r\n     tree (provided that the RPF neighbor for the shortest-path and\r\n     shared trees is common).  However, Sparse-Mode PIM does not provide\r\n     a mechanism for explicitly switching back to the shared tree.\r\n", "correct_text": "   o The combination of an (S,G) Prune and an (S,G,rpt) Join could\r\n     possibly be used by a router to switch from receiving a particular\r\n     source on the shortest-path tree back to receiving it on the shared\r\n     tree (provided that the RPF neighbor for the shortest-path and\r\n     shared trees is common).  However, Sparse-Mode PIM does not provide\r\n     a mechanism for explicitly switching back to the shared tree.\r\n", "notes": "Misspellings.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1191", "doc-id": "RFC4601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.9.5.2", "orig_text": "  On a router with a large amount of multicast state,", "correct_text": "  On a router with a large amount of multicast states,\r\n\r\n-or-\r\n\r\n  On a router with a large amount of multicast state information,\r\n\r\n-or-\r\n\r\n  On a router with a large multicast state,\r\n", "notes": "Word choice.\n --VERIFIER NOTES-- \nThis is common usage.\r\n\"state information\" might have been clearer, but \"state\" is acceptable.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1192", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.9.5.2", "orig_text": "  This list of\r\n   (S,G,rpt) Pruned source-list entries MUST not be split in multiple\r\n   messages.\r\n", "correct_text": "  This list of\r\n   (S,G,rpt) Pruned source-list entries MUST NOT be split in multiple\r\n   messages.\r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1193", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.9.5.2", "orig_text": "   If only N (S,G,rpt) Prune entries fit into a maximum-sized Join/Prune\r\n   message, but the router has more than N (S,G,rpt) Prunes to add, then\r\n   the router MUST choose to include the first N (numerically smallest\r\n   in network byte order) IP addresses.\r\n", "correct_text": "", "notes": "Only N (S,G,rpt) Prune entries are transmitted in the biggest Join/Prune message, what about the remaining (S,G,rpt) entries?  Are they ignored?  Is a second message generated?  This should be made clear.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1194", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.9.5.2", "orig_text": "  Assert messages may also be sent in response\r\n   to an Assert message from another router.\r\n", "correct_text": "  Assert messages MAY also be sent in response\r\n   to an Assert message from another router.\r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1195", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2", "orig_text": "   Either static configuration of IP addresses or an IPsec security\r\n   association may be used.  \r\n", "correct_text": "   Either static configuration of IP addresses or an IPsec security\r\n   association MAY be used.  \r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1196", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.2.1", "orig_text": "   In this \"single shared key\" mode of operation, the network\r\n   administrator must choose an SPI for each DR that will be used to\r\n   send it PIM protocol packets.  \r\n", "correct_text": "See notes.", "notes": "What does \u201cit\u201d refer to?\r\n\r\ns/it/the/", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1197", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.2.1", "orig_text": "The Security Policy Database at every\r\n   DR is configured to select an SA (including the authentication\r\n   algorithm, authentication parameters, and this SPI) when sending\r\n   Register messages to this RP.\r\n", "correct_text": "The Security Policy Database at every\r\n   DR is configured to select an SA (including the authentication\r\n   algorithm, authentication parameters, and this SPI) when sending\r\n   Register messages to an RP.\r\n", "notes": "Word choice.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1198", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.3.2.2", "orig_text": "   In order to simplify the management problem, it may be acceptable to\r\n   use the same authentication algorithm and authentication parameters,\r\n   regardless of the sending RP and regardless of the destination DR.\r\n   Although a unique SA is needed for each DR, the same authentication\r\n", "correct_text": "   In order to simplify the management problem, it MAY be acceptable to\r\n   use the same authentication algorithm and authentication parameters,\r\n   regardless of the sending RP and regardless of the destination DR.\r\n   Although a unique SA is needed for each DR, the same authentication\r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1199", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "   There are a number of possible denial-of-service attacks against PIM\r\n   that can be caused by generating false PIM protocol messages or even\r\n   by generating data false traffic.\r\n", "correct_text": "See notes.", "notes": "What does \u201cor even by generating data false traffic\u201d mean?\r\n\r\n[Adrian Farrel] Clearly \"or even by generating false data traffic.\"", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2256", "doc-id": "RFC5861", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4, pg.4", "orig_text": "   Note that this directive does not affect freshness; stale cached\r\n   responses that are used SHOULD still be visibly stale when sent\r\n|  (i.e., have a non-zero Age header and a warning header, as per HTTP's\r\n   requirements).\r\n", "correct_text": "   Note that this directive does not affect freshness; stale cached\r\n   responses that are used SHOULD still be visibly stale when sent\r\n|  (i.e., have a non-zero Age header field and a Warning header field,\r\n   as per HTTP's requirements).\r\n                                    ^^^^^^       ^             ^^^^^^", "notes": "Rationale:\r\n- inconsistent use of standard terminology, and\r\n- inconsistent capitalization of header field names.\r\n\r\n(Similar issues as for section 3 -- cf. EID=2255.)", "submit_date": "2010-05-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5182", "doc-id": "RFC4941", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6", "orig_text": "   Devices implementing this specification MUST provide a way for the\r\n   end user to explicitly enable or disable the use of temporary\r\n   addresses.", "correct_text": "   Devices implementing this specification SHOULD provide a way for the\r\n   end user to explicitly enable or disable the use of temporary\r\n   addresses.", "notes": "Allowing users to disable privacy features is not something that should be mandatory.\n --VERIFIER NOTES-- \nIt would be bad form, I suspect, for me to verify my own erratum.  =)\r\n\r\nAs 4941bis is in the works, I'll Reject this and consider whether to (re)submit an erratum for the new document once published.", "submit_date": "2017-11-13", "submitter_name": "Erik Kline", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-01-28 07:23:03"}, {"errata_id": "1200", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.4", "orig_text": "   -  Forging a (*,*,RP) join presents a possibility for a denial-of-\r\n      service attack by causing all traffic in the domain to flow to the\r\n      PMBR issuing the join.  (*,*,RP) behavior is included here\r\n      primarily for backwards compatibility with prior revisions of the\r\n      spec.  However, the implementation of (*,*,RP) and PMBR is\r\n      optional.  When using (*,*,RP), the security concerns should be\r\n      carefully considered.\r\n", "correct_text": "   -  Forging a (*,*,RP) join presents a possibility for a denial-of-\r\n      service attack by causing all traffic in the domain to flow to the\r\n      PMBR issuing the join.  (*,*,RP) behavior is included here\r\n      primarily for backwards compatibility with prior revisions of the\r\n      spec.  However, the implementation of (*,*,RP) and PMBR is\r\n      optional.  When using (*,*,RP), the security concerns SHOULD be\r\n      carefully considered.\r\n", "notes": "RFC 2119 keyword is not capitalized.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1201", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "See note.", "correct_text": "\tIPsec usage is recommended to secure PIM messages, but PIM relies upon an \r\nMRIB populated outside of PIM and it should be noted that for PIM security to be \r\neffective, securing the sources of change to the MRIB in a similar fashion to \r\nIPsec is required to be consistent and secure.", "notes": "An additional note should be made with regard to PIM security, possibly as \r\nsection 6.3.3?", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "David Ward", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1202", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "   o If the router receives a (S,G) prune alert, it will need to set\r\n     DownstreamJPState(S,G,rpt,I) to PRUNE on the discard interface.\r\n", "correct_text": "   o If the router receives an (S,G) prune alert, it will need to set\r\n     DownstreamJPState(S,G,rpt,I) to PRUNE on the discard interface.\r\n", "notes": "Misspelling.", "submit_date": "2007-12-21", "submitter_name": "Maren Peasley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1203", "doc-id": "RFC4103", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2", "orig_text": "      m=text 11000 RTP/AVP 98 100\r\n", "correct_text": "      m=text 11000 RTP/AVP 100 98\r\n", "notes": "According to RFC 3264 Offer-answer model, section 5.1, the payload types in m-lines shall be listed in order of preference. The redundancy method shall be preferred as default as described in section 4 of RFC 4103. The example should show the most common use. Therefore the redundancy payload type 100 shall be given first in the example m-line.", "submit_date": "2007-12-27", "submitter_name": "Gunnar Hellstrom", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1204", "doc-id": "RFC4102", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "       m=text 11000 RTP/AVP 98 100", "correct_text": "       m=text 11000 RTP/AVP 100 98", "notes": "According to RFC 3264 Offer-answer model, section 5.1, the payload types in m-lines shall be listed in order of preference. The redundancy method shall be preferred as default as described in section 4 of RFC 4103. The example should show the most common use. Therefore the redundancy payload type 100 shall be given first in the example m-line.", "submit_date": "2007-12-27", "submitter_name": "Gunnar Hellstrom", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1205", "doc-id": "RFC5058", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "[1075]", "correct_text": "[1075][3973]", "notes": "In the second bullet in the lower part of page 7, the RFC refers to\r\ndense-mode multicast routing protocols.  Beyond the dated RFC 1075,\r\nit should mention the state-of-the-art Dense-Mode PIM (PIM-DM), published\r\nin RFC 3973.\r\nA proper entry [3973] needs to be added to Section 16 as well.\r\n\r\nThat will be\r\n[3973] Adams, A, Nicholas, J and Siadak, W., \"Protocol Independent Multicast -\r\n       Dense Mode (PIM-DM): Protocol Specification (Revised),\" RFC 3973,\r\n       January 2005\r\n\r\n       \r\n", "submit_date": "2008-01-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1206", "doc-id": "RFC5058", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2.2", "orig_text": "   The Xcast4 header is format depicted in Figure 4.  [...]", "correct_text": "   The Xcast4 header format is depicted in Figure 4.  [...]", "notes": "Word twister.", "submit_date": "2008-01-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2633", "doc-id": "RFC4319", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "   hdsl2ShdslEndpointCurrAtn OBJECT-TYPE\r\n      SYNTAX      Integer32(-127..128)\r\n\r\n[...]\r\n\r\n   hdsl2ShdslEndpointCurrSnrMgn OBJECT-TYPE\r\n      SYNTAX      Integer32(-127..128)\r\n", "correct_text": "   hdsl2ShdslEndpointCurrAtn OBJECT-TYPE\r\n      SYNTAX      Integer32(-128..127)\r\n\r\n[...]\r\n\r\n   hdsl2ShdslEndpointCurrSnrMgn OBJECT-TYPE\r\n      SYNTAX      Integer32(-128..127)", "notes": "The data type for SNR margin and loop attenuation defined in ITU-T G.991.2 section 9.5.5.7.14 is signed char (-128..127). In particular for the attenuation value it is important that -128 is part of the allowed range, because this means 'not available'.", "submit_date": "2010-11-16", "submitter_name": "Stefan Reichmuth", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1226", "doc-id": "RFC5109", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "In Step 13,\r\n\r\n      13. Take the next 16 bits of the recovery bit string.  Whatever\r\n          unsigned integer this represents (assuming network-order),\r\n          take that many bytes from the recovery bit string and append\r\n          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n          them to the new packet.  This represents the CSRC list,\r\n          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n          extension, payload, and the padding of the RTP payload.\r\n", "correct_text": "      13. Take the next 16 bits of the recovery bit string.  Whatever\r\n          unsigned integer this represents (assuming network-order),\r\n          it represents the cumulative length of the CSRC list,\r\n          ^^            ^^^^^^^^^^^^^^^^^^^^^^^^\r\n          extension, payload, and the padding of the RTP payload\r\n          of the packet to be recovered.\r\n          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n", "notes": "\n --VERIFIER NOTES-- \nFrom Peter Musgrave's review:\r\nEditorial: rephrases a step in the instructions for RTP header reconstruction \r\nAction: Rejected (In my opinion the new text is not significantly clearer and the use of the word cumulative is a bit confusing). ", "submit_date": "2008-01-03", "submitter_name": "Adam Li", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1331", "doc-id": "RFC5233", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Section 4", "orig_text": "The \":user\" argument specifies the user sub-part of the local-part of\r\nan address.  If the address is not encoded to contain a detail sub-\r\npart, then \":user\" specifies the entire left side of the address\r\n(equivalent to \":localpart\").", "correct_text": "The \":user\" argument specifies the user sub-part of the local-part of\r\nan address.  If the address is not encoded to contain a detail sub-\r\npart, then \":user\" specifies the entire left side of the address\r\n(equivalent to \":local-part\").", "notes": "Through out the document \":local-part\" is hyphenated, except for the instance in the last sentence of the paragraph above.\n --VERIFIER NOTES-- \n\":localpart\" is defined in Section 8.3 of RFC 5228:\r\n\r\n   ADDRESS-PART = \":localpart\" / \":domain\" / \":all\"\r\n", "submit_date": "2008-02-26", "submitter_name": "Derek Diget", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1207", "doc-id": "RFC4918", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.10.1", "orig_text": "   A LOCK request to an existing resource will create a lock on the\r\n   resource identified by the Request-URI, provided the resource is not\r\n   already locked with a conflicting lock.  The resource identified in\r\n   the Request-URI becomes the root of the lock.  LOCK method requests\r\n   to create a new lock MUST have an XML request body.  The server MUST\r\n   preserve the information provided by the client in the 'owner'\r\n   element in the LOCK request.  The LOCK request MAY have a Timeout\r\n   header.\r\n", "correct_text": "   A LOCK request to an existing resource will create a lock on the\r\n   resource identified by the Request-URI, provided the resource is not\r\n   already locked with a conflicting lock.  The Request-URI becomes the\r\n   root of the lock.  LOCK method requests\r\n   to create a new lock MUST have an XML request body.  The server MUST\r\n   preserve the information provided by the client in the 'owner'\r\n   element in the LOCK request.  The LOCK request MAY have a Timeout\r\n   header.", "notes": "This is incorrect in that it implies that the \"lock root\" is a resource, not a URL (<http://ietf.osafoundation.org:8080/bugzilla/show_bug.cgi?id=251>). However, should a directly locked resource have multiple bindings, only the one used in the Request-URI of the LOCK request will be the protected from changes of clients not supplying the lock token.\r\n\r\nNote that this change makes the description consistent with the definition of the DAV:lockroot XML element in Section 14.12 of [RFC4918].", "submit_date": "2008-01-03", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1208", "doc-id": "RFC5058", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2.2 ff.", "orig_text": "     0               1               2               3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     | [...]                                                         | \r\n", "correct_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     | [...]                                                         |\r\n", "notes": "The ruler line on top of Figure 4 (page 18) is garbled.\r\nThe figures should be centered to the bit positions, as usual;\r\nthe ten's digits need decade alignment; someone must have confused\r\nthat with octet numbering.\r\nThe same correction needs to be applied to\r\no  Figure 5 in the same section (mid-page 19),\r\no  Figure 6 in Section 9.3.2.1 (top of page 21),\r\no  Figure 7 in Section 9.3.2.2 (top of page 22).\r\n\r\nNote to RFC-Ed.: This issue looks like an influenza virus,\r\nit has already affected multiple recent RFCs!", "submit_date": "2008-01-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1209", "doc-id": "RFC5087", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1, 5th para", "orig_text": "   As with all PWs, TDMoIP PWs may be manually configured or set up\r\n   using the PWE3 control protocol [RFC4447].  Extensions to the PWE3\r\n   control protocol required specifically for setup and maintenance of\r\n   TDMoIP pseudowires are described in [TDM-CONTROL].\r\n", "correct_text": "|  As with all PWs over MPLS, TDMoIP PWs may be manually configured or set\r\n   up using the PWE3 control protocol [RFC4447].  Extensions to the PWE3\r\n   control protocol required specifically for setup and maintenance of\r\n|  TDMoIP pseudowires over MPLS are described in [TDM-CONTROL].\r\n", "notes": "The RFC pretends to cover all kinds of PWs; RFC 4447 only applies\r\nto PWE3 over MPLS (with LDP signaling).\r\nEither the abover text needs to be restricted in scope as porposed in the NEW\r\ntext or it should be amended to correctly cover the L2TPv3 case as well.\n --VERIFIER NOTES-- \n   This was correct at the time of publication. It was only with the later publication of RFC5611 that it became possible to signal L2TPv3 TDM PWs. ", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1210", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1, 2nd para", "orig_text": "           [...].  In contrast to SAToP, structure-aware methods such as\r\n   TDMoIP ensure the integrity of TDM structure and thus enable the PW\r\n   to better withstand network degradations.  [...]", "correct_text": "           [...].  In contrast to SAToP, structure-aware methods such as\r\n   TDMoIP ensure the integrity of the TDM structure and thus enable the\r\n   PW to better withstand network degradations.  [...]", "notes": "Missing article.", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1211", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2, 6th para", "orig_text": "   When structure-aware TDM transport is employed, it is possible to\r\n   explicitly safeguard TDM structure during transport over the PSN,\r\n   thus making possible to effectively conceal packet loss events.\r\n", "correct_text": "   When structure-aware TDM transport is employed, it is possible to\r\n|  explicitly safeguard the TDM structure during transport over the PSN,\r\n   thus making possible to effectively conceal packet loss events.\r\n", "notes": "Missing article.", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1212", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   Protocol  (8 bits) is the IP protocol field.  It must be set to 0x73\r\n      (115), the user port number that has been assigned to L2TP by\r\n      IANA.\r\n", "correct_text": "   Protocol  (8 bits) is the IP protocol field.  It must be set to 0x73\r\n|     (115), the protocol number that has been assigned to L2TP by\r\n      IANA.\r\n                 ^^^^^^^^", "notes": "Near the bottom of page 14, the explanations belo Figure 5\r\nconfuse the terms \"port number\" and \"protocol\".  Sigh!", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1227", "doc-id": "RFC5109", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "In Step 7,\r\n\r\n      7.  The total length of the recovered media packet is recovered\r\n          from the recovery operation at protection level 0 of the\r\n          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n          recovered media packet.  This information can be used to check\r\n          ^^^^^^^^^^^^^^^^^^^^^^\r\n          if the complete recovery operation (of all levels) has\r\n          recovered the packet to its full length.\r\n\r\n", "correct_text": "      7.  The total length of the recovered media packet is recovered\r\n          during the reconstruction of the RTP header (Step 13 in \r\n          ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n          Section 9.1).  This information can be used to check\r\n          ^^^^^^^^^^^^\r\n          if the complete recovery operation (of all levels) has\r\n          recovered the packet to its full length.\r\n\r\n", "notes": "", "submit_date": "2008-01-03", "submitter_name": "Adam Li", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4285", "doc-id": "RFC6020", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12", "orig_text": "revision-date-stmt = revision-date-keyword sep revision-date stmtend", "correct_text": "revision-date-stmt =\r\n    revision-date-keyword sep revision-date optsep stmtend", "notes": "Allow spaces between the date string and the statement's end.\n --VERIFIER NOTES-- \nThis errata is now covered by the updated errata 4283", "submit_date": "2015-03-02", "submitter_name": "Cesar Crusius", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1213", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4, 3rd p.", "orig_text": "   Ethernet encapsulation introduces restrictions on both minimum and\r\n   maximum packet size.  Whenever the entire TDMoIP packet is less than\r\n   64 bytes, padding is introduced and the true length indicated by\r\n   using the Length field in the control word.  In order to avoid\r\n   fragmentation, the TDMoIP packet MUST be restricted to the maximum\r\n   payload size.  For example, the length of the Ethernet payload for a\r\n   UDP/IP encapsulation of AAL1 format payload with 30 PDUs per packet\r\n   is 1472 bytes, which falls below the maximal permitted payload size\r\n   of 1500 bytes.\r\n", "correct_text": "   Ethernet encapsulation introduces restrictions on both minimum and\r\n   maximum packet size.  Whenever the entire TDMoIP packet is less than\r\n   64 bytes, padding is introduced and the true length indicated by\r\n   using the Length field in the control word.  In order to avoid\r\n   fragmentation, the TDMoIP packet MUST be restricted to the maximum\r\n   payload size.  For example, the length of the Ethernet payload for a\r\n|  UDP/IP encapsulation of the AAL1 format payload with 30 PDUs per packet\r\n   is 1472 bytes, which falls below the maximal permitted payload size\r\n   of 1500 bytes.\r\n", "notes": "", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1214", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4", "orig_text": "   Rows 1 through 6 are the (DIX) Ethernet header; for 802.3 there may\r\n   be additional fields, depending on the value of the length field, see\r\n   [IEEE802.3].  Fields not previously described will now be explained.\r\n", "correct_text": "|  Rows 1 through 5 are the (DIX) Ethernet header; for 802.3 there may\r\n   be additional fields, depending on the value of the length field, see\r\n   [IEEE802.3].  Fields not previously described will now be explained.\r\n", "notes": "On page 16, the explanation immediately below Figure 6 gives the wrong\r\nnumber of rows (6) -- it should be 5 !", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1215", "doc-id": "RFC5087", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6, 7th para", "orig_text": "   When the L flag is set there are four possibilities for treatment of\r\n   payload content.  The default is for IWF1 to fill the payload with\r\n   the appropriate amount of AIS (usually all-ones) data.  If the AIS\r\n   has been generated before the IWF this can be accomplished by copying\r\n   the received TDM data; if the penultimate TDM link fails and the IWF\r\n   needs to generate the AIS itself.  [...]", "correct_text": "   When the L flag is set there are four possibilities for treatment of\r\n   payload content.  The default is for IWF1 to fill the payload with\r\n   the appropriate amount of AIS (usually all-ones) data.  If the AIS\r\n   has been generated before the IWF this can be accomplished by copying\r\n|  the received TDM data; if the penultimate TDM link fails, the IWF \r\n   needs to generate the AIS itself.  [...]\r\n                                                           ^^^^^^", "notes": "", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1216", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6, 10th para", "orig_text": "a)\r\n     ... trail terminated scenario ...\r\n \r\n\r\nb)\r\n\r\n     ... trail extended scenario ...", "correct_text": "a)\r\n     ... trail-terminated scenario ...\r\n \r\n\r\nb)\r\n\r\n     ... trail-extended scenario ...", "notes": "Two missing hyphens.", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1217", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6, 11th para", "orig_text": "   The final possibility is that of a unidirectional defect in the PSN.\r\n   In such a case, TDMoIP IWF1 sends packets toward IWF2, but these are\r\n   not received.  [...]", "correct_text": "   The final possibility is that of a unidirectional defect in the PSN.\r\n|  In such a case, the TDMoIP IWF1 sends packets toward IWF2, but these \r\n   are not received.  [...]", "notes": "Missing article.", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1218", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6, 12th para", "orig_text": "   [...]\r\n   Since TDM PWs are inherently bidirectional, a persistent defect in \r\n|  either directional results in a bidirectional service failure.  [...]   \r\n                   ^^", "correct_text": "   [...]\r\n   Since TDM PWs are inherently bidirectional, a persistent defect in\r\n | either direction results in a bidirectional service failure.  [...]", "notes": "Typo/grammar.", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1219", "doc-id": "RFC5087", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.3", "orig_text": "                                                 vvv\r\n      1.  If the TDMoIP PW has been set up using the PWE3 control\r\n      protocol [RFC4447], the regular PW teardown procedures of these\r\n      protocols SHOULD be used.\r\n      ^^^^^^^^^                                   ^^^^^^^^^^^^^^^^^^^^", "correct_text": "      1.  If a TDMoIP PW over MPLS has been set up using the PWE3 control\r\n      protocol [RFC4447], the regular PW teardown procedures of that\r\n      protocol SHOULD be used.\r\n", "notes": "In the last part of Section 7.3, on mid-page 27, the RFC again does\r\nnot fulfill its promises of covering all kind of PW technology.\r\nThe first part of the sentence above again only talks about a single\r\ncontrol protocol - RFC 4447 (PW setup & maintenance for MPLS using LDP),\r\nbut the second part inconsistently says \"procedures of these protocols\".\r\nSo what about L2TPv3 ???\r\n\r\nThe text needs to be restricted in scope and made consistent as proposed\r\nin the NEW text, or it needs to be expanded to cover L2TPv3 as well.\n --VERIFIER NOTES-- \n   This (pre-RFc5611) text was correct at the time of publication. ", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2634", "doc-id": "RFC3219", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.1.3", "orig_text": "      PentaDecimal-routing-number   = *pentadecimal-digit\r\n-     pentadecimal-routing-digit    = PENTADECIMAL-DIGIT\r\n", "correct_text": "      PentaDecimal-routing-number   = *pentadecimal-digit\r\n-     pentadecimal-digit            = PENTADECIMAL-DIGIT\r\n", "notes": "BNF variable \"pentadecimal-routing-digit\" should be \"pentadecimal-digit\", by analogy with section 5.1.1.2.", "submit_date": "2010-11-16", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2732", "doc-id": "RFC5237", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   This document replaces the RFC 2780 Section 4.3 rule [RFC2780] with\r\n   the following:\r\n\r\n      IANA allocates values from the IPv4 Protocol name space following\r\n      an IESG Approval or Standards Action process.\r\n\r\n   This document also makes an implicit change to the rule for the IPv6\r\n   Next Header field in Section 5.3 of RFC 2780.  That rule refers to\r\n   the rule in Section 4.3 of the same RFC.  From now on, this reference\r\n   should be understood to refer to the rule revised here, i.e., without\r\n   the Expert Review option.\r\n", "correct_text": "   This document replaces the RFC 2780 Section 4.3 rule [RFC2780] with\r\n   the following:\r\n\r\n      IANA allocates values from the IPv4 Protocol name space following\r\n      an IESG Approval or Standards Action process [RFC5226].\r\n\r\n   This document also makes an implicit change to the rule for the IPv6\r\n   Next Header field in Section 5.3 of RFC 2780.  That rule refers to\r\n   the rule in Section 4.3 of the same RFC.  From now on, this reference\r\n   should be understood to refer to the rule revised here, i.e., without\r\n   the Expert Review option.\r\n", "notes": "The reference to RFC 5226 is probably missing here.", "submit_date": "2011-02-23", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1220", "doc-id": "RFC5087", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9", "orig_text": "   For MPLS PSNs, PW Types for TDMoIP PWs are allocated in [RFC4446].\r\n", "correct_text": "   For MPLS PSNs, PW Types for TDMoIP PWs have originally been allocated\r\n   provisionally in [RFC4446]; IANA has updated the References for MPLS\r\n   pseudowire types 0x0016 and 0x0018 (for TDMoIP AAL1 mode and TDMoIP\r\n   AAL2 mode respectively) in the \"pwe3-parameters\" registry to point\r\n   to RFC 5087.\r\n\r\n   IANA has allocated two pseudowire type values for these encapsulations\r\n   from the \"L2TPv3 Pseudowire Types\" sub-registry of the \"l2tp-parameters\"\r\n   registry as follows:\r\n         <TBD1>  -  TDMoIP AAL1 Mode             [RFC5087]\r\n         <TBD2>  -  TDMoIP AAL2 Mode             [RFC5087]\r\n", "notes": "The IANA considerations given are incomplete and much too imprecise.\r\n\r\nThe net result is that IANA has *not* reparented the assignments\r\nfor TDMoIP to RFC 5087, leaving the registry inconsistent and\r\nconfusing for all but the real PWE3 gurus.\r\n\r\nAnd it has been missed entirely to request allocation of L2TPv3\r\nPW types for the two encapsulations described in RFC 5087.\r\n\r\nThe NEW text shows what IANA better should have been advised to do\r\nduring the publication process of RFC 5087.\r\n\r\nPerhaps, it is not too late to have these allocations be performed\r\nafter the publication of RFC 5087.\n --VERIFIER NOTES-- \nThe PW types registry has been updated so that types 0x16 and 0x18 now point to RFC5087. There seems to be limited value to the reader of RFC5087 in directing them to an erratum describing this registry update.\r\n\r\nRFC5611 is the document that describes the signalling for TDM PWs using L2TPv3 and allocation of associated  code points.\r\n", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1221", "doc-id": "RFC5087", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "App. A", "orig_text": "      if D > 0 then\r\n        { packets expected, expected+1, ... received-1 are lost }\r\n         while not over-run\r\n           place filler (all-ones or interpolation) into playout buffer\r\n           if not over-run then\r\n             place packet contents into playout buffer\r\n           else\r\n             discard packet contents\r\n           set expected = (received + 1) mod 2^16\r\n       else  { late packet arrived }\r\n         [...]", "correct_text": "       if D > 0 then\r\n         { packets expected, expected+1, ... received-1 are lost }\r\n         while not over-run  and  D > 0\r\n           place filler (all-ones or interpolation) into playout buffer\r\n           set D = D - 1\r\n         if not over-run then\r\n           place packet contents into playout buffer\r\n         else\r\n           discard packet contents\r\n         set expected = (received + 1) mod 2^16\r\n       else  { late packet arrived }\r\n         [...]", "notes": "The pseudocode on mid-page 31 is severely flawed.\r\nThe counter value 'D' is never decremented and hence almost useless.\r\nThe code will erroneously loop until over-run.\r\nAlso, the final treatment must be taken out of the loop,\r\nwhich needs to be indicated by reducing the indentation of 5 lines\r\nby two character positions.\n --VERIFIER NOTES-- \n   D is a local temporary variable that is recalculated whenever a new packet is received and the condition (received = expected) is false. The scope of D is the else condition in which it is calculated.\r\n", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1222", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "App. B", "orig_text": "   When the TDM circuit is channelized according to [G704], and in\r\n   particular when it is desired to fractional E1 or T1, it is\r\n   advantageous to use one of the structured AAL1 circuit emulation\r\n   services.  [...]", "correct_text": "   When the TDM circuit is channelized according to [G704], and in\r\n | particular when it is desired to transport fractional E1 or T1, it is\r\n   advantageous to use one of the structured AAL1 circuit emulation\r\n   services.  [...]", "notes": "In the first paragraph on page 33, the verb \"transport\"  (or similar)\r\nis missing.", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1223", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "App. C", "orig_text": "   CID  (8 bits) channel identifier is an identifier that must be unique\r\n      for the PW.  The values 0-7 are reserved for special purposes,\r\n      (and if interworking with VoDSL is required, so are values 8\r\n      through 15 as specified in [LES]), thus leaving 248 (240) CIDs per\r\n      PW.  The mapping of CID values to channels MAY be manually\r\n      configured manually or signaled.\r\n", "correct_text": "   CID  (8 bits) channel identifier is an identifier that must be unique\r\n      for the PW.  The values 0-7 are reserved for special purposes,\r\n      (and if interworking with VoDSL is required, so are values 8\r\n      through 15 as specified in [LES]), thus leaving 248 (240) CIDs per\r\n |    PW.  The mapping of CID values to channels MAY be configured \r\n      manually or signaled.\r\n", "notes": "Replication of \"manually\" fixed.", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1224", "doc-id": "RFC5087", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Norm. Ref's", "orig_text": "   [RFC2119]     Bradner, S., \"Key Words in RFCs to Indicate Requirement\r\n                 Levels\", RFC 2119, March 1997.\r\n", "correct_text": "   [RFC2119]     Bradner, S., \"Key Words in RFCs to Indicate Requirement\r\n|                Levels\", BCP 14, RFC 2119, March 1997.\r\n                          ^^^^^^^^", "notes": "The \"BCP14, \" tag for RFC 2119 is missing.", "submit_date": "2008-01-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1225", "doc-id": "RFC5109", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "In the 2nd Paragraph\r\n\r\n... signaled by different MIMEs from those of RFC 3009, ...\r\n             ^^^^^^^^^^^^^^^^^^", "correct_text": "... signaled as a media type different from those of RFC 3009, ...\r\n             ^^^^^^^^^^^^^^^^^^^^^^^^^", "notes": "", "submit_date": "2008-01-03", "submitter_name": "Adam Li", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2257", "doc-id": "RFC4717", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "7.2.  VPC Case\r\n\r\n   When configured for a VPC cell relay service, both PEs SHOULD act as\r\n   a VP cross-connect in accordance with the OAM procedures defined in\r\n   [I.610].\r\n\r\n   The PEs SHOULD be able to process and pass the following OAM cells\r\n   transparently according to [I.610]:\r\n\r\n     - F4 AIS (segment and end-to-end)\r\n     - F4 RDI (segment and end-to-end)\r\n     - F4 loopback (segment and end-to-end)\r\n", "correct_text": "7.2.  VPC Case\r\n\r\n   When configured for a VPC cell relay service, both PEs SHOULD act as\r\n   a VP cross-connect in accordance with the OAM procedures defined in\r\n   [I.610].\r\n\r\n   The PEs SHOULD be able to process and pass the following OAM cells\r\n   transparently according to [I.610]:\r\n\r\n     - F4 AIS (segment and end-to-end)\r\n     - F4 RDI (segment and end-to-end)\r\n     - F4 loopback (segment and end-to-end)\r\n     - F4 CC (segment and  end-to-end)", "notes": "As per [I.610] all OAM cells must be transferred transparently , RFC 4717 does not mentioned the F4 CC OAM cell .", "submit_date": "2010-05-13", "submitter_name": "Ron Insler", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5183", "doc-id": "RFC4566", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.  SDP Attr", "orig_text": " a=rtpmap:<payload type> <encoding name>/<clock rate> [/<encoding\r\n         parameters>]", "correct_text": " a=rtpmap:<payload type> <encoding name>/<clock rate>[/<encoding\r\n         parameters>]", "notes": "rtpmap requires format below\r\n\r\na=rtpmap:97 L16/8000\r\na=rtpmap:98 L16/11025/2\r\n\r\nno space between clock rate and optional parameter", "submit_date": "2017-11-14", "submitter_name": "no space before encoding parameter in rtpmap value", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 19:55:48"}, {"errata_id": "1230", "doc-id": "RFC5109", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.3", "orig_text": "In Figure 21,\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 RTP Header (RED) - 6 octets                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Redundant Encoding Block Header (RED) - 4 octets        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        FEC Packet Data                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        Primary Encoding Block Header (RED) - 1 octet          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Media Packet Data                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 RTP Header (RED) - 12 octets                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Redundant Encoding Block Header (RED) - 4 octets        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        Primary Encoding Block Header (RED) - 1 octet          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        FEC Packet Data                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Media Packet Data                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "- The RTP Header should be 12 octets instead of 6 octets.\r\n- The Primary Encoding Block Header (RED) should appear before the FEC Packet Data.", "submit_date": "2008-01-03", "submitter_name": "Adam Li", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1231", "doc-id": "RFC792", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "In the Introduction, it says:", "orig_text": "no ICMP messages are sent about ICMP messages", "correct_text": "no ICMP messages are sent about ICMP error messages\r\n\r\n", "notes": "For instance, echo replies are sent about echo messages. The context of the original sentence indicates that the author only referred to error messages but the sentence itself is not clear and I've seen the editorial error reproduced in some places.", "submit_date": "2008-01-04", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1232", "doc-id": "RFC5022", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.1, page 11", "orig_text": "   When the conference is created by sending an INVITE containing a\r\n   MSCML <configure_conference> payload, the resulting SIP dialog is\r\n|  termed the \"Conference Control Leg.\"  This leg has several useful\r\n   properties.  The lifetime of the conference is the same as that of\r\n", "correct_text": "   When the conference is created by sending an INVITE containing a\r\n   MSCML <configure_conference> payload, the resulting SIP dialog is\r\n|  termed the \"Conference Control Leg\".  This leg has several useful\r\n   properties.  The lifetime of the conference is the same as that of\r\n", "notes": "Syntax error in second paragraph on page 11.\r\n(Period is not part of the term.)\r\nPlease apply 'rational quotation' !\n --VERIFIER NOTES-- \n   This (period inside the quote marks) is a common typographic convention, especially among LaTeX users.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2733", "doc-id": "RFC5771", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "[IANA]", "correct_text": "[IANA-protocols]", "notes": "All references named [IANA] should be replaced by [IANA-protocols] because such references refer to the list of current assignments, that are placed at the location, mentioned as [IANA-protocols].", "submit_date": "2011-02-24", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1238", "doc-id": "RFC5022", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.1", "orig_text": "   o  locale - optional, no default value: Specifies the language and\r\n      country variant used for resolving spoken variables.  The language\r\n      is defined as a two-letter code per ISO 639.  The country variant\r\n      is also defined as a two-letter code per ISO 3166.  These codes\r\n      are concatenated with a single underscore (%x5F) character.\r\n", "correct_text": "< to be specified >", "notes": "The RFC should better apply existing IETF standards and not\r\ntry to establish ad-hoc usage conventions and/or syntaxes\r\nfor details already well specified in the IETF.\r\n\r\nIn particular, it is considered an error (on top of page 26)\r\nto not apply, and refer to, RFC 4646 (BCP 47) for the\r\ndefinition of language tags. \r\nRFC 4646 deliberately has modified and extended the earlier\r\nconventions roughly corresponding to what is described here.\n --VERIFIER NOTES-- \n   Authors comment: BCP 47 wasn't out yet when the base spec was published.\r\nA new protocol - hence a new RFC - should make the changes suggested here.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1262", "doc-id": "RFC5031", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "App.A (p.13)", "orig_text": "   tel:sos  This solution avoids name conflicts, but requires extending\r\n|     the \"tel\" URI \"tel\" [RFC3966].  It also only works if every\r\n      outbound proxy knows how to route requests to a proxy that can\r\n      reach emergency services since tel URIs do not identify the\r\n      destination server.\r\n", "correct_text": "   tel:sos  This solution avoids name conflicts, but requires extending\r\n|     the \"tel\" URI [RFC3966].  It also only works if every outbound\r\n      proxy knows how to route requests to a proxy that can reach\r\n      emergency services since tel URIs do not identify the destination\r\n      server.\r\n", "notes": "Spurious word replication of  \"tel\" .\r\n\r\nFor conformance with the display enhancement style used throughout the\r\ndocument, it might also have been preferable to use single quotes:\r\n'tel' .", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1263", "doc-id": "RFC5012", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8 (p.19)", "orig_text": "   Ma15.  Traceable resolution:  The mapping protocol SHOULD support the\r\n|     ability of the mapping client to be able to determine the entity\r\n      or entities that provided the emergency address resolution\r\n      information.\r\n", "correct_text": "   Ma15.  Traceable resolution:  The mapping protocol SHOULD support the\r\n|     ability of the mapping client to determine the entity or entities\r\n      that provided the emergency address resolution information.\r\n", "notes": "\"double replication\":  ability to   <->  to be able to   :-)\r\n\r\nNote:\r\nThe previous entry of this same Errata Entry has been truncated\r\ninadvertently -- please remove it.", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1264", "doc-id": "RFC5088", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2 (p.4/bot.)", "orig_text": "   TLV: Type-Length-Variable data encoding.", "correct_text": "   TLV: Type-Length-Value data encoding.", "notes": "Wrong expansion of acronym;\r\ncf. RFC 4940 and RFC-Ed. file \"abbrev.expansion.txt\"", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1265", "doc-id": "RFC5089", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2 (p.4 bot.)", "orig_text": "   TLV: Type-Length-Variable data encoding.\r\n", "correct_text": "   TLV: Type-Length-Value data encoding.\r\n", "notes": "Wrong expansion of acronym;\r\ncf. RFC 3359 and RFC-Ed. file \"abbrev.expansion.txt\".", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1233", "doc-id": "RFC5022", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   Attributes of <configure_conference>:\r\n\r\n   o  reservedtalkers - optional (see note), no default value: The\r\n      maximum number of talker legs allocated for the conference.  Note:\r\n+     required when establishing the Conference Control Leg but optional\r\n+     in subsequent <configure_conference> requests.\r\n\r\n  o  reserveconfmedia - optional, default value \"yes\": Controls\r\n      allocation of resources to enable playing or recording to or from\r\n?     the entire conference.\r\n?\r\n?  When the reservedtalkers+1st INVITE arrives at the media server, the\r\n   media server SHOULD generate a 486 Busy Here response.  Failure to\r\n   send a 486 response to this condition can cause the media server to\r\n   oversubscribe its resources.", "correct_text": "< amended/clarified text should be supplied by authors >\r\n", "notes": "The text spanning from page 12 to page 13 lacks of precision.\r\n\r\nIn the first bullet, it precisely specifies in which kind of leg\r\nthe attribute applies.\r\nSimilar information is missing entirely from the second bullet.\r\nAlso, it is not unambiguously clear whether \"reservedtalkers+1st INVITE\"\r\nshall count the control leg or not.\r\n\r\nWithout added clarification, interoperability might suffer.\r\n\r\nAuthors response: In four years of deployment, no one has run into a real problem in the real world.  No change needed.\r\n\n --VERIFIER NOTES-- \n   ", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1234", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.5", "orig_text": "   A client can modify a leg by issuing an INFO on the dialog associated\r\n | with the participant leg.  For example, Figure 8 mutes a conference\r\n   leg.\r\n", "correct_text": "   A client can modify a leg by issuing an INFO on the dialog associated\r\n | with the participant leg.  For example, the request in Figure 8 mutes\r\n   a conference leg.\r\n", "notes": "Text below Figure 7 (on page 15) is misleading.\r\nFigure 8 is printed on the paper sheet in my hand\r\nand does not mute anything   :-)", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1235", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.7, 3rd par", "orig_text": "|  A request for an active talker report is in Figure 9.  The active\r\n   talker report enumerates the current call legs in the mix.\r\n", "correct_text": "|  A request for an active talker report is shown in Figure 9.  The\r\n   active talker report enumerates the current call legs in the mix.\r\n", "notes": "Improved language.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1236", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.8.2.3", "orig_text": "   The corresponding MSCML request is as follows.\r\n   <?xml version=\"1.0\"?>\r\n   <MediaServerControl version=\"1.0\">\r\n   ...\r\n\r\n   Figure 12: Join Agent Request", "correct_text": "   The corresponding MSCML request is as follows.\r\n|\r\n   <?xml version=\"1.0\"?>\r\n   <MediaServerControl version=\"1.0\">\r\n   ...\r\n\r\n   Figure 12: Join Agent Request\r\n\r\n", "notes": "On page 22, the XML shown in Figure 12 should have been separated\r\nfrom the preceding text with a blank line.\r\n\r\nThe same issue recurs in Section 5.8.2.4 below (on the same page),\r\nwith respect to Figure 13.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1237", "doc-id": "RFC5022", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.1", "orig_text": "URL       and        URLs", "correct_text": "URI       and        URIs", "notes": "Throughout Section 6.1.1. ff., the RFC should better use\r\nIETF standard terminology as codified in STD 66, RFC 3986.\r\n\r\nIn particular, the attribute name \"baseurl\" is a misnomer\r\nand should better have been named \"baseuri\" (bottom of page 24).\n --VERIFIER NOTES-- \n   Author comment: Sounds editorial to me. If you want to change it everywhere, go for it.  Changing baseurl to baseuri would change the protocol. Since it really is a seven-character string that seems to mean something, no harm in leaving it as is.\r\n", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1241", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.1.1", "orig_text": "   o  gaindelta - optional, default value \"0\": Sets the relative gain to\r\n|     be applied to the content URL.  The value of this attribute is\r\n      specified in units of dB.  The media server MAY silently cap\r\n      values that exceed the gain limits imposed by the platform.  The\r\n      level reverts back to its original value when playback of the\r\n|     content URL has been completed.\r\n", "correct_text": "   o  gaindelta - optional, default value \"0\": Sets the relative gain to\r\n|     be applied to the content specified by the URI.  The value of this\r\n      attribute is specified in units of dB.  The media server MAY\r\n      silently cap values that exceed the gain limits imposed by the\r\n      platform.  The level reverts back to its original value when\r\n|     playback of the content has been completed.\r\n", "notes": "Again, sluggish language (and non-use of STD 66 terminology).", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1266", "doc-id": "RFC5088", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4, 2nd par", "orig_text": "|  A PCED sub-TLV may include several NEIG-PCE-DOMAIN sub-TLVs when the\r\n   PCE can compute paths towards several neighbor PCE-Domains.\r\n", "correct_text": "|  A PCED TLV may include several NEIG-PCE-DOMAIN sub-TLVs when the PCE\r\n   can compute paths towards several neighbor PCE-Domains.\r\n", "notes": "In OSPF, PCED is a TLV, not a sub-TLV, as clearly stated\r\nin this RFC.  All other occurrences of 'PCED' in the RFC\r\nindeed correctly use 'TLV'.", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1267", "doc-id": "RFC5088", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.6, line 1", "orig_text": "         ... PCED TLV, may have ...", "correct_text": "         ... PCED TLV may have ...", "notes": "Spurious comma, distorting the grammar.\r\n\r\n>>>  This issue is not present in the equivalent text of\r\n     RFC 5089, which has been published together with this RFC.\r\n\r\nThis report is primarily intended as a kind of quality control feedback.\r\n\r\nAnother typographical flaw of similar 'severity' appears in Section 11.2,\r\nwhere punctuation has been orphaned into the 3rd line of the '[PCEP]'\r\nentry:\r\n\r\n   [PCEP]      Vasseur, JP., Ed., and JL. Le Roux, Ed., \"Path\r\n               Computation Element (PCE) communication Protocol (PCEP)\r\n|              \", Work in Progress, November 2007.\r\n               ^^\r\n\r\n>>> This latter issue also is present in RFC 5089.\r\nand perhaps does not deserve", "submit_date": "2008-01-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2734", "doc-id": "RFC5771", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "17.2", "orig_text": " [IANA]    IANA, \"IANA Protocol Registries\", <http://www.iana.org/>.\r\n\r\n", "correct_text": "<none - should be removed>", "notes": "This errata report is to remove confusion made by Errata ID 2733.  That errata proposes that [IANA] shall be replaced by [IANA-protocols] and no references to [IANA] are therefore needed.", "submit_date": "2011-02-24", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6849", "doc-id": "RFC7852", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.7", "orig_text": "Example(s):  TEL;VALUE=uri;TYPE=\"main,voice\";PREF=1:tel:+1-418-656-90\r\n      00", "correct_text": "Example(s):  TEL;VALUE=uri;TYPE=\"main-number,voice\";PREF=1:tel:+1-418-656-90\r\n      00", "notes": "The type value is specified as \"main-number\" but in the example is simply \"main\".", "submit_date": "2022-02-12", "submitter_name": "James Benner", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2022-05-16 18:43:54"}, {"errata_id": "1242", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.1.1.", "orig_text": "   o  rate - optional, default value \"0\": Specifies the absolute\r\n      playback rate of the content relative to normal as either a\r\n      positive percentage (faster) or a negative percentage (slower).\r\n      Any value that attempts to set the rate above the maximum allowed\r\n      or below the minimum allowed silently sets the rate to the maximum\r\n      or minimum.  The rate reverts back to its original value when\r\n      playback of the content URL has been completed.\r\n", "correct_text": "|  o  rate - optional, default value \"0\": Specifies the deviation of the\r\n|     content playback rate from its normal value as either a positive\r\n      percentage (faster) or a negative percentage (slower).\r\n      Any value that attempts to set the rate above the maximum allowed\r\n      or below the minimum allowed silently sets the rate to the maximum\r\n      or minimum.  The rate reverts back to its original value when\r\n|     playback of the content specified by the URI has been completed.\r\n\r\n", "notes": "There is perfect confusion between 'absolute' and 'relative\",\r\nleaving this specification open to gross misunderstanding.\r\n\r\nI hope the proposed replacement text says what had been intended\r\nto say; it also corrects sluggish language and applies STD 66 terms.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1243", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.1.1 p.29", "orig_text": "   Spoken variables are specified using the <variable> element.  This\r\n   element has the attributes described in the list below.  MSCML's\r\n|  spoken variables are based on those described in Audio Server\r\n   Protocol [17].\r\n", "correct_text": "   Spoken variables are specified using the <variable> element.  This\r\n   element has the attributes described in the list below.  MSCML's\r\n|  spoken variables are based on those described in the Audio Server\r\n   Protocol [17].\r\n", "notes": "Missing article (mid-page 29).\r\n\r\nAuthor comment:  Good catch.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1244", "doc-id": "RFC5022", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.1.1 p.29", "orig_text": "   Attributes of <variable>:\r\n\r\n   o  type - required, no default value: Specifies the major type format\r\n      of the spoken variable to be played.  Allowable values are \"dat\"\r\n      (date), \"dig\" (digit), \"dur\" (duration), \"mth\" (month), \"mny\"\r\n      (money), \"num\" (number), \"sil\" (silence), \"str\" (string), \"tme\"\r\n      (time), and \"wkd\" (weekday).\r\n\r\n   o  subtype - optional, no default value: Specifies the minor type\r\n      format of the spoken variable to be played.  Allowable values\r\n      depend on the value of the corresponding \"type\" attribute.\r\n      Possible values are \"mdy\", \"ymd\", and \"dmy\" for dates, \"t12\" and\r\n      \"t24\" for times, \"gen\", \"ndn\", \"crd\", and \"ord\" for digits, and\r\n      \"USD\" for money.\r\n", "correct_text": "< see Notes >", "notes": "The RFC here underspecifies many important details necessary\r\nto be specified precisely to ensure interoperability:\r\n\r\na)  What is the intended range of values for \"wkd\" ?\r\n    I guess, it may be  \"0\", ..., \"6\" .\r\n    Or is it  \"1\", ..., \"7\" ??\r\n    (Textual values make no sense -- or at least would make\r\n    implementations overly complicated requiring an any-language\r\n    to any-languange translation facility -- because the value\r\n    needs to be played out in the intended language according\r\n    to effective preferences.)\r\n\r\nb)  What are  \"gen\", \"ndn\", \"crd\", and \"ord\"  ?\r\n    No details are given to explain these abbreviations, and\r\n    most RFC readers will not be accustomed either to them.\r\n    I guess that \"ord\" might mean 'ordinal', \"crd\"  be\r\n    'cardinal', and perhaps \"gen\" for 'generic', but \"ndn\" ?\r\n    The semantics need to be specified carefully for interoperability!\r\n\r\nc)  Another instance of overly US-centric thinking is the single \"USD\"\r\n    for money.  To ensure wide-spread applicability and maintainability\r\n    of the protocol, the RFC should better apply the standard method\r\n    of incorporating the applicable 'official' registry by *reference*,\r\n    which in this case is the list of monetary units and their\r\n    internationally agreed-upon / assigned three-character\r\n    abbreviations from the ISO 4217 Maintenance Agency.\n --VERIFIER NOTES-- \n   Authors comment: This is an Informational RFC, not a Standards Track one.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1245", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.4.3", "orig_text": "a) \r\n    ... \"immediate\" and \"infinite.\"       (3 instances)          \r\n\r\n\r\nb)\r\n    ... returnkey is set to #, ...\r\n    \r\n", "correct_text": "a) \r\n    ... \"immediate\" and \"infinite\".       (3 instances)          \r\n\r\n\r\nb)\r\n    ... returnkey is set to \"#\", ...\r\n ", "notes": "a)  Syntax error; apply 'rational quotation' !\r\n    The issue occurs in the 1st, 3rd, and 4th bullet on page 35.\r\n\r\nb)  Clarification; the single pound character needs to be double-quoted\r\n    in the XML anyway, isn't it?\r\n    This also will make the text more uniform.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1246", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.2, p.40", "orig_text": ".\"", "correct_text": "\".", "notes": "Again, in the second to seventh bullet on page 40,\r\n'rational quotation' should be applied (6 instances).", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1247", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.5.3, p.41", "orig_text": "   The recording example (Figure 19) plays a prompt and records it to\r\n   the destination specified in the \"recurl\" attribute encoded as MS-GSM\r\n   in wave format.\r\n", "correct_text": "|  The recording example (Figure 19) plays a prompt and records the\r\n|  response to the destination specified in the \"recurl\" attribute\r\n   encoded as MS-GSM in wave format.\r\n", "notes": "The RFC text is ambiguous/misleading; what does 'it' refer to ?\r\n\r\nI guess that nobody will be interested in recording the prompt.\r\nTherefore, I hope the clarification above says what has been intended.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4134", "doc-id": "RFC5944", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.11", "orig_text": "This format is compatible with the skippable extensions defined in\r\nSection 1.9. It is not applicable for extensions that require more\r\nthan 256 bytes of data; for such extensions, use the format described\r\nin Section 1.10.", "correct_text": "This format is compatible with the skippable extensions defined in\r\nSection 1.9. It is not applicable for extensions that require more\r\nthan 254 bytes of data; for such extensions, use the format described\r\nin Section 1.10.", "notes": "The length field is 8 bits which yields a maximum of 255 data octets.\r\nBut the length field must include one octet for the sub-type field,\r\nyielding a maximum of 254 octets of data.", "submit_date": "2014-10-17", "submitter_name": "Jack Martin", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1256", "doc-id": "RFC4995", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.4,1st ln", "orig_text": "   Feedback carries information from the decompressor to compressor.\r\n   Feedback can be sent over a ROHC channel that operates in the same\r\n   direction as the feedback.\r\n", "correct_text": "|  Feedback carries information from the decompressor to the compressor.\r\n   Feedback can be sent over a ROHC channel that operates in the same\r\n   direction as the feedback.\r\n ", "notes": "Missing article", "submit_date": "2008-01-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1257", "doc-id": "RFC4995", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6,2nd bullet", "orig_text": "   o  Field encodings\r\n\r\n      Bits and groups of bits from the packet format layout, referred to\r\n      as Compressed fields, represents the result of an encoding method\r\n      specific for that compressed field within a specific packet\r\n      format.  The profile defines these encoding methods.\r\n", "correct_text": "   o  Field encodings\r\n\r\n      Bits and groups of bits from the packet format layout, referred to\r\n|     as Compressed fields, represent the result of an encoding method\r\n      specific for that compressed field within a specific packet\r\n      format.  The profile defines these encoding methods.\r\n", "notes": "singular/plural mismatch, resolved by:  s/represents/represent/", "submit_date": "2008-01-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1258", "doc-id": "RFC2347", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Examples", "orig_text": "   Write Request\r\n\r\n      client                                           server\r\n      -------------------------------------------------------\r\n      |2|barfile|0|octet|0|blksize|0|2048|0|  -->               RRQ\r\n                                    <--  |6|blksize|0|2048|0|   OACK", "correct_text": "   Write Request\r\n\r\n      client                                           server\r\n      -------------------------------------------------------\r\n      |2|barfile|0|octet|0|blksize|0|2048|0|  -->               WRQ\r\n                                    <--  |6|blksize|0|2048|0|   OACK", "notes": "At the \"Write Request\", the string RRQ should be replaced with WRQ.", "submit_date": "2008-01-13", "submitter_name": "Edwin Groothuis", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1248", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8, page 48", "orig_text": "   Managecontent Attributes:\r\n\r\n   o  src - required, no default value: Specifies the local source URL\r\n      of the content.  The URL scheme MUST be \"file://\".\r\n\r\n   o  dest - required (see note), no default value: Specifies the\r\n      destination URL.  The URL scheme MUST be \"http://\".  Note: If the\r\n      selected action is 'delete', this attribute is optional; otherwise\r\n      it is required.\r\n", "correct_text": "   Managecontent Attributes:\r\n\r\n|  o  src - required, no default value: Specifies the local source URI\r\n|     of the content.  The URI scheme MUST be \"file\".\r\n\r\n   o  dest - required (see note), no default value: Specifies the\r\n|     destination URI.  The URI scheme MUST be \"http\".  Note: If the\r\n      selected action is 'delete', this attribute is optional; otherwise\r\n      it is required.\r\n", "notes": "a)\r\nThe RFC should follow STD 66, RFC 3986 terminology and syntax.\r\nURI schemes do not allow ':' and '/' -- see Section 3.1 (p.17) of RFC 3986.\r\n\r\nb)  ... MUST be \"http\" ...\r\nWhy the hack does the RFC explicitely forbid using HTTP security\r\nand the \"https\" URI scheme ????\r\n(I do not believe the authors expect the use of \"Upgrade to TLS\"\r\nwithin HTTP, which is rarely implemented -- although it once was\r\nintended as a generice security layer drop-in mechanism.)\r\n\r\nAuthors comment:  Yes, HTTP is a MUST implement, though not the only option here.\r\n\r\n", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1249", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8, page 49", "orig_text": "   o  name - required (see note), no default value: Specifies the field\r\n      name for the content in the form when using the 'post' method.\r\n      This is not to be confused with the \"src\" or \"dest\" attributes.\r\n|     Note: This attribute is required when the \"htttpmethod\" has the\r\n      value \"post\" and is optional otherwise.\r\n", "correct_text": "   o  name - required (see note), no default value: Specifies the field\r\n      name for the content in the form when using the 'post' method.\r\n      This is not to be confused with the \"src\" or \"dest\" attributes.\r\n|     Note: This attribute is required when the \"httpmethod\" attribute\r\n      has the value \"post\" and is optional otherwise.\r\n", "notes": "A typo, and sluggishly inprecise use of language.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1250", "doc-id": "RFC5022", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8, p.49-50", "orig_text": "MIME Type               or:              MIME type\r\n\r\n(multiple instances each)", "correct_text": "Media Type               or:             media type", "notes": "a)\r\nThe RFC should apply IETF standard terminology.\r\nIn this case, it is clear that the RFC does *not* apply to the\r\ncontext of email, and hence \"MIME\" should be avoided even more!\r\nPlease use the terminology established in RFC 2045 ff. !\r\n\r\nb)\r\nFurthermore, Table 3 on page 50 contains a couple of questionable\r\nentries:\r\n  audio/x-alaw-basic      is a private media type;\r\n  audio/ms-gsm            looks like an IETF tree media subtype,\r\n                          but it has not been registered with the IANA;\r\n  audio/x-wav             is also a private media type; I guess it should\r\n                          better be  audio/vnd.wave  (RFC 2361)\r\n                          -- although the IANA apparently has lost\r\n                          records of this media type registration.\n --VERIFIER NOTES-- \n   Authors comment: In four years of deployment, no one has run into a real problem in the real world. This is not a standards track RFC.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1251", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.1, last pa", "orig_text": ".\"               (2 instances)", "correct_text": "\".", "notes": "The last paragraph of Section 8.1 again contains two syntax errors\r\nbased non non-pplication of 'rational quoting'.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1252", "doc-id": "RFC5022", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "a)\r\n     URL\r\n\r\n\r\nb)\r\n     ://\r\n\r\nc)\r\n\r\n          ... it MUST match remote terminal's identifier, ...", "correct_text": "a)\r\n     URI\r\n\r\n\r\nb)\r\n                     (nothing!)\r\n\r\nc)\r\n\r\n          ... it MUST match the remote terminal's identifier, ...", "notes": "Again, this section should apply strict IETF established terminology,\r\nas per STD 66, RFC 3986; it contains a wealth of badly formed said\r\n[URI] schemes.\r\n\r\nThroughout the section,\r\na) replace   \"URL\"  by   \"URI\" , and\r\nb) use the precise forms of the URI schemes mentioned,\r\n   i.e.   \"file\"  ,  \"http\"  ,  \"https\"  .\r\n\r\nc) In Table 4 on page 52, insert the missing article in the\r\n   5th line from the bottom.\n --VERIFIER NOTES-- \n   Authors comment: In four years of deployment, no one has run into a real problem in the real world.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1253", "doc-id": "RFC5022", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.2", "orig_text": "   Attributes of <faxplay>:\r\n\r\n   o  lclid - optional, default value \"\" (the empty string): A string\r\n      that identifies the called station.\r\n", "correct_text": "   Attributes of <faxplay>:\r\n\r\n   o  lclid - optional, default value \"\" (the empty string): A string\r\n|     that identifies the calling station.\r\n", "notes": "I suspect that the RFC specifies the wrong station ID.\r\nIn Section 9.1, \"lclid\" clearly specifies the PSTN 'role'\r\nthe Media Server shall assume in processing a fax in answer mode;\r\nthere, it makes no sense to specify an identity that is not under\r\ncontrol of the media server accepting the incoming call.\r\nSimilarly, for <faxplay> in Section 9.2, the local ID the Media\r\nServer shall assume in sending the fax needs to be specified;\r\nas far as I understand the text, the Media Server is the *calling*\r\nstation in this scenario.\r\nShould I be wrong with this diagnosis, perhaps other claraifcation(s)\r\nto the RFC are needed.\n --VERIFIER NOTES-- \n   Authors comment: Incorrect diagnosis.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1254", "doc-id": "RFC5022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2, Table 5", "orig_text": "... it MUST match remote terminal's identifier ...", "correct_text": "... it MUST match the remote terminal's identifier ...", "notes": "Insert the missing article in the 5th line from the bottom of Figure 5.", "submit_date": "2008-01-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1255", "doc-id": "RFC2361", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "In Appendix A, it says:", "orig_text": "  A.104   DVM", "correct_text": "  A.104   AC3 DVM", "notes": "Change to match the change being made to the IANA registry. This corrects the name so that when people search for the codepoint for the AC3 codec, they find this (which is the commonly used code point for AC3 instead of code point 0x0092)", "submit_date": "2008-01-11", "submitter_name": "Cullen Jennings", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4286", "doc-id": "RFC6962", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3", "orig_text": "When a valid certificate is submitted to a log, the log MUST\r\nimmediately return a Signed Certificate Timestamp (SCT).", "correct_text": "When a valid certificate or Precertificate is submitted to a log, the\r\nlog MUST immediately return a Signed Certificate Timestamp (SCT).", "notes": "", "submit_date": "2015-03-04", "submitter_name": "Ben Laurie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1269", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "a)    Header\r\n\r\nb)    Headers\r\n\r\nc)    header\r\n\r\nd)    headers", "correct_text": "a)    Header Field\r\n\r\nb)    Header Fields\r\n\r\nc)    header field\r\n\r\nd)    header fields\r\n", "notes": "In some parts of the text, RFC 4976 makes confusing sluggish use of\r\nestablished IETF standard terminology.\r\n\r\nSince RFC 2045 ff., and reinforced by many more RFCs, the distinction\r\nbetween \"header\" and the elements of a header, \"header fields\" should be\r\nclear to all. I once again recommend BCP 90, RFC 3864, and in particular\r\nSection 3.1.1 of RFC 4249 for clarification of this terminological issue.\r\n\r\nHint:\r\nAdditionally, the RFC sometimes is not precise enough in distinguishing\r\nthe parts of a header field from the whole, e.g. saying \"header\" where\r\nit should say \"header field value\" ; this issue will be mentioned below\r\nas case e) and additionally be addressed in specific errata reports.\r\n\r\nNote:  Remarkably, other parts of RFC 4976, and the whole companion\r\n       document, RFC 4975, do not suffer from this deficiency.\r\n\r\nThe following parts of RFC 4976 suffer from the four variants\r\nof this abuse of language shown in the OLD / NEW boxes above:\r\n\r\na) headlines of Sections 4.2, 4.3, 4.4, and 4.5\r\n\r\nb) headline of Sections 4.6 and 10.2\r\n\r\nc) - text of section 4.2 (5 instances),\r\n   - text of section 4.3 (1 instance),\r\n   - text of section 4.4 (1 instance),\r\n   - text of section 4.5 (1 instance),\r\n   - text of section 4.6 (8 instances),\r\n   - text of section 5.1 (18 instances),\r\n   - text of section 6.3 (6 instances),\r\n   - text of section 6.4.1 (5 instances),\r\n   - text of section 6.4.2 -- see extra report,\r\n   - text of section 6.4.3 (5 instances),\r\n   - text of section 9.1 (6 instances),\r\n   - text of section 9.4 (2 instances)\r\n\r\nd) - text of section 4.2 (1 instance),\r\n   - text of section 9.1 (2 instances)\r\n\r\ne) - text of section 6.4.1 (2 instances)", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1270", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": " ... in Section 5.1", "correct_text": " ... in Section 5.1 and 9.1", "notes": "The text in Sections 4.3 through 4.5 refers to Section 5.1\r\nfor the details of HTTP Digest authentication.\r\nMost of these in fact are in Section 9.1; thus the reader\r\nshould be directly advised to consult Section 9.1 as well.\r\n\r\nIt might even be better to only point to 9.1 in these 3 instances.\r\n\r\nNote: The pointer to Section 5.1 given in Section 4.2 seems to be\r\nappropriate.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1271", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2, 1st par", "orig_text": "   The Use-Path header is a list of URIs provided by an MSRP relay in\r\n   response to a successful AUTH request.  [...]", "correct_text": "   The Use-Path header field contains a list of URIs provided by an MSRP\r\n   relay in response to a successful AUTH request.  [...]", "notes": "a) terminology -- cf. GLOBAL errata reoprt\r\nb) misleading verb: \"is\" --> \"contains\"", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1272", "doc-id": "RFC4976", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6 (p.12)", "orig_text": "                  [...].  Specifically, an Expires header in an AUTH\r\n   request indicates how long the provided URIs will be valid.\r\n", "correct_text": "                  [...].  Specifically, an Expires header field in an\r\n   AUTH response indicates how long the provided URIs will be valid.\r\n", "notes": "At the bottom of page 12:\r\na) terminology -- cf GLOBAL errata report\r\nb) s/request/response/    !!!", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4135", "doc-id": "RFC7108", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "Using HOSTNAME.BIND/CH/TXT (Section 4.2), ID.SERVER/CH/TXT\r\n   (Section 4.3), or IDENTITY.L.ROOT-SERVERS.ORG/IN/TXT or IDENTITY.L\r\n   .ROOT-SERVERS/IN/A (Section 4.4)", "correct_text": "Using HOSTNAME.BIND/CH/TXT (Section 4.2), ID.SERVER/CH/TXT\r\n   (Section 4.3), or IDENTITY.L.ROOT-SERVERS.ORG/IN/TXT or IDENTITY.L\r\n   .ROOT-SERVERS.ORG/IN/A (Section 4.4)", "notes": "Fixing missing .ORG in FQDN", "submit_date": "2014-10-20", "submitter_name": "Mauricio Vergara Ereche", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1278", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7, p.23/24", "orig_text": "   credentials         = \"Digest\" SP digest-response\r\n                         *( \",\" SP digest-response)\r\n\r\n   digest-response     = ( username / realm / nonce / response / [\r\n                         algorithm ] / cnonce / [opaque] / message-qop /\r\n                         [nonce-count]  / [auth-param] )\r\n\r\n", "correct_text": "   credentials         = \"Digest\" SP digest-response\r\n                         *( \",\" SP digest-response)\r\n|                        ; mandatory digest-response items are:\r\n|                        ;  username, realm, nonce, response, cnonce,\r\n|                        ;  and message-qop\r\n\r\n|  digest-response     = ( username / realm / nonce / response \r\n|                          / algorithm / cnonce / opaque / message-qop \r\n|                          / nonce-count / auth-param )\r\n", "notes": "For rationale, see the related report on <WWW-Authenticate> and\r\n<digest-param> ABNF.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1279", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "App. A,p.35", "orig_text": "                    [...].  When implementing something like this,\r\n|  implementors should be careful not to use a scheme like EBE that\r\n|  would allows portions of encrypted tokens to be cut and pasted into\r\n   other URIs.\r\n", "correct_text": "                    [...].  When implementing something like this,\r\n   implementors should be careful not to use a scheme like EBE (..???..)\r\n   that would allow portions of encrypted tokens to be cut and pasted\r\n   into other URIs.\r\n", "notes": "a)  Newly introduced abbreviation -- never explained ==> need expansion\r\n    Please supply!\r\nb)  Grammar:  s/allows/allow/", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1298", "doc-id": "RFC4996", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2, p.67", "orig_text": "   COMPRESSED sack2_list_item {\r\n     discriminator =:= '00000010';\r\n     block_1       =:= sack_block(ack_value);\r\n     block_2       =:= sack_block(block_1_end.UVALUE);\r\n     ENFORCE(length.UVALUE == 18);\r\n   }\r\n", "correct_text": "   COMPRESSED sack2_list_item {\r\n     discriminator =:= '00000010';\r\n     block_1       =:= sack_block(ack_value);\r\n|    block_2       =:= sack_block(block_1.UVALUE && 0xFFFFFFFF);\r\n     ENFORCE(length.UVALUE == 18);\r\n   }\r\n", "notes": "ROHC-FN is intended to introduce precision.\r\nTherefore, no ad-hoc variable names should be introduced,\r\nindependent of how mnemonic their names might be.\r\n \r\nI hope that the NEW text substituted above indeed is what had been\r\nintended.\r\n \r\nSimilar corrections need to be applied on page 68 (10 instances)\r\nand on top of page 69 (one instance).", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1355", "doc-id": "RFC5140", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3, pg.7", "orig_text": "      - Prefix (Hexadecimal Routing Number): This attribute is used to\r\n        represent the list of Hexadecimal prefixes to which the\r\n        respective route can complete calls.\r\n", "correct_text": "      - Prefix (Pentadecimal Routing Number): This attribute is used to\r\n        represent the list of Pentadecimal prefixes to which the\r\n        respective route can complete calls.\r\n", "notes": "There are no *Hexa*decimal Routing Numbers in TRIP or TGREP; but there\r\nare *Penta*decimal Routing Numbers (see RFC 3219, Section 5.1.1.3).\r\nThe rest of RFC 5140 never uses \"Hexadecimal\", only \"Pentadecimal\".", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1356", "doc-id": "RFC5140", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.5, pg.13", "orig_text": "   The LS receiving this attribute should disseminate to other peers,\r\n   both internal and external to the ITAD.\r\n", "correct_text": "                                                     vvvv\r\n   The LS receiving this attribute should disseminate it to other peers,\r\n   both internal and external to the ITAD.\r\n", "notes": "cf. similar subsections of RFC 5140 (4.*.5)", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1273", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2 - pg.17", "orig_text": "<< 3rd message shown >>\r\n\r\n    MSRP m4nbvx 200 OK\r\n    To-Path: msrps://intra.example.com:9000/jui787s2f;tcp \\\r\n             msrps://alice.example.com:9892/98cjs;tcp\r\n    From-Path: msrps://extra.example.com;tcp\r\n|   Use-Path: msrps://intra.example.com:9000/jui787s2f;tcp \\\r\n|             msrps://extra.example.com:9000/mywdEe1233;tcp\r\n    Authentication-Info:  [...]\r\n\r\n<<  4th message shown >>\r\n    MSRP m3nbvx 200 OK\r\n    To-Path: msrps://alice.example.com:9892/98cjs;tcp\r\n    From-Path: msrps://intra.example.com:9000/jui787s2f;tcp \\\r\n               msrps://extra.example.com;tcp\r\n|   Use-Path: msrps://extra.example.com:9000/mywdEe1233;tcp \\\r\n              msrps://extra.example.com:9000/mywdEe1233;tcp\r\n    Authentication-Info: [...]\r\n", "correct_text": "<< 3rd message >>\r\n    MSRP m4nbvx 200 OK\r\n    To-Path: msrps://intra.example.com:9000/jui787s2f;tcp \\\r\n             msrps://alice.example.com:9892/98cjs;tcp\r\n    From-Path: msrps://extra.example.com;tcp\r\n|   Use-Path: msrps://extra.example.com:9000/mywdEe1233;tcp\r\n    Authentication-Info: [...]\r\n\r\n<<  4th message >>\r\n    MSRP m3nbvx 200 OK\r\n    To-Path: msrps://alice.example.com:9892/98cjs;tcp\r\n    From-Path: msrps://intra.example.com:9000/jui787s2f;tcp \\\r\n               msrps://extra.example.com;tcp\r\n|   Use-Path: msrps://intra.example.com:9000/jui787s2f;tcp \\\r\n              msrps://extra.example.com:9000/mywdEe1233;tcp\r\n    Authentication-Info: [...]\r\n", "notes": "In both messages, the \"Use-Path:\" header fields are garbled.\r\n\r\nThis should draw the attention to the lack of specification in the RFC\r\n(cf. extra report) for the Relay behavior w.r.t. Use-Path in repsonses.\r\n\r\nFrom descriptive text in the RFC it becomes clear that the 3rd message\r\nabove should contain one URI in the Use-Path header field, and that the\r\nsecond one shown there in fact needs to be added by the relay into the\r\n4th message (final response to the client).\r\nThe simple URI repetition shown in the 4th message doen not make sense\r\nat all.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1274", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.4.1, pa.2", "orig_text": "   If the Failure-Report header is \"yes\", then the relay MUST run a\r\n   timer to detect if transmission to the next hop fails.  [...]", "correct_text": "   If the Failure-Report header field value is \"yes\", then the relay\r\n   MUST run a timer to detect if transmission to the next hop fails.\r\n   [...]", "notes": "Cf. GLOBAL errata report on terminology.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1275", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.4.1,p.22", "orig_text": "                          [...].  In this case, the relay SHOULD discard\r\n|  the message, and if the Failure-Report header is set to \"yes\", the\r\n   relay SHOULD generate a failure report.\r\n", "correct_text": "                          [...].  In this case, the relay SHOULD discard\r\n|  the message, and if the Failure-Report header field value is set to \r\n   \"yes\", the relay SHOULD generate a failure report.\r\n", "notes": "The offending text is at the end of the last paragraph of Section 6.4.1.\r\nFor rationale, cf. the GLOBAL errata report on terminology.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1276", "doc-id": "RFC4976", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.4.3", "orig_text": "<< NONE >>", "correct_text": "<< add to the end of the section: >>\r\n\r\n   Before forwarding a 200 response containing a Use-Path header field,\r\n   the relay MUST prepend to the existing header field value the URI it\r\n   supplies and wants the upstream neighbor to use in future requests in\r\n   this session.\r\n", "notes": "As sadly confirmed by the flaws in the example in Section 5.1 (on p. 17),\r\nthe Relay Behavior / Handling Responses underspecifies the required\r\nsynthesis of the Use-Path header field value.\r\n\r\nThe above text is a strawman proposal and should be elaborated upon\r\nbefore signing off this report.\n --VERIFIER NOTES-- \nFrom reviewer Dale Worley:\r\n\r\nThe suggested change is incorrect.  The value of the Use-Path header\r\ngenerated by the server-relay in the 200 response is not intended to\r\nbe modified by any intermediate relay on the way to the client.  This\r\ncan be seen by (1) the lack of any text specifying any transformation\r\nof the Use-Path value by intermediate relays, and (2) the skeleton\r\nexample in section 5.1, page 14, which says \"Use-Path returned by C: B\r\nC\".  (In that example, a better rendering would be \"Use-Path returned\r\nby C: Btoken Ctoken\".)\r\n\r\nA relay can generate a complete Use-Path because the initial elements\r\ncan be extracted from the From-Path value of the request.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1277", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7, page 23", "orig_text": "   WWW-Authenticate    = \"WWW-Authenticate:\" SP \"Digest\" SP digest-param\r\n                         *(\",\" SP digest-param)\r\n\r\n   digest-param        = ( realm / nonce / [ opaque ] / [ stale ] / [\r\n                         algorithm ] / qop-options  / [auth-param] )\r\n", "correct_text": "  WWW-Authenticate    = \"WWW-Authenticate:\" SP \"Digest\" SP digest-param\r\n                         *(\",\" SP digest-param)\r\n|                       ; realm, nonce, and qop digest-params are required\r\n\r\n| digest-param        = ( realm / nonce / opaque / stale / algorithm\r\n|                         / qop-options  / auth-param )\r\n", "notes": "a) The prose of the RFC indicates that the restriction stated in the\r\n   added ABNF comment indeed should hold. See also note below.\r\n\r\nb) The <digest-param> syntax as stated in the RFC makes no sense;\r\n   allowing optional productions in the ABNF alternative would allow\r\n   empty <digest-param>s , i.e. immediately adjacent commas in the\r\n   WWW-Authenticate header field value; I suspect that the square\r\n   brackets might have been intended to indicate what I suggest to \r\n   express in the ABNF comment a).\r\n\r\nTo express the full set of requirements for WWW-Authenticate in pure,\r\nformal ABNF would perhaps make it much less readable.\r\n\r\nThese issues are replicated for <credentials> and <digest-response>\r\n-- this is addressed in a separate report.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3040", "doc-id": "RFC959", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3.2", "orig_text": "<number> ::= any decimal integer 1 through 255", "correct_text": "<byte-size> ::= any decimal integer 1 through 255\r\n[...]\r\n<number> ::= any decimal integer 0 through 255", "notes": "I agree with the author of errata ID 3039 that excluding 0 from <number> is problematic. However, <number> is also used in the definition of <byte-size>. The text in 3.1.1.4 says that\"The value of Byte size must be a decimal integer; there is no default value.\" Strictly speaking, then, 0 is a valid value but I don't see how zero could lead to a sensible result. Indeed the term \"decimal integer\" is undefined so perhaps negative values are permissible?\n --VERIFIER NOTES-- \nSee Erratum 3039. Though the change there does allow for nonsense values for <byte-size>, so does the current syntax in 959. I have accepted 3039 and rejected this as duplicate.   ", "submit_date": "2011-12-01", "submitter_name": "mark hays", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1313", "doc-id": "RFC5117", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3,pg.7", "orig_text": "                    [...].  Therefore, if the Receiver Reports were\r\n   forwarded without changes, the extended highest sequence number would\r\n   indicate that B were substantially behind in reception, while it most\r\n|  likely it would not be.  [...]\r\n         ^^^^", "correct_text": "                    [...].  Therefore, if the Receiver Reports were\r\n   forwarded without changes, the extended highest sequence number would\r\n   indicate that B were substantially behind in reception, while it most\r\n|  likely would not be.  [...]\r\n         ^", "notes": "Spurious word replication; location is 4th-to-last line on page 7.", "submit_date": "2008-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1280", "doc-id": "RFC4975", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1.1,p.19", "orig_text": "<<<  at the end of the (indented) second paragraph  >>\r\n \r\n        [...]  For example, an endpoint could concatenate an instance\r\n      identifier such as a MAC address, its idea of the number of\r\n      seconds since the epoch, a process ID, and a monotonically\r\n      increasing 16-bit integer, all base-64 encoded.  Alternately, an\r\n      endpoint without an on-board clock could simply use a 64-bit\r\n      random number.\r\n", "correct_text": " \r\n        [...]  For example, an endpoint could concatenate an instance\r\n      identifier such as a MAC address, its idea of the number of\r\n      seconds since the epoch, a process ID, and a monotonically\r\n      increasing 16-bit integer, all base-64 encoded.  Alternately, an   \r\n      endpoint without an on-board clock could simply use a 64-bit\r\n|     random number and base-64 encode it.\r\n", "notes": "Clarification; otherwise, \"Alternately\" could be grossly misunderstood\r\nto indicate a direct alternative for the header field value.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1281", "doc-id": "RFC4975", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "<headers>\r\n\r\n<header>\r\n\r\n<ext-header>", "correct_text": "<hfields>\r\n\r\n<hfield>\r\n\r\n<ext-hfield>", "notes": "Note on Terminology:\r\nTo help avoid the terminological issues observed in the companion\r\ndocument, RFC 4976, and reduce the likelihood of similar issues in\r\nfuture derived work, it would perhaps have been useful to subtly\r\nchange the ABNF in Section 9 (and all related references in the prose),\r\nreplacing three rule names:\r\n      <headers>      -->    <hfields>\r\n      <header>       -->    <hfield>\r\n      <ext-header>   -->    <ext-hfield>", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1282", "doc-id": "RFC4975", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9, p.38", "orig_text": "   hname = ALPHA *token", "correct_text": "   hname = ALPHA [token]\r\n\r\n(or use:\r\n   hname = ALPHA *1token\r\n)", "notes": "This resolves a potential parsing ambiguity,\r\nand should also improve the readability.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1283", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": " One way to deal with this problem is to deliberately delay emitting\r\n    segments for one MSL after recovery from a crash- this is the \"quite\r\n    time\" specification.  Hosts which prefer to avoid waiting are\r\n    willing to risk possible confusion of old and new packets at a given\r\n    destination may choose not to wait for the \"quite time\".\r\n    Implementors may provide TCP users with the ability to select on a\r\n    connection by connection basis whether to wait after a crash, or may\r\n    informally implement the \"quite time\" for all connections.\r\n    Obviously, even where a user selects to \"wait,\" this is not\r\n    necessary after the host has been \"up\" for at least MSL seconds.", "correct_text": " One way to deal with this problem is to deliberately delay emitting\r\n    segments for one MSL after recovery from a crash- this is the \"quiet\r\n    time\" specification.  Hosts which prefer to avoid waiting are\r\n    willing to risk possible confusion of old and new packets at a given\r\n    destination may choose not to wait for the \"quiet time\".\r\n    Implementors may provide TCP users with the ability to select on a\r\n    connection by connection basis whether to wait after a crash, or may\r\n    informally implement the \"quiet time\" for all connections.\r\n    Obviously, even where a user selects to \"wait,\" this is not\r\n    necessary after the host has been \"up\" for at least MSL seconds.", "notes": "\"quite time\" should be \"quiet time\"", "submit_date": "2008-01-14", "submitter_name": "Pei-chun Cheng", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1284", "doc-id": "RFC4975", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "13, p.48", "orig_text": "           ... \"message/ cpim\"  ...\r\n", "correct_text": "           ... \"message/cpim\"  ...\r\n", "notes": "Within quoted text literals, white space might be considered\r\nsignificant; thus, to avoid any potential ambiguity ....   :-)", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1285", "doc-id": "RFC4975", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "15.2, p.55", "orig_text": "|  This specification establishes the header field-Field sub-registry\r\n   under MSRP Parameters.  New parameters in this sub-registry must be\r\n   published in an RFC (either as an IETF submission or RFC Editor\r\n   submission).  [...]\r\n", "correct_text": "|  This specification establishes the Header Field sub-registry under\r\n   MSRP Parameters.  New parameters in this sub-registry must be\r\n   published in an RFC (either as an IETF submission or RFC Editor\r\n   submission).  [...]\r\n\r\n", "notes": "", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1286", "doc-id": "RFC4975", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "15.5.1,p.57", "orig_text": "   Contact:  Ben Campbell (ben@estacado.net).\r\n   Author/Change Controller:  This is a permanent registration request.\r\n      Change control does not apply.\r\n", "correct_text": "   Contact:  Ben Campbell (ben@estacado.net).\r\n|  Author/Change Controller:  IESG.\r\n", "notes": "(This only is a proposal.)\r\n\r\nRationale:  Congratulations!  The registrant seems to have achieved\r\n  immortality, and/or his email address guaranteed to be perpetual.  :-)\r\n\r\nMore seriously:  cf. Section 3 of RFC 2434.", "submit_date": "2008-01-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1287", "doc-id": "RFC4596", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "msgserver", "correct_text": "actor=\"msg-taker\"", "notes": "Throughout RFC4596, msgserver is used as a feature tag while its use was never standardized. A standards compliant proxy server would simply ignore this msgserver parameter. msgserver was used in some UA capabilities draft but was later changed to actor=\"msg-taker\". Somehow this change did not get through to RFC4596.\r\nSee http://www1.ietf.org/mail-archive/web/sip/current/msg08884.html for when the change took place.", "submit_date": "2008-01-16", "submitter_name": "Eric Tremblay", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1294", "doc-id": "RFC4996", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7, 1st para", "orig_text": "   ROHC-TCP uses three different packet types: the Initialization and\r\n   Refresh (IR) packet type, the Context Replication (IR-CR) packet\r\n   type, and the Compressed (CO) packet type.\r\n", "correct_text": "   ROHC-TCP uses four different packet types: the Initialization and\r\n   Refresh (IR) packet type, the Initialization and Refresh - Dynamic\r\n   Part (IR-DYN) packet type, the Context Replication (IR-CR) packet\r\n   type, and the Compressed (CO) packet type.\r\n", "notes": "See GLOBAL errata report on IR <-> IR-DYN for rationale.\n --VERIFIER NOTES-- \n   Authors and WG chairs are of the opinion that it is reasonably clear that IR is both a class of packets type. So from the context it should be understandable when the class is meant rather than the specific type. And clarification would also require major changes in several docs. ", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5184", "doc-id": "RFC3323", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2 Expre...", "orig_text": "Privacy-hdr  =  \"Privacy\" HCOLON priv-value *(\";\" priv-value)\r\n", "correct_text": "Privacy-hdr  =  \"Privacy\" HCOLON priv-value *(\",\" priv-value)\r\n", "notes": "RFC3261 says, \r\n\r\nSpecifically, any SIP header whose grammar is of the form\r\n\r\n      header  =  \"header-name\" HCOLON header-value *(COMMA header-value)\r\n\r\n   allows for combining header fields of the same name into a comma-\r\n   separated list.\r\n\r\nSo, RFC3323 conflicts RFC3261.", "submit_date": "2017-11-16", "submitter_name": "DONG O YI", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:54:28"}, {"errata_id": "1288", "doc-id": "RFC4996", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "IR", "correct_text": "IR and IR-DYN", "notes": "RFC 4996 is very confusing regarding the ROHC packet types used.\r\nSection 2 (on top of page 5) says only 3 types are used: IR, IR-CR, and CO.\r\nThis is restated in a few places.\r\nBut significant text in RFC 4996 also details the use of the IR-DYN\r\npacket type.\r\n\r\nAccording to RFC 4995, IR-DYN is a distinct packet type.\r\n\r\nIt looks like the terminology has been floating for some time,\r\nand the text of RFC 4996 has not been adjusted to the final\r\nterminology used in RFC 4995, before publication as an RFC,\r\nalthough both RFCs have been published in a coordinated way.\r\n\r\nTo give the reader a hint on the problem, I suggest a change note\r\nfor Section 2 -- this will be posted as a separate Errata Note --\r\nand detail the other places in the text affected by this issue\r\nin an accompanying message to be evalueated by the verifiers,\r\nto avoid an email avalanche.\r\nThis report will also include other issues found not suitable for\r\nreporting via this form based system.\n --VERIFIER NOTES-- \n   Authors and WG chairs are of the opinion that it is reasonably clear that IR is both a class of packets type. So from the context it should be understandable when the class is meant rather than the specific type. And clarification would also require major changes in several docs.", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1289", "doc-id": "RFC4996", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2, pg. 5", "orig_text": "   ROHC-TCP packet types\r\n\r\n      ROHC-TCP uses three different packet types: the Initialization and\r\n      Refresh (IR) packet type, the Context Replication (IR-CR) packet\r\n      type, and the Compressed packet (CO) type.\r\n\r\n", "correct_text": "   ROHC-TCP packet types\r\n\r\n      ROHC-TCP uses four different packet types: the Initialization and\r\n      Refresh (IR) packet type, the IR-DYN (IR, dynamic update) packet\r\n      type, the Context Replication (IR-CR) packet type, and the\r\n      Compressed packet (CO) type.\r\n\r\n", "notes": "ROHC-TCP makes use of IR-DYN packets, as can be seen in other parts\r\nof the text.\r\nAccording to RFC 4995, IR-DYN is a distinct ROHC packet type,\r\nand RFC 4995 does not contain the notion of a packet sub-type\r\nthat might have justified subsuming IR-DYN as a non-self-sustaining\r\npacket always to be included/assumed as well when talking about the\r\nIR packet type.\r\n\r\nFor more information see the GLOBAL Errata Report issued on this topic.\n --VERIFIER NOTES-- \n   Authors and WG chairs are of the opinion that it is reasonably clear that IR is both a class of packets type. So from the context it should be understandable when the class is meant rather than the specific type. And clarification would also require major changes in several docs. ", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1290", "doc-id": "RFC4996", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.1.1", "orig_text": "   The optimistic approach is the principle by which a compressor sends\r\n   the same type of information for a number of packets (consecutively\r\n   or not) until it is fairly confident that the decompressor has\r\n   received the information.  The optimistic approach is useful to\r\n|  ensure robustness when ROHC-TCP is used to compress packet over lossy\r\n   links.\r\n", "correct_text": "   The optimistic approach is the principle by which a compressor sends\r\n   the same type of information for a number of packets (consecutively\r\n   or not) until it is fairly confident that the decompressor has\r\n   received the information.  The optimistic approach is useful to\r\n|  ensure robustness when ROHC-TCP is used to compress packets over\r\n   lossy links.\r\n                                                             ^\r\n", "notes": "", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1291", "doc-id": "RFC4996", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.3 (end)", "orig_text": "      Item 1, ..., item n: Each item corresponds to an XI with X = 1 in\r\n      XI 1, ..., XI m.  The format of the entries in the item list is\r\n|     described in Section 6.2.\r\n                           ^^^^\r\n", "correct_text": "\r\n      Item 1, ..., item n: Each item corresponds to an XI with X = 1 in\r\n      XI 1, ..., XI m.  The format of the entries in the item list is\r\n|     encoded by the encoding method found in the table of Section 6.3.\r\n|     The compressed format(s) suffixed by \"_list_item\" in the encoding\r\n|     methods defines the item inside the compressed item list.\r\n ", "notes": "6.2 definitely does not contain this information.\r\nI did not find a section that actually gives all these\r\ndetails, as could be expected.\r\n\r\nMaybe, something has been lost during the development of the document.\r\n\r\nAuthors and WG chair provided the corrected text with additional details.", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1292", "doc-id": "RFC4996", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.3 (end)", "orig_text": "   The \"inferred_ip_v4_length\" encoding method compresses the IPv4\r\n|  header checksum down to a size of zero bits.  Using this encoding\r\n   method, the decompressor infers the value of this field by counting\r\n   in octets the length of the entire packet after decompression.\r\n", "correct_text": "   The \"inferred_ip_v4_length\" encoding method compresses the IPv4\r\n|  Total Length field down to a size of zero bits.  Using this encoding\r\n   method, the decompressor infers the value of this field by counting\r\n   in octets the length of the entire packet after decompression.\r\n", "notes": "Apparently missed edit after copy & paste.", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1293", "doc-id": "RFC4996", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.8.2,p.34", "orig_text": "   Establishing residue:\r\n\r\n|     The scaling factor is established by sending unscaled TCP\r\n                  ^^^^^^\r\n      Acknowledgment Number bits, so that the decompressor can infer its\r\n      value from the unscaled value and the scaling factor (ack_stride).\r\n", "correct_text": "   Establishing residue:\r\n\r\n|     The scaling residue is established by sending unscaled TCP\r\n                  ^^^^^^^^\r\n      Acknowledgment Number bits, so that the decompressor can infer its\r\n      value from the unscaled value and the scaling factor (ack_stride).\r\n", "notes": "Apparently missed edit after copy & paste from preceding paragraph.", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2520", "doc-id": "RFC4985", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": " Name\r\n    The DNS domain name of the domain where the specified service\r\n    is located.", "correct_text": "Name\r\n    A DNS domain name, representing a domain for which the certificate\r\n    issuer has asserted that the certified subject is a legitimate\r\n    provider of the identified service.", "notes": "The current text is ambiguous compared with the defined meaning of this name form given in the RFC.\r\n\r\nThe definition of this component is given in the overall definition as:\r\n\r\n   \"The content of the components of this name form MUST be consistent\r\n   with the corresponding definition of these components in an SRV RR\r\n   according to RFC 2782 [N3].\"\r\n\r\nAnd later in the same section:\r\n\r\n   \"The purpose of the SRVName is limited to authorization of\r\n     service provision within a domain.\"\r\n\r\nThe changed text makes it clear that the domain is the domain where the certified host is a legitimate service provider, which may or may not be the domain where the same host is located. Thus the changed text harmonize with the rest of the document.", "submit_date": "2010-09-14", "submitter_name": "Stefan Santesson", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1299", "doc-id": "RFC4996", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2, p.69", "orig_text": " tcp_opt_generic\r\n {\r\n   UNCOMPRESSED {\r\n     type                                    [ 8 ];\r\n     length_msb =:= uncompressed_value(1, 0) [ 1 ];\r\n     length_lsb                              [ 7 ];\r\n|    contents                           [ length_len.UVALUE*8-16 ];\r\n   }\r\n                                                 ^^^", "correct_text": " tcp_opt_generic\r\n {\r\n   UNCOMPRESSED {\r\n     type                                    [ 8 ];\r\n     length_msb =:= uncompressed_value(1, 0) [ 1 ];\r\n     length_lsb                              [ 7 ];\r\n|    contents                           [ length_lsb.UVALUE*8-16 ];\r\n   }\r\n                                                 ^^^", "notes": "'length_len' has never been introduced.\r\nThis must be a confusing typo, invalidating the formal specification.\r\n\r\nTis same correction needs to be applied once more, near the bottom\r\nof page 69.", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1300", "doc-id": "RFC4996", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.3.2.3", "orig_text": "|  These 2 bits are the least significant bits of the MSN and are thus\r\n   concatenated with the 14 bits already present in the FEEDBACK-2\r\n   format.\r\n", "correct_text": "|  These 2 bits are the most significant bits of the MSN and are thus\r\n   concatenated with the 14 bits already present in the FEEDBACK-2\r\n   format.\r\n", "notes": "It does not make much sense to \"provide 2 additional bits\"\r\nfor a numerical value, and taking the *least* significant bits\r\nfor this purpose.  This way, the interpretation of the other\r\nencoded MSN bits would prematurely be changed by the presence\r\nof the MSN option.\r\nTherefore, I strongly suspect that the text is in error and\r\nshould be corrected as above.\n --VERIFIER NOTES-- \n   WG chair Calle Knutsson: This is the way we handle lsbs.", "submit_date": "2008-01-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1301", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2", "orig_text": "      1. Prepare the message schedule W:\r\n         For t = 0 to 15\r\n            Wt = M(i)t\r\n         For t = 16 to 63\r\n            Wt = SSIG1(W(t-2)) + W(t-7) + SSIG0(t-15) + W(t-16)\r\n", "correct_text": "      1. Prepare the message schedule W:\r\n         For t = 0 to 15\r\n            Wt = M(i)t\r\n         For t = 16 to 63\r\n            Wt = SSIG1(W(t-2)) + W(t-7) + SSIG0(W(t-15)) + W(t-16)\r\n", "notes": "Cf. FIPS180-2, section 6.2.2.\r\n(http://csrc.nist.gov/publications/fips/fips180-2/fips180-2withchangenotice.pdf)", "submit_date": "2008-01-21", "submitter_name": "Jan Andres", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1302", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.4", "orig_text": "      1. Prepare the message schedule W:\r\n         For t = 0 to 15\r\n            Wt = M(i)t\r\n         For t = 16 to 79\r\n            Wt = SSIG1(W(t-2)) + W(t-7) + SSIG0(t-15) + W(t-16)\r\n", "correct_text": "      1. Prepare the message schedule W:\r\n         For t = 0 to 15\r\n            Wt = M(i)t\r\n         For t = 16 to 79\r\n            Wt = SSIG1(W(t-2)) + W(t-7) + SSIG0(W(t-15)) + W(t-16)\r\n", "notes": "Cf. FIPS180-2, section 6.3.2.\r\n(http://csrc.nist.gov/publications/fips/fips180-2/fips180-2withchangenotice.pdf)", "submit_date": "2008-01-21", "submitter_name": "Jan Andres", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1303", "doc-id": "RFC2861", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "None.", "correct_text": "[B97] Bradner, S., \"Key words for use in RFCs to Indicate\r\n         Requirement Levels\", BCP 14, RFC 2119, March 1997.", "notes": "Missing citation.  Reported by Emmanuel Papirakis.", "submit_date": "2008-01-23", "submitter_name": "Sally Floyd", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1304", "doc-id": "RFC5023", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "   2.  If the Member Resource was created successfully, the server\r\n       responds with a status code of 201 and a Location header that\r\n       contains the IRI of the newly created Entry Resource.  Media\r\n       Resources could have also been created and their IRIs can be\r\n       found through the Entry Resource.  See Section 9.6 for more\r\n       details.", "correct_text": "   2.  If the Member Resource was created successfully, the server\r\n       responds with a status code of 201 and a Location header that\r\n       contains the URI of the newly created Entry Resource.  Media\r\n       Resources could have also been created and their IRIs can be\r\n       found through the Entry Resource.  See Section 9.6 for more\r\n       details.", "notes": "The Location header (as defined in HTTP/1.1) contains a URI, not a IRI.", "submit_date": "2008-01-29", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4715", "doc-id": "RFC7749", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.22.3", "orig_text": " The value is a free-form text that allows counter values to be\r\n      inserted using a \"percent-letter\" format.  For instance, \"[REQ%d]\"\r\n      generates labels of the form \"[REQ1]\", where \"%d\" inserts the item\r\n      number as a decimal number.\r\n", "correct_text": " The value is a free-form text that allows counter values to be\r\n      inserted using a \"percent-letter\" format.  For instance, \r\n\"format [REQ%d]\"\r\n      generates labels of the form \"[REQ1]\", where \"%d\" inserts the item\r\n      number as a decimal number.\r\n", "notes": "The string format must prefix the style text in order for it to be recognized and used.  This means that the example given is incorrect as it will not generate the requested output.\r\n\r\nIt is possible that explanatory text to the effect of the string format being required is needed as well, however modification of the example should be sufficient.", "submit_date": "2016-06-20", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1326", "doc-id": "RFC5090", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "a)       header\r\n\r\nb)       headers\r\n\r\nc)       Header", "correct_text": "a)       header field\r\n\r\nb)       header fields\r\n\r\nc)       Header Field", "notes": "As a Standards Track document, RFC 5090 should use established\r\nIETF standard terminology, and not fall back to common sluggish\r\nand confusing terminology.  Concise Ref.:  RFC 4249, Section 3.1.1.\r\n\r\nThere are 24 instances of case a) throughout the RFC;\r\nonly Section 3.20 makes proper use of the IETF standard\r\nterminology; case b) occurs twice in the RFC;\r\ncase c) applies to the title of Section 2.1.3.", "submit_date": "2008-02-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1327", "doc-id": "RFC2492", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   This use of PVC links does not mandate, nor does it prohibit the use\r\n   of extensions to the Neighbor Discovery protocol which may be\r\n   developed for either general use of for use in PVC connections (for\r\n   example, Inverse Neighbor Discovery).", "correct_text": "   This use of PVC links does not mandate, nor does it prohibit the use\r\n   of extensions to the Neighbor Discovery protocol which may be\r\n   developed for either general use or for use in PVC connections (for\r\n   example, Inverse Neighbor Discovery).", "notes": "", "submit_date": "2008-02-18", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1328", "doc-id": "RFC5134", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3, pg.7", "orig_text": "   Rules for Lexical Equivalence:\r\n\r\n         The entire URN is case-sensitive.\r\n", "correct_text": "   Rules for Lexical Equivalence:\r\n\r\n         The namespace-specific part of the URN is case-sensitive.\r\n", "notes": "Rationale: See previous report, Errata ID 1325 !\r\n\r\n\r\n[[  Additional note (please remove upon verification):\r\n    Re-entered after reported change to the Errata System\r\n    (hopefully) allows it to accept this report.  ]]", "submit_date": "2008-02-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1305", "doc-id": "RFC3982", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "     <group\r\n       name=\"partialMatchGroup\">\r\n       <choice>\r\n         <sequence>\r\n           <element\r\n             name=\"beginsWith\">\r\n             <simpleType>\r\n               <restriction\r\n                 base=\"token\">\r\n                 <minLength\r\n                   value=\"1\"/>\r\n               </restriction>\r\n             </simpleType>\r\n           </element>\r\n           <element\r\n             minOccurs=\"0\"\r\n             name=\"endsWith\">\r\n             <simpleType>\r\n               <restriction\r\n                 base=\"token\">\r\n                 <minLength\r\n                   value=\"1\"/>\r\n               </restriction>\r\n             </simpleType>\r\n           </element>\r\n         </sequence>\r\n         <element\r\n           name=\"endsWith\">\r\n           <simpleType>\r\n             <restriction\r\n               base=\"token\">\r\n               <minLength\r\n                 value=\"1\"/>\r\n             </restriction>\r\n           </simpleType>\r\n         </element>\r\n       </choice>\r\n     </group>\r\n", "correct_text": "\t<group name=\"partialMatchGroup\">\r\n\t\t<choice>\r\n\t\t\t<sequence>\r\n\t\t\t\t<element name=\"beginsWith\" type=\"dreg:partialMatchComponentType\"/>\r\n\t\t\t\t<element name=\"endsWith\" type=\"dreg:partialMatchComponentType\" minOccurs=\"0\"/>\r\n\t\t\t</sequence>\r\n\t\t\t<element name=\"endsWith\" type=\"dreg:partialMatchComponentType\"/>\r\n\t\t</choice>\r\n\t</group>\r\n\t<simpleType name=\"partialMatchComponentType\">\r\n\t\t<restriction base=\"token\">\r\n\t\t\t<minLength value=\"1\"/>\r\n\t\t</restriction>\r\n\t</simpleType>", "notes": "The original definition of the group \"partialMatchGroup\" violates the rule of consistent element declaration in XML schema:\r\nhttp://www.w3.org/TR/2004/REC-xmlschema-1-20041028/#cos-element-consistent\r\n\r\nIn order to fix the schema without introducing any semantic changes, a type declaration has been created, which makes the schema valid and more compact.", "submit_date": "2008-01-29", "submitter_name": "Marcos Sanz", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1306", "doc-id": "RFC4966", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "[RFC3498] ", "correct_text": "[RFC3948]", "notes": "All citations of [RFC3498] are intended to be [RFC3948]", "submit_date": "2008-01-29", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1307", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": "*  URI: urn:ietf:params:xml:ns:ipfix-info-15\r\n\r\n  ...\r\n\r\n*  URI: urn:ietf:params:xml:schema:ipfix-info-15", "correct_text": "*  URI: urn:ietf:params:xml:ns:ipfix-info\r\n\r\n  ...\r\n\r\n*  URI: urn:ietf:params:xml:schema:ipfix-info", "notes": "Discovered by Pearl Liang of IANA.", "submit_date": "2008-02-04", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1308", "doc-id": "RFC2988", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "References", "orig_text": "   [Jac88] Jacobson, V., \"Congestion Avoidance and Control\", Computer\r\n           Communication Review, vol. 18, no. 4, pp. 314-329, Aug.  1988.\r\n\r\n   [JK88]  Jacobson, V. and M. Karels, \"Congestion Avoidance and\r\n           Control\", ftp://ftp.ee.lbl.gov/papers/congavoid.ps.Z.", "correct_text": "   [Jac88] Jacobson, V., \"Congestion Avoidance and Control\", Computer\r\n           Communication Review, vol. 18, no. 4, pp. 314-329, Aug.  1988.\r\n\r\n   [JBB92] Jacobson, V., Braden, R., Borman, D., \"TCP Extensions for High\r\n           Performance\", RFC 1323, May 1992.\r\n\r\n   [JK88]  Jacobson, V. and M. Karels, \"Congestion Avoidance and\r\n           Control\", ftp://ftp.ee.lbl.gov/papers/congavoid.ps.Z.", "notes": "Reference [JBB92] is mentioned two times in section 3, but it is not included in the reference section.", "submit_date": "2008-02-05", "submitter_name": "Michael Scharf", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1309", "doc-id": "RFC4335", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3, 1st para", "orig_text": "   The following channel-specific request can be sent over a session\r\n   channel (as described in [4]) to request that the remote host perform\r\n   a BREAK operation.\r\n", "correct_text": "   The following channel-specific request can be sent over a session\r\n|  channel (as described in [5]) to request that the remote host perform\r\n   a BREAK operation.\r\n", "notes": "The relevant information is in RFC 4254 [5], \"SSH Connection Protocol\",\r\nin particular sections 5 and 6.\r\nRFC 4253 [4] does not even mention the concept of session channels\r\nto any notable detail.", "submit_date": "2008-02-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1310", "doc-id": "RFC4335", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3, last para", "orig_text": "   If the 'want_reply' boolean is set, the server MUST reply using an\r\n   SSH_MSG_CHANNEL_SUCCESS or SSH_MSG_CHANNEL_FAILURE [5] message.  If a\r\n   BREAK of any kind was preformed, SSH_MSG_CHANNEL_SUCCESS MUST be\r\n   sent.  If no BREAK was preformed, SSH_MSG_CHANNEL_FAILURE MUST be\r\n   sent.\r\n", "correct_text": "   If the 'want_reply' boolean is set, the server MUST reply using an\r\n   SSH_MSG_CHANNEL_SUCCESS or SSH_MSG_CHANNEL_FAILURE [5] message.  If a\r\n|  BREAK of any kind was performed, SSH_MSG_CHANNEL_SUCCESS MUST be\r\n|  sent.  If no BREAK was performed, SSH_MSG_CHANNEL_FAILURE MUST be\r\n   sent.\r\n", "notes": "s/preformed/performed/g", "submit_date": "2008-02-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1311", "doc-id": "RFC5118", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3, 1st par", "orig_text": "                                                  [...], the intended port\r\n   number becomes the last octet of the reference.", "correct_text": "                                                  [...], the intended port\r\n   number becomes the last octet pair of the reference.", "notes": "Each hexadecimal group in a literal IPv6 address encodes two octets\r\nof the IPv6 address -- cf. RFC 4291 !", "submit_date": "2008-02-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1312", "doc-id": "RFC5117", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3, 5th par", "orig_text": "   Stand-alone Media Translators are rare.  Most commonly, a combination\r\n|  of Transport and Media Translators are used to translate both the\r\n   media stream and the transport aspects of a stream between two\r\n   transport domains (or clouds).", "correct_text": "   Stand-alone Media Translators are rare.  Most commonly, a combination\r\n|  of Transport and Media Translators is used to translate both the\r\n   media stream and the transport aspects of a stream between two\r\n   transport domains (or clouds).", "notes": "\"A combination ... *is* used ...\"  !", "submit_date": "2008-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2402", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.3", "orig_text": "   The scenario we are considering is that a user and server share a key\r\n   K for ALG.  Both maintain a counter C, initially zero, and the user\r\n   authenticates itself by sending ALG(K,C) to the server.  The latter\r\n   accepts if this value is correct.\r\n\r\n   In order to protect against accidental increment of the user counter,\r\n   the server, upon receiving a value z, will accept as long as z equals\r\n   ALG(K,i) for some i in the range C,...,C + s-1, where s is the\r\n   resynchronization parameter and C is the server counter.  If it\r\n   accepts with some value of i, it then increments its counter to i+1.\r\n   If it does not accept, it does not change its counter value.", "correct_text": "   The scenario we are considering is that a user and server share a key\r\n|  K for ALG.  Both maintain a counter C and C', respectively, initially\r\n   zero, and the user authenticates itself by sending ALG(K,C) to the\r\n   server.  The latter accepts if this value is correct.\r\n\r\n   In order to protect against accidental increment of the user counter,\r\n   the server, upon receiving a value z, will accept as long as z equals\r\n|  ALG(K,i) for some i in the range C',...,C' + s-1, where s is the\r\n|  resynchronization parameter and C' is the server counter.  If it\r\n   accepts with some value of i, it then increments its counter to i+1.\r\n   If it does not accept, it does not change its counter value.", "notes": "conflicting naming of variables.\r\n\r\nre: the text of the 2nd and 3rd paragraph of Appendix A.3, on page 18 \r\n\r\nIn Appendix A.3, unfortunately the necessary distinction between\r\nthe counter value kept with the user and the counter value kept\r\nat the server is not preserved in the variable names introduced.\r\nThis leads to significant confusion.\r\n\r\nI hereby propose a 'minimally invasive' text modification as\r\n[shown] (Cf. Appendix E.3 for another notation).\r\n", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1314", "doc-id": "RFC5117", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4, pg.9", "orig_text": "         [...].  The CSRC Count (CC) and CSRC fields in the RTP header\r\n|  are used to indicate the contributors of to the newly generated\r\n   stream.  The SSRCs of the to-be-mixed streams on the Mixer input\r\n   appear as the CSRCs at the Mixer output.  That output stream uses a\r\n|  unique SSRC that identifies the Mixer's stream.  The CSRC are\r\n   forwarded between the two domains to allow for loop detection and\r\n   identification of sources that are part of the global session.  [...]", "correct_text": "         [...].  The CSRC Count (CC) and CSRC fields in the RTP header\r\n|  are used to indicate the contributors to the newly generated\r\n   stream.  The SSRCs of the to-be-mixed streams on the Mixer input\r\n   appear as the CSRCs at the Mixer output.  That output stream uses a\r\n|  unique SSRC that identifies the Mixer's stream.  The CSRCs are\r\n   forwarded between the two domains to allow for loop detection and\r\n   identification of sources that are part of the global session.  [...]", "notes": "Near the bottom of page 9:\r\na)  s/of to/to/\r\n      ^^^\r\nb)  s/The CSRC are/The CSRCs are/\r\n                           ^", "submit_date": "2008-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1315", "doc-id": "RFC5117", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4, pg.10", "orig_text": "   A Mixer is responsible for receiving RTCP feedback messages and\r\n   handling them appropriately.  The definition of \"appropriate\" depends\r\n   on the message itself and the context.  In some cases, the reception\r\n   of a codec-control message may result in the generation and\r\n   transmission of RTCP feedback messages by the Mixer to the\r\n|  participants in the other domain.  In other cases, a message is\r\n   handled by the Mixer itself and therefore not forwarded to any other\r\n   domain.", "correct_text": "   A Mixer is responsible for receiving RTCP feedback messages and\r\n   handling them appropriately.  The definition of \"appropriate\" depends\r\n   on the message itself and the context.  In some cases, the reception\r\n   of a codec-control message may result in the generation and\r\n   transmission of RTCP feedback messages by the Mixer to the\r\n|  participants in the other domain(s).  In other cases, a message is\r\n   handled by the Mixer itself and therefore not forwarded to any other\r\n   domain.", "notes": "Location is 4th paragraph on page 10.\r\nRationale: There may be more than one \"other\" domain;\r\nin particular, this *is* the case in the example discussed\r\nin the text (cf. Figure 5 on page 9).", "submit_date": "2008-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1316", "doc-id": "RFC5117", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.5, p.16", "orig_text": "  ... handled correctly in domain bridging function.  [...]", "correct_text": "Either:\r\n\r\n  ... handled correctly in domain bridging functions.  [...]\r\n\r\nOr (less preferable):\r\n\r\n  ... handled correctly in a domain bridging function.  [...]", "notes": "", "submit_date": "2008-02-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1317", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "In Appendix F, it says:", "orig_text": "Removed the on-link assumption in Section 5.2 based on RFC 4942,\r\n\"IPv6 Neighbor Discovery On-Link Assumption Considered Harmful\".", "correct_text": "Removed the on-link assumption in Section 5.2 based on RFC 4943,\r\n\"IPv6 Neighbor Discovery On-Link Assumption Considered Harmful\".", "notes": "", "submit_date": "2008-02-13", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1318", "doc-id": "RFC5135", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "In the Abstract, it says:", "orig_text": "   This document specifies requirements for a for a Network Address\r\n   Translator (NAT) and ...", "correct_text": "   This document specifies requirements for a Network Address\r\n   Translator (NAT) and ...\r\n", "notes": "word replication (added in AUTH48!)", "submit_date": "2008-02-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1319", "doc-id": "RFC5135", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1, pg.6", "orig_text": "   REQ-7:   The NAT MUST NOT forward Local Network Control Block\r\n|           (224.0.0/24) [RFC3171] (also known as \"link-local\r\n            multicast\") traffic from its 'inside' interface(s) to its\r\n            'outside' interface.\r\n", "correct_text": "   REQ-7:   The NAT MUST NOT forward Local Network Control Block\r\n|           (224.0.0.0/24) [RFC3171] (also known as \"link-local\r\n            multicast\") traffic from its 'inside' interface(s) to its\r\n            'outside' interface.\r\n", "notes": "Location is end of Section 4.1, near the bottom of page 6.\r\nThis correction also needs to be applied to the re-statement\r\nof REQ-7 in Section 5 (mid-page 10).\r\n\r\nRationale:\r\nThe basic \"strategic\" document for CIDR notation now is BCP 122,\r\nRFC 4632, and that document clearly states (in section 3.1, at\r\nthe bottom of page 5):\r\n                                                           vvvvvvv\r\n|          [...]  In CIDR notation, a prefix is shown as a 4-octet\r\n   quantity, just like a traditional IPv4 address or network number,\r\n   followed by the \"/\" (slash) character, followed by a decimal value\r\n   between 0 and 32 that describes the number of significant bits.\r\n\r\nAlso being a BCP, RFC 5135 should follow this rule.", "submit_date": "2008-02-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1320", "doc-id": "RFC5135", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3, pg.8", "orig_text": "   Any Source Multicast (ASM) uses the IP addresses in the 224/8 through\r\n   231/8, and 233/8 through 239/8 range [IANA-ALLOC].\r\n", "correct_text": "   Any Source Multicast (ASM) uses the IP addresses in the 224.0.0.0/8\r\n   through 231.0.0.0/8, and 233.0.0.0/8 through 239.0.0.0/8 range\r\n   [IANA-ALLOC].\r\n", "notes": "Rationale: see preceding entry", "submit_date": "2008-02-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4409", "doc-id": "RFC7049", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.9", "orig_text": "  The sorting rules are:\r\n\r\n      *  If two keys have different lengths, the shorter one sorts\r\n         earlier;\r\n\r\n      *  If two keys have the same length, the one with the lower value\r\n         in (byte-wise) lexical order sorts earlier.", "correct_text": "  The sorting rules are:\r\n\r\n      *  If the major types are different, the one with the lower value\r\n          in numerical order sorts earlier.\r\n\r\n      *  If two keys have different lengths, the shorter one sorts\r\n         earlier;\r\n\r\n      *  If two keys have the same length, the one with the lower value\r\n         in (byte-wise) lexical order sorts earlier.", "notes": "As the rules are currently written,  The integer -257 would be sorted after the integer 16 because has a length of 2 rather than a length of 1.  First rule says shorter keys sort first.  However the text above says the sorting is based on the byte representation of the key.\n --VERIFIER NOTES-- \n   This report has been rejected because this is a change in documented behavior\r\nthat would require working groupconsensus.  That said, this was taken into account\r\nby the working group during the production of the updated version of RFC 7049.", "submit_date": "2015-07-06", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-07-17 22:07:10"}, {"errata_id": "1321", "doc-id": "RFC5059", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1, 3rd par", "orig_text": "   In a scoped IPv4 BSM, the scope of the message is given by the first\r\n   group range in the message, which can be any sub-range of 224/4.  [...]\r\n", "correct_text": "   In a scoped IPv4 BSM, the scope of the message is given by the first\r\n|  group range in the message, which can be any sub-range of 224.0.0.0/4.\r\n   [...]\r\n", "notes": "Location is 3rd paragraph of Section 3.1, on mid-page 9.\r\nThis correction also needs to be applied to \"224/4\" in the\r\n7th paragraph of Section 3.3, on mid-page 19.\r\nRationale:\r\nThe basic \"strategic\" document for CIDR notation now is BCP 122,\r\nRFC 4632, and that document clearly states (in section 3.1, at\r\nthe bottom of page 5):\r\n                                                           vvvvvvv\r\n|          [...]  In CIDR notation, a prefix is shown as a 4-octet\r\n   quantity, just like a traditional IPv4 address or network number,\r\n   followed by the \"/\" (slash) character, followed by a decimal value\r\n   between 0 and 32 that describes the number of significant bits.\r\n\r\nAs a Standards-Track document, RFC 5059 should follow this rule.", "submit_date": "2008-02-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1322", "doc-id": "RFC5059", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1, pg.29", "orig_text": "   Frag RP Cnt 1..m", "correct_text": "   Frag RP Cnt 1..n", "notes": "This is a legacy issue inherited from RFC 2362.\r\n\r\nIn section 4.1, 'n' is used for the number of group range blocks\r\nin the Bootstrap Message,\r\n'm' is used for the number of RP Address sub-blocks within each\r\ngroup range block.\r\n\r\n'Frag RP Cnt' is a group range block level parameter and hence\r\nneeds indexing in the range 1..n .\r\n\r\nFurther, the reader should be cautious regarding the use of 'm':\r\nIn the diagram of the Bootstrap Message 'fragment' on pg. 27-28,\r\n'm' is used  in two contexts, but these are independent instances,\r\nwhich better had been named differently, or indexed with the\r\ngroup range block index i = 1..n ; on page 27, 'm' is the value of\r\nthe 'Frg RP Cnt 1' field and might better be designated as 'm_1',\r\nwhile on page 28, 'm' is the value of the 'Frg RP Cnt n' field\r\nand accordingly might better have been designated as 'm_n'.\r\nIn the corresponding field explanations on page 29, the remaining\r\n3 instances of 'm' should better be replaced by 'm_i' for clarity:\r\n\r\n   RP address 1..m       -->   RP address 1..m_i\r\n\r\n   RP1..m Holdtime       -->   RP 1..m_i Holdtime \r\n\r\n   RP1..m Priority       -->   RP 1..m_i Priority\r\n\r\nPurists would perhaps insist on having the additional (major)\r\nindex 'i' prepended to the running index '1..m_i' in all these\r\nfield names, as well.", "submit_date": "2008-02-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1323", "doc-id": "RFC5059", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1, pg.28", "orig_text": "   BSR Address\r\n        The address of the bootstrap router for the domain.  The format\r\n        for this address is given in the Encoded-Unicast address in [1].\r\n", "correct_text": "   BSR Address\r\n        The address of the bootstrap router for the domain.  The format\r\n|       for this address is given in the Encoded-Unicast address format\r\n|       defined in [1] and restated in Section 4.\r\n", "notes": "Note: This Erratum was updated by the AD from the original proposal. The original suggested replacing the reference to [1] with a reference to Section 4. The resolution includes both references.\r\n\r\nThe notes below were updated to be consistent with this change.\r\n\r\n======\r\n\r\nThe above quotation is at the bottom of page 28.\r\nFurther instances of the same issue are enumerated at the end of these Notes.\r\n\r\nRationale:\r\n\r\nIn Section 4, on page 24, the RFC purposely restates the terms\r\n\"Encoded-Unicast format\" and \"Encoded-Group format\" from [1] and\r\ncontinues:\r\n\r\n   We repeat these here to aid readability.\r\n\r\n---- End of Rationale ----\r\n\r\nThis issue recurs four more times, and similar changes\r\nshould be applied:\r\n\r\no  on page 29, in the first item, \"Group Address 1..n\",\r\n\r\no  on page 29, in the 4th item, \"RP address 1..m\"\r\n   (subject to preceding Erratum),\r\n\r\nas well as in Section 4.2:\r\n\r\no  on page 32, in the 3rd item, \"RP Address\",  and\r\n\r\no  on page 32, in the 4th item, \"Group Address-1..n\"\r\n   (Note that the hyphen above also should be a blank, for consistency.)", "submit_date": "2008-02-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1324", "doc-id": "RFC5119", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2, pg. 5", "orig_text": "Rules for Lexical Equivalence:\r\n\r\n         Lexical equivalence of URNs in the \"urn:smpte:ul\" subnamespace\r\n         is defined by case-insensitive string match.\r\n\r\n         Lexical equivalence of URNs in additional subnamespaces of\r\n         \"urn:smpte:\" will be specified by SMPTE in the defining\r\n         document; in the absence of such specification, lexical\r\n         equivalence of URNs in the \"urn:smpte:\" namespace outside of\r\n|        the \"urn:smpte:ul\" subnamespace is defined by exact string\r\n|        match, according to [RFC2141].\r\n\r\n", "correct_text": "      Rules for Lexical Equivalence:\r\n\r\n         Lexical equivalence of URNs in the \"urn:smpte:ul\" subnamespace\r\n         is defined by case-insensitive string match.\r\n\r\n         Lexical equivalence of URNs in additional subnamespaces of\r\n         \"urn:smpte:\" will be specified by SMPTE in the defining\r\n         document; in the absence of such specification, lexical\r\n         equivalence of URNs in the \"urn:smpte:\" namespace outside of\r\n         the \"urn:smpte:ul\" subnamespace is defined by exact string\r\n|        match of the namespace-specific subpart of the URN (denoted\r\n|        <other-NSS> above), according to [RFC2141].\r\n", "notes": "The RFC text contradicts RFC 2141.\r\nThe above correction restores conformance with RFC 2141.\r\n\r\n[[ please remove after verification:\r\n   apparently this correction has been lost since LC,\r\n   during the application of other updates.  ]]", "submit_date": "2008-02-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1325", "doc-id": "RFC5134", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2, pg. 4", "orig_text": "   Rules for Lexical Equivalence:\r\n\r\n         The entire URN is case-sensitive.\r\n", "correct_text": "   Rules for Lexical Equivalence:\r\n\r\n         The namespace-specific part of the URN is case-sensitive.\r\n", "notes": "The original rule contradicts Section 5 of RFC 2141 [1],\r\nwhich requests case-insensitive comparison after downcasing\r\nof \"urn:\" and the NID, and normalization of %-escaping.\r\nThe correction restores conformance with RFC 2141.\r\n\r\n[[ please remove after verification:\r\n   apparently this correction has been lost since LC ]]", "submit_date": "2008-02-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4287", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6.1", "orig_text": "   k= Key type (plain-text; OPTIONAL, default is \"rsa\").  Signers and\r\n      Verifiers MUST support the \"rsa\" key type.  The \"rsa\" key type\r\n      indicates that an ASN.1 DER-encoded [ITU-X660-1997] RSAPublicKey\r\n      (see [RFC3447], Sections 3.1 and A.1.1) is being used in the \"p=\"\r\n      tag.  (Note: the \"p=\" tag further encodes the value using the\r\n      base64 algorithm.)  Unrecognized key types MUST be ignored.\r\n\r\nand in Section 9.1:\r\n\r\n   [ITU-X660-1997]\r\n              \"Information Technology - ASN.1 encoding rules:\r\n              Specification of Basic Encoding Rules (BER), Canonical\r\n              Encoding Rules (CER) and Distinguished Encoding Rules\r\n              (DER)\", 1997.", "correct_text": "Both instances of \"[ITU-X660-1997]\" should be \"[ITU-X690-1997]\"", "notes": "This is just a typo: \"660\" should be \"690\".  The text of the reference is correct, but the document number is wrong.", "submit_date": "2015-03-04", "submitter_name": "Phil Griffin (via DCrocker)", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1332", "doc-id": "RFC4271", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.5", "orig_text": "      OPEN Message Error subcodes:\r\n\r\n               1 - Unsupported Version Number.\r\n               2 - Bad Peer AS.\r\n               3 - Bad BGP Identifier.\r\n               4 - Unsupported Optional Parameter.\r\n               5 - [Deprecated - see Appendix A].\r\n               6 - Unacceptable Hold Time.", "correct_text": "      OPEN Message Error subcodes:\r\n\r\n               1 - Unsupported Version Number.\r\n               2 - Bad Peer AS.\r\n               3 - Bad BGP Identifier.\r\n               4 - Unsupported Optional Parameter.\r\n               5 - [Deprecated - see Appendix A].\r\n               6 - Unacceptable Hold Time.\r\n               7 - Unsupported Capability", "notes": "7 - Unsupported Capability orig from RFC3392 seems to have accidently disappeared.\r\n\r\nThanks!\r\nAaron\n --VERIFIER NOTES-- \nThe working group debated this point and concluded the following:\r\n\r\nThe functionality (specifically, BGP Capabilities) this error code applies to does not appear anywhere in RFC 4271 (or RFC 1771).  As IANA records, this error subcode is defined in RFC5492/RFC3392, along with the related functionality.  The IANA registry is the final authority as to code point assignments, and is correct as written.  Accordingly, this erratum is rejected.", "submit_date": "2008-02-26", "submitter_name": "Aaron Hughes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1333", "doc-id": "RFC2516", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "The SOURCE_ADDR field MUST contains the Ethernet MAC address of the\r\nsource device.", "correct_text": "The SOURCE_ADDR field MUST contain the Ethernet MAC address of the \r\nsource device.", "notes": "The word \"contains\" should be \"contain\"", "submit_date": "2008-02-26", "submitter_name": "Praveen Bhamidipati", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1334", "doc-id": "RFC5144", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.1, pg.6", "orig_text": "      *  <update> - specifies a general modification of the domain\r\n|        information.  This status is usually be further refined by the\r\n         disposition attribute.\r\n                                             ^^^^", "correct_text": "      *  <update> - specifies a general modification of the domain\r\n|        information.  This status is usually further refined by the\r\n         disposition attribute.\r\n                                             ^", "notes": "", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1335", "doc-id": "RFC5144", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "     [...] Sraightforwarad-NAPTR [...]\r\n           ^^          ^^^", "correct_text": "     [...] Straightforward-NAPTR [...]\r\n           ^^^          ^^", "notes": "", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1336", "doc-id": "RFC5106", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.,4th para", "orig_text": "   ... by other severs ...", "correct_text": "   ... by other servers ...\r\n                  ^", "notes": "", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1337", "doc-id": "RFC5106", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.,2nd para", "orig_text": "   o  The Session-ID is constructed and exported as the concatenation of\r\n|     the following three elements, in this order: (a) the EAP Code Type\r\n|     for EAP-IKEv2 (to be defined by IANA), (b) the contents of the\r\n      Nonce Data field of the Nonce Payload Ni from message 3, (c) the\r\n      contents of the Nonce Data field of the Nonce Payload Nr from\r\n      message 4.\r\n", "correct_text": "   o  The Session-ID is constructed and exported as the concatenation of\r\n|     the following three elements, in this order: (a) the EAP Method \r\n|     Type for EAP-IKEv2 (49, as assigned by IANA), (b) the contents of\r\n      the Nonce Data field of the Nonce Payload Ni from message 3, (c)\r\n      the contents of the Nonce Data field of the Nonce Payload Nr from\r\n      message 4.\r\n", "notes": "Rationale:\r\na)  \"EAP Code Type\" is confusing; the correct term is \r\n    \"EAP Methode Type\".\r\nb)  The  code point indeed had been allocated by IANA on publication\r\n    of the RFC; the text should be explicit, for the ease of its readers.", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1338", "doc-id": "RFC5106", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7, pg. 14/15", "orig_text": "                                                                  Only\r\n   after receiving message 6, the server SHOULD respond with an\r\n<< page break >>\r\n   authentication failure notification, i.e., a message conforming to\r\n|  message 6 in Figure 10.  The purpose of this behaviour is to prevent\r\n   an adversary from probing the EAP-IKEv2 peer identifier space.\r\n", "correct_text": "                                                                   Only\r\n   after receiving message 6, the server SHOULD respond with an\r\n   authentication failure notification, i.e., a message conforming to\r\n|  message 7 in Figure 10.  The purpose of this behaviour is to prevent\r\n   an adversary from probing the EAP-IKEv2 peer identifier space.\r\n", "notes": "Rationale: See Figure 10 in Appendix A (on page 30).\r\n\r\nNote:  The RFC contains Figure 1..6, 10, and 11, but no Figure 7..9 !", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1339", "doc-id": "RFC5106", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7, pg.15", "orig_text": "   o  The packet contains an Encrypted payload that, when decrypted with\r\n|     the appropriate key, yields an invalid decryption.\r\n", "correct_text": "   o  The packet contains an Encrypted payload that, when decrypted with\r\n|     the appropriate key, yields an invalid plaintext.\r\n                                             ^^^^^^^^^\r\n", "notes": "Location 1 first bullet on page 15.\n --VERIFIER NOTES-- \nDocument editor's choice.", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1340", "doc-id": "RFC5106", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7, pg.15", "orig_text": "|  o  The packet contains an Integrity Checksum Data field (see *Figure\r\n      4) that is incorrect.\r\n                                                                ^", "correct_text": "|  o  The packet contains an Integrity Checksum Data field (see Figure\r\n      4) that is incorrect.\r\n", "notes": "Location is third bullet on page 15.", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1341", "doc-id": "RFC5106", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8, last para", "orig_text": "    ...  processed in way ...", "correct_text": "    ...  processed in a way ...", "notes": "", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1357", "doc-id": "RFC5140", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.7, pg.20", "orig_text": "                                    [...].  TGREP should specify its\r\n   choice address family through the route-type capability in the OPEN\r\n   message.  And route-type specification in the OPEN message violating\r\n   the above rule should be rejected with a NOTIFICATION message.\r\n", "correct_text": "                                    [...].  TGREP should specify its\r\n|  choice of address family through the route-type capability in the\r\n|  OPEN message.  Any route-type specification in the OPEN message\r\n   violating the above rule should be rejected with a NOTIFICATION\r\n   message.\r\n", "notes": "a)  missing \"of\"\r\nb)  \"And\"  -->  \"Any\"", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1342", "doc-id": "RFC5106", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.1", "orig_text": "Last paragraph on page 17:\r\n\r\n         [...].  The Message Length field is four octets long and\r\n   contains the length of the entire message (i.e., the length of the\r\n   EAP Data field.).  Note that, in contrast, the Length field shown in\r\n   ^^^^^^^^^^^^^^\r\n   Figure 4 contains the length of only the current fragment.  [...]\r\n\r\nSecond-to-last paragraph on page 18:\r\n\r\n   The Integrity Checksum Data field contains a cryptographic checksum\r\n   that covers the entire EAP message, starting with the Code field, and\r\n|  ending at the end of the EAP Data field.  This field, shown in Figure\r\n                        ^^^^^^^^^^^^^^^^^^\r\n   4, is present only if the I bit is set in the Flags field.  The\r\n   Integrity Checksum Data field immediately follows the EAP Data field\r\n   without padding.\r\n", "correct_text": "", "notes": "The above text is ambiguous and confusing, because the\r\n\"EAP Data field\" is neither shown in Figure 4 nor\r\nintroduced in the text of Sections 8 / 8.1.\r\n\r\nFrom the text snippits above, it remains unclear in particular\r\nwhether or not the \"Integrity Checksum Data\" field is considered\r\npart of the \"EAP Data field\".\r\nAccording to the EAP base specification, the former should be\r\nexpected, but the text contains no provisions for presetting\r\nthat field when calculating the ICV; thus it might be concluded\r\nthat the latter was intended.\r\n\r\nPlease clarify!", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1343", "doc-id": "RFC5106", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.10,last pa", "orig_text": "   ... in the context EAP-IKEv2 ...", "correct_text": "   ... in the context of EAP-IKEv2 ...", "notes": "Location is 3rd-to-last line of last paragraph of the section.", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1344", "doc-id": "RFC5106", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.,last para", "orig_text": "   The difference in the full successful exchange ...", "correct_text": "   The difference from the full successful exchange ...", "notes": "", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2258", "doc-id": "RFC2849", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Example 3: A file containing a base-64-encoded value\r\n\r\nversion: 1\r\ndn: cn=Gern Jensen, ou=Product Testing, dc=airius, dc=com\r\nobjectclass: top\r\nobjectclass: person\r\nobjectclass: organizationalPerson\r\ncn: Gern Jensen\r\ncn: Gern O Jensen\r\nsn: Jensen\r\nuid: gernj\r\ntelephonenumber: +1 408 555 1212\r\ndescription:: V2hhdCBhIGNhcmVmdWwgcmVhZGVyIHlvdSBhcmUhICBUaGlzIHZhbHVl\r\nIGlzIGJhc2UtNjQtZW5jb2RlZCBiZWNhdXNlIGl0IGhhcyBhIGNvbnRyb2wgY2hhcmFjdG\r\nVyIGluIGl0IChhIENSKS4NICBCeSB0aGUgd2F5LCB5b3Ugc2hvdWxkIHJlYWxseSBnZXQg\r\nb3V0IG1vcmUu", "correct_text": "Example 3: A file containing a base-64-encoded value\r\n\r\nversion: 1\r\ndn: cn=Gern Jensen, ou=Product Testing, dc=airius, dc=com\r\nobjectclass: top\r\nobjectclass: person\r\nobjectclass: organizationalPerson\r\ncn: Gern Jensen\r\ncn: Gern O Jensen\r\nsn: Jensen\r\nuid: gernj\r\ntelephonenumber: +1 408 555 1212\r\ndescription:: V2hhdCBhIGNhcmVmdWwgcmVhZGVyIHlvdSBhcmUhICBUaGlzIHZhbHVl\r\n IGlzIGJhc2UtNjQtZW5jb2RlZCBiZWNhdXNlIGl0IGhhcyBhIGNvbnRyb2wgY2hhcmFjdG\r\n VyIGluIGl0IChhIENSKS4NICBCeSB0aGUgd2F5LCB5b3Ugc2hvdWxkIHJlYWxseSBnZXQg\r\n b3V0IG1vcmUu", "notes": "There is no section numbering in this RFC, hence the \"GLOBAL\".\r\n\r\nNote 10 in \"Notes on LDIF Syntax\" says that base64-encoded values are subject to the same folding rules explained in Note 2. Note 2 requires folded lines to begin with a space character.\r\n\r\nThis modification was introduced passing from draft-good-ldap-ldif to RFC 2849.", "submit_date": "2010-05-13", "submitter_name": "Flavio Poletti", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1358", "doc-id": "RFC5115", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3, 2nd para", "orig_text": "   The requirements in [rfc3487] produced the corresponding document\r\n|  [rfc4412] in the SIP working group, which defines a new header for\r\n|  SIP called Resource-Priority.  This new header, which is optional, is\r\n   divided into two parts: a NameSpace and a Value.  [...]", "correct_text": "   The requirements in [rfc3487] produced the corresponding document\r\n|  [rfc4412] in the SIP working group, which defines a new header field\r\n|  for SIP called Resource-Priority.  This new header field, which is\r\n|  optional, has a field value divided into two parts: a NameSpace and\r\n   a Value.  [...]\r\n", "notes": "a)  Abuse of language /  non-use of established precise terminology:\r\n    \"header\"  -->  \"header field.\r\n\r\n    This issue recurs twice in Section 3.1 (first and last paragraph).\r\n\r\nb)  Any header field is divided into two parts, the header field name\r\n    and the header field value.  Hence, the RFC text is misleading.\r\n    Apparently, it wants to indicate that the field value is further\r\n    subdivided into two parts.\r\n    The proposed correction tries to clarify this with minimal rewording.", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1359", "doc-id": "RFC5115", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1, pg. 3", "orig_text": "    ... header ...", "correct_text": "   ... header field  ...", "notes": "Two occurrences: in the first and the last paragraph of Section 3.1.\r\nFor Rationale see NOTES for Errata-ID 1358.", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1360", "doc-id": "RFC5158", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1,1st para", "orig_text": "                                                 [...].  In the case of\r\n|  the 6to4 mapped IPv6 space, the upstream may not be providing any\r\n   IPv6-based services at all, and therefore would not be expected to\r\n   have a 6to4 reverse DNS delegation for its IPv4 address block.  [...]", "correct_text": "                                                 [...].  In the case of\r\n|  the 6to4 mapped IPv6 space, the upstream provider may not be providing\r\n   any IPv6-based services at all, and therefore would not be expected to\r\n   have a 6to4 reverse DNS delegation for its IPv4 address block.  [...]", "notes": "Missing noun, \"provider\".\r\n\r\nThis note and the subsequent ones repeat the more significant\r\nissues pointed out in review comments sent Aug 21, 2007, which\r\napparently have been missed (after positive acknowledgement).", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1361", "doc-id": "RFC5158", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3., pg. 5", "orig_text": "   The IPv4 address used as part of the generation of 6to4 addresses for\r\n   the local IPv6 network is that of the external IPv4 network interface\r\n   address (labelled '(A)' in the above diagram).  For example, if the\r\n   interface (A) has the IPv4 address 192.0.2.1, then the local IPv6\r\n   clients will use a common IPv6 address prefix of the form 2002:\r\n|  {192.0.2.1}::/48 (or (2002:C000:201::/48 in hex notation).  All the\r\n                        ^\r\n   local IPv6 clients share this common /48 address prefix, irrespective\r\n   of any local IPv4 address that such host may use if they are\r\n   operating in a dual stack mode.\r\n", "correct_text": "   The IPv4 address used as part of the generation of 6to4 addresses for\r\n   the local IPv6 network is that of the external IPv4 network interface\r\n   address (labelled '(A)' in the above diagram).  For example, if the\r\n   interface (A) has the IPv4 address 192.0.2.1, then the local IPv6\r\n   clients will use a common IPv6 address prefix of the form 2002:\r\n|  {192.0.2.1}::/48 (or 2002:C000:201::/48 in hex notation).  All the\r\n   local IPv6 clients share this common /48 address prefix, irrespective\r\n   of any local IPv4 address that such host may use if they are\r\n   operating in a dual stack mode.\r\n", "notes": "Issue: mismatched (spurious) opening parentheses.\r\nLocation is last paragraph on page 5.", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1345", "doc-id": "RFC5150", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.1,p.8", "orig_text": "   If an egress node receiving a Path message with the \"LSP stitching\r\n|  desired\" bit set in the Flags field of received LSP_ATTRIBUTES object\r\n                                      ^^^^\r\n|  recognizes the object, the TLV TLV, and the bit and also supports the\r\n                              ^^^^^^^\r\n   desired stitching behavior, then it MUST allocate a non-NULL label\r\n   for that S-LSP in the corresponding Resv message.  Also, so that the\r\n   head-end node can ensure that the correct label (forwarding) actions\r\n   will be carried out by the egress node and that the S-LSP can be used\r\n   for stitching, the egress node MUST set the \"LSP segment stitching\r\n   ready\" bit defined in the Flags field of the RRO Attribute subobject.\r\n", "correct_text": "   If an egress node receiving a Path message with the \"LSP stitching\r\n|  desired\" bit set in the Flags field of the Attributes Flags TLV of\r\n                                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n|  the received LSP_ATTRIBUTES object recognizes the object, the TLV,\r\n   ^^^^                                                          ^^^\r\n   and the bit and also supports the desired stitching behavior, then it\r\n   MUST allocate a non-NULL label for that S-LSP in the corresponding\r\n   Resv message.  Also, so that the head-end node can ensure that the\r\n   correct label (forwarding) actions will be carried out by the egress\r\n   node and that the S-LSP can be used for stitching, the egress node\r\n   MUST set the \"LSP segment stitching ready\" bit defined in the Flags\r\n   field of the RRO Attribute subobject.\r\n", "notes": "Location is 6th paragraph of Section 5.1.1 (i.e., 3rd paragraph on page 8).\r\n\r\nRationale:\r\na)  apparently significant text dropped\r\nb)  spurious word replication", "submit_date": "2008-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1346", "doc-id": "RFC5151", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "   A new bit has been allocated from the \"Attributes Flags\" sub-registry\r\n   of the \"RSVP TE Parameters\" registry.\r\n\r\n                                            vvvvvvvvv\r\n| Bit | Name                 | Attribute  | Path       | RRO | Reference\r\n  No  |                      | Flags Path | Flags Resv |     |\r\n  ----+----------------------+------------+------------+-----+----------\r\n| 4     Contiguous LSP         Yes          No           Yes   [RFC5150]\r\n                                                                   ^^^^^", "correct_text": "   A new bit has been allocated from the \"Attributes Flags\" sub-registry\r\n   of the \"RSVP TE Parameters\" registry.\r\n\r\n                                            vvvvvvvvv\r\n| Bit | Name                 | Attribute  | Attribute  | RRO | Reference\r\n  No  |                      | Flags Path | Flags Resv |     |\r\n  ----+----------------------+------------+------------+-----+----------\r\n| 4     Contiguous LSP         Yes          No           Yes   [RFC5151]\r\n                                                                   ^^^^", "notes": "a) Registry heading garbled\r\nb) RFC 5151 -- that's where we are there!\r\n\r\nHint:  The IANA registry file is *not* affected.\r\n       Apparently the error has been introduced after IANA processing,\r\n       or IANA has detected and corrected the issue when updating it.", "submit_date": "2008-03-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2392", "doc-id": "RFC4492", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "The server's Supported Point Formats Extension has the same structure\r\nas the client's Supported Point Formats Extension (see\r\nSection 5.1.2).  Items in elliptic_curve_list here are ordered\r\naccording to the server's preference (favorite choice first).  Note\r\nthat the server may include items that were not found in the client's\r\nlist (e.g., the server may prefer to receive points in compressed\r\nformat even when a client cannot parse this format: the same client\r\nmay nevertheless be capable of outputting points in compressed\r\nformat).", "correct_text": "The server's Supported Point Formats Extension has the same structure\r\nas the client's Supported Point Formats Extension (see\r\nSection 5.1.2).  Items in ec_point_format_list here are ordered\r\naccording to the server's preference (favorite choice first).  Note\r\nthat the server may include items that were not found in the client's\r\nlist (e.g., the server may prefer to receive points in compressed\r\nformat even when a client cannot parse this format: the same client\r\nmay nevertheless be capable of outputting points in compressed\r\nformat).", "notes": "ec_point_format_list is the field in the Supported Point Formats Extension. elliptic_curve_list is the field in the Supported Elliptic Curves Extension.", "submit_date": "2010-07-23", "submitter_name": "Brian Smith", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1362", "doc-id": "RFC5158", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4, pg.7", "orig_text": "   This service is implemented by web servers that are operated on a\r\n|  dual-stack IPv4 / IPv6 server, accessible via SSL.  [...]\r\n                                                 ^^^", "correct_text": "   This service is implemented by web servers that are operated on a\r\n|  dual-stack IPv4 / IPv6 server, accessible via TLS.  [...]\r\n", "notes": "Location is top of page 7.\r\n\r\nThe 4th paragraph of the same section (on page 6) clearly refers\r\nto TLS [RFC4346].  SSL is *not* TLS, it's the predecessor, updated\r\nin the IETF to fix serious security issues detected.\r\n\r\nHence the RFC should consistently refer to \"TLS\" and not mix in \"SSL\".", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1363", "doc-id": "RFC5158", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4, pg.7", "orig_text": "                                    vv\r\n|         [...], given the potentially for inheritance of 'stale'\r\n      reverse DNS information in this context, in those cases where [...]\r\n", "correct_text": "|         [...], given the potential for inheritance of 'stale' reverse\r\n      DNS information in this context, in those cases where [...]\r\n", "notes": "Location is last paragraph on page 7 (2nd bullet).", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1364", "doc-id": "RFC5158", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "   [6to4-dns]  Moore, K., \"6to4 and DNS\", Work in Progress, April 2003.\r\n", "correct_text": "   [6to4-dns]  Moore, K., \"6to4 and DNS\", Work in Progress, October 2002.\r\n", "notes": "The only matching draft that can be found in the archives has an\r\n*expiration* month of April 2003; nevertheless, it has been \r\npublished in October 2002, and that month should be listed.", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1379", "doc-id": "RFC4871", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "       sig-z-tag      = %x7A [FWS] \"=\" [FWS] sig-z-tag-copy\r\n                    *( [FWS] \"|\" sig-z-tag-copy )\r\n   sig-z-tag-copy = hdr-name \":\" qp-hdr-value\r\n", "correct_text": "       sig-z-tag      = %x7A [FWS] \"=\" [FWS] sig-z-tag-copy\r\n                    *( \"|\" [FWS] sig-z-tag-copy )\r\n   sig-z-tag-copy = hdr-name [FWS] \":\" qp-hdr-value\r\n", "notes": "From the October 2008 interop event, there are several issues with z=:\r\n\r\nFWS in z= tag\r\n\r\n1)\tDoes not allow any FWS between the \"|\" and the following header name in sig-z-tag-copy\r\n\r\n2)\tBy the ABNF, the informative example that immediately follows is invalid:\r\n\r\nz=From:foo@eng.example.net|To:joe@example.com|\r\n----Subject:demo=20run|Date:July=205,\u2026\r\n\r\n3)\tThe [FWS] is redundant there; sig-z-tag-copy ends with qp-hdr-value, which can already end with arbitrary FWS\r\n\r\n4)\tNo FWS allowed between the hdr_name and the following \":\u201c:\r\n\r\nThe modified ABNF is not redundant and agrees with the example.", "submit_date": "2008-03-21", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1347", "doc-id": "RFC5098", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5, pg.12", "orig_text": "  pktcSigDevCodecTable OBJECT-TYPE\r\n     ...\r\n     DESCRIPTION\r\n        \" ...\r\n\r\n          Codec Type     Maximum Number of Simultaneous Codecs\r\n          PCMA                             3\r\n\r\n          PCMA                             2\r\n          PCMU                             1\r\n\r\n          PCMA                             1\r\n|\r\n          PCMU                             2\r\n\r\n          PCMU                             3\r\n\r\n          PCMA                             1\r\n          G729                             1\r\n\r\n          G729                             2\r\n\r\n          PCMU                             1\r\n          G729                             1\r\n", "correct_text": "  pktcSigDevCodecTable OBJECT-TYPE\r\n     ...\r\n     DESCRIPTION\r\n        \" ...\r\n\r\n          Codec Type     Maximum Number of Simultaneous Codecs\r\n|\r\n          PCMA                             3\r\n\r\n          PCMA                             2\r\n          PCMU                             1\r\n\r\n          PCMA                             1\r\n          PCMU                             2\r\n\r\n          PCMU                             3\r\n\r\n          PCMA                             1\r\n          G729                             1\r\n\r\n          G729                             2\r\n\r\n          PCMU                             1\r\n          G729                             1\r\n", "notes": "Issue:      Spurious blank line distorts grouping of example\r\n            line and turns example ineffective.\r\nCorrection: Delete the spurious line, but add a blank line\r\n            after the headline, for clarity.", "submit_date": "2008-03-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1348", "doc-id": "RFC5098", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5, pg.20", "orig_text": "  pktcSigCapabilityVendorExt      OBJECT-TYPE\r\n     ...\r\n     DESCRIPTION\r\n        \" The vendor extension allows vendors to provide a list of\r\n          additional capabilities.\r\n\r\n          The syntax for this MIB object in ABNF ([RFC5234]) is\r\n          specified to be zero or more occurrences of vendor\r\n          extensions, as follows:\r\n\r\n           pktcSigCapabilityVendorExt  = *(vendor-extension)\r\n|          vendor-extension = (ext symbol alphanum) DQUOTE ; DQUOTE\r\n|          ext      = DQUOTE %x58 DQUOTE\r\n|          symbol   = (DQUOTE %x2D DQUOTE)/(DQUOTE %x2D DQUOTE)\r\n           alphanum = 1*6(ALPHA/DIGIT)\r\n\r\n         \"", "correct_text": "  pktcSigCapabilityVendorExt      OBJECT-TYPE\r\n     ...\r\n     DESCRIPTION\r\n        \" The vendor extension allows vendors to provide a list of\r\n          additional capabilities.\r\n\r\n          The syntax for this MIB object in ABNF ([RFC5234]) is\r\n          specified to be zero or more occurrences of vendor\r\n          extensions, as follows:\r\n\r\n           pktcSigCapabilityVendorExt  = *(vendor-extension)\r\n|          vendor-extension = ext symbol alphanum \";\" \r\n|          ext      = %x58               ; uppercase only X\r\n|          symbol   = %x2B / %x2D        ; + or -\r\n           alphanum = 1*6(ALPHA/DIGIT)\r\n\r\n         \"", "notes": "Symptom: ABNF grossly nonsensical:\r\n         ABNF comment  '; DQUOTE'  perhaps intended as non-comment;\r\n         all DQUOTEs apparently should be removed;\r\n         two identical alternatives for symbol do not make sense.\r\n\r\nCorrection is based on earlier draft versions, applying the\r\ncorrections necessary to obtain valid ABNF, yet specifying\r\nwhat probably was intended.\r\n\r\nAlternatively, the following line might be substituted above:\r\n\r\n|          symbol   = \"+\" / \"-\"", "submit_date": "2008-03-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1349", "doc-id": "RFC5098", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5,pg.31-33", "orig_text": "-", "correct_text": "         osi                             any value  (not used)\r\n", "notes": "Incomplete specification:\r\n\r\nThe line given as 'corrected text' is missing from the tabular\r\nlistings of all (other) cases possible, in the DESCRIPTION clauses\r\nof the following three scalar MIB objects, on pp.31-33 of the RFC:\r\n   \r\n   pktcSigDevVmwiAfterDTAS\r\n   pktcSigDevVmwiAfterRPAS\r\n   pktcSigDevVmwiDTASAfterLR", "submit_date": "2008-03-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1350", "doc-id": "RFC3700", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In ToC", "orig_text": "2.  Contacts . . . . . . . . . . . . . . . . . . . . . . . . . . .  2", "correct_text": "2.  Resources  . . . . . . . . . . . . . . . . . . . . . . . . . .  2", "notes": "", "submit_date": "2008-03-05", "submitter_name": "Shestakov Valerij", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1351", "doc-id": "RFC5075", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   o  Type - TBD (to be assigned by IANA)\r\n", "correct_text": "   o  Type - 26\r\n", "notes": "", "submit_date": "2008-02-29", "submitter_name": "Thomas Narten", "verifier_id": "", "verifier_name": "Bob Hinden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1352", "doc-id": "RFC4122", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Appendix B, it says:", "orig_text": "uuid_create_md5_from_name(): e902893a-9d22-3c7e-a7b8-d6e313b71d9f", "correct_text": "uuid_create_md5_from_name(): 3d813cbb-47fb-32ba-91df-831e1593ac29", "notes": "The given value e902... etc. is based on a calculation swapping the eight octets 0..3, 4..5, 6..7 twice, for the name space UUID, and for the MD5 output, as foreseen for little endian input, but the example values were already big endian. I can reproduce the example and the proposed fix, see <http://omniplex.blogspot.com/2008/03/md5-16-pop3-and-uuid.html>.\r\n\r\nThe blog entry contains links to an identical older error report, and two (different) examples from third parties also agreeing with that theory.", "submit_date": "2008-03-08", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1353", "doc-id": "RFC1123", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1, ID 1081", "orig_text": "Errata ID 1081, reported 2007-11-20, identifies a problem with the\r\nevolution of naming of top-level domains and the text of RFC 1123.\r\nIt reads:\r\n\r\nSection 2.1 says:\r\n\r\n                        However, a valid host name can never\r\nhave the dotted-decimal form #.#.#.#, since at least the\r\nhighest-level component label will be alphabetic.\r\n\r\nIt should say:\r\n\r\n                        However, a valid host name can never\r\nhave the dotted-decimal form #.#.#.#, since at least the\r\nhighest-level component label will be not all-numeric.\r\n\r\nNotes:\r\n\r\nRFC 3696 section 2 states: \"There is an additional rule that \r\nessentially requires that top-level domain names not be \r\nall-numeric.\" The eleven IDN test TLDs created in \r\nSeptember 2007 contain hyphen-minus as specified in the \r\nIDNA RFCs. ", "correct_text": "However, a valid host name can never have the dotted-decimal \r\nform #.#.#.#, since this change does not permit the highest-level \r\ncomponent label to start with a digit even if it is not all-numeric.", "notes": "This is a correct identification of the problem, but the wrong fix.  RFC 3696, which ID 1081 cites, is an informational document that is deliberately relaxed about the fine details and says so.  It is not relevant to determination of the text that should have been (with perfect knowledge of the future) in 1123.\r\n\r\nBased on discussions when we were doing RFC 1591 and subsequently, the expectation then (and presumably when 1123 was written) was that the name of any new TLD would follow the rules for the existing ones, i.e., that they would be exactly two or three characters long and be all-alphabetic (which is exactly what 1123 says).  The slightly-odd \"will be\" language in 1123 was, I believe, because that restriction was expected to be enforced by IANA, rather than being a protocol issue.  ICANN, with a different set of assignment policies, effectively eliminated the length rule with the TLDs allocated in 2000.  IDNA (RFC 3490) uses a syntax for IDNs that requires embedded hyphens in TLDs if there were ever to be an actual IDN TLD (hence the comment in ID 1081 about the IANA IDN testbed).\r\n\r\nWhile the proposed correction in Errata ID 1081 would fix the problem by imposing the narrowest possible restriction (\"not all-numeric\"), the original host name rule and the original statement in 1123 both assume the possibility of a minimal check to differentiate between domain names and IP addresses, i.e., checking the first digit only.  Because I believe that there are probably implementations that depend on such minimal parsing --some probably ancient and embedded-- it would appear to be wise to relax the rule as little as possible and, in particular, to restrict the \"leading digit\" exception to domains below the top-level, as 1123 effectively does.\r\n\r\nThe suggested text above reflects that reasoning.  Because of the possible consequences of this issue, I would hope that it would be discussed with the relevant DNS-related WGs, the Root Server Advisory Committee (RSAC), and with IANA for comment and as a heads-up.  This issue is substantive enough that it should probably be dealt with by a document that explicitly updates 1123 and that is processed on the Standards Track, but an accurate statement in the errata is the next-best option until that can be done.  In the interim and while this suggestion is being discussed, Errata ID 1081 should probably be taken out of \"validated\" status.\n --VERIFIER NOTES-- \nThis errata is in conflict with errata 1081.  A new I-D and community consensus are probably needed.", "submit_date": "2008-03-08", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1354", "doc-id": "RFC1123", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "The syntax of a legal Internet host name was specified in RFC-952 [DNS:4].", "correct_text": "The syntax of a legal Internet host name was specified in RFC-952\r\n[DNS:4] and reiterated in RFC-1034 Section 3.5 [DNS:1].", "notes": "This essentially trivial editorial change makes it slightly easier for \r\nanyone (or any tool) that tracks changes and updates to host and domain \r\nnaming rules to identify the applicability of this section.", "submit_date": "2008-03-08", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4716", "doc-id": "RFC4596", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.9.2", "orig_text": "languages=", "correct_text": "language=", "notes": "There are seven occurrences of this error in the sip examples of section 3.9.2.\r\nAs comparison, section 3.16.2 has the correct spelling in its three occurrences.\r\nThe parameter name refers to the language feature tag from RFC 2987, named \"language\".", "submit_date": "2016-06-20", "submitter_name": "Gunnar Hellstrom", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1365", "doc-id": "RFC5162", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1. (ff.)", "orig_text": "   A client making use of this extension MUST issue \"ENABLE QRESYNC\"\r\n   once it is authenticated.  A server MUST respond with a tagged BAD\r\n   response if the QRESYNC parameter to the SELECT/EXAMINE command or\r\n   the VANISHED UID FETCH modifier is specified and the client hasn't\r\n   issued \"ENABLE QRESYNC\" in the current connection.", "correct_text": "   A client making use of this extension MUST issue \"ENABLE QRESYNC\"\r\n   once it is authenticated.  A server MUST respond with a tagged BAD\r\n   response if the QRESYNC parameter to the SELECT/EXAMINE command or\r\n   the VANISHED UID FETCH modifier is specified and the client hasn't\r\n|  issued \"ENABLE QRESYNC\", or the server has not positively responded\r\n|  to that command with \"ENABLED QRESYNC\", in the current connection.", "notes": "Rationale:\r\nAccording to RFC 5161, the option enablement handshake is only\r\ncomplete, and hence the option(s) enabled on the server, if the\r\nserver has sent a positive (untagged) \"ENABLED <option>\" response\r\nto the ENABLE command.\r\nFor clarity, RFC 5162 should unambiguously reflect this causality\r\nchain.\r\n\r\nThis same issue recurs in Section 3.1 (last paragraph on page 4)\r\nand Section 3.6 (4th paragraph on page 13).", "submit_date": "2008-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1366", "doc-id": "RFC5123", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.,last para", "orig_text": "   Assume a BGP speaker in AS65002 has received an advertisement for\r\n|  10.1.1.0/24 from a BGP speaker in AS65001, with an AS Path of {65000,\r\n|  65001}.\r\n", "correct_text": "   Assume a BGP speaker in AS65002 has received an advertisement for\r\n|  10.1.1.0/24 from a BGP speaker in AS65001, with an AS Path of {65001,\r\n|  65000}.\r\n", "notes": "Rationale:\r\nAS Path presentation should consistently follow the common\r\npractice for BGP-4.\r\nRFC 5123 mixes standard and reversed AS Path notation.\r\nTo avoid confusion, all reversed AS Path notations should\r\nbe corrected.\r\n\r\nFor clarity, further instances of this issue in Sections 1.2,\r\n1.4, and 2.2 are addressed in separate Errata Notes.", "submit_date": "2008-03-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1367", "doc-id": "RFC5123", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.2,2nd para", "orig_text": "   Path validation, in the context of this small internetwork, asserts\r\n   that when a BGP speaker in AS65002 receives an advertisement from a\r\n|  BGP speaker in AS65001 with the AS Path {65000, 65001}, the speaker\r\n   can assume that AS65001 is attached to the local AS, and that AS65001\r\n   is also attached to AS65000.\r\n", "correct_text": "   Path validation, in the context of this small internetwork, asserts\r\n   that when a BGP speaker in AS65002 receives an advertisement from a\r\n|  BGP speaker in AS65001 with the AS Path {65001, 65000}, the speaker\r\n   can assume that AS65001 is attached to the local AS, and that AS65001\r\n   is also attached to AS65000.\r\n", "notes": "For rationale, see previous Errata Note.", "submit_date": "2008-03-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1368", "doc-id": "RFC5123", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.4,2nd para", "orig_text": "   In terms of the small example internetwork, if a BGP speaker in\r\n   AS65002 receives an advertisement from a peer in AS65001 for the\r\n|  destination 10.1.1.0/24, with an AS Path {65000, 65001}, will traffic\r\n   forwarded to the BGP speaker in AS65001 actually be forwarded through\r\n   routers within AS65001, then AS65000, to reach its destination?\r\n", "correct_text": "   In terms of the small example internetwork, if a BGP speaker in\r\n   AS65002 receives an advertisement from a peer in AS65001 for the\r\n|  destination 10.1.1.0/24, with an AS Path {65001, 65000}, will traffic\r\n   forwarded to the BGP speaker in AS65001 actually be forwarded through\r\n   routers within AS65001, then AS65000, to reach its destination?\r\n", "notes": "For rationale, see Errata Note for Section 1", "submit_date": "2008-03-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1369", "doc-id": "RFC5123", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2, pg. 5", "orig_text": "   A BGP speaker in AS65000 may receive an advertisement from a peer\r\n|  that 10.1.1.0/24 is reachable along the path {65004, 65002, 65001}.\r\n   [...]\r\n", "correct_text": "   A BGP speaker in AS65000 may receive an advertisement from a peer\r\n|  that 10.1.1.0/24 is reachable along the path {65001, 65002, 65004}.\r\n   [...]\r\n", "notes": "For rationale, see Errata Note for Section 1.", "submit_date": "2008-03-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1370", "doc-id": "RFC5123", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2, pg. 6", "orig_text": "a)  first bullet:\r\n\r\n   o  Is the AS Path valid?  The AS Path the receiving BGP speaker in\r\n|     AS65000 receives from its peer in AS65001, {65004, 65002, 65001),\r\n      does exist, and is valid.\r\n\r\nb)  third bullet:\r\n \r\n   o  Is the AS Path consistent with the forwarding path (does\r\n      forwarding consistency exist)?  No, the advertised AS Path is\r\n|     {65004, 65002, 65001}, while the actual path is {65004, 65003,\r\n|     65001}.\r\n\r\n", "correct_text": "a)  first bullet:\r\n\r\n   o  Is the AS Path valid?  The AS Path the receiving BGP speaker in\r\n|     AS65000 receives from its peer in AS65001, {65001, 65002, 65004),\r\n      does exist, and is valid.\r\n\r\nb)  third bullet:\r\n \r\n   o  Is the AS Path consistent with the forwarding path (does\r\n      forwarding consistency exist)?  No, the advertised AS Path is\r\n|     {65001, 65002, 65004}, while the actual path is {65001, 65003,\r\n|     65004}.\r\n\r\n", "notes": "For rationale, see Errata Note for Section 1, Errata ID: 1366", "submit_date": "2008-03-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1371", "doc-id": "RFC4918", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "    Servers MUST process PROPPATCH instructions in document order (an\r\n    exception to the normal rule that ordering is irrelevant).\r\n", "correct_text": "    Servers MUST process the child elements of the propertyupdate XML\r\n    element in the order they appear in the request body (an exception to\r\n    the normal rule that ordering is irrelevant).\r\n", "notes": "There are no \"PROPPATCH\" instructions in the request document (PROPPATCH is a method name, not an XML element name used in WebDAV). \r\n\r\nNote this issue was raised during Gen-art review, but not fixed before publication (http://www.ietf.org/mail-archive/web/gen-art/current/msg01823.html)", "submit_date": "2008-03-14", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4410", "doc-id": "RFC5880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.8.4", "orig_text": "If Demand mode is active, and a period of time equal to the Detection\r\nTime passes after the initiation of a Poll Sequence (the transmission\r\nof the first BFD Control packet with the Poll bit set), the session\r\nhas gone down", "correct_text": "If Demand mode is active, and a period of time equal to the Detection\r\nTime passes after the initiation of a Poll Sequence (the transmission\r\nof the first BFD Control packet with the Poll bit set),and without \r\nreceiving a BFD Control packet with the Final (F) bit set from the\r\nremote system, the session has gone down", "notes": "If has received BFD Control packet with the Final (F) bit set from the\r\nremote system, the session will not gone down", "submit_date": "2015-07-07", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2320", "doc-id": "RFC4993", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "The first paragraph of Section 8, on page 12 of RFC 4993, says:\r\n\r\n   IRIS-LWZ is intended for serving public data; it provides no in-band\r\n   mechanisms for authentication or confidentiality.  Any application\r\n   with these needs must provide out-of-band mechanisms (e.g., IPsec),\r\n   or use the IRIS transfer protocols that provide such capabilities,\r\n|  such as IRIS-XPC [9].\r\n                ^^^\r\n", "correct_text": "   IRIS-LWZ is intended for serving public data; it provides no in-band\r\n   mechanisms for authentication or confidentiality.  Any application\r\n   with these needs must provide out-of-band mechanisms (e.g., IPsec),\r\n   or use the IRIS transfer protocols that provide such capabilities,\r\n|  such as IRIS over XPCS [9].\r\n                ^^^^^^^^^\r\n", "notes": "The last phrase fatally misses the requirement.\r\nThe needed services are only provided by the TLS encapsulation of\r\nIRIS-XPC, the compound protocol being named IRIS over XPCS in [9], and\r\nthat is being made visible via explicit iris.xpcs URIs [9].\r\n\r\nAlexey: the term IRIS-XPCS is not defined in [9], but \"IRIS over XPCS\" is used. So I modified the change accordingly.\r\n\r\n", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1372", "doc-id": "RFC4757", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": " // Generate checksum of message -\r\n //  SGN_CKSUM + Token.Confounder\r\n //   Key derivation salt = 15\r\n\r\n Sgn_Cksum = MD5((int32)15, Token.Header,\r\n                Token.Confounder);\r\n\r\n", "correct_text": " // Generate checksum of message -\r\n //  SGN_CKSUM + Token.Confounder\r\n //   Key derivation salt = 13\r\n\r\n Sgn_Cksum = MD5((int32)13, Token.Header,\r\n                Token.Confounder);\r\n\r\n", "notes": "The final RFC appears to have cut-and-paste typo regarding the salt value used when generating the checksum for a WRAP token.  The value used for a MIC token is 15, the value used for a WRAP token is 13.\r\n\r\nLove H\u00f6rnquist \u00c5strand <lha@kth.se> pointed out that an earlier draft shows the values actually in use:\r\n\r\nhttp://tools.ietf.org/html/draft-brezak-win2k-krb-rc4-hmac-02", "submit_date": "2008-03-14", "submitter_name": "Kevin Coffman", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1373", "doc-id": "RFC3315", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "22.17", "orig_text": "      option-code          OPTION_VENDOR_OPTS (17)\r\n\r\n      option-len           4 + length of option-data field\r\n\r\n      enterprise-number    The vendor's registered Enterprise Number as\r\n                           registered with IANA [6].\r\n\r\n      option-data          An opaque object of option-len octets,\r\n                           interpreted by vendor-specific code on the\r\n                           clients and servers", "correct_text": "      option-code          OPTION_VENDOR_OPTS (17)\r\n\r\n      option-len           4 + length of option-data field\r\n\r\n      enterprise-number    The vendor's registered Enterprise Number as\r\n                           registered with IANA [6].\r\n\r\n      option-data          An opaque object,\r\n                           interpreted by vendor-specific code on the\r\n                           clients and servers", "notes": "option-len is defined to be the size of the option-data + 4. Thus the size of option-data cannot option-len, but is actually option-len - 4.", "submit_date": "2008-03-19", "submitter_name": "Robert Marks", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1374", "doc-id": "RFC2277", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "Many operations, including high quality formatting, text-to-speech\r\nsynthesis, searching, hyphenation, spellchecking and so on benefit\r\ngreatly from access to information about the language of a piece of\r\ntext. [WC 3.1.1.4].", "correct_text": "Many operations, including high quality formatting, text-to-speech\r\nsynthesis, searching, hyphenation, spellchecking and so on benefit\r\ngreatly from access to information about the language of a piece of\r\ntext. [WR 3.1.1.4].\r\n       ^^", "notes": "\"WC\" --> \"WR\"", "submit_date": "2008-03-20", "submitter_name": "Masatoshi Yamamoto", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1375", "doc-id": "RFC3305", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "   1. The W3C and IETF should jointly develop and endorse a model for\r\n      URIs, URLs, and URNs consistent with the \"Contemporary View\"\r\n      described in section 1, and which considers the additional URI\r\n      issues listed or alluded to in section 3.", "correct_text": "   1. The W3C and IETF should jointly develop and endorse a model for\r\n      URIs, URLs, and URNs consistent with the \"Contemporary View\"\r\n      described in section 2, and which considers the additional URI\r\n      issues listed or alluded to in section 3.", "notes": "", "submit_date": "2008-03-20", "submitter_name": "K. Ohwashi", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1376", "doc-id": "RFC4871", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.3/.4", "orig_text": "section 3.4.3 & section 3.4.4", "correct_text": "Add to end of section 3.4.3:\r\n\r\n   The sha1 value (in base64) for an empty body (canonicalized to a \"CRLF\") is \"uoq1oCgLlTqpdDX/iUbLy7J1Wic=\".\r\n   The sha256 value is \"frcCV1k9oG9oKj3dpUqdJg1PxRT2RSN/XKdLCPjaYaY=\".\r\n\r\nAdd to end of section 3.4.4:\r\n\r\n   The sha1 value (in base64) for an empty body (canonicalized to a null input) is \"2jmj7l5rSw0yVb/vlWAYkK/YBwk=\".\r\n   The sha256 value is \"47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=\".\r\n", "notes": "From the October 2008 interop event:\r\n\r\nEmpty message bodies\r\n\u2022\tthe \u201csimple\u201d body canonicalization says precisely what to do in the case of an empty message body\r\n\u2022\t\u201crelaxed\u201d does not\r\n\u2022\tConsensus is that the \u201crelaxed\u201d body canonicalization of the null body is the null input\r\n\u2022\tMajority felt it was conspicuous that \u201csimple\u201d was explicit while \u201crelaxed\u201d was not\r\n\u2022\tErrata: add clarification statement on expected values for relaxed", "submit_date": "2008-03-21", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1377", "doc-id": "RFC4871", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.4", "orig_text": "---", "correct_text": "Add a 4th bullet item to section 3.4.4:\r\n\r\no  If the body is non-empty, but does not end with a CRLF, a CRLF is \r\n   added.  (For email, this is only possible when using extensions to\r\n   SMTP or non-SMTP transport mechanisms.)", "notes": "From the October 2008 interop event:\r\n\r\nNo Trailing CR-LF\r\n*\tWhat if body is non-empty, but does not end in CRLF?\r\n*\tOnly possible with BDAT or non-SMTP transport mechanisms\r\n*\t\u201csimple\u201d (\u00a73.4.3) says to add a CRLF\r\n*\t\u201crelaxed\u201d (\u00a73.4.4) says nothing\r\n*\tConsensus is to add a CRLF for Relaxed if \r\n\u2013\tit was missing and \r\n\u2013\tthe body is not empty\r\n\u2013\tErrata: Add statement on what to do for Relaxed", "submit_date": "2008-03-21", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1378", "doc-id": "RFC4871", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "The rsa-sha256 algorithm is the default if no algorithm is specified. ", "correct_text": "(nothing)", "notes": "According to 3.5, including \"a=\" is REQUIRED, so the algorithm is \r\nalways specified, and there is no default.", "submit_date": "2008-03-21", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1409", "doc-id": "RFC4458", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "     target-param      =  \"target\" EQUAL pvalue\r\n\r\n     cause-param       =  \"cause\" EQUAL Status-Code", "correct_text": "     target-param      =  \"target=\" pvalue\r\n\r\n     cause-param       =  \"cause=\" Status-Code", "notes": "The definition was too permissive and conflicted with RFC 3261 ABNF (p. 223). Since this parameter is part of the other-param of uri-parameter, only a \"=\" (i.e, no linear whitespace allowed) and not EQUAL (which allows linear whitespace).", "submit_date": "2008-04-16", "submitter_name": "Francois AUDET", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1380", "doc-id": "RFC4871", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5", "orig_text": "       INFORMATIVE NOTE: The \"x=\" tag is not intended as an anti-replay\r\n           defense.\r\n", "correct_text": "       INFORMATIVE NOTE: The \"x=\" tag is not intended as an anti-replay\r\n           defense.\r\n       INFORMATIVE NOTE: Due to clock drift, the receiver\u2019s notion of \r\nwhen to consider the signature expired may not match exactly when the \r\nsender is expecting. Receiver\u2019s MAY add a 'fudge factor' to allow for \r\nsuch possible drift.\r\n", "notes": "From the October 2008 interop event:\r\n\r\nWhen does x= take effect?\r\n*\t\u00a73.5 says the \u201cx=\u201d value is an \u201cabsolute date\u201d\r\n*\tA receiver\u2019s notion of absolute time might not match the sender\u2019s notion of absolute time\r\n*\tThe document may not expire exactly when sender thinks it should\r\n*\tA receiving implementation has these choices:\r\n-\tTry to decide how far apart sender\u2019s notion of absolute time is from the receiver\u2019s notion of absolute time, based on header information\r\n-\tUse local knowledge of what the absolute time is\r\n-\tAdd in a \u201cfudge factor\u201d to acknowledge possible clock drift", "submit_date": "2008-03-21", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1381", "doc-id": "RFC4871", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5/3.6.1", "orig_text": "section 3.5:\r\n\r\n   q=  A colon-separated list of query methods used to retrieve the\r\n       public key ... Implementations MUST use the recognized query\r\n       mechanisms in the order presented.\r\n\r\nsection 3.6.1:\r\n\r\n   h=  Acceptable hash algorithms ... Signers and Verifiers MUST\r\n       support the \"sha256\" hash algorithm.  Verifiers MUST also support\r\n       the \"sha1\" hash algorithm.\r\n\r\n   k=  Key type ... (Note: the \"p=\" tag further encodes the value using the\r\n       base64 algorithm.)\r\n\r\n   s=  Service Type ... Verifiers for a given service type MUST ignore this \r\n       record if the appropriate type is not listed.  Currently defined \r\n       service types are as follows:\r\n\r\n   t=  Flags, represented as a colon-separated list of names (plain-\r\n       text; OPTIONAL, default is no flags set).  The defined flags are\r\n       as follows:", "correct_text": "section 3.5:\r\n\r\n   q=  A colon-separated list of query methods used to retrieve the\r\n       public key ...  Implementations MUST use the recognized query\r\n       mechanisms in the order presented. Unrecognized query mechanisms\r\n       MUST be ignored.\r\n\r\nsection 3.6.1:\r\n\r\n   h=  Acceptable hash algorithms ... Signers and Verifiers MUST\r\n       support the \"sha256\" hash algorithm.  Verifiers MUST also support\r\n       the \"sha1\" hash algorithm. Unrecognized hash algorithms MUST be \r\n       ignored.\r\n\r\n   k=  Key type ...(Note: the \"p=\" tag further encodes the value using the\r\n       base64 algorithm.) Unrecognized key types MUST be ignored.\r\n\r\n   s=  Service Type ... Verifiers for a given service type MUST ignore this \r\n       record if the appropriate type is not listed. Unrecognized service \r\n       types MUST be ignored. Currently defined service types are as follows:\r\n\r\n   t=  Flags, represented as a colon-separated list of names (plain-\r\n       text; OPTIONAL, default is no flags set).  Unrecognized flags MUST be \r\n       ignored. The defined flags are as follows:", "notes": "From the October 2008 interop event:\r\n\r\nInvalid q=, etc. values\r\n\r\n*\tq=foo/bar:dns/txt:exam/ple\r\n*\tNothing in text about unknown values\r\n*\tBut ABNF says unknown values are for \u201cfuture extension\u201d\r\n*\tConsensus: ignore unknown values\r\n*\tErrata: Add statement saying unknown values must be ignored in signature \u201cq=\u201d and key \u201ch=\u201d, \u201ck=\u201d, \u201cs=\u201d, \u201ct=\u201d", "submit_date": "2008-03-21", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2311", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.3.2", "orig_text": "   For all fields, the value is processed by first removing all CRLF\r\n   pairs (that is, undoing any folding and removing the terminating\r\n   CRLF) and then replacing each TAB with a single space.  If there is\r\n   no such header in the article, no such metadata item, or no header or\r\n   item stored in the database for that article, the corresponding field\r\n   MUST be empty.", "correct_text": "   For all fields, the value is processed by first removing all CRLF\r\n   pairs (that is, undoing any folding and removing the terminating\r\n   CRLF) and then replacing each TAB with a single space.  If there is\r\n   no such header in the article, no such metadata item, or no header or\r\n   item stored in the database for that article, the corresponding field\r\n   MUST be empty.  If a given header occurs in the article more than once,\r\n   only the content of the first occurrence is returned by OVER.", "notes": "The precision about using the first occurrence of a given header exists for the HDR command (Section 8.5.2).  The same thing should be done for OVER, out of consistency between the two commands.\r\n\r\nNote:  Maybe future versions of the protocol should consider the notion of concatenation of header fields.  (We could transform \"Comments: Line 1\\r\\nComments: Line 2\" into \"Comments: Line 1 Line 2\" in the overview field instead of losing information.)", "submit_date": "2010-06-24", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1411", "doc-id": "RFC4241", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "      [ ....mising text ... ]\r\n      IA_PD option and IA_PD Prefix options for the chosen prefix(es)\r\n      back to the PE.\r\n", "correct_text": "       ", "notes": "The 3rd paragraph of the indented, bulleted enumeration in\r\nSection 2.3 contains only a fragment of a sentence.\r\n\r\nThat unbulleted fragment seems to be left over from earlier editing,\r\nthe bullet before it says it all here.  Delete the fragment.", "submit_date": "2005-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1413", "doc-id": "RFC4763", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.6.1", "orig_text": "   The KDF is a keyed hash function with key \"Key\" and operating on\r\n   input \"Label | Msg\".  The convention followed herein is that\r\n   concatenation is denoted by |, FLOOR denotes the floor function, and\r\n   [x...y] denotes bytes x through y.", "correct_text": "   The KDF is a keyed hash function with key \"Key\" and operating on\r\n   input \"Label | Msg\".  The convention followed herein is that\r\n   concatenation is denoted by |, CEIL denotes the ceiling function,\r\n   and [x...y] denotes bytes x through y.", "notes": "The 'FLOOR' function is used where the 'CEILING' or 'CEIL' function is needed, to properly set the repetition count for partitioning a message into fixed-size blocks.  The same error occurs in the code block at the end of Section 3.2.6.1.\r\n\r\n", "submit_date": "2007-02-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1414", "doc-id": "RFC4763", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.1", "orig_text": "   Type\r\n\r\n      To be assigned\r\n\r\n  \r\n", "correct_text": "   Type\r\n\r\n     EAP-SAKE (=48)\r\n", "notes": "8) The explanation,\r\n\r\n   AT_ENCR_DATA\r\n\r\n      This attribute is optional to use in this message.  The encrypted\r\n      data, if present, may contain an attribute AT_NEXT_TMPID,\r\n      containing the NAI the Peer should use in the next EAP\r\n      authentication.\r\n\r\nshould say:\r\n\r\n|  AT_ENCR_DATA (=128)\r\n\r\n|     This attribute is optional to use in this message.  The cleartext\r\n|     form of the encrypted data, if present, may contain an attribute\r\n      AT_NEXT_TMPID, containing the NAI the Peer should use in the next\r\n      EAP authentication.\r\n\r\n\r\n(13)  Section 4 -- lack of specification\r\n\r\nThe first paragraph of Section 4 (on page 37) says:\r\n\r\n|  IANA allocated a new EAP Type for EAP-SAKE.\r\n                                ^\r\nIt should say:\r\n\r\n|  IANA allocated a new EAP Type, 48, for EAP-SAKE.\r\n                                ^^^^^^\r\n\r\n\r\n(15)  Section 8.1 -- outdated Normative Reference\r\n\r\nOn page 45, the ref. [SHA1] should better point to the current\r\nversion, \"FIPS 180-2 (with Change Notice)\", February 2004.", "submit_date": "2007-02-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1415", "doc-id": "RFC4763", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(3)  Section 3.2.8.2 -- clarification needed\r\n\r\nWithin Section 3.2.8.2, the second paragraph on page 20 says:\r\n\r\n   The default encryption algorithm, as described in Section 3.2.8.3,\r\n   requires the length of the plaintext to be a multiple of 16 bytes.\r\n   The sender MAY need to include the AT_PADDING attribute as the last\r\n|  attribute within the value field of the AT_ENCR_DATA attribute.  The\r\n   length of the padding is chosen so that the length of the value field\r\n   of the AT_ENCR_DATA attribute becomes a multiple of 16 bytes.  The\r\n   AT_PADDING attribute SHOULD NOT be included if the total length of\r\n   other attributes present within the AT_ENCR_DATA attribute is a\r\n   multiple of 16 bytes.  The length of the AT_PADDING attribute\r\n   includes the Attribute Type and Attribute Length fields.  The actual\r\n   pad bytes in the value field are set to zero (0x00) on sending.  The\r\n   recipient of the message MUST verify that the pad bytes are zero\r\n   after decryption and MUST silently discard the message otherwise.\r\n\r\nIt should say:\r\n\r\n   The default encryption algorithm, as described in Section 3.2.8.3,\r\n   requires the length of the plaintext to be a multiple of 16 bytes.\r\n   The sender MAY need to include the AT_PADDING attribute as the last\r\n|  attribute within the plaintext of the value field of the AT_ENCR_DATA\r\n   attribute.  The length of the padding is chosen so that the length of\r\n   the value field of the AT_ENCR_DATA attribute becomes a multiple of\r\n   16 bytes.  The AT_PADDING attribute SHOULD NOT be included if the\r\n   total length of other attributes present within the AT_ENCR_DATA\r\n   attribute is a multiple of 16 bytes.  The length of the AT_PADDING\r\n   attribute includes the Attribute Type and Attribute Length fields.\r\n   The actual pad bytes in the value field are set to zero (0x00) on\r\n   sending.  The recipient of the message MUST verify that the pad bytes\r\n   are zero after decryption and MUST silently discard the message\r\n   otherwise.\r\n\r\nNote:\r\nThe proper distinction between the plaintext and the ciphertext\r\nversion of fields that are encrypted in its on-the-wire form should be\r\nheavily emphasized; neglecting this distinction can lead to significant\r\ninteroperability problems and catastrophic cryptographic failures!\r\n\r\n(7)  Section 3.3.5 -- lack of specification, and artwork improvement\r\n\r\nAs above ...\r\n\r\nThe figure in Section 3.3.5, on page 28, contains the initial part:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Code      |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |Type=EAP-SAKE  |    Version=2  | Session ID    |   Subtype=1   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   AT_RAND_P    | Length = 18  |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                                                               |\r\n   |  ...\r\n\r\nIt should say:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Code=2     |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Type=EAP-SAKE |   Version=2   |  Session ID   |   Subtype=1   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   AT_RAND_P   |   Length=18   |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                                                               |\r\n   |  ...\r\n\r\nOn page 29, the explanation:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE=48\r\n\r\nAnd the subsequent explanation headlines:\r\n\r\n|  AT_RAND_P\r\n\r\n|  AT_PEERID\r\n\r\n|  AT_SPI_P\r\n\r\n|  AT_MIC_P\r\n\r\nshould be amended to say, respectively:\r\n\r\n|  AT_RAND_P (=2)\r\n\r\n|  AT_PEERID (=6)\r\n\r\n|  AT_SPI_P (=8)\r\n\r\n|  AT_MIC_P (=4)\r\n\r\n\r\n(13)  Section 4 -- lack of specification\r\n\r\nThe first paragraph of Section 4 (on page 37) says:\r\n\r\n|  IANA allocated a new EAP Type for EAP-SAKE.\r\n                                ^\r\nIt should say:\r\n\r\n|  IANA allocated a new EAP Type, 48, for EAP-SAKE.\r\n                                ^^^^^^\r\n\r\n(14)  Section 5.5 -- spelling and terminology\r\n\r\n'Server' and 'Peer' are distinguished roles of EAP entities.\r\nTherefore, when talking about both participants in an EAP session,\r\nthe term 'Peer' (in headline case) should not be used to avoid\r\nconfusion.\r\n\r\nTherefore, the last paragraph of Section 5.5, on page 40,\r\nthat says,\r\n\r\n     [...]  Thus, the recipient of an EAP message can be assured that\r\n|  the message it just received is the one just sent by the other Peer\r\n   and not a replay, since it contains a valid MIC of the recipient's\r\n|  nonce and the other Peer nonce.  As before, the extent of replay\r\n   protection is commensurate with the security of the KDF used to\r\n   derive the MIC, the length and entropy of the shared secret used by\r\n   the KDF, and the length of the MIC.\r\n\r\nshould better say:\r\n\r\n     [...]  Thus, the recipient of an EAP message can be assured that\r\n|  the message it just received is the one just sent by the other party\r\n   and not a replay, since it contains a valid MIC of the recipient's\r\n|  nonce and the other party's nonce.  As before, the extent of replay\r\n   protection is commensurate with the security of the KDF used to\r\n   derive the MIC, the length and entropy of the shared secret used by\r\n   the KDF, and the length of the MIC.\r\n\r\n\r\n(15)  Section 8.1 -- outdated Normative Reference\r\n\r\nOn page 45, the ref. [SHA1] should better point to the current\r\nversion, \"FIPS 180-2 (with Change Notice)\", February 2004.", "correct_text": "[not submitted]", "notes": "from pending\r\n --VERIFIER NOTES-- \r\n   Repeticious and unnecessary reports.", "submit_date": "2007-02-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Bob Braden", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1416", "doc-id": "RFC4763", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "The items below are presented in RFC textual order.\r\nI use change bars ('|' in column 1) and occasionally\r\nup/down pointing marker lines ('^^^'/'vvv') to emphasize\r\nthe location of textual issues and/or proposed corrections.\r\nModified text has been re-adjusted to match RFC formatting\r\nrules, where appropriate.\r\n\r\n\r\n(1)  Section 3.1 -- word omission\r\n\r\nThe first bullet in Section 3.1, on mid-page 4, says:\r\n                   v\r\n|  o It is based on well-established Bellare-Rogaway mutual\r\n     authentication protocol.\r\n\r\nIt should say:\r\n                   vvvvv\r\n|  o It is based on the well-established Bellare-Rogaway mutual\r\n     authentication protocol.\r\n\r\nBTW: Wouldn't that have deserved a proper reference ???\r\n\r\n\r\n(2)  Section 3.2.6.1 -- URGENT algorithmic correction\r\n\r\nUnfortunately, Section 3.2.6.1 contains a bad legacy mistake.\r\nLike a couple of related documents, it does not properly set\r\nthe repetition count needed for the partitioning of a message\r\ninto fixed-size blocks, by substituting the 'FLOOR' function\r\nwhere the 'CEILING' or 'CEIL' function would be needed.\r\n\r\nTo most easily see what's wrong, try substituting  Length := 16\r\n(hence, a single 20-octet HMAC-SHA1 result is needed to cover\r\nthe requested size), and observe the controlling loop:\r\n\r\n           for i := 0 to FLOOR(Length/20)-1 do\r\nbecomes:\r\n           for i := 0 to FLOOR(16/20)-1 do\r\nwhich is:\r\n           for i := 0 to 0-1 do\r\nor:\r\n           for i := 0 to -1 do\r\n\r\nand hence no H-SHA1 calls are ever performed.\r\n\r\nThe simple rule-of-thumb is:\r\n  - you need FLOOR if you want to fit fixed-size pieces into a bag;\r\n  - you need CEIL[ING] if you want to cover a bag with fixed-size pieces.\r\n\r\nThese are the changes to make the algorithm in Section 3.2.6.1 work\r\nas intended:\r\n\r\nIn the first paragraph on page 16, where the RFC says:\r\n\r\n   The KDF is a keyed hash function with key \"Key\" and operating on\r\n   input \"Label | Msg\".  The convention followed herein is that\r\n|  concatenation is denoted by |, FLOOR denotes the floor function, and\r\n   [x...y] denotes bytes x through y.\r\n\r\nit should say:\r\n\r\n   The KDF is a keyed hash function with key \"Key\" and operating on\r\n   input \"Label | Msg\".  The convention followed herein is that\r\n|  concatenation is denoted by |, CEIL denotes the ceiling function,\r\n   and [x...y] denotes bytes x through y.\r\n\r\nThe code block at the end of Section 3.2.6.1 :\r\n\r\n   KDF(Key, Label, Msg, Length)\r\n   R := []  ;; null string\r\n|  for i := 0 to FLOOR(Length/20)-1 do\r\n|  R := R | H-SHA1(Key, Label, Msg, i)\r\n   return R[0...(Length-1)]\r\n\r\nshould properly state:\r\n\r\n   KDF(Key, Label, Msg, Length)\r\n   R := []  ;; null string\r\n|  for i := 0 to CEIL(Length/20)-1 do\r\n|    R := R | H-SHA1(Key, Label, Msg, i)\r\n   return R[0...(Length-1)]\r\n\r\n[ Note: I also have indented the statement making up the body\r\n        of the loop to cleraly identify this property. ]\r\n\r\n\r\n(3)  Section 3.2.8.2 -- clarification needed\r\n\r\nWithin Section 3.2.8.2, the second paragraph on page 20 says:\r\n\r\n   The default encryption algorithm, as described in Section 3.2.8.3,\r\n   requires the length of the plaintext to be a multiple of 16 bytes.\r\n   The sender MAY need to include the AT_PADDING attribute as the last\r\n|  attribute within the value field of the AT_ENCR_DATA attribute.  The\r\n   length of the padding is chosen so that the length of the value field\r\n   of the AT_ENCR_DATA attribute becomes a multiple of 16 bytes.  The\r\n   AT_PADDING attribute SHOULD NOT be included if the total length of\r\n   other attributes present within the AT_ENCR_DATA attribute is a\r\n   multiple of 16 bytes.  The length of the AT_PADDING attribute\r\n   includes the Attribute Type and Attribute Length fields.  The actual\r\n   pad bytes in the value field are set to zero (0x00) on sending.  The\r\n   recipient of the message MUST verify that the pad bytes are zero\r\n   after decryption and MUST silently discard the message otherwise.\r\n\r\nIt should say:\r\n\r\n   The default encryption algorithm, as described in Section 3.2.8.3,\r\n   requires the length of the plaintext to be a multiple of 16 bytes.\r\n   The sender MAY need to include the AT_PADDING attribute as the last\r\n|  attribute within the plaintext of the value field of the AT_ENCR_DATA\r\n   attribute.  The length of the padding is chosen so that the length of\r\n   the value field of the AT_ENCR_DATA attribute becomes a multiple of\r\n   16 bytes.  The AT_PADDING attribute SHOULD NOT be included if the\r\n   total length of other attributes present within the AT_ENCR_DATA\r\n   attribute is a multiple of 16 bytes.  The length of the AT_PADDING\r\n   attribute includes the Attribute Type and Attribute Length fields.\r\n   The actual pad bytes in the value field are set to zero (0x00) on\r\n   sending.  The recipient of the message MUST verify that the pad bytes\r\n   are zero after decryption and MUST silently discard the message\r\n   otherwise.\r\n\r\nNote:\r\nThe proper distinction between the plaintext and the ciphertext\r\nversion of fields that are encrypted in its on-the-wire form should be\r\nheavily emphasized; neglecting this distinction can lead to significant\r\ninteroperability problems and catastrophic cryptographic failures!\r\n\r\n\r\n(4)  Section 3.3.1 -- lack of specification, and a word omission\r\n\r\nUnfortunately, the RFC has not been cleaned up after IANA allocation\r\nand remains unspecific und indeterminate on the protocol constant\r\n(EAP method type)  EAP-SAKE (=48).\r\n\r\nIn Section 3.3.1, the explanation:\r\n\r\n   Type\r\n\r\n      To be assigned.\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE (=48)\r\n\r\n\r\nAt the end of Section 3.3.1, the explanation:\r\n\r\n   Subtype\r\n\r\n      EAP-SAKE subtype: SAKE/Challenge, SAKE/Confirm, SAKE/Auth-Reject,\r\n      and SAKE/Identity.  All messages of type \"EAP-SAKE\" that are not\r\n|     of these subtypes MUST silently discarded.\r\n      [...]                          ^\r\n\r\nshould say:\r\n\r\n   Subtype\r\n\r\n      EAP-SAKE subtype: SAKE/Challenge, SAKE/Confirm, SAKE/Auth-Reject,\r\n      and SAKE/Identity.  All messages of type \"EAP-SAKE\" that are not\r\n|     of these subtypes MUST silently be discarded.\r\n      [...]                          ^^^^\r\n\r\n\r\n(5)  Section 3.3.2 -- format, and incomplete specification\r\n\r\nThe inadvertent blank line near the end of the table on page 24\r\nhas no functional meaning and hence should be deleted.\r\n\r\nAt the end of the section, below the table, add the sentence:\r\n\r\n   The attribute type values assigned by this specification (and\r\n   registered by the IANA) are listed in section 4.\r\n\r\nNote:\r\n  Below, I have chosen to supply the missing values explicitely,\r\n  rather than proposinf to repeatedly add similar pointers to Sct. 4.\r\n  This seems to better serve the needs of the reader and hopefully\r\n  will aid the implementer as well.\r\n\r\n\r\n(6)  Section 3.3.3 -- lack of specification, and artwork improvement\r\n\r\nFor uniformity, *all* constant values should be made visible in\r\nthe message format diagrams.\r\nThe rationale of item (4) above applies as well.\r\n\r\nThe figure in Section 3.3.4, on page 26, contains the initial part:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     Code      |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |Type=EAP-SAKE  |    Version=2  | Session ID    |   Subtype=1   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |   AT_RAND_S    | Length = 18  |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                                                               |\r\n   |    ...\r\n\r\nIt should say:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |    Code=1     |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  | Type=EAP-SAKE |   Version=2   |  Session ID   |   Subtype=1   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |   AT_RAND_S   |   Length=18   |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                                                               |\r\n   |    ...\r\n\r\nThe explanation:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE (=48)\r\n\r\nAt the end of the section, on page 27, the explanations:\r\n\r\n|  AT_RAND_S\r\n\r\n      The value field of this attribute contains the Server nonce RAND_S\r\n      parameter.  The RAND_S attribute MUST be present in\r\n      EAP.Request/SAKE/Challenge.\r\n\r\n|  AT_SERVERID\r\n\r\n      The value field of this attribute contains the Server identifier\r\n      (e.g., a non-null terminated string).  The AT_SERVERID attribute\r\n      SHOULD be present in EAP.Request/SAKE Challenge.\r\n\r\nshould say:\r\n\r\n|  AT_RAND_S (=1)\r\n\r\n      The value field of this attribute contains the Server nonce RAND_S\r\n      parameter.  The RAND_S attribute MUST be present in\r\n      EAP.Request/SAKE/Challenge.\r\n\r\n|  AT_SERVERID (=5)\r\n\r\n      The value field of this attribute contains the Server identifier\r\n      (e.g., a non-null terminated string).  The AT_SERVERID attribute\r\n      SHOULD be present in EAP.Request/SAKE Challenge.\r\n\r\n\r\n(7)  Section 3.3.5 -- lack of specification, and artwork improvement\r\n\r\nAs above ...\r\n\r\nThe figure in Section 3.3.5, on page 28, contains the initial part:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Code      |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |Type=EAP-SAKE  |    Version=2  | Session ID    |   Subtype=1   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   AT_RAND_P    | Length = 18  |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                                                               |\r\n   |  ...\r\n\r\nIt should say:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Code=2     |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Type=EAP-SAKE |   Version=2   |  Session ID   |   Subtype=1   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   AT_RAND_P   |   Length=18   |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                                                               |\r\n   |  ...\r\n\r\nOn page 29, the explanation:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE=48\r\n\r\nAnd the subsequent explanation headlines:\r\n\r\n|  AT_RAND_P\r\n\r\n|  AT_PEERID\r\n\r\n|  AT_SPI_P\r\n\r\n|  AT_MIC_P\r\n\r\nshould be amended to say, respectively:\r\n\r\n|  AT_RAND_P (=2)\r\n\r\n|  AT_PEERID (=6)\r\n\r\n|  AT_SPI_P (=8)\r\n\r\n|  AT_MIC_P (=4)\r\n\r\n\r\n(8)  Section 3.3.6 -- lack of specification, and artwork improvement\r\n\r\nAs above ...\r\nAlso, a spurious separator line in the diagram should be deleted.\r\n\r\nThe figure in Section 3.3.6, on page 30, contains the initial part:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     Code      |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |Type=EAP-SAKE  |    Version=2  | Session ID    |   Subtype=2   |\r\n|  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   AT_SPI_S    | Length        |        SPI_S                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   AT_IV       | Length        |   Initialization Vector ...   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               :\r\n   |   ...\r\n\r\nIt should say:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |    Code=1     |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  | Type=EAP-SAKE |   Version=2   |  Session ID   |   Subtype=2   |\r\n|  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   AT_SPI_S    | Length        |        SPI_S                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   AT_IV       | Length        |   Initialization Vector ...   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               :\r\n   |   ...\r\n\r\nOn page 31, the explanation:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE=48\r\n\r\nThe subsequent explanation headlines:\r\n\r\n|  AT_SPI_S\r\n\r\n|  AT_IV\r\n\r\n|  AT_MSK_LIFE\r\n\r\n|  AT_MIC_S\r\n\r\nshould be amended to say, respectively:\r\n\r\n|  AT_SPI_S (=7)\r\n\r\n|  AT_IV (=129)\r\n\r\n|  AT_MSK_LIFE (=132)\r\n\r\n|  AT_MIC_S (=3)\r\n\r\nFinally, the explanation,\r\n\r\n   AT_ENCR_DATA\r\n\r\n      This attribute is optional to use in this message.  The encrypted\r\n      data, if present, may contain an attribute AT_NEXT_TMPID,\r\n      containing the NAI the Peer should use in the next EAP\r\n      authentication.\r\n\r\nshould say:\r\n\r\n|  AT_ENCR_DATA (=128)\r\n\r\n|     This attribute is optional to use in this message.  The cleartext\r\n|     form of the encrypted data, if present, may contain an attribute\r\n      AT_NEXT_TMPID, containing the NAI the Peer should use in the next\r\n      EAP authentication.\r\n\r\n\r\n(9)  Section 3.3.7 -- lack of specification, and artwork improvement\r\n\r\nAs above ...\r\n\r\nThe figure in Section 3.3.7, on page 32, contains the initial part:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     Code      |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |Type=EAP-SAKE  |    Version=2  | Session ID    |   Subtype=2   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |   AT_MIC_P     | Length = 18  |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                       MIC_P                                   |\r\n   |  ...\r\n\r\nIt should say:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |    Code=2     |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  | Type=EAP-SAKE |   Version=2   |  Session ID   |   Subtype=2   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |   AT_MIC_P    |   Length=18   |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                       MIC_P                                   |\r\n   |  ...\r\n\r\nThe explanation:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE (=48)\r\n\r\nAnd on page 33, the explanation headlines:\r\n\r\n|  AT_MIC_P\r\n\r\n|  AT_PADDING\r\n\r\nshould be amended to say, respectively:\r\n\r\n|  AT_MIC_P (=4)\r\n\r\n|  AT_PADDING (=130)\r\n\r\n\r\n(10)  Section 3.3.8 -- lack of specification, and artwork improvement\r\n\r\nAs above ...\r\n\r\nThe figure in Section 3.3.8, on page 33, says:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     Code      |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |Type=EAP-SAKE  |    Version=2  | Session ID    |   Subtype=3   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nIt should say:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |    Code=2     |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  | Type=EAP-SAKE |   Version=2   |  Session ID   |   Subtype=3   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nThe explanation:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE (=48)\r\n\r\n\r\n(11)  Section 3.3.9 -- lack of specification, and artwork improvement\r\n\r\nAs above ...\r\n\r\nThe figure in Section 3.3.9, on page 34, contains the initial part:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     Code      |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |Type=EAP-SAKE  |    Version=2  | Session ID    |   Subtype=4   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nIt should say:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |    Code=1     |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  | Type=EAP-SAKE |   Version=2   |  Session ID   |   Subtype=4   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nOn page 35, the explanation:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE=48\r\n\r\nThe subsequent explanation headlines:\r\n\r\n|  AT_PERM_ID_REQ\r\n\r\n|  AT_ANY_ID_REQ\r\n\r\n|  AT_SERVERID\r\n\r\nshould be amended to say, respectively:\r\n\r\n|  AT_PERM_ID_REQ (=10)\r\n\r\n|  AT_ANY_ID_REQ (=9)\r\n\r\n|  AT_SERVERID (=5)\r\n\r\n\r\n(12)  Section 3.3.10 -- lack of specification, and artwork improvement\r\n\r\nAs above ...\r\n\r\nThe figure in Section 3.3.10, on page 36, contains the initial part:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     Code      |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |Type=EAP-SAKE  |    Version=2  | Session ID    |   Subtype=4   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nIt should say:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |    Code=2     |  Identifier   |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  | Type=EAP-SAKE |   Version=2   |  Session ID   |   Subtype=4   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nThe explanation:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE\r\n\r\nshould say:\r\n\r\n   Type\r\n\r\n|     EAP-SAKE (=48)\r\n\r\nAnd on page 37, the explanation headline:\r\n\r\n   AT_PEERID\r\n\r\nshould be amended to say:\r\n\r\n   AT_PEERID (=6)\r\n\r\n\r\n(13)  Section 4 -- lack of specification\r\n\r\nThe first paragraph of Section 4 (on page 37) says:\r\n\r\n|  IANA allocated a new EAP Type for EAP-SAKE.\r\n                                ^\r\nIt should say:\r\n\r\n|  IANA allocated a new EAP Type, 48, for EAP-SAKE.\r\n                                ^^^^^^\r\n\r\n(14)  Section 5.5 -- spelling and terminology\r\n\r\n'Server' and 'Peer' are distinguished roles of EAP entities.\r\nTherefore, when talking about both participants in an EAP session,\r\nthe term 'Peer' (in headline case) should not be used to avoid\r\nconfusion.\r\n\r\nTherefore, the last paragraph of Section 5.5, on page 40,\r\nthat says,\r\n\r\n     [...]  Thus, the recipient of an EAP message can be assured that\r\n|  the message it just received is the one just sent by the other Peer\r\n   and not a replay, since it contains a valid MIC of the recipient's\r\n|  nonce and the other Peer nonce.  As before, the extent of replay\r\n   protection is commensurate with the security of the KDF used to\r\n   derive the MIC, the length and entropy of the shared secret used by\r\n   the KDF, and the length of the MIC.\r\n\r\nshould better say:\r\n\r\n     [...]  Thus, the recipient of an EAP message can be assured that\r\n|  the message it just received is the one just sent by the other party\r\n   and not a replay, since it contains a valid MIC of the recipient's\r\n|  nonce and the other party's nonce.  As before, the extent of replay\r\n   protection is commensurate with the security of the KDF used to\r\n   derive the MIC, the length and entropy of the shared secret used by\r\n   the KDF, and the length of the MIC.\r\n\r\n\r\n(15)  Section 8.1 -- outdated Normative Reference\r\n\r\nOn page 45, the ref. [SHA1] should better point to the current\r\nversion, \"FIPS 180-2 (with Change Notice)\", February 2004.", "correct_text": "[not submitted]", "notes": "from pending", "submit_date": "2007-02-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1382", "doc-id": "RFC4871", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "   s=  Service Type (plain-text; OPTIONAL; default is \"*\").  A colon-\r\n       separated list of service types to which this record applies.\r\n       Verifiers for a given service type MUST ignore this record if the\r\n       appropriate type is not listed.  Currently defined service types\r\n       are as follows:\r\n\r\n       *   matches all service types\r\n\r\n       email   electronic mail (not necessarily limited to SMTP)\r\n\r\n       This tag is intended to constrain the use of keys for other\r\n       purposes, should use of DKIM be defined by other services in the\r\n       future.\r\n", "correct_text": "   s=  Service Type (plain-text; OPTIONAL; default is \"*\").  A colon-\r\n       separated list of service types to which this record applies.\r\n       Verifiers for a given service type MUST ignore this record if the\r\n       appropriate type is not listed.  Currently defined service types\r\n       are as follows:\r\n\r\n       *   matches all service types\r\n\r\n       email   electronic mail (not necessarily limited to SMTP)\r\n\r\n       Unrecognized service types MUST be ignored.\r\n\r\n       This tag is intended to constrain the use of keys for other\r\n       purposes, should use of DKIM be defined by other services in the\r\n       future.\r\n", "notes": "From the October 2008 interop event:\r\n\r\nDNS Key Interoperability Issues: \u201cs=\u201d in key records\r\n\r\n*\t\u00a73.6.1 doesn't say what to do if one of the colon-separated words is a word not enumerated in the \u201ccurrently defined service types\u201d\r\ns=foo:email:bar\r\n*\tNo explicit guidance about what to do with clearly bogus values, e.g.\r\ns=*:email\r\n*\tConsensus is to ignore any colon-separated value not recognized and only pay attention to \u201c*\u201d and \u201cemail\u201d for DKIM e-mail implementations", "submit_date": "2008-03-21", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1383", "doc-id": "RFC4871", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6.1", "orig_text": "   g=  Granularity of the key (plain-text; OPTIONAL, default is \"*\").\r\n       ....  Wildcarding allows matching for addresses such as\r\n       \"user+*\" or \"*-offer\".  An empty \"g=\" value never matches any\r\n       addresses.\r\n", "correct_text": "   g=  Granularity of the key (plain-text; OPTIONAL, default is \"*\").\r\n       ....  Wildcarding allows matching for addresses such as\r\n       \"user+*\", \"*-offer\", or \"foo*bar\". An empty \"g=\" value never \r\n       matches any addresses.\r\n", "notes": "The ABNF allows \"*\" in the middle (but only one), and this should\r\nbe shown in the examples, too.", "submit_date": "2008-03-21", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1384", "doc-id": "RFC4871", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.4", "orig_text": "   The \"relaxed\" body canonicalization algorithm:\r\n\r\n   o  Ignores all whitespace at the end of lines.  Implementations MUST\r\n      NOT remove the CRLF at the end of the line.\r\n\r\n   o  Reduces all sequences of WSP within a line to a single SP\r\n      character.\r\n\r\n   o  Ignores all empty lines at the end of the message body.  \"Empty\r\n      line\" is defined in Section 3.4.3.\r\n\r\n", "correct_text": "   The \"relaxed\" body canonicalization algorithm MUST apply the\r\n   following steps (a) and (b) in order:\r\n\r\n   a) Reduce whitespace:\r\n      *  Ignore all whitespace at the end of lines.  Implementations MUST\r\n         NOT remove the CRLF at the end of the line.\r\n\r\n      *  Reduce all sequences of WSP within a line to a single SP\r\n         character.\r\n\r\n   b)  Ignore all empty lines at the end of the message body.  \"Empty\r\n      line\" is defined in Section 3.4.3.\r\n\r\n", "notes": "This was discussed on the dkim interop mailing list.\r\n\r\nYou can wind up with different results depending on whether steps 1 and 3 are executed in that order or swapped around. Half of the implementations were found to do it one way and another half the other way.\r\n\r\nIt was decided that the same text applied to section 4.3.2\r\n\r\n   The \"relaxed\" header canonicalization algorithm MUST apply the\r\n   following steps in order:\r\n\r\nshould be used in 4.3.4 as well, that is\r\n\r\n   The \"relaxed\" body canonicalization algorithm MUST apply the\r\n   following steps in order:\r\n\r\nBut since steps 1&2 can still be done in either order, make those sub-bullets of step 1.\r\n\r\nJust to be totally clear, following this decision we would wind up with this sequence.\r\n\r\nGiven this input:\r\n\r\ntesting<cr><lf>\r\n<sp><sp><cr><lf>\r\n<cr><lf>\r\n\r\n   a) Reduce whitespace:\r\n      *  Ignore all whitespace at the end of lines.  Implementations MUST\r\n         NOT remove the CRLF at the end of the line.\r\n\r\ntesting<cr><lf>\r\n<cr><lf>\r\n<cr><lf>\r\n\r\n      *  Reduce all sequences of WSP within a line to a single SP\r\n         character.\r\n\r\ntesting<cr><lf>\r\n<cr><lf>\r\n<cr><lf>\r\n\r\n   b)  Ignore all empty lines at the end of the message body.  \"Empty\r\n      line\" is defined in Section 3.4.3.\r\n\r\ntesting<cr><lf>\r\n\r\nIf the two steps in (a) are performed in the opposite order, \r\n\r\ntesting<cr><lf>\r\n<sp><sp><cr><lf>\r\n<cr><lf>\r\n\r\n   a) Reduce whitespace:\r\n      *  Reduce all sequences of WSP within a line to a single SP\r\n         character.\r\n\r\ntesting<cr><lf>\r\n<sp><cr><lf>\r\n<cr><lf>\r\n\r\n      *  Ignore all whitespace at the end of lines.  Implementations MUST\r\n         NOT remove the CRLF at the end of the line.\r\n\r\ntesting<cr><lf>\r\n<cr><lf>\r\n<cr><lf>\r\n\r\n   b)  Ignore all empty lines at the end of the message body.  \"Empty\r\n      line\" is defined in Section 3.4.3.\r\n\r\ntesting<cr><lf>", "submit_date": "2008-03-22", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1385", "doc-id": "RFC4871", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "It is expected that many key servers will choose to present the keys in an\r\notherwise unstructured text format (for example, an XML form would not be\r\nconsidered to be unstructured text for this purpose).  The following definition\r\nMUST be used for any DKIM key represented in an otherwise unstructured textual\r\nform.\r\n", "correct_text": "It is expected that many key servers will choose to present the keys in an\r\notherwise unstructured text format (for example, an XML form would not be\r\nconsidered to be unstructured text for this purpose).  The following definition\r\nMUST be used for any DKIM key represented in an otherwise unstructured textual\r\nform.\r\n\r\nThe TXT RDATA format is described in section 3.3.14 of RFC1035.  If the retrieved\r\nTXT record consists of more than one \"character-string\" (as defined in that\r\ndocument), the RDATA MUST be preprocessed by concatenating all of the\r\n\"character-string\"s together in the order in which they appeared in the RDATA\r\nbefore being interpreted as described below.", "notes": "No guidance is provided about how to handle a single TXT RDATA which is subdivided into multiple character-strings, such as an encoded public key that is too large to fit in such a construct (which is limited by RFC1035 to be each 255 characters or less).\n --VERIFIER NOTES-- \nSection 3.6.2.2 already specifies the necessary details.", "submit_date": "2008-03-23", "submitter_name": "Murray S. Kucherawy", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1386", "doc-id": "RFC4871", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5", "orig_text": "DKIM-Signature: a=rsa-sha256; d=example.net; s=brisbane;", "correct_text": "DKIM-Signature: v=1; a=rsa-sha256; d=example.net; s=brisbane;", "notes": "The example is missing the v= tag which MUST be included.", "submit_date": "2008-03-24", "submitter_name": "Mark Delany", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1387", "doc-id": "RFC2157", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "ESC 21 41", "correct_text": "ESC 22 43", "notes": "ESC 21 41 invokes ISO-IR 7, an unrelated C0 set.\r\nESC 22 43 invokes ISO-IR 77, the C1 set of an old ISO 6429.\r\n\r\nFor details see <http://www.itscj.ipsj.or.jp/ISO-IR/2-5.htm>\r\n(C0 sets) and <http://www.itscj.ipsj.or.jp/ISO-IR/2-6.htm> (C1).", "submit_date": "2008-03-25", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1611", "doc-id": "RFC5381", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1,pg.15", "orig_text": "<<  example on mid-page 15 >>\r\n\r\n   C:\\NetconfServer>java -classpath .;%AXIS_HOME%\\lib\\axis.jar;%\r\n   AXIS_HOME%\\lib\\jaxrpc.jar;%AXIS_HOME%\\lib\\saaj.jar;%AXIS_HOME%\r\n   \\lib\\commons-logging-1.0.4.jar;%AXIS_HOME%\\lib\\commons-discovery-\r\n|  0.2.jar org.apache.axis.client.AdminClient -p 832 depoy.wsdd\r\n                                                     ^^^^^", "correct_text": "   C:\\NetconfServer>java -classpath .;%AXIS_HOME%\\lib\\axis.jar;%\r\n   AXIS_HOME%\\lib\\jaxrpc.jar;%AXIS_HOME%\\lib\\saaj.jar;%AXIS_HOME%\r\n   \\lib\\commons-logging-1.0.4.jar;%AXIS_HOME%\\lib\\commons-discovery-\r\n|  0.2.jar org.apache.axis.client.AdminClient -p 832 deploy.wsdd\r\n                                                     ^^^^^^", "notes": "Rationale:\r\n  Mismatch between example and explaining text; typo?\r\n  s/depoy/deploy/", "submit_date": "2008-11-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1388", "doc-id": "RFC5216", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1.1,pg.5", "orig_text": "   The certificate message contains a public key certificate chain for\r\n   either a key exchange public key (such as an RSA or Diffie-Hellman\r\n   key exchange public key) or a signature public key (such as an RSA or\r\n|  Digital Signature Standard (DSS) signature public key).  In the\r\n   latter case, a TLS server_key_exchange handshake message MUST also be\r\n   included to allow the key exchange to take place.\r\n", "correct_text": "   The certificate message contains a public key certificate chain for\r\n   either a key exchange public key (such as an RSA or Diffie-Hellman\r\n   key exchange public key) or a signature public key (such as an RSA or\r\n|  Digital Signature Algorithm (DSA) signature public key).  In the\r\n                     ^^^^^^^^^    ^\r\n   latter case, a TLS server_key_exchange handshake message MUST also be\r\n   included to allow the key exchange to take place.\r\n", "notes": "Location is the 6th paragraph of Section 2.1.1.\r\n(Please note that the first paragraph of that section is\r\ninadvertently split into two parts by a spurious blank line\r\nthat has been ignored for the purpose of paragraph numbering.)\r\n\r\nRationale:\r\nThere's no such thing like a DSS signature public key.\r\nKeys have to match the mathematical algorithms, and only\r\nindirectly the standrds documents.\r\nThe Digital Signature Standard (DSS) supports three different\r\nkinds of signature algorithms: (classical) DSA, ECDSA (the DSA\r\nvariant based on Elliptic Curve Cryptography), and RSA.\r\nAll three algorithms require different keys, based on the\r\nmathematical properties and the related presentation forms.\r\n\r\nOther parts of the document, in particular Section 5.1 already\r\nuse the proper terminology to distinguish between algorithm and\r\nstandards document.", "submit_date": "2008-03-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1389", "doc-id": "RFC5216", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.3", "orig_text": "   If the peer's authentication is unsuccessful, the EAP server SHOULD\r\n   send an EAP-Request packet with EAP-Type=EAP-TLS, encapsulating a TLS\r\n   record containing the appropriate TLS alert message.  The EAP server\r\n|  SHOULD send a TLS alert message immediately terminating the\r\n   conversation so as to allow the peer to inform the user or log the\r\n   cause of the failure and possibly allow for a restart of the\r\n   conversation.\r\n", "correct_text": "   If the peer's authentication is unsuccessful, the EAP server SHOULD\r\n   send an EAP-Request packet with EAP-Type=EAP-TLS, encapsulating a TLS\r\n   record containing the appropriate TLS alert message.  The EAP server\r\n|  SHOULD send a TLS alert message rather than immediately terminating\r\n                                   ^^^^^^^^^^^^\r\n   the conversation so as to allow the peer to inform the user or log\r\n   the cause of the failure and possibly allow for a restart of the\r\n   conversation.\r\n", "notes": "The double word omission totally distorts the proper sense\r\nof the sentence.  The 4th paragraph of this section describes\r\nthe converse scenarion, and it does it properly; the wording\r\nfrom there has been adopted above.\r\n\r\nNote that RFC 2716 already had dropped the word \"than\" making it\r\ndifficult to understand.  Additionally dropping \"rather\" as well in\r\nRFC 5216 fully distorts the intended sense and leads to confusion.\r\n\r\n[Confirmed by Bernard Aboba and Ryan Hurst]", "submit_date": "2008-03-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1612", "doc-id": "RFC5348", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4, pg.9", "orig_text": "<< 5th bullet >>\r\n\r\n   o   Oscillation prevention (optional).", "correct_text": "   o   Oscillation reduction (optional).\r\n                   ^^^^^^^^^", "notes": "Rationale:\r\n Consistency in change of emphasis (since RFC 3448),\r\n cf. new title of Section 4.5 !", "submit_date": "2008-11-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1613", "doc-id": "RFC5348", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4, pg.15", "orig_text": "<< 1st paragraph in Section 4.4 >>\r\n\r\n|  This section specifies the sender's response to a nofeedback timer.\r\n   The nofeedback timer could expire because of an idle period or\r\n   because of data or feedback packets dropped in the network.", "correct_text": "                                                                vvvvvvv\r\n|  This section specifies the sender's response to a nofeedback timeout.\r\n   The nofeedback timer could expire because of an idle period or\r\n   because of data or feedback packets dropped in the network.", "notes": "", "submit_date": "2008-11-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1614", "doc-id": "RFC5348", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6, pg. 19", "orig_text": "<<  last paragraph of Section 4.6 >>\r\n\r\n   For TFRC senders allowed to accumulate sending credits for unused\r\n   send time over the last T seconds, the sender would be allowed to use\r\n|  unused nominal send times t_j for t_j < now - T, for T set to the\r\n   round-trip time.\r\n                                          ^^^^", "correct_text": "   For TFRC senders allowed to accumulate sending credits for unused\r\n   send time over the last T seconds, the sender would be allowed to use\r\n|  unused nominal send times t_j for t_j < t_now - T, for T set to the\r\n   round-trip time.\r\n                                          ^^^^^^", "notes": "Rationale:\r\n  Consistent use of variable names.", "submit_date": "2008-11-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1615", "doc-id": "RFC5348", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2, pg.28", "orig_text": "   2)  Calculate the measured receive rate, X_recv, based on the packets\r\n       received within the previous R_(m-1) seconds.  This is performed\r\n       whether the feedback timer expired at its normal time or expired\r\n|      early due to a new lost or marked packet (i.e., step (3) in\r\n       Section 6.1).\r\n                                                             ^", "correct_text": "   2)  Calculate the measured receive rate, X_recv, based on the packets\r\n       received within the previous R_(m-1) seconds.  This is performed\r\n       whether the feedback timer expired at its normal time or expired\r\n|      early due to a new lost or marked packet (i.e., step (4) in\r\n       Section 6.1).\r\n                                                             ^", "notes": "Rationale:\r\n  The steps in 6.1 have been renumbered since RFC 3448, due to\r\n  the insertion of a new step (2); this change apparently has \r\n  been missed here.", "submit_date": "2008-11-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7736", "doc-id": "RFC9085", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.5", "orig_text": "   A Prefix NLRI, that has been advertised with a Range TLV, is\r\n   considered a normal routing prefix (i.e., prefix reachability) only\r\n   when there is also an IGP metric TLV (TLV 1095) associated it.\r\n   Otherwise, it is considered only as the first prefix in the range for\r\n   prefix-to-SID mapping advertisement.", "correct_text": "   A Prefix NLRI, that has been advertised with a Range TLV, is\r\n   considered a normal routing prefix (i.e., prefix reachability) only\r\n   when there is also a Prefix Metric TLV (TLV 1155) associated with it.\r\n   Otherwise, it is considered only as the first prefix in the range for\r\n   prefix-to-SID mapping advertisement.", "notes": "The current text is referring to the wrong BGP-LS TLV. Since the Range TLV is associated with a Prefix NLRI, the \"Prefix Metric TLV (TLV 1155)\" should be referenced here since the \"IGP metric TLV (TLV 1095)\" is associated with a Link NLRI.\r\n\r\nVerifier note: in addition to the fix proposed by Ketan, I added a preposition: \"associated with it\", and corrected an indefinite article: \"a Prefix\".", "submit_date": "2023-12-20", "submitter_name": "Ketan Talaulikar", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-16 18:09:53"}, {"errata_id": "1390", "doc-id": "RFC5216", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.3,pg.10", "orig_text": "                           <- EAP-Request/\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS server_hello,\r\n                             TLS certificate,\r\n                    [TLS server_key_exchange,]\r\n               TLS certificate_request,\r\n                 TLS server_hello_done)\r\n\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS\r\n   (TLS certificate,\r\n    TLS client_key_exchange,\r\n    TLS certificate_verify,\r\n    TLS change_cipher_spec,\r\n    TLS finished) ->\r\n", "correct_text": "                           <- EAP-Request/\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS server_hello,\r\n|                           TLS certificate,\r\n|                           [TLS server_key_exchange,]\r\n|                           TLS certificate_request,\r\n|                           TLS server_hello_done)\r\n\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS\r\n   (TLS certificate,\r\n    TLS client_key_exchange,\r\n    TLS certificate_verify,\r\n    TLS change_cipher_spec,\r\n    TLS finished) ->\r\n", "notes": "Rationale:\r\n\r\nThe columnar alignment of many parts of the examples\r\npresented in Section 2.1.3 - 2.1.5 is distorted, for\r\nmultiple messages sent by the Authenticator\r\n(denoted A-msg below, for brevity).\r\n\r\nThe example above is the 3rd A-msg on page 10.\r\n\r\nAdditional occurrences of this issue are:\r\n\r\n-  Section 2.1.3, last part, mid-page 11, third A-msg,\r\n-  Section 2.1.4, first, second and third A-msg on page 13,\r\n-  Section 2.1.5, second and third A-msg on page 15,\r\n   and second A-msg on page 16.", "submit_date": "2008-03-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1391", "doc-id": "RFC5216", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3,pg.17", "orig_text": "   master_secret = TLS-PRF-48(pre_master_secret, \"master secret\",\r\n|                   client.random || server.random) key_block     =\r\n|  TLS-PRF-X(master_secret, \"key expansion\",\r\n                    server.random || client.random)\r\n", "correct_text": "   master_secret = TLS-PRF-48(pre_master_secret, \"master secret\",\r\n|                   client.random || server.random)\r\n|  key_block     = TLS-PRF-X(master_secret, \"key expansion\",\r\n                    server.random || client.random)\r\n", "notes": "Wrong line break makes formula presentation confusing.\r\n\r\n(This flaw has been introduced in a last-minute change\r\n before publication!)", "submit_date": "2008-03-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2312", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.5.2", "orig_text": "   If the information is available, it is returned as a multi-line data\r\n   block following the 225 response code and contains one line for each\r\n   article in the range that exists.", "correct_text": "   If the information is available, it is returned as a multi-line data\r\n   block following the 225 response code and contains one line for each\r\n   article in the range that exists, sorted in numerical order of article\r\n   number.", "notes": "The precision about using a numerical order exists for the OVER command (Section 8.3.2).  The same thing should be done for HDR, out of consistency between the two commands.", "submit_date": "2010-06-24", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1621", "doc-id": "RFC4462", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "   In order for the \"external-keyx\" user authentication method to be\r\n   used, it MUST have access to user authentication information obtained\r\n   as a side-effect of the key exchange.  If this information is\r\n   unavailable, the authentication MUST fail.", "correct_text": "   In order for the \"gssapi-keyex\" user authentication method to be\r\n   used, it MUST have access to user authentication information obtained\r\n   as a side-effect of the key exchange.  If this information is\r\n   unavailable, the authentication MUST fail.", "notes": "As mentioned in section 8, the \"external-keyx\" name was used by an earlier version of thespec, but got replaced by \"gssapi-keyex\" before publication.", "submit_date": "2008-11-25", "submitter_name": "Ben Harris", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1622", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.2", "orig_text": "ISEG Chair", "correct_text": "IESG Chair\r\n", "notes": "", "submit_date": "2008-12-01", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1623", "doc-id": "RFC4282", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   realm       =  1*( label \".\" ) label", "correct_text": "   realm       =  *( label \".\" ) label", "notes": "The ABNF for realm forces the inclusion of two labels, which is not consistent with RFC 1034, which allows just one:\r\n  <subdomain> ::= <label> | <subdomain> \".\" <label>\n --VERIFIER NOTES-- \nNot allowing single-label realms was a deliberate decision (and the examples of invalid NAIs in Section 2.8 also include this case). One of the reasons was that RFC 1034 considers names without dots to be \"relative\" names of local significance. Such names may be valid DNS names for some other purposes than NAIs, though.  ", "submit_date": "2008-12-01", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1625", "doc-id": "RFC4429", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   [RFC2462] introduces the concept of Tentative (in 5.4) and Deprecated\r\n | (in 5.5.4) addresses.  Addresses that are neither are said to be\r\n   Preferred.  Tentative addresses may not be used for communication,\r\n   and Deprecated addresses should not be used for new communications.\r\n   These address states may also be used by other standards documents,\r\n   for example, Default Address Selection [RFC3484].\r\n", "correct_text": "   [RFC2462] introduces the concept of Tentative (in 5.4) and Deprecated\r\n | (in 5.5.4) addresses.  Addresses that are neither Tentative nor Deprecated are said to be\r\n   Preferred.  Tentative addresses may not be used for communication,\r\n   and Deprecated addresses should not be used for new communications.\r\n   These address states may also be used by other standards documents,\r\n   for example, Default Address Selection [RFC3484].", "notes": "", "submit_date": "2008-12-03", "submitter_name": "Shiang-Ming Huang", "verifier_id": "", "verifier_name": "Jari Arkko", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1626", "doc-id": "RFC3706", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "   The disadvantage of this scheme is the reliance upon the peer to\r\n   demonstrate liveliness.  To this end, peer B might never be\r\n   interested in peer A's liveliness.  Nonetheless, if A is interested\r\n   B's liveliness, B must be aware of this, and maintain the necessary\r\n   state information to send periodic HELLOs to A.  The disadvantage of", "correct_text": "   The disadvantage of this scheme is the reliance upon the peer to\r\n   demonstrate liveliness.  To this end, peer B might never be\r\n   interested in peer A's liveliness.  Nonetheless, if A is interested in\r\n   B's liveliness, B must be aware of this, and maintain the necessary\r\n   state information to send periodic HELLOs to A.  The disadvantage of", "notes": "Add \"in\" to make \"interested in B's liveliness\".", "submit_date": "2008-12-03", "submitter_name": "Joel Faber", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1627", "doc-id": "RFC4291", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "   Routers must not forward any multicast packets beyond of the scope\r\n   indicated by the scop field in the destination multicast address.\r\n", "correct_text": "   Routers must not forward any multicast packets beyond the scope\r\n   indicated by the scop field in the destination multicast address.\r\n", "notes": "extraneous \"of\"", "submit_date": "2007-03-02", "submitter_name": "Yelland Mr Michael", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1392", "doc-id": "RFC5216", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.3,pg.19", "orig_text": "[lower part of Figure 2]\r\n\r\n         |                       |                         |\r\n         V                       V                         V\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                         |\r\n   |                        MSK, EMSK                        |\r\n   |               label == \"client EAP encryption\"          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |             |             |\r\n     | MSK(0,31)   | MSK(32,63)  | EMSK(0,63)\r\n     |             |             |\r\n     |             |             |\r\n     V             V             V\r\n\r\n                     Figure 2 - EAP-TLS Key Hierarchy\r\n", "correct_text": "         |                       |                         |\r\n         V                       V                         V\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                         |\r\n   |                        MSK, EMSK                        |\r\n   |               label == \"client EAP encryption\"          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |              |              |            |\r\n|    | Enc-RECV-Key | Enc-SEND-Key | RECV-IV    | SEND-IV\r\n|    |  =           |  =           |  =         |  =\r\n|    | MSK(0,31)    | MSK(32,63)   | EMSK(0,31) | EMSK(32,63)\r\n     |              |              |            |\r\n     V              V              V            V\r\n\r\n                     Figure 2 - EAP-TLS Key Hierarchy\r\n", "notes": "Rationale:\r\n\r\nFigure 2 should be comparable to Figure 1, but it does not\r\nshow the final deliverables with their names as they appear\r\nin the referenced documents.\r\nAlso, the figure is surprisingly unbalanced; it shows the split\r\nof MSK, but it does not show the split of EMSK; I cannot detect\r\nany reason for this difference. \r\nThe proposal above includes both these names and the technical\r\ndetails of how these variables are derived from MSK and EMSK,\r\naccording to the formulae given near the bottom of page 18.\r\n\r\nTo avoid these technical details and better align the abstraction\r\nlevel in the presentation with Figure 1, alternatively the second\r\nand the third tagged line above (those with \"=\" and MSK/EMSK)\r\ncould be left off.\n --VERIFIER NOTES-- \n\r\nThe updated figure is wrong -- RECV-IV/SEND-IV are not derived from EMSK.", "submit_date": "2008-03-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1393", "doc-id": "RFC5216", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1,pg.20", "orig_text": "|  0                   1                   2                   3\r\n|  0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Code      |   Identifier  |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     Type      |     Flags     |      TLS Message Length\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     TLS Message Length        |       TLS Data...\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "|   0                   1                   2                   3\r\n|   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Code      |   Identifier  |            Length             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |     Type      |     Flags     |      TLS Message Length       :\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  :     TLS Message Length        |       TLS Data...\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "There are two issues:\r\n-  misalignment of ruler lines above the diagram;\r\n-  misleading representation of the TLS Message Length field\r\n   that is continued from the 2nd to the 3rd data line;\r\n   the above proposal makes use of ':' to denote continuation\r\n   of a folded field -- this notational detail has been widely\r\n   adopted in many contemporary RFCs.\r\n\r\nThis very same issue recurs in Section 3.2, on page 22, and \r\nidentical changes should be applied there.\r\n\r\n\r\nNote:\r\n  Unfortunately, the affiliation of the authors apparently\r\n  maintains packet filters (since almost 9 months) that preclude\r\n  DNS lookups for the MX records, and hence sending email to the\r\n  authors, for any site operating a DNS resolver behind a NAT/NAPT,\r\n  by blackholing DNS queries from sorce ports other than 53 --\r\n  contrary to all applicable RFCs.\r\n  This effective denial of service has prohibited me from direct\r\n  communication with the authors, to make them aware of the issues\r\n  now reported in this series of Errata Reports.", "submit_date": "2008-03-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1394", "doc-id": "RFC5216", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3,pg.26", "orig_text": "   In contrast to the EAP-TLS server, the EAP-TLS peer may not have\r\n|  Internet connectivity.  Therefore, the EAP-TLS server SHOULD provide\r\n   its entire certificate chain minus the root to facilitate certificate\r\n   validation by the peer.  The EAP-TLS peer SHOULD support validating\r\n   the server certificate using RFC 3280 [RFC3280] compliant path\r\n   validation.\r\n", "correct_text": "   In contrast to the EAP-TLS server, the EAP-TLS peer may not have\r\n|  Internet connectivity (at the time of the EAP-TLS exchange).\r\n   Therefore, the EAP-TLS server SHOULD provide its entire certificate\r\n   chain minus the root to facilitate certificate validation by the\r\n   peer.  The EAP-TLS peer SHOULD support validating the server\r\n   certificate using RFC 3280 [RFC3280] compliant path validation.\r\n", "notes": "Rationale: Clarification", "submit_date": "2008-03-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1395", "doc-id": "RFC3678", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "The rules for generating errors are the same as those given in\r\nSection 5.1.3.", "correct_text": "The rules for generating errors are the same as those given in\r\nSection 4.1.3.", "notes": "There is no section 5.1.3.", "submit_date": "2008-03-27", "submitter_name": "Dave Thaler", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1396", "doc-id": "RFC5123", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": " While\r\n Dijkstra's Sender Policy Framework (SPF) and the Diffusing Update\r\n Algorithm (DUAL) both base their loop-free path calculations on the\r\n cost of a path", "correct_text": " While\r\n Dijkstra's Shortest Path First (SPF) and the Diffusing Update\r\n Algorithm (DUAL) both base their loop-free path calculations on the\r\n cost of a path", "notes": "This confusion with RFC 4408 is funny :-)", "submit_date": "2008-03-30", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2259", "doc-id": "RFC5864", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   ... DNS (Domain Name Service) ...", "correct_text": "   ... DNS (Domain Name System) ...", "notes": "Rationale: wrong expansion of acronym\n --VERIFIER NOTES-- \nBoth terms have been used. (See RFCs 830, 1001, 1834, etc.)", "submit_date": "2010-05-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1418", "doc-id": "RFC4379", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   An MPLS echo request is a UDP packet.  The IP header is set as\r\n   follows: the source IP address is a routable address of the sender;\r\n   the destination IP address is a (randomly chosen) IPv4 address from\r\n   the range 127/8 or IPv6 address from the range\r\n   0:0:0:0:0:FFFF:127/104.", "correct_text": "   An MPLS echo request is a UDP packet.  The IP header is set as\r\n   follows: the source IP address is a routable address of the sender;\r\n   the destination IP address is a (randomly chosen) IPv4 address from\r\n   the range 127/8 or IPv6 address from the range\r\n   0:0:0:0:0:FFFF:7F00/104.\r\n", "notes": "The \":127\" is ambiguous (intended to be decimal, but could be hexadecimal).\r\nAn alternative fix would be 0:0:0:0:0:FFFF:127.0.0.0/104.\r\n\r\nThis report was corrected 9/15/08 as requested by Brian Carpenter. ", "submit_date": "2008-04-30", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4136", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "A.2.", "orig_text": "Bogus Content-Length header fields are now required to be handled as\r\nerrors by recipients.  (Section 3.3.2)\r\n", "correct_text": "Bogus Content-Length header fields are now required to be handled as\r\nerrors by recipients.  (Section 3.3.3)\r\n", "notes": "The mentioned requirement appears in 3.3.3 (5), not in 3.3.2\n --VERIFIER NOTES-- \nThe text in 3.3.3 is not what this item is referring to: it really is referring to Section 3.3.2 as a whole.", "submit_date": "2014-10-20", "submitter_name": "Frank Gevaerts", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2260", "doc-id": "RFC5864", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4., pg.5", "orig_text": "[[ second paragraph on page 5: ]]\r\n\r\n   DNS SRV RRs, like all DNS RRs, have a time-to-live (TTL), after which\r\n   the SRV record information is no longer valid (see [RFC1034]).  DNS\r\n|  RRs SHOULD be discarded after their TTL, and after the DNS query\r\n   repeated.  This applies to DNS SRV RRs for AFS as it does for any\r\n   other DNS RR.  Any information derived from the DNS SRV RRs, such as\r\n   preference ranks, MUST be discarded when the DNS SRV RR is expired.", "correct_text": "   DNS SRV RRs, like all DNS RRs, have a time-to-live (TTL), after which\r\n   the SRV record information is no longer valid (see [RFC1034]).  DNS\r\n|  RRs SHOULD be discarded after their TTL, and the DNS query be\r\n   repeated.  This applies to DNS SRV RRs for AFS as it does for any\r\n   other DNS RR.  Any information derived from the DNS SRV RRs, such as\r\n   preference ranks, MUST be discarded when the DNS SRV RR is expired.", "notes": "Rationale:\r\n  Obviously a late change to the text that distorts the proper sense.\r\n  The I-D text was correct.\r\n\r\nPerhaps the affected sentence could more explicitly state:\r\n\r\n      ..., and the DNS query be repeated as soon as the information\r\n  is needed again.", "submit_date": "2010-05-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2250", "doc-id": "RFC4408", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.3", "orig_text": "   $ORIGIN _spf.example.com.  mary.mobile-users                   A\r\n   127.0.0.2 fred.mobile-users                   A 127.0.0.2\r\n   15.15.168.192.joel.remote-users     A 127.0.0.2\r\n   16.15.168.192.joel.remote-users     A 127.0.0.2\r\n", "correct_text": "   $ORIGIN _spf.example.com.\r\n   mary.mobile-users                   A 127.0.0.2\r\n   fred.mobile-users                   A 127.0.0.2\r\n   15.15.168.192.joel.remote-users     A 127.0.0.2\r\n   16.15.168.192.joel.remote-users     A 127.0.0.2\r\n", "notes": "The DNS zone file example has incorrect line breaks.\r\n", "submit_date": "2006-05-16", "submitter_name": "Wayne Schlitt", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1399", "doc-id": "RFC5169", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3,pg.10/11", "orig_text": "   CAPWAP currently has no means to support roaming between ACs in an\r\n   enterprise network.  The proposed work on EAP efficient re-\r\n|  authentication addresses is an inter-authenticator handover problem\r\n   from an EAP perspective, which applies during handover between ACs.\r\n   [...]", "correct_text": "   CAPWAP currently has no means to support roaming between ACs in an\r\n   enterprise network.  The proposed work on EAP efficient re-\r\n|  authentication addresses an inter-authenticator handover problem\r\n   from an EAP perspective, which applies during handover between ACs.\r\n   [...]", "notes": "Two verbs back-ro-back.", "submit_date": "2008-03-31", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1400", "doc-id": "RFC2819", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1 2 &3", "orig_text": "1. matrixDSSourceAddress\r\n2. matrixDSDestAddress\r\n3. hostAddress", "correct_text": "Definition of OBJECT-TYPE 1, 2 & 3", "notes": "Got error while compiling the MIB. Error says the above objects \"must have size restriction\".\n --VERIFIER NOTES-- \nMIB documents before RFC 4001 may present this problem. It's a warning not a compilation error that should be ignored. ", "submit_date": "2008-03-31", "submitter_name": "Mehala", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1419", "doc-id": "RFC1918", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   An enterprise that decides to use IP addresses out of the address\r\n   space defined in this document can do so without any coordination\r\n   with IANA or an Internet registry.", "correct_text": "An enterprise that decides to use IP addresses within the address \r\nspace defined in this document can do so without any coordination \r\nwith IANA or an Internet registry.", "notes": "There appears to be a slight difference in interpretation with the existing phrase, \"out of the address space.\"  This 'could' be interpreted to mean \"outside of the address space,\" hence changing the meaning of the entire statement, if the section's context is not considered.  In the interest of clarification, would it be possible to rephrase this particular section to \"within the address space?\"  I'm aware of one case in particular where attorneys argued over this issue ad nauseum, regardless of the network architects attempting to intervene.", "submit_date": "2008-05-07", "submitter_name": "Jack Parker", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1420", "doc-id": "RFC2328", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.3", "orig_text": "The routing table entries changes that\r\nwould be caused by the addition of this virtual link are shown\r\nin Table 14.\r\n\r\n", "correct_text": "N/A", "notes": "But Table 14 is exiled in another section, section 12, where it has nothing to do. I assume some processor tried to avoid splitting the table and displaced it too far.", "submit_date": "2008-05-11", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1421", "doc-id": "RFC5225", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.6.6, p.28", "orig_text": "|  The inferred_ip_v4_length encoding method compresses the IPv4 header\r\n|  checksum down to a size of zero bits, i.e., no bits are transmitted\r\n   in compressed headers for this field.  [...]", "correct_text": "|  The inferred_ip_v4_length encoding method compresses the IPv4 Total\r\n|  Length field down to a size of zero bits, i.e., no bits are\r\n   transmitted in compressed headers for this field.  [...]", "notes": "Apparently, a copyedit flaw (text copied from 6.6.4 insufficiently\r\nmodified).", "submit_date": "2008-05-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1422", "doc-id": "RFC2732", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Page 2", "orig_text": "A literal address is incorrectly rendered as a URL:\r\n\r\nLiteral:\r\n      1080:0:0:0:8:800:200C:4171\r\n\r\nAs rendered as a URL:\r\n      http://[1080:0:0:0:8:800:200C:417A]/index.html\r\n", "correct_text": "Should be:\r\n      http://[1080:0:0:0:8:800:200C:4171]/index.html\r\n\r\n", "notes": "Larry Masinter & I verified this errata", "submit_date": "2008-05-13", "submitter_name": "Paul Suhler", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1423", "doc-id": "RFC5234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.", "orig_text": "repeat         =  1*DIGIT / (*DIGIT \"*\" *DIGIT)", "correct_text": "repeat         =  *DIGIT [\"*\" *DIGIT]", "notes": "In section 4.  ABNF Definition of ABNF, on Page 10, the definition of <repeat> appears to be ambiguous.\r\n \r\nAfter many weeks of study of RFC 5234 I am unable to discern which alternation to choose for <repeat> for the following string.\r\n \r\n21*ARULENAME\r\n \r\nBoth alternatives are a valid solution but I was not able to determine from the RFC which one should be chosen. By my way of thinking, the first one encountered should be chosen but when done, the \"*\" is left and will cause a parsing error. Conversely I could have performed a look ahead check in my parsor, but that would produce a less efficient parser, forcing all alternatives to always be processed.  In either case, the rule is ambiguous and, in my opinion, requires further definition.\r\n \r\nMy recommendation would be to change it to \r\n \r\nrepeat         =  *DIGIT [\"*\" *DIGIT]\r\n \r\nThis solution does not introduce any ambiguity and does not break any components of the definition of ABNF.\r\n \r\nI realize that the forced presence of a digit on the <repeat> without the * is no longer present, but it was not necessary since the only use of <repeat> is by <repetition> and its presence is optional.\r\n\r\n --VERIFIER NOTES-- \r\n\r\nThe following is the text of an analysis of Erratum entry <http://www.rfc-editor.org/errata_search.php?rfc=5234&eid=1423>, made by Paul Overell:\r\n\r\n\r\n> Section: 4.\r\n>\r\n> Original Text\r\n> -------------\r\n> repeat = 1*DIGIT / (*DIGIT \"*\" *DIGIT)\r\n>\r\n\r\nI can see nothing wrong with this, there is no ambiguity. To be ambiguous it would have to be able to generate a particular string in more than one way.\r\n\r\nA <repeat> without a \"*\" can only be generated by the first alterative. A <repeat> with a \"*\" can only be generated by the second alternative.\r\n\r\n\r\n> Corrected Text\r\n> --------------\r\n> repeat = *DIGIT [\"*\" *DIGIT]\r\n\r\nThis changes the syntax of <repeat> as it allow the empty string.\r\n\r\n\r\n> Notes\r\n> -----\r\n> In section 4. ABNF Definition of ABNF, on Page 10, the definition of <repeat> appears to be ambiguous.\r\n>\r\n> After many weeks of study of RFC 5234 I am unable to discern which alternation to choose for <repeat> for the following string.\r\n>\r\n> 21*ARULENAME\r\n\r\nThis clearly matches the second alternative (*DIGIT \"*\" *DIGIT) and therefor is an instance of a <repeat>. This string can only be generated using the second alternative.\r\n\r\n\r\n> Both alternatives are a valid solution but I was not able to determine from the RFC which one should be chosen. By my way of thinking, the first one encountered should be chosen but when done, the \"*\" is left and will cause a parsing error.\r\n\r\nThe first cannot be chosen precisely because the \"*\" is left and causes a parsing error.\r\n\r\n> Conversely I could have performed a look ahead check in my parsor, but that would produce a less efficient parser, forcing all alternatives to always be processed.\r\n\r\nThe grammar given for ABNF is not, and does not claim to be, LL(0). I expect the ABNF grammar could be recast as LL(0) but there is no need, it was written for clarity.\r\n\r\nI can't see the relevance of parser efficiency here.\r\n\r\n> In either case, the rule is ambiguous and, in my opinion, requires further definition.\r\n\r\nAs discussed above, there is no ambiguity.\r\n\r\n\r\n> My recommendation would be to change it to\r\n\r\n> repeat = *DIGIT [\"*\" *DIGIT]\r\n>\r\n> This solution does not introduce any ambiguity and does not break any components of the definition of ABNF.\r\n\r\nIt is not equivalent to the original in that it allows the empty string.\r\n\r\n\r\n> I realize that the forced presence of a digit on the <repeat> without the * is no longer present, but it was not necessary since the only use of <repeat> is by <repetition> and its presence is optional.\r\n\r\nThe proposed change to <repeat> breaks the definition of <repetition> as it then becomes ambiguous.\r\n\r\nConsider the string \"foo\". With the proposed change to <repeat> it can be parsed as a <repetition> in two ways: <repeat> <element> or as <element>, the first with the option taken, the second with the option not taken. Two parse trees for the same string. To fix this ambiguity the definition of <repetition> would have to be changed to\r\n\r\nrepetition = repeat element\r\n\r\n\r\nI recommend that this errata is rejected.\r\n\r\nThere is no ambiguity to fix, the proposed change is unnecessary, and would require an additional change to the definition of <repetition>.\r\n\r\n  ", "submit_date": "2008-05-13", "submitter_name": "David J. Rutkin", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1494", "doc-id": "RFC5281", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8, pg.19", "orig_text": "      Keying Material = PRF-128(SecurityParameters.master_secret, \"ttls\r\n                keying material\", SecurityParameters.client_random +\r\n                SecurityParameters.server_random)\r\n", "correct_text": "      Keying Material = PRF-128(SecurityParameters.master_secret,\r\n                \"ttls keying material\", SecurityParameters.client_random\r\n                + SecurityParameters.server_random)\r\n", "notes": "The string in double quotes is a cryptographically significant\r\nprotocol element and hence white space within it should be\r\nrepresented faithfully and unambiguously in the published text.\r\nThe line break and additional indentation inserted into the string\r\nduring final editing of the RFC disturb the clarity of the text.\r\n\r\nThis same issue already has been discussed at length in the context\r\nof other documents making use of the same or similar key material\r\nderivation techniques.", "submit_date": "2008-08-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1401", "doc-id": "RFC5198", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2, pg.3", "orig_text": "   3.  The control characters in the ASCII range (U+0000 to U+001F and\r\n|      U+007F to U+009F) SHOULD generally be avoided.  Space (SP,\r\n|      U+0020), CR, LF, and Form Feed (FF, U+000C) are exceptions to\r\n|      this principle, but use of all but the first requires care as\r\n       discussed elsewhere in this document.  The so-called \"C1\r\n       Controls\" (U+0080 through U+009F), which did not appear in ASCII,\r\n       MUST NOT appear.", "correct_text": "   3.  The control characters in the ASCII range (U+0000 to U+001F and\r\n|      U+007F to U+009F) SHOULD generally be avoided. CR, LF, and Form\r\n|      Feed (FF, U+000C) are exceptions to this principle, but use of\r\n|      these, as well as Space (SP, U+0020, which is often treated as a\r\n|      control character), requires care as discussed elsewhere in this\r\n       document.  The so-called \"C1 Controls\" (U+0080 through U+009F),\r\n       which did not appear in ASCII, MUST NOT appear.", "notes": "Logical inconsistency:\r\nSPACE is not contained in the enumeration in the first sentence;\r\nthus, it is no *exception* to that rule, and the published text\r\ndoes not make proper sense.", "submit_date": "2008-03-31", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3992", "doc-id": "RFC5328", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Authors' Add", "orig_text": "Authors' Addresses\r\n\r\n   Alexander Adolf\r\n   Micronas GmbH\r\n   Frankenthalerstrasse 2\r\n   D-81539 Munich\r\n   GERMANY\r\n   Tel: +49 89 54845 7203\r\n   Fax: +49 89 54845 7900\r\n   EMail: alexander.adolf@micronas.com\r\n\r\n   Peter MacAvock\r\n   DVB Digital Video Broadcasting\r\n   Ancienne Route 17a\r\n   CH-1218 Geneva\r\n   SWITZERLAND\r\n   Tel: +41 22 717 2717\r\n   EMail: macavock@dvb.org", "correct_text": "Authors' Addresses\r\n\r\n   Alexander Adolf\r\n   Condition-ALPHA\r\n   Gabelsbergerstrasse 60b\r\n   80333 Munich\r\n   GERMANY\r\n   Tel: +49 89 52314163\r\n   EMail: alexander.adolf@condition-alpha.com\r\n\r\n   Peter Siebert\r\n   DVB Digital Video Broadcasting Project\r\n   Ancienne Route 17a\r\n   1218 Geneva\r\n   SWITZERLAND\r\n   Tel: +41 22 717 2717\r\n   EMail: dvb@dvb.org", "notes": "I have changed my affiliation, and the DVB Project has a new managing director. Also, the DVB contact should use the generic email address (more longevity).\n --VERIFIER NOTES-- \nThe correction of the contact information needs to be done, but the errata system isn't the right way to do it.  I'm working with the author to get a short update published that will make the change in a new RFC.", "submit_date": "2014-05-19", "submitter_name": "Alexander Adolf", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2341", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "The ASN.1 fragment at the bottom of page 14, says:\r\n\r\n      PBMParameter ::= SEQUENCE {\r\n         salt                OCTET STRING,\r\n         owf                 AlgorithmIdentifier,\r\n         iterationCount      INTEGER,\r\n         mac                 AlgorithmIdentifier\r\n         )\r\n        ^^^\r\n\r\nIt should say:\r\n\r\n      PBMParameter ::= SEQUENCE {\r\n         salt                OCTET STRING,\r\n         owf                 AlgorithmIdentifier,\r\n         iterationCount      INTEGER,\r\n         mac                 AlgorithmIdentifier\r\n         }", "correct_text": "[see above]     ", "notes": "", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1428", "doc-id": "RFC4122", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "UUIDs, as defined in this document, can also be ordered lexicographically.\r\nFor a pair of UUIDs, the first one follows the second if the most significant\r\nfield in which the UUIDs differ is greater for the first UUID.  The second\r\nprecedes the first if the most significant field in which the UUIDs differ\r\nis greater for the second UUID.", "correct_text": "UUIDs, as defined in this document, can also be ordered lexicographically.\r\nFor a pair of UUIDs, the first one follows the second if the most significant\r\nfield in which the UUIDs differ is greater for the first UUID.  The second\r\nfollows the first if the most significant field in which the UUIDs differ\r\nis greater for the second UUID.", "notes": "The second and third sentences in the paragraph as originally written are\r\ninconsistent.  I have proposed one of the possible fixes.  There are others\r\nthat will make them consistent.", "submit_date": "2008-05-22", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1429", "doc-id": "RFC3588", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.4.1", "orig_text": "11.4.1. Result-Code AVP Values\r\n\r\n\r\n   As defined in Section 7.1, the Result-Code AVP (AVP Code 268) defines\r\n   the values 1001, 2001-2002, 3001-3010, 4001-4002 and 5001-5017.\r\n\r\n   All remaining values are available for assignment via IETF Consensus\r\n   [IANA].", "correct_text": "11.4.1. Result-Code AVP Values\r\n\r\n\r\n   As defined in Section 7.1, the Result-Code AVP (AVP Code 268) defines\r\n   the values 1001, 2001-2002, 3001-3010, 4001-4003 and 5001-5017.\r\n\r\n   All remaining values are available for assignment via IETF Consensus\r\n   [IANA].", "notes": "7.1.4. Transient Failures\r\n\r\n......\r\n   DIAMETER_AUTHENTICATION_REJECTED   4001\r\n......\r\n   DIAMETER_OUT_OF_SPACE              4002\r\n......\r\n   ELECTION_LOST                      4003\r\n      The peer has determined that it has lost the election process and\r\n      has therefore disconnected the transport connection.\r\n\r\nFor Transient Failures we have error code 4001-4003 defined but the IANA consideration part says only 4001-4002, which can mean the value 4003 is free, but 4003 is assigned to ELECTION_LOST hence error.", "submit_date": "2008-05-25", "submitter_name": "Parveen Verma", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1430", "doc-id": "RFC4918", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.3", "orig_text": "9.3.  MKCOL Method\r\n\r\n   MKCOL creates a new collection resource at the location specified by\r\n   the Request-URI. [...]", "correct_text": "9.3 MKCOL Method\r\n\r\n   The MKCOL method is used to create a new collection. All DAV compliant\r\n   resources MUST support the MKCOL method.\r\n\r\n   MKCOL creates a new collection resource at the location specified by\r\n   the Request-URI. [...]", "notes": "The statement, that support for MKCOL is a MUST-requirement has unintentionally been dropped.", "submit_date": "2008-05-26", "submitter_name": "Werner Baumann", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2021-07-20 23:39:13"}, {"errata_id": "1431", "doc-id": "RFC2617", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.2.1", "orig_text": "   If the \"qop\" value is \"auth\" or \"auth-int\":\r\n\r\n      request-digest  = <\"> < KD ( H(A1),     unq(nonce-value)\r\n                                          \":\" nc-value\r\n                                          \":\" unq(cnonce-value)\r\n                                          \":\" unq(qop-value)\r\n                                          \":\" H(A2)\r\n                                  ) <\">", "correct_text": "   If the \"qop\" value is \"auth\" or \"auth-int\":\r\n\r\n      request-digest  = <\"> < KD ( H(A1),     unq(nonce-value)\r\n                                          \":\" nc-value\r\n                                          \":\" unq(cnonce-value)\r\n                                          \":\" unq(qop-value)\r\n                                          \":\" H(A2)\r\n                                  ) > <\">", "notes": "The \">\" bracket is missing in the final line, closing the \"<\" bracket of the first line in \"< KD ( H(A1)\"...", "submit_date": "2008-05-29", "submitter_name": "Stefan Santesson", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1432", "doc-id": "RFC2663", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.", "orig_text": "b) After twice-NAT translation, in private network\r\n\r\n          SA: 200.200.200.1     DA: 172.16.1.100", "correct_text": "b) After twice-NAT translation, in private network\r\n\r\n          DA: 200.200.200.1     SA: 172.16.1.100", "notes": "tricky :)", "submit_date": "2008-05-29", "submitter_name": "Harald Hubich", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1402", "doc-id": "RFC5198", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2, mid-pg.4", "orig_text": "   The use of LF without CR is questionable; see Appendix B for more\r\n   discussion.  The newer control characters IND (U+0084) and NEL (\"Next\r\n   Line\", U+0085) might have been used to disambiguate the various line-\r\n   ending situations, but, because their use has not been established on\r\n   the Internet, because many protocols require CRLF, and because IND\r\n|  and NEL fall within the \"C1 Controls\" group (see below), they MUST\r\n   NOT be used.  [...]\r\n                                                    ^^^^^", "correct_text": "   The use of LF without CR is questionable; see Appendix B for more\r\n   discussion.  The newer control characters IND (U+0084) and NEL (\"Next\r\n   Line\", U+0085) might have been used to disambiguate the various line-\r\n   ending situations, but, because their use has not been established on\r\n   the Internet, because many protocols require CRLF, and because IND\r\n|  and NEL fall within the \"C1 Controls\" group (see above), they MUST\r\n   NOT be used.  [...]\r\n                                                    ^^^^^^", "notes": "The only relevant discussion of \"C1 Controls\" in the document\r\nis in bullet 3 within the same section, on the preceding page.\r\nHence, \"below\" is misleading for the reader and needs to be\r\nreplaced to correctly say \"above\".\r\n", "submit_date": "2008-03-31", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1403", "doc-id": "RFC5128", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2,last par", "orig_text": "   A variety of current peer-to-peer applications implement this\r\n   technique.  Its main limitation, of course, is that it only works so\r\n   long as only one of the communicating peers is behind a NAT device.\r\n|  If the NAT device is EIM-NAT, the public client can contact external\r\n|  server S to determine the specific public endpoint from which to\r\n|  expect Client-A-originated connection and allow connections from just\r\n|  those endpoints.  If the NAT device is EIM-NAT, the public client can\r\n   contact the external server S to determine the specific public\r\n   endpoint from which to expect connections originated by client A, and\r\n   allow connections from just that endpoint.  If the NAT device is not\r\n   EIM-NAT, the public client cannot know the specific public endpoint\r\n   from which to expect connections originated by client A.  In the\r\n   increasingly common case where both peers can be behind NATs, the\r\n   Connection Reversal method fails.  [...]", "correct_text": "   A variety of current peer-to-peer applications implement this\r\n   technique.  Its main limitation, of course, is that it only works so\r\n   long as only one of the communicating peers is behind a NAT device.\r\n   If the NAT device is EIM-NAT, the public client can contact the\r\n   external server S to determine the specific public endpoint from\r\n   which to expect connections originated by client A, and allow\r\n   connections from just that endpoint.  If the NAT device is not\r\n   EIM-NAT, the public client cannot know the specific public endpoint\r\n   from which to expect connections originated by client A.  In the\r\n   increasingly common case where both peers can be behind NATs, the\r\n   Connection Reversal method fails.  [...]", "notes": "Location is mid-page 11.\r\n\r\nRationale and background:\r\n\r\nThe reporter once had suggested replacement text to improve the\r\nreadability of the third and fourth sentence in this paragraph.\r\nThese LC comments have been accepted, but inadvertently, the\r\nthird original sentence has been left in the text, followed\r\nby its intended replacement.\r\n\r\nNote that the similar replacement of the next sentence\r\n(\"If the NAT device is not ...\") has been performed properly.\r\n\r\nThe above correction removes the original, less legible draft\r\nversion of the other sentence.", "submit_date": "2008-03-31", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1404", "doc-id": "RFC1685", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   RFC822: Harald.Alvestrand@uninett.no\r\n   X.400:  C=no; ADMD=; PRMD=uninett; O=uninett; S=alvestrand;\r\n   G=harald", "correct_text": "   RFC822: Harald.Alvestrand@uninett.no\r\n   X.400:  G=Harald; S=alvestrand; O=uninett; P=uninett; C=no", "notes": "The RFC is about the format of O/R names. The address as given in the author's address section should be consistent with the format recommended by the RFC.", "submit_date": "2008-04-03", "submitter_name": "Harald Tveit Alvestrand", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1406", "doc-id": "RFC3920", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5", "orig_text": "The following example shows the data flow for a client authenticating\r\nwith a server using SASL, normally after successful TLS negotiation\r\n(note: the alternate steps shown below are provided to illustrate the\r\nprotocol for failure cases; they are not exhaustive and would not\r\nnecessarily be triggered by the data sent in the example).", "correct_text": "The following example shows the data flow for a client authenticating\r\nwith a server using SASL, normally after successful TLS negotiation\r\n(note: the alternate steps shown below are provided to illustrate the\r\nprotocol for failure cases; they are not exhaustive and would not\r\nnecessarily be triggered by the data sent in the example).\r\n\r\nThe digests (response and rspauth) in steps 6 and 7 of the examples\r\nin this and the next section merely show the format, the values don't\r\ncorrespond to the input values for any known password. ", "notes": "response=d388dad90d4bbd760a152321f2143af7 and\r\nrspauth=ea40f60335c427b5527b84dbabcdfffd are the digest\r\nvalues for the first example in RFC 2831 chapter 4.", "submit_date": "2008-04-08", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1407", "doc-id": "RFC5176", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "Typically, the Dynamic Authorization Server will extract the realm\r\n   from the Network Access Identifier [RFC4282] included within the\r\n   User-Name or Chargeable-User-Identity Attribute, and determine the\r\n   corresponding RADIUS servers in the realm routing tables.", "correct_text": "Typically, the Dynamic Authorization Server will extract the realm\r\n   from the Network Access Identifier [RFC4282] included within the\r\n   User-Name and determine the\r\n   corresponding RADIUS servers in the realm routing tables.", "notes": "Chargeable-User-Identity Attribute defined in RFC4372 does not allow any entity other then the home network to parse the CUI attribute.  It is in essence opaque.  Here is the text:\r\n\"RADIUS entities other than the Home RADIUS\r\n      server MUST treat the CUI content as an opaque token, and SHOULD\r\n      NOT perform operations on its content other than a binary equality\r\n      comparison test, between two instances of CUI.\"", "submit_date": "2008-04-09", "submitter_name": "Avi Lior", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1408", "doc-id": "RFC4253", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "12", "orig_text": "    SSH_MSG_KEXDH_INIT             30\r\n    SSH_MSG_KEXDH_REPLY            3\r\n", "correct_text": "    SSH_MSG_KEXDH_INIT             30\r\n    SSH_MSG_KEXDH_REPLY            31\r\n", "notes": "This is a transcription error in the erratum dated 2006-01-23.  Section 12 says \"numbers 30-49 are used for kex packets\", so using 3 for SSH_MSG_KEXDH_REPLY is clearly wrong.  OpenSSH and python-paramiko both use 31, not 3.\n --VERIFIER NOTES-- \nErrata IDs 152 and 1408 are combined into 1486.", "submit_date": "2008-04-11", "submitter_name": "Dwayne Litzenberger", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5427", "doc-id": "RFC8110", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "To add an opportunistic encryption mode of access to [IEEE802.11], it\r\n   is necessary to perform a Diffie-Hellman key exchange during 802.11\r\n   authentication and use the resulting pairwise secret with the 4-way\r\n   handshake.", "correct_text": "To add an opportunistic encryption mode of access to [IEEE802.11], it\r\n   is necessary to perform a Diffie-Hellman key exchange during 802.11\r\n   association and use the resulting pairwise secret with the 4-way\r\n   handshake.", "notes": "As stated in Section 4.4, the Diffie-Hellman key exchange is completed in the 802.11 association step and NOT in the 802.11 authentication step: \"Once the client and AP have finished 802.11 association, they then complete the Diffie-Hellman key exchange ...\".", "submit_date": "2018-07-17", "submitter_name": "Alexandru Lupascu", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2512", "doc-id": "RFC5765", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1.1, pg. 6", "orig_text": "   The content of this document was partially derived from the article\r\n   \"Peer-to-peer Overlays for Real-Time Communication: Security Issues\r\n|  and Solutions,\" published in IEEE Surveys & Tutorials, Vol. 11, No.\r\n   1, and originally authored by Dhruv Chopra, Henning Schulzrinne,\r\n   Enrico Marocco, and Emil Ivov.\r\n", "correct_text": "   The content of this document was partially derived from the article\r\n   \"Peer-to-peer Overlays for Real-Time Communication: Security Issues\r\n|  and Solutions\", published in IEEE Surveys & Tutorials, Vol. 11, No.\r\n   1, and originally authored by Dhruv Chopra, Henning Schulzrinne,\r\n   Enrico Marocco, and Emil Ivov.\r\n", "notes": "Rationale:  Non-use of \"rational quotation\"; the comma is not part\r\n  of the title of the quoted article.\r\n\r\nNote:\r\n  A general editing nit recurring numerous times throughout the RFC\r\n  is the inadvertent treatment of \"et al.\" as the end of a sentence,\r\n  with _two_ space characters inserted after it; thus:\r\n\r\n       s/et al.  /et al. /g  !\n --VERIFIER NOTES-- \nRejected after IRSG discussion.      ", "submit_date": "2010-09-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1425", "doc-id": "RFC3331", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3.4.1,p.53", "orig_text": "a)\r\n|     The SDT Identifier is a 32-bit unsigned value which may only be\r\n      significant to 12 or 14 bits depending on the SS7 variant which is\r\n      supported by the MTP Level 3 at the ASP.  Insignificant SDT\r\n      Identifier bits are coded 0.\r\n\r\nb)\r\n|     The SDL Identifier is a 32-bit unsigned value which may only be\r\n      significant to 12 or 14 bits depending on the SS7 variant which\r\n      is supported by the MTP Level 3 at the ASP.  Insignificant SDLI\r\n      bits are coded 0.\r\n", "correct_text": "a)\r\n|     The SDT Identifier is a 16-bit unsigned value which may only be\r\n      significant to 12 or 14 bits depending on the SS7 variant which is\r\n      supported by the MTP Level 3 at the ASP.  Insignificant SDT\r\n      Identifier bits are coded 0.\r\n\r\nb)\r\n|     The SDL Identifier is a 16-bit unsigned value which may only be\r\n      significant to 12 or 14 bits depending on the SS7 variant which\r\n      is supported by the MTP Level 3 at the ASP.  Insignificant SDLI\r\n      bits are coded 0.\r\n", "notes": "In both cases, the field width \"32-bit\" in the text does not match\r\nthe parameter breakdown in the immediately preceding artwork.\r\nThe above corrections are based on the assumption that the figures\r\nare correct and the text is in error.", "submit_date": "2008-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1426", "doc-id": "RFC3331", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3.2.6,p.35", "orig_text": "   The sending node defines the Heartbeat Data field contents.  It may\r\n   include a Heartbeat Sequence Number and/or time stamp, or other\r\n   implementation specific details.\r\n\r\n   The receiver of a Heartbeat message does not process this field as it\r\n   is only of significance to the sender.  The receiver echoes the\r\n   content of the Heartbeat Data in a BEAT ACK message.\r\n", "correct_text": "   The receiver of a Heartbeat message echoes the content of the\r\n   Heartbeat Data field contained therein without further processing\r\n   in the Heartbeat Data field of the Heartbeat Ack message.\r\n", "notes": "Apparently, the quoted text has been copied from 3.3.2.5 without\r\nperforming the appropriate rewording to accommodate the context\r\nof 3.3.2.6 (BEAT ACK message).", "submit_date": "2008-05-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1427", "doc-id": "RFC5044", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "FPDUPTR: The FPDU Pointer is a relative pointer, 16 bits long,\r\n   interpreted as an unsigned integer that indicates the number of\r\n   octets in the TCP stream from the beginning of the ULPDU Length field\r\n   to the first octet of the entire Marker.  The least significant two\r\n   bits MUST always be set to zero at the transmitter, and the receivers\r\n   MUST always treat these as zero for calculations.", "correct_text": "FPDUPTR: The FPDU Pointer is a relative pointer, 16 bits long,\r\n   interpreted as an unsigned integer that indicates the number of\r\n   octets in the TCP stream from the beginning of the ULPDU Length field\r\n   to the first octet of the entire Marker.  The least significant two\r\n   bits MUST always be set to zero at the transmitter, and the receivers\r\n   MUST always treat these as zero for calculations (except for CRC calculation).", "notes": "Evaluated by Pat Thaler and David Black.\r\nType changed from Editorial to Technical by Lars Eggert.", "submit_date": "2008-05-21", "submitter_name": "Zem Green", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1433", "doc-id": "RFC3931", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5", "orig_text": "The LCCE then checks the Cookie field in the data packet against \r\nthe Cookie value received in the Assigned Cookie AVP during session\r\nestablishment.", "correct_text": "The LCCE then checks the Cookie field in the data packet against \r\nthe Cookie value sent in the Assigned Cookie AVP during session \r\nestablishment.", "notes": "Section 5.4.4 contradicts this directly (\"All data messages sent to a peer MUST use the Assigned Cookie sent by the peer in this AVP\"), and seems consistent with the rest of the 'assigned ...' fields.", "submit_date": "2008-05-30", "submitter_name": "Stefan Puiu", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1434", "doc-id": "RFC1322", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3.1", "orig_text": "[Footnote: Although a domain's selection policies are not\r\n   explicitly distributed, they have an impact on the routes available\r\n   to other domains.  A route that may be preferred by a particular\r\n   domain, and not prohibited by transit restrictions, may still be\r\n   unavailable due to the selection policies of some intermediate\r\n   domain.  The ability to compute and install alternative routes that\r\n   may be lost using hop-by-hop routing (either LS of PV) is the\r\n   critical functionality provided by SDR.].\r\n", "correct_text": "[Footnote: Although a domain's selection policies are not\r\n   explicitly distributed, they have an impact on the routes available\r\n   to other domains.  A route that may be preferred by a particular\r\n   domain, and not prohibited by transit restrictions, may still be\r\n   unavailable due to the selection policies of some intermediate\r\n   domain.  The ability to compute and install alternative routes that\r\n   may be lost using hop-by-hop routing (either LS or PV) is the\r\n   critical functionality provided by SDR.].\r\n", "notes": "", "submit_date": "2008-06-07", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Ross Callon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1435", "doc-id": "RFC2576", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Status", "orig_text": "", "correct_text": "", "notes": "RFC3584 indicates that it obsoletes 2576 but there is no forward reference of this within the rfc2576. This differs from convention that I have observed.\n --VERIFIER NOTES-- \nThis comment needs to be made to the RFC Editor as it concerns the RFC Editor Web pages.   ", "submit_date": "2008-06-11", "submitter_name": "grant mills", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1511", "doc-id": "RFC5336", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7.3,pg.13", "orig_text": "         uFor = \"FOR\" ( FWS (uPath / uMailbox) ) CFWS\r\n          ; Replaces For in Section 4.4 of RFC 2821\r\n|         ; uPath and uMailbox are defined in Sections 2.4 and\r\n|         ; 2.3, respectively, of this document", "correct_text": "         uFor = \"FOR\" ( FWS (uPath / uMailbox) ) CFWS\r\n          ; Replaces For in Section 4.4 of RFC 2821\r\n|         ; uPath and uMailbox are defined in Sections 3.4 and\r\n|         ; 3.3, respectively, of this document", "notes": "Wrong section numbers for document-internal references.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1436", "doc-id": "RFC3330", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   0.0.0.0/8            \"This\" Network                 [RFC1700, page 4]\r\n   10.0.0.0/8           Private-Use Networks                   [RFC1918]\r\n   14.0.0.0/8           Public-Data Networks         [RFC1700, page 181]\r\n   24.0.0.0/8           Cable Television Networks                    --\r\n   39.0.0.0/8           Reserved but subject\r\n                           to allocation                       [RFC1797]\r\n   127.0.0.0/8          Loopback                       [RFC1700, page 5]\r\n   128.0.0.0/16         Reserved but subject\r\n                           to allocation                             --\r\n   169.254.0.0/16       Link Local                                   --\r\n   172.16.0.0/12        Private-Use Networks                   [RFC1918]\r\n   191.255.0.0/16       Reserved but subject\r\n                           to allocation                             --\r\n   192.0.0.0/24         Reserved but subject\r\n                           to allocation                             --\r\n   192.0.2.0/24         Test-Net\r\n   192.88.99.0/24       6to4 Relay Anycast                     [RFC3068]\r\n   192.168.0.0/16       Private-Use Networks                   [RFC1918]\r\n   198.18.0.0/15        Network Interconnect\r\n                           Device Benchmark Testing            [RFC2544]\r\n   223.255.255.0/24     Reserved but subject\r\n                           to allocation                             --\r\n   224.0.0.0/4          Multicast                              [RFC3171]\r\n   240.0.0.0/4          Reserved for Future Use        [RFC1700, page 4]\r\n", "correct_text": "   0.0.0.0/8            \"This\" Network                [RFC1122, page 30]\r\n   10.0.0.0/8           Private-Use Networks                   [RFC1918]\r\n   14.0.0.0/8           Public-Data Networks         [RFC1700, page 181]\r\n   24.0.0.0/8           Cable Television Networks                    --\r\n   39.0.0.0/8           Reserved but subject\r\n                           to allocation                       [RFC1797]\r\n   127.0.0.0/8          Loopback                      [RFC1122, page 31]\r\n   128.0.0.0/16         Reserved but subject\r\n                           to allocation                             --\r\n   169.254.0.0/16       Link Local                                   --\r\n   172.16.0.0/12        Private-Use Networks                   [RFC1918]\r\n   191.255.0.0/16       Reserved but subject\r\n                           to allocation                             --\r\n   192.0.0.0/24         Reserved but subject\r\n                           to allocation                             --\r\n   192.0.2.0/24         Test-Net\r\n   192.88.99.0/24       6to4 Relay Anycast                     [RFC3068]\r\n   192.168.0.0/16       Private-Use Networks                   [RFC1918]\r\n   198.18.0.0/15        Network Interconnect\r\n                           Device Benchmark Testing            [RFC2544]\r\n   223.255.255.0/24     Reserved but subject\r\n                           to allocation                             --\r\n   224.0.0.0/4          Multicast                              [RFC3171]\r\n   240.0.0.0/4          Reserved for Future Use        [RFC1112, page 3]\r\n", "notes": "RFC 1700, page 4, does not mention 240.0.0.0/4.", "submit_date": "2008-06-12", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1437", "doc-id": "RFC5185", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "  Multi-area adjacencies are configured between two routers having a\r\n   common interface. ", "correct_text": "  Multi-area adjacencies are configured between two routers having an\r\n   interface to the same network.\r\n", "notes": "Unless \"interface\" is used in an unusual meaning?", "submit_date": "2008-06-12", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1438", "doc-id": "RFC5240", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5, pg.5", "orig_text": "   pimBsrCandidateRPGroupPrefixLength OBJECT-TYPE\r\n       ...\r\n       DESCRIPTION\r\n|              \"The multicast group address mask that, when combined\r\n               with the corresponding value of\r\n               pimBsrCandidateRPGroupAddress, identifies a group prefix\r\n               for which the local router will advertise itself as a\r\n               Candidate-RP.  [...]", "correct_text": "   pimBsrCandidateRPGroupPrefixLength OBJECT-TYPE\r\n       ...\r\n       DESCRIPTION\r\n|              \"The multicast group prefix length that, when combined\r\n               with the corresponding value of\r\n               pimBsrCandidateRPGroupAddress, identifies a group prefix\r\n               for which the local router will advertise itself as a\r\n               Candidate-RP.  [...]", "notes": "Missed update from legacy text!\r\nOn page 9, the DESCRIPTION for pimBsrElectedBSRGrpMappingGrpPrefixLen\r\ncontains the proper wording, copied to Corrected Text above.", "submit_date": "2008-06-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1439", "doc-id": "RFC5240", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5, pg.8", "orig_text": "-- The BSR Elected BSR RP-Set Table\r\n      ^^^^^", "correct_text": "-- The Elected BSR RP-Set Table", "notes": "Wrong/misleading SMI comment on top of page 8.\r\nThe table name should be used consistently; cf. Section 4, item 2.", "submit_date": "2008-06-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1440", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "   When the value of this counter reaches the protocol parameter\r\n   'Path.Max.Retrans', the endpoint should mark the corresponding\r\n   destination address as inactive if it is not so marked, and may also\r\n   optionally report to the upper layer the change of reachability of\r\n   this destination address.  After this, the endpoint should continue\r\n   HEARTBEAT on this destination address but should stop increasing the\r\n   counter.", "correct_text": "   When the value of this counter exceeds the protocol parameter\r\n   'Path.Max.Retrans', the endpoint should mark the corresponding\r\n   destination address as inactive if it is not so marked, and may also\r\n   optionally report to the upper layer the change of reachability of\r\n   this destination address.  After this, the endpoint should continue\r\n   HEARTBEAT on this destination address but should stop increasing the\r\n   counter.", "notes": "The path should be considered inactive, when the error counter exceeds\r\nthe threshold. This is stated correctly in 8.2.", "submit_date": "2008-06-12", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1447", "doc-id": "RFC5060", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5, pg.32 ff.", "orig_text": "", "correct_text": "", "notes": "The description clauses of many columnar objects in the\r\nPIM (*,G) State Table are underspecified:\r\nIf an object is \"used with\" a specific variant of PIM,\r\nwhat is the desired behavior for other variants?\r\n-  shall the object be instantiated or not?\r\n-  if yes, what's the default / substitute value in this case?\r\n-  shouldn't such defaults be listed in DEFAULT clauses ?\r\n\r\nSimilar deficiencies also exist in the descriptions of objects\r\nin other MIB tables in this MIB module.\n --VERIFIER NOTES-- \nI don't see this as underspecified at all. In fact, objects like pimSGPimMode\r\nand pimStaticRPPimMode are very specific in only supporting a limited range of\r\nmodes for the entire table. In effect, if another mode is in use, the table\r\ncannot be used  by definition.   ", "submit_date": "2008-06-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1453", "doc-id": "RFC5187", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2 / 7.2", "orig_text": "a)\r\nThe last paragraph of Section 3.2 (on top of page 5) says:\r\n\r\n|  Many implementations currently use the interface's MIB-II IfIndex\r\n|  [MIB-INTF] for Interface ID.  The persistence of Interface ID across\r\n|  reboots is described in section 3.1.5 of [MIB-PERS].\r\n\r\nb)\r\nSection 7.2 (on page 6) says:\r\n\r\n|  [MIB-INTF]     McCloghrie, K. and M. Rose, \"Management Information\r\n|                 Base for network management of TCP/IP-based internets:\r\n|                 MIB-II\", STD 17, RFC 1213, March 1991.\r\n\r\n|  [MIB-PERS]     McCloghrie, K. and F. Kastenholz, \"The Interfaces\r\n                  Group MIB\", RFC 2863, June 2000.\r\n", "correct_text": "a)\r\n\r\n|  Many implementations currently use the interface's SNMP MIB IfIndex\r\n|  [MIB-INTF] for Interface ID.  The persistence of Interface ID across\r\n   reboots is described in section 3.1.5 of [MIB-INTF].\r\n\r\nb)\r\n\r\n|  [MIB-INTF]     McCloghrie, K. and F. Kastenholz, \"The Interfaces\r\n                  Group MIB\", RFC 2863, June 2000.\r\n", "notes": "Unfortunately, the IETF maintains the questionable 'luxury' of\r\ntwo sets of Network Management Standards, where the second one\r\nactually has obsoleted the former one.\r\n\r\nAlthough all parts of RFC 1213 have either been obsoleted by\r\nnewer standards or deliberately been deprecated together with\r\nthe legacy protocols they were intended to support, STD 17\r\n(RFC 1213) [as well as STD 16] have been resurrected in\r\nrfcxx00.txt, including its latest RFC edition, RFC 5000.\r\n\r\nIn particular (omitting all intermediate RFCs now obsoleted as well),\r\n-  the basic part of RFC 1213 (\"host group\") has been replaced\r\n   by the SNMP MIB module in part 8 of STD 62, RFC 3418,\r\n-  the \"interface group\" has been obsoleted by RFC 2863,\r\n-  the \"IP group\" has been obsoleted by RFC 4293,\r\n-  the IP forwarding table has been obsoleted by RFC 4292,\r\n-  the \"TCP group\" has been obsoleted by RFC 4022,\r\n-  the \"UDP group\" has been obsoleted by RFC 4113.\r\n\r\nReferences to \"MIB-II\" and RFC 1213 are the source of frequent\r\nconfusion.\r\nTherefore, new RFCs, in particular STANDARDS TRACK RFCs, should\r\nnot quote RFC 1213 any more.\r\n\r\nIt is observed current policy of the MIB Doctors to have all new\r\nIETF documents defining MIB modules refer to the newer standards;\r\nbut RFC 5187, not defining a MIB module, apparently has not\r\nundergone MIB Doctor review.  Nevertheless, the confusing\r\nreference to \"MIB-II\" and a document outdated since many years\r\nshould have been avoided here as well.", "submit_date": "2008-06-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1468", "doc-id": "RFC4055", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   CAs that issue certificates with the id-RSASSA-PSS algorithm\r\n   identifier SHOULD require the presence of parameters in the\r\n   publicKeyAlgorithms field if the cA boolean flag is set in the basic\r\n   constraints certificate extension.  CAs MAY require that the\r\n   parameters be present in the publicKeyAlgorithms field for end-entity\r\n   certificates.\r\n", "correct_text": "   CAs that issue certificates with the id-RSASSA-PSS algorithm \r\n   identifier SHOULD require the presence of parameters in the \r\n   subjectPublicKeyInfo algorithm field if the cA boolean flag is set \r\n   in the basic constraints certificate extension.  CAs MAY require \r\n   that the parameters be present in the subjectPublicKeyInfo algorithm \r\n   field for end-entity certificates. ", "notes": "The correct name of the field is \"subjectPublicKeyInfo algorithm field\" as opposed to \"publicKeyAlgorithms field\". Note that this change is also included in the draft-ietf-pkix-rfc4055-update ID.", "submit_date": "2008-07-09", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1441", "doc-id": "RFC5240", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "a) In section 1 (2nd paragraph on pg. 2) :\r\n\r\n   This document was created by moving some of the PIM BSR-specific MIB\r\n|  tables from one of the earlier versions of PIM MIB [RFC5060].\r\n                                                          ^^^^\r\n\r\nb) 1st paragraph of Section 8  (on page 19) :\r\n\r\n   This MIB module is based on the original work in [RFC5060] by R.\r\n   Sivaramu, J. Lingard, and B. Joshi.\r\n", "correct_text": "a) In section 1 (2nd paragraph on pg. 2) :\r\n\r\n   This document was created by moving some of the PIM BSR-specific MIB\r\n|  tables from one of the earlier versions of the PIM MIB [RFC2934].\r\n|  Together with RFC 5060 [RFC5060], this document obsoletes RFC 2934.\r\n\r\nb) 1st paragraph of Section 8\r\n\r\n   This MIB module is based on the original work in [RFC2934] by K.\r\n   McCloghrie, D. Farinacci, D. Thaler, and B. Fenner.\r\n\r\n", "notes": "As explained in the body of RFC 5060, the material from RFC 2934\r\nhas been upgraded and split into two documents, RFC 5060, and now\r\nRFC 5240 for the PIM-BSR functionality, in the same way as the\r\nPIM-BSR protocol description has been separated from the basic\r\nPIM protocol desciption.\r\n\r\nUnfortunately, RFC 5240 does not restate these circumstances,\r\nand this omission apparently has lead to an improper reference\r\nupdate during the final publication process for RFC 5240,\r\nerroneously replacing the references to RFC 2934 by RFC 5060.\r\n\r\nThe front matter of RFC 5060 and RFC 5240 should better say:\r\n  Obsoletes: 2934\r\nand the text in the Introduction of RFC 5240 should contain\r\nthe details as proposed in the Corrected Text.\r\n\r\nAccordingly, the *Normative* Reference [RFC5060] ought to be demoted\r\nto Informative, and an additional Informative Reference to RFC 2934,\r\nwith tag [RFC2934], should have been added to Section 9.2.\r\n\r\nI suggest that, to clarify the circumstances, the RFC index metadata \r\nshould be updated by adding the relations\r\n     2934 Obsoleted by 5060\r\nand  2924 Obsoleted by 5240\r\nand the 'inverse' (Obsoletes) relations.", "submit_date": "2008-06-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1442", "doc-id": "RFC5240", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5, pg.10", "orig_text": "a)  pimBsrElectedBSRRPSetPriority\r\n\r\n       DESCRIPTION\r\n               \"The priority for RP.  [...]\r\n\r\nb)  pimBsrElectedBSRRPSetHoldtime\r\n\r\n       DESCRIPTION\r\n               \"The holdtime for RP\"", "correct_text": "a)  pimBsrElectedBSRRPSetPriority\r\n\r\n       DESCRIPTION\r\n|              \"The priority for this RP.  [...]\r\n                                 ^^^^^\r\n\r\nb)  pimBsrElectedBSRRPSetHoldtime\r\n\r\n       DESCRIPTION\r\n|              \"The holdtime for this RP.\"\r\n                                 ^^^^^  ^", "notes": "Clarification of context.", "submit_date": "2008-06-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1443", "doc-id": "RFC5240", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5., pg.13", "orig_text": "pimBsrCandidateBSRBootstrapTimer :\r\n\r\n       DESCRIPTION\r\n               \"The time remaining before the local router next\r\n               originates a Bootstrap message for this zone.\r\n               Value of this object is zero if\r\n               pimBsrCandidateBSRElectedBSR is 'FALSE'.\"\r\n", "correct_text": "       DESCRIPTION\r\n               \"The time remaining before the local router next\r\n               originates a Bootstrap message for this zone.\r\n|              The value of this object is zero if\r\n               pimBsrCandidateBSRElectedBSR is 'FALSE'.\"\r\n", "notes": "grammar/language improvement, uniform style.\r\n\r\n\r\nFurthermore, RFC 5240 unnecessarily and inadvertantly contains\r\nan almost blank page, pg. 20   ( Help save a tree!  :-) ).", "submit_date": "2008-06-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1444", "doc-id": "RFC3406", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "   Registrations may be revised by updating the RFC through standard\r\n   IETF RFC update processes (see [RFC2606] for a discussion of IETF\r\n   process).\r\n", "correct_text": "   Registrations may be revised by updating the RFC through standard\r\n   IETF RFC update processes (see [RFC2026] for a discussion of IETF\r\n   process).\r\n", "notes": "The references (section 7) list RFC 2026, not RFC 2606, as expected.", "submit_date": "2008-06-14", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1445", "doc-id": "RFC5060", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5, pg.12", "orig_text": "pimInvalidRegisterAddressType\r\n    ...\r\n    DESCRIPTION\r\n            \"The address type stored in pimInvalidRegisterOrigin,\r\n            pimInvalidRegisterGroup, and pimInvalidRegisterRp.\r\n            [...]", "correct_text": "pimInvalidRegisterAddressType\r\n    ...\r\n    DESCRIPTION\r\n|           \"The type of the addresses stored in\r\n            pimInvalidRegisterOrigin,\r\n            pimInvalidRegisterGroup, and pimInvalidRegisterRp.\r\n            [...]\r\n", "notes": "The Original Text is misleading.  No \"address type [is] stored\" in\r\nthe columnar objects  pimInvalidRegisterOrigin,\r\npimInvalidRegisterGroup, and pimInvalidRegisterRp; addresses are!\r\nThe addres type for these addresses is stored in\r\npimInvalidRegisterAddressType -- as its name says.\r\n\r\nType changed to Editorial", "submit_date": "2008-06-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1446", "doc-id": "RFC5060", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5, pg.20", "orig_text": "pimInterfaceTrigHelloInterval\r\n    ...\r\n    DESCRIPTION\r\n       ...\r\n       the 'Trigered_Hello_Delay' timer ...", "correct_text": "pimInterfaceTrigHelloInterval\r\n    ...\r\n    DESCRIPTION\r\n       ...\r\n       the 'Triggered_Hello_Delay' timer ...", "notes": "Typo yields invalid variable name / reference to the PIM-SM spec.", "submit_date": "2008-06-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1462", "doc-id": "RFC4004", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.6", "orig_text": "MIP-MN-to-HA-MSA ::= < AVP Header: 331 >\r\n                              { MIP-MN-HA-SPI }\r\n                              { MIP-Algorithm-Type }\r\n                              { MIP-Replay-Mode }\r\n                              { MIP-nonce }\r\n                            * [ AVP ]\r\n", "correct_text": "MIP-MN-to-HA-MSA ::= < AVP Header: 331 >\r\n                              { MIP-MN-to-HA-SPI }\r\n                              { MIP-Algorithm-Type }\r\n                              { MIP-Replay-Mode }\r\n                              { MIP-nonce }\r\n                            * [ AVP ]\r\n", "notes": "", "submit_date": "2008-07-08", "submitter_name": "Avi Lior", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1463", "doc-id": "RFC4490", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "Using the secret key corresponding to the originatorKey publicKey and\r\nthe recipient's public key, the algorithm VKO GOST R 34.10-94 or VKO\r\nGOST R 34.10-2001 (described in [CPALGS]) is applied to produce the\r\nKEK.", "correct_text": "Using the private key corresponding to the originatorKey publicKey and\r\nthe recipient's public key, the algorithm VKO GOST R 34.10-94 or VKO\r\nGOST R 34.10-2001 (described in [CPALGS]) is applied to produce the\r\nKEK.", "notes": "Russian-English terminology translation bug", "submit_date": "2008-07-09", "submitter_name": "Serguei Leontiev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2343", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "In the first paragraph on page 19, refers to a wrong subsection; it says:\r\n\r\n   The regToken control is used only for initialization of an end entity\r\n   into the PKI, whereas the authenticator control (see section 7.2) can\r\n                                                                ^\r\n   be used for the initial as well as subsequent certification requests.\r\n\r\nIt should say:\r\n\r\n   The regToken control is used only for initialization of an end entity\r\n   into the PKI, whereas the authenticator control (see section 6.2) can\r\n   be used for the initial as well as subsequent certification requests.", "correct_text": "[see above]     ", "notes": "Changed to editorial.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1448", "doc-id": "RFC5060", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5, pg.47/48", "orig_text": "pimSGUpstreamPruneState OBJECT-TYPE\r\n    SYNTAX     INTEGER {\r\n |                forwarding (1),\r\n                  ackpending (2),\r\n                  pruned (3)\r\n               }\r\n    ...\r\n    DESCRIPTION\r\n            \"Whether the local router has pruned itself from the tree.\r\n            This corresponds to the state of the upstream prune (S,G)\r\n|           state machine in the PIM-DM specification.  This object is\r\n|           used only by PIM-DM.\"", "correct_text": "", "notes": "The DESCRIPTION clause says:   \"This object is used only by PIM-DM.\"\r\nDoes this mean:   \"This object is only instantiated for PIM-DM.\"  ?\r\nOtherwise, the alternative:\r\n             noinfo(0),\r\nshould perhaps be allowed in the SYNTAX clause and be the DEFAULT.\r\n\r\nSimilar issues exist for the subsequent columnar objects, \r\npimSGUpstreamPruneLimitTimer, pimSGOriginatorState,\r\npimSGSourceActiveTimer, and pimSGStateRefreshTimer.\r\n\r\nAlso, there's no hint in the RFC why the other applicable\r\ntimers, GraftRetryTimer and OverrideTimer have not been\r\nmodeled in this MIB module.\n --VERIFIER NOTES-- \nThere are two issues in this Erratum...\r\n\r\n1. \"This object is only used...\"\r\n\r\n  I interpret this to mean that an attempt to read the object in\r\n  other cases would return an error. Thus I don't see a problem\r\n  with the current text, and reject this part of the Erratum\r\n\r\n2. \"other timers are not modelled\" Specifically:\r\n\r\n   GraftRetryTimer - I see pimInterfaceGraftRetryInterval\r\n   OverrideTimer - I see pimInterfaceOverrideInterval\r\n\r\n   The question is: why can't I see how the timer is running?\r\n   This looks like function that could have been added to the\r\n   MIB module, but was not.\r\n\r\n   However, someone who wants this function can add if they\r\n   feel inspired by revising the module or writing a new one.\r\n   ", "submit_date": "2008-06-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1449", "doc-id": "RFC5060", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5, pg.49 ff.", "orig_text": "...\r\n\r\npimSGIJoinPruneState OBJECT-TYPE\r\n    SYNTAX     INTEGER {\r\n|                 noInfo (1),\r\n|                 join (2),\r\n|                 prunePending (3)\r\n               }\r\n    MAX-ACCESS read-only\r\n    STATUS     current\r\n    DESCRIPTION\r\n            \"The state resulting from (S,G) Join/Prune messages\r\n|           received on this interface.  This corresponds to the state\r\n|           of the downstream per-interface (S,G) state machine in the\r\n|           PIM-SM and PIM-DM specification.\"\r\n    REFERENCE \"RFC 4601 section 4.5.3 and RFC 3973 section 4.4.2\"\r\n    ...\r\n\r\n...", "correct_text": "pimSGIJoinPruneState OBJECT-TYPE\r\n    SYNTAX     INTEGER {\r\n                  noInfo (1),\r\n                  join (2),\r\n                  prunePending (3),\r\n                  pruned (4)\r\n               }\r\n    MAX-ACCESS read-only\r\n    STATUS     current\r\n    DESCRIPTION\r\n            \"The state resulting from (S,G) Join/Prune messages\r\n            received on this interface.  This corresponds to the state\r\n            of the downstream per-interface (S,G) state machine in the\r\n            PIM-SM and PIM-DM specification.\"\r\n    REFERENCE \"RFC 4601 section 4.5.3 and RFC 3973 section 4.4.2\"\r\n    ::= { pimSGIEntry 4 }", "notes": "A fourth state is added to allow for the reporting of pruned state in PIM-DM.", "submit_date": "2008-06-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1450", "doc-id": "RFC5239", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.4, pg.27", "orig_text": "The 5th and the 6th paragraph on pg.27 both contain the clause:\r\n\r\n   ...\r\n   When using SDP offer/answer exchange to negotiate ...", "correct_text": "Both instances should say\r\neither:\r\n\r\n   ...\r\n   When using SDP offer/answer exchanges to negotiate ...\r\n                                       ^\r\nor (less preferable):\r\n\r\n   ...\r\n   When using SDP an offer/answer exchange to negotiate ...\r\n                  ^^^", "notes": "Grammar", "submit_date": "2008-06-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1451", "doc-id": "RFC5239", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.3,1st para", "orig_text": "                                           [...].  This kind of\r\n|  operation is called \"1st party signaling\" and they do not affect the\r\n   state of other participants in the conference.\r\n", "correct_text": "                                           [...].  This kind of\r\n|  operation is called \"1st party signaling\" and it does not affect the\r\n   state of other participants in the conference.\r\n                                                 ^^^^^^^", "notes": "Grammar: \"they do\" does not match \"This kind of operation\".", "submit_date": "2008-06-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1452", "doc-id": "RFC5239", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.6,2nd para", "orig_text": "   Figure 15 provides an example of one user \"Alice\" who's chairing a\r\n   fixed length conference with \"Bob\" and \"Carol\".  The configuration is\r\n|  such that only the chair is providing a warning when there are only\r\n                                     ^^^\r\n   10 minutes left in the conference.  At that time, \"Alice\" is moved\r\n   into a sidebar created by the conferencing system and only \"Alice\"\r\n   receives the announcement.\r\n", "correct_text": "   Figure 15 provides an example of one user \"Alice\" who's chairing a\r\n   fixed length conference with \"Bob\" and \"Carol\".  The configuration is\r\n|  such that only the chair is provided a warning when there are only\r\n                                     ^^\r\n   10 minutes left in the conference.  At that time, \"Alice\" is moved\r\n   into a sidebar created by the conferencing system and only \"Alice\"\r\n   receives the announcement.\r\n", "notes": "Typo distorting the proper sense of the text.\r\nSee also Figure 15 -- the warning is sent *to* \"Alice\".", "submit_date": "2008-06-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1464", "doc-id": "RFC4490", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "Using the secret key corresponding to the GostR3410-\r\nTransportParameters ephemeralPublicKey and the recipient's public\r\nkey, the algorithm VKO GOST R 34.10-94 or VKO GOST R 34.10-2001\r\n(described in [CPALGS]) is applied to produce the KEK.", "correct_text": "Using the private key corresponding to the GostR3410-\r\nTransportParameters ephemeralPublicKey and the recipient's public\r\nkey, the algorithm VKO GOST R 34.10-94 or VKO GOST R 34.10-2001\r\n(described in [CPALGS]) is applied to produce the KEK.", "notes": "Russian-English terminology translation bug", "submit_date": "2008-07-09", "submitter_name": "Serguei Leontiev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4853", "doc-id": "RFC6716", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "                                    rng\r\n                        rng = rng - --- * (fh - fl)\r\n                                    ft", "correct_text": "                                    rng\r\n                        rng = rng - --- * (ft - fh)\r\n                                    ft", "notes": "Equation should match with the one in the range decoder (section 4.1.2), however comparing the two and the reference implementation reveals the equation in section 5.1.1 to be incorrect.", "submit_date": "2016-11-02", "submitter_name": "Rostislav Pehlivanov", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1512", "doc-id": "RFC5337", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Heading", "orig_text": "Updates: 3461, 3464, 3798", "correct_text": "Updates: 3461, 3462, 3464, 3798", "notes": "Within Section 4, the text in the RFC on page 8 clearly updates the\r\ndefinition of the multipart/report media type defined in RFC 3642.\r\nThis should be made visible in the front matter and the metadata\r\nof the RFC.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1454", "doc-id": "RFC3092", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix", "orig_text": "   | 2818 |  X  |  X  |         |       | 190 |\r\n   | 2828 |     |  X  |    X    |       | 191 |\r\n   | 2830 |  X  |     |         |       | 192 |\r\n   | 2831 |  X  |  X  |    X    |       | 193 |\r\n   | 2839 |     |  X  |         |       | 194 |\r\n   | 2846 |  X  |  X  |         |       | 195 |\r\n   | 2853 |     |  X  |         |       | 196 |\r\n   | 2863 |     |  X  |         |       | 197 |\r\n   | 2910 |     |  X  |    X    |       | 198 |\r\n   | 2912 |     |  X  |    X    |       | 199 |\r\n   | 2915 |     |  X  |         |       | 200 |\r\n   | 2926 |     |     |    X    |       | 201 |\r\n   | 2942 |     |  X  |         |       | 202 |\r\n   | 2965 |     |  X  |         |       | 203 |\r\n   | 2967 |  X  |  X  |    X    |       | 204 |\r\n   | 2970 |     |  X  |         |       | 205 |\r\n   | 2993 |  X  |  X  |         |       | 206 |\r\n   | 3010 |  X  |  X  |         |       | 207 |\r\n   | 3023 |     |  X  |         |       | 208 |\r\n   | 3028 |     |  X  |         |       | 209 |\r\n   | 3075 |  X  |  X  |         |       | 210 |\r\n   | 3080 |     |  X  |         |       | 211 |\r\n   | 3092 |  X  |  X  |    X    |   X   | 212 |\r\n   +------+-----+-----+---------+-------+-----+\r\n   | RFC# | bar | foo | foo.bar | fubar |  #  |\r\n", "correct_text": "   | 2818 |  X  |  X  |         |       | 190 |\r\n   | 2821 |  X  |  X  |         |       | 191 |\r\n   | 2828 |     |  X  |    X    |       | 192 |\r\n   | 2830 |  X  |     |         |       | 193 |\r\n   | 2831 |  X  |  X  |    X    |       | 194 |\r\n   | 2839 |     |  X  |         |       | 195 |\r\n   | 2846 |  X  |  X  |         |       | 196 |\r\n   | 2853 |     |  X  |         |       | 197 |\r\n   | 2863 |     |  X  |         |       | 198 |\r\n   | 2910 |     |  X  |    X    |       | 199 |\r\n   | 2912 |     |  X  |    X    |       | 200 |\r\n   | 2915 |     |  X  |         |       | 201 |\r\n   | 2926 |     |     |    X    |       | 202 |\r\n   | 2942 |     |  X  |         |       | 203 |\r\n   | 2965 |     |  X  |         |       | 204 |\r\n   | 2967 |  X  |  X  |    X    |       | 205 |\r\n   | 2970 |     |  X  |         |       | 206 |\r\n   | 2993 |  X  |  X  |         |       | 207 |\r\n   | 3010 |  X  |  X  |         |       | 208 |\r\n   | 3023 |     |  X  |         |       | 209 |\r\n   | 3028 |     |  X  |         |       | 210 |\r\n   | 3075 |  X  |  X  |         |       | 211 |\r\n   | 3080 |     |  X  |         |       | 212 |\r\n   | 3092 |  X  |  X  |    X    |   X   | 213 |\r\n   +------+-----+-----+---------+-------+-----+\r\n   | RFC# | bar | foo | foo.bar | fubar |  #  |\r\n", "notes": "RFC 2821 contains foo.com (34 occurences), bar.com (18 occurences),\r\nbar.org (5 occurences), foo.org (4 occurences), and one foo-u.edu.", "submit_date": "2008-06-15", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1455", "doc-id": "RFC4745", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4", "orig_text": "   pair.  Times are expressed in XML dateTime format.", "correct_text": "   pair.  Times are expressed in XML dateTime [W3C-Schema] format with a\r\n   mandatory timezone.", "notes": "The reference to W3C Schema is normative.  The timezone needs to be mandatory\r\nin order to ensure interoperability.  An alternative would be to reference\r\nRFC 3339 normatively.", "submit_date": "2008-06-16", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1456", "doc-id": "RFC4741", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.5.1", "orig_text": "    <rpc message-id=\"101\"\r\n           xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n        <copy-config>\r\n          <source>\r\n            <running/>\r\n          </source>\r\n          <target>\r\n            <startup/>\r\n          </target>\r\n        </copy-config>\r\n      </rpc>", "correct_text": "   <rpc message-id=\"101\"\r\n           xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n        <copy-config>\r\n          <target>\r\n            <startup/>\r\n          </target>\r\n          <source>\r\n            <running/>\r\n          </source>\r\n        </copy-config>\r\n      </rpc>", "notes": "The parameters are in the wrong order.\r\nThe XSD and the example on page 40 are correct.", "submit_date": "2008-06-19", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1457", "doc-id": "RFC2183", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Boilerplate", "orig_text": "Network Working Group                                          R. Troost\r\nRequest for Comments: 2183                           New Century Systems\r\nUpdates: 1806                                                  S. Dorner\r\nCategory: Standards Track                          QUALCOMM Incorporated\r\n                                                        K. Moore, Editor\r\n                                                 University of Tennessee\r\n                                                             August 1997\r\n", "correct_text": "Network Working Group                                          R. Troost\r\nRequest for Comments: 2183                           New Century Systems\r\nObsoletes: 1806                                                S. Dorner\r\nCategory: Standards Track                          QUALCOMM Incorporated\r\n                                                        K. Moore, Editor\r\n                                                 University of Tennessee\r\n                                                             August 1997\r\n", "notes": "RFC 2183 completely replaces RFC 1806, so it should say \"obsoletes\" instead of \"updates\".", "submit_date": "2008-06-20", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1458", "doc-id": "RFC3448", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4, item (2)", "orig_text": "If the nofeedback timer expires when the sender does not yet have\r\nan RTT sample, and has not yet received any feedback from the\r\nreceiver,", "correct_text": "If the nofeedback timer expires when the sender does not yet have\r\nan RTT sample, and has not yet received any feedback from the\r\nreceiver, or when p == 0,", "notes": "(collected by Sally Floyd, 2004-06-11)", "submit_date": "2003-03-13", "submitter_name": "Mark Handley, from Wim Heirman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1459", "doc-id": "RFC3448", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5", "orig_text": "      for (i = 1 to n) {\r\n        DF_i = 1;\r\n      }", "correct_text": "      for (i = 0 to n) {\r\n        DF_i = 1;\r\n      }", "notes": "When initializing DF, initialize from 0 to n, not from 1 to n.\r\n\r\n(collected by Sally Floyd, 2004-06-11)", "submit_date": "2003-04-29", "submitter_name": "Michele R.", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1460", "doc-id": "RFC4920", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7,1 and 7.2", "orig_text": "Section 7.1:\r\n\r\n\"Path_State_Remove_Flag\"\r\n\r\nSection 7.2:\r\n\"Path_State_Remove Flag\"", "correct_text": "Both sections:\r\n\"Path_State_Removed flag ([RFC3473])\"", "notes": "", "submit_date": "2008-06-27", "submitter_name": "Lou Berger", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1461", "doc-id": "RFC4871", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "       sig-h-tag       = %x68 [FWS] \"=\" [FWS] hdr-name\r\n                     0*( *FWS \":\" *FWS hdr-name )\r\n", "correct_text": "       sig-h-tag       = %x68 [FWS] \"=\" [FWS] hdr-name\r\n                     0*( [FWS] \":\" [FWS] hdr-name )\r\n", "notes": "Confirmed by many occurrences of [FWS] in this section the intention is to allow optional \"folding white space\" with at most one folding.  Compare section 2.3 in this memo for the rationale; more than one folding is known as <obs-FWS> in RFC 2822 and MUST NOT be generated.", "submit_date": "2008-07-04", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4411", "doc-id": "RFC7555", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "<ToC>\r\n7.3. Downstream Address Mapping Registry .......................25\r\n\r\n<Section 7.3>\r\n7.3. Downstream Address Mapping Registry\r\n\r\n<Section 7.4>\r\nWhen a code point is assigned that is not also assigned in the\r\nDownstream Address Mapping Registry, the code point there must be\r\nmarked \"Reserved\".\r\n\r\nSection 7.4\r\n\r\n5        Reserved                                     RFC 7555\r\n6        IPv4 Protocol Adj       4          0         RFC 7555\r\n7        IPv6 Protocol Adj      16          0         RFC 7555\r\n\r\n\r\n", "correct_text": "<ToC>\r\n7.3. Downstream Mapping Address Type Registry ..................25\r\n\r\n<Section 7.3>\r\n7.3. Downstream Mapping Address Type Registry\r\n\r\n<Section 7.4>\r\nWhen a code point is assigned that is not also assigned in the\r\nDownstream Mapping Address Type Registry, the code point there \r\nmust be marked \"Reserved\".\r\n\r\n<Section 7.4>\r\n5       Reserved                                   [RFC 6426, RFC 7555]\r\n6       IPv4 Protocol Adj       4          0       [RFC 7555]\r\n7       IPv6 Protocol Adj      16          0       [RFC 7555]", "notes": "", "submit_date": "2015-07-08", "submitter_name": "Loa Andersson", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1469", "doc-id": "RFC2865", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3.", "orig_text": "      02 01 00 38 15 ef bc 7d ab 26 cf a3 dc 34 d9 c0\r\n      3c 86 01 a4 06 06 00 00 00 02 07 06 00 00 00 01\r\n      08 06 ff ff ff fe 0a 06 00 00 00 02 0d 06 00 00\r\n      00 01 0c 06 00 00 05 dc\r\n\r\n", "correct_text": "      02 01 00 38 E8 6F A2 FE 28 70 33 AD 2F 6D 5C A3\r\n      F7 41 5D A2 06 06 00 00 00 02 07 06 00 00 00 01\r\n      08 06 FF FF FF FE 0A 06 00 00 00 00 0D 06 00 00\r\n      00 01 0C 06 00 00 05 DC", "notes": "in Attributes, \"Framed-Routing\" came with value \"None\" (0)\r\nbut in Hex dump of packet the value for this attribute is \"Listen for routing packets\" (2)\r\n\r\nCorrect Hex Dump, or Attributes.\r\n\r\nCorrected Attributes is:\r\n\r\nAttributes:\r\n       6  Service-Type (6) = Framed (2)\r\n       6  Framed-Protocol (7) = PPP (1)\r\n       6  Framed-IP-Address (8) = 255.255.255.254\r\n       6  Framed-Routing (10) = Listen for routing packets (2)\r\n       6  Framed-Compression (13) = VJ TCP/IP Header Compression (1)\r\n       6  Framed-MTU (12) = 1500\r\n\r\n----------\r\n\r\nVERIFIER NOTE: Referenced section should be 7.2 and not 7.3\r\n", "submit_date": "2008-07-13", "submitter_name": "Isaac NickAein", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1470", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "17.2.2", "orig_text": "If the TU passes a final response (status codes 200-699) to the \r\nserver while in the \"Proceeding\" state, the transaction MUST enter \r\nthe \"Completed\" state...", "correct_text": "If the TU passes a final response (status codes 200-699) to the \r\nserver while in the \"Trying\" or \"Proceeding\" state, the transaction \r\nMUST enter the \"Completed\" state...", "notes": "\"17.2.2 Non-INVITE Server Transaction\" doesn't consider the case in which the transaction state is \"Trying\" and the transaction receives from the TU a final response.\r\nIt's totally possible that TU sends a final response without sending before a provisional response. Note that this case is perfectly valid in the diagram of page 139.", "submit_date": "2008-07-14", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1471", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "17", "orig_text": "Additionally, in the case of an INVITE request, the client\r\ntransaction is responsible for generating the ACK request for any\r\nfinal response accepting a 2xx response.", "correct_text": "Additionally, in the case of an INVITE request, the client\r\ntransaction is responsible for generating the ACK request for any\r\nfinal response excepting a 2xx response.", "notes": "\"accepting a 2xx response\" => \"excepting a 2xx response\"", "submit_date": "2008-07-14", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1472", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "25.1", "orig_text": "The TEXT-UTF8-TRIM rule is used for descriptive field \r\ncontents that are n t quoted strings,", "correct_text": "The TEXT-UTF8-TRIM rule is used for descriptive field \r\ncontents that are not quoted strings,", "notes": "\"are n t\" => \"are not\"", "submit_date": "2008-07-14", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1473", "doc-id": "RFC4357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "This algorithm creates a GOST 28147-89 key Kd, given GOST R 34.10-94\r\nor GOST R 34.10-2001 secret key K and diversification data D of size\r\n4..40 bytes.\r\n", "correct_text": "This algorithm creates a GOST 28147-89 key Kd, produced from given \r\n256-bit secret key K and diversification data D of size 4..40 bytes.\r\n", "notes": "In this place \"secret key\" means any key, which MUST NOT be used to \r\nprotect of raw data. For example, private keys, shared secret keys, \r\nwrap/unwrap keys, etc. \r\n\r\nRussian-English terminology translation bug", "submit_date": "2008-07-16", "submitter_name": "Serguei Leontiev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1474", "doc-id": "RFC2317", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "the the first component", "correct_text": "the first component", "notes": "", "submit_date": "2008-07-17", "submitter_name": "Justin Pryzby", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1475", "doc-id": "RFC5220", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1.7", "orig_text": "RFC 3041 defines a Temporary Address.", "correct_text": "RFC 4941 defines a Temporary Address.", "notes": "RFC 3041 has been obsoleted a few months before the publication of RFC 5220.", "submit_date": "2008-07-18", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1476", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.8.10.", "orig_text": "   <D:error>\r\n     <C:supported-filter>\r\n       <C:prop-filter name=\"X-ABC-GUID\"/>\r\n     </C:supported-filter>\r\n   </D:error>", "correct_text": "   <D:error xmlns:D=\"DAV:\" xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <C:supported-filter>\r\n       <C:prop-filter name=\"X-ABC-GUID\"/>\r\n     </C:supported-filter>\r\n   </D:error>", "notes": "Proper namespace declarations should be returned in the XML response.", "submit_date": "2008-07-20", "submitter_name": "Filip Navara", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1477", "doc-id": "RFC4826", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "    <xs:complexType name=\"externalType\">\r\n     <xs:sequence>\r\n      <xs:element name=\"display-name\" type=\"display-nameType\"\r\n       minOccurs=\"0\"/>\r\n      <xs:any namespace=\"##other\" processContents=\"lax\" minOccurs=\"0\"\r\n       maxOccurs=\"unbounded\"/>\r\n     </xs:sequence>\r\n     <xs:attribute name=\"anchor\" type=\"xs:anyURI\"/>\r\n     <xs:anyAttribute namespace=\"##other\" processContents=\"lax\"/>\r\n    </xs:complexType>", "correct_text": "    <xs:complexType name=\"externalType\">\r\n     <xs:sequence>\r\n      <xs:element name=\"display-name\" type=\"display-nameType\"\r\n       minOccurs=\"0\"/>\r\n      <xs:any namespace=\"##other\" processContents=\"lax\" minOccurs=\"0\"\r\n       maxOccurs=\"unbounded\"/>\r\n     </xs:sequence>\r\n     <xs:attribute name=\"anchor\" type=\"xs:anyURI\" use=\"required\"/>\r\n     <xs:anyAttribute namespace=\"##other\" processContents=\"lax\"/>\r\n    </xs:complexType>", "notes": "Normative text reads:\r\nThe <external> element has a single\r\n   mandatory attribute, \"anchor\", which specifies the external list by\r\n   means of an absolute HTTP URI.", "submit_date": "2008-07-22", "submitter_name": "Byron Campen", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1478", "doc-id": "RFC1183", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "you can discover it's Internet address", "correct_text": "you can discover its Internet address", "notes": "should be possessive not contractive.", "submit_date": "2008-07-23", "submitter_name": "Justin Pryzby", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1483", "doc-id": "RFC2616", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "   The Internet Assigned Numbers Authority (IANA) acts as a registry for\r\n   transfer-coding value tokens. Initially, the registry contains the\r\n   following tokens: \"chunked\" (section 3.6.1), \"identity\" (section\r\n   3.6.2), \"gzip\" (section 3.5), \"compress\" (section 3.5), and \"deflate\"\r\n   (section 3.5).\r\n", "correct_text": "   The Internet Assigned Numbers Authority (IANA) acts as a registry for\r\n   transfer-coding value tokens. Initially, the registry contains the\r\n   following tokens: \"chunked\" (section 3.6.1), \"identity\" (section\r\n   3.5), \"gzip\" (section 3.5), \"compress\" (section 3.5), and \"deflate\"\r\n   (section 3.5).\r\n", "notes": "The tokens for Content-Codings are defined in section 3.5. These include the identity token.", "submit_date": "2008-08-06", "submitter_name": "Martin Kong", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5185", "doc-id": "RFC7868", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.9.3.5", "orig_text": "across a network measured in measured in microseconds.    \r\n", "correct_text": "across a network measured in microseconds.", "notes": "Words  \"measured in\" is repeated twice at line number 3965 in section 6.9.3.5", "submit_date": "2017-11-21", "submitter_name": "Varadhan Venkataseshan", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1479", "doc-id": "RFC3281", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.6", "orig_text": "            SecurityCategory ::= SEQUENCE {\r\n                 type      [0]  IMPLICIT OBJECT IDENTIFIER,\r\n                 value     [1]  ANY DEFINED BY type\r\n            }", "correct_text": "           SecurityCategory ::= SEQUENCE {\r\n                 type      [0]  OBJECT IDENTIFIER,\r\n                 value     [1] EXPLICIT ANY DEFINED BY type\r\n            }", "notes": "It appears an error in the definition of SecurityCategory was introduced when it was taken from a module with EXPLICIT TAG default into a module with IMPLICIT TAG default.   In particular, the tag on the value MUST be EXPLICIT due to the ANY.  Otherwise the tag of the any would replace the value's tag.\r\n\r\nNote that extra IMPLICIT in the original text is merely extraneous (whereas the missing EXPLICIT is quite problematic).\r\n\r\nIt is also noted that clearance was NOT defined in X.501(1993), but X.500(1997).  However, X.501(2005) may be the best reference for clearance.", "submit_date": "2008-07-30", "submitter_name": "Kurt Zeilenga", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1480", "doc-id": "RFC5035", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "SecurityCategory ::= SEQUENCE {\r\n  type  [0] OBJECT IDENTIFIER,\r\n  value [1] ANY DEFINED BY type\r\n}", "correct_text": "SecurityCategory ::= SEQUENCE {\r\n  type  [0] OBJECT IDENTIFIER,\r\n  value [1] EXPLICIT ANY DEFINED BY type\r\n}", "notes": "The RFC incorporates a bad ASN.1 construction from X.411.  This construction was corrected in X.501 documents (see 2005).    The tag on the value must be EXPLICIT otherwise it will be replaced by whatever tag the type used in the ANY calls for.\n --VERIFIER NOTES-- \nAn implicit tagged followed by an open type is converted to an explicit tag followed by an open type by the compiler.", "submit_date": "2008-07-30", "submitter_name": "Kurt Zeilenga", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1481", "doc-id": "RFC3519", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "3.2 UDP Tunnel Reply Extension\r\n\r\n   This extension is a non-skippable extension.  It is sent in reply to\r\n   a UDP Tunnel Request extension, and indicates whether or not the HA\r\n   will use MIP UDP tunnelling for the current mobility binding.  The\r\n   format of this extension is as shown below.\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |    Length     |    Sub-Type   |  Reply Code   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |F|        Reserved             |     Keepalive Interval        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type                44\r\n\r\n   Length              6.  Length in bytes of this extension, not\r\n                       including the Type and Length bytes.\r\n\r\n   Sub-Type            0\r\n\r\n   Reply Code          Indicates whether the HA assents or declines\r\n                       to use UDP tunnelling for the current mobility\r\n                       binding.  See Section 3.2.1 below.", "correct_text": "", "notes": "In  RFC 3519 paragraph 3.2, the UDP Tunnel Reply Extension is specified as a non-skippable with type = 44. However the extension is specified in the \"Short Extension Format\", which should be used for skippable extensions according to RFC 3344 paragraph 1.11.\n --VERIFIER NOTES-- \nRFC 3344 paragraph 1.11 specifies that the short extension format\r\nmust be used by skippable extensions. It doesn't say mean that the format is only used by skippable extensions (i.e., the short extension format can be used by non-skippable extensions).", "submit_date": "2008-08-06", "submitter_name": "Manish Yadav", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1482", "doc-id": "RFC3344", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1.10", "orig_text": "1.10.  Long Extension Format\r\n\r\n   This format is applicable for non-skippable extensions which carry\r\n   information more than 256 bytes.\r\n", "correct_text": "1.10.  Long Extension Format\r\n\r\n   This format is applicable for any extension (skippable or non-skippable) which carry information more than 256 bytes.", "notes": "As per description in 1.11 \r\n\"   This format is compatible with the skippable extensions defined in\r\n   section 1.9.  It is not applicable for extensions which require more\r\n   than 256 bytes of data; for such extensions, use the format described\r\n   in section 1.10.\"\r\n\r\nHowever 1.10 specifies that it is applicable to only non-skippable extensions, so what would be the format for skippable extensions of size more than 256 bytes?\r\n\r\nThe correction will specify that any extension (skippable or non-skippable) shall use long format if its length is more than 256 bytes.\n --VERIFIER NOTES-- \nPete McCann, chair of MIP4 held a discussion about this in the WG and the conclusion was that the errata should be rejected.", "submit_date": "2008-08-06", "submitter_name": "Keshav Chawla", "verifier_id": "", "verifier_name": "Jari Arkko", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2344", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "In the upper half of page 20, says:\r\n\r\n   The fields of PKIPublicationInfo have the following meaning:\r\n\r\n      action indicates whether or not the requestor wishes the CA/RA to\r\n      publish the certificate.  The values and their means are:\r\n                                                        ^^\r\n\r\nIt should say:\r\n\r\n   The fields of PKIPublicationInfo have the following meaning:\r\n\r\n      action indicates whether or not the requestor wishes the CA/RA to\r\n      publish the certificate.  The values and their meanings are:", "correct_text": "[see above]     ", "notes": "Changed to editorial.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1628", "doc-id": "RFC4742", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "IANA is also requested to assign \"netconf\" as an SSH Service Name as\r\ndefined in [RFC4250], as follows:\r\n\r\n         Service Name                  Reference\r\n         -------------                 ---------\r\n         netconf                       RFC 4742\r\n", "correct_text": "IANA is also requested to assign \"netconf\" as an SSH Connection\r\nProtocol Subsystem Name as defined in [RFC4250], as follows:\r\n\r\n         Subsystem Name                Reference\r\n         -------------                 ---------\r\n         netconf                       RFC 4742\r\n", "notes": "The IANA registry (http://www.iana.org/assignments/ssh-parameters)\r\nalso needs to be fixed.", "submit_date": "2008-12-04", "submitter_name": "Pasi Eronen", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2070", "doc-id": "RFC3056", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   The motivation for this method is to allow isolated IPv6 domains or\r\n   hosts, attached to an IPv4 network which has no native IPv6 support,\r\n   to communicate with other such IPv6 domains or hosts with minimal\r\n   manual configuration, before they can obtain natuve IPv6\r\n   connectivity. ", "correct_text": "   The motivation for this method is to allow isolated IPv6 domains or\r\n   hosts, attached to an IPv4 network which has no native IPv6 support,\r\n   to communicate with other such IPv6 domains or hosts with minimal\r\n   manual configuration, before they can obtain native IPv6\r\n   connectivity. ", "notes": "s/natuve/native/", "submit_date": "2010-03-09", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2071", "doc-id": "RFC5639", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "      p_320 = 1763593322239166354161909842446019520889512772719515192772\r\n      9604152886408688021498180955014999035278\r\n", "correct_text": "      p_320 = 1763593322239166354161909842446019520889512772719515192772\r\n      960415288640868802149818095501499903527\r\n", "notes": "", "submit_date": "2010-03-10", "submitter_name": "Johannes Merkle", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1484", "doc-id": "RFC2544", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "C.2.4.1 Lear", "orig_text": "   This request should be\r\n   seen as coming from the immediate destination of the test frame\r\n   stream. (i.e. the phantom router (Figure 2) or the end node if\r\n   adjacent network routing is being used.) It is assumed that the\r\n   router will cache the MAC address of the requesting device.  The ARP\r\n   request should be sent 5 seconds before the test frame stream starts\r\n   in each trial.  Trial lengths of longer than 50 seconds may require\r\n   that the router be configured for an extended ARP timeout.\r\n          +--------+            +------------+\r\n          |        |            |  phantom   |------ P LAN A\r\nIN A------|   DUT  |------------|            |------ P LAN B\r\n          |        |   OUT A    |  router    |------ P LAN C\r\n          +--------+            +------------+\r\n\r\n                                 Figure 2\r\n", "correct_text": "   This request should be\r\n   seen as coming from the immediate destination of the test frame\r\n   stream. (i.e. the phantom router (Figure 4) or the end node if\r\n   adjacent network routing is being used.) It is assumed that the\r\n   router will cache the MAC address of the requesting device.  The ARP\r\n   request should be sent 5 seconds before the test frame stream starts\r\n   in each trial.  Trial lengths of longer than 50 seconds may require\r\n   that the router be configured for an extended ARP timeout.\r\n          +--------+            +------------+\r\n          |        |            |  phantom   |------ P LAN A\r\nIN A------|   DUT  |------------|            |------ P LAN B\r\n          |        |   OUT A    |  router    |------ P LAN C\r\n          +--------+            +------------+\r\n\r\n                                 Figure 4\r\n", "notes": "", "submit_date": "2008-08-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1485", "doc-id": "RFC4151", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "      emailAddress = 1*(alphaNum /\"-\"/\".\"/\"_\") \"@\" DNSname", "correct_text": "      emailAddress = addr-spec\r\n                     ; addr-spec from RFC 2822/5322", "notes": "The syntax as specified does not allow characters such as + which are commonly found in email addresses.\r\n\r\nAlexey: this is not quite right either, as addr-spec allows various characters that need %-encoding in URIs.\r\n", "submit_date": "2008-08-08", "submitter_name": "Tony Finch", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1486", "doc-id": "RFC4253", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "         SSH_MSG_DISCONNECT             1\r\n         SSH_MSG_IGNORE                 2\r\n         SSH_MSG_UNIMPLEMENTED          3\r\n         SSH_MSG_DEBUG                  4\r\n         SSH_MSG_SERVICE_REQUEST        5\r\n         SSH_MSG_SERVICE_ACCEPT         6\r\n         SSH_MSG_KEXINIT                20\r\n         SSH_MSG_NEWKEYS                21\r\n", "correct_text": "         SSH_MSG_DISCONNECT             1\r\n         SSH_MSG_IGNORE                 2\r\n         SSH_MSG_UNIMPLEMENTED          3\r\n         SSH_MSG_DEBUG                  4\r\n         SSH_MSG_SERVICE_REQUEST        5\r\n         SSH_MSG_SERVICE_ACCEPT         6\r\n         SSH_MSG_KEXINIT                20\r\n         SSH_MSG_NEWKEYS                21\r\n         SSH_MSG_KEXDH_INIT             30\r\n         SSH_MSG_KEXDH_REPLY            31\r\n", "notes": "This errata combines the partial errata reported by Denis Bider (errata ID 152 on 2006-01-23) and Dwayne Litzenberger (errata ID 1408 on 2008-04-11).", "submit_date": "2008-08-08", "submitter_name": "Pasi Eronen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2072", "doc-id": "RFC5819", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.", "orig_text": "[ second example, near the bottom of page 3 ]\r\n\r\n|  C: A02 LIST (SUBSCRIBED RECURSIVEMATCH)\"\" % RETURN (STATUS\r\n      (MESSAGES))\r\n   S: * LIST (\\Subscribed) \".\"  \"INBOX\"\r\n   S: * STATUS \"INBOX\" (MESSAGES 17)\r\n   S: * LIST () \".\" \"foo\" (CHILDINFO (\"SUBSCRIBED\"))\r\n   S: A02 OK List completed.", "correct_text": "                                          v\r\n|  C: A02 LIST (SUBSCRIBED RECURSIVEMATCH) \"\" % RETURN (STATUS\r\n       (MESSAGES))\r\n      ^\r\n   S: * LIST (\\Subscribed) \".\"  \"INBOX\"\r\n   S: * STATUS \"INBOX\" (MESSAGES 17)\r\n   S: * LIST () \".\" \"foo\" (CHILDINFO (\"SUBSCRIBED\"))\r\n   S: A02 OK List completed.", "notes": "2 significant space character missing.", "submit_date": "2010-03-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2073", "doc-id": "RFC5654", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5.4", "orig_text": "83  The external controls as defined in [RFC4427] MUST be supported.\r\n\r\n       A.  External controls overruled by higher priority requests\r\n           (e.g., administrative requests and requests due to link/node\r\n           failures) or unable to be signaled to the remote end (e.g.,\r\n           due to a coordination failure of the protection state) MUST\r\n           be dropped.\r\n", "correct_text": "83  The external controls as defined in [RFC4427] MUST be supported.\r\n\r\n       A.  External controls overruled by higher priority requests\r\n           (e.g., administrative requests and requests due to link/node\r\n           failures) or unable to be signaled to the remote end (e.g.,\r\n           due to a coordination failure of the protection state) MUST\r\n           be ignored.\r\n", "notes": "Dropping a control is meaningless.  The original intent may have been to say \"control messages\", but this requirement is stated in the section \"Management-Plane Operation of Protection and Restoration\"\r\n\r\nIn any case, using \"ignored\" instead of \"dropped\" fixes the problem regardless of the original intention.", "submit_date": "2010-03-12", "submitter_name": "Eric Gray", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2075", "doc-id": "RFC5738", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4, 3rd para", "orig_text": "   IMAP servers that do not advertise the \"UTF8=APPEND\" or \"UTF8=ONLY\"\r\n|  capability SHOULD reject an APPEND command that includes any 8-bit in\r\n|  the message headers with a \"NO\" response.\r\n", "correct_text": "   IMAP servers that do not advertise the \"UTF8=APPEND\" or \"UTF8=ONLY\"\r\n|  capability SHOULD reject an APPEND command that includes any 8-bit\r\n|  character in message header fields with a \"NO\" response.\r\n\r\nor:\r\n\r\n   IMAP servers that do not advertise the \"UTF8=APPEND\" or \"UTF8=ONLY\"\r\n|  capability SHOULD reject an APPEND command that includes any 8-bit\r\n|  character in a message header with a \"NO\" response.\r\n", "notes": "Rationale: improved language and precise terminology", "submit_date": "2010-03-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2094", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": " - the value of S1 is written into the first bit of N1;\r\n\r\n   - the value of S2 is written into the second bit of N1 (etc.);\r\n\r\n   - the value of S32 is written into the 32nd bit of N1;\r\n\r\n   - the value of S33 is written into the first bit of N2;\r\n\r\n   - the value of S34 is written into the 33th bit of N2 (etc.);\r\n\r\n   - the value of S64 is written into the 32nd bit of N2.\r\n", "correct_text": " - the value of S1 is written into the first bit of N1;\r\n\r\n   - the value of S2 is written into the second bit of N1 (etc.);\r\n\r\n   - the value of S32 is written into the 32nd bit of N1;\r\n\r\n   - the value of S33 is written into the first bit of N2;\r\n\r\n   - the value of S34 is written into the second bit of N2 (etc.);\r\n\r\n   - the value of S64 is written into the 32nd bit of N2.\r\n", "notes": "", "submit_date": "2010-03-23", "submitter_name": "V. Dolmatov", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2395", "doc-id": "RFC4985", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "  -- In the GeneralName definition using the 1993 ASN.1 syntax\r\n\r\n", "correct_text": "\r\n  -- The GeneralName definition using the 1993 ASN.1 syntax\r\n\r\n", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1487", "doc-id": "RFC4871", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "   v=  Version of the DKIM key record (plain-text; RECOMMENDED, default\r\n       is \"DKIM1\").  If specified, this tag MUST be set to \"DKIM1\"\r\n       (without the quotes).  This tag MUST be the first tag in the\r\n       record.  Records beginning with a \"v=\" tag with any other value\r\n       MUST be discarded.  Note that verifiers must do a string\r\n       comparison on this value; for example, \"DKIM1\" is not the same as\r\n       \"DKIM1.0\".\r\n\r\n       ABNF:\r\n\r\n       key-v-tag    = %x76 [FWS] \"=\" [FWS] \"DKIM1\"", "correct_text": "   v=  Version of the DKIM key record (plain-text; RECOMMENDED, default\r\n       is \"DKIM1\").  If specified, this tag MUST be set to \"DKIM1\"\r\n       (without the quotes).  This tag MUST be the first tag in the\r\n       record.  Records beginning with a \"v=\" tag with any other value\r\n       MUST be discarded.  Note that verifiers must do a string\r\n       comparison on this value; for example, \"DKIM1\" is not the same as\r\n       \"DKIM1.0\".\r\n\r\n       ABNF:\r\n\r\n       key-v-tag    = %x76 [FWS] \"=\" [FWS] %x44 %x4B %x49 %x4D %x31", "notes": "RFC5234 section 2.3 says string literals in ABNF are case-insensitive.  However, RFC4871 section 3.2 says tag values are case-sensitive unless stated otherwise.  This renders the defintion of \"v=\" in section 3.6.1 of this RFC ambiguous.\r\n\r\nTherefore, one interpretation of \"DKIM1\" here allows \"dkim1\" and one does not.\r\n\r\nEither the \"case-sensitive\" nature of tag values should be changed, or the ABNF needs to be revised to be more precise.", "submit_date": "2008-08-14", "submitter_name": "Murray S. Kucherawy", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1488", "doc-id": "RFC2544", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "26.2", "orig_text": "The latency is timestamp B minus timestamp A as per the relevant definition frm RFC 1242, namely latency as defined for store and forward devices or latency as defined for bit forwarding devices.\r\n", "correct_text": "The latency is timestamp B minus timestamp A as per the relevant definition from RFC 1242, namely latency as defined for store and forward devices or latency as defined for bit forwarding devices.\r\n", "notes": "", "submit_date": "2008-08-15", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1489", "doc-id": "RFC5252", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1,1st para", "orig_text": "{at the end of the first paragraph, line 2 on page 8}\r\n\r\n    ... advertised by a specific TE.\r\n                                 ^", "correct_text": "    ... advertised by a specific PE.\r\n                                 ^", "notes": "distorting typo:   TE = Traffic Engineering,\r\n                   PE = Provider Edge {Router}", "submit_date": "2008-08-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1490", "doc-id": "RFC2544", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "C.2.4.2", "orig_text": "   If the test does not involve adjacent net routing the tester must\r\n   supply proper routing information using a routing update.  A single\r\n   routing update is used before each trial on each \"destination\" port\r\n   (see section C.24).", "correct_text": "   If the test does not involve adjacent net routing the tester must\r\n   supply proper routing information using a routing update.  A single\r\n   routing update is used before each trial on each \"destination\" port\r\n   (see section C.2.6.2).", "notes": "", "submit_date": "2008-08-19", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1491", "doc-id": "RFC2965", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "   [Netscape] \"Persistent Client State -- HTTP Cookies\", available at\r\n              <http://www.netscape.com/newsref/std/cookie_spec.html>,\r\n              undated.\r\n", "correct_text": "   [Netscape] \"Persistent Client State -- HTTP Cookies\", available at\r\n              <http://www.netscape.com/newsref/std/cookie_spec.html>,\r\n              undated.\r\n\r\n              Copy avalaible at <http://curl.haxx.se/rfc/cookie_spec.html>\r\n", "notes": "The original URL at www.netscape.com, so it would be good to point readers to an available copy of the document.", "submit_date": "2008-08-20", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1492", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "         See RFC 793 for the definition of the TCP\r\n         source port field.", "correct_text": "         See RFC 793 for the definition of the TCP\r\n         destination port field.", "notes": "This is for elementId=\"183\".", "submit_date": "2008-08-21", "submitter_name": "Simon Perreault", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1493", "doc-id": "RFC3028", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   actually a separate command in terms of the grammar.  However, an\r\n   elsif MUST only follow an if, and an else MUST follow only either an\r\n   if or an elsif.  An error occurs if these conditions are not met.\r\n", "correct_text": "   actually a separate command in terms of the grammar.  However, an\r\n   elsif or an else MUST only follow an if or an elsif.  An error occurs\r\n   if these conditions are not met.\r\n", "notes": "Peter: Fixed in RFC 5228.", "submit_date": "2008-08-21", "submitter_name": "Costin Chirvasuta", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1760", "doc-id": "RFC1036", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.5", "orig_text": "    This command should generate a\r\n    \"Subject\" line which is the same as the original message, except\r\n    that if the original subject does not begin with \"Re:\" or \"re:\", the\r\n    four characters \"Re:\" are inserted before the subject. ", "correct_text": "   This command should generate a \r\n   \"Subject\" line which is the same as the original message, except \r\n   that if the original subject does not begin with \"Re: \" or \"re: \",\r\n   the four characters \"Re: \" are inserted before the subject.", "notes": "Space has been omitted three times. Please compare with original text in RFC850 to confirm that the spaces should be there. (http://www.w3.org/Protocols/rfc850/rfc850.html)\r\n\r\nAlexey: also see RFC 5322.", "submit_date": "2009-04-09", "submitter_name": "Hans Bot", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2419", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "Througout the sample source code, ANSI-C style is used for the\r\nfunction prototypes, i.e. giving type and name for function\r\narguments.  This rule is broken on mid-page 25, just below\r\nthe offending snippit from item (5) above.\r\nFor consistency and portability, the source code fragment:\r\n\r\n/* Local Function Prototypes */\r\nstatic void SHA1Finalize(SHA1Context *context, uint8_t Pad_Byte);\r\nstatic void SHA1PadMessage(SHA1Context *, uint8_t Pad_Byte);\r\nstatic void SHA1ProcessMessageBlock(SHA1Context *);\r\n\r\nshould better say, amending the last two lines:\r\n\r\n/* Local Function Prototypes */\r\nstatic void SHA1Finalize(SHA1Context *context, uint8_t Pad_Byte);\r\nstatic void SHA1PadMessage(SHA1Context *context, uint8_t Pad_Byte);\r\nstatic void SHA1ProcessMessageBlock(SHA1Context *context);", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2095", "doc-id": "RFC5616", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Title", "orig_text": "Streaming Internet Messaging Attachments", "correct_text": "Internet Message Access Protocol (IMAP): Streaming Message Attachments", "notes": "In order to more easily locate the document, it would\r\nhave been very useful for prospective readers to find the primary\r\nprotocol to which this RFC relates mentioned already in the\r\ndocument title.\r\n", "submit_date": "2010-03-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1495", "doc-id": "RFC4235", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.7.1", "orig_text": "[...]\r\nnon-2xx response for any other reason, all FSMs spawned from that\r\nINVITE transition to the Terminated state with the event \"rejected\".\r\n\r\n--------------\r\n\r\n[...]\r\nIf the UAS receives a CANCEL\r\nrequest and then generates a 487 response to the INVITE (which can\r\noccur in the Proceeding and Early states), the FSM transitions to the\r\nTerminated state with the event \"cancelled\".", "correct_text": "[...]\r\nnon-2xx response for any other reason, all FSMs spawned from that\r\nINVITE transition to the Terminated state with the event \"rejected\".\r\nDuring Early state the FSM transitions to the Terminate state if the UAC sends a BYE (corresponding to \"local-bye\" event).\r\n\r\n-------------\r\n\r\n[...]\r\nIf the UAS receives a CANCEL\r\nrequest and then generates a 487 response to the INVITE (which can\r\noccur in the Proceeding and Early states), the FSM transitions to the\r\nTerminated state with the event \"cancelled\".\r\nIf the UAS receives a BYE request during the Early state the FSM transitions to the Terminated state with the event \"remote-bye\".", "notes": "Section 3.7.1 (The Dialog State Machine) and the Figure 3 forget the case in which a UAC sends a BYE during an early-dialog as RFC3261 allows:\r\n\r\nRFC 3261: \r\n ----------------\r\n 15 Terminating a Session\r\n   When a BYE is received on a dialog, any session\r\n   associated with that dialog SHOULD terminate.  A UA MUST NOT send a\r\n   BYE outside of a dialog.  The caller's UA MAY send a BYE for either\r\n   confirmed or early dialogs, and the callee's UA MAY send a BYE on\r\n   confirmed dialogs, but MUST NOT send a BYE on early dialogs.\r\n ----------------\r\n\r\nSo it should be a new row in Figure 3 from \"Early\" to \"Terminate\" labeled \"local-bye/remote-bye\". It would be \"local-bye\" in case of UAC and \"remote-bye\" in case of UAS.", "submit_date": "2008-08-26", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1496", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.9", "orig_text": "CLOSE CALL\r\n\r\n\r\n  CLOSE-WAIT STATE\r\n    Queue this request until all preceding SENDs have been segmentized;then send a FIN segment,enter CLOSING state.\r\n\r\n  CLOSING STATE\r\n  LAST-ACK STATE\r\n  TIME-WAIT STATE\r\n  \r\n    Respond with \"error: connection closing\".", "correct_text": "CLOSE CALL\r\n\r\n\r\n  CLOSE-WAIT STATE\r\n    Queue this request until all preceding SENDs have been segmentized;then send a FIN segment,enter LAST-ACK  state.\r\n\r\n  CLOSING STATE\r\n  LAST-ACK STATE\r\n  TIME-WAIT STATE\r\n  \r\n    Respond with \"error: connection closing\".", "notes": "In Page 23,Figure 6.\"TCP Connection State Diagram\",illustrates the state change from \"CLOSE-WAIT\" TO \"LAST-ACK\",together with the causing event \"CLOSE\".\n --VERIFIER NOTES-- \nRFC 1122 updates RFC 793 and includes the changes noted in this errata already in section 4.2.2.20.", "submit_date": "2008-08-27", "submitter_name": "Yin Shuming", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1497", "doc-id": "RFC2445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.10", "orig_text": "   Example: \r\n \r\n     SUMMARY;LANGUAGE=us-EN:Company Holiday Party", "correct_text": "   Example: \r\n \r\n     SUMMARY;LANGUAGE=en-US:Company Holiday Party", "notes": "There is no \"us-EN\" language tag. See RFC 5646 for more details.\r\n", "submit_date": "2008-09-02", "submitter_name": "S\u00f8ren L\u00f8vborg", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1498", "doc-id": "RFC5295", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.5", "orig_text": "                           v \r\n                                                    [...].  Setting a\r\n|  key lifetime shorter that a system lifetime may result in keys\r\n   becoming invalid with no convenient way to refresh them.  [...]", "correct_text": "                           v\r\n                                                     [...].  Setting a\r\n|  key lifetime shorter than a system lifetime may result in keys\r\n   becoming invalid with no convenient way to refresh them.  [...]", "notes": "", "submit_date": "2008-09-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1499", "doc-id": "RFC5295", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8, pg.16", "orig_text": "   The keywords \"Private Use\", \"Specification Required\", and \"IETF\r\n|  Consensus\" that appear in this document when used to describe\r\n   ^^^^^^^^^\r\n   namespace allocation are to be interpreted as described in [RFC5226].", "correct_text": "   The keywords \"Private Use\", \"Specification Required\", and \"IETF\r\n|  Review\" that appear in this document when used to describe namespace\r\n   ^^^^^^\r\n   allocation are to be interpreted as described in [RFC5226].", "notes": "RFC 5226 has purposely changed the terminology.\r\nUpdating the Ref. to RFC 5226 hence should have been accompanied by\r\nupgrading the terminology.\r\n\r\nThis same issue recurs in the third line of Section 8.2 of RFC 5295.", "submit_date": "2008-09-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1500", "doc-id": "RFC3659", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.7.4", "orig_text": "7.7.4.  A More Complex Example\r\n ...\r\nC> MLSD test\r\nS> 150 BINARY connection open for MLSD test\r\nD> Type=cdir;Perm=el;Unique=keVO1+ZF4; test\r\nD> Type=pdir;Perm=e;Unique=keVO1+d?3; ..\r\nD> Type=OS.unix=slink:/foobar;Perm=;Unique=keVO1+4G4; foobar\r\n", "correct_text": "7.7.4.  A More Complex Example\r\n ...\r\nC> MLSD test\r\nS> 150 BINARY connection open for MLSD test\r\nD> Type=cdir;Perm=el;Unique=keVO1+ZF4; test\r\nD> Type=pdir;Perm=e;Unique=keVO1+d?3; ..\r\nD> Type=OS.unix=symlink;Perm=;Unique=keVO1+4G4; foobar\r\n     ... more lines ...\r\nD> Type=dir;Perm=;Unique=keVO1+4G4; /foobar; does originally point to here\r\n", "notes": "The sample sequence in chapter 7.7.4 uses an example which is completely wrong, because it violates the basic BNF rules of its own document.\r\n\r\nPlease, see the definition, which is violated:\r\n\r\n7.2.  Format of MLSx Response\r\nThe format of a response to an MLSx command is as follows:\r\n      ...\r\n      entry            = [ facts ] SP pathname\r\n      facts            = 1*( fact \";\" )\r\n      fact             = factname \"=\" value\r\n      ...\r\n\r\nRemember, a fact may not contain \";\" or SPC (\" \")!\r\nNow take a look into the bad example:\r\n\r\n\r\n7.7.4.  A More Complex Example\r\n ...\r\n\tC> MLSD test\r\n\tS> 150 BINARY connection open for MLSD test\r\n\tD> Type=cdir;Perm=el;Unique=keVO1+ZF4; test\r\n\tD> Type=pdir;Perm=e;Unique=keVO1+d?3; ..\r\n\tD> Type=OS.unix=slink:/foobar;Perm=;Unique=keVO1+4G4; foobar\r\n\r\n\r\nthe last line uses the fact \"Type=OS.unix=slink:/foobar;\". While this line in special not violates the rules at the moment, it implies that \"Type=OS.unix=slink:\" starts printing the original link target of any given symbolic link. Not wrong till here, but in case a link points to an original directory which name contains a \";\" or, most worse, a \"; \" sequence, it will \r\nlead any client side PI into misinterpretation of the line.\r\n\r\nEven more worse, some actual public servers already use this bad syntax. Some can be found at least in the Swiss. It looks like they are running proftpd under Linux operating system, but this is unconfirmed for now.\r\n\r\n\r\nSolution:\r\n\r\nThe chapter 7 of the same document allows another approach to tell the client about the original destination of a symlink. This solution uses two lines of answer, see my example:\r\n\r\n\tC> MLSD test\r\n\tS> 150 BINARY connection open for MLSD test\r\n\tD> Type=cdir;Perm=el;Unique=keVO1+ZF4; test\r\n\tD> Type=pdir;Perm=e;Unique=keVO1+d?3; ..\r\n\tD> Type=OS.unix=symlink;Perm=;Unique=keVO1+4G4; foobar points somewhere else\r\n     ... more lines ...\r\n\tD> Type=dir;Perm=;Unique=keVO1+4G4; /foobar; does originally point to here\r\n\r\nbecause of the \"Unique\" fact, a client PI can now collect all lines with the fact \"Type=OS.unix=symlink\" and file it under an associative array (map, hastable) with \"keVO1+4G4\" as the access key. Once the client side parser again gets \"Unique=keVO1+4G4\", it now can record \"/foobar; does point to here\" as the original point where foobar points to.\r\n\r\nThis is exactly, what chapter 7.5.1.5 defines about the \"Unique\" fact. Please read:\r\n   Note: Where the underlying system supports a file type that is\r\n   essentially an indirect pointer to another file, the NVFS\r\n   representation of that type should normally be to represent the file\r\n   that the reference indicates.  That is, the underlying basic file\r\n   will appear more than once in the NVFS, each time with the \"unique\"\r\n   fact (see immediately following section) containing the same value,\r\n   indicating that the same file is represented by all such names.\r\n\r\n\r\nUseful to say, setting the slink into double quotes like suggested by some developers:\r\n\r\n\tD> Type=OS.unix=\"slink:/foobar\";Perm=;Unique=keVO1+4G4; foobar\r\n\r\nwould violate the same documents BNF rules (see RCHAR), as well it would require escaping of any DQUOTE in the link pathname itself. This, again, would violate RFC959 which not defines escaping of characters.\r\n\r\n\r\nFinally, FTP does not support 2 pathnames at the same line at all. This convention sould never been broken.", "submit_date": "2008-09-02", "submitter_name": "Maik Rei\u00df (Reiss)", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1785", "doc-id": "RFC4868", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7.2.3", "orig_text": "Test Case AUTH512-4:\r\n   Key =          0a0b0c0d0e0f10111213141516171819\r\n                  0102030405060708090a0b0c0d0e0f10\r\n                  1112131415161718191a1b1c1d1e1f20\r\n                  2122232425262728292a2b2c2d2e2f30\r\n                  3132333435363738393a3b3c3d3e3f40  (64 bytes)\r\n", "correct_text": "Test Case AUTH512-4:\r\n   Key =          0102030405060708090a0b0c0d0e0f10\r\n                  1112131415161718191a1b1c1d1e1f20\r\n                  2122232425262728292a2b2c2d2e2f30\r\n                  3132333435363738393a3b3c3d3e3f40  (64 bytes)\r\n", "notes": "Originally noted by Tero Kivinen", "submit_date": "2009-05-19", "submitter_name": "Sheila Frankel", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1786", "doc-id": "RFC4379", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4 (p. 38)", "orig_text": "         If the number of labels in the FEC stack is greater\r\n            than or equal to FEC-stack-depth {\r\n\r\n", "correct_text": "         If the number of FECs in the FEC stack is greater\r\n            than or equal to FEC-stack-depth {\r\n", "notes": "labels -> FECs", "submit_date": "2009-05-20", "submitter_name": "Jon Chung Hyok", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1924", "doc-id": "RFC2759", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "   NtPasswordHash(\r\n   IN  0-to-256-unicode-char Password,\r\n   OUT 16-octet              PasswordHash )\r\n   {\r\n      /*\r\n       * Use the MD4 algorithm [5] to irreversibly hash Password\r\n       * into PasswordHash.  Only the password is hashed without\r\n       * including any terminating 0.\r\n       */\r\n   }", "correct_text": "   NtPasswordHash(\r\n   IN  0-to-256-unicode-char Password,\r\n   OUT 16-octet              PasswordHash )\r\n   {\r\n      /*\r\n       * Use the MD4 algorithm [5] to irreversibly hash Password\r\n       * encoded in UTF-16-LE into PasswordHash.\r\n       * Only the password is hashed without\r\n       * including any terminating 0.\r\n       */\r\n   }", "notes": "Section 8.3 is silent on Unicode encoding used for passwords.\r\nSection 9.2 seem to imply that the Unicode encoding used in UTF-16-LE.", "submit_date": "2009-10-22", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1501", "doc-id": "RFC3376", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The header says:", "orig_text": "Network Working Group                                            B. Cain\r\nRequest for Comments: 3376                               Cereva Networks\r\nObsoletes: 2236                                               S. Deering\r\nCategory: Standards Track                                    I. Kouvelas\r\n                                                           Cisco Systems\r\n                                                               B. Fenner\r\n                                                    AT&T Labs - Research\r\n                                                          A. Thyagarajan\r\n                                                                Ericsson\r\n                                                            October 2002", "correct_text": "Network Working Group                                            B. Cain\r\nRequest for Comments: 3376                               Cereva Networks\r\nUpdates: 2236                                                 S. Deering\r\nCategory: Standards Track                                    I. Kouvelas\r\n                                                           Cisco Systems\r\n                                                               B. Fenner\r\n                                                    AT&T Labs - Research\r\n                                                          A. Thyagarajan\r\n                                                                Ericsson\r\n                                                            October 2002", "notes": "RFC 3376 does not completely replace RFC 2236, so it should say \"updates\" instead of \"obsoletes\".  Specifically, to have a compliant implementation of RFC 3376 section 4, one MUST understand and implement the \"Version 2 Membership Report\" and \"Version 2 Leave Group\" messages.  This is why RFC 2236 is listed as a normative reference of RFC 3376.", "submit_date": "2008-09-08", "submitter_name": "Dave Thaler", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3618", "doc-id": "RFC6886", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "   If the version in the request is not zero, then the NAT-PMP server\r\n   MUST return the following \"Unsupported Version\" error response to the\r\n   client:\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Vers = 0      | OP = 0        | Result Code = 1               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Seconds Since Start of Epoch (in network byte order)          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "   If the version in the request is not zero, then the NAT-PMP server\r\n   MUST return the following \"Unsupported Version\" error response to the\r\n   client:\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Vers = 0      | OP = 128      | Result Code = 1               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Seconds Since Start of Epoch (in network byte order)          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Since this is a response, the top bit of the opcode SHOULD be set, making the opcode value 128. However, the document shows \"OP = 0\", which is a mistake. In all responses the top bit of the opcode SHOULD be set. However, some implementations have the same mistake as the document and do not do this. Others sensibly set the top bit since this is a reply. Hence, clients sending PCP requests to NAT-PMP servers should expect to receive both forms of reply.", "submit_date": "2013-05-13", "submitter_name": "Stuart Cheshire", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1502", "doc-id": "RFC4718", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.11.4", "orig_text": "After the CREATE_CHILD_SA exchanges, three IKE_SAs exist between\r\nA and B; the one containing the lowest nonce inherits the CHILD_SAs.", "correct_text": "After the CREATE_CHILD_SA exchanges, three IKE_SAs exist between \r\nA and B; of the two new IKE_SAs, the one containing the lowest nonce \r\nis redundant and will be closed; the other one inherits the CHILD_SAs.", "notes": "Pointed out by Jeffrey Sun on the ipsec mailing list, 2008-03-31", "submit_date": "2008-09-11", "submitter_name": "Pasi Eronen", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1503", "doc-id": "RFC3580", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.21", "orig_text": "For IEEE 802.1X Authenticators, this attribute is used to store the\r\n   Supplicant MAC address in ASCII format (upper case only), with octet\r\n   values separated by a \"-\".  Example: \"00-10-A4-23-19-C0\".", "correct_text": "For IEEE Std 802.1X-2001 authenticators, this attribute is used to store\r\nthe Supplicant MAC address, represented as an ASCII character string in\r\nCanonical format (see IEEE Std 802). For example, \"00-10-A4-23-19-C0\".", "notes": "The IETF Informational RFC needed to specify that the representation of the MAC address is in Canonical Format.\r\n\r\nThis is the case in the IEEE document 802_1x-2001 which is the corrected text provided.\r\n\r\nI would be okay if the authors wanted to use Supplicant MAC address instead of \"bridge or Access Point\" in the proposed corrected text.", "submit_date": "2008-09-12", "submitter_name": "Avi Lior", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1517", "doc-id": "RFC4235", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1", "orig_text": "      <?xml version=\"1.0\"?>\r\n      <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\r\n                   version=\"4\"\r\n                   state=\"partial\"\r\n                   entity=\"sip:alice@example.com\">\r\n        <dialog id=\"as7d900as8\" call-id=\"a84b4c76e66710\"\r\n                local-tag=\"1928301774\" remote-tag=\"hh76a\"\r\n                direction=\"initiator\">\r\n          <state event=\"cancelled\">terminated</state>\r\n        </dialog>\r\n      </dialog-info>", "correct_text": "      <?xml version=\"1.0\"?>\r\n      <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\r\n                   version=\"4\"\r\n                   state=\"partial\"\r\n                   entity=\"sip:alice@example.com\">\r\n        <dialog id=\"as7d900as8\" call-id=\"a84b4c76e66710\"\r\n                local-tag=\"1928301774\" remote-tag=\"456887766\"\r\n                direction=\"initiator\">\r\n          <state event=\"cancelled\">terminated</state>\r\n        </dialog>\r\n      </dialog-info>", "notes": "The dialog which was cancelled was the first dialog and its remote tag is 456887766 instead of hh76a", "submit_date": "2008-09-17", "submitter_name": "Klaus Darilion", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1925", "doc-id": "RFC2410", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "   [DOI]        Piper, D., \"The Internet IP Security Domain of\r\n                Interpretation for ISAKMP\", RFC 2408, November 1998.\r\n", "correct_text": "   [DOI]        Piper, D., \"The Internet IP Security Domain of\r\n                Interpretation for ISAKMP\", RFC 2407, November 1998.\r\n", "notes": "", "submit_date": "2009-10-22", "submitter_name": "Thorsten Ulbricht", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1926", "doc-id": "RFC4443", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   [IPv6-ADDR]  Hinden, R. and S. Deering, \"Intpernet Protocol Version 6\r\n                (IPv6) Addressing Architecture\", RFC 3513, April 2003.\r\n", "correct_text": "   [IPv6-ADDR]  Hinden, R. and S. Deering, \"Internet Protocol Version 6\r\n                (IPv6) Addressing Architecture\", RFC 3513, April 2003.\r\n", "notes": "", "submit_date": "2009-10-23", "submitter_name": "Thorsten Ulbricht", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1504", "doc-id": "RFC5050", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.1,pg.40", "orig_text": "|  Fragment Offset:   If the bundle fragment bit is set in the status\r\n|     flags, then the offset (within the original application data unit)\r\n      of the payload of the bundle that caused the status report to be\r\n      generated is included here.\r\n\r\n|  Fragment length:   If the bundle fragment bit is set in the status\r\n|     flags, then the length of the payload of the subject bundle is\r\n      included here.\r\n", "correct_text": "|  Fragment Offset:   If the bundle fragment bit is set in the\r\n|     administrative record flags, then the offset (within the original\r\n      application data unit) of the payload of the bundle that caused\r\n      the status report to be generated is included here.\r\n\r\n|  Fragment length:   If the bundle fragment bit is set in the\r\n|     administrative record flags, then the length of the payload of\r\n      the subject bundle is included here.\r\n", "notes": "Note the distinct fields:\r\n -- administrative record flags (least significant nibble of the\r\n    one-octet administrative record header, per Figure 9 on pg.37)\r\n -- status flags (first octet in the body of a bundle status report,\r\n    per Figure 11 on page 39)\r\nThe fragment bit is contained in the former, not in the latter.\r\n\r\nAttention: this same issue recurs literally in Section 6.1.2,\r\non pg. 43, below Figure 14 !", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1505", "doc-id": "RFC5050", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.2,pg.43", "orig_text": "<same as for Section 6.1.1 -- see Errata ID 1504>", "correct_text": "<same as for Section 6.1.1 -- see Errata ID 1504>", "notes": "", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1506", "doc-id": "RFC5050", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2,p.47/48", "orig_text": "   ... Work Progress, ...", "correct_text": "   ... Work in Progress, ...", "notes": "Occurs twice, in entry [BSP] and in entry [SECO].\r\n\r\n\"Work in Progress\" is mandatory per various process and IPR documents,\r\nfor referring to an Internet-Draft.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1507", "doc-id": "RFC4952", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1 (and 1.*)", "orig_text": "                                                 [...].  However, it\r\n   does not permit the use of email addresses that include non-ASCII\r\n   characters.  Without the extensions defined here, or some equivalent\r\n   set, the only way to incorporate non-ASCII characters in any part of\r\n   email addresses is to use RFC 2047 coding to embed them in what RFC\r\n   2822 [RFC2822] calls the \"display name\" (known as a \"name phrase\" or\r\n|  by other terms elsewhere) of the relevant headers.  Information coded\r\n   into the display name is invisible in the message envelope and, for\r\n   many purposes, is not part of the address at all.", "correct_text": "                                                 [...].  However, it\r\n   does not permit the use of email addresses that include non-ASCII\r\n   characters.  Without the extensions defined here, or some equivalent\r\n   set, the only way to incorporate non-ASCII characters in any part of\r\n   email addresses is to use RFC 2047 coding to embed them in what RFC\r\n   2822 [RFC2822] calls the \"display name\" (known as a \"name phrase\" or\r\n|  by other terms elsewhere) of the relevant header fields.\r\n   Information coded into the display name is invisible in the message\r\n   envelope and, for many purposes, is not part of the address at all.", "notes": "Conformance to terminology established in the IETF requires\r\nmaking the precise distinction between a header and the\r\nheader fields it is comprised of.\r\n\r\nThis same issue recurs in the first paragraph of Section 1.1\r\nand in the 3rd line of the last paragraph of Section 1.2.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1508", "doc-id": "RFC4952", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1.3, pg.5", "orig_text": "   An \"i18mail user\" has one or more non-ASCII email addresses.  [...]", "correct_text": "", "notes": "This unusual term, \"i18mail user\" does not appear anywhere else in\r\nthe RFC besides the quoted paragraph in the Terminology section.\n --VERIFIER NOTES-- \n   The term is used in draft-ietf-eai-mailinglist-03.txt, which refers to rfc4952.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1509", "doc-id": "RFC5335", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5, 2nd par", "orig_text": "|  The \"Return-Path\" header provides the email return address in the\r\n|  mail delivery.  Thus, the header is augmented to carry UTF-8\r\n   addresses (see the revised syntax of <angle-addr> in Section 4.4 of\r\n   this document).  This will not break the rule of trace field\r\n|  integrity, because the header is added at the last MTA and described\r\n   in [RFC2821].", "correct_text": "|  The \"Return-Path\" header field provides the email return address in\r\n|  the mail delivery.  Thus, the header field is augmented to carry\r\n   UTF-8 addresses (see the revised syntax of <angle-addr> in Section\r\n   4.4 of this document).  This will not break the rule of trace field\r\n|  integrity, because the header field is added at the last MTA and\r\n   described in [RFC2821].", "notes": "Conformance to long-standing terminology established in the IETF\r\nrequires making the precise distinction between a 'header' and the\r\n'header fields' it is comprised of.\r\n\r\nMost parts of this RFC do this job correctly; this paragraph is an\r\nexception.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1510", "doc-id": "RFC5336", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4,pg.10", "orig_text": "   The ALT-ADDRESS-parameter MUST NOT appear more than once in any MAIL\r\n|  or RCPT command.  ALT-ADDRESS-esmtp-value MUST be an all-ASCII email\r\n                                ^^^^^^^\r\n   address before xtext encoding.", "correct_text": "   The ALT-ADDRESS-parameter MUST NOT appear more than once in any MAIL\r\n|  or RCPT command.  ALT-ADDRESS-value MUST be an all-ASCII email\r\n                                ^\r\n   address before xtext encoding.\r\n                                ", "notes": "\"ALT-ADDRESS-esmtp-value\" does not occur anywhere else in the RFC.\r\nPresumably the rule names have been shortened and the edits have been\r\nperformed incompletely.  \"ALT-ADDRESS-value\" is the rule name expected\r\nfrom the ABNF above this paragraph.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2521", "doc-id": "RFC5986", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4,3rd para", "orig_text": "   DHCPv4 option 15 [RFC2132] provides an indication of the domain name\r\n|  that a host uses when resolving hostnames in DNS.  This option is\r\n   used when the DHCPv4 access domain name is not available.\r\n\r\n", "correct_text": "   DHCPv4 option 15 [RFC2132] provides an indication of the domain name\r\n|  that a host uses when resolving hostnames in the DNS.  This option is\r\n   used when the DHCPv4 access domain name is not available.\r\n\r\n", "notes": "Rationale: missing article", "submit_date": "2010-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1934", "doc-id": "RFC5447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.4", "orig_text": "   The MIP6-Home-Link-Prefix AVP (AVP Code 125) is of type OctetString\r\n   and contains the Mobile IPv6 home network prefix information in a\r\n   network byte order. ", "correct_text": "   The MIP6-Home-Link-Prefix AVP (AVP Code 125) is of type OctetString\r\n   and contains the Mobile IPv6 home network prefix information in\r\n   network byte order. ", "notes": "AFAIK there's only one network byte order.", "submit_date": "2009-10-26", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1513", "doc-id": "RFC5337", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4, pg.7", "orig_text": "|  text-fixed = %d1-9 /      ; Any Unicode character except for NUL,\r\n|              %d11 /       ; CR and LF, encoded in UTF-8\r\n               %d12 /\r\n               %d14-127\r\n     ; Same as <text> from [RFC2822], but without <obs-text>.\r\n     ; If/when RFC 2822 is updated to disallow <obs-text>,\r\n     ; this should become just <text>\r\n     ; Also, if/when RFC 2822 is updated to disallow control characters\r\n     ; this should become a reference to RFC 2822upd instead.\r\n\r\n   utf8-text = text-fixed / UTF8-non-ascii", "correct_text": "|  text-fixed = %d1-9 /     ; Any US-ASCII character except for NUL,\r\n|               %d11 /      ; CR and LF\r\n                %d12 /\r\n                %d14-127\r\n     ; Same as <text> from [RFC2822], but without <obs-text>.\r\n     ; If/when RFC 2822 is updated to disallow <obs-text>,\r\n     ; this should become just <text>\r\n     ; Also, if/when RFC 2822 is updated to disallow control characters\r\n     ; this should become a reference to RFC 2822upd instead.\r\n\r\n   utf8-text = text-fixed / UTF8-non-ascii", "notes": "The long comment as well as the subsequent definition of\r\n<utf8-text> shows that the inline comment in the first two\r\nlines must be in error.\r\nThe replacement inline comment is the translation of the\r\nABNF (assumed to be correct) to english text.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1514", "doc-id": "RFC5337", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4, pg. 8", "orig_text": "a)\r\n    MIME type                 [[one instance]], and\r\n\r\nb)\r\n    MIME types                [[two instances]]", "correct_text": "a)\r\n    media type  \r\n\r\nb)\r\n    media types   ", "notes": "Correct usage of established IETF terminology;\r\nsee RFC 4288 (et al.) for rationale.", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1515", "doc-id": "RFC5337", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5, 3rd para", "orig_text": "   The MDN specification also defines the Disposition-Notification-To\r\n|  header, which is an address header and thus follows the same 8-bit\r\n|  rules as other address headers such as \"From\" and \"To\" when used in a\r\n   UTF-8 header message.", "correct_text": "   The MDN specification also defines the Disposition-Notification-To\r\n|  header field, which is an address header field and thus follows the\r\n|  same 8-bit rules as other address header fields such as \"From\" and\r\n   \"To\" when used in a UTF-8 header message.", "notes": "Long-standing terminology established in the IEFT should be applied\r\nin this paragraph as well, making the precise distinction between a\r\n\"header\" and the \"header fields\" it it comprised of (other parts of \r\nthe document already do it the right way).", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1516", "doc-id": "RFC5279", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2, pg.2/3", "orig_text": "   Declaration of syntactic structure:\r\n\r\n|     The Namespace Specific String (NSS) of all URNs that use the\r\n|     \"3gpp\" NID will have the following structure:\r\n\r\n           urn:3gpp:{3gpp-urn}\r\n\r\n      where the \"3gpp-urn\" is a US-ASCII string that conforms to the\r\n      NSS(Namespace Specific String) Syntax described in RFC 2141\r\n|     [RFC2141] and defines a specific resource type.\r\n", "correct_text": "   Declaration of syntactic structure:\r\n\r\n|     All URNs that use the \"3gpp\" NID will have the following\r\n|     structure:\r\n\r\n            urn:3gpp:{3gpp-urn}\r\n\r\n      where the \"3gpp-urn\" is a US-ASCII string that conforms to the\r\n      NSS(Namespace Specific String) Syntax described in RFC 2141\r\n|     [RFC2141] and defines a specific resource.\r\n", "notes": "a) Obviously, the original clause contradicts itself.\r\n\r\n   It is impossible that the NSS is a proper subpart of itself\r\n   as would be required by the text and the syntax shown.\r\n\r\n   The corrected text resolves this partial issue, but not the\r\n   next two issues, which still remain open.  Furthermore, for\r\n   logical consistency, \"resource type\" had to be replaced by\r\n   \"resource\" in the last line, to maintain the required\r\n   uniqueness property of '3gpp' URNs.\r\n \r\nb) Even the corrected statement merely is a simple instantiation of\r\n   the general definition in RFC 2141 (Section 2, page 1), plus\r\n   giving an alias name (<3gpp-urn>) to the NSSs of '3gpp' URNs.\r\n\r\n   However, it does not cure the apparent underspecification:\r\n\r\n   The current URN Namespace registration template per BCP 66,\r\n   RFC3406, serves for \"... providing a mechanism for disclosing \r\n   [the] structure of the URN namespace ...\" (page 11 of RFC 3406),\r\n   but the quoted clause, as it stands, does *not*\r\n   \"outline any structural features of identifiers in this namespace\"\r\n   (p. 12 of RFC 3406).\r\n", "submit_date": "2008-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3400", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.5.", "orig_text": "   message         =   (fields / obs-fields)\r\n                       [CRLF body]\r\n\r\n   body            =   (*(*998text CRLF) *998text) / obs-body\r\n", "correct_text": "   message         =   (fields / obs-fields)\r\n                       [CRLF body]\r\n\r\n   body            =   (*(*998text CRLF) *998text) / obs-body\r\n\r\nIt is RECOMMENDED that message bodies are terminated by CRLF, though \r\nthis is in principle not necessary (this does not apply to messages \r\nconsisting only of a header section, as header fields are always CRLF\r\nterminated).\r\n\r\nNote however, that when transporting messages via SMTP the last lines \r\nof message bodies MUST be terminated by CRLF as specified int \r\nRFC 5321, section 4.1.1.4.", "notes": "Hi folks.\r\n\r\nAFAIU, the definition of body allows message bodies (not header sections) that end without CRLF.\r\n\r\nRFC5321 section 4.1.1.4. however states: \"The mail data are terminated by a line containing only a period, that is, the character sequence \"<CRLF>.<CRLF>\", where the first <CRLF> is actually the terminator of the previous line\".\r\n\r\nSo SMTP forbids, what this RFC allows.\r\nI guess the SMTP RFC can't be changed here and it makes no particular sense to restrict RFC5322 on the other hand.\r\n\r\nMy suggestion was to add this clarification.\r\n\r\nPerhaps a similar one should be added to RFC5321, telling that Internet Messages themselves wouldn't need the last CRLF.\n --VERIFIER NOTES-- \nIt is clearly a change from WG consensus to add any normative 2119 text regarding a terminating CRLF. (See archive of the DRUMS WG, 17-18 March 1998 in a thread with a subject of \"Small Clarification to msg-fmt-04\".) The CRLF is not required for the message syntax. There are things other than this that 5321 cannot transport, so  is also unlikely to be in scope for 5321 as an erratum either. Perhaps a discussion of this might be useful for RFC 3030, but again, it is unlikely to be an erratum.", "submit_date": "2012-11-06", "submitter_name": "Christoph Anton Mitterer", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3404", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.1.1.", "orig_text": "#define SQUARE(x)       (x * x)\r\n", "correct_text": "#define SQUARE(x)       ((x) * (x))\r\n", "notes": "This macro is used in the example code to square differences:\r\n\r\n//- in clock_filter() {...} (page 85) :\r\n\r\n                p->jitter += SQUARE(f[i].offset - f[0].offset);\r\n\r\n//- in clock_select() { ... } (page 92) :\r\n\r\n                                dtemp += SQUARE(p->offset - q->offset);\r\n\r\n//- in clock_combine() { ... } (page 96) :\r\n\r\n                w += SQUARE(p->offset - s.v[0].p->offset) / x;\r\n\r\n//- in local_clock() { ... } (page 99) :\r\n\r\n                dtemp = SQUARE(max(fabs(offset - c.last),\r\n                    LOG2D(s.precision)));\r\n\r\n\r\nThese expressions are using differences of double values: the .offset member in a Filter stage structure (f), and the .jitter member in an Association structure (p), or in a Local clock structure (c), or in a System structure (s).\r\n\r\nAll these occurences of macro substitions of SQUARE() will be wrong if the C macro does not surrounds its parameter expression by adding parentheses around them !\r\n\r\nThis is a very classic error made by beginners in C programming using \"utility\" macros with side effects... At least newer programmers avoid these kind of macros and prefer defining inline functions", "submit_date": "2012-11-08", "submitter_name": "Philippe Verdy", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3401", "doc-id": "RFC4551", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "      However, if the mod-sequence of any metadata item of the message\r\n      is greater than the specified UNCHANGEDSINCE value, then the\r\n      requested operation MUST NOT be performed.  In this case, the\r\n      mod-sequence attribute of the message is not updated, and the\r\n      message number (or unique identifier in the case of the UID STORE\r\n      command) is added to the list of messages that failed the\r\n      UNCHANGESINCE test.\r\n\r\n      When the server finished performing the operation on all the\r\n      messages in the message set, it checks for a non-empty list of\r\n      messages that failed the UNCHANGESINCE test.  If this list is\r\n      non-empty, the server MUST return in the tagged response a\r\n      MODIFIED response code.  The MODIFIED response code includes the\r\n      message set (for STORE) or set of UIDs (for UID STORE) of all\r\n      messages that failed the UNCHANGESINCE test.\r\n\r\n   Example 3:\r\n\r\n      All messages pass the UNCHANGESINCE test.\r\n\r\n      C: a103 UID STORE 6,4,8 (UNCHANGEDSINCE 12121230045)\r\n          +FLAGS.SILENT (\\Deleted)\r\n      S: * 1 FETCH (UID 4 MODSEQ (12121231000))\r\n      S: * 2 FETCH (UID 6 MODSEQ (12121230852))\r\n      S: * 4 FETCH (UID 8 MODSEQ (12121130956))\r\n      S: a103 OK Conditional Store completed", "correct_text": "      However, if the mod-sequence of any metadata item of the message\r\n      is greater than the specified UNCHANGEDSINCE value, then the\r\n      requested operation MUST NOT be performed.  In this case, the\r\n      mod-sequence attribute of the message is not updated, and the\r\n      message number (or unique identifier in the case of the UID STORE\r\n      command) is added to the list of messages that failed the\r\n      UNCHANGEDSINCE test.\r\n\r\n      When the server finished performing the operation on all the\r\n      messages in the message set, it checks for a non-empty list of\r\n      messages that failed the UNCHANGEDSINCE test.  If this list is\r\n      non-empty, the server MUST return in the tagged response a\r\n      MODIFIED response code.  The MODIFIED response code includes the\r\n      message set (for STORE) or set of UIDs (for UID STORE) of all\r\n      messages that failed the UNCHANGEDSINCE test.\r\n\r\n   Example 3:\r\n\r\n      All messages pass the UNCHANGEDSINCE test.\r\n\r\n      C: a103 UID STORE 6,4,8 (UNCHANGEDSINCE 12121230045)\r\n          +FLAGS.SILENT (\\Deleted)\r\n      S: * 1 FETCH (UID 4 MODSEQ (12121231000))\r\n      S: * 2 FETCH (UID 6 MODSEQ (12121230852))\r\n      S: * 4 FETCH (UID 8 MODSEQ (12121130956))\r\n      S: a103 OK Conditional Store completed", "notes": "This erratum changes \"UNCHANGESINCE\" to \"UNCHANGEDSINCE\" in four places.", "submit_date": "2012-11-08", "submitter_name": "Michael Slusarz", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3402", "doc-id": "RFC3416", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "max-bindings INTEGER ::= 2147483647", "correct_text": "max-bindings ::= INTEGER (2147483647)", "notes": "\n --VERIFIER NOTES-- \nAccording to section 4.2 of the ASN.1 spec, the grammar for the value notation is\r\n  ValueDefinition ::= identifier Type \"::=\" Value\r\n\r\nThe current text conforms to this grammar, and the usage in this particular case\r\nis closely analogous to the example the ASN.1 standard gives in that same\r\nsection.\r\n\r\nIt looks like the submitter wants to change the value definition into a\r\ntype definition, which to me would be inconsistent with how the the SNMP\r\nspecification employs max-bindings.", "submit_date": "2012-11-08", "submitter_name": "Mike Sauve", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3403", "doc-id": "RFC3416", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "VarBindList ::= SEQUENCE (SIZE (0..max-bindings)) OF VarBind", "correct_text": "VarBindList ::= SEQUENCE {SIZE (0..max-bindings)} OF VarBind", "notes": "\n --VERIFIER NOTES-- \nAs reviewed by Juergen Schoenwaelder and Randy Presuhn:\r\n\r\nIt definitely conforms to the\r\ngrammar of the ASN.1 version cited in the references.  However,\r\nthe \"new\" ASN.1's changes should not have caused any problems\r\nfor the construct in question, though other parts of the grammar\r\nmight cause some heartburn.\r\n\r\nFor the old ASN.1 / new ASN.1 issues (seen through rose-colored\r\nglasses) see http://www.itu.int/ITU-T/studygroups/com17/changing-ASN/\r\n\r\nTo be really really sure, I tried compiling the module with the\r\ncommercial OSS  Nokalva ASN.1 syntax checker, configured to\r\nbe strict in requiring ASN.1 2002, rather than auto-detecting the\r\nASN.1 version.  It issues one warning (about the anonymous CHOICE\r\ninside the VarBind construct - no surprise) but has no problem\r\nwhatsoever with the constructs referred to in the proposed erratum.\r\n\r\nThe bottom line is that the grammar is correct as-is, and that the\r\nproblem is with the submitter's toolset.\r\n\r\nAs Juergen indicates, this is really a symptom of a subtler issue:\r\nSMI notation is *not* ASN.1, but  modules written in the SMI language\r\nhave used the IMPORTS construct to reference stuff from ASN.1\r\nmodules.  Back when I was implementing this stuff, our solution to\r\nthis problem was to make sure our tools understood both grammars\r\n(as well as the GDMO and some other notations), but this is going\r\ndeep into the guts of how vendors' products handle IMPORTS\r\nconstructs, and trying to standardize it would probably\r\nnot be a good use of time at this juncture.\r\n", "submit_date": "2012-11-08", "submitter_name": "Mike Sauve", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1518", "doc-id": "RFC3473", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "  0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             | Class-Num (1) |  C-Type (1)   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    IPv4 Notify Node Address                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   IPv4 Notify Node Address: 32 bits\r\n\r\n      The IP address of the node that should be notified when generating\r\n      an error message.\r\n\r\n      o  IPv6 Notify Request Object\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             | Class-Num (2) |  C-Type (2)   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   |                    IPv6 Notify Node Address                   |\r\n   |                                                               |\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "  0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             | Class-Num(195)|  C-Type (1)   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                    IPv4 Notify Node Address                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   IPv4 Notify Node Address: 32 bits\r\n\r\n      The IP address of the node that should be notified when generating\r\n      an error message.\r\n\r\n      o  IPv6 Notify Request Object\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             | Class-Num(195)|  C-Type (2)   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   |                    IPv6 Notify Node Address                   |\r\n   |                                                               |\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "The figures showing the format of the Notify Request objects have the wrong Class-Number (seems to have used the C-Type instead).", "submit_date": "2008-09-18", "submitter_name": "Pontus Sk\u00f6ldstr\u00f6m", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1519", "doc-id": "RFC4918", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "Within Simple-ref productions, senders MUST NOT:\r\n\r\n   o  use dot-segments (\".\" or \"..\"), or\r\n\r\n   o  have prefixes that do not match the Request-URI (using the\r\n      comparison rules defined in Section 3.2.3 of [RFC2616]).\r\n\r\n\r\n", "correct_text": "Within Simple-ref productions, senders MUST NOT use dot-segments (\".\" or \"..\").\r\nSimple-ref productions used in Multi-Status responses MUST NOT have prefixes that\r\ndo not match the Request-URI (using the comparison rules defined in Section 3.2.3\r\nof [RFC2616]).\r\n\r\n\r\n", "notes": "The original text explicitly applies not only to Simple-ref productions used in Multi-Status responses, but also to those used in Destination Headers. Since URIs used in Destination headers may have other prefixes (for example in a cross-server COPY request), this is wrong.", "submit_date": "2008-09-19", "submitter_name": "Manfred Baedke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1520", "doc-id": "RFC4642", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "TLS is complimentary to both simple authentication-only\r\nSASL mechanisms and deployed clear-text password\r\nlogin commands.\r\n", "correct_text": "TLS is complementary to both simple authentication-only\r\nSASL mechanisms and deployed clear-text password\r\nlogin commands.", "notes": "", "submit_date": "2008-09-23", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7022", "doc-id": "RFC4120", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2.6.2", "orig_text": "checksumtype", "correct_text": "cksumtype", "notes": "The field is named \"cksumtype\" according to section 5.2\r\n\r\n --VERIFIER NOTES--\r\nCorrection - The field is named in section 5.2.9.\r\n", "submit_date": "2022-07-13", "submitter_name": "Gabriel Potter", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-07-27 20:21:22"}, {"errata_id": "7734", "doc-id": "RFC9085", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.5", "orig_text": "11 or 12 octets depending on the label or index encoding of the SID.", "correct_text": "15 or 16 octets depending on the label or index encoding of the SID.", "notes": "Length of the TLV does not account for the Prefix-SID Sub-TLVs type and length fields: 2 octets each = 4 octets in total.\r\nThis is valid for all variants: IS-IS, OSPFv2 and OSPFv3.\r\n\r\nNote: see also https://mailarchive.ietf.org/arch/msg/idr/G_3KN-XXqyXbSXO1doiNJbK_gIA/", "submit_date": "2023-12-18", "submitter_name": "Alexandru Bran", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 17:47:46"}, {"errata_id": "1521", "doc-id": "RFC3977", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4.1", "orig_text": "Except as an effect of the MODE READER command (Section 5.3) on a\r\nmode-switching server, once a server advertises either or both of the\r\nIHAVE or READER capabilities, it MUST continue to advertise them for\r\nthe entire session.", "correct_text": "Except as an effect of the MODE READER command (Section 5.3) on a\r\nmode-switching server, once a server advertises either or both of the\r\nIHAVE or READER capabilities, it SHOULD continue to advertise them for\r\nthe entire session.", "notes": "This condition should not be treated as a MUST but as a SHOULD.\r\nIndeed, we can have the following case (amongst others):\r\n * a news server connects to another one in transit mode;\r\n * IHAVE is advertised;\r\n * the news server authenticates via AUTHINFO (an NNTP\r\n   extension defined in RFC 4643);\r\n * it is now authorized to only stream articles, thus IHAVE\r\n   is no longer available, replaced with STREAMING (an NNTP\r\n   extension defined in RFC 4644).\r\n\r\nRFC 3977 should not prevent such a case from happening.\r\nOtherwise, it would compel a news server to advertise IHAVE\r\neven though that command is not available to the user.\r\nThe same remark also applies to the READER capability.\n --VERIFIER NOTES-- \n   This is a request to change the protocol, not an errata.  Changes like this need to go through a new RFC.", "submit_date": "2008-09-23", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1522", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3.3", "orig_text": "Example of use of the MODE READER command on a transit-only server\r\n(which therefore does not providing reading facilities):", "correct_text": "Example of use of the MODE READER command on a transit-only server\r\n(which therefore does not provide reading facilities):", "notes": "", "submit_date": "2008-09-23", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1523", "doc-id": "RFC3977", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3.3", "orig_text": "Example of use of the MODE READER command on a mode-switching server:\r\n\r\n    [C] CAPABILITIES\r\n    [S] 101 Capability list:\r\n    [S] VERSION 2\r\n    [S] IHAVE\r\n    [S] MODE-READER\r\n    [S] .\r\n    [C] MODE READER\r\n    [S] 200 Reader mode, posting permitted\r\n    [C] CAPABILITIES\r\n    [S] 101 Capability list:\r\n    [S] VERSION 2\r\n    [S] READER\r\n    [S] NEWNEWS\r\n    [S] LIST ACTIVE NEWSGROUPS\r\n    [S] STARTTLS\r\n    [S] .\r\n\r\nIn this case, the server offers (but does not require) TLS privacy in\r\nits reading mode but not in its transit mode.", "correct_text": "Example of use of the MODE READER command on a mode-switching server:\r\n\r\n  [C] CAPABILITIES\r\n  [S] 101 Capability list:\r\n  [S] VERSION 2\r\n  [S] IHAVE\r\n  [S] MODE-READER\r\n  [S] .\r\n  [C] MODE READER\r\n  [S] 200 Reader mode, posting permitted\r\n  [C] CAPABILITIES\r\n  [S] 101 Capability list:\r\n  [S] VERSION 2\r\n  [S] READER\r\n  [S] NEWNEWS\r\n  [S] LIST ACTIVE NEWSGROUPS\r\n  [S] STARTTLS\r\n  [S] .\r\n\r\nIn this case, the server offers (but does not require) TLS privacy in\r\nits reading mode but not in its transit mode.  Despite the 200\r\nresponse code, the POST capability is not advertised, indicating that\r\nthe POST command is not yet available but may become available later\r\n(presumably after a TLS negotiation and possibly authentication).\r\nThis example shows a case where the 200 response code cannot be as\r\naccurate or fine-grained as the CAPABILITIES response.", "notes": "This precision should be added because of the comment \"Reader mode, posting permitted\".  It makes it clearer and incidentally provides an interesting example regarding the use of the 200 response code.\r\n --VERIFIER NOTES-- \r\n   This is a request to change the document, not an erratum.  \r\n\r\n --RFC EDITOR NOTE--\r\n 2009-11-27: The Corrected Text was updated per a request from Julien \u00c9lie.", "submit_date": "2008-09-23", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1524", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "If the argument is a message-id and no such article exists, a 430\r\nresponse MUST be returned.  If the argument is a number or is omitted\r\nand the currently selected newsgroup is invalid, a 412 response MUST\r\nbe returned.  If the argument is a number and that article does not\r\nexist in the currently selected newsgroup, a 423 response MUST be\r\nreturned.  If the argument is omitted and the current article number\r\nis invalid, a 420 response MUST be returned.", "correct_text": "If the argument is a message-id and no such article exists, a 430\r\nresponse MUST be returned.  If the argument is a number or is omitted,\r\nand the currently selected newsgroup is invalid, a 412 response MUST\r\nbe returned.  If the argument is a number and that article does not\r\nexist in the currently selected newsgroup, a 423 response MUST be\r\nreturned.  If the argument is omitted and the currently selected\r\nnewsgroup is valid but the current article number is invalid, a 420\r\nresponse MUST be returned.", "notes": "A comma should be added after \"omitted\" in the second sentence.  The detail about the validity of the currently selected newsgroup should be added to the last sentence.\r\nNote that this remark applies to sections 6.2.1.2 (ARTICLE), 8.3.2 (OVER) and 8.5.2 (HDR).  In the case of OVER and HDR, although the wording is different (ranges are used instead of article numbers), the changes to apply remain the same.", "submit_date": "2008-09-23", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1525", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1.1", "orig_text": "Example of an attempt to access a facility not available to this\r\nconnection:\r\n\r\n   [C] MODE READER\r\n   [S] 200 Reader mode, posting permitted\r\n   [C] IHAVE <i.am.an.article.you.will.want@example.com>\r\n   [S] 500 Permission denied", "correct_text": "Example of an attempt to access a facility not available to this\r\nconnection:\r\n\r\n   [C] MODE READER\r\n   [S] 200 Reader mode, posting permitted\r\n   [C] IHAVE <i.am.an.article.you.will.want@example.com>\r\n   [S] 502 Permission denied", "notes": "The response code is 502 in that case because IHAVE is a recognized\r\ncommand.  It is not available to this connection but may be available\r\nfrom another connection.", "submit_date": "2008-09-24", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1526", "doc-id": "RFC3977", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.2", "orig_text": "mode-reader-command = \"MODE\" WS \"READER\"", "correct_text": "mode-command = \"MODE\" WS mode-variant\r\nmode-variant = keyword", "notes": "Even though the ABNF syntax directly treats MODE READER as a command, MODE is\r\na base command and READER is a variant of this base command.\r\nTherefore, when the keyword is an invalid mode, the 501 response code is sent:\r\n\r\n    [C] MODE UNKNOWN\r\n    [S] 501 Unknown MODE variant\r\n\n --VERIFIER NOTES-- \n   the errata contributor asked me to reject it.", "submit_date": "2008-09-24", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1935", "doc-id": "RFC4872", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.3", "orig_text": "   - PRROs SHOULD be present in the Path message for the pre-\r\n     provisioning of the secondary protecting LSP to enable recovery\r\n     resource sharing between one or more secondary protecting LSPs (see\r\n     Section 15.4).", "correct_text": "   - PPROs SHOULD be present in the Path message for the pre-\r\n     provisioning of the secondary protecting LSP to enable recovery\r\n     resource sharing between one or more secondary protecting LSPs (see\r\n     Section 15.4).", "notes": "Second bullet point in the section.\r\ns/PRRO/PPRO/", "submit_date": "2009-10-29", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1527", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "401: The client must change the state of the connection in some other\r\n   manner.  The first argument of the response MUST be the capability\r\n   label (see Section 5.2) of the facility that provides the\r\n   necessary mechanism (usually an extension, which may be a private\r\n   extension).  The server MUST NOT use this response code except as\r\n   specified by the definition of the capability in question.", "correct_text": "", "notes": "The 401 code is never dealt with in the whole RFC 3977.  Even the definition of the MODE-READER capability does not indicate when the 401 return code should be used.\r\nIt should be said that it MUST be used in answers to commands only available after having sent MODE READER.  Maybe section 5.3.2 that described the MODE READER command, is the right place to use in order to specify that behaviour.\r\n\r\n[C] CAPABILITIES\r\n[S] 101 Capability list:\r\n[S] VERSION 2\r\n[S] IHAVE\r\n[S] MODE-READER\r\n[S] .\r\n[C] POST\r\n[S] 401 MODE-READER\r\n[C] MODE READER\r\n[S] 200 Reader mode, posting permitted\r\n[C] CAPABILITIES\r\n[S] 101 Capability list:\r\n[S] VERSION 2\r\n[S] READER\r\n[S] POST\r\n[S] .\r\n[C] POST\r\n[S] 340 Input article; end with <CR-LF>.<CR-LF>\r\n[C] From: \"Demo User\" <nobody@example.net>\r\n[C] Newsgroups: misc.test\r\n[C] Subject: I am just a test article\r\n[C] Organization: An Example Net\r\n[C]\r\n[C] This is just a test article.\r\n[C] .\r\n[S] 240 Article received OK", "submit_date": "2008-09-24", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1528", "doc-id": "RFC2680", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7", "orig_text": "The first two sources are interrelated and could result in a test\r\npacket with finite delay being reported as lost.  Type-P-One-way-\r\nPacket-Loss is 0 if the test packet does not arrive, or if it does\r\narrive and the difference between Src timestamp and Dst timestamp is\r\ngreater than the \"reasonable period of time\", or loss threshold.  ", "correct_text": "The first two sources are interrelated and could result in a test\r\npacket with finite delay being reported as lost.  Type-P-One-way-\r\nPacket-Loss is 1 if the test packet does not arrive, or if it does\r\narrive and the difference between Src timestamp and Dst timestamp is\r\ngreater than the \"reasonable period of time\", or loss threshold.", "notes": "Type-P-One-way-Packet-Loss is 1 if the test packet does not arrive, according to section 2.4 Definition in RFC2680.", "submit_date": "2008-09-24", "submitter_name": "Wenxia Dong", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1529", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "13", "orig_text": "Other people who contributed to this document include:\r\n\r\n      Matthias Andree\r\n      Greg Andruk\r\n      Daniel Barclay\r\n      Maurizio Codogno\r\n      Mark Crispin\r\n      Andrew Gierth\r\n      Juergen Helbing\r\n      Scott Hollenbeck\r\n      Urs Janssen\r\n      Charles Lindsey\r\n      Ade Lovett\r\n      David Magda\r\n      Ken Murchison\r\n      Francois Petillon\r\n      Peter Robinson\r\n      Rob Siemborski\r\n      Howard Swinehart\r\n      Ruud van Tol\r\n      Jeffrey Vinocur\r\n      Erik Warmelink\r\n", "correct_text": "Other people who contributed to this document include:\r\n\r\n      Matthias Andree\r\n      Greg Andruk\r\n      Daniel Barclay\r\n      Maurizio Codogno\r\n      Mark Crispin\r\n      Julien Elie\r\n      Andrew Gierth\r\n      Juergen Helbing\r\n      Scott Hollenbeck\r\n      Urs Janssen\r\n      Charles Lindsey\r\n      Ade Lovett\r\n      David Magda\r\n      Ken Murchison\r\n      Francois Petillon\r\n      Peter Robinson\r\n      Rob Siemborski\r\n      Howard Swinehart\r\n      Ruud van Tol\r\n      Jeffrey Vinocur\r\n      Erik Warmelink\r\n", "notes": "On the basis that at least one of his reported errata is being accepted, insert Julien Elie into this list at the appropriate place.\r\n\r\nIn those versions that can cope, the first letter of his surname should carry an acute accent (U+00C9).", "submit_date": "2008-09-29", "submitter_name": "Clive Feather", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1530", "doc-id": "RFC4447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "\r\n  This document specifies all the procedures necessary to set up and \r\n  maintain the pseudowires needed to support \"unswitched\" point-to-\r\n  point services, where each end of the pseudowire is provisioned \r\n  with the identify of the other endpoint.\r\n                 ^^", "correct_text": "\r\n  This document specifies all the procedures necessary to set up and \r\n  maintain the pseudowires needed to support \"unswitched\" point-to-\r\n  point services, where each end of the pseudowire is provisioned \r\n  with the identity of the other endpoint.\r\n                 ^^", "notes": "None", "submit_date": "2008-09-29", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1532", "doc-id": "RFC4871", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "N/A (see Notes below)", "correct_text": "Add text similar to the following:\r\n\r\nCompatibility Note for DomainKeys\r\n\r\nIf a v= value is not found at the beginning of the DKIM key record, \r\nthe key record should be interpreted as for DomainKeys [4870]. The \r\ndefinition given here is upwardly compatible with what is used for \r\nDomainKeys, with the exception of the \"g=\" value. In a DomainKeys \r\nkey record, an empty \"g=\" value should be interpreted as being \r\nequivalent to DKIM's \"g=*\".", "notes": "There should be a note added somewhere to section 3.6.1 saying \r\nthat if a v= is not found at the beginning of the DKIM key \r\nrecord, the DNS key record should be interpreted as for DomainKeys \r\nand described in RFC 4870. In addition, a note should be added \r\nabout the difference in the interpretation of an empty \"g=\", \r\nwhich is the only incompatible tag.", "submit_date": "2008-09-30", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2313", "doc-id": "RFC5888", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.2.1", "orig_text": "9.2.1.  Example\r\n\r\n   The example below shows how the callee refuses a media stream offered\r\n   by the caller by setting its port number to zero.  The \"mid\" value\r\n   corresponding to that media stream is removed from the \"group\" value\r\n   in the answer.\r\n\r\n   SDP description in the INVITE from caller to callee:\r\n\r\n          [...]\r\n\r\n|  SDP description in the INVITE from callee to caller:\r\n\r\n          [...]\r\n", "correct_text": "9.2.1.  Example\r\n\r\n   The example below shows how the callee refuses a media stream offered\r\n   by the caller by setting its port number to zero.  The \"mid\" value\r\n   corresponding to that media stream is removed from the \"group\" value\r\n   in the answer.\r\n\r\n   SDP description in the INVITE from caller to callee:\r\n\r\n          [...]\r\n\r\n|  SDP description in the \"200 OK\" from callee to caller:\r\n\r\n          [...]\r\n", "notes": "Rationale: In the scenario described by the prose,\r\n  the SDP answer is carried in the non-provisional \r\n  response to the INVITE, in this case a \"200 OK\",\r\n  not in another INVITE.  The latter (using a re-INVITE)\r\n  is a different scenario.  (Note that a re-INVITE would\r\n  likely contain an SDP offer, where port 0 is not allowed.)", "submit_date": "2010-06-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1954", "doc-id": "RFC4975", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "ext-header = hname \":\" SP hval CRLF\r\n", "correct_text": "ext-header = hname \":\" SP hval\r\n", "notes": "The rule:\r\n\r\n  headers = To-Path CRLF From-Path CRLF 1*( header CRLF )\r\n\r\nalready suffixes every header with a CRLF. The result is that the extension headers are followed by 2 CRLFs, introducing empty lines inside the header segment. This appears to be unintended, since none of the other headers have a terminating CRLF in their production rules, only the ext-header.", "submit_date": "2009-12-03", "submitter_name": "Dennis Noordsij", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1533", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.3", "orig_text": "Example of use of the MODE READER command on a server that provides\r\nreading facilities:\r\n\r\n   [C] CAPABILITIES\r\n   [S] 101 Capability list:\r\n   [S] VERSION 2\r\n   [S] READER\r\n   [S] LIST ACTIVE NEWSGROUPS\r\n   [S] .\r\n   [C] MODE READER\r\n   [S] 200 Reader mode, posting permitted\r\n   [C] IHAVE <i.am.an.article.you.have@example.com>\r\n   [S] 500 Permission denied\r\n   [C] GROUP misc.test\r\n   [S] 211 1234 3000234 3002322 misc.test", "correct_text": "Example of use of the MODE READER command on a server that provides\r\nreading facilities:\r\n\r\n   [C] CAPABILITIES\r\n   [S] 101 Capability list:\r\n   [S] VERSION 2\r\n   [S] READER\r\n   [S] LIST ACTIVE NEWSGROUPS\r\n   [S] .\r\n   [C] MODE READER\r\n   [S] 200 Reader mode, posting permitted\r\n   [C] IHAVE <i.am.an.article.you.have@example.com>\r\n   [S] 500 Unknown command\r\n   [C] GROUP misc.test\r\n   [S] 211 1234 3000234 3002322 misc.test", "notes": "The response code 500 is sent because this server does not implement the IHAVE command at all.  Therefore, IHAVE is not recognized.\r\nHad the server known the command, it would have replied \"502 Permission denied\" (according to the result of CAPABILITIES, there is no possibility to authenticate or negotiate a TLS layer which could have provided the availability of the command).", "submit_date": "2008-10-01", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1534", "doc-id": "RFC4197", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "          +---------------+               +---------------+\r\n          |      PE1      |               |      PE2      |\r\n       K  |   +--+        |               |        +--+   |  G\r\n       |  |   | J|        |               |        | H|   |  |\r\n       v  |   v  |        |               |        v  |   |  v\r\n   +---+  | +-+  +-+  +-+ |  +--+   +--+  | +-+  +-+  +-+ |  +---+\r\n   |   |  | |P|  |D|  |P| |  |  |   |  |  | |P|  |E|  |P| |  |   |\r\n   |   |<===|h|<:|e|<:|h|<:::|  |<::|  |<:::|h|<:|n|<=|h|<===|   |\r\n   |   |  | |y|  |c|  |y| |  |  |   |  |  | |y|  |c|  |y| |  |   |\r\n   | C |  | +-+  +-+  +-+ |  |  |   |  |  | +-+  +-+  +-+ |  | C |\r\n   | E |  |               |  |S1|   |S2|  |               |  | E |\r\n   | 1 |  | +-+  +-+  +-+ |  |  |   |  |  | +-+  +-+  +-+ |  | 2 |\r\n   |   |  | |P|  |E|  |P| |  |  |   |  |  | |P|  |D|  |P| |  |   |\r\n   |   |===>|h|=>|n|:>|h|:::>|  |::>|  |:::>|h|:>|e|=>|h|===>|   |\r\n   |   |  | |y|  |c|  |y| |  |  |   |  |  | |y|  |c|  |y| |  |   |\r\n   +---+  | +-+  +-+  +-+ |  +--+   +--+  | +-+  +-+  +-+ |  +---+\r\n    ^  ^  |   |  ^        |               |        |  ^   |  ^  ^\r\n    |  |  |   |B |        |<------+------>|        |  |   |  |  |\r\n    |  A  |   +--+        |       |       |        +--+-E |  F  |\r\n    |     +---------------+      +-+      +---------------+     |\r\n    |             ^              |I|               ^            |\r\n    |             |              +-+               |            |\r\n    |             C                                D            |\r\n    +-----------------------------L-----------------------------+\r\n", "correct_text": "          +---------------+               +---------------+\r\n          |      PE1      |               |      PE2      |\r\n       K  |   +--+        |               |        +--+   |  G\r\n       |  |   | J|        |               |        | H|   |  |\r\n       v  |   v  |        |               |        v  |   |  v\r\n   +---+  | +-+  +-+  +-+ |  +--+   +--+  | +-+  +-+  +-+ |  +---+\r\n   |   |  | |P|  |D|  |P| |  |  |   |  |  | |P|  |E|  |P| |  |   |\r\n   |   |<===|h|<=|e|<:|h|<:::|  |<::|  |<:::|h|<:|n|<=|h|<===|   |\r\n   |   |  | |y|  |c|  |y| |  |  |   |  |  | |y|  |c|  |y| |  |   |\r\n   | C |  | +-+  +-+  +-+ |  |  |   |  |  | +-+  +-+  +-+ |  | C |\r\n   | E |  |               |  |S1|   |S2|  |               |  | E |\r\n   | 1 |  | +-+  +-+  +-+ |  |  |   |  |  | +-+  +-+  +-+ |  | 2 |\r\n   |   |  | |P|  |E|  |P| |  |  |   |  |  | |P|  |D|  |P| |  |   |\r\n   |   |===>|h|=>|n|:>|h|:::>|  |::>|  |:::>|h|:>|e|=>|h|===>|   |\r\n   |   |  | |y|  |c|  |y| |  |  |   |  |  | |y|  |c|  |y| |  |   |\r\n   +---+  | +-+  +-+  +-+ |  +--+   +--+  | +-+  +-+  +-+ |  +---+\r\n    ^  ^  |   |  ^        |               |        |  ^   |  ^  ^\r\n    |  |  |   |B |        |<------+------>|        |  |   |  |  |\r\n    |  A  |   +--+        |       |       |        +--+-E |  F  |\r\n    |     +---------------+      +-+      +---------------+     |\r\n    |             ^              |I|               ^            |\r\n    |             |              +-+               |            |\r\n    |             C                                D            |\r\n    +-----------------------------L-----------------------------+\r\n", "notes": "From the figure, the DEC on PE1 has an emulated input AND an emulated output. It appears that the PHY on PE1 converts the Emulated traffic into Attachment Circuit.\r\nHowever, the DEC should have Emulated traffic at input and Attachment Circuit at the output. Therefore the output of DEC on PE1 should be '<=' not '<:'", "submit_date": "2008-10-02", "submitter_name": "Immad Mir", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1535", "doc-id": "RFC4119", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.2", "orig_text": "2.2.2.  'usage-rules' Element\r\n   'retransmission-allowed': When the value of this element is 'no', the\r\n      Recipient of this Location Object is not permitted to share the\r\n      enclosed Location Information, or the object as a whole, with\r\n      other parties.  When the value of this element is 'yes',\r\n\r\n\r\n snip.. \r\n\r\n 'retention-expires': This field specifies an absolute date at which\r\n      time the Recipient is no longer permitted to possess the location\r\n\r\nsnip..\r\n 'ruleset-reference': This field contains a URI that indicates where a\r\n      fuller ruleset of policies, related to this object, can be found.\r\n", "correct_text": "", "notes": "Definitions do not match with the XML schema : \r\n\r\n* boolean according to XML Schema Part 2: Datatypes Second Edition is either 'true', 'false', '0', or '1'\r\n\r\n     <xs:element name=\"retransmission-allowed\" type=\"xs:boolean\"\r\n        minOccurs=\"0\" maxOccurs=\"1\"/>\r\n\r\n* Element names do not match\r\n  \r\n <xs:element name=\"retention-expiry\" type=\"xs:dateTime\"\r\n        minOccurs=\"0\" maxOccurs=\"1\"/>\r\n\r\n     <xs:element name=\"external-ruleset\" type=\"xs:anyURI\"   \r\n        minOccurs=\"0\" maxOccurs=\"1\"/>", "submit_date": "2008-10-03", "submitter_name": "Eduardo Cardona", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1536", "doc-id": "RFC2260", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "   Both the issue of address assignment and renumbering could be\r\n   addressed by the appropriate use of network address translation\r\n   (NAT). The use of NAT for multi-homed enterprises is the beyond the\r\n   scope of this document.\r\n", "correct_text": "   Both the issue of address assignment and renumbering could be\r\n   addressed by the appropriate use of network address translation\r\n | (NAT). The use of NAT for multi-homed enterprises is beyond the\r\n   scope of this document.\r\n", "notes": "", "submit_date": "2008-10-03", "submitter_name": "Shiang-Ming Huang", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4412", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.3", "orig_text": "If a Transfer-Encoding header field is present in a response and\r\nthe chunked transfer coding is not the final encoding, the\r\nmessage body length is determined by reading the connection until\r\nit is closed by the server.  If a Transfer-Encoding header field\r\nis present in a request and the chunked transfer coding is not\r\nthe final encoding, the message body length cannot be determined\r\nreliably; the server MUST respond with the 400 (Bad Request)\r\nstatus code and then close the connection.", "correct_text": "Either:\r\n\r\nIf a Transfer-Encoding header field is present in a response and\r\nthe chunked transfer coding is not the final encoding, the\r\nmessage body length is determined by reading the connection until\r\nit is closed by the server.\r\n\r\nOr:\r\n\r\nIf a Transfer-Encoding header field is present in a request and \r\nthe chunked transfer coding is not the final encoding, the \r\nmessage body length cannot be determined \r\nreliably; the server MUST respond with the 400 (Bad Request) \r\nstatus code and then close the connection.\r\n", "notes": "The paragraph has two apparently contradictory rules.  It is unclear which is the correct behaviour.\n --VERIFIER NOTES-- \nThey're not contradictory: the first is for responses and the second is for requests, which are different situations.", "submit_date": "2015-07-09", "submitter_name": "Rick Taylor", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1989", "doc-id": "RFC5655", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10, pg. 39", "orig_text": "   [...]\r\n|  IPFIX Templates tend to increase the information content per record\r\n   by not requiring the export of irrelevant or non-present fields in\r\n   records, and the technique described in [RFC5473] also reduces the\r\n   export of redundant information.  [...]", "correct_text": "   [...]\r\n|  IPFIX Templates tend to decrease the information content per record\r\n   by not requiring the export of irrelevant or non-present fields in\r\n   records, and the technique described in [RFC5473] also reduces the\r\n   export of redundant information.  [...]", "notes": "Rationale: arguably  s/increase/decrease/ .\n --VERIFIER NOTES-- \nThe text seems to be correct. Usage of templates increases efficiency by increasing the amount of information carried by a record.    ", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1990", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.42", "orig_text": "                                                 [...].  However, aside\r\n   from merely applying CMS for signatures, there are several security\r\n|  issues which much be considered in certain circumstances; these are\r\n   covered in the subsections below.\r\n", "correct_text": "                                                 [...].  However, aside\r\n   from merely applying CMS for signatures, there are several security\r\n|  issues that must be considered in certain circumstances; these are\r\n   covered in the subsections below.\r\n", "notes": "Rationale: broken grammar;  s/which much/that must/ .", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1537", "doc-id": "RFC5346", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.1,pg.5", "orig_text": "   The case where a valid URI was present is covered in Section 4.1.2\r\n   (rule 2 A, second point).  The case where an ENUM entry was not\r\n   provisioned for a number that had an active PSTN Point of\r\n|  Interconnect is covered in Section 4.1.2 (rule 2 B).\r\n\r\n   For \"ENUM only\" ranges, where a given number in that range was in\r\n   service (i.e., there was an IP-based Point of Interconnect to a\r\n   carrier), a valid SIP or H.323 URI was always provisioned into the\r\n|  associated ENUM domain.  This is covered in Section 4.1.2 (rule 2 A,\r\n   second point).\r\n\r\n   In such an \"ENUM only\" range, if the number was not in service, a TXT\r\n   record was provisioned but no valid NAPTRs would be present.  This\r\n   ensured that a query for NAPTRs in a given (out of service, \"ENUM\r\n   only\" range) domain would succeed (i.e., return a RCODE of 0), but\r\n   that the number of answers would also be zero.  This is covered in\r\n|  Section 4.1.2 (rule 2 A, first point).  Note that this point also\r\n   covers the case where only NAPTRs that cannot be used to initiate a\r\n   call exist in such a zone.\r\n", "correct_text": "   The case where a valid URI was present is covered in Section 4.1.2\r\n|  (rule 3 A, second point).  The case where an ENUM entry was not\r\n   provisioned for a number that had an active PSTN Point of\r\n|  Interconnect is covered in Section 4.1.2 (rule 3 B).\r\n\r\n   For \"ENUM only\" ranges, where a given number in that range was in\r\n   service (i.e., there was an IP-based Point of Interconnect to a\r\n   carrier), a valid SIP or H.323 URI was always provisioned into the\r\n|  associated ENUM domain.  This is covered in Section 4.1.2 (rule 3 A,\r\n   second point).\r\n\r\n   In such an \"ENUM only\" range, if the number was not in service, a TXT\r\n   record was provisioned but no valid NAPTRs would be present.  This\r\n   ensured that a query for NAPTRs in a given (out of service, \"ENUM\r\n   only\" range) domain would succeed (i.e., return a RCODE of 0), but\r\n   that the number of answers would also be zero.  This is covered in\r\n|  Section 4.1.2 (rule 3 A, first point).  Note that this point also\r\n   covers the case where only NAPTRs that cannot be used to initiate a\r\n   call exist in such a zone.\r\n", "notes": "All (4) instances of \"rule 2\" should  say \"rule 3\".", "submit_date": "2008-10-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1538", "doc-id": "RFC5346", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.2,pg.7", "orig_text": "           [...]\r\n|          Configuring it in a non-complaint manner was considered\r\n           unacceptable, due to the need to analyze the impact of that\r\n           choice on other DNS operations thoroughly before it could be\r\n           implemented safely.\r\n", "correct_text": "           [...]    \r\n|          Configuring it in a non-compliant manner was considered\r\n           unacceptable, due to the need to analyze the impact of that\r\n           choice on other DNS operations thoroughly before it could be\r\n           implemented safely.\r\n", "notes": "Distorting typo in the last paragraph of 4.1.2. !", "submit_date": "2008-10-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1539", "doc-id": "RFC5301", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2, pg.3", "orig_text": "                         [...].  Another possible drawback might be the\r\n   added complexity of DNS.  Also, some DNS implementations might not\r\n|  support A and PTR records for Connection Network Service (CLNS)\r\n   Network Service Access Points (NSAPs).\r\n", "correct_text": "                         [...].  Another possible drawback might be the\r\n   added complexity of DNS.  Also, some DNS implementations might not\r\n|  support A and PTR records for Connectionless-mode Network Service (CLNS)\r\n   Network Service Access Points (NSAPs).\r\n", "notes": "Location is 2nd paragraph of Section 2, on top of page 3.\r\n\r\nRationale: Align with correct term in ISO/IEC 8348 clause 7", "submit_date": "2008-10-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1540", "doc-id": "RFC5301", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7, pg.4", "orig_text": "   This document specifies TLV 137, \"Dynamic Name\".  This TLV has\r\n|  already been allocated and reserved [RFC2763].  As such, no new\r\n|  actions are required on the part of IANA.\r\n", "correct_text": "   This document specifies TLV 137, \"Dynamic Name\".  This TLV has\r\n|  already been allocated and reserved [RFC2763].  IANA has updated\r\n|  the registry to reference this document for TLV 137.\r\n", "notes": "Rationale:\r\nRFC 5226, section 5.2 lists references in IANA Registries\r\nas subject to maintenance, and hence to be covered by IANA\r\nConsiderations sections in I-Ds / RFCs.  Hence, re-parenting\r\nof registrations should be explicitely mentioned there, in\r\norder to avoid registries to become outdated/incomplete\r\nover time, as has happened repeatedly in the past.\r\n\r\nFortunately, in this case IANA has operated intelligently\r\nand updated the Ref. in the registry without being requested\r\nexplicitely.  Thanks to IANA!\r\n\r\nNevertheless, I suggest to document this issue in an Errata Note\r\nin order to remind future authors of the possible drawbacks of\r\nnot including update instructions for already existing registrations\r\nin their IANA Considerations.\n --VERIFIER NOTES-- \n   This errata provided no additional information needed by an implementer of RFC5301.", "submit_date": "2008-10-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1547", "doc-id": "RFC2426", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "   img-inline-value     = binary-value\r\n        ;Value MUST be \"b\" encoded image content\r\n\r\n   img-inline-param\r\n   ^^^^^^^^^^^^^^^^\r\n\r\n   img-inline-param     = (\"VALUE\" \"=\" \"binary\")\r\n                        / (\"ENCODING\" \"=\" \"b\")\r\n                        / (\"TYPE\" \"=\" param-value\r\n        ;TYPE value MUST be an IANA registered image type", "correct_text": "   img-inline-value     = binary-value\r\n        ;Value MUST be \"b\" encoded image content\r\n\r\n   img-inline-param     = (\"VALUE\" \"=\" \"binary\")\r\n                        / (\"ENCODING\" \"=\" \"b\")\r\n                        / (\"TYPE\" \"=\" param-value)\r\n        ;TYPE value MUST be an IANA registered image type", "notes": "There is a definition of parameter \"img-inline-param\" without any assignment to it. The correct definition of \"img-inline-param\" follows in the next line.\r\n\r\nAlexey: Also added a missing \")\" at the end of img-inline-param definition.", "submit_date": "2008-10-09", "submitter_name": "Markus Lorenz", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1548", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   img-inline-param     = (\"VALUE\" \"=\" \"binary\")\r\n                        / (\"ENCODING\" \"=\" \"b\")\r\n                        / (\"TYPE\" \"=\" param-value\r\n        ;TYPE value MUST be an IANA registered image type", "correct_text": "   img-inline-param     = (\"VALUE\" \"=\" \"binary\")\r\n                        / (\"ENCODING\" \"=\" \"b\")\r\n                        / (\"TYPE\" \"=\" param-value)\r\n        ;TYPE value MUST be an IANA registered image type", "notes": "There is a closing parenthesis missing at the end of \"TYPE\".", "submit_date": "2008-10-09", "submitter_name": "Markus Lorenz", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1549", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   ;For name=\"KEY\"\r\n\r\n [...]\r\n\r\n   key-bin-param = (\"TYPE\" \"=\" keytype)\r\n                 / (\"ENCODING\" \"=\" \"b\")\r\n        ; Value MUST be a \"b\" encoded key or certificate\r\n", "correct_text": "   ;For name=\"KEY\"\r\n\r\n [...]\r\n\r\n   key-bin-param = (\"VALUE\" \"=\" \"binary\")\r\n                 / (\"TYPE\" \"=\" keytype)\r\n                 / (\"ENCODING\" \"=\" \"b\")\r\n        ; Value MUST be a \"b\" encoded key or certificate\r\n", "notes": "According to sections 2.4.1 and 3.7.2 the KEY type value can be specified as \"binary\".", "submit_date": "2008-10-09", "submitter_name": "Markus Lorenz", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2292", "doc-id": "RFC3605", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1", "orig_text": "The session invitation protocol (SIP, [RFC3261])", "correct_text": "The session initiation protocol (SIP, [RFC3261])", "notes": "SIP stand for Session Initiation Protocol, not invitation.", "submit_date": "2010-05-30", "submitter_name": "linear", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1541", "doc-id": "RFC5302", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1,1st para", "orig_text": "   The combination IP Internal Reachability Information and external\r\n   metric-type is not allowed.  Also, the up/down bit MUST NOT be set in\r\n|  L2 LSPs.  This leaves us with 8 different types of IP advertisements\r\n|  in IS-IS.  However, there are more than 8 reasons for IP prefixes to\r\n   be advertised in IS-IS.  The following list describes the types of IP\r\n   prefixes and how they are encoded.\r\n", "correct_text": "   The combination IP Internal Reachability Information and external\r\n   metric-type is not allowed.  Also, the up/down bit MUST NOT be set in\r\n|  L2 LSPs.  This leaves us with 9 different types of IP advertisements\r\n|  in IS-IS.  However, there are more than 9 reasons for IP prefixes to\r\n   be advertised in IS-IS.  The following list describes the types of IP\r\n   prefixes and how they are encoded.\r\n", "notes": "Rationale:\r\nEach of the two restrictions mentioned in the initial part\r\nof the quoted paragraph indeed excludes 4 possibilities\r\nof the original set of 16 combinations.  However, these\r\nrestrictions are not exclusive; they overlap in one case,\r\nthus reducing the number of forbidden combinations to 7.\r\n\r\nTherefore, we are left with *9* different types of combinations.\r\n\r\nThis can also be seen from the subsequent list of 12 items\r\n(unfortunately, the numbering of these has been lost on the way\r\nfrom RFC 2966 to its successor).  That list contains 3 pairs of\r\nentries, i.e. 6 entries that contain the wording\r\n   \"These prefixes cannot be distinguished from ... routes.\" ,\r\nthus reducing the number of distinguishable cases from 12 to 9.\r\n\r\nVirtually restoring the list item numbering as (1) ... (12),\r\nthe following table shows a decision matrix:\r\n\r\n   +----------------------+---------------+-------------------+\r\n   | Metric  U/D  \\ Level |      L1       |        L2         |\r\n   |  Type   Bit   \\ TLV# |  128  |  130  |   128   |   130   |\r\n   +----------------------+-------+-------+---------+---------+\r\n   |          0           |  (1)  |  (2)  | (3),(5) | (4),(6) |\r\n   |  Int   --------------+-------+-------+---------+---------+\r\n   |          1           |  (7)  |  (8)  |   N/A   |   N/A   |\r\n   +----------------------+-------+-------+---------+---------+\r\n   |          0           |  N/A  |  (9)  |   N/A   |(10),(11)|\r\n   |  Ext   --------------+-------+-------+---------+---------+\r\n   |          1           |  N/A  | (12)  |   N/A   |   N/A   |\r\n   +----------------------+-------+-------+---------+---------+", "submit_date": "2008-10-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1542", "doc-id": "RFC5302", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5, 2nd para", "orig_text": "                                              [...].  In this case, the\r\n   solution defined in this document, which requires only an upgrade of\r\n   L1L2 routers in selected areas, might be a good alternative to the\r\n|  solution defined in 5305.\r\n", "correct_text": "                                              [...].  In this case, the\r\n   solution defined in this document, which requires only an upgrade of\r\n   L1L2 routers in selected areas, might be a good alternative to the\r\n|  solution defined in RFC 5305.\r\n                       ^^^^", "notes": "Rationale: inconsistent, too colloquial verbiage.", "submit_date": "2008-10-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1543", "doc-id": "RFC5321", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.8", "orig_text": "   SMTP clients that experience a connection close, reset, or other\r\n   communications failure due to circumstances not under their control\r\n   (in violation of the intent of this specification but sometimes\r\n   unavoidable) SHOULD, to maintain the robustness of the mail system,\r\n   treat the mail transaction as if a 451 response had been received and\r\n   act accordingly.", "correct_text": "   SMTP clients that experience a connection close, reset, or other\r\n   communications failure due to circumstances not under their control\r\n   (in violation of the intent of this specification but sometimes\r\n   unavoidable) SHOULD, to maintain the robustness of the mail system,\r\n   treat the mail transaction as if a 421 response had been received and\r\n   act accordingly.", "notes": "SMTP clients are told to act as though a 451 response (\"Requested action aborted: local error in processing\") had been received when context clearly indicates that a 421 response (\"Service not available, closing transmission channel\") was intended.", "submit_date": "2008-10-08", "submitter_name": "Brett Watson", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1544", "doc-id": "RFC3359", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "|                             ...   This document summarizes all Table,\r\n  Length and Value (TLV) codepoints [...]\r\n                                                                 ^^^^^", "correct_text": "|                             ...   This document summarizes all Type,\r\n  Length and Value (TLV) codepoints [...]\r\n                                                                 ^^^^", "notes": "Rationale: wrong acronym expansion\r\n\r\nIf accepted, please update the RFC's Abstract in the full RFC index.", "submit_date": "2008-10-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1545", "doc-id": "RFC3905", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2", "orig_text": "Department:", "correct_text": "Organization:", "notes": "Searching for IPR statements made by a particular organization is more useful than seaching for a department name within an undisclosed organization.\r\n\r\nThis erratum was rejected because one of the authors (Valerie See) states:\r\nI would (respectfully) disagree with the proposed edit. As I recall, when we authored this (I say \"we\" in the sense of the co-authors of the RFC), the reason we went with a \"department\" was to narrow things down within large companies and/or organizations. If you look at a sampling of the IPR disclosures filed with the IETF (admittedly, only from the perspective of my personal opinion), it seems to be generally true that the \"patent holder/applicant\" field has made the question of \"who\" (as in \"organization\") pretty clear.\r\n\r\nParticularly since this is only an informational RFC, stating that the use of the template it contains is optional, and given the history, I don't feel that making the fix for the errata is the right thing to do.", "submit_date": "2008-10-08", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1546", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   ;For name=\"SOUND\"\r\n   param        = snd-inline-param\r\n        ; Only sound parameters allowed\r\n\r\n   param        =/ snd-refer-param\r\n        ; Only sound parameters allowed\r\n\r\n   value        = snd-line-value\r\n        ; Value MUST match value type", "correct_text": "   ;For name=\"SOUND\"\r\n   param        = snd-inline-param\r\n        ; Only sound parameters allowed\r\n\r\n   param        =/ snd-refer-param\r\n        ; Only sound parameters allowed\r\n\r\n   value        = snd-inline-value\r\n        ; Value MUST match value type", "notes": "There is no \"snd-line-value\" specified, but a \"snd-inline-value\" is.", "submit_date": "2008-10-09", "submitter_name": "Markus Lorenz", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2314", "doc-id": "RFC5888", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.3", "orig_text": "   A client that understands \"group\" and \"mid\", but does not want to use\r\n   these SDP features in a particular session, may still want to\r\n   indicate that it supports these features.  To indicate this support,\r\n|  a client can add an \"a=3Dgroup\" line with no identification-tags for\r\n   every semantics value it understands.\r\n", "correct_text": "   A client that understands \"group\" and \"mid\", but does not want to use\r\n   these SDP features in a particular session, may still want to\r\n   indicate that it supports these features.  To indicate this support,\r\n|  a client can add an \"a=group\" line with no identification-tags for\r\n   every semantics value it understands.\r\n", "notes": "Rationale:\r\n  There's no need for quoted-printable encoding of the\r\n  \"=\" character in the running RFC text!\r\n  (Cf. other parts of the RFC.)", "submit_date": "2010-06-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1550", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   ;For name=\"SOUND\"\r\n   param        = snd-inline-param\r\n        ; Only sound parameters allowed\r\n\r\n   param        =/ snd-refer-param\r\n        ; Only sound parameters allowed\r\n\r\n   value        = snd-line-value\r\n        ; Value MUST match value type\r\n\r\n   value        =/ snd-refer-value\r\n        ; Value MUST match value type\r\n\r\n   snd-inline-value     = binary-value CRLF\r\n        ; Value MUST be \"b\" encoded audio content\r\n\r\n   snd-inline-param     = (\"VALUE\" \"=\" \"binary\"])\r\n                        / (\"ENCODING\" \"=\" \"b\")\r\n                        / (\"TYPE\" \"=\" *SAFE-CHAR)\r\n        ; Value MUST be an IANA registered audio type\r\n", "correct_text": "   ;For name=\"SOUND\"\r\n   param        = snd-inline-param\r\n        ; Only sound parameters allowed\r\n\r\n   param        =/ snd-refer-param\r\n        ; Only sound parameters allowed\r\n\r\n   value        = snd-inline-value\r\n        ; Value MUST match value type\r\n\r\n   value        =/ snd-refer-value\r\n        ; Value MUST match value type\r\n\r\n   snd-inline-value     = binary-value \r\n        ; Value MUST be \"b\" encoded audio content\r\n\r\n   snd-inline-param     = (\"VALUE\" \"=\" \"binary\")\r\n                        / (\"ENCODING\" \"=\" \"b\")\r\n                        / (\"TYPE\" \"=\" *SAFE-CHAR)\r\n        ; Value MUST be an IANA registered audio type\r\n", "notes": "There is an odd \"CRLF\" at the end of the \"snd-inline-value\" definition. No other definition for binary-values contains this.\r\nThe value definition was corrected to \"snd-inline-value\" as reported in Errata ID 1546.\r\nI also removed an unmeant closing squared bracket in the VALUE-part of the \"snd-inline-param\" definition.", "submit_date": "2008-10-09", "submitter_name": "Markus Lorenz", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1551", "doc-id": "RFC2426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   ;For name=\"EMAIL\"\r\n\r\n [...]\r\n\r\n   email-type   = \"INTERNET\" / \"X400\" / iana-token / \"X-\" word\r\n        ; Values are case insensitive\r\n\r\n", "correct_text": "   ;For name=\"EMAIL\"\r\n\r\n [...]\r\n\r\n   email-type   = \"INTERNET\" / \"X400\" / iana-token / x-name\r\n        ; Values are case insensitive\r\n", "notes": "The email-type should contain a 'x-name' type instead of '\"X-\" word' for consistancy with tel-type, key-type and adr-type.\r\nAlthough \"word\" appears several times, it is not defined at all!", "submit_date": "2008-10-09", "submitter_name": "Markus Lorenz", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2291", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "18.36.3.", "orig_text": "      The server\r\n      MUST specify an ONC RPC program number equal to csa_cb_program and\r\n      an ONC RPC version number equal to 4 in callbacks sent to the\r\n      client.", "correct_text": "      The server\r\n      MUST specify an ONC RPC program number equal to csa_cb_program and\r\n      an ONC RPC version number equal to 1 in callbacks sent to the\r\n      client.", "notes": "RFC5661 disagrees with RFC5662. The latter specifies a version number of 1.", "submit_date": "2010-05-27", "submitter_name": "Michael Eisler", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1552", "doc-id": "RFC5307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1, pg.2", "orig_text": "1.1.  Link Local/Remote Identifiers\r\n\r\n|  A Link Local Interface Identifier is a sub-TLV of the extended IS\r\n   reachability TLV.  [...]\r\n", "correct_text": "1.1.  Link Local/Remote Identifiers\r\n\r\n|  The Link Local/Remote Identifiers TLV is a sub-TLV of the extended IS\r\n   reachability TLV.  [...]\r\n\r\n", "notes": "Rationale: Confusion in Terminology:\r\n  The term \"Link Local Interface Identifier\" does not\r\n  appear anywhere else in the document; the shorter form,\r\n  \"Link Local Identifier\" is used to denote a specific\r\n  component of the sub-TLV under consideration.  \r\n  Hence, the precise name of the sub-TLV should be used.", "submit_date": "2008-10-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1553", "doc-id": "RFC5307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.3, pg.5", "orig_text": "   The Minimum LSP Bandwidth is encoded in a 4-octet field in the IEEE\r\n   floating point format.  The units are bytes (not bits!) per second.\r\n   The Interface MTU is encoded as a 2-octet integer, and carries the\r\n|  MTU value in the units of bytes.\r\n", "correct_text": "   The Minimum LSP Bandwidth is encoded in a 4-octet field in the IEEE\r\n   floating point format.  The units are bytes (not bits!) per second.\r\n   The Interface MTU is encoded as a 2-octet integer, and carries the\r\n|  MTU value in units of bytes.\r\n", "notes": "Location is first paragraph below the diagram on page 5.\r\n\r\nRationale: Surprising use of article.\r\n\r\nOn the other hand, there are other places in the document\r\nwhere an expected article is missing, for instance, the\r\nsame clause recurring four times in Sections 1.1 - 1.4,\r\n\r\n      The following illustrates encoding of ...\r\n\r\nshould better say:\r\n\r\n      The following illustrates the encoding of ...", "submit_date": "2008-10-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1554", "doc-id": "RFC5307", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.3, pg.6", "orig_text": "|  When the Switching Capability field is LSC, there is no Switching\r\n   Capability specific information field present.\r\n", "correct_text": "|  When the Switching Capability field is LSC or FSC, there is no\r\n   Switching Capability specific information field present.\r\n", "notes": "Location is the penultimate paragraph in Section 1.3, on mid-page 6.\r\n\r\nRationale:\r\n In the same section, the list on top of page 5 shows the possible\r\n Switching Capability values, their meaning and short name.\r\n Later on, the RFC says:\r\n\r\n   The content of the Switching Capability specific information field\r\n   depends on the value of the Switching Capability field.\r\n\r\n ... and then starts to discuss the various cases.\r\n\r\n The quoted paragraph is the last one in this discussion, and\r\n it addresses the penultimate case in the list; the last case,\r\n FSC, is not dealt with in any way.\r\n\r\n Hence, the 'Switching Capability-specific information' in the\r\n Interface Switching Capability Descriptor is underspecified.\r\n\r\n The above correction tries to fix this deficiency to the best\r\n knowledge of the submitter of what has been intended.", "submit_date": "2008-10-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1555", "doc-id": "RFC5339", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.3, pg.9", "orig_text": "   FA-LSP connectivity verification relies on technology-specific\r\n   mechanisms (e.g., for SDH using G.707 and G.783; for MPLS using\r\n|  Bidrectional Forwarding Detection (BFD); etc.) as for any other LSP.\r\n   Hence, this requirement is out of the scope of GMPLS protocols.\r\n", "correct_text": "   FA-LSP connectivity verification relies on technology-specific\r\n   mechanisms (e.g., for SDH using G.707 and G.783; for MPLS using\r\n|  Bidirectional Forwarding Detection (BFD); etc.) as for any other LSP.\r\n   Hence, this requirement is out of the scope of GMPLS protocols.\r\n\r\n", "notes": "Typo, missing 'i'.", "submit_date": "2008-10-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5428", "doc-id": "RFC3986", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "      relative-part = \"//\" authority path-abempty\r\n                    / path-absolute\r\n                    / path-noscheme\r\n                    / path-empty\r\n", "correct_text": "      relative-part = \"//\" authority path-abempty\r\n                    / path-absolute\r\n                    / path-noscheme\r\n\t\t    / path-abempty    ; this was added\r\n                    / path-empty\r\n", "notes": "As written, the ABNF excludes \"/\" being a valid URI.  It is hard to believe that href=\"/\" when converted to a URI, would be illegal.", "submit_date": "2018-07-17", "submitter_name": "Kevin Layer", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 20:31:18"}, {"errata_id": "1556", "doc-id": "RFC5251", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.2, Fig.4", "orig_text": "        +---------------------------------------+\r\n        |     PPI Length (1 octet)              |\r\n        +---------------------------------------+\r\n        |     PPI (variable)                    |\r\n        +---------------------------------------+\r\n        |     CPI AFI (2 octets)                |\r\n        +---------------------------------------+\r\n|       |     CPI (length)                      |\r\n        +---------------------------------------+\r\n        |     CPI (variable)                    |\r\n        +---------------------------------------+\r\n\r\n          Figure 4: Auto-Discovery Information\r\n", "correct_text": "        +---------------------------------------+\r\n        |     PPI Length (1 octet)              |\r\n        +---------------------------------------+\r\n        |     PPI (variable)                    |\r\n        +---------------------------------------+\r\n        |     CPI AFI (2 octets)                |\r\n        +---------------------------------------+\r\n|       |     CPI Length (1 octet)              |\r\n        +---------------------------------------+\r\n        |     CPI (variable)                    |\r\n        +---------------------------------------+\r\n\r\n          Figure 4: Auto-Discovery Information\r\n", "notes": "Rationale:\r\nThe name of the field in the Figure should be consistent\r\nwith the subsequent explanations in the text, and the\r\ninformation presented should be comparable", "submit_date": "2008-10-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1557", "doc-id": "RFC5251", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.2, pg.14", "orig_text": "         ... consistent between the those providers.  [...]", "correct_text": "         ... consistent between those providers.  [...]", "notes": "Rationale: extraneous aricle", "submit_date": "2008-10-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1558", "doc-id": "RFC5251", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4, pg.19", "orig_text": "   Signaling:\r\n\r\n   A CE requests a network-protected LSP (i.e., an LSP that is protected\r\n|  from PE-to-PE) by using the technique described in [RFC4873].\r\n   [...]\r\n", "correct_text": "   Signaling:\r\n\r\n   A CE requests a network-protected LSP (i.e., an LSP that is protected\r\n|  from PE to PE) by using the technique described in [RFC4873].\r\n   [...]\r\n", "notes": "Rationale:  distorting hyphens", "submit_date": "2008-10-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1559", "doc-id": "RFC3410", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "STD 62, RFC 3415, \"View-based Access Control Model (VCAM) for the\r\nSimple Network Management Protocol (SNMP)\" [27], describes how\r\nview-based access control can be applied within command responder\r\nand notification originator applications.", "correct_text": "STD 62, RFC 3415, \"View-based Access Control Model (VACM) for the\r\nSimple Network Management Protocol (SNMP)\" [27], describes how\r\nview-based access control can be applied within command responder\r\nand notification originator applications.", "notes": " --VERIFIER NOTES-- \r\ns / VCAM / VACM", "submit_date": "2008-10-11", "submitter_name": "Carl Marcinik", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1560", "doc-id": "RFC3410", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "Of course, it is important that users deploying multi-lingual systems\r\nwith insecure protocols exercise sufficient due diligence to insure\r\nthat configurations limit access via SNMPv1 and SNMPv2c\r\nappropriately, in keeping with the organization\u2019s security policy,\r\njust as they should carefully limit access granted via SNMPv3 with a\r\nsecurity level of no authentication and no privacy which is roughly\r\nequivalent from a security point of view.", "correct_text": "Of course, it is important that users deploying multi-lingual systems\r\nwith insecure protocols exercise sufficient due diligence to ensure\r\nthat configurations limit access via SNMPv1 and SNMPv2c\r\nappropriately, in keeping with the organization\u2019s security policy,\r\njust as they should carefully limit access granted via SNMPv3 with a\r\nsecurity level of no authentication and no privacy which is roughly\r\nequivalent from a security point of view.", "notes": "The sentence used \"insure\" when it should have used \"ensure\".", "submit_date": "2008-10-11", "submitter_name": "Carl Marcinik", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1561", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "    LAST-ACK - represents waiting for an acknowledgment of the\r\n    connection termination request previously sent to the remote TCP\r\n    (which includes an acknowledgment of its connection termination\r\n    request).\r\n", "correct_text": "    LAST-ACK - represents waiting for an acknowledgment of the\r\n    connection termination request previously sent to the remote TCP\r\n    (The connection termination request sent to the remote TCP included\r\n    an acknowledgment of the connection termination request sent from\r\n    the remote TCP).\r\n", "notes": "It is unclear what 'which' and 'its' refers to.", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2261", "doc-id": "RFC3428", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "10", "orig_text": "MESSAGE sip:user2@domain.com SIP/2.0\r\nVia: SIP/2.0/TCP proxy.domain.com;branch=z9hG4bK123dsghds\r\nVia: SIP/2.0/TCP user1pc.domain.com;branch=z9hG4bK776sgdkse;\r\n                                           received=1.2.3.4\r\nMax-Forwards: 69\r\nFrom: sip:user1@domain.com;tag=49394\r\nTo: sip:user2@domain.com\r\nCall-ID: asd88asd77a@1.2.3.4\r\nCSeq: 1 MESSAGE\r\nContent-Type: text/plain\r\nContent-Length: 18\r\n\r\nWatson, come here.\r\n\r\nThe message is received by user2, displayed, and a response is\r\ngenerated, message F3, and sent to the proxy:\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/TCP proxy.domain.com;branch=z9hG4bK123dsghds;\r\n                                         received=192.0.2.1\r\nVia: SIP/2.0/TCP user1pc.domain.com;;branch=z9hG4bK776sgdkse;\r\n                                            received=1.2.3.4\r\nFrom: sip:user1@domain.com;tag=49394\r\nTo: sip:user2@domain.com;tag=ab8asdasd9\r\nCall-ID: asd88asd77a@1.2.3.4\r\nCSeq: 1 MESSAGE\r\nContent-Length: 0\r\n\r\nNote that most of the header fields are simply reflected in the\r\nresponse.  The proxy receives this response, strips off the top Via,\r\nand forwards to the address in the next Via, user1pc.domain.com, the\r\nresult being message F4:\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/TCP user1pc.domain.com;branch=z9hG4bK776sgdkse;\r\n                                           received=1.2.3.4\r\nFrom: sip:user1@domain.com;;tag=49394\r\nTo: sip:user2@domain.com;tag=ab8asdasd9\r\nCall-ID: asd88asd77a@1.2.3.4\r\nCSeq: 1 MESSAGE\r\nContent-Length: 0\r\n", "correct_text": "MESSAGE sip:user2@user2pc.domain.com SIP/2.0\r\nVia: SIP/2.0/TCP proxy.domain.com;branch=z9hG4bK123dsghds\r\nVia: SIP/2.0/TCP user1pc.domain.com;branch=z9hG4bK776sgdkse;\r\n                                           received=1.2.3.4\r\nMax-Forwards: 69\r\nFrom: sip:user1@domain.com;tag=49583\r\nTo: sip:user2@domain.com\r\nCall-ID: asd88asd77a@1.2.3.4\r\nCSeq: 1 MESSAGE\r\nContent-Type: text/plain\r\nContent-Length: 18\r\n\r\nWatson, come here.\r\n\r\nThe message is received by user2, displayed, and a response is\r\ngenerated, message F3, and sent to the proxy:\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/TCP proxy.domain.com;branch=z9hG4bK123dsghds;\r\n                                         received=192.0.2.1\r\nVia: SIP/2.0/TCP user1pc.domain.com;branch=z9hG4bK776sgdkse;\r\n                                           received=1.2.3.4\r\nFrom: sip:user1@domain.com;tag=49583\r\nTo: sip:user2@domain.com;tag=ab8asdasd9\r\nCall-ID: asd88asd77a@1.2.3.4\r\nCSeq: 1 MESSAGE\r\nContent-Length: 0\r\n\r\nNote that most of the header fields are simply reflected in the\r\nresponse.  The proxy receives this response, strips off the top Via,\r\nand forwards to the address in the next Via, user1pc.domain.com, the\r\nresult being message F4:\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/TCP user1pc.domain.com;branch=z9hG4bK776sgdkse;\r\n                                           received=1.2.3.4\r\nFrom: sip:user1@domain.com;tag=49583\r\nTo: sip:user2@domain.com;tag=ab8asdasd9\r\nCall-ID: asd88asd77a@1.2.3.4\r\nCSeq: 1 MESSAGE\r\nContent-Length: 0\r\n", "notes": "The corrected text changes F2's request-uri to reflect the binding.\r\nThe corrected text proxies received From tag instead of changing it.\r\nThe corrected text removes various extra semicolons show within example.", "submit_date": "2010-05-13", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2522", "doc-id": "RFC5986", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5, pg.12", "orig_text": "|  The domain name that used to authenticate the LIS is the domain name\r\n   input to the U-NAPTR process, not the output of that process\r\n   [RFC3958], [RFC4848].  As a result, the results of DNS queries do not\r\n   need integrity protection.\r\n", "correct_text": "|  The domain name that is used to authenticate the LIS is the domain\r\n   name input to the U-NAPTR process, not the output of that process\r\n   [RFC3958], [RFC4848].  As a result, the results of DNS queries do not\r\n   need integrity protection.\r\n", "notes": "Rationale: missing verb: \"is\"", "submit_date": "2010-09-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1562", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "Remember that each segment is bound to as many consecutive sequence numbers as\r\nthere are octets of data in the segment.\r\n...\r\nthe numbers occupied by a segment are \"busy\" or \"in use\" until MSL seconds have\r\npassed, upon crashing a block of space-time is occupied by the octets of the\r\nlast emitted segment,", "correct_text": "Remember that each segment is bound to as many consecutive sequence numbers as\r\nthere are octets of data and SYN or FIN flags in the segment.\r\n...\r\nthe numbers occupied by a segment are \"busy\" or \"in use\" until MSL seconds have\r\npassed, upon crashing a block of space-time is occupied by the octets and SYN or\r\nFIN flags of the last emitted segment,", "notes": "I changed this text to specifically include the SYN and FIN bits, rather than the previous errata wording which was unclear since other control flags are not part of the sequence space, based on discussion on the TCPM mailing list which indicated that the prior wording was confusing.", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1563", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4", "orig_text": "Reset Generation\r\n    3.  If the connection is in a synchronized state (ESTABLISHED,\r\n    FIN-WAIT-1, FIN-WAIT-2, CLOSE-WAIT, CLOSING, LAST-ACK, TIME-WAIT),\r\n    any unacceptable segment (out of window sequence number or\r\n    unacceptible acknowledgment number) must elicit only an empty\r\n    acknowledgment segment containing the current send-sequence number\r\n    and an acknowledgment indicating the next sequence number expected\r\n    to be received, and the connection remains in the same state.\r\n\r\n    If an incoming segment has a security level, or compartment, or\r\n    precedence which does not exactly match the level, and compartment,\r\n    and precedence requested for the connection,a reset is sent and\r\n    connection goes to the CLOSED state. The reset takes its sequence\r\n    number from the ACK field of the incoming segment.", "correct_text": "Reset Generation\r\n    3.  If the connection is in a synchronized state (ESTABLISHED,\r\n    FIN-WAIT-1, FIN-WAIT-2, CLOSE-WAIT, CLOSING, LAST-ACK, TIME-WAIT),\r\n    any unacceptable segment (out of window sequence number or\r\n    unacceptable acknowledgment number) must elicit only an empty\r\n    acknowledgment segment containing the current send-sequence number\r\n    and an acknowledgment indicating the next sequence number expected\r\n    to be received, and the connection remains in the same state.\r\n\r\n    If an incoming segment has a security level, or compartment, or\r\n    precedence which does not exactly match the level, and compartment,\r\n    and precedence requested for the connection, a reset is sent and\r\n    the connection goes to the CLOSED state.\r\n    If the incoming segment has the ACK bit set, the reset takes its\r\n    sequence number from the ACK field of the segment, otherwise the\r\n    reset has sequence number zero and the ACK field is set to the sum\r\n    of the sequence number and segment length of the incoming segment.\r\n    A SYN with a sequence number inside the receive window yields a\r\n    reset, too.", "notes": "Four errors, two editorial and two technical\r\n1. Typo unacceptible -> unacceptable\r\n2. wrong spacing and missing 'the'\r\n3. The ACK bit should be set. But this check comes later. See page 71.\r\n4. According to page 71 a SYN can cause a reset, too.\r\n --VERIFIER NOTES-- \r\nI split the editorial corrections into another errata report and accepted them as \"hold for document update\".  The technical corrections are being rejected due to RFC 1122 updating 793 and already including clarification on setting SEQ=0 and ACK=SEG.SEQ+SEG.LEN, as suggested by this errata submission.", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1564", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.7", "orig_text": "When the sender creates a segment and transmits it the sender advances\r\nSND.NXT.  When the receiver accepts a segment it advances RCV.NXT and\r\nsends an acknowledgment.  When the data sender receives an\r\nacknowledgment it advances SND.UNA.  The extent to which the values of\r\nthese variables differ is a measure of the delay in the communication.\r\nThe amount by which the variables are advanced is the length of the\r\ndata in the segment.  Note that once in the ESTABLISHED state all\r\nsegments must carry current acknowledgment information.\r\n", "correct_text": "When the sender creates a segment and transmits it the sender advances\r\nSND.NXT.  When the receiver accepts a segment it advances RCV.NXT and\r\nsends an acknowledgment.  When the data sender receives an\r\nacknowledgment it advances SND.UNA.  The extent to which the values of\r\nthese variables differ is a measure of the delay in the communication.\r\nThe amount by which the variables are advanced is the length of the\r\ndata and SYN or FIN flags in the segment.  Note that\r\nonce in the ESTABLISHED state all segments must carry current acknowledgment information.\r\n", "notes": "SYN and FIN are counted, too", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1565", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.8", "orig_text": "TCP/Lower-Level Interface\r\n\r\n      Type of Service = Precedence: routine, Delay: normal, Throughput:\r\n      normal, Reliability: normal; or 00000000.\r\n", "correct_text": "TCP/Lower-Level Interface\r\n\r\n      Type of Service = Precedence, Delay: normal, Throughput:\r\n      normal, Reliability: normal; or XXX00000.\r\n      where XXX are the three bits determining precedence, e.g. 000\r\n      means routine.\r\n", "notes": "The precedence is given by the user.", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1566", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.9", "orig_text": "OPEN Call\r\nLISTEN STATE\r\n      Data associated with SEND may be sent with SYN segment or\r\n      queued for transmission after entering ESTABLISHED state.  The\r\n      urgent bit if requested in the command must be sent with the data\r\n      segments sent as a result of this command.", "correct_text": "OPEN Call\r\nLISTEN STATE\r\n      --delete this--", "notes": "This is an OPEN call. There is no data associated with a SEND.\r\nBTW, What WND to set in the SYN segment? Set RCV.WND=1?\n --VERIFIER NOTES-- \nThis is \"may\" and does not produce incorrect protocol behavior, so there is no reason to remove it.  This rejection was validated through consulting with the TCPM list.", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1571", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Maximum Segment Size Option Data:  16 bits\r\n\r\n          If this option is present, then it communicates the maximum\r\n          receive segment size at the TCP which sends this segment.\r\n          This field must only be sent in the initial connection request\r\n          (i.e., in segments with the SYN control bit set).  If this\r\n          option is not used, any segment size is allowed.\r\n\r\n", "correct_text": "Maximum Segment Size Option Data:  16 bits\r\n\r\n          If this option is present, then it communicates the maximum\r\n          receive segment size at the TCP which sends this segment.\r\n          This field may be sent in the initial connection request\r\n          (i.e., in segments with the SYN control bit set) and must not\r\n          be sent in other segments.  If this option is not used, any\r\n          segment size is allowed.\r\n\r\n", "notes": "'must only' is ambiguous or even senseless.", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1572", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "If the incoming segment has an ACK field, the reset takes its\r\nsequence number from the ACK field of the segment, otherwise the\r\nreset has sequence number zero and the ACK field is set to the sum\r\nof the sequence number and segment length of the incoming segment.\r\n", "correct_text": "If the incoming segment has the ACK bit set, the reset takes its\r\nsequence number from the ACK field of the segment, otherwise the\r\nreset has sequence number zero and the ACK field is set to the sum\r\nof the sequence number and segment length of the incoming segment.\r\n", "notes": "Every segment has an ACK field.", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4413", "doc-id": "RFC7584", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "   Because of forking, a B2BUA might receive multiple answers for a\r\n   single outbound INVITE.  When this occurs, the B2BUA SHOULD follow\r\n   Sections 3.2 or 3.3 for all of those received answers.", "correct_text": "   Because of forking, a B2BUA might receive multiple answers for a\r\n   single outbound INVITE.  When this occurs, the B2BUA SHOULD follow\r\n   Sections 4.2 or 4.3 for all of those received answers.", "notes": "Sections 3.2 and 3.3 do not exist.  The normative statement should indicate sections 4.2 and 4.3.", "submit_date": "2015-07-10", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1567", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.9", "orig_text": "SEND Call\r\nLISTEN STATE\r\n      If the foreign socket is specified, then change the connection\r\n      from passive to active, select an ISS.  Send a SYN segment, set\r\n      SND.UNA to ISS, SND.NXT to ISS+1.  Enter SYN-SENT state.  Data\r\n      associated with SEND may be sent with SYN segment or queued for\r\n      transmission after entering ESTABLISHED state.  The urgent bit if\r\n      requested in the command must be sent with the data segments sent\r\n      as a result of this command.  If there is no room to queue the\r\n      request, respond with \"error:  insufficient resources\".  If\r\n      Foreign socket was not specified, then return \"error:  foreign\r\n      socket unspecified\".", "correct_text": "SEND Call\r\nLISTEN STATE\r\n      If the foreign socket is specified, then change the connection\r\n      from passive to active, select an ISS.  Send a SYN segment, set\r\n      SND.UNA to ISS, SND.NXT to ISS+1.  Enter SYN-SENT state.  Data\r\n      associated with SEND may be sent with SYN segment or queued for\r\n      transmission after entering ESTABLISHED state. If data is sent with\r\n      the SYN segment, SND.NXT is advanced.    The urgent bit if\r\n      requested in the command must be sent with the data segments sent\r\n      as a result of this command.  If there is no room to queue the\r\n      request, respond with \"error:  insufficient resources\".  If\r\n      Foreign socket was not specified, then return \"error:  foreign\r\n      socket unspecified\".", "notes": "If data is sent, SND.NXT has to be advanced.\r\n\r\nBut there are more problems.\r\nWhat WND to set in the SYN segment? Set RCV.WND=1?\r\nHow much data may be put into the segment? There is no SND.WND yet.\r\nWhat about PUSH? May the data be queued if a PUSH is given?\n --VERIFIER NOTES-- \nAs discussed on the TCPM Working Group mailing list in 2012:\r\n\r\n   According to the errata, there is some ambiguity in RFC 793 regarding data in SYNs.\r\n   This requires changes beyond the suggested errata text, and thus we believe\r\n   this issue should be done in a separate RFC.   \r\n", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1568", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.9", "orig_text": "SEGMENT ARRIVES\r\n If the state is LISTEN then\r\n  third check for a SYN\r\n        The connection\r\n        state should be changed to SYN-RECEIVED.  Note that any other\r\n        incoming control or data (combined with SYN) will be processed\r\n        in the SYN-RECEIVED state, but processing of SYN and ACK should\r\n        not be repeated.\r\n  fourth other text or control\r\n        Any other control or text-bearing segment (not containing SYN)\r\n        must have an ACK and thus would be discarded by the ACK\r\n        processing.  An incoming RST segment could not be valid, since\r\n        it could not have been sent in response to anything sent by this\r\n        incarnation of the connection.  So you are unlikely to get here,\r\n If the state is SYN-SENT then\r\n  first check the ACK bit\r\n        If SND.UNA =< SEG.ACK =< SND.NXT then the ACK is acceptable.\r\n  fourth check the SYN bit\r\n        This step should be reached only if the ACK is ok, or there is\r\n        no ACK, and it the segment did not contain a RST.\r\n\r\n        If the SYN bit is on and the security/compartment and precedence\r\n        are acceptable then, RCV.NXT is set to SEG.SEQ+1, IRS is set to\r\n        SEG.SEQ.\r\n        ...\r\n        Data or controls which were queued for\r\n        transmission may be included.\r\n  fifth, if neither of the SYN or RST bits is set then drop the\r\n        segment and return.\r\n Otherwise,\r\n  third check security and precedence\r\n  fifth check the ACK field,\r\n   SYN-RECEIVED STATE\r\n    If SND.UNA =< SEG.ACK =< SND.NXT then enter ESTABLISHED state\r\n    and continue processing.\r\n    If the segment acknowledgment is not acceptable, form a\r\n    reset segment,\r\n\r\n      <SEQ=SEG.ACK><CTL=RST>\r\n\r\n    and send it.\r\n   ESTABLISHED STATE\r\n    If SND.UNA < SEG.ACK =< SND.NXT then, set SND.UNA <- SEG.ACK.\r\n    Any segments on the retransmission queue which are thereby\r\n    entirely acknowledged are removed.  Users should receive\r\n    positive acknowledgments for buffers which have been SENT and\r\n    fully acknowledged (i.e., SEND buffer should be returned with\r\n    \"ok\" response).  If the ACK is a duplicate\r\n    (SEG.ACK < SND.UNA), it can be ignored.  If the ACK acks\r\n    something not yet sent (SEG.ACK > SND.NXT) then send an ACK,\r\n    drop the segment, and return.\r\n\r\n    If SND.UNA < SEG.ACK =< SND.NXT, the send window should be\r\n    updated.  If (SND.WL1 < SEG.SEQ or (SND.WL1 = SEG.SEQ and\r\n    SND.WL2 =< SEG.ACK)), set SND.WND <- SEG.WND, set\r\n    SND.WL1 <- SEG.SEQ, and set SND.WL2 <- SEG.ACK.\r\n  eighth, check the FIN bit,\r\n   Do not process the FIN if the state is CLOSED, LISTEN or SYN-SENT\r\n   since the SEG.SEQ cannot be validated; drop the segment and\r\n   return.\r\n", "correct_text": "SEGMENT ARRIVES\r\n If the state is LISTEN then\r\n  third check for a SYN\r\n        ??? No idea. But the original does not work.\r\n        If there is data in the SYN, we have a problem. We have to be\r\n        ESTABLISHED to get a buffer. And in ESTABLISHED the segment will be\r\n        dropped, because it has the ACK bit off.\r\n        We need to allocate a buffer. It's just for one segment. And we have\r\n        to adapt the event handling for the user's RECEIVE call. ???\r\n  fourth other text or control\r\n        Any other control or text-bearing segment (not containing SYN)\r\n        must have an ACK and thus would be discarded by the ACK\r\n        processing. So you are unlikely to get here,\r\n If the state is SYN-SENT then\r\n  first check the ACK bit\r\n        If SND.UNA < SEG.ACK =< SND.NXT then the ACK is acceptable.\r\n  fourth check the SYN bit\r\n        This step should be reached only if the ACK is ok, or there is\r\n        no ACK, and if the segment did not contain a RST.\r\n\r\n        If the SYN bit is on, RCV.NXT is set to SEG.SEQ+1, IRS is set to\r\n        SEG.SEQ.\r\n        ...\r\n        Data or controls which were queued for\r\n        transmission may be included and SND.NXT advanced accordingly.\r\n  fifth, because neither of the SYN or RST bits is set, drop the\r\n        segment and return.\r\n Otherwise,\r\n  third check security and precedence\r\n       Construct the RST in this way:\r\n          If there is an ACK\r\n\r\n            <SEQ=SEG.ACK><CTL=RST>\r\n\r\n          Otherwise\r\n\r\n            <SEQ=0><ACK=SEG.SEQ+SEG.LEN><CTL=RST,ACK>\r\n  fifth check the ACK field,\r\n   SYN-RECEIVED STATE\r\n    If SND.UNA < SEG.ACK =< SND.NXT then enter ESTABLISHED state, set\r\n    SND.WND <- SEG.WND, SND.WL1 <- SEG.SEQ, SND.WL2 <- SEG.ACK,\r\n    and continue processing.\r\n    If the segment acknowledgment is not acceptable\r\n    (SEG.ACK =< ISS or SEG.ACK > SND.NXT), form a\r\n    reset segment,\r\n\r\n      <SEQ=SEG.ACK><CTL=RST>\r\n\r\n    and send it.\r\n    Drop the segment. Return.\r\n   ESTABLISHED STATE\r\n    If the ACK is a duplicate (SEG.ACK =< SND.UNA), it can be\r\n    ignored.  If the ACK acks something not yet sent\r\n    (SEG.ACK > SND.NXT) then send an ACK, drop the segment, and\r\n    return.\r\n    If SND.UNA =< SEG.ACK =< SND.NXT, the send window should be\r\n    updated.  If (SND.WL1 < SEG.SEQ or (SND.WL1 = SEG.SEQ and\r\n    SND.WL2 =< SEG.ACK)), set SND.WND <- SEG.WND, set\r\n    SND.WL1 <- SEG.SEQ, and set SND.WL2 <- SEG.ACK.\r\n    If SND.UNA < SEG.ACK =< SND.NXT, then set SND.UNA <- SEG.ACK.\r\n    Any segments on the retransmission queue which are thereby\r\n    entirely acknowledged are removed.  Users should receive\r\n    positive acknowledgments for buffers which have been SENT and\r\n    fully acknowledged (i.e., SEND buffer should be returned with\r\n    \"ok\" response).\r\n  eighth, check the FIN bit,\r\n   --delete this--\r\n", "notes": "If the state is LISTEN then\r\n fourth other text or control\r\n  Incoming RST are already thrown out. Don't diskuss about it here.\r\nIf the state is SYN-SENT then\r\n  first check the ACK bit\r\n   nearly the same as the correction in RFC-1122 4.2.2.20(g)\r\n  fourth check the SYN bit\r\n   typo it -> if\r\n   security/compartment and precedence are already checked. It is no mistake,\r\n    but it is superfluous and confusing.\r\n   don't forget to advance SND.NXT\r\n  fifth\r\n   No more testing is necessary. Superfluous testing is confusing.\r\nOtherwise,\r\n  third check security and precedence\r\n   The ACK bit is not yet checked.\r\n  fifth check the ACK field\r\n   SYN-RECEIVED STATE\r\n    SND.UNA == ISS. SEG.ACK == ISS does not ack our SYN.\r\n    SND.WND <- SEG.WND etc is corrected by RFC-1122.\r\n    explanation of not acceptable acknowledgment is helpful\r\n    'Drop the segment. Return.' is missing, too.\r\n   ESTABLISHED STATE\r\n    Corrections of RFC-1122 are included.\r\n    What about SEG.ACK =< ISS? I reccomend to send an ACK, drop the segment\r\n     and return. When SND.NXT overpaces ISS, ISS has to be adjusted somehow,\r\n     e.g. ISS <- ISS xor 0x80000000.\r\n    The updating of SND.UNA must be in the end, because the comparisations\r\n     need the old value of SND.UNA.\r\n  eighth, check the FIN bit,\r\n   If you are here, you are not in those states.\n --VERIFIER NOTES-- \nAs discussed on the TCPM Working Group mailing list in 2012:\r\n\r\n   This errata combines several different suggestions. Some of them repeat updates of RFC 1122,\r\n   some are subtle minor hints, and in some cases the errata does not propose better phrasing.\r\n   The errata cannot be accepted in this form. It might be worth to consider individual aspects\r\n   separately.   ", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1569", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.4", "orig_text": "The TCP/internet interface provides calls to send and receive\r\ndatagrams addressed to TCP modules in hosts anywhere in the internet\r\nsystem.", "correct_text": "The TCP/internet interface provides calls to send datagrams addressed\r\nto and receive datagrams addressed from TCP modules in hosts anywhere\r\nin the internet system.", "notes": "scnr", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1570", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.7", "orig_text": "There are two principal cases for matching the sockets in the local\r\npassive OPENs and an foreign active OPENs.  In the first case, the\r\nlocal passive OPENs has fully specified the foreign socket.  In this\r\ncase, the match must be exact.  In the second case, the local passive\r\nOPENs has left the foreign socket unspecified.  In this case, any\r\nforeign socket is acceptable as long as the local sockets match.", "correct_text": "There are two principal cases for matching the sockets in the local\r\npassive OPENs and a foreign active OPEN.  In the first case, there\r\nis exactly one local passive OPEN with matching local socket that\r\nhas fully specified the foreign socket.  In this case, the match must\r\nbe exact.  In the second case, there is exactly one local passive\r\nOPEN with matching local socket that has left the foreign socket\r\nunspecified.  In this case, any foreign socket is acceptable.\r\n", "notes": "In this passage singular or plural make a big difference.\n --VERIFIER NOTES-- \nAs discussed on the TCPM Working Group mailing list in 2012:\r\n\r\nWe believe that the original text is not confusing and a change of the meaning is not required.", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2523", "doc-id": "RFC2421", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15", "orig_text": "    Content-type: message/disposition-notification\r\n\r\n    Reporting-UA: gregs-laptop.dallas.company.com (Unified FooMail 3.0)\r\n\r\n    Original-Recipient: rfc822;22722@vm.company.com\r\n [...]\r\n", "correct_text": "    Content-type: message/disposition-notification\r\n\r\n    Reporting-UA: gregs-laptop.dallas.company.com (Unified FooMail 3.0)\r\n    Original-Recipient: rfc822;22722@vm.company.com\r\n [...]\r\n", "notes": "RFC 2298 does not permit extra CRLFs between fields\r\nin a MDN.  See the BNF in RFC 2298 section 3 (note that the CRLFs\r\nthere are the ones that terminate each header field).", "submit_date": "2002-01-31", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2524", "doc-id": "RFC3678", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.2", "orig_text": "   The interface argument holds the local IP address of the interface.\r\n", "correct_text": "   The interface argument holds the interface index of the interface.\r\n", "notes": "See Section 5.2.1.", "submit_date": "2010-09-16", "submitter_name": "YOSHIFUJI Hideaki", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2525", "doc-id": "RFC3986", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Advice for designers of new URI schemes can be found in [RFC2718].\r\n", "correct_text": "Advice for designers of new URI schemes can be found in [RFC4395].", "notes": "The document [RFC2718] is for designers of designers of new URL schemes only.  It has been obsoleted by [RFC4395] that covers all URI schemes.\r\n\r\n[RFC4395]  \r\nT. Hansen, T. Hardie, T. and L. Masinter,\r\n\"Guidelines and Registration Procedures for New URI Schemes\", \r\nRFC 4395, February 2006.", "submit_date": "2010-09-17", "submitter_name": "Christopher Yeleighton", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3053", "doc-id": "RFC6325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "If X is not greater than Sz, then RB1 sets the \"failed minimum MTU\r\ntest\" flag for RB2 in RB1's Hello. If size X succeeds, and X > Sz,\r\nthen RB1 advertises the largest tested X for each adjacency in the\r\nTRILL Hellos RB1 sends on that link, and RB1 MAY advertise X as an\r\nattribute of the link to RB2 in RB1's LSP.", "correct_text": "If X is not greater than or equal to Sz, then RB1 sets the \"failed\r\nminimum MTU test\" flag for RB2 in RB1's Hello. If size X succeeds, and\r\nX >= Sz, then RB1 advertises the largest tested X for each adjacency\r\nin the TRILL Hellos RB1 sends on that link, and RB1 MAY advertise X as\r\nan attribute of the link to RB2 in RB1's LSP.", "notes": "", "submit_date": "2011-12-15", "submitter_name": "Donald E. Eastlake, 3rd", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1573", "doc-id": "RFC4760", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "      Address Family Identifier (AFI):\r\n\r\n         This field in combination with the Subsequent Address Family\r\n         Identifier field identifies the set of Network Layer protocols\r\n         to which the address carried in the Next Hop field must belong,\r\n         the way in which the address of the next hop is encoded, and\r\n         the semantics of the Network Layer Reachability Information\r\n         that follows.  If the Next Hop is allowed to be from more than\r\n         one Network Layer protocol, the encoding of the Next Hop MUST\r\n         provide a way to determine its Network Layer protocol.\r\n\r\n         Presently defined values for the Address Family Identifier\r\n         field are specified in the IANA's Address Family Numbers\r\n         registry [IANA-AF].\r\n\r\n      Subsequent Address Family Identifier (SAFI):\r\n\r\n         This field in combination with the Address Family Identifier\r\n         field identifies the set of Network Layer protocols to which\r\n         the address carried in the Next Hop must belong, the way in\r\n         which the address of the next hop is encoded, and the semantics\r\n         of the Network Layer Reachability Information that follows.  If\r\n         the Next Hop is allowed to be from more than one Network Layer\r\n         protocol, the encoding of the Next Hop MUST provide a way to\r\n         determine its Network Layer protocol.\r\n\r\n", "correct_text": "      Address Family Identifier (AFI):\r\n \r\n         This field in combination with the Subsequent Address Family\r\n         Identifier field identifies the semantics of Withdrawn Routes \r\n         Network Layer Reachability Information carried in the attribute.\r\n \r\n         Presently defined values for the Address Family Identifier\r\n         field are specified in the IANA's Address Family Numbers\r\n         registry [IANA-AF].\r\n\r\n      Subsequent Address Family Identifier (SAFI):\r\n\r\n         This field in combination with the Address Family Identifier\r\n         field identifies the semantics of Withdrawn Routes Network\r\n         Layer Reachability Information carried in the attribute.\r\n", "notes": "This original text refers to the field (Next Hop) that is not present in \r\nthe attribute MP_UNREACH_NLRI. Therefore the original text is not applicable.", "submit_date": "2008-10-13", "submitter_name": "yakov rekhter", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1574", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "Once an endpoint has reached the SHUTDOWN-RECEIVED state, it MUST NOT\r\n send a SHUTDOWN in response to a ULP request, and should discard\r\n subsequent SHUTDOWN chunks.", "correct_text": "Once an endpoint has reached the SHUTDOWN-RECEIVED state, it MUST NOT\r\n send a SHUTDOWN in response to a ULP request, and should discard\r\n subsequent ULP shutdown requests.", "notes": "The text never intended the SCTP endpoint to ignore SHUTDOWN\r\nchunks from its peer. If it did the endpoints could never gracefully\r\nterminate a associations in some cases.", "submit_date": "2008-10-14", "submitter_name": "Randall Stewart", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1575", "doc-id": "RFC4130", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "Any difference between AS2 implantations and RFCs are\r\n                           ^^^^^^^^^^^^^\r\n   mentioned specifically in the sections below.", "correct_text": "Any difference between AS2 implementations and RFCs are\r\n                           ^^^^^^^^^^^^^^^\r\n   mentioned specifically in the sections below.\r\n", "notes": "The word \"implantations\" should be \"implementations\".\r\n", "submit_date": "2008-10-14", "submitter_name": "r.  deutsch", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1576", "doc-id": "RFC4186", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1", "orig_text": "Within this section, the 3rd paragraph on page 38 says:\r\n\r\n   The receipt of a notification code with the S bit set to one (values\r\n|  32768...65536) does not imply failure.  Notification code \"Success\"\r\n   (32768) has been reserved as a general notification code to indicate\r\n   successful authentication.\r\n\r\n", "correct_text": "   The receipt of a notification code with the S bit set to one (values\r\n|  32768...65535) does not imply failure.  Notification code \"Success\"\r\n   (32768) has been reserved as a general notification code to indicate\r\n   successful authentication.\r\n", "notes": "Within this section, 2nd paragraph on page 38, values start from 0, so they end at 65535 (2^16 - 1).", "submit_date": "2008-10-16", "submitter_name": "Guy Lespade", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1577", "doc-id": "RFC4632", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   For example, the legacy \"Class B\" network 172.16.0.0, with an implied\r\n   network mask of 255.255.0.0, is defined as the prefix 172.16.0.0/16,\r\n   the \"/16\" indicating that the mask to extract the network portion of\r\n   the prefix is a 32-bit value where the most significant 16 bits are\r\n   ones and the least significant 16 bits are zeros.  Similarly, the\r\n   legacy \"Class C\" network number 192.168.99.0 is defined as the prefix\r\n   192.168.99.0/24; the most significant 24 bits are ones and the least\r\n   significant 8 bits are zeros.\r\n\r\n", "correct_text": "   For example, the legacy \"Class B\" network 172.16.0.0, with an implied\r\n   network mask of 255.255.0.0, is defined as the prefix 172.16.0.0/16,\r\n   the \"/16\" indicating that the mask to extract the network portion of\r\n   the prefix is a 32-bit value where the most significant 16 bits are\r\n   ones and the least significant 16 bits are zeros.  Similarly, the\r\n   legacy \"Class C\" network number 192.168.99.0 is defined as the prefix\r\n   192.168.99.0/24; the most significant 24 bits are ones and the least\r\n   significant 8 bits are zeros.\r\n\r\n   In cases where a prefix has 1, 2, or 3 trailing insignificant\r\n   octets, it is permissible to elide the insignificant octets and\r\n   trailing '.' separators. Thus, 172.16.0.0/16 may also be represented\r\n   as 172.16/16, and 192.168.99.0/24 is equivalent to 192.168.99/24.\r\n\r\n\r\n", "notes": "This adds some clarifying text and documents a common convention for displaying prefixes.  It was never the intention of the authors to exclude the alternative notation and it has since come into vogue.  It should be explicitly documented as being acceptable.", "submit_date": "2008-10-23", "submitter_name": "Tony Li", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2262", "doc-id": "RFC3611", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.6", "orig_text": "   min_jitter: 32 bits\r\n         The minimum relative transit time between two packets in the\r\n         above sequence number interval.  All jitter values are measured\r\n         as the difference between a packet's RTP timestamp and the\r\n         reporter's clock at the time of arrival, measured in the same\r\n         units.\r\n\r\n   max_jitter: 32 bits\r\n         The maximum relative transit time between two packets in the\r\n         above sequence number interval.\r\n\r\n   mean_jitter: 32 bits\r\n         The mean relative transit time between each two packet series\r\n         in the above sequence number interval, rounded to the nearest\r\n         value expressible as an RTP timestamp.\r\n\r\n   dev_jitter: 32 bits\r\n         The standard deviation of the relative transit time between\r\n         each two packet series in the above sequence number interval.\r\n", "correct_text": "   min_jitter: 32 bits\r\n         The minimum jitter measured for a pair of packets in the above\r\n         sequence number interval.  The packet jitter is defined in [9,\r\n         Section 6.4.1] and measured in timestamp units.\r\n\r\n   max_jitter: 32 bits\r\n         The maximum jitter measured for a pair of packets in the above\r\n         sequence number interval.\r\n\r\n   mean_jitter: 32 bits\r\n         The mean jitter measured for a pair of packets in the above\r\n         sequence number interval, rounded to the nearest\r\n         value expressible as a timestamp.\r\n\r\n   dev_jitter: 32 bits\r\n         The standard deviation of the jitter measured for a pair of packets\r\n         in the above sequence number interval.\r\n", "notes": "In the original RFC 3611 in Section 4.6 where it defines \"min_jitter\", the jitter definition is different from the one given in RFC3550. This errata report is to correct this difference by referring to RFC 3550 for the proper definition of jitter and revises the definitions of \"min_jitter\", \"max_jitter\", \"mean_jitter\", and \"dev_jitter\" fields.", "submit_date": "2010-05-14", "submitter_name": "Kamil Sarac", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6866", "doc-id": "RFC8632", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "      container older-than {\r\n        presence \"Age specification\";\r\n        description\r\n          \"Matches the 'last-status-change' leaf in the alarm.\";\r\n        choice age-spec {\r\n", "correct_text": "      container older-than {\r\n        presence \"Age specification\";\r\n        description\r\n          \"Matches the 'last-changed' leaf in the alarm.\";\r\n        choice age-spec {\r\n", "notes": "There is no last-status-change leaf in alarm (and it seems there never was).\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/ccamp/wmCgk0DQq0lG6S_e59W-MKW8EOQ/", "submit_date": "2022-03-04", "submitter_name": "Reshad Rahman", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-05-10 15:58:20"}, {"errata_id": "1578", "doc-id": "RFC5254", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2, pg. 4", "orig_text": "         Native  |<--------Multi-Segment Pseudowire----->|  Native\r\n         Service |         PSN              PSN          |  Service\r\n          (AC)   |     |<-Tunnel->|     |<-Tunnel->|     |  (AC)\r\n           |     V     V     1    V     V     2    V     V   |\r\n           |     +-----+          +-----+          +---- +   |\r\n   +---+   |     |T-PE1|==========|S-PE1|==========|T-PE2|   |    +---+\r\n   |   |---------|........PW1.......... |...PW3..........|---|----|   |\r\n   |CE1|   |     |     |          |     |          |     |   |    |CE2|\r\n   |   |---------|........PW2...........|...PW4..........|--------|   |\r\n   +---+   |     |     |==========|     |==========|     |   |    +---+\r\n       ^         +-----+          +-----+          +-----+        ^\r\n       |     Provider Edge 1         ^        Provider Edge 3     |\r\n       |                             |                            |\r\n       |                             |                            |\r\n       |                     PW switching point                   |\r\n       |                                                          |\r\n       |                                                          |\r\n       |<------------------- Emulated Service ------------------->|\r\n\r\n                Figure 2: PW Switching Reference Model\r\n\r\n   Figure 2 extends this architecture to show a multi-segment case.\r\n   Terminating PE1 (T-PE1) and Terminating PE3 (T-PE3) provide PWE3\r\n   service to CE1 and CE2.  These PEs terminate different PSN tunnels,\r\n   PSN Tunnel 1 and PSN Tunnel 2, and may reside in different PSN or\r\n   pseudowire domains.  One PSN tunnel extends from T-PE1 to S-PE1\r\n   across PSN1, and a second PSN tunnel extends from S-PE1 to T-PE2\r\n   across PSN2.", "correct_text": "         Native  |<--------Multi-Segment Pseudowire----->|  Native\r\n         Service |         PSN              PSN          |  Service\r\n          (AC)   |     |<-Tunnel->|     |<-Tunnel->|     |  (AC)\r\n           |     V     V     1    V     V     2    V     V   |\r\n           |     +-----+          +-----+          +---- +   |\r\n   +---+   |     |T-PE1|==========|S-PE2|==========|T-PE3|   |    +---+\r\n   |   |---------|........PW1.......... |...PW3..........|---|----|   |\r\n   |CE1|   |     |     |          |     |          |     |   |    |CE2|\r\n   |   |---------|........PW2...........|...PW4..........|--------|   |\r\n   +---+   |     |     |==========|     |==========|     |   |    +---+\r\n       ^         +-----+          +-----+          +-----+        ^\r\n       |     Provider Edge 1         ^        Provider Edge 3     |\r\n       |                             |                            |\r\n       |                             |                            |\r\n       |                     PW switching point                   |\r\n       |                                                          |\r\n       |                                                          |\r\n       |<------------------- Emulated Service ------------------->|\r\n\r\n                Figure 2: PW Switching Reference Model\r\n\r\n   Figure 2 extends this architecture to show a multi-segment case.\r\n   Terminating PE1 (T-PE1) and Terminating PE3 (T-PE3) provide PWE3\r\n   service to CE1 and CE2.  These PEs terminate different PSN tunnels,\r\n   PSN Tunnel 1 and PSN Tunnel 2, and may reside in different PSN or\r\n   pseudowire domains.  One PSN tunnel extends from T-PE1 to S-PE2\r\n   across PSN1, and a second PSN tunnel extends from S-PE2 to T-PE2\r\n   across PSN2.", "notes": "Rationale:\r\n\r\nThe original diagram was inconsistent. The proposed edits correct this inconsistency. Specifically the PEs are now labels xPE1, xPE2, xPE3 across\r\nthe page and the text is modified accordingly.\r\n\r\n\r\nThe erratum is technically correct, but since the purpose of this RFC was to establish the requirements in RFC5659 and the error does not occur in RFC5659 the problem may be classified as fixed in update.", "submit_date": "2008-10-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1579", "doc-id": "RFC3300", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "4.  Security Coniderations", "correct_text": "4.  Security Considerations", "notes": "", "submit_date": "2008-10-27", "submitter_name": "Randy Bush", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1580", "doc-id": "RFC5345", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8, para #2", "orig_text": "   Depending on the data recorded in a trace, it might be possible to\r\n   determine the age of devices by looking at the values of objects such\r\n|  as sysObjectID and sysDecr [RFC3418].  [...]", "correct_text": "   Depending on the data recorded in a trace, it might be possible to\r\n   determine the age of devices by looking at the values of objects such\r\n|  as sysObjectID and sysDescr [RFC3418].  [...]\r\n                           ^", "notes": "See RFC 3418.", "submit_date": "2008-10-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Juergen Schoenwaelder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1581", "doc-id": "RFC5345", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1, pg.15", "orig_text": "  oid.type =\r\n    xsd:string {\r\n      pattern =\r\n|       \"(([0-1](\\.[1-3]?[0-9]))|(2.(0|([1-9]\\d*))))\" ~\r\n        \"(\\.(0|([1-9]\\d*))){0,126}\"\r\n    }\r\n", "correct_text": "  oid.type =\r\n    xsd:string {\r\n      pattern =\r\n|       \"(([0-1](\\.[1-3]?[0-9]))|(2\\.(0|([1-9]\\d*))))\" ~\r\n        \"(\\.(0|([1-9]\\d*))){0,126}\"\r\n    }\r\n", "notes": "Missing backslash disturbs the pattern;\r\n\"\\.\" is needed to make the dot literal.\r\n", "submit_date": "2008-10-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Juergen Schoenwaelder", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1582", "doc-id": "RFC5340", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "Faraz Shamin reviewed a late version of the document and provided editorial comments.\r\n", "correct_text": "Faraz Shamim reviewed a late version of the document and provided editorial comments.\r\n", "notes": "Last name is mis-spelled with \"n\" at the end instead of \"m\"", "submit_date": "2008-11-01", "submitter_name": "Faraz Shamim", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1583", "doc-id": "RFC5340", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "Faraz Shamin reviewed a late version of the document and provided\r\n      editorial comments.\r\n", "correct_text": "Faraz Shamim reviewed a late version of the document and provided\r\n      editorial comments.\r\n", "notes": "Last name is mis-spelled. Instead of \"m\" at the end it says \"n\"", "submit_date": "2008-11-01", "submitter_name": "Faraz Shamim", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1584", "doc-id": "RFC3339", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "Note that due to ambiguities in ISO 8601, some interpretations had to\r\nbe made.  First, ISO 8601 is not clear if mixtures of basic and\r\nextended format are permissible.  This grammar permits mixtures. ", "correct_text": "This grammar permits mixtures of basic and extended format.", "notes": "ISO 8601:2000 section 5.4.2 reads: \r\n  d) the expression shall either be completely in basic format, in which case the minimum number of separators necessary for the required expression is used, or completely in extended format, in which case additional separators shall be used in accordance with 5.2 and 5.3.\r\n\r\n(There is similar text in section 4.3.3 of ISO 8601:2004)", "submit_date": "2008-11-03", "submitter_name": "Roberto Javier Godoy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1585", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.2", "orig_text": "struct {\r\n    ClientCertificateType certificate_types<1..2^8-1>;\r\n    DistinguishedName certificate_authorities<0..2^16-1>;\r\n} CertificateRequest;\r\n", "correct_text": "struct {\r\n    ClientCertificateType certificate_types<1..2^8-1>;\r\n    SignatureAndHashAlgorithm\r\n      supported_signature_algorithms<2^16-1>;\r\n    DistinguishedName certificate_authorities<0..2^16-1>;\r\n} CertificateRequest;\r\n", "notes": "The definition in Section 7.4.4 (which includes the \"supported_\r\nsignature_algorithms\" field) is the correct one (confirmed\r\nby Eric Rescorla on 2009-02-27)", "submit_date": "2008-11-05", "submitter_name": "Pasi Eronen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2263", "doc-id": "RFC4330", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "4.  The server reply should be discarded if any of the LI, Stratum,\r\n    or Transmit Timestamp fields is 0 or the Mode field is not 4\r\n    (unicast) or 5 (broadcast).", "correct_text": "4.  The server reply should be discarded if any of the VN, Stratum, \r\n    or Transmit Timestamp fields is 0 or the Mode field is not 4 \r\n    (unicast) or 5 (broadcast).", "notes": "Zero is a legal value for the LI field under normal conditions. Zero is not legal for VN field, however.", "submit_date": "2010-05-15", "submitter_name": "Scott Barnes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4689", "doc-id": "RFC7231", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.1.2", "orig_text": "3.1.1.2.  Charset\r\n\r\n   HTTP uses charset names to indicate or negotiate the character\r\n   encoding scheme of a textual representation [RFC6365].  A charset is\r\n   identified by a case-insensitive token.\r\n\r\n     charset = token\r\n\r\n   Charset names ought to be registered in the IANA \"Character Sets\"\r\n   registry (<http://www.iana.org/assignments/character-sets>) according\r\n   to the procedures defined in [RFC2978].", "correct_text": "3.1.1.2.  Charset\r\n\r\n   HTTP uses charset names to indicate or negotiate the character\r\n   encoding scheme of a textual representation [RFC6365].\r\n\r\n\r\n     charset       = <mime-charset, see [RFC5987], Section 3.2.1>\r\n\r\n\r\n   Charset names ought to be registered in the IANA \"Character Sets\"\r\n   registry (<http://www.iana.org/assignments/character-sets>) according\r\n   to the procedures defined in [RFC2978].", "notes": "The definition of charset from RFC 5987 is more strict and more correct.\r\n\r\nMark Nottingham: This is not an errata; it is a suggestion for a technical change in the document, and needs to be discussed by the working group.", "submit_date": "2016-05-10", "submitter_name": "Daurnimator", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1586", "doc-id": "RFC5357", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2, pg.5", "orig_text": "<< first bullet >>\r\n\r\n                                                    vv\r\n|  -  The Control-Client initiates a TCP connection on TWAMP's well-\r\n      known port, and the Server (its role now established) responds\r\n      with its Greeting message, indicating the security/integrity\r\n      mode(s) it is willing to support.", "correct_text": "                                                    vv\r\n|  -  The Control-Client initiates a TCP connection to TWAMP's well-\r\n      known port, and the Server (its role now established) responds\r\n      with its Greeting message, indicating the security/integrity\r\n      mode(s) it is willing to support.", "notes": "The \"on\" is misleading or ambiguous; such verbiage commonly is used\r\nto denote the *source* port used to send a packet, but from the\r\ncontext (and in particular the first paragraph of  Section 3.1)\r\nit seems likely that you mean the *destination* port number here.\r\n\r\nThe corrected text aims to disambiguate/clarify/correct this.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1587", "doc-id": "RFC5357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5, pg.10", "orig_text": "<< last paragraph of 3.5 >>\r\n\r\n   When the requested Receiver Port is not available (e.g., port in\r\n   use), the Server at the Session-Reflector MAY suggest an alternate\r\n   and available port for this session in the Port field.  The Session-\r\n   Sender either accepts the alternate port, or composes a new Session-\r\n|  Request message with suitable parameters.  Otherwise, the Server at\r\n   vvvvvvvvvvvvvvvvvv                                    !!!!!!!!!!^^^\r\n|  the Control-Client uses the Accept field to convey other forms of\r\n|  session rejection or failure and MUST NOT suggest an alternate port;\r\n                               ^\r\n   in this case, the Port field MUST be set to zero.", "correct_text": "   When the requested Receiver Port is not available (e.g., port in\r\n   use), the Server at the Session-Reflector MAY suggest an alternate\r\n   and available port for this session in the Port field.  The Session-\r\n   Sender either accepts the alternate port, or composes a new Session-\r\n|  Request message with suitable parameters.  Otherwise, the Server uses\r\n                                                                   ^\r\n|  the Accept field to convey other forms of session rejection or\r\n|  failure to the Control-Client and MUST NOT suggest an alternate port;\r\n          ^^^^^^^^^^^^^^^^^^^^^^^\r\n   in this case, the Port field MUST be set to zero.", "notes": "The original description does not match the architectural model depicted\r\nin the figure in Section 1.2 (page 4), where the Server and the\r\nControl-Client are distinct entities, and the TWAMP-Control messages\r\nflow between these parties.\r\n\r\nThe proposed corrected text aims to clarify the roles.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1588", "doc-id": "RFC5357", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "|                                 [...].  As with OWAMP-test protocol\r\n   [RFC4656], there are three modes: unauthenticated, authenticated, and\r\n   encrypted.", "correct_text": "|                                 [...].  As with the OWAMP-test\r\n   protocol [RFC4656], there are three modes: unauthenticated,\r\n   authenticated, and encrypted.", "notes": "Missing article.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1589", "doc-id": "RFC5357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1, pg.16", "orig_text": "<<  headline for figure on page 16  >>\r\n\r\n|  For authenticated and encrypted modes:", "correct_text": "|  Plaintext format for authenticated and encrypted modes:\r\n   ^^^^^^^^^^^^^^^^^^", "notes": "The original headline is misleading; it does *not* show the general\r\non-the-wire format, which is partially hidden by encryption.\r\n\r\nThus, the headline should be amended to avoid confusion.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2192", "doc-id": "RFC4306", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3.", "orig_text": "If there are multiple transforms with the same Transform Type, the\r\nproposal is an OR of those transforms.  If there are multiple\r\nTransforms with different Transform Types, the proposal is an AND of\r\nthe different groups.  For example, to propose ESP with (3DES or", "correct_text": "If there are multiple transforms with the same Transform Type, those\r\ntransforms constitute a group out of which exactly one transform is\r\nto be chosen. If there are multiple of those groups, the proposal is\r\nan AND of the choices out of the different groups.  For example, to\r\npropose ESP with (3DES or", "notes": "Logically unclear. OR means AND/OR. But here you talk about XOR.\r\nFurthermore has AND precedence before OR.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2193", "doc-id": "RFC4306", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.5.", "orig_text": "         Attribute Type                 Value        Attribute Format\r\n      --------------------------------------------------------------\r\n      RESERVED                           0-13 Key Length (in bits)\r\n      14                 TV RESERVED                           15-17\r\n      RESERVED TO IANA                   18-16383 PRIVATE USE\r\n      16384-32767\r\n\r\n   Values 0-13 and 15-17 were used in a similar context in IKEv1 and\r\n   should not be assigned except to matching values.  Values 18-16383\r\n   are reserved to IANA.  Values 16384-32767 are for private use among\r\n   mutually consenting parties.\r\n\r\n   - Key Length\r\n\r\n      When using an Encryption Algorithm that has a variable-length key,\r\n      this attribute specifies the key length in bits (MUST use network\r\n      byte order).  This attribute MUST NOT be used when the specified\r\n      Encryption Algorithm uses a fixed-length key.", "correct_text": "?", "notes": "I do not understand anything.\r\nTherefore I cannot offer a better formulation.\n --VERIFIER NOTES-- \nNo alternative text was proposed.  Note that I did forward this to the authors of draft-ietf-ipsecme-ikev2bis.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2194", "doc-id": "RFC4306", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.12.", "orig_text": "identify the implementation as an aid in debugging.  A Vendor ID\r\npayload MUST NOT change the interpretation of any information defined\r\nin this specification (i.e., the critical bit MUST be set to 0).", "correct_text": "- delete it -", "notes": "According to 3.2 the critical bit has to be clear.\r\nAnd the rest is trivial: To be compliant you have to comply.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2264", "doc-id": "RFC4577", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.6", "orig_text": "         [...] If BGP installs\r\n         a route of one of these types in the VRF, and if that route is\r\n         selected for redistribution into OSPF, it will be advertised by\r\n         OSPF in either a type 3 or a type 5 LSA, depending on the\r\n         domain identifier.", "correct_text": "         [...] If BGP installs\r\n         a route of one of these types in the VRF, and if that route is\r\n         selected for redistribution into OSPF, it will be advertised by\r\n         OSPF in either a type 3, type 5, or type 7 LSA, depending on the\r\n         domain identifier and the type of area the PE/CE link belongs to.", "notes": "Suggested because reading 4.2.6 is contradictory with the following:\r\n\r\n4.2.8.1.  External Routes\r\n\r\n[...]If the route is advertised, and the PE/CE link belongs to a NSSA area, it is advertised in a type 7 LSA.[...]", "submit_date": "2010-05-17", "submitter_name": "William McCall", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1590", "doc-id": "RFC5357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1, pg.17", "orig_text": "<<  second paragraph on page 17  >>\r\n   Sequence Number is the sequence number of the test packet according\r\n|  to its transmit order.  It starts with zero and is incremented by one\r\n|  for each subsequent packet.  The Sequence Number generated by the\r\n   Session-Reflector is independent from the sequence number of the\r\n   arriving packets.", "correct_text": "   Sequence Number is the sequence number of the test packet according\r\n|  to its transmit order within the TWAMP test session.  It starts with\r\n                        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n|  zero and is incremented by one for each subsequent packet in the\r\n   vvvvvvv                                                  ^^^^^^^^\r\n|  session.  The Sequence Number generated by the Session-Reflector is\r\n   independent from the sequence number of the arriving packets.", "notes": "In the original text, it remains unclear whether this sequence number\r\nis maintained per session, per Session-Sender, or per Session-Reflector.\r\n\r\nAppendix I, in the 3rd text paragraph on page 23, seems to give\r\na hint that the Session-Reflector generated sequence numbers might\r\nhave been intended to be generated independently per *session*.\r\n\r\nSince similar behavior is not present in OWAMP, it ugently needs to\r\nbe specified in RFC 5357 to further interoperable implementations.\r\n\r\nThe corrected text proposed aims at cure this deficiency via a change\r\nwith minimal footprint.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1591", "doc-id": "RFC5357", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6, pg.20", "orig_text": "<<  second paragraph of the section  >>\r\n\r\n                                                             [...].  The\r\n   Count field provides an opportunity for a denial-of-service (DOS)\r\n   attack because it is 32 bits long.  If an attacking system set the\r\n|  maximum value in Count (2**32), [...]", "correct_text": "                                                             [...].  The\r\n   Count field provides an opportunity for a denial-of-service (DOS)\r\n   attack because it is 32 bits long.  If an attacking system set the\r\n|  maximum value in Count (2**32-1), [...]", "notes": "In the second paragraph of Section 6, near the bottom of page 20,\r\nthe maximum value given is too large.  In the OWAMP specification,\r\nI could not find any indication of a bias added to the Count value,\r\nand thus the (hypothetical) range for Count is   0 .. 2**32-1 .\r\n\r\nThus, the RFC text needs to be corrected.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1592", "doc-id": "RFC5357", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8, pg. 21", "orig_text": "<<  near the bottom of page 21 >>\r\n\r\n   #               863-872    Unassigned", "correct_text": "", "notes": "The indicated line should be deleted; it is confusing, as it\r\ncontains information on the state of the IANA registry at the\r\ntime of publication of the RFC, which is totally uncorrelated\r\nto the matter of the RFC.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1595", "doc-id": "RFC4861", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   asymmetric reachability\r\n                  - a link where non-reflexive and/or non-transitive\r\n                    reachability is part of normal operation.  (Non-\r\n                    reflexive reachability means packets from A reach B,\r\n                    but packets from B don't reach A.  Non-transitive\r\n                    reachability means packets from A reach B, and\r\n                    packets from B reach C, but packets from A don't\r\n                    reach C.)  Many radio links exhibit these\r\n                    properties.\r\n", "correct_text": "   asymmetric reachability\r\n                  - a link where uni-directional and/or non-transitive\r\n                    reachability is part of normal operation.  (Uni-\r\n                    directional reachability means packets from A reach B,\r\n                    but packets from B don't reach A.  Non-transitive\r\n                    reachability means packets from A reach B, and\r\n                    packets from B reach C, but packets from A don't\r\n                    reach C.)  Many radio links exhibit these\r\n                    properties.", "notes": "Discussed on Autoconf ML:\r\nhttp://www.ietf.org/mail-archive/web/autoconf/current/msg01119.html\r\nTerm non-reflexive link is \"link to itself\". To be replaced with either asymmetric, non-symmetric or uni-directional. Asymmetric and Non-symmetric are confusing as those are often used for asymmetric link metrics (e.g. ADSL, UMTS/HSPDA).", "submit_date": "2008-11-11", "submitter_name": "Teco Boot", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1616", "doc-id": "RFC5348", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7, pg.30", "orig_text": "<<  second paragraph of section, at the bottom of pg. 30 >>\r\n\r\n   The main advantage of a sender-based variant of TFRC is that the\r\n   sender does not have to trust the receiver's calculation of the\r\n   packet loss rate.  However, with the requirement of reliable delivery\r\n   of loss information from the receiver to the sender, a sender-based\r\n|  TFRC would have much tighter constraints on the transport protocol in\r\n   which it is embedded.", "correct_text": "   The main advantage of a sender-based variant of TFRC is that the\r\n   sender does not have to trust the receiver's calculation of the\r\n   packet loss rate.  However, with the requirement of reliable delivery\r\n   of loss information from the receiver to the sender, a sender-based\r\n|  TFRC has much tighter constraints on the transport protocol in which\r\n   it is embedded.", "notes": "Rationale:\r\n  Consistency in style broken by incomplete change since \r\n  RFC 3448; present tense is now used in the first sentence;\r\n  so it should be used in the second one as well, for clarity.", "submit_date": "2008-11-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2195", "doc-id": "RFC4306", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.15.", "orig_text": "Some attributes MAY be multi-valued, in which case multiple attribute\r\nvalues of the same type are sent and/or returned.  Generally, all\r\nvalues of an attribute are returned when the attribute is requested.", "correct_text": "Some attributes MAY be multi-valued, in which case multiple\r\nConfiguration Attribute structures of the same type are sent and/or\r\nreturned.  Generally, all values of an attribute are returned when\r\nthe attribute is requested.", "notes": "The text may suggest that there may be multiple values in one\r\nConfiguration Attribute structure.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2196", "doc-id": "RFC4306", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.15.", "orig_text": "For some attributes (in this version of the specification only\r\ninternal addresses), multiple requests indicates a request that\r\nmultiple values be assigned.  For these attributes, the number of", "correct_text": "For some attributes (in this version of the specification only\r\ninternal addresses), multiple requests indicate a request that\r\nmultiple values be assigned.  For these attributes, the number of", "notes": "typo", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1593", "doc-id": "RFC5357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1 and 8.2", "orig_text": "<<  Section 8.1, on top of page 22 >>\r\n\r\n   IANA has created a TWAMP-Control Command Number registry.  TWAMP-\r\n|  Control commands are specified by the first octet in OWAMP-Control\r\n                                     !!!!!!!!!!!!!!!\r\n   messages as shown in Section 3.5 of [RFC4656], and modified by this\r\n|  document.  Thus, this registry may contain sixteen possible values.\r\n                                              ^^^^^^^", "correct_text": "   IANA has created a TWAMP-Control Command Number registry.  TWAMP-\r\n   Control commands are specified by the first octet in OWAMP-Control\r\n   messages as shown in Section 3.5 of [RFC4656], and modified by this\r\n|  document.  Thus, this registry may contain 256 possible values.\r\n                                              ^^^", "notes": "Dependent second instance of the issue:\r\n\r\nAccording to the quoted snippet from Section 8.1, Section 8.2 again\r\nuses \"may only contain sixteen values\", which should be corrrected\r\nin the same manner.\r\n\r\n\r\nRationale:\r\n\r\nApparently, \"the first octet\" will allow *256* possible values, not 16.\r\nTherefore, without an explanation of why only 16 values are allowed,\r\nthis restriction does not make sense.\r\n\r\nIn to the lack of an explanation for the restriction, the RFC text\r\nand the IANA registry should be changed, replacing \"sixteen\" by \"256\"\r\nthroughout.\r\n\r\nAlternatively, a clarifying note would have to be supplied, in order\r\nto justify the restriction.\r\n\r\n\r\nHint: Errata Note entered on request of the responsible AD before\r\n      resolution with the authors.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1594", "doc-id": "RFC5357", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.8,1st para", "orig_text": "                                vvvvvvvvvvvvvvvvv\r\n                                                        [...].  The\r\n|  message is terminated with a single block HMAC to complete the Stop-\r\n   Sessions command.  [...]", "correct_text": "<<  either:  >>\r\n\r\n                                                        [...].  The\r\n|  message is terminated with a single-block HMAC to complete the Stop-\r\n   Sessions command.  [...]\r\n\r\n<<  or:  >>\r\n\r\n                                       vvvvvvvvvv\r\n                                                        [...].  The\r\n|  message is terminated with a single HMAC block to complete the Stop-\r\n   Sessions command.  [...]", "notes": "In any way this is problematic because the term \"block\" has not been\r\nintroduced into the RFC text.  (That's also a problem for 4.2.1!)\r\n\r\nEven in the restricted context of SHA (FIPS PUB 180-2/3) and HMAC\r\n(FIPS PUB 197), the term \"block\" does not uniquely identify a\r\nspecific number of octets.\r\nFor SHA-1, SHA-224, and SHA-256, the block size is 512 bits,\r\nfor SHA-384 and SHA-512 it is 1024 bits.\r\n\r\nBut OWAMP uses a truncated version of HMAC-SHA-1 with a 128-bit MAC,\r\n(officially denoted as HMAC-SHA-1-128), and apparently that is carried\r\nover to TWAMP without mention in the RFCs.\r\n\r\nIt remains unclear from the text what precisely was intended to say.\r\n\r\n\r\nHint: Errata Note entered on request of the responsible AD before\r\n      resolution with the authors.", "submit_date": "2008-11-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1598", "doc-id": "RFC5384", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.2", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |      OptionType = 26           |      OptionLength = 0        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |      OptionType = 26          |       OptionLength = 0        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "The notes when raised read:\r\n\r\n> Misplaced field separator (vertical bar).\r\n>\r\n> Erratum is considered 'Technical' because the text of the RFC\r\n> does not contain text that could guide the reader in\r\n> disambiguating the figure.\r\n\r\nMoving this to editorial with the note that PIM Option formats are well known.", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1599", "doc-id": "RFC5384", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2,1st para", "orig_text": "   To ensure that a type 1 Encoded-Source Address is not sent to a PIM\r\n   neighbor that does not understand this encoding, a new PIM Hello\r\n   option, the \"Join Attribute\" option, is defined.  This option MUST be\r\n   included in the PIM Hellos of any PIM router that is willing to\r\n|  receive type 1 Encoded-Source Address.  A PIM router MUST NOT send a\r\n                                        ^\r\n   type 1 Encoded-Source Address out any interface on which there is a\r\n   PIM neighbor that has not included this option in its Hellos.  (Even\r\n|  a router that is not the upstream neighbor must be able parse the\r\n                                                          ^\r\n   packet in order to do Join suppression or overriding.)\r\n", "correct_text": "   To ensure that a type 1 Encoded-Source Address is not sent to a PIM\r\n   neighbor that does not understand this encoding, a new PIM Hello\r\n   option, the \"Join Attribute\" option, is defined.  This option MUST be\r\n   included in the PIM Hellos of any PIM router that is willing to\r\n|  receive type 1 Encoded-Source Addresses.  A PIM router MUST NOT send\r\n                                        ^^^\r\n   a type 1 Encoded-Source Address out any interface on which there is a\r\n   PIM neighbor that has not included this option in its Hellos.  (Even\r\n|  a router that is not the upstream neighbor must be able to parse the\r\n                                                          ^^^^\r\n   packet in order to do Join suppression or overriding.)\r\n", "notes": "Rationale: Grammar flawed.", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1617", "doc-id": "RFC5348", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "C.1, pg.48", "orig_text": "<<  second paragraph on page 48 >>\r\n\r\n   Recovery after idle or data-limited periods: When TCP reduces the\r\n|  congestion window after an idle or data-utilized period, TCP can set\r\n   the slow-start threshold, ssthresh, to allow the TCP sender to slow-\r\n   start back up towards its old sending rate when the idle or data-\r\n   limited period is over.  [...]", "correct_text": "   Recovery after idle or data-limited periods: When TCP reduces the\r\n|  congestion window after an idle or data-limited period, TCP can set\r\n   the slow-start threshold, ssthresh, to allow the TCP sender to slow-\r\n   start back up towards its old sending rate when the idle or data-\r\n   limited period is over.  [...]", "notes": "Rationale:\r\n  The term \"data-utilized period\" does not appear anywhere else in\r\n  the RFC; apparently, \"data-limited period\" is meant here as well.", "submit_date": "2008-11-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1596", "doc-id": "RFC4871", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.4/3.7", "orig_text": "Here're the relevant portions of RFC 4871 \r\n\r\n   2.4.  Common ABNF Tokens\r\n\r\n   The following ABNF tokens are used elsewhere in this document:\r\n\r\n     base64string =     1*(ALPHA / DIGIT / \"+\" / \"/\" / [FWS])\r\n                        [ \"=\" [FWS] [ \"=\" [FWS] ] ]\r\n\r\n   3.7.  Computing the Message Hashes\r\n \r\n   2.  The DKIM-Signature header field that exists (verifying) or will\r\n       be inserted (signing) in the message, with the value of the \"b=\"\r\n       tag deleted (i.e., treated as the empty string), canonicalized\r\n       using the header canonicalization algorithm specified in the \"c=\"\r\n       tag, and without a trailing CRLF.\r\n\r\nSections 3.2 and 3.5 have this to say:\r\n\r\n   3.2.  Tag=Value Lists\r\n \r\n   Formally, the syntax rules are as follows:\r\n\r\n        tag-list  =  tag-spec 0*( \";\" tag-spec ) [ \";\" ]\r\n        tag-spec  =  [FWS] tag-name [FWS] \"=\" [FWS] tag-value [FWS]\r\n        tag-name  =  ALPHA 0*ALNUMPUNC\r\n        tag-value =  [ tval 0*( 1*(WSP / FWS) tval ) ]\r\n                          ; WSP and FWS prohibited at beginning and end\r\n        tval      =  1*VALCHAR\r\n\r\n   Note that WSP is allowed anywhere around tags.  In particular, any\r\n   WSP after the \"=\" and any WSP before the terminating \";\" is not part\r\n   of the value; however, WSP inside the value is significant.\r\n\r\n   3.5.  The DKIM-Signature Header Field\r\n\r\n   The signature of the email is stored in the DKIM-Signature header\r\n   field.  This header field contains all of the signature and key-\r\n   fetching data.  The DKIM-Signature value is a tag-list as described\r\n   in Section 3.2.\r\n\r\n   ...\r\n\r\n   b=  The signature data (base64; REQUIRED).  Whitespace is ignored in\r\n       this value and MUST be ignored when reassembling the original\r\n       signature.  In particular, the signing process can safely insert\r\n       FWS in this value in arbitrary places to conform to line-length\r\n       limits.  See Signer Actions (Section 5) for how the signature is\r\n       computed.\r\n\r\n   ABNF:\r\n\r\n       sig-b-tag       = %x62 [FWS] \"=\" [FWS] sig-b-tag-data\r\n       sig-b-tag-data  = base64string", "correct_text": "Add text \"(including all surrounding whitespace)\" to the description of deleting the b= value.\r\n\r\n   3.7.  Computing the Message Hashes\r\n\r\n   2.  The DKIM-Signature header field that exists (verifying) or will\r\n       be inserted (signing) in the message, with the value of the \"b=\"\r\n       tag (including all surrounding whitespace) deleted \r\n       (i.e., treated as the empty string), canonicalized\r\n       using the header canonicalization algorithm specified in the \"c=\"\r\n       tag, and without a trailing CRLF.\r\n\r\nFix the ambiguity in the base64string grammar to remove leading and trailing FWS:\r\n\r\n     ALPHADIGITPS =     (ALPHA / DIGIT / \"+\" / \"/\")\r\n\r\n     base64string =     ALPHADIGITPS *([FWS] ALPHADIGITPS)\r\n                        [ [FWS] \"=\" [ [FWS] \"=\" ] ]", "notes": "The issues are, what constitutes the *value* of the b= tag? Is it everything after the \"=\" through any following \";\" and/or the end of the header? Does that include or exclude surrounding white space? Is it specifically the characters that constitute \"tag-val\" / \"sig-b-tag-data\"? Does sig-b-tag-data include or exclude white space?\r\n\r\nNotice how the section 3.5 \"b=\" deletion description talks about adding FWS \"in\" the value, but not \"before\" or \"after\".\r\n\r\nNotice that the section 3.2 definition of tag-val\r\n\r\n        tag-spec  =  [FWS] tag-name [FWS] \"=\" [FWS] tag-value [FWS]\r\n        tag-value =  [ tval 0*( 1*(WSP / FWS) tval ) ]\r\n                          ; WSP and FWS prohibited at beginning and end\r\n\r\nexplicitly does *not* include either the FWS before its value or after.\r\n\r\nAnd the text in section 3.2 explicitly says that the surrounding WSP is not part of the value.\r\n\r\nAnd notice that the section 3.5 grammar around sig-b-tag-data\r\n\r\n       sig-b-tag       = %x62 [FWS] \"=\" [FWS] sig-b-tag-data\r\n       sig-b-tag-data  = base64string\r\n\r\nexplicitly mentions FWS as being separate from the data.\r\n\r\nBy the above definitions, tag-val and sig-b-tag-data explicitly do *not* include the FWS either before or after it.\r\n\r\nHowever, the definition of base64string\r\n\r\n     base64string =     1*(ALPHA / DIGIT / \"+\" / \"/\" / [FWS])\r\n                        [ \"=\" [FWS] [ \"=\" [FWS] ] ]\r\n\r\ntosses FWS in to its production. So it is ambiguous from the grammar whether the leading/trailing FWS is part of sig-b-tag-data or part of base64string. (This grammar ambiguity is in *all* of the uses of base64string in sections 3.5 and 3.6.1.)\r\n\r\nIn addition, the text in the section 3.5 b= description certainly implies that white space before and after the hash should not affect the verification.\r\n\r\nSo by these, \"with the value of the 'b=' tag deleted\" could mean 1) everything after the \"=\" which includes the leading/trailing white space, 2) the *tag-value* grammar production which excludes leading/trailing white space, or 3) the *sig-b-tag-data* grammar production that may or may not include leading/trailing white space.\r\n\r\n**This is an ambiguity (a bug) in the spec.**", "submit_date": "2008-11-17", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1597", "doc-id": "RFC5384", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4, last para", "orig_text": "   - The encoding type 1 has been allocated, defined as \"native encoding\r\n|    for the address family, but with zero or more PIM Join Attributes\r\n     present\", and this document is the reference.\r\n", "correct_text": "   - The encoding type 1 has been allocated, defined as \"native encoding\r\n|    for the address family, but with one or more PIM Join Attributes\r\n     present\", and this document is the reference.\r\n", "notes": "Rationale:\r\n\r\nSection 3.1 of this RFC says (3rd para):\r\n   A type 1 Encoded-Source Address MUST contain at least one Join\r\n   Attribute.  The way to specify that there are no Join Attributes for\r\n   a particular tree is to use the type 0 Encoded-Source Address.\r\n\r\nHence, having *zero* attributes in encoding type 1 is explicitely\r\nforbidden.\r\n\r\nPlease alse have the IANA registry entry be corrected.", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3251", "doc-id": "RFC2560", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.2.2", "orig_text": "...  They MUST reject the response if the certificate required to validate\r\nthe signature on the response fails to meet at least one of the following\r\ncriteria:\r\n\r\n   1. ...\r\n   2. ...\r\n   3. ...", "correct_text": "...  They MUST reject the response if it is not the case that the\r\ncertificate required to validate the signature on the response meets at \r\nleast one of the following criteria:\r\n\r\n   1. ...\r\n   2. ...\r\n   3. ...", "notes": "The \"fails to meet at least one ... \" part of the original wording is ambiguous.  \r\n\r\nIt can sound like the grouping is \"(fails to meet) at least one ...\" rather than the (apparently) intended \"fails to (meet at least one)\".\r\n\r\nNote:  The submitted corrected text needs further improvement.  I think it eliminates the ambiguity, but it currently is harder to follow.", "submit_date": "2012-06-11", "submitter_name": "Daniel Barclay", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1607", "doc-id": "RFC2548", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.1", "orig_text": "The NT-Key sub-field is sixteen octets in length and contains the\r\nfirst sixteen octets of the hashed Windows NT password.  The\r\nformat of the plaintext Keys field is illustrated in the following\r\ndiagram:", "correct_text": "The NT-Key sub-field is sixteen octets in length and contains the\r\nfirst sixteen octets of the hash of the hashed Windows NT password.  The\r\nformat of the plaintext Keys field is illustrated in the following\r\ndiagram:", "notes": "See comments referring to RFC 2548 around line 1350 of:\r\n\r\nhttp://github.com/alandekok/freeradius-server/tree/master/src%2Fmodules%2Frlm_mschap%2Frlm_mschap.c\r\n\r\nThis is interoperable with everything, including Windows.", "submit_date": "2008-11-18", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1608", "doc-id": "RFC5386", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2, pg. 3", "orig_text": "   o  Any peer that uses an IKEv2 AUTH method involving a digital\r\n      signature (made with a private key to a public key cryptosystem)\r\n      may match a BTNS PAD entry, provided that it matches no non-BTNS\r\n      PAD entries.  Suitable AUTH methods as of August 2007 are: RSA\r\n|     Digital Signature (method #1) and DSS Digital Signature (method\r\n      #3); see [RFC4306], Section 3.8.", "correct_text": "   o  Any peer that uses an IKEv2 AUTH method involving a digital\r\n      signature (made with a private key to a public key cryptosystem)\r\n      may match a BTNS PAD entry, provided that it matches no non-BTNS\r\n      PAD entries.  Suitable AUTH methods as of August 2007 are: RSA\r\n|     Digital Signature (method #1) and DSA Digital Signature (method\r\n      #3); see [RFC4306], Section 3.8.", "notes": "Rationale:\r\n\r\nWhen referring to an authentication method, i.e. an algorithm,\r\nthe acronym used should designate the algorithm.\r\n\r\nThere is a particular distinction in the NIST FIPS documents:\r\na trailing 'S' designtes a Standard, and a trailing 'A' designates\r\nan Algorithm.\r\nIn particular, the DSS (Digital Signature Standard, FIPS 186-2/3)\r\ndescribes three different algorithms:\r\n   - the NIST's Digital Signature Algorithm (DSA),\r\n   - the Elliptic Curve Digital Signature Algorithm (ECDSA), and\r\n   - the RSA signature algorithm.\r\n\r\nHence, to avoid any potential confusion, \"DSA\" should be used to\r\ndesignate the particular algorithm listed as the first item above.", "submit_date": "2008-11-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1609", "doc-id": "RFC5386", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1, pg.6", "orig_text": "<< immediately below Figure 2 >>\r\n\r\n|  Note that [SG-A]'s PAD entry has one and only one wildcard PAD entry:\r\n   the BTNS catch-all PAD entry as the last entry, as described in\r\n   Section 2.\r\n", "correct_text": "|  Note that [SG-A]'s PAD has one and only one wildcard PAD entry:\r\n   the BTNS catch-all PAD entry as the last entry, as described in\r\n   Section 2.\r\n", "notes": "Rationale:\r\n\r\nDesignating the PAD (Peer Authentication Database) an an \"entry\"\r\nis misleading, and particularly confusing when in the same line\r\na table row in that database is also designated as an \"entry\".", "submit_date": "2008-11-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1610", "doc-id": "RFC2018", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   The use of time-outs as a fall-back mechanism for detecting dropped\r\n   packets is unchanged by the SACK option.  Because the data receiver\r\n   is allowed to discard SACKed data, when a retransmit timeout occurs\r\n   the data sender MUST ignore prior SACK information in determining\r\n   which data to retransmit.", "correct_text": "   The use of time-outs as a fall-back mechanism for detecting dropped\r\n   packets is unchanged by the SACK option.  Because the data receiver\r\n   is allowed to discard SACKed data, when a retransmit timeout occurs\r\n   the data sender SHOULD ignore prior SACK information in determining\r\n   which data to retransmit.", "notes": "At least one OS (Linux) violates the MUST to good effect: Even when timeout\r\ndriven, it keeps old SACK data so it can avoid retransmitting data already at\r\nthe receiver.  Thus even under severe bandwidth exhaustion, 100% of the data\r\ndelivered to the receiver causes forward progress and the system is not subject\r\nto classical congestion collapse (that is, congestion collapse from\r\nunnecessarily-retransmitted packets).\r\n\r\nWhen this draft is reopened, this text should be further refined to address a\r\nnumber of additional issues.  In particular:\r\n\r\n- It has been observed that clearing the scoreboard on timeouts sometimes\r\n  causes very inefficient network utilization, with large quantities of\r\n  duplicated data delivered to the receiver.\r\n\r\n- There is some risk of deadlock if the timeout was caused a corrupted\r\n  scoreboard or if the receiver reneges SACK blocks.  It is important that the\r\n  checks for reneging and inconsistent scoreboards are robust.  Furthermore,\r\n  there probably should be a mandatory fall back mechanism, such as requiring\r\n  classical fast retransmit and new reno behavior, or ultimately under repeated\r\n  timeouts with no forward progress, clearing the scoreboard.\r\n\r\n- Making SACK more robust in the presence of timeouts may increase the risk of\r\n  congestion collapse associated with cascaded bottlenecks, because it may\r\n  enable TCP to function under unreasonably high loss rates.", "submit_date": "2008-11-22", "submitter_name": "Matt Mathis", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1600", "doc-id": "RFC5347", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1.1,pg.6/7", "orig_text": "a)  last paragraph on page 6:\r\n\r\n   The Call Agent instructs the gateway to perform the media change by\r\n   sending it a ModifyConnection command with \"image/t38\" listed as the\r\n   encoding method in the LocalConnectionOptions (receipt of a\r\n   ModifyConnection command without LocalConnectionOptions but with a\r\n|  RemoteConnectionDescriptor containing an \"m=\" line with the MIME type\r\n   \"image/t38\" would achieve the same).  [...]\r\n\r\nb)  second paragraph on page 7:\r\n\r\n                     [...].  The T.38 fax procedure continues when an\r\n   acceptable RemoteConnectionDescriptor is received.  An acceptable\r\n   RemoteConnectionDescriptor contains an \"m=\" line with the \"image/t38\"\r\n|  MIME type (using the normal SDP syntax) and a supported transport\r\n   protcol (UDPTL or TCP).  [...]", "correct_text": "a)\r\n   The Call Agent instructs the gateway to perform the media change by\r\n   sending it a ModifyConnection command with \"image/t38\" listed as the\r\n   encoding method in the LocalConnectionOptions (receipt of a\r\n   ModifyConnection command without LocalConnectionOptions but with a\r\n|  RemoteConnectionDescriptor containing an \"m=\" line with the media\r\n   type \"image/t38\" would achieve the same).  [...]\r\n\r\nb)\r\n\r\n                     [...].  The T.38 fax procedure continues when an\r\n   acceptable RemoteConnectionDescriptor is received.  An acceptable\r\n   RemoteConnectionDescriptor contains an \"m=\" line with the \"image/t38\"\r\n|  media type (using the normal SDP syntax) and a supported transport\r\n   protcol (UDPTL or TCP).  [...]", "notes": "Rationale:\r\n\r\nBCP 13, RFC 4288, has re-enforced the terminology from\r\nRFC 2045 ff.  The 'IM' in \"MIME\" stands for 'Internet Mail'.\r\nAs pointed out in RFC 4288, it makes no sense to remain stuck\r\nwith the colloquial abuse of language, talking about \"MIME types\",\r\nin particular when Media Types are used outside the scope of\r\nInternet Mail; the MGCP context is one specific example of\r\nsuch a scenario.  Hence, the RFC should use the terminology\r\nestablished in the IETF, as explained in RFC 4288.", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1601", "doc-id": "RFC5347", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1.4, pg.9", "orig_text": "<< near the top of page 9 >>:\r\n\r\n|     * the relevant MIME media type, e.g., \"image/t38\", is included in\r\n        the \"m=\" line in the RemoteConnectionDescriptor, or\r\n\r\n|     * the relevant MIME media type is included as a capability (see\r\n        [RFC3407]) in the RemoteConnectionDescriptor.\r\n", "correct_text": "|     * the relevant media type, e.g., \"image/t38\", is included in the\r\n        \"m=\" line in the RemoteConnectionDescriptor, or\r\n\r\n|     * the relevant media type is included as a capability (see\r\n        [RFC3407]) in the RemoteConnectionDescriptor.\r\n", "notes": "Rationale: See Errata for Section 2.1.1, Eid=1600.", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1602", "doc-id": "RFC5347", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2, pg.29", "orig_text": "<< last line of first paragraph >>:\r\n\r\n   Furthermore, the originating fax machine is generating CNG tone.\r\n", "correct_text": "   Furthermore, the originating fax machine is generating a CNG tone.\r\n                                                         ^^^", "notes": "Rationale: Missing indefinite article.", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1603", "doc-id": "RFC5347", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2, pg.33", "orig_text": "<< in step 14 >>:\r\n\r\n   The Call Agent then instructs the terminating gateway to use the\r\n|  \"image/t38\" MIME type instead:\r\n|", "correct_text": "   The Call Agent then instructs the terminating gateway to use the\r\n|  \"image/t38\" media type instead:\r\n", "notes": "Rationale:\r\n See Errata Note for same issue for Section 2.1.1, Eid=1600.", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1604", "doc-id": "RFC5347", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3, pg.37", "orig_text": "<<  last line of first paragraph >>:\r\n\r\n   Once again, the originating fax does not generate CNG tone.\r\n", "correct_text": "   Once again, the originating fax does not generate a CNG tone.\r\n                                                    ^^^", "notes": "Rationale: Missing indefiniet article; it should be used\r\nconsistently.\r\n\r\n--- From the RAI reviewer\r\nRecommended status:  (incorrect) Rejected\r\n\r\nThinking about this some more (and in contradiction to my report on\r\nerratum 1602 on this RFC), the intention of the text is to use \"CNG\r\ntone\" as a mass noun, and so it does not take an indefinite article.\r\n\r\nI believe that use of such phrases as \"CNG tone\" as a mass noun is\r\nmore common in British English than American English.  This RFC\r\nappears to follow the British convention, with the sole exception of\r\nthe first line of \"Steps 9-12\" on page 33 of section 3.2, which I now\r\nconsider to be an error.\r\n======================================================================\r\n", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1605", "doc-id": "RFC5347", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3, pg.43", "orig_text": "a)   << Steps 15, 16 >>\r\n\r\n|  The originating endpoint detects V.21 fax preamble.  Even though the\r\n   endpoint is already using \"image/t38\" for media, it generates a\r\n   \"t38(start)\" event and notifies the Call Agent.\r\n\r\nb)   << Step 23 >>\r\n\r\n   The originating endpoint also generates a \"t38(stop)\" event, which is\r\n   notified to the Call Agent:\r\n\r\n|     NTFY 3502 ds/ds1-1/1@gw-o.example.net MGCP 1.0 O: t38(stop) X: 2\r\n\r\n", "correct_text": "a)\r\n\r\n|  The originating endpoint detects the V.21 fax preamble.  Even though\r\n   the endpoint is already using \"image/t38\" for media, it generates a\r\n   \"t38(start)\" event and notifies the Call Agent.\r\n\r\nb)\r\n\r\n   The originating endpoint also generates a \"t38(stop)\" event, which is\r\n   notified to the Call Agent:\r\n\r\n|     NTFY 3502 ds/ds1-1/1@gw-o.example.net MGCP 1.0\r\n|     O: t38(stop)\r\n|     X: 2\r\n", "notes": "Rationale:\r\n\r\na)  Missing definite article.\r\n\r\nb)  Confusing formating, inconsistent with all other message examples.", "submit_date": "2008-11-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1606", "doc-id": "RFC3863", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "         <xs:pattern value=\"0(.[0-9]{0,3})?\"/>\r\n         <xs:pattern value=\"1(.0{0,3})?\"/>\r\n", "correct_text": "         <xs:pattern value=\"0(\\.[0-9]{0,3})?\"/>\r\n         <xs:pattern value=\"1(\\.0{0,3})?\"/>\r\n", "notes": "As given, the pattern would allow values such as \"09\", which is not the intention.  The metacharacter '.' needs to be escaped.", "submit_date": "2008-11-18", "submitter_name": "Kevin Braun", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2420", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "The Description comments for the SHA$$$Result functions repeatedly\r\ncontains improper wording and unpleasent formatting.\r\nSee below for significant flaws.\r\nThis change is proposed for the sake of consistency.\r\n\r\nThe Description of SHA1Result on page 28, says:\r\n\r\n * Description:\r\n *   This function will return the 160-bit message digest into the\r\n *   Message_Digest array provided by the caller.\r\n *   NOTE: The first octet of hash is stored in the 0th element,\r\n *      the last octet of hash in the 19th element.\r\n\r\nFor correctness and consistency, it should better say:\r\n\r\n * Description:\r\n *   This function will return the 160-bit message digest\r\n *   into the Message_Digest array provided by the caller.\r\n *   NOTE:\r\n *    The first octet of the hash is stored in the element with index 0,\r\n *    the last octet of the hash in the element with index 19.\r\n\r\n[The additional line break has been added to keep the first part\r\nof the last sentence on a single line, under RFC formatting rules.]", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1629", "doc-id": "RFC4165", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2, pg.4", "orig_text": "                         vvvvv\r\n|  Signal Transfer Point (STP) - A Signal Transfer Point as defined by\r\n   MTP standards, e.g., [Q.700].\r\n\r\n                   vvvvv\r\n|  Signaling Point (STP) - A Signaling Point as defined by MTP\r\n   standards, e.g., [Q.700].\r\n", "correct_text": "   Signal Transfer Point (STP) - A Signal Transfer Point as defined by\r\n   MTP standards, e.g., [Q.700].\r\n\r\n|  Signaling Point - A Signaling Point as defined by MTP standards,\r\n   e.g., [Q.700].\r\n", "notes": "Overloading the same abbreviation in a single document does not\r\nmake sense.  \r\nThe list of Abbreviations (Section 1.3) is in favor of the first\r\ninterpretation of \"STP\", and the second use would be surprising.\r\nFurther, the only other use of \"STP\" in the whole RFC --\r\nin Section 1.5, at the bottom of page 6 -- also expands the\r\nabbreviation according to the first explanation quoted above.\r\nThe whole document (besides the quotation above) does not use\r\nan abbreviation for \"Signaling Point\"; therefore, the proper\r\nresolution seems to be dropping the second instance of \"(STP)\".", "submit_date": "2008-12-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1630", "doc-id": "RFC4544", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  outdated text\r\n\r\nWithin Section 6, the first paragraph on top of page 5 says:\r\n\r\n   It is worthwhile to note that this is an iSCSI MIB module and as such\r\n   reflects only iSCSI objects.  This module does not contain\r\n   information about the SCSI-layer attributes of a device.  If a SCSI\r\n|  layer is present, the SCSI MIB module, currently under development,\r\n   may be used to manage SCSI information for a device.\r\n\r\nThe last apparently sentence is outdated.  There already is an\r\nappropriate Informative Reference given on page 81 of the RFC.\r\nThe RFC should say:\r\n\r\n   It is worthwhile to note that this is an iSCSI MIB module and as such\r\n   reflects only iSCSI objects.  This module does not contain\r\n   information about the SCSI-layer attributes of a device.  If a SCSI\r\n|  layer is present, the SCSI MIB module [RFC4455] may be used to manage\r\n   SCSI information for a device.\r\n                                        ^^^^^^^^^^^\r\n\r\n\r\n(2)  lack of distinguishing DESCRIPTION text\r\n\r\nThe iscsiDescriptors OBJECT-IDENTITY declarations, on page 16/17\r\nof the RFC, unfortunately contain pairwise identical DESCRIPTION\r\nclauses, making Header and Data Integrity identifiers\r\nindistinguishable.\r\nThis obviously needs short-term correction, e.g.:\r\n\r\n\r\nThe DESCRIPTION clause of the iscsiHdrIntegrityNone OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme (for either the header or data) is being\r\n<<page break>>\r\n        used.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme for the header is being used.\"\r\n\r\nThe DESCRIPTION clause of the iscsiHdrIntegrityCrc32c OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme (for either the header or data) is CRC32c.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme for the header is CRC32c.\"\r\n\r\nThe DESCRIPTION clause of the iscsiDataIntegrityNone OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme (for either the header or data) is being\r\n        used.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme for the data is being used.\"\r\n\r\nThe DESCRIPTION clause of the iscsiDataIntegrityCrc32c OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme (for either the header or data) is CRC32c.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme for the data is CRC32c.\"\r\n\r\n\r\n(3)  4 similar typos\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnFailures  OBJECT-TYPE,\r\non page 20 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n        \"This object counts the number of times a session belonging\r\n|       to this instance has been failed.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n        \"This object counts the number of times a session belonging\r\n|       to this instance has failed.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity is indicated\r\n        in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnDigestErrors OBJECT-TYPE,\r\non page 22 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to receipt of\r\n        a PDU containing header or data digest errors.  If this\r\n        counter has suffered a discontinuity, the time of the last\r\n        discontinuity is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to receipt of\r\n        a PDU containing header or data digest errors.  If this\r\n        counter has suffered a discontinuity, the time of the last\r\n        discontinuity is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnCxnTimeoutErrors OBJECT-TYPE,\r\non page 22 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to a sequence\r\n        exceeding a time limit.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to a sequence\r\n        exceeding a time limit.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnFormatErrors OBJECT-TYPE,\r\non page 23 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to receipt of\r\n        a PDU that contained a format error.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to receipt of\r\n        a PDU that contained a format error.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\n\r\n(4)  incomplete descriptions\r\n\r\nWithin the Target Attributes Table, the objects\r\n    iscsiTgtLastFailureType,\r\n    iscsiTgtLastIntrFailureName,\r\n    iscsiTgtLastIntrFailureAddrType, and\r\n    iscsiTgtLastIntrFailureAddr\r\napparently have no meaningful value if no error has occurred (yet).\r\nThe DESCRIPTION clauses for these objects, on page 38/39 of RFC 4544,\r\ndo not indicate the behaviour of these objects in this case, i.e.,\r\nwhen the iscsiTgtLastFailureTime instance in a given conceptual\r\nrow has the value zero.\r\nThe respective DESCRIPTION clauses should indicate whether these\r\nobjects\r\n  -   should not be instantiated\r\nor\r\n  -   have a certain default value (t.b.d.)\r\nin this case.\r\n\r\n\r\nA similar issue holds for the objects in the Initiator Attributes\r\nTable,\r\n    iscsiIntrLastFailureType,\r\n    iscsiIntrLastTgtFailureName,\r\n    iscsiIntrLastTgtFailureAddrType, and\r\n    iscsiIntrLastTgtFailureAddr\r\n(The corresponding DESCRIPTIONS can be found on page 46/47.)\r\n\r\n\r\n(5)  row creation / storageType restriction\r\n\r\nVarious tables contain rows that can be created/deleted dynamically.\r\nRepeatedly, for these tables the DESCRIPTION clauses for the\r\ncorresponding StorageType objects contain the sentence\r\n(e.g., for iscsiTgtAuthStorageType, on page 44):\r\n\r\n                                  [...].  Rows in this table that were\r\n         created through an external process may have a storage type of\r\n         readOnly or permanent.\r\n\r\nIt is not clear from the text what precisely 'external process'\r\nmeans, and therefore it remains open whether/why the restriction\r\non values `readOnly` or `permanent` makes sense.\r\n\r\n\r\n(6)  unpleasant alignment\r\n\r\nAny future update to this RFC should correct the unpleasant\r\nstaggered tabular alignment of the following row-structure\r\n( SEQUENCE { ... } ) declarations for:\r\n  o  IscsiPortalAttributesEntry,\r\n  o  IscsiInitiatorAttributesEntry, and\r\n  o  IscsiInitiatorLoginStatsEntry\r\n\r\n\r\n(7)  Semantic gap in Initiator Login Stats Table ??\r\n\r\nThe Initiator Login Stats Table somehow is a \"dual\" of the\r\nTarget Login Stats Table.\r\nTherefore, I miss an object in the Initiator Login Stats Table\r\ncorresponding to iscsiTgtLoginAuthorizeFails, counting received\r\nLogin Response PDUs with status class 0x202.\r\n\r\n\r\n(8)  typo?\r\n\r\nThe DESCRIPTION clause of the iscsiSsnAuthIdentity OBJECT-TYPE,\r\non page 58 of the RFC, says:\r\n\r\n    DESCRIPTION\r\n        \"This object contains a pointer to a row in the\r\n        IPS-AUTH MIB module that identifies the authentication\r\n|       method being used on this session, as communicated\r\n        during the login phase.\"\r\n\r\nI strongly suspect that it should say instead:\r\n\r\n    DESCRIPTION\r\n        \"This object contains a pointer to a row in the\r\n        IPS-AUTH MIB module that identifies the authentication\r\n|       identity being used on this session, as communicated\r\n        during the login phase.\"\r\n\r\n\r\n(9)  common problem with indiscontinuity tagging\r\n\r\nThe Session Stats Table defines and admits High-Capacity (64-bit)\r\nand Low-Capacity (32-bit) octet counters.\r\nIf both types of counters are implemented, according to the\r\nDESCRIPTION clauses of all these counters,\r\n\r\n        [...]\r\n        If this counter has suffered a discontinuity, the time of the\r\n        last discontinuity is indicated in iscsiSsnDiscontinuityTime.\"\r\n\r\nHence, iscsiSsnDiscontinuityTime must indicate discontinuities\r\nin the HC and the LC counters, i.e. it must be changed whenever\r\none of the LC counters wraps back to zero, making it almost\r\nuseless for efficient surveillance of discontinuities in all\r\nthe other counters covered by this object.\r\nPerhaps, as it has been done in a few other IETF MIBs in the past,\r\ninclusion of additional 32-bit counters yielding the high part\r\n(most significant 32 bits) of the HC counters for use with SNMPv1\r\nmanagement stations would have allowed to change the semantics of\r\niscsiSsnDiscontinuityTime to avoid too frequent changes.", "correct_text": "", "notes": "from pending\n --VERIFIER NOTES-- \nduplicate of Errata #61   ", "submit_date": "2006-07-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1631", "doc-id": "RFC4544", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  outdated text\r\n\r\nWithin Section 6, the first paragraph on top of page 5 says:\r\n\r\n   It is worthwhile to note that this is an iSCSI MIB module and as such\r\n   reflects only iSCSI objects.  This module does not contain\r\n   information about the SCSI-layer attributes of a device.  If a SCSI\r\n|  layer is present, the SCSI MIB module, currently under development,\r\n   may be used to manage SCSI information for a device.\r\n\r\nThe last apparently sentence is outdated.  There already is an\r\nappropriate Informative Reference given on page 81 of the RFC.\r\nThe RFC should say:\r\n\r\n   It is worthwhile to note that this is an iSCSI MIB module and as such\r\n   reflects only iSCSI objects.  This module does not contain\r\n   information about the SCSI-layer attributes of a device.  If a SCSI\r\n|  layer is present, the SCSI MIB module [RFC4455] may be used to manage\r\n   SCSI information for a device.\r\n                                        ^^^^^^^^^^^\r\n\r\n\r\n(2)  lack of distinguishing DESCRIPTION text\r\n\r\nThe iscsiDescriptors OBJECT-IDENTITY declarations, on page 16/17\r\nof the RFC, unfortunately contain pairwise identical DESCRIPTION\r\nclauses, making Header and Data Integrity identifiers\r\nindistinguishable.\r\nThis obviously needs short-term correction, e.g.:\r\n\r\n\r\nThe DESCRIPTION clause of the iscsiHdrIntegrityNone OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme (for either the header or data) is being\r\n<<page break>>\r\n        used.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme for the header is being used.\"\r\n\r\nThe DESCRIPTION clause of the iscsiHdrIntegrityCrc32c OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme (for either the header or data) is CRC32c.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme for the header is CRC32c.\"\r\n\r\nThe DESCRIPTION clause of the iscsiDataIntegrityNone OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme (for either the header or data) is being\r\n        used.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme for the data is being used.\"\r\n\r\nThe DESCRIPTION clause of the iscsiDataIntegrityCrc32c OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme (for either the header or data) is CRC32c.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme for the data is CRC32c.\"\r\n\r\n\r\n(3)  4 similar typos\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnFailures  OBJECT-TYPE,\r\non page 20 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n        \"This object counts the number of times a session belonging\r\n|       to this instance has been failed.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n        \"This object counts the number of times a session belonging\r\n|       to this instance has failed.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity is indicated\r\n        in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnDigestErrors OBJECT-TYPE,\r\non page 22 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to receipt of\r\n        a PDU containing header or data digest errors.  If this\r\n        counter has suffered a discontinuity, the time of the last\r\n        discontinuity is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to receipt of\r\n        a PDU containing header or data digest errors.  If this\r\n        counter has suffered a discontinuity, the time of the last\r\n        discontinuity is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnCxnTimeoutErrors OBJECT-TYPE,\r\non page 22 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to a sequence\r\n        exceeding a time limit.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to a sequence\r\n        exceeding a time limit.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnFormatErrors OBJECT-TYPE,\r\non page 23 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to receipt of\r\n        a PDU that contained a format error.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to receipt of\r\n        a PDU that contained a format error.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\n\r\n(4)  incomplete descriptions\r\n\r\nWithin the Target Attributes Table, the objects\r\n    iscsiTgtLastFailureType,\r\n    iscsiTgtLastIntrFailureName,\r\n    iscsiTgtLastIntrFailureAddrType, and\r\n    iscsiTgtLastIntrFailureAddr\r\napparently have no meaningful value if no error has occurred (yet).\r\nThe DESCRIPTION clauses for these objects, on page 38/39 of RFC 4544,\r\ndo not indicate the behaviour of these objects in this case, i.e.,\r\nwhen the iscsiTgtLastFailureTime instance in a given conceptual\r\nrow has the value zero.\r\nThe respective DESCRIPTION clauses should indicate whether these\r\nobjects\r\n  -   should not be instantiated\r\nor\r\n  -   have a certain default value (t.b.d.)\r\nin this case.\r\n\r\n\r\nA similar issue holds for the objects in the Initiator Attributes\r\nTable,\r\n    iscsiIntrLastFailureType,\r\n    iscsiIntrLastTgtFailureName,\r\n    iscsiIntrLastTgtFailureAddrType, and\r\n    iscsiIntrLastTgtFailureAddr\r\n(The corresponding DESCRIPTIONS can be found on page 46/47.)\r\n\r\n\r\n(5)  row creation / storageType restriction\r\n\r\nVarious tables contain rows that can be created/deleted dynamically.\r\nRepeatedly, for these tables the DESCRIPTION clauses for the\r\ncorresponding StorageType objects contain the sentence\r\n(e.g., for iscsiTgtAuthStorageType, on page 44):\r\n\r\n                                  [...].  Rows in this table that were\r\n         created through an external process may have a storage type of\r\n         readOnly or permanent.\r\n\r\nIt is not clear from the text what precisely 'external process'\r\nmeans, and therefore it remains open whether/why the restriction\r\non values `readOnly` or `permanent` makes sense.\r\n\r\n\r\n(6)  unpleasant alignment\r\n\r\nAny future update to this RFC should correct the unpleasant\r\nstaggered tabular alignment of the following row-structure\r\n( SEQUENCE { ... } ) declarations for:\r\n  o  IscsiPortalAttributesEntry,\r\n  o  IscsiInitiatorAttributesEntry, and\r\n  o  IscsiInitiatorLoginStatsEntry\r\n\r\n\r\n(7)  Semantic gap in Initiator Login Stats Table ??\r\n\r\nThe Initiator Login Stats Table somehow is a \"dual\" of the\r\nTarget Login Stats Table.\r\nTherefore, I miss an object in the Initiator Login Stats Table\r\ncorresponding to iscsiTgtLoginAuthorizeFails, counting received\r\nLogin Response PDUs with status class 0x202.\r\n\r\n\r\n(8)  typo?\r\n\r\nThe DESCRIPTION clause of the iscsiSsnAuthIdentity OBJECT-TYPE,\r\non page 58 of the RFC, says:\r\n\r\n    DESCRIPTION\r\n        \"This object contains a pointer to a row in the\r\n        IPS-AUTH MIB module that identifies the authentication\r\n|       method being used on this session, as communicated\r\n        during the login phase.\"\r\n\r\nI strongly suspect that it should say instead:\r\n\r\n    DESCRIPTION\r\n        \"This object contains a pointer to a row in the\r\n        IPS-AUTH MIB module that identifies the authentication\r\n|       identity being used on this session, as communicated\r\n        during the login phase.\"\r\n\r\n\r\n(9)  common problem with indiscontinuity tagging\r\n\r\nThe Session Stats Table defines and admits High-Capacity (64-bit)\r\nand Low-Capacity (32-bit) octet counters.\r\nIf both types of counters are implemented, according to the\r\nDESCRIPTION clauses of all these counters,\r\n\r\n        [...]\r\n        If this counter has suffered a discontinuity, the time of the\r\n        last discontinuity is indicated in iscsiSsnDiscontinuityTime.\"\r\n\r\nHence, iscsiSsnDiscontinuityTime must indicate discontinuities\r\nin the HC and the LC counters, i.e. it must be changed whenever\r\none of the LC counters wraps back to zero, making it almost\r\nuseless for efficient surveillance of discontinuities in all\r\nthe other counters covered by this object.\r\nPerhaps, as it has been done in a few other IETF MIBs in the past,\r\ninclusion of additional 32-bit counters yielding the high part\r\n(most significant 32 bits) of the HC counters for use with SNMPv1\r\nmanagement stations would have allowed to change the semantics of\r\niscsiSsnDiscontinuityTime to avoid too frequent changes.", "correct_text": "", "notes": "from pending\n --VERIFIER NOTES-- \nduplicate of Errata #61      ", "submit_date": "2006-07-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1632", "doc-id": "RFC4360", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "      This document defines a class of extended communities called IPv4\r\n   address specific extended community for which the IANA is to create\r\n   and maintain a registry entitled \"IPv4 Address Specific Extended\r\n   Community\".  All the communities in this class are of extended Types.\r\n   Future assignment are to be made using the \"First Come First Served\"\r\n   policy defined in [RFC2434].  The Type values for the transitive\r\n   communities of the two-octet AS specific extended community class\r\n   are 0x0100-0x01ff, and for the non-transitive communities of that\r\n   class are 0x4100-0x41ff.  Assignments consist of a name and the\r\n   value.\r\n", "correct_text": "      This document defines a class of extended communities called IPv4\r\n   address specific extended community for which the IANA is to create\r\n   and maintain a registry entitled \"IPv4 Address Specific Extended\r\n   Community\".  All the communities in this class are of extended Types.\r\n   Future assignment are to be made using the \"First Come First Served\"\r\n   policy defined in [RFC2434].  The Type values for the transitive\r\n   communities of the IPv4 Address specific extended community class\r\n   are 0x0100-0x01ff, and for the non-transitive communities of that\r\n   class are 0x4100-0x41ff.  Assignments consist of a name and the\r\n   value.\r\n", "notes": "", "submit_date": "2008-12-12", "submitter_name": "Yakov Rekhter", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1633", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3", "orig_text": "   If an optional attribute is recognized, then the value of this\r\n   attribute MUST be checked.  If an error is detected, the attribute\r\n   MUST be discarded, and the Error Subcode MUST be set to Optional\r\n   Attribute Error.  The Data field MUST contain the attribute (type,\r\n   length, and value).", "correct_text": "   If an optional attribute is recognized, then the value of this\r\n   attribute MUST be checked.  If an error is detected, the Error \r\n   Subcode MUST be set to Optional Attribute Error.  The Data \r\n   field MUST contain the attribute (type, length, and value).", "notes": "This simply removes the clause \"the attribute MUST be discarded\", which doesn't make sense since the peering is to be terminated anyway.", "submit_date": "2008-12-12", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2197", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.5.", "orig_text": "A time field is an unsigned four-octet number containing the number\r\nof seconds elapsed since midnight, 1 January 1970 UTC.\r\n", "correct_text": "A time field is an unsigned four-octet number containing the number\r\nof seconds elapsed since midnight, 1 January 1970 UTC, ignoring leap\r\nseconds.", "notes": "And I did not yet talk about relativity theory.\n --VERIFIER NOTES-- \nThe OpenPGP time is an integer denoting UTC time. An implementation is free to display with or without leap seconds just as it might display said time in a time zone.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4690", "doc-id": "RFC7644", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4.2.2", "orig_text": "valFilter = attrExp / logExp / *1\"not\" \"(\" valFilter \")\"", "correct_text": "valFilter = attrExp / valLogExp / *1\"not\" \"(\" valFilter \")\"\r\n\r\nvalLogExp = attrExp SP (\"and\" / \"or\") SP attrExp", "notes": "Figure 1 contains the ABNF for SCIM filters. The term \"logExp\" specifies \"FILTER\" as an option which unintentionally allows recursion. A valFilter should only allow simple sub-attribute expressions and simple logic.  Nesting of valuePath (e.g. attr[a eq b and attr[c eq d]]) should not be possible.", "submit_date": "2016-05-10", "submitter_name": "Phil Hunt", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 22:06:38"}, {"errata_id": "2218", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.4.", "orig_text": "   All signatures are formed by producing a hash over the signature\r\n   data, and then using the resulting hash in the signature algorithm.\r\n\r\n   For binary document signatures (type 0x00), the document data is\r\n   hashed directly.  For text document signatures (type 0x01), the\r\n   document is canonicalized by converting line endings to <CR><LF>,\r\n   and the resulting data is hashed.\r\n\r\n   When a signature is made over a key, the hash data starts with the\r\n   octet 0x99, followed by a two-octet length of the key, and then body\r\n   of the key packet.  (Note that this is an old-style packet header for\r\n   a key packet with two-octet length.)  A subkey binding signature\r\n   (type 0x18) or primary key binding signature (type 0x19) then hashes\r\n   the subkey using the same format as the main key (also using 0x99 as\r\n   the first octet).  Key revocation signatures (types 0x20 and 0x28)\r\n   hash only the key being revoked.\r\n\r\n   A certification signature (type 0x10 through 0x13) hashes the User\r\n   ID being bound to the key into the hash context after the above\r\n   data.  A V3 certification hashes the contents of the User ID or\r\n   attribute packet packet, without any header.  A V4 certification\r\n   hashes the constant 0xB4 for User ID certifications or the constant\r\n   0xD1 for User Attribute certifications, followed by a four-octet\r\n   number giving the length of the User ID or User Attribute data, and\r\n   then the User ID or User Attribute data.\r\n\r\n   When a signature is made over a Signature packet (type 0x50), the\r\n   hash data starts with the octet 0x88, followed by the four-octet\r\n   length of the signature, and then the body of the Signature packet.\r\n   (Note that this is an old-style packet header for a Signature packet\r\n   with the length-of-length set to zero.)  The unhashed subpacket data\r\n   of the Signature packet being hashed is not included in the hash, and\r\n   the unhashed subpacket data length value is set to zero.\r\n\r\n   Once the data body is hashed, then a trailer is hashed.  A V3\r\n   signature hashes five octets of the packet body, starting from the\r\n   signature type field.  This data is the signature type, followed by\r\n   the four-octet signature time.  A V4 signature hashes the packet body\r\n   starting from its first field, the version number, through the end\r\n   of the hashed subpacket data.  Thus, the fields hashed are the\r\n   signature version, the signature type, the public-key algorithm, the\r\n   hash algorithm, the hashed subpacket length, and the hashed\r\n   subpacket body.\r\n\r\n   V4 signatures also hash in a final trailer of six octets: the\r\n   version of the Signature packet, i.e., 0x04; 0xFF; and a four-octet,\r\n   big-endian number that is the length of the hashed data from the\r\n   Signature packet (note that this number does not include these final\r\n   six octets).\r\n\r\n   After all this has been hashed in a single hash context, the\r\n   resulting hash field is used in the signature algorithm and placed\r\n   at the end of the Signature packet.", "correct_text": "   All signatures are formed by producing a hash over the signature\r\n   data, and then using the resulting hash in the signature algorithm.\r\n\r\n   The signature data is the concatenation of a body and a trailer.\r\n\r\n   For binary document signatures (type 0x00), the document data is\r\n   is the sinature data body.  For text document signatures (type 0x01),\r\n   the document is canonicalized by converting line endings to <CR><LF>,\r\n   and the resulting data is the sinature data body.\r\n\r\n   When a signature is made over one key, the signature data body is a\r\n   Public-Key packet (see 5.5.) in the old packet format with two-octet\r\n   body length (octet 0x99, followed by the two-octet body length,\r\n   followed by the Public-Key packet body).  The signature data body of\r\n   a subkey binding signature (type 0x18) or of a primary key binding\r\n   signature (type 0x19) is the concatination of the Public-Key packet\r\n   of the main key and a Public-Key (not a Public-Subkey packet) packet\r\n   of the subkey in the format discribed above.  The signature data body\r\n   of a Key Revocation signatures (type 0x20 or 0x28) is the Public-Key\r\n   packet of the key being revoked in the format described above.\r\n\r\n   The signature data body for a V3 certification signature (type 0x10\r\n   through 0x13) is the concatination of the key packet in the format\r\n   described above and the body of a User ID packet (see 5.11.).  The\r\n   signature data body for a V4 certification signature (type 0x10\r\n   through 0x13) is the concatenation of the key packet in the format\r\n   descibed above, either the constant 0xB4 for User ID certification or\r\n   the constant 0xD1 for User Attribute certification (User Attribute\r\n   packets are not a required part of the OpenPGP standard.  Except as\r\n   noted, a User Attribute packet may be used anywhere that a User ID\r\n   packet may be used. (see 5.12.)),  a four-octet number giving the\r\n   length of the User ID Packet body, and the User ID Packet body.\r\n   (0xB4 starts an old-style packet header of a User ID packet with\r\n   one-octet body length and 0xD1 starts the new-style packet header of\r\n   a User Attribute packet.  But the body length is encoded\r\n   differently.)\r\n\r\n   When a signature is made over a Signature packet (type 0x50), the to\r\n   signed Signature packet is trimmed by leaving out the not\r\n   hashincluded subpacket data and setting the not hashincluded\r\n   subpacket data length to zero.  The body of the signature data is the\r\n   octet 0x88, followed by the four-octet-length of the to be signed\r\n   Signature packet body, followed by the to be signed Signature packet\r\n   body.  (0x88 starts an old-style packet header of a Signature packet\r\n   with one-octet body length.  But the body length is encoded\r\n   differently.)\r\n\r\n   The signature data trailer for a V3 signature are five octets of the\r\n   signature packet body, starting from the signature type field. This\r\n   data is the signature type followed by the four-octet signature time.\r\n   The signature data trailer for a V4 signature is the concatenation\r\n   of a part of the signature packet body starting from the first field,\r\n   the version number, through the end of the hashincluded subpacket\r\n   data, one more time the version number (0x04), 0xFF, and a four-octet\r\n   number of the length of the part included from the signature packet.", "notes": "The original is nearly unintelligible. Key, key packet, key packet body,\r\netc are confused until a signature hashes the User ID into a hash\r\ncontext (sic!).\r\n\r\nThe 0x99 for all public-keys and the differently encoded body lenght for\r\nUser ID packets and User Attribute packets is really odd.\r\nProposal:\r\nA Flag and a Feature for a new encoding of the signature body.  Usage of\r\na the actual new-style packet headers with 0xFF and four-octet body\r\nlength.\r\n\r\nChanged to editorial.\n --VERIFIER NOTES-- \nAs complex as the RFC\u2019s text may be, it\u2019s been through the IETF process including people actually coding to it. I don\u2019t find the change any less complex and might contain errors.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2219", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3.", "orig_text": "   The message is encrypted with a session key, and the session key is\r\n   itself encrypted and stored in the Encrypted Session Key packet or\r\n   the Symmetric-Key Encrypted Session Key packet.", "correct_text": "   The message is encrypted with a session key, and the session key is\r\n   itself encrypted and stored in the Public-Key Encrypted Session Key\r\n   packet or the Symmetric-Key Encrypted Session Key packet.", "notes": "The word `Public-Key' is missing.\r\n\r\nChanged to editorial", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2220", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.5.3.", "orig_text": "     - A Public-Key or Public-Subkey packet, as described above.", "correct_text": "     - A Public-Key or Public-Subkey packet body, as described above.", "notes": "There is no Public-Key packet header in the Secret-Key packet body.\r\n\r\nChanged to editorial.\n --VERIFIER NOTES-- \nSimilar to Errata 2202 and 2203, it is an idiom of the document to say \u201cpacket\u201d when it might be more precise to say \u201cpacket body.\u201d It is, however, clear. If there are inconsistencies in this idiom, they\u2019d make reasonable errata.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1634", "doc-id": "RFC3143", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2.2", "orig_text": "2.2.2 Interception proxies prevent introduction of new HTTP methods\r\n\r\n   Name\r\n      Interception proxies prevent introduction of new HTTP methods\r\n\r\n   Classification\r\n      Architecture\r\n\r\n   Description\r\n      A proxy that receives a request with a method unknown to it is\r\n      required to generate an HTTP 501 Error as a response.  HTTP\r\n      methods are designed to be extensible so there may be applications\r\n      deployed with initial support just for the user agent and origin\r\n      server.  An interception proxy that hijacks requests which include\r\n      new methods destined for servers that have implemented those\r\n      methods creates a de-facto firewall where none may be intended.\r\n\r\n   Significance\r\n      Medium within interception proxy environments.\r\n\r\n   Implications\r\n      Renders new compliant applications useless unless modifications\r\n      are made to proxy software.  Because new methods are not required\r\n      to be globally standardized it is impossible to keep up to date in\r\n      the general case.\r\n\r\n   Solution(s)\r\n      Eliminate the need for interception proxies.  A client receiving a\r\n      501 in a traditional HTTP environment may either choose to repeat\r\n      the request to the origin server directly, or perhaps be\r\n      configured to use a different proxy.\r\n\r\n   Workaround\r\n      Level 5 switches (sometimes called Level 7 or application layer\r\n      switches) can be used to keep HTTP traffic with unknown methods\r\n      out of the proxy.  However, these devices have heavy buffering\r\n      responsibilities, still require TCP sequence number spoofing, and\r\n      do not interact well with persistent connections.\r\n\r\n      The HTTP/1.1 specification allows a proxy to switch over to tunnel\r\n      mode when it receives a request with a method or HTTP version it\r\n      does not understand how to handle.\r\n\r\n   Contact\r\n      Patrick McManus <mcmanus@AppliedTheory.com>\r\n      Henrik Nordstrom <hno@hem.passagen.se> (HTTP/1.1 clarification)\r\n\r\n", "correct_text": "- none -", "notes": "The whole subsection needs to be removed. There is no requirement in RFC2616 for proxies to generate a 501 status for unknown methods.\r\n\r\nMark Nottingham wrote: I don't think that deleting this section is the right answer; some interception proxies *do* prevent the introduction of new methods; it's just the text about 501 that's wrong.\r\n", "submit_date": "2008-12-13", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1635", "doc-id": "RFC4918", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.4", "orig_text": "MOVE an internal member into the collection,", "correct_text": "MOVE inserting a new internal member into the collection,", "notes": "Edited the corrected text as per discussion between Lisa and Julian.", "submit_date": "2008-12-13", "submitter_name": "Zdenek Kouba", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2448", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.4", "orig_text": "On mid-page 82, the RFC text defines the constant:\r\n\r\n#define PRINTBASE64 4\r\n\r\nwhich is never used in the subsequent test driver code\r\n(Base64 output is not supported).\r\nHence, this line should be deleted.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1644", "doc-id": "RFC4302", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "B2", "orig_text": "Appendix B2 says:\r\n     + Case A: Tl >= (W - 1). In this case, the window is within one\r\n                              sequence number subspace.  (See Figure 1)\r\n     + Case B: Tl < (W - 1).  In this case, the window spans two\r\n                              sequence number subspaces.  (See Figure 2)\r\n\r\n   In the figures below, the bottom line (\"----\") shows two consecutive\r\n   sequence number subspaces, with zeros indicating the beginning of\r\n   each subspace.  The two shorter lines above it show the higher-order\r\n   bits that apply.  The \"====\" represents the window.  The \"****\"\r\n   represents future sequence numbers, i.e., those beyond the current\r\n   highest sequence number authenticated (ThTl).\r\n        Th+1                         *********\r\n\r\n        Th               =======*****\r\n\r\n              --0--------+-----+-----0--------+-----------0--\r\n                         Bl    Tl            Bl\r\n                                        (Bl+2^32) mod 2^32\r\n\r\n                            Figure 1 -- Case A\r\n\r\n\r\n        Th                           ====**************\r\n\r\n        Th-1                      ===\r\n\r\n              --0-----------------+--0--+--------------+--0--\r\n                                  Bl    Tl            Bl\r\n                                                 (Bl+2^32) mod 2^32\r\n\r\n                            Figure 2 -- Case B", "correct_text": "Must say:\r\n     + Case A: Tl >= (W - 1). In this case, the window is within one\r\n                              sequence number subspace.  (See Figure 2)\r\n     + Case B: Tl < (W - 1).  In this case, the window spans two\r\n                              sequence number subspaces.  (See Figure 3)\r\n\r\n   In the figures below, the bottom line (\"----\") shows two consecutive\r\n   sequence number subspaces, with zeros indicating the beginning of\r\n   each subspace.  The two shorter lines above it show the higher-order\r\n   bits that apply.  The \"====\" represents the window.  The \"****\"\r\n   represents future sequence numbers, i.e., those beyond the current\r\n   highest sequence number authenticated (ThTl).\r\n        Th+1                         *********\r\n\r\n        Th               =======*****\r\n\r\n              --0--------+-----+-----0--------+-----------0--\r\n                         Bl    Tl            Bl\r\n                                        (Bl+2^32) mod 2^32\r\n\r\n                            Figure 2 -- Case A\r\n\r\n\r\n        Th                           ====**************\r\n\r\n        Th-1                      ===\r\n\r\n              --0-----------------+--0--+--------------+--0--\r\n                                  Bl    Tl            Bl\r\n                                                 (Bl+2^32) mod 2^32\r\n\r\n                            Figure 3 -- Case B", "notes": "Wrong numbers for figures in Section B2.", "submit_date": "2008-12-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1645", "doc-id": "RFC4302", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "B2.2", "orig_text": "      + Under Case A (Figure 1):\r\n        If Seql >= Bl (where Bl = Tl - W + 1), then Seqh = Th\r\n        If Seql <  Bl (where Bl = Tl - W + 1), then Seqh = Th + 1\r\n\r\n      + Under Case B (Figure 2):\r\n        If Seql >= Bl (where Bl = Tl - W + 1), then Seqh = Th - 1\r\n        If Seql <  Bl (where Bl = Tl - W + 1), then Seqh = Th", "correct_text": "      + Under Case A (Figure 2):\r\n        If Seql >= Bl (where Bl = Tl - W + 1), then Seqh = Th\r\n        If Seql <  Bl (where Bl = Tl - W + 1), then Seqh = Th + 1\r\n\r\n      + Under Case B (Figure 3):\r\n        If Seql >= Bl (where Bl = Tl - W + 1), then Seqh = Th - 1\r\n        If Seql <  Bl (where Bl = Tl - W + 1), then Seqh = Th", "notes": "Wrong numbering for figures", "submit_date": "2008-12-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1646", "doc-id": "RFC4757", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2 7.3", "orig_text": "                           Kseq = HMAC(Kss, \"fortybits\", (int32)0);\r\n                                        // len includes terminating null\r\n                           memset(Kseq+7, 0xab, 7)", "correct_text": "                           Kseq = HMAC(Kss, \"fortybits\", (int32)0);\r\n                                        // len includes terminating null\r\n                           memset(Kseq+7, 0xab, 9)", "notes": "applies both to section 7.2 and 7.3, confirmed by Larry Zhu", "submit_date": "2008-12-29", "submitter_name": "Luke Howard", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1697", "doc-id": "RFC5449", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A., 2nd para", "orig_text": "   The following terminology will be used in describing the heuristics:\r\n   D(Y) is the degree of a 1-hop neighbor, router Y (where Y is a member\r\n|  of N(i), defined as the number of neighbors of router Y, EXCLUDING\r\n   all the members of N(i) and EXCLUDING the router performing the\r\n   computation.  The proposed heuristic can then be described as\r\n   follows.  Begin with an empty Flooding-MPR set.  Then:\r\n\r\n", "correct_text": "   The following terminology will be used in describing the heuristics:\r\n   D(Y) is the degree of a 1-hop neighbor, router Y (where Y is a member\r\n|  of N(i)), defined as the number of neighbors of router Y, EXCLUDING\r\n   all the members of N(i) and EXCLUDING the router performing the\r\n   computation.  The proposed heuristic can then be described as\r\n   follows.  Begin with an empty Flooding-MPR set.  Then:\r\n\r\n", "notes": "A missing matching ')' makes the text very ambiguous and confusing.", "submit_date": "2009-03-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1698", "doc-id": "RFC5331", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4., 1st para", "orig_text": "   [...]\r\n   Then, with respect to this binding, Ru is the \"upstream LSR\", and Rd\r\n|  is the \"downstream LSR\".\"\r\n                          ^^", "correct_text": "   Then, with respect to this binding, Ru is the \"upstream LSR\", and Rd\r\n|  is the \"downstream LSR\".\r\n                          ^", "notes": "Typo; keep for update!", "submit_date": "2009-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1636", "doc-id": "RFC4544", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "The DESCRIPTION clause of the iscsiHdrIntegrityNone OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme (for either the header or data) is being\r\n<<page break>>\r\n        used.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme for the header is being used.\"\r\n\r\nThe DESCRIPTION clause of the iscsiHdrIntegrityCrc32c OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme (for either the header or data) is CRC32c.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme for the header is CRC32c.\"\r\n\r\nThe DESCRIPTION clause of the iscsiDataIntegrityNone OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme (for either the header or data) is being\r\n        used.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when no integrity\r\n|       scheme for the data is being used.\"\r\n\r\nThe DESCRIPTION clause of the iscsiDataIntegrityCrc32c OBJECT-IDENTITY,\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme (for either the header or data) is CRC32c.\"\r\n\r\nshould better say:\r\n\r\n    DESCRIPTION\r\n        \"The authoritative identifier when the integrity\r\n|       scheme for the data is CRC32c.\"", "correct_text": "", "notes": "The iscsiDescriptors OBJECT-IDENTITY declarations, on page 16/17\r\nof the RFC, unfortunately contain pairwise identical DESCRIPTION\r\nclauses, making Header and Data Integrity identifiers\r\nindistinguishable.", "submit_date": "2006-07-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1637", "doc-id": "RFC4544", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "The DESCRIPTION clause of the iscsiSsnAuthIdentity OBJECT-TYPE,\r\non page 58 of the RFC, says:\r\n\r\n    DESCRIPTION\r\n        \"This object contains a pointer to a row in the\r\n        IPS-AUTH MIB module that identifies the authentication\r\n|       method being used on this session, as communicated\r\n        during the login phase.\"\r\n", "correct_text": "    DESCRIPTION\r\n        \"This object contains a pointer to a row in the\r\n        IPS-AUTH MIB module that identifies the authentication\r\n|       identity being used on this session, as communicated\r\n        during the login phase.\"\r\n", "notes": "", "submit_date": "2006-07-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1638", "doc-id": "RFC4544", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  outdated text\r\n\r\nWithin Section 6, the first paragraph on top of page 5 says:\r\n\r\n   It is worthwhile to note that this is an iSCSI MIB module and as such\r\n   reflects only iSCSI objects.  This module does not contain\r\n   information about the SCSI-layer attributes of a device.  If a SCSI\r\n|  layer is present, the SCSI MIB module, currently under development,\r\n   may be used to manage SCSI information for a device.\r\n\r\nThe last apparently sentence is outdated.  There already is an\r\nappropriate Informative Reference given on page 81 of the RFC.\r\nThe RFC should say:\r\n\r\n   It is worthwhile to note that this is an iSCSI MIB module and as such\r\n   reflects only iSCSI objects.  This module does not contain\r\n   information about the SCSI-layer attributes of a device.  If a SCSI\r\n|  layer is present, the SCSI MIB module [RFC4455] may be used to manage\r\n   SCSI information for a device.\r\n                                        ^^^^^^^^^^^\r\n\r\n\r\n(3)  4 similar typos\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnFailures  OBJECT-TYPE,\r\non page 20 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n        \"This object counts the number of times a session belonging\r\n|       to this instance has been failed.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n        \"This object counts the number of times a session belonging\r\n|       to this instance has failed.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity is indicated\r\n        in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnDigestErrors OBJECT-TYPE,\r\non page 22 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to receipt of\r\n        a PDU containing header or data digest errors.  If this\r\n        counter has suffered a discontinuity, the time of the last\r\n        discontinuity is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to receipt of\r\n        a PDU containing header or data digest errors.  If this\r\n        counter has suffered a discontinuity, the time of the last\r\n        discontinuity is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnCxnTimeoutErrors OBJECT-TYPE,\r\non page 22 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to a sequence\r\n        exceeding a time limit.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to a sequence\r\n        exceeding a time limit.  If this counter has suffered a\r\n        discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nThe DESCRIPTION clause of the iscsiInstSsnFormatErrors OBJECT-TYPE,\r\non page 23 of RFC 4544, says:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that were failed due to receipt of\r\n        a PDU that contained a format error.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\nIt should better say:\r\n\r\n    DESCRIPTION\r\n|       \"The count of sessions that failed due to receipt of\r\n        a PDU that contained a format error.  If this counter has\r\n        suffered a discontinuity, the time of the last discontinuity\r\n        is indicated in iscsiInstDiscontinuityTime.\"\r\n\r\n\r\n(4)  incomplete descriptions\r\n\r\nWithin the Target Attributes Table, the objects\r\n    iscsiTgtLastFailureType,\r\n    iscsiTgtLastIntrFailureName,\r\n    iscsiTgtLastIntrFailureAddrType, and\r\n    iscsiTgtLastIntrFailureAddr\r\napparently have no meaningful value if no error has occurred (yet).\r\nThe DESCRIPTION clauses for these objects, on page 38/39 of RFC 4544,\r\ndo not indicate the behaviour of these objects in this case, i.e.,\r\nwhen the iscsiTgtLastFailureTime instance in a given conceptual\r\nrow has the value zero.\r\nThe respective DESCRIPTION clauses should indicate whether these\r\nobjects\r\n  -   should not be instantiated\r\nor\r\n  -   have a certain default value (t.b.d.)\r\nin this case.\r\n\r\n\r\nA similar issue holds for the objects in the Initiator Attributes\r\nTable,\r\n    iscsiIntrLastFailureType,\r\n    iscsiIntrLastTgtFailureName,\r\n    iscsiIntrLastTgtFailureAddrType, and\r\n    iscsiIntrLastTgtFailureAddr\r\n(The corresponding DESCRIPTIONS can be found on page 46/47.)\r\n\r\n\r\n(5)  row creation / storageType restriction\r\n\r\nVarious tables contain rows that can be created/deleted dynamically.\r\nRepeatedly, for these tables the DESCRIPTION clauses for the\r\ncorresponding StorageType objects contain the sentence\r\n(e.g., for iscsiTgtAuthStorageType, on page 44):\r\n\r\n                                  [...].  Rows in this table that were\r\n         created through an external process may have a storage type of\r\n         readOnly or permanent.\r\n\r\nIt is not clear from the text what precisely 'external process'\r\nmeans, and therefore it remains open whether/why the restriction\r\non values `readOnly` or `permanent` makes sense.\r\n\r\n\r\n(6)  unpleasant alignment\r\n\r\nAny future update to this RFC should correct the unpleasant\r\nstaggered tabular alignment of the following row-structure\r\n( SEQUENCE { ... } ) declarations for:\r\n  o  IscsiPortalAttributesEntry,\r\n  o  IscsiInitiatorAttributesEntry, and\r\n  o  IscsiInitiatorLoginStatsEntry\r\n\r\n\r\n(7)  Semantic gap in Initiator Login Stats Table ??\r\n\r\nThe Initiator Login Stats Table somehow is a \"dual\" of the\r\nTarget Login Stats Table.\r\nTherefore, I miss an object in the Initiator Login Stats Table\r\ncorresponding to iscsiTgtLoginAuthorizeFails, counting received\r\nLogin Response PDUs with status class 0x202.", "correct_text": "", "notes": "", "submit_date": "2006-07-04", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1639", "doc-id": "RFC4939", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  Section 3.3\r\n\r\nThe text of the second sentence in the second paragraph of\r\nSection 3.3, at the bottom of page 5 of RFC 4939, apparently\r\nis garbled by word omissions.\r\n\r\nThe RFC says:\r\n\r\n   The count of objects registered in each iSNS server instance is shown\r\n|  in the table isnsNumObjectsTable.  The provides a summary of the\r\n|  number Discovery Domain Sets, Discovery Domains, Entities, Portals,\r\n   Portal Groups, iSCSI Nodes, and iFCP FC Nodes and Ports.\r\n\r\nIt should perhaps say:\r\n\r\n   The count of objects registered in each iSNS server instance is shown\r\n|  in the table isnsNumObjectsTable.  This table provides a summary of\r\n              vvv                       ^^^^^^^^\r\n|  the number of Discovery Domain Sets, Discovery Domains, Entities,\r\n   Portals, Portal Groups, iSCSI Nodes, and iFCP FC Nodes and Ports.", "correct_text": "", "notes": "", "submit_date": "2007-09-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1640", "doc-id": "RFC4939", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(2c)  isnsControlNodeIscsiNodeName  (page 28)\r\n\r\nAccording to the DESCRIPTION clause in the isnsControlNodeIscsiNodeName\r\nOBJECT-TYPE declaration, the SYNTAX clause should have been specified\r\nwith a formal SIZE limitation to 223 for this object as well, as has\r\nbeen done for all other similar objects in this MIB module.\r\n\r\nThe RFC says:\r\n\r\n      isnsControlNodeIscsiNodeName   OBJECT-TYPE\r\n|         SYNTAX                  SnmpAdminString\r\n          [...]\r\n\r\nIt should say:\r\n\r\n      isnsControlNodeIscsiNodeName   OBJECT-TYPE\r\n|         SYNTAX                  SnmpAdminString (SIZE (0..223))\r\n          [...]", "correct_text": "", "notes": "", "submit_date": "2007-09-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1641", "doc-id": "RFC4939", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "(2f)  isnsRegEntityNumObjectsTable / isnsRegEntityNumObjectsEntry\r\n      (page 44)\r\n\r\nStudying the MIB module, it turns out that the\r\nisnsRegEntityNumObjectsTable is a (dense) augmentation\r\nof the isnsRegEntityTable : a conceptual row in the former\r\nmust be instantiated if an only if the corresponding row\r\n(with identical index values) is instantiated in the latter.\r\n\r\nTherefore, according to the strong recommendation '(1)' given\r\nin Section 7.8.1 of the first part of STD 58, RFC 2578, the\r\nisnsRegEntityNumObjectsTable should be formally represented\r\nas an augmentation of the isnsRegEntityNumObjectsTable.\r\n\r\nThis means that, in the isnsRegEntityNumObjectsEntry OBJECT-TYPE\r\ndeclaration, where the RFC says ...\r\n\r\n      isnsRegEntityNumObjectsEntry    OBJECT-TYPE\r\n          [...]\r\n|         INDEX   { isnsServerIndex,\r\n|                   isnsRegEntityIndex }\r\n          ::= { isnsRegEntityNumObjectsTable 1 }\r\n\r\n... it should have specified:\r\n\r\n      isnsRegEntityNumObjectsEntry    OBJECT-TYPE\r\n          [...]\r\n|         AUGMENTS { isnsRegEntityEntry }\r\n          ::= { isnsRegEntityNumObjectsTable 1 }\r\n\r\nNote that the similar relationship between the isnsNumObjectsTable\r\nand the isnsServerTable has correctly reflected in the RFC; the\r\nisnsNumObjectsEntry OBJECT-TYPE declaration already contains the\r\nclause:\r\n          AUGMENTS { isnsServerEntry }\r\n\r\n\r\n(2g)  isnsRegIscsiNodeAuthMethod  (page 55)\r\n\r\nThe DESCRIPTION clause of the isnsRegIscsiNodeAuthMethod OBJECT-TYPE\r\ndeclaration says:\r\n\r\n|     \"This attribute contains a null-terminated string containing\r\n       UTF-8 text listing the iSCSI authentication methods enabled\r\n       for this iSCSI Node, in order of preference.  The text\r\n       values used to identify iSCSI authentication methods are\r\n       embedded in this string attribute and delineated by a\r\n       comma.  The text values are identical to those found in\r\n       RFC 3720 - iSCSI.  Additional vendor-specific text values\r\n       are also possible.\"\r\n\r\nThis is very unusual.  'null-terminated' have been introduced\r\nin some very popular programming languages in place of length\r\ncounts for string variables.  (Some people believe this has been\r\none of the most serious errors ever in the history of programming\r\nlanguages, because it makes transparent strings (with 0x00 allowed)\r\nimpossible, and practice sadly has proven it is a pathway to the\r\nhell of very many security flaws.)\r\nASN.1 OCTET-STRINGs are counted strings, and the SMIv2 *is* a qualified\r\nsubset of ASN.1.  SnmpAdminString is a proper subtype of OCTET-STRING.\r\nHence, there is no need to include a terminating null into an object\r\nof type SnmpAdminString.\r\nApparently, this has been recognized throughout this MIB module,\r\nwith explicit explanations for all OCTET-STRING (SIZE (0..223))\r\ntyped objects.\r\n\r\nThis single deviation from standard practice is a significant\r\ninconsistency in the MIB module and it might well lead to\r\ninteroperability problems if it is not recognized by implementors!\r\n\r\n\r\n(2h)  object names in the isnsNotificationsInfo branch\r\n      (pages 64/65, used later on as well)\r\n\r\nIt is common practice, and makes life easier, to have object names\r\nbuilt in a manner that reflects the OID tree: most significant\r\npart(s) left, finer granularity right.\r\n\r\nThe object names introduced in most parts of the MIB module conform\r\nto that rule.  But unfortunately, the object names in the\r\nisnsNotificationsInfo branch are not built this way.\r\n\r\nIMHO, it would have been much more preferable to have the\r\nfollowing name changes applied (unfortunately, it's too late\r\nnow for such modification):\r\n\r\n   isnsAddressNotificationType   -->  isnsNotificationAddressType\r\n\r\n   isnsAddressNotification       -->  isnsNotificationAddress\r\n\r\n   isnsTcpPortNotification       -->  isnsNotificationTcpPort\r\n\r\n   isnsUdpPortNotification       -->  isnsNotificationUdpPort", "correct_text": "", "notes": "", "submit_date": "2007-09-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1642", "doc-id": "RFC5247", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4", "orig_text": "   EAP pre-authentication\r\n      In EAP pre-authentication, an EAP peer pre-establishes EAP keying\r\n      material with an authenticator prior to arrival.  EAP\r\n      pre-authentication only affects the timing of EAP authentication,\r\n      but does not shorten or eliminate EAP (phase 1a) or AAA (phase 1b)\r\n      exchanges;  Discovery (phase 0) and Secure Association Protocol\r\n      (phase 2) exchanges occur as described in Section 1.3.  As a\r\n      result, the primary benefit is to enable EAP authentication to be\r\n      removed from the handoff critical path, thereby reducing latency.\r\n      Use of EAP pre-authentication within IEEE 802.11 is described in\r\n      [IEEE-802.11] and [8021XPreAuth].\r\n\r\n   Proactive key distribution\r\n      In proactive key distribution, keying material and authorizations\r\n      are transported from the backend authentication server to a\r\n      candidate authenticator in advance of a handoff.  As a result, EAP\r\n      (phase 1a) is not needed, but the Discovery (phase 0), and Secure\r\n      Association Protocol exchanges (phase 2) are still necessary.\r\n      Within the AAA exchange (phase 1b), authorization and key\r\n      distribution functions are typically supported, but not\r\n      authentication.  Proactive key distribution is described in\r\n      [MishraPro], [IEEE-03-084], and [HANDOFF].\r\n\r\n", "correct_text": "   EAP pre-authentication\r\n      In EAP pre-authentication, an EAP peer pre-establishes EAP \r\n      keying material with an authenticator through which the peer has\r\n      routed the EAP authentication prior to arrival.  EAP\r\n      pre-authentication only affects the timing of EAP \r\n      authentication, but does not shorten or eliminate EAP (phase 1a)\r\n      or AAA (phase 1b) exchanges through the authenticator.\r\n      Discovery (phase 0) and Secure Association Protocol (phase 2)\r\n      exchanges occur as described in Section 1.3.  As a result, the\r\n      primary benefit is to enable EAP authentication to be removed\r\n      from the handoff critical path, thereby reducing latency.  Use\r\n      of EAP pre-authentication within IEEE 802.11 is described in\r\n      [IEEE-802.11].\r\n\r\n   Proactive key distribution\r\n      In proactive key distribution, keying material and authorizations\r\n      are transported from the backend authentication server to a\r\n      candidate authenticator in advance of a handoff.  As a result, EAP\r\n      (phase 1a) is not needed, but the Discovery (phase 0), and Secure\r\n      Association Protocol exchanges (phase 2) are still necessary.\r\n      Within the AAA exchange (phase 1b), authorization and key\r\n      distribution functions are typically supported, but not\r\n      authentication.  Proactive key distribution is described in\r\n      [MishraPro], [IEEE-03-084], [HANDOFF] and [8021XPreAuth].\r\n", "notes": "The EAP pre-authentication definition should be more clear that an EAP peer \r\nruns EAP authentication through the target authenticator before EAP keying material will be pre-established with the target authenticator prior to arrival.\n --VERIFIER NOTES-- \nDiscussion between EAP and HOKEY chairs and the ADs revealed that this is not an appropriate change.", "submit_date": "2008-12-20", "submitter_name": "Yoshihiro Ohba", "verifier_id": "", "verifier_name": "Jari Arkko", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1643", "doc-id": "RFC3756", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "   Conversely, the term\r\n|   \"trust relationship\" denotes a mutual a priori relationship between\r\n   the involved organizations or parties where the parties believe that\r\n   the other parties will behave correctly even in the future.", "correct_text": "   Conversely, the term\r\n|   \"trust relationship\" denotes a mutual priori relationship between\r\n   the involved organizations or parties where the parties believe that\r\n   the other parties will behave correctly even in the future.", "notes": "\n --VERIFIER NOTES-- \nThe terminology \"a priori\" is correct. It defines a relationship that exists prior to their interaction.   ", "submit_date": "2008-12-23", "submitter_name": "Shiang-Ming Huang", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1699", "doc-id": "RFC5331", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7, pg.8", "orig_text": "   The precise set of procedures for identifying the IP address of the\r\n|  root of the tunnel depend, of course, on the protocol used to set up\r\n   the tunnel.  [...]\r\n                           ^^", "correct_text": "   The precise set of procedures for identifying the IP address of the\r\n|  root of the tunnel depends, of course, on the protocol used to set up\r\n   the tunnel.  [...]\r\n                           ^^^", "notes": "Location is the 2nd paragraph on page 8.\r\n\r\nRationale:  singular/plural mismatch: \"The ... set ... depend\".\r\nKeep for update!", "submit_date": "2009-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1647", "doc-id": "RFC4757", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2 and 7.3", "orig_text": "In 7.2:\r\n\r\nif (exportable)\r\n                   {\r\n                           Kseq = HMAC(Kss, \"fortybits\", (int32)0);\r\n                                        // len includes terminating null\r\n                           memset(Kseq+7, 0xab, 7)\r\n                   }\r\n\r\nIn 7.3:\r\n \r\nif (exportable)\r\n                   {\r\n\r\n                           Kcrypt = HMAC(Klocal, \"fortybits\", (int32)0);\r\n                                       // len includes terminating null\r\n                           memset(Kcrypt+7, 0xab, 7);\r\n                   }\r\n\r\nAgain in 7.3:\r\n\r\nif (exportable)\r\n                   {\r\n                           Kseq = HMAC(Kss, \"fortybits\", (int32)0);\r\n                                       // len includes terminating null\r\n                           memset(Kseq+7, 0xab, 7)\r\n                   }", "correct_text": "In 7.2:\r\n\r\nif (export)\r\n                   {\r\n                           Kseq = HMAC(Kss, \"fortybits\", (int32)0);\r\n                                        // len includes terminating null\r\n                           memset(Kseq+7, 0xab, 7)\r\n                   }\r\n\r\nIn 7.3:\r\n \r\nif (export)\r\n                   {\r\n\r\n                           Kcrypt = HMAC(Klocal, \"fortybits\", (int32)0);\r\n                                       // len includes terminating null\r\n                           memset(Kcrypt+7, 0xab, 7);\r\n                   }\r\n\r\nAgain in 7.3:\r\n\r\nif (export)\r\n                   {\r\n                           Kseq = HMAC(Kss, \"fortybits\", (int32)0);\r\n                                       // len includes terminating null\r\n                           memset(Kseq+7, 0xab, 7)\r\n                   }", "notes": "misnamed \"export\" argument  .                                                   Larry Zhu confirmed this issue\r\n\r\nSean Turner add (as pointed out by Magnus Nystrom) that there were actually three exportable/export replacements needed: 1 in Section 7.2 and two in Section 7.3.", "submit_date": "2008-12-31", "submitter_name": "Ganga Mahesh Siddem", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1648", "doc-id": "RFC4757", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.3", "orig_text": "Kcrypt = HMAC(Klocal, \"fortybits\", (int32)0);\r\n// len includes terminating null\r\n\r\nKseq = HMAC(Kss, \"fortybits\", (int32)0);\r\n// len includes terminating null\r\n", "correct_text": "Kcrypt = HMAC(Klocal,(int32)0, \"fortybits\");\r\n// len includes terminating null\r\n\r\nKseq = HMAC(Kss, (int32)0,\"fortybits\");\r\n// len includes terminating null\r\n", "notes": "Larry Zhu confirmed this issue.Misordered arguments  in HMAC function.\n --VERIFIER NOTES-- \nI checked with Magnus Nystrom.  He said their implementation is equal to the RFC.\r\n", "submit_date": "2008-12-31", "submitter_name": "Ganga Mahesh Siddem", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1649", "doc-id": "RFC2617", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": " /* calculate H(A1) as per spec */\r\n      void DigestCalcHA1(\r\n          IN char * pszAlg,\r\n          IN char * pszUserName,\r\n          IN char * pszRealm,\r\n          IN char * pszPassword,\r\n          IN char * pszNonce,\r\n          IN char * pszCNonce,\r\n          OUT HASHHEX SessionKey\r\n          )\r\n      {\r\n            MD5_CTX Md5Ctx;\r\n            HASH HA1;\r\n\r\n            MD5Init(&Md5Ctx);\r\n            MD5Update(&Md5Ctx, pszUserName, strlen(pszUserName));\r\n            MD5Update(&Md5Ctx, \":\", 1);\r\n            MD5Update(&Md5Ctx, pszRealm, strlen(pszRealm));\r\n            MD5Update(&Md5Ctx, \":\", 1);\r\n            MD5Update(&Md5Ctx, pszPassword, strlen(pszPassword));\r\n            MD5Final(HA1, &Md5Ctx);\r\n            if (stricmp(pszAlg, \"md5-sess\") == 0) {\r\n                  MD5Init(&Md5Ctx);\r\n|                 MD5Update(&Md5Ctx, HA1, HASHLEN);\r\n                  MD5Update(&Md5Ctx, \":\", 1);\r\n                  MD5Update(&Md5Ctx, pszNonce, strlen(pszNonce));\r\n                  MD5Update(&Md5Ctx, \":\", 1);\r\n                  MD5Update(&Md5Ctx, pszCNonce, strlen(pszCNonce));\r\n                  MD5Final(HA1, &Md5Ctx);\r\n            };\r\n            CvtHex(HA1, SessionKey);\r\n      };", "correct_text": " /* calculate H(A1) as per spec */\r\n      void DigestCalcHA1(\r\n          IN char * pszAlg,\r\n          IN char * pszUserName,\r\n          IN char * pszRealm,\r\n          IN char * pszPassword,\r\n          IN char * pszNonce,\r\n          IN char * pszCNonce,\r\n          OUT HASHHEX SessionKey\r\n          )\r\n      {\r\n            MD5_CTX Md5Ctx;\r\n            HASH HA1;\r\n|           HASHHEX HA1Hex;\r\n\r\n            MD5Init(&Md5Ctx);\r\n            MD5Update(&Md5Ctx, pszUserName, strlen(pszUserName));\r\n            MD5Update(&Md5Ctx, \":\", 1);\r\n            MD5Update(&Md5Ctx, pszRealm, strlen(pszRealm));\r\n            MD5Update(&Md5Ctx, \":\", 1);\r\n            MD5Update(&Md5Ctx, pszPassword, strlen(pszPassword));\r\n            MD5Final(HA1, &Md5Ctx);\r\n            if (stricmp(pszAlg, \"md5-sess\") == 0) {\r\n|                 CvtHex(HA1, HA1Hex);\r\n                  MD5Init(&Md5Ctx);\r\n|                 MD5Update(&Md5Ctx, HA1Hex, HASHHEXLEN);\r\n                  MD5Update(&Md5Ctx, \":\", 1);\r\n                  MD5Update(&Md5Ctx, pszNonce, strlen(pszNonce));\r\n                  MD5Update(&Md5Ctx, \":\", 1);\r\n                  MD5Update(&Md5Ctx, pszCNonce, strlen(pszCNonce));\r\n                  MD5Final(HA1, &Md5Ctx);\r\n            };\r\n            CvtHex(HA1, SessionKey);\r\n      };", "notes": "DigestCalcHA1 sample implemention has to be corrected.", "submit_date": "2009-01-08", "submitter_name": "Ganga Mahesh Siddem", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1650", "doc-id": "RFC3439", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   While there have been many implementations of Universal Interworking\r\n   unction (UIWF), IWF approaches have been problematic at large scale.\r\n   his concern is codified in the Principle of Minimum Intervention\r\n   BRYANT]:\r\n", "correct_text": "   While there have been many implementations of Universal Interworking\r\n   Function (UIWF), IWF approaches have been problematic at large scale.\r\n   This concern is codified in the Principle of Minimum Intervention\r\n   [BRYANT]:\r\n", "notes": "First character of three lines is missing.", "submit_date": "2009-01-09", "submitter_name": "Adam Gleave", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1651", "doc-id": "RFC4757", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3", "orig_text": "// new encryption key salted with seq\r\n  Kcrypt = HMAC(Kcrypt, (int32)seq);\r\n\r\n\r\n", "correct_text": "// new encryption key salted with seq\r\n  Kcrypt = HMAC(Kcrypt, (int32)seq_num);\r\n", "notes": "misnamed \"seq\" argument in HMAC function .", "submit_date": "2009-01-10", "submitter_name": "Ganga Mahesh Siddem", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1657", "doc-id": "RFC5326", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.1, pg.12", "orig_text": "   if (CTRL flag = 0)\r\n      segment is a data segment if (EXC flag = 0)\r\n         segment contains only red-part data if (Flag 1 = 1)\r\n            segment is a checkpoint segment is the last segment in the\r\n            red part of the block if (Flag 0 = 1)\r\n               segment is the last segment in the block\r\n         else // segment is not end of red-part\r\n            if (Flag 0 = 1)\r\n               segment is a checkpoint\r\n      else\r\n         segment contains only green-part data if (Flag 1 = 1)\r\n            if (Flag 0 = 1)\r\n               segment is the last segment in the block\r\n   else\r\n      segment is a control segment if (EXC flag = 0)\r\n         segment pertains to report activity if (flag 0 = 0)\r\n            segment is a report segment\r\n         else\r\n            segment is an acknowledgment of a report segment\r\n      else\r\n         segment pertains to session cancellation activity if (Flag 1 =\r\n         0)\r\n            segment pertains to cancellation by block sender if (Flag 0\r\n            = 1)\r\n               segment is a cancellation by sender\r\n            else\r\n               segment is an acknowledgment of a cancellation by sender\r\n         else\r\n            segment pertains to cancellation by block receiver if (Flag\r\n            0 = 1)\r\n               segment is a cancellation by receiver\r\n            else\r\n               segment is an acknowledgment of a cancellation by\r\n               receiver\r\n", "correct_text": "   if (CTRL flag = 0)\r\n      segment is a data segment\r\n      if (EXC flag = 0)\r\n         segment contains only red-part data\r\n         if (Flag 1 = 1)\r\n            segment is a checkpoint\r\n            segment is the last segment in the red part of the block\r\n            if (Flag 0 = 1)\r\n               segment is the last segment in the block\r\n         else // segment is not end of red-part\r\n            if (Flag 0 = 1)\r\n               segment is a checkpoint\r\n      else\r\n         segment contains only green-part data\r\n         if (Flag 1 = 1)\r\n            if (Flag 0 = 1)\r\n               segment is the last segment in the block\r\n   else\r\n      segment is a control segment\r\n      if (EXC flag = 0)\r\n         segment pertains to report activity\r\n         if (flag 0 = 0)\r\n            segment is a report segment\r\n         else\r\n            segment is an acknowledgment of a report segment\r\n      else\r\n         segment pertains to session cancellation activity\r\n         if (Flag 1 = 0)\r\n            segment pertains to cancellation by block sender\r\n|           if (Flag 0 = 0)\r\n               segment is a cancellation by sender\r\n            else\r\n               segment is an acknowledgment of a cancellation by sender\r\n         else\r\n            segment pertains to cancellation by block receiver\r\n|           if (Flag 0 = 0)\r\n               segment is a cancellation by receiver\r\n            else\r\n               segment is an acknowledgment of a cancellation by\r\n               receiver\r\n", "notes": "Issues:\r\n\r\na)  Confusing placement of line breaks: \"if\" clauses could be\r\n    understood as postfix qualifiers, but in fact shall be prefixes\r\n    to subsequent clauses; independent statements should be separated\r\n    by line breaks.\r\n\r\n    Correction: re-formating of entire pseudocode block\r\n\r\nb)  Sense of \"Flag 0\" in the \"CTRL=1\" branches is illogical and inconsistent\r\n    with remainder of the RFC -- e.g., cf. sections 3.1.2 and 3.1.3 !\r\n\r\n    Correction: Change  \"if (Flag 0 = 1)\"   -->  \"if (Flag 0 = 0)\"\r\n    in the two lines tagged with change bars in the corrected text.", "submit_date": "2009-01-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1715", "doc-id": "RFC5467", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6, 1st para", "orig_text": "   This document introduces new message objects for use in GMPLS\r\n   signaling [RFC3473] -- specifically the UPSTREAM_TSPEC,\r\n   UPSTREAM_ADSPEC, and UPSTREAM_FLOWSPEC objects.  These objects\r\n|  parallel the exiting SENDER_TSPEC, ADSPEC, and FLOWSPEC objects but\r\n   are used in the opposite direction.  As such, any vulnerabilities\r\n   that are due to the use of the old objects now apply to messages\r\n   flowing in the reverse direction.\r\n\r\n", "correct_text": "   This document introduces new message objects for use in GMPLS\r\n   signaling [RFC3473] -- specifically the UPSTREAM_TSPEC,\r\n   UPSTREAM_ADSPEC, and UPSTREAM_FLOWSPEC objects.  These objects\r\n|  parallel the existing SENDER_TSPEC, ADSPEC, and FLOWSPEC objects but\r\n   are used in the opposite direction.  As such, any vulnerabilities\r\n   that are due to the use of the old objects now apply to messages\r\n   flowing in the reverse direction.\r\n", "notes": "Rationale: typo changing the sense !\r\n  ==>   s/exiting/existing/", "submit_date": "2009-03-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1652", "doc-id": "RFC3877", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.4", "orig_text": "alarmModelState -> ituAlarmPerceivedSeverity\r\n       1        ->         clear (1)\r\n       2        ->         indeterminate (2)\r\n       3        ->         warning (6)\r\n       4        ->         minor (5)\r\n       5        ->         major (4)\r\n       6        ->         critical (3)", "correct_text": "alarmModelState -> ituAlarmPerceivedSeverity\r\n       1        ->         clear (1)\r\n       2        ->         warning (6)\r\n       3        ->         indeterminate (2)\r\n       4        ->         minor (5)\r\n       5        ->         major (4)\r\n       6        ->         critical (3)", "notes": "alarmModelState requires that the states be defined from less severe to more severe; however, under ITU-T PerceivedSeverity from ITU-T Rec. X.721 | ISO/IEC 10165-2 \"indeterminate\" is more severe than \"warning\".  This change corrects the order to match the requirement for order of severity for alarmModelState.\n --VERIFIER NOTES-- \nWhile the discrepancy between the documents is unfortunate, there is not a technical requirement for the enumeration values to be identical, nor is there a technical requirement for the labels to be identical, even though there is obviously considerable documentation value in avoiding gratuitous differences.\r\n\r\nWhat *is* technically important is that the MIB be able to uniquely represent all the cases from M.3100, and it accomplishes that goal.\r\n\r\nIn a future version of the document we can add an informative note alerting implementors to the discrepancies in numbering and spelling, so their implementations can include appropriate mapping functions to avoid losing information.\r\n   ", "submit_date": "2009-01-13", "submitter_name": "Brian Bidulock", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1653", "doc-id": "RFC4653", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "0", "orig_text": "   8. Acknowledgments ................................................14\r\n   9. IANA Considerations ............................................14\r\n   10. References ....................................................14\r\n      10.1. Normative References .....................................14\r\n      10.2. Informative References ...................................15", "correct_text": "   8. Acknowledgments ................................................14\r\n   9. References .....................................................14\r\n      9.1. Normative References ......................................14\r\n      9.2. Informative References ....................................15", "notes": "Typo in table of contents", "submit_date": "2009-01-15", "submitter_name": "Arnd Hannemann", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1654", "doc-id": "RFC4303", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.4.1", "orig_text": "Implementation Note:\r\n\r\n            Implementations can use any set of steps that results in the\r\n            same result as the following set of steps.  Begin by\r\n            removing and saving the ICV field.  Next check the overall\r\n            length of the ESP packet minus the ICV field.  If implicit\r\n            padding is required, based on the block size of the\r\n            integrity algorithm, append zero-filled bytes to the end of\r\n            the ESP packet directly after the Next Header field, or\r\n            after the high-order 32 bits of the sequence number if ESN\r\n            is selected.  Perform the ICV computation and compare the\r\n            result with the saved value, using the comparison rules\r\n            defined by the algorithm specification.\r\n", "correct_text": "Implementation Note:\r\n\r\n            Implementations can use any set of steps that results in the\r\n            same result as the following set of steps.  Begin by\r\n            removing and saving the ICV field.  Next check the overall\r\n            length of the ESP packet minus the ICV field.  If implicit\r\n            padding is required, based on the block size of the\r\n            integrity algorithm, append padding bytes (according integrity \r\n            algorithm specification, see Section 3.3.2.1) to the end of\r\n            the ESP packet directly after the Next Header field, or\r\n            after the high-order 32 bits of the sequence number if ESN\r\n            is selected.  Perform the ICV computation and compare the\r\n            result with the saved value, using the comparison rules\r\n            defined by the algorithm specification.\r\n", "notes": "(confirmed by Stephen Kent)", "submit_date": "2009-01-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1655", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.4.", "orig_text": "   Line Card ID               | IPFIX Message  | Exported Flow Records\r\n   -------------------------------------------------------------------\r\n   Line Card 1 (lineCardId=1) | 345            | 10201\r\n   Line Card 2 (lineCardId=2) | 690            | 20402", "correct_text": "   Enterprise field 123 | exportedPacketCount | exportedFlowCount\r\n   -------------------------------------------------------------------\r\n   1                    | 345                 | 10201\r\n   2                    | 690                 | 20402", "notes": "The example in A.4.4 uses set ID 260 which is defined in the template in A.4.3. \r\nTherefore the fields used in A.4.4 must be those defined in A.4.3.\r\nFortunately the field lengths are correct, so no other change is required.", "submit_date": "2009-01-20", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1656", "doc-id": "RFC4662", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "<resource uri=\"sip:bob@vancouver.example.com\"\">", "correct_text": "<resource uri=\"sip:bob@vancouver.example.com\">", "notes": "One of the examples has two double quotes where it should have only one double quote. \r\n\r\nThis text appears on page 21. It is in a non-normative example; hence, it is merely editorial. ", "submit_date": "2009-01-20", "submitter_name": "Adam Roach", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7756", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.4.5", "orig_text": "    AS-external-LSAs are the Type 5 LSAs.  These LSAs are originated by\r\n    AS boundary routers, and describe destinations external to the AS.\r\n    For details concerning the construction of AS-external-LSAs, see\r\n    Section 12.4.3.", "correct_text": "    AS-external-LSAs are the Type 5 LSAs.  These LSAs are originated by\r\n    AS boundary routers, and describe destinations external to the AS.\r\n    For details concerning the construction of AS-external-LSAs, see\r\n    Section 12.4.4.", "notes": "Incorrect references. Construction of AS-external-LSAs explained in Section 12.4.4. Not in 12.4.\r\n\r\n(See also https://mailarchive.ietf.org/arch/msg/lsr/OiOvEPM2W-Mwd_QgbmJASg8bDOI/)", "submit_date": "2024-01-11", "submitter_name": "Lokesh Venkata Kumar Chakka", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-11 18:05:01"}, {"errata_id": "5470", "doc-id": "RFC2049", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "    (3)   Must treat any unrecognized Content-Transfer-Encoding\r\n          as if it had a Content-Type of \"application/octet-\r\n          stream\", regardless of whether or not the actual\r\n          Content-Type is recognized.\r\n", "correct_text": "    (3)   Treat any MIME entity with an unrecognized\r\n          Content-Transfer-Encoding\r\n          as if it had a Content-Type of \"application/octet-\r\n          stream\", regardless of whether or not the actual\r\n          Content-Type is recognized.\r\n", "notes": "The original text spoke of a \"Content-Transfer-Encoding\" with a \"Content-Type\", which makes no sense.  This paragraph was probably intended instead to apply to MIME entities (messages and body parts).\r\n\r\n----- Verifier Notes -----\r\nI think most readers will understand that something like \"MIME entity with\" was intentionally elided in the existing text, but it's worth recording this for consideration when the spec is revised.", "submit_date": "2018-08-17", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1658", "doc-id": "RFC5326", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1, pg.16", "orig_text": "   If the data segment is a checkpoint, the segment MUST additionally\r\n   include the following two serial numbers (checkpoint serial number\r\n   and report serial number) to support efficient retransmission.  Data\r\n   segments that are not checkpoints MUST NOT have these two fields in\r\n|  the header and MUST continue on directly with the client service\r\n       ^^^^^^ \r\n  data.\r\n", "correct_text": "   If the data segment is a checkpoint, the segment MUST additionally\r\n   include the following two serial numbers (checkpoint serial number\r\n   and report serial number) to support efficient retransmission.  Data\r\n   segments that are not checkpoints MUST NOT have these two fields in\r\n|  the segment content and MUST continue on directly with the client\r\n       ^^^^^^^^^^^^^^^\r\n   service data.\r\n", "notes": "Rationale:\r\nSection 3.2 is about 'Segment Content' as defined in section 3\r\nand depicted in the figure on page 10 of the RFC.\r\nAccordingly, the subject two fields are *not* part of the segment\r\n_header_, and the original text is misleading.\r\n\r\nAdditional concern (please 'Keep for Update'):\r\nThe subject two fields, checkpoint serial number and report serial\r\nnumber, obviously are not in the restricted scope of the Client\r\nService ID -- they are related to corrresponding fields carried in\r\nnon-data segments which do not contain a Client Service ID field.\r\nTherefore, with respect to layering considerations, it would have\r\nbeen more reasonable to place the two subject fields in front of\r\nthe Client Service ID field, at the front of the data segment, to\r\nget them conceptionally out of the scope of the Client Service ID\r\nfield governing the Offset, Length, and Client Service Data fields.", "submit_date": "2009-01-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1659", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2, pg.6", "orig_text": "   This field specifies the kind of Vorbis data stored in this RTP\r\n   packet.  There are currently three different types of Vorbis\r\n   payloads.  Each packet MUST contain only a single type of Vorbis\r\n   packet (e.g., you must not aggregate configuration and comment\r\n   packets in the same RTP payload).\r\n\r\n      0 = Raw Vorbis payload\r\n\r\n      1 = Vorbis Packed Configuration payload\r\n\r\n      2 = Legacy Vorbis Comment payload\r\n\r\n      3 = Reserved", "correct_text": "   This field specifies the kind of Vorbis data stored in this RTP\r\n|  payload.  There are currently three different types of Vorbis\r\n|  packets.  Each RTP payload MUST contain only a single type of Vorbis\r\n   packet (e.g., you must not aggregate configuration and comment\r\n   packets in the same RTP payload).\r\n\r\n|     0 = Raw Vorbis packet\r\n\r\n|     1 = Vorbis Packed Configuration packet\r\n\r\n|     2 = Legacy Vorbis Comment packet\r\n\r\n      3 = Reserved", "notes": "Rationale:\r\n\r\nThe RFC is about an RTP *payload* format, and, according to\r\nsection 1 of the RFC, deals with Vorbis *packets* -- to be\r\nencapsulated in the RTP payload.\r\n\r\nSection 2.2 explains the RTP Payload Header vor Vorbis. Thus,\r\nthe use of \"payload\" and \"packet\" in the Original Text does\r\nnot match these definitions and hence might well be confusing.\r\nThe Corrected Text aims at placing the proper terms there.", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1660", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1, pg.9", "orig_text": "   The Packed Configuration (Section 3.1.1) Payload is sent in-band with\r\n   the packet type bits set to match the Vorbis Data Type.  Clients MUST\r\n   be capable of dealing with fragmentation and periodic re-transmission\r\n|  of [RFC4588] the configuration headers.  [...]\r\n   ^^^^^^^^^^^^", "correct_text": "   The Packed Configuration (Section 3.1.1) Payload is sent in-band with\r\n   the packet type bits set to match the Vorbis Data Type.  Clients MUST\r\n   be capable of dealing with fragmentation and periodic re-transmission\r\n|  [RFC4588] of the configuration headers.  [...]\r\n   ^^^^^^^^^^^^\r\n", "notes": "Rationale: cunfusing word twister!", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1661", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.1, pg.11", "orig_text": "   The Ident field is set with the value that will be used by the Raw\r\n   Payload Packets to address this Configuration.  The Fragment type is\r\n   set to 0 because the packet bears the full Packed configuration.  The\r\n|  number of the packet is set to 1.\r\n   ^^^^^^^^^^^^^^^^^^^^", "correct_text": "   The Ident field is set with the value that will be used by the Raw\r\n   Payload Packets to address this Configuration.  The Fragment type is\r\n   set to 0 because the packet bears the full Packed configuration.  The\r\n|  number of packets is set to 1.\r\n   ^^^^^^^^^^^^^^^^^", "notes": "Rationale:\r\n\r\nAccording to Section 2.2 of the RFC, the last field in the\r\nPayload Header is \"number of packets\", not \"number of the packet\"\r\n(which might be misunderstood as some kind of sequence number).\r\nIt seems to be prudent to use the precise field name.", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1662", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1,1st para", "orig_text": "   Here is an example of a fragmented Vorbis packet split over three RTP\r\n|  payloads.  Each of them contains the standard RTP headers as well as\r\n|  the 4-octet Vorbis headers.\r\n                            ^                              ^", "correct_text": "   Here is an example of a fragmented Vorbis packet split over three RTP\r\n|  payloads.  Each of them contains the standard RTP header as well as\r\n|  the 4-octet Vorbis header.\r\n", "notes": "Rationale:\r\n\r\nConfusing use of plural: Each RTP packet contains a single \r\nstandard RTP header and a single 4-octet Vorbis header.", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1663", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2,2nd para", "orig_text": "|  Loss of any of the Configuration fragment will result in the loss of\r\n   the full Configuration packet with the result detailed in the Loss of\r\n|  Configuration Headers (Section 3.3) section.\r\n", "correct_text": "|  Loss of any fragment of the Configuration packet will result in the\r\n   loss of the full Configuration packet with the result detailed in the\r\n|  Loss of Configuration Headers section (Section 3.3).\r\n", "notes": "Rationale: Clarification / improved language", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4719", "doc-id": "RFC3372", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   In Figure 2 a VoIP cloud serves as a transit network for telephone\r\n   calls originating in a pair of LECs, where SIP is employed as the\r\n   VoIP protocol used to set up and tear down these VoIP calls.", "correct_text": "   In Figure 1 a VoIP cloud serves as a transit network for telephone\r\n   calls originating in a pair of LECs, where SIP is employed as the\r\n   VoIP protocol used to set up and tear down these VoIP calls.", "notes": "References to Figure 2; should refer to Figure 1 instead as Figure 2 depicts a different scenario.", "submit_date": "2016-06-24", "submitter_name": "Victor Gabriel Lopez Loyda", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1664", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6/6.* titles", "orig_text": "Section 6 is structured as follows:\r\n\r\n|6.  IANA Considerations\r\n|\r\n   ...\r\n   <IANA registration of media type audio/vorbis>\r\n   ...\r\n\r\n|6.1.  Packed Headers IANA Considerations\r\n|\r\n|  The following IANA considerations refers to the split configuration\r\n|  Packed Headers (Section 3.2.1) used within RFC 5215.\r\n\r\n   ...\r\n   <IANA registration of media type audio/vorbis-config>\r\n   ...\r\n\r\n", "correct_text": "Section 6 is structured as follows:\r\n\r\n|6.  IANA Considerations\r\n|\r\n|   The following subsections contain the IANA registrations (in\r\n|   accordance with RFC 4855 using the registration template of\r\n|   RFC 4288) of the media types for the basic Vorbis payload format\r\n|   and the Packed Headers payload format (Section 3.2.1).\r\n|\r\n|6.1.  IANA registration of media type audio/vorbis\r\n|\r\n   ...\r\n   <IANA registration of media type audio/vorbis>\r\n   ...\r\n\r\n|6.2.  IANA registration of media type audio/vorbis-config\r\n|\r\n   ...\r\n   <IANA registration of media type audio/vorbis-config>\r\n   ...\r\n", "notes": "Rationale:\r\n\r\nThe section structure and titles do not properly match the contents\r\nof the whole section and should be corrected for clarity.\r\nBecause the applicable RFC 4288 and RFC 4855 have no entries in the\r\nReferences section of this RFC, they are quoted only informally.\r\nIn the Correcte Text, the explanatory text has been moved to up to\r\n6. and expanded accordingly to describe the whole section content.", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1665", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1, p.21/21", "orig_text": "   The information carried in the Media Type specification has a\r\n   specific mapping to fields in the Session Description Protocol (SDP)\r\n   [RFC4566], which is commonly used to describe RTP sessions.  When SDP\r\n|  is used to specify sessions, the mapping are as follows:\r\n\r\n   [...]\r\n\r\n|  o  The mandated parameters \"configuration\" MUST be included in the\r\n      SDP \"a=fmtp\" attribute.\r\n\r\n   [...]", "correct_text": "   The information carried in the Media Type specification has a\r\n   specific mapping to fields in the Session Description Protocol (SDP)\r\n   [RFC4566], which is commonly used to describe RTP sessions.  When SDP\r\n|  is used to specify sessions, the mapping is as follows:\r\n\r\n   [...]\r\n\r\n|  o  The mandated parameter \"configuration\" MUST be included in the\r\n      SDP \"a=fmtp\" attribute.\r\n\r\n   [...]", "notes": "Rationale:\r\n\r\nGrammar; there is only a single mapping (first paragraph of the section)\r\nand only a single mandatory parameter (last bullet (of 5)).", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2265", "doc-id": "RFC4730", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "10.2", "orig_text": "NOTIFY sip:ap@client.subB.example.com SIP/2.0\r\nVia: SIP/2.0/UDP subA.example.com;branch=3qo3j0ouq\r\nTo: <sip:ap@subB.example.com>;tag=978675\r\nFrom: <sip:gw@subA.example.com>;tag=9783453\r\nCall-ID: 12345601@subA.example.com\r\nCSeq: 3001 NOTIFY\r\nContact: <sip:gw27@subA.example.com>\r\nEvent: kpml\r\nSubscription-State: active;expires=3442\r\nMax-Forwards: 70\r\nContent-Type: application/kpml-response+xml\r\nContent-Length: 271\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<kpml-response xmlns=\"urn:ietf:params:xml:ns:kpml-response\"\r\n      xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\r\n      xsi:schemaLocation=\r\n        \"urn:ietf:params:xml:ns:kpml-response kpml-response.xsd\"\r\n      version=\"1.0\"\r\n      code=\"200\" text=\"OK\"\r\n      digits=\"9999888877776666\"/>", "correct_text": "NOTIFY sip:ap@client.subB.example.com SIP/2.0\r\nVia: SIP/2.0/UDP subA.example.com;branch=3qo3j0ouq\r\nTo: <sip:ap@subB.example.com>;tag=978675\r\nFrom: <sip:gw@subA.example.com>;tag=9783453\r\nCall-ID: 12345601@subA.example.com\r\nCSeq: 3001 NOTIFY\r\nContact: <sip:gw27@subA.example.com>\r\nEvent: kpml\r\nSubscription-State: active;expires=3442\r\nMax-Forwards: 70\r\nContent-Type: application/kpml-response+xml\r\nContent-Length: 271\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<kpml-response xmlns=\"urn:ietf:params:xml:ns:kpml-response\"\r\n      xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\r\n      xsi:schemaLocation=\r\n        \"urn:ietf:params:xml:ns:kpml-response kpml-response.xsd\"\r\n      version=\"1.0\"\r\n      code=\"200\" text=\"OK\"\r\n      digits=\"9999888877776666\" tag=\"card\"/>", "notes": "The tag attribute is shown in the call-flow diagram, but not reproduced in the SIP message itself.", "submit_date": "2010-05-18", "submitter_name": "David Grant", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2221", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.5.3.", "orig_text": "     - If the string-to-key usage octet is zero or 255, then a two-octet\r\n       checksum of the plaintext of the algorithm-specific portion (sum\r\n       of all octets, mod 65536).", "correct_text": "     - If the string-to-key usage octet is not 254, then a two-octet\r\n       checksum of the plaintext of the algorithm-specific portion (sum\r\n       of all octets, mod 65536).", "notes": "Without the values values of 1 to 253 the following\r\n     Note that for all other values, a two-octet checksum is required.\r\nis not just a note.\r\n\r\nChanged to editorial.\n --VERIFIER NOTES-- \nThe RFC is correct.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2222", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.5.3.", "orig_text": "   Implementations MUST use a string-to-key specifier; the simple hash\r\n   is for backward compatibility and is deprecated, though\r\n   implementations MAY continue to use existing private keys in the old\r\n   format.", "correct_text": "   Implementations MUST generate a string-to-key specifier; the simple\r\n   hash is for backward compatibility and is deprecated, though\r\n   implementations MAY continue to use existing private keys in the old\r\n   format.", "notes": "MUST use and MAY continue to use the opposite is a contradiction.\r\n\r\nChanged to editorial.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2223", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.5.3.", "orig_text": "       This checksum or hash is encrypted together with the\r\n       algorithm-specific fields (if string-to-key usage octet is not\r\n       zero).", "correct_text": "       For V4 keys this checksum or hash is encrypted together with the\r\n       algorithm-specific fields (if string-to-key usage octet is not\r\n       zero).", "notes": "The following text says:\r\n   With V3 keys, the checksum is stored in the clear.  With V4 keys,\r\n   the checksum is encrypted like the algorithm-specific data.\r\n\r\nChanged to editorial.\n --VERIFIER NOTES-- \nText describing V3 keys precedes this text.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7031", "doc-id": "RFC8032", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   These test vectors are taken from [ED25519-TEST-VECTORS] (but we\r\n   removed the public key as a suffix of the private key and removed the\r\n   message from the signature) and [ED25519-LIBGCRYPT-TEST-VECTORS].\r\n\r\n   -----TEST 1\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   9d61b19deffd5a60ba844af492ec2cc4\r\n   4449c5697b326919703bac031cae7f60\r\n\r\n   PUBLIC KEY:\r\n   d75a980182b10ab7d54bfed3c964073a\r\n   0ee172f3daa62325af021a68f707511a\r\n\r\n   MESSAGE (length 0 bytes):\r\n\r\n   SIGNATURE:\r\n   e5564300c360ac729086e2cc806e828a\r\n   84877f1eb8e5d974d873e06522490155\r\n   5fb8821590a33bacc61e39701cf9b46b\r\n   d25bf5f0595bbe24655141438e7a100b\r\n\r\n   -----TEST 2\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   4ccd089b28ff96da9db6c346ec114e0f\r\n   5b8a319f35aba624da8cf6ed4fb8a6fb\r\n\r\n   PUBLIC KEY:\r\n   3d4017c3e843895a92b70aa74d1b7ebc\r\n   9c982ccf2ec4968cc0cd55f12af4660c\r\n\r\n   MESSAGE (length 1 byte):\r\n   72\r\n\r\n   SIGNATURE:\r\n   92a009a9f0d4cab8720e820b5f642540\r\n   a2b27b5416503f8fb3762223ebdb69da\r\n   085ac1e43e15996e458f3613d0f11d8c\r\n   387b2eaeb4302aeeb00d291612bb0c00\r\n\r\n\r\n\r\nJosefsson & Liusvaara         Informational                    [Page 24]\r\n\r\n\r\nRFC 8032                EdDSA: Ed25519 and Ed448            January 2017\r\n\r\n\r\n   -----TEST 3\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   c5aa8df43f9f837bedb7442f31dcb7b1\r\n   66d38535076f094b85ce3a2e0b4458f7\r\n\r\n   PUBLIC KEY:\r\n   fc51cd8e6218a1a38da47ed00230f058\r\n   0816ed13ba3303ac5deb911548908025\r\n\r\n   MESSAGE (length 2 bytes):\r\n   af82\r\n\r\n   SIGNATURE:\r\n   6291d657deec24024827e69c3abe01a3\r\n   0ce548a284743a445e3680d7db5ac3ac\r\n   18ff9b538d16f290ae67f760984dc659\r\n   4a7c15e9716ed28dc027beceea1ec40a\r\n\r\n   -----TEST 1024\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   f5e5767cf153319517630f226876b86c\r\n   8160cc583bc013744c6bf255f5cc0ee5\r\n\r\n   PUBLIC KEY:\r\n   278117fc144c72340f67d0f2316e8386\r\n   ceffbf2b2428c9c51fef7c597f1d426e\r\n\r\n   MESSAGE (length 1023 bytes):\r\n   08b8b2b733424243760fe426a4b54908\r\n   632110a66c2f6591eabd3345e3e4eb98\r\n   fa6e264bf09efe12ee50f8f54e9f77b1\r\n   e355f6c50544e23fb1433ddf73be84d8\r\n   79de7c0046dc4996d9e773f4bc9efe57\r\n   38829adb26c81b37c93a1b270b20329d\r\n   658675fc6ea534e0810a4432826bf58c\r\n   941efb65d57a338bbd2e26640f89ffbc\r\n   1a858efcb8550ee3a5e1998bd177e93a\r\n   7363c344fe6b199ee5d02e82d522c4fe\r\n   ba15452f80288a821a579116ec6dad2b\r\n   3b310da903401aa62100ab5d1a36553e\r\n   06203b33890cc9b832f79ef80560ccb9\r\n   a39ce767967ed628c6ad573cb116dbef\r\n   efd75499da96bd68a8a97b928a8bbc10\r\n   3b6621fcde2beca1231d206be6cd9ec7\r\n   aff6f6c94fcd7204ed3455c68c83f4a4\r\n   1da4af2b74ef5c53f1d8ac70bdcb7ed1\r\n   85ce81bd84359d44254d95629e9855a9\r\n   4a7c1958d1f8ada5d0532ed8a5aa3fb2\r\n   d17ba70eb6248e594e1a2297acbbb39d\r\n   502f1a8c6eb6f1ce22b3de1a1f40cc24\r\n   554119a831a9aad6079cad88425de6bd\r\n   e1a9187ebb6092cf67bf2b13fd65f270\r\n   88d78b7e883c8759d2c4f5c65adb7553\r\n   878ad575f9fad878e80a0c9ba63bcbcc\r\n   2732e69485bbc9c90bfbd62481d9089b\r\n   eccf80cfe2df16a2cf65bd92dd597b07\r\n   07e0917af48bbb75fed413d238f5555a\r\n   7a569d80c3414a8d0859dc65a46128ba\r\n   b27af87a71314f318c782b23ebfe808b\r\n   82b0ce26401d2e22f04d83d1255dc51a\r\n   ddd3b75a2b1ae0784504df543af8969b\r\n   e3ea7082ff7fc9888c144da2af58429e\r\n   c96031dbcad3dad9af0dcbaaaf268cb8\r\n   fcffead94f3c7ca495e056a9b47acdb7\r\n   51fb73e666c6c655ade8297297d07ad1\r\n   ba5e43f1bca32301651339e22904cc8c\r\n   42f58c30c04aafdb038dda0847dd988d\r\n   cda6f3bfd15c4b4c4525004aa06eeff8\r\n   ca61783aacec57fb3d1f92b0fe2fd1a8\r\n   5f6724517b65e614ad6808d6f6ee34df\r\n   f7310fdc82aebfd904b01e1dc54b2927\r\n   094b2db68d6f903b68401adebf5a7e08\r\n   d78ff4ef5d63653a65040cf9bfd4aca7\r\n   984a74d37145986780fc0b16ac451649\r\n   de6188a7dbdf191f64b5fc5e2ab47b57\r\n   f7f7276cd419c17a3ca8e1b939ae49e4\r\n   88acba6b965610b5480109c8b17b80e1\r\n   b7b750dfc7598d5d5011fd2dcc5600a3\r\n   2ef5b52a1ecc820e308aa342721aac09\r\n   43bf6686b64b2579376504ccc493d97e\r\n   6aed3fb0f9cd71a43dd497f01f17c0e2\r\n   cb3797aa2a2f256656168e6c496afc5f\r\n   b93246f6b1116398a346f1a641f3b041\r\n   e989f7914f90cc2c7fff357876e506b5\r\n   0d334ba77c225bc307ba537152f3f161\r\n   0e4eafe595f6d9d90d11faa933a15ef1\r\n   369546868a7f3a45a96768d40fd9d034\r\n   12c091c6315cf4fde7cb68606937380d\r\n   b2eaaa707b4c4185c32eddcdd306705e\r\n   4dc1ffc872eeee475a64dfac86aba41c\r\n   0618983f8741c5ef68d3a101e8a3b8ca\r\n   c60c905c15fc910840b94c00a0b9d0\r\n\r\n   SIGNATURE:\r\n   0aab4c900501b3e24d7cdf4663326a3a\r\n   87df5e4843b2cbdb67cbf6e460fec350\r\n   aa5371b1508f9f4528ecea23c436d94b\r\n   5e8fcd4f681e30a6ac00a9704a188a03\r\n\r\n   -----TEST SHA(abc)\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   833fe62409237b9d62ec77587520911e\r\n   9a759cec1d19755b7da901b96dca3d42\r\n\r\n   PUBLIC KEY:\r\n   ec172b93ad5e563bf4932c70e1245034\r\n   c35467ef2efd4d64ebf819683467e2bf\r\n\r\n   MESSAGE (length 64 bytes):\r\n   ddaf35a193617abacc417349ae204131\r\n   12e6fa4e89a97ea20a9eeee64b55d39a\r\n   2192992a274fc1a836ba3c23a3feebbd\r\n   454d4423643ce80e2a9ac94fa54ca49f\r\n\r\n   SIGNATURE:\r\n   dc2a4459e7369633a52b1bf277839a00\r\n   201009a3efbf3ecb69bea2186c26b589\r\n   09351fc9ac90b3ecfdfbc7c66431e030\r\n   3dca179c138ac17ad9bef1177331a704\r\n   -----", "correct_text": "   These test vectors are taken from [ED25519-TEST-VECTORS] (but we\r\n   removed the public key as a suffix of the private key and removed the\r\n   message from the signature) and [ED25519-LIBGCRYPT-TEST-VECTORS]. Test\r\n   vectors 100-111 are taken from \"Taming the many EdDSAs\" by Konstantinos \r\n   Chalkias, Fran\u00e7ois Garillot, and Valeria Nikolaenko \r\n   https://eprint.iacr.org/2020/1244\r\n\r\n   -----TEST 1\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   9d61b19deffd5a60ba844af492ec2cc4\r\n   4449c5697b326919703bac031cae7f60\r\n\r\n   PUBLIC KEY:\r\n   d75a980182b10ab7d54bfed3c964073a\r\n   0ee172f3daa62325af021a68f707511a\r\n\r\n   MESSAGE (length 0 bytes):\r\n\r\n   SIGNATURE:\r\n   e5564300c360ac729086e2cc806e828a\r\n   84877f1eb8e5d974d873e06522490155\r\n   5fb8821590a33bacc61e39701cf9b46b\r\n   d25bf5f0595bbe24655141438e7a100b\r\n\r\n   -----TEST 2\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   4ccd089b28ff96da9db6c346ec114e0f\r\n   5b8a319f35aba624da8cf6ed4fb8a6fb\r\n\r\n   PUBLIC KEY:\r\n   3d4017c3e843895a92b70aa74d1b7ebc\r\n   9c982ccf2ec4968cc0cd55f12af4660c\r\n\r\n   MESSAGE (length 1 byte):\r\n   72\r\n\r\n   SIGNATURE:\r\n   92a009a9f0d4cab8720e820b5f642540\r\n   a2b27b5416503f8fb3762223ebdb69da\r\n   085ac1e43e15996e458f3613d0f11d8c\r\n   387b2eaeb4302aeeb00d291612bb0c00\r\n\r\n\r\n\r\nJosefsson & Liusvaara         Informational                    [Page 24]\r\n\r\n\r\nRFC 8032                EdDSA: Ed25519 and Ed448            January 2017\r\n\r\n\r\n   -----TEST 3\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   c5aa8df43f9f837bedb7442f31dcb7b1\r\n   66d38535076f094b85ce3a2e0b4458f7\r\n\r\n   PUBLIC KEY:\r\n   fc51cd8e6218a1a38da47ed00230f058\r\n   0816ed13ba3303ac5deb911548908025\r\n\r\n   MESSAGE (length 2 bytes):\r\n   af82\r\n\r\n   SIGNATURE:\r\n   6291d657deec24024827e69c3abe01a3\r\n   0ce548a284743a445e3680d7db5ac3ac\r\n   18ff9b538d16f290ae67f760984dc659\r\n   4a7c15e9716ed28dc027beceea1ec40a\r\n\r\n   -----TEST 1024\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   f5e5767cf153319517630f226876b86c\r\n   8160cc583bc013744c6bf255f5cc0ee5\r\n\r\n   PUBLIC KEY:\r\n   278117fc144c72340f67d0f2316e8386\r\n   ceffbf2b2428c9c51fef7c597f1d426e\r\n\r\n   MESSAGE (length 1023 bytes):\r\n   08b8b2b733424243760fe426a4b54908\r\n   632110a66c2f6591eabd3345e3e4eb98\r\n   fa6e264bf09efe12ee50f8f54e9f77b1\r\n   e355f6c50544e23fb1433ddf73be84d8\r\n   79de7c0046dc4996d9e773f4bc9efe57\r\n   38829adb26c81b37c93a1b270b20329d\r\n   658675fc6ea534e0810a4432826bf58c\r\n   941efb65d57a338bbd2e26640f89ffbc\r\n   1a858efcb8550ee3a5e1998bd177e93a\r\n   7363c344fe6b199ee5d02e82d522c4fe\r\n   ba15452f80288a821a579116ec6dad2b\r\n   3b310da903401aa62100ab5d1a36553e\r\n   06203b33890cc9b832f79ef80560ccb9\r\n   a39ce767967ed628c6ad573cb116dbef\r\n   efd75499da96bd68a8a97b928a8bbc10\r\n   3b6621fcde2beca1231d206be6cd9ec7\r\n   aff6f6c94fcd7204ed3455c68c83f4a4\r\n   1da4af2b74ef5c53f1d8ac70bdcb7ed1\r\n   85ce81bd84359d44254d95629e9855a9\r\n   4a7c1958d1f8ada5d0532ed8a5aa3fb2\r\n   d17ba70eb6248e594e1a2297acbbb39d\r\n   502f1a8c6eb6f1ce22b3de1a1f40cc24\r\n   554119a831a9aad6079cad88425de6bd\r\n   e1a9187ebb6092cf67bf2b13fd65f270\r\n   88d78b7e883c8759d2c4f5c65adb7553\r\n   878ad575f9fad878e80a0c9ba63bcbcc\r\n   2732e69485bbc9c90bfbd62481d9089b\r\n   eccf80cfe2df16a2cf65bd92dd597b07\r\n   07e0917af48bbb75fed413d238f5555a\r\n   7a569d80c3414a8d0859dc65a46128ba\r\n   b27af87a71314f318c782b23ebfe808b\r\n   82b0ce26401d2e22f04d83d1255dc51a\r\n   ddd3b75a2b1ae0784504df543af8969b\r\n   e3ea7082ff7fc9888c144da2af58429e\r\n   c96031dbcad3dad9af0dcbaaaf268cb8\r\n   fcffead94f3c7ca495e056a9b47acdb7\r\n   51fb73e666c6c655ade8297297d07ad1\r\n   ba5e43f1bca32301651339e22904cc8c\r\n   42f58c30c04aafdb038dda0847dd988d\r\n   cda6f3bfd15c4b4c4525004aa06eeff8\r\n   ca61783aacec57fb3d1f92b0fe2fd1a8\r\n   5f6724517b65e614ad6808d6f6ee34df\r\n   f7310fdc82aebfd904b01e1dc54b2927\r\n   094b2db68d6f903b68401adebf5a7e08\r\n   d78ff4ef5d63653a65040cf9bfd4aca7\r\n   984a74d37145986780fc0b16ac451649\r\n   de6188a7dbdf191f64b5fc5e2ab47b57\r\n   f7f7276cd419c17a3ca8e1b939ae49e4\r\n   88acba6b965610b5480109c8b17b80e1\r\n   b7b750dfc7598d5d5011fd2dcc5600a3\r\n   2ef5b52a1ecc820e308aa342721aac09\r\n   43bf6686b64b2579376504ccc493d97e\r\n   6aed3fb0f9cd71a43dd497f01f17c0e2\r\n   cb3797aa2a2f256656168e6c496afc5f\r\n   b93246f6b1116398a346f1a641f3b041\r\n   e989f7914f90cc2c7fff357876e506b5\r\n   0d334ba77c225bc307ba537152f3f161\r\n   0e4eafe595f6d9d90d11faa933a15ef1\r\n   369546868a7f3a45a96768d40fd9d034\r\n   12c091c6315cf4fde7cb68606937380d\r\n   b2eaaa707b4c4185c32eddcdd306705e\r\n   4dc1ffc872eeee475a64dfac86aba41c\r\n   0618983f8741c5ef68d3a101e8a3b8ca\r\n   c60c905c15fc910840b94c00a0b9d0\r\n\r\n   SIGNATURE:\r\n   0aab4c900501b3e24d7cdf4663326a3a\r\n   87df5e4843b2cbdb67cbf6e460fec350\r\n   aa5371b1508f9f4528ecea23c436d94b\r\n   5e8fcd4f681e30a6ac00a9704a188a03\r\n\r\n   -----TEST SHA(abc)\r\n\r\n   ALGORITHM:\r\n   Ed25519\r\n\r\n   SECRET KEY:\r\n   833fe62409237b9d62ec77587520911e\r\n   9a759cec1d19755b7da901b96dca3d42\r\n\r\n   PUBLIC KEY:\r\n   ec172b93ad5e563bf4932c70e1245034\r\n   c35467ef2efd4d64ebf819683467e2bf\r\n\r\n   MESSAGE (length 64 bytes):\r\n   ddaf35a193617abacc417349ae204131\r\n   12e6fa4e89a97ea20a9eeee64b55d39a\r\n   2192992a274fc1a836ba3c23a3feebbd\r\n   454d4423643ce80e2a9ac94fa54ca49f\r\n\r\n   SIGNATURE:\r\n   dc2a4459e7369633a52b1bf277839a00\r\n   201009a3efbf3ecb69bea2186c26b589\r\n   09351fc9ac90b3ecfdfbc7c66431e030\r\n   3dca179c138ac17ad9bef1177331a704\r\n   -----\r\n-----Test 100\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\n8c93255d71dcab10e8f379c26200f3c7bd5f09d9bc3068d3ef4edeb4853022b6\r\n\r\nPUBLIC KEY:\r\nc7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa\r\n\r\nSIGNATURE:\r\nc7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a0000000000000000000000000000000000000000000000000000000000000000\r\n\r\n-----Test 101\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\n9bd9f44f4dcc75bd531b56b2cd280b0bb38fc1cd6d1230e14861d861de092e79\r\n\r\nPUBLIC KEY:\r\nc7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa\r\n\r\nSIGNATURE:\r\nf7badec5b8abeaf699583992219b7b223f1df3fbbea919844e3f7c554a43dd43a5bb704786be79fc476f91d3f3f89b03984d8068dcf1bb7dfc6637b45450ac04\r\n\r\n-----Test 102\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\naebf3f2601a0c8c5d39cc7d8911642f740b78168218da8471772b35f9d35b9ab\r\n\r\nPUBLIC KEY:\r\nf7badec5b8abeaf699583992219b7b223f1df3fbbea919844e3f7c554a43dd43\r\n\r\nSIGNATURE:\r\nc7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac03fa8c4bd45aecaca5b24fb97bc10ac27ac8751a7dfe1baff8b953ec9f5833ca260e\r\n\r\n-----Test 103\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\n9bd9f44f4dcc75bd531b56b2cd280b0bb38fc1cd6d1230e14861d861de092e79\r\n\r\nPUBLIC KEY:\r\ncdb267ce40c5cd45306fa5d2f29731459387dbf9eb933b7bd5aed9a765b88d4d\r\n\r\nSIGNATURE:\r\n9046a64750444938de19f227bb80485e92b83fdb4b6506c160484c016cc1852f87909e14428a7a1d62e9f22f3d3ad7802db02eb2e688b6c52fcd6648a98bd009\r\n\r\n-----Test 104\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\ne47d62c63f830dc7a6851a0b1f33ae4bb2f507fb6cffec4011eaccd55b53f56c\r\n\r\nPUBLIC KEY:\r\ncdb267ce40c5cd45306fa5d2f29731459387dbf9eb933b7bd5aed9a765b88d4d\r\n\r\nSIGNATURE:\r\n160a1cb0dc9c0258cd0a7d23e94d8fa878bcb1925f2c64246b2dee1796bed5125ec6bc982a269b723e0668e540911a9a6a58921d6925e434ab10aa7940551a09\r\n\r\n-----Test 105\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\ne47d62c63f830dc7a6851a0b1f33ae4bb2f507fb6cffec4011eaccd55b53f56c\r\n\r\nPUBLIC KEY:\r\ncdb267ce40c5cd45306fa5d2f29731459387dbf9eb933b7bd5aed9a765b88d4d\r\n\r\nSIGNATURE:\r\n21122a84e0b5fca4052f5b1235c80a537878b38f3142356b2c2384ebad4668b7e40bc836dac0f71076f9abe3a53f9c03c1ceeeddb658d0030494ace586687405\r\n\r\n-----Test 106\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\n85e241a07d148b41e47d62c63f830dc7a6851a0b1f33ae4bb2f507fb6cffec40\r\n\r\nPUBLIC KEY:\r\n442aad9f089ad9e14647b1ef9099a1ff4798d78589e66f28eca69c11f582a623\r\n\r\nSIGNATURE:\r\ne96f66be976d82e60150baecff9906684aebb1ef181f67a7189ac78ea23b6c0e547f7690a0e2ddcd04d87dbc3490dc19b3b3052f7ff0538cb68afb369ba3a514\r\n\r\n-----Test 107\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\n85e241a07d148b41e47d62c63f830dc7a6851a0b1f33ae4bb2f507fb6cffec40\r\n\r\nPUBLIC KEY:\r\n442aad9f089ad9e14647b1ef9099a1ff4798d78589e66f28eca69c11f582a623\r\n\r\nSIGNATURE:\r\n8ce5b96c8f26d0ab6c47958c9e68b937104cd36e13c33566acd2fe8d38aa19427e71f98a473474f2f13f06f97c20d58cc3f54b8bd0d272f42b695dd7e89a8c22\r\n\r\n-----Test 108\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\n9bedc267423725d473888631ebf45988bad3db83851ee85c85e241a07d148b41\r\n\r\nPUBLIC KEY:\r\nf7badec5b8abeaf699583992219b7b223f1df3fbbea919844e3f7c554a43dd43\r\n\r\nSIGNATURE:\r\necffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff03be9678ac102edcd92b0210bb34d7428d12ffc5df5f37e359941266a4e35f0f\r\n\r\n-----Test 109\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\n9bedc267423725d473888631ebf45988bad3db83851ee85c85e241a07d148b41\r\n\r\nPUBLIC KEY:\r\nf7badec5b8abeaf699583992219b7b223f1df3fbbea919844e3f7c554a43dd43\r\n\r\nSIGNATURE:\r\necffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffca8c5b64cd208982aa38d4936621a4775aa233aa0505711d8fdcfdaa943d4908\r\n\r\n-----Test 110\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\ne96b7021eb39c1a163b6da4e3093dcd3f21387da4cc4572be588fafae23c155b\r\n\r\nPUBLIC KEY:\r\necffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\r\n\r\nSIGNATURE:\r\na9d55260f765261eb9b84e106f665e00b867287a761990d7135963ee0a7d59dca5bb704786be79fc476f91d3f3f89b03984d8068dcf1bb7dfc6637b45450ac04\r\n\r\n-----Test 111\r\n\r\nALGORITHM:\r\nEd25519\r\n\r\nMESSAGE:\r\n39a591f5321bbe07fd5a23dc2f39d025d74526615746727ceefd6e82ae65c06f\r\n\r\nPUBLIC KEY:\r\necffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\r\n\r\nSIGNATURE:\r\na9d55260f765261eb9b84e106f665e00b867287a761990d7135963ee0a7d59dca5bb704786be79fc476f91d3f3f89b03984d8068dcf1bb7dfc6637b45450ac04", "notes": "Some of these vectors are not expected to validate. See https://github.com/novifinancial/ed25519-speccheck and Taming the many EdDSAs by Konstantinos Chalkias, Fran\u00e7ois Garillot, and Valeria Nikolaenko https://eprint.iacr.org/2020/1244\r\n\r\n--VERIFIER NOTE--\r\nHeld for document update. This erratum proposes adding 12 test vectors from \"Taming the many EdDSAs\" (eprint 2020/1244), not correcting an error. The existing vectors are correct. Adding edge case vectors would implicitly impose constraints on behaviors RFC 8032 intentionally left unspecified (small-order points, cofactor verification, canonical encoding). Appropriate for RFC 8032-bis with corresponding normative clarifications. See EID 5968 (scalar range from same paper - verified as it fixes actual inconsistency).", "submit_date": "2022-07-24", "submitter_name": "Benson Muite", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 22:17:47"}, {"errata_id": "1666", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1.1", "orig_text": "7.1.1.  SDP Example\r\n\r\n   The following example shows a basic SDP single stream.  The first\r\n|  configuration packet is inside the SDP; other configurations could be\r\n|  fetched at any time from the URIs provided.  The following base64\r\n|  [RFC4648] configuration string is folded in this example due to RFC\r\n   line length limitations.\r\n\r\n|     c=IN IP4 192.0.2.1\r\n|\r\n|     m=audio RTP/AVP 98\r\n|\r\n|     a=rtpmap:98 vorbis/44100/2\r\n|\r\n|     a=fmtp:98 configuration=AAAAAZ2f4g9NAh4aAXZvcmJpcwA...;\r\n\r\n   Note that the payload format (encoding) names are commonly shown in\r\n|  uppercase.  Media Type subtypes are commonly shown in lowercase.\r\n   These names are case-insensitive in both places.  Similarly,\r\n|  parameter names are case-insensitive both in Media Type types and in\r\n   the default mapping to the SDP a=fmtp attribute.  The a=fmtp line is\r\n|  a single line, even if it is shown as multiple lines in this document\r\n|  for clarity.\r\n", "correct_text": "7.1.1.  SDP Example\r\n\r\n   The following example shows a basic SDP single stream.  The first\r\n|  configuration packet is inside the SDP. The following base64\r\n|  [RFC4648] configuration string is truncated in this example due to\r\n   RFC line length limitations.\r\n\r\n|     c=IN IP4 192.0.2.1\r\n|     m=audio RTP/AVP 98\r\n|     a=rtpmap:98 vorbis/44100/2\r\n|     a=fmtp:98 configuration=AAAAAZ2f4g9NAh4aAXZvcmJpcwA...;\r\n\r\n   Note that the payload format (encoding) names are commonly shown in\r\n|  uppercase.  Media Types and Subtypes are commonly shown in lowercase.\r\n   These names are case-insensitive in both places.  Similarly,\r\n|  parameter names are case-insensitive both in Media Types and in the\r\n   default mapping to the SDP a=fmtp attribute.  The a=fmtp line is\r\n|  shown incompletely in this document for clarity.\r\n", "notes": "Rationale:\r\n\r\na)  There is no URI provided; the corresponding remark is misleading\r\n    and therefore has been deleted in the Corrected Text.\r\n\r\nb)  The example does not contain folded lines; one line is shown only\r\n    partially -- for brevity this is denoted as truncation, and the\r\n    confusing remarks regarding line folding have been deleted in the\r\n    Corrected Text.\r\n\r\nc)  Spurious blank lines within SDP example deleted.\r\n\r\nd)  Language regarding media types/subtypes corrected.", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1667", "doc-id": "RFC5215", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10, pg.23", "orig_text": "   RTP packets using this payload format are subject to the security\r\n|  considerations discussed in the RTP specification [RFC3550], the\r\n|  base64 specification [RFC4648], and the URI Generic syntax\r\n|  specification [RFC3986].  [...]", "correct_text": "   RTP packets using this payload format are subject to the security\r\n|  considerations discussed in the RTP specification [RFC3550] and the\r\n|  base64 specification [RFC4648].  [...]", "notes": "Rationale:\r\n\r\nThe published RFC does not make use of embedded or explicit URIs.\r\nConsequently the Security Considerations from RFC 3986 seem to be\r\nirrelevant.\r\n\r\nArguably, the ref. to [RFC4648] only applies to the SDP, not the\r\nRTP packets themselves; further text changes in support of this\r\nobservation have been set aside for brevity.\r\n\r\nNote:\r\nThe entry [RFC3986] in Section 13.1 can be deleted after the\r\nabove change.", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1668", "doc-id": "RFC5404", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.6.2, pg.13", "orig_text": "                                                      [...].  Although\r\n|  the G.719 is robust and thus tolerant to a high random frame erasure\r\n   rate, it would have difficulties handling consecutive frame losses at\r\n   startup.  Thus, some special implementation considerations are\r\n   described.", "correct_text": "                                                      [...].  Although\r\n|  the G.719 decoder is robust and thus tolerant to a high random frame\r\n   erasure rate, it would have difficulties handling consecutive frame\r\n   losses at startup.  Thus, some special implementation considerations\r\n   are described.", "notes": "Rationale:  Word omission; \"decoder\" inserted after \"the G.719\".", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2266", "doc-id": "RFC4235", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4", "orig_text": "...\r\n<xs:element name=\"route-set\" minOccurs=\"0\" maxOccurs=\"1\">\r\n   <xs:complexType>\r\n      <xs:sequence>\r\n         <xs:element name=\"hop\" type=\"xs:string\" minOccurs=\"1\" maxOccurs=\"unbounded\"/>\r\n      </xs:sequence>\r\n   </xs:complexType>\r\n</xs:element>\r\n...", "correct_text": "** Remove Element **", "notes": "The route-set element was removed between draft-ietf-sipping-dialog-package-03 and draft-ietf-sipping-dialog-package-04", "submit_date": "2010-05-18", "submitter_name": "David Grant", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1676", "doc-id": "RFC4055", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1, 4.1", "orig_text": "a)  Section 3.1, explanation of maskGenAlgorithm, last paragraph\r\n    (2nd paragraph on page 9)\r\n\r\nb)  Section 4.1, explanation of maskGenFunc, last paragraph\r\n    (2nd paragraph on page 11)\r\n \r\nboth say:\r\n\r\n         Although mfg1SHA1Identifier is defined as the default value for\r\n         this field, implementations MUST accept both the default value\r\n         encoding (i.e., an absent field) and mfg1SHA1Identifier to be\r\n         explicitly present in the encoding.\r\n", "correct_text": "both a) and b) should say:\r\n\r\n         Although mgf1SHA1Identifier is defined as the default value for\r\n         this field, implementations MUST accept both the default value\r\n         encoding (i.e., an absent field) and mgf1SHA1Identifier to be\r\n         explicitly present in the encoding.\r\n", "notes": "Rationale: 4 instances of the same character twister:\r\n\r\n    mfg1SHA1Identifier\r\n---  ^^\r\n    mgf1SHA1Identifier\r\n\r\nNote: \"MGF\" is the abbreviation of \"Mask Generation Function\".", "submit_date": "2009-02-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1677", "doc-id": "RFC4055", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6, pg. 18", "orig_text": "      rSASSA-PSS-SHA512-Identifier  AlgorithmIdentifier  ::=  {\r\n                              algorithm id-RSASSA-PSS,\r\n|                             parameters rSSASSA-PSS-SHA512-params }\r\n                                         ^^^^\r\n      vvvv\r\n|     rSSASSA-PSS-SHA512-params RSASSA-PSS-params ::= {\r\n                              hashAlgorithm sha512Identifier,\r\n                              maskGenAlgorithm mgf1SHA512Identifier,\r\n                              saltLength 20,\r\n                              trailerField 1  }", "correct_text": "      rSASSA-PSS-SHA512-Identifier  AlgorithmIdentifier  ::=  {\r\n                              algorithm id-RSASSA-PSS,\r\n|                             parameters rSASSA-PSS-SHA512-params }\r\n                                         ^^^\r\n      vvv\r\n|     rSASSA-PSS-SHA512-params RSASSA-PSS-params ::= {\r\n                              hashAlgorithm sha512Identifier,\r\n                              maskGenAlgorithm mgf1SHA512Identifier,\r\n                              saltLength 20,\r\n                              trailerField 1  }", "notes": "repeated Typo;  s/rSSA/rSA/", "submit_date": "2009-02-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2267", "doc-id": "RFC4235", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4", "orig_text": "<xs:element name=\"cseq\" type=\"xs:nonNegativeInteger\" \r\nminOccurs=\"0\" maxOccurs=\"1\"/>", "correct_text": "** Remove Element **", "notes": "The participant/cseq element was removed between draft-ietf-sipping-dialog-package-03 and draft-ietf-sipping-dialog-package-04", "submit_date": "2010-05-18", "submitter_name": "David Grant", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2268", "doc-id": "RFC4235", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2", "orig_text": "<xs:complexType name=\"sessd\">\r\n   <xs:simpleContent>\r\n      <xs:extension base=\"xs:string\">\r\n         <xs:attribute name=\"type\" type=\"xs:string\" use=\"required\"/>\r\n      </xs:extension>\r\n   </xs:simpleContent>\r\n</xs:complexType>", "correct_text": "<xs:complexType name=\"sessd\">\r\n  <xs:attribute name=\"type\" type=\"xs:string\"/>\r\n</xs:complexType> ", "notes": "The sessd type is a simple type, which allows text content, yet the RFC does not describe what content it should have, so it should be an empty type instead.\n --VERIFIER NOTES-- \n(From reviewer Dale Worley):\r\n\r\n   The description of the session-description element in section 4.1.6.3\r\nis not particularly clear, but it is unambiguous:\r\n\r\n  4.1.6.3.  Session Description Element\r\n\r\n  The session-description element contains the session description used\r\n  by the observed user for its end of the dialog.  This element should\r\n  generally NOT be included in the notifications, unless it was\r\n  explicitly requested by the subscriber.  It has a single attribute,\r\n  \"type\", which indicates the MIME media type of the session\r\n  description.  To avoid repeating session description information in\r\n  each request, the subscriber can assume that the session description\r\n  is the same as in previous notifications if no session description\r\n  element is present in the corresponding local or remote element.\r\n\r\nTherefore, a typical usage would be:\r\n\r\n  <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n  <dialog-info xmlns=\"urn:ietf:params:xml:ns:dialog-info\"\r\n   xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\r\n    xsi:schemaLocation=\"urn:ietf:params:xml:ns:dialog-info\"\r\n    version=\"1\" state=\"full\">\r\n    <dialog id=\"123456\">\r\n       <state>confirmed</state>\r\n       <duration>274</duration>\r\n       <local>\r\n         <identity display=\"Alice\">sip:alice@example.com</identity>\r\n         <target uri=\"sip:alice@pc33.example.com\">\r\n           <param pname=\"isfocus\" pval=\"true\"/>\r\n           <param pname=\"class\" pval=\"personal\"/>\r\n         </target>\r\n         <session-description type=\"application/sdp\">v=0\r\no=alice 53655765 2353687637 IN IP4 pc33.atlanta.com\r\ns=Session SDP\r\nt=0 0\r\nc=IN IP4 pc33.atlanta.com\r\nm=audio 3456 RTP/AVP 0 1 3 99\r\na=rtpmap:0 PCMU/8000\r\n</session-description>\r\n       </local>\r\n       <remote>\r\n         <identity display=\"Bob\">sip:bob@example.org</identity>\r\n         <target uri=\"sip:bobster@phone21.example.org\"/>\r\n       </remote>\r\n       <session-description type=\"application/sdp\">[SDP sent by remote UA]</se\\\r\nssion-description>\r\n    </dialog>\r\n  </dialog-info>\r\n\r\nThat is, <session-description> has a \"type\" attribute whose value is\r\nthe MIME type of the session description, and it has content which is\r\nthe session description.\r\n\r\n(Note that both the <local> and <remote> elements have their own\r\n<session-description>, as SDP is sent by both UAs.  Presumably the\r\n<session-description> of a participant is the SDP that was *sent* by\r\nthat participant.)\r\n\r\nWithin this understanding, the XML schema language in the RFC is\r\ncorrect.  The '<xs:extension base=\"xs:string\">' specifies that the\r\ncontent of <session-description> is a string, and the '<xs:attribute\r\nname=\"type\" type=\"xs:string\" use=\"required\"/>' specifies that\r\n<session-description> must have an attribute 'type'.\r\n\r\n(The situation could have been made much clearer if the RFC included\r\nan example of the use of <session-description>.)", "submit_date": "2010-05-18", "submitter_name": "David Grant", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1669", "doc-id": "RFC5404", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1, pg.18", "orig_text": "   CBR:  Constant Bitrate (CBR) indicates the exact codec bitrate in\r\n      bits per second (not including the overhead from packetization,\r\n      RTP header, or lower layers) that the codec MUST use.  \"CBR\" is to\r\n      be used when the dynamic rate cannot be supported (one case is,\r\n      e.g., gateway to H.320).  \"CBR\" is mostly used for gateways to\r\n|     circuit switch networks.  Therefore, the \"CBR\" is the rate not\r\n      including any FEC as specified in Section 4.3.1.  If FEC is to be\r\n|     used, the \"b=\" parameter MUST be used to allow the extra bitrate\r\n      needed to send the redundant information.  [...]", "correct_text": "   CBR:  Constant Bitrate (CBR) indicates the exact codec bitrate in\r\n      bits per second (not including the overhead from packetization,\r\n      RTP header, or lower layers) that the codec MUST use.  \"CBR\" is to\r\n      be used when the dynamic rate cannot be supported (one case is,\r\n      e.g., gateway to H.320).  \"CBR\" is mostly used for gateways to\r\n|     circuit switched networks.  Therefore, the \"CBR\" is the rate not\r\n      including any FEC as specified in Section 4.3.1.  If FEC is to be\r\n|     used, the \"b=\" SDP parameter MUST be used to allow the extra\r\n      bitrate needed to send the redundant information.  [...]", "notes": "Rationale:\r\n\r\na)  Typo;  s/circuit switch/circuit switched/\r\n\r\nb)  In the context of the discussion of media type parameters,\r\n    also using the unqualified term \"parameter\" for an SDP parameter\r\n    is rather confusing; for clarity, \"SDP\" needs to be inserted.\r\n\r\nAdditional note from authors of RFC ...\r\n\r\nThis text should probably not talk about SDP\r\nparameters at all, but rather the need for external functionality that\r\nindicates the actual bitrate of the RTP session as due to the\r\nFEC/Redundancy the CBR value is not a good indicator of the total bitrate.", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1670", "doc-id": "RFC5404", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2.1, pg.21", "orig_text": "<< on top of page 21 >>\r\n\r\n                                            [...].  The answerer is\r\n         recommended to include in its answer an \"int-delay\" parameter\r\n         to declare what the property is for the stream it is going to\r\n|        send.  The answer is expected to be capable of selecting a\r\n         valid parameter value that is between zero and the declared\r\n         maximum number of slots in the de-interleaving buffer.", "correct_text": "                                            [...].  The answerer is\r\n         recommended to include in its answer an \"int-delay\" parameter\r\n         to declare what the property is for the stream it is going to\r\n|        send.  The answerer is expected to be capable of selecting a\r\n         valid parameter value that is between zero and the declared\r\n         maximum number of slots in the de-interleaving buffer.", "notes": "Rationale:  Confusing typo;  s/answer/answerer/", "submit_date": "2009-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1671", "doc-id": "RFC4306", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "       --  V(ersion) (bit 4 of Flags) - This bit indicates that\r\n           the transmitter is capable of speaking a higher major\r\n           version number of the protocol than the one indicated\r\n           in the major version number field.  Implementations of\r\n           IKEv2 must clear this bit when sending and MUST ignore\r\n           it in incoming messages.\r\n", "correct_text": "       --  V(ersion) (bit 4 of Flags) - This bit indicates that\r\n           the transmitter is capable of speaking a higher major\r\n           version number of the protocol than the one indicated\r\n           in the major version number field.  Implementations of\r\n           IKEv2 MUST clear this bit when sending and MUST ignore\r\n           it in incoming messages.\r\n", "notes": "", "submit_date": "2009-01-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1672", "doc-id": "RFC4306", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3.2", "orig_text": "      o  0 (last) or 3 (more) (1 octet) - Specifies whether this is the\r\n         last Transform Substructure in the Proposal.  This syntax is\r\n         inherited from ISAKMP, but is unnecessary because the last\r\n         Proposal could be identified from the length of the SA.", "correct_text": "      o  0 (last) or 3 (more) (1 octet) - Specifies whether this is the\r\n         last Transform Substructure in the Proposal.  This syntax is\r\n         inherited from ISAKMP, but is unnecessary because the last\r\n         Transform could be identified from the length of the Proposal.", "notes": "", "submit_date": "2009-01-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1673", "doc-id": "RFC4395", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "RFC Header", "orig_text": "BCP: 115", "correct_text": "BCP: 35", "notes": "RFC 4395 obsoletes RFC 2717, which was BCP 35.  RFC 4395 should have been published as BCP 35 (not BCP 115).  Number 115 in the BCP series has been retired.\r\n\r\nAuthors and AD approved this change.", "submit_date": "2009-01-29", "submitter_name": "Larry Masinter", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1674", "doc-id": "RFC4757", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": "                   if (encrypt)\r\n                           RC4(Kcrypt, Token.Confounder);\r\n\r\n                   // Sum the data buffer\r\n\r\n                   Sgn_Cksum += MD5(data);         // Append to checksum\r\n\r\n                   // Encrypt the data (if encrypting)\r\n\r\n                   if (encrypt)\r\n                           RC4(Kcrypt, data);\r\n\r\n", "correct_text": "                   // Sum the data buffer\r\n\r\n                   Sgn_Cksum += MD5(data);         // Append to checksum\r\n\r\n                   // Encrypt the  Confounder + data (if encrypting)\r\n\r\n                   tmp=concat(Token.Confounder,data);\r\n\r\n                   if (encrypt)\r\n                           RC4(Kcrypt, tmp); /* tmp=Confounder + data */\r\n               \r\n                   memcpy(Token.Confounder,tmp,8);\r\n\r\n                   memcpy(data,tmp+8,(tmp.len-8));             \r\n", "notes": "Notes : 1.Verified RC4 Encryption and Decryption on (Token.Confounder+Data) with Kcrypt key .\r\n2.Verified  RC4(K,x+y) !=RC4(K,x);RC4(K,y)\r\n3.Reporting this issue after Larry's Feedback.", "submit_date": "2009-01-30", "submitter_name": "Ganga Mahesh Siddem", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1675", "doc-id": "RFC4757", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": "                 // Create the sequence number\r\n\r\n                   if (direction == sender_is_initiator)\r\n                   {\r\n                           memset(&Token.SEND_SEQ[4], 0xff, 4)\r\n                   }\r\n                   else if (direction == sender_is_acceptor)\r\n                   {\r\n                           memset(&Token.SEND_SEQ[4], 0, 4)\r\n                   }\r\n\r\n", "correct_text": "                                            // Create the sequence number\r\n\r\n                   if (direction == sender_is_initiator)\r\n                   {\r\n                           memset(&Token.SEND_SEQ[4], 0, 4)\r\n                   }\r\n                   else if (direction == sender_is_acceptor)\r\n                   {\r\n                           memset(&Token.SEND_SEQ[4], 0xff, 4)\r\n                   }\r\n", "notes": "SEND_SEQ values are interchanged .", "submit_date": "2009-01-30", "submitter_name": "Ganga Mahesh Siddem", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1695", "doc-id": "RFC5447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1, pg.13", "orig_text": "|  The following new AVPs are to be allocated from RADIUS Attribute Type\r\n   space [RFC2865] so that they are RADIUS backward-compatible (AVP Code\r\n   values between 0-255):\r\n\r\n", "correct_text": "                          vvvvvvvvv                vvvv\r\n|  The following new AVPs have been allocated from the RADIUS Attribute\r\n   Type space [RFC2865] so that they are RADIUS backward-compatible (AVP\r\n   Code values between 0-255):\r\n", "notes": "Location: second text paragraph in Section 7.1.\r\n\r\nRationale:\r\n  Wrong temporal relationship (plus missing article);\r\n  as in the first paragraph of the section, the action IANA\r\n  _has performed_ in conjunction with the publication of the RFC\r\n  should have been recorded in the RFC text.", "submit_date": "2009-02-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1678", "doc-id": "RFC4256", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   The language tag is deprecated and SHOULD be the empty string.  It\r\n   may be removed in a future revision of this specification.  Instead,\r\n   the server SHOULD select the language used based on the tags\r\n   communicated during key exchange [SSH-TRANS].\r\n\r\n   If the language tag is not the empty string, the server SHOULD use\r\n   the specified language for any messages sent to the client as part of\r\n   this protocol.  The language tag SHOULD NOT be used for language\r\n   selection for messages outside of this protocol.  If the server does\r\n   not support the requested language, the language to be used is\r\n   implementation-dependent.", "correct_text": "   The language tag MAY be the empty string.  If acceptable/preferable\r\n   languages were communicated during key exchange [SSH-TRANS], or in\r\n   the SSH_MSG_USERAUTH_REQUEST message, the language tag SHOULD be the\r\n   language selected by the server for the SSH_MSG_USERAUTH_INFO_REQUEST\r\n   message.", "notes": "As originally pointed out by Alfred Hoenes (errata ID 758), this text\r\nwas incorrectly copy-pasted from Section 3.1.\r\n\r\nThe Information Request is sent from the server to the client, and it\r\nalready contains strings that make use of the particular\r\nlanguage/locale. The language tag in this message specifies the\r\nlanguage/locale used for building the 'instruction' and 'prompt'\r\nstrings in the request. This parallels the use of the language tag\r\nin, e.g., the Disconnection Message of the SSH Transport Layer\r\nProtocol.\r\n", "submit_date": "2009-02-03", "submitter_name": "Frank Cusack", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1679", "doc-id": "RFC2673", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "headers", "orig_text": "(none)", "correct_text": "Updates: 1035", "notes": "This document introduces a type of label not explicitly anticipated in the core DNS documents.   Not having an \"updating\" entry that threads it back to 1035 (or 1034) makes this specification hard to find and likely to be omitted from any compendium or overview of DNS specifications.\r\n\r\nThe situation is obviously a little complicated by our usual difficulties in updating full standards from documents that are earlier on the standards track or not on the standards track at all.  2673 was published (in 1999) as a Proposed Standard, making an intention to update 1035 well within the rules.   A suggestion then appears to in 3363 (published in 2002) to change it to Experimental, but, since 3363 is itself Informational, it clearly did make that change.  I can find no record of an explicit IESG action making it, but such records are hard to find.   For completeness (of the confusion), RFC 3364 is also listed as updating 2673, but not only is it also Informational, it doesn't even reference 2673 -- one has to deduce the relationship to 2673 by making an inference from the discussion of 2874.\r\n\r\nObviously, while the erratum, and probably one for 1034 with a forward pointer to 2673, should be recorded, the key problem can be fixed by updating the rfc-index and its various clones.\r\n\r\nAn alternative, which clearly requires IESG and DNSEXT involvement (the above suggestion may or may not do so) is to decide that, after nearly a decade of presumed experience with 2673, either it is useful for something (even if not IPv6 reverse mapping) or that ten years is enough and it isn't worth the trouble.  If it is useful, it should be put it back on the standards track, presumably with an applicability statement about what it is useful for.  If it is not, it is time to make it Historic.  Either decision would clear up the questions of its status vis-a-vis introduction of new label types and updating 1035.", "submit_date": "2009-02-09", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1680", "doc-id": "RFC3364", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "\"Bitlabels\"", "orig_text": "addresses, it proposes to use a new kind of DNS label (a \"bit label\")\r\nto represent binary addresses directly in the DNS.", "correct_text": "addresses, it proposes to use a new kind of DNS label (a \"bit label\"), \r\nspecified in [RFC2673],\r\nto represent binary addresses directly in the DNS.\r\n\r\n*** RFC 2673 should also appear in the References section.***", "notes": "This document is listed as updating RFC 2673.  That claim is actually dubious, since it simply explains why one particular application of 2673 may not be appropriate, an application that is not even mentioned in 2673 itself.  But, if it does actually update 2673, then it should be possible for the reader to deduce how the two document interact without extensive detective work.\r\n\r\nAn alternative fix would be to remove the entry indicating updating of 2673 from the header of this document and corresponding indexes and references -- what this actually updates is 2874, which specifies a particular application of 2673.", "submit_date": "2009-02-09", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2269", "doc-id": "RFC5681", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "   The description of fast retransmit and fast recovery has been\r\n   clarified, and the use of Limited Transmit [RFC3042] is now\r\n   recommended.", "correct_text": "   The description of fast retransmit and fast recovery has been\r\n   clarified.", "notes": "Really using of Limited Transmit [RFC3042] is not recommended anywhere in RFC 5681.\n --VERIFIER NOTES-- \nWG consensus is that this errata is incorrect.   ", "submit_date": "2010-05-18", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1716", "doc-id": "RFC4134", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.8 & 4.9", "orig_text": "In 4.8,\r\n\r\nFrom: aliceDss@examples.com\r\nSubject: Example 4.8\r\nMessage-Id: <020906002550300.249@examples.com>\r\n\r\nIn 4.9,\r\n\r\nFrom: aliceDss@examples.com\r\nSubject: Example 4.9\r\nMessage-Id: <021031164540300.304@examples.com>", "correct_text": "In 4.8,\r\n\r\nFrom: AliceDSS@example.com\r\nSubject: Example 4.8\r\nMessage-Id: <020906002550300.249@example.com>\r\n\r\nIn 4.9,\r\n\r\nFrom: AliceDSS@example.com\r\nSubject: Example 4.9\r\nMessage-Id: <021031164540300.304@example.com>", "notes": "\"From\" line of the RFC-822 message is aliceDss@examples.com, while the certificate\u2019s SubjectAlternativeName contains Rfc822Name = AliceDSS@example.com\r\n\r\nSo the two emails are different in the host part:\r\n\r\naliceDss@examples.com\r\nAliceDSS@example.com\r\n\r\nThe wrong email (aliceDss@examples.com) is given in both cleartext examples and encoded examples.\r\n\r\nAdditionally, the Message-Id should also be from example.com not from examples.com.", "submit_date": "2009-03-15", "submitter_name": "Maxim Masiutin", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1717", "doc-id": "RFC5445", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9, pg.16", "orig_text": "last paragraph at the bottom of page 16:\r\n\r\n   This document assigns the Under-Specified FEC Encoding ID 128 under\r\n   the ietf:rmt:fec:encoding name-space (which was previously assigned\r\n|  by [RFC3452]) to \"Small Block, Large Block, and Please note that we\r\n|  have added a comma between large block and expandable throughout this\r\n|  document (RFC Editor style is to include a comme before the last item\r\n|  of a series).  If you do not object, we will ask IANA to include this\r\n|  comma in their registry for consistency. --> Expandable FEC Codes\" as\r\n   specified in Section 4 above.\r\n\r\n", "correct_text": "   This document assigns the Under-Specified FEC Encoding ID 128 under\r\n   the ietf:rmt:fec:encoding name-space (which was previously assigned\r\n|  by [RFC3452]) to \"Small Block, Large Block, and Expandable FEC Codes\"\r\n   as specified in Section 4 above.\r\n", "notes": "Apparently an xml source flaw carried over to final version.", "submit_date": "2009-03-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4720", "doc-id": "RFC7540", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2.1", "orig_text": "Pushed responses are always associated with an explicit request from\r\nthe client.  The PUSH_PROMISE frames sent by the server are sent on\r\nthat explicit request's stream. ", "correct_text": "Promised requests are always associated with an explicit request from\r\nthe client.  The PUSH_PROMISE frames sent by the server are sent on\r\nthat explicit request's stream. ", "notes": "This section talks about promised requests, not pushed responses.\r\n\r\nAlexey:\r\nAs per HTTPBIS WG discussion, this is correct in the original, but clearer in the proposed text.", "submit_date": "2016-06-27", "submitter_name": "Kazu Yamamoto", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1681", "doc-id": "RFC4028", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13", "orig_text": "In section 13 (Example Call Flow) the From tag never changes \r\nbetween the initial INVITE message and the subsequent INVITE \r\nmessages sent after receiving a 422:\r\n\r\nmessage 1\r\n   INVITE sips:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bKnashds8\r\n   Supported: timer\r\n   Session-Expires: 50\r\n   Max-Forwards: 70\r\n   To: Bob <sips:bob@biloxi.example.com>\r\n   From: Alice <sips:alice@atlanta.example.com>;tag=1928301774\r\n   Call-ID: a84b4c76e66710\r\n   CSeq: 314159 INVITE\r\n   Contact: <sips:alice@pc33.atlanta.example.com>\r\n   Content-Type: application/sdp\r\n   Content-Length: 142\r\n\r\nmessage 4\r\n   INVITE sips:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bKnashds9\r\n   Supported: timer\r\n   Session-Expires: 3600\r\n   Min-SE: 3600\r\n   Max-Forwards: 70\r\n   To: Bob <sips:bob@biloxi.example.com>\r\n   From: Alice <sips:alice@atlanta.example.com>;tag=1928301774\r\n   Call-ID: a84b4c76e66710\r\n   CSeq: 314160 INVITE\r\n   Contact: <sips:alice@pc33.atlanta.example.com>\r\n   Content-Type: application/sdp\r\n   Content-Length: 142\r\n\r\nmessage 10\r\n   INVITE sips:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bKnashds10\r\n   Supported: timer\r\n   Session-Expires: 4000\r\n   Min-SE: 4000\r\n   Max-Forwards: 70\r\n   To: Bob <sips:bob@biloxi.example.com>\r\n   From: Alice <sips:alice@atlanta.example.com>;tag=1928301774\r\n   Call-ID: a84b4c76e66710\r\n   CSeq: 314161 INVITE\r\n   Contact: <sips:alice@pc33.atlanta.example.com>\r\n   Content-Type: application/sdp\r\n\r\nHowever, as per RFC 3261, if an initial INVITE generates a non-2xx final\r\nresponse, that terminates all sessions and all dialogs that were created. \r\n\r\nHence, these are not re-INVITE messages, rather new INVITE messages and \r\nshould use a new From tag.", "correct_text": "message 1\r\n   INVITE sips:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bKnashds8\r\n   Supported: timer\r\n   Session-Expires: 50\r\n   Max-Forwards: 70\r\n   To: Bob <sips:bob@biloxi.example.com>\r\n   From: Alice <sips:alice@atlanta.example.com>;tag=1928301774\r\n   Call-ID: a84b4c76e66710\r\n   CSeq: 314159 INVITE\r\n   Contact: <sips:alice@pc33.atlanta.example.com>\r\n   Content-Type: application/sdp\r\n   Content-Length: 142\r\n\r\nmessage 4\r\n   INVITE sips:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bKnashds9\r\n   Supported: timer\r\n   Session-Expires: 3600\r\n   Min-SE: 3600\r\n   Max-Forwards: 70\r\n   To: Bob <sips:bob@biloxi.example.com>\r\n   From: Alice <sips:alice@atlanta.example.com>;tag=2568701785\r\n   Call-ID: a84b4c76e66710\r\n   CSeq: 314160 INVITE\r\n   Contact: <sips:alice@pc33.atlanta.example.com>\r\n   Content-Type: application/sdp\r\n   Content-Length: 142\r\n\r\nmessage 10\r\n   INVITE sips:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bKnashds10\r\n   Supported: timer\r\n   Session-Expires: 4000\r\n   Min-SE: 4000\r\n   Max-Forwards: 70\r\n   To: Bob <sips:bob@biloxi.example.com>\r\n   From: Alice <sips:alice@atlanta.example.com>;tag=5647301796\r\n   Call-ID: a84b4c76e66710\r\n   CSeq: 314161 INVITE\r\n   Contact: <sips:alice@pc33.atlanta.example.com>\r\n   Content-Type: application/sdp", "notes": "-----Original Message-----\r\nFrom: Paul Kyzivat (pkyzivat) \r\nSent: Monday, February 09, 2009 10:09 PM\r\nTo: Muthu ArulMozhi Perumal (mperumal)\r\nCc: Radha Krishna Saragadam (rsaragad); Jonathan Rosenberg (jdrosen); Ram Mohan R (rmohanr)\r\nSubject: Re: UAS behavior after sending 422 for initial INVITE\r\n\r\nyes, I think so.\r\n\r\n\tPaul\r\n\r\nMuthu ArulMozhi Perumal (mperumal) wrote:\r\n> In section 13 (Example Call Flow) of RFC 4028 the From tag never changes\r\n> between the initial INVITE message and the subsequent INVITE messages\r\n> sent after receiving a 422:\r\n> \r\n> message 1\r\n>    INVITE sips:bob@biloxi.example.com SIP/2.0\r\n>    From: Alice <sips:alice@atlanta.example.com>;tag=1928301774\r\n>    Call-ID: a84b4c76e66710\r\n> \r\n> message 4\r\n>    INVITE sips:bob@biloxi.example.com SIP/2.0\r\n>    From: Alice <sips:alice@atlanta.example.com>;tag=1928301774\r\n>    Call-ID: a84b4c76e66710\r\n> \r\n> message 10\r\n>    INVITE sips:bob@biloxi.example.com SIP/2.0\r\n>    From: Alice <sips:alice@atlanta.example.com>;tag=1928301774\r\n>    Call-ID: a84b4c76e66710\r\n> \r\n> Is this a bug in the RFC?\r\n> \r\n> thanks,\r\n> Muthu\r\n> \r\n> |-----Original Message-----\r\n> |From: Paul Kyzivat (pkyzivat)\r\n> |Sent: Wednesday, February 04, 2009 12:36 AM\r\n> |To: Radha Krishna Saragadam (rsaragad)\r\n> |Cc: Jonathan Rosenberg (jdrosen); Muthu ArulMozhi Perumal (mperumal);\r\n> Ram Mohan R (rmohanr)\r\n> |Subject: Re: UAS behavior after sending 422 for initial INVITE\r\n> |\r\n> |Radha,\r\n> |\r\n> |It is not a reinvite, because a dialog was never established - the\r\n> first\r\n> |call failed.\r\n> |\r\n> |So you are starting a new invite. You can use the same callid, but\r\n> |should use a new from-tag.\r\n> |\r\n> |\tThanks,\r\n> |\tPaul\r\n> |\r\n> |Radha Krishna Saragadam (rsaragad) wrote:\r\n> |> Hi Paul\r\n> |>\r\n> |> \tMy question is for initial INVITE. For initial INVITE if UA\r\n> |> receives 422 and UA want to retry INVITE with new value increased\r\n> value\r\n> |> then what should be the To(with tag), From(with tag) and CallID\r\n> values?\r\n> |> Is it a Re-INVITE or new a Dialog? Section 7.3 says same value for\r\n> |> To,From and CallID\r\n> |>\r\n> |> Regards\r\n> |> S.Radha krishna", "submit_date": "2009-02-09", "submitter_name": "Muthu Arul Mozhi", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1682", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "20.7", "orig_text": "Authorization: Digest username=\"Alice\", realm=\"atlanta.com\",\r\n  nonce=\"84a4cc6f3082121f32b42a2187831a9e\",\r\n  response=\"7587245234b3434cc3412213e5f113a5432\"", "correct_text": "Authorization: Digest username=\"Alice\", realm=\"atlanta.com\",\r\n  nonce=\"84a4cc6f3082121f32b42a2187831a9e\",\r\n  response=\"7587245234b3434cc3412213e5f113a5\"", "notes": "'response' field in original example has 35 hexadecimal characters while they must be 32:\r\n\r\n  dresponse         =  \"response\" EQUAL request-digest\r\n  request-digest    =  LDQUOT 32LHEX RDQUOT", "submit_date": "2009-02-10", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1683", "doc-id": "RFC5321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "Additional-Registered-Clauses  = CFWS Atom FWS String", "correct_text": "Additional-Registered-Clauses  = 1*(CFWS Atom FWS String)", "notes": "1. The rule Additional-Registered-Clauses is used by the rule Opt-info (also in section 4.4, page 59) as:\r\n\r\nOpt-info       = [Via] [With] [ID] [For] [Additional-Registered-Clauses]\r\n\r\n2. The ABNF comment for Additional-Registered-Clauses states that \"Additional standard clauses may be added in this location by future standards and registration with IANA.\"\r\n\r\n3. Each sequence (CFWS Atom FWS String) represents a single clause.", "submit_date": "2009-02-15", "submitter_name": "Roberto Javier Godoy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1684", "doc-id": "RFC4301", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5.3.", "orig_text": "   Consider a situation in which a remote host (SH1) is using the\r\n   Internet to gain access to a server or other machine (H2) and there\r\n   is a security gateway (SG2), e.g., a firewall, through which H1's\r\n   traffic must pass.", "correct_text": "   Consider a situation in which a remote host (SH1) is using the\r\n   Internet to gain access to a server or other machine (H2) and there\r\n   is a security gateway (SG2), e.g., a firewall, through which SH1's\r\n   traffic must pass.", "notes": "", "submit_date": "2009-02-17", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1685", "doc-id": "RFC5005", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "    <entry>\r\n      <title>Atom-Powered Robots Scheduled To Run Amok</title>\r\n      <link href=\"http://example.org/2003/11/24/robots_coming\"/>\r\n|     <id>urn:uuid:cdef5c6d5-gff8-4ebb-assa-80dwe44efkjo</id>\r\n      <updated>2003-11-24T12:00:00Z</updated>\r\n      <summary>Some text from an old, different entry.</summary>\r\n    </entry>", "correct_text": "    <entry>\r\n      <title>Atom-Powered Robots Scheduled To Run Amok</title>\r\n      <link href=\"http://example.org/2003/11/24/robots_coming\"/>\r\n|     <id>urn:uuid:2c355272-fd98-11dd-8474-0016415cd53f</id>\r\n      <updated>2003-11-24T12:00:00Z</updated>\r\n      <summary>Some text from an old, different entry.</summary>\r\n    </entry>", "notes": "The example UUID has the wrong number of characters in the first part, and non-hex digits in the last two parts (see http://intertwingly.net/blog/2009/02/17/White-House-FeedBack-Loop).\r\n\r\n(The suggested replacement has a freshly minted UUID)", "submit_date": "2009-02-18", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1686", "doc-id": "RFC2003", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "   The encapsulator MAY handle the ICMP Redirect messages itself.  It\r\n   MUST NOT not relay the Redirect to the sender of the original\r\n   unencapsulated datagram.\r\n", "correct_text": "   The encapsulator MAY handle the ICMP Redirect messages itself.  It\r\n   MUST NOT relay the Redirect to the sender of the original\r\n   unencapsulated datagram.\r\n", "notes": "", "submit_date": "2009-02-18", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1687", "doc-id": "RFC4028", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9", "orig_text": "The UAS MUST NOT increase the value of the Session-Expires header field.\r\n", "correct_text": "same as session 8.1\r\n   If the request doesn't indicate support for the session timer but\r\n   contains a session interval that is too small, the UAS cannot\r\n   usefully reject the request, as this would result in a call failure.\r\n   Rather, the UAS SHOULD insert a Min-SE header field containing its\r\n   minimum interval.  If a Min-SE header field is already present, the\r\n   UAS SHOULD increase (but MUST NOT decrease) the value to its\r\n   minimum interval.  The UAS MUST then increase the Session-Expires\r\n   header field value to be equal to the value in the Min-SE header\r\n   field", "notes": "----- Forwarded Message ----\r\nFrom: Radha krishna <krishna_srk2003@yahoo.com>\r\nTo: Brett Tate <brett@broadsoft.com>; \"sip-implementors@lists.cs.columbia.edu\" <sip-implementors@lists.cs.columbia.edu>\r\nSent: Thursday, February 19, 2009 10:56:31 AM\r\nSubject: Re: [Sip-implementors] Sending 422\r\n\r\nThanks Brett,\r\n\r\n      So I think same should be added for UAS\r\n\r\n<Snip from RFC section 8.1>\r\n\r\n  If the request doesn't indicate support for the session timer but\r\n \r\ncontains a session interval that is too small, the proxy cannot\r\n  usefully\r\nreject the request, as this would result in a call failure.\r\n  Rather, the\r\nproxy SHOULD insert a Min-SE header field containing its\r\n  minimum\r\ninterval.  If a Min-SE header field is already present, the\r\n  proxy SHOULD\r\nincrease (but MUST NOT decrease) the value to its\r\n  minimum interval.  The\r\nproxy MUST then increase the Session-Expires\r\n  header field value to be equal to the value in the\r\nMin-SE header\r\n  field, as described above.\r\n</Snip from RFC>\r\n\r\n\r\nRegards\r\nS.Radha krishna\r\n\r\n\r\n\r\n\r\n________________________________\r\nFrom: Brett Tate <brett@broadsoft.com>\r\nTo: Radha krishna <krishna_srk2003@yahoo.com>; \"sip-implementors@lists.cs.columbia.edu\" <sip-implementors@lists.cs.columbia.edu>\r\nSent: Wednesday, February 18, 2009 6:42:31 PM\r\nSubject: RE: [Sip-implementors] Sending 422\r\n\r\nIt looks like Section 9 may have forgotten to indicate the behavior when UAC timer support not indicated.  Section 8.1 allows a proxy to increase the Session-Expires; I see no reason why the same cannot be done by the UAS.\r\n\r\n> -----Original Message-----\r\n> From: sip-implementors-bounces@lists.cs.columbia.edu [mailto:sip-\r\n> implementors-bounces@lists.cs.columbia.edu] On Behalf Of Radha krishna\r\n> Sent: Tuesday, February 17, 2009 9:48 PM\r\n> To: sip-implementors@lists.cs.columbia.edu\r\n> Subject: [Sip-implementors] Sending 422\r\n>\r\n> Hi\r\n>\r\n>          Consider the following topology\r\n>              UA1 ----- Call-stateful-proxy ------ UA2\r\n>\r\n>          UA1 does not support session timer, Make a call to UA2. Call-\r\n> stateful-proxy adds Session-Expires:100 header and forwards to UA2. UA2\r\n> minimum session expires is 900. But in this case INVITE will not contain\r\n> \"support: timer\". According section 9, UAS can reject with 422 only if\r\n> there is a timer tag in supported header\r\n>\r\n> <Snip from RFC>\r\n>\r\n>    If an incoming request contains a Supported header field with a value\r\n>    'timer' and a Session Expires header field, the UAS MAY reject the\r\n>    INVITE request with a 422 (Session Interval Too Small) response if\r\n>    the session interval in the Session-Expires header field is smaller\r\n>    than the minimum interval defined by the UAS' local policy.  When\r\n>    sending the 422 response, the UAS MUST include a Min-SE header field\r\n>    with the value of its minimum interval.  This minimum interval MUST\r\n>    NOT be lower than 90 seconds.\r\n> </Snip from RFC>\r\n>\r\n>        Also UAS cannot increase the session expires duration\r\n> <Snip from RFC>\r\n> The UAS MUST\r\n>    NOT increase the value of the Session-Expires header field.\r\n> </Snip from RFC>\r\n>\r\n> What should be the behavior of UAS here?\r\n>    1) accept the call with 100 seconds?\r\n>    2) Increase the duration to 900 seconds while sending 200 Ok?\r\n> Note: Session timer should not be turned-off\r\n>\r\n> Regards\r\n> S.Radha krishna\r\n>\r\n>\r\n>\r\n>\r\n> _______________________________________________\r\n> Sip-implementors mailing list\r\n> Sip-implementors@lists.cs.columbia.edu\r\n> https://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors\r\n\r\n\r\n\r\n     \r\n_______________________________________________\r\nSip-implementors mailing list\r\nSip-implementors@lists.cs.columbia.edu\r\nhttps://lists.cs.columbia.edu/cucslists/listinfo/sip-implementors", "submit_date": "2009-02-19", "submitter_name": "Radha krishna Saragadam", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1688", "doc-id": "RFC5420", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "11.2,11.3", "orig_text": "     ... allocated only by IETF Consensus.\r\n                                ^^^^^^^^^\r\n", "correct_text": "     ... allocated only by IETF Review.\r\n                                ^^^^^^\r\n", "notes": "Location:\r\n   a)  last paragraph of section 11.2\r\n   b)  third paragraph of section 11.3\r\n\r\nRationale:\r\n  Adaptation to updated IANA policy terminology as per RFC 5226\r\n  has been missed.\n --VERIFIER NOTES-- \nThe IANA action was correctly taken in this case before the adoption of RFC5226 as an RFC. Thus the IANA action was correct. Furthermore, the mapping from IETF Consensus to IETF Review is well-known.", "submit_date": "2009-02-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2270", "doc-id": "RFC4880", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.2", "orig_text": "       SHA224:     0x30, 0x31, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86,\r\n                   0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x04, 0x05,\r\n                   0x00, 0x04, 0x1C\r\n", "correct_text": "       SHA224:     0x30, 0x2d, 0x30, 0x0d, 0x06, 0x09, 0x60, 0x86,\r\n                   0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x04, 0x05,\r\n                   0x00, 0x04, 0x1C\r\n", "notes": "The second byte as published in 4880 is 0x31 but should be 0x2d.\r\n\r\nHal Finney noted this once, but I didn't see it entered in as an errata.", "submit_date": "2010-05-18", "submitter_name": "David Shaw", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1689", "doc-id": "RFC5420", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.3, pg.19", "orig_text": "a)\r\n   The IANA has created a new registry and will manage the space of\r\n|  attributes bit flags, numbering them in the usual IETF notation:\r\n            ^\r\n   starting at zero and continuing at least through 31.\r\n\r\nb)\r\n   Each bit should be tracked with the following qualities:\r\n\r\n   - Bit number\r\n   - Defining RFC\r\n   - Name of bit\r\n|  - Whether there is meaning in the Attribute Flags TLV on a Path\r\n|  - Whether there is meaning in the Attribute Flags TLV on a Resv\r\n   - Whether there is meaning in the RRO Attributes subobject\r\n\r\n", "correct_text": "a)\r\n   The IANA has created a new registry and will manage the space of\r\n   attribute bit flags, numbering them in the usual IETF notation:\r\n   starting at zero and continuing at least through 31.\r\n\r\nb)\r\n   Each bit should be tracked with the following qualities:\r\n\r\n   - Bit number\r\n   - Defining RFC\r\n   - Name of bit\r\n|  - Whether there is meaning in the Attribute Flags TLV on a Path message\r\n|  - Whether there is meaning in the Attribute Flags TLV on a Resv message\r\n   - Whether there is meaning in the RRO Attributes subobject\r\n", "notes": "Rationale:\r\n\r\na) grammar fix in the body of RFC 5420 vs. RFC 4420\r\n   should also be reflected in the IANA Considerations\r\n   (and in the IANA registry -- subject to independent report to IANA);\r\n\r\nb) language improvement applied in the body of the RFC\r\n   should also be reflected in the IANA Considerations.", "submit_date": "2009-02-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1690", "doc-id": "RFC3696", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "(from erratum 1003)\r\n\r\nIn addition to restrictions on syntax, there is a length limit on\r\n   email addresses.  That limit is a maximum of 64 characters (octets)\r\n   in the \"local part\" (before the \"@\") and a maximum of 255 characters\r\n   (octets) in the domain part (after the \"@\") for a total length of 320\r\n   characters. However, there is a restriction in RFC 2821 on the length of an\r\n   address in MAIL and RCPT commands of 256 characters.  Since addresses\r\n   that do not fit in those fields are not normally useful, the upper\r\n   limit on address lengths should normally be considered to be 256.", "correct_text": "In addition to restrictions on syntax, there is a length limit on\r\n   email addresses.  That limit is a maximum of 64 characters (octets)\r\n   in the \"local part\" (before the \"@\") and a maximum of 255 characters\r\n   (octets) in the domain part (after the \"@\") for a total length of 320\r\n   characters. However, there is a restriction in RFC 2821 on the length of an\r\n   address in MAIL and RCPT commands of 254 characters.  Since addresses\r\n   that do not fit in those fields are not normally useful, the upper\r\n   limit on address lengths should normally be considered to be 254.", "notes": "I believe erratum ID 1003 is slightly wrong. RFC 2821 places a 256 character limit on the forward-path. But a path is defined as\r\n\r\nPath = \"<\" [ A-d-l \":\" ] Mailbox \">\"\r\n\r\nSo the forward-path will contain at least a pair of angle brackets in addition to the Mailbox. This limits the Mailbox (i.e. the email address) to 254 characters.", "submit_date": "2009-02-22", "submitter_name": "Dominic Sayers", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1691", "doc-id": "RFC5464", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1,2nd para", "orig_text": "   For example, a general comment being added to a mailbox may have an\r\n|  entry name of \"/comment\" and a value of \"Really useful mailbox\".\r\n                  ^^^^^^^^", "correct_text": "   For example, a general comment being added to a mailbox may have an\r\n|  entry name of \"/shared/comment\" and a value of \"Really useful\r\n   mailbox\".", "notes": "Rationale:\r\n  The example given in the Original Text violates the rules for\r\n  the formation of entry names  specifcied later in the RFC\r\n  (cf. section 3.2 ff.), and is therefore considered confusing.", "submit_date": "2009-02-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1692", "doc-id": "RFC5464", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3, pg.11", "orig_text": "       Arguments:  mailbox-name\r\n|                  entry\r\n|                  value\r\n|                  list of entry, values", "correct_text": "       Arguments:  mailbox-name\r\n|                  list of {entry, value} pairs", "notes": "Location is top of page 11.\r\n\r\nRationale:\r\n  The prose version of the syntax specification is confusing.\r\n  The ABNF in Section 5 is much more specific, and the prose\r\n  should correspond to the ABNF.  The relevant ABFN rules\r\n  in Section 5 (pg.14/15) are (stripped of comments):\r\n      setmetadata       = \"SETMETADATA\" SP mailbox SP entry-values\r\n      entry-values      = \"(\" entry-value *(SP entry-value) \")\"\r\n      entry-value       = entry SP value", "submit_date": "2009-02-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1693", "doc-id": "RFC5439", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "   Consider the requirement for a full mesh of LSPs linking all PEs.\r\n|  That is, each PE has an LSP to and from every other LSP.  Thus, if\r\n                                                       ^^^\r\n   there are S(PE) PEs in the network, there are S(PE)*(S(PE) - 1) LSPs.\r\n", "correct_text": "   Consider the requirement for a full mesh of LSPs linking all PEs.\r\n|  That is, each PE has an LSP to and from every other PE.  Thus, if\r\n                                                       ^^\r\n   there are S(PE) PEs in the network, there are S(PE)*(S(PE) - 1) LSPs.\r\n", "notes": "Rationale:\r\n  Distorting confusion of abbreviations.\r\n  The LSPs under consideration extend from one PE to another PE.", "submit_date": "2009-02-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1694", "doc-id": "RFC5465", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8, pg.18", "orig_text": "      message-event   = ( \"MessageNew\" [SP\r\n                          \"(\" fetch-att *(SP fetch-att) \")\" ] )\r\n                      [[...]]\r\n|                     ;; The fett-att list may only be present for the\r\n                      ;; SELECTED/SELECTED-DELAYED mailbox filter\r\n                      ;; (<filter-mailboxes>).", "correct_text": "      message-event   = ( \"MessageNew\" [SP\r\n                          \"(\" fetch-att *(SP fetch-att) \")\" ] )\r\n                      [[...]]\r\n|                     ;; The fetch-att list may only be present for the\r\n                      ;; SELECTED/SELECTED-DELAYED mailbox filter\r\n                      ;; (<filter-mailboxes>).", "notes": "Location is near bottom of page 18.\r\n\r\nRationale: confusing typo;   s/fett/fetch/\r\n", "submit_date": "2009-02-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2453", "doc-id": "RFC4322", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.7", "orig_text": "The second paragraph of that section refers to [RFC1034]:\r\n\r\n   The DNS query and answer that lead to the expiring connection state\r\n   are also examined.  The DNS query may become stale.  (A negative,\r\n   i.e., no such record, answer is valid for the period of time given by\r\n   the MINIMUM field in an attached SOA record.  See [RFC1034] section\r\n   4.3.4.)  [...]\r\n\r\nThis reference is not very appropriate, and hence misleading.\r\nRFC 1034, and in particular section 4.3.4 of RFC 1034, has been\r\nsubstantially clarified and updated by RFC 2308.\r\nThe Abstract of RFC 2308 says:\r\n   \"This document ... replaces [RFC1034 Section 4.3.4].\"\r\n(The precise rule for determining the 'negative caching TTL' is a\r\nbit more complicated, taking the minimum of SOA.MINIMUM and SOA.TTL.)\r\n\r\nTherefore, RFC 4322 should better refer to RFC 2308, in this place,\r\nperhaps with a detailed hint pointing to section 5 of RFC 2308.", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1700", "doc-id": "RFC5331", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7, pg. 8", "orig_text": "   Some tunnels may not even require configuration, e.g., a Generic\r\n   Routing Encapsulation (GRE) tunnel can be \"created\" just by\r\n   encapsulating packets and transmitting them.  In such a case, the IP\r\n   address of the root is considered to be the IP source address of the\r\n|  encapsulated packets.\r\n             ^^ ", "correct_text": "   Some tunnels may not even require configuration, e.g., a Generic\r\n   Routing Encapsulation (GRE) tunnel can be \"created\" just by\r\n   encapsulating packets and transmitting them.  In such a case, the IP\r\n   address of the root is considered to be the IP source address of the\r\n|  encapsulation headers.\r\n             ^^^  ", "notes": "Location is 4th paragraph on page 8.\r\n\r\nRationale:\r\n\r\n  The term \"encapsulated packets\" has been variously interpretted to mean\r\n  the \"payload packets that\" and the \"whole packets including the \r\n  encapsulation headers.\"\r\n\r\n  To make this completely clear, the text should be read as in the correction.\r\n\r\nClarifying Reference:\r\n\r\n  Earlier in the same section, the 2nd paragraph on page 7 defines\r\n  the 'root' of a tunnel:\r\n\r\n  \"The root is identified by the head-end IP address of the tunnel.\"\r\n\r\n  Consequentially, in the case of 'ad-hoc' GRE tunnels the IP address\r\n  of the 'root' obviously is the source address in the *outer* IP\r\n  header.", "submit_date": "2009-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1701", "doc-id": "RFC5331", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8., 6th para", "orig_text": "          [...].  Values of the host part of the IPv4 address greater\r\n|  than 0xFFFEF are not allowed to be used as context labels.\r\n                                           ^^", "correct_text": "          [...].  Values of the host part of the IPv4 address greater\r\n|  than 0xFFFEF are not allowed to be used to generate context labels.\r\n                                           ^^^^^^^^^^^", "notes": "Rationale: The 'host part' only becomes a part of the label\r\n  (The full, 32-bit label format is specified in RFC 3032 with\r\n  significant updates by RFC 5462, RFC 3270, and RFC 5129.)\r\n  Thus, the host part cannot be used \"as\" as label; the Corrected\r\n  Text suggests an appropriate wording.", "submit_date": "2009-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1702", "doc-id": "RFC5331", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "   A typical use case of upstream-assigned labels is for MPLS multicast\r\n   and is described here for illustration.  This use case arises when an\r\n   upstream LSR Ru is adjacent to several downstream LSRs <Rd1...Rdn> in\r\n|  an LSP, LSP1 AND Ru is connected to <Rd1...Rdn> via a multi-access\r\n   media or tunnel, AND Ru wants to transmit a single copy of an MPLS\r\n   packet on the LSP to <Rd1...Rdn>.  [...]", "correct_text": "   A typical use case of upstream-assigned labels is for MPLS multicast\r\n   and is described here for illustration.  This use case arises when an\r\n   upstream LSR Ru is adjacent to several downstream LSRs <Rd1...Rdn> in\r\n|  an LSP, LSP1, AND Ru is connected to <Rd1...Rdn> via a multi-access\r\n               ^\r\n   media or tunnel, AND Ru wants to transmit a single copy of an MPLS\r\n   packet on the LSP to <Rd1...Rdn>.  [...]", "notes": "Rationale:\r\n  The missing comma distorts the sense (giving the subject LSP a name,\r\n  \"LSP1\") and visually binds \"LSP1\" too much to the \"AND\".\r\n  Maybe it would have been preferable to also insert \"say\" for clarity:\r\n    \"... and LSP, say LSP1, AND ...\"", "submit_date": "2009-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1703", "doc-id": "RFC792", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "On page 14, it says:", "orig_text": "   IP Fields:\r\n\r\n   Type\r\n\r\n      8 for echo message;\r\n", "correct_text": "   ICMP Fields:\r\n\r\n   Type\r\n\r\n      8 for echo message;\r\n", "notes": "", "submit_date": "2009-03-02", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1704", "doc-id": "RFC5462", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3, pg.7", "orig_text": "In the updated text for RFC 5129, section 2, bullet 5:\r\n\r\n     ... TC-capable, ...\r\n         ^^", "correct_text": "     ... ECN-capable, ...\r\n         ^^^", "notes": "Rationale: \r\nPresumed editing flaw introduces undefined term; \"ECN-capable\"\r\noccurs in the same paragraph, \"TC-capable\" nowhere else!  ==> This\r\nextraneous change of the original RFC 5129 text should be backed out.", "submit_date": "2009-03-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1706", "doc-id": "RFC2784", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "   An RFC 1701 transmitter may set any of the Routing Present, Key\r\n   Present, Sequence Number Present, and Strict Source Route bits set to\r\n   one, and thus may transmit the RFC 1701 Key, Sequence Number or\r\n   Routing fields in the GRE header. As stated in Section 5.3, a packet\r\n   with non-zero bits in any of bits 1-5 MUST be discarded unless the\r\n   receiver implements RFC 1701.\r\n", "correct_text": "   An RFC 1701 transmitter may set any of the Routing Present, Key\r\n   Present, Sequence Number Present, and Strict Source Route bits set to\r\n   one, and thus may transmit the RFC 1701 Key, Sequence Number or\r\n   Routing fields in the GRE header. As stated in Section 2.3, a packet\r\n   with non-zero bits in any of bits 1-5 MUST be discarded unless the\r\n   receiver implements RFC 1701.\r\n", "notes": "", "submit_date": "2009-03-03", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4718", "doc-id": "RFC7788", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "7.4.  Multicast DNS Proxy\r\n\r\n   The designated Multicast DNS (mDNS) [RFC6762] proxy on a Common Link\r\n   is elected based on the capabilities described in Section 4.\r\n\r\n[...]\r\n\r\n   The elected router MUST provide an mDNS proxy on the given link and\r\n   announce it as described in Section 8.\r\n\r\n[...]\r\n\r\n8.  Naming and Service Discovery\r\n\r\n   [...]\r\n\r\n   Each HNCP router SHOULD provide and announce an auto-generated or\r\n   user-configured name for each internal Common Link (Section 6.1) for\r\n   which it is the designated DHCPv4, stateful DHCPv6 server, mDNS\r\n   proxy, or for which it provides forward or reverse DNS services on\r\n   behalf of connected devices.\r\n\r\n[...]\r\n\r\n10.1.  HNCP-Version TLV\r\n\r\n   [...]\r\n\r\n   M-capability:  Priority value used for electing the on-link mDNS\r\n      [RFC6762] proxy.  It MUST be set to 0 if the router is not capable\r\n      of proxying mDNS, otherwise it SHOULD be set to 4 but MAY be set\r\n      to any value from 1 to 7 to indicate a non-default priority\r\n\r\n\r\n", "correct_text": "7.4.  Multicast DNS Hybrid Proxy\r\n\r\n   The designated Multicast DNS (mDNS) [RFC6762] Hybrid Proxy\r\n   [draft-ietf-dnssd-hybrid-03] on a Common Link is elected based\r\n   on the capabilities described in Section 4.\r\n\r\n[...]\r\n\r\n   The elected router MUST provide an mDNS Hybrid Proxy on the\r\n   given link and announce it as described in Section 8.\r\n\r\n[...]\r\n\r\n8.  Naming and Service Discovery\r\n\r\n   [...]\r\n\r\n   Each HNCP router SHOULD provide and announce an auto-generated or\r\n   user-configured name for each internal Common Link (Section 6.1) for\r\n   which it is the designated DHCPv4, stateful DHCPv6 server, mDNS\r\n   Hybrid Proxy, or for which it provides forward or reverse DNS\r\n   services on behalf of connected devices.\r\n\r\n[...]\r\n\r\n10.1.  HNCP-Version TLV\r\n\r\n   [...]\r\n\r\n   M-capability:  Priority value used for electing the on-link mDNS\r\n      Hybrid Proxy.  It MUST be set to 0 if the router is not capable\r\n      of providing an mDNS Hybrid Proxy service, otherwise it SHOULD\r\n      be set to 4 but MAY be set to any value from 1 to 7 to indicate\r\n      a non-default priority\r\n\r\n", "notes": "RFC 7788 refers to \"Multicast DNS (mDNS) proxy\" and gives a citation for RFC 6762.\r\n\r\nRFC 6762, \"Multicast DNS,\" defines multicast DNS and mentions (without an explicit definition) a \"Multicast DNS Proxy\" service.  This proxy service is also known as \"Bonjour Sleep Proxy\" [https://en.wikipedia.org/wiki/Bonjour_Sleep_Proxy]\r\n\r\nHowever, the intent of RFC 7788 is to specify the operation and advertisement of the multicast DNS Hybrid Proxy Service, as defined in draft-ietf-dnssd-hybrid-03, \"Hybrid Unicast/Multicast DNS-Based Service Discovery.\"  This errata corrects the mentions of \"mDNS proxy\" in RFC 7788 to \"Hybrid Proxy.\"\r\n\r\ndraft-ietf-dnssd-hybrid-03 should also be added to the Normative References.", "submit_date": "2016-06-23", "submitter_name": "Ralph Droms", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2425", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "On top of page 35, the Description of SHA224Reset says:\r\n\r\n                                          vvv\r\n * Description:\r\n *   This function will initialize the SHA384Context in preparation\r\n *   for computing a new SHA224 message digest.\r\n\r\nIt should say:\r\n\r\n * Description:\r\n|*   This function will initialize the SHA224Context in preparation\r\n *   for computing a new SHA224 message digest.", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2434", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "The first line on page 50 says:\r\n\r\n#else /* !USE_32BIT_ONLY */\r\n\r\nIt should say:\r\n\r\n#else /* !USE_MODIFIED_MACROS */\r\n\r\nRationale:  Look at the #if[n]def structure of the file.\r\n", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1707", "doc-id": "RFC3977", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.1.2", "orig_text": "o  The high water mark will be one less than the low water mark, and\r\n the estimated article count will be zero.  Servers SHOULD use this\r\n method to show an empty group.  This is the only time that the\r\n high water mark can be less than the low water mark.", "correct_text": "o  The low water mark will be one more than the high water mark, and\r\n the estimated article count will be zero.  Servers SHOULD use this\r\n method to show an empty group.  This is the only time that the\r\n high water mark can be less than the low water mark.", "notes": "The difference in wording is subtle.  The low water mark is one more than\r\nthe high water mark (that is to say that the low water mark has increased,\r\nand the high water mark has not decreased).  It will permit the following\r\narticle arrival to be handled by incrementing the high water mark and\r\nleaving the low water mark unchanged.\r\n\r\nTo be more precise, if at a given time we have only one article in misc.test\r\nand the following answer to a GROUP command:\r\n\r\n [C] GROUP misc.test\r\n [S] 211 1 12 12 misc.test\r\n\r\nAfter cancelling this article, the same GROUP command SHOULD give:\r\n\r\n [C] GROUP misc.test\r\n [S] 211 0 13 12 misc.test\r\n\r\n\r\nBesides, RFC 3977 also mentions in the same section:\r\n\r\n The client may make use of the low water mark to\r\n remove all remembered information about articles with lower numbers,\r\n as these will never recur.  This includes the situation when the high\r\n water mark is one less than the low water mark.\r\n\r\nIt should be read as \"when the low water mark is one more than the high\r\nwater mark\".  The answer to the previous GROUP command is not\r\n\"211 0 12 11 misc.test\".  Otherwise, a news client may still wrongly\r\nconsider that the article whose number is 12 is still present whereas\r\nit could remove it if the low water mark was set to 13.\r\n\r\n --VERIFIER NOTES-- \r\n[updated 2012-05-15 by Barry Leiba]\r\n\r\n The high water mark is one less than the low water mark for empty\r\n newsgroups.  A major reason for doing it this way was to deal with\r\n clusters of servers.  If they're not perfectly synchronized, then\r\n a cancel might be visible on one and not another.  So if you connect\r\n to the second one, it looks as if the article has been reinstated.\r\n Wording it like this meant we didn't need special treatment of such\r\n clusters.  The low water mark cannot decrease.", "submit_date": "2009-03-05", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1708", "doc-id": "RFC2598", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.3.1", "orig_text": "   We chose these two since they\"re the best and worst cases,\r\n   respectively, for jitter and we wanted to supply rough guidelines for\r\n   EF implementers choosing to use WRR or similar mechanisms.\r\n", "correct_text": "   We chose these two since they're the worst and best cases,\r\n   respectively, for jitter and we wanted to supply rough guidelines for\r\n   EF implementers choosing to use WRR or similar mechanisms.\r\n", "notes": "Fix double-quotes to apostrophe and note order of \"best\" and \"worst\"", "submit_date": "2009-03-06", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1709", "doc-id": "RFC2446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.7", "orig_text": "Error! Bookmark not defined", "correct_text": "various", "notes": "The \"Error! Bookmark not defined\" string appears 5 times near the end of section 4.4.7. It appears in place of actual data in the examples.\r\n\r\nhttp://www.ietf.org/rfc/rfc2446.txt", "submit_date": "2009-03-07", "submitter_name": "David Riggle", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1710", "doc-id": "RFC5317", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5., pg.7", "orig_text": "                v\r\n|  Slides 47 to 48 provide a description of how the forwarding and the\r\n   ACH OAM mechanism work in detail.  [...]", "correct_text": "                v\r\n|  Slides 47 to 78 provide a description of how the forwarding and the\r\n   ACH OAM mechanism work in detail.  [...]", "notes": "Rationale: cf. the slides!", "submit_date": "2009-03-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2271", "doc-id": "RFC4880", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.5", "orig_text": "   Input data:  0x14FB9C03D97E\r\n   Hex:     1   4    F   B    9   C     | 0   3    D   9    7   E\r\n   8-bit:   00010100 11111011 10011100  | 00000011 11011001 11111110\r\n   6-bit:   000101 001111 101110 011100 | 000000 111101 100111 111110\r\n   Decimal: 5      15     46     28       0      61     37     62\r\n   Output:  F      P      u      c        A      9      l      +\r\n", "correct_text": "   Input data:  0x14FB9C03D97E\r\n   Hex:     1   4    F   B    9   C     | 0   3    D   9    7   E\r\n   8-bit:   00010100 11111011 10011100  | 00000011 11011001 01111110\r\n   6-bit:   000101 001111 101110 011100 | 000000 111101 100101 111110\r\n   Decimal: 5      15     46     28       0      61     37     62\r\n   Output:  F      P      u      c        A      9      l      +\r\n", "notes": "This example shows the conversion of 0x14FB9C03D97E into Radix-64.  The problem is in the last byte, where '7E' is shown in binary as 11111110.  That of course should be 01111110.  The error is carried through in the 6-bit rendering of that data where the next-to-last 6-bit group 100111 should actually be 100101.  The decimal rendering as well as the output (character) line is correct.", "submit_date": "2010-05-18", "submitter_name": "David Shaw", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1724", "doc-id": "RFC5497", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.1 and 8.2", "orig_text": "a) Section 8.1, last paragraph\r\n\r\n   An INTERVAL_TIME TLV is an example of a Time TLV specified as in\r\n|  Section 5.\r\n\r\nb) Section 8.2, last paragraph\r\n\r\n   A VALIDITY_TIME TLV is an example of a Time TLV specified as in\r\n|  Section 5.\r\n", "correct_text": "a)\r\n\r\n   An INTERVAL_TIME TLV is an example of a Time TLV specified as in\r\n|  Section 6.\r\n\r\nb)\r\n\r\n   A VALIDITY_TIME TLV is an example of a Time TLV specified as in\r\n|  Section 6.\r\n", "notes": "Rationale:\r\n  Section 5 only contains the low-level details;\r\n  Section 6 contains the precise specification of the\r\n  Time TLV format used in Sections 8.1 and 8.2. \r\n\r\nSee Errata ID #1723 for similar issues in Sections 7.1 and 7.2.", "submit_date": "2009-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1725", "doc-id": "RFC5377", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "                                              v\r\n|  [...] The Trustees of the IETF Trust accepts direction from the IETF\r\n   regarding the rights to be granted.  [...]\r\n", "correct_text": "|  [...] The Trustees of the IETF Trust accept direction from the IETF\r\n   regarding the rights to be granted.  [...]\r\n", "notes": "", "submit_date": "2009-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1726", "doc-id": "RFC5377", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5,1st para", "orig_text": "           [...].  It would be inappropriate and confusing if such\r\n   additional licenses restricted the rights the IETF intends to grant\r\n|  in the content of RFCS.\r\n                        ^", "correct_text": "           [...].  It would be inappropriate and confusing if such\r\n   additional licenses restricted the rights the IETF intends to grant\r\n|  in the content of RFCs.\r\n                        ^", "notes": "", "submit_date": "2009-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1727", "doc-id": "RFC5480", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.1, pg.5", "orig_text": "|     o specifiedCurve, which is of type SpecifiedECDomain type (defined\r\n        in [X9.62]), allows all of the elliptic curve domain parameters\r\n        to be explicitly specified.  [...]", "correct_text": "|     o specifiedCurve, which is of type SpecifiedECDomain (defined\r\n        in [X9.62]), allows all of the elliptic curve domain parameters\r\n        to be explicitly specified.  [...]\r\n", "notes": "Location: last bullet in Section 2.1.1.\r\nRationale: inadvertant replication of \"type\"", "submit_date": "2009-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1711", "doc-id": "RFC5247", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   EAP pre-authentication\r\n      In EAP pre-authentication, an EAP peer pre-establishes EAP keying\r\n      material with an authenticator prior to arrival.  EAP\r\n      pre-authentication only affects the timing of EAP authentication,\r\n      but does not shorten or eliminate EAP (phase 1a) or AAA (phase 1b)\r\n      exchanges;  Discovery (phase 0) and Secure Association Protocol\r\n      (phase 2) exchanges occur as described in Section 1.3.  As a\r\n      result, the primary benefit is to enable EAP authentication to be\r\n      removed from the handoff critical path, thereby reducing latency.\r\n      Use of EAP pre-authentication within IEEE 802.11 is described in\r\n      [IEEE-802.11] and [8021XPreAuth].\r\n\r\n   Proactive key distribution\r\n      In proactive key distribution, keying material and authorizations\r\n      are transported from the backend authentication server to a\r\n      candidate authenticator in advance of a handoff.  As a result, EAP\r\n      (phase 1a) is not needed, but the Discovery (phase 0), and Secure\r\n      Association Protocol exchanges (phase 2) are still necessary.\r\n      Within the AAA exchange (phase 1b), authorization and key\r\n      distribution functions are typically supported, but not\r\n      authentication.  Proactive key distribution is described in\r\n      [MishraPro], [IEEE-03-084], and [HANDOFF].\r\n\r\n", "correct_text": "Move the reference 8021XPreAuth to the second paragraph.", "notes": "The reference [8021XPreAuth] describes a mechanism in which EAP\r\nauthentication happens only once with the serving authenticator, i.e.,\r\none EAP authentication with the serving authenticator generates\r\nmultiple MSKs and distributed to serving authenticator and target\r\nauthenticator, and there is no additional EAP authentication\r\nperformed between peer and target authenticator. This does not match\r\nthe definition of pre-authentication as described by the first paragraph;\r\nhence the reference should be moved to the second paragraph.", "submit_date": "2008-12-20", "submitter_name": "Yoshihiro Ohba", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1712", "doc-id": "RFC1350", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "Acknowlegements", "correct_text": "Acknowledgements", "notes": "", "submit_date": "2009-03-11", "submitter_name": "Andy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1713", "doc-id": "RFC4301", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12", "orig_text": "   The IANA has assigned the value (3) for the asn1-modules registry and\r\n   has assigned the object identifier 1.3.6.1.5.8.3.1 for the SPD\r\n   module.  See Appendix C, \"ASN.1 for an SPD Entry\".\r\n", "correct_text": "   The IANA has assigned the value (3) for the asn1-modules registry and\r\n   has assigned the object identifier 1.3.6.1.5.5.8.3.1 for the SPD\r\n   module.  See Appendix C, \"ASN.1 for an SPD Entry\".\r\n", "notes": "See http://www.iana.org/assignments/smi-numbers", "submit_date": "2009-03-12", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1714", "doc-id": "RFC4379", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "Page 6 figure\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |         Version Number        |         Global Flags          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Message Type |   Reply mode  |  Return Code  | Return Subcode|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                        Sender's Handle                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                        Sequence Number                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                    TimeStamp Sent (seconds)                   |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                  TimeStamp Sent (microseconds)                |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                  TimeStamp Received (seconds)                 |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                TimeStamp Received (microseconds)              |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                            TLVs ...                           |\r\n      .                                                               .\r\n      .                                                               .\r\n      .                                                               .\r\n      |                                                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nPage 8 para 6\r\n  The TimeStamp Sent is the time-of-day (in seconds and microseconds,\r\n  according to the sender's clock) in NTP format [NTP] when the MPLS\r\n  echo request is sent.\r\n\r\n", "correct_text": "Page 6 figure\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |         Version Number        |         Global Flags          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Message Type |   Reply mode  |  Return Code  | Return Subcode|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                        Sender's Handle                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                        Sequence Number                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                    TimeStamp Sent (seconds)                   |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                TimeStamp Sent (seconds fraction)              |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                  TimeStamp Received (seconds)                 |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |              TimeStamp Received (seconds fraction)            |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                            TLVs ...                           |\r\n      .                                                               .\r\n      .                                                               .\r\n      .                                                               .\r\n      |                                                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nPage 8 para 6\r\n  The TimeStamp Sent is the time-of-day in NTP format [NTP], \r\n  according to the sender's clock, when the MPLS echo request is sent.  ", "notes": "The text and figure were contradictory since in NTP format the second field\r\nof 32 bits is fractional seconds, not microseconds.", "submit_date": "2009-03-12", "submitter_name": "Yaakov (J) Stein", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4612", "doc-id": "RFC88", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "F", "orig_text": "Record Format", "correct_text": "F. Record Format", "notes": "There should be \"F\"\n --VERIFIER NOTES-- \nLooks correct, but rejected per https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/ guideline 7.", "submit_date": "2016-02-05", "submitter_name": "Wang Haojian", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 01:07:47"}, {"errata_id": "2146", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   The initial filling of N1 and N2 is encrypted in the electronic\r\n   codebook mode in accordance with the requirements in section 6.1.  If\r\n   resulting encrypted filling N1 and N2 is the first 64-bit block of\r\n   the running key Gc(1)=A(S), then this block is added bitwise modulo 2\r\n   with the first 64-bit block of plain text Tp(1) = (t1(1), t2(1), ...,\r\n   t64(1)).\r\n", "correct_text": "   The initial filling of N1 and N2 is encrypted in the electronic\r\n   codebook mode in accordance with the requirements in section 5.1.  If\r\n   resulting encrypted filling N1 and N2 is the first 64-bit block of\r\n   the running key Gc(1)=A(S), then this block is added bitwise modulo 2\r\n   with the first 64-bit block of plain text Tp(1) = (t1(1), t2(1), ...,\r\n   t64(1)).\r\n", "notes": "", "submit_date": "2010-04-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2147", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   The filling of N1 and N2 is encrypted in the electronic codebook mode\r\n   in accordance with the requirements in the section 6.1.  The\r\n   encrypted filling of N1 and N2 makes the second 64-bit block of the\r\n   running key Gc(2), this block is added bitwise modulo 2 in the adder\r\n   CM5 to the second block of the plain text Tp(2).\r\n", "correct_text": "   The filling of N1 and N2 is encrypted in the electronic codebook mode\r\n   in accordance with the requirements in the section 5.1.  The\r\n   encrypted filling of N1 and N2 makes the second 64-bit block of the\r\n   running key Gc(2), this block is added bitwise modulo 2 in the adder\r\n   CM5 to the second block of the plain text Tp(2).\r\n", "notes": "", "submit_date": "2010-04-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2148", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   The initial filling of N1 and N2 is encrypted in the electronic\r\n   codebook mode in accordance with the requirements in section 6.1.  If\r\n   resulting encrypted filling N1 and N2 is the first 64-bit block of\r\n   the running key Gc(1)=A(S), then this block is added bitwise modulo 2\r\n   with the first 64-bit block of plain text Tp(1) = (t1(1), t2(1), ...,\r\n   t64(1)).", "correct_text": "   The initial filling of N1 and N2 is encrypted in the electronic\r\n   codebook mode in accordance with the requirements in section 6.1.  The\r\n   resulting encrypted filling N1 and N2 is the first 64-bit block of\r\n   the running key Gc(1)=A(S), then this block is added bitwise modulo 2\r\n   in the adder CM5 with the first 64-bit block of plain text Tp(1) = \r\n   (t1(1), t2(1), ..., t64(1)).", "notes": "", "submit_date": "2010-04-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4613", "doc-id": "RFC90", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "G", "orig_text": "G. SERVICE TO NETWORK\r\nH. REFERENCES\r\n", "correct_text": "H. SERVICE TO NETWORK\r\nI. REFERENCES\r\n", "notes": "There already \"G. SPECIAL CONSIDERATIONS\" , so \"G. SERVICE TO NETWORK\" should be \"H. ...\" and \"H. REFERENCES\" should be \"I. ....\"", "submit_date": "2016-02-05", "submitter_name": "Wang Haojian", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 01:09:40"}, {"errata_id": "1718", "doc-id": "RFC5454", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1, pg.5", "orig_text": "   Prefix Length\r\n\r\n      A sixteen-byte field containing the Mobile IPv6 Network Prefix;\r\n      all insignificant (low-order) bits (beyond the Prefix Length) MUST\r\n      be set to 0 by the originator of the option and ignored by the\r\n      receiver.\r\n\r\n   Mobile IPv6 Network Prefix\r\n\r\n      A sixteen-byte field containing the Mobile IPv6 Network Prefix\r\n", "correct_text": "   Prefix Length\r\n\r\n|     Indicates the prefix length of the prefix included in the Mobile\r\n|     IPv6 Network Prefix field.  A value of 255 indicates that a link-\r\n|     local address is included in the Mobile IPv6 Network Prefix field.\r\n\r\n   Mobile IPv6 Network Prefix\r\n\r\n|     A sixteen-byte field containing the Mobile IPv6 Network Prefix;\r\n|     all insignificant (low-order) bits (beyond the Prefix Length) MUST\r\n|     be set to 0 by the originator of the option and ignored by the\r\n|     receiver.", "notes": "The replacement text apparently has been placed into the wrong\r\nfield explanation.\r\nThe text presented for \"Prefix Length\" is the text that should\r\nbe specified for \"Mobile IPv6 Network Prefix\"; the correct text\r\nfor \"Prefix Length\" (as shown above) is borrowed from Section 2.2.", "submit_date": "2009-03-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1719", "doc-id": "RFC5454", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2, pg.7", "orig_text": "   The following values are defined for use as a Code value in the above\r\n   extension:\r\n\r\n|     0 registration accepted, IPv6 to be tunneled to HoA\r\n\r\n|     1 registration accepted, IPv6 to be tunneled to CoA\r\n\r\n      8 registration rejected, reason unspecified\r\n\r\n      9 registration rejected, administratively prohibited\r\n", "correct_text": "   The following values are defined for use as a Code value in the above\r\n   extension:\r\n\r\n|     0 registration accepted, IPv6 will be tunneled to HoA\r\n\r\n|     1 registration accepted, IPv6 will be tunneled to CoA\r\n\r\n      8 registration rejected, reason unspecified\r\n\r\n      9 registration rejected, administratively prohibited\r\n", "notes": "Rationale: The extension described in this section is sent\r\nfrom the Home Agent to the Mobile Node and reflects the decisions\r\nmade by the Home Agent. \"to be tunnelled\" could be misunderstood;\r\nthe text should better be stated as a confirmation; hence s/to/will/.\n --VERIFIER NOTES-- \nThe wording clearly conveys the action of tunneling the extension.   ", "submit_date": "2009-03-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1720", "doc-id": "RFC5454", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6,pp.13/14", "orig_text": "   When IPv6 runs over an IPv4 tunnel, the IPv6 tunnel endpoints can\r\n   treat the IPv4 tunnel as a single hop link as defined in [RFC4213].\r\n   The two tunnel endpoints, e.g., mobile node and home agent, MUST\r\n   configure link-local IPv6 addresses as defined in Section 3.7 of\r\n   [RFC4213], while they MUST also adhere to the neighbor discovery\r\n   requirements of the same specification, Section 3.8, and the hop\r\n|  limit requirements of Section 3.3.\r\n", "correct_text": "   When IPv6 runs over an IPv4 tunnel, the IPv6 tunnel endpoints can\r\n   treat the IPv4 tunnel as a single hop link as defined in [RFC4213].\r\n   The two tunnel endpoints, e.g., mobile node and home agent, MUST\r\n   configure link-local IPv6 addresses as defined in Section 3.7 of\r\n   [RFC4213], while they MUST also adhere to the neighbor discovery\r\n   requirements of the same specification, Section 3.8, and the hop\r\n|  limit requirements of Section 3.3 in [RFC4213].\r\n", "notes": "Rationale: The text should also make clear to which document\r\n(this RFC or RFC 4213) the last section number given refers.\r\nPointing to RFC 4213 twice (but not in the final case) could be\r\nmisunderstood, in particular due to the presence of the comma in\r\nfront of the \"and\" in a two-item list.", "submit_date": "2009-03-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1721", "doc-id": "RFC5497", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6, pg.7", "orig_text": "   The following data structure allows the representation of a single\r\n|  time-value, or of a default time-value plus pairs of (time-values,\r\n|  hop counts) for when hop-count-dependent time-values are required.\r\n   [...]", "correct_text": "   The following data structure allows the representation of a single\r\n|  time-value, or of a default time-value plus pairs of (time-value,\r\n|  hop count) for when hop-count-dependent time-values are required.\r\n   [...]", "notes": "Rationale:\r\nEach pair contains a single 'time-value' and a single 'hop-count'.\r\nSee text on pp. 8/9: multiple instances of \"(time-value, hop count)\".", "submit_date": "2009-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1722", "doc-id": "RFC5497", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2, pg.9", "orig_text": "[ first bullet: ]\r\n\r\n   o  The <length> field in the TLV MUST contain the value m * (2n+1),\r\n|     with n being the number of (time-value, hop count) pairs in the\r\n|     Time TLV, and m being number-values as defined in [RFC5444].\r\n", "correct_text": "   o  The <length> field in the TLV MUST contain the value m * (2n+1),\r\n|     with n being the number of (time-value, hop count) pairs per\r\n|     associated address in the Time TLV, and m being number-values as\r\n      defined in [RFC5444].\r\n ", "notes": "Rationale:\r\nThe original text is contradictory in itself, and it opposes the\r\nsubsequent bullets and prose in the same section.\r\nThe proposed correction (inserting \"per associated adddress\")\r\nis derived from the text in the first paragraph of the section.", "submit_date": "2009-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1723", "doc-id": "RFC5497", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1 and 7.2", "orig_text": "a) Section 7.1, last paragraph\r\n\r\n   An INTERVAL_TIME TLV is an example of a Time TLV specified as in\r\n|  Section 5.\r\n\r\nb) Section 7.2, last paragraph\r\n\r\n   A VALIDITY_TIME TLV is an example of a Time TLV specified as in\r\n|  Section 5.\r\n", "correct_text": "a)\r\n\r\n   An INTERVAL_TIME TLV is an example of a Time TLV specified as in\r\n|  Section 6.\r\n\r\nb)\r\n\r\n   A VALIDITY_TIME TLV is an example of a Time TLV specified as in\r\n|  Section 6.\r\n\r\n", "notes": "Rationale:\r\n  Section 5 only contains the low-level details;\r\n  Section 6, contains the precise specification of the \r\n  Time TLV format used in Sections 7.1 and 7.2.", "submit_date": "2009-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2272", "doc-id": "RFC1633", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.3", "orig_text": "Although receiver-initiated reservation is the natural choice\r\n         for multicast sessions, the justification for receiver\r\n         initiateion may appear weaker for unicast sessions, where the\r\n         sender may be the logical session initiator.", "correct_text": "Although receiver-initiated reservation is the natural choice\r\n         for multicast sessions, the justification for receiver\r\n         initiation may appear weaker for unicast sessions, where the\r\n         sender may be the logical session initiator.\r\n", "notes": "initiateion -> initiation", "submit_date": "2010-05-18", "submitter_name": "jonsimchol", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3252", "doc-id": "RFC2560", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.2.2.1", "orig_text": "... CAs issuing such a certificate should realized that a compromise of the\r\nresponder's key, is as serious as the compromise of a CA key used to sign \r\nCRLs, at least for the validity period of this certificate. ...", "correct_text": "... CAs issuing such a certificate should realized that a compromise of the\r\nresponder's key is as serious as the compromise of a CA key used to sign \r\nCRLs, at least for the validity period of this certificate. ...", "notes": "That first comma was extraneous.\r\n\r\nSPT: I also swapped realized/realize.", "submit_date": "2012-06-11", "submitter_name": "Daniel Barclay", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1728", "doc-id": "RFC5480", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.1.1", "orig_text": "   The namedCurve field in ECParameters uses object identifiers to name\r\n   well-known curves.  This document publishes curve identifiers for the\r\n   fifteen NIST-recommended curves [FIPS186-3].  Other documents can\r\n|  publish other name curve identifiers.  The NIST-named curves are:\r\n", "correct_text": "   The namedCurve field in ECParameters uses object identifiers to name\r\n   well-known curves.  This document publishes curve identifiers for the\r\n   fifteen NIST-recommended curves [FIPS186-3].  Other documents can\r\n|  publish other named curve identifiers.  The NIST named curves are:\r\n                     ^                             ^", "notes": "Location: first paragraph of 2.1.1.1\r\nRationale:\r\na) typo:  s/name curve/named curve/\r\nb) extraneous hyphen (inserted in final publication processing)\r\n   changes semantics in an unfortunate manner; \"NIST-named curves\"\r\n   could be misunderstood as indicating that NIST had named these\r\n   'Named Curves'; \"NIST-recommended named curves\" might have been a\r\n   valid alternative but would have incurred too much word repetition.", "submit_date": "2009-03-16", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1729", "doc-id": "RFC5008", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "      originator MUST be the originatorKey alternative.  The\r\n      originatorKey algorithm field MUST contain the id-ecPublicKey\r\n      object identifier (see Section 3) with NULL parameters.  The\r\n      originatorKey publicKey field MUST contain the message\r\n      originator's ephemeral public key, which is a DER-encoded ECPoint\r\n      (see Section 3).  The ECPoint SHOULD be represented in\r\n      uncompressed form.", "correct_text": "      originator MUST be the originatorKey alternative.  The \r\n      originatorKey algorithm field MUST contain the id-ecPublicKey \r\n      object identifier (see Section 3).  The parameters associated \r\n      with id-ecPublicKey MUST be absent, ECParameters, or NULL. The \r\n      parameters associated with id-ecPublicKey SHOULD be absent or \r\n      ECParameters, and NULL is allowed to support legacy implementations.  \r\n      The originatorKey publicKey field MUST contain the message \r\n      originator's ephemeral public key, which is a DER-encoded ECPoint \r\n      (see Section 3).  The ECPoint SHOULD be represented in uncompressed \r\n      form.", "notes": "This change aligns RFC 5008 with the draft-ietf-smime-3278bis.  The correct parameters for id-ecPublicKey is either absent or ECParameters not NULL.  Retained NULL for backwards compatibility.", "submit_date": "2009-03-16", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1730", "doc-id": "RFC5298", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.2, pg.15", "orig_text": "   Since both LSPs are computed in a single pass, the LSPs can be\r\n|  signaled simultaneously of sequentially according to the preference\r\n   of the head-end LSR.\r\n                           ^^", "correct_text": "   Since both LSPs are computed in a single pass, the LSPs can be\r\n|  signaled simultaneously or sequentially according to the preference\r\n   of the head-end LSR.\r\n                           ^^", "notes": "Distorting typo; keep for Update!", "submit_date": "2009-03-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1731", "doc-id": "RFC5283", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1, Fig.1", "orig_text": "[[ Top part of Figure 1 (page 6): ]]\r\n\r\n                        Area \"B\"\r\n\r\n                 Level 2 / Backbone area\r\n              +--------------------------+\r\n     Area \"A\" |                          |  Area \"C\"\r\n              |                          |\r\n|    Level 1  |                          |  Level 1 / area\r\n              |        P1                |\r\n   +----------+                          +-------------+\r\n", "correct_text": "                        Area \"B\"\r\n\r\n                 Level 2 / Backbone area\r\n              +--------------------------+\r\n     Area \"A\" |                          |  Area \"C\"\r\n              |                          |\r\n|    Level 1  |                          |  Level 1\r\n              |        P1                |\r\n   +----------+                          +-------------+\r\n", "notes": "Rationale: balance the annotation, avoid replicated \"area\"\r\n-- keep for update! --", "submit_date": "2009-03-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1732", "doc-id": "RFC5283", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2, pg.8", "orig_text": "|         [...]  Currently, with most routers implementations, ...\r\n                                            ^", "correct_text": "|         [...]  Currently, with most router implementations, ...", "notes": "Typo/grammar; keep for update!", "submit_date": "2009-03-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1733", "doc-id": "RFC5425", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.1, pg.6", "orig_text": "   o  End-entity certificate matching: The transport sender or receiver\r\n      is configured with information necessary to identify the valid\r\n      end-entity certificates of its authorized peers.  The end-entity\r\n      certificates can be self-signed, and no certification path\r\n      validation is needed.  Implementations MUST support certificate\r\n|     fingerprints in Section 4.2.2 and MAY allow other formats for\r\n      end-entity certificates such as a DER-encoded certificate.  This\r\n      method provides an alternative to a PKI that is simple to deploy\r\n      and still maintains a reasonable level of security.\r\n", "correct_text": "   o  End-entity certificate matching: The transport sender or receiver\r\n      is configured with information necessary to identify the valid\r\n      end-entity certificates of its authorized peers.  The end-entity\r\n      certificates can be self-signed, and no certification path\r\n      validation is needed.  Implementations MUST support certificate\r\n|     fingerprints as specified in Section 4.2.2 and MAY allow other\r\n                   ^^^^^^^^^^^^^ \r\n      formats for end-entity certificates such as a DER-encoded\r\n      certificate.  This method provides an alternative to a PKI that is\r\n      simple to deploy and still maintains a reasonable level of\r\n      security.\r\n", "notes": "Clarification; keep for update!", "submit_date": "2009-03-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1734", "doc-id": "RFC5425", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1, pg.8", "orig_text": "   In the simplest case, the transport sender and receiver are\r\n|  configured with information necessary to identity the valid\r\n   end-entity certificates of its authorized peers.\r\n", "correct_text": "   In the simplest case, the transport sender and receiver are\r\n|  configured with information necessary to identify the valid\r\n   end-entity certificates of its authorized peers.\r\n", "notes": "Typo:   s/identity/identify/ \r\n                ^        ^\r\n(keep for update!)", "submit_date": "2009-03-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5471", "doc-id": "RFC7530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "16.16.5", "orig_text": " o  NFS4ERR_BAD_RECLAIM is returned if the other error conditions do\r\n      not apply and the server has no record of the delegation whose\r\n      reclaim is being attempted.\r\n", "correct_text": " o  NFS4ERR_RECLAIM_BAD is returned if the other error conditions do\r\n      not apply and the server has no record of the delegation whose\r\n      reclaim is being attempted.\r\n", "notes": "The the defined error is NFS4ERR_RECLAIM_BAD\r\n\r\n\r\n---\r\nRFC Editor Note: This also appears in Section 10.2.1. See https://www.rfc-editor.org/errata/eid5472.", "submit_date": "2018-08-18", "submitter_name": "Tigran Mkrtchyan", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-02 22:01:00"}, {"errata_id": "1737", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.8.5.", "orig_text": "           0      1      2      3      4      5      6      7\r\n       +------+------+------+------+------+------+------+------+\r\n       | EOOL | NOP  | SEC  | LSR  |  TS  |E-SEC |CIPSO |  RR  | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n           8      9     10     11     12     13     14     15\r\n       +------+------+------+------+------+------+------+------+\r\n   ... | SID  | SSR  | ZSU  | MTUP | MTUR | FINN | VISA |ENCODE| ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n          16     17     18     19     20     21     22     23\r\n       +------+------+------+------+------+------+------+------+\r\n   ... |IMITD | EIP  |  TR  |ADDEXT|RTRALT| SDB  |NSAPA | DPS  | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n          24     25     26     27     28     29     30     31\r\n       +------+------+------+------+------+------+------+------+\r\n   ... | UMP  |  QS  |   to be assigned by IANA  |  EXP |      |\r\n       +------+------+------+------+------+------+------+------+", "correct_text": "           0      1      2      3      4      5      6      7\r\n       +------+------+------+------+------+------+------+------+\r\n       |  RR  |CIPSO |E-SEC |  TS  | LSR  | SEC  | NOP  | EOOL | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n           8      9     10     11     12     13     14     15\r\n       +------+------+------+------+------+------+------+------+\r\n   ... |ENCODE| VISA | FINN | MTUR | MTUP | ZSU  | SSR  | SID  | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n          16     17     18     19     20     21     22     23\r\n       +------+------+------+------+------+------+------+------+\r\n   ... | DPS  |NSAPA | SDB  |RTRALT|ADDEXT|  TR  | EIP  |IMITD | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n          24     25     26     27     28     29     30     31\r\n       +------+------+------+------+------+------+------+------+\r\n   ... |      |  EXP |   to be assigned by IANA  |  QS  | UMP  |\r\n       +------+------+------+------+------+------+------+------+\r\n", "notes": "The diagram is back to front.", "submit_date": "2009-03-24", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1738", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.8.6.", "orig_text": "              0     1     2     3     4     5     6     7\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n          | Res | FRA1| RH  | FRA0| UNK | Res | HOP | DST |  ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n              8     9    10    11    12    13    14    15\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... | PAY | AH  | ESP |         Reserved            | ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             16    17    18    19    20    21    22    23\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |                  Reserved                     | ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             24    25    26    27    28    29    30    31\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |                  Reserved                     |\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+", "correct_text": "             0     1     2     3     4     5     6     7\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n          | DST | HOP | Res | UNK | FRA0| RH  | FRA1| Res |  ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n              8     9    10    11    12    13    14    15\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |         Reserved            | ESP | AH  | PAY |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             16    17    18    19    20    21    22    23\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |                  Reserved                     | ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             24    25    26    27    28    29    30    31\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |                  Reserved                     |\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+", "notes": "The diagram is back to front.", "submit_date": "2009-03-24", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1739", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.8.8.", "orig_text": "              0     1     2     3     4     5     6     7\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n          |   0 |   1 |   2 |   3 |   4 |   5 |   6 |   7 |  ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n              8     9    10    11    12    13    14    15\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |   8 |   9 |  10 |  11 |  12 |  13 |  14 |  15 |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             16    17    18    19    20    21    22    23\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  16 |  17 |  18 |  19 |  20 |  21 |  22 |  23 |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n                                . . .\r\n\r\n             56    57    58    59    60    61    62    63\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  56 |  57 |  58 |  59 |  60 |  61 |  62 |  63 |\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+", "correct_text": "              0     1     2     3     4     5     6     7\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n          |   7 |   6 |   5 |   4 |   3 |   2 |   1 |   0 |  ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n              8     9    10    11    12    13    14    15\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  15 |  14 |  13 |  12 |  11 |  10 |   9 |   8 |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             16    17    18    19    20    21    22    23\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  23 |  22 |  21 |  20 |  19 |  18 |  17 |  16 |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n                                . . .\r\n\r\n             56    57    58    59    60    61    62    63\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  63 |  62 |  61 |  60 |  59 |  58 |  57 |  56 |\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n", "notes": "The diagram is back to front.", "submit_date": "2009-03-24", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2273", "doc-id": "RFC1633", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.3", "orig_text": "RSVP uses receiver-initiation of rservations [RSVP93b].  A\r\n         receiver is assumed to learn the senders' offered flowspecs by\r\n         a higher-level mechanism (\"out of band\"), it then generates its\r\n         own desired flowspec and propagates it towards the senders,\r\n         making reservations in each router along the way.\r\n", "correct_text": "RSVP uses receiver-initiation of reservations [RSVP93b].  A\r\n         receiver is assumed to learn the senders' offered flowspecs by\r\n         a higher-level mechanism (\"out of band\"), it then generates its\r\n         own desired flowspec and propagates it towards the senders,\r\n         making reservations in each router along the way.\r\n", "notes": "rservations -> reservations", "submit_date": "2010-05-18", "submitter_name": "jonsimchol", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7030", "doc-id": "RFC3797", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Step 2 of section 4 says:\r\n   Order the values from each source from smallest to the largest\r\n   and concatenate them and suffix the result with a \"/\".\r\n\r\nThe \"Resultant Key String\" in section 6, shows the numbers with a period after each number:\r\n  9319./2.5.8.10.12./9.18.26.34.41.45./", "correct_text": "Step 2 of section 4 should say\r\n  Order the values from each source from smallest to largest, append a\r\n  \".\" after each value, and concatenate them and suffix the result\r\n  with a \"/\"", "notes": "Seems easiest to fix the description, otherwise the worked example is wrong.", "submit_date": "2022-07-19", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "2203", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4.2.", "orig_text": "   1. A one-octet Body Length header encodes packet lengths of up to 191\r\n      octets.\r\n\r\n   2. A two-octet Body Length header encodes packet lengths of 192 to\r\n      8383 octets.\r\n\r\n   3. A five-octet Body Length header encodes packet lengths of up to\r\n      4,294,967,295 (0xFFFFFFFF) octets in length.  (This actually\r\n      encodes a four-octet scalar number.)\r\n\r\n   4. When the length of the packet body is not known in advance by the\r\n      issuer, Partial Body Length headers encode a packet of\r\n      indeterminate length, effectively making it a stream.", "correct_text": "   1. A one-octet Body Length header encodes packet body lengths of up\r\n      to 191 octets.\r\n\r\n   2. A two-octet Body Length header encodes packet body lengths of 192\r\n      to 8383 octets.\r\n\r\n   3. A five-octet Body Length header encodes packet body lengths of up\r\n      to 4,294,967,295 (0xFFFFFFFF) octets in length.  (This actually\r\n      encodes a four-octet scalar number.)\r\n\r\n   4. When the length of the packet body is not known in advance by the\r\n      issuer, Partial Body Length headers encode a packet of\r\n      indeterminate length, effectively making it a stream.", "notes": "The packet consists of header and body. The encoded length is the length\r\nof the packet body.\n --VERIFIER NOTES-- \nThe language is clear in the document. The Body Length refers to the length of the body. Colloquially, the document calls this the packet length, but OpenPGP is hardly unique in being a TLV record system in which the length is the length of the value, not of the Tag, Length, and Value.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1740", "doc-id": "RFC1122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "                                                  |       | | | |S| |\r\n                                                  |       | | | |H| |F\r\n                                                  |       | | | |O|M|o\r\n                                                  |       | |S| |U|U|o\r\n                                                  |       | |H| |L|S|t\r\n                                                  |       |M|O| |D|T|n\r\n                                                  |       |U|U|M| | |o\r\n                                                  |       |S|L|A|N|N|t\r\n                                                  |       |T|D|Y|O|O|t\r\nFEATURE                                           |SECTION| | | |T|T|e\r\n--------------------------------------------------|-------|-|-|-|-|-|--\r\n", "correct_text": "                                                  |       | | | |S| |\r\n                                                  |       | | | |H| |\r\n                                                  |       | | | |O|M|F\r\n                                                  |       | |S| |U|U|o\r\n                                                  |       | |H| |L|S|o\r\n                                                  |       |M|O| |D|T|t\r\n                                                  |       |U|U|M| | |n\r\n                                                  |       |S|L|A|N|N|o\r\n                                                  |       |T|D|Y|O|O|t\r\nFEATURE                                           |SECTION| | | |T|T|e\r\n--------------------------------------------------|-------|-|-|-|-|-|--\r\n\r\nSame on section 3.5 and 4.2.5.\r\n", "notes": "Footnote instead of \"Footnotte\" in eighth column.", "submit_date": "2009-03-24", "submitter_name": "Hannes Hennig", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1741", "doc-id": "RFC5498", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "   Action 2:\r\n\r\n      IANA has made the following assignments in the \"PROTOCOL NUMBERS\"\r\n      registry:\r\n\r\n      sub-registry \"WELL KNOWN PORT NUMBERS\"\r\n\r\n      Keyword Decimal Description     References\r\n      ------- ------- -----------     ----------\r\n      manet   138     MANET Protocols [RFC5498]", "correct_text": "   Action 2:\r\n\r\n      IANA has made the following assignments in the \"PROTOCOL NUMBERS\"\r\n      registry:\r\n\r\n      Keyword Decimal Description     References\r\n      ------- ------- -----------     ----------\r\n      manet   138     MANET Protocols [RFC5498]", "notes": "The original text reads, for \"protocol numbers\" that an assignment should be made in the \"well known port numbers\" sub-registry. There appears to be no such sub-registry in the PROTOCOL NUMBERS registry managed by IANA.", "submit_date": "2009-03-24", "submitter_name": "Thomas Clausen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1742", "doc-id": "RFC3261", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "17.1.1.2", "orig_text": "Timer D reflects the amount of time that the server transaction can\r\n   remain in the \"Completed\" state when unreliable transports are used.\r\n", "correct_text": "Timer D reflects the amount of time that the client transaction can\r\n   remain in the \"Completed\" state when unreliable transports are used.\r\n", "notes": "server transaction => client transaction\n --VERIFIER NOTES-- \n   The original text is correct. The value (and reason) for timer D is to reflect what's happening in the server transaction. See the discussion of Timer H that immediately follows the text quoted above.", "submit_date": "2009-03-25", "submitter_name": "Pankaj Jain", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1743", "doc-id": "RFC4385", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4, 4.1, 4.2", "orig_text": "The sequence number mechanism described here uses a circular unsigned\r\n16-bit number space that excludes the value zero.\r\n...\r\no The sequence number that follows 65535 (maximum unsigned 16-bit\r\n  number) is one.\r\n...\r\no If the sequence number on the packet is zero, the sequence\r\n  integrity of the packets cannot be determined.  In this case, the\r\n  received packet is considered to be in order.", "correct_text": "The sequence number mechanism for all PW types except the TDM PWs \r\nSAToP [RFC4553], CESoPSN [RFC5086], and TDMoIP [RFC5087] use a \r\ncircular unsigned 16-bit number space that excludes the value zero. \r\nThe sequence numbers for TDM PWs include the value zero.\r\n...\r\no For all non-TDM PWs the sequence number that follows 65535 \r\n(maximum unsigned 16-bit number) is one.\r\n...\r\no If the sequence number on a non-TDM-PW packet is zero, the sequence\r\n  integrity of the packets cannot be determined.  In this case, the\r\n  received packet is considered to be in order.", "notes": "The fact that the TDM PWs always require sequence number and do not give a zero value special meaning was well-known and documented in the relevant RFCs. However, this was forgotten in this document and has caused confusion to implementers.", "submit_date": "2009-03-26", "submitter_name": "Yaakov (J) Stein", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-04-08 17:14:22"}, {"errata_id": "1744", "doc-id": "RFC3852", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "A recipient independently computes the message digest.  This message\r\ndigest and the signer's public key are used to verify the signature\r\nvalue.  The signer's public key is referenced either by an issuer\r\ndistinguished name along with an issuer-specific serial number or by\r\na subject key identifier that uniquely identifies the certificate\r\ncontaining the public key.  The signer's certificate can be included\r\nin the SignedData certificates field.", "correct_text": "A recipient independently computes the message digest.  This message\r\ndigest and the signer's public key are used to verify the signature\r\nvalue.  The signer's public key is referenced in one of two ways.\r\nIt can be referenced by an issuer distinguished name along with an\r\nissuer-specific serial number to uniquely identify the certificate\r\nthat contains the public key.  Alternatively, it can be referenced\r\nby a subject key identifier, which accommodates both certified and\r\nuncertified public keys.  While not required, the signer's\r\ncertificate can be included in the SignedData certificates field.\r\n", "notes": "The original text seems to indicate that a subjectKeyIdentifier also uniquely identifies a certificate, when in fact no certificate may exist at all. This clarification clarifies some possibly conflicting text from the CMC rfc.", "submit_date": "2009-03-26", "submitter_name": "Jan Vilhuber", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1749", "doc-id": "RFC5491", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.5,pg.20", "orig_text": "     <presence xmlns=\"urn:ietf:params:xml:ns:pidf\"\r\n               xmlns:gp=\"urn:ietf:params:xml:ns:pidf:geopriv10\"\r\n               xmlns:gml=\"http://www.opengis.net/gml\"\r\n               xmlns:gs=\"http://www.opengis.net/pidflo/1.0\"\r\n               entity=\"pres:paul@somecell.example.com\">\r\n       <tuple id=\"arcband\">\r\n         <status>\r\n           <gp:geopriv>\r\n             <gp:location-info>\r\n               <gs:ArcBand srsName=\"urn:ogc:def:crs:EPSG::4326\">\r\n                 <gml:pos>-43.5723 153.21760</gml:pos>\r\n                 <gs:innerRadius uom=\"urn:ogc:def:uom:EPSG::9001\">\r\n                   3594\r\n                 </gs:innerRadius>\r\n                 <gs:outerRadius uom=\"urn:ogc:def:uom:EPSG::9001\">\r\n                   4148\r\n                 </gs:outerRadius>\r\n                 <gs:startAngle uom=\"urn:ogc:def:uom:EPSG::9102\">\r\n                   20\r\n                 </gs:startAngle>\r\n                 <gs:openingAngle uom=\"urn:ogc:def:uom:EPSG::9102\">\r\n|                  20\r\n                 </gs:openingAngle>\r\n               </gs:ArcBand>\r\n             </gp:location-info>\r\n             <gp:usage-rules/>\r\n             <gp:method>TA-NMR</gp:method>\r\n           </gp:geopriv>\r\n         </status>\r\n         <timestamp>2007-06-22T20:57:29Z</timestamp>\r\n       </tuple>\r\n     </presence>\r\n\r\n                 Figure 12: PIDF-LO Containing an Arc Band\r\n\r\n   An important note to make on the arc band is that the center point\r\n|  used in the definition of the shape is not included in resulting\r\n   enclosed area, and that Target may be anywhere in the defined area of\r\n   the arc band.", "correct_text": "     <presence xmlns=\"urn:ietf:params:xml:ns:pidf\"\r\n               xmlns:gp=\"urn:ietf:params:xml:ns:pidf:geopriv10\"\r\n               xmlns:gml=\"http://www.opengis.net/gml\"\r\n               xmlns:gs=\"http://www.opengis.net/pidflo/1.0\"\r\n               entity=\"pres:paul@somecell.example.com\">\r\n       <tuple id=\"arcband\">\r\n         <status>\r\n           <gp:geopriv>\r\n             <gp:location-info>\r\n               <gs:ArcBand srsName=\"urn:ogc:def:crs:EPSG::4326\">\r\n                 <gml:pos>-43.5723 153.21760</gml:pos>\r\n                 <gs:innerRadius uom=\"urn:ogc:def:uom:EPSG::9001\">\r\n                   3594\r\n                 </gs:innerRadius>\r\n                 <gs:outerRadius uom=\"urn:ogc:def:uom:EPSG::9001\">\r\n                   4148\r\n                 </gs:outerRadius>\r\n                 <gs:startAngle uom=\"urn:ogc:def:uom:EPSG::9102\">\r\n                   20\r\n                 </gs:startAngle>\r\n                 <gs:openingAngle uom=\"urn:ogc:def:uom:EPSG::9102\">\r\n|                  120\r\n                 </gs:openingAngle>\r\n               </gs:ArcBand>\r\n             </gp:location-info>\r\n             <gp:usage-rules/>\r\n             <gp:method>TA-NMR</gp:method>\r\n           </gp:geopriv>\r\n         </status>\r\n         <timestamp>2007-06-22T20:57:29Z</timestamp>\r\n       </tuple>\r\n     </presence>\r\n\r\n                 Figure 12: PIDF-LO Containing an Arc Band\r\n\r\n   An important note to make on the arc band is that the center point\r\n|  used in the definition of the shape is not included in the resulting\r\n   enclosed area, and that Target may be anywhere in the defined area of\r\n   the arc band.", "notes": "a)  The openingAngle in Figure 12 does not match the scenario\r\n    depicted in Figure 11 and described in the text on page 19.\r\n    ==>  s/20/120/\r\n\r\nb)  Missing article.\r\n\r\nHint (saving an additional Errata Note):\r\n  In Section 5.2.8 (2nd line on pg.24), another article is missing:\r\n  s/floors of building/floors of a building/", "submit_date": "2009-03-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1745", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix E", "orig_text": "In the paragraph that starts with: \"The above algorithm assumes that all\"\r\n\r\n                                 The algorithm also assumes that no\r\n    network exists having an address equal to another network's\r\n    broadcast address.", "correct_text": "                                 The algorithm also assumes that if\r\n    one of the conflicting networks is of IP host mask, its LSA\r\n    origination is suppressed. The choice of the suppressing algorithm\r\n    again is a local decision. However, the suppressed LSA MUST be\r\n    originated if the conflicting network becomes withdrawn.", "notes": "The current algorithm will derive an unchanged ID\r\n    if one of the conflicting networks is of IP host mask.\r\n    This will cause problems that the algorithm try to solve.\r\n\r\n    On the other hand, the perfect algorithm for\r\n    LSID collision resolution does not exist in\r\n    that a flat address space cannot accommodate\r\n    all of the overlaid supernet/subnet IDs.\r\n    For example, \r\n                 route1 - 10.0.0.0/32\r\n                 route2 - 10.0.0.1/32\r\n                 route3 - 10.0.0.0/31\r\n    There is no way to originate 3 LSAs with distinct LSIDs.\r\n\r\n    Thus though in majority cases, LSID collision even\r\n    with host route is resolvable, the suppressing\r\n    mechanism is still inevitable.\n --VERIFIER NOTES-- \nThis text is a change that should be taken through the working group process, as it seems to modify functionality.", "submit_date": "2009-03-27", "submitter_name": "Wenhu Lu", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1746", "doc-id": "RFC5458", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "[[ at the bottom of page 5 / top of page 6 ]]\r\n\r\n   TS: Transport Stream [ISO-MPEG2].  A method of transmission at the\r\n   MPEG-2 layer using TS Packets; it represents Layer 2 of the ISO/OSI\r\n   reference model.  See also TS Logical Channel and TS Multiplex.\r\n                              ^^^^^^^^^^^^^^^^^^^^^^^\r\n\r\n<< page break >>\r\n\r\n   TS Multiplex: In this document, ...\r\n\r\n", "correct_text": "   TS: Transport Stream [ISO-MPEG2].  A method of transmission at the\r\n   MPEG-2 layer using TS Packets; it represents Layer 2 of the ISO/OSI\r\n   reference model.  See also TS Logical Channel and TS Multiplex.\r\n\r\n   TS Logical Channel: Transport Stream Logical Channel.  In this\r\n   document, this term identifies a channel at the MPEG-2 level\r\n   [ISO-MPEG2].  It exists at level 2 of the ISO/OSI reference model.\r\n   All packets sent over a TS Logical Channel carry the same PID value\r\n   (this value is unique within a specific TS Multiplex).  The term\r\n   \"Stream\" is defined in MPEG-2 [ISO-MPEG2] to describe the content\r\n   carried by a specific TS Logical Channel (see ULE Stream).  Some PID\r\n   values are reserved (by MPEG-2) for specific signalling.  Other\r\n   standards (e.g., ATSC, DVB) also reserve specific PID values.\r\n\r\n   TS Multiplex: In this document, ...\r\n\r\n", "notes": "The quoted keyword explanation for \"TS Logical Channel\" \r\nis missing in Section 2.\r\n\r\nAuthors/Verifiers:\r\n  Please restore the entry and fill in the missing Corrected Text.", "submit_date": "2009-03-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1747", "doc-id": "RFC5458", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2, pg.17", "orig_text": "   [GSE]       TS 102 606, \"Digital Video Broadcasting (DVB); Generic\r\n               Stream Encapsulation (GSE) Protocol, \"European\r\n|              Telecommunication Standards, Institute (ETSI), 2007.\r\n                                          ^^", "correct_text": "   [GSE]       TS 102 606, \"Digital Video Broadcasting (DVB); Generic\r\n               Stream Encapsulation (GSE) Protocol, \"European\r\n|              Telecommunication Standards Institute (ETSI), 2007.\r\n                                          ^", "notes": "Rationale: distorting spurious comma.\r\n\r\nThe immediately preceding entry ('[ETSI-DAT]') is correct\r\nin this respect, but it lacks the publication year.", "submit_date": "2009-03-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1748", "doc-id": "RFC5423", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6, 3rd para", "orig_text": "   Using IANA Considerations [RFC5226] terminology, entries that do not\r\n|  start with \"vnd.\" are allocated by IETF Consensus, while those\r\n   starting with \"vnd.\" are allocated First Come First Served.", "correct_text": "   Using IANA Considerations [RFC5226] terminology, entries that do not\r\n|  start with \"vnd.\" are allocated by IETF Review, while those starting\r\n   with \"vnd.\" are allocated First Come First Served.", "notes": "Rationale:\r\n  BCP 26, RFC 5226, does not define \"IETF Consensus\" any more;\r\n  this term has been functionally replaced by \"IETF Review\".", "submit_date": "2009-03-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1750", "doc-id": "RFC5514", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "The title says:", "orig_text": "IPv6 over Social Networks ", "correct_text": "IPv6 over Anti-Social Networks ", "notes": " --VERIFIER NOTES-- \r\nThe body of 5514 is about communicating over Social Networks;\r\nits title doesn't need to be changed.", "submit_date": "2009-04-01", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2274", "doc-id": "RFC5857", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1, pg.4", "orig_text": "[[ first paragraph on page 4: ]]\r\n \r\n  A new Notify Message Type value, denoted ROHC_SUPPORTED, indicates\r\n   that the Notify payload is conveying ROHC channel parameters (Section\r\n|  4).", "correct_text": "   A new Notify Message Type value, denoted ROHC_SUPPORTED, indicates\r\n   that the Notify payload is conveying ROHC channel parameters (Section\r\n|  3.1.2).", "notes": "Rationale:\r\n  Section 4 of RFC 5857 is \"Security Considerations\"; the various ROHC\r\n  parameters that can/must be signaled via this Notify payload are\r\n  described in Section 3.1.2 of RFC 5857.", "submit_date": "2010-05-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2275", "doc-id": "RFC5857", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.2, pg.8", "orig_text": "[[ first paragraph of description for ROHC_ICV_LEN, on mid-page 8: ]]\r\n\r\n      [...]\r\n      If no ROHC_ICV_LEN attribute is sent at all or if the ROHC_ICV_LEN\r\n|     is larger than the length of the ICV of selected algorithm, then\r\n      the full ICV length as specified by the ROHC_INTEG algorithm MUST\r\n      be sent.", "correct_text": "      [...]\r\n      If no ROHC_ICV_LEN attribute is sent at all or if the ROHC_ICV_LEN\r\n|     is larger than the length of the ICV of the selected algorithm,\r\n      then the full ICV length as specified by the ROHC_INTEG algorithm\r\n      MUST be sent.", "notes": "Rationale: missing definite article", "submit_date": "2010-05-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2538", "doc-id": "RFC6026", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1, pg.6", "orig_text": "[[ last paragraph on page 6: ]]\r\n\r\n   Figures 1 and 2 show the parts of the INVITE server state machine\r\n   that have changed.  The entire new INVITE server state machine is\r\n|  shown in Figure 5.", "correct_text": "   Figures 1 and 2 show the parts of the INVITE server state machine\r\n   that have changed.  The entire new INVITE server state machine is\r\n|  shown in Figure 7.", "notes": "- qualified as Technical because of importance of correct pointer;\r\n- apparently this detail has been missed when the Figures in the\r\n  document have been renumbered (#5 --> #7 and #4 --> #5) to achieve\r\n  the relationship to RFC 3261 explained in Section 8 (top of page 11):\r\n\r\n                                         [...]  This document\r\n   intentionally does not contain a Figure 4 or Figure 6 so that the\r\n   labels for Figures 5 and 7 are identical to the labels of the figures\r\n   they are replacing in RFC 3261.", "submit_date": "2010-09-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1751", "doc-id": "RFC3061", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "   o  0.9.2342.19200300.100.4 - Object ID's used in the directory pilot\r\n      project to identify X.500 Object Classes.  Mostly defined in RFC\r\n      1274.\r\n\r\n   This document specifies the \"oid\" URN namespace [2].  This namespace\r\n   is for encoding an Object Identifier as specified in ASN.1 [3] as a\r\n   URI.  RFC 3001 [1] is obsoleted by this specification.\r\n\r\n   The namespace specification is for a formal namespace.", "correct_text": "   o  0.9.2342.19200300.100.4 - Object ID's used in the directory pilot\r\n      project to identify X.500 Object Classes.  Mostly defined in RFC\r\n      1274.  RFC 1274 is now obsolete.  The usage description of these \r\n      identifiers now appears in RFC 4524 and the relevant registry is \r\n      defined in RFC 4520.\r\n\r\n   This document specifies the \"oid\" URN namespace [2].  This namespace\r\n   is for encoding an Object Identifier as specified in ASN.1 [3] as a\r\n   URI.  RFC 3001 [1] is obsoleted by this specification.\r\n\r\n   The namespace specification is for a formal namespace.\r\n\r\n   A complete database of OIDs appears at http://www.oid-info.com/", "notes": "This suggested change is not substantive and makes no change to the spec itself.  Instead, it supplies some additional, up-to-date, information that might be helpful to the reader and is intended to act as a placeholder to record that information for any future revision or update to 3061.\r\n\r\nNote to RFC Editor: the source for this document is listed as \"legacy\", perhaps because it was published as Informational.  However, it is the definition source for a Formal URN Namespace and those namespaces require IETF consensus action (see http://www.iana.org/assignments/urn-namespaces/urn-namespaces.xhtml), so the erratum should probably be processed as if it were a standards-track document.", "submit_date": "2009-04-02", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1752", "doc-id": "RFC5180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "The IANA has allocated 2001:0200::/48 for IPv6 benchmarking, which\r\nis a 48-bit prefix from the RFC 4773 pool.", "correct_text": "The IANA has assigned 2001:0002::/48 for IPv6 benchmarking, which\r\nis a 48-bit prefix from the RFC 4773 pool.", "notes": "There was an error in the assigned prefix.  This should have been 2001:0002::/48.  The previous prefix is actually NOT part of the RFC 4773 pool.", "submit_date": "2009-04-02", "submitter_name": "Michelle Cotton", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1753", "doc-id": "RFC2229", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   dqstring    =  <\"> *(dqtext/quoted-pair) <\">\r\n   dqtext      =  <any CHAR except <\">, \"\\\", and CTLs>\r\n   sqstring    =  <'> *(dqtext/quoted-pair) <'>\r\n   sqtext      =  <any CHAR except <'>, \"\\\", and CTLs>\r\n   quoted-pair =  \"\\\" CHAR\r\n", "correct_text": "   dqstring    =  <\"> *(dqtext/quoted-pair) <\">\r\n   dqtext      =  <any CHAR except <\">, \"\\\", and CTLs>\r\n   sqstring    =  <'> *(sqtext/quoted-pair) <'>\r\n   sqtext      =  <any CHAR except <'>, \"\\\", and CTLs>\r\n   quoted-pair =  \"\\\" CHAR\r\n", "notes": "As it stands, the original specification would allow an sqstring of 'Bob's Garage' to be valid when that is not intended. [Approver Note: this appears to be a copy-and-paste error.]", "submit_date": "2009-04-02", "submitter_name": "Matthew Luckie", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1754", "doc-id": "RFC5404", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "   [ITU-T-G719]  ITU-T, \"Specification : ITU-T G.719 extension for 20\r\n                 kHz fullband audio\", April 2008.", "correct_text": "[ITU-T-G719]  ITU-T, \"Specification: ITU-T G.719 Low-complexity, full-band audio coding for high-quality, conversational applications\", June 2008.", "notes": "Steven Botzko informed me that the Reference title is not correct, nor is the publication date for the G.719 reference. However, there should be little issues with finding the correct reference based on Recommendation number.", "submit_date": "2009-04-03", "submitter_name": "Magnus Westerlund", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1755", "doc-id": "RFC1524", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B", "orig_text": "         # Mailcap file for Bellcore lab 214.\r\n         #\r\n         # The next line sends \"richtext\" to the richtext\r\n         program\r\n         text/richtext; richtext %s; copiousoutput\r\n         #\r\n         # Next, basic u-law audio\r\n         audio/*; showaudio; test=/usr/local/bin/hasaudio\r\n         #\r\n         # Next, use the xview program to handle several image\r\n         formats\r\n         image/*; xview %s; test=/usr/local/bin/RunningX\r\n         #\r\n         # The ATOMICMAIL interpreter uses curses, so needs a\r\n         terminal\r\n         application/atomicmail; /usr/local/bin/atomicmail %s; \\\r\n             needsterminal\r\n         #\r\n         # The next line handles Andrew format,\r\n         #   if ez and ezview are installed\r\n         x-be2; /usr/andrew/bin/ezview %s; \\\r\n            print=/usr/andrew/bin/ezprint %s ; \\\r\n            compose=/usr/andrew/bin/ez -d %s \\;\r\n            edit=/usr/andrew/bin/ez -d %s; \\;\r\n            copiousoutput\r\n         #\r\n         # The next silly example demonstrates the use of\r\n         quoting\r\n         application/*; echo \"This is \\\"%t\\\" but \\\r\n            is 50 \\% Greek to me\" \\; cat %s; copiousoutput\r\n", "correct_text": "         # Mailcap file for Bellcore lab 214.\r\n         #\r\n         # The next line sends \"richtext\" to the richtext\r\n         # program\r\n         text/richtext; richtext %s; copiousoutput\r\n         #\r\n         # Next, basic u-law audio\r\n         audio/*; showaudio; test=/usr/local/bin/hasaudio\r\n         #\r\n         # Next, use the xview program to handle several image\r\n         # formats\r\n         image/*; xview %s; test=/usr/local/bin/RunningX\r\n         #\r\n         # The ATOMICMAIL interpreter uses curses, so needs a\r\n         # terminal\r\n         application/atomicmail; /usr/local/bin/atomicmail %s; \\\r\n             needsterminal\r\n         #\r\n         # The next line handles Andrew format,\r\n         #   if ez and ezview are installed\r\n         x-be2; /usr/andrew/bin/ezview %s; \\\r\n            print=/usr/andrew/bin/ezprint %s ; \\\r\n            compose=/usr/andrew/bin/ez -d %s \\;\r\n            edit=/usr/andrew/bin/ez -d %s; \\;\r\n            copiousoutput\r\n         #\r\n         # The next silly example demonstrates the use of\r\n         # quoting\r\n         application/*; echo \"This is \\\"%t\\\" but \\\r\n            is 50 \\% Greek to me\" \\; cat %s; copiousoutput\r\n", "notes": "Some comment lines in the example termcap file appear to have improperly reformatted to fit the 78-character limit; the needed \"# \" was ommitted.", "submit_date": "2009-04-03", "submitter_name": "Samuel Bronson", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1756", "doc-id": "RFC3852", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1.2", "orig_text": "   The SignatureAlgorithmIdentifier type identifies a signature\r\n   algorithm.  Examples include RSA, DSA, and ECDSA.", "correct_text": "   The SignatureAlgorithmIdentifier type identifies a signature\r\n   algorithm, and it can also identify a message digest alforithm.\r\n   Examples include RSA, DSA, DSA with SHA-1, ECDSA, and ECDSA with\r\n   SHA-256.", "notes": "Some people have taken the original text to mean that compound signature algorithm identifiers should not be used.  This is not the case.  Section 12.2 of RFC 2630 (the grandfather of RFC 3852) clearly requires the implementation of id-dsa-with-sha1, which is a compound signature algorithm.", "submit_date": "2009-04-04", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1757", "doc-id": "RFC4518", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6.1", "orig_text": "Otherwise, the following steps are taken:", "correct_text": "Otherwise, the following steps are taken:\r\n\r\n   - Any inner (non-empty) sequence of space characters is replaced\r\n     with exactly two SPACE characters;", "notes": "", "submit_date": "2009-04-05", "submitter_name": "Steven Legg", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1758", "doc-id": "RFC4518", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6.1", "orig_text": "As an any or final substring,\r\nthe same input would result in \"foo<SPACE>bar<SPACE>\".", "correct_text": "As an any or final substring,\r\nthe same input would result in \"foo<SPACE><SPACE>bar<SPACE>\".", "notes": "", "submit_date": "2009-04-05", "submitter_name": "Steven Legg", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3253", "doc-id": "RFC2560", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "For this service to be effective, certificate using systems must connect to\r\nthe certificate status service provider. ", "correct_text": "For this service to be effective, certificate-using systems must connect to\r\nthe certificate status service provider. ", "notes": "(Alternatively, that could be \"..., systems using certificates must ...\"", "submit_date": "2012-06-11", "submitter_name": "Daniel Barclay", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1761", "doc-id": "RFC4519", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.10", "orig_text": "3.10.  'organizationalRole'\r\n\r\n   The 'organizationalRole' object class is the basis of an entry that\r\n   represents a job, function, or position in an organization.\r\n   (Source: X.521 [X.521])\r\n\r\n      ( 2.5.6.8 NAME 'organizationalRole'\r\n         SUP top\r\n         STRUCTURAL\r\n         MUST cn\r\n         MAY ( x121Address $ registeredAddress $ destinationIndicator $\r\n               preferredDeliveryMethod $ telexNumber $\r\n               teletexTerminalIdentifier $ telephoneNumber $\r\n               internationalISDNNumber $ facsimileTelephoneNumber $\r\n               seeAlso $ roleOccupant $ preferredDeliveryMethod $\r\n               street $ postOfficeBox $ postalCode $ postalAddress $\r\n               physicalDeliveryOfficeName $ ou $ st $ l $\r\n               description ) )", "correct_text": "3.10.  'organizationalRole'\r\n\r\n   The 'organizationalRole' object class is the basis of an entry that\r\n   represents a job, function, or position in an organization.\r\n   (Source: X.521 [X.521])\r\n\r\n      ( 2.5.6.8 NAME 'organizationalRole'\r\n         SUP top\r\n         STRUCTURAL\r\n         MUST cn\r\n         MAY ( x121Address $ registeredAddress $ destinationIndicator $\r\n               preferredDeliveryMethod $ telexNumber $\r\n               teletexTerminalIdentifier $ telephoneNumber $\r\n               internationalISDNNumber $ facsimileTelephoneNumber $\r\n               seeAlso $ roleOccupant $ \r\n               street $ postOfficeBox $ postalCode $ postalAddress $\r\n               physicalDeliveryOfficeName $ ou $ st $ l $\r\n               description ) )", "notes": "Any object classes that include the preferredDeliveryMethod twice should be either redefined, by including it only once, OR provide an explicit reference about how it should be interpreted by the implementations; such examples are:\r\norganizationalRole (3.10)\r\nresidentialPerson (3.13)\r\n\r\nNote that this error has been affecting OpenLDAP implementations at least \r\nsince year 2002; with the side-effect that imported ldif data would disappear:\r\nhttp://www.openldap.org/lists/ietf-ldapbis/200207/msg00002.html\r\nIt is surprising that it has remained unaddressed during so many years.\r\n\r\nAlso, Kurt Zeilinga has proposed to adopt the following (sufficient) rule:\r\n\"that implementations SHOULD be (and are) ignoring the redundant listing\".\n --VERIFIER NOTES-- \nKurt Zeilenga said:\r\n\r\nThis issue was raised to the LDAPbis WG at the time it was working on the I-D which became RFC 4519 yet RFC 4519 did not include the suggested change.   Simply put, there was insufficient support of the suggested change at that time.\r\n\r\nThe change is also bad in that in removes one of the examples of multiple listed attributes, a rarely used but still valid (for historical reasons) of X.500/LDAP schema descriptions, and hence may lead to implementations not supporting this feature and by doing so causing interop problems.\r\n", "submit_date": "2009-04-10", "submitter_name": "Fotis Georgatos", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1762", "doc-id": "RFC5441", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15.3", "orig_text": "   IANA has allocated the following allocation value:\r\n\r\n      Bit number  Meaning                  Reference\r\n         4        BRPC path computation    This document\r\n                  chain unavailable\r\n", "correct_text": "   IANA has allocated the following allocation value:\r\n\r\n      Bit number  Meaning                  Reference\r\n         28       BRPC path computation    This document\r\n                  chain unavailable\r\n", "notes": "The bit number is 28.\r\n\r\nThe error was noted by Pearl Liang of IANA.", "submit_date": "2009-04-14", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": "Ross Callon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1763", "doc-id": "RFC2142", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "Most organizations do not need to support the full set of mailbox names defined\r\nhere, since not every organization will implement the all of the associated\r\n                                                  ^^^\r\nservices.", "correct_text": "Most organizations do not need to support the full set of mailbox names defined\r\nhere, since not every organization will implement all of the associated services.", "notes": "", "submit_date": "2009-04-15", "submitter_name": "Nick Levinson", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1764", "doc-id": "RFC2142", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1 & 2", "orig_text": "top level domain", "correct_text": "organization's principal domain name", "notes": "1. The phrase \"top level domain\" seems to mean 'second-level and top level domains together', and perhaps 'third- to top level domains together' in cases like <example.co.uk>. It is erroneous now that _top level domain_ (_TLD_) is specifically only what comes after the last dot in a domain, and nonreserved TLDs are so registered at IANA.org.\r\n\r\n2. I would rather someone else propose replacement phrasing.\r\n\r\n3. This is submitted 2009-04-16.\r\n\r\nEDITOR'S NOTE (2010-09-15): This matter was discussed on the app-discuss and dnsext mailing lists, and consensus emerged on the phrase \"organization's principal domain name\". --Peter Saint-Andre", "submit_date": "2009-04-15", "submitter_name": "Nick Levinson", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1766", "doc-id": "RFC5322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4.1", "orig_text": "If the\r\nstring can be represented as a dot-atom (that is, it contains no\r\ncharacters other than atext characters or \".\" surrounded by atext\r\ncharacters), then the dot-atom form SHOULD be used and the quoted-\r\nstring form SHOULD NOT be used.", "correct_text": "If the\r\nstring can be represented as a dot-atom (that is, it contains no \r\ncharacters other than atext characters or one or more of \".\" \r\nsurrounded by atext characters), then the dot-atom form SHOULD \r\nbe used and the quoted-string form SHOULD NOT be used.", "notes": "Based on sec. 3.2.3 (\"dot-atom = [CFWS] dot-atom-text [CFWS]\" (brackets so in original) & \"dot-atom-text = 1*atext *('.' 1*atext)\") and on appx. A.1.2 (the example \"john.q.public@example.com\").", "submit_date": "2009-04-16", "submitter_name": "Nick Levinson", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1767", "doc-id": "RFC4550", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4.1, 2.4.2", "orig_text": "S: a002 OK URLFETCH completed\r\nI: a003 LOGOUT\r\nS: * BYE See you later\r\nS: a003 OK Logout successful", "correct_text": "I: a002 OK URLFETCH completed\r\nS: a003 LOGOUT\r\nI: * BYE See you later\r\nI: a003 OK Logout successful", "notes": "According to section 1.1 (Conventions Used in This Document):\r\n   In examples, \"M:\", \"I:\", and \"S:\" indicate lines sent by the client\r\n   messaging user agent, IMAP e-mail server, and SMTP submit server,\r\n   respectively.\r\n\r\nThe exact same error appears in both sections 2.4.1 and 2.4.2.\r\n", "submit_date": "2009-04-16", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1768", "doc-id": "RFC5121", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.3", "orig_text": "The Len parameter has a size of 11 bits.\r\nHence, the total MAC PDU size is 2048 bytes.", "correct_text": "The Len parameter has a size of 11 bits.\r\nHence, the total MAC PDU size is 2047 bytes.", "notes": "There are 11 bits for indicating the size of the MAC PDU, thus according to me this indicates a maximum size of (binary) 111 1111 1111, which equals (decimal) 2047 (2**11 - 1).\r\nThe maximum of 2047 is also cited in the book \"Fundamentals of WiMAX\" by Jeffrey G. Andrews, Arunabha Ghosh and Rias Muhamed on page 48: \"The maximum frame length is 2,047 bytes, which is represented by 11 bits in the GMH.\"", "submit_date": "2009-04-23", "submitter_name": "Daan Pareit", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4414", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.10", "orig_text": "      The UNTIL rule part defines a DATE or DATE-TIME value that bounds\r\n      the recurrence rule in an inclusive manner.  If the value\r\n      specified by UNTIL is synchronized with the specified recurrence,\r\n      this DATE or DATE-TIME becomes the last instance of the\r\n      recurrence.  The value of the UNTIL rule part MUST have the same\r\n      value type as the \"DTSTART\" property.  Furthermore, if the\r\n      \"DTSTART\" property is specified as a date with local time, then\r\n      the UNTIL rule part MUST also be specified as a date with local\r\n      time.  If the \"DTSTART\" property is specified as a date with UTC\r\n      time or a date with local time and time zone reference, then the\r\n      UNTIL rule part MUST be specified as a date with UTC time.  In the\r\n      case of the \"STANDARD\" and \"DAYLIGHT\" sub-components the UNTIL\r\n      rule part MUST always be specified as a date with UTC time.  If\r\n      specified as a DATE-TIME value, then it MUST be specified in a UTC\r\n      time format.  If not present, and the COUNT rule part is also not\r\n      present, the \"RRULE\" is considered to repeat forever.", "correct_text": "      The UNTIL rule part defines a DATE or DATE-TIME value that bounds\r\n      the recurrence rule in an inclusive manner.  If the value\r\n      specified by UNTIL is synchronized with the specified recurrence,\r\n      this DATE or DATE-TIME becomes the last instance of the\r\n      recurrence.  The value of the UNTIL rule part MUST have the same\r\n      value type as the \"DTSTART\" property.  Furthermore, if the\r\n      \"DTSTART\" property is specified as a date with local time, then\r\n      the UNTIL rule part MUST also be specified as a date with local\r\n      time.  If the \"DTSTART\" property is specified as a date with UTC\r\n      time or a date with local time and time zone reference, then the\r\n      UNTIL rule part MUST be specified as a date with UTC time.  In the\r\n      case of the \"STANDARD\" and \"DAYLIGHT\" sub-components the UNTIL\r\n      rule part MUST always be specified as a date with UTC time.\r\n      If not present, and the COUNT rule part is also not\r\n      present, the \"RRULE\" is considered to repeat forever.", "notes": "The following sentence from RFC 2445 should have been removed from the text.\r\n\r\n      If\r\n      specified as a DATE-TIME value, then it MUST be specified in a UTC\r\n      time format.", "submit_date": "2015-07-10", "submitter_name": "Joseph Silvestre", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1769", "doc-id": "RFC804", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Index", "orig_text": "CCITT draft recommendation T.4. International Telegraph and\r\nTelephone Consultative Committee of the International\r\nTelecommunication Union. January 1981.  (Format: TXT=17025 bytes)\r\n(Status: UNKNOWN)", "correct_text": "CCITT draft recommendation T.4. International Telegraph and\r\nTelephone Consultative Committee of the International\r\nTelecommunication Union. January 1981.  (Format: TXT=17025 bytes)\r\n(Status: Obsoleted by ITU Recommendation T.4: Standardization of Group 3 facsimile terminals for document transmission.  Available from ITU website\r\n(http://www.itu.int/) by searching for ITU-T Recommendations, T-series, \r\nT.4.)", "notes": "This document is not online.  Even if one could find a copy and scan it, doing so would probably violate various ITU copyrights and, because it was a draft version, relevant agreements.  The changes above provide the reader with a real title for the document and pointers to current and earlier published versions.\r\nThe actual URL for the information on this document (including links to download the various versions) is http://www.itu.int/rec/T-REC-T.4/en, but the above search instructions are long-term stable while the URL may not be.", "submit_date": "2009-04-29", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1770", "doc-id": "RFC4430", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  Section 4.2.1 (page 17)\r\n\r\n(1a)  typo (word omission)\r\n\r\nThe final sentence in the 3rd paragraph of Section 4.2.1 says:\r\n\r\n                                                            [...].  A\r\n   principal name is case sensitive, and \"fqdn\" part MUST be lowercase\r\n   as described in [KERBEROS].\r\n\r\nIt should say:\r\n                                        vvvvv\r\n                                                            [...].  A\r\n|  principal name is case sensitive, and the \"fqdn\" part MUST be\r\n   lowercase as described in [KERBEROS].\r\n\r\n(1b)  see (0) above\r\n\r\nThe subsequent text, above Figure 7,\r\n\r\n   vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  The value field of this payload has the following format:\r\n\r\nshould say:\r\n\r\n   vvvvvvvvvvvv\r\n|  This payload has the following format:\r\n\r\n\r\n(2)  Section 4.2.2 (page 18)\r\n\r\nLike (1b) above, the text above Figure 8,\r\n\r\n   vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  The value field of this payload has the following format:\r\n\r\nshould say:\r\n\r\n   vvvvvvvvvvvv\r\n|  This payload has the following format:\r\n\r\n\r\n(3)  Section 4.2.3 (page 19)\r\n\r\nLike (1b) above, the text above Figure 9,\r\n\r\n   vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  The value field of this payload has the following format:\r\n\r\nshould say:\r\n\r\n   vvvvvvvvvvvv\r\n|  This payload has the following format:\r\n\r\n\r\n(4)  Section 4.2.4 (page 20)\r\n\r\n(4a) Like (1b) above, the text above Figure 10,\r\n\r\n   vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  The value field of this payload has the following format:\r\n\r\nshould say:\r\n\r\n   vvvvvvvvvvvv\r\n|  This payload has the following format:\r\n\r\n(4b) The second bullet of the subsequent explanations,\r\n\r\n     o    PrincName -- The name of the principal that the initiator\r\n          wants to communicate with.  It is assumed that the initiator\r\n          knows the responder's principal name (including the realm\r\n|         name) in the same way as the non-User-to-User case.  The TGT\r\n          returned MUST NOT be an inter-realm TGT and its cname and\r\n          crealm MUST match the requested principal name, so that the\r\n          initiator can rendezvous with the responder at the responder's\r\n          realm.\r\n\r\nshould say (filling in a missing word):\r\n\r\n     o    PrincName -- The name of the principal that the initiator\r\n          wants to communicate with.  It is assumed that the initiator\r\n          knows the responder's principal name (including the realm\r\n|         name) in the same way as in the non-User-to-User case.  The\r\n          TGT returned MUST NOT be an inter-realm TGT and its cname and\r\n          crealm MUST match the requested principal name, so that the\r\n          initiator can rendezvous with the responder at the responder's\r\n          realm.\r\n\r\n\r\n(5)  Section 4.2.5 (page 21)\r\n\r\nLike (1b) above, the text above Figure 11,\r\n\r\n   vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  The value field of this payload contains the TGT requested in a\r\n   previous KINK_TGT_REQ payload of a GETTGT command.\r\n\r\nshould say:\r\n\r\n   vvvvvvvvvvvv\r\n|  This payload contains the TGT requested in a previous KINK_TGT_REQ\r\n   payload of a GETTGT command.\r\n\r\n\r\n(6)  Section 4.2.6 (page 21)\r\n\r\nLike (1b) above, the text above Figure 12,\r\n\r\n   vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  The value field of this payload has the following format:\r\n\r\nshould say:\r\n\r\n   vvvvvvvvvvvv\r\n|  This payload has the following format:\r\n\r\n[see errata ID 93 for item 7]\r\n\r\n(8)  Section 4.2.8\r\n\r\nThe text of this section twice, and redundantly, specifies\r\non page 23 :\r\n\r\n                          [...].  The error code is in network order.\r\n\r\nand on page 24 :\r\n\r\n     o    ErrorCode -- One of the following values in the network byte\r\n          order:\r\n          [...]\r\n\r\nThis looks like a big exception.  But in fact, that is the general\r\nrule as set in the first sentence of Section 4, on page 13!\r\nAt best, the former sentence should be deleted, and the latter\r\nbullet changed to say:\r\n\r\n     o    ErrorCode -- One of the following values:\r\n          [...]\r\n\r\nIf it is preferred to not delete the former sentence and the latter\r\nclause, at least the \"the\" in \"in the network byte order\" should be\r\ndeleted.\r\n\r\n\r\n(9)  further word omissions in running text\r\n\r\n(9a) The first paragraph of Section 6.6, on page 32, says:\r\n\r\n   A GETTGT command is only used to carry a Kerberos TGT and is not\r\n   related to SA management; therefore, it contains only KINK_TGT_REQ\r\n   payload and does not contain any DOI-specific payload.\r\n\r\nIt should say:\r\n\r\n   A GETTGT command is only used to carry a Kerberos TGT and is not\r\n|  related to SA management; therefore, it contains only a KINK_TGT_REQ\r\n   payload and does not contain any DOI-specific payload.\r\n\r\n(9b) The first paragraph of Section 7, on page 32, says:\r\n\r\n   KINK uses the same key derivation mechanisms defined in section 5.5\r\n   of [IKE], which is:\r\n\r\nIt should say:\r\n                                               vvvv\r\n|  KINK uses the same key derivation mechanisms as defined in section\r\n   5.5 of [IKE], which is:", "correct_text": "", "notes": "[split everything except item 7 away from errata ID 93]\r\n\r\n(0)  Rationale for most non-trivial issues listed below:\r\n==============\r\n\r\nThe initial text of Section 4.2 (on page 16) says:\r\n\r\n   Immediately following the header, there is a list of\r\n   Type/Length/Value (TLV) payloads.  There can be any number of\r\n   payloads following the header.  Each payload MUST begin with a\r\n   payload header.  Each payload header is built on the generic payload\r\n   header.  Any data immediately follows the generic header.  Payloads\r\n   are all implicitly aligned to 4-octet boundaries, though the payload\r\n   length field MUST accurately reflect the actual number of octets in\r\n   the payload.\r\n\r\n     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +---------------+---------------+---------------+---------------+\r\n    | Next Payload  |   RESERVED    |         Payload Length        |\r\n    +---------------+---------------+---------------+---------------+\r\n    |                      value (variable)                         |\r\n    +---------------+---------------+---------------+---------------+\r\n\r\n                    Figure 6:  Format of a KINK Payload\r\n\r\n   Fields:\r\n\r\n     [...]\r\n\r\n\r\nTo sum up: a KINK payload consists of a (generic) payload header\r\nand the (payload) value field.\r\n\r\nUnfortunately, the subsequent sub-sections 4.2.* inadvertently\r\nseem to pretend that there exists another copy of the payload\r\nheader within the payload value, which certainly was not intended.\r\n\r\nIt was the intent of the authors to always show and describe the\r\nfull payloads in these sections.\r\nTherefore, the repeated text stating to the contrary that it will\r\nshow the payload *value*, has to be changed.\r\n\r\n\r\nI use change bars ('|' in column 1) and (occasionally) up/down\r\npointing marker lines to emphasize the location of textual issues\r\nin the snippits from the RFC text and/or the proposed modified text.\r\nModified text has been adjusted according to RFC formatting policy.\r\n\r\nItems (1)..(7) have been revised on the author's comments received.\r\nIn particular, item (7) has been revised substantially to achieve\r\na selfconsistent presentation in accordance with the author's intent.\r\nI propose to incorporate the above items (1)..(7) and (9) directly\r\ninto an RFC Errata Note.\r\nItem (8), and perhaps item (7) as well, still needs judgement from\r\nthe RFC authors.\r\n\r\n------------------------------------------------\r\nERRATA RESPONSE:\r\nFrom: Unknown Name (though from this email: Shouichi.Sakane@jp.yokogawa.com)\r\nCould someone verify 1a, 4b and 9b ?\r\n\r\n\r\nfrom pending", "submit_date": "2006-07-06", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1878", "doc-id": "RFC5730", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "a)  [[ global ]]\r\n\r\n   RFC 4646\r\n\r\nb)  [[ global ]]\r\n\r\n   [RFC4646]\r\n\r\nc)  [[ Section 9.1 ]]\r\n\r\n   [RFC4646]  Phillips, A. and M. Davis, \"Tags for Identifying\r\n              Languages\", BCP 47, RFC 4646, September 2006.", "correct_text": "a)\r\n\r\n   RFC 5646\r\n\r\nb)\r\n\r\n   [RFC5646]\r\n\r\nc)\r\n\r\n   [RFC5646]  Phillips, A., Ed., and M. Davis, Ed., \"Tags for\r\n              Identifying Languages\", BCP 47, RFC 5646,\r\n              September 2009.", "notes": "Unfortunately, RFC 5730 has been published just three days before\r\nRFC 5646, which has obsoleted RFC 4646 and performed a significant\r\nrevision of the Language Tag syntax and IANA registry.\r\n\r\nI hope that it was not intended to tie EPP to the old Language Tag\r\narchitecture.  The new one is much better aligned with ISO, the UN\r\nstatistics department, and Unicode, and will be generally adopted.\r\n\r\nThe intent of this Errata Note is to give the author and the IESG\r\nan opportunity to confirm that EPP shall not be tied to the old\r\nLangTag architecture and the now obsolete RFC 4646.", "submit_date": "2009-09-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1879", "doc-id": "RFC3161", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6", "orig_text": "Upon receiving a valid request, the server MUST respond with either a valid response with content type application/timestamp-response or with an HTTP error.\r\n ", "correct_text": "Upon receiving a valid request, the server MUST respond with either a valid response with content type application/timestamp-reply or with an HTTP error.", "notes": "\"application/timestamp-reply\" are used in the rest parts of RFC 3161 (4 occurencies).  Furthermore, known existing implementations are using \r\n\"application/timestamp-reply\".", "submit_date": "2009-09-15", "submitter_name": "Nick Pope", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1880", "doc-id": "RFC3633", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "   If a delegating router receives an IA_PD with T1 greater than T2, and\r\n   both T1 and T2 are greater than 0, the delegating router ignores the\r\n   invalid values of T1 and T2 and processes the IA_PD as though the\r\n   delegating router had set T1 and T2 to 0.", "correct_text": "   If a delegating router receives an IA_PD with T1 greater than T2, and\r\n   both T1 and T2 are greater than 0, the delegating router ignores the\r\n   invalid values of T1 and T2 and processes the IA_PD as though the\r\n   requesting router had set T1 and T2 to 0.", "notes": "", "submit_date": "2009-09-15", "submitter_name": "Yukiyo Akisada", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1882", "doc-id": "RFC3811", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "MplsLabel", "orig_text": "              * The Generalized-MPLS (GMPLS) label contains a\r\n                value greater than 2^24-1 and used in GMPLS\r\n                as defined in [RFC3471].\"\r\n", "correct_text": "              * The Generalized-MPLS (GMPLS) label may contain\r\n                a value greater than 2^24-1 and is used in\r\n                GMPLS as defined in [RFC3471].\"\r\n", "notes": "The orriginal text implied that GMPLS labels could only be greater than\r\n(2^24 - 1). In fact all label alues are supported.", "submit_date": "2009-09-16", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4415", "doc-id": "RFC6428", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "text", "orig_text": "bfd.MinRxInterval", "correct_text": "bfd.RequiredMinRxInterval", "notes": "Throughout the text document refers to bfd.MinRxInterval even though RFC 5880 refers to this state variable as bfd.RequiredMinRxInterval.", "submit_date": "2015-07-14", "submitter_name": "Greg Mirsky", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4416", "doc-id": "RFC6933", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "battery (14)", "correct_text": "battery(14)", "notes": "", "submit_date": "2015-07-16", "submitter_name": "Amanda Baber", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5450", "doc-id": "RFC3315", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "18.2.5", "orig_text": "   The server MUST include a Server Identifier option containing the\r\n   server's DUID in the Reply message.  If the client included a Client\r\n   Identification option in the Information-request message, the server\r\n   copies that option to the Reply message.\r\n\r\n", "correct_text": "   The server MUST include a Server Identifier option containing the\r\n   server's DUID in the Reply message.  If the client included a Client\r\n   Identifier option in the Information-request message, the server\r\n   copies that option to the Reply message.\r\n\r\n", "notes": "Incorrect option name\r\n\r\n-- Verifier note --\r\nIndeed, minor typo in \"Client Identification\" rather than \"Client Identifier\".", "submit_date": "2018-08-03", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2021-02-05 09:50:12"}, {"errata_id": "1771", "doc-id": "RFC4119", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": " <presence xmlns=\"urn:ietf:params:xml:ns:pidf\"\r\n    xmlns:gp=\"urn:ietf:params:xml:ns:pidf:geopriv10\"\r\n    xmlns:cl=\" urn:ietf:params:xml:ns:pidf:geopriv10:civicLoc\"\r\n    entity=\"pres:geotarget@example.com\">\r\n...\r\n      <gp:usage-rules>\r\n        <gp:retransmission-allowed>no</gp:retransmission-allowed>\r\n        <gp:retention-expiry>2003-06-23T04:57:29Z</gp:retention-expiry>\r\n      </gp:usage-rules>", "correct_text": " <presence xmlns=\"urn:ietf:params:xml:ns:pidf\"\r\n    xmlns:gp=\"urn:ietf:params:xml:ns:pidf:geopriv10\"\r\n    xmlns:gbp=\"urn:ietf:params:xml:ns:pidf:geopriv10:basicPolicy\"\r\n    xmlns:cl=\"urn:ietf:params:xml:ns:pidf:geopriv10:civicLoc\"\r\n    entity=\"pres:geotarget@example.com\">\r\n...\r\n      <gp:usage-rules>\r\n        <gbp:retransmission-allowed>no</gbp:retransmission-allowed>\r\n        <gbp:retention-expiry>2003-06-23T04:57:29Z</gbp:retention-expiry>\r\n      </gp:usage-rules>", "notes": "This applies to both examples in Section 2.3.  The use of the \"urn:ietf:params:xml:ns:pidf:geopriv10\" namespace for the retransmission-allowed and retention-expiry elements is incorrect.  These elements are defined in the \"urn:ietf:params:xml:ns:pidf:geopriv10:basicPolicy\" namespace.\r\n\r\nThis does not manifest in an error in parsers due to the allowance for extensions.  The XML schema <any> rule with processContents=\"lax\" permits unknown elements, as these are.  A schema-aware processor would not reliably detect these elements, potentially leading to them being ignored.\r\n\r\nTo reveal this problem, validate these examples against a schema with processContents=\"strict\" on all <any> elements.", "submit_date": "2009-05-03", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1772", "doc-id": "RFC66", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "On 12 August 70, I met a BBN with representatives from BBN and MIT and\r\nwe discussed third llevel protocol.", "correct_text": "On 12 August 70, I met a BBN with representatives from BBN and MIT and\r\nwe discussed third level protocol.", "notes": "", "submit_date": "2009-05-04", "submitter_name": "Matthias B\u00e4rwolff", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1774", "doc-id": "RFC5280", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.3", "orig_text": "   For each distribution point (DP) in the certificate CRL distribution\r\n   points extension, for each corresponding CRL in the local CRL cache,\r\n   while ((reasons_mask is not all-reasons) and (cert_status is\r\n   UNREVOKED)) perform the following:\r\n\r\n      (a)  Update the local CRL cache by obtaining a complete CRL, a\r\n      delta CRL, or both, as required:\r\n", "correct_text": "   For each distribution point (DP) in the certificate CRL distribution\r\n   points extension, for each corresponding CRL in the local CRL cache,\r\n   while ((reasons_mask is not all-reasons) and (cert_status is\r\n   UNREVOKED)) perform the following:\r\n\r\n   (l)  Set the reasons_mask state variable to the union of\r\n        its previous value and the value of the interim_reasons_mask\r\n        state variable.\r\n\r\n      (a)  Update the local CRL cache by obtaining a complete CRL, a\r\n      delta CRL, or both, as required:", "notes": "This was reported in 2002 for RFC 3280, which this document obsoletes.  The correction did not make it in to RFC 5280, and therefore applies to RFC 5280 as well.\n --VERIFIER NOTES-- \nThe correction already appears as step (l), the last step in the loop.", "submit_date": "2009-05-04", "submitter_name": "Takashi Ito", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1787", "doc-id": "RFC4643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "user-pass-char = B-CHAR\r\n\r\nNOTE: a server implementation MAY parse AUTHINFO USER and AUTHINFO\r\nPASS specially so as to allow white space to be used within the\r\nusername or password.  Such implementations accept the additional\r\nsyntax (making these two items inconsistent with \"token\" in Section\r\n9.8 of [NNTP]):\r\n\r\nuser-pass-char =/ SP / TAB", "correct_text": "user-pass-char = CTRL / %x21-FF\r\n\r\nNOTE: a server implementation MAY parse AUTHINFO USER and AUTHINFO\r\nPASS specially so as to allow white space to be used within the\r\nusername or password.  Such implementations accept the additional\r\nsyntax (making these two items inconsistent with \"token\" in Section\r\n9.8 of [NNTP]):\r\n\r\nuser-pass-char =/ SP / TAB", "notes": "RFC 3977 defines B-CHAR in section 9.8 as:\r\n\r\n B-CHAR     = CTRL / TAB / SP / %x21-FF\r\n\r\nIt already contains TAB (%x09) and SP (%x20).  Therefore, we have\r\nto define user-pass-char as any byte character except NUL, TAB, LF, CR\r\nand SP.  Otherwise, the note does not make sense.\r\n\r\n--- RFC Editor Note ---\r\nThis report was updated 2009-12-07 per a request from Julien \u00c9lie.", "submit_date": "2009-05-24", "submitter_name": "Antti-Juhani Kaijanaho", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1788", "doc-id": "RFC3728", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Global", "orig_text": "Example:\r\n   vdslPhysCurrSnrMgn OBJECT-TYPE\r\n       SYNTAX       Integer32 (-127..127)\r\n       UNITS        \"0.25dBm\"\r\n       MAX-ACCESS   read-only\r\n       STATUS       current\r\n       DESCRIPTION\r\n           \"Noise Margin as seen by this Vtu with respect to its\r\n           received signal in 0.25dB.  The effective range is\r\n           -31.75 to +31.75 dB.\"\r\n       REFERENCE    \"T1E1.4/2000-009R3, Part 1, common spec\"\r\n        ::= { vdslPhysEntry 5 }\r\n\r\n   vdslPhysCurrAtn OBJECT-TYPE\r\n       SYNTAX       Gauge32 (0..255)\r\n       UNITS        \"0.25dBm\"\r\n       MAX-ACCESS   read-only\r\n       STATUS       current\r\n       DESCRIPTION\r\n           \"Measured difference in the total power transmitted by\r\n           the peer Vtu and the total power received by this Vtu.\r\n           The effective range is 0 to +63.75 dB.\"\r\n\r\n", "correct_text": "UNITS statement (dBm) does not match units appearing in DESCRIPTION text (dB).\r\n\r\nI think 'dB' are the right units for the objects above, but one can check that. Anyway, it is clear that there should not be the existing mismatch.\r\n\r\nSame problem for more MIB objects in the RFC.\r\n\r\n\r\n  \r\n\r\n", "notes": "\n --VERIFIER NOTES-- \nAccording to the discussions on the WG list, a new Errata report will be submitted including the complete list of objects affected by this change request.    ", "submit_date": "2009-05-24", "submitter_name": "Smadar Tauber", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1807", "doc-id": "RFC5162", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "", "correct_text": "   Once a \"CONDSTORE enabling command\" is issued by the client, the\r\n   server MUST automatically include both UID and mod-sequence data in\r\n   all subsequent untagged FETCH responses (until the connection is\r\n   closed), whether they were caused by a regular STORE/UID STORE, a\r\n   STORE/UID STORE with UNCHANGEDSINCE modifier, or an external agent.\r\n   Note that this rule doesn't affect untagged FETCH responses caused by\r\n   a FETCH command that doesn't include UID and/or MODSEQ FETCH data\r\n   item, or UID FETCH without the MODSEQ FETCH data item.", "notes": "Rationale:\r\n\r\nIt's very difficult for clients to make use of unsolicited FETCH responses without the UID field. This is made even worse by the text that says \"servers SHOULD NOT send UIDs for previously expunged messages [in VANISHED replies]\". Since it's not a MUST NOT, a conversation with an RFC compliant server could be for example:\r\n\r\nA1 NOOP\r\n* 0 EXISTS\r\nA1 OK\r\nA2 NOOP\r\n* 10 EXISTS\r\n* VANISHED 1000:2000\r\n* 3 FETCH (FLAGS (\\Seen) MODSEQ (14749))\r\n* 5 FETCH (FLAGS (\\Seen) MODSEQ (14749))\r\n* VANISHED 2000:3000\r\nA2 OK NOOP Completed\r\n\r\nThe client couldn't do anything with the information from FETCH replies, because it can't know what messages they refer to.", "submit_date": "2009-07-14", "submitter_name": "Timo Sirainen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1775", "doc-id": "RFC5521", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.1, pg. 6", "orig_text": "   Type\r\n      The type of the subobject.  The following subobject types are\r\n      defined.\r\n\r\n      Type           Subobject\r\n      -------------+-------------------------------\r\n      1              IPv4 prefix\r\n      2              IPv6 prefix\r\n      4              Unnumbered Interface ID\r\n      32             Autonomous system number\r\n      34             SRLG\r\n\r\n   Length\r\n      [...]\r\n\r\n   Prefix Length\r\n      [...]\r\n\r\n   Attribute\r\n      The Attribute field indicates how the exclusion subobject is to be\r\n      interpreted.\r\n\r\n   0 Interface\r\n      The subobject is to be interpreted as an interface or set of\r\n      interfaces.  All interfaces identified by the subobject are to be\r\n      excluded from the computed path according to the setting of the\r\n|     X-bit.  This value is valid only for subobject types 1, 2, and 3.\r\n\r\n   1 Node\r\n      The subobject is to be interpreted as a node or set of nodes.  All\r\n      nodes identified by the subobject are to be excluded from the\r\n      computed path according to the setting of the X-bit.  This value\r\n|     is valid only for subobject types 1, 2, 3, and 4.\r\n\r\n   2 SRLG\r\n      The subobject identifies an SRLG explicitly or indicates all of\r\n      the SRLGs associated with the resource or resources identified by\r\n      the subobject.  Resources that share any SRLG with those\r\n      identified are to be excluded from the computed path according to\r\n      the setting of the X-bit.  This value is valid for all subobjects.\r\n\r\n", "correct_text": "   Attribute\r\n      The Attribute field indicates how the exclusion subobject is to be\r\n      interpreted.\r\n\r\n   Type\r\n      [...]\r\n\r\n   Length\r\n      [...]\r\n\r\n   Prefix Length\r\n      [...]\r\n\r\n   Attribute\r\n      The Attribute field indicates how the exclusion subobject is to be\r\n      interpreted.\r\n\r\n      0 Interface\r\n         The subobject is to be interpreted as an interface or set of\r\n         interfaces.  All interfaces identified by the subobject are to\r\n         be excluded from the computed path according to the setting of\r\n         the X-bit.  This value is valid only for subobject types 1, 2,\r\n|        and 4.\r\n             ^\r\n\r\n      1 Node\r\n         The subobject is to be interpreted as a node or set of nodes.  \r\n         All nodes identified by the subobject are to be excluded from\r\n         the computed path according to the setting of the X-bit.  This\r\n|        value is valid only for subobject types 1, 2, 4, and 32.\r\n                                                       ^      ^^\r\n\r\n      2 SRLG\r\n         The subobject identifies an SRLG explicitly or indicates all of\r\n         the SRLGs associated with the resource or resources identified\r\n         by the subobject.  Resources that share any SRLG with those\r\n         identified are to be excluded from the computed path according \r\n         to the setting of the X-bit.  This value is valid for all\r\n         subobjects.\r\n", "notes": "Rationale:\r\n\r\na) Technical:\r\n   The enumeration of subobject types for Attribute '0 Interface'\r\n   and '1 Node' is out of sync with the table at the top of the page\r\n   and the IANA registry (cf. Section 4.1 of this RFC, on page 13).\r\n  \r\n   The Corrected Text proposed above is based on the assumption that\r\n   the figures given originally refer to the position of the\r\n   subobjects in the table, i.e. that the subobjects in the table\r\n   once had been assigned sequential type numbers, 1 through 5;\r\n   this change seems to be technically reasonable.\r\n\r\n>>> Technical change verified by original document author and cross-checked \r\n>>> to early versions of the document.\r\n\r\nb) Editorial: For clarity, the details for the Attribute field \r\n   values should have been indented one more step, making them\r\n   visually subordinate to 'Attribute' and not appearing like\r\n   additional common fields.\r\n\r\n", "submit_date": "2009-05-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1776", "doc-id": "RFC5520", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2, pg. 18", "orig_text": "|  [RBNF]     Farrel, A., \"Reduced Backus-Naur Form (RBNF) A Syntax Used\r\n|             in Various Protocol Specifications\", Work in Progress,\r\n|             November 2008.\r\n", "correct_text": "|  [RBNF]     Farrel, A., \"Routing Backus-Naur Form (RBNF): A Syntax Used\r\n|             in Various Protocol Specifications\", RFC 5511, April 2009.\r\n", "notes": "Rationale:  [[ may be deleted on approval of this erratum ]]\r\n\r\na) The referenced document has been published as RFC 5511 shortly\r\n   *before* this RFC.\r\n\r\nb) The expansion of \"RBNF\" in general, and in particular the title\r\n   of that document, have been changed before IESG approval, with\r\n   the -09 draft version submitted to the RFC Editor.\r\n   \"RBNF\" officially stands for \"Routing BNF\".\r\n   Also, the clarifying colon is missing in the citation.\r\n\r\nIt could have been expected that the RFC Editor better coordinate\r\nbetween the documents in his Queue.\r\n\r\nHint: b) also affects other RFCs published since the draft of RFC 5511\r\n  has entered the RFC Editor Queue, e.g. RFC 5440 ff. and RFC 5455.", "submit_date": "2009-05-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1777", "doc-id": "RFC5520", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3, pg. 17", "orig_text": "   IANA maintains a registry of bit flags carried in the PCEP RP object\r\n   as defined in [RFC5440].  IANA assigned a new bit flag as follows:\r\n\r\n|  Bit Number  Hex       Name                             Reference\r\n|  23          0x000017  Path-Key (P-bit)                 [RFC5520]\r\n", "correct_text": "   IANA maintains a registry of bit flags carried in the PCEP RP object\r\n   as defined in [RFC5440].  IANA assigned a new bit flag as follows:\r\n\r\n|  Bit Number    Name                                     Reference\r\n|  23            Path-Key (P-bit)                         [RFC5520]\r\n", "notes": "Rationale: 'translating' the decimal bit number into a 6-digit (!) \r\nhexadecimal value does not add specific insight and might even be\r\nconsidered confusing; at most a hexadecimal bit mask might have\r\nsome additional value -- but it should be specified as an /8/-digit\r\nmask in this case (the RP Flags field is 32 bits wide).\r\nBecause the definition of the addressed sub-registry (Section 9.6\r\nof RFC 5440) did not specify a 'Hex' item and the IANA Registry\r\nconsequentially does not contain such column, the 'Hex' column\r\nshould have been dropped from Section 7.3 of RFC 5520 as well.\r\n\r\nDowngraded to Editorial as the change makes no difference to the technical reading of the text.", "submit_date": "2009-05-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1778", "doc-id": "RFC4760", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   An UPDATE message SHOULD NOT include the same address prefix (of the\r\n   same <AFI, SAFI>) in more than one of the following fields: WITHDRAWN\r\n   ROUTES field, Network Reachability Information fields, MP_REACH_NLRI\r\n   field, and MP_UNREACH_NLRI field.  The processing of an UPDATE\r\n   message in this form is undefined.\r\n", "correct_text": "   An UPDATE message SHOULD NOT include the same address prefix (of the\r\n   same <AFI, SAFI>) in more than one of the following fields: WITHDRAWN\r\n   ROUTES field, Network Layer Reachability Information fields, MP_REACH_NLRI\r\n   field, and MP_UNREACH_NLRI field.  The processing of an UPDATE\r\n   message in this form is undefined.\r\n", "notes": "", "submit_date": "2009-05-05", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1779", "doc-id": "RFC2731", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "-", "orig_text": "", "correct_text": "", "notes": "It appears that this document has been obsoleted by \"Expressing Dublin Core metadata using HTML/XHTML meta and link elements\" (<http://dublincore.org/documents/dc-html/>).", "submit_date": "2009-05-09", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1780", "doc-id": "RFC33", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "RFMN", "correct_text": "RFNM", "notes": "This typo occurs twice on page 4.", "submit_date": "2009-05-11", "submitter_name": "Matthias B\u00e4rwolff", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1781", "doc-id": "RFC57", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "I", "orig_text": "singify", "correct_text": "signify", "notes": "", "submit_date": "2009-05-11", "submitter_name": "Matthias B\u00e4rwolff", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1782", "doc-id": "RFC57", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "II", "orig_text": "wre", "correct_text": "were", "notes": "", "submit_date": "2009-05-11", "submitter_name": "Matthias B\u00e4rwolff", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1783", "doc-id": "RFC3986", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1.", "orig_text": "Advice for designers of new URI schemes can be found in [RFC2718].", "correct_text": "Advice for designers of new URL schemes can be found in [RFC2718].", "notes": "[RFC2718] does not contain advice for designers of new URN schemes; it is applies to URL schemes only and it is titled accordingly.\r\nThe information as published is misleading.\n --VERIFIER NOTES-- \n   Given that RFC 4395 (\"Guidelines and Registration Procedures for New URI Schemes\") obsoletes the referenced RFC 2718 (\"Guidelines for new URL Schemes\"), this erratum is best considered in error.", "submit_date": "2009-05-15", "submitter_name": "Christopher Yeleighton", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1784", "doc-id": "RFC59", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "\"cease on link\" flow control scheme\r\nproposed in RFC 35 by UCLA", "correct_text": "\"cease on link\" flow control scheme\r\nproposed in RFC 36 by UCLA", "notes": "", "submit_date": "2009-05-15", "submitter_name": "Matthias B\u00e4rwolff", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5445", "doc-id": "RFC2640", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "The RFC talks about UTF-8 for paths, but not about response messages.\r\nThe LANG command specified in the RFC can lead servers to send reply messages containing character outside of the ASCII character set.\r\nIt should specify that UTF-8 should also be used for reply messages.\n --VERIFIER NOTES-- \n   \r\nSection 4.1 says:\r\n\r\n   This specification RECOMMENDS that the server\r\n   default language be English encoded using ASCII. This text may be\r\n   augmented by text from other languages. Once negotiated, server-PI\r\n   MUST return server messages and textual part of command responses in\r\n   the negotiated language and encoded in UTF-8.", "submit_date": "2018-07-28", "submitter_name": "David LAMBERT", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1789", "doc-id": "RFC4919", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5. Goals", "orig_text": "   1.  Fragmentation and Reassembly layer: As mentioned in the overview,\r\n       the protocol data units may be as small as 81 bytes.  This is\r\n       obviously far below the minimum IPv6 packet size of 1280 octets,\r\n       and in keeping with Section 5 of the IPv6 specification\r\n       [RFC2460], a fragmentation and reassembly adaptation layer must\r\n       be provided at the layer below IP.\r\n", "correct_text": "   1.  Fragmentation and Reassembly layer: As mentioned in the overview,\r\n       the payload of medium access layer frames may be capped in size (as small \r\n       as 81 bytes).  This is obviously far below the minimum IPv6 Maximum \r\n       Transmission Unit (MTU) size of 1280 octets, and in keeping with Section 5 \r\n       of the IPv6 specification [RFC2460], a fragmentation and reassembly \r\n       adaptation layer must be provided at the layer below IP.\r\n", "notes": "Changed 'protocol data units' to 'medium access layer frames' for clarity.\r\n\r\nChanged 'may be as small as 81 bytes' to 'may be capped in size (as small as 81 bytes)'.  We are highlighting the fact that link layer payloads can't exceed some size X, while we are also expecting IPv6 packets much larger than X bytes to be pushed down to the link layer.  (Hence the requirement for fragmentation and reassembly mechanisms at the link layer.)\r\n\r\n'minimum IPv6 packet size of 1280 octets' changed to 'minimum IPv6 MTU size of 1280 octets'.  In the IPv6 specification [RFC 2460], Section 5 'Packet Size Issues' says that the minimum allowable IPv6 MTU is 1280 octets.  This is not equivalent to saying that the minimum IPv6 packet size is 1280 bytes (as suggested in the original text in RFC 4919).", "submit_date": "2009-06-01", "submitter_name": "Jeffrey Wildman", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1790", "doc-id": "RFC5444", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix E", "orig_text": "[...]\r\n\r\nThe packet contains a single message with length 54 octets.\r\n                                                  ^\r\n[...]\r\n\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |0 0 0 0 1 0 0 0|    Packet Sequence Number     | Message Type  |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |1 1 1 1 0 0 1 1|0 0 0 0 0 0 0 0 0 0 1 1 0 1 1 0|   Orig Addr   |\r\n                                                    ^\r\n", "correct_text": "[...]\r\n\r\nThe packet contains a single message with length 55 octets.\r\n                                                  ^\r\n[...]\r\n\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |0 0 0 0 1 0 0 0|    Packet Sequence Number     | Message Type  |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |1 1 1 1 0 0 1 1|0 0 0 0 0 0 0 0 0 0 1 1 0 1 1 1|   Orig Addr   |\r\n                                                    ^", "notes": "Correction to the message length, which is 55 instead of 54.", "submit_date": "2009-06-02", "submitter_name": "Yannick Lacharit\u00e9", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1805", "doc-id": "RFC5555", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "      The IPv4 home address option described in Section 3.1.1 has been\r\n      assigned value 29.  This option is included in the mobility header\r\n      described in [RFC3775].\r\n\r\n      The IPv4 address acknowledgement option described in Section 3.2.1\r\n      has been assigned value 29.  This option is included in the\r\n      mobility header described in [RFC3775].\r\n", "correct_text": "      The IPv4 home address option described in Section 3.1.1 has been\r\n      assigned value 29.  This option is included in the mobility header\r\n      described in [RFC3775].\r\n\r\n      The IPv4 address acknowledgement option described in Section 3.2.1\r\n      has been assigned value 30.  This option is included in the\r\n      mobility header described in [RFC3775].\r\n", "notes": "There's an error in the IANA section of the RFC: while both the IANA registry <http://www.iana.org/assignments/mobility-parameters/> and the section of the RFC describing the option <http://tools.ietf.org/html/rfc5555#section-3.2.1> have the correct type value for the IPv4 address acknowledgement option, i.e., 30, the IANA section <http://tools.ietf.org/html/rfc5555#section-8> assigns type value 29 to both the IPv4 home address option and IPv4 address acknowledgement option.", "submit_date": "2009-07-08", "submitter_name": "Julien Laganier", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1806", "doc-id": "RFC5005", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "URI", "correct_text": "IRI", "notes": "Atom defines links as IRIs, not URIs; they should not be constrained to URIs.\r\n\r\nAlso implies a reference to RFC3987 (or successor).", "submit_date": "2009-07-12", "submitter_name": "Mark Nottingham", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1821", "doc-id": "RFC4543", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "(nothing)", "correct_text": "The following text should have been included in Section 9:\r\n\r\nFor the negotiation of AES-GMAC in AH with IKEv1, the following\r\nvalues have been assigned in the IPsec AH Transform Identifiers\r\nregistry (in isakmp-registry). Note that IKEv1 and IKEv2 use\r\ndifferent transform identifiers.\r\n\r\n   \"11\" for AH_AES-128-GMAC\r\n\r\n   \"12\" for AH_AES-192-GMAC\r\n\r\n   \"13\" for AH_AES-256-GMAC\r\n\r\nIn addition, the following values have been assigned in the\r\nAuthentication Algorithms registry (in isakmp-registry):\r\n\r\n   \"11\" for AES-128-GMAC\r\n\r\n   \"12\" for AES-192-GMAC\r\n\r\n   \"13\" for AES-256-GMAC\r\n\r\nFor the negotiation of AES-GMAC in ESP with IKEv1, the following\r\nvalue has been assigned from the IPsec ESP Transform Identifiers\r\nregistry (in isakmp-registry). Note that IKEv1 and IKEv2 use a\r\ndifferent transform identifier.\r\n\r\n   \"23\" for ESP_NULL_AUTH_AES-GMAC\r\n", "notes": "Found by Soo-Fei Chew (ipsec@ietf.org list, 2009-04-09); \r\napproved by IESG in 2009-06-04 telechat. ", "submit_date": "2009-07-30", "submitter_name": "Pasi Eronen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1822", "doc-id": "RFC5610", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7", "orig_text": "These types are registered in the IANA IPFIX Information Element\r\nUnits subregistry; new types may be added on a First Come First \r\nServed [RFC5226] basis.", "correct_text": "These units are registered in the IANA IPFIX Information Element \r\nUnits subregistry; new units may be added on an Expert Review \r\n[RFC5226] basis.", "notes": "The text in the IANA Considerations (section 5) and in the IANA registry created therefrom (http://www.iana.org/assignments/ipfix/ipfix.xhtml#informationElementUnits) specifies Expert Review, which was the intent of the WG. The text in section 3.7 is an editorial hold-over from an older version of the document.", "submit_date": "2009-08-04", "submitter_name": "Brian Trammell", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2112", "doc-id": "RFC5760", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.1 - 9.3", "orig_text": "[[ In Section 9.1: ]]\r\n\r\n|  If the Distribution Source is operating in Simple Feedback Model\r\n   (which may be indicated [...]\r\n\r\n|  If the Distribution Source is operating in Distribution Source\r\n   Feedback Summary Model, the receiver MUST use [...]", "correct_text": "|  If the Distribution Source is operating in the Simple Feedback Model\r\n   (which may be indicated [...]\r\n\r\n|  If the Distribution Source is operating in the Distribution Source\r\n   Feedback Summary Model, the receiver MUST use [...]", "notes": "Rationale: missing articles.\r\nSimilar instances recur in Sections 9.2 and 9.3.\r\n\r\nFurther, the section headline of 9.3,\r\n\r\n 9.3.  Media Senders RTCP Transmission\r\n\r\nshould perhaps better say:\r\n\r\n 9.3.  Media Sender RTCP Transmission\r\n\r\nor:\r\n\r\n 9.3.  RTCP Transmission by Media Senders\r\n \r\n[keep for update!]", "submit_date": "2010-04-05", "submitter_name": "ALfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1791", "doc-id": "RFC3728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "UNITS definition of the following MIB objects, should change from dBm to dB.\r\nThat will also fix the conflict with the units appearing in the Description of these MIB objects (dB).\r\n\r\nvdslPhysCurrSnrMgn\r\nvdslPhysCurrAtn\r\nvdslLineConfDownMaxSnrMgn\r\nvdslLineConfDownMinSnrMgn\r\nvdslLineConfDownTargetSnrMgn\r\nvdslLineConfUpMaxSnrMgn\r\nvdslLineConfUpMinSnrMgn\r\nvdslLineConfUpTargetSnrMgn\r\n\r\nExample of original text:\r\n   vdslPhysCurrSnrMgn OBJECT-TYPE\r\n       SYNTAX       Integer32 (-127..127)\r\n       UNITS        \"0.25dBm\"\r\n       MAX-ACCESS   read-only\r\n       STATUS       current\r\n       DESCRIPTION\r\n           \"Noise Margin as seen by this Vtu with respect to its\r\n           received signal in 0.25dB.  The effective range is\r\n           -31.75 to +31.75 dB.\"\r\n       REFERENCE    \"T1E1.4/2000-009R3, Part 1, common spec\"\r\n        ::= { vdslPhysEntry 5 }", "correct_text": "Example of corrected text:\r\n   vdslPhysCurrSnrMgn OBJECT-TYPE\r\n       SYNTAX       Integer32 (-127..127)\r\n       UNITS        \"0.25dB\"\r\n       MAX-ACCESS   read-only\r\n       STATUS       current\r\n       DESCRIPTION\r\n           \"Noise Margin as seen by this Vtu with respect to its\r\n           received signal in 0.25dB.  The effective range is\r\n           -31.75 to +31.75 dB.\"\r\n       REFERENCE    \"T1E1.4/2000-009R3, Part 1, common spec\"\r\n        ::= { vdslPhysEntry 5 }\r\n", "notes": "This Errata replaces errata 1788 (rejected because it did not include list of all MIB objects having this problem and could not be edited). \r\nIt was decided by the adslmib Forum, that the solution should be as described by this Errata.", "submit_date": "2009-06-03", "submitter_name": "Smadar Tauber", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1792", "doc-id": "RFC5254", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "Single-Segment Pseudowire (SS-PW).  \r\n\r\nA PW setup directly between two PE devices.  Each direction of an SS-PW traverses one PSN tunnel that connects the two PEs.\r\n\r\n", "correct_text": "Single-Segment Pseudowire (SS-PW). \r\n\r\nA PW set up directly between two T-PE devices. Each PW in one direction of a SS-PW traverses one PSN tunnel that connects the two T-PEs.\r\n", "notes": "The document defines two types of PE, T-PE and S-PE. An SS-PW can only exist between a pair of T-PEs, so this is an editorial rather than a technical errata.\r\n\r\nThis errata aligns the definition of SS-PW with draft-ietf-pwe3-ms-pw-arch", "submit_date": "2009-06-04", "submitter_name": "Stewart Bryant", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1793", "doc-id": "RFC4103", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.1", "orig_text": "The value of the \"R2 block length\" would be set to zero in order to represent the empty T140block.\r\n\r\n  0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |V=2|P|X| CC=0  |M|  \"RED\" PT   |   sequence number of primary  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               timestamp of primary encoding \"P\"               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           synchronization source (SSRC) identifier            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |1|   T140 PT   |  timestamp offset of \"R2\" | \"R2\" block length |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |1|   T140 PT   |  timestamp offset of \"R1\" | \"R1\" block length |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|   T140 PT   | \"R1\" T.140 encoded redundant data             |\r\n   +-+-+-+-+-+-+-+-+                               +---------------+\r\n   |                                               |               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+         +-+-+-+\r\n   |              \"P\" T.140 encoded primary data             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "The value of the \"R1 block length\" would be set to zero in order to represent the empty T140block.\r\n\r\n  0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |V=2|P|X| CC=0  |M|  \"RED\" PT   |   sequence number of primary  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               timestamp of primary encoding \"P\"               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |           synchronization source (SSRC) identifier            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |1|   T140 PT   |  timestamp offset of \"R2\" | \"R2\" block length |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |1|   T140 PT   |  timestamp offset of \"R1\" | \"R1\" block length |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|   T140 PT   | \"R2\" T.140 encoded redundant data             |\r\n   +-+-+-+-+-+-+-+-+                               +---------------+\r\n   |                                               |               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+         +-+-+-+\r\n   |              \"P\" T.140 encoded primary data             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "", "submit_date": "2009-06-16", "submitter_name": "Gunnar Hellstrom", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1794", "doc-id": "RFC3171", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   224.0.2.0   - 224.0.255.0                   AD-HOC Block\r\n", "correct_text": "   224.0.2.0   - 224.0.255.255                 AD-HOC Block\r\n", "notes": "Section 5 mentions the AD-HOC block as being 224.0.2.0/24 - 224.0.255.0/24, which fits with the corrected text.\r\n\r\nFurthermore, IANA has already assigned 224.0.255.0 - 224.0.255.255 for an AD-HOC usage.", "submit_date": "2009-06-17", "submitter_name": "Simon Perreault", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1795", "doc-id": "RFC4566", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9", "orig_text": "   decimal-uchar =       DIGIT\r\n                         / POS-DIGIT DIGIT\r\n                         / (\"1\" 2*(DIGIT))\r\n                         / (\"2\" (\"0\"/\"1\"/\"2\"/\"3\"/\"4\") DIGIT)\r\n                         / (\"2\" \"5\" (\"0\"/\"1\"/\"2\"/\"3\"/\"4\"/\"5\"))\r\n", "correct_text": "   decimal-uchar =       DIGIT\r\n                         / POS-DIGIT DIGIT\r\n                         / (\"1\" 2(DIGIT))\r\n                         / (\"2\" (\"0\"/\"1\"/\"2\"/\"3\"/\"4\") DIGIT)\r\n                         / (\"2\" \"5\" (\"0\"/\"1\"/\"2\"/\"3\"/\"4\"/\"5\"))\r\n", "notes": "The \"*\" is removed from the 3rd line.\r\n\r\nThe current RFC accepts any number starting with \"1\" and followed by\r\n2 or more digits (like 1000 or 123456789) as a valid \"decimal-uchar\"\r\nbecause of this error, because \"1\" 2*(DIGIT) means 2 or more digits\r\nfollowing a \"1\". The correction, 2(DIGIT) means *exactly* 2 digits\r\nfollowing a \"1\", which covers the range 100-199.", "submit_date": "2009-06-19", "submitter_name": "Leandro Lucarella", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1846", "doc-id": "RFC5730", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "o  An OPTIONAL <svcExtension> element that contains one or more\r\n   <extURI> elements that contain namespace URIs representing\r\n   object extensions supported by the server.\r\n\r\no  A <dcp> (data collection policy) element that contains child", "correct_text": "  o  An OPTIONAL <svcExtension> element that contains one or more\r\n     <extURI> elements that contain namespace URIs representing\r\n     object extensions supported by the server.\r\n\r\n-  A <dcp> (data collection policy) element that contains child", "notes": "The description of the <dcp> element, which extends to the description of the OPTIONAL <expiry> element, is indented one level too deep.  The <dcp> element should be described at the same level as the <svcMenu> element instead of being indented as if it were a child of the <svcMenu> element.", "submit_date": "2009-09-02", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1847", "doc-id": "RFC2391", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "The Abstract says:", "orig_text": "NATs have traditionally been been used to allow private network\r\ndomains to connect to Global networks using as few as one globally \r\nunique IP address.", "correct_text": "NATs have traditionally been used to allow private network\r\ndomains to connect to Global networks using as few as one globally \r\nunique IP address.", "notes": "repetition of \"been\"", "submit_date": "2009-09-07", "submitter_name": "Yin Gaosong", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2539", "doc-id": "RFC6026", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.4, pg.12", "orig_text": "|8.4.  Pages 126 through 128\r\n\r\n   Section 17.1.1.2.  Replace paragraph 7 (starting \"When in either\")\r\n   through the end of the section with:\r\n", "correct_text": "|8.4.  Pages 126 through 129\r\n\r\n   Section 17.1.1.2.  Replace paragraph 7 (starting \"When in either\")\r\n   through the end of the section with:\r\n", "notes": "Rationale:\r\n  In RFC 3261, Section 17.1.1.2. extends to mid-page 129.\r\n  So if the quoted text is correct, the section headline\r\n  here is strongly misleading, contradicts the text, and\r\n  hence needs adjustment.\r\n  Since the textual scope of the change is at the heart of\r\n  this RFC, this Errata note is classified as Technical.", "submit_date": "2010-10-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1796", "doc-id": "RFC2617", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.2.2.1", "orig_text": "3.2.2.1 Request-Digest\r\n\r\n   If the \"qop\" value is \"auth\" or \"auth-int\":\r\n\r\n      request-digest  = <\"> < KD ( H(A1),     unq(nonce-value)\r\n                                          \":\" nc-value\r\n                                          \":\" unq(cnonce-value)\r\n                                          \":\" unq(qop-value)\r\n                                          \":\" H(A2)\r\n                                  ) <\">\r\n\r\n   If the \"qop\" directive is not present (this construction is for\r\n   compatibility with RFC 2069):\r\n\r\n      request-digest  =\r\n                 <\"> < KD ( H(A1), unq(nonce-value) \":\" H(A2) ) >\r\n   <\">", "correct_text": "3.2.2.1 Request-Digest\r\n\r\n   If the \"qop\" value is \"auth\" or \"auth-int\":\r\n\r\n      request-digest  = <\"> < KD ( H(A1)  \":\" unq(nonce-value)\r\n                                          \":\" nc-value\r\n                                          \":\" unq(cnonce-value)\r\n                                          \":\" unq(qop-value)\r\n                                          \":\" H(A2)\r\n                                  ) <\">\r\n\r\n   If the \"qop\" directive is not present (this construction is for\r\n   compatibility with RFC 2069):\r\n\r\n      request-digest  =\r\n                 <\"> < KD ( H(A1) \":\" unq(nonce-value) \":\" H(A2) ) >\r\n   <\">", "notes": "The \",\" after H(A1) should be \":\" in two places.\n --VERIFIER NOTES-- \nKD is defined in the document as:\r\n\r\n  KD(secret, data) = H(concat(secret, \":\", data))\r\n\r\nSo KD takes 2 parameters and the text in the RFC is correct in this respect.\r\n", "submit_date": "2009-06-19", "submitter_name": "Jerry Conrad", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1797", "doc-id": "RFC4873", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "The collection of SRROs is controlled via the\r\nsegment-recording-desired flag in the SESSION_ATTRIBUTE object.  This\r\nflag MAY be set even when SEROs are not used.", "correct_text": "   The collection of SRROs is controlled via the\r\n   presence of an RRO in the message being processed.", "notes": "No request was made to IANA to assign a value for the segment-recording-desired flag.\r\n\r\n  As reported in the Errata, the segment-recording-desired flag is\r\n  unassigned.  The flag is unassigned and therefore cannot be used.\r\n  As agreed to on the CCAMP mail list and the Stockholm (IETF 75)\r\n  working group meeting the the collection of SRROs should be\r\n  controlled based on the presence of an RRO in the message being\r\n  processed.  That is, the segment-recording-desired flag should be\r\n  considered to be set when an RRO is present in the message being\r\n  processed.\r\n", "submit_date": "2009-06-23", "submitter_name": "David McWalter", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1798", "doc-id": "RFC5202", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.2", "orig_text": "Conversely, a recipient MUST be prepared to handle received transport\r\nparameters that contain more than six Suite IDs.", "correct_text": "Conversely, a recipient MUST be prepared to handle received transform\r\nparameters that contain more than six Suite IDs.", "notes": "The section describes the ESP \"transform\", not \"transport\", parameter.", "submit_date": "2009-06-29", "submitter_name": "Ari Ker\u00e4nen", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1799", "doc-id": "RFC5201", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.", "orig_text": "   Parameters numbered between 1024-2047 are reserved.  Parameters\r\n   numbered between 2048-4095 are used for parameters related to HIP\r\n   transform types.  Parameters numbered between 4096 and (2^16 - 2^12)\r\n   61439 are reserved.  Parameters numbered between 61440-62463 are used\r\n   for signatures and signed MACs.  Parameters numbered between 62464-\r\n   63487 are used for parameters that fall outside of the signed area of\r\n   the packet.  Parameters numbered between 63488-64511 are used for\r\n   rendezvous and other relaying services.  Parameters numbered between\r\n   64512-65535 are reserved.", "correct_text": "(for the correct values, see: http://www.iana.org/assignments/hip-parameters/hip-parameters.xhtml#hip-parameters-3)", "notes": "The parameter number ranges are not in sync with the actual IANA assignments.", "submit_date": "2009-06-30", "submitter_name": "Ari Ker\u00e4nen", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1800", "doc-id": "RFC4753", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7 and 8", "orig_text": "", "correct_text": "Sections 8.1, 8.2 and 8.3 end with text of the following form:\r\n\r\n   These are concatenated to form\r\n\r\n   g^ir:\r\n          (binary data value appropriate to each example)\r\n\r\n   This is the value that is used in the formation of SKEYSEED.\r\n\r\nIn each of these three sections, the above text should be replaced with:\r\n\r\n      The Diffie-Hellman shared secret value is girx.\r\n\r\n", "notes": "The technical errata at <http://www.rfc-editor.org/errata_search.php?eid=9> is incorrect. It causes the specification in section 7 to disagree with the examples in section 8.", "submit_date": "2009-07-02", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1848", "doc-id": "RFC4282", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.4", "orig_text": "   o  Normalization requirements, as specified in Section 2.2 of\r\n      [RFC4013], are also designed to assist in comparisons.", "correct_text": "  o Normalization is, in general, a bad idea.", "notes": "Much of RFC 4282 is simply wrong.\r\n\r\nNormalization can be done only when both the local and character set information is included with the text.  And that information is not included with the username or realm.\r\n\r\nIn addition, not all systems will treat \"User\" the same as \"user\".  The decision about how to\r\ncompare user names is site specific.  User name comparisons SHOULD NOT be performed on\r\nany system other than the final one that performs user authentication.\n --VERIFIER NOTES-- \nThe suggested change is rather abrupt and should be discussed with the WG as part of a possible revision of the document.    ", "submit_date": "2009-09-08", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1849", "doc-id": "RFC4282", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.4", "orig_text": "   o  Bidirectional characters are handled as specified in Section 2.4\r\n      of [RFC4013].", "correct_text": "  o Bidrectional characters are handled in a site-specific fashion", "notes": "The rules in [4013] have shortcomings.  Updates are in:\r\n\r\nhttp://tools.ietf.org/html/draft-ietf-idnabis-bidi-05\n --VERIFIER NOTES-- \nThe suggested change is rather abrupt and should be discussed with the WG as part of a possible revision of the document.       ", "submit_date": "2009-09-08", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2452", "doc-id": "RFC4322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.5", "orig_text": "Section 3.2.5\r\n\r\na) The second paragraph of Section 3.2.5, on page 16,\r\n\r\n   Exit from this state occurs with either a successfully created IPsec\r\n   SA or a failure of some kind.  Successful SA creation results in a\r\n   transition to the key connection state.\r\n\r\nshould correctly name the state (cf. the Figure in Section 3.2, and\r\nSection 3.2.6) by saying:\r\n\r\n   Exit from this state occurs with either a successfully created IPsec\r\n   SA or a failure of some kind.  Successful SA creation results in a\r\n|  transition to the keyed connection state.\r\n                        ^^\r\n\r\nb) The second paragraph on page 17 contains the sentence:\r\n\r\n                                            [...].  For an OE-\r\n   pessimistic connection, the initiator makes a transition to the deny\r\n   connection again with a low lifespan.  [...]\r\n\r\nConformant to the terminology used in the remainder of the text\r\n(cf. the definition in the 3rd paragraph of Section 3.2, on page 12),\r\nit should say:\r\n                                                              vvvvvvvv\r\n|                                           [...].  For an OE-paranoid\r\n   connection, the initiator makes a transition to the deny connection\r\n   again with a low lifespan.  [...]\r\n\r\n\r\nc) The final paragraph of the section, still on page 17, says:\r\n\r\n   The third failure occurs when there is signature failure while\r\n   authenticating the remote gateway.  This can occur when there has\r\n   been a key roll-over, but DNS has not caught up.  In this case again,\r\n   the initiator makes a transition to the clear-text or the deny\r\n   connection based upon the connection class.  However, the lifespan\r\n   depends upon the remaining time to live in the DNS.  [...]\r\n\r\nIt should say:\r\n                                         vvv\r\n|  The third failure occurs when there is a signature failure while\r\n   authenticating the remote gateway.  This can occur when there has\r\n   been a key roll-over, but DNS has not caught up.  In this case again,\r\n   the initiator makes a transition to the clear-text or the deny\r\n|  connection state based upon the connection class.  However, the\r\n   lifespan depends upon the remaining time to live in the DNS.  [...]\r\n             ^^^^^^^\r\n\r\nRationale for the second change:\r\n  Transitions occur between *states* in the FSM.  'clear-text' and\r\n  'deny connection' are names given to two of these FSM states.", "correct_text": "", "notes": "To facilitate the recognition of the text changes proposed,\r\nI have added change bars ('|') in column 1, and up/down pointing\r\nmarker lines ('^^^'/'vvv').", "submit_date": "2006-03-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1801", "doc-id": "RFC2817", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   Values to be added to this name space SHOULD be subject to review in\r\n   the form of a standards track document within the IETF Applications\r\n   Area.  Any such document SHOULD be traceable through statuses of\r\n   either 'Obsoletes' or 'Updates' to the Draft Standard for\r\n   HTTP/1.1 [1].", "correct_text": "     Values to be added to this name space are subject to IETF review\r\n     ([12], Section 4.1).\r\n\r\n(where [12] would refer to RFC 5226 in the References Section)", "notes": "Since RFC 2817 was published, it has become harder to publish non-WG \r\ndocuments on the Standards Track. The \"IETF review\" policy is defined in \r\nRFC 5226 as:\r\n\r\n       IETF Review - (Formerly called \"IETF Consensus\" in\r\n             [IANA-CONSIDERATIONS]) New values are assigned only through\r\n             RFCs that have been shepherded through the IESG as AD-\r\n             Sponsored or IETF WG Documents [RFC3932] [RFC3978].  The\r\n             intention is that the document and proposed assignment will\r\n             be reviewed by the IESG and appropriate IETF WGs (or\r\n             experts, if suitable working groups no longer exist) to\r\n             ensure that the proposed assignment will not negatively\r\n             impact interoperability or otherwise extend IETF protocols\r\n             in an inappropriate or damaging manner.\r\n\r\n             To ensure adequate community review, such documents are\r\n             shepherded through the IESG as AD-sponsored (or WG)\r\n             documents with an IETF Last Call.\r\n\r\nwhich should address this nicely.\r\n\r\nFurthermore, overloading the \"Updates\" relation for specifications that \r\nuse a well-defined extension point plus an IANA registry is misleading.\r\n\r\nReviewed by the HTTPbis WG; see <http://trac.tools.ietf.org/wg/httpbis/trac/ticket/170>", "submit_date": "2009-07-05", "submitter_name": "Mark Nottingham", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1802", "doc-id": "RFC5092", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "   If the following relative URL is located in that body part:\r\n\r\n      <;section=1.4>\r\n\r\n   this could result in the following client commands:\r\n\r\n    C: A004 UID FETCH 20 (BODY.PEEK[1.2.MIME]\r\n                                      ^\r\n           BODY.PEEK[1.MIME]\r\n           BODY.PEEK[HEADER.FIELDS (Content-Location)])", "correct_text": "   If the following relative URL is located in that body part:\r\n\r\n      <;section=1.4>\r\n\r\n   this could result in the following client commands:\r\n\r\n    C: A004 UID FETCH 20 (BODY.PEEK[1.4.MIME]\r\n                                      ^\r\n           BODY.PEEK[1.MIME]\r\n           BODY.PEEK[HEADER.FIELDS (Content-Location)])", "notes": "1.2.MIME should read 1.4.MIME", "submit_date": "2009-07-06", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1803", "doc-id": "RFC4978", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "        C: b login arnt tnra\r\n        S: b OK Logged in as arnt\r\n        C: c compress deflate\r\n|       S: d OK DEFLATE active\r\n           ^\r\n", "correct_text": "        C: b login arnt tnra\r\n        S: b OK Logged in as arnt\r\n        C: c compress deflate\r\n|       S: c OK DEFLATE active\r\n           ^\r\n", "notes": "The tag in the reply from the server MUST match the tag in the\r\ncommand sent by the client.\r\n", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1804", "doc-id": "RFC5465", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "page 7\r\n         C: b notify set status (selected MessageNew (uid\r\n            body.peek[header.fields (from to subject)]) MessageExpunge)\r\n            (subtree Lists MessageNew)\r\nPage 8\r\n         C: e notify set (selected MessageNew (uid\r\n            body.peek[header.fields (from to subject)]) MessageExpunge)\r\n            (subtree Lists MessageNew) (mailboxes misc MessageNew)\r\n", "correct_text": "page 7\r\n         C: b notify set status (selected (MessageNew (uid\r\n            body.peek[header.fields (from to subject)]) MessageExpunge))\r\n            (subtree Lists (MessageNew))\r\nPage 8\r\n         C: e notify set (selected (MessageNew (uid\r\n            body.peek[header.fields (from to subject)]) MessageExpunge))\r\n            (subtree Lists (MessageNew)) (mailboxes misc (MessageNew))\r\n", "notes": "Incorrect syntax in example... each \"events\" set needs to be in parentheses.", "submit_date": "2009-07-06", "submitter_name": "Barry Leiba", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1850", "doc-id": "RFC4282", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.4", "orig_text": "   o  Unassigned code points are specified in Section 2.5 of [RFC4013].\r\n      The use of unassigned code points is prohibited.", "correct_text": "  o Unassigned code points MUST be ignored", "notes": "Unassigned code points sometimes go through a process called \"assignment\".  This means that they suddenly become valid.\r\n\r\nImplementations that forbid unassigned code points will not be updated when the standards change to assign them.  Therefore, they should ignore unassigned code points.\r\n\r\nHappily, this is what all implementations do.\n --VERIFIER NOTES-- \nThe suggested change should be discussed with the WG as part of a possible revision of the document.       ", "submit_date": "2009-09-08", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1851", "doc-id": "RFC5321", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.1.5.", "orig_text": "There are circumstances, contrary to the intent of this\r\nspecification, in which an SMTP server may receive an indication that\r\nthe underlying TCP connection has been closed or reset.  To preserve\r\nthe robustness of the mail system, SMTP servers SHOULD be prepared\r\nfor this condition and SHOULD treat it as if a QUIT had been received\r\nbefore the connection disappeared.", "correct_text": "", "notes": "That text seems inappropriate in the RESET (RSET) section. It should presumably be moved to section 4.1.1.10. QUIT (QUIT), or, better yet, to section 3.8. Terminating Sessions and Connections.", "submit_date": "2009-09-08", "submitter_name": "Alessandro Vesely", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2113", "doc-id": "RFC5760", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.4, pg.39", "orig_text": "[[  in the second paragraph of Section 9.4: ]]\r\n \r\n|       [...] are in use, the Distribution MAY combine several incoming\r\n   RTCP feedback packets and forward the aggregate along with its next\r\n   RTCP RR/RSI packet.  [...]", "correct_text": "|       [...] are in use, the Distribution Source MAY combine several\r\n   incoming RTCP feedback packets and forward the aggregate along with\r\n   its next RTCP RR/RSI packet.  [...]", "notes": "Rationale: Use of full defined term, \"Distribution Source\".", "submit_date": "2010-04-05", "submitter_name": "ALfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2124", "doc-id": "RFC5479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1.11", "orig_text": "   MIKEYv2 [MIKEYv2] adds mode negotiation to MIKEYv1 and removes the\r\n   time synchronization requirement.  It therefore now takes 2 round\r\n   trips to complete.  In the first round trip, the communicating\r\n   parties learn each other's identities, agree on a MIKEY mode, crypto\r\n|  algorithm, SRTP policy, and exchanges nonces for replay protection.\r\n   In the second round trip, they negotiate unicast and/or group SRTP\r\n   context for SRTP and/or SRTCP.\r\n", "correct_text": "   MIKEYv2 [MIKEYv2] adds mode negotiation to MIKEYv1 and removes the\r\n   time synchronization requirement.  It therefore now takes 2 round\r\n   trips to complete.  In the first round trip, the communicating\r\n   parties learn each other's identities, agree on a MIKEY mode, crypto\r\n|  algorithm, SRTP policy, and exchange nonces for replay protection.\r\n   In the second round trip, they negotiate unicast and/or group SRTP\r\n   context for SRTP and/or SRTCP.\r\n", "notes": "Rationale: singular/plural mismatch -- keep for update!", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1808", "doc-id": "RFC5162", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "   If at least one message got expunged, the server MUST send\r\n   the updated per-mailbox modification\r\n   sequence using the HIGHESTMODSEQ response code (defined in\r\n   [CONDSTORE]) in the tagged OK response.\r\n\r\n      Example:    C: A202 CLOSE\r\n                  S: A202 OK [HIGHESTMODSEQ 20010715194045319] done", "correct_text": "   The server MUST NOT send the updated per-mailbox modification\r\n   sequence using the HIGHESTMODSEQ response code (defined in\r\n   [CONDSTORE]) in the tagged OK response, as this might cause loss of\r\n   synchronization on the client.\r\n\r\n      Example:    C: A202 CLOSE\r\n                  S: A202 OK done", "notes": "Rationale:\r\n\r\nThe HIGHESTMODSEQ can't be used reliably unless server sends to client all changes done by other clients. Even then it's difficult for both clients and servers to implement this. For example:\r\n\r\nC1: 2 STORE 1 +FLAGS.SILENT \\Deleted\r\nS1: * 1 FETCH (MODSEQ 1)\r\nS1: 2 OK\r\n\r\nC2: 1 STORE 2 +FLAGS.SILENT \\Deleted\r\nS1: * 2 FETCH (MODSEQ 2)\r\nS2: 1 OK\r\n\r\nC1: 3 CLOSE\r\nS1: 3 [HIGHESTMODSEQ 3]\r\n\r\nThe client probably thought that only message 1 was expunged, so it\r\ndoesn't register the second expunge. And it probably never will if it\r\nuses QRESYNC to find out only about new expunges.\r\n\r\nAnd even worse example would be if the second client had also removed\r\nthe \\Deleted flag from message 1. Then the first client would have\r\nregistered wrong message to be expunged.", "submit_date": "2009-07-14", "submitter_name": "Timo Sirainen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1809", "doc-id": "RFC5162", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   After completing a full synchronization, the client MUST also take\r\n   note of any unsolicited MODSEQ FETCH data items received from the\r\n   server.  Whenever the client receives a tagged response to a command,\r\n   it calculates the highest value among all MODSEQ FETCH data items\r\n   received since the last tagged response.  If this value is bigger\r\n   than the client's copy of the HIGHESTMODSEQ value, then the client\r\n   MUST use this value as its new HIGHESTMODSEQ value.\r\n\r\n   Note: It is not safe to update the client's copy of the HIGHESTMODSEQ\r\n   value with a MODSEQ FETCH data item value as soon as it is received\r\n   because servers are not required to send MODSEQ FETCH data items in\r\n   increasing modseqence order.  This can lead to the client missing\r\n   some changes in case of connectivity loss.", "correct_text": "   After completing a full synchronization, the client MUST also take\r\n   note of any unsolicited MODSEQ FETCH data items and HIGHESTMODSEQ\r\n   response codes received from the server.  Whenever the client receives\r\n   a tagged response to a command, it checks the received unsolicited\r\n   responses to calculate the new HIGHESTMODSEQ value.  If the\r\n   HIGHESTMODSEQ response code is received, the client MUST use it even\r\n   if it has seen higher mod-sequences.  Otherwise, the client calculates\r\n   the highest value among all MODSEQ FETCH data items received since the\r\n   last tagged response.  If this value is bigger than the client's copy\r\n   of the HIGHESTMODSEQ value, then the client MUST use this value as its\r\n   new HIGHESTMODSEQ value.\r\n\r\n      Example:    C: A1 STORE 1:2 (UNCHANGEDSINCE 96) +FLAGS.SILENT \\Seen\r\n                  S: * 1 FETCH (UID 6 MODSEQ (103))\r\n                  S: * 2 FETCH (UID 7 MODSEQ (101))\r\n                  S: * OK [HIGHESTMODSEQ 99] VANISHED reply with\r\n\t\t      MODSEQ 100 is delayed\r\n                  S: A1 OK [MODIFIED 3] done\r\n\r\n                  C: A2 STORE 3 +FLAGS.SILENT \\Seen\r\n                  S: * 3 FETCH (UID 8 MODSEQ (104))\r\n                  S: A2 OK [HIGHESTMODSEQ 99] Still delaying VANISHED\r\n\r\n                  C: A3 NOOP\r\n                  S: * VANISHED 8\r\n                  S: A3 OK [HIGHESTMODSEQ 104] done\r\n\r\n   Note: It is not safe to update the client's copy of the HIGHESTMODSEQ\r\n   value with a MODSEQ FETCH data item value as soon as it is received\r\n   because servers are not required to send MODSEQ FETCH data items in\r\n   increasing modseqence order.  Some commands may also delay EXPUNGE\r\n   (or VANISHED) replies with smaller mod-sequences. These can lead to\r\n   the client missing some changes in case of connectivity loss.", "notes": "Rationale:\r\n\r\nOtherwise clients could lose changes in case of connectivity loss.", "submit_date": "2009-07-14", "submitter_name": "Timo Sirainen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1810", "doc-id": "RFC5162", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "", "correct_text": "   Server implementing QRESYNC MUST send untagged events to client in a\r\n   way that client doesn't lose any changes in case of connectivity loss.\r\n   In particular this means that if server sends MODSEQ FETCH data items\r\n   while EXPUNGE (or VANISHED) replies with lower mod-sequences are being\r\n   delayed, the server MUST send HIGHESTMODSEQ response code with a lower\r\n   value than the EXPUNGE's mod-sequence. See example in section 5.", "notes": "This is related to the other errata in section 5, which describes what the client's behavior should be. This describes what the server's behavior should be. Would have been nice to put them into the same section, but that probably would require larger changes.", "submit_date": "2009-07-14", "submitter_name": "Timo Sirainen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1811", "doc-id": "RFC5570", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.8", "orig_text": "This contains a variable number of 64-bit words.", "correct_text": "This contains a variable number of 32-bit words.", "notes": "Sections 5.1.3 and 5.2 closely relate to the text in Section 5.1.8.  Those 2 other sections provide further explanation why the text in Section 5.1.8 should refer to \"32-bit words\" rather than \"64-bit words\".", "submit_date": "2009-07-17", "submitter_name": "R. Atkinson", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1812", "doc-id": "RFC4013", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "This profile specifies the following characters as prohibited input:\r\n", "correct_text": "This profile specifies the following characters as prohibited output:\r\n", "notes": "Per RFC 3454, the check for prohibited characters is done after the \"Map\" and \"Normalize\" steps. Characters listed here are actually allowed as inputs if they get removed by the \"Map\" or \"Normalize\" steps.", "submit_date": "2009-07-18", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2276", "doc-id": "RFC5858", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2, pg. 5", "orig_text": "   The data items contained within the SAD are defined in RFC 4301\r\n   [IPSEC], Section 4.4.2.1.  To support ROHC, the SAD must include a\r\n|  \"ROHC Data Item\"; this data item contains parameters used by ROHC\r\n   instance.  The ROHC Data Item exists for both inbound and outbound\r\n   SAs.\r\n\r\n   The ROHC Data Item includes the ROHC channel parameters for the SA.\r\n   These channel parameters (i.e., MAX_CID, PROFILES, MRRU) are\r\n   enumerated above in Section 3.1.  For inbound SAs, the ROHC Data Item\r\n   MUST specify the ROHC channel parameters that are used by the local\r\n   decompressor instance; conversely, for outbound SAs, the ROHC Data\r\n|  Item MUST specify the ROHC channel parameters that are used by local\r\n   compressor instance.", "correct_text": "   The data items contained within the SAD are defined in RFC 4301\r\n   [IPSEC], Section 4.4.2.1.  To support ROHC, the SAD must include a\r\n|  \"ROHC Data Item\"; this data item contains parameters used by the ROHC\r\n   instance.  The ROHC Data Item exists for both inbound and outbound\r\n   SAs.\r\n\r\n   The ROHC Data Item includes the ROHC channel parameters for the SA.\r\n   These channel parameters (i.e., MAX_CID, PROFILES, MRRU) are\r\n   enumerated above in Section 3.1.  For inbound SAs, the ROHC Data Item\r\n   MUST specify the ROHC channel parameters that are used by the local\r\n   decompressor instance; conversely, for outbound SAs, the ROHC Data\r\n|  Item MUST specify the ROHC channel parameters that are used by the\r\n   local compressor instance.", "notes": "Rationale: missing definite article (2 instances)", "submit_date": "2010-05-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1863", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg. 40", "orig_text": "[[ DESCRIPTION clause for pwIndexMappingTable OBJECT-TYPE: ]]\r\n\r\n          \"This table enables the reverse mapping of the unique\r\n           PWid parameters [peer IP, PW type, and PW ID] and the\r\n           pwIndex.  The table is not applicable for PWs created\r\n|          manually or by using the generalized FEC.\"\r\n", "correct_text": "          \"This table enables the reverse mapping of the unique\r\n           PWid parameters [peer IP, PW type, and PW ID] and the\r\n           pwIndex.  The table is not applicable for PWs created\r\n|          manually or by using the generalized FEC element.\"\r\n", "notes": "Rationale: Added precision (cf. EID=1855).", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1813", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.3", "orig_text": "The following is an example file which might be used to define the\r\nISI.EDU zone.and is loaded with an origin of ISI.EDU:\r\n\r\n@   IN  SOA     VENERA      Action\\.domains (\r\n                                 20     ; SERIAL\r\n                                 7200   ; REFRESH\r\n                                 600    ; RETRY\r\n                                 3600000; EXPIRE\r\n                                 60)    ; MINIMUM\r\n\r\n        NS      A.ISI.EDU.\r\n        NS      VENERA\r\n        NS      VAXA\r\n        MX      10      VENERA\r\n        MX      20      VAXA\r\n\r\nA       A       26.3.0.103\r\n\r\nVENERA  A       10.1.0.52\r\n        A       128.9.0.32\r\n\r\nVAXA    A       10.2.0.27\r\n        A       128.9.0.33\r\n\r\n\r\n[...]\r\n\r\nNote the use of the \\ character in the SOA RR to specify the responsible\r\nperson mailbox \"Action.domains@E.ISI.EDU\".\r\n", "correct_text": "The following is an example file which might be used to define the\r\nISI.EDU zone.and is loaded with an origin of ISI.EDU:\r\n\r\n@   IN  SOA     VENERA      Action\\.domains (\r\n                                 20     ; SERIAL\r\n                                 7200   ; REFRESH\r\n                                 600    ; RETRY\r\n                                 3600000; EXPIRE\r\n                                 60)    ; MINIMUM\r\n\r\n        NS      A.ISI.EDU.\r\n        NS      VENERA\r\n        NS      VAXA\r\n        MX      10      VENERA\r\n        MX      20      VAXA\r\n\r\nA       A       26.3.0.103\r\n\r\nVENERA  A       10.1.0.52\r\n        A       128.9.0.32\r\n\r\nVAXA    A       10.2.0.27\r\n        A       128.9.0.33\r\n\r\n\r\n[...]\r\n\r\nNote the use of the \\ character in the SOA RR to specify the responsible\r\nperson mailbox \"Action.domains@ISI.EDU\".\r\n", "notes": "The introductory sentence and the following zone definition both correctly refer to the zone ISI.EDU. But the closing sentence noting the usage of \"\\.\" in the mailbox name erroneously expands the example to \"Action.domains@E.ISI.EDU\" instead of \"Action.domains@ISI.EDU\".", "submit_date": "2009-07-19", "submitter_name": "moritzh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1814", "doc-id": "RFC89", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "header", "orig_text": "Metcalff", "correct_text": "Metcalfe", "notes": "", "submit_date": "2009-07-20", "submitter_name": "Matthias B\u00e4rwolff", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1815", "doc-id": "RFC3315", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "26", "orig_text": " [6]  IANA.  Private Enterprise Numbers.\r\n        http://www.iana.org/assignments/enterprise-numbers.html.", "correct_text": " [6]  IANA.  Private Enterprise Numbers.\r\n        http://www.iana.org/assignments/enterprise-numbers", "notes": "The URL for the enterprise numbers registry is incorrect.", "submit_date": "2009-07-22", "submitter_name": "Michelle Cotton", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1816", "doc-id": "RFC5568", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.2", "orig_text": "Type: 17", "correct_text": "Type: 34 ", "notes": "The Type value for the Mobility Header IPv6 Address/Prefix option should have been updated to 34 upon IANA assignment.", "submit_date": "2009-07-23", "submitter_name": "Rajeev Koodli", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1818", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "All", "orig_text": "", "correct_text": "", "notes": "Throughout the document, all instances of \"Option Template\" must be replaced by \"Options Template\"", "submit_date": "2009-07-26", "submitter_name": "Benoit Claise", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1819", "doc-id": "RFC3877", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2", "orig_text": "    -- The following are used with Processing error alarm.\r\n                storageCapacityProblem (151),\r\n                memoryMismatch  (152),\r\n                corruptData  (153),\r\n                outOfCPUCycles   (154),\r\n                sfwrEnvironmentProblem  (155),\r\n                sfwrDownloadFailure  (156),\r\n                lossOfRealTimel (157),\r\n    --A processing error alarm to be issued after the system has\r\n    --reinitialised. This will indicate\r\n    --to the management systems that the view they have of the managed\r\n    --system may no longer\r\n    --be valid. Usage example: The managed\r\n    --system issues this alarm after a reinitialization with severity\r\n    --warning to inform the\r\n    --management system about the event. No clearing notification will\r\n    --be sent.\r\n                applicationSubsystemFailure (158),\r\n                configurationOrCustomisationError (159),\r\n                databaseInconsistency (160),\r\n                fileError (161),\r\n                outOfMemory (162),\r\n                softwareError (163),\r\n                timeoutExpired (164),\r\n                underlayingResourceUnavailable (165),\r\n                versionMismatch (166),\r\n    --Values 168-200 are reserved for processing error alarm related\r\n    -- probable causes.\r\n", "correct_text": "    -- The following are used with Processing error alarm.\r\n                storageCapacityProblem (151),\r\n                memoryMismatch  (152),\r\n                corruptData  (153),\r\n                outOfCPUCycles   (154),\r\n                sfwrEnvironmentProblem  (155),\r\n                sfwrDownloadFailure  (156),\r\n                lossOfRealTime (157),\r\n-- A processing error alarm to be issued if the system detects that it has lost the time in\r\n-- the real time clock but  the clock itself is working. This could happen e.g. during a power \r\n-- cut in a small NE which does not have battery backup for the real time clock.\r\n                reinitialized (158),\r\n    --A processing error alarm to be issued after the system has\r\n    --reinitialised. This will indicate\r\n    --to the management systems that the view they have of the managed\r\n    --system may no longer\r\n    --be valid. Usage example: The managed\r\n    --system issues this alarm after a reinitialization with severity\r\n    --warning to inform the\r\n    --management system about the event. No clearing notification will\r\n    --be sent.\r\n                applicationSubsystemFailure (159),\r\n                configurationOrCustomisationError (160),\r\n                databaseInconsistency (161),\r\n                fileError (162),\r\n                outOfMemory (163),\r\n                softwareError (164),\r\n                timeoutExpired (165),\r\n                underlayingResourceUnavailable (166),\r\n                versionMismatch (167),\r\n    --Values 168-200 are reserved for processing error alarm related\r\n    -- probable causes.\r\n", "notes": "It seems to be a copy/paste error from the M.3100 Standard PC text. The comment in the MIB after \"lossOfRealTimel\" (Note also rogue \"l\" at the end!) clearly refers to the PC string \"reinitialized\" instead. It is strange how the integers have continued on from 158 instead of retaining the original values, but anyway, it appears to be a mismatch between the two standards. Ironically I noticed it when I saw that \"versionMismatch\" had different values (166 and 167).", "submit_date": "2009-07-29", "submitter_name": "Enda Murphy", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1820", "doc-id": "RFC5321", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.9.2", "orig_text": "   A mailing list may be said to operate by \"redistribution\" rather than\r\n   by \"forwarding\".     [...]     Note that\r\n   the key difference between handling aliases (Section 3.9.1) and\r\n   forwarding (this subsection) is the change to the backward-pointing\r\n   address in this case.  [...]\r\n\r\n", "correct_text": "   A mailing list may be said to operate by \"redistribution\" rather than\r\n   by \"forwarding\".     [...]     Note that\r\n   the key difference between handling aliases (Section 3.9.1) and\r\n   lists (this subsection) is the change to the backward-pointing\r\n   address in this case.     [...]\r\n", "notes": "The change replaces the second occurrence of \"forwarding\" with \"lists\" in the first paragraph of section 3.9.2.\r\n\r\nThe term \"forwarding\" is generally used as a synonym of transmitting as opposed to delivering locally. The beginning of this section attempts to introduce the term \"redistribution\" for the specific type of transmission described therein. The phrase where the change is necessary, in its original wording, contradicts both the first phrase in its own paragraph, and the last phrase of the preceding section about aliases, which says that handling aliases may result in forwarding.\n --VERIFIER NOTES-- \n   This should be taken up with the group revising SMTP.  The language chosen was intentional, so a fix is not as simple as an errata.", "submit_date": "2009-07-30", "submitter_name": "Alessandro Vesely", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5451", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "APPENDIX II", "orig_text": "         CWD /usr/dm\r\n         200 directory changed to /usr/dm\r\n\r\n...\r\n         CWD overrainbow\r\n         431 No such directory\r\n", "correct_text": "         CWD /usr/dm\r\n         250 directory changed to /usr/dm\r\n\r\n...\r\n         CWD overrainbow\r\n         550 No such directory", "notes": "Reply codes in the examples are not conform to the specification :\r\n200 is not a valid code for CWD. It should be 250 (Requested file action okay, completed).\r\n431 is not a valid code for CWD and is not defined in the RFC. It should be 550 (Requested file action not taken).", "submit_date": "2018-08-03", "submitter_name": "David LAMBERT", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-07 16:23:43"}, {"errata_id": "2120", "doc-id": "RFC5479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4,3rd para", "orig_text": "|  A typical case of using media security where two entities are having\r\n   a Voice over IP (VoIP) conversation over IP-capable networks.\r\n   [...]", "correct_text": "|  A typical case of using media security is where two entities are\r\n   having a Voice over IP (VoIP) conversation over IP-capable networks.\r\n   [...]", "notes": "Rationale: missing verb.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2121", "doc-id": "RFC5479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1 - 5.3", "orig_text": "", "correct_text": "", "notes": "Sections 5.1 through 5.3 use unexpected irregular, non-uniform\r\nindentation in hanging lists; this is accompanied by dangling\r\nhyphens in 5.2 ( s/third- party/third-party/ and \r\ns/crypto- agility/crypto-agility/ !).\r\n\r\n(Keep for update!)\r\nthird- party", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1823", "doc-id": "RFC1519", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "This plan is primarily directed at the first two problems listed\r\n   above.  We believe that the judicious use of variable-length\r\n   subnetting techniques should help defer the onset of the last problem\r\n   problem, the exhaustion of the 32-bit address space. Note also that\r\n   improved tools for performing address allocation in a \"supernetted\"\r\n   and variably-subnetted world would greatly help the user community in\r\n   accepting these sometimes confusing techniques. Efforts to create\r\n   some simple tools for this purpose should be encouraged by the\r\n   Internet community.\r\n", "correct_text": "This plan is primarily directed at the first two problems listed\r\n   above.  We believe that the judicious use of variable-length\r\n   subnetting techniques should help defer the onset of the last problem, \r\n   the exhaustion of the 32-bit address space. Note also that\r\n   improved tools for performing address allocation in a \"supernetted\"\r\n   and variably-subnetted world would greatly help the user community in\r\n   accepting these sometimes confusing techniques. Efforts to create\r\n   some simple tools for this purpose should be encouraged by the\r\n   Internet community.\r\n", "notes": "In the phrase \"the onset of the last problem problem,\" word problem appears twice.", "submit_date": "2009-08-05", "submitter_name": "Dande Rajasekhar", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1824", "doc-id": "RFC4632", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "To make this example more realistic, assume that C4 and C5 are multi-\r\n   homed through some other service provider, \"PB\".  Further assume the\r\n   existence of a site, \"C7\", that was originally connected to \"RB\" but\r\n   that has moved to \"PA\".  For this reason, it has a block of network\r\n   numbers that are assigned out PB's block of (the next) 2048 x /24.\r\n\r\n   o  C7.  Assign 10.32.0 through 10.32.15.  This block is described by\r\n      the route 10.32.0.0/20 (mask 255.255.240.0).\r\n\r\nFor the multi-homed sites, assume that C4 is advertised as primary\r\n   via \"RA\" and secondary via \"RB\"; and that C5 is primary via \"RB\" and\r\n   secondary via \"RA\".  In addition, assume that \"RA\" and \"RB\" are both\r\n   connected to the same transit service provider, \"BB\".\r\n\r\n   Graphically, this topology looks something like this:\r\n\r\n   10.24.0.0 -- 10.24.7.0__         __10.32.0.0 - 10.32.15.0\r\n   C1: 10.24.0.0/21        \\       /  C7: 10.32.0.0/20\r\n                            \\     /\r\n                             +----+                              +----+\r\n   10.24.16.0 - 10.24.31.0_  |    |                              |    |\r\n   C2: 10.24.16.0/20       \\ |    |  _10.24.12.0 - 10.24.15.0__  |    |\r\n                            \\|    | / C4: 10.24.12.0/20        \\ |    |\r\n                             |    |/                            \\|    |\r\n   10.24.8.0 - 10.24.11.0___/| PA |\\                             | PB |\r\n   C3: 10.24.8.0/22          |    | \\__10.24.32.0 - 10.24.33.0___|    |\r\n                             |    |    C5: 10.24.32.0/23         |    |\r\n                             |    |                              |    |\r\n   10.24.34.0 - 10.24.35.0__/|    |                              |    |\r\n   C6: 10.24.34.0/23         |    |                              |    |\r\n                             +----+                              +----+\r\n                               ||                                  ||\r\n   routing advertisements:     ||                                  ||\r\n                               ||                                  ||\r\n           10.24.12.0/22 (C4)  ||              10.24.12.0/22 (C4)  ||\r\n           10.32.0.0/20 (C7)   ||              10.24.32.0/23 (C5)  ||\r\n           10.24.0.0/13 (PA)   ||              10.32.0.0/13 (PB)   ||\r\n                               ||                                  ||\r\n                               VV                                  VV\r\n                            +---------- BACKBONE NETWORK BB ----------+\r\n", "correct_text": "To make this example more realistic, assume that C4 and C5 are multi-\r\n   homed through some other service provider, \"PB\".  Further assume the\r\n   existence of a site, \"C7\", that was originally connected to \"PB\" but\r\n   that has moved to \"PA\".  For this reason, it has a block of network\r\n   numbers that are assigned out PB's block of (the next) 2048 x /24.\r\n\r\n   o  C7.  Assign 10.32.0 through 10.32.15.  This block is described by\r\n      the route 10.32.0.0/20 (mask 255.255.240.0).\r\n\r\nFor the multi-homed sites, assume that C4 is advertised as primary\r\n   via \"PA\" and secondary via \"PB\"; and that C5 is primary via \"PB\" and\r\n   secondary via \"PA\".  In addition, assume that \"PA\" and \"PB\" are both\r\n   connected to the same transit service provider, \"BB\".\r\n\r\n   Graphically, this topology looks something like this:\r\n\r\n   10.24.0.0 -- 10.24.7.0__         __10.32.0.0 - 10.32.15.0\r\n   C1: 10.24.0.0/21        \\       /  C7: 10.32.0.0/20\r\n                            \\     /\r\n                             +----+                              +----+\r\n   10.24.16.0 - 10.24.31.0_  |    |                              |    |\r\n   C2: 10.24.16.0/20       \\ |    |  _10.24.12.0 - 10.24.15.0__  |    |\r\n                            \\|    | / C4: 10.24.12.0/20        \\ |    |\r\n                             |    |/                            \\|    |\r\n   10.24.8.0 - 10.24.11.0___/| PA |\\                             | PB |\r\n   C3: 10.24.8.0/22          |    | \\__10.24.32.0 - 10.24.33.0___|    |\r\n                             |    |    C5: 10.24.32.0/23         |    |\r\n                             |    |                              |    |\r\n   10.24.34.0 - 10.24.35.0__/|    |                              |    |\r\n   C6: 10.24.34.0/23         |    |                              |    |\r\n                             +----+                              +----+\r\n                               ||                                  ||\r\n   routing advertisements:     ||                                  ||\r\n                               ||                                  ||\r\n           10.24.12.0/22 (C4)  ||              10.24.12.0/22 (C4)  ||\r\n           10.32.0.0/20 (C7)   ||              10.24.32.0/23 (C5)  ||\r\n           10.24.0.0/13 (PA)   ||              10.32.0.0/13 (PB)   ||\r\n                               ||                                  ||\r\n                               VV                                  VV\r\n                            +---------- BACKBONE NETWORK BB ----------+\r\n", "notes": "All the reference of \"RA\" and \"RB\" to be replaced with \"PA\" and \"PB\".", "submit_date": "2009-08-05", "submitter_name": "Dande Rajasekhar", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1825", "doc-id": "RFC5296", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   We identify two types of bootstrapping for ERP: explicit and implicit\r\n   bootstrapping.  In implicit bootstrapping, the local ER server SHOULD\r\n   include its domain name and SHOULD request the DSRK from the home AAA\r\n   server during the initial EAP exchange, in the AAA message\r\n   encapsulating the first EAP Response message sent by the peer.", "correct_text": "   We identify two types of bootstrapping for ERP: explicit and implicit\r\n   bootstrapping.  In implicit bootstrapping, the local AAA client or agent \r\n   SHOULD include its domain name and SHOULD request the DSRK from the home AAA\r\n   server in the AAA message encapsulating the first EAP Response message sent\r\n   by the peer during the initial EAP exchange.", "notes": "The local ER server is an ERP entity, incapable of inserting anything into a AAA message; the ER server's purpose is to provide reauthentication services, not to edit AAA messages.  Furthermore, the original text requires that the ER server unnecessarily insert itself in the path of EAP messages, slowing the initial authentication.", "submit_date": "2009-08-10", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1826", "doc-id": "RFC5577", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Khz", "correct_text": "kHz", "notes": "Rationale:\r\nProper Names when used in unit symbols keep their capitalization,\r\ne.g., Hertz (Hz), Coulomb (C), Tesla (T), Henry (H), Farad (F);\r\nhowever, the unit factor 1000 is always indicated by a\r\n*lowercase* prefix 'k' !\r\n\r\nInstances of improper case:\r\no  last paragraph of Section 1 (top of page 3) - 2 instances,\r\no  last paragraph of Section 3.1 (mid-page 3) - 4 instances,\r\no  Section 4.1.1, 'Required Parameters' clause\r\n   (last paragraph on page 6) - 2 instances,\r\no  Section 4.1.1, 'Optional Parameters' clause\r\n   (first paragraph on page 7) - 1 instance,\r\no  Section 4.1.1, 'Interoperability considerations' clause\r\n   (mid-page 7) - 2 instances,\r\no  Section 5.1, 3rd paragraph (mid-page 8) - 1 instance,\r\no  Section 7, first paragraph (mid-page 9) - 1 instance\r\n \r\nNote that the initial part of Section 1 on page 2 and the final\r\npart of the last paragraph of Section 1 (on page 3) are correct!", "submit_date": "2009-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1827", "doc-id": "RFC5577", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6, pg.9", "orig_text": "[[ second paragraph on page 9: ]]\r\n\r\n|                  [...].  Another mechanism that may be used is IPsec\r\n|  [RFC4301] Transport Layer Security (TLS) [RFC5246] (RTP over TCP);\r\n   other alternatives may exist.\r\n", "correct_text": "|                  [...].  Other mechanisms that may be used are IPsec\r\n|  [RFC4301] or Transport Layer Security (TLS) [RFC5246] (RTP over TCP);\r\n   other alternatives may exist.\r\n", "notes": "Rationale: IPsec and TLS are two distinct and very different protocols!", "submit_date": "2009-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1828", "doc-id": "RFC5583", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.2, pg.10", "orig_text": "[[ last paragraph of Section 5.2.2: ]]\r\n\r\n          v\r\n|  Further, dependency types MUST be defined in a Standards-Track\r\n   document.\r\n", "correct_text": "|  Further dependency types MUST be defined in a Standards-Track\r\n   document.\r\n", "notes": "Rationale:\r\n  In this case, \"Further\" is an attribute; the spurious comma\r\n  separates this attribute from its noun \"[dependency] types\",\r\n  and thus changes the sense of the sentence in an inappropriate\r\n  manner.", "submit_date": "2009-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2122", "doc-id": "RFC5479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "App. A", "orig_text": "[[ second-to-last paragraph, on mid-page 24: ]]\r\n\r\n   Related to SRTP's characteristics is a goal that any SRTP keying\r\n|  mechanism to also be efficient and not cause additional call setup\r\n   delay.", "correct_text": "   Related to SRTP's characteristics is a goal that any SRTP keying\r\n|  mechanism also be efficient and not cause additional call setup\r\n   delay.", "notes": "Rationale: language/grammar improvement -- keep for update!", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2479", "doc-id": "RFC2030", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "   MSF      Rugby (UK) Radio 60 kHz\r\n", "correct_text": "   MSF      Anthorn (UK) Radio 60 kHz\r\n", "notes": "The MSF transmitter was relocated from Rugby to Anthorn, in Cumbria, on 2007 March 31.  See http://www.npl.co.uk/science-+-technology/time-and-frequency/npl-ensures-accurate-uk-time-for-the-next-15-years", "submit_date": "2010-08-20", "submitter_name": "Dave Higton", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1829", "doc-id": "RFC5583", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3, pg.12", "orig_text": "   The signaling mechanisms defined in this document MUST NOT be used to\r\n|  negotiate between using the attribute-value pair (AVP) [RFC3551] and\r\n                               ^^^^^^^^^^^^^^^^^^^^ \r\n   SAVP [RFC3711] profile for RTP.  However, both profiles MAY be used\r\n   separately or jointly with the signaling mechanism defined in this\r\n   document.\r\n", "correct_text": "   The signaling mechanisms defined in this document MUST NOT be used to\r\n|  negotiate between using the Audio/Video Profile (AVP) [RFC3551] and\r\n|  Secure Audio/Video Profile (SAVP) [RFC3711] for RTP.  However, both\r\n   profiles MAY be used separately or jointly with the signaling\r\n   mechanism defined in this document.\r\n", "notes": "Rationale:\r\n  Nonsensical acronym expansion (introduced late in the process).\r\n  The correct expansion could have been found by inspection of\r\n  the References in Section 10.1, in the entry for [RFC3551] !\r\n\r\n  Only changing the bad expansion turns the sentence weird;\r\n  therefore, the above change proposal tries to balance the\r\n  language by also expanding \"SAVP\" and saving the trailing\r\n  instance of \"profile\" (being part of both acronym expansions).", "submit_date": "2009-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1830", "doc-id": "RFC5584", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2, pg.29", "orig_text": "   Also, validity checking of the received audio packets MUST be\r\n   performed.  It can be carried out by the decoding process, as the\r\n   ATRAC format is designed so that the validity of data frames can be\r\n|  determined by decoding the algorithm.  [...]\r\n                 ^^^^^^^^^^^^", "correct_text": "   Also, validity checking of the received audio packets MUST be\r\n   performed.  It can be carried out by the decoding process, as the\r\n   ATRAC format is designed so that the validity of data frames can be\r\n|  determined by the decoding algorithm.  [...]\r\n                 ^^^^^^^^^^^^", "notes": "Rationale: Confusing word twister.", "submit_date": "2009-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1831", "doc-id": "RFC2585", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1 and 4.2", "orig_text": "Optional parameters: version (default value is \"1\")", "correct_text": "Optional parameters: none\r\n\r\n[Note: legacy implementations MAY include a version parameter, which SHOULD be ignored if present.]", "notes": "The optional parameters is ambiguous because it does not state what the version refers to. It is unlikely to be the version of PKIX, because RFC 2459 preceded this document, and the versions of the PKIX format described in RFC 2459 was 2 and 3. The authors note that we did not have a reference to the PKIX specification. Because of this, we suggest that the \"version\" parameter be ignored if present, and that no assumption of what the default of \"1\" means. Further, we suggest that \"version\" not be used when generating MIME bodies.", "submit_date": "2009-08-12", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1832", "doc-id": "RFC5415", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.40", "orig_text": "    4 -   Base MAC Address: The WTP's Base MAC address, which MAY be\r\n             assigned to the primary Ethernet interface.", "correct_text": "     4 -   Base MAC Address: The WTP's Base MAC address MUST be\r\n              included in the WTP Board Data message element, and MAY be\r\n              assigned to the primary Ethernet interface.", "notes": "This is to correct the problem that the requirement for the Base MAC Address (mandatory or optional) is not defined in the spec.  This change is needed to allow the MIBs to use the Base MAC Address as an index, and has been approved by the CAPWAP WG.", "submit_date": "2009-08-13", "submitter_name": "Margaret Wasserman", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1833", "doc-id": "RFC2328", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": "Figure 1b illustrates the link-state database representation\r\n\t    of a Point-to-MultiPoint network. On the left side of the\r\n\t    figure, a Point-to-MultiPoint network is pictured. It is\r\n\t    assumed that all routers can communicate directly, except\r\n\t    for\trouters\tRT4 and\tRT5. I3\tthough I6 indicate the routers'\r\n", "correct_text": "Figure 1b illustrates the link-state database representation\r\n\t    of a Point-to-MultiPoint network. On the left side of the\r\n\t    figure, a Point-to-MultiPoint network is pictured. It is\r\n\t    assumed that all routers can communicate directly, except\r\n\t    for\trouters\tRT4 and\tRT5. I3\tthrough I6 indicate the routers'\r\n", "notes": "Should be I3 *through* I6", "submit_date": "2009-08-19", "submitter_name": "Dande Rajasekhar", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1834", "doc-id": "RFC4427", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6", "orig_text": "   E. M:N (M, N > 1, N >= M) type:\r\n\r\n   A set of M specific recovery LSPs/spans protects a set of up to N\r\n   specific working LSPs/spans.  The two sets are explicitly identified.\r\n   Extra traffic can be transported over the M recovery LSPs/spans when\r\n   available.  All the LSPs/spans must start and end at the same nodes.", "correct_text": "   E. M:N (M, N > 1, N >= M > 1) type:\r\n\r\n   A set of M specific recovery LSPs/spans protects a set of up to N\r\n   specific working LSPs/spans.  The two sets are explicitly identified.\r\n   Extra traffic can be transported over the M recovery LSPs/spans when\r\n   available.  All the LSPs/spans must start and end at the same nodes.", "notes": "M > 1 is not specified\r\n\r\n[Adrian Farrel] \r\nM > 1 was intended by the language \"M, N > 1\"\r\nThis has been confused by the othe use of a comma", "submit_date": "2009-08-20", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1835", "doc-id": "RFC4427", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "6.3. M:N (M, N > 1, N >= M) Protection\r\n\r\n\r\n   M:N protection has N working LSPs/spans carrying normal traffic and M\r\n   protection LSP/span that may carry extra-traffic.", "correct_text": "6.3. M:N (M, N > 1, N >= M > 1) Protection\r\n\r\n\r\n   M:N protection has N working LSPs/spans carrying normal traffic and M\r\n   protection LSP/span that may carry extra-traffic.", "notes": "M > 1 is added\r\n\r\n[Adrian Farrel] \r\nM > 1 was intended by the language \"M, N > 1\"\r\nThis has been confused by the other use of a comma", "submit_date": "2009-08-20", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2123", "doc-id": "RFC5479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1.7", "orig_text": "[[ second paragraph: ]]\r\n\r\n   With this proposal, the ECDSA signature, MIKEY-ECIES, and MIKEY-ECMQV\r\n|  function exactly like MIKEY-RSA, and the new DH-Group code function\r\n   exactly like MIKEY-DHSIGN.  Therefore, these ECC mechanisms are not\r\n   discussed separately in this document.\r\n", "correct_text": "   With this proposal, the ECDSA signature, MIKEY-ECIES, and MIKEY-ECMQV\r\n|  function exactly like MIKEY-RSA, and the new DH-Group code functions\r\n   exactly like MIKEY-DHSIGN.  Therefore, these ECC mechanisms are not\r\n   discussed separately in this document.\r\n", "notes": "Rationale: singular/plural mismatch -- keep for update!", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7029", "doc-id": "RFC1459", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.3.2", "orig_text": ":MODE WiZ -w                    ; turns reception of WALLOPS messages\r\n                                off for WiZ.", "correct_text": "MODE WiZ -w                     ; turns reception of WALLOPS messages\r\n                                off for WiZ.", "notes": ":MODE WiZ -w is a WiZ message from MODE, but WiZ is not an IRC command.\n --VERIFIER NOTES-- \n  Was corrected in subsequent revisions: https://www.rfc-editor.org/rfc/rfc2812#section-3.1.5", "submit_date": "2022-07-19", "submitter_name": "wizzwizz4", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 19:56:29"}, {"errata_id": "1836", "doc-id": "RFC5260", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A", "orig_text": "int jday(int year, int month, int day)\r\n{\r\n    int j, c, ya;\r\n\r\n    if (month > 2)\r\n        month -= 3;\r\n    else\r\n    {\r\n        month += 9;\r\n        year--;\r\n    }\r\n    c = year / 100;\r\n    ya = year - c * 100;\r\n    return (c * 146097 / 4 + ya * 1461 / 4 + (month * 153 + 2) / 5 +\r\n            day + 1721119);\r\n}\r\n\r\nvoid jdate(int j, int *year, int *month, int *day)\r\n{\r\n    int y, m, d;\r\n\r\n    j -= 1721119;\r\n    y = (j * 4 - 1) / 146097;\r\n    j = j * 4 - y * 146097 - 1;\r\n    d = j / 4;\r\n    j = (d * 4 + 3) / 1461;\r\n    d = d * 4 - j * 1461 + 3;\r\n    d = (d + 4) / 4;\r\n    m = (d * 5 - 3) / 153;\r\n    d = d * 5 - m * 153 - 3;\r\n    *day = (d + 5) / 5;\r\n    *year = y * 100 + j;\r\n    if (m < 10)\r\n        *month = m + 3;\r\n    else\r\n    {\r\n        *month = m - 9;\r\n        *year += 1;\r\n    }\r\n}", "correct_text": "int jday(int year, int month, int day)\r\n{\r\n    int c, ya;\r\n\r\n    if (month > 2)\r\n        month -= 3;\r\n    else\r\n    {\r\n        month += 9;\r\n        year--;\r\n    }\r\n    c = year / 100;\r\n    ya = year - c * 100;\r\n    return (c * 146097 / 4 + ya * 1461 / 4 + (month * 153 + 2) / 5 +\r\n            day + (1721119 - 2400001));\r\n}\r\n\r\nvoid jdate(int j, int *year, int *month, int *day)\r\n{\r\n    int y, m, d;\r\n\r\n    j -= (1721119 - 2400001);\r\n    y = (j * 4 - 1) / 146097;\r\n    j = j * 4 - y * 146097 - 1;\r\n    d = j / 4;\r\n    j = (d * 4 + 3) / 1461;\r\n    d = d * 4 - j * 1461 + 3;\r\n    d = (d + 4) / 4;\r\n    m = (d * 5 - 3) / 153;\r\n    d = d * 5 - m * 153 - 3;\r\n    *day = (d + 5) / 5;\r\n    *year = y * 100 + j;\r\n    if (m < 10)\r\n        *month = m + 3;\r\n    else\r\n    {\r\n        *month = m - 9;\r\n        *year += 1;\r\n    }\r\n}", "notes": "The sample Julian day and date routines are coded to use regular Julian dates, not the modified Julian dates specified in the RFC. The above modification adds the necessary conversion factors for modified Julian days. An unused variable (j) was also removed.", "submit_date": "2009-08-22", "submitter_name": "Ned Freed", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1837", "doc-id": "RFC3036", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "", "correct_text": "", "notes": "\r\nA reference for [Dobb] is missing.\r\n\r\nRationale:\r\nIn section 2.9.1, there is a mention of a problem\r\nwith MD5. The text refers to [Dobb] but the\r\nreference section contains no citation.\r\n\n --VERIFIER NOTES-- \nRFC 3036 has been obsoleted by RFC 5036.\r\n\r\nThe text at issue is a quote from another RFC. That RFC can be inspected to find the full context.", "submit_date": "2006-04-13", "submitter_name": "Barbara Denny", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1838", "doc-id": "RFC4191", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   Default router preferences and preferences for more-specific routes\r\n   are encoded the same way.\r\n\r\n   Preference values are encoded as a two-bit signed integer, as\r\n   follows:\r\n\r\n      01      High\r\n      00      Medium (default)\r\n      11      Low\r\n      10      Reserved - MUST NOT be sent\r\n\r\n   Note that implementations can treat the value as a two-bit signed\r\n   integer.\r\n\r\n", "correct_text": "   Default router preferences and preferences for more-specific routes\r\n   are encoded the same way.\r\n\r\n   Preference values are encoded in 2 bits, as\r\n   follows:\r\n\r\n      01      High\r\n      00      Medium (default)\r\n      11      Low\r\n      10      Reserved - MUST NOT be sent\r\n\r\n   Note that implementations can treat the value as a two-bit signed\r\n   integer.\r\n", "notes": "The characterization of route preferences as a 2-bit integer is extremely confusing.  Fortunately, -(0) is not used, but even so there seems to be little rationale for looking treating the preference as a signed rather than unsigned value.", "submit_date": "2009-08-24", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1839", "doc-id": "RFC2876", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "300b 0609 6086 4801 6502 0101 0400", "correct_text": "300b 0609 6086 4801 6502 0101 04", "notes": "The SMIMECapability for SKIPJACK should be 300b 0609 6086 4801 6502 0101 04, which is the DER encoding of the id-fortezzaConfidentialityAlgorithm OID.  The extra 00 should not be included.", "submit_date": "2009-08-25", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1840", "doc-id": "RFC3370", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "   [PKCS#1]    Kaliski, B, \"PKCS #1: RSA Encryption, Version 2.0\", RFC\r\n               2437, October, 1998.", "correct_text": "   [PKCS#1]   Kaliski, B., \"PKCS #1: RSA Encryption, Version 1.5.\",\r\n              RFC 2313, March 1998.", "notes": "", "submit_date": "2009-08-25", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2277", "doc-id": "RFC5858", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2, pg. 7", "orig_text": "\r\n                BEFORE COMPRESSION AND APPLICATION OF ESP\r\n                ----------------------------\r\n          IPv4  |orig IP hdr  |     |      |\r\n                |(any options)| TCP | Data |\r\n                ----------------------------\r\n\r\n                 AFTER ROHCOIPSEC COMPRESSION AND APPLICATION OF ESP\r\n               ------------------------------------------------------\r\n         IPv4  | new IP hdr  |     | Cmpr. |    | ROHC | ESP   | ESP|\r\n               |(any options)| ESP | Hdr.  |Data| ICV  |Trailer| ICV|\r\n               ------------------------------------------------------\r\n\r\n   Figure 1.  Example of a ROHCoIPsec-Processed Packet", "correct_text": "\r\n                BEFORE COMPRESSION AND APPLICATION OF ESP\r\n                ----------------------------\r\n          IPv4  |orig IP hdr  |     |      |\r\n                |(any options)| TCP | Data |\r\n                ----------------------------\r\n\r\n                 AFTER ROHCOIPSEC COMPRESSION AND APPLICATION OF ESP\r\n               ------------------------------------------------------\r\n         IPv4  | new IP hdr  |     | Cmpr. |    | ROHC | ESP   | ESP|\r\n               |(any options)| ESP | Hdr.  |Data| ICV  |Trailer| ICV|\r\n|              --------------------+===================+-------------\r\n\r\n|  Figure 1.  Example of a ROHCoIPsec-Processed Packet ( +=====+ in\r\n|             the diagram indicates the plaintext that undergoes ESP\r\n|             protection; the packet actually contains the ciphertext)", "notes": "Rationale:\r\n The lower part of Figure 1 misrepresents the packet format;\r\n in the general case (not ESP NULL encryption), the structure\r\n of the inner part of the ESP tunnel mode packet is hidden by\r\n encryption.\r\n The graphical presentation therefore might mislead the reader.\r\n The suggested Corrected Text tries to avoid this by graphically\r\n marking this part of the packet and adding a short note that the\r\n diagram represents the plaintext structure only.", "submit_date": "2010-05-19", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2480", "doc-id": "RFC4330", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "      MSF        Rugby (UK) Radio 60 kHz\r\n", "correct_text": "      MSF        Anthorn (UK) Radio 60 kHz\r\n", "notes": "The MSF transmitter was relocated from Rugby to Anthorn, in Cumbria, on 2007 March 31.  See http://www.npl.co.uk/science-+-technology/time-and-frequency/npl-ensures-accurate-uk-time-for-the-next-15-years\r\n\r\nhttp://www.npl.co.uk/educate-explore/what-is-time/what-is-msf confirms this.", "submit_date": "2010-08-20", "submitter_name": "Dave Higton", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2482", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.1", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(2)  Section 5.2.1 -- typo (text reformatting problem ?)\r\n\r\nIn the 5th line of the last-paragraph of Section 5.2.1,\r\n    \"Sub- Group\"   should be spelled   \"Sub-Group\" .\r\n", "correct_text": "", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2204", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.1.", "orig_text": "   The recipient of the message finds a session key that is encrypted\r\n   to their public key, decrypts the session key, and then uses the\r\n   session key to decrypt the message.", "correct_text": "   The recipient of the message finds a Public-Key Encrypted Session Key\r\n   packet that contains the session key encrypted with the recipient's\r\n   public key, decrypts the session key, and then uses the session key\r\n   to decrypt the message.", "notes": "There is only one session key, the session key, not a session key.\r\nThe recipient is singular.\r\nEncrypted with public key, will be decrypted with secret key. Encrypted\r\n(with the public key) to some cipher.\n --VERIFIER NOTES-- \nThe suggestion is more precise, but harder to read.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1841", "doc-id": "RFC4803", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Section 7", "orig_text": "gmplsOutSegmentTTLDecrement OBJECT-TYPE\r\nSYNTAX Unsigned32\r\nMAX-ACCESS read-create\r\nSTATUS current\r\nDESCRIPTION\r\n\"This object indicates the amount by which to decrement the Time\r\nto Live (TTL) of any payload packets forwarded on this segment if\r\nper-hop decrementing is being done.\r\nA value of zero indicates that no decrement should be made or\r\nthat per-hop decrementing is not in use.\r\nSee the gmplsTunnelTTLDecrement object in the gmplsTunnelTable\r\nof GMPLS-TE-STD-MIB for a value by which to decrement the TTL\r\nfor the whole of a tunnel.\r\nThis object cannot be modified if mplsOutSegmentRowStatus for\r\nthe associated entry in the mplsOutSegmentTable is active(1).\"\r\nREFERENCE\r\n\"1. Time To Live (TTL) Processing in Multi-Protocol Label\r\nSwitching (MPLS) Networks, RFC 3443.\r\n2. Generalized Multiprotocol Label Switching (GMPLS) Traffic\r\nEngineering Management Information Base, RFC 4802.\"\r\nDEFVAL { 0 }\r\n::= { gmplsOutSegmentEntry 2 }", "correct_text": "gmplsOutSegmentTTLDecrement OBJECT-TYPE\r\nSYNTAX Unsigned32\r\nMAX-ACCESS read-create\r\nSTATUS current\r\nDESCRIPTION\r\n\"This object indicates the amount by which to decrement the Time\r\nto Live (TTL) of any payload packets forwarded on this segment if\r\nper-hop decrementing is being done.\r\nA value of zero indicates that no decrement should be made or\r\nthat per-hop decrementing is not in use.\r\nThis object cannot be modified if mplsOutSegmentRowStatus for\r\nthe associated entry in the mplsOutSegmentTable is active(1).\"\r\nREFERENCE\r\n\"1. Time To Live (TTL) Processing in Multi-Protocol Label\r\nSwitching (MPLS) Networks, RFC 3443.\"\r\nDEFVAL { 0 }\r\n::= { gmplsOutSegmentEntry 2 }", "notes": "In gmplsOutSegmentTable for the object gmplsOutSegmentTTLDecrement there is no gmplsTunnelTTLDecrement object in the gmplsTunnelTable of GMPLS-TE-STD-MIB which is referenced.", "submit_date": "2009-08-27", "submitter_name": "Girish Mahanta", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1842", "doc-id": "RFC3811", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "       MplsExtendedTunnelId ::= TEXTUAL-CONVENTION\r\n          STATUS        current\r\n          DESCRIPTION\r\n             \"A unique identifier for an MPLS Tunnel.  This may\r\n              represent an IPv4 address of the ingress or egress\r\n              LSR for the tunnel.  This value is derived from the\r\n              Extended Tunnel Id in RSVP or the Ingress Router ID\r\n              for CR-LDP.\"\r\n          REFERENCE\r\n             \"RSVP-TE: Extensions to RSVP for LSP Tunnels,\r\n              [RFC3209].\r\n\r\n              Constraint-Based LSP Setup using LDP, [RFC3212].\"\r\n          SYNTAX  Unsigned32(0..4294967295)", "correct_text": "       MplsExtendedTunnelId ::= TEXTUAL-CONVENTION\r\n          STATUS        current\r\n          DESCRIPTION\r\n             \"A unique identifier for an MPLS Tunnel.  This may\r\n              represent an IPv4 address of the ingress or egress\r\n              LSR for the tunnel for an IPv4 network.  For IPv6\r\n              this represents an IPv4 address of the ingress or\r\n              egress LSR for the tunnel for an IPv6 network.\r\n              This value is derived from the\r\n              Extended Tunnel Id in RSVP or the Ingress Router ID\r\n              for CR-LDP.\"\r\n          REFERENCE\r\n             \"RSVP-TE: Extensions to RSVP for LSP Tunnels,\r\n              [RFC3209].\r\n\r\n              Constraint-Based LSP Setup using LDP, [RFC3212].\"\r\n          SYNTAX  OCTET STRING(SIZE(16))", "notes": "The Syntax is wrong. This change will require the new TC to be used through out the MPLS MIB modules. A MIB http://potaroo.net/ietf/idref/draft-manral-mpls-rfc3811bis/ was written for the purpose.\n --VERIFIER NOTES-- \nAlthough only a few lines of text are proposed for modification, this change would make a technically un-interoperable change to existing implementations. Therefore it should be handled by discussion in the working group and a new RFC if there is consensus. I am rejecting the erratum.   ", "submit_date": "2009-08-27", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1843", "doc-id": "RFC1227", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "          IMPORTS\r\n                  enterprises\r\n                          FROM RFC1155-SMI\r\n                  OBJECT-TYPE\r\n                          FROM RFC1212;\r\n", "correct_text": "          IMPORTS\r\n                  enterprises\r\n                          FROM RFC1155-SMI\r\n                  OBJECT-TYPE\r\n                          FROM RFC1212\r\n                  DisplayString\r\n                          FROM RFC1213-MIB;\r\n", "notes": "The object smuxPdescription is declared as a DisplayString but that name isn't imported.\r\n\r\nI choose to take DisplayString from RFC1213-MIB since that is where it existed at the time.\n --VERIFIER NOTES-- \nSuch a change in a MIB module cannot be done by an erratum, but rather by issuing a new version of the MIB module. As this document is Historic and the MIB module is written in SMIv1, I see no need for such a change in the future. ", "submit_date": "2009-08-29", "submitter_name": "Magnus Fromreide", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1844", "doc-id": "RFC5296", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "The protocol that uses these extensions itself is referred to as \r\nthe EAP Re-authentication Protocol (ERP).  ", "correct_text": "The protocol that uses these extensions is itself referred to as \r\nthe EAP Re-authentication Protocol (ERP).  ", "notes": "Original text is awkward.", "submit_date": "2009-08-31", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1845", "doc-id": "RFC5296", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "An ER server is a logical entity; \r\nthe home ER server is located on the same backend authentication \r\nserver as the EAP server in the home domain.  The local ER server \r\nmay not necessarily be a full EAP server.", "correct_text": "An ER server is a logical entity; \r\nit may not necessarily be co-located with, or physically part of, \r\na full EAP server. ", "notes": "The original text makes two unwarranted assumptions, which the corrected text eliminates.  The first assumption is that the EAP server in the home domain is located on a back-end authentication (i.e., AAA) server; the second that the home ERP server is also located there.  Neither of these conditions are required and place unnecessary restrictions upon deployment options.", "submit_date": "2009-08-31", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2278", "doc-id": "RFC1323", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "           Section 4 introduces a new TCP option, \"Timestamps\", and then\r\n           defines a mechanism using this option that allows nearly\r\n           every segment, including retransmissions, to be timed at\r\n           negligible computational cost.  We use the mnemonic RTTM\r\n           (Round Trip Time Measurement) for this mechanism, to\r\n           distinguish it from other uses of the Timestamps option.\r\n\r\n", "correct_text": "           Section 3.2 introduces a new TCP option, \"Timestamps\", and then\r\n           defines a mechanism using this option that allows nearly\r\n           every segment, including retransmissions, to be timed at\r\n           negligible computational cost.  We use the mnemonic RTTM\r\n           (Round Trip Time Measurement) for this mechanism, to\r\n           distinguish it from other uses of the Timestamps option.\r\n\r\n", "notes": "Incorrect reference to Section 4.", "submit_date": "2010-05-19", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2540", "doc-id": "RFC5572", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4.1.2", "orig_text": "This marker is used by the\r\ntunnel broker to identify a TSP signaling packet that is sent\r\nafter an IPv6 over UDP is established.", "correct_text": "This marker is used by the \r\ntunnel broker to identify a TSP signaling packet that is sent \r\nafter an IPv6 over UDP tunnel is established.", "notes": "", "submit_date": "2010-10-02", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1852", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.27", "orig_text": "  pwLastChange OBJECT-TYPE\r\n|    SYNTAX        TimeTicks\r\n     MAX-ACCESS    read-only\r\n     STATUS        current\r\n     DESCRIPTION\r\n        \"The value of sysUpTime at the time the PW entered\r\n         its current operational state.  If the current state was\r\n         entered prior to the last re-initialization of the local\r\n         network management subsystem, then this object contains a\r\n         zero value.\"\r\n     ::= { pwEntry 36 }\r\n", "correct_text": "  pwLastChange OBJECT-TYPE\r\n|    SYNTAX        TimeStamp\r\n     MAX-ACCESS    read-only\r\n     STATUS        current\r\n     DESCRIPTION\r\n        \"The value of sysUpTime at the time the PW entered\r\n         its current operational state.  If the current state was\r\n         entered prior to the last re-initialization of the local\r\n         network management subsystem, then this object contains a\r\n         zero value.\"\r\n     ::= { pwEntry 36 }\r\n", "notes": "[[ Location is bottom of page 27 ]]\r\n\r\nLike any other object intended to keep a snapshot of sysUpTime,\r\nthis object must have the corrresponding SYNTAX of TimeStamp\r\n(cf. pwCreateTime, on mid-page 27); a SYNTAX of TimeTicks is\r\nappropriate on;y for 'running clocks' started at a particular\r\nevent (like pwUpTime, also on pg. 27, just above pwLastChange).\r\n\r\n\r\nAlthough technically correct that the SYNTAX should be TimeStamp, this\r\nis safe because the SYNTAX of TimeStamp is TimeTicks. ", "submit_date": "2009-09-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1853", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11, 1st para", "orig_text": "   This section contains the initial version of the IANA-PWE3-MIB.  IANA\r\n|  has updated this MIB module based on expert review as defined in\r\n   [RFC5226].  Each new assignment of PW type or PW PSN type made by\r\n   IANA based on the procedures described in [RFC4446] should be\r\n   documented in the online version of IANA-PWE3-MIB.  The current\r\n   IANA-PWE3-MIB contains PW types as requested in [RFC4446] and\r\n   [RFC4863].\r\n", "correct_text": "   This section contains the initial version of the IANA-PWE3-MIB.  IANA\r\n|  will update this MIB module based on expert review as defined in\r\n   [RFC5226].  Each new assignment of PW type or PW PSN type made by\r\n   IANA based on the procedures described in [RFC4446] should be\r\n   documented in the online version of IANA-PWE3-MIB.  The current\r\n   IANA-PWE3-MIB contains PW types as requested in [RFC4446] and\r\n   [RFC4863].\r\n", "notes": "Wrong temporal relationship!", "submit_date": "2009-09-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1854", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11, pg. 8", "orig_text": "[[ 2nd para of DESCRIPTION clause for ianaPwe3MIB MODULE-IDENTITY ]]\r\n\r\n                                                         ... The\r\n           Designated Expert will be selected by the IESG Area\r\n|          Director(s) of the internet Area.\r\n                              ^", "correct_text": "                                                         ... The\r\n           Designated Expert will be selected by the IESG Area\r\n|          Director(s) of the Internet Area.\r\n                              ^", "notes": "", "submit_date": "2009-09-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1855", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.17", "orig_text": "[[ 3rd para of DESCRIPTION clause of pw Owner OBJECT-TYPE ]]\r\n\r\n           'genFecSignaling' is used in case of LDP signaling with\r\n|          the generalized FEC.\r\n", "correct_text": "           'genFecSignaling' is used in case of LDP signaling with\r\n|          the generalized FEC element.\r\n", "notes": "This is correct, but is thought unlikely to cause any problems", "submit_date": "2009-09-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1856", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12, pg.18", "orig_text": "  pwPeerAddrType OBJECT-TYPE\r\n     SYNTAX        InetAddressType\r\n     MAX-ACCESS    read-create\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"Denotes the address type of the peer node.  It should be\r\n           set to 'unknown' if PE/PW maintenance protocol is not used\r\n           and the address is unknown.\"\r\n     DEFVAL { ipv4 }\r\n     ::= { pwEntry 8 }\r\n\r\n  pwPeerAddr OBJECT-TYPE\r\n     SYNTAX        InetAddress\r\n     MAX-ACCESS    read-create\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"This object contains the value of the peer node address\r\n           of the PW/PE maintenance protocol entity.  This object\r\n           SHOULD contain a value of all zeroes if not applicable\r\n           (pwPeerAddrType is 'unknown').\"\r\n     ::= { pwEntry 9 }\r\n\r\n", "correct_text": "  pwPeerAddrType OBJECT-TYPE\r\n     SYNTAX        InetAddressType\r\n     MAX-ACCESS    read-create\r\n     STATUS        current\r\n     DESCRIPTION\r\n|         \"Denotes the address type of the peer node stored in\r\n|          pwPeerAddr.  It should be set to 'unknown' if PE/PW\r\n           maintenance protocol is not used and the address is\r\n           unknown.\"\r\n     DEFVAL { ipv4 }\r\n     ::= { pwEntry 8 }\r\n\r\n  pwPeerAddr OBJECT-TYPE\r\n     SYNTAX        InetAddress\r\n     MAX-ACCESS    read-create\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"This object contains the value of the peer node address\r\n|          of the PW/PE maintenance protocol entity. The type of this\r\n|          object is determined by the corresponding pwPeerAddr object.\r\n|          This object MUST contain a zero-length octet string if not\r\n           applicable (pwPeerAddrType is 'unknown').\"\r\n     ::= { pwEntry 9 }\r\n\r\n", "notes": "Rationale:\r\n\r\na) RFC 4001 requests that every use of InetAddressType and\r\n   InetAddress makes explicit the coupling between the objects.\r\n   Hence, the DESCRIPTION clause(s) need to be amended.\r\n   For clarity, the Corrected text does so for both objects.\r\n\r\nb) RFC 4001 (pg. 6) specifies that an InetAddressType object of\r\n   value unknown(0) correspond to an InetAddress object\r\n   that is a zero-length string, unless unknown(0) is used to\r\n   indicate an internet address type not (yet) known (at the time\r\n   of publication of RFC 4001). All Standards Track MIB modules\r\n   making use of InetAddressType so far couple the value unknown(0)\r\n   with an InetAddress of size 0, because an unknown IP address\r\n   of a (known) specific type can be represented by the\r\n   \"unspecified address\" of that address format.\r\n   Hence, the original text should be changed.\r\n   This has been done in the perceived spirit of the conformance\r\n   specification for pwPeerAddr on mid-page 51 and page 54.\r\n\r\nThis is a correct, however, it is unlikely that \"unknown\" is ever used in an implementation. Therefore it is not critical to fix this, hence classifying as hold for document update.\r\n", "submit_date": "2009-09-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1857", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.19", "orig_text": "[[ DESCRIPTION clause of pwAttachedPwIndex OBJECT-TYPE ]]\r\n\r\n     DESCRIPTION\r\n         \"If the PW is attached to another PW instead of a local\r\n          native service, this item indicates the pwIndex of the\r\n          attached PW.  Otherwise, this object MUST\r\n|         be set to zero.  Attachment to another PW will have no\r\n          PW specific entry in any of the service MIB modules.\"\r\n", "correct_text": "     DESCRIPTION\r\n         \"If the PW is attached to another PW instead of a local\r\n          native service, this item indicates the pwIndex of the\r\n          attached PW.  Otherwise, this object MUST\r\n|         be set to zero.  A PW attached to another PW will have no\r\n          PW specific entry in any of the service MIB modules.\"\r\n", "notes": "Rationale: Clarity of language.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2169", "doc-id": "RFC3329", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "The 200 OK response (6) for the INVITE and the ACK (7) are also sent\r\n   over the TLS connection.  The ACK will contain the same Security-\r\n   Verify header field as the INVITE (3).", "correct_text": "The 200 OK response (6) for the INVITE and the ACK (7) are also sent\r\n   over the TLS connection.", "notes": "RFC3329 Section 2.6, Table 1: Summary of Header Usage. indicates that Security-Client, Security-Server, Security-Verify are \"Not applicable\" to the SIP ACK request.\r\n\r\nRFC 3261 says (section 20) \"Not applicable\" means that the header\r\n   field MUST NOT be present in a request.  If one is placed in a\r\n   request by mistake, it MUST be ignored by the UAS receiving the\r\n   request.", "submit_date": "2010-04-23", "submitter_name": "Peter Dawes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2541", "doc-id": "RFC2460", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "(Nothing about this omission.)", "correct_text": "Compared to RFC 1883, this specification reduces the size of the \r\nflow label field to 20 bits. The references to a 24 bit flow label \r\nfield on pages 87 and 88 of RFC 2205 are updated accordingly.", "notes": "RFC 2460 updates RFC 2205.", "submit_date": "2010-10-03", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7026", "doc-id": "RFC1925", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   (7)  It is always something", "correct_text": "   (7)  It is always something.", "notes": "This sentence is missing a period.\r\n\r\n(It is also incorrect: it can sometimes be nothing.  The corollary says \"Good, Fast, Cheap: Pick any two\", which is often true, but I've been around long enough to know that sometimes people choose none of the above.  That is opinion though.)", "submit_date": "2022-07-14", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-07-15 20:26:18"}, {"errata_id": "1858", "doc-id": "RFC5601", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "12, pg.19/20", "orig_text": "a)  [[ DESCRIPTION clause for pwLocalAttachmentID OBJECT-TYPE,\r\n       at the bottom of page 19: ]]\r\n\r\n         \"This object is an octet string representing the local\r\n          forwarder attachment individual identifier (AII) to be\r\n          used by this PW.  It is used as the Source AII (SAII) for\r\n|         outgoing signaling messages and the Target AII (TAII) in\r\n          the incoming messages from the peer.  Applicable if\r\n          pwOwner equal 'genFecSignaling'.\"\r\n\r\n\r\nb)  [[ DESCRIPTION clause for pwRemoteAttachmentID OBJECT-TYPE,\r\n       on top of page 20: ]]\r\n \r\n         \"This object is an octet string representing the remote\r\n          forwarder attachment individual identifier (AII) to be\r\n          used by this PW.  It is used as the TAII for outgoing\r\n|         signaling messages and the SAII in the incoming messages\r\n          from the peer.\r\n          Applicable if pwOwner equals 'genFecSignaling'.\"", "correct_text": "a)\r\n         \"This object is an octet string representing the local\r\n          forwarder attachment individual identifier (AII) to be\r\n          used by this PW.  It is used as the Source AII (SAII) for\r\n|         outgoing signaling messages and expected as the Target\r\n          AII (TAII) in the incoming messages from the peer.\r\n          Applicable if pwOwner equal 'genFecSignaling'.\"\r\n\r\nb)\r\n         \"This object is an octet string representing the remote\r\n          forwarder attachment individual identifier (AII) to be\r\n          used by this PW.  It is used as the TAII for outgoing\r\n|         signaling messages and expected as the SAII in the\r\n          incoming messages from the peer.\r\n          Applicable if pwOwner equals 'genFecSignaling'.\"\r\n", "notes": "Rationale: \r\nThe phrase talking about \"use\" of a value in an incoming message\r\nis potentially misleading.  The insertion of \"expected as\" should\r\ncure the issue, with minimal footprint.\n --VERIFIER NOTES-- \n   The original text clearly states the use of the object.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1859", "doc-id": "RFC5601", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12, pg.25", "orig_text": "[[ DESCRIPTION clause for pwFcsRetentionCfg OBJECT-TYPE ]]\r\n\r\n         \"The local configuration of Frame Check Sequence (FCS)\r\n          retention for this PW.  FCS retention can be configured for\r\n          PW types High-Level Data Link Control (HDLC), Point-to-Point\r\n          Protocol (PPP), and Ethernet only.  If the implementation\r\n|         does not support FCS retention, an error MUST be reported in\r\n          pwFcsRetentionStatus.  This object MAY be changed only if\r\n          the PW is not active.\"\r\n", "correct_text": "         \"The local configuration of Frame Check Sequence (FCS)\r\n          retention for this PW.  FCS retention can be configured for\r\n          PW types High-Level Data Link Control (HDLC), Point-to-Point\r\n          Protocol (PPP), and Ethernet only.  If this object is set to\r\n          fcsRetentionEnable(2) and the implementation does not support\r\n          the FCS retention for this PW, an error MUST be indicated by\r\n          setting pwFcsRetentionStatus to localFcsRetentionCfgErr(4).\r\n          This object can be changed only if the PW is not active.\" \r\n", "notes": "Rationale:\r\n\r\nThe original DESCRIPTION indicated unconditional signaling of an error, whether\r\nthe activation of unsupported FCS retention is requested or not.\r\nThis is contrary to the DESCRIPTION for pwFcsRetentionStatus.\r\n\r\n", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3030", "doc-id": "RFC5601", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12, page 37", "orig_text": "pwPerf1DayIntervalTable  OBJECT-TYPE\r\n     SYNTAX        SEQUENCE OF PwPerf1DayIntervalEntry\r\n     MAX-ACCESS    not-accessible\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"This table provides per-PW performance information for\r\n           the current day's measurement and the previous day's\r\n           interval.\"", "correct_text": "DESCRIPTION\r\n          \"This table provides per-PW performance information for\r\n           the current day's measurement and the previous day's\r\n           measurement.\"", "notes": "", "submit_date": "2011-11-12", "submitter_name": "Stewart Bryant", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1860", "doc-id": "RFC5601", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12, pg.26", "orig_text": "a) [[ 2nd para of DESCRIPTION clause for pwOutboundLabel OBJECT-TYPE: ]]\r\n\r\n          For MPLS, MPLS over IP, or MPLS over Generic Routing\r\n          Encapsulation (GRE) PSN, it represents the 20-bit PW tag;\r\n          for L2TP, it represents the 32-bit Session ID; and for\r\n|         IP PSN, it represents the destination UDP port number.\r\n\r\nb) [[ 2nd para of DESCRIPTION clause for pwInboundLabel OBJECT-TYPE: ]]\r\n\r\n          For MPLS, MPLS over IP, or MPLS over GRE PSN, it represents\r\n          the 20-bit PW tag; for L2TP, it represents the 32-bit\r\n|         Session ID; and for IP PSN, it represents the source\r\n          UDP port number.\r\n", "correct_text": "a)\r\n          For MPLS, MPLS over IP, or MPLS over Generic Routing\r\n          Encapsulation (GRE) PSN, it represents the 20-bit PW tag;\r\n          for L2TP, it represents the 32-bit Session ID; and for\r\n|         IP PSN, it represents the remote UDP port number.\r\n\r\nb)\r\n          For MPLS, MPLS over IP, or MPLS over GRE PSN, it represents\r\n          the 20-bit PW tag; for L2TP, it represents the 32-bit\r\n|         Session ID; and for IP PSN, it represents the local\r\n          UDP port number.\r\n\r\n", "notes": "Rationale:\r\n\r\nConfusion of terms; the role of source vs. destination port number\r\nchanges with the direction in which the packets are sent, whereas\r\nthe role of local vs. remote port number is static (from the point\r\nof view of each peer) and as such can be configured here.\r\nThe necessary clarification substitutes the proper terms for the\r\ninappropriate ones.\r\n\r\n\r\n\n --VERIFIER NOTES-- \n   The original text is clear and correct.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1861", "doc-id": "RFC5601", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12, pg.34", "orig_text": "  pwPerfIntervalEntry OBJECT-TYPE\r\n     SYNTAX        PwPerfIntervalEntry\r\n     MAX-ACCESS    not-accessible\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"An entry in this table is created by the agent for every\r\n|          PW.\"\r\n", "correct_text": "  pwPerfIntervalEntry OBJECT-TYPE\r\n     SYNTAX        PwPerfIntervalEntry\r\n     MAX-ACCESS    not-accessible\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"An entry in this table is created by the agent for every\r\n           monitored interval for each monitored PW.\"\r\n", "notes": "", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1862", "doc-id": "RFC5601", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12, pg.38", "orig_text": "  pwPerf1DayIntervalEntry OBJECT-TYPE\r\n     SYNTAX        PwPerf1DayIntervalEntry\r\n     MAX-ACCESS    not-accessible\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"An entry in this table is created by the agent for every\r\n|          PW.\"", "correct_text": "  pwPerf1DayIntervalEntry OBJECT-TYPE\r\n     SYNTAX        PwPerf1DayIntervalEntry\r\n     MAX-ACCESS    not-accessible\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"An entry in this table is created by the agent for every\r\n           monitored day for each monitored PW.\"", "notes": "", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2542", "doc-id": "RFC5907", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "-- MIB contains 6 groups", "correct_text": "-- MIB contains 5 groups", "notes": "Late in NTPv4 MIB development the proposed 6th section in the MIB, NtpEntNotifPrefix, was removed, the comment preceding the section definitions was overlooked, still referencing 6 MIB sections.", "submit_date": "2010-10-04", "submitter_name": "Dave Hart", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1864", "doc-id": "RFC5601", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12, pg.40", "orig_text": "[[ 2nd para of DESCRIPTION clause for pwIndexMappingEntry OBJECT-TYPE: ]]\r\n\r\n           Implementers need to be aware that if the value of\r\n|          the pwIndexMappingPeerAddr (an OID) has more than\r\n|          113 sub-identifiers, then OIDs of column instances\r\n           in this table will have more than 128 sub-identifiers\r\n           and cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3.\"\r\n", "correct_text": "           Implementers need to be aware that if the value of\r\n|          the pwIndexMappingPeerAddr corresponds to more than\r\n|          113 sub-identifiers, then OIDs of column instances\r\n           in this table will have more than 128 sub-identifiers\r\n           and cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3.\"\r\n", "notes": "Rationale: Clarification of potentially misleading text:\r\npwIndexMappingPeerAddr is *not* an OID by itself, it is\r\ntransformed into an OID when used as an index in the SMI.\r\nAn alternate replacement text might be:\r\n\r\n           Implementers need to be aware that if the value of\r\n|          the pwIndexMappingPeerAddr has a size of more than\r\n|          112 octets, then OIDs of column instances\r\n           in this table will have more than 128 sub-identifiers\r\n           and cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3.\"\n --VERIFIER NOTES-- \n   The original text is correct and easily understood by a MIB experts.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1865", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.41", "orig_text": "  pwIndexMappingPeerAddr OBJECT-TYPE\r\n     SYNTAX        InetAddress\r\n     MAX-ACCESS    not-accessible\r\n     STATUS        current\r\n     DESCRIPTION\r\n|         \"IP address of the peer node.\"\r\n     ::= { pwIndexMappingEntry 4 }\r\n", "correct_text": "  pwIndexMappingPeerAddr OBJECT-TYPE\r\n     SYNTAX        InetAddress\r\n     MAX-ACCESS    not-accessible\r\n     STATUS        current\r\n     DESCRIPTION\r\n|         \"IP address of the peer node. The type of this object\r\n           is determined by the value of the corresponding\r\n           pwIndexMappingPeerAddrType object.\" \r\n     ::= { pwIndexMappingEntry 4 } \r\n", "notes": "Rationale: cf. EID=1856", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1866", "doc-id": "RFC5601", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12, pg.42", "orig_text": "[[ 2nd para of DESCRIPTION clause for pwPeerMappingEntry OBJECT-TYPE: ]]\r\n\r\n          Implementers need to be aware that if the value of the\r\n|         pwPeerMappingPeerAddr (an OID) has more than 113\r\n          sub-identifiers, then OIDs of column instances in this\r\n          table will have more than 128 sub-identifiers and cannot\r\n          be accessed using SNMPv1, SNMPv2c, or SNMPv3.\"\r\n", "correct_text": "          Implementers need to be aware that if the value of the\r\n|         pwPeerMappingPeerAddr corresponds to more than 113\r\n          sub-identifiers, then OIDs of column instances in this\r\n          table will have more than 128 sub-identifiers and cannot\r\n          be accessed using SNMPv1, SNMPv2c, or SNMPv3.\"\r\n", "notes": "Rationale:\r\npwPeerMappingPeerAddr is an OCTET STRING, not an OID;\r\ncf. EID=1864.\n --VERIFIER NOTES-- \n      The original text is correct and easily understood by a MIB experts.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1867", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.43", "orig_text": "[[ DESCRIPTION clause for pwPeerMappingPeerAddr OBJECT-TYPE: ]]\r\n\r\n|         \"IP address of the peer node.\"\r\n\r\n", "correct_text": "|         \"IP address of the peer node. The type of this object\r\n           is determined by the value of the corresponding\r\n           pwPeerMappingPeerAddrType object.\"", "notes": "Rationale: cf. EID=1856 and EID=1865.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1868", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.43", "orig_text": "[[ REFERENCE clause of pwUpDownNotifEnable OBJECT-TYPE: ]]\r\n\r\n        \"See also [RFC3413] for explanation that\r\n         notifications are under the ultimate control of the\r\n|        MIB module in this document.\"\r\n", "correct_text": "        \"See also [RFC3413] for explanation that\r\n         notifications are under the ultimate control of the\r\n|        MIB module in that document.\"\r\n", "notes": "Rationale: \"this\" in the given context is likely to be understood\r\nas pointing to \"this\" RFC, RFC 5601!", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1869", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.44", "orig_text": "  pwDeletedNotifEnable  OBJECT-TYPE\r\n     SYNTAX      TruthValue\r\n     MAX-ACCESS  read-write\r\n     STATUS      current\r\n     DESCRIPTION\r\n        \"If this object is set to true(1), then it enables the\r\n|        emission of pwDeleted notification; otherwise, this\r\n         notification is not emitted.\"\r\n     REFERENCE\r\n        \"See also [RFC3413] for explanation that\r\n         notifications are under the ultimate control of the\r\n|        MIB module in this document.\"\r\n", "correct_text": "  pwDeletedNotifEnable  OBJECT-TYPE\r\n     SYNTAX      TruthValue\r\n     MAX-ACCESS  read-write\r\n     STATUS      current\r\n     DESCRIPTION\r\n        \"If this object is set to true(1), then it enables the\r\n|        emission of pwDeleted notifications; otherwise, this\r\n         notification is not emitted.\"\r\n     REFERENCE\r\n        \"See also [RFC3413] for explanation that\r\n         notifications are under the ultimate control of the\r\n|        MIB module in that document.\"\r\n", "notes": "Rationale:\r\na) plural is needed;\r\nb) as for EID=1868", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2170", "doc-id": "RFC3329", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "The second INVITE (4) and the ACK (8) contain a Security-Verify\r\n   header field that mirrors the Security-Server header field received\r\n   in the 421.", "correct_text": "The second INVITE (4) contains a Security-Verify\r\n   header field that mirrors the Security-Server header field received\r\n   in the 421.", "notes": "RFC 3329 Section 2.6, Table 1: Summary of Header Usage. indicates that Security-Client, Security-Server, Security-Verify are \"Not applicable\" to the SIP ACK request.\r\n\r\nRFC 3261 says \"Not applicable\" means that the header field MUST NOT be present in a request.  If one is placed in a request by mistake, it MUST be ignored by the UAS receiving the request.\"", "submit_date": "2010-04-23", "submitter_name": "Peter Dawes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2171", "doc-id": "RFC1878", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "global", "orig_text": "illistrate", "correct_text": "illustrate", "notes": "", "submit_date": "2010-04-23", "submitter_name": "Clark Rossdale", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2172", "doc-id": "RFC4213", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "The issue and the remainder threats are discussed at more length in Security Considerations.\r\n", "correct_text": "This issue and the remainder threats are discussed at more length in Security Considerations.\r\n", "notes": "", "submit_date": "2010-04-25", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2543", "doc-id": "RFC5907", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "Discountinuities in the value of this counter can occur", "correct_text": "Discontinuities in the value of this counter can occur", "notes": "\"Discontinuities\" is misspelled in several counter descriptions.", "submit_date": "2010-10-04", "submitter_name": "Dave Hart", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1870", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.44", "orig_text": "[[ DESCRIPTION clause for pwGenFecIndexMappingTable OBJECT-TYPE: ]]\r\n\r\n          \"This table enables the reverse mapping of the unique\r\n           PWid parameters [GroupAttachmentID, LocalAttachmentID,\r\n           and PeerAttachmentID] and the pwIndex.  The table is\r\n|          only applicable for PW using the generalized FEC.\"\r\n", "correct_text": "          \"This table enables the reverse mapping of the unique\r\n           PWid parameters [GroupAttachmentID, LocalAttachmentID,\r\n           and PeerAttachmentID] and the pwIndex.  The table is\r\n|          only applicable for PWs using the generalized FEC.\"\r\n", "notes": "Rationale: plural is needed!\r\n\r\nNote:\r\n\r\nSurprisingly, the whole definition of the Gen Fec PW ID mapping table\r\n(starting with this entry and extending down to the top of page 47)\r\nis not contained in the part of the MIB module enclosed in comments\r\n   'Reverse mapping tables'  /  'End of reverse mapping tables'\r\n(extending from top of page 40 to mid-page 43).\r\nIt would have been better to move the specification of this table\r\ninto that part as well, i.e. to its end -- irrespective of the OID\r\nvalue assigned to the pwGenFecIndexMappingTable object.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1871", "doc-id": "RFC5601", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12, pg.45", "orig_text": "[[ 2nd para of DESCRIPTION clause for pwGenFecIndexMappingEntry OBJECT-TYPE: ]]\r\n\r\n           Implementers need to be aware that if the combined value\r\n           of pwGenFecIndexMappingAGI, pwGenFecIndexMappingLocalAII,\r\n|          and pwGenFecIndexMappingRemoteAII (OIDs) has more than\r\n|          113 sub-identifiers, then OIDs of column instances\r\n           in this table will have more than 128 sub-identifiers\r\n           and cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3.\"\r\n", "correct_text": "           Implementers need to be aware that if the combined value\r\n           of pwGenFecIndexMappingAGI, pwGenFecIndexMappingLocalAII,\r\n|          and pwGenFecIndexMappingRemoteAII corresponds to more\r\n|          than 113 sub-identifiers, then OIDs of column instances\r\n           in this table will have more than 128 sub-identifiers\r\n           and cannot be accessed using SNMPv1, SNMPv2c, or SNMPv3.\"\r\n", "notes": "Rationale (cf. EID=1864 and EID=1866):\r\nThese objects conceptually are not OIDs; they become mapped to \r\nrelative OIDs when used as INDEX variables. The corrected text\r\nattempts this clarification with minimal textual footprint.\n --VERIFIER NOTES-- \n      The original text is correct and easily understood by a MIB experts.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5758", "doc-id": "RFC8032", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.", "orig_text": "                          (p+3)/8      3        (p-5)/8\r\n                 x = (u/v)        = u v  (u v^7)         (mod p)", "correct_text": "                          (p+3)/8          (p-5)/8\r\n                 x = (u/v)        = u (u v)         (mod p)", "notes": " --VERIFIER NOTES-- \r\nThe original text was correct (verified by Nick Sullivan).\r\n01/28/2022: RFC Editor changed status to Reported per discussion with Stanislav V. Smyshlyaev.\r\n02/15/2022: The status is changed to \"Held for Document Update\" by Stanislav Smyshlyaev. The proposed formulas are correct as well (for the specific case of the EdDSA parameters) and provide a slight efficiency gain.", "submit_date": "2019-06-21", "submitter_name": "Franck Rondepierre", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2022-02-15 05:42:01"}, {"errata_id": "2173", "doc-id": "RFC3473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "TOC", "orig_text": "   10. RSVP Message Formats and Handling  .........................  30\r\n    10.1  RSVP Message Formats  ...................................  30\r\n    10.2  Addressing Path and PathTear Messages   .................  32\r\n\r\n", "correct_text": "   10. RSVP Message Formats and Handling  .........................  30\r\n    10.1  RSVP Message Formats  ...................................  30\r\n    10.2  Addressing Path, PathTear and ResvConf Messages   .......  32\r\n", "notes": "The section is called \"Addressing Path, PathTear and ResvConf Messages\" while the TOC does not talk about ResvConf Message", "submit_date": "2010-04-25", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2174", "doc-id": "RFC1981", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.4.", "orig_text": "If Path MTU Discovery is used, however, the segment size may not be a\r\nsubmultiple of the send space,", "correct_text": "If Path MTU Discovery is used, however, the segment size may not be a\r\nfactor of the send space,", "notes": "What is a submultiple?\n --VERIFIER NOTES-- \nsubmultiple is defined as an exact devisor of a number.  The noted usage is perfectly fine.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2175", "doc-id": "RFC2675", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.", "orig_text": "receiver derive the actual UDP packet length from the IPv6 payload\r\nlength.  (Note that, prior to this modification, zero was not a legal", "correct_text": "receiver derive the actual UDP packet length from the Jumbo Payload\r\nLength.  (Note that, prior to this modification, zero was not a legal", "notes": "The IPv6 payload length is 0.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeierc", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2176", "doc-id": "RFC3447", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.2", "orig_text": "   K        recipient's RSA private key (k denotes the length in octets\r\n            of the RSA modulus n)\r\n   C        ciphertext to be decrypted, an octet string of length k,\r\n            where k = 2hLen + 2\r\n", "correct_text": "   K        recipient's RSA private key (k denotes the length in octets\r\n            of the RSA modulus n), where k >= 2hLen + 2\r\n   C        ciphertext to be decrypted, an octet string of length k\r\n", "notes": "k >= 2hLen + 2 belongs to K, not to C.\r\n\r\nThe >= is already reported in #592.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2177", "doc-id": "RFC3447", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8.1.2", "orig_text": "   4. If Result = \"consistent,\" output \"valid signature.\" Otherwise,\r\n      output \"invalid signature.\"", "correct_text": "   4. If Result = \"consistent\", output \"valid signature\", Otherwise,\r\n      output \"invalid signature.\"\r\n", "notes": "obvious\n --VERIFIER NOTES-- \n   This is addressed in errata #2582.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2178", "doc-id": "RFC4301", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.1.", "orig_text": "SPD-S, SPD-I, SPD-O\r\nPages 20,21", "correct_text": "Needs to be formulated differently.", "notes": "This text needs information which comes later in RFC4301. There must be an explanation of decorrelation (hint on Appendix B).\r\nThe part of outbound traffic is confusing. If you have no SPD-S entries, you can handle it the same way as explained for inbound traffic.\n --VERIFIER NOTES-- \n   There is no section 4.1.1.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2179", "doc-id": "RFC4301", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.2.2", "orig_text": "list of prot's", "correct_text": "list of prots", "notes": "This is not genitive. It's plural.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2180", "doc-id": "RFC4301", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.2.2.", "orig_text": "OPAQUE****        0  prot. \"P\"    OPAQUE", "correct_text": "OPAQUE****        0  prot. \"P\"    discard packet\r\n", "notes": "Opaque means protocol must not be available. Therefore this packet does not match and must be discarded.\r\nThe same four times more.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1872", "doc-id": "RFC5601", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12, pg.46", "orig_text": "a)  [[ DESCRIPTION clause for pwGenFecIndexMappingLocalAII OBJECT-TYPE ]]\r\n\r\n          \"This object is an octet string representing the local\r\n           forwarder attachment individual identifier (AII) to be used\r\n           by this PW.  It is used as the SAII for outgoing signaling\r\n|          messages and the TAII in the incoming messages from the\r\n           peer.\"\r\n\r\nb)  [[ DESCRIPTION clause for pwGenFecIndexMappingRemoteAII OBJECT-TYPE ]]\r\n\r\n          \"This object is an octet string representing the peer\r\n           forwarder attachment individual identifier (AII) to be used\r\n           by this PW.  It is used as the TAII for outgoing signaling\r\n|          messages and the SAII in the incoming messages from the\r\n           peer.\"", "correct_text": "a)\r\n          \"This object is an octet string representing the local\r\n           forwarder attachment individual identifier (AII) to be used\r\n           by this PW.  It is used as the SAII for outgoing signaling\r\n|          messages and expected as the TAII in the incoming messages\r\n           from the peer.\"\r\n\r\nb)\r\n          \"This object is an octet string representing the peer\r\n           forwarder attachment individual identifier (AII) to be used\r\n           by this PW.  It is used as the TAII for outgoing signaling\r\n|          messages and expected as the SAII in the incoming messages\r\n           from the peer.\"", "notes": "Rationale: same as for EID=1858 !\n --VERIFIER NOTES-- \n   The original text looks clear", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1873", "doc-id": "RFC5601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12, pg.51", "orig_text": "[[ on mid-pg. 51: ]]\r\n\r\n     OBJECT       pwPeerAddr\r\n     SYNTAX       InetAddress (SIZE(0|4))\r\n     DESCRIPTION \"An implementation is only required to support\r\n|                 0, 4 address sizes.\"\r\n", "correct_text": "     OBJECT       pwPeerAddr\r\n     SYNTAX       InetAddress (SIZE(0|4))\r\n     DESCRIPTION \"An implementation is only required to support\r\n|                 address sizes 0 and 4.\"\r\n", "notes": "Rationale:\r\nGrammar: \"4 address sizes\" has quite different semantics than\r\n\"address size 4\" !\r\n\r\nNote:\r\n\r\nThis issue recurs on page 54, and a similar correction applies there.", "submit_date": "2009-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1874", "doc-id": "RFC2804", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "centered around", "correct_text": "revolved around", "notes": "I don't mean to split hairs here, but, really, something cannot center around something, only revolve. Feel free to reject this report, however.", "submit_date": "2009-09-10", "submitter_name": "Matthias B\u00e4rwolff", "verifier_id": "", "verifier_name": "Danny McPherson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1875", "doc-id": "RFC5734", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1", "orig_text": "   This document describes how the Extensible Provisioning Protocol\r\n   (EPP) is mapped onto a single client-server TCP connection.  Security\r\n   services beyond those defined in EPP are provided by the Transport\r\n|  Layer Security (TLS) Protocol [RFC2246].  EPP is described in\r\n   [RFC5730].  TCP is described in [RFC0793].  This document obsoletes\r\n   RFC 4934 [RFC4934].", "correct_text": "   This document describes how the Extensible Provisioning Protocol\r\n   (EPP) is mapped onto a single client-server TCP connection.  Security\r\n   services beyond those defined in EPP are provided by the Transport\r\n|  Layer Security (TLS) Protocol ([RFC2246], [RFC4346], and [RFC5246]).\r\n   EPP is described in [RFC5730].  TCP is described in [RFC0793].\r\n   This document obsoletes RFC 4934 [RFC4934].", "notes": "Rationale:\r\n\r\nThe RFC text potentially misguides the reader to conclude that\r\nEPP over TCP is normatively bound to the outdated and slightly\r\nflawed version TLS v1.0 specified in [RFC2246], which in the\r\nmeantime has been superseded twice, first by TLS v1.1 ([RFC4346]),\r\nand then by TLS v1.2 ([RFC5246]).\r\n\r\nHowever, later on in the RFC, Sections 8 and 9 make it clear that\r\nthis is not the intent of the standard -- implementations MUST\r\nuse the most recent version of TLS available to the peers.\r\nSections 8 and 9 refer to all three versions of TLS specified\r\nso far, and thus, for consistency, the Introduction should not\r\nindicate otherwise.  The addition of the additional references\r\nseems sufficient to align the expectations of readers of the\r\nIntroduction with what is detailed later in the Standard.\r\n\r\nReleated Note for Section 11:\r\n\r\nArguably it would have been preferable to have not only the\r\nobsoleted RFC 2246, but also RFC 4346 and RFC 5246 listed as\r\n*Normative* References. \r\nBTW, the Normative Reference to RFC 2246 arguably is a downref\r\nand hence surprising anyway in a Full Standard.", "submit_date": "2009-09-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1876", "doc-id": "RFC5730", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "a)  Section 1, 2nd paragraph:\r\n\r\n|  EPP content is identified by MIME media type application/epp+xml.\r\n   Registration information for this media type is included in an\r\n   appendix to this document.\r\n\r\nb)  Section 6, last paragraph:\r\n\r\n   A MIME media type registration template is included in Appendix B.\r\n\r\nc)  Appendix B, first two items\r\n\r\n   MIME media type name: application\r\n\r\n   MIME subtype name: epp+xml", "correct_text": "a)\r\n\r\n|  EPP content is identified by the media type application/epp+xml.\r\n   Registration information for this media type is included in an\r\n   appendix to this document.\r\n\r\nb) \r\n\r\n   A media type registration template is included in Appendix B.\r\n\r\nc)\r\n\r\n   Media type name: application\r\n\r\n   Subtype name: epp+xm", "notes": "Rationale:\r\n\r\nAs explained in Section 1 od BCP 13, RFC 4288, the concept of a\r\n\"Media Type\" formalized for the first time in the MIME RFCs has gained\r\nsignificance far beyond the narrow area of Internet Mail. Therefore,\r\nthe related terms should not be used in the colloquial form including\r\n\"MIME\" that did not even appear in RFC 2045; in particular, the\r\ncolloquial term \"MIME Type\" (or \"MIME Media Type\") should generally\r\nbe avoided in favor of the (original and) more appropriate bare\r\n\"Media Type\".\r\n\r\nI'd expect that a Full Standard RFC follows the established\r\nterminology of the IETF, and that it uses the revised Media Type\r\nregistration boilerplate published in RFC 4288 (December 2005),\r\neven when it merely updates/re-parents an existing registration.\r\n\r\nEPP has not even a standardized transport binding to Internet Email.\r\nHence, tying the terminology to MIME seems even more inappropriate\r\nhere.\r\n\r\nAlexey Melnikov: I can't see anybody be confused by use of MIME type where use of \"media type\" would be slightly more appropriate.", "submit_date": "2009-09-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1877", "doc-id": "RFC5730", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4, pg.8", "orig_text": "   -  An <svDate> element that contains the server's current date and\r\n|     time in Universal Coordinated Time (UTC).", "correct_text": "   -  An <svDate> element that contains the server's current date and\r\n|     time in Coordinated Universal Time (UTC).", "notes": "Rationale: Use of established, official terminology.\r\n\r\nNote: There are other variants of \"Universal Time\" (mostly of\r\n      historical interest now), and hence, the term initially\r\n      had been written as \"Universal Time, Coordinated\", giving\r\n      rise to the acronym \"UTC\" that parallels the precursor \"UT1\".", "submit_date": "2009-09-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2481", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(1)  Section 4.5 -- syntax / punctuation issue\r\n\r\nIn the first paragraph of Section 4.5, on page 7, RFC 4875 says:\r\n                                           vv\r\n|           [...].  The < [<EXPLICIT_ROUTE>], <S2L_SUB_LSP> > tuple\r\n   represents the S2L sub-LSP and is referred to as the sub-LSP\r\n   descriptor.  [...]\r\n\r\nObviously, the tagged comma should be *inside* the square brackets:\r\n                                           vv\r\n|           [...].  The < [<EXPLICIT_ROUTE>,] <S2L_SUB_LSP> > tuple\r\n   represents the S2L sub-LSP and is referred to as the sub-LSP\r\n   descriptor.  [...]\r\n\r\nThe same issue recurs in the third paragraph of Section 4.5, on the\r\nsame page.\r\n\r\nAt similar places in the RFC, e.g. in the first paragraph of\r\nSection 5.2.1, the comma is omitted entirely in the tuple notation.\r\nThat is very unusual.\r\n\r\n", "correct_text": "[see above]", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2497", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1 (pg 7)", "orig_text": "              +------------------------+-------------------+\r\n              | Character name         | Decimal codepoint |\r\n              +------------------------+-------------------+\r\n              | HTAB                   | 9                 |\r\n              | LF                     | 10                |\r\n              | CR                     | 13                |\r\n-->           | DQUOTE                 | 22                |\r\n-->           | SPACE                  | 32                |\r\n... table continues", "correct_text": "              +------------------------+-------------------+\r\n              | Character name         | Decimal codepoint |\r\n              +------------------------+-------------------+\r\n              | HTAB                   | 9                 |\r\n              | LF                     | 10                |\r\n              | CR                     | 13                |\r\n-->           | SPACE                  | 32                |\r\n-->           | DQUOTE                 | 34                |\r\n                                         ^^\r\n                                         corrected value\r\n...table continues", "notes": "Correction to Table on page 7 of RFC updating the order of ASCII-US listing (decimal codepoint descending) and incorporating errata ID 1911(2009-10-13 - DQUOTE char listing shows hexadecimal value).", "submit_date": "2010-08-21", "submitter_name": "Scott Furry", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2498", "doc-id": "RFC5952", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "\"This is due to the \"::\"usage in IPv6 addresses.\"", "correct_text": "\"This is due to the \":\" usage in IPv6 addresses.\"", "notes": "", "submit_date": "2010-08-23", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2499", "doc-id": "RFC2919", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2 and 3", "orig_text": "[DRUMS]", "correct_text": "[RFC2822]", "notes": "When going from draft-chandhok-listid-04.txt to the RFC, various references were updated. The [DRUMS] reference to 2822 was updated to [RFC2822] within the References section, but was not changed within the text.", "submit_date": "2010-08-23", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2500", "doc-id": "RFC5803", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   This memo describes how the \"authPassword\" Lightweight Directory\r\n   Access Protocol (LDAP) attribute can be used for storing secrets used\r\n|  by the Salted Challenge Response Authentication Message (SCRAM)\r\n   mechanism in the Simple Authentication and Security Layer (SASL)\r\n   framework.\r\n", "correct_text": "   This memo describes how the \"authPassword\" Lightweight Directory\r\n   Access Protocol (LDAP) attribute can be used for storing secrets used\r\n|  by the Salted Challenge Response Authentication Mechanism (SCRAM)\r\n   mechanism in the Simple Authentication and Security Layer (SASL)\r\n   framework.\r\n", "notes": "Rationale: Adjust expansion of acronym \"SCRAM\" with what is used\r\nin the defining document (RFC 5802).", "submit_date": "2010-08-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2501", "doc-id": "RFC5803", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "   [SCRAM]     Menon-Sen, A., Newman, C., Melnikov, A., and N. Williams,\r\n|              \"Salted Challenge Response Authentication Message (SCRAM)\r\n|              SASL Mechanisms\", RFC 5802, July 2010.\r\n", "correct_text": "   [SCRAM]     Menon-Sen, A., Newman, C., Melnikov, A., and N. Williams,\r\n|              \"Salted Challenge Response Authentication Mechanism\r\n|              (SCRAM) SASL and GSS-API Mechanisms\", RFC 5802,\r\n|              July 2010.\r\n", "notes": "Rationale: Align quoted title of RFC 5802 with published version.", "submit_date": "2010-08-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2181", "doc-id": "RFC4301", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.3.1.", "orig_text": "The Key ID field is defined as an OCTET string in IKE.  For this name\r\ntype, only exact-match syntax MUST be supported (since there is no\r\nexplicit structure for this ID type).  Additional matching functions\r\nMAY be supported for this ID type.", "correct_text": "The Key ID field is defined as an OCTET string in IKE.  For this name\r\ntype, exact-match syntax MUST be supported (since there is no\r\nexplicit structure for this ID type).  Additional matching functions\r\nMAY be supported for this ID type.", "notes": "'only A must be supported' is ambigous.\r\nDoes it mean 'A must be supportet and anything else must not be supportet', or does it mean 'A must be supportet and anything else may be supportet'. The next sentence clearifies that it is the second interpretation.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2182", "doc-id": "RFC4301", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.3.2", "orig_text": "This document requires support for two required authentication data\r\ntypes:", "correct_text": "This document requires support for two authentication data\r\ntypes:", "notes": "pleonasm", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2183", "doc-id": "RFC4301", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.1.", "orig_text": "There is no requirement that an \r\nimplementation buffer the packet if \r\nthere is a cache miss.", "correct_text": "There is no requirement that an \r\nimplementation buffers the packet if\r\nthere is a cache miss.", "notes": "typo\r\n --VERIFIER NOTES-- \r\n   original text was grammatically correct.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2184", "doc-id": "RFC4301", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "D2", "orig_text": "We could define ANY as the complement of OPAQUE,\r\ni.e., it would match all values but only for accessible port fields.", "correct_text": "We could define ANY as the complement of OPAQUE,\r\ni.e., it would match all values but only for accessible port fields.\r\nBut we did not. ANY encompasses OPAQUE.", "notes": "misleading", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2502", "doc-id": "RFC5954", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2, page 5", "orig_text": "   NEW:\r\n\r\n   o  For two URIs to be equal, the user, password, host, and port\r\n|     components must match.  If the host component contains a textual\r\n|     representation of IP addresses, then the representation of those\r\n      IP addresses may vary.  If so, the host components are considered\r\n      to match if the different textual representations yield the same\r\n      binary IP address.\r\n", "correct_text": "   NEW:\r\n\r\n   o  For two URIs to be equal, the user, password, host, and port\r\n|     components must match.  If both host components contain the textual\r\n|     representation of an IP address, then the representation of those\r\n      IP addresses may vary.  If so, the host components are considered\r\n      to match if the different textual representations yield the same\r\n      binary IP address.\r\n", "notes": "Rationale:  Essential clarification of potentially misleading grammar\r\n  and semantics including singular/plural mismatches.  Because of the\r\n  perceived significance, this erratum is designated as Technical.", "submit_date": "2010-08-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1883", "doc-id": "RFC4803", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "MIB", "orig_text": "gmplsInterfaceRsvpHelloPeriod OBJECT-TYPE\r\n  SYNTAX       Unsigned32\r\n  UNITS        \"milliseconds\"\r\n  MAX-ACCESS   read-create\r\n  STATUS       current\r\n  DESCRIPTION\r\n    \"Period, in milliseconds, between sending Resource Reservation\r\n     Protocol (RSVP) Hello messages on this interface.  A value of 0\r\n     indicates that no Hello messages should be sent on this\r\n     interface.\r\n\r\n     This object is only valid if gmplsInterfaceSignalingCaps has no\r\n     bits set or includes the rsvpGmpls bit.\"\r\n  REFERENCE\r\n    \"1. RSVP-TE: Extensions to RSVP for LSP Tunnels, RFC 3209,\r\n        section 5.\r\n     2. Generalized MPLS Signaling - RSVP-TE Extensions, RFC 3473,\r\n        section 9.3.\"\r\n  DEFVAL { 3000 }\r\n::= { gmplsInterfaceEntry 2 }\r\n", "correct_text": "gmplsInterfaceRsvpHelloPeriod OBJECT-TYPE\r\n  SYNTAX       Unsigned32\r\n  UNITS        \"milliseconds\"\r\n  MAX-ACCESS   read-create\r\n  STATUS       current\r\n  DESCRIPTION\r\n    \"Period, in milliseconds, between sending Resource Reservation\r\n     Protocol (RSVP) Hello messages on this interface.  A value of 0\r\n     indicates that no Hello messages should be sent on this\r\n     interface.\r\n\r\n     This object is only valid if gmplsInterfaceSignalingCaps has no\r\n     bits set or includes the rsvpGmpls bit.\"\r\n  REFERENCE\r\n    \"1. RSVP-TE: Extensions to RSVP for LSP Tunnels, RFC 3209,\r\n        section 5.\r\n     2. Generalized MPLS Signaling - RSVP-TE Extensions, RFC 3473,\r\n        section 9.3.\"\r\n  DEFVAL { 5 }\r\n::= { gmplsInterfaceEntry 2 }\r\n", "notes": "The default value is changed. The default value specified in the RFC is 5ms. Section 5.3 states:\r\n\r\nThis value MAY be configured on a per neighbor basis.  The default value is 5 ms.\n --VERIFIER NOTES-- \nAfter discussion on the CCAMP mailing list it was agreed that the MIB module text is as intended, and is deliberately different from the value in the protocol specification.   ", "submit_date": "2009-09-16", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1884", "doc-id": "RFC4490", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1, pg. 4", "orig_text": "   When the Message Digest authenticated attribute is present, the\r\n|  DigestedData digest contains a 32-byte digest in little-endian\r\n   representation:", "correct_text": "   When the Message Digest authenticated attribute is present, the\r\n|  DigestedData digest contains a 32-byte digest in big-endian\r\n   representation:", "notes": "Rationale:\r\n- Contradiction to other parts of the document,\r\n  which use \"big-endian\" == 'network byte order'\r\n  as established in the Internet architecture.\r\n- Please also note that the ASN.1 BER/DER encoding is\r\n  based on the 'natural' byte order for left-to-right\r\n  scripts -- otherwise the intrinsically variable-length\r\n  representation used would be very complicated to deal\r\n  with in processing.\r\n- Intrduction of varying endian-ness is a likely source\r\n  of implementation issues and, consequentially,\r\n  interoperability problems.\n --VERIFIER NOTES-- \nauthors confirmed that the DigestedData digest is encoded in little-endian representation in all\r\nknown implementations.", "submit_date": "2009-09-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1885", "doc-id": "RFC4491", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.3.1, 2.3.2", "orig_text": "a)  Section 2.3.1, page 7\r\n\r\n|  GostR3410-94-PublicKey MUST contain 128 octets of the little-endian\r\n   representation of the public key Y = a^x (mod p), where a and p are\r\n   public key parameters, and x is a private key.\r\n\r\nb) Section 2.3.2, page 9\r\n\r\n   GostR3410-2001-PublicKey MUST contain 64 octets, where the first 32\r\n|  octets contain the little-endian representation of x and the second\r\n|  32 octets contain the little-endian representation of y.  [...]", "correct_text": "a)\r\n\r\n|  GostR3410-94-PublicKey MUST contain 128 octets of the big-endian\r\n   representation of the public key Y = a^x (mod p), where a and p are\r\n   public key parameters, and x is a private key.\r\n\r\nb)\r\n\r\n   GostR3410-2001-PublicKey MUST contain 64 octets, where the first 32\r\n|  octets contain the big-endian representation of x and the second\r\n|  32 octets contain the big-endian representation of y.  [...]", "notes": "Rationale:\r\nInconsistency within the RFC.\r\nMost parts of the memo make use of the Internet-standard\r\n\"network byte order\". a.k.a. \"big-endian byte order\", which\r\nalso is at the heart of the ASN.1 BER/DER encoding.\r\nUse of mixed endian-ness within a single context, or even\r\na single specification, is a likely source of implementation\r\nerrors and, consequently, interoperability problems.\r\n\r\nCf. the related Errata Note for RFC 4490, EID=1884.\n --VERIFIER NOTES-- \n authors confirmed that little-endian encoding is correct.", "submit_date": "2009-09-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1886", "doc-id": "RFC3779", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": "   An IPv6 address is a 128-bit quantity that is written as eight\r\n   hexadecimal numbers, each in the range 0 through ffff, separated by a\r\n   semicolon (\":\"); 2001:0:200:3:0:0:0:1 is an example of an IPv6\r\n   address.  IPv6 addresses frequently have adjacent fields whose value\r\n   is 0.  One such group of 0 fields may be abbreviated by two\r\n   semicolons (\"::\"). ", "correct_text": "   An IPv6 address is a 128-bit quantity that is written as eight \r\n   hexadecimal numbers, each in the range 0 through ffff, separated by a \r\n   colon (\":\"); 2001:0:200:3:0:0:0:1 is an example of an IPv6 address.\r\n   IPv6 addresses frequently have adjacent fields whose value is 0.  One\r\n   such group of 0 fields may be abbreviated by two colons (\"::\").", "notes": "\"semicolon\" should be \"colon\"\r\nAdded reference to RFC4291.\r\nVerifier: Forward reference to RFC4291 is inappropriate.", "submit_date": "2009-09-21", "submitter_name": "Charles Bobo", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2279", "doc-id": "RFC4306", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.2", "orig_text": "          Name                     Number                 Defined In\r\n          NONE                       0\r\n          AUTH_HMAC_MD5_96           1                     (RFC2403)\r\n          AUTH_HMAC_SHA1_96          2                     (RFC2404)\r\n          AUTH_DES_MAC               3\r\n          AUTH_KPDK_MD5              4                     (RFC1826)\r\n          AUTH_AES_XCBC_96           5                     (RFC3566)", "correct_text": "          Name                     Number                 Defined In\r\n          NONE                       0\r\n          AUTH_HMAC_MD5_96           1                     (RFC2403)\r\n          AUTH_HMAC_SHA1_96          2                     (RFC2404)\r\n          AUTH_DES_MAC               3\r\n          AUTH_KPDK_MD5              4                     (RFC1828)\r\n          AUTH_AES_XCBC_96           5                     (RFC3566)", "notes": "The RFC for AUTH_KPDK_MD5 should be 1828, not 1826 which is the first version of AH.", "submit_date": "2010-05-19", "submitter_name": "Sergiu Todirascu", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1887", "doc-id": "RFC3779", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "References", "orig_text": "   [RFC3513]   Hinden, R. and S. Deering, \"Internet Protocol Version 6\r\n               (IPv6) Addressing Architecture\", RFC 3513, April 2003.\r\n\r\n   [RFC3281]   Farrell, S. and R. Housley, \"An Internet Attribute\r\n               Certificate Profile for Authorization\", RFC 3281, April\r\n               2002.\r\n\r\n   [S-BGP]     S. Kent, C. Lynn, and K. Seo, \"Secure Border Gateway\r\n               Protocol (S-BGP),\" IEEE JSAC Special Issue on Network\r\n               Security, April 2000.", "correct_text": "   [RFC3281]   Farrell, S. and R. Housley, \"An Internet Attribute\r\n               Certificate Profile for Authorization\", RFC 3281, April\r\n               2002.\r\n\r\n   [RFC3513]   Hinden, R. and S. Deering, \"Internet Protocol Version 6\r\n               (IPv6) Addressing Architecture\", RFC 3513, April 2003.\r\n\r\n   [RFC4291]   R. Hinden, S. Deering, \"IP Version 6 Addressing Architecture\",\r\n               RFC 4291, February 2006\r\n\r\n   [S-BGP]     S. Kent, C. Lynn, and K. Seo, \"Secure Border Gateway\r\n               Protocol (S-BGP),\" IEEE JSAC Special Issue on Network\r\n               Security, April 2000.", "notes": "Section is \"Informational References\" but this doesn't fit in the Section field above.\r\nReferences were out of alphabetical order -- RFC3281 should come before RFC3513.\r\nAdded reference RFC4291", "submit_date": "2009-09-21", "submitter_name": "Charles Bobo", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1888", "doc-id": "RFC5491", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "The PIDF format provides for an unbounded number of <tuple>,\r\n<device>, and <person> elements.  Each of these elements contains a\r\nsingle <status> element that may contain more than one <geopriv>\r\nelement as a child.  ", "correct_text": "The PIDF format provides for an unbounded number of <tuple>,\r\n<device>, and <person> elements.  Each of these elements may\r\ncontain more than one <geopriv> element.  ", "notes": "<status> only exists in <tuple> [RFC3863], not <device> or <person> [RFC4479].  The proposed text removes the problem.\r\n\r\nI believe that it was only late that someone pointed out that <status> only applied to <tuple>; this sentence obviously got missed in the edit.", "submit_date": "2009-09-21", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1889", "doc-id": "RFC5513", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2.", "orig_text": "ahttp://www.qosfc.com/", "correct_text": "http://www.qosfc.com/", "notes": "This appears at the \u201c[URL-QoS]\u201d reference, the second reference to the Queen of the South Football Club.\r\n\r\nAccording to the URI schemes registry[1] maintained by IANA, \u201cahttp\u201d is not a valid URI scheme. It should probably be \u201chttp\u201d instead.\r\n\r\nThe URI in its current form is inaccessible, because its meaning is not well-defined for users.\r\n\r\n[1] http://www.iana.org/assignments/uri-schemes.html", "submit_date": "2009-09-22", "submitter_name": "Nico R.", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1890", "doc-id": "RFC5208", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "attributes           [0]  IMPLICIT Attributes OPTIONAL }\r\n", "correct_text": "attributes           [0]  Attributes OPTIONAL }\r\n", "notes": "This change will align the text with the ASN.1 module.  Note that the ASN.1 module is an IMPLICIT module and the IMPLICIT tag on this line is unnecessary.", "submit_date": "2009-09-22", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2185", "doc-id": "RFC4302", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.4.", "orig_text": "datagrams to SAs.  Implementations that support only unicast traffic\r\nneed not implement this de-multiplexing algorithm.", "correct_text": "datagrams to SAs.  Implementations that support only unicast traffic\r\nneed not to implement this de-multiplexing algorithm.", "notes": "grammar\n --VERIFIER NOTES-- \nThe original text is grammatically correct.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2186", "doc-id": "RFC4302", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.5.", "orig_text": "Verification\".  Thus, the sender MUST always transmit this field, but\r\nthe receiver need not act upon it.", "correct_text": "Verification\".  Thus, the sender MUST always transmit this field, but\r\nthe receiver needs not to act upon it.", "notes": "grammar\n --VERIFIER NOTES-- \n   The original text is grammatically correct. ", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2187", "doc-id": "RFC4302", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.3.3.2.1.", "orig_text": "(The padding is arbitrary, but need not be random to achieve\r\nsecurity.)  These padding bytes are included in the ICV calculation,", "correct_text": "(The padding is arbitrary, but needs not to be random to achieve\r\nsecurity.)  These padding bytes are included in the ICV calculation,", "notes": "grammar\n --VERIFIER NOTES-- \n   The original text is grammatically correct. ", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2188", "doc-id": "RFC4302", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.3.2.2.", "orig_text": "If padding bytes are needed\r\nbut the algorithm does not specify the padding contents, then the\r\npadding octets MUST have a value of zero.", "correct_text": "The padding bytes MUST be zero. The algorithm MUST NOT specify\r\nanything else.", "notes": "This is forced two times in this RFC4302, namely before in this\r\nsection 3.3.3.2.2 and in 3.4.4 .\n --VERIFIER NOTES-- \nSection 3.4.4 deals with verification of the ICV, whereas section 3.3.3 deal with generation of an ICV. Thus discussion of padding is needed in both contexts and is not redundant. The text should remain as it is.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2280", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.4", "orig_text": "   OPEN_DELEGATE_READ delegations may be outstanding simultaneously and\r\n   do not conflict.  An OPEN_DELEGATE_WRITE delegation allows the client\r\n   to handle, on its own, all opens.  Only OPEN_DELEGATE_WRITE\r\n   delegation may exist for a given file at a given time, and it is\r\n   inconsistent with any OPEN_DELEGATE_READ delegations.", "correct_text": "   OPEN_DELEGATE_READ delegations may be outstanding simultaneously and\r\n   do not conflict.  An OPEN_DELEGATE_WRITE delegation allows the client\r\n   to handle, on its own, all opens.  Only one OPEN_DELEGATE_WRITE\r\n   delegation may exist for a given file at a given time, and it is\r\n   inconsistent with any OPEN_DELEGATE_READ delegations.", "notes": "", "submit_date": "2010-05-20", "submitter_name": "Paul J Gilliam", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7032", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "     45 e0 00 4c dd 0f 40 00 ff 06 bf 6b 0a 0b 0c 0d\r\n     ac 1b 1c 1d e9 d7 00 b3 fb fb ab 5a 00 00 00 00\r\n     e0 02 ff ff ca c4 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 00 15 5a b7 00 00 00 00 1d 10 3d 54\r\n     2e e4 37 c6 f8 ed e6 d7 c4 d6 02 e7\r\n", "correct_text": "     45 e0 00 4c dd 0f 40 00 ff 06 bf 6b 0a 0b 0c 0d\r\n     ac 1b 1c 1d e9 d7 00 b3 fb fb ab 5a 00 00 00 00\r\n     e0 02 ff ff d4 5e 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 00 15 5a b7 00 00 00 00 1d 10 3d 54\r\n     2e e4 37 c6 f8 ed e6 d7 c4 d6 02 e7\r\n", "notes": "the final tcp checksum was not computed correctly. it should be correct on the line, regardless if tcp-ao is in place ot nor.", "submit_date": "2022-07-25", "submitter_name": "csaba mate", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:46:37"}, {"errata_id": "1891", "doc-id": "RFC5595", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.7, pg.10", "orig_text": "OLD:\r\n o  It preserves the 4 lowest bits of the final bytes of the Service\r\n    Code, which allows many common series of Service Codes to be\r\n    mapped to a set of adjacent port numbers, e.g., Foo1, and Foo2;\r\n    Fooa and Foob would be assigned adjacent ports.", "correct_text": "NEW:\r\n o  It preserves the 3 lowest bits of the final bytes of the Service\r\n                     ^^\r\n    Code, which allows many common series of Service Codes to be\r\n    mapped to a set of adjacent port numbers, e.g., Foo1, and Foo2;\r\n    Fooa and Foob would be assigned adjacent ports.", "notes": "Simply trying the full example shows that the statement is not\r\nentirely correct.  The quoted formula reveals that only the least\r\nsignificant *3* bits are left unchanged (due to the '<<3'\r\noperation on sc[2]).  It turns out that ranges of *8* contiguous\r\nSC values are mapped to contiguous 8 port numbers but, depending\r\non the two least significant bits of sc[2], groups of 4 adjacent\r\nranges are shuffled around.  More complicated patterns arise for\r\nthe next higher level of 4-clusters of range-groups, etc.\r\nThus, the situation is not hopeless for the indicated purpose,\r\nbut much more complicated than indicated in the RFC text.\r\n\r\nI leave it as an exercise to the interested reader to figure\r\nout the details for the size of range she is interested in.\r\n\r\nA future revision of the RFC however should fix the text.", "submit_date": "2009-09-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2740", "doc-id": "RFC3665", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8", "orig_text": "   F11 CANCEL Proxy 1 -> Proxy 2\r\n\r\n   CANCEL sip:alice@atlanta.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP ss1.atlanta.example.com:5060;branch=z9hG4bK2d4790.1\r\n   Max-Forwards: 70\r\n   From: Alice <sip:alice@atlanta.example.com>;tag=9fxced76sl\r\n   To: Bob <sip:bob@biloxi.example.com>\r\n   Call-ID: 2xTb9vxSit55XU7p8@atlanta.example.com\r\n   CSeq: 1 CANCEL\r\n   Content-Length: 0\r\n", "correct_text": "   F11 CANCEL Proxy 1 -> Proxy 2\r\n\r\n   CANCEL sip:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP ss1.atlanta.example.com:5060;branch=z9hG4bK2d4790.1\r\n   Max-Forwards: 70\r\n   From: Alice <sip:alice@atlanta.example.com>;tag=9fxced76sl\r\n   To: Bob <sip:bob@biloxi.example.com>\r\n   Call-ID: 2xTb9vxSit55XU7p8@atlanta.example.com\r\n   CSeq: 1 CANCEL\r\n   Content-Length: 0\r\n", "notes": "The Request-URI of message F11 is incorrect according to RFC 3261 Section 9.1: \"The following procedures are used to construct a CANCEL request.  The Request-URI, Call-ID, To, the numeric part of CSeq, and From header fields in the CANCEL request MUST be identical to those in the request being cancelled, including tags\".", "submit_date": "2011-03-02", "submitter_name": "Niels Widger", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1892", "doc-id": "RFC5589", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "page 10:\r\n\r\n   F5 INVITE Transferee -> Transfer Target\r\n...\r\n   CSeq: 521 REFER\r\n\r\npage 14:\r\n\r\n   F5 INVITE Transferee -> Transfer Target\r\n...\r\n   CSeq: 521 REFER\r\n\r\npage 15:\r\n\r\n   F6 NOTIFY Transferee -> Transferor\r\n...\r\n   CSeq: 29889 INVITE\r\n", "correct_text": "page 10:\r\n\r\n   F5 INVITE Transferee -> Transfer Target\r\n...\r\n   CSeq: 521 INVITE\r\n\r\npage 14:\r\n\r\n   F5 INVITE Transferee -> Transfer Target\r\n...\r\n   CSeq: 521 INVITE\r\n\r\npage 15:\r\n\r\n   F6 NOTIFY Transferee -> Transferor\r\n...\r\n   CSeq: 29889 NOTIFY\r\n", "notes": "", "submit_date": "2009-09-23", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1893", "doc-id": "RFC3031", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.6", "orig_text": "It is important to note that if Ru and Rd are adjacent LSRs in an LSP\r\n   for X1 and X2, forwarding will still be done correctly if Ru assigns\r\n   distinct labels to X1 and X2 while Rd assigns just one label to the\r\n   both of them.  This just means that R1 will map different incoming\r\n   labels to the same outgoing label, an ordinary occurrence.\r\n", "correct_text": "It is important to note that if Ru and Rd are adjacent LSRs in an LSP\r\n   for X1 and X2, forwarding will still be done correctly if Ru assigns\r\n   distinct labels to X1 and X2 while Rd assigns just one label to the\r\n   both of them.  This just means that Rd will map different incoming\r\n   labels to the same outgoing label, an ordinary occurrence.\r\n", "notes": "R1 should be replaced by Rd since there is no reference for R1.", "submit_date": "2009-09-24", "submitter_name": "Dande Rajasekhar", "verifier_id": "", "verifier_name": "Ross Callon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1896", "doc-id": "RFC4346", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.2", "orig_text": "   decryption_failed\r\n      This alert MAY be returned if a TLSCiphertext decrypted in an\r\n      invalid way: either it wasn't an even multiple of the block\r\n      length, or its padding values, when checked, weren't correct.\r\n      This message is always fatal.\r\n\r\n   Note: Differentiating between bad_record_mac and decryption_failed\r\n         alerts may permit certain attacks against CBC mode as used in\r\n         TLS [CBCATT].  It is preferable to uniformly use the\r\n         bad_record_mac alert to hide the specific type of the error.", "correct_text": "   decryption_failed\r\n      This alert was used in TLS version 1.0, and MUST NOT be sent in\r\n      TLS 1.1.\r\n\r\n   Note: Differentiating between bad_record_mac and decryption_failed\r\n         alerts may have permitted certain attacks against CBC mode \r\n         as used in TLS 1.0 [CBCATT].  It is preferable to uniformly \r\n         use the bad_record_mac alert to hide the specific type of \r\n         the error.\r\n", "notes": "(split off from Errata ID 117 )\r\n\r\nThe original text contradicted the text for bad_record_mac\r\n(\"This alert also MUST be returned if an alert is sent because\r\na TLSCiphertext decrypted in an invalid way\").", "submit_date": "2006-05-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2281", "doc-id": "RFC4512", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.3", "orig_text": "The second paragraph of Section A.3, at the bottom of page 50, says:\r\n\r\n   Section 5.1 of RFC 2256 provided the definition of the 'objectClass'\r\n   attribute type.  This was integrated into Section 2.4.1 of this\r\n   document.  The statement \"One of the values is either 'top' or\r\n   'alias'\" was replaced with statement that one of the values is 'top'\r\n   as entries belonging to 'alias' also belong to 'top'.\r\n", "correct_text": "   Section 5.1 of RFC 2256 provided the definition of the 'objectClass'\r\n|  attribute type.  This was integrated into Section 3.3 of this\r\n   document.  The statement \"One of the values is either 'top' or\r\n   'alias'\" was replaced with statement that one of the values is 'top'\r\n   as entries belonging to 'alias' also belong to 'top'.\r\n", "notes": "Apparently, 'Section 3.3' would have been much more appropriate than\r\n'Section 2.4.1'.\r\n\r\nSource: apps", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4614", "doc-id": "RFC7749", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   <?xml version=\"1.0\"?>\r\n\r\n   <!DOCTYPE rfc [\r\n\r\n     <!-- allow later RFC 2629 reference using \"&rfc2629;\" -->\r\n     <!-- the data will be fetched from xml2rfc.ietf.org -->\r\n     <!ENTITY rfc2629 PUBLIC\r\n     \"http://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.2629.xml\">\r\n   ]>", "correct_text": "   <?xml version=\"1.0\"?>\r\n\r\n   <!DOCTYPE rfc [\r\n\r\n     <!-- allow later RFC 2629 reference using \"&rfc2629;\" -->\r\n     <!-- the data will be fetched from xml2rfc.ietf.org -->\r\n     <!ENTITY rfc2629 SYSTEM\r\n     \"http://xml2rfc.ietf.org/public/rfc/bibxml/reference.RFC.2629.xml\">\r\n   ]>", "notes": "A \"PUBLIC\" entity would need an additional \"PubidLiteral\" (which could be an empty string); but it's simpler to use a \"SYSTEM\" entity instead.\r\n\r\nSee <https://www.w3.org/TR/2008/REC-xml-20081126/#sec-external-ent>.\r\n\r\n[Verified per request of J. Reschke and H. Flanagan.]", "submit_date": "2016-02-05", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1897", "doc-id": "RFC5623", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1,", "orig_text": "a) Section 4.1, 2nd paragraph (bottom of page 10):\r\n\r\n   A VNT Manager (VNTM) is defined as a functional element that manages\r\n   and controls the VNT.  The PCE and VNT Manager are distinct\r\n|  functional elements that may or may not be collocated.\r\n                                                ^^\r\n\r\nb) Section 4.2.4, trailing Note below Table 1 (on page 22):\r\n\r\n   * Note that, in case of NSM-VNTM cooperation (separate flavor) and\r\n     single PCE inter-layer path computation, the PCE function used by\r\n|    NMS and VNTM may be collocated, but it will operate on separate\r\n     TEDs.\r\n                           ^^", "correct_text": "a)\r\n\r\n   A VNT Manager (VNTM) is defined as a functional element that manages\r\n   and controls the VNT.  The PCE and VNT Manager are distinct\r\n|  functional elements that may or may not be co-located.\r\n\r\nb)\r\n\r\n   * Note that, in case of NSM-VNTM cooperation (separate flavor) and\r\n     single PCE inter-layer path computation, the PCE function used by\r\n|    NMS and VNTM may be co-located, but it will operate on separate\r\n     TEDs.\r\n ", "notes": "Rationale:\r\n  \"collocated\" and \"co-located\" (or \"colocated\") have very different\r\n  semantics!  The latter seems to be the appropriate choice: two\r\n  logical entites (or subsystems) are located within the same system.\r\n  The former means \"arranged/placed/sorted *somehow*, in the proper\r\n  way\", without emphasis on neighborship or common enclosement.\n --VERIFIER NOTES-- \nEmail discussions with the RFC Editor yielded the following answer that appears to set the editorial standard for this word within RFCs going forward.\r\n\r\nAccording to this text, the RFC is correct.\r\n----\r\nThis particular word is accepted in many forms.  Historically, we have\r\ndefaulted to co-located when spelled inconsistently within a document.\r\nHowever, we do not apply this uniformly across the series because\r\nthere are so many accepted forms of the word.  For example:\r\n\r\nWebster's Dictionary has entries for colocate (1965) and\r\ncollocate (1513), but there is no entry for co-locate.  \r\n\r\nWebopeida only recognizes co-location.\r\n\r\nWikipedia lists \r\n\r\nColocation/collocation may refer to:\r\n\r\n    * Colocation (business), the placement of several entities in a\r\n      single location.\r\n    * The provision of computing services in a third-party colocation\r\n      centre.\r\n    * Collocation, in corpus linguistics, a sequence of words that\r\n      often occur together.\r\n    * Collocation method, used in maths to solve differential and\r\n      integral equations.\r\n\r\nAdditionally, the topic is discussed with no clear answer.  For\r\nexample, see \r\nhttp://www.webhostingtalk.com/archive/index.php/t-17495.html.  \r\n\r\nOur editor looked up \"collocation\" in Webster's, and believed that it\r\nwas correct, as it is defined as:\r\n\r\n   to set or arrange in a place or position; especially : to set side\r\n   by side \r\n\r\nIf we notice multiple spellings within a document, we tend to default\r\nto \"co-locate\", but if the document consistently uses \"collocation\" or\r\n\"colocation\", we do not change the spelling.\r\n", "submit_date": "2009-09-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1898", "doc-id": "RFC5623", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.2,pg.14", "orig_text": "     Step 4:  H1 initiates higher-layer signaling using the computed\r\n|             explicit router of H2-L1-L2-H3-H4.\r\n                            ^", "correct_text": "     Step 4:  H1 initiates higher-layer signaling using the computed\r\n|             explicit route of H2-L1-L2-H3-H4.\r\n", "notes": "Rationale: confusing typo.", "submit_date": "2009-09-30", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1899", "doc-id": "RFC822", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.4", "orig_text": "                    :sysmail              quoted string\r\n                    @                     special\r\n                    Some-Group            atom\r\n                    .                     special\r\n                    Some-Org              atom\r\n                    ,                     special\r\n                    Muhammed              atom\r\n                    .                     special\r\n                    (I am  the greatest)  comment\r\n                    Ali                   atom\r\n                    @                     atom\r\n                    (the)                 comment\r\n                    Vegas                 atom\r\n                    .                     special\r\n                    WBA                   atom", "correct_text": "                    \":sysmail\"            quoted string\r\n                    @                     special\r\n                    Some-Group            atom\r\n                    .                     special\r\n                    Some-Org              atom\r\n                    ,                     special\r\n                    Muhammed              atom\r\n                    .                     special\r\n                    (I am  the greatest)  comment\r\n                    Ali                   atom\r\n                    @                     special\r\n                    (the)                 comment\r\n                    Vegas                 atom\r\n                    .                     special\r\n                    WBA                   atom", "notes": "", "submit_date": "2009-10-02", "submitter_name": "Wolf Lammen", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1900", "doc-id": "RFC5657", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.5", "orig_text": "|     [RFC4234] progressed from Proposed Standard through Draft Standard\r\n|     to Standard and is obsoleted by [RFC5234].\r\n", "correct_text": "|     [RFC4234] progressed from Proposed Standard to Draft Standard and\r\n|     then has been obsoleted by the Full Standard [RFC5234].\r\n", "notes": "Clear description of historical timeline.", "submit_date": "2009-10-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1901", "doc-id": "RFC5657", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "[[ second paragraph of Section 6.2 ]]\r\n\r\n      VRFY and EXPN commands are often not implemented or are disabled.\r\n      This does not pose an interoperability problem for SMTP because\r\n|     EXPN is an optional features and its support is never relied on.\r\n      [...]                     ^^\r\n\r\n", "correct_text": "      VRFY and EXPN commands are often not implemented or are disabled.\r\n      This does not pose an interoperability problem for SMTP because\r\n|     EXPN is an optional feature and its support is never relied on.\r\n      [...]                     ^\r\n", "notes": "Correct typo.", "submit_date": "2009-10-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1902", "doc-id": "RFC5008", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "      keyInfo contains the object identifier of the key-encryption\r\n      algorithm that will be used to wrap the content-encryption key and\r\n      NULL parameters.  In Suite B, Security Level 1, AES-128 Key Wrap\r\n      MUST be used, resulting in {id-aes128-wrap, NULL}.  In Suite B,\r\n      Security Level 2, AES-256 Key Wrap MUST be used, resulting in\r\n      {id-aes256-wrap, NULL}.\r\n", "correct_text": "      keyInfo contains the object identifier of the key-encryption\r\n      algorithm that will be used to wrap the content-encryption key and\r\n      absent parameters.  In Suite B, Security Level 1, AES-128 Key Wrap\r\n      MUST be used, resulting in {id-aes128-wrap}.  In Suite B,\r\n      Security Level 2, AES-256 Key Wrap MUST be used, resulting in\r\n      {id-aes256-wrap}.\r\n", "notes": "Parameters for AES-* Key Wrap MUST be absent according to RFC 3565.", "submit_date": "2009-10-05", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2284", "doc-id": "RFC4823", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4.1", "orig_text": "   The AS3-MDN follows the MDN specification [6] except where noted in\r\n   this section.  The modified entity definitions in this document use\r\n   the vertical-bar character, '|', to denote a logical \"OR\"\r\n   construction.  Refer to RFC 2045 for the format of MIME-message-\r\n   headers.\r\n\r\n     The format of the AS3-MDN is\r\n\r\n     MDN, no signature\r\n\r\n       -RFC822/2045\r\n         -RFC3798 (message/disposition-notification)\r\n\r\n<<page break>>\r\n\r\n     MDN, signature\r\n\r\n       -RFC822/2045\r\n         -RFC1847 (multipart/signed)\r\n           -RFC3798 (message/disposition-notification)\r\n           -RFC3851 (application/pkcs7-signature)\r\n", "correct_text": "   The AS3-MDN follows the MDN specification [6] except where noted in\r\n|  this section.  Refer to RFC 2045 for the format of MIME headers.\r\n\r\n|  The format of the AS3-MDN is\r\n\r\n     MDN, no signature\r\n\r\n|      -RFC2822/2045\r\n|        -RFC3462 (multipart/report;\r\n|                  report-type=disposition-notification)\r\n|          -RFC2046 (text/plain)\r\n|          -RFC3798 (message/disposition-notification,\r\n|                    as modified by Section 7.4.2)\r\n\r\n     MDN, signature\r\n\r\n|      -RFC2822/2045\r\n         -RFC1847 (multipart/signed)\r\n|          -RFC3462 (multipart/report;\r\n|                    report-type=disposition-notification)\r\n|            -RFC2046 (text/plain)\r\n|            -RFC3798 (message/disposition-notification)\r\n           -RFC3851 (application/pkcs7-signature)\r\n", "notes": "Unlike, e.g., Section 4.2, the message structures depicted in\r\nSection 7.4.1, on pages 23/24, are imprecise and misleading;\r\n'message/disposition-notification' is *not* the atomic MIME entity\r\nshown in the text; according to RFC 3798, the MDN is encapsulated\r\nin a 'multipart/report', which has a mandatory first body part\r\nof type 'text/plain', not shown in the current text.\r\nBecause RFC 4823 explicitely quotes RFC 822 (should better be 2822!),\r\nRFC 2045, and RFC 3798, I strongly suspect that the specification\r\nindeed wanted to re-use the MDN structure specified in RFC 3798.\r\nThis is supported by subsequent details exposed in Section 7.4.2.\r\n\r\nFurthermore, the RFC text there introduces a notation that is not\r\nmade use of anywhere in the RFC.  That sentence is to be deleted.\r\n\r\n\r\nI have omitted the third, optional body part of the 'multipart/report'\r\n-- cf. the final remark (#4) at the end of Appendix A.2 of RFC 4823,\r\nwhich recommends against making use of it.", "submit_date": "2007-05-14", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3254", "doc-id": "RFC5951", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "   1) In addition to the requirement to support static provisioning of\r\n      transport paths (defined in RFC 5645 [7], Section 2.1", "correct_text": "   1) In addition to the requirement to support static provisioning of\r\n      transport paths (defined in RFC 5654 [7], Section 2.1", "notes": "Digits in RFC number transposed", "submit_date": "2012-06-11", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1903", "doc-id": "RFC4742", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "S: <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   S: <hello>\r\n   S:   <capabilities>\r\n   S:     <capability>\r\n   S:       urn:ietf:params:xml:ns:netconf:base:1.0\r\n   S:     </capability>\r\n   S:     <capability>\r\n   S:       urn:ietf:params:ns:netconf:capability:startup:1.0\r\n   S:     </capability>\r\n   S:   </capabilities>\r\n   S:   <session-id>4<session-id>\r\n   S: </hello>\r\n   S: ]]>]]>\r\n\r\n   C: <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   C: <hello>\r\n   C:   <capabilities>\r\n   C:     <capability>\r\n   C:       urn:ietf:params:xml:ns:netconf:base:1.0\r\n   C:     </capability>\r\n   C:   </capabilities>\r\n   C: </hello>\r\n   C: ]]>]]>\r\n", "correct_text": "S: <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   S: <hello xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n   S:   <capabilities>\r\n   S:     <capability>\r\n   S:       urn:ietf:params:xml:ns:netconf:base:1.0\r\n   S:     </capability>\r\n   S:     <capability>\r\n   S:       urn:ietf:params:ns:netconf:capability:startup:1.0\r\n   S:     </capability>\r\n   S:   </capabilities>\r\n   S:   <session-id>4<session-id>\r\n   S: </hello>\r\n   S: ]]>]]>\r\n\r\n   C: <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   C: <hello xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n   C:   <capabilities>\r\n   C:     <capability>\r\n   C:       urn:ietf:params:xml:ns:netconf:base:1.0\r\n   C:     </capability>\r\n   C:   </capabilities>\r\n   C: </hello>\r\n   C: ]]>]]>\r\n", "notes": "the netconf namespace is missing in the sample hello message (for both client and server hello)\n --VERIFIER NOTES-- \nthis change should be discussed by the NETCONF WG as part of RFC 4742bis work   ", "submit_date": "2009-10-07", "submitter_name": "Xiang Li", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1904", "doc-id": "RFC5648", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2, pg.25", "orig_text": "a)\r\nIn Section 4.3, the description of the 'Care-of Address' field\r\nin the Binding Identifier Mobility Option specifies:\r\n\r\n   Care-of Address\r\n\r\n      If a Binding Identifier mobility option is included in a Binding\r\n      Update for the home registration, either IPv4 or IPv6 care-of\r\n      addresses for the corresponding BID can be stored in this field.\r\n      For the binding registration to correspondent nodes (i.e., route\r\n      optimization), only IPv6 care-of addresses can be stored in this\r\n      field.  If no address is specified in this field, the length of\r\n!     this field MUST be zero (i.e., not appear in the option).  If the\r\n!     option is included in any messages other than a Binding Update,\r\n                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n!     the length of this field MUST also be zero.\r\n      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\nb)\r\nContrary to the \"MUST\" in the last line, Section 6.2 of the RFC says,\r\non mid-page 25, where it elaborates on Binding Acknowledgement messages:\r\n\r\n   If all the above operations are successfully completed and the 'A'\r\n   flag is set in the Binding Update, a Binding Acknowledgement\r\n   containing the Binding Identifier mobility options MUST be sent to\r\n!  the mobile node.  Whenever a Binding Acknowledgement is sent, all the\r\n                                ^^^^^^^^^^^^^^^^^^^^^^^\r\n!  Binding Identifier mobility options stored in the Binding Update MUST\r\n!  be copied to the Binding Acknowledgement except the Status field.\r\n!  The Care-of Address field in each Binding Identifier mobility option,\r\n|  however, MAY be omitted, because the mobile node can match a\r\n            ^^^\r\n!  corresponding Binding Update List entry using the BID.\r\n\r\n\r\n", "correct_text": "a)\r\n<< no change >>\r\n\r\nb)\r\n   If all the above operations are successfully completed and the 'A'\r\n   flag is set in the Binding Update, a Binding Acknowledgement\r\n   containing the Binding Identifier mobility options MUST be sent to\r\n   the mobile node.  Whenever a Binding Acknowledgement is sent, all the\r\n   Binding Identifier mobility options stored in the Binding Update MUST\r\n   be copied to the Binding Acknowledgement except the Status field.\r\n   The Care-of Address field in each Binding Identifier mobility option,\r\n|  however, MUST be omitted, because the mobile node can match a\r\n   corresponding Binding Update List entry using the BID.\r\n", "notes": "Rationale:\r\n  The inconsistency is described with the Original Text.\r\n  The Corrected Text proposed gives preference to the requirement\r\n  from Section 4.3, which seems to be reasonable for efficiency\r\n  and consistent with other parts of the specification.", "submit_date": "2009-10-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1905", "doc-id": "RFC5322", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   obs-unstruct    =   *((*LF *CR *(obs-utext *LF *CR)) / FWS)", "correct_text": "   obs-unstruct    =   *( (*CR 1*(obs-utext / FWS)) / 1*LF ) *CR", "notes": "It looks to me, as if the rule for obs-unstruct matches any US_ASCII character sequence, and is, hence, either overly complicated, or simply wrong.  For example: CR LF 'A' is matched by the original rule (loop matches CR first, then LF 'A').  If I understand the accompaying text right, the intention was to allow for reversed sequences LF CR, as well as bare CR and LF sequences, but strictly forbid any occurrence of CR LF (in that order).  This would be expressed by my rule, that basically states that any sequence of CR either is at the end, or is followed by a non-LF, or an FWS\r\n\r\n[Alexey: removed unchanged ABNF rules, corrected an obvious error in the description of the change.]", "submit_date": "2009-10-09", "submitter_name": "Wolf Lammen", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2106", "doc-id": "RFC3958", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.5", "orig_text": "iana-registered-protocol  = ALPHA *31ALPHANUM\r\n", "correct_text": "iana-registered-protocol  = ALPHA *31ALPHANUMSYM\r\n", "notes": "Previous erratum suggested the fix was to add an ALPHANUM production, but the correct fix is to change ALPHANUM to ALPHANUMSYM in this production.", "submit_date": "2010-04-02", "submitter_name": "Leslie Daigle", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1906", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   obs-body        =   *((*LF *CR *((%d0 / text) *LF *CR)) / CRLF)", "correct_text": "   obs-body        =   *(%d0-127)", "notes": "The regular expression for obs-body is overly complex and can be simplified as suggested. Alternatively, one could use\r\n*(d0 /text / LF / CR)\r\nshould the difference to 'text' be emphazised.\r\n\r\n[Alexey: I've edited this to only show 1 issue per erratum.]", "submit_date": "2009-10-10", "submitter_name": "Wolf Lammen", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1923", "doc-id": "RFC3162", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   Address\r\n\r\n      The Address field is 16 octets.", "correct_text": "String\r\n\r\n  The field is 16 octets", "notes": "As Glen notes in:\r\n\r\nhttp://ops.ietf.org/lists/radiusext/2009/msg00540.html\r\n\r\nUsing \"ipv6 address\" for a data type in RADIUS is wrong.\r\n\r\nRFC 3162 (among others Glen wrote) contradict his current position.  Those documents use data types for the \"value\" field of RADIUS attributes that have not been defined in RFC 2865.  As such, they should either:\r\n\r\na) make it clear that they define a new data type, and be marked as \"Updates: 2865\"\r\n\r\n  or\r\n\r\nb) use the data types in RFC 2865.\r\n\r\n  Or even better, maintain an internally consistent set of beliefs, and leave RFC 3162 alone.\n --VERIFIER NOTES-- \nThe common terminology is known by RADIUS implementers. Every RADIUS implementor \"knows what this means\".  i.e. \"Address\" in RFC 2865 means \"ipaddr\", and \"Address\" in RFC 3162 means \"ipv6addr\". A change now would create further confusion. \r\n\r\n   ", "submit_date": "2009-10-22", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2331", "doc-id": "RFC5546", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.", "orig_text": "   | REPLY          | Reply to a VTODO request.  Attendees MAY set     |\r\n   |                | PARTSTAT to ACCEPTED, DECLINED, TENTATIVE,       |\r\n   |                | DELEGATED, PARTIAL, and COMPLETED.               |\r\n ", "correct_text": "   | REPLY          | Reply to a VTODO request.  Attendees MAY set     |\r\n   |                | PARTSTAT to ACCEPTED, DECLINED, TENTATIVE,       |\r\n   |                | DELEGATED, IN-PROCESS, and COMPLETED.            |\r\n", "notes": "The PARTSTAT value for VTODO component that is in progress is IN-PROCESS, not PARTIAL, per RFC 5545.", "submit_date": "2010-07-15", "submitter_name": "Filip Navara", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2105", "doc-id": "RFC5320", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.3, pg.19", "orig_text": "      +-------------------------+ -\r\n      |                         |   ~ Outer */SEAL/*/IPv4 hdrs~   |\r\n      |                         |   |\r\n      +-------------------------+   |\r\n      |      ICMPv4 Header      |   |\r\n      |(Dest Unreach; Frag Need)|   |\r\n      +-------------------------+   |\r\n      |                         |    > Up to 576 bytes\r\n      ~    IP/*/SEAL/*/IPv4     ~   |\r\n      ~ hdrs of packet/fragment ~   |\r\n      |                         |   |\r\n      +-------------------------+   |\r\n      |                         |   |\r\n      ~ Data of packet/fragment ~   |\r\n      |                         |   /\r\n      +-------------------------+ -\r\n\r\n       Figure 3: SEAL-Encapsulated ICMPv4 Fragmentation Needed Message", "correct_text": "      +-------------------------+ -\r\n|     |                         |   \\\r\n|     ~ Outer */SEAL/*/IPv4 hdrs~   |\r\n      |                         |   |\r\n      +-------------------------+   |\r\n      |      ICMPv4 Header      |   |\r\n      |(Dest Unreach; Frag Need)|   |\r\n      +-------------------------+   |\r\n      |                         |    > Up to 576 bytes\r\n      ~    IP/*/SEAL/*/IPv4     ~   |\r\n      ~ hdrs of packet/fragment ~   |\r\n      |                         |   |\r\n      +-------------------------+   |\r\n      |                         |   |\r\n      ~ Data of packet/fragment ~   |\r\n      |                         |   /\r\n      +-------------------------+ -\r\n\r\n       Figure 3: SEAL-Encapsulated ICMPv4 Fragmentation Needed Message\r\n", "notes": "(Most likely an nroff-related problem with the trailing backslash!)\r\n\r\nYes; clearly the diagram needs to be tidied up.", "submit_date": "2010-04-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1908", "doc-id": "RFC5322", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   In the obsolete syntax, any amount of folding white space MAY be\r\n   inserted where the obs-FWS rule is allowed.  This creates the\r\n   possibility of having two consecutive \"folds\" in a line, and\r\n   therefore the possibility that a line which makes up a folded header\r\n   field could be composed entirely of white space.\r\n\r\n   obs-FWS         =   1*WSP *(CRLF 1*WSP)\r\n", "correct_text": "   In the obsolete syntax, any amount of folding white space MAY be\r\n   inserted where the obs-FWS rule is allowed.  This creates the\r\n   possibility of having two consecutive \"folds\" in a line, and\r\n   therefore the possibility that a line which makes up a folded header\r\n   field could be composed entirely of white space.\r\n\r\n   obs-FWS         =   1*([CRLF] WSP)\r\n", "notes": "If I understand the relevant portions of RFC 822 right (notably section 3.1.1\r\n[\"The general rule is that wherever there may be linear-white-space...\r\na CRLF followed by ... LWSP-char(s) may instead be inserted\"], along with\r\nsection 3.1.4, section 3.3), it is permitted to extend a phrase\r\n  atom SPACE atom\r\nby inserting linear-white-space (CRLF SPACE CRLF SPACE) instead, yielding:\r\n  atom CRLF SPACE CRLF SPACE atom\r\nHowever, this is not recognized by the rules of RFC 5322, because the new\r\nsyntax forbids consecutive foldings, whereas obs-FWS requires a leading\r\nwhite-space character at the beginning.", "submit_date": "2009-10-11", "submitter_name": "Wolf Lammen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1909", "doc-id": "RFC3279", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "Replace \"ansi-X9.62\" with \"ansi-X9-62\" in Section 2.3.5.\r\nReplace \"id-public-key-type\" with \"id-publicKeyType\" in Section 2.3.5.\r\nReplace \"sha-1WithRSAEncryption\" with \"sha1WithRSAEncryption\" in Section 2.2.2.", "submit_date": "2009-10-12", "submitter_name": "Jim Wigginton", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1910", "doc-id": "RFC3270", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "MAPnb : 4 bits\r\n         Indicates the number of MAP entries included in the DIFFSERV\r\n         Object.  This can be set to any value from 0 to 8.", "correct_text": "MAPnb : 4 bits\r\n         Indicates the number of MAP entries included in the DIFFSERV\r\n         Object.  This can be set to any value from 0 to 7.", "notes": "This errata was reported by Colors Springfield <springfieldcolors@gmail.com> on 13 October 2009.\n --VERIFIER NOTES-- \nAfter many cycles of discussion, we have concluded that this issue is not as simple as it appears. There are many consequences of a change to this text with the conclusion that this would be a technical change that is best addressed through full WG discussion and the RFC process. Thus, anyone concerned about this issue should write an Internet-Draft and bring it to the MPLS working group.", "submit_date": "2009-10-13", "submitter_name": "Francois Le Faucheur", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1911", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "| DQUOTE                 | 22                |", "correct_text": "| DQUOTE                 | 34                |", "notes": "The codepoint for the DQUOTE character was erroneously specified in hexadecimal instead of decimal.  Issue was found by Raimund Nisius.", "submit_date": "2009-10-13", "submitter_name": "Bernard Desruisseaux", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1912", "doc-id": "RFC2978", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "mime-charset-chars = ALPHA / DIGIT /\r\n            \"!\" / \"#\" / \"$\" / \"%\" / \"&\" /\r\n            \"'\" / \"+\" / \"-\" / \"^\" / \"_\" /\r\n            \"`\" / \"{\" / \"}\" / \"~\"\r\n    ", "correct_text": "mime-charset-chars = ALPHA / DIGIT /\r\n            \"!\" / \"#\" / \"$\" / \"%\" / \"&\" /\r\n            \"+\" / \"-\" / \"^\" / \"_\" / \"`\" /\r\n            \"{\" / \"}\" / \"~\"", "notes": "RFC 2231 uses single quotes as delimiters around charset names. As such, single quote should have been excluded from the list of legal characters that can appear in a charset name.\r\n\r\nNote that this Erratum was further updated by <https://www.rfc-editor.org/errata/eid5433>\r\nto make the list of characters even more restrictive.", "submit_date": "2009-10-13", "submitter_name": "Ned Freed", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1913", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.10", "orig_text": "represents the last Monday of the month.  The numeric value in a\r\nBYDAY rule part with the FREQ rule part set to YEARLY corresponds\r\nto an offset within the month when the BYMONTH rule part is\r\npresent, and corresponds to an offset within the year when the\r\nBYWEEKNO or BYMONTH rule parts are present.  If an integer", "correct_text": "represents the last Monday of the month.  The numeric value in a\r\nBYDAY rule part with the FREQ rule part set to YEARLY corresponds\r\nto an offset within the month when the BYMONTH rule part is\r\npresent, and corresponds to an offset within the year when the\r\nBYWEEKNO or BYMONTH rule parts are not present.  If an integer\r\n                                   ^^^", "notes": "The original statement appears contradictory in itself.", "submit_date": "2009-10-13", "submitter_name": "Anshul Agrawal", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5462", "doc-id": "RFC7542", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "The \"utf8-realm\" SHOULD be supplied by the \"next hop\" or \"home\"\r\nsystem that also supplies the routing information necessary for\r\npackets to reach the next hop.", "correct_text": "The \"utf8-realm\" SHOULD be supplied by the \"next hop\" or \"home\"\r\nsystem that also supplies the routing information necessary for\r\npackets to reach the next hop.\r\n\r\nThe final home system SHOULD validate the NAI in the received packet\r\nagainst the list of Realms hosted by the home system.  If no match\r\nis found, the request SHOULD be rejected.", "notes": "It doesn't explicitly say that home systems only authenticate users for their own realms.  It may help to have this stated explicitly.\r\n\r\nSome text will also be added to draft-ietf-radext-coa-proxy in order to make this clearer.", "submit_date": "2018-08-14", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-12-11 22:23:20"}, {"errata_id": "1914", "doc-id": "RFC2617", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.2.1", "orig_text": "3.2.2.1 Request-Digest\r\n\r\n   If the \"qop\" value is \"auth\" or \"auth-int\":\r\n\r\n      request-digest  = <\"> < KD ( H(A1),     unq(nonce-value)\r\n                                          \":\" nc-value\r\n                                          \":\" unq(cnonce-value)\r\n                                          \":\" unq(qop-value)\r\n                                          \":\" H(A2)\r\n                                  ) <\">\r\n\r\n   If the \"qop\" directive is not present (this construction is for\r\n   compatibility with RFC 2069):\r\n\r\n      request-digest  =\r\n                 <\"> < KD ( H(A1), unq(nonce-value) \":\" H(A2) ) >\r\n   <\">\r\n\r\n", "correct_text": "3.2.2.1 Request-Digest\r\n\r\n   If the \"qop\" value is \"auth\" or \"auth-int\":\r\n\r\n      request-digest  = <\"> < KD ( H(A1)  \":\" unq(nonce-value)\r\n                                          \":\" nc-value\r\n                                          \":\" unq(cnonce-value)\r\n                                          \":\" unq(qop-value)\r\n                                          \":\" H(A2)\r\n                                  ) <\">\r\n\r\n   If the \"qop\" directive is not present (this construction is for\r\n   compatibility with RFC 2069):\r\n\r\n      request-digest  =\r\n                 <\"> < KD ( H(A1) \":\" unq(nonce-value) \":\" H(A2) ) >\r\n   <\">\r\n\r\n", "notes": "Errata 1796 addressing this issue and was rejected, perhaps for editorial or syntax reasons, when the section as it exists does not indicate the need for a \":\" between A1 and unq(nonce-value). The \":\" is most certainly required between these variables if the result of the hash is to be correct.\n --VERIFIER NOTES-- \n   The verifier notes on the rejected Erratum 1796 were as follows:\r\n\r\n   ###\r\n\r\n   KD is defined in the document as:\r\n\r\n   KD(secret, data) = H(concat(secret, \":\", data))\r\n\r\n   So KD takes 2 parameters and the text in the RFC is correct in this respect.\r\n\r\n   ###\r\n\r\n   If there is good reason to pursue this issue further, please do so outside\r\n   the errata process.", "submit_date": "2009-10-14", "submitter_name": "Larry Westrick", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1915", "doc-id": "RFC4294", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "5.3.3.  Use of Router Advertisements in Managed Environments\r\n", "correct_text": "5.2.3.  Use of Router Advertisements in Managed Environments\r\n", "notes": "", "submit_date": "2009-10-14", "submitter_name": "Thorsten Ulbricht", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1916", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6.4", "orig_text": "  BEGIN:VFREEBUSY\r\n  UID:19970901T115957Z-76A912@example.com\r\n  DTSTAMP:19970901T120000Z\r\n  ORGANIZER:jsmith@example.com\r\n           ^", "correct_text": "  BEGIN:VFREEBUSY\r\n  UID:19970901T115957Z-76A912@example.com\r\n  DTSTAMP:19970901T120000Z\r\n  ORGANIZER:mailto:jsmith@example.com\r\n            ^^^^^^^", "notes": "The last example in section 3.6.4 is missing \"mailto:\" after the \"ORGANIZER:\"", "submit_date": "2009-10-15", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1917", "doc-id": "RFC4360", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "If a route has a non-transitivity extended community, ", "correct_text": "If a route has a non-transitive extended community, ", "notes": "", "submit_date": "2009-10-19", "submitter_name": "Yakov Rekhter", "verifier_id": "", "verifier_name": "Ross Callon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1918", "doc-id": "RFC4443", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   [IPv6-ESP]   Kent, S., \"IP Encapsulating Security Payload (ESP)\", RFC\r\n                4203, December 2005.\r\n", "correct_text": "   [IPv6-ESP]   Kent, S., \"IP Encapsulating Security Payload (ESP)\", RFC\r\n                4303, December 2005.\r\n", "notes": "", "submit_date": "2009-10-19", "submitter_name": "Thorsten Ulbricht", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1919", "doc-id": "RFC4106", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14", "orig_text": "   [GCM]      McGrew, D. and J. Viega, \"The Galois/Counter Mode of\r\n              Operation (GCM)\", Submission to NIST. http://\r\n              csrc.nist.gov/CryptoToolkit/modes/proposedmodes/gcm/\r\n              gcm-spec.pdf, January 2004.", "correct_text": "[GCM]      Dworkin, M. \"Recommendation for Block Cipher Modes\r\nof Operation: Galois/Counter Mode (GCM) and GMAC\", NIST Special\r\nPublication 800-38D, November 2007.", "notes": "The previous URL is dead. According to David McGrew, SP 800-38D is an acceptable substitute for the original paper. Note that this is a normative reference for good reason: there are many details in the referred-to document that are needed to implement RFC 4106.", "submit_date": "2009-10-20", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1920", "doc-id": "RFC4705", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   [GCM]      McGrew, D. and J. Viega, \"The Galois/Counter Mode of\r\n              Operation (GCM)\", Submission to NIST.\r\n              http://csrc.nist.gov/CryptoToolkit/modes/proposedmodes/\r\n              gcm/gcm-spec.pdf, January 2004.  [Soon: NIST SP 800-38D.]", "correct_text": "[GCM]      Dworkin, M. \"Recommendation for Block Cipher Modes\r\nof Operation: Galois/Counter Mode (GCM) and GMAC\", NIST Special\r\nPublication 800-38D, November 2007.", "notes": "The original link is dead.", "submit_date": "2009-10-20", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1921", "doc-id": "RFC4543", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "   [GCM]      McGrew, D. and J. Viega, \"The Galois/Counter Mode of\r\n              Operation (GCM)\", Submission to NIST. http://\r\n              csrc.nist.gov/CryptoToolkit/modes/proposedmodes/gcm/\r\n              gcm-spec.pdf, January 2004.", "correct_text": "[GCM]      Dworkin, M. \"Recommendation for Block Cipher Modes\r\nof Operation: Galois/Counter Mode (GCM) and GMAC\", NIST Special\r\nPublication 800-38D, November 2007.", "notes": "The original link is dead.", "submit_date": "2009-10-20", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1922", "doc-id": "RFC2334", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "B.3.1.2", "orig_text": "   The default hash algorithm to be supported is HMAC-MD5-128 [11]. HMAC\r\n   is safer than normal keyed hashes. Other hash algorithms MAY be\r\n   supported by def.\r\n\r\n   IANA will assign the numbers to identify the algorithm being used as\r\n   described in Section C.", "correct_text": "   The default hash algorithm to be supported is HMAC-MD5-128 [11]. HMAC\r\n   is safer than normal keyed hashes. Other hash algorithms MAY be\r\n   supported by def.", "notes": "Removed last paragraph in section B.3.1.2.  After doing a review of RFC2334 for any incomplete IANA actions, IANA contacted an author to confirm if a registry for the algorithms needed to be set-up.  Joel Halpern confirmed that it the actual purpose of the section is only to make sure that there is something eveyrone can use for interoperability.  He suggested I submit an errata for the removal of the last paragraph.", "submit_date": "2009-10-21", "submitter_name": "Michelle Cotton", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2296", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "  The security paramaters may be used even in a non-secure environment\r\n  (the values would indicate unclassified data), thus hosts in\r\n  non-secure environments must be prepared to receive the security\r\n  parameters, though they need not send them.", "correct_text": "  The security parameters may be used even in a non-secure environment\r\n  (the values would indicate unclassified data), thus hosts in\r\n  non-secure environments must be prepared to receive the security\r\n  parameters, though they need not send them.", "notes": "s/paramaters/parameters/", "submit_date": "2010-06-03", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1927", "doc-id": "RFC5676", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4, 3rd para", "orig_text": "   The MIB module is organized into a group of scalars and two tables.\r\n   The syslogMsgControl group contains two scalars controlling the\r\n|  maximum size of SYSLOG messages recorded in the tables and also\r\n   controlling whether SNMP notifications are generated for SYSLOG\r\n   messages.\r\n", "correct_text": "   The MIB module is organized into a group of scalars and two tables.\r\n   The syslogMsgControl group contains two scalars controlling the\r\n|  maximum number of SYSLOG messages recorded in the tables and also\r\n   controlling whether SNMP notifications are generated for SYSLOG\r\n   messages.\r\n", "notes": "Rationale: possible confusion.\r\n\r\n\"maximum size of SYSLOG messages recorded\" conceptionally would\r\nrelate to the SIZE of syslogMsgMsg OCTET STRING instances or the\r\nmaximum value for syslogMsgSDParams instances, but the DESCRIPTION\r\nclause for the syslogMsgTableMaxSize OBJECT-TYPE in the MIB module\r\nin Section 7 clarifies that this object indicates the maximum\r\n*number* of entries in the syslogMsgTable and does not describe\r\nsome filtering criterion (by size) of the SYSLOG messages recorded.", "submit_date": "2009-10-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8106", "doc-id": "RFC9000", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "13.2.1", "orig_text": "   Every packet SHOULD be acknowledged at least once, and ack-eliciting\r\n   packets MUST be acknowledged at least once within the maximum delay\r\n   an endpoint communicated using the max_ack_delay transport parameter;\r\n", "correct_text": "   Every packet SHOULD be acknowledged at least once, and ack-eliciting\r\n   packets MUST be acknowledged at least once. All acknowledgments MUST\r\n   occur within the maximum delay an endpoint communicated using the\r\n   max_ack_delay transport parameter;\r\n", "notes": "The original text can be read as if it were OK to only ACK once within the max_ack_delay, and not always.\n --VERIFIER NOTES-- \n Based on the discussion here (https://mailarchive.ietf.org/arch/msg/quic/14r68SfepLclHMnur6Ur9-F2rnY/) the errata is rejected.", "submit_date": "2024-09-17", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-10-14 16:19:18"}, {"errata_id": "1928", "doc-id": "RFC5676", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7, pg. 7", "orig_text": " SyslogTimeStamp ::= TEXTUAL-CONVENTION\r\n!    DISPLAY-HINT \"2d-1d-1d,1d:1d:1d.3d,1a1d:1d\"\r\n     STATUS       current\r\n     DESCRIPTION\r\n        \"A date-time specification.  This type is similar to the\r\n         DateAndTime type defined in the SNMPv2-TC, except the\r\n         subsecond granulation is microseconds instead of\r\n         deciseconds and a zero-length string can be used\r\n         to indicate a missing value.\r\n\r\n         field  octets  contents                  range\r\n         -----  ------  --------                  -----\r\n|          1      1-2   year*                     0..65536\r\n           2       3    month                     1..12\r\n           3       4    day                       1..31\r\n           4       5    hour                      0..23\r\n           5       6    minutes                   0..59\r\n           6       7    seconds                   0..60\r\n                        (use 60 for leap-second)\r\n!          7     8-10   microseconds*             0..999999\r\n           8      11    direction from UTC        '+' / '-'\r\n           9      12    hours from UTC*           0..13\r\n          10      13    minutes from UTC          0..59\r\n\r\n         * Notes:\r\n         - the value of year is in network-byte order\r\n|        - the value of microseconds is in network-byte order\r\n         - daylight saving time in New Zealand is +13\r\n\r\n         For example, Tuesday May 26, 1992 at 1:30:15 PM EDT would be\r\n         displayed as:\r\n\r\n                         1992-5-26,13:30:15.0,-4:0\r\n\r\n         Note that if only local time is known, then timezone\r\n         information (fields 11-13) is not present.\"\r\n     SYNTAX      OCTET STRING (SIZE (0 | 10 | 13))\r\n", "correct_text": "(a)  upper part of the table:\r\n\r\n         field  octets  contents                  range\r\n         -----  ------  --------                  -----\r\n|          1      1-2   year*                     0..32767\r\n           ...\r\n\r\n(b)  \"*Notes:\" part:\r\n\r\n<< see Notes below -- one possibility to address the issue is\r\n   amending the text as follows; verifiers might do better >> \r\n\r\n         * Notes:\r\n         - the value of year is in network-byte order\r\n|        - the value of microseconds is in network-byte order;\r\n|          users of network management applications following\r\n|          the DISPLAY-HINT specified above should be aware of\r\n|          the unusual appearance of the apparent 'fractional part'\r\n|          displayed: RFC 2579 requires the leading zeros to be\r\n|          omitted; thus a time component diaplayed as '13:30:15.50'\r\n|          does not indicate 50 centiseconds, but 50 microseconds\r\n|          past the full second!\r\n         - daylight saving time in New Zealand is +13\r\n", "notes": "(a)\r\n\r\nSection 3.1 of RFC 2579 (on page 21) states, regarding numerical\r\nconversion descriptor components in DISPLAY-HINTS:\r\n\r\n               [...]  For all types, when rendering a value, leading\r\n   zeros are omitted, and for negative values, a minus sign is rendered\r\n   immediately before the digits.  [...]\r\n\r\nArguably, this means that substrings of OCTET STRING type are\r\ninterpreted as *signed* values (in network byte order).\r\nTherefore, the range restriction for the 'year' part specified\r\ninformally in the DESCRIPTION clause does not make proper sense;\r\nan upper bound of 65536 is nonsensical anyway since a 2-octet\r\nsubstring cannot assme 65537 different values; to avoid issues\r\nwith different interpretation of RFC 2579, the 'safe' range\r\n0..32767 is recommended -- this should not be a serious restriction\r\nin practice.\r\n\r\n(b)\r\n \r\nWARNING:\r\n\r\nAccording to Section 3.1 of RFC 2579, the components of the\r\nDISPLAY-HINTS string describe the *independent* formatting of\r\nsubstrings of the OCTET STRING (in this case).\r\nThus, the display instructions for the conceptional 'seconds'\r\npart of the OCTET STRING, \"1d.3d\", actually describes the\r\nindependent formatting of a 1-octet and a 3-octet substring\r\n(in network byte order) as decimal integers without leading\r\nzeros, separated by a literal period ('.') -- a \"display\r\nseparator character\" in RFC 2579 terms --, and not the\r\nhuman-friendly formatting of a single fixed-point fractional\r\nnumber; there is no concept of a decimal fraction representation\r\nin this notation.\r\nSo the presentation format will be very different from common \r\npractice for human beings. See the example below.\r\nThe \"fixed-point with decimal sign\" representation from\r\nRFC 2579 is only available for INTEGER values, for cases with\r\nscaled values, where the conceptual integer and fractional part\r\nare stored as a single integer in units of the specified\r\nfractional part; it is not applicable to display formats for\r\nOCTET STRING objects.\r\n\r\nElaborating on a slight variant of the example from the RFC, ...\r\n   Tuesday May 26, 1992 at 1:30:15.008 PM EDT\r\n(8 milliseconds past the full 15 seconds), the 'seconds' part\r\nwould be represented as 15 seconds 8000 microseconds in four\r\noctets containing 0x0F, 0x00, 0x1F, 0x40, which, together with\r\nthe other components, would be rendered as:\r\n    1992-5-26,13:30:15.8000,-4:0", "submit_date": "2009-10-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1929", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "group-command = \"GROUP\" [WS newsgroup-name]", "correct_text": "group-command = \"GROUP\" WS newsgroup-name", "notes": "The ABNF syntax for the GROUP command makes its argument optional.  However, that is not the case.  Section 6.1.1 clearly shows that the argument (a newsgroup name) is mandatory.", "submit_date": "2009-10-24", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1930", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.6.1.2", "orig_text": "If the keyword is not recognised, or if an argument is specified and\r\nthe keyword does not expect one, a 501 response code MUST BE\r\nreturned.  If the keyword is recognised but the server does not\r\nmaintain the information, a 503 response code MUST BE returned.", "correct_text": "If the keyword is not recognised, or if an argument is specified and\r\nthe keyword does not expect one, a 501 response code MUST be\r\nreturned.  If the keyword is recognised but the server does not\r\nmaintain the information, a 503 response code MUST be returned.", "notes": "So as to be homogeneous with the rest of the document, lower-case letters should be used for the verb after \"MUST\".", "submit_date": "2009-10-24", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1931", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.1.3", "orig_text": "Example reselecting the currently selected newsgroup:\r\n\r\n   [C] GROUP misc.test\r\n   [S] 211 1234 234 567 misc.test\r\n   [C] STAT 444\r\n   [S] 223 444 <123456@example.net> retrieved\r\n   [C] GROUP misc.test\r\n   [S] 211 1234 234 567 misc.test\r\n   [C] STAT\r\n   [S] 223 234 <different@example.net> retrieved\r\n", "correct_text": "Example reselecting the currently selected newsgroup:\r\n\r\n   [C] GROUP misc.test\r\n   [S] 211 123 234 567 misc.test\r\n   [C] STAT 444\r\n   [S] 223 444 <123456@example.net> retrieved\r\n   [C] GROUP misc.test\r\n   [S] 211 123 234 567 misc.test\r\n   [C] STAT\r\n   [S] 223 234 <different@example.net> retrieved\r\n", "notes": "Section 6.1.1.2 mentions that \"if the group is not empty, the estimate MUST be at least the actual number of articles available and MUST be no greater than one more than the difference between the reported low and high water marks\".\r\n\r\nThe count 1234 is not correct because there are less than 567-234+1=334 articles in the newsgroup.", "submit_date": "2009-10-24", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1932", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.4.3", "orig_text": "over-content = 1*6(TAB hdr-content) /\r\n      7(TAB hdr-content) *(TAB hdr-n-content)\r\n", "correct_text": "over-content = 7(TAB hdr-content) *(TAB hdr-n-content)", "notes": "Section 8.3.2 describes the OVER command and mentions that there are seven mandatory fields.  Though trailing tabs MAY be omitted in OVER responses, it is impossible to have 1*6(TAB hdr-content) owing to the sixth and seventh fields being the metadata :bytes and :lines which are mandatory items (and MUST be computed by the news server).\r\n\r\nLess than 7 entries cannot occur for news servers implementing OVER (which should not be confused with XOVER).", "submit_date": "2009-10-25", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1933", "doc-id": "RFC2396", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "appendix B", "orig_text": "^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?", "correct_text": "/^(([^:\\/?#]+):)?(\\/\\/([^\\/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?/", "notes": "A Regular Expression is delimited by the slash (\"/\"). Within it a slash should be preceded by a back-slash (\"\\\").\r\n\r\nPeter: This also applies to RFC 3986.", "submit_date": "2009-10-25", "submitter_name": "Skip Geel", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1936", "doc-id": "RFC1122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.3.5", "orig_text": "            (d)  TCP SHOULD inform the application of the delivery\r\n                 problem (unless such information has been disabled by\r\n                 the application; see Section 4.2.4.1), when R1 is\r\n                 reached and before R2.  This will allow a remote login\r\n                 (User Telnet) application program to inform the user,\r\n                 for example.\r\n", "correct_text": "            (e)  TCP SHOULD inform the application of the delivery\r\n                 problem (unless such information has been disabled by\r\n                 the application; see Section 4.2.4.1), when R1 is\r\n                 reached and before R2.  This will allow a remote login\r\n                 (User Telnet) application program to inform the user,\r\n                 for example.\r\n", "notes": "The paragraph numbering got out of sequence.  Letter (d) was used twice.", "submit_date": "2009-10-30", "submitter_name": "Thorsten Ulbricht", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1937", "doc-id": "RFC4307", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.3.", "orig_text": "      ENCR_NULL                11        [RFC2410]       MAY\r\n", "correct_text": "      ENCR_NULL                11        [RFC2410]       MUST NOT", "notes": "ENCR_NULL is MUST NOT for IKEv2, as RFC4306 specifies that ENCR_NULL MUST NOT be used as IKE encryption algorithm (RFC4306 section 5).", "submit_date": "2009-11-02", "submitter_name": "Tero Kivinen", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8100", "doc-id": "RFC9147", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   *  If the first byte is alert(21), handshake(22), or ack(proposed,\r\n      26), the record MUST be interpreted as a DTLSPlaintext record.", "correct_text": "   *  If the first byte is alert(21), handshake(22), or ack(26), the\r\n      record MUST be interpreted as a DTLSPlaintext record.", "notes": "This appears to be a remnant from before the codepoint was officially allocated.", "submit_date": "2024-09-12", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-09-13 23:03:16"}, {"errata_id": "1938", "doc-id": "RFC4327", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "(9)  lmpCcHelloInterval OBJECT-TYPE  (page 21)\r\n\r\nAn established 'default' specifies the value of a (newly created)\r\ntabular object to be used when this object is not SET explicitely.\r\nHence,\r\n\r\n   DESCRIPTION\r\n       \"This object specifies the value of the HelloInterval\r\n        parameter.  The default value for this object should be\r\n        set to lmpCcHelloIntervalDefault.\"\r\n   ::= { lmpControlChannelEntry 10 }\r\n\r\nshould better say:\r\n\r\n   DESCRIPTION\r\n       \"This object specifies the value of the HelloInterval\r\n|       parameter.  The default value to be used for this object\r\n|       is lmpCcHelloIntervalDefault.\"\r\n   ::= { lmpControlChannelEntry 10 }\r\n\r\n\r\n(9')   lmpCcHelloIntervalMin OBJECT-TYPE  (page 21) ,\r\n(9'')  lmpCcHelloIntervalMax OBJECT-TYPE  (page 21/22) ,\r\n(10)   lmpCcHelloDeadInterval OBJECT-TYPE  (page 22) ,\r\n(10')  lmpCcHelloDeadIntervalMin OBJECT-TYPE  (page 22) , and\r\n(10'') lmpCcHelloDeadIntervalMax OBJECT-TYPE  (page 22)\r\n\r\nThe change from item (9) above should be applied there similarly:\r\n\r\nReplace the phrase,\r\n\r\n           \"[...].  The default value for this object should be\r\n        set to lmp<*>Default.\"\r\n\r\nby:\r\n\r\n|          \"[...].  The default value to be used for this object\r\n|       is lmp<*>Default.\"\r\n\r\nusing, at all instances, the appropriate value for the placeholder <*>.\r\n\r\n\r\n(13)  lmpTeLinkEntry OBJECT-TYPE  (page 36)\r\n\r\nThe DESCRIPTION clause contains the sentence:\r\n\r\n                                                      [...].  The\r\n        administrative status value is controlled from the ifEntry.\r\n        [...]\r\n\r\nThis sentence should say:\r\n\r\n                                                      [...].  The\r\n|       administrative status is controlled from the ifEntry.\r\n        [...]\r\n\r\n\r\n(19)  lmpDataLinkEntry OBJECT-TYPE  (page 51)\r\n\r\nThe correction from item (13) above is to be applied here as well:\r\n\r\nThe sentence in the DESCRIPTION clause,\r\n\r\n                   [...].  The administrative status value is\r\n        controlled from the ifEntry.  [...]\r\n\r\nshould say:\r\n\r\n|                  [...].  The administrative value is\r\n        controlled from the ifEntry.  [...]\r\n\r\n\r\n(22)  lmpNodeGroup OBJECT-GROUP  (page 71/72)\r\n\r\nNear the top of page 72, the RFC says:\r\n\r\n   DESCRIPTION\r\n          \"Collection of objects that represent LMP node\r\n           configuration.\"\r\n   ::= { lmpGroups 1 }\r\n\r\nIt should say:\r\n\r\n   DESCRIPTION\r\n|         \"Collection of objects that represents the LMP node\r\n           configuration.\"\r\n   ::= { lmpGroups 1 }\r\n\r\n[ In fact, it is *the collection* (singular) that represents\r\n  the node configuration! ]\r\n\r\n\r\n(24)  lmpDataLinkGroup OBJECT-GROUP  (page 76)\r\n\r\nSimilar to item (22) above, the clause,\r\n\r\n   DESCRIPTION\r\n          \"Collection of objects that represent data-bearing link\r\n           configuration.\"\r\n   ::= { lmpGroups 9 }\r\n\r\nshould better say:\r\n\r\n   DESCRIPTION\r\n          \"Collection of objects that represents data-bearing link\r\n           configurations.\"\r\n   ::= { lmpGroups 9 }\r\n", "correct_text": "[see above]", "notes": "Verifier's analysis:\r\n\r\n9.  No.  Editorial change of no substance.\r\n9'  No.  Editorial change of no substance.\r\n9\"  No.  Editorial change of no substance.\r\n10. No.  Editorial change of no substance.\r\n10' No.  Editorial change of no substance.\r\n10\" No.  Editorial change of no substance.\r\n13. No.  The value is controlled, not the status.\r\n19. No.  The value is controlled, not the status.\r\n22. No.  The English is correct.\r\n24. No.  The English is correct.\r\n\r\nVerified items are in Errata ID 705.", "submit_date": "2006-02-24", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1939", "doc-id": "RFC4294", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "   [RFC-3484]     Frye, R., Levi, D., Routhier, S., and B. Wijnen,\r\n                  \"Coexistence between Version 1, Version 2, and Version\r\n                  3 of the Internet-standard Network Management\r\n                  Framework\", BCP 74, RFC 3584, August 2003.", "correct_text": "   [RFC-3484]     Draves, R., \"Default Address Selection for Internet\r\n                  Protocol version 6 (IPv6)\", RFC 3484, February\r\n                  2003.", "notes": "wrong reference", "submit_date": "2009-11-03", "submitter_name": "Thorsten Ulbricht", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1940", "doc-id": "RFC5586", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10", "orig_text": "In order to support this\r\nrequirement, IANA has changed the code point allocation scheme for\r\nthe PW Associated Channel Type be changed as follows:\r\n\r\n   0 - 32751 : IETF Review\r\n   32760 - 32767 : Experimental\r\n\r\n", "correct_text": "In order to support this\r\nrequirement, IANA has changed the code point allocation scheme for\r\nthe PW Associated Channel Type be changed as follows:\r\n\r\n   0 - 32759 : IETF Review\r\n   32760 - 32767 : Experimental\r\n   32768 - 65535 : IETF Review\r\n\r\n", "notes": "There are some gaps in the specified allocation policy for some parts of the ACH channel type range (32752 to 32759 and 32768 to 65535). The channel type is a 16-bit value, and the IANA considerations section of RFC5586 should be updated to reflect this.\r\n\r\nThe correction should be to clarify that the allocation policy for the code points that have been left out of RFC5586 is IETF review (which reflects the WG consensus at the time of publication), and to leave the Experimental range where it is to avoid impacting current implementations.\r\n\r\nThis also requires an update by IANA to the PW ACH Channel Type registry.", "submit_date": "2009-11-03", "submitter_name": "Matthew Bocci", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1941", "doc-id": "RFC959", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.1.5.", "orig_text": "(...)Therefore, these types have a second parameter\r\n            specifying one of the following three formats:\r\n3.1.1.5.1.  NON PRINT\r\n(...)\r\n3.1.1.5.2.  TELNET FORMAT CONTROLS\r\n(...)\r\n     \r\n3.1.1.5.2.  CARRIAGE CONTROL (ASA)", "correct_text": "(...)Therefore, these types have a second parameter\r\n            specifying one of the following three formats:\r\n3.1.1.5.1.  NON PRINT\r\n(...)\r\n3.1.1.5.2.  TELNET FORMAT CONTROLS\r\n(...)\r\n     \r\n3.1.1.5.3.  CARRIAGE CONTROL (ASA)", "notes": "Two Sections in the RFC have the same number in the document whereas the The Carriage Control (ASA) should have 3.1.1.5.3. in the structure of the RFC document since its a third format of the possible value for the parameter mention in the statement \"Therefore, these types have a second parameter specifying one of the following three formats\" ATM it has the same 3.1.1.5.2. as the Telnet Format Controls.", "submit_date": "2009-11-09", "submitter_name": "Tomasz Kluza", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2297", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.8", "orig_text": "    Any lower level protocol will have to provide the source address,\r\n    destination address, and protocol fields, and some way to determine\r\n    the \"TCP length\", both to provide the functional equivlent service\r\n    of IP and to be used in the TCP checksum.", "correct_text": "    Any lower level protocol will have to provide the source address,\r\n    destination address, and protocol fields, and some way to determine\r\n    the \"TCP length\", both to provide the functional equivalent service\r\n    of IP and to be used in the TCP checksum.", "notes": "s/equivlent/equivalent/", "submit_date": "2010-06-03", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7033", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 65 06 40 00 ff 06 37 75 ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 e9 d7 11 c1 42 61 fb fb ab 5b\r\n     e0 12 ff ff 37 76 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 84 a5 0b eb 00 15 5a b7 1d 10 54 3d\r\n     ee ab 0f e2 4c 30 10 81 51 16 b3 be\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 65 06 40 00 ff 06 37 75 ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 e9 d7 11 c1 42 61 fb fb ab 5b\r\n     e0 12 ff ff 86 cb 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 84 a5 0b eb 00 15 5a b7 1d 10 54 3d\r\n     ee ab 0f e2 4c 30 10 81 51 16 b3 be\r\n", "notes": "The TCP checksum shown (0x3776) is wrong, it should be 0x86cb.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:46:57"}, {"errata_id": "1942", "doc-id": "RFC4871", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4.4", "orig_text": "The \"relaxed\" body canonicalization algorithm:\r\n", "correct_text": "The \"relaxed\" body canonicalization algorithm MUST apply the following \r\nsteps in order:", "notes": "The order of the steps should be enforced, as in section 3.4.2.  I have two disagreeing interpretations that have resulted in an interoperability problem (fortunately a corner case), namely:\r\n\r\n<CRLF><CRLF><SP><SP><CRLF> should be canonicalized as what?  Taken top-to-bottom, the output is the empty body; given the other pending errata, the output should be a single <CRLF>; yet another interpretation strips trailing <CRLF>s first, then does space trimming, leaving the output as <CRLF><CRLF><CRLF>.\r\n\r\nI might further suggest changing these steps to an enumerated/ordered list instead of a list of bullet points.\r\n --VERIFIER NOTES-- \r\nDuplicate; this issue is already covered by errata 1384.", "submit_date": "2009-11-11", "submitter_name": "Murray S. Kucherawy", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1943", "doc-id": "RFC5568", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2.1.2", "orig_text": "   Upon receiving an HI message, the NAR MUST respond with a Handover\r\n   Acknowledge message.  If the 'S' flag is set in the HI message, the\r\n   NAR SHOULD include the New Care-of Address option and a Code 3.\r\n\r\n", "correct_text": "   Upon receiving an HI message, the NAR MUST respond with a Handover\r\n   Acknowledge message.  If the 'S' flag is set in the HI message, the\r\n   NAR SHOULD include the New Care-of Address option and a Code 2.\r\n\r\n", "notes": "Code 2 is used in assigned addressing. Some Codes were cleaned up in 5068/5568, but this was not reflected in above text", "submit_date": "2009-11-19", "submitter_name": "Rajeev Koodli", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1944", "doc-id": "RFC5568", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.4.6", "orig_text": "2: NCoA is invalid, use the supplied NCoA.  The supplied NCoA\r\n(in the form of an IP Address Option) MUST be present following\r\nthe Reserved field.\r\n\r\n\r\n\r\n\r\n", "correct_text": "2: NCoA is invalid, use the supplied NCoA. The supplied NCoA \r\n(an IPv6 Address of 16 octets) MUST be present following the \r\nReserved field.\r\n", "notes": "Clarifies that an IPv6 address is included (and not IPv6 address/prefix option)", "submit_date": "2009-11-19", "submitter_name": "Rajeev Koodli", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1945", "doc-id": "RFC3208", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2.5.", "orig_text": "If receivers are several hops\r\n   removed from the first PGM network element, the efficacy of NAK\r\n   suppression may degrade.", "correct_text": "If receivers are several hops\r\n   away from the first PGM network element, the efficacy of NAK\r\n   suppression may degrade.", "notes": "This is simply a stylistic suggestion in the wording choice.", "submit_date": "2009-11-23", "submitter_name": "Alessandro Spinella", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2298", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Page 74", "orig_text": "Once the TCP takes responsibility for the data it advances\r\nRCV.NXT over the data accepted, and adjusts RCV.WND as\r\napporopriate to the current buffer availability", "correct_text": "Once the TCP takes responsibility for the data it advances\r\nRCV.NXT over the data accepted, and adjusts RCV.WND as\r\nappropriate to the current buffer availability", "notes": "s/apporopriate/appropriate/", "submit_date": "2010-06-03", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1961", "doc-id": "RFC5296", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10", "orig_text": "   Bernard Aboba    , Jari Arkko, Sam Hartman, Russ Housley    , Joe Salowey    ,\r\n   Jesse Walker, Charles Clancy, Michaela Vanderveen, Kedar Gaonkar,\r\n   Parag Agashe, Dinesh Dharmaraju, Pasi Eronen, Dan Harkins    , Yoshi\r\n   Ohba, Glen Zorn, Alan DeKok, Katrin Hoeper, and other participants of\r\n   the HOKEY working group.  The credit for the idea to use EAP-\r\n   Initiate/Re-auth-Start goes to Charles Clancy, and the multiple link-\r\n   layer SAs idea to mitigate the DoS attack goes to Yoshi Ohba.  Katrin\r\n   Hoeper suggested the use of the windowing technique to handle\r\n   multiple simultaneous ER exchanges.  Many thanks to Pasi Eronen for\r\n   the suggestion to use hexadecimal encoding for rIKname when sent as\r\n   part of keyName-NAI field.  Thanks to Bernard Aboba     for suggestions\r\n   in clarifying the EAP lock-step operation, and Joe Salowey     and Glen\r\n   Zorn for help in specifying AAA transport of ERP messages.  Thanks to\r\n   Sam Hartman for the DSRK Authorization Indication mechanism.", "correct_text": "   Bernard Aboba, Jari Arkko, Sam Hartman, Russ Housley, Joe Salowey,\r\n   Jesse Walker, Charles Clancy, Michaela Vanderveen, Kedar Gaonkar,\r\n   Parag Agashe, Dinesh Dharmaraju, Pasi Eronen, Dan Harkins, Yoshi\r\n   Ohba, Glen Zorn, Alan DeKok, Katrin Hoeper, and other participants of\r\n   the HOKEY working group.  The credit for the idea to use EAP-\r\n   Initiate/Re-auth-Start goes to Charles Clancy, and the multiple link-\r\n   layer SAs idea to mitigate the DoS attack goes to Yoshi Ohba.  Katrin\r\n   Hoeper suggested the use of the windowing technique to handle\r\n   multiple simultaneous ER exchanges.  Many thanks to Pasi Eronen for\r\n   the suggestion to use hexadecimal encoding for rIKname when sent as\r\n   part of keyName-NAI field.  Thanks to Bernard Aboba for suggestions\r\n   in clarifying the EAP lock-step operation, and Joe Salowey and Glen\r\n   Zorn for help in specifying AAA transport of ERP messages.  Thanks to\r\n   Sam Hartman for the DSRK Authorization Indication mechanism.", "notes": "Section is mis-formatted.\r\n\r\n--RATIONALE--\r\nThe spacing error shown above is not present in the RFC (http://www.rfc-editor.org/rfc/rfc5296.txt). ", "submit_date": "2009-12-18", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1962", "doc-id": "RFC5677", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.2", "orig_text": "   [IEEE80221] \"IEEE Standard for Local and Metropolitan Area Networks -\r\n               Part 21: Media Independent Handover Services\", IEEE\r\n               LAN/MAN Std 802.21-2008, January 2009,\r\n|              http://www.ieee802.org/21/private/Published%20Spec/\r\n|              802.21-2008.pdf (access to the document requires\r\n|              membership).\r\n\r\n", "correct_text": "   [IEEE80221] \"IEEE Standard for Local and Metropolitan Area Networks -\r\n               Part 21: Media Independent Handover Services\", IEEE\r\n               LAN/MAN Std 802.21-2008, January 2009,\r\n|              http://standards.ieee.org/getieee802/802.21.html.\r\n", "notes": "Rationale: By the time of publication of the RFC, the 6-month\r\n  IEEE 802 grace period had passed for more than 5 months, and\r\n  the specification is now  available freely as usual.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1963", "doc-id": "RFC5677", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3,1st para", "orig_text": "|  To discover a Mobility Server in a remote network other than home\r\n   network, the MN MUST use the DNS-based MoS discovery method described\r\n   in [RFC5679].  [...]", "correct_text": "|  To discover a Mobility Server in a remote network other than the home\r\n   network, the MN MUST use the DNS-based MoS discovery method described\r\n   in [RFC5679].  [...]", "notes": "Rationale:  Missing article.\r\n\r\nOther editorial flaw (keep for update!):\r\n  The text of Section 2.1 (page 7) is indented too much;\r\n  should be same indentation as for the body of Section 3.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2299", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "18.45.3.", "orig_text": "If SECINFO_STYLE4_PARENT is passed, then\r\n   SECINFO_NO_NAME is querying for the required security of the current\r\n   filehandle's parent", "correct_text": "If SECINFO_STYLE4_PARENT is passed, then\r\n   SECINFO_NO_NAME is querying for the required security of the current\r\n   filehandle's parent, where the current filehandle MUST be that of directory (an object of type NF4DIR).", "notes": "", "submit_date": "2010-06-03", "submitter_name": "Michael Eisler", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1946", "doc-id": "RFC4005", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.2", "orig_text": "If the Accounting-Input-Octets, Accounting-Input-Packets,\r\n   Accounting-Output-Octets, or Accounting-Output-Packets AVPs are\r\n   present, they must be translated to the corresponding RADIUS\r\n   attributes.  If the value of the Diameter AVPs do not fit\r\n   within a 32-bit RADIUS attribute, the RADIUS Acct-Input-\r\n   Gigawords and Acct-Output-Gigawords must be used.", "correct_text": "If the Accounting-Input-Octets, \r\n   Accounting-Output-Octets,  AVPs are\r\n   present, they must be translated to the corresponding RADIUS\r\n   attributes.  If the value of the Diameter AVPs do not fit\r\n   within a 32-bit RADIUS attribute, the RADIUS Acct-Input-\r\n   Gigawords and Acct-Output-Gigawords must be used.", "notes": "The last sentence of the original text causes confusion because according to RFC2869, the Acct-Input/Output-Gigawords are only overflows for the Acct-Input/Output-Octet attributes.  \r\nTHE ABOVE CORRECTION BASICALLY DOES NOT PROVIDE FOR OVERFLOW FOR THE PACKET COUNTERS.\n --VERIFIER NOTES-- \nThe working group discussion on this item led to the following text change being recommended: \r\n\r\nIf the Accounting-Input-Octets, Accounting-Input-Packets, Accounting-Output-Octets, or Accounting-Output-Packets AVPs are present, they SHOULD be translated to the corresponding RADIUS attributes.  However, if the value of the Accounting-Input-Octets AVP or Accounting-Output-Octets AVP does not fit within a 32-bit RADIUS attribute, the RADIUS Acct-Input-Gigawords and Acct-Output-Gigawords Attributes must be used.\r\n\r\nCare must be taken when interworking Diameter with RADIUS due to the fact that there is no attribute available in RADIUS to record overflows in packet counters.  One remedy that can be used is to limit the session time such that packet counter do not overflow.  Another remedy would be to ignore the packet counters altogether and just rely on the octet counters.\r\n\r\n", "submit_date": "2009-11-25", "submitter_name": "Avi Lior", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1947", "doc-id": "RFC5694", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1, pg.12", "orig_text": "   An example of a sensor network based on P2P content distribution and\r\n|  Delay-tolerant Networking (DTL) is ZebraNet [Juang2002].  [...]\r\n                                ^", "correct_text": "   An example of a sensor network based on P2P content distribution and\r\n|  Delay-tolerant Networking (DTN) is ZebraNet [Juang2002].  [...]\r\n                                ^", "notes": "Rationale:\r\nThe (common) acronym \"DTN\" is used subsequently in the RFC,\r\nbut \"DTL\" isn't used anywhere else in the text.", "submit_date": "2009-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Danny McPherson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1948", "doc-id": "RFC5632", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7, 2nd para", "orig_text": "   The experiment did show that an ISP can improve performance without\r\n   exposing fine-grained details about network structure, which might\r\n   otherwise be a security concern (see Section 3.1 (P4P Fine Grain) and\r\n|  Section 3.2 (P4P Coarse Grain).  [...]\r\n                                 ^", "correct_text": "   The experiment did show that an ISP can improve performance without\r\n   exposing fine-grained details about network structure, which might\r\n   otherwise be a security concern (see Section 3.1 (P4P Fine Grain) and\r\n|  Section 3.2 (P4P Coarse Grain)).  [...]\r\n                                 ^", "notes": "Rationale: Mismatch of parentheses.", "submit_date": "2009-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1949", "doc-id": "RFC5632", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9", "orig_text": "   [SIGCOMM]  Xie, H., Yang, Y., Krishnamurthy, A., Liu, Y., and A.\r\n              Silberschatz, \"ACM SIGCOMM 2008 - P4P: Provider Portal for\r\n|             Applications\", Association for Computing Machinery SIGCOMM\r\n              2008 Proceedings, August 2008, [..]", "correct_text": "   [SIGCOMM]  Xie, H., Yang, Y., Krishnamurthy, A., Liu, Y., and A.\r\n              Silberschatz, \"ACM SIGCOMM 2008 - P4P: Provider Portal for\r\n|             Peer-to-Peer Applications\", Association for Computing\r\n|             Machinery, SIGCOMM 2008 Proceedings, August 2008, [..]", "notes": "Rationale: word omission.\n --VERIFIER NOTES-- \n   The authors checked the published title and confirmed it.", "submit_date": "2009-11-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1950", "doc-id": "RFC4984", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   Since each\r\n   technology step roughly doubles memory, that implies that if demand\r\n   grows faster than about (2x/1.5x) = 1.3x per year, then technology\r\n   refresh will not be able to remain on a constant cost curve.\r\n", "correct_text": "   Since each\r\n   technology step roughly doubles memory, that implies that if demand\r\n   grows faster than about (2x/1.5x) = 1.3x every 2 years, then technology\r\n   refresh will not be able to remain on a constant cost curve.", "notes": "", "submit_date": "2009-11-30", "submitter_name": "Shane Amante", "verifier_id": "", "verifier_name": "Danny McPherson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1951", "doc-id": "RFC5491", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2.2", "orig_text": "                     <gml:pos>43.311 -73.422</gml:pos> <!--A-->\r\n                     <gml:pos>43.111 -73.322</gml:pos> <!--F-->\r\n                     <gml:pos>43.111 -73.222</gml:pos> <!--E-->\r\n                     <gml:pos>43.311 -73.122</gml:pos> <!--D-->\r\n                     <gml:pos>43.411 -73.222</gml:pos> <!--C-->\r\n                     <gml:pos>43.411 -73.322</gml:pos> <!--B-->\r\n                     <gml:pos>43.311 -73.422</gml:pos> <!--A-->", "correct_text": "                     <gml:pos>43.311 -73.422</gml:pos> <!--A-->\r\n                     <gml:pos>43.111 -73.322</gml:pos> <!--B-->\r\n                     <gml:pos>43.111 -73.222</gml:pos> <!--C-->\r\n                     <gml:pos>43.311 -73.122</gml:pos> <!--D-->\r\n                     <gml:pos>43.411 -73.222</gml:pos> <!--E-->\r\n                     <gml:pos>43.411 -73.322</gml:pos> <!--F-->\r\n                     <gml:pos>43.311 -73.422</gml:pos> <!--A-->", "notes": "The points in Figure 7 are correct (i.e., they are in a counter-clockwise direction) but the comment labels are in the wrong order.", "submit_date": "2009-11-30", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Cullen Jennings", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1952", "doc-id": "RFC2127", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Conformance", "orig_text": "isdnMibConformance OBJECT IDENTIFIER ::= { isdnMib 2 }\r\n\r\n\r\n\r\n", "correct_text": "isdnMibConformance OBJECT IDENTIFIER ::= { isdnMib 3 }", "notes": "Maybe this was already reported as Errata 491, which I couldn't read.\r\nAnyhow\r\n\r\nisdnMib 2 is already used as \r\nisdnMibTrapPrefix OBJECT IDENTIFIER ::= { isdnMib 2 }", "submit_date": "2009-12-01", "submitter_name": "Yigal Hachmon", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1953", "doc-id": "RFC5654", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "Investment in equipment and facilities (Capital Expenditure\r\n   (CAPEX)) and Operational Expenditure (OPEX) should be minimized.\r\n", "correct_text": "Investment in equipment and facilities (Capital Expenditure\r\n   (CAPEX) and Operational Expenditure (OPEX) should be minimized.\r\n", "notes": "An unnecessary parenthesis.\n --VERIFIER NOTES-- \nOrriginal is correct.", "submit_date": "2009-12-02", "submitter_name": "Zongpeng Du", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2295", "doc-id": "RFC791", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Page 27", "orig_text": "For example, one could implement\r\na fragmentation procedure that repeatly divided large datagrams in\r\nhalf until the resulting fragments were less than the maximum\r\ntransmission unit size.", "correct_text": "For example, one could implement\r\na fragmentation procedure that repeatedly divided large datagrams in\r\nhalf until the resulting fragments were less than the maximum\r\ntransmission unit size.", "notes": "s/ repeatly/repeatedly/", "submit_date": "2010-06-03", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1955", "doc-id": "RFC4072", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "   Note that not all link layers use this name, and currently most EAP\r\n   methods do not generate it.  Since the NAS operates in pass-through\r\n   mode, it cannot know the Key-Name before receiving it from the AAA\r\n   server.  As a result, a Key-Name AVP sent in a Diameter-EAP-Request\r\n   MUST NOT contain any data.  A home Diameter server receiving a\r\n   Diameter-EAP-Request with a Key-Name AVP with non-empty data MUST\r\n   silently discard the AVP.  ", "correct_text": "   Note that not all link layers use this name, and currently most EAP\r\n   methods do not generate it.  Since the NAS operates in pass-through\r\n   mode, it cannot know the name of the key before receiving it from the AAA\r\n   server.  As a result, an EAP-Key-Name AVP sent in a Diameter-EAP-Request\r\n   MUST NOT contain any data.  A home Diameter server receiving a\r\n   Diameter-EAP-Request containing an EAP-Key-Name AVP with non-empty data MUST\r\n   silently ignore the AVP.  ", "notes": "In the original text, the first occurrence of the string \"Key-Name\" apparently is meant to refer to the actual name of the key, rather than an AVP identifier, while the next two occurrences are obviously typos, since no Key-Name AVP is defined in the document.  Also, the term \"silently discard\" is typically used in reference to messages; with reference to a single AVP, \"silently ignore\" seems more appropriate.", "submit_date": "2009-12-03", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1956", "doc-id": "RFC4072", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "In addition, the home Diameter server SHOULD include this AVP in \r\nDiameter-EAP-Response only if an empty EAP-Key-Name AVP was present in \r\nDiameter-EAP-Request.\r\n", "correct_text": "In addition, the home Diameter server SHOULD include this AVP in the \r\nDiameter-EAP-Answer message only if an empty EAP-Key-Name AVP was present in\r\nthe corresponding Diameter-EAP-Request.\r\n", "notes": "There's no such thing as a \"Diameter-EAP-Response\" message; the rephrasing is for purposes of clarification.", "submit_date": "2009-12-03", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1957", "doc-id": "RFC4122", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "The version number is in the most significant 4 bits of the time\r\nstamp (bits 4 through 7 of the time_hi_and_version field).", "correct_text": "The version number is in the most significant 4 bits of the time\r\nstamp (bits 12 through 15 of the time_hi_and_version field).", "notes": "time_hi_and_version is defined as 16 bit field.\r\n\r\n--- VERIFIER NOTES ---\r\nThis change does make the text in Section 4.1.3 consistent with the sixth\r\nbullet in Section 4.2.2.  But the issue goes well beyond that: there is a real\r\nproblem with the bit numbering throughout the RFC.  Please see erratum\r\n3546 for more details.", "submit_date": "2009-12-03", "submitter_name": "Sergey Shandar", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1958", "doc-id": "RFC3711", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   This document describes the Secure Real-time Transport Protocol\r\n   (SRTP), a profile of the Real-time Transport Protocol (RTP), which\r\n   can provide confidentiality, message authentication, and replay\r\n   protection to the RTP traffic and to the control traffic for RTP,\r\n   RTCP (the Real-time Transport Control Protocol) [RFC3350].\r\n", "correct_text": "   This document describes the Secure Real-time Transport Protocol\r\n   (SRTP), a profile of the Real-time Transport Protocol (RTP), which\r\n   can provide confidentiality, message authentication, and replay\r\n   protection to the RTP traffic and to the control traffic for RTP,\r\n   RTCP (the Real-time Transport Control Protocol) [RFC3550].\r\n", "notes": "Reference is made to the RFC pertaining RTP, which is 3550, not 3350.", "submit_date": "2009-12-10", "submitter_name": "Jaap Keuter", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1959", "doc-id": "RFC2617", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.2 p4", "orig_text": "       credentials = auth-scheme #auth-param", "correct_text": "       credentials = auth-scheme ( token | quoted-string | #auth-param )", "notes": "Alexey Melnikov (updated as per suggestion from Paul Leach):\r\n\r\nauth-param doesn't allow for parameters with no '=', so Basic is non conformant to the generic syntax.\r\n\r\nMultiple versions of token/quoted-string (with no attribute name) is not allowed, as none of the existing scheme not using auth-param supports that.\r\n\r\n(Note that RFC 2617 is using BNF from RFC 2616, which allows for implied LWS.)\r\n", "submit_date": "2009-12-10", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1960", "doc-id": "RFC5656", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2,2nd para", "orig_text": "|  For example, the method name for ECDH key exchange with ephemeral\r\n|  keys generated on the nistp256 curve is \"ecdsa-sha2-nistp256\".\r\n", "correct_text": "                                    vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n|  For example, the method name for the SSH ECC public key algorithm\r\n|  using the nistp256 curve is \"ecdsa-sha2-nistp256\".\r\n   ^^^^^", "notes": "Rationale: The RFC text inadvertently mixes content appropriate for\r\nSection 6.2 with content in Section 6.3; the current text would cause\r\na contradiction with 6.3, as can be seen from the 2nd para in 6.3.", "submit_date": "2009-12-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1980", "doc-id": "RFC5537", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "(a)  Section 3.1, last paragraph:\r\n\r\n|        ... trace headers ...\r\n\r\n(b)  Section 3.4.4, second paragraph:\r\n\r\n|        ... a References header, ...\r\n\r\n(c)  Section 3.5, numbered processing steps:\r\n   \r\n    4.  [...]\r\n                                           ... in the Newsgroups\r\n|       header is valid.\r\n\r\n    [...]\r\n\r\n    6.  [...]\r\n                                                               [...]  It\r\n        MAY add other header fields not already provided by the poster,\r\n        but injecting agents are encouraged to use the Injection-Info\r\n|       header for such information and to minimize the addition of\r\n|       other headers.  [...]\r\n   \r\n|   7.  If the Newsgroups header contains one or more moderated groups\r\n        and the proto-article does not contain an Approved header field,\r\n        the injecting agent MUST either forward it to a moderator as\r\n        specified in Section 3.5.1 or, if that is not possible, reject\r\n        it.  This forwarding MUST be done after adding the Message-ID\r\n|       and Date headers if required, and before adding the Injection-\r\n|       Info and Injection-Date headers.\r\n         \r\n(d)  Section 3.6, first paragraph\r\n\r\n|          ... forgery of Path and Injection-Info headers, ...\r\n \r\n(e)  Section 5.2.1, first paragraph:\r\n\r\n   The newgroup control message requests that the specified group be\r\n   created or, if already existing, that its moderation status or\r\n|  description be changed.  The syntax of its Control header field is:\r\n         \r\n         control-command     =/ Newgroup-command\r\n         Newgroup-command    = \"newgroup\" Newgroup-arguments\r\n         [...]\r\n\r\n(f)  Section 5.2.2, first paragraph:\r\n\r\n   The rmgroup control message requests that the specified group be\r\n   removed from a news server's list of valid groups.  The syntax of its\r\n|  Control header field is:\r\n\r\ng)  Section 5.2.3, first paragraph:\r\n(\r\n                                                 [...]  The syntax of\r\n|  its Control header field is:\r\n\r\n(h)  Section 5.2.3, last paragraph:\r\n\r\n   The body of the message is an entity of type application/\r\n   news-checkgroups.  It SHOULD be declared as such with appropriate\r\n|  MIME headers, but news servers SHOULD interpret checkgroups messages\r\n|  that lack the appropriate MIME headers as if the body were of type\r\n   application/news-checkgroups for backward compatibility.\r\n\r\n(i)  Section 5.3, first paragraph:\r\n\r\n   The cancel control message requests that a target article be\r\n   withdrawn from circulation and access.  The syntax of its Control\r\n|  header field is:\r\n\r\n(j)  Section 5.5, second paragraph:\r\n\r\n   ihave and sendme control messages share similar syntax for their\r\n|  Control header fields and bodies:\r\n\r\n(k)  Appendix A, first bullet:\r\n\r\n                                              [...]  Folding of the\r\n|     Path header is permitted.\r\n", "correct_text": "(a)  Section 3.1, last paragraph:\r\n\r\n|       ... trace header fields ...\r\n\r\n(b)  Section 3.4.4, second paragraph:\r\n\r\n|        ... a References header field, ...\r\n\r\n(c)  Section 3.5, numbered processing steps:\r\n\r\n    4.  [...]\r\n                                           ... in the Newsgroups\r\n|       header field is valid.\r\n\r\n    [...]\r\n\r\n    6.  [...]\r\n                                                               [...]  It\r\n        MAY add other header fields not already provided by the poster,\r\n        but injecting agents are encouraged to use the Injection-Info\r\n|       header field for such information and to minimize the addition \r\n|       of other header fields.  [...]\r\n   \r\n|  7.   If the Newsgroups header field contains one or more moderated\r\n        groups and the proto-article does not contain an Approved header\r\n        field, the injecting agent MUST either forward it to a moderator\r\n        as specified in Section 3.5.1 or, if that is not possible,\r\n        reject it.  This forwarding MUST be done after adding the\r\n|       Message-ID and Date header fields if required, and before adding\r\n|       the Injection-Info and Injection-Date header fields.\r\n\r\n(d)  Section 3.6, first paragraph\r\n\r\n|          ... forgery of Path and Injection-Info header fields, ...\r\n\r\n(e)  Section 5.2.1, first paragraph:\r\n\r\n   The newgroup control message requests that the specified group be\r\n   created or, if already existing, that its moderation status or\r\n|  description be changed.  The syntax of its Control header field\r\n|  value is:\r\n         \r\n         control-command     =/ Newgroup-command\r\n         Newgroup-command    = \"newgroup\" Newgroup-arguments\r\n         [...]\r\n\r\n(f)  Section 5.2.2, first paragraph:\r\n\r\n   The rmgroup control message requests that the specified group be\r\n   removed from a news server's list of valid groups.  The syntax of its\r\n|  Control header field value is:\r\n\r\n(g)  Section 5.2.3, first paragraph:\r\n\r\n                                                 [...]  The syntax of\r\n|  its Control header field value is:\r\n\r\n(h)  Section 5.2.3, last paragraph:\r\n\r\n   The body of the message is an entity of type application/\r\n   news-checkgroups.  It SHOULD be declared as such with appropriate\r\n|  MIME header fields, but news servers SHOULD interpret checkgroups\r\n|  messages that lack the appropriate MIME header fields as if the body\r\n   were of type application/news-checkgroups for backward compatibility.\r\n\r\n(i)  Section 5.3, first paragraph:\r\n\r\n   The cancel control message requests that a target article be\r\n   withdrawn from circulation and access.  The syntax of its Control\r\n|  header field value is:\r\n\r\n(j)  Section 5.5, second paragraph:\r\n\r\n   ihave and sendme control messages share similar syntax for their\r\n|  Control header field values and message bodies:\r\n\r\n\r\n(k)  Appendix A, first bullet:\r\n\r\n                                              [...]  Folding of the\r\n|     Path header field is permitted.\r\n\r\n\r\nJulian Elie suggests the corrected text: \r\n\r\nCorrected Text\r\n--------------\r\n(a)  Section 3.1, last paragraph:\r\n\r\n|       ... trace header fields ...\r\n\r\n(b)  Section 3.4, fourth paragraph:\r\n\r\n|       ... an Injection-Date header field.\r\n\r\n(c)  Section 3.4.4, second paragraph:\r\n\r\n|       ... a References header field, ...\r\n\r\n(d)  Section 3.5, numbered processing steps:\r\n\r\n  4.  [...]\r\n                                         ... in the Newsgroups\r\n|       header field is valid.\r\n\r\n  [...]\r\n\r\n  6.  [...]\r\n                                                             [...]  It\r\n      MAY add other header fields not already provided by the poster,\r\n      but injecting agents are encouraged to use the Injection-Info\r\n|       header field for such information and to minimize the addition |       of other header fields.  [...]\r\n |  7.   If the Newsgroups header field contains one or more moderated\r\n      groups and the proto-article does not contain an Approved header\r\n      field, the injecting agent MUST either forward it to a moderator\r\n      as specified in Section 3.5.1 or, if that is not possible,\r\n      reject it.  This forwarding MUST be done after adding the\r\n|       Message-ID and Date header fields if required, and before adding\r\n|       the Injection-Info and Injection-Date header fields.\r\n\r\n(e)  Section 3.6, first paragraph\r\n\r\n|       ... forgery of Path and Injection-Info header fields, ...\r\n\r\n(f)  Section 5.2.1, first paragraph:\r\n\r\n The newgroup control message requests that the specified group be\r\n created or, if already existing, that its moderation status or\r\n|  description be changed.  The syntax of its Control header field\r\n|  body is:\r\n               control-command     =/ Newgroup-command\r\n       Newgroup-command    = \"newgroup\" Newgroup-arguments\r\n       [...]\r\n\r\n(g)  Section 5.2.2, first paragraph:\r\n\r\n The rmgroup control message requests that the specified group be\r\n removed from a news server's list of valid groups.  The syntax of its\r\n|  Control header field body is:\r\n\r\n(h)  Section 5.2.3, first paragraph:\r\n\r\n                                               [...]  The syntax of\r\n|  its Control header field value is:\r\n\r\n(i)  Section 5.2.3, last paragraph:\r\n\r\n The body of the message is an entity of type application/\r\n news-checkgroups.  It SHOULD be declared as such with appropriate\r\n|  MIME header fields, but news servers SHOULD interpret checkgroups\r\n|  messages that lack the appropriate MIME header fields as if the body\r\n were of type application/news-checkgroups for backward compatibility.\r\n\r\n(j)  Section 5.3, first paragraph:\r\n\r\n The cancel control message requests that a target article be\r\n withdrawn from circulation and access.  The syntax of its Control\r\n|  header field body is:\r\n\r\n(k)  Section 5.5, second paragraph:\r\n\r\n ihave and sendme control messages share similar syntax for their\r\n|  Control header field bodies and message bodies:\r\n\r\n(l)  Appendix A, first bullet:\r\n\r\n                                            [...]  Folding of the\r\n|     Path header field is permitted.\r\n\r\n", "notes": "Rationale:\r\n  Contrary to its companion document, RFC 5536, this RFC mixes precise\r\n  IETF terminology for protocol elements and colloquial abuse of it in\r\n  various places.  For clarity and consistency, it should also\r\n  inequivocally make use of the standard terminology; the fields\r\n  of the \"header\" that a protocol layer or sub-layer adds to its\r\n  payload are \"header fields\", not \"headers\" in itself.\r\n  Similarly, denoting as \"header field\" a \"header field value\" is\r\n  confusing -- items (e), (f), (g), (i), and (j) above.", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2290", "doc-id": "RFC3971", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "CGA Parameters\r\n\r\n  A variable-length field containing the CGA Parameters data\r\n  structure described in Section 4 of [11].\r\n                         ^^^^^^^^^", "correct_text": "CGA Parameters\r\n\r\n  A variable-length field containing the CGA Parameters data\r\n  structure described in Section 3 of [11].\r\n                         ^^^^^^^^^", "notes": "The current text points to Section 4 of RFC 3972, which is \"CGA Generation\". I believe it should point to Section 3 that is \"CGA Parameters and Hash Values\".", "submit_date": "2010-05-25", "submitter_name": "Tony Cheneau", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5463", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.3", "orig_text": "RDATA           a variable length string of octets that describes the\r\n                resource.  The format of this information varies\r\n                according to the TYPE and CLASS of the resource record.\r\n                For example, the if the TYPE is A and the CLASS is IN,\r\n                the RDATA field is a 4 octet ARPA Internet address.", "correct_text": "RDATA           a variable length string of octets that describes the\r\n                resource.  The format of this information varies\r\n                according to the TYPE and CLASS of the resource record.\r\n                For example, if the TYPE is A and the CLASS is IN,\r\n                the RDATA field is a 4 octet ARPA Internet address.", "notes": "The original text says \"For example, the if the ...\", where it should say, \"For example, if the ...\".", "submit_date": "2018-08-14", "submitter_name": "Shulhan", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2205", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1.", "orig_text": "   The value \"m\" in the above formulas is derived from the session key\r\n   as follows.  First, the session key is prefixed with a one-octet\r\n   algorithm identifier that specifies the symmetric encryption\r\n   algorithm used to encrypt the following Symmetrically Encrypted Data\r\n   Packet.  Then a two-octet checksum is appended, which is equal to the\r\n   sum of the preceding session key octets, not including the algorithm\r\n   identifier, modulo 65536.  This value is then encoded as described in\r\n   PKCS#1 block encoding EME-PKCS1-v1_5 in Section 7.2.1 of [RFC3447] to\r\n   form the \"m\" value used in the formulas above.  See Section 13.1 of\r\n   this document for notes on OpenPGP's use of PKCS#1.", "correct_text": "?", "notes": "That is how to derive m from the session key and the algorithm\r\nidentifier.\r\nBut how to derive the session key and the algorithm identifier from m?\n --VERIFIER NOTES-- \nNot actionable. No actual erratum.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2206", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.", "orig_text": "A Public-Key Encrypted Session Key packet holds the session key used \r\nto encrypt a message.", "correct_text": "A Public-Key Encrypted Session Key (PKESK) packet holds the session \r\nkey used to encrypt a message.", "notes": "The acronym PKESK is not defined.\r\n\r\nTweaked the suggestion to reword the 1st sentence in 5.1 to define it.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1964", "doc-id": "RFC5677", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7, Fig. 9", "orig_text": "|                MN                                         MoS\r\n |===================================|    |======| |===================|\r\n + ---------+                                                +---------+\r\n | MIH USER |       +------+  +------+    +------+  +------+ | MIH USER|\r\n | +------+ |       | TCP  |  |DHCP  |    |DHCP  |  | TCP  | | +------+|\r\n | | MIHF | |       |Client|  |Client|    |Server|  |Server| | | MIHF ||\r\n +----------+       +------+  +------+    +------+  +------++----------+\r\n     |                 |         |           |         |          |\r\n ...", "correct_text": "|                MN                                   Mobility Server\r\n |===================================|    |======| |===================|\r\n + ---------+                                                +---------+\r\n | MIH USER |       +------+  +------+    +------+  +------+ | MIH USER|\r\n | +------+ |       | TCP  |  |DHCP  |    |DHCP  |  | TCP  | | +------+|\r\n | | MIHF | |       |Client|  |Client|    |Server|  |Server| | | MIHF ||\r\n +----------+       +------+  +------+    +------+  +------++----------+\r\n     |                 |         |           |         |          |\r\n ...", "notes": "Rationale:\r\n  The published RFC uses improved terminology, distinguishing\r\n  between \"MoS\" (IEEE 802.21 Mobility Services) and \"Mobility \r\n  Servers\" providing these services -- cf. Section 2 of the RFC.\r\n  Unfortunately, this change has been missed for the heading of\r\n  Figure 9, on top of page 20.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1965", "doc-id": "RFC5677", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3,2nd para", "orig_text": "                             [...]  The default maximum number of\r\n   retransmissions is set to 2 and the initial retransmission timer\r\n|  (TMO) is set to 3s when RTT is not known.  The maximum TMO is set to\r\n   30s.\r\n", "correct_text": "                             [...]  The default maximum number of\r\n   retransmissions is set to 2 and the initial retransmission timer\r\n|  (TMO) is set to 3s when the RTT is not known.  The maximum TMO is set\r\n   to 30s.\r\n", "notes": "Rationale:\r\n  Missing article; adjustment to use of language in preceding text.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1966", "doc-id": "RFC5677", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "|             [...]  Since IEEE 802.21 base specification does not\r\n   provide MIH protocol level security, it is assumed that either lower\r\n   layer security (e.g., link layer) or overall system-specific (e.g.,\r\n   proprietary) security solutions are available.  [...]", "correct_text": "|             [...]  Since the IEEE 802.21 base specification does not\r\n   provide MIH protocol level security, it is assumed that either lower\r\n   layer security (e.g., link layer) or overall system-specific (e.g.,\r\n   proprietary) security solutions are available.  [...]", "notes": "Rationale:  Missing article.  (Keep for update!)", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2293", "doc-id": "RFC5881", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "Ports 3784 and 3875 were assigned by IANA for use with the BFD \r\nControl and BFD Echo protocols, respectively.", "correct_text": "Ports 3784 and 3785 were assigned by IANA for use with the BFD \r\nControl and BFD Echo protocols, respectively.", "notes": "That is:\r\ns/3875/3785/\r\n\r\nA typo in the hastily-added IANA Considerations section.  The normative text is correct, so this error is less onerous than it could have been, happily.", "submit_date": "2010-06-02", "submitter_name": "Dave Katz", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1981", "doc-id": "RFC5537", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "... first paragraph:\r\n\r\n   If a relaying or serving agent receives an article from an injecting\r\n|  or serving agent that is part of the same news server, it MAY leave\r\n      ^^^^^^^\r\n   the Path header field of the article unchanged.  [...]", "correct_text": "   If a relaying or serving agent receives an article from an injecting\r\n|  or relaying agent that is part of the same news server, it MAY leave\r\n      ^^^^^^^^\r\n   the Path header field of the article unchanged.  [...]", "notes": "Rationale:\r\n  Cf. the definition of agent roles presented in Section 1 and the\r\n  first paragraph of Section 3:\r\n  Serving agents only forward to reading agents, and in that step,\r\n  the articles are not modified in any way.", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1982", "doc-id": "RFC5537", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.2, NOTE", "orig_text": "       ... unintended repeat injection into the same network, ...\r\n                           ^", "correct_text": "       ... unintended repeated injection into the same network, ...\r\n                           ^^^", "notes": "", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1991", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.2, pg.43", "orig_text": "...  first paragraph:\r\n\r\n                                                 [...].  The channel\r\n|  between the Exporting Process to Collecting Process using IPFIX is\r\n   signed by the Exporting Process key and protected via TLS and DTLS,\r\n   while the File is signed by the File Writer key and protected via\r\n   CMS.  [...]", "correct_text": "                                                 [...].  The channel\r\n|  from the Exporting Process to the Collecting Process using IPFIX is\r\n   signed by the Exporting Process key and protected via TLS and DTLS,\r\n   while the File is signed by the File Writer key and protected via\r\n   CMS.  [...]", "notes": "Rationale:\r\n  \"channel between xxx to yyy\" does not make sense. Either\r\n  \"channel _from_ xxx to yyy\"  or  \"channel between xxx _and_ yyy\"\r\n  should be written.\r\n  The Corrected Text above suggests the first alternative (based\r\n  on the essential unidirectionality of the information flow) and\r\n  balances the use of articles.", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1992", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Section 15.1 contains the outdated Normative Reference:\r\n\r\n|  [RFC3852]    Housley, R., \"Cryptographic Message Syntax (CMS)\",\r\n|               RFC 3852, July 2004.\r\n\r\n\"[RFC3852]\" is used in Sections 5.6, 9.1, 9.1.1, and 12.", "correct_text": "At the time of publication of RFC 5655, the replacement RFC already\r\nhad been published six weeks ago and should have been referred to,\r\ndue to the essential corrections it incorporates:\r\n\r\n|  [RFC5652]    Housley, R., \"Cryptographic Message Syntax (CMS)\",\r\n|               RFC 5652, September 2009.\r\n", "notes": "", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2207", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.", "orig_text": "   Note that if an implementation is creating an encrypted and signed\r\n   message that is encrypted to a V3 key, it is reasonable to create a\r\n   V3 signature.", "correct_text": "   Note that if an implementation is creating an encrypted and signed\r\n   message that is encrypted with a V3 key, it is reasonable to create a\r\n   V3 signature.", "notes": "Encrypted with a key to some cipher.\n --VERIFIER NOTES-- \nI think we can accept that encrypting implicitly means there\u2019s a cipher involved.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1967", "doc-id": "RFC5677", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "a)  1st para:\r\n  \r\n       [...]  In such cases, the link between the DHCP client and Layer\r\n   2 termination point may be protected, but the DHCP message source and\r\n   its messages cannot be authenticated or the integrity of the latter\r\n|  checked unless there exits a security binding between link layer and\r\n   DHCP layer.\r\n\r\nb) 2nd para:\r\n                    v\r\n|  In the case where DNS is used for discovering MoS, fake DNS requests\r\n   and responses may cause denial of service (DoS) and the inability of\r\n   the MN to perform a proper handover, respectively.  Where networks\r\n   are exposed to such DoS, it is RECOMMENDED that DNS service providers\r\n   use the Domain Name System Security Extensions (DNSSEC) as described\r\n   in [RFC4033].  Readers may also refer to [RFC4641] to consider the\r\n   aspects of DNSSEC operational practices.\r\n", "correct_text": "a)  1st para:\r\n  \r\n       [...]  In such cases, the link between the DHCP client and Layer\r\n   2 termination point may be protected, but the DHCP message source and\r\n   its messages cannot be authenticated or the integrity of the latter\r\n|  checked unless there exists a security binding between link layer and\r\n   DHCP layer.\r\n\r\nb) 2nd para:\r\n                    vvvvv\r\n|  In the case where the DNS is used for discovering MoS, fake DNS\r\n   requests and responses may cause denial of service (DoS) and the\r\n   inability of the MN to perform a proper handover, respectively.\r\n   Where networks are exposed to such DoS, it is RECOMMENDED that DNS\r\n   service providers use the Domain Name System Security Extensions\r\n   (DNSSEC) as described in [RFC4033].  Readers may also refer to\r\n   [RFC4641] to consider the aspects of DNSSEC operational practices.\r\n\r\n", "notes": "Rationale:\r\n  a) typo\r\n  b) missing article", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1968", "doc-id": "RFC5670", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.2", "orig_text": "   A token bucket with the following parameters:\r\n\r\n      *  PCN-excess-rate: token rate of token bucket (bits/second)\r\n\r\n|     *  BS_etm: depth of TB in token bucket (bits)\r\n\r\n      *  lastUpdate: time the token bucket was last updated (seconds)\r\n\r\n      *  F_etm: amount of tokens in token bucket (bits)", "correct_text": "   A token bucket with the following parameters:\r\n\r\n      *  PCN-excess-rate: token rate of token bucket (bits/second)\r\n\r\n|     *  BS_etm: depth of token bucket (bits)\r\n\r\n      *  lastUpdate: time the token bucket was last updated (seconds)\r\n\r\n      *  F_etm: amount of tokens in token bucket (bits)", "notes": "Rationale: \"TB\" does not appear anywhere else in the document.\r\n  The RFC text looks like a shift in terminology has not been\r\n  performed consistently.  Dropping \"TB in\" seems appropriate\r\n  and consistent in style with the surrounding text.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1969", "doc-id": "RFC5696", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "(see Notes)", "correct_text": "", "notes": "Keep for Update: There's an unexpected/misplaced page break\r\nafter the second bullet in Appendix A.2, on page 13.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1970", "doc-id": "RFC5695", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.2", "orig_text": "                                                              vv\r\n|  It is RECOMMENDED that all of the ports (A1, DA1, DB1, and A2) on the\r\n   DUT and test tool support a dynamic Interior Gateway Protocol (IGP)\r\n   for routing such as IS-IS, OSPF, RIP, etc.  [...]", "correct_text": "                                                              vvvvvvvv\r\n|  It is RECOMMENDED that all of the ports (A1, DA1, DB1, and B1, etc.)\r\n   on the DUT and test tool support a dynamic Interior Gateway Protocol\r\n   (IGP) for routing such as IS-IS, OSPF, RIP, etc.  [...]", "notes": "Rationale:\r\n  The text (on top of page 6 of the RFC) should refer to all four\r\n  columns in Figure 1 (on page 4); \"A2\" as the name of a second entity\r\n  in the first coulumn seems to be redundant; therefore,  s/A2/B1/ ;\r\n  additionally, \", etc.\" suggested as an indication of the other rows.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1971", "doc-id": "RFC5695", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.4.1", "orig_text": "(last paragraph:)\r\n\r\n   MPLS label values used in any test case MUST be outside the reserved\r\n|  label value (0-15) unless stated otherwise.\r\n", "correct_text": "   MPLS label values used in any test case MUST be outside the reserved\r\n|  label value range (0-15) unless stated otherwise.\r\n              ^^^^^^^", "notes": "Rationale:\r\n  \"(0-15)\" is not \"the reserved label value\".\r\n  To avoid confusion, more precise language should be used.\r\n  Inserting \"range\" seems to be the smallest sensical change.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1972", "doc-id": "RFC5695", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5 (Table)", "orig_text": "      [...]\r\n\r\n      Port Media                       GigE (Gigabit Ethernet),\r\n                                       POS, ATM, etc.\r\n\r\n|     Port Speed                       1 gbps, 100 Mbps, etc.\r\n                                         ^\r\n      Interface Encapsulation          Ethernet, Ethernet\r\n                                       VLAN, PPP, HDLC, etc.\r\n\r\n      [...]", "correct_text": "      [...]\r\n\r\n      Port Media                       GigE (Gigabit Ethernet),\r\n                                       POS, ATM, etc.\r\n\r\n|     Port Speed                       1 Gbps, 100 Mbps, etc.\r\n                                         ^\r\n      Interface Encapsulation          Ethernet, Ethernet\r\n                                       VLAN, PPP, HDLC, etc.\r\n\r\n      [...]", "notes": "Rationale:\r\n  Case matters for powers-of-ten indicating prefix characters in\r\n  SI unit designators; \"G\" = Giga (= 10^9); \"g\" is still undefined.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2294", "doc-id": "RFC791", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Page 21", "orig_text": "If it is, it inserts its\r\nown internet address as known in the environment into which this\r\ndatagram is being forwarded into the recorded route begining at\r\nthe octet indicated by the pointer, and increments the pointer\r\nby four.", "correct_text": "If it is, it inserts its\r\nown internet address as known in the environment into which this\r\ndatagram is being forwarded into the recorded route beginning at\r\nthe octet indicated by the pointer, and increments the pointer\r\nby four.", "notes": "s/begining/beginning/g", "submit_date": "2010-06-03", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7757", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.4.5", "orig_text": "Forwarding address\r\nData traffic for the advertised destination will be forwarded to this address. If the Forwarding address is set to 0.0.0.0, data traffic will be forwarded instead to the LSA's originator (i.e., the responsible AS boundary router).", "correct_text": "Forwarding address\r\nData traffic for the advertised destination will be forwarded to this address. If the Forwarding address is set to a Router ID address value other than 0.0.0.0, data traffic will be forwarded to that Router instead to the LSA's originator (i.e., the responsible AS boundary router).", "notes": "Data traffic destined to the network indicated by Link State ID will be routed to that Router ID mentioned in forwarding address. If forwarding address is set to 0.0.0.0, it will be forwarded to LSA Originator itself.\n --VERIFIER NOTES-- \n   See https://mailarchive.ietf.org/arch/msg/lsr/_Xa4tym_roMmxFioFbrF3WRkKcM/", "submit_date": "2024-01-11", "submitter_name": "Lokesh Venkata Kumar Chakka", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-11 17:00:19"}, {"errata_id": "1973", "doc-id": "RFC5559", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1, Fig. 4", "orig_text": "|                                      +---------+   Result\r\n|                                   +->|Threshold|-------+\r\n|                                   |  |  Meter  |       |\r\n|                                   |  +---------+       V\r\n         +----------+   +- - - - -+  |                +------+\r\n         |   BA     |   |         |  |                |      |    Marked\r\nPacket =>|Classifier|==>| Dropper |==?===============>|Marker|==> Packet\r\nStream   |          |   |         |  |                |      |    Stream\r\n         +----------+   +- - - - -+  |                +------+\r\n|                                   |  +---------+       ^\r\n|                                   |  | Excess  |       |\r\n|                                   +->| Traffic |-------+\r\n|                                      |  Meter  |   Result\r\n|                                      +---------+", "correct_text": "|                                       +---------+   Result\r\n|                                    +->|Threshold|-------+\r\n|                                    |  |  Meter  |       |\r\n|                                    |  +---------+       V\r\n         +----------+   +- - - - -+  |                +------+\r\n         |   BA     |   |         |  |                |      |    Marked\r\nPacket =>|Classifier|==>| Dropper |==?===============>|Marker|==> Packet\r\nStream   |          |   |         |  |                |      |    Stream\r\n         +----------+   +- - - - -+  |                +------+\r\n|                                    |  +---------+       ^\r\n|                                    |  | Excess  |       |\r\n|                                    +->| Traffic |-------+\r\n|                                       |  Meter  |   Result\r\n|                                       +---------+", "notes": "Rationale: Misalignment in Figure, breaking arrow lines.\r\n(Keep for update!)", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1974", "doc-id": "RFC5559", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3, pg.36", "orig_text": "   4.  PCN-flows may have different precedence, but the applicability of\r\n|      the PCN mechanisms for emergency use (911, GETS (Government\r\n|      Telecommunications Service), WPS (Wireless Priority Service),\r\n       MLPP (Multilevel Precedence and Premption), etc.) is out of\r\n       scope.", "correct_text": "   4.  PCN-flows may have different precedence, but the applicability of\r\n       the PCN mechanisms for emergency use (911, GETS (Government\r\n|      Emergency Telecommunications Service), WPS (Wireless Priority\r\n       Service), MLPP (Multilevel Precedence and Premption), etc.) is\r\n       out of scope.", "notes": "Rationale:\r\n  Incomplete expansion of acronym \"GETS\":\r\n  important word \"Emergency\" missing.", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1975", "doc-id": "RFC5559", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2, pg.45", "orig_text": "   [Hancock02]      Hancock, R. and E. Hepworth, \"Slide 14 of 'NSIS: An\r\n|                   Outline Framework for QoS Signalling'\", May 2002, <h\r\n|                   ttp://www-nrc.nokia.com/sua/nsis/interim/\r\n                    nsis-framework-outline.ppt>.", "correct_text": "   [Hancock02]      Hancock, R. and E. Hepworth, \"Slide 14 of 'NSIS: An\r\n|                   Outline Framework for QoS Signalling'\", May 2002,\r\n|                   <http://www-nrc.nokia.com/sua/nsis/interim/\r\n                    nsis-framework-outline.ppt>.", "notes": "Rationale:\r\n  Unpleasant and unexpected line folding -- tool (xml2rfc) issue?", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1976", "doc-id": "RFC5559", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2, pg.46", "orig_text": "   [Kumar01]        Kumar, A., Rastogi, R., Silberschatz, A., and B.\r\n                    Yener, \"Algorithms for Provisioning Virtual Private\r\n                    Networks in the Hose Model\", Proceedings ACM SIGCOMM\r\n|                   (ITC16), , 2001.", "correct_text": "   [Kumar01]        Kumar, A., Rastogi, R., Silberschatz, A., and B.\r\n                    Yener, \"Algorithms for Provisioning Virtual Private\r\n                    Networks in the Hose Model\", Proceedings ACM SIGCOMM\r\n|                   (ITC16), August 2001.", "notes": "", "submit_date": "2009-12-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1977", "doc-id": "RFC3471", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "Another basic difference between traditional and non-PSC types of\r\ngeneralized MPLS LSPs, is that bandwidth allocation for an LSP can be\r\nperformed only in discrete units, see Section 3.1.3. ", "correct_text": "Another basic difference between traditional and non-PSC types of\r\ngeneralized MPLS LSPs, is that bandwidth allocation for an LSP can be\r\nperformed only in discrete units, see Section 3.1.2. ", "notes": "Fix to point to correct section number.", "submit_date": "2009-12-24", "submitter_name": "Zongpeng Du", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1978", "doc-id": "RFC5717", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "App. A, p.16", "orig_text": "    <!-- reply to <partial-lock> -->\r\n\r\n    <xs:complexType name=\"contentPartInPartialLockReplyType\">\r\n        <xs:annotation>\r\n            <xs:documentation>\r\n                The content of the reply to a successful\r\n                partial-lock request MUST conform to this complex type.\r\n            </xs:documentation>\r\n        </xs:annotation>\r\n        <xs:sequence>\r\n            <xs:element name=\"lock-id\" type=\"lock-id-type\">\r\n              <xs:annotation>\r\n                <xs:documentation>\r\n|                 Identifies the lock to be released.  Must be the value\r\n|                 received in the response to a partial-lock operation.\r\n                </xs:documentation>\r\n              </xs:annotation>\r\n            </xs:element>\r\n            [...]", "correct_text": "    <!-- reply to <partial-lock> -->\r\n\r\n    <xs:complexType name=\"contentPartInPartialLockReplyType\">\r\n        <xs:annotation>\r\n            <xs:documentation>\r\n                The content of the reply to a successful\r\n                partial-lock request MUST conform to this complex type.\r\n            </xs:documentation>\r\n        </xs:annotation>\r\n        <xs:sequence>\r\n            <xs:element name=\"lock-id\" type=\"lock-id-type\">\r\n              <xs:annotation>\r\n                <xs:documentation>\r\n|                 Identifies the lock, if granted.  This lock-id must\r\n|                 be used in the partial-unlock operation.\r\n                </xs:documentation>\r\n              </xs:annotation>\r\n            </xs:element>\r\n            [...]", "notes": "Rationale:\r\n  The clause in the RFC apparently has been copied from page 15\r\n  (bottom part), where the partialUnLockType is getting defined,\r\n  without the necessary changes in semantics for the context of\r\n  the reply to a partial-lock operation.\r\n  The replacement text has been crafted in the spirit of the\r\n  corresponding description in the YANG module in Appendix B.", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1979", "doc-id": "RFC5536", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.7", "orig_text": "... in the 2nd paragraph:\r\n\r\n   However, software that predates this standard does not use this\r\n|  header, and therefore agents MUST accept articles without the\r\n   Injection-Date header field.\r\n", "correct_text": "   However, software that predates this standard does not use this\r\n|  header field, and therefore agents MUST accept articles without the\r\n   Injection-Date header field.\r\n", "notes": "Rationale:\r\n  The whole RFC is precise in its use of the IETF standard terminology\r\n  as explained in Section 2.1.  This phrase is an exception; here as\r\n  well \"header\" should be \"header field\".", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2300", "doc-id": "RFC2852", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   by-parameter = \"BY=\"by-value\r\n   by-value     = by-time\";\"by-mode[by-trace]\r\n", "correct_text": "   by-parameter = \"BY=\" by-value\r\n                       ^\r\n   by-value     = by-time \";\" by-mode [by-trace]\r\n                         ^   ^       ^", "notes": "This is not a valid ABNF. BAP (ABNF parser) complains:\r\n\r\n error: Concatenation of adjacent elements is not allowed (missing whitespace?)\r\n\r\nSo extra spaces need to be inserted.", "submit_date": "2010-06-04", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1983", "doc-id": "RFC5537", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "(a)  Section 3.10, first paragraph:\r\n\r\n   A gateway transforms an article into the native message format of\r\n   another medium, or translates the messages of another medium into\r\n   news articles, or transforms articles into proto-articles for\r\n   injection into a separate Netnews network.  Encapsulation of a news\r\n|  article into a message of MIME type application/news-transmission, or\r\n   the subsequent undoing of that encapsulation, is not gatewaying since\r\n   it involves no transformation of the article.\r\n\r\n\r\n(b)  Section 4 (page 29):\r\n\r\n|  The updated MIME media type definition of message/news is:\r\n\r\n|    MIME type name:           message\r\n\r\n|    MIME subtype name:        news\r\n \r\n     Required parameters:      ...\r\n\r\n\r\n(c)  Section 4.1 (bottom of page 30):\r\n\r\n|  The MIME media type definition of application/news-transmission is:\r\n\r\n|    MIME type name:           application\r\n\r\n|    MIME subtype name:        news-transmission\r\n\r\n     Required parameters:      ...\r\n\r\n\r\n(d)  Section 4.2 (bottom of page 31 plus top of page 32):\r\n\r\n|  The MIME media type definition of application/news-groupinfo is:\r\n\r\n|     MIME type name:           application\r\n\r\n|     MIME subtype name:        news-groupinfo\r\n\r\n      Required parameters:      none\r\n\r\n      Optional parameters:      charset, which MUST be a charset\r\n|                               registered for use with MIME text types.\r\n                                It has the same syntax as the parameter\r\n                                defined for text/plain [RFC2046].  [...]\r\n\r\n\r\n(e)   Section 4.3 (page 33):\r\n\r\n|  The MIME media type definition of application/news-checkgroups is:\r\n\r\n|     MIME type name:           application\r\n\r\n|     MIME subtype name:        news-checkgroups\r\n\r\n      Required parameters:      none\r\n\r\n      Optional parameters:      charset, which MUST be a charset\r\n|                               registered for use with MIME text types.\r\n                                It has the same syntax as the parameter\r\n                                defined for text/plain [RFC2046].\r\n", "correct_text": "(a)  Section 3.10, first paragraph:\r\n\r\n   A gateway transforms an article into the native message format of\r\n   another medium, or translates the messages of another medium into\r\n   news articles, or transforms articles into proto-articles for\r\n   injection into a separate Netnews network.  Encapsulation of a news\r\n|  article into a message of media type application/news-transmission,\r\n   or the subsequent undoing of that encapsulation, is not gatewaying\r\n   since it involves no transformation of the article.\r\n\r\n\r\n(b)  Section 4 (page 29):\r\n\r\n|  The updated media type definition of message/news is:\r\n\r\n|     Type name:                message\r\n\r\n|     Subtype name:             news\r\n \r\n      Required parameters:      ...\r\n\r\n\r\n(c)  Section 4.1 (bottom of page 30):\r\n\r\n|  The media type definition of application/news-transmission is:\r\n\r\n|     Type name:                application\r\n\r\n|     Subtype name:             news-transmission\r\n\r\n      Required parameters:      ...\r\n\r\n\r\n(d)  Section 4.2 (bottom of page 31 plus top of page 32):\r\n\r\n|  The media type definition of application/news-groupinfo is:\r\n\r\n|     Type name:                application\r\n\r\n|     Subtype name:             news-groupinfo\r\n\r\n      Required parameters:      none\r\n\r\n      Optional parameters:      charset, which MUST be a charset\r\n|                               registered for use with 'text' media\r\n                                types.\r\n                                It has the same syntax as the parameter\r\n                                defined for text/plain [RFC2046].  [...]\r\n\r\n\r\n(e)   Section 4.3 (page 33):\r\n\r\n|  The media type definition of application/news-checkgroups is:\r\n\r\n|     Type name:                application\r\n\r\n|     Subtype name:             news-checkgroups\r\n\r\n      Required parameters:      none\r\n\r\n      Optional parameters:      charset, which MUST be a charset\r\n|                               registered for use with 'text' media\r\n                                types.\r\n                                It has the same syntax as the parameter\r\n                                defined for text/plain [RFC2046].\r\n\r\n", "notes": "Rationale:\r\n  RFC 5537 does not follow the IETF standard terminology reinforced\r\n  by RFC 4288 and does not properly use the media type registration\r\n  template from Section 10 of RFC 4288.\r\n  RFC 4288 clarifies that IETF media types (and subtypes) have\r\n  outgrown the Internet Email MIME environment and now are used\r\n  in non-email environments as well; for instance in the context\r\n  of Netnews (this RFC!).  Therefore, all mention of \"MIME\" in the\r\n  context of Internet media types must be avoided.  See Sections 1\r\n  through 3 of RFC 4288 for more rationale and Section 10 there for\r\n  the registration template to be used since RFC 4288, in 2005.\r\n\r\nEditorial Note (keep for update):\r\n  The structure of Section 4 would perhaps more reasonably have been\r\n  split into a single-paragraph Section 4 and packing the remainder\r\n  of 4. into a new subsection 4.1, \"Obsolescence of message/news\",\r\n  with the remaining subsection numbers 4.* bumped accordingly.", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1984", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.8, pg.13", "orig_text": "   Certain use cases for archival flow storage require the storage of\r\n   collection infrastructure details alongside the data itself.  These\r\n   details include information about how and when data was received, and\r\n   where it was received from.  They are useful for auditing as well as\r\n|  for the replaying received data for testing purposes.\r\n\r\n", "correct_text": "   Certain use cases for archival flow storage require the storage of\r\n   collection infrastructure details alongside the data itself.  These\r\n   details include information about how and when data was received, and\r\n   where it was received from.  They are useful for auditing as well as\r\n|  for replaying received data for testing purposes.\r\n\r\n", "notes": "Alternative for last line:\r\n\r\n|  for the replay of received data for testing purposes.\r\n\r\n\r\nAdditional editorial remark (keep for update!):  \r\n  In Section 1.1, there's an unexpected blank line inserted into\r\n  the first paragraph on page 5.", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1985", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1, pg.16", "orig_text": "... third bullet, at the bottom of page 16:\r\n\r\n   o  resolve any conflict between a resent definition and a previous\r\n      definition by assuming that the new Template replaces the old, as\r\n|     consistent with Template expiration and ID reuse when using UDP at\r\n      the IPFIX transport protocol; and\r\n", "correct_text": "   o  resolve any conflict between a resent definition and a previous\r\n      definition by assuming that the new Template replaces the old, as\r\n|     consistent with Template expiration and ID reuse when using UDP as\r\n      the IPFIX transport protocol; and\r\n", "notes": "Rationale: typo;  s/at/as/ .", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1986", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1.4, pg.26", "orig_text": "... first paragraph:\r\n\r\n                                          [...].  This Options Template\r\n|  also allows the storage of the export session metadata provided the\r\n   Export Session Details Options Template, for storing information from\r\n   multiple Transport Sessions in the same IPFIX File.\r\n", "correct_text": "                                          [...].  This Options Template\r\n|  also allows the storage of the export session metadata provided by\r\n   the Export Session Details Options Template, for storing information\r\n   from multiple Transport Sessions in the same IPFIX File.\r\n", "notes": "Rationale: missing word, \"by\".", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1987", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9, 1st para", "orig_text": "   In order to ensure the integrity of IPFIX Files and the identity of\r\n   IPFIX File Writers, File Writers and File Readers SHOULD provide for\r\n   an interoperable and easily implemented method for signing IPFIX\r\n|  Files, and verifying those signatures.  This section specifies method\r\n|  via CMS detached signatures.\r\n", "correct_text": "   In order to ensure the integrity of IPFIX Files and the identity of\r\n   IPFIX File Writers, File Writers and File Readers SHOULD provide for\r\n   an interoperable and easily implemented method for signing IPFIX\r\n|  Files, and verifying those signatures.  This section specifies one\r\n|  such method via CMS detached signatures.\r\n", "notes": "Rationale: missing word(s); suggest inserting \"one such\".", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1988", "doc-id": "RFC5655", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1.3, pg.39", "orig_text": "   signedAttrs:  an optional set of attributes that are signed along\r\n      with the content.\r\n\r\n|  digestAlgorithm:  identifies the digital signature algorithm and\r\n      associated parameters used to generate the signature.\r\n\r\n   signature:  the digital signature of the associated file.\r\n\r\n   unsignedAttrs:  an optional set of attributes that are not signed.\r\n", "correct_text": "   signedAttrs:  an optional set of attributes that are signed along\r\n      with the content.\r\n\r\n|  signatureAlgorithm:  identifies the digital signature algorithm and\r\n      associated parameters used to generate the signature.\r\n\r\n   signature:  the digital signature of the associated file.\r\n\r\n   unsignedAttrs:  an optional set of attributes that are not signed.\r\n", "notes": "Rationale: \r\nSame SEQUENCE element name listed twice, for two different explanations.\r\n\r\nFurther Note (keep for update!):\r\n  In Section 9.1, in the ASN.1 on page 37, for a better approximation\r\n  to ASN.1, all pairs of curly braces, \"{\" ... \"}\", should better be\r\n  preceded by the keyword \"SEQUENCE\".", "submit_date": "2009-12-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2208", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.1.", "orig_text": "   This signature is a statement by a signing subkey, indicating that\r\n   it is owned by the primary key and subkey.", "correct_text": "   This signature is a statement by a signing subkey, indicating that\r\n   it is owned by the primary key.", "notes": "The subkey does not own itself.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2209", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.2.", "orig_text": "     - One-octet length of following hashed material.  MUST be 5.\r\n\r\n         - One-octet signature type.\r\n\r\n         - Four-octet creation time.", "correct_text": "     - Six-octet with the following three items.\r\n\r\n         - One-octet length of the remaining two items which are\r\n           included in the hash.  MUST be 5.\r\n\r\n         - One-octet signature type.\r\n\r\n         - Four-octet creation time.", "notes": "It is not the lenght of hashed material, but it is the length of the\r\nnext two items, which are included in the hash. And these three items\r\nbelong together and have six-octet length.\n --VERIFIER NOTES-- \nErratum is incorrect.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1993", "doc-id": "RFC5537", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1.1", "orig_text": "  A newgroup control message requesting creation of the moderated\r\n  newsgroup example.admin.info.\r\n\r\n      From: \"example.* Administrator\" <admin@noc.example>\r\n      Newsgroups: example.admin.info\r\n      Date: 27 Feb 2002 12:50:22 +0200\r\n      Subject: cmsg newgroup example.admin.info moderated\r\n      Approved: admin@noc.example\r\n      Control: newgroup example.admin.info moderated\r\n      Message-ID: <ng-example.admin.info-20020227@noc.example>\r\n      MIME-Version: 1.0\r\n      Content-Type: multipart/mixed; boundary=\"nxtprt\"\r\n      Content-Transfer-Encoding: 8bit", "correct_text": "  A newgroup control message requesting creation of the moderated\r\n  newsgroup example.admin.info.\r\n\r\n|     Path: not-for-mail\r\n      From: \"example.* Administrator\" <admin@noc.example>\r\n      Newsgroups: example.admin.info\r\n      Date: 27 Feb 2002 12:50:22 +0200\r\n      Subject: cmsg newgroup example.admin.info moderated\r\n      Approved: admin@noc.example\r\n      Control: newgroup example.admin.info moderated\r\n      Message-ID: <ng-example.admin.info-20020227@noc.example>\r\n      MIME-Version: 1.0\r\n      Content-Type: multipart/mixed; boundary=\"nxtprt\"\r\n      Content-Transfer-Encoding: 8bit", "notes": "As the mandatory Path: header field is missing, this control message is only a proto-article.\r\n\r\nA control message is defined in Section 5 as an article which contains a Control: header field.  Therefore, a Path: header field should be added to the headers of this sample newgroup control article.", "submit_date": "2009-12-28", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1994", "doc-id": "RFC5552", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4", "orig_text": "session.connection.redirect:  This array is populated by information\r\n      contained in the History-Info [RFC4244] header in the initial\r\n      INVITE or is otherwise undefined.  Each entry (hi-entry) in the\r\n      History-Info header is mapped, in reverse order, into an element\r\n      of the session.connection.redirect array.", "correct_text": "session.connection.redirect:  This array is populated by information\r\n      contained in the History-Info [RFC4244] header in the initial\r\n      INVITE or is otherwise undefined.  Each entry (hi-entry) in the\r\n      History-Info header is mapped, in order appeared in the History-Info header, into an element of the session.connection.redirect array.", "notes": "The elements in the History info header is designed as a tree-like structure from the origination to the destination where each forwarding proxy appends to the end of the header and add an index. The original RFC text requires that the elements to be shown in VXML session.connection.redirect array in reverse order and this is incorrect based on the definition of session.connection.redirect. The first element in the array should be the original called number which maps to index=1 in history-info, and the last element should be the last redirected number which is the last element in history-info.\r\n\r\n--- From reviewer Dale Worley ---\r\n\r\nThe definition of session.connection.redirect from the VXML 2.0\r\nspecification (http://www.w3.org/TR/2004/REC-voicexml20-20040316/) is:\r\n\r\n   session.connection.redirect\r\n\tThis variable is an array representing the connection redirection\r\n\tpaths. The first element is the original called number, the last\r\n\telement is the last redirected number. Each element of the array\r\n\tcontains a uri, pi (presentation information), si (screening\r\n\tinformation), and reason property. The reason property can be\r\n\teither \"unknown\", \"user busy\", \"no reply\", \"deflection during\r\n\talerting\", \"deflection immediate response\", \"mobile subscriber not\r\n\treachable\".\r\n\r\nAs such, copying the History-Info values into\r\nsession.connection.redirect in the same order is somewhat more\r\ncorrect, as the first History-Info value should be the original\r\nrequest-URI.  But History-Info may contain other values other than the\r\nones that are ancestral to the INVITE containing it, and assembling\r\nthe correct redirection sequence may require some additional\r\nprocessing.  Also, the definition of History-Info is being updated\r\n(draft-ietf-sipcore-rfc4244bis) to provide better recording of\r\nredirection sequences.  Documenting how to extract the redirection\r\nsequence in a way that would work in all cases is a significant piece\r\nof work.\r\n\r\nCurrently, the best straightforward specification is to map the\r\nelements in forward order:\r\n\r\nsession.connection.redirect:  This array is populated by information\r\n    contained in the History-Info [RFC4244] header in the initial\r\n    INVITE or is otherwise undefined.  Each entry (hi-entry) in the\r\n    History-Info header is mapped, in order, into an element of the\r\n    session.connection.redirect array.", "submit_date": "2010-01-04", "submitter_name": "Henry Lum", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1995", "doc-id": "RFC4644", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "This document assumes you familiarity with NNTP [NNTP].", "correct_text": "This document assumes familiarity with NNTP [NNTP].", "notes": "A simple typo.\r\nAlso note that earlier drafts on which this RFC is based used \"This document assumes you are familiar with NNTP [NNTP].\"", "submit_date": "2010-01-10", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1996", "doc-id": "RFC5724", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "a)  first bullet (near bottom of page 9):\r\n                                                              v\r\n|  o  Both must be either a <local-number> or a <global-number<, i.e.,\r\n      start with a \"+\".\r\n\r\nb)  last paragraph (page 10):\r\n\r\n   Since \"sms\" URIs can contain multiple <telephone-subscriber>s as well\r\n|  as <sms-fields>, in addition to adopting the rules defined for\r\n   comparing <telephone-subscriber>s as defined by [RFC3966], two \"sms\"\r\n   URIs are only equivalent if their <sms-fields> are identical, and if\r\n   all <telephone-subscriber>s, compared pairwise as a set (i.e.,\r\n   without taking sequence into consideration), are equivalent.\r\n\r\n\r\n", "correct_text": "a)\r\n                                                              v\r\n|  o  Both must be either a <local-number> or a <global-number>, i.e.,\r\n      start with a \"+\".\r\n\r\nb)\r\n\r\n   Since \"sms\" URIs can contain multiple <telephone-subscriber>s as well\r\n|  as <sms-field>s, in addition to adopting the rules defined for\r\n   comparing <telephone-subscriber>s as defined by [RFC3966], two \"sms\"\r\n   URIs are only equivalent if their <sms-fields> are identical, and if\r\n   all <telephone-subscriber>s, compared pairwise as a set (i.e.,\r\n   without taking sequence into consideration), are equivalent.\r\n", "notes": "Rationale:\r\na)  Distorting typo.\r\nb)  Although there is a rule '<sms-fields>', the components of it\r\n    are meant here, in plural: <sms-field>s .", "submit_date": "2010-01-10", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lisa Dusseault", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2000", "doc-id": "RFC5651", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1, pg. 25", "orig_text": "[ second-to-last paragraph, mid-page 25 : ]\r\n\r\n   For the reasons mentioned above, this document does not pose any\r\n   restriction on packet sizes.  However, network efficiency\r\n   considerations recommend that the sender uses an as large as possible\r\n   packet payload size, but in such a way that packets do not exceed the\r\n|  network's maximum transmission unit size (MTU), or when fragmentation\r\n   coupled with packet loss might introduce severe inefficiency in the\r\n   transmission.\r\n", "correct_text": "   For the reasons mentioned above, this document does not pose any\r\n   restriction on packet sizes.  However, network efficiency\r\n   considerations recommend that the sender uses an as large as possible\r\n   packet payload size, but in such a way that packets do not exceed the\r\n|  network's maximum transmission unit size (MTU), because fragmentation\r\n   coupled with packet loss might introduce severe inefficiency in the\r\n   transmission.\r\n", "notes": "Rationale: \"or when\" does not make proper sense here; \"because\" does.", "submit_date": "2010-01-10", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4417", "doc-id": "RFC6767", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "g9982BasicGroup OBJECT-GROUP\r\n     OBJECTS {\r\n       g9982PortCapTcTypesSupported,\r\n       g9982PortCapBacpSupported,\r\n       g9982PortConfTcAdminType,\r\n       g9982PortStatTcOperType,\r\n       g9982PortStatRxErrors,\r\n       g9982PortStatRxSmallFragments,\r\n       g9982PortStatRxLargeFragments,\r\n       g9982PortStatRxBadFragments,\r\n       g9982PortStatRxLostFragments,\r\n       g9982PortStatRxLostStarts,\r\n       g9982PortStatRxLostEnds,\r\n       g9982PortStatRxOverflows,\r\n|      g9982BceStatTcInCodingErrors,\r\n|      g9982BceStatTcInCrcErrors\r\n     }\r\n     STATUS      current", "correct_text": "g9982BasicGroup OBJECT-GROUP\r\n     OBJECTS {\r\n       g9982PortCapTcTypesSupported,\r\n       g9982PortCapBacpSupported,\r\n       g9982PortConfTcAdminType,\r\n       g9982PortStatTcOperType,\r\n       g9982PortStatRxErrors,\r\n       g9982PortStatRxSmallFragments,\r\n       g9982PortStatRxLargeFragments,\r\n       g9982PortStatRxBadFragments,\r\n       g9982PortStatRxLostFragments,\r\n       g9982PortStatRxLostStarts,\r\n       g9982PortStatRxLostEnds,\r\n       g9982PortStatRxOverflows\r\n     }\r\n     STATUS      current", "notes": "\"g9982BceStatTcInCodingErrors,g9982BceStatTcInCrcErrors\" should not appear in g9982BasicGroup when they already exist in g9982BceGroup.", "submit_date": "2015-07-17", "submitter_name": "Yixi Lu", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2544", "doc-id": "RFC5025", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.2.12", "orig_text": "   bare:  This value indicates that the <user-input> element is to be\r\n      retained.  However, any \"idle-threshold\" and \"since\" attributes\r\n      are to be removed.  This value is assigned the numeric value of\r\n      10.\r\n", "correct_text": "   bare:  This value indicates that the <user-input> element is to be\r\n      retained.  However, any \"idle-threshold\" and \"last-input\" attributes\r\n      are to be removed.  This value is assigned the numeric value of\r\n      10.\r\n", "notes": "<user-input> does not have a \"since\" attribute defined.", "submit_date": "2010-10-05", "submitter_name": "Tiberius Duluman", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1997", "doc-id": "RFC5688", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "a)   document title:\r\n\r\n     A Session Initiation Protocol (SIP) Media Feature Tag for MIME\r\n                          Application Subtypes\r\n\r\nb)   Abstract\r\n\r\n   The caller preferences specification for the Session Initiation\r\n   Protocol (SIP) allows a caller to express preferences that the call\r\n   be routed to a User Agent (UA) with particular capabilities.\r\n   Similarly, a specification exists to allow a UA to indicate its\r\n   capabilities in a registration.  Amongst those capabilities are the\r\n|  type of media streams the agent supports, described as top-level MIME\r\n|  types.  The 'application' MIME type is used to describe a broad range\r\n   of stream types, and it provides insufficient granularity as a\r\n   capability.  This specification allows a UA to indicate which\r\n   application subtypes the agent supports.\r\n\r\nc)  Section 3, 1st para\r\n\r\n   The 'sip.app-subtype' media feature tag is of type token with a case-\r\n   insensitive equality relationship.  Its value can be any registered\r\n|  or private MIME application subtype compliant to the subtype-name\r\n   grammar defined in [RFC4288].  [...]\r\n\r\n[[ see also subsequent errata note covering another issue as well ! ]]\r\n\r\nd)  Section 3, 3rd para\r\n\r\n   It is important to note that this media feature tag is only\r\n   indicating the streaming media types that a user agent is capable of\r\n   supporting.  It says nothing about the functionality provided by the\r\n|  user agent itself or the MIME types that the agent can send or\r\n   receive in SIP messages or emails.  For example, let us assume that a\r\n   SIP user agent is capable of supporting a chess game.  The game is\r\n   played by each user sending chess moves as binary objects over UDP\r\n|  between a pair of user agents.  Those objects have a MIME type of\r\n   \"application/example\".  [...]\r\n\r\ne)  Section 3, 4th para\r\n\r\n   A consequence of this is that, as new streaming media type formats\r\n   are defined (such as game stream formats, whiteboard session formats,\r\n   and so on), they SHOULD be defined using the SDP application stream\r\n|  and utilize a MIME application subtype.\r\n\r\nf)  Section 6, 4th para\r\n\r\n   Summary of the media feature indicated by this tag:  This feature tag\r\n|     indicates the MIME application subtypes supported by the agent for\r\n      purposes of streaming media.", "correct_text": "a)\r\n        A Session Initiation Protocol (SIP) Media Feature Tag for\r\n                      'Application' Media Subtypes\r\n\r\nb)\r\n\r\n   The caller preferences specification for the Session Initiation\r\n   Protocol (SIP) allows a caller to express preferences that the call\r\n   be routed to a User Agent (UA) with particular capabilities.\r\n   Similarly, a specification exists to allow a UA to indicate its\r\n   capabilities in a registration.  Amongst those capabilities are the\r\n|  type of media streams the agent supports, described as top-level media\r\n|  types.  The 'application' media type is used to describe a broad range\r\n   of stream types, and it provides insufficient granularity as a\r\n   capability.  This specification allows a UA to indicate which\r\n   application subtypes the agent supports.\r\n\r\nc)\r\n\r\n   The 'sip.app-subtype' media feature tag is of type token with a case-\r\n   insensitive equality relationship.  Its value can be any registered\r\n|  or private 'application' media subtype compliant to the subtype-name\r\n   grammar defined in [RFC4288].  [...]\r\n\r\nd)\r\n   It is important to note that this media feature tag is only\r\n   indicating the streaming media types that a user agent is capable of\r\n   supporting.  It says nothing about the functionality provided by the\r\n|  user agent itself or the media types that the agent can send or\r\n   receive in SIP messages or emails.  For example, let us assume that a\r\n   SIP user agent is capable of supporting a chess game.  The game is\r\n   played by each user sending chess moves as binary objects over UDP\r\n|  between a pair of user agents.  Those objects have a media type of\r\n   \"application/example\".  [...]\r\n\r\ne)\r\n\r\n   A consequence of this is that, as new streaming media type formats\r\n   are defined (such as game stream formats, whiteboard session formats,\r\n   and so on), they SHOULD be defined using the SDP application stream\r\n|  and utilize an 'application' media subtype.\r\n\r\nf)\r\n\r\n   Summary of the media feature indicated by this tag:  This feature tag\r\n|     indicates the 'application' media subtypes supported by the agent\r\n      for purposes of streaming media.", "notes": "Rationale:\r\n  The subject of the RFC is SIP, not e-Mail, the 3rd letter in \"MIME\".\r\n  Therefore, the RFC should better follow the explanations given in\r\n  RFC 4288, which places the original concepts from MIME that have\r\n  proven generally useful into a more general context and strongly\r\n  recommends talking about \"media types\" and \"media subtypes\".\r\n  That reasoning similarly holds for Media Features, which for\r\n  obvious reasons not have been denoted \"MIME Features\".", "submit_date": "2010-01-10", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1998", "doc-id": "RFC5688", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1, 4th para", "orig_text": "   RFC 3840 defines media feature tags for each and every top-level\r\n   media type, including 'application'.  This media type covers an\r\n   extremely broad range of subtypes -- multiplayer games of all sorts,\r\n   shared whiteboards and application sharing, and so on.  With audio\r\n|  and video, where there is often a common codec supported by agents\r\n   (i.e., a common subtype).  [...]", "correct_text": "   RFC 3840 defines media feature tags for each and every top-level\r\n   media type, including 'application'.  This media type covers an\r\n   extremely broad range of subtypes -- multiplayer games of all sorts,\r\n   shared whiteboards and application sharing, and so on.  With audio\r\n|  and video, there is often a common codec supported by agents (i.e.,\r\n   a common subtype).  [...]", "notes": "Rationale: grammar; the original sentence sounds incomplete.\r\n  Therefore, strike \"where\".", "submit_date": "2010-01-10", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "1999", "doc-id": "RFC5688", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3, 1st para", "orig_text": "   The 'sip.app-subtype' media feature tag is of type token with a case-\r\n   insensitive equality relationship.  Its value can be any registered\r\n|  or private MIME application subtype compliant to the subtype-name\r\n   grammar defined in [RFC4288].  When included in the Contact header\r\n   field of a REGISTER request, an agent SHOULD include all application\r\n   subtypes that it can support as streaming formats.  An application\r\n|  subtype is supported if the user agent would be capable of processing\r\n   a Session Description Protocol (SDP) [RFC4566] offer [RFC3264] that\r\n   contained that subtype as a format in the m-line of the SDP.\r\n", "correct_text": "   The 'sip.app-subtype' media feature tag is of type token with a case-\r\n   insensitive equality relationship.  Its value can be any registered\r\n|  or private 'application' media subtype compliant to the subtype-name\r\n   grammar defined in [RFC4288].  When included in the Contact header\r\n   field of a REGISTER request, an agent SHOULD include all application\r\n   subtypes that it can support as streaming formats.  An application\r\n|  subtype is supported if the user agent would be capable of accepting\r\n   a Session Description Protocol (SDP) [RFC4566] offer [RFC3264] that\r\n   contained that subtype as a format in the m-line of the SDP.\r\n", "notes": "Rationale:\r\n\r\nFor clarity, the whole paragraph is shown here, including both changes.\r\n\r\n  a) editorial; see GLOBAL Errata note, EID=1997.\r\n\r\n  b) technical: the ability of \"processing\" an SDP offer does not\r\n     mean the ability to _accept_ it.  The latter reasonably seems\r\n     to be synonymous to \"supporting\" the feature contained therein,\r\n     but the former isn't.  Therefore,  s/processing/accepting/ .", "submit_date": "2010-01-10", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2021", "doc-id": "RFC5756", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1, last para", "orig_text": "   This document also replaces incorrect references to the\r\n   publicKeyAlgorithms field in Section 3 with references to the\r\n   parameters field in the subjectPublicKeyInfo algorithm field.\r\n|  Section 3 also rewords the second and third paragraphs for clarity.\r\n          ^^^", "correct_text": "   This document also replaces incorrect references to the\r\n|  publicKeyAlgorithms field in Section 3 of [RFC4055] with references\r\n   to the parameters field in the subjectPublicKeyInfo algorithm field.\r\n|  Section 2 also rewords the second and third paragraph in Section 3\r\n|  of [RFC4055] for clarity.", "notes": "Rationale: Clarification\r\n  Confusion between section numbers in 2 different documents\r\n  (per late text change).\r\nResolution:\r\n  More details added for clarification, wrong section number corrected.", "submit_date": "2010-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2022", "doc-id": "RFC5569", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "[[ second-to-last paragraph, on mid-page 3 ]]\r\n\r\n   While IPv6 availability was limited in December 2007 to only one IPv6\r\n   link per customer site (with /64 site-prefix assignments).  A few\r\n   months later, [...]", "correct_text": "|  IPv6 availability was limited in December 2007 to only one IPv6 link\r\n   per customer site (with /64 site-prefix assignments).  A few months\r\n   later, [...]", "notes": "Rationale: Incomplete sentence; strike \"While\" to fix.", "submit_date": "2010-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2023", "doc-id": "RFC5569", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "[[  In the NOTE on top of page 6 ]]\r\n\r\n                                  [...], and as soon as Free would get a\r\n   prefix shorter than /32, this restriction would be relaxed.  [...]\r\n", "correct_text": "                                 [...], and as soon as Free got a prefix\r\n   shorter than /32, it was possible to relax this restriction. [...]\r\n", "notes": "Rationale: Wrong temporal relationship, not matching text in Section 1.", "submit_date": "2010-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3255", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5. Replies", "orig_text": "353    RPL_NAMREPLY\r\n              \"( \"=\" / \"*\" / \"@\" ) <channel>\r\n               :[ \"@\" / \"+\" ] <nick> *( \" \" [ \"@\" / \"+\" ] <nick> )\r\n         - \"@\" is used for secret channels, \"*\" for private\r\n           channels, and \"=\" for others (public channels).\r\n", "correct_text": "353    RPL_NAMREPLY\r\n              \"( \"=\" / \"*\" / \"@\" ) <channel>\r\n               :[ \"@\" / \"+\" ] <nick> *( \" \" [ \"@\" / \"+\" ] <nick> )\"\r\n         - \"@\" is used for secret channels, \"*\" for private\r\n           channels, and \"=\" for others (public channels).\r\n", "notes": "Missing double qoutes to end the reply string.", "submit_date": "2012-06-12", "submitter_name": "Robrecht Dewaele", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2001", "doc-id": "RFC5651", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.1, pg.20", "orig_text": "   EXT_AUTH, HET=1 Packet authentication extension.  Information used to\r\n                   authenticate the sender of the packet.  The format of\r\n                   this Header Extension and its processing is outside\r\n                   the scope of this document and is to be communicated\r\n                   out-of-band as part of the session description.\r\n\r\n|  It is RECOMMENDED that senders provide some form of packet\r\n                   authentication.  If EXT_AUTH is present, whatever\r\n                   packet authentication checks that can be performed\r\n                   immediately upon reception of the packet SHOULD be\r\n                   performed before accepting the packet and performing\r\n                   any congestion-control-related action on it.\r\n\r\n|  Some packet authentication schemes impose a delay of several seconds\r\n                   between when a packet is received and when the packet\r\n                   is fully authenticated.  Any congestion control\r\n                   related action that is appropriate SHOULD NOT be\r\n                   postponed by any such full packet authentication.\r\n", "correct_text": "   EXT_AUTH, HET=1 Packet authentication extension.  Information used to\r\n                   authenticate the sender of the packet.  The format of\r\n                   this Header Extension and its processing is outside\r\n                   the scope of this document and is to be communicated\r\n                   out-of-band as part of the session description.\r\n\r\n|                  It is RECOMMENDED that senders provide some form of\r\n                   packet authentication.  If EXT_AUTH is present,\r\n                   whatever packet authentication checks that can be\r\n                   performed immediately upon reception of the packet\r\n                   SHOULD be performed before accepting the packet and\r\n                   performing any congestion-control-related action on\r\n                   it.\r\n\r\n|                  Some packet authentication schemes impose a delay of\r\n                   several seconds between when a packet is received and\r\n                   when the packet is fully authenticated.  Any\r\n                   congestion control related action that is appropriate\r\n                   SHOULD NOT be postponed by any such full packet\r\n                   authentication.\r\n", "notes": "Rationale:\r\n  Improper formatting of hanging list item consisting of three\r\n  paragraphs, visually pretending two more list items;\r\n  flaw apparently introduced in final pre-publication stages --\r\n  drafts were formatted properly.", "submit_date": "2010-01-10", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2002", "doc-id": "RFC4469", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   url-resp-text = 1*(%x01-09 /\r\n                      %x0B-0C /\r\n                      %x0E-5B /\r\n                      %x5D-FE) ; Any TEXT-CHAR except \"]\"", "correct_text": "   url-resp-text = 1*(%x01-09 /\r\n                      %x0B-0C /\r\n                      %x0E-5C /\r\n                      %x5E-FE) ; Any TEXT-CHAR except \"]\"", "notes": "The skipped character %x5C is \"\\\" not \"]\".  I think the intent is to omit \"]\" since url-resp-text is used exclusively inside a [BADURL url-resp-text] response code, and they want to avoid aliasing the closing \"]\".", "submit_date": "2010-01-14", "submitter_name": "Mike Abbott", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2301", "doc-id": "RFC2616", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "14.36", "orig_text": "   The Referer[sic] request-header field allows the client to specify,\r\n   for the server's benefit, the address (URI) of the resource from\r\n   which the Request-URI was obtained (the \"referrer\", although the\r\n   header field is misspelled.) The Referer request-header allows a\r\n   server to generate lists of back-links to resources for interest,\r\n   logging, optimized caching, etc. It also allows obsolete or mistyped\r\n   links to be traced for maintenance. The Referer field MUST NOT be\r\n   sent if the Request-URI was obtained from a source that does not have\r\n   its own URI, such as input from the user keyboard.", "correct_text": "   The Referer[sic] request-header field allows the client to specify,\r\n   for the server's benefit, the address (URI) of the resource from\r\n\r\n   whose message-body the Request-URI was obtained (the \"referrer\", although the\r\n   header field is misspelled.) The Referer request-header allows a\r\n   server to generate lists of back-links to resources for interest,\r\n   logging, optimized caching, etc. It also allows obsolete or mistyped\r\n   links to be traced for maintenance. The Referer field MUST NOT be\r\n   sent if the Request-URI was obtained from a source that does not have\r\n   its own URI, such as input from the user keyboard.", "notes": "The text should mention that the referrer is specified when the URI was obtained from the message-body of the Request-URI.\r\n\r\nFor instance, when the user agent receives a 302 response for a Request-URI, it does not specify the original Request-URI in the referrer header for the subsequent request - even though the (redirect) URI \"was obtained\" from the (header of the) 302 response for the original Request-URI.\r\n\r\nRoy T. Fielding replied:\r\nI think this should be rejected.  The referrer is the redirect.\r\nUser agents should be sending the redirecting URI in Referer,\r\nor sending nothing in Referer.\r\n\r\nIn any case, see the Link header field.  It is certainly possible\r\nto be referred by something in the header fields, so saying that it\r\nis in the message-body would be incorrect.\n --VERIFIER NOTES-- \nAs per the reply from Roy T. Fielding.", "submit_date": "2010-06-14", "submitter_name": "Conrad Roche", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2039", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "       BEGIN:VALARM\r\n       ACTION:AUDIO\r\n       TRIGGER:19980403T120000Z\r\n       ATTACH;FMTTYPE=audio/basic:http://example.com/pub/audio-\r\n        files/ssbanner.aud\r\n       REPEAT:4\r\n       DURATION:PT1H\r\n       END:VALARM", "correct_text": "       BEGIN:VALARM\r\n       ACTION:AUDIO\r\n       TRIGGER;VALUE=DATE-TIME:19980403T120000Z\r\n       ATTACH;FMTTYPE=audio/basic:http://example.com/pub/audio-\r\n        files/ssbanner.aud\r\n       REPEAT:4\r\n       DURATION:PT1H\r\n       END:VALARM", "notes": "The trigger is presented as a DATE-TIME, but the default type of this field is DURATION (3.8.6.3). Either the type must be specified (as per the corrected text), or specified in DURATION format.", "submit_date": "2010-02-10", "submitter_name": "Arnout Engelen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2040", "doc-id": "RFC4865", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   4) One required parameter, the hold-param, is added to the MAIL\r\n      command using either the keyword \"HOLDFOR\" or the keyword\r\n      \"HOLDUNTIL\".\r\n\r\n [...]\r\n\r\n      Using ABNF [n2], the syntax of this parameter is as follows:\r\n\r\n         future-release-interval = future-release-integer\r\n\r\n         future-release-date-time = Internet-style-date-time-UTC\r\n", "correct_text": "The last quoted ABNF production should be:\r\n\r\n         future-release-date-time = date-time\r\n            ; <date-time> defined in Section 5.6 of RFC 3339\r\n", "notes": "The ABNF contains a dangling production. An early draft shows that the RFC 3339 production date-time is what's intended (as Ned Freed found out).\r\n\r\nThe RFC also has no examples. I have a working server implementation of this, so without examples I guess talking to my server is second best. Send me mail in case of interest.", "submit_date": "2010-02-11", "submitter_name": "Arnt Gulbrandsen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2041", "doc-id": "RFC5582", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "Each tree can map a location described by either civic or geographic\r\ncoordinates, but not both, for one type of service (such as\r\n'sos.police', 'sos.fire' or 'counseling') and one location profile,\r\nalthough nothing prevents re-using the same servers for multiple,\r\ndifferent services or both types of coordinates.  The collection of\r\nall trees for one service and location profile is known as a forest.\r\n", "correct_text": "Each tree can map a location described by civic and/or geographic\r\ncoordinates, for one type of service (such as 'sos.police', 'sos.fire' or\r\n'counseling'), although nothing prevents re-using the same servers for\r\nmultiple, different services.  The collection of all trees for one service \r\nis known as a forest.\r\n", "notes": "Trees may have mapping data in multiple location profiles, not only in a single profile. In particular, according to RFC 5222, a LoST server must understand civic and geographic coordinates. Furthermore, there is no mechanism to discover LoST servers based on the location profile.", "submit_date": "2010-02-12", "submitter_name": "Karl Heinz Wolf", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2042", "doc-id": "RFC5582", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "   To facilitate orientation among the trees, we introduce a forest\r\n   guide (FG), which keeps track of the coverage regions of all the\r\n   trees for one service and location profile.  \r\n", "correct_text": "   To facilitate orientation among the trees, we introduce a forest\r\n   guide (FG), which keeps track of the coverage regions of all the\r\n   trees for one service.  \r\n", "notes": "Trees may have mapping data in multiple location profiles, not only in a single profile. In particular, according to RFC 5222, a LoST server must understand civic and geographic coordinates. Furthermore, there is no mechanism to discover LoST servers based on the location profile.", "submit_date": "2010-02-12", "submitter_name": "Karl Heinz Wolf", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2003", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "(a)  Section 6.1.3.2, last paragraph about LAST:\r\n\r\n   If the current article number is already the first article of the\r\n   newsgroup, a 422 response MUST be returned.  If the current article\r\n   number is invalid, a 420 response MUST be returned.  If the currently\r\n   selected newsgroup is invalid, a 412 response MUST be returned.  In\r\n   all three cases, the currently selected newsgroup and current article\r\n   number MUST NOT be altered.\r\n\r\n\r\n(b)  Section 6.1.4.2, last paragraph about NEXT:\r\n\r\n   If the current article number is already the last article of the\r\n   newsgroup, a 421 response MUST be returned.  In all other aspects\r\n   (apart, of course, from the lack of 422 response), this command is\r\n   identical to the LAST command (Section 6.1.3).", "correct_text": "(a)  Section 6.1.3.2, last paragraph about LAST:\r\n\r\n   If the currently selected newsgroup is invalid, a 412 response MUST\r\n   be returned.  If the currently selected newsgroup is valid but the\r\n   current article number is invalid, a 420 response MUST be returned.\r\n   If the current article number is valid and there is no previous article\r\n   in the currently selected newsgroup, a 422 response MUST be returned.\r\n   In all three cases, the currently selected newsgroup and current article\r\n   number MUST NOT be altered.\r\n\r\n\r\n(b)  Section 6.1.4.2, last paragraph about NEXT:\r\n\r\n   If the current article number is valid and there is no next article\r\n   in the currently selected newsgroup, a 421 response MUST be returned.\r\n   In all other aspects (apart, of course, from the lack of 422 response),\r\n   this command is identical to the LAST command (Section 6.1.3).", "notes": "RFC 3977 is unclear about the 421 and 422 response codes:  the first article of a newsgroup is defined as its reported low water mark, and the last article as its reported high water mark (see Section 6.1.1.2).  However, there MAY be no previous article in the group, although the current article number is not the reported low water mark (see the second paragraph of Section 6.1.3.2).  Therefore, a 422 response code MUST also be returned in that case.  A similar case for the next article and the 421 response code exists.\r\n\r\nThe notion of \"previous\" and \"next\" article is respectively defined in the first paragraph of Sections 6.1.3.2 and 6.1.4.2.\r\n\r\nThis erratum also reverses the order of 412, 420, and 421/422 so that it is clearer that an invalid newsgroup or article number takes precedence in determining the return code.", "submit_date": "2010-01-14", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2004", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "(a)  Section 6.2.1.1 about ARTICLE:\r\n\r\n   Third form (current article number used)\r\n     220 n message-id      Article follows (multi-line)\r\n     412                   No newsgroup selected\r\n     420                   Current article number is invalid\r\n\r\n\r\n(b)  Section 6.2.1.2, last paragraph about ARTICLE:\r\n\r\n   If the argument is a message-id and no such article exists, a 430\r\n   response MUST be returned.  If the argument is a number or is omitted\r\n   and the currently selected newsgroup is invalid, a 412 response MUST\r\n   be returned.  If the argument is a number and that article does not\r\n   exist in the currently selected newsgroup, a 423 response MUST be\r\n   returned.  If the argument is omitted and the current article number\r\n   is invalid, a 420 response MUST be returned.\r\n\r\n\r\n(c)  Section 6.2.2.1 about HEAD:\r\n\r\n   Third form (current article number used)\r\n     221 n message-id      Headers follow (multi-line)\r\n     412                   No newsgroup selected\r\n     420                   Current article number is invalid\r\n\r\n\r\n(d)  Section 6.2.3.1 about BODY:\r\n\r\n   Third form (current article number used)\r\n     222 n message-id      Body follows (multi-line)\r\n     412                   No newsgroup selected\r\n     420                   Current article number is invalid\r\n\r\n\r\n(e)  Section 6.2.4.1 about STAT:\r\n\r\n    Third form (current article number used)\r\n     223 n message-id      Article exists\r\n     412                   No newsgroup selected\r\n     420                   Current article number is invalid\r\n\r\n\r\n(f)  Section 8.3.1 about OVER:\r\n\r\n   Third form (current article number used)\r\n     224    Overview information follows (multi-line)\r\n     412    No newsgroup selected\r\n     420    Current article number is invalid\r\n\r\n\r\n(g)  Section 8.3.2, last paragraph about OVER:\r\n\r\n   If the argument is a message-id and no such article exists, a 430\r\n   response MUST be returned.  If the argument is a range or is omitted\r\n   and the currently selected newsgroup is invalid, a 412 response MUST\r\n   be returned.  If the argument is a range and no articles in that\r\n   number range exist in the currently selected newsgroup, including the\r\n   case where the second number is less than the first one, a 423\r\n   response MUST be returned.  If the argument is omitted and the\r\n   current article number is invalid, a 420 response MUST be returned.\r\n\r\n\r\n(h)  Section 8.5.1 about HDR:\r\n\r\n   Third form (current article number used)\r\n     225    Headers follow (multi-line)\r\n     412    No newsgroup selected\r\n     420    Current article number is invalid\r\n\r\n\r\n(i)  Section 8.5.2, antepenultimate paragraph about HDR:\r\n\r\n   If the second argument is a message-id and no such article exists, a\r\n   430 response MUST be returned.  If the second argument is a range or\r\n   is omitted and the currently selected newsgroup is invalid, a 412\r\n   response MUST be returned.  If the second argument is a range and no\r\n   articles in that number range exist in the currently selected\r\n   newsgroup, including the case where the second number is less than\r\n   the first one, a 423 response MUST be returned.  If the second\r\n   argument is omitted and the current article number is invalid, a 420\r\n   response MUST be returned.", "correct_text": "(a)  Section 6.2.1.1 about ARTICLE:\r\n\r\n   Third form (current article number used)\r\n     220 n message-id      Article follows (multi-line)\r\n     412                   No newsgroup selected\r\n     420                   Current article number is invalid\r\n|    423                   No article with that number\r\n\r\n(b)  Section 6.2.1.2, last paragraph about ARTICLE:\r\n\r\n   If the argument is a message-id and no such article exists, a 430\r\n   response MUST be returned.  If the argument is a number or is omitted,\r\n   and the currently selected newsgroup is invalid, a 412 response MUST\r\n   be returned.  If the argument is a number or is omitted, and that\r\n   article does not exist in the currently selected newsgroup, a 423\r\n   response MUST be returned.  If the argument is omitted and the currently\r\n   selected newsgroup is valid but the current article number is invalid,\r\n   a 420 response MUST be returned.\r\n\r\n\r\n(c)  Section 6.2.2.1 about HEAD:\r\n\r\n   Third form (current article number used)\r\n     221 n message-id      Headers follow (multi-line)\r\n     412                   No newsgroup selected\r\n     420                   Current article number is invalid\r\n|    423                   No article with that number\r\n\r\n\r\n(d)  Section 6.2.3.1 about BODY:\r\n\r\n   Third form (current article number used)\r\n     222 n message-id      Body follows (multi-line)\r\n     412                   No newsgroup selected\r\n     420                   Current article number is invalid\r\n|    423                   No article with that number\r\n\r\n\r\n(e)  Section 6.2.4.1 about STAT:\r\n\r\n    Third form (current article number used)\r\n     223 n message-id      Article exists\r\n     412                   No newsgroup selected\r\n     420                   Current article number is invalid\r\n|    423                   No article with that number\r\n\r\n\r\n(f)  Section 8.3.1 about OVER:\r\n\r\n   Third form (current article number used)\r\n     224    Overview information follows (multi-line)\r\n     412    No newsgroup selected\r\n     420    Current article number is invalid\r\n|    423    No article with that number\r\n\r\n\r\n(g)  Section 8.3.2, last paragraph about OVER:\r\n\r\n   If the argument is a message-id and no such article exists, a 430\r\n   response MUST be returned.  If the argument is a range or is omitted,\r\n   and the currently selected newsgroup is invalid, a 412 response MUST\r\n   be returned.  If the argument is a range or is omitted, and no articles\r\n   in that number range exist in the currently selected newsgroup, including\r\n   the case where the second number is less than the first one, a 423\r\n   response MUST be returned.  If the argument is omitted and the currently\r\n   selected newsgroup is valid but the current article number is invalid,\r\n   a 420 response MUST be returned.\r\n\r\n\r\n(h)  Section 8.5.1 about HDR:\r\n\r\n   Third form (current article number used)\r\n     225    Headers follow (multi-line)\r\n     412    No newsgroup selected\r\n     420    Current article number is invalid\r\n|    423    No article with that number\r\n\r\n\r\n(i)  Section 8.5.2, antepenultimate paragraph about HDR:\r\n\r\n   If the second argument is a message-id and no such article exists, a\r\n   430 response MUST be returned.  If the second argument is a range or\r\n   is omitted, and the currently selected newsgroup is invalid, a 412\r\n   response MUST be returned.  If the second argument is a range or is\r\n   omitted, and no articles in that number range exist in the currently\r\n   selected newsgroup, including the case where the second number is less\r\n   than the first one, a 423 response MUST be returned.  If the second\r\n   argument is omitted and the currently selected newsgroup is valid but\r\n   the current article number is invalid, a 420 response MUST be returned.", "notes": "RFC 3977 does not define the response code to answer when the third form of ARTICLE, BODY, HDR, HEAD, OVER, and STAT is used while the current article number is valid but does not exist.  It is in fact 423:  this response code is used by the NNTP reference implementation, as well as major widely used current implementations like INN.\r\n\r\nAll these commands define that when the argument (or the second argument for HDR) is omitted, the current article number is used.\r\n\r\nIf 420 is used instead of 423 for that case, RFC 3977 becomes inconsistent regarding the notion of an \"invalid current article number\", specially for the NEXT and LAST commands.  That's why the 423 response code needs to be sent when the current article number is valid but does not exist.\r\n\r\nNote that this erratum also takes into account the previously reported erratum 1524.\r\n --VERIFIER NOTES-- \r\n   Section 6.2.1.2 paragraph 6 says \"a previously valid article number\r\nMAY become invalid if the article has been removed\". Therefore the correct\r\nresponse in the situation being addressed would be 420, not 423.\r\n\r\nThis could be a case that might be considered if the document is updated, but certainly\u00a0it's not a simple error in the document.", "submit_date": "2010-01-14", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2005", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15.1.11.3", "orig_text": "The highest_slot argument in a Sequence operation exceeds the replier's enforced\r\nhighest_slotid.", "correct_text": "The highest_slot argument in a Sequence operation exceeds the replier's enforced\r\nhighest_slotid. Also, the rsa_target_highest_slotid argument in a CB_RECALL_SLOT\r\noperation exceeds maximum enforced slot ID of the session's fore channel.", "notes": "The NFSv4.1 specification permits the client to return NFS4ERR_BAD_HIGH_SLOT in\r\nthe event rsa_target_highest_slotid is higher the highest slot ID of the\r\nsession's fore channel. Arguably this is an unnecessary complication; the client\r\ncan return NFS4_OK to sucvh a CB_RECALL_SLOT operation, and then send a\r\nSEQUENCE operation with an sa_highest_slotid argument that is less than or\r\nequal to rsa_target_highest_slotid. NFSv4.2 should specify this simplification.", "submit_date": "2010-01-17", "submitter_name": "Michael Eisler", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2006", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.1.1.3", "orig_text": "For any of a number of reasons, the replier could not process this\r\n   operation in what was deemed a reasonable time.  The client should\r\n   wait and then try the request with a new slot and sequence value.\r\n\r\n   Some examples of scenarios that might lead to this situation:\r\n\r\n   o  A server that supports hierarchical storage receives a request to\r\n      process a file that had been migrated.\r\n\r\n   o  An operation requires a delegation recall to proceed, and waiting\r\n      for this delegation recall makes processing this request in a\r\n      timely fashion impossible.\r\n\r\n   In such cases, the error NFS4ERR_DELAY allows these preparatory\r\n   operations to proceed without holding up client resources such as a\r\n   session slot.  After delaying for period of time, the client can then\r\n   re-send the operation in question (but not with the same slot ID and\r\n   sequence ID; one or both MUST be different on the re-send).\r\n\r\n   Note that without the ability to return NFS4ERR_DELAY and the\r\n   client's willingness to re-send when receiving it, deadlock might\r\n   result.  For example, if a recall is done, and if the delegation\r\n   return or operations preparatory to delegation return are held up by\r\n   other operations that need the delegation to be returned, session\r\n   slots might not be available.  The result could be deadlock.", "correct_text": "For any of a number of reasons, the replier could not process this\r\n   operation in what was deemed a reasonable time.  The requester should\r\n   wait and then try the request with a new slot and sequence value.\r\n\r\n   Some examples of scenarios that might lead to this situation:\r\n\r\n   o  A server that supports hierarchical storage receives a request to\r\n      process a file that had been migrated.\r\n\r\n   o  An operation requires a delegation recall to proceed, and waiting\r\n      for this delegation recall makes processing this request in a\r\n      timely fashion impossible.\r\n\r\n   In such cases, the error NFS4ERR_DELAY allows these preparatory\r\n   operations to proceed without holding up requester resources such as a\r\n   session slot.  After delaying for period of time, the requester can then\r\n   re-send the operation in question. If the operation that returned\r\n   NFS4ERR_DELAY was not a Sequence operation, the initial, preceding \r\n   Sequence operation of the Compound request MUST NOT be re-sent with same \r\n   slot ID and sequence ID; one or both MUST be different on the re-send. If\r\n   the operation that returned NFS4ERR_DELAY was a Sequence operation, then\r\n   the Sequence MUST be re-sent with the same slot ID and sequence ID.\r\n\r\n   Note that without the ability to return NFS4ERR_DELAY and the\r\n   requester's willingness to re-send when receiving it, deadlock might\r\n   result.  For example, if a recall is done, and if the delegation\r\n   return or operations preparatory to delegation return are held up by\r\n   other operations that need the delegation to be returned, session\r\n   slots might not be available.  The result could be deadlock.", "notes": "This errata is correcting two problems:\r\n\r\n(1) The use of term \"requester\" instead of \"client\" since NFS4ERR_DELAY\r\n    is applicable for both the backchannel and fore channel.\r\n\r\n(2) Clarification that NFS4ERR_DELAY from a Sequence operation is handled \r\n    differently from non-Sequence operations.", "submit_date": "2010-01-17", "submitter_name": "Michael Eisler", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4418", "doc-id": "RFC5843", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1.1", "orig_text": "   Digest: SHA-256=MWVkMWQxYTRiMzk5MDQ0MzI3NGU5NDEyZTk5OWY1ZGFmNzgyZTJlO\r\n   DYzYjRjYzFhOTlmNTQwYzI2M2QwM2U2MQ==", "correct_text": "   Digest: SHA-256=HtHRpLOZBEMnTpQS6Zn12veC4uhjtMwamfVAwmPQPmE=", "notes": "The example SHA-256 message digest in the original document is not base64(sha256(M)), but it is base64(hexlify(sha256(M))).\r\nTherefore the example is incorrect and misleading,\r\nthe digest is much longer than it sould be.\r\n\r\nThat base64 encoding of binary hash digest has to be used,\r\ninstead of the base64 encoding of the hexlified hash,\r\ncan be verified by checking RFC3230 section 4.2.", "submit_date": "2015-07-17", "submitter_name": "Michal Bozon", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7761", "doc-id": "RFC2631", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.1.1", "orig_text": "   6. If p > 2^(L-1) use a robust primality test to test whether p is\r\n      prime. Else go to 18.", "correct_text": "   16. If p > 2^(L-1) use a robust primality test to test whether p is\r\n       prime. Else go to 18.", "notes": "This should be numbered as step 16, not step 6.", "submit_date": "2024-01-12", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-16 18:37:47"}, {"errata_id": "2007", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.4", "orig_text": "         This document and translations of it may be copied and\r\n         furnished to others, and derivative works that comment on or\r\n         otherwise explain it or assist in its implmentation may be\r\n         prepared, copied, published and distributed, in whole or in\r\n         part, without restriction of any kind, provided that the above\r\n         copyright notice and this paragraph are included on all such\r\n         copies and derivative works.  However, this document itself may\r\n         not be modified in any way, such as by removing the copyright\r\n         notice or references to the Internet Society or other Internet\r\n         organizations, except as needed for the  purpose of developing\r\n         Internet standards in which case the procedures for copyrights\r\n         defined in the Internet Standards process must be followed, or\r\n         as required to translate it into languages other than English.\r\n", "correct_text": "         This document and translations of it may be copied and\r\n         furnished to others, and derivative works that comment on or\r\n         otherwise explain it or assist in its implementation may be\r\n         prepared, copied, published and distributed, in whole or in\r\n         part, without restriction of any kind, provided that the above\r\n         copyright notice and this paragraph are included on all such\r\n         copies and derivative works.  However, this document itself may\r\n         not be modified in any way, such as by removing the copyright\r\n         notice or references to the Internet Society or other Internet\r\n         organizations, except as needed for the  purpose of developing\r\n         Internet standards in which case the procedures for copyrights\r\n         defined in the Internet Standards process must be followed, or\r\n         as required to translate it into languages other than English.\r\n", "notes": "\"implementation\" is misspelled.", "submit_date": "2010-01-17", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2008", "doc-id": "RFC3433", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "        exa(14),    -- 10^15\r\n        peta(15),   -- 10^18\r\n", "correct_text": "        peta(14),   -- 10^15\r\n        exa(15),    -- 10^18", "notes": "", "submit_date": "2010-01-18", "submitter_name": "Minoru Teraoka", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2009", "doc-id": "RFC2397", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "data:text/plain;charset=iso-8859-7,%be%fg%be", "correct_text": "data:text/plain;charset=iso-8859-7,%be%d3%be", "notes": "The given hex encoding \"%fg\" is incorrect, because there is no hexadecimal digit \"g\" (\"f\" is last). A correct hex encoding of any character is permissible here.", "submit_date": "2010-01-18", "submitter_name": "Alexander Gebel", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2010", "doc-id": "RFC5389", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2.2", "orig_text": "For purposes of usage with this specification, the client treats the\r\ndomain name or IP address used in Section 8.1 as the host portion of\r\nthe URI that has been dereferenced.", "correct_text": "", "notes": "The reference should be to Section 9, not 8.1.\r\n\r\nUnfortunately, even with this purely editorial fix, the text is\r\nambiguous: the procedure described in Section 9 would typically use at\r\nleast three different domain names: (1) the configured domain name,\r\nlike \"example.com\"; (2) the domain name used in the SRV query, like\r\n\"_stuns._tcp.example.com\"; and (3) the domain name found in the SRV\r\nrecord and used for A/AAAA query, like \"stunserver3.foobar.example\".\r\nAnd they have *very* different security implications...", "submit_date": "2010-01-21", "submitter_name": "Pasi Eronen", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2011", "doc-id": "RFC2388", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "boilerplate", "orig_text": "Network Working Group                                         L. Masinter\r\nRequest for Comments: 2388                              Xerox Corporation\r\nCategory: Standards Track                                     August 1998\r\n", "correct_text": "Network Working Group                                         L. Masinter\r\nRequest for Comments: 2388                              Xerox Corporation\r\nUpdates: 1867                                                 August 1998\r\nCategory: Standards Track", "notes": "RFC 2388 updated the definition of multipart/form-data, which was previously defined in RFC 1867. It appears the RFC Index should reflect that.", "submit_date": "2010-01-21", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2053", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.1.", "orig_text": "Notes:\r\n\r\n   * There are two Records here in the same Data Set.  Each record\r\n     defines a different Selection Sequence.\r\n\r\n   * If, for example, a different Selection Sequence is composed of\r\n     three Selectors, then a different Options Template with three\r\n     selectorId Information Elements (instead of two) must be used.", "correct_text": "Notes:\r\n\r\n   * There are two Records here in the same Data Set.  Each record\r\n     defines a different Selection Sequence.\r\n\r\n   * If, for example, a different Selection Sequence is composed of\r\n     three Selectors, then a different Options Template with three\r\n     selectorId Information Elements (instead of two) must be used.\r\n\r\n   * IPFIX Reduced Size Encoding [RFC5101] has been used for the\r\n     selectorId fields.", "notes": "Addition of \"Reduced Size Encoding\" note per Errata ID 2052.\r\nNB \"fields\" is plural in this example only.", "submit_date": "2010-02-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2054", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.2.1.", "orig_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 1 represents systematic count-based\r\n     Sampling.\r\n\r\n   * samplingPacketInterval and samplingPacketSpace are of type\r\n     unsigned32 but are compressed down to one octet here, as allowed by\r\n     the IPFIX protocol specifications [RFC5101].", "correct_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 1 represents systematic count-based\r\n     Sampling.\r\n\r\n   * samplingPacketInterval and samplingPacketSpace are of type\r\n     unsigned32 but are compressed down to one octet here, as allowed by\r\n     the IPFIX protocol specifications [RFC5101].\r\n\r\n   * IPFIX Reduced Size Encoding [RFC5101] has been used for the\r\n     selectorId field.", "notes": "Addition of \"Reduced Size Encoding\" note per Errata ID 2052.", "submit_date": "2010-02-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2055", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.2.2.", "orig_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 2 represents systematic time-based\r\n     Sampling.\r\n\r\n   * samplingTimeInterval and samplingTimeSpace are of type unsigned32\r\n     but are compressed down here.", "correct_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 2 represents systematic time-based\r\n     Sampling.\r\n\r\n   * samplingTimeInterval and samplingTimeSpace are of type unsigned32\r\n     but are compressed down here.\r\n\r\n   * IPFIX Reduced Size Encoding [RFC5101] has been used for the\r\n     selectorId field.", "notes": "Addition of \"Reduced Size Encoding\" note per Errata ID 2052.", "submit_date": "2010-02-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5464", "doc-id": "RFC4180", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "5.  Each field may or may not be enclosed in double quotes (however\r\n       some programs, such as Microsoft Excel, do not use double quotes\r\n       at all).  ", "correct_text": "5.  Each field may or may not be enclosed in double quotes.", "notes": "For csv files, Microsoft Excel 2010 saves the value of a field enclosed in double quotes if a cell contains a comma in its value.\n --VERIFIER NOTES-- \n Errata are only considered that would have been errors at the time the document was published.\r\n The document refers to the version(s) of Excel that were available at its time of publication, not versions released since then.", "submit_date": "2018-08-15", "submitter_name": "Alperen Belgic", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2012", "doc-id": "RFC5176", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "Values 200-299 represent successful completion, so that these\r\nvalues may only be sent within CoA-ACK or Disconnect-ACK packets\r\nand MUST NOT be sent within a CoA-NAK or Disconnect-NAK packet.\r\n", "correct_text": "Values 200-299 represent successful completion, so that these\r\nvalues may be sent in other reply messages such as Access-Reject, Access-Challenge, CoA-ACK or Disconnect-ACK packets\r\nand MUST NOT be sent within a CoA-NAK or Disconnect-NAK packet.\r\n", "notes": "RFC 3579  allows for Error-Cause to be sent (specifically) in an access-challenge and also in Reject messages as well.\r\n\r\nThe specification in 5176 restricts the usage and should be clarified especially since 5176 was published after 3579.\r\n\r\nI proposed minimal text but I think a broader approach is needed for this attribute.  Here are some thoughts:\r\n1) Error-Cause is needed in Access-Reject (as is allowed by 3579)\r\n2) IANA should have procedures for defining new values (currently no procedure is defined). SDO need to be able to use Error-Cause to report back why an Authentication/Authorization failed.  Error-Cause seems to be the only solution other than Reply-Message which is not really designed for reporting error cause to the NAS.", "submit_date": "2010-01-25", "submitter_name": "Avi Lior", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2013", "doc-id": "RFC5758", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3, last para", "orig_text": "|  Conforming CA implementations that ECDSA signatures in certificates\r\n   or CRLs MAY generate such ECDSA signatures in accordance with all the\r\n   requirements and recommendations in [X9.62] or [SEC1] if they have a\r\n   stated policy that requires conformance to [X9.62] or [SEC1].\r\n", "correct_text": "|  Conforming CA implementations that generate ECDSA signatures in\r\n   certificates or CRLs MAY generate such ECDSA signatures in accordance\r\n   with all the requirements and recommendations in [X9.62] or [SEC1] if\r\n   they have a stated policy that requires conformance to [X9.62] or\r\n   [SEC1].", "notes": "Rationale: missing verb, \"generate\";\r\n  cf. similar text immediately above in the same Section\r\n  and the last two paragraphs of Section 2.", "submit_date": "2010-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2014", "doc-id": "RFC5708", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2, pg.6", "orig_text": "   [SHA2-2]     NIST, \"Descriptions of SHA-256, SHA-384, and SHA-512\",\r\n                May 2001, <http://csrc.nist.gov/publications/fips/\r\n                fips180-3/fips180-3_final.pdf>.\r\n", "correct_text": "   [SHA2-2]     Federal Information Processing Standards Publication\r\n                (FIPS PUB) 180-3, Secure Hash Standard (SHS), October\r\n                2008, <http://csrc.nist.gov/publications/fips/\r\n                fips180-3/fips180-3_final.pdf>.\r\n", "notes": "Rationale:\r\n  The given Ref. entry is a mix of outdated and current information.\r\n  (Corrected text obtained by borrowing from RFC 5758.)\r\n  Also, the Ref. anchor \"SHA2-2\" seems to be a reminiscent\r\n  of the predecessor FIPS PUB 180-2; perhaps, \"[SHS]\" might have\r\n  been preferable.", "submit_date": "2010-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2015", "doc-id": "RFC5665", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1, pg.6", "orig_text": "[[ Item 4., last paragraph ]]\r\n\r\n       For assignments made on a Standards Action basis, the point of\r\n|      contact is always determined by IESG.\r\n                                      ^", "correct_text": "       For assignments made on a Standards Action basis, the point of\r\n|      contact is always determined by the IESG.\r\n", "notes": "Rationale: missing article; consistency of style.", "submit_date": "2010-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2016", "doc-id": "RFC5665", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2.3.5", "orig_text": "5.2.3.5.  Uaddr Format for ICMP over IPv4 and IPv6\r\n\r\n   As ICMP is not a true transport, there is no uaddr format for ICMP.\r\n   The netid assignments \"icmp\" and \"icmp6\" and their shared uaddr\r\n   \"format\" are listed to prevent any registrant from allocating the\r\n   netids \"icmp\" and \"icmp6\" for a purpose that would likely cause\r\n   confusion.\r\n", "correct_text": "5.2.3.5.  Uaddr Format for ICMP over IPv4 and IPv6\r\n\r\n   As ICMP is not a true transport, there are no netid assignments\r\n   \"icmp\" and \"icmp6\" and there is no need for a dummy uaddr format\r\n   for ICMP.\r\n", "notes": "Rationale:\r\n  The RFC text in Section 5.2.3.5. is outdated and does not correspond\r\n  to the revised design decision documented in Section 5.1 to _not_\r\n  register \"icmp\" and \"icmp6\" netids.\r\n\r\nSection 5.1 says:\r\n\r\n   o  To prevent confusion with the control protocol by the same name\r\n      [9], netids with the prefix \"ICMP\" are Reserved.\r\n\r\nand\r\n\r\n   2.  [...]\r\n                             Constant names with the prefix \"NC_STDS\",\r\n       \"NC_FCFS\", \"NC_PRIV\", \"NC_EXPE\", and \"NC_ICMP\" are Reserved.\r\n                      \r\nSince there are no such registry entries (see Table 2 in Section 5.1.1),\r\nthere also is no dummy shared Uaddr Format for ICMP in the Uaddr Format\r\nregistry (see Table 3 in Section 5.2.1), and hence the Original text is\r\nmoot.\r\n\r\nAn alternative to the above Corrected Text would be to delete the\r\nentire subsection 5.2.3.5. in the RFC.\r\n\r\n_____\r\nClosely related:\r\n\r\nNotes regarding the current IANA registries originated in RFC 5665\r\n\r\n[[ This part of the Errata Note should be deleted by the verifier\r\n   after verification and corrective action by IANA. ]]\r\n\r\na)  IANA has misrepresented the registration policy in the netid registry.\r\n\r\n    Both namespaces are split into two parts, governed respectively\r\n    by \"Standards Action\" and \"First Come First Served\" policy.\r\n\r\n    IANA has split the 'netid' registry into two sub-registries\r\n    (BTW: not sure this makes sense, since the namespace is shared),\r\n    but the first registry, \"ONC RPC Netids (First Come First Served)\"\r\n    confusingly says: \r\n       Registration Procedures \r\n          Standards Action\r\n    as well.\r\n    \r\nb)  \"RESERVED\" values and patterns\r\n\r\nIANA did not make note of the various \"reserved\" values specified\r\nin the RFC.  All these reservations should preferably be stated in\r\n\"Note\"s attached to the registries to remind readers and prospective\r\nregistrant of the reservations.\r\nMaybe, a short hint to the RFC suffices in both cases:\r\n\r\n\"Note:  RFC 5665 specifies various reserved values and name prefixes\r\n        for this registry.\"\r\n\r\nc)  Columnar alignment\r\n\r\nIn the \"ONC RPC Netids (First Come First Served)\" registry,\r\napparently the content of the \"Point of Contact\" column is missing,\r\nand the entries for the \"cross reference\" column are misaligned.\r\n\r\nIn the \"ONC RPC Netids (Standards Action)\" registry and the\r\n\"NC RPC Uaddr Format Registry\", the left alignment of the\r\ncross reference table cell entries below the (centered) column\r\nheading (and thus visually almost under the \"Point of Contact\" \r\ncolumn heading) also is rather confusing.\r\nIn general, using the _same_ (often: left) horizontal alignment\r\nof column headings and table cells would be preferable.", "submit_date": "2010-01-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2017", "doc-id": "RFC5664", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.4.2", "orig_text": "N = L / (W-P * stripe_unit)\r\nL' = N * (W * stripe_unit) +\r\n    (L % (W-P * stripe_unit))\r\n", "correct_text": "N = L / ((W-P) * stripe_unit)\r\nL' = N * (W * stripe_unit) +\r\n    (L % ((W-P) * stripe_unit))\r\n", "notes": "Missing parenthesis around lower precedence expression", "submit_date": "2010-01-26", "submitter_name": "Benny Halevy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2018", "doc-id": "RFC5664", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.4.3", "orig_text": "N = L / (W-1 * stripe_unit)\r\n", "correct_text": "N = L / ((W-1) * stripe_unit)\r\n", "notes": "Missing parenthesis around lower precedence expression", "submit_date": "2010-01-26", "submitter_name": "Benny Halevy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2019", "doc-id": "RFC5664", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.4.4", "orig_text": "The equations given above for embedded parity can be used to\r\nmap a file offset to the correct component object by setting the\r\nnumber of parity components to 2 instead of 1 for RAID4 or RAID5.\r\n", "correct_text": "The equations given above for embedded parity can be used to\r\nmap a file offset to the correct component object by setting the\r\nnumber of parity components to 2 instead of 1 for RAID5.\r\n", "notes": "Clarify that the RAID_PQ algorithm extends the rotated parity scheme as specified for RAID_5.", "submit_date": "2010-01-26", "submitter_name": "Benny Halevy", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2020", "doc-id": "RFC3348", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   In some instances a server that supports the CHILDREN extension MAY\r\n   NOT be able to determine whether a mailbox has children.", "correct_text": "   In some instances a server that supports the CHILDREN extension might\r\n   not be able to determine whether a mailbox has children.", "notes": "The \"may not\" in this sentence is not normative text, but is just a statement of fact.  It should not be rendered as an RFC 2119 term.", "submit_date": "2010-01-26", "submitter_name": "Barry Leiba", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2356", "doc-id": "RFC4683", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5", "orig_text": "Still on page 10, Section 4.5 has two instances of a missing article.\r\n\r\n(4a)\r\nThe 1st paragraph of Section 4.5 says:\r\n\r\n   It may be required that the CA (not just the RA) verifies SII before\r\n|  issuing a certificate.  To meet this requirement, RA SHOULD encrypt\r\n   the SIItype, SII, and SIM and send the result to the CA by a secure\r\n   channel.  The user SHOULD also encrypt the same values and send the\r\n   result to the CA in his or her certificate request message.  Then the\r\n   CA compares these two results for verifying the user's SII.\r\n\r\nIt should say:\r\n\r\n   It may be required that the CA (not just the RA) verifies SII before\r\n|  issuing a certificate.  To meet this requirement, the RA SHOULD\r\n   encrypt the SIItype, SII, and SIM and send the result to the CA by a\r\n   secure channel.  The user SHOULD also encrypt the same values and\r\n   send the result to the CA in his or her certificate request message.\r\n   Then the CA compares these two results for verifying the user's SII.\r\n\r\n(4b)\r\nThe 2nd paragraph of Section 4.5 says:\r\n\r\n|  Where the results from RA and the user are the EPEPSI.\r\n\r\nIt should say:\r\n\r\n|  Where the results from the RA and the user are the EPEPSI.", "correct_text": "See above.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2024", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.3", "orig_text": "In the description of the SYST command, the second sentence reads:\r\n\r\n\"The reply shall have as its first\r\nword one of the system names listed in the current version\r\nof the Assigned Numbers document [4].\"\r\n\r\nWhere [4] points to the then-current RFC 943.", "correct_text": "The reply shall have as its first\r\nword one of the system names listed in the current version\r\nof the IANA \"Operating System Names\" Registry (<http://www.iana.org/assignments/operating-system-names> at\r\nthe time of this writing)", "notes": "RFC 943 was several times obsolete by the time the community discontinued regular updates to the \"Assigned Numbers\" RFCs (see RFC 3232, January 2002).   The clear intent was that SYST be able to use operating system names from that registry.  An erratum pointing to the registry itself may aid the confused as well as providing better tracking and serving as placeholder in case RFC 959 is ever updated.", "submit_date": "2010-01-27", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2025", "doc-id": "RFC5754", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4, pg. 6", "orig_text": "2.4.  SHA-512\r\n\r\n   [...]\r\n\r\n|  The SMIMECapabilities attribute value indicates support for SHA-384\r\n   in a SEQUENCE with the capabilityID field containing the object\r\n|  identifier id-sha384 with absent parameters.  The DER encoding for\r\n   this SMIMECapability value is:\r\n\r\n      id-sha512: 30 0b 06 09 60 86 48 01 65 03 04 02 03", "correct_text": "2.4.  SHA-512\r\n\r\n   [...]\r\n\r\n|  The SMIMECapabilities attribute value indicates support for SHA-512\r\n   in a SEQUENCE with the capabilityID field containing the object\r\n|  identifier id-sha512 with absent parameters.  The DER encoding for\r\n   this SMIMECapability value is:\r\n\r\n      id-sha512: 30 0b 06 09 60 86 48 01 65 03 04 02 03", "notes": "Rationale: Undetected copy&paste error, but significant\r\n   (therefore classified as Technical)", "submit_date": "2010-01-27", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2026", "doc-id": "RFC5652", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3, pg. 15", "orig_text": "[[  around the page break from page 14 to page 15: ]]\r\n\r\n      digestAlgorithm identifies the message digest algorithm, and any\r\n      associated parameters, used by the signer.  The message digest is\r\n      computed on either the content being signed or the content\r\n<< page break >>\r\n      together with the signed attributes using the process described in\r\n      Section 5.4.  The message digest algorithm SHOULD be among those\r\n|     listed in the digestAlgorithms field of the associated SignerData.\r\n                                                             ^^^^^^^^^^\r\n      Implementations MAY fail to validate signatures that use a digest\r\n      algorithm that is not included in the SignedData digestAlgorithms\r\n      set.", "correct_text": "      digestAlgorithm identifies the message digest algorithm, and any\r\n      associated parameters, used by the signer.  The message digest is\r\n      computed on either the content being signed or the content\r\n      together with the signed attributes using the process described in\r\n      Section 5.4.  The message digest algorithm SHOULD be among those\r\n|     listed in the digestAlgorithms field of the associated SignedData.\r\n      Implementations MAY fail to validate signatures that use a digest\r\n      algorithm that is not included in the SignedData digestAlgorithms\r\n      set.", "notes": "Rationale:\r\n  There's no such ASN.1 type/object named \"SignerData\" in relevant\r\n  specifications.   Text should refer to \"SignedData\" instead.\r\n  This is an undetected legacy flaw inherited literally from RFC 2630,\r\n  RFC 3369, and RFC 3852.", "submit_date": "2010-01-28", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2027", "doc-id": "RFC5752", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5, pg. 8", "orig_text": "   This section describes recommended processing of signatures when\r\n|  there are more than one SignerInfo present in a message.  This may be\r\n   due to either multiple SignerInfo objects being present in a single\r\n|  SignedData object or multiple SignerData objects embedded in each\r\n   other.\r\n\r\n   [...]\r\n\r\n   Order of operations:\r\n\r\n   1) Evaluate each SignerInfo object independently.\r\n\r\n   2) Combine the results of all SignerInfo objects at the same level\r\n|     (i.e., attached to the same SignerData object).\r\n\r\n|  3) Combine the results of the nested SignerData objects.  Note that\r\n      this should ignore the presence of other CMS objects between the\r\n      SignedData objects.", "correct_text": "   This section describes recommended processing of signatures when\r\n|  there is more than one SignerInfo object present in a message.  This\r\n   may be due to either multiple SignerInfo objects being present in a\r\n|  single SignedData object or multiple SignedData objects embedded in\r\n   each other.\r\n\r\n   [...]\r\n\r\n   Order of operations:\r\n\r\n   1) Evaluate each SignerInfo object independently.\r\n\r\n   2) Combine the results of all SignerInfo objects at the same level\r\n|     (i.e., attached to the same SignedData object).\r\n\r\n|  3) Combine the results of the nested SignedData objects.  Note that\r\n      this should ignore the presence of other CMS objects between the\r\n      SignedData objects.", "notes": "Rationale:\r\n  There's no such ASN.1 type/object \"SignerData\".\r\n  Based on the importance of referencing the correct type/object,\r\n  the correction to \"SignedData\" is classified as 'Technical'.\r\n  Also a clarification and fix is applied in the first sentence.", "submit_date": "2010-01-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4721", "doc-id": "RFC4253", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "   o  The minimum size of a TCP/IP header is 32 bytes.  Thus, the\r\n      increase is actually from 33 to 51 bytes (roughly).\r\n\r\n   o  The minimum size of the data field of an Ethernet packet is 46\r\n      bytes [RFC0894].  Thus, the increase is no more than 5 bytes.\r\n      When Ethernet headers are considered, the increase is less than 10\r\n      percent.", "correct_text": "   o  The minimum size of a TCP/IP header is 32 bytes.  Thus, the\r\n      increase is actually from 33 to 60 bytes (roughly).\r\n\r\n   o  The minimum size of the data field of an Ethernet packet is 46\r\n      bytes [RFC0894].  Thus, the increase is no more than 14 bytes.\r\n      When Ethernet headers are considered, the increase is less than 25\r\n      percent.\r\n", "notes": "As the minimum size of SSH message is 28, the minimum size of the TCP segment containing SSH message must be 32 + 28 == 60 bytes (as opposed to 32 + 1 in case of transmission of plain text over TCP).", "submit_date": "2016-06-27", "submitter_name": "Oleg Andriyanov", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 18:02:22"}, {"errata_id": "2371", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "Sections B.5.6.1 and B.5.6.2, on page 25, talk about\r\n[the reliability of] the \"networks\", where the text apparently\r\nshould talk about [the reliability of] the \"transports\"\r\n(3 instances).", "correct_text": "", "notes": "", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2372", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "C.2", "orig_text": "In the ASN.1 module of Section C.2, the IMPORTS clause on page 31\r\ncontains an unneeded object name and ID (perhaps copied-and-pasted\r\nfrom other ASN.1 modules).\r\n\r\nThe current text is:\r\n\r\n     IMPORTS\r\n       LifeDate\r\n|        FROM PolicyToken {1.3.6.1.5.5.12.0.1}\r\n|\r\n|      KeyIdentifier\r\n|        FROM PKIX1Implicit88 { iso(1) identified-organization(3)\r\n|          dod(6) internet(1) security(5) mechanisms(5) pkix(7)\r\n|          id-mod(0) id-pkix1-implicit(19) };\r\n\r\n", "correct_text": "This text should be shortened to just say:\r\n\r\n     IMPORTS\r\n       LifeDate\r\n|        FROM PolicyToken {1.3.6.1.5.5.12.0.1};\r\n", "notes": "", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2028", "doc-id": "RFC5752", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1, pg. 6", "orig_text": "   The following is an example:\r\n\r\n      SignedData\r\n        DigestAlg=sha1,sha256\r\n        SignerInfo1                SignerInfo2\r\n          digestAlg=sha1             digestAlg=sha256\r\n          signatureAlg=dsawithsha1   signatureAlg=ecdsawithsha256\r\n          signedAttrs=               signedAttrs=\r\n            signingTime1               signingTime1\r\n            messageDigest1             messageDigest2\r\n            multiSig1=                 multiSig2=\r\n              bodyHash=sha256           bodyHash=sha1\r\n              signAlg=ecdsawithsha256   signAlg=dsawithsha1\r\n |              signAttrsHash=          signAttrsHash=\r\n |              algID=sha1              algID=sha256\r\n |              hash=value1             hash=value2", "correct_text": "   The following is an example:\r\n\r\n      SignedData\r\n        DigestAlg=sha1,sha256\r\n        SignerInfo1                SignerInfo2\r\n          digestAlg=sha1             digestAlg=sha256\r\n          signatureAlg=dsawithsha1   signatureAlg=ecdsawithsha256\r\n          signedAttrs=               signedAttrs=\r\n            signingTime1               signingTime1\r\n            messageDigest1             messageDigest2\r\n            multiSig1=                 multiSig2=\r\n              bodyHash=sha256           bodyHash=sha1\r\n              signAlg=ecdsawithsha256   signAlg=dsawithsha1\r\n |            signAttrsHash=            signAttrsHash=\r\n |              algID=sha1                algID=sha256\r\n |              hash=value1               hash=value2", "notes": "Rationale:\r\n  Fixed indentation for consistency and clarity\r\n  (visual indication of subordinate elements).", "submit_date": "2010-01-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2029", "doc-id": "RFC5752", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1, pg. 7", "orig_text": "   - The signer MUST:\r\n\r\n     -- Retain the existing signerInfo objects.\r\n\r\n|    -- Include their signerInfo object(s).", "correct_text": "   - The signer MUST:\r\n\r\n     -- Retain the existing signerInfo objects.\r\n\r\n|    -- Include their own signerInfo object(s).", "notes": "Rationale: Remove possible ambiguity of language.\r\n  (Keep for update!)", "submit_date": "2010-01-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2030", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.5, pg.56", "orig_text": " Bringing together the examples above and adding message headers as\r\n appropriate, a hex dump of the first 317 bytes of the example File\r\n constructed above would appear as in the annotated Figure 10 below.\r\n\r\n...\r\n\r\n\r\n   144: D6 C7 58 BE 44 E6 60 06 4E 78 74 AE 7D 00 00 00\r\n\r\n   176:|00 0A 00 50 47 0A B6 E5 00 00 00 01 00 00 00 01\r\n      [^ second message header (length 80 bytes) -->\r\n   192:|01 01 00 0E 00 47 0A B6 B9 47 0C 07 1B 00|01 02\r\n      [^ time window rec -> [ session detail rec ^ -->\r\n   208: 00 1C 00 C0 00 02 1E 0C 00 02 1F 80 01 12 83 84\r\n\r\n   224: 0A 47 0A B6 E5 47 0C 07 48 00|01 03 00 18 00 3E\r\n           [ message checksum record ^ -->\r\n   240: 2B 37 08 CE B2 0E 30 11 32 12 4A 5F E3 AD DB 00\r\n\r\n   256:|00 0A 05 10 47 0A B6 E5 00 00 00 06 00 00 00 01\r\n      [^ third message header (length 1296 bytes) -->\r\n   272:|01 00 04 E6|47 0A B6 B9 C0 00 02 02 C0 00 02 03\r\n      [^ set hdr ][^ first data rec -->\r\n   288: 80 02 00 50 06 00 00 46 50 00 00 00 41", "correct_text": " Bringing together the examples above and adding message headers as\r\n appropriate, a hex dump of the first 285 bytes of the example File\r\n constructed above would appear as in the annotated Figure 10 below.\r\n\r\n...\r\n\r\n   144: D6 C7 58 BE 44 E6 60 06 4E 78 74 AE 7D 00 00 00\r\n\r\n   160:|00 0A 00 50 47 0A B6 E5 00 00 00 01 00 00 00 01\r\n      [^ second message header (length 80 bytes) -->\r\n   176:|01 01 00 0E 00 47 0A B6 B9 47 0C 07 1B 00|01 02\r\n      [^ time window rec -> [ session detail rec ^ -->\r\n   192: 00 1C 00 C0 00 02 1E 0C 00 02 1F 80 01 12 83 84\r\n\r\n   208: 0A 47 0A B6 E5 47 0C 07 48 00|01 03 00 18 00 3E\r\n           [ message checksum record ^ -->\r\n   224: 2B 37 08 CE B2 0E 30 11 32 12 4A 5F E3 AD DB 00\r\n\r\n   240:|00 0A 05 10 47 0A B6 E5 00 00 00 06 00 00 00 01\r\n      [^ third message header (length 1296 bytes) -->\r\n   256:|01 00 04 E6|47 0A B6 B9 C0 00 02 02 C0 00 02 03\r\n      [^ set hdr ][^ first data rec -->\r\n   272: 80 02 00 50 06 00 00 46 50 00 00 00 41", "notes": "Should be pretty obvious as total size of the hex dump is only 285 bytes.\r\n\r\nPlease note that the whole Figure 10 is supposed to contain 317 bytes!\r\n\r\n", "submit_date": "2010-02-01", "submitter_name": "Andrei Rohau", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2043", "doc-id": "RFC5582", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   resolver:  A resolver is contacted by a seeker, consults a forest\r\n      mapping server, and then resolves the query using an appropriate\r\n      tree.  Resolvers may cache query results.\r\n\r\n\r\n   tree:  A tree consists of a self-contained hierarchy of authoritative\r\n      mapping servers for a particular service.  Each tree exports its\r\n      coverage region to the forest mapping servers.\r\n", "correct_text": "   resolver:  A resolver is contacted by a seeker, consults a forest\r\n      guide, and then resolves the query using an appropriate\r\n      tree.  Resolvers may cache query results.\r\n\r\n\r\n   tree:  A tree consists of a self-contained hierarchy of authoritative\r\n      mapping servers for a particular service.  Each tree exports its\r\n      coverage region to the forest guide.\r\n", "notes": "The server should be correctly referred to as \"forest guide\", there is no \"forest mapping server\" in the architecture.", "submit_date": "2010-02-12", "submitter_name": "Karl Heinz Wolf", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2044", "doc-id": "RFC2026", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.4", "orig_text": "         The limited permissions granted above are perpetual and will\r\n         not be revoked by the Internet Society or its successors or\r\n         assigns.", "correct_text": "         The limited permissions granted above are perpetual and will\r\n         not be revoked by the Internet Society or its successors or\r\n         assignees.", "notes": "Assigns vs. assignees in the boilerplate text. xml2rfc generates the latter (which appears to be correct), idnits currently allows both variants.\r\n\r\nThe same change needs to be applied in Section 10.3.1 bullet item 7.", "submit_date": "2010-02-15", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2056", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.2.3.", "orig_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 3 represents Random n-out-of-N\r\n     Sampling.\r\n\r\n   * samplingSize and samplingPopulation are of type unsigned32 but are\r\n     compressed down to one octet here.", "correct_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 3 represents Random n-out-of-N\r\n     Sampling.\r\n\r\n   * samplingSize and samplingPopulation are of type unsigned32 but are\r\n     compressed down to one octet here.\r\n\r\n   * IPFIX Reduced Size Encoding [RFC5101] has been used for the\r\n     selectorId field.", "notes": "Addition of \"Reduced Size Encoding\" note per Errata ID 2052.", "submit_date": "2010-02-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2374", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "typo (line folding problem?)\r\n\r\nThe second paragraph of Section 2, on page 7, says:\r\n\r\n   DHHMAC is applicable in a peer-to-peer group where no access to a\r\n   public-key infrastructure can be assumed to be available.  Rather,\r\n   pre- shared master secrets are assumed to be available among the\r\n   entities in such an environment.", "correct_text": "It should say:\r\n\r\n   DHHMAC is applicable in a peer-to-peer group where no access to a\r\n   public-key infrastructure can be assumed to be available.  Rather,\r\n|  pre-shared master secrets are assumed to be available among the\r\n   entities in such an environment.", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2031", "doc-id": "RFC5751", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4.3.2", "orig_text": "   The micalg parameter allows for one-pass processing when the\r\n   signature is being verified.  The value of the micalg parameter is\r\n   dependent on the message digest algorithm(s) used in the calculation\r\n   of the Message Integrity Check.  If multiple message digest\r\n   algorithms are used, they MUST be separated by commas per [MIME-\r\n   SECURE].  The values to be placed in the micalg parameter SHOULD be\r\n   from the following:\r\n\r\n      Algorithm   Value Used\r\n\r\n      MD5         md5\r\n      SHA-1       sha-1\r\n      SHA-224     sha-224\r\n      SHA-256     sha-256\r\n      SHA-384     sha-384\r\n      SHA-512     sha-512\r\n      Any other   (defined separately in algorithm profile or \"unknown\"\r\n                   if not defined)\r\n\r\n   (Historical note: some early implementations of S/MIME emitted and\r\n   expected \"rsa-md5\", \"rsa-sha1\", and \"sha1\" for the micalg parameter.)\r\n   Receiving agents SHOULD be able to recover gracefully from a micalg\r\n   parameter value that they do not recognize.  Future names for this\r\n   parameter will be consistent with the IANA \"Hash Function Textual\r\n   Names\" registry.", "correct_text": "", "notes": "This revision creates a backward compatibility issue with S/MIME v2, S/MIME v3 and S/MIME v3.1 agents.  In each of the previous (obsoleted) standards, they all refer to the micalg for SHA-1 as \"sha1\" and not \"sha-1\".\r\n\r\nThe historical note should mean that v3.2 agents will recognize \"sha1\" as emitted by earlier implementations, but these implementations are unlikely to recognize the micalg value of \"sha-1\" emitted by a v3.2 agent.\r\n\r\nAll previous standards state that receiving agents SHOULD be able to handle this situation gracefully, but when these agents fail to recognize a micalg value, they can no longer perform a \"one-pass processing\". Given that this parameter is \"required\", the most likely implication is that they will fail to verify the signature.\r\n\r\nTo ensure interoperability with clients supporting previous versions, the micalg for SHA-1 MUST remain as \"sha1\", and receiving agents SHOULD also accept \"sha-1\".\r\n\r\nThe micalg parameters values have always been defined as \"SHOULD\", but for interoperability they should be declared as \"MUST\".\n --VERIFIER NOTES-- \nThese changes were introduced for alignment with the names in the IANA \"Hash Function Textual Names\" registry.  Given that the requirements is a SHOULD and the note explains the situation, I do not consider this text in error.", "submit_date": "2010-02-01", "submitter_name": "Derek Edson", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2033", "doc-id": "RFC3986", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3.", "orig_text": "      path-empty    = 0<pchar>\r\n", "correct_text": "      path-empty    = \"\"\r\n", "notes": "According to ABNF, 0<pchar> is interpreted as\r\nzero repeatation of the prose-val: pchar.\r\n\r\nHowever pchar is an non-terminal.\r\nSo I think the production should be follows:\r\n  path-empty = 0pchar\r\n\r\nHowever this production means a empty string.\r\nSo\r\n  path-empty = \"\"\r\nis more clear.\r\n\r\nAppendix A. has also the same production.", "submit_date": "2010-02-05", "submitter_name": "Tanaka Akira", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2034", "doc-id": "RFC4782", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12.1", "orig_text": "   IPv6 Option Number [RFC2460]:\r\n\r\n   HEX         act  chg  rest\r\n   ---         ---  ---  -----\r\n     6          00   1   00110     Quick-Start", "correct_text": "   IPv6 Option Number [RFC2460]:\r\n\r\n   HEX         act  chg  rest\r\n   ---         ---  ---  -----\r\n    26          00   1   00110     Quick-Start", "notes": "In IANA web page http://www.iana.org/assignments/ipv6-parameters values are sorted following rest field, by HEX contains the complete value. The errors appears also in the IANA database.", "submit_date": "2010-02-08", "submitter_name": "Laurent Toutain", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2035", "doc-id": "RFC5230", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4", "orig_text": "   Unless explicitly overridden with a :from parameter, the From field\r\n   SHOULD be set to the address of the owner of the Sieve script.", "correct_text": "   Unless explicitly overridden with a :from parameter, the From field\r\n   SHOULD be set to the address of the owner of the Sieve script.\r\n\r\n   Informative advice: Users often have multiple email addresses, and\r\n   \"the address of the owner of the Sieve script\" may offer a choice\r\n   among several.  If the sieve processor recognizes an address\r\n   belonging to the owner of the Sieve script in the To or Cc fields\r\n   of the input message, then it's better to use that address for the\r\n   From field of the generated message, rather than any other addresses\r\n   the script's owner may also have.", "notes": "The added text represents the intent of the working group for selecting \"the address of the owner\" in cases where the owner has multiple addresses known to the Sieve engine.  Normative text would not be appropriate here, but an informative note clarifies the WG's intent.", "submit_date": "2010-02-08", "submitter_name": "Barry Leiba", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2060", "doc-id": "RFC5008", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "2.  SHA-256 and SHA-256", "correct_text": "2.  SHA-256 and SHA-384", "notes": "The title should reflect SHA-384 as the other hash algorithm.", "submit_date": "2010-03-03", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2061", "doc-id": "RFC2", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Title", "orig_text": "  [unknown title]\r\n\r\n[page 1 missing]\r\n", "correct_text": "   HOST SOFTWARE\r\n\r\n[page 1 missing]\r\n", "notes": "RFC0002 was actually titled \"HOST SOFTWARE\".\r\nThis missing historical information is provided by RFC0003.\r\nSource: http://tools.ietf.org/html/rfc3\r\n---------------------------------\r\n\r\nRFC-3 \"DOCUMENTATION CONVENTIONS\"\r\nSection: \"OTHER NOTES\"\r\n\r\nQuote: \r\n\"Two notes (1 & 2) have been written so far.  These are both titled HOST Software and are by Steve Crocker and Bill Duvall, separately.\"", "submit_date": "2010-03-03", "submitter_name": "Hsu Yun-Che", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2037", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2.1.2", "orig_text": "   Note that a previously valid article number MAY become invalid if the\r\n   article has been removed.  A previously invalid article number MAY\r\n   become valid if the article has been reinstated, but this article\r\n   number MUST be no less than the reported low water mark for that\r\n   group.", "correct_text": "   Note that a previously valid article number MAY cease to refer to any\r\n   article if that article has been removed, in which case use of that\r\n   article number (explicitly or implicitly) will cause a 423 response.  A\r\n   previously removed article may be reinstated (but its number MUST be no\r\n   less than the reported low water mark for that group), in which case\r\n   that number will once again refer to that article.", "notes": "The paragraph is misusing the term \"invalid article number\".  The wording should have been something like the corrected text, suggested by Clive Feather.", "submit_date": "2010-02-10", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2038", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   5.  The \"DURATION\" property can no longer appear in \"VFREEBUSY\"\r\n       components.\r\n\r\nA.2. Restrictions Removed", "correct_text": "   5.  The \"DURATION\" property can no longer appear in \"VFREEBUSY\"\r\n       components.\r\n\r\n   6.  Use of the \"charset\" Content-Type parameter in MIME transports \r\n       is now mandatory.\r\n\r\nA.2. Restrictions Removed", "notes": "One change is missing from the list of changes.", "submit_date": "2010-02-10", "submitter_name": "Arnout Engelen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2057", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.2.4.", "orig_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 4 represents Uniform Probabilistic\r\n     Sampling.\r\n\r\n   * samplingProbability is of type float64 but is compressed down to a\r\n     float32 here.", "correct_text": "   Notes:\r\n\r\n   * A selectorAlgorithm value of 4 represents Uniform Probabilistic\r\n     Sampling.\r\n\r\n   * samplingProbability is of type float64 but is compressed down to a\r\n     float32 here.\r\n\r\n   * IPFIX Reduced Size Encoding [RFC5101] has been used for the\r\n     selectorId field.", "notes": "Addition of \"Reduced Size Encoding\" note per Errata ID 2052.", "submit_date": "2010-02-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2045", "doc-id": "RFC2397", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "3. Syntax\r\n\r\n\r\n       dataurl    := \"data:\" [ mediatype ] [ \";base64\" ] \",\" data\r\n       mediatype  := [ type \"/\" subtype ] *( \";\" parameter )\r\n       data       := *urlchar\r\n       parameter  := attribute \"=\" value\r\n\r\n   where \"urlchar\" is imported from [RFC2396], and \"type\", \"subtype\",\r\n   \"attribute\" and \"value\" are the corresponding tokens from [RFC2045],\r\n   represented using URL escaped encoding of [RFC2396] as necessary.", "correct_text": "3. Syntax\r\n\r\n\r\n       dataurl    := \"data:\" [ mediatype ] [ \";base64\" ] \",\" data\r\n       mediatype  := [ type \"/\" subtype ] *( \";\" parameter )\r\n       data       := *uric\r\n       parameter  := attribute \"=\" value\r\n\r\n   where \"uric\" is imported from [RFC2396], and \"type\", \"subtype\",\r\n   \"attribute\" and \"value\" are the corresponding tokens from [RFC2045],\r\n   represented using URL escaped encoding of [RFC2396] as necessary.", "notes": "\"urlchar\" is not defined in RFC2396, but \"uric\" is (which I think is what was supposed to be used).", "submit_date": "2010-02-17", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2046", "doc-id": "RFC5340", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.8.1", "orig_text": "   o  In Step 2, when a router Vertex V has just been added to the\r\n      shortest-path tree, there may be multiple LSAs associated with the\r\n      router.  All router-LSAs with the Advertising Router set to V's\r\n      OSPF Router ID MUST be processed as an aggregate, treating them as\r\n      fragments of a single large router-LSA.  The Options field and the\r\n\r\n\r\n\r\n\r\nColtun, et al.              Standards Track                    [Page 45]\r\n^L\r\nRFC 5340                     OSPF for IPv6                     July 2008\r\n\r\n\r\n      router type bits (bits Nt, V, E, and B) should always be taken\r\n      from the router-LSA with the smallest Link State ID.\r\n\r\n   o  Step 2a is not needed in IPv6, as there are no longer stub network\r\n      links in router-LSAs.\r\n\r\n   o  In Step 2b, if W is a router and the router-LSA V6-bit or R-bit is\r\n      not set in the LSA options, the transit link W is ignored and V's\r\n      next link is examined.\r\n", "correct_text": "   o  In Step 2, when a router Vertex V has just been added to the\r\n      shortest-path tree and the router-LSA R-bit is not set in the\r\n      LSA options, Vertex V's links are ignored and the next vertex on\r\n      the candidate list should be examined as described in Step 3.\r\n\r\n\r\n\r\nColtun, et al.              Standards Track                    [Page 45]\r\n^L\r\nRFC 5340                     OSPF for IPv6                     July 2008\r\n\r\n\r\n   o  Also In Step 2, when a router Vertex V has just been added to the\r\n      shortest-path tree, there may be multiple LSAs associated with the\r\n      router.  All router-LSAs with the Advertising Router set to V's\r\n      OSPF Router ID MUST be processed as an aggregate, treating them as\r\n      fragments of a single large router-LSA.  The Options field and the\r\n      router type bits (bits Nt, V, E, and B) should always be taken\r\n      from the router-LSA with the smallest Link State ID.\r\n\r\n   o  Step 2a is not needed in IPv6, as there are no longer stub network\r\n      links in router-LSAs.\r\n\r\n   o  In Step 2b, if W is a router and the router-LSA V6-bit is not set\r\n      in the LSA options, the transit link to W is ignored and V's next\r\n      link is examined.\r\n\r\n", "notes": "This changes reflects the fact that the R-bit and the V6-bit should not be handled identically. The R-bit allows the router to participate in the IPv6 unicast topology but does not allow transit traffic. The V6-bit doesn't allow either. This problem was pointed out by Balaji Ganesh.\n --VERIFIER NOTES-- \nThis has been superseded by Errata 2078\r\n", "submit_date": "2010-02-17", "submitter_name": "Acee Lindem", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2047", "doc-id": "RFC3022", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "... sends the packet to it's primary router. ...\r\n=========================>                      ", "correct_text": "... sends the packet to its primary router. ...", "notes": "it's => its: use possessive form, not contraction", "submit_date": "2010-02-21", "submitter_name": "cloengard", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2048", "doc-id": "RFC3279", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.5", "orig_text": "      id-characteristic-two-basis OBJECT IDENTIFIER ::= {\r\n           characteristic-two-field basisType(1) }", "correct_text": "      id-characteristic-two-basis OBJECT IDENTIFIER ::= {\r\n           characteristic-two-field basisType(3) }\r\n", "notes": "Note that this bug is only in Section 2.3.5; the ASN.1 module in Section 3 has the correct OID.", "submit_date": "2009-10-12", "submitter_name": "Jim Wigginton", "verifier_id": "", "verifier_name": "Pasi Eronen", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2049", "doc-id": "RFC2661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1.2", "orig_text": "DSLAM\r\n\r\nDigital Subscriber Line (DSL) Access Module", "correct_text": "DSLAM\r\n\r\nDigital Subscriber Line (DSL) Access Multiplexer", "notes": "I think 'Multiplexer' is more appropriate", "submit_date": "2010-02-22", "submitter_name": "Wang Haojian", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2050", "doc-id": "RFC3959", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "UASs using the offer/answer exchange that will carry regular media\r\nfor sending and receiving early media can cause media clipping, as\r\ndescribed in Section 2.1.1 of [8].", "correct_text": "UASs using the offer/answer exchange that will carry regular media \r\nfor sending and receiving early media can cause media clipping, as \r\ndescribed in Section 2 of [8].", "notes": "There is no section 2.1.1 in RFC 3960 (=reference [8]).", "submit_date": "2010-02-24", "submitter_name": "Daniel Rudolph", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2051", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "26.3.1", "orig_text": "   Proxy servers, redirect\r\n   servers, and registrars SHOULD possess a site certificate whose\r\n   subject corresponds to their canonical hostname. ", "correct_text": "   Proxy servers, redirect\r\n   servers, and registrars SHOULD possess a site certificate whose\r\n   subject corresponds to the DNS name other SIP devices will use to reach them. ", "notes": "The term hostname seemed to make some people think if you had two sip servers for the domain example.com with hostnames host1 and host2, the the cert should have host1.example.com when in fact the sip signaling always used exmaple.com and the cert should have a example.com as the name.", "submit_date": "2010-02-24", "submitter_name": "Cullen Jennings", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2052", "doc-id": "RFC5477", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1.2", "orig_text": "Abstract Data Type:  unsigned16", "correct_text": "Abstract Data Type:  unsigned64", "notes": "Change selectorID from 16 bits to 64 bits per discussion on the IPFIX mailing list:\r\n\r\nhttp://www.ietf.org/mail-archive/web/ipfix/current/msg05133.html", "submit_date": "2010-02-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2315", "doc-id": "RFC4740", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.5.4", "orig_text": "      SIP-Authorization ::= < AVP Header: 380 >\r\n                            { Digest-Username }\r\n                            { Digest-Realm }\r\n                            { Digest-Nonce }\r\n                            { Digest-URI }\r\n                            { Digest-Response }\r\n                            [ Digest-Algorithm ]\r\n                            [ Digest-CNonce ]\r\n                            [ Digest-Opaque ]\r\n                            [ Digest-QoP ]\r\n                            [ Digest-Nonce-Count ]\r\n                            [ Digest-Method]\r\n                            [ Digest-Entity-Body-Hash ]\r\n                          * [ Digest-Auth-Param ]\r\n                          * [ AVP ]", "correct_text": "      SIP-Authorization ::= < AVP Header: 380 >\r\n                        ***    [ Digest-Username ]\r\n                        ***    [ Digest-Realm ]\r\n                        ***    [ Digest-Nonce ]\r\n                            { Digest-URI }\r\n                        ***    [ Digest-Response ]\r\n                            [ Digest-Algorithm ]\r\n                            [ Digest-CNonce ]\r\n                            [ Digest-Opaque ]\r\n                            [ Digest-QoP ]\r\n                            [ Digest-Nonce-Count ]\r\n                            [ Digest-Method]\r\n                            [ Digest-Entity-Body-Hash ]\r\n                          * [ Digest-Auth-Param ]\r\n                          * [ AVP ]", "notes": "According to RFC5090, defining Digest Authentication, we only have Digest-Method and Digest-URI during the first round trip.\r\nAs it is possible to add a Digest-Realm and Digest-Username, it is impossible to add a Digest-Nonce in the first round trip! The nonce is calculated in the diameter server so the RADIUS/Diameter gateway can't add a nonce when the first request arrive. This problem is not limited to Radius/Diameter gateway, a diameter peer can't add a nonce during the first MAR/MAA.\r\n\r\nMaybe I was no clear enough in my explanation, since I am implementing Diameter-SIP now, I am sure there is a problem. I am available if you need more details or explanation.\n --VERIFIER NOTES-- \nThe errata is wrong.\r\n\r\nThe SIP-Authorization AVP carries the content of the Authorization header provided by the user in the SIP request.\r\nAs you can see below, the content of the \r\n\r\n       credentials      = \"Digest\" digest-response\r\n       digest-response  = 1#( username | realm | nonce | digest-uri\r\n                       | response | [ algorithm ] | [cnonce] |\r\n                       [opaque] | [message-qop] |\r\n                           [nonce-count]  | [auth-param] )\r\n\r\nAnd username, realm, nonce, digest-uri, response are mandatory parameters in this header.\r\nSo the syntax is correct.\r\n\r\n   ", "submit_date": "2010-06-28", "submitter_name": "Alexandre Westfahl", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2062", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.10.6.1.3", "orig_text": "A reply that consists only of the Sequence operation with the error NFS4ERR_FALSE_RETRY.\r\n\r\nWhen the replier detects a false retry, it is permitted (but not always obligated) to return NFS4ERR_FALSE_RETRY...\r\n\r\nIf the replier determines the users are different between the original request and a retry, then the replier MUST return NFS4ERR_FALSE_RETRY.\r\n\r\n...current minor version (e.g., SETCLIENTID), the replier MAY return NFS4ERR_FALSE_RETRY...\r\n\r\nThe difference is due to NFS4ERR_FALSE_RETRY being a valid error for only Sequence operations...", "correct_text": "A reply that consists only of the Sequence operation with the error NFS4ERR_SEQ_FALSE_RETRY.\r\n\r\nWhen the replier detects a false retry, it is permitted (but not always obligated) to return NFS4ERR_SEQ_FALSE_RETRY...\r\n\r\nIf the replier determines the users are different between the original request and a retry, then the replier MUST return NFS4ERR_SEQ_FALSE_RETRY.\r\n\r\n...current minor version (e.g., SETCLIENTID), the replier MAY return NFS4ERR_SEQ_FALSE_RETRY...\r\n\r\nThe difference is due to NFS4ERR_SEQ_FALSE_RETRY being a valid error for only Sequence operations...", "notes": "References to NFS4ERR_FALSE_RETRY instead of NFS4ERR_SEQ_FALSE_RETRY", "submit_date": "2010-03-04", "submitter_name": "Peter Varga", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2063", "doc-id": "RFC5272", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": " EnrollmentMessageSyntax\r\n { iso(1) identified-organization(3) dod(4) internet(1)\r\n security(5) mechansims(5) pkix(7) id-mod(0) id-mod-cmc2002(23) }", "correct_text": " EnrollmentMessageSyntax\r\n { iso(1) identified-organization(3) dod(6) internet(1)\r\n security(5) mechansims(5) pkix(7) id-mod(0) id-mod-cmc2002(23) }", "notes": "ASN.1 Object Identifiers are assigned based on the number not the name, this means that the current module is assigned in a name space that is not under our control.", "submit_date": "2010-03-04", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2064", "doc-id": "RFC5794", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B says:", "orig_text": "AriaModesOfOperation {\r\n   iso(1) member-body(2) korea(400) nsri(200046) algorithm (1)\r\n   symmetric-encryption-algorithm(1) asn1-module(0) alg-oids(0) }", "correct_text": "AriaModesOfOperation {\r\n   iso(1) member-body(2) korea(410) nsri(200046) algorithm (1)\r\n   symmetric-encryption-algorithm(1) asn1-module(0) alg-oids(0) }", "notes": "A typo\r\n\r\nOLD: korea(400)\r\nNEW: korea(410)", "submit_date": "2010-03-04", "submitter_name": "Jungkeun Lee", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2065", "doc-id": "RFC4666", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.8.2", "orig_text": "The Notify message contains the following parameters:\r\n\r\n      Status                     Mandatory\r\n      ASP Identifier             Conditional\r\n      Routing Context            Optional\r\n      INFO String                Optional\r\n", "correct_text": "The Notify message contains the following parameters:\r\n\r\n      Status                     Mandatory\r\n      ASP Identifier             Conditional\r\n      Routing Context            Conditional <Changed>\r\n      INFO String                Optional\r\n", "notes": "Considering the scenario below I think the Routing Context in Notify must be conditional.\r\n\r\nIf ASP1 is Actively processing traffic for both AS1(Override) and AS2(Loadshare) and another ASP2 of AS1 becomes ACTIVE. Then I think it becomes mandatory for SG to send Notify message (\"Alternate ASP Active\") with AS1 Routing Context. ASP1 will use this Notify (containing AS1 Routing Context) to become INACTIVE for AS1, without this AS1 Routing Context ASP1 will become INACTIVE for both AS1 and AS2, which is not desired here. \r\n\r\nAlso please go through mailing list with subject line \"M3UA Notification and Routing Context\" for more on this.", "submit_date": "2010-03-04", "submitter_name": "AMIR KHAN", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2066", "doc-id": "RFC5774", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1, 6th para", "orig_text": "   Section 3.4 of [RFC4776] also contains instructions on the creation\r\n|  of civic address considerations documents on page 8.  This document\r\n   updates that section and replaces said instructions with Sections 4\r\n   and 5 of this memo.\r\n", "correct_text": "   Section 3.4 of [RFC4776] also contains instructions on the creation\r\n|  of civic address considerations documents on page 9.  This document\r\n   updates that section and replaces said instructions with Sections 4\r\n   and 5 of this memo.\r\n", "notes": "Rationale:\r\n This indeed refers to the second paragraph on page _9_ of RFC 4776.", "submit_date": "2010-03-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2067", "doc-id": "RFC4757", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.3", "orig_text": "// Encrypt the data (if encrypting)\r\n\r\n                   if (encrypt)\r\n                           RC4(Kcrypt, data);\r\n\r\n                   // Save first 8 octets of HMAC Sgn_Cksum\r\n\r\n                   Sgn_Cksum = HMAC(Ksign, Sgn_Cksum);\r\n                   memcpy(Token.SGN_CKSUM, Sgn_Cksum, 8);\r\n", "correct_text": "// Encrypt the data (if encrypting)\r\n\r\n                   if (encrypt)\r\n                           RC4(Kcrypt, data);\r\n\r\n                    // Sum the padding buffer\r\n \r\n                   Sgn_Cksum += MD5(padding);\r\n\r\n                   // Encrypt the padding (if encrypting)\r\n\r\n                   if (padding)\r\n                           RC4(Kcrypt, padding);\r\n\r\n                  // Save first 8 octets of HMAC Sgn_Cksum\r\n\r\n                   Sgn_Cksum = HMAC(Ksign, Sgn_Cksum);\r\n                   memcpy(Token.SGN_CKSUM, Sgn_Cksum, 8);\r\n", "notes": "WRAP missing padding\n --VERIFIER NOTES-- \nTurns out padding is already included in data, so Errata 1674, which I just approved, covers this.  I verified this with Magnus Nystrom.", "submit_date": "2010-03-05", "submitter_name": "Michiko Short", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2068", "doc-id": "RFC1948", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "References", "orig_text": "   [6]  Jacobson, V., Braden, R., and L. Zhang, \"TCP Extension for\r\n        High-Speed Paths\", RFC 1885, October 1990.", "correct_text": "   [6]  Jacobson, V., Braden, R., and L. Zhang, \"TCP Extension for\r\n        High-Speed Paths\", RFC 1185, October 1990.", "notes": "RFC 1185 has been obsoleted by RFC 1323. RFC 1323 is currently being revised.", "submit_date": "2010-03-05", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2069", "doc-id": "RFC5275", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "CMC-CONTROL, EXTENDED-FAILURE-INFO\r\nFROM EnrollmentMessageSyntax\r\n    { iso(1) identified-organization(3) dod(4) internet(1) security(5)\r\n    mechansims(5) pkix(7) id-mod(0) id-mod-cmc2002-02(53) }", "correct_text": "CMC-CONTROL, EXTENDED-FAILURE-INFO\r\nFROM EnrollmentMessageSyntax\r\n    { iso(1) identified-organization(3) dod(6) internet(1) security(5)\r\n    mechanisms(5) pkix(7) id-mod(0) id-mod-cmc2002-02(53) }", "notes": "We corrected the object identifier to place it into the correct tree in RFC 5272, this means that it needs to get corrected here were it is imported.", "submit_date": "2010-03-06", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7762", "doc-id": "RFC3561", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.7.", "orig_text": "(iii)     the sequence numbers are the same, but the route is is\r\n             marked as inactive, or", "correct_text": "(iii)     the sequence numbers are the same, but the route is\r\n             marked as inactive, or", "notes": "Grammar mistake: Duplicated \"is\"", "submit_date": "2024-01-14", "submitter_name": "Heiko Kiesel", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-16 18:20:41"}, {"errata_id": "2076", "doc-id": "RFC5738", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8, 4th para", "orig_text": "|  Up-conversion of MIME header encoding of the following headers MUST\r\n   also be implemented: Subject, Date ([RFC5322] comments only),\r\n   Comments, Keywords, and Content-Description.\r\n", "correct_text": "|  Up-conversion of MIME header encoding of the following header fields\r\n   MUST also be implemented: Subject, Date ([RFC5322] comments only),\r\n   Comments, Keywords, and Content-Description.\r\n", "notes": "Rationale: precise use of IETF standard terminology.\r\n\r\nNote:  Further nits in this RFC (keep for update):\r\n\r\n-  Section 5, last line\r\n\r\n      ... Section 2.3 of SASLprep RFC 4013 [RFC4013].\r\n\r\n   should better say: \r\n\r\n      ... Section 2.3 of SASLprep (RFC 4013 [RFC4013]).\r\n\r\n-  Section 10 (2 instances):\r\n\r\n      This adds ...\r\n\r\n   should better say:\r\n\r\n      This RFC adds ...\r\n\r\n-  Section 12.1 -- unexpected line break in Ref. [RFC2231] :\r\n\r\n   [RFC2231]  Freed, N. and K. Moore, \"MIME Parameter Value and Encoded\r\n              Word Extensions:\r\n              Character Sets, Languages, and Continuations\", RFC 2231,\r\n              November 1997.\r\n\r\n   should say:\r\n\r\n   [RFC2231]  Freed, N. and K. Moore, \"MIME Parameter Value and Encoded\r\n              Word Extensions: Character Sets, Languages, and\r\n              Continuations\", RFC 2231, November 1997.", "submit_date": "2010-03-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2077", "doc-id": "RFC5616", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7 (pg. 27)", "orig_text": " |           ..., and between the client the media server.\r\n                                        ^", "correct_text": "|            ..., and between the client and the media server.\r\n                                        ^^^^^", "notes": "", "submit_date": "2010-03-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2078", "doc-id": "RFC5340", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.8.1", "orig_text": "   o  In Step 2, when a router Vertex V has just been added to the\r\n      shortest-path tree, there may be multiple LSAs associated with the\r\n      router.  All router-LSAs with the Advertising Router set to V's\r\n      OSPF Router ID MUST be processed as an aggregate, treating them as\r\n      fragments of a single large router-LSA.  The Options field and the\r\n\r\n\r\n\r\n\r\nColtun, et al.              Standards Track                    [Page 45]\r\n^L\r\nRFC 5340                     OSPF for IPv6                     July 2008\r\n\r\n\r\n      router type bits (bits Nt, V, E, and B) should always be taken\r\n      from the router-LSA with the smallest Link State ID.\r\n\r\n   o  Step 2a is not needed in IPv6, as there are no longer stub network\r\n      links in router-LSAs.\r\n\r\n   o  In Step 2b, if W is a router and the router-LSA V6-bit or R-bit is\r\n      not set in the LSA options, the transit link W is ignored and V's\r\n      next link is examined.\r\n\r\n", "correct_text": "   o  In Step 2, when a router Vertex V other than the root (which is\r\n      the router doing the calculation) has just been added to the\r\n      shortest-path tree and the router-LSA R-bit is not set in the\r\n      LSA options, Vertex V's links are ignored and the next vertex on\r\n      the candidate list should be examined as described in Step 3.\r\n\r\n\r\n\r\nColtun, et al.              Standards Track                    [Page 45]\r\n^L\r\nRFC 5340                     OSPF for IPv6                     July 2008\r\n\r\n\r\n   o  Also In Step 2, when a router Vertex V has just been added to the\r\n      shortest-path tree, there may be multiple LSAs associated with the\r\n      router.  All router-LSAs with the Advertising Router set to V's\r\n      OSPF Router ID MUST be processed as an aggregate, treating them as\r\n      fragments of a single large router-LSA.  The Options field and the\r\n      router type bits (bits Nt, V, E, and B) should always be taken\r\n      from the router-LSA with the smallest Link State ID.\r\n\r\n   o  Step 2a is not needed in IPv6, as there are no longer stub network\r\n      links in router-LSAs.\r\n\r\n   o  In Step 2b, if W is a router and the router-LSA V6-bit is not set\r\n      in the LSA options, the transit link to W is ignored and V's next\r\n      link is examined.\r\n", "notes": "This change corrects errata 2046 described below: \r\n\r\nThis change reflects the fact that the R-bit and the V6-bit should not be    handled identically. The R-bit allows the router to participate in the IPv6 unicast topology but does not allow transit traffic. The V6-bit doesn't allow either. This problem was pointed out by Balaji Ganesh.\r\n\r\nMichael Barnes brought up the fact that the R-Bit should be ignored in the Router-LSA for the calculating router. This errata fixes this omission in the first paragraph of the corrected text.", "submit_date": "2010-03-17", "submitter_name": "Acee Lindem", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2079", "doc-id": "RFC4717", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "       -ii. If the ALL5 PDU is scrambled using ATM security standards, a\r\n            PE will not be able to extract the ALL5 SDU, and therefore\r\n            the whole PDU will be dropped.", "correct_text": "       -ii. If the AAL5 PDU is scrambled using ATM security standards, a\r\n            PE will not be able to extract the AAL5 SDU, and therefore\r\n            the whole PDU will be dropped.", "notes": "", "submit_date": "2010-03-18", "submitter_name": "Hu Haitao", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2080", "doc-id": "RFC1065", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Each such subject type is uniquely named by its OBJECT IDENTIFIER and \r\nalso has a textual name,", "correct_text": "Each such object type is uniquely named by its OBJECT IDENTIFIER and \r\nalso has a textual name,", "notes": "The word \"subject\" should be replaced by the word \"object\" in the referred context", "submit_date": "2010-03-19", "submitter_name": "Vivek Gupta", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2081", "doc-id": "RFC2154", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "Because of these properties of OSFP routing, an AS can\r\n   contain signed and unsigned areas, and achieve a predictable level of\r\n   authentication.\r\n", "correct_text": "Because of these properties of OSPF routing, an AS can\r\n   contain signed and unsigned areas, and achieve a predictable level of\r\n   authentication.\r\n", "notes": "s/OSFP/OSPF", "submit_date": "2010-03-19", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Ross Callon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2316", "doc-id": "RFC3168", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "15", "orig_text": "   [RFC2408]    Maughan, D., Schertler, M., Schneider, M. and J. Turner,\r\n                \"Internet Security Association and Key Management\r\n                Protocol (ISAKMP)\", RFC 2409, November 1998.", "correct_text": "   [RFC2408]    Maughan, D., Schertler, M., Schneider, M. and J. Turner,\r\n                \"Internet Security Association and Key Management\r\n                Protocol (ISAKMP)\", RFC 2408, November 1998.", "notes": "Incorrect reference to RFC 2409", "submit_date": "2010-06-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2125", "doc-id": "RFC5479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.4.3", "orig_text": "|  In SRTP, a cryptographic context is defined as the SSRC, destination\r\n|  network address, and destination transport port number.  Whereas RTP,\r\n|  a flow is defined as the destination network address and destination\r\n   transport port number.  This results in a problem -- how to\r\n   communicate the SSRC so that the SSRC can be used for the\r\n   cryptographic context.\r\n", "correct_text": "|  In SRTP, a cryptographic context is defined by the SSRC, destination\r\n|  network address, and destination transport port number, whereas in RTP,\r\n|  a flow is defined by the destination network address and destination\r\n   transport port number.  This results in a problem -- how to\r\n   communicate the SSRC so that the SSRC can be used for the\r\n   cryptographic context.\r\n", "notes": "Rationale: clarification/language improvement -- keep for update!", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2126", "doc-id": "RFC5479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.5.3", "orig_text": "[[ 4th paragraph: ]]\r\n\r\n   Currently, several techniques are commonly considered as candidates\r\n|  to provide opportunistic encryption:\r\n", "correct_text": "   Currently, several techniques are commonly considered as candidates\r\n|  to provide best effort encryption:\r\n", "notes": "Rationales: consistency with section headline.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2127", "doc-id": "RFC5659", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.*", "orig_text": "a)\r\n5.1.1.  Forwarding\r\n\r\nb)\r\n5.1.2.  Native Service Processing\r\n", "correct_text": "a)\r\n5.2.  Forwarding\r\n\r\nb)\r\n\r\n5.3.  Native Service Processing\r\n", "notes": "Rationale:\r\n  Obviously, the sections numbered 5.1.1 and 5.1.2  are _not_\r\n  subordinate to section   5.1.  Pseudowire Pre-Processing,\r\n  but of a sibling level.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2082", "doc-id": "RFC5639", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2, pg. 25", "orig_text": "|  1.  Set h = find_integer_2(s).\r\n|\r\n|  2.  Convert h to an integer A.\r\n\r\n   3.  If -3 = A*Z^4 mod p is not solvable, then set s = update_seed(s)\r\n       and go to Step 1.\r\n\r\n   4.  Compute one solution Z of -3 = A*Z^4 mod p.\r\n\r\n   5.  Set s = update_seed(s).\r\n\r\n   6.  Set B = find_integer_2(s).\r\n\r\n   7.  If B is a square mod p, then set s = update_seed(s) and go to\r\n       Step 6.\r\n\r\n   8.  If 4*A^3 + 27*B^2 = 0 mod p, then set s = update_seed(s) and go\r\n       to Step 1.\r\n\r\n   9.  Check that the elliptic curve E over GF(p) given by y^2 = x^3 +\r\n       A*x + B fulfills all security and functional requirements given\r\n       in Section 3.  If not, then set s = update_seed(s) and go to Step\r\n       1.\r\n\r\n   10. Set s = update_seed(s).\r\n\r\n   11. Set k = find_integer_2(s).\r\n\r\n   12. Determine the points Q and -Q having the smallest x-coordinate in\r\n       E(GF(p)).  Randomly select one of them as point P.\r\n\r\n", "correct_text": "|  1.  Set A = find_integer_2(s).\r\n|\r\n   2.  If -3 = A*Z^4 mod p is not solvable, then set s = update_seed(s)\r\n       and go to Step 1.\r\n\r\n   3.  Compute one solution Z of -3 = A*Z^4 mod p.\r\n\r\n   4.  Set s = update_seed(s).\r\n\r\n   5.  Set B = find_integer_2(s).\r\n\r\n   6.  If B is a square mod p, then set s = update_seed(s) and go to\r\n       Step 5.\r\n\r\n   7.  If 4*A^3 + 27*B^2 = 0 mod p, then set s = update_seed(s) and go\r\n       to Step 1.\r\n\r\n   8.  Check that the elliptic curve E over GF(p) given by y^2 = x^3 +\r\n       A*x + B fulfills all security and functional requirements given\r\n       in Section 3.  If not, then set s = update_seed(s) and go to Step\r\n       1.\r\n\r\n   9.  Set s = update_seed(s).\r\n\r\n   10. Set k = find_integer_2(s).\r\n\r\n   11. Determine the points Q and -Q having the smallest x-coordinate in\r\n       E(GF(p)).  Randomly select one of them as point P.\r\n\r\n", "notes": "Rationale:\r\n  According to the first part of A.2, the routine find_integer_2()\r\n  returns an integer value (see also original step 6.).\r\n  Thus, step 2 should be deleted, and 'h' is not needed.\r\n  Note that merely renumbered steps are not taagged with\r\n  a change bar above.\r\n\r\nUpdated 2013-06-06. Thanks to Edward Huff for the correction.", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2083", "doc-id": "RFC5639", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1,1st para", "orig_text": "   This RFC specifies elliptic curve domain parameters over prime fields\r\n   GF(p) with p having a length of 160, 192, 224, 256, 320, 384, and 512\r\n   bits.  These parameters were generated in a pseudo-random, yet\r\n   completely systematic and reproducible, way and have been verified to\r\n   resist current cryptanalytic approaches.  The parameters are\r\n   compliant with ANSI X9.62 [ANSI1] and ANSI X9.63 [ANSI2], ISO/IEC\r\n   14888 [ISO1] and ISO/IEC 15946 [ISO2], ETSI TS 102 176-1 [ETSI], as\r\n|  well as with FIPS-186-2 [FIPS], and the Efficient Cryptography Group\r\n   (SECG) specifications ([SEC1] and [SEC2]).\r\n\r\n", "correct_text": "   This RFC specifies elliptic curve domain parameters over prime fields\r\n   GF(p) with p having a length of 160, 192, 224, 256, 320, 384, and 512\r\n   bits.  These parameters were generated in a pseudo-random, yet\r\n   completely systematic and reproducible, way and have been verified to\r\n   resist current cryptanalytic approaches.  The parameters are\r\n   compliant with ANSI X9.62 [ANSI1] and ANSI X9.63 [ANSI2], ISO/IEC\r\n   14888 [ISO1] and ISO/IEC 15946 [ISO2], ETSI TS 102 176-1 [ETSI], as\r\n|  well as with FIPS-186-2 [FIPS], and the Standards for Efficient\r\n   Cryptography Group (SECG) specifications ([SEC1] and [SEC2]).\r\n\r\n", "notes": "Rationale: incomplete expansion of acronym.\r\n\r\nAdditional note:\r\n  In Section 7.2, two of the references quoted here should perhaps\r\n  better point to the current versions of the documents:\r\n\r\n   [SEC1]   \"SEC1: Elliptic Curve Cryptography\",\r\n            Version 2.0, May 2009.\r\n\r\n   [FIPS]   NIST, \"Digital Signature Standard (DSS)\",\r\n            FIPS PUB 186-3, November 2008.", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2084", "doc-id": "RFC5639", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.,1st para", "orig_text": "   Throughout this memo, let p > 3 be a prime and GF(p) a finite field\r\n|  (sometimes also referred to as Galois Field or GF(p)) with p\r\n   elements.  [...]", "correct_text": "   Throughout this memo, let p > 3 be a prime and GF(p) a finite field\r\n|  (sometimes also referred to as Galois Field or F_p) with p elements.\r\n   [...]\r\n\r\nor perhaps more precisely:\r\n\r\n   Throughout this memo, let p > 3 be a prime and GF(p) a finite field\r\n|  (Galois Field) with p elements (sometimes also referred to as F_p). \r\n   [...]\r\n\r\n", "notes": "Rationale: \r\n  ... GF(p) ... sometimes also referred to as ... GF(p) ...\r\ndoes no make sense.\r\nThe original version from the draft did make sense -- mentioning\r\n_another_ common notion, \"F_p\".", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4615", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.5", "orig_text": "   DIAMETER_AVP_UNSUPPORTED 5001\r\n\r\n      The peer received a message that contained an AVP that is not\r\n      recognized or supported and was marked with the 'M' (Mandatory)\r\n      bit.  A Diameter message with this error MUST contain one or more\r\n      Failed-AVP AVPs containing the AVPs that caused the failure.", "correct_text": "   DIAMETER_AVP_UNSUPPORTED 5001\r\n\r\n      The peer received a message that contained an AVP that is not\r\n      recognized or supported and was marked with the 'M' (Mandatory)\r\n      bit.  A Diameter message with this error MUST contain one \r\n      Failed-AVP AVP containing the AVPs that caused the failure.", "notes": "The RFC6733 has clarified that only one instance of Failed-AVP AVP can be present in the command answer. One Failed-AVP AVP is enough because this AVP is defined as Grouped AVP that can contain multiple AVPs. In the present case, each of the nested AVPs in the Failed-AVP AVP are the AVPs that caused the failure.", "submit_date": "2016-02-05", "submitter_name": "Lionel Morand", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2093", "doc-id": "RFC5735", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   Address blocks that were reserved for a special purpose in RFC 3330\r\n   but are no longer reserved for any special purpose and are available\r\n|  for allocation are no longer listed in Sections 4 or 5.  The\r\n   following blocks have become available:\r\n", "correct_text": "   Address blocks that were reserved for a special purpose in RFC 3330\r\n   but are no longer reserved for any special purpose and are available\r\n|  for allocation are no longer listed in Sections 3 and 4.  The\r\n   following blocks have become available:\r\n", "notes": "Rationale: Adjust internal references.\r\n\r\nFurther:\r\n Under the above introduction, the 6th and 7th bullet are misplaced;\r\n they do not refer to address blocks that \"bave become available\" and\r\n are no longer listed, they mention _newly assigned_ address blocks.\r\n\r\nThus, to avoid confusion, the final part of the Appendix,\r\n\r\n   -  191.255.0.0/16 is not reserved and is subject to future allocation\r\n      by a RIR for assignment in the normal manner.\r\n\r\n   -  198.51.100.0/24 is assigned as \"TEST-NET-2\" for use in\r\n      documentation and example code.\r\n\r\n   -  203.0.113.0/24 is assigned as \"TEST-NET-3\" for use in\r\n      documentation and example code.\r\n\r\n   -  223.255.255.0/24 is not reserved and is subject to future\r\n      allocation by an RIR for assignment in the normal manner.\r\n\r\nshould better say:\r\n\r\n   -  191.255.0.0/16 is not reserved and is subject to future allocation\r\n      by a RIR for assignment in the normal manner.\r\n\r\n   -  223.255.255.0/24 is not reserved and is subject to future\r\n      allocation by an RIR for assignment in the normal manner.\r\n\r\n   Two address blocks were reserved for special purpose since RFC 3330\r\n   and have been added to Sections 3 and 4:\r\n\r\n   -  198.51.100.0/24 is assigned as \"TEST-NET-2\" for use in\r\n      documentation and example code.\r\n\r\n   -  203.0.113.0/24 is assigned as \"TEST-NET-3\" for use in\r\n      documentation and example code.", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2128", "doc-id": "RFC5659", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6., pg.15", "orig_text": "                       [...]  The receiving S-PE swaps the existing PW\r\n   demultiplexer for the demultiplexer of the next segment and then\r\n|  sends the PDU over transport tunnel in PSN2.  [...]", "correct_text": "                       [...]  The receiving S-PE swaps the existing PW\r\n   demultiplexer for the demultiplexer of the next segment and then\r\n|  sends the PDU over the transport tunnel in PSN2.  [...]", "notes": "Rationale: missing article.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2085", "doc-id": "RFC5786", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.", "orig_text": "   IANA has assigned the Node Attribute TLV (value 5) type from the\r\n   range 3-32767 as specified in [RFC3630], from the top level types in\r\n|  TE LSAs registry maintained by IANA at http://www.iana.org.\r\n\r\n   IANA has created and now maintains the registry for the sub-TLVs of\r\n|   the Node Attribute TLV.  Value 1 is reserved for Node IPv4 Local\r\n|  Address sub-TLV and value 2 for Node IPv6 Local Address sub-TLV.\r\n\r\n   [...]\r\n\r\n      o  Types in the range 32778-65535 are not to be assigned at this\r\n         time.  Before any assignments can be made in this range, there\r\n         MUST be a Standards Track RFC that specifies IANA\r\n|        Considerations that covers the range being assigned.\r\n", "correct_text": "   IANA has assigned the Node Attribute TLV (value 5) type from the\r\n   range 3-32767 as specified in [RFC3630], from the top level types in\r\n|  the TE LSAs registry maintained by IANA at http://www.iana.org.\r\n\r\n   IANA has created and now maintains the registry for the sub-TLVs of\r\n|  the Node Attribute TLV.  Value 1 is assigned to the Node IPv4 Local\r\n|  Address sub-TLV and value 2 to the Node IPv6 Local Address sub-TLV.\r\n\r\n   [...]\r\n\r\n      o  Types in the range 32778-65535 are not to be assigned at this\r\n         time.  Before any assignments can be made in this range, there\r\n         MUST be a Standards Track RFC that specifies IANA\r\n|        Considerations that cover the range being assigned.\r\n", "notes": "Rationale:\r\na)  missing article\r\nb)  confusing use of \"reserved\"; IANA has _assigned_ these 2 values\r\nc)  singular/plural mismatch", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2086", "doc-id": "RFC5784", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6, pg.12", "orig_text": "   Registrant Contact:  IETF Sieve working group\r\n                        <ietf-mta-filters@imc.org>\r\n", "correct_text": "   Registrant Contact:  IETF Sieve working group\r\n                        <sieve@ietf.org>\r\n", "notes": "Rationale:\r\nThe 'sieve' mailing list has moved to the IETF.ORG site on 2009-08-19,\r\naccording to:\r\n  <http://www.IETF.ORG/mail-archive/web/sieve/current/msg00565.html>.", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2087", "doc-id": "RFC5749", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2., pg. 4", "orig_text": "   DSUSRK\r\n      Domain-Specific Usage-Specific Root Key.  A root key that is\r\n|     derived from the DSRK; see [RFC5295].\r\n", "correct_text": "   DSUSRK\r\n      Domain-Specific Usage-Specific Root Key.  A root key that is\r\n|     derived from a DSRK; see [RFC5295].\r\n", "notes": "Rationale: There can be different DSRKs (cf. Figure 1 on page 6);\r\nhence use of the definite article here could be confusing.", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2088", "doc-id": "RFC5749", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2,2nd para", "orig_text": "                              [...].  EAP-Initiate/Re-auth-Start\r\n|  messages send to the peer will be silently dropped by the peer\r\n   causing further waste of resources.\r\n", "correct_text": "                              [...].  EAP-Initiate/Re-auth-Start\r\n|  messages sent to the peer will be silently dropped by the peer\r\n   causing further waste of resources.\r\n", "notes": "", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2089", "doc-id": "RFC5739", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5,2nd para", "orig_text": "   All other attributes except INTERNAL_IP6_ADDRESS (and\r\n|  INTENAL_ADDRESS_EXPIRY) from [IKEv2] remain valid, including the\r\n   somewhat confusingly named INTERNAL_IP6_SUBNET (see Section 6.3 of\r\n   [RFC4718] for discussion).\r\n", "correct_text": "   All other attributes except INTERNAL_IP6_ADDRESS (and\r\n|  INTERNAL_ADDRESS_EXPIRY) from [IKEv2] remain valid, including the\r\n   somewhat confusingly named INTERNAL_IP6_SUBNET (see Section 6.3 of\r\n   [RFC4718] for discussion).\r\n", "notes": "Rationale: Technically significant spelling error.", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2090", "doc-id": "RFC5739", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3,1st para", "orig_text": "             [...].  However, if the same peers are also using IPsec/\r\n   IKEv2 for other uses (with addresses not assigned inside IKEv2), they\r\n   would also have SPD entries and PAD Child SA Authorization Data that\r\n|  is not related to the virtual link.\r\n", "correct_text": "             [...].  However, if the same peers are also using IPsec/\r\n   IKEv2 for other uses (with addresses not assigned inside IKEv2), they\r\n   would also have SPD entries and PAD Child SA Authorization Data that\r\n|  are not related to the virtual link.\r\n", "notes": "Rationale: Grammar: \"SPD entries and ... Data ... are ...\"", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2091", "doc-id": "RFC5727", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.", "orig_text": "[ 4th para of section, at the bottom of page 11: ]\r\n  \r\n|                                   [...], at the discretion the\r\n   Designated Expert).  Short forms of header fields MUST only be\r\n   assigned to Standards Track header fields.\r\n", "correct_text": "|                                   [...], at the discretion of the\r\n   Designated Expert).  Short forms of header fields MUST only be\r\n   assigned to Standards Track header fields.\r\n", "notes": "Rationale:  missing word \"of\".\r\n\r\nRemark -- another nit (keep for update): \r\nThe trailing period is missing from the first paragraph of Section 1.", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2092", "doc-id": "RFC5735", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7., 2nd para", "orig_text": "|  It should also be noted that some of these address spaces may be used\r\n   legitimately outside a single administrative domain, and may appear\r\n   on the global Internet.  [...]", "correct_text": "|  It should also be noted that some of these address blocks may be used\r\n   legitimately outside a single administrative domain, and may appear\r\n   on the global Internet.  [...]", "notes": "Rationale: Consistent use of terminology\r\n (cf. Abstract, Sections 3 through 5, 1st para of same section).", "submit_date": "2010-03-21", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2129", "doc-id": "RFC4678", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.6.2", "orig_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |   Set LB State Reply (0x1025) | Size of Set LB State Reply TLV|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Return Code  |\r\n      +-+-+-+-+-+-+-+-+", "correct_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |   Set LB State Reply (0x1055) | Size of Set LB State Reply TLV|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Return Code  |\r\n      +-+-+-+-+-+-+-+-+", "notes": "Assuming the correct values are in section 4.2.\r\n\r\nfrom pending", "submit_date": "2006-11-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3259", "doc-id": "RFC5912", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "CRLReason ::= INTEGER", "correct_text": "IMPORTS\r\nCRLReason\r\nFROM PKIX1Implicit-2009", "notes": "CRLReason is correctly defined in section 14 \"ASN.1 Module for RFC 5280, Explicit and Implicit\" as:\r\n  CRLReason ::= ENUMERATED { \u2026 }\r\n\r\nIt is incorrectly re-defined in section 4 \"ASN.1 Module for RFC 2560\" (OCSP) as an INTEGER. It should import the correct definition instead.\r\nENUMERATED and INTEGER are similar, but not the same. They are BER-encoded differently (with a tags of 0x0A and 0x02 respectively).", "submit_date": "2012-06-14", "submitter_name": "James Manger", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2096", "doc-id": "RFC3954", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3 and 6.2.", "orig_text": "   Padding\r\n         The Exporter SHOULD insert some padding bytes so that the\r\n         subsequent FlowSet starts at a 4-byte aligned boundary.  It is\r\n         important to note that the Length field includes the padding\r\n         bytes.  Padding SHOULD be using zeros.", "correct_text": "   Padding\r\n         The Exporter SHOULD insert some padding bytes so that the\r\n         subsequent FlowSet starts at a 4-byte aligned boundary.  It is\r\n         important to note that the Length field includes the padding\r\n         bytes.  The padding length MUST be shorter than any allowable\r\n         record in the Set.  Padding SHOULD be using zeros.\r\n", "notes": "Addition of \"The padding length MUST be shorter than any allowable record in the Set.\"\r\n\r\nWith small field sizes, such that the record size <= 3, it's not possible to distinguish padding from further data records (s 5.3) or options data records (s 6.2).\r\n\r\neg, with a record length of 3, three records will consume 9 octets. Three octets of padding will be added to this, giving a total length of 12 octets. The 12 octets now look like *four* records. In this case, padding is NOT appropriate.\r\n\r\nNB1 the same paragraph in section 6.1 is NOT affected, because the fixed size of the other fields dictates that the only possibility is padding of 2 octets.\r\n\r\nNB2 this situation is anticipated in IPFIX (RFC 5101), from which the additional text is taken.", "submit_date": "2010-03-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2097", "doc-id": "RFC5546", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.6", "orig_text": "   +--------------------+----------+-----------------------------------+\r\n   | Component/Property | Presence | Comment                           |\r\n   +--------------------+----------+-----------------------------------+\r\n   |                    |          |                                   |\r\n   | ...                |          |                                   |\r\n   |                    |          |                                   |\r\n   |   ORGANIZER        | 0        |                                   |", "correct_text": "   +--------------------+----------+-----------------------------------+\r\n   | Component/Property | Presence | Comment                           |\r\n   +--------------------+----------+-----------------------------------+\r\n   |                    |          |                                   |\r\n   | ...                |          |                                   |\r\n   |                    |          |                                   |\r\n   |   ORGANIZER        | 1        |                                   |", "notes": "The \"ORGANIZER\" property should be REQUIRED in \"VTODO\" calendar components with the \"REFRESH\" method.", "submit_date": "2010-03-29", "submitter_name": "Bernard Desruisseaux", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2098", "doc-id": "RFC3264", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "10", "orig_text": "10.1 Basic Exchange\r\n\r\n   Assume that the caller, Alice, has included the following description\r\n   in her offer.  It includes a bidirectional audio stream and two\r\n   bidirectional video streams, using H.261 (payload type 31) and MPEG\r\n   (payload type 32).  The offered SDP is:\r\n\r\n   v=0\r\n   o=alice 2890844526 2890844526 IN IP4 host.anywhere.com\r\n   s=\r\n   c=IN IP4 host.anywhere.com\r\n   t=0 0\r\n   m=audio 49170 RTP/AVP 0\r\n   a=rtpmap:0 PCMU/8000\r\n   m=video 51372 RTP/AVP 31\r\n   a=rtpmap:31 H261/90000\r\n   m=video 53000 RTP/AVP 32\r\n   a=rtpmap:32 MPV/90000", "correct_text": "10.1 Basic Exchange\r\n\r\n   Assume that the caller, Alice, has included the following description\r\n   in her offer.  It includes a bidirectional audio stream and two\r\n   bidirectional video streams, using H.261 (payload type 31) and MPEG\r\n   (payload type 32).  The offered SDP is:\r\n\r\n   v=0\r\n   o=alice 2890844526 2890844526 IN IP4 host.anywhere.com\r\n   s=-\r\n   c=IN IP4 host.anywhere.com\r\n   t=0 0\r\n   m=audio 49170 RTP/AVP 0\r\n   a=rtpmap:0 PCMU/8000\r\n   m=video 51372 RTP/AVP 31\r\n   a=rtpmap:31 H261/90000\r\n   m=video 53000 RTP/AVP 32\r\n   a=rtpmap:32 MPV/90000", "notes": "The s= session name must have some values as per RFC 4566 Sec 5.3.\r\n----------------------------------------------------------------\r\nRFC 4566\r\n5.3.  Session Name (\"s=\")\r\n\r\n      s=<session name>\r\n\r\n   The \"s=\" field is the textual session name.  There MUST be one and\r\n   only one \"s=\" field per session description.  The \"s=\" field MUST NOT\r\n   be empty and SHOULD contain ISO 10646 characters (but see also the\r\n   \"a=charset\" attribute).  If a session has no meaningful name, the\r\n   value \"s= \" SHOULD be used (i.e., a single space as the session  name).\r\n----------------------------------------------------------------\r\nRFC 3264 also states in Section 5\r\n\"Unfortunately, SDP does not allow the \"s=\" line to be empty.\"\r\n\r\nEven if we put \"s= \" , it becomes a bit difficult to read/understand in soft/printed copy.\r\n\r\nThe same error applies to all SDP examples given in Section 10", "submit_date": "2010-03-30", "submitter_name": "Parveen Verma", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2099", "doc-id": "RFC3264", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9", "orig_text": "   v=0\r\n   o=carol 28908764872 28908764872 IN IP4 100.3.6.6\r\n   s=-\r\n   t=0 0\r\n   c=IN IP4 192.0.2.4\r\n   m=audio 0 RTP/AVP 0 1 3\r\n   a=rtpmap:0 PCMU/8000\r\n   a=rtpmap:1 1016/8000\r\n   a=rtpmap:3 GSM/8000\r\n   m=video 0 RTP/AVP 31 34\r\n   a=rtpmap:31 H261/90000\r\n   a=rtpmap:34 H263/90000\r\n\r\n   Figure 1: SDP Indicating Capabilities\r\n\r\n", "correct_text": "   v=0\r\n   o=carol 28908764872 28908764872 IN IP4 100.3.6.6\r\n   s=-\r\n   c=IN IP4 192.0.2.4\r\n   t=0 0\r\n   m=audio 0 RTP/AVP 0 1 3\r\n   a=rtpmap:0 PCMU/8000\r\n   a=rtpmap:1 1016/8000\r\n   a=rtpmap:3 GSM/8000\r\n   m=video 0 RTP/AVP 31 34\r\n   a=rtpmap:31 H261/90000\r\n   a=rtpmap:34 H263/90000\r\n\r\n   Figure 1: SDP Indicating Capabilities\r\n\r\n", "notes": "Location of \"c=\" line is invalid per RFC 2327 and RFC 4566.  The corrected text reflects the \"c=\" line within a valid location.", "submit_date": "2010-03-30", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2100", "doc-id": "RFC5608", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "Inactivity-Timeout", "correct_text": "Idle-Timeout", "notes": "This change should be made to both occurrences in Section 2.3.  The list of attributes in section 3 correctly lists the Idle-Timeout attribute.", "submit_date": "2010-03-31", "submitter_name": "Martin Bj\u00f6rklund", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2101", "doc-id": "RFC3588", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "header           = \"<\" Diameter-Header:\" command-id\r\n                      [r-bit] [p-bit] [e-bit] [application-id]\">\"", "correct_text": "header           = \"<Diameter-Header:\" command-id\r\n                      [r-bit] [p-bit] [e-bit] [application-id]\">\"", "notes": "", "submit_date": "2010-03-31", "submitter_name": "Diego Rosario Brogna", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2102", "doc-id": "RFC1141", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Header", "orig_text": "Network Working Group\r\nRequest for Comments: 1141\r\nObsoletes: RFC 1071", "correct_text": "Network Working Group\r\nRequest for Comments: 1141\r\nUpdates: RFC 1071", "notes": "The RFC-Editor said RFC 1141 updates and does not obsolete RFC 1071.", "submit_date": "2010-04-01", "submitter_name": "Alexander Zimmermann", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4722", "doc-id": "RFC7854", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1 4.8 7", "orig_text": "Stats Reports", "correct_text": "Statistics Reports", "notes": "The message of type 1 is called \"Statistics Report\" in the IANA registry https://www.iana.org/assignments/bmp-parameters/bmp-parameters.xml#message-types (I used it as the reference) and in sections 4.1 and 10.1 but \"Stats Report\" in sections 3.1, 4.8 and 7.", "submit_date": "2016-06-28", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2103", "doc-id": "RFC4857", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "8.1.  Regional Registration Flag\r\n\r\n   The only change to the Mobility Agent Advertisement Extension defined\r\n   in [RFC3344] is a flag indicating that the domain, to which the FA\r\n   generating the Agent Advertisement belongs, supports regional\r\n   registrations.  The flag is inserted after the flags defined in\r\n   [RFC3344], [RFC3024], and [RFC3519].\r\n\r\n   Regional Registration flag:\r\n\r\n        0                   1                   2                   3\r\n        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       |     Type      |    Length     |        Sequence Number        |\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       |           Lifetime            |R|B|H|F|M|G|r|T|U|I| reserved  |\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       |                  zero or more Care-of Addresses               |\r\n       |                              ...                              |\r\n\r\n   The flag is defined as follows:\r\n\r\n            Type    16 (Mobility Agent Advertisement)\r\n\r\n            I       Regional Registration.  This domain supports\r\n                    regional registration as specified in this document.\r\n\r\n", "correct_text": "8.1.  Regional Registration Flag\r\n\r\n   The only change to the Mobility Agent Advertisement Extension defined\r\n   in [RFC3344] is a flag indicating that the domain, to which the FA\r\n   generating the Agent Advertisement belongs, supports regional\r\n   registrations.  The flag is inserted after the flags defined in\r\n   [RFC3344], [RFC3024], [RFC3519], and [RFC3543].\r\n\r\n   Regional Registration flag:\r\n\r\n        0                   1                   2                   3\r\n        0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       |     Type      |    Length     |        Sequence Number        |\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       |           Lifetime            |R|B|H|F|M|G|r|T|U|X|I|reserved |\r\n       +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       |                  zero or more Care-of Addresses               |\r\n       |                              ...                              |\r\n\r\n   The flag is defined as follows:\r\n\r\n            Type    16 (Mobility Agent Advertisement)\r\n\r\n            I       Regional Registration.  This domain supports\r\n                    regional registration as specified in this document.\r\n\r\n", "notes": "Bit 10 was already allocated by RFC 3543.  We need to move the 'I' bit one position to the right, and also add a reference to RFC 3543 in the References section.", "submit_date": "2010-04-01", "submitter_name": "Pete McCann", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2104", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1", "orig_text": "obs-unstruct    =   *((*LF *CR *(obs-utext *LF *CR)) / FWS)", "correct_text": "obs-unstruct    =   *(*LF *CR (obs-utext / FWS)) *LF *CR\r\n                    ;The CR of a following CRLF MUST NOT be consumed.", "notes": "[I was notified, that errata report 1766 and 1908 has been verified, but apparently, report 1905 was left undecided.  I am a bit concerned, because this report points to a true defect of RFC 5322, so, maybe, a clearer reasoning helps.  This report is meant to replace my former posting 1905.]\r\n\r\nThe <obs-unstruct> rule covers field bodies of unstructured fields (as declared in section 2.2.1), that conform to obsoleted RFC 2822 or RFC 822.  It is only to be used for downward compatibility when reading messages.  It corresponds to <text> in RFC 822 and <obs-utext> in RFC 2822.  In a conforming message, an unstructured field body is always followed by a field delimiting non-folding CRLF.\r\n\r\n<obs-unstruct> is equivalent to *(d0-d127), so the CRLF delimiting the field is made part of the field body, as is the rest of the header section.\r\n\r\nSo my proposal refines the rule: Use any, possibly empty, sequence of ASCII characters, as long as it does not contain a CRLF outside of a folding white space.\r\n\r\nThere is a nuisance left: when applied possessively, the CR of the adjacent field delimiter CRLF is consumed as well.  This cannot be overcome, no matter how you rewrite the rule, because the ABNF in RFC 5324 is not rich enough to express something like \"consume all but one CR\".  A higher level construct like \"obs-unstruct CRLF\" must enforce a back-tracking step on the part of <obs-unstruct> in order to match.  That is why I added the comment.\n --VERIFIER NOTES-- \nDuplicate of erratum 1905, which I believe is correct as stated.   ", "submit_date": "2010-04-02", "submitter_name": "Wolf Lammen", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2107", "doc-id": "RFC5795", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1, pg. 5", "orig_text": "[[  1st paragraph on page 5: ]]\r\n\r\n|  RFC 3095 [RFC3095] defines the ROHC framework along with an initial\r\n   set of compression profiles.  [...]", "correct_text": "|  RFC 3095 [RFC3095] defined the ROHC framework along with an initial\r\n   set of compression profiles.  [...]", "notes": "Rationale: This is already the 2nd revision of RFC 3095;\r\n  therefore, the adjusted temporal form better reflects\r\n  the current state of the art.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2108", "doc-id": "RFC5795", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "[[  last paragraph on page 9: ]]\r\n\r\n|  An enhanced variant of CRTP, called eCRTP [RFC3545], means to improve\r\n   the robustness of CRTP in the presence of reordering and packet\r\n   losses, while keeping the protocol almost unchanged from CRTP.  As a\r\n   result, eCRTP does provide better means to implement some degree of\r\n   robustness, albeit at the expense of additional overhead, leading to\r\n   a reduction in compression efficiency in comparison to CRTP.", "correct_text": "|  An enhanced variant of CRTP, called eCRTP [RFC3545], introduces means\r\n   to improve the robustness of CRTP in the presence of reordering and\r\n   packet losses, while keeping the protocol almost unchanged from CRTP.\r\n   As a result, eCRTP does provide better means to implement some degree\r\n   of robustness, albeit at the expense of additional overhead, leading\r\n   to a reduction in compression efficiency in comparison to CRTP.", "notes": "Rationale: missing verb (legacy).\n --VERIFIER NOTES-- \nReject, but make note to improve this text in next update\r\n   ", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2302", "doc-id": "RFC5847", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1, pg. 5", "orig_text": "   A PMIPv6 node (MAG or LMA) matches every received Heartbeat Response\r\n   to the Heartbeat Request sent using the sequence number.  Before\r\n   sending the next Heartbeat Request, it increments a local variable\r\n<< page break >>\r\n|  MISSING_HEARTBEAT if it has not received a Heartbeat Response for the\r\n|  previous request.  When this local variable MISSING_HEARTBEAT exceeds\r\n   a configurable parameter MISSING_HEARTBEATS_ALLOWED, the PMIPv6 node\r\n   concludes that the peer PMIPv6 node is not reachable.  If a Heartbeat\r\n!  Response message is received, the MISSING_HEARTBEATS counter is\r\n   reset.", "correct_text": "   A PMIPv6 node (MAG or LMA) matches every received Heartbeat Response\r\n   to the Heartbeat Request sent using the sequence number.  Before\r\n   sending the next Heartbeat Request, it increments a local variable\r\n|  MISSING_HEARTBEATS if it has not received a Heartbeat Response for \r\n|  the previous request.  When this local variable MISSING_HEARTBEATS \r\n   exceeds a configurable parameter MISSING_HEARTBEATS_ALLOWED, the\r\n   PMIPv6 node concludes that the peer PMIPv6 node is not reachable.\r\n   If a Heartbeat Response message is received, the MISSING_HEARTBEATS\r\n   counter is reset.", "notes": "Rationale:\r\n  The RFC text varies between singular and plural form of the name\r\n  of the local variable.  A single name is necessary for consistency.\r\n  Paraphrasing from MIB doctor guidelines, counter variables should \r\n  always be in plural form.  Additionally, the related configurable\r\n  parameter is called \"MISSING_HEARTBEATS_ALLOWED \" in the RFC.\r\n  Therefore, \"MISSING_HEARTBEATS\" is chosen above as the appropriate\r\n  form and the instances of \"MISSING_HEARTBEAT\" are changed to the\r\n  plural form.", "submit_date": "2010-06-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5902", "doc-id": "RFC3125", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A.2", "orig_text": "CommitmentType ::= SEQUENCE {\r\n        identifier                      CommitmentTypeIdentifier,\r\n        fieldOfApplication      [0] FieldOfApplication OPTIONAL,\r\n        semantics               [1] DirectoryString OPTIONAL }", "correct_text": "CommitmentType ::= SEQUENCE {\r\n        identifier                      CommitmentTypeIdentifier,\r\n        fieldOfApplication      [0] FieldOfApplication OPTIONAL,\r\n        semantics               [1] DirectoryString OPTIONAL }\r\n\r\nCommitmentTypeIdentifier ::= OBJECT IDENTIFIER\r\n", "notes": "The CommitmentTypeIdentifier definition is missing from the ASN.1 module.  RFC 3126 shows that it is an object identifier.", "submit_date": "2019-11-12", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 01:59:08"}, {"errata_id": "2109", "doc-id": "RFC5795", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.1.2, pg.17", "orig_text": "[[  first paragraph on page 17: ]]\r\n\r\n   PROFILES: Set of non-negative integers, where each integer indicates\r\n   a profile supported by both the compressor and the decompressor.  A\r\n|  profile is identified by a 16-bit value, where the 8 LSB bits\r\n|  indicate the actual profile, and the 8 MSB bits indicate the variant\r\n   of that profile.  The ROHC compressed header format identifies the\r\n|  profile used with only the 8 LSB bits; this means that if multiple\r\n   variants of the same profile are available for a ROHC channel, the\r\n   PROFILES set after negotiation MUST NOT include more than one variant\r\n   of the same profile.  The compressor MUST NOT compress using a\r\n   profile that is not in PROFILES.", "correct_text": "   PROFILES:  Set of non-negative integers, where each integer indicates\r\n   a profile supported by both the compressor and the decompressor.  A\r\n|  profile is identified by a 16-bit value, where the 8 LSBs indicate\r\n|  the actual profile, and the 8 MSBs indicate the variant of that\r\n   profile.  The ROHC compressed header format identifies the profile\r\n|  used with only the 8 LSBs; this means that if multiple variants of\r\n   the same profile are available for a ROHC channel, the PROFILES set\r\n   after negotiation MUST NOT include more than one variant of the same\r\n   profile.  The compressor MUST NOT compress using a profile that is\r\n   not in PROFILES.", "notes": "Rationale:  Abuse of language;\r\n  the acronym definitions in Section 2.1 clearly say:\r\n     LSB    Least Significant Bit.\r\n     ...\r\n     MSB    Most Significant Bit.\n --VERIFIER NOTES-- \nproposed change is somewhat pedantic; it actually might reduce readability for some readers   ", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2110", "doc-id": "RFC5795", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.5.2", "orig_text": "[[  at the bottom of page 27: ]]\r\n\r\n|  Header: See Section 5.2.1\r\n\r\n|  Payload: See Section 5.2.1\r\n\r\n|  CRC: 32-bit CRC computed using the polynomial of Section 5.3.1.4", "correct_text": "\r\n|  Header: See Section 5.2.1.\r\n\r\n|  Payload: See Section 5.2.1.\r\n\r\n|  CRC: 32-bit CRC computed using the polynomial of Section 5.3.1.4.", "notes": "Rationale: consistent use of punctuation within the RFC.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2111", "doc-id": "RFC5760", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.4, pg.34", "orig_text": "[[  first paragraph on page 34: ]]\r\n\r\n|  The RTP receiver MUST process the report blocks contained in any RTP\r\n   SR and RR packets to complete its view of the RTP session.\r\n", "correct_text": "|  The RTP receiver MUST process the report blocks contained in any RTCP\r\n   SR and RR packets to complete its view of the RTP session.\r\n", "notes": "Rationale; distinction between RTP and RTCP is significant;\r\n  therefore classified as 'Technical'.", "submit_date": "2010-04-05", "submitter_name": "ALfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2303", "doc-id": "RFC5831", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "[GOST3411]  \"Information technology.  Cryptographic Data Security.\r\n               Hashing function.\", GOST R 34.10-94, Gosudarstvennyi\r\n               Standard of Russian Federation, Government Committee of\r\n               the Russia for Standards, 1994. (In Russian)\r\n", "correct_text": "[GOST3411]  \"Information technology.  Cryptographic Data Security.\r\n               Hashing function.\", GOST R 34.11-94, Gosudarstvennyi\r\n               Standard of Russian Federation, Government Committee of\r\n               the Russia for Standards, 1994. (In Russian)\r\n", "notes": "", "submit_date": "2010-06-17", "submitter_name": "Vasily Dolmatov", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2304", "doc-id": "RFC5832", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "[GOST3411]       \"Information technology.  Cryptographic Data\r\n                    Security.  Hashing function.\", GOST R 34.10-94,\r\n                    Gosudarstvennyi Standard of Russian Federation,\r\n                    Government Committee of Russia for Standards, 1994.\r\n                    (In Russian)\r\n", "correct_text": "[GOST3411]       \"Information technology.  Cryptographic Data\r\n                    Security.  Hashing function.\", GOST R 34.11-94,\r\n                    Gosudarstvennyi Standard of Russian Federation,\r\n                    Government Committee of Russia for Standards, 1994.\r\n                    (In Russian)\r\n", "notes": "", "submit_date": "2010-06-17", "submitter_name": "Vasily Dolmatov", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2305", "doc-id": "RFC2132", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.10.", "orig_text": "The code for the log server option is 8.", "correct_text": "The code for the cookie server option is 8.", "notes": "Copy error.", "submit_date": "2010-06-17", "submitter_name": "Richard Chen", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2306", "doc-id": "RFC2812", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.3", "orig_text": "   Space is used as parameter separator and command is used as a list item\r\n   separator by the protocol). \r\n", "correct_text": "   Space is used as parameter separator and comma is used as a list item\r\n   separator by the protocol). \r\n", "notes": "", "submit_date": "2010-06-18", "submitter_name": "Timo Buhrmester", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2332", "doc-id": "RFC4635", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "top 1st page", "orig_text": "Network Working Group                                    D. Eastlake 3rd\r\nRequest for Comments: 4635                         Motorola Laboratories\r\nCategory: Standards Track                                    August 2006", "correct_text": "Network Working Group                                    D. Eastlake 3rd\r\nRequest for Comments: 4635                         Motorola Laboratories\r\nUpdates 2845\r\nCategory: Standards Track                                    August 2006", "notes": "This RFC, which I authored, clearly updates the Original RFC 2845 for TSIG: It makes it MANDATORY to implement HMAC-SHA1 and HMAC-SHA256 if you claim to support TSIG. It defines a new TSIG error code, BADTRUC, and specifies when it is to be returned. This are *significant* *normative* updates to RFC 2845. The RFC index for 2845 and 4635 should be updated to show this.", "submit_date": "2010-07-19", "submitter_name": "Donald Eastlake 3rd", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7034", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 36 a1 40 00 ff 06 65 9f 0a 0b 0c 0d\r\n     ac 1b 1c 1d e9 d7 00 b3 fb fb ab 5b 11 c1 42 62\r\n     c0 18 01 04 a1 62 00 00 01 01 08 0a 00 15 5a c1\r\n     84 a5 0b eb 1d 10 3d 54 70 64 cf 99 8c c6 c3 15\r\n     c2 c2 e2 bf ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da bf 00 b4 0a 0b 0c 0d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da bf 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 36 a1 40 00 ff 06 65 9f 0a 0b 0c 0d\r\n     ac 1b 1c 1d e9 d7 00 b3 fb fb ab 5b 11 c1 42 62\r\n     c0 18 01 04 8c de 00 00 01 01 08 0a 00 15 5a c1\r\n     84 a5 0b eb 1d 10 3d 54 70 64 cf 99 8c c6 c3 15\r\n     c2 c2 e2 bf ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da bf 00 b4 0a 0b 0c 0d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da bf 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "notes": "The TCP checksum shown (0xa162) is wrong, it should be 0x8cde.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:47:14"}, {"errata_id": "2114", "doc-id": "RFC5760", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.1, pg.40", "orig_text": "|  rtcp-unicast:rsi *(SP <processing>:<rtcp-type>])\r\n\r\n      This attribute MUST be used to indicate the \"Distribution Source\r\n|     Feedback Summary\" model of operation.  In this model, a list or\r\n      parameters may be used to explicitly specify how RTCP packets\r\n      originated by receivers are handled.  Options for processing a\r\n      given RTCP packet type are:\r\n\r\n      aggr:    The Distribution Source has means for aggregating the\r\n               contents of the RTCP packets and will do so.\r\n\r\n|     forward: The Distribution Source will forward the RTCP packet\r\n               unchanged.\r\n\r\n|     term:    The Distribution Source will terminate the RTCP packet.\r\n", "correct_text": "|  rtcp-unicast:rsi *(SP <processing>:<rtcp-type>)\r\n\r\n      This attribute MUST be used to indicate the \"Distribution Source\r\n|     Feedback Summary\" model of operation.  In this model, a list of\r\n      parameters may be used to explicitly specify how RTCP packets\r\n      originated by receivers are handled.  Options for processing a\r\n      given RTCP packet type are:\r\n\r\n      aggr:    The Distribution Source has means for aggregating the\r\n               contents of the RTCP packets and will do so.\r\n\r\n|     forward: The Distribution Source will forward the RTCP packets\r\n               unchanged.\r\n\r\n|     term:    The Distribution Source will terminate the RTCP packets.\r\n", "notes": "Rationale:\r\n\r\na) (Technical):  unmatched \"]\" in syntax rule;\r\n\r\nb) (Editorials):  s/or/of/  , and use plural:  s/packet/packets/", "submit_date": "2010-04-05", "submitter_name": "ALfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2115", "doc-id": "RFC5760", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.4, pg.63", "orig_text": "   Constant value\r\n   Due to the size of the multiplicative factor field being 4 bits, the\r\n|  maximum multiplicative value is 15.\r\n\r\n|  The distribution type field of this packet would be value 1 since it\r\n   represents loss data.\r\n", "correct_text": "   Constant value\r\n   Due to the size of the multiplicative factor field being 4 bits, the\r\n|  maximum multiplicative value is 2^15.\r\n\r\n|  The sub-report block type field of this packet would be value 4\r\n|  since it represents a loss data histogram.\r\n", "notes": "Rationale:\r\n  Apparently evolution of SRBT design for the body of the RFC\r\n  have been missed in the Appendix.\r\n  Changes above serve to obtain consistent use of terms and\r\n  appropriate values.\r\n\r\n  For improved readability, related changes for pp. 64/65 are being\r\n  reported in distinct Errata notes.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2116", "doc-id": "RFC5760", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.4, pg.64", "orig_text": "      The packet fields will contain the values:\r\n\r\n|     Header distribution Block\r\n|     Distribution Type:                       1\r\n      Number of Data Buckets:                  16\r\n      Multiplicative Factor:                   9\r\n      Packet Length field:                     5 (5 * 4 => 20 bytes)\r\n|     Minimum Data Value:                      0\r\n|     Maximum Data Value:                      39\r\n|     Data Bucket values:                      (each value is 16-bits)\r\n", "correct_text": "      The packet fields will contain the values:\r\n\r\n|     RSI reoprt fixed header;\r\n|     -- Sub-report Block --\r\n|     Sub-Report Block Type:                   4 (Loss distribution)\r\n      Number of Data Buckets:                  16\r\n      Multiplicative Factor:                   9\r\n      Packet Length field:                     5 (5 * 4 => 20 bytes)\r\n|     Minimum Distribution Value:              0\r\n|     Maximum Distribution Value:              39\r\n|     Data Bucket values:                      (each value is 4 bits)\r\n", "notes": "Rationale: See preceding reort, eid=2115 !", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2117", "doc-id": "RFC5760", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.4, pg.65", "orig_text": "      The packet fields will contain the values:\r\n\r\n|     Header Distribution Block\r\n|     Distribution Type:                        1\r\n      Number of Data Buckets:                   40\r\n      Multiplicative Factor:                    0\r\n      Packet Length field:                      18 (18 * 4 => 72 bytes)\r\n|     Minimum Loss Value:                       0\r\n|     Maximum Loss Value:                       39\r\n\r\n|     Bucket values are the same as the initial data set.\r\n\r\n|     Result\r\n|     Selecting one of the three methods outlined above might be done by\r\n      a congestion parameter or by user preference.  The overhead\r\n      associated with processing the packets is likely to differ very\r\n      little between the techniques.  The savings in bandwidth are\r\n|     apparent, however, using 20, 52, and 72 octets respectively.\r\n      These values would vary more widely for a larger data set with\r\n      less correlation between results.\r\n", "correct_text": "      The packet fields will contain the values:\r\n\r\n|     RSI report fixed header;\r\n|     -- Sub-report Block --\r\n|     Sub-Report Block Type:                    4 (Loss distribution)\r\n      Number of Data Buckets:                   40\r\n      Multiplicative Factor:                    0\r\n      Packet Length field:                      18 (18 * 4 => 72 bytes)\r\n|     Minimum Distribution Value:               0\r\n|     Maximum Distribution Value:               39\r\n\r\n|     Bucket values are the same as the initial data set, represented\r\n|     in 12 bits each.\r\n\r\n|  Result\r\n|     Selecting one of the two methods outlined above might be done by\r\n      a congestion parameter or by user preference.  The overhead\r\n      associated with processing the packets is likely to differ very\r\n      little between the techniques.  The savings in bandwidth are\r\n|     apparent, however, using 20 and 72 octets respectively.\r\n      These values would vary more widely for a larger data set with\r\n      less correlation between results.\r\n", "notes": "Rationale: See preceding reort, eid=2115 !\r\nAlso, there are only two examples le ft in the published appendix.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2118", "doc-id": "RFC5506", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   This memo discusses benefits and issues that arise when allowing\r\n|  Real-time Transport Protocol (RTCP) packets to be transmitted with\r\n   reduced size.  [...]", "correct_text": "   This memo discusses benefits and issues that arise when allowing\r\n|  Real-time Transport Control Protocol (RTCP) packets to be transmitted\r\n   with reduced size.  [...]", "notes": "Rationale: Consistency with document title (and RFC 3550).", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2119", "doc-id": "RFC5506", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.5", "orig_text": "|  o  Compression of RTCP: No IETF-defined header compression method\r\n      compress RTCP; however, if such methods are developed in the\r\n|     future, these methods must take Reduced-Size RTCP in account.\r\n", "correct_text": "|  o  Compression of RTCP: No IETF-defined header compression methods\r\n      compress RTCP; however, if such methods are developed in the\r\n|     future, these methods must take Reduced-Size RTCP into account.\r\n", "notes": "Rationale: singular/plural mismatch; language improvement.", "submit_date": "2010-04-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2211", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.2.", "orig_text": "   The details of the calculation are different for DSA signatures than\r\n   for RSA signatures.", "correct_text": "   The details of the calculation are different for DSA signatures from\r\n   that for RSA signatures.", "notes": "different from, not different than\n --VERIFIER NOTES-- \nOur research shows that this is a matter of opinion -- in US English grammar, the \u201cdifferent than\u201d is acceptable this way. Jon prefers \u201cdifferent from\u201d (the suggested erratum) and David \u201cdifferent than.\u201d Thus our agreed resolution is to reject, as this is debate over usage, not an actual erratum.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2130", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "TTL             a 32 bit signed integer that specifies the time interval\r\n                that the resource record may be cached before the source\r\n                of the information should again be consulted.  Zero\r\n                values are interpreted to mean that the RR can only be\r\n                used for the transaction in progress, and should not be\r\n                cached.  For example, SOA records are always distributed\r\n                with a zero TTL to prohibit caching.  Zero values can\r\n                also be used for extremely volatile data.\r\n", "correct_text": "TTL             a 32 bit unsigned integer that specifies the time interval\r\n                that the resource record may be cached before the source\r\n                of the information should again be consulted.  Zero\r\n                values are interpreted to mean that the RR can only be\r\n                used for the transaction in progress, and should not be\r\n                cached.  For example, SOA records are always distributed\r\n                with a zero TTL to prohibit caching.  Zero values can\r\n                also be used for extremely volatile data.\r\n", "notes": "Conflicting descriptions of the type of TTL field.\r\n\r\nSection 3.2.1 says \"a 32 bit signed integer\" while section 4.1.3 says \"a 32 bit unsigned integer\".", "submit_date": "2010-04-05", "submitter_name": "Alexei A. Smekalkine", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2131", "doc-id": "RFC4479", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   <presence xmlns=\"urn:ietf:params:xml:ns:pidf\"\r\n    xmlns:dm=\"urn:ietf:params:xml:ns:pidf:data-model\"\r\n    xmlns:rp=\"urn:ietf:params:xml:ns:pidf:rpid\"\r\n    xmlns:caps=\"urn:ietf:params:xml:ns:pidf:caps\"\r\n    xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">", "correct_text": "   <presence xmlns=\"urn:ietf:params:xml:ns:pidf\"\r\n    xmlns:dm=\"urn:ietf:params:xml:ns:pidf:data-model\"\r\n    xmlns:rp=\"urn:ietf:params:xml:ns:pidf:rpid\"\r\n    xmlns:caps=\"urn:ietf:params:xml:ns:pidf:caps\"\r\n    entity=\"pres:presentity@example.com\">", "notes": "The entity attribute of the <presence> element is mandatory.  It contains a URI that identifies the presentity.\r\n\r\nThe namespace prefix binding for \"http://www.w3.org/2001/XMLSchema-instance\" is not used in the example and need not appear.\r\n\r\nNot corrected here: the example uses an undefined URI scheme, mac:, to identify a device.", "submit_date": "2010-04-05", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2132", "doc-id": "RFC5826", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5, pg.15", "orig_text": "[[ bottom lines of page 15: ]]\r\n\r\n                     [...].  The routing protocol(s) MUST deny service\r\n|  to any node that has not clearly established trust with the HC-LLN.\r\n", "correct_text": "                     [...].  The routing protocol(s) MUST deny service\r\n|  to any node that has not clearly established trust with the LLN.\r\n", "notes": "Rationale: The abbreviation \"HC-LLN\" is not defined in the document.\r\n  (Editorial oversight; keep for update!)", "submit_date": "2010-04-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2133", "doc-id": "RFC5036", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5.4", "orig_text": "   NON EXISTENT  Session TCP connection established  INITIALIZED\r\n                 established\r\n\r\n", "correct_text": "   NON EXISTENT  Session TCP connection established  INITIALIZED\r\n\r\n", "notes": "", "submit_date": "2010-04-07", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2134", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   This document is intended to be a source of information about the\r\n   Russian Federal standard for electronic encryption, decryption, and\r\n   message authentication algorithms (GOST 28147-89), which is one of\r\n   the Russian cryptographic standard algorithms called GOST\r\n   algorithms).", "correct_text": "   This document is intended to be a source of information about the\r\n   Russian Federal standard for electronic encryption, decryption, and\r\n   message authentication algorithms (GOST 28147-89), which is one of\r\n   the Russian cryptographic standard algorithms called GOST\r\n   algorithms.", "notes": "", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2135", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   The plain text is divided into 64-bit blocks Tp(1), Tp(2), ..., Tp(M)\r\n   and encrypted in the cipher feedback mode by bitwise addition modulo\r\n   2 in the adder CM5 with the running key Gc generated in 64-bit\r\n   blocks, i.e., Gc(i)=(Gc(1), Gc(2), ..., Gc(M)), where M is defined by\r\n                                                                   ___\r\n   the length of the plain text, Gc(i) is the i-th 64-bit block, i=1,M.\r\n   The number of bits in the block Tp(M) may be less than 64.\r\n", "correct_text": "   The plain text is divided into 64-bit blocks Tp(1), Tp(2), ..., Tp(M)\r\n   and encrypted in the cipher feedback mode by bitwise addition modulo\r\n   2 in the adder CM5 with the running key Gc generated in 64-bit\r\n   blocks, i.e., Gc(i)=(Gc(1), Gc(2), ..., Gc(M)), where M is defined by\r\n   the length of the plain text, Gc(i) is the i-th 64-bit block, i=1,M.\r\n   The number of bits in the block Tp(M) may be less than 64.\r\n", "notes": "", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2136", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   Initialisation vector: initial values of plain parameters of a\r\n   cryptographic transformation algorithm.\r\n", "correct_text": "   Initialization vector: initial values of plain parameters of a\r\n   cryptographic transformation algorithm.\r\n", "notes": "", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2137", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   Cipher: a set of reversible transformations of the set of possible\r\n   plain texts onto the set of encrypted data, made after certain rules\r\n   and using keys.\r\n", "correct_text": "   Cipher: a set of reversible transformations of the set of possible\r\n   plain texts onto the set of encrypted data carried out by specified \r\n   rules with the use of keys.\r\n", "notes": "\"After\" does not mean \"as a result.\"", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2145", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   The plain text is divided into 64-bit blocks Tp(1), Tp(2), ..., Tp(M)\r\n   and encrypted in the cipher feedback mode by bitwise addition modulo\r\n   2 in the adder CM5 with the running key Gc generated in 64-bit\r\n   blocks, i.e., Gc(i)=(Gc(1), Gc(2), ..., Gc(M)), where M is defined by\r\n                                                                   ___\r\n   the length of the plain text, Gc(i) is the i-th 64-bit block, i=1,M.\r\n   The number of bits in the block Tp(M) may be less than 64.\r\n", "correct_text": "   The plain text is divided into 64-bit blocks Tp(1), Tp(2), ..., Tp(M)\r\n   and encrypted in the cipher feedback mode by bitwise addition modulo\r\n   2 in the adder CM5 with the running key Gc generated in 64-bit\r\n   blocks, i.e., Gc(i)=(Gc(1), Gc(2), ..., Gc(M)), where M is defined by\r\n   the length of the plain text, Gc(i) is the i-th 64-bit block, i=1..M.\r\n   The number of bits in the block Tp(M) may be less than 64.\r\n", "notes": "", "submit_date": "2010-04-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2138", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   When writing a key (W1, W2, ..., W256), Wq = 0..1, q = 1..256, in the\r\n   KDS the value:\r\n\r\n   - W1 is written into the 1st bit of the register X0;\r\n\r\n   - the value W2 is written into the 2nd bit of the register X0 (etc.);\r\n\r\n   - the value W32 is written into the 32nd bit of the register X0;\r\n\r\n   - the value W33 is written into the 1st bit of the register X1;\r\n\r\n   - the value W34 is written into the 2nd bit of the register X1\r\n     (etc.);\r\n\r\n   - the value W64 is written into the 32nd bit of the register X1;\r\n\r\n   - the value W65 is written into the 1st bit of the register X2\r\n     (etc.);\r\n\r\n   - the value W256 is written into the 32nd bit of the register X7.\r\n\r\n", "correct_text": "   When writing a key (W1, W2, ..., W256), Wq = 0..1, q = 1..256, in the\r\n   KDS:\r\n\r\n   - the value W1 is written into the 1st bit of the register X0;\r\n\r\n   - the value W2 is written into the 2nd bit of the register X0 (etc.);\r\n\r\n   - the value W32 is written into the 32nd bit of the register X0;\r\n\r\n   - the value W33 is written into the 1st bit of the register X1;\r\n\r\n   - the value W34 is written into the 2nd bit of the register X1\r\n     (etc.);\r\n\r\n   - the value W64 is written into the 32nd bit of the register X1;\r\n\r\n   - the value W65 is written into the 1st bit of the register X2\r\n     (etc.);\r\n\r\n   - the value W256 is written into the 32nd bit of the register X7.\r\n\r\n", "notes": "", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2139", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   The plain text to be encrypted is split into 64-bit blocks.  Input of\r\n   a binary data block Tp = (a1(0), a2(0), ... , a31(0), a32(0), b1(0),\r\n   b2(0), ..., b32(0)) into the registers N1 and N2 is done so that the\r\n   value of a1(0) is put into the first bit of N1, the value of a2(0) is\r\n   put into the second bit of N1, etc., and the value of a32(0) is put\r\n   into the 32nd bit of N1.  The value of b1(0) is put into the first\r\n   bit of N2, the value of b2(0) is put into the 2nd bit of N2, etc.,\r\n   and the value of b32(0) is input into the 32nd bit of N2.\r\n", "correct_text": "   The plain text to be encrypted is split into 64-bit blocks.  Input of\r\n   any binary data block Tp = (a1(0), a2(0), ... , a31(0), a32(0), b1(0),\r\n   b2(0), ..., b32(0)) into the registers N1 and N2 is done so that the\r\n   value of a1(0) is put into the first bit of N1, the value of a2(0) is\r\n   put into the second bit of N1, etc., and the value of a32(0) is put\r\n   into the 32nd bit of N1.  The value of b1(0) is put into the first\r\n   bit of N2, the value of b2(0) is put into the 2nd bit of N2, etc.,\r\n   and the value of b32(0) is input into the 32nd bit of N2.\r\n", "notes": "", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2140", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   The fillings of the adders N1 and N2 after 32 working rounds are a\r\n   plain text block.\r\n", "correct_text": "   After 32 working rounds contents of registers N1 and N2 are a plain text block.", "notes": "N1 and N2 aren't adders.", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2141", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "      A(Tp) is A(a(0), b(0)) = (a(32), b(32)) = Tc.\r\n", "correct_text": "      A(Tp) = A(a(0), b(0)) = (a(32), b(32)) = Tc.\r\n", "notes": "", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2142", "doc-id": "RFC3552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5.2.2", "orig_text": "   Note that if the client has a certificate than SSL-based client\r\n   authentication can be used.  To make this easier, SASL provides the\r\n   EXTERNAL mechanism, whereby the SASL client can tell the server\r\n   \"examine the outer channel for my identity\".  Obviously, this is not\r\n   subject to the layering attacks described above.", "correct_text": "   Note that if the client has a certificate then SSL-based client\r\n   authentication can be used.  To make this easier, SASL provides the\r\n   EXTERNAL mechanism, whereby the SASL client can tell the server\r\n   \"examine the outer channel for my identity\".  Obviously, this is not\r\n   subject to the layering attacks described above.", "notes": "Changed \"than\" to \"then\".", "submit_date": "2010-04-08", "submitter_name": "Lev Novikov", "verifier_id": "", "verifier_name": "Danny McPherson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2143", "doc-id": "RFC5751", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.2", "orig_text": "      Name                   CMS Type                Inner Content\r\n      enveloped-data         EnvelopedData           id-data\r\n      signed-data            SignedData              id-data\r\n      certs-only             SignedData              none\r\n      compressed-data        CompressedData          id-data", "correct_text": "      Name                   CMS Type                Inner Content\r\n      enveloped-data         EnvelopedData           id-data\r\n      signed-data            SignedData              id-data\r\n      certs-only             SignedData              id-data\r\n      compressed-data        CompressedData          id-data", "notes": "The inner content type is not an optional field.  Some inner content type MUST be included, id-data is the correct inner content type to be specified.\r\n\r\nThe balance of the required information is in section 3.7.  It is possible that the fact that id-data is used as the encapsulated content type should be added to the section Step 1 in 3.7", "submit_date": "2010-04-08", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2144", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   The filling of N1 and N2 is encrypted in the electronic codebook mode\r\n   according to the requirements of section 5.1.  The resulting\r\n   encrypted filling of N1 and N2 is the second 64-bit block of the\r\n   running key Gc(2); this block is bitwise added modulo 2 in the adder\r\n   CM5 with the first 64-bit block of the plain text Tp(2).  ", "correct_text": "   The filling of N1 and N2 is encrypted in the electronic codebook mode\r\n   according to the requirements of section 5.1.  The resulting\r\n   encrypted filling of N1 and N2 is the second 64-bit block of the\r\n   running key Gc(2); this block is bitwise added modulo 2 in the adder\r\n   CM5 with the second 64-bit block of the plain text Tp(2).  ", "notes": "", "submit_date": "2010-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2149", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   The initial filling of N1 and N2 (the initialisation vector S) is\r\n   encrypted in the electronic codebook mode in accordance with the\r\n   subsection 6.1.  The encrypted filling of N1, N2 is the first block\r\n   of the running key Gc(1) = A(S), this block is added bitwise modulo 2\r\n   in the adder CM5 with the encrypted data block Tc(1).  This results\r\n   in the first block of plain text Tp(1).\r\n", "correct_text": "   The initial filling of N1 and N2 (the initialisation vector S) is\r\n   encrypted in the electronic codebook mode in accordance with the\r\n   subsection 5.1.  The encrypted filling of N1, N2 is the first block\r\n   of the running key Gc(1) = A(S), this block is added bitwise modulo 2\r\n   in the adder CM5 with the encrypted data block Tc(1).  This results\r\n   in the first block of plain text Tp(1).\r\n", "notes": "", "submit_date": "2010-04-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2150", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   - The first block of plain text:\r\n\r\n      Tp(1) = (t1(1), t1(2), ..., t64(1)) = (a1(1)[0], a2(1)[0], ...,\r\n              a32(1)[0], b1(1)[0], b2(1)[0], ..., b32(1)[0])\r\n", "correct_text": "   The first block of plain text:\r\n\r\n      Tp(1) = (t1(1), t1(2), ..., t64(1)) = (a1(1)[0], a2(1)[0], ...,\r\n              a32(1)[0], b1(1)[0], b2(1)[0], ..., b32(1)[0])\r\n", "notes": "", "submit_date": "2010-04-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2151", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   The filling of N1 and N2 is transformed in accordance with the first\r\n   16 rounds of the encryption algorithm in the electronic codebook mode\r\n   (see the subsection 6.1).  In the KDS, there exists the same key that\r\n   is used for encrypting the blocks of plain text Tp(1), Tp(2), ...,\r\n   Tp(M) in the corresponding blocks of encrypted data Tc(1), Tc(2),\r\n   ..., Tc(M).\r\n", "correct_text": "   The filling of N1 and N2 is transformed in accordance with the first\r\n   16 rounds of the encryption algorithm in the electronic codebook mode\r\n   (see the subsection 5.1).  In the KDS, there exists the same key that\r\n   is used for encrypting the blocks of plain text Tp(1), Tp(2), ...,\r\n   Tp(M) in the corresponding blocks of encrypted data Tc(1), Tc(2),\r\n   ..., Tc(M).\r\n", "notes": "", "submit_date": "2010-04-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2152", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "The block of encrypted data Tc(1) makes the initial filling of N1, N2\r\n   for generating the second block of the running key Gc(2).  The block\r\n   Tc(1) is written in N1 and N2 in accordance with the requirements in\r\n   the subsection 6.1, the resulted block Gc(2) is added bitwise modulo\r\n   2 in the adder CM5 to the second block of the encrypted data Tc(2).\r\n   This results in the block of plain text Tc(2).\r\n", "correct_text": "The block of encrypted data Tc(1) makes the initial filling of N1, N2\r\n   for generating the second block of the running key Gc(2).  The block\r\n   Tc(1) is written in N1 and N2 in accordance with the requirements in\r\n   the subsection 6.1. The filling of N1 and N2 is encrypted in the electronic\r\n   codebook mode according to the requirements of section 5.1. The encrypted\r\n   filling of N1 and N2 makes the second 64-bit block Gc(2) which is added\r\n   bitwise modulo 2 in the adder CM5 to the second block of the encrypted data\r\n   Tc(2). This results in the block of plain text Tc(2).\r\n", "notes": "One necessary statement was missed in the text.", "submit_date": "2010-04-09", "submitter_name": "Dolmatov V.", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2153", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   The resulting filling of N1 and N2 is added in the CM5 modulo 2 with\r\n   the third block Tp(3), etc., the last block Tp(M) = (t1(M), t2(M),\r\n   ..., t64(M)), padded if necessary to a complete 64-bit block by\r\n   zeros, is added in CM5 modulo 2 with the filling N1, N2 (a1(M-1)[16],\r\n   a2(M-1)[16], ..., a32(M-1)[16], b1(M-1)[16], b2(M-1)[16], ...,\r\n   b32(M-1)[16]).\r\n", "correct_text": "   The resulting filling of N1 and N2 is added in the CM5 modulo 2 with\r\n   the third block Tp(3), etc., the last block Tp(M) = (t1(M), t2(M),\r\n   ..., t64(M)), padded if necessary to a complete 64-bit block by\r\n   zeros, is added in CM5 modulo 2 with the filling N1, N2 \r\n   (a1(M-1)[16], a2(M-1)[16], ..., a32(M-1)[16], b1(M-1)[16], \r\n   b2(M-1)[16], ..., b32(M-1)[16]).\r\n", "notes": "", "submit_date": "2010-04-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2307", "doc-id": "RFC3168", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "   This proposal specifies two new flags in the Reserved field of the\r\n   TCP header.  The TCP mechanism for negotiating ECN-Capability uses\r\n   the ECN-Echo (ECE) flag in the TCP header.  Bit 9 in the Reserved\r\n   field of the TCP header is designated as the ECN-Echo flag.  The\r\n   location of the 6-bit Reserved field in the TCP header is shown in\r\n   Figure 4 of RFC 793 [RFC793] (and is reproduced below for\r\n   completeness).  This specification of the ECN Field leaves the\r\n   Reserved field as a 4-bit field using bits 4-7.", "correct_text": "   This proposal specifies two new flags in the Reserved field of the\r\n   TCP header.  The TCP mechanism for negotiating ECN-Capability uses\r\n   the ECN-Echo (ECE) flag in the TCP header.  Bit 9 in the Reserved\r\n   field of the TCP header is designated as the ECN-Echo flag.  The\r\n   location of the 6-bit Reserved field in the TCP header is shown in\r\n   Figure 3 of RFC 793 [RFC793] (and is reproduced below for\r\n   completeness).  This specification of the ECN Field leaves the\r\n   Reserved field as a 4-bit field using bits 4-7.", "notes": "Incorrect reference to Figure 4 of RFC 793", "submit_date": "2010-06-21", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7035", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.4", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 1f a9 40 00 ff 06 7c 97 ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 e9 d7 11 c1 42 62 fb fb ab 9e\r\n     c0 18 01 00 40 0c 00 00 01 01 08 0a 84 a5 0b f5\r\n     00 15 5a c1 1d 10 54 3d a6 3f 0e cb bb 2e 63 5c\r\n     95 4d ea c7 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da c0 00 b4 ac 1b 1c 1d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da c0 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 1f a9 40 00 ff 06 7c 97 ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 e9 d7 11 c1 42 62 fb fb ab 9e\r\n     c0 18 01 00 a4 3c 00 00 01 01 08 0a 84 a5 0b f5\r\n     00 15 5a c1 1d 10 54 3d a6 3f 0e cb bb 2e 63 5c\r\n     95 4d ea c7 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da c0 00 b4 ac 1b 1c 1d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da c0 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "notes": "The TCP checksum shown (0x400c) is wrong, it should be 0xa43c.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:47:29"}, {"errata_id": "2154", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "The encrypted data Tc(1), Tc(2), ..., Tc(M), when arriving, are\r\n   decrypted, out of the resulting plain text blocks Tp(1), Tp(2), ...,\r\n   Tp(M).  The MAC I'(l) is generated as described in the subsection 5.3\r\n   and compared with the MAC I(l) received together with the encrypted\r\n   data from the telecommunication channel or from the computer memory.\r\n   If the MACs are not equal, the resulting plain text blocks Tp(1),\r\n   Tp(2), ..., Tp(M) are considered false.\r\n\r\n", "correct_text": "he encrypted data Tc(1), Tc(2), ..., Tc(M), when arriving, are\r\n   decrypted, out of the resulting plain text blocks Tp(1), Tp(2), ...,\r\n   Tp(M).  The MAC I'(l) is generated as described above\r\n   and compared with the MAC I(l) received together with the encrypted\r\n   data from the telecommunication channel or from the computer memory.\r\n   If the MACs are not equal, the resulting plain text blocks Tp(1),\r\n   Tp(2), ..., Tp(M) are considered false.\r\n\r\n", "notes": "wrong reference to the original text sections", "submit_date": "2010-04-09", "submitter_name": "Dolmatov V.", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2155", "doc-id": "RFC5776", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2.1,pg.52", "orig_text": "|  o  direct time synchronization response: Upon receiving a response, a\r\n      receiver who has no pending request MUST immediately drop the\r\n      packet.  If this receiver has previously issued a request, he\r\n|     first checks the Group MAC (if applicable), then the \"t_r\" field,\r\n|     to be sure it is a response to his request, and finally the\r\n      digital signature.  A replayed packet will be dropped during these\r\n      verifications, without compromising the TESLA component.\r\n", "correct_text": "|  o  Direct time synchronization response: Upon receiving a response, a\r\n      receiver who has no pending request MUST immediately drop the\r\n      packet.  If this receiver has previously issued a request, he\r\n|     first checks the \"t_r\" field, to be sure it is a response to his \r\n|     request, then the Group MAC (if applicable), and finally the\r\n      digital signature.  A replayed packet will be dropped during these\r\n      verifications, without compromising the TESLA component.\r\n", "notes": "Rationale:\r\na) [supplemental, editorial] capitalization after preceding full stop;\r\nb) conflict with reasonable specification in section 4.2.2.1:\r\n   the \"t_r\" field match with an 'open' request is a very lightweight\r\n   operation, and an attacker needs to be on-path and fast or *very*\r\n   lucky to happen to pass this check; so performing the more costly\r\n   Group MAC verification operation _only_ if the packet \"t_r\" matches\r\n   an open request significantly reduces  the workload an attacker can\r\n   impose on the receiver; thus, the order of operations specified in\r\n   Section 4.2.2.1 is an important detail of the overall anti-DoS\r\n   strategy and should not be contradicted by the Security\r\n   Considerations section.", "submit_date": "2010-04-09", "submitter_name": "ALfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2156", "doc-id": "RFC5776", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.2", "orig_text": "[[  first paragraph  ]]\r\n\r\n   The bootstrap information message (with the in-band bootstrap scheme)\r\n|  and direct time synchronization response message (with the indirect\r\n   time synchronization scheme) both need to be signed by the sender.\r\n   [...]", "correct_text": "   The bootstrap information message (with the in-band bootstrap scheme)\r\n|  and direct time synchronization response message (with the direct\r\n   time synchronization scheme) both need to be signed by the sender.\r\n   [...]", "notes": "Rationale: most likely a typo, but confusing:\r\nwhy would the _indirect_ schem use the _direct_ scheme's messages?", "submit_date": "2010-04-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2157", "doc-id": "RFC4302", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "anti-reply", "correct_text": "anti-replay", "notes": "(End of first para.) \r\nObvious, but maybe confusing to learners.", "submit_date": "2010-04-10", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2158", "doc-id": "RFC4848", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "        u-naptr-regexp = \"!.*!\"<URI>\"!\"", "correct_text": "        u-naptr-regexp = \"!.*!<URI>!\"", "notes": "The extra double-quotes in the replacement portion of the substitution expression are erroneous, right?\n --VERIFIER NOTES-- \nThe current text is correct.   ", "submit_date": "2010-04-11", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2159", "doc-id": "RFC3473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "Alternatively, the sending of no-hop-by-hop Notify messages\r\ncan be disabled.", "correct_text": "Alternatively, the sending of non-hop-by-hop Notify messages\r\ncan be disabled.", "notes": "r/no-hop-by-hop/non-hop-by-hop", "submit_date": "2010-04-12", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2160", "doc-id": "RFC3473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "Configured keys MAY be used.", "correct_text": "Manually configured keys MAY be used.", "notes": "Assumed that this sentence is talking about the opposite of an automated key management system, which is manually configured keys.", "submit_date": "2010-04-12", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2162", "doc-id": "RFC3032", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "         Suppose that an unlabeled IP datagram is received at a\r\n         particular LSR, and that the the LSR pushes on a label before\r\n         forwarding the datagram.  Such a datagram will be called an\r\n         Initially Labeled IP Datagram at that LSR.\r\n", "correct_text": "         Suppose that an unlabeled IP datagram is received at a\r\n         particular LSR, and that the LSR pushes on a label before\r\n         forwarding the datagram.  Such a datagram will be called an\r\n         Initially Labeled IP Datagram at that LSR.\r\n", "notes": "Doubled \"the\"", "submit_date": "2010-04-15", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2163", "doc-id": "RFC1320", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4", "orig_text": "#ifndef MD\r\n#define MD MD5\r\n#endif", "correct_text": "#ifndef MD\r\n#define MD 5\r\n#endif", "notes": "", "submit_date": "2010-04-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2164", "doc-id": "RFC1320", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4", "orig_text": "  printf\r\n    (\"MD%d time trial. Digesting %d %d-byte blocks ...\", MD,\r\n     TEST_BLOCK_LEN, TEST_BLOCK_COUNT);", "correct_text": "  printf\r\n    (\"MD%d time trial. Digesting %d %d-byte blocks ...\", MD,\r\n     TEST_BLOCK_COUNT, TEST_BLOCK_LEN);", "notes": "", "submit_date": "2010-04-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2189", "doc-id": "RFC4302", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4.3.", "orig_text": "received Sequence Number against the receive window.  In constructing\r\nthe full sequence number, if the low-order 32 bits carried in the\r\npacket are lower in value than the low-order 32 bits of the\r\nreceiver's sequence number counter, the receiver assumes that the\r\nhigh-order 32 bits have been incremented, moving to a new sequence\r\nnumber subspace.  (This algorithm accommodates gaps in reception for", "correct_text": "received Sequence Number against the receive window.  In constructing\r\nthe full sequence number, if the low-order 32 bits carried in the\r\npacket are lower in value than the low-order 32 bits of the\r\nreceiver's left edge's sequence number counter, the receiver assumes\r\nthat the\r\nhigh-order 32 bits have been incremented, moving to a new sequence\r\nnumber subspace.  (This algorithm accommodates gaps in reception for", "notes": "\n --VERIFIER NOTES-- \n   There is no mention of a \"left edge sequence number counter\" in 4302.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2375", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\nIn Section 2.1, the last paragraph on page 7 says:\r\n\r\n   a) SIP [13] and SDP, where the encoded MIKEY messages are\r\n      encapsulated and transported in SDP containers of the SDP\r\n      offer/answer see RFC 3264 [27]) handshake, as described in [4];", "correct_text": "It should say:\r\n\r\n   a) SIP [13] and SDP, where the encoded MIKEY messages are\r\n      encapsulated and transported in SDP containers of the SDP\r\n|     offer/answer (see RFC 3264 [27]) handshake, as described in [4];\r\n\r\nor perhaps even better:\r\n\r\n   a) SIP [13] and SDP, where the encoded MIKEY messages are\r\n      encapsulated and transported in SDP containers of the SDP\r\n|     offer/answer handshake (see RFC 3264 [27]), as described in [4];", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2165", "doc-id": "RFC5246", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2.3.2", "orig_text": "   Example: If the block length is 8 bytes, the content length\r\n   (TLSCompressed.length) is 61 bytes, and the MAC length is 20 bytes,\r\n   then the length before padding is 82 bytes (this does not include the\r\n\r\n\r\n\r\nDierks & Rescorla           Standards Track                    [Page 23]\r\n\f\r\nRFC 5246                          TLS                        August 2008\r\n\r\n\r\n   IV.  Thus, the padding length modulo 8 must be equal to 6 in order to\r\n   make the total length an even multiple of 8 bytes (the block length).\r\n   The padding length can be 6, 14, 22, and so on, through 254.  If the\r\n   padding length were the minimum necessary, 6, the padding would be 6\r\n   bytes, each containing the value 6.  Thus, the last 8 octets of the\r\n   GenericBlockCipher before block encryption would be xx 06 06 06 06 06\r\n   06 06, where xx is the last octet of the MAC.\r\n", "correct_text": "   Example: If the block length is 8 bytes, the content length\r\n   (TLSCompressed.length) is 61 bytes, and the MAC length is 20 bytes,\r\n   then the length before padding is 82 bytes (this does not include the\r\n\r\n\r\n\r\nDierks & Rescorla           Standards Track                    [Page 23]\r\n\f\r\nRFC 5246                          TLS                        August 2008\r\n\r\n\r\n   IV).  Thus, the padding length modulo 8 must be equal to 6 in order to\r\n   make the total length an even multiple of 8 bytes (the block length).\r\n   The padding length can be 6, 14, 22, and so on, through 254.  If the\r\n   padding length were the minimum necessary, 6, the padding would be 6\r\n   bytes, each containing the value 6.  Thus, the last 8 octets of the\r\n   GenericBlockCipher before block encryption would be xx 06 06 06 06 06\r\n   06 06, where xx is the last octet of the MAC.\r\n", "notes": "", "submit_date": "2010-04-19", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2166", "doc-id": "RFC3032", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "      2. Data Link Layer Protocol Field\r\n\r\n         Exactly one MPLSCP packet is encapsulated in the PPP\r\n         Information field, where the PPP Protocol field indicates type\r\n         hex 8281 (MPLS).\r\n", "correct_text": "      2. Data Link Layer Protocol Field\r\n\r\n         Exactly one MPLSCP packet is encapsulated in the PPP\r\n         Information field, where the PPP Protocol field indicates type\r\n         hex 8281 (MPLSCP).\r\n", "notes": "", "submit_date": "2010-04-21", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2167", "doc-id": "RFC2196", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.3.6", "orig_text": "   Some sites choose to co-locate FTP with a Web\r\n   server, since the two protocols share common security considerations\r\n   However, the the practice isn't recommended, especially when the FTP\r\n   service allows the deposit of files (see section on WWW above). \r\n", "correct_text": "   Some sites choose to co-locate FTP with a Web\r\n   server, since the two protocols share common security considerations.\r\n   However, this practice isn't recommended, especially when the FTP\r\n   service allows the deposit of files (see section on WWW above).\r\n", "notes": "added a period after \"considerations\".", "submit_date": "2010-04-21", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2682", "doc-id": "RFC5424", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2.1.", "orig_text": " 15             clock daemon (note 2)\r\n(...)\r\n Table 1.  Syslog Message Facilities\r\n\r\n", "correct_text": " 15             clock daemon\r\n(...)\r\n Table 1.  Syslog Message Facilities\r\n", "notes": "Note 2 isn't present in this document. It's an artefact from RFC 3164.", "submit_date": "2011-01-07", "submitter_name": "VicTor Smirnoff", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2683", "doc-id": "RFC1345", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": " N->    1e4a    LATIN CAPITAL LETTER N WITH CIRCUMFLEX BELOW\r\n N->    1e4b    LATIN SMALL LETTER N WITH CIRCUMFLEX BELOW\r\n\r\n...\r\n\r\n S.-.   1e68    LATIN CAPITAL LETTER S WITH DOT BELOW AND DOT ABOVE\r\n S.-.   1e69    LATIN SMALL LETTER S WITH DOT BELOW AND DOT ABOVE", "correct_text": " N->    1e4a    LATIN CAPITAL LETTER N WITH CIRCUMFLEX BELOW\r\n n->    1e4b    LATIN SMALL LETTER N WITH CIRCUMFLEX BELOW\r\n\r\n...\r\n\r\n S.-.   1e68    LATIN CAPITAL LETTER S WITH DOT BELOW AND DOT ABOVE\r\n s.-.   1e69    LATIN SMALL LETTER S WITH DOT BELOW AND DOT ABOVE", "notes": "Mnemonics should be unique...", "submit_date": "2011-01-10", "submitter_name": "-", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2684", "doc-id": "RFC5226", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "      5) Initial assignments and reservations.  Clear instructions\r\n         should be provided to identify any initial assignments or\r\n         registrations.  In addition, any ranges that are to be reserved\r\n         for \"Private Use\", \"Reserved\", \"Unassigned\", etc. should be\r\n         clearly indicated.\r\n", "correct_text": "      5) Initial assignments and reservations.  Clear instructions\r\n         should be provided to identify any initial assignments or\r\n         registrations.  In addition, any ranges that are to be reserved\r\n         for \"Private Use\", \"Reserved\", etc. should be\r\n         clearly indicated.", "notes": "Unassigned values are not \"reserved\". For bounded registries, they can be computed from the assigned/reserved values. For unbounded registries (think media types), mentioning them doesn't make any sense at all.\n --VERIFIER NOTES-- \nNo change is needed.  The use of \"should\" provides any necessary flexibility.  In the IANA Considerations section of a document that sets up a registry, authors tend to indicate which values are initially \"Unassigned\".\r\n", "submit_date": "2011-01-13", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2168", "doc-id": "RFC3954", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   FLOW_SAMPLER_ID              48   1     Identifier shown\r\n                                           in \"show flow-sampler\"\r\n", "correct_text": "   FLOW_SAMPLER_ID              48   N     Identifier shown\r\n                                           in \"show flow-sampler\".\r\n                                           By default N is 4.", "notes": "Change sampler ID field size to N, defaulting to 4. NB smaller sizes may be used. The actual size may be determined from the corresponding NFv9 template.", "submit_date": "2010-04-22", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2190", "doc-id": "RFC4306", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.5.", "orig_text": "Similarly, payload types that are not defined are reserved for future\r\nuse; implementations of version 2.0 MUST skip over those payloads and\r\nignore their contents.", "correct_text": "Similarly, payload types that are not defined are reserved for future\r\nuse.", "notes": "The behaviour of an implementation of version 2.0 depends on the critical flag. See next paragraph.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8916", "doc-id": "RFC9293", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.2.", "orig_text": "Arc connecting LAST-ACK with CLOSE.\r\n\r\nASCII diagram:\r\n\r\n  | rcv ACK of FIN   -------   |                          CLOSE  |\r\n  | --------------   snd ACK   |                         ------- |\r\n  V        x                   V                         snd FIN V\r\n+---------+               +---------+                    +---------+\r\n|FINWAIT-2|               | CLOSING |                    | LAST-ACK|\r\n+---------+               +---------+                    +---------+\r\n  |              rcv ACK of FIN |                 rcv ACK of FIN |\r\n  |  rcv FIN     -------------- |    Timeout=2MSL -------------- |\r\n  |  -------            x       V    ------------        x       V\r\n   \\ snd ACK              +---------+delete TCB          +---------+\r\n     -------------------->|TIME-WAIT|------------------->| CLOSED  |\r\n                          +---------+                    +---------+\r\nFigure 5: TCP Connection State Diagram", "correct_text": "Arc should transition from LAST-ACK to TIME-WAIT\r\n\r\nASCII diagram:\r\n\r\n\r\n     | rcv ACK of FIN   -------   |                          CLOSE  |\r\n     | --------------   snd ACK   |       rcv ACK of FIN    ------- |\r\n     V        x                   V       --------------    snd FIN V\r\n   +---------+               +---------+         x          +---------+\r\n   |FINWAIT-2|               | CLOSING |  /-----------------| LAST-ACK|\r\n   +---------+               +---------+  |                 +---------+\r\n     |              rcv ACK of FIN |      |           \r\n     |  rcv FIN     -------------- |      |     Timeout=2MSL\r\n     |  -------            x       V      V     ------------\r\n      \\ snd ACK                  +---------+    delete TCB  +---------+\r\n        ------------------------>|TIME-WAIT|--------------->| CLOSED  |\r\n                                 +---------+                +---------+\r\nFigure 5: TCP Connection State Diagram", "notes": "Justification 1:\r\nThe TCB is not deleted when the connection is terminated along LAST-ACK, CLOSED path in the graph. \u00a0(As expected, section 3.10.7.4. indicates that the TCB should be deleted when ACK is received in LAST-ACK.)\r\n\r\nJustification 2:\r\nSuppose this and the other peer send a FIN essentially simultaneously. \u00a0Then the question is whether the sequence of events at this peer will be (a) snd FIN, rcv FIN or (b) rcv FIN, snd FIN. \u00a0The sequence may depend on external factors and the sequence may differ when encountered over time. (Consider race conditions; absolute simultaneity would be a challenge in two ordinary TCP peers.)\r\n\r\nFor (a) the states will be FINWAIT-1, CLOSING, TIME-WAIT, CLOSED.\r\nFor (b) the states will be CLOSE-WAIT, LAST-ACK, CLOSED.\r\n\r\nThe primary reason stated for the TIME-WAIT TIMEOUT is \"waiting for enough time to pass to be sure the remote TCP peer received the acknowledgment of its connection termination request.\"\r\n\r\nThere is no obvious reason why one sequence incurs a TIME-WAIT TIMEOUT period, while the other does not. \u00a0In neither case is it guaranteed that the sent ACK of FIN has arrived at the other end unless enough time elapses. \u00a0In figure 12 steps 4 and 5 at peer B are not contingent on knowledge that the ACK from step 3 has arrived at peer A; that ACK may still be (delayed) on the wire.\r\n\r\nJustification 3:\r\nIn the list of states just above figure 5 it is noted that TIME-WAIT also intends \"to avoid new connections being impacted by delayed \u00a0segments from previous connections.\" \u00a0A delayed segment from a peer may arrive after the final ACK has been received from that peer. \u00a0Summarily closing the connection after the final ACK may impact a new connection on the port.\r\n\r\nNote 1:\r\nThe suggested change would affect figure 12 at peer B, step 6, where CLOSED would become TIME-WAIT, with (2 MSL) below it, and CLOSED in the last line (as for peer A).\r\n\r\nNote 2:\r\nThis part of the RFC was essentially copied from RFC 793. It seems similar changes should be made to that RFC.", "submit_date": "2026-05-18", "submitter_name": "Martin S Olivier", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-05-26 13:30:12"}, {"errata_id": "2198", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.7.1.3.", "orig_text": "Initially, one or more hash contexts are set up as with the other S2K\r\nalgorithms, depending on how many octets of key data are needed.\r\nThen the salt, followed by the passphrase data, is repeatedly hashed\r\nuntil the number of octets specified by the octet count has been\r\nhashed.", "correct_text": "Initially, one or more hash contexts are set up as with the other S2K\r\nalgorithms, depending on how many octets of key data are needed.\r\nThen the concatenation of salt and passphrase data is repeated\r\nsufficiently often and concatenated. The concatenation is truncated\r\nto the number of octets specified by the octet count. The truncated\r\nconcatenation is hashed.", "notes": "Did I get it right? If not, clearify it.\r\nThere are a lot of interpretations of the fuzzy instruction.\r\nE.g. it could be repeat{data:=truncate(concatenate(hash(data)))} until\r\nthe octet count is exceeded. And it is still unclear weather you have to\r\ncount for each hash context separately and weather you have to count the\r\npreloads, too.\n --VERIFIER NOTES-- \nSubmitter does not even know if the erratum is correct.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2199", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.7.2.1.", "orig_text": "For compatibility, when an S2K specifier is used, the special value\r\n254 or 255 is stored in the position where the hash algorithm octet\r\nwould have been in the old data structure.  This is then followed\r\nimmediately by a one-octet algorithm identifier, and then by the S2K\r\nspecifier as encoded above.", "correct_text": "For compatibility, when an S2K specifier is used, the special value\r\n254 or 255 is stored in the position where the cipher algorithm octet\r\nwould have been in the old data structure.  This is then followed\r\nimmediately by a one-octet cipher algorithm identifier, and then by\r\nthe S2K specifier as encoded above.", "notes": "The paragraph before says:\r\nOlder versions of PGP just stored a cipher algorithm octet preceding\r\nthe secret data or a zero to indicate that the secret data was\r\nunencrypted.  The MD5 hash function was always used to convert the\r\npassphrase to a key for the specified cipher algorithm.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2200", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.7.2.1.", "orig_text": "This last possibility, the cipher algorithm number with an implicit\r\nuse of MD5 and IDEA, is provided for backward compatibility;", "correct_text": "This last possibility, the cipher algorithm number with an implicit\r\nuse of MD5, is provided for backward compatibility;", "notes": "The cipher algorithm is determined by the number. There is no implicit\r\nuse of IDEA.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2201", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.", "orig_text": "   The first octet of the packet header is called the \"Packet Tag\".  It\r\n   determines the format of the header and denotes the packet contents.\r\n   The remainder of the packet header is the length of the packet.\r\n   ...\r\n              +---------------+\r\n         PTag |7 6 5 4 3 2 1 0|\r\n              +---------------+\r\n         Bit 7 -- Always one\r\n         Bit 6 -- New packet format if set", "correct_text": "   The first octet of the packet header encodes the packet format and\r\n   the \"Packet Tag\".  It determines the format of the header and denotes\r\n   the packet contents. The remainder of the packet header is the length\r\n   of the packet body.\r\n   ...\r\n              +---------------+\r\n              |7 6 5 4 3 2 1 0|\r\n              +---------------+\r\n         Bit 7 -- Always one\r\n         Bit 6 -- New packet format if set", "notes": "Only a part of the first octet (depending on the packet format, i.e.\r\ndepending on bit 6 of the first octet) is the Packet Tag.\r\nThe packet consists of header and body. The encoded length is the length\r\nof the packet body.\n --VERIFIER NOTES-- \nThe suggestion is incorrect. The first octet of the header is called the packet tag. The packet tag contains other information besides tag information, but it is nonetheless called (and has always been called) the packet tag.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2202", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4.1.", "orig_text": "   0 - The packet has a one-octet length.  The header is 2 octets long.\r\n\r\n   1 - The packet has a two-octet length.  The header is 3 octets long.\r\n\r\n   2 - The packet has a four-octet length.  The header is 5 octets long.", "correct_text": "   0 - The packet body has a one-octet length.  The header is 2 octets\r\n       long.\r\n\r\n   1 - The packet body has a two-octet length.  The header is 3 octets\r\n       long.\r\n\r\n   2 - The packet body has a four-octet length.  The header is 5 octets\r\n       long.", "notes": "The packet consists of header and body. The encoded length is the length\r\nof the packet body.\n --VERIFIER NOTES-- \nThe language is clear in the document. The Body Length refers to the length of the body. Colloquially, the document calls this the packet length, but OpenPGP is hardly unique in being a TLV record system in which the length is the length of the value, not of the Tag, Length, and Value.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2210", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.2.", "orig_text": "        - Two-octet field holding left 16 bits of signed hash value.", "correct_text": "        - Two-octet field holding the first 16 bits of signed hash\r\n          value.", "notes": "left is misleading. It could be remaining (from leave). And there are\r\ncultures where the last letters of a line are on the left side.\r\nThe convention is high digit before (not left of) low digit (which may\r\nbe odd for Arabs).\n --VERIFIER NOTES-- \nThe erratum makes good point that \u201cleft\u201d is used where \u201cfirst\u201d or \u201chigh-order\u201d might have been a better term. However, given that we know that we use Network Byte Order, \u201cleft\u201d is a reasonable synonym for \u201cfirst.\u201d The IETF works in English and NBO; the comments about Arabs are well-taken, but pedantic and add no value.\r\n\r\nAdditionally, a search of other RFCs shows that we are not alone in using \u201cleft\u201d to mean \u201chigh-order.\u201d While this may be idiomatic rather than well-defined, our research shows it\u2019s an IETF idiom as much as an OpenPGP idiom.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2308", "doc-id": "RFC5903", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1 - 3.3", "orig_text": "a) in Section 3.1:\r\n\r\n   Field Size:\r\n    256\r\n\r\nb) in Section 3.2:\r\n\r\n   Field Size:\r\n    384\r\n\r\nc) in Section 3.3:\r\n\r\n   Field Size:\r\n    521", "correct_text": "a)\r\n\r\n   Field bit width:\r\n    256\r\n\r\nb)\r\n\r\n   Field bit width:\r\n    384\r\n\r\nc)\r\n\r\n   Field bit width:\r\n    521   ", "notes": "Rationale:\r\n\r\nThe \"size\" of a finite field is the number of elements of the field,\r\naccording to century-old well-established mathematical terminology.\r\nIn the case of Sections 3.1 through 3.3, the field width is the prime\r\nnumber p given 3 lines above the given snippets.\r\nThe idea is to give the number of bits needed to represent the field\r\nelements (integers modulo p), which serve as the x and y coordinates\r\nof the Elliptic Curve group points -- hence this should be denoted as\r\nthe bit width of the field (elements), which equals ceil(lb(p)).\n --VERIFIER NOTES-- \nI just can't see keeping this as-is is going to cause any issues for implementers.   ", "submit_date": "2010-06-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2214", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.3.", "orig_text": "   The concatenation of the data being signed and the signature data\r\n   from the version number through the hashed subpacket data (inclusive)\r\n   is hashed.  The resulting hash value is what is signed.  The left 16\r\n   bits of the hash are included in the Signature packet to provide a\r\n   quick test to reject some invalid signatures.\r\n\r\n   There are two fields consisting of Signature subpackets.  The first\r\n   field is hashed with the rest of the signature data, while the second\r\n   is unhashed.", "correct_text": "   The concatenation of the data being signed and the signature data from\r\n   the version number through the hashed subpacket data (inclusive), plus\r\n   a six-octet trailer (see section 5.2.4) is hashed.  The resulting hash\r\n   value is converted to the signature.  The left 16 bits of the hash are\r\n   included in the Signature packet to provide a quick test to reject\r\n   some invalid signatures.\r\n\r\n   There are two fields consisting of Signature subpackets.  The first\r\n   field (together with the preceding parts of the signature) is\r\n   included in the hash, while the second is not.", "notes": "There are six more octets (see 5.2.4.).\r\nThe data being signed is signed. The hash value is not signed, but\r\nconverted into the signature.\r\nThe first field is not hashed (does not contain a hash), but it is\r\nhashincluded. It is not true that the rest of the signature data is used\r\nin the hash. (This formulation is such strange for accuracy.)\r\nUnhashing is the reverse of hashing, which is hopefully unfeasible.\r\n\r\nModified text.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2215", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.3.1.", "orig_text": "   An implementation SHOULD ignore any subpacket of a type that it does\r\n   not recognize.\r\n\r\n   Bit 7 of the subpacket type is the \"critical\" bit.  If set, it\r\n   denotes that the subpacket is one that is critical for the evaluator\r\n   of the signature to recognize.  If a subpacket is encountered that is\r\n   marked critical but is unknown to the evaluating software, the\r\n   evaluator SHOULD consider the signature to be in error.", "correct_text": "   Bit 7 of the subpacket type is the \"critical\" bit.  If set, it\r\n   denotes that the subpacket is one that is critical for the evaluator\r\n   of the signature to recognize.  If a subpacket is encountered that is\r\n   marked critical but is unknown to the evaluating software, the\r\n   evaluator SHOULD consider the signature to be in error.\r\n\r\n   An implementation SHOULD ignore any subpacket of a type that it does\r\n   not recognize.", "notes": "The explanation for recognizing should come before recognizing is used.\n --VERIFIER NOTES-- \nThe existing text explains the rule of thumb, and then the exception. The suggestion would be more confusing than the original.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2216", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.3.3.", "orig_text": "   Subpackets that appear in a certification self-signature\r\n   apply to the user name, and subpackets that appear in the subkey\r\n   self-signature apply to the subkey.", "correct_text": "   Subpackets that appear in a certification self-signature\r\n   apply to the User ID, and subpackets that appear in the subkey\r\n   self-signature apply to the subkey.", "notes": "User ID, not user name", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2217", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.2.3.18.", "orig_text": "   Note also that since this is a URI, the key server can actually be a\r\n   copy of the key retrieved by ftp, http, finger, etc.", "correct_text": "?", "notes": "Nonsense. The key server is not a copy of a key.\r\nI do not get the point. What should be noted?\r\n\r\nModified to editorial.\n --VERIFIER NOTES-- \nNot actionable. No actual erratum. To answer the question, this text reminds the reader that a URI can refer to a static entity, as well as a query to a server. Yes, this is arguably superfluous, but it is there because of the WG\u2019s rough consensus.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4616", "doc-id": "RFC7234", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "(See Section 3.2 for additional details related to the use of public in\r\n response to a request containing Authorization, and Section 3 for \r\n details of how public affects responses that would normally not be \r\n stored, due to their status codes not being defined as cacheable \r\n by default; see Section 4.2.2.)\r\n\r\nhas a status code that is defined as cacheable by default \r\n(see Section 4.2.2), or", "correct_text": "(See Section 3.2 for additional details related to the use of public in\r\n response to a request containing Authorization, and Section 3 for \r\n details of how public affects responses that would normally not be \r\n stored, due to their status codes not being defined as cacheable \r\n by default; see Section 6.1 of [RFC7231].)\r\n\r\nhas a status code that is defined as cacheable by default \r\n(see Section 6.1 of [RFC7231]), or", "notes": "Section 4.2.2 is titled \"Calculating Heuristic Freshness\" but is referenced in the original text when talking about status codes. This is confusing despite having a reference to Section 6.1 of RFC7231 buried within the text.\r\n\r\nThere are other references to 4.2.2 as well, but those actually talk about heuristic freshness.\n --VERIFIER NOTES-- \nSee HTTPBIS mailing list discussion.\r\n", "submit_date": "2016-02-08", "submitter_name": "Brian Chang", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2224", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.5.3.", "orig_text": "   Encryption/decryption of the secret data is done in CFB mode using\r\n   the key created from the passphrase and the Initial Vector from the\r\n   packet.  A different mode is used with V3 keys (which are only RSA)\r\n   than with other key formats.  With V3 keys, the MPI bit count prefix\r\n   (i.e., the first two octets) is not encrypted.  Only the MPI non-\r\n   prefix data is encrypted.  Furthermore, the CFB state is\r\n   resynchronized at the beginning of each new MPI value, so that the\r\n   CFB block boundary is aligned with the start of the MPI data.\r\n\r\n   With V4 keys, a simpler method is used.  All secret MPI values are\r\n   encrypted in CFB mode, including the MPI bitcount prefix.", "correct_text": "   Encryption/decryption of the secret data is done in CFB mode using\r\n   the key created from the passphrase and the Initial Vector from the\r\n   packet.\r\n\r\n   A different mode is used with V3 keys (which are only RSA)\r\n   than with other key formats.  With V3 keys, the MPI bit count prefix\r\n   (i.e., the first two octets) is not encrypted.  Only the MPI non-\r\n   prefix data is encrypted.  Furthermore, the CFB state is\r\n   resynchronized at the beginning of each new MPI value, so that the\r\n   CFB block boundary is aligned with the start of the MPI data.\r\n\r\n   With V4 keys, a simpler method is used.  All secret MPI values are\r\n   encrypted in CFB mode, including the MPI bitcount prefix.", "notes": "It is unclear if the Furthermore belongs only to V3 keys.\r\n\r\nChanged to editorial.\n --VERIFIER NOTES-- \nText is in a paragraph describing V3 keys.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2225", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.9.", "orig_text": "   If the special name \"_CONSOLE\" is used, the message is considered to\r\n   be \"for your eyes only\".", "correct_text": "   If the special name \"_CONSOLE_\" is used, the message is considered to\r\n   be \"for your eyes only\".", "notes": "If the name is actually \"_CONSOLE\", you should explicitly mention it.\n --VERIFIER NOTES-- \nErratum is wrong.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2226", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.9.", "orig_text": "       These should be converted to native line endings by the receiving\r\n       software.", "correct_text": "       These SHOULD be converted to native line endings by the receiving\r\n       software.", "notes": "This is a SHOULD of [RFC2119].\r\n\r\nChanged to editorial.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2227", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.12.", "orig_text": "   A User ID packet consists of UTF-8 text that is intended to represent\r\n   the name and email address of the key holder.", "correct_text": "   A User ID packet body consists of UTF-8 text that is intended to\r\n   represent the name and email address of the key holder.\r\nor\r\n   A User ID packet contains UTF-8 text that is intended to represent\r\n   the name and email address of the key holder.", "notes": "Yes, it is pedantic. But the packet consists of header and body.\n --VERIFIER NOTES-- \nSimilar to errata 2220 etc. It is indeed pedantic as submitter notes.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2228", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.13.", "orig_text": "   The plaintext of the data to be encrypted is passed through the SHA-1\r\n   hash function, and the result of the hash is appended to the\r\n   plaintext in a Modification Detection Code packet.  The input to the\r\n   hash function includes the prefix data described above; it includes\r\n   all of the plaintext, and then also includes two octets of values\r\n   0xD3, 0x14.  These represent the encoding of a Modification Detection\r\n   Code packet tag and length field of 20 octets.", "correct_text": "   The concatination of the prefix data descibed above, the plaintext to\r\n   be encrypted and two octets of values 0xD3, 0x14 (These represent the\r\n   encoding of a Modification Detection Code packet tag and length field\r\n   of 20 octets) is passed through the SHA-1 hash function.", "notes": "The text is misleading and contradicting.\n --VERIFIER NOTES-- \nErratum is incorrect.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2229", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.13.", "orig_text": "      Suffice it to say that many people consider properties such as\r\n      deniability to be as valuable as integrity.", "correct_text": "      It is sufficient to say that many people consider properties such\r\n      as deniability to be as valuable as integrity.", "notes": "Is that an imperative?\n --VERIFIER NOTES-- \nSuggestion isn\u2019t grammatical.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2230", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.14.", "orig_text": "   The Modification Detection Code packet MUST be the last\r\n   packet in the plaintext data that is encrypted in the Symmetrically\r\n   Encrypted Integrity Protected Data packet, and MUST appear in no\r\n   other place.", "correct_text": "   The Modification Detection Code packet MUST be the last\r\n   packet in the plaintext data that is encrypted in the Symmetrically\r\n   Encrypted Integrity Protected Data packet, and MUST NOT appear in any\r\n   other place.", "notes": "'MUST appear in no other place' postulates an existence in the nowhere.\n --VERIFIER NOTES-- \nOn its surface, a good suggestion, but lacks the force of the original.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2231", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.14.", "orig_text": "   A Modification Detection Code packet MUST have a length of 20 octets.", "correct_text": "   A Modification Detection Code packet MUST have a body length of 20\r\n   octets.", "notes": "The packet consists of header and body.\n --VERIFIER NOTES-- \nSimilar to errata 2220 etc. It is indeed pedantic as submitter notes.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2232", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.3.", "orig_text": "   The encoded output stream must be represented in lines of no more\r\n   than 76 characters each.", "correct_text": "   The encoded output stream MUST be represented in lines in according\r\n   to the following algorithm.\r\n   Choose a maximal line width w not greater than 76.  Insert after each\r\n   w characters a line break.  If the last = (the beginning of the\r\n   encoded checksum) is not at the beginning of a line, one line break\r\n   MAY be inserted before the last =.", "notes": "The old formulation allows lines of different length and even empty\r\nlines.\n --VERIFIER NOTES-- \nThe submitter describes legal, correct behavior, and amends the text to disallow it.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5903", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "1", "orig_text": "   with the exception that there is no DTLS version of SSLv2 or SSLv3,", "correct_text": "   with the exception that there is no DTLS version of SSLv2, SSLv3, or TLS 1.0,", "notes": "DTLS has versions that match TLS 1.1, 1.2, and (soon) 1.3.  DTLS 1.0 corresponds to TLS 1.1.", "submit_date": "2019-11-12", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "2233", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6.4.", "orig_text": "   In Radix-64 data, characters other than those in the table, line\r\n   breaks, and other white space probably indicate a transmission error,\r\n   about which a warning message or even a message rejection might be\r\n   appropriate under some circumstances.  Decoding software must ignore\r\n   all white space.\r\n\r\n   Because it is used only for padding at the end of the data, the\r\n   occurrence of any \"=\" characters may be taken as evidence that the\r\n   end of the data has been reached (without truncation in transit).  No\r\n   such assurance is possible, however, when the number of octets\r\n   transmitted was a multiple of three and no \"=\" characters are\r\n   present.", "correct_text": "   In Radix-64 data, characters other than those in the table, line\r\n   breaks earlier than defined by the first line's length without\r\n   following '=' or '-', line breaks at the beginning of a line, and\r\n   other white space probably indicate a transmission error, about which\r\n   a warning message or even a message rejection might be appropriate\r\n   under some circumstances.  After that check, decoding software must\r\n   ignore all white space.\r\n\r\n   The boundary between encoded data and encoded checksum is before the\r\n   last '=' of a sequence of one, two or three '='.", "notes": "Might reject and must ignore is a contradiction.\r\nThere is always at least one '=', i.e. the beginning of the encoded\r\nchecksum.\r\n\r\nChanged to editorial.\n --VERIFIER NOTES-- \nThere is no contradiction. The implementation must ignore all whitespace, and must reject all bogus \u2018=\u2019 characters.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2234", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.5.", "orig_text": "    Examples of Radix-64", "correct_text": "    Examples of base64", "notes": "Radix-64 has a checksum, too.\r\n\r\nChanged to editorial.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2235", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.", "orig_text": "   If two characters in the sequence are separated\r\n   by '-', this is shorthand for the full list of ASCII characters\r\n   between them (e.g., '[0-9]' matches any decimal digit).", "correct_text": "   If two characters in the sequence are separated by '-', this is\r\n   shorthand for the full list of ASCII characters between them (e.g.,\r\n   '[0-9]' matches any decimal digit).  The collation sequence is UTF-8.", "notes": "UTF-8 has the collation sequence of unicode.  You probably do not want\r\nto have the system's locale involved.\r\n\r\nMaybe a hint on greediness of regex is nessessary, too.\r\n\r\nChanged to editorial.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2236", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.", "orig_text": "11.  Packet Composition\r\n\r\n(the headline)", "correct_text": "11.  Packet Sequence Composition", "notes": "It is about the composition of a sequence of packets, not about the\r\ncomposition of a packet.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2237", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11.1.", "orig_text": "   User Attribute packets and User ID packets may be freely intermixed\r\n   in this section, so long as the signatures that follow them are\r\n   maintained on the proper User Attribute or User ID packet.", "correct_text": "   User Attribute packets and User ID packets may be freely intermixed\r\n   in this section, so long as the signatures that follow them are\r\n   maintained on the proper User Attribute or User ID packet, and as\r\n   long the first one is a User ID packet.", "notes": "The first one must be a User ID packet and must not be a User Attribute\r\npacket.\n --VERIFIER NOTES-- \nThe RFC is correct. It says that they may be freely intermixed, to denote that they may be freely intermixed.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2238", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.1.", "orig_text": "   After the User ID packet or Attribute packet, there may be zero or\r\n   more Subkey packets.", "correct_text": "   After the sequence with the User ID packets and User Attribute\r\n   packets, there may be zero or more Subkey packets.", "notes": "The Subkey packets come after all User ID packets and User Attribute\r\npackets.\r\n\r\nChanged to editorial.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2239", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "12.1.", "orig_text": "   Entries in square brackets are optional and ellipses indicate\r\n   repetition.\r\n   ...\r\n           Primary-Key\r\n              [Revocation Self Signature]\r\n              [Direct Key Signature...]\r\n               User ID [Signature ...]\r\n              [User ID [Signature ...] ...]\r\n              [User Attribute [Signature ...] ...]\r\n              [[Subkey [Binding-Signature-Revocation]\r\n                      Primary-Key-Binding-Signature] ...]", "correct_text": "   Entries in square brackets are optional, vertical bar separates\r\n   alternatives, and ellipses indicate repetition.\r\n   ...\r\n           Primary-Key\r\n              [Revocation Self Signature]\r\n              [Direct Key Signature...]\r\n               User ID [Signature ...]\r\n              [[User ID [Signature ...] |\r\n                      [User Attribute [Signature ...]]...]\r\n              [[Subkey [Binding-Signature-Revocation]\r\n                      Primary-Key-Binding-Signature] ...]", "notes": "11.1. says:\r\n   User Attribute packets and User ID packets may be freely intermixed\r\n   in this section, so long as the signatures that follow them are\r\n   maintained on the proper User Attribute or User ID packet, and as\r\n   long the first one is a User ID packet.\r\n\r\nChanged to editorial.\n --VERIFIER NOTES-- \nThe RFC is correct. It says that they may be freely intermixed, to denote that they may be freely intermixed.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2240", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.1.", "orig_text": "   In the above diagram, if the binding signature of a subkey has been\r\n   revoked, the revoked key may be removed, leaving only one key.", "correct_text": "   In the above diagram, if the binding signature of a subkey has been\r\n   revoked, the revoked key may be removed.  Note that this bears the\r\n   danger of importing the subkey again without the Binding Signature\r\n   Revocation.", "notes": "If there are more than one subkeys, the removing of one leaves more\r\nthan one key.  And the warning is missing.\r\n\r\nChanged to editorial.", "submit_date": "2010-04-28", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7036", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 53 99 40 00 ff 06 48 e2 0a 0b 0c 0d\r\n     ac 1b 1c 1d ff 12 00 b3 cb 0e fb ee 00 00 00 00\r\n     e0 02 ff ff 54 1f 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 00 02 4c ce 00 00 00 00 1d 10 3d 54\r\n     80 af 3c fe b8 53 68 93 7b 8f 9e c2\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 53 99 40 00 ff 06 48 e2 0a 0b 0c 0d\r\n     ac 1b 1c 1d ff 12 00 b3 cb 0e fb ee 00 00 00 00\r\n     e0 02 ff ff c2 bf 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 00 02 4c ce 00 00 00 00 1d 10 3d 54\r\n     80 af 3c fe b8 53 68 93 7b 8f 9e c2\r\n", "notes": "The TCP checksum shown (0x541f) is wrong, it should be 0xc2bf.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:47:44"}, {"errata_id": "2317", "doc-id": "RFC4072", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.2.", "orig_text": "      <Diameter-EAP-Answer> ::= < Diameter Header: 268, PXY >\r\n                                < Session-Id >\r\n                                { Auth-Application-Id }\r\n                                { Auth-Request-Type }\r\n                                { Result-Code }\r\n                                { Origin-Host }\r\n                                { Origin-Realm }\r\n                                [ User-Name ]\r\n                                [ EAP-Payload ]\r\n                                [ EAP-Reissued-Payload ]\r\n                                [ EAP-Master-Session-Key ]\r\n                                [ EAP-Key-Name ]\r\n                                [ Multi-Round-Time-Out ]\r\n                                [ Accounting-EAP-Auth-Method ]\r\n                                [ Service-Type ]", "correct_text": "      <Diameter-EAP-Answer> ::= < Diameter Header: 268, PXY >\r\n                                < Session-Id >\r\n                                { Auth-Application-Id }\r\n                                { Auth-Request-Type }\r\n                                { Result-Code }\r\n                                { Origin-Host }\r\n                                { Origin-Realm }\r\n                                [ User-Name ]\r\n                                [ EAP-Payload ]\r\n                                [ EAP-Reissued-Payload ]\r\n                                [ EAP-Master-Session-Key ]\r\n                                [ EAP-Key-Name ]\r\n                                [ Multi-Round-Time-Out ]\r\n                              * [ Accounting-EAP-Auth-Method ]\r\n                                [ Service-Type ]", "notes": "When one or more EAP methods used for authenticating the user, for each used EAP method an Accounting-EAP-Auth-Method AVP is added in the Diameter-EAP-Answer with a successful result code. In the message format of Diameter-EAP-Answer, one or more Accounting-EAP-Auth-Method AVPs can be included.\n --VERIFIER NOTES-- \nThis erratum if verified would create an non-backward-compatible change. The submiter is kindly requested to consider the discussions with the author on the WG list and if he still thinks that the change is needed to resubmit the erratum as Technical.    ", "submit_date": "2010-06-30", "submitter_name": "Souheil Ben Ayed", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2318", "doc-id": "RFC5465", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "               (Time passes.  The client decides it wants to know about\r\n               one more mailbox.  As the client already knows necessary\r\n               STATUS information for all mailboxes below the Lists\r\n               mailbox, and because \"notify set status\" would cause\r\n               STATUS responses for *all* mailboxes specified in the\r\n               NOTIFY command, including the ones for which the client\r\n               already knows STATUS information, the client issues an\r\n               explicit STATUS request for the mailbox to be added to\r\n               the watch list, followed by the NOTIFY SET without the\r\n               STATUS parameter.)\r\n         C: d STATUS misc (UIDVALIDITY UIDNEXT MESSAGES)\r\n         S: * STATUS misc (UIDVALIDITY 1 UIDNEXT 999)\r\n         S: d STATUS completed\r\n\r\n         C: e notify set (selected MessageNew (uid\r\n            body.peek[header.fields (from to subject)]) MessageExpunge)\r\n            (subtree Lists MessageNew) (mailboxes misc MessageNew)\r\n         S: e OK done\r\n", "correct_text": "               (Time passes.  The client decides it wants to know about\r\n               one more mailbox.  As the client already knows necessary\r\n               STATUS information for all mailboxes below the Lists\r\n               mailbox, and because \"notify set status\" would cause\r\n               STATUS responses for *all* mailboxes specified in the\r\n               NOTIFY command, including the ones for which the client\r\n               already knows STATUS information, the client issues a\r\n               NOTIFY SET without the STATUS parameter, followed by an\r\n               explicit STATUS request for the newly-added mailbox.\r\n               Note that if these two commands were issued in the reverse\r\n               order, that would be a client bug; changes may occur in\r\n               the mailbox between the completion of the STATUS command,\r\n               and the issuing of the NOTIFY command.  The client may\r\n               never be notified of such changes.)\r\n         C: d notify set (selected MessageNew (uid\r\n            body.peek[header.fields (from to subject)]) MessageExpunge)\r\n            (subtree Lists MessageNew) (mailboxes misc MessageNew)\r\n         S: d OK done\r\n\r\n         C: e STATUS misc (UIDVALIDITY UIDNEXT MESSAGES)\r\n         S: * STATUS misc (UIDVALIDITY 1 UIDNEXT 999)\r\n         S: e STATUS completed\r\n", "notes": "The order of the STATUS and NOTIFY commands is changed. The original sequence is buggy, because any changes to the folder which occur between the two commands will not be noticed by the client.\r\n\r\nRather than just fixing it, my suggested correction also highlights the potential error -- if the authors of the RFC can do it, and especially since it's been shown as an example in the RFC until now, then it's worth making sure we highlight the problem.", "submit_date": "2010-07-06", "submitter_name": "David Woodhouse", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2333", "doc-id": "RFC5777", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "   Time-Of-Day-Condition ::= < AVP Header: 560 >\r\n                             [ Time-Of-Day-Start ]\r\n                             [ Time-Of-Day-End ]\r\n                             [ Day-Of-Week-Mask ]\r\n                             [ Day-Of-Month-Mask ]\r\n                             [ Month-Of-Year-Mask ]\r\n                             [ Absolute-Start-Time ]\r\n                             [ Absolute-End-Time ]\r\n                             [ Timezone-Flag ]\r\n                           * [ AVP ]", "correct_text": "   Time-Of-Day-Condition ::= < AVP Header: 560 >\r\n                             [ Time-Of-Day-Start ]\r\n                             [ Time-Of-Day-End ]\r\n                             [ Day-Of-Week-Mask ]\r\n                             [ Day-Of-Month-Mask ]\r\n                             [ Month-Of-Year-Mask ]\r\n                             [ Absolute-Start-Time ]\r\n                             [ Absolute-Start-Fractional-Seconds ]\r\n                             [ Absolute-End-Time ]\r\n                             [ Absolute-End-Fractional-Seconds ]\r\n                             [ Timezone-Flag ]\r\n                             [ Timezone-Offset ]\r\n                           * [ AVP ]", "notes": "3 AVPs are omitted in the ABNF for the Time-Of-Day-Condition AVP.", "submit_date": "2010-07-19", "submitter_name": "Francois Bard", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2334", "doc-id": "RFC5777", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "   |Timezone-Offset                       571    4.2.12    Integer32   |\r\n   |Treatment-Action                      572    5.1       Grouped     |\r\n   |QoS-Profile-Id                        573    5.2       Unsigned32  |", "correct_text": "   |Timezone-Offset                       571    4.2.12    Integer32   |\r\n   |Treatment-Action                      572    5.1       Enumerated  |\r\n   |QoS-Profile-Id                        573    5.2       Unsigned32  |", "notes": "The Treatment-Action AVP is of type Enumerated, as defined in 5.1", "submit_date": "2010-07-19", "submitter_name": "Francois Bard", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2335", "doc-id": "RFC5777", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "IP-Bit-Mask-Width", "correct_text": "IP-Mask-Bit-Mask-Width", "notes": "The original name, IP-Bit-Mask-Width, seems to have been corrupted at some point. Since the AVP is referred as IP-Mask-Bit-Mask-Width in the IANA registry, this name should be used.", "submit_date": "2010-07-19", "submitter_name": "Francois Bard", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3118", "doc-id": "RFC6415", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A.", "orig_text": "      <Subject>http://blog.example.com/article/id/314</Subject>\r\n      <Expires>2010-01-30T09:30:00Z</Expires>\r\n", "correct_text": "      <Expires>2010-01-30T09:30:00Z</Expires>\r\n      <Subject>http://blog.example.com/article/id/314</Subject>\r\n", "notes": "The XML example in Appendix A. has the Subject before the Expires tag, which is wrong.\r\n\r\nXRD 1.0 defines[1] the <XRD> element as a \"sequence\" with <Expires> first, <Subject> second. A sequence is defined[2] as \"Sequence (the element information items match the particles in sequential order);\".\r\n\r\nPSA: Because this is a minor problem with a non-normative example, processing as \"Hold For Document Update\". -- Peter Saint-Andre\r\n\r\n[1] http://docs.oasis-open.org/xri/xrd/v1.0/xrd-1.0.html#element.xrd\r\n[2] http://www.w3.org/TR/xmlschema-1/#Model_Group", "submit_date": "2012-02-09", "submitter_name": "Christian Weiske", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3119", "doc-id": "RFC3312", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "m=audio 20000 RTP/AVP 0\r\na=des:foo unknown e2e send\r\n", "correct_text": "m=audio 0 RTP/AVP 0\r\na=des:foo unknown e2e send\r\n", "notes": "Same typo as Errata ID: 3117. The port number must be set to zero.", "submit_date": "2012-02-09", "submitter_name": "Beis Grigorios", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2319", "doc-id": "RFC3107", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "\"A BGP speaker should not advertise this capability to another BGP speaker unless there is a Label Switched Path (LSP) between the two speakers.\"\r\n", "correct_text": "\"An eBGP speaker should not advertise this capability to another eBGP speaker unless there is a Label Switched Path (LSP) or layer two interface between the two speakers.\"\r\n\r\nOr just remove completely that sentence.", "notes": "1) :s/BGP/eBGP\r\nAn iBGP router should be able to set up an internal BGP session for AFI 1 / SAFI 4 toward a Route Reflector even if the Route Reflector is not capabble of forwarding MPLS packets (This case is even described in the section 2 of the RFC)\r\n\r\n2) + layer two interface\r\nIf both router are connected by a direct (sub)interface, they should be able to exchange MPLS packets even if there is no LSP between them.\r\n\r\n3) Remove the sentence\r\nAFAIK, the point is now better addressed by draft-ietf-idr-bgp-bestpath-selection-criteria-01.txt\n --VERIFIER NOTES-- \nAfter discussions with the document author on the MPLS mailing list:\r\n\r\n- The EBGP/IBGP distinction is not relevant here, as this does not properly\r\n  capture the notion of whether a BGP speaker is in the data path.\r\n \r\n- The ability to send an MPLS packet from one router to another does not\r\n  necessarily depend on there being either a sequence of MPLS routers\r\n  between them or on there being an L2 connection between them.  There might\r\n  be an L3 tunnel, for example.\r\n\r\nFurthermore, we feel that no confusion has arisen as the result of the current text so that there is no harm in leaving it as it stands.", "submit_date": "2010-07-07", "submitter_name": "Bruno Decraene", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2322", "doc-id": "RFC5335", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Author info", "orig_text": "Y. Abel   (in first-page header block)\r\n\r\nAbel      (in page footers)", "correct_text": "A. Yang\r\n\r\nYang", "notes": "The author is listed in the Author's Address section as \"Abel Yang (editor)\", which is correct although \"Abel YANG (editor)\" might have been preferable.  In any event, the family name is \"Yang\", not \"Abel\", so the page 1 header block, page footers, and RFC Index entries are in error.\r\n\r\nThis is fixed in draft-ietf-eai-rfc5335bis-02 and later.  A successor to that document will eventually obsolete RFC 5335.", "submit_date": "2010-07-12", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2323", "doc-id": "RFC5286", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6", "orig_text": "   16.  If D_opt(H_h.neighbor, D) < D_opt(P_i.neighbor, D) and\r\n        D_opt(P_i.alt_next_hops, D) >= D_opt(P_i.neighbor, D), then H_h\r\n        is a downstream alternate and P_i.alt_next_hops is simply an\r\n        LFA.  Prefer H_h and goto Step 20.\r\n\r\n", "correct_text": "   16.  If D_opt(H_h.neighbor, D) < D_opt(S, D) and\r\n        D_opt(P_i.alt_next_hops, D) >= D_opt(S, D), then H_h\r\n        is a downstream alternate and P_i.alt_next_hops is simply an\r\n        LFA.  Prefer H_h and goto Step 20.\r\n", "notes": "", "submit_date": "2010-07-12", "submitter_name": "Andr\u00e1s Cs\u00e1sz\u00e1r", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2324", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.10.6.2", "orig_text": "A retry might be sent while the original request is still in progress\r\non the replier.  The replier SHOULD deal with the issue by returning\r\nNFS4ERR_DELAY as the reply to SEQUENCE or CB_SEQUENCE operation, but\r\nimplementations MAY return NFS4ERR_MISORDERED.", "correct_text": "A retry might be sent while the original request is still in progress\r\non the replier.  The replier SHOULD deal with the issue by returning\r\nNFS4ERR_DELAY as the reply to SEQUENCE or CB_SEQUENCE operation, but\r\nimplementations MAY return NFS4ERR_SEQ_MISORDERED.", "notes": "", "submit_date": "2010-07-12", "submitter_name": "Trond Myklebust", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2325", "doc-id": "RFC3709", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   When using indirect addressing, the URI (refStructURI) pointing to\r\n   the external data structure MUST point to a binary file containing\r\n   the DER encoded data with the syntax LogotypeData.  The referenced\r\n   file name SHOULD include a file extension of \"LTD\".", "correct_text": "", "notes": "There is no IETF process for only registering a file extension. IETF MIME type registry allows to register MIME types together with the corresponding file extensions. An update to this document should register a new MIME type for \"LTD\".", "submit_date": "2010-07-13", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2326", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15.1.16.3", "orig_text": "NFS4ERR_NXIO (Error Code 5) ", "correct_text": "NFS4ERR_NXIO (Error Code 6) ", "notes": "", "submit_date": "2010-07-13", "submitter_name": "Tom Haynes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2327", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.3.1", "orig_text": "   If the object being created is not a directory, the inherited ACL\r\n   SHOULD NOT inherit ACEs from the parent directory ACL unless the\r\n   ACE4_FILE_INHERIT_FLAG is set.", "correct_text": "   If the object being created is not a directory, the inherited ACL\r\n   SHOULD NOT inherit ACEs from the parent directory ACL unless the\r\n   ACE4_FILE_INHERIT_ACE is set.", "notes": "", "submit_date": "2010-07-13", "submitter_name": "Tom Haynes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2328", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.1.16", "orig_text": "", "correct_text": "", "notes": "From 3530:\r\n\r\n  NFS4ERR_RESOURCE  For the processing of the COMPOUND procedure, the server may exhaust available resources and can not continue processing operations within the COMPOUND procedure.  This error will be returned from the server in those instances of resource exhaustion related to the processing of the COMPOUND procedure.\r\n\r\nSince it is not used by 5661, shouldn't it appear in Section 15.1.16 Obsoleted Errors?", "submit_date": "2010-07-13", "submitter_name": "Tom Haynes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2329", "doc-id": "RFC2560", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.2.2.1", "orig_text": "CAs issuing such a certificate should realized that", "correct_text": "CAs issuing such a certificate should realize that", "notes": "simple typo \"realized\" => \"realize\"", "submit_date": "2010-07-13", "submitter_name": "Shirley Carter", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2330", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.7", "orig_text": "   0            1\r\n   +-----------+-----------+-----------+--\r\n   |  count    | 31  ..  0 | 63  .. 32 |\r\n   +-----------+-----------+-----------+--", "correct_text": "                     0            1\r\n   +-----------+-----------+-----------+--\r\n   |  count    | 31  ..  0 | 63  .. 32 |\r\n   +-----------+-----------+-----------+--", "notes": "", "submit_date": "2010-07-14", "submitter_name": "Tom Haynes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3120", "doc-id": "RFC5965", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.d.", "orig_text": "This part MUST be included (contrary to [REPORT])", "correct_text": "This part MUST be included if the entity creating the report has \r\nreceived the message.", "notes": "Reports can be created from info collected in SMTP transactions that don't accept a message, a scenario we didn't consider when we wrote this section.", "submit_date": "2012-02-14", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2345", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "At the bottom of page 20, says:\r\n\r\n  The fields of SinglePubInfo have the following meaning:\r\n\r\n      pubMethod indicates the address type for the location at which the\r\n      requestor desires the certificate to be placed by the CA/RA.\r\n\r\n         dontCare indicates that the CA/RA can publish the certificate\r\n         in whatever locations it chooses.  If dontCare is used, the\r\n         pubInfos field MUST be omitted.\r\n            ^^^^^\r\n\r\n(To make the full context visible, I have shown more text than\r\nwould be necessary for the errata note.)\r\n>From the context, I strongly suspect that the RFC text should say:\r\n\r\n  The fields of SinglePubInfo have the following meaning:\r\n\r\n      pubMethod indicates the address type for the location at which the\r\n      requestor desires the certificate to be placed by the CA/RA.\r\n\r\n         dontCare indicates that the CA/RA can publish the certificate\r\n         in whatever locations it chooses.  If dontCare is used, the\r\n         pubLocation field MUST be omitted.\r\n            ^^^^^^^^", "correct_text": "[see above]     ", "notes": "Rationale: pubInfos is a \"SEQUENCE SIZE (1..MAX) OF SinglePubInfo\".\r\n I cannot imagine how a certain value of a SinglePubInfo instance\r\n subfield can ever imply a MUST to omit the full enclosing structure,\r\n pubInfos -- which would have removed this subfield as well :-) .\r\n Perhaps, the text has been cloned from the explanation of the\r\n 'dontPublish' value of the PKIPublicationInfo.action filed given\r\n just below the text excerpt reproduced under item (7) above\r\n without fully applying the proper changes.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2346", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "At the bottom of page 22, says:\r\n\r\n   The fields of EncryptedKey have the following meaning:\r\n\r\n      encryptedValue is longer used.  This field has been deprecated\r\n      along with the EncryptedValue structure.\r\n\r\nIt should say:\r\n\r\n   The fields of EncryptedKey have the following meaning:\r\n                        vvvv\r\n      encryptedValue  is no longer used.  This field has been\r\n      deprecated along with the EncryptedValue structure.", "correct_text": "[see above]     ", "notes": "Changed to editorial.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2347", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.1", "orig_text": "Subsequently, near the top of page 24, the same section says:\r\n\r\n                        vvvvvvvvv\r\n   The %xx mechanism of [RFC1738] is used to encode '?' (%3f) and '%'\r\n   (%25) if they are not being used for their reserved purpose.  Names\r\n   MUST NOT start with a numeric character.\r\n\r\nIt should better say:\r\n\r\n                        vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv\r\n   The %xx mechanism of Section 2.1 of STD 66 [RFC3986] is used to\r\n   encode '?' (%3f) and '%' (%25) if they are not being used for their\r\n   reserved purpose.  Names MUST NOT start with a numeric character.", "correct_text": "[see above]     ", "notes": "Rationale: RFC 1738 has been obsoleted; the %-escaping method is now covered by the above mentioned section of that Internet Standard.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2367", "doc-id": "RFC4534", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "In section 3.4, on page 8, the RFC says:\r\n\r\n                                  [...].  There are several protocols\r\n   that could make use of group keys, ranging from simple security\r\n|  applications that only need key for encryption and/or integrity\r\n   protection to more complex configurable security protocols such as\r\n   IPsec and Secure Real-time Transport Protocol (SRTP) [RFC3711].  [..]", "correct_text": "It should say:\r\n\r\n                                  [...].  There are several protocols\r\n   that could make use of group keys, ranging from simple security\r\n|  applications that only need a key for encryption and/or integrity\r\n   protection to more complex configurable security protocols such as\r\n   IPsec and Secure Real-time Transport Protocol (SRTP) [RFC3711].  [..]", "notes": "", "submit_date": "2006-11-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2348", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "In the first paragraph on page 26, contains the sentence:\r\n\r\n                                                     ...  The user can\r\n   claim that an item was signed by the entity that generated the key as\r\n   well as any entity that might have seen the key value during transfer\r\n   from the generator the to EE.  ...\r\n                      ^^^^^^\r\nIt should say:\r\n\r\n                                                     ...  The user can\r\n   claim that an item was signed by the entity that generated the key as\r\n   well as any entity that might have seen the key value during transfer\r\n   from the generator to the EE.  ...\r\n                      ^^^^^^", "correct_text": "[see above]     ", "notes": "Changed to editorial.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2349", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "10.2", "orig_text": "On page 27, contains the following Ref. as its final entry:\r\n\r\n   [RFC1738] Berners-Lee, T., Masinter, L., and M. McCahill, \"Uniform\r\n             Resource Locators (URL)\", RFC 1738, December 1994.", "correct_text": "[see above]     ", "notes": "According to Errata 2348, this should be removed, and a new Ref.\r\n[RFC3986] added -- to be taken from rfc-ref.txt .\r\nGiven the nature and context of the use of this Ref. in section 7.1\r\n-- see item (11) above -- and the STD Status of RFC 3986, then\r\nperhaps it is advisable to place this new Ref. into Section 10.1,\r\nNormative References, not in section 10.2, Informative References.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2357", "doc-id": "RFC4683", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "The first paragraph of Section 5.1 (on mid-page 11) says:\r\n\r\n   This section specifies the syntax for the SIM name form included in\r\n|  the subjectAltName extension.  The SIM is composed of the three\r\n   fields:  the hash algorithm identifier, the authority-chosen random\r\n   value, and the value of the PEPSI itself.\r\n\r\nIt should say:\r\n\r\n   This section specifies the syntax for the SIM name form included in\r\n|  the subjectAltName extension.  The SIM is composed of three fields:\r\n   the hash algorithm identifier, the authority-chosen random value, and\r\n   the value of the PEPSI itself.", "correct_text": "See above.", "notes": "", "submit_date": "2007-09-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2350", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "In the last ASN.1 fragment on page 31, says:\r\n\r\n   IP address (identifier \"I\"):\r\n      <iname> ::= <oid>\r\n                  ^^^^^", "correct_text": "[see above]     ", "notes": "The text should clarify what is meant by <oid> which is not defined in this\r\ndocument nor is it a standard BNF item.  It should be considered if a BNF\r\nreference should be added.  It should be made clearer what the different\r\nterminals mean.", "submit_date": "2005-11-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2389", "doc-id": "RFC4492", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4", "orig_text": "   point:   This is the byte string representation of an elliptic curve\r\n      point following the conversion routine in Section 4.3.6 of ANSI\r\n      X9.62 [7].  This byte string may represent an elliptic curve point\r\n      in uncompressed or compressed format; it MUST conform to what the\r\n      client has requested through a Supported Point Formats Extension\r\n      if this extension was used.\r\n\r\n        enum { ec_basis_trinomial, ec_basis_pentanomial } ECBasisType;\r\n\r\n   ec_basis_trinomial:   Indicates representation of a characteristic-2\r\n      field using a trinomial basis.\r\n\r\n   ec_basis_pentanomial:   Indicates representation of a\r\n      characteristic-2 field using a pentanomial basis.", "correct_text": "   point:   This is the byte string representation of an elliptic curve\r\n      point following the conversion routine in Section 4.3.6 of ANSI\r\n      X9.62 [7].  This byte string may represent an elliptic curve point\r\n      in uncompressed or compressed format; it MUST conform to what the\r\n      client has requested through a Supported Point Formats Extension\r\n      if this extension was used.\r\n\r\n        enum {\r\n            ec_basis_trinomial(1), ec_basis_pentanomial(2),\r\n            (255)\r\n        } ECBasisType;\r\n\r\n   ec_basis_trinomial:   Indicates representation of a characteristic-2\r\n      field using a trinomial basis.\r\n\r\n   ec_basis_pentanomial:   Indicates representation of a\r\n      characteristic-2 field using a pentanomial basis.", "notes": "The ECBasisType enumeration is submitted as part of the ECParameters structure and therefore needs numerical values. It is common to assign numerical values starting from 1 to enums and maximum value of 255 should be enough, since currently there are only two known basis types and it is unlikely to change in the near future.", "submit_date": "2010-07-23", "submitter_name": "Juho V\u00e4h\u00e4-Herttua", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2386", "doc-id": "RFC4650", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "\r\n(14) outdated Informative Reference\r\n\r\nThis RFC  references the now-outdated RFC 1750.\r\nAll new RFCs should refer to BCP 106, RFC 4086, instead of RFC 1750!", "correct_text": "Item [8] in Section 8.2, at the bottom of page 22 of RFC 4650,\r\nshould be replaced by the proper RFC-style citation for RFC 4086.", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2387", "doc-id": "RFC4650", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "(15) typo -- results in wrong Endpoint identifier specified\r\n\r\nThe 3rd paragraph of Appendix A, on page 25, says:\r\n\r\n   To establish a call, it is assumed that endpoint B has obtained\r\n   permission from the gatekeeper (not shown).  Endpoint B as the caller\r\n   builds the MIKEY-DHHMAC I_message (see section 3) and sends the\r\n   I_message encapsulated within the H.323-SETUP to endpoint A.  A\r\n|  routing gatekeeper (GK) would forward this message to endpoint B; in\r\n   case of a non-routing gatekeeper, endpoint B sends the SETUP directly\r\n   to endpoint A.  [...]", "correct_text": "It should say:\r\n\r\n   To establish a call, it is assumed that endpoint B has obtained\r\n   permission from the gatekeeper (not shown).  Endpoint B as the caller\r\n   builds the MIKEY-DHHMAC I_message (see section 3) and sends the\r\n   I_message encapsulated within the H.323-SETUP to endpoint A.  A\r\n|  routing gatekeeper (GK) would forward this message to endpoint A; in\r\n   case of a non-routing gatekeeper, endpoint B sends the SETUP directly\r\n   to endpoint A.  [...]", "notes": "from pending", "submit_date": "2006-10-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2403", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.3", "orig_text": "                                                    ...  It wins if the\r\n   server accepts this accumulator.\r\n                       ^^^^^^^^^^^", "correct_text": "                                                    ...  It wins if the\r\n   server accepts this authenticator.", "notes": "typo. near the bottom of page 18, the 2nd-to-last paragraph of Appendix A.3\r\n(on that page).", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4617", "doc-id": "RFC1751", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "btoe(engout,c)\r\nchar *c, *engout;\r\n{\r\n        char cp[9];     /* add in room for the parity 2 bits*/", "correct_text": "btoe(engout,c)\r\nchar *c, *engout;\r\n{\r\n        char cp[10];     /* add in room for the parity 2 bits*/", "notes": "This is an off-by-one error in the sample code in Appendix A.\r\n\r\nFurther down, we have this loop:\r\n        for(p = 0,i = 0; i < 64;i += 2)\r\n                p += extract(cp,i,2);\r\n\r\nSo i goes all the way to 62, and 9-byte cp is passed to extract()\r\n\r\nIn extract, we have this:\r\nstatic unsigned long\r\nextract(s, start, length)\r\nchar *s;\r\nint start, length;\r\n{\r\n          .\r\n          .\r\n          .\r\n        cr = s[start/8 +2];\r\n\r\nIf start is 62, then (start/8+2) is 9. s is the same 9-byte cp, and s[start/8 +2] is a one-byte overflow.", "submit_date": "2016-02-10", "submitter_name": "Yoav Nir", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2503", "doc-id": "RFC959", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "   5.3.  COMMANDS\r\n\r\n      The commands are Telnet character strings transmitted over the\r\n      control connections as described in the Section on FTP Commands.\r\n      The command functions and semantics are described in the Section\r\n      on Access Control Commands, Transfer Parameter Commands, FTP\r\n      Service Commands, and Miscellaneous Commands.", "correct_text": "   5.3.  COMMANDS\r\n\r\n      The commands are Telnet character strings transmitted over the\r\n      control connections as described in the Section on FTP Commands.\r\n      The command functions and semantics are described in the Section\r\n      on Access Control Commands, Transfer Parameter Commands, and FTP\r\n      Service Commands.", "notes": "There does not appear to be a section on Miscellaneous Commands, although SITE and NOOP are listed as \"Miscellaneous Commands\" in Section 5.4, Sequencing of Commands and Replies. SITE and NOOP are described in 4.1.3, FTP Service Commands.", "submit_date": "2010-08-26", "submitter_name": "Anthony Bryan", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2483", "doc-id": "RFC4875", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(3)  Section 6.1 -- bad internal reference, and missing article\r\n\r\nWithin Section 6.1, the first text lines on page 17 say:\r\n\r\n|  The S2L sub-LSP flow descriptor has the same format as S2L sub-LSP\r\n|  descriptor in section 4.1 with the difference that a\r\n   P2MP_SECONDARY_RECORD_ROUTE object is used in place of a P2MP\r\n   SECONDARY_EXPLICIT_ROUTE object.  [...]\r\n\r\nThe text should insert the missing article and correct the reference to point to Section 5.1\r\n", "correct_text": "\r\n|  The S2L sub-LSP flow descriptor has the same format as the S2L\r\n|  sub-LSP descriptor in section 5.1 with the difference that a\r\n   P2MP_SECONDARY_RECORD_ROUTE object is used in place of a P2MP\r\n   SECONDARY_EXPLICIT_ROUTE object.  [...]\r\n", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4580", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "This exchange has been termed a three-way hand shake.", "correct_text": "This exchange has been termed a three-way handshake.", "notes": "", "submit_date": "2016-01-05", "submitter_name": "Masoud Valizadeh", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2405", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.4.1", "orig_text": "(6)  [ typos in mathematical text ]\r\n\r\nLemma 1 and its proof in Appendis A.4.1, on page 20, contains\r\nseveral typos.\r\n\r\nIn Lemma 1, the line,\r\n\r\n          P_{N,m}(z) = Pr [x mod m = z : x randomly pick in Z_{n}]\r\n                                                              ^^^\r\nshould read:\r\n\r\n          P_{N,m}(z) = Pr [x mod m = z : x randomly pick in Z_{N}]\r\n\r\nThis corrects the use of an undefined variable, n, by using the\r\nvariable N as expected from the LHS term.\r\n\r\nIn the Proof of Lemma 1, the case distinction for z contains an\r\nimproper relational operator at two places.\r\nTo adjust to the possible range of values (cf. item (2) above!),\r\nthe formula parts:\r\n\r\n   P_{N,m}(z)  =  [ ... ]\r\n\r\n                = mq/N * 1/m +\r\n                   (N - mq)/N * 1 / (N - mq)     if 0 <= z < N - mq\r\n|                  0                             if N - mq <= z <= m\r\n                                                               ^^^^\r\n                = q/N +\r\n                   r/N * 1 / r                   if 0 <= z < N - mq\r\n|                  0                             if r <= z <= m\r\n                                                          ^^^^\r\nshould be modified to read:\r\n\r\n   P_{N,m}(z)  =  [ ... ]\r\n\r\n                = mq/N * 1/m +\r\n                   (N - mq)/N * 1 / (N - mq)     if 0 <= z < N - mq\r\n|                  0                             if N - mq <= z < m\r\n\r\n                = q/N +\r\n                   r/N * 1 / r                   if 0 <= z < N - mq\r\n|                  0                             if r <= z < m", "correct_text": "see above\r\n", "notes": "typos", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2407", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.5", "orig_text": "   Let T denotes the time to perform one computation of H.  [...]\r\n               ^", "correct_text": "   Let T denote the time to perform one computation of H.  [...]", "notes": "typo. within Appendix A.5, in the lower half of page 23, the text for\r\n\"Assumption 1\".", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2409", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "C", "orig_text": "In Appendix C, the source code on page 30 (lower half) and\r\npage 31 contains improperly indented lines.\r\n\r\nThe following three line groups should be indented by 6 more character\r\npositions to make them conformant to RFC style 'nice' format:\r\n\r\n- on page 30:\r\n\r\n     String result = null;\r\n     int digits = addChecksum ? (codeDigits + 1) : codeDigits;\r\n\r\n- on page 30:\r\n\r\n     if ( (0<=truncationOffset) &&\r\n            (truncationOffset<(hash.length-4)) ) {\r\n         offset = truncationOffset;\r\n     }\r\n\r\n- on page 31:\r\n\r\n     if (addChecksum) {\r\n         otp =  (otp * 10) + calcChecksum(otp, codeDigits);\r\n     }\r\n     result = Integer.toString(otp);\r\n     while (result.length() < digits) {\r\n         result = \"0\" + result;\r\n     }\r\n     return result;", "correct_text": " [see above]", "notes": "[ further formatting (indentation) issues ]", "submit_date": "2006-01-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2414", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "In the introductory text in Section 8, function prototype arguments\r\nare inconsistently presented; all should be presented in ANSI-C style\r\nconsistently.\r\nAlso, the indentation of two lines breaks the otherwise consistent\r\nlayout.\r\n\r\nOn mid-page 16, the lines,\r\n\r\n   Functions:\r\n|                 int SHA$$$Reset(SHA$$$Context *);\r\n            Reset the hash context state\r\n|     int SHA$$$Input(SHA$$$Context *, const uint8_t *octets,\r\n                  unsigned int bytecount);\r\n            Incorporate bytecount octets into the hash.\r\n\r\nshould read:\r\n\r\n   Functions:\r\n|     int SHA$$$Reset(SHA$$$Context *context);\r\n            Reset the hash context state\r\n|     int SHA$$$Input(SHA$$$Context *context, const uint8_t *octets,\r\n                  unsigned int bytecount);\r\n            Incorporate bytecount octets into the hash.\r\n\r\nand on page 17, the lines,\r\n\r\n   Functions:\r\n|     int USHAReset(USHAContext *, SHAversion whichSha);\r\n            Reset the hash context state.\r\n|     int USHAInput(USHAContext *,\r\n                  const uint8_t *bytes, unsigned int bytecount);\r\n            Incorporate bytecount octets into the hash.\r\n|     int USHAFinalBits(USHAContext *,\r\n                  const uint8_t bits, unsigned int bitcount);\r\n|                 Incorporate bitcount bits into the hash.\r\n\r\nshould read:\r\n\r\n   Functions:\r\n|     int USHAReset(USHAContext *context, SHAversion whichSha);\r\n            Reset the hash context state.\r\n|     int USHAInput(USHAContext *context,\r\n                  const uint8_t *bytes, unsigned int bytecount);\r\n            Incorporate bytecount octets into the hash.\r\n|     int USHAFinalBits(USHAContext *context,\r\n                  const uint8_t bits, unsigned int bitcount);\r\n|           Incorporate bitcount bits into the hash.", "correct_text": "", "notes": "inconsistent prototypes, unpleasant/inconsistent indentation\r\n", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2416", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "The initial Description in the file, on page 24 of the RFC, says:\r\n\r\n                                             vvvvvvvvvvvvvvvvvv\r\n *  Description:\r\n *      This file implements the Secure Hash Signature Standard\r\n *      algorithms as defined in the National Institute of Standards\r\n *      and Technology Federal Information Processing Standards\r\n *      Publication (FIPS PUB) 180-1 published on April 17, 1995, 180-2\r\n *      published on August 1, 2002, and the FIPS PUB 180-2 Change\r\n *      Notice published on February 28, 2004.", "correct_text": "It should say:\r\n\r\n *  Description:\r\n|*      This file implements the Secure Hash Algorithm SHA-1\r\n *      as defined in the National Institute of Standards\r\n *      and Technology Federal Information Processing Standards\r\n *      Publication (FIPS PUB) 180-1 published on April 17, 1995, 180-2\r\n *      published on August 1, 2002, and the FIPS PUB 180-2 Change\r\n *      Notice published on February 28, 2004.", "notes": "See Errata 2415.\r\nAlso replace \"algorithms\" by \"Algorithm SHA-1\" to properly match\r\nthe description with the scope of the file.", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2440", "doc-id": "RFC4634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "The sample code presents almost all formal function arguments of type\r\narray with predefined (constant) length with this explicit length.\r\nContrary to that, the function definitions for SHA384_512Reset do not\r\nsupply the expected size of the formal argument 'H0'.\r\nThis inconsistency should be corrected -- as in items (18) and (28)\r\nabove.\r\n\r\nNear the top of page 65, RFC 4634 says:\r\n\r\n#ifdef USE_32BIT_ONLY\r\nstatic int SHA384_512Reset(SHA512Context *context, uint32_t H0[])\r\n#else /* !USE_32BIT_ONLY */\r\nstatic int SHA384_512Reset(SHA512Context *context, uint64_t H0[])\r\n#endif /* USE_32BIT_ONLY */\r\n\r\nFor consistency and clarity, it should say:\r\n\r\n#ifdef USE_32BIT_ONLY\r\nstatic int SHA384_512Reset(SHA512Context *context,\r\n                           uint32_t H0[SHA512HashSize/4]);\r\n#else /* !USE_32BIT_ONLY */\r\nstatic int SHA384_512Reset(SHA512Context *context,\r\n                           uint64_t H0[SHA512HashSize/8]);\r\n#endif /* USE_32BIT_ONLY */", "correct_text": "", "notes": "", "submit_date": "2006-08-13", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4581", "doc-id": "RFC4175", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "Security considerations: See section 9 of RFC 4175.", "correct_text": "Security considerations: See section 8 of RFC 4175.", "notes": "Wrong section number for Security considerations", "submit_date": "2016-01-06", "submitter_name": "John Fletcher", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2485", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(5)  Section 8.2 -- text duplication and inconsistency\r\n\r\nThe second paragraph of Section 8.2 (on page 23),\r\n\r\n   A transit LSR sets the Sub-Group Originator ID in the FILTER_SPEC\r\n   object(s) of a Resv message to the value that was received in the\r\n   corresponding Path message.  If any of the incoming Resv messages\r\n   corresponding to a single Path message carry a RESV_CONFIRM object,\r\n   then the LSR MUST include a RESV_CONFIRM object in the corresponding\r\n   Resv message that it sends upstream.  If the Sub-Group Originator ID\r\n   is its own address, then it MUST set the receiver address in the\r\n   RESV_CONFIRM object to this address, else it MUST propagate the\r\n   object unchanged.\r\n\r\nshould be deleted entirely !\r\n\r\nRationale:\r\n  The first two sentences in this paragraph are repeated almost\r\n  literally in the subsequent (third) paragraph of the section.\r\n  The third (last) sentence above essentially is superseeded, in\r\n  a more precise manner, by the second and the third bullet at the\r\n  bottom of page 23.\r\n  But, perhaps most importantly, the first bullet there handles a\r\n  subcase not covered by, and hence mis-specified, by that sentence!\r\n\r\n  Apparently, the lower half of page 23 is a revised revision of\r\n  the quoted second paragraph, which should have been deleted.\r\n", "correct_text": "", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2486", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(6)  Section 10.2 -- clarification including mismatched angle\r\n                     brackets, word omissions, and punctuation\r\n\r\nWithin Section 10.2, the third paragraph on page 26 says:\r\n\r\n   [...]\r\n|  A newly received Path message that matches SESSION object and Sender\r\n   Tunnel Address, LSP ID, Sub-Group Originator ID> with existing Path\r\n|  state carrying the same or different Sub-Group_ID, referred to Sub-\r\n|  Group_ID(n) is processed as follows:\r\n", "correct_text": "|  A newly received Path message with SESSION object and <Sender Tunnel\r\n|  Address, LSP ID, Sub-Group Originator ID> tuple matching existing\r\n|  Path state carrying the same or a different Sub-Group_ID, referred to\r\n|  as Sub-Group_ID(n), is processed as follows:\r\n", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2487", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.3", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(7)  Section 11.3\r\n\r\nEstablished language in IETF (and other) publications is \"tear down\",\r\nnot simply \"tear\", when it comes to the deletion of connections etc.\r\n\r\nTherefore, while not really wrong, I would have appreciated the\r\nfollowing changes:\r\n\r\n- in the 5th line of the 3rd paragraph of Section 11.3 (on page 28):\r\n       \"It does not tear any other branches ...\"\r\n  -->  \"It does not tear down any other branches ...\"\r\n\r\n- in the 5th paragraph of Section 11.3, in the last text line on p.28:\r\n       \"... that are explicitely torn ...\"\r\n  -->  \"... that are explicitely torn down ...\"\r\n\r\n[ I note this minor issue just for consideration in the preparation\r\n  of future / derived work. ]\r\n", "correct_text": "", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2488", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "15.1.2", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(8)  Section 15.1.2 -- another typo\r\n\r\nOn page 31, in the 6th line of the first paragraph of Section 15.1.2,\r\n\r\n  \"being backed- up\"  should be  \"being backed up\"\r\n\r\n[ The hyphenated form, \"backed-up\" is only appropriate in adverbial\r\n  context, e.g., \"a backed-up LSP\". ]\r\n\r\n", "correct_text": "", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2489", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "16", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(9)  Section 16 -- typo/grammar\r\n\r\nWithin Section 16, the third paragraph on page 34 says:\r\n\r\n   There maybe overhead for an operator to configure ...\r\n\r\nIt should say:\r\n\r\n   There may be overhead for an operator to configure ...\r\n            ^\r\n\r\nRationale: Otherwise, the sentence lacks of a verb.\r\n", "correct_text": "", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2490", "doc-id": "RFC4875", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "17", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(10)  Section 17 -- bad internal reference\r\n\r\nWithin Section 17, in the second paragraph on page 35, the reader\r\nis referred to:\r\n                 \"Figure 2 in section 24\"\r\nwhich should be:\r\n                 \"Figure 2 in Appendix A\"\r\n\r\n", "correct_text": "", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2491", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "18", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(11)  Section 18 -- typo (text reformatting problem ?)\r\n\r\nWithin Section 18, at the bottom of page 35,\r\n    \"re- merge\"  should be  \"re-merge\"\r\n\r\n", "correct_text": "", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4582", "doc-id": "RFC3107", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "[... section 3: ...]\r\n   A BGP speaker can withdraw a previously advertised route (as well as\r\n   the binding between this route and a label) by either (a) advertising\r\n   a new route (and a label) with the same NLRI as the previously\r\n   advertised route, or (b) listing the NLRI of the previously\r\n   advertised route in the Withdrawn Routes field of an Update message.\r\n   The label information carried (as part of NLRI) in the Withdrawn\r\n   Routes field should be set to 0x800000.  (Of course, terminating the\r\n   BGP session also withdraws all the previously advertised routes.)\r\n\r\n4. Advertising Multiple Routes to a Destination\r\n\r\n   A BGP speaker may maintain (and advertise to its peers) more than one\r\n   route to a given destination, as long as each such route has its own\r\n   label(s).\r\n\r\n   The encoding described above allows a single BGP Update message to\r\n   carry multiple routes, each with its own label(s).\r\n\r\n   In the case where a BGP speaker advertises multiple routes to a\r\n   destination, if a route is withdrawn, and a label(s) is specified at\r\n   the time of withdrawal, only the corresponding route with the\r\n   corresponding label is withdrawn.  If a route is withdrawn, and no\r\n   label is specified at the time of withdrawal, then only the\r\n   corresponding unlabeled route is withdrawn; the labeled routes are\r\n   left in place.\r\n[...]", "correct_text": "-- ALTERNATE 1: require label value --\r\n\r\n   A BGP speaker can withdraw a previously advertised route by either\r\n   (a) advertising a new route with the same NLRI (including label) as\r\n   the previously advertised route, or (b) listing the NLRI of the\r\n   previously advertised route in the Withdrawn Routes field of an\r\n   Update message.  The label information carried (as part of NLRI) in\r\n   the Withdrawn Routes field MUST be set to the value previously\r\n   announced.  (Of course, terminating the BGP session also withdraws\r\n   all the previously advertised routes.)\r\n\r\n   The binding between route and label cannot be updated to change the\r\n   label without withdrawing the old label and sending an update with\r\n   the new label.\r\n\r\n[keep section 4 unchanged]\r\n\r\n-- ALTERNATE 2: drop multiple label support --\r\n\r\n   A BGP speaker can withdraw a previously advertised route (as well as\r\n   the binding between this route and a label) by either (a) advertising\r\n   a new route (and a label) with the same prefix as the previously\r\n   advertised route, or (b) listing the NLRI of the previously\r\n   advertised route in the Withdrawn Routes field of an Update message.\r\n   The label information carried (as part of NLRI) in the Withdrawn\r\n   Routes field should be set to 0x800000.  (Of course, terminating the\r\n   BGP session also withdraws all the previously advertised routes.)\r\n\r\n[remove section 4, remove capability \"4\" in section 5]\r\n\r\n-- ALTERNATE 3: clarify implications of capability \"4\" --\r\n\r\n[optionally, change section 3:]\r\n   The label information carried (as part of NLRI) in the Withdrawn\r\n   Routes field SHOULD be set to the value previously announced.\r\n\r\n[insert section 5.1:]\r\n5.1. Implications of Multiple Routes Capability\r\n\r\n   Implementing the \"multiple routes\" capability introduced above\r\n   slightly changes the processing of update and withdraw messages to\r\n   requiring an exact match on the label, i.e. including it in NLRI\r\n   comparisons.\r\n\r\n   To ensure interoperability, an implementation that has this\r\n   capability SHOULD NOT send updates with different label values on a\r\n   session whose peer does not advertise the capability.  The peer would\r\n   in this case only hold the latest update, possibly introducing label\r\n   oscillations.  Further, the implementation MUST process incoming\r\n   updates and withdraws on such sessions as if their labels were\r\n   wildcards, removing any previous routes with the same prefix.  It\r\n   MUST NOT hold the same prefix with any but the last seen label value\r\n   on these sessions.\r\n", "notes": "This issue was previously discussed in\r\nhttps://osdir.com/ml/ietf.idr/2004-06/msg00010.html\r\nhttps://osdir.com/ml/ietf.idr/2004-06/msg00018.html\r\n\r\nSections 3 and 4 are inherently conflicting. The conflict is:\r\n\r\nSection 3 states a withdraw \"should\" be sent with a null label/BoS=1. This means it's not possible to withdraw a specific labeled route, instead all routes with the given prefix would need to be withdrawn. However, section 4 specifies exact-match behavior for processing updates and withdraws.\r\n\r\nAlso, the Section 3 text is semantically/editorially wrong in itself, saying (shortened) \"withdraw [...] binding [... by] new route (and a label) with the same NLRI\".  However, the label is part of the NLRI; an update with the same NLRI could thus not withdraw the binding, only possibly cause it to not be selected as best path anymore by updating attributes.\r\n\r\nI have not checked what other implementations do; Quagga (which only implements this as route reflector):\r\n- does not implement SAFI 4, but applies the behavior on SAFI 128 (VPN)\r\n- does not advertise capability 4\r\n- excludes the label value from all comparisons\r\n- will only keep the last label value received\r\n- will set the label on withdraws to all zeroes (ignoring the recommended value)\r\n\r\nNote that, as with Quagga, this also affects BGP-VPN implementations since these essentially inherit the behavior. Also note that the \"Multiple Routes Capability\" is global over all AFI/SAFI pairs.\r\n\r\n\r\nP.S.: Out of curiosity / for IDR mailing list: for anyone implementing 3107 or 4364: does your implementation include/advertise the \"multiple routes\" capability?", "submit_date": "2016-01-06", "submitter_name": "David Lamparter", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3260", "doc-id": "RFC5598", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "4.3.1. Mail Submission Agent (MSA)\r\n\r\n\r\n   A Mail Submission Agent (MSA) accepts the message submitted by the\r\n   aMUA and enforces the policies of the hosting ADMD and the\r\n   requirements of Internet standards.", "correct_text": "4.3.1. Message Submission Agent (MSA)\r\n\r\n\r\n   A Message Submission Agent (MSA) accepts the message submitted by the\r\n   aMUA and enforces the policies of the hosting ADMD and the\r\n   requirements of Internet standards.", "notes": "The document tends to use \"Message\" rather than \"Mail\".  However, in the case of the MSA, it uses \"Mail\" more than \"Message\".\r\n\r\nThe document probably needs a pass to ensure consistent use of both terms throughout.", "submit_date": "2012-06-15", "submitter_name": "Murray Kucherawy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2492", "doc-id": "RFC4875", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "19", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(12)  Section 19\r\n\r\n(12a) -- lack of precision / completeness\r\n\r\nThe sub-sections of Section 19 mostly remain a bit unspecific with\r\nrespect to Class *numbers* (only Section 19.3 does supply these),\r\nwhereas C-Type values always are specified fully.\r\n\r\nFor uniformity and completeness, and for the ease of the reader,\r\nthe following changes/amendments (determined after IANA lookup)\r\nshould be applied -- adopting the style of the RFC text from\r\nSection 19.3 --, to the lines immediately above the class data\r\nstructure diagrams (I use abbreviated, diff-like notation):\r\n\r\no  in Section 19.1.1 (on mid-page 39):\r\n\r\n   Class = SESSION, P2MP_LSP_TUNNEL_IPv4 C-Type = 13\r\n--\r\n   SESSION Class = 1, P2MP_LSP_TUNNEL_IPv4 C-Type = 13\r\n\r\no  in Section 19.1.2 (on page 40):\r\n\r\n   Class = SESSION, P2MP_LSP_TUNNEL_IPv6 C-Type = 14\r\n--\r\n   SESSION Class = 1, P2MP_LSP_TUNNEL_IPv6 C-Type = 14\r\n\r\no  in Section 19.2.1 (on top of page 41):\r\n\r\n   Class = SENDER_TEMPLATE, P2MP_LSP_TUNNEL_IPv4 C-Type = 12\r\n--\r\n   SENDER_TEMPLATE Class = 11, P2MP_LSP_TUNNEL_IPv4 C-Type = 12\r\n\r\no  in Section 19.2.2 (on top of page 42):\r\n\r\n   Class = SENDER_TEMPLATE, P2MP_LSP_TUNNEL_IPv6 C-Type = 13\r\n--\r\n   SENDER_TEMPLATE Class = 11, P2MP_LSP_TUNNEL_IPv6 C-Type = 13\r\n\r\no  in Section 19.4.1 (at the bottom of page 43):\r\n\r\n   Class = FILTER_SPEC, P2MP LSP_IPv4 C-Type = 12\r\n--\r\n   FILTER_SPEC Class = 10, P2MP LSP_IPv4 C-Type = 12\r\n\r\no  in Section 19.4.2 (at the top of page 44):\r\n\r\n   Class = FILTER_SPEC, P2MP LSP_IPv6 C-Type = 13\r\n--\r\n   FILTER_SPEC Class = 10, P2MP LSP_IPv6 C-Type = 13\r\n\r\no  in Section 19.5 (on page 44):\r\n\r\n                       The class of the P2MP SERO is the same as the\r\n   SERO defined in [RFC4873].\r\n--\r\n                       The class of the P2MP SERO is 200, as assigned\r\n   for the SERO in [RFC4873].\r\n\r\no  in Section 19.6 (on page 44):\r\n\r\n                The class of the P2MP SRRO is the same as the SRRO\r\n   defined in [RFC4873].\r\n--\r\n                The class of the P2MP SRRO is 201, as assigned for\r\n   the SRRO in [RFC4873].\r\n\r\n\r\n", "correct_text": "", "notes": "\n --VERIFIER NOTES-- \nThe risk of errors is reduced by only defining numbers once in a document. In any case, sufficient information exists in the document to make implementation simple.", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2493", "doc-id": "RFC4875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "19", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(12)  Section 19\r\n\r\n(12b) -- unusual presentation\r\n\r\nIt is unusual to present the explanations of fields in a diagram\r\nin a sequence that does not correspond to the sequence of the\r\nfields therein.\r\n\r\nTherefore, I would have appreciated it to find ...\r\n\r\no  in Section 19.2.1 (on page 41) the explanation for \"LSP ID\"\r\n   not at the bottom of the list, but at the second position,\r\n   below the explanation for \"IPv4 tunnel sender address\";\r\n\r\nand\r\n\r\no  in Section 19.2.2 (on page 42) the explanation for \"LSP ID\"\r\n   not at the bottom of the list, but at the second position,\r\n   below the explanation for \"IPv6 tunnel sender address\";\r\n", "correct_text": "", "notes": "", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2494", "doc-id": "RFC4875", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "20.2", "orig_text": "Erratum created by duplication from multipart Erratum 961 raised by Alfred Hoenes.\r\n\r\n(13)  Section 20.2 -- similar to (12a)\r\n\r\nContrary to Section 20.1, Section 20.2 is silent about the class\r\nnumbers.  As in item (12a) above, for consistency and completeness,\r\nthe following changes should be applied, in accordance with the\r\nstyle of the IANA registry file and Section 20.1 :\r\n\r\n   Class Name = SESSION\r\n--\r\n     1  Class Name = SESSION\r\n\r\n\r\n   Class Name = SENDER_TEMPLATE\r\n--\r\n    11  Class Name = SENDER_TEMPLATE\r\n\r\n\r\n   Class Name = FILTER_SPEC\r\n--\r\n    10  Class Name = FILTER_SPEC\r\n\r\n\r\n   Class Name = SECONDARY_EXPLICIT_ROUTE (Defined in [RFC4873])\r\n--\r\n   200  Class Name = SECONDARY_EXPLICIT_ROUTE\r\n\r\n\r\n   Class Name = SECONDARY_RECORD_ROUTE (Defined in [RFC4873])\r\n--\r\n   201  Class Name = SECONDARY_RECORD_ROUTE\r\n\r\n", "correct_text": "", "notes": "\n --VERIFIER NOTES-- \nNo need to make this change as all the important information is already present in the document in the IANA section.", "submit_date": "2007-05-15", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2496", "doc-id": "RFC3659", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "3.2\r\n...\r\nVarious 4xy replies are also possible in appropriate circumstances.\r\n\r\n4.2\r\n...\r\nVarious 4xy replies are also possible in appropriate circumstances.\r\n\r\n7.2.1\r\n   Many of the 4xy and 5xy responses defined in section 4.2 of STD 9,\r\n   RFC 959 [3] are possible in response to the MLST and MLSD commands.\r\n...\r\n   Other replies (530, 553, 503, 504, and any of the 4xy replies) are\r\n   also possible in appropriate circumstances.\r\n", "correct_text": "3.2\r\n...\r\nVarious 4yz replies are also possible in appropriate circumstances.\r\n\r\n4.2\r\n...\r\nVarious 4yz replies are also possible in appropriate circumstances.\r\n\r\n7.2.1\r\n   Many of the 4yz and 5yz responses defined in section 4.2 of STD 9,\r\n   RFC 959 [3] are possible in response to the MLST and MLSD commands.\r\n...\r\n   Other replies (530, 553, 503, 504, and any of the 4yz replies) are\r\n   also possible in appropriate circumstances.\r\n", "notes": "RFC 959, Section 4.2 refers to these reply codes as 4yz and 5yz, instead of 4xy and 5xy.", "submit_date": "2010-08-21", "submitter_name": "Anthony Bryan", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2495", "doc-id": "RFC5545", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.7", "orig_text": "Description: This property parameter identifies the inline encoding\r\n    used in a property value.  The default encoding is \"8BIT\",\r\n    corresponding to a property value consisting of text.  The\r\n    \"BASE64\" encoding type corresponds to a property value encoded\r\n    using the \"BASE64\" encoding defined in [RFC2045].\r\n\r\n", "correct_text": "Description: This property parameter identifies the inline encoding\r\n    used in a property value.  The default encoding is \"8BIT\",\r\n    corresponding to a property value consisting of text.  The\r\n    \"BASE64\" encoding type corresponds to a property value encoded\r\n    using the \"BASE64\" encoding defined in [RFC4648].\r\n                                            ^^^^^^^", "notes": "Section \"Format Definition\" above the \"Description\" paragraph cites [RFC2045] as defining value \"8BIT\" and [RFC4648] covering value \"BASE64\".", "submit_date": "2010-08-21", "submitter_name": "Scott Furry", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2504", "doc-id": "RFC4503", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "B.1.  Testing Round Function and Key Setup\r\n\r\n     key  = [91 28 13 29 2E ED 36 FE 3B FC 62 F1 DC 51 C3 AC]\r\n\r\n[...]\r\n\r\nB.2.  Testing the IV Setup\r\n\r\n     key  = [91 28 13 29 2E ED 36 FE 3B FC 62 F1 DC 51 C3 AC]", "correct_text": "B.1.  Testing Round Function and Key Setup\r\n\r\n     key  = [91 28 13 29 2E 3D 36 FE 3B FC 62 F1 DC 51 C3 AC]\r\n\r\n[...]\r\n\r\nB.2.  Testing the IV Setup\r\n\r\n     key  = [91 28 13 29 2E 3D 36 FE 3B FC 62 F1 DC 51 C3 AC]", "notes": "There is a typographical error in the example key used in sections B.1 and B.2. As a result of this error, the key does not match the examples.\r\n\r\nThe correct key values appear in Appendix A.", "submit_date": "2010-08-27", "submitter_name": "Justin Harrison", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7037", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 32 84 40 00 ff 06 69 f7 ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 ff 12 ac d5 b5 e1 cb 0e fb ef\r\n     e0 12 ff ff 38 8e 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 57 67 72 f3 00 02 4c ce 1d 10 54 3d\r\n     09 30 6f 9a ce a6 3a 8c 68 cb 9a 70\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 32 84 40 00 ff 06 69 f7 ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 ff 12 ac d5 b5 e1 cb 0e fb ef\r\n     e0 12 ff ff f2 60 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 57 67 72 f3 00 02 4c ce 1d 10 54 3d\r\n     09 30 6f 9a ce a6 3a 8c 68 cb 9a 70\r\n", "notes": "The TCP checksum shown (0x388e) is wrong, it should be 0xf260.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:48:02"}, {"errata_id": "2505", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12.5.4.", "orig_text": "   Because of this inconsistency, it is necessary to resynchronize the\r\n   client with the metadata server and its storage devices and make any\r\n   potential changes available to other clients. \r\n\r\nAND\r\n\r\n   For file-based layouts, synchronization of\r\n   attributes between the metadata and storage devices, primarily the\r\n   size attribute, is required.\r\n", "correct_text": "   Because of this inconsistency, in general, it is necessary to resynchronize the\r\n   client with the metadata server and its storage devices and make any\r\n   potential changes available to other clients. \r\n\r\nAND\r\n\r\n   For file-based layouts, synchronization of\r\n   attributes between the metadata and storage devices, primarily the\r\n   size attribute, is not required, but the use of LAYOUTCOMMIT provides \r\n   a way to optimize the synchronization. Indeed, if a LAYOUT4_NFSV4_1_FILES\r\n   layout is ever revoked, the metadata server MUST direct all data servers to\r\n   commit any modified data of the file to stable storage, and synchronize \r\n   the file's size and time_modify attributes on the metadata server\r\n   with the those on the data server.\r\n", "notes": "Without this correction, the implication is that a file could be truncated if a  LAYOUT4_NFSV4_1_FILES layout was revoked before LAYOUTCOMMIT, which would then mean that every append operation to a data server would require a LAYOUTCOMMIT, which is an absurd consequence.", "submit_date": "2010-08-31", "submitter_name": "Michael Eisler", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:27:28"}, {"errata_id": "2506", "doc-id": "RFC2631", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.1.1", "orig_text": "6. For i = 0 to m' - 1\r\n\r\n        U = U + (SHA1[SEED + i] XOR SHA1[(SEED + m' + i)) * 2^(160 * i)\r\n\r\n   Note that for m=160, this reduces to the algorithm of [FIPS-186]\r\n\r\n        U = SHA1[SEED] XOR SHA1[(SEED+1) mod 2^160 ].\r\n", "correct_text": "6. For i = 0 to m' - 1\r\n\r\n        U = U + [SHA1(seed + i) Xor SHA1((seed + m' +i ) mod 2^{seedlen})] * 2^{160 * i}\r\n\r\n   Note that for m=160, this reduces to the algorithm of [FIPS-186]\r\n\r\n        U = [SHA1(seed) Xor SHA1((seed +1) mod 2^{seedlen})], where seedlen\r\n            is the binary length of seed.", "notes": "The line:\r\n  U = U + (SHA1[SEED + i] XOR SHA1[(SEED + m' + i)) * 2^(160 * i)\r\nis syntactically incorrect. Closing bracket of last 'SHA1[' is missing.\r\nMoreover, when m=160 (m'=1), the loop cannot reduce to the line:\r\n  U = SHA1[SEED] XOR SHA1[(SEED + 1) mod 2^160]\r\nas it can be easily seen.", "submit_date": "2010-09-01", "submitter_name": "Yves Legrandgerard", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2507", "doc-id": "RFC5997", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3, pg.9", "orig_text": "[[  last paragraph on page 9 (extending to page 10): ]]\r\n\r\n|  The Access-Accept MAY contain a Reply-Message or Message-\r\n   Authenticator attribute.  It SHOULD NOT contain other attributes.\r\n   The Accounting-Response packets sent in response to a Status-Server\r\n   query SHOULD NOT contain any attributes.  [...]\r\n", "correct_text": "|  The Access-Accept sent in response to a Status-Server query MAY\r\n   contain a Reply-Message or Message-Authenticator attribute.  It\r\n   SHOULD NOT contain other attributes.\r\n   The Accounting-Response packets sent in response to a Status-Server\r\n   query SHOULD NOT contain any attributes.  [...]\r\n", "notes": "Rationale: Bare \"Access-Accept\" is potentially misleading.\r\n  The clause needed to properly restrict the scope of the sentence\r\n  has been added in most similar instances of specification text\r\n  in the RFC, but that has been missed here.  So for consistency and\r\n  clarity, the New text once more provides this additional clause --\r\n  as it already appears in the 3rd sentence of this paragraph.", "submit_date": "2010-09-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2508", "doc-id": "RFC5997", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.6.2, pg.17", "orig_text": "4.6.2.  Interaction with RADIUS Client MIB Modules\r\n\r\n   Clients implementing Status-Server MUST NOT increment [RFC4668] or\r\n   [RFC4670] counters upon reception of Response packets to Status-\r\n|  Server queries.  That is, when a server fully implements Status-\r\n   Server, the counters defined in [RFC4668] and [RFC4670] MUST be\r\n   unaffected by the transmission or reception of packets relating to\r\n   Status-Server.\r\n", "correct_text": "4.6.2.  Interaction with RADIUS Client MIB Modules\r\n\r\n   Clients implementing Status-Server MUST NOT increment [RFC4668] or\r\n   [RFC4670] counters upon reception of Response packets to Status-\r\n|  Server queries.  That is, when a client fully implements Status-\r\n   Server, the counters defined in [RFC4668] and [RFC4670] MUST be\r\n   unaffected by the transmission or reception of packets relating to\r\n   Status-Server.\r\n", "notes": "Rationale: Confusion between \"server\" and \"client\".\r\n  This section deals with client implementations only;\r\n  the reference to a server apparently is the result of an\r\n  oversight in copy-editing text from Section 4.6.1, 2nd para.", "submit_date": "2010-09-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2509", "doc-id": "RFC3315", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "22.7", "orig_text": "A server MAY include an Option Request option in a \r\nReconfigure option to indicate which options the client should \r\nrequest from the server.", "correct_text": "A server MAY include an Option Request option in a \r\nReconfigure message to indicate which options the client should \r\nrequest from the server.", "notes": "There is no such thing as a \"Reconfigure option\". I believe that the intent was to refer to the Reconfigure message instead.", "submit_date": "2010-09-03", "submitter_name": "Suresh Krishnan", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2510", "doc-id": "RFC5216", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "The L bit (length included) is set to indicate the presence of the\r\nfour-octet TLS Message Length field, and MUST be set for the first\r\nfragment of a fragmented TLS message or set of messages.", "correct_text": "The L bit (length included) is set to indicate the presence of the\r\nfour-octet TLS Message Length field, and MUST be set for the first\r\nfragment of a fragmented TLS message.  The L bit MAY be included\r\nin all fragments of a fragmented TLS message, but if included the\r\nTLS Length MUST represent the entire length of the TLS message.", "notes": "The lack of definition for what to do with the L bit and the TLS length field for TLS fragments other than the first fragment is leaving the door open to divergent behavior for whether the L bit and length field are included, what the length contains if they're included, and how to interpret it.", "submit_date": "2010-09-03", "submitter_name": "Min Pae", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2545", "doc-id": "RFC6009", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   # Send a copy to my cell phone to be delivered before 10PM\r\n   if currentdate :value \"lt\"\r\n                  :comparator \"i;ascii-numeric\" \"hour\" \"22\"\r\n   {\r\n       if currentdate :matches \"date\" \"*\" {set \"date\" \"${0}\";}\r\n       if currentdate :matches \"zone\" \"*\" {set \"zone\" \"${0}\";}\r\n|      redirect :copy :bytimeabsolute \"${date}T20:00:00${zone}\"\r\n                :bymode \"return\" \"cellphone@example.com\";\r\n   }\r\n", "correct_text": "   # Send a copy to my cell phone to be delivered before 10PM\r\n   if currentdate :value \"lt\"\r\n                  :comparator \"i;ascii-numeric\" \"hour\" \"22\"\r\n   {\r\n       if currentdate :matches \"date\" \"*\" {set \"date\" \"${0}\";}\r\n       if currentdate :matches \"zone\" \"*\" {set \"zone\" \"${0}\";}\r\n|      redirect :copy :bytimeabsolute \"${date}T22:00:00${zone}\"\r\n                :bymode \"return\" \"cellphone@example.com\";\r\n   }\r\n", "notes": "Rationale:  \"10PM\" corresponds to  T22:00:00 , not  T20:00:00 .", "submit_date": "2010-10-05", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2511", "doc-id": "RFC5222", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.3.5, 8.4.2", "orig_text": "In 8.3.5:\r\n     <locationValidation>\r\n       <valid>country A1 A3 A6</valid>\r\n       <invalid>PC</invalid>\r\n       <unchecked>HNO</unchecked>\r\n     </locationValidation>\r\n\r\nIn 8.4.2:\r\n   ... Each element contains a list of tokens separated by\r\n   whitespace, enumerating the civic location labels used in child\r\n   elements of the <civicAddress> element.  ...\r\nand:\r\n   The example shown in Figure 5 and in Figure 6 indicates that the\r\n   tokens 'country', 'A1', 'A3', and 'A6' have been validated by the\r\n   LoST server.  ...", "correct_text": "In 8.3.5:\r\n     <locationValidation\r\n        xmlns:ca=\"urn:ietf:params:xml:ns:pidf:geopriv10:civicAddr\">\r\n       <valid>ca:country ca:A1 ca:A3 ca:A6</valid>\r\n       <invalid>ca:PC</invalid>\r\n       <unchecked>ca:HNO</unchecked>\r\n     </locationValidation>\r\n\r\nIn 8.4.2:\r\n   ... Each element contains a list of qualified element names separated by\r\n   whitespace, enumerating child elements of the <civicAddress> element.  ...\r\nand:\r\n   The examples shown in Figure 5 and in Figure 6 indicates that the\r\n   tokens 'country', 'A1', 'A3', and 'A6' from [RFC5139] have been validated\r\n   by the LoST server.  ...", "notes": "It's not clear from the description how the location validation response elements are to be interpreted.  The example seems to indicate that the local name (only) for the civic address elements is used.  On the other hand, the schema seems to imply that, because this is a list of xs:QName, a qualified name is used for each.  The text itself is ambiguous.\r\n\r\n----\r\nThis errata is being held for document update. The essence of its issue is being addressed in draft-ietf-geopriv-local-civic. There are two related threads in the ecrit archive. One beginning at\r\nhttp://www.ietf.org/mail-archive/web/ecrit/current/msg07380.html\r\nand one ending at\r\nhttp://www.ietf.org/mail-archive/web/ecrit/current/msg07750.html\r\n\r\n\r\nUsing the local name only could result in errors - it would be possible (albeit inadvisable) to extend RFC 5139 with an element that had the same local name as an existing element or an element in another extension.  As long as the namespace is distinct, this is perfectly legal, but it could lead to a naming conflict here.\r\n\r\nWith this interpretation, the elements in the example in 8.3.5 indicate elements from the LoST namespace (urn:ietf:params:xml:ns:lost1), rather than the civic address namespace (urn:ietf:params:xml:ns:pidf:geopriv10:civicAddr).\r\n\r\nUpdating the description in 8.4.2 and the example in 8.3.5 would ensure that this doesn't result in interoperability problems.", "submit_date": "2010-09-07", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2513", "doc-id": "RFC5783", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7, pg.19", "orig_text": "      [RFC3450] specifies ALC, a rough header format using the RMT\r\n      building blocks, that can be used by multicast content\r\n      dissemination protocols.  ALC is intended to use a multi-rate\r\n      congestion control building block, where the sender does not\r\n      require any feedback, but where multiple multicast groups with\r\n|     different transmission rates are available within and ALC session,\r\n      and receivers control their rates by joining or leaving groups.", "correct_text": "      [RFC3450] specifies ALC, a rough header format using the RMT\r\n      building blocks, that can be used by multicast content\r\n      dissemination protocols.  ALC is intended to use a multi-rate\r\n      congestion control building block, where the sender does not\r\n      require any feedback, but where multiple multicast groups with\r\n|     different transmission rates are available within an ALC session,\r\n      and receivers control their rates by joining or leaving groups.", "notes": "Rationale: confusing typo -- s/and/an/", "submit_date": "2010-09-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2514", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.5.1", "orig_text": "if (0) { ...", "correct_text": "if (unicast ...) { ...", "notes": "expression under if is needed, even using pseudo-code", "submit_date": "2010-09-08", "submitter_name": "Jerzy Miernik", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2515", "doc-id": "RFC5322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A.5", "orig_text": "From: Pete(A nice \\) chap) <pete(his account)@silly.test(his host)>", "correct_text": "From: Pete(A nice \\) chap) <pete@silly.test(his host)>", "notes": "Section 3.4.1: \"Comments and folding white space SHOULD NOT be used around the \"@\" in the addr-spec.\"", "submit_date": "2010-09-10", "submitter_name": "Michael Rushton", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2516", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.8.4.1", "orig_text": "Example:  The following is an example of this property's use when\r\n      another calendar user is acting on behalf of the \"Attendee\":\r\n\r\n       ATTENDEE;SENT-BY=mailto:jan_doe@example.com;CN=John Smith:\r\n        mailto:jsmith@example.com\r\n", "correct_text": "Example:  The following is an example of this property's use when\r\n      another calendar user is acting on behalf of the \"Attendee\":\r\n\r\n       ATTENDEE;SENT-BY=\"mailto:jan_doe@example.com\";CN=John Smith:\r\n                        ^                          ^\r\n        mailto:jsmith@example.com\r\n", "notes": "In the specification for SENT-BY (3.2.18), the r-value MUST be explicitly bound by DQUOTEs (ABNF follows)\r\n\r\nsentbyparam = \"SENT-BY\" \"=\" DQUOTE cal-address DQUOTE", "submit_date": "2010-09-13", "submitter_name": "David Wright", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2546", "doc-id": "RFC2516", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "The DESTINATION_ADDR field contains either a unicast \r\nEthernet destination address, or the Ethernet broadcast address \r\n(0xffffffff).", "correct_text": "The DESTINATION_ADDR field contains either a unicast \r\nEthernet destination address, or the Ethernet broadcast address \r\n(0xffffffffffff).", "notes": "the ethernet broadcast address is 48bit so in hex 0xffffffffffff", "submit_date": "2010-10-06", "submitter_name": "Igor Idziejczak", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2547", "doc-id": "RFC5994", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "a)\r\n\r\nMPLS EXP field\r\n\r\nb)\r\n\r\nEXP-Inferred-PSC LSP (E-LSP)", "correct_text": "a)\r\n\r\nMPLS Traffic Class field\r\n\r\nb)\r\n\r\nExplicitly TC-encoded-PSC LSP (E-LSP)", "notes": "Rationale:\r\n  RFC 5462 has carefully changed the terminology and updated RFCs 3032\r\n  and 3270 (among others); it has given a detailed explantion why this\r\n  needs to be done and confirmed that all future RFCs should\r\n  unconditionally use the updated terms.\r\n  See in particular Sections 2.1 and 2.2 of RFC 5462 for the updates to\r\n  RFC 3032 and RFC 3270 (respectively) that are relevant for this RFC.\r\n\r\n  Ironically, RFC 5994 cites RFC 5462, yet uses the obsolete terms. Sigh!", "submit_date": "2010-10-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2548", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "18.36.3", "orig_text": "csa_fore_chan_attrs, csa_fore_chan_attrs:", "correct_text": "csa_fore_chan_attrs, csa_back_chan_attrs:", "notes": "", "submit_date": "2010-10-11", "submitter_name": "J. Bruce Fields", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4419", "doc-id": "RFC6902", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "A.14", "orig_text": "An example target JSON document:\r\n\r\n   {\r\n     \"/\": 9,\r\n     \"~1\": 10\r\n   }\r\n\r\n   A JSON Patch document:\r\n\r\n   [\r\n     {\"op\": \"test\", \"path\": \"/~01\", \"value\": 10}\r\n   ]\r\n\r\n   The resulting JSON document:\r\n\r\n   {\r\n     \"/\": 9,\r\n     \"~1\": 10\r\n   }", "correct_text": "Proper JSON Pointer escaping should occur when resolving\r\npaths for application to the target document.\r\n\r\nAn example target JSON document:\r\n\r\n   {\r\n     \"/\": 9,\r\n     \"~1\": 10\r\n   }\r\n\r\n   A JSON Patch document:\r\n\r\n   [\r\n     {\"op\": \"add\", \"path\": \"/~01\", \"value\": 11}\r\n   ]\r\n\r\n   The resulting JSON document:\r\n\r\n   {\r\n     \"/\": 9,\r\n     \"~1\": 11\r\n   }", "notes": "At http://tools.ietf.org/html/rfc6902#appendix-A.14 , I have a few issues:\r\n\r\n1. Even though JSON Pointer is referenced elsewhere, I think reference ought to be made here to JSON Pointer in order to clarify what meaning \"escape ordering\" has here.\r\n2. The operation indicated in this section is \"test\" which is not documented in its respective sections as returning any kind of document at all. I believe \"add\" or \"replace\" must have been the intended operation instead. And to make clear that the value of key \"~1\" would have actually been affected by such a modifying operation, the value in the result ought to differ from that in the original document.\n --VERIFIER NOTES-- \nThe example is correct, but could use clarification.  The authors have noted this and put it in their JSON Patch issues list here: https://github.com/json-patch/json-patch-tests/issues/22", "submit_date": "2015-07-17", "submitter_name": "Brett Zamir", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2517", "doc-id": "RFC4566", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.14", "orig_text": "If the <proto> sub-field is \"RTP/AVP\" or \"RTP/SAVP\" the <fmt> \r\nsub-fields contain RTP payload type numbers.  When a list of \r\npayload type numbers is given, this implies that all of these \r\npayload formats MAY be used in the session, but the first of these \r\nformats SHOULD be used as the default format for the session.", "correct_text": "If the <proto> sub-field is \"RTP/AVP\" or \"RTP/SAVP\" the <fmt> \r\nsub-fields contain RTP payload type numbers.  When a list of \r\npayload type numbers is given, this implies that all of these \r\npayload formats MAY be used in the session, and these payload \r\nformats are listed in order of preference, with the first format listed \r\nbeing preferred; in that case the first acceptable payload format \r\nfrom the beginning of the list SHOULD be used for the session.", "notes": "The word \u2018default\u2018 is improper here, because payload format is not implied, but explicitly indicated. This may lead to a misunderstanding and confusion.\r\nThe corrections are proposed in order to avoid confusion and to give complete clear instructions in case of multiple payload type numbers indicated.", "submit_date": "2010-09-13", "submitter_name": "Victor S. Osipov", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2518", "doc-id": "RFC4666", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.", "orig_text": "3.2. Variable-Length Parameter Format\r\n\r\nM3UA-Specific parameters. These TLV parameters are specific to the\r\nM3UA protocol:\r\n\r\nRegistration Result                               0x0208\r\nDeregistration Result                             0x0209\r\nLocal Routing Key Identifier                      0x020a\r\n", "correct_text": "3.2. Variable-Length Parameter Format\r\n\r\nCommon Parameters. These TLV parameters are common across the\r\ndifferent adaptation layers:\r\n\r\nRegistration Result                 0x0014,\r\nDeregistration Result               0x0015,\r\nLocal Routing Key Identifier        0x0018,", "notes": "As the above three parameters mentioned are used for the same purpose in RFC 3868 and in RFC 4666. So the above parameters in RFC 4666 Section 3.2, the M3UA-Specific parameters can be considered to move them into the common parameters section 3.2 of RFC 4666 with the above sepecified values.\r\n\r\nThe advantage could be, for one who implements both SUA & M3UA can use the same encoding and decoding mechanisms/code for both the implementations.\n --VERIFIER NOTES-- \n   Per discussion on the SIGTRAN list, this is a fundamental and non-interoperable change to the protocol.", "submit_date": "2010-09-14", "submitter_name": "Suyash Karmarkar", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2519", "doc-id": "RFC791", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Total Length is the length of the datagram, measured in octets,\r\nincluding internet header and data.  ", "correct_text": "Total Length is the length of the datagram or fragment, measured in octets,\r\nincluding internet header and data.  ", "notes": "Section 2.3 makes it clear that during fragmentation the total length field is corrected to the length of the fragment. Wording such as \"break a datagram into an almost arbitrary number of pieces\" implies that \"datagram\" means the entire original packet. Thus, without the proposed correction, one may be led to believe that the total length contains the length of the original datagram.", "submit_date": "2010-09-14", "submitter_name": "Yaakov (J) Stein", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3261", "doc-id": "RFC3815", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.5.9", "orig_text": "   The mplsLdpFecTable is a table which contains FEC (Forwarding\r\n   Equivalence Class) information.  Each entry/row represents a single\r\n   FEC Element.  There is also an LDP LSP FEC Table, mplsLdpLspFecTable,\r\n   which associates FECs with the LSPs.\r\n", "correct_text": "   The mplsFecTable is a table which contains FEC (Forwarding\r\n   Equivalence Class) information.  Each entry/row represents a single\r\n   FEC Element.  There is also an LDP LSP FEC Table, mplsLdpLspFecTable,\r\n   which associates FECs with the LSPs.\r\n", "notes": "Since draft-06 the mplsLdpFecTable has been renamed mplsFecTable", "submit_date": "2012-06-18", "submitter_name": "Daniel Cohn", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3262", "doc-id": "RFC3815", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "     mplsFecLastChange OBJECT-TYPE\r\n         SYNTAX  TimeStamp\r\n         MAX-ACCESS read-only\r\n         STATUS current\r\n         DESCRIPTION\r\n             \"The value of sysUpTime at the time of the most\r\n             recent addition/deletion of an entry\r\n             to/from the mplsLdpFectTable or\r\n             the most recent change in values to any objects\r\n             in the mplsLdpFecTable.\r\n\r\n             If no such changes have occurred since the last\r\n             re-initialization of the local management subsystem,\r\n             then this object contains a zero value.\"\r\n        ::= { mplsFecObjects 1 }\r\n\r\n", "correct_text": "     mplsFecLastChange OBJECT-TYPE\r\n         SYNTAX  TimeStamp\r\n         MAX-ACCESS read-only\r\n         STATUS current\r\n         DESCRIPTION\r\n             \"The value of sysUpTime at the time of the most\r\n             recent addition/deletion of an entry\r\n             to/from the mplsFecTable or\r\n             the most recent change in values to any objects\r\n             in the mplsFecTable.\r\n\r\n             If no such changes have occurred since the last\r\n             re-initialization of the local management subsystem,\r\n             then this object contains a zero value.\"\r\n        ::= { mplsFecObjects 1 }\r\n\r\n", "notes": "Since draft-06 mplsLdpFecTable has been renamed to mplsFecTable", "submit_date": "2012-06-18", "submitter_name": "Daniel Cohn", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2526", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5 (p.76)", "orig_text": "ipDefaultRouterLifetime OBJECT-TYPE\r\n    SYNTAX     Unsigned32 (0..65535)\r\n    UNITS      \"seconds\"\r\n    MAX-ACCESS read-only\r\n    STATUS     current\r\n    DESCRIPTION\r\n           \"The remaining length of time, in seconds, that this router\r\n            will continue to be useful as a default router.  A value of\r\n            zero indicates that it is no longer useful as a default\r\n            router.  It is left to the implementer of the MIB as to\r\n            whether a router with a lifetime of zero is removed from the\r\n            list.\r\n\r\n            For IPv6, this value should be extracted from the router\r\n            advertisement messages.\"\r\n    REFERENCE \"For IPv6 RFC 2462 sections 4.2 and 6.3.4\"\r\n    ::= { ipDefaultRouterEntry 4 }\r\n", "correct_text": "ipDefaultRouterLifetime OBJECT-TYPE\r\n    SYNTAX     Unsigned32 (0..65535)\r\n    UNITS      \"seconds\"\r\n    MAX-ACCESS read-only\r\n    STATUS     current\r\n    DESCRIPTION\r\n           \"The remaining length of time, in seconds, that this router\r\n            will continue to be useful as a default router.  A value of\r\n            zero indicates that it is no longer useful as a default\r\n            router.  It is left to the implementer of the MIB as to\r\n            whether a router with a lifetime of zero is removed from the\r\n            list.\r\n\r\n            For IPv6, this value should be extracted from the router\r\n            advertisement messages.\"\r\n    REFERENCE \"For IPv6 RFC 2461 sections 4.2 and 6.3.4\"\r\n    ::= { ipDefaultRouterEntry 4 }\r\n", "notes": "The REFERENCE clause of ipDefaultRouterLifetime (p.76) refers to an RFC which does not contain the sections referred to. The correct reference should be to RFC 2461.", "submit_date": "2010-09-19", "submitter_name": "Raphael Garti", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2527", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.8.5.2", "orig_text": "  Example:  The following are examples of this property:\r\n\r\n       RDATE:19970714T123000Z\r\n       RDATE;TZID=America/New_York:19970714T083000\r\n\r\n       RDATE;VALUE=PERIOD:19960403T020000Z/19960403T040000Z,\r\n        19960404T010000Z/PT3H\r\n\r\n       RDATE;VALUE=DATE:19970101,19970120,19970217,19970421\r\n        19970526,19970704,19970901,19971014,19971128,19971129,19971225", "correct_text": "  Example:  The following are examples of this property:\r\n\r\n       RDATE:19970714T123000Z\r\n       RDATE;TZID=America/New_York:19970714T083000\r\n\r\n       RDATE;VALUE=PERIOD:19960403T020000Z/19960403T040000Z,\r\n        19960404T010000Z/PT3H\r\n\r\n       RDATE;VALUE=DATE:19970101,19970120,19970217,19970421,\r\n                                                           ^\r\n        19970526,19970704,19970901,19971014,19971128,19971129,19971225", "notes": "Comma missing at the fold boundary.", "submit_date": "2010-09-20", "submitter_name": "David Wright", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2528", "doc-id": "RFC868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "No section", "orig_text": "and -1,297,728,000 corresponds to 00:00 17 Nov 1858 GMT.", "correct_text": "and -1,297,728,000 (value which would be illegal for this protocol) corresponds to 00:00 17 Nov 1858 GMT.", "notes": "Although it is not explicit in the RFC, the 32-bits value is unsigned (otherwise, it could not end in 2036, as the RFC says). So, a negative value is not possible.", "submit_date": "2010-09-20", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3429", "doc-id": "RFC6435", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "The whole of Section 4", "correct_text": "4.  Loopback Function\r\n\r\n   This section provides a description of the loopback function within        \r\n   an MPLS network.  This function is achieved through management             \r\n   commands, so there is no protocol specification necessary.  However,       \r\n   the loopback function is dependent on the lock function, so it is          \r\n   appropriate to describe it in this document.                               \r\n\r\n   The loopback function is used to test the integrity of a transport   \r\n   path from a MEP to any other node along the same transport path.     \r\n   This is achieved by setting the target node into loopback mode for   \r\n   that transport path, and  transmitting a pattern of test data from   \r\n   the MEP.  The target node loops all data received on the transport   \r\n   path back towards the sending MEP, which extracts the test data      \r\n   and compares it with what it sent.                                   \r\n                                                                        \r\n   Loopback is a function that enables a given node on a transport      \r\n   path to return traffic to the sending MEP for that transport path    \r\n   when in the loopback mode.  This mode corresponds to the situation   \r\n   where, at a given node, a forwarding plane loop is configured, and   \r\n   the incoming direction of a transport path is cross-connected to the \r\n   outgoing reverse direction.  Therefore, except in the case of early  \r\n   TTL expiry, traffic sent by the source will be received by that      \r\n   source.                                                              \r\n                                                                        \r\n   Data-plane loopback is an out-of-service function, as required in     \r\n   Section 2.2.5 of RFC 5860 [1].  This function loops back all traffic  \r\n   (including user data and OAM).  The traffic can be originated from    \r\n   one internal point at the ingress of a transport path within an       \r\n   interface or inserted from an input port of an interface using        \r\n   external test equipment.  The traffic is looped back unmodified       \r\n   (other than normal per-hop processing such as TTL decrement) in the   \r\n   direction of the point of origin by an interface at either an         \r\n   intermediate node or a terminating node.                              \r\n\r\n   It should be noted that the data-plane loopback function for a         \r\n   given transport path can be applied to data-plane loopback points      \r\n   residing on interfaces where there may be no MEP or MIP for that       \r\n   transport path.                                                        \r\n                                                                          \r\n   For data-plane loopback at an intermediate point in a transport path,  \r\n   the loopback needs to be configured to occur at either the ingress or  \r\n   egress interface.  This can be done using the management plane.        \r\n                                                                          \r\n   The management plane can be used to configure the loopback function.   \r\n   The management plane must ensure that the MEPs at either end of a      \r\n   transport path are locked before it requests setting a given node of   \r\n   that transport path into loopback mode.                                \r\n\r\n   The nature of test data and the use of loopback traffic to measure\r\n   packet loss, delay, and delay variation are outside the scope of this\r\n   document.\r\n", "notes": "The changes here reflect a number of minor editorial clarifications.\r\nThe original Errata Report raised by David Ball has been extensively\r\ndebated by the working group resulting in these changes.\r\n\r\nThe motivation is that the published text has caused confusion about\r\nexactly where the loopback function is applied. There was apparent\r\ncontradiction between paragraphs 2 and 7 which seemed to imply that\r\nthe loopback point must be a MEP or a MIP, while paragraph 5 seemded\r\nto imply that loopback is performed at a point where there is no MEP\r\nor MIP.\r\n   \r\nThe working group agrees that the intent was to state that there may\r\nor may not be a MEP or a MIP at the loopback point. I.e., that\r\nloopback may be performed at any point along the transport path.\r\n\r\nThe new text updates paragraphs 2, 3, 5, and 7 to embody this \r\nclarification.\r\n\r\nAdditionally, paragraphs 6 and 7 have received a minor change to \r\nshow the role of the \"management plane\" rather than \"management\" in\r\nthe control of loopback.", "submit_date": "2012-12-12", "submitter_name": "David Ball", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4583", "doc-id": "RFC3390", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.", "orig_text": "   This increased initial window is optional: a TCP MAY start with a\r\n   larger initial window.  However, we expect that most general-purpose\r\n   TCP implementations would choose to use the larger initial congestion\r\n   window given in equation (1) above.", "correct_text": "   This increased initial window is optional: a TCP MAY start with a\r\n   smaller initial window.  However, we expect that most general-purpose\r\n   TCP implementations would choose to use the larger initial congestion\r\n   window given in equation (1) above.", "notes": "The MAY allows use of values smaller than this document allows, not larger.", "submit_date": "2016-01-06", "submitter_name": "Joe Touch", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3432", "doc-id": "RFC6455", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.7", "orig_text": "   o  Unmasked Ping request and masked Ping response\r\n\r\n      *  0x89 0x05 0x48 0x65 0x6c 0x6c 0x6f (contains a body of \"Hello\",\r\n         but the contents of the body are arbitrary)\r\n\r\n      *  0x8a 0x85 0x37 0xfa 0x21 0x3d 0x7f 0x9f 0x4d 0x51 0x58\r\n         (contains a body of \"Hello\", matching the body of the ping)\r\n\r\n", "correct_text": "   o  Unmasked Ping request and masked Pong response\r\n\r\n      *  0x89 0x05 0x48 0x65 0x6c 0x6c 0x6f (contains a body of \"Hello\",\r\n         but the contents of the body are arbitrary)\r\n\r\n      *  0x8a 0x85 0x37 0xfa 0x21 0x3d 0x7f 0x9f 0x4d 0x51 0x58\r\n         (contains a body of \"Hello\", matching the body of the ping)\r\n\r\n", "notes": "The response isn't a Ping, it's a Pong.\r\n --VERIFIER NOTES-- \r\nThe errata system is meant for documentation errors that could cause implementation confusion.  I don't think this will confuse anyone.   ", "submit_date": "2012-12-18", "submitter_name": "Eric Lawrence", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3433", "doc-id": "RFC6455", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.3.2", "orig_text": "However, the |Sec-WebSocket-Extensions| header field MUST NOT appear\r\nmore than once in an HTTP response.\r\n", "correct_text": "The |Sec-WebSocket-Extensions| header field MAY appear multiple \r\ntimes in an HTTP response (which is logically the same as a single\r\n|Sec-WebSocket-Extensions| header field that contains all values).\r\n", "notes": "Section 4.2.2 Step 5 subpart 6 (top of page 25) clearly explains that this header field may appear multiple times in the server's response: \"If multiple extensions are to be used, they can all be listed in a single |Sec-WebSocket-Extensions| header field or split between multiple instances of the |Sec-WebSocket-Extensions| header field. This completes the server's handshake...\"", "submit_date": "2012-12-20", "submitter_name": "Eric Lawrence", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2529", "doc-id": "RFC5990", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4, pg.9", "orig_text": "   Within the CMS, algorithms are identified by object identifiers\r\n|  (OIDs).  With one exception, all of the OIDs used in this document\r\n   were assigned in other IETF documents, in ISO/IEC standards\r\n   documents, by the National Institute of Standards and Technology\r\n   (NIST), and in Public-Key Cryptography Standards (PKCS) documents.\r\n   The two exceptions are the ASN.1 module's identifier (see Appendix\r\n|  B.3) and id-rsa-kem that are both assigned in this document.  The\r\n|  module object identifiers are defined in an arc delegated by the\r\n   former company RSA Data Security Inc. to the S/MIME Working Group.\r\n   When the S/MIME Working Group closes, this arc and its registration\r\n   procedures will be transferred to IANA.", "correct_text": "   Within the CMS, algorithms are identified by object identifiers\r\n|  (OIDs).  With two exceptions, all of the OIDs used in this document\r\n   were assigned in other IETF documents, in ISO/IEC standards\r\n   documents, by the National Institute of Standards and Technology\r\n   (NIST), and in Public-Key Cryptography Standards (PKCS) documents.\r\n   The two exceptions are the ASN.1 module's identifier (see Appendix\r\n|  B.3) and id-rsa-kem that are both assigned in this document.  Both\r\n|  object identifiers are defined in an arc delegated by the\r\n   former company RSA Data Security Inc. to the S/MIME Working Group.\r\n   When the S/MIME Working Group closes, this arc and its registration\r\n   procedures will be transferred to IANA.", "notes": "Rationale:\r\n  Alignment with Appendix B: _two_ exceptions, both from same arc.", "submit_date": "2010-09-23", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2530", "doc-id": "RFC5880", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "Sequence Number\r\n\r\n      The sequence number for this packet.  For Keyed MD5\r\n      Authentication, this value is incremented occasionally.  For\r\n      Meticulous Keyed MD5 Authentication, this value is incremented for\r\n      each successive packet transmitted for a session.  This provides\r\n      protection against replay attacks.\r\n", "correct_text": "Sequence Number\r\n\r\n      The sequence number for this packet.  For Keyed MD5\r\n      Authentication, this value is incremented (by one) occasionally.  For\r\n      Meticulous Keyed MD5 Authentication, this value is incremented by one for\r\n      each successive packet transmitted for a session.  This provides\r\n      protection against replay attacks.\r\n", "notes": "This change clarifies the amount by which the sequence number is incremented. ", "submit_date": "2010-09-24", "submitter_name": "Mach Chen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2531", "doc-id": "RFC5940", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.", "orig_text": "  Unlike OSCP, SCVP permits unprotected and protected responses, where\r\n   protected responses can be digitally signed or include message\r\n   authentication codes.", "correct_text": "  Unlike OCSP, SCVP permits unprotected and protected responses, where\r\n   protected responses can be digitally signed or include message\r\n   authentication codes.", "notes": "simple typo in acronym  OCSP", "submit_date": "2010-09-26", "submitter_name": "Ruediger Volk", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2532", "doc-id": "RFC5556", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "   When such snooping and optimization is performed by spanning-tree-\r\n   based bridges, it done at each bridge based on the traffic observed\r\n   on that bridge's ports.", "correct_text": "   When such snooping and optimization is performed by spanning-tree-\r\n   based bridges, it is done at each bridge based on the traffic observed\r\n   on that bridge's ports.", "notes": "", "submit_date": "2010-09-28", "submitter_name": "Vishwas Manral", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4951", "doc-id": "RFC6143", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.2", "orig_text": "   The client encrypts the challenge with DES, using a password supplied\r\n   by the user as the key.  To form the key, the password is truncated\r\n   to eight characters, or padded with null bytes on the right.  The\r\n   client then sends the resulting 16-byte response:", "correct_text": "   The client encrypts the challenge with DES, using a password supplied\r\n   by the user as the key.  To form the key, the password is truncated\r\n   to eight characters, or padded with null bytes on the right; then the\r\n   bits of each byte of the key are reversed. The client then sends the\r\n   resulting 16-byte response:", "notes": "Added text \"; then the bits of each byte of the key are reversed\" is essential to implementation of a VNC client or server which interoperates with existing VNC clients or servers, but the text fails to mention this.\r\n\r\nSee https://www.vidarholen.net/contents/junk/vnc.html\r\n\r\nI confirmed the claims of the above web page while writing my own VNC server. I implemented VNC authentication without mirroring the bytes of the DES key and TigerVNC 1.5.0 could not authenticate to my VNC server. When I added code to mirror each byte of the DES key as described by the above web page, TigerVNC 1.5.0 could authenticate to my test VNC server.", "submit_date": "2017-02-26", "submitter_name": "Simon Kissane", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-01-05 21:44:04"}, {"errata_id": "2533", "doc-id": "RFC5960", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   A section MUST provide a means of identifying the type of payload it\r\n   carries.  If the section is a data-link, link-specific mechanisms\r\n   such as a protocol type indication in the data-link header MAY be\r\n   used.  If the section is an LSP, this information MAY be implied by\r\n   the LSP label or, if the LSP payload is MPLS-labeled, by the setting\r\n   of the S bit.  Additional labels MAY also be used if necessary to\r\n   distinguish different payload types; see [RFC5921] for examples and\r\n   further discussion.", "correct_text": "   A section MUST provide a means of identifying the type of payload it\r\n   carries. This mechanism may be used to facilitate multiplexing MPLS\r\n   with other protocols on the section if that function is supported by\r\n   the section. Support or non-support of multiplexing on sections is\r\n   out-of-scope for this document.\r\n\r\n   If the section is a data-link, link-specific mechanisms\r\n   such as a protocol type indication in the data-link header MAY be\r\n   used.  If the section is an LSP, this information MAY be implied by\r\n   the LSP label or, if the LSP payload is MPLS-labeled, by the setting\r\n   of the S bit.  Additional labels MAY also be used if necessary to\r\n   distinguish different payload types; see [RFC5921] for examples and\r\n   further discussion.", "notes": "This change clarifies the requirement to support payload identification, the way it is used, and the use to which it is put. Furthermore, it clarifies the standing of protocol multiplexing onto underlying sections.\r\n\r\nThis issue was first raised in a liaison from the ITU-T\r\nSee https://datatracker.ietf.org/liaison/916/", "submit_date": "2010-09-29", "submitter_name": "Italo Busi", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4420", "doc-id": "RFC7595", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   o  If no permanent, citable specification for the scheme definition\r\n      is included, credible reasons for not providing it SHOULD be\r\n      given.\r\n\r\n   o  The scheme definition SHOULD include clear security considerations\r\n      (Section 3.7) or explain why a full security analysis is not\r\n      available (e.g., in a third-party scheme registration).\r\n\r\n   o  If the scheme definition does not meet the guidelines laid out in\r\n      Section 3, the differences and reasons SHOULD be noted.\r\n", "correct_text": "Submitters are also encouraged to provide the following information as \r\nappropriate:\r\n\r\n   o  If no permanent, citable specification for the scheme definition\r\n      is included, credible reasons for not providing it.\r\n\r\n   o  Clear security considerations (cf. Section 3.7), or an explanation\r\n      of  why a security analysis is not available (e.g., in a third-\r\n      party scheme registration).\r\n\r\n   o  A note of and reasons for any deviations from the guidelines for \r\n      permanent registrations laid out in Section 3.\r\n", "notes": "The original text states a number of normative requirements on provisional registration of URI schemes, but the procedure for these (\"first come first served\") cannot reasonably be expected to check that they are satisfied.  The revision proposed here changes the text to encourage submitters to provide this information, without giving it force of a normative requirement.\r\n\r\nFor more details, see: \r\nhttps://mailarchive.ietf.org/arch/msg/apps-discuss/wsEAsWC1viE8YL1WfGkaW_NzMpg\r\n\r\nThe document editor has agreed the original text does not reflect the intent of the registration procedure:\r\nhttps://mailarchive.ietf.org/arch/msg/apps-discuss/uPb33G9duZlrwNcdCFUJmvcPLgk", "submit_date": "2015-07-17", "submitter_name": "Graham Klyne", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2534", "doc-id": "RFC5960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   Where enhanced security is desirable, and a trust relationship exists\r\n   between an LSR and its peer, the LSR MAY choose to implement the\r\n   following policy for the processing of MPLS packets received from one\r\n   or more of its neighbors:\r\n\r\n      Upon receipt of an MPLS packet, discard the packet unless one of\r\n      the following two conditions holds:\r\n\r\n      1.  Any MPLS label in the packet's label stack processed at the\r\n          receiving LSR, such as an LSP or PW label, has a label value\r\n          that the receiving LSR has distributed to that neighbor; or\r\n\r\n      2.  Any MPLS label in the packet's label stack processed at the\r\n          receiving LSR, such as an LSP or PW label, has a label value\r\n          that the receiving LSR has previously distributed to the peer\r\n          beyond that neighbor (i.e., when it is known that the path\r\n          from the system to which the label was distributed to the\r\n          receiving system is via that neighbor).", "correct_text": "   Where enhanced security is desirable, and a trust relationship exists\r\n   between two LSRs, an LSR receiving an MPLS packet MAY choose to \r\n   implement an additional policy for processing the received packet as\r\n   follows:\r\n\r\n      The receiving LSR discards the packet unless every MPLS label\r\n      stack entry that it processes from the packet's label stack has a \r\n      label that has been agreed for use by the sender of the packet\r\n      (for example, is a reserved label or has been distributed using\r\n      the management plane or control plane upstream or downstream \r\n      allocation). ", "notes": "There was considerable confusion about the distinction between peer and neighbour. This was first raised in a liaison from the ITU-T visible at\r\nhttps://datatracker.ietf.org/liaison/916/\r\n\r\nClarification was also added about which labels are acceptable.\r\n\r\nThis does not result in a technical change to the specification, but introduces clarity about the processes described.", "submit_date": "2010-09-29", "submitter_name": "Italo Busi", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2535", "doc-id": "RFC5791", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "boilerplate", "orig_text": "Internet Engineering Task Force (IETF)                        J. Reschke\r\nRequest for Comments: 5791                                    greenbytes\r\nCategory: Informational                                         J. Kunze\r\nISSN: 2070-1721                                 University of California\r\n                                                           February 2010\r\n", "correct_text": "Internet Engineering Task Force (IETF)                        J. Reschke\r\nRequest for Comments: 5791                                    greenbytes\r\nObsoletes: 2731                                                 J. Kunze\r\nCategory: Informational                         University of California\r\nISSN: 2070-1721                                            February 2010", "notes": "This spec does obsolete RFC 2731. The ID http://tools.ietf.org/html/draft-reschke-rfc2731bis-05 says that, and it was approved that way (see https://datatracker.ietf.org/doc/draft-reschke-rfc2731bis/#writeup).\r\n\r\n(Note that my records show that the AUTH48 version of the XML version of this document is correct, so the error was introduced later on).", "submit_date": "2010-09-30", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4952", "doc-id": "RFC5232", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.  Extended", "orig_text": "#\r\n# Keep all messages to or from people in my company\r\n#\r\nelsif anyof address :domain :is [\"From\", \"To\"] \"company.example.com\"\r\n           {", "correct_text": "#\r\n# Keep all messages to or from people in my company\r\n#\r\nelsif address :domain :is [\"From\", \"To\"] \"company.example.com\"\r\n           {", "notes": "The anyof test is defined in the RFC 5228 as\r\nanyof <tests: test-list> \r\ntest-list    = \"(\" test *(\",\" test) \")\"\r\n\r\nWhich means the parentheses after anyof are mandatory/required.\r\n \r\nI would suggest dropping the anyof completely. An anyof with a single test is equivalent to a single test.\r\n\r\nAlexey Melnikov: I've updated the corrected text to match your latest suggestion.", "submit_date": "2017-02-26", "submitter_name": "Thomas Schmid", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2536", "doc-id": "RFC6026", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   +-----------+                        +-----------+\r\n   |           |                        |           |\r\n   |  Calling  |                        |  Calling  |\r\n   |           |----------->+           |           |-----------+\r\n   +-----------+ 2xx        |           +-----------+ 2xx       |\r\n                 2xx to TU  |                         2xx to TU |\r\n                            |                                   |\r\n                            |                                   |\r\n", "correct_text": "   BEFORE                               AFTER\r\n\r\n   +-----------+                        +-----------+\r\n   |           |                        |           |\r\n   |  Calling  |                        |  Calling  |\r\n   |           |----------->+           |           |-----------+\r\n   +-----------+ 2xx        |           +-----------+ 2xx       |\r\n                 2xx to TU  |                         2xx to TU |\r\n                            |                                   |\r\n                            |                                   |\r\n", "notes": "Figures 1 and 2 contain \"BEFORE\" and \"AFTER\" labels for their respective state machines.  Figure 3 does not contain a \"BEFORE\" and \"AFTER\" label.  Although it's pretty obvious from the context that the left-side is the \"BEFORE\" case and the right-side is the \"AFTER\" case, I believe for consistency (and to make it explicit), Figure 3 should contain \"BEFORE\" and \"AFTER\" labels.", "submit_date": "2010-09-30", "submitter_name": "John Takao Collier", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2537", "doc-id": "RFC3779", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.3.9", "orig_text": "   To simplify the comparison of IP address blocks when performing\r\n   certification path validation, a maximum IP address MUST contain at\r\n   least one bit whose value is 1, i.e., the subsequent octets may not\r\n   be omitted nor all zero.", "correct_text": "Text should be deleted.", "notes": "There are a number of different issues relative to this text that need to be addressed.\r\n\r\n1.  This text implicitly change the rules for encoding a maximum value.  As an example the address 0.0.0.255 is encoded as 03 03 00 00 00 00 according to the rule \" The BIT STRING for the maximum address results from removing all the least-significant one-bits from the maximum address.\"\r\n\r\n2.  The rule in no way simplifies any comparisions of IP address blocks.  If one really wishes to simplify the comparison then one needs to change the rule for maximum addresses to remove all but the last least-signficant one-bit from the address.  However it is not clear that even this would really simplify the comparison in any significant way.\r\n\r\nIf you look at the example in 2.2.3.9 - tis is not clear how having the one bit at the top of the encoding helps make the comparisons any easier - but it satisfies the requirment that atleast one bit is a 1.  If the maximum value ws encoded as  1000 1   (0x3 0x02 0x03 0x84) - a bitwise comparision routine could make for a simplified a < b comparison (looking at only the top 5 bits of the address to be compared.)", "submit_date": "2010-09-30", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7038", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.3", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 a8 f5 40 00 ff 06 f3 4a 0a 0b 0c 0d\r\n     ac 1b 1c 1d ff 12 00 b3 cb 0e fb ef ac d5 b5 e2\r\n     c0 18 01 04 6c 45 00 00 01 01 08 0a 00 02 4c ce\r\n     57 67 72 f3 1d 10 3d 54 71 06 08 cc 69 6c 03 a2\r\n     71 c9 3a a5 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da bf 00 b4 0a 0b 0c 0d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da bf 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 a8 f5 40 00 ff 06 f3 4a 0a 0b 0c 0d\r\n     ac 1b 1c 1d ff 12 00 b3 cb 0e fb ef ac d5 b5 e2\r\n     c0 18 01 04 bf b0 00 00 01 01 08 0a 00 02 4c ce\r\n     57 67 72 f3 1d 10 3d 54 71 06 08 cc 69 6c 03 a2\r\n     71 c9 3a a5 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da bf 00 b4 0a 0b 0c 0d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da bf 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "notes": "The TCP checksum shown (0x6c45) is wrong, it should be 0xbfb0.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:48:18"}, {"errata_id": "2549", "doc-id": "RFC5849", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4.1.3.1.", "orig_text": "   For example, the HTTP request:\r\n\r\n       POST /request?b5=%3D%253D&a3=a&c%40=&a2=r%20b HTTP/1.1\r\n       Host: example.com\r\n       Content-Type: application/x-www-form-urlencoded\r\n       Authorization: OAuth realm=\"Example\",\r\n                      oauth_consumer_key=\"9djdj82h48djs9d2\",\r\n                      oauth_token=\"kkk9d7dh3k39sjv7\",\r\n                      oauth_signature_method=\"HMAC-SHA1\",\r\n                      oauth_timestamp=\"137131201\",\r\n                      oauth_nonce=\"7d8f3e4a\",\r\n                      oauth_signature=\"djosJKDKJSD8743243%2Fjdk33klY%3D\"\r\n\r\n       c2&a3=2+q\r\n\r\n   contains the following (fully decoded) parameters used in the\r\n   signature base sting:\r\n", "correct_text": "   For example, the HTTP request:\r\n\r\n       POST /request?b5=%3D%253D&a3=a&c%40=&a2=r%20b HTTP/1.1\r\n       Host: example.com\r\n       Content-Type: application/x-www-form-urlencoded\r\n       Authorization: OAuth realm=\"Example\",\r\n                      oauth_consumer_key=\"9djdj82h48djs9d2\",\r\n                      oauth_token=\"kkk9d7dh3k39sjv7\",\r\n                      oauth_signature_method=\"HMAC-SHA1\",\r\n                      oauth_timestamp=\"137131201\",\r\n                      oauth_nonce=\"7d8f3e4a\",\r\n                      oauth_signature=\"bYT5CMsGcbgUdFHObYMEfcx6bsw%3D\"\r\n\r\n       c2&a3=2+q\r\n\r\n   contains the following (fully decoded) parameters used in the\r\n   signature base sting:\r\n", "notes": "It looks like \"GET\" was updated to \"POST\" in a previous revision, but the oauth_signature was not updated at the same time. All other instances of this change from GET to POST did have the oauth_signature field correctly updated.\n --VERIFIER NOTES-- \n   Peter: This is superseded by erratum #2550.", "submit_date": "2010-10-12", "submitter_name": "Alasdair McIntyre", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3870", "doc-id": "RFC6726", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11.1", "orig_text": "Incremented the FLUTE protocol version from 1 to 2, due to concerns\r\n   about backwards compatibility.  For instance, the LCT header changed\r\n   between RFC 3451 and [RFC5651].  In RFC 3451, the T and R fields of\r\n   the LCT header indicate the presence of Sender Current Time and\r\n   Expected Residual Time, respectively.  In [RFC5651], these fields\r\n   MUST be set to zero and MUST be ignored by receivers (instead, the\r\n   EXT_TIME Header Extensions can convey this information if needed).\r\n   Thus, [RFC5651] is not backwards compatible with RFC 3451, even\r\n   though both use LCT version 1.  FLUTE version 1 as specified in\r\n   [RFC3926] MUST use RFC 3451.  FLUTE version 2 as specified in this\r\n   document MUST use [RFC5651].  Therefore, an implementation that\r\n   relies on [RFC3926] and RFC 3451 will not be backwards compatible\r\n   with FLUTE as specified in this document.", "correct_text": "Incremented the FLUTE protocol version from 1 to 2, due to concerns\r\n   about backwards compatibility.  For instance, the LCT header changed\r\n   between RFC 3451 and [RFC5651].  In RFC 3451, the T and R fields of\r\n   the LCT header indicate the presence of Sender Current Time and\r\n   Expected Residual Time, respectively.  In [RFC5651], these fields\r\n   MUST be set to zero and MUST be ignored by receivers (instead, the\r\n   EXT_TIME Header Extensions can convey this information if needed).\r\n   Thus, [RFC5651] is not backwards compatible with RFC 3451, even\r\n   though both use LCT version 1.  FLUTE version 1 as specified in\r\n   [RFC3926] SHOULD use RFC 3451.  FLUTE version 2 as specified in this\r\n   document MUST use [RFC5651].  Therefore, an implementation that\r\n   relies on [RFC3926] and RFC 3451 will not be backwards compatible\r\n   with FLUTE as specified in this document.", "notes": "The only change that is requested is to change \"FLUTE version 1 as specified in\r\n   [RFC3926] MUST use RFC 3451.\" to \"FLUTE version 1 as specified in\r\n   [RFC3926] SHOULD use RFC 3451. \" \r\n\r\nThis is done as there are deployments that want to use the new functionalities of LCT as defined in RFC5651, but still want to be backward compatible to FLUTE version 1. The above statement being a must prevents this. However, if there are good reasons to not move to FLUTE version 2 (as this would break backward-compatibility for existing receivers), it should be possible to use FLUTE version 1 on top of LCT RFC5651 in order to use the functionalities in RFC5651, especially the header extensions.\n --VERIFIER NOTES-- \nRFC errata are not used to debate MUST or SHOULD clauses, but to report fixes. The RMT mailingt list discussion also hinted to disagreement about this change in general. ", "submit_date": "2014-01-22", "submitter_name": "Thomas Stockhammer", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2550", "doc-id": "RFC5849", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Section 3.1\r\noauth_signature=\"bYT5CMsGcbgUdFHObYMEfcx6bsw%3D\"\r\n\r\nSection 3.4.1.1\r\noauth_signature=\"bYT5CMsGcbgUdFHObYMEfcx6bsw%3D\"\r\n\r\nSection 3.4.1.3.1\r\noauth_signature=\"djosJKDKJSD8743243%2Fjdk33klY%3D\"\r\n\r\n", "correct_text": "Section 3.1\r\noauth_signature=\"r6%2FTJjbCOr97%2F%2BUU0NsvSne7s5g%3D\"\r\n\r\nSection 3.4.1.1\r\noauth_signature=\"r6%2FTJjbCOr97%2F%2BUU0NsvSne7s5g%3D\"\r\n\r\nSection 3.4.1.3.1\r\noauth_signature=\"r6%2FTJjbCOr97%2F%2BUU0NsvSne7s5g%3D\"\r\n", "notes": "(Apologies - this supercedes Errata ID 2549).\r\n\r\nThe signatures in sections 3.1, 3.4.1.1, and 3.4.1.3.1 of the RFC have mistakenly been calculated as if with \"GET\". I have supplied the correct \"POST\" signatures in the corrected text.\r\n\r\nFor reference, here is the perl script I used to calculate the signatures:\r\n\r\n#!/usr/bin/perl\r\nuse strict;\r\nuse warnings;\r\nuse Digest::HMAC_SHA1;\r\nuse URI::Escape;\r\nuse MIME::Base64;\r\n\r\nmy $unsafe = '^-._~A-Za-z0-9';\r\nmy $client_secret = 'j49sk3j29djd';\r\nmy $token_secret = 'dh893hdasih9';\r\nmy $key = join('&', $client_secret, $token_secret);\r\n\r\nmy $uri_base = 'http%3A%2F%2Fexample.com%2Frequest';\r\nmy $params = join('', qw(\r\n    a2%3Dr%2520b%26a3%3D2%2520q%26a3%3Da%26b5%3D\r\n    %253D%25253D%26c%2540%3D%26c2%3D%26oauth_con\r\n    sumer_key%3D9djdj82h48djs9d2%26oauth_nonce%3\r\n    D7d8f3e4a%26oauth_signature_method%3DHMAC-SH\r\n    A1%26oauth_timestamp%3D137131201%26oauth_tok\r\n    en%3Dkkk9d7dh3k39sjv7\r\n));\r\n\r\nforeach my $method ('GET', 'POST') {\r\n    my $base_sig = join('&', $method, $uri_base, $params);\r\n    my $bin_sig = Digest::HMAC_SHA1::hmac_sha1($base_sig, $key);\r\n    my $b64_sig = MIME::Base64::encode_base64($bin_sig, '');\r\n    my $enc_sig = URI::Escape::uri_escape($b64_sig, $unsafe);\r\n    printf \"%-8s %s\\n\", $method, $enc_sig;\r\n}", "submit_date": "2010-10-12", "submitter_name": "Alasdair McIntyre", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2551", "doc-id": "RFC6003", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4, pg. 5", "orig_text": "   Type: 16 bits\r\n\r\n      Defined values are:\r\n\r\n      Type     Length   Format            Description\r\n      ------------------------------------------------------\r\n        0         -     Reserved          Reserved value\r\n        1         -     Reserved          Reserved value\r\n|       2        24     see Section 3.1   Ethernet Bandwidth\r\n                                          Profile [MEF10.1]\r\n        3         8     [RFC6004]         Layer 2 Control\r\n                                          Protocol (L2CP)\r\n      255         -     Reserved          Reserved value\r\n", "correct_text": "   Type: 16 bits\r\n\r\n      Defined values are:\r\n\r\n      Type     Length   Format            Description\r\n      ------------------------------------------------------\r\n        0         -     Reserved          Reserved value\r\n        1         -     Reserved          Reserved value\r\n|       2        24     see Section 4.1   Ethernet Bandwidth\r\n                                          Profile [MEF10.1]\r\n        3         8     [RFC6004]         Layer 2 Control\r\n                                          Protocol (L2CP)\r\n      255         -     Reserved          Reserved value\r\n", "notes": "Incorrect internal reference.", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2557", "doc-id": "RFC6016", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4, pg. 15", "orig_text": "[[ last paragraph of Section 4 ]]\r\n\r\n   To achieve effective admission control in the backbone, there needs\r\n   to be some way to separate the data-plane traffic that has a\r\n   reservation from that which does not.  We assume that packets that\r\n   are subject to admission control on the core will be given a\r\n|  particular MPLS EXP value, and that no other packets will be allowed\r\n   to enter the core with this value unless they have passed admission\r\n   control.  Some fraction of link resources will be allocated to queues\r\n|  on core links for packets bearing that EXP value, and the MPLS-TE\r\n   tunnels will use that resource pool to make their constraint-based\r\n   routing and admission control decisions.  This is all consistent with\r\n   the principles of aggregate RSVP reservations described in [RFC3175].", "correct_text": "   To achieve effective admission control in the backbone, there needs\r\n   to be some way to separate the data-plane traffic that has a\r\n   reservation from that which does not.  We assume that packets that\r\n   are subject to admission control on the core will be given a\r\n|  particular MPLS Traffic Class value, and that no other packets will\r\n   be allowed to enter the core with this value unless they have passed\r\n   admission control.  Some fraction of link resources will be allocated\r\n|  to queues on core links for packets bearing that Traffic Class value,\r\n   and the MPLS-TE tunnels will use that resource pool to make their\r\n   constraint-based routing and admission control decisions.  This is\r\n   all consistent with the principles of aggregate RSVP reservations\r\n   described in [RFC3175].\r\n\r\n5", "notes": "Rationale:  s/EXP/Traffic Class/  !\r\n  RFC 5462 has carefully changed the terminology and updated numerous\r\n  RFCs; it has given a detailed explantion why this needs to be done\r\n  consistently and confirmed that all future RFCs should unconditionally\r\n  use the updated terms.\r\n  (See also EID 2547 for RFC 5994.)", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2580", "doc-id": "RFC3398", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.1.3", "orig_text": "Item 6.\r\nThe gateway also sends a CANCEL message to the SIP node to\r\nterminate any initiation attempts.\r\n", "correct_text": "Drop this statement.\r\n\r\nSection 8.1.3 item 6 should be updated to \"The gateway also sends a\r\nCANCEL message to the SIP node to terminate the initiation attempt if\r\na provisional response has been received.\"  The situation illustrated\r\nin section 8.1.3 does not distinguish the \"provisional response\r\nreceived\" case from the \"provisional response not received\" case, so\r\nthe commentary should cover both cases.  (The specific example\r\ndiagrammed shows the \"no provisional response received\" case.)\r\n\r\nA similar change should be made to section 8.1.4 item 7, \"The REL will\r\ntrigger a CANCEL request to the SIP node if a provisional response has\r\nbeen received.\"\r\n\r\nA similar change should be made to section 8.1.7 item 7, \"Upon receipt\r\nof a REL message before an INVITE final response, the gateway will\r\nsend a CANCEL towards the SIP node if a provisional response has been\r\nreceived.\r\n", "notes": "No CANCEL is sent on INVITE transaction timeout. This is per 3261 \"If no provisional response has been received, the CANCEL request MUST NOT be sent; rather, the client MUST wait for the arrival of a provisional response before sending the request.\"", "submit_date": "2010-10-19", "submitter_name": "Stephen James", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2552", "doc-id": "RFC6003", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1, pg.7", "orig_text": "   Index: 8 bits\r\n\r\n      [...]\r\n\r\n      A given index value j can be associated to at most N Class-Type\r\n      values CTi (i =< N) of the EXTENDED_CLASSTYPE object.  This\r\n|     association applies when a set of one or more CTIs maps to a\r\n      single (shared) BW profile.  An example of value setting consists\r\n      in assigning an arbitrary value comprised within the range\r\n      [0x08,0xF8] associated to a set of CTi, the values in the range\r\n|     [0xF8,0xFF] being selected for reserved sets.  This allows mapping\r\n      to one of 248 predefined CTi sets.\r\n", "correct_text": "   Index: 8 bits\r\n\r\n      [...]\r\n\r\n      A given index value j can be associated to at most N Class-Type\r\n      values CTi (i =< N) of the EXTENDED_CLASSTYPE object.  This\r\n|     association applies when a set of one or more CTis maps to a\r\n      single (shared) BW profile.  An example of value setting consists\r\n      in assigning an arbitrary value comprised within the range\r\n      [0x08,0xF8] associated to a set of CTi, the values in the range\r\n|     [0xF9,0xFF] being selected for reserved sets.  This allows mapping\r\n      to one of 248 predefined CTi sets.\r\n", "notes": "Rationale:\r\na) consistent use of \"CTi\" -- 'i' essentially is a subscript index;\r\nb) avoid ambiguity due to overlap in ranges given\r\n\r\n[The first item is Editorial, but the second one clearly Technical]", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2622", "doc-id": "RFC6011", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.1.2", "orig_text": "   If the DNS request to resolve the Configuration Service Domain name\r\n   to a request URL does not receive any response, the UA should follow\r\n   standard DNS retry procedures.\r\n\r\n   If the DNS request to resolve the Configuration Service Domain name\r\n|  to a host name returns a response that indicates that no matching\r\n|  result is available (NXDOMAIN), the UA SHOULD attempt to obtain\r\n   another Configuration Service Domain name using the procedures in\r\n   Section 2.2, \"Obtaining the Configuration Service Domain\".\r\n", "correct_text": "   If the DNS request to resolve the Configuration Service Domain name\r\n   to a request URL does not receive any response, the UA should follow\r\n   standard DNS retry procedures.\r\n\r\n   If the DNS request to resolve the Configuration Service Domain name\r\n|  to a request URL returns a response that indicates that the queried\r\n|  domain does not exist (NXDomain), that no matching result is\r\n|  available at that domain (NoError response with an empty NAPTR RRset\r\n|  in the Answer section), or that a permanent error condition exists\r\n|  (other non-zero RCODE value, e.g., ServFail), the UA SHOULD attempt\r\n   to obtain another Configuration Service Domain name using the\r\n   procedures in Section 2.2, \"Obtaining the Configuration Service\r\n   Domain\".\r\n\r\n", "notes": "Rationale:\r\na) This section discusses the U-NAPTR usage; therefore, as in the first\r\n   paragraph, the second paragraph should not erroneously indicate\r\n   a \"host name\" return, it also should precisely indicate that it\r\n   talks about U-NAPTR lookup; hence   s/host name/request URL/ .\r\n\r\nb) It is an unfortunately widespread misconception that a DNS query\r\n   for a RR type that does not exists at a particular domain name\r\n   returns a NXDomain response.  This is not the case.  An empty RRset\r\n   is a valid response returned with RCODE=0 (NoError).  Further, the\r\n   RFC text omits the important error cases that also need to be dealt\r\n   with by the SIP UA configuration procedure.\r\n   The replacement text tries to clarify the different situations\r\n   where no NAPTR record can be obtained.\r\n\r\nc) Use the standard version spelling of DNS RCODE names as registered\r\n   in the \"DNS RCODEs\" sub-registry -- part of\r\n   http://www.IANA.ORG/assignments/dns-parameters.", "submit_date": "2010-11-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2553", "doc-id": "RFC6016", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.6, pg.27", "orig_text": "[[ last paragraph of section 8.6 ]]\r\n\r\n|\r\n|  The flags and DSCP are identical to the same fields of the AGGREGATE-\r\n|  IPv4 and AGGREGATE-IPv6 SESSION objects.", "correct_text": "[[ nothing ]]", "notes": "Rationale: The text in this paragraph does not match the preceding\r\n  artwork for Class = 11, C-Type = 16 and 17; it is spurious and\r\n  needs to be deleted.\r\n", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2554", "doc-id": "RFC6016", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   RFC 4364 and RFC 4659 define an approach to building provider-\r\n   provisioned Layer 3 VPNs (L3VPNs) for IPv4 and IPv6.  It may be\r\n|  desirable to use Resource Reservation Protocol (RSVP) to perform\r\n   admission control on the links between Customer Edge (CE) routers and\r\n   Provider Edge (PE) routers.  [...]", "correct_text": "   RFC 4364 and RFC 4659 define an approach to building provider-\r\n   provisioned Layer 3 VPNs (L3VPNs) for IPv4 and IPv6.  It may be\r\n|  desirable to use the Resource Reservation Protocol (RSVP) to perform\r\n   admission control on the links between Customer Edge (CE) routers and\r\n   Provider Edge (PE) routers.  [...]", "notes": "Rationale: Missing article", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2555", "doc-id": "RFC6016", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2,1st para", "orig_text": "   When a Path message arrives at the ingress PE (step 3 of Section 2.1)\r\n   the PE needs to establish suitable Path state and forward the Path\r\n   message on to the egress PE.  In the following paragraphs, we\r\n|  described the steps taken by the ingress PE.", "correct_text": "   When a Path message arrives at the ingress PE (step 3 of Section 2.1)\r\n   the PE needs to establish suitable Path state and forward the Path\r\n   message on to the egress PE.  In the following paragraphs, we\r\n|  describe the steps taken by the ingress PE.", "notes": "Rationale: inappropriate past tense; should be present tense.", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2556", "doc-id": "RFC6016", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.5, pg.13", "orig_text": "   Upon receiving a Resv message at the ingress PE (step 8 of\r\n|  Section 2.1) with respect to data flow (i.e., PE1 in Figure 1), the\r\n   PE determines the local VRF context and associated Path state for\r\n   this Resv by decoding the received SESSION and FILTER_SPEC objects.\r\n   [...]", "correct_text": "   Upon receiving a Resv message at the ingress PE (step 8 of\r\n|  Section 2.1) with respect to the data flow (i.e., PE1 in Figure 1),\r\n   the PE determines the local VRF context and associated Path state for\r\n   this Resv by decoding the received SESSION and FILTER_SPEC objects.\r\n   [...]", "notes": "Rationale: missing article; cf. other parts of the document.", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2566", "doc-id": "RFC5810", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "In Appendix A in line 8:\r\n\r\n o  TLV Result Values, Section 7.1.7\r\n", "correct_text": " o  RESULT-TLV Result Values, Section 7.1.7\r\n", "notes": "See Section A.5", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2567", "doc-id": "RFC5810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A.5", "orig_text": "\r\nThe RESULT-TLV RTesult Value is an 8-bit value\r\n", "correct_text": "The RESULT-TLV Result Value is an 8-bit value.\r\n", "notes": "", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2568", "doc-id": "RFC5810", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.6.", "orig_text": "A.6. Association Setup Response\r\n\r\na) So far the numbers are represented like:\r\n\r\n0x0000   Success\r\n0x0001   FE ID Invalid\r\netc.\r\nb) we are only using 0x00000000-0x0000FFFF whereas the 32-bit\r\nspace covers 0x00000000-0xFFFFFFFF. \r\n", "correct_text": "a) Since this is a 32 bit space and not 16 bit a proper representation\r\nwould have 8 hexadecimal  numbers and would look like:\r\n0x00000000   Success\r\n0x00000001   FE ID Invalid\r\n\r\nb)We need to specify that anything from 0x00010000-0xFFFFFFFF is reserved.\r\n", "notes": "IANA will update the registry in line with this Erratum", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2569", "doc-id": "RFC5810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "Section A.1. Message Type Namespace, a typo \r\n\r\n  0x0F               Hearbeat\r\n", "correct_text": "should be:\r\n  0x0F               Heartbeat\r\n", "notes": "", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2558", "doc-id": "RFC6016", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.5, pg.24", "orig_text": "|  The usage of Aggregated VPN-IPv4 (or VPN-IPv6) SESSION object is\r\n   described in Section 7.3.  The AGGREGATE-VPN-IPv4 (respectively,\r\n   AGGREGATE-IPv6-VPN) SESSION object appears in RSVP messages that\r\n   ordinarily contain a AGGREGATE-IPv4 (respectively, AGGREGATE-IPv6)\r\n   SESSION object as defined in [RFC3175] and are sent between ingress\r\n   PE and egress PE in either direction.  The GENERIC-AGGREGATE-VPN-IPv4\r\n|  (respectively, AGGREGATE-VPN-IPv6) SESSION object should appear in\r\n   all RSVP messages that ordinarily contain a GENERIC-AGGREGATE-IPv4\r\n   (respectively, GENERIC-AGGREGATE-IPv6) SESSION object as defined in\r\n   [RFC4860] and are sent between ingress PE and egress PE in either\r\n   direction.  [...]", "correct_text": "|  The usage of the Aggregated VPN-IPv4 (or VPN-IPv6) SESSION object is\r\n   described in Section 7.3.  The AGGREGATE-VPN-IPv4 (respectively,\r\n   AGGREGATE-IPv6-VPN) SESSION object appears in RSVP messages that\r\n   ordinarily contain a AGGREGATE-IPv4 (respectively, AGGREGATE-IPv6)\r\n   SESSION object as defined in [RFC3175] and are sent between ingress\r\n   PE and egress PE in either direction.  The GENERIC-AGGREGATE-VPN-IPv4\r\n|  (respectively, GENERIC-AGGREGATE-VPN-IPv6) SESSION object should appear\r\n   in all RSVP messages that ordinarily contain a GENERIC-AGGREGATE-IPv4\r\n   (respectively, GENERIC-AGGREGATE-IPv6) SESSION object as defined in\r\n   [RFC4860] and are sent between ingress PE and egress PE in either\r\n   direction.  [...]", "notes": "Rationale:\r\na) missing articles [editorial]\r\nb) reference to wrong object\r\n", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2559", "doc-id": "RFC6016", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.5, pg.25/2", "orig_text": "a) [[ on mid-page 25: ]]\r\n\r\n|  The Reserved field MUST be set to zero on transmit and ignored on\r\n   receipt.\r\n\r\nb) [[ last paragraph of the section, on page 26: ]]\r\n\r\n|  The Reserved field MUST be set to zero on transmit and ignored on\r\n   receipt.", "correct_text": "a) and b)\r\n\r\n|  The Reserved fields MUST be set to zero on transmit and ignored on\r\n   receipt.", "notes": "Rationale:\r\na) There are _two_ Reserved fields in the AGGREGATE-VPN-IPv{4|6}\r\n   SESSION objects, as shown in the preceding artwork in the RFC;\r\n   the said treatment applies to both.\r\nb) dto. for the GENERIC-AGGREGATE-VPN-IPv{4|6} SESSION objects.", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2560", "doc-id": "RFC6016", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.6, pg.26", "orig_text": "|  The usage of Aggregated VPN-IPv4 (or VPN-IPv6) SENDER_TEMPLATE object\r\n   is described in Section 7.3.  [...]", "correct_text": "|  The usage of the Aggregated VPN-IPv4 (or VPN-IPv6) SENDER_TEMPLATE\r\n   object is described in Section 7.3.  [...]", "notes": "Rationale: missing article (as in EID=2558)", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2561", "doc-id": "RFC6016", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7,pg.27/28", "orig_text": "|  The usage of Aggregated VPN-IPv4 FILTER_SPEC object is described in\r\n|  Section 7.3.  The AGGREGATE-VPN-IPv4 FILTER_SPEC object appears in\r\n|  RSVP messages that ordinarily contain a AGGREGATE-IPv4 FILTER_SPEC\r\n   object as defined in [RFC3175] and [RFC4860], and are sent between\r\n   ingress PE and egress PE in either direction.  These objects MUST NOT\r\n   be included in any RSVP messages that are sent outside of the\r\n   provider's backbone (except in the inter-AS Option-B and Option-C\r\n|  cases, as described above, when it may appear on inter-AS links).\r\n\r\n   The processing rules for these objects are otherwise identical to\r\n|  those of the VPN-IPv4 FILTER_SPEC object defined in Section 8.3.  The\r\n   format of the object is as follows:", "correct_text": "|  The usage of the Aggregated VPN-IPv4 FILTER_SPEC object is described\r\n|  in Section 7.3.  The AGGREGATE-VPN-IPv4 (or AGGREGATE-VPN-IPv6)\r\n   FILTER_SPEC object appears in RSVP messages that ordinarily contain\r\n|  an AGGREGATE-IPv4 (respectively, AGGREGATE-IPv6) FILTER_SPEC object\r\n   as defined in [RFC3175] and [RFC4860], and are sent between ingress\r\n   PE and egress PE in either direction.  These objects MUST NOT be\r\n   included in any RSVP messages that are sent outside of the provider's\r\n   backbone (except in the inter-AS Option-B and Option-C cases, as\r\n|  described above, when they may appear on inter-AS links).\r\n\r\n   The processing rules for these objects are otherwise identical to\r\n|  those of the VPN-IPv4 and VPN-IPv6 FILTER_SPEC objects defined in\r\n   Section 8.3.  The format of the object is as follows:", "notes": "Rationale:\r\n  a) missing article\r\n  b) incomplete specification; the use of \"These objects\" as well as the\r\n     references to two different RFCs (one for the IPv4 case, one for the\r\n     IPv6 case) are strong indications that this text should be phrased\r\n     in a similar manner as in preceding subsections of Section 8, i.e.\r\n     it should include mention of the equivalent object for the IPv6 case\r\n     as well (this qualifies the Errata Note as Technical);\r\n  c) s/a AGGREGATE/an AGGREGATE/\r\n  d) singular/plural mismatch:  s/it/they/ .", "submit_date": "2010-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2562", "doc-id": "RFC4757", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "9.  TGS-REP encrypted part (includes application session key),\r\n          encrypted with the TGS authenticator subkey (T=8)\r\n\r\n", "correct_text": "9.  TGS-REP encrypted part (includes application session key),\r\n          encrypted with the TGS authenticator subkey (T=9)\r\n\r\n", "notes": "Typo", "submit_date": "2010-10-13", "submitter_name": "Michiko Short", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2563", "doc-id": "RFC4005", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "The occurrence of route-record AVP in AAA is 0+.", "correct_text": "The occurrence of route-record AVP in AAA should be 0 according to AAA definition of section 3.2.", "notes": "In 3GPP Rx application TS 29.214, AAA command contains no route-record AVP either. So section 10.1 of RFC4005 needs to be corrected.", "submit_date": "2010-10-14", "submitter_name": "Hans Liu", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2564", "doc-id": "RFC3588", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1.8", "orig_text": "In figure 6, the contents of some AVPs contains domain name \r\nmno.net, but the network realm is example.net.", "correct_text": "Need to fix the inconsistent domain name, change all example.net \r\nto mno.net, which is more differentiable from another domain \r\nexample.com", "notes": "", "submit_date": "2010-10-14", "submitter_name": "Hans Liu", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4421", "doc-id": "RFC5965", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.2", "orig_text": "   --part1_13d.2e68ed54_boundary\r\n   Content-Type: message/rfc822\r\n   Content-Disposition: inline\r\n\r\n   From: <somespammer@example.net>\r\n   Received: from mailserver.example.net (mailserver.example.net\r\n        [192.0.2.1]) by example.com with ESMTP id M63d4137594e46;\r\n        Thu, 08 Mar 2005 14:00:00 -0400\r\n\r\n   To: <Undisclosed Recipients>\r\n   Subject: Earn money\r\n", "correct_text": "   --part1_13d.2e68ed54_boundary\r\n   Content-Type: message/rfc822\r\n   Content-Disposition: inline\r\n\r\n   From: <somespammer@example.net>\r\n   Received: from mailserver.example.net (mailserver.example.net\r\n        [192.0.2.1]) by example.com with ESMTP id M63d4137594e46;\r\n        Thu, 08 Mar 2005 14:00:00 -0400\r\n   To: <Undisclosed Recipients>\r\n   Subject: Earn money\r\n", "notes": "In the second example report, there is an empty line in the middle of the headers section of the quoted rfc822 message.  This seems wrong.", "submit_date": "2015-07-19", "submitter_name": "Simon Leinen", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2575", "doc-id": "RFC5810", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Throughout the document:", "orig_text": " There is some confusion in the way we describe the HA bits.\r\n", "correct_text": "Suggestions made by Evangelos Haleplidis for global consitency.\r\ni. For consistency of terms:\r\n\r\nChange word \"stage\" of page 17 to \"phase\".\r\n\r\nii. Change the start of section 4.2.2.3 from:\r\n\"In this stage...\"\r\nTo:\r\n\"Entering this stage...\"\r\n\r\niii.  Change the text in section 8 from:\r\n\"Figure 44 extends the state machine illustrated in Figure 4 to \r\nallow for new states that facilitate connection recovery.\"\r\nTo:\r\n\"Figure 44 changes the state machine illustrated in Figure 4 to specify \r\nstates that facilitate connection recovery.\"\r\n\r\nAlso add the following text right after that:\r\n\"In this figure, the pre-association phase and the Association Setup \r\nStage are merged in one state and Association Lost stage is included \r\nin the Not Associated state.\"\r\n\r\niv. Alter wording in Figure 44 in Page 84.\r\nWhere it says: \r\n\"CE issues Association Setup\"\r\nChange to:\r\n\"CE issues Association Setup Response\"\r\n", "notes": "Changes i through iii are entirely editorial and helf clarity in reading.\r\n\r\nChange iv fixes a message name that might be confusing.", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2576", "doc-id": "RFC5812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Table 1", "orig_text": "   |                |            |               |     information     |\r\n   |   FE Protocol  |      2     |      [2]      |  Defines parameters |\r\n   |     Object     |            |               |    for the ForCES   |\r\n   |                |            |               |  protocol operation |\r\n\r\n", "correct_text": "   |                |            |               |     information     |\r\n   |   FE Protocol  |      2     |    RFC 5810   |  Defines parameters |\r\n   |     Object     |            |               |    for the ForCES   |\r\n   |                |            |               |  protocol operation |\r\n\r\n", "notes": "Reference [2] used to be the reference to the I-D that became RFC 5810", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2577", "doc-id": "RFC5812", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "global", "orig_text": "I dont know where to capture this, but it needs to be\r\ncaptured somewhere and i couldnt think of a better place..\r\nThis is in regards to the XML definitions..\r\n\r\nThe baseID of events, componentIDs and capabilitiyIDs should be unique\r\nwithin the LFB. The schema now distinguishes per category, not globally.\r\n", "correct_text": "It would valuable to be able to validate via the schema that there is\r\nuniqueness.", "notes": "\n --VERIFIER NOTES-- \nThis Erratum is rejected after consultation with the ForCES chair.\r\n\r\nThe LFB Class is unique globaly. The LFB instance is unique per LFB.\r\nThe LFB components are uniquely identified by LFB class::instance id.\r\nTherefore by inference, the LFB events, componentIDs and capabilitiyIDs\r\nare globaly unique.", "submit_date": "2010-10-16", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2578", "doc-id": "RFC5321", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.2", "orig_text": "   Terminals not defined in\r\n   this document, such as ALPHA, DIGIT, SP, CR, LF, CRLF, are as defined\r\n   in the \"core\" syntax in Section 6 of RFC 5234 [7] or in the message\r\n   format syntax in RFC 5322 [4].", "correct_text": "   Terminals not defined in\r\n   this document, such as ALPHA, DIGIT, SP, CR, LF, CRLF, are as defined\r\n   in the \"core\" syntax in Appendix B of RFC 5234 [7] or in the message\r\n   format syntax in RFC 5322 [4].", "notes": "The core syntax of ABNF is defined in Appendix B \"Core ABNF of ABNF\" of RFC 5234, not Section 6, which lists the document's references.", "submit_date": "2010-10-18", "submitter_name": "Dominic Sayers", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2579", "doc-id": "RFC5322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A.5", "orig_text": "   To:A Group(Some people)\r\n        :Chris Jones <c@(Chris's host.)public.example>,\r\n            joe@example.org,\r\n     John <jdoe@one.test> (my dear friend); (the end of the group)", "correct_text": "   To:A Group(Some people)\r\n        :Chris Jones <c@public.example(Chris's host.)>,\r\n            joe@example.org,\r\n     John <jdoe@one.test> (my dear friend); (the end of the group)", "notes": "Section 3.4.1: \"Comments and folding white space SHOULD NOT be used around the \"@\" in the addr-spec.\"", "submit_date": "2010-10-18", "submitter_name": "Dominic Sayers", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2592", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14.1", "orig_text": "14.1.  IETF-Defined Chunk Extension\r\n\r\n   The assignment of new chunk parameter type codes is done through an\r\n   IETF Consensus action, as defined in [RFC2434].  Documentation of the\r\n   chunk parameter MUST contain the following information:", "correct_text": "14.1.  IETF-Defined Chunk Extension\r\n\r\n   The assignment of new chunk type codes is done through an\r\nIETF Consensus action, as defined in [RFC2434].  Documentation of the\r\nchunk type MUST contain the following information:", "notes": "The OLD text relates to parameter types, and not chunk types, and already appears, correctly, in section 14.2.  Section 14.1 is about chunk types,as the NEW text says.", "submit_date": "2010-10-29", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3442", "doc-id": "RFC2045", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.", "orig_text": "   body is often desirable.  For example, it may be useful to mark an\r\n   \"image\" body as \"a picture of the Space Shuttle Endeavor.\"", "correct_text": "   body is often desirable.  For example, it may be useful to mark an\r\n   \"image\" body as \"a picture of the Space Shuttle Endeavour.\"", "notes": "That orbiter was called the Endeavour, little typo.\r\n\r\n---\r\nVerifier notes:\r\nLittle typo, indeed, and perhaps the draft's authors weren't aware of the NASA spelling.  Still, little insignificant typos aren't what RFC errata are all about, so this goes in the \"hold for document update\" bin.", "submit_date": "2013-01-03", "submitter_name": "Kwadronaut", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3443", "doc-id": "RFC3156", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.", "orig_text": "   Example message:\r\n\r\n      From: Michael Elkins <elkins@aero.org>\r\n      To: Michael Elkins <elkins@aero.org>\r\n      Mime-Version: 1.0", "correct_text": "   Example message:\r\n\r\n      From: Michael Elkins <elkins@aero.org>\r\n      To: Michael Elkins <elkins@aero.org>\r\n      MIME-Version: 1.0", "notes": "According to RFC2045 (on which this RFC builds upon) specifies that:\r\nMessages composed in accordance with this document MUST include such a header field, with the following verbatim text:\r\n\r\n     MIME-Version: 1.0\n --VERIFIER NOTES-- \nDespite the quote from 2045 above, the grammar that's in effect is such that header field names are case-insensitive, so \"MIME-Version\", \"Mime-Version\", and \"mime-version\" are all the same.\r\n   ", "submit_date": "2013-01-03", "submitter_name": "Kwadronaut", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5465", "doc-id": "RFC5580", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": " 0-1     0-1    0      0         0+         126  Operator-Name\r\n", "correct_text": " 0+     0      0      0         0+         126  Operator-Name\r\n", "notes": "Section 4.1 says:\r\n\r\n  The Operator-Name Attribute SHOULD be sent in Access-Request and\r\n   Accounting-Request messages where the Acc-Status-Type is set to\r\n   Start, Interim, or Stop.\r\n\r\nThe table in Section 5 does not appear to match this.\r\n\r\n- Access-Request is marked 0-1.  It should be marked 0+, to allow packets to contain both E212 and REALM values for Operator-Name\r\n\r\n- there is no discussion of Operator-Name in Access-Accept.  So it's not clear why the table lists 0-1 for that packet\r\n\r\n- The table allows 0+ for Accounting-Request, so it's not clear why it's 0-1 for Access-Request", "submit_date": "2018-08-15", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:48:06"}, {"errata_id": "2593", "doc-id": "RFC5303", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "      a) In section 8.2.4.2 a and b, the action \"Up\" from state tables\r\n         5, 6, 7, and 8 may create a new adjacency but the three-way\r\n         state of the adjacency SHALL be Down.\r\n\r\n      b) If the action taken from section 8.2.4.2 a or b is \"Up\" or\r\n         \"Accept\", the IS SHALL perform the action indicated by the new\r\n         adjacency three-way state table below, based on the current\r\n         adjacency three-way state and the received Adjacency Three-Way\r\n         State value from the option.  (Note that the procedure works\r\n         properly if neither field is ever included.  This provides\r\n         backward compatibility to an earlier version of this option.)\r\n\r\n                                 Received Adjacency Three-Way State\r\n                                    Down       Initializing    Up\r\n                              --------------------------------------\r\n                 Down         |  Initialize        Up         Down\r\n                              |\r\n         Adj.    Initializing |  Initialize        Up         Up\r\n         Three-               |\r\n         Way     Up           |  Initialize        Accept     Accept\r\n         State                |\r\n                              |\r\n\r\n                         Adjacency Three-Way State Table\r\n\r\n         If the new action is \"Down\", an adjacencyStateChange(Down)\r\n         event is generated with the reason \"Neighbor restarted\" and the\r\n         adjacency SHALL be deleted.\r\n\r\n         If the new action is \"Initialize\", no event is generated and\r\n         the adjacency three-way state SHALL be set to \"Initializing\".\r\n\r\n         If the new action is \"Up\", an adjacencyStateChange(Up) event is\r\n         generated.\r\n\r\n      c) Skip section 8.2.4.2 c and d.\r\n\r\n      d) If the new action is \"Initialize\", \"Up\", or \"Accept\", follow\r\n         section 8.2.4.2 e.\r\n", "correct_text": "      a) In section 8.2.5.2 a and b, the action \"Up\" from state tables\r\n         5, 6, 7, and 8 may create a new adjacency but the three-way\r\n         state of the adjacency SHALL be Down.\r\n\r\n      b) If the action taken from section 8.2.5.2 a or b is \"Up\" or\r\n         \"Accept\", the IS SHALL perform the action indicated by the new\r\n         adjacency three-way state table below, based on the current\r\n         adjacency three-way state and the received Adjacency Three-Way\r\n         State value from the option.  (Note that the procedure works\r\n         properly if neither field is ever included.  This provides\r\n         backward compatibility to an earlier version of this option.)\r\n\r\n                                 Received Adjacency Three-Way State\r\n                                    Down       Initializing    Up\r\n                              --------------------------------------\r\n                 Down         |  Initialize        Up         Down\r\n                              |\r\n         Adj.    Initializing |  Initialize        Up         Up\r\n         Three-               |\r\n         Way     Up           |  Initialize        Accept     Accept\r\n         State                |\r\n                              |\r\n\r\n                         Adjacency Three-Way State Table\r\n\r\n         If the new action is \"Down\", an adjacencyStateChange(Down)\r\n         event is generated with the reason \"Neighbor restarted\" and the\r\n         adjacency SHALL be deleted.\r\n\r\n         If the new action is \"Initialize\", no event is generated and\r\n         the adjacency three-way state SHALL be set to \"Initializing\".\r\n\r\n         If the new action is \"Up\", an adjacencyStateChange(Up) event is\r\n         generated.\r\n\r\n      c) Skip section 8.2.5.2 c and d.\r\n\r\n      d) If the new action is \"Initialize\", \"Up\", or \"Accept\", follow\r\n         section 8.2.5.2 e.\r\n", "notes": "Though the ISIS reference name in \"Normative References\" have been updated to \"International Standard 10589:2002, Second Edition, 2002\" , the section reference was still to first edition of ISO 10589. (replace 8.2.4.2 with 8.2.5.2 in the orignal text.", "submit_date": "2010-10-29", "submitter_name": "Mohammad Fahad Imteyaz", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2594", "doc-id": "RFC5303", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "   This document is a minor edit of [RFC3373] with the intent of\r\n   advancing it from Informational to Standards Track.  It also updates\r\n   the ISP 10589 reference to refer to the current \"2002\" version.\r\n", "correct_text": "   This document is a minor edit of [RFC3373] with the intent of\r\n   advancing it from Informational to Standards Track.  It also updates\r\n   the ISO/IEC 10589 reference to refer to the current \"2002\" version.\r\n", "notes": "", "submit_date": "2010-10-29", "submitter_name": "Mohammad Fahad Imteyaz", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2595", "doc-id": "RFC4211", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   7.  Replaced Appendix A with a reference to [RFC2875].  The only\r\n       difference is that the old text specified to use subject alt name\r\n       instead of subject name if subject name was empty.  This is not\r\n       possible for a CA certificate issued using PKIX.  It would\r\n       however be useful to update RFC 2875 to have this fallback\r\n       position.\r\n\r\n   7.  Insert Appendix C describing why POP is necessary and what some\r\n       of the different POP attacks are.\r\n\r\n   8.  pop field in the CertReqMsg structure has been renamed to popo to\r\n       avoid confusion between POP and pop.\r\n\r\n   9.  The use of the EncryptedValue structure has been deprecated in\r\n       favor of the EnvelopedData structure.\r\n\r\n   10.  Add details on how private keys are to be structured when\r\n       encrypted.\r\n\r\n   11.  Allow for POP on key agreement algorithms other than DH.\r\n", "correct_text": "   7.  Replaced Appendix A with a reference to [RFC2875].  The only\r\n       difference is that the old text specified to use subject alt name\r\n       instead of subject name if subject name was empty.  This is not\r\n       possible for a CA certificate issued using PKIX.  It would\r\n       however be useful to update RFC 2875 to have this fallback\r\n       position.\r\n\r\n   8.  Insert Appendix C describing why POP is necessary and what some\r\n       of the different POP attacks are.\r\n\r\n   9.  pop field in the CertReqMsg structure has been renamed to popo to\r\n       avoid confusion between POP and pop.\r\n\r\n   10. The use of the EncryptedValue structure has been deprecated in\r\n       favor of the EnvelopedData structure.\r\n\r\n   11.  Add details on how private keys are to be structured when\r\n       encrypted.\r\n\r\n   12.  Allow for POP on key agreement algorithms other than DH.\r\n", "notes": "Item 7 erroneously repeated.", "submit_date": "2010-10-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2596", "doc-id": "RFC5988", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "nonspecific", "orig_text": "n/a", "correct_text": "n/a", "notes": "Ignores prior art, such as http://wiki.whatwg.org/wiki/RelExtensions (for example, rel-accessibility)\n --VERIFIER NOTES-- \n   Peter: It was never the intent of this document to register existing link relations, therefore the document is not in error.", "submit_date": "2010-10-29", "submitter_name": "Andy Mabbett", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3056", "doc-id": "RFC2616", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1.2", "orig_text": "Request-URI    = \"*\" | absoluteURI | abs_path | authority", "correct_text": "Request-URI    = \"*\" | absoluteURI | abs_path [ \"?\" query ] | authority\r\n", "notes": "so that \"/path?query\" is a valid Request-URI as it should.\r\n\r\nbecause it is not the case with RFC 3986\r\n(obsoleting RFC 2396 which has the same problem actually):\r\n\r\nabsoluteURI   = absolute-URI\r\nabs_path      = path-absolute\r\n\r\nabsolute-URI  = scheme \":\" hier-part [ \"?\" query ]\r\npath-absolute = \"/\" [ segment-nz *( \"/\" segment ) ]\r\nsegment-nz    = 1*pchar\r\nsegment       = *pchar\r\npchar         = unreserved / pct-encoded / sub-delims / \":\" / \"@\"\r\nunreserved    = ALPHA / DIGIT / \"-\" / \".\" / \"_\" / \"~\"\r\npct-encoded   = \"%\" HEXDIG HEXDIG\r\nsub-delims    = \"!\" / \"$\" / \"&\" / \"'\" / \"(\" / \")\" / \"*\" / \"+\" / \",\" / \";\" / \"=\"\n --VERIFIER NOTES-- \nThis issue has been fixed in the revisions to RFC 2616, see http://trac.tools.ietf.org/wg/httpbis/trac/changeset/76\r\n", "submit_date": "2011-12-20", "submitter_name": "Julien Moutinho", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3057", "doc-id": "RFC6418", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "For instance, the network may perform HTTP redirection or modify DNS behavior (Section 4.1) until the user has not authenticated.\r\n\r\n", "correct_text": "For instance, the network may perform HTTP redirection or modify DNS behavior (Section 4.1) until the user has been authenticated.\r\n", "notes": "", "submit_date": "2011-12-21", "submitter_name": "Zhou Sujing", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3058", "doc-id": "RFC6418", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4. 1", "orig_text": "Until the user has not authenticated\r\nWhen the user has not authenticated", "correct_text": "Until the user has been authenticated\r\nWhen the user has been authenticated", "notes": "", "submit_date": "2011-12-21", "submitter_name": "Zhou Sujing", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3444", "doc-id": "RFC6265", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "path-value        = <any CHAR except CTLs or \";\">\r\nextension-av      = <any CHAR except CTLs or \";\">\r\n", "correct_text": "path-value        = * <any CHAR except CTLs or \";\">\r\nextension-av      = * <any CHAR except CTLs or \";\">\r\n", "notes": "A better correction could also be:\r\n\r\n   path-value        = *av-octet\r\n   extension-av      = *av-octet\r\n   av-octet          = %x20-3A / %x3C-7E\r\n                     ; any CHAR except CTLs or \";\"\r\n", "submit_date": "2013-01-06", "submitter_name": "Eran Hammer", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3529", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipIfStatsOutFragCreates OBJECT-TYPE (p. 53) says:", "orig_text": "           \"The number of output datagram fragments that have been\r\n            generated as a result of IP fragmentation.\r\n\r\n            When tracking interface statistics, the counter of the\r\n|           outgoing interface is incremented for a successfully\r\n|           fragmented datagram.\r\n\r\n            [...]", "correct_text": "           \"The number of output datagram fragments that have been\r\n            generated as a result of IP fragmentation.\r\n\r\n            When tracking interface statistics, the counter of the\r\n            outgoing interface is incremented for a successfully\r\n|           created datagram fragment.\r\n\r\n            [...]", "notes": "improperly replicated description text.\r\nA \"mirror\" of Errata ID 3526 recurs, for the Interface Statistics.", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2597", "doc-id": "RFC5910", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2.5", "orig_text": "   Example <update> Command,\r\n                 Removing all DS and Key Data Using <secDNS:rem>\r\n                 with <secDNS:all>:\r\n\r\n   C:<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\r\n   C:<epp xmlns=\"urn:ietf:params:xml:ns:epp-1.0\"\r\n   C:     xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">\r\n   C:  <command>\r\n   C:    <update>\r\n   C:      <domain:update\r\n   C:       xmlns:domain=\"urn:ietf:params:xml:ns:domain-1.0\">\r\n   C:        <domain:name>example.com</domain:name>\r\n   C:      </domain:update>\r\n   C:    </update>\r\n   C:    <extension>\r\n   C:      <secDNS:update urgent=\"true\"\r\n|  C:       xmlns:secDNS=\"urn:ietf:params:xml:ns:secDNS-1.0\">\r\n   C:        <secDNS:rem>\r\n   C:          <secDNS:all>true</secDNS:all>\r\n   C:        </secDNS:rem>\r\n   C:      </secDNS:update>\r\n   C:    </extension>\r\n   C:    <clTRID>ABC-12345</clTRID>\r\n   C:  </command>\r\n   C:</epp>", "correct_text": "   Example <update> Command,\r\n                 Removing all DS and Key Data Using <secDNS:rem>\r\n                 with <secDNS:all>:\r\n\r\n   C:<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\r\n   C:<epp xmlns=\"urn:ietf:params:xml:ns:epp-1.0\"\r\n   C:     xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\">\r\n   C:  <command>\r\n   C:    <update>\r\n   C:      <domain:update\r\n   C:       xmlns:domain=\"urn:ietf:params:xml:ns:domain-1.0\">\r\n   C:        <domain:name>example.com</domain:name>\r\n   C:      </domain:update>\r\n   C:    </update>\r\n   C:    <extension>\r\n   C:      <secDNS:update urgent=\"true\"\r\n|  C:       xmlns:secDNS=\"urn:ietf:params:xml:ns:secDNS-1.1\">\r\n   C:        <secDNS:rem>\r\n   C:          <secDNS:all>true</secDNS:all>\r\n   C:        </secDNS:rem>\r\n   C:      </secDNS:update>\r\n   C:    </extension>\r\n   C:    <clTRID>ABC-12345</clTRID>\r\n   C:  </command>\r\n   C:</epp>", "notes": "secDNS-1.0 -> secDNS-1.1", "submit_date": "2010-11-01", "submitter_name": "NOGUCHI Shoji", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4310", "doc-id": "RFC3589", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "ToC", "orig_text": "...\r\n   4.  Acknowledgements............................................... 3\r\n   5.  Intellectual Property Statement................................ 3\r\n...", "correct_text": "...\r\n   4.  Intellectual Property Statement................................ 3\r\n   5.  Acknowledgements............................................... 3\r\n...", "notes": "Interchanged references to sections 4 and 5.", "submit_date": "2015-03-23", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4311", "doc-id": "RFC5176", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "Section 2.3 says:\r\n\r\n      In CoA-Request and Disconnect-Request packets, all attributes MUST\r\n      be treated as mandatory. \r\n", "correct_text": "In CoA-Request and Disconnect-Request packets, all attributes MUST\r\nbe treated as mandatory to understand by the NAS, except Proxy-State\r\nattributes that MUST be treated as opaque data.  See Section 3.1 for a\r\ndiscussion of how the NAS must handle Proxy-State.", "notes": "This was seen with vendor equipment.  CoA proxying was done to the NAS, and the proxy was adding and forwarding Proxy-State as required by Section 3.1.  However, the NAS was returning a CoA-NAK with Error-Cause = Unsupported-Attribute.\r\n\r\nThe issue comes because Proxy-State is called out in Section 3.1 for special handling.  However, that special handling isn't called out in Section 2.3.  As a result, implementors can get confused.\r\n\r\nThe RADEXT WG is rechartering with a document to address CoA proxying.  We will also be addressing this issue in that document.  There are additional attributes which a NAS should ignore, OR which should be filtered out by the proxy closest to the NAS.\r\n\r\nThe text was slightly updated by the WG from the originally submitted text.", "submit_date": "2015-03-23", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2599", "doc-id": "RFC4552", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "In order to provide authentication to OSPFv3, implementations MUST\r\nsupport ESP and MAY support AH.\r\n", "correct_text": "In order to provide authentication to OSPFv3, implementations MUST\r\nsupport AH and MAY support ESP.", "notes": "Authentication can be provided by an implementation that supports AH only.\r\n --VERIFIER NOTES-- \r\n   This was discussed on the OSPF list: http://www.ietf.org/mail-archive/web/ospf/current/msg05827.html and the conclusion was that the errata should be rejected.", "submit_date": "2010-11-02", "submitter_name": "John W. O'Brien", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2600", "doc-id": "RFC2617", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.2", "orig_text": "digest-uri       = \"uri\" \"=\" digest-uri-value\r\ndigest-uri-value = request-uri   ; As specified by HTTP/1.1", "correct_text": "digest-uri       = \"uri\" \"=\" <\"> digest-uri-value <\">\r\ndigest-uri-value = request-uri   ; As specified by HTTP/1.1", "notes": "This is an error here that the digest-uri-value is not enclosed in quotation marks; \r\nsee the correct example in Section 3.5:\r\n\r\nAuthorization: Digest username=\"Mufasa\",\r\n        realm=\"testrealm@host.com\",\r\n        nonce=\"dcd98b7102dd2f0e8b11d0f600bfb0c093\",\r\n        uri=\"/dir/index.html\",\r\n        . . .", "submit_date": "2010-11-02", "submitter_name": "Victor S. Osipov", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2601", "doc-id": "RFC1155", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Each such subject type is uniquely named by its OBJECT IDENTIFIER", "correct_text": "Each such object type is uniquely named by its OBJECT IDENTIFIER", "notes": "The word \"subject\" should be replaced by the word \"object\" in the referred context", "submit_date": "2010-11-03", "submitter_name": "Vivek Gupta", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3075", "doc-id": "RFC5988", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "none - suggestion below is an addition ", "correct_text": "Add a new paragraph:\r\n\r\nNote that registered Relation Names are required to be lower-case ASCII letters.", "notes": "This is not important, but a useful placeholder for any future revision.\r\n\r\nOne can determine the above by tracing back through the ABNF to RFC 2616 and examine the LOALPHA production there.  But, to prevent confusion, an  \"Internationalization Considerations\" section should probably call out ASCII restrictions explicitly.  One could, as an alternative, include that information under \"IANA Considerations\" for new registrations (Section 6.2.1 of the present version), but I believe it should be explicitly noted somewhere in this document.", "submit_date": "2012-01-04", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3084", "doc-id": "RFC1510", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "\r\n\r\n   +    \"Denial of service\" attacks are not solved with Kerberos.  There\r\n        are places in these protocols where an intruder intruder can\r\n        prevent an application from participating in the proper\r\n        authentication steps.  Detection and solution of such attacks\r\n        (some of which can appear to be not-uncommon \"normal\" failure\r\n        modes for the system) is usually best left to the human\r\n        administrators and users.", "correct_text": "\r\n\r\n   +    \"Denial of service\" attacks are not solved with Kerberos.  There\r\n        are places in these protocols where an intruder can\r\n        prevent an application from participating in the proper\r\n        authentication steps.  Detection and solution of such attacks\r\n        (some of which can appear to be not-uncommon \"normal\" failure\r\n        modes for the system) is usually best left to the human\r\n        administrators and users.", "notes": "Intruder appeared twice.\r\n\r\nWhile that certainly can happen in practice, I don't think the author meant to allude to that possibility. :)\n --VERIFIER NOTES-- \nAlready fixed in 4120 which obsoletes this.   ", "submit_date": "2012-01-05", "submitter_name": "Jennifer Black", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2602", "doc-id": "RFC5479", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.5.2", "orig_text": "      SDP Security Descriptions with SIPS\r\n         Not applicable; SDP Security Descriptions does not have a long-\r\n         term secret.", "correct_text": "      SDP Security Descriptions with SIPS\r\n         The PFS feature of SDP Security Description with SIPS rely on \r\n         TLS and the availability or not of PFS for SRTP calls depends \r\n         on the negotiated TLS key negotiation algorithm.\r\n\r\n         If the selected TLS key negotiation algorithm of SIPS provide \r\n         PFS feature, then the underlying SRTP encryption will support PFS. \r\n         For example TLS_DHE_RSA_WITH_AES_256_CBC_SHA provde PFS feature as \r\n         described in RFC5246.\r\n\r\n         If the selected TLS key negotiation algorithm of SIPS does not \r\n         provide PFS feature, then the underlying SRTP encryption will not \r\n         support PFS. For example TLS_RSA_WITH_AES_256_CBC_SHA does not \r\n         provide PFS feature as described in RFC5246.\r\n", "notes": "It's not true that SDP Security Descriptions with SIPS have PFS \"Not applicable\" because the SDES rely on TLS that is part of the security scheme.\r\n\r\nPractically if the long terms keys (the x509v3 RSA key of SIPS server) is compromised, the TLS sessions can be decrypted, the SDES key extracted and SRTP calls deciphered.\r\n\r\nTLS support key exchange methods that provide PFS trough the use of Ephemeral Diffie Hellman keys.\r\n\r\nWhen SIPS use TLS with DHE key negotiation, then SDES acquire PFS feature because even in case of long-term key compromise (the server x509v3 RSA key), the short term keys (the SDES keys exchanged) will be safe.\r\n\r\n----\r\nFrom reviewer Dale Worley:\r\n\r\nIt seems that the entry for \"SDP Security Descriptions with S/MIME\" is\r\nalso incorrect, as revelation of the private keys of the participants\r\nwill render the SDES readable.  I think better phrasing of the revised\r\n\r\nwording is:\r\n\r\n    SDP Security Descriptions with SIPS\r\n\r\n       PFS if the selected TLS cipher suites for the SIPS hops provide PFS.\r\n\r\n    SDP Security Descriptions with S/MIME\r\n\r\n       No PFS.", "submit_date": "2010-11-04", "submitter_name": "Fabio Pietrosanti", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2603", "doc-id": "RFC6044", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   INVITE last_diverting_target\r\n   Diversion:\r\n   diverting_user3_address;reason=unconditional;counter=1;privacy=off,\r\n   diverting_user2_address;reason=user-busy;counter=1;privacy=full,\r\n   diverting_user1_address;reason=no-answer;counter=1;privacy=off", "correct_text": "   INVITE last_diverting_target\r\n   Diversion:\r\n   <sip:diverting_user3_address>;reason=unconditional;counter=1;privacy=off,\r\n   <sip:diverting_user2_address>;reason=user-busy;counter=1;privacy=full,\r\n   <sip:diverting_user1_address>;reason=no-answer;counter=1;privacy=off", "notes": "The examples in section 7.1, 7.2, and 7.3 and also in 3.2 show the Diversion header field using an \"address\" that is not a SIP (or Tel) URI, and without the \"<\" \">\" delimeters.  That is not correct.  It is confusing, because the History-Info examples show it correctly, and thus imply the two address formats are not the same and need to be interworked, whereas in fact they are both name-addr fields, and thus both need to have the \"<\" and \">\", etc.", "submit_date": "2010-11-04", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2604", "doc-id": "RFC6044", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   History-Info:\r\n   <sip: diverting_user1_address; privacy=none >; index=1,", "correct_text": "   History-Info:\r\n   <sip:diverting_user1_address?Privacy=none>;index=1,", "notes": "The example does not show the \"?\" embedded URI header indicator for the Privacy header in the URI, but instead shows it as a URI parameter.", "submit_date": "2010-11-04", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2605", "doc-id": "RFC6044", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   History-Info:\r\n   <sip: diverting_user1_addr?Privacy=none?Reason=SIP%3Bcause%\r\n   3D302>;index=1,", "correct_text": "   History-Info:\r\n   <sip: diverting_user1_addr?Privacy=none&Reason=SIP%3Bcause%\r\n   3D302>;index=1,", "notes": "The example shows two embedded headers, but using two \"?\" tokens which is incorrect - there is only one \"?\" token, and all subsequent embedded headers need to use \"&\". (as per RFC 3261 ABNF rules)", "submit_date": "2010-11-04", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2606", "doc-id": "RFC6044", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "|       |       |INVITE |       |       |       |     |       |        |\r\n|       |       |------>|       |       |       |     |       |        |\r\n|       |       |History-Info:  |       |       |     |       |        |\r\n|       |       |<sip:proxyP1>; index=1,|       |     |       |        |\r\n|       |       |<sip:userB>; index=1.1 |       |     |       |        |\r\n|       |       |<sip:userC>; cause=302; index=1.1.1  |       |        |", "correct_text": "|       |       |INVITE |       |       |       |     |       |        |\r\n|       |       |------>|       |       |       |     |       |        |\r\n|       |       |History-Info:  |       |       |     |       |        |\r\n|       |       |<sip:proxyP1>; index=1,|       |     |       |        |\r\n|       |       |<sip:userB>; index=1.1 |       |     |       |        |\r\n|       |       |<sip:userC?Reason=SIP%3Bcause%3D302>;index=1.1.1      |", "notes": "The \"cause\" field is not a Hist-Info header param, it's a param of a Reason header embedded in the URI.\r\nFurthermore, the example shows things like \"userC\", while obviously it has to be something like \"userC@host.com\" to be a valid SIP URI.\n --VERIFIER NOTES-- \n See erratum 3077, which corrects this erratum (2606)", "submit_date": "2010-11-04", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7895", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.4", "orig_text": "<Nonexistent>", "correct_text": "A.4.  Updated Property Value Data Types\r\n\r\n   o  The syntax of the UTC-OFFSET property value type has changed from:\r\n          \"+\" / \"-\" hour \":\" minute\r\n      to:\r\n          \"+\" / \"-\" hour [minute]\r\n\r\n   o  The default value type for the UID property has changed from TEXT to URI.\r\n\r\n   o  The default value type for the PHOTO, LOGO, SOUND, and KEY properties\r\n      has changed from BINARY to URI.\r\n\r\n   o  The default value type for the TZ property has changed from UTC-OFFSET to TEXT.\r\n\r\n   o  The value type for the GEO property has changed from a structured value\r\n      of the form:\r\n          float \";\" float\r\n      to a URI.", "notes": "Several property value data types were changed between RFCs 2425/2426 and 6350.  \r\nAssuming that these changes were intentional, they were never spelled out in an appendix as was done for the new and removed elements.\r\n\r\nI've listed the changes that I discovered here to inform a future document update.", "submit_date": "2024-04-16", "submitter_name": "Ken Murchison", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-18 17:57:47"}, {"errata_id": "2607", "doc-id": "RFC6044", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7", "orig_text": "   History-Info:\r\n   <sip: diverting_user1_address; privacy=none >; index=1,\r\n   <sip: diverting_user2_address; cause=408?privacy=history>;index=1.1,\r\n   <sip: diverting_user3_address; cause=486?privacy=none>;index=1.1.1,\r\n   <sip: last_diverting_target; cause=302>;index=1.1.1.1\r\n\r\n7.2.  Example with History-Info Header Changed into Diversion Header\r\n\r\n   History-Info:\r\n   <sip: diverting_user1_address?privacy=history >; index=1,\r\n   <sip: diverting_user2_address; cause=302? privacy=none>;index=1.1,\r\n   <sip: last_diverting_target; cause=486>;index=1.1.1", "correct_text": "   History-Info:\r\n   <sip:diverting_user1_address?Privacy=none>;index=1,\r\n   <sip:diverting_user2_address?Reason=SIP%3Bcause%3D408?privacy=\r\n      history>; index=1.1,\r\n   <sip:diverting_user3_address?Reason=SIP%3Bcause%3D486?privacy=none>;\r\n     index=1.1.1,\r\n   <sip:last_diverting_target?Reason=SIP%3Bcause%3D302>;index=1.1.1.1\r\n\r\n7.2.  Example with History-Info Header Changed into Diversion Header\r\n\r\n   History-Info:\r\n   <sip: diverting_user1_address?privacy=history >; index=1,\r\n   <sip: diverting_user2_address?Reason=SIP%3Bcause%3D302&Privacy=none>;\r\n     index=1.1,\r\n   <sip: last_diverting_target?Reason=SIP%3Bcause%3D486>;index=1.1.1", "notes": "I know RFC 4244 makes this error all over the place, but the \"cause\" field is not a URI parameter.  It is a header parameter of the Reason header field, and per the ABNF of RFC4244 Hist-Info, the Reason header is embedded into the URI, including its cause parameter - in other words, the cause field is a parameter of an embedded header inside a URI, as shown in the correction.\r\n\r\nThis error is made in section 2.2.1, 3.1, 5, 7.1, 7.2, and 7.3 of this RFC 6044.\n --VERIFIER NOTES-- \nRFC author considers this erratum to be incorrect.", "submit_date": "2010-11-04", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3871", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.6.4.2", "orig_text": "If a value is not specified, then one will be automatically assigned.\r\nIf the \"enum\" substatement is the first one defined, the assigned\r\nvalue is zero (0); otherwise, the assigned value is one greater than\r\nthe current highest enum value.", "correct_text": "If a value is not specified, then one will be automatically assigned.\r\nIf the \"enum\" substatement is the first one defined, the assigned\r\nvalue is zero (0); otherwise, the assigned value is one greater than\r\nthe current highest enum value (that is, the highest enum value,\r\nimplicit or explicit, prior to the current \"enum\" substatement in\r\nthe parent \"type\" statement).", "notes": "Clarification that 'current highest' does not refer to all enum values, implicit or explicit, in the parent \"type\" statement but only to those that precede the current \"enum\" substatement.", "submit_date": "2014-01-23", "submitter_name": "Jonathan Hansford", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2608", "doc-id": "RFC4244", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5", "orig_text": "                History-Info: <sip:Bob@P1.example.com>;index=1,\r\n                   <sip:Bob@P2.example.com>; index=1.1,\r\n                   <sip:User2@UA2.example.com?Reason=SIP;\\\r\n                    cause=408;text=\"RequestTimeout\">;index=1.1.1,\r\n                   <sip:User3@UA3.example.com?Reason=SIP; \\\r\n                    cause=487;text=\"Request Terminated\">; index=1.1.2,\r\n                   <sip:User4@UA4.example.com?Reason=SIP;\\\r\n                    cause=603;text=\"Decline\">; index=1.1.3", "correct_text": "                History-Info: <sip:Bob@P1.example.com>;index=1,\r\n                   <sip:Bob@P2.example.com>; index=1.1,\r\n                   <sip:User2@UA2.example.com?Reason=SIP%3B\\\r\n                    cause%3D408%3Btext%3D%22RequestTimeout%22>;index=1.1.1,\r\n                   <sip:User3@UA3.example.com?Reason=SIP%3B\\\r\n                    cause%3D487%3Btext%3D%22Request%20Terminated%22>; index=1.1.2,\r\n                   <sip:User4@UA4.example.com?Reason=SIP%3B\\\r\n                    cause%3D603%3Btext%3D%22Decline%22>; index=1.1.3", "notes": "This is one of many incorrect examples in section 4.5, 4.5.1, 4.5.2, etc.  The \";\", \"=\", double-quotes, and space are not legal tokens in URI-embedded headers.", "submit_date": "2010-11-04", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2609", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14.2.11.", "orig_text": "   SYNOPSIS\r\n\r\n     (cfh) locktype, offset, length owner -> {void, NFS4ERR_DENIED ->\r\n     owner}", "correct_text": "   SYNOPSIS\r\n\r\n     (cfh) locktype, offset, length, owner -> {void, NFS4ERR_DENIED ->\r\n     owner}", "notes": "Missing comma in the LOCKT synopsis.", "submit_date": "2010-11-05", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2610", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14.2.16.", "orig_text": "   SYNOPSIS\r\n\r\n     (cfh), seqid, share_access, share_deny, owner, openhow, claim ->\r\n     (cfh), stateid, cinfo, rflags, open_confirm, attrset delegation", "correct_text": "   SYNOPSIS\r\n\r\n     (cfh), seqid, share_access, share_deny, owner, openhow, claim ->\r\n     (cfh), stateid, cinfo, rflags, attrset, delegation", "notes": "i)  The open_confirm should be removed (it is not a part of the OPEN4resok structure).\r\nii)  There is missing command between attrset and delegation.", "submit_date": "2010-11-05", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3586", "doc-id": "RFC6679", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "   The Offer:\r\n\r\n...\r\n      a=ecn-capable-rtp: ice rtp ect=0 mode=setread\r\n...\r\n\r\n   The Answer:\r\n...\r\n      a=ecn-capable-rtp: ice ect=0 mode=readonly\r\n...", "correct_text": "   The Offer:\r\n\r\n...\r\n      a=ecn-capable-rtp: ice,rtp ect=0; mode=setread\r\n...\r\n\r\n   The Answer:\r\n...\r\n      a=ecn-capable-rtp: ice ect=0; mode=readonly\r\n...", "notes": "The examples does not match the ABNF rules for the a=ecn-capaable-rtp attribute. Two issues are present, first the init method list must be comma separated with no spaces, secondly any additional parameters shall be semi colon plus space separated. Therefore both a=ecn-capable-rtp lines have been corrected. \r\n\r\nThis is primarily an editorial issues but people needs to aware of the errors in the example.", "submit_date": "2013-04-10", "submitter_name": "Magnus Westerlund", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3640", "doc-id": "RFC6621", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4", "orig_text": "  4.  If \"RtrPri(n0)\" is greater than that of all tuples in the union\r\n      of \"N1\" and \"N2\", then \"n0\" selects itself as a relay, and no\r\n      further steps are taken.", "correct_text": "  4.  If \"RtrPri(n0)\" is greater than that of all tuples in\r\n      \"N1\", then \"n0\" selects itself as a relay, and no\r\n      further steps are taken.", "notes": "The initial verbal description of the E-CDS algorithm in first paragraph A.1 pg 40 is correct..as follows\r\n\r\n  1.  If an SMF router has a higher ordinal (Router Priority, Router\r\n      ID) than all of its symmetric neighbors, it elects itself to act\r\n      as a forwarder for all received multicast packets.\r\n\r\nBut LATER in A.4 pseudocode Step 4 contains a bug. N2 (2 hop neighbors are included in this step).  This pseudocode bug can cause incorrect behavior to occur.", "submit_date": "2013-06-06", "submitter_name": "Joseph Macker", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7039", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.4", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 54 37 40 00 ff 06 48 09 ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 ff 12 ac d5 b5 e2 cb 0e fc 32\r\n     c0 18 01 00 46 b6 00 00 01 01 08 0a 57 67 72 f3\r\n     00 02 4c ce 1d 10 54 3d 97 76 6e 48 ac 26 2d e9\r\n     ae 61 b4 f9 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da c0 00 b4 ac 1b 1c 1d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da c0 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 54 37 40 00 ff 06 48 09 ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 ff 12 ac d5 b5 e2 cb 0e fc 32\r\n     c0 18 01 00 45 8c 00 00 01 01 08 0a 57 67 72 f3\r\n     00 02 4c ce 1d 10 54 3d 97 76 6e 48 ac 26 2d e9\r\n     ae 61 b4 f9 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da c0 00 b4 ac 1b 1c 1d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da c0 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "notes": "The TCP checksum shown (0x46b6) is wrong, it should be 0x458c.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:48:30"}, {"errata_id": "2611", "doc-id": "RFC4268", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   entStateOperEnabled NOTIFICATION-TYPE\r\n.\r\n.\r\n.\r\n               ...to find out whether\r\n               there were any known alarms against the entity at that\r\n               time that may explain why the physical entity has become\r\n               operationally disabled.\"\r\n     ::= { entStateNotifications 1 }\r\n\r\n   entStateOperDisabled NOTIFICATION-TYPE\r\n.\r\n.\r\n.\r\n               ...to find out whether\r\n               there were any known alarms against the entity at that\r\n               time that may affect the physical entity's\r\n               ability to stay operationally enabled.\"\r\n     ::= { entStateNotifications 2 }\r\n\r\n", "correct_text": "   entStateOperEnabled NOTIFICATION-TYPE\r\n.\r\n.\r\n.\r\n               ...to find out whether\r\n               there were any known alarms against the entity at that\r\n               time that may affect the physical entity's\r\n               ability to stay operationally enabled.\"\r\n     ::= { entStateNotifications 1 }\r\n\r\n   entStateOperDisabled NOTIFICATION-TYPE\r\n.\r\n.\r\n.\r\n               ...to find out whether\r\n               there were any known alarms against the entity at that\r\n               time that may explain why the physical entity has become\r\n               operationally disabled.\"\r\n     ::= { entStateNotifications 2 }", "notes": "It appears that the text was inadvertently swapped in the DESCRIPTION clauses for the ~Enabled and ~Disabled notification definitions.", "submit_date": "2010-11-06", "submitter_name": "Mark Ellison", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4953", "doc-id": "RFC5232", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.  Extended", "orig_text": "        {\r\n        remove \"MyFlags\" \"\\\\Flagged\";\r\n        fileinto :flags \"${MyFlags}\" \"spam\";\r\n        }\r\nelse", "correct_text": "        {\r\n        removeflag \"MyFlags\" \"\\\\Flagged\";\r\n        fileinto :flags \"${MyFlags}\" \"spam\";\r\n        }\r\nelse", "notes": "Neither \"fileinto\", \"imap4flags\" or \"variables\" declare a \"remove\" action.\r\n\r\nSo this should be most likely \"removeflag\" instead of \"remove\"", "submit_date": "2017-02-26", "submitter_name": "Thomas Schmid", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2612", "doc-id": "RFC5911", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6 and others", "orig_text": "ct-Data CONTENT-TYPE ::= {OCTET STRING IDENTIFIED BY id-data}", "correct_text": "ct-Data CONTENT-TYPE ::= {IDENTIFIED BY id-data}", "notes": "Due to a confusion in the part of the author's head that resulted from the difference the way that encapsulated content types are encoded between PKCS#7 and CMS, I put the type of OCTET STRING in this location.  Since the OCTET STRING is explicitly included by the the encapulsated content type now, there should be an absence of a data type for the content type of id-data.  Making this change however requires that some additional changes be made.  It is not possible to just omit the type for a TYPE-IDENTIFIER type so a new class definition is required for CONTENT-TYPE.  Unfortionately it is also not possible to simply omit the type from the syntax provided for the new content type as the parser is defined as being opertunistic rather than pessimistic by the ASN.1 syntax.  Thus the tag IDENTIFIER would be consumed as a type and the rest of the parsing would fail.  We there need to make the following changes:\r\n\r\n1.  Define a new object class of CONTENT-TYPE as\r\nCONTENT-TYPE ::= CLASS {\r\n  &id OBJECT IDENTIFIER UNIQUE,\r\n  &Type OPTIONAL\r\n} WITH SYNTAX {\r\n   [TYPE &Type] IDENTIFIED BY &id\r\n}\r\n\r\n2.  We make the change to the defintion of ct-Data as above so that it no longer has an implied ASN.1 type associated with the object identifier\r\n\r\n3.  We then change all locations where a new content type is defined as follows:\r\n  ct-Foo CONTENT-TYPE ::= {Foo IDENTIFIED BY id-Foo}\r\nbecomes\r\n   ct-Foo CONTENT-TYPE ::= {TYPE Foo IDENTIFIED BY id-Foo}\r\n\r\nChanges 1 and 2 will occur in the module for RFC 3851 (now RFC 5281)\r\nChange 3 will occur in a number of different modules including modules that have been published independently since this document was released.", "submit_date": "2010-11-06", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3588", "doc-id": "RFC6766", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8. IANA Cons", "orig_text": "IANA has allocated value 210 as the Object identifier for g9983MIB\r\nMODULE-IDENTITY <http://www.iana.org/> in the MIB-2 transmission \r\nsub-tree.", "correct_text": "IANA has allocated value 210 as the Object identifier for g9983MIB \r\nMODULE-IDENTITY <http://www.iana.org/> under the MIB-2 tree.", "notes": "According to RFC6765, the ifType number 265 was registered for g9983.\r\nAccording to the registration note for the ifType registry, for every ifType registration, the corresponding transmission number should be registered or marked \"Reserved, therefore the value 265 in the Transmission Group registry should be marked as Reserved.", "submit_date": "2013-04-15", "submitter_name": "Edward Beili", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3589", "doc-id": "RFC6767", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "IANA has assigned 264 as the object identifier for the g9982MIB \r\nMODULE-IDENTITY in the MIB-2 transmission sub-tree \r\n<http://www.iana.org/>.\r\n", "correct_text": "IANA has assigned 209 as the object identifier for the g9982MIB \r\nMODULE-IDENTITY in the MIB-2 tree <http://www.iana.org/>.\r\n", "notes": "The following changes must be made by IANA in http://www.iana.org/assignments/smi-numbers/smi-numbers.xml :\r\n1. The entry for the value of 209 under mib-2 shall be changed to:\r\n209  g9982MIB  G9982-MIB  [RFC6767]\r\n2. The entry for the value of 264 under transmission sub-tree shall be changed to:\r\n264  Reserved  Reserved", "submit_date": "2013-04-15", "submitter_name": "Edward Beili", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3590", "doc-id": "RFC6767", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "    ::= { mib-2 264 }", "correct_text": "    ::= { mib-2 209 }", "notes": "The following changes must be made by IANA in http://www.iana.org/assignments/smi-numbers/smi-numbers.xml :\r\n1. The entry for the value of 209 under mib-2 shall be changed to:\r\n209  g9982MIB  G9982-MIB  [RFC6767]\r\n2. The entry for the value of 264 under transmission sub-tree shall be changed to:\r\n264  Reserved  Reserved", "submit_date": "2013-04-15", "submitter_name": "Edward Beili", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3591", "doc-id": "RFC6768", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "IANA has assigned 208 as the object identifier for g9981MIB \r\nMODULE-IDENTITY in the MIB-2 transmission sub-tree \r\n<http://www.iana.org/>.", "correct_text": "IANA has assigned 208 as the object identifier for g9981MIB \r\nMODULE-IDENTITY in the MIB-2 tree <http://www.iana.org/>.", "notes": "Since the ifType value for g9981 is 263, the same value must be reserved under the transmission sub-tree in the IANA registry, see http://www.iana.org/assignments/smi-numbers/smi-numbers.xml", "submit_date": "2013-04-15", "submitter_name": "Edward Beili", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3665", "doc-id": "RFC5496", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Use of the attribute is, however, not restricted to the construction \r\nof source trees.  It may also be used to construct a shared tree.  In\r\nthis case, the RPF Vector TLV contains the IP address of a Rendezvous\r\nPoint (RP).", "correct_text": "Use of the attribute is, however, not restricted to the construction\r\nof source trees.  It may also be used to construct a shared tree.  In\r\nthis case, the RPF Vector TLV contains the IP address of an edge \r\nrouter on the path to the Rendezvous Point (RP).", "notes": "For a source tree, as per section 3.0, RPF Vector TLV contains the IP address of edge-1 which is to be used to reach the source. Similarly, for shared tree, RPF vector TLV should contain the IP address of the edge router which is to be used to reach RP.", "submit_date": "2013-06-17", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2613", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14.2.16.", "orig_text": "   When an OPEN is done and the specified lockowner already has the\r\n   resulting filehandle open, the result is to \"OR\" together the new\r\n   share and deny status together with the existing status.  In this\r\n   case, only a single CLOSE need be done, even though multiple OPENs\r\n   were completed.  When such an OPEN is done, checking of share\r\n   reservations for the new OPEN proceeds normally, with no exception\r\n   for the existing OPEN held by the same lockowner.", "correct_text": "   When an OPEN is done and the specified owner already has the\r\n   resulting filehandle open, the result is to \"OR\" together the new\r\n   share and deny status together with the existing status.  In this\r\n   case, only a single CLOSE need be done, even though multiple OPENs\r\n   were completed.  When such an OPEN is done, checking of share\r\n   reservations for the new OPEN proceeds normally, with no exception\r\n   for the existing OPEN held by the same owner.", "notes": "The 'lockowner' should be replaced by 'owner' (twice in the paragraph). The lockowner is not related to the OPEN operation. Instead, the owner (open_owner) is related.", "submit_date": "2010-11-08", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2614", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14.2.18.", "orig_text": "   This operation is used to confirm the sequence id usage for the first\r\n   time that a open_owner is used by a client.  The stateid returned\r\n   from the OPEN operation is used as the argument for this operation\r\n   along with the next sequence id for the open_owner.  The sequence id\r\n   passed to the OPEN_CONFIRM must be 1 (one) greater than the seqid\r\n   passed to the OPEN operation from which the open_confirm value was\r\n   obtained.  If the server receives an unexpected sequence id with\r\n   respect to the original open, then the server assumes that the client\r\n   will not confirm the original OPEN and all state associated with the\r\n   original OPEN is released by the server.", "correct_text": "   This operation is used to confirm the sequence id usage for the first\r\n   time that a open_owner is used by a client.  The stateid returned\r\n   from the OPEN operation is used as the argument for this operation\r\n   along with the next sequence id for the open_owner.  The sequence id\r\n   passed to the OPEN_CONFIRM must be 1 (one) greater than the seqid\r\n   passed to the previous OPEN operation.\r\n   If the server receives an unexpected sequence id with\r\n   respect to the original open, then the server assumes that the client\r\n   will not confirm the original OPEN and all state associated with the\r\n   original OPEN is released by the server.", "notes": "The OPEN operation does not return the open_confirm value.", "submit_date": "2010-11-08", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2615", "doc-id": "RFC4210", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix C", "orig_text": "   -- **********\r\n   -- * For the purposes of this specification, the ASN.1 comment\r\n   -- * given in [CRMF] pertains not only to certTemplate, but\r\n   -- * also to the altCertTemplate control.  That is,\r\n   -- **********\r\n", "correct_text": "   -- **********\r\n   -- * For the purposes of this specification, the ASN.1 comment\r\n   -- * given in [CRMF] pertains not only to certTemplate, but\r\n   -- * also to the altCertTemplate control. \r\n   -- **********\r\n", "notes": "", "submit_date": "2010-11-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2616", "doc-id": "RFC4210", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.3.1", "orig_text": "   Note: it is RECOMMENDED that the fields of PBMParameter remain\r\n   constant throughout the messages of a single transaction (e.g.,\r\n   ir/ip/certConf/pkiConf) in order to reduce the overhead associated\r\n   with PasswordBasedMac computation).\r\n", "correct_text": "   Note: it is RECOMMENDED that the fields of PBMParameter remain\r\n   constant throughout the messages of a single transaction (e.g.,\r\n   ir/ip/certConf/pkiConf) in order to reduce the overhead associated\r\n   with PasswordBasedMac computation.\r\n", "notes": "", "submit_date": "2010-11-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2617", "doc-id": "RFC5451", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.4.2", "orig_text": "   hardfail:  This client is explicitly not authorized to inject or\r\n      relay mail using the sender's DNS domain.\r\n", "correct_text": "   fail:  This client is explicitly not authorized to inject or\r\n      relay mail using the sender's DNS domain.\r\n", "notes": "Change [sixth paragraph] for consistency:\r\n1)  RFC 4408 (SPF) defines this state as \"fail\", not \"hardfail\".\r\n2)  The other subsections of 2.4 of this RFC define \"fail\".\r\nThe change makes the result state consistent and parallel to those as noted in other RFCs and for the alternative methods defined in this RFC.", "submit_date": "2010-11-09", "submitter_name": "D. Stussy", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2645", "doc-id": "RFC2616", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "Use of program names for the identification of encoding formats \r\nis not desirable and is discouraged for future encodings. Their \r\nuse here is representative of historical practice, not good \r\ndesign. For compatibility with previous implementations of HTTP, \r\napplications SHOULD consider \"x-gzip\" and \"x-compress\" to be \r\nequivalent to \"gzip\" and \"compress\" respectively.\r\n", "correct_text": "Use of program names for the identification of encoding formats \r\nis not desirable and is discouraged for future encodings. Their \r\nuse here is representative of historical practice, not good \r\ndesign. For compatibility with future implementations of HTTP, \r\napplications SHOULD consider \"x-gzip\" and \"x-compress\" to be \r\nequivalent to \"gzip\" and \"compress\" respectively.\r\n", "notes": "\"For compatibility with previous implementations of HTTP\", \r\nhere, 'previous' should be replaced by 'future'.\n --VERIFIER NOTES-- \nComment by Peter Saint-Andre:\r\n\r\n   This erratum is incorrect -- the text is clearly about\r\n   backward compatibility, not forward compatibility. The\r\n   original poster can comment in the HTTPBIS WG about this\r\n   matter since draft-ietf-httpbis-p1-messaging has very \r\n   similar text.\r\n", "submit_date": "2010-11-27", "submitter_name": "Winfred Qin", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2646", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "The following is an example file which might be used to define the\r\nISI.EDU zone.and is loaded with an origin of ISI.EDU:\r\n", "correct_text": "The following is an example file which might be used to define the\r\nISI.EDU zone and is loaded with an origin of ISI.EDU:\r\n", "notes": "", "submit_date": "2010-11-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2647", "doc-id": "RFC4343", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   (\".\"), which can be expressed as and \\046 or \\.  It is advisable to\r\n", "correct_text": "   (\".\"), which can be expressed as \\046 or \\.  It is advisable to\r\n", "notes": "", "submit_date": "2010-11-29", "submitter_name": "Sam Bretheim", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2618", "doc-id": "RFC5395", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.1", "orig_text": " 1. A complete template as specified in Appendix A has been posted for\r\n      three weeks to the namedroppers@ops.ietf.org mailing list before\r\n      the Expert Review decision.\r\n\r\n....and later on...\r\n\r\nNo less than three weeks and no more than six weeks after a completed\r\n   template has been formally posted to namedroppers@ops.ietf.org, the\r\n   selected Expert shall post a message, explicitly accepting or\r\n   rejecting the application, to IANA, namedroppers@ops.ietf.org, and\r\n", "correct_text": " 1. A complete template as specified in Appendix A has been posted for\r\n      three weeks to the dnsext@ietf.org mailing list before\r\n      the Expert Review decision\r\n\r\n......and later on ...\r\n\r\nNo less than three weeks and no more than six weeks after a completed\r\n   template has been formally posted to dnsext@ietf.org, the\r\n   selected Expert shall post a message, explicitly accepting or\r\n   rejecting the application, to IANA, dnsext@ietf.org, and", "notes": "The DNSEXT working group has changed mailing lists to the dnsext@ietf.org.\r\nThere is also occurrence of the old mailing list address in section 3.1.2\r\nparagraph 1, and in section 5 paragraph 3.  These additional occurrences should also be changed to dnsext@ietf.org\r\n\r\nNote (RDroms): the errata is written in this way, including the notes, because the errata submission form apparently only allows errata in one section of the doc.", "submit_date": "2010-11-10", "submitter_name": "Olafur Gudmundsson", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2619", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.4.1", "orig_text": "      It is therefore\r\n      incumbent upon implementations to conform to the syntax of\r\n      addresses for the context in which they are used.", "correct_text": "      Implementations MUST conform to the syntax of\r\n      addresses for the context in which they are used.", "notes": "The phrase \"incumbent upon\" is not defined in RFC 2119. If another RFC defines a standard with the force of \"MUST\", then it is not an option for an implementation to ignore that standard. Therefore, implementations MUST conform to their syntax.\r\n\r\nThis rewording clarifies the recognition that should be given to the RFCs that inform the particular context of the implementation.\n --VERIFIER NOTES-- \nConforming (or failing to conform) to the syntax of another specification does not affect the interoperability of *this* specification. Therefore, RFC 2119 language is not appropriate. However, even if it could be argued that it was, an erratum is not the appropriate place to make such a change.   ", "submit_date": "2010-11-10", "submitter_name": "Dominic Sayers", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2620", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.4.1", "orig_text": "   Comments and folding white space\r\n   SHOULD NOT be used around the \"@\" in the addr-spec.", "correct_text": "   Comments and folding white space\r\n   SHOULD NOT be used around the \"@\" in the addr-spec. Comments and\r\n   folding white space at the beginning and end of an addr-spec are\r\n   semantically invisible.", "notes": "Section 3.2.2 says\r\n\r\n   \"Runs of FWS, comment, or CFWS that occur between lexical tokens in a\r\n   structured header field are semantically interpreted as a single\r\n   space character.\"\r\n\r\nbut a leading or trailing space on an addr-spec would prevent it being interpreted as a valid RFC 5321 Mailbox (see http://tools.ietf.org/html/rfc5321#section-4.1.2).\r\n\r\nThis is important because this section of RFC 5322 also says\r\n\r\n      \"It is therefore\r\n      incumbent upon implementations to conform to the syntax of\r\n      addresses for the context in which they are used.\"\r\n\r\nEither the leading and trailing CFWS should be semantically \"invisible\" or additional logic is required for implementations to transform an RFC 5322 addr-spec into an RFC 5321 Mailbox.\r\n\r\nNote: It may be true that leading and trailing CFWS is not \"between lexical tokens\". If so then it should be made clear what semantic interpretation to put on it in this case.\n --VERIFIER NOTES-- \n1. \"addr-spec\" does not appear in 5321. 5321 and 5322 have two different definitions for \"Mailbox\" and \"mailbox\" respectively, and that is a topic for an update of these documents, not for an erratum.\r\n\r\n2. This report does not want the CFWS to be *semantically* invisible; it wants it to be *syntactically* invisible when moving an addr-spec from a 5322 context to a 5321 context. This document does not discuss this use.", "submit_date": "2010-11-10", "submitter_name": "Dominic Sayers", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2621", "doc-id": "RFC6030", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "The <Usage> element MAY be present, but no attribute of the \r\n<Usage> element is required.", "correct_text": "The <AlgorithmParameters> element MAY be present, but no attribute \r\nof the <AlgorithmParameters> element is required.", "notes": "The <Usage> field was renamed between draft -02 and -03 but this section was not updated.", "submit_date": "2010-11-10", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2623", "doc-id": "RFC6011", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.2", "orig_text": "[[ first bullet on page 14: ]]\r\n \r\n  o  If a DNS request to resolve the host name in the request URL\r\n      returns a response that indicates that no matching result is\r\n|     available (NXDOMAIN), the UA MUST remove that request URL from the\r\n      list of alternatives for the Configuration Service Domain.\r\n", "correct_text": "   o  If a DNS request to resolve the host name in the request URL\r\n      returns a response that indicates that no matching result is\r\n|     available, the UA MUST remove that request URL from the list of\r\n      alternatives for the Configuration Service Domain.\r\n", "notes": "Rationale:\r\n  See the related Errata Note for Section 2.3.1.2 (EID=2622) for\r\n  background and details. Dropping the parenthetical \"NXDOMAIN\"\r\n  here seems to be the most simple way to remove the misleading\r\n  allusion that \"no matching data available\" be equivalent to a\r\n  NXDomain response.", "submit_date": "2010-11-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2624", "doc-id": "RFC3986", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?", "correct_text": "/^(([^:\\/?#]+):)?(\\/\\/([^\\/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?/", "notes": "This is a copy of Erratum #1933, reported against RFC 2396.", "submit_date": "2010-11-11", "submitter_name": "Peter Saint-Andre", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5759", "doc-id": "RFC8032", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.", "orig_text": "                          (p+1)/4    3            (p-3)/4\r\n                 x = (u/v)        = u  v (u^5 v^3)         (mod p)", "correct_text": "                          (p+1)/4            (p-3)/4\r\n                 x = (u/v)        =  u (u v)         (mod p)", "notes": " --VERIFIER NOTES-- \r\nThe original text was correct (verified by Nick Sullivan).\r\n01/28/2022: RFC Editor changed status to Reported per discussion with Stanislav V. Smyshlyaev.\r\n02/15/2022: The status is changed to \"Held for Document Update\" by Stanislav Smyshlyaev. The proposed formulas are correct as well (for the specific case of the EdDSA parameters) and provide a slight efficiency gain.", "submit_date": "2019-06-21", "submitter_name": "Franck Rondepierre", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2022-02-15 05:42:49"}, {"errata_id": "3603", "doc-id": "RFC6756", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.6", "orig_text": " Section 6.1.1 of RFC 2026 [7] describes the process for referencing\r\n   other open standards (like ITU-T Recommendations) in IETF RFCs.", "correct_text": " Section 7.1.1 of RFC 2026 [7] describes the process for referencing\r\n   other open standards (like ITU-T Recommendations) in IETF RFCs.", "notes": "", "submit_date": "2013-04-23", "submitter_name": "Scott Mansfield", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2635", "doc-id": "RFC5804", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "    single-capability     = capability-name [SP string] CRLF\r\n\r\n    capability-name       = string\r\n                            ;; Note that literal-s2c is allowed.\r\n\r\n    initial-capabilities  = DQUOTE \"IMPLEMENTATION\" DQUOTE SP string /\r\n                            DQUOTE \"SASL\" DQUOTE SP sasl-mechs /\r\n                            DQUOTE \"SIEVE\" DQUOTE SP sieve-extensions /\r\n                            DQUOTE \"MAXREDIRECTS\" DQUOTE SP number-str /\r\n                            DQUOTE \"NOTIFY\" DQUOTE SP notify-mechs /\r\n                            DQUOTE \"STARTTLS\" DQUOTE /\r\n                            DQUOTE \"LANGUAGE\" DQUOTE SP language /\r\n                            DQUOTE \"VERSION\" DQUOTE SP version /\r\n                            DQUOTE \"OWNER\" DQUOTE SP string\r\n|                           ;; Each capability conforms to\r\n|                           ;; the syntax for single-capability.\r\n                            ;; Also note that the capability name\r\n                            ;; can be returned as either literal-s2c\r\n                            ;; or quoted, even though only \"quoted\"\r\n                            ;; string is shown above.", "correct_text": "", "notes": "single-capability definition includes CRLF, while each initial-capabilities alternative doesn't. Either the ABNF comment for initial-capabilities needs to be updated to reflect that, or one of single-capability/initial-capabilities needs to be updated to make the comment true.", "submit_date": "2010-11-17", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2642", "doc-id": "RFC3401", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4, pg. 3", "orig_text": "[[  last bullet: ]]\r\n\r\n   o  \"Dynamic Delegation Discovery System (DDDS) Part Four: The Uniform\r\n      Resource Identifiers (URI) Resolution Application\" (RFC 3404) [3].\r\n      This Application uses the DDDS to resolve any URI to a set of\r\n      endpoints or 'resolvers' that can give additional information\r\n      about the URI independent of its particular URI scheme.\r\n", "correct_text": "   o  \"Dynamic Delegation Discovery System (DDDS) Part Four: The Uniform\r\n      Resource Identifiers (URI) Resolution Application\" (RFC 3404) [3].\r\n      This Application uses the DDDS to resolve any URI to a set of\r\n      endpoints or 'resolvers' that can give additional information\r\n      about the URI independent of its particular URI scheme.\r\n|     \"Dynamic Delegation Discovery System (DDDS) Part Five: URI.ARPA\r\n|     Assignment Procedures\" (RFC 3405) [4] contains supplementary\r\n|     specification for this application and the DNS database that it\r\n|     utilizes.", "notes": "Rationale:\r\n  Missing citiation for RFC 3405 [4]; since there's no other instance\r\n  of that citation in the entire RFC, without it, the presence of\r\n  entry [4] in the References would not conform to the RFC Style Guide.", "submit_date": "2010-11-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2637", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14.2.18.", "orig_text": "                           Instead, to avoid unbounded memory use, the\r\n   server needs to implement a strategy for disposing of open_owner4s\r\n   that have no current lock, open, or delegation state for any files\r\n   and have not been used recently.", "correct_text": "                           Instead, to avoid unbounded memory use, the\r\n   server needs to implement a strategy for disposing of open_owner4s\r\n   that have no current open state for any files\r\n   and have not been used recently.", "notes": "A lock can be held on already opened files only. This means that every lock state can exist only in case the accompanied open state is already there.\r\n\r\nSo if there is a lock state held by server then there must be an open state for the file too. This means that we do not need to mention the \"current lock state\" in the RFC's sentence above.\r\n\r\nNext, the delegation state is allocated only in case the delegation is granted by server to a client for a file. The delegation state is related to file and client. It is not related/tied to openowner. This means that it is not possible to test whether an openowner have any delegation states. Delegation states are simply not related to the openowner.\r\n\r\nIt is easily possible to have a client with some delegation granted with no valid openowner held by a server.", "submit_date": "2010-11-19", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2638", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.3.", "orig_text": "   FH4_VOLATILE_ANY\r\n             The filehandle may expire at any time, except as\r\n             specifically excluded (i.e., FH4_NO_EXPIRE_WITH_OPEN).", "correct_text": "   FH4_VOLATILE_ANY\r\n             The filehandle may expire at any time, except as\r\n             specifically excluded (i.e., FH4_NOEXPIRE_WITH_OPEN).", "notes": "The FH4_NO_EXPIRE_WITH_OPEN should be replaced with FH4_NOEXPIRE_WITH_OPEN.", "submit_date": "2010-11-19", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2648", "doc-id": "RFC5911", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Section 6", "orig_text": "  FROM AttributeCertificateVersion1-2009\r\n      { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n      smime(16) modules(0) id-mod-v1AttrCert-02(49) } ;", "correct_text": "  FROM AttributeCertificateVersion1-2009\r\n      { iso(1) member-body(2) dod(6) internet(1) security(5)\r\n        mechanisms(5) pkix(7) id-mod(0) id-mod-v1AttrCert-02(49) } ;", "notes": "The wrong oid arc was used for the module identification.  A similar changes is also being reported for RFC 5912", "submit_date": "2010-11-29", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2649", "doc-id": "RFC5912", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7,", "orig_text": "  AttributeCertificateVersion1-2009\r\n      { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n      smime(16) modules(0) id-mod-v1AttrCert-02(49) } ;", "correct_text": "AttributeCertificateVersion1-2009\r\n      { iso(1) member-body(2) dod(6) internet(1) security(5)\r\n        mechanisms(5) pkix(7) id-mod(0) id-mod-v1AttrCert-02(49) } ;", "notes": "Oid was used from the wrong arc.  THis change corrects the arc used for the OID number.", "submit_date": "2010-11-29", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3604", "doc-id": "RFC6891", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "9.1.  OPT Option Code Allocation Procedure\r\n\r\n  OPT Option Codes are assigned by Expert Review.\r\n\r\n  Assignment of Option Codes should be liberal, but duplicate\r\n  functionality is to be avoided.", "correct_text": "9.1.  DNS EDNS0 Option Code Changes\r\n\r\n  This document modifies the name of the existing registry DNS EDNS0 \r\n  Options to DNS EDNS0 Option Codes (OPT) and updates the registration\r\n  procedures to Expert Review.\r\n\r\n  Assignment of Option Codes should be liberal, but duplicate\r\n  functionality is to be avoided.", "notes": "In the publication process fixing this one minor mistake in clarifying the name of the registry fell through the cracks, the consequence of this is that IANA needs this errata to clarify the registry name.", "submit_date": "2013-04-24", "submitter_name": "Olafur Gudmundsson", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2639", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.3.", "orig_text": "   FH4_VOL_MIGRATION\r\n             The filehandle will expire as a result of migration.  If\r\n             FH4_VOL_ANY is set, FH4_VOL_MIGRATION is redundant.\r\n\r\n   FH4_VOL_RENAME\r\n             The filehandle will expire during rename.  This includes a\r\n             rename by the requesting client or a rename by any other\r\n             client.  If FH4_VOL_ANY is set, FH4_VOL_RENAME is\r\n             redundant.\r\n\r\n.....\r\n\r\n   Note that the bits FH4_VOL_MIGRATION and FH4_VOL_RENAME allow the\r\n   client to determine that expiration has occurred whenever a specific\r\n   event occurs, without an explicit filehandle expiration error from\r\n   the server.  FH4_VOL_ANY does not provide this form of information.\r\n   In situations where the server will expire many, but not all\r\n   filehandles upon migration (e.g., all but those that are open),", "correct_text": "   FH4_VOL_MIGRATION\r\n             The filehandle will expire as a result of migration.  If\r\n             FH4_VOLATILE_ANY is set, FH4_VOL_MIGRATION is redundant.\r\n\r\n   FH4_VOL_RENAME\r\n             The filehandle will expire during rename.  This includes a\r\n             rename by the requesting client or a rename by any other\r\n             client.  If FH4_VOLATILE_ANY is set, FH4_VOL_RENAME is\r\n             redundant.\r\n\r\n.....\r\n\r\n   Note that the bits FH4_VOL_MIGRATION and FH4_VOL_RENAME allow the\r\n   client to determine that expiration has occurred whenever a specific\r\n   event occurs, without an explicit filehandle expiration error from\r\n   the server.  FH4_VOLATILE_ANY does not provide this form of information.\r\n   In situations where the server will expire many, but not all\r\n   filehandles upon migration (e.g., all but those that are open),", "notes": "The FH4_VOL_ANY should be replaced with FH4_VOLATILE_ANY (three times).", "submit_date": "2010-11-19", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2640", "doc-id": "RFC5802", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "The server verifies the nonce and the proof, verifies that the\r\nauthorization identity (if supplied by the client in the first\r\nmessage) is authorized to act as the authentication identity, and,\r\nfinally, it responds with a \"server-final-message\", concluding the\r\nauthentication exchange.", "correct_text": "The server verifies the nonce and the proof, verifies that the\r\nauthentication identity is authorized to act as the authorization\r\nidentity (if supplied by the client in the first message) , and,\r\nfinally, it responds with a \"server-final-message\", concluding the\r\nauthentication exchange.", "notes": "It is the authentication identity which acts as (if authorized to) the authorization identity, not the opposite.", "submit_date": "2010-11-22", "submitter_name": "Jehan Pag\u00e8s", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2641", "doc-id": "RFC3401", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2, 2nd para", "orig_text": "|  This document along with RFC 3402, RFC 3403 and RFC 3404 obsoletes\r\n   RFC 2168 [8] and RFC 2915 [6], as well as updates RFC 2276 [5].  This\r\n   document will be updated and or obsoleted when changes are made to\r\n   the DDDS specifications.  Thus the reader is strongly encouraged to\r\n|  check the IETF RFC repository for any documents that obsoletes or\r\n|  updates this one.", "correct_text": "|  This document along with RFC 3402 [1], RFC 3403 [2], and RFC 3404 [3]\r\n   obsoletes RFC 2168 [8] and RFC 2915 [6], as well as updates RFC 2276\r\n   [5].  This document will be updated and or obsoleted when changes are\r\n   made to the DDDS specifications.  Thus the reader is strongly\r\n   encouraged to check the IETF RFC repository for any documents that\r\n|  update or obsolete this one.", "notes": "Rationale:\r\na) missing citations,\r\nb) grammar,\r\nc) changed order according to expected temporal order and likelyhood\r\n   and thus, to match the preceding sentence.", "submit_date": "2010-11-22", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2643", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "E.3", "orig_text": "When a TLS-capable server negotiates SSL 2.0 it SHOULD, after\r\ndecrypting the ENCRYPTED-KEY-DATA field, check that these 8 padding\r\nbytes are 0x03.  If they are not, the server SHOULD generate a random\r\nvalue for SECRET-KEY-DATA, and continue the handshake (which will\r\neventually fail since the keys will not match).", "correct_text": "When a TLS-capable server negotiates SSL 2.0 it SHOULD, after\r\ndecrypting the ENCRYPTED-KEY-DATA field, check that these 8 padding\r\nbytes are not all 0x03.  If they are, the server SHOULD generate a random\r\nvalue for SECRET-KEY-DATA, and continue the handshake (which will\r\neventually fail since the keys will not match).", "notes": "The condition is the wrong way around.  When the bytes *are* all 0x03, that means the client supports TLS, so there must have been a version rollback attack in order for SSL 2.0 to be negotiated.  For example, see the NSS implementation (line number may rot):\r\n\r\nhttps://mxr.mozilla.org/mozilla/source/security/nss/lib/ssl/sslcon.c#1695", "submit_date": "2010-11-22", "submitter_name": "Matt McCutchen", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2644", "doc-id": "RFC2965", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.4", "orig_text": "port = \"$Port\" [ \"=\" <\"> value <\"> ]", "correct_text": "port = \"$Port\" [ \"=\" <\"> portlist <\"> ]", "notes": "<value> is too general, possibly being itself a <quoted-string> (resulting in a twofold quoted string).\r\n\r\nThe suggested change would agree with the definition on page 5, section 3.2.2: \"Port\" [ \"=\" <\"> portlist <\"> ]", "submit_date": "2010-11-23", "submitter_name": "Lo\u00efc Etienne", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4723", "doc-id": "RFC3665", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "CSeq: 1 BYE", "correct_text": "CSeq: 2 BYE", "notes": "RFC 3261:\r\nSection 15.1.1 UAC Behavior\r\n   A BYE request is constructed as would any other request within a\r\n   dialog, as described in Section 12.\r\n\r\nSection 12.2.1.1 Generating the Request\r\n   A request within a dialog is constructed by using many of the\r\n   components of the state stored as part of the dialog...\r\n    ... Requests within a dialog MUST contain strictly monotonically\r\n   increasing and contiguous CSeq sequence numbers (increasing-by-one)\r\n   in each direction \r\n\r\nEach direction of the dialog shows CSeq: 1 so whatever is the direction that generates the BYE it must increase the value to 2\n --VERIFIER NOTES-- \n   The CSeq numbering space is independent for each peer. Alice's CSeq values do not affect Bob's. The intent of the phrase \"in each direction\" in the quote is to say that each \"direction\" has increments independently of the other.", "submit_date": "2016-06-30", "submitter_name": "Benoit Entzmann", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2655", "doc-id": "RFC5804", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "|  quoted                = DQUOTE *1024QUOTED-CHAR DQUOTE\r\n                           ;; limited to 1024 octets between the <\">s", "correct_text": "|  quoted                = DQUOTE *QUOTED-CHAR DQUOTE\r\n                           ;; limited to 1024 octets between the <\">s", "notes": "The 1024 limit is on the number of octets, not on the number of Unicode characters.\r\n\r\nAs per bug report from Mark Crispin.", "submit_date": "2010-12-02", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2656", "doc-id": "RFC5952", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "4.3.  Lowercase\r\n\r\n   The characters \"a\", \"b\", \"c\", \"d\", \"e\", and \"f\" in an IPv6 address\r\n   MUST be represented in lowercase.\r\n", "correct_text": "4.3.  Case of Alphabetic Digits.\r\n\r\n   The digits \"A\" through \"F\" in an IPv6 address\r\n   MUST be represented in upper case.  User and user\r\n   derived input may be represented using lower case.\r\n", "notes": "Historically from the 1960's, hexidecimal digits other than decimal digits are represented by upper case letters.  Lower case letters may have become acceptable as user input, but such resulted from lazy programmers who couldn't manage to hit the shift key on their keyboards.  However, lower case is not acceptable for digit output.  Many early assemblers would not even accept lower case as valid input digits except where the radix base exceeded 36 (thus exhausting all upper case values).  This poor programming practice should not be allowed to be codified into any Internet standard.\r\n\r\nReferences:\r\n- Struble, George W., \"Assembler Language Programming:  The IBM System/360 and /370.\"  Addison-Wesley Publishing Co., 1969 and 1975 (Second Edition), Page 6.  ISBN 0-201-7322-6\r\n- Barden, William Jr., \"TRS-80 Assembly-Language Programming.\"  Tandy Corporation, 1979, page 14.  Library of Congress #79-63607 \r\n- Leventhal, Lance A., \"6502 Assembly Language Programming.\" Osborne McGraw-Hill, 1979 and 1986 (Second Edition), Page 1-4.  ISBN 0-07-881216-X\r\n- Intel Corporation, \"Intel486 Microprocessor Family Programmer's Reference Manual.\"  1995, Page 1-8 (Section 1.3.4).  No ISBN or LoC #.\r\n- Cress, Paul, Dirksen, Paul, and Grahm, J. Wesley, \"Fortran IV with WatFor and WatFiv.\"  Prentice-Hall, 1968 and 1970, Page 245.  LoC 74-129241\r\n- Mano, M. Morris, \"Computer System Architecture.\"  Prentice-Hall, 1982, Page 79.  ISBN 0-13-166611-8\r\n- Higgins, Richard J., \"Electronics with Digital and Analog Integrated Circuits.\"  Prentice-Hall, 1983, Page 60.  ISBN 0-13-250704-8\r\n\r\nHowever, I also note this ONE source permits mixed case:\r\n- Kernighan, Brian W. & Ritchie, Dennis M., \"The C Programming Language\", Prentice Hall, 1978 (First Edition), Page 180.  ISBN 0-13-110163-3\r\n\r\nMany other pre-1990 computer science and engineering books show hexidecimal non-decimal digits as upper case only and NEVER as lower case.  However, I could not find pages in them defining the lettered-digits as upper case only despite their consistent usage of upper case printing.\n --VERIFIER NOTES-- \nThis errata is attempting to overturn the clear consensus of the WG.   ", "submit_date": "2010-12-02", "submitter_name": "D. Stussy", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4271", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.10", "orig_text": "Recurrence rules may generate recurrence instances with an invalid\r\ndate (e.g., February 30) or nonexistent local time (e.g., 1:30 AM\r\non a day where the local time is moved forward by an hour at 1:00\r\nAM).  Such recurrence instances MUST be ignored and MUST NOT be\r\ncounted as part of the recurrence set.", "correct_text": "Recurrence rules may generate recurrence instances with an invalid\r\ndate (e.g., February 30). Such recurrence instances MUST be ignored\r\nand MUST NOT be counted as part of the recurrence set.\r\n\r\nRecurrence rules may generate recurrence instances with a nonexistent\r\nlocal time ((e.g., 1:30 AM on a day where the local time is moved\r\nforward by an hour at 1:00 AM).  Such recurrence instances are\r\nhandled as specified in Section 3.3.5.", "notes": "The section about ignoring times that don't occur in the timezone of the expansion is contradicted by the later passage (p44):\r\n\r\n\"\"\"If the computed local start time of a recurrence instance does not\r\nexist, or occurs more than once, for the specified time zone, the\r\ntime of the recurrence instance is interpreted in the same manner\r\nas an explicit DATE-TIME value describing that date and time, as\r\nspecified in Section 3.3.5.\"\"\"\r\n\r\nAnd this is the behaviour implemented by major clients such as Calendar.app and Google Calendar.", "submit_date": "2015-02-12", "submitter_name": "Neil Jenkins", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2651", "doc-id": "RFC5802", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   nonce           = \"r=\" c-nonce [s-nonce]\r\n                     ;; Second part provided by server.\r\n\r\n   c-nonce         = printable\r\n\r\n   s-nonce         = printable\r\n", "correct_text": "   nonce           = \"r=\" c-nonce [s-nonce]\r\n                     ;; Second part provided by server.\r\n\r\n   c-nonce         = 1*(printable)\r\n\r\n   s-nonce         = 1*(printable)\r\n", "notes": "\"printable\" is defined this way:\r\n   printable       = %x21-2B / %x2D-7E\r\n                     ;; Printable ASCII except \",\".\r\n                     ;; Note that any \"printable\" is also\r\n                     ;; a valid \"value\".\r\n\r\nHence a \"printable\" is a single printable character (except ','). But a nonce is a \"a sequence of random printable ASCII characters excluding ','\" (section 5.1), as can also be seen by the examples (and common sense for a security feature using randomness).", "submit_date": "2010-11-30", "submitter_name": "Jehan Pag\u00e8s", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2652", "doc-id": "RFC5802", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "", "correct_text": "Add the follow to the end of the 4th paragraph (starts with if an attacker):\r\n\r\n  Further, implementations are RECOMMENDED to reject salt values\r\n  shorter than 2 characters and MAY reject even longer salt values if\r\n  they are considered to be insufficient.  See [RFC4086] on generating\r\n  randomness.\r\n", "notes": "The original version (in Sec 7) would allow the empty string (hence the base64 encoding of an empty string). Though it may technically be an acceptable base64 encoded string, it is not acceptable in our use as we use it for security features which are not supposed to be empty (though it is not defined this way, but common sense tells).  This security consideration addresses this concern.", "submit_date": "2010-11-30", "submitter_name": "Jehan Pag\u00e8s", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2747", "doc-id": "RFC3041", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "header", "orig_text": "", "correct_text": "Obsoleted by: 4941", "notes": "The \"Obsoleted by\" note is missing from the header, so by itself the RFC seems not to be obsolete.\r\n\r\n--RATIONALE--\r\nGenerally, the text versions of RFCs do not include post-publication metadata (such as \"Obsoleted by\" or \"Updated by\") because this data was not available upon publication, and RFCs do not change after publication.\r\n\r\nPost-publication metadata is available in these primary locations:\r\n - RFC search results (http://www.rfc-editor.org/rfcsearch.html)\r\n - RFC info pages\r\n - RFC index (http://www.rfc-editor.org/rfc-index.html)\r\n\r\nFor this specific RFC, this information is available on all of them:\r\n - RFC search result \r\n - RFC info page (http://www.rfc-editor.org/info/rfc3041)\r\n - RFC index \r\n\r\nIn addition there are HTML versions of RFCs available via tools.ietf.org; they are not maintained by the RFC Editor. They include an added header in a gray box, which shows post-publication metadata. In this case, the HTML version of RFC 3041 includes the data. ", "submit_date": "2011-03-11", "submitter_name": "Johannes Endres", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2748", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.8", "orig_text": "2.8.  Data Communication\r\n\r\n  The data that flows on a connection may be thought of as a stream of\r\n  octets.  The sending user indicates in each SEND call whether the data\r\n  in that call (and any preceeding calls) should be immediately pushed\r\n  through to the receiving user by the setting of the PUSH flag.\r\n", "correct_text": "2.8.  Data Communication\r\n\r\n  The data that flows on a connection may be thought of as a stream of\r\n  octets.  The sending user indicates in each SEND call whether the data\r\n  in that call (and any preceding calls) should be immediately pushed\r\n  through to the receiving user by the setting of the PUSH flag.\r\n", "notes": "s/preceeding/preceding", "submit_date": "2011-03-13", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2653", "doc-id": "RFC5958", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2 and App A", "orig_text": "  ct-asymmetric-key-package CONTENT-TYPE ::=\r\n    { AsymmetricKeyPackage IDENTIFIED BY id-ct-KP-aKeyPackage }", "correct_text": "  ct-asymmetric-key-package CONTENT-TYPE ::=\r\n    { TYPE AsymmetricKeyPackage IDENTIFIED BY id-ct-KP-aKeyPackage }", "notes": "With the approval of errata 2612 (http://www.rfc-editor.org/errata_search.php?eid=2612), the asymmetric key package content type definition also needs to be updated to add \"TYPE\" to the CONTENT-TYPE definition.", "submit_date": "2010-12-01", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2654", "doc-id": "RFC3830", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": " *  CS ID map info (16 bits): identifies the crypto session(s) for\r\n      which the SA should be created.  The currently defined map type is\r\n      the SRTP-ID (defined in Section 6.1.1).", "correct_text": " *  CS ID map info (variable length): identifies the crypto session(s) for\r\n      which the SA should be created.  The currently defined map type is\r\n      the SRTP-ID (defined in Section 6.1.1).", "notes": "dear editors,\r\n  I guess this should be an error. After googling, I found at least one extension draft(MIKEY-TICKET) had also recognized the problem.  \r\n  If I have mistaken, I would like to hear your clarification.", "submit_date": "2010-12-02", "submitter_name": "wu yongming", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4976", "doc-id": "RFC4122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Set the two most significant bits (bits 6 and 7) of the\r\nclock_seq_hi_and_reserved to zero and one, respectively.", "correct_text": "Set the two most significant bits (bits 7 and 6) of the\r\nclock_seq_hi_and_reserved to one and zero, respectively.", "notes": "The original wording appears in sections 4.2.2, 4.3, and 4.4. It can lead to confusion about which bit is most significant (6 or 7), and does not align neatly with the table of Variants in section 4.1.1 (which shows 1 followed by 0 for msb0 and msb1). The revised wording specifies the bits in msb order, which helps the reader more clearly correlate the bit values with section 4.1.1. It is noted that the revised wording would not match other parts of the document which give the lsb number first (e.g. \"bits 32 through 47\"), but this case is different because it is specifying fixed values for two bits, and the sentence starts with \"Set the two most significant bits\".", "submit_date": "2017-03-22", "submitter_name": "Joseph Boon", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:52:56"}, {"errata_id": "3872", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.7.4.2", "orig_text": "If a bit position is not specified, then one will be automatically\r\nassigned. If the \"bit\" substatement is the first one defined, the\r\nassigned value is zero (0); otherwise, the assigned value is one\r\ngreater than the current highest bit position.", "correct_text": "If a bit position is not specified, then one will be automatically\r\nassigned. If the \"bit\" substatement is the first one defined, the\r\nassigned value is zero (0); otherwise, the assigned value is one\r\ngreater than the current highest bit position (that is, the\r\nhighest bit position, implicit or explicit, prior to the current\r\n\"bit\" substatement in the parent \"type\" statement).", "notes": "Clarification that 'current highest' does not refer to all bit positions, implicit or explicit, in the parent \"type\" statement but only to those that precede the current \"bit\" substatement.", "submit_date": "2014-01-23", "submitter_name": "Jonathan Hansford", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2657", "doc-id": "RFC5717", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "Step 6 - Lock user Joe\r\n\r\n   <nc:rpc\r\n     xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n     xmlns=\"urn:ietf:params:xml:ns:netconf:partial-lock:1.0\"\r\n         message-id=\"104\">\r\n     <partial-lock>\r\n       <select xmlns:usr=\"http://example.com/users\">\r\n|         /usr:top/usr:users/user[usr:name=\"Joe\"]\"\r\n       </select>\r\n     </partial-lock>\r\n   </nc:rpc>\r\n\r\n   The NETCONF server grants the partial lock.  The scope of this second\r\n   lock includes only the <user> node with name Joe.  The lock protects\r\n   all data below this particular <user> node.\r\n\r\n   Step 7 - Receive lock\r\n\r\n   <nc:rpc-reply\r\n     xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n     xmlns=\"urn:ietf:params:xml:ns:netconf:partial-lock:1.0\"\r\n     message-id=\"104\">\r\n       <lock-id>2</lock-id>\r\n       <locked-node xmlns:usr=\"http://example.com/users\">\r\n|           /usr:top/usr:users/user[usr:name=\"Joe\"]\"\r\n       </locked-node>\r\n   </nc:rpc-reply>\r\n", "correct_text": "Step 6 - Lock user Joe\r\n\r\n   <nc:rpc\r\n     xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n     xmlns=\"urn:ietf:params:xml:ns:netconf:partial-lock:1.0\"\r\n         message-id=\"104\">\r\n     <partial-lock>\r\n       <select xmlns:usr=\"http://example.com/users\">\r\n|         /usr:top/usr:users/usr:user[usr:name=\"Joe\"]\"\r\n       </select>\r\n     </partial-lock>\r\n   </nc:rpc>\r\n\r\n   The NETCONF server grants the partial lock.  The scope of this second\r\n   lock includes only the <user> node with name Joe.  The lock protects\r\n   all data below this particular <user> node.\r\n\r\n   Step 7 - Receive lock\r\n\r\n   <nc:rpc-reply\r\n     xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n     xmlns=\"urn:ietf:params:xml:ns:netconf:partial-lock:1.0\"\r\n     message-id=\"104\">\r\n       <lock-id>2</lock-id>\r\n       <locked-node xmlns:usr=\"http://example.com/users\">\r\n|           /usr:top/usr:users/usr:user[usr:name=\"Joe\"]\"\r\n       </locked-node>\r\n   </nc:rpc-reply>\r\n", "notes": "The instance identifier /usr:top/usr:users/user[usr:name=\"Joe\"]\" must be replaced with /usr:top/usr:users/usr:user[usr:name=\"Joe\"]\"\n --VERIFIER NOTES-- \nThe solution for this errata is contained in errata #2746 proposed by Mehmet Ersue which is Verified.   ", "submit_date": "2010-12-02", "submitter_name": "B Viswanath Reddy", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2658", "doc-id": "RFC4270", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "The Internet protocol community needs to\r\nmigrate in an orderly manner away from SHA-1 and MD5 -- especially\r\nMD5 -- and toward more secure hash algorithms.", "correct_text": "The Internet community needs to migrate in an orderly manner away from reliance for\r\nsecurity purposes on SHA-1 and MD-5 -- especially MD5 -- and toward more secure hash algorithms\r\nfor all security-related usages of hash functions in all protocols.", "notes": "This came up in discussion with Sean Turner, Martin Rex and the IESG over IESG Last Call: <draft-turner-md5-seccon-update-07.txt>.\r\n\r\nRFC4270 lists seven uses for hash algorithms in section 3. MD5 should not be used for two of those [non-repudiable signatures and digital signatures in  certificates] as those are are affected by collision attacks -- albeit only in limited circumstances. For the other five uses - particularly reliability checking (misnamed integrity protection in this draft) in a non-security context, MD5 remains fine to use. Martin flagged the original text as bad, and we came up with qualifiers - below.\r\n\r\n\r\nOn 3 Dec 2010, at 21:40, Martin Rex wrote:\r\n\r\n> L.Wood@surrey.ac.uk wrote:\r\n\r\n>> I also take issue with RFC4270's claim that:\r\n>> \r\n>> >The Internet protocol community needs to\r\n>> > migrate in an orderly manner away from SHA-1 and MD5 -- especially\r\n>> > MD5 -- and toward more secure hash algorithms.\r\n>>\r\n>> which is rather broad, and entirely without the context and qualifiers\r\n>> we're discussing. RFC4270 was not written for a general audience,\r\n>> but for a security audience.  The Internet _security protocol_ community\r\n>> may well need to migrate from these for certain uses (despite there not\r\n>> yet being obvious things to move _to_), but RFC4270 and your draft's\r\n>> sum take-away message that MD5BADDONOTUSE overstates the case. \r\n>\r\n> I agree that the above wording of rfc-4270 is BAD.\r\n>\r\n> It should have said:\r\n>\r\n> The Internet community needs to migrate in an orderly manner away from\r\n> SHA-1 and MD5 -- especially MD5 -- and toward more secure hash algorithms\r\n> for all security-related usages of hash functions in all protocols.\r\n\r\nThat wording is better, though I would also add a qualifier\r\non the front by saying 'away from reliance for security purposes on SHA-1\r\nand MD-5...'. This should imo be filed as an erratum on RFC4270.\n --VERIFIER NOTES-- \nThis is a substantive change that would require \"security-related\" to be sufficiently well defined.  Writing a draft about this would be better.", "submit_date": "2010-12-04", "submitter_name": "Lloyd Wood", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2659", "doc-id": "RFC4270", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "      Integrity protection.  It is common to compare a hash value that\r\n      is received out-of-band for a file with the hash value of the file\r\n      after it is received over an unsecured protocol such as FTP.", "correct_text": "      Reliability checking and error detection.  It is common to compare a hash value that\r\n      is received out-of-band for a file with the hash value of the file\r\n      after it is received over an unsecured protocol such as FTP.", "notes": "\"integrity protection\" is a term with specific meaning to security researchers, and that meaning doesn't gel with how the rest of the world uses terms like 'integrity' or 'protection,' or with the rest of this bullet point. So, we swap the term out for something less contentious.\r\n\r\nThis came up in discussion with Martin Rex and the IESG. Martin writes:\r\n\r\n> Integrity protection is terminology that is used in the\r\n> security&cryptographic area and this defect of rfc-4270 is going\r\n> to create misunderstandings.\r\n\r\nSo, filing an erratum.", "submit_date": "2010-12-04", "submitter_name": "Lloyd Wood", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2660", "doc-id": "RFC3168", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "header block", "orig_text": "Updates: 2474, 2401, 793", "correct_text": "Updates: 2474, 2401, 2003, 793", "notes": "RFC 3168 updates RFC 2003 but does not indicate this in its header block.\r\n\r\nSpecifically, Section 9 of RFC 3168 defines processing of the ECN field for Encapsulated Packets. This updates RFC 2003, which specified \"IP Encapsulation within IP\" at a time before the ECN field was defined.", "submit_date": "2010-12-04", "submitter_name": "Bob Briscoe", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2661", "doc-id": "RFC4301", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "header block", "orig_text": "Obsoletes: 2401", "correct_text": "Obsoletes: 2401\r\nUpdates: 3168", "notes": "RFC 4301 updates RFC 3168 but does not indicate this in its header block.\r\n\r\nSpecifically, RFC 4301 updates the processing of the ECN field for IPsec tunnel mode that was specified in RFC 3168.\n --VERIFIER NOTES-- \nThis action was taken already.  The RFC index is already updated and so is the datatracker.", "submit_date": "2010-12-04", "submitter_name": "Bob Briscoe", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2662", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "PIM (S,G) Join/Prune state is the result of receiving PIM (S,G)\r\nJoin/Prune messages on this interface and is specified in Section\r\n4.5.2. ", "correct_text": "PIM (S,G) Join/Prune state is the result of receiving PIM (S,G)\r\nJoin/Prune messages on this interface and is specified in Section\r\n4.5.3. ", "notes": "Section 4.5.2 deals with (*,G) Join/Prune messages, not (S,G) Join/Prune messages.", "submit_date": "2010-12-08", "submitter_name": "Ang Way Chuang", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2691", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "In this scheme, an entire domain name or a list of labels at\r\nthe end of a domain name is replaced with a pointer to a prior occurance\r\nof the same name.", "correct_text": "In this scheme, an entire domain name or a list of labels at\r\nthe end of a domain name is replaced with a pointer to a prior occurrence\r\nof the same name.", "notes": "", "submit_date": "2011-01-22", "submitter_name": "Hirochika Asai", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4422", "doc-id": "RFC6154", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "N/A", "correct_text": "N/A", "notes": "There is missing information in this RFC that resulted in interoperability problems when we performed an informal interop test of multiple implementations on 2015-07-19. This is assumed to be a \"hold for document update\" errata.\r\n\r\nThere is no guidance in the document related to how special-use attributes are bootstrapped. Servers may pre-create them but there's no requirement to do so and clients may use the CREATE-SPECIAL-USE or METADATA extensions to bootstrap but there is no requirement to use those mechanisms if the server offers them. This resulted in a server implementation assuming the client would bootstrap these attributes and a client assuming the server would do so, thus interoperability failed.\r\n\r\nGiven this experience, the fastest way to resolve this interop problem over time is for both client and server to take responsibility for bootstrapping special use mailboxes. This means if clients create a mailbox intended for special use (e.g., drafts, sent, junk, trash, etc), and the CREATE-SPECIAL-USE extension is offered, then clients need to provide the USE extension to improve interoperability.  Servers that are provisioned with an end-user's locale or language need to pre-create appropriate special-use mailboxes to improve interoperability of this extension. For existing accounts where the server is upgraded to support this feature, the server can look for mailboxes with names that imply special use and add the attribute to those mailboxes (especially if the server has locale/language awareness provisioned for users). Clients that implement a name-based search if special use attributes are not present and decide to use a mailbox for a special use based on its name can use the METADATA extension, if offered, to label that mailbox appropriately.", "submit_date": "2015-07-20", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2663", "doc-id": "RFC3530", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.11.", "orig_text": "   When an OPEN is done for a file and the lockowner for which the open\r\n   is being done already has the file open, the result is to upgrade the\r\n   open file status maintained on the server to include the access and\r\n   deny bits specified by the new OPEN as well as those for the existing\r\n   OPEN.  The result is that there is one open file, as far as the\r\n   protocol is concerned, and it includes the union of the access and\r\n   deny bits for all of the OPEN requests completed.  Only a single\r\n   CLOSE will be done to reset the effects of both OPENs.  Note that the\r\n   client, when issuing the OPEN, may not know that the same file is in\r\n   fact being opened.  The above only applies if both OPENs result in\r\n   the OPENed object being designated by the same filehandle.", "correct_text": "   When an OPEN is done for a file and the open_owner for which the open\r\n   is being done already has the file open, the result is to upgrade the\r\n   open file status maintained on the server to include the access and\r\n   deny bits specified by the new OPEN as well as those for the existing\r\n   OPEN.  The result is that there is one open file, as far as the\r\n   protocol is concerned, and it includes the union of the access and\r\n   deny bits for all of the OPEN requests completed.  Only a single\r\n   CLOSE will be done to reset the effects of both OPENs.  Note that the\r\n   client, when issuing the OPEN, may not know that the same file is in\r\n   fact being opened.  The above only applies if both OPENs result in\r\n   the OPENed object being designated by the same filehandle.", "notes": "The file opens are related to open_owners, not lockowners. The lockowner\r\nshould be replaced by open_owner in the first sentence of the paragraph above.", "submit_date": "2010-12-08", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2664", "doc-id": "RFC2253", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "RFC 2253               LADPv3 Distinguished Names          December 1997", "correct_text": "RFC 2253               LDAPv3 Distinguished Names          December 1997", "notes": "This is a minor but annoying character transposition in the page headers.", "submit_date": "2010-12-08", "submitter_name": "Ross Shumway", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2665", "doc-id": "RFC5911", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Section 6", "orig_text": "FROM AttributeCertificateVersion1-2009\r\n      { iso(1) member-body(2) dod(6) internet(1) security(5)\r\n        mechanisms(5) pkix(7) id-mod(0) id-mod-v1AttrCert-02(49) } ;", "correct_text": "FROM AttributeCertificateVersion1-2009\r\n      { iso(1) identified-organization(3) dod(6) internet(1) security(5)\r\n        mechanisms(5) pkix(7) id-mod(0) id-mod-v1AttrCert-02(49) } ;", "notes": "One incorrect node in the arc was noted from the last errata.", "submit_date": "2010-12-09", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2666", "doc-id": "RFC6010", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   ct-Any CONTENT-TYPE ::= {NULL IDENTIFIED BY id-ct-anyContentType }\r\n", "correct_text": "   ct-Any CONTENT-TYPE ::= {TYPE NULL IDENTIFIED BY id-ct-anyContentType }\r\n", "notes": "This errata is filed to deal with the change made to RFC 5911.  The addition of the TYPE key word allows for a type to be omitted.  It may be that the authors will want to take advantage of this and remove the \"TYPE NULL\" from the object defined and say that there is no ASN.1 type associated with this object identifier.", "submit_date": "2010-12-09", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2667", "doc-id": "RFC5914", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   PKCS7-CONTENT-TYPE ::= TYPE-IDENTIFIER\r\n\r\n   trust-anchor-list PKCS7-CONTENT-TYPE ::=\r\n       { TrustAnchorList IDENTIFIED BY id-ct-trustAnchorList }", "correct_text": "INSERT INTO IMPORTS SECTION before the final semi-colon\r\n\r\n   CONTENT-TYPE\r\n   FROM CryptographicMessageSyntax-2009 -- from [RFC5911]\r\n      { iso(1) member-body(2) us(840) rsadsi(113549)\r\n      pkcs(1) pkcs-9(9) smime(16) modules(0)\r\n      id-mod-cms-2004-02(41) }\r\n\r\n\r\n\r\n\r\nREPLACE ABOVE TEXT WITH\r\n\r\n   trust-anchor-list CONTENT-TYPE ::=\r\n       { TYPE TrustAnchorList IDENTIFIED BY id-ct-trustAnchorList }", "notes": "The content type is designed to be placed into a CMS SignedData object.  Since the exact same class definition (not a syntaxically identicial one) needs to be used to get object sets to work correctly, the defintion of the content type must be updated to reference the identical one defined in the CMS module.\r\n\r\nA future version should additionally note that the content type is to be added to the ContentSet object set in the CMS module.", "submit_date": "2010-12-09", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2766", "doc-id": "RFC3931", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "   An LCCE MAY fragment a packet before encapsulating it in L2TP.  For\r\n   example, if an IPv4 packet arrives at an LCCE from a Remote System\r\n   that, after encapsulation with its associated framing, L2TP, and IP,\r\n   does not fit in the available path MTU towards its LCCE peer, the\r\n   local LCCE may perform IPv4 fragmentation on the packet before tunnel\r\n   encapsulation. ", "correct_text": "   An LCCE MAY fragment a packet before encapsulating it in L2TP.  For\r\n   example, if an IPv4 packet with DF=0 arrives at an LCCE from a Remote System\r\n   that, after encapsulation with its associated framing, L2TP, and IP,\r\n   does not fit in the available path MTU towards its LCCE peer, the\r\n   local LCCE may perform IPv4 fragmentation on the packet before tunnel\r\n   encapsulation. ", "notes": "Following RFC 791, IPv4 packets with the DF flag set shall not fragment such packets. RFC 3931 shall not make a precedent for fragmenting IPv4 packets with DF=1.\n --VERIFIER NOTES-- \nThe original text uses MAY so it does not mandate fragmentation behavior.   ", "submit_date": "2011-04-04", "submitter_name": "Teco Boot", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3605", "doc-id": "RFC5282", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1.3", "orig_text": "   This algorithm is identical to AEAD_AES_128_GCM (see Section 5.1 of\r\n   [RFC5116]), except that the tag length, t, is 12, and an\r\n   authentication tag with a length of 12 octets (64 bits) is used.", "correct_text": "   This algorithm is identical to AEAD_AES_128_GCM (see Section 5.1 of\r\n   [RFC5116]), except that the tag length, t, is 12, and an\r\n   authentication tag with a length of 12 octets (96 bits) is used.", "notes": "\"(64 bits)\" should be changed to \"(96 bits)\".", "submit_date": "2013-04-25", "submitter_name": "Wan-Teh Chang", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3606", "doc-id": "RFC5282", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1.4", "orig_text": "   This algorithm is identical to AEAD_AES_256_GCM (see Section 5.2 of\r\n   [RFC5116], except that the tag length, t, is 12 and an authentication\r\n   tag with a length of 12 octets (64 bits) is used.", "correct_text": "   This algorithm is identical to AEAD_AES_256_GCM (see Section 5.2 of\r\n   [RFC5116], except that the tag length, t, is 12 and an authentication\r\n   tag with a length of 12 octets (96 bits) is used.", "notes": "\"(64 bits)\" should be changed to \"(96 bits)\".", "submit_date": "2013-04-25", "submitter_name": "Wan-Teh Chang", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3666", "doc-id": "RFC5496", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "The procedures in this document do not define a way for\r\nBSR messages to be forwarded across a core in which the\r\nBSP IP address is not routable.", "correct_text": "The procedures in this document do not define a way for\r\nBSR messages to be forwarded across a core in which the\r\nBSR IP address is not routable.", "notes": "BSP IP address is not a term used in PIM BSR. It should be BSR IP address.", "submit_date": "2013-06-17", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2668", "doc-id": "RFC5934", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1", "orig_text": "ORIG-1\r\n   CONTENT-TYPE  ::= TYPE-IDENTIFIER\r\n\r\nORIG-2\r\n   tamp-status-query CONTENT-TYPE  ::=\r\n     { TAMPStatusQuery IDENTIFIED BY id-ct-TAMP-statusQuery }\r\n\r\nORIG-3\r\n   tamp-status-response CONTENT-TYPE  ::=\r\n     { TAMPStatusResponse IDENTIFIED BY id-ct-TAMP-statusResponse }\r\n\r\nORIG-4\r\n   tamp-update CONTENT-TYPE  ::=\r\n     { TAMPUpdate IDENTIFIED BY id-ct-TAMP-update }\r\n\r\nORIG-5\r\n   tamp-update-confirm CONTENT-TYPE  ::=\r\n     { TAMPUpdateConfirm IDENTIFIED BY id-ct-TAMP-updateConfirm }\r\n\r\nORIG-6\r\n   tamp-apex-update CONTENT-TYPE  ::=\r\n       { TYPE TAMPApexUpdate IDENTIFIED BY id-ct-TAMP-apexUpdate }\r\n\r\nORIG-7\r\n   tamp-apex-update-confirm CONTENT-TYPE  ::=\r\n     { TAMPApexUpdateConfirm IDENTIFIED BY\r\n         id-ct-TAMP-apexUpdateConfirm }\r\n\r\nORIG-8\r\n   tamp-community-update CONTENT-TYPE  ::=\r\n     { TAMPCommunityUpdate IDENTIFIED BY id-ct-TAMP-communityUpdate }\r\n\r\nORIG-9\r\n   tamp-community-update-confirm CONTENT-TYPE  ::=\r\n     { TAMPCommunityUpdateConfirm IDENTIFIED BY\r\n       id-ct-TAMP-communityUpdateConfirm }\r\n\r\nORIG-10\r\n   tamp-sequence-number-adjust CONTENT-TYPE  ::=\r\n     { SequenceNumberAdjust IDENTIFIED BY id-ct-TAMP-seqNumAdjust }\r\n\r\nORIG-11\r\n   tamp-sequence-number-adjust-confirm CONTENT-TYPE  ::=\r\n     { SequenceNumberAdjustConfirm IDENTIFIED BY\r\n       id-ct-TAMP-seqNumAdjustConfirm }\r\n\r\nORIG-12\r\n   tamp-error CONTENT-TYPE  ::=\r\n     { TAMPError IDENTIFIED BY id-ct-TAMP-error }", "correct_text": "INSERT IN THE IMPORTS SECTION BEFORE THE FINAL SEMI-COLON\r\n\r\n CONTENT-TYPE\r\n   FROM CryptographicMessageSyntax-2009 -- from [RFC5911]\r\n      { iso(1) member-body(2) us(840) rsadsi(113549)\r\n      pkcs(1) pkcs-9(9) smime(16) modules(0)\r\n      id-mod-cms-2004-02(41) }\r\n\r\nORIG-2\r\n   tamp-status-query CONTENT-TYPE  ::=\r\n     { TYPE TAMPStatusQuery IDENTIFIED BY id-ct-TAMP-statusQuery }\r\n\r\nORIG-3\r\n   tamp-status-response CONTENT-TYPE  ::=\r\n     { TYPE TAMPStatusResponse IDENTIFIED BY id-ct-TAMP-statusResponse }\r\n\r\nORIG-4\r\n   tamp-update CONTENT-TYPE  ::=\r\n     { TYPE TAMPUpdate IDENTIFIED BY id-ct-TAMP-update }\r\n\r\nORIG-5\r\n   tamp-update-confirm CONTENT-TYPE  ::=\r\n     { TYPE TAMPUpdateConfirm IDENTIFIED BY id-ct-TAMP-updateConfirm }\r\n\r\nORIG-6\r\n   tamp-apex-update CONTENT-TYPE  ::=\r\n       { TYPE TAMPApexUpdate IDENTIFIED BY id-ct-TAMP-apexUpdate }\r\n\r\nORIG-7\r\n   tamp-apex-update-confirm CONTENT-TYPE  ::=\r\n     { TYPE TAMPApexUpdateConfirm IDENTIFIED BY\r\n         id-ct-TAMP-apexUpdateConfirm }\r\n\r\nORIG-8\r\n   tamp-community-update CONTENT-TYPE  ::=\r\n     { TYPE TAMPCommunityUpdate IDENTIFIED BY id-ct-TAMP-communityUpdate }\r\n\r\nORIG-9\r\n   tamp-community-update-confirm CONTENT-TYPE  ::=\r\n     { TYPE TAMPCommunityUpdateConfirm IDENTIFIED BY\r\n       id-ct-TAMP-communityUpdateConfirm }\r\n\r\nORIG-10\r\n   tamp-sequence-number-adjust CONTENT-TYPE  ::=\r\n     { TYPE SequenceNumberAdjust IDENTIFIED BY id-ct-TAMP-seqNumAdjust }\r\n\r\nORIG-11\r\n   tamp-sequence-number-adjust-confirm CONTENT-TYPE  ::=\r\n     { TYPE SequenceNumberAdjustConfirm IDENTIFIED BY\r\n       id-ct-TAMP-seqNumAdjustConfirm }\r\n\r\nORIG-12\r\n   tamp-error CONTENT-TYPE  ::=\r\n     { TYPE TAMPError IDENTIFIED BY id-ct-TAMP-error }", "notes": "This errata addresses two different issues:\r\n1.  The exact same class definition, not a clone, must be used in order to have the ASN.1 object sets work correctly.  This is the reason for the change in the definition of the CONTENT-TYPE class.\r\n\r\n2.  An errata on RFC5911 added the keyword TYPE so that a content type can be defined as not having an associated ASN.1 type (either because it is raw data or is a different structured data type such as XML).  This means that all objects of the CONTENT-TYPE class need to have the word TYPE added to them.\r\n\r\nNote also that the text is removed and not replaced for ORIG-1 ", "submit_date": "2010-12-09", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2669", "doc-id": "RFC3209", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.3.1", "orig_text": "The path between a loose node and its preceding node MAY include other network nodes that are not part of the strict node or its preceding abstract node.\r\n\r\n", "correct_text": "The path between a loose node and its preceding node MAY include other network nodes that are not part of the loose node or its preceding abstract node.\r\n", "notes": "Narration incorrectly refers to \"strict\" node while describing \"loose\" node.", "submit_date": "2010-12-10", "submitter_name": "Mahesh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2670", "doc-id": "RFC5953", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "snmpTargetParamsRowStatus       = 4          (createAndGo0", "correct_text": "snmpTargetParamsRowStatus       = 4          (createAndGo)", "notes": "This is a typo - the shift key was not hit hard enough and hence the closing parenthesis became a 0.", "submit_date": "2010-12-14", "submitter_name": "Juergen Schoenwaelder", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2671", "doc-id": "RFC5953", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "       snmpTargetAddrColumnStatus      = 4          (createAndGo)\r\n", "correct_text": "       snmpTargetAddrRowStatus         = 4          (createAndGo)\r\n", "notes": "There is not such object as snmpTargetAddrColumnStatus. The correct object for row creation is snmpTargetAddrRowStatus.", "submit_date": "2010-12-15", "submitter_name": "Robert Story", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2672", "doc-id": "RFC5724", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Document", "orig_text": "<\r\nThis is really pre-erratum.\r\n\r\nRFC5724 narrows / focuses the applicability of the SMS URI to GSM.\r\nGSM isn't (that) relevant: SMS has moved on in the last 25 years!\r\n\r\nSome countries, eg S.Korea, do not use/have GMS, but *CDMA* instead.\r\n>", "correct_text": "<n/a \u2014 RFC \u00bfrewrite?>", "notes": "Current SMS availability\u2026\r\nhttp://en.wikipedia.org/wiki/SMS: \r\n1985\u2026 Since then, support for the service has expanded to include other mobile technologies such as ANSI CDMA networks and Digital AMPS, as well as satellite and landline networks.", "submit_date": "2010-12-16", "submitter_name": "Charles Curran", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2673", "doc-id": "RFC4695", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   If the LEN header field is nonzero, the MIDI list has the structure\r\n   shown in Figure 3.\r\n\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Delta Time 0     (1-4 octets long, or 0 octets if Z = 1)     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  MIDI Command 0   (1 or more octets long)                     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Delta Time 1     (1-4 octets long)                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  MIDI Command 1   (1 or more octets long)                     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                              ...                              |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Delta Time N     (1-4 octets long)                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  MIDI Command N   (0 or more octets long)                     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                       Figure 3 -- MIDI list structure", "correct_text": "   If the LEN header field is nonzero, the MIDI list has the structure\r\n   shown in Figure 3.\r\n\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Delta Time 0     (1-4 octets long, or 0 octets if Z = 0)     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  MIDI Command 0   (1 or more octets long)                     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Delta Time 1     (1-4 octets long)                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  MIDI Command 1   (1 or more octets long)                     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                              ...                              |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Delta Time N     (1-4 octets long)                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  MIDI Command N   (0 or more octets long)                     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                       Figure 3 -- MIDI list structure", "notes": "The sole change here is in the parenthesized text that follows\r\nthe \"Delta Time 0\" name in the first bitfield shown in Figure 3.\r\nRFC 4695 has \"1-4 octets long, or 0 octets if Z = 1\".  This \r\ndoes not match the definition of Z in the main text.  The corrected\r\nfigure text is: \"1-4 octets long, or 0 octets if Z = 0\".  Thankfully, all \r\nknown implementations follow the main text in this\r\nregard, so this bug should not have resulted in interoperability\r\nissues.  This bug has been fixed in the bis I-D intended to\r\nobsolete RFC 4695 that is currently in Last Call in AVT.", "submit_date": "2010-12-18", "submitter_name": "John Lazzaro", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2767", "doc-id": "RFC5864", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "   afsdb1, afsdb2, and afsdb3 all provide VLDB service via UDP.  The\r\n   first two have the same priority but have weights indicating that\r\n   afsdb1 should get about twice as many clients as afsdb2.", "correct_text": "   afsdb1, afsdb2, and afsdb3 all provide VLDB service via UDP.  The\r\n   first two have the same priority but have weights indicating that\r\n   afsdb2 should get about twice as many clients as afsdb1.", "notes": "The given DNS zone file shows:\r\n\r\n  _afs3-vlserver._udp  SRV   0 2 7003 afsdb1.example.com.\r\n  _afs3-vlserver._udp  SRV   0 4 7003 afsdb2.example.com.\r\n\r\nThis means that afsdb2.example.com. as weight 4 (double of weight for afsdb1.example.com.).\r\n\r\nAccording to RFC 2782:\r\n\r\n   Weight\r\n       A server selection mechanism.  The weight field specifies a\r\n       relative weight for entries with the same priority. Larger\r\n       weights SHOULD be given a proportionately higher probability of\r\n       being selected.", "submit_date": "2011-04-05", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4584", "doc-id": "RFC822", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.3.3", "orig_text": "     cc       :  Important folk:\r\n                   Tom Softwood <Balsa@Tree.Root>,\r\n                   \"Sam Irving\"@Other-Host;,\r\n                 Standard Distribution:\r\n                   /main/davis/people/standard@Other-Host,\r\n                   \"<Jones>standard.dist.3\"@Tops-20-Host>;", "correct_text": "     cc       :  Important folk:\r\n                   Tom Softwood <Balsa@Tree.Root>,\r\n                   \"Sam Irving\"@Other-Host;,\r\n                 Standard Distribution:\r\n                   /main/davis/people/standard@Other-Host,\r\n                   \"<Jones>standard.dist.3\"@Tops-20-Host;\r\n\r\nor\r\n\r\n                   <\"Jones>standard.dist.3\"@Tops-20-Host>;\r\n\r\nor\r\n\r\n                   <\"<Jones>standard.dist.3\"@Tops-20-Host>;", "notes": "According to 3.4.6 of the RFC, brackets must occur in matched pairs. There is not matching \"<\" for the closing \">\" after \"Tops-20-Host\".\r\n\r\n----- Verifier Notes -----\r\nRFC 822 has long been obsolete, first by RFC 2822 and then by RFC 5322, and I hope everyone is using 5322 by now.  The examples were completely re-done in 2822, and this issue is long gone.", "submit_date": "2016-01-07", "submitter_name": "Sebastian Haller", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2674", "doc-id": "RFC2196", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.1", "orig_text": "   The plan should also address how incident will be handled.  Chapter 5\r\n   provides an in-depth discussion of this topic, but it is important\r\n   for each site to define classes of incidents and corresponding\r\n   responses.  For example, sites with firewalls should set a threshold\r\n   on the number of attempts made to foil the firewall before triggering\r\n   a response?  Escallation levels should be defined for both attacks\r\n   and responses.  Sites without firewalls will have to determine if a\r\n   single attempt to connect to a host constitutes an incident? What\r\n   about a systematic scan of systems?\r\n", "correct_text": "   The plan should also address how incident will be handled.  Chapter 5\r\n   provides an in-depth discussion of this topic, but it is important\r\n   for each site to define classes of incidents and corresponding\r\n   responses.  For example, sites with firewalls should set a threshold\r\n   on the number of attempts made to foil the firewall before triggering\r\n   a response?  Escalation levels should be defined for both attacks\r\n   and responses.  Sites without firewalls will have to determine if a\r\n   single attempt to connect to a host constitutes an incident? What\r\n   about a systematic scan of systems?\r\n", "notes": "Escallation -> Escalation", "submit_date": "2010-12-19", "submitter_name": "Alexandre Dulaunoy", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2675", "doc-id": "RFC5773", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.9, pg.41", "orig_text": "   o  The policies that can be implemented using BGP are designed for\r\n      control of traffic exchange between operators, not for controlling\r\n      paths within a domain.  Policies for BGP are most conveniently\r\n|     expressed in Routing Policy Support Language (RPSL) [RFC2622] and\r\n      this could be extended if thought desirable to include additional\r\n      policy information.", "correct_text": "   o  The policies that can be implemented using BGP are designed for\r\n      control of traffic exchange between operators, not for controlling\r\n      paths within a domain.  Policies for BGP are most conveniently\r\n|     expressed in Routing Policy Specification Language (RPSL)\r\n      [RFC2622] and this could be extended if thought desirable to\r\n      include additional policy information.", "notes": "Rationale:  Cf. the title of RFC 2622 !", "submit_date": "2010-12-20", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2768", "doc-id": "RFC5801", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.1 and 11.", "orig_text": "Section 10.1:\r\n        const gss_OID  desired_mech,\r\n\r\nSection 11.1:\r\n       const gss_buffer_t   sasl_mech_name,\r\n", "correct_text": "Section 10.1:\r\n        gss_const_OID  desired_mech,\r\n\r\nSection 11.1:\r\n       gss_const_buffer_t   sasl_mech_name,\r\n\r\nAdd to section 2:\r\n   The normative reference to [RFC5587] is for\r\n   the C types \"gss_const_buffer_t\" and \"gss_const_OID\", nothing else\r\n   from that document is required to implement this document.\r\n\r\nAdd new normative reference:\r\n   [RFC5587]  Williams, N., \"Extended Generic Security Service Mechanism\r\n              Inquiry APIs\", RFC 5587, July 2009.\r\n", "notes": "There is a bug in the C interfaces for these functions.  RFC 5587 section 3.4.6 explains the problem and specifies new types to use instead.  This errata makes RFC 5801 use the corrected types.\r\n\r\nAs far as I understand, there are no technical/implementation implications caused by this change -- it merely helps the compiler check implementations better and (in some cases) it can avoid compiler warnings on application code.\r\n\r\nA similar issue was recently discussed in the Kitten WG list.", "submit_date": "2011-04-06", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2769", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "17.1.2.2", "orig_text": "   MUST be passed to the transport layer for transmission.  If an\r\n   unreliable transport is in use, the client transaction MUST set timer\r\n   E to fire in T1 seconds.  If timer E fires while still in this state,\r\n   the timer is reset, but this time with a value of MIN(2*T1, T2).\r\n   When the timer fires again, it is reset to a MIN(4*T1, T2).  This\r\n   process continues so that retransmissions occur with an exponentially\r\n   increasing interval that caps at T2.", "correct_text": "   MUST be passed to the transport layer for transmission.  If an\r\n   unreliable transport is in use, the client transaction MUST set timer\r\n   E to fire in T1 seconds.  If timer E fires while still in this state,\r\n   the timer is reset, but this time with a value of MIN(2*T1, T2).\r\n   When the timer fires again, it is reset to a MIN(4*T1, T2). Multiplier\r\n   on T1 doubles with each reset so that retransmissions occur with an\r\n   exponentially increasing interval that caps at T2.", "notes": "The original text doesn't clarify that the multiplier of T1 is doubled with each timer reset, so it could be understood that the maximum value the timer takes is MIN(4*T1, T2) which is 2s (so the timer would never reach 4s and the resulting intervals would be 500ms, 1s, 2s, 2s, 2s, 2s, etc).", "submit_date": "2011-04-08", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2770", "doc-id": "RFC3923", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   3.  The method MUST follow the required procedures (including the\r\n       specific algorithms) defined in [CPIM] and [CPP].  In particular,\r\n       these documents specify:\r\n\r\n       *  Signing MUST use [SMIME] signatures with [CMS] SignedData.\r\n\r\n       *  Encryption MUST use [SMIME] encryption with [CMS]\r\n          EnvelopeData.\r\n          ^^^^^^^^^^^^", "correct_text": "   3.  The method MUST follow the required procedures (including the\r\n       specific algorithms) defined in [CPIM] and [CPP].  In particular,\r\n       these documents specify:\r\n\r\n       *  Signing MUST use [SMIME] signatures with [CMS] SignedData.\r\n\r\n       *  Encryption MUST use [SMIME] encryption with [CMS]\r\n          EnvelopedData.\r\n", "notes": "", "submit_date": "2011-04-08", "submitter_name": "Adam Wos", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2771", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "RFC 793 has no regulations whether it should obsolete RFC 761, which, however, is logically obvious.  RFC 761 (http://tools.ietf.org/html/rfc761) is the previous version of RFC 793 and, if this errata report is verified, should be marked as obsoleted by RFC 793.\n --VERIFIER NOTES-- \nThis is not a technical matter, and should refer to the RFC metadata rather than the document.", "submit_date": "2011-04-08", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2772", "doc-id": "RFC1258", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "RFC 1258 is obsoleted by RFC 1282, that is clearly stated in the last document.  However no such entry was added to RFC Editor database.  It should be added once this errata report is verified.", "submit_date": "2011-04-08", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3938", "doc-id": "RFC1459", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.3.1", "orig_text": "   When using the 'o' and 'b' options, a restriction on a total of three\r\n   per mode command has been imposed.  That is, any combination of 'o'\r\n   and", "correct_text": "   When using the 'o' and 'b' options, a restriction on a total of three\r\n   per mode command has been imposed.", "notes": "The sentence lacks the last part and does not explain what it expected to.  The change removes the incomplete, useless sentence.", "submit_date": "2014-03-28", "submitter_name": "Myunggyun Jonathan Aldo Seo", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2676", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "                  ; The following are OPTIONAL,\r\n                  ; but MUST NOT occur more than once.\r\n                  ;\r\n                  class / created / description / geo /\r\n                  last-mod / location / organizer / priority /\r\n                  seq / status / summary / transp /\r\n                  url / recurid /\r\n                  ;\r\n                  ; The following is OPTIONAL,\r\n                  ; but SHOULD NOT occur more than once.\r\n                  ;\r\n                  rrule /\r\n                  ;\r\n                  ; Either 'dtend' or 'duration' MAY appear in\r\n                  ; a 'eventprop', but 'dtend' and 'duration'\r\n                  ; MUST NOT occur in the same 'eventprop'.\r\n                  ;\r\n                  dtend / duration /\r\n                  ;\r\n                  ; The following are OPTIONAL,\r\n                  ; and MAY occur more than once.\r\n                  ;\r\n                  attach / attendee / categories / comment /\r\n                  contact / exdate / rstatus / related /\r\n                  resources / rdate / x-prop / iana-prop\r\n                  ^^^^^^^^^\r\n                  ;", "correct_text": "                  ; The following are OPTIONAL,\r\n                  ; but MUST NOT occur more than once.\r\n                  ;\r\n                  class / created / description / geo /\r\n                  last-mod / location / organizer / priority /\r\n                  seq / status / summary / transp /\r\n                  url / recurid / resources \r\n                                  ^^^^^^^^^\r\n                  ;\r\n                  ; The following is OPTIONAL,\r\n                  ; but SHOULD NOT occur more than once.\r\n                  ;\r\n                  rrule /\r\n                  ;\r\n                  ; Either 'dtend' or 'duration' MAY appear in\r\n                  ; a 'eventprop', but 'dtend' and 'duration'\r\n                  ; MUST NOT occur in the same 'eventprop'.\r\n                  ;\r\n                  dtend / duration /\r\n                  ;\r\n                  ; The following are OPTIONAL,\r\n                  ; and MAY occur more than once.\r\n                  ;\r\n                  attach / attendee / categories / comment /\r\n                  contact / exdate / rstatus / related /\r\n                  rdate / x-prop / iana-prop\r\n                  ;", "notes": "As per the definition of 'RESOURCES' in section 3.8.1.10,:\r\n\r\nConformance:  This property can be specified once in \"VEVENT\" or\r\n      \"VTODO\" calendar component.\r\n\r\nThe text in the \"VEVENT\" definition has RESOURCES in the 'Option and MAY occur more than once.' section. The corrected text above corrects both sections;\r\n\r\n1/ It is removed from the 'OPTIONAL/MAY occure more than once section.\r\n2/ It is placed at the end of the 'OPTIONAL/MUST NOT occur more than once section.\n --VERIFIER NOTES-- \nThe correct fix is listed in Erratum 2677 which was approved.\r\n", "submit_date": "2010-12-20", "submitter_name": "Dennis Gearon", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2677", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8.1.10", "orig_text": "Conformance:\r\nThis property can be specified once in \"VEVENT\" or \"VTODO\" calendar component.\r\n                               ^^^^", "correct_text": "Conformance:\r\nThis property can be specified in \"VEVENT\" or \"VTODO\" calendar component.", "notes": "The word \"once\" was mistakenly introduced in RFC 5545.\r\nRFC 2445 didn't have this issue.\r\n\r\nIssues was previously reported by Dennis Gearon <gearond@sbcglobal.net>\r\n(See Errata 2676) but proposed the wrong correction.", "submit_date": "2010-12-21", "submitter_name": "Bernard Desruisseaux", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4270", "doc-id": "RFC1034", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "In the interests of performance, implementations may couple these\r\nfunctions.  For example, a resolver on the same machine as a name server\r\nmight share a database consisting of the the zones managed by the name\r\nserver and the cache managed by the resolver.", "correct_text": "In the interests of performance, implementations may couple these\r\nfunctions.  For example, a resolver on the same machine as a name server\r\nmight share a database consisting of the zones managed by the name\r\nserver and the cache managed by the resolver.", "notes": "Just a duplicate \"the\".", "submit_date": "2015-02-12", "submitter_name": "Jean-Philippe Paradis", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2679", "doc-id": "RFC3709", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "LogotypeDetails ::= SEQUENCE {\r\n   mediaType       IA5String, -- MIME media type name and optional\r\n                              -- parameters\r\n   logotypeHash    SEQUENCE SIZE (1..MAX) OF HashAlgAndValue,\r\n   logotypeURI     SEQUENCE SIZE (1..MAX) OF IA5String }", "correct_text": "", "notes": "The mediaType is underspecified, as no specific syntax is given.\r\nE.g. are spaces allowed before parameters? Also, my understanding is that IA5String disallows UTF-8, while media type parameters can possibly include UTF-8 values.\r\n\r\nI would recommend referencing ABNF from Section 4.2 of RFC 4288.", "submit_date": "2010-12-22", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2692", "doc-id": "RFC5830", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   The constant C1 is:\r\n\r\n      The bit of N6   32 31 30 29 28 27 26 25 24 23 22 21 20 19 18\r\n\r\n      The bit value    0  0  0  0  0  0  0  1  0  0  0  0  0  0  0\r\n\r\n\r\n      The bit of N6   17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1\r\n\r\n      The bit value    1  0 0  0  0  0  0  0  1 0 0 0 0 0 1 0 0\r\n\r\n   The constant C2 is:\r\n\r\n      The bit of N6   32 31 30 29 28 27 26 25 24 23 22 21 20 19 18\r\n\r\n      The bit value    0  0  0  0  0  0  0  1  0  0  0  0  0  0  0\r\n\r\n\r\n      The bit of N6   17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1\r\n\r\n      The bit value    1  0 0  0  0  0  0  0  1 0 0 0 0 0 0 0 1\r\n\r\n", "correct_text": "   The constant C1 is:\r\n\r\n      The bit of N6   32 31 30 29 28 27 26 25 24 23 22 21 20 19 18\r\n\r\n      The bit value    0  0  0  0  0  0  0  1  0  0  0  0  0  0  0\r\n\r\n\r\n      The bit of N6   17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1\r\n\r\n      The bit value    1  0 0  0  0  0  0  0  1 0 0 0 0 0 1 0 0\r\n\r\n   The constant C2 is:\r\n\r\n      The bit of N5   32 31 30 29 28 27 26 25 24 23 22 21 20 19 18\r\n\r\n      The bit value    0  0  0  0  0  0  0  1  0  0  0  0  0  0  0\r\n\r\n\r\n      The bit of N5   17 16 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1\r\n\r\n      The bit value    1  0 0  0  0  0  0  0  1 0 0 0 0 0 0 0 1\r\n\r\n", "notes": "C1 is stored in N6 and C2 is stored in N5 (not both in N6)", "submit_date": "2011-01-28", "submitter_name": "Kirill Gagarski", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2693", "doc-id": "RFC5754", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "... the object identifier ecdsa-with-SHA1* (where * is \r\n224, 256, 384, or 512) with absent parameters.", "correct_text": "... the object identifier ecdsa-with-SHA* (where * is \r\n224, 256, 384, or 512) with absent parameters.", "notes": "r/ecdsa-withSHA1*/ecdsa-with-SHA*\r\nThe \"1\" shouldn't be there the algorithm names are ecdsa-with-SHA224, etc. not ecdsa-with-SHA1224.", "submit_date": "2011-01-28", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2694", "doc-id": "RFC5050", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "[URIREG]   Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n           Registration Procedures for New URI Schemes\", RFC 4395,\r\n           BCP 115, February 2006.\r\n\r\n", "correct_text": "[URIREG]   Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n           Registration Procedures for New URI Schemes\", RFC 4395,\r\n           BCP 35, February 2006.\r\n\r\n", "notes": "BCP number 115 has been mistakenly assigned to RFC 4395.  RFC 4395 os BCP 35.\n --VERIFIER NOTES-- \nRejected after IRSG discussion.   ", "submit_date": "2011-01-28", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2695", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4.3", "orig_text": "The relay sends the request over\r\n   the best connection that corresponds to the next URI in the To-Path\r\n   header. ", "correct_text": "The relay sends the response over\r\n   the best connection that corresponds to the next URI in the To-Path\r\n   header. ", "notes": "This is section is talking about handling response.\r\ntypo \"request\" should be \"response\"", "submit_date": "2011-01-30", "submitter_name": "Rockson Li", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2773", "doc-id": "RFC6090", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "Sometimes an alternative called additive notation is used, \r\nin which a * b is denoted as a + b, and a^N is denoted as N * a. ", "correct_text": "Sometimes an alternative called additive notation is used, \r\nin which a * b is denoted as a + b, and a^N is denoted as Na. ", "notes": "The original text refers to Appendix E some sentences later: \r\n\"Appendix E elucidates the correspondence between the two notations.\"\r\n\r\nIn the Appendix E the notation \"Na\" is used, whereas the original text uses the notation \"N*a\".", "submit_date": "2011-04-11", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2680", "doc-id": "RFC4363", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "MIB", "orig_text": "> Dear IETF Person-in-Charge,\r\n>\r\n>      We found that Q-BRIDGE-MIB (RFC 2674) had its content corrected\r\n> using the RFC 4363.\r\n>\r\n>      While this kind of update and grammatical correction is a good\r\n> thing,\r\n> we found that:\r\n>\r\n> << old (\"which\" as correlative pronoun)\r\n>        \"The number of valid frames received by this port from\r\n>        its segment which were classified as belonging to this\r\n>        VLAN which were discarded due to VLAN related reasons.\r\n>        Specifically, the IEEE 802.1Q counters for Discard\r\n>        Inbound and Discard on Ingress Filtering.\"\r\n> >>\r\n>\r\n> << new (\"that\" as correlative pronoun)\r\n>        \"The number of valid frames received by this port from\r\n>        its segment that were classified as belonging to this\r\n>        VLAN and that were discarded due to VLAN-related reasons.\r\n>        Specifically, the IEEE 802.1Q counters for Discard\r\n>        Inbound and Discard on Ingress Filtering.\"\r\n> >>\r\n>\r\n>      According to our education, \"which\" is correct, and \"that\" is\r\n> only\r\n> colloquial.  But Microsoft Word seems to reject the use of \"which\" in\r\n> such\r\n> situations, and it may have mis-lead IETF into thinking that the Q-\r\n> BRIDGE-MIB\r\n> should remove \"which\" and use \"that\", which is a pity.\r\n>\r\n>      Thanks.\r\n>\r\n>                                        Qiyao #3165 &#37758;&#21855;&#22575;&#12288;&#19978;\r\n> --------------------------------------------------------------------------\r\n> *Zhong* Qiyao, Xinzhu, Tajvano ~{VSFtR\"~}\r\n> Greg 2009.12.13-19\r\n> --------------------------------------------------------------------------", "correct_text": "", "notes": "Many places.\n --VERIFIER NOTES-- \n   Please see http://www.chicagomanualofstyle.org/CMS_FAQ/Whichvs.That/Whichvs.That01.html for details\r\n\r\n                        Ron Bonica", "submit_date": "2011-01-04", "submitter_name": "*Zhong* Qiyao", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2681", "doc-id": "RFC4034", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B", "orig_text": "   The key tag is the same for all DNSKEY algorithm types except\r\n   algorithm 1 (please see Appendix B.1 for the definition of the key\r\n   tag for algorithm 1).  The key tag algorithm is the sum of the wire\r\n   format of the DNSKEY RDATA broken into 2 octet groups.  First, the\r\n   RDATA (in wire format) is treated as a series of 2 octet groups.\r\n   These groups are then added together, ignoring any carry bits.\r\n", "correct_text": "   The key tag is the same for all DNSKEY algorithm types except\r\n   algorithm 1 (please see Appendix B.1 for the definition of the key\r\n   tag for algorithm 1).  The key tag algorithm is the sum of the wire\r\n   format of the DNSKEY RDATA broken into 2 octet groups.  First, the\r\n   RDATA (in wire format) is treated as a series of 2 octet groups.\r\n   These groups are then added together with at least 32-bit precision,\r\n   retaining any carry bits. The carry bits are then added to the result,\r\n   and finally, only the lower 16 bits of the result are used as the key \r\n   tag.\r\n\r\n", "notes": "This change comes from the example implementation. The accumulator, ac, is required (\"assumed\") to be 32-bits or larger, and the carry bits are added to the accumulator before returning:\r\n\r\n    ac += (ac >> 16) & 0xFFFF;", "submit_date": "2011-01-05", "submitter_name": "Guillaume Bailey", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2685", "doc-id": "RFC6081", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "   Trailer Type  Usage                              Reference\r\n   ------------  ---------------------------------  ---------\r\n      0x01       Nonce Trailer                      RFC 6081\r\n      0x02       Random Port Trailer                RFC 6081\r\n      0x03       Alternate Address Trailer          RFC 6081\r\n      0x04       Neighbor Discovery Option Trailer  RFC 6081", "correct_text": "   Trailer Type  Usage                              Reference\r\n   ------------  ---------------------------------  ---------\r\n      0x01       Nonce Trailer                      RFC 6081\r\n      0x03       Alternate Address Trailer          RFC 6081\r\n      0x04       Neighbor Discovery Option Trailer  RFC 6081\r\n      0x05       Random Port Trailer                RFC 6081", "notes": "Section 4.5 is correct, and (normatively) defines the Random Port Trailer as having Trailer Type 0x05.  However, the IANA Considerations section incorrectly lists it (informatively) as 0x02.", "submit_date": "2011-01-18", "submitter_name": "Dave Thaler", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2686", "doc-id": "RFC3454", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "The list of characters to add to the mapping table can determined \r\nby the following algorithm:", "correct_text": "The list of characters to add to the mapping table can be determined \r\nby the following algorithm:", "notes": "A small omission of a single word: \"be\" is missing.", "submit_date": "2011-01-20", "submitter_name": "Jehan Pag\u00e8s", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2687", "doc-id": "RFC3405", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "         To: register@URI.ARPA\r\n         From: The IETF URN Working Group\r\n\r\n         Key: urn\r\n         Authority: RFC2141\r\n         Record: urn     IN NAPTR 0 0 \"\" \"\" \"/^urn:([^:]+)/\\\\2/i\" .", "correct_text": "         To: register@URI.ARPA\r\n         From: The IETF URN Working Group\r\n\r\n         Key: urn\r\n         Authority: RFC2141\r\n         Record: urn     IN NAPTR 0 0 \"\" \"\" \"/^urn:([^:]+)/\\\\1/i\" .", "notes": "The uncorrected, original text contains a regular expression which is invalid -- it includes a back-reference \\2 with no corresponding second enclosure. The correction is to make the back-reference \\1, i.e. a reference to the single enclosure present in the regular expression.", "submit_date": "2011-01-20", "submitter_name": "Joe Abley", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2688", "doc-id": "RFC3405", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "      http    IN NAPTR 100 100 \"\" \"\"  \"/http:\\\\/\\\\/([^\\\\/:]+)/\\\\2/i\" .", "correct_text": "      http    IN NAPTR 100 100 \"\" \"\"  \"/http:\\\\/\\\\/([^\\\\/:]+)/\\\\1/i\" .", "notes": "The uncorrected, original text contains a regular expression which is invalid -- it includes a back-reference (\\2) with no corresponding second enclosure. The correction is to make the back-reference \\1, i.e. a reference to the single enclosure present in the regular expression.", "submit_date": "2011-01-20", "submitter_name": "Joe Abley", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2689", "doc-id": "RFC5802", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "2b) SCRAM sends additional data with success.", "correct_text": "2b) SCRAM sends additional data with success. If the server sends the additional data as a challenge, the response to this challenge is a empty response.", "notes": "The added information MUST be supplied according to RFC 4422, Section 5, Paragraph 2b.", "submit_date": "2011-01-21", "submitter_name": "Steffen Lehmann", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2690", "doc-id": "RFC5724", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "RFC 5724                    sms\" URI Scheme                 January 2010", "correct_text": "RFC 5724                   \"sms\" URI Scheme                 January 2010", "notes": "That is a typographical error.", "submit_date": "2011-01-21", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5760", "doc-id": "RFC6244", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "configuration datastore where configuration changes can be made that\r\nwill not affect the device until a \"commit-configuration\" operation\r\nis invoked.", "correct_text": "configuration datastore where configuration changes can be made that\r\nwill not affect the device until a \"<commit/>\" operation\r\nis invoked.", "notes": "Netconf RPC for commit-configuration is <commit/>", "submit_date": "2019-06-22", "submitter_name": "Ram Polisetty", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2696", "doc-id": "RFC1609", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "The integer value is the number of seconds, excluding leap seconds,\r\nafter midnight UTC, January 1, 1970. ", "correct_text": "The integer value is 63 072 000 when UTC was 1972-01-01; it increases by 1 for\r\nevery second of UTC, excluding positive leap seconds. ", "notes": "At the time when UTC was 1970-01-01, TAI was 1970-01-01 + 8.000 082 s,\r\naccording to [ftp://maia.usno.navy.mil/ser7/tai-utc.dat]. (The rate of\r\nUTC was slower than the rate of TAI at the time but there have not been any\r\nleap seconds in UTC between 1970 and 1972-01-01.) The original wording could be\r\ntaken to imply that the \"integer value\" was 63 072 001 when UTC was 1972-01-01\r\nand TAI was 1972-01-01 + 10 s, and reached the value 63 072 002 just 82 \u00b5s\r\nlater. However, UNIX practice is to assign the value 63 072 000 to\r\nthe instant when UTC was 1972-01-01. The proposed wording makes it clear\r\nthat seconds of UTC are counted, not any seconds.\r\n-- Regarding negative leap seconds (which have not occurred and probably\r\nnever will): \"excluding\" them would be wrong because, when they occur,\r\nthe phase of UTC increases by 2 s (and so must the time_t value) while the\r\nphase of TAI only increases by 1 s. The proposed wording simply does not deal with the case, while the original would do it incorrectly.\n --VERIFIER NOTES-- \n   The quoted text does not appear in RFC 1609. However, it does appear in\r\n   RFC 4049 (!). If the reporter wishes to file an erratum against RFC 4049,\r\n   he will need to file a new report with the correct RFC number.", "submit_date": "2011-01-30", "submitter_name": "Michael Deckers", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2697", "doc-id": "RFC6063", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.1.1", "orig_text": "   Assume that the raw Client ID value or the value entered by the use\r\n   is: myclient!ID", "correct_text": "   Assume that the raw Client ID value or the value entered by the use\r\n   is: myclient!D", "notes": "Erroneously entered an extra character \"I\" into Client ID value.", "submit_date": "2011-01-31", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2698", "doc-id": "RFC5915", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "PEM encoding the DER-encoded ECPrivateKey is\r\ncommon; \"Proc-Type:\" and \"DEK-INFO:\" fields [RFC1421] followed by the\r\nDER-encoded ECPrivateKey are sandwiched between:", "correct_text": "PEM encoding the DER-encoded ECPrivateKey is\r\ncommon; \"Proc-Type:\" and \"DEK-Info:\" fields [RFC1421] (each on a new line),\r\nfollowed by a blank line, and then followed by the Base64 encoding (see\r\nSection 4 of [RFC4648]) of the DER-encoded ECPrivateKey are sandwiched\r\nbetween:\r\n", "notes": "Needed to indicate that the Proc-Type and DEK-Info are on separate lines and that there is a blank line between the DEK-Info and the ECPrivateKey.  Also it's not clear that the ECPrivateKey structure is PEM encoded during this process - it is.  And finally, \"DEK-INFO\" should really have been \"DEK-Info\". This aligns with current industry practice.", "submit_date": "2011-01-31", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2699", "doc-id": "RFC5092", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "13.2", "orig_text": "[URI-REG]    Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n             Registration Procedures for New URI Schemes\", BCP 115,\r\n             RFC 4395, February 2006.\r\n", "correct_text": "[URI-REG]    Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n             Registration Procedures for New URI Schemes\", BCP 35,\r\n             RFC 4395, February 2006.\r\n", "notes": "RFC 4395 is not BCP 115, but BCP 35.", "submit_date": "2011-02-01", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2700", "doc-id": "RFC4452", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.1", "orig_text": " [RFC4395]  Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n            Registration Procedures for New URI Schemes\", BCP 115, RFC\r\n            4395, February 2006.", "correct_text": " [RFC4395]  Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n            Registration Procedures for New URI Schemes\", BCP 35, RFC\r\n            4395, February 2006.", "notes": "RFC 4395 is not BCP 115, but BCP 35", "submit_date": "2011-02-01", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2701", "doc-id": "RFC5226", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.2", "orig_text": " [RFC4395]             Hansen, T., Hardie, T., and L. Masinter,\r\n                       \"Guidelines and Registration Procedures for New\r\n                       URI Schemes\", BCP 115, RFC 4395, February 2006.\r\n", "correct_text": " [RFC4395]             Hansen, T., Hardie, T., and L. Masinter,\r\n                       \"Guidelines and Registration Procedures for New\r\n                       URI Schemes\", BCP 35, RFC 4395, February 2006.\r\n", "notes": "RFC 4395 is not BCP 115.  It is BCP 35.\r\n\r\n--VERIFIER NOTES--\r\nCorrect - RFC 4395 is BCP 35, not BCP 115. However, at the time RFC 5226 was published (May 2008), this error had not yet been reported (it was reported in Jan. 2009, and the relevant data was updated accordingly at that time).", "submit_date": "2011-02-01", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2774", "doc-id": "RFC6090", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "By convention, a^0 is equal to the identity element for any a in G.\r\n", "correct_text": "By convention, a^0 is equal to the identity element and a^1 is equal to a itself for any a in G.\r\n", "notes": "Without this convention the explanation on the next page: \"... for any integers X and Y: a^(X+Y) = (a^X)*(a^Y) ...\" would be incomplete, as being undefined for the integers X=1 and/or Y=1.", "submit_date": "2011-04-11", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2775", "doc-id": "RFC6090", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "Note that a^M is equal to g^(M modulo R) for any non-negative integer M.\r\n", "correct_text": "Note that a^M is equal to a^(M mod R) for any non-negative integer M.", "notes": "g is a typo. The result of the modulo operation is always denoted in the text by \"mod\". The notation \"modulo\" identifies the operation and not the result.", "submit_date": "2011-04-11", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2776", "doc-id": "RFC6090", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "The integer x shall be converted to an octet string S of length k as follows.  The string S shall satisfy\r\n                      k\r\n                y =  SUM  2^(8(k-i)) Si .\r\n                    i = 1\r\n", "correct_text": "The integer y shall be converted to an octet string S of length k as follows.  The string S shall satisfy\r\n                      k\r\n                y =  SUM  2^(8(k-i)) Si .\r\n                    i = 1\r\n\r\nNote that the conversion fails if y >= 2^(8*k).\r\n", "notes": "Typo corrected. The integer y can not be converted, if the octet string is to short.", "submit_date": "2011-04-11", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4585", "doc-id": "RFC3473", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "   Label RRO subobjects are included in RROs as described in [RFC3209].\r\n   The only modification to usage and processing from [RFC3209] is that\r\n   when labels are recorded for bidirectional LSPs, label ERO subobjects\r\n   for both downstream and upstream labels MUST be included.", "correct_text": "   Label RRO subobjects are included in RROs as described in [RFC3209].\r\n   The only modification to usage and processing from [RFC3209] is that\r\n   when labels are recorded for bidirectional LSPs, label RRO subobjects\r\n   for both downstream and upstream labels MUST be included.", "notes": "RRO in place of ERO.", "submit_date": "2016-01-08", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2702", "doc-id": "RFC4291", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.3", "orig_text": "For example, the following are legal representations of the 60-bit\r\nprefix 20010DB80000CD3 (hexadecimal):\r\n\r\n   2001:0DB8:0000:CD30:0000:0000:0000:0000/60\r\n   2001:0DB8::CD30:0:0:0:0/60\r\n   2001:0DB8:0000:CD30::/60", "correct_text": "For example, the following are legal representations of the 60-bit\r\nprefix 20010DB80000CD3 (hexadecimal):\r\n\r\n   2001:0DB8:0000:CD30:0000:0000:0000:0000/60\r\n   2001:0DB8:0000:CD30::/60", "notes": "According to the erratum reported on 2010-08-16 by Michael Rushton, the second text representation address of the example will be no more valid and should be taken away and keep the first and third ones.\r\nThis is because the use of \"::\" indicates two or more groups of 16 bits of zeros. Thank you\n --VERIFIER NOTES-- \n   Related to Bob Hinden's review of errata 2466:\r\n\r\nI believe that this errata should be rejected.  This was discussed on the v6ops mailing list around February 25, 2011.  I responded: \r\n\r\n http://www.ietf.org/mail-archive/web/v6ops/current/msg07741.html\r\n\r\nThe thread starts at:\r\n\r\n http://www.ietf.org/mail-archive/web/v6ops/current/msg07722.html\r\n\r\nAlso, two errata were filed based on this one (Errata ID: 2735, Errata ID: 2702) that I think should also be rejected as they assume that this errata was correct.", "submit_date": "2011-02-01", "submitter_name": "Bassam Al-Khaffaf", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2703", "doc-id": "RFC5225", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.6.11", "orig_text": "o  ip_id_behavior, one octet for each IP header in the compressible\r\n   header chain starting from the outermost header.  Each octet\r\n   consists of 2 bits padded with 6 MSBs of zeroes.", "correct_text": "o  ip_id_behavior_outer, one octet for each IPv4 header except the\r\n   innermost in the compressible header chain starting from the outermost \r\n   header. Each octet consists of 2 bits padded with 6 MSBs of zeroes.\r\n\r\no  ip_id_behavior_innermost, one octet if the innermost header is an \r\n   IPv4 header. The octet consists of 2 bits padded with 6 MSBs of zeroes.", "notes": "There is no control field called ip_id_behavior in the document. There are two control fields related to IP-ID behavior, ip_id_behavior_innermost and ip_id_behavior_outer. For IPv6, only the ip_id_behavior_innermost field exists and its value is always IP_ID_BEHAVIOR_RANDOM according to the FN. This makes it impossible to include ip_id_behavior_outer when calculating the crc for IPv6 headers. Furthermore, since the ip_id_behavior_innermost is constant it makes no sense to include it in the crc calculation.\r\n\r\nThis errata has been verified based on discussion on the ROHC mailing list involving the authors in February, 2011.", "submit_date": "2011-02-03", "submitter_name": "Carl Knutsson", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2704", "doc-id": "RFC1812", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.3.6", "orig_text": "A router MUST be prepared to receive, reassemble and echo an ICMP Echo Request\r\ndatagram at least as the maximum of 576 and the MTUs of all the connected networks.", "correct_text": "A router MUST be prepared to receive, reassemble and echo an ICMP Echo Request\r\ndatagram at least as large as the maximum of 576 and the MTUs of all the\r\nconnected networks.", "notes": "", "submit_date": "2011-02-03", "submitter_name": "Jeffrey Smith", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2720", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.4.3", "orig_text": "   This syntax defines the content of the various multi-line responses;\r\n   more precisely, it defines the part of the response in the multi-line\r\n   data block after any \"dot-stuffing\" has been undone.  The numeric\r\n|  portion of each non-terminal name indicates the response code that is\r\n   followed by this data.", "correct_text": "   This syntax defines the content of the various multi-line responses;\r\n   more precisely, it defines the part of the response in the multi-line\r\n   data block after any \"dot-stuffing\" has been undone.  The numeric\r\n|  portion of each non-terminal name indicates the response code of the\r\n|  initial-response-line that is followed by this data.", "notes": "The last sentence in the RFC text is misleading; there may be (and in fact, in several cases \u2014 cf. Section 9.4.2, there indeed are) response-arguments between the response code and the data specified by the multi-line-response-content production.\r\n\r\nFirst reported by Alfred H\u00f6nes.", "submit_date": "2011-02-15", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2721", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "14", "orig_text": "Section 14.1 (Normative References):\r\n\r\n[RFC977]      Kantor, B. and P. Lapsley, \"Network News Transfer\r\n              Protocol\", RFC 977, February 1986.", "correct_text": "Section 14.2 (Informative References):\r\n\r\n[RFC977]      Kantor, B. and P. Lapsley, \"Network News Transfer\r\n              Protocol\", RFC 977, February 1986.", "notes": "This Reference should be moved to the Informative References (Section 14.2) because:\r\n\r\n* RFC 3977 is published as Proposed Standard, and it has formally obsoleted RFC 977, thus removing it from the Standards track.\r\n* Normative References in a Standards Track RFC must be at a comparable (or higher) level on the IETF Standards Track (or at similar position in other Standards Bodies' scheme).\r\n* All uses of the Ref. tag [RFC977] are non-normative in nature.\r\n\r\nFirst reported by Alfred H\u00f6nes.", "submit_date": "2011-02-15", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2722", "doc-id": "RFC5661", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "15.2", "orig_text": "   | ILLEGAL              | NFS4ERR_BADXDR, NFS4ERR_OP_ILLEGAL         |\r\n   | LAYOUTCOMMIT         | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,     |", "correct_text": "   |                      | NFS4ERR_BADXDR, NFS4ERR_OP_ILLEGAL         |\r\n   | LAYOUTCOMMIT         | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,     |", "notes": "ILLEGAL is not an operation.  The errors belong to GETFH, the previous operation listed.\n --VERIFIER NOTES-- \nSubmitter wishes to retract the errata.   ", "submit_date": "2011-02-15", "submitter_name": "Ricardo Labiaga", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7040", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "   IP/TCP:\r\n\r\n     45 e0 00 4c 7b 9f 40 00 ff 06 20 dc 0a 0b 0c 0d\r\n     ac 1b 1c 1d c4 fa 00 b3 78 7a 1d df 00 00 00 00\r\n     e0 02 ff ff 5a 0f 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 00 01 7e d0 00 00 00 00 1d 10 3d 54\r\n     e4 77 e9 9c 80 40 76 54 98 e5 50 91\r\n", "correct_text": "   IP/TCP:\r\n\r\n     45 e0 00 4c 7b 9f 40 00 ff 06 20 dc 0a 0b 0c 0d\r\n     ac 1b 1c 1d c4 fa 00 b3 78 7a 1d df 00 00 00 00\r\n     e0 02 ff ff 46 41 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 00 01 7e d0 00 00 00 00 1d 10 3d 54\r\n     e4 77 e9 9c 80 40 76 54 98 e5 50 91\r\n", "notes": "The TCP checksum shown (0x5a0f) is wrong, it should be 0x4641.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:48:42"}, {"errata_id": "3607", "doc-id": "RFC4627", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "   A JSON text can be safely passed into JavaScript's eval() function\r\n   (which compiles and executes a string) if all the characters not\r\n   enclosed in strings are in the set of characters that form JSON\r\n   tokens.  This can be quickly determined in JavaScript with two\r\n   regular expressions and calls to the test and replace methods.\r\n\r\n      var my_JSON_object = !(/[^,:{}\\[\\]0-9.\\-+Eaeflnr-u \\n\\r\\t]/.test(\r\n             text.replace(/\"(\\\\.|[^\"\\\\])*\"/g, ''))) &&\r\n         eval('(' + text + ')');\r\n", "correct_text": "[OBSOLETE]", "notes": "Executing the following code in Microsoft Internet Explorer 9\r\n\r\n  var text = \"\\\r\n  +{ \\\"valueOf\\\": self[\\\"location\\\"],\\\r\n  \\\"toString\\\": [][\\\"join\\\"],\\\r\n  0: \\\"javascript:alert('EXPLOIT')\\\",\\\r\n  \\\"length\\\": 1\\\r\n  }\"\r\n\r\n  var my_JSON_object = !(/[^,:{}\\[\\]0-9.\\-+Eaeflnr-u \\n\\r\\t]/.test(\r\n         text.replace(/\"(\\\\.|[^\"\\\\])*\"/g, ''))) &&\r\n     eval('(' + text + ')');\r\n\r\nresults in an \"alert\" message of \"EXPLOIT\", i.e. part of the data is executed as if it was executable code, which the validation code in the RFC is supposed to rule out.\r\n\r\nCredit is due to Stefano Di Paola's http://blog.mindedsecurity.com/2011/08/ye-olde-crockford-json-regexp-is.html article, and possibly others the reporter does not know of.\r\n\r\n----- NOTES FROM THE DOCUMENT AUTHOR -----\r\nThat section is completely obsolete. The recommendation now is to not use eval at all, and instead use JSON.parse.\r\n\r\nThat section should be replaced entirely with language independent advice on proper encoding and decoding, including avoidance of concatenation to construct JSON texts.\r\n\r\n----- NOTES FROM THE VERIFIER -----\r\nThe resolution of this is more involved than can be handled by errata, and a document update is planned soon... so this will be \"held for document update.\"  It's important to note that the premise is correct: the \"eval()\" mechanism is NOT RECOMMENDED, and this text will be entirely replaced when the document is updated.", "submit_date": "2013-04-27", "submitter_name": "Bjoern Hoehrmann", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2705", "doc-id": "RFC5521", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": " Unnumbered Interface ID Subobject\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |X|  Type = 3   |     Length    |    Reserved   |  Attribute    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        TE Router ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Interface ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   The TE Router ID and Interface ID fields are as defined in [RFC3477].\r\n\r\n\r\n\r\n\r\n\r\n\r\nOki, et al.                 Standards Track                     [Page 7]\r\n \r\nRFC 5521        Extensions to PCEP for Route Exclusions       April 2009\r\n\r\n\r\n   Autonomous System Number Subobject\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |X|  Type = 4   |     Length    |      2-Octet AS Number        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Note that as in other PCEP objects [RFC5440] and RSVP-TE objects\r\n   [RFC3209], no support for 4-octet Autonomous System (AS) Numbers is\r\n   provided.  It is anticipated that, as 4-octet AS Numbers become more\r\n   common, both PCEP and RSVP-TE will be updated in a consistent way to\r\n   add this support.\r\n\r\n   SRLG Subobject\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |X|  Type = 5   |     Length    |       SRLG Id (4 bytes)       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      SRLG Id (continued)      |    Reserved   |  Attribute    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   The Attribute SHOULD be set to two (2) and SHOULD be ignored on\r\n   receipt.", "correct_text": " Unnumbered Interface ID Subobject\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |X|  Type = 4   |     Length    |    Reserved   |  Attribute    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        TE Router ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        Interface ID                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   The TE Router ID and Interface ID fields are as defined in [RFC3477].\r\n\r\n\r\n\r\n\r\n\r\n\r\nOki, et al.                 Standards Track                     [Page 7]\r\n \r\nRFC 5521        Extensions to PCEP for Route Exclusions       April 2009\r\n\r\n\r\n   Autonomous System Number Subobject\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |X|  Type = 32  |     Length    |      2-Octet AS Number        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Note that as in other PCEP objects [RFC5440] and RSVP-TE objects\r\n   [RFC3209], no support for 4-octet Autonomous System (AS) Numbers is\r\n   provided.  It is anticipated that, as 4-octet AS Numbers become more\r\n   common, both PCEP and RSVP-TE will be updated in a consistent way to\r\n   add this support.\r\n\r\n   SRLG Subobject\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |X|  Type = 34  |     Length    |       SRLG Id (4 bytes)       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      SRLG Id (continued)      |    Reserved   |  Attribute    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   The Attribute SHOULD be set to two (2) and SHOULD be ignored on\r\n   receipt.", "notes": "This is the correct resolution consistent with the table further up the document, and with the IANA registry", "submit_date": "2011-02-05", "submitter_name": "Ramon Casellas", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2706", "doc-id": "RFC4890", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.", "orig_text": "   if [ \"$STATE_ENABLED\" -eq \"1\" ]\r\n   then\r\n     # Allow incoming time exceeded code 0 messages\r\n     # only for existing sessions\r\n     for inner_prefix in $INNER_PREFIXES\r\n     do\r\n       ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n            -d $inner_prefix \\\r\n            --state ESTABLISHED,RELATED --icmpv6-type packet-too-big \\\r\n            -j ACCEPT\r\n     done\r\n   else\r\n     # Allow incoming time exceeded code 0 messages\r\n     for inner_prefix in $INNER_PREFIXES\r\n     do\r\n       ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n            --icmpv6-type ttl-zero-during-transit -j ACCEPT\r\n     done\r\n   fi\r\n", "correct_text": "   if [ \"$STATE_ENABLED\" -eq \"1\" ]\r\n   then\r\n     # Allow incoming time exceeded code 0 messages\r\n     # only for existing sessions\r\n     for inner_prefix in $INNER_PREFIXES\r\n     do\r\n       ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n            -d $inner_prefix \\\r\n            --state ESTABLISHED,RELATED --icmpv6-type ttl-zero-during-transmit \\\r\n            -j ACCEPT\r\n     done\r\n   else\r\n     # Allow incoming time exceeded code 0 messages\r\n     for inner_prefix in $INNER_PREFIXES\r\n     do\r\n       ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n            --icmpv6-type ttl-zero-during-transit -j ACCEPT\r\n     done\r\n   fi\r\n", "notes": "Not sure if this is really editorial as it is in the example code, not the main RFC.\r\n\r\nIn any case, the example incorrectly specifies an icmpv6 type in one code path.", "submit_date": "2011-02-06", "submitter_name": "Phil Whineray", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2707", "doc-id": "RFC5996", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6", "orig_text": "[...] and also MUST be capable of being configured to send and accept the \r\nHash and URL format (with HTTP URLs)", "correct_text": "[...] and also MUST be capable of being configured to send and accept the \r\ntwo Hash and URL formats (with HTTP URLs)", "notes": "This change from the original RFC 4306 text was made late in the process, responding to the Gen-Art reviewer comment. Factually, the document (earlier in the same section) defines two Hash and URL formats, making this sentence a clear inconsistency. The erratum is flagged as Technical because the text is normative.", "submit_date": "2011-02-06", "submitter_name": "Yaron Sheffer", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2708", "doc-id": "RFC5751", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.3.3", "orig_text": "Content-Type: multipart/signed;\r\nprotocol=\"application/pkcs7-signature\";\r\nmicalg=sha1; boundary=boundary42", "correct_text": "Content-Type: multipart/signed;\r\nprotocol=\"application/pkcs7-signature\";\r\nmicalg=sha-1; boundary=boundary42", "notes": "In this version we updated the strings associated with the micalg parameter, however the example was not updated to use the correct new value.", "submit_date": "2011-02-06", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2723", "doc-id": "RFC5763", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "The endpoint SHOULD\r\nsend the SIP message containing the offer to the offerer's SIP proxy\r\nover an integrity protected channel.  The proxy SHOULD add an\r\nIdentity header field according to the procedures outlined in\r\n[RFC4474].  The SIP message containing the offer SHOULD be sent to\r\nthe offerer's SIP proxy over an integrity protected channel.", "correct_text": "The endpoint SHOULD\r\nsend the SIP message containing the offer to the offerer's SIP proxy\r\nover an integrity protected channel.  The proxy SHOULD add an\r\nIdentity header field according to the procedures outlined in\r\n[RFC4474].  The SIP message containing the offer SHOULD be sent to\r\nthe answer's SIP proxy over an integrity protected channel.", "notes": "the original text seems to be repetitive.", "submit_date": "2011-02-15", "submitter_name": "Wu Yongming", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2724", "doc-id": "RFC4055", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "  id-sha224  OBJECT IDENTIFIER  ::=  {{ joint-iso-itu-t(2)\r\n                            country(16) us(840) organization(1) gov(101)\r\n                            csor(3) nistalgorithm(4) hashalgs(2) 4 }", "correct_text": "  id-sha224  OBJECT IDENTIFIER  ::=  { joint-iso-itu-t(2)\r\n                            country(16) us(840) organization(1) gov(101)\r\n                            csor(3) nistalgorithm(4) hashalgs(2) 4 }", "notes": "There's an extra \"{\".  This is incorrect ASN.1.  I marked it as editorial because the ASN.1 module does not contain this error.", "submit_date": "2011-02-16", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3667", "doc-id": "RFC5496", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3.1", "orig_text": "Core 2, and subsequent core routers, will forwarding\r\nthe Join along the Vector (i.e., towards Edge 1) \r\ninstead of trying to forward it towards S.", "correct_text": "Core 2, and subsequent core routers, will forward the\r\nJoin along the Vector (i.e., towards Edge 1) instead \r\nof trying to forward it towards S.", "notes": "A typo in \"will forwarding the Join'.\r\n(Modified resolution from original report.)", "submit_date": "2013-06-17", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4272", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "&charset ISO_8859-1:1987\r\n...\r\nNS !I Ct Pd Cu Ye BB SE ': Co -a << NO -- Rg '-", "correct_text": "&charset ISO_8859-1:1987\r\n...\r\nNS !I Ct Pd Cu Ye BB SE ': Co -a << NO -- Rg 'm", "notes": "Mnemonic '- (U+203E OVERLINE) should read 'm (U+00AF MACRON) here and in most other occurences of this mnemonic.\r\n\r\n----- Verifier Notes -----\r\nWhile this is correct as far as it goes -- that 'm is a better choice of mnemonic than '- is -- it is not appropriate as an erratum, because, for better or worse, the text that's there is what was intended when it was written.  And as it stands, it doesn't really matter, as no one uses RFC 1345 any more, and hasn't for years.  It's unlikely that an update will ever be done, but if one is, that's the time to make this correction throughout the document.", "submit_date": "2015-02-16", "submitter_name": "Harald Grumser", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2709", "doc-id": "RFC4861", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "!INCOMPLETE     NA, Solicited=1,        -                   REACHABLE\r\n                Override=0\r\n                Same link-layer\r\n                address as cached.\r\n\r\n!INCOMPLETE     NA, Solicited=any,     Update content of    unchanged\r\n                Override=any, No       IsRouter flag.\r\n                link-layer address\r\n", "correct_text": "!INCOMPLETE     NA, Solicited=1,      -                   REACHABLE\r\n                Override=0\r\n                Same link-layer\r\n                address as cached.\r\n\r\n!INCOMPLETE     NA, Solicited=1,     Update content of    REACHABLE\r\n                Override=any, No     IsRouter flag.\r\n                link-layer address\r\n\r\n!INCOMPLETE     NA, Solicited=0,     Update content of    unchanged\r\n                Override=any, No     IsRouter flag.\r\n                link-layer address\r\n\r\n\r\nor \r\n\r\n\r\n\r\n!INCOMPLETE     NA, Solicited=1,        -                   REACHABLE\r\n                Override=0\r\n                Same link-layer\r\n                address as cached\r\n                or no link-layer \r\n                address\r\n\r\n!INCOMPLETE     NA, Solicited=any,     Update content of    unchanged\r\n                Override=any, No       IsRouter flag.\r\n                link-layer address\r\n\r\n\r\n", "notes": "Section 7.2.4. says:\r\n\r\n\"If the solicitation's IP Destination Address is\r\nnot a multicast address, the Target Link-Layer Address option MAY be\r\nomitted; the neighboring node's cached value must already be current\r\nin order for the solicitation to have been received.\"\r\n\r\nConsider host A has a Neighbor Cache Entry for a unicast address of host B with the state PROBE. If it sends an NS to that address, B will answer with a NA.\r\nIf the Target Link-Layer Address is actually omitted, the host which sent the solicitation would only update the IsRouter flag of the Neighbor Cache Entry and leave the state unchanged.\r\nAt retransmit timeout host A would send another NS, since the state is still PROBE. After some retransmissions the entry would be discarded, although it was obviously reachable.\r\n\r\nWith one of the above suggestions, the Neighbor Cache Entry will be marked as REACHABLE, even if no Target Link-Layer Option is included in the NA.", "submit_date": "2011-02-09", "submitter_name": "Jan Kramer", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2710", "doc-id": "RFC5656", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "The SHA2 family \r\nconsists of four variants -- SHA-224, SHA-256, SHA-384, and SHA-521 \r\n-- named after their digest lengths.", "correct_text": "The SHA2 family \r\nconsists of four variants -- SHA-224, SHA-256, SHA-384, and SHA-512 \r\n-- named after their digest lengths.", "notes": "The SHA2 family has a SHA-512 variant, not SHA-521.", "submit_date": "2011-02-10", "submitter_name": "Mattias Wadenstein", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2711", "doc-id": "RFC2544", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix C", "orig_text": "", "correct_text": "", "notes": "Is there something wrong in the sub section title ? \r\nC.2.5 is missing while the C.2.6.1 and C.2.6.2 exists ?", "submit_date": "2011-02-11", "submitter_name": "Wang Haojian", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2712", "doc-id": "RFC2865", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "      Note that none of the types in RADIUS terminate with a NUL (hex\r\n      00).  In particular, types \"text\" and \"string\" in RADIUS do not\r\n      terminate with a NUL (hex 00).  The Attribute has a length field\r\n      and does not use a terminator.  Text contains UTF-8 encoded 10646\r\n      [7] characters and String contains 8-bit binary data.  Servers and\r\n      servers and clients MUST be able to deal with embedded nulls.\r\n      ^^^^^^^^^^^^", "correct_text": "      Note that none of the types in RADIUS terminate with a NUL (hex\r\n      00).  In particular, types \"text\" and \"string\" in RADIUS do not\r\n      terminate with a NUL (hex 00).  The Attribute has a length field\r\n      and does not use a terminator.  Text contains UTF-8 encoded 10646\r\n      [7] characters and String contains 8-bit binary data.  Servers and\r\n      clients MUST be able to deal with embedded nulls.", "notes": "Unnecessary Words.", "submit_date": "2011-02-12", "submitter_name": "Wang Haojian", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2713", "doc-id": "RFC2866", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "      [7] characters and String contains 8-bit binary data.  Servers and\r\n      servers and clients MUST be able to deal with embedded nulls.\r\n      ^^^^^^^^^^", "correct_text": "      [7] characters and String contains 8-bit binary data.  Servers and\r\n      clients MUST be able to deal with embedded nulls.\r\n", "notes": "Same as RFC 2865 , extraneous \"servers and\" can be deleted.  ;)", "submit_date": "2011-02-12", "submitter_name": "Wang Haojian", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2714", "doc-id": "RFC2868", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.10", "orig_text": "3.10.  Tunnel-Server-Auth-ID\r\n\r\n   Description\r\n\r\n      This Attribute specifies the name used by the tunnel terminator\r\n      during the authentication phase of tunnel establishment.  The\r\n      Tunnel-Client-Auth-ID Attribute MAY be included (as a hint to the\r\n      ^^^^^^^^^^^^^^^^^^^^^", "correct_text": "3.10.  Tunnel-Server-Auth-ID\r\n\r\n   Description\r\n\r\n      This Attribute specifies the name used by the tunnel terminator\r\n      during the authentication phase of tunnel establishment.  The\r\n      Tunnel-Server-Auth-ID Attribute MAY be included (as a hint to the", "notes": "Maybe here should be the \"Tunnel-Server-Auth-ID\"", "submit_date": "2011-02-12", "submitter_name": "Wang Haojian", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2725", "doc-id": "RFC6063", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2.2", "orig_text": "   To handle content negotiation, HTTP requests MAY include an HTTP\r\n   Accept header field.  This header field SHOULD should be identified\r\n   using the MIME type specified in Section 7.2.1.  The Accept header\r\n   MAY include additional content types defined by future versions of\r\n   this protocol.", "correct_text": "   To handle content negotiation, HTTP requests MAY include an HTTP\r\n   Accept header field.  This header field SHOULD be identified\r\n   using the MIME type specified in Section 7.2.1.  The Accept header\r\n   MAY include additional content types defined by future versions of\r\n   this protocol.", "notes": "Double \"should\"", "submit_date": "2011-02-18", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7041", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.2", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 4b ad 40 00 ff 06 50 ce ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 c4 fa fa dd 6d e9 78 7a 1d e0\r\n     e0 12 ff ff f3 f2 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 93 f4 e9 e8 00 01 7e d0 1d 10 54 3d\r\n     d6 ad a7 bc 4c dd 53 6d 17 69 db 5f\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 4b ad 40 00 ff 06 50 ce ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 c4 fa fa dd 6d e9 78 7a 1d e0\r\n     e0 12 ff ff e5 44 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 93 f4 e9 e8 00 01 7e d0 1d 10 54 3d\r\n     d6 ad a7 bc 4c dd 53 6d 17 69 db 5f\r\n", "notes": "The TCP checksum shown (0xf3f2) is wrong, it should be 0xe544.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:48:56"}, {"errata_id": "3939", "doc-id": "RFC6545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.1", "orig_text": "      <iodef-rid:XMLDocument dtype=\"xml\" meaning=\"xml\">\r\n       <IODEF-Document lang=\"en\">\r\n        <iodef:Incident purpose=\"traceback\" restriction=\"need-to-know\">\r\n          <iodef:IncidentID name=\"CERT-FOR-OUR-DOMAIN\">\r\n                           CERT-FOR-OUR-DOMAIN#207-1\r\n          </iodef:IncidentID>\r\n", "correct_text": "      <iodef-rid:XMLDocument dtype=\"xml\" meaning=\"xml\">\r\n       <iodef:IODEF-Document lang=\"en\">\r\n        <iodef:Incident purpose=\"traceback\" restriction=\"need-to-know\">\r\n          <iodef:IncidentID name=\"CERT-FOR-OUR-DOMAIN\">\r\n                           CERT-FOR-OUR-DOMAIN#207-1\r\n          </iodef:IncidentID>\r\n", "notes": "The IODEF-Document node (both opening and closing) are missing the namespace prefix.  Without this, the contents of the node will not be correctly validated.\r\n\r\n(Change is in line 2 above.  The closing tag change is the same, but is not part of the delta change above.)", "submit_date": "2014-03-29", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2715", "doc-id": "RFC5226", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "     5) Initial assignments and reservations.  Clear instructions\r\n        should be provided to identify any initial assignments or\r\n        registrations.  In addition, any ranges that are to be reserved\r\n        for \"Private Use\", \"Reserved\", \"Unassigned\", etc. should be\r\n        clearly indicated.\r\n\r\n", "correct_text": "     5) Initial assignments and reservations.  Clear instructions\r\n        SHALL be provided to identify any initial assignments or\r\n        registrations.  In addition, any ranges that are \"Unassigned\" \r\n        (only for those registries that have a bounded size), to be  \r\n        \"Reserved\", used for \"Private Use\", \"Experimentation\", etc. \r\n        SHALL be clearly indicated.\r\n\r\n", "notes": "Julian Reschke included the following notes to his errata report #2684:\r\n\r\n--Citation starts--\r\nUnassigned values are not \"reserved\". For bounded registries, they can be computed from the assigned/reserved values. For unbounded registries (think media types), mentioning them doesn't make any sense at all. \r\n--Citation ends--\r\n\r\nAnyway, I propose to consider mentioning the norm about mandatory mentioning the Unassigned values in the registry description appropriate and useful.  This would improve the work of IANA staff that will create the registries.\n --VERIFIER NOTES-- \nChanging a \"should\" to a \"SHALL\" in a BCP cannot happen through the errata.  IETF consensus is needed for such a change.   ", "submit_date": "2011-02-12", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2716", "doc-id": "RFC2868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "6.1.  Tunnel-Type Attribute Values\r\n\r\n   Values 1-12 of the Tunnel-Type Attribute are defined in Section 5.1;\r\n   the remaining values are available for assignment by the IANA with\r\n   IETF Consensus [16].\r\n\r\n6.2.  Tunnel-Medium-Type Attribute Values\r\n\r\n   Values 1-15 of the Tunnel-Medium-Type Attribute are defined in\r\n   Section 5.2; the remaining values are available for assignment by the\r\n   IANA with IETF Consensus [16].", "correct_text": "6.1.  Tunnel-Type Attribute Values\r\n\r\n   Values 1-12 of the Tunnel-Type Attribute are defined in Section 3.1;\r\n   the remaining values are available for assignment by the IANA with\r\n   IETF Consensus [16].\r\n\r\n6.2.  Tunnel-Medium-Type Attribute Values\r\n\r\n   Values 1-15 of the Tunnel-Medium-Type Attribute are defined in\r\n   Section 3.2; the remaining values are available for assignment by the\r\n   IANA with IETF Consensus [16].", "notes": "Should be \"Section 3.1\" and \"Section 3.2\"", "submit_date": "2011-02-12", "submitter_name": "Wang Haojian", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2717", "doc-id": "RFC3986", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3", "orig_text": "      hier-part   = \"//\" authority path-abempty\r\n                  / path-absolute\r\n                  / path-rootless\r\n                  / path-empty\r\n", "correct_text": "      hier-part   = \"//\" authority path-abempty\r\n                  / path-absolute\r\n                  / path-noscheme\r\n                  / path-rootless\r\n                  / path-empty\r\n", "notes": "There are four ABNF rules for path, but the following words says:\r\n\r\n'These restrictions result in five different ABNF rules for a path (Section 3.3)'\r\n\r\nAnd in section 3.3, there are five rules.\n --VERIFIER NOTES-- \n   PSA: There is no error here, because the hierarchical part excludes\r\n   paths that are not preceded by \"//\", whereas the path rule includes\r\n   paths that are not preceded by \"//\" (thus five rules for \"path\" but\r\n   only four rules for \"hier-part\").", "submit_date": "2011-02-14", "submitter_name": "Winfred Qin", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2718", "doc-id": "RFC5849", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.1.3.1", "orig_text": "contains the following (fully decoded) parameters used in the \r\nsignature base sting:", "correct_text": "contains the following (fully decoded) parameters used in the \r\nsignature base string:", "notes": "typographical error", "submit_date": "2011-02-14", "submitter_name": "Florian Sey", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2719", "doc-id": "RFC3977", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2.3", "orig_text": "   [C] HELP\r\n   [S] 100 Help text follows\r\n   [S] This is some help text.  There is no specific\r\n|  [S] formatting requirement for this test, though\r\n   [S] it is customary for it to list the valid commands\r\n   [S] and give a brief definition of what they do.\r\n   [S] .", "correct_text": "   [C] HELP\r\n   [S] 100 Help text follows\r\n   [S] This is some help text.  There is no specific\r\n|  [S] formatting requirement for this text, though\r\n   [S] it is customary for it to list the valid commands\r\n   [S] and give a brief definition of what they do.\r\n   [S] .", "notes": "A simple typo \"test\" -> \"text\".\r\n\r\nFirst reported by Alfred H\u00f6nes.", "submit_date": "2011-02-15", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2789", "doc-id": "RFC5643", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "ospfv3VirtNbrEvents OBJECT-TYPE\r\nSYNTAX Counter32\r\nMAX-ACCESS read-only\r\nSTATUS current\r\nDESCRIPTION\r\n\"The number of times this virtual link has\r\nchanged its state or an error has occurred.\r\nDiscontinuities in the value of this counter\r\ncan occur at re-initialization of the management\r\nsystem and at other times as indicated by the\r\nvalue of ospfv3DiscontinuityTime.\"\r\n::= { ospfv3VirtNbrEntry 9 }", "correct_text": "ospfv3VirtNbrEvents OBJECT-TYPE\r\nSYNTAX Counter32\r\nMAX-ACCESS read-only\r\nSTATUS current\r\nDESCRIPTION\r\n\"The number of times this virtual neighbor has\r\nchanged its state or an error has occurred.\r\nDiscontinuities in the value of this counter\r\ncan occur at re-initialization of the management\r\nsystem and at other times as indicated by the\r\nvalue of ospfv3DiscontinuityTime.\"\r\n::= { ospfv3VirtNbrEntry 9 }", "notes": "", "submit_date": "2011-04-25", "submitter_name": "Vladica Stanisic", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4273", "doc-id": "RFC5751", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Global", "orig_text": "", "correct_text": "", "notes": "RFC 5751 contains several S/MIME sample messages, prefixed with the text \"A sample message would be\".  These samples aren't actually valid S/MIME messages but merely contain 141 bytes of random garbage.  In other words the S/MIME \"sample messages\" aren't actually sample messages.", "submit_date": "2015-02-18", "submitter_name": "Peter Gutmann", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4341", "doc-id": "RFC6936", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1.3.5", "orig_text": "The ingress of a tunnel seeking to provide good\r\nentropy in the flow label field would therefore need to create a\r\nrandom flow label value and keep corresponding state so that all\r\npackets that were associated with a flow would be consistently given\r\nthe same flow label.  Although possible, this complexity may not be\r\ndesirable in a tunnel ingress.", "correct_text": "The ingress of a tunnel seeking to provide good\r\nentropy in the flow label field would therefore need to create a\r\npseudo-random flow label value using a stateless method\r\nas described in [RFC6438] so that all\r\npackets that were associated with a flow would be consistently given\r\nthe same flow label.", "notes": "It is incorrect that a stateful method is needed, and presumably that\r\nwas the complexity judged undesirable. Also, we shouldn't say \"random\"\r\nwhen we mean \"pseudo-random.\"", "submit_date": "2015-04-20", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2726", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   The zone specifies the offset from Coordinated Universal Time (UTC,\r\n   formerly referred to as \"Greenwich Mean Time\") that the date and\r\n   time-of-day represent.  The \"+\" or \"-\" indicates whether the time-of-\r\n   day is ahead of (i.e., east of) or behind (i.e., west of) Universal\r\n   Time.  The first two digits indicate the number of hours difference\r\n   from Universal Time, and the last two digits indicate the number of\r\n   additional minutes difference from Universal Time.  (Hence, +hhmm\r\n   means +(hh * 60 + mm) minutes, and -hhmm means -(hh * 60 + mm)\r\n   minutes).  The form \"+0000\" SHOULD be used to indicate a time zone at\r\n   Universal Time.  Though \"-0000\" also indicates Universal Time, it is\r\n   used to indicate that the time was generated on a system that may be\r\n   in a local time zone other than Universal Time and that the date-time\r\n   contains no information about the local time zone.", "correct_text": "   The zone specifies the offset from Coordinated Universal Time (UTC) \r\n   that the date and time-of-day represent.\r\n   The \"+\" or \"-\" indicates whether the time-of-\r\n   day is ahead of (i.e., east of) or behind (i.e., west of) UTC.\r\n   The first two digits indicate the number of hours difference\r\n   from UTC, and the last two digits indicate the number of\r\n   additional minutes difference from UTC.  (Hence, +hhmm\r\n   means +(hh * 60 + mm) minutes, and -hhmm means -(hh * 60 + mm)\r\n   minutes).  The form \"+0000\" SHOULD be used to indicate a time zone at\r\n   UTC.  Though \"-0000\" also indicates UTC, it is\r\n   used to indicate that the time was generated on a system that may be\r\n   in a local time zone other than UTC and that the date-time\r\n   contains no information about the local time zone.", "notes": "It is not correct to say that UTC was formerly referred to as GMT. I think this was an editorial mistake: RFC 822 did not use the term UTC and said \"Universal  Time (formerly called Greenwich Mean Time)\" which is reasonably correct for UT without a suffix.\r\n\r\nFor the purposes of RFC 5322 and for consistency with RFC 3339 and ISO 8601 I think it is best to refer to UTC throughout - though see the next erratum for notes on the obsolete syntax.", "submit_date": "2011-02-21", "submitter_name": "Tony Finch", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2727", "doc-id": "RFC2028", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "[H] IRTF Charter, RFC 2014, October 1996.", "correct_text": "[H]  Weinrib, A. and J. Postel, \"IRTF Research Group Guidelines and\r\n     Procedures\", BCP 8, RFC 2014, October 1996.", "notes": "", "submit_date": "2011-02-22", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2728", "doc-id": "RFC6137", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "11", "orig_text": "11.  References\r\n\r\n11.1.  Normative References\r\n\r\n   [1]   Bradner, S., \"Key words for use in RFCs to Indicate Requirement\r\n         Levels\", BCP 14, RFC 2119, March 1997.\r\n\r\n   [2]   World Wide Web Consortium, \"Extensible Markup Language\r\n         (XML) 1.0 (Fifth Edition)\", W3C Recommendation, 26 November\r\n         2008, <http://www.w3.org/TR/2008/REC-xml-20081126>.\r\n\r\n   [3]   World Wide Web Consortium, \"XML Schema Part 0: Primer Second\r\n         Edition\", W3C Recommendation, 28 October 2004,\r\n         <http://www.w3.org/TR/2004/REC-xmlschema-0-20041028/>.\r\n\r\n   [4]   World Wide Web Consortium, \"XML Schema Part 1: Structures\r\n         Second Edition\", W3C Recommendation, 28 October 2004,\r\n         <http://www.w3.org/TR/xmlschema-1/>.\r\n\r\n   [5]   World Wide Web Consortium, \"XML Schema Part 2: Datatypes Second\r\n         Edition\", W3C Recommendation, 28 October 2004,\r\n         <http://www.w3.org/TR/xmlschema-2/>.\r\n\r\n   [6]   World Wide Web Consortium, \"Namespaces in XML 1.0 (Third\r\n         Edition)\", W3C Recommendation, 8 December 2009,\r\n         <http://www.w3.org/TR/2009/REC-xml-names-20091208/>.\r\n\r\n   [7]   Mealling, M., \"The IETF XML Registry\", BCP 81, RFC 3688,\r\n         January 2004.\r\n\r\n11.2.  Informative References\r\n\r\n   [8]   Enabling Grids for E-sciencE, http://www.eu-egee.org/.\r\n\r\n   [9]   Enabling Grids for E-sciencE, \"ENOC, EGEE Network Operation\r\n         Centre\", http://technical.eu-egee.org/index.php?id=353.\r\n\r\n   [10]  Rumbaugh, J., Jacobson, I., and G. Booch, \"The Unified Modeling\r\n         Language Reference Manual,\" ISBN 020130998X, Addison-Wesley,\r\n         1998.\r\n\r\n   [11]  Johnson, D., \"NOC Internal Integrated Trouble Ticket System\r\n         Functional Specification Wishlist (\"NOC TT REQUIREMENTS\")\",\r\n         RFC 1297, January 1992.\r\n\r\n", "correct_text": "11.  References\r\n\r\n11.1.  Normative References\r\n\r\n   [1]   Bradner, S., \"Key words for use in RFCs to Indicate Requirement\r\n         Levels\", BCP 14, RFC 2119, March 1997.\r\n\r\n   [2]   World Wide Web Consortium, \"Extensible Markup Language\r\n         (XML) 1.0 (Fifth Edition)\", W3C Recommendation, 26 November\r\n         2008, <http://www.w3.org/TR/2008/REC-xml-20081126>.\r\n\r\n   [3]   World Wide Web Consortium, \"XML Schema Part 0: Primer Second\r\n         Edition\", W3C Recommendation, 28 October 2004,\r\n         <http://www.w3.org/TR/2004/REC-xmlschema-0-20041028/>.\r\n\r\n   [4]   World Wide Web Consortium, \"XML Schema Part 1: Structures\r\n         Second Edition\", W3C Recommendation, 28 October 2004,\r\n         <http://www.w3.org/TR/xmlschema-1/>.\r\n\r\n   [5]   World Wide Web Consortium, \"XML Schema Part 2: Datatypes Second\r\n         Edition\", W3C Recommendation, 28 October 2004,\r\n         <http://www.w3.org/TR/xmlschema-2/>.\r\n\r\n   [6]   World Wide Web Consortium, \"Namespaces in XML 1.0 (Third\r\n         Edition)\", W3C Recommendation, 8 December 2009,\r\n         <http://www.w3.org/TR/2009/REC-xml-names-20091208/>.\r\n\r\n11.2.  Informative References\r\n\r\n   [7]   Mealling, M., \"The IETF XML Registry\", BCP 81, RFC 3688,\r\n         January 2004.\r\n\r\n   [8]   Enabling Grids for E-sciencE, http://www.eu-egee.org/.\r\n\r\n   [9]   Enabling Grids for E-sciencE, \"ENOC, EGEE Network Operation\r\n         Centre\", http://technical.eu-egee.org/index.php?id=353.\r\n\r\n   [10]  Rumbaugh, J., Jacobson, I., and G. Booch, \"The Unified Modeling\r\n         Language Reference Manual,\" ISBN 020130998X, Addison-Wesley,\r\n         1998.\r\n\r\n   [11]  Johnson, D., \"NOC Internal Integrated Trouble Ticket System\r\n         Functional Specification Wishlist (\"NOC TT REQUIREMENTS\")\",\r\n         RFC 1297, January 1992.\r\n\r\n", "notes": "Here RFC 3688 should be rather Informative reference, since it provides the background information on the registry being modified.\n --VERIFIER NOTES-- \n3688 is used here to specify the registry this XML schema is to be registered in.\r\nIt's as much a normative reference as that to 2119.", "submit_date": "2011-02-23", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2729", "doc-id": "RFC6137", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "<xs:schema xmlns=\"urn:ietf:params:xml:ns:nttdm-0.1\"", "correct_text": "<xs:schema xmlns=\"urn:ietf:params:xml:ns:nttdm-1.0\"", "notes": "Please verify this errata so that IANA can then correct the XML schema in the IANA registry.\r\nThis reports a simple typo in section 6.", "submit_date": "2011-02-23", "submitter_name": "Dimitris Zisiadis", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2730", "doc-id": "RFC6045", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.  -Page 59", "orig_text": " <xs:element name=\"TrafficType\" default=\"Attack\">\r\n", "correct_text": " <xs:element name=\"TrafficType\">\r\n", "notes": "A default should not have been included for TrafficType in the schema.", "submit_date": "2011-02-23", "submitter_name": "Kathleen Moriarty", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2731", "doc-id": "RFC5272", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "Full PKI Response\r\n------------------------\r\n+----------------+\r\n| CMS ContentInfo|\r\n| CMS SignedData |\r\n|   or Auth Data |\r\n|     object     |\r\n+----------------+--------+\r\n|                         |\r\n| PKIResponseBody         |", "correct_text": "Full PKI Response\r\n------------------------\r\n+----------------+\r\n| CMS ContentInfo|\r\n| CMS SignedData |\r\n|   or Auth Data |\r\n|     object     |\r\n+----------------+--------+\r\n|                         |\r\n| PKIResponse             |", "notes": "PKIResponse should be PKIResponse.  It's the name of the content type.  PKIResponseBody only appears once in this RFC and it's in Figure 2.", "submit_date": "2011-02-23", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Tim Polk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4586", "doc-id": "RFC7697", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "9.1.  IANA Considerations for MPLS-OAM-ID-STD-MIB\r\n\r\n   IANA has to assign the OID { mplsStdMIB 21 } to the\r\n   MPLS-OAM-ID-STD-MIB module specified in this document.\r\n", "correct_text": "9.1.  IANA Considerations for MPLS-OAM-ID-STD-MIB\r\n\r\n   IANA has assigned the OID { mplsStdMIB 21 } to the\r\n   MPLS-OAM-ID-STD-MIB module specified in this document.\r\n", "notes": "Missed by RFC Editor to change from future tense \"has to assign\" to past tense \"has assigned\".", "submit_date": "2016-01-09", "submitter_name": "Venkatesan Mahalingam", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2790", "doc-id": "RFC4696", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "In Figure 1:\r\n\r\nrtp_maxptime=0; guardtime=44100; render=synthetic; rinit=\"audio/asc\";\r\n\r\nIn Figure 2:\r\n\r\nrtp_ptime=0; rtp_maxptime=0; render=synthetic; rinit=\"audio/asc\";", "correct_text": "In Figure 1:\r\n\r\nrtp_maxptime=0; guardtime=44100; render=synthetic; rinit=audio/asc;\r\n\r\nIn Figure 2:\r\n\r\nrtp_ptime=0; rtp_maxptime=0; render=synthetic; rinit=audio/asc;", "notes": "The double-quotes around audio/asc in the session descriptions shown\r\nin Figures 1 and 2 should not exist; the Corrected Text version shows the\r\nlegal syntax for rinit assigns.  This bug also appears in numerous examples\r\nin RFC 4695, an RFC that will soon be obsolete, and replaced with a new\r\nRFC whose examples also have this bug fixed (I'm an author of the\r\nRFCs).  As we are not aware of implementations that use the rinit parameter,\r\nwe do not expect interoperability concerns due to the buggy examples.", "submit_date": "2011-04-25", "submitter_name": "John Lazzaro", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4587", "doc-id": "RFC1180", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "and if it is in a network application it is called \r\na application message.", "correct_text": "and if it is in a network application it is called \r\nan application message.", "notes": "", "submit_date": "2016-01-10", "submitter_name": "Masoud Valizadeh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2735", "doc-id": "RFC4291", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "2. Due to some methods of allocating certain styles of IPv6\r\n      addresses, it will be common for addresses to contain long strings\r\n      of zero bits.  In order to make writing addresses containing zero\r\n      bits easier, a special syntax is available to compress the zeros.\r\n      The use of \"::\" indicates one or more groups of 16 bits of zeros.\r\n      The \"::\" can only appear once in an address.  The \"::\" can also be\r\n      used to compress leading or trailing zeros in an address.\r\n\r\n\r\n For example, the following addresses\r\n\r\n         2001:DB8:0:0:8:800:200C:417A   a unicast address\r\n         FF01:0:0:0:0:0:0:101           a multicast address\r\n         0:0:0:0:0:0:0:1                the loopback address\r\n         0:0:0:0:0:0:0:0                the unspecified address\r\n\r\n      may be represented as\r\n\r\n         2001:DB8::8:800:200C:417A      a unicast address\r\n         FF01::101                      a multicast address\r\n         ::1                            the loopback address\r\n         ::                             the unspecified address\r\n", "correct_text": "2. Due to some methods of allocating certain styles of IPv6\r\n      addresses, it will be common for addresses to contain long strings\r\n      of zero bits.  In order to make writing addresses containing zero\r\n      bits easier, a special syntax is available to compress the zeros.\r\n      The use of \"::\" indicates two or more groups of 16 bits of zeros.\r\n      The \"::\" can only appear once in an address.  The \"::\" can also be\r\n      used to compress leading or trailing zeros in an address.  All\r\n      compressed groups of 16 bits of zeros MUST be aligned with their\r\n      respective leading and trailing \":\".\r\n\r\n For example, the following addresses\r\n\r\n         2001:DB8:9300:0:12:0:0:417A    a unicast address\r\n         FF01:0:0:0:0:0:0:101           a multicast address\r\n         0:0:0:0:0:0:0:1                the loopback address\r\n         0:0:0:0:0:0:0:0                the unspecified address\r\n\r\n      may be represented as\r\n\r\n         2001:DB8:9300:0:12::417A       a unicast address\r\n         FF01::101                      a multicast address\r\n         ::1                            the loopback address\r\n         ::                             the unspecified address\r\n\r\n      and MUST NOT be represented as\r\n\r\n         2001:DB8:93::12:0:0:417A       an incorrect unicast address\r\n", "notes": "Errata ID: 2466 would change the text I am changing, as well.\r\n\r\nMy changed text includes the change from errata 2466 to avoid the likelyhood of human mistakes.\r\n\r\nIn case http://tools.ietf.org/html/draft-denog-v6ops-addresspartnaming becomes a RFC before this errata can be worked in, \"group of 16 bits of zeros\" should be replaced with \"$new_term of zeros\" or similar. As it looks today, $new_term will most likely end up being \"hextet\".\r\n\r\n\r\n\r\nThe current wording allows for 2001:DB8:9300:12:0:0:417A to be written as 2001:DB8:93::12:0:0:417A which is clearly wrong and against the intentions behind the relevant RFCs. While RFC 5952 puts additional constraints on compression, it still allows for the incorrect example given above.\r\n\r\nThus, alignment of 16 bit groups of zeros along \":\" is enforced specifically.\n --VERIFIER NOTES-- \nRelated to Bob Hinden's report on errata 2466:\r\n\r\nI believe that this errata should be rejected.  This was discussed on the v6ops mailing list around February 25, 2011.  I responded: \r\n\r\n http://www.ietf.org/mail-archive/web/v6ops/current/msg07741.html\r\n\r\nThe thread starts at:\r\n\r\n http://www.ietf.org/mail-archive/web/v6ops/current/msg07722.html\r\n\r\nAlso, two errata were filed based on this one (Errata ID: 2735, Errata ID: 2702) that I think should also be rejected as they assume that this errata was correct.   ", "submit_date": "2011-02-24", "submitter_name": "Richard Hartmann", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2736", "doc-id": "RFC5091", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "Last line of the algorithm:\r\n\r\n5. Let v = v_1 (mod n)", "correct_text": "5. Let v = v_2 (mod n)", "notes": "With the actual version of the RFC, the output of the algorithm 4.1.1 with the test cases input is v = 5ab5b7a6d72fa91bd01df98e29afb77f05e7b880, which doesn't correspond with the expected output.\r\n\r\nHowever, with the correction, the output is correct:\r\nv = 79317c1610c1fc018e9c53d89d59c108cd518608", "submit_date": "2011-02-27", "submitter_name": "David N\u00fa\u00f1ez (University of M\u00e1laga)", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2737", "doc-id": "RFC5091", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.2", "orig_text": "Method:\r\n...\r\n2. ...\r\n(a) If n = 1024, then let n_p = 512, n_q = 160, hashfcn =\r\n          1.3.14.3.2.26 (SHA-1 [SHA]\r\n", "correct_text": "(a) If n = 1024, then let n_p = 512, n_q = 160, hashfcn =\r\n          1.3.14.3.2.26 (SHA-1 [SHA])", "notes": "There is a missing ')'. The same typo occurs in first line of page 40.", "submit_date": "2011-02-27", "submitter_name": "David N\u00fa\u00f1ez (University of M\u00e1laga)", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2738", "doc-id": "RFC5091", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "The input n MUST \r\nbe less than 2^(hashlen), where hashlen is the number of octets \r\ncomprising the output of the hash function hashfcn. ", "correct_text": "The input n MUST \r\nbe less than 256^(hashlen), where hashlen is the number of octets \r\ncomprising the output of the hash function hashfcn.", "notes": "Since hashlen is the output size in bytes of the hash function, the correct limit is 256^hashlen.", "submit_date": "2011-02-27", "submitter_name": "David N\u00fa\u00f1ez (University of M\u00e1laga)", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2739", "doc-id": "RFC5091", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "The value of b MUST be less than \r\nor equal to the number of bytes in the output of hashfcn", "correct_text": "The value of b MUST be greater than \r\nor equal to the number of bytes in the output of hashfcn", "notes": "If b is less than or equal to hashlen, then the result of the fourth step of the algorithm would always be 1, since the division will result in a number between 0 and 1.", "submit_date": "2011-02-27", "submitter_name": "David N\u00fa\u00f1ez (University of M\u00e1laga)", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2741", "doc-id": "RFC5748", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Document Header", "orig_text": "Internet Engineering Task Force (IETF)                          J. Jeong\r\nRequest for Comments: 5748                                        H. Kim\r\nCategory: Informational                                         H. Jeong\r\nISSN: 2070-1721                                                   Y. Won\r\n                                        Korea Internet & Security Agency\r\n                                                             August 2010\r\n", "correct_text": "Internet Engineering Task Force (IETF)                           S. Yoon\r\nRequest for Comments: 5748                                      J. Jeong\r\nCategory: Informational                                           H. Kim\r\nISSN: 2070-1721                                                 H. Jeong\r\n                                                                  Y. Won\r\n                                        Korea Internet & Security Agency\r\n                                                             August 2010\r\n", "notes": "Reported by S. Yoon\r\n\r\nThe RFC Editor mistakenly removed the author's name when formatting the document to include the updated document header.\r\n\r\nThe \"Authors' Addresses\" section and related database entries are correct.", "submit_date": "2011-03-04", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2742", "doc-id": "RFC2028", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "  [F] IANA Charter, Work in Progress.\r\n\r\n  [G] RFC Editor Charter, Work in Progress.", "correct_text": "  [F] Carpenter, B., Baker, F., and M. Roberts, \"Memorandum of Understanding \r\n      Concerning the Technical Work of the Internet Assigned Numbers Authority\", \r\n      RFC 2860, June 2000.\r\n\r\n  [G] Daigle, L., Ed., and Internet Architecture Board, \"The RFC Series and\r\n      RFC Editor\", RFC 4844, July 2007.", "notes": "\n --VERIFIER NOTES-- \n   These documents were not yet complete at the time RFC 2028 was written.", "submit_date": "2011-03-05", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2743", "doc-id": "RFC6150", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1 .. 9", "orig_text": "MD2 to Historic Status ", "correct_text": "MD4 to Historic Status ", "notes": "The abbreviated title on all pages should say \"MD4\"; RFC 6150 is about MD4 (RFC 1320). A very similar document (RFC-to-be 6149) simultaneously obsoleted MD2 (RFC 1319).", "submit_date": "2011-03-07", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4423", "doc-id": "RFC6564", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "   Any IPv6 extension headers defined in the future, keeping in mind the\r\n   restrictions specified in Section 3 and also the restrictions\r\n   specified in [RFC2460], MUST use the consistent format defined in\r\n   Figure 1.  This minimizes breakage in intermediate nodes that examine\r\n   these extension headers.", "correct_text": "There's a bug in the logic of this document. Essentially:\r\n\r\n   A key problem with the Uniform Format for IPv6 Extension Headers\r\n   [RFC6564] lies in that both IPv6 Extension Headers and Transport\r\n   Protocols share the same namespace (\"Next Header\" registry/\r\n   namespace).  Thus, given an \"unknown Next Header value\", it is\r\n   impossible to tell whether the aforementioned value refers to an IPv6\r\n   Extension Header that employs the aforementioned uniform format, or\r\n   an \"unknown\" upper-layer protocol (e.g. an \"unknown\" transport\r\n   protocol).  That is, while [RFC6564] specifies the syntax for the\r\n   Uniform Format for IPv6 Extension Headers, but it does not provide a\r\n   mechanism for a node to identify whether the aforementioned format is\r\n   being employed in the first place.\r\n\r\nThis problem is discussed in: draft-gont-6man-rfc6564bis.", "notes": "The problem is not specifically with Section 5, but rather with the logic in the document.\n --VERIFIER NOTES-- \nThe changes proposed go beyond the level of an erratum. The issue should be discussed within the 6MAN working group and a revision of 6564 published if there is consensus to do so.", "submit_date": "2015-07-20", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2744", "doc-id": "RFC6149", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9", "orig_text": "9. Informative References\r\n\r\n   [HASH-Attack] Hoffman, P. and B. Schneier, \"Attacks on Cryptographic\r\n                 Hashes in Internet Protocols\", RFC 4270, November 2005.\r\n\r\n   [KMM2010]     Knudsen, L., Mathiassen, J., Muller, F., and Thomsen,\r\n                 S., \"Cryptanalysis of MD2\", Journal of Cryptology,\r\n                 23(1):72-90, 2010.\r\n\r\n   [KNMA2005]    Knudsen, L., and J. Mathiassen, \"Preimage and Collision\r\n                 Attacks on MD2\", FSE 2005.\r\n\r\n   [MD2]         Kaliski, B., \"The MD2 Message-Digest Algorithm\", RFC\r\n                 1319, April 1992.\r\n", "correct_text": "9. References\r\n\r\n9.1. Normative References\r\n\r\n   [MD2]         Kaliski, B., \"The MD2 Message-Digest Algorithm\", RFC\r\n                 1319, April 1992.\r\n\r\n9.2. Informative References\r\n\r\n   [HASH-Attack] Hoffman, P. and B. Schneier, \"Attacks on Cryptographic\r\n                 Hashes in Internet Protocols\", RFC 4270, November 2005.\r\n\r\n   [KMM2010]     Knudsen, L., Mathiassen, J., Muller, F., and Thomsen,\r\n                 S., \"Cryptanalysis of MD2\", Journal of Cryptology,\r\n                 23(1):72-90, 2010.\r\n\r\n   [KNMA2005]    Knudsen, L., and J. Mathiassen, \"Preimage and Collision\r\n                 Attacks on MD2\", FSE 2005.\r\n", "notes": "\n --VERIFIER NOTES-- \n   ", "submit_date": "2011-03-07", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2745", "doc-id": "RFC6143", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "11", "orig_text": "11. References\r\n\r\n11.1. Normative References\r\n\r\n   [RFC1950]  Deutsch, L. and J-L. Gailly, \"ZLIB Compressed Data Format\r\n              Specification version 3.3\", RFC 1950, May 1996.\r\n\r\n   [RFC1951]  Deutsch, P., \"DEFLATE Compressed Data Format Specification\r\n              version 1.3\", RFC 1951, May 1996.\r\n\r\n   [XLIBREF]  Nye, A., \"XLIB Reference Manual R5\", June 1994.\r\n\r\n11.2. Informative References\r\n\r\n   [RFC4254]  Ylonen, T. and C. Lonvick, \"The Secure Shell (SSH)\r\n              Connection Protocol\", RFC 4254, January 2006.\r\n\r\n   [RFC4301]  Kent, S. and K. Seo, \"Security Architecture for the\r\n              Internet Protocol\", RFC 4301, December 2005.\r\n\r\n   [RFC5226]  Narten, T. and H. Alvestrand, \"Guidelines for Writing an\r\n              IANA Considerations Section in RFCs\", BCP 26, RFC 5226,\r\n              May 2008.\r\n", "correct_text": "11. References\r\n\r\n11.1. Normative References\r\n\r\n   [RFC1950]  Deutsch, L. and J-L. Gailly, \"ZLIB Compressed Data Format\r\n              Specification version 3.3\", RFC 1950, May 1996.\r\n\r\n   [RFC1951]  Deutsch, P., \"DEFLATE Compressed Data Format Specification\r\n              version 1.3\", RFC 1951, May 1996.\r\n\r\n   [RFC5226]  Narten, T. and H. Alvestrand, \"Guidelines for Writing an\r\n              IANA Considerations Section in RFCs\", BCP 26, RFC 5226,\r\n              May 2008.\r\n\r\n   [XLIBREF]  Nye, A., \"XLIB Reference Manual R5\", June 1994.\r\n\r\n11.2. Informative References\r\n\r\n   [RFC4254]  Ylonen, T. and C. Lonvick, \"The Secure Shell (SSH)\r\n              Connection Protocol\", RFC 4254, January 2006.\r\n\r\n   [RFC4301]  Kent, S. and K. Seo, \"Security Architecture for the\r\n              Internet Protocol\", RFC 4301, December 2005.\r\n\r\n", "notes": "\n --VERIFIER NOTES-- \n", "submit_date": "2011-03-07", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8694", "doc-id": "RFC2217", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "            Client to Access Server   Access Server to Client \r\nSIGNATURE            text                      text   \r\nSET-BAUDRATE            1                      101    \r\nSET-DATASIZE            2                      102    \r\n", "correct_text": "            Client to Access Server   Access Server to Client \r\nSIGNATURE               0                      100   \r\nSET-BAUDRATE            1                      101    \r\nSET-DATASIZE            2                      102    \r\n", "notes": "The full SIGNATURE command is specified as:\r\nIAC SB COM-PORT-OPTION SIGNATURE <text> IAC SE\r\n\r\nI.e. \"SIGNATURE\" must be a valid integer value and not \"text\".\r\nIt seems likely that this should have been 0 (Client to Access Server) and 100 (Access Server to Client).\r\n\r\nAt least one vendor understood and implemented it that way:\r\nhttps://www.hw-group.com/files/download/protocol/version/nvt_1-0-0.pdf", "submit_date": "2026-01-05", "submitter_name": "J\u00f6rn Heissler", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "4303", "doc-id": "RFC6545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2.", "orig_text": "Therefore, MsgDestination is set to\r\n   'InvestigationRequest' for the Request message and is included in the\r\n   diagram below as \"Investigation\".", "correct_text": "Therefore, MsgType is set to\r\n   'InvestigationRequest' for the Request message and is included in the\r\n   diagram below as \"Investigation\".", "notes": "MsgDestination should be changed to MsgType, as in the example.\r\n\r\n<iodef-rid:RIDPolicy MsgType=\"InvestigationRequest\"\r\n                     MsgDestination=\"SourceOfIncident\">\r\n", "submit_date": "2015-03-15", "submitter_name": "Vincent", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4304", "doc-id": "RFC7052", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   lispEidRegistrationLastRegisterSenderLength OBJECT-TYPE\r\n       SYNTAX     Integer32 (5..39)\r\n       MAX-ACCESS read-only\r\n", "correct_text": "   lispEidRegistrationLastRegisterSenderLength OBJECT-TYPE\r\n       SYNTAX     Integer32 (0..39)\r\n       MAX-ACCESS read-only\r\n", "notes": "The lispEidRegistrationLastRegisterSender is the only use of the LispAddressType in a readable attribute. In order to be able to encode an unspecified address, the minimum length must be lowered to zero. For more information see errata 4256.", "submit_date": "2015-03-17", "submitter_name": "Isidor Kouvelas", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4305", "doc-id": "RFC4862", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "   o  Clarified that on failure of Duplicate Address Detection, IP\r\n      network operation should be disabled and that the rule should\r\n      apply when the hardware address is supposed to be unique.\r\n", "correct_text": "o  Clarified that on failure of Duplicate Address Detection, IP\r\n   network operation for the interface should be disabled if and \r\n   only if:\r\n   - the duplicate check is performed on the IP link-local address,\r\n   - the link-local address is based on an EUI-64 or other hardware \r\n     address, and\r\n   - the hardware address is supposed to be unique on the link.\r\n\r\n\r\n", "notes": "", "submit_date": "2015-03-17", "submitter_name": "Erik Nordmark", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4318", "doc-id": "RFC1459", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.3", "orig_text": "There are two types of channels allowed by this protocol.  One is a\r\ndistributed channel which is known to all the servers that are\r\nconnected to the network. These channels are marked by the first\r\ncharacter being a only clients on the server where it exists may join\r\nit.  These are distinguished by a leading '&' character.", "correct_text": "There are two types of channels allowed by this protocol.  One is a\r\ndistributed channel, which is known to all the servers that are\r\nconnected to the network. These channels are marked by the first\r\ncharacter being a '#'.  The other type of channel is limited to one\r\nserver, and only clients on the server where it exists may join\r\nit.  These channels are distinguished by a leading '&' character.", "notes": "There is a missing chunk of text between \"being a\" and \"only clients\".", "submit_date": "2015-03-31", "submitter_name": "Lucas Satabin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4319", "doc-id": "RFC5201", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   HIP implementations MUST support the Rivest Shamir Adelman (RSA/SHA1)\r\n", "correct_text": "   HIP implementations MUST support the Rivest Shamir Adleman (RSA/SHA1)\r\n", "notes": "Misspelling of one of the inventors' names.", "submit_date": "2015-03-31", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2746", "doc-id": "RFC5717", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "   Step 6 - Lock user Joe\r\n\r\n   <nc:rpc\r\n     xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n     xmlns=\"urn:ietf:params:xml:ns:netconf:partial-lock:1.0\"\r\n         message-id=\"104\">\r\n     <partial-lock>\r\n       <select xmlns:usr=\"http://example.com/users\">\r\n         /usr:top/usr:users/user[usr:name=\"Joe\"]\"\r\n       </select>\r\n     </partial-lock>\r\n   </nc:rpc>\r\n\r\n   The NETCONF server grants the partial lock.  The scope of this second\r\n   lock includes only the <user> node with name Joe.  The lock protects\r\n   all data below this particular <user> node.\r\n\r\n   Step 7 - Receive lock\r\n\r\n   <nc:rpc-reply\r\n     xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n     xmlns=\"urn:ietf:params:xml:ns:netconf:partial-lock:1.0\"\r\n     message-id=\"104\">\r\n       <lock-id>2</lock-id>\r\n       <locked-node xmlns:usr=\"http://example.com/users\">\r\n           /usr:top/usr:users/user[usr:name=\"Joe\"]\"\r\n       </locked-node>\r\n   </nc:rpc-reply>\r\n", "correct_text": "   Step 6 - Lock user Joe\r\n\r\n   <nc:rpc\r\n     xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n     xmlns=\"urn:ietf:params:xml:ns:netconf:partial-lock:1.0\"\r\n         message-id=\"104\">\r\n     <partial-lock>\r\n        <select xmlns:usr=\"http://example.com/users\">\r\n          /usr:top/usr:users/usr:user[usr:name=\"Joe\"]\r\n        </select>\r\n     </partial-lock>\r\n   </nc:rpc>\r\n\r\n   The NETCONF server grants the partial lock.  The scope of this second\r\n   lock includes only the <user> node with name Joe.  The lock protects\r\n   all data below this particular <user> node.\r\n\r\n   Step 7 - Receive lock\r\n\r\n   <nc:rpc-reply\r\n     xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n     xmlns=\"urn:ietf:params:xml:ns:netconf:partial-lock:1.0\"\r\n     message-id=\"104\">\r\n       <lock-id>2</lock-id>\r\n        <locked-node xmlns:usr=\"http://example.com/users\">\r\n            /usr:top/usr:users/usr:user[usr:name=\"Joe\"]\r\n        </locked-node>\r\n   </nc:rpc-reply>\r\n", "notes": "- Appendix C is non-normative.\r\n- The instance identifier: /usr:top/usr:users/user[usr:name=\"Joe\"]\" \r\nmust be replaced with:     /usr:top/usr:users/usr:user[usr:name=\"Joe\"]", "submit_date": "2011-03-09", "submitter_name": "Mehmet Ersue", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2749", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": " NOTE BENE:  this diagram is only a summary and must not be taken as\r\n the total specification.\r\n\r\n", "correct_text": " NOTA BENE:  this diagram is only a summary and must not be taken as\r\n the total specification.\r\n\r\n", "notes": "The Latin phrase is correctly written 'Nota bene', but not 'Note bene'.", "submit_date": "2011-03-13", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2750", "doc-id": "RFC6056", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "3.3.1.  Algorithm 1: Simple Port Randomization Algorithm\r\n\r\n-           if(check_suitable_port(port))\r\n\r\n3.3.2.  Algorithm 2: Another Simple Port Randomization Algorithm\r\n\r\n-           if(check_suitable_port(port))", "correct_text": "3.3.1.  Algorithm 1: Simple Port Randomization Algorithm\r\n\r\n+           if(check_suitable_port(next_ephemeral))\r\n\r\n3.3.2.  Algorithm 2: Another Simple Port Randomization Algorithm\r\n\r\n+           if(check_suitable_port(next_ephemeral))", "notes": "For neither Algorithm 1 or 2 the pseudo code defines \"port\" as a valid variable.\r\nThe variable passed to check_suitable_port() should be \"next_ephemeral\" in these cases.\r\nIt looks like a copy and paste error. The technical meaning is still clear.", "submit_date": "2011-03-13", "submitter_name": "Bjoern A. Zeeb", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2751", "doc-id": "RFC5661", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "12.5.4.1.  LAYOUTCOMMIT and change/time_modify\r\nbecomes\r\n12.5.4.2.  LAYOUTCOMMIT and change/time_modify\r\n\r\n\r\n12.5.4.2.  LAYOUTCOMMIT and size\r\nbecomes\r\n12.5.4.3.  LAYOUTCOMMIT and size\r\n\r\n\r\n12.5.4.3.  LAYOUTCOMMIT and layoutupdate\r\nbecomes\r\n12.5.4.4.  LAYOUTCOMMIT and layoutupdate\r\n\r\n\r\nAdd new Section \r\n12.5.4.1 Implications of LAYOUTCOMMIT on file layouts\r\nFor file layouts, WRITEs to a Data Server that return a stable_how4 value of \r\nFILE_SYNC4 guarantee that data and file system metadata are on stable \r\nstorage.  This means that a LAYOUTCOMMIT is not needed in order to make the \r\ndata and metadata visible to the metadata server and other clients.\r\n\r\nFor file layouts, when WRITE to the data server returns UNSTABLE4 or \r\nDATA_SYNC4  and the NFL4_UFLG_COMMIT_THRU_MDS flag is set, the client MUST \r\nsend the COMMIT to the metadata server.  A successful COMMIT to the metadata \r\nserver guarantees that data and file system metadata are on stable storage.  \r\nTherefore, any time that NFS4_UFLG_COMMIT_THRU_MDS is set, a LAYOUTCOMMIT (of \r\nthe byte range specified by the layout) is not needed.\r\n\r\nFor file layouts, when NFL4_UFLG_COMMIT_THRU_MDS flag is not set, and WRITE or \r\nCOMMIT to the data server return DATA_SYNC4, the client MUST send the \r\nLAYOUTCOMMIT to the metadata server in order to synchronize file metadata.  \r\n\r\nThe following table summarizes the rules when a LAYOUTCOMMIT is needed, and \r\nthe effects of a COMMIT to a data server and metadata server.  \r\n\r\n+------------+------------+------------+------------+----------+\r\n| NFL4_UFLG_ | WRITE to   | Meaning of | Meaning    | LAYOUT   |\r\n| COMMIT_    | DS returns | COMMIT to  | of COMMIT  | COMMIT   | \r\n| THRU_MDS   |            | DS         | to MDS     | required |            \r\n+------------+------------+------------+------------+----------+\r\n| Not Set    | UNSTABLE4  | DATA_SYNC4 | Nothing    | Yes      |\r\n| Not Set    | DATA_SYNC4 | Nothing    | Nothing    | Yes      |\r\n| Not Set    | FILE_SYNC4 | Nothing    | Nothing    | NO       |\r\n| Set        | UNSTABLE4  | Nothing    | FILE_SYNC4 | NO       |\r\n| Set        | DATA_SYNC4 | Nothing    | FILE_SYNC4 | NO       |\r\n| Set        | FILE_SYNC4 | Nothing    | Nothing    | NO       |\r\n+------------+------------+------------+------------+----------+\r\n\r\nNote that a client can always demand FILE_SYNC4 or DATA_SYNC4 in WRITE's \r\narguments.  Also note that specifying these stability levels may adversely \r\nimpact performance.\r\n\r\nIf a LAYOUTCOMMIT is required, it should be sent before CLOSE to maintain \r\nclose-to-open semantics.  If required, it should be sent before LOCKU, \r\nOPEN_DOWNGRADE, LAYOUTRETURN, and when the application issues fsync() [25].  \r\nAgain, if LAYOUTCOMMIT is required, it should be sent periodically to keep the \r\nfile size and modification time synchronized.  This allows use cases like \r\ntail -f [56] which copies its input file to the standard output and updates \r\nthe output as new lines become available in the input file.  It is up to the \r\nclient implementation to determine how frequently LAYOUTCOMMIT is issued.  \r\nPossible policies include every N'th COMMIT to a data server, every N'th unit \r\nof time, or after writing a stripe to a set of data servers.\r\n\r\nEven if a required LAYOUTCOMMIT is not issued by the client, the data server \r\nand metadata servers have a set of responsibilities to fulfill in order to \r\nguarantee data consistency:\r\n1) Data servers MUST commit data and synchronize modification and size \r\nattributes with the metadata server before a layout is revoked as described in \r\nsection 12.5.4.\r\n2) Data servers SHOULD commit data and synchronize modification and size \r\nattributes with the metadata server after the metadata server reboots.  In \r\ntheory the client should commit the data, but this avoids the problem where \r\nboth the client and metadata server crash at the same time.\r\n3) The metadata server MAY periodically poll data servers to synchronize \r\nmodification and size attributes.\r\n\r\n\r\nSection 13.9.2.3 says:\r\n   For the NFSv4.1-based data storage protocol, it is  necessary to re-\r\nsynchronize state such as the size attribute, and  the setting of \r\nmtime/change/atime.\r\n\r\nShould say:\r\n   For the NFSv4.1-based data storage protocol, it may be necessary to re-\r\nsynchronize state such as the size attribute, and the setting of \r\nmtime/change/atime.\r\n\r\n\r\nSection 13.10 says:\r\n   For the case above, this means that a LAYOUTCOMMIT will be done at close \r\n(along with the data WRITEs) and will update the file's size and change \r\nattribute.\r\n\r\nShould say:\r\n   For the case above, this means that, if necessary, a LAYOUTCOMMIT will be \r\ndone at close (along with the data WRITEs) and will update the file's size and \r\nchange attribute.\r\n\r\n\r\nSection 18.3.4 says:\r\n   The COMMIT operation is similar in operation and semantics to the POSIX \r\nfsync() [25] system interface that synchronizes a file's state with the disk \r\n(file data and metadata is flushed to disk or stable storage).  COMMIT \r\nperforms the same operation for a client, flushing any unsynchronized data and \r\nmetadata on the server to the server's disk or stable storage for the \r\nspecified file.\r\n\r\nShould say:\r\n   The COMMIT operation is similar in operation and semantics to the POSIX \r\nfsync() [25] system interface that synchronizes a file's state with the disk \r\n(file data and metadata is flushed to disk or stable storage).  COMMIT \r\nperforms the same operation for a client, flushing any unsynchronized data and \r\nmetadata on the server to the server's disk or stable storage for the \r\nspecified file.  When using pNFS, if a WRITE returned UNSTABLE4 and \r\nNFL4_UFLG_COMMIT_THRU_MDS is not set, then the client MUST COMMIT to the data \r\nserver.  The COMMIT may result in flushing the data but not the metadata.  In \r\nthis case, the metadata MUST be flushed with a subsequent LAYOUTCOMMIT to the \r\nmetadata server.  A complete set of pNFS rules for flushing data and metadata \r\nis described in section 12.5.4.1.\r\n\r\n\r\nSection 18.3.4 says:\r\n   The above description applies to page-cache-based systems as well as buffer-\r\ncache-based systems.  In the former systems, the virtual memory system will \r\nneed to be modified instead of the buffer cache.\r\n\r\nShould say:\r\n   The above description applies to page-cache-based systems as well as buffer-\r\ncache-based systems.  In the former systems, the virtual memory system will \r\nneed to be modified instead of the buffer cache.\r\n\r\n   Refer to Section 12.5.4.1 for a discussion of the effects of data stability \r\nlevels on data servers or metadata servers.\r\n\r\n\r\nSection 18.32.4 says:\r\n   However, since it is possible for a WRITE to be done with a special \r\nstateid, the server needs to check for this case even though the client should \r\nhave done an OPEN previously.\r\n\r\nShould say:\r\n   However, since it is possible for a WRITE to be done with a special \r\nstateid, the server needs to check for this case even though the client should \r\nhave done an OPEN previously.\r\n\r\n   Refer to Section 12.5.4.1 for a discussion of the effects of data stability \r\nlevels on data servers or metadata servers.\r\n\r\n\r\nSection 20.3.4 says:\r\n   In the case of modified data being written while the layout is held, the \r\nclient must use LAYOUTCOMMIT operations at the appropriate time; as required \r\nLAYOUTCOMMIT must be done before the LAYOUTRETURN.\r\n\r\nShould say:\r\n   In the case of modified data being written while the layout is held, the \r\nclient may be required to use LAYOUTCOMMIT operations at the appropriate time; \r\nif LAYOUTCOMMIT is required, it must be done before the LAYOUTRETURN.\r\n\r\n\r\nAdd new informative reference to Section 23.2\r\n[56] The Open Group, \"section 'tail' of The Open Group Base Specifications \r\nIssue 6 IEEE Std 1003.1, 2004 Edition, HTML Version (www.opengroup.org), \r\nISBN 1931624453, 2004.\r\n\r\n", "notes": "A new section describing the implications of LAYOUTCOMMIT on file layouts is \r\ndefined in this errata, along with updates to existing sections of the spec.  \r\nThe technical details in this errata were agreed upon at the IETF Interim \r\nMeeting in Sunnyvale, CA on Feb 18-19, 2011.\n --VERIFIER NOTES-- \n This errata was rejected based on formal process grounds that Errata is not allowed to change the WG consensus at the time of publication, and also is very extensive. This issue do need to be addressed in an update to the RFC. ", "submit_date": "2011-03-21", "submitter_name": "Ricardo Labiaga", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:26:44"}, {"errata_id": "2752", "doc-id": "RFC4509", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "RFC header", "orig_text": "", "correct_text": "Updates: 4035", "notes": "This document should update RFC 4035 because the statement in section 3, \"Validator implementations SHOULD ignore DS RRs containing SHA-1 digests if DS RRs with SHA-256 digests are present in the DS RRset\", modifies the rules for authenticating referrals in RFC 4035 section 5.2.", "submit_date": "2011-03-23", "submitter_name": "Matt McCutchen", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2753", "doc-id": "RFC2626", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "3.6 \"Network News\"\r\n\r\n\r\n   There does exist a problem in both NNTP, RFC 977, and the Usenet News\r\n   Message Format, RFC 10336.  They both specify two-digit year format.\r\n   A working group has been formed to update the network news protocols\r\n   in general, and addressing this problem is on their list of work\r\n   items.\r\n", "correct_text": "3.6 \"Network News\"\r\n\r\n\r\n   There does exist a problem in both NNTP, RFC 977, and the Usenet News\r\n   Message Format, RFC 1036.  They both specify two-digit year format.\r\n   A working group has been formed to update the network news protocols\r\n   in general, and addressing this problem is on their list of work\r\n   items.\r\n", "notes": "s/RFC 10336/RFC 1036", "submit_date": "2011-03-25", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4547", "doc-id": "RFC3986", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.4.2", "orig_text": "5.4.2.  Abnormal Examples\r\n\r\n   Although the following abnormal examples are unlikely to occur in\r\n   normal practice, all URI parsers should be capable of resolving them\r\n   consistently.  Each example uses the same base as that above.\r\n\r\n   Parsers must be careful in handling cases where there are more \"..\"\r\n   segments in a relative-path reference than there are hierarchical\r\n   levels in the base URI's path.  Note that the \"..\" syntax cannot be\r\n   used to change the authority component of a URI.\r\n\r\n      \"../../../g\"    =  \"http://a/g\"\r\n      \"../../../../g\" =  \"http://a/g\"\r\n", "correct_text": "5.4.2.  Abnormal Examples\r\n\r\n   Although the following abnormal examples are unlikely to occur in\r\n   normal practice, all URI parsers should be capable of resolving them\r\n   consistently.  Each example uses the same base as that above.\r\n\r\n   Parsers must be careful in handling cases where there are more \"..\"\r\n   segments in a relative-path reference than there are hierarchical\r\n   levels in the base URI's path.  Note that the \"..\" syntax cannot be\r\n   used to change the authority component of a URI.\r\n\r\n      \"../../../g\"    =  \"http://a/../g\"\r\n      \"../../../../g\" =  \"http://a/../../g\"\r\n", "notes": "The example which was taken from RFC 1808 had proper resolved URL ( 5.2 ).\r\n\r\nAs the base URL has two levels ( http://a/b/c/ ) and if the relative url's have two \"..\" segments then from the resolved URI both the hierarchical levels can be removed to form the resolved URL, as below:\r\n\r\n../../g    = http://a/g \r\n\r\nand if there are more \"..\" segments than hierarchical level in base URI's path... then the number of \"..\" segments that doesn't have corresponding segments in base URI should be left as is in the resolved URI,  like below\r\n\r\n\"../../../g\" = \"http://a/../g\"", "submit_date": "2015-12-01", "submitter_name": "siva elango ramaswamy", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 20:25:42"}, {"errata_id": "4320", "doc-id": "RFC4423", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   | pair         | public and private keys.  For example,             |\r\n   |              | Rivest-Shamir-Adelman (RSA) and Digital Signature  |\r\n   |              | Algorithm (DSA) key pairs are such key pairs.      |\r\n", "correct_text": "   | pair         | public and private keys.  For example,             |\r\n   |              | Rivest-Shamir-Adleman (RSA) and Digital Signature  |\r\n   |              | Algorithm (DSA) key pairs are such key pairs.      |\r\n", "notes": "Misspelling of one of the inventors' names.", "submit_date": "2015-03-31", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2754", "doc-id": "RFC2626", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2; 5.1; 6", "orig_text": "{1 - Section 2}\r\n\r\n[...] It should also be noted that the research was performd on RFCs 1\r\n   through 2128.  At that time the IESG was charted with not allowing [...]\r\n\r\n\r\n{2 - Section 5.1}\r\n\r\n5.1 Fixed Solution\r\n\r\n   A number of organizations and groups have suggested a fixed solution\r\n   to the problem of two digit years.  Given a two-digit year YY, if YY\r\n   is greater than or equal to 50, the year shall be interpreted as\r\n   19YY; and where YY is less than 50, the year shall be intrepreted as\r\n   20YY.\r\n\r\n\r\n{3 - Section 6}\r\n\r\n6. Methodology\r\n\r\n   The first task was dividing the types of RFC's into logical groups\r\n   rather than the strict numeric publishing order.  Sixteen specific\r\n   areas were identified.  They are: \"Autoconfiguration\" , \"Directory\r\n   Services\", \"Disk Sharing\", \"Games and Chat\" ,\"Information Services &\r\n   File Transfer\", \"Network & Transport Layer\", \"Electronic Mail\",\r\n   \"NTP\", Name Serving\", \"Network Management\", \"News\", \"Real Time\r\n   Services\", \"Routing\", \"Security\", \"Virtual Terminal\", and \"Other\".\r\n   In addition to these categories, many hundreds of RFC's were\r\n   immediately eliminated based on content.  That is not to say that all\r\n   Informational RFC's were not considered, many did contain some\r\n   technical content or overview whichdemanded scrutiny.\r\n\r\n", "correct_text": "{1 - Section 2}\r\n\r\n[...] It should also be noted that the research was performed on RFCs 1\r\n   through 2128.  At that time the IESG was charted with not allowing [...]\r\n\r\n\r\n{2 - Section 5.1}\r\n\r\n5.1 Fixed Solution\r\n\r\n   A number of organizations and groups have suggested a fixed solution\r\n   to the problem of two digit years.  Given a two-digit year YY, if YY\r\n   is greater than or equal to 50, the year shall be interpreted as\r\n   19YY; and where YY is less than 50, the year shall be interpreted as\r\n   20YY.\r\n\r\n\r\n{3 - Section 6}\r\n\r\n6. Methodology\r\n\r\n   The first task was dividing the types of RFC's into logical groups\r\n   rather than the strict numeric publishing order.  Sixteen specific\r\n   areas were identified.  They are: \"Autoconfiguration\" , \"Directory\r\n   Services\", \"Disk Sharing\", \"Games and Chat\" ,\"Information Services &\r\n   File Transfer\", \"Network & Transport Layer\", \"Electronic Mail\",\r\n   \"NTP\", Name Serving\", \"Network Management\", \"News\", \"Real Time\r\n   Services\", \"Routing\", \"Security\", \"Virtual Terminal\", and \"Other\".\r\n   In addition to these categories, many hundreds of RFC's were\r\n   immediately eliminated based on content.  That is not to say that all\r\n   Informational RFC's were not considered, many did contain some\r\n   technical content or overview which demanded scrutiny.\r\n\r\n", "notes": "{1} A typo in \"performed\".\r\n{2} A typo in \"interpreted\".\r\n{3} A typo in \"which demanded\".", "submit_date": "2011-03-25", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2755", "doc-id": "RFC2626", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.1; 12.2", "orig_text": "{1 - Section 12.1}\r\n\r\n12.1 Summary\r\n\r\n   The RFC's which were categorized into this group were the Internet\r\n   Protocol (IP) versions four and six, the Transmission Control\r\n   Protocol (TCP), the User Datagram Protocol (UDP), the Point-to-Point\r\n   Protocol (PPP) and its extensions, Internet Control Message Protocol\r\n   (ICMP), the Address Resolution Protocol (ARP) and Remote Procedure\r\n   Call (RPC) protocol.  A variety of less known protocols were also\r\n   examined.\r\n\r\n   After careful review of the nearly 400 RFC's in this catagory, no\r\n   millennium or year 2000 problems were found.\r\n\r\n\r\n{2 - Section 12.2}\r\n\r\n   [...]\r\n\r\n   RFC 2097 on the PPP NetBIOS Frame Control Protocol discuesses several\r\n   timer and timeouts in Section 2.1, none of which suffers from a year\r\n   2000 problem.\r\n\r\n   [...]\r\n\r\n   RFC 791 on the Internet Protocol defines a packet type 68 which is an\r\n   Internet Timestamp, which defines a 32-bit field which contains the\r\n   number of milliseconds since midnght UT.", "correct_text": "{1 - Section 12.1}\r\n\r\n12.1 Summary\r\n\r\n   The RFC's which were categorized into this group were the Internet\r\n   Protocol (IP) versions four and six, the Transmission Control\r\n   Protocol (TCP), the User Datagram Protocol (UDP), the Point-to-Point\r\n   Protocol (PPP) and its extensions, Internet Control Message Protocol\r\n   (ICMP), the Address Resolution Protocol (ARP) and Remote Procedure\r\n   Call (RPC) protocol.  A variety of less known protocols were also\r\n   examined.\r\n\r\n   After careful review of the nearly 400 RFC's in this category, no\r\n   millennium or year 2000 problems were found.\r\n\r\n\r\n{2 - Section 12.2}\r\n\r\n   [...]\r\n\r\n   RFC 2097 on the PPP NetBIOS Frame Control Protocol discusses several\r\n   timer and timeouts in Section 2.1, none of which suffers from a year\r\n   2000 problem.\r\n\r\n   [...]\r\n\r\n   RFC 791 on the Internet Protocol defines a packet type 68 which is an\r\n   Internet Timestamp, which defines a 32-bit field which contains the\r\n   number of milliseconds since midnight UT.", "notes": "{1} A typo in \"category\".\r\n{2} 1) A typo in \"discusses\";\r\n    2) A typo in \"midnight\".", "submit_date": "2011-03-25", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2756", "doc-id": "RFC6196", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "mailserver: URI Scheme", "correct_text": "'mailserver' URI Scheme", "notes": "The \":\" (colon) character is not a part of URI scheme name.  RFC 3986 says:\r\n\r\n URI           = scheme \":\" hier-part [ \"?\" query ] [ \"#\" fragment ]\r\n scheme        = ALPHA *( ALPHA / DIGIT / \"+\" / \"-\" / \".\" )\r\n\r\ni. e. \":\" is a delimiter between scheme name and the remainder of URI.", "submit_date": "2011-03-25", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2757", "doc-id": "RFC3416", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "PDU ::= SEQUENCE {\r\n           request-id INTEGER (-214783648..214783647),\r\n\r\n           error-status                -- sometimes ignored\r\n               INTEGER {\r\n                   noError(0),\r\n                   tooBig(1),\r\n                   noSuchName(2),      -- for proxy compatibility\r\n                   badValue(3),        -- for proxy compatibility\r\n                   readOnly(4),        -- for proxy compatibility\r\n                   genErr(5),\r\n                   noAccess(6),\r\n                   wrongType(7),\r\n                   wrongLength(8),\r\n                   wrongEncoding(9),\r\n                   wrongValue(10),\r\n                   noCreation(11),\r\n                   inconsistentValue(12),\r\n                   resourceUnavailable(13),\r\n                   commitFailed(14),\r\n                   undoFailed(15),\r\n                   authorizationError(16),\r\n                   notWritable(17),\r\n                   inconsistentName(18)\r\n               },\r\n\r\n           error-index                 -- sometimes ignored\r\n               INTEGER (0..max-bindings),\r\n\r\n           variable-bindings           -- values are sometimes ignored\r\n               VarBindList\r\n       }\r\n\r\n   BulkPDU ::=                         -- must be identical in\r\n       SEQUENCE {                      -- structure to PDU\r\n           request-id      INTEGER (-214783648..214783647),\r\n           non-repeaters   INTEGER (0..max-bindings),\r\n           max-repetitions INTEGER (0..max-bindings),\r\n\r\n           variable-bindings           -- values are ignored\r\n               VarBindList\r\n       }", "correct_text": "PDU ::= SEQUENCE {\r\n           request-id INTEGER (-2147483648..2147483647),\r\n           error-status                -- sometimes ignored\r\n               INTEGER {\r\n                   noError(0),\r\n                   tooBig(1),\r\n                   noSuchName(2),      -- for proxy compatibility\r\n                   badValue(3),        -- for proxy compatibility\r\n                   readOnly(4),        -- for proxy compatibility\r\n                   genErr(5),\r\n                   noAccess(6),\r\n                   wrongType(7),\r\n                   wrongLength(8),\r\n                   wrongEncoding(9),\r\n                   wrongValue(10),\r\n                   noCreation(11),\r\n                   inconsistentValue(12),\r\n                   resourceUnavailable(13),\r\n                   commitFailed(14),\r\n                   undoFailed(15),\r\n                   authorizationError(16),\r\n                   notWritable(17),\r\n                   inconsistentName(18)\r\n               },\r\n\r\n           error-index                 -- sometimes ignored\r\n               INTEGER (0..max-bindings),\r\n\r\n           variable-bindings           -- values are sometimes ignored\r\n               VarBindList\r\n       }\r\n\r\n   BulkPDU ::=                         -- must be identical in\r\n       SEQUENCE {                      -- structure to PDU\r\n           request-id      INTEGER (-2147483648..2147483647),\r\n           non-repeaters   INTEGER (0..max-bindings),\r\n           max-repetitions INTEGER (0..max-bindings),\r\n\r\n           variable-bindings           -- values are ignored\r\n               VarBindList\r\n       }", "notes": "Consider the following dump as a Response to a Get Request:\r\n\r\nReceived 125 bytes from UDP: [127.0.0.1]:161->[0.0.0.0]\r\n0000: 30 7B 02 01  03 30 11 02  04 5B 70 9B  75 02 03 00    0{...0...[p.u...\r\n0016: FF E3 04 01  01 02 01 03  04 2E 30 2C  04 0D 80 00    ..........0,....\r\n0032: 1F 88 80 82  0B 53 2D 67  01 8A 4D 02  01 01 02 03    .....S-g..M.....\r\n0048: 02 7B 92 04  03 77 65 73  04 0C DF 8B  2A FE 4A C5    .{...wes....*.J.\r\n0064: 4C 33 63 A6  2C C8 04 00  30 33 04 0D  80 00 1F 88    L3c.,...03......\r\n0080: 80 82 0B 53  2D 67 01 8A  4D 04 00 A2  20 02 04 67    ...S-g..M... ..g\r\n0096: DB 56 C4 02  01 00 02 01  00 30 12 30  10 06 0A 2B    .V.......0.0...+\r\n0112: 06 01 02 01  5C 01 01 01  00 42 02 03  E8             ....\\....B...\r\n\r\nNOTIFICATION-LOG-MIB::nlmConfigGlobalEntryLimit.0 = Gauge32: 1000\r\n\r\nIt was produced with the following command:\r\n$ snmpget -v3 -n \"\" -c public -u wes -a md5 -A setup_passphrase -l authNoPriv -d localhost nlmConfigGlobalEntryLimit.0\r\n\r\nWhile decoding (with my own tool) the message above, I met a constraint error with ASN.1 describing SNMPv3 message.\r\nThe actual issue with request-id parameter inside PDU & BulkPDU definitions.\r\n\r\nReceived value (from dump):\r\nrequest-id = 1742427844\r\n\r\nASN.1:\r\nrequest-id INTEGER (-214783648..214783647)\r\n\r\nYou can see that may be in number = 214783647, 4 is missed. I.e.: should be the following:  2147_4_83647\r\n\r\n----------\r\n\r\nVerifier Note: \r\n\r\nThere is indeed an error in the RFC, but the \"correction\" text is also incorrect.\r\nThe two changes needed are:\r\n\r\nOLD:\r\n           request-id INTEGER (-214783648..214783647),\r\nNEW:\r\n           request-id INTEGER (-2147483648..2147483647),\r\n\r\nOLD:\r\n           request-id      INTEGER (-214783648..214783647),\r\nNEW:\r\n           request-id      INTEGER (-2147483648..2147483647),\r\n", "submit_date": "2011-03-27", "submitter_name": "Mikhail Kulinich", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2797", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "!INCOMPLETE     NA, Solicited=1,        -                   REACHABLE\r\n                Override=0\r\n                Same link-layer\r\n                address as cached\r\n                or no link-layer \r\n                address\r\n", "correct_text": "PROBE           NA, Solicited=1,        -                   REACHABLE\r\n                Override=0\r\n                Same link-layer\r\n                address as cached\r\n                or no link-layer \r\n                address\r\n", "notes": "NA having Solicited=1 are supposed to confirm two-way connectivity. In order to prove that, NA transmission has to be triggered by an NS sent by local host. Since {REACHABLE,STALE,DELAY} states deny that local host has sent a NS (they're sent only in INCOMPLETE or PROBE states), receiving a NA with Solicited=1 cannot verify 2-way connectivity, therefore it should be ignored.", "submit_date": "2011-05-05", "submitter_name": "Alin N\u0103stac", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4618", "doc-id": "RFC6550", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.7.6", "orig_text": "Reserved: 7-bit unused field.  The field MUST be initialized to zero\r\n         by the sender and MUST be ignored by the receiver.", "correct_text": "Reserved: 8-bit unused field.  The field MUST be initialized to zero\r\n         by the sender and MUST be ignored by the receiver.", "notes": "The error is clear, but it should not affect implementations.\r\n\r\nFigure 24 clearly shows that the Reserved field of DODAG Configuration options is 8 bits long.", "submit_date": "2016-02-13", "submitter_name": "Yasuyuki Tanaka", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-06-15 21:26:45"}, {"errata_id": "2758", "doc-id": "RFC2743", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.4", "orig_text": "   o  actual_mechs SET OF OBJECT IDENTIFIER, -- if returned, caller must\r\n   -- release with GSS_Release_oid_set()\r\n\r\n   o  initiator_time_rec INTEGER -- in seconds, or reserved value for\r\n   -- INDEFINITE\r\n\r\n   o  acceptor_time_rec INTEGER -- in seconds, or reserved value for\r\n   -- INDEFINITE\r\n\r\n   o  cred_usage INTEGER, -- 0=INITIATE-AND-ACCEPT, 1=INITIATE-ONLY,\r\n   -- 2=ACCEPT-ONLY\r\n\r\n   o  mech_set SET OF OBJECT IDENTIFIER -- full set of mechanisms\r\n   -- supported by resulting credential.\r\n\r\n   Return major_status codes:\r\n", "correct_text": "   o  actual_mechs SET OF OBJECT IDENTIFIER, -- full set of mechanisms\r\n   -- supported by resulting credential.  If returned, caller must\r\n   -- release with GSS_Release_oid_set()\r\n\r\n   o  initiator_time_rec INTEGER -- in seconds, or reserved value for\r\n   -- INDEFINITE\r\n\r\n   o  acceptor_time_rec INTEGER -- in seconds, or reserved value for\r\n   -- INDEFINITE\r\n\r\n   Return major_status codes:\r\n", "notes": "There appears to be accidentally duplicated text trailing the list of output parameters in section 2.1.4:  GSS_Add_cred call  (top of page 38).\r\n\r\nThe parameter \"cred_usage\" is an input-only parameter and also listed under input parameters, and the parameter \"mech_set\" is a duplicate of the actual_mechs output parameter.  Compare GSS-API C-Bindings document rfc2744, section 5.3. gss_add_cred\r\n\r\n-Martin", "submit_date": "2011-03-29", "submitter_name": "Martin Rex", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2759", "doc-id": "RFC6030", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11", "orig_text": "     <xs:complexType name=\"AlgorithmParametersType\">\r\n          <xs:choice>\r\n\r\n\r\n\r\nHoyer, et al.                Standards Track                   [Page 42]\r\n\f\r\nRFC 6030         Portable Symmetric Key Container (PSKC)    October 2010\r\n\r\n\r\n               <xs:element name=\"Suite\" type=\"xs:string\" minOccurs=\"0\"/>\r\n               <xs:element name=\"ChallengeFormat\" minOccurs=\"0\">\r\n                    <xs:complexType>\r\n                         <xs:attribute name=\"Encoding\"\r\n                              type=\"pskc:ValueFormatType\"\r\n                                                      use=\"required\"/>\r\n                         <xs:attribute name=\"Min\"\r\n                              type=\"xs:unsignedInt\" use=\"required\"/>\r\n                         <xs:attribute name=\"Max\"\r\n                              type=\"xs:unsignedInt\" use=\"required\"/>\r\n                         <xs:attribute name=\"CheckDigits\"\r\n                              type=\"xs:boolean\" default=\"false\"/>\r\n                    </xs:complexType>\r\n               </xs:element>\r\n               <xs:element name=\"ResponseFormat\" minOccurs=\"0\">\r\n                    <xs:complexType>\r\n                         <xs:attribute name=\"Encoding\"\r\n                              type=\"pskc:ValueFormatType\"\r\n                                                      use=\"required\"/>\r\n                         <xs:attribute name=\"Length\"\r\n                              type=\"xs:unsignedInt\" use=\"required\"/>\r\n                         <xs:attribute name=\"CheckDigits\"\r\n                              type=\"xs:boolean\" default=\"false\"/>\r\n                    </xs:complexType>\r\n               </xs:element>\r\n               <xs:element name=\"Extensions\"\r\n                    type=\"pskc:ExtensionsType\" minOccurs=\"0\"\r\n                    maxOccurs=\"unbounded\"/>\r\n          </xs:choice>\r\n     </xs:complexType>", "correct_text": "     <xs:complexType name=\"AlgorithmParametersType\">\r\n          <xs:sequence>\r\n\r\n\r\n\r\nHoyer, et al.                Standards Track                   [Page 42]\r\n\f\r\nRFC 6030         Portable Symmetric Key Container (PSKC)    October 2010\r\n\r\n\r\n               <xs:element name=\"Suite\" type=\"xs:string\" minOccurs=\"0\"/>\r\n               <xs:element name=\"ChallengeFormat\" minOccurs=\"0\">\r\n                    <xs:complexType>\r\n                         <xs:attribute name=\"Encoding\"\r\n                              type=\"pskc:ValueFormatType\"\r\n                                                      use=\"required\"/>\r\n                         <xs:attribute name=\"Min\"\r\n                              type=\"xs:unsignedInt\" use=\"required\"/>\r\n                         <xs:attribute name=\"Max\"\r\n                              type=\"xs:unsignedInt\" use=\"required\"/>\r\n                         <xs:attribute name=\"CheckDigits\"\r\n                              type=\"xs:boolean\" default=\"false\"/>\r\n                    </xs:complexType>\r\n               </xs:element>\r\n               <xs:element name=\"ResponseFormat\" minOccurs=\"0\">\r\n                    <xs:complexType>\r\n                         <xs:attribute name=\"Encoding\"\r\n                              type=\"pskc:ValueFormatType\"\r\n                                                      use=\"required\"/>\r\n                         <xs:attribute name=\"Length\"\r\n                              type=\"xs:unsignedInt\" use=\"required\"/>\r\n                         <xs:attribute name=\"CheckDigits\"\r\n                              type=\"xs:boolean\" default=\"false\"/>\r\n                    </xs:complexType>\r\n               </xs:element>\r\n               <xs:element name=\"Extensions\"\r\n                    type=\"pskc:ExtensionsType\" minOccurs=\"0\"\r\n                    maxOccurs=\"unbounded\"/>\r\n          </xs:sequence>\r\n     </xs:complexType>", "notes": "The AlgorithmParameter should have a sequqnce of subelements not a choice as for Challenge/Response algorithms it MUST be possible to define both the ChallengeFormat and the Response Format at the same time. Currently the schema uses <xs:choice> which allows either <ChallengeFormat> or <ResponseFormat> but not both.\r\nThis correction will bring it in line with intended description in Section 4.3.4", "submit_date": "2011-03-30", "submitter_name": "Philip Hoyer", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2760", "doc-id": "RFC6031", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.7 & A.2", "orig_text": "PSKCAlgorithmParameters ::= CHOICE {\r\n     suite                UTF8String,\r\n     challengeFormat  [0] ChallengeFormat,\r\n     responseFormat   [1] ResponseFormat,\r\n     ... }\r\n", "correct_text": "PSKCAlgorithmParameters ::= SEQUENCE {\r\n     suite                UTF8String,\r\n     challengeFormat  [0] ChallengeFormat,\r\n     responseFormat   [1] ResponseFormat,\r\n     ... }\r\n", "notes": "This aligns with the errata on RFC 6030, which is where the syntax for this attribute comes from.  The errata can be found here http://www.rfc-editor.org/errata_search.php?rfc=6030&eid=2759", "submit_date": "2011-03-31", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2761", "doc-id": "RFC5101", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "   If the measurement parameters change such that a new Template is\r\n   required, the Template MUST be withdrawn (using a Template Withdraw\r\n   Message", "correct_text": "   If the measurement parameters change such that a new Template is\r\n   required, the Template MUST be withdrawn (using a Template Withdrawal\r\n   Message", "notes": "correct \"Template Withdraw Message\" to \"Template Withdrawal Message\" per figure T and the rest of the document.", "submit_date": "2011-04-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2762", "doc-id": "RFC5101", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "   If the Metering Process restarts, the Exporting Process MUST either\r\n   reuse the previously assigned Template ID for each Template, or it\r\n   MUST withdraw the previously issued Template IDs by sending Template\r\n   Withdraw Message(s) before reusing them.\r\n", "correct_text": "   If the Metering Process restarts, the Exporting Process MUST either\r\n   reuse the previously assigned Template ID for each Template, or it\r\n   MUST withdraw the previously issued Template IDs by sending Template\r\n   Withdrawal Message(s) before reusing them.\r\n\r\n", "notes": "Correct \"Template Withdraw Message\" to \"Template Withdrawal Message\" per figure T and the rest of the document.", "submit_date": "2011-04-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2763", "doc-id": "RFC5101", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "   If the Collecting Process receives a Template Withdraw message", "correct_text": "   If the Collecting Process receives a Template Withdrawal message\r\n", "notes": "Correct \"Template Withdraw Message\" to \"Template Withdrawal Message\" per figure T and the rest of the document.", "submit_date": "2011-04-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2764", "doc-id": "RFC5101", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.3.6", "orig_text": "   If UDP is selected as the transport protocol, the Template Withdraw\r\n   Messages MUST NOT be used, as this method is inefficient due to the\r\n   unreliable nature of UDP.\r\n", "correct_text": "   If UDP is selected as the transport protocol, the Template Withdrawal\r\n   Messages MUST NOT be used, as this method is inefficient due to the\r\n   unreliable nature of UDP.\r\n", "notes": "Correct \"Template Withdraw Message\" to \"Template Withdrawal Message\" per figure T and the rest of the document.", "submit_date": "2011-04-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2765", "doc-id": "RFC6122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   [XEP-0165]        Saint-Andre, P., \"Best Practices to Discourage JID\r\n                     Mimicking\", XSF XEP 0045, December 2007.\r\n", "correct_text": "   [XEP-0165]        Saint-Andre, P., \"Best Practices to Discourage JID\r\n                     Mimicking\", XSF XEP 0165, December 2007.\r\n", "notes": "Seems to be a problem caused by copy-and-paste: forgot to update the XEP number.", "submit_date": "2011-04-03", "submitter_name": "Nico Roeser", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2827", "doc-id": "RFC4992", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "|                 [...].  Conceptually, a CRB is a type of RQB; they\r\n   share the same format, but a CRB is constrained in conveying only\r\n   specific information and is only sent at the beginning of the session\r\n   lifecycle.", "correct_text": "|                 [...].  Conceptually, a CRB is a type of RSB; they\r\n   share the same format, but a CRB is constrained in conveying only\r\n   specific information and is only sent at the beginning of the session\r\n   lifecycle.", "notes": "Separating separate errata from 1009.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2777", "doc-id": "RFC6090", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2", "orig_text": "KT-I is mathematically and functionally equivalent to ECDSA, and can interoperate\r\nwith the IEEE [P1363] and ANSI [X9.62] standards for Elliptic Curve DSA (ECDSA)\r\nbased on fields of characteristic greater than three.  KT-I signatures can be\r\nverified using the ECDSA verification algorithm, and ECDSA signatures can be\r\nverified using the KT-I verification algorithm.\r\n", "correct_text": "For many hash functions KT-I is mathematically and functionally equivalent to\r\nECDSA, and can interoperate with the IEEE [P1363] and ANSI [X9.62] standards for\r\nElliptic Curve DSA (ECDSA) based on fields of characteristic greater than three.\r\nKT-I signatures can be verified using the ECDSA verification algorithm, and ECDSA\r\nsignatures can be verified using the KT-I verification algorithm (refer to\r\nSection 10.4).\r\n", "notes": "If the hash function h generates a bit string that has a bit length greater than the bit length of the elliptic curve group order, ECDSA as specified in P1363 uses a truncation of the hash value to the left-most bits. The KT-I algorithm does not use this truncation but reduces modulo q. Therefore ECDSA and KT-I with SHA-384 on the P-256 curve result in different signature values. Add a corresponding note in 10.4: The output of the hash used in KT signatures should truncated to the left-most bits if its bit-length is longer than the bit-length of the group order.", "submit_date": "2011-04-11", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2778", "doc-id": "RFC3327", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.5.2", "orig_text": "   Message sequence for INVITE using Path:\r\n\r\n   F1 Invite UA2 -> REGISTRAR\r\n\r\n      INVITE UA1@EXAMPLEHOME.COM SIP/2.0\r\n      Via: SIP/2.0/UDP 71.91.180.10:5060;branch=z9hG4bKe2i95c5st3R\r\n      To: UA1 <sip:UA1@EXAMPLEHOME.COM>\r\n      From: UA2 <sip:UA2@FOREIGN.ELSEWHERE.ORG>;tag=224497\r\n      Call-ID: 48273181116@71.91.180.10\r\n      CSeq: 29 INVITE\r\n      Contact: <sip:UA2@71.91.180.10>\r\n       . . .", "correct_text": "   Message sequence for INVITE using Path:\r\n\r\n   F1 Invite UA2 -> REGISTRAR\r\n\r\n      INVITE sip:UA1@EXAMPLEHOME.COM SIP/2.0\r\n      Via: SIP/2.0/UDP 71.91.180.10:5060;branch=z9hG4bKe2i95c5st3R\r\n      To: UA1 <sip:UA1@EXAMPLEHOME.COM>\r\n      From: UA2 <sip:UA2@FOREIGN.ELSEWHERE.ORG>;tag=224497\r\n      Call-ID: 48273181116@71.91.180.10\r\n      CSeq: 29 INVITE\r\n      Contact: <sip:UA2@71.91.180.10>\r\n       . . .", "notes": "In all the example flow the Request URI is wrong as doesn't contain the URI scheme (\"sip\" / \"sips\").", "submit_date": "2011-04-16", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2779", "doc-id": "RFC3600", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "TOC", "orig_text": " 2.  Contacts . . . . . . . . . . . . . . . . . . . . . . . . . . .  2", "correct_text": " 2.  Resources  . . . . . . . . . . . . . . . . . . . . . . . . . .  2", "notes": "", "submit_date": "2011-04-17", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2780", "doc-id": "RFC3300", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "TOC", "orig_text": "2.  Contacts . . . . . . . . . . . . . . . . . . . . . . . . .   2\r\n", "correct_text": "2.  Resources  . . . . . . . . . . . . . . . . . . . . . . . .   2\r\n", "notes": "", "submit_date": "2011-04-17", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2781", "doc-id": "RFC2700", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "TOC", "orig_text": "2.  Contacts . . . . . . . . . . . . . . . . . . . . . . . . .   2", "correct_text": "2.  Resources  . . . . . . . . . . . . . . . . . . . . . . . .   2", "notes": "", "submit_date": "2011-04-17", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2782", "doc-id": "RFC3031", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": " layer 3                   the protocol layer at which IP and its\r\n                           associated routing protocols operate\r\n                           link layer synonymous with layer 2\r\n\r\n", "correct_text": " layer 3                   the protocol layer at which IP and its\r\n                           associated routing protocols operate\r\n \r\n link layer                synonymous with layer 2\r\n\r\n", "notes": "Wrong text indentation", "submit_date": "2011-04-18", "submitter_name": "Valeria Elisabetta Mattavelli", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2828", "doc-id": "RFC4992", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "        +-----------+------------+--------+\r\n   field | chunk     | chunk data | chunk  |\r\n         | descriptor| length     | data   |\r\n         +-----------+------------+--------+\r\n   octets      1            2      variable\r\n\r\n                                  chunk", "correct_text": "         +-----------+------------+--------+\r\n   field | chunk     | chunk data | chunk  |\r\n         | descriptor| length     | data   |\r\n         +-----------+------------+--------+\r\n   octets      1            2      variable\r\n\r\n                                  Chunk", "notes": "The figure caption of the last diagram in Section 6, at the bottom\r\nof page 8, resembles mis-spaced spurious text because it is not\r\nwritten with headline capitalisation (as all othe similar figure\r\ncaptions are).\r\n\r\n[Separating into individual errata from 1009]", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2848", "doc-id": "RFC5793", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.8.1", "orig_text": "Remediation String (variable length)\r\n\r\n      The Remediation String field MUST contain a UTF-8 [6] encoded\r\n      string.  This string contains human-readable instructions for\r\n      remediation that MAY be displayed to the user by the Posture\r\n      Broker Client.  NUL termination MUST NOT be included.  If a\r\n      Posture Broker Client receives a Reason String that does contain a\r\n      NUL termination, it MUST respond with a fatal Invalid Parameter\r\n      error in a CLOSE batch.\r\n", "correct_text": "Remediation String (variable length)\r\n\r\n      The Remediation String field MUST contain a UTF-8 [6] encoded\r\n      string.  This string contains human-readable instructions for\r\n      remediation that MAY be displayed to the user by the Posture\r\n      Broker Client.  NUL termination MUST NOT be included.  If a\r\n      Posture Broker Client receives a Remediation String that does contain a\r\n      NUL termination, it MUST respond with a fatal Invalid Parameter\r\n      error in a CLOSE batch.", "notes": "Copy-and-paste error: Reason String must be changed to Remediation String.\r\n\r\nSF: Was discussed by NEA WG which agreed this should be Approved. [1]\r\n   http://www.ietf.org/mail-archive/web/nea/current/msg01132.html", "submit_date": "2011-06-28", "submitter_name": "Andreas Steffen", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3094", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   bit-stmt            = bit-keyword sep identifier-arg-str optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              ;; these stmts can appear in any order\r\n                              [position-stmt stmtsep]\r\n                              [status-stmt stmtsep]\r\n                              [description-stmt stmtsep]\r\n                              [reference-stmt stmtsep]\r\n                            \"}\"\r\n                          \"}\")", "correct_text": "   bit-stmt            = bit-keyword sep identifier-arg-str optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              ;; these stmts can appear in any order\r\n                              [position-stmt stmtsep]\r\n                              [status-stmt stmtsep]\r\n                              [description-stmt stmtsep]\r\n                              [reference-stmt stmtsep]\r\n                          \"}\")", "notes": "An extra \"}\"", "submit_date": "2012-01-20", "submitter_name": "Emmanuel Nataf", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2783", "doc-id": "RFC3998", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "8.1.  'hold-new-jobs' Value\r\n\r\n\r\n   'hold-new-jobs': The operator has issued the Hold-New-Jobs operation\r\n      (see section 3.3.1) or other means, but the output-device(s) are\r\n      taking an appreciable time to stop.  Later, when all output has\r\n      stopped, the \"printer-state\" becomes 'stopped', and the 'paused'\r\n      value replaces the 'moving-to-paused' value in the \"printer-\r\n      state-reasons\" attribute.  This value MUST be supported if the\r\n      Hold-New-Jobs operation is supported and the implementation takes\r\n      significant time to pause a device in certain circumstances.\r\n", "correct_text": "8.1.  'hold-new-jobs' Value\r\n\r\n\r\n   'hold-new-jobs': The operator has issued the Hold-New-Jobs operation\r\n      (see section 3.3.1) or has initiated the holding of new jobs by \r\n      other means. This value indicates that all Jobs subsequently \r\n      submitted to the Printer will be placed into the \u2018pending-held\u2019 \r\n      state.  Thus all newly accepted jobs will be automatically held \r\n      by the Printer.  This \u201cprinter-state-reasons\u201d value will be removed \r\n      when the Operator issues the Release-Held-New-Jobs Operation or \r\n      releases the holding of new jobs by other means. \r\n", "notes": "This is a cut and paste error. \r\nNote that the definition of the Hold-New-Jobs operation (3.3.1) states:\r\n\r\n   \"When the Printer completes all the 'pending' and 'processing' jobs,\r\n   it enters the 'idle' state as usual.  An operator monitoring Printer\r\n   state changes will know when the Printer has completed all current\r\n   jobs because the Printer enters the 'idle' state.\"\r\n\r\nThus the Printer does not enter the \u2018stopped\u2019 state as currently indicated in the text.  It is the Pause-Printer \r\nand Pause-Printer-After-Current-Job operations that move the state of the Printer to stopped\u2019 and put the \r\n\u2018moving-to-paused\u2019 or \u2018paused\u2019 values into \u201cprinter-state-reasons\u201d.", "submit_date": "2011-04-18", "submitter_name": "Peter Zehler", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2784", "doc-id": "RFC5724", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "2.2. Formal Definition\r\n\r\n   The URI scheme's keywords specified in the following syntax\r\n   description are case-insensitive.  The syntax of an \"sms\" URI is\r\n   formally described as follows, where the URI base syntax is taken\r\n   from [RFC3986]:\r\n\r\n  sms-uri        = scheme \":\" sms-hier-part [ \"?\" sms-fields ]\r\n  scheme         = \"sms\"\r\n  sms-hier-part  = sms-recipient *( \",\" sms-recipient )\r\n  sms-recipient  = telephone-subscriber ; defined in RFC 3966\r\n  sms-fields     = sms-field *( \"&\" sms-field )\r\n  sms-field      = sms-field-name \"=\" escaped-value\r\n  sms-field-name = \"body\" / sms-field-ext ; \"body\" MUST only appear once\r\n  sms-field-ext  = 1*( unreserved )\r\n  escaped-value  = *( unreserved / pct-encoded ) ; defined in RFC 3986", "correct_text": "2.2. Formal Definition\r\n\r\n   The URI scheme's keywords specified in the following syntax\r\n   description are case-insensitive.  The syntax of an \"sms\" URI is\r\n   formally described as follows, where the URI base syntax is taken\r\n   from [RFC3986]:\r\n\r\n  sms-uri        = scheme \":\" sms-hier-part [ \"?\" sms-fields ]\r\n  scheme         = \"sms\"\r\n  sms-hier-part  = sms-recipient *( \",\" sms-recipient )\r\n  sms-recipient  = telephone-subscriber  ; defined in RFC 3966\r\n  sms-fields     = no-body / body-first / body-middle-last\r\n  no-body        = sms-field *( \"&\" sms-field )  \r\n                   ; <sms-fields> part without the \"body\" field\r\n  body-first     = body-field *( \"&\" sms-field )\r\n                   ; <sms-fields> part with the \"body\" field  \r\n                   ; at the first place\r\n  body-middle-last = sms-field *( \"&\" sms-field ) \"&\" body-field\r\n                   *( \"&\" sms-field )\r\n                   ; <sms-fields> part with the \"body\" field  \r\n                   ; in the middle or at the end\r\n  sms-field      = sms-field-name \"=\" escaped-value\r\n  body-field     = \"body=\" escaped-value\r\n  sms-field-name = 1*( unreserved )\r\n  escaped-value  = *( unreserved / pct-encoded )  ; defined in RFC 3986", "notes": "The syntax I propose represents that \"body\" field can occur in the URI only once while the current one does not reveal this.", "submit_date": "2011-04-18", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2785", "doc-id": "RFC5464", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": " |         C: a GETMETADATA \"INBOX\" (MAXSIZE 1024)\r\n                                    (/shared/comment /private/comment)\r\n           S: * METADATA \"INBOX\" (/private/comment \"My own comment\")\r\n           S: a OK [METADATA LONGENTRIES 2199] GETMETADATA complete", "correct_text": " |         C: a GETMETADATA (MAXSIZE 1024) \"INBOX\"\r\n                                    (/shared/comment /private/comment)\r\n           S: * METADATA \"INBOX\" (/private/comment \"My own comment\")\r\n           S: a OK [METADATA LONGENTRIES 2199] GETMETADATA complete", "notes": "GETMETADATA examples with options are wrong. ABNF says the options should be before mailbox name, not after. (Having them after mailbox name would also make the parsing more difficult since it could be confused with entries-list).", "submit_date": "2011-04-20", "submitter_name": "Timo Sirainen", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2786", "doc-id": "RFC5464", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": " |         C: a GETMETADATA \"INBOX\" (DEPTH 1)\r\n                                   (/private/filters/values)\r\n           S: * METADATA \"INBOX\" (/private/filters/values/small\r\n                \"SMALLER 5000\" /private/filters/values/boss\r\n                \"FROM \\\"boss@example.com\\\"\")\r\n           S: a OK GETMETADATA complete", "correct_text": " |         C: a GETMETADATA (DEPTH 1) \"INBOX\"\r\n                                   (/private/filters/values)\r\n           S: * METADATA \"INBOX\" (/private/filters/values/small\r\n                \"SMALLER 5000\" /private/filters/values/boss\r\n                \"FROM \\\"boss@example.com\\\"\")\r\n           S: a OK GETMETADATA complete", "notes": "Same reason as for the section 4.2.1 errata.", "submit_date": "2011-04-20", "submitter_name": "Timo Sirainen", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2787", "doc-id": "RFC3305", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.1", "orig_text": "The official register of URI scheme names is maintained by IANA, at\r\n   http://www.iana.org/assignments/uri-schemes.", "correct_text": "The official register of URI scheme names is maintained by IANA, at\r\n   http://www.iana.org/assignments/uri-schemes.html.", "notes": "The iana.org web site redirects appropriately, so this can be addressed in a future revision.", "submit_date": "2011-04-20", "submitter_name": "J. Clelland", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2788", "doc-id": "RFC4750", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "ospfVirtNbrEvents OBJECT-TYPE\r\nSYNTAX Counter32\r\nMAX-ACCESS read-only\r\nSTATUS current\r\nDESCRIPTION\r\n\"The number of times this virtual link has\r\nchanged its state or an error has occurred.\r\nDiscontinuities in the value of this counter can occur\r\nat re-initialization of the management system, and at other\r\ntimes as indicated by the value of ospfDiscontinuityTime.\"\r\n::= { ospfVirtNbrEntry 6 }", "correct_text": "ospfVirtNbrEvents OBJECT-TYPE\r\nSYNTAX Counter32\r\nMAX-ACCESS read-only\r\nSTATUS current\r\nDESCRIPTION\r\n\"The number of times this virtual neighbor has\r\nchanged its state or an error has occurred.\r\nDiscontinuities in the value of this counter can occur\r\nat re-initialization of the management system, and at other\r\ntimes as indicated by the value of ospfDiscontinuityTime.\"\r\n::= { ospfVirtNbrEntry 6 }", "notes": "", "submit_date": "2011-04-25", "submitter_name": "Vladica Stanisic", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4548", "doc-id": "RFC7273", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "A rate modifier may be specified.  The modifier is expressed as the\r\nratio of two integers and modifies the rate specified or implied by\r\nthe media description by this ratio.", "correct_text": "A rate modifier may be specified.  The modifier is expressed as the\r\nratio of two integers and multiplies the rate specified or implied by\r\nthe media description by this ratio.", "notes": "Original text says that the rate modifier \\\\\\\"modifies the rate\\\\\\\" but does not say how.\r\n\r\nVerifier note: I think \"Modified by a ratio\" will be generally interpreted as \"multiply...\". This seems editorial.", "submit_date": "2015-12-01", "submitter_name": "John Fletcher", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2791", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   If the length of the Information Element is greater than or equal to\r\n   255 octets, the length is encoded into 3 octets before the\r\n   Information Element.  The first octet is 255, and the length is\r\n   carried in the second and third octets, as shown in Figure S.\r\n", "correct_text": "   The length may also be encoded into 3 octets before the Information\r\n   element allowing the length of the Information Element to be\r\n   greater than or equal to 255 octets. In this case, first octet of\r\n   the Lenght field MUST be 255, and the length is carried in the \r\n   second and third octets, as shown in Figure S.\r\n", "notes": "The original text is ambiguous as to whether it is possible to carry a length of less than 255 encoded in a 3 octet Length field. The quoted text seems to say it is not allowed, but Figure S says that the 2nd and 3rd octets may be set to \"Length (0 to 65535)\".\r\n\r\nSince there is absolutely no harm (except a little inefficiency) in using a 3 octet Length field to encode a small length, the document should be clarified to remove the ambiguity.", "submit_date": "2011-04-28", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2792", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.5.2", "orig_text": "A.5.2.  Example of Variable-Length Information Element with Length 255\r\n        to 65535 Octets", "correct_text": "A.5.2.  Example of Variable-Length Information Element with 3 Octet\r\n        Length Encoding", "notes": "Per Erratum 2791, this section header should be changed to reflect that the 3 octet Lenght encoding supports lengths of less than 255 as well as greater than or equal to 255.\r\n\r\nNote that there is a corresponding change in the Table of Contents", "submit_date": "2011-04-28", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2793", "doc-id": "RFC4897", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   The term \"Standards-Track document\", as used in this specification,\r\n   is assumed to include BCPs but not Informational or Experimental\r\n   documents of any variety or origin.", "correct_text": "   The term \"Standards-Track document\", as used in this specification,\r\n   is assumed to include Standards Track RFCs at any maturity level \r\n   and BCPs but not Informational, Experimental or Historic documents\r\n   of any variety or origin.", "notes": "Rationale:  Mentioning Historic documents as not included in the \"Standards-Track document\" definition; fuller description of this term.", "submit_date": "2011-05-01", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2794", "doc-id": "RFC2104", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix", "orig_text": "  key =         \"Jefe\"\r\n  data =        \"what do ya want for nothing?\"\r\n  data_len =    28 bytes\r\n  digest =      0x750c783e6ab0b503eaa86e310a5db738", "correct_text": "  key =         \"Jefe\"\r\n  key_len =     4\r\n  data =        \"what do ya want for nothing?\"\r\n  data_len =    28 bytes\r\n  digest =      0x750c783e6ab0b503eaa86e310a5db738", "notes": "key_len was omitted from this test vector. The other test vectors specify both key_len and data_len.", "submit_date": "2011-05-02", "submitter_name": "Kasper Dupont", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2795", "doc-id": "RFC787", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": " The Reference Model was developed to serve as  a  framework  for\r\n the coordination of existing and future  standards  designed  to\r\n facilitate the interconnection of data processing systems.   The\r\n purpose of OSI is to enable  an  end-user  application  activity\r\n (called an \"application  process\")  located  in  a  system  that\r\n employs OSI procedures  and  protocols  (an  \"open\"  system)  to\r\n communicate with any other appication  process  located  in  any\r\n other open system.  It is not  the  intent  of  OSI  to  specify\r\n either the functions or the implementation  details  of  systems\r\n that provide the OSI capabilities.  Communication is achieved by\r\n mutual adherence  to  agreed-upon  (standardized)  services  and\r\n protocols; the only thing that an OSI entity in a given layer in\r\n one system needs to know about an OSI entity in the  same  layer", "correct_text": " The Reference Model was developed to serve as  a  framework  for\r\n the coordination of existing and future  standards  designed  to\r\n facilitate the interconnection of data processing systems.   The\r\n purpose of OSI is to enable  an  end-user  application  activity\r\n (called an \"application  process\")  located  in  a  system  that\r\n employs OSI procedures  and  protocols  (an  \"open\"  system)  to\r\n communicate with any other application process  located  in  any\r\n other open system.  It is not  the  intent  of  OSI  to  specify\r\n either the functions or the implementation  details  of  systems\r\n that provide the OSI capabilities.  Communication is achieved by\r\n mutual adherence  to  agreed-upon  (standardized)  services  and\r\n protocols; the only thing that an OSI entity in a given layer in\r\n one system needs to know about an OSI entity in the  same  layer", "notes": "Typo in \"application\": s/appication/application", "submit_date": "2011-05-02", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2796", "doc-id": "RFC1149", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "Special Considerations:\r\nA port mirror should not be used with avian carriers as a single collision with a mirror will result in 100% loss of that carrier.\n --VERIFIER NOTES-- \nAs will a single collision with windows.   ", "submit_date": "2011-05-04", "submitter_name": "Bryan Irvine", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2834", "doc-id": "RFC4992", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10", "orig_text": "   Section 6.2 of RFC 3981 [1] (IRIS-CORE) states that IRIS-BEEP [2] is\r\n   the default transport for IRIS.  [...]", "correct_text": "   Section 7.2 of RFC 3981 [1] (IRIS-CORE) states that IRIS-BEEP [2] is\r\n   the default transport for IRIS.  [...]", "notes": "[Separating into individual errata from 1009]", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4549", "doc-id": "RFC7683", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "The overloaded realm is identified by the Destination-Realm AVP \r\nof the message containing the OLR.", "correct_text": "The overloaded realm is identified by the Origin-Realm AVP\r\nof the message containing the OLR.", "notes": "When the overload report is of type \"REALM_REPORT\", the overloaded realm is identified by the Origin-Realm AVP of the Diameter command i.e. the realm of the originator of the Diameter command with the overload report.", "submit_date": "2015-12-01", "submitter_name": "Jan Kayser", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4335", "doc-id": "RFC5091", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "201", "orig_text": "e': G1' x G1'' -> G2", "correct_text": "e' : G1' X G1'' -> G2", "notes": "This is the only way to give type correctness.\r\ne: G1' x G1'' -> G2\r\nphi: G1' -> G1''\r\ne'(A, B) = e(A, phi(B))\r\nThere for B must be an element of G' so that it can be passed as input to phi(B).", "submit_date": "2015-04-13", "submitter_name": "Scott Ruoti", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4589", "doc-id": "RFC1180", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "A driver is software that communicates directly with the network\r\ninterface hardware.  A module is software that communicates with a\r\ndriver, with network applications, or with another module.", "correct_text": "A driver is a software that communicates directly with the network\r\ninterface hardware.  A module is a software that communicates with a\r\ndriver, with network applications or with another module.", "notes": "\n --VERIFIER NOTES-- \n   The current text is grammatically correct.", "submit_date": "2016-01-10", "submitter_name": "Masoud Valizadeh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2801", "doc-id": "RFC6122", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "When preparing a text label (consisting of a sequence of UTF-8 encoded\r\nUnicode code points) for representation as an internationalized label\r\nin the process of constructing an XMPP domainpart or comparing two\r\nXMPP domainparts, an application MUST ensure that for each text label\r\nit is possible to apply without failing the ToASCII operation\r\nspecified in [IDNA2003] with the UseSTD3ASCIIRules flag set (thus\r\nforbidding ASCII code points other than letters, digits, and\r\nhyphens).", "correct_text": "When preparing a text label (consisting of a sequence of UTF-8 encoded\r\nUnicode code points) for representation as an internationalized label\r\nin the process of constructing an XMPP domainpart, an application MUST\r\nensure that for each text label it is possible to apply without failing the\r\nToASCII operation specified in [IDNA2003] with the UseSTD3ASCIIRules flag set\r\n(thus forbidding ASCII code points other than letters, digits, and hyphens).\r\nWhen comparing two XMPP domainparts, an application MUST first apply the\r\n[NAMEPREP] profile of [STRINGPREP] to both domainparts and perform a byte-wise\r\ncomparison afterwards.", "notes": "As is the RFC does not specify how to compare XMPP domainparts. It should have been pointed out that normalization is required and how to do that normalization.", "submit_date": "2011-05-07", "submitter_name": "Florian Zeitz", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2802", "doc-id": "RFC5092", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "imap: URI scheme", "correct_text": "'imap' URI Scheme", "notes": "The \":\" (colon) character is not a part of URI scheme name. RFC 3986 says:\r\n\r\nURI    = scheme \":\" hier-part [ \"?\" query ] [ \"#\" fragment ]\r\nscheme = ALPHA *( ALPHA / DIGIT / \"+\" / \"-\" / \".\" )\r\n\r\ni. e. \":\" is a delimiter between scheme name and the remainder of URI.", "submit_date": "2011-05-08", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2803", "doc-id": "RFC3031", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Ru will label with packet with label value L", "correct_text": "Ru will label the packet with label value L", "notes": "", "submit_date": "2011-05-08", "submitter_name": "maligree", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2804", "doc-id": "RFC4606", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(2)  typo\r\n\r\nIn Section 3, at the bottom of page 11, the RFC says:\r\n\r\n                     [...].  The standard definition for virtual\r\n   concatenation allows each virtual concatenation components to travel\r\n   over diverse paths.  [...]\r\n                                                            ^\r\nIt should say:\r\n\r\n                     [...].  The standard definition for virtual\r\n|  concatenation allows each virtual concatenation component to travel\r\n   over diverse paths.  [...]\r\n\r\nor perhaps better:\r\n\r\n                     [...].  The standard definition for virtual\r\n|  concatenation allows the virtual concatenation components to travel\r\n   over diverse paths.  [...]\r\n\r\n(4)  inconsistency in examples\r\n\r\nStill within Section 3, in the lower half of page 15,\r\nunder the headline:\r\n\r\n   Examples of Labels\r\n\r\nthere are multiple occurrances of an index shift that makes the text\r\ninconsistent with the tables on page 14 and the upper half of page 15.\r\nE.g., \"Kth-1\" for \"K>0\" would result in \"0th, 1st, 2nd\" where the\r\nappropriate table (at tho bottom of page 14) gives \"1st, 2nd, 3rd\" :\r\n\r\n    K    SDH VC-4\r\n   ---------------\r\n    0    other\r\n    1    1st TUG-3\r\n    2    2nd TUG-3\r\n    3    3rd TUG-3\r\n\r\nHence,\r\na)\r\n                                                   vv\r\n|  Example 2: the label for the VC-3 within the Kth-1 TUG-3 within\r\n              the VC-4 in the Sth AUG-1 is: S>0, U=0, K>0, L=0, M=0.\r\n\r\nshould be corrected to say:\r\n\r\n|  Example 2: the label for the VC-3 within the Kth TUG-3 within the\r\n              VC-4 in the Sth AUG-1 is: S>0, U=0, K>0, L=0, M=0.\r\n\r\nb)\r\n                                   vv\r\n|  Example 3: the label for the Uth-1 STS-1_SPE/VC-3 within the Sth\r\n              STS-3/AUG-1 is: S>0, U>0, K=0, L=0, M=0.\r\n\r\nshould be corrected to say:\r\n\r\n|  Example 3: the label for the Uth STS-1_SPE/VC-3 within the Sth\r\n              STS-3/AUG-1 is: S>0, U>0, K=0, L=0, M=0.\r\n\r\nc)\r\n                                                   vv\r\n|  Example 4: the label for the VT6/VC-2 in the Lth-1 VT Group/TUG-2\r\n|             in the Uth-1 STS-1_SPE/VC-3 within the Sth STS-3/AUG-1\r\n                        ^^\r\n              is: S>0, U>0, K=0, L>0, M=0.\r\n\r\nshould be corrected to say:\r\n\r\n|  Example 4: the label for the VT6/VC-2 in the Lth VT Group/TUG-2\r\n|             in the Uth STS-1_SPE/VC-3 within the Sth STS-3/AUG-1\r\n              is: S>0, U>0, K=0, L>0, M=0.\r\n\r\nand\r\nd)\r\n                                                              vv\r\n|  Example 5: the label for the 3rd VT1.5_SPE/VC-11 in the Lth-1 VT\r\n|             Group/TUG-2 within the Uth-1 STS-1_SPE/VC-3 within the\r\n                                        ^^\r\n              Sth STS-3/AUG-1 is: S>0, U>0, K=0, L>0, M=8.\r\n\r\nshould be corrected to say:\r\n\r\n|  Example 5: the label for the 3rd VT1.5_SPE/VC-11 in the Lth VT\r\n|             Group/TUG-2 within the Uth STS-1_SPE/VC-3 within the\r\n              Sth STS-3/AUG-1 is: S>0, U>0, K=0, L>0, M=8.\r\n\r\n\r\n(5)  incomplete example\r\n\r\nIn Annex 1, at the bottom of page 21, the last list item says:\r\n\r\n   10.  An STS-1-3v SPE signal is formed by the application of RCC with\r\n        value 0, NVC with value 3 (virtual concatenation of 3\r\n        components), MT with value 1, and T with value 0 to an STS-1 SPE\r\n        Elementary Signal.\r\n\r\nThis text does not specify the significant NCC value.\r\nIt should say instead:\r\n\r\n   10.  An STS-1-3v SPE signal is formed by the application of RCC with\r\n|       value 0, NCC with value 0, NVC with value 3 (virtual\r\n        concatenation of 3 components), MT with value 1, and T with\r\n        value 0 to an STS-1 SPE Elementary Signal.", "correct_text": "", "notes": "This Erratum was duplicated from Erratum 43 in order to separate the issues raised. Note that the remaining issues in this Erratum are typos or within examples, hence the Erratum is reclassified as Editorial.", "submit_date": "2006-11-01", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2805", "doc-id": "RFC2136", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1.1.1", "orig_text": "   1.1.1. Two RRs are considered equal if their NAME, CLASS, TYPE,\r\n   RDLENGTH and RDATA fields are equal.  Note that the time-to-live\r\n   (TTL) field is explicitly excluded from the comparison.", "correct_text": "   1.1.1. Two RRs are considered equal if their NAME, CLASS, TYPE,\r\n   RDLENGTH and RDATA fields are equal.  Compressed names in the RDATA\r\n   must be decompressed before comparison. Note that the time-to-live\r\n   (TTL) field is explicitly excluded from the comparison.", "notes": "Name compression depends on the context of the RR so RDATA cannot correctly be compared bytewise without taking this into account.", "submit_date": "2011-05-09", "submitter_name": "Tony Finch", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2806", "doc-id": "RFC2616", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "14.13", "orig_text": "Applications SHOULD use this field to indicate the transfer-length of\r\n   the message-body, unless this is prohibited by the rules in <a href=\"#section-   \">section</a>\r\n   <a href=\"#section-   \">4.4</a>.", "correct_text": "Applications SHOULD use this field to indicate the transfer-length of\r\n   the message-body, unless this is prohibited by the rules in \r\n<a href=\"#section-4.4\">section 4.4</a>.", "notes": "This errata refers to the linkified version of the RFC at:\r\n\r\nhttp://tools.ietf.org/html/rfc2616\r\n\r\nNote that the original and corrected text above both contain HTML tags. In case the text doesn't survive the form submission, just to describe the problem, the link in the text shown, an internal anchor link that should point to #section-4.4, is broken because the number 4.4 is missing at the end of the anchor inside the href quotes.\r\n\r\n--- VERIFIER NOTES ---\r\nThis report has been rejected because it is regarding a link in the HTML version of the RFC on tools.ietf.org. The report has been directed to webmaster@tools.ietf.org. \r\n\r\nErrata are for the RFCs as available from rfc-editor.org. ", "submit_date": "2011-05-12", "submitter_name": "Carlos McEvilly", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7042", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.3", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 fb 4f 40 00 ff 06 a0 f0 0a 0b 0c 0d\r\n     ac 1b 1c 1d c4 fa 00 b3 78 7a 1d e0 fa dd 6d ea\r\n     c0 18 01 04 95 05 00 00 01 01 08 0a 00 01 7e d0\r\n     93 f4 e9 e8 1d 10 3d 54 77 41 27 42 fa 4d c4 33\r\n     ef f0 97 3e ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da bf 00 b4 0a 0b 0c 0d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da bf 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 fb 4f 40 00 ff 06 a0 f0 0a 0b 0c 0d\r\n     ac 1b 1c 1d c4 fa 00 b3 78 7a 1d e0 fa dd 6d ea\r\n     c0 18 01 04 ed f3 00 00 01 01 08 0a 00 01 7e d0\r\n     93 f4 e9 e8 1d 10 3d 54 77 41 27 42 fa 4d c4 33\r\n     ef f0 97 3e ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da bf 00 b4 0a 0b 0c 0d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da bf 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "notes": "The TCP checksum shown (0x9505) is wrong, it should be 0xedf3.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:49:09"}, {"errata_id": "8695", "doc-id": "RFC9562", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "The versions within Table 1 described as \r\n\"Reserved for future definition\" or \"unused\" are \r\nomitted from this IANA registry until properly defined.", "correct_text": "The versions within Table 2 described as \r\n\"Reserved for future definition\" or \"unused\" are \r\nomitted from this IANA registry until properly defined.", "notes": "The UUID versions are listed in Table 2, not in Table 1. Table 1 lists the variants.", "submit_date": "2026-01-07", "submitter_name": "Matthieu Mourisson", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-01-12 21:31:31"}, {"errata_id": "2815", "doc-id": "RFC5601", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Daniel", "orig_text": "  pwOperStatus OBJECT-TYPE\r\n     SYNTAX        PwOperStatusTC\r\n     MAX-ACCESS    read-only\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"This object indicates the operational status of the PW; it\r\n           does not reflect the status of the Customer Edge (CE) bound\r\n           interface.  It is set to down only if pwNotForwarding,\r\n           psnFacingPwRxFault, or psnFacingPwTxFault indications are\r\n           set in pwLocalStatus or pwRemoteStatus.\r\n           It indicates 'lowerLayerDown' if the only reason for\r\n           not being in the 'up' state is that either the outer tunnel\r\n           or physical layer of the network side is in the 'down'\r\n           state.\r\n           All other states are declared based on the description\r\n           of the PwOperStatusTC.\r\n           \"\r\n     ::= { pwEntry 38 }", "correct_text": "  pwOperStatus OBJECT-TYPE\r\n     SYNTAX        PwOperStatusTC\r\n     MAX-ACCESS    read-only\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"This object indicates the operational status of the PW; it\r\n           does not reflect the status of the Customer Edge (CE) bound\r\n           interface.  It is set to down only if pwNotForwarding,\r\n           psnPwRxFault, or psnPwTxFault indications are\r\n           set in pwLocalStatus or pwRemoteStatus.\r\n           It indicates 'lowerLayerDown' if the only reason for\r\n           not being in the 'up' state is that either the outer tunnel\r\n           or physical layer of the network side is in the 'down'\r\n           state.\r\n           All other states are declared based on the description\r\n           of the PwOperStatusTC.\r\n           \"\r\n     ::= { pwEntry 38 }", "notes": "psnFacingPwRxFault and psnFacingPwTxFault were replaced in RFC 5542 by psnPwRxFault and psnPwTxFault respectively", "submit_date": "2011-05-24", "submitter_name": "Daniel Cohn", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2816", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6.2", "orig_text": "   from            =   \"From:\" mailbox-list CRLF\r\n\r\n   sender          =   \"Sender:\" mailbox CRLF\r\n\r\n   reply-to        =   \"Reply-To:\" address-list CRLF", "correct_text": "   from            =   \"From:\" mailbox-list CRLF\r\n\r\n   sender          =   \"Sender:\" mailbox CRLF\r\n\r\n   reply-to        =   \"Reply-To:\" mailbox-list CRLF", "notes": "The text in section 3.6.2 (and everywhere else Reply-To is mentioned) makes it clear that Reply-To is envisioned as referring to one or more mailboxes.  But the following chain of productions:\r\n\r\naddress-list -> address -> group -> DQUOTE DQUOTE \":\" \";\"\r\n\r\n...means that the following Reply-To header would be permitted by the spec:\r\n\r\n  Reply-To: \"\" : ;\r\n\r\nThis header has no mailbox in it at all.  So either the reply-to production rule is wrong (and should be a mailbox-list instead of an address-list), or the spec needs to explain what the semantics are for a Reply-To line with no mailboxes in it.\r\n\r\nNote also the description of \"group\" in section 3.4:\r\n\r\n  The group construct allows the sender to indicate a named group of recipients.\r\n\r\nAgain, this does not envision using a group in a header like Reply-To.  But that is what the current reply-to construct permits.\r\n\r\nSummary:  The RFC either needs to forbid Reply-To with zero mailboxes, or it needs to explain what the semantics of such a Reply-To are.\n --VERIFIER NOTES-- \nReply-To has allowed address lists (as against mailbox lists) as far back as RFC 733. This would be a change to long held consensus. Not appropriate for an erratum.   ", "submit_date": "2011-05-27", "submitter_name": "Nemo", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2817", "doc-id": "RFC3588", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5.2", "orig_text": "There is no valid avp named[ Original-State-Id ].\r\n\r\nin DWA message [ Original-State-Id ] should be replaced by [ Origin-State-Id ]\r\nMessage Format\r\n<DWA> ::= < Diameter Header: 280 >\r\n{ Result-Code }\r\n{ Origin-Host }\r\n{ Origin-Realm }\r\n[ Error-Message ]\r\n* [ Failed-AVP ]\r\n[ Original-State-Id ]", "correct_text": " Message Format\r\n<DWA> ::= < Diameter Header: 280 >\r\n{ Result-Code }\r\n{ Origin-Host }\r\n{ Origin-Realm }\r\n[ Error-Message ]\r\n* [ Failed-AVP ]\r\n[ Origin-State-Id ]", "notes": "", "submit_date": "2011-05-28", "submitter_name": "Vinay parashar", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2858", "doc-id": "RFC3280", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.2.4", "orig_text": "   Exceptions to the December 31, 2003 UTF8 encoding requirements are as\r\n   follows:\r\n\r\n      (a)  CAs MAY issue \"name rollover\" certificates to support an\r\n      orderly migration to UTF8String encoding.  Such certificates would\r\n      include the CA's UTF8String encoded name as issuer and and the old\r\n      name encoding as subject, or vice-versa.", "correct_text": "   Exceptions to the December 31, 2003 UTF8 encoding requirements are as\r\n   follows:\r\n\r\n      (a)  CAs MAY issue \"name rollover\" certificates to support an\r\n      orderly migration to UTF8String encoding.  Such certificates would\r\n      include the CA's UTF8String encoded name as issuer and the old\r\n      name encoding as subject, or vice-versa.", "notes": "there is a duplicate 'and'", "submit_date": "2011-07-12", "submitter_name": "Jaime Hablutzel", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2859", "doc-id": "RFC4281", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   cod-fancy   := \"codecs*\" \":=\" encodedv", "correct_text": "   cod-fancy   := \"codecs*\" \"=\" encodedv\r\n                                       ^^^", "notes": "The syntax is supposed to specify \"=\" not \":=\"", "submit_date": "2011-07-12", "submitter_name": "Randall Gellens", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4139", "doc-id": "RFC5663", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7", "orig_text": "<section doesn't exist yet>", "correct_text": "2.7.  Volatile write caches\r\n\r\n   Many storage devices implement volatile write caches that require an\r\n   explicit flush to persist the data from write write operations to\r\n   stable storage.  When a volatile write cache is used the pNFS server\r\n   must ensure the volatile write cache has been committed to stable\r\n   storage before the LAYOUTCOMMIT operation returns.  An example for\r\n   this behavior are SCSI devices with the WCE (Writeback Cache Enable)\r\n   bit set to 1 in the caching mode page (mode page 0x8),\r\n   which require a \"SYNCRONIZE CACHE (10)\" or \"SYNCRONIZE CACHE (16)\"\r\n   operation to write back the storage device cache.", "notes": "RFC5663 currently doesn't acknowledge the existence of volatile write caches, but they are common in consumer or SMB storage systems.  Add a section that requires the server to take care of them.", "submit_date": "2014-10-23", "submitter_name": "Christoph Hellwig", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4219", "doc-id": "RFC6550", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.0", "orig_text": "This document specifies the IPv6 Routing Protocol for LLNs (RPL).\r\nNote that although RPL was specified according to the requirements\r\nset forth in the aforementioned requirement documents, its use is in\r\nno way limited to these applications.", "correct_text": "This document specifies the IPv6 Routing Protocol for LLNs (RPL).  \r\nThe acronym RPL is used extensively in other documents and in \r\nother acronyms,and it is pronounced \"ripple\". As such, it is \r\nappropriate to write \"a RPL root\" as if the acronym was pronounced, \r\nrather than \"an RPL root\" if the letters were spelt out \"arr peee ell\".\r\n\r\nNote that although RPL was specified according to the requirements\r\nset forth in the aforementioned requirement documents, its use is in\r\nno way limited to these applications.", "notes": "Pronunciation of RPL\r\nNewcomers to the IoT space do not know what \"ripple\" is.\r\nThis is recorded as errata so that it does not get lost on 6550bis.", "submit_date": "2015-01-05", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2818", "doc-id": "RFC5451", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "B.5", "orig_text": "        Authentication-Results: example.com;\r\n                  sender-id=hardfail header.from=example.com;\r\n                  dkim=pass (good signature) header.i=sender@example.com\r\n        Received: from mail-router.example.com\r\n                      (mail-router.example.com [192.0.2.1])\r\n                  by auth-checker.example.com (8.11.6/8.11.6)\r\n                      with ESMTP id i7PK0sH7021929;\r\n                  Fri, Feb 15 2002 17:19:22 -0800\r\n        Authentication-Results: example.com;\r\n                  auth=pass (cram-md5) smtp.auth=sender@example.com;\r\n                  spf=hardfail smtp.mailfrom=example.com\r\n        Received: from dialup-1-2-3-4.example.net\r\n                      (dialup-1-2-3-4.example.net [192.0.2.200])\r\n                  by mail-router.example.com (8.11.6/8.11.6)\r\n                      with ESMTP id g1G0r1kA003489;\r\n                  Fri, Feb 15 2002 17:19:07 -0800\r\n        DKIM-Signature:  v=1; a=rsa-sha256; s=gatsby; d=example.com;\r\n                  i=sender@example.com; t=1188964191; c=simple/simple;\r\n                  h=From:Date:To:Message-Id:Subject;\r\n                  bh=sEuZGD/pSr7ANysbY3jtdaQ3Xv9xPQtS0m70;\r\n                  b=EToRSuvUfQVP3Bkz ... rTB0t0gYnBVCM=\r\n        From: sender@example.com\r\n        Date: Fri, Feb 15 2002 16:54:30 -0800\r\n        To: receiver@example.com\r\n        Message-Id: <12345.abc@example.com>\r\n        Subject: here's a sample\r\n\r\n        Hello!  Goodbye!\r\n", "correct_text": "        Authentication-Results: example.com;\r\n                  spf=pass smtp.mailfrom=example.com\r\n                  dkim=pass (good signature) header.i=@example.com\r\n        Received: from msa.example.com (msa.example.com [192.0.2.1])\r\n                  by mx.example.com (8.11.6/8.11.6)\r\n                      with ESMTP id i7PK0sH7021929;\r\n                  Fri, Feb 15 2002 17:19:22 -0800\r\n        DKIM-Signature:  v=1; a=rsa-sha256; s=gatsby; d=example.com;\r\n                  t=1188964191; c=simple/simple; h=From:Date:To:Subject:\r\n                  Message-Id:Authentication-Results;\r\n                  bh=sEuZGD/pSr7ANysbY3jtdaQ3Xv9xPQtS0m70;\r\n                  b=EToRSuvUfQVP3Bkz ... rTB0t0gYnBVCM=\r\n        Authentication-Results: example.com;\r\n                  auth=pass (details omitted as precautionary measure)\r\n        Received: from [192.0.2.200]\r\n                      (dialup-1-2-3-4.example.net [192.0.2.200])\r\n                  by msa.example.com (8.11.6/8.11.6)\r\n                      with ESMTP id g1G0r1kA003489;\r\n                  Fri, Feb 15 2002 17:19:07 -0800\r\n        From: sender@example.com\r\n        Date: Fri, Feb 15 2002 16:54:30 -0800\r\n        To: receiver@example.com\r\n        Message-Id: <12345.abc@example.com>\r\n        Subject: here's a sample\r\n\r\n        Hello!  Goodbye!\r\n", "notes": "The corrected example shows how an MSA may prove that it handled submission by signing an A-R field. (I reordered the header, changed host names, changed A-R fields, removed i=, and added A-R in h=)\r\n\r\nSome text in the same section may need minor revision.  In particular, SPF pass, host name, senderid, and the origin of the DKIM key (in the corrected example, example.net may well be a MUA, while example.com has separate MSA and MX hosts.)", "submit_date": "2011-05-31", "submitter_name": "Alessandro Vesely", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2819", "doc-id": "RFC3122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |    Length   |                                 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+        -       -       -        +\r\n   |                          Reserved                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |     Length    |                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+       -       -       -       +\r\n   |                          Reserved                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The length field is 8 bits long, not 7. The diagram is wrong as the field should end in the 16th bit of the word.", "submit_date": "2011-06-02", "submitter_name": "Luis MG", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2820", "doc-id": "RFC5234", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "         prose-val      =  \"<\" *(%x20-3D / %x3F-7E) \">\"\r\n                                ; bracketed string of SP and VCHAR\r\n                                ;  without angles", "correct_text": "         prose-val      =  \"<\" *(%x20-3D / %x3F-7E) \">\"\r\n                                ; bracketed string of SP and VCHAR\r\n                                ;  without \">\"", "notes": "\"without angles\" suggests that \">\" and \"<\"\r\nmust not appear but the range of codes given\r\nsuggests that only \">\" must not appear.", "submit_date": "2011-06-03", "submitter_name": "Spiros Bousbouras", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2821", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "       341    RPL_INVITING\r\n              \"<channel> <nick>\"", "correct_text": "       341    RPL_INVITING\r\n              \"<nick> <channel>\"", "notes": "Numeric reply 341 is used by the server to report a sucessful invitation attempt to the original client sending the invitation. The RFC mentions the reply arguments are the channel and the nickname, but every client and server I have tested expect the nickname first, followed by the channel name.", "submit_date": "2011-06-05", "submitter_name": "Ricardo Garcia", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2822", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "The original text is missing.", "correct_text": "       416    ERR_TOOMANYMATCHES\r\n              \"<channel> :Output too long (try locally)\"\r\n\r\n         - Returned by a server in response to a LIST or NAMES \r\n           message to indicate the result contains too many\r\n           items to be returned to the client.\r\n", "notes": "", "submit_date": "2011-06-05", "submitter_name": "Ricardo Garcia", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2823", "doc-id": "RFC2047", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "   The following examples illustrate how text containing 'encoded-word's\r\n   which appear in a structured field body.", "correct_text": "   The following examples illustrate how text containing 'encoded-word's\r\n   appears in a structured field body.", "notes": "", "submit_date": "2011-06-05", "submitter_name": "Spiros Bousbouras", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2824", "doc-id": "RFC4034", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1.3", "orig_text": "   The value of the Labels field MUST NOT count either the null (root)\r\n   label that terminates the owner name or the wildcard label (if\r\n   present).", "correct_text": "   The value of the Labels field MUST NOT count either the null (root)\r\n   label that terminates the owner name or the leftmost label if\r\n   it is a wildcard.", "notes": "In RFC 4035, section 2.2, describing the same count uses this: ... \"and not counting the leftmost label if it is a wildcard\" to omit the leading wildcard label.  (In 4034, the wildcard label is defined as \"*\" earlier in the same problematic section.)\r\n\r\nThe text in 4034 could be confused with having to count \"wildcard labels\" in the middle of a name, such as in name.*.tld.  The reason for suggesting this errata is for compliance considerations.\n --VERIFIER NOTES-- \nAll wildcard labels start with * in the leftmost label. No other kind of wildcard label exists.\r\n\r\nFrom RFC 1034:\r\n\r\n4.3.3. Wildcards\r\n\r\nIn the previous algorithm, special treatment was given to RRs with owner\r\nnames starting with the label \"*\".\r\n", "submit_date": "2011-06-06", "submitter_name": "Edward Lewis", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2825", "doc-id": "RFC5801", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "The initiator-address-type and acceptor-address-type fields of the GSS-CHANNEL-BINDINGS structure MUST be set to 0.\r\n", "correct_text": "The initiator-address-type and acceptor-address-type fields of the GSS-CHANNEL-BINDINGS structure MUST be set to 255 (GSS_C_AF_NULLADDR).\r\n", "notes": "See RFC 2744, section 3.11, last paragraph:  \"[...] or omit addressing information, specifying GSS_C_AF_NULLADDR as the address-types\".\r\n\r\nAppendix A of RFC 2744 specifies that the value of GSS_C_AF_NULLADDR is 255.", "submit_date": "2011-06-07", "submitter_name": "Thomas Maslen", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2826", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "[...]\r\nand a 64-bit fraction field resolving .05 attosecond (i.e., 0.5e-18).", "correct_text": "[...]\r\nand a 64-bit fraction field resolving .05 attosecond (i.e., 0.05e-18).", "notes": "\"atto\" is the prefix for 1e-18.", "submit_date": "2011-06-10", "submitter_name": "Christian Aistleitner", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2845", "doc-id": "RFC1738", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "scheme         = 1*[ lowalpha | digit | \"+\" | \"-\" | \".\" ]\r\n\r\n[ . . . ]\r\n\r\nhostname       = *[ domainlabel \".\" ] toplabel\r\ndomainlabel    = alphadigit | alphadigit *[ alphadigit | \"-\" ] alphadigit\r\ntoplabel       = alpha | alpha *[ alphadigit | \"-\" ] alphadigit\r\n\r\n[ . . . ]\r\n\r\nuser           = *[ uchar | \";\" | \"?\" | \"&\" | \"=\" ]\r\npassword       = *[ uchar | \";\" | \"?\" | \"&\" | \"=\" ]\r\n\r\n[ . . . ]\r\n\r\nfpath          = fsegment *[ \"/\" fsegment ]\r\nfsegment       = *[ uchar | \"?\" | \":\" | \"@\" | \"&\" | \"=\" ]\r\n\r\n[ . . . ]\r\n\r\nhpath          = hsegment *[ \"/\" hsegment ]\r\nhsegment       = *[ uchar | \";\" | \":\" | \"@\" | \"&\" | \"=\" ]\r\nsearch         = *[ uchar | \";\" | \":\" | \"@\" | \"&\" | \"=\" ]\r\n\r\n[ . . . ]\r\n\r\ngroup          = alpha *[ alpha | digit | \"-\" | \".\" | \"+\" | \"_\" ]\r\narticle        = 1*[ uchar | \";\" | \"/\" | \"?\" | \":\" | \"&\" | \"=\" ] \"@\" host\r\n\r\n[ . . . ]\r\n\r\nppath          = psegment *[ \"/\" psegment ]\r\npsegment       = *[ uchar | \"?\" | \":\" | \"@\" | \"&\" | \"=\" ]\r\nfieldspec      = \";\" fieldname \"=\" fieldvalue\r\nfieldname      = *[ uchar | \"?\" | \":\" | \"@\" | \"&\" ]\r\nfieldvalue     = *[ uchar | \"?\" | \":\" | \"@\" | \"&\" ]", "correct_text": "scheme         = 1*( lowalpha | digit | \"+\" | \"-\" | \".\" )\r\n\r\n[ . . . ]\r\n\r\nhostname       = *( domainlabel \".\" ) toplabel\r\ndomainlabel    = alphadigit | alphadigit *( alphadigit | \"-\" ) alphadigit\r\ntoplabel       = alpha | alpha *( alphadigit | \"-\" ) alphadigit\r\n\r\n[ . . . ]\r\n\r\nuser           = *( uchar | \";\" | \"?\" | \"&\" | \"=\" )\r\npassword       = *( uchar | \";\" | \"?\" | \"&\" | \"=\" )\r\n\r\n[ . . . ]\r\n\r\nfpath          = fsegment *( \"/\" fsegment )\r\nfsegment       = *( uchar | \"?\" | \":\" | \"@\" | \"&\" | \"=\" )\r\n\r\n[ . . . ]\r\n\r\nhpath          = hsegment *( \"/\" hsegment )\r\nhsegment       = *( uchar | \";\" | \":\" | \"@\" | \"&\" | \"=\" )\r\nsearch         = *( uchar | \";\" | \":\" | \"@\" | \"&\" | \"=\" )\r\n\r\n[ . . . ]\r\n\r\ngroup          = alpha *( alpha | digit | \"-\" | \".\" | \"+\" | \"_\" )\r\narticle        = 1*( uchar | \";\" | \"/\" | \"?\" | \":\" | \"&\" | \"=\" ) \"@\" host\r\n\r\n[ . . . ]\r\n\r\nppath          = psegment *( \"/\" psegment )\r\npsegment       = *( uchar | \"?\" | \":\" | \"@\" | \"&\" | \"=\" )\r\nfieldspec      = \";\" fieldname \"=\" fieldvalue\r\nfieldname      = *( uchar | \"?\" | \":\" | \"@\" | \"&\" )\r\nfieldvalue     = *( uchar | \"?\" | \":\" | \"@\" | \"&\" )", "notes": "Given this is BNF of RFC 822 construction <n>*<m>[element] is incorrect, as RFC 822 defines:\r\n\r\n>   2.5. [RULE]: OPTIONAL\r\n>     \r\n>    Square brackets enclose optional elements; \"[foo  bar]\"   is\r\n>    equivalent to \"*1(foo bar)\".\r\n\r\nand therefore [] construction is illegal in the aforementioned one.  My proposal is to replace all occurrences of [] construction where they are used in the meaning of () with the legal-as-per-822 one.\n --VERIFIER NOTES-- \n   This specification does not use the BNF syntax from RFC 822. Please refer\r\n   to the first paragraph of Section 5:\r\n\r\n   ###\r\n\r\n   This is a BNF-like description of the Uniform Resource Locator\r\n   syntax, using the conventions of RFC822, except that \"|\" is used to\r\n   designate alternatives, and brackets [] are used around optional or\r\n   repeated elements. Briefly, literals are quoted with \"\", optional\r\n   elements are enclosed in [brackets], and elements may be preceded\r\n   with <n>* to designate n or more repetitions of the following\r\n   element; n defaults to 0.\r\n\r\n   ###\r\n\r\n   The definitions follow the syntax used in this document. Thus\r\n   the report is incorrect.", "submit_date": "2011-06-26", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2846", "doc-id": "RFC5092", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11", "orig_text": "   ipath-empty     = 0<pchar>\r\n                    ; Zero characters.\r\n                    ; The same-document reference.", "correct_text": "   ipath-empty     = \"\"\r\n                    ; Zero characters.\r\n                    ; The same-document reference.", "notes": "Copying Erratum report #2033 for RFC 3986 by Tanaka Akira.  \"0<foo>\" assumes \"foo\" is <pros-val> of RFC 5234, which it isn't.  Given this should identify null string, \"\" is appropriate, in my opinion.", "submit_date": "2011-06-28", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2847", "doc-id": "RFC2222", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6", "orig_text": "will perform no review of clams made", "correct_text": "will perform no review of claims made", "notes": "Minor typo\n --VERIFIER NOTES-- \n   This minor typo was fixed in RFC 4422, which obsoleted RFC 2222.", "submit_date": "2011-06-28", "submitter_name": "Alex Allain", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2868", "doc-id": "RFC3403", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "SERVICES\r\nA <character-string> that specifies the Service Parameters\r\napplicable to this this delegation path. It is up to the\r\nApplication Specification to specify the values found in this\r\nfield.", "correct_text": "SERVICES\r\nA <character-string> that specifies the Service Parameters\r\napplicable to this delegation path. It is up to the\r\nApplication Specification to specify the values found in this\r\nfield.", "notes": "Duplicate \"this\".", "submit_date": "2011-07-21", "submitter_name": "Kevin Dean", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2869", "doc-id": "RFC6326", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "      Registry Name: IS-IS Group Address Type Codes for TLV 10\r\n", "correct_text": "      Registry Name: IS-IS Group Address Type Codes for TLV 142\r\n", "notes": "Other numeric references for the Group Address TLV are 142, the correct value, but in this one instance, it is show as 10, which is actually the Authentication TLV type number.", "submit_date": "2011-07-26", "submitter_name": "Donald E. Eastlake, 3rd", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2870", "doc-id": "RFC2813", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2.1", "orig_text": "as per the LUSER reply", "correct_text": "as per the LUSERS reply", "notes": "", "submit_date": "2011-07-27", "submitter_name": "Ricardo Garcia", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2871", "doc-id": "RFC5457", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6", "orig_text": "0x34 | OSPTOKEN       | OSP Token Block     ", "correct_text": "0x35 | OSPTOKEN       | OSP Token Block     \r\n", "notes": "The token value in the RFC is wrong - it should have been 0x35 not 0x34. This change has been reviewed by expert review for the IANA registry (Cullen Jennings), the responsible AD ( Robert Sparks) and Kevin Fleming and other developers of systems that implement this protocol.", "submit_date": "2011-07-27", "submitter_name": "Cullen Jennings", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2872", "doc-id": "RFC5952", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "   For these addresses, mixed notation is\r\n   RECOMMENDED if the following condition is met: the address can be\r\n   distinguished as having IPv4 addresses embedded in the lower 32 bits\r\n   solely from the address field through the use of a well-known prefix.", "correct_text": "   For these addresses, mixed notation is \r\n   RECOMMENDED if the following conditions are met: the address can be\r\n   distinguished as having IPv4 addresses embedded in the lower 32 bits \r\n   solely from the address field through the use of a well-known prefix, \r\n   and the entire address is not either the unspecified IPv6 address \r\n   \"::\" or the loopback IPv6 address \"::1\".", "notes": "RFC-4291 defines the 80-bit all-zeros prefix as indicating an \"IPv4-compatible IPv6 address\". Without further clarification in section 5 of RFC-5952, the recommended formatting of the IPv6 unspecified address would be \"::0.0.0.0\", and the recommended formatting of the IPv6 loopback address would be \"::0.0.0.1\". Neither of these recommended representations is desirable.\r\n --VERIFIER NOTES-- \r\n::1 and :: are more specific and not part of the reserved block for IPv4 compatible addresses.   ", "submit_date": "2011-07-28", "submitter_name": "Richard J. Smith", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2873", "doc-id": "RFC6313", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "Two new IPFIX registries have been created, and the existing IPFIX\r\nInformation Element registry has been updated as detailed below.", "correct_text": "A new IPFIX registry has been created, and the existing IPFIX\r\nInformation Element registry has been updated as detailed below.", "notes": "Only one new registry has been created - for the \"structured data types semantics\", per section 11.4 of the document.", "submit_date": "2011-07-28", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4241", "doc-id": "RFC6351", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "     BEGIN:VCARD\r\n     VERSION:4.0\r\n     contact.FN=...\r\n     contact.EMAIL=...\r\n     media.PHOTO=...\r\n     CATEGORIES=...\r\n     END:VCARD", "correct_text": "     BEGIN:VCARD\r\n     VERSION:4.0\r\n     contact.FN:...\r\n     contact.EMAIL:...\r\n     media.PHOTO:...\r\n     CATEGORIES:...\r\n     END:VCARD", "notes": "Property names and values are separated by a colon, not an equal sign.", "submit_date": "2015-01-26", "submitter_name": "Ivan Enderlin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4242", "doc-id": "RFC7434", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13", "orig_text": "      ASN.1 Identifier: 1.3.6.1.8.4.x", "correct_text": "      ASN.1 Identifier: 1.3.6.1.8.4.26", "notes": "The IANA-assigned value should be filled in.", "submit_date": "2015-01-26", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2829", "doc-id": "RFC4992", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "  Chunks of this type contain XML conformant to the schema specified in\r\n  [9] and MUST have the <versions> element as the root element.", "correct_text": "   Chunks of this type MUST contain XML conformant to the schema\r\n   specified in [9] and MUST have the <versions> element as the root\r\n   element, unless sent by the Client to solicit version information;\r\n   client to server chunks may be zero length, as detailed below.\r\n", "notes": "Note: This erratum was separated off from erratum #1009.\r\n\r\nThe reporter of the erratum said:\r\n\r\n   As already mentioned earlier in the text and clarified in the\r\n   second-to-last paragraph of the same section, this requirements\r\n   language is improper because it is intended to allow clients to\r\n   send this type of chunk as well, with unspecified (perhaps empty)\r\n   content, to be ignored by the server.\r\n\r\nThe authors of the specification provided the following notes:\r\n\r\n   We recommend accepting the error reported in Erratum ID 2829, \r\n   but we do not recommend accepting the proposed fix.  The issue \r\n   is that the MUSTs listed in the original apply when the server \r\n   emits this, but not to the client when it is soliciting this.  \r\n   We recommend the following:\r\n\r\n   \"Chunks of this type MUST contain XML conformant to the schema\r\n   specified in [9] and MUST have the <versions> element as the \r\n   root element, unless sent by the Client to solicit version \r\n   information; client to server chunks may be zero length, as \r\n   detailed below.\"\r\n", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2830", "doc-id": "RFC4992", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.5", "orig_text": "   These fields MUST NOT span multiple chunks.  Therefore, it should be\r\n   noted that SASL data length exceeding the length of the chunk minus\r\n   the length of SASL profile name minus one is an error.\r\n", "correct_text": "   These fields MUST NOT span multiple chunks.  Therefore, it should be\r\n   noted that a mechanism data length exceeding the length of the chunk\r\n   minus the mechanism name length minus three is an error.\r\n", "notes": "This section presents the diagram below (and subsequent field\r\nexplanations):\r\n\r\n         +-----------+-----------+-----------+-----------+\r\n   field | mechanism | mechanism | mechanism | mechanism |\r\n         |   name    |   name    |   data    |   data    |\r\n         |  length   |           |  length   |           |\r\n         +-----------+-----------+-----------+-----------+\r\n   octets     1        variable       2        variable\r\n\r\n                            SASL Authentication\r\n\r\n\r\nApparently, the fate of the 'mechanism data length' field once has\r\nbeen unsure, and it (almost) seems to be a redundant field anyway.\r\n\r\nAs specified, the data handed out by a SASL mechanism as a single\r\nprotocol message must be contained within the 'mechanism data' field\r\nof a single chunk.\r\nApparently, there are no provisions for chunk padding in the protocol.\r\nTherefore, according to the figure quoted above in item (A.2) and\r\nthe above figure, for these chunks the following equation holds\r\n(for clarity, I denote the content of a field by giving the field\r\nname in angular braces):\r\n\r\n  <chunk data length> = 1    ; length of 'name length' field\r\n                      + <name length>\r\n                      + 2    ; length of 'mechanism data length' field\r\n                      + <mechanism data length>\r\n\r\nThis leads to the conclusion that the 'mechanism data length' field\r\nis redundant; I suspect it was left out from the SASL chunk structure\r\nat the time when the paragraph quoted below was drafted.\r\n\r\nTaking all together, the paragraph above makes no sense:\r\n\r\no  The undefined term 'SASL data length' should be replaced with the\r\n   defined term, 'mechanism data length'.\r\n\r\no  SASL *profiles* are not discussed in this memo,\r\n   the text consistently should talk about SASL *mechanism*s,\r\n   and use the defined field name, 'mechanism name length'.\r\n\r\no  The constant overhead is *three* bytes, not *one*.\r\n\r\nFurthermore, proper articles should be inserted to improve the language.\r\n\r\n[Separating into individual errata from 1009]\n --VERIFIER NOTES-- \n   The authors of the specification note that the terms \r\n   being interchanged are defined to be equivalent in \r\n   section 6.5, so there is no substantive issue.  This \r\n   could be adjusted editorially if the documents are \r\n   updated.", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2831", "doc-id": "RFC4992", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.5", "orig_text": "    ... a server can determine authentication status ...", "correct_text": "    ... a server can determine the authentication status ...", "notes": "[Separating into individual errata from 1009]", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2836", "doc-id": "RFC4992", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   C:           (request block)\r\n   C: 0x00      (block header: V=0,KO=no)", "correct_text": "   C:           (request block)\r\n   C: 0x20      (block header: V=0,KO=yes)", "notes": "The introductory text, near the top of page 26, says:\r\n\r\n                                                [...].  Note that the\r\n   client requests that the connection stay open for further requests,\r\n   but the server does not honor this request.\r\n\r\nThis example should better be corrected to show the KO bit as announced, for educational purposes.\r\n\r\n[Separating into individual errata from 1009]", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2832", "doc-id": "RFC4992", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.5", "orig_text": "   o  mechanism data length - the length of the SASL data.\r\n", "correct_text": "   o  mechanism data length - the length of the SASL data,\r\n      or the special value 65535 (to indicate the absence of\r\n      an initial SASL response -- see below).", "notes": "The final paragraph of Section 6.5 (i.e., the 2nd paragraph\r\non page 12) says:\r\n\r\n   When used as an initial challenge response for SASL mechanisms that\r\n   support such a feature, the mechanism data length may be set to a\r\n   decimal value of 65,535 to indicate an absent initial response.  A\r\n   value of 0 indicates an empty initial response.\r\n\r\nApparently, the need to subtly distinguish an absent initial response\r\nfrom an empty initial response is the only justification left for the\r\nexistence of the 'mechanism data length' field.\r\nBut this information could be conveyed in a single flag bit.\r\n\r\n[Separating into individual errata from 1009]", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2849", "doc-id": "RFC5617", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "<section 6.5 missing>", "correct_text": "6.5.  Non-Compliant Messages\r\n\r\nBoth DKIM and ADSP are predicated on receiving valid RFC5322 messages as input.\r\nWhere, for example, a message under evaluation has multiple From fields, it is\r\nunspecified from which From field the Author Domain is to be extracted.\r\nImplementers are advised to return a result that indicates the Author Domain\r\ncould not be determined when the input message has multiple From header fields,\r\nor even more generally if the message does not comply with RFC5322.", "notes": "This is an issue brought up during the RFC4871bis effort.\r\n\r\nAn alternative to the above would be to make this a normative requirement rather than a Security Consideration.", "submit_date": "2011-06-29", "submitter_name": "Murray Kucherawy", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2850", "doc-id": "RFC3659", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.5", "orig_text": "   and each sequence of\r\n   lines that begin \"D> \" was sent from the server-PI to the user-PI\r\n   over a data connection created just to send those lines and closed\r\n   immediately after.", "correct_text": "   and each sequence of\r\n   lines that begin \"D> \" was sent from the server-DTP to the user-DTP\r\n   over a data connection created just to send those lines and closed\r\n   immediately after.", "notes": "In this case the acting parties are DTPs, not PIs.", "submit_date": "2011-06-29", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2833", "doc-id": "RFC4992", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.6", "orig_text": "\t\t   where as", "correct_text": "                   whereas", "notes": "[Separating into individual errata from 1009]", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2852", "doc-id": "RFC5101", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Figure O", "orig_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Scope N Field Length      |   Scope N Enterprise Number ...\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   ...  Scope N Enterprise Number   |1| Option 1 Infor. Element Id. |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Option 1 Field Length      |  Option 1 Enterprise Number ...\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   ... Option 1 Enterprise Number   |              ...              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n", "correct_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Scope N Field Length      |   Scope N Enterprise Number  ...\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  ...  Scope N Enterprise Number   |1| Option 1 Infor. Element Id. |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Option 1 Field Length      |  Option 1 Enterprise Number  ...\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  ... Option 1 Enterprise Number   |              ...              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n", "notes": "Notice that the rows don't line up properly. I think this is because the ellipsis were supposed to overlap the edges. Compare with the diagram in A.4.3.\r\n\r\nPerhaps the ellipsis in the figure in section A.4.2 could also be modified for consistency.", "submit_date": "2011-07-03", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2835", "doc-id": "RFC4992", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "14.1", "orig_text": "      Anonymous client access SHOULD be considered in one of two\r\n      methods:", "correct_text": "   Anonymous client access SHOULD be considered in one of two methods:", "notes": "Near the bottom of page 17, the paragraph introducing the list of\r\nnumbered items is indented too much.\r\n\r\n[Separating into individual errata from 1009]", "submit_date": "2007-09-09", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2851", "doc-id": "RFC4790", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "    other-uri        =  <absoluteURI>\r\n                     ;  excluding the IANA collation namespace.", "correct_text": "     other-uri       =  absolute-URI\r\n                     ;  excluding the IANA collation namespace.\r\n\r\n   The ABNF production \"absolute-URI\" is imported from URI: Generic Syntax [4].", "notes": "In the current definition it is assumed \"absoluteURI\" is a <prose-val> of RFC 4234. However it actually refers to the <absolute-URI> of RFC 3986, which I propose to be fixed.", "submit_date": "2011-07-01", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2853", "doc-id": "RFC4585", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "OLD:\r\n      rtcp-fb-param      = SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string]\r\n                         / ; empty\r\nNEW:\r\n      rtcp-fb-param      = [ SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string] ]\r\n\r\n\r\nOLD:\r\n      rtcp-fb-ack-param  = SP \"rpsi\"\r\n                         / SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string]\r\n                         / ; empty\r\nNEW:\r\n      rtcp-fb-ack-param  = [ SP \"rpsi\"\r\n                         / SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string] ]\r\n\r\n\r\nOLD:\r\n      rtcp-fb-nack-param = SP \"pli\"\r\n                         / SP \"sli\"\r\n                         / SP \"rpsi\"\r\n                         / SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string]\r\n                         / ; empty\r\nNEW:\r\n      rtcp-fb-nack-param = [ SP \"pli\"\r\n                         / SP \"sli\"\r\n                         / SP \"rpsi\"\r\n                         / SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string] ]\r\n", "correct_text": "", "notes": "During the AUTH48 of RFC 6285, we discovered a bug with the ABNF syntax in RFC 4585. The original ABNF in Section 4.2 (as noted above) is incorrect (\"/ ;empty\" is not a valid ABNF - RFC 5234 does not allow empty alternates).\r\n\r\nThe NEW text intends to fix it. There are 3 places where the same change should be applied (changes are identical).", "submit_date": "2011-07-05", "submitter_name": "Ali Begen", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2854", "doc-id": "RFC6214", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "The whole section about the frame format and the lack of \r\nLayer2-type, and the technical choice behind it.", "correct_text": "RFC 6274, section 3.1 explicitely forbids this technique and \r\nrequires that an IP implementation checks the version number, \r\nwhich will prevent RFC 6214 to work.", "notes": "Yes, I know that this RFC was published on April 1st... Nevertheless, this is an interesting technical point.\r\n\n --VERIFIER NOTES-- \nRFC 6274 was published in July 2011, three months after RFC 6214.  \r\nFurther, RFC 6274 is only Informational. The recommendation that you \r\nmention asserts that \"in practice different versions of IP are \r\nidentified by a different Protocol Type (e.g., EtherType in the case \r\nof Ethernet) number in the link-layer protocol header.\" That assertion \r\nis untrue of conforming implementations of RFC 6214, which, apparently, \r\nthe authors of RFC 6274 failed to consider.", "submit_date": "2011-07-06", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2855", "doc-id": "RFC6120", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.1", "orig_text": "3. If a response is received, it will contain one or more\r\ncombinations of a port and FDQN,", "correct_text": "3. If a response is received, it will contain one or more\r\ncombinations of a port and FQDN,", "notes": "There are multiple occurrences (1 each in list items 3, 4, 5, 6 & 7). All read FDQN and should read FQDN", "submit_date": "2011-07-06", "submitter_name": "Toby Moncaster", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2856", "doc-id": "RFC5296", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.2", "orig_text": "The EMSKname is in the username part of the NAI and is encoded in\r\nhexadecimal values.  The EMSKname is 64 bits in length and so the \r\nusername portion takes up 128 octets.", "correct_text": "The EMSKname is in the username part of the NAI and is encoded in\r\nhexadecimal values.  The EMSKname is 64 bits in length and so the \r\nusername portion takes up 16 octets.", "notes": "Verified after checking with hokey WG.", "submit_date": "2011-07-11", "submitter_name": "Qin Wu", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2857", "doc-id": "RFC5101", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2, 4th par", "orig_text": "If reduced sizing is used,", "correct_text": "If reduced size encoding is used,", "notes": "s/reduced sizing/reduced size encoding/\r\n\r\nAnother instance also in this section: \"Reduced sizing can also be used\".", "submit_date": "2011-07-11", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2874", "doc-id": "RFC6313", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "   This document specifies several new IPFIX abstract data types, a new\r\n   IPFIX Data Type Semantic, and several new Information Elements.\r\n", "correct_text": "This document specifies several new IPFIX abstract data types, a\r\nnew IPFIX Data Type Semantic, and several new Information\r\nElements. Furthermore, this document updates the schema at\r\nhttp://www.iana.org/assignments/xml-registry/schema/ipfix.xsd with\r\nthe changes specified in Appendix A.", "notes": "Agreed addition of \"Furthermore ,,. Appendix A.\" was overlooked during AUTH48.", "submit_date": "2011-07-28", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2860", "doc-id": "RFC5849", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.1.1.", "orig_text": "   5.  The request parameters as normalized in Section 3.4.1.3.2, after\r\n       being encoded (Section 3.6).\r\n", "correct_text": "   5.  The request parameters as normalized in Section 3.4.1.3.2, and then encoded (Section 3.6).\r\n\r\n[or ...]\r\n\r\n   5.  The normalized request parameter string (see Section 3.4.1.3.2), after being encoded.\r\n\r\n", "notes": "It is not clear, from the way you write, whether you mean that the request parameters are first encoded, and then normalized, or the other way round.\r\n\r\nWhen the sentence is read out of context, the meaning seems to be that the request parameters are first encoded, and then normalized, which is not what is actually meant.  The real meaning can only be understood by looking at the sentence preceding the list:  'The signature base string is constructed by concatenating together, in order, the following HTTP request elements'.  Then you understand that the request parameters are not *normalized* 'after being encoded', but are *concatenated* 'after being encoded'.\r\n\r\nIt was confusing enough for me, and my first language is English.  Until I started filling in this erratum (and until I really looked at it closely), I really thought it was a technical error, and you'd just got it wrong.", "submit_date": "2011-07-13", "submitter_name": "houtsnip", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2861", "doc-id": "RFC4235", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4", "orig_text": "  <xs:element name=\"state\">\r\n    <xs:complexType>\r\n      <xs:simpleContent>\r\n        <xs:extension base=\"xs:string\">\r\n", "correct_text": "  <xs:element name=\"state\">\r\n    <xs:complexType>\r\n      <xs:simpleContent>\r\n        <xs:extension base=\"tns:dialog-state\">\r\n...\r\n\r\n  <xs:simpleType name=\"dialog-state\">\r\n    <xs:restriction base=\"xs:string\">\r\n      <xs:enumeration value=\"trying\"/>\r\n      <xs:enumeration value=\"proceeding\"/>\r\n      <xs:enumeration value=\"early\"/>\r\n      <xs:enumeration value=\"confirmed\"/>\r\n      <xs:enumeration value=\"terminated\"/>\r\n    </xs:restriction>\r\n  </xs:simpleType>\r\n", "notes": "The RFC is rather coy about defining the exact syntax for the state element.  The schema permits any content.  It's fairly clear from the description in Section 3.7.1 what the permitted values are, but the case of the values is never explicitly stated.  The text and diagram use title case consistently, and all the examples use lower case exclusively.\r\n\r\nThis is bad for interoperability.  In practice, this is probably moot, since most implementations will use the lowercase form.  Arguably, it would be valid to produce a value of \"Early\".  An implementation seeking maximum interoperability would have to use case insensitive comparison to avoid a misinterpretation of the value.", "submit_date": "2011-07-13", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2862", "doc-id": "RFC4848", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6", "orig_text": "        u-naptr-regexp = \"!.*!\"<URI>\"!\"", "correct_text": "        u-naptr-regexp = \"!.*!\" URI \"!\"", "notes": "As this is ABNF, its productions need not be enclosed in <>.  They are only allowed when defining \"prose values\", which \"URI\" isn't.  \"URI\" is an actual ABNF production from RFC 3986/", "submit_date": "2011-07-14", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2863", "doc-id": "RFC5831", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3.1", "orig_text": "K[1] = \r\n733D2C20 65686573 74746769 326c6568\r\n626E7373 20657369 79676120 33206D54", "correct_text": "K[1] = \r\n733D2C20 65686573 74746769 79676120\r\n626E7373 20657369 326c6568 33206D54\r\n\r\n\r\n", "notes": "The entries 326c6568 and 79676120 have to been swapped", "submit_date": "2011-07-15", "submitter_name": "Tino Kaufmann", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2864", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.2", "orig_text": "struct {\r\n    ClientCertificateType certificate_types<1..2^8-1>;\r\n    DistinguishedName certificate_authorities<0..2^16-1>;\r\n} CertificateRequest;\r\n\r\n--- Fixed by errata 1585 to\r\n\r\nstruct {\r\n    ClientCertificateType certificate_types<1..2^8-1>;\r\n    SignatureAndHashAlgorithm\r\n      supported_signature_algorithms<2^16-1>;\r\n    DistinguishedName certificate_authorities<0..2^16-1>;\r\n} CertificateRequest;", "correct_text": "struct {\r\n    ClientCertificateType certificate_types<1..2^8-1>;\r\n    SignatureAndHashAlgorithm\r\n      supported_signature_algorithms<2..2^16-2>;\r\n    DistinguishedName certificate_authorities<0..2^16-1>;\r\n} CertificateRequest;", "notes": "The supported_signature_algorithms field is a variable length array. As such ceiling and floor should be specified, and they should be multiple of the base type (which is two bytes long in this case).", "submit_date": "2011-07-19", "submitter_name": "Alfredo Pironti", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2865", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4.4", "orig_text": "struct {\r\n    ClientCertificateType certificate_types<1..2^8-1>;\r\n    SignatureAndHashAlgorithm\r\n      supported_signature_algorithms<2^16-1>;\r\n    DistinguishedName certificate_authorities<0..2^16-1>;\r\n} CertificateRequest;", "correct_text": "struct {\r\n    ClientCertificateType certificate_types<1..2^8-1>;\r\n    SignatureAndHashAlgorithm\r\n      supported_signature_algorithms<2..2^16-2>;\r\n    DistinguishedName certificate_authorities<0..2^16-1>;\r\n} CertificateRequest;", "notes": "The supported_signature_algorithms field is a variable length array. As such ceiling and floor should be specified, and they should be multiple of the base type (which is two bytes long in this case). See section 7.4.1.4.1 for a valid definition of this field.", "submit_date": "2011-07-19", "submitter_name": "Alfredo Pironti", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2866", "doc-id": "RFC6238", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B says", "orig_text": "The test token shared secret uses the ASCII string value\r\n\"12345678901234567890\".", "correct_text": "The test token shared secrets use the following ASCII string values:\r\n- HMAC-SHA1: \"12345678901234567890\" (20 bytes)\r\n- HMAC-SHA256: \"12345678901234567890123456789012\" (32 bytes)\r\n- HMAC-SHA512:\r\n  \"1234567890123456789012345678901234567890123456789012345678901234\" (64 bytes)", "notes": "The secret values are different for different hash types. The example Java code respects this, but the test vector documentation does not.", "submit_date": "2011-07-20", "submitter_name": "Michal Altair Valasek", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2867", "doc-id": "RFC4826", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "The <entry>\r\nelement has a single mandatory attribute, \"ref\".", "correct_text": "The <entry-ref>\r\nelement has a single mandatory attribute, \"ref\".", "notes": "ref is a mandatory attribute of entry-ref but not entry.", "submit_date": "2011-07-20", "submitter_name": "Yi Chen", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2875", "doc-id": "RFC5472", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "The threat level to IPIFX itself", "correct_text": "The threat level to IPFIX itself", "notes": "s/IPIFX/IPFIX/", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2876", "doc-id": "RFC5472", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "even if\r\nIPIFX is not the target of the attack", "correct_text": "even if\r\nIPFIX is not the target of the attack", "notes": "s/IPIFX/IPFIX/", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2878", "doc-id": "RFC5473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "   In this example, using IPFIX to export the measurement data for each\r\n   received packet, 38 bytes have to be transferred (sourceAddressV4=4,\r\n   destinationAddressV4=4, classOfServiceV4=1, protocolIdentifier=1,\r\n   sourceTransportPort=2, destinationTransportPort=2,\r\n   observationTimeMilliseconds=8, digestHashValue=8, ipTotalLength=8).\r\n   Without considering the IPFIX protocol overhead, a Flow of 1000\r\n   packets produces 38000 bytes of measurement data.  Using the proposed\r\n   optimization, each packet produces an export of only 28 bytes\r\n   (observationTimeMilliseconds=8, digestHashValue=8, ipTotalLength=8,\r\n   commonPropertiesID=4).  The export of the Flow information produces\r\n   18 bytes (sourceAddressV4=4, destinationAddressV4=4,\r\n   classOfServiceV4=1, protocolIdentifier=1, sourceTransportPort=2,\r\n   destinationTransportPort=2, commonPropertiesID=4).  For a Flow of\r\n   1000 packets, this sums to 28018 bytes.  This is a decrease of more\r\n   than 26 percent.\r\n\r\n", "correct_text": "   In this example, using IPFIX to export the measurement data for each\r\n   received packet, 38 bytes have to be transferred (sourceIPv4Address=4,\r\n   destinationIPv4Address=4, ipClassOfService=1, protocolIdentifier=1,\r\n   sourceTransportPort=2, destinationTransportPort=2,\r\n   observationTimeMilliseconds=8, digestHashValue=8, ipTotalLength=8).\r\n   Without considering the IPFIX protocol overhead, a Flow of 1000\r\n   packets produces 38000 bytes of measurement data.  Using the proposed\r\n   optimization, each packet produces an export of only 28 bytes\r\n   (observationTimeMilliseconds=8, digestHashValue=8, ipTotalLength=8,\r\n   commonPropertiesID=4).  The export of the Flow information produces\r\n   18 bytes (sourceIPv4Address=4, destinationIPv4Address=4,\r\n   ipClassOfService=1, protocolIdentifier=1, sourceTransportPort=2,\r\n   destinationTransportPort=2, commonPropertiesID=4).  For a Flow of\r\n   1000 packets, this sums to 28018 bytes.  This is a decrease of more\r\n   than 26 percent.\r\n\r\n", "notes": "s/sourceAddressV4/sourceIPv4Address/\r\ns/destinationAddressV4/destinationIPv4Address/\r\ns/classOfServiceV4=1/ipClassOfService/\r\n\r\n- twice each.\r\n\r\nNames are per IANA's IPFIX registry.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2879", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "   o  Middleboxes [RFC3234] may change Flow properties, such as the\r\n      Differentiated Service Code Point (DSCP) value or the source IP\r\n      address.  If an IPFIX Observation Point is located in the path of\r\n      a Flow before one or more middleboxes that potentially modify\r\n      packets of the Flow, then it may be desirable to also report Flow\r\n      properties after the modification performed by the middleboxes.\r\n      An example is an Observation Point before a packet marker changing\r\n      a packet's IPv4 Type of Service (TOS) field that is encoded in\r\n      Information Element classOfServiceIPv4.  Then the value observed\r\n      and reported by Information Element classOfServiceIPv4 is valid at\r\n      the Observation Point, but not after the packet passed the packet\r\n      marker.  For reporting the change value of the TOS field, the\r\n      IPFIX information model uses Information Elements that have a name\r\n      prefix \"post\", for example, \"postClassOfServiceIPv4\".", "correct_text": "   o  Middleboxes [RFC3234] may change Flow properties, such as the\r\n      Differentiated Service Code Point (DSCP) value or the source IP\r\n      address.  If an IPFIX Observation Point is located in the path of\r\n      a Flow before one or more middleboxes that potentially modify\r\n      packets of the Flow, then it may be desirable to also report Flow\r\n      properties after the modification performed by the middleboxes.\r\n      An example is an Observation Point before a packet marker changing\r\n      a packet's IPv4 Type of Service (TOS) field that is encoded in\r\n      Information Element ipClassOfService.  Then the value observed\r\n      and reported by Information Element ipClassOfService is valid at\r\n      the Observation Point, but not after the packet passed the packet\r\n      marker.  For reporting the change value of the TOS field, the\r\n      IPFIX information model uses Information Elements that have a name\r\n      prefix \"post\", for example, \"postIpClassOfService\".", "notes": "s/ClassOfServiceIPv4/ipClassOfService/ (twice)\r\ns/postClassOfServiceIPv4/postIpClassOfService/ (once)\r\n\r\nAlso correct another instance of \"postClassOfServiceIPv4\" in section 5:\r\n\r\nOLD\r\n   Information Elements with a name having the \"post\" prefix, for\r\n   example, \"postClassOfServiceIPv4\"\r\nNEW\r\n   Information Elements with a name having the \"post\" prefix, for\r\n   example, \"postIpClassOfService\"\r\nEND", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2880", "doc-id": "RFC5473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Figure 15", "orig_text": "     0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         Set ID = 3            |      Length = 40 octets       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Template ID = 256       |       Field Count = 7         | \r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Scope Field count = 1    |0|  commonPropertiesID = 137   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Scope 1 Field Length = 4     |0|    sourceIPv4Address = 8    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 4         |0| destinationIPv4Address = 12 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 4         |0|  classOfServiceIPv4 = 5     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 1         |0|  protocolIdentifier = 4     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 1         |0|  transportSourcePort = 7    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 2         |0|transportDestinationPort = 11|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 2         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         Set ID = 3            |      Length = 40 octets       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Template ID = 256       |       Field Count = 7         | \r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Scope Field count = 1    |0|  commonPropertiesID = 137   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Scope 1 Field Length = 4     |0|    sourceIPv4Address = 8    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 4         |0| destinationIPv4Address = 12 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 4         |0|    ipClassOfService = 5     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 1         |0|  protocolIdentifier = 4     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 1         |0|  transportSourcePort = 7    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 2         |0|transportDestinationPort = 11|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 2         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "s/classOfServiceIPv4/ipClassOfService/\r\n\r\nAlso, fix the alignment of the bit position numbering at the top of the figure.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2881", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "B.2", "orig_text": "   6.  Copy each FlowSet from the Netflow V9 packet to the IPFIX Message\r\n       after the header.  Replace Set ID 0 with Set ID 2 for Template\r\n       Sets, and Set ID 1 with Set ID 3 for Options Template Sets.\r\n", "correct_text": "   6.  Copy each FlowSet from the NetFlow V9 packet to the IPFIX Message\r\n       after the header.  Replace Set ID 0 with Set ID 2 for Template\r\n       Sets, and Set ID 1 with Set ID 3 for Options Template Sets.\r\n", "notes": "s/Netflow/NetFlow/\r\n\r\nPer RFC 3954 and searches of cisco.com and google, the correct term is \"NetFlow\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2882", "doc-id": "RFC5815", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "multiple", "orig_text": "   Benoit Claise\r\n   Cisco Systems, Inc.\r\n   De Kleetlaan 6a b1\r\n   Degem  1831\r\n   BE", "correct_text": "   Benoit Claise\r\n   Cisco Systems, Inc.\r\n   De Kleetlaan 6a b1\r\n   Diegem  1831\r\n   BE", "notes": "s/Degem/Diegem/\r\n\r\n- three times:\r\n  in the MIB in section 8.1,\r\n  in the MIB in section 8.2,\r\n  and in the Author's Addresses.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2903", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.6", "orig_text": "6.1.6.  string and octetarray\r\n\r\n   The data type string represents a finite length string of valid\r\n   characters of the Unicode character encoding set.  The string data\r\n   type MUST be encoded in UTF-8 format.  The string is sent as an array\r\n   of octets using an Information Element of fixed or variable length.\r\n\r\n   The length of the Information Element specifies the length of the\r\n   octetarray.\r\n", "correct_text": "6.1.6.  string and octetArray\r\n\r\n   The data type string represents a finite length string of valid\r\n   characters of the Unicode character encoding set.  The string data\r\n   type MUST be encoded in UTF-8 format.  The string is sent as an array\r\n   of octets using an Information Element of fixed or variable length.\r\n\r\n   The length of the Information Element specifies the length of the\r\n   octetArray.", "notes": "s/octetarray/octetArray/ (twice).\r\n\r\nAlso in section 6.2:\r\n  \"Information Elements containing integer, string, float, and\r\n   octetarray types in the information model ...\"\r\n\r\nPer RFC5102 and IANA's IPFIX registry, the correct name is \"octetArray\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4590", "doc-id": "RFC1180", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "It is seen from this structure that for computers with more than one\r\nphysical network interface, the IP module is both a n-to-m multiplexer \r\nand an m-to-n de-multiplexer.", "correct_text": "It is seen from this structure that for computers with more than one\r\nphysical network interface, the IP module is both an n-to-m multiplexer \r\nand an m-to-n de-multiplexer.", "notes": "", "submit_date": "2016-01-10", "submitter_name": "Masoud Valizadeh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2883", "doc-id": "RFC6235", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2.4", "orig_text": "   The Exporting Process Reliability Statistics Options Template,\r\n   recommended in [RFC5101], contains an Exporting Process ID field,\r\n   which may be an exportingProcessIPv4Address Information Element or an\r\n   exportingProcessIPv6Address Information Element.\r\n\r\n...\r\n\r\n   Similarly, the Export Session Details Options Template and Message\r\n   Details Options Template specified for the IPFIX File Format\r\n   [RFC5655] may contain the exportingProcessIPv4Address Information\r\n   Element or the exportingProcessIPv6Address Information Element to\r\n   identify an Exporting Process from which a flow record was received,\r\n   and the collectingProcessIPv4Address Information Element or the\r\n   collectingProcessIPv6Address Information Element to identify the\r\n   Collecting Process which received it.", "correct_text": "   The Exporting Process Reliability Statistics Options Template,\r\n   recommended in [RFC5101], contains an Exporting Process ID field,\r\n   which may be an exporterIPv4Address Information Element or an\r\n   exporterIPv6Address Information Element.\r\n\r\n...\r\n\r\n   Similarly, the Export Session Details Options Template and Message\r\n   Details Options Template specified for the IPFIX File Format\r\n   [RFC5655] may contain the exporterIPv4Address Information\r\n   Element or the exporterIPv6Address Information Element to\r\n   identify an Exporting Process from which a flow record was received,\r\n   and the collectorIPv4Address Information Element or the\r\n   collectorIPv6Address Information Element to identify the\r\n   Collecting Process which received it.", "notes": "s/exportingProcessIPv4Address/exporterIPv4Address/ (twice)\r\ns/exportingProcessIPv6Address/exporterIPv6Address/ (twice)\r\ns/collectingProcessIPv4Address/collectorIPv4Address/ (once)\r\ns/collectingProcessIPv6Address/collectorIPv6Address/ (once)\r\n\r\n- per the names in IANA's IPFIX registry.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2884", "doc-id": "RFC6313", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "   \"Reducing Redundancy in IP Flow Information Export (IPFIX) and Packet\r\n   Sampling (PSAMP) Reports\" [RFC5473] describes a bandwidth saving\r\n   method for exporting Flow or packet information using the IP Flow\r\n   Information Export (IPFIX) protocol.\r\n\r\n   It defines the commonPropertiesID Information Element for exporting\r\n   Common Properties.\r\n", "correct_text": "   \"Reducing Redundancy in IP Flow Information Export (IPFIX) and Packet\r\n   Sampling (PSAMP) Reports\" [RFC5473] describes a bandwidth saving\r\n   method for exporting Flow or packet information using the IP Flow\r\n   Information Export (IPFIX) protocol.\r\n\r\n   It discusses the commonPropertiesID Information Element for exporting\r\n   Common Properties.", "notes": "s/defines/discusses/\r\n\r\n- commonPropertiesId is not defined in [RFC5473], but in [RFC5101].\r\n  [RFC5473] doesn't have any IANA actions.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2885", "doc-id": "RFC6313", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "multiple", "orig_text": "commonPropertiesID", "correct_text": "commonPropertiesId", "notes": "s/commonPropertiesID/commonPropertiesId/ (thrice)\r\n\r\n- in sections 10.1, 10.1.1, and 10.1.2.\r\n\r\nPer the definition in RFC 5101 and in IANA's IPFIX registry.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2886", "doc-id": "RFC5473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "(all)", "orig_text": "commonPropertiesID", "correct_text": "commonPropertiesId", "notes": "This doc consistently uses \"commonPropertiesID\" when the field defined in [RFC5101] and IANA's IPFIX registry is \"commonPropertiesId\".\r\n\r\nNote that some of the other errata on this RFC also contain this incorrect usage.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2887", "doc-id": "RFC6235", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2.1", "orig_text": "   In this\r\n   description, a timestamp is an Information Element with the data type\r\n   dateTimeSeconds, dataTimeMilliseconds, dateTimeMicroseconds, or\r\n   dateTimeNanoseconds;", "correct_text": "   In this\r\n   description, a timestamp is an Information Element with the data type\r\n   dateTimeSeconds, dateTimeMilliseconds, dateTimeMicroseconds, or\r\n   dateTimeNanoseconds;", "notes": "s/dataTimeMilliseconds/dateTimeMilliseconds/\r\n\r\nPer [RFC5102] section 3.1.16, the definition is \"dateTimeMilliseconds\"", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2888", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.7", "orig_text": "6.1.7.  dateTimeSeconds\r\n\r\n   The data type dateTimeseconds represents a time value in units of\r\n   seconds normalized to the GMT timezone.  It MUST be encoded in a\r\n   32-bit integer containing the number of seconds since 0000 UTC Jan 1,\r\n   1970.  The 32-bit integer allows the time encoding up to 136 years.\r\n", "correct_text": "6.1.7.  dateTimeSeconds\r\n\r\n   The data type dateTimeSeconds represents a time value in units of\r\n   seconds normalized to the GMT timezone.  It MUST be encoded in a\r\n   32-bit integer containing the number of seconds since 0000 UTC Jan 1,\r\n   1970.  The 32-bit integer allows the time encoding up to 136 years.\r\n", "notes": "s/dateTimeseconds/dateTimeSeconds/\r\n\r\n- per the section title, the definition in IANA's IPFIX registry, and usage in other IPFIX RFCs.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2889", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "multiple", "orig_text": "exportedFlowCount", "correct_text": "exportedFlowRecordTotalCount", "notes": "s/exportedFlowCount/exportedFlowRecordTotalCount/ (four times)\r\n\r\n- in sections A.4.1 (+figure), and A.4.3 (+figure).\r\n\r\nThe definition in [RFC5102] and IANA's IPFIX registry is \"exportedFlowRecordTotalCount\" (as correctly used elsewhere in this RFC).", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2890", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "multiple", "orig_text": "exportedPacketCount", "correct_text": "exportedMessageTotalCount", "notes": "s/exportedPacketCount/exportedMessageTotalCount/ (six times)\r\n\r\n- in sections A.4.1 (+figure), A.4.2  (+figure), and A.4.3  (+figure).\r\n\r\n[RFC5102] defines exportedMessageTotalCount, exportedOctetTotalCount, and exportedFlowRecordTotalCount - but no \"exportedPacketCount\".\r\n\r\nPresumably \"exportedMessageTotalCount\" is the name that's intended here.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2891", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "multiple", "orig_text": "inOctetDeltaCount", "correct_text": "octetDeltaCount", "notes": "s/inOctetDeltaCount/octetDeltaCount/ (four times)\r\n\r\n- in sections A.2.1 (+figure) and A.2.2 (+figure)\r\n\r\nPer [RFC5102] and IANA's IPFIX registry, the correct name is \"octetDeltaCount\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2892", "doc-id": "RFC5101", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "multiple", "orig_text": "inPacketDeltaCount", "correct_text": "packetDeltaCount", "notes": "s/inPacketDeltaCount/packetDeltaCount/ (four times)\r\n\r\n- in sections A.2.1 (+figure) and A.2.2 (+figure)\r\n\r\nPer [RFC5102] and IANA's IPFIX registry, the correct name is \"packetDeltaCount\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2893", "doc-id": "RFC5473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "inOctetDeltaCount", "correct_text": "octetDeltaCount", "notes": "s/inOctetDeltaCount/octetDeltaCount/ (three times)\r\n\r\n- including figure 10.\r\n\r\nPer [RFC5102] and IANA's IPFIX registry, the correct name is \"octetDeltaCount\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2895", "doc-id": "RFC5815", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "    ipfixSelectorFunctions (1)\r\n    |\r\n    +- ipfixFuncMyFunc (?)\r\n       |\r\n       +- ipfixFuncMyFuncAvail (1) = true\r\n       +- ipfixFuncMyFuncParameters (2)\r\n          |\r\n          +- ipfixFuncMyFuncParametersEntry (1)\r\n             |\r\n             +- index (1) (ipfixFuncMyFuncParametersIndex)\r\n             |  +- ipfixFuncMyFuncParam1 (1) = 47\r\n             |  +- ipfixFuncMyFuncParam2 (2) = -128\r\n             |  +- ipficFuncMyFuncParam3 (3) = 19\r\n             |\r\n             +- index(4) (ipfixFuncMyFuncParametersIndex)\r\n                +- ipfixFuncMyFuncParam1 (1) = 19\r\n                +- ipfixFuncMyFuncParam2 (2) = -1\r\n                +- ipficFuncMyFuncParam3 (3) = 728\r\n", "correct_text": "    ipfixSelectorFunctions (1)\r\n    |\r\n    +- ipfixFuncMyFunc (?)\r\n       |\r\n       +- ipfixFuncMyFuncAvail (1) = true\r\n       +- ipfixFuncMyFuncParameters (2)\r\n          |\r\n          +- ipfixFuncMyFuncParametersEntry (1)\r\n             |\r\n             +- index (1) (ipfixFuncMyFuncParametersIndex)\r\n             |  +- ipfixFuncMyFuncParam1 (1) = 47\r\n             |  +- ipfixFuncMyFuncParam2 (2) = -128\r\n             |  +- ipfixFuncMyFuncParam3 (3) = 19\r\n             |\r\n             +- index(4) (ipfixFuncMyFuncParametersIndex)\r\n                +- ipfixFuncMyFuncParam1 (1) = 19\r\n                +- ipfixFuncMyFuncParam2 (2) = -1\r\n                +- ipfixFuncMyFuncParam3 (3) = 728\r\n", "notes": "s/ipficFuncMyFuncParam3/ipfixFuncMyFuncParam3/ (twice)\r\n\r\nTypo.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2896", "doc-id": "RFC5815", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "multiple", "orig_text": "ipfixFunFn...", "correct_text": "ipfixFuncFn...", "notes": "Typo in section 6.1 and in the MIB in section 8.1.\r\nInconsistent with use of \"ipfixFuncF*\" elsewhere in the document.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2897", "doc-id": "RFC5815", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "   ipfixMeteringProcessCacheId OBJECT-TYPE\r\n       SYNTAX      Unsigned32 (1..4294967295)\r\n       MAX-ACCESS  not-accessible\r\n       STATUS      current\r\n       DESCRIPTION\r\n           \"Locally arbitrary, but unique identifier of an entry in the\r\n           ipfixMeterinProcessTable.  The value is expected to remain\r\n           constant from a re-initialization of the entity's network\r\n           management agent to the next re-initialization.\"\r\n       ::= { ipfixMeteringProcessEntry 1 }\r\n", "correct_text": "   ipfixMeteringProcessCacheId OBJECT-TYPE\r\n       SYNTAX      Unsigned32 (1..4294967295)\r\n       MAX-ACCESS  not-accessible\r\n       STATUS      current\r\n       DESCRIPTION\r\n           \"Locally arbitrary, but unique identifier of an entry in the\r\n           ipfixMeterinProcessTable.  The value is expected to remain\r\n           constant from a re-initialization of the entity's network\r\n           management agent to the next re-initialization.\"\r\n       ::= { ipfixMeteringProcessEntry 1 }\r\n", "notes": "s/ipfixMeterinProcessTable/ipfixMeteringProcessTable/\r\n\r\nTypo: section 1.1.5: Metering Process Table defines \"ipfixMeteringProcessTable\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2914", "doc-id": "RFC5234", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "         alternation    =  concatenation\r\n                           *(*c-wsp \"/\" *c-wsp concatenation)\r\n\r\n         concatenation  =  repetition *(1*c-wsp repetition)\r\n\r\n         repetition     =  [repeat] element\r\n\r\n         repeat         =  1*DIGIT / (*DIGIT \"*\" *DIGIT)\r\n\r\n         element        =  rulename / group / option /\r\n                           char-val / num-val / prose-val\r\n\r\n         group          =  \"(\" *c-wsp alternation *c-wsp \")\"\r\n\r\n         option         =  \"[\" *c-wsp alternation *c-wsp \"]\"", "correct_text": "", "notes": "Section 4. (ABNF Definition of ABNF) contains at least 2 recursions.\r\nRecursions are not explicitly mentioned in the document, which may be confusing.", "submit_date": "2011-08-03", "submitter_name": "Rudolf Dovicin", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2915", "doc-id": "RFC3406", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Header", "orig_text": "BCP: 66", "correct_text": "BCP: 33", "notes": "RFC 3406 obsoletes RFC 2611, which was BCP 33.  Correspondingly, RFC 3406 should be BCP 33 as well.  (See also http://www.rfc-editor.org/errata_search.php?rfc=4395; this is the same situation.)\r\n\r\nIf this erratum report is approved, BCP number 66 should be retired, as BCP 115 (see link above).\n --VERIFIER NOTES-- \nThis is likely correct. However, this is because the \"RFC has not been processed in accordance with the rules governing the proposed change to the RFC metadata.\" (See IESG statement on changes to metadata in errata.) Making the suggested change would potentially invalidate references to BCP 66. The IESG and RFC Editor should decide best course of action. ", "submit_date": "2011-08-04", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3467", "doc-id": "RFC6062", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.", "orig_text": "   Otherwise, the server MUST initiate an outgoing TCP connection.  The\r\n   local endpoint is the relayed transport address associated with the\r\n   allocation. ", "correct_text": "   Otherwise, the server MUST initiate an outgoing TCP connection.  This \r\n   connection MUST NOT be made using the relayed transport address \r\n   associated with the allocation.", "notes": "if you send connect request using the allocated port then port the will not be in listen mode and this will prevent incoming tcp connection on this port.\r\n\r\nthis will cause major problem while doing ice check. The effect is so bad that \r\n\r\nit may cause 97% call failure while using turn tcp behind nat.\n --VERIFIER NOTES-- \nTo my understanding this errata is due to implementation limitation or error. One those systems I have knowledge of you can create a TCP connection outgoing from the same TCP port that you have a listener. ", "submit_date": "2013-01-22", "submitter_name": "Nazmus Shakeeb", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2021-01-13 15:29:22"}, {"errata_id": "3468", "doc-id": "RFC5291", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "5. Outbound Route Filtering Capability\r\n\r\n\r\n   A BGP speaker that is willing to receive ORF entries from its peer,\r\n   or a BGP speaker that would like to send ORF entries to its peer,\r\n   advertises this to the peer by using the Outbound Route Filtering\r\n   Capability, as described below.\r\n\r\n   The Outbound Route Filtering Capability is a new BGP Capability\r\n   [BGP-CAP] defined as follows:\r\n\r\n      Capability code: 3\r\n\r\n      Capability length: variable\r\n\r\n      Capability value: one or more of the entries as shown in Figure 3.\r\n\r\n         +--------------------------------------------------+\r\n         | Address Family Identifier (2 octets)             |\r\n         +--------------------------------------------------+\r\n         | Reserved (1 octet)                               |\r\n         +--------------------------------------------------+\r\n         | Subsequent Address Family Identifier (1 octet)   |\r\n         +--------------------------------------------------+\r\n         | Number of ORFs (1 octet)                         |\r\n         +--------------------------------------------------+\r\n         | ORF Type (1 octet)                               |\r\n         +--------------------------------------------------+\r\n         | Send/Receive (1 octet)                           |\r\n         +--------------------------------------------------+\r\n         | ...                                              |\r\n         +--------------------------------------------------+\r\n         | ORF Type (1 octet)                               |\r\n         +--------------------------------------------------+\r\n         | Send/Receive (1 octet)                           |\r\n         +--------------------------------------------------+\r\n\r\n         Figure 3: Outbound Route Filtering Capability Encoding\r\n", "correct_text": "", "notes": "RFC5291 does not specify how the ORF capability is supposed to be used\r\nin conjunction with multiple enabled AFI/SAFI combinations.  The text\r\ncan be interpreted as either \"one capability instance will be sent,\r\ncarrying multiple blocks as described in Figure 3\" or as \"the\r\ncapability will be supplied in more than instance\".\r\n\r\nNote also that RFC3392 [BGP-CAP] Section 4 reads:\r\n\r\n   BGP speakers MAY include more than one instance of a capability (as\r\n   identified by the Capability Code) with non-zero Capability Length\r\n   field, but with different Capability Value, and either the same or\r\n   different Capability Length.  Processing of these capability\r\n   instances is specific to the Capability Code and MUST be described in\r\n   the document introducing the new capability.\r\n\r\nLatter description of how multiple instances of the capability are to be\r\nprocessed - albeit relatively obvious - is nowhere to be found in RFC5291.\r\n\r\n\r\nRespectfully requesting a clarification,\r\n\r\nDavid Lamparter\n --VERIFIER NOTES-- \nThis is beyond the scope of an errata system to address.\r\n\r\nI think that the right process is for the WG to decide the answer\r\nand if necessary for someone to write up a short update to\r\nRFC5291\r\n\r\nI have therefore rejected this errata.\r\n\r\nThe thread in the IDR list starts at\r\nhttp://www.ietf.org/mail-archive/web/idr/current/msg12075.html\r\n", "submit_date": "2013-01-22", "submitter_name": "David Lamparter", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3469", "doc-id": "RFC6062", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.", "orig_text": "The server MUST buffer any data received from the client.", "correct_text": "The server MUST buffer any data received from the peer.", "notes": "It is solely a typo, i.e., client is replaced by peer. ", "submit_date": "2013-01-23", "submitter_name": "Nazmus Shakeeb", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4591", "doc-id": "RFC1180", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Each person has an unique name", "correct_text": "Each person has a unique name", "notes": "", "submit_date": "2016-01-10", "submitter_name": "Masoud Valizadeh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2898", "doc-id": "RFC5815", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1.7", "orig_text": "   ipfixSelectionProcessSelectorIndex OBJECT-TYPE\r\n       SYNTAX      Unsigned32 (1..4294967295)\r\n       MAX-ACCESS  not-accessible\r\n       STATUS      current\r\n       DESCRIPTION\r\n           \"Index specifying the order in which the referenced\r\n           ipfixSelctionProcessSelectorFunctions are applied to the\r\n           observed packet stream within the given Selection Process\r\n           (identified by the ipfixSelectionProcessIndex).  The\r\n           Selector Functions are applied in increasing order, i.e.,\r\n           Selector Functions with lower index are applied first.\"\r\n       ::= { ipfixSelectionProcessEntry 2 }\r\n", "correct_text": "   ipfixSelectionProcessSelectorIndex OBJECT-TYPE\r\n       SYNTAX      Unsigned32 (1..4294967295)\r\n       MAX-ACCESS  not-accessible\r\n       STATUS      current\r\n       DESCRIPTION\r\n           \"Index specifying the order in which the referenced\r\n           ipfixSelectionProcessSelectorFunctions are applied to the\r\n           observed packet stream within the given Selection Process\r\n           (identified by the ipfixSelectionProcessIndex).  The\r\n           Selector Functions are applied in increasing order, i.e.,\r\n           Selector Functions with lower index are applied first.\"\r\n       ::= { ipfixSelectionProcessEntry 2 }\r\n", "notes": "s/ipfixSelctionProcessSelectorFunctions/ipfixSelectionProcessSelectorFunctions/\r\n\r\nTypo: section 1.1.7 Selection Process Table defines \"ipfixSelectionProcessSelectorFunction\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2899", "doc-id": "RFC5103", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   The location of the Observation Point(s)\r\n   with respect to the middlebox can be communicated using Options with\r\n   Observation Point as Scope and elements such as lineCardID or\r\n   samplerID.\r\n", "correct_text": "   The location of the Observation Point(s)\r\n   with respect to the middlebox can be communicated using Options with\r\n   Observation Point as Scope and elements such as lineCardId or\r\n   selectorId.\r\n\r\n", "notes": "s/lineCardID/lineCardId/\r\ns/samplerID/selectorId/\r\n\r\nPer the definitions in RFC5102, RFC5477 and IANA's IPFIX registry.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2900", "doc-id": "RFC5153", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   Consequently, an Exporting Process reporting traffic Flows measured\r\n   at a device that hosts one or more middleboxes should clearly\r\n   indicate to Collecting Processes the location of the used Observation\r\n   Point(s) with respect to the middlebox(es).  This can be done by\r\n   using Options with Observation Point as scope and elements like, for\r\n   instance, lineCardID or samplerID.  Otherwise, processing the\r\n   measured Flow data could lead to wrong results.\r\n", "correct_text": "   Consequently, an Exporting Process reporting traffic Flows measured\r\n   at a device that hosts one or more middleboxes should clearly\r\n   indicate to Collecting Processes the location of the used Observation\r\n   Point(s) with respect to the middlebox(es).  This can be done by\r\n   using Options with Observation Point as scope and elements like, for\r\n   instance, lineCardId or selectorId.  Otherwise, processing the\r\n   measured Flow data could lead to wrong results.\r\n", "notes": "s/lineCardID/lineCardId/\r\ns/samplerID/selectorId/\r\n\r\nPer the definitions in RFC5102, RFC5477 and IANA's IPFIX registry.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2901", "doc-id": "RFC5153", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   Note that it is sometimes necessary to export information about\r\n   entities that exist outside any Observation Domain, or within\r\n   multiple Observation Domains (e.g., information about Metering\r\n   Processes scoped to meteringProcessID).  Such information SHOULD be\r\n   exported in an IPFIX Message with Observation Domain ID 0 (see\r\n   [RFC5101], Section 3.1).\r\n", "correct_text": "   Note that it is sometimes necessary to export information about\r\n   entities that exist outside any Observation Domain, or within\r\n   multiple Observation Domains (e.g., information about Metering\r\n   Processes scoped to meteringProcessId).  Such information SHOULD be\r\n   exported in an IPFIX Message with Observation Domain ID 0 (see\r\n   [RFC5101], Section 3.1).\r\n", "notes": "s/meteringProcessID/meteringProcessId/\r\n\r\nPer RFC5102 and IANA's IPFIX registry, the correct name is \"meteringProcessId\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2939", "doc-id": "RFC5780", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.1", "orig_text": "Section 9.1\r\n   ...\r\n   0x802c: OTHER-ADDRESS\r\n   ", "correct_text": "", "notes": "The document contradicts itself, one place (section 7.4) saying that OTHER-ADDRESS has the same value as CHANGED-ADDRESS did, and the other place (section 9.1) giving a new value, which matches the IANA registry.  The statement explaining why it has the same value (which it doesn't) should be removed.", "submit_date": "2011-08-17", "submitter_name": "John Selbie", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2940", "doc-id": "RFC5440", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "PCEP operates over TCP using a registered TCP port (4189).  This allows \r\nthe requirements of reliable messaging and flow control to be met without \r\nfurther protocol work.  All PCEP messages MUST be sent using the registered \r\nTCP port for the source and destination TCP port.", "correct_text": "PCEP operates over TCP using a registered TCP port (4189).  This allows \r\nthe requirements of reliable messaging and flow control to be met without \r\nfurther protocol work.  A PCE MUST listen for incoming connections at the \r\nregistered port and a PCC SHOULD use the registered port as source port \r\nbut MAY use any source port (e.g. ephemeral port).", "notes": "As discussed / agreed during IETF80, IETF81 and following chairs / AD suggestion", "submit_date": "2011-08-18", "submitter_name": "Ramon Casellas", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3470", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.16.2", "orig_text": "An identity MUST NOT reference itself, neither directly nor \r\nindirectly through a chain of other identities.", "correct_text": "The derivation of identities has the following properties:\r\n\r\no It is irreflexive, which means that an identity is not derived from \r\n  itself.\r\n\r\no It is transitive, which means that if identity B is derived from A\r\n  and C is derived from B, then C is also derived from A.", "notes": "The desired properties of identity derivation are not clearly stated. The discussion in the NETMOD mailing led to a general agreement that identity derivation is supposed to be irreflexive and transitive. These two properties together also eliminate the possibility of a circular derivation.", "submit_date": "2013-01-24", "submitter_name": "Ladislav Lhotka", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2904", "doc-id": "RFC6313", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.4", "orig_text": "        5-tuple (Flow Keys), octetCount, packetCount\r\n\r\n...\r\n\r\n   ------------------------------------------------------------------\r\n   srcIP      | dstIP     | src  | dst  | proto | octetCount | packet\r\n              |           | Port | Port |       |            | Count\r\n   ------------------------------------------------------------------\r\n   2001:DB8::1 2001:DB8::2  1025    80      6       108000      120\r\n   ------------------------------------------------------------------\r\n", "correct_text": "        5-tuple (Flow Keys), octetTotalCount, packetTotalCount\r\n\r\n...\r\n\r\n   -----------------------------------------------------------------------\r\n   srcIP      | dstIP     | src  | dst  | proto | octetTotal | packetTotal\r\n              |           | Port | Port |       |   Count    |    Count\r\n   -----------------------------------------------------------------------\r\n   2001:DB8::1 2001:DB8::2  1025    80      6       108000         120\r\n   -----------------------------------------------------------------------\r\n", "notes": "s/octetCount/octetTotalCount/ (twice)\r\ns/packetCount/packetTotalCount/ (twice)\r\n\r\n\"octetCount\" and \"packetCount\" don't exist. Per RFC5102 and IANA's IPFIX registry, the correct names are octetTotalCount and packetTotalCount.\r\n\r\nNB correct usage in the figure on page 43 and in Figure 20 indicates that these are not the DeltaCount form.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2905", "doc-id": "RFC6183", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "      If information about a set of Original Exporters needs to be\r\n      reported, it can be useful to export it as Common Properties as\r\n      specified in [RFC5473].  The commonPropertiesID may then serve as\r\n      a scope for the set of Original Exporters.", "correct_text": "      If information about a set of Original Exporters needs to be\r\n      reported, it can be useful to export it as Common Properties as\r\n      specified in [RFC5473].  The commonPropertiesId may then serve as\r\n      a scope for the set of Original Exporters.", "notes": "s/commonPropertiesID/commonPropertiesId/\r\n\r\nPer RFC5102 and IANA's IPFIX registry, the correct name is \"commonPropertiesId\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2906", "doc-id": "RFC5655", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.1.1", "orig_text": "   Observation Domain ID:   Similarly, the NetFlow V9 sourceID has\r\n      become the IPFIX Observation Domain ID.\r\n", "correct_text": "   Observation Domain ID:   Similarly, the NetFlow V9 Source ID has\r\n      become the IPFIX Observation Domain ID.\r\n", "notes": "s/sourceID/Source ID/\r\n\r\nPer consistent usage in RFC3954, the correct term is \"Source ID\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2907", "doc-id": "RFC6235", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Figure 5", "orig_text": "                        1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Set ID = 3           |          Length =  26         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Template ID = 257        |        Field Count = 4        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Scope Field Count = 2      |0| templateID              145 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |0| informationElementId    303 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |0| anonymizationFlags      285 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |0| anonymizationTechnique  286 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "                        1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Set ID = 3           |          Length =  26         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Template ID = 257        |        Field Count = 4        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Scope Field Count = 2      |0| templateId              145 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |0| informationElementId    303 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |0| anonymizationFlags      285 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |0| anonymizationTechnique  286 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "s/templateID/templateId/\r\n\r\nPer RFC5102 and IANA's IPFIX registry, the correct name is \"templateId\".", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2908", "doc-id": "RFC5473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Figure 15", "orig_text": "     0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         Set ID = 3            |      Length = 40 octets       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Template ID = 256       |       Field Count = 7         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Scope Field count = 1    |0|  commonPropertiesID = 137   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Scope 1 Field Length = 4     |0|    sourceIPv4Address = 8    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 4         |0| destinationIPv4Address = 12 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 4         |0|  classOfServiceIPv4 = 5     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 1         |0|  protocolIdentifier = 4     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 1         |0|  transportSourcePort = 7    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 2         |0|transportDestinationPort = 11|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 2         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "     0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         Set ID = 3            |      Length = 40 octets       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Template ID = 256       |       Field Count = 7         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Scope Field count = 1    |0|  commonPropertiesID = 137   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Scope 1 Field Length = 4     |0|    sourceIPv4Address = 8    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 4         |0| destinationIPv4Address = 12 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 4         |0|  classOfServiceIPv4 = 5     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 1         |0|  protocolIdentifier = 4     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 1         |0|  sourceTransportPort = 7    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 2         |0|destinationTransportPort = 11|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Field Length = 2         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "s/transportSourcePort/sourceTransportPort/\r\ns/transportDestinationPort/destinationTransportPort/\r\n\r\nPer RFC5102 and IANA's IPFIX registry, the correct names are \"sourceTransportPort\" and \"destinationTransportPort\".\r\n\r\nErrata 2880 also relates to this figure.", "submit_date": "2011-08-01", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3471", "doc-id": "RFC5797", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "", "correct_text": "", "notes": "Section 5 states that the IANA has set up the registry, but does not give any hints as to how to find it. A link to its location would be handy. I presume the correct location is http://www.iana.org/assignments/ftp-commands-extensions/ftp-commands-extensions.xml\n --VERIFIER NOTES-- \nA a practice, we do not put URLs for registries into RFCs. Not an appropriate use of the errata system, in any event.   ", "submit_date": "2013-01-27", "submitter_name": "Alun Jones", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3940", "doc-id": "RFC6545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4", "orig_text": "<RID-Document version=\"2.0\" lang=\"en-US\"\r\n      xmlns:iodef-rid=\"urn:ietf:params:xml:ns:iodef-rid-2.0\"\r\n      xmlns:xsi=\"http://www.w3c.org/2001/XMLSchema-instance\"\r\n      xsi:schemaLocation=\"urn:ietf:params:xml:ns:iodef-rid-2.0.xsd\">\r\n", "correct_text": "<iodef-rid:RID version=\"2.0\" lang=\"en-US\"\r\n      xmlns:iodef-rid=\"urn:ietf:params:xml:ns:iodef-rid-2.0\"\r\n      xmlns:xsi=\"http://www.w3c.org/2001/XMLSchema-instance\"\r\n      xsi:schemaLocation=\"urn:ietf:params:xml:ns:iodef-rid-2.0.xsd\r\nhttp://www.iana.org/assignments/xml-registry/schema/iodef-rid-2.0.xsd\">\r\n", "notes": "Two errors in the text are fixed:\r\n\r\n1.  The root node is incorrect.  It does not have a namespace declared for the root node and there is no node named RID-Document in the schema that is declared.  The correct root node is RID and it should have the rid v2 name space\r\n\r\n2.  The schemaLocation is a pair of text strings in this location.  The first is the namespace and the second is a location to get the schema for that namespace.  An alternative is to omit the attribute as any application that is loading this document should already have the schema and should never need to go out and fetch it.", "submit_date": "2014-03-29", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2910", "doc-id": "RFC3261", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Table 2", "orig_text": "      Header field          where   proxy ACK BYE CAN INV OPT REG\r\n      ___________________________________________________________\r\n      Contact                1xx           -   -   -   o   -   -", "correct_text": "      Header field          where   proxy ACK BYE CAN INV OPT REG\r\n      ___________________________________________________________\r\n      Contact                1xx           -   -   -   m   -   -", "notes": "RFC 3261 says:\r\n\r\nSection 12.1: \"Dialogs are created through the generation of non-failure responses to requests with specific methods.  Within this specification, only 2xx and 101-199 responses with a To tag, where the request was INVITE, will establish a dialog.\"\r\n\r\nSection 12.1.1: \"When a UAS responds to a request with a response that establishes a dialog (such as a 2xx to INVITE), the UAS MUST copy all Record-Route header field values from the request into the response [...].  The UAS MUST add a Contact header field to the response.\"\r\n\r\nSo it's clear that a 1xx response to an INVITE creates a dialog and then it MUST contain a Contact header and mirrored Record-Route headers.\r\n\r\nHowever Table 2 (page 162) says:\r\n\r\n      Header field          where   proxy ACK BYE CAN INV OPT REG\r\n      ___________________________________________________________\r\n      Contact                1xx           -   -   -   o   -   -\r\n      Record-Route        2xx,18x    mr    -   o   o   o   o   -\r\n\r\nObviously Record-Route is optional since in the absence of a proxy doing record-routing, such header will not be present. However Contact header should appear as mandatory (m) for 1xx responses for INVITE rather than optional (o).\n --VERIFIER NOTES-- \n1xx also includes 100 Trying, which cannot establish a Dialog. Contact is not mandatory in 100 Trying responses. ", "submit_date": "2011-08-02", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2911", "doc-id": "RFC5473", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10", "orig_text": "   The authors would like to thank Guido Pohl for initiating this work\r\n   and for his contribution to early versions of this document.  Thanks\r\n   also to Andrew Johnson, Gehrard Muenz, Brian Trammell, and Paul\r\n   Aitken for their comments and feedback.", "correct_text": "   The authors would like to thank Guido Pohl for initiating this work\r\n   and for his contribution to early versions of this document.  Thanks\r\n   also to Andrew Johnson, Gerhard Muenz, Brian Trammell, and Paul\r\n   Aitken for their comments and feedback.", "notes": "s/Gehrard/Gerhard/\r\n\r\nTypo", "submit_date": "2011-08-02", "submitter_name": "Gerhard Muenz", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2912", "doc-id": "RFC4559", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "", "correct_text": "", "notes": "The \"Negotiate\" authentication scheme violates basic HTTP principles, in that it attaches information to the connection on which the handshake happened, and furthermore uses syntax in the WWW-Authenticate and Authorization header fields that is in violation of the base ABNF definitions.", "submit_date": "2011-08-03", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2913", "doc-id": "RFC4559", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "", "correct_text": "", "notes": "The Security Considerations require the use of the HTTP header field \"Proxy-Support\", which is not defined in this document nor registered with IANA.", "submit_date": "2011-08-03", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4424", "doc-id": "RFC6958", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |            Packets Lost in Bursts             |    Total...   |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      | ...Packets Expected in Bursts |    Number of Bursts   | Sum of|\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                ...Squares of Burst Durations (ms-squared)     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |            Packets Lost in Bursts             |    Total...   \r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n           Packets Expected in Bursts |        Number of Bursts       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                Sum of Squares of Burst Durations (ms-squared)  \r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n       ...    |                    reserved                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The packet format on Section 3.1 shows 12 bits,  however \r\nsection 3.2 defines the \"Number of bursts\" as a 16-bit field.\r\n\r\nRelevant text from Section 3.2 pasted below:\r\n\r\n  Number of Bursts: 16 bits\r\n\r\n    The number of bursts in the period of the report (Interval or\r\n    Cumulative).\r\n\r\n    The measured value is an unsigned value.  If the measured value\r\n    exceeds 0xFFFD, the value 0xFFFE MUST be reported to indicate \r\n    an over-range measurement.  If the measurement is unavailable, \r\n    the value 0xFFFF MUST be reported.\r\n --VERIFIER NOTES-- \r\n   There is an error in the report. The reporter will report a new corrected errata.", "submit_date": "2015-07-21", "submitter_name": "Varun Singh", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7043", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.4", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 b9 14 40 00 ff 06 e3 2b ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 c4 fa fa dd 6d ea 78 7a 1e 23\r\n     c0 18 01 00 e7 db 00 00 01 01 08 0a 93 f4 e9 e8\r\n     00 01 7e d0 1d 10 54 3d f6 d9 65 a7 83 82 a7 48\r\n     45 f7 2d ac ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da c0 00 b4 ac 1b 1c 1d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da c0 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 b9 14 40 00 ff 06 e3 2b ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 c4 fa fa dd 6d ea 78 7a 1e 23\r\n     c0 18 01 00 0c ef 00 00 01 01 08 0a 93 f4 e9 e8\r\n     00 01 7e d0 1d 10 54 3d f6 d9 65 a7 83 82 a7 48\r\n     45 f7 2d ac ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da c0 00 b4 ac 1b 1c 1d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da c0 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "notes": "The TCP checksum shown (0xe7db) is wrong, it should be 0x0cef.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:49:22"}, {"errata_id": "4592", "doc-id": "RFC7457", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.6", "orig_text": "The TIME attack can be mitigated by disabling TLS compression.  We\r\nare not aware of mitigations at the TLS protocol level to the BREACH\r\nattack, and so application-level mitigations are needed (see\r\n[BREACH]).", "correct_text": "The CRIME attack can be mitigated by disabling TLS compression.  We\r\nare not aware of mitigations at the TLS protocol level to the TIME and\r\nBREACH attacks, and so application-level mitigations are needed (see\r\n[BREACH]).", "notes": "As explained in the second paragraph in 2.6, the TIME attack makes use of HTTP-level response compression (in fact, it does not matter on which layer the compression occurs, but exploitation of HTTP-level response compression has been demonstrated). Hence, it cannot be mitigated by disabling TLS compression alone.\r\n\r\nInstead, CRIME can be mitigated by disabling TLS compression, as it exploits TLS-level compression of requests.", "submit_date": "2016-01-10", "submitter_name": "Matth\u00e4us Wander", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2916", "doc-id": "RFC6196", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   There were some previous attempts to provide detailed documentation\r\n   of the mailserver: URI scheme, but those efforts were not successful.\r\n   Implementors interested in providing instructions for generating an\r\n   email [RFC5322] message can instead use the mailto: URI scheme\r\n   [RFC6068].  Implementors interested in referencing a message or a set\r\n   of messages available from a mailstore over IMAP [RFC3501], POP\r\n   [RFC1939], or web [RFC2616] can instead use the imap: [RFC5092], pop:\r\n   [RFC2384] or http: [RFC2616] URIs, respectively.", "correct_text": "   There were some previous attempts to provide detailed documentation\r\n   of the 'mailserver' URI scheme, but those efforts were not successful.\r\n   Implementors interested in providing instructions for generating an\r\n   email [RFC5322] message can instead use the 'mailto' URI scheme\r\n   [RFC6068].  Implementors interested in referencing a message or a set\r\n   of messages available from a mailstore over IMAP [RFC3501], POP\r\n   [RFC1939], or web [RFC2616] can instead use the 'imap' [RFC5092], 'pop'\r\n   [RFC2384] or 'http' [RFC2616] URIs, respectively.", "notes": "This is a complement to Erratum 2756 (http://www.rfc-editor.org/errata_search.php?eid=2756); see justification there.", "submit_date": "2011-08-04", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2917", "doc-id": "RFC4717", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n\r\n\r\n(2)  Section 5.1.2 -- misleading specification due to omission.\r\n\r\nOn top of page 9, Section 5.1.2 says:\r\n\r\n   The next 4 bits provide space for carrying protocol-specific flags.\r\n   These are defined in the protocol-specific details below.\r\n|\r\n|  The next 6 bits provide a length field, which is used as follows:\r\n   [...]\r\n\r\n'The next 6 bits' is misleading; as indicated in the (unnumbered)\r\nfigure at the bottom of page 8, there is a 2-bit 'Res' field between\r\nthe Flags field and the Length field; unfortunately, the text lacks\r\nany description of that field.\r\nTo fill this gap, the above text should be amended to say:\r\n\r\n   The next 4 bits provide space for carrying protocol-specific flags.\r\n   These are defined in the protocol-specific details below.\r\n\r\n|  The subsequent 2-bit Res field is reserved; it SHOULD be set to 0\r\n|  by the sending PE and ignored by the receiving PE.\r\n|\r\n|  The next 6 bits provide a length field, which is used as follows:\r\n   [...]\r\n\r\nNote: 'SHOULD' is appropriate as future (optional) specifications\r\n      might assign semantics to that field.\r\n\r\n\r\n(3)  Section 5.4 -- word omission\r\n\r\nSection 5.4 (on page 10 of RFC 4717) says:\r\n\r\n   The setting of the TTL value in the PW label is application\r\n|  dependent.  In any case, [RFC3032] TTL processing procedure,\r\n   including handling of expired TTLs, MUST be followed.\r\n\r\nIt should say:\r\n\r\n   The setting of the TTL value in the PW label is application\r\n|  dependent.  In any case, the [RFC3032] TTL processing procedure,\r\n   including handling of expired TTLs, MUST be followed.\r\n\r\n\r\n(4)  Section 6.3 -- word omission\r\n\r\nOn page 14, Section 6.3 of RFC 4717 contains the numbered item:\r\n\r\n|      -iv. The Length of AAL5 frame may exceed the MTU of the PSN.\r\n            This requires fragmentation, which may not be available to\r\n            all nodes at the PW endpoint.\r\n\r\nThe RFC should say:\r\n\r\n|      -iv. The Length of an AAL5 frame may exceed the MTU of the PSN.\r\n            This requires fragmentation, which may not be available to\r\n            all nodes at the PW endpoint.\r\n\r\n\r\n(5)  Section 7.4 -- distorting typo\r\n\r\nThe initial text of Section 7.4 (on page 17 of RFC 4717) contains\r\nthe line:\r\n\r\n|    - (b) On the ATM side of the PW\r\n                                  ^^\r\nThis is misleading.  It certainly should say:\r\n\r\n|    - (b) On the ATM side of the PE\r\n                                  ^^\r\n\r\n(6)  Section 8 -- misleading short text / lack of precision\r\n\r\nSection 8 of RFC 4717 (on page 18) says:\r\n\r\n   The N-to-one mode (N >= 1) described in this document allows a\r\n   service provider to offer an ATM PVC- or SVC-based service across a\r\n   network.  The encapsulation allows multiple ATM VCCs or VPCs to be\r\n   carried within a single PSN tunnel.  A service provider may also use\r\n   N-to-one mode to provision either one VCC or one VPC on a tunnel.\r\n   This section defines the VCC and VPC cell relay services over a PSN\r\n   and their applicability.\r\n\r\nFor clarity and added precision, it should say:\r\n\r\n   The N-to-one mode (N >= 1) described in this document allows a\r\n   service provider to offer an ATM PVC- or SVC-based service across a\r\n|  packet switched network.  The encapsulation allows multiple ATM VCCs\r\n   or VPCs to be carried within a single PSN tunnel.  A service provider\r\n   may also use N-to-one mode to provision either one VCC or one VPC on\r\n   a tunnel.  This section defines the VCC and VPC cell relay services\r\n   over a PSN and their applicability.\r\n\r\n\r\n(7)  Section 8.1 -- various clarifications\r\n\r\n\r\n(7b)  inprecise wording not reflecting requirements language elsewhere\r\n\r\nIn Section 8.1, the 3rd paragraph below Figure 4 (on mid-page 19)\r\nsays:\r\n\r\n|  As shown above, in Figure 4, the ATM Control Word is inserted before\r\n|  the ATM service payload.  It may contain a length field and a\r\n   sequence number field in addition to certain control bits needed to\r\n   carry the service.\r\n\r\nTaken literally, this text is misleading and partially contradicts\r\nthe requirements specified in Section 5.1 (in the second paragraph\r\non page 7).  In particular, the entire ATM control word (the 3rd word\r\nin Figure 4) is optional, and *not* the various bit fields therein.\r\nTo properly reflect these requirements, the RFC should says instead:\r\n\r\n|  As shown above, in Figure 4, the optional ATM Control Word (if\r\n|  present) is inserted before the ATM service payload. It contains a\r\n   length field and a sequence number field in addition to certain\r\n   control bits needed to carry the service.\r\n\r\n(7c)  bad grammar\r\n\r\nWithin Section 8.1, the last paragraph on page 20 says:\r\n\r\n     * When multiple VCCs or VPCs are transported in one pseudowire,\r\n       VPI/VCI values MUST be unique.  When the multiple VCCs or VPCs\r\n|      are from different a physical transmission path, it may be\r\n                         ^^^                          ^\r\n       necessary to assign unique VPI/VCI values to the ATM connections.\r\n       If they are from the same physical transmission path, the VPI/VCI\r\n       values are unique.\r\n\r\nIt should say:\r\n\r\n     * When multiple VCCs or VPCs are transported in one pseudowire,\r\n       VPI/VCI values MUST be unique.  When the multiple VCCs or VPCs\r\n|      are from different physical transmission paths, it may be\r\n                         ^                          ^^\r\n       necessary to assign unique VPI/VCI values to the ATM connections.\r\n       If they are from the same physical transmission path, the VPI/VCI\r\n       values are unique.\r\n\r\n\r\n\r\n(8)  Sections 9.3 ff. -- alignment flaws in artwork\r\n\r\n(8a)\r\nWithin Section 9.3, the top part of Figure 8 on page 24 contains\r\na misaligned border;\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               PSN Transport Header (As Required)              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |                      Pseudowire Header                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | [...]\r\n\r\nshould be:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |               PSN Transport Header (As Required)              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |                      Pseudowire Header                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | [...]\r\n\r\nThe same flaw recurs ...\r\n\r\n(8b)  within Section 9.4.1, in Figure 9 on page 25;\r\n(8c)  within Section 9.4.1, in Figure 10 on page 26;\r\n(8d)  within Section 11.1, in Figure 12 on page 29;\r\n\r\n\r\n(9)  Section 9.4.1 -- word omission\r\n\r\nOn mid-page 25, the bullet,\r\n\r\n     * VCI Bits\r\n\r\n|      The 16-bit Virtual Circuit Identifier (VCI) incorporates ATM\r\n       Layer VCI value of the cell.\r\n\r\nshould say:\r\n\r\n     * VCI Bits\r\n\r\n|      The 16-bit Virtual Circuit Identifier (VCI) incorporates the ATM\r\n       Layer VCI value of the cell.\r\n\r\n\r\n(10)  Section 10.1 -- multiple mis-specifications\r\n\r\n(10a)\r\nAs will be explained below, the initial part of Section 10.1\r\n(on page 27) comprises several issues.\r\n\r\nThe RFC says:\r\n\r\n|  The AAL5 CPCS-SDU is prepended by the following header:\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |  Res  |T|E|C|U|Res|  Length   |   Sequence Number (Optional)  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              \"                                |\r\n   |                     ATM cell or AAL5 CPCS-SDU                 |\r\n   |                              \"                                |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                  Figure 11: AAL5 CPCS-SDU Encapsulation\r\n\r\nIt should say:\r\n\r\n|  The AAL5 CPCS-SDU or OAM cell is prepended the ATM Control Word:\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |0 0 0 0|T|E|C|U|Res|  Length   |     Sequence Number (or 0)    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n|    Figure 11: Control Word used with AAL5 CPCS-SDU Encapsulation\r\n\r\nRationale:\r\n\r\n(a.1)\r\nThe text is wrong and misleading; the figure does not (merely) show\r\n'the prepended header' (i.e., the \"ATM Control Word\", according to\r\nother parts of this RFC), but the payload as well!\r\nThe top level structure of the encapsulation is specified in Figure 4;\r\nhence, it suffices to specify the details of the Control Word here.\r\nAccordingly, the above replacement omits the payload and presents\r\na modified figure caption.\r\n\r\n(a.2)\r\nThe 4 most significant bits of the ATM Control Word MUST be all zero.\r\nDenoting the field as 'reserved' is misleading; future specifications\r\nMUST NOT change the value.  See Section 5.1.2 of this RFC, RFC 4385,\r\nand the recently published RFC 4928 for additional explanation!\r\n\r\n(a.3)\r\nThe 'Sequence Number' field is *not* optional in the control word,\r\nas erroneously might be deduced from the original version of the\r\nfigure; it MUST always be present; according to Section 5.1.2, only\r\nthe *processing* of this field is optional, and the reserved value 0\r\nis *not* a valid sequence number; it indicates non-use of sequence\r\nnumber processing.  Hence, the lower half of the ATM Control Word\r\neither contains a sequence number or 0.\r\n\r\n\r\n(10c)  incomplete specification\r\n\r\nThe description of the fields in Figure 11 is incomplete.\r\nAs a service to the reader, for completeness the following\r\ntext should be added at the end of Section 10.1:\r\n\r\n|  For a description of the Length and Sequence Number fields, see\r\n|  Section 5.1.2.\r\n\r\n\r\n(11)  Section 11.1 -- surprising/confusing specification details\r\n\r\n(11b)  lack of precision\r\n\r\nBelow Figure 12, the RFC text on page 29 says:\r\n\r\n   The M, V, Res, and C bits are as defined earlier for VCC One-to-one\r\n   cell mode.\r\n\r\nFor clarity and completeness, it should say:\r\n\r\n   The M, V, Res, and C bits are as defined earlier for VCC One-to-one\r\n|  cell mode.  M must be set to 1 and V must be set to 0 for AAL5 PDU\r\n|  Encapsulation; further details regarding the C bit are given below.\r\n\r\n\r\n\r\n\r\n(13)  Section 11.2.2 -- significant typo (wrong bit field name)\r\n\r\nSection 11.2.2 (on page 31) contains the bullet:\r\n\r\n      -iii. The least significant bit for the last ATM cell in the PSN\r\n|           frame is set to the value of the UU bit of Figure 12.\r\n                                             ^^\r\nIt should say:\r\n\r\n      -iii. The least significant bit for the last ATM cell in the PSN\r\n|           frame is set to the value of the U bit of Figure 12.\r\n                                             ^\r\n\r\n\r\n(15)  Abuse of language\r\n\r\n'AAL5' stands for \"ATM Adaptation Layer 5\".  Hence, the wording\r\n\"ATM AAL5\" is a replication considered a rough abuse of language.\r\n\r\nAll occurrences of \"ATM AAL5\" in the RFC should be corrected to \"AAL5\".", "correct_text": "", "notes": "This is sections 2, 3, 4, 5, 6, 7b, 7c, 8, 9, 10(a), 10(a1), 10(a2), 10(a3), 10(c), 11(b), 13, and 15 of errata 999", "submit_date": "2007-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2919", "doc-id": "RFC4717", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n\r\n(7d)  Improper use of RFC 2119 keywords\r\n\r\nAccording to RFC 2119, 'MUST' requirements do not admit exceptions.\r\nIf exceptional behavior is to be admitted via 'MAY' clauses, the\r\ngenerally preferred behavior must be specified with 'SHOULD'.\r\n\r\nThus in the light of the explanation at the bottom of page 20\r\n-- quoted and clarified above in (7c) --, the two bullets on top\r\nof page 21,\r\n\r\n     * VPI\r\n\r\n|      The ingress router MUST copy the VPI field from the incoming cell\r\n       into this field.  For particular emulated VCs, the egress router\r\n       MAY generate a new VPI and ignore the VPI contained in this\r\n       field.\r\n\r\n     * VCI\r\n\r\n|      The ingress router MUST copy the VCI field from the incoming ATM\r\n       cell header into this field.  For particular emulated VCs, the\r\n       egress router MAY generate a new VCI.\r\n\r\nshould say:\r\n\r\n     * VPI\r\n\r\n|      The ingress router SHOULD copy the VPI field from the incoming\r\n       cell into this field.  For particular emulated VCs, the egress\r\n       router MAY generate a new VPI and ignore the VPI contained in\r\n       this field.\r\n\r\n     * VCI\r\n\r\n|      The ingress router SHOULD copy the VCI field from the incoming\r\n       ATM cell header into this field.  For particular emulated VCs,\r\n       the egress router MAY generate a new VCI.\r\n\r\n\r\n", "correct_text": "", "notes": "This is section 7(d) From erratum 999\n --VERIFIER NOTES-- \n   The MUST and the MAY refer to the behavior of different PW entities (ingress and egress router respectively), thus the original text is correct.", "submit_date": "2007-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3472", "doc-id": "RFC5802", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "C: n,,n=user,r=fyko+d2lbbFgONRv9qkxdawL\r\nS: r=fyko+d2lbbFgONRv9qkxdawL3rfcNHYJY1ZVvWVs7j,s=QSXCR+Q6sek8bf92,\r\n   i=4096\r\nC: c=biws,r=fyko+d2lbbFgONRv9qkxdawL3rfcNHYJY1ZVvWVs7j,\r\n   p=v0X8v3Bz2T0CJGbJQyF0X+HI4Ts=\r\nS: v=rmF9pqV8S7suAoZWja4dJRkFsKQ=\r\n", "correct_text": "C: n,,n=user,r=fyko+d2lbbFgONRv9qkxdawL\r\nS: r=fyko+d2lbbFgONRv9qkxdawL3rfcNHYJY1ZVvWVs7j,s=QSXCR+Q6sek8bf92,\r\n   i=4096\r\nC: c=biws,r=fyko+d2lbbFgONRv9qkxdawL3rfcNHYJY1ZVvWVs7j,\r\n   p=frsVRm77a2tPQ5vy+zZuaKRR17o=\r\nS: v=01o5+Qz2QpK1yrmPi3ZwOZzQTzs=", "notes": "The test vector seems wrong, at least I cannot find code pattern that produces same result.  Here is the code I used to calculate it:\r\n\r\nhttps://gist.github.com/4654875", "submit_date": "2013-01-28", "submitter_name": "Marko Kreen", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3473", "doc-id": "RFC6455", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   2.  If the client already has a WebSocket connection to the remote\r\n       host (IP address) identified by /host/ and port /port/ pair, even\r\n       if the remote host is known by another name, the client MUST wait\r\n       until that connection has been established or for that connection\r\n       to have failed.  There MUST be no more than one connection in a\r\n       CONNECTING state.  If multiple connections to the same IP address\r\n       are attempted simultaneously, the client MUST serialize them so\r\n       that there is no more than one connection at a time running\r\n       through the following steps.", "correct_text": "   2.  If the client already has a WebSocket connection to the same IP\r\n       address and port pair, even if the remote host is known by another\r\n       name, the client MUST wait until that connection has been established\r\n       or for that connection to have failed.  There MUST be no more than\r\n       one connection in the CONNECTING state for any IP address and port\r\n       pair.  If multiple connections to the same IP address and port pair\r\n       are attempted simultaneously, the client MUST serialize them so that\r\n       there is no more than one connection at a time running through the\r\n       following steps.", "notes": "The original wording makes it ambiguous whether distinct ports on the same host are considered distinct for throttling purposes. The first sentence implies that the throttling should be applied per (host,port) pair, whereas the final sentence implies it is only based on IP address.\r\n\r\nImplementations of both interpretations appear to exist in the wild.\r\n\r\nI propose disambiguating in favour of the (host,port) interpretation, because the host-only interpretation allows for a potential denial-of-service attack targeted against hosts which drop packets to unused ports.\r\n\r\nFor example, an attacker from a different origin can create several hundred WebSockets to \"wss://google.com:81/\". Each one will attempt to connect in serial, and take tens of seconds to time out.\r\n\r\nIf the user then attempts to use an application which legitimately uses a WebSocket to \"wss://google.com:443/\", then due to the throttling to google.com it will not be able to connect until all of the attacker's connections have timed out.\r\n\r\nThe user will perceive that the legitimate application is malfunctioning, since there is no visible sign that they are being attacked. From the server end, the attack is only apparent in the firewall logs. The actual rate of SYN packets dropped will be small and unlikely to trigger an alert.\r\n\r\nOn the other hand, with the (host,port) interpretation, connections to google.com:81 do not block connections to google.com:443, and this attack is completely ineffective.\r\n\r\n=== Verifier Notes ===\r\n\r\nThe subsequent paragraph already indicates what must be done in the case where the IP address cannot be determined, so this change should not create any difficulties in the case where the connection is tunnelled via an HTTP(S) or SOCKS5 proxy.\r\n\r\nA separate concern has been raised that this section creates problems for WebSocket proxies and non-browser clients.  That issue cannot be handled without changing the meaning of the text, so it would have to be dealt with in a document update.", "submit_date": "2013-01-31", "submitter_name": "Adam Rice", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3525", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION of the ipSystemStatsOutFragReqds and OBJECT-TYPE (p. 35) says:", "orig_text": "           \"The number of IP datagrams that would require fragmentation\r\n            in order to be transmitted.\r\n\r\n            When tracking interface statistics, the counter of the\r\n            outgoing interface is incremented for a successfully\r\n            fragmented datagram.\r\n\r\n            [...]", "correct_text": "           \"The number of IP datagrams that would require fragmentation\r\n            in order to be transmitted.\r\n\r\n            When tracking interface statistics, the counter of the\r\n|           outgoing interface is incremented for a datagram requiring\r\n|           fragmentation.\r\n\r\n            [...]", "notes": "The DESCRIPTION clauses of the ipSystemStatsOutFragReqds OBJECT-TYPE and the ipSystemStatsOutFragOKs OBJECT-TYPE erroneously contain identical clauses. After analysis of the context it becomes apparent that the DESCRIPTION clause of the ipSystemStatsOutFragReqds OBJECT-TYPE should be updated as above. (Note: The original text is appropriate in the DESCRIPTION clause of the ipSystemStatsOutFragOKs OBJECT-TYPE, where it appears again.)", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4552", "doc-id": "RFC4034", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "These groups are then added together, ignoring any carry bits.", "correct_text": "These groups are then added together with at least 32-bit precision,\r\nretaining any carry bits.\r\nThe carry bits are then added to the result, and finally, only the lower\r\n16 bits of the result are used as the key tag. Note that this means any\r\ncarries generated during the addition of the carry bits are ignored.\r\nThis, in turn, means that the keytag calculation is often the same as\r\nreduction modulo 65535, but not always.\r\n", "notes": "Errata 2681 already proposes a fix to Appendix B, however the proposed fix is not quite clear. The first part of the corrected text is from 2681.\r\n\r\nIts worth pointing this out because a naive analysis says in fact the keytag is exactly the same as reduction modulo 65535, and this has already wasted a fair amount of time.\r\n\r\nIt is also worth pointing out, perhaps, that this is a poor choice of algorithm for this particular application as it interacts badly with the properties of keys.", "submit_date": "2015-12-04", "submitter_name": "Ben Laurie", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2920", "doc-id": "RFC4717", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n(10b)\r\nThe T bit explanation (in the lower half of page 27) contains\r\nmisleading and inappropriate wording related to Figure 4.\r\nFigure 4 generally applies for both the proper AAL5 CPCS-SDU payload\r\nor the case of an ATM OAM cell payload.  Furthermore, it should be\r\nnoted that Section 8.1 (which contains and explains Figure 4)\r\nspecifies the Flags field as 'reserved, should be set to 0'.\r\nThis is incompatible with the subsequent text that requires the T bit\r\nto be set to 1 for an OAM cell.  Therefore, to avoid confusion,\r\nthe clause referencing to Figure 4 should better be deleted from\r\nthe T bit explanation.\r\n\r\nHence, the text,\r\n\r\n       Bit (T) of the control word indicates whether the packet contains\r\n       an ATM admin cell or an AAL5 payload.  If T = 1, the packet\r\n|      contains an ATM admin cell, encapsulated according to the N-to-\r\n|      one cell relay encapsulation, Figure 4.  If not set, the PDU\r\n       contains an AAL5 payload.  The ability to transport an ATM cell\r\n       in the AAL5 SDU mode is intended to provide a means of enabling\r\n       administrative functionality over the AAL5 VCC (though it does\r\n       not endeavor to preserve user-cell and admin-cell\r\n       arrival/transport ordering).\r\n\r\nshould say:\r\n\r\n       Bit (T) of the control word indicates whether the packet contains\r\n       an ATM admin cell or an AAL5 payload.  If T = 1, the packet\r\n|      contains an ATM admin cell.  If T = 0, the PDU contains an AAL5\r\n       payload.  The ability to transport an ATM cell in the AAL5 SDU\r\n       mode is intended to provide a means of enabling administrative\r\n       functionality over the AAL5 VCC (though it does not endeavor to\r\n       preserve user-cell and admin-cell arrival/transport ordering).\r\n\r\n", "correct_text": "", "notes": "This is section 10(b) from Erratum 999", "submit_date": "2007-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2922", "doc-id": "RFC4717", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n\r\n(12)  Section 11.2.1 -- internal mis-ref.\r\n\r\nThe 3rd bullet in Section 11.2.1, near the bottom of page 30, says:\r\n\r\n     - The E and C bits of the fragment shall be set as defined in\r\n|      section 9.\r\n               ^\r\nIt should say:\r\n\r\n     - The E and C bits of the fragment shall be set as defined in\r\n|      section 11.1.\r\n               ^^^^\r\n\r\nRationale:\r\n  As explained above for item (11a), the specification of these bits in\r\n  Section 11.1 is contrary to their (hidden) use in Sections 8 and 9.\r\n\r\n\r\n                                          ^\r\n\r\n(14)  Section 12 -- internal mis-refs\r\n\r\nThe last paragraph of Section 12 (on page 32) says:\r\n\r\n   In both the ATM-to-PSN and PSN-to-ATM directions, the method used to\r\n   transfer the CLP and EFCI information of the individual cells into\r\n   the ATM-specific field, or flags, of the PW packet is described in\r\n|  detail in sections 6 through 9 for each encapsulation mode.\r\n                      ^         ^\r\nIt should say:\r\n\r\n   In both the ATM-to-PSN and PSN-to-ATM directions, the method used to\r\n   transfer the CLP and EFCI information of the individual cells into\r\n   the ATM-specific field, or flags, of the PW packet is described in\r\n|  detail in sections 8 through 11 for each encapsulation mode.\r\n                      ^         ^^\r\n\r\n", "correct_text": "", "notes": "This is elements 12 and 14 of erratum 999", "submit_date": "2007-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3508", "doc-id": "RFC6325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5.1", "orig_text": "In other words, the set of potential parents for N, for the tree\r\nrooted at R, consists of those that give equally minimal cost paths\r\nfrom N to R and that have distinct IS-IS IDs, based on what is\r\nreported in LSPs.", "correct_text": "In other words, the set of potential parents for N, for the tree \r\nrooted at R, consists of those that give equally minimal cost paths \r\nfrom R to N and that have distinct IS-IS IDs, based on what is \r\nreported in LSPs.", "notes": "Link costs can be asymmetric. The above erroneous sentence is inconsistent with the rest of 4.5.1 and normal practice. Furthermore, it is important to fix this and resolve the inconsistency because, if all RBridges in a TRILL campus do not compute the same trees, the reverse path forwarding check for multi-destination TRILL Data packet routing can erroneously discard such packets.", "submit_date": "2013-03-05", "submitter_name": "Donald E. Eastlake, 3rd", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3509", "doc-id": "RFC4551", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": " Example 5:\r\n\r\n      C: c101 STORE 1 (UNCHANGEDSINCE 12121230045) -FLAGS.SILENT\r\n         (\\Deleted)\r\n      S: * OK [HIGHESTMODSEQ 12111230047]\r\n      S: * 50 FETCH (MODSEQ (12111230048))\r\n      S: c101 OK Store (conditional) completed\r\n", "correct_text": "Example 5:\r\n\r\n      C: c101 STORE 50 (UNCHANGEDSINCE 12121230045) -FLAGS.SILENT\r\n         (\\Deleted)\r\n      S: * OK [HIGHESTMODSEQ 12111230047]\r\n      S: * 50 FETCH (MODSEQ (12111230048))\r\n      S: c101 OK Store (conditional) completed\r\n", "notes": "Since successful conditional stores MUST return the FETCH (MODSEQ) data for every message that was changed, the untagged FETCH response in this example should refer to the same message as the STORE command.  To avoid any suggestion that 1 might be a special case, I have made the correction to use 50 in both contexts.", "submit_date": "2013-03-05", "submitter_name": "Pete Maclean", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3526", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipSystemStatsOutFragCreates (p. 36) says:", "orig_text": "           \"The number of output datagram fragments that have been\r\n            generated as a result of IP fragmentation.\r\n\r\n            When tracking interface statistics, the counter of the\r\n|           outgoing interface is incremented for a successfully\r\n|           fragmented datagram.\r\n\r\n            [...]", "correct_text": "           \"The number of output datagram fragments that have been\r\n            generated as a result of IP fragmentation.\r\n\r\n            When tracking interface statistics, the counter of the\r\n            outgoing interface is incremented for a successfully\r\n|           created datagram fragment.\r\n\r\n            [...]\r\n", "notes": "improperly replicated description text.\r\nObviously, the second sentence contradicts the first one.\r\n( Apparently, this is an un-edited copy from the DESCRIPTION clauses\r\n  mentioned above, in Errata ID 3525, that needs editing to be appropriate.)", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3941", "doc-id": "RFC2817", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Note that HTTP/1.1 [1] specifies \"the upgrade keyword MUST be\r\nsupplied within a Connection header field (section 14.10)", "correct_text": "The hyperlink (http://tools.ietf.org/html/rfc2817#section-14.10) \r\nto section 14.10 does not work, it should refer to RFC2616: \r\nhttp://tools.ietf.org/html/rfc2616#section-14.42", "notes": "The hyperlink is an IETF tooling artefact and not part of the RFC, which is clear.\n --VERIFIER NOTES-- \n The hyperlink is an IETF tooling artefact and not part of the RFC, which is clear. ", "submit_date": "2014-03-31", "submitter_name": "Florian Borchert", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2934", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "Reset Generation\r\n    3.  If the connection is in a synchronized state (ESTABLISHED,\r\n    FIN-WAIT-1, FIN-WAIT-2, CLOSE-WAIT, CLOSING, LAST-ACK, TIME-WAIT),\r\n    any unacceptable segment (out of window sequence number or\r\n    unacceptible acknowledgment number) must elicit only an empty\r\n    acknowledgment segment containing the current send-sequence number\r\n    and an acknowledgment indicating the next sequence number expected\r\n    to be received, and the connection remains in the same state.\r\n\r\n    If an incoming segment has a security level, or compartment, or\r\n    precedence which does not exactly match the level, and compartment,\r\n    and precedence requested for the connection,a reset is sent and\r\n    connection goes to the CLOSED state. The reset takes its sequence\r\n    number from the ACK field of the incoming segment.", "correct_text": "Reset Generation\r\n    3.  If the connection is in a synchronized state (ESTABLISHED,\r\n    FIN-WAIT-1, FIN-WAIT-2, CLOSE-WAIT, CLOSING, LAST-ACK, TIME-WAIT),\r\n    any unacceptable segment (out of window sequence number or\r\n    unacceptable acknowledgment number) must elicit only an empty\r\n    acknowledgment segment containing the current send-sequence number\r\n    and an acknowledgment indicating the next sequence number expected\r\n    to be received, and the connection remains in the same state.\r\n\r\n    If an incoming segment has a security level, or compartment, or\r\n    precedence which does not exactly match the level, and compartment,\r\n    and precedence requested for the connection, a reset is sent and\r\n    the connection goes to the CLOSED state.  The reset takes its sequence\r\n    number from the ACK field of the incoming segment.\r\n  ", "notes": "Editorial errors:\r\n1. Typo unacceptible -> unacceptable\r\n2. wrong spacing and missing 'the'\r\n", "submit_date": "2008-10-11", "submitter_name": "Constantin Hagemeier", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2935", "doc-id": "RFC792", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "On page 17, it says:", "orig_text": "The identifier and sequence number may be used by the echo sender\r\nto aid in matching the replies with the requests.", "correct_text": "The identifier and sequence number may be used by the timestamp sender \r\nto aid in matching the replies with the requests.", "notes": "In the \"Description\" of the \"Timestamp or Timestamp Reply\" message. Appears to be a copy-paste error from the \"Echo or Echo Reply\" message's description.", "submit_date": "2011-08-13", "submitter_name": "Jeffrey Connell", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2936", "doc-id": "RFC792", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "On page 19, it says:", "orig_text": "The identifier and sequence number may be used by the echo sender\r\nto aid in matching the replies with the requests.", "correct_text": "The identifier and sequence number may be used by the information request\r\nsender to aid in matching the replies with the requests.", "notes": "In the \"Description\" of the \"Information Request or Information Reply\" message. Appears to be a copy-paste error from the \"Echo or Echo Reply\" message's description.", "submit_date": "2011-08-13", "submitter_name": "Jeffrey Connell", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2918", "doc-id": "RFC4717", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  incomplete/missing specification of PW types\r\n\r\nRFC 4446 (by means of reference update from drafts to published RFCs)\r\nand the IANA \"pwe3-parameters\" registry refer to this document for\r\nthe allocation and description of a couple of (MPLS) Pseudowire Types.\r\nTherefore, this memo should be explicit, precisely give the proper\r\ninformation, and not leave the reader alone with some apparent\r\nambiguities in the registry.  (Unfortunately, the RFC uses\r\ndescriptive text labels for the PW types that do not match the\r\ntext listed as the 'Descriptions' in the MPLS PW Type registry.)\r\n\r\nExcluding the PW type 0x001E assigned for the MFA, IANA lists seven\r\nATM PW types.  I (hopefully) was able to identify most of these in\r\nRFC 4717, but the role of PW type 0x0003 initially remained unclear;\r\nthis gap in the meantime has been closed by RFC 4816, taking over\r\nthe 'ownership' for that PW type.\r\n\r\nTo fill in the gap, the following clarifications should be posted\r\nin an RFC errata note for RFC 4717 (please correct if I'm wrong);\r\nbecause there also is a L2TPv3 Pseudowire Type (sub-)registry\r\n(in the IANA \"l2tp-parameters\" registry) I also use the precise\r\nterm, \"MPLS PW Type\", in the proposed clarifications.\r\n\r\n(1a)  Section 5.1.1\r\n\r\nThe initial text of Section 5.1.1 (on page 7 of RFC 4717) says:\r\n\r\n   This control word is used in the following encapsulation modes:\r\n\r\n     - ATM One-to-one Cell Mode\r\n     - AAL5 PDU Frame Mode\r\n\r\nIt should say:\r\n\r\n   This control word is used in the following encapsulation modes:\r\n\r\n|    - ATM One-to-one Cell Mode  - MPLS PW types 0x000C and 0x000D\r\n|    - AAL5 PDU Frame Mode       - MPLS PW type 0x000E\r\n\r\n(1b)  Section 5.1.2\r\n\r\nThe initial text of Section 5.1.2 (on page 8 of RFC 4717) says:\r\n\r\n   This control word is used in the following encapsulation modes:\r\n\r\n     - ATM N-to-one Cell Mode\r\n     - AAL5 SDU Frame Mode\r\n\r\nIt should say:\r\n\r\n   This control word is used in the following encapsulation modes:\r\n\r\n|    - ATM N-to-one Cell Mode  - MPLS PW types 0x0009 and 0x000A\r\n|    - AAL5 SDU Frame Mode     - MPLS PW type 0x0002\r\n\r\n(1c)  see item (6a) below!\r\n\r\n(1d)  missing IANA Considerations\r\n\r\nNOTE:\r\n  Would the above clarifications have been included in the RFC,\r\n  it should also have contained an IANA Considerations Section.\r\n  In the meantime, after some complaints and interventions, the\r\n  IANA \"pwe3-parameters\" registry has been updated to contain the\r\n  proper pointers to RFC 4717 for the abovementioned six PW Types.\r\n\r\n======\r\n\r\n(7a)  missing applicability statement for PW Types -- also (1c) above\r\n\r\nThe initial paragraph of Section 8.1 (on page 19 of RFC 4717) says:\r\n\r\n   This section describes the general encapsulation format for ATM over\r\n   PSN pseudowires.\r\n\r\nAccording to the expanations in item (1) above, it should say:\r\n\r\n   This section describes the general encapsulation format for ATM over\r\n|  PSN pseudowires used with the MPLS PW types 0x0009 and 0x000A (for\r\n|  VCC and VPC transport, respectively) described in Section 5.1.2.\r\n\r\nNote: As could be seen later, after the publication of RFC 4816,\r\nthis format is reused there.  Thus, it might be even better to say:\r\n\r\n   This section describes the general encapsulation format for ATM over\r\n|  PSN pseudowires used with the MPLS PW types 0x0009 and 0x000A (for\r\n|  VCC and VPC transport, respectively) described in Section 5.1.2,\r\n|  and PW Type 0x0003 (transparent cell transport [RFC-to-be-4816]).\r\n\r\nAccordingly, an Informative Reference to the work-in-progress\r\npredecessor of RFC 4816 would have to be added to Section 18.\r\n\r\n\r\n======\r\n\r\n\r\n\r\n\r\n", "correct_text": "", "notes": "This was section 1 and section 7(a) of Errata 999\n --VERIFIER NOTES-- \n   The ATM PW Encapsulation modes specified are used by multiple ATM PW types and the intent of the working group was to allow new ATM PW types to use these encapsulations without requiring an update or republication of RFC 4717", "submit_date": "2007-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2921", "doc-id": "RFC4717", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "\r\n\r\n(11a)  danger of confusion - or a mis-specification?\r\n\r\nThe placement of the U and E bits in the Control Word shown in\r\nFigure 12 (on page 29) comes to surprise.\r\n\r\nApparently, the two bits are exchanged relatively to their placement\r\nwithin the PTI field in the Control Word shown in Figure 10\r\n(on page 26).\r\n\r\nIf this has been done intentionally, it might surprise some\r\nimplementors, leading to interoperability problems.\r\nIn this case, a specific warning should have been added to the\r\nRFC text in Section 11.1, somewhere below Figure 12, e.g.:\r\n\r\n|  Warning to implementors: The order of the E and U bit is reversed\r\n|  relative to their placement in the PTI field of the ATM cell header.\r\n|  Section 11.2.2 below details the bit manipulations to be done by\r\n|  the receiving PE.\r\n\r\nBut if this is an unintentional oversight, the Control Word part\r\nof Figure 12,\r\n\r\n                                                            [...]  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |0 0 0 0| Resvd |   Optional Sequence Number    |M|V| Res |U|E|C|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | [...]\r\n\r\nshould be corrected to say:\r\n\r\n                                                            [...]  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|  |0 0 0 0| Resvd |   Optional Sequence Number    |M|V| Res |E|U|C|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | [...]\r\n                                                              ^ ^\r\nNote:\r\n  In this case, the procedures laid out in Section 11.2.2\r\n  could easily be collapsed to a simple bit field transfer!\r\n\r\n", "correct_text": "", "notes": "This is element 11(a) of Errata 999\r\n\r\nThis needs to checked against the corresponding ITU specification for this mode.\n --VERIFIER NOTES-- \nRFC4717 and ITU-T Recommendation Y.1412 use the same bit definitions and the same bit ordering, and therefore one must conclude that the bit ordering was that which was intended by the authors and has thus implemented.\r\n\r\nThere have been no concerns expressed on the PWE3 list regarding the change of ordering between Figure 11 and Figure 12.", "submit_date": "2007-10-17", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2923", "doc-id": "RFC3404", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "This template defines the URI and URN Resolution DDDS Application\r\naccording to the rules and requirements found in [3]. The DDDS\r\ndatabase used by this Application is found in [4] which is the\r\ndocument that defines the Naming Authority Pointer (NAPTR) DNS\r\nResource Record (RR) type.", "correct_text": "This template defines the URI and URN Resolution DDDS Application\r\naccording to the rules and requirements found in [2]. The DDDS\r\ndatabase used by this Application is found in [3] which is the\r\ndocument that defines the Naming Authority Pointer (NAPTR) DNS\r\nResource Record (RR) type.", "notes": "Reference numbers are incorrect.", "submit_date": "2011-08-05", "submitter_name": "Kevin Dean", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3527", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipIfStatsOutFragReqds OBJECT-TYPE (p. 52) says:", "orig_text": "           \"The number of IP datagrams that would require fragmentation\r\n            in order to be transmitted.\r\n\r\n            When tracking interface statistics, the counter of the\r\n|           outgoing interface is incremented for a successfully\r\n|           fragmented datagram.\r\n\r\n            [...]", "correct_text": "           \"The number of IP datagrams that would require fragmentation\r\n            in order to be transmitted.\r\n\r\n            When tracking interface statistics, the counter of the\r\n|           outgoing interface is incremented for a datagram requiring\r\n|           fragmentation.\r\n\r\n            [...]", "notes": "improperly replicated description text.\r\nA \"mirror\" of Errata ID 3525 recurs, for the Interface Statistics.", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4977", "doc-id": "RFC6762", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1", "orig_text": "The 'Next Domain Name' field contains the record's own name. When\r\nused with name compression, this means that the 'Next Domain Name'\r\nfield always takes exactly two bytes in the message.", "correct_text": "The 'Next Domain Name' field contains the record's own name.", "notes": "Section 4.1.1 of RFC 4034 states:\r\n\r\n\"A sender MUST NOT use DNS name compression on the Next Domain Name\r\nfield when transmitting an NSEC RR.\"\r\n\r\n--- Verifier note ---\r\nWhile errata submitter's concern is valid, this is not a stricto sensu \"errata\" as the existing RFC reflects the WG consensus at the publication time.\r\n\r\n\r\nIn order to comply with the existing RFC, name compression should not\r\nbe suggested.", "submit_date": "2017-03-23", "submitter_name": "Nathan Osman", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 06:27:11"}, {"errata_id": "2924", "doc-id": "RFC3196", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.3.1.1", "orig_text": "The Printer object MUST return one of the following \"status-code\"\r\nvalues for the indicated reason.  Whether all of the document data\r\nhas been accepted or not before returning the success or error\r\nresponse depends on implementation.  See Section 13 in [RFC2911] for\r\na more complete description of each status code.\r\n", "correct_text": "The Printer object MUST return one of the following \"status-code\"\r\nvalues for the indicated reason.  The Printer object MUST accept all\r\ndocument data before returning the success or error response.  See\r\nSection 13 in [RFC2911] for a more complete description of each\r\nstatus code.\r\n", "notes": "HTTP (RFC 2616) classifies POST as a non-idempotent method, so a conforming server implementation may only return an error status or 100-continue as described in sections 8.1.2.2 and 8.2.2 of RFC 2616. Essentially, the printer cannot respond to the POST until it has processed all of the request message body, otherwise how would it report chunking or other protocol errors? And how would a client reliably send or a server reliably process multiple IPP requests (as POST messages) when a server provides an early response?", "submit_date": "2011-08-08", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2925", "doc-id": "RFC6313", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "     <enumeration value=\"basicList\">\r\n       <annotation>\r\n         <documentation>\r\n           Represents a list of zero or more instances of\r\n           any Information Element, primarily used for\r\n           single-valued data types.  Examples include a list of port\r\n           numbers, a list of interface indexes, and a list of AS in a\r\n           BGP AS-PATH.\r\n         </documentation>\r\n       </annotation>\r\n     </enumeration>\r\n\r\n...\r\n\r\n     <enumeration value=\"subTemplateList\">\r\n       <annotation>\r\n         <documentation>\r\n           Represents a list of zero or more instances of a\r\n           structured data type, where the data type of each list\r\n           element is the same and corresponds with a single\r\n           Template Record.  Examples include a structured data type\r\n           composed of multiple pairs of (\"MPLS label stack entry\r\n           position\", \"MPLS label stack value\"), a structured\r\n           data type composed of performance metrics, and a\r\n           structured data type composed of multiple pairs of IP\r\n           address.\r\n         </documentation>\r\n       </annotation>\r\n     </enumeration>\r\n\r\n...\r\n\r\n     <enumeration value=\"subTemplateMultiList\">\r\n       <annotation>\r\n         <documentation>\r\n           Represents a list of zero or more instances of\r\n           structured data types, where the data type of each\r\n           list element can be different and corresponds with\r\n           different Template definitions.  An example is a\r\n           structured data type composed of multiple\r\n           access-list entries, where entries can be\r\n           composed of different criteria types.\r\n         </documentation>\r\n       </annotation>\r\n     </enumeration>\r\n", "correct_text": "         <enumeration value=\"basicList\">\r\n           <annotation>\r\n             <documentation>The type \"basicList\" represents a list\r\n               of zero or more instances of any Information Element,\r\n               primarily used for single-valued data types.\r\n               Examples include a list of port numbers,\r\n               a list of interface indexes,\r\n               and a list of AS in a BGP AS-PATH.\r\n             </documentation>\r\n           </annotation>\r\n         </enumeration>\r\n\r\n...\r\n\r\n         <enumeration value=\"subTemplateList\">\r\n           <annotation>\r\n             <documentation>The type \"subTemplateList\" represents a list\r\n               of zero or more instances of a structured data type,\r\n               where the data type of each list element is the same\r\n               and corresponds with a single Template Record.  Examples include\r\n               a structured data type composed of multiple pairs of\r\n               (\"MPLS label stack entry position\", \"MPLS label stack value\"),\r\n               a structured data type composed of performance metrics, and\r\n               a structured data type composed of multiple pairs of IP address.\r\n             </documentation>\r\n           </annotation>\r\n         </enumeration>\r\n\r\n...\r\n\r\n         <enumeration value=\"subTemplateMultiList\">\r\n           <annotation>\r\n             <documentation>The type \"subTemplateMultiList\" represents a list\r\n               of zero or more instances of structured data types,\r\n               where the data type of each list element can be different\r\n               and corresponds with different Template definitions.\r\n               An example is a structured data type composed of multiple\r\n               access-list entries, where entries can be composed of\r\n               different criteria types.\r\n             </documentation>\r\n           </annotation>\r\n         </enumeration>\r\n", "notes": "Addition of 'The type \"basicList\"', 'The type \"subTemplateList\"' and 'The type \"subTemplateMultiList\"', for consistency with the existing descriptions which all begin 'The type xxx ...'.\r\n\r\nNote that this refers to text on page 63, for modifications to the IPFIX schema. The schema has been updated with the corrected text above.", "submit_date": "2011-08-08", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2926", "doc-id": "RFC6313", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": " <simpleType name=\"dataTypeSemantics\">\r\n   <restriction base=\"string\">\r\n     <enumeration value=\"List\">\r\n       <annotation>\r\n         <documentation>\r\n           Represents an arbitrary-length sequence of structured\r\n           data elements, either composed of regular Information\r\n           Elements or composed of data conforming to a Template\r\n           Record.\r\n         </documentation>\r\n       </annotation>\r\n     </enumeration>\r\n", "correct_text": "         <enumeration value=\"list\">\r\n           <annotation>\r\n             <documentation>\r\n               Represents an arbitrary-length sequence\r\n               of zero or more structured data Information Elements,\r\n               either composed of regular Information Elements\r\n               or composed of data conforming to a Template Record.\r\n             </documentation>\r\n           </annotation>\r\n         </enumeration>\r\n", "notes": "Insertion of missing \"zero or more\" per the definition in section 4.2.1:\r\n\r\n4.2. New Data Type Semantic\r\n4.2.1. List\r\n\r\n   A list represents an arbitrary-length sequence of zero or more\r\n   structured data Information Elements, either composed of regular\r\n   Information Elements or composed of data conforming to a Template\r\n   Record.\r\n\r\nNote that this refers to the dataTypeSemantics on page 64, for modifications to the IPFIX schema. The schema has been updated with the corrected text above.", "submit_date": "2011-08-08", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2927", "doc-id": "RFC4601", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.2", "orig_text": "     void\r\n     Update_SPTbit(S,G,iif) {\r\n       if ( iif == RPF_interface(S)\r\n             AND JoinDesired(S,G) == TRUE\r\n             AND ( DirectlyConnected(S) == TRUE\r\n                   OR RPF_interface(S) != RPF_interface(RP(G))\r\n                   OR inherited_olist(S,G,rpt) == NULL\r\n                   OR ( ( RPF'(S,G) == RPF'(*,G) ) AND\r\n                        ( RPF'(S,G) != NULL ) )\r\n                   OR ( I_Am_Assert_Loser(S,G,iif) ) {\r\n          Set SPTbit(S,G) to TRUE\r\n       }\r\n     }", "correct_text": "     void\r\n     Update_SPTbit(S,G,iif) {\r\n       if ( iif == RPF_interface(S)\r\n             AND JoinDesired(S,G) == TRUE\r\n             AND ( DirectlyConnected(S) == TRUE\r\n                   OR RPF_interface(S) != RPF_interface(RP(G))\r\n                   OR inherited_olist(S,G,rpt) == NULL\r\n                   OR ( ( RPF'(S,G) == RPF'(*,G) ) AND\r\n                        ( RPF'(S,G) != NULL ) )\r\n                   OR ( I_Am_Assert_Loser(S,G,iif) ) ) ) {\r\n          Set SPTbit(S,G) to TRUE\r\n       }\r\n     }", "notes": "The logical evaluation is not properly enclosed. ", "submit_date": "2011-08-09", "submitter_name": "Ang Way Chuang", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2928", "doc-id": "RFC3315", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "17.2.1", "orig_text": "   For example, if the administrative policy for the server is\r\n   that it may only respond to a client that is willing to accept a\r\n   Reconfigure message, if the client indicates with a Reconfigure\r\n   Accept option in the Solicit message that it will not accept a\r\n   Reconfigure message, the servers discard the Solicit message.\r\n", "correct_text": "   For example, if the administrative policy for the server is \r\n   that it may only respond to a client that is willing to accept a \r\n   Reconfigure message, if the client does not include a Reconfigure \r\n   Accept option (see section 22.20) in the Solicit message, the \r\n   servers discard the Solicit message.\r\n", "notes": "", "submit_date": "2011-08-09", "submitter_name": "Leaf Yeh", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4978", "doc-id": "RFC7644", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "/ServiceProviderConfig\r\n", "correct_text": "/ServiceProviderConfigs\r\n", "notes": "Per the details provided on the SCIM website http://www.simplecloud.info/#overview, the endpoint should be /ServiceProviderConfigs. A trailing \"s\" is missing. The SCIM implementations of major service providers like Facebook, Salesforce, Slack implement /ServiceProviderConfigs", "submit_date": "2017-03-24", "submitter_name": "asgs", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2942", "doc-id": "RFC2384", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "   The URL:\r\n\r\n        <pop://baz;AUTH=SCRAM-MD5@foo.bar>\r\n\r\n   Results in the following client commands:\r\n\r\n        <connect to foo.bar, port 110>\r\n\r\n        S: +OK POP3 server ready <1896.697170952@foo.bar>\r\n        C: AUTH SCRAM-MD5 AGNocmlzADx0NG40UGFiOUhCMEFtL1FMWEI3MmVnQGVsZW\r\n", "correct_text": "   The URL:\r\n\r\n        <pop://baz;AUTH=CRAM-MD5@foo.bar>\r\n\r\n   Results in the following client commands:\r\n\r\n        <connect to foo.bar, port 110>\r\n\r\n        S: +OK POP3 server ready <1896.697170952@foo.bar>\r\n        C: AUTH CRAM-MD5 AGNocmlzADx0NG40UGFiOUhCMEFtL1FMWEI3MmVnQGVsZW\r\n", "notes": "The name of the SASL mechanism based on RFC 2222 when this RFC was published is CRAM-MD5 specified in RFC 2195.  This is unrelated to the SCRAM-family of SASL mechanisms specified in RFC 5802.  Section 4 in RFC 2384 explains the intended SASL POP mechanism names; notably no \"S\" to indicate SASL.\r\n\r\nVERIFIER NOTE: We could change \"SCRAM-MD5\" to \"CRAM-MD5\", but we would need to modify the Base64 at the same time. This should be done through a document update or a separate erratum.", "submit_date": "2011-08-18", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2929", "doc-id": "RFC6321", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.2.1.", "orig_text": "VERSION:2.0\r\nPRODID:-//Example Corp.//Example Client//EN\r\nBEGIN:VTIMEZONE\r\n", "correct_text": "BEGIN:VCALENDAR\r\nVERSION:2.0\r\nPRODID:-//Example Inc.//Example Client//EN\r\nBEGIN:VTIMEZONE\r\n", "notes": "Example Inc. is used in all examples, especially in Section B.2.2, the matching XML Data. Also, the BEGIN:VCALENDAR is missing.", "submit_date": "2011-08-10", "submitter_name": "Philipp Kewisch", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2930", "doc-id": "RFC6150", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "There are other RFCs that refer to MD2,", "correct_text": "There are other RFCs that refer to MD4,", "notes": "A really, really bad cut-n-paste error.  This draft discusses MD4 not MD2.", "submit_date": "2011-08-10", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2931", "doc-id": "RFC3161", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.2", "orig_text": "   PKIStatus ::= INTEGER {\r\n      granted                (0),\r\n      -- when the PKIStatus contains the value zero a TimeStampToken, as\r\n         requested, is present.\r\n      grantedWithMods        (1),\r\n       -- when the PKIStatus contains the value one a TimeStampToken,\r\n         with modifications, is present.\r\n      rejection              (2),\r\n      waiting                (3),\r\n      revocationWarning      (4),\r\n\r\n       -- this message contains a warning that a revocation is\r\n       -- imminent\r\n      revocationNotification (5)\r\n       -- notification that a revocation has occurred  }\r\n", "correct_text": "   PKIStatus ::= INTEGER {\r\n      granted                (0),\r\n      -- when the PKIStatus contains the value zero a TimeStampToken, as\r\n      -- requested, is present.\r\n      grantedWithMods        (1),\r\n      -- when the PKIStatus contains the value one a TimeStampToken,\r\n      -- with modifications, is present.\r\n      rejection              (2),\r\n      waiting                (3),\r\n      revocationWarning      (4),\r\n\r\n       -- this message contains a warning that a revocation is\r\n       -- imminent\r\n      revocationNotification (5)\r\n       -- notification that a revocation has occurred -- }\r\n", "notes": "In ASN.1 syntax 1988, all comment lines must be prefixed with double-hyphen, and comment lines followed by some content must be terminated with a double-hyphen.", "submit_date": "2011-08-12", "submitter_name": "Benjamin Dauvergne", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2932", "doc-id": "RFC3161", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.2", "orig_text": "    systemFailure       (25)\r\n      -- the request cannot be handled due to system failure  }", "correct_text": "    systemFailure       (25)\r\n      -- the request cannot be handled due to system failure -- }", "notes": "In ASN.1 syntax 1988, comment lines followed by content must be terminated by a double-hyphen.", "submit_date": "2011-08-12", "submitter_name": "Benjamin Dauvergne", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2933", "doc-id": "RFC3986", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.2.", "orig_text": "T.path = merge(Base.path, R.path);", "correct_text": "T.path = merge(Base, R);\r\n", "notes": "In 5.2.3. the \"If the base URI has a defined authority component\" condition requires knowing the authority component, so passing just the path component is misleading.\r\n\r\nDuring discussion of this issue, Roy Fielding noted: \"No, this is not an error in the algorithm.  The algorithm is just saying that you need to merge the two paths.  The two paths are not parameters to a function, nor is the merge procedure limited to those two parameters.\" Saving this report as \"Hold For Document Update\" so that future implementers do not experience the same confusion.", "submit_date": "2011-08-13", "submitter_name": "Bjoern Hoehrmann", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2937", "doc-id": "RFC2388", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.6", "orig_text": "application/x-url-encoded", "correct_text": "application/x-www-form-urlencoded", "notes": "This incorrect media type appears twice and should be replaced both times. In the last paragraph of this section \"both\" and \"as well\" can be removed.", "submit_date": "2011-08-14", "submitter_name": "Anne van Kesteren", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4425", "doc-id": "RFC3711", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+<+\r\n     |V=2|P|    RC   |   PT=SR or RR   |             length          | |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |\r\n", "correct_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+<+\r\n     |V=2|P|    RC   |   PT=SR or RR |             length          | |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |\r\n", "notes": "The boundary between the \"PT=SR or RR\" and the \"length\" fields is wrong: The boundary is shown as being between bits 16 and 17; it should be between bits 15 and 16.  I.e., the \"PT=SR or RR\" field should be 8 bits long, not 9.\r\n\r\nThis is just a minor bug, because the equivalent diagram in RFC 3550 (the normative reference for RTCP) is correct.  Nonetheless, this bug should probably be added to the errata for RFC 3711", "submit_date": "2015-07-22", "submitter_name": "Ross Finlayson", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7044", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c f2 2e 40 00 ff 06 aa 4c 0a 0b 0c 0d\r\n     ac 1b 1c 1d da 1c 00 b3 38 9b ed 71 00 00 00 00\r\n     e0 02 ff ff 70 bf 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 00 01 85 e1 00 00 00 00 1d 10 3d 54\r\n     c4 4e 60 cb 31 f7 c0 b1 de 3d 27 49\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c f2 2e 40 00 ff 06 aa 4c 0a 0b 0c 0d\r\n     ac 1b 1c 1d da 1c 00 b3 38 9b ed 71 00 00 00 00\r\n     e0 02 ff ff 2b 31 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a 00 01 85 e1 00 00 00 00 1d 10 3d 54\r\n     c4 4e 60 cb 31 f7 c0 b1 de 3d 27 49\r\n", "notes": "The TCP checksum shown (0x70bf) is wrong, it should be 0x2b31.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:49:37"}, {"errata_id": "2941", "doc-id": "RFC5440", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.7.1", "orig_text": " o  PCEP uses a single registered port for all communications.  The\r\n    PCE SHOULD listen for TCP connections only on ports where\r\n    communication is expected.\r\n\r\n o  The PCE SHOULD NOT allow parallel TCP connections from the same\r\n    PCC on the PCEP-registered port.", "correct_text": " o  PCEP uses a single registered port for all communications.  The\r\n    PCE MUST listen for TCP connections only on ports where\r\n    communication is expected.\r\n\r\n o  The PCE MUST NOT allow parallel TCP connections from the same\r\n    PCC on the PCEP-registered port.", "notes": "RFC 5440 is not consistent regarding the use of RFC2119 keywords. In section 5 the RFC states \"MUST\" regarding the registered port and in section 10.7.1 it is stated \"SHOULD\". Section 10.7.1 seems to imply the PCE could listen at any port (which is technically possible, but not in line with the rest of the document). Finally, the restriction about multiple connections is confusing: Section 4.2.1 \"Only one PCEP session can exist between a pair of PCEP peers at any one time\" but section 10.7.1 uses \"SHOULD NOT\". Technically, without the TCP source restriction, it should be possible to accept multiple connections from a PCEP peer, but such a change could have broader implications", "submit_date": "2011-08-18", "submitter_name": "Ramon Casellas", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2943", "doc-id": "RFC2384", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "        S: +OK POP3 server ready <1896.697170952@mail.eudora.com>\r\n        C: APOP rg c4c9334bac560ecc979e58001b3e22fb\r\n", "correct_text": "        S: +OK POP3 server ready <1896.697170952@mail.eudora.com>\r\n        C: APOP rg 8f5de26536bc248ba202a9ca612e71bd\r\n", "notes": "If the password for user \"rg\" is \"secret\" as in the plain PASS example before this APOP example, then \r\nMD5(\"<1896.697170952@mail.eudora.com>secret\") should be as shown in the corrected text. \r\n\r\nThe original text is a modification of the APOP example in RFC 1939, and\r\nMD5(\"<1896.697170952@dbc.mtview.ca.us>tanstaaf\") almost certainly will not match any plausible \r\nMD5(\"<1896.697170952@mail.eudora.com>\"||password).", "submit_date": "2011-08-18", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4426", "doc-id": "RFC7554", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   This document describes the environment, problem statement, and goals\r\n   for using the Time-Slotted Channel Hopping (TSCH) Medium Access\r\n   Control (MAC) protocol of IEEE 802.14.4e in the context of Low-Power\r\n   and Lossy Networks (LLNs).  The set of goals enumerated in this\r\n   document form an initial set only", "correct_text": "   This document describes the environment, problem statement, and goals\r\n   for using the Time-Slotted Channel Hopping (TSCH) Medium Access\r\n   Control (MAC) protocol of IEEE 802.15.4e in the context of Low-Power\r\n   and Lossy Networks (LLNs).  The set of goals enumerated in this\r\n   document form an initial set only", "notes": "s/802.14.4e/802.15.4e/", "submit_date": "2015-07-23", "submitter_name": "Yusuke DOI", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2960", "doc-id": "RFC4480", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.", "orig_text": "7.2. Schema Registration for Schema ............................32\r\n     'urn:ietf:params:xml:ns:pidf:status:rpid'\r\n\r\n----on the page 32----\r\n\r\n7.2.  Schema Registration for Schema\r\n      'urn:ietf:params:xml:ns:pidf:status:rpid'\r\n\r\n   URI:  urn:ietf:params:xml:ns:pidf:status:rpid", "correct_text": "7.2. Schema Registration for Schema ............................32\r\n     'urn:ietf:params:xml:schema:pidf:status:rpid'\r\n\r\n----on the page 32----\r\n\r\n7.2.  Schema Registration for Schema\r\n      'urn:ietf:params:xml:schema:pidf:status:rpid'\r\n\r\n   URI:  urn:ietf:params:xml:schema:pidf:status:rpid", "notes": "The XML Schema sub-namespace is 'urn:ietf:params:xml:schema:pidf:status:rpid' (instead of 'urn:ietf:params:xml:ns:pidf:status:rpid') as registered in  the IANA maintained registry at http://www.iana.org/assignments/xml-registry/schema.html\r\n\r\nRFC 3688: The IETF XML Registry; Syntax for XML schema sub-namespace define the XML Schema namespace syntax as \"urn:ietf:params:xml:schema:<id>\".", "submit_date": "2011-09-07", "submitter_name": "Raphael Bossek", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2961", "doc-id": "RFC4480", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.", "orig_text": "<rpid:sphere>bowling league</rpid:sphere>\r\n", "correct_text": "<rpid:sphere><bowlingleague/></rpid:sphere>\r\n", "notes": "The <sphere> content type is 'element-only'; it's not valid to use tokens. It's possible to use XML elements from other XML namespace (e.g. <bowlingleague/>) or choose one of the following: <rpid:work/>, <rpid:home/>, <rpid:unknown/>", "submit_date": "2011-09-07", "submitter_name": "Raphael Bossek", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2962", "doc-id": "RFC4480", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.", "orig_text": "<dm:deviceID>urn:device:0003ba4811e3</dm:deviceID>\r\n...\r\n<dm:deviceID>urn:x-mac:0003ba4811e3</dm:deviceID>\r\n...\r\n<dm:deviceID>urn:device:0003ba4811e3</dm:deviceID>", "correct_text": "Replace all three with\r\n\r\n<dm:deviceID>urn:uuid:698137d0-b395-11e0-aff2-0800200c9a66</dm:deviceID>", "notes": "\"urn:device\" is a not registered URN namespace as defined by RFC3406: Uniform Resource Names (URN) Namespace Definition Mechanisms. \"urn:x-mac\" is an experimental URN namespace. All <dm:deviceID> address point to the same device.\r\nRFC 4479 in section 3.4. Device RECOMMENDS version 1 UUIDs for the <deviceID> element: \"For devices with a MAC address, version 1 UUIDs are RECOMMENDED, as they result in a time-based identifier that makes use of the MAC address.\"", "submit_date": "2011-09-08", "submitter_name": "Raphael Bossek", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2963", "doc-id": "RFC4479", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.1.", "orig_text": "<dm:deviceID>mac:8asd7d7d70</dm:deviceID>\r\n...\r\n<dm:deviceID>mac:8asd7d7d70</dm:deviceID>", "correct_text": "Replace both with\r\n\r\n<dm:deviceID>urn:uuid:698137d0-b395-11e0-aff2-0800200c9a66</dm:deviceID>", "notes": "As mentioned in Errata ID 2131 and 2962 a valid URN as defined in RFC3406: Uniform Resource Names (URN) Namespace Definition Mechanisms should be used for <dm:deviceID>. This is not the case for this example.\r\nRFC 4479 in section 3.4. Device RECOMMENDS version 1 UUIDs for the <deviceID> element: \"For devices with a MAC address, version 1 UUIDs are RECOMMENDED, as they result in a time-based identifier that makes use of the MAC address.\"", "submit_date": "2011-09-08", "submitter_name": "Raphael Bossek", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2964", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   param-value = *SAFE-CHAR / DQUOTE *QSAFE-CHAR DQUOTE", "correct_text": "   param-value = *SAFE-CHAR / ( DQUOTE *QSAFE-CHAR DQUOTE )", "notes": "This is to remove possibility of doubly understanding, eg.:\r\n\r\n   param-value = ( *SAFE-CHAR / DQUOTE ) *QSAFE-CHAR DQUOTE\r\n\r\nor\r\n\r\n   param-value = *SAFE-CHAR / ( DQUOTE *QSAFE-CHAR DQUOTE )\r\n\r\nwith the latter being right.  See also http://www.ietf.org/mail-archive/web/vcarddav/current/msg02318.html.", "submit_date": "2011-09-08", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2944", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.8.5", "orig_text": "           0      1      2      3      4      5      6      7\r\n       +------+------+------+------+------+------+------+------+\r\n       | EOOL | NOP  | SEC  | LSR  |  TS  |E-SEC |CIPSO |  RR  | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n           8      9     10     11     12     13     14     15\r\n       +------+------+------+------+------+------+------+------+\r\n   ... | SID  | SSR  | ZSU  | MTUP | MTUR | FINN | VISA |ENCODE| ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n          16     17     18     19     20     21     22     23\r\n       +------+------+------+------+------+------+------+------+\r\n   ... |IMITD | EIP  |  TR  |ADDEXT|RTRALT| SDB  |NSAPA | DPS  | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n          24     25     26     27     28     29     30     31\r\n       +------+------+------+------+------+------+------+------+\r\n   ... | UMP  |  QS  |   to be assigned by IANA  |  EXP |      |\r\n       +------+------+------+------+------+------+------+------+\r\n", "correct_text": "           0      1      2      3      4      5      6      7\r\n       +------+------+------+------+------+------+------+------+\r\n       |      |  EXP |   to be assigned by IANA  |  QS  | UMP  | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n\r\n           8      9     10     11     12     13     14     15\r\n       +------+------+------+------+------+------+------+------+\r\n   ... | DPS  |NSAPA | SDB  |RTRALT|ADDEXT|  TR  | EIP  |IMITD | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n\r\n          16     17     18     19     20     21     22     23\r\n       +------+------+------+------+------+------+------+------+\r\n   ... |ENCODE| VISA | FINN | MTUR | MTUP | ZSU  | SSR  | SID  | ...\r\n       +------+------+------+------+------+------+------+------+\r\n\r\n\r\n          24     25     26     27     28     29     30     31\r\n       +------+------+------+------+------+------+------+------+\r\n   ... |  RR  |CIPSO |E-SEC |  TS  | LSR  | SEC  | NOP  | EOOL |\r\n       +------+------+------+------+------+------+------+------+\r\n", "notes": "The bits were originally shown in the wrong order.\r\n\r\nErrata 1737 tried to correct this by reversing the bits, but overlooked reversing the bytes.\r\n\r\nNote that the network bit numbering in the figure is exactly the reverse of the \"Bit\" value in the following table.", "submit_date": "2011-08-22", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2945", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.8.6", "orig_text": "              0     1     2     3     4     5     6     7\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n          | Res | FRA1| RH  | FRA0| UNK | Res | HOP | DST |  ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n              8     9    10    11    12    13    14    15\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... | PAY | AH  | ESP |         Reserved            | ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             16    17    18    19    20    21    22    23\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |                  Reserved                     | ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             24    25    26    27    28    29    30    31\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |                  Reserved                     |\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n", "correct_text": "             0     1     2     3     4     5     6     7\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n          |                  Reserved                     | ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n              8     9    10    11    12    13    14    15\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |                  Reserved                     | ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             16    17    18    19    20    21    22    23\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |         Reserved            | ESP | AH  | PAY | ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             24    25    26    27    28    29    30    31\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... | DST | HOP | Res | UNK | FRA0| RH  | FRA1| Res |\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n", "notes": "The bits were originally shown in the wrong order.\r\n\r\nErrata 1738 tried to correct this by reversing the bits, but overlooked reversing the bytes.\r\n\r\nNote that the network bit numbering in the figure is exactly the reverse of the \"Bit\" value in the following table.", "submit_date": "2011-08-22", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4427", "doc-id": "RFC5440", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.9", "orig_text": "A PCEP implementation that receives an unrecognized PCEP message MUST\r\n   send a PCErr message with Error-value=2 (capability not supported).", "correct_text": "A PCEP implementation that receives an unrecognized PCEP message MUST\r\n   send a PCErr message with Error-Type=2 (capability not supported).", "notes": "Error-value=2 is not defined, it should be Error-Type=2", "submit_date": "2015-07-23", "submitter_name": "Phaneendra Manda", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3095", "doc-id": "RFC6410", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   After review and consideration of significant errata, the IESG will\r\n   perform an IETF-wide Last Call of at least four weeks on the\r\n   requested reclassification.  If there is consensus for\r\n   reclassification, the RFC will be reclassified without publication of\r\n   a new RFC.\r\n", "correct_text": "   After review and consideration of significant errata, the IESG will\r\n   perform an IETF-wide Last Call of at least four weeks on the\r\n   requested reclassification.  If there is consensus for\r\n   reclassification, the RFC will be reclassified with or without\r\n   publication of a new RFC.", "notes": "Some people seem to have interpreted this text in a more restrictive manner than intended by the authors.  Advancement from Proposed Standard to Internet Standard does not require the publication of a new RFC.  Reclassification of an existing RFC is allowed, but reclassification in conjunction with publication of a new RFC is also allowed.", "submit_date": "2012-01-23", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3096", "doc-id": "RFC5234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "B.1", "orig_text": "LWSP           =  *(WSP / CRLF WSP)", "correct_text": "LWSP           =  1*(WSP / CRLF WSP)", "notes": "RFC 822 said:\r\nlinear-white-space =  1*([CRLF] LWSP-char)\n --VERIFIER NOTES-- \nPaul Overell notes the following (and Dave Crocker concurs):\r\n\r\n###\r\n\r\nThe suggested change would give LWSP the same syntactic definition as RFC822's linear-white-space.\r\n\r\nHowever, the successor to RFC822, RFC5322, doesn't use LWSP, it has its own definitions specifying header folding. Nor does RFC5234 itself use LWSP.\r\n\r\nThere are RFCs that use the existing definition, e.g. RFC6376, RFC5191, RFC5987.  These would need to be fixed if we changed the definition of LWSP.\r\n\r\nThe existing definition of LWSP has been around since 1997, it is not wrong or unreasonable, just different from RFC822's linear-white-space.\r\n\r\n###\r\n", "submit_date": "2012-01-23", "submitter_name": "MURATA Yasuhisa", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3097", "doc-id": "RFC6029", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "In such a technique, given a cost function C, a set\r\nof vertexes V and their corresponding edges, the triangle inequality\r\nholds if for any triple {a, b, c} in V, C(a, c) is always less than\r\nor equal to C(a, g) + C(b, c).", "correct_text": "In such a technique, given a cost function C, a set\r\nof vertexes V and their corresponding edges, the triangle inequality\r\nholds if for any triple {a, b, c} in V, C(a, c) is always less than\r\nor equal to C(a, b) + C(b, c).", "notes": "A 'g' instead of a 'b' appears in the triangle inequality description.", "submit_date": "2012-01-27", "submitter_name": "Wes Eddy", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4428", "doc-id": "RFC7432", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "TOC", "orig_text": "Route Distinguisher Assignment per EVI", "correct_text": "Route Distinguisher Assignment per MAC-VRF", "notes": "In the Table of Contents, the line for section 7.9. is incorrect and does not reflect the actual section title on page 18.", "submit_date": "2015-07-27", "submitter_name": "Wenhu Lu", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2946", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.8.8", "orig_text": "              0     1     2     3     4     5     6     7\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n          |   0 |   1 |   2 |   3 |   4 |   5 |   6 |   7 |  ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n              8     9    10    11    12    13    14    15\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |   8 |   9 |  10 |  11 |  12 |  13 |  14 |  15 |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             16    17    18    19    20    21    22    23\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  16 |  17 |  18 |  19 |  20 |  21 |  22 |  23 |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n                                . . .\r\n\r\n             56    57    58    59    60    61    62    63\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  56 |  57 |  58 |  59 |  60 |  61 |  62 |  63 |\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n", "correct_text": "              0     1     2     3     4     5     6     7\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n          |  63 |  62 |  61 |  60 |  59 |  58 |  57 |  56 |  ...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n              8     9    10    11    12    13    14    15\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  55 |  54 |  53 |  52 |  51 |  50 |  49 |  48 |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n             16    17    18    19    20    21    22    23\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |  47 |  46 |  45 |  44 |  43 |  42 |  41 |  40 |...\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n\r\n                                . . .\r\n\r\n             56    57    58    59    60    61    62    63\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+\r\n      ... |   7 |   6 |   5 |   4 |   3 |   2 |   1 |   0 |\r\n          +-----+-----+-----+-----+-----+-----+-----+-----+ \r\n", "notes": "The bits were originally shown in the wrong order.\r\n\r\nErrata 1739 tried to correct this by reversing the bits, but overlooked reversing the bytes.", "submit_date": "2011-08-22", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2947", "doc-id": "RFC3504", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "metadata", "orig_text": "n/a", "correct_text": "The document should be marked as \"Updates: 2801\" as it makes several normative changes to IOTP spec.", "notes": "", "submit_date": "2011-08-26", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2948", "doc-id": "RFC6063", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12.2", "orig_text": "URI:  urn:ietf:params:xml:ns:keyprov:dskpp", "correct_text": "URI:  urn:ietf:params:xml:schema:keyprov:dskpp", "notes": "Section 12.2 is the registration for the schema not the namespace, which is in Section 12.1.  The URI for the schema ought to point to :schema: and not :ns:.  It's in the IANA registry it just needs to be updated here.", "submit_date": "2011-08-28", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2949", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "(top of page 149)\r\n\r\n leafref-specification =\r\n                         ;; these stmts can appear in any order\r\n                         path-stmt stmtsep\r\n                         [require-instance-stmt stmtsep]\r\n", "correct_text": " leafref-specification = path-stmt stmtsep\r\n", "notes": "require-instance-stmt not allowed in leafref", "submit_date": "2011-08-28", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4553", "doc-id": "RFC3261", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "20.11", "orig_text": "The handling parameter, handling-param, describes how the UAS should\r\nreact if it receives a message body whose content type or disposition\r\ntype it does not understand.  The parameter has defined values of\r\n\"optional\" and \"required\".  If the handling parameter is missing, the\r\nvalue \"required\" SHOULD be assumed.  The handling parameter is\r\ndescribed in RFC 3204 [19].\r\n", "correct_text": "The handling parameter, handling-param, describes how the UAS should\r\nreact if it receives a message body whose content type or disposition\r\ntype it does not understand.  The parameter has defined values of\r\n\"optional\" and \"required\".  If the handling parameter is missing, or if\r\nthe Content-Disposition header field is missing, the value \"required\" \r\nMUST be assumed.  The handling parameter is described in RFC 3204 [19].\r\n", "notes": "SIPCORE discussion: https://mailarchive.ietf.org/arch/msg/sipcore/bn-pRgDyGL2FP_M7eYpyT35zNp4\n --VERIFIER NOTES-- \n   See https://mailarchive.ietf.org/arch/msg/sipcore/fjlcEaK4zFS3Yelzkqvljl5SxRw/", "submit_date": "2015-12-04", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:22:03"}, {"errata_id": "2965", "doc-id": "RFC3464", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix E", "orig_text": "Simple DSN\r\n\r\n   This is a simple DSN issued after repeated attempts to deliver a\r\n   message failed.  In this case, the DSN is issued by the same MTA from\r\n   which the message was originated.\r\n\r\n   Date: Thu, 7 Jul 1994 17:16:05 -0400 From: Mail Delivery Subsystem\r\n   <MAILER-DAEMON@CS.UTK.EDU> Message-Id:\r\n   <199407072116.RAA14128@CS.UTK.EDU> Subject: Returned mail: Cannot\r\n   send message for 5 days To: <owner-info-mime@cs.utk.edu> MIME-\r\n   Version: 1.0 Content-Type: multipart/report; report-type=delivery-\r\n   status;\r\n          boundary=\"RAA14128.773615765/CS.UTK.EDU\"\r\n\r\n   --RAA14128.773615765/CS.UTK.EDU", "correct_text": "Simple DSN\r\n\r\n   This is a simple DSN issued after repeated attempts to deliver a\r\n   message failed.  In this case, the DSN is issued by the same MTA from\r\n   which the message was originated.\r\n\r\n   Date: Thu, 7 Jul 1994 17:16:05 -0400 \r\n   From: Mail Delivery Subsystem <MAILER-DAEMON@CS.UTK.EDU> \r\n   Message-Id: <199407072116.RAA14128@CS.UTK.EDU> \r\n   Subject: Returned mail: Cannot send message for 5 days \r\n   To: <owner-info-mime@cs.utk.edu> \r\n   MIME-Version: 1.0 \r\n   Content-Type: multipart/report; report-type=delivery-status;\r\n          boundary=\"RAA14128.773615765/CS.UTK.EDU\"\r\n\r\n   --RAA14128.773615765/CS.UTK.EDU", "notes": "Apparently an unintended \"Reformat Paragraph\" of the top level message header.", "submit_date": "2011-09-09", "submitter_name": "Bill McQuillan", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2966", "doc-id": "RFC6365", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "Malay is primarily written in\r\n      Latin script today, but the earlier, Arabic-script-based, Jawa\r\n      form is still in use", "correct_text": "Malay is primarily written in\r\n      Latin script today, but the earlier, Arabic-script-based, Jawi\r\n      form is still in use", "notes": "I don't know this script myself but it seems that, in english, it is always called Jawi (Jawa is the old name for the island it came from, so Jawi = script from Jawa).\r\n\r\nThis script (actually a variant of the arabic one) does not seem to be in ISO 15924 so I cannot offer an authoritative reference.", "submit_date": "2011-09-10", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2967", "doc-id": "RFC3031", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.20", "orig_text": "When order control is used, each LSR should adopt, for a given set of\r\nFECs, the granularity used by its next hop for those FECs.", "correct_text": "When ordered control is used, each LSR should adopt, for a given set of\r\nFECs, the granularity used by its next hop for those FECs.", "notes": "", "submit_date": "2011-09-11", "submitter_name": "fl", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4567", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "20.11", "orig_text": "The handling parameter, handling-param, describes how the UAS should\r\nreact if it receives a message body whose content type or disposition\r\ntype it does not understand. The parameter has defined values of\r\n\"optional\" and \"required\". If the handling parameter is missing, the\r\nvalue \"required\" SHOULD be assumed. The handling parameter is\r\ndescribed in RFC 3204 [19].", "correct_text": "The handling parameter, handling-param, describes how the UAS should\r\nreact if it receives a message body whose content type or disposition\r\ntype it does not understand. The parameter has defined values of\r\n\"optional\" and \"required\". If the handling parameter is missing, or if\r\nthe Content-Disposition header field is missing, the value \"required\" \r\nSHOULD be assumed. The handling parameter is described in RFC 3204 [19].\r\n", "notes": "", "submit_date": "2015-12-17", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2950", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.6", "orig_text": "   fields          =   *(trace\r\n                         *optional-field /\r\n                         *(resent-date /\r\n                          resent-from /\r\n                          resent-sender /\r\n                          resent-to /\r\n                          resent-cc /\r\n                          resent-bcc /\r\n                          resent-msg-id))\r\n                       *(orig-date /\r\n                       from /\r\n                       sender /\r\n                       reply-to /\r\n                       to /\r\n                       cc /\r\n                       bcc /\r\n                       message-id /\r\n                       in-reply-to /\r\n                       references /\r\n                       subject /\r\n                       comments /\r\n                       keywords /\r\n                       optional-field)", "correct_text": "   fields          =   *(trace\r\n                         *optional-field /\r\n                         1*(resent-date /\r\n                           resent-from /\r\n                           resent-sender /\r\n                           resent-to /\r\n                           resent-cc /\r\n                           resent-bcc /\r\n                           resent-msg-id))\r\n                       *(orig-date /\r\n                       from /\r\n                       sender /\r\n                       reply-to /\r\n                       to /\r\n                       cc /\r\n                       bcc /\r\n                       message-id /\r\n                       in-reply-to /\r\n                       references /\r\n                       subject /\r\n                       comments /\r\n                       keywords /\r\n                       optional-field)", "notes": "The original version causes an infinite loop (matching an infinite list of empty strings).", "submit_date": "2011-08-30", "submitter_name": "Antonio Regidor Garc\u00eda", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-13 20:48:09"}, {"errata_id": "2951", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4", "orig_text": "                   Destination   RT3 adv.   RT4 adv.\r\n                   _________________________________\r\n                   Ia,Ib         20         27\r\n                   N6            16         15\r\n                   N7            20         19\r\n                   N8            18         18\r\n                   N9-N11,H1     29         36\r\n                   _________________________________\r\n                   RT5           14         8\r\n                   RT7           20         14\r\n\r\n              Table 6: Destinations advertised into Area 1\r\n                        by Routers RT3 and RT4.", "correct_text": "                   Destination   RT3 adv.   RT4 adv.\r\n                   _________________________________\r\n                   Ia,Ib         20         27\r\n                   N6            16         15\r\n                   N7            20         19\r\n                   N8            18         18\r\n                   N9-N11,H1     29         29\r\n                   _________________________________\r\n                   RT5           14         8\r\n                   RT7           20         14\r\n\r\n              Table 6: Destinations advertised into Area 1\r\n                        by Routers RT3 and RT4.", "notes": "The distance from RT4 to N9-N11,H1 should be changed from 36 to 29 to be consistent with the row above that, which shows the distance from RT3 to N8 and RT4 to N8 as the same value, 18.  The length 18 path from RT3 to N8 is RT3-RT6-RT10-N8, while the length 18 path from RT4 to N8 is RT4-RT5-RT7-RT10-N8.  The summarized N9-N11,H1 network is a distance 11 beyond that, or 29 in both cases.  The length 29 path from RT3 to N9-N11,H1 is RT3-RT6-RT10-RT11-(N9-N11,H1), and the length 29 path from RT4 to N9-N11,H1 is RT4-RT5-RT7-RT10-RT11-(N9-N11,H1).\n --VERIFIER NOTES-- \n   Joel made an error in posting this erratum. He posted a corrected erratum (2953) to which the reader is referred.", "submit_date": "2011-08-31", "submitter_name": "Joel Gannett", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2952", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "14.1", "orig_text": "Premature aging is also be used when unexpectedly receiving self-originated\r\nLSAs during the flooding procedure (see Section 13.4).", "correct_text": "Premature aging might also be used when unexpectedly receiving self-originated\r\nLSAs during the flooding procedure (see Section 13.4).", "notes": "Change \"is also be used\" to \"might also be used.\"\r\n --VERIFIER NOTES-- \r\nThe text in section 13.4 that is referenced is a case where premature aging is used.", "submit_date": "2011-08-31", "submitter_name": "Joel Gannett", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4568", "doc-id": "RFC7564", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "Preparation entails only ensuring that the characters in an\r\nindividual string are allowed by the underlying PRECIS string\r\nclass.", "correct_text": "Preparation entails applying some or none of the rules specified for a\r\nparticular string class or profile thereof to an individual string, and\r\nensuring that characters in the resulting string are allowed by the\r\nunderlying PRECIS string class.", "notes": "The original text makes it sound like preparation is ONLY validating that the characters in a string are allowed in the underlying PRECIS string class, however, some profiles (for example, see the UsernameCaseMapped profile) specify that some of the rules must be applied first (in the case of UsernameCaseMapped, preparation includes first applying the Width rule).", "submit_date": "2015-12-20", "submitter_name": "Sam Whited", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4344", "doc-id": "RFC5988", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "media-type     = type-name \"/\" subtype-name\r\nquoted-mt      = <\"> media-type <\">", "correct_text": "media-type = type-name \"/\" subtype-name\r\nquoted-mt  = <\"> type-name \"/\" subtype-name \r\n    *( OWS \";\" OWS parameter )<\">", "notes": "The text as it stands excludes the possibility of including media type parameters.  https://tools.ietf.org/html/rfc6838#section-4.3\r\n\r\nSuggested ABNF above adapted from https://tools.ietf.org/html/rfc7231#section-5.3.2\n --VERIFIER NOTES-- \nFor better or worse, doing it this way was an explicit decision when the document was developed, so this doesn't qualify as errata.  Issues are being collected for a possible 5988bis, and this can be added and discussed there:\r\nhttps://github.com/mnot/I-D/issues?q=is%3Aopen+is%3Aissue+label%3Arfc5988bis", "submit_date": "2015-04-22", "submitter_name": "Peter Rushforth", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4345", "doc-id": "RFC7044", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "6.2.  User Agent Server (UAS) Behavior\r\n\r\n   When receiving a request, a UAS MUST follow the procedures defined in\r\n   Section 9.2.", "correct_text": "6.2.  User Agent Server (UAS) Behavior\r\n\r\n   When receiving a request, a UAS MUST follow the procedures defined in\r\n   Section 9.1.", "notes": "In fact, the subject of 9.2 is \"Sending a Request with History-Info\", according to the original text, it wants to refer to how to handle a received request in UAS, the right reference shall be section 9.1 (9.1.  Receiving a Request).", "submit_date": "2015-04-22", "submitter_name": "chao wang", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2953", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "                   Destination   RT3 adv.   RT4 adv.\r\n                   _________________________________\r\n                   Ia,Ib         20         27\r\n                   N6            16         15\r\n                   N7            20         19\r\n                   N8            18         18\r\n                   N9-N11,H1     29         36\r\n                   _________________________________\r\n                   RT5           14         8\r\n                   RT7           20         14\r\n\r\n              Table 6: Destinations advertised into Area 1\r\n                        by Routers RT3 and RT4.", "correct_text": "                   Destination   RT3 adv.   RT4 adv.\r\n                   _________________________________\r\n                   Ia,Ib         20         27\r\n                   N6            16         15\r\n                   N7            20         19\r\n                   N8            18         25\r\n                   N9-N11,H1     29         36\r\n                   _________________________________\r\n                   RT5           14         8\r\n                   RT7           20         14\r\n\r\n              Table 6: Destinations advertised into Area 1\r\n                        by Routers RT3 and RT4.", "notes": "The distance from RT4 to N8 should be changed from 18 to 25.  Unless there is a virtual link between RT7 and RT10, the shortest path from RT4 to N8 is 25, not 18.  Although a virtual link from RT7 and RT10 is discussed in the last paragraph of Section 3.4, it is not assume part of the network design.  Moreover, this change is needed to make the N9-N11,H1 row consistent with the N8 row, as each entry in the N9-N11,H1 row must be 11 greater than the same-column entry in the N8 row.", "submit_date": "2011-08-31", "submitter_name": "Joel Gannett", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2954", "doc-id": "RFC3820", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.2", "orig_text": "This implies that Steve must know in advance which other\r\nidentities may be involved in this distributed application, in\r\norder to generate the appropriate ACs which are signed by Steve's\r\nECC.", "correct_text": "This implies that Steve must know in advance which other\r\nidentities may be involved in this distributed application, in\r\norder to generate the appropriate ACs which are signed by Steve's\r\nEEC.", "notes": "s/ECC/EEC/", "submit_date": "2011-08-31", "submitter_name": "Frank Cusack", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2955", "doc-id": "RFC4632", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": " C2: 10.24.16.0/20       \\ |    |  _10.24.12.0 - 10.24.15.0__  |    |\r\n                          \\|    | / C4: 10.24.12.0/20        \\ |    |\r\n                                                 ~~~~~", "correct_text": " C2: 10.24.16.0/20       \\ |    |  _10.24.12.0 - 10.24.15.0__  |    |\r\n                          \\|    | / C4: 10.24.12.0/22        \\ |    |", "notes": "~Should be 10.24.12.0/22 as described just above", "submit_date": "2011-09-03", "submitter_name": "Olivier Le Rigoleur", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2956", "doc-id": "RFC5598", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "Figure 5: Protocols and Services, MTA-hMDA list of protocols", "correct_text": "{{ The text in Section 4.4 cites the two, standards-track 'turn' mechanisms, but these are not listed in the MTA-hMDA link of Figure 5. }}", "notes": "Clearly this is a non-critical enhancement.  Still, it would be good to add whenever the document is updated.", "submit_date": "2011-09-03", "submitter_name": "Dave Crocker", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2957", "doc-id": "RFC6221", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "-  the Interface-ID option is present, and the value corresponds to a\r\n   valid interface in the access node;", "correct_text": "-  the Interface-ID option is present, and the value corresponds to a\r\n   valid client-facing interface in the access node;", "notes": "", "submit_date": "2011-09-05", "submitter_name": "Gaurav Halwasia", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2958", "doc-id": "RFC3182", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3", "orig_text": "6.3 Authentication (Router/PDP)\r\n\r\n[..]\r\n\r\n   2. Verify user credential\r\n\r\n[..]\r\n\r\n      -  Kerberos: Send the Kerberos ticket to the KDC to obtain the\r\n         session key.  Using the session key authenticate the user.\r\n", "correct_text": "Kerberos: Extract the session key from the ticket. Use the session key to authenticate the user.", "notes": "The corrected text is only an example. The most important point is that Kerberos doesn't require the server to contact the KDC, all the information is already in the kerberos authenticator and ticket sent by the client.\r\n\r\nSee this email exchange from 2001 :-) http://psg.com/lists/rap/rap.2001/msg00269.html where the same issue is raised by Hannes Tschofenig and confirmed by one of the RFC authors, R. Hess.", "submit_date": "2011-09-07", "submitter_name": "Marco Molteni", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2959", "doc-id": "RFC4480", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.", "orig_text": "Activities such as <appointment>, <breakfast>, <dinner>, <holiday>,\r\n<lunch>, <meal>, <meeting>, <performance>, <travel>, or <vacation>\r\ncan often be derived from calendar information.\r\n\r\n----on the next page----\r\n\r\nlunch:  The person is eating his or her midday meal.", "correct_text": "Activities such as <appointment>, <breakfast>, <dinner>, <holiday>,\r\n<meal>, <meeting>, <performance>, <travel>, or <vacation>\r\ncan often be derived from calendar information.\r\n\r\n----on the next page----\r\n\r\n(delete this line)", "notes": "The <lunch> activity is not allowed because not defined by the XML Schema in section in section 5.1. Because the XML Schema is immutable the documentation should be corrected.\r\n\r\n --VERIFIER NOTES-- \r\nThis erratum had previously been held for document update, but has since been rejected in favor of Erratum 3121. Please see that erratum at <http://www.rfc-editor.org/errata_search.php?eid=3121>\r\n", "submit_date": "2011-09-07", "submitter_name": "Raphael Bossek", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4610", "doc-id": "RFC6352", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "8.7", "orig_text": "The request MUST include a Depth: 0 header; however, the actual\r\n      scope of the REPORT is determined as described above.", "correct_text": "The request MUST include a Depth: 1 header; however, the actual\r\n      scope of the REPORT is determined as described above.", "notes": "All examples of a addressbook-multiget query use Depth: 1 header, but the 8.7 section says it must be Depth: 0. I believe the mistake is in the documentation.", "submit_date": "2016-02-02", "submitter_name": "Sylvain Berfini", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4562", "doc-id": "RFC3435", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "G.1.2", "orig_text": "Table F.2: Residential Gateway Restart", "correct_text": "Table F.2: Call Agent Restart", "notes": "The section is about a call agent restarting and the table illustrates the protocol correctly, but the table title is wrong, apparently copied from Table F.1 in Section G.1.1 Residential Gatway Restart.", "submit_date": "2015-12-10", "submitter_name": "Karl Brose", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8696", "doc-id": "RFC8414", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "[MIX-UP]   Jones, M., Bradley, J., and N. Sakimura, \"OAuth 2.0 Mix-Up\r\n              Mitigation\", Work in Progress, draft-ietf-oauth-mix-up-\r\n              mitigation-01, July 2016.", "correct_text": "[RFC9207]  Meyer zu Selhausen, K. and D. Fett, \"OAuth 2.0 Authorization Server \r\nIssuer Identification\", RFC 9207, DOI 10.17487/RFC9207, March 2022, <https://\r\nwww.rfc-editor.org/info/rfc9207>.", "notes": "[MIX-UP]  is not a draft anymore, but was accepted in RFC 9207\n --VERIFIER NOTES-- \nReference was correct at the time of publication.", "submit_date": "2026-01-07", "submitter_name": "Philip Wedemann", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-01-12 21:36:12"}, {"errata_id": "2968", "doc-id": "RFC5234", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "elements       =  alternation *c-wsp", "correct_text": "elements       =  alternation *WSP", "notes": "The grammar in section 4 of RFC 5234 is ambiguous. This was discovered by my own parsing code when trying to parse the ABNF grammar with itself. The ambiguity can be seen in a simplified form using the following 10 characters of input:\r\n\r\nInput:   X  =  Y \\r \\n     ;  Z \\r \\n\r\nOffset:  0  1  2  3  4  5  6  7  8  9 \r\n\r\nMy parser finds these two (ambiguous) solutions...\r\n\r\nSOLUTION 1:\r\n\r\nrulelist @ 0 len 10\r\n    rule @ 0 len 10\r\n        rulename @ 0 len 1  \"X\"\r\n            ALPHA @ 0 len 1\r\n        star_c_wsp @ 1 len 0\r\n        defined_as @ 1 len 1\r\n            star_c_wsp @ 2 len 0\r\n        elements @ 2 len 4\r\n            alternation @ 2 len 1\r\n                concatenation @ 2 len 1\r\n                    repetition @ 2 len 1\r\n                        element @ 2 len 1\r\n                            rulename @ 2 len 1  \"Y\"\r\n                                ALPHA @ 2 len 1\r\n            star_c_wsp @ 3 len 3\r\n                c_wsp @ 3 len 3\r\n                    c_nl @ 3 len 2\r\n                        CRLF @ 3 len 2\r\n                            CR @ 3 len 1\r\n                            LF @ 4 len 1\r\n                    WSP @ 5 len 1\r\n                        SP @ 5 len 1\r\n        c_nl @ 6 len 4\r\n            comment @ 6 len 4  \";Z\r\n\"\r\n                WSP_or_VCHAR @ 7 len 1\r\n                    VCHAR @ 7 len 1\r\n                CRLF @ 8 len 2\r\n                    CR @ 8 len 1\r\n                    LF @ 9 len 1\r\n\r\nSOLUTION 2:\r\n\r\nrulelist @ 0 len 10\r\n    rule @ 0 len 5\r\n        rulename @ 0 len 1  \"X\"\r\n            ALPHA @ 0 len 1\r\n        star_c_wsp @ 1 len 0\r\n        defined_as @ 1 len 1\r\n            star_c_wsp @ 2 len 0\r\n        elements @ 2 len 1\r\n            alternation @ 2 len 1\r\n                concatenation @ 2 len 1\r\n                    repetition @ 2 len 1\r\n                        element @ 2 len 1\r\n                            rulename @ 2 len 1  \"Y\"\r\n                                ALPHA @ 2 len 1\r\n            star_c_wsp @ 3 len 0\r\n        c_nl @ 3 len 2\r\n            CRLF @ 3 len 2\r\n                CR @ 3 len 1\r\n                LF @ 4 len 1\r\n    star_c_wsp @ 5 len 1\r\n        c_wsp @ 5 len 1\r\n            WSP @ 5 len 1\r\n                SP @ 5 len 1\r\n    c_nl @ 6 len 4\r\n        comment @ 6 len 4  \";Z\r\n\"\r\n            WSP_or_VCHAR @ 7 len 1\r\n                VCHAR @ 7 len 1\r\n            CRLF @ 8 len 2\r\n                CR @ 8 len 1\r\n                LF @ 9 len 1\r\n\r\n\r\nThe solution to this ambiguity is to change:\r\n    elements       =  alternation *c-wsp\r\nto:\r\n    elements       =  alternation *WSP\r\n\r\n\r\n --VERIFIER NOTES-- \r\n\r\nThe current document is clearly incorrect. However, though the solution appears correct, it has not been tested.", "submit_date": "2011-09-12", "submitter_name": "Daniel van Vugt", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2969", "doc-id": "RFC2119", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1,3,4", "orig_text": "(1) \"The key words \"MUST\", \"MUST NOT\", \"REQUIRED\", \"SHALL\", \"SHALL NOT\", \"SHOULD\", \"SHOULD NOT\", \"RECOMMENDED\",  \"MAY\", and \"OPTIONAL\" mean\r\n\r\n(2) 1. MUST   This word, or the terms \"REQUIRED\" or \"SHALL\", mean\r\n\r\n(3) 3. SHOULD   This word, or the adjective \"RECOMMENDED\", mean\r\n\r\n(4) 4. SHOULD NOT   This phrase, or the phrase \"NOT RECOMMENDED\" mean\r\n", "correct_text": "(1) \"The key words \"MUST\", \"MUST NOT\", \"SHALL\", \"SHALL NOT\", \"SHOULD\", \"SHOULD NOT\", and \"MAY\" means\r\n\r\n(2) 1. MUST   This word, or the term \"SHALL\", means\r\n\r\n(3) 3. SHOULD   This word means\r\n\r\n(4) 4. SHOULD NOT   This phrase means\r\n\r\nEditorial note: The use of \"mean\" after a singular subject is simply wrong.  Subordinate phrases like \", or the term BLATHER,\" do nothing to change that.\r\n\r\n\r\n ", "notes": "RFC 2026, to which RFC 2119 should be subordinate, carefully distinguishes between Technical Specifications (TS) and Applicability Statements (AS).   Its Section 3.3 prescribes specific language to be used in ASs, with categories \"Required\", \"Recommended\", \"Elective\", \"Limited Use\", and \"Not Recommended\", while 2119's language, especially in its Section 6, fairly clearly apply to interoperability requirements within TS documents.  Use of terms that 2026 requires for AS documents in a TS context (as synonyms for other, unambiguous, terms) is just an invitation to confusion, especially if the IETF continues to have hair-splitting arguments about the nature of requirements in particular contexts.   Consequently, while the change proposed in erratum 419 (altering the definition phrase to reflect the language of Section 4) appears reasonable from an editorial standpoint, the correct fix is to remove the 2026 AS terms as acceptable synonyms from 2119 entirely.  If people want to say \"SHOULD NOT\" and give it specific meaning, they should say \"SHOULD NOT\" rather than trying to use nearly-synonymous terms and hoping that the reader will figure out what was really met.", "submit_date": "2011-09-12", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2971", "doc-id": "RFC3405", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "n/a", "orig_text": "N/A", "correct_text": "N/A", "notes": "This erratum report is to let the readers of RFC 3405 know that after register-uri and register-urn lists were restored in September 2011, new list archives may be found at <http://mm.icann.org/pipermail/register-uri/> and <http://mm.icann.org/pipermail/register-urn/> rather than IANA site.\r\n\r\n --VERIFIER NOTES-- \r\nThis report does not consist of an erratum against the specification.   ", "submit_date": "2011-09-15", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3007", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4", "orig_text": "b.  For kiss code RATE, the client MUST immediately reduce its\r\n       polling interval to that server and continue to reduce it each\r\n       time it receives a RATE kiss code.", "correct_text": "b.  For kiss code RATE, the client MUST immediately increase its\r\n       polling interval to that server and continue to increase it each\r\n       time it receives a RATE kiss code.", "notes": "The client needs to poll the server for new timestamps less often", "submit_date": "2011-10-28", "submitter_name": "Danny Mayer", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4555", "doc-id": "RFC5440", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In Appendix A", "orig_text": "   The following set of variables are initialized:\r\n\r\n      TCPRetry=0,\r\n\r\n", "correct_text": "   The following set of variables are initialized:\r\n\r\n      ConnectRetry=0,", "notes": "Variable TCPRetry is not defined,  defined variable is\r\n ConnectRetry.", "submit_date": "2015-12-06", "submitter_name": "Mahendra Singh Negi", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2979", "doc-id": "RFC3954", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   Source ID\r\n         A 32-bit value that identifies the Exporter Observation Domain.\r\n         NetFlow Collectors SHOULD use the combination of the source IP\r\n         address and the Source ID field to separate different export\r\n         streams originating from the same Exporter.", "correct_text": "   Source ID\r\n         A 32-bit value that identifies the Exporter Observation Domain.\r\n         NetFlow Collectors SHOULD use the combination of the source IP\r\n         address, source port, and the Source ID field to separate different export\r\n         streams originating from the same Exporter.", "notes": "Addition of \"source port\" to separate multiple export streams.\r\n\r\nThis is already addressed in RFC5101 (IPFIX) as so:\r\n\r\n      Collecting Processes SHOULD use the Transport Session and the\r\n      Observation Domain ID field to separate different export streams\r\n\r\nNB transport session = address + ports.", "submit_date": "2011-09-26", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2980", "doc-id": "RFC3398", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "                               +---------+\r\n      +----------------------->|  Idle   |<---------------------+\r\n      |                        +----+----+                      |\r\n      |                             |                           |\r\n      |                             | INVITE/6.2.1              |\r\n      |                             V                           |\r\n      |      T7/6.2.2   +-------------------------+   REL/6.2.4 |\r\n      +<----------------+         Trying          +------------>+\r\n      |                 +-+--------+------+-------+             |\r\n      |    CANCEL/6.2.3 | |        |      |                     |\r\n      +<----------------+ | E.ACM/ | ACM/ | CON/ANM             |\r\n      |                   | 6.2.5  |6.2.6 | 6.2.7               |\r\n      |                   V        |      |                     |\r\n      | T9/6.2.8  +--------------+ |      |                     |\r\n      +<----------+ Not alerting | |      |                     |\r\n      |           +-------+------+ |      |                     |\r\n      |  CANCEL/6.2.3 |   |        |      |                     |\r\n      |<--------------+   | CPG/   |      |                     |\r\n      |                   | 6.2.9  |      |                     |\r\n      |                   V        V      |                     |\r\n      |    T9/6.2.8     +---------------+ |    REL/6.2.4        |\r\n      +<----------------+    Alerting   |-|-------------------->|\r\n      |<----------------+--+-----+------+ |                     |\r\n      |  CANCEL/6.2.3      |  ^  |        |                     |\r\n      |               CPG/ |  |  | ANM/   |                     |\r\n      |              6.2.9 +--+  | 6.2.7  |                     |\r\n      |                          V        V                     |\r\n      |                 +-------------------------+    REL/9.2  |\r\n      |                 |     Waiting for ACK     |------------>|\r\n      |                 +-------------+-----------+             |\r\n      |                               |                         |\r\n      |                               | ACK/6.2.10              |\r\n      |                               V                         |\r\n      |     BYE/9.1     +-------------------------+    REL/9.2  |\r\n      +<----------------+        Connected        +------------>+\r\n                        +-------------------------+\r\n", "correct_text": "", "notes": "References in figure to 6.2 should point to 7.1.", "submit_date": "2011-09-27", "submitter_name": "Pablo Varela", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2981", "doc-id": "RFC5250", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "Section 7 describes Opaque type allocation and assignment.", "correct_text": "Section 9 describes Opaque type allocation and assignment.", "notes": "Section 7 was the \"IANA Considerations\" section in the previous RFC, 2370.\r\nIANA Considerations are included in Section 9 of this document.\r\n\r\n===\r\n\r\nThe reporter is correct in his report of the error and its root cause. However this error is unlikely to cause implementation or interoperability issues and can thus wait to be fixed when the RFC is revised. ", "submit_date": "2011-09-28", "submitter_name": "Gary Cote", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2972", "doc-id": "RFC5389", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "15.9", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |      Attribute 1 Type           |     Attribute 2 Type        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |      Attribute 3 Type           |     Attribute 4 Type    ...\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |       Attribute 1 Type        |       Attribute 2 Type        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |       Attribute 3 Type        |       Attribute 4 Type    ...\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Attribute 1 Type and Attribute 3 Type are 17-bits in original figure, Attribute 2 Type and Attribute 4 Type are 15-bits\r\n\r\nThis is a very cosmetic nit, since the meaning is perfectly clear (a list of 16-bit values)\r\n\r\nIn general however I find the decimal indices make all figures like this harder to read. I find hex indices an improvement:\r\n\r\n<pre>\r\n       0 1 2 3 4 5 6 7 8 9 A B C D E F 0 1 2 3 4 5 6 7 8 9 A B C D E F\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |       Attribute 1 Type        |       Attribute 2 Type        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |       Attribute 3 Type        |       Attribute 4 Type    ...\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n</pre>", "submit_date": "2011-09-16", "submitter_name": "Jack Bates", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2973", "doc-id": "RFC4130", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.3", "orig_text": "   The currently supported values for MIC algorithm <micalg> values are:\r\n\r\n        Algorithm   Value Used\r\n        ---------    -------\r\n         SHA-1        sha1\r\n         MD5          md5", "correct_text": "   The currently supported values for MIC algorithm <micalg> values are:\r\n\r\n        Algorithm   Value Used\r\n        ---------    -------\r\n\r\n         SHA-1      sha-1 or sha1\r\n         MD5        md5\r\n         SHA-224    sha-224\r\n         SHA-256    sha-256\r\n         SHA-384    sha-384\r\n         SHA-512    sha-512", "notes": "The proper spelling is \"sha-1\" per http://www.iana.org/assignments/hash-function-text-names/hash-function-text. However, \"sha1\" should still be accepted to support backwards compatibility. The other hashes are newer ones since the RFC was published.\n --VERIFIER NOTES-- \nA separate erratum was issued with the SHA1/SHA-1 fix. The additional algorithms cannot be added in an erratum.   ", "submit_date": "2011-09-16", "submitter_name": "Kyle Meadors", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2974", "doc-id": "RFC4130", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.4.3", "orig_text": "   digest-alg-id = \"sha1\" | \"md5\"", "correct_text": "   digest-alg-id = \"sha-1\" | \"sha-224\" | \"sha-256\" | \"sha-384\" | \"sha-512\" | \"sha1\" | \"md5\"\r\n\t\t; The \"sha1\" is a legacy spelling of the \"sha-1\" defined hash in the IANA Textual Names Registry\r\n\t\t; It should be maintained for backwards compatibility\r\n", "notes": "The proper spelling is \"sha-1\" per http://www.iana.org/assignments/hash-function-text-names/hash-function-text. However, \"sha1\" should still be accepted to support backwards compatibility. The other hashes are newer ones since the RFC was published.\n --VERIFIER NOTES-- \nBecause this erratum really requires publication of a replacement RFC, in accordance with the \"IESG Processing of RFC Errata for the IETF Stream\" <http://www.ietf.org/iesg/statement/errata-processing.html> the appropriate processing is to reject it.", "submit_date": "2011-09-16", "submitter_name": "Kyle Meadors", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2975", "doc-id": "RFC6147", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.4", "orig_text": "An implementation SHOULD include the ::ffff/96 network in that range \r\nby default.", "correct_text": "An implementation SHOULD include the ::ffff:0:0/96 network in that range \r\nby default.", "notes": "", "submit_date": "2011-09-18", "submitter_name": "Libor Polcak", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2976", "doc-id": "RFC3289", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4.5.", "orig_text": "   diffServRandomDropInvProbMax represents Pmax (inverse).  This MIB\r\n   does not represent Pmin (assumed to be zero unless otherwise\r\n   represented).  In addition, since message memory is finite, queues\r\n   generally have some upper bound above which they are incapable of\r\n   storing additional traffic.  Normally this number is equal to Qclip,\r\n   specified by diffServAlgDropQThreshold.\r\n", "correct_text": "       The average queue depth beyond which traffic has a probability\r\n       indicated by diffServRandomDropProbMax of being dropped or\r\n       marked. Note that this differs from the physical queue limit,\r\n       which is stored in diffServAlgDropQThreshold. ", "notes": "diffServRandomDropInvProbMax should be removed\r\n\r\nAttaching the e-mail confirmation from Fred :\r\n==============================================\r\n\r\n\r\nFrom: Fred Baker (fred)\r\nSent: Tuesday, September 20, 2011 10:54 PM\r\nTo: Ina Singh (inasingh)\r\nSubject: Re: RFC3289/DiffesrvMIB SFS\r\n\r\nThanks for pointing this out. Correct me if I'm wrong; it looks to me like diffServRandomDropInvProbMax only shows up in the comment in section 3.4.5, and diffServRandomDropProbMax is used throughout the MIB. Yes, the comment should be fixed, but the MIB is itself correct with diffServRandomDropProbMax. Correct?\r\n\r\nThe right thing to do is file an erratum against RFC 3289, so that if it is edited in the future the error can be picked up, and implementers can see it.\r\n\r\nhttp://www.ietf.org/iesg/statement/errata-processing.html describes the process. \r\n\r\n\r\nOn Sep 20, 2011, at 6:50 PM, Ina Singh (inasingh) wrote:\r\n\r\n> Hey Fred,\r\n>  \r\n> While implementing RFC3289/DiffesrvMIB SFS recently on IOS,  we noticed the following error :\r\n> It would seem that diffServRandomDropInvProbMax was replaced by \r\n> diffServRandomDropProbMax (?) , but the reference to \u201cdiffServRandomDropInvProbMax\u201d was not removed on subsequent versions.\r\n>  \r\n> Can you please confirm, if so, what\u2019s the procedure to correct it ..\r\n>  \r\n> Thanks in advance for your help in this and appreciate your time..\r\n>  \r\n> Ina\r\n>  \r\n> Definition of \"diffServRandomDropInvProbMax\" upto version 7, here is a link for draft version 6.\r\n>  \r\n> http://tools.ietf.org/html/draft-ietf-diffserv-mib-06\r\n>  \r\n> iffServRandomDropInvProbMax OBJECT-TYPE\r\n>     SYNTAX       Unsigned32\r\n>     MAX-ACCESS   read-create\r\n>     STATUS       current\r\n>     DESCRIPTION\r\n>        \"The worst case random drop probability, expressed as\r\n>        the  inverse  of  the drop probability.  With special\r\n>        case of the value zero meaning  zero  probability  of\r\n>        drop.\r\n>  \r\n>        For example, if every packet may be  dropped  in  the\r\n>        worst   case   (100%),   this   has   the   value  of\r\n>        4,294,967,295.\"\r\n>     ::= { diffServRandomDropEntry 6 }\r\n>  \r\n>  \r\n>  \r\n> In contrast to \"diffServRandomDropProbMax\" starting from version 8.\r\n>  \r\n>  \r\n> diffServRandomDropProbMax OBJECT-TYPE\r\n>  \r\n>     SYNTAX       Unsigned32 (0..1000)\r\n>     MAX-ACCESS   read-create\r\n>     STATUS       current\r\n>     DESCRIPTION\r\n>        \"The worst case random drop probability, expressed in drops per\r\n>        thousand packets.\r\n>  \r\n>        For example, if in the worst case every arriving packet may be\r\n>        dropped (100%) for a period, this has the value 1000.\r\n>        Alternatively, if in the worst case only one percent (1%) of\r\n>        traffic may be dropped, it has the value 10.\"\r\n>    ::= { diffServRandomDropEntry 6 }", "submit_date": "2011-09-21", "submitter_name": "Ina Singh", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2977", "doc-id": "RFC3398", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2.4.1", "orig_text": "(+) If the cause location is 'user' than the 6xx code could be given \r\nrather than the 4xx code (i.e., 403 becomes 603)", "correct_text": "(+) If the cause location is 'user', then the 6xx code could be given \r\nrather than the 4xx code (i.e., 403 becomes 603)", "notes": "\"Than\" is used for comparisons.  \"Then\" is used to denote something follows in sequence.", "submit_date": "2011-09-21", "submitter_name": "Jeff Dyer", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2978", "doc-id": "RFC4379", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4 (p. 36)", "orig_text": "      Else { \r\n\r\n          Retrieve the associated label operation from the \r\n          corresponding NLFE and proceed to step 4 (Label Operation \r\n          check). \r\n", "correct_text": "      Else { \r\n\r\n          Retrieve the associated label operation from the \r\n          corresponding NHLFE and proceed to step 4 (Label Operation \r\n          check). \r\n", "notes": "NLFE -> NHLFE", "submit_date": "2011-09-21", "submitter_name": "Zhi Zheng", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2982", "doc-id": "RFC5250", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "See section 7 of this document for a description of Opaque type allocation and assignment.\r\n", "correct_text": "See section 9 of this document for a description of Opaque type allocation and assignment.\r\n", "notes": "Section 7 was the \"IANA Considerations\" section in the previous RFC, 2370.\r\n\r\nIANA Considerations are included in Section 9 of this document.\r\n\r\n===\r\n\r\nThe reporter is correct in his report of the error and its root cause. However this error is unlikely to cause implementation or interoperability issues and can thus wait to be fixed when the RFC is revised.", "submit_date": "2011-09-28", "submitter_name": "Gary Cote", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4556", "doc-id": "RFC6474", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "DEATHDATE;19531015T231000Z", "correct_text": "DEATHDATE:19531015T231000Z", "notes": "A typo when declaring the third DEATHDATE property example: It is a colon, not a semi-colon.", "submit_date": "2015-12-07", "submitter_name": "Sylvain Berfini", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8697", "doc-id": "RFC9755", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "treats message/global like message/rfc", "correct_text": "treats message/global like message/rfc822", "notes": "The correct content type should be message/rfc822.", "submit_date": "2026-01-07", "submitter_name": "Radowan Redoy", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-01-13 13:40:25"}, {"errata_id": "2983", "doc-id": "RFC3381", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "4.1 job-collation-type (type2 enum)\r\n\r\n   Job Collation includes sheet collation and document collation.  Sheet\r\n   collation is defined to be the ordering of sheets within a document\r\n   copy.  Document collation is defined to be the ordering of document\r\n   copies within a multi-document job.  The value of the \"job-\r\n   collation-type\" is affected by the value of the \"sheet-collate\" Job\r\n   Template attribute (see section 3.1), if supplied and supported.\r\n\r\n   The Standard enum values are:\r\n\r\n      '1' 'other':  not one of the defined values\r\n\r\n      '2' 'unknown':  the collation type is unknown\r\n\r\n      '3' 'uncollated-sheets':  No collation of the sheets within each\r\n                    document copy, i.e., each sheet of a document that\r\n                    is to produce multiple copies, is replicated before\r\n                    the next sheet in the document is processed and\r\n                    stacked.  If the device has an output bin collator,\r\n                    the 'uncollated-sheets(3)' value may actually\r\n", "correct_text": "4.1 job-collation-type (type2 enum|other|unknown)\r\n\r\n   Job Collation includes sheet collation and document collation.  Sheet\r\n   collation is defined to be the ordering of sheets within a document\r\n   copy.  Document collation is defined to be the ordering of document\r\n   copies within a multi-document job.  The value of the \"job-\r\n   collation-type\" is affected by the value of the \"sheet-collate\" Job\r\n   Template attribute (see section 3.1), if supplied and supported.\r\n\r\n   The Standard enum values are:\r\n\r\n      '3' 'uncollated-sheets':  No collation of the sheets within each\r\n                    document copy, i.e., each sheet of a document that\r\n                    is to produce multiple copies, is replicated before\r\n                    the next sheet in the document is processed and\r\n                    stacked.  If the device has an output bin collator,\r\n                    the 'uncollated-sheets(3)' value may actually\r\n", "notes": "\"other\" and \"unknown\" are out-of-band values, per RFC 2911 section 4.1:\r\n\r\n   Note: SNMP MIBs use '2' for 'unknown' which corresponds to the IPP\r\n   \"out-of-band\" value 'unknown'.  See the description of the \"out-of-\r\n   band\" values at the beginning of Section 4.1.  Therefore, attributes\r\n   of type 'enum' start at '3'.", "submit_date": "2011-10-03", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2984", "doc-id": "RFC2782", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Weight", "orig_text": "        To select a target to be contacted next, arrange all SRV RRs\r\n        (that have not been ordered yet) in any order, except that all\r\n        those with weight 0 are placed at the beginning of the list.\r\n\r\n        Compute the sum of the weights of those RRs, and with each RR\r\n        associate the running sum in the selected order. Then choose a\r\n        uniform random number between 0 and the sum computed\r\n        (inclusive), and select the RR whose running sum value is the\r\n        first in the selected order which is greater than or equal to\r\n        the random number selected. The target host specified in the\r\n        selected SRV RR is the next one to be contacted by the client.\r\n        Remove this SRV RR from the set of the unordered SRV RRs and\r\n        apply the described algorithm to the unordered SRV RRs to select\r\n        the next target host.  Continue the ordering process until there\r\n        are no unordered SRV RRs.  This process is repeated for each\r\n        Priority.", "correct_text": "Correcting the text requires agreement on what to do with entries with\r\nweight=0, so I don't want to try to craft text until we have agreement there.", "notes": "The problem with this algorithm is that for a total weight T, it generates a random number 0..T and so allocates T+1 shares and gives the extra share to the first entry.  Thus with weights {1, 1}, the first entry is selected 2/3 of the time while the second entry is selected 1/3 of the time.\r\n\r\nI suspect that this is an attempt to do *something* with entries with weight=0, but yields unobvious results there:  for {0, 1, 1}, the three entries are each selected 1/3 of the time.\r\n\r\nI suggest:\r\n\r\n- Ordering weight=0 entries to the end.\r\n- Generating random numbers 0..(T-1).\r\n- Using a \"greater\" test rather than \"greater or equal\".\r\n- Selecting weight=0 entries in any order when all of the weight!=0 entries have been selected.\n --VERIFIER NOTES-- \nThe errata is not actionable.  Issue should be raised with the DNSEXT WG.   ", "submit_date": "2011-10-04", "submitter_name": "Jordan Brown", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4429", "doc-id": "RFC5357", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix 1", "orig_text": "Section Appendix says: \r\n              controller                              responder\r\n          +-----------------+                   +-------------------+\r\n          |     Server      |<----------------->|                   |\r\n          | Control-Client  |                   | Session-Reflector |\r\n          | Session-Sender  |<--TWAMP-Test----->|                   |\r\n          +-----------------+                   +-------------------+\r\n", "correct_text": "             controller                              responder\r\n          +-----------------+                   +-------------------+\r\n          |     Server      |                   |                   |\r\n          | Control-Client  |                   | Session-Reflector |\r\n          | Session-Sender  |<--TWAMP-Test----->|                   |\r\n          +-----------------+                   +-------------------+\r\n\r\n", "notes": "The top arrow is not identified and misleading. It should be removed.\r\n\r\n2015-07-29: RFC Editor changed the Type to Technical.\r\n\r\n2016-07-04 Spencer chatted about this with Al Morton.\r\n\r\nAl said - \r\n\r\n> As I'm likely the last reachable author of TWAMP:\r\n>\r\n> In http://tools.ietf.org/html/rfc5357#section-1.2\r\n> the Logical Model of TWAMP, the communications link\r\n> between the Server and the Session-Reflector is indicated,\r\n> but also undescribed. This communication is necessary for\r\n> controlling state in the Session-Reflector, to start and\r\n> stop sessions (which resets sequence renumbering in the\r\n> Session-Reflector), for example.\r\n>\r\n> Also, section 1.2 says:\r\n>  \"Unlabeled links in the figure are unspecified by\r\n>   this document and may be proprietary protocols.\"\r\n>\r\n> Like the Figure at the bottom of Page 4 in sec 1.2,\r\n> the TWAMP-Light Figure is a re-formulation of the roles\r\n> in the Logical Model, moving the Server alongside the\r\n> Control-Client. The need for Server <-> Session-Reflector\r\n> communications still exists for the case of TWAMP-Light\r\n> operating *with* session state.\r\n\r\nIn previous discussions, Brian Trammell had suggested that unlabeled arrows should be marked  \"protocol unspecified\" or \"see section 1.2\" here to clear up the confusion.\r\n\r\nSpencer will leave this for the working group to consider if the document is updated.", "submit_date": "2015-07-27", "submitter_name": "Steve Baillargeon", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4430", "doc-id": "RFC7600", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "(need to add the below text)", "correct_text": "This address is to be used only as IPv4 source of an ICMP error \r\npacket whose cause originated within a tunnel across an IPv6-only \r\ndomain. As such, it should never be used as a destination \r\n(and consequently never forwarded). When receiving an IPv4 \r\npacket with this address as source, no specific action that would \r\nreserve this address for this protocol is required (dealing as usual \r\nwith the error cause specified in the ICMP packet is sufficient).\r\n\r\n", "notes": "While processing the IANA Actions for this document, the authors requested that the above text be added to the IANA Considerations section.  The published version does not include this text.\r\n\r\nVerifier Notes:  The RFC Editor missed adding this text per the message from the IANA. ", "submit_date": "2015-07-28", "submitter_name": "Michelle Cotton", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4431", "doc-id": "RFC4918", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "The phrase: \"live properties defined in this specification.\" is used throughout RFC4918 but there is no place they are defined.\r\n\r\nCareful reading can deduce what they may be, but that is not satisfactory.  It would be better to actually define them.", "submit_date": "2015-08-02", "submitter_name": "Worik Stanton", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7045", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.2", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 6c c0 40 00 ff 06 2f bb ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 da 1c d3 84 4a 6f 38 9b ed 72\r\n     e0 12 ff ff e4 45 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a ce 45 98 38 00 01 85 e1 1d 10 54 3d\r\n     3a 6a bb 20 7e 49 b1 be 71 36 db 90\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 4c 6c c0 40 00 ff 06 2f bb ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 da 1c d3 84 4a 6f 38 9b ed 72\r\n     e0 12 ff ff 3a b4 00 00 02 04 05 b4 01 03 03 08\r\n     04 02 08 0a ce 45 98 38 00 01 85 e1 1d 10 54 3d\r\n     3a 6a bb 20 7e 49 b1 be 71 36 db 90\r\n", "notes": "The TCP checksum shown (0xe445) is wrong, it should be 0x3ab4.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:49:49"}, {"errata_id": "2985", "doc-id": "RFC5981", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |1|0|0|0| Type = SESSION_AUTH   |0|0|0|0|    Object   Length    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             |   AUTH_ENT_ID | HMAC_SIGNED   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                   reserved                    | Transform ID  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             | SOURCE_ADDR   |  IPV4_ADDRESS |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                IPv4 Source Address of NSLP sender             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             |  START_TIME   | NTP_TIME_STAMP|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        NTP Time Stamp (1)                     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        NTP Time Stamp (2)                     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             | NSLP_OBJ_LIST |     zero      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |No. of signed NSLP objects = n |  rsv  |  NSLP object type (1) |\r\n   +-------+-------+---------------+-------+-------+---------------+\r\n   |  rsv  | NSLP object type (2)  |             .....            //\r\n   +-------+-------+---------------+---------------+---------------+\r\n   |  rsv  | NSLP object type (n)  |     (padding if required)     |\r\n   +--------------+----------------+---------------+---------------+\r\n   |            Length             |   AUTH_DATA   |     zero      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                            Key-ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Message Authentication Code HMAC Data                |\r\n   +---------------------------------------------------------------+\r\n\r\n    Figure 5: Example of a SESSION_AUTH_OBJECT That Provides Integrity\r\n                       Protection for NSLP Messages", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |1|0|0|0| Type = SESSION_AUTH   |0|0|0|0|    Object   Length    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             |   AUTH_ENT_ID | HMAC_SIGNED   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                   reserved    |          Transform ID         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             | SOURCE_ADDR   |  IPV4_ADDRESS |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                IPv4 Source Address of NSLP sender             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             |  START_TIME   | NTP_TIME_STAMP|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        NTP Time Stamp (1)                     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                        NTP Time Stamp (2)                     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            Length             | NSLP_OBJ_LIST |     zero      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |No. of signed NSLP objects = n |  rsv  |  NSLP object type (1) |\r\n   +-------+-------+---------------+-------+-------+---------------+\r\n   |  rsv  | NSLP object type (2)  |             .....            //\r\n   +-------+-------+---------------+---------------+---------------+\r\n   |  rsv  | NSLP object type (n)  |     (padding if required)     |\r\n   +--------------+----------------+---------------+---------------+\r\n   |            Length             |   AUTH_DATA   |     zero      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                            Key-ID                             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Message Authentication Code HMAC Data                |\r\n   +---------------------------------------------------------------+\r\n\r\n    Figure 5: Example of a SESSION_AUTH_OBJECT That Provides Integrity\r\n                       Protection for NSLP Messages", "notes": "The Transform ID was specified in RFC 5996 as a two-octect value. \r\nFigure 5 showed incorrectly only an octect wide field. The text, \r\nhowever, refers to the specification in RFC 5996 and the corresponding\r\nIANA registry. Thus I don't consider it as technical error since\r\nonly the figure showing an example is wrong.", "submit_date": "2011-10-05", "submitter_name": "Roland Bless", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2986", "doc-id": "RFC5981", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "      6.  END_TIME: The end time for the session.\r\n\r\n      7.  AUTHENTICATION_DATA: The authentication data of the Session\r\n          Authorization Object.", "correct_text": "      6.  END_TIME: The end time for the session.\r\n\r\n      7.  NSLP_OBJECT_LIST: A list of all NSLP objects that\r\n          are included in an HMAC calculation.\r\n\r\n      8.  AUTHENTICATION_DATA: The authentication data of the Session\r\n          Authorization Object.", "notes": "Since the NSLP_OBJECT_TYPE attribute was introduced in Section 3.2.7 it should also appear in the comprehensive list of currently available X-Types at the beginning of Section 3.2.", "submit_date": "2011-10-05", "submitter_name": "Martin R\u00f6hricht", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2987", "doc-id": "RFC6157", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Furthermore, there SHOULD\r\n   exist both IPv6 and IPv4 DNS entries for outbound proxy servers.\r\n   This allows the user agent to query DNS and obtain an IP address most\r\n   appropriate for its use (i.e., an IPv4-only user agent will query DNS\r\n   for A resource records (RRs), an IPv6-only user agent will query DNS\r\n   for AAAA RRs, and a dual-stack user agent will query DNS for all RRs\r\n   and choose a specific network.)", "correct_text": "Furthermore, there SHOULD\r\n   exist both IPv6 and IPv4 DNS entries for outbound proxy servers.\r\n   This allows the user agent to query DNS and obtain an IP address most\r\n   appropriate for its use (i.e., an IPv4-only user agent will query DNS\r\n   for A resource records (RRs), an IPv6-only user agent will query DNS\r\n   for AAAA RRs, and a dual-stack user agent will query DNS for all RRs\r\n   and choose a specific network.) This is an update to RFC 3263, in which\r\nthe client on a dual stack network queries for either A or AAAA.", "notes": "The RFC actually updates RFC 3263 - locating SIP servers - but doesn't make a clear note about it.\n --VERIFIER NOTES-- \nIt's not clear that this RFC intended to update 3263, but it does point to an issue in 3261 that should be clarified through a consensus process.", "submit_date": "2011-10-10", "submitter_name": "Olle E. Johansson", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2988", "doc-id": "RFC6072", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8", "orig_text": "   The [RFC4474] authentication service defined a signature algorithm\r\n   based on SHA-1 called rsa-sha1.  This specification adds a signature\r\n   algorithm that is roughly the same but based on SHA-256 and called\r\n   rsa-sha256.", "correct_text": "   The [RFC4474] authentication service defined a signature algorithm\r\n   based on SHA-1 called rsa-sha1.  This specification adds a signature\r\n   algorithm that is roughly the same but based on SHA-256 and called\r\n   rsa-sha256. This is an update of RFC 4474.", "notes": "The Masthead doesn't indicate clearly that this RFC updates 4474 and thus the IETF tools web site doesn't indicate that 4474 is updated.\n --VERIFIER NOTES-- \nErrata should not be used for changing draft metadata (it would not change the links you are looking at on the IETF tools website for example).", "submit_date": "2011-10-10", "submitter_name": "Olle E. Johansson", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2989", "doc-id": "RFC5709", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.", "orig_text": "   With the additions in this document, the currently valid algorithms\r\n   (including mode) for OSPFv2 Cryptographic Authentication include:\r\n\r\n           Keyed-MD5               (defined in RFC 2328, Appendix D)", "correct_text": "   With the additions in this document, the currently valid algorithms\r\n   (including mode) for OSPFv2 Cryptographic Authentication include:\r\n\r\n           Keyed-MD5               (defined in RFC 2328, Appendix D)", "notes": "The link 'Appendix D' referenced is incorrect. It is now 'http://tools.ietf.org/html/rfc5709#appendix-D', and it should be 'http://tools.ietf.org/html/rfc2328#appendix-D'.\r\nPay attention to the difference of the numbers in links,please.\r\n\r\n-- VERIFIER NOTES --\r\nErrata are for the RFCs as available from rfc-editor.org.", "submit_date": "2011-10-10", "submitter_name": "Dai Wenjie (David Jet)", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2990", "doc-id": "RFC6286", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "In the AGGREAGTOR attribute of a route", "correct_text": "In the AGGREGATOR attribute of a route\r\n", "notes": "", "submit_date": "2011-10-11", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2991", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.3", "orig_text": "The original text is missing.", "correct_text": "ERR_NOSUCHCHANNEL", "notes": "Numeric reply list for Channel Modes should include ERR_NOSUCHCHANNEL.", "submit_date": "2011-10-11", "submitter_name": "Matthew Campbell", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4432", "doc-id": "RFC2385", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   The total header size is also an issue.  The TCP header specifies\r\n   where segment data starts with a 4-bit field which gives the total\r\n   size of the header (including options) in 32-byte words.  This means\r\n   that the total size of the header plus option must be less than or\r\n   equal to 60 bytes -- this leaves 40 bytes for options.\r\n", "correct_text": "   The total header size is also an issue.  The TCP header specifies\r\n   where segment data starts with a 4-bit field which gives the total\r\n   size of the header (including options) in 32-bit words.  This means\r\n   that the total size of the header plus option must be less than or\r\n   equal to 60 bytes -- this leaves 40 bytes for options.\r\n", "notes": "Correction for '32-byte words' to '32-bit words'.", "submit_date": "2015-08-04", "submitter_name": "Florin Frigioiu", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2992", "doc-id": "RFC3031", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.12", "orig_text": "If the FTN maps a particular label to a set of NHLFEs that contains\r\nmore than one element, exactly one element of the set must be chosen\r\nbefore the packet is forwarded. The procedures for choosing an\r\nelement from the set are beyond the scope of this document. Having\r\nthe FTN map a label to a set containing more than one NHLFE may be\r\nuseful if, e.g., it is desired to do load balancing over multiple\r\nequal-cost paths.", "correct_text": "If the FTN maps a particular FEC to a set of NHLFEs that contains\r\nmore than one element, exactly one element of the set must be chosen\r\nbefore the packet is forwarded. The procedures for choosing an\r\nelement from the set are beyond the scope of this document. Having\r\nthe FTN map a FEC to a set containing more than one NHLFE may be\r\nuseful if, e.g., it is desired to do load balancing over multiple\r\nequal-cost paths.", "notes": "Since FTN is used for packets that arrive unlabeled (as ILM is used for label-NHLFEs), this section should be corrected. It says that \"FTN maps a particular label to a set of NHLFEs\"", "submit_date": "2011-10-12", "submitter_name": "Bala Venkata", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2993", "doc-id": "RFC4976", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   Alice              a.example.org       b.example.net             Bob\r\n     |                     |                    |                     |\r\n     |--- SEND 1-3 ------->|                    |                     |\r\n     |<-- 200 OK ----------|                    |  (slow link)        |\r\n     |--- SEND 4-7 ------->|--- SEND 1-5 ------>|                     |\r\n     |<-- 200 OK ----------|<-- 200 OK ---------|--- SEND 1-3 ------->|\r\n     |--- SEND 8-10 ------>|--- SEND 6-10 ----->|                ....>|\r\n     |<-- 200 OK ----------|<-- 200 OK ---------|                  ..>|\r\n     |                     |                    |<-- 200 OK ----------|\r\n     |                     |                    |<-- REPORT 1-3 ------|\r\n     |                     |<-- REPORT 1-3 -----|--- SEND 4-7 ------->|\r\n     |<-- REPORT 1-3 ------|                    |                 ...>|\r\n     |                     |                    |<-- REPORT 4-7 ----->|\r\n     |                     |<-- REPORT 4-7 -----|--- SEND 8-10 ------>|\r\n     |<-- REPORT 4-7 ------|                    |                  ..>|\r\n     |                     |                    |<-- 200 OK ----------|\r\n     |                     |<-- REPORT done-----|<-- REPORT done -----|\r\n     |<-- REPORT done -----|                    |                     |\r\n     |                     |                    |                     |", "correct_text": "   Alice              a.example.org       b.example.net             Bob\r\n     |                     |                    |                     |\r\n     |--- SEND 1-3 ------->|                    |                     |\r\n     |<-- 200 OK ----------|                    |  (slow link)        |\r\n     |--- SEND 4-7 ------->|--- SEND 1-5 ------>|                     |\r\n     |<-- 200 OK ----------|<-- 200 OK ---------|--- SEND 1-3 ------->|\r\n     |--- SEND 8-10 ------>|--- SEND 6-10 ----->|                ....>|\r\n     |<-- 200 OK ----------|<-- 200 OK ---------|                  ..>|\r\n     |                     |                    |<-- 200 OK ----------|\r\n     |                     |                    |<-- REPORT 1-3 ------|\r\n     |                     |<-- REPORT 1-3 -----|--- SEND 4-7 ------->|\r\n     |<-- REPORT 1-3 ------|                    |                 ...>|\r\n     |                     |                    |<-- 200 OK ----------|\r\n     |                     |                    |<-- REPORT 4-7 ----->|\r\n     |                     |<-- REPORT 4-7 -----|--- SEND 8-10 ------>|\r\n     |<-- REPORT 4-7 ------|                    |                  ..>|\r\n     |                     |                    |<-- 200 OK ----------|\r\n     |                     |<-- REPORT done-----|<-- REPORT done -----|\r\n     |<-- REPORT done -----|                    |                     |\r\n     |                     |                    |                     |", "notes": "The flow in page 10 lacks the mandatory 200 OK for the SEND 4-7 received by Bob.", "submit_date": "2011-10-12", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2994", "doc-id": "RFC6351", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "# 6.1.3\r\nproperty-source = element source {\r\n    element parameters { param-altid, param-pid, param-pref,\r\n                         param-mediatype },\r\n    value-uri\r\n  }", "correct_text": "# 6.1.3\r\nproperty-source = element source {\r\n    element parameters { param-altid, param-pid, param-pref,\r\n                         param-mediatype }?,\r\n    value-uri\r\n  }", "notes": "Parameters are optional, so there needs to be a ? at the end.", "submit_date": "2011-10-12", "submitter_name": "Simon Perreault", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3024", "doc-id": "RFC3382", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "Appendix A: Encoding Example of a Simple Collection (Informative)\r\n\r\n   The overall structure of the collection value can be pictorially\r\n   represented as:\r\n\r\n      \"media-size\" =\r\n        {  \"x-dimension\" = 6;\r\n           \"y-dimension\" = 4\r\n        }\r\n\r\n   A simplified view of the encoding would look like this:\r\n\r\n             Table 6 - Overview Encoding of simple collection\r\n\r\n      Tag Value             Name                  Value\r\n\r\n      begCollection         media-size            \"\"\r\n\r\n      memberAttrName        \"\"                    x-dimension\r\n\r\n      integer               \"\"                    6\r\n\r\n      memberAttrName        \"\"                    y-dimension\r\n\r\n      integer               \"\"                    4\r\n\r\n      endCollection         \"\"                    \"\"\r\n\r\n      Note: \"\" represents a name or value whose length is 0.\r\n\r\n              Table 7 - Example Encoding of simple collection\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x34         begCollection   value-tag  beginning of the \"media-\r\n                                              size\" collection attribute\r\n\r\n      0x000A                       name-      length of (collection)\r\n                                   length     attribute name\r\n\r\n      media-size   media-size      name       name of (collection)\r\n                                              attribute\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 22]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"x-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"x-dimension\"\r\n                                   length     keyword\r\n\r\n      x-dimension  x-dimension     value      name of  1st collection\r\n                                              member attribute\r\n\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x0006                       value      value of  1st collection\r\n                                              member attribute\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"y-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 23]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x000B                       value-     length of the \"y-\r\n                                   length     dimension\" keyword\r\n\r\n      y-dimension  y-dimension     value      name of  2nd collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf for\r\n                                   length     media-size\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x0004                       value      value of  2nd collection\r\n                                              member attribute\r\n\r\n      0x37         endCollection   value-tag  end of the collection\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n", "correct_text": "Appendix A: Encoding Example of a Simple Collection (Informative)\r\n\r\n   The overall structure of the collection value can be pictorially\r\n   represented as:\r\n\r\n      \"media-size\" =\r\n        {  \"x-dimension\" = 15240;\r\n           \"y-dimension\" = 10160\r\n        }\r\n\r\n   A simplified view of the encoding would look like this:\r\n\r\n             Table 6 - Overview Encoding of simple collection\r\n\r\n      Tag Value             Name                  Value\r\n\r\n      begCollection         media-size            \"\"\r\n\r\n      memberAttrName        \"\"                    x-dimension\r\n\r\n      integer               \"\"                    15240\r\n\r\n      memberAttrName        \"\"                    y-dimension\r\n\r\n      integer               \"\"                    10160\r\n\r\n      endCollection         \"\"                    \"\"\r\n\r\n      Note: \"\" represents a name or value whose length is 0.\r\n\r\n              Table 7 - Example Encoding of simple collection\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x34         begCollection   value-tag  beginning of the \"media-\r\n                                              size\" collection attribute\r\n\r\n      0x000A                       name-      length of (collection)\r\n                                   length     attribute name\r\n\r\n      media-size   media-size      name       name of (collection)\r\n                                              attribute\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 22]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"x-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"x-dimension\"\r\n                                   length     keyword\r\n\r\n      x-dimension  x-dimension     value      name of  1st collection\r\n                                              member attribute\r\n\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x3b88                       value      value of  1st collection\r\n                                              member attribute\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"y-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 23]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x000B                       value-     length of the \"y-\r\n                                   length     dimension\" keyword\r\n\r\n      y-dimension  y-dimension     value      name of  2nd collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf for\r\n                                   length     media-size\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x27b0                       value      value of  2nd collection\r\n                                              member attribute\r\n\r\n      0x37         endCollection   value-tag  end of the collection\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n", "notes": "Fix examples to use correct units, per PWG 5100.3 definition.", "submit_date": "2011-11-10", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3098", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12.2.1.1", "orig_text": "A client could, for example, choose the 31 most significant bits of a 32-bit\r\n second clock as an initial sequence number.\r\n\r\n", "correct_text": "A client could, for example, choose the 31 least significant bits of a 32-bit\r\n second clock as an initial sequence number.\r\n\r\n", "notes": "Choosing the most sig 31 bits would violate 8.1.1.5, where initial CSeq number must be less than 2**31\r\n\r\n8.1.1.5: The sequence number value MUST be expressible as a 32-bit unsigned integer and MUST be less than 2**31.\r\n\r\n\r\nREVIEWER NOTE (rjsparks@nostrum.com) : It was explicitly the intent to point to the most significant bits. The confusion in this report is not recognizing that the intent is to treat those as a 31-bit integer (which by definition will be less than 2**31). Rather than reject the errata, I'm putting this in hold for document update so future revisions can clarify the point.", "submit_date": "2012-01-27", "submitter_name": "Alec Davis", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3099", "doc-id": "RFC6029", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "In such a technique, given a cost function C, a set \r\nof vertexes V and their corresponding edges, the triangle inequality \r\nholds if for any triple {a, b, c} in V, C(a, c) is always less than \r\nor equal to C(a, g) + C(b, c).", "correct_text": "In such a technique, given a cost function C, a set \r\nof vertices V and their corresponding edges, the triangle inequality \r\nholds if for any triple {a, b, c} in V, C(a, c) is always less than \r\nor equal to C(a, b) + C(b, c).", "notes": "\"vertexes\" or \"vertices\" is an acceptable plural form of \"vertex\".", "submit_date": "2012-01-30", "submitter_name": "Ivica Rimac", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2995", "doc-id": "RFC5628", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   If the notifier includes the <temp-gruu> element, it MUST populate\r\n   the element with the most recently assigned temporary GRUU that is\r\n   associated with the instance ID and AOR of the registered contact.\r\n   It MUST also populate the element with a \"cseq\" attribute\r\n   corresponding to the first (oldest) currently active temporary GRUU\r\n   that is associated with the instance ID and AOR of the registered\r\n   contact.  The value of the \"cseq\" attribute is set to the value of\r\n   the CSeq header field of the REGISTER request that caused that first\r\n   temporary GRUU to be assigned.\r\n", "correct_text": "   If the notifier includes the <temp-gruu> element, it MUST populate\r\n   the element with the most recently assigned temporary GRUU that is\r\n   associated with the instance ID and AOR of the registered contact.\r\n   It MUST also populate the element with a \"first-cseq\" attribute\r\n   corresponding to the first (oldest) currently active temporary GRUU\r\n   that is associated with the instance ID and AOR of the registered\r\n   contact.  The value of the \"first-cseq\" attribute is set to the value of\r\n   the CSeq header field of the REGISTER request that caused that first\r\n   temporary GRUU to be assigned.\r\n", "notes": "This replaces '\"cseq\" attribute' with '\"first-cseq\" attribute.\r\nThis is almost a typo, since there is no \"cseq\" attribute of <temp-gruu>.\r\nFollowing the text as written would yield an invalid xml document.\r\n\r\nThis was reported to me by Ivo Sedlacek:\r\nhttp://www.ietf.org/mail-archive/web/sipcore/current/msg04282.html", "submit_date": "2011-10-13", "submitter_name": "Paul Kyzivat", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2996", "doc-id": "RFC6345", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "When the PRE receives the PRY message, it retrieves the PAA-\r\noriginated PANA message from the Relayed-Message AVP and the PaC's\r\nIP address and UDP port number from and PaC-Information AVPs.  The\r\nPAA-originated PANA message is sent to the PaC's IP address with\r\nthe source UDP port number set to the PANA port number (716) and\r\nthe destination UDP port number set to the UDP port number contained\r\nin the Relayed-Message AVP.", "correct_text": "When the PRE receives the PRY message, it retrieves the PAA-\r\noriginated PANA message from the Relayed-Message AVP and the PaC's\r\nIP address and UDP port number from and PaC-Information AVPs.  The\r\nPAA-originated PANA message is sent to the PaC's IP address with\r\nthe source UDP port number set to the PANA port number (716) and\r\nthe destination UDP port number set to the UDP port number contained\r\nin the PaC-Information AVP.", "notes": "(s/Relayed-Message/PaC-Information/ in the last sentence.)  The reason for the change is that the UDP port number is contained in the PaC-Information AVP instead of the Relayed Message AVP.", "submit_date": "2011-10-13", "submitter_name": "Yoshihiro Ohba", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2997", "doc-id": "RFC5191", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.4", "orig_text": "The Key-Id AVP (AVP Code 4) is of type Integer32 and contains an MSK\r\nidentifier.  ", "correct_text": "The Key-Id AVP (AVP Code 4) is of type Unsigned32 and contains an MSK\r\nidentifier.", "notes": "The Correct Text will be consistent with the following text in Section 5.3, \"The Key-Id AVP is of type Unsigned32...\"", "submit_date": "2011-10-13", "submitter_name": "Yoshihiro Ohba", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2998", "doc-id": "RFC2616", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "   For definitive information on\r\n   URL syntax and semantics, see \"Uniform Resource Identifiers (URI):\r\n   Generic Syntax and Semantics,\" RFC 2396 [42] (which replaces RFCs\r\n   1738 [4] and RFC 1808 [11]).", "correct_text": "   For definitive information on\r\n   URL syntax and semantics, see \"Uniform Resource Identifiers (URI):\r\n   Generic Syntax and Semantics,\" RFC 3986 [<ref>] (which updates RFCs\r\n   1738 [4] and replaces RFC 1808 [11] and RFC 2396 [42]).\r\n", "notes": "<ref> should be added\n --VERIFIER NOTES-- \nThe reader can follow the chain of document updates from RFC 2396 to RFC 3986, which is why we do not modify published RFCs to track document updates for referenced specifications. In any case, the updated HTTP RFCs (being produced by the HTTPBIS WG) will contain the appropriate references. ", "submit_date": "2011-10-15", "submitter_name": "Julien Moutinho", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "2999", "doc-id": "RFC6063", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.4", "orig_text": "           DSKPP Client                         DSKPP Server\r\n           ------------                         ------------\r\n           E(K,R_C), AD          --->\r\n\r\n\r\n   When this message is sent:\r\n      The DSKPP Client will send this message immediately following a\r\n      <KeyProvServerHello> message whose status was set to \"Continue\".", "correct_text": "           DSKPP Client                         DSKPP Server\r\n           ------------                         ------------\r\n           E(K,R_C), [AD]          --->\r\n\r\n   When this message is sent:\r\n      The DSKPP Client will send this message immediately following a\r\n      <KeyProvServerHello> message whose status was set to \"Continue\".\r\n      The AD element MUST be sent unless it was already sent in the\r\n      KeyProvClientHello message.", "notes": "The AD is carried in the <KeyProvClientHello> if sent as a result of a trigger and so is optional in the <ekyProvClientNonce>.", "submit_date": "2011-10-17", "submitter_name": "Gareth Richards", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4497", "doc-id": "RFC3107", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "Label distribution can be piggybacked in the BGP Update message by\r\n   using the BGP-4 Multiprotocol Extensions attribute [RFC 2283].", "correct_text": "Label distribution can be piggybacked in the BGP Update message by\r\n   using the BGP-4 Multiprotocol Extensions attribute\r\ndefined in RFC 2858 [BGP-MP].", "notes": "No reference [RFC 2283] in Reference section of RFC 3107. The reference is called [BGP-MP].", "submit_date": "2015-10-13", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4557", "doc-id": "RFC6474", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "BIRTHPLACE;VALUE=uri:geo:46.769307,-71.283079", "correct_text": "BIRTHPLACE;VALUE=uri:geo:46.769307\\,-71.283079", "notes": "Section 3.4 in RFC 6350 states that all property values must have COMMA characters escaped with a BACKSLASH character. The BIRTHPLACE property value in the example contains a comma. Therefore it must be escaped with a backslash.", "submit_date": "2015-12-07", "submitter_name": "Sylvain Berfini", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8402", "doc-id": "RFC9260", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.6", "orig_text": "If the T1-init timer expires at \"A\" after the INIT or COOKIE ECHO\r\nchunks are sent, the same INIT or COOKIE ECHO chunk with the same\r\nInitiate Tag (i.e., Tag_A) or State Cookie is retransmitted and the\r\ntimer is restarted.", "correct_text": "If the T1-init timer expires at \"A\" after the INIT chunk is sent, the\r\nsame INIT chunk with the same Initiate Tag (i.e., Tag_A) is retransmitted\r\nand the T1-init timer is restarted.\r\n\r\nIf the T1-cookie timer expires at \"A\" after the the COOKIE ECHO chunk\r\nis sent, the same COOKIE ECHO chunk with the same State Cookie is\r\nretransmitted and the T1-cookie timer is restarted.", "notes": "The original text said the T1-init timer is cancelled at \"A\" upon receipt of INIT ACK chunk from \"Z\", so it is impossible that the T1-init timer expires at \"A\" after the COOKIE ECHO chunk is sent (since COOKIE ECHO chunk is immediately sent after INIT ACK chunk is received). The text is updated to clarify two cases. Text suggestion expanded by M. Tuexen.", "submit_date": "2025-05-02", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-05-26 13:43:43"}, {"errata_id": "3000", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.3.4", "orig_text": "   The following table is to be used to initialize the property values\r\n   registry.\r\n\r\n            +----------+------------+-------------------------+\r\n            | Property | Value      | Reference               |\r\n            +----------+------------+-------------------------+\r\n            | BEGIN    | VCARD      | RFC 6350, Section 6.1.1 |\r\n            | END      | VCARD      | RFC 6350, Section 6.1.2 |\r\n            | KIND     | individual | RFC 6350, Section 6.1.4 |\r\n            | KIND     | group      | RFC 6350, Section 6.1.4 |\r\n            | KIND     | org        | RFC 6350, Section 6.1.4 |\r\n            | KIND     | location   | RFC 6350, Section 6.1.4 |\r\n            +----------+------------+-------------------------+", "correct_text": "   The following table is to be used to initialize the property values\r\n   registry.\r\n\r\n            +----------+------------+-------------------------+\r\n            | Property | Value      | Reference               |\r\n            +----------+------------+-------------------------+\r\n            | BEGIN    | VCARD      | RFC 6350, Section 6.1.1 |\r\n            | END      | VCARD      | RFC 6350, Section 6.1.2 |\r\n            | KIND     | individual | RFC 6350, Section 6.1.4 |\r\n            | KIND     | group      | RFC 6350, Section 6.1.4 |\r\n            | KIND     | org        | RFC 6350, Section 6.1.4 |\r\n            | KIND     | location   | RFC 6350, Section 6.1.4 |\r\n            | VERSION  | 4.0        | RFC 6350, Section 6.7.9 |\r\n            +----------+------------+-------------------------+", "notes": "Here the registration of \"4.0\" value for VERSION is added, as it was discussed on WG mailing list.  When the erratum is approved, I'll ask IANA to add an entry on the registry, correspondingly.", "submit_date": "2011-10-21", "submitter_name": "Mykyta Yevstifeyev", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3001", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.4", "orig_text": "The original text is missing.", "correct_text": "ERR_NOSUCHCHANNEL", "notes": "Numeric reply list for Topic should include ERR_NOSUCHCHANNEL.", "submit_date": "2011-10-21", "submitter_name": "Matthew Campbell", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3002", "doc-id": "RFC6325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.7.3", "orig_text": "                                   If RB1 chooses nickname x, and RB1\r\n      discovers, through receipt of an LSP for RB2 at any later time,\r\n      that RB2 has also chosen x, then the RBridge or pseudonode with\r\n      the numerically higher IS-IS ID (LAN ID) keeps the nickname, or if\r\n      there is a tie in priority, the RBridge with the numerically\r\n      higher IS-IS System ID keeps the nickname, and the other RBridge\r\n      MUST select a new nickname.", "correct_text": "If RB1\r\nchooses nickname x, and RB1 discovers, through receipt of an LSP for\r\nRB2 at any later time, that RB2 has also chosen x, then the RBridge or\r\npseudonode with the numerically higher priority keeps the nickname, or\r\nif there is a tie in priority, the RBridge with the numerically higher\r\nseven-byte IS-IS ID (LAN ID) keeps the nickname, and the other RBridge\r\nMUST select a new nickname.", "notes": "Comparison is primarily by priority and then by IS-IS ID. Since pseudonodes can hold nicknames, the comparison must be by seven-byte IS-IS ID, not six-byte System ID.", "submit_date": "2011-10-25", "submitter_name": "Donald E. Eastlake, 3rd", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3003", "doc-id": "RFC6325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.2", "orig_text": "   1. If the Outer.MacDA is All-IS-IS-RBridges and the Ethertype is\r\n      L2-IS-IS, the frame is handled as described in Section 4.6.2.1.\r\n", "correct_text": "   1. If the Ethertype is L2-IS-IS and the Outer.MacDA is either\r\n      All-IS-IS-RBridges or the unicast MAC address of the receiving \r\n      RBridge port, the frame is handled as described in Section 4.6.2.1", "notes": "TRILL IS-IS MTU PDUs may be unicast as described in Section 4.3.2 of RFC 6325 and Section 5 of RFC 6327. This was not allowed for in the wording of Section 4.6.2 of RFC 6325 but is corrected above.", "submit_date": "2011-10-25", "submitter_name": "Donald E. Eastlake, 3rd", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3004", "doc-id": "RFC6325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "                                    The MTU-probe MAY be multicast to\r\n   All-RBridges, or unicast to a specific RBridge.  The MTU-ack is\r\n   normally unicast to the source of the MTU-probe to which it responds\r\n   but MAY be multicast to All-RBridges.", "correct_text": "                                     The MTU-probe MUST be multicast to\r\n   All-IS-IS-RBridges or unicast to a specific RBridge.  The MTU-ack is\r\n   normally unicast to the source of the MTU-probe to which it responds\r\n   but MAY be multicast to All-IS-IS-RBridges.", "notes": "TRILL IS-IS MTU PDUs are IS-IS PDUs and, when multicast, must be sent to the All-IS-IS-RBridges multicast address.", "submit_date": "2011-10-25", "submitter_name": "Donald E. Eastlake, 3rd", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3005", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.5.1", "orig_text": "          Examples:\r\n\r\n            TZ:Raleigh/North America\r\n", "correct_text": "          Examples:\r\n\r\n            TZ:America/New_York\r\n", "notes": "The example given is not valid for the Olson/TZ database; it includes a space, it has the specific location (city) before the continent, neither city nor continent names are present for the current TZ database, and there isnt a separate time zone for Raleigh, NC (since Raleigh's clocks have always matched New York's since 1970, Raleigh uses America/New_York as its time zone name in the Olson database).", "submit_date": "2011-10-25", "submitter_name": "David Keegel", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3006", "doc-id": "RFC6392", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.2", "orig_text": "Not provided.", "correct_text": "Basic deletion of resources is provided with the DELETE method.", "notes": "The typical \"data management operation\" mentioned for other protocols is the deletion of data. HTTP has it from the beginning (Section 9.7 of RFC 2616).\r\n\r\nApache does not support it directly, you apparently have to provide a module which does it (mod_dav does it, even if DELETE is not a WebDAV method). Anyway, this section is about the abilities of the protocol, not of implementations.", "submit_date": "2011-10-26", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4498", "doc-id": "RFC3107", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   The label(s) specified for a particular route (and associated with\r\n   its address prefix) must be assigned by the LSR which is identified\r\n   by the value of the Next Hop attribute of the route.\r\n\r\n   When a BGP speaker redistributes a route, the label(s) assigned to\r\n   that route must not be changed (except by omission), unless the\r\n   speaker changes the value of the Next Hop attribute of the route.", "correct_text": "   The label(s) specified for a particular route (and associated with\r\n   its address prefix) must be assigned by the LSR which is identified\r\n   by the value of the Network Address of Next Hop field of\r\n   MP_REACH_NLRI attribute of the route.\r\n\r\n   When a BGP speaker redistributes a route, the label(s) assigned to\r\n   that route must not be changed (except by omission), unless the\r\n   speaker changes the value of the Network Address of Next Hop field of\r\n   MP_REACH_NLRI attribute of the route.", "notes": "Next Hop address for labeled routes is conveyed within MP_REACH_NLRI attribute.", "submit_date": "2015-10-13", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3009", "doc-id": "RFC3196", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   Connection  must-   must    must-  must    \"close\" only.  Both\r\n                 if              if             client and server\r\n                                                SHOULD keep a\r\n                                                connection for the\r\n                                                duration of a sequence\r\n                                                of operations.  The\r\n                                                client and server MUST\r\n                                                include this header\r\n                                                for the last operation\r\n                                                in such a sequence.\r\n", "correct_text": "   Connection  must-   must    must-  must    \"close\" or \"upgrade\" only.  Both\r\n                 if              if             client and server\r\n                                                SHOULD keep a\r\n                                                connection for the\r\n                                                duration of a sequence\r\n                                                of operations.  The\r\n                                                client and server MUST\r\n                                                include this header\r\n                                                with the value \"close\"\r\n                                                for the last operation\r\n                                                in such a sequence,\r\n                                                if known. The value\r\n                                                \"Upgrade\" is used for\r\n                                                TLS upgrade [RFC2817].\r\n", "notes": "Implementers guide does not include support for HTTP Upgrade [RFC2817].", "submit_date": "2011-11-02", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3010", "doc-id": "RFC3196", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "User-Agent     not      not", "correct_text": "User-Agent     may      not", "notes": "User-Agent identifies the client software to the Printer, which may in fact be useful for implementing workarounds, etc.", "submit_date": "2011-11-02", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3011", "doc-id": "RFC3862", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "An Example Esing MIME multipart/signed", "correct_text": "An Example Using MIME multipart/signed", "notes": "", "submit_date": "2011-11-03", "submitter_name": "Kaushik N V S", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3012", "doc-id": "RFC6244", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.1", "orig_text": "   | reference    | Value must appear elsewhere in the data            |\r\n", "correct_text": "   | type leafref | Value must appear elsewhere in the data            |\r\n", "notes": "The \"reference\" statement is used as a reference to some other specification.\r\n\r\nThe column heading is \"Statement\".  It is not obvious that \"type leafref\" is a Statement, so I am not sure if the proposed corrected text is enough.", "submit_date": "2011-11-04", "submitter_name": "Martin Bjorklund", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3013", "doc-id": "RFC5438", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2.1.1", "orig_text": "   From: Bob <im:bob@example.com>\r\n   To: Alice <im:alice@example.com>\r\n   NS: imdn <urn:ietf:params:imdn>\r\n   imdn.Message-ID: d834jied93rf\r\n   Content-type: message/imdn+xml\r\n   Content-Disposition: notification\r\n   Content-length: ...\r\n", "correct_text": "   From: Bob <im:bob@example.com>\r\n   To: Alice <im:alice@example.com>\r\n   NS: imdn <urn:ietf:params:imdn>\r\n   imdn.Message-ID: d834jied93rf\r\n\r\n   Content-type: message/imdn+xml\r\n   Content-Disposition: notification\r\n   Content-length: ...\r\n", "notes": "None of the examples in this RFC comply with the format of CPIM defined in RFC 3862, in which the message metadata headers are separated from the headers of the encapsulated MIME object by a blank line.", "submit_date": "2011-11-04", "submitter_name": "Dan Price", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3014", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.4", "orig_text": "   [NOTE:  These procedures intentionally and explicitly do not\r\n   establish a fixed maximum time period that shall be considered\r\n   \"reasonable\" in all cases.  The Internet Standards Process places a\r\n   premium on consensus and efforts to achieve it, and deliberately\r\n   foregoes deterministically swift execution of procedures in favor of\r\n   a latitude within which more genuine technical agreements may be\r\n   reached.]\r\n", "correct_text": "   [NOTE:  These procedures intentionally and explicitly do not\r\n   establish a fixed maximum time period that shall be considered\r\n   \"reasonable\" in all cases.  The Internet Standards Process places a\r\n   premium on consensus and efforts to achieve it, and deliberately\r\n   forgoes deterministically swift execution of procedures in favor of\r\n   a latitude within which more genuine technical agreements may be\r\n   reached.]\r\n", "notes": "s/foregoes/forgoes/\r\n\r\n\"foregoes\" means \"to go before; precede.\"\r\n\"forgoes\" means \"to abstain or refrain from; do without.\"\r\n", "submit_date": "2011-11-04", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3015", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.3.1", "orig_text": "   5. The contribuitor, the organization (if any) he represents and the\r\n      owners of any proprietary rights in the contribution, agree that\r\n      no information in the contribution is confidential and that the\r\n      ISOC and its affiliated organizations may freely disclose any\r\n      information in the contribution.\r\n", "correct_text": "   5. The contributor, the organization (if any) he represents and the\r\n      owners of any proprietary rights in the contribution, agree that\r\n      no information in the contribution is confidential and that the\r\n      ISOC and its affiliated organizations may freely disclose any\r\n      information in the contribution.\r\n", "notes": "s/contribuitor/contributor/", "submit_date": "2011-11-04", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3100", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.6", "orig_text": "type-param = \"TYPE=\" type-value *(\",\" type-value)", "correct_text": "type-param =  \"TYPE=\" type-value *(\",\" type-value)\r\ntype-param =/ \"TYPE=\" DQUOTE type-value *(\",\" type-value) DQUOTE", "notes": "Section 6.4.1 states that TYPE parameter values can be specified\r\nas a parameter list (e.g., TYPE=text;TYPE=voice) or as a value list (e.g.,\r\nTYPE=\"text,voice\"). \r\n\r\nEither the description is right (and the ABNF should be corrected), or the ABNF is right, and the description and examples in Sections 6.4.1 and 8 should be fixed.\r\n\r\nValue lists in vCard 3.0 did not use quotes (e.g \"TYPE=dom,postal\" in Section 3.3.1 of RFC 2426). If the ABNF is fixed this would be a significant change from  RFC 2426 syntax.", "submit_date": "2012-01-30", "submitter_name": "Roberto Javier Godoy", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8875", "doc-id": "RFC9000", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "On receiving a PATH_CHALLENGE frame, an endpoint MUST respond by\r\nechoing the data contained in the PATH_CHALLENGE frame in a\r\nPATH_RESPONSE frame.  An endpoint MUST NOT delay transmission of a\r\npacket containing a PATH_RESPONSE frame unless constrained by\r\ncongestion control.", "correct_text": "On receiving a PATH_CHALLENGE frame, an endpoint MUST respond by\r\nechoing the data contained in the PATH_CHALLENGE frame in a\r\nPATH_RESPONSE frame.  An endpoint MUST NOT delay transmission of a\r\npacket containing a PATH_RESPONSE frame unless constrained by\r\ncongestion control.\r\n\r\nAs with any frame type, the general guidance in Section 21.9\r\napplies when excessive quantities of PATH_CHALLENGE frames are\r\nindicative of an attack.", "notes": "Section 8.2.2 does not cross-reference the general peer DoS\r\nguidance in Section 21.9 or make explicit that that guidance\r\nalso applies to excessive PATH_CHALLENGE traffic. As a result,\r\nimplementers reading Section 8.2.2 in isolation can reasonably\r\nconclude that a PATH_RESPONSE must be generated for every\r\nPATH_CHALLENGE, even under resource pressure. Because\r\nPATH_CHALLENGE is only 9 bytes on the wire (Section 19.17), a\r\nsingle minimal 1200-byte datagram can carry over 100\r\nPATH_CHALLENGE frames. Combined with ACK withholding to prevent\r\nfreeing of queued state, this creates a practical memory\r\nexhaustion vector.\r\n\r\nIn December 2023, three implementations were found vulnerable to\r\nthis pattern and issued coordinated fixes:\r\n  - quic-go:  CVE-2023-49295\r\n  - quiche:   CVE-2023-6193\r\n  - quicly:   CVE-2023-50247\r\n(See https://seemann.io/posts/2023-12-18---exploiting-quics-path-validation/)\r\n\r\nPost-fix implementations have adopted incompatible defensive\r\nstrategies (bounded queuing, single-slot overwrite). Those\r\ndefenses can appear inconsistent with a literal reading of\r\nSection 8.2.2 even though Section 21.9 already provides general\r\nlatitude to drop packets or close the connection under attack.\r\nAn explicit cross-reference would clarify this relationship.", "submit_date": "2026-04-10", "submitter_name": "Abhinav Agarwal", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-05-26 13:45:30"}, {"errata_id": "3016", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.3.1.", "orig_text": "   By submission of a contribution, each person actually submitting the\r\n   contribution is deemed to agree to the following terms and conditions\r\n   on his own behalf, on behalf of the organization (if any) he\r\n   represents and on behalf of the owners of any propriety rights in the\r\n   contribution..  Where a submission identifies contributors in\r\n   addition to the contributor(s) who provide the actual submission, the\r\n   actual submitter(s) represent that each other named contributor was\r\n   made aware of and agreed to accept the same terms and conditions on\r\n   his own behalf, on behalf of any organization he may represent and\r\n   any known owner of any proprietary rights in the contribution.\r\n", "correct_text": "   By submission of a contribution, each person actually submitting the\r\n   contribution is deemed to agree to the following terms and conditions\r\n   on his own behalf, on behalf of the organization (if any) he\r\n   represents and on behalf of the owners of any propriety rights in the\r\n   contribution.  Where a submission identifies contributors in\r\n   addition to the contributor(s) who provide the actual submission, the\r\n   actual submitter(s) represent that each other named contributor was\r\n   made aware of and agreed to accept the same terms and conditions on\r\n   his own behalf, on behalf of any organization he may represent and\r\n   any known owner of any proprietary rights in the contribution.\r\n", "notes": "s/contribution../contribution./", "submit_date": "2011-11-04", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3017", "doc-id": "RFC6376", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6.1", "orig_text": "   k= Key type (plain-text; OPTIONAL, default is \"rsa\").  Signers and\r\n      Verifiers MUST support the \"rsa\" key type.  The \"rsa\" key type\r\n      indicates that an ASN.1 DER-encoded [ITU-X660-1997] RSAPublicKey\r\n      (see [RFC3447], Sections 3.1 and A.1.1) is being used in the \"p=\"\r\n      tag.  (Note: the \"p=\" tag further encodes the value using the\r\n      base64 algorithm.)  Unrecognized key types MUST be ignored.", "correct_text": "   k= Key type (plain-text; OPTIONAL, default is \"rsa\").  Signers and\r\n      Verifiers MUST support the \"rsa\" key type.  The \"rsa\" key type\r\n      indicates that an ASN.1 DER-encoded [ITU-X660-1997] RSAPublicKey\r\n      (see [RFC3447], Sections 3.1 and A.1.1), which MAY be contained in\r\n      a SubjectPublicKeyInfo (see [RFC5280], Section A.1), is being used\r\n      in the \"p=\" tag.  (Note: the \"p=\" tag further encodes the value\r\n      using the base64 algorithm.)  Unrecognized key types MUST be\r\n      ignored.", "notes": "The procedure in Appendix C results in a public key in SubjectPublicKeyInfo format. Accordingly, most current implementations will accept such keys. Furthermore, it is trivial to distinguish whether a key is encapsulated in a SubjectPublicKeyInfo.\r\n", "submit_date": "2011-11-05", "submitter_name": "Vernon Tang", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3018", "doc-id": "RFC6107", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   If the P-flag in the Actions field in the LSP_TUNNEL_INTERFACE_ID\r\n   object in a Resv message is set (i.e., one) indicating that the LSP\r\n   is not to be advertised as a link, this TLV SHOULD NOT be present and\r\n   MUST be ignored if encountered.", "correct_text": "   If the P-flag in the Actions field in the LSP_TUNNEL_INTERFACE_ID\r\n   object in a Path message is set (i.e., one) indicating that the LSP\r\n   is not to be advertised as a link, this TLV SHOULD NOT be present and\r\n   MUST be ignored if encountered.", "notes": "The change is s/Resv/Path/", "submit_date": "2011-11-10", "submitter_name": "Alan Davey", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3019", "doc-id": "RFC3382", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.4", "orig_text": "   The overall structure of the two collection values can be pictorially\r\n   represented as:\r\n\r\n      \"media-col\" =\r\n        {  \"media-color\" =  'blue';\r\n           \"media-size\" =\r\n           {    \"x-dimension\" = 6;\r\n                \"y-dimension\" = 4\r\n             }\r\n        },\r\n\r\n   The full encoding is in table 5.  A simplified view of the encoding\r\n   looks like this:\r\n\r\n           Table 4 - Overview Encoding of \"media-col\" collection\r\n\r\n      Tag Value             Name                  Value\r\n\r\n      begCollection         media-col             \"\"\r\n\r\n      memberAttrName        \"\"                    media-color\r\n\r\n      keyword               \"\"                    blue\r\n\r\n      memberAttrName        \"\"                    media-size\r\n\r\n      begCollection         \"\"                    \"\"\r\n\r\n      memberAttrName        \"\"                    x-dimension\r\n\r\n      integer               \"\"                    6\r\n\r\n      memberAttrName        \"\"                    y-dimension\r\n\r\n      integer               \"\"                    4\r\n\r\n      endCollection         \"\"                    \"\"\r\n\r\n      endCollection         \"\"                    \"\"\r\n\r\n\r\n           Table 5 - Example Encoding of \"media-col\" collection\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x34         begCollection   value-tag  beginning of the \"media-\r\n                                              col\" collection attribute\r\n\r\n      0x0009                       name-      length of (collection)\r\n                                   length     attribute name\r\n\r\n      media-col    media-col       name       name of (collection)\r\n                                              attribute\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"media-color\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"media-color\"\r\n                                   length     keyword\r\n\r\n      media-color  media-color     value      value is name of 1st\r\n                                              member attribute\r\n\r\n\r\n      0x44         keyword type    value-tag  keyword type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0004                       value-\r\n                                   length\r\n\r\n      blue         blue            value      value of 1st member\r\n                                              attribute\r\n\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"media-size\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000A                       value-     length of \"media-size\"\r\n                                   length     keyword\r\n\r\n      media-size   media-size      value      Name of 2nd member\r\n                                              attribute\r\n\r\n      0x34         begCollection   value-tag  Beginning of the \"media-\r\n                                              size\" collection attribute\r\n                                              which is a sub-collection\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     collection attribute names\r\n                                   length     have no value\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"x-dimension\"\r\n\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"x-dimension\"\r\n                                   length     keyword\r\n\r\n      x-dimension  x-dimension     value      name of  1st sub-\r\n                                              collection member\r\n                                              attribute\r\n\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x0006                       value      value of  1st sub-\r\n                                              collection member\r\n                                              attribute\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"y-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of the \"y-\r\n                                   length     dimension\" keyword\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      y-dimension  y-dimension     value      name of  2nd sub-\r\n                                              collection member\r\n                                              attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x0004                       value      value of  2nd sub-\r\n                                              collection member\r\n                                              attribute\r\n\r\n      0x37         endCollection   value-tag  end of the sub-collection\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x37         endCollection   value-tag  end of the 1st collection\r\n                                              value in 1setOf\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n", "correct_text": "   The overall structure of the two collection values can be pictorially\r\n   represented as:\r\n\r\n      \"media-col\" =\r\n        {  \"media-color\" =  'blue';\r\n           \"media-size\" =\r\n           {    \"x-dimension\" = 15240;\r\n                \"y-dimension\" = 10160\r\n             }\r\n        },\r\n\r\n   The full encoding is in table 5.  A simplified view of the encoding\r\n   looks like this:\r\n\r\n           Table 4 - Overview Encoding of \"media-col\" collection\r\n\r\n      Tag Value             Name                  Value\r\n\r\n      begCollection         media-col             \"\"\r\n\r\n      memberAttrName        \"\"                    media-color\r\n\r\n      keyword               \"\"                    blue\r\n\r\n      memberAttrName        \"\"                    media-size\r\n\r\n      begCollection         \"\"                    \"\"\r\n\r\n      memberAttrName        \"\"                    x-dimension\r\n\r\n      integer               \"\"                    15240\r\n\r\n      memberAttrName        \"\"                    y-dimension\r\n\r\n      integer               \"\"                    10160\r\n\r\n      endCollection         \"\"                    \"\"\r\n\r\n      endCollection         \"\"                    \"\"\r\n\r\n\r\n           Table 5 - Example Encoding of \"media-col\" collection\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x34         begCollection   value-tag  beginning of the \"media-\r\n                                              col\" collection attribute\r\n\r\n      0x0009                       name-      length of (collection)\r\n                                   length     attribute name\r\n\r\n      media-col    media-col       name       name of (collection)\r\n                                              attribute\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"media-color\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"media-color\"\r\n                                   length     keyword\r\n\r\n      media-color  media-color     value      value is name of 1st\r\n                                              member attribute\r\n\r\n\r\n      0x44         keyword type    value-tag  keyword type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0004                       value-\r\n                                   length\r\n\r\n      blue         blue            value      value of 1st member\r\n                                              attribute\r\n\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"media-size\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000A                       value-     length of \"media-size\"\r\n                                   length     keyword\r\n\r\n      media-size   media-size      value      Name of 2nd member\r\n                                              attribute\r\n\r\n      0x34         begCollection   value-tag  Beginning of the \"media-\r\n                                              size\" collection attribute\r\n                                              which is a sub-collection\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     collection attribute names\r\n                                   length     have no value\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"x-dimension\"\r\n\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"x-dimension\"\r\n                                   length     keyword\r\n\r\n      x-dimension  x-dimension     value      name of  1st sub-\r\n                                              collection member\r\n                                              attribute\r\n\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x3b88                       value      value of  1st sub-\r\n                                              collection member\r\n                                              attribute\r\n\r\n      0x4A         memberAttrName  value-tag  starts a new member\r\n                                              attribute: \"y-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of the \"y-\r\n                                   length     dimension\" keyword\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      y-dimension  y-dimension     value      name of  2nd sub-\r\n                                              collection member\r\n                                              attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x27b0                       value      value of  2nd sub-\r\n                                              collection member\r\n                                              attribute\r\n\r\n      0x37         endCollection   value-tag  end of the sub-collection\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x37         endCollection   value-tag  end of the 1st collection\r\n                                              value in 1setOf\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n", "notes": "The \"media-col\" attribute was defined in PWG 5100.3 (ftp://ftp.pwg.org/pub/pwg/candidates/cs-ippprodprint10-20010212-5100.3.pdf) with units consistent with RFC 3805 - namely hundredths of millimeters. However, since the example in RFC 3382 was for the same attribute, many implementers have made mistakes by using the RFC 3382 example information instead of the normative definitions in PWG 5100.3.\r\n\r\nThese changes make the example in RFC 3382 match the normative definition in PWG 5100.3.", "submit_date": "2011-11-10", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7046", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.3", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 ee 91 40 00 ff 06 ad ae 0a 0b 0c 0d\r\n     ac 1b 1c 1d da 1c 00 b3 38 9b ed 72 d3 84 4a 70\r\n     c0 18 01 04 88 51 00 00 01 01 08 0a 00 01 85 e1\r\n     ce 45 98 38 1d 10 3d 54 75 85 e9 e9 d5 c3 ec 85\r\n     7b 96 f8 37 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da bf 00 b4 0a 0b 0c 0d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da bf 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 ee 91 40 00 ff 06 ad ae 0a 0b 0c 0d\r\n     ac 1b 1c 1d da 1c 00 b3 38 9b ed 72 d3 84 4a 70\r\n     c0 18 01 04 f2 ec 00 00 01 01 08 0a 00 01 85 e1\r\n     ce 45 98 38 1d 10 3d 54 75 85 e9 e9 d5 c3 ec 85\r\n     7b 96 f8 37 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da bf 00 b4 0a 0b 0c 0d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da bf 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "notes": "The TCP checksum shown (0x8851) is wrong, it should be 0xf2ec.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:50:02"}, {"errata_id": "8711", "doc-id": "RFC5646", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.5", "orig_text": "The field \u2019Description\u2019 contains a description of the tag or subtag\r\nin the record. The \u2019Description\u2019 field MAY appear more than once per\r\nrecord. The \u2019Description\u2019 field MAY include the full range of\r\nUnicode characters. At least one of the \u2019Description\u2019 fields MUST be\r\nwritten or transcribed into the Latin script; additional\r\n\u2019Description\u2019 fields MAY be in any script or language.", "correct_text": "The field \u2019Description\u2019 contains a description of the tag or subtag\r\nin the record. The \u2019Description\u2019 field MAY appear more than once per\r\nrecord. The \u2019Description\u2019 field MAY include the full range of\r\nUnicode characters. At least one of the 'Description' fields MUST be\r\nwritten or transcribed into the Latin script (i.e., using characters\r\nwith Unicode Script property value Latin, as defined in UAX #24,\r\nplus characters with Script property value Common or Inherited when\r\nused in conjunction with Latin characters); additional \u2019Description\u2019\r\nfields MAY be in any script or language.", "notes": "The term \"Latin script\" is not defined anywhere in the document. This\r\ncreates implementation ambiguity: does it refer to:\r\n\r\n  (a) The US-ASCII letters A-Z, a-z (per ISO 646, which the RFC references\r\n      as the default restriction for registry fields in Section 3.1.1)\r\n\r\n  (b) Characters with Unicode Script property value \"Latin\" as defined\r\n      in UAX #24 (Unicode Standard Annex #24, \"Unicode Script Property\")\r\n\r\nThese interpretations differ substantially: option (a) covers 52 letters,\r\nwhile option (b) covers approximately 1,500 code points including\r\ncharacters such as \u00e9, \u00f1, \u00f8, and \u01c1 (LATIN LETTER LATERAL CLICK).\r\n\r\nThe registry contains 516 Description fields using extended Latin\r\ncharacters (e.g., \"Norwegian Bokm\u00e5l\", \"Volap\u00fck\", \"Arb\u00ebresh\u00eb Albanian\"),\r\ndemonstrating that interpretation (a) is not the operational practice.\r\n\r\nThe RFC explicitly permits \"the full range of Unicode characters\" in\r\nDescription fields (Section 3.1.5), so referencing Unicode's script\r\nproperty is consistent with the document's framework.\r\n\r\nUAX #24 (https://www.unicode.org/reports/tr24/) is a stable Unicode\r\nStandard Annex with clear definitions.", "submit_date": "2026-01-22", "submitter_name": "P\u00e9tur Ingi Egilsson", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-01-22 18:52:09"}, {"errata_id": "3020", "doc-id": "RFC3382", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "5 Example definition of a collection attribute\r\n\r\n   In some printing environments, it is desirable to allow the client to\r\n   select the media by its properties, e.g., weight, color, size, etc.,\r\n   instead of by name.  In IPP/1.1 (see [RFC2911]), the \"media (type3\r\n   keyword | name) Job Template attribute allows selection by name.  It\r\n   is tempting to extend the \"media\" attribute syntax to include\r\n   \"collection\", but then existing clients could not understand default\r\n   or supported media values that use the collection value.  To preserve\r\n   interoperability, a new attribute MUST BE added, e.g., \"media-col\r\n   (collection)\".  The following subsections contain a sample definition\r\n   of a simplified \"media-col\" attribute.  The definition follows the\r\n   rules in section 3.\r\n", "correct_text": "5 Example definition of a collection attribute\r\n\r\n   In some printing environments, it is desirable to allow the client to\r\n   select the media by its properties, e.g., weight, color, size, etc.,\r\n   instead of by name.  In IPP/1.1 (see [RFC2911]), the \"media (type3\r\n   keyword | name) Job Template attribute allows selection by name.  It\r\n   is tempting to extend the \"media\" attribute syntax to include\r\n   \"collection\", but then existing clients could not understand default\r\n   or supported media values that use the collection value.  To preserve\r\n   interoperability, a new attribute MUST BE added, e.g., \"media-col\r\n   (collection)\".  The following subsections contain a sample definition\r\n   of a simplified \"media-col\" attribute.  The definition follows the\r\n   rules in section 3. Note: The \"media-col\" attribute is normatively defined\r\n   in the IPP Production Printing Attributes - Set 1 [PWG5100.3].\r\n\r\n", "notes": "Add normative reference to PWG 5100.3 which defines \"media-col\".", "submit_date": "2011-11-10", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3021", "doc-id": "RFC3382", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.2.1", "orig_text": "5.1.2.1  x-dimension (integer(0:MAX))\r\n\r\n   This attribute identifies the width of the media in inch units along\r\n   the X axis.\r\n", "correct_text": "5.1.2.1  x-dimension (integer(0:MAX))\r\n\r\n   This attribute identifies the width of the media in hundredths of millimeters along\r\n   the X axis.\r\n", "notes": "The units for x-dimension are normatively defined as hundredths of millimeters by PWG 5100.3 to be consistent with RFC 3805.", "submit_date": "2011-11-10", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3022", "doc-id": "RFC3382", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.2.2", "orig_text": "5.1.2.2  y-dimension (integer(0:MAX))\r\n\r\n   This attribute identifies the height of the media in inch units along\r\n   the Y axis.\r\n", "correct_text": "5.1.2.2  y-dimension (integer(0:MAX))\r\n\r\n   This attribute identifies the height of the media in hundredths of millimeters along\r\n   the Y axis.\r\n", "notes": "y-dimension is normatively defined as hundredths of millimeters by PWG 5100.3 to match RFC 3805.", "submit_date": "2011-11-10", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3023", "doc-id": "RFC3382", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "12.1 Normative References\r\n", "correct_text": "12.1 Normative References\r\n\r\n[PWG5100.3]  K. Ocke, T. Hastings, \"Internet Printing Protocol (IPP):\r\n             Production Printing Attributes - Set 1\", \r\n             ftp://ftp.pwg.org/pub/pwg/candidates/\r\n             cs-ippprodprint10-20010212-5100.3.pdf, February 2001.", "notes": "Adding normative reference to PWG 5100.3 for media-col.", "submit_date": "2011-11-10", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4558", "doc-id": "RFC5917", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "IMPORTS\r\n\r\n   -- Imports from New PKIX ASN.1 [RFC5912]\r\n\r\n     DirectoryString\r\n       PKIX1Explicit-2009\r\n         { iso(1) identified-organization(3) dod(6) internet(1)\r\n           security(5) mechanisms(5) pkix(7) id-mod(0)\r\n           id-pkix1-explicit-02(51) }", "correct_text": "IMPORTS\r\n\r\n   -- Imports from New PKIX ASN.1 [RFC5912]\r\n\r\n     DirectoryString\r\n       FROM PKIX1Explicit-2009\r\n         { iso(1) identified-organization(3) dod(6) internet(1)\r\n           security(5) mechanisms(5) pkix(7) id-mod(0)\r\n           id-pkix1-explicit-02(51) }", "notes": "Missing \"FROM\" in import statement.\n --VERIFIER NOTES-- \n   While the FROM is indeed missing, there is another error in this text that was reported in eid5883; since that report fully supersedes this one, this errata report is redundant.  \"Rejected\" is the least bad state in which to leave such a report.", "submit_date": "2015-12-07", "submitter_name": "Lars Wilhelmsen", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-10-26 05:47:33"}, {"errata_id": "3101", "doc-id": "RFC5102", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.9.", "orig_text": "   Timestamps flowStartSysUpTime and flowEndSysUpTime are relative\r\n   timestamps indicating the time relative to the last (re-\r\n   )initialization of the IPFIX Device.  For reporting the time of the\r\n   last (re-)initialization, systemInitTimeMilliseconds can be reported,\r\n   for example, in Data Records defined by Option Templates.", "correct_text": "   Timestamps flowStartSysUpTime and flowEndSysUpTime are relative\r\n   timestamps indicating the time relative to the last\r\n   (re-)initialization of the IPFIX Device.  For reporting the time of the\r\n   last (re-)initialization, systemInitTimeMilliseconds can be reported,\r\n   for example, in Data Records defined by Option Templates.", "notes": "Poor formatting of \"(re-)initialization\" in the 3rd paragraph of section 5.9", "submit_date": "2012-01-31", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3102", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12.2.1.1", "orig_text": "      With a length of 32 bits, a client could generate, within a single\r\n      call, one request a second for about 136 years before needing to\r\n      wrap around.  The initial value of the sequence number is chosen\r\n      so that subsequent requests within the same call will not wrap\r\n      around.", "correct_text": "      With a length of 32 bits, a client could generate, within a single\r\n      call, one request a second for about 136 years before exhausting\r\n      available sequence numbers. Sequence numbers must not wrap around to 0.\r\n      The initial value of the sequence number (less than 2**31) is chosen\r\n      so that subsequent requests within the same call will not exceed 2**32-1.\r\n      ", "notes": "Highlight that within a dialog sequence numbers;\r\n   1). can increment to 2**32-1\r\n   2). must not wrap around to 0", "submit_date": "2012-02-01", "submitter_name": "Alec Davis", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3550", "doc-id": "RFC4295", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "The DESCRIPTION clause of the mip6MnHomeAddressState OBJECT-TYPE,\r\non page 30, suffers from a couple of word omissions.\r\n\r\nThe text:\r\n\r\n                    home        -- mobile node is on the home network.\r\n                    registered  -- mobile node is on a foreign network\r\n                                   and is registered with the home\r\n                                   agent.\r\n                    pending     -- mobile node has sent registration\r\n                                   request to the home agent and is\r\n                                   waiting for the reply.\r\n                    isolated    -- mobile node is isolated from network,\r\n                                   i.e., it is not in its home network,\r\n                                   it is not registered, and no\r\n                                   registration ack is pending.\r\n\r\nshould perhaps better say:\r\n\r\n|                   home        -- the mobile node is on the home\r\n                                   network.\r\n|                   registered  -- the mobile node is on a foreign\r\n                                   network and is registered with the\r\n                                   home agent.\r\n|                   pending     -- the mobile node has sent a\r\n                                   registration request to the home\r\n                                   agent and is waiting for the reply.\r\n|                   isolated    -- the mobile node is isolated from its\r\n|                                  home network, i.e., it is not in its\r\n                                   home network, it is not registered,\r\n                                   and no registration ack is pending.\r\n", "correct_text": "", "notes": "The items below are presented in RFC textual order.\r\nI use change bars ('|' in column 1) and occasionally\r\nup/down pointing marker lines ('^^^'/'vvv') to emphasize\r\nthe location of textual issues and/or proposed corrections.\r\nModified text has been re-adjusted to match RFC formatting\r\nrules, where appropriate.\r\n\r\nfrom pending", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3025", "doc-id": "RFC3382", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "Appendix B: Encoding Example of 1setOf Collection (Informative)\r\n\r\n   The overall structure of the collection value can be pictorially\r\n   represented as:\r\n\r\n      \"media-size-supported\" =\r\n        {  \"x-dimension\" = 6;\r\n           \"y-dimension\" = 4\r\n        },\r\n        {  \"x-dimension\" = 3;\r\n           \"y-dimension\" = 5\r\n        };\r\n\r\n   A simplified view of the encoding would look like this:\r\n\r\n             Table 8 - Overview Encoding of 1setOf collection\r\n\r\n      Tag Value              Name                 Value\r\n\r\n      begCollection          media-size-          \"\"\r\n                             supported\r\n\r\n      memberAttrName         \"\"                   x-dimension\r\n\r\n      integer                \"\"                   6\r\n\r\n      memberAttrName         \"\"                   y-dimension\r\n\r\n      integer                \"\"                   4\r\n\r\n      endCollection          \"\"                   \"\"\r\n\r\n      begCollection          \"\"                   \"\"\r\n\r\n      memberAttrName         \"\"                   x-dimension\r\n\r\n      integer                \"\"                   3\r\n\r\n      memberAttrName         \"\"                   y-dimension\r\n\r\n      integer                \"\"                   5\r\n\r\n      endCollection          \"\"                   \"\"\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 25]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n              Table 9 - Example Encoding of 1setOf collection\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x34         begCollection   value-tag  beginning of the \"media-\r\n                                              size-supported (1setOf\r\n                                              collection\" attribute\r\n\r\n      0x00014                      name-      length of (collection)\r\n                                   length     attribute name\r\n\r\n      media-size-  media-size-     name       name of (collection)\r\n      supported    supported                  attribute\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"x-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"x-dimension\"\r\n                                   length     keyword\r\n\r\n      x-dimension  x-dimension     value      name of  1st collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 26]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x0006                       value      value of  1st collection\r\n                                              member attribute\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"y-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of the \"y-\r\n                                   length     dimension\" keyword\r\n\r\n      y-dimension  y-dimension     value      name of  2nd collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x0004                       value      value of  2nd collection\r\n                                              member attribute\r\n\r\n      0x37         endCollection   value-tag  end of the collection\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 27]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x34         begCollection   value-tag  beginning of the 2nd\r\n                                              member of the 1setOf\r\n                                              \"sizes-avail \" collection\r\n                                              attribute\r\n\r\n      0x0000                       name-      Zero length name indicates\r\n                                   length     this is member of previous\r\n                                              attribute\r\n\r\n                                   name       no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"x-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"x-dimension\"\r\n                                   length     keyword\r\n\r\n      x-dimension  x-dimension     value      name of  1st collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 28]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x0003                       value      value of  1st collection\r\n                                              member attribute\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"y-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of the \"y-\r\n                                   length     dimension\" keyword\r\n\r\n      y-dimension  y-dimension     value      name of  2nd collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x0005                       value      value of  2nd collection\r\n                                              member attribute\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 29]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x37         endCollection   value-tag  end of the 1setOf\r\n                                              collection value\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n", "correct_text": "Appendix B: Encoding Example of 1setOf Collection (Informative)\r\n\r\n   The overall structure of the collection value can be pictorially\r\n   represented as:\r\n\r\n      \"media-size-supported\" =\r\n        {  \"x-dimension\" = 15240;\r\n           \"y-dimension\" = 10160\r\n        },\r\n        {  \"x-dimension\" = 7620;\r\n           \"y-dimension\" = 12700\r\n        };\r\n\r\n   A simplified view of the encoding would look like this:\r\n\r\n             Table 8 - Overview Encoding of 1setOf collection\r\n\r\n      Tag Value              Name                 Value\r\n\r\n      begCollection          media-size-          \"\"\r\n                             supported\r\n\r\n      memberAttrName         \"\"                   x-dimension\r\n\r\n      integer                \"\"                   15240\r\n\r\n      memberAttrName         \"\"                   y-dimension\r\n\r\n      integer                \"\"                   10160\r\n\r\n      endCollection          \"\"                   \"\"\r\n\r\n      begCollection          \"\"                   \"\"\r\n\r\n      memberAttrName         \"\"                   x-dimension\r\n\r\n      integer                \"\"                   7620\r\n\r\n      memberAttrName         \"\"                   y-dimension\r\n\r\n      integer                \"\"                   12700\r\n\r\n      endCollection          \"\"                   \"\"\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 25]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n              Table 9 - Example Encoding of 1setOf collection\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x34         begCollection   value-tag  beginning of the \"media-\r\n                                              size-supported (1setOf\r\n                                              collection\" attribute\r\n\r\n      0x00014                      name-      length of (collection)\r\n                                   length     attribute name\r\n\r\n      media-size-  media-size-     name       name of (collection)\r\n      supported    supported                  attribute\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"x-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"x-dimension\"\r\n                                   length     keyword\r\n\r\n      x-dimension  x-dimension     value      name of  1st collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 26]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x3b88                       value      value of  1st collection\r\n                                              member attribute\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"y-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of the \"y-\r\n                                   length     dimension\" keyword\r\n\r\n      y-dimension  y-dimension     value      name of  2nd collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x27b0                       value      value of  2nd collection\r\n                                              member attribute\r\n\r\n      0x37         endCollection   value-tag  end of the collection\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 27]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x34         begCollection   value-tag  beginning of the 2nd\r\n                                              member of the 1setOf\r\n                                              \"sizes-avail \" collection\r\n                                              attribute\r\n\r\n      0x0000                       name-      Zero length name indicates\r\n                                   length     this is member of previous\r\n                                              attribute\r\n\r\n                                   name       no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"x-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of \"x-dimension\"\r\n                                   length     keyword\r\n\r\n      x-dimension  x-dimension     value      name of  1st collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 28]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x1dc4                       value      value of  1st collection\r\n                                              member attribute\r\n\r\n      0x4A         memberAttrName  value-tag  starts member attribute:\r\n                                              \"y-dimension\"\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x000B                       value-     length of the \"y-\r\n                                   length     dimension\" keyword\r\n\r\n      y-dimension  y-dimension     value      name of  2nd collection\r\n                                              member attribute\r\n\r\n      0x21         integer type    value-tag  attribute type\r\n\r\n      0x0000                       name-      0 indicates 1setOf\r\n                                   length\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0004                       value-     length of an integer = 4\r\n                                   length\r\n\r\n      0x319c                       value      value of  2nd collection\r\n                                              member attribute\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\ndeBry, et. al.              Standards Track                    [Page 29]\r\n \r\nRFC 3382         IPP: The 'collection' attribute syntax   September 2002\r\n\r\n\r\n      Octets       Symbolic Value  Protocol   comments\r\n                                   field\r\n\r\n      0x37         endCollection   value-tag  end of the 1setOf\r\n                                              collection value\r\n\r\n      0x0000                       name-      defined to be 0 for this\r\n                                   length     type, so part of 1setOf\r\n\r\n                                              no name (since name-length\r\n                                              was 0)\r\n\r\n      0x0000                       value-     defined to be 0 for this\r\n                                   length     type\r\n\r\n                                              no value (since value-\r\n                                              length was 0)\r\n", "notes": "Update examples to match PWG 5100.3 definition.", "submit_date": "2011-11-10", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3026", "doc-id": "RFC3492", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   (I) Russian (Cyrillic):\r\n       U+043F u+043E u+0447 u+0435 u+043C u+0443 u+0436 u+0435 u+043E\r\n       u+043D u+0438 u+043D u+0435 u+0433 u+043E u+0432 u+043E u+0440\r\n       u+044F u+0442 u+043F u+043E u+0440 u+0443 u+0441 u+0441 u+043A\r\n       u+0438\r\n       Punycode: b1abfaaepdrnnbgefbaDotcwatmq2g4l", "correct_text": "   (I) Russian (Cyrillic):\r\n       U+043F u+043E u+0447 u+0435 u+043C u+0443 u+0436 u+0435 u+043E\r\n       u+043D u+0438 u+043D u+0435 u+0433 u+043E u+0432 u+043E u+0440\r\n       u+044F u+0442 u+043F u+043E u+0440 u+0443 u+0441 u+0441 u+043A\r\n       u+0438\r\n       Punycode: b1abfaaepdrnnbgefbadotcwatmq2g4l", "notes": "The uppercase `D` in the encoded string appears to be a typo.", "submit_date": "2011-11-11", "submitter_name": "Mathias Bynens", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3027", "doc-id": "RFC5785", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "header", "orig_text": "Updates: 2616, 2818        ", "correct_text": "\u00a0", "notes": "The document has no RFC 2818 reference, let alone any update.  The RFC 2616 reference is informative, RFC 2616 was not updated by RFC 5785.", "submit_date": "2011-11-11", "submitter_name": "Frank Ellermann", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3028", "doc-id": "RFC4130", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4.3", "orig_text": "   digest-alg-id = \"sha1\" | \"md5\"", "correct_text": "   digest-alg-id = \"sha-1\" | \"sha1\" | \"md5\"\r\n\t\t; The \"sha1\" is a legacy spelling of the \"sha-1\" defined hash in the IANA Textual Names Registry\r\n\t\t; It should be maintained for backwards compatibility\r\n", "notes": "The proper spelling is \"sha-1\" per http://www.iana.org/assignments/hash-function-text-names/hash-function-text. However, \"sha1\" should still be accepted to support backwards compatibility. The other hashes are newer ones since the RFC was published.\r\n --VERIFIER NOTES-- \r\nSplit off erratum 1974", "submit_date": "2011-09-16", "submitter_name": "Kyle Meadors", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3029", "doc-id": "RFC4130", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": "   The currently supported values for MIC algorithm <micalg> values are:\r\n\r\n        Algorithm   Value Used\r\n        ---------    -------\r\n         SHA-1        sha1\r\n         MD5          md5\r\n", "correct_text": "   The currently supported values for MIC algorithm <micalg> values are:\r\n\r\n        Algorithm   Value Used\r\n        ---------    -------\r\n\r\n         SHA-1      sha-1 or sha1\r\n         MD5        md5\r\n", "notes": "The proper spelling is \"sha-1\" per http://www.iana.org/assignments/hash-function-text-names/hash-function-text. However, \"sha1\" should still be accepted to support backwards compatibility.", "submit_date": "2011-09-16", "submitter_name": "Kyle Meadors", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3031", "doc-id": "RFC4271", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.1.2", "orig_text": "The Phase 2 decision function is blocked from running while the Phase\r\n3 decision function is in process.", "correct_text": "The Phase 3 decision function is blocked from running while the Phase\r\n2 decision function is in process.", "notes": "I believe that is what was intended; the text as is confuses me no end.\n --VERIFIER NOTES-- \n   It is accepted that the RFC text is confusing, but the proposed errata text is incorrect because this proposed revision implies that Phase 2 can begin running while Phase 3 is still running this contradicts other text in the RFC (9.1.2) which states that \"The Phase 3 Routing Decision function is blocked from running whilst the Phase 2 decision function is in process.\"\r\n\r\nIt is anticipated that the IDR WG will publish material clarifying mutual exclusion in RFC4271.\r\n\r\n ", "submit_date": "2011-11-14", "submitter_name": "Kireeti Kompella", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3038", "doc-id": "RFC5545", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.8.7.2", "orig_text": "Value Type:  DATE-TIME\r\n\r\n   Property Parameters:  IANA and non-standard property parameters can\r\n      be specified on this property.\r\n\r\n   Conformance:  This property MUST be included in the \"VEVENT\",\r\n      \"VTODO\", \"VJOURNAL\", or \"VFREEBUSY\" calendar components.\r\n\r\n   Description:  The value MUST be specified in the UTC time format.\r\n\r\n      This property is also useful to protocols such as [2447bis] that\r\n      have inherent latency issues with the delivery of content.  This\r\n      property will assist in the proper sequencing of messages\r\n      containing iCalendar objects.", "correct_text": "Value Type:  DATE-TIME. The time value MUST be in the DATE WITH UTC\r\n      TIME form defined for the DATE-TIME value type.\r\n\r\n   Property Parameters:  IANA and non-standard property parameters can\r\n      be specified on this property.\r\n\r\n   Conformance:  This property MUST be included in the \"VEVENT\",\r\n      \"VTODO\", \"VJOURNAL\", or \"VFREEBUSY\" calendar components.\r\n\r\n   Description:  This property is also useful to protocols such as\r\n      [2447bis] that have inherent latency issues with the delivery of\r\n      content.  This property will assist in the proper sequencing of\r\n      messages containing iCalendar objects.", "notes": "Application of the DATE-TIME value type is inconsistent in the RFC, and can lead to ambiguity since DATE-TIME can take on three different forms. The wording for the corrected Value Type for DTSTAMP is similar to the DTSTART property's Value Type. This is to make it clear that the only acceptable form is DATE WITH UTC TIME. You can also see evidence of defining specificity inline with the Value Type in the GEO property.\r\n\r\nThe spec author comments: \"To improve consistency, we should modify Section 3.8.7.2. Date-Time Stamp and Section 3.8.7.3. Last Modified to use the same phrasing as Section 3.8.7.1. Date-Time Created and Section 3.8.2.1. Date-Time Completed.\"", "submit_date": "2011-11-30", "submitter_name": "Brent Bloxam", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3032", "doc-id": "RFC3501", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.1", "orig_text": "   Responses:  REQUIRED untagged responses: FLAGS, EXISTS, RECENT\r\n               REQUIRED OK untagged responses:  UNSEEN,  PERMANENTFLAGS,\r\n               UIDNEXT, UIDVALIDITY\r\n\r\n[...]\r\n\r\n         OK [UNSEEN <n>]\r\n                     The message sequence number of the first unseen\r\n                     message in the mailbox.  If this is missing, the\r\n                     client can not make any assumptions about the first\r\n                     unseen message in the mailbox, and needs to issue a\r\n                     SEARCH command if it wants to find it.\r\n", "correct_text": "   Responses:  REQUIRED untagged responses: FLAGS, EXISTS, RECENT\r\n               REQUIRED OK untagged responses:  PERMANENTFLAGS,\r\n               UIDNEXT, UIDVALIDITY, UNSEEN (if any unseen exist)\r\n\r\n[...]\r\n\r\n         OK [UNSEEN <n>]\r\n                     The message sequence number of the first unseen\r\n                     message in the mailbox.  If there are any unseen\r\n                     messages in the mailbox, an UNSEEN response MUST\r\n                     be sent, if not it MUST be omitted.\r\n                     If this is missing, the client cannot make any\r\n                     assumptions about the first unseen message in the\r\n                     mailbox, and needs to issue a SEARCH command if\r\n                     it wants to find it.\r\n", "notes": "There is a conflict between \"REQUIRED\" on the UNSEEN response and having no value to send.  This change documents the approach taken by existing servers.", "submit_date": "2011-11-15", "submitter_name": "Bron Gondwana", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3033", "doc-id": "RFC6296", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6", "orig_text": "So, the value 0xD550 is written in the 16-bit subnet area,\r\nresulting in a mapped external address of 2001:0DB8:0001:D550::1234.\r\n\r\nWhen a response datagram is received, it will contain the destination\r\naddress 2001:0DB8:0001:D550::0001, which will be mapped back to\r\nFD01:0203:0405:0001::1234 using the inverse mapping algorithm.", "correct_text": "So, the value 0xD550 is written in the 16-bit subnet area,\r\nresulting in a mapped external address of 2001:0DB8:0001:D550::1234.\r\n\r\nWhen a response datagram is received, it will contain the destination\r\naddress 2001:0DB8:0001:D550::1234, which will be mapped back to\r\nFD01:0203:0405:0001::1234 using the inverse mapping algorithm.", "notes": "PC sends the packet with Ipv6 source address 2001:0DB8:0001:D550::1234. When a response datagram is received, it must contain the destination address 2001:0DB8:0001:D550::1234.", "submit_date": "2011-11-21", "submitter_name": "Marek Kopeck\u00fd", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3034", "doc-id": "RFC5447", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.5", "orig_text": "The following examples show how the LOCAL_HOME_AGENT_ASSIGNMENT\r\n(referred to as LOCAL-bit in the examples) capability and the MIP-\r\nAgent-Info AVP ", "correct_text": "The following examples show how the LOCAL_HOME_AGENT_ASSIGNMENT\r\n(referred to as LOCAL-bit in the examples) capability and the MIP6-\r\nAgent-Info AVP ", "notes": "There is no such thing as the \"MIP-Agent-Info\" AVP, it should be \"MIP6-Agent-Info\"", "submit_date": "2011-11-22", "submitter_name": "Romain Kuntz", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3035", "doc-id": "RFC5778", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "MIP-Agent-Info", "correct_text": "MIP6-Agent-Info", "notes": "There is no such thing as the \"MIP-Agent-Info\" AVP (section 5.2.2 and 6.21), it should be \"MIP6-Agent-Info\" instead.", "submit_date": "2011-11-22", "submitter_name": "Romain Kuntz", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3036", "doc-id": "RFC5996", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.10", "orig_text": "      [...] Of the notifications defined in this document, the SPI is\r\n      included only with INVALID_SELECTORS and REKEY_SA.\r\n\r\n", "correct_text": "      [...] Of the notifications defined in this document, the SPI is\r\n      included only with INVALID_SELECTORS, REKEY_SA and CHILD_SA_NOT_FOUND.\r\n", "notes": "Original text was carried over from RFC4306 and contradicts with the text in section 2.25, which clearly says that SPI field in CHILD_SA_NOT_FOUND notification is populated. Notification CHILD_SA_NOT_FOUND was not defined in RFC4306, and the whole section 2.25 is new to RFC5996.", "submit_date": "2011-11-26", "submitter_name": "Valery Smyslov", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3037", "doc-id": "RFC5546", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1.3", "orig_text": "   |   DURATION         | 0 or 1   | If present, REPEAT MUST be        |\r\n   |                    |          | present.                          |\r\n   |   REPEAT           | 0 or 1   | If present, DURATION MUST be      |\r\n   |                    |          | present.                          |", "correct_text": "   |   DURATION         | 0 or 1   | If present, DURATION MUST be      |\r\n   |                    |          | present.                          |\r\n   |   REPEAT           | 0 or 1   | If present, REPEAT MUST be        |\r\n   |                    |          | present.                          |", "notes": "Currently, the Component/Property doesn't match the term used in Comment. That needs to be corrected.\n --VERIFIER NOTES-- \nPer discussion on the ietf-calsify list, this report simply misunderstands the intent of the document and is clearly false.   ", "submit_date": "2011-11-30", "submitter_name": "Praveen Bhamidipati", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4499", "doc-id": "RFC3107", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "   A BGP speaker can withdraw a previously advertised route (as well as\r\n   the binding between this route and a label) by either (a) advertising\r\n   a new route (and a label) with the same NLRI as the previously\r\n   advertised route, or (b) listing the NLRI of the previously\r\n   advertised route in the Withdrawn Routes field of an Update message.\r\n   The label information carried (as part of NLRI) in the Withdrawn\r\n   Routes field should be set to 0x800000.  (Of course, terminating the\r\n   BGP session also withdraws all the previously advertised routes.)\r\n", "correct_text": "   A BGP speaker can withdraw a previously advertised route (as well as\r\n   the binding between this route and a label) by either (a) advertising\r\n   a new route (and a label) with the same NLRI as the previously\r\n   advertised route, or (b) listing the NLRI of the previously\r\n   advertised route in the Withdrawn Routes field of\r\n   an MR_UNREACH_NLRI attribute of an Update message.\r\n   The label information carried (as part of NLRI) in the Withdrawn\r\n   Routes field should be set to 0x000001.  (Of course, terminating the\r\n   BGP session also withdraws all the previously advertised routes.)\r\n", "notes": "1. Labeled routes are withdrawn by virtue of MR_UNREACH_NLRI attribute.\r\n2. Label value should be set to 0x00000 with BoS=1.  Value 0x800000 was carried from draft, where BoS was high-order bit.\n --VERIFIER NOTES-- \n  Rejected as potential to cause interoperability issues.", "submit_date": "2015-10-13", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3039", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3.2", "orig_text": "<number> ::= any decimal integer 1 through 255", "correct_text": "<number> ::= any decimal integer 0 through 255", "notes": "if 0 is not allowed, one cannot even represent 127.0.0.1 with\r\n<host-number> ::= <number>,<number>,<number>,<number>\r\n\r\n[Verifier Note: This does allow syntactically for nonsense values for <byte-size>, <port-number>, and <host-number>, but this was also true in the current syntax.]", "submit_date": "2011-12-01", "submitter_name": "Julien Moutinho", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3041", "doc-id": "RFC1365", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "   Class F-8G has the seven higher order bits set to 1111110, a 49 bit\r\n   network number and a 8 bit host address.\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |1|1|1|1|1|0|              net number                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 net number                    |  local part   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "   Class F-8G has the seven higher order bits set to 1111110, a 49 bit\r\n   network number and a 8 bit host address.\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |1|1|1|1|1|1|0|            net number                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                 net number                    |  local part   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Remaining bit patterns are unspecified but assumed to be reserved for future definition.", "submit_date": "2011-12-07", "submitter_name": "Dean Swift", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3042", "doc-id": "RFC6321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "  # 3.6.6 Alarm Component\r\n\r\n  component-valarm = element valarm {\r\n       audioprop | dispprop | emailprop\r\n   }\r\n\r\n   type-audioprop = element properties {\r\n       property-action &\r\n\r\n       property-trigger &\r\n\r\n       (property-duration, property-repeat)? &\r\n\r\n       property-attach?\r\n   }\r\n\r\n   type-dispprop = element properties {\r\n       property-action &\r\n       property-description &\r\n       property-trigger &\r\n       property-summary &\r\n\r\n       property-attendee+ &\r\n\r\n       (property-duration, property-repeat)? &\r\n\r\n       property-attach*\r\n   }\r\n\r\n   type-emailprop = element properties {\r\n       property-action &\r\n       property-description &\r\n       property-trigger &\r\n\r\n       (property-duration, property-repeat)?\r\n   }", "correct_text": "  # 3.6.6 Alarm Component\r\n\r\n  component-valarm = element valarm {\r\n       type-audioprop | type-dispprop | type-emailprop\r\n   }\r\n\r\n   type-audioprop = element properties {\r\n       property-action &\r\n\r\n       property-trigger &\r\n\r\n       (property-duration, property-repeat)? &\r\n\r\n       property-attach?\r\n   }\r\n\r\n   type-emailprop = element properties {\r\n       property-action &\r\n       property-description &\r\n       property-trigger &\r\n       property-summary &\r\n\r\n       property-attendee+ &\r\n\r\n       (property-duration, property-repeat)? &\r\n\r\n       property-attach*\r\n   }\r\n\r\n   type-dispprop = element properties {\r\n       property-action &\r\n       property-description &\r\n       property-trigger &\r\n\r\n       (property-duration, property-repeat)?\r\n   }", "notes": "* the alarm properties lack the \"type-\"\r\n* dispprop and emailprop have been exchanged", "submit_date": "2011-12-07", "submitter_name": "Christian Mollekopf", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3043", "doc-id": "RFC4033", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Updates", "orig_text": "Updates: 1034, 1035, 2136, 2181, 2308, 3225,                   M. Larson\r\n         3007, 3597, 3226                                       VeriSign\r\n", "correct_text": "Updates: 1034, 1035, 2136, 2181, 2308, 3225,                   M. Larson\r\n         3597, 3226                                             VeriSign\r\n", "notes": "RFC 4033, 4034 and 4035 all list 3007 as being updated but none of them update 3007.", "submit_date": "2011-12-07", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3044", "doc-id": "RFC4035", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Updates", "orig_text": "Updates: 1034, 1035, 2136, 2181, 2308, 3225,                   M. Larson\r\n         3007, 3597, 3226                                       VeriSign\r\n", "correct_text": "Updates: 1034, 1035, 2136, 2181, 2308, 3225,                   M. Larson\r\n         3597, 3226                                             VeriSign\r\n", "notes": "4033, 4034 and 4035 all list 3007 as being updated but none update 3007", "submit_date": "2011-12-07", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3045", "doc-id": "RFC4034", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Updates", "orig_text": "Updates: 1034, 1035, 2136, 2181, 2308, 3225,                   M. Larson\r\n         3007, 3597, 3226                                       VeriSign\r\n", "correct_text": "Updates: 1034, 1035, 2136, 2181, 2308, 3225,                   M. Larson\r\n         3597, 3226                                             VeriSign\r\n", "notes": "4033, 4034 and 4035 all list 3007 as being updated but none do so.", "submit_date": "2011-12-07", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3109", "doc-id": "RFC5931", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.2", "orig_text": "An integer scalar, x, acts on an ECC group element, Y, via repetitive\r\naddition (Y is added to itself x times), also called point\r\nmultiplication -- x * Y.\r\n\r\nThe inverse function for an ECC group is defined such that the sum of\r\nan element and its inverse is the \"point at infinity\" (the identity\r\nfor elliptic curve point addition).  In other words,\r\n\r\n    Q + inv(Q) = \"O\"\r\n", "correct_text": "An integer scalar, x, acts on an ECC group element, Y, via repetitive\r\naddition (Y is added to itself x times), also called point\r\nmultiplication -- x * Y.\r\n\r\nECC groups require the use of a mapping function, F(), which returns\r\nthe x-coordinate of a point on the elliptic curve. In other words,\r\nif point Y has coordinates Y.x and Y.y, then,\r\n\r\n    Y.x = F(Y)\r\n\r\nThe inverse function for an ECC group is defined such that the sum of\r\nan element and its inverse is the \"point at infinity\" (the identity\r\nfor elliptic curve point addition).  In other words,\r\n\r\n    Q + inv(Q) = \"O\"\r\n", "notes": "Section 2.8.4.1 mentions function F() as defined in 2.2.2 but there is no\r\nfunction F() in 2.2.2.", "submit_date": "2012-02-06", "submitter_name": "Dan Harkins", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4434", "doc-id": "RFC7539", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.6", "orig_text": "We take\r\nthe first 256 bits or the serialized state, and use those as the one-\r\ntime Poly1305 key: the first 128 bits are clamped and form \"r\", while\r\nthe next 128 bits become \"s\".", "correct_text": "We take\r\nthe first 256 bits of the serialized state, and use those as the one-\r\ntime Poly1305 key: the first 128 bits are clamped and form \"r\", while\r\nthe next 128 bits become \"s\".", "notes": "\u201cWe take the first 256 **or** the serialized state\u201d. Should be **of**. ", "submit_date": "2015-08-05", "submitter_name": "Lukasz Stelmach", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8712", "doc-id": "RFC5646", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5", "orig_text": "The \u2019Description\u2019 fields provided in the request MUST contain at least one description written or transcribed into the Latin script;", "correct_text": "The 'Description' fields provided in the request MUST contain at\r\nleast one description written or transcribed into the Latin script\r\n(i.e., using characters with Unicode Script property value Latin,\r\nas defined in UAX #24, plus characters with Script property value\r\nCommon or Inherited when used in conjunction with Latin characters);", "notes": "Same notes as for Errata 8711.", "submit_date": "2026-01-22", "submitter_name": "P\u00e9tur Ingi Egilsson", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-01-22 18:51:23"}, {"errata_id": "4559", "doc-id": "RFC6474", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "DEATHPLACE;VALUE=uri:geo:41.731944,-49.945833", "correct_text": "DEATHPLACE;VALUE=uri:geo:41.731944\\,-49.945833", "notes": "Section 3.4 in RFC 6350 states that all property values must have COMMA characters escaped with a BACKSLASH character. The DEATHPLACE property value in the example contains a comma. Therefore it must be escaped with a backslash.", "submit_date": "2015-12-07", "submitter_name": "Sylvain Berfini", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3046", "doc-id": "RFC4807", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5 & 5.1.2", "orig_text": "s5:\r\n\r\nThe filter section of the MIB module is composed of the different\r\ntypes of filters in the Policy Model.  It is made up of the\r\nspdTrueFilter, spdCompoundFilterTable, spdSubfiltersTable,\r\nspdIpHeaderFilterTable, spdIpOffsetFilterTable, spdTimeFilterTable,\r\nspdIpsoHeaderFilterTable.\r\n\r\ns5.1.2, paragraph 9:\r\n\r\nSpdIpHeaderFilterEntry(spdIpHeadFiltName = \"192.0.2.6\")\r\n     = (spdIpHeadFiltType            = 0x80,        -- sourceAddress\r\n        spdIpHeadFiltIPVersion       = 1,           -- IPv4\r\n        spdIpHeadFiltSrcAddressBegin = 0xC0000206,  -- 192.0.2.6\r\n        spdIpHeadFiltSrcAddressEnd   = 0xC0000206,  -- 192.0.2.6\r\n        spdIpHeadFiltRowStatus       = 4)           -- createAndGo\r\n", "correct_text": "s5:\r\n\r\nThe filter section of the MIB module is composed of the different\r\ntypes of filters in the Policy Model.  It is made up of the\r\nspdTrueFilter, spdCompoundFilterTable, spdSubfiltersTable,\r\nspdIpOffsetFilterTable, spdTimeFilterTable, and spdIpsoHeaderFilterTable.\r\n\r\ns5.1.2, paragraph 9:\r\n\r\nSpdIpOffsetHeaderFilterEntry(ipspIpOffFiltName = \"192.0.2.6\")\r\n     = (spdIpOffFiltOffset           = 0x0b         -- sourceAddress\r\n        spdIpOffFiltType             = 1            -- valueMatch\r\n        spdIpOffFiltValue            = 0xb0000206   -- 192.0.2.6\r\n        spdIpOffFiltRowStatus        = 4)           -- createAndGo", "notes": "The text quoted includes spdIpHeaderFitlerTable, but it does not exist in the MIB definition in Section 6.  In addition, spdIpHeaderFilterTable is referenced in the tutorial of Section 5.1.2.  This oversight is either a large editorial oversight in Section 5 or a large technical oversight in Section 6.\r\n\r\nAfter discussions with the authors, spdIpHeaderFitlerEntry needs to be removed from s5 and the spdIpHeaderFitlerTable example in s5.1.2 needs to be amended.", "submit_date": "2011-12-08", "submitter_name": "Paul Clark", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3047", "doc-id": "RFC6351", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A.", "orig_text": "# 6.4.1\r\nproperty-tel = element tel {\r\n    element parameters {\r\n      param-altid,\r\n      param-pid,\r\n      param-pref,\r\n      element type {\r\n        element text { \"work\" | \"home\" | \"text\" | \"voice\"\r\n                     | \"fax\" | \"cell\" | \"video\" | \"pager\"\r\n                     | \"textphone\" }+\r\n      }?,\r\n      param-mediatype\r\n    }?,\r\n    (value-text | value-uri)\r\n  }", "correct_text": "# 6.4.1\r\nproperty-tel = element tel {\r\n    element parameters {\r\n      param-altid,\r\n      param-pid,\r\n      param-pref,\r\n      element type {\r\n        element text { \"work\" | \"home\" | \"text\" | \"voice\"\r\n                     | \"fax\" | \"cell\" | \"video\" | \"pager\"\r\n                     | \"textphone\" | x-name | iana-token }+\r\n      }?,\r\n      param-mediatype\r\n    }?,\r\n    (value-text | value-uri)\r\n  }", "notes": "x-name and iana-token is missing in a couple of explicit listings of values, the above is just an example. RFC6350 allows extending these values with own x-names though.\r\n\r\nThis should be corrected in:\r\nparam-type\r\nparam-calscale\r\nproperty-tel", "submit_date": "2011-12-08", "submitter_name": "Christian Mollekopf", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3048", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6.6.  Rese", "orig_text": "   When resent fields are used, the \"Resent-From:\" and \"Resent-Date:\"\r\n   fields MUST be sent.  The \"Resent-Message-ID:\" field SHOULD be sent.", "correct_text": "   When resent fields are used, the \"Resent-From:\" and \"Resent-Date:\"\r\n   fields MUST be set.  The \"Resent-Message-ID:\" field SHOULD be set.", "notes": "[Verifier note: The original report only noted the second use of the word \"sent\". I have updated to include both. I have marked as \"Hold\" because (a) I believe the meaning is clear in the current and (b) it is not obvious that \"set\" is the correct word here; perhaps \"used\" is better. Left for an editing pass when this moves to Standard.]", "submit_date": "2011-12-08", "submitter_name": "Pan GaoYong", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3049", "doc-id": "RFC5969", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "By restricting the 6rd domain to within a provider\r\nnetwork, a CE only needs to accept packets from a single or small set\r\nof known 6rd BR IPv4 addresses.", "correct_text": "By restricting the 6rd domain to within a provider\r\nnetwork, a CE only needs to accept packets from a single or small set\r\nof known 6rd BR IPv4 addresses and from other CEs within the 6rd domain.", "notes": "A CE also needs to accept packets from other CEs within the 6rd domain.\r\nThis happens when, within a 6rd domain, two customer sites want to communicate.\r\nReference: RFC5569 section 3", "submit_date": "2011-12-11", "submitter_name": "Alessandro Cortiana", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3050", "doc-id": "RFC6321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   type-bysecond = element bysecond {\r\n       xsd:positiveInteger\r\n   }\r\n\r\n   type-byminute = element byminute {\r\n       xsd:positiveInteger\r\n   }\r\n\r\n   type-byhour = element byhour {\r\n       xsd:positiveInteger\r\n   }", "correct_text": "type-bysecond = element bysecond {\r\n       xsd:nonNegativeInteger\r\n   }\r\n\r\n   type-byminute = element byminute {\r\n       xsd:nonNegativeInteger\r\n   }\r\n\r\n   type-byhour = element byhour {\r\n       xsd:nonNegativeInteger\r\n   }", "notes": "Those values can be 0 (per RFC 5545) and xsd:positiveInteger doesn't allow that.", "submit_date": "2011-12-13", "submitter_name": "Christian Mollekopf", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3051", "doc-id": "RFC3819", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "17", "orig_text": "e.g., to the Next-Hop Resolution Protocol [RFC2322", "correct_text": "e.g., to the Next-Hop Resolution Protocol [RFC2332", "notes": "RFC2322 is van den Hout, K., Koopal, A. and R. van Mook,\"Management of IP numbers by peg-dhcp\", RFC 2322, 1 April 1998.\r\nRFC2332 is NBMA Next Hop Resolution Protocol (NHRP). J. Luciani, D. Katz, D.Piscitello, B. Cole, N. Doraswamy. April 1998", "submit_date": "2011-12-13", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3052", "doc-id": "RFC6325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5.2", "orig_text": "(up to the maximum of {j,k})", "correct_text": "(up to k if j is zero or the minimum of ( j, k) if j is\r\nnon-zero)", "notes": "", "submit_date": "2011-12-15", "submitter_name": "Donald E. Eastlake, 3rd", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4435", "doc-id": "RFC4918", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.8.5", "orig_text": "", "correct_text": "The 404 (Not Found) status code indicates that the origin server did\r\n   not find a current representation for the target resource or is not\r\n   willing to disclose that one exists.  A 404 status code does not\r\n   indicate whether this lack of representation is temporary or\r\n   permanent; the 410 (Gone) status code is preferred over 404 if the\r\n   origin server knows, presumably through some configurable means, that\r\n   the condition is likely to be permanent.\r\n\r\n   ", "notes": "The case of the resource being copied not existing is not covered.  I assume that a 404 error is appropriate, but that is my assumption.", "submit_date": "2015-08-05", "submitter_name": "Worik Stanton", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4560", "doc-id": "RFC7622", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   | 18| <juliet@example.com/ foo>    | Leading space in resourcepart |", "correct_text": "[nothing]", "notes": "Example 18 is wrong because a leading space is currently allowed by RFC 7622 (at least, it is not disallowed by the OpaqueString profile defined in RFC 7613). It is true that leading and trailing spaces are disallowed by the Nickname profile, but we do not reference that here. This example should be removed in any updates to RFC 7622.", "submit_date": "2015-12-07", "submitter_name": "Peter Saint-Andre", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3054", "doc-id": "RFC6204", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   L-13:  If the delegated prefix changes, i.e., the current prefix is\r\n          replaced with a new prefix without any overlapping time\r\n          period, then the IPv6 CE router MUST immediately advertise the\r\n          old prefix with a Preferred Lifetime of zero and a Valid\r\n          Lifetime of the lower of the current Valid Lifetime and 2\r\n          hours (which must be decremented in real time) in a Router\r\n          Advertisement message as described in Section 5.5.3, (e) of\r\n          [RFC4862].", "correct_text": "   L-13:  If the delegated prefix changes, i.e., the current prefix is\r\n          replaced with a new prefix without any overlapping time\r\n          period, then the IPv6 CE router MUST immediately advertise the\r\n          old prefix with a Preferred Lifetime of zero and a Valid\r\n          Lifetime of either a) zero, or b) the lower of the current\r\n          Valid Lifetime and 2 hours (which must be decremented in real\r\n          time), in a Router Advertisement message as described in\r\n          Section 5.5.3, (e) of [RFC4862].", "notes": "The original text in L-13 prohibits implementers from transmitting Valid Lifetime = 0 whenever a prefix needs to be invalidated. It should not, because transmitting VL=0 is easier to implement than sending \"the lower of the current Valid Lifetime and 2 hours (which must be decremented in real time)\".\r\n\r\nTransmitting Valid Lifetime = 0 has the exact same effect on a host as the procedure described in the original text, i.e., it will the host to lower (but never raise) the remaining valid lifetime to 7200 seconds.", "submit_date": "2011-12-16", "submitter_name": "Tore Anderson", "verifier_id": "", "verifier_name": "ron bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3055", "doc-id": "RFC4130", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "      Disposition: automatic-action/MDN-sent-automatically;\r\n      processed/warning: duplicate-document\r\n\r\n      Disposition: automatic-action/MDN-sent-automatically;\r\n        processed/warning: duplicate-document\r\n      Warning: An identical message already exists at the\r\n        destination server.\r\n\r\n      Disposition: automatic-action/MDN-sent-automatically;\r\n        processed/warning\r\n      Warning: duplicate-document", "correct_text": "(Remove/replace warning examples from section '7.5.6.  Backward Compatibility with Disposition Type, Modifier, and Extension' - see notes)\r\n\r\n9.3.  Replay Remark\r\n\r\n   Because business data documents normally contain transaction ids,\r\n   replays (such as resends of not-yet-acknowledged messages) are\r\n   discarded as part of the normal process of duplicate detection.\r\n   Detection of duplicates by Message-Id or by business transaction\r\n   identifiers is recommended.\r\n\r\n(Add following comment to above section.)\r\n   If duplicate is detected the disposition should be returned with \r\n   'processed' and without an error or warning status unless other\r\n   errors occurred. Sending an error or warning on a duplicate can\r\n   result in an endless communication loop between retransmissions\r\n   and resulting error/warnings.", "notes": "Endless communication loops are a problem with AS2 and this is only supported by the RFC and its multiple examples of 'duplicate-document'. What most commonly happens is a file is sent synchronously to one of our partners but our two minute timeout in holding the connection for an MDN is reached. The recipients AS2 software generated the MDN but doesn't recognize the connection is no longer available for MDN return and as a result non-repudiation of receipt has not occurred. The file is later resent to the partner who then promptly sends an MDN with a processed/warning condition again not meeting our threshold of non-repudiation of receipt.\r\n\r\nWe have three or four occurrences of this exact scenario occur every week and because the RFC undercuts our ability to get AS2 software clients to address this issue at all many of our supplier are forced to manually mark their files as transmitted manually through a mailbox UI we have online.\r\n\r\nWe understand the need for duplicate detection and have our own in place but implemented in a way that endless communication loops cannot occur. Balanced duplicate detection is advised because to stringent of duplicate detection especially done within the communication protocol itself if problematic. An example of this would be partner who receive a file but then have issues in processing the data and did not take an archive of their data before processing as many do. These partners have requested our system to resend their data AS2 only to find the data is rejected before the file is received because it has the same 'message-id' as it did the first time it was sent and their AS2 software still have the message-id stored in their software's receiving records.\r\n\r\nAgain I support duplicate checking but it needs to be better defined for AS2 especially the elimination of the duplicate warning with the understanding of the unending communication loops that it can create through no fault of anyone just a missed MDN on the initial communication is all it takes.\n --VERIFIER NOTES-- \nAside from this being a poorly formatted report (it does not give proper original/change text and should probably have been split into multiple errata), none of this is at all appropriate for an erratum. This is a change to the examples and to add an additional warning given operational experience. This needs to be done via a document update, not an erratum.   ", "submit_date": "2011-12-20", "submitter_name": "JP McCrory", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4436", "doc-id": "RFC7231", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.5", "orig_text": "If a DELETE method is successfully applied, the origin server SHOULD\r\nsend a 202 (Accepted) status code if the action will likely succeed\r\nbut has not yet been enacted, a 204 (No Content) status code if the\r\naction has been enacted and no further information is to be supplied,\r\nor a 200 (OK) status code if the action has been enacted and the\r\nresponse message includes a representation describing the status.", "correct_text": "If a DELETE method is successfully applied, the origin server SHOULD\r\nsend a 202 (Accepted) status code if the action will likely succeed\r\nbut has not yet been enacted; a 204 (No Content) status code if the\r\naction has been enacted and no further information is to be supplied;\r\nor a 200 (OK) status code if the action has been enacted and the\r\nresponse message includes a representation describing the status.", "notes": "Using a semicolon creates a stronger delineation of the different options. If you are just quickly trying to parse what status to return if the delete hasn't happened yet and you quickly read \"has not yet been enacted, a 204 (No Content)\" you could incorrectly read that as return a 204. The semicolon makes it more obvious that \"enacted\" is the end of that thought and to scan backwards where as the comma in this instance requires knowing the structure of the rest of the paragraph.\r\n\r\n----- Verifier Notes -----\r\nThere's no reason to use semicolons to delimit this list, because the list items themselves don't contain commas.  Still, the reporter's confusion is noted.  Perhaps a bullet list would be better in this case:\r\n\r\n-------\r\nIf a DELETE method is successfully applied, the origin server SHOULD\r\nsend\r\n\r\n  - a 202 (Accepted) status code if the action will likely succeed\r\n    but has not yet been enacted,\r\n\r\n  - a 204 (No Content) status code if the action has been enacted and\r\n    no further information is to be supplied, or\r\n\r\n  - a 200 (OK) status code if the action has been enacted and the\r\n    response message includes a representation describing the status.\r\n-------", "submit_date": "2015-08-06", "submitter_name": "Aron Duby", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4437", "doc-id": "RFC7605", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "It provides designer guidance to requesters or users of port numbers on\r\nhow to interact with IANA using the processes defined in RFC 6335;\r\nthus, this document complements (but does not update) that document.\r\nIt provides guidelines for designers regarding how to interact with\r\nthe IANA processes defined in RFC 6335, thus serving to complement\r\n(but not update) that document.", "correct_text": "It provides designer guidance to requesters or users of port numbers on\r\nhow to interact with IANA using the processes defined in RFC 6335;\r\nthus, this document complements (but does not update) that document.", "notes": "I think those two sentences say exactly the same thing and that the presence of both indicates that someone wasn't paying quite enough attention during AUTH48 or earlier.  If they are intended to communicate different information, it isn't clear what that is and the result is massively confusing.\r\n\r\n-- Verifier Notes --\r\nThe sentence was duplicated by mistake.  ", "submit_date": "2015-08-07", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4438", "doc-id": "RFC6561", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1.5", "orig_text": "   Domain Name System (DNS) fast fluxing occurs when a domain is bound\r\n   in DNS using A records to multiple IP addresses, ...", "correct_text": "   Domain Name System (DNS) fast fluxing occurs when a domain is found\r\n   in DNS using A records to multiple IP addresses, ...", "notes": "", "submit_date": "2015-08-08", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-19 22:44:19"}, {"errata_id": "4974", "doc-id": "RFC7665", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1.4", "orig_text": "One or more service functions can be involved in the delivery of\r\nadded-value services.  A non-exhaustive list of abstract service\r\nfunctions includes: firewalls, WAN and application acceleration,\r\nDeep Packet Inspection (DPI), Lawful Intercept (LI), server load\r\nbalancing, NAT44 [RFC3022], NAT64 [RFC6146], NPTv6 [RFC6296],\r\nHOST_ID injection, HTTP Header Enrichment functions, and TCP\r\noptimizer.", "correct_text": "One or more service functions can be involved in the delivery of\r\nadded-value services.  A non-exhaustive list of abstract service\r\nfunctions includes: firewalls, WAN and application acceleration,\r\nDeep Packet Inspection (DPI), Lawful Intercept (LI), server load\r\nbalancing, NAT44 [RFC3022], NAT64 [RFC6146], NPTv6 [RFC6296],\r\nHOST_ID injection, HTTP Header Enrichment functions, TCP\r\noptimizer, Parental control etc.", "notes": "Parental control can be added in the non-exhaustive list of abstract service functions. Also this list cannot be fixed, so etc an be added at the end of the list.\n --VERIFIER NOTES-- \n   The list specifically says that it is non-exhaustive.  Adding more examples and an etc is not needed.", "submit_date": "2017-03-21", "submitter_name": "Phaneendra Manda", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3059", "doc-id": "RFC6145", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "<Removed from RFC 2765 where it had existed after Destination Address \r\nfield description> ", "correct_text": "   If any of an IPv6 Hop-by-Hop Options header, Destination Options \r\n   header, or Routing header with the Segments Left field equal to zero \r\n   are present in the IPv6 packet, those IPv6 extension headers MUST be \r\n   ignored (i.e., there is no attempt to translate the extension headers) \r\n   and the packet translated normally.  However, the Total Length field \r\n   and the Protocol field are adjusted to \"skip\" these extension headers.", "notes": "Since the extension headers shall be removed from the packet while translating to IPv4 the translator should deduct from IPv4 Total Length the length of all the extension headers present in the original IPv6 packet except ESP header (in transport mode). AH is not supposed to be translated. RFC 2765 had explicitly stated this and RFC 6145 also should continue to have this stated. Copied the correction text from RFC 2765.\r\n\r\n\r\nA BEHAVE WG chair said on 1/19/2012:\r\n  I believe the filer is correct.  Although the intent might be clear from Section 4:\r\n  \" As with [RFC2765], the translating function specified in this\r\n     document does not translate any IPv4 options, and it does not\r\n     translate IPv6 extension headers except the Fragment Header.\"\r\n\r\n  Although the Length portion of the omitted paragraph is actually covered by\r\n  errata ID 3060 above (and we don't need 2 technical errata for the same thing)\r\n  the omitted paragraph does contain a statement about how to fill in the \r\n  Protocol field when IPv6 extension headers were present, which is nowhere \r\n  else in the doc and might not be obvious to an implementer from the \r\n  section 4 text.\r\n", "submit_date": "2011-12-23", "submitter_name": "Gandhar Gokhale", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3060", "doc-id": "RFC6145", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "   Total Length:  Payload length value from IPv6 header, minus 8 for the\r\n      Fragment Header, plus the size of the IPv4 header.", "correct_text": "   Total Length: If the Next Header field of the Fragment Header is not \r\n      an extension header (except ESP) then Total Length MUST be set to \r\n      Payload Length value from IPv6 header, minus length of extension \r\n      headers up to Fragmentation Header, minus 8 for the Fragment \r\n      Header, plus the size of the IPv4 header. If the Next Header \r\n      field of the Fragment Header is an extension header (except ESP) \r\n      then the packet SHOULD be dropped and logged.\r\n", "notes": "If the fragmentable part (as described in RFC 2460) of the original unfragmented IPv6 packet had extension headers then the translator can not calculate the total length of the IPv4 fragment for non-initial fragments. In case of initial fragment also, only if all the extension headers of the fragmentable part are contained within the initial fragment itself then translator can know of how much length to deduct from the total length.\r\n\r\n\r\nA BEHAVE WG chair said on 1/19/2012:\r\n  I believe the filer is correct.  The RFC does not contain the right statement with\r\n  respect to handling of IPv6 extension headers.   It says they're skipped when \r\n  filling in the payload but it doesn't say they're skipped when filling in the\r\n  length field.\r\n", "submit_date": "2011-12-23", "submitter_name": "Gandhar Gokhale", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3212", "doc-id": "RFC86", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "page 2", "orig_text": "The imprecise specification of character size is intended to take cognizance                         \r\n                                                                                                     \r\nof the existance of character drawing hardware which is capable of producing                         \r\n                                                                                                     \r\nonly one or a few character sizes.", "correct_text": "The imprecise specification of character size is intended to take cognizance                         \r\n                                                                                                     \r\nof the existence of character drawing hardware which is capable of producing                         \r\n                                                                                                     \r\nonly one or a few character sizes.", "notes": "\"existance\" should be \"existence\"", "submit_date": "2012-05-05", "submitter_name": "Yi, EungJun", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3213", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.9", "orig_text": "Segments with higher begining sequence\r\nnumbers may be held for later processing.\r\n", "correct_text": "Segments with higher beginning sequence\r\nnumbers may be held for later processing.\r\n", "notes": "\"begning\" should be \"beginning\"", "submit_date": "2012-05-05", "submitter_name": "Yi, EungJun", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3214", "doc-id": "RFC2397", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "   Attribute values in [RFC2045] are allowed to be either represented as\r\n   tokens or as quoted strings. However, within a \"data\" URL, the\r\n   \"quoted-string\" representation would be awkward, since the quote mark\r\n   is itself not a valid urlchar. For this reason, parameter values\r\n   should use the URL Escaped encoding instead of quoted string if the\r\n   parameter values contain any \"tspecial\".", "correct_text": "", "notes": "This advice does not work when the character is a delimiter such as \";\".\r\n\r\nExample media type:\r\n\r\n  text/plain;foo=\"bar;charset=iso-8859-1\";charset=UTF-8\r\n\r\n...represented as-is in data uri:\r\n\r\n  data:text/plain;foo=%22bar;charset=iso-8859-1%22;charset=UTF-8,...\r\n\r\n...but following the advice from Section 3:\r\n\r\n  data:text/plain;foo=bar;charset=iso-8859-1;charset=UTF-8,...\r\n\r\nwhich makes the charset parameter ambiguous.\r\n\r\nProposal for document update:\r\n\r\n1) Keep the text pointing out double quotes will look awkward.\r\n\r\n2) Insist on them being handled as per RFC 2045, when present.\r\n\r\n3) Either remove the last sentence (after checking whether it's done in practice), or clarify which additional non-token characters are allowed here.", "submit_date": "2012-05-06", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4439", "doc-id": "RFC7240", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "     preference = token [ BWS \"=\" BWS word ]\r\n                  *( OWS \";\" [ OWS parameter ] )\r\n     parameter  = token [ BWS \"=\" BWS word ]", "correct_text": "     preference = preference-parameter *( OWS \";\" [ OWS\r\n                  preference-parameter ] )\r\n     preference-parameter = parameter / token\r\n", "notes": "Section 1.1 incorrectly states that \"word\" is defined in RFC 7230.  It is not.  Therefore, the syntax is completely under-specified.\r\n\r\nThe \"parameter\" rule, as defined in RFC 7231, is used in lots of other header field definitions successfully.  The only drawback is that \"parameter\" doesn't permit the use of \"OWS\" either side of the \"=\" character.\r\n\r\nThis change would also require changes to Section 1.1.", "submit_date": "2015-08-09", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4975", "doc-id": "RFC4122", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "The UUID format is 16 octets; some bits of the eight octet variant \r\nfield specified below determine finer structure.", "correct_text": "The UUID format is 16 octets; some bits of the variant \r\nfield specified below determine finer structure.", "notes": "The original wording implies the variant field is 8 octets long. It is between 1 and 3 bits long. An alternative correction would be:\r\n\r\n\"The UUID format is 16 octets; some bits of the variant \r\nfield in octet 8 specified below determine finer structure.\"", "submit_date": "2017-03-22", "submitter_name": "Joseph Boon", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-24 16:06:49"}, {"errata_id": "3061", "doc-id": "RFC6145", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "   Fragment Offset:  Copied from the Fragment Offset field of the IPv6\r\n      Fragment Header.", "correct_text": "   Fragment Offset:  If the Next Header field of the Fragment Header is \r\n      not an extension header (except ESP) then Fragment Offset MUST be \r\n      copied from the Fragment Offset field of the IPv6 Fragment Header. \r\n      If the Next Header field of the Fragment Header is an extension \r\n      header (except ESP) then the packet SHOULD be dropped and logged.", "notes": "If the fragmentable part (as described in RFC 2460) of the original unfragmented IPv6 packet had extension headers then the translator can not calculate the offset of the IPv4 fragment for non-initial fragments. If extension headers are present in the fragmentable part then the fragment offset value of the IPv6 header includes length of the extension headers also. Since translator strips of the IPv6 extension headers the fragment offset value set by the sender of IPv6 fragments can not match that received by the IPv4 receiver and the reassembly will fail. For non-initial fragments the translator does not have the knowledge of this delta when there is no state maintained.\r\n\r\nThe legth issue stated in erratum 2 is not in itself sufficient to advocate packet drop. However, the offset issue is sufficient to advocate packet drop as the reassembly is bound to fail. Therefore I'm putting a SHOULD in both cases.", "submit_date": "2011-12-23", "submitter_name": "Gandhar Gokhale", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3062", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4.2", "orig_text": "   Special notes:  The property can include tye \"PREF\" parameter to\r\n      indicate a preferred-use email address when more than one is\r\n      specified.", "correct_text": "   Special notes:  The property can include the \"PREF\" parameter to\r\n      indicate a preferred-use email address when more than one is\r\n      specified.", "notes": "Simple misspelling of \"the\"", "submit_date": "2011-12-25", "submitter_name": "Peter K. Sheerin", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3063", "doc-id": "RFC2236", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6", "orig_text": "   - \"set timer\", setting the timer to its maximum value [Version 1\r\n     Router Present Timeout] and (re)starting it.\r\n\r\n                              ________________\r\n                             |                |\r\n                             |                |\r\n                             |   No IGMPv1    |\r\n                             |     Router     |\r\n                             |    Present     |\r\n                             |                |\r\n                        ---->|                |----\r\n                       |     |                |    |\r\n                       |     |________________|    |\r\n         timer expires |                           | IGMPv1 query\r\n                       |      ________________     | received\r\n                       |     |                |    | (set timer)\r\n                       |     |                |    |\r\n                       |     |                |    |\r\n                        -----|     IGMPv1     |<---\r\n                             |     Router     |\r\n                             |    Present     |\r\n                             |                |\r\n                        ---->|                |----\r\n                       |     |________________|    |\r\n                       |                           |\r\n                       | IGMPv1 query received     |\r\n                       | (set timer)               |\r\n                        ---------------------------", "correct_text": "   - \"set timer\", setting the timer to its maximum value [Version 1\r\n     Router Present Timeout] and starting it.\r\n   - \"reset timer\", resetting the timer to its maximum value [Version 1\r\n     Router Present Timeout] and restarting it.\r\n\r\n                              ________________\r\n                             |                |\r\n                             |                |\r\n                             |   No IGMPv1    |\r\n                             |     Router     |\r\n                             |    Present     |\r\n                             |                |\r\n                        ---->|                |----\r\n                       |     |                |    |\r\n                       |     |________________|    |\r\n         timer expires |                           | IGMPv1 query\r\n                       |      ________________     | received\r\n                       |     |                |    | (set timer)\r\n                       |     |                |    |\r\n                       |     |                |    |\r\n                        -----|     IGMPv1     |<---\r\n                             |     Router     |\r\n                             |    Present     |\r\n                             |                |\r\n                        ---->|                |----\r\n                       |     |________________|    |\r\n                       |                           |\r\n                       | IGMPv1 query received     |\r\n                       | (reset timer)             |\r\n                        ---------------------------", "notes": "Resetting timer is obviously different than setting timer.\n --VERIFIER NOTES-- \nI am rejecting this Erratum mainly because RFC 2236 has been obsoleted by RFC 3376, but also because I don't agree that the change is needed. The original text covers the two operations adequately. ", "submit_date": "2011-12-26", "submitter_name": "Jon Hak Song", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3064", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.5.4", "orig_text": "   The LAYOUTCOMMIT operation is responsible for committing a modified\r\n   layout to the metadata server.  The data should be written and\r\n   committed to the appropriate storage devices before the LAYOUTCOMMIT\r\n   occurs.  The scope of the LAYOUTCOMMIT operation depends on the\r\n   storage protocol in use.", "correct_text": "   The LAYOUTCOMMIT operation is responsible for committing a modified\r\n   layout to the metadata server.  The data should be written and\r\n   committed to the appropriate storage devices before the LAYOUTCOMMIT\r\n   occurs.  The scope of data committed by a LAYOUTCOMMIT operation is\r\n   specific to the type of layout because that scope depends on the\r\n   storage protocol in use.", "notes": "Errata 1 of 5 to deprecate loca_offset and loca_length arguments to LAYOUTCOMMIT.", "submit_date": "2011-12-27", "submitter_name": "David Black", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4979", "doc-id": "RFC7643", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.5", "orig_text": "\"location\": \"https://example.com/v2/ServiceProviderConfig\",\r\n", "correct_text": "\"location\": \"https://example.com/v2/ServiceProviderConfigs\"\r\n", "notes": "Per the details provided on the SCIM website http://www.simplecloud.info/#overview, the endpoint should be /ServiceProviderConfigs. A trailing \"s\" is missing. The SCIM implementations of major service providers like Facebook, Salesforce, Slack implement /ServiceProviderConfigs\r\n\r\nAlso, it would be better to replace all occurrences of the word \"ServiceProviderConfig\" with \"ServiceProviderConfigs\" wherever applicable, so as to remain sync with the endpoint.\n --VERIFIER NOTES-- \nThe ServiceProviderConfig endpoint is singular.  Simplecloud.info is/was incorrect.", "submit_date": "2017-03-24", "submitter_name": "asgs", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:22:45"}, {"errata_id": "3121", "doc-id": "RFC4480", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2", "orig_text": "                 <xs:element name=\"looking-for-work\"\r\n                   type=\"empty\" />\r\n                 <xs:element name=\"meal\"\r\n                   type=\"empty\" />", "correct_text": "                 <xs:element name=\"looking-for-work\"\r\n                   type=\"empty\" />\r\n                 <xs:element name=\"lunch\"\r\n                   type=\"empty\" />\r\n                 <xs:element name=\"meal\"\r\n                   type=\"empty\" />", "notes": "Erratum #2959 claimed that the element \"lunch\" needs to be removed from the specification since it is not included in the schema. However, the schema was in error. This erratum corrects the schema so that, if approved, IANA can update the information at http://www.iana.org/assignments/xml-registry/schema/pidf/status/rpid.xsd\r\n\r\nImplementors using the schema as updated by this erratum should note that if they produce documents that include the \"lunch\" element, then these documents might be rejected as invalid by implementations using the original schema.", "submit_date": "2012-02-14", "submitter_name": "Peter Saint-Andre", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3122", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.", "orig_text": "   enum {\r\n       hello_request(0), client_hello(1), server_hello(2),\r\n       certificate(11), server_key_exchange (12),\r\n       certificate_request(13), server_hello_done(14),\r\n       certificate_verify(15), client_key_exchange(16),\r\n       finished(20)\r\n       (255)\r\n   } HandshakeType;\r\n", "correct_text": "   enum {\r\n       hello_request(0), client_hello(1), server_hello(2),\r\n       certificate(11), server_key_exchange (12),\r\n       certificate_request(13), server_hello_done(14),\r\n       certificate_verify(15), client_key_exchange(16),\r\n       finished(20),\r\n       (255)\r\n   } HandshakeType;\r\n", "notes": "The comma after finished(20) is missing in the original text.", "submit_date": "2012-02-16", "submitter_name": "Daniel Otte", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3215", "doc-id": "RFC6455", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3", "orig_text": "The unpredictability of the masking key is\r\nessential to prevent authors of malicious applications from selecting\r\nthe bytes that appear on the wire.", "correct_text": "", "notes": "I don't see how the client-to-server masking prevents \"authors of malicious applications from selecting the bytes that appear on the wire\".\r\n\r\nMaliciously changing the contents of a message simply requires a few more steps than it would without masking, as far as I can tell.\r\n\r\nI'm quite new at networking, so perhaps I'm missing something.  Thank you.\r\n --VERIFIER NOTES-- \r\nNot appropriate for errata; please take your input to the HyBi working group as it continues its efforts.   ", "submit_date": "2012-05-06", "submitter_name": "Jesse Katzman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3065", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12.7.4", "orig_text": "      If the metadata server's\r\n      consistency checks on loca_layoutupdate succeed, then the metadata\r\n      server MUST commit the data (as described by the loca_offset,\r\n      loca_length, and loca_layoutupdate fields of the arguments) that\r\n      was written to the storage device. If the metadata server's\r\n      consistency checks on loca_layoutupdate fail, the metadata server\r\n      rejects the LAYOUTCOMMIT operation and makes no changes to the\r\n      file system.  However, any time LAYOUTCOMMIT with loca_reclaim\r\n      TRUE fails, the pNFS client has lost all the data in the range\r\n      defined by <loca_offset, loca_length>.  ", "correct_text": "      If the metadata server's\r\n      consistency checks on loca_layoutupdate succeed, then the metadata\r\n      server MUST commit the changed data that was written to the storage\r\n      device within the scope of the LAYOUTCOMMIT operation.\r\n      If the metadata server's\r\n      consistency checks on loca_layoutupdate fail, the metadata server\r\n      rejects the LAYOUTCOMMIT operation and makes no changes to the\r\n      file system.  However, any time LAYOUTCOMMIT with loca_reclaim\r\n      TRUE fails, the pNFS client may have lost all uncommitted\r\n\tdata within the scope of the failed LAYOUTCOMMIT operation.  ", "notes": "Errata 2 of 5 to deprecate loca_offset and loca_length arguments to LAYOUTCOMMIT.", "submit_date": "2011-12-27", "submitter_name": "David Black", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3066", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12.7.4", "orig_text": "   o  The client does not have a copy of the data in its memory and the\r\n      metadata server is no longer in its grace period; i.e., the\r\n      metadata server returns NFS4ERR_NO_GRACE.  As with the scenario in\r\n      the above bullet point, the failure of LAYOUTCOMMIT means the data\r\n      in the range <loca_offset, loca_length> lost.  The defense against\r\n      the risk is the same -- cache all written data on the client until\r\n      a successful LAYOUTCOMMIT.", "correct_text": "   o  The client does not have a copy of the data in its memory and the\r\n      metadata server is no longer in its grace period; i.e., the\r\n      metadata server returns NFS4ERR_NO_GRACE.  As with the scenario in\r\n      the above bullet point, the failure of LAYOUTCOMMIT means the data\r\n      in the scope of that LAYOUTCOMMIT may have been lost.  The defense\r\n      against the risk is the same -- cache all written data on the client\r\n      until a successful LAYOUTCOMMIT.", "notes": "Errata 3 of 5 to deprecate loca_offset and loca_length arguments to LAYOUTCOMMIT.", "submit_date": "2011-12-27", "submitter_name": "David Black", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7047", "doc-id": "RFC9235", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.4", "orig_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 6a 21 40 00 ff 06 32 1f ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 da 1c d3 84 4a 70 38 9b ed 72\r\n     c0 18 01 00 04 49 00 00 01 01 08 0a ce 45 98 38\r\n     00 01 85 e1 1d 10 54 3d 5c 04 0f d9 23 33 04 76\r\n     5c 09 82 f4 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da c0 00 b4 ac 1b 1c 1d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da c0 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "correct_text": "   IPv4/TCP:\r\n\r\n     45 e0 00 87 6a 21 40 00 ff 06 32 1f ac 1b 1c 1d\r\n     0a 0b 0c 0d 00 b3 da 1c d3 84 4a 70 38 9b ed 72\r\n     c0 18 01 00 4b e9 00 00 01 01 08 0a ce 45 98 38\r\n     00 01 85 e1 1d 10 54 3d 5c 04 0f d9 23 33 04 76\r\n     5c 09 82 f4 ff ff ff ff ff ff ff ff ff ff ff ff\r\n     ff ff ff ff 00 43 01 04 da c0 00 b4 ac 1b 1c 1d\r\n     26 02 06 01 04 00 01 00 01 02 02 80 00 02 02 02\r\n     00 02 02 42 00 02 06 41 04 00 00 da c0 02 08 40\r\n     06 00 64 00 01 01 00\r\n", "notes": "The TCP checksum shown (0x0449) is wrong, it should be 0x4be9.", "submit_date": "2022-07-25", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:50:14"}, {"errata_id": "3080", "doc-id": "RFC5988", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "  link-value     = \"<\" URI-Reference \">\" *( \";\" link-param )\r\n  link-param     = ( ( \"rel\" \"=\" relation-types )\r\n                 | ( \"anchor\" \"=\" <\"> URI-Reference <\"> )\r\n                 | ( \"rev\" \"=\" relation-types )\r\n                 | ( \"hreflang\" \"=\" Language-Tag )\r\n                 | ( \"media\" \"=\" ( MediaDesc | ( <\"> MediaDesc <\"> ) ) )\r\n                 | ( \"title\" \"=\" quoted-string )\r\n                 | ( \"title*\" \"=\" ext-value )\r\n                 | ( \"type\" \"=\" ( media-type | quoted-mt ) )\r\n                 | ( link-extension ) )\r\n", "correct_text": "  link-value     = \"<\" URI-Reference \">\" \r\n                     [( \";\" rel-param )] \r\n                     *( \";\" anchor-param ) \r\n                     *( \";\" rev-param ) \r\n                     *( \";\" hreflang-param ) \r\n                     [( \";\" media-param )] \r\n                     [( \";\" title-param )] \r\n                     [( \";\" title-alt-param )] \r\n                     [( \";\" type-param )] \r\n                     *( \";\" link-extension )\r\n\r\n  rel-param       = ( \"rel\" \"=\" relation-types )\r\n  anchor-param    = ( \"anchor\" \"=\" <\"> URI-Reference <\"> )\r\n  rev-param       = ( \"rev\" \"=\" relation-types )\r\n  hreflang-param  = ( \"hreflang\" \"=\" Language-Tag )\r\n  media-param     = ( \"media\" \"=\" ( MediaDesc | ( <\"> MediaDesc <\"> ) ) )\r\n  title-param     = ( \"title\" \"=\" quoted-string )\r\n  title-alt-param = ( \"title*\" \"=\" ext-value )\r\n  type-param      = ( \"type\" \"=\" ( media-type | quoted-mt ) )", "notes": "The ABNF for link-value is misleading. It defines link-value as allowing any number of link-params. However, only upon reading the text of both sections 5.3 and 5.4 does the reader discover that \"rel\", \"media\", \"title\", \"title*\", and \"type\" are specifically allowed only once. Further, the text of section 5.2 is ambiguous as to whether or not multiple anchors are allowed.\n --VERIFIER NOTES-- \nMark Nottingham notes:\r\n\r\n###\r\n\r\nThe proposed ABNF makes ordering significant, which is NOT specified or intended. ABNF can never capture all of the constraints on syntax; that's why we have prose.\r\n\r\n###", "submit_date": "2012-01-05", "submitter_name": "Matt Parker", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3081", "doc-id": "RFC5806", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "ISUP and ISDN define the following diversion reasons:", "correct_text": "ISDN defines the following diversion reasons:", "notes": "The listed reasons (code and text) are not ISUP but ISDN (DSS.1)", "submit_date": "2012-01-05", "submitter_name": "Marianne Mohali", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3082", "doc-id": "RFC5806", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "Mapping of ISUP/ISDN reason codes to Diversion reason codes is\r\nperformed as follows:\r\nISUP/ISDN reason code Diversion reason code\r\n0001                  \"user-busy\"\r\n0010                  \"no-answer\"\r\n1111                  \"unconditional\"\r\n1010                  \"deflection\"\r\n1001                  \"unavailable\"\r\n0000                  all others", "correct_text": "Mapping between ISDN reason codes and Diversion reason codes is\r\nperformed as follows:\r\nISDN reason code      Diversion reason code\r\n0001                  \"user-busy\"\r\n0010                  \"no-answer\"\r\n1111                  \"unconditional\"\r\n1010                  \"deflection\"\r\n1001                  \"unavailable\"\r\n0000                  all others\r\nall others            \"unknown\"", "notes": "The reason codes are not ISUP but ISDN (ISUP deleted).\r\nMissing the \"all others\" line in the ISDN to Diversion header mapping.", "submit_date": "2012-01-05", "submitter_name": "Marianne Mohali", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3067", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "18.42.3", "orig_text": "   The LAYOUTCOMMIT operation commits changes in the layout represented\r\n   by the current filehandle, client ID (derived from the session ID in\r\n   the preceding SEQUENCE operation), byte-range, and stateid.  Since\r\n   layouts are sub-dividable, a smaller portion of a layout, retrieved\r\n   via LAYOUTGET, can be committed.  The byte-range being committed is\r\n   specified through the byte-range (loca_offset and loca_length).  This\r\n   byte-range MUST overlap with one or more existing layouts previously\r\n   granted via LAYOUTGET (Section 18.43), each with an iomode of\r\n   LAYOUTIOMODE4_RW.  In the case where the iomode of any held layout\r\n   segment is not LAYOUTIOMODE4_RW, the server should return the error\r\n   NFS4ERR_BAD_IOMODE.  For the case where the client does not hold\r\n   matching layout segment(s) for the defined byte-range, the server\r\n   should return the error NFS4ERR_BAD_LAYOUT.", "correct_text": "   The LAYOUTCOMMIT operation commits changes in the layout represented\r\n   by the current filehandle, client ID (derived from the session ID in\r\n   the preceding SEQUENCE operation), and stateid.  As a layout-independent\r\n   operation, LAYOUTCOMMIT commits the entire layout; layout type-specific\r\n   data (loca_layoutupdate) may specify a smaller scope of data that is to\r\n   be committed (e.g., for the block layout, see RFC 5663 [41]).\r\n\r\n   The loca_offset and loca_length arguments have been deprecated.  The\r\n   client SHOULD set both loca_offset and loca_length to 0.\r\n   The server MUST ignore the loca_offset and loca_length arguments.\r\n   The client MUST hold one or more existing layouts\r\n   previously granted via LAYOUTGET (Section 18.43), with an iomode of\r\n   LAYOUTIOMODE4_RW.  If layout type-specific data (loca_layoutupdate)\r\n   restricts the scope of the LAYOUTCOMMIT to less than the entire layout,\r\n   the client MUST hold one or more existing layouts with an iomode\r\n   of LAYOUTIOMODE4_RW fully covering the committed byte ranges.\r\n   In the case where no previously granted layout\r\n   has an iomode of LAYOUTIOMODE4_RW, the server should return the error\r\n   NFS4ERR_BAD_IOMODE.  For the case where the client does not hold\r\n   any previously granted layout, the server should return the error\r\n   NFS4ERR_BAD_LAYOUT.", "notes": "Errata 4 of 5 to deprecate loca_offset and loca_length arguments to LAYOUTCOMMIT.", "submit_date": "2011-12-27", "submitter_name": "David Black", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3068", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "18.42.3", "orig_text": "   The loca_last_write_offset field specifies the offset of the last\r\n   byte written by the client previous to the LAYOUTCOMMIT.  Note that\r\n   this value is never equal to the file's size (at most it is one byte\r\n   less than the file's size) and MUST be less than or equal to\r\n   NFS4_MAXFILEOFF.  Also, loca_last_write_offset MUST overlap the range\r\n   described by loca_offset and loca_length. ", "correct_text": "   The loca_last_write_offset field specifies the offset of the last\r\n   byte written by the client previous to the LAYOUTCOMMIT.  Note that\r\n   this value is never equal to the file's size (at most it is one byte\r\n   less than the file's size) and MUST be less than or equal to\r\n   NFS4_MAXFILEOFF.", "notes": "Errata 5 of 5 to deprecate loca_offset and loca_length arguments to LAYOUTCOMMIT.", "submit_date": "2011-12-27", "submitter_name": "David Black", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3069", "doc-id": "RFC5257", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1", "orig_text": "   In order to provide optimum support for a disconnected client (one\r\n   that needs to synchronize annotations for use when offline), servers\r\n   SHOULD also support the Conditional STORE [RFC4551] extension.", "correct_text": "   In order to provide optimum support for a disconnected client (one\r\n   that needs to synchronize annotations for use when offline), servers\r\n   SHOULD also support the Conditional STORE [RFC4551] extension.\r\n\r\n   If the server advertises ANNOTATE and either CONDSTORE [RFC4551]\r\n   or QRESYNC [RFC5162], then the server MUST update the MODSEQ when\r\n   an annotation is modified.", "notes": "This probably should go to \"hold for document update\" state. It's debatable whether this is a clarification of existing text here and in section 4.5 or a technical change.", "submit_date": "2011-12-28", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3070", "doc-id": "RFC3407", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "v=0\r\no=- 25678 753849 IN IP4 128.96.41.1\r\ns=\r\nc=IN IP4 128.96.41.1\r\nt=0 0\r\nm=audio 3456 RTP/AVP 18 96\r\na=rtpmap:96 telephone-event\r\na=fmtp:96 0-15,32-35\r\na=sqn: 0\r\na=cdsc: 1 audio RTP/AVP 0 18 96\r\na=cpar: a=fmtp:96 0-16,32-35\r\na=cdsc: 4 image udptl t38\r\na=cdsc: 5 image tcp t38\r\n", "correct_text": "v=0\r\no=- 25678 753849 IN IP4 128.96.41.1\r\ns=\r\nc=IN IP4 128.96.41.1\r\nt=0 0\r\nm=audio 3456 RTP/AVP 18 96\r\na=rtpmap:96 telephone-event/8000\r\na=fmtp:96 0-15,32-35\r\na=sqn: 0\r\na=cdsc: 1 audio RTP/AVP 0 18 96\r\na=cpar: a=fmtp:96 0-16,32-35\r\na=cdsc: 4 image udptl t38\r\na=cdsc: 5 image tcp t38", "notes": "According to RFC 4566 section 6, the clock rate is mandatory:\r\n\r\n\"a=rtpmap:<payload type> <encoding name>/<clock rate> [/<encoding\r\n         parameters>]\"", "submit_date": "2011-12-28", "submitter_name": "Marc Petit-Huguenin", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3071", "doc-id": "RFC6044", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "\"unavailable\"-----------------------------404", "correct_text": "\"unavailable\"-----------------------------503", "notes": "This correction is done to be consistent with the reverse mapping and the fact that \"unavailable\" reason is used for unreachability cases.", "submit_date": "2012-01-04", "submitter_name": "Marianne MOHALI", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3072", "doc-id": "RFC2911", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.4", "orig_text": "This attribute is relevant only if a job consists of two or more\r\ndocuments. This attribute MUST be supported with at least one value\r\n", "correct_text": "This attribute is relevant to jobs consisting of one or more\r\ndocuments. This attribute MUST be supported with at least one value\r\n", "notes": "Per consensus of the IPP working group in the Printer Working Group, the \"multiple-document-handling\" attribute *is* applicable to single-document jobs since it is the only common attribute that can be used to request copy collation.\r\n\r\nThe other collation attribute (\"sheet-collate\" from RFC3381])interacts with \"multiple-document-handling\" in some non-obvious ways and requires clients and printers to support two different attributes for simple collation. The \"sheet-collate\" attribute also does not address how finishing options are applied to copies while \"multiple-document-handling\" does.", "submit_date": "2012-01-04", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3073", "doc-id": "RFC6434", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "15.2", "orig_text": "15.2.  Authors and Acknowledgments from RFC 4279\r\n\r\n   The original version of this document (RFC 4279) was written by the\r\n   IPv6 Node Requirements design team:\r\n", "correct_text": "15.2.  Authors and Acknowledgments from RFC 4294  \r\n\r\n   The original version of this document (RFC 4294 ) was written by the\r\n   IPv6 Node Requirements design team:\r\n", "notes": "RFC 4279 is the TLS RFC.", "submit_date": "2012-01-04", "submitter_name": "John Loughney", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3074", "doc-id": "RFC791", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1 Page 12", "orig_text": "Bits   5:  0 = Normal Relibility, 1 = High Relibility.", "correct_text": "Bits   5:  0 = Normal Reliability, 1 = High Reliability.", "notes": "Spelling error.", "submit_date": "2012-01-04", "submitter_name": "ChengYan Wang", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3076", "doc-id": "RFC5234", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": " rulelist       =  1*( rule / (*c-wsp c-nl) )", "correct_text": " rulelist       =  1*( rule / (*WSP c-nl) )", "notes": "This errata is very similar to errata 2968, but different.\r\n\r\nThe grammar in section 4 is ambiguous. This ambiguity is revealed using 7 characters of input:\r\n    ';' <CR> <LF> <SP> ';' <CR> <LF>\r\n\r\nwhich produces 2 different matches (please forgive my program output):\r\n\r\nrulelist @ 0 len 7\r\n    rulelist1 @ 0 len 3\r\n        star_c_wsp @ 0 len 0\r\n        c_nl @ 0 len 3\r\n            comment @ 0 len 3  \";\\r\\n\"\r\n                CRLF @ 1 len 2\r\n                    CR @ 1 len 1\r\n                    LF @ 2 len 1\r\n    rulelist1 @ 3 len 4\r\n        star_c_wsp @ 3 len 1\r\n            c_wsp @ 3 len 1\r\n                WSP @ 3 len 1\r\n                    SP @ 3 len 1\r\n        c_nl @ 4 len 3\r\n            comment @ 4 len 3  \";\\r\\n\"\r\n                CRLF @ 5 len 2\r\n                    CR @ 5 len 1\r\n                    LF @ 6 len 1\r\n\r\n-----------\r\n\r\nrulelist @ 0 len 7\r\n    rulelist1 @ 0 len 7\r\n        star_c_wsp @ 0 len 4\r\n            c_wsp @ 0 len 4\r\n                c_nl @ 0 len 3\r\n                    comment @ 0 len 3  \";\\r\\n\"\r\n                        CRLF @ 1 len 2\r\n                            CR @ 1 len 1\r\n                            LF @ 2 len 1\r\n                WSP @ 3 len 1\r\n                    SP @ 3 len 1\r\n        c_nl @ 4 len 3\r\n            comment @ 4 len 3  \";\\r\\n\"\r\n                CRLF @ 5 len 2\r\n                    CR @ 5 len 1\r\n                    LF @ 6 len 1\r\n\r\n-----------\r\n\r\nA solution to this ambiguity, which I have verified works, is:\r\n rulelist       =  1*( rule / (*WSP c-nl) )\r\n\r\nThis prevents the c-nl inside c-wsp from getting confused with the c-nl in rulelist.\r\n\r\n --VERIFIER NOTES-- \r\n\r\nThe current document is clearly incorrect. However, though the solution appears correct, it has not been tested.", "submit_date": "2012-01-04", "submitter_name": "Daniel van Vugt", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3077", "doc-id": "RFC6044", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "|       |       |INVITE |       |       |       |     |       |        |\r\n|       |       |------>|       |       |       |     |       |        |\r\n|       |       |History-Info:  |       |       |     |       |        |\r\n|       |       |<sip:proxyP1>; index=1,|       |     |       |        |\r\n|       |       |<sip:userB>; index=1.1 |       |     |       |        |\r\n|       |       |<sip:userC>; cause=302; index=1.1.1  |       |        |", "correct_text": "|       |       |INVITE |       |       |       |     |       |        |\r\n|       |       |------>|       |       |       |     |       |        |\r\n|       |       |History-Info:  |       |       |     |       |        |\r\n|       |       |<sip:proxyP1>; index=1,|       |     |       |        |\r\n|       |       |<sip:userB>; index=1.1,|       |     |       |        |\r\n|       |       |<sip:userC; cause=302>; index=1.1.1  |       |        |", "notes": "The \"cause\" parameter is an URI parameter defined in RFC4458. So that, it is included in the SIP-URI which is represented by the name-addr parameter (between <>) of the History-Info header.\r\nThere was also a missing COMMA at the end of \"index=1.1\".", "submit_date": "2012-01-05", "submitter_name": "Marianne Mohali", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3078", "doc-id": "RFC6276", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "Figure 3: Signaling sequence for the case the home agent is at home\r\n", "correct_text": "Figure 3: Signaling sequence for the case the Mobile Router is at home", "notes": "The figure name is not corresponding to the section's name. In addition, the home agent is always at home.", "submit_date": "2012-01-05", "submitter_name": "Sofiane IMADALI", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3079", "doc-id": "RFC5233", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   A diagram showing the ADDRESS-PARTs of an email address where the\r\n   detail information follows a separator character sequence of \"+\" is\r\n   shown below:\r\n\r\n          :user \"+\" :detail  \"@\" :domain\r\n         \\-----------------/\r\n             :local-part\r\n\r\n   A diagram showing the ADDRESS-PARTs of a email address where the\r\n   detail information precedes a separator character sequence of \"--\" is\r\n   shown below:\r\n\r\n          :detail \"--\" :user  \"@\" :domain\r\n         \\------------------/\r\n             :local-part", "correct_text": "   A diagram showing the ADDRESS-PARTs of an email address where the\r\n   detail information follows a separator character sequence of \"+\" is\r\n   shown below:\r\n\r\n          :user \"+\" :detail  \"@\" :domain\r\n         \\-----------------/\r\n             :localpart\r\n\r\n   A diagram showing the ADDRESS-PARTs of an email address where the\r\n   detail information precedes a separator character sequence of \"--\" is\r\n   shown below:\r\n\r\n          :detail \"--\" :user  \"@\" :domain\r\n         \\------------------/\r\n             :localpart", "notes": "Throughout the document, the prose phrase \"local-part\" is hyphenated, while the syntactic word \":localpart\" is not hyphenated. Also, correct \"a email address\" to \"an email address\"", "submit_date": "2012-01-05", "submitter_name": "Aaron Stone", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3083", "doc-id": "RFC5806", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "9.1 Mapping ISUP/ISDN Diversion Reason Codes\r\n", "correct_text": "9.1 Mapping ISUP/ISDN Diversion Reason Codes\r\n\r\nISUP defines the following diversion reasons:\r\n0001 = User busy\r\n0010 = no reply\r\n0011 = unconditional\r\n0100 = deflection during alerting\r\n0101 = deflection immediate response\r\n0110 = mobile subscriber not reachable\r\n0000 = Unknown\r\n\r\nMapping between ISUP reason codes and Diversion reason codes is\r\nperformed as follows:\r\nISUP reason code      Diversion reason code\r\n0001                  \"user-busy\"\r\n0010                  \"no-answer\"\r\n0011                  \"unconditional\"\r\n0100 or 0101          \"deflection\"\r\n0110                  \"unavailable\"\r\n0000                  all others\r\nall others            \"unknown\"\r\n", "notes": "Section 9.1 mentions mapping with ISUP and ISDN but mapping with ISUP is missing. Indeed ISDN and ISUP reason parameter values are different.\r\nThis errata adds the ISUP mapping.", "submit_date": "2012-01-05", "submitter_name": "Marianne Mohali", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7050", "doc-id": "RFC8276", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   This document discusses (in Section 5) the reasons that NFSv4-named\r\n   attributes, as currently standardized in [RFC5661], are unsuitable\r\n   for representing xattrs.  Instead, it describes a separate protocol\r\n", "correct_text": "   This document discusses (in Section 6) the reasons that NFSv4-named\r\n   attributes, as currently standardized in [RFC5661], are unsuitable\r\n   for representing xattrs.  Instead, it describes a separate protocol\r\n", "notes": "The reference to the discussion of named attributes has the wrong section number.", "submit_date": "2022-07-26", "submitter_name": "Anton Rang", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-07-26 20:27:31"}, {"errata_id": "5187", "doc-id": "RFC6487", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "      encompass\r\n         Given two IP address and AS number sets, X and Y, X\r\n         \"encompasses\" Y if, for every contiguous range of IP addresses\r\n         or AS numbers elements in set Y, the range element is either\r\n         \"more specific\" than or \"equal\" to a contiguous range element\r\n         within the set X.\r\n", "correct_text": "      encompass\r\n         Given two IP address or two AS number sets, X and Y, X\r\n         \"encompasses\" Y if, for every contiguous range of IP addresses\r\n         or AS numbers elements in set Y, the range element is either\r\n         \"more specific\" than or \"equal\" to a contiguous range element\r\n         within the set X.\r\n", "notes": "", "submit_date": "2017-11-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3085", "doc-id": "RFC5280", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "BuiltInStandardAttributes ::= SEQUENCE {\r\n   country-name                  CountryName OPTIONAL,\r\n   administration-domain-name    AdministrationDomainName OPTIONAL,\r\n   network-address           [0] IMPLICIT NetworkAddress OPTIONAL,\r\n     -- see also extended-network-address\r\n   terminal-identifier       [1] IMPLICIT TerminalIdentifier OPTIONAL,\r\n   private-domain-name       [2] PrivateDomainName OPTIONAL,\r\n   organization-name         [3] IMPLICIT OrganizationName OPTIONAL,\r\n     -- see also teletex-organization-name\r\n   numeric-user-identifier   [4] IMPLICIT NumericUserIdentifier\r\n                                 OPTIONAL,\r\n   personal-name             [5] IMPLICIT PersonalName OPTIONAL,\r\n     -- see also teletex-personal-name\r\n   organizational-unit-names [6] IMPLICIT OrganizationalUnitNames\r\n                                 OPTIONAL }\r\n     -- see also teletex-organizational-unit-names\r\n", "correct_text": "BuiltInStandardAttributes ::= SEQUENCE {\r\n   country-name                  CountryName OPTIONAL,\r\n   administration-domain-name    AdministrationDomainName OPTIONAL,\r\n   network-address           [0] IMPLICIT NetworkAddress OPTIONAL,\r\n     -- see also extended-network-address\r\n   terminal-identifier       [1] IMPLICIT TerminalIdentifier OPTIONAL,\r\n   private-domain-name       [2] IMPLICIT PrivateDomainName OPTIONAL,\r\n   organization-name         [3] IMPLICIT OrganizationName OPTIONAL,\r\n     -- see also teletex-organization-name\r\n   numeric-user-identifier   [4] IMPLICIT NumericUserIdentifier\r\n                                 OPTIONAL,\r\n   personal-name             [5] IMPLICIT PersonalName OPTIONAL,\r\n     -- see also teletex-personal-name\r\n   organizational-unit-names [6] IMPLICIT OrganizationalUnitNames\r\n                                 OPTIONAL }\r\n     -- see also teletex-organizational-unit-names\r\n", "notes": "Seems to me that private-domain-name ought to be tagged IMPLICIT just like everything else?\n --VERIFIER NOTES-- \nPrivateDomainName (unlike the other tagged components) is an untagged\r\nCHOICE type.\r\n\r\n\r\nQuote from X.680:\r\n\r\n'30.8       The IMPLICIT alternative shall not be used if the type defined\r\nby \"Type\" is an untagged choice type or an untagged open type or an untagged\r\n\"DummyReference\" (see ITU-T Rec. X.683 | ISO/IEC 8824-4, 8.3).'   ", "submit_date": "2012-01-06", "submitter_name": "Jim Wigginton", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3086", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2.6", "orig_text": "     ANNIVERSARY-param = \"VALUE=\" (\"date-and-or-time\" / \"text\")\r\n     ANNIVERSARY-value = date-and-or-time / text\r\n       ; Value and parameter MUST match.\r\n\r\n     ANNIVERSARY-param =/ altid-param / calscale-param / any-param\r\n       ; calscale-param can only be present when ANNIVERSARY-value is\r\n       ; date-and-or-time and actually contains a date or date-time.", "correct_text": "     ANNIVERSARY-param = ANNIVERSARY-param-date / ANNIVERSARY-param-text\r\n     ANNIVERSARY-value = date-and-or-time / text\r\n       ; Value and parameter MUST match.\r\n\r\n     ANNIVERSARY-param-date = \"VALUE=date-and-or-time\"\r\n     ANNIVERSARY-param-text = \"VALUE=text\" / language-param\r\n     \r\n     ANNIVERSARY-param =/ altid-param / calscale-param / any-param\r\n       ; calscale-param can only be present when ANNIVERSARY-value is\r\n       ; date-and-or-time and actually contains a date or date-time.", "notes": "language-param should be allowed when ANNIVERSARY is reset to a single text value (BDAY, defined in section 6.2.5 accepts language-param)", "submit_date": "2012-01-09", "submitter_name": "Roberto Javier Godoy", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3087", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   deviate-add-stmt    = deviate-keyword sep add-keyword optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              [units-stmt stmtsep]\r\n                              *(must-stmt stmtsep)\r\n                              *(unique-stmt stmtsep)\r\n                              [default-stmt stmtsep]\r\n                              [config-stmt stmtsep]\r\n                              [mandatory-stmt stmtsep]\r\n                              [min-elements-stmt stmtsep]\r\n                              [max-elements-stmt stmtsep]\r\n                          \"}\")\r\n\r\n   deviate-delete-stmt = deviate-keyword sep delete-keyword optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              [units-stmt stmtsep]\r\n                              *(must-stmt stmtsep)\r\n                              *(unique-stmt stmtsep)\r\n                              [default-stmt stmtsep]\r\n                          \"}\")\r\n\r\n   deviate-replace-stmt = deviate-keyword sep replace-keyword optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              [type-stmt stmtsep]\r\n                              [units-stmt stmtsep]\r\n                              [default-stmt stmtsep]\r\n                              [config-stmt stmtsep]\r\n                              [mandatory-stmt stmtsep]\r\n                              [min-elements-stmt stmtsep]\r\n                              [max-elements-stmt stmtsep]\r\n                          \"}\")\r\n\r\n", "correct_text": "  deviate-add-stmt    = deviate-keyword sep add-keyword optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              ;; these stmts can appear in any order\r\n                              [units-stmt stmtsep]\r\n                              *(must-stmt stmtsep)\r\n                              *(unique-stmt stmtsep)\r\n                              [default-stmt stmtsep]\r\n                              [config-stmt stmtsep]\r\n                              [mandatory-stmt stmtsep]\r\n                              [min-elements-stmt stmtsep]\r\n                              [max-elements-stmt stmtsep]\r\n                          \"}\")\r\n\r\n   deviate-delete-stmt = deviate-keyword sep delete-keyword optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              ;; these stmts can appear in any order\r\n                              [units-stmt stmtsep]\r\n                              *(must-stmt stmtsep)\r\n                              *(unique-stmt stmtsep)\r\n                              [default-stmt stmtsep]\r\n                          \"}\")\r\n\r\n   deviate-replace-stmt = deviate-keyword sep replace-keyword optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              ;; these stmts can appear in any order\r\n                              [type-stmt stmtsep]\r\n                              [units-stmt stmtsep]\r\n                              [default-stmt stmtsep]\r\n                              [config-stmt stmtsep]\r\n                              [mandatory-stmt stmtsep]\r\n                              [min-elements-stmt stmtsep]\r\n                              [max-elements-stmt stmtsep]\r\n                          \"}\")\r\n", "notes": "The comment \"these stmts can appear in any order\" is missing from these three statements.", "submit_date": "2012-01-09", "submitter_name": "Martin Bjorklund", "verifier_id": "", "verifier_name": "Dan Romascanu", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3088", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3", "orig_text": "date-time       =   [ day-of-week \",\" ] date time [CFWS]", "correct_text": "date-time       =   [ day-of-week \",\" ] date time [comment]", "notes": "If using the [CFWS] at the end of the original text, by the rules of CFWS, the next line could contain only FWS after the CRLF, which would violate the requirement found in 3.2.2, which reads: \"...where CFWS occurs in this specification, it MUST NOT be inserted in such a way that any line of a folded header field is made up entirely of WSP characters and nothing else.\"\n --VERIFIER NOTES-- \nCFWS allows there to be multiple comments, including comments that go on to the second line, which is perfectly OK.", "submit_date": "2012-01-11", "submitter_name": "Michael Redwine", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4440", "doc-id": "RFC4918", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.8", "orig_text": "", "correct_text": "", "notes": "There are several ambiguities in this section.  Here is one.\r\n\r\nCopying a resource to a defined collection: \r\n\r\nFrom    To    Result\r\n/a/c/d  /b/    /b/d       \r\n\r\nThis is the logical interpretation and does not conflict with the specifications.  But...\r\n\r\nFrom    To    Result\r\n/a/c/d  /b/   /d           (/b/ is overwritten)\r\n\r\nThis perverse but does not conflict either.  Trashing he complete collection in this way cannot be right, but it is not in conflict with anything I can find in section 9.8.  The closest I can find is:\r\n\r\n\"When a collection is overwritten, the membership of the destination   collection after the successful COPY request MUST be the same membership as the source collection immediately before the COPY.\"\r\n\r\nThis does not explicitly prohibit overwriting a collection with a non-collection.\r\n\r\n\r\nThe specification uses \"in the destination..\" and \"at the destination...\" interchangeably.\r\n\r\n\"The COPY method creates a duplicate of the source resource identified by the Request-URI, in the destination resource identified by the URI in the Destination header.\"  This suggests the first\r\n\r\nThe specification also says: \"When the source resource is not a collection, the result of the COPY method is the creation of a new resource at the destination whose state and behavior match that of the source resource as closely as possible.\"  This could mean the second.\r\n\r\nPossibly copying a non-collection resource to a collection resource should not be allowed (but I can find no such prohibition)", "submit_date": "2015-08-09", "submitter_name": "Worik Stanton", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3110", "doc-id": "RFC4577", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  [typo?]\r\n\r\nSection 4.2.1 of RFC 4577, in the last paragraph on page 9, says:\r\n\r\n   Generally, though not necessarily, if the PE attaches to several CEs\r\n   in the same OSPF domain, it will associate the interfaces to those\r\n   PEs with a single VRF.\r\n\r\nI strongly suspect that the final \"PEs\" is a typo, and should be\r\nreplaced by \"CEs\".\r\nThus, the RFC should say:\r\n\r\n   Generally, though not necessarily, if the PE attaches to several CEs\r\n   in the same OSPF domain, it will associate the interfaces to those\r\n|  CEs with a single VRF.\r\n\r\n\r\n(3)  [typo: punctuation]\r\n\r\nSection 4.2.7 of RFC 4577, on page 16, says:\r\n\r\n   This section describes the protocol and procedures necessary for the\r\n|  support of \"Sham Links,\" as defined herein.  Support for sham links\r\n   is an OPTIONAL feature of this specification.\r\n\r\nIt should say:\r\n\r\n   This section describes the protocol and procedures necessary for the\r\n|  support of \"Sham Links\", as defined herein.  Support for sham links\r\n   is an OPTIONAL feature of this specification.\r\n\r\n\r\n(4)  [typo: grammar]\r\n\r\nIn Section 4.2.7.1, the last paragraph on page 16 says:\r\n\r\n   If it is desired to have OSPF prefer the routes through the backbone\r\n   over the routes through the backdoor link, then the routes through\r\n|  the backbone must be appear to be intra-area routes.  [...]\r\n                ^^^^^^^^^^^^^^\r\n\r\nIt should say:\r\n\r\n   If it is desired to have OSPF prefer the routes through the backbone\r\n   over the routes through the backdoor link, then the routes through\r\n|  the backbone must appear to be intra-area routes.  [...]\r\n                ^^^^^^^^^^^\r\n\r\n(5)  [typo: inconsistent spelling/capitalization]\r\n\r\nIn Section 4.2.7.1, the second paragraph on page 17 contains\r\nthe sentence:\r\n                                           vvvvvvvvv\r\n                             [...].  If the VRF is associated with only\r\n|  a single OSPF instance, and if the PE's router id in that OSPF\r\n   instance is an IP address, then the Sham Link Endpoint Address MAY\r\n   default to that Router ID.  [...]\r\n\r\nConsistently with all other occurrences of the term, \"Router ID\"\r\nin this memo, it should say:\r\n\r\n                             [...].  If the VRF is associated with only\r\n|  a single OSPF instance, and if the PE's Router ID in that OSPF\r\n   instance is an IP address, then the Sham Link Endpoint Address MAY\r\n   default to that Router ID.  [...]\r\n\r\n\r\n(6)  [word omission]\r\n\r\nThe 4th paragraph of Section 4.2.7.2, near the bottom of page 17,\r\nsays:\r\n\r\n   A sham link connecting two VRFs is considered up if and only if a\r\n   route to the 32-bit remote endpoint address of the sham link has been\r\n|  installed in VRF.\r\n\r\nIt should say:\r\n\r\n   A sham link connecting two VRFs is considered up if and only if a\r\n   route to the 32-bit remote endpoint address of the sham link has been\r\n|  installed in the VRF.", "correct_text": "", "notes": "from pending", "submit_date": "2006-08-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3089", "doc-id": "RFC5722", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   IPv6 nodes transmitting datagrams that need to be fragmented MUST NOT\r\n   create overlapping fragments.  When reassembling an IPv6 datagram, if\r\n   one or more its constituent fragments is determined to be an\r\n   overlapping fragment, the entire datagram (and any constituent\r\n   fragments, including those not yet received) MUST be silently\r\n   discarded.", "correct_text": "   IPv6 nodes transmitting datagrams that need to be fragmented MUST NOT\r\n   create overlapping fragments.  When reassembling an IPv6 datagram, if\r\n   one or more its constituent fragments is determined to be an\r\n   overlapping fragment, the entire datagram (and any constituent\r\n   fragments) MUST be silently discarded.", "notes": "Discarding fragments \"including those not yet received\" is not implementable. You'd have to keep state about the (source, destination, protocol, id) 4-tuple for MSL (120 seconds). If you do this you create two bugs:\r\n- A new attack vector: an attacker could eat your resources. And if you just limit the number of such state entries then you fail to implement RFC 5722 correctly.\r\n- It breaks at fairly low speeds. See draft-ietf-intarea-ipv4-id-update.\r\n\r\nThe proposal is simply to remove the \"including those not yet received\" bit. Normal host stacks do not keep state once a fragment has been reassembled. You reassemble the full packet and clear the fragment table. So this corrected text would align the RFC with actual practice.\r\n\r\nThis errata report results from an implementation attempt by OpenBSD.", "submit_date": "2012-01-13", "submitter_name": "Simon Perreault", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3090", "doc-id": "RFC6125", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.4.3", "orig_text": "6.4.3. Checking of Wildcard Certificates\r\n\r\n   A client employing this specification's rules MAY match the reference\r\n   identifier against a presented identifier whose DNS domain name\r\n   portion contains the wildcard character '*' as part or all of a label\r\n   (following the description of labels and domain names in\r\n   [DNS-CONCEPTS]).\r\n\r\n   For information regarding the security characteristics of wildcard\r\n   certificates, see Section 7.2.\r\n\r\n   If a client matches the reference identifier against a presented\r\n   identifier whose DNS domain name portion contains the wildcard\r\n   character '*', the following rules apply:\r\n\r\n   1.  The client SHOULD NOT attempt to match a presented identifier in\r\n       which the wildcard character comprises a label other than the\r\n       left-most label (e.g., do not match bar.*.example.net).\r\n\r\n   2.  If the wildcard character is the only character of the left-most\r\n       label in the presented identifier, the client SHOULD NOT compare\r\n       against anything but the left-most label of the reference\r\n       identifier (e.g., *.example.com would match foo.example.com but\r\n       not bar.foo.example.com or example.com).\r\n\r\n   3.  The client MAY match a presented identifier in which the wildcard\r\n       character is not the only character of the label (e.g.,\r\n       baz*.example.net and *baz.example.net and b*z.example.net would\r\n       be taken to match baz1.example.net and foobaz.example.net and\r\n       buzz.example.net, respectively).  However, the client SHOULD NOT\r\n       attempt to match a presented identifier where the wildcard\r\n       character is embedded within an A-label or U-label [IDNA-DEFS] of\r\n       an internationalized domain name [IDNA-PROTO].", "correct_text": "[ no firm test suggestions just as yet, please see below ]", "notes": "RFC6125 bug: Checking of Wildcard Certs lacks spec of how many labels in presented identifier\r\n\r\nsection 6.4.3 does not specify how many labels must be in a wildcarded presented identifier. I.e., it leaves open the possibility that the following presented identifiers could be matched against actual domain names..\r\n\r\n  *\r\n  *.\r\n  *.com  i.e.  *.<fill in TLD here>             e.g.:  *.uk or *.co.uk\r\n  *U     i.e.  *<fill in portion of TLD here>   e.g.:  will match AU, EDU, CU \r\n\r\n  etc. etc. \r\n\r\n                                                       \r\nIf actual TLS/SSL implementations (e.g. web browsers) were to make valid matches as shown above, then someone could ostensibly obtain a cert (c.f. diginotar) for one of them and then go and MITM large swaths of domain name space. \r\n\r\nNote that the discussion of wildcards in Section 7.2 of security considerations identifies the public suffix issue in passing, but only as one of a set of issues why the spec discourages use of wildcard certs.\r\n\r\nNote also that this issue begs the question of being able to determine what constitutes a so-called domain name \"public suffix\" (e.g. \".com\", \".co.uk\") -- we can't simply write into the spec \"the wildcard must be in the left-most label position and there must be at least one? two? three? labels to the right of the wildcard's position\". \r\n\r\nLikely the approach will need to consist of a \"SHOULD\" declaration and some hand-waving about how \"matching wildcards on presented identifiers with less than N (?) labels to the right of the wildcard has various increasing risks as N approaches zero, and that implementors should perhaps consider leveraging some of the available public suffix identification mechanisms, but that those are out of scope and have their own operational and security considerations.\"\r\n\r\nPSA: This issue needs to be addressed, but doing so by means of an erratum is not the best way to go about having this conversation. Marking as \"Hold For Document Update\" to make sure we don't lose track of the issue. -- Peter Saint-Andre", "submit_date": "2012-01-13", "submitter_name": "Jeff Hodges", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3091", "doc-id": "RFC6434", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.10", "orig_text": "   Nodes supporting applications that expect\r\n   to only take advantage of MLDv2's INCLUDE functionality as well as\r\n   Any-Source Multicast will find it sufficient to support MLDv2 as\r\n   defined in [RFC5790].", "correct_text": "   Nodes supporting applications that expect \r\n   to only take advantage of MLDv2's INCLUDE functionality as well as \r\n   Any-Source Multicast will find it sufficient to support Lightweight \r\n   MLDv2 as defined in [RFC5790].", "notes": "MLDv2 is RFC3810, and has both INCLUDE and EXCLUDE filter modes (as per previous paragraph.\r\n\r\nRFC5790 (Lightweight MLDv2) is sufficient for nodes supporting application using only INCLUDE and Any-Source Multicast.", "submit_date": "2012-01-16", "submitter_name": "Sam Silvester", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3092", "doc-id": "RFC3376", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6.6.3.1", "orig_text": "6.6.3.1. Building and Sending Group Specific Queries\r\n\r\n   When a table action \"Send Q(G)\" is encountered, then the group timer\r\n   must be lowered to LMQT.  The router must then immediately send a\r\n   group specific query as well as schedule [Last Member Query Count -\r\n   1] query retransmissions to be sent every [Last Member Query\r\n   Interval] over [Last Member Query Time].\r\n\r\n   When transmitting a group specific query, if the group timer is\r\n   larger than LMQT, the \"Suppress Router-Side Processing\" bit is set in\r\n   the query message.", "correct_text": "6.6.3.1. Building and Sending Group Specific Queries\r\n\r\n   When a table action \"Send Q(G)\" is encountered, then the group timer\r\n   must be lowered to LMQT.  The router must then immediately send a\r\n   group specific query as well as schedule [Last Member Query Count -\r\n   1] query retransmissions to be sent every [Last Member Query\r\n   Interval] over [Last Member Query Time].\r\n\r\n   When a group specific query is being transmitted, if the group timer is\r\n   larger than LMQT, the \"Suppress Router-Side Processing\" bit is set in\r\n   the query message.", "notes": "\n --VERIFIER NOTES-- \nI am rejecting this editorial erratum because the original English is perfectly comprehensible. (It is true that it is not very elegant, but the proposed replacement isn't too good either:-)   ", "submit_date": "2012-01-18", "submitter_name": "Jon Hak Song", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3093", "doc-id": "RFC3501", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.11", "orig_text": "           Note: There MAY be exceptions, e.g., draft messages, in\r\n           which required [RFC-2822] header lines are omitted in\r\n           the message literal argument to APPEND.  The full\r\n           implications of doing so MUST be understood and\r\n           carefully weighed.\r\n", "correct_text": "           Note: There may be exceptions, e.g., draft messages, in\r\n           which required [RFC-2822] header lines are omitted in\r\n           the message literal argument to APPEND.  The full\r\n           implications of doing so must be understood and\r\n           carefully weighed.\r\n", "notes": "Possibly the result of a search-and-replace, these occurrences of \"must\" and \"may\" are not RFC 2119 usages.", "submit_date": "2012-01-18", "submitter_name": "Joe Pallas", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4441", "doc-id": "RFC7331", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5", "orig_text": "Given bfdSessInterface, bfdSessSrcAddrType, bfdSessSrcAddr,\r\nbfdSessDstAddrType, and bfdSessSrcAddrType, the BFD Session IP\r\nMapping Table maps to an associated BFD session found in the\r\nbfdSessionTable.", "correct_text": "Given bfdSessInterface, bfdSessSrcAddrType, bfdSessSrcAddr,\r\nbfdSessDstAddrType, and bfdSessDstAddr, the BFD Session IP\r\nMapping Table maps to an associated BFD session found in the\r\nbfdSessionTable.", "notes": "Duplicate bfdSessSrcAddrType but missing bfdSessDstAddr\r\n\r\n(Alvaro Retana): the MIB Module itself has the correct description.", "submit_date": "2015-08-09", "submitter_name": "Rui Lin", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4980", "doc-id": "RFC7483", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5", "orig_text": "country -- a string containing the name of the two-character\r\ncountry code of the autnum", "correct_text": "country -- a string containing the two-character country\r\ncode of the autnum\r\n", "notes": "As described in Section 3, country codes should consistently be represented as two-character string values. Note that this differs from the \"full name\" format used in jCard representations of entity objects.", "submit_date": "2017-03-24", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 22:02:04"}, {"errata_id": "4981", "doc-id": "RFC2962", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "very week", "correct_text": "very weak", "notes": "", "submit_date": "2017-03-25", "submitter_name": "Taehee Yoo", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3103", "doc-id": "RFC5176", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "Disconnect Request with User-Name:\r\n\r\n       0: xxxx xxxx xxxx xxxx xxxx 2801 001c 1b23    .B.....$.-(....#\r\n      16: 624c 3543 ceba 55f1 be55 a714 ca5e 0108    bL5C..U..U...^..\r\n      32: 6d63 6869 6261\r\n\r\nDisconnect Request with Acct-Session-ID:\r\n\r\n       0: xxxx xxxx xxxx xxxx xxxx 2801 001e ad0d    .B..... ~.(.....\r\n      16: 8e53 55b6 bd02 a0cb ace6 4e38 77bd 2c0a    .SU.......N8w.,.\r\n      32: 3930 3233 3435 3637                        90234567\r\n\r\nDisconnect Request with Framed-IP-Address:\r\n\r\n       0: xxxx xxxx xxxx xxxx xxxx 2801 001a 0bda    .B.....\"2.(.....\r\n      16: 33fe 765b 05f0 fd9c c32a 2f6b 5182 0806    3.v[.....*/kQ...\r\n      32: 0a00 0203", "correct_text": "Disconnect Request with User-Name:\r\n\r\n       0: xxxx xxxx xxxx xxxx xxxx 2801 001c 1b23    .B.....$.-(....#\r\n      16: 624c 3543 ceba 55f1 be55 a714 ca5e 0108    bL5C..U..U...^..\r\n      32: 6d63 6869 6261\r\n\r\nDisconnect Request with Acct-Session-ID:\r\n\r\n       0: xxxx xxxx xxxx xxxx xxxx 2801 001e ad0d    .B..... ~.(.....\r\n      16: 8e53 55b6 bd02 a0cb ace6 4e38 77bd 2c0a    .SU.......N8w.,.\r\n      32: 3930 3233 3435 3637                        90234567", "notes": "Since cardinality notation value for Framed-IP-Address attribute has now been changed in section 3.6 (\"Table of Attributes\") compared to previous 3576 RFC (change was from \"0-1\" to \"0\"), the \"Disconnect Request with Framed-IP-Address\" example in section 7 (\"Example traces\") should be removed.\r\n\r\nFurthermore, a new bullet in \"Appendix A. Changes from RFC 3576\" should be foreseen (just like the one related to Service-Type Attribute), such as:\r\no  Use of the Framed-IP-Address, Framed-Interface-Id and Framed-IPv6-Prefix Attributes within a Disconnect-Request is prohibited\r\n\r\nBroadly speaking, one thing that seems to me a bit unclear is that Attributes such as Framed-IP-Address, Framed-Interface-Id and Framed-IPv6-Prefix are still valid session identifiers that could be present in CoA Requests, while they have been totally prohibited in Disconnect Requests ( even if they are mentioned as valid in section 3, end of page #10 ).\r\nFrom my point of view, either it's misplaced the example in section 7 or cardinality notation values in Disconnect Message Table of Attributes (related to the ones mentioned above) should be changed back to \"0-1\" (I personally think this last option would be better).\n --VERIFIER NOTES-- \nRejected. See the resolution in errata 3294", "submit_date": "2012-02-03", "submitter_name": "Davide Magistri", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3104", "doc-id": "RFC1925", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2. (2)", "orig_text": "   (2)  No matter how hard you push and no matter what the priority,\r\n        you can't increase the speed of light.", "correct_text": "   (2) If you try really hard, and have the right equipment (or \r\n       suitable funding), you might be able to increase the speed \r\n       of light. Or not, we're not sure yet.", "notes": "Experimental results suggest it may be possible to go faster; see:\r\n  http://arxiv.org/abs/1109.4897\r\n\r\nIt's true that these results have not been independently verified, and it's true that the speed of light was not observed to be increased (only exceeded), but there is now enough doubt involved to justify an errata (with a view to an update in a potential future BIS WG).", "submit_date": "2012-02-05", "submitter_name": "Mark Nottingham", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3105", "doc-id": "RFC4086", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2.2", "orig_text": "   If one uses no more than the:\r\n\r\n         log  ( log  ( s  ) )\r\n            2      2    i\r\n\r\n   low-order bits, then predicting any additional bits from a sequence\r\n   generated in this manner is provably as hard as factoring n.", "correct_text": "(see below)", "notes": "As noted by Koblitz and Menezes in \"Another look at provable security II\", <http://eprint.iacr.org/2006/229.pdf>, this recommendation is based on a misinterpretation of the big-O notation. The claim about provable security is therefore misleading.", "submit_date": "2012-02-05", "submitter_name": "Florian Weimer", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3106", "doc-id": "RFC4086", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4", "orig_text": "(see below)", "correct_text": "(remove entire section)", "notes": "Compression is not suitable for de-skewing, even if headers are removed. For most compression algorithms, discriminators are known. For instance, in gzip output, the most significant bit of each byte is set with a frequency somewhat above 0.501 (except for small inputs). This means that the output is not uniformly distributed even when looking at isolated bytes.\r\n\r\nI recommend removal of the entire section.\n --VERIFIER NOTES-- \nI agree with the author:\r\n\r\nJust to be crystal clear, I believe there is no \"error\" here. Just a\r\njudgement call as to whether Section 4.4 should have been included. My\r\njudgement that it should be included was ratified by the IETF at the\r\ntime the RFC was approved.", "submit_date": "2012-02-05", "submitter_name": "Florian Weimer", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3107", "doc-id": "RFC5245", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix B.6", "orig_text": "However, the check from agent R has not yet \r\ngenerated a response, and agent R receives the updated offer \r\n(message 7) before getting the response (message 9).  ", "correct_text": "However, the check from agent R has not yet \r\nreceived a response, and agent R receives the updated offer \r\n(message 7) before getting the response (message 9).  ", "notes": "Here, Agent R (ideally Agent B as per the figure 11) has generated the request, so it must receive the response. The original text may give a meaning that Agent R has to generate a response.", "submit_date": "2012-02-05", "submitter_name": "N V S Kaushik", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3108", "doc-id": "RFC3739", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "C.1.1.1.", "orig_text": "GeneralizedTime : \"197110141200Z\"\r\n", "correct_text": "GeneralizedTime : \"19711014120000Z\"\r\n", "notes": "X.690\r\n11 Restrictions on BER employed by both CER and DER\r\n11.7 GeneralizedTime\r\n11.7.2 The seconds element shall always be present.\r\n\r\nIn rfc 3739, C.3 DER-encoding, the second-zeroes are present:\r\n... ..313937 31313031 34313230 3030305A ...\r\nThey are just missing in the string representation above.\r\n\r\nAdditionally RFC 5280 requires the second-zeroes be present.", "submit_date": "2012-02-06", "submitter_name": "Lo\u00efc Etienne", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7051", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.9", "orig_text": "        This step should be reached only if the ACK is ok, or there is\r\n        no ACK, and it the segment did not contain a RST.\r\n", "correct_text": "        This step should be reached only if the ACK is ok, or there is\r\n        no ACK, and if the segment did not contain a RST.\r\n", "notes": "Page 67: it -> if.\r\n\r\nthis document has been obsoleted.\n --VERIFIER NOTES-- \n   ", "submit_date": "2022-07-28", "submitter_name": "Merlin B\u00fcge", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-09-22 17:49:16"}, {"errata_id": "7049", "doc-id": "RFC3402", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "      One such case can be found in the URI\r\n      Resolution application which defines the 'p' flag which states\r\n      that the next step is 'protocol specific' and thus outside of the\r\n      scope of DDDS.", "correct_text": "      One such case can be found in the URI\r\n      Resolution application which defines the 'P' flag which states\r\n      that the next step is 'protocol specific' and thus outside of the\r\n      scope of DDDS.", "notes": "Capital \"P\" is used for the flag in the URI Resolution Application RFC3404", "submit_date": "2022-07-25", "submitter_name": "Timothy McSweeney", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-04 14:16:32"}, {"errata_id": "5188", "doc-id": "RFC6487", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   Validation of a certificate's resource extension in the context of a\r\n   certification path (see Section 7.2 entails that for every adjacent\r\n", "correct_text": "   Validation of a certificate's resource extension in the context of a\r\n   certification path (see Section 7.2) entails that for every adjacent\r\n", "notes": "The closing parenthesis is missing.", "submit_date": "2017-11-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3123", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.2.", "orig_text": "   struct {\r\n       select (KeyExchangeAlgorithm) {\r\n           case dh_anon:\r\n               ServerDHParams params;\r\n           case dhe_dss:\r\n           case dhe_rsa:\r\n               ServerDHParams params;\r\n               digitally-signed struct {\r\n                   opaque client_random[32];\r\n                   opaque server_random[32];\r\n                   ServerDHParams params;\r\n               } signed_params;\r\n           case rsa:\r\n           case dh_dss:\r\n           case dh_rsa:\r\n               struct {} ;\r\n              /* message is omitted for rsa, dh_dss, and dh_rsa */\r\n           /* may be extended, e.g., for ECDH -- see [TLSECC] */\r\n   } ServerKeyExchange;\r\n", "correct_text": "   struct {\r\n       select (KeyExchangeAlgorithm) {\r\n           case dh_anon:\r\n               ServerDHParams params;\r\n           case dhe_dss:\r\n           case dhe_rsa:\r\n               ServerDHParams params;\r\n               digitally-signed struct {\r\n                   opaque client_random[32];\r\n                   opaque server_random[32];\r\n                   ServerDHParams params;\r\n               } signed_params;\r\n           case rsa:\r\n           case dh_dss:\r\n           case dh_rsa:\r\n               struct {} ;\r\n              /* message is omitted for rsa, dh_dss, and dh_rsa */\r\n           /* may be extended, e.g., for ECDH -- see [TLSECC] */\r\n       };\r\n   } ServerKeyExchange;\r\n", "notes": "The '};' which belongs to 'select (KeyExchangeAlgorithm) {' is missing in the original text.", "submit_date": "2012-02-16", "submitter_name": "Daniel Otte", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3124", "doc-id": "RFC2825", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   Also, the Simple Network Management Protocol (SNMP) uses the textual\r\n   representation defined in [RFC2579].  While that specification does\r\n   allow for UTF-8-based domain names, an informal survey of deployed\r\n   implementations of software libraries being used to build SNMP-\r\n   compliant software uncovered the fact that few (if any) implement it.\r\n", "correct_text": "   Also, the Simple Network Management Protocol (SNMP) uses the textual\r\n   representation defined in [RFC2579].  That specification does not\r\n   allow for UTF-8-based domain names, and an informal survey of deployed\r\n   implementations of software libraries being used to build SNMP-\r\n   compliant software confirmed the fact that few (if any) implement \r\n   it.\r\n", "notes": "RFC2579 is pretty clear about ASCII-only here.  Whereas using SnmpAdminString in RFC2571 could allow for UTF-8 in the interest of i18n, that is not what is being discussed here.", "submit_date": "2012-02-16", "submitter_name": "Gabriel Montenegro", "verifier_id": "", "verifier_name": "IAB-Chair", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3126", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "          +-------------------+-------------------+------------------+\r\n          |  Association Mode | Assoc. Mode Value | Packet Mode Value|\r\n          +-------------------+-------------------+------------------+\r\n          | Symmetric Active  |         1         | 1 or 2           |\r\n          | Symmetric Passive |         2         | 1                |\r\n          | Client            |         3         | 4                |\r\n          | Server            |         4         | 3                |\r\n          | Broadcast Server  |         5         | 5                |\r\n          | Broadcast Client  |         6         | N/A              |\r\n          +-------------------+-------------------+------------------+\r\n\r\n                  Figure 1: Association and Packet Modes\r\n\r\n   In the client/server variant, a persistent client sends packet mode 4\r\n   packets to a server, which returns packet mode 3 packets.\r\n", "correct_text": "          +-------------------+-------------------+------------------+\r\n          |  Association Mode | Assoc. Mode Value | Packet Mode Value|\r\n          +-------------------+-------------------+------------------+\r\n          | Symmetric Active  |         1         | 1 or 2           |\r\n          | Symmetric Passive |         2         | 1                |\r\n          | Client            |         3         | 4                |\r\n          | Server            |         4         | 3                |\r\n          | Broadcast Server  |         5         | N/A              |\r\n          | Broadcast Client  |         6         | 5                |\r\n          +-------------------+-------------------+------------------+\r\n\r\n                  Figure 1: Association and Packet Modes\r\n\r\n   In the client/server variant, a persistent client sends packet mode 3\r\n   packets to a server, which returns packet mode 4 packets.", "notes": "The majority of the rows in Figure 1 are correct if the 'Packet Mode Value' refers to the mode of packets which are expected to be received by an NTP speaker which has mobilized an association with the corresponding 'Association Mode'.  Assuming this is the case, the last two rows are incorrect:\r\n\r\n* A peer with a mobilized 'Broadcast Server' mode association is not expected to receive any packets at all for this association -- a broadcast server does not receive anything back (see 'Broadcast' mode row in Section 9.2, Figure 20, where each column in that row is 'DSCRD'.)  Therefore, the value of 'Packet Mode Value' for 'Broadcast Server' should be 'N/A', not '5'.\r\n\r\n* A peer with a mobilized 'Broadcast Client' mode association is expected to receive packets with a 'Packet Mode Value' of 5 for this association (see 'Bcast Client' mode row in Section 9.2, Figure 20, where each column in that row is 'DSCRD' except for the '5' column, which is 'PROC'.)  Therefore, the value of 'Packet Mode Value' for 'Broadcast Client' should be '5', not 'N/A'.\r\n\r\nIt might help the clarity of Figure 1 if the row labeled 'Packet Mode Value' were to be changed to 'Receive Packet Mode Value(s)'.\r\n\r\nThe text immediately following Figure 1 also has the packet mode values swapped.  As made clear throughout the RFC (for example, see Section 9.2 where is says, \"FXMIT.  This indicates a client (mode 3) packet matching no association (mode 0).  If the destination address is not a broadcast address, the server constructs a server (mode 4) packet and returns it to the client without retaining state.\"), clients send servers packet mode 3 packets, not packet mode 4 packets; it is servers which send clients packet mode 4 packets, not packet mode 3 packets.\r\n\r\nJust to make it perfectly clear, here are the modes of packets sent:\r\n\r\n* Time t0: client mobilizes 'Client' mode association for server (via configuration, or due to reception of manycast server packet)\r\n* Time t1: client transmits mode 3 packet to server (e.g. via poll(p) => peer_xmit(p) when c.t >= p->nextdate)\r\n* Time t2: server receives mode 3 packet from client (dispatch: FXMIT; no association found or mobilized)\r\n* Time t3: server transmits mode 4 packet to client\r\n* Time t4: client receives mode 4 packet from server (matches previously mobilized association -- dispatch: PROC)", "submit_date": "2012-02-16", "submitter_name": "Richard Walters", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3127", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.5.5.1", "orig_text": "                /*\r\n                 * Scan the chime list from lowest to highest to find\r\n                 * the lower endpoint.\r\n                 */\r\n                found = 0;\r\n                chime = 0;\r\n                for (i = 0; i < n; i++) {\r\n                        chime -= s.m[i].type;\r\n                        if (chime >= n - found) {\r\n                                low = s.m[i].edge;\r\n                                break;\r\n                        }\r\n                        if (s.m[i].type == 0)\r\n                                found++;\r\n                }\r\n\r\n                /*\r\n                 * Scan the chime list from highest to lowest to find\r\n                 * the upper endpoint.\r\n                 */\r\n                chime = 0;\r\n                for (i = n - 1; i >= 0; i--) {\r\n                        chime += s.m[i].type;\r\n                        if (chime >= n - found) {\r\n                                high = s.m[i].edge;\r\n                                break;\r\n                        }\r\n                        if (s.m[i].type == 0)\r\n                                found++;\r\n                }\r\n", "correct_text": "                /*\r\n                 * Scan the chime list from lowest to highest to find\r\n                 * the lower endpoint.\r\n                 */\r\n                found = 0;\r\n                chime = 0;\r\n                for (i = 0; i < n; i++) {\r\n                        chime -= s.m[i].type;\r\n                        if (chime >= n - allow) {\r\n                                low = s.m[i].edge;\r\n                                break;\r\n                        }\r\n                        if (s.m[i].type == 0)\r\n                                found++;\r\n                }\r\n\r\n                /*\r\n                 * Scan the chime list from highest to lowest to find\r\n                 * the upper endpoint.\r\n                 */\r\n                chime = 0;\r\n                for (i = n - 1; i >= 0; i--) {\r\n                        chime += s.m[i].type;\r\n                        if (chime >= n - allow) {\r\n                                high = s.m[i].edge;\r\n                                break;\r\n                        }\r\n                        if (s.m[i].type == 0)\r\n                                found++;\r\n                }\r\n", "notes": "In both scans (lowest to highest, and highest to lowest)\r\n\r\nchime >= n - found\r\n\r\nneeds to be:\r\n\r\nchime >= n - allow", "submit_date": "2012-02-17", "submitter_name": "Richard Walters", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3128", "doc-id": "RFC5911", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   ContentInfo\r\n   FROM CryptographicMessageSyntax2004\r\n       { iso(1) member-body(2) us(840) rsadsi(113549)\r\n       pkcs(1) pkcs-9(9) smime(16) modules(0) id-mod-cms-2004-02(41) } ;", "correct_text": "   ContentInfo\r\n   FROM CryptographicMessageSyntax-2009\r\n       {iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n        smime(16) modules(0) id-mod-cms-2004-02(41)};", "notes": "ContentInfo to be imported from the module that is defined elsewhere in RFC 5911.", "submit_date": "2012-02-18", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4561", "doc-id": "RFC7568", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.", "orig_text": "Since it was released in 1996, the SSLv3 protocol [RFC6101] has been\r\n   subject to a long series of attacks, both on its key exchange\r\n   mechanism and on the encryption schemes it supports.  Despite being\r\n   replaced by TLS 1.0 [RFC2246] in 1999, and subsequently TLS 1.1 in\r\n   2002 [RFC4346] and 1.2 in 2006 [RFC5246], availability of these\r\n   replacement versions has not been universal.  As a result, many\r\n   implementations of TLS have permitted the negotiation of SSLv3.\r\n\r\n   The predecessor of SSLv3, SSL version 2, is no longer considered\r\n   sufficiently secure [RFC6176].  SSLv3 now follows.", "correct_text": "Since it was released in 1996, the SSLv3 protocol [RFC6101] has been\r\n   subject to a long series of attacks, both on its key exchange\r\n   mechanism and on the encryption schemes it supports.  Despite being\r\n   replaced by TLS 1.0 [RFC2246] in 1999, and subsequently TLS 1.1 in\r\n   2006 [RFC4346] and 1.2 in 2008 [RFC5246], availability of these\r\n   replacement versions has not been universal.  As a result, many\r\n   implementations of TLS have permitted the negotiation of SSLv3.\r\n\r\n   The predecessor of SSLv3, SSL version 2, is no longer considered\r\n   sufficiently secure [RFC6176].  SSLv3 now follows.", "notes": "TLS 1.1 was first drafted in 2002, but not published until 2006. Similarly, TLS 1.2 was drafted in 2006, but not published until 2008.", "submit_date": "2015-12-08", "submitter_name": "Richard Petrie", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3129", "doc-id": "RFC2683", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1.3", "orig_text": "       C: 022 FETCH 3 BODY[1]<0.20000>\r\n       S: * 3 FETCH (FLAGS(\\Seen) BODY[1]<0> {20000}\r\n       S: ...data...)\r\n       S: 022 OK done\r\n       C: 023 FETCH 3 BODY[1]<20001.20000>\r\n       S: * 3 FETCH (BODY[1]<20001> {20000}\r\n       S: ...data...)\r\n       S: 023 OK done\r\n       C: 024 FETCH 3 BODY[1]<40001.20000>\r\n       ...etc...", "correct_text": "       C: 022 FETCH 3 BODY[1]<0.20000>\r\n       S: * 3 FETCH (FLAGS (\\Seen) BODY[1]<0> {20000}\r\n       S: ...data...)\r\n       S: 022 OK done\r\n       C: 023 FETCH 3 BODY[1]<20000.20000>\r\n       S: * 3 FETCH (BODY[1]<20000> {20000}\r\n       S: ...data...)\r\n       S: 023 OK done\r\n       C: 024 FETCH 3 BODY[1]<40000.20000>\r\n       ...etc...", "notes": "The main erratum is an off-by-one error. The starting index of an IMAP partial body fetch is zero-based. A request for BODY[1]<0.20000> would fetch octets 0 to 19999 (inclusive). A request for BODY[1]<20001.20000> would fetch octets 20001 to 40000 (inclusive). As a consequence, octet 2000 is skipped in the original suggested implementation, with the strong possibility of leading to data corruption if the message body is reconstructed by concatenating the retrieved substrings.\r\n\r\nThere is a secondary erratum: There should be a mandatory space between the \"FLAGS\" string and the parenthesized list of flags. Refer to the definition for msg-att-dynamic in the Formal Syntax of RFC 3501.", "submit_date": "2012-02-19", "submitter_name": "Karl Fenech", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3130", "doc-id": "RFC5912", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "  ct-foo CONTENT-TYPE ::=\r\n      { FooType IDENTIFIED BY id-ct-foo }", "correct_text": "  ct-foo CONTENT-TYPE ::=\r\n      { TYPE FooType IDENTIFIED BY id-ct-foo }", "notes": "Of course, 'ct-foo', 'FooType', and 'id-ct-foo' need to be replaced as appropriate for the use of CONTENT-TYPE in RFC 5912.  CONTENT-TYPE is imported from a module defined in RFC 5911, and errata 2612 makes a change to that definition.  Therefore, 'TYPE' needs to be added each time a content type is defined to align with errata 2612.\r\n\r\nThe definitions that need to be updated are:\r\n   ct-encKeyWithID,\r\n   ct-scvp-certValRequest,\r\n   ct-scvp-certValResponse,\r\n   ct-scvp-valPolRequest,\r\n   ct-scvp-valPolResponse,\r\n   ct-PKIData, and\r\n   ct-PKIResponse.", "submit_date": "2012-02-19", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3131", "doc-id": "RFC1320", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "Note. The value 5A..99 is a hexadecimal 32-bit constant, written with\r\nthe high-order digit first. This constant represents the square root\r\nof 2. The octal value of this constant is 013240474631.\r\n\r\nThe value 6E..A1 is a hexadecimal 32-bit constant, written with the\r\nhigh-order digit first.  This constant represents the square root of\r\n3. The octal value of this constant is 015666365641.\r\n", "correct_text": "Note. The value 5A..99 is a hexadecimal 32-bit constant, written with\r\nthe high-order digit first. This constant represents the square root\r\nof 2 divided by 4. The octal value of this constant is 013240474631.\r\n\r\nThe value 6E..A1 is a hexadecimal 32-bit constant, written with the\r\nhigh-order digit first.  This constant represents the square root of\r\n3 divided by 4. The octal value of this constant is 015666365641.\r\n", "notes": "More precisely, the value 5A..99 is a result of the formula: HEX(TRUNC((SQRT(2)/4)*2^32)), where SQRT represents the square root, TRUNC is truncation of the fractional part, HEX is a hexadecimal representation. Similarly, the value 6E..A1 = HEX(TRUNC((SQRT(3)/4)*2^32)).", "submit_date": "2012-02-20", "submitter_name": "Sergey Panasenko", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3132", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.2.1", "orig_text": "   First, those servers that are unusable according to the rules of the\r\n   protocol are detected and discarded as shown by the accept() routine\r\n   in Appendix A.5.5.3.", "correct_text": "   First, those servers that are unusable according to the rules of the\r\n   protocol are detected and discarded as shown by the fit() routine\r\n   in Appendix A.5.2.", "notes": "The fit() and accept() routines are identical.  Since accept() is not called from, nor mentioned anywhere else, whereas fit() is called from two places and listed in the function prototypes, just drop accept() and use fit() instead in section 11.2.1.", "submit_date": "2012-02-21", "submitter_name": "Richard Walters", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3133", "doc-id": "RFC1071", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "           /*  Add left-over byte, if any */\r\n       if( count > 0 )\r\n               sum += * (unsigned char *) addr;", "correct_text": "           /*  Add left-over byte, if any */\r\n       if( count > 0 )  {\r\n               unsigned short left_over = 0;\r\n               * (unsigned char *) &left_over = * (unsigned char *) addr;\r\n               sum += left_over;\r\n       }", "notes": "for big-endian", "submit_date": "2012-02-23", "submitter_name": "chenhaospark", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3144", "doc-id": "RFC6140", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "<none -- new text being added>", "correct_text": "<Insert following new paragraph between existing 2nd and 3rd paragraph>\r\n\r\nThe registrar MUST populate the Contact header field of the 200 (OK) response\r\nto REGISTER only with the explicitly registered Contact URIs identified in the\r\nREGISTER request (i.e., for bulk number registration, the Contact URIs\r\ncontaining the \u201cbnc\u201d parameter). The Contact header field of the 200 (OK)\r\nresponse MUST NOT contain the multiple contact addresses that are implicitly\r\ncreated by the bulk number registration procedure. ", "notes": "The proposed text clarifies how the MUST statement in RFC 3261 section 10.3 item-8 applies in the case of bulk number registration.\r\n\r\nRFC 3261 section 10.3 item-8 says ...\r\n8. The registrar returns a 200 (OK) response.  The response MUST\r\n   contain Contact header field values enumerating all current\r\n   bindings.  <... text deleted...>\r\n\r\nFor bulk number registration, this means that the Contact header field in the 200 (OK) response to REGISTER contains the Contact URI with the \"bnc\" parameter, and not the multiple derived contact URIs that are bound to the multiple E.164 numbers associated with the registering PBX.", "submit_date": "2012-03-01", "submitter_name": "David Hancock", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3145", "doc-id": "RFC2648", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2", "orig_text": "      print \"Status:  302 Moved temporarily0;", "correct_text": "      print \"Status:  302 Moved temporarily\";", "notes": "might be both editorial and technical error (typo, causing the Perl code invalid)", "submit_date": "2012-03-02", "submitter_name": "Michal Bozon", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3146", "doc-id": "RFC2648", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3", "orig_text": "    if ($accept =~ /text\\/uri-list/) { #look for text/uri-list,\r\n        otherwise text/html\r\n", "correct_text": "    if ($accept =~ /text\\/uri-list/) {\r\n        # look for text/uri-list, otherwise text/html\r\n", "notes": "Appears 4 times in the same section. Might be both editorial and technical error (forced line break in the middle of the comment, making the Perl code invalid)", "submit_date": "2012-03-02", "submitter_name": "Michal Bozon", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3134", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix A.5", "orig_text": "   From: Pete(A nice \\) chap) <pete(his account)@silly.test(his host)>\r\n   To:A Group(Some people)\r\n        :Chris Jones <c@(Chris's host.)public.example>,\r\n            joe@example.org,\r\n     John <jdoe@one.test> (my dear friend); (the end of the group)\r\n", "correct_text": "   From: Pete(A nice \\) chap) <pete(his account)@silly.test(his host)>\r\n   To:A Group(Some people)\r\n        :Chris Jones <c@(Chris's host.)public.example>,\r\n            joe@example.org,\r\n     John <jdoe@one.test> (my dear friend); (the end of the group)\r\n", "notes": "Errata 2515 and 2579 change the above text, but there is no change needed to the original RFC. The quote from Section 3.4.1 says \"SHOULD NOT\", not \"MUST NOT\" (\"Comments and folding white space SHOULD NOT be used around the \"@\" in the addr-spec.\"). The example in A.5 \"is aesthetically displeasing, but perfectly legal.\" It's meant to highlight extreme cases.\n --VERIFIER NOTES-- \nThough unstated in the text, the intention of the WG was that the examples in A.1-5 were intended to be messages that conformed to all of the MUSTs and SHOULDs of section 3. Indeed, RFC 2119 defines SHOULD NOT  to mean effectively MUST NOT unless you have fully understood and weighed the reasons for choosing a different course. The description below the example says that it is \"aesthetically displeasing, but perfectly legal\". I don't think violating a SHOULD NOT makes it \"perfectly\" legal.", "submit_date": "2012-02-25", "submitter_name": "Ashley Willis", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3135", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.4", "orig_text": "   quoted-string   =   [CFWS]\r\n                       DQUOTE *([FWS] qcontent) [FWS] DQUOTE\r\n                       [CFWS]\r\n", "correct_text": "   quoted-string   =   [CFWS]\r\n                       DQUOTE ((1*([FWS] qcontent) [FWS]) / FWS) DQUOTE\r\n                       [CFWS]", "notes": "The text following this definition states that a \"quoted-string is identical to atom, semantically.\" \"Semantically, neither the optional CFWS outside of the quote characters nor the quote characters themselves are part of the quoted-string; the quoted-string is what is contained between the two quote characters.\"\r\n\r\nThe published definition allows, for example, an angle-addr of <\"\"@ietf.org> which is equivalent to <@ietf.org>, hence invalid. The corrected definition ensures that at a minimum there is one FWS or qcontent between each DQUOTE.\r\n\r\nCurrently allowed yet invalid: <\"\"@ietf.org>, <foo.\"\"@ietf.org>, <\"\".bar@ietf.org>, and <foo.\"\".bar@ietf.org>.\r\n\r\nAs a quoted-string must be bound by the ends of the local-part or by a dot, there is no change in regard to the currently invalid addresses such as <foo\"\"@ietf.org>, <\"\"bar@ietf.org>, and <foo\"\"bar@ietf.org>.", "submit_date": "2012-02-25", "submitter_name": "Ashley Willis", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-13 20:47:31"}, {"errata_id": "3136", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.", "orig_text": "   QSAFE-CHAR = WSP / \"!\" / %x23-7E / NON-ASCII\r\n     ; Any character except CTLs, DQUOTE\r\n\r\n   SAFE-CHAR = WSP / \"!\" / %x23-39 / %x3C-7E / NON-ASCII\r\n     ; Any character except CTLs, DQUOTE, \";\", \":\"\r\n\r\n   VALUE-CHAR = WSP / VCHAR / NON-ASCII\r\n     ; Any textual character\r\n", "correct_text": "   QSAFE-CHAR = WSP / \"!\" / %x23-7E / NON-ASCII\r\n     ; Any character except CTLs, DQUOTE but including HTAB\r\n\r\n   SAFE-CHAR = WSP / \"!\" / %x23-39 / %x3C-7E / NON-ASCII\r\n     ; Any character except CTLs, DQUOTE, \";\", \":\" but including HTAB\r\n\r\n   VALUE-CHAR = WSP / VCHAR / NON-ASCII\r\n     ; Any textual character including HTAB\r\n", "notes": "The ABNF is inconsistent with the textual decription regarding the HTAB character which is part of WSP and CTL\r\n\r\nAlternatively HTAB could be excluded by replacing WSP by SP in at least QSAFE-CHAR and SAFE-CHAR.\r\n\r\nPSA: During discussion on the VCARDDAV list, Barry Leiba noted: \"His point for the first two is that HTAB is a CTL (according to RFC 5234), so the comment \"any character except CTLs\" excludes HTAB.  But the grammar uses WSP, which *includes* HTAB (also RFC 5234).  So the comment is not consistent with the grammar.  Either change WSP to SP (thus excluding HTAB, as the comment says) or make the change he suggests to the comment, so it's consistent with the grammar. For the third item, VALUE-CHAR, I think the point is that it's not\r\nclear whether HTAB is a \"textual character\", since that term isn't\r\nformally defined.  By saying \"including HTAB\" in the comment (since\r\nit's included by WSP), it's clearer.\" Agreement on list that this is a correct erratum. -- Peter Saint-Andre", "submit_date": "2012-02-25", "submitter_name": "Kai Giebeler", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3137", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4.", "orig_text": "The ALTID property MAY also be used in may contexts other than with\r\n   the LANGUAGE parameter.", "correct_text": "The ALTID property MAY also be used in many contexts other than with\r\n   the LANGUAGE parameter.", "notes": "", "submit_date": "2012-02-25", "submitter_name": "Kai Giebeler", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3138", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3.", "orig_text": "   param-value = *SAFE-CHAR / DQUOTE *QSAFE-CHAR DQUOTE\r\n\r\n   SAFE-CHAR = WSP / \"!\" / %x23-39 / %x3C-7E / NON-ASCII\r\n     ; Any character except CTLs, DQUOTE, \";\", \":\"\r\n", "correct_text": "   param-value = *SAFE-CHAR / DQUOTE *QSAFE-CHAR DQUOTE\r\n\r\n   SAFE-CHAR = WSP / \"!\" / %x23-2B / %x2D-39 / %x3C-7E / NON-ASCII\r\n     ; Any character except CTLs, DQUOTE, \",\", \";\", \":\"\r\n", "notes": "\"5. Property Parameters\" states: \"Property parameter value elements that contain the COLON (U+003A), SEMICOLON (U+003B), or COMMA (U+002C) character separators MUST be specified as quoted-string text values.\"\r\n\r\nSo COMMA cannot be part of a non-quoted parameter value which should be reflected by the SAFE-CHAR declaration.\r\n\r\nOtherwise a value of\r\nX-PARAM=tel,fax\r\ncould be ambiguously interpreted as\r\n\"tel\",\"fax\" (separated values)\r\nand \"tel,fax\" (combined value containing a COMMA)", "submit_date": "2012-02-25", "submitter_name": "Kai Giebeler", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7052", "doc-id": "RFC4987", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "Instead, they encode most of the state\r\n(and all of the strictly required) state that they would normally\r\nkeep into the sequence number transmitted on the SYN-ACK.\r\n", "correct_text": "Instead, they encode most of the state\r\n(and all of the strictly required state) that they would normally\r\nkeep into the sequence number transmitted on the SYN-ACK.\r\n", "notes": "Move the second \"state\" into the parentheses.", "submit_date": "2022-07-28", "submitter_name": "Merlin B\u00fcge", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-07-29 22:39:07"}, {"errata_id": "6078", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.", "orig_text": "   For example, consider the following definition:\r\n\r\n     leaf lxiv {\r\n       type decimal64 {\r\n         fraction-digits 18;\r\n       }\r\n       must \". <= 10\";\r\n     }\r\n\r\n   An instance of the \"lxiv\" leaf having the value of\r\n   10.0000000000000001 will then successfully pass validation.", "correct_text": "   For example, consider the following definition:\r\n\r\n     leaf lxiv {\r\n       type decimal64 {\r\n         fraction-digits 18;\r\n       }\r\n       must \". <= 9\";\r\n     }\r\n\r\n   An instance of the \"lxiv\" leaf having the value of\r\n   9.0000000000000001 will then successfully pass validation.", "notes": "Value 10.0000000000000001 is not a valid decimal64 value with 18 fraction digits as per Section 9.3.4.", "submit_date": "2020-04-03", "submitter_name": "Michal Vasko", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2020-04-03 11:08:51"}, {"errata_id": "3139", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3. et. al.", "orig_text": "3.3. ABNF Format Definition\r\n   param-value = *SAFE-CHAR / DQUOTE *QSAFE-CHAR DQUOTE\r\n   any-param  = (iana-token / x-name) \"=\" param-value *(\",\" param-value)\r\n\r\n5.6. TYPE\r\n   type-param = \"TYPE=\" type-value *(\",\" type-value)\r\n\r\n5.9. SORT-AS\r\n   sort-as-value = param-value *(\",\" param-value)\r\n   SORT-AS=\"Harten,Rene\"\r\n\r\n6.4.1. TEL\r\n   TYPE=text;TYPE=voice\r\n   TYPE=\"voice,fax\"\r\n", "correct_text": "The semantics of of lists passed to/by parameters should be consistent\r\nor clearly stated.", "notes": "(I'm unsure if this is a technical problem or simply needs to be clarified)\r\n\r\nAll of the following parameters seem to be allowed and seem to be (more or less) equivalent:\r\nX-PARAM=\"tel,fax,mail\"\r\nX-PARAM=\"tel\",\"fax\",\"mail\"\r\nX-PARAM=\"tel\",fax,\"mail,pager\"\r\nX-PARAM=\"tel,fax\";X-PARAM=\"mail\",pager\r\n\r\nThe main advantage of quoting strings gets lost, if contained characters get a special meaning (like a comma for separation).\r\n\r\nIn my opinion quoted values should be considered to be some kind of atomic. Without that rule there's no generic approach to interpret unknown parameter values. e.g.\r\nX-PARAM=\"doc1.txt?row=10,col=6\",\"doc2.txt?row=3,col=5\"\r\n\r\nIf \"voice,fax\" may be decomposed to \"voice\", \"fax\" the example could be decomposed to:\r\n- \"doc1.txt?row=10\"\r\n- \"col=6\"\r\n- \"doc2.txt?row=3\"\r\n- \"col=5\"\r\n... which is clearly not the authors intention. By recomposing it could end up as\r\n\"doc1.txt?row=10,col=6,doc2.txt?row=3,col=5\"\r\n\r\nPreserving unknown parameters in a read-modify-write-process is nearly impossible to implement.", "submit_date": "2012-02-25", "submitter_name": "Kai Giebeler", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3140", "doc-id": "RFC5213", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "    As per this specification, the following mobility options are\r\n      valid in a Proxy Binding Update message.  These options can be\r\n      present in the message in any order.  There can be one or more\r\n      instances of the Home Network Prefix options present in the\r\n      message.  However, there cannot be more than one instance of any\r\n      of the following options.\r\n\r\n         Mobile Node Identifier option\r\n\r\n         Home Network Prefix option\r\n\r\n         Handoff Indicator option\r\n\r\n         Access Technology Type option\r\n\r\n         Timestamp option\r\n\r\n         Mobile Node Link-layer Identifier option\r\n\r\n         Link-local Address option", "correct_text": "    As per this specification, the following mobility options are\r\n      valid in a Proxy Binding Update message.  These options can be\r\n      present in the message in any order.  There can be one or more\r\n      instances of the Home Network Prefix options present in the\r\n      message.  However, there cannot be more than one instance of any\r\n      of the following options.\r\n\r\n         Mobile Node Identifier option\r\n\r\n         Handoff Indicator option\r\n\r\n         Access Technology Type option\r\n\r\n         Timestamp option\r\n\r\n         Mobile Node Link-layer Identifier option\r\n\r\n         Link-local Address option", "notes": "There can be more than one instance of Home Network Prefix. So the list should not include Home Network Prefix", "submit_date": "2012-02-28", "submitter_name": "Behcet Sarikaya", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4563", "doc-id": "RFC3552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.", "orig_text": "This problem exists with any negotiation approach, but \r\ngeneric frameworks exacerbate it by encouraging the application \r\nprotocol author to just specify the framework rather than think hard \r\nabout the appropriate underlying mechanisms, particularly since the \r\nmechanisms can very widely in the degree of security offered.", "correct_text": "This problem exists with any negotiation approach, but \r\ngeneric frameworks exacerbate it by encouraging the application \r\nprotocol author to just specify the framework rather than think hard \r\nabout the appropriate underlying mechanisms, particularly since the \r\nmechanisms can vary widely in the degree of security offered.", "notes": "At the end of the paragraph, I think \"very\" should be changed to \"vary\"", "submit_date": "2015-12-13", "submitter_name": "Walter Dolce", "verifier_id": "", "verifier_name": "Andrew Sullivan", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3151", "doc-id": "RFC6231", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5", "orig_text": "   | 433  | Unsupported   | request contains      |                    |\r\n   |      | collect and   | <collect> and         |                    |\r\n   |      | record        | <record> elements and |                    |\r\n   |      | capability    | the MS does support   |                    |\r\n   |      |               | these operations      |                    |\r\n   |      |               | simultaneously.       |                    |\r\n", "correct_text": "   | 433  | Unsupported   | request contains      |                    |\r\n   |      | collect and   | <collect> and         |                    |\r\n   |      | record        | <record> elements and |                    |\r\n   |      | capability    | the MS does not       |                    |\r\n   |      |               | support these         |                    |\r\n   |      |               | operations            |                    |\r\n   |      |               | simultaneously.       |                    |\r\n", "notes": "Typo discovered in 6231-iana draft. Need anti-sense of description.", "submit_date": "2012-03-07", "submitter_name": "Eric Burger", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3152", "doc-id": "RFC6527", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "           REVISION \"201202120000Z\"    -- Feb 13, 2012", "correct_text": "           REVISION \"201202130000Z\"    -- Feb 13, 2012", "notes": "The revision data does not match the date given in the comment and the date of the LAST-UPDATED clause.", "submit_date": "2012-03-08", "submitter_name": "Juergen Schoenwaelder", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3153", "doc-id": "RFC6532", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "The security impact of UTF-8 headers on email signature systems such\r\nas Domain Keys Identified Mail (DKIM), S/MIME, and OpenPGP is\r\ndiscussed in Section 14 of [RFC6530].\r\n", "correct_text": "The security impact of UTF-8 headers on email signature systems such\r\nas Domain Keys Identified Mail (DKIM), S/MIME, and OpenPGP is\r\ndiscussed in Section 13 of [RFC6530].\r\n", "notes": "Incorrect section number in reference.", "submit_date": "2012-03-09", "submitter_name": "Dave Thaler", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3154", "doc-id": "RFC4861", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2.1", "orig_text": "Default: 0.33 * MaxRtrAdvInterval If MaxRtrAdvInterval >= 9 seconds;\r\notherwise, the Default is MaxRtrAdvInterval.", "correct_text": "Default: 0.33 * MaxRtrAdvInterval If MaxRtrAdvInterval >= 9 seconds;\r\notherwise, the Default is 0.75 * MaxRtrAdvInterval.", "notes": "The original text contradicts the previous paragraph in the definition of MinRtrAdvInterval, which says: \"MUST be no less than 3 seconds and no greater than .75 * MaxRtrAdvInterval.\"", "submit_date": "2012-03-11", "submitter_name": "Ladislav Lhotka", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3155", "doc-id": "RFC5036", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.5.1.2.1", "orig_text": "      -  The LDP protocol version is not supported by the receiver, d or\r\n         it is supported but is not the version negotiated for the\r\n         session during session establishment.  This is a fatal error\r\n         signaled by the Bad Protocol Version Status Code.\r\n\r\n", "correct_text": "      -  The LDP protocol version is not supported by the receiver, or\r\n         it is supported but is not the version negotiated for the\r\n         session during session establishment.  This is a fatal error\r\n         signaled by the Bad Protocol Version Status Code.\r\n\r\n", "notes": "", "submit_date": "2012-03-12", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3141", "doc-id": "RFC5213", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "As per this specification, the following mobility options are\r\n      valid in a Proxy Binding Acknowledgement message.  These options\r\n      can be present in the message in any order.  There can be one or\r\n      more instances of the Home Network Prefix options present in the\r\n      message.  However, there cannot be more than one instance of any\r\n      of the following options.\r\n\r\n         Mobile Node Identifier option\r\n\r\n         Home Network Prefix option\r\n\r\n         Handoff Indicator option\r\n\r\n         Access Technology Type option\r\n\r\n         Timestamp option\r\n\r\n         Mobile Node Link-layer Identifier option\r\n\r\n         Link-local Address option", "correct_text": "As per this specification, the following mobility options are\r\n      valid in a Proxy Binding Acknowledgement message.  These options\r\n      can be present in the message in any order.  There can be one or\r\n      more instances of the Home Network Prefix options present in the\r\n      message.  However, there cannot be more than one instance of any\r\n      of the following options.\r\n\r\n         Mobile Node Identifier option\r\n\r\n         Handoff Indicator option\r\n\r\n         Access Technology Type option\r\n\r\n         Timestamp option\r\n\r\n         Mobile Node Link-layer Identifier option\r\n\r\n         Link-local Address option", "notes": "There can be more than one instance of Home Network Prefix option so the list should not contain Home Network Prefix.", "submit_date": "2012-02-28", "submitter_name": "Behcet Sarikaya", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3142", "doc-id": "RFC4966", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "Unless UDP encapsulation is used for IPsec [RFC3498], traffic using\r\nIPsec AH (Authentication Header), in transport and tunnel mode, and\r\nIPsec ESP (Encapsulating Security Payload), in transport mode, is\r\nunable to be carried through NAT-PT without terminating the security\r\nassociations on the NAT-PT, due to their usage of cryptographic\r\nintegrity protection.", "correct_text": "IPsec traffic using AH (Authentication Header) [RFC4302] in both\r\ntransport and tunnel modes cannot be carried through NAT-PT without\r\nterminating the security associations on the NAT-PT, due to the\r\ninclusion of IP header fields in the scope of AH's cryptographic\r\nintegrity protection [RFC3715].  In addition, IPsec traffic using\r\nESP (Encapsulating Security Payload) [RFC4303] in transport mode\r\ngenerally uses UDP encapsulation [RFC3948] for NAT traversal\r\n(including NAT-PT traversal) in order to avoid the problems\r\ndescribed in [RFC3715].\r\n", "notes": "This RFC4966 text was copied into draft-ietf-behave-64-analysis-06.\r\nGen-ART review of that draft found that the statement was incorrect\r\nfor ESP.  The correct explanations of the problems (in great detail)\r\ncan be found in RFC 3715.", "submit_date": "2012-02-29", "submitter_name": "David L. Black", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3143", "doc-id": "RFC4111", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14", "orig_text": "   [RFC3889]    Barbir, A., Murphy, S., and Y. Yang, \"Generic Threats to\r\n                Routing Protocols\", RFC 3889, October 2004.", "correct_text": "   [RFC4593]    Barbir, A., Murphy, S., and Y. Yang, \"Generic Threats to\r\n                Routing Protocols\", RFC 4593, October 2006.", "notes": "Although the cited document appears to have reached the AUTH48 stage in 2004 and was provisionally assigned an RFC number of 3889, it was withdrawn for further editing and was never actually published under that number. Its eventual publication in 2006 was under the RFC number 4593.", "submit_date": "2012-02-29", "submitter_name": "Adam Roach", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4442", "doc-id": "RFC3207", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix", "orig_text": "   -  Section 5 and 7: More discussion of the man-in-the-middle attacks\r\n   -  Section 5: Additional discussion of when a server should and\r\n      should not advertise the STARTTLS extension\r\n   -  Section 5: Changed the requirements on SMTP clients after\r\n      receiving a 220 response.\r\n   -  Section 5.1: Clarified description of verifying certificates.\r\n   -  Section 5.3: Added the section on \"STARTTLS on the Submission\r\n      Port\"\r\n   -  Section 6: Bug fix in the example to indicate that the client\r\n      needs to issue a new EHLO command, as already is described in\r\n      section 5.2.\r\n   -  Section 7: Clarification of the paragraph on acceptable degree of\r\n      privacy. Significant change to the discussion of how to avoid a\r\n      man-in-the-middle attack.\r\n   -  Section A: Update reference from RFC 821 to RFC 2821.\r\n", "correct_text": "   -  Section 4 and 6: More discussion of the man-in-the-middle attacks\r\n   -  Section 4: Additional discussion of when a server should and\r\n      should not advertise the STARTTLS extension\r\n   -  Section 4: Changed the requirements on SMTP clients after\r\n      receiving a 220 response.\r\n   -  Section 4.1: Clarified description of verifying certificates.\r\n   -  Section 4.3: Added the section on \"STARTTLS on the Submission\r\n      Port\"\r\n   -  Section 5: Bug fix in the example to indicate that the client\r\n      needs to issue a new EHLO command, as already is described in\r\n      section 4.2.\r\n   -  Section 5: Clarification of the paragraph on acceptable degree of\r\n      privacy. Significant change to the discussion of how to avoid a\r\n      man-in-the-middle attack.\r\n   -  Section 7: Update reference from RFC 821 to RFC 2821.\r\n", "notes": "The appendix lists the changes as they apply to the sections of rfc 2487, but the links in https://tools.ietf.org/html/rfc3207#page-8 point back to the section numbers in RFC 3207.  Either the section numbers referred to should be RFC 3207 numbers (the correction i'm proposing here), or the links within the HTML version should point back to RFC 2487 instead.\n --VERIFIER NOTES-- \nThe tools-based HTML rendering is not the definitive version, and the errata system is not for recording problems with that version. There's no error in http://www.rfc-editor.org/rfc/rfc3207.txt", "submit_date": "2015-08-10", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3156", "doc-id": "RFC5036", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5.8", "orig_text": "   Path Vector\r\n      Specifies the LSRs along the LSR being set up by the Label Request\r\n      message.  Section \"Path Vector Procedures\" describes how to handle\r\n      this TLV.\r\n", "correct_text": "   Path Vector\r\n      Specifies the LSRs along the LSP being set up by the Label Request\r\n      message.  Section \"Path Vector Procedures\" describes how to handle\r\n      this TLV.\r\n", "notes": "Erroneously typed LSR instead of the LSP.", "submit_date": "2012-03-15", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3157", "doc-id": "RFC4556", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "   8.  The client's Diffie-Hellman public value (clientPublicValue) is\r\n       included if and only if the client wishes to use the Diffie-\r\n       Hellman key agreement method.  The Diffie-Hellman domain\r\n       parameters [IEEE1363] for the client's public key are specified\r\n       in the algorithm field of the type SubjectPublicKeyInfo\r\n       [RFC3279], and the client's Diffie-Hellman public key value is\r\n       mapped to a subjectPublicKey (a BIT STRING) according to\r\n       [RFC3279].  When using the Diffie-Hellman key agreement method,\r\n       implementations MUST support Oakley 1024-bit Modular Exponential\r\n       (MODP) well-known group 2 [RFC2412] and Oakley 2048-bit MODP\r\n       well-known group 14 [RFC3526] and SHOULD support Oakley 4096-bit\r\n       MODP well-known group 16 [RFC3526].\r\n\r\n       The Diffie-Hellman field size should be chosen so as to provide\r\n       sufficient cryptographic security [RFC3766].\r\n\r\n       When MODP Diffie-Hellman is used, the exponents should have at\r\n       least twice as many bits as the symmetric keys that will be\r\n       derived from them [ODL99].\r\n", "correct_text": "   8.  The client's Diffie-Hellman public value (clientPublicValue) is\r\n       included if and only if the client wishes to use the Diffie-\r\n       Hellman key agreement method.  The Diffie-Hellman domain\r\n       parameters [IEEE1363] for the client's public key are specified\r\n       in the algorithm field of the type SubjectPublicKeyInfo\r\n       [RFC3279], and the client's Diffie-Hellman public key value is\r\n       mapped to a subjectPublicKey (a BIT STRING) according to\r\n       [RFC3279].  When using the Diffie-Hellman key agreement method,\r\n       implementations MUST support Oakley 1024-bit Modular Exponential\r\n       (MODP) well-known group 2 [RFC2412] and Oakley 2048-bit MODP\r\n       well-known group 14 [RFC3526] and SHOULD support Oakley 4096-bit\r\n       MODP well-known group 16 [RFC3526].\r\n\r\n       Some implementations are known to omit the mandatory Q value\r\n       from the DomainParameters (in the algorithm value of the\r\n       clientPublicValue) when using the well-known MODP groups 14 and\r\n       16, which can cause an ASN.1 decoding error for the\r\n       DomainParamters value.  While [RFC3526] does not explicitly\r\n       specify the Q value for the well-known MODP groups 14 and 16,\r\n       the prime modulus of each of these groups is a safe prime --\r\n       having the form P = 2Q + 1, where P and Q are prime.\r\n       Therefore, the Q value for each of these moduli is the\r\n       corresponding Sophie Germain prime, and it is equal to (P-1)/2.\r\n\r\n       The Diffie-Hellman field size should be chosen so as to provide\r\n       sufficient cryptographic security [RFC3766].\r\n\r\n       When MODP Diffie-Hellman is used, the exponents should have at\r\n       least twice as many bits as the symmetric keys that will be\r\n       derived from them [ODL99].\r\n", "notes": "The new paragraph identifies an interoperability problem where an\r\nimplementation omits the Q value (required in the DomainParameters\r\ntype defined in RFC3370) of a Diffie-Hellman group when participating\r\nin PKINIT. This happens for two well-known IKEv2 MODP groups that are\r\ndefined in RFC3526, probably because RFC3526 does not explicitly state\r\nthe Q values for the moduli. The moduli are safe primes, so the new\r\ntext specifies how to compute their Q values (which are the\r\ncorresponding Sophie Germain primes).", "submit_date": "2012-03-15", "submitter_name": "Tom Yu", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3147", "doc-id": "RFC1878", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Subnet Mask     # of nets    Net. Addr.  Host Addr Range  Brodcast Addr.\r\nBits of Subnet  hosts/subnet\r\n\r\n255.255.128.0   2 nets        N.N.0.0     N.N.0-127.N      N.N.127.255\r\n1 bit subnet    32766         N.N.128.0   N.N.128-254.N    N.N.254.255\r\n\r\n255.255.192.0   4 nets        N.N.0.0     N.N.0-63.N       N.N.63.255\r\n2 bit subnet    16382         N.N.64.0    N.N.64-127.N     N.N.127.255\r\n                              N.N.128.0   N.N.128-191.N    N.N.191.255\r\n                              N.N.192.0   N.N.192-254.N    N.N.254.255\r\n\r\n255.255.224.0   8 nets        N.N.0.0     N.N.0-31.N       N.N.31.255\r\n3 bit subnet    8190          N.N.32.0    N.N.32-63.N      N.N.63.255\r\n                              N.N.64.0    N.N.64-95.N      N.N.95.255\r\n                              N.N.96.0    N.N.96-127.N     N.N.127.255\r\n                              N.N.128.0   N.N.128-159.N    N.N.159.255\r\n                              N.N.160.0   N.N.160-191.N    N.N.191.255\r\n                              N.N.192.0   N.N.192-223.N    N.N.223.255\r\n                              N.N.224.0   N.N.224-254.N    N.N.254.255\r\n\r\n255.255.240.0   16 nets       N.N.0.0     N.N.0-15.N       N.N.15.255\r\n4 bit subnet    4094          N.N.16.0    N.N.16-31.N      N.N.31.255\r\n                              N.N.32.0    N.N.32-47.N      N.N.47.255\r\n                              N.N.48.0    N.N.48-63.N      N.N.63.255\r\n                              N.N.64.0    N.N.64-79.N      N.N.79.255\r\n                              N.N.80.0    N.N.80-95.N      N.N.95.255\r\n                              N.N.96.0    N.N.96-111.N     N.N.111.255\r\n                              N.N.112.0   N.N.112-127.N    N.N.127.255\r\n                              N.N.128.0   N.N.128-143.N    N.N.143.255\r\n                              N.N.144.0   N.N.144-159.N    N.N.159.255\r\n                              N.N.160.0   N.N.160-175.N    N.N.175.255\r\n                              N.N.176.0   N.N.176-191.N    N.N.191.255\r\n                              N.N.192.0   N.N.192-207.N    N.N.207.255\r\n                              N.N.208.0   N.N.208-223.N    N.N.223.255\r\n                              N.N.224.0   N.N.224-239.N    N.N.239.255\r\n                              N.N.240.0   N.N.240-254.N    N.N.254.255\r\n\r\n255.255.248.0   32 nets       N.N.0.0     N.N.0-7.N        N.N.7.255\r\n5 bit subnet    2046          N.N.8.0     N.N.8-15.N       N.N.15.255\r\n                              N.N.16.0    N.N.16-23.N      N.N.23.255\r\n                              N.N.24.0    N.N.24-31.N      N.N.31.255\r\n                              N.N.32.0    N.N.32-39.N      N.N.39.255\r\n                              N.N.40.0    N.N.40-47.N      N.N.47.255\r\n                              N.N.48.0    N.N.48-55.N      N.N.55.255\r\n                              N.N.56.0    N.N.56-63.N      N.N.63.255\r\n                              N.N.64.0    N.N.64-71.N      N.N.71.255\r\n                              N.N.72.0    N.N.72-79.N      N.N.79.255\r\n                              N.N.80.0    N.N.80-87.N      N.N.87.255\r\n                              N.N.88.0    N.N.88-95.N      N.N.95.255\r\n                              N.N.96.0    N.N.96-103.N     N.N.103.255\r\n                              N.N.104.0   N.N.104-111.N    N.N.111.255\r\n                              N.N.112.0   N.N.112-119.N    N.N.119.255\r\n                              N.N.120.0   N.N.120-127.N    N.N.127.255\r\n                              N.N.128.0   N.N.128-135.N    N.N.135.255\r\n                              N.N.136.0   N.N.136-143.N    N.N.143.255\r\n                              N.N.144.0   N.N.144-151.N    N.N.151.255\r\n                              N.N.152.0   N.N.152-159.N    N.N.159.255\r\n                              N.N.160.0   N.N.160-167.N    N.N.167.255\r\n                              N.N.168.0   N.N.168-175.N    N.N.175.255\r\n                              N.N.176.0   N.N.176-183.N    N.N.183.255\r\n                              N.N.184.0   N.N.184-191.N    N.N.191.255\r\n                              N.N.192.0   N.N.192-199.N    N.N.199.255\r\n                              N.N.200.0   N.N.200-207.N    N.N.207.255\r\n                              N.N.208.0   N.N.208-215.N    N.N.215.255\r\n                              N.N.216.0   N.N.216-223.N    N.N.223.255\r\n                              N.N.224.0   N.N.224-231.N    N.N.231.255\r\n                              N.N.232.0   N.N.232-239.N    N.N.239.255\r\n                              N.N.240.0   N.N.240-247.N    N.N.247.255\r\n                              N.N.248.0   N.N.248-254.N    N.N.254.255\r\n\r\n255.255.252.0   64 nets       N.N.0.0     N.N.0-3.N        N.N.3.255\r\n6 bit subnet    1022          N.N.4.0     N.N.4-7.N        N.N.7.255\r\n                              N.N.8.0     N.N.8-11.N       N.N.11.255\r\n                              N.N.12.0    N.N.12-15.N      N.N.15.255\r\n                              N.N.240.0   N.N.240-243.N    N.N.243.255\r\n                              N.N.244.0   N.N.244-247.N    N.N.247.255\r\n                              N.N.248.0   N.N.248-251.N    N.N.251.255\r\n                              N.N.252.0   N.N.252-254.N    N.N.254.255\r\n\r\n\r\n255.255.254.0   128 nets      N.N.0.0     N.N.0-1.N        N.N.1.255\r\n7 bit subnet    510           N.N.2.0     N.N.2-3.N        N.N.3.255\r\n                              N.N.4.0     N.N.4-5.N        N.N.5.255\r\n                              N.N.250.0   N.N.250-251.N    N.N.251.255\r\n                              N.N.252.0   N.N.252-253.N    N.N.253.255\r\n                              N.N.254.0   N.N.254.N        N.N.254.255\r\n\r\n\r\n255.255.255.0   255 nets      N.N.0.0     N.N.0.N          N.N.0.255\r\n8 bit subnet    253           N.N.1.0     N.N.1.N          N.N.1.255\r\n                              N.N.252.0   N.N.252.N        N.N.252.255\r\n                              N.N.253.0   N.N.253.N        N.N.253.255\r\n                              N.N.254.0   N.N.254.N        N.N.254.255\r\n", "correct_text": "Subnet Mask     # of nets    Net. Addr.  Host Addr Range  Brodcast Addr.\r\nBits of Subnet  hosts/subnet\r\n\r\n255.255.128.0   2 nets        N.N.0.0     N.N.0-127.N      N.N.127.255\r\n1 bit subnet    32766         N.N.128.0   N.N.128-255.N    N.N.255.255\r\n\r\n255.255.192.0   4 nets        N.N.0.0     N.N.0-63.N       N.N.63.255\r\n2 bit subnet    16382         N.N.64.0    N.N.64-127.N     N.N.127.255\r\n                              N.N.128.0   N.N.128-191.N    N.N.191.255\r\n                              N.N.192.0   N.N.192-255.N    N.N.255.255\r\n\r\n255.255.224.0   8 nets        N.N.0.0     N.N.0-31.N       N.N.31.255\r\n3 bit subnet    8190          N.N.32.0    N.N.32-63.N      N.N.63.255\r\n                              N.N.64.0    N.N.64-95.N      N.N.95.255\r\n                              N.N.96.0    N.N.96-127.N     N.N.127.255\r\n                              N.N.128.0   N.N.128-159.N    N.N.159.255\r\n                              N.N.160.0   N.N.160-191.N    N.N.191.255\r\n                              N.N.192.0   N.N.192-223.N    N.N.223.255\r\n                              N.N.224.0   N.N.224-255.N    N.N.255.255\r\n\r\n255.255.240.0   16 nets       N.N.0.0     N.N.0-15.N       N.N.15.255\r\n4 bit subnet    4094          N.N.16.0    N.N.16-31.N      N.N.31.255\r\n                              N.N.32.0    N.N.32-47.N      N.N.47.255\r\n                              N.N.48.0    N.N.48-63.N      N.N.63.255\r\n                              N.N.64.0    N.N.64-79.N      N.N.79.255\r\n                              N.N.80.0    N.N.80-95.N      N.N.95.255\r\n                              N.N.96.0    N.N.96-111.N     N.N.111.255\r\n                              N.N.112.0   N.N.112-127.N    N.N.127.255\r\n                              N.N.128.0   N.N.128-143.N    N.N.143.255\r\n                              N.N.144.0   N.N.144-159.N    N.N.159.255\r\n                              N.N.160.0   N.N.160-175.N    N.N.175.255\r\n                              N.N.176.0   N.N.176-191.N    N.N.191.255\r\n                              N.N.192.0   N.N.192-207.N    N.N.207.255\r\n                              N.N.208.0   N.N.208-223.N    N.N.223.255\r\n                              N.N.224.0   N.N.224-239.N    N.N.239.255\r\n                              N.N.240.0   N.N.240-255.N    N.N.255.255\r\n\r\n255.255.248.0   32 nets       N.N.0.0     N.N.0-7.N        N.N.7.255\r\n5 bit subnet    2046          N.N.8.0     N.N.8-15.N       N.N.15.255\r\n                              N.N.16.0    N.N.16-23.N      N.N.23.255\r\n                              N.N.24.0    N.N.24-31.N      N.N.31.255\r\n                              N.N.32.0    N.N.32-39.N      N.N.39.255\r\n                              N.N.40.0    N.N.40-47.N      N.N.47.255\r\n                              N.N.48.0    N.N.48-55.N      N.N.55.255\r\n                              N.N.56.0    N.N.56-63.N      N.N.63.255\r\n                              N.N.64.0    N.N.64-71.N      N.N.71.255\r\n                              N.N.72.0    N.N.72-79.N      N.N.79.255\r\n                              N.N.80.0    N.N.80-87.N      N.N.87.255\r\n                              N.N.88.0    N.N.88-95.N      N.N.95.255\r\n                              N.N.96.0    N.N.96-103.N     N.N.103.255\r\n                              N.N.104.0   N.N.104-111.N    N.N.111.255\r\n                              N.N.112.0   N.N.112-119.N    N.N.119.255\r\n                              N.N.120.0   N.N.120-127.N    N.N.127.255\r\n                              N.N.128.0   N.N.128-135.N    N.N.135.255\r\n                              N.N.136.0   N.N.136-143.N    N.N.143.255\r\n                              N.N.144.0   N.N.144-151.N    N.N.151.255\r\n                              N.N.152.0   N.N.152-159.N    N.N.159.255\r\n                              N.N.160.0   N.N.160-167.N    N.N.167.255\r\n                              N.N.168.0   N.N.168-175.N    N.N.175.255\r\n                              N.N.176.0   N.N.176-183.N    N.N.183.255\r\n                              N.N.184.0   N.N.184-191.N    N.N.191.255\r\n                              N.N.192.0   N.N.192-199.N    N.N.199.255\r\n                              N.N.200.0   N.N.200-207.N    N.N.207.255\r\n                              N.N.208.0   N.N.208-215.N    N.N.215.255\r\n                              N.N.216.0   N.N.216-223.N    N.N.223.255\r\n                              N.N.224.0   N.N.224-231.N    N.N.231.255\r\n                              N.N.232.0   N.N.232-239.N    N.N.239.255\r\n                              N.N.240.0   N.N.240-247.N    N.N.247.255\r\n                              N.N.248.0   N.N.248-255.N    N.N.255.255\r\n\r\n255.255.252.0   64 nets       N.N.0.0     N.N.0-3.N        N.N.3.255\r\n6 bit subnet    1022          N.N.4.0     N.N.4-7.N        N.N.7.255\r\n                              N.N.8.0     N.N.8-11.N       N.N.11.255\r\n                              N.N.12.0    N.N.12-15.N      N.N.15.255\r\n                              N.N.240.0   N.N.240-243.N    N.N.243.255\r\n                              N.N.244.0   N.N.244-247.N    N.N.247.255\r\n                              N.N.248.0   N.N.248-251.N    N.N.251.255\r\n                              N.N.252.0   N.N.252-255.N    N.N.255.255\r\n\r\n\r\n255.255.254.0   128 nets      N.N.0.0     N.N.0-1.N        N.N.1.255\r\n7 bit subnet    510           N.N.2.0     N.N.2-3.N        N.N.3.255\r\n                              N.N.4.0     N.N.4-5.N        N.N.5.255\r\n                              N.N.250.0   N.N.250-251.N    N.N.251.255\r\n                              N.N.252.0   N.N.252-253.N    N.N.253.255\r\n                              N.N.254.0   N.N.254-255.N    N.N.255.255\r\n\r\n\r\n255.255.255.0   256 nets      N.N.0.0     N.N.0.N          N.N.0.255\r\n8 bit subnet    254           N.N.1.0     N.N.1.N          N.N.1.255\r\n                              N.N.253.0   N.N.253.N        N.N.253.255\r\n                              N.N.254.0   N.N.254.N        N.N.254.255\r\n                              N.N.255.0   N.N.255.N        N.N.255.255\r\n", "notes": "Some parts of table 1-1 should be corrected as it is expected to include all-zeros and all-ones subnets.\r\nBroadcast address is always N.N.255.255 in the all-ones subnet of a class B network N.N.0.0, for any number of subnetting bits.\r\nThe last host address of the all-ones subnet should always be N.N.255.254. Then, the row for each all-ones subnet is to be modified to include N.N.255.N.\r\nFinally, the number of subnets for 8 bit subnet should be 256 (not 255), of 254 hosts each (not 253).", "submit_date": "2012-03-06", "submitter_name": "Cyril Pain-Barre", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3148", "doc-id": "RFC3224", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "This document udpates RFC 2608, \"The Service\r\n   Location Protocol.\"", "correct_text": "This document updates RFC 2608, \"The Service\r\n   Location Protocol.\"", "notes": "", "submit_date": "2012-03-06", "submitter_name": "Matthew Millar", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3149", "doc-id": "RFC5245", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "21.1.4", "orig_text": "Type of Attribute: session-level", "correct_text": "Type of Attribute: media-level", "notes": "Section 15.3 clearly says that \"ice-mismatch\" is media-level:\r\n\r\n'\"ice-mismatch\" is a media-level\r\n attribute only, and when present in an answer, indicates that the\r\n offer arrived with a default destination for a media component that\r\n didn't have a corresponding candidate attribute.'\r\n\r\nSection Section 6.1 also implies that \"ice-mismatch\" is media-level:\r\n\r\n\"In some cases, the answer may omit a=candidate attributes for the\r\n media streams, and instead include an a=ice-mismatch attribute for\r\n one or more of the media streams in the SDP.\"", "submit_date": "2012-03-07", "submitter_name": "Marc Petit-huguenin", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3150", "doc-id": "RFC6455", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "AQIDBAUGBwgJCgsMDQ4PEC==", "correct_text": "AQIDBAUGBwgJCgsMDQ4PEA==", "notes": "The \"test vector\" for Sec-WebSocket-Key encoding, provided in RFC 6455 section 4.1, is wrong.  It was processed by a base 64 encoder that was \"improperly implemented\" as mentioned in RFC 4648 section 3.5.  Pad bits were not set to zero, which is a \"MUST\" requirement in RFC 4648, and was also required by many other RFCs, going back to RFC 989 in the 1980s.  In the string \"AQIDBAUGBwgJCgsMDQ4PEC==\", the final C should be changed to A.\r\n\r\nIn a Sec-WebSocket-Key header sent by a properly implemented client, the last letter will always be A, Q, g or w.", "submit_date": "2012-03-07", "submitter_name": "Robert Munyer", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4443", "doc-id": "RFC7306", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "   |              DDP (Atomic Operation Request) Queue Number      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        DDP (Atomic Operation Request) Message Sequence Number |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |             DDP (Atomic Operation Request) Message Offset     |", "correct_text": "   |             DDP (Atomic Operation Response) Queue Number      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       DDP (Atomic Operation Response) Message Sequence Number |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            DDP (Atomic Operation Response) Message Offset     |", "notes": "", "submit_date": "2015-08-10", "submitter_name": "Chen Wumao", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4444", "doc-id": "RFC5752", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "id-aa-multipleSignatures OBJECT IDENTIFIER ::= {\r\n        iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9)\r\n        id-aa(16) 51 }", "correct_text": "id-aa-multipleSignatures OBJECT IDENTIFIER ::= { \r\n       iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) \r\n       smime(16) id-aa(2) 51 }\r\n\r\n", "notes": "The definition in Appendix A (ASN.1 module) is also incorrect, and inconsistent with section 3, which defines\r\n\r\nid-aa-multipleSignatures OBJECT IDENTIFIER ::= { iso(1) member-body(2)\r\n        us(840) rsadsi(113549) pkcs(1) pkcs9(9) id-aa(2) 51 }\r\n\r\nUnder 1.2.840.113549.1.9, 16 is smime, not id-aa.  id-aa(2) exists under smime(16)", "submit_date": "2015-08-11", "submitter_name": "Derek Edson", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4564", "doc-id": "RFC5234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.8", "orig_text": "         [foo bar]\r\n\r\n   is equivalent to\r\n\r\n         *1(foo bar).\r\n", "correct_text": "         [foo bar]\r\n\r\n   is equivalent to\r\n\r\n         *1(foo/bar).\r\n", "notes": "\n --VERIFIER NOTES-- \nIt seems that the reporter misunderstands what \"[foo bar]\"\nmeans.  It means that \"foo bar\" (the two tokens together, as a unit)\nis optional.  It is not suggesting an alternative of \"foo\" or \"bar\".", "submit_date": "2015-12-14", "submitter_name": "iliwoy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4593", "doc-id": "RFC1180", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.4", "orig_text": "The IP address space is administered by the NIC (Network Information\r\nCenter).  All internets that are connected to the single world-wide\r\nInternet must use network numbers assigned by the NIC.  If you are\r\nsetting up your own internet and you are not intending to connect it\r\nto the Internet, you should still obtain your network numbers from\r\nthe NIC.", "correct_text": "The IP address space is administered by the IANA (Internet Assigned \r\nNumbers Authority).  All internets that are connected to the single \r\nworld-wide Internet must use network numbers assigned by the IANA.  \r\nIf you are setting up your own internet and you are not intending to \r\nconnect it to the Internet (private network), you can choose any \r\nIP address for your network but it is recommended to use private \r\nranges which are:\r\nclass A   10.0.0.0 - 10.255.255.255 (16,777,216 IP addresses),\r\nclass B   172.16.0.0 - 172.31.255.255 (1,048,576 IP addresses) and\r\nclass C   192.168.0.0 - 192.168.255.255 (65,536 IP addresses).", "notes": "\n --VERIFIER NOTES-- \n   The current text in RFC 1180 accurately reflects the administration of IP address at the time.", "submit_date": "2016-01-11", "submitter_name": "Masoud Valizadeh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5961", "doc-id": "RFC5925", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4", "orig_text": "d. Determine the RNextKeyID as indicated by the rnext_key\r\npointer, and insert it in the TCP-AO RNextKeyID field (using\r\nthe rnext_key MKT\u2019s RecvID as the TCP-AO KeyID)\r\n", "correct_text": "d. Determine the RNextKeyID as indicated by the rnext_key\r\npointer, and insert it in the TCP-AO RNextKeyID field (using\r\nthe rnext_key MKT\u2019s RecvID as the TCP-AO RNextKeyID)\r\n", "notes": "This was a cut-and-paste error", "submit_date": "2020-01-22", "submitter_name": "Ron Bonica", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-01-22 15:24:20"}, {"errata_id": "3158", "doc-id": "RFC5988", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.", "orig_text": "  Link           = \"Link\" \":\" #link-value\r\n  link-value     = \"<\" URI-Reference \">\" *( \";\" link-param )\r\n  link-param     = ( ( \"rel\" \"=\" relation-types )\r\n                 | ( \"anchor\" \"=\" <\"> URI-Reference <\"> )\r\n                 | ( \"rev\" \"=\" relation-types )\r\n                 | ( \"hreflang\" \"=\" Language-Tag )\r\n                 | ( \"media\" \"=\" ( MediaDesc | ( <\"> MediaDesc <\"> ) ) )\r\n                 | ( \"title\" \"=\" quoted-string )\r\n                 | ( \"title*\" \"=\" ext-value )\r\n                 | ( \"type\" \"=\" ( media-type | quoted-mt ) )\r\n                 | ( link-extension ) )\r\n  link-extension = ( parmname [ \"=\" ( ptoken | quoted-string ) ] )\r\n                 | ( ext-name-star \"=\" ext-value )\r\n  ext-name-star  = parmname \"*\" ; reserved for RFC2231-profiled\r\n                                ; extensions.  Whitespace NOT\r\n                                ; allowed in between.\r\n  ptoken         = 1*ptokenchar\r\n  ptokenchar     = \"!\" | \"#\" | \"$\" | \"%\" | \"&\" | \"'\" | \"(\"\r\n                 | \")\" | \"*\" | \"+\" | \"-\" | \".\" | \"/\" | DIGIT\r\n                 | \":\" | \"<\" | \"=\" | \">\" | \"?\" | \"@\" | ALPHA\r\n                 | \"[\" | \"]\" | \"^\" | \"_\" | \"`\" | \"{\" | \"|\"\r\n                 | \"}\" | \"~\"\r\n  media-type     = type-name \"/\" subtype-name\r\n  quoted-mt      = <\"> media-type <\">\r\n  relation-types = relation-type\r\n                 | <\"> relation-type *( 1*SP relation-type ) <\">\r\n  relation-type  = reg-rel-type | ext-rel-type\r\n  reg-rel-type   = LOALPHA *( LOALPHA | DIGIT | \".\" | \"-\" )\r\n  ext-rel-type   = URI", "correct_text": "", "notes": "The ABNF special cases the value syntax for each predefined parameter name, and furthermore, introduces a quoted-string-like notation without using the RFC2616/httpbis quoted-string syntax.\r\n\r\nThis is confusing in that\r\n\r\n- parsing of parameter values depends on the parameter names\r\n- some of the time double quotes indicate quoted-string syntax, sometimes not\r\n- sometimes only one variant (token vs quoted-string) is allowed, although a generic parser will accept both\r\n\r\nThis is in conflict with a recommendation in HTTPbis Part 2 (<http://tools.ietf.org/html/draft-ietf-httpbis-p2-semantics-19#section-3.1>), and also does not reflect reality (see, for instance, <http://greenbytes.de/tech/tc/httplink/#simplecsstitletok>).\r\n\r\nThe ABNF should be simplified so that all parameters take both token and quoted-string, and that any additional syntactical constraints apply to quoted-string after undoing q-s escaping.", "submit_date": "2012-03-19", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3159", "doc-id": "RFC4627", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.5", "orig_text": "         string = quotation-mark *char quotation-mark\r\n\r\n         char = unescaped /\r\n                escape (\r\n                    %x22 /          ; \"    quotation mark  U+0022\r\n                    %x5C /          ; \\    reverse solidus U+005C\r\n                    %x2F /          ; /    solidus         U+002F\r\n                    %x62 /          ; b    backspace       U+0008\r\n                    %x66 /          ; f    form feed       U+000C\r\n                    %x6E /          ; n    line feed       U+000A\r\n                    %x72 /          ; r    carriage return U+000D\r\n                    %x74 /          ; t    tab             U+0009\r\n                    %x75 4HEXDIG )  ; uXXXX                U+XXXX\r\n\r\n         escape = %x5C              ; \\\r\n\r\n         quotation-mark = %x22      ; \"\r\n\r\n         unescaped = %x20-21 / %x23-5B / %x5D-10FFFF", "correct_text": "         string = quotation-mark *char quotation-mark\r\n\r\n         char = unescaped /\r\n                escape (\r\n                    %x22 /          ; \"    quotation mark  U+0022\r\n                    %x5C /          ; \\    reverse solidus U+005C\r\n                    %x62 /          ; b    backspace       U+0008\r\n                    %x66 /          ; f    form feed       U+000C\r\n                    %x6E /          ; n    line feed       U+000A\r\n                    %x72 /          ; r    carriage return U+000D\r\n                    %x74 /          ; t    tab             U+0009\r\n                    %x75 4HEXDIG )  ; uXXXX                U+XXXX\r\n\r\n         escape = %x5C              ; \\\r\n\r\n         quotation-mark = %x22      ; \"\r\n\r\n         unescaped = %x20-21 / %x23-5B / %x5D-10FFFF", "notes": "There is a contradiction regarding solidus(/, %2F) character - it belongs to both escaped character and unescaped character. To solve this,delete following line:\r\n\r\n         %x2F /          ; /    solidus         U+002F\r\n\r\nThe reason it should belong to unescaped character is clear. There's no gain by escape it.\r\n\r\nThe author has replied as follows:\r\n\r\nThere is no problem here. There is no requirement that there be a single encoding for each codepoint. \"/\" and \"\\/\" are both allowed and both produce the same result. The second form was [provided] to allow insertion into HTML, where \"</script>\" interacts badly, but \"<\\/script>\" does not. \r\n\r\nTherefore, this report is rejected.\n --VERIFIER NOTES-- \n   ", "submit_date": "2012-03-20", "submitter_name": "James S. Chi", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3160", "doc-id": "RFC5464", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4.2", "orig_text": "   The response consists of a list of entries, each of which have\r\n   changed on the server or mailbox.\r\n\r\n   Example:\r\n           C: a NOOP\r\n           S: * METADATA \"\" /shared/comment\r\n           S: a OK NOOP complete\r\n\r\n      In the above example, the server indicates that the \"/shared/\r\n      comment\" server entry has been changed.\r\n\r\n   Example:\r\n\r\n           C: a NOOP\r\n           S: * METADATA \"INBOX\" /shared/comment /private/comment\r\n           S: a OK NOOP complete\r\n\r\n      In the above example, the server indicates a change to two mailbox\r\n      entries.\r\n", "correct_text": "needs design input", "notes": "unsolicited METADATA responses not clear as to scope / state\r\n\r\nneed some prose about what to do depending on client state.\r\n\r\nif a client has a mailbox selected should it receive unsolicited metadata responses relating ONLY to that mailbox, or any mailbox?  The response has a mailbox field, so it's feasible a client not in a selected state could want responses for any metadata change on any mailbox.\r\n --VERIFIER NOTES-- \r\nA desire for more explanatory prose is not appropriate for an erratum.", "submit_date": "2012-03-22", "submitter_name": "Adrien de Croy", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3161", "doc-id": "RFC3196", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5", "orig_text": "   The IPP object model does not prohibit a job that contains no\r\n   documents.  Such a job may be created in a number of ways including a\r\n   'create-job' followed by an 'add-document' that contains no data and\r\n   has the 'last-document' flag set.\r\n", "correct_text": "   The IPP object model does not prohibit a job that contains no\r\n   documents.  Such a job may be created in a number of ways including a\r\n   'Create-Job' followed by a 'Send-Document' that contains no data and\r\n   has the 'last-document' flag set.\r\n", "notes": "The operation is called \"Send-Document\", not \"add-document\"...", "submit_date": "2012-03-22", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Peter Saint-Andre", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3162", "doc-id": "RFC6485", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "9.  Normative References", "correct_text": "8.  Normative References", "notes": "Section 8 was incorrectly numbered as section 9 in final RFC. This was due to the draft including a section 7 for \"IANA Considerations,\" which was later removed.", "submit_date": "2012-03-23", "submitter_name": "Danny Rios", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3163", "doc-id": "RFC3987", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.4.", "orig_text": "For example, &#x44F; stands for CYRILLIC CAPITAL LETTER YA.", "correct_text": "For example, &#x42F; stands for CYRILLIC CAPITAL LETTER YA.", "notes": "The correct code point for CYRILLIC CAPITAL LETTER YA is U+042F. U+044F would be CYRILLIC SMALL LETTER YA. See http://www.unicode.org/charts/PDF/U0400.pdf.", "submit_date": "2012-03-23", "submitter_name": "Martin Duerst", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3210", "doc-id": "RFC2802", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.2 et al.", "orig_text": "urn:ietf-org:hmac", "correct_text": "urn:ietf:params:hmac ", "notes": "The URN used in 2 instances in Section 5.2.2 has never been\r\nregistered -- not even the URN Namespace 'ietf-org' !\r\n\r\nThe Corrected Text is based on RFC 2648 and RFC 3553,\r\nbut by barely suggesting this potentially correct URN\r\n(in the spirit of these RFCs), it is still not yet\r\nregistered with IANA!\r\n\r\nSo this correction should be Held for Update, and any successor\r\nof the RFC should provide the necessary registration of this URN\r\nwith IANA.\r\n\r\nSimilarly, the other URNs used in the RFC,\r\n   urn:ibm-com:dom-hash\r\n   urn:nist-gov:sha1\r\n   urn:fips:sha1\r\n   urn:rsasdi-com:rsa-encryption\r\n   urn:X500:X509v3\r\n   urn:nist-gov:dsa\r\n   urn:ansi-org:ecdsa\r\nall are entirely hypothetical; all the URN Namespaces used\r\nthere have never been registered so far -- even 12 years after\r\nthe publication of RFC 2802.", "submit_date": "2012-05-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3164", "doc-id": "RFC5559", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   o  Police - police, by dropping any packets received with a DSCP\r\n      indicating PCN transport that do not belong to an admitted flow.\r\n      (A prospective PCN-flow that is rejected could be blocked or\r\n      admitted into a lower-priority behaviour aggregate.)\r\n", "correct_text": "   o  Police - drop or re-mark to a lower-priority behaviour aggregate\r\n      i) packets received with a DSCP indicating PCN transport that do not\r\n      belong to an admitted flow and ii) packets that are part of a flow\r\n      that asked to be admitted as a PCN-flow but was rejected.\r\n", "notes": "In the original text the first sentence contradicts the parenthesis. It could be interpreted to mean that dropping is the only allowed policing action, whereas the parenthesis shows that downgrading was also considered appropriate.\r\n\r\nAlso the original text used the term 'blocking' as a different action to 'downgrading', whereas Section 3.6 just above this text has said '\"Blocking\" means it is dropped or downgraded to a lower-priority behaviour aggregate,...'", "submit_date": "2012-03-23", "submitter_name": "Bob Briscoe", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3165", "doc-id": "RFC2683", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.12", "orig_text": "If the client chooses to try to take\r\nadvantage of this possibility it must be prepared to use the other\r\nmethod in the even that the more convenient one fails.", "correct_text": "If the client chooses to try to take\r\nadvantage of this possibility it must be prepared to use the other\r\nmethod in the event that the more convenient one fails.", "notes": "\"t\" missing from \"event\"", "submit_date": "2012-03-23", "submitter_name": "Christian Ketterer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3166", "doc-id": "RFC6482", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "...EE certificate's IP address delegation extension.", "correct_text": "...EE certificate's IP address delegation extension.  The EE certificate\r\nMUST NOT use \"inherit\" elements as described in [RFC3779].", "notes": "Having spoken to the authors, the authors' intent was to disallow \"inherit\" in ROA EE certificates in order to simplify validation of ROAs.  Implementers agree, and as of March 2012, the three public validator implementations already enforce this.\r\n\r\nThis erratum simply states it explicitly, whereas the original text might be misread as leaving room for indirectly-specified resources via \"inherit\".\r\n\r\nThis errata was discussed by the WG, please see SIDR list archive.", "submit_date": "2012-03-25", "submitter_name": "Andrew Chi", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3167", "doc-id": "RFC6086", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12.2.2", "orig_text": "12.2.2.1.  Non-Info Package Body Part\r\n\r\n   INFO sip:alice@pc33.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP 192.0.2.2:5060;branch=z9hG4bKnabcdef\r\n   To: Alice <sip:alice@example.net>;tag=1234567\r\n   From: Bob <sip:bob@example.com>;tag=abcdefg\r\n   Call-Id: a84b4c76e66710@pc33.example.com\r\n   CSeq: 314400 INFO\r\n   Info-Package: foo\r\n   Content-Type: multipart/mixed;boundary=\"theboundary\"\r\n   Content-Length: ...\r\n\r\n   --theboundary\r\n   Content-Type: application/mumble\r\n   ...\r\n\r\n   <mumble stuff>\r\n\r\n   --theboundary\r\n   Content-Type: application/foo-x\r\n   Content-Disposition: Info-Package\r\n>>>Content-length: 59\r\n\r\n   I am a foo-x message type, and I belong to Info Package foo\r\n   --theboundary--\r\n\r\n12.2.2.2.  Info Package with Multiple Body Parts inside Multipart Body\r\n           Part\r\n\r\n   INFO sip:alice@pc33.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP 192.0.2.2:5060;branch=z9hG4bKnabcdef\r\n   To: Alice <sip:alice@example.net>;tag=1234567\r\n   From: Bob <sip:bob@example.com>;tag=abcdefg\r\n   Call-Id: a84b4c76e66710@pc33.example.com\r\n   CSeq: 314423 INFO\r\n   Info-Package: foo\r\n   Content-Type: multipart/mixed;boundary=\"theboundary\"\r\n   Content-Disposition: Info-Package\r\n   Content-Length: ...\r\n\r\n   --theboundary\r\n   Content-Type: application/foo-x\r\n>>>Content-length: 59\r\n\r\n   I am a foo-x message type, and I belong to Info Package foo\r\n\r\n   <mumble stuff>\r\n\r\n   --theboundary\r\n   Content-Type: application/foo-y\r\n>>>Content-length: 59\r\n\r\n   I am a foo-y message type, and I belong to Info Package foo\r\n   --theboundary--\r\n\r\n12.2.2.3.  Info Package with Single Body Part inside Multipart Body Part\r\n\r\n   INFO sip:alice@pc33.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP 192.0.2.2:5060;branch=z9hG4bKnabcdef\r\n   To: Alice <sip:alice@example.net>;tag=1234567\r\n   From: Bob <sip:bob@example.com>;tag=abcdefg\r\n   Call-Id: a84b4c76e66710@pc33.example.com\r\n   CSeq: 314423 INFO\r\n   Info-Package: foo\r\n   Content-Type: multipart/mixed;boundary=\"theboundary\"\r\n   Content-Disposition: Info-Package\r\n   Content-Length: ...\r\n\r\n   --theboundary\r\n   Content-Type: application/foo-x\r\n   Content-Disposition: icon\r\n>>>Content-length: 59\r\n\r\n   I am a foo-x message type, and I belong to Info Package foo\r\n   --theboundary--\r\n", "correct_text": "12.2.2.1.  Non-Info Package Body Part\r\n\r\n   INFO sip:alice@pc33.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP 192.0.2.2:5060;branch=z9hG4bKnabcdef\r\n   To: Alice <sip:alice@example.net>;tag=1234567\r\n   From: Bob <sip:bob@example.com>;tag=abcdefg\r\n   Call-Id: a84b4c76e66710@pc33.example.com\r\n   CSeq: 314400 INFO\r\n   Info-Package: foo\r\n   Content-Type: multipart/mixed;boundary=\"theboundary\"\r\n   Content-Length: ...\r\n\r\n   --theboundary\r\n   Content-Type: application/mumble\r\n   ...\r\n\r\n   <mumble stuff>\r\n\r\n   --theboundary\r\n   Content-Type: application/foo-x\r\n   Content-Disposition: Info-Package\r\n\r\n   I am a foo-x message type, and I belong to Info Package foo\r\n   --theboundary--\r\n\r\n12.2.2.2.  Info Package with Multiple Body Parts inside Multipart Body\r\n           Part\r\n\r\n   INFO sip:alice@pc33.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP 192.0.2.2:5060;branch=z9hG4bKnabcdef\r\n   To: Alice <sip:alice@example.net>;tag=1234567\r\n   From: Bob <sip:bob@example.com>;tag=abcdefg\r\n   Call-Id: a84b4c76e66710@pc33.example.com\r\n   CSeq: 314423 INFO\r\n   Info-Package: foo\r\n   Content-Type: multipart/mixed;boundary=\"theboundary\"\r\n   Content-Disposition: Info-Package\r\n   Content-Length: ...\r\n\r\n   --theboundary\r\n   Content-Type: application/foo-x\r\n\r\n   I am a foo-x message type, and I belong to Info Package foo\r\n\r\n   <mumble stuff>\r\n\r\n   --theboundary\r\n   Content-Type: application/foo-y\r\n\r\n   I am a foo-y message type, and I belong to Info Package foo\r\n   --theboundary--\r\n\r\n12.2.2.3.  Info Package with Single Body Part inside Multipart Body Part\r\n\r\n   INFO sip:alice@pc33.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP 192.0.2.2:5060;branch=z9hG4bKnabcdef\r\n   To: Alice <sip:alice@example.net>;tag=1234567\r\n   From: Bob <sip:bob@example.com>;tag=abcdefg\r\n   Call-Id: a84b4c76e66710@pc33.example.com\r\n   CSeq: 314423 INFO\r\n   Info-Package: foo\r\n   Content-Type: multipart/mixed;boundary=\"theboundary\"\r\n   Content-Disposition: Info-Package\r\n   Content-Length: ...\r\n\r\n   --theboundary\r\n   Content-Type: application/foo-x\r\n   Content-Disposition: icon\r\n\r\n   I am a foo-x message type, and I belong to Info Package foo\r\n   --theboundary--\r\n", "notes": "In four locations (in three examples), a Content-Length header is shown for a multipart body-part.  But comparing with RFC 1521 section 7.2, Content-Length has no defined meaning within MIME, and it appears that any appearance in a body-part header must be ignored.  Thus, these headers are meaningless, and the authors would probably not have included them if they had researched the subject.\r\n\r\n(Bruno Chatras discovered this discrepancy.)", "submit_date": "2012-03-26", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3168", "doc-id": "RFC6487", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.8", "orig_text": "   or non-critical.  A certificate-using system MUST reject the\r\n   certificate if it encounters a critical extension it does not\r\n   recognize; however, a non-critical extension MAY be ignored if it is\r\n   not recognized [RFC5280].", "correct_text": "   or non-critical.  A certificate-using system MUST reject the\r\n   certificate if it encounters an extension not explicitly mentioned\r\n   in this document.  This is in contrast to RFC 5280 which allows\r\n   non-critical extensions to be ignored.", "notes": "Other sections of the same document contradict the original section 4.8:\r\n\r\nSection 1:\r\n\r\n   Any extensions not explicitly mentioned MUST be absent.  The same\r\n   applies to the CRLs used in the RPKI, that are also profiled in this\r\n   document.\r\n\r\nSection 8:\r\n\r\n   Certificate Extensions:\r\n         This profile does not permit the use of any other critical or\r\n         non-critical extensions.\n --VERIFIER NOTES-- \n   This is a technical change to the RFC and needs to be addressed though the IETF consensus process and rather than via the errata process.", "submit_date": "2012-03-26", "submitter_name": "David Mandelberg", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3581", "doc-id": "RFC6550", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4.3", "orig_text": "   A special case of the DAO message, termed a No-Path, is used in\r\n   Storing mode to clear Downward routing state that has been\r\n   provisioned through DAO operation.  The No-Path carries a Target\r\n   option and an associated Transit Information option with a lifetime\r\n   of 0x00000000 to indicate a loss of reachability to that Target.", "correct_text": "   A special case of the DAO message, termed a No-Path, is used in\r\n   Storing mode to clear Downward routing state that has been\r\n   provisioned through DAO operation.  The No-Path carries a Target\r\n   option and an associated Transit Information option with a lifetime\r\n   of 0x00 to indicate a loss of reachability to that Target.", "notes": "The Path Lifetime field of the Transit Information option is a 8-bit field. Using 0x00000000 here would indicate a 32 bits encoding and is misleading.", "submit_date": "2013-04-04", "submitter_name": "Tony Cheneau", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3169", "doc-id": "RFC5789", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   If\r\n   the operation does not modify the resource identified by the Request-\r\n   URI in a predictable way, POST should be considered instead of PATCH\r\n   or PUT.\r\n", "correct_text": "   If\r\n   the operation does not modify the resource identified by the Request-\r\n   URI in a predictable way that's defined by the semantics of the PATCH \r\n   media type, POST should be considered instead of PATCH or PUT.\r\n\r\n\r\n[Also, I suggest adding this to section two, after the sixth paragraph:]\r\n\r\n   The means of applying a PATCH request to a resource's state is\r\n   determined by the request's media type.  If a server receives a PATCH\r\n   request with a media type whose specification does not define\r\n   semantics specific to PATCH, the server SHOULD reject the request by\r\n   returning the 415 Unsupported Media Type status code, unless a more\r\n   specific error status code takes priority.\r\n\r\n   In particular, servers SHOULD NOT assume PATCH semantics for generic\r\n   media types that don't define them, such as \"application/xml\" or\r\n   \"application/json\".  Doing so will cause interoperability issues,\r\n   because the semantics of PATCH become specific to that resource,\r\n   rather than general.", "notes": "RFC5789 does not explicitly tie PATCHing semantics to the media type of the request. This was well understood in the discussions around the document, and can be read between the lines in it, but it doesn't come out and say it.", "submit_date": "2012-03-28", "submitter_name": "Mark Nottingham", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3170", "doc-id": "RFC2898", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "   Other cryptographic techniques based on passwords, such as password-\r\n   based key entity authentication and key establishment protocols", "correct_text": "   Other cryptographic techniques based on passwords, such as password-\r\n   based entity authentication and key establishment protocols", "notes": "\"key entity authentication\" appears to be a typo.  Or, at least, missing a hyphen.", "submit_date": "2012-03-29", "submitter_name": "nobody@example.invalid", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3171", "doc-id": "RFC3031", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.20", "orig_text": "   Given a set of FECs which are \"aggregatable\" into a single FEC, it is\r\n   possible to (a) aggregate them into a single FEC, (b) aggregate them\r\n   into a set of FECs, or (c) not aggregate them at all.  Thus we can\r\n   speak of the \"granularity\" of aggregation, with (a) being the\r\n   \"coarsest granularity\", and (c) being the \"finest granularity\".\r\n", "correct_text": "   Given a set of FECs which are \"aggregatable\" into a single FEC, it is\r\n   possible to (a) aggregate them into a single FEC, (b) aggregate them\r\n   into a set of FECs, or (c) not aggregate them at all.  Thus we can\r\n   speak of the \"granularity\" of aggregation, with (a) being the\r\n   \"coarsest granularity\", and (b) being the \"finest granularity\".\r\n", "notes": "In the case of (c) the aggregation is not used, so there is no granularity.\n --VERIFIER NOTES-- \nNot aggregating is a degenerate case of aggregation where a one-to-one aggregation mapping is used. Thus, the result is the \"finest granularity\".   ", "submit_date": "2012-04-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3172", "doc-id": "RFC2702", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   An induced MPLS graph consists of a set of LSRs which comprise the\r\n   nodes of the graph and a set of LSPs which provide logical point to\r\n   point connectivity between the LSRs, and hence serve as the links of\r\n   the induced graph. it may be possible to construct hierarchical\r\n   induced MPLS graphs based on the concept of label stacks (see [1]).", "correct_text": "   An induced MPLS graph consists of a set of LSRs which comprise the\r\n   nodes of the graph and a set of LSPs which provide logical point to\r\n   point connectivity between the LSRs, and hence serve as the links of\r\n   the induced graph. It may be possible to construct hierarchical\r\n   induced MPLS graphs based on the concept of label stacks (see [1]).", "notes": "Typo. Capitalisation at start of sentence.", "submit_date": "2012-04-02", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3173", "doc-id": "RFC5627", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "   o  a 2xx response to NOTIFY\r\n   o  the UPDATE request\r\n   o  a 2xx response to NOTIFY\r\n", "correct_text": "   o  a 2xx response to NOTIFY\r\n   o  the UPDATE request\r\n   o  a 2xx response to **UPDATE**", "notes": "This section 4.4 describes different messages which can update the remote target within a dialog.", "submit_date": "2012-04-02", "submitter_name": "Nataraju A B", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3174", "doc-id": "RFC6487", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "   An RPKI CA MUST include the two extensions, Authority Key Identifier\r\n   and CRL Number, in every CRL that it issues.  RPs MUST be prepared to\r\n   process CRLs with these extensions.  No other CRL extensions are\r\n   allowed.", "correct_text": "   An RPKI CA MUST include the two extensions, Authority Key Identifier\r\n   and CRL Number, in every CRL that it issues.  The Authority Key\r\n   Identifier extension MUST follow the same restrictions as in\r\n   Section 4.8.3 above.  RPs MUST be prepared to process CRLs with\r\n   these extensions.  No other CRL extensions are allowed.", "notes": "RFC 6487 doesn't specify any restrictions on the format of the AKI extension in CRLs.\n --VERIFIER NOTES-- \n   The discussion on the SIDR list concluded that this errata should be rejected, although there appears an issue that may need addressing through a new errata or a revision to the RFC text.", "submit_date": "2012-04-03", "submitter_name": "David Mandelberg", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4141", "doc-id": "RFC5663", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2.2", "orig_text": "", "correct_text": "   The volume size of a PNFS_BLOCK_VOLUME_SIMPLE volume must be obtained\r\n   by the client from the storage subsystem as no size is provided in\r\n   the XDR. All volumes listed in bsv_volumes of a\r\n   struct pnfs_block_stripe_volume_info4 must be the same size.  If\r\n   the size of the volumes listed in a stripe set does not align\r\n   to the bsv_stripe_unit, the last stripe should be treated as\r\n   having a size of volume size modulo the stripe size.\r\n   The volume size of a PNFS_BLOCK_VOLUME_SLICE volume is the sum\r\n   of the volume sizes of each component listed in bsv_volumes.\r\n   The volume size of a PNFS_BLOCK_VOLUME_CONCAT volume is the sum\r\n   of the volume sizes of each component listed in bcv_volumes.", "notes": "RFC5663 provides no explanation of the volume types except for a few sparse comments in the XDR.  Explain at least basic size related rules.", "submit_date": "2014-10-23", "submitter_name": "Christoph Hellwig", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4594", "doc-id": "RFC4941", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "", "correct_text": "", "notes": "The algorithm for interface identifier generation is flawed: An adversary is able to infer a client's history value from a sequence of observed addresses and is able to infer all future interface identifiers of this certain client annihilating the extension's intended purpose of privacy protection.\r\n\r\nFor a detailed explanation on the algorithm's drawbacks, please see my paper:\r\nhttps://www.sba-research.org/wp-content/uploads/publications/Ullrich2015Privacy.pdf\n --VERIFIER NOTES-- \n The issue raised goes beyond a fix via the errata system. This should be raised in the appropriate working group within the IETF.  ", "submit_date": "2016-01-14", "submitter_name": "Johanna Ullrich", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3175", "doc-id": "RFC6204", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2", "orig_text": "WPD-3:  The IPv6 CE router MUST be prepared to accept a delegated\r\n           prefix size different from what is given in the hint.  If the\r\n           delegated prefix is too small to address all of its\r\n           interfaces, the IPv6 CE router SHOULD log a system management\r\n           error.\r\n\r\n", "correct_text": "WPD-3:  The IPv6 CE router MUST be prepared to accept a delegated\r\n           prefix size different from what is given in the hint.  If the\r\n           delegated prefix is too small to address all of its\r\n           interfaces or delegated prefix size is greater than /64, the \r\n           IPv6 CE router SHOULD log a system management\r\n           error.\r\n\r\n\r\n", "notes": "Stateless Address Auto configuration uses 64 bit long EUI-64. If Delegated prefix size obtained on the wan side is greater than /64. This Prefix cannot be used on Lan side nodes to create SLAAC address using EUI-64\n --VERIFIER NOTES-- \n RFC 6204 is about to be obsoleted by draft-ietf-v6ops-6204bis, which entered WG last call this weekend. So, fixing 6204 won't help much.\r\n\r\nPlease post a message to the V6OPS mailing list making the point that you make in the errata. If the WG agrees, the change will be made in the bis document.  ", "submit_date": "2012-04-04", "submitter_name": "Sathyanarayana Venkataramanappa", "verifier_id": "", "verifier_name": "RonBonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3176", "doc-id": "RFC6044", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "Diversion:\r\n\r\ndiverting_user2_addr; reason=\"user-busy\"; counter=1; privacy=full,\r\ndiverting_user1_addr; reason=\"unconditional\"; counter=1; privacy=off\r\n", "correct_text": "Diversion:\r\n\r\n<sip:diverting_user2_address>; reason=user-busy; counter=1; privacy=full,\r\n<sip:diverting_user1_address>; reason=unconditional; counter=1; privacy=off\r\n", "notes": "Errata 2603 already reported that the example did not correctly contain name-addr values.  This is to report that the selected reason values should not be within quotes since these values have been explicitly defined to be non quoted.  More specifically, the quotes within the example add confusion since RFC 5806 examples had similar quoting issues for values defined without quotes.", "submit_date": "2012-04-04", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3177", "doc-id": "RFC5806", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "Diversion = \"Diversion\" \":\" 1# (name-addr *( \";\" diversion_params ))\r\ndiversion-params = diversion-reason | diversion-counter |\r\n                   diversion-limit | diversion-privacy |\r\n                   diversion-screen | diversion-extension\r\n", "correct_text": "Diversion = \"Diversion\" HCOLON diversion-params *(COMMA diversion-params)\r\ndiversion-params    = name-addr *(SEMI (diversion-reason /\r\n                      diversion-counter / diversion-limit /\r\n                      diversion-privacy / diversion-screen /\r\n                      diversion-extension))\r\n", "notes": "The original text did not comply with the format defined by RFC 4485 and RFC 3261.  It also did not indicate where to find the #rule (such as within RFC 2543).  Thus the ABNF for Diversion should either be modified or RFC 2543 should be referenced to help interoperability.  The proposed new ABNF was provided by RFC 6044; it also changes \";\" to SEMI which addresses the related LWS ambiguity concerning if RFC 3261 or RFC 2543 LWS rules should be followed.", "submit_date": "2012-04-04", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3178", "doc-id": "RFC5806", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.5.1", "orig_text": "privacy=\"full\"", "correct_text": "privacy=full", "notes": "The example incorrectly adds quotes to full.  The quotes add confusion since full was explicitly defined to not use quotes.  Similar quoting issues exist within other examples; see sections 6.5.2, 9.2.5, 9.2.6, 9.3.5, and 9.3.6.", "submit_date": "2012-04-04", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3179", "doc-id": "RFC3439", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "   it could be catastrophically disabled my microscopic alterations in a", "correct_text": "   it could be catastrophically disabled by microscopic alterations in a", "notes": "Typo: I believe \"my\" should have been \"by\"", "submit_date": "2012-04-04", "submitter_name": "Robby Simpson", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3180", "doc-id": "RFC3439", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "   very few large CPUs (as the point out, fortunately this is a very", "correct_text": "   very few large CPUs (as they point out, fortunately this is a very", "notes": "Typo: I believe \"the\" should have been \"they\"", "submit_date": "2012-04-04", "submitter_name": "Robby Simpson", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3181", "doc-id": "RFC6580", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   Name of the registry: \"SCTP Function Codes for DDP Session Control\"\r\n\r\n   Namespace details: SCTP (Stream Control Transmission Protocol)\r\n   function codes for DDP session control are 16-bit values [RFC5043].", "correct_text": "   Name of the registry: \"SCTP Function Codes for DDP Stream Session Control\"\r\n\r\n   Namespace details: SCTP (Stream Control Transmission Protocol)\r\n   function codes for DDP stream session control are 16-bit values [RFC5043].", "notes": "IANA found this minor naming discrepancy with RFC 5043 in performing registry updates.  The word \"stream\" needs to be inserted in two places.", "submit_date": "2012-04-09", "submitter_name": "David L. Black", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3182", "doc-id": "RFC5451", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Header.", "orig_text": "", "correct_text": "Updated by RFC 6577.", "notes": "RFC 6577 (March 2012) indicates that it updates 5451, but 5451 does not indicate it is updated.  This update is the same as errata ID 2617 (date reported 2010-11-09).\n --VERIFIER NOTES-- \nThe \"updated by\" information is in the metadata for the RFC, and that metadata is correct (see the version in the datatracker: https://datatracker.ietf.org/doc/rfc5451/ ).  The text of an RFC does not change once it's published.   ", "submit_date": "2012-04-09", "submitter_name": "D. Stussy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3791", "doc-id": "RFC5065", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   Additionally, confederations (as well as route reflectors), by\r\n   excluding different reachability information from consideration at\r\n   different locations in a confederation, have been shown [RFC3345] to\r\n   cause permanent oscillation between candidate routes when using the\r\n   tie-breaking rules required by BGP [BGP-4].", "correct_text": "   Additionally, confederations (as well as route reflectors), by\r\n   excluding different reachability information from consideration at\r\n   different locations in a confederation, have been shown [RFC3345] to\r\n   cause persistent oscillation between candidate routes when using the\r\n   tie-breaking rules required by BGP [BGP-4].", "notes": "s/permanent/persistent\r\n\r\nRFC 3345 nowhere refers to this oscillation as \"permanent\". It consistently refers to it as \"persistent\" only.\r\n\r\n\"Permanent\" is a much stronger word than \"persistent\", and I believe is not applicable here.", "submit_date": "2013-11-08", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3183", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "23.4.3", "orig_text": "         --boundary42\r\n         Content-Type: application/pkcs7-mime; smime-type=enveloped-data;\r\n              name=smime.p7m\r\n         Content-Transfer-Encoding: base64\r\n         Content-Disposition: attachment; filename=smime.p7m\r\n            handling=required\r\n         Content-Length: 231\r\n\r\n", "correct_text": "   --boundary42\r\n         Content-Type: application/pkcs7-mime; smime-type=enveloped-data;\r\n              name=smime.p7m\r\n         Content-Transfer-Encoding: base64\r\n         Content-Disposition: attachment; filename=smime.p7m\r\n            handling=required\r\n\r\n", "notes": "A Content-Length header is shown for a body-part within a multipart body. But Content-Length is an HTTP/SIP header, not a IANA-registered MIME header and should therefore not appear at that location in valid examples. The length of a body part within a multipart body is determined by MIME framing. A Content-Length header found for a body-part within a multipart body is meaningless and should be ignored.\r\n\r\nThis was discussed on both the SIP Implementors and SIP Core mailing lists.", "submit_date": "2012-04-10", "submitter_name": "Bruno CHATRAS", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3184", "doc-id": "RFC6257", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "   \"Commensurate strength\" cryptography is generally held to be a good\r\n   idea.  A combination of RSA with SHA-256 is reckoned to require a\r\n   3076-bit RSA key according to this logic.", "correct_text": "   \"Commensurate strength\" cryptography is generally held to be a good\r\n   idea.  A combination of RSA with SHA-256 is reckoned to require a\r\n   3072-bit RSA key according to this logic.", "notes": "After consulting the authors, it appears that 3076 is a typo and should be 3072.", "submit_date": "2012-04-10", "submitter_name": "Jim Wright", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3185", "doc-id": "RFC5225", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "page 64", "orig_text": "rtp(profile_value, ts_stride_value, time_stride_value,\r\n    reorder_ratio_value)\r\n{\r\n  UNCOMPRESSED {\r\n    ENFORCE((profile_value == PROFILE_RTP_0101) ||\r\n            (profile_value == PROFILE_RTP_0107));\r\n    rtp_version =:= uncompressed_value(2, 0) [  2 ];\r\n", "correct_text": "rtp(profile_value, ts_stride_value, time_stride_value,\r\n    reorder_ratio_value)\r\n{\r\n  UNCOMPRESSED {\r\n    ENFORCE((profile_value == PROFILE_RTP_0101) ||\r\n            (profile_value == PROFILE_RTP_0107));\r\n    rtp_version =:= uncompressed_value(2, 2) [  2 ];\r\n", "notes": "rtp_version is set to 2, not to zero.\r\n\r\nSee RTP Header Fields page 115 :\r\n\r\nVersion\r\n\r\n      This field is expected to have the value two and the field is\r\n      therefore classified as STATIC-KNOWN.", "submit_date": "2012-04-11", "submitter_name": "FWX", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3186", "doc-id": "RFC2680", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "The structure of the memo is as follows:\r\n\r\n   +  A 'singleton' analytic metric, called Type-P-One-way-Loss, is\r\n      introduced to measure a single observation of packet transmission\r\n      or loss.", "correct_text": "The structure of the memo is as follows:\r\n\r\n   +  A 'singleton' analytic metric, called Type-P-One-way-Packet-Loss, is\r\n      introduced to measure a single observation of packet transmission\r\n      or loss.", "notes": "", "submit_date": "2012-04-11", "submitter_name": "Benoit Claise", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3815", "doc-id": "RFC5595", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "All standards assigned Service Codes, including\r\nall values assigned by IANA, are required to use a value that may be\r\nrepresented using a subset of the ASCII character set.\r\n", "correct_text": "Requests for a Service Code in the IANA Considerations section of a\r\nStandards-Track specification are to be assigned from the\r\nSpecifications-Required portion of the Service Code registry.\r\nThese assignments are required to use a value that may be\r\nrepresented using a subset of the ASCII character set (see section 5).\r\n", "notes": "RFC 5595 did not clearly specify the intended update to RFC 4340. An update is also required to section 10.3.1 to be consistent.", "submit_date": "2013-11-29", "submitter_name": "Gorry Fairhurst", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3816", "doc-id": "RFC5595", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "This document does not update the IANA allocation procedures for the\r\nDCCP Port Number and DCCP Service Codes Registries as defined in RFC\r\n4340.\r\n", "correct_text": "This document does not update the IANA allocation procedures for the\r\nDCCP Port Number Registry as defined in RFC 4340. Section 2.2 of\r\nthis document updated the IANA allocation procedures for the DCCP\r\nService Codes Registry by requiring Service Code assignments\r\nby a Standards-Track specification to be assigned from the\r\nSpecifications-Required portion of the Service Code registry.\r\n", "notes": "RFC 5595 did not clearly specify the intended update to RFC 4340.  An update is also\r\nrequired to section 10.3.1 to be consistent in RFC 6335.", "submit_date": "2013-11-29", "submitter_name": "Gorry Fairhurst", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3817", "doc-id": "RFC6396", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.7", "orig_text": "            BGP4MP_ENTRY             2           See Section 4.4\r\n            BGP4MP_SNAPSHOT          3           See Section 4.4", "correct_text": "            BGP4MP_ENTRY             2           See Section B.2.6\r\n            BGP4MP_SNAPSHOT          3           See Section B.2.6", "notes": "These subtypes are deprecated and are defined only in Appendix B.", "submit_date": "2013-12-01", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3187", "doc-id": "RFC5415", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.", "orig_text": "                            /-------------------------------------\\\r\n                            |          /-------------------------\\|\r\n                            |         p|                         ||\r\n                            |    q+----------+ r +------------+  ||\r\n                            |     |   Run    |-->|   Reset    |-\\||\r\n                            |     +----------+   +------------+ |||\r\n                           n|  o      ^           ^     ^      s|||\r\n                +------------+--------/           |     |       |||\r\n                | Data Check |             /-------/    |       |||\r\n                +------------+<-------\\   |             |       |||\r\n                                      |   |             |       |||\r\n                       /------------------+--------\\    |       |||\r\n                      f|             m|  h|    j   v   k|       |||\r\n               +--------+     +-----------+     +--------------+|||\r\n               |  Join  |---->| Configure |     |  Image Data  ||||\r\n               +--------+  n  +-----------+     +--------------+|||\r\n                ^   |g                 i|                    l| |||\r\n                |   |                   \\-------------------\\ | |||\r\n                |   \\--------------------------------------\\| | |||\r\n                \\------------------------\\                 || | |||\r\n         /--------------<----------------+---------------\\ || | |||\r\n         | /------------<----------------+-------------\\ | || | |||\r\n         | |  4                          |d           t| | vv v vvv\r\n         | |   +----------------+   +--------------+   +-----------+\r\n         | |   |   DTLS Setup   |   | DTLS Connect |-->|  DTLS TD  |\r\n       /-|-|---+----------------+   +--------------+ e +-----------+\r\n       | | |    |$  ^  ^   |5  ^6         ^              ^  |w\r\n       v v v    |   |  |   |   \\-------\\  |              |  |\r\n       | | |    |   |  |   \\---------\\ |  |  /-----------/  |\r\n       | | |    |   |  \\--\\          | |  |  |              |\r\n       | | |    |   |     |          | |  |  |              |\r\n       | | |    v  3|  1  |%     #   v |  |a |b             v\r\n       | | \\->+------+-->+------+   +-----------+    +--------+\r\n       | |    | Idle |   | Disc |   | Authorize |    |  Dead  |\r\n       | |    +------+<--+------+   +-----------+    +--------+\r\n       | |     ^   0^  2      |!\r\n       | |     |    |         |   +-------+\r\n      *| |u    |    \\---------+---| Start |\r\n       | |     |@             |   +-------+\r\n       | \\->+---------+<------/\r\n       \\--->| Sulking |\r\n            +---------+&", "correct_text": "                            /-------------------------------------\\\r\n                            |          /-------------------------\\|\r\n                            |         p|                         ||\r\n                            |    q+----------+ r +------------+  ||\r\n                            |     |   Run    |-->|   Reset    |-\\||\r\n                            |     +----------+   +------------+ |||\r\n                           n|  o      ^           ^     ^      s|||\r\n                +------------+--------/           |     |       |||\r\n                | Data Check |             /-------/    |       |||\r\n                +------------+<-------\\   |             |       |||\r\n                                      |   |             |       |||\r\n                       /------------------+--------\\    |       |||\r\n                      f|             m|  h|    j   v   k|       |||\r\n               +--------+     +-----------+     +--------------+|||\r\n               |  Join  |---->| Configure |     |  Image Data  ||||\r\n               +--------+  g  +-----------+     +--------------+|||\r\n                ^   |e                 i|                    l| |||\r\n                |   |                   \\-------------------\\ | |||\r\n                |   \\--------------------------------------\\| | |||\r\n                \\------------------------\\                 || | |||\r\n         /--------------<----------------+---------------\\ || | |||\r\n         | /------------<----------------+-------------\\ | || | |||\r\n         | |  4                          |d           t| | vv v vvv\r\n         | |   +----------------+   +--------------+   +-----------+\r\n         | |   |   DTLS Setup   |   | DTLS Connect |-->|  DTLS TD  |\r\n       /-|-|---+----------------+   +--------------+ c +-----------+\r\n       | | |    |$  ^  ^   |5  ^6         ^              ^  |w\r\n       v v v    |   |  |   |   \\-------\\  |              |  |\r\n       | | |    |   |  |   \\---------\\ |  |  /-----------/  |\r\n       | | |    |   |  \\--\\          | |  |  |              |\r\n       | | |    |   |     |          | |  |  |              |\r\n       | | |    v  3|  1  |%     #   v |  |a |b             v\r\n       | | \\->+------+-->+------+   +-----------+    +--------+\r\n       | |    | Idle |   | Disc |   | Authorize |    |  Dead  |\r\n       | |    +------+<--+------+   +-----------+    +--------+\r\n       | |     ^   0^  2      |!\r\n       | |     |    |         |   +-------+\r\n      *| |u    |    \\---------+---| Start |\r\n       | |     |@             |   +-------+\r\n       | \\->+---------+<------/\r\n       \\--->| Sulking |\r\n            +---------+&", "notes": "DTLS Connect to DTLS Teardown (c):\r\n\r\nJoin to DTLS Teardown (e):\r\n\r\nJoin to Configure (g)", "submit_date": "2012-04-11", "submitter_name": "Dong-Yun Seo", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3188", "doc-id": "RFC6588", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2, pg.3", "orig_text": "   Declaration of syntactic structure:\r\n\r\n   The structure of the namespace for 'ucode' using the hexadecimal\r\n   representation of the identifier is as follows using ABNF [RFC5234].\r\n\r\n   UCODE-URN = \"urn:ucode:\" ucode-name\r\n   ucode-name = \"_\" ucode-number\r\n   ucode-number = 1*ucode-value\r\n   ucode-value = 32HEXDIG\r\n   HEXDIG         =  DIGIT / \"A\" / \"B\" / \"C\" / \"D\" / \"E\" / \"F\"\r\n   DIGIT          =  %x30-39\r\n                  ; 0-9\r\n", "correct_text": "   Declaration of syntactic structure:\r\n\r\n   The structure of the namespace for 'ucode' using the hexadecimal\r\n   representation of the identifier is as follows using ABNF [RFC5234].\r\n\r\n   UCODE-URN    = \"urn:ucode:\" ucode-name\r\n   ucode-name   = \"_\" ucode-number\r\n   ucode-number = 1*ucode-value\r\n|  ucode-value  = 32UCHEXDIG\r\n|  UCHEXDIG     = %x30-39 / 0x41-46   ; digits 0..9, uppercase A..F\r\n|", "notes": "Note: The above clause is part of the 'ucode' URN Namespace \r\n      Registration Template, so the above correction needs\r\n      to be applied to the template archived at IANA as well.\r\n\r\nRationale: The maintainers of the namespace intended to admit\r\n  only uppercase letters in the hexadecimal representation,\r\n  in order to accomodate usage of assigned <ucode-value>s in\r\n  case-sensitive XML context; this is specified in other parts\r\n  of the RFC, but should be specified also in the formal definition.\r\n  According to the ABNF Standard, RFC 5234, string literals in ABNF\r\n  are explicitly case-insensitive (cf. page 5 of RFC 5234).", "submit_date": "2012-04-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3399", "doc-id": "RFC4379", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.1", "orig_text": "Those same addresses embedded in IPv6 would be encoded as follows:\r\n\r\n 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 1 1 1 1 1 1 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|1 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 0 0 0 0 1 1 1 1 1 1 1 1 1 1 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "Those same addresses embedded in IPv6 would be encoded as follows:\r\n\r\n 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|0 1 1 1 1 1 1 1 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|1 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 0 0 0 0 1 1 1 1 1 1 1 1 1 1 0 0|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The base IPv6 address should have 16 bytes (128 bits), there are more 4 bytes typed.", "submit_date": "2012-11-06", "submitter_name": "Fang Lu", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3211", "doc-id": "RFC3591", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.", "orig_text": "The OTN layering, as described in Figure 1, can be extended to\r\naccomodate such implementations by introducing another layer called\r\nthe OChGroup Layer.\r\n", "correct_text": "The OTN layering, as described in Figure 1, can be extended to\r\naccommodate such implementations by introducing another layer called\r\nthe OChGroup Layer.\r\n", "notes": "\"accomodate\" should be \"accommodate\"", "submit_date": "2012-05-05", "submitter_name": "Yi, EungJun", "verifier_id": "", "verifier_name": "RonBonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4445", "doc-id": "RFC4443", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   ICMPv6 Fields:\r\n\r\n   Type           1\r\n\r\n   Code           0 - No route to destination\r\n[...]\r\n                  5 - Source address failed ingress/egress policy\r\n                  6 - Reject route to destination\r\n[...]\r\n   If the reason for the failure to deliver is lack of a matching entry\r\n   in the forwarding node's routing table, the Code field is set to 0.\r\n   (This error can occur only in nodes that do not hold a \"default\r\n   route\" in their routing tables.)\r\n[...]\r\n   If the reason for the failure to deliver is that the route to the\r\n   destination is a reject route, the Code field is set to 6.  This may\r\n   occur if the router has been configured to reject all the traffic for\r\n   a specific prefix.\r\n\r\n   Codes 5 and 6 are more informative subsets of code 1.\r\n", "correct_text": "   ICMPv6 Fields:\r\n\r\n   Type           1\r\n\r\n   Code           0 - No route to destination\r\n[...]\r\n                  5 - Source address failed ingress/egress policy\r\n                  6 - Destination address failed ingress/egress policy\r\n[...]\r\n   If the reason for the failure to deliver is lack of an entry in the\r\n   forwarding node's routing table that can be used to reach the\r\n   destination, the Code field is set to 0.  This error may be reported\r\n   by nodes that lack a default route or are the origin of an aggregate\r\n   route\r\n[...]\r\n   If the reason for the failure to deliver is that the packet with this\r\n   destination address is not allowed due to ingress or egress filtering\r\n   policies, the Code field is set to 6.\r\n\r\n   Codes 5 and 6 are more informative subsets of code 1.\r\n", "notes": "A router that is the explicit or implicit origin of an aggregate\r\nroute prefix in routing must not forward messages to destinations\r\nmatching the aggregate prefix using a route with a prefix less specific\r\nthan the aggregate route it originated (e.g. a defaut route).  This\r\nconstraint is necessary to produce correct, loop-free routing.  The\r\nparenthetical comment in the current description of the Code 0 error\r\noverlooks the fact that such nodes may lack a route which may be used to\r\nreach a destination matching an aggregate prefix, and may be the only\r\nnodes which could report this lack, even if they do have routes to less\r\nspecific matching prefixes.  The suggested change to the Code 0\r\ndescription attempts to correct this.\r\n\r\nConcerning Code 6, the earliest definition of a \"reject route\" I've\r\nfound in writing is in the RFC 2096 IP Forwarding Table MIB (though\r\n4.3BSD-Reno kernels supported them in 1990 and there may well be earlier\r\nuses).  The updated description of inetCidrRouteType in RFC 4292 says this:\r\n\r\n     reject(2) refers to a route that, if matched, discards\r\n     the message as unreachable and returns a notification\r\n     (e.g., ICMP error) to the message sender.  This is used\r\n     in some protocols as a means of correctly aggregating\r\n     routes.\r\n\r\nIn the MIB a reject route is a generic mechanism to indicate that packets\r\nwith matching destinations won't be forwarded using less specific routes,\r\nbut instead will be discarded if no more specific matching route to use\r\nto forward the packet is known with an error being returned to the\r\nmessage sender.  The reason no specific error is associated with this is\r\nthat while the presence of the reject route describes how messages are\r\nforwarded, or not forwarded (i.e. the mechanism), it does not describe why\r\nthey are being forwarded like that (i.e. the policy); to know the latter\r\nrequires knowing why the reject route was added.  Knowing which error\r\nwill be reported hence requires knowing the purpose that is being\r\nimplemented by the reject route.\r\n\r\nThe original use of the mechanism, as indicated above, was to produce\r\ncorrect forwarding on routers originating aggregate routes.  Another use\r\nof the mechanism, to prevent packets with Local IPv6 destination addresses\r\nfrom being forwarded beyond a site's administrative boundary, was suggested\r\nin Section 4.3 of RFC 4193 (I believe this can only be understood as a\r\nsuggestion, rather than an implementation requirement, since the policy\r\nit requires could be indistinguishably implemented with a firewall filter\r\ninstead).\r\n\r\nThe current definition of Code 6 describes the error being reported\r\nas \"Reject route to destination\", that is it ascribes the reason for\r\nthe error to the mechanism itself rather than the policy the mechanism\r\nwas employed to implement.  If this was the intent then its discription\r\nis technically inaccurate.  A reject route does not necessarily implement\r\nan administrative prohibition nor is its function necessarily to \"reject\r\nall traffic for a specific prefix\"; the original use of reject routes\r\nfor aggregation is inconsistent with both of these.  What I believe is\r\nthat the intent of Code 6 is to report the error associated with the\r\nRFC 4193 border patrol policy, independent of how that is implemented, and\r\nso I've changed the text to better reflect that.\n --VERIFIER NOTES-- \nThe changes proposed go beyond the level of fixing an error.  Some of the changes are explicitly changing the consensus of the working group that developed the specification. If these changes are warranted, an internet-draft should be written and discussion started within the working group.", "submit_date": "2015-08-15", "submitter_name": "Dennis Ferguson", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3189", "doc-id": "RFC6588", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2, pg.4", "orig_text": "   Rules for lexical equivalence:\r\n\r\n   The entire UCODE-URN is case-sensitive.\r\n\r\n   NOTE: This is an additional restriction imposed on the ucode\r\n   namespace by the requirements of some major applications of ucode in\r\n   existence.  Only capital \"A\", \"B\", \"C\", ..., \"F\" are allowed as part\r\n   of hexadecimal characters.", "correct_text": "   Rules for lexical equivalence:\r\n\r\n|  The Namespace-Specific String (NSS) in 'ucode' URNs\r\n|  (i.e. the <ucode-name> in the ABNF) is case-sensitive.\r\n|  So this namespace imposes no additional lexical equivalences\r\n|  beyond what is specified in RFC 2141 (i.e., according to\r\n|  RFC 2141, the \"urn:ucode:\" part is case-insensitive, the NSS\r\n|  is not).", "notes": "Note: The above clause is part of the 'ucode' URN Namespace\r\n      Registration Template, so the above correction needs\r\n      to be applied to the template archived at IANA as well.\r\n\r\nRationale: The RFC text violates Section 5 of RFC 2141, which\r\n  specifies that the case-insensitivity of the URI Scheme (\"URN\")\r\n  and the URN Namespace ID (NID) cannot be overridden by a URN\r\n  Namespace registration.\r\n  It was the intent of the maintainers of the 'ucode' namespace\r\n  to follow RFC 2141, but the language in the RFC has happened\r\n  to indicate otherwise.\r\n\r\n  The correction of the ABNF recorded in Errata Note #3188 makes\r\n  the original NOTE superflous, since the corrected ABNF now\r\n  precisely specifies what this NOTE intended to superimpose on\r\n  the original ABNF in the RFC.", "submit_date": "2012-04-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3190", "doc-id": "RFC5547", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Section 9.1., paragraph 7:\r\nOLD:\r\n\r\n    --boundary71\r\n    Content-Type: application/sdp\r\n    Content-Length: [length of SDP]\r\n\r\nNEW:\r\n\r\n    --boundary71\r\n    Content-Type: application/sdp\r\n\r\n\r\nSection 9.1., paragraph 9:\r\nOLD:\r\n\r\n    --boundary71\r\n    Content-Type: image/jpeg\r\n    Content-Transfer-Encoding: binary\r\n    Content-ID: <id2@alicepc.example.com>\r\n    Content-Length: [length of image]\r\n    Content-Disposition: icon\r\n\r\nNEW:\r\n\r\n    --boundary71\r\n    Content-Type: image/jpeg\r\n    Content-Transfer-Encoding: binary\r\n    Content-ID: <id2@alicepc.example.com>\r\n    Content-Disposition: icon\r\n\r\n\r\nSection 9.2., paragraph 24:\r\nOLD:\r\n\r\n    --boundary71\r\n    Content-Type: application/sdp\r\n    Content-Length: [length of SDP]\r\n\r\nNEW:\r\n\r\n    --boundary71\r\n    Content-Type: application/sdp\r\n\r\n\r\nSection 9.2., paragraph 26:\r\nOLD:\r\n\r\n    --boundary71\r\n    Content-Type: image/jpeg\r\n    Content-Transfer-Encoding: binary\r\n    Content-ID: <id3@alicepc.example.com>\r\n    Content-Length: [length of image]\r\n    Content-Disposition: icon\r\n\r\nNEW:\r\n\r\n    --boundary71\r\n    Content-Type: image/jpeg\r\n    Content-Transfer-Encoding: binary\r\n    Content-ID: <id3@alicepc.example.com>\r\n    Content-Disposition: icon\r\n", "correct_text": "", "notes": "A Content-Length header is shown for a body-part within a multipart body. But Content-Length is an HTTP/SIP header, not a IANA-registered MIME header and should therefore not appear at that location in valid examples. The length of a body part within a multipart body is determined by MIME framing. A Content-Length header found for a body-part within a multipart body is meaningless and should be ignored.\r\n\r\nThis was discussed on both the SIP Implementors and SIP Core mailing lists.", "submit_date": "2012-04-12", "submitter_name": "Bruno CHATRAS", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4446", "doc-id": "RFC1122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1.1", "orig_text": "         A host is generally said to be multihomed if it has more than\r\n         one interface to the same or to different networks.  See\r\n         Section 1.1.3 on \"Terminology\".", "correct_text": "         A host is generally said to be multihomed if it has more than\r\n         one interface to the same or to different networks.  See\r\n         Section 1.3.3 on \"Terminology\".", "notes": "\"Section 1.1.3\" should be \"Section 1.3.3\".", "submit_date": "2015-08-16", "submitter_name": "Marek Perny", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4447", "doc-id": "RFC7315", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.6.3.1.", "orig_text": "\t4.6.3.1. Procedures at the Proxy\r\n\t\r\n\t\r\n\tProcedures described within 4.5.2.2 apply. A transit-ioi MAY be\r\n\tadded or modified by a proxy. A deletion of the transit-ioi or a\r\n\tentry within the tranist-ioi could appear depending on the network\r\n\t\r\n\tpolicy and trust rules. This is also valid by replacing the transit-\r\n\tioi with a void value.\r\n", "correct_text": "4.6.3.1. Procedures at the Proxy\r\n\r\n\r\nProcedures described within Section 4.6.2.2 apply. A transit-ioi MAY\r\nbe added or modified by a proxy. A deletion of the transit-ioi or a\r\nentry within the tranist-ioi could appear depending on the network\r\n\r\npolicy and trust rules. This is also valid by replacing the\r\ntransit-ioi with a void value.\r\n", "notes": "Problem is that the Reader is lead to the wrong procedures.", "submit_date": "2015-08-17", "submitter_name": "Roland Jesske", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4448", "doc-id": "RFC7315", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.6.4.2.", "orig_text": "4.6.4.2.  Procedures at the Proxy\r\n\r\n   Procedures described within Section 4.5.2.2 apply.  A related-icid\r\n   and \"related-icid-generated-at\" MAY be added or modified by a proxy.\r\n   A deletion of the elements could appear depending on the network\r\n   policy and trust rules.", "correct_text": "4.6.4.2.  Procedures at the Proxy\r\n\r\n   Procedures described within Section 4.6.2.2 apply.  A related-icid\r\n   and \"related-icid-generated-at\" MAY be added or modified by a proxy.\r\n   A deletion of the elements could appear depending on the network\r\n   policy and trust rules.", "notes": "This pointer to a wrong section may lead to a wrong implementation", "submit_date": "2015-08-17", "submitter_name": "Roland Jesske", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7054", "doc-id": "RFC9094", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "  augment \"/nw:networks/nw:network/nw:node/tet:te\"\r\n        + \"/tet:te-node-attributes\" {\r\n    when '/nw:networks/nw:network/nw:network-types'\r\n       + '/tet:te-topology/wsont:wson-topology' {\r\n      description\r\n        \"Augmentation parameters apply only for networks with\r\n         WSON topology type.\";\r\n    }\r\n", "correct_text": "  augment \"/nw:networks/nw:network/nw:node/tet:te\"\r\n        + \"/tet:te-node-attributes\" {\r\n    when '../../../nw:network-types/tet:te-topology/'\r\n       + 'wsont:wson-topology' {\r\n      description\r\n        \"Augmentation parameters apply only for networks with\r\n         WSON topology type.\";\r\n    }\r\n", "notes": "The original YANG statements make the augmentation apply to all nw:networks as soon as there is at least one nw:network that is of wsont:wson-topology. This is clearly not the author's intent, as proven by the text in the description statement.\r\n\r\nThe corrected YANG statements make the augmentation only apply to the specific nw:networks that are of wsont:wson-topology type. There are also other ways to fix this issue.\r\n\r\n(See also discussion at https://mailarchive.ietf.org/arch/msg/ccamp/9-8jHMSqp_Lqdu0XMuVkh8HaJN8/)", "submit_date": "2022-07-29", "submitter_name": "Jan Lindblad", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-09-06 21:38:03"}, {"errata_id": "3191", "doc-id": "RFC5246", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Meta-Data", "orig_text": "Obsoletes: 3268, 4346, 4366\r\nUpdates: 4492", "correct_text": "Updates: 4492", "notes": "\"Obsoletes: 4366\" is factually incorrect, because it is impossible to implement TLSv1.1 (rfc4346) or TLSv1.0(rfc2246) from the TLSv1.2 spec alone. (IPv6 does not obsolete IPv4 and HTTP/1.1 does not obsolete HTTP/1.0 either).\r\n\r\n\"Obsoletes: 4366\" is factually incorrect, because some of the TLS extensions defined in rfc4366 do NOT appear in rfc5246 (and were updated by rfc6066).  On top of that, in order to implement TLS extensions for TLSv1.0 or TLSv1.1, rfc4366 is indispensible, because it describes the necessary changes to the TLSv1.0 & TLSv1.1 PDUs, information that would be cumbersome to extract from rfc5246 compared to simply using rfc4366.\r\n\r\n\"Obsoletes: 3268\" is factually incorrect, because 3268 is the document needed to implement the AES ciphersuites in implementations of TLS _prior_ to TLSv1.2,\r\nsuch as TLSv1.0(rfc2246) and TLSv1.1(rfc4346), i.e. to add support for AES ciphersuites to an existing implementation of TLSv1.0, one would use TLSv1.0(rfc2246) plus rfc3268, rather than TLSv1.0 plus some undefined fragments of rfc5246.\n --VERIFIER NOTES-- \nIf you're looking to implement TLS 1.1 or TLS 1.0 you should be looking in those earlier specifications not RFC 5246.\r\n\r\nOne RFC can be obsoleted by more than RFC.", "submit_date": "2012-04-12", "submitter_name": "Martin Rex", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3192", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   From: Joe SixPack <joe@football.example.com>\r\n   To: Suzie Q <suzie@shopping.example.net>\r\n   Subject: Is dinner ready?\r\n   Date: Fri, 11 Jul 2003 21:00:37 -0700 (PDT)\r\n   Message-ID: <20030712040037.46341.5F8J@football.example.com>\r\n\r\n   Hi.\r\n\r\n   We lost the game.  Are you hungry yet?\r\n\r\n   Joe.", "correct_text": "   From: Joe SixPack <joe@football.example.com>\r\n   To: Suzie Q <suzie@shopping.example.net>\r\n   Subject: Is dinner ready?\r\n   Date: Fri, 11 Jul 2003 21:00:37 -0700 (PDT)\r\n   Message-ID: <20030712040037.46341.5F8J@football.example.com>\r\n\r\n   Hi.\r\n\r\n   We lost the game. Are you hungry yet?\r\n\r\n   Joe.", "notes": "This text appears three times, in A.1, A.2, and A.3.  Notice the double space after \"game.\", which renders the body hashes in A.2 and A.3 invalid.\r\n\r\nThe corrected text, which is the same as that in RFC 4871, removes the extra space.", "submit_date": "2012-04-14", "submitter_name": "John Hawthorn", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3193", "doc-id": "RFC3260", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "      RFC 2497: revise to reflect understanding that, AF classes are\r\n      instances of the AF PHB group, and are not collectively a PHB\r\n      group.", "correct_text": "      RFC 2597: revise to reflect understanding that, AF classes are\r\n      instances of the AF PHB group, and are not collectively a PHB\r\n      group.", "notes": "There is a typo. This is the RFC 2597, which actually defines the AF PHB group. RFC 2497 have nothing to do with AF classes.", "submit_date": "2012-04-16", "submitter_name": "Sergey Antipov", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3194", "doc-id": "RFC5865", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   There are at least six major ways that capacity admission is done or\r\n   has been proposed to be done for real-time applications.  Each will\r\n   be described below, and Section 3 will judge which ones are likely to\r\n   meet the requirements of the Admitted Telephony service class.  These\r\n   include:\r\n", "correct_text": "   There are at least six major ways that capacity admission is done or\r\n   has been proposed to be done for real-time applications.  Each will\r\n   be described below, and Section 2.3 will judge which ones are likely to\r\n   meet the requirements of the Admitted Telephony service class.  These\r\n   include:\r\n", "notes": "Section 2.3 is the one, which recommends capacity admission procedures, while Section 3 summarizes proposed changes.", "submit_date": "2012-04-17", "submitter_name": "Sergey Antipov", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3195", "doc-id": "RFC5451", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3", "orig_text": "     reasonspec = \"reason\" [CFWS] \"=\" [CFWS] value\r\n                ; a free-form comment on the reason the given result\r\n                ; was returned\r\n", "correct_text": "     reasonspec = [CFWS] \"(\" value \")\"\r\n                ; a free-form comment on the reason the given result\r\n                ; was returned\r\n\r\n", "notes": "I am not sure if it is a mistake, but the examples look this way:\r\n\r\n     Authentication-Results: example.com;\r\n           dkim=pass (good signature) header.i=@mail-router.example.net;\r\n           dkim=fail (bad signature) header.i=@newyork.example.com\r\n\r\nSo I think the \"reasonspec\" is here \"(good signature)\" and \"(bad signature)\". All other examples show similar entries for \"reasonspec\".\r\n\r\n[Verifier's note:\r\nThis change is INCORRECT.  The free-form parenthesized comments are actually part of the \"CFWS\" production.  The confusion is caused by having no examples that use the \"reasonspec\" production, and that should be fixed if the document is updated.]", "submit_date": "2012-04-17", "submitter_name": "Dirk Geschke", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4451", "doc-id": "RFC3958", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   example.com.\r\n   ;;       order pref flags\r\n   IN NAPTR 100   10   \"\"    \"WP:whois++\"      ( ; service\r\n                             \"\"                  ; regexp\r\n                             bunyip.example.     ; replacement\r\n                                               )\r\n   IN NAPTR 100   20   \"s\"   \"WP:ldap\"         ( ; service\r\n                             \"\"                  ; regexp\r\n                            _ldap._tcp.myldap.example.com. ; replacement\r\n                                               )\r\n   IN NAPTR 200   10   \"\"    \"EM:protA\"        ( ; service\r\n                             \"\"                  ; regexp\r\n                             someisp.example.    ; replacement\r\n                                               )\r\n   IN NAPTR 200   30   \"a\"   \"EM:protB\"          ; service\r\n                             \"\"                  ; regexp\r\n                             myprotB.example.com.; replacement\r\n                                               )\r\n", "correct_text": "   example.com.\r\n   ;;       order pref flags\r\n   IN NAPTR 100   10   \"\"    \"WP:whois++\"      ( ; service\r\n                             \"\"                  ; regexp\r\n                             bunyip.example.     ; replacement\r\n                                               )\r\n   IN NAPTR 100   20   \"s\"   \"WP:ldap\"         ( ; service\r\n                             \"\"                  ; regexp\r\n                            _ldap._tcp.myldap.example.com. ; replacement\r\n                                               )\r\n   IN NAPTR 200   10   \"\"    \"EM:protA\"        ( ; service\r\n                             \"\"                  ; regexp\r\n                             someisp.example.    ; replacement\r\n                                               )\r\n   IN NAPTR 200   30   \"a\"   \"EM:protB\"        ( ; service\r\n                             \"\"                  ; regexp\r\n                             myprotB.example.com.; replacement\r\n                                               )\r\n", "notes": "Not so familiar with BIND syntax, but by appearance, the last entry seems to be missing a beginning parenthesis. There is another similar omission in section 4.2 (thinkingcat.example definition, this time missing an ending parenthesis).", "submit_date": "2015-08-19", "submitter_name": "Frans Oilinki", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:40:01"}, {"errata_id": "3196", "doc-id": "RFC1995", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2, pg.2", "orig_text": "   If an IXFR query with the same or newer version number than that of\r\n   the server is received, it is replied to with a single SOA record of\r\n|  the server's current version, just as in AXFR.\r\n                               ^^^^^^^^^^^^^^^^^^\r\n   [...]\r\n\r\n   Thus, a client should first make an IXFR query using UDP.  If the\r\n   query type is not recognized by the server, an AXFR (preceded by a\r\n|  UDP SOA query) should be tried, ensuring backward compatibility.  [...]\r\n   ^^^^", "correct_text": "   If an IXFR query with the same or newer version number than that of\r\n   the server is received, it is replied to with a single SOA record of\r\n|  the server's current version.\r\n\r\n   [...]\r\n\r\n   Thus, a client should first make an IXFR query using UDP.  If the\r\n|  query type is not recognized by the server, an AXFR (preceded by an\r\n|  SOA query) should be tried, ensuring backward compatibility.  [...]\r\n", "notes": "Rationale:\r\na) The behavior of the IXFR protocol described in the first paragraph\r\n   quoted above has been attributed falsely to AXFR; AXFR doesn't\r\n   behave like that (cf. the clarified AXFR specification in RFC 5936).\r\nb) The SOA query may be performed over TCP as well, e.g., if there\r\n   already is an open TCP connection from the client to the server.\r\n\r\nHistorical Note:\r\n   The above issues have been identified by the submitter in 2008,\r\n   but no Errata have been filed so far.  However, these already had\r\n   been observed in 1999 by Andreas Gustafsson, who, in the context of\r\n   the work on RFC 1995bis, recently has provided the DNSEXT WG access\r\n   to a privately archived DNSIND mailing list thread on RFC 1995,\r\n   in which these issues have been discussed in November 1999.\r\n   For the record, the technical issues in RFC 1995 that can be\r\n   addressed by Errata Notes are now being submitted this way.", "submit_date": "2012-04-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3197", "doc-id": "RFC1995", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4, pg.3", "orig_text": "|  RRs in the incremental transfer messages may be partial.  That is, if\r\n   a single RR of multiple RRs of the same RR type changes, only the\r\n   changed RR is transferred.\r\n", "correct_text": "|  RRsets in the incremental transfer messages may be partial.  That is,\r\n|  if a single RR out of multiple RRs of the same RR type at the same\r\n|  owner name and CLASS changes, only the changed RR is transferred.\r\n", "notes": "Rationale:\r\n   DNS resource records (RRs) are always transferred as integral\r\n   entities in the DNS protocol, and IXFR is no exception for this\r\n   rule.  So there never are partial RRs in any IXFR response packets.\r\n   However, as indicated more precisely in the adjusted text above,\r\n   it is intended that partial _RRsets_ are carried in IXFR responses;\r\n   unchanged RRs are not sent inside incremental response messages.\r\nHistorical Note:\r\n   The above issue has been identified by the submitter in 2008,\r\n   but no Errata have been filed so far.  However, it already had\r\n   been observed in 1999 by Andreas Gustafsson, who, in the context of\r\n   the work on RFC 1995bis, recently has provided the DNSEXT WG access\r\n   to a privately archived DNSIND mailing list thread on RFC 1995,\r\n   in which such issues have been discussed in November 1999.\r\n   For the record, the technical issues in RFC 1995 that can be\r\n   addressed by Errata Notes are now being submitted this way.", "submit_date": "2012-04-18", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3198", "doc-id": "RFC1928", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "o if ATYP is X\u201904\u2019 - 20+method_dependent octets smaller", "correct_text": "o if ATYP is X\u201904\u2019 - 22+method_dependent octets smaller", "notes": "RSV[2]+FRAG[1]+ATYP[1]+DST.ADDR[16]+DST.PORT[2]=22\r\nif ATYP is X\u201904\u2019 [IPv6 address]", "submit_date": "2012-04-19", "submitter_name": "Andreas Cudok", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3199", "doc-id": "RFC6350", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1 and 10.1", "orig_text": "In Section 3.1:\r\n\r\n  It is invalid to specify a value other than \"UTF-8\" in the\r\n   \"charset\" MIME parameter (see Section 10.1).\r\n\r\nIn Section 10.1:\r\n\r\n      \"charset\": as defined for text/plain [RFC2046]; encodings other\r\n      than UTF-8 [RFC3629] MUST NOT be used.\r\n\r\n\r\n", "correct_text": "(none, delete both sentences)", "notes": "There is no \"charset\" parameter for text/vcard. Perhaps there used to be one, but it isn't listed and would serve no purpose if it did. Since there is no parameter, advice about its value is inappropriate.\n --VERIFIER NOTES-- \n   ", "submit_date": "2012-04-23", "submitter_name": "Larry Masinter", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3200", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.2.2", "orig_text": "   The serial number MUST be a positive integer assigned by the CA to\r\n   each certificate.  It MUST be unique for each certificate issued by a\r\n   given CA (i.e., the issuer name and serial number identify a unique\r\n   certificate).  CAs MUST force the serialNumber to be a non-negative\r\n   integer.", "correct_text": "   The serial number MUST be a positive non-zero integer assigned by the\r\n   CA to each certificate.  It MUST be unique for each certificate issued\r\n   by a given CA (i.e., the issuer name and serial number identify a\r\n   unique certificate).  CAs MUST force the serialNumber to be a positive\r\n   integer.", "notes": "\"positive\" and \"non-negative\" do not mean the same thing. I used the third paragraph of the section as a tie-breaker to decide which of the two terms was intended:\r\n\r\n   Note: Non-conforming CAs may issue certificates with serial numbers\r\n   that are negative or zero.  Certificate users SHOULD be prepared to\r\n   gracefully handle such certificates.", "submit_date": "2012-04-24", "submitter_name": "David Mandelberg", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3201", "doc-id": "RFC4443", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   [IPv6-ESP]   Kent, S., \"IP Encapsulating Security Payload (ESP)\", RFC\r\n                4203, December 2005.", "correct_text": "   [IPv6-ESP]   Kent, S., \"IP Encapsulating Security Payload (ESP)\", RFC\r\n                4303, December 2005.", "notes": "Wrong RFC reference.", "submit_date": "2012-04-25", "submitter_name": "David Gr\u00e4ff", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3202", "doc-id": "RFC6225", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3, pg. 19", "orig_text": "   Description: The description of the altitude described by this code.", "correct_text": "   Description: The description of the datum (coordinate system)\r\n      described by this code.", "notes": "Rationale: copyedit artifact; text obviously copied from\r\n  Section 4.2. (Altitude Type Registry) without performing\r\n  the needed adaptation for Section 4.3. (Datum Registry).", "submit_date": "2012-04-26", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3203", "doc-id": "RFC6488", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Table of Con", "orig_text": "                  2.1.6.7. unsigneAttrs ...............................8", "correct_text": "                  2.1.6.7. unsignedAttrs ..............................8", "notes": "", "submit_date": "2012-04-26", "submitter_name": "David Mandelberg", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5870", "doc-id": "RFC8360", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.3", "orig_text": "       ext-pe-autonomousSysIds-v2 EXTENSION ::= {\r\n         SYNTAX ASIdentifiers\r\n         IDENTIFIED BY id-pe-autonomousSysIds-v2\r\n       }\r\n\r\n       id-pe-autonomousSysIds OBJECT IDENTIFIER ::= { id-pe 29 }", "correct_text": "       ext-pe-autonomousSysIds-v2 EXTENSION ::= {\r\n         SYNTAX ASIdentifiers\r\n         IDENTIFIED BY id-pe-autonomousSysIds-v2\r\n       }\r\n\r\n       id-pe-autonomousSysIds-v2 OBJECT IDENTIFIER ::= { id-pe 29 }", "notes": "The \"-v2\" is missing from the identifier.  It is needed for the ASN.1 module to compile properly.", "submit_date": "2019-10-04", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-10-08 19:16:19"}, {"errata_id": "3204", "doc-id": "RFC3942", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6. IANA Cons", "orig_text": "   4. change the listing of any options listed as \"Tentatively-Assigned\"\r\n|     to \"Unavailable\" 18 months from this RFC's publication date and\r\n      periodically thereafter as long as there is an option listed as\r\n      \"Tentatively-Assigned\", if no un-expired Internet-Draft exists\r\n      documenting the usage.\r\n", "correct_text": "   4. change the listing of any options listed as \"Tentatively-Assigned\"\r\n|     to \"Unassigned\" 18 months from this RFC's publication date and\r\n      periodically thereafter as long as there is an option listed as\r\n      \"Tentatively-Assigned\", if no un-expired Internet-Draft exists\r\n      documenting the usage.\r\n", "notes": "The body of the RFC clearly states in Section 4, bullet 4.\r\nthat the IANA action desired by the RFC is to make these code\r\npoints available for assignment after the 18-month grace period.\r\n\r\nThis Errata Note is tagged as \"Technical\" because the inconsistency\r\nbetween the IANA Considerations and the body of the RFC apparently\r\nhas caused IANA to not follow the body and spirit of the RFC -- at\r\nthe time this Errata Note is being filed, there are several entries\r\nleft in the BOOTP+DHCP parameters option codes registry that should\r\nhave been cleaned up and made available for assignment since the\r\npublication of RFC 3942 in November 2004.", "submit_date": "2012-04-27", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3747", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.10", "orig_text": "   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |          |SECONDLY|MINUTELY|HOURLY |DAILY  |WEEKLY|MONTHLY|YEARLY|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYMONTH   |Limit   |Limit   |Limit  |Limit  |Limit |Limit  |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYWEEKNO  |N/A     |N/A     |N/A    |N/A    |N/A   |N/A    |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYYEARDAY |Limit   |Limit   |Limit  |N/A    |N/A   |N/A    |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYMONTHDAY|Limit   |Limit   |Limit  |Limit  |N/A   |Expand |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYDAY     |Limit   |Limit   |Limit  |Limit  |Expand|Note 1 |Note 2|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYHOUR    |Limit   |Limit   |Limit  |Expand |Expand|Expand |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYMINUTE  |Limit   |Limit   |Expand |Expand |Expand|Expand |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYSECOND  |Limit   |Expand  |Expand |Expand |Expand|Expand |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYSETPOS  |Limit   |Limit   |Limit  |Limit  |Limit |Limit  |Limit |\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n\r\n      Note 1:  Limit if BYMONTHDAY is present; otherwise, special expand\r\n               for MONTHLY.\r\n\r\n      Note 2:  Limit if BYYEARDAY or BYMONTHDAY is present; otherwise,\r\n               special expand for WEEKLY if BYWEEKNO present; otherwise,\r\n               special expand for MONTHLY if BYMONTH present; otherwise,\r\n               special expand for YEARLY.", "correct_text": "   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |          |SECONDLY|MINUTELY|HOURLY |DAILY  |WEEKLY|MONTHLY|YEARLY|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYMONTH   |Limit   |Limit   |Limit  |Limit  |Limit |Limit  |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYWEEKNO  |N/A     |N/A     |N/A    |N/A    |N/A   |N/A    |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYYEARDAY |Limit   |Limit   |Limit  |N/A    |N/A   |N/A    |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYMONTHDAY|Limit   |Limit   |Limit  |Limit  |N/A   |Expand |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYDAY     |Limit   |Limit   |Limit  |Limit  |Expand|Note 1 |Note 2|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYHOUR    |Limit   |Limit   |Limit  |Expand |Expand|Expand |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYMINUTE  |Limit   |Limit   |Expand |Expand |Expand|Expand |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYSECOND  |Limit   |Expand  |Expand |Expand |Expand|Expand |Expand|\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n   |BYSETPOS  |Limit   |Limit   |Limit  |Limit  |Limit |Limit  |Limit |\r\n   +----------+--------+--------+-------+-------+------+-------+------+\r\n\r\n      Note 1:  Limit if BYMONTHDAY is present; otherwise, special expand\r\n               for MONTHLY.\r\n\r\n      Note 2:  Limit if BYYEARDAY or BYMONTHDAY is present; otherwise,\r\n               special expand for YEARLY.", "notes": "The change is to \"Note 2\":\r\nRemoved WEEKLY and MONTHLY clause as Note 2 only applies to FREQ = YEARLY.", "submit_date": "2013-10-09", "submitter_name": "Alfie John", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3205", "doc-id": "RFC6487", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   An RPKI CA MUST include the two extensions, Authority Key Identifier\r\n   and CRL Number, in every CRL that it issues.  RPs MUST be prepared to\r\n   process CRLs with these extensions.  No other CRL extensions are\r\n   allowed.", "correct_text": "   An RPKI CA MUST include the two extensions, Authority Key Identifier\r\n   and CRL Number, in every CRL that it issues.  RPs MUST be prepared to\r\n   process CRLs with these extensions.  No other CRL extensions are\r\n   allowed. The extensions mentioned above MUST NOT appear more than \r\n   once each.", "notes": "The clarification:\r\n\r\n\"The extensions mentioned above MUST NOT appear more than once each.\"\r\n\r\nis added.", "submit_date": "2012-04-27", "submitter_name": "David Mandelberg", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3206", "doc-id": "RFC2616", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.3", "orig_text": "   variant\r\n      A resource may have one, or more than one, representation(s)\r\n      associated with it at any given instant. Each of these\r\n      representations is termed a `varriant'.  Use of the term `variant'\r\n      does not necessarily imply that the resource is subject to content\r\n      negotiation.\r\n\r\n", "correct_text": "   variant\r\n      A resource may have one, or more than one, representation(s)\r\n      associated with it at any given instant. Each of these\r\n      representations is termed a `variant'.  Use of the term `variant'\r\n      does not necessarily imply that the resource is subject to content\r\n      negotiation.\r\n\r\n", "notes": "\"varriant\" Is this misspelling?", "submit_date": "2012-04-27", "submitter_name": "ValCot", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3207", "doc-id": "RFC5023", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "p51", "orig_text": "   anyForeignElement =\r\n       element * - atom:* {\r\n          (attribute * { text }\r\n           | text\r\n           | anyElement)*\r\n       }", "correct_text": "   anyForeignElement =\r\n       element * - app:* {\r\n          (attribute * { text }\r\n           | text\r\n           | anyElement)*\r\n       }", "notes": "I believe the schema unintentionally prohibits atom:link from being included in the categories document.  Given that in another schema in the same appendix it is allowed, and going by the text in the normative sections, I believe this must be a cut and paste error.", "submit_date": "2012-05-01", "submitter_name": "Peter Rushforth", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3585", "doc-id": "RFC5709", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3", "orig_text": "(1) PREPARATION OF KEY\r\n       In this application, Ko is always L octets long.\r\n\r\n       If the Authentication Key (K) is L octets long, then Ko is equal\r\n       to K.  If the Authentication Key (K) is more than L octets long,\r\n       then Ko is set to H(K).  If the Authentication Key (K) is less\r\n       than L octets long, then Ko is set to the Authentication Key (K)\r\n       with zeros appended to the end of the Authentication Key (K),\r\n       such that Ko is L octets long.\r\n", "correct_text": "(1) PREPARATION OF KEY\r\n       In this application, Ko is always B octets long and is computed \r\n       as follows:\r\n\r\n       If the Authentication Key (K) is B octets long, then Ko is equal\r\n       to K.  If the Authentication Key (K) is more than B octets long,\r\n       then Ko is set to H(K) and then appended with (B-L) zeroes to \r\n       create a B octets long string Ko.  If the Authentication Key (K) \r\n       is less than B octets long, then Ko is set to the Authentication \r\n       Key (K) with zeros appended to the end of the Authentication Key \r\n       (K), such that Ko is B octets long.\r\n", "notes": "This is in accordance with RFC2104(HMAC: Keyed-Hashing for Message Authentication). Reproducing the relevant text below:\r\n\r\n2. Definition of HMAC\r\n\r\nThe definition of HMAC requires a cryptographic hash function, which\r\nwe denote by H, and a secret key K. We assume H to be a cryptographic\r\nhash function where data is hashed by iterating a basic compression\r\nfunction on blocks of data. We denote by B the byte-length of such\r\nblocks (B=64 for all the above mentioned examples of hash functions),\r\nand by L the byte-length of hash outputs (L=16 for MD5, L=20 for\r\nSHA-1). The authentication key K can be of any length up to B, the\r\nblock length of the hash function. Applications that use keys longer\r\nthan B bytes will first hash the key using H and then use the\r\nresultant L byte string as the actual key to HMAC. In any case the\r\nminimal recommended length for K is L bytes (as the hash output\r\nlength). See section 3 for more information on keys.\r\n\r\n\r\nAlso, according to FIPS PUB 198, section 5(HMAC SPECIFICATION) :\r\n\r\nSTEPS\r\nSTEP-BY-STEP DESCRIPTION\r\nStep 1\r\nIf the length of K = B: set K0 = K. Go to step 4.\r\nStep 2\r\nIf the length of K > B: hash K to obtain an L byte string, \r\nthen append (B-L) zeros to create a B-byte string K0 \r\n(i.e., K0 = H(K) || 00...00). Go to step 4.\r\nStep 3\r\nIf the length of K < B: append zeros to the end of K to \r\ncreate a B-byte string K0 (e.g., if K is 20 bytes in \r\nlength and B = 64, then K will be appended with 44 zero \r\nbytes 0x00).\r\nStep 4\r\nExclusive-Or K0 with ipad to produce a B-byte string: \r\nK0 \u00af ipad.\r\nStep 5\r\nAppend the stream of data 'text' to the string resulting \r\nfrom step 4: (K0 \u00af ipad) || text.\r\nStep 6\r\nApply H to the stream generated in step 5: \r\nH((K0 \u00af ipad) || text).\r\nStep 7\r\nExclusive-Or K0 with opad: K0 \u00af opad.\r\nStep 8\r\nAppend the result from step 6 to step 7: \r\n(K0 \u00af opad) || H((K0 \u00af ipad) || text).\r\nStep 9\r\nApply H to the result from step 8: \r\nH((K0 \u00af opad )|| H((K0 &#65455; ipad) || text)).\r\nStep 10\r\nSelect the leftmost t bytes of the result of step 9 as the MAC.\r\n\r\nVerifier's note:\r\nThis issue is being addressed by draft-ietf-ospf-rfc6506bis.", "submit_date": "2013-04-09", "submitter_name": "Mike Dubrovsky", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3208", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "Section 12.5.2. says:\r\n   The first successful LAYOUTGET\r\n   processed by the server using a non-layout stateid as an argument\r\n   MUST have the \"seqid\" field of the layout stateid in the response set\r\n   to one.  Thereafter, the client MUST use a layout stateid (see\r\n   Section 12.5.3) on future invocations of LAYOUTGET on the file, and\r\n   the \"seqid\" MUST NOT be set to zero.\r\n\r\nIt should say:\r\n   The first successful LAYOUTGET\r\n   processed by the server using a non-layout stateid as an argument\r\n   MUST have the \"seqid\" field of the layout stateid in the response set\r\n   to one.  Thereafter, the client MUST use a layout stateid (see\r\n   Section 12.5.3) on future invocations of LAYOUTGET on the file, and\r\n   the \"seqid\" MUST NOT be set to zero.\r\n|  The client MUST serialize LAYOUTGET operations using a non-layout\r\n|  stateid with any other operation affecting the layout state on the file,\r\n|  including CB_LAYOUTRECALL, to allow consistent initialization of the\r\n|  layout state.\r\n\r\nAdd the following paragraph to section 12.5.3.:\r\n|  A client MAY always forget its layout state and associated\r\n|  layout stateid at any time (See also section 12.5.5.1).\r\n|  In such case, the client MUST use a non-layout stateid for the next\r\n|  LAYOUTGET operation.  This will signal the server that the client has\r\n|  no more layouts on the file and its respective layout state can be\r\n|  released before issuing a new layout in response to LAYOUTGET.\r\n\r\nSection 12.5.5.2.1. says:\r\n   One critical issue with regard to layout operations sequencing\r\n   concerns callbacks.  The protocol must defend against races between\r\n   the reply to a LAYOUTGET or LAYOUTRETURN operation and a subsequent\r\n   CB_LAYOUTRECALL.  A client MUST NOT process a CB_LAYOUTRECALL that\r\n   implies one or more outstanding LAYOUTGET or LAYOUTRETURN operations\r\n   to which the client has not yet received a reply.  The client detects\r\n   such a CB_LAYOUTRECALL by examining the \"seqid\" field of the recall's\r\n   layout stateid.  If the \"seqid\" is not exactly one higher than what\r\n   the client currently has recorded, and the client has at least one\r\n   LAYOUTGET and/or LAYOUTRETURN operation outstanding, the client knows\r\n   the server sent the CB_LAYOUTRECALL after sending a response to an\r\n   outstanding LAYOUTGET or LAYOUTRETURN.\r\n\r\nIt should say:\r\n   One critical issue with regard to layout operations sequencing\r\n   concerns callbacks.  The protocol must defend against races between\r\n   the reply to a LAYOUTGET or LAYOUTRETURN operation and a subsequent\r\n   CB_LAYOUTRECALL.  A client MUST NOT process a CB_LAYOUTRECALL that\r\n   implies one or more outstanding LAYOUTGET or LAYOUTRETURN operations\r\n   to which the client has not yet received a reply.  The client detects\r\n   such a CB_LAYOUTRECALL by examining the \"seqid\" field of the recall's\r\n   layout stateid.  If the \"seqid\" is not exactly one higher than what\r\n   the client currently has recorded, and the client has at least one\r\n   LAYOUTGET and/or LAYOUTRETURN operation outstanding,\r\n|  or if the client has a outstanding LAYOUTGET with a non-layout stateid,\r\n   the client knows\r\n   the server sent the CB_LAYOUTRECALL after sending a response to an\r\n   outstanding LAYOUTGET or LAYOUTRETURN.\r\n\r\nSection 12.5.5.2.1.1. says:\r\n   It is permissible for the client to send multiple parallel LAYOUTGET\r\n   operations for the same file or multiple parallel LAYOUTRETURN\r\n   operations for the same file or a mix of both.\r\n\r\nIt should say:\r\n    It is permissible for the client to send multiple parallel LAYOUTGET\r\n    operations for the same file\r\n|   using the layout stateid\r\n    or multiple parallel LAYOUTRETURN\r\n    operations for the same file or a mix of both.\r\n\r\nSection 12.5.5.2.1.2. says:\r\n   Note\r\n   that in the first case, the \"seqid\" in the layout stateid of the\r\n   recall is two greater than what the client has recorded;\r\n\r\nIt should say:\r\n   Note\r\n   that in the first case, the \"seqid\" in the layout stateid of the\r\n   recall is two greater than what the client has recorded,\r\n|  or the client has an outstanding LAYOUTGET using a non-layout stateid;\r\n\r\n", "submit_date": "2012-05-02", "submitter_name": "Benny Halevy", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4570", "doc-id": "RFC7700", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3", "orig_text": "An entity that performs enforcement according to this profile MUST\r\n   prepare a string as described in Section 2.2 and MUST also apply the\r\n   following rules specified in Section 2.1 in the order shown:\r\n\r\n   1.  Additional Mapping Rule\r\n   2.  Normalization Rule\r\n   3.  Directionality Rule\r\n\r\n   After all of the foregoing rules have been enforced, the entity MUST\r\n   ensure that the nickname is not zero bytes in length (this is done\r\n   after enforcing the rules to prevent applications from mistakenly\r\n   omitting a nickname entirely, because when internationalized\r\n   characters are accepted, a non-empty sequence of characters can\r\n   result in a zero-length nickname after canonicalization).\r\n", "correct_text": "An entity that performs enforcement according to this profile MUST\r\n   prepare a string as described in Section 2.2 and MUST also apply the\r\n   following rules specified in Section 2.1 in the order shown:\r\n\r\n   1.  Additional Mapping Rule\r\n   2.  Case Mapping Rule\r\n   3.  Normalization Rule\r\n\r\n   After all of the foregoing rules have been enforced, the entity MUST\r\n   ensure that the nickname is not zero bytes in length (this is done\r\n   after enforcing the rules to prevent applications from mistakenly\r\n   omitting a nickname entirely, because when internationalized\r\n   characters are accepted, a non-empty sequence of characters can\r\n   result in a zero-length nickname after canonicalization).\r\n", "notes": "There is no directionality rule to be applied during enforcement as the directionality rule is part of NFKC, the case mapping rule (as mentioned in section 2.1).", "submit_date": "2015-12-23", "submitter_name": "Sam Whited", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3209", "doc-id": "RFC4730", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4, 7.5", "orig_text": "urn:ietf:xml:ns:kpml-...", "correct_text": "urn:ietf:params:xml:ns:kpml-...", "notes": "The headlines of Sections 7.4 and 7.5 contain garbled versions of\r\nthe IETF protocol parameter sub-namespaces defined in the RFC:\r\nthe hierarchical element \"params:\" is missing.\r\n\r\nThis flaw also is mirrored in the Table of Contents of the RFC.", "submit_date": "2012-05-03", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4450", "doc-id": "RFC7273", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.8", "orig_text": "  ; PTP domain allowed characters: 0x21-0x7E (IEEE 1588-2002)\r\n   ptp-domain-name = \"domain-name=\" 1*16ptp-domain-char\r\n   ptp-domain-char = %x21-7E\r\n\r\n   ; PTP domain allowed number range: 0-127 (IEEE 1588-2008)\r\n   ptp-domain-nmbr = \"domain-nmbr=\" ptp-domain-dgts\r\n   ptp-domain-dgts = ptp-domain-n1 / ptp-domain-n2 / ptp-domain-n3\r\n   ptp-domain-n1   = DIGIT             ; 0-9\r\n   ptp-domain-n2   = POS-DIGIT DIGIT   ; 10-99\r\n   ptp-domain-n3   = (\"10\"/\"11\") DIGIT ; 100-119\r\n                   / \"12\" %x30-37      ; 120-127\r\n", "correct_text": "   ; PTP domain allowed characters: 0x21-0x7E (IEEE 1588-2002)\r\n   ptp-domain-name = 1*16ptp-domain-char\r\n   ptp-domain-char = %x21-7E\r\n\r\n   ; PTP domain allowed number range: 0-127 (IEEE 1588-2008)\r\n   ptp-domain-nmbr = ptp-domain-dgts\r\n   ptp-domain-dgts = ptp-domain-n1 / ptp-domain-n2 / ptp-domain-n3\r\n   ptp-domain-n1   = DIGIT             ; 0-9\r\n   ptp-domain-n2   = POS-DIGIT DIGIT   ; 10-99\r\n   ptp-domain-n3   = (\"10\"/\"11\") DIGIT ; 100-119\r\n                   / \"12\" %x30-37      ; 120-127\r\n", "notes": "There is an inconsistency between ABNF in section 4.8 and examples in section 5.5. Due to evidence that current implementations are working to what is shown in the examples, this is resolved by updating the ABNF specification.\r\n", "submit_date": "2015-08-18", "submitter_name": "Kevin Gross", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3818", "doc-id": "RFC3264", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   The agent receiving the offer MAY generate an answer, or it MAY\r\n   reject the offer.  The means for rejecting an offer are dependent on\r\n   the higher layer protocol.  The offer/answer exchange is atomic; if\r\n   the answer is rejected, the session reverts to the state prior to the\r\n   offer (which may be absence of a session).", "correct_text": "   The agent receiving the offer MAY generate an answer, or it MAY\r\n   reject the offer.  The means for rejecting an offer are dependent on\r\n   the higher layer protocol.  The offer/answer exchange is atomic; if\r\n   the offer is rejected, the session reverts to the state prior to the\r\n   offer (which may be absence of a session).", "notes": "You can't reject an answer. When the answer is received the SDP negotiation is completed.", "submit_date": "2013-12-02", "submitter_name": "J\u00f6rgen Axell", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3819", "doc-id": "RFC6006", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.13.2", "orig_text": "Each message sent to the PCE, except the last\r\none, will have the F-bit set in the RP object to signify that the\r\nresponse has been fragmented into multiple messages.", "correct_text": "Each message sent by the PCE, except the last\r\none, will have the F-bit set in the RP object to signify that the\r\nresponse has been fragmented into multiple messages.", "notes": "This section is about response, and response messages are sent *by* the PCE.", "submit_date": "2013-12-04", "submitter_name": "Udayasree", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4668", "doc-id": "RFC6214", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "", "correct_text": "", "notes": "In some countries you are be required to obtain a proper license from authorities to keep some kind of birds. It should be addressed in RFC.\r\n\r\nExample: http://www.afcd.gov.hk/english/publications/publications_press/pr1037.html\r\n\"Unauthorised keeping of five kinds of poultry -chickens, ducks, geese, pigeons and quails \u2013 is an offence...\"", "submit_date": "2016-04-14", "submitter_name": "YC Lee", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3216", "doc-id": "RFC3739", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.6.1.", "orig_text": "If a value of type SemanticsInformation is present in a QCStatement\r\nwhere the statementID component is set to id-qcs-pkix-QCSyntax-v1 or\r\nid-qcs-pkix-QCSyntax-v2, then at least one of the semanticsIdentifier\r\nor nameRegistrationAuthorities fields must be present, as indicated.\r\nNote that the statementInfo component need not be present in a \r\nQCStatement value even if the statementID component is set to id-\r\nqcs-pkix-QCSyntax-v1 or id-qcs-pkix-QCSyntax-v2.", "correct_text": "If a value of type SemanticsInformation is present in a QCStatement\r\nwhere the statementID component is set to id-qcs-pkixQCSyntax-v1 or\r\nid-qcs-pkixQCSyntax-v2, then at least one of the semanticsIdentifier\r\nor nameRegistrationAuthorities fields must be present, as indicated.\r\nNote that the statementInfo component need not be present in a\r\nQCStatement value even if the statementID component is set to \r\nid-qcs-pkixQCSyntax-v1 or id-qcs-pkixQCSyntax-v2.", "notes": "The extra minus sign \"-\" in pkix-QCSyntax should be deleted.\r\nTo avoid confusion of the minus sign with a hyphen \"id-qcs-pkixQCSyntax-v1\" should not be broken across lines.", "submit_date": "2012-05-07", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3217", "doc-id": "RFC3162", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "3.2 Framed-Interface-Id", "correct_text": "2.2 Framed-Interface-Id", "notes": "Typo in the numbering of this section.", "submit_date": "2012-05-08", "submitter_name": "Leaf Yeh", "verifier_id": "", "verifier_name": "RonBonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3218", "doc-id": "RFC5952", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.4", "orig_text": "Network diagrams and blueprints often show what IP addresses are \r\nassigned to a system devices.", "correct_text": "Network diagrams and blueprints often show which IP addresses are \r\nassigned to which systems devices.", "notes": "Improved grammar and correction to mismatch between singular and plural usage.", "submit_date": "2012-05-09", "submitter_name": "Rodrigo Curado", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3219", "doc-id": "RFC5952", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.4", "orig_text": "In times of trouble shooting there may be a need to search", "correct_text": "In times of troubleshooting there may be a need to search", "notes": "\"troubleshooting\" should be written as one word", "submit_date": "2012-05-09", "submitter_name": "Rodrigo Curado", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3220", "doc-id": "RFC3363", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "4.  DNAME in IPv6 Reverse Tree\r\n\r\n   The issues for DNAME in the reverse mapping tree appears to be\r\n   closely tied to the need to use fragmented A6 in the main tree: if\r\n   one is necessary, so is the other, and if one isn't necessary, the\r\n   other isn't either.  Therefore, in moving RFC 2874 to experimental,\r\n   the intent of this document is that use of DNAME RRs in the reverse\r\n   tree be deprecated.\r\n", "correct_text": "4. DNAME in IPv6 Reverse Tree\r\n\r\n[Deleted due to faulty premise.]", "notes": "The opening premise of this section is demonstrably wrong, and so the conclusion based on that premise is wrong.  The use of DNAME in the reverse tree is and always has been independent of A6.\n --VERIFIER NOTES-- \n   The scope of the requested change is outside what can be specified through an errata.", "submit_date": "2012-05-09", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3221", "doc-id": "RFC6535", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "This document recommends the socket API-layer implementation\r\noption over network layer translation, i.e., it recommends the\r\napproach introduced in RFC 2767 over the approach of RFC 3338.", "correct_text": "This document recommends the socket API-layer implementation \r\noption over network layer translation, i.e., it recommends the \r\napproach introduced in RFC 3338 over the approach of RFC 2767.", "notes": "RFC numbers are swapped in this sentence. RFC 3338 describes the socket-API layer implementation, RFC 2767 describes the alternative (network-based) implementation.", "submit_date": "2012-05-10", "submitter_name": "Etienne Dubl\u00e9", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4669", "doc-id": "RFC7543", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4 and 5", "orig_text": "   V-spoke1 establishes a BGP session with the RR, negotiating the\r\n   CP-ORF capability as well as the Multiprotocol Extensions capability\r\n\r\n\r\n", "correct_text": "   V-spoke1 establishes a BGP session with the RR, advertising the\r\n   ORF capability (including the CP ORF Type in its ORF Type list)\r\n   as well as the Multiprotocol Extensions capability", "notes": "This text occurs twice, once in Section 4 and again in Section 5", "submit_date": "2016-04-15", "submitter_name": "Ron Bonica", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3232", "doc-id": "RFC6313", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5.3", "orig_text": "   In the exceptional case of zero instances in the\r\n   subTemplateMultiList, no data is encoded, only the Semantic field and\r\n   Template ID field(s), and the Data Record Length field is set to\r\n   zero.", "correct_text": "   In the exceptional case of zero instances in the\r\n   subTemplateMultiList, no data is encoded, only the Semantic field and\r\n   Template ID field(s), and the Data Records Length field is set to\r\n   four.", "notes": "s/zero/four/ && s/Record/Records/\r\n\r\n- because the Data Record Length field includes two bytes for the Template ID and two bytes for the Data Records Length field itself, as specified on page 23:\r\n\r\n   Data Records Length\r\n\r\n      This is the total length of the Data Records encoding for the\r\n      Template ID previously specified, including the two bytes for the\r\n      Template ID and the two bytes for the Data Records Length field\r\n      itself.\r\n\r\nTherefore, a Data Records Length < 4 bytes is invalid. This should be noted in the \"Data Records Length\" definition.\r\n\r\nAlso note the pluralisation of \"Records\" in the definition.\r\n\r\nKudos to Manish Patil, manish.patil@guavus.com", "submit_date": "2012-05-25", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3233", "doc-id": "RFC4771", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "When the receiver receives an SRTP packet, it processes the packet\r\naccording to RFC 3711 except that during authentication processing\r\nROC_local is replaced by ROC_sender (retrieved from the packet).\r\n", "correct_text": "When the receiver receives an SRTP packet, it processes the packet\r\naccording to RFC 3711 except that during replay check and authentication processing\r\nROC_local is replaced by ROC_sender (retrieved from the packet).\r\n", "notes": "While this is typo, it has the unfortunate side effect of creating a possibility for a replay attack where the attacker injects a previous message, possibly causing the receiver to loose synch on the ROC value. This is prevented if the receiver uses ROC_sender in place of ROC_local during both authentication _and_ replay check.\r\n\r\nWe thank David McGrew for spotting this error.", "submit_date": "2012-05-28", "submitter_name": "Mats N\u00e4slund", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3222", "doc-id": "RFC4591", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  [line folding issue]\r\n\r\nThe final part of Section 3.2, on page 5 of RFC 4591, syas:\r\n\r\n   General Result Codes regarding L2TP session establishment are defined\r\n   in [RFC3931].  Additional Frame Relay result codes are defined as\r\n   follows:\r\n\r\n      17: FR PVC was deleted permanently (no longer provisioned) 18: FR\r\n      PVC has been INACTIVE for an extended period of time 19:\r\n      Mismatched FR Header Length\r\n\r\nFor clarity, the RFC sould say instead:\r\n\r\n   General Result Codes regarding L2TP session establishment are defined\r\n   in [RFC3931].  Additional Frame Relay result codes are defined as\r\n   follows:\r\n\r\n|     17: FR PVC was deleted permanently (no longer provisioned)\r\n|     18: FR PVC has been INACTIVE for an extended period of time\r\n|     19: Mismatched FR Header Length\r\n\r\n\r\n(2)  [another line folding issue]\r\n\r\nWithin Section 3.5, on page 7, the RFC text just below the diagram\r\nsays:\r\n\r\n   The Frame Relay Header Length Type is a 2-octet unsigned integer with\r\n   the following values defined in this document:\r\n\r\n      2: Two-octet Frame Relay Header 4: Four-octet Frame Relay Header\r\n\r\nFor clarity, the RFC sould say instead:\r\n\r\n   The Frame Relay Header Length Type is a 2-octet unsigned integer with\r\n   the following values defined in this document:\r\n\r\n|     2: Two-octet Frame Relay Header\r\n|     4: Four-octet Frame Relay Header\r\n\r\n\r\n(3)  [missing colons, and formatting]\r\n\r\nIn Section 4.1, the explanations just below the FR Header diagrams\r\non page 8 of the RFC read:\r\n\r\n   C/R (bit 6) FR frame C/R (command/response) bit [Q922].\r\n\r\n   F - FECN (bit 12):  FR FECN (Forward Explicit Congestion\r\n   Notification) bit [Q922].\r\n\r\n   B - BECN (bit 13):\r\n|\r\n   FR BECN (Backward Explicit Congestion Notification) bit [Q922].\r\n\r\n   D - DE (bit 14) FR DE bit indicates the discard eligibility [Q922].\r\n\r\nFor clarity, it should better say:\r\n\r\n            vvvvv\r\n|  C (bit 6):     FR frame C/R (command/response) bit [Q922].\r\n\r\n|  F (bit 12):    FR FECN (Forward Explicit Congestion Notification)\r\n|                 bit [Q922].\r\n\r\n|  B (bit 13):    FR BECN (Backward Explicit Congestion Notification)\r\n|                 bit [Q922].\r\n\r\n|  D (bit 14):    FR DE bit indicates the discard eligibility [Q922].\r\n             ^^^^\r\n\r\n[ Additional rationale for the proposed clarifications:\r\n  The \"full bit names\" have been removed from the left hand sides\r\n  (corresponding to the diagrams), and replaced \"C/R\" by \"C\", because\r\n  these \"full bit names\" do not appear in the diagrams, but already do\r\n  appear in the explanatory text on the right hand side.  Thus, to the\r\n  left of the colons, there now are only -- and precisely -- the terms\r\n  from the diagrams. ]\r\n\r\n\r\n(4)  [typo + word omission]\r\n\r\nThe first paragraph of Section 4.3, on page 9, says:\r\n                                                           vv\r\n   With L2TPv3 as the tunneling protocol, the packet resulted from the\r\n   encapsulation is N bytes longer than Frame Relay frame without the\r\n   opening and closing HDLC flags or FCS.  The value of N depends on the\r\n   following fields:\r\n\r\nIt should say:\r\n                                                           vvv\r\n|  With L2TPv3 as the tunneling protocol, the packet resulting from the\r\n|  encapsulation is N bytes longer than the Frame Relay frame without\r\n   the opening and closing HDLC flags or FCS.  The value of N depends on\r\n   the following fields:\r\n", "correct_text": "[see above]", "notes": "from pending\n --VERIFIER NOTES-- \nExtraneous duplicate of errata 735   ", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3223", "doc-id": "RFC4591", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   General Result Codes regarding L2TP session establishment are defined\r\n   in [RFC3931].  Additional Frame Relay result codes are defined as\r\n   follows:\r\n\r\n      17: FR PVC was deleted permanently (no longer provisioned) 18: FR\r\n      PVC has been INACTIVE for an extended period of time 19:\r\n      Mismatched FR Header Length\r\n\r\n", "correct_text": "   General Result Codes regarding L2TP session establishment are defined\r\n   in [RFC3931].  Additional Frame Relay result codes are defined as\r\n   follows:\r\n\r\n     17: FR PVC was deleted permanently (no longer provisioned)\r\n     18: FR PVC has been INACTIVE for an extended period of time\r\n     19: Mismatched FR Header Length\r\n", "notes": "", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3224", "doc-id": "RFC4591", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   The Frame Relay Header Length Type is a 2-octet unsigned integer with\r\n   the following values defined in this document:\r\n\r\n      2: Two-octet Frame Relay Header 4: Four-octet Frame Relay Header\r\n", "correct_text": "   The Frame Relay Header Length Type is a 2-octet unsigned integer with\r\n   the following values defined in this document:\r\n\r\n     2: Two-octet Frame Relay Header\r\n     4: Four-octet Frame Relay Header\r\n\r\n", "notes": "", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3227", "doc-id": "RFC6455", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.4.1", "orig_text": "   1011\r\n\r\n      1011 indicates that a server is terminating the connection because\r\n      it encountered an unexpected condition that prevented it from\r\n      fulfilling the request.\r\n", "correct_text": "   1011\r\n\r\n      1011 indicates that a remote endpoint is terminating the connection\r\n      because it encountered an unexpected condition that prevented it from\r\n      fulfilling the request.\r\n", "notes": "As per the discussion in the WG (See <http://www.ietf.org/mail-archive/web/hybi/current/msg09628.html>) the meaning of this error close code should be extended to cover clients as well. As the Designated Expert for the WebSocket close code registry I've approved the corresponding change to the IANA registry.\r\n\r\nThis should be \"hold for update\" for rfc6455bis.", "submit_date": "2012-05-16", "submitter_name": "Alexey Melnikov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3228", "doc-id": "RFC5091", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.2.", "orig_text": "(x_V /z_V^2, s * x_V / z_V^3) in (F_p)^2,", "correct_text": "(x_V /z_V^2, s * y_V / z_V^3) in (F_p)^2,", "notes": "", "submit_date": "2012-05-18", "submitter_name": "Richard Heylen", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3229", "doc-id": "RFC5091", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "a * b = ((a_1 * b_1 - a_0 * b_0)(mod p),", "correct_text": "a * b = ((a_0 * b_0 - a_1 * b_1)(mod p),", "notes": "", "submit_date": "2012-05-18", "submitter_name": "Richard Heylen", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3225", "doc-id": "RFC4591", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   C/R (bit 6) FR frame C/R (command/response) bit [Q922].\r\n\r\n   F - FECN (bit 12):  FR FECN (Forward Explicit Congestion\r\n   Notification) bit [Q922].\r\n\r\n   B - BECN (bit 13):\r\n\r\n   FR BECN (Backward Explicit Congestion Notification) bit [Q922].\r\n\r\n   D - DE (bit 14) FR DE bit indicates the discard eligibility [Q922].", "correct_text": "  C (bit 6):     FR frame C/R (command/response) bit [Q922].\r\n\r\n  F (bit 12):    FR FECN (Forward Explicit Congestion Notification)\r\n                 bit [Q922].\r\n\r\n  B (bit 13):    FR BECN (Backward Explicit Congestion Notification)\r\n                 bit [Q922].\r\n\r\n  D (bit 14):    FR DE bit indicates the discard eligibility [Q922].", "notes": "  The \"full bit names\" have been removed from the left hand sides\r\n  (corresponding to the diagrams), and replaced \"C/R\" by \"C\", because\r\n  these \"full bit names\" do not appear in the diagrams, but already do\r\n  appear in the explanatory text on the right hand side.  Thus, to the\r\n  left of the colons, there now are only -- and precisely -- the terms\r\n  from the diagrams.", "submit_date": "2006-08-11", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3230", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "RA              Recursion Available - this be is set or cleared in a", "correct_text": "RA              Recursion Available - this bit is set or cleared in a", "notes": "", "submit_date": "2012-05-22", "submitter_name": "Sam Bretheim", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3231", "doc-id": "RFC6544", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4 - 11", "orig_text": "", "correct_text": "", "notes": "Apologies in advance - I have some feedback on the specification which I feel may be useful, but it is not by nature errata - I wasn't sure how else to report this.\r\n\r\nIn our company we have just implemented support for ICE-TCP, and in our opinion there are some areas of the specification which could use some clarification. Note that our implementation is designed to be used in an XMPP/Jingle context rather than with SIP, which potentially makes a difference in some of the areas mentioned below.\r\n\r\nThe specification makes no mention of foundations for TCP candidates. 4.1.1.3 in [RFC5245] specifies that TCP foundations must be different from UDP foundations, but it is unclear whether or not passive, active, and simultaneous open candidates should have distinct foundations. The same is true for NAT-assisted and tunneled candidate types - should these have distinct foundations from server-reflexive/relayed candidates ? We have guessed that in all cases they should be distinct.\r\n\r\n4.1.1.4 in [RFC5245] states that server reflexive candidates should be kept alive until ICE processing completes. 11.2 in RFC 6544 does not contradict this, but does not clarify it either. This implies that TCP connections to a STUN server should be kept open for this duration, with STUN binding requests being sent at intervals. It is not clear to us that doing so would have any benefit, but we are not NAT experts. Either way it would be good if the ICE-TCP specification made it clear whether or not this was necessary or desirable.\r\n\r\nWhen the offerer has relayed candidates obtained from a TURN server, it may not be possible to ensure that permissions are created for those passive candidates prior to the peer attempting to connect. This may result in failure of the peer's active check, and hence possibly in failure of ICE as a whole. The same basic problem can happen in ICE-UDP, but the UDP check would almost certainly be retried at a time when the permissions are in place, and so should succeed eventually. The situation could be exacerbated by the Jingle recommendation that candidates are sent to the peer as soon as they are discovered - in this case even the answerer's relayed candidates may not have the permissions in place when they are needed. We're not sure if there is a foolproof solution to these problems, but we do feel that the potential for failures should at least be mentioned.\r\n\r\n7.1 states that for tcp-active candidates, unallocated ports should be used. This may result in many port allocations, so we wonder whether it would be preferable to reuse the same port for all connections made from a tcp-active candidate (where supported by the host OS, of course).\r\n\r\nSections 7.1 and 7.2 both note that a peer-reflexive candidate will 'typically' be produced. In 7.1 this is in reference to a STUN response received on an active TCP candidate, whereas in 7.2 it is in reference to a STUN request received on a passive TCP candidate. It is unclear to us whether the wording is intended to mean that this is different to the equivalent case in UDP, where a peer-reflexive candidate might, but would not 'typically', be produced. The only difference between TCP and UDP that we can see in this area is that the port actually used for active TCP candidates differs from that advertised, since all active TCP candidates are offered with 9 as the port number. We assume that this is the core reason behind the wording used, but think that it would be better if the specification explicitly stated this. We also believe that it is possible to correctly identify the correct active TCP candidate despite the lack of explicit port number information, simply by treating 9 as a wildcard that matches any port. Doing so has the benefit that all the information held against the candidate (especially priority and foundation) can be used as intended, whereas if a new peer-reflexive candidate is created this information will always be ignored for active TCP candidates. Currently our implementation does this wildcard matching, so will only produce peer-reflexive candidates in the same situations it would do if using UDP.\r\n\r\n11.1 states that connections should be reopened if they have dropped or been closed for some reason, and have media that needs to be sent.  This might make sense in an RTP context, but seems very dubious to us in the more general TCP case as it violates the normal reliability guarantees that TCP supplies. We think this requires further thought and at the very least should be configurable.\n --VERIFIER NOTES-- \nNigel - Thank you for your detailed feedback. As you anticipated, entering an errata is not the best path for you to begin this conversation. Instead, please send your comments to the MMUSIC working group's mail list. (See https://www.ietf.org/mailman/listinfo/mmusic).", "submit_date": "2012-05-23", "submitter_name": "Nigel Pattinson", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7767", "doc-id": "RFC7515", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "These Header Parameters MUST\r\n   be integrity protected if the information that they convey is to be\r\n   utilized in a trust decision; however, if the only information used\r\n   in the trust decision is a key, these parameters need not be\r\n   integrity protected, since changing them in a way that causes a\r\n   different key to be used will cause the validation to fail.", "correct_text": "These Header Parameters MUST\r\n   be integrity protected if the information that they convey is to be\r\n   utilized in a trust decision.", "notes": "See the discussion for https://www.rfc-editor.org/errata/eid7719 at https://mailarchive.ietf.org/arch/msg/jose/I3_IuEfFSyiHWap7Pyn1BFAb4QM/. The deleted text is incorrect for both signature schemes and encryption schemes.\r\n\r\nYou could consider adding text like \"Note that some algorithms allow multiple keys to validate or decrypt the same signature or encrypted data.\" to prevent readers from making the same bad assumption as the original RFC authors, but it doesn't seem necessary if doing so is contentious. Similarly, it's probably ok to simply delete the whole \"Original Text\" if that seems better to the reviewers.", "submit_date": "2024-01-17", "submitter_name": "Jeffrey Yasskin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "3234", "doc-id": "RFC4004", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "                                            +--------------------------+\r\n                                            |    AVP Flag rules        |\r\n                                            |----+-----+----+-----|----+\r\n                   AVP  Section             |    |     |SHLD| MUST|MAY |\r\n   Attribute Name  Code Defined  Value Type |MUST| MAY | NOT|  NOT|Encr|\r\n   -----------------------------------------|----+-----+----+-----|----|\r\n   MIP-Home-Agent-  348  7.11    DiamIdent  | M  |  P  |    |  V  | N  |\r\n     Host\r\n\r\n", "correct_text": "                                            +--------------------------+\r\n                                            |    AVP Flag rules        |\r\n                                            |----+-----+----+-----|----+\r\n                   AVP  Section             |    |     |SHLD| MUST|MAY |\r\n   Attribute Name  Code Defined  Value Type |MUST| MAY | NOT|  NOT|Encr|\r\n   -----------------------------------------|----+-----+----+-----|----|\r\n   MIP-Home-Agent-  348  7.11    Grouped    | M  |  P  |    |  V  | N  |\r\n     Host\r\n\r\n", "notes": "The Value Type for MIP-Home-Agent-Host should be Grouped, but the table in section 7 says DiamIdent.\r\n\r\nSection 7.11 MIP-Home-Agent-Host AVP says it is grouped, the text in 4004 indicates it is grouped.\r\n\r\nRFC 5447 further clarifies that MIP-Home-Agent-Host is a grouped AVP.", "submit_date": "2012-05-28", "submitter_name": "Kurt Wimmer", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3235", "doc-id": "RFC6275", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "The mobile node may also accept packets from several care-of\r\naddresses, such as when it is moving but still reachable at the\r\nprevious link.\r\n", "correct_text": "The mobile node may also accept packets for several care-of\r\naddresses, such as when it is moving but still reachable at the\r\nprevious link.\r\n", "notes": "Looks like a typo (\"from\" typed, instead of \"for\"), but affects the technical meaning.  I am happy for this erratum to be changed to Type: Editorial.", "submit_date": "2012-05-30", "submitter_name": "Alastair Galloway", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3236", "doc-id": "RFC6147", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.5", "orig_text": "An application that wants to perform validation \r\non its own should use the CD bit.", "correct_text": "[Section 5.5 needs to be completely re analysed,]", "notes": "Section 5.5 is written around the assumption that a validating stub resolver will be setting CD=1 as well as DO=1.  There is no such requirement RFC 4035 and in fact setting both CD=1 and DO=1 leaves the stub resolver vulnerable to answers from authoritative servers for the zone that are serving a stale copy of the zone and spoofed answers being sent to the DNS64 server.\r\n\r\nNon CD=1 queries result in the DNS64 server in its recursive roll, filtering out, cryptographically bad answers.\r\n\r\nDO=1 alone should disable synthesis.\r\n --VERIFIER NOTES-- \r\nhttp://www.ietf.org/iesg/statement/errata-processing.html\r\nsays:\r\nChanges that are clearly modifications to the intended consensus, or\r\ninvolve large textual changes, should be Rejected.\r\n", "submit_date": "2012-05-30", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3237", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1.3.5", "orig_text": "   In all of the above cases, the request is retried by creating a new\r\n   request with the appropriate modifications.  This new request\r\n   constitutes a new transaction and SHOULD have the same value of the\r\n   Call-ID, To, and From of the previous request, but the CSeq should\r\n   contain a new sequence number that is one higher than the previous.", "correct_text": "   In all of the above cases, the request is retried by creating a new \r\n   request with the appropriate modifications.  This new request \r\n   constitutes a new transaction and SHOULD have the same value of the \r\n   Call-ID, To, and From of the previous request, but the CSeq SHOULD \r\n   contain a new sequence number that is one higher than the previous.", "notes": "We have had one implementor claim that they are not required to increment CSeq when retrying the request because the RFC says 'should' and not 'SHOULD'. Based on current IETF discussions, though, these should probably be changed to MUST anyway, but that's a much more substantive change throughout the whole RFC.", "submit_date": "2012-05-31", "submitter_name": "Kevin P. Fleming", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3238", "doc-id": "RFC6487", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3", "orig_text": " ExtendedKeyUsage\r\n         The CA MAY honor ExtendedKeyUsage extensions of keyCertSign and\r\n         cRLSign if present, as long as this is consistent with the\r\n         BasicConstraints SubjectType sub-field, when specified.", "correct_text": " ExtendedKeyUsage\r\n         The CA MAY honor ExtendedKeyUsage extensions in requests for EE\r\n         certificates that are issued to routers or other devices, consistent with values\r\n         specified in Standards Track RFCs that adopt this profile and that identify\r\n         application-specific requirements that motivate the use of such EKUs.", "notes": "The current text appears to be the result of a \"cut and paste\" error. It is essentially identical to the text \r\nfor the Key Usage extension, and names two fields that appear in that extension, not in an EKU extension. The text I propose above parallels what appears in Section 4.8.5, which describes how an\r\n EKU MAY be used in RPKI certificates.", "submit_date": "2012-05-31", "submitter_name": "Stephen Kent", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3239", "doc-id": "RFC4941", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "On page 9, the 2nd numbered bullet in Section 3 says:\r\n\r\n   2.  [...]\r\n       Deprecated address can continue to be used for already\r\n       established connections, but are not used to initiate new\r\n       connections.  [...]", "correct_text": "   2.  [...]\r\n       Deprecated addresses can continue to be used for already\r\n       established connections, but are not used to initiate new\r\n       connections.  [...]", "notes": "", "submit_date": "2007-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3249", "doc-id": "RFC6454", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1. Syntax", "orig_text": "origin              = \"Origin:\" OWS origin-list-or-null OWS\r\norigin-list-or-null = %x6E %x75 %x6C %x6C / origin-list\r\norigin-list         = serialized-origin *( SP serialized-origin )", "correct_text": "origin              = \"Origin:\" OWS origin-or-null OWS\r\norigin-or-null      = %x6E %x75 %x6C %x6C / serialized-origin", "notes": "Rationale: List of origins was added for CORS http://www.w3.org/TR/cors/ but CORS does not require it and we should leave this as a choice.\r\n\r\nThis syntax restriction also has limited impact on 7.2. and 7.3.\r\n\r\nSee also: http://lists.w3.org/Archives/Public/www-archive/2012Jun/thread.html#msg1\n --VERIFIER NOTES-- \nThis should be considered if/when the document is worked on again, but it is not an \"error\" in the original document -- rather, it's something that's come up since -- and so it's not appropriate for errata.", "submit_date": "2012-06-08", "submitter_name": "Anne van Kesteren", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3240", "doc-id": "RFC4941", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   4.  When creating a temporary address, the lifetime values MUST be\r\n       derived from the corresponding prefix as follows:\r\n\r\n       *  Its Valid Lifetime is the lower of the Valid Lifetime of the\r\n          public address or TEMP_VALID_LIFETIME.\r\n\r\n       *  Its Preferred Lifetime is the lower of the Preferred Lifetime\r\n          of the public address or TEMP_PREFERRED_LIFETIME -\r\n          DESYNC_FACTOR.\r\n", "correct_text": "   4.  When creating a temporary address, the lifetime values MUST be\r\n       derived from the corresponding prefix as follows:\r\n\r\n       *  Its Valid Lifetime is the lower of the Valid Lifetime of the\r\n          prefix and TEMP_VALID_LIFETIME.\r\n\r\n       *  Its Preferred Lifetime is the lower of the Preferred Lifetime\r\n          of the prefix and TEMP_PREFERRED_LIFETIME - DESYNC_FACTOR.", "notes": "The language of RFC 4941 has been 'upgraded' from RFC 3041 by\r\nreplacing the confusing language related to \"global addresses\"\r\nby correctly speaking about \"prefixes\" when referring to\r\ninformation obtained in RA Prefix Options.\r\nUnfortunately, in one place this 'upgrade' has been missed.\r\n", "submit_date": "2007-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3247", "doc-id": "RFC5056", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2", "orig_text": "there are no MITMs between the two end-points at that higher \r\nnetwork layer.  ", "correct_text": "there are no MITMs between the two end-points at that lower \r\nnetwork layer.  ", "notes": "Typo in definition\r\n\r\n --VERIFIER NOTES-- \r\nFrom the RFC:\r\n\r\nGenerally, some data that \"names\" a channel or one or both of its end-points such that if this data can be shown, at a higher network layer, to be the same at both ends of a channel, then there are no MITMs between the two end-points at that higher network layer.  This term is used as a noun.", "submit_date": "2012-06-06", "submitter_name": "Sujing Zhou", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3248", "doc-id": "RFC5225", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.8.2.4", "orig_text": "page 67:\r\n\r\n  COMPRESSED udp_lite_endpoint_dynamic {\r\n    ENFORCE(profile_value == PROFILE_UDPLITE_0108);\r\n    reserved =:= compressed_value(4, 0)                      [  4 ];\r\n    coverage_behavior =:= irregular(2)                       [  2 ];\r\n    reorder_ratio     =:= irregular(2)                       [  2 ];\r\n    checksum_coverage =:=\r\n      checksum_coverage_dynchain(coverage_behavior.UVALUE)   [ 16 ];\r\n    checksum          =:= irregular(16)                      [ 16 ];\r\n    msn               =:= irregular(16)                      [ 16 ];\r\n  }\r\n\r\npage 68:\r\n\r\n  COMPRESSED udp_lite_regular_dynamic {\r\n    ENFORCE(profile_value == PROFILE_RTP_0107);\r\n    coverage_behavior =:= irregular(2)                       [  2 ];\r\n    reserved =:= compressed_value(6, 0)                      [  6 ];\r\n    checksum_coverage =:=\r\n        checksum_coverage_dynchain(coverage_behavior.UVALUE) [ 16 ];\r\n    checksum =:= irregular(16)                               [ 16 ];\r\n  }\r\n", "correct_text": "page 67:\r\n\r\n  COMPRESSED udp_lite_endpoint_dynamic {\r\n    ENFORCE(profile_value == PROFILE_UDPLITE_0108);\r\n    reserved =:= compressed_value(4, 0)                      [  4 ];\r\n    coverage_behavior =:= irregular(2)                       [  2 ];\r\n    reorder_ratio     =:= irregular(2)                       [  2 ];\r\n    checksum_coverage =:=\r\n      checksum_coverage_dynchain(coverage_behavior.UVALUE)   [ 0, 16 ];  <===\r\n    checksum          =:= irregular(16)                      [ 16 ];\r\n    msn               =:= irregular(16)                      [ 16 ];\r\n  }\r\n\r\npage 68:\r\n\r\n  COMPRESSED udp_lite_regular_dynamic {\r\n    ENFORCE(profile_value == PROFILE_RTP_0107);\r\n    coverage_behavior =:= irregular(2)                       [  2 ];\r\n    reserved =:= compressed_value(6, 0)                      [  6 ];\r\n    checksum_coverage =:=\r\n        checksum_coverage_dynchain(coverage_behavior.UVALUE) [ 0, 16 ];  <====\r\n    checksum =:= irregular(16)                               [ 16 ];\r\n  }\r\n", "notes": "checksum_coverage_dynchain(behavior) compression method (page 66) may compress the checksum_coverage field to 0 bits if behavior is set to UDP_LITE_COVERAGE_INFERRED.", "submit_date": "2012-06-07", "submitter_name": "FWX", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3241", "doc-id": "RFC4941", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "   When a temporary address becomes deprecated, a new one MUST be\r\n   generated.  This is done by repeating the actions described in\r\n   Section 3.3, starting at step 3).  [...]", "correct_text": "   When a temporary address becomes deprecated, a new one MUST be\r\n   generated.  This is done by repeating the actions described in\r\n   Section 3.3, starting at step 4).  [...]", "notes": "The bullets in Section 3.3 have been renumbered from RFC 3041,\r\nnecessitated by the insertion of a new bullet as #2.\r\nIn an internal reference in Section 3.4, this change has not been\r\nreflected accordingly.", "submit_date": "2007-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3242", "doc-id": "RFC4941", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   The frequency at which temporary addresses changes depends on [...]", "correct_text": "   The frequency at which temporary addresses change depends on [...]\r\n", "notes": "", "submit_date": "2007-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3246", "doc-id": "RFC2812", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.8", "orig_text": "   :Trillian SQUIT cm22.eng.umd.edu :Server out of control ; Command\r\n                                   from Trillian from to disconnect\r\n                                   \"cm22.eng.umd.edu\" from the net with\r\n                                   comment \"Server out of control\".", "correct_text": "   :Trillian SQUIT cm22.eng.umd.edu :Server out of control\r\n                                     ; Command from Trillian to disconnect\r\n                                     \"cm22.eng.umd.edu\" from the net with\r\n                                     comment \"Server out of control\".", "notes": "A \"from\" too much.  (I also inserted a new line break to make it look nicer and lined the comments up.)", "submit_date": "2012-06-06", "submitter_name": "Jakob Kramer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3243", "doc-id": "RFC4941", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "                                       [...].  Note that the pre-prefix\r\n   setting can be applied at any granularity, and not necessarily on a\r\n   per-subnet basis.", "correct_text": "                                       [...].  Note that the per-prefix\r\n   setting can be applied at any granularity, and not necessarily on a\r\n   per-subnet basis.", "notes": "", "submit_date": "2007-10-12", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4670", "doc-id": "RFC7644", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4.2.2", "orig_text": "Filters MUST be evaluated using the following order of operations, in\r\n   order of precedence:\r\n\r\n   1.  Grouping operators\r\n\r\n   2.  Logical operators - where \"not\" takes precedence over \"and\",\r\n       which takes precedence over \"or\"\r\n\r\n   3.  Attribute operators", "correct_text": "Filters MUST be evaluated using the following order of operations, in\r\n   order of precedence:\r\n\r\n   1.  Grouping operators\r\n\r\n   2.  Attribute operators\r\n\r\n   3.  Logical operators - where \"not\" takes precedence over \"and\",\r\n       which takes precedence over \"or\"", "notes": "It seems that the precedence of logical and attribute precedence is reversed? The filter filter=title sw \"M\" and userType eq \"Employee\" is meant to be interpreted as filter=(title sw \"M\") and (userType eq \"Employee\"). \r\nThis is also the \"expected\" behaviour consistent with most other languages - with the notable exception of unary \"or\" which in SCIM is disambiguated as it can only apply to a parenthesized filter expression.", "submit_date": "2016-04-15", "submitter_name": "Vassilis Michalitsis", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 22:05:00"}, {"errata_id": "3250", "doc-id": "RFC3588", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.3", "orig_text": "As with proxy agents, redirect agents do not keep state with \r\nrespect to sessions or NAS resources.", "correct_text": "As with relay agents, redirect agents do not keep state with \r\nrespect to sessions or NAS resources.", "notes": "", "submit_date": "2012-06-10", "submitter_name": "Jack Teng", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3263", "doc-id": "RFC3550", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.4.1", "orig_text": "cumulative number of packets lost: 24 bits\r\n   The total number of RTP data packets from source SSRC_n that have\r\n   been lost since the beginning of reception.  This number is\r\n   defined to be the number of packets expected less the number of\r\n   packets actually received, where the number of packets received\r\n   includes any which are late or duplicates.  Thus, packets that\r\n   arrive late are not counted as lost, and the loss may be negative\r\n   if there are duplicates.  The number of packets expected is\r\n   defined to be the extended last sequence number received, as\r\n   defined next, less the initial sequence number received.  This may\r\n   be calculated as shown in Appendix A.3.", "correct_text": "cumulative number of packets lost: 24 bits \r\n   The total number of RTP data packets from source SSRC_n that have \r\n   been lost since the beginning of reception. This number is \r\n   defined to be the number of packets expected less the number of \r\n   packets actually received, where the number of packets received \r\n   includes any which are late or duplicates. Thus, packets that \r\n   arrive late are not counted as lost, and the loss may be negative \r\n   if there are duplicates. The number of packets expected is \r\n   defined to be the extended highest sequence number received, as \r\n   defined next, less the initial sequence number received. This may \r\n   be calculated as shown in Appendix A.3.", "notes": "Changed \r\n\r\nThe number of packets expected is defined to be the extended last sequence number received...\r\n\r\nInto\r\n\r\nThe number of packets expected is defined to be the extended highest sequence number received...", "submit_date": "2012-06-18", "submitter_name": "Pieter Demuytere", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3264", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In Appendix F.3", "orig_text": "Implementations that combine update messages (as described above in\r\nSection 6.1) may prefer to see all path attributes presented in a\r\nknown order.", "correct_text": "Implementations that combine update messages (as described above in\r\nAppendix F.1) may prefer to see all path attributes presented in a\r\nknown order.", "notes": "Section 6.1 does not say anything about combining update messages.\r\n\r\nAppendix F.1 is the correct reference.", "submit_date": "2012-06-19", "submitter_name": "Anmol Khirbat", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-05-28 12:11:12"}, {"errata_id": "3265", "doc-id": "RFC6068", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.1", "orig_text": "  [RFC5322]  Resnik, P.,", "correct_text": "  [RFC5322]  Resnick, P.,", "notes": "Pete Resnick's name spelled wrong.  Oops.", "submit_date": "2012-06-23", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3266", "doc-id": "RFC3588", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4.", "orig_text": "The Disconnection-Reason AVP contains the reason the Diameter node \r\nissued the Disconnect-Peer-Request message.", "correct_text": "The Disconnect-Cause AVP contains the reason the Diameter node \r\nissued the Disconnect-Peer-Request message.", "notes": "(There is no such AVP named Disconnection-Reason)", "submit_date": "2012-06-25", "submitter_name": "Jack Teng", "verifier_id": "", "verifier_name": "RonBonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3267", "doc-id": "RFC6546", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "In paragraph 4 of section 3, fourth sentence:\r\n\r\n   As RID messages MUST be\r\n   sent using the POST method, the GET and HEAD methods have no\r\n   particular meaning on a RID system; a RID system SHOULD answer\r\n   'GET /' or 'HEAD /' with 204 No Content.", "correct_text": "Consistent with RFC 2616 section 10.4.6, a RID system MUST answer \r\nany HTTP request to Request-URI of '/' which uses an HTTP method \r\nother than 'POST' by producing an HTTP response with a status code \r\nof 405 Method Not Allowed.  The RID system HTTP response MUST also \r\ninclude an Allow header indicating that only the 'POST' method is \r\nsupported.\r\n", "notes": "There has been a brief discussion of this errata on the MILE list, with the first message in the thread having been posted on June 5, 2012.  \r\n\r\nThe corrected text that I have suggested above has been written as narrowly as possible, and remains consistent with the original functionality described in 6546.  \r\n\r\nLacking support for 'GET' means that there is no way to verify if a RID endpoint is active, other than by doing a real request, i.e. a Report, or Query, etc.   Thus, one might also consider supporting HEAD, e.g. for RID testing purposes, though that option has not been discussed yet.  Note, however, that supporting HEAD potentially raises further issues since according to RFC 2616 the response headers to a HEAD request SHOULD be consistent with a GET, which is specifically not supported.", "submit_date": "2012-06-26", "submitter_name": "John Field", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3268", "doc-id": "RFC4252", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   A request that requires further messages to be exchanged will be\r\n   aborted by a subsequent request.  A client MUST NOT send a subsequent\r\n   request if it has not received a response from the server for a\r\n   previous request.  A SSH_MSG_USERAUTH_FAILURE message MUST NOT be\r\n   sent for an aborted method.\r\n", "correct_text": "   A request that requires further messages to be exchanged will be\r\n   aborted by a subsequent request.  In this case a client MUST NOT \r\n   send a subsequent request if it has not received a response from \r\n   the server for a previous request.  A SSH_MSG_USERAUTH_FAILURE \r\n   message MUST NOT be sent for an aborted method.\r\n", "notes": "The ambiguous wording, which can be confusing. See previous paragraph", "submit_date": "2012-06-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3294", "doc-id": "RFC5176", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6", "orig_text": "   Disconnect Messages\r\n\r\n   Request   ACK      NAK   #   Attribute\r\n   0-1       0        0     1   User-Name (Note 1)\r\n   0-1       0        0     4   NAS-IP-Address (Note 1)\r\n   0-1       0        0     5   NAS-Port (Note 1)\r\n   0         0        0     6   Service-Type\r\n   0         0        0     8   Framed-IP-Address (Note 1)", "correct_text": "   Disconnect Messages\r\n\r\n   Request   ACK      NAK   #   Attribute\r\n   0-1       0        0     1   User-Name (Note 1)\r\n   0-1       0        0     4   NAS-IP-Address (Note 1)\r\n   0-1       0        0     5   NAS-Port (Note 1)\r\n   0         0        0     6   Service-Type\r\n   0-1       0        0     8   Framed-IP-Address (Note 1)", "notes": "Section 3.6 (\"Table of Attributes\") changed the number of Frame-IP-Address attributes allowed in Disconnect-Message compared to previous RFC3576 (changed from \"0-1\" to \"0\").  The table should revert back to its original RFC3576 value in order to maintain backward compatibility with RFC3576.", "submit_date": "2012-07-26", "submitter_name": "Mauricio Sanchez", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3269", "doc-id": "RFC2231", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "    (2)   the mechanism MUST NOT depend on parameter ordering\r\n          since MIME states that parameters are not order\r\n          sensitive.  Note that while MIME does prohibit\r\n          modification of MIME headers during transport, it is\r\n          still possible that parameters will be reordered when\r\n          user agent level processing is done.\r\n", "correct_text": "    (2)   the mechanism MUST NOT depend on parameter ordering\r\n          since MIME states that parameters are not order\r\n          sensitive.  Note that while MIME does prohibit\r\n          modification of MIME headers during transport, it is\r\n          still possible that parameters will be reordered when\r\n          user agent level processing is done.\r\n     (3) the mechanism MUST NOT alter parameter values that are\r\n          critical to existing MIME processors. This specifically includes\r\n          the \"boundary\" parameter for multipart types and the \"charset\"\r\n          parameter for text types.\r\n        ", "notes": "Earlier text in the section states \"Any such mechanism MUST be compatible with existing MIME processors.\" The addition of a 3rd item clarifies an additional behavior that is necessary to achieve that requirement. It is a flaw in the RFC 2231 standard if it creates a message format that can not be processed by an RFC 2045 processor but can be processed by an RFC-2045-as-extended-by-2231 processor. I have seen a 2231 split boundary marker in the wild so this elaboration on the existing MUST appears to be necessary.\r\n\r\nNote that I do not object if this errata is marked \"hold for document update\".", "submit_date": "2012-06-28", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3270", "doc-id": "RFC3973", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.5.1", "orig_text": "if StateRefreshCapable(I) == TRUE\r\n         set PT(S,G) to largest active holdtime read from a Prune\r\n         message accepted on I;", "correct_text": "if StateRefreshCapable(I) == TRUE\r\n         set PT(S,G,I) to largest active holdtime read from a Prune\r\n         message accepted on I;", "notes": "No macro PT(S,G) is defined anywhere in the RFC; the reference appears to be to P(S,G,I).\n --VERIFIER NOTES-- \nRejected as a duplicate of http://www.rfc-editor.org/errata_search.php?eid=3271", "submit_date": "2012-06-28", "submitter_name": "Joseph Weinstein", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3271", "doc-id": "RFC3973", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5.1", "orig_text": "if StateRefreshCapable(I) == TRUE\r\n         set PT(S,G) to largest active holdtime read from a Prune\r\n         message accepted on I;", "correct_text": "if StateRefreshCapable(I) == TRUE\r\n         set PT(S,G,I) to the Holdtime from an active Prune received on\r\n         interface I. The Holdtime used SHOULD be the largest active one\r\n         but MAY be the most recently received active Prune Holdtime.", "notes": "It is not clear what is meant by the \"largest active holdtime\", and in any event sec. 4.4.2.3 specifies a slightly different rule:\r\n\r\n     Send State Refresh(S,G) out interface I\r\n       The router has refreshed the Prune(S,G) state on interface I.\r\n       The router MUST reset the Prune Timer (PT(S,G,I)) to the Holdtime\r\n       from an active Prune received on interface I.  The Holdtime used\r\n       SHOULD be the largest active one but MAY be the most recently\r\n       received active Prune Holdtime.\r\n\r\nAdditionally...\r\nNo macro PT(S,G) is defined anywhere in the RFC; the reference appears to be to P(S,G,I).\r\n\r\nThe concept of an \"active Prune\" is not defined in this RFC, but simply means those prunes which have not expired.", "submit_date": "2012-06-28", "submitter_name": "Joseph Weinstein", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3272", "doc-id": "RFC2560", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "   OCSPRequest     ::=     SEQUENCE {\r\n       tbsRequest                  TBSRequest,\r\n       optionalSignature   [0]     EXPLICIT Signature OPTIONAL }\r\n\r\n   TBSRequest      ::=     SEQUENCE {\r\n       version             [0]     EXPLICIT Version DEFAULT v1,\r\n       requestorName       [1]     EXPLICIT GeneralName OPTIONAL,\r\n       requestList                 SEQUENCE OF Request,\r\n       requestExtensions   [2]     EXPLICIT Extensions OPTIONAL }\r\n\r\n   Signature       ::=     SEQUENCE {\r\n       signatureAlgorithm      AlgorithmIdentifier,\r\n       signature               BIT STRING,\r\n       certs               [0] EXPLICIT SEQUENCE OF Certificate \r\n   OPTIONAL}\r\n\r\n   Version         ::=             INTEGER  {  v1(0) }\r\n\r\n   Request         ::=     SEQUENCE {\r\n       reqCert                     CertID,\r\n       singleRequestExtensions     [0] EXPLICIT Extensions OPTIONAL }\r\n\r\n   CertID          ::=     SEQUENCE {\r\n       hashAlgorithm       AlgorithmIdentifier,\r\n       issuerNameHash      OCTET STRING, -- Hash of Issuer's DN\r\n       issuerKeyHash       OCTET STRING, -- Hash of Issuers public key\r\n       serialNumber        CertificateSerialNumber }", "correct_text": "...\r\n   Version         ::=             INTEGER  {  v1(0) }\r\n\r\n   GeneralName     ::=      ????\r\n...", "notes": "The format of the GeneralName in the request syntax is never detailed.\n --VERIFIER NOTES-- \nGeneralName is imported in the ASN.1 module from the PKIX1Explicit88 module.", "submit_date": "2012-06-29", "submitter_name": "Matthew Moore", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3295", "doc-id": "RFC3665", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8.", "orig_text": "F18 ACK Proxy 1 -> Proxy 2\r\n\r\nACK sip:bob@biloxi.example.com SIP/2.0\r\nVia: SIP/2.0/UDP ss2.biloxi.example.com:5060;branch=z9hG4bK721e4.1\r\nMax-Forwards: 70\r\nFrom: Alice <sip:alice@atlanta.example.com>;tag=9fxced76sl\r\nTo: Bob <sip:bob@biloxi.example.com>;tag=314159\r\nCall-ID: 2xTb9vxSit55XU7p8@atlanta.example.com\r\nCSeq: 1 ACK\r\nContent-Length: 0", "correct_text": "F18 ACK Proxy 1 -> Proxy 2\r\n\r\nACK sip:bob@biloxi.example.com SIP/2.0\r\nVia: SIP/2.0/UDP ss1.atlanta.example.com:5060;branch=z9hG4bK2d4790.1\r\nMax-Forwards: 70\r\nFrom: Alice <sip:alice@atlanta.example.com>;tag=9fxced76sl\r\nTo: Bob <sip:bob@biloxi.example.com>;tag=314159\r\nCall-ID: 2xTb9vxSit55XU7p8@atlanta.example.com\r\nCSeq: 1 ACK\r\nContent-Length: 0", "notes": "Proxy 1 includes an incorrect Via header in the ACK.", "submit_date": "2012-07-26", "submitter_name": "David Waiting", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4452", "doc-id": "RFC7231", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "Automatic redirection needs to done with\r\n   care for methods not known to be safe, as defined in Section 4.2.1,\r\n   since the user might not wish to redirect an unsafe request.", "correct_text": "Automatic redirection needs to be done with\r\n   care for methods not known to be safe, as defined in Section 4.2.1,\r\n   since the user might not wish to redirect an unsafe request.", "notes": "A simple typo (\"needs to _be_ done\")", "submit_date": "2015-08-22", "submitter_name": "Attila Gulyas", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3827", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "packetsObserved", "correct_text": "selectorIdTotalPktsObserved", "notes": "The source of packetsObserved is noted as RFC5477, but \"packetsObserved\" occurs nowhere in RFC5477.\r\nRFC5476 Figure N shows \"packetsObserved = 318\". \r\n\r\nBoth RFC5477 and http://www.iana.org/assignments/ipfix name elementId 318 \"selectorIdTotalPktsObserved\"", "submit_date": "2013-12-08", "submitter_name": "Andrew Feren", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3273", "doc-id": "RFC5589", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "3. There were concerns with authorizing out-of-dialog REFERs. The\r\nauthorization policy for REFER in most implementations piggybacks\r\non the authorization policy for INVITE (which is, in most cases,\r\nbased simply on \"I placed or answered this call\").\r\n\r\nGlobally Routable UA URIs (GRUUs) [SIP-GRUU] can be used to address\r\nproblem 1. Problem 2 can be addressed using the Target-Dialog header\r\nfield defined in [RFC4538]. In the immediate term, this solution to\r\nproblem 2 allows the existing REFER authorization policy to be\r\nreused.", "correct_text": "3. There were concerns with authorizing out-of-dialog REFERs. The\r\nauthorization policy for REFER in most implementations piggybacks\r\non the authorization policy for INVITE (which is, in most cases,\r\nbased simply on \"I placed or answered this call\").\r\n\r\nGlobally Routable UA URIs (GRUUs) [SIP-GRUU] can be used to address\r\nproblem 1. Problem 2 can be addressed using the Target-Dialog header\r\nfield defined in [RFC4538]. In the immediate term, this solution to\r\nproblem 2 allows the existing INVITE authorization policy to be\r\nreused by REFER (thus solving problem 3).", "notes": "The phrase 'allows the existing REFER authorization policy to be reused' leads to a misunderstanding and confusion, because in actual fact INVITE authorization policy may be reused by REFER, not inversely.\r\nThe correction is proposed in order to clear up confusion.", "submit_date": "2012-06-29", "submitter_name": "Victor S. Osipov", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3274", "doc-id": "RFC4654", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "If a loss interval, A, is determined to have started with packet\r\nsequence number S_A and the next loss interval, B, started with\r\npacket sequence number S_B, then the number of packets in loss\r\ninterval A is given by (S_B - S_A).\r\n", "correct_text": "If a loss event, A, is determined to have started with packet\r\nsequence number S_A and the next loss event, B, started with\r\npacket sequence number S_B, then the number of packets in the loss\r\ninterval between A and B is given by (S_B - S_A).\r\n", "notes": "", "submit_date": "2012-07-02", "submitter_name": "Dongwook Kim", "verifier_id": "", "verifier_name": "Wesley Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3275", "doc-id": "RFC1628", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "UPS-MIB DEFINITIONS ::= BEGIN\r\n\r\n   IMPORTS\r\n       MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE,\r\n       OBJECT-IDENTITY, Counter32, Gauge32, Integer32\r\n           FROM SNMPv2-SMI\r\n       DisplayString, TimeStamp, TimeInterval, TestAndIncr,\r\n         AutonomousType\r\n           FROM SNMPv2-TC\r\n       MODULE-COMPLIANCE, OBJECT-GROUP\r\n           FROM SNMPv2-CONF;\r\n\r\n", "correct_text": "UPS-MIB DEFINITIONS ::= BEGIN\r\n\r\n   IMPORTS\r\n       MODULE-IDENTITY, OBJECT-TYPE, NOTIFICATION-TYPE,\r\n       OBJECT-IDENTITY, Counter32, Gauge32, Integer32\r\n           FROM SNMPv2-SMI\r\n       DisplayString, TimeStamp, TimeInterval, TestAndIncr,\r\n         AutonomousType, TEXTUAL-CONVENTION\r\n           FROM SNMPv2-TC\r\n       MODULE-COMPLIANCE, OBJECT-GROUP\r\n           FROM SNMPv2-CONF;\r\n\r\n", "notes": "Textual conventions are used within this MIB, but the macro \"TEXTUAL-CONVENTION\" itself is not imported, as it should (RFC 2578 \u00a73.2).", "submit_date": "2012-07-03", "submitter_name": "J\u00fcrgen Sellinath", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3296", "doc-id": "RFC6055", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2.", "orig_text": "   [MJD]            Duerst, M., \"The Properties and Promizes of UTF-8\",\r\n                    11th International Unicode Conference, San Jose ,\r\n                    September 1997, <http://www.ifi.unizh.ch/mml/\r\n                    mduerst/papers/PDF/IUC11-UTF-8.pdf>.", "correct_text": "   [MJD]            Duerst, M., \"The Properties and Promizes of UTF-8\",\r\n                    11th International Unicode Conference, San Jose ,\r\n                    September 1997, <http://www.sw.it.aoyama.ac.jp/2012/\r\n                    pub/IUC11-UTF-8.pdf>.", "notes": "The Web site of the University of Zurich (my employer at the time of writing this paper) has been reorganized last year. I finally managed to retreive a copy of the paper and make it available again, at http://www.sw.it.aoyama.ac.jp/2012/pub/IUC11-UTF-8.pdf. It should be available there for the next 15-20 years.", "submit_date": "2012-07-26", "submitter_name": "Martin D\u00fcrst", "verifier_id": "", "verifier_name": "IAB-Chair", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7369", "doc-id": "RFC2131", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "  2. Servers with knowledge of the client's configuration parameters\r\n      respond with a DHCPACK message to the client.  Servers SHOULD NOT\r\n      check that the client's network address is already in use; the\r\n      client may respond to ICMP Echo Request messages at this point.\r\n\r\n                Server          Client          Server\r\n\r\n                  v               v               v\r\n                  |                |               |\r\n                  |              Begins            |\r\n                  |          initialization        |\r\n                  |                |               |\r\n                  |                /|\\             |\r\n                  |   _________ __/ | \\__________  |\r\n                  | /DHCPREQU EST  |  DHCPREQUEST\\ |\r\n                  |/               |              \\|\r\n                  |                |               |\r\n               Locates             |            Locates\r\n            configuration          |         configuration\r\n                  |                |               |\r\n                  |\\               |              /|\r\n                  | \\              |  ___________/ |\r\n                  |  \\             | /  DHCPACK    |\r\n                  |   \\ _______    |/              |\r\n                  |     DHCPACK\\   |               |\r\n                  |          Initialization        |\r\n                  |             complete           |\r\n                  |               \\|               |\r\n                  |                |               |\r\n                  |           (Subsequent          |\r\n                  |             DHCPACKS           |\r\n                  |             ignored)           |\r\n                  |                |               |\r\n                  |                |               |\r\n                  v                v               v\r\n\r\n     Figure 4: Timeline diagram of messages exchanged between DHCP\r\n               client and servers when reusing a previously allocated\r\n               network address", "correct_text": "  2. Servers with knowledge of the client's configuration parameters\r\n      respond with a DHCPACK message to the client.  Servers SHOULD NOT\r\n      check that the client's network address is already in use; the\r\n      client may respond to ICMP Echo Request messages at this point.\r\n\r\n                Server          Client          Server\r\n\r\n                  v               v               v\r\n                  |               |               |\r\n                  |             Begins            |\r\n                  |         initialization        |\r\n                  |               |               |\r\n                  |              /|\\              |\r\n                  |   __________/ | \\__________   |\r\n                  | /DHCPREQUEST  |  DHCPREQUEST\\ |\r\n                  |/              |              \\|\r\n                  |               |               |\r\n               Locates            |            Locates\r\n            configuration         |         configuration\r\n                  |               |               |\r\n                  |\\              |              /|\r\n                  | \\___________  |  ___________/ |\r\n                  |    DHCPACK  \\ | /  DHCPACK    |\r\n                  |              \\|/              |\r\n                  |               |               |\r\n                  |         Initialization        |\r\n                  |            complete           |\r\n                  |               |               |\r\n                  |               |               |\r\n                  |          (Subsequent          |\r\n                  |            DHCPACKS           |\r\n                  |            ignored)           |\r\n                  |               |               |\r\n                  |               |               |\r\n                  v               v               v\r\n\r\n     Figure 4: Timeline diagram of messages exchanged between DHCP\r\n               client and servers when reusing a previously allocated\r\n               network address", "notes": "Alignment in various places + removing space in the middle of a word (\"DHCPREQU EST\" -> \"DHCPREQUEST\")", "submit_date": "2023-02-24", "submitter_name": "Panayiotis Gavriil", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-24 22:39:26"}, {"errata_id": "3297", "doc-id": "RFC3987", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "   [Duerst97]     Duerst, M., \"The Properties and Promises of UTF-8\",\r\n                  Proc.  11th International Unicode Conference, San Jose\r\n                  , September 1997,\r\n                  <http://www.ifi.unizh.ch/mml/mduerst/papers/\r\n                  PDF/IUC11-UTF-8.pdf>.", "correct_text": "   [Duerst97]     Duerst, M., \"The Properties and Promises of UTF-8\",\r\n                  Proc.  11th International Unicode Conference, San Jose\r\n                  , September 1997,\r\n                  <http://www.sw.it.aoyama.ac.jp/2012/pub/\r\n                  IUC11-UTF-8.pdf>.", "notes": "The Web site of the University of Zurich (my employer at the time of writing this paper) has been reorganized last year. I finally managed to retreive a copy of the paper and make it available again, at http://www.sw.it.aoyama.ac.jp/2012/pub/IUC11-UTF-8.pdf. It should be available there for the next 15-20 years. (I have already updated this in my internal copy of RFC3987bis.)\r\n\r\n---\r\nReviewer's comments:\r\nThis change is absolutely needed, but it is not within the purview of the errata system.  A valid erratum is something that would have been considered an error in the original document, had it been noticed at the time.  This clearly does not qualify.\r\n\r\nIt really should be \"rejected\", but I'm going to mark it \"held for document update\", hoping that it's more likely to be noticed that way.", "submit_date": "2012-07-26", "submitter_name": "Martin D\u00fcrst", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7764", "doc-id": "RFC1951", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.5", "orig_text": "The extra bits should be interpreted as a machine integer \r\nstored with the most-significant bit first, e.g., bits 1110 \r\nrepresent the value 14.", "correct_text": "The extra bits should be interpreted as a machine integer \r\nstored with the least-significant bit first, e.g., bits 0111 \r\nrepresent the value 14.", "notes": "In tools like infgen, unlike huffman codes which are reversed after read (https://github.com/madler/infgen/blob/2d2300507d24b398dfc7482f3429cc0061726c8b/infgen.c#L893-L901), extra bits are read as-is (in the LSB-first order) and never get reversed: https://github.com/madler/infgen/blob/2d2300507d24b398dfc7482f3429cc0061726c8b/infgen.c#L1038", "submit_date": "2024-01-15", "submitter_name": "Hiroki Kobayashi", "verifier_id": "", "verifier_name": null, "update_date": "2024-03-22 18:52:14"}, {"errata_id": "3828", "doc-id": "RFC3552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "Part of the purpose of the\r\nSecurity Considerations section is to explain what attacks are out of\r\nscope and what countermeasures can be applied to defend against them.\r\nIn", "correct_text": "Part of the purpose of the Security Considerations section\r\nis to explain what attacks are in and out of scope and what\r\ncountermeasures can be applied to defend against them.\r\n", "notes": "Note dangling \"In\".\r\n\r\nNot sure if this is exactly what the authors had in mind, and might suggest a more substantial change in a document update.  For the moment I *think* this covers it.", "submit_date": "2013-12-09", "submitter_name": "Eliot Lear", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3829", "doc-id": "RFC1150", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "The formost reason is that the distribution\r\n   mechanisms for RFCs are tried and true.", "correct_text": "The foremost reason is that the distribution\r\n   mechanisms for RFCs are tried and true.", "notes": "spelling error", "submit_date": "2013-12-09", "submitter_name": "Marek Perny", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3276", "doc-id": "RFC1628", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.8", "orig_text": "upsShutdownAfterDelay OBJECT-TYPE\r\n       SYNTAX     INTEGER (-1..2147483648)\r\n       UNITS      \"seconds\"\r\n       MAX-ACCESS read-write\r\n       STATUS     current\r\n       DESCRIPTION\r\n               \"Setting this object will shutdown (i.e., turn off)\r\n               either the UPS output or the UPS system (as determined\r\n               by the value of upsShutdownType at the time of\r\n               shutdown) after the indicated number of seconds, or\r\n               less if the UPS batteries become depleted. Setting\r\n               this object to 0 will cause the shutdown to occur\r\n               immediately.  Setting this object to -1 will abort the\r\n               countdown.  If the system is already in the desired\r\n               state at the time the countdown reaches 0, then\r\n               nothing will happen.  That is, there is no additional\r\n               action at that time if upsShutdownType = system and\r\n               the system is already off.  Similarly, there is no\r\n               additional action at that time if upsShutdownType =\r\n               output and the output is already off.  When read,\r\n               upsShutdownAfterDelay will return the number of\r\n               seconds remaining until shutdown, or -1 if no shutdown\r\n               countdown is in effect.  On some systems, if the agent\r\n               is restarted while a shutdown countdown is in effect,\r\n               the countdown may be aborted.  Sets to this object\r\n               override any upsShutdownAfterDelay already in effect.\"\r\n       ::= { upsControl 2 }\r\n\r\n   upsStartupAfterDelay OBJECT-TYPE\r\n       SYNTAX     INTEGER (-1..2147483648)\r\n       UNITS      \"seconds\"\r\n       MAX-ACCESS read-write\r\n       STATUS     current\r\n       DESCRIPTION", "correct_text": "upsShutdownAfterDelay OBJECT-TYPE\r\n       SYNTAX     INTEGER (-1..2147483647)\r\n       UNITS      \"seconds\"\r\n       MAX-ACCESS read-write\r\n       STATUS     current\r\n       DESCRIPTION\r\n               \"Setting this object will shutdown (i.e., turn off)\r\n               either the UPS output or the UPS system (as determined\r\n               by the value of upsShutdownType at the time of\r\n               shutdown) after the indicated number of seconds, or\r\n               less if the UPS batteries become depleted. Setting\r\n               this object to 0 will cause the shutdown to occur\r\n               immediately.  Setting this object to -1 will abort the\r\n               countdown.  If the system is already in the desired\r\n               state at the time the countdown reaches 0, then\r\n               nothing will happen.  That is, there is no additional\r\n               action at that time if upsShutdownType = system and\r\n               the system is already off.  Similarly, there is no\r\n               additional action at that time if upsShutdownType =\r\n               output and the output is already off.  When read,\r\n               upsShutdownAfterDelay will return the number of\r\n               seconds remaining until shutdown, or -1 if no shutdown\r\n               countdown is in effect.  On some systems, if the agent\r\n               is restarted while a shutdown countdown is in effect,\r\n               the countdown may be aborted.  Sets to this object\r\n               override any upsShutdownAfterDelay already in effect.\"\r\n       ::= { upsControl 2 }\r\n\r\n   upsStartupAfterDelay OBJECT-TYPE\r\n       SYNTAX     INTEGER (-1..2147483647)\r\n       UNITS      \"seconds\"\r\n       MAX-ACCESS read-write\r\n       STATUS     current\r\n       DESCRIPTION", "notes": "The upper limit of the ranges of upsShutdownAfterDelay and upsStartupAfterDelay points to the intention to use a 32-bit signed integer.\r\nThe biggest positive value of a 32-bit singed integer, however, is 2147483647. On a 32-Bit system the upper range given within RFC1628 (2147483648) is so large that is is unsigned, which conflicts with the limitation to 32 bits. \r\nAs 2147483648 seconds is more than 68 years, it seems preferable to change this to 2147483647, loosing 1 second but gaining the ability to be implemented with 32 bits.", "submit_date": "2012-07-03", "submitter_name": "J\u00fcrgen Sellinath", "verifier_id": "", "verifier_name": "Ron Bonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3277", "doc-id": "RFC6546", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "Table 1 lists the allowable RID message types in an HTTP Response for a given RID message type in the Request.  A RID system MUST be prepared to handle an HTTP Response of the given type(s) when sending the corresponding HTTP Request.  A RID system MUST NOT send an HTTP Response containing any RID message other than the one corresponding to the one sent in the HTTP Request.\r\n\r\n(table 1 appears here)\r\n\r\nThe use of stable DNS names to address RID systems is RECOMMENDED; in addition to facilitating connection to RID systems within a consortium, these are to be used as reference identifiers for a RID system's peers.  For security purposes, RID systems SHOULD NOT return 3xx Redirection response codes, and SHOULD NOT follow any 3xx Redirection.  The protocol provides no in-band method for handling a change of address of a RID system.\r\n", "correct_text": "Insert new text just before table 1:\r\n\r\n\"An X appearing in the Callback column of Table 1 means that the exchange itself IS a callback.  In these cases the HTTP request contains a RID message that is intended to conclude an earlier RID exchange which initially returned 202.   Note that RID Acknowledgment and RID Result messages can only ever appear in an HTTP request when the message is being generated as a Callback.  However, a RID Report message that appears in an HTTP request may represent either a unsolicited Report, or a delayed Callback.  It is important to note that any RID message that is sent as a Callback must be answered with a 200, and so cannot itself generate yet another Callback.\"", "notes": "This is a request to insert some additional text to help clarify the meaning of the \"X\" that appears in the Callback column of table 1.   I believe this will be of benefit to implementers who must understand the message exchange patterns described in table 1 in order to properly implement the RID protocol.", "submit_date": "2012-07-03", "submitter_name": "John Field", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3298", "doc-id": "RFC4880", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.4", "orig_text": "Key revocation signatures (types 0x20 and 0x28) hash only the key being revoked.", "correct_text": "Primary key revocation signatures (type 0x20) hash only the key being revoked.\r\nSubkey revocation signature (type 0x28) hash first the primary key and then the\r\nsubkey being revoked.", "notes": "This amendment to subkey revocation signatures is intended to align the spec with existing implementations.  (it also makes the subkey revocation signatures more symmetric with the subkey binding signatures).\r\n\r\nGnuPG (all known versions with subkey support) hashes both keys, as does PGP (tested at version 6.5.8).  I'm unaware of any other OpenPGP implementation that actually complies with the spec as written for subkey revocations.\r\n\r\nThis was apparently noticed (but apparently ignored) back in 2000 (see point 2 of [0]) and was recently discussed again on the IETF list [1].\r\n\r\n[0] http://www.mhonarc.org/archive/html/ietf-openpgp/2000-12/msg00001.html\r\n[1] http://www.mhonarc.org/archive/html/ietf-openpgp/2012-07/msg00003.html", "submit_date": "2012-07-27", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3299", "doc-id": "RFC3647", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "A CP within this category often makes sets requirements\r\nappropriate for a certain \"level of assurance\" provided\r\nby certificates, relative to certificates issued pursuant\r\nto related CPs.", "correct_text": "A CP within this category often sets requirements\r\nappropriate for a certain \"level of assurance\" provided\r\nby certificates, relative to certificates issued pursuant\r\nto related CPs.", "notes": "r/makes sets/sets", "submit_date": "2012-07-28", "submitter_name": "Mezzetti, Gustavo", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3407", "doc-id": "RFC2616", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   Comments can be included in some HTTP header fields by surrounding\r\n   the comment text with parentheses. Comments are only allowed in\r\n   fields containing \"comment\" as part of their field value definition.\r\n   In all other fields, parentheses are considered part of the field\r\n   value.\r\n\r\n       comment        = \"(\" *( ctext | quoted-pair | comment ) \")\"\r\n       ctext          = <any TEXT excluding \"(\" and \")\">\r\n\r\n   A string of text is parsed as a single word if it is quoted using\r\n   double-quote marks.\r\n\r\n       quoted-string  = ( <\"> *(qdtext | quoted-pair ) <\"> )\r\n       qdtext         = <any TEXT except <\">>\r\n\r\n   The backslash character (\"\\\") MAY be used as a single-character\r\n   quoting mechanism only within quoted-string and comment constructs.\r\n\r\n       quoted-pair    = \"\\\" CHAR", "correct_text": "   Comments can be included in some HTTP header fields by surrounding\r\n   the comment text with parentheses. Comments are only allowed in\r\n   fields containing \"comment\" as part of their field value definition.\r\n   In all other fields, parentheses are considered part of the field\r\n   value.\r\n\r\n       comment        = \"(\" *( ctext | quoted-pair | comment ) \")\"\r\n       ctext          = <any TEXT excluding \"\\\", \"(\" and \")\">\r\n\r\n   A string of text is parsed as a single word if it is quoted using\r\n   double-quote marks.\r\n\r\n       quoted-string  = ( <\"> *(qdtext | quoted-pair ) <\"> )\r\n       qdtext         = <any TEXT excluding \"\\\" and <\">>\r\n\r\n   The backslash character (\"\\\") MAY be used as a single-character\r\n   quoting mechanism only within quoted-string and comment constructs.\r\n\r\n       quoted-pair    = \"\\\" CHAR", "notes": "Allowing \"\\\" in qdtext and ctext creates ambiguous semantics.\r\n\r\nConsider:\r\n    \" \\\" (\\ was a qdtext, so string has terminated)\r\n    \" \\\"\"(\\ is part of the quoted pair \\\") \r\n    \" \\ \" (Is this an escaped space or a bare backslash?)\r\n    \" \\\\\"\" (first \\ is qdtext and second \\ is part of quoted-pair \\\")\r\n\r\nAnalogous examples would work for ctext and comment, as well.\r\n\r\nIt looks to me as though the intended meaning was for the implementer to consider \"\\\" part of a quoted-pair whenever possible.  It's always possible, so the obvious fix would be to exclude it from ctext and qdtext, and use \\\\ whenever the user desires a textual backslash.\r\n\r\n--- VERIFIER NOTES ---\r\nThis issue is already being dealt with in the HTTP 1.1 work in the HTTPBIS working group.  The 2616 updates, which will be published soon, will include fixes for this.", "submit_date": "2012-11-14", "submitter_name": "Thomas Lane", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3430", "doc-id": "RFC6265", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": " max-age-av        = \"Max-Age=\" non-zero-digit *DIGIT\r\n                       ; In practice, both expires-av and max-age-av\r\n                       ; are limited to dates representable by the\r\n                       ; user agent.\r\n non-zero-digit    = %x31-39\r\n                       ; digits 1 through 9\r\n", "correct_text": " max-age-av        = \"Max-Age=\" 1*DIGIT\r\n                       ; In practice, both expires-av and max-age-av\r\n                       ; are limited to dates representable by the\r\n                       ; user agent.\r\n", "notes": "The current text forbids a server to send Max-Age=0.\n --VERIFIER NOTES-- \nThat is correct.  As noted in the introduction, what servers should do and what clients should do are not the same.  The ABNF in Section 4 limits the server intentionally, to maximize compatibility with deployed clients.  See this text in the Introduction:\r\n\r\n   To maximize interoperability with user agents, servers SHOULD limit\r\n   themselves to the well-behaved profile defined in Section 4 when\r\n   generating cookies.\r\n\r\n   User agents MUST implement the more liberal processing rules defined\r\n   in Section 5, in order to maximize interoperability with existing\r\n   servers that do not conform to the well-behaved profile defined in\r\n   Section 4.\r\n   ", "submit_date": "2012-12-13", "submitter_name": "Zhong Yu", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3278", "doc-id": "RFC4566", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "At page 9:\r\n\r\n\r\n      Media description, if present\r\n         m=  (media name and transport address)", "correct_text": "\r\n      Media description, if present\r\n         m=* (media name and transport address)\r\n\r\n", "notes": "A '*' is added making \"m=\" lines optional\r\n\r\nRationale: \r\nThe description about media lines in section 5, page 9 is conflicting with the ABNF syntax of media-description in Section 9, page 40\r\n\r\nmedia-descriptions =  *( media-field\r\n                         information-field\r\n                         *connection-field\r\n                         bandwidth-fields\r\n                         key-field\r\n                         attribute-fields )\r\n\r\nAccording to the ABNF grammar, an SDP description can have zero \"m=\" lines, but according to the description at page 9, at least one line must be present.  Note that the conflict could be solved also by replacing the media-descriptions definition with \r\n\r\n   media-descriptions =  1*( media-field ... )\r\n\r\nbut at page 8 (still Section 5) it is said\r\n\r\n   An SDP session description consists of a session-level section\r\n   followed by zero or more media-level sections. ...\r\n               ^^^^^^^^^^^^^^^^^^^^^^^^\r\n\r\nso, I guess that the ABNF grammar is correct.\n --VERIFIER NOTES-- \n Please see the discussion at  http://www.ietf.org/mail-archive/web/mmusic/current/msg09398.html", "submit_date": "2012-07-03", "submitter_name": "Riccardo Bernardini", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3279", "doc-id": "RFC2474", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Header", "orig_text": "-", "correct_text": "Updates: 791", "notes": "RFC 2474 obsoletes RFC 1349. However, RFC 1349 updates RFC 791, by changing the definition of the Type of Service octet. RFC 2474 changes it again. Therefore, 2474 should also be marked as updating 791.\r\n\r\nThis does lead to occasional confusion, since the Type of Service octet is named as the Differentiated Services Field by RFC 2474.", "submit_date": "2012-07-04", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3280", "doc-id": "RFC3588", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6", "orig_text": "Section 5.6 says for both I- and R-:\r\n\r\nOpen - \"Rcv-DPR\" - \"Snd-DPA,Disc\" - \"Closed\"  ", "correct_text": "Per section 5.4, the receiver of the Disconnect-Peer-Answer \r\ninitiates the transport disconnect, so it should say, for \r\nboth I- and R-:\r\n\r\nOpen - \"Rcv-DPR\" - \"Snd-DPA\" - \"Closing\"  ", "notes": "In RFC3588bis-34, section 5.4 states more clearly as below \r\n\r\nThe receiver of the Disconnect-Peer-Answer initiates the transport disconnect.  The sender of the Disconnect-Peer-Answer should be able to detect the transport closure and cleanup the connection.", "submit_date": "2012-07-04", "submitter_name": "Hans Liu", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3281", "doc-id": "RFC6310", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1.3", "orig_text": "This is achieved by including a capability TLV in the PW Forward \r\nError Correction (FEC) interface parameters TLV.", "correct_text": "This is achieved by including a capability TLV in the PW Forwarding \r\nEquivalence Class (FEC) interface parameters TLV.", "notes": "\"FEC\" should also be added to the list of abbreviations in section 2.1.\r\n\r\nThis erratum is correct, but is unlikely to cause an incorrect implementation of the protocol, thus it can be held over to the next revision of the RFC. ", "submit_date": "2012-07-05", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3282", "doc-id": "RFC5598", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "Mail Service Providers (MSPs)", "correct_text": "either:\r\n   Mailbox Providers (MPs)\r\nor:\r\n   Email Service Providers (ESPs)\r\n", "notes": "The ambiguity between the two concepts possibly indicated with similar terms is frequent.  The distinction reported here is due to JD Falk, and it seems to be taking roots.", "submit_date": "2012-07-11", "submitter_name": "Alessandro Vesely", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3283", "doc-id": "RFC6066", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "Appendix A:     The Server Name extension...(deleted)... It is \r\nprovided that the ServerNameList can contain more than only one \r\nname of any particular name_type.", "correct_text": "Appendix A:     The Server Name extension...deleted..It is \r\nprovided that the ServerNameList can contain only one name \r\nof any particular name_type.", "notes": "Section 3 and Appendix A seem to be conflict with each other.  Am I parsing something incorrectly here:\r\n\r\nSection 3:   The ServerNameList MUST NOT contain more than one name of the same name_type.\r\n\r\nAppendix A:     The Server Name extension...deleted..It is provided that the ServerNameList can contain more than only one name of any particular name_type.\r\n\r\nI think the words \"more than\" were not supposed to appear in the final RFC.", "submit_date": "2012-07-12", "submitter_name": "Brad Wetmore", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3284", "doc-id": "RFC20", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "all", "orig_text": "Cert", "correct_text": "Cerf", "notes": "Vint Cerf's name is spelled wrong in the footer at the bottom of each page. Not having a copy of the original, I don't know whether it was an original bug or a transcription error in 1999.  BUt it's definitely kind of amusing.", "submit_date": "2012-07-13", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3310", "doc-id": "RFC5252", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   L1VPN Info TLV\r\n      A single TLV, as defined in Section 3.2, MUST be present.  If more\r\n      than one L1VPN Info TLV is present, only the first TLV is\r\n      processed and the others MUST be ignored on receipt.\r\n\r\n", "correct_text": "   L1VPN Info TLV\r\n      A single TLV, as defined in Section 2.2, MUST be present.  If more\r\n      than one L1VPN Info TLV is present, only the first TLV is\r\n      processed and the others MUST be ignored on receipt.\r\n\r\n", "notes": "", "submit_date": "2012-08-07", "submitter_name": "Kris Michielsen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3311", "doc-id": "RFC6550", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.7.10", "orig_text": "   R:    1-bit router address flag.  When set, it indicates that the\r\n         Prefix field contains a complete IPv6 address assigned to the\r\n         sending router that can be used as parent in a target option.", "correct_text": "   R:    1-bit router address flag.  When set, it indicates that the\r\n         Prefix field contains a complete IPv6 address assigned to the\r\n         sending router that can be used as parent in a transit option.", "notes": "parent address is carried in transit option, not target option.", "submit_date": "2012-08-08", "submitter_name": "Duong Nguyen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3420", "doc-id": "RFC3711", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.", "orig_text": "   The \"Encrypted Portion\" of an SRTP packet consists of the encryption\r\n   of the RTP payload (including RTP padding when present) of the\r\n   equivalent RTP packet.", "correct_text": "   The \"Encrypted Portion\" of an SRTP packet consists of the encryption\r\n   of the RTP payload (including RTP padding and RTP pad count when present)\r\n   of the equivalent RTP packet.  ", "notes": "In Figure 1 \"RTP padding\" and \"RTP pad count\" are different things. The text should use the same terminology in order to make clear that the padding count is encrypted.", "submit_date": "2012-11-28", "submitter_name": "Matthias Schertler", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3285", "doc-id": "RFC4605", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "Note that this does not protect against an \"upstream loop\".  For\r\n   example, see the figure below:\r\n\r\n\r\n           LAN 1  --------------------------------------\r\n                  Upstream |              | Downstream\r\n                           A              B\r\n                Downstream |              | Upstream\r\n           LAN 2  --------------------------------------\r\n\r\n   B will unconditionally forward packets from LAN 1 to LAN 2, and A\r\n   will unconditionally forward packets from LAN 2 to LAN 1.  This will\r\n   cause an upstream loop.  A multicast routing protocol that employs a\r\n   tree building algorithm is required to resolve loops like this.", "correct_text": "Note that this does not protect against an \"upstream loop\".  For\r\n   example, see the figure below:\r\n\r\n\r\n           LAN 1  --------------------------------------\r\n                  Upstream |              | Downstream\r\n                           A              B\r\n                Downstream |              | Upstream\r\n           LAN 2  --------------------------------------\r\n\r\n   B will unconditionally forward packets from LAN 2 to LAN 1, and A\r\n   will unconditionally forward packets from LAN 1 to LAN 2.  This will\r\n   cause an upstream loop.  A multicast routing protocol that employs a\r\n   tree building algorithm is required to resolve loops like this.", "notes": "Multicast packets should be forwarded from Upstream to Downstream.", "submit_date": "2012-07-14", "submitter_name": "Jon Hak Song", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3286", "doc-id": "RFC3973", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.5", "orig_text": "(Additional subection)", "correct_text": "4.5.3 Receiving State Refresh Messages\r\n\r\nWhen a State Refresh message is received, it may trigger state \r\ntransitions to the upstream state machine and related actions, \r\nas described in Section 4.4.  It is then forwarded in accordance \r\nwith Section 4.5.1.", "notes": "For clarity and completeness, an additional subsection is required to 4.5 describing the actions to be taken when a state refresh message is received. Since these actions have already been specified in Sections 4.4 and 4.5.1, it should be sufficient to simply refer to these sections. Without this additional subsection, an implementer could easily miss an important step in the processing of received state refresh messages.\n --VERIFIER NOTES-- \nThis may be fine and useful, but it does not qualify as Errata because it is\r\nintroducing new text and material.\r\n\r\nIf the WG feels strongly about this, it can be brought forward as a small\r\nInformational I-D or included in an update of this RFC.   ", "submit_date": "2012-07-16", "submitter_name": "Joseph Weinstein", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3287", "doc-id": "RFC6550", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.1", "orig_text": "     127-255:  Rejection; the node sending the DAO-ACK is unwilling to\r\n               act as a parent.", "correct_text": "     128-255:  Rejection; the node sending the DAO-ACK is unwilling to\r\n               act as a parent.", "notes": "The status code range of \"Rejection\" overlaps with status code range of \"Not an outright rejection\".\r\nThe text in the body of the document makes it clear that the \"Corrected Text\" suggested here is what was intended.", "submit_date": "2012-07-18", "submitter_name": "Duong Nguyen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7765", "doc-id": "RFC4576", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   [OSPFv2]   Postel, J., \"Suggested Telnet Protocol Changes\", RFC 328,\r\n              April 1972.", "correct_text": "   [OSPFv2]   Moy, J., \"OSPF Version 2\", RFC 2328, April 1998.", "notes": "The error was caused by a missing 2 in front of the RFC number in the reference.", "submit_date": "2024-01-15", "submitter_name": "Julian Cowley", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-16 18:18:41"}, {"errata_id": "3334", "doc-id": "RFC4382", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "mplsL3VpnVrfPerfRoutesDropped OBJECT-TYPE\r\n   SYNTAX        Counter32\r\n   MAX-ACCESS    read-only\r\n   STATUS        current\r\n   DESCRIPTION\r\n       \"This counter should be incremented when the number of routes\r\n        contained by the specified VRF exceeds or attempts to exceed\r\n        the maximum allowed value as indicated by\r\n        mplsL3VpnVrfMaxRouteThreshold.\r\n", "correct_text": "mplsL3VpnVrfPerfRoutesDropped OBJECT-TYPE\r\n   SYNTAX        Counter32\r\n   MAX-ACCESS    read-only\r\n   STATUS        current\r\n   DESCRIPTION\r\n       \"This counter should be incremented when the number of routes\r\n        contained by the specified VRF exceeds or attempts to exceed\r\n        the maximum allowed value as indicated by\r\n        mplsL3VpnVrfConfHighRteThresh.", "notes": "The variable mplsL3VpnVrfMaxRouteThreshold does not exist in this MIB and is not imported from elsewhere.\r\n\r\nThe proper reference is mplsL3VpnVrfConfHighRteThresh and the same should be used for the DESCRIPTION clause for mplsL3VpnVrfNumVrfRouteMaxThreshExceeded.", "submit_date": "2012-09-04", "submitter_name": "Jeffrey Haas", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3335", "doc-id": "RFC6506", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5", "orig_text": "If the Protocol-Specific Authentication Key (Ks) is L octets \r\nlong, then Ko is equal to K. ", "correct_text": "If the Protocol-Specific Authentication Key (Ks) is L octets \r\nlong, then Ko is equal to Ks. ", "notes": "The key K is never used in computing the digest. There is a class of cross protocol attacks that can be prevented if the original key K is appended with a few well known bytes. As a result, the key K is appended with a 2 octet crypto protocol ID to derive a new key Ks. Its this key that must always be used.", "submit_date": "2012-09-05", "submitter_name": "Manav Bhatia", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3338", "doc-id": "RFC6238", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "Basically, the output of the HMAC-SHA-1 calculation is truncated to\r\nobtain user-friendly values:", "correct_text": "The output of the HMAC-SHA-1 calculation is truncated to\r\nobtain user-friendly values:", "notes": "Starting a sentence with `Basically' is often considered bad form.\r\nQualifiers such as basically add nothing to the sentence and should\r\ngenerally be avoided.", "submit_date": "2012-09-06", "submitter_name": "Samuel Whited", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3339", "doc-id": "RFC6238", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Basically, we define TOTP as TOTP = HOTP(K, T), where T is an integer\r\nand represents the number of time steps between the initial counter\r\ntime T0 and the current Unix time.", "correct_text": "We define TOTP as TOTP = HOTP(K, T), where T is an integer\r\nand represents the number of time steps between the initial counter\r\ntime T0 and the current Unix time.", "notes": "As mentioned in a previous errata, starting a sentence with\r\n`Basically' is often considered bad form. Qualifiers such as\r\nbasically add nothing to the sentence and should generally be\r\navoided.", "submit_date": "2012-09-06", "submitter_name": "Samuel Whited", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3340", "doc-id": "RFC6715", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Examples:\r\nORG-URI;INDEX=1:http://mycompany.example1.com\r\nORG-URI;PREF=1;INDEX=2:http://mycompany.example2.com", "correct_text": "Examples:\r\nORG-DIRECTORY;INDEX=1:http://mycompany.example1.com\r\nORG-DIRECTORY;PREF=1;INDEX=2:http://mycompany.example2.com", "notes": "In the examples, the ORG-DIRECTORY property is incorrectly referred to as ORG-URI.", "submit_date": "2012-09-08", "submitter_name": "Michael Angstadt", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3288", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.12.1", "orig_text": "                 +--------------+---------+-------------+\r\n                 | substatement | section | cardinality |\r\n                 +--------------+---------+-------------+\r\n                 | augment      | 7.15    | 0..1        |\r\n                 | description  | 7.19.3  | 0..1        |\r\n                 | if-feature   | 7.18.2  | 0..n        |\r\n                 | refine       | 7.12.2  | 0..1        |\r\n                 | reference    | 7.19.4  | 0..1        |\r\n                 | status       | 7.19.2  | 0..1        |\r\n                 | when         | 7.19.5  | 0..1        |\r\n                 +--------------+---------+-------------+\r\n", "correct_text": "                 +--------------+---------+-------------+\r\n                 | substatement | section | cardinality |\r\n                 +--------------+---------+-------------+\r\n                 | augment      | 7.15    | 0..n        |\r\n                 | description  | 7.19.3  | 0..1        |\r\n                 | if-feature   | 7.18.2  | 0..n        |\r\n                 | refine       | 7.12.2  | 0..n        |\r\n                 | reference    | 7.19.4  | 0..1        |\r\n                 | status       | 7.19.2  | 0..1        |\r\n                 | when         | 7.19.5  | 0..1        |\r\n                 +--------------+---------+-------------+\r\n", "notes": "The cardinality for 'augment' and 'refine' is '0..n'", "submit_date": "2012-07-20", "submitter_name": "Martin Bj\u00f6rklund", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3289", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   descendant-schema-nodeid =\r\n                         node-identifier\r\n                         absolute-schema-nodeid\r\n", "correct_text": "   descendant-schema-nodeid =\r\n                         node-identifier\r\n                         [absolute-schema-nodeid]\r\n", "notes": "A single node identifier is a valid descendant-schema-nodeid.", "submit_date": "2012-07-20", "submitter_name": "Martin Bj\u00f6rklund", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3290", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   decimal64-specification = fraction-digits-stmt\r\n", "correct_text": "   decimal64-specification = ;; these stmts can appear in any order\r\n                             fraction-digits-stmt\r\n                             [range-stmt stmtsep]\r\n", "notes": "A decimal64 type can be restricted with the \"range\" statement.", "submit_date": "2012-07-20", "submitter_name": "Martin Bj\u00f6rklund", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3291", "doc-id": "RFC4960", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3.2", "orig_text": "          Variable Parameters                  Status     Type Value\r\n          -------------------------------------------------------------\r\n          IPv4 Address (Note 1)               Optional    5 IPv6 Address\r\n          (Note 1)               Optional    6 Cookie Preservative\r\n          Optional    9 Reserved for ECN Capable (Note 2)   Optional\r\n          32768 (0x8000) Host Name Address (Note 3)          Optional\r\n          11 Supported Address Types (Note 4)    Optional    12", "correct_text": "          Variable Parameters                  Status     Type Value\r\n          -------------------------------------------------------------\r\n          IPv4 Address (Note 1)               Optional    5 \r\n          IPv6 Address (Note 1)               Optional    6\r\n          Cookie Preservative                 Optional    9\r\n          Reserved for ECN Capable (Note 2)   Optional    32768 (0x8000)\r\n          Host Name Address (Note 3)          Optional    11\r\n          Supported Address Types (Note 4)    Optional    12", "notes": "Something placed the line ending in the wrong place making the table nearly\r\nunreadable.", "submit_date": "2012-07-21", "submitter_name": "Eric W. Biederman", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3292", "doc-id": "RFC4750", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   ospfTrapCompliance MODULE-COMPLIANCE\r\n        STATUS       obsolete\r\n        DESCRIPTION\r\n           \"The compliance statement.\"\r\n        MODULE       -- this module\r\n        MANDATORY-GROUPS { ospfTrapControlGroup }\r\n\r\n        GROUP       ospfTrapControlGroup\r\n        DESCRIPTION\r\n           \"This group is optional but recommended for all\r\n           OSPF systems.\"\r\n        ::= { ospfTrapCompliances 1 }", "correct_text": "   ospfTrapCompliance MODULE-COMPLIANCE\r\n        STATUS       obsolete\r\n        DESCRIPTION\r\n           \"The compliance statement.\"\r\n        MODULE       -- this module\r\n        GROUP       ospfTrapControlGroup\r\n        DESCRIPTION\r\n           \"This group is optional but recommended for all\r\n           OSPF systems.\"\r\n        ::= { ospfTrapCompliances 1 }", "notes": "ospfTrapControlGroup is listed both in the MANDATORY-GROUPS clause and in a GROUP clause. Per RFC 2580, Conformance Statements for SMIv2 (brackets added to indicate pertinent rule):\r\n\r\n\"5.4.2.  Mapping of the GROUP clause\r\n\r\n   The GROUP clause, which need not be present, is repeatedly used to\r\n   name each object and notification group which is conditionally\r\n   mandatory for compliance to the MIB module.  The GROUP clause can\r\n   also be used to name unconditionally optional groups.  [A group named\r\n   in a GROUP clause must be absent from the correspondent MANDATORY-\r\n   GROUPS clause.]\"\r\n\r\nIt is listed in both clauses in RFC 1850 as well (which RFC 4750 obsoletes). It is STATUS current in RFC 1850 and STATUS obsolete in 4750; however, obsolete or not, it is not legal according to SMI rules.", "submit_date": "2012-07-23", "submitter_name": "Michael Kirkham", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3293", "doc-id": "RFC5725", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   o  thinning (T): 4 bits\r\n      The amount of thinning performed on the sequence-number space.\r\n      Only those packets with sequence numbers 0 mod 2^T are reported by\r\n      this block.  A value of 0 indicates that there is no thinning and\r\n      all packets are reported.  The maximum thinning is one packet in\r\n      every 32,768 (amounting to two packets within each 16-bit sequence\r\n      space).", "correct_text": "   o  thinning (T): 4 bits\r\n      The amount of thinning performed on the sequence-number space.\r\n      Only those packets with sequence numbers s satisfying the relation \r\n      s mod 2^T = 0 are reported by this block.  A value of 0 indicates \r\n      that there is no thinning and all packets are reported.  The maximum\r\n      thinning is one packet in every 32,768 (amounting to two packets \r\n      within each 16-bit sequence space).", "notes": "The original is cryptic at best.", "submit_date": "2012-07-25", "submitter_name": "Glen Zorn", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3300", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.9", "orig_text": "SEGMENT ARRIVES\r\nSYN-SENT STATE\r\n\r\nIf the ACK bit is set\r\n\r\n          If SEG.ACK =< ISS, or SEG.ACK > SND.NXT, send a reset (unless\r\n          the RST bit is set, if so drop the segment and return)\r\n\r\n            <SEQ=SEG.ACK><CTL=RST>\r\n\r\n          and discard the segment.  Return.\r\n\r\n          If SND.UNA =< SEG.ACK =< SND.NXT then the ACK is acceptable.", "correct_text": "SEGMENT ARRIVES\r\nSYN-SENT STATE\r\n\r\nIf the ACK bit is set\r\n\r\n          If SEG.ACK =< ISS, or SEG.ACK > SND.NXT, send a reset (unless\r\n          the RST bit is set, if so drop the segment and return)\r\n\r\n            <SEQ=SEG.ACK><CTL=RST>\r\n\r\n          and discard the segment.  Return.\r\n\r\n          If SND.UNA < SEG.ACK =< SND.NXT then the ACK is acceptable.", "notes": "In SYN-SENT, SND.UNA == ISS, so the first line is contradictory to the last.\r\n\r\nVerifier Notes:\r\n\r\nThis is being Held for Document Update rather than Verified because technically the algorithm is still correct, as the first check against ISS will fail and cause a reset to be generated.  The second sentence that has an off-by-one error appears to be merely a paraphrasing.\r\n\r\nIn practice today, much code seems to be simplifying further and checking that SEG.ACK == SND.NXT, for stacks that are not sending data on the SYN, so I do not believe this text is leading to any significant issue with bugs or interoperability in the wild.\r\n", "submit_date": "2012-07-30", "submitter_name": "Botong Huang", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3301", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.9", "orig_text": "SEGMENT ARRIVES\r\nOtherwise (Other States)\r\nfifth check the ACK field\r\np71\r\n\r\n     if the ACK bit is on\r\n\r\n        SYN-RECEIVED STATE\r\n\r\n          If SND.UNA =< SEG.ACK =< SND.NXT then enter ESTABLISHED state\r\n          and continue processing.\r\n\r\n\r\n            If the segment acknowledgment is not acceptable, form a\r\n            reset segment,\r\n\r\n              <SEQ=SEG.ACK><CTL=RST>\r\n\r\n            and send it.", "correct_text": "SEGMENT ARRIVES\r\nOtherwise (Other States)\r\nfifth check the ACK field\r\np71\r\n\r\n     if the ACK bit is on\r\n\r\n        SYN-RECEIVED STATE\r\n\r\n          If SND.UNA < SEG.ACK =< SND.NXT then enter ESTABLISHED state\r\n          and continue processing.\r\n\r\n\r\n            If the segment acknowledgment is not acceptable, form a\r\n            reset segment,\r\n\r\n              <SEQ=SEG.ACK><CTL=RST>\r\n\r\n            and send it.", "notes": "In SYN-RECEIVE, SND.UNA == ISS. When the first ACK arrive with SEG.ACK == SND.UNA, it should be not accepted and thus transfer to ESTABLISHED state. This doesn't seem to be in rfc1122. Not sure if it is reported somewhere.\r\n\r\n\r\nVerifier Note:\r\nThe side sending generating a packet that would erroneously check out would either be in error itself for generating the packet (not following the standard), or the packet would be extremely old (from a prior connection), and the responses should generate RSTs.  Existing code seems to already be implementing this correctly, so I do not think there is an interoperability issue.", "submit_date": "2012-07-30", "submitter_name": "Botong Huang", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3302", "doc-id": "RFC6545", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2.1", "orig_text": "   SP-1 is represented by CERT-FOR-OUR-DOMAIN and 192.0.2.67.  SP-2 is\r\n   identified by 192, 0.2.98.  In this example, SP-2 is the service\r\n   provider for systems on the 192.0.2.32/27 subnet.  The contact for\r\n   the host 192.0.2.35 is known at the start of the request as\r\n   'Constituency-contact@10.1.1.2'.\r\n", "correct_text": "   SP-1 is represented by CERT-FOR-OUR-DOMAIN and 192.0.2.67.  SP-2 is\r\n   identified by 192.0.2.98.  In this example, SP-2 is the service\r\n   provider for systems on the 192.0.2.32/27 subnet.  The contact for\r\n   the host 192.0.2.35 is known at the start of the request as\r\n   'Constituency-contact@10.1.1.2'.\r\n", "notes": "This could also be considered an Editorial erratum; however, since it is a technically invalid address, I selected Technical.\r\n\r\nAD: I marked it as editorial because the correct value is used in the example.", "submit_date": "2012-07-31", "submitter_name": "S Terry Brugger", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3303", "doc-id": "RFC6545", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.5", "orig_text": "   o  Protection of data from being viewed by intermediate parties in\r\n      the path of an Request request  should be considered.\r\n", "correct_text": "   o  Protection of data from being viewed by intermediate parties in\r\n      the path of a Request request should be considered.\r\n", "notes": "", "submit_date": "2012-07-31", "submitter_name": "S Terry Brugger", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7896", "doc-id": "RFC4512", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.7.1", "orig_text": "     DITStructureRuleDescription = LPAREN WSP\r\n         ruleid                     ; rule identifier\r\n         [ SP \"NAME\" SP qdescrs ]   ; short names (descriptors)\r\n         [ SP \"DESC\" SP qdstring ]  ; description\r\n         [ SP \"OBSOLETE\" ]          ; not active\r\n         SP \"FORM\" SP oid           ; NameForm\r\n         [ SP \"SUP\" ruleids ]       ; superior rules\r\n         extensions WSP RPAREN      ; extensions", "correct_text": "     DITStructureRuleDescription = LPAREN WSP\r\n         ruleid                     ; rule identifier\r\n         [ SP \"NAME\" SP qdescrs ]   ; short names (descriptors)\r\n         [ SP \"DESC\" SP qdstring ]  ; description\r\n         [ SP \"OBSOLETE\" ]          ; not active\r\n         SP \"FORM\" SP oid           ; NameForm\r\n         [ SP \"SUP\" SP ruleids ]    ; superior rules\r\n         extensions WSP RPAREN      ; extensions", "notes": "The SP token between \"SUP\" and \"ruleids\" is missing.  The SP token is not optional, unlike WSP.", "submit_date": "2024-04-17", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "3421", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3.5", "orig_text": "The recommended policy for dealing with MD RRs found in\r\na master file is to reject them, or to convert them to MX RRs with a\r\npreference of 10.", "correct_text": "The recommended policy for dealing with MF RRs found in\r\na master file is to reject them, or to convert them to MX RRs with a\r\npreference of 10.", "notes": "3.3.5 about MF says \"dealing with MD\". It should probably say \"dealing with MF\". I assume this is a copy and paste error from earlier section about MD.", "submit_date": "2012-11-28", "submitter_name": "Jeremy C. Reed", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3422", "doc-id": "RFC6164", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   (b)  Addresses in which the rightmost 64 bits are assigned the\r\n        highest 128 values (i.e., ffff:ffff:ffff:ff7f to ffff:ffff:ffff:\r\n        ffff) SHOULD NOT be used as unicast addresses, to avoid\r\n        colliding with reserved subnet anycast addresses [RFC2526].", "correct_text": "   (b)  Addresses in which the rightmost 64 bits are assigned the\r\n        highest 128 values (i.e., ffff:ffff:ffff:ff80 to ffff:ffff:ffff:\r\n        ffff) SHOULD NOT be used as unicast addresses, to avoid\r\n        colliding with reserved subnet anycast addresses [RFC2526].", "notes": "The highest 128 values start at ffff:ffff:ffff:ff80, not ffff:ffff:ffff:ff7f.", "submit_date": "2012-11-29", "submitter_name": "Benjamin Cama", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3423", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B", "orig_text": "   unsigned long\r\n   generate_crc32c(unsigned char *buffer, unsigned int length)\r\n   {\r\n     unsigned int i;\r\n     unsigned long crc32 = ~0L;", "correct_text": "   unsigned long\r\n   generate_crc32c(unsigned char *buffer, unsigned int length)\r\n   {\r\n     unsigned int i;\r\n     unsigned long crc32 = 0xffffffffL;", "notes": "The remainder register (crc32) should be initialized to 0xffffffffL rather than ~0L, for correct operation on platforms where unisigned long is longer than 32 bits. I.e., 64-bit platforms.", "submit_date": "2012-12-01", "submitter_name": "Pontus Andersson", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3304", "doc-id": "RFC4872", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11 & 12", "orig_text": "Section 11 says:\r\n\r\n\r\n   (Full) LSP rerouting will be initiated by the head-end node that has\r\n   either detected the LSP failure or received a Notify message and/or a\r\n   PathErr message with the new error code/sub-code \"Notify Error/LSP\r\n   Locally Failed\" for this LSP.  The new LSP resources can be\r\n   established using the make-before-break mechanism, where the new LSP\r\n   is set up before the old LSP is torn down.  This is done by using the\r\n   mechanisms of the SESSION_ATTRIBUTE object and the Shared-Explicit\r\n   (SE) reservation style (see [RFC3209]).  Both the new and old LSPs\r\n   can share resources at common nodes.\r\n\r\nSection 12 says:\r\n\r\n   [No text on reversion for (full) LSP Rerouting.]", "correct_text": "Section 11 should say:\r\n\r\n\r\n   (Full) LSP rerouting will be initiated by the head-end node that has\r\n   either detected the LSP failure or received a Notify message and/or a\r\n   PathErr message with the new error code/sub-code \"Notify Error/LSP\r\n   Locally Failed\" for this LSP.  The new LSP resources can be\r\n   established using the make-before-break mechanism, where the new LSP\r\n   is set up before the old LSP is torn down.  This is done by using the\r\n   mechanisms of the SESSION_ATTRIBUTE object and the Shared-Explicit\r\n   (SE) reservation style (see [RFC3209]).  Both the new and old LSPs\r\n   can share resources at common nodes.  The new LSP can be established\r\n   without tearing down the old LSP in case of reversion (see section 12).\r\n\r\nSection 12 should say:\r\n\r\n   For \"(full) LSP Rerouting\", reversion implies that the old LSP is not \r\n   torn down by the head-end node after the new LSP is established. For\r\n   reversion, the head-end node re-activates the old LSP after this has\r\n   recovered.\r\n\r\n", "notes": "Current text in RFC 4872 describes reversion in the cases of 1+1 bidirectional Protection, 1:N Protection with Extra Traffic and Rerouting Without Extra Traffic, however it has no description of reversion with (Full) LSP Rerouting.\r\nFor (full) LSP Rerouting, the description in Section 11 instead implies that the old LSP is torn down. This has led to some confusion as to whether reversion with (full) LSP Rerouting is allowed or not allowed by the RFC. We believe this was not intentional. The additions would make it clear that reversion can be supported with (Full) LSP Rerouting.\n --VERIFIER NOTES-- \nAfter discussions on the CCAMP mailing list it is the general opinion of the CCAMP WG that there is no technical issue and that if any WG participants wish to document how the current mechanisms can be used to support a particular usage/application that they are free to do so in a new informational draft.\r\n", "submit_date": "2012-07-31", "submitter_name": "Lyndon Ong", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4961", "doc-id": "RFC5707", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "There are some inconsistencies between the examples and the published XSD.\r\n\r\n#1: In all of the examples, <dialogid> is the child of <msml>, but the XSD only accepts it if it's the child of <result>.\r\n\r\nFor example, this is wrong:\r\n<msml version=\"1.1\">\r\n    <result response=\"200\"/>\r\n    <dialogid>conn:jd87dfg4h/dialog:12345</dialogid>\r\n</msml>\r\n\r\nThis would be the correct one, according to the XSD:\r\n<msml version=\"1.1\">\r\n    <result response=\"200\">\r\n        <dialogid>conn:jd87dfg4h/dialog:12345</dialogid>\r\n    </result>\r\n</msml>\r\n\r\n#2: The XSD say the <event> tag must have children, but there are examples where it doesn't have. The 'minOccurs' attribute in the regarding <xs:choice> is not explicitly specified in msml-core.xsd, but the default value is '1', so there must be at least one <name> and one <value> element, in sequence.\r\n\r\nRef: https://www.w3schools.com/xml/el_choice.asp\r\n\r\nFor example, this is invalid:\r\n<event name=\"msml.dialog.exit\" id=\"conn:jd87dfg4h/dialog:12345\" />\r\n\r\n#3: This is also related to <event>. In the XSD, there is a regular expression specified for the contents of <value>. This regexp does not accept the colon ':' character, but the examples contain this character.\r\n\r\nFor example, this is not accepted because of the colon character:\r\n<event name=\"msml.conf.asn\" id=\"conf:example\">\r\n         <name>speaker</name>\r\n         <value>conn:hd93tg5hdf</value>\r\n</event>\r\n\r\n-------------------\r\nmsml-core.xsd\r\n\r\n<xs:element name=\"event\">\r\n        <xs:complexType>\r\n         <xs:choice maxOccurs=\"unbounded\">\r\n          <xs:sequence>\r\n           <xs:element name=\"name\" type=\"msmlEventNameValue.datatype\"/>\r\n           <xs:element name=\"value\">\r\n            <xs:simpleType>\r\n             <xs:restriction base=\"xs:string\">\r\n              <xs:pattern value=\"[a-zA-Z0-9.]+\"/>\r\n             </xs:restriction>\r\n            </xs:simpleType>\r\n           </xs:element>\r\n          </xs:sequence>\r\n         </xs:choice>\r\n         <xs:attribute name=\"name\" type=\"msmlEventName.datatype\" use=\"required\"/>\r\n         <xs:attribute name=\"id\" type=\"msmlEventSource.datatype\" use=\"required\"/>\r\n        </xs:complexType>\r\n</xs:element>", "submit_date": "2017-03-09", "submitter_name": "Rajmund Tak\u00e1cs", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3305", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.9", "orig_text": "p70\r\nSEGMENT ARRIVES\r\n   Otherwise,\r\n   first check sequence number\r\n\r\n      SYN-RECEIVED STATE\r\n      ESTABLISHED STATE\r\n      FIN-WAIT-1 STATE\r\n      FIN-WAIT-2 STATE\r\n      CLOSE-WAIT STATE\r\n      CLOSING STATE\r\n      LAST-ACK STATE\r\n      TIME-WAIT STATE\r\n\r\n        Segments are processed in sequence.  Initial tests on arrival\r\n        are used to discard old duplicates, but further processing is\r\n        done in SEG.SEQ order.  If a segment's contents straddle the\r\n        boundary between old and new, only the new parts should be\r\n        processed.\r\n\r\n        There are four cases for the acceptability test for an incoming\r\n        segment:\r\n\r\n        Segment Receive  Test\r\n        Length  Window\r\n        ------- -------  -------------------------------------------\r\n\r\n           0       0     SEG.SEQ = RCV.NXT\r\n\r\n           0      >0     RCV.NXT =< SEG.SEQ < RCV.NXT+RCV.WND\r\n\r\n          >0       0     not acceptable\r\n\r\n          >0      >0     RCV.NXT =< SEG.SEQ < RCV.NXT+RCV.WND\r\n                      or RCV.NXT =< SEG.SEQ+SEG.LEN-1 < RCV.NXT+RCV.WND\r\n", "correct_text": "Added my Martin Stiemerling (TSV AD):\r\nA document update will address this problem and the TCPM working is\r\nexpected to find a solution. ", "notes": "Not sure how to correct it systemmatically, so I just present the problem. \r\n\r\nIf in SYN-RECEIVED state, and received a SYN-ACK packet with no data as:\r\nSEG.SEQ = IRS\r\nSEG.ACK = ISS + 1\r\n\r\nHowever in SYN-RECEIVED state, RCV.NXT = IRS + 1, which means the SYN-ACK packet will fail on the second test above. The SYN-ACK packet will be dropped and a ACK packet is sent in reply. As a result, we lost the SYN part, but it is fine because we've already received SYN packet once. However, we also lost the ACK part which is supposed to be the ACK of our SYN. Thus we will never reach the ESTABLISH state.", "submit_date": "2012-07-31", "submitter_name": "Botong Huang", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3306", "doc-id": "RFC6425", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.1", "orig_text": "3.1.1 Identifying a P2MP MPLS TE LSP\r\n\r\n\r\n   [RFC4379] defines how an MPLS TE LSP under test may be identified in\r\n   an echo request.  A Target FEC Stack TLV is used to carry either an\r\n   RSVP IPv4 Session or an RSVP IPv6 Session sub-TLV.\r\n\r\n   In order to identify the P2MP MPLS TE LSP under test, the echo\r\n   request message MUST carry a Target FEC Stack TLV, and this MUST\r\n   carry exactly one of two new sub-TLVs: either an RSVP P2MP IPv4\r\n   Session sub-TLV or an RSVP P2MP IPv6 Session sub-TLV.  These sub-TLVs\r\n   carry fields from the RSVP-TE P2MP SESSION and SENDER_TEMPLATE\r\n   objects [RFC4875] and so provide sufficient information to uniquely\r\n   identify the LSP.\r\n\r\n   The new sub-TLVs are assigned Sub-Type identifiers as follows, and\r\n   are described in the following sections.\r\n\r\n      Sub-Type #       Length              Value Field\r\n      ----------       ------              -----------\r\n              17         20                RSVP P2MP IPv4 Session\r\n              18         56                RSVP P2MP IPv6 Session", "correct_text": "3.1.1. Identifying a P2MP MPLS TE LSP\r\n\r\n\r\n   [RFC4379] defines how an MPLS TE LSP under test may be identified in\r\n   an echo request.  A Target FEC Stack TLV is used to carry either an\r\n   RSVP IPv4 Session or an RSVP IPv6 Session sub-TLV.\r\n\r\n   In order to identify the P2MP MPLS TE LSP under test, the echo\r\n   request message MUST carry a Target FEC Stack TLV, and this MUST\r\n   carry exactly one of two new sub-TLVs: either an RSVP P2MP IPv4\r\n   Session sub-TLV or an RSVP P2MP IPv6 Session sub-TLV.  These sub-TLVs\r\n   carry fields from the RSVP-TE P2MP SESSION and SENDER_TEMPLATE\r\n   objects [RFC4875] and so provide sufficient information to uniquely\r\n   identify the LSP.\r\n\r\n   The new sub-TLVs are assigned Sub-Type identifiers as follows, and\r\n   are described in the following sections.\r\n\r\n      Sub-Type #       Length              Value Field\r\n      ----------       ------              -----------\r\n              17         20                RSVP P2MP IPv4 Session\r\n              18         44                RSVP P2MP IPv6 Session", "notes": "Dear authors of RFC 6425,\r\nI believe the length of the \"RSVP P2MP IPv6 Session Sub-TLV\" in Section 3.1.1 should be 44 bytes and not 56 bytes to match the format shown in Section 3.1.1.2. \r\n\r\nIt may be the 56 byte figure was copied over from RFC 4379 which uses a 16-byte \"IPv6 tunnel end point address\" as the top field in the sub-TLV in the case of an IPv6 P2P RSVP session. With an IPv6 P2MP RSVP session that field is replaced with the P2MP-ID which is a 4-byte field only.\r\n\r\nMustapha.", "submit_date": "2012-08-01", "submitter_name": "Mustapha Aissaoui", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3307", "doc-id": "RFC6551", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "As far as the constraint is concerned, the object body\r\n   will carry a Node Energy constraint object defined in Section 3.1\r\n   indicating that nodes must be mains-powered:", "correct_text": "As far as the constraint is concerned, the object body\r\n   will carry a Node Energy constraint object defined in Section 3.2\r\n   indicating that nodes must be mains-powered:", "notes": "Node Energy object is mentioned in section 3.2", "submit_date": "2012-08-03", "submitter_name": "Duong Nguyen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3309", "doc-id": "RFC5375", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.2.2", "orig_text": " B.2.2. /127 Addresses\r\n\r\n   The usage of the /127 addresses, the equivalent of IPv4's RFC 3021\r\n   [RFC3021], is not valid and should be strongly discouraged as\r\n   documented in RFC 3627 [RFC3627].", "correct_text": " B.2.2. /127 Addresses\r\n\r\n   The usage of the /127 addresses, the equivalent of IPv4's RFC 3021\r\n   [RFC3021], is valid as stated in RFC 6164 [RFC 6164].", "notes": "", "submit_date": "2012-08-06", "submitter_name": "L\u00edvio Zanol Pereira de Souza Puppim", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4453", "doc-id": "RFC7208", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.6.  \"ip4\"", "orig_text": "  ip4-cidr-length  = \"/\" (\"0\" / %x31-39 0*1DIGIT) ; value range 0-32\r\n  ip6-cidr-length  = \"/\" (\"0\" / %x31-39 0*2DIGIT) ; value range 0-128", "correct_text": "  ip4-cidr-length  = \"/\" (DIGIT / \r\n                          %x31-%x32 DIGIT /\r\n                          %x33 %x30-%x32) ; value range 0-32\r\n\r\n  ip6-cidr-length  = \"/\" (\"0\" /\r\n                          %31-%39 0*1DIGIT /\r\n                          \"1\" %30-%31 DIGIT /\r\n                          \"12\" %30-%38) ; value range 0-128", "notes": "As written the ABNF matches ranges 0-99 and 0-999, not the ranges in the comments.\r\nNote: I coded the ABNF the way that I did to avoid leading zeros.\r\n\r\n----- Verifier Notes -----\r\nThis isn't documenting an error: the ABNF was specified as it was intentionally, using the comments to restrict the range.  I'm marking this \"Held for Document Update\" in case we ever revise this and want to consider making the ABNF pickier.", "submit_date": "2015-08-24", "submitter_name": "Seymour J. Metz", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4962", "doc-id": "RFC8092", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   Duplicate BGP Large Community values MUST NOT be transmitted.  A\r\n   receiving speaker MUST silently remove redundant BGP Large Community\r\n   values from a BGP Large Community attribute.\r\n", "correct_text": "   Duplicate BGP Large Community values MUST NOT be transmitted.  A\r\n   receiving speaker MUST silently remove redundant BGP Large Community\r\n   values from a BGP Large Communities attribute.\r\n", "notes": "Typo\r\n====\r\nThere are two mote instances where the name of the attribute is also mentioned as \"BGP Large Community attribute\", and not \"BGP Large Communities Attribute\u201d as defined in Section 3.\r\n\r\nI am changing the status to \"Held for Document Update\", which means that \"The erratum is not a necessary update to the RFC. However, any future update of the document might consider this erratum, and determine whether it is correct and merits including in the update.\" [1]\r\n\r\n- Alvaro.\r\n[1] https://www.ietf.org/iesg/statement/errata-processing.html ", "submit_date": "2017-03-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3312", "doc-id": "RFC5892", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A and A.1", "orig_text": "In A:\r\n\r\nCode point:\r\n\r\nThe code point, or code points, to which this rule is to be\r\napplied.  Normally, this implies that if any of the code points in\r\na label is as defined, then the rules should be applied.  If\r\nevaluated to True, the code point is OK as used; if evaluated to\r\nFalse, it is not OK.\r\n\r\nIn A.1:\r\n\r\nRule Set:\r\n  False;\r\n  If Canonical_Combining_Class(Before(cp)) .eq.  Virama Then True;\r\n  If RegExpMatch((Joining_Type:{L,D})(Joining_Type:T)*\\u200C\r\n    (Joining_Type:T)*(Joining_Type:{R,D})) Then True;\r\n", "correct_text": "In A:\r\n\r\nCode point:\r\n\r\nThe code point, or code points, to which this rule is to be\r\napplied.  Normally, this implies that if any of the code points in\r\na label is as defined, then the rules should be applied.  If\r\nevaluated to True, the code point is OK as used; if evaluated to\r\nFalse, it is not OK.\r\n\r\nFor the rule to be evaluated to True for the label, it MUST be \r\nevaluated separately for every occurrence of the Code point in the \r\nlabel; each of those evaluations must result in True.\r\n\r\nIn A.1:\r\n\r\nRule Set:\r\n  False;\r\n  If Canonical_Combining_Class(Before(cp)) .eq.  Virama Then True;\r\n  If cp .eq. \\u200C And RegExpMatch((Joining_Type:{L,D})(Joining_Type:T)*cp\r\n    (Joining_Type:T)*(Joining_Type:{R,D})) Then True;\r\n", "notes": "The original text did not make it clear whether the actual rule is to be applied once for every occurrence of the code point in the label. This is a regular expression that can be interpreted in multiple ways, plus it does not take into account the case where more than one U+200C exists in a label.", "submit_date": "2012-08-09", "submitter_name": "Patrik F\u00e4ltstr\u00f6m", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3313", "doc-id": "RFC4585", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "      rtcp-fb-ack-param  = SP \"rpsi\"\r\n                         / SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string]\r\n                         / ; empty\r\n", "correct_text": "      rtcp-fb-ack-param  = SP \"rpsi\"\r\n                         / SP \"app\" [SP byte-string]\r\n                         / SP token [SP byte-string]\r\n", "notes": "RFC 4585 defines and allows generic NACK (with no further parameters) but not generic ACK (which always requires further parameters). Section 4.2 says:\r\n...\r\n      Parameters MUST be provided to further distinguish different types\r\n      of positive acknowledgement feedback.\r\n...\r\n      The feedback type \"nack\", without parameters, indicates use of the\r\n      Generic NACK feedback format as defined in Section 6.2.1.\r\n...\r\nThe ABNF incorrectly allows nothing after \"ack\", implying that generic ACK is valid. Even the approved errata, which replaces the invalid empty alternate with optional [], still allows nothing after \"ack\". Note that recent interest in RTP congestion control (e.g. RMCAT BOF) may lead to defining a standard ACK.", "submit_date": "2012-08-11", "submitter_name": "Mo Zanaty", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3314", "doc-id": "RFC6321", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   # 3.6.5 Time Zone Component\r\n\r\n   component-vtimezone = element vtimezone {\r\n       element properties {\r\n           property-tzid &\r\n\r\n           property-last-mod? &\r\n           property-tzuurl?\r\n       },\r\n", "correct_text": "   # 3.6.5 Time Zone Component\r\n\r\n   component-vtimezone = element vtimezone {\r\n       element properties {\r\n           property-tzid &\r\n\r\n           property-last-mod? &\r\n           property-tzurl?\r\n       },\r\n", "notes": "The property-tzurl pattern name is misspelled.", "submit_date": "2012-08-12", "submitter_name": "Norman Walsh", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3315", "doc-id": "RFC6321", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   type-until = element until {\r\n       type-date |\r\n       type-date-time\r\n   }\r\n", "correct_text": "???", "notes": "The type-date and type-date-time patterns are undefined in the schema.", "submit_date": "2012-08-12", "submitter_name": "Norman Walsh", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3316", "doc-id": "RFC6321", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   type-byday = element byday {\r\n       xsd:integer?,\r\n       type-weekday\r\n   }\r\n", "correct_text": "???", "notes": "That's not a valid RELAX NG pattern. It's an attempt to group \"string\" and \"data\" patterns.", "submit_date": "2012-08-12", "submitter_name": "Norman Walsh", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3317", "doc-id": "RFC2960", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6.3.1", "orig_text": "       RTTVAR <- (1 - RTO.Beta) * RTTVAR + RTO.Beta * |SRTT - R'| SRTT\r\n       <- (1 - RTO.Alpha) * SRTT + RTO.Alpha * R'", "correct_text": "       RTTVAR <- (1 - RTO.Beta) * RTTVAR + RTO.Beta * |SRTT - R'|, and\r\n       SRTT <- (1 - RTO.Alpha) * SRTT + RTO.Alpha * R'", "notes": "Currently, it looks like the second equation is part of the first one.\n --VERIFIER NOTES-- \nRFC 2960 is obsolete.  It has been replaced by RFC 4960.   ", "submit_date": "2012-08-14", "submitter_name": "Sergey Antipov", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3318", "doc-id": "RFC6184", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "On page 46 start from line 7: \r\n\"When max-dpb is signaled, the receiver MUST be able to decode\r\nNAL unit streams that conform to the signaled highest level,\r\nwith the exception that the MaxDpbMbs value in Table A-1 of [1]\r\nfor the signaled highest level is replaced with the value of\r\nmax-dpb * 3 / 8. Consequently, a receiver that signals max-dpb\r\n          ^^^^^\r\nMUST be capable of storing the following number of decoded\r\nframes, complementary field pairs, and non-paired fields in its\r\ndecoded picture buffer:\r\nMin(max-dpb * 3 / 8 / ( PicWidthInMbs * FrameHeightInMbs),\r\n              ^^^^^\r\n16)\"", "correct_text": "When max-dpb is signaled, the receiver MUST be able to decode\r\nNAL unit streams that conform to the signaled highest level,\r\nwith the exception that the MaxDpbMbs value in Table A-1 of [1]\r\nfor the signaled highest level is replaced with the value of\r\nmax-dpb * 8 / 3. Consequently, a receiver that signals max-dpb\r\n          ^^^^^\r\nMUST be capable of storing the following number of decoded\r\nframes, complementary field pairs, and non-paired fields in its\r\ndecoded picture buffer:\r\nMin(max-dpb * 8 / 3 / ( PicWidthInMbs * FrameHeightInMbs),\r\n              ^^^^^\r\n16)", "notes": "", "submit_date": "2012-08-14", "submitter_name": "Xiaohui Wei (Joanne)", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4454", "doc-id": "RFC7132", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   PATHSEC is intended to address the concerns cited above, to provide\r\n   significantly improved path security, which builds upon the route\r\n   origination validation capability offered by use of the RPKI\r\n   [RFC6810].", "correct_text": "   PATHSEC is intended to address the concerns cited above, to provide\r\n   significantly improved path security, which builds upon the route\r\n   origination validation capability offered by use of the RPKI\r\n   [RFC6811].", "notes": "I think this text should reference RFC6811 (origin validation), not RFC6810 (the rpki-rtr protocol).", "submit_date": "2015-08-25", "submitter_name": "David Mandelberg", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3319", "doc-id": "RFC6706", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "global", "orig_text": "No comparison/contrast to Next-Hop Reachability Protocol (RFC 2332) is provided.  ", "correct_text": "A paragraph or more detailing the differences between these two approaches would be welcome and help reduced confusion.", "notes": "There seems to be a strong similarity betweeen AERO and NHRP in terms of overall function.\n --VERIFIER NOTES-- \nA discussion and clarification wrt NHRP, and I understand how that might enrich the work on Aero.\r\n\r\nHowever, the Errata Reporting system is not the right way to raise this issue.\r\nhttp://www.rfc-editor.org/status_type_desc.html describes the two types of\r\nErrata:\r\nTechnical: An error in the technical content.\r\nEditorial: A spelling, grammar, punctuation, or syntax error that does not\r\naffect the technical meaning.\r\nThe IESG statement at http://www.ietf.org/iesg/statement/errata-processing.html\r\ngives a more detailed view of what constitutes Errata.\r\n\r\nThe correct way to advance this particular issue is through email with the\r\nauthor (possibly also copying an IETF discussion mailing list) and then, if\r\nappropriate through the publication of an Internet-Draft to capture the\r\ndiscussion or to revise this RFC with the discussion included.", "submit_date": "2012-08-15", "submitter_name": "Mark Ford", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3320", "doc-id": "RFC5857", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.2", "orig_text": "   This section describes five ROHC Attribute Types: MAX_CID,\r\n   ROHC_PROFILE, ROHC_INTEG, ROHC_ICV_LEN, and MRRU.  The value\r\n   allocated for each ROHC Attribute Type is specified in Section 4.\r\n", "correct_text": "   This section describes five ROHC Attribute Types: MAX_CID,\r\n   ROHC_PROFILE, ROHC_INTEG, ROHC_ICV_LEN, and MRRU.  The value\r\n   allocated for each ROHC Attribute Type is specified in Section 5.\r\n", "notes": "Section 4 of RFC 5857 is \"Security Considerations\". Values of ROHC Attribute Types listed in Section 5.", "submit_date": "2012-08-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3321", "doc-id": "RFC4444", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  erratum: disfigured object name\r\n\r\nIn the DESCRIPTION clause of the isisCircLevelType OBJECT-TYPE macro\r\ninstance, on mid-page 32, the sentence\r\n\r\n                                        [...].  Thus, if the\r\n             isisSysTpe is level2 and the isisCircLevelType\r\n             for a circuit is level1, the circuit will not send\r\n             or receive IS-IS packets.  [...]\r\n\r\nshould say:\r\n                    vvvvvvvvv\r\n                                        [...].  Thus, if the\r\n|            isisSysLevelType is level2 and the isisCircLevelType\r\n             for a circuit is level1, the circuit will not send\r\n             or receive IS-IS packets.  [...]\r\n\r\n(5)  errata(?): overly restrictive RowStatus object descriptions\r\n\r\nSome tables with conceptual rows that can be dynamically added\r\nor deleted, contain a control object with SYNTAX RowStatus\r\nand other control objects, e.g. with SYNTAX IsisAdminState.\r\n\r\nI expect that the latter objects have been intended to control\r\nthe activity of \"live\" table rows, without the need to deactivate\r\nthese rows via the RowStatus object before setting the AdminState\r\nto \"on\" or \"off\", so much the more the support for the\r\n'notInServcie' state of the RowStatus objects is explicitely\r\n\"not required\".  Therefore, I strongly suspect that some RowStatus\r\nobject DESCRIPTION clauses have unintentionally been worded overly\r\nrestrictive and should been corrected to allow AdminStatus changes.\r\n\r\nSome other such clauses contain statements that are void due to the\r\nlack of accessible objects in those tables they could be applied to.\r\n\r\nI have identified the following instances of these issues:\r\n\r\n(5.1)\r\n\r\nThe DESCRIPTION clause of the isisManAreaAddrExistState OBJECT-TYPE\r\nmacro instance, on page 18, says:\r\n\r\n        DESCRIPTION\r\n            \"The state of the isisManAreaAddrEntry.  If the\r\n             isisSysAdminState for this Intermediate System is 'on' and\r\n             an attempt is made to set this object to the value\r\n             'destroy' or 'notInService' when this is the only\r\n             isisManAreaAddrEntry in state 'active' for this\r\n             Intermediate System should return inconsistentValue.\r\n|\r\n|            A row entry cannot be modified when the value of this\r\n|            object is 'active'.\"\r\n\r\nThe last sentence is void, because the conceptual table rows of the\r\nIsisManAreaAddrTable do not contain any other accessible objects\r\nthan the RowStatus object proper, isisManAreaAddrExistState.\r\nTherefore, this clause should be shortened to say:\r\n\r\n        DESCRIPTION\r\n            \"The state of the isisManAreaAddrEntry.  If the\r\n             isisSysAdminState for this Intermediate System is 'on' and\r\n             an attempt is made to set this object to the value\r\n             'destroy' or 'notInService' when this is the only\r\n             isisManAreaAddrEntry in state 'active' for this\r\n             Intermediate System should return inconsistentValue.\"\r\n\r\n(5.2)\r\n\r\nThe DESCRIPTION clause of the isisRedistributeAddrExistState\r\nOBJECT-TYPE macro instance, on pp. 23/24, says:\r\n\r\n        DESCRIPTION\r\n            \"The existence state of this summary address.  Support\r\n<page break>\r\n             for createAndWait and notInService is not required.\r\n|\r\n|            A row entry cannot be modified when the value of this\r\n|            object is 'active'.\"\r\n\r\nThe last sentence is void, because the conceptual table rows of the\r\nIsisRedistributeAddrTable do not contain any other accessible objects\r\nthan the RowStatus object proper, isisRedistributeAddrExistState.\r\nTherefore, this clause should be shortened to say:\r\n\r\n        DESCRIPTION\r\n            \"The existence state of this summary address.  Support\r\n|            for 'createAndWait' and 'notInService' is not required.\"\r\n\r\n(6)  erratum (typo)\r\n\r\nThe DESCRIPTON clause of the isisRASNPAMask OBJECT-TYPE declaration,\r\non page 61, says:\r\n\r\n        DESCRIPTION\r\n            \"A bit mask with 1 bit indicating the positions in the\r\n             effective destination address from which embedded SNPA\r\n             information is to be extracted.  [...]\r\n\r\nIt should say:\r\n                                 vvv\r\n        DESCRIPTION\r\n|           \"A bit mask with 1 bits indicating the positions in the\r\n             effective destination address from which embedded SNPA\r\n             information is to be extracted.  [...]\r\n\r\n\r\n(7)  erratum: disfigured object names\r\n\r\nThe last paragraph on page 62, within the DESCRIPTION clause of the\r\nisisIPRAEntry OBJECT-TYPE declaration says:\r\n\r\n             Implementers need to be aware that if the total number\r\n             of elements (octets or sub-identifiers) in\r\n             isisIPRADestr, isisIPRADestPrefixLen, and\r\n             isisIPRANextHopIndex is too great, then OIDs of column\r\n             instances in this table will have more than 128\r\n             subidentifiers and cannot be accessed using SNMPv1,\r\n<page break>\r\n             [...]\r\n\r\nIt should perhaps say:\r\n\r\n             Implementers need to be aware that if the total number\r\n             of elements (octets or sub-identifiers) in\r\n|            isisIPRADestType, isisIPRADest, isisIPRADestPrefixLen,\r\n             and isisIPRANextHopIndex is too great, then OIDs of\r\n             column instances in this table will have more than 128\r\n             subidentifiers and cannot be accessed using SNMPv1,\r\n             [...]\r\n", "correct_text": "", "notes": "This Errata Note is duplicated from EID 87 to separate out issues of different categories.\r\n\r\nAll excerpts from the RFC text are taken literally, keeping their\r\noriginal formatting, and modified text is formatted in conformance\r\nwith RFC guidelines again.\r\n\r\nI use change bars ('|' in column 1) and casual up/down pointing\r\ntags ('^^^' / 'vvv' marks in extra lines) to emphasize the location\r\nof textual issues and/or proposed textual enhancements/corrections.\r\n", "submit_date": "2006-05-29", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3324", "doc-id": "RFC2898", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "   The fields of type PKDF2-params have the following meanings:\r\n", "correct_text": "   The fields of type PBKDF2-params have the following meanings:\r\n", "notes": "", "submit_date": "2012-08-16", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4455", "doc-id": "RFC7607", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "N/A", "correct_text": "N/A", "notes": "The normative reference to RFC 7606 is dangling (7606 has not been published).\r\n\r\n===\r\n\r\n(Alvaro Retana)  rfc7606 is a valid reference.\n --VERIFIER NOTES-- \nrfc7606 is a valid reference. ", "submit_date": "2015-08-26", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3363", "doc-id": "RFC6460", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   One of these two cipher suites MUST be the first (most preferred)\r\n   cipher suites in the ClientHello message.  A Suite B TLS client that\r\n   offers interoperability with servers that are not Suite B compliant\r\n   MAY offer additional cipher suites, but any additional cipher suites\r\n   MUST appear after the two Suite B compliant cipher suites in the\r\n   ClientHello message.", "correct_text": "   One of these two cipher suites MUST be the first (most preferred)\r\n   cipher suites in the ClientHello message, ignoring the TLS Signaling\r\n   Cipher Suite Value (SCSV) from RFC 5746 if it is present.  A Suite B\r\n   TLS client that offers interoperability with servers that are not\r\n   Suite B compliant MAY offer additional cipher suites, but any\r\n   additional cipher suites MUST appear after the two Suite B\r\n   compliant cipher suites in the ClientHello message.", "notes": "The SCSV defined in RFC 5746 is not considered a \"true cipher suite\".  As a result, the inclusion of the SCSV will not result in the selection of an unexpected cipher suite.  This clarification makes it clear that the use of the SCSV does not prevent an implementation from being considered Suite B compliant.", "submit_date": "2012-09-24", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3364", "doc-id": "RFC6030", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "      ----------------        ----------------\r\n      | KeyPackage   |    0..1| DeviceInfo   |\r\n      |--------------|--------|--------------|\r\n      |              |--      | SerialNumber |\r\n      ----------------  |     | Manufacturer |\r\n              |         |     | ....         |\r\n              |         |     ----------------\r\n ", "correct_text": "      ----------------        ----------------\r\n      | KeyPackage   |    0..1| DeviceInfo   |\r\n      |--------------|--------|--------------|\r\n      |              |--      | SerialNo     |\r\n      ----------------  |     | Manufacturer |\r\n              |         |     | ....         |\r\n              |         |     ----------------\r\n ", "notes": "Figure 1 mentions a DeviceInfo field called \"SerialNumber\" however it should be \"SerialNo\".", "submit_date": "2012-09-25", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3365", "doc-id": "RFC2911", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.2.2", "orig_text": "4.1.2.2 'nameWithLanguage'\r\n\r\n   The 'nameWithLanguage' attribute syntax is a compound attribute\r\n   syntax consisting of two parts: a 'nameWithoutLanguage' part encoded\r\n   in a maximum of 1023 (MAX) octets plus an additional", "correct_text": "4.1.2.2 'nameWithLanguage'\r\n\r\n   The 'nameWithLanguage' attribute syntax is a compound attribute\r\n   syntax consisting of two parts: a 'nameWithoutLanguage' part (see\r\n   Section 4.1.2.1) plus an additional\r\n", "notes": "The maximum length of the nameWithoutLanguage value (section 4.1.2.1) is 255 octets, not 1023.  Better to just do it by reference, rather than by repeating the information.", "submit_date": "2012-09-25", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3425", "doc-id": "RFC5036", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "The specification assigns type values for related messages, such as\r\nthe Label messages, from of a contiguous block in the 16-bit message\r\ntype number space.", "correct_text": "The specification assigns type values for related messages, such as\r\nthe Label messages, from a contiguous block in the 16-bit message\r\ntype number space.", "notes": "\"from of a contiguous block\" changed to \"from a contiguous block\"", "submit_date": "2012-12-08", "submitter_name": "Jeff Wheeler", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3426", "doc-id": "RFC4086", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2.1", "orig_text": "In the subsections below, the HMAC hash construct is simply referred\r\nto as HMAC but, of course, a particular standard SHA function must be\r\nselected in an particular use.\r\n", "correct_text": "In the subsections below, the HMAC hash construct is simply referred\r\nto as HMAC but, of course, a particular standard SHA function must be \r\nselected in a particular use.", "notes": "a grammatical nit", "submit_date": "2012-12-10", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3325", "doc-id": "RFC6266", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "     content-disposition = \"Content-Disposition\" \":\"\r\n                            disposition-type *( \";\" disposition-parm )\r\n\r\n     disposition-type    = \"inline\" | \"attachment\" | disp-ext-type\r\n                         ; case-insensitive\r\n     disp-ext-type       = token\r\n\r\n     disposition-parm    = filename-parm | disp-ext-parm\r\n\r\n     filename-parm       = \"filename\" \"=\" value\r\n                         | \"filename*\" \"=\" ext-value\r\n\r\n     disp-ext-parm       = token \"=\" value\r\n                         | ext-token \"=\" ext-value\r\n     ext-token           = <the characters in token, followed by \"*\">\r\n\r\n   Defined in [RFC2616]:\r\n\r\n     token         = <token, defined in [RFC2616], Section 2.2>\r\n     quoted-string = <quoted-string, defined in [RFC2616], Section 2.2>\r\n     value         = <value, defined in [RFC2616], Section 3.6>\r\n                   ; token | quoted-string", "correct_text": "     content-disposition = \"Content-Disposition\" \":\"\r\n                            disposition-type *( \";\" disposition-parm )\r\n\r\n     disposition-type    = \"inline\" / \"attachment\" / disp-ext-type\r\n                         ; case-insensitive\r\n     disp-ext-type       = token\r\n\r\n     disposition-parm    = filename-parm / disp-ext-parm\r\n\r\n     filename-parm       = \"filename\" \"=\" value\r\n                         / \"filename*\" \"=\" ext-value\r\n\r\n     disp-ext-parm       = token \"=\" value\r\n                         / ext-token \"=\" ext-value\r\n     ext-token           = <the characters in token, followed by \"*\">\r\n\r\n   Defined in [RFC2616]:\r\n\r\n     token         = <token, defined in [RFC2616], Section 2.2>\r\n     quoted-string = <quoted-string, defined in [RFC2616], Section 2.2>\r\n     value         = <value, defined in [RFC2616], Section 3.6>\r\n                   ; token / quoted-string", "notes": "The grammar in the original text uses \"|\" to express alternation, but I think that only \"/\" is valid according to RFC 5234\r\n\r\nVerifier notes: The grammar in 6266 is from RFC 2616, not from 5234.  6266 is correct as it stands.\n --VERIFIER NOTES-- \n   The grammar in 6266 is from RFC 2616, not from 5234.  This text is correct as it stands.", "submit_date": "2012-08-18", "submitter_name": "Jack Bates", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3326", "doc-id": "RFC6576", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.", "orig_text": "<none, this is an omission>", "correct_text": "New Section 3.7  Errata Evaluation\r\n\r\nThe process of evaluating each metric RFC MUST include an examination of the\r\ncurrent Errata for possible inclusion in the revised text.", "notes": "This omission pointed out by Brian Carpenter", "submit_date": "2012-08-20", "submitter_name": "Al Morton", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3327", "doc-id": "RFC5389", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "15.3", "orig_text": "   The USERNAME attribute is used for message integrity.  It identifies\r\n   the username and password combination used in the message-integrity\r\n   check.", "correct_text": "", "notes": "There is no explanation or description as to where this \"password\" comes from.  The statement indicates that the password is also part of the username field but that may not actually be true according to additional research I conducted and other portions of the specification.\r\n\r\nIf the password is part of this field than it should be explicitly noted how the two values are concatenated.  If this is not accurate, than the \"and password combination\" portion should be removed.\n --VERIFIER NOTES-- \nBased on BEHAVE mailing list discussion, other sections of the document (e.g. section 10) make this pretty clear, and there does not seem to be any need for a change or correction to the document.\r\n   ", "submit_date": "2012-08-20", "submitter_name": "Todd Herman", "verifier_id": "", "verifier_name": "Wes Eddy", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3328", "doc-id": "RFC5849", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.12.", "orig_text": "Those designing additional signature methods, should evaluated \r\nthe compatibility of the signature base string with their \r\nsecurity requirements.", "correct_text": "Those designing additional signature methods should evaluate \r\nthe compatibility of the signature base string with their \r\nsecurity requirements.", "notes": "Remove comma after \"methods\" and change \"evaluated\" to \"evaluate\".", "submit_date": "2012-08-21", "submitter_name": "Peter Day", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3329", "doc-id": "RFC4006", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.6.2", "orig_text": "\" Note that the credit-control server may already have initiated the\r\nabove-described process for the first interrogation. However, the\r\nuser's account might be empty when this first interrogation is\r\nperformed. In this case, the subscriber can be offered a chance to\r\nreplenish the account and continue the service. The credit-control\r\nclient receives a Credit-Control-Answer or service specific\r\nauthorization answer with the Final-Unit-Indication and Validity-Time\r\nAVPs but no Granted-Service-Unit. It immediately starts the graceful\r\nservice termination without sending any message to the server. An\r\nexample of this case is illustrated in Appendix A.\"", "correct_text": "\" Note that the credit-control server may already have initiated the\r\nabove-described process for the first interrogation. However, the\r\nuser's account might be empty when this first interrogation is\r\nperformed. In this case, the subscriber can be offered a chance to\r\nreplenish the account and continue the service. The credit-control\r\nclient receives a Credit-Control-Answer or service specific\r\nauthorization answer with the Final-Unit-Indication and Validity-Time\r\nAVPs but no Granted-Service-Unit AVP. It immediately starts the graceful\r\nservice termination without sending any message to the server. An\r\nexample of this case is illustrated in Appendix A.\"", "notes": "In the sentence \"The credit-control\r\nclient receives a Credit-Control-Answer or service specific\r\nauthorization answer with the Final-Unit-Indication and Validity-Time\r\nAVPs but no Granted-Service-Unit.\" it is important that we add the letters \"AVP\" after Granted-Service-Units as it is not clear whether the sentence refers to \"Not sending Granted-Service-Unit AVP at all\" or \"sending GSU=0 (Granted-Service-Unit AVP with value 0\".\r\n\r\nDifferent OCS vendors interpret the sentence above in a different way, some do not send the Granted-Service-Unit AVP at all, while some others send the Granted_Service-Unit=0. And this causes problem in the call scenario where FUI+Redirect is sent together with GSU=0. This causes the call to enter a loop and terminate with an error.", "submit_date": "2012-08-23", "submitter_name": "Kiran Jadhav", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3384", "doc-id": "RFC6751", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.5.3", "orig_text": "CR-2 IPv6/IPv4 PACKET FROM A HOST OF THE SAME SITE\r\n \r\n    <figure omitted>\r\n\r\nIf ALL the following conditions are satisfied (i.e., the packet comes\r\nfrom a 6a44 client of the same site), the 6a44 client MUST\r\ndecapsulate the inner packet and treat it as a received IPv6 packet:\r\n(1) the IPv4 packet contains a complete UDP datagram (protocol = 17,\r\noffset = 0, more-fragment bit = 0); (2) both ports of the UDP\r\ndatagram are the 6a44 port, and the UDP payload is an IPv6 packet\r\n(UDP length of at least 40 octets, version = 6); (3) the IPv6 source\r\naddress is one of the same site (the first 80 bits match those of the\r\n6a44-client IPv6 address; (4) its last 32 bits are equal to the IPv4\r\nsource address; (5) the IPv6 destination address is the 6a44-client\r\nIPv6 address.\r\n", "correct_text": "CR-2 IPv6/IPv4 PACKET FROM A HOST OF THE SAME SITE\r\n \r\n    <figure omitted>\r\n\r\nIf ALL the following conditions are satisfied (i.e., the packet comes\r\nfrom a 6a44 client of the same site), the 6a44 client MUST\r\ndecapsulate the inner packet and treat it as a received IPv6 packet:\r\n(1) the IPv4 packet contains a complete IPv6 packet (protocol = 41,\r\noffset = 0, more-fragment bit = 0); (2) the IPv6 source\r\naddress is one of the same site (the first 80 bits match those of the\r\n6a44-client IPv6 address); (3) its last 32 bits are equal to the IPv4\r\nsource address and the IPv4 source address starts with the IPv4 link\r\nprefix; (4) the IPv6 destination address is the 6a44-client\r\nIPv6 address; (5) its last 32 bits are equal to the IPv4 destination\r\naddress.\r\n", "notes": "Bullet (2) in the original text has to be discarded because UDP is not used for IPv6 encapsulation in the case described by CR-2. The following bullet numbers got decremented by 1. Bullets (1) and (2)-(4) (after renumbering) were changed and bullet (5) was added taking information from CT-2 in section 6.5.2.\r\n\r\nThanks to Andreas for finding this.\r\nIn CR-2 of page 21 the text is inconsistent with the figure, which is right.\r\nThe proposed correction does eliminate this bug.\r\n", "submit_date": "2012-10-18", "submitter_name": "Andreas Cudok", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3427", "doc-id": "RFC4086", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2.1.1", "orig_text": "In the following sections, the notation give below is used:", "correct_text": "In the following sections, the notation given below is used:", "notes": "a grammatical nit", "submit_date": "2012-12-10", "submitter_name": "Tony Hansen", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4963", "doc-id": "RFC7049", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.9", "orig_text": "   same CBOR output, the following four rules would suffice:\r\n\r\n   o  Integers must be as small as possible.\r\n\r\n      *  0 to 23 and -1 to -24 must be expressed in the same byte as the\r\n         major type;\r\n\r\n      *  24 to 255 and -25 to -256 must be expressed only with an\r\n         additional uint8_t;\r\n\r\n      *  256 to 65535 and -257 to -65536 must be expressed only with an\r\n         additional uint16_t;\r\n\r\n      *  65536 to 4294967295 and -65537 to -4294967296 must be expressed\r\n         only with an additional uint32_t.\r\n\r\n   o  The expression of lengths in major types 2 through 5 must be as\r\n      short as possible.  The rules for these lengths follow the above\r\n      rule for integers.\r\n\r\n   o  The keys in every map must be sorted lowest value to highest.\r\n      Sorting is performed on the bytes of the representation of the key\r\n      data items without paying attention to the 3/5 bit splitting for\r\n      major types.  (Note that this rule allows maps that have keys of\r\n      different types, even though that is probably a bad practice that\r\n      could lead to errors in some canonicalization implementations.)\r\n      The sorting rules are:\r\n\r\n      *  If two keys have different lengths, the shorter one sorts\r\n         earlier;\r\n\r\n      *  If two keys have the same length, the one with the lower value\r\n         in (byte-wise) lexical order sorts earlier.\r\n\r\n   o  Indefinite-length items must be made into definite-length items.", "correct_text": "   same CBOR output, the following four rules would suffice:\r\n\r\n   1.  Integers must be as small as possible.\r\n\r\n      *  0 to 23 and -1 to -24 must be expressed in the same byte as the\r\n         major type;\r\n\r\n      *  24 to 255 and -25 to -256 must be expressed only with an\r\n         additional uint8_t;\r\n\r\n      *  256 to 65535 and -257 to -65536 must be expressed only with an\r\n         additional uint16_t;\r\n\r\n      *  65536 to 4294967295 and -65537 to -4294967296 must be expressed\r\n         only with an additional uint32_t.\r\n\r\n   2. The expression of lengths in major types 2 through 5 must be as\r\n      short as possible.  The rules for these lengths follow the above\r\n      rule for integers.\r\n\r\n   3. The expression of the tag in major type 6 must be as short as \r\n      possible.  The rules for the tag value follow the above rule for\r\n      integers.\r\n\r\n   4. The expression of a simple type must be as short as possible. The \r\n      rules for simple types follow the above rules for integers.\r\n\r\n   5. Indefinite-length items must be made into definite-length items.\r\n\r\n   6. The keys in every map must be sorted lowest value to highest.\r\n      Sorting is performed byte-for-byte on the binary representation\r\n      of the key data items, without restrictions on keys having a \r\n      common major/minor type.\r\n\r\n      If two keys of differing binary lengths are compared, the item \r\n      with the shortest length sorts first.\r\n\r\n      Note that this rule allows maps to have keys of different major \r\n      types, even though that may be considered a bad practice that\r\n      could lead to errors in some canonicalization implementations. \r\n      For example, negative integers may binary sort out of order\r\n      with respect to positive integers.\r\n\r\n", "notes": "Several recommended changes, some editorial some technical:\r\n\r\n- The items are numbered to indicate an appropriate order. This is recommended because converting items to minimal size and making indefinite-length items into definite length must be done before sorting map entries\r\n\r\n- Rules were added for reducing the size of tags (major type 6) and simple types (major type 7).\r\n\r\n- Within the sorting section for map entries:\r\n  - The original comment about 3/5 bit splitting was unclear, whether it was implying some transform was necessary before sorting the items. This was reworked to indicate that the keys were sorted by binary representation.\r\n  - The quoted note about mixed types is made a non-quoted comment. An example is given of negative and positive integers.\n --VERIFIER NOTES-- \n   This report has been rejected because this is a change in documented behavior\r\nthat would require working groupconsensus.  That said, this was taken into account\r\nby the working group during the production of the updated version of RFC 7049.", "submit_date": "2017-03-12", "submitter_name": "David Waite", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-07-17 22:07:50"}, {"errata_id": "3330", "doc-id": "RFC3986", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "fragment      = *( pchar / \"/\" / \"?\" )", "correct_text": "fragment      = *( pchar / \"/\" / \"?\" / \"#\" )", "notes": "Appendix B's regex doesn't fail with this correction. Additionally, this gives freedom to media type designers. Specifically, the ((path?),(query?),(fragment?)) subsyntax could be reused in hypermedia type design as the \"?\" delimiter transitions path => query and the \"#\" delimiter transitions query => fragment. It also follows the pattern:\r\npath         = *( pchar / \"/\" )\r\nquery         = *( pchar / \"/\" / \"?\" )\r\nfragment      = *( pchar / \"/\" / \"?\" / \"#\" )\n --VERIFIER NOTES-- \nThis is something that should be looked at further, but it is not an error in the spec and is unlikely to be a direct change we'd make in a revision of the spec.\r\n\r\nSome applications at the time the specification was written parsed the fragment from left to right, and others parsed from right to left, which means they would get different results if \"#\" were allowed inside of a fragment.  That's why it was not allowed in the ABNF.  It's possible that situation has improved in the years since, but it would be difficult to test so many implementations.  Deciding the right way to handle this goes beyond what can be handled by an erratum.", "submit_date": "2012-08-29", "submitter_name": "David Sheets", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3331", "doc-id": "RFC5741", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.2", "orig_text": "In one place:\r\n\r\n   \"Suggested initial text, for current streams, is provided below.\"\r\n\r\nIn another place:\r\n\r\n   \"The text that follows is stream dependent -- these are suggested\r\n   initial values and may be updated by stream definition document\r\n   updates.\"", "correct_text": "In the first instance:\r\n   \"Initial mandatory text, for current streams, is provided below.\"\r\n\r\nIn the second instance:\r\n   \"The text that follows is stream dependent -- these are the initial\r\n   mandatory text values.  These stream-dependent mandatory text values \r\n   MAY be updated by stream definition document updates.  This text \r\n   MUST NOT be revised or expanded on a document-by-document basis.\"\r\n\r\n", "notes": "Although parts of RFC-5741 use RFC-2119 language (\"must\", \"should\", \"may\") in a very clear way, Section 3.2.2 uses ambiguous phrasing (\"suggested\") and  recently has been interpreted in different ways by different people (all of whom are experienced IETF/IRTF/RFC-Editor people).\r\n\r\nLeslie Daigle sent a note to the relevant folks that clarified the intent of this sub-section of this RFC.  Her note read, in part:\r\n%\r\n% The expectation, when writing RFC5741, was that the boilerplate was fixed.\r\n% The \"suggested text\" connotations in the document were meant to indicate \r\n% that the boilerplate might be updated in the stream definition itself, \r\n% not on a document-by-document basis.\r\n\r\nThe primary confusing/problematic sentences from RFC-5741 are copied and pasted separately into \"Original Text\" in this errata submission.  Candidate edited sentences, intended to be consistent with Leslie's clarification of the authors' intended meaning, are provided in \"Corrected Text\", but some other editorial correction might well be better/clearer.  \r\n\r\nThe primary goal of this erratum is to help ensure that any future revisions of RFC-5741, and also any future revisions of the closely related stream-dependent publication documents, are more clear about the fixed nature of \"Status of this Memo\" text.", "submit_date": "2012-08-30", "submitter_name": "RJ Atkinson", "verifier_id": "", "verifier_name": "IAB-Chair", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3332", "doc-id": "RFC6603", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "   Any prefix excluded from the delegated prefix MUST be contained in\r\n   OPTION_PD_EXCLUDE options within the corresponding OPTION_IAPREFIX.", "correct_text": "   Any prefix excluded from the delegated prefix MUST be contained in\r\n   OPTION_PD_EXCLUDE option within the corresponding OPTION_IAPREFIX.", "notes": "As per this specification OPTION_PD_EXCLUDE option is used to exclude exactly one prefix from a delegated prefix. So as per this specification only one instance of OPTION_PD_EXCLUDE option can be present within OPTION_IAPREFIX.", "submit_date": "2012-09-01", "submitter_name": "Gaurav Halwasia", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3333", "doc-id": "RFC5070", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "As this report involves a number of sections, original texts \r\nare also referred to in the Corrected Text below.\r\n", "correct_text": "#1, IncidentID includes a default value for the restriction attribute of \"default\" in the schema.  The specification description is updated as follows to correct the discrepancy.\r\nSection 3.3, IncidentID:\r\nChange from:\r\n\"  restriction\r\n      Optional.  ENUM.  This attribute has been defined in Section 3.2.\"\r\nTo:\r\n\"  restriction\r\n      Optional.  ENUM.  This attribute has been defined in Section 3.2.\r\n      The default value is \"public\".\r\n\r\n\r\n#2, In section 3.5, the UML diagram does not match the text description or schema for the minOccurs value.  It should be set to \"1\".  The diagram should be changed from:\r\n\"        +------------------+\r\n         | RelatedActivity  |\r\n         +------------------+\r\n         | ENUM restriction |<>--{0..*}--[ IncidentID ]\r\n         |                  |<>--{0..*}--[ URL        ]\r\n         +------------------+\r\n\r\n                      Figure 5: RelatedActivity Class\"\r\nTo:\r\n\r\n\"        +------------------+\r\n         | RelatedActivity  |\r\n         +------------------+\r\n         | ENUM restriction |<>--{1..*}--[ IncidentID ]\r\n         |                  |<>--{1..*}--[ URL        ]\r\n         +------------------+\r\n\r\n                      Figure 5: RelatedActivity Class\"\r\n\r\n#3, Section 3.7.1, lists the attribute \"registry\" as \"Required.\"  The default value is not specified in the schema as local, therefore the description is updated to match.  To match the schema, the definition is changed as follows:\r\nFrom: \r\n\"   registry\r\n      Required.  ENUM.  The database to which the handle belongs.  The\r\n      default value is 'local'.  The possible values are:\"\r\nTo:\r\n\"   registry\r\n      Optional.  ENUM.  The database to which the handle belongs.\r\n      The possible values are:\"\r\n\r\n#4, Section 3.7.2, PostalAddress Class leverages the schema definition for MLStringType to include the \"lang\" attribute.  The MLStringType has this attribute as Optional.  The specification definition is updated as follows to correct the issue.\r\nChange from: \r\n\"   lang\r\n      Required.  ENUM.  A valid language code per RFC 4646 [7]\r\n      constrained by the definition of \"xs:language\".  The\r\n      interpretation of this code is described in Section 6.\"\r\nTo:\r\n\"   lang\r\n      Optional.  ENUM.  A valid language code per RFC 4646 [7]\r\n      constrained by the definition of \"xs:language\".  The\r\n      interpretation of this code is described in Section 6.\"\r\n\r\n#5, Section 3.11, the \"restriction\" attribute of the History Class includes a default value of \"default\" in the schema.  As such, the specification definition is updated as follows.\r\nChange from:\r\n\"   restriction\r\n      Optional.  ENUM.  This attribute is defined in Section 3.2.\"\r\nTo:\r\n\"   restriction\r\n      Optional.  ENUM.  This attribute is defined in Section 3.2.\r\n      The default value is \"default\".\r\n\r\n#6, Section 3.13, the \"restriction\" attribute of the Expectation Class includes a default value of \"default\" in the schema.  As such, the specification definition is updated as follows.\r\nChange from:\r\n\"   restriction\r\n      Optional.  ENUM.  This attribute is defined in Section 3.2.\"\r\nTo:\r\n\"   restriction\r\n      Optional.  ENUM.  This attribute is defined in Section 3.2.\r\n      The default value is \"default\".\r\n\r\n#7, Section 3.13, the \"action\" attribute of the Expectation Class includes a default value of \"other\" in the schema.  As such, the specification definition is updated as follows.\r\nChange from:\r\n\"   action\r\n      Optional.  ENUM.  Classifies the type of action requested.  This\r\n      attribute is an enumerated list with no default value.\"\r\nTo:\r\n\"   action\r\n      Optional.  ENUM.  Classifies the type of action requested.  This\r\n      attribute is an enumerated list with a default value of \"other\".\"\r\n\r\n\r\n#8, removed - placeholder to retain original numbering\r\n\r\n#9, Section 3.10, a default value is specified for the \"occurrence\" attribute specification definition, but is not included in the schema.  The text in the specification is removed as follows to correct the discrepancy.\r\nChange from:\r\n\"   occurrence\r\n      Optional.  ENUM.  Specifies whether the assessment is describing\r\n      actual or potential outcomes.  The default is \"actual\" and is\r\n      assumed if not specified.\"\r\nTo:\r\n\"   occurrence\r\n      Optional.  ENUM.  Specifies whether the assessment is describing\r\n      actual or potential outcomes.\"\r\n\r\n\r\n#10, Section 3.10.1, Impact Class leverages the schema definition for MLStringType to include the \"lang\" attribute.  The MLStringType has this attribute as Optional.  The specification definition is updated as follows to correct the issue.\r\nChange from: \r\n\"   lang\r\n      Required.  ENUM.  A valid language code per RFC 4646 [7]\r\n      constrained by the definition of \"xs:language\".  The\r\n      interpretation of this code is described in Section 6.\"\r\nTo:\r\n\"   lang\r\n      Optional.  ENUM.  A valid language code per RFC 4646 [7]\r\n      constrained by the definition of \"xs:language\".  The\r\n      interpretation of this code is described in Section 6.\"\r\n\r\n#11, Section 3.10.1, Impact Class definition for the attribute type requires updating to match the schema listing of this attribute as \"Optional\".  The attribute includes a default value in the schema that should match the specification text.\r\nChange from:\r\n\"   type\r\n      Required.  ENUM.  Classifies the malicious activity into incident\r\n      categories.  The permitted values are shown below.  The default\r\n      value is \"other\".\"\r\nTo:\r\n\"   type\r\n      Optional.  ENUM.  Classifies the malicious activity into incident\r\n      categories.  The permitted values are shown below.  The default\r\n      value is \"unknown\".\"\r\n\r\n\r\n#12, Section 3.10.2, TimeImpact Class is inconsistent with the schema definition for the \"duration\" attribute.  The specification definition is updated as follows to resolve the issue.\r\nChange from:\r\n\"   duration\r\n      Required.  ENUM.  Defines a unit of time, that when combined with\r\n      the metric attribute, fully describes a metric of impact that will\r\n      be conveyed in the element content.  The permitted values are\r\n      shown below.  The default value is \"hour\".\"\r\nTo:\r\n\"   duration\r\n      Optional.  ENUM.  Defines a unit of time, that when combined with\r\n      the metric attribute, fully describes a metric of impact that will\r\n      be conveyed in the element content.  The permitted values are\r\n      shown below.  The default value is \"hour\".\"\r\n\r\n#13, Section 3.10.3, MonetaryImpact Class: \"currency\" attribute is inconsistent with the schema and the definition is updated as follows to correct the issue.\r\nChange from:\r\n\"   currency\r\n      Required.  STRING.  Defines the currency in which the monetary\r\n      impact is expressed.  The permitted values are defined in ISO\r\n      4217:2001, Codes for the representation of currencies and funds\r\n      [14].  There is no default value.\"\r\nTo:\r\n\"   currency\r\n      Optional.  STRING.  Defines the currency in which the monetary\r\n      impact is expressed.  The permitted values are defined in ISO\r\n      4217:2001, Codes for the representation of currencies and funds\r\n      [14].  There is no default value.\"\r\n\r\n\r\n\r\n#14, Section 3.10.4 Confidence Class needs a definition for the enumeration value of \"unknown\" to be consistent with the schema.\r\nChange from:\r\n\"   rating\r\n      Required.  ENUM.  A rating of the analytical validity of the\r\n      specified Assessment.  The permitted values are shown below.\r\n      There is no default value.\r\n\r\n      1.  low.  Low confidence in the validity.\r\n\r\n      2.  medium.  Medium confidence in the validity.\r\n\r\n      3.  high.  High confidence in the validity.\r\n\r\n      4.  numeric.  The element content contains a number that conveys\r\n          the confidence of the data.  The semantics of this number\r\n          outside the scope of this specification.\"\r\nTo:\r\n\"   rating\r\n      Required.  ENUM.  A rating of the analytical validity of the\r\n      specified Assessment.  The permitted values are shown below.\r\n      There is no default value.\r\n\r\n      1.  low.  Low confidence in the validity.\r\n\r\n      2.  medium.  Medium confidence in the validity.\r\n\r\n      3.  high.  High confidence in the validity.\r\n\r\n      4.  numeric.  The element content contains a number that conveys\r\n          the confidence of the data.  The semantics of this number\r\n          outside the scope of this specification.\r\n\r\n      5. unknown.  The confidence rating value is not known.\"\r\n\r\n#15, Section 3.12, in the EventData Class, the \"restriction\" attribute includes a default value of \"default\" in the schema.  As such, the specification definition is updated as follows.\r\nChange from:\r\n\"   restriction\r\n      Optional.  ENUM.  This attribute is defined in Section 3.2.\"\r\nTo:\r\n\"   restriction\r\n      Optional.  ENUM.  This attribute is defined in Section 3.2.\r\n      The default value is \"default\".\r\n\r\n#16, Section 3.15 System Class requires an update to the specification description to match the UML and schema definition for the Operating System\" element as follows.\r\nChange from:\r\n\"   OperatingSystem\r\n      Zero or one.  The operating system running on the system.\"\r\nTo:\r\n\"   OperatingSystem\r\n      Zero or more.  The operating system running on the system.\"\r\n\r\n#17, Section 3.15, in the System Class, the attribute \"category\" is listed in the schema as Optional, so the definition in the specification requires updating as follows.\r\nChange from:\r\n\"   category\r\n      Required.  ENUM.  Classifies the role the host or network played\r\n      in the incident.  The possible values are:\"\r\nTo:\r\n\"   category\r\n      Optional.  ENUM.  Classifies the role the host or network played\r\n      in the incident.  The possible values are:\"\r\n\r\nFor #18, Section 3.16.2, in the Address Class, the attribute \"category\" is listed in the schema as Optional, so the definition in the specification requires updating as follows.\r\nChange from:\r\n\"   category\r\n      Required.  ENUM.  Classifies the role the host or network played\r\n      in the incident.  The possible values are:\"\r\nTo:\r\n\"   category\r\n      Optional.  ENUM.  Classifies the role the host or network played\r\n      in the incident.  The possible values are:\"\r\n\r\nFor #19, Section 3.16.3, NodeRole Class leverages the schema definition for MLStringType to include the \"lang\" attribute.  The MLStringType has this attribute as Optional.  The specification definition is updated as follows to correct the issue.\r\nChange from: \r\n\"   lang\r\n      Required.  ENUM.  A valid language code per RFC 4646 [7]\r\n      constrained by the definition of \"xs:language\".  The\r\n      interpretation of this code is described in Section 6.\"\r\nTo:\r\n\"   lang\r\n      Optional.  ENUM.  A valid language code per RFC 4646 [7]\r\n      constrained by the definition of \"xs:language\".  The\r\n      interpretation of this code is described in Section 6.\"\r\n\r\n\r\n#20, Section 3.17 the Service Class attribute of \"Application\" specification description does not match the UML or schema.  The following update corrects the issue.\r\nChange from:\r\n\"   Application\r\n      Zero or more.  The application bound to the specified Port or\r\n      Portlist.\"\r\nTo:\r\n\"   Application\r\n      Zero or one.  The application bound to the specified Port or\r\n      Portlist.\"\r\n\r\n#21, Section 3.17 Service Class, the UML diagram and text does not match the schema for the ProtoField element.\r\nChange from:\r\n\"   ProtoFlags\r\n      Zero or one.  INTEGER.  A layer-4 protocol specific flag field.\"\r\nTo:\r\n\"   ProtoField\r\n      Zero or one.  INTEGER.  A layer-4 protocol specific flag field.\"\r\nAND update the UML diagram from:\r\n\"  +---------------------+\r\n   | Service             |\r\n   +---------------------+\r\n   | INTEGER ip_protocol |<>--{0..1}--[ Port        ]\r\n   |                     |<>--{0..1}--[ Portlist    ]\r\n   |                     |<>--{0..1}--[ ProtoCode   ]\r\n   |                     |<>--{0..1}--[ ProtoType   ]\r\n   |                     |<>--{0..1}--[ ProtoFlags  ]\r\n   |                     |<>--{0..1}--[ Application ]\r\n   +---------------------+\r\n\r\n                       Figure 31: The Service Class\"\r\nTo:\r\n\"  +---------------------+\r\n   | Service             |\r\n   +---------------------+\r\n   | INTEGER ip_protocol |<>--{0..1}--[ Port        ]\r\n   |                     |<>--{0..1}--[ Portlist    ]\r\n   |                     |<>--{0..1}--[ ProtoCode   ]\r\n   |                     |<>--{0..1}--[ ProtoType   ]\r\n   |                     |<>--{0..1}--[ ProtoField  ]\r\n   |                     |<>--{0..1}--[ Application ]\r\n   +---------------------+\r\n\r\n                       Figure 31: The Service Class\"\r\n\r\n#22, Section 3.19.1 RecordData Class: the AdditionalData element's specification definition does not match the UML diagram or the schema and is updated as follows to correct the issue.\r\nChange from:\r\n\"   AdditionalData\r\n      Zero or one.  An extension mechanism for data not explicitly\r\n      represented in the data model.\"\r\nTo:\r\n\"   AdditionalData\r\n      Zero or more.  An extension mechanism for data not explicitly\r\n      represented in the data model.\"\r\n\r\n#23, Section 3.19.2, page 53: the definition of offsetunit should be changed to match the schema from:\r\n\"   offsetunit\r\n      Optional.  ENUM.  Describes the units of the offset attribute.\r\n      The default is \"line\".\r\n\r\n      1.  line.  Offset is a count of lines.\r\n\r\n      2.  binary.  Offset is a count of bytes.\r\n\r\n      3.  ext-value.  An escape value used to extend this attribute.\r\n          See Section 5.1.\"\r\n\r\nTo:\r\n\r\n\"   offsetunit\r\n      Optional.  ENUM.  Describes the units of the offset attribute.\r\n      The default is \"line\".\r\n\r\n      1.  line.  Offset is a count of lines.\r\n\r\n      2.  byte.  Offset is a count of bytes.\r\n\r\n      3.  ext-value.  An escape value used to extend this attribute.\r\n          See Section 5.1.\"\r\n\r\n#24, Section 3.17.1 Application Class: for the definition for \"swid\", add \"default=\"0\"\" to the definition to match the schema.  \r\nChange from:\r\n\"    swid\r\n      Optional.  STRING.  An identifier that can be used to reference\r\n      this software.\"\r\n\r\nTo:\r\n\"   swid\r\n      Optional.  STRING.  An identifier that can be used to reference\r\n      this software, where the default value is \"0\".\"\r\n\r\n\r\n#25, Section 3.17.1 Application Class: the definition for the attribute \"configid\" requires updating to include a default value as is included in the schema.  \r\nChange from:\r\n\"   configid\r\n      Optional.  STRING.  An identifier that can be used to reference a\r\n      particular configuration of this software.\"\r\nTo:\r\n\"   configid\r\n      Optional.  STRING.  An identifier that can be used to reference a\r\n      particular configuration of this software, where the default value is \"0\".\"\r\n", "notes": "In each of the listed corrections, the schema is preferred as correct wherever possible for the updates provided.  The assumption is that most existing implementations would have preferred the schema definition over the text descriptions or UML diagrams.\r\n\r\nSPT: I removed #8 because it's a schema change and edited #17 at the request of the submitters.", "submit_date": "2012-09-02", "submitter_name": "Youki Kadobayashi", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3336", "doc-id": "RFC6710", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "   ; New \"clause\" that can be used in the Received header field\r\n   Pri  = CFWS \"PRIORITY\" FWS priority-value\r\n             ; Complies with the <Additional-Registered-Clauses>\r\n             ; non-terminal syntax from RFC 5321.\r\n", "correct_text": "   ; New \"clause\" that can be used in the Received header field\r\n   Pri  = CFWS \"priority\" FWS priority-value\r\n             ; Complies with the <Additional-Registered-Clauses>\r\n             ; non-terminal syntax from RFC 5321.\r\n", "notes": "All the subclauses of the \"Received:\" header in RFC 5321 are lowercase (\"from\", \"by\", \"via\", \"with\", \"id\", and \"for\" - in that order).  I suggest that \"PRIORITY\" also be lower cased (\"priority\") for consistency.\r\n\r\nAdditional note:  As this is the first additional clause, it obviously trails the others defined in RFC 5321 per the ABNF syntax found there.  However, all future additional clauses should indicate their placement relative to additional clauses added to the list before them (i.e. RFC 5321 does not specify an order for the additional clauses, but each individual future RFC that proposes them should).\r\n\r\n---------------------\r\nReviewer note:\r\nMinor editorial issues that won't cause confusion go into \"Hold for Document Update.\"  So let it be written; so let it be done.", "submit_date": "2012-09-06", "submitter_name": "D. Stussy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3337", "doc-id": "RFC6729", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "In Section 6, the \"state\" clause is added to the Additional-\r\n   Registered-Clauses IANA sub-registry.  The ABNF for this clause is:\r\n\r\n      State = CFWS \"state\" FWS queue-state-keyword [ \"/\" value ]\r\n...\r\n\r\n", "correct_text": "", "notes": "Clarification needed:  Does this \"state\" clause keyword place before, after, or in either order with the \"priority\" clause keyword specified in RFC 6710?  RFC 5321 does not specify an order for additional \"Received:\" header clauses defined after its publication.  The order of additional clauses may need to be defined for proper parsing to determine validity of messages for spam classification or determination of other subversive purposes (as invalid values may indicate bad messages).\r\n\r\n(See also the note filed in errata #1 filed for RFC 6710.)\n --VERIFIER NOTES-- \nRFC 5321 gives no indication that the order of clauses in the Additional-Registered-Clauses group matters, and, indeed, the order should not matter.  Each clause has a unique (registered) atom, and they can be parsed unambiguously from those.   ", "submit_date": "2012-09-06", "submitter_name": "D. Stussy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4456", "doc-id": "RFC1349", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "where type 1 entries result from the receipt of code 3 (or code 1)\r\nRedirects and type 2 entries result from the receipt of code 2 (or\r\ncode 0) Redirects.", "correct_text": "where type 1 entries result from the receipt of code 3 (or code 2)\r\nRedirects and type 2 entries result from the receipt of code 1 (or\r\ncode 0) Redirects.", "notes": "I think that original text has no sense, especially considering that routers MUST NOT send 0 and 2 Redirects, type 2 routing entries has no chance to occur. Sorry if I'm mistaking and not fully understand ideas behind RFC 1349\r\n=====\r\n(Alvaro Retana)  The report and correction are valid.  I did edit them for completeness.", "submit_date": "2015-08-26", "submitter_name": "Anton", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3341", "doc-id": "RFC6715", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "     +-------+------------------------+------------------------+\r\n     | Name- |                        |                        |\r\n     | space | Property               | Reference              |\r\n     +-------+------------------------+------------------------+\r\n     |       | EXPERTISE              | RFC 6715, Section 2.1  |\r\n     |       | HOBBY                  | RFC 6715, Section 2.2  |\r\n     |       | INTEREST               | RFC 6715, Section 2.3  |\r\n     |       | ORG-URI                | RFC 6715, Section 2.4  |\r\n     +-------+------------------------+------------------------+", "correct_text": "     +-------+------------------------+------------------------+\r\n     | Name- |                        |                        |\r\n     | space | Property               | Reference              |\r\n     +-------+------------------------+------------------------+\r\n     |       | EXPERTISE              | RFC 6715, Section 2.1  |\r\n     |       | HOBBY                  | RFC 6715, Section 2.2  |\r\n     |       | INTEREST               | RFC 6715, Section 2.3  |\r\n     |       | ORG-DIRECTORY          | RFC 6715, Section 2.4  |\r\n     +-------+------------------------+------------------------+", "notes": "The ORG-DIRECTORY property is incorrectly referred to as ORG-URI.", "submit_date": "2012-09-08", "submitter_name": "Michael Angstadt", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3342", "doc-id": "RFC6715", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Description:\r\n\r\nWhen a property is multi-valued, INDEX can be used to\u00a0indicate an ordering or sequence of the values. \u00a0INDEX\u00a0values must be strictly positive. \u00a0Zero is not allowed.", "correct_text": "Description:\r\n\r\nWhen a property is multi-valued, INDEX can be used to\u00a0indicate an ordering or sequence of the values. \u00a0INDEX\u00a0values must be strictly positive. \u00a0Zero is not allowed.\r\n\r\nIf an instance of a multi-valued property does not have an INDEX value, then it is included at the end of the ordered sequence, as if it had a very high INDEX value.\u00a0", "notes": "It is not clear how a list of properties should be sorted if some of them have INDEX parameters and others do not. \u00a0This errata submission proposes that properties without an INDEX parameter be pushed to the end of the sorted list, as if they had a very high INDEX value.\r\n\r\nFor example, the ordering of the following properties is very clear, since they all have INDEX parameters:\r\n\r\nINTEREST;INDEX=3:art\r\nINTEREST;INDEX=2:baseball\r\nINTEREST;INDEX=4:music\r\nINTEREST;INDEX=1:hockey\r\n\r\nThe above example would be sorted as follows:\r\n\r\nINTEREST;INDEX=1:hockey\r\nINTEREST;INDEX=2:baseball\r\nINTEREST;INDEX=3:art\r\nINTEREST;INDEX=4:music\r\n\r\nHowever, the spec does not provide guidance on how to sort a list of properties if some properties have INDEX parameters and others do not. \u00a0This errata submission suggests that the properties missing the INDEX parameter be pushed to the end of the sorted list. \u00a0For example:\r\n\r\nUnsorted:\r\n\r\nINTEREST:art\r\nINTEREST;INDEX=2:baseball\r\nINTEREST:music\r\nINTEREST;INDEX=1:hockey\r\n\r\nSorted:\r\n\r\nINTEREST;INDEX=1:hockey\r\nINTEREST;INDEX=2:baseball\r\nINTEREST:art\r\nINTEREST:music\r\n\r\n...OR...\r\n\r\nINTEREST;INDEX=1:hockey\r\nINTEREST;INDEX=2:baseball\r\nINTEREST:music\r\nINTEREST:art\r\n\r\nVerifier note:\r\nSomething like this was meant to be in the document, but was left out.\r\n", "submit_date": "2012-09-08", "submitter_name": "Michael Angstadt", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3343", "doc-id": "RFC6724", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.1", "orig_text": "Destination: 2001:db8:1::1\r\nCandidate Source Addresses: 2001:db8:3::1 or fe80::1\r\nResult: 2001:db8::1 (prefer appropriate scope)", "correct_text": "Destination: 2001:db8:1::1\r\nCandidate Source Addresses: 2001:db8:3::1 or fe80::1\r\nResult: 2001:db8:3::1 (prefer appropriate scope)", "notes": "2001:db8::1 is not even in the candidate set.", "submit_date": "2012-09-12", "submitter_name": "Stephane Bortzmeyer", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3344", "doc-id": "RFC6724", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "   Destination: 2001:db8:1::1\r\n   Candidate Source Addresses: 2001:db8:1::2 or 2001:db8:3::2\r\n   Result: 2001:db8:1:::2 (longest matching prefix)", "correct_text": "   Destination: 2001:db8:1::1\r\n   Candidate Source Addresses: 2001:db8:1::2 or 2001:db8:3::2\r\n   Result: 2001:db8:1::2 (longest matching prefix)", "notes": "Invalid IPv6 syntax", "submit_date": "2012-09-12", "submitter_name": "Stephane Bortzmeyer", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3345", "doc-id": "RFC5906", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": " Certificate exchange.[...]Completion of this exchange lights the VAL bit as described below.", "correct_text": "Certificate exchange.[...]Completion of this exchange lights the CERT bit as described below.", "notes": "", "submit_date": "2012-09-12", "submitter_name": "liyh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3346", "doc-id": "RFC5906", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "Identity exchange.[...] Completion of this exchange lights the IFF bit as described below.", "correct_text": "Identity exchange.[...] Completion of this exchange lights the VRFY bit as described below.", "notes": "", "submit_date": "2012-09-12", "submitter_name": "liyh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3347", "doc-id": "RFC5906", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "Cookie exchange.  The request includes the public key of the server.The response includes the server cookie encrypted with this key.", "correct_text": "I don't know.", "notes": "how to decrypt?\n --VERIFIER NOTES-- \nThe decryption is carried out with the private key.   ", "submit_date": "2012-09-12", "submitter_name": "liyh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3348", "doc-id": "RFC5906", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "Autokey exchange.[...]Completion of this exchange lights the AUT bit as described below.", "correct_text": "Autokey exchange.[...]Completion of this exchange lights the AUTO bit as described below.", "notes": "", "submit_date": "2012-09-12", "submitter_name": "liyh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3349", "doc-id": "RFC5906", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "Leapseconds exchange.  [...]Completion of this exchange lights the LPT bit as described below.", "correct_text": "Leapseconds exchange.  [...]Completion of this exchange lights the LEAP bit as described below.", "notes": "refer to 11.1", "submit_date": "2012-09-12", "submitter_name": "liyh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3356", "doc-id": "RFC6244", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2.3", "orig_text": "          augment /ospf:ospf/ospf:area/ospf:interfaces  {\r\n               leaf no-neighbor-down-notification {\r\n                   type empty;\r\n                   description \"Don't inform other protocols about\"\r\n                             + \" neighbor down events\";", "correct_text": "          augment /ospf:ospf/ospf:area/ospf:interface {\r\n               leaf no-neighbor-down-notification {\r\n                   type empty;\r\n                   description \"Don't inform other protocols about\"\r\n                             + \" neighbor down events\";", "notes": "Section 2.2.3\r\n For example, if the above OSPF configuration were the standard, a\r\n   vendor module may augment this with vendor-specific extensions.\r\n\r\n       module vendorx-ospf {\r\n           namespace \"http://vendorx.example.com/ospf\";\r\n           prefix vendorx;\r\n\r\n           import example-ospf {\r\n               prefix ospf;\r\n           }\r\n\r\n           augment /ospf:ospf/ospf:area/ospf:interfaces  {\r\n               leaf no-neighbor-down-notification {\r\n                   type empty;\r\n                   description \"Don't inform other protocols about\"\r\n                             + \" neighbor down events\";\r\n               }\r\n           }\r\n       }\r\n\r\nWhile the \"above OSPF configuration\" refers to interface and not interfaces\r\n\r\n   module example-ospf {\r\n           namespace \"http://example.org/netconf/ospf\";\r\n           prefix ospf;\r\n\r\n           import network-types {  // Access another module's def'ns\r\n               prefix nett;\r\n           }\r\n\r\n           container ospf {   // Declare the top-level tag\r\n               list area {    // Declare a list of \"area\" nodes\r\n                   key name;  // The key \"name\" identifies list members\r\n                   leaf name {\r\n                       type nett:area-id;\r\n                   }\r\n                   list interface {\r\n                       key name;\r\n                       leaf name {\r\n                           type nett:interface-name;\r\n                       }\r\n                       leaf priority {\r\n                           description \"Designated router priority\";\r\n                           type uint8;  // The type is a constraint on\r\n                                        // valid values for \"priority\".\r\n                       }\r\n                       leaf metric {\r\n                           type uint16 {\r\n                               range 1..65535;\r\n                           }\r\n                       }\r\n                       leaf dead-interval {\r\n                           units seconds;\r\n                           type uint16 {\r\n                               range 1..65535;\r\n                           }\r\n                       }\r\n                   }\r\n               }\r\n           }\r\n       }", "submit_date": "2012-09-17", "submitter_name": "Benoit Claise", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3350", "doc-id": "RFC5340", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7", "orig_text": "   o  Two Options bits, the \"R-bit\" and the \"V6-bit\", have been added to\r\n      the Options field for processing router-LSAs during the SPF\r\n      calculation (see Appendix A.2).  If the \"R-bit\" is clear, an OSPF\r\n      speaker can participate in OSPF topology distribution without\r\n      being used to forward transit traffic; this can be used in multi-\r\n      homed hosts that want to participate in the routing protocol.  The\r\n      V6-bit specializes the R-bit; if the V6-bit is clear, an OSPF\r\n      speaker can participate in OSPF topology distribution without\r\n      being used to forward IPv6 datagrams.  If the R-bit is set and the\r\n      V6-bit is clear, IPv6 datagrams are not forwarded but datagrams\r\n      belonging to another protocol family may be forwarded.\r\n", "correct_text": "   o  Two Options bits, the \"R-bit\" and the \"V6-bit\", have been added to\r\n      the Options field for processing router-LSAs during the SPF\r\n      calculation (see Appendix A.2).  If the \"R-bit\" is clear, an OSPF\r\n      speaker can participate in OSPF topology distribution without\r\n      being used to forward transit traffic; this can be used in multi-\r\n      homed hosts that want to participate in the routing protocol. An\r\n      Area Border Router MUST advertise a consistent R-bit setting in\r\n      its self-originated router-LSAs for all attached areas. \r\n      The V6-bit specializes the R-bit; if the V6-bit is clear, an OSPF\r\n      speaker can participate in OSPF topology distribution without\r\n      being used to forward IPv6 datagrams.  If the R-bit is set and the\r\n      V6-bit is clear, IPv6 datagrams are not forwarded but datagrams\r\n      belonging to another protocol family may be forwarded.\r\n", "notes": "This addresses a corner case.", "submit_date": "2012-09-12", "submitter_name": "Michael Barnes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3351", "doc-id": "RFC5340", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.3.4", "orig_text": "   o  Link-local addresses MUST never be advertised in inter-area-\r\n      prefix-LSAs.\r\n", "correct_text": "   o  Link-local addresses MUST never be advertised in inter-area-\r\n      prefix-LSAs.\r\n\r\n  o   If the router's router-LSA R-bit is clear, only IPv6 prefixes\r\n      associated with local interfaces MAY be advertised in\r\n      inter-area-prefix-LSAs. Non-local IPv6 prefixes, e.g., those \r\n      advertised by other routers and installed during the SPF computation,\r\n      MUST NOT be advertised in inter-area-prefixes-LSAs. \r\n", "notes": "", "submit_date": "2012-09-12", "submitter_name": "Michael Barnes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3352", "doc-id": "RFC5340", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.3.6", "orig_text": "   o  Link-local addresses can never be advertised in AS-external-LSAs.\r\n", "correct_text": "   o  Link-local addresses can never be advertised in AS-external-LSAs.\r\n\r\n   o  If the router's router-LSA R-bit is clear, only IPv6 prefixes\r\n      associated with local interfaces MAY be advertised in AS-external-LSAs.\r\n      Non-local IPv6 prefixes, e.g., those exported from other routing\r\n      protocols, MUST NOT be advertised in AS-external-LSAs. \r\n", "notes": "", "submit_date": "2012-09-12", "submitter_name": "Michael Barnes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3353", "doc-id": "RFC6704", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   The mechanism described in this document is vulnerable to a denial-\r\n   of-service (DoS) attack through flooding a client with bogus\r\n   FORCERENEW messages.  The calculations involved in authenticating the\r\n   bogus FORECERENEW messages may overwhelm the device on which the\r\n   client is running.\r\n", "correct_text": "   The mechanism described in this document is vulnerable to a denial-\r\n   of-service (DoS) attack through flooding a client with bogus\r\n   FORCERENEW messages.  The calculations involved in authenticating the\r\n   bogus FORCERENEW messages may overwhelm the device on which the\r\n   client is running.\r\n", "notes": "Spelling of \"FORECERENEW\" is incorrect. It should be \"FORCERENEW\"", "submit_date": "2012-09-14", "submitter_name": "Gaurav Halwasia", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3355", "doc-id": "RFC1459", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.1", "orig_text": "The <receiver> parameter may also me a host mask  (#mask)  or  server\r\n   mask  ($mask).  ", "correct_text": "The <receiver> parameter may also be a host mask  (#mask)  or  server\r\n   mask  ($mask).  ", "notes": "", "submit_date": "2012-09-15", "submitter_name": "Stephen Chavez", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3357", "doc-id": "RFC5340", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "C.7", "orig_text": "   Host IPv6 prefix\r\n      An IPv6 prefix belonging to the directly connected host.  This\r\n      must not be a valid IPv6 global prefix.", "correct_text": "   Host IPv6 prefix\r\n      An IPv6 prefix belonging to the directly connected host.  This\r\n      must be a valid IPv6 global prefix.\r\n", "notes": "http://www.ietf.org/mail-archive/web/ospf/current/msg06446.html", "submit_date": "2012-09-17", "submitter_name": "David Ward", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3358", "doc-id": "RFC3394", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "   3) Output the results.\r\n\r\n       Set C[0] = A[t]\r\n       For i = 1 to n\r\n           C[i] = R[t][i]", "correct_text": "   3) Output the results.\r\n\r\n       Set C[0] = A[t]\r\n       For i = 1 to n\r\n           C[i] = R[s][i], where s = 6n", "notes": "\n --VERIFIER NOTES-- \nAuthors and reporter have agreed this is incorrect and another errata will be submitted.   ", "submit_date": "2012-09-17", "submitter_name": "Dwayne Litzenberger", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3359", "doc-id": "RFC4458", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1", "orig_text": "    INVITE sip:voicemail@example.com;\\\r\n           target=sip:+15555551002%40example.com;user=phone;\\\r\n           cause=486  SIP/2.0\r\n", "correct_text": "    INVITE sip:voicemail@example.com;\\\r\n           target=sip:+15555551002%40example.com%3Buser=phone;\\\r\n           cause=486  SIP/2.0\r\n", "notes": "The \";user=phone\" characters should be part of the target parameter value.  The semicolon is not allowed in the pvalue syntax and must be escaped.\r\n\r\nThis same correction is needed in other sections as well: 6.2, 6.4.", "submit_date": "2012-09-19", "submitter_name": "Doug Sauder", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3360", "doc-id": "RFC2397", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "The \"data\" URL scheme", "correct_text": "The \"data\" URI scheme", "notes": "The text refers to \"URL\" throughout, but to be correct, these are actually URIs.\n --VERIFIER NOTES-- \n\"URI\"s are first documented in RFC 2396, which was developed at the same time as RFC 2397.  At the time the document that became 2397 was approved, \"URL\" was the correct term.  While it's correct that \"URI\" is the preferred term now, \"URL\" is also correct, and is the term that was in use when this document was written.  This is not an error in the document.", "submit_date": "2012-09-20", "submitter_name": "Lance E Sloan", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3361", "doc-id": "RFC3394", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "   3) Output the results.\r\n\r\n       Set C[0] = A[t]\r\n       For i = 1 to n\r\n           C[i] = R[t][i]\r\n", "correct_text": "   3) Output the results.\r\n\r\n       Set C[0] = A[s]\r\n       For i = 1 to n\r\n           C[i] = R[s][i]\r\n", "notes": "\n --VERIFIER NOTES-- \nThe two are the same.   ", "submit_date": "2012-09-20", "submitter_name": "Dwayne Litzenberger", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3366", "doc-id": "RFC4271", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "If a TcpConnectionFails event (Event 18) is received, the local\r\n      system:\r\n\r\n        - closes the BGP connection,\r\n\r\n        - restarts the ConnectRetryTimer,\r\n\r\n        - continues to listen for a connection that may be initiated by\r\n          the remote BGP peer, and\r\n\r\n        - changes its state to Active.", "correct_text": "If a TcpConnectionFails event (Event 18) is received, the local\r\n      system:\r\n\r\n        - closes the BGP connection,\r\n\r\n        - sets the HoldTimer to 0,\r\n\r\n        - restarts the ConnectRetryTimer,\r\n\r\n        - continues to listen for a connection that may be initiated by\r\n          the remote BGP peer, and\r\n\r\n        - changes its state to Active.", "notes": "HoldTimer should only be used to control time in between BGP packets. \r\nAlso in this case it can lead to case in ACTIVE state where HoldTimer expires before the ConnectRetryTimer leading to IDLE state.\n --VERIFIER NOTES-- \n   This represents a technical change to RFC4271 and is outside the scope of the errata system. The submitter is welcome to submit a draft proposing the change to RFC 4271 and work for consensus for the change in the IDR WG.", "submit_date": "2012-09-26", "submitter_name": "Shashank Tyagi", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3367", "doc-id": "RFC4861", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   Routers send out Router Advertisement messages periodically, or in\r\n   response to Router Solicitations.\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |     Type      |     Code      |          Checksum             |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     | Cur Hop Limit |M|O|  Reserved |       Router Lifetime         |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                         Reachable Time                        |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                          Retrans Timer                        |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |   Options ...\r\n     +-+-+-+-+-+-+-+-+-+-+-+-\r\n\r\n   IP Fields:\r\n\r\n      Source Address\r\n                     MUST be the link-local address assigned to the\r\n                     interface from which this message is sent.\r\n\r\n      Destination Address\r\n                     Typically the Source Address of an invoking Router\r\n                     Solicitation or the all-nodes multicast address.\r\n\r\n      Hop Limit      255\r\n\r\n   ICMP Fields:\r\n\r\n      Type           134\r\n\r\n      Code           0\r\n\r\n      Checksum       The ICMP checksum.  See [ICMPv6].\r\n\r\n      Cur Hop Limit  8-bit unsigned integer.  The default value that\r\n                     should be placed in the Hop Count field of the IP\r\n                     header for outgoing IP packets.  A value of zero\r\n                     means unspecified (by this router).\r\n\r\n      M              1-bit \"Managed address configuration\" flag.  When\r\n                     set, it indicates that addresses are available via\r\n                     Dynamic Host Configuration Protocol [DHCPv6].\r\n\r\n                     If the M flag is set, the O flag is redundant and\r\n                     can be ignored because DHCPv6 will return all\r\n                     available configuration information.\r\n\r\n      O              1-bit \"Other configuration\" flag.  When set, it\r\n                     indicates that other configuration information is\r\n                     available via DHCPv6.  Examples of such information\r\n                     are DNS-related information or information on other\r\n                     servers within the network.\r\n\r\n        Note: If neither M nor O flags are set, this indicates that no\r\n        information is available via DHCPv6.\r\n", "correct_text": "   Routers send out Router Advertisement messages periodically, or in\r\n   response to Router Solicitations.\r\n\r\n    0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |     Type      |     Code      |          Checksum             |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      | Cur Hop Limit |M|O|H|Prf|Resvd|       Router Lifetime         |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                         Reachable Time                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          Retrans Timer                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |   Options ...\r\n      +-+-+-+-+-+-+-+-+-+-+-+-\r\n\r\n\r\n   IP Fields:\r\n\r\n      Source Address\r\n                     MUST be the link-local address assigned to the\r\n                     interface from which this message is sent.\r\n\r\n      Destination Address\r\n                     Typically the Source Address of an invoking Router\r\n                     Solicitation or the all-nodes multicast address.\r\n\r\n      Hop Limit      255\r\n\r\n   ICMP Fields:\r\n\r\n      Type           134\r\n\r\n      Code           0\r\n\r\n      Checksum       The ICMP checksum.  See [ICMPv6].\r\n\r\n      Cur Hop Limit  8-bit unsigned integer.  The default value that\r\n                     should be placed in the Hop Count field of the IP\r\n                     header for outgoing IP packets.  A value of zero\r\n                     means unspecified (by this router).\r\n\r\n      M              1-bit \"Managed address configuration\" flag.  When\r\n                     set, it indicates that addresses are available via\r\n                     Dynamic Host Configuration Protocol [DHCPv6].\r\n\r\n                     If the M flag is set, the O flag is redundant and\r\n                     can be ignored because DHCPv6 will return all\r\n                     available configuration information.\r\n\r\n      O              1-bit \"Other configuration\" flag.  When set, it\r\n                     indicates that other configuration information is\r\n                     available via DHCPv6.  Examples of such information\r\n                     are DNS-related information or information on other\r\n                     servers within the network.\r\n\r\n      H\r\n\r\n                     The Home Agent (H) bit is set in a Router Advertisement  \r\n                     to indicate that the router sending this Router \r\n                     Advertisement is also functioning as a Mobile IPv6 \r\n                     home agent on this link. [RFC3775]\r\n\r\n        Prf \r\n                     2-bit default router preference, encoded as follows:\r\n\r\n                       01      High\r\n                       00      Medium (default)\r\n                       11      Low\r\n                       10      Reserved - MUST NOT be sent\r\n\r\n                     Indicates whether to prefer this router over other \r\n                    default routers.  If the Router Lifetime is zero, the\r\n                    preference value MUST be set to (00) by the\r\n                    sender and MUST be ignored by the receiver.  If the\r\n                    Reserved (10) value is received, the receiver MUST \r\n                    treat the value as if it were (00). [RFC4191]\r\n\r\n\r\n        Note: If neither M nor O flags are set, this indicates that no\r\n        information is available via DHCPv6.\r\n\r\n\r\n \r\n", "notes": "Contents of RFC 3775 and 4191 were not brought forward into RFC 4861\n --VERIFIER NOTES-- \nOBE   ", "submit_date": "2012-09-27", "submitter_name": "Ron Bonica", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3368", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1.3", "orig_text": "BEGIN:VCARD\r\nVERSION:4.0\r\nEMAIL;PID=4.2,5.1:jdoe@example.com\r\nCLIENTPIDMAP:1;urn:uuid:3eef374e-7179-4196-a914-27358c3e6527\r\nCLIENTPIDMAP:2;urn:uuid:42bcd5a7-1699-4514-87b4-056edf68e9cc\r\nEND:VCARD\r\n\r\nBEGIN:VCARD\r\nVERSION:4.0\r\nEMAIL;PID=5.1,5.2:john@example.com\r\nCLIENTPIDMAP:1;urn:uuid:0c75c629-6a8d-4d5e-a07f-1bb35846854d\r\nCLIENTPIDMAP:2;urn:uuid:3eef374e-7179-4196-a914-27358c3e6527\r\nEND:VCARD", "correct_text": "BEGIN:VCARD\r\nVERSION:4.0\r\nFN:J. Doe\r\nEMAIL;PID=4.2,5.1:jdoe@example.com\r\nCLIENTPIDMAP:1;urn:uuid:3eef374e-7179-4196-a914-27358c3e6527\r\nCLIENTPIDMAP:2;urn:uuid:42bcd5a7-1699-4514-87b4-056edf68e9cc\r\nEND:VCARD\r\n\r\nBEGIN:VCARD\r\nVERSION:4.0\r\nFN:J. Doe\r\nEMAIL;PID=5.1,5.2:john@example.com\r\nCLIENTPIDMAP:1;urn:uuid:0c75c629-6a8d-4d5e-a07f-1bb35846854d\r\nCLIENTPIDMAP:2;urn:uuid:3eef374e-7179-4196-a914-27358c3e6527\r\nEND:VCARD", "notes": "Section 6.2.1 states that \"[t]he [FN] property MUST be present in the vCard object.\"", "submit_date": "2012-10-01", "submitter_name": "Stefan Ganzer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3369", "doc-id": "RFC6030", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "   <Manufacturer>:  This element indicates the manufacturer of the\r\n      device.  Values for the <Manufacturer> element MUST be taken from\r\n      either [OATHMAN] prefixes (i.e., the left column) or from the IANA\r\n      Private Enterprise Number Registry [IANAPENREG], using the\r\n      Organization value.  When the value is taken from [OATHMAN],\r\n      \"oath.\"  MUST be prepended to the value (e.g., \"oath.<prefix value\r\n      from [OATHMAN]>\").  When the value is taken from [IANAPENREG],\r\n      \"iana.\"  MUST be prepended to the value (e.g., \"iana.<Organization\r\n      value from [IANAPENREG]>\").\r\n", "correct_text": "   <Manufacturer>:  This element indicates the manufacturer of the\r\n      device.  Values for the <Manufacturer> element MAY be taken from\r\n      either [OATHMAN] prefixes (i.e., the left column) or from the IANA\r\n      Private Enterprise Number Registry [IANAPENREG], using the\r\n      Organization value.  When the value is taken from [OATHMAN],\r\n      \"oath.\"  MUST be prepended to the value (e.g., \"oath.<prefix value\r\n      from [OATHMAN]>\").  When the value is taken from [IANAPENREG],\r\n      \"iana.\"  MUST be prepended to the value (e.g., \"iana.<Organization\r\n      value from [IANAPENREG]>\").\r\n", "notes": "The only thing changed is relaxing MUST to MAY.\r\n\r\nThe requirement that manufacturer strings begin with \"oath.\" and \"iana.\" is often ignored by implementations/deployments.  Further, none of the examples throughout the document conform to the syntax.  While we could regard these as implementation/deployment and editorial document bugs, I would argue that we could just as well relax the technical requirement because there appears to be no harm in allowing free-form text.  This is what people appear to be using out there already.\r\n\r\nExamples of non-conforming <Manufacturer> fields out there:\r\nhttp://tools.ietf.org/html/draft-hoyer-keyprov-pskc-algorithm-profiles-01\r\nhttp://download.gooze.eu/otp/seeds/20120919-test001-4282.xml\n --VERIFIER NOTES-- \nChanging the requirement from MUST to MAY is not appropriate to do in an errata.  Please produce a draft and we can see whether your change is acceptable to the rest of the IETF.   ", "submit_date": "2012-10-03", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3370", "doc-id": "RFC6030", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "       id=\"KC0001\"\r\n", "correct_text": "       Id=\"KC0001\"\r\n", "notes": "The PSKC data in figure 8 does not pass a XML Schema validation -- the reason is a typo in the Id attribute name.", "submit_date": "2012-10-03", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3371", "doc-id": "RFC5812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Page 65 Section 4.7.2 paragraph 1\r\n<product> lists the allowed frame formats...\r\n\r\nPage 95 Section 5.1\r\n      <xsd:element name=\"frameProduced\"> ", "correct_text": "Page 65 Section 4.7.2 paragraph 1\r\n<product> MAY lists the allowed frame formats...\r\n\r\nPage 65 Section 4.7.2 paragraph 1 additional text at end of paragraph\r\nThe <product> element MUST contain at least either a frame format or a metadata.\r\n\r\nPage 95 Section 5.1\r\n      <xsd:element name=\"frameProduced\" minOccurs=\"0\">", "notes": "Issue with frameProduced being mandatory for an output port.", "submit_date": "2012-10-07", "submitter_name": "Evangelos Haleplidis", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3396", "doc-id": "RFC5455", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "<request>::= <RP>\r\n             <END-POINTS>\r\n             [<CLASSTYPE>]\r\n             [<LSPA>]\r\n             [<BANDWIDTH>]\r\n             [<metric-list>]\r\n             [<RRO>]\r\n             [<IRO>]\r\n             [<LOAD-BALANCING>]", "correct_text": "<request>::= <RP>\r\n             <END-POINTS>\r\n             [<CLASSTYPE>]\r\n             [<LSPA>]\r\n             [<BANDWIDTH>]\r\n             [<metric-list>]\r\n             [<RRO>[<BANDWIDTH>]]\r\n             [<IRO>]\r\n             [<LOAD-BALANCING>] ", "notes": "Reoptimization BANDWIDTH object was allowed to appear as BANDWIDTH to RRO in PCReq message in draft-ietfd-pce-pcep-10, which became RFC5440. This change was never reflected in the history of RFC5455.", "submit_date": "2012-10-30", "submitter_name": "Dana Kutenicsova", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3372", "doc-id": "RFC6519", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   In the scenario depicted in Figure 2, the Access-Request packet\r\n   contains a Service-Type attribute with the value Authorize Only (17);\r\n   thus, according to [RFC5080], the Access-Request packet MUST contain\r\n   a State attribute.", "correct_text": "    In the scenario depicted in Figure 2, the Access-Request packet\r\n   contains a Service-Type attribute with the value Call-Check (10).", "notes": "The document references RFC 5080.  However, the use of the State attribute in this document is wrong.  The text in RFC 5080 clearly says that State is used to tie an \"Authorize Only\" request to a previous authentication.  The text requiring State in \"Authorize Only\" is surrounded by explanations describing *why* it's required.\r\n\r\nThe original text in RFC 6519 appears to say that adding State magically satisfies the requirements of 5080.  But it ignores all of the surrounding text.\r\n\r\nThe NAS can't simply invent a State attribute, to satisfy the requirement of 5080.  It MUST get the State from a previous Access-Accept.  Since there's no previous Access-Accept here, the use of Authorize-Only and State is wrong.\r\n\r\nRFC 2865 suggests the use of \"Service-Type = Call Check\" for this kind of authorization checking:\r\n\r\n      Call Check \r\n\r\n         Used by the NAS in an Access-Request packet to\r\n                          indicate that a call is being received and\r\n                          that the RADIUS server should send back an\r\n                          Access-Accept to answer the call, or an\r\n                          Access-Reject to not accept the call,\r\n                          typically based on the Called-Station-Id or\r\n                          Calling-Station-Id attributes.  It is\r\n                          recommended that such Access-Requests use the\r\n                          value of Calling-Station-Id as the value of\r\n                          the User-Name", "submit_date": "2012-10-08", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3373", "doc-id": "RFC5707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "16.2.2", "orig_text": "<xs:attribute name=\"amt\" use=\"optional\">\r\n    <xs:simpleType>\r\n        <xs:restriction base=\"xs:integer\">\r\n            <xs:minInclusive value=\"-96\"/>\r\n            <xs:maxInclusive value=\"96\"/>\r\n        </xs:restriction>\r\n    </xs:simpleType>\r\n</xs:attribute>", "correct_text": "<xs:attribute name=\"amt\" use=\"optional\">\r\n    <xs:simpleType>\r\n        <xs:union>\r\n            <xs:simpleType>\r\n                <xs:restriction base=\"xs:integer\">\r\n                    <xs:minInclusive value=\"-96\" />\r\n                    <xs:maxInclusive value=\"96\" />\r\n                </xs:restriction>\r\n            </xs:simpleType>\r\n            <xs:simpleType>\r\n                <xs:restriction base=\"xs:string\">\r\n                    <xs:enumeration value=\"mute\" />\r\n                </xs:restriction>\r\n            </xs:simpleType>\r\n        </xs:union>\r\n    </xs:simpleType>\r\n</xs:attribute>", "notes": "Section \"8.12.1.1 <gain>\" says, for the \"amt\" attribute of the <gain> element:\r\n\r\n\"amt: a specific gain to apply specified in dB or the string \"mute\"\r\n      indicating that the stream should be muted.  This attribute MUST\r\n      NOT be used if \"agc\" is present.\"\r\n\r\nHowever, in section \"16.2.2. msml-conf-core-datatypes.xsd\" the provided schema does not allow the value \"mute\", only integers. Either the XSD should be corrected as suggested, or the part\r\n'or the string \"mute\" indicating that the stream should be muted' removed from the description.", "submit_date": "2012-10-09", "submitter_name": "Tam\u00e1s Gy\u00f6rgyey", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3374", "doc-id": "RFC6129", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "\"Text Encoding and Interchange\"\r\n", "correct_text": "\"Text Encoding Initiative\"", "notes": "Typo introduced by mistake at some point in the submission process. \"Text Encoding Initiative\" is the official name of the TEI (see http://www.tei-c.org).  This applies to the Abstract and Introduction sections.", "submit_date": "2012-10-09", "submitter_name": "Laurent Romary", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3375", "doc-id": "RFC6035", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.7.2", "orig_text": "CSeq: 4331 PUBLISH", "correct_text": "CSeq: 4331 NOTIFY", "notes": "The message format for the NOTIFY message (F13) seems to contain an invalid CSeq header.", "submit_date": "2012-10-09", "submitter_name": "Henning Christiansen", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3376", "doc-id": "RFC3530", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.6", "orig_text": "modified attributes may be returned to the server in the response\r\nto a CB_RECALL call.", "correct_text": "modified attributes may be returned to the server in the response\r\nto a CB_GETATTR call.", "notes": "", "submit_date": "2012-10-10", "submitter_name": "Kanda Motohiro", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3377", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "component = \"\\\\\" / \"\\,\" / \"\\;\" / \"\\n\" / WSP / NON-ASCII\r\n               / %x21-2B / %x2D-3A / %x3C-5B / %x5D-7E", "correct_text": "COMPONENT-CHAR = \"\\\\\" / \"\\,\" / \"\\;\" / \"\\n\" / WSP / NON-ASCII\r\n               / %x21-2B / %x2D-3A / %x3C-5B / %x5D-7E\r\n\t   ; Backslashes, commas, semicolons, and newlines must be encoded.\r\n\r\ncomponent = *COMPONENT-CHAR", "notes": "The property value data type \"component\" should be defined analogous to \"text\".", "submit_date": "2012-10-12", "submitter_name": "Stefan Ganzer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3378", "doc-id": "RFC3575", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Metadata", "orig_text": "Updates: 2865\r\n\r\n", "correct_text": "Updates: 2865, 2868", "notes": "\r\nIANA needs to be updated as well.\r\n\r\nhttp://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-14\r\n\r\nOLD\r\nRegistration Procedures\r\n     IETF Consensus\r\nReference\r\n     [RFC2868]\r\n\r\nNEW\r\nRegistration Procedures\r\n     Designated Expert\r\nReference\r\n     [RFC3575]\r\n\r\n\r\nhttp://www.iana.org/assignments/radius-types/radius-types.xml#radius-types-15\r\n\r\nOLD\r\nRegistration Procedures\r\n     IETF Consensus\r\nReference\r\n     [RFC2868]\r\n\r\nNEW\r\nRegistration Procedures\r\n     Designated Expert\r\nReference\r\n     [RFC3575]\r\n\r\n=======================================================\r\n\r\n\r\n\r\nSome background information:\r\n\r\n   RFC 3575 Section 2.1 states the following:\r\n \r\n   Certain attributes (for example, NAS-Port-Type) in RADIUS define a\r\n   list of values to correspond with various meanings.  There can be 4\r\n   billion (2^32) values for each attribute.  Additional values can be\r\n   allocated by the Designated Expert.  The exception to this policy is\r\n   the Service-Type attribute (6), whose values define new modes of\r\n   operation for RADIUS.  Values 1-16 of the Service-Type attribute have\r\n   been allocated.  Allocation of new Service-Type values are by IETF\r\n   Consensus.  The intention is that any allocation will be accompanied\r\n   by a published RFC.\r\n\r\n   Note that the Tunnel-Type and Tunnel-Medium-Type attributes are not called out as an exception, only Service-Type.  If the intent was to exempt RFC 2868, those attributes would have been included as exceptions but they are not.\r\n\r\nTherefore, it looks to me like the omission of RFC 2868 in the Updates: header is an errata.\r\n\r\nIn other words:\r\n\r\n   The discussion, as I understand it,  is about \"IETF consensus\" versus \"Designated Expert\"\r\n\r\n   From RFC 2868\r\n\r\n6.1.  Tunnel-Type Attribute Values\r\n\r\n   Values 1-12 of the Tunnel-Type Attribute are defined in Section 5.1;\r\n   the remaining values are available for assignment by the IANA with\r\n   IETF Consensus [16].\r\n\r\n6.2.  Tunnel-Medium-Type Attribute Values\r\n\r\n   Values 1-15 of the Tunnel-Medium-Type Attribute are defined in\r\n   Section 5.2; the remaining values are available for assignment by the\r\n   IANA with IETF Consensus [16].\r\n\r\nFrom RFC 3575\r\n\r\n   Certain attributes (for example, NAS-Port-Type) in RADIUS define a\r\n   list of values to correspond with various meanings.  There can be 4\r\n   billion (2^32) values for each attribute.  Additional values can be\r\n   allocated by the Designated Expert.  The exception to this policy is\r\n   the Service-Type attribute (6), whose values define new modes of\r\n   operation for RADIUS.\r\n\r\nSo  Tunnel-Type and Tunnel-Medium-Type  are \"IETF consensus\" or \"Designated Expert\"?\r\n\r\nFrom the IETF 80 meeting minutes, https://www.ietf.org/proceedings/80/minutes/radext.txt:\r\n\r\n2. IANA issues \r\nA. How to allocate tunnel params? In RFC 3575 (RFC2868 conflicts as 3575 assigns based on expert review but didn\u2019t update 2868). Omission of RFC 2868 could be an errata; this is basically a request for metadata. \r\n- Asks Dan for comment: was looking for input from the working group before proceeding. \r\n- Alan thought it was an errata. \r\n- Stefan states no opinion. \r\n- Klaas also states no opinion. \r\n- Nancy asks for further understanding. Bernard clarifies: RFC 2868 states \u201cstandards action\u201d and 3575 is more lenient in saying just expert review.\r\n- Now Dan remembers: when there\u2019s conflicts such as this, 2 solutions: take the stricter or take the latest. But if it\u2019s the latest, then it needs to be clearer. Believes in this case, explicit clarification is justified since 3575 is more recent and the request is justified. But need IESG perspective review by WG. \r\n- Bernard suggests to get a sense of this group and then take it to the mailgroup.\r\nAsks: proposal is to accept and verify the errata and update 3575 to include 2868.\r\nIn favor: 10, non oppose. Given consensus, will take to the mail list.", "submit_date": "2012-10-13", "submitter_name": "Bernard Aboba", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3379", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "18.50.3", "orig_text": "If there are\r\nsessions (both idle and non-idle), opens, locks, delegations, \r\nlayouts, and/or wants (Section 18.49) associated with the unexpired \r\nlease of the client ID, the server MUST return NFS4ERR_CLIENTID_BUSY.", "correct_text": "If there are \r\nsessions (both idle and non-idle), opens, locks, delegations, \r\nand/or wants (Section 18.49) associated with the unexpired \r\nlease of the client ID, the server MUST return NFS4ERR_CLIENTID_BUSY.", "notes": "Should not include layouts.\r\nA forgetful client may not return LAYOUTS. In this case, a server will always return NFS4ERR_CLIENTID_BUSY on DESTROY_CLIENTID and end up persisting the client\u2019s lease until it expires although the client is explicitly asking us not to.", "submit_date": "2012-10-15", "submitter_name": "Asmita Karandikar", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:29:23"}, {"errata_id": "3380", "doc-id": "RFC5761", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   o  RTP payload type 80 conflicts with Receiver Summary Information\r\n      (RSI) packets defined in \"RTCP Extensions for Single-Source\r\n      Multicast Sessions with Unicast Feedback\" [6].", "correct_text": "   o  RTP payload type 81 conflicts with Receiver Summary Information\r\n      (RSI) packets defined in \"RTCP Extensions for Single-Source\r\n      Multicast Sessions with Unicast Feedback\" [6].", "notes": "Reference [6], RFC 5760 (IANA likewise), specifies that RTCP RSI has the RTCP packet type number 209, which means that it would conflict with RTP payload type 81, not 80 as stated.", "submit_date": "2012-10-16", "submitter_name": "Martin Storsj\u00f6", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4457", "doc-id": "RFC6550", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "20.9", "orig_text": "in title of section (one instance) and text (two instances)\r\n\"DODAG Informational Solicitation\"", "correct_text": "\"DODAG Information Solicitation\"", "notes": "DIS is defined in Section 2 (Terminology) as \"DODAG Information Solicitation\".\r\nThis acronym is expanded consistently throughout the RFC but in this section.\r\n\r\n=== Alvaro Retana ===\r\nNote that this error affects the name of the IANA registry as well.  A future revision of this document should request an update to that name as well.", "submit_date": "2015-08-27", "submitter_name": "Dominique Barthel", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3381", "doc-id": "RFC3588", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8.20.  Class", "orig_text": "8.20.  Class AVP\r\n\r\nAs described in section 8.20.Class AVP,that Class AVP is used by server \r\nto give state information to accesses device. And Class AVP MUST be \r\npresent in subsequent re-authorization,STR and accounting messages.\r\n\r\nNow if application uses the base diameter messages for\r\nre-authentication[RAR/RAA] and accounting[ACR/ACA] then these message \r\ndefinition should have Class AVP. But it is not present.", "correct_text": "Definition of RAR/RAA and ACR/ACA should have Class AVP, As STA message definition have.\r\n<RAR>  ::= < Diameter Header: 258, REQ, PXY >\r\n                 < Session-Id >\r\n                 { Origin-Host }\r\n                 { Origin-Realm }\r\n                 { Destination-Realm }\r\n                 { Destination-Host }\r\n                 { Auth-Application-Id }\r\n                 { Re-Auth-Request-Type }\r\n                 [ User-Name ]\r\n                 [ Origin-State-Id ]\r\n               * [ Proxy-Info ]\r\n               * [ Route-Record ]\r\n               * [ AVP ]//************** should have Class AVP **********//\r\n\r\n\r\n\r\n<RAA>  ::= < Diameter Header: 258, PXY >\r\n                 < Session-Id >\r\n                 { Result-Code }\r\n                 { Origin-Host }\r\n                 { Origin-Realm }\r\n                 [ User-Name ]\r\n                 [ Origin-State-Id ]\r\n                 [ Error-Message ]\r\n                 [ Error-Reporting-Host ]\r\n               * [ Failed-AVP ]\r\n               * [ Redirect-Host ]\r\n                 [ Redirect-Host-Usage ]\r\n                 [ Redirect-Host-Cache-Time ]\r\n               * [ Proxy-Info ]\r\n               * [ AVP ] //************** should have Class AVP **********//\r\n\r\n\r\n\r\n <ACR> ::= < Diameter Header: 271, REQ, PXY >\r\n                < Session-Id >\r\n                { Origin-Host }\r\n                { Origin-Realm }\r\n                { Destination-Realm }\r\n                { Accounting-Record-Type }\r\n                { Accounting-Record-Number }\r\n                [ Acct-Application-Id ]\r\n                [ Vendor-Specific-Application-Id ]\r\n                [ User-Name ]\r\n                [ Accounting-Sub-Session-Id ]\r\n                [ Acct-Session-Id ]\r\n                [ Acct-Multi-Session-Id ]\r\n                [ Acct-Interim-Interval ]\r\n                [ Accounting-Realtime-Required ]\r\n                [ Origin-State-Id ]\r\n                [ Event-Timestamp ]\r\n              * [ Proxy-Info ]\r\n              * [ Route-Record ]\r\n              * [ AVP ]//************** should have Class AVP **********//\r\n\r\n\r\n <ACA> ::= < Diameter Header: 271, PXY >\r\n                < Session-Id >\r\n                { Result-Code }\r\n                { Origin-Host }\r\n                { Origin-Realm }\r\n                { Accounting-Record-Type }\r\n                { Accounting-Record-Number }\r\n                [ Acct-Application-Id ]\r\n                [ Vendor-Specific-Application-Id ]\r\n                [ User-Name ]\r\n                [ Accounting-Sub-Session-Id ]\r\n                [ Acct-Session-Id ]\r\n                [ Acct-Multi-Session-Id ]\r\n                [ Error-Reporting-Host ]\r\n                [ Acct-Interim-Interval ]\r\n                [ Accounting-Realtime-Required ]\r\n                [ Origin-State-Id ]\r\n                [ Event-Timestamp ]\r\n              * [ Proxy-Info ]\r\n              * [ AVP ]//************** should have Class AVP **********//\r\n\r\n\r\n\r\n<STR> ::= < Diameter Header: 275, REQ, PXY >\r\n                < Session-Id >\r\n                { Origin-Host }\r\n                { Origin-Realm }\r\n                { Destination-Realm }\r\n                { Auth-Application-Id }\r\n                { Termination-Cause }\r\n                [ User-Name ]\r\n                [ Destination-Host ]\r\n              * [ Class ] //****Class AVP present [correct implementation] ***//\r\n                [ Origin-State-Id ]\r\n              * [ Proxy-Info ]\r\n              * [ Route-Record ]\r\n              * [ AVP ]\r\n\r\n\r\n      <STA>  ::= < Diameter Header: 275, PXY >\r\n                 < Session-Id >\r\n                 { Result-Code }\r\n                 { Origin-Host }\r\n                 { Origin-Realm }\r\n                 [ User-Name ]\r\n               * [ Class ]//****Class AVP present [correct implementation] ***//\r\n                 [ Error-Message ]\r\n                 [ Error-Reporting-Host ]\r\n               * [ Failed-AVP ]\r\n                 [ Origin-State-Id ]\r\n               * [ Redirect-Host ]\r\n                 [ Redirect-Host-Usage ]\r\n                                    ^\r\n                 [ Redirect-Max-Cache-Time ]\r\n               * [ Proxy-Info ]\r\n               * [ AVP ]\r\n\r\n\r\n", "notes": " --VERIFIER NOTES-- \r\n   I think that there might be some confusion regarding this errata. Section 8.20 does not contain the text that the errata claims that it contains.", "submit_date": "2012-10-17", "submitter_name": "Vinay Parashar", "verifier_id": "", "verifier_name": "RonBonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3382", "doc-id": "RFC2392", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "Content-Type: multipart/related; boundary=\"boundary-example-1\";\r\n                   type=Text/HTML\r\n\r\n--boundary-example 1\r\n     Content-Type: Text/HTML; charset=US-ASCII", "correct_text": "Content-Type: multipart/related; boundary=\"boundary-example-1\";\r\n                   type=Text/HTML\r\n\r\n--boundary-example-1\r\n     Content-Type: Text/HTML; charset=US-ASCII", "notes": "Missing dash in first boundary string.  I omitted the page break that was between the Content-Type header and the boundary.", "submit_date": "2012-10-17", "submitter_name": "Thomas Lane", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3383", "doc-id": "RFC3625", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   rate-map-table  = 8rate-map-entry\r\n", "correct_text": "   rate-map-table  = *rate-map-entry\r\n", "notes": "I believe this is a simple typo specifying that there are num-rates number of rate-map-entries\r\n\r\nYes.  Something like n-rate-map-entries would be even clearer (* implies a pointer to me)", "submit_date": "2012-10-18", "submitter_name": "Tom Ritter", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3397", "doc-id": "RFC5191", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "When the PAA initiates re-authentication, it sends a \r\nPANA-Auth-Request message containing the session identifier for the \r\nPaC.  The PAA MUST initiate EAP re-authentication before the current \r\nsession lifetime expires.", "correct_text": "When the PAA initiates re-authentication, it sends a \r\nPANA-Auth-Request message containing the session identifier for the \r\nPaC.  In this case, the PAA MUST initiate EAP re-authentication \r\nbefore the current session lifetime expires.", "notes": "The 2nd sentence in the original text seems to indicate that re-authentication initiation from PAA is mandated, which is not correct as Section 3 says \"the PAA may, and the PaC should, initiate re-authentication if they want to update the PANA session lifetime before the PANA session lifetime expires.", "submit_date": "2012-10-30", "submitter_name": "Yoshihiro Ohba", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3398", "doc-id": "RFC2595", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "Implementations are encouraged to have flexability with respect to\r\nthe minimal encryption strength or cipher suites permitted.", "correct_text": "Implementations are encouraged to have flexibility with respect to\r\nthe minimal encryption strength or cipher suites permitted.", "notes": "", "submit_date": "2012-11-02", "submitter_name": "David Caley", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3405", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.10.", "orig_text": "       weekday     = \"SU\" / \"MO\" / \"TU\" / \"WE\" / \"TH\" / \"FR\" / \"SA\"\r\n       ;Corresponding to SUNDAY, MONDAY, TUESDAY, WEDNESDAY, THURSDAY,\r\n       ;FRIDAY, and SATURDAY days of the week.\r\n", "correct_text": "       weekday     = \"MO\" / \"TU\" / \"WE\" / \"TH\" / \"FR\" / \"SA\" / \"SU\"\r\n       ;Corresponding to MONDAY, TUESDAY, WEDNESDAY, THURSDAY, FRIDAY,\r\n       ;SATURDAY, and SUNDAY days of the week.\r\n", "notes": "It is worldwide accepted that a working business week begins with\r\na monday in all business related activities (stock exchange etc. etc).\r\n\r\nSee also:\r\n       package Ada.Calendar.Formatting is\r\n       -- Day of the week:\r\n       type Day_Name is (Monday, Tuesday, Wednesday, Thursday, Friday, Saturday, Sunday);\n --VERIFIER NOTES-- \nThis isn't an error in the document.  Regardless of your opinion of whether the week should begin on Sunday, Monday, or Thursday, ABNF does not create any particular ordering.  Implementations are always free to order them as they please.", "submit_date": "2012-11-09", "submitter_name": "Peter Hermann", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3406", "doc-id": "RFC5519", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "mgmdHostCacheLastReporter OBJECT-TYPE\r\n    SYNTAX     InetAddress (SIZE(4|16))\r\n    MAX-ACCESS read-only\r\n    STATUS     current\r\n    DESCRIPTION\r\n            \"The IP address of the source of the last membership report\r\n            received for this IP multicast group address on this\r\n            interface.  If no membership report has been received, this\r\n            object has a value of 0.  The InetAddressType, e.g., IPv4 or\r\n            IPv6, is identified by the mgmdHostCacheAddressType variable\r\n            in the mgmdHostCache table.\"\r\n\r\n", "correct_text": "I don't think it makes sense for a host to keep track of last received report.\r\nShould it be last sent report?", "notes": "", "submit_date": "2012-11-13", "submitter_name": "Stig Venaas", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3431", "doc-id": "RFC6790", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2", "orig_text": "This is an optional, transitive BGP attribute of value 28.", "correct_text": "This is an optional, transitive BGP Attribute having Attribute Type Code 28, length 0, and no data.", "notes": "\"Value\" is (slightly) confusing in this context.  The text should also explicitly specify that there isn't Attribute Data and thus the length will be 0.\r\n\r\nAmbiguity on this matter may lead implementations to utilize the data field in some unforeseen way.  Other implementations may then reject the attribute, applying general attribute processing rules, with an Attribute Length Error (RFC 4271 S6.3 paragraph 4.)", "submit_date": "2012-12-16", "submitter_name": "Jeff Wheeler", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3830", "doc-id": "RFC6006", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.15", "orig_text": "To indicate P2MP message fragmentation errors associated with a P2MP\r\npath request, a new Error-Type (17) and subsequent error-values are\r\ndefined as follows for inclusion in the PCEP-ERROR object:", "correct_text": "To indicate P2MP message fragmentation errors associated with a P2MP\r\npath request, a new Error-Type (18) and subsequent error-values are\r\ndefined as follows for inclusion in the PCEP-ERROR object:", "notes": "17 P2MP END-POINTS Error\r\n18 P2MP Fragmentation Error\r\n\r\nIt should be 18 in this statement", "submit_date": "2013-12-10", "submitter_name": "Udayasree", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3385", "doc-id": "RFC6751", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.6.2", "orig_text": "RR4-5 INVALID IPv6/UDP/IPv4 PACKET\r\n\r\n      For ANY other case, the 6a44 relay MUST discard the packet.", "correct_text": "RR4-5 INVALID IPv6/UDP/IPv4 PACKET: INCONSISTENT SOURCE ADDRESSES\r\n\r\n      If ALL the following conditions are satisfied, the 6a44 relay\r\n      MUST discard the packet and return to the source an\r\n      error-signaling bubble (i.e., with the \"Bubble ID\" field set\r\n      to 0) which conveys the up-to-date IPv6 prefix of the client:\r\n      (1) the IPv4 packet contains a complete UDP datagram (protocol\r\n      = 17, offset = 0, more-fragment bit = 0); (2) the UDP payload\r\n      is an IPv6 packet (length of at least 40 octets, version = 6);\r\n      (3) the IPv6 source address starts with the 6a44-network IPv6\r\n      prefix followed by a value (in the field that is composed of\r\n      bits 48-79) that is different from the UDP/IPv4 source address\r\n      of the received packet; (4) the IPv6 destination address is\r\n      not a Teredo address whose embedded IPv4 address is the\r\n      6a44-relay anycast address.\r\n\r\nRR4-6 INVALID IPv6/UDP/IPv4 PACKET: ANY OTHER INVALID PACKET\r\n\r\n      For ANY other case, the 6a44 relay MUST silently discard the\r\n      packet.", "notes": "The conditions when to send an error-signaling bubble must be exactly specified. This is done by the modified RR4-5 rule. The orginal rule has moved to RR4-6 and changed from \"discard\" to \"silently discard\", i.e. without returning an error-signaling bubble to the source.\r\n\r\nThe reference \"(i.e., not conforming to R44-2 condition (3) in Section 6.6.2)\" in section 6.3 (which is wrong anyway because rule R44-2 doesn't exist) should be replaced by \"(i.e., conformig to RR4-5 condition in Section 6.6.2)\"\n --VERIFIER NOTES-- \nReplaced bby Erratum 3388", "submit_date": "2012-10-18", "submitter_name": "Andreas Cudok", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3386", "doc-id": "RFC2387", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1", "orig_text": "The example below, uses a single data block.\r\n\r\n     Content-Type: Multipart/Related; boundary=example-1\r\n             start=\"<950120.aaCC@XIson.com>\";\r\n             type=\"Application/X-FixedRecord\"\r\n             start-info=\"-o ps\"", "correct_text": "The example below, uses a single data block.\r\n\r\n     Content-Type: Multipart/Related; boundary=example-1;\r\n             start=\"<950120.aaCC@XIson.com>\";\r\n             type=\"Application/X-FixedRecord\";\r\n             start-info=\"-o ps\"\r\n\r\n<OR>\r\n\r\nThe example below, uses a single data block.\r\n\r\n     Content-Type: Multipart/Related\r\n             ;boundary=example-1\r\n             ;start=\"<950120.aaCC@XIson.com>\"\r\n             ;type=\"Application/X-FixedRecord\"\r\n             ;start-info=\"-o ps\"", "notes": "Missing \";\"s in parameter list.\r\n\r\n\r\nRFC 2045 says:\r\n\r\ncontent := \"Content-Type\" \":\" type \"/\" subtype\r\n                *(\";\" parameter)", "submit_date": "2012-10-18", "submitter_name": "Thomas Lane", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3387", "doc-id": "RFC2387", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2", "orig_text": "Content-Type: Multipart/Related; boundary=example-2;\r\n             start=\"<950118.AEBH@XIson.com>\"\r\n             type=\"Text/x-Okie\"", "correct_text": "Content-Type: Multipart/Related; boundary=example-2;\r\n             start=\"<950118.AEBH@XIson.com>\";\r\n             type=\"Text/x-Okie\"\r\n\r\n<OR>\r\n\r\nContent-Type: Multipart/Related\r\n              ;boundary=example-2\r\n              ;start=\"<950118.AEBH@XIson.com>\"\r\n              ;type=\"Text/x-Okie\"", "notes": "Another missing ';' [see erratum for Section 5.1].", "submit_date": "2012-10-18", "submitter_name": "Thomas Lane", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3388", "doc-id": "RFC6751", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.6.2", "orig_text": "RR4-5 INVALID IPv6/UDP/IPv4 PACKET\r\n\r\n      For ANY other case, the 6a44 relay MUST discard the packet.", "correct_text": "RR4-5 INVALID IPv6/UDP/IPv4 PACKET\r\n\r\n      For ANY other case, the 6a44 relay MUST discard the packet,\r\n      and return to the UDP/IPv4 source an error-signalling bubble\r\n      formatted according to Section 6.3", "notes": "Erratum modified by ISE after discussion with RFC authors.\r\nThe above has the advantage of error signaling in all cases where packets\r\nfrom 6a44 clients cannot be forwarded, including if due to a change of \r\n6a44-network IPv6 prefix.\r\n\r\nThe original Errata submission said:\r\n\r\nRR4-5 INVALID IPv6/UDP/IPv4 PACKET: INCONSISTENT SOURCE ADDRESSES\r\n\r\n      If ALL the following conditions are satisfied, the 6a44 relay\r\n      MUST discard the packet and return to the source an\r\n      error-signaling bubble (i.e., with the \"Bubble ID\" field set\r\n      to 0) which conveys the up-to-date IPv6 prefix of the client:\r\n      (1) the IPv4 packet contains a complete UDP datagram (protocol\r\n      = 17, offset = 0, more-fragment bit = 0); (2) the UDP payload\r\n      is an IPv6 packet (length of at least 40 octets, version = 6);\r\n      (3) the IPv6 source address starts with the 6a44-network IPv6\r\n      prefix followed by a value (in the field that is composed of\r\n      bits 48-95) that is different from the UDP/IPv4 source address\r\n      of the received packet; (4) the IPv6 destination address is\r\n      not a Teredo address whose embedded IPv4 address is the\r\n      6a44-relay anycast address.\r\n\r\nRR4-6 INVALID IPv6/UDP/IPv4 PACKET: ANY OTHER INVALID PACKET\r\n\r\n      For ANY other case, the 6a44 relay MUST silently discard the\r\n      packet.\r\n\r\nThe conditions when to send an error-signaling bubble must be exactly specified. This is done by the modified RR4-5 rule. The orginal rule has moved to RR4-6 and changed from \"discard\" to \"silently discard\", i.e. without returning an error-signaling bubble to the source.\r\n\r\nThe reference \"(i.e., not conforming to R44-2 condition (3) in Section 6.6.2)\" in section 6.3 (which is wrong anyway because rule R44-2 doesn't exist) should be replaced by \"(i.e., conformig to RR4-5 condition in Section 6.6.2)\" \r\n\r\nThis Errata replaces Errata ID 3385 with the wrong phrase \"(in the field that is composed of bits 48-79)\" being replaced by the correct one \"(in the field that is composed of bits 48-95)\".", "submit_date": "2012-10-18", "submitter_name": "Andreas Cudok", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3389", "doc-id": "RFC2387", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "MIME User Agents that do recognize Multipart/Related entities but are\r\nunable to process the given type should give the user the option of\r\nsuppressing the entire Multipart/Related body part shall be.", "correct_text": "MIME User Agents that do recognize Multipart/Related entities but are\r\nunable to process the given type SHOULD give the user the option of\r\nsuppressing the entire Multipart/Related [some grammatically well-formed English].", "notes": "Capitalize the keyword SHOULD.\r\n\r\nthe entire Multipart/Related body part?  the entire Multipart/Related body?  all the Multipart/Related content?  the entire Multipart/Related body, or just the particular body part of unrecognized type?  I'm not sure what this was originally intended to say, just that what's there is a typo.", "submit_date": "2012-10-18", "submitter_name": "Thomas Lane", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4458", "doc-id": "RFC6550", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "20.10", "orig_text": "No bit is currently defined for the DIS (DODAG Informational\r\nSolicitation) Flags.", "correct_text": "No bit is currently defined for the DIO (DODAG Information\r\nObject) Flags.", "notes": "This is obviously an erroneous copy-paste from section 20.9", "submit_date": "2015-08-27", "submitter_name": "Dominique Barthel", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5080", "doc-id": "RFC6164", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Request for Comments: 6164\r\nCategory: Standards Track", "correct_text": "Request for Comments: 6164\r\nCategory: Standards Track\r\nUpdates: RFC4291", "notes": "The solution described in RFC6164 updates RFC4291 because it violates the requirement of RFC4291 section 2.5.1 for the IIDs to be 64-bit long and be constructed from EUI-64 format.\r\n\r\nPlease feel free to reconfirm with 6man WG. In Prague, the suggestion was made that all documents introducing solutions that are not compliant with this requirement must be tracked as updated to RFC6164. When i asked on the list recently, i was given the suggestion to file an Errata as i am doing right now.\r\n\r\nNote that i think that i do not think that \"just wait for rfc4291bis\" would be a good answer to this errata because rfc6164 of course predates it, and even more so, correct proedural tracking of rfc4291 updates can potentially help the process of getting to rfc4291bis.", "submit_date": "2017-08-08", "submitter_name": "toerless Eckert", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-11 00:30:46"}, {"errata_id": "3390", "doc-id": "RFC6751", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.6.2", "orig_text": "RR4-2 IPv6 PACKET FROM A 6a44 CLIENT TO ANOTHER 6a44 CLIENT\r\n\r\n  (IPv4, N1, B, UDP(Z1, W, [IPv6, <C.N1.Z1...>, <C.N2.Z2...>, ...]))\r\n  <figure omitted>\r\n\r\nIf ALL the following conditions are satisfied, the 6a44 relay MUST\r\nreturn back via its downstream IPv4 interface an IPv6/ UDP/IPv4\r\npacket containing the same encapsulated packet, having its UDP/IPv4\r\ndestination set to the UDP/IPv4 address found in the 6a44 destination\r\naddress, and having its UDP/IPv4 source set to the 6a44-relay\r\nUDP/IPv4 address: (1) the IPv4 packet contains a complete UDP\r\ndatagram (protocol = 17, offset = 0, more-fragment bit = 0); (2) the\r\nUDP payload is an IPv6 packet (length of at least 40 octets, version\r\n= 6); (3) the IPv6 source address starts with the 6a44-network IPv6\r\nprefix followed by the UDP/IPv4 source address of the received\r\npacket; (4) the IPv6 destination address starts with the 6a44-network\r\nIPv6 prefix.\r\n", "correct_text": "RR4-2 IPv6 PACKET FROM A 6a44 CLIENT TO ANOTHER 6a44 CLIENT\r\n\r\n  (IPv4, N1, B, UDP(Z1, W, [IPv6, <C.N1.Z1...>, <C.N2 != B .Z2...>,\r\n   ...]))\r\n  <figure omitted>\r\n\r\nIf ALL the following conditions are satisfied, the 6a44 relay MUST\r\nreturn back via its downstream IPv4 interface an IPv6/UDP/IPv4\r\npacket containing the same encapsulated packet, having its UDP/IPv4\r\ndestination set to the UDP/IPv4 address found in the 6a44 destination\r\naddress, and having its UDP/IPv4 source set to the 6a44-relay\r\nUDP/IPv4 address: (1) the IPv4 packet contains a complete UDP\r\ndatagram (protocol = 17, offset = 0, more-fragment bit = 0); (2) the\r\nUDP payload is an IPv6 packet (length of at least 40 octets, version\r\n= 6); (3) the IPv6 source address starts with the 6a44-network IPv6\r\nprefix followed by the UDP/IPv4 source address of the received\r\npacket; (4) the IPv6 destination address starts with the 6a44-network\r\nIPv6 prefix and the embedded IPv4 address (bits 48-79) MUST be\r\ndifferent from the 6a44-relay anycast address.", "notes": "Requesting N2 != B prevents unwanted packets sent from the 6a44 relay to itself and makes the system more robust against DOS attacks.\r\n\r\nThis is really an enhancement, not an error, so it's Held (rather than Verified)", "submit_date": "2012-10-19", "submitter_name": "Andreas Cudok", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3391", "doc-id": "RFC6121", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.2.1.", "orig_text": "   Juliet's server replies with an unavailable notification, mirroring\r\n   the 'id' of Rome's presence probe because there is no 'id' to\r\n   preserve from an available notification that her client has sent.\r\n", "correct_text": "   Juliet's server replies with an unavailable notification, mirroring\r\n   the 'id' of Romeo's presence probe because there is no 'id' to\r\n   preserve from an available notification that her client has sent.\r\n", "notes": "Minor typo: \"Rome's\" should be \"Romeo's\"", "submit_date": "2012-10-21", "submitter_name": "Todd Lucas", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3392", "doc-id": "RFC6669", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "  +------------------------+---------------------------------+---------+\r\n  | Lock Instruct (LI)     | (1) G-ACh-based Loopback,       |[RFC6426]|\r\n  |                        | (2) Lock Instruct (LI)          |         |\r\n  +------------------------+---------------------------------+---------+\r\n  | Lock Report (LKR)      | Flag in AIS message             |[RFC6426]|\r\n", "correct_text": "  +------------------------+---------------------------------+---------+\r\n  | Lock Instruct (LI)     | (1) G-ACh-based Loopback,       |[RFC6435]|\r\n  |                        | (2) Lock Instruct (LI)          |         |\r\n  +------------------------+---------------------------------+---------+\r\n  | Lock Report (LKR)      | Flag in MPLS Fault Management   |[RFC6427]|\r\n  |                        | message                         |         |\r\n", "notes": "The RFC numbers were correct in version latest draft version (9), and obviously it is an editing mistake.\r\n\r\n---\r\n\r\nI updated the \"Corrected Text\" section of this Errata Report after receiving email from the submitter.\r\n\r\n", "submit_date": "2012-10-24", "submitter_name": "Nurit Sprecher", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3393", "doc-id": "RFC6739", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.3", "orig_text": "   <p>See <a href=\"[URL of published RFC]\">RFC 6739\r\n          </a>.</p>", "correct_text": "   <p>See <a href=\"http://www.rfc-editor.org/rfc/rfc6739.txt\">RFC 6739\r\n          </a>.</p>", "notes": "RFC Editor should have updated this text before publication.", "submit_date": "2012-10-25", "submitter_name": "Pearl Liang", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3394", "doc-id": "RFC6506", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5", "orig_text": "The OSPFv3 Cryptographic Protocol ID is appended to the\r\nAuthentication Key (K) yielding a Protocol-Specific\r\nAuthentication Key (Ks). In this application, Ko is always L\r\noctets long and is computed as follows:\r\n\r\nIf the Protocol-Specific Authentication Key (Ks) is L octets\r\nlong, then Ko is equal to K. If the Protocol-Specific\r\nAuthentication Key (Ks) is more than L octets long, then Ko is\r\nset to H(Ks). If the Protocol-Specific Authentication Key\r\n(Ks) is less than L octets long, then Ko is set to the\r\nProtocol-Specific Authentication Key (Ks) with zeros appended\r\nto the end of the Protocol-Specific Authentication Key (Ks)\r\nsuch that Ko is L octets long.", "correct_text": "Please see - notes\r\n\r\n====\r\n\r\nThe OSPFv3 Cryptographic Protocol ID is appended to the\r\nAuthentication Key (K) yielding a Protocol-Specific\r\nAuthentication Key (Ks). In this application, Ko is always B\r\noctets long and is computed as follows:\r\n\r\nIf the Protocol-Specific Authentication Key (Ks) is B octets\r\nlong, then Ko is equal to Ks. If the Protocol-Specific\r\nAuthentication Key (Ks) is more than B octets long, then Ko is\r\nset to H(Ks) and then appended with (B-L) zeroes to create a \r\nB octets long string Ko. If the Protocol-Specific Authentication\r\nKey (Ks) is less than B octets long, then Ko is set to the\r\nProtocol-Specific Authentication Key (Ks) with zeros appended\r\nto the end of the Protocol-Specific Authentication Key (Ks)\r\nsuch that Ko is B octets long.", "notes": "Readers should consult: draft-ietf-ospf-rfc6506bis for the resolution of this Erratum\r\n\r\n=====\r\n\r\nThis is in accordance with RFC2104(HMAC: Keyed-Hashing for Message Authentication). Reproducing the relevant text below:\r\n\r\n2. Definition of HMAC\r\n\r\n   The definition of HMAC requires a cryptographic hash function, which\r\n   we denote by H, and a secret key K. We assume H to be a cryptographic\r\n   hash function where data is hashed by iterating a basic compression\r\n   function on blocks of data.   We denote by B the byte-length of such\r\n   blocks (B=64 for all the above mentioned examples of hash functions),\r\n   and by L the byte-length of hash outputs (L=16 for MD5, L=20 for\r\n   SHA-1).  The authentication key K can be of any length up to B, the\r\n   block length of the hash function.  Applications that use keys longer\r\n   than B bytes will first hash the key using H and then use the\r\n   resultant L byte string as the actual key to HMAC. In any case the\r\n   minimal recommended length for K is L bytes (as the hash output\r\n   length). See section 3 for more information on keys.\r\n\r\n\r\nAlso, according to FIPS PUB 198, section 5(HMAC SPECIFICATION) :\r\n\r\nSTEPS\r\nSTEP-BY-STEP DESCRIPTION\r\nStep 1\r\nIf the length of K = B: set K0 = K. Go to step 4.\r\nStep 2\r\nIf the length of K > B: hash K to obtain an L byte string, then append (B-L) zeros to create a B-byte string K0 (i.e., K0 = H(K) || 00...00). Go to step 4.\r\nStep 3\r\nIf the length of K < B: append zeros to the end of K to create a B-byte string K0 (e.g., if K is 20 bytes in length and B = 64, then K will be appended with 44 zero bytes 0x00).\r\nStep 4\r\nExclusive-Or K0 with ipad to produce a B-byte string: K0 \u00af ipad.\r\nStep 5\r\nAppend the stream of data 'text' to the string resulting from step 4: (K0 \u00af ipad) || text.\r\nStep 6\r\nApply H to the stream generated in step 5: H((K0 \u00af ipad) || text).\r\nStep 7\r\nExclusive-Or K0 with opad: K0 \u00af opad.\r\nStep 8\r\nAppend the result from step 6 to step 7: (K0 \u00af opad) || H((K0 \u00af ipad) || text).\r\nStep 9\r\nApply H to the result from step 8: H((K0 \u00af opad )|| H((K0 &#65455; ipad) || text)).\r\nStep 10\r\nSelect the leftmost t bytes of the result of step 9 as the MAC.", "submit_date": "2012-10-25", "submitter_name": "Srinivasan K L", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3395", "doc-id": "RFC6386", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "20.16./p.239", "orig_text": "   void\r\n   vp8_dixie_tokens_process_row(struct vp8_decoder_ctx *ctx,\r\n                                unsigned int            partition,\r\n                                unsigned int            row,\r\n                                unsigned int            start_col,\r\n                                unsigned int            num_cols)\r\n   {\r\n       struct token_decoder *tokens = &ctx->tokens[partition];\r\n       short              coeffs = tokens->coeffs + 25 * 16 * start_col;", "correct_text": "   void\r\n   vp8_dixie_tokens_process_row(struct vp8_decoder_ctx *ctx,\r\n                                unsigned int            partition,\r\n                                unsigned int            row,\r\n                                unsigned int            start_col,\r\n                                unsigned int            num_cols)\r\n   {\r\n       struct token_decoder *tokens = &ctx->tokens[partition];\r\n       short              *coeffs = tokens->coeffs + 25 * 16 * start_col;", "notes": "It seems \"coeffs\" should be a pointer to a short instead of a short.", "submit_date": "2012-10-30", "submitter_name": "Thomas Butter", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7055", "doc-id": "RFC8542", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "augment \"/nw:networks/nw:network/nw:node\" {\r\n  when '/nw:networks/nw:network/nw:network-types/'\r\n     + 'fabric:fabric-network' {\r\n    description\r\n      \"Augmentation parameters apply only for networks\r\n       with fabric topology\";\r\n  }\r\n", "correct_text": "augment \"/nw:networks/nw:network/nw:node\" {\r\n  when '../nw:network-types/fabric:fabric-network' {\r\n    description\r\n      \"Augmentation parameters apply only for networks\r\n       with fabric topology\";\r\n  }\r\n", "notes": "The original YANG statements make the augmentation apply to all nw:networks as soon as there is at least one nw:network that is of fabric:fabric-network topo. This is clearly not the author's intent, as proven by the text in the description statement.\r\n\r\nThe corrected YANG statements make the augmentation only apply to the specific nw:networks that are of fabric topology. There are also other ways to fix this issue.\r\n\r\n===\r\n[AD Note] I believe that the original intent was as shown in the corrected text.  However, the resolution is not straightforward, and an update may require further consideration in light of the current rules (rfc7950).  Therefore, I am marking this report as \"Hold for Document Update\" [1].\r\n\r\n[1] https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/", "submit_date": "2022-07-29", "submitter_name": "Jan Lindblad", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-09-07 13:26:44"}, {"errata_id": "3408", "doc-id": "RFC822", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3", "orig_text": "quoted-string = <\"> *(qtext/quoted-pair) <\">; Regular qtext or\r\n                                            ; quoted chars.\r\n\r\n\r\n[...]\r\n\r\ndomain-literal =  \"[\" *(dtext / quoted-pair) \"]\"\r\n\r\n[...]\r\n\r\ncomment     =  \"(\" *(ctext / quoted-pair / comment) \")\"", "correct_text": "quoted-string = <\"> *(qtext/quoted-pair) <\">; Regular qtext or\r\n                                            ; quoted chars.\r\n                                            ; Bare LF MUST NOT\r\n                                            ; follow the\r\n                                            ; quoted-pair \\ CR\r\n\r\n\r\n[...]\r\n\r\ndomain-literal =  \"[\" *(dtext / quoted-pair) \"]\" ; Bare LF MUST NOT\r\n                                                 ; follow the\r\n                                                 ; quoted-pair \\ CR\r\n\r\n[...]\r\n\r\ncomment     =  \"(\" *(ctext / quoted-pair / comment) \")\" ; Bare LF MUST NOT\r\n                                                        ; follow the\r\n                                                        ; quoted-pair \\ CR\r\n\r\n", "notes": "In Section B.1, the intent is made clear that an implementer should be able to read fields with minimal processing, and find their ends anywhere CRLF is not followed by a LWSP-char.\r\n\r\nThe current BNF allows the sequence \\ CR LF, where \\ CR is a quoted-pair, inside a quoted-string, domain-literal, or comment in a structured field.  An unstructured field may be any sequence of text, so the last character of an unstructured field could be \\, and the field would end with \\ CR LF.  So, robust minimal processing of fields does not work without this correction.\r\n\r\nExample:\r\n\r\n-- Unstructured field terminates here.\r\nSubject: evil = \"this \\[CRLF]\r\n[CRLF]\r\n\r\n-- Structured field does not terminate here, as written.\r\nStructured-Field: evil = \"this \\[CRLF] <-- quoted-pair,  bare LF as qtext\"\r\n[CRLF]\r\n\r\nConclusion: The plan in appendix B does not work if the quoted-pair \\ CR may be followed by a bare LF: the implementer would need to know whether a field is structured or unstructured to know where it terminates.  So, this must just be an oversight.\r\n\r\nI realize this oversight is eliminated in less obsolete documents 2822 and 5322, but (1) many other RFCs reference RFC 822 and not the less obsolete documents, and (2) the less obsolete documents do not specifically discuss this issue or release receivers from parsing messages generated according to this specification.\r\n\r\n --VERIFIER NOTES-- \r\nIt is unclear whether the original authors of 822 would have required no bare LF after a CR quoted-pair or would have changed appendix B to accommodate quoted-pairs. The IESG guidelines for errata say that errata on obsolete document that are still in use should be treated the same as errata on current documents. Since it's not clear where the error is, and since this has been dealt with in 2822/5322, this erratum is marked as \"Hold\".", "submit_date": "2012-11-14", "submitter_name": "Thomas Lane", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3409", "doc-id": "RFC6536", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.6", "orig_text": "        *  The rule does not have a \"rule-type\" defined or the \"rule-\r\n           type\" is \"notification\" and the \"notification-name\" is \"*\"\r\n           and equals the name of the notification.", "correct_text": "        *  The rule does not have a \"rule-type\" defined or the \"rule-\r\n           type\" is \"notification\" and the \"notification-name\" is \"*\"\r\n           or equals the name of the notification.", "notes": "The \"notification-name\" element may either have a value of \"*\" OR contains the name of the notification. This typo appears in section 3.4.6, authorization step 7, second bullet.", "submit_date": "2012-11-15", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3410", "doc-id": "RFC6545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "    AuthorizationStatus\r\n\r\n         One.  REQUIRED.  ENUM.  The listed values are used to provide a\r\n         response to the requesting CSIRT of the status of a Request,\r\n         Report, or Query.\r\n\r\n         1.  Approved.  The trace was approved and will begin in the\r\n             current SP.\r\n\r\n         2.  Denied.  The trace was denied in the current SP.  The next\r\n             closest SP can use this message to filter traffic from the\r\n             upstream SP using the example packet to help mitigate the\r\n             effects of the attack as close to the source as possible.\r\n             The Acknowledgement message must be passed back to the\r\n             originator and a Result message must be used from the\r\n             closest SP to the source in order to indicate actions taken\r\n             in the IODEF History class.", "correct_text": "    AuthorizationStatus\r\n\r\n         One.  REQUIRED.  ENUM.  The listed values are used to provide a\r\n         response to the requesting CSIRT of the status of a Request,\r\n         Report, or Query.\r\n\r\n         1.  Approved.  The request was approved and will be processed\r\n             and acted upon by the receiving SP or the report was\r\n             approved for processing.\r\n\r\n         2.  Denied.  The message was denied for processing by the \r\n             recipient for the reasons provided in the Justification.\r\n             If the RID message was a Trace, the next closest SP can\r\n             use this message to filter traffic from the upstream SP\r\n             using the example packet to help mitigate the effects of\r\n             the attack as close to the source as possible.  The\r\n             Acknowledgement message must be passed back to the\r\n             originator and a Result message must be used from the\r\n             closest SP to the source in order to indicate actions taken\r\n             in the IODEF History class.", "notes": "The definition for Approved and Denied was confusing to an implementer.  Although the AuthorizationStatus was broadly defined and the message flows in 7 show the Acknowledgement applies to all messages, the Approved and Denied were being read as specific to Trace Requests.", "submit_date": "2012-11-15", "submitter_name": "Kathleen Moriarty", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3411", "doc-id": "RFC5003", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "\r\n     o Prefix = The 32-bit prefix is a value assigned by the provider or\r\n       it can be automatically derived from the PE's /32 IPv4 loopback\r\n       address.  Note that, for IP reachability, it is not required that\r\n       the 32-bit prefix have any association with the IPv4 address\r\n       space used in the provider's IGP or BGP.\r\n", "correct_text": "\r\n     o Prefix = The 32-bit prefix is a value assigned by the provider or\r\n       it can be automatically derived from the PE's router-id i.e. LSR Id.\r\n       Note that it is not required that\r\n       the 32-bit prefix is IP routable or have any association with the \r\n       IPv4 address space used in the provider's IGP or BGP. \r\n", "notes": "The intent of this RFC is to treat the 32bit prefix as a number that provides uniqueness in the network (within the ASN). While it can be derived from the IPv4 /32 Loopback address, it causes confusion when routers are configured with no IPv4. It is better to suggest using router-id used by LDP for calculating the LSR identifier. How is router-id calculated is outside the scope of this document.`", "submit_date": "2012-11-15", "submitter_name": "Rajiv Asati", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3412", "doc-id": "RFC6107", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.2", "orig_text": "           Type (16 bits)\r\n\r\n             The identifier of the TLV.  Two type values are defined in\r\n             this document:\r\n\r\n             1  IGP Instance Identifier TLV\r\n             2  Unnumbered Component Link Identifier TLV\r\n             3  IPv4 Numbered Component Link Identifier TLV\r\n             4  IPv6 Numbered Component Link Identifier TLV\r\n\r\n", "correct_text": "           Type (16 bits)\r\n\r\n             The identifier of the TLV.  Four type values are defined in\r\n             this document:\r\n\r\n             1  IGP Instance Identifier TLV\r\n             2  Unnumbered Component Link Identifier TLV\r\n             3  IPv4 Numbered Component Link Identifier TLV\r\n             4  IPv6 Numbered Component Link Identifier TLV\r\n\r\n", "notes": "s/Two/Four/", "submit_date": "2012-11-16", "submitter_name": "Kris Michielsen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3428", "doc-id": "RFC5944", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "      M        Minimal encapsulation.  If the 'M' bit is set, the mobile\r\n               node requests that its home agent use minimal\r\n               encapsulation [16] for datagrams tunneled to the mobile\r\n               node.\r\n", "correct_text": "      M        Minimal encapsulation.  If the 'M' bit is set, the mobile\r\n               node requests that its home agent use minimal\r\n               encapsulation [15] for datagrams tunneled to the mobile\r\n               node.\r\n", "notes": "The citation points to the wrong reference:\r\n   [16]  Plummer, D., \"Ethernet Address Resolution Protocol: Or\r\n         Converting Network Protocol Addresses to 48.bit Ethernet\r\n         Address for Transmission on Ethernet Hardware\", STD 37, RFC\r\n         826, November 1982.\r\n\r\nIt should point to:\r\n    [15]  Perkins, C., \"Minimal Encapsulation within IP\", RFC 2004,\r\n         October 1996.", "submit_date": "2012-12-12", "submitter_name": "Ville Nuorvala", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3413", "doc-id": "RFC6742", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.3.", "orig_text": "host1.example.com. IN L32 10 10.1.02.0\r\nhost1.example.com. IN L32 20 10.1.04.0\r\nhost2.example.com. IN L32 10 10.1.08.0", "correct_text": "host1.example.com. IN L32 10 10.1.2.0\r\nhost1.example.com. IN L32 20 10.1.4.0\r\nhost2.example.com. IN L32 10 10.1.8.0", "notes": "\"As L32 values have the same syntax and semantics as IPv4 routing\r\n prefixes, when displayed for human readership, the values are\r\n presented in the same dotted-decimal format as IPv4 addresses.  An\r\n example of this syntax is shown above.\"\r\n\r\nIf this is the case I don't get the prefixed 0. Is it octal? Which clashes with the description, or is there some hidden meaning for using an extra 0.\r\nThe other example in 2.2.3 also uses these ip4 addresses.\r\n\r\n----\r\nFrom the authors:\r\n----\r\n It was not the intention of the authors to include the \r\n additional zero prefix in the third byte of the IP address.  \r\n\r\n Although the published text was not identical to the authors'\r\n intent, we believe that the numerical values presented in the \r\n examples are still correct. However, the use of the zero in \r\n this way is not conventional.  \r\n\r\n It is worth nothing that RFC-990, page 5, for example, \r\n explicitly says the IP address of the string \"010.003.000.052\" \r\n is equal to the IP address of the string \"10.3.0.52\".  The BNF \r\n and specifications of RFC-1034 and RFC-1035 does not contradict \r\n that, as far as we can tell.\r\n\r\n We do note that inet_aton(3)/inet_ntoa(3) (and associated API) \r\n of the C programming language *does* use a leading zero to flag\r\n an octal number. This is also likely to be true for some other \r\n languages, e.g. python's inet_aton() API. However, this use of\r\n a leading zero to indicate octal is not always true.  For example,\r\n the Java language InetAddress object API ignores the leading zero \r\n and treats the number as decimal.\r\n\r\n So, at the very least, the example in its present form could cause\r\n confusion, while the suggested correction would leave the example \r\n as being clear and unambiguous.\r\n\r\n The authors are grateful to Miek Gieben for spotting the ambiguity\r\n and suggesting a correction.", "submit_date": "2012-11-18", "submitter_name": "Miek Gieben", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3414", "doc-id": "RFC1459", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.3", "orig_text": "The USER message is used at the beginning of connection to specify\r\nthe username, hostname, servername and realname of s new user.", "correct_text": "The USER message is used at the beginning of connection to specify\r\nthe username, hostname, servername and realname of a new user.", "notes": "", "submit_date": "2012-11-25", "submitter_name": "Kezhu Wang", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3415", "doc-id": "RFC5036", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Prior to completion of the negotiation, the\r\nmaximum allowable length is 4096 bytes.", "correct_text": "Prior to completion of the negotiation, the\r\nmaximum allowable length is 4096 octets.", "notes": "\"octets\" instead of \"bytes\"\r\nAlthough \"octet\" is technically correct, there will be little confusion caused by the use of \"byte\"", "submit_date": "2012-11-26", "submitter_name": "Jeff Wheeler", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3416", "doc-id": "RFC5036", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "For a platform-wide label space, these SHOULD both be zero.", "correct_text": "For a platform-wide label space, these MUST both be zero.", "notes": "See Section 2.2.2 text, \"The last two octets of LDP Identifiers for platform-wide label spaces are always both zero.\"\n --VERIFIER NOTES-- \nThe text in 2.2.2 is descriptive of the LDP identifiers, but not a requirement. The text in 3.1 describes how the LDP identifier is constructed.\r\n\r\nThe purpose of the \"SHOULD\" is to direct normal behavior, but not to absolutely require the use of zero in these two octets if a good reason can be found.\r\n\r\nFurthermore, there is nothing that would actually prohibit the use of non-zero values. The identifier of a label space is a local matter and another node, seeing a label space identifier, should not make any assumptions about the label space (e.g., it being a global label space or not), nor should it really matter.", "submit_date": "2012-11-26", "submitter_name": "Jeff Wheeler", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3417", "doc-id": "RFC2560", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.2.2", "orig_text": "Systems or applications that rely on OCSP responses MUST be capable\r\nof detecting and enforcing use of the id-ad-ocspSigning value as\r\ndescribed above.\r\n\r\nand\r\n\r\n3. Includes a value of id-ad-ocspSigning in an ExtendedKeyUsage", "correct_text": "Systems or applications that rely on OCSP responses MUST be capable\r\nof detecting and enforcing use of the id-kp-OCSPSigning value as\r\ndescribed above.\r\n\r\nand\r\n\r\n3. Includes a value of id-kp-ocspSigning in an ExtendedKeyUsage", "notes": "The first paragraph specifies that an \"id-kp-OCSPSigning\" value be included, and it then defines that value as \"id-kp-OCSPSigning OBJECT IDENTIFIER ::= {id-kp 9}\", yet the second paragraph and the third listed alternative specify the use of an \"id-ad-ocspSigning\" value, which is not defined.\r\n\r\nAlso, the double quote mark at the end of the third listed alternative should be removed.", "submit_date": "2012-11-26", "submitter_name": "John Soltes", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3418", "doc-id": "RFC6030", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7 and 11", "orig_text": "Section 7:\r\n       <Signature>\r\n\r\nSection 11:\r\n               <xs:element name=\"Signature\"\r\n                    type=\"ds:SignatureType\" minOccurs=\"0\"/>\r\n", "correct_text": "Section 7:\r\n       <ds:Signature>\r\n\r\nSection 11:\r\n               <xs:element ref=\"ds:Signature\" minOccurs=\"0\"/>\r\n", "notes": "It seems the Signature element is in the wrong namespace, making PSKC incompatible with the XMLDsig specification.\r\n\r\nThere is a thread on this on the XMLSec mailing list:\r\n\r\nhttp://thread.gmane.org/gmane.text.xml.xmlsec/4178\r\n\r\nBoth Aleksey Sanin (author of the XMLSec library) and G. Ken Holman (XML\r\nexpert) appear to believe this is an error in the XML schema for PSKC:\r\n\r\nhttp://thread.gmane.org/gmane.text.xml.xmlsec/4178/focus=4181\r\nhttp://thread.gmane.org/gmane.text.xml.xmlsec/4178/focus=4185\r\n\r\nThis was brought up on the keyprov mailing list:\r\n\r\nhttp://thread.gmane.org/gmane.ietf.keyprov/1011\r\n\r\n/Simon", "submit_date": "2012-11-26", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3419", "doc-id": "RFC5789", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "A new method is necessary to improve interoperability and prevent\r\nerrors.  The PUT method is already defined to overwrite a resource\r\nwith a complete new body, and cannot be reused to do partial changes.\r\nOtherwise, proxies and caches, and even clients and servers, may get\r\nconfused as to the result of the operation.", "correct_text": "A new method may be desirable (though it is not strictly necessary).\r\nThe PUT method is already defined to overwrite a resource or a subset\r\nthereof (see RFC 2612 section 9.6), but the semantics of Content-Range\r\nwith PUT have been poorly understood and implemented by the community.\r\nTo avoid breaking existing proxies and caches that may be confused by PUT\r\nwith a partial update, PATCH seems like a better solution.", "notes": "Contrary to what is claimed in the justification for this RFC, RFC 2616 clearly\r\nanticipates the possibility of doing PUT with a partial content range. See section\r\n9.6 (http://tools.ietf.org/html/rfc2616#section-9.6). Thus, PUT is the moral\r\nequivalent of fseek() + fwrite(), not just fwrite(). I have personally implemented\r\nweb services that use PUT with Content-Range, and I don't think I'm alone. The\r\nfact that the community has not generally understood this nuance does not\r\nnecessarily mean PATCH is needed. It would be possible to simply clarify how\r\nPUT is used with Content-Range and accomplish virtually everything that PATCH\r\nis attempting. However, PATCH has the virtue of no semantic baggage, and it may\r\nalso be nice to use patch-if logic like the familiar *nix-style patch program, which\r\nis a valid semantic enhancement to dumb update. This point needs to be made\r\nmore clearly in the RFC's preamble; as-is, I think the case for PATCH is too weak.\n --VERIFIER NOTES-- \nA disagreement with IETF consensus does not an erratum make.  You may have strong disagreement with the document as published, but what's published is what was intended to be published; this is not an \"error\" in the document.   ", "submit_date": "2012-11-27", "submitter_name": "Daniel Hardman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3434", "doc-id": "RFC6225", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Section C.1.1. Encoding a Location into DHCP Geodetic Form,[Page 32]\r\n\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |   Code (144)  |  OptLen (16)  |  LatUnc   |     Latitude      .\r\n     |0 1 1 1 1 0 1 1|0 0 0 1 0 0 0 0|0 1 0 0 1 0|1 1 1 0 1 1 1 1 0 0.\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     .                Latitude (cont'd)              |  LongUnc  |   .\r\n     .0 1 0 0 1 0 0 1 0 0 1 1 0 1 1 0 0 0 0 0 1 1 0 1|0 1 0 0 1 0|0 1.\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     .                       Longitude (cont'd)                      |\r\n     .0 0 1 0 1 1 1 0 0 1 1 0 1 1 1 0 0 0 1 0 1 1 1 0 1 1 0 0 0 0 1 1|\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     | AType |   AltUnc  |                Altitude                   .\r\n     |0 0 0 1|0 0 1 1 1 1|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1.\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     .  Alt (cont'd) |Ver| Res |Datum|\r\n     .1 0 1 1 0 0 1 1|0 1|0 0 0|0 0 1|\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   In hexadecimal, this is 7B104BBC 49360D49 2E6E2EC3 13C00021 B341.\r\n   The DHCPv6 form only differs in the code and option length portion.\r\n", "correct_text": "\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |   Code (144)  |  OptLen (16)  |  LatUnc   |     Latitude      .\r\n     |1 0 0 1 0 0 0 0|0 0 0 1 0 0 0 0|0 1 0 0 1 0|1 1 1 0 1 1 1 1 0 0.\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     .                Latitude (cont'd)              |  LongUnc  |   .\r\n     .0 1 0 0 1 0 0 1 0 0 1 1 0 1 1 0 0 0 0 0 1 1 0 1|0 1 0 0 1 0|0 1.\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     .                       Longitude (cont'd)                      |\r\n     .0 0 1 0 1 1 1 0 0 1 1 0 1 1 1 0 0 0 1 0 1 1 1 0 1 1 0 0 0 0 1 1|\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     | AType |   AltUnc  |                Altitude                   .\r\n     |0 0 0 1|0 0 1 1 1 1|0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1.\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     .  Alt (cont'd) |Ver| Res |Datum|\r\n     .1 0 1 1 0 0 1 1|0 1|0 0 0|0 0 1|\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   In hexadecimal, this is 90104BBC 49360D49 2E6E2EC3 13C00021 B341.\r\n   The DHCPv6 form only differs in the code and option length portion.", "notes": "The specified value for field \"Code\" is 144(d) (from bit0 to bit7), but the binary (from bit0 to bit7) is 01111011(b) or 123(d). It should correct to 1001 0000(b) or 144(d).\r\n\r\nSummary:\r\n |-correcting point 1: Bit0 to Bit7 (from 0 1 1 1 1 0 1 1 to 1 0 0 1 0 0 0 0)\r\n |-correcting point 2: In hexadecimal (from 7B104BBC to 90104BBC )", "submit_date": "2012-12-23", "submitter_name": "Nguyen Dai Son", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3435", "doc-id": "RFC640", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11a", "orig_text": "       There are four values for the first digit of the reply code:      11a\r\n", "correct_text": "       There are five values for the first digit of the reply code:      11a\r\n", "notes": "Technical type (vs. Editorial) although operation was not affected (\"four\" cannot reasonably be considered a misspelling of \"five\")\r\n\r\nReply code first digit values per sections 11b through 11f are 1, 2, 3, 4, and 5", "submit_date": "2012-12-25", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3436", "doc-id": "RFC542", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Page 31", "orig_text": "         x7x  Mail Portocol results.\r\n", "correct_text": "         x7x  Mail Protocol results.\r\n", "notes": "", "submit_date": "2012-12-25", "submitter_name": "Bruce Lilly", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3437", "doc-id": "RFC2453", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.9.1", "orig_text": "   There is one special case.  If there is exactly\r\n   one entry in the request, and it has an address family identifier of\r\n   zero and a metric of infinity (i.e., 16), then this is a request to\r\n   send the entire routing table.\r\n\r\n", "correct_text": "   There is one special case. If there is exactly\r\n   one entry in the request, (in addition to any authentication entry)\r\n   and it has an address family identifier of zero and a metric of\r\n   infinity (i.e., 16), then this is a request to send the entire \r\n   routing table.", "notes": "Note that in RFC 2453 an authentication header is not considered to be an RTE.\r\n\r\nThere was obviously some confusion on this point and the additional parenthetic text clarifies that if an authentication entry is also present (as the first entry) then it is not included in the special case described in section 3.9.1.", "submit_date": "2012-12-26", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3438", "doc-id": "RFC5944", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7.3.2", "orig_text": "A Registration Reply that satisfies the validity checks of Section\r\n3.8.2.1 is relayed to the mobile node.", "correct_text": "A Registration Reply that satisfies the validity checks of Section\r\n3.7.3.1 is relayed to the mobile node.", "notes": "Currently, the incorrect cross reference is provided.\r\nThe Foreign Agent would perform the validity checks mentioned in Section 3.7.3.1 upon receiving the Registration Reply and would relay the Registration Reply that satisfies the validity checks.", "submit_date": "2012-12-27", "submitter_name": "Pritish Aherrao", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3439", "doc-id": "RFC5191", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "All PANA implementations MUST support AUTH_HMAC_SHA1_160 (7) [RFC4595].\r\n", "correct_text": "All PANA implementations MUST support AUTH_HMAC_SHA1_160 (7) [RFC4595] with a key length of 20 octets.", "notes": "RFC 4595 refers to FC-SP (INCITS Technical Committee T11, ANSI INCITS xxx-200x, \"Fibre Channel - Security Protocols (FC-SP)\") which refers to RFC 2104 for HMAC. However, since RFC 2104 allows variable key length, a fixed key length needs to be specified in RFC 5191 to avoid a potential interoperability problem.", "submit_date": "2012-12-27", "submitter_name": "Yoshihiro Ohba", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3440", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Unlike in IPv4 Router Discovery, the Router Advertisement messages\r\ndo not contain a preference field.  The preference field is not ...", "correct_text": "The Router Advertisement preference field is not ...", "notes": "If Errata #3367 is applied to this document, incorporating the Default Router Preference into the base ND specification, then this errata must also be applied to Section 3.1 paragraph 14.\r\nIf Errata #3367 is rejected then this errata should also be rejected.", "submit_date": "2012-12-28", "submitter_name": "Jeff Wheeler", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3441", "doc-id": "RFC5155", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.3 & 8.5", "orig_text": "7.2.3\r\n\r\n(contents)\r\n\r\n8.5\r\n\r\n(contents)\r\n", "correct_text": "7.2.3.  No Data Responses, QTYPE is not DS\r\n\r\n  If the No Data Response is a result of an empty non-terminal derived \r\n  from an insecure delegation covered by an Opt-Out NSEC3 RR, the \r\n  closest provable encloser proof MUST be included in the response.  \r\n  The included NSEC3 RR that covers the \"next closer\" name for the \r\n  delegation MUST have the Opt-Out flag set to one. \r\n\r\n  In all other cases, the server MUST include the NSEC3 RR that matches \r\n  QNAME.  This NSEC3 RR MUST NOT have the bits corresponding to either \r\n  the QTYPE or CNAME set in its Type Bit Maps field.\r\n\r\n===============================================\r\n\r\n8.5.  Validating No Data Responses, QTYPE is not DS\r\n\r\n  If there is an NSEC3 RR that matches QNAME present, the validator must \r\n  check that both the QTYPE and the CNAME type are not set in its Type \r\n  Bit Maps field.\r\n\r\n  Note that this test also covers the case where the NSEC3 RR exists\r\n  because it corresponds to an empty non-terminal, in which case the\r\n  NSEC3 RR will have an empty Type Bit Maps field.\r\n\r\n  If there is no NSEC3 RR present that matches QNAME, then the validator \r\n  MUST verify a closest provable encloser proof for the QNAME.  The \r\n  validator MUST verify that the Opt-Out bit is set in the NSEC3 RR that \r\n  covers the \"next closer\" name to the delegation name. This test covers \r\n  the case where the response is due to an Empty Non-Terminal derived \r\n  from an insecure delegation covered by an Opt-Out NSEC3 RR.\r\n", "notes": "The corrections were derived from a private email from an editor of RFC 5155.  Note that the ordering of the paragraphs in the proposed 8.5 fix has been changed.  No other change is intentional.\r\n\r\nFrom Roy Arends:\r\n\r\nWe missed documenting the case of what a server and a validator should do in case of an opted-out, multi-label delegation. We did make it clear in signing (7.1). \r\n\r\nThis is also not part of the demo zone, included in RFC5155.\r\n\r\nAs suggested text for an errata, may I offer:\r\n\r\n7.2.3.  No Data Responses, QTYPE is not DS\r\n\r\n  If the No Data Response is a result of an empty non-terminal derived \r\n  from an insecure delegation covered by an Opt-Out NSEC3 RR, the \r\n  closest provable encloser proof MUST be included in the response.  \r\n  The included NSEC3 RR that covers the \"next closer\" name for the \r\n  delegation MUST have the Opt-Out flag set to one. \r\n\r\n  In all other cases, the server MUST include the NSEC3 RR that matches \r\n  QNAME.  This NSEC3 RR MUST NOT have the bits corresponding to either \r\n  the QTYPE or CNAME set in its Type Bit Maps field.\r\n\r\n8.5.  Validating No Data Responses, QTYPE is not DS\r\n\r\n  If there is no NSEC3 RR present that matches QNAME, then the validator \r\n  MUST verify a closest provable encloser proof for the QNAME.  The \r\n  validator MUST verify that the Opt-Out bit is set in the NSEC3 RR that \r\n  covers the \"next closer\" name to the delegation name. This test covers \r\n  the case where the response is due to an Empty Non-Terminal derived \r\n  from an insecure delegation covered by an Opt-Out NSEC3 RR.\r\n\r\n  If there is an NSEC3 RR that matches QNAME present, the validator must \r\n  check that both the QTYPE and the CNAME type are not set in its Type \r\n  Bit Maps field.\r\n\r\n  Note that this test also covers the case where the NSEC3 RR exists\r\n  because it corresponds to an empty non-terminal, in which case the\r\n  NSEC3 RR will have an empty Type Bit Maps field.\r\n\r\nThe following message is the singularly most important one in the errata submission, from David Blacka, commenting on the order of the paragraphs:\r\n\r\nhttp://www.ietf.org/mail-archive/web/dnsext/current/msg12835.html\r\n\r\nThe heads of the threads to review:\r\n\r\nhttp://www.ietf.org/mail-archive/web/dnsext/current/msg12819.html\r\nhttp://www.ietf.org/mail-archive/web/dnsext/current/msg12821.html\r\nhttp://www.ietf.org/mail-archive/web/dnsext/current/msg12830.html\r\nhttp://www.ietf.org/mail-archive/web/dnsext/current/msg12832.html\r\nhttp://www.ietf.org/mail-archive/web/dnsext/current/msg12839.html\r\nhttp://www.ietf.org/mail-archive/web/dnsext/current/msg12854.html\r\nand\r\nhttp://www.ietf.org/mail-archive/web/dnsext/current/msg12864.html", "submit_date": "2012-12-31", "submitter_name": "Edward Lewis", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4459", "doc-id": "RFC2104", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix", "orig_text": "        /* start out by storing key in pads */\r\n        bzero( k_ipad, sizeof k_ipad);\r\n        bzero( k_opad, sizeof k_opad);\r\n        bcopy( key, k_ipad, key_len);\r\n        bcopy( key, k_opad, key_len);\r\n\r\n        /* XOR key with ipad and opad values */\r\n        for (i=0; i<64; i++) {\r\n                k_ipad[i] ^= 0x36;\r\n                k_opad[i] ^= 0x5c;\r\n        }", "correct_text": "        /* start out by storing key in pads */\r\n        bzero( k_ipad, sizeof k_ipad);\r\n        bzero( k_opad, sizeof k_opad);\r\n        bcopy( k_ipad, key, key_len);\r\n        bcopy( k_opad, key, key_len);\r\n\r\n        /* XOR key with ipad and opad values */\r\n        for (i=0; i<64; i++) {\r\n                k_ipad[i] ^= 0x36;\r\n                k_opad[i] ^= 0x5c;\r\n        }", "notes": "The ipad = the byte 0x36 repeated 64 times, opad = the type 0x5C repeated B times and then ipad and opad XOR K after it appended to 64 byptes.\n --VERIFIER NOTES-- \n\r\nThe net effect of the suggested change would be to zero the key \r\nand make HMAC useless.", "submit_date": "2015-08-27", "submitter_name": "Bozhi ZHENG", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3445", "doc-id": "RFC3501", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.3.1", "orig_text": "         OK [UIDNEXT <n>]\r\n                     The next unique identifier value.  Refer to section\r\n                     2.3.1.1 for more information.  If this is missing,\r\n                     the client can not make any assumptions about the\r\n                     next unique identifier value.", "correct_text": "         OK [UIDNEXT <n>]\r\n                     The next unique identifier value.  Refer to section\r\n                     2.3.1.1 for more information.", "notes": "The UIDNEXT response to a SELECT/EXAMINE command is a \"REQUIRED OK untagged response\" (see Sections 6.3.1 & 6.3.2; see also Appendix B #34).  The UIDNEXT response code requires a nz-number per the ABNF (Section 9).  Therefore the UIDNEXT value can never be \"missing\" from a SELECT/EXAMINE, and no assumptions about client behavior should be mentioned.\r\n\r\nAs currently phrased, the UIDNEXT text implies that the response MAY be missing, which is in direct conflict with the requirements in Sections 6.3.1/6.3.2 that UIDNEXT MUST always be present.  REQUIRED appears to be the proper requirement based on the previously mentioned change entry.\r\n\r\nSee discussion on the IMAP protocol discussion list (http://thread.gmane.org/gmane.mail.imap.general/3163).\n --VERIFIER NOTES-- \nLook at the paragraph above the responses in Section 6.3.1.  It says this:\r\n\r\n      The SELECT command selects a mailbox so that messages in the\r\n      mailbox can be accessed.  Before returning an OK to the client,\r\n      the server MUST send the following untagged data to the client.\r\n      Note that earlier versions of this protocol only required the\r\n      FLAGS, EXISTS, and RECENT untagged data; consequently, client\r\n      implementations SHOULD implement default behavior for missing data\r\n      as discussed with the individual item.\r\n\r\nThe text that you're suggesting removing is there very purposefully,\r\nand should NOT be removed.  That said, I think this is not very clear,\r\nand I would like to see a future document update re-word things to\r\nmake it clearer.\r\n\r\nThe point is that these are REQUIRED in the current version of the protocol,\r\nbut that because they were optional in an earlier version, and that version is\r\nnot distinguishable from this one in operation, clients SHOULD support the\r\nearlier version by taking the actions specified in the even that some or all of\r\nthese untagged OK responses are missing.", "submit_date": "2013-01-06", "submitter_name": "Michael Slusarz", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3446", "doc-id": "RFC6749", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "o  Resource owners cannot revoke access to an individual third party\r\n   without revoking access to all third parties, and must do so by\r\n   changing the third party's password.", "correct_text": "o  Resource owners cannot revoke access to an individual third party\r\n   without revoking access to all third parties, and must do so by\r\n   changing their password.", "notes": "The text was originally \"their\" but changed to \"the third party's\" between the last draft and RFC.\r\nHowever, \"their\" means \"resource owners'\", not \"the third party's\".", "submit_date": "2013-01-07", "submitter_name": "Nov Matake", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3447", "doc-id": "RFC5321", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "When the delivery SMTP server makes the \"final delivery\" of a\r\n   message, it inserts a return-path line at the beginning of the mail\r\n   data.  This use of return-path is required; mail systems MUST support\r\n   it.\r\n\r\n...\r\n\r\nSMTP servers performing\r\n   a relay function MUST NOT inspect the message data\r\n\r\n...\r\n\r\nFor this to be unambiguous, exactly one return path\r\n   SHOULD be present when the message is delivered.", "correct_text": "When the delivery SMTP server makes the \"final delivery\" of a\r\n   message, it MUST insert a return-path line at the beginning of the mail\r\n   data. \r\n\r\n\r\nFor this to be unambiguous, exactly one return path\r\n   MUST be present when the message is delivered. ", "notes": "There are contradictory and ambiguous statements in this section.  Return-path is classified in 5322 as optional.  It's not 100% clear in the original text whether the server MUST prepend the return-path header or not.\r\n\r\nDo we really want to prohibit inspection by relays in this section?  I would imagine this MUST level requirement is routinely ignored anyway.\r\n\r\nAlternatively, we decide that Return-path is truly optional and change the first sentence to make that clear instead of the strongly implied MUST.\r\n\r\n--- VERIFIER NOTES ---\r\nThis erratum would normally meet the criteria for \"Rejected\", but\r\nit points out that as it currently stands, RFC 5321 is in need of\r\nsome work, perhaps in the process of advancing it on the Standards\r\nTrack to Internet Standard.  The erratum raises some issues, which\r\nI'll note here:\r\n\r\n1. RFC 5321 uses the capitalized key words from RFC 2119 only sparingly,\r\nand much of the normative language in the document is written in plain\r\nEnglish (\"the server does this\", rather than \"the server MUST do this\").\r\nThis is by intent, and is certainly not an error in the document, but\r\nsome people find it less clear.\r\n\r\n2. While RFC 5321 and RFC 5322 go hand in hand for most of us most of\r\nthe time, they are quite separable.  RFC 5321 can be used to transfer\r\ndata that does not conform to the format in RFC 5322, and message stores\r\ncan contain messages in RFC 5322 format that were not put there via\r\nSMTP (RFC 5321).  As a result, there are sometimes things that seem\r\ncontradictory between the two documents, if one is not aware of this\r\nsituation.\r\n\r\n3. RFC 5321 specifies a protocol that we know is not fully followed\r\neverywhere.  That there are known variants does not mean that we should\r\ndefine the protocol any less rigorously, and the claim that a requirement\r\nof the protocol is \"routinely ignored\" may well be true, but is not\r\nrelevant to how the protocol is defined.\r\n\r\nAll that said, the points need to be considered when a revision of\r\nRFC 5321 is taken on, and I'm marking this as \"Held for Document Update\"\r\nso that it will be staring us in the face is and when that happens.", "submit_date": "2013-01-07", "submitter_name": "Adrien de Croy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4460", "doc-id": "RFC6902", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   However, the object itself or an array containing it does need to\r\n   exist, and it remains an error for that not to be the case.  For\r\n   example, an \"add\" with a target location of \"/a/b\" starting with this\r\n   document:\r\n\r\n   { \"a\": { \"foo\": 1 } }\r\n\r\n   is not an error, because \"a\" exists, and \"b\" will be added to its\r\n   value.  It is an error in this document:\r\n\r\n   { \"q\": { \"bar\": 2 } }\r\n\r\n   because \"a\" does not exist.", "correct_text": "   However, the object itself or an array containing it does need to\r\n   exist, and it remains an error for that not to be the case.  For\r\n   example, an \"add\" with a target location of \"/a/b\" starting with this\r\n   document:\r\n\r\n   { \"a\": { \"foo\": 1 } }\r\n\r\n   is not an error, because \"a\" exists, and \"b\" will be added to its\r\n   value.  It is an error in this document:\r\n\r\n   { \"q\": { \"bar\": 2 } }\r\n\r\n   because \"a\" does not exist. Considering a target location of \"/a/1\"\r\n   it should be not be an error in this document:\r\n\r\n    { \"a\": [ \"foo\" ] }\r\n\r\n    while the same \"add\" into this document will be an error:\r\n\r\n    { \"a\": [ ] }\r\n\r\n    because \"/a/0\" does not exist.\r\n\r\n\r\n", "notes": "Adding to an object has such a nice example that explains the error cases. I think adding to a sequential array should have one as well.\r\n\r\nTo my understanding this is already pretty clear from RFC6901, I feel it will make the spec easier to implement if we have an example right here.\n --VERIFIER NOTES-- \nThanks for the comment, Lucas.  This is, though, not a report of an error, so as an errata report it is rejected.  It is a reasonable suggestion that we should consider if a new version of the document is done.  The comment is recorded in the JSON mailing list archive.", "submit_date": "2015-08-29", "submitter_name": "Lucas Bickel", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4461", "doc-id": "RFC4861", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2.3", "orig_text": "- In the Cur Hop Limit field: the interface's configured\r\n        CurHopLimit.", "correct_text": "- In the Cur Hop Limit field: the interface's configured\r\n        AdvCurHopLimit.", "notes": "The interface 's configured name of Cur Hop Limit is AdvCurHopLimit in the Section 6.2.1.", "submit_date": "2015-08-30", "submitter_name": "Zhou Yangchao", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3448", "doc-id": "RFC6290", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   For session resumption, as specified in [RFC5723], the situation is\r\n   similar.  The responder, which is necessarily the peer that has\r\n   crashed, SHOULD send a new ticket within the protected payload of the\r\n   IKE_SESSION_RESUME exchange.  If the Initiator is also a token maker,\r\n   it needs to send a QCD_TOKEN in a separate INFORMATIONAL exchange.", "correct_text": "   For session resumption, as specified in [RFC5723], the situation is\r\n   similar.  The responder, which is necessarily the peer that has\r\n   crashed, SHOULD send a new QCD_TOKEN in the IKE_AUTH exchange\r\n   that immediately followes the IKE_SESSION_RESUME exchange.\r\n   If the Initiator is also a token maker, it needs to send a QCD_TOKEN in\r\n   the same IKE_AUTH exchange.\r\n", "notes": "Original text mixes up terms \"ticket\" (as Session Resumption ticket from RFC5723) and \"token\" (as QCD token from this RFC). As QCD token must never be sent in an unprotected message (see section 9.2 from this RFC) it cannot be sent in the IKE_SESSION_RESUME exchange because this exchange is done in clear. So, QCD token must be sent in the IKE_AUTH exchange that immediately followes the IKE_SESSION_RESUME exchange. In this case there is no need for the separate INFORMATIONAL exchange the Initiator's QCD token (if any) to be sent in, because it could be sent in the same IKE_AUTH exchange.", "submit_date": "2013-01-09", "submitter_name": "Valery Smyslov", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3449", "doc-id": "RFC6290", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   o  Protocol ID (1 octet) MUST be 1, as this message is related to an\r\n      IKE SA.\r\n", "correct_text": "   o  Protocol ID (1 octet) MUST be 0.\r\n", "notes": "RFC5996 (IKEv2) in section 3.10 while describing Protocol ID field in Notify Payload specifies that \"If the SPI field is empty, this field MUST be sent as zero and MUST be ignored on receipt\". As this RFC requires SPI field to be empty (later in section 4.1), Protocol ID should be zero to be consistent with RFC5996.", "submit_date": "2013-01-09", "submitter_name": "Valery Smyslov", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3450", "doc-id": "RFC6639", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.9", "orig_text": "   The mplsOutSegmentPerfTable [RFC3813] contains statistical\r\n   information (total packets received, total errored packets received,\r\n   total packets discarded, discontinuity time) for outgoing MPLS\r\n   segments from an LSR.\r\n", "correct_text": "   The mplsOutSegmentPerfTable [RFC3813] contains statistical\r\n   information (total packets sent, \r\n   total packets that could not be sent due to errors, \r\n   total packets discarded, discontinuity time) for outgoing MPLS\r\n   segments from an LSR.\r\n", "notes": "mplsOutSegmentPerfTable is for segments sent, current text relates to segments received.", "submit_date": "2013-01-10", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7056", "doc-id": "RFC8542", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "augment \"/nw:networks/nw:network/nw:node/nt:termination-point\" {\r\n  when '/nw:networks/nw:network/nw:network-types/'\r\n     + 'fabric:fabric-network' {\r\n    description\r\n      \"Augmentation parameters apply only for networks\r\n       with fabric topology\";\r\n  }\r\n", "correct_text": "augment \"/nw:networks/nw:network/nw:node/nt:termination-point\" {\r\n  when '../../nw:network-types/fabric:fabric-network' {\r\n    description\r\n      \"Augmentation parameters apply only for networks\r\n       with fabric topology\";\r\n  }\r\n", "notes": "The original YANG statements make the augmentation apply to all nw:networks as soon as there is at least one nw:network that is of fabric:fabric-network topo. This is clearly not the author's intent, as proven by the text in the description statement.\r\n\r\nThe corrected YANG statements make the augmentation only apply to the specific nw:networks that are of fabric topology. There are also other ways to fix this issue.\r\n\r\n===\r\n[AD Note] I believe that the original intent was as shown in the corrected text.  However, the resolution is not straightforward, and an update may require further consideration in light of the current rules (rfc7950).  Therefore, I am marking this report as \"Hold for Document Update\" [1].\r\n\r\n[1] https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/", "submit_date": "2022-07-29", "submitter_name": "Jan Lindblad", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-09-07 13:31:52"}, {"errata_id": "3849", "doc-id": "RFC4760", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   The next hop information carried in the MP_REACH_NLRI path attribute\r\n   defines the Network Layer address of the router that SHOULD be used\r\n   as the next hop to the destinations listed in the MP_NLRI attribute\r\n   in the UPDATE message.", "correct_text": "   The next hop information carried in the MP_REACH_NLRI path attribute\r\n   defines the Network Layer address of the router that SHOULD be used\r\n   as the next hop to the destinations listed in the NLRI field of the \r\n   MP_REACH_NLRI attribute in the UPDATE message.", "notes": "There is no attribute named \"MP_NLRI\".\r\n\r\nWhilst this should be looked at in any update of the text, the correct term is clear from the context.", "submit_date": "2013-12-25", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3848", "doc-id": "RFC4760", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   (b) to permit a router to advertise the Network Layer address of the\r\n       router that should be used as the next hop to the destinations\r\n       listed in the Network Layer Reachability Information field of the\r\n       MP_NLRI attribute.", "correct_text": "   (b) to permit a router to advertise the Network Layer address of the\r\n       router that should be used as the next hop to the destinations\r\n       listed in the Network Layer Reachability Information field of the\r\n       MP_REACH_NLRI attribute.", "notes": "There is no attribute named \"MP_NLRI\".\r\n\r\nWhilst this should be corrected in any revision of the text, the correct term is clear from the context.", "submit_date": "2013-12-23", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3845", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2.4", "orig_text": "       PHOTO:data:image/jpeg;base64,MIICajCCAdOgAwIBAgICBEUwDQYJKoZIhv\r\n", "correct_text": "       PHOTO:data:image/jpeg;base64\\,MIICajCCAdOgAwIBAgICBEUwDQYJKoZIhv\r\n", "notes": "Section 3.4 states that all property values must have COMMA characters escaped with a BACKSLASH character. The PHOTO property value in the example contains a comma. Therefore it must be escaped with a backslash. Note that there are several other uses of the \"data:\" URI scheme in the document that also need to be corrected.\r\n\r\nAlternatively, a different format for base64 encoded data could be used in vCard 4.0. The ENCODING=b format used in vCard 3.0 wasn't so bad.\r\n\r\n\r\n----- Verifier notes -----\r\nThis represents a difference from earlier versions of vCard, and the ABNF does not support escaping for URIs.  This errata report is correct and verified, but a full correction to the issue will have to wait for a document update.", "submit_date": "2013-12-20", "submitter_name": "David Riggle", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3842", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.4.4", "orig_text": "It is used to restrict the built-in type \"string\", or types derived\r\nfrom \"string\".", "correct_text": "It is used to restrict the built-in types \"string\" and \"binary\", or\r\ntypes derived from them.", "notes": "The \"length\" statement can also restrict the \"binary\" type. See also erratum 3835.", "submit_date": "2013-12-13", "submitter_name": "Ladislav Lhotka", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3451", "doc-id": "RFC4733", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "Named telephone events are carried as part of the audio stream and\r\nMUST use the same sequence number and timestamp base as the regular\r\naudio channel to simplify the generation of audio waveforms at a \r\ngateway.", "correct_text": "Named telephone events are carried as part of the audio stream and\r\nMUST use the same SSRC (therefore the same timing and sequence\r\nnumber space) and the same timestamp clock rate as the regular\r\naudio channel to simplify the generation of audio waveforms at a\r\ngateway.", "notes": "RFC4733 was written in a way to avoid the multiple clock-rate problem by mandating the use of the same SSRC for DTMF and audio. However it's not explicitly written, which brings an ambiguity. It was commented that RFC4733 needs to be updated. (c.f. http://tools.ietf.org/wg/avtext/minutes?item=minutes-85-avtext.html)\n --VERIFIER NOTES-- \nDiscussions around this erratum resulted in the updated 3489 erratum.   ", "submit_date": "2013-01-11", "submitter_name": "Xavier Marjou", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3452", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "11", "orig_text": "Multiple LSAs may\r\nreference the destination, however a tie-breaking scheme always\r\nreduces the choice to a single LSA.", "correct_text": "Multiple LSAs may\r\nreference the same destination, however a tie-breaking scheme always\r\nreduces the choice to a single LSA. ", "notes": "I think should add the \"same\" to describe it more clearly.\r\n --VERIFIER NOTES-- \r\n   Section 11 is written in terms of \"the destination\", and this is clearly a single destination, thus there should be no confusion with the original text.", "submit_date": "2013-01-12", "submitter_name": "David Jet", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3453", "doc-id": "RFC5024", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.1", "orig_text": "   The Speaker notifies the Listener that it has finished sending a\r\n   Virtual File by sending an End File (EFID) command.  The Listener\r\n   replies with a positive or negative End File command and has the\r\n   option to request a Change Direction command from the Speaker.\r\n \r\n   1. Speaker  -- EFID ------------> Listener   End File\r\n               <------------ EFPA --            Answer YES\r\n \r\n   2. Speaker  -- EFID ------------> Listener   End File\r\n               <------------ EFPA --            Answer YES + CD\r\n               -- CD -------------->            Change Direction\r\n      Listener <------------ EERP -- Speaker    End to End Response\r\n               -------------- RTR ->            Ready to Receive\r\n      Listener <------------ NERP -- Speaker    Negative End Response\r\n               -------------- RTR ->            Ready to Receive\r\n               Go to Start File Phase\r\n \r\n   3. Speaker  -- EFID ------------> Listener   End File\r\n               <------------ EFNA --            Answer NO", "correct_text": "   The Speaker notifies the Listener that it has finished sending a\r\n   Virtual File by sending an End File (EFID) command.  The Listener\r\n   replies with a positive or negative End File command and has the\r\n   option to request a Change Direction command from the Speaker.\r\n \r\n   1. Speaker  -- EFID ------------> Listener   End File\r\n               <------------ EFPA --            Answer YES\r\n \r\n   2. Speaker  -- EFID ------------> Listener   End File\r\n               <------------ EFPA --            Answer YES   CD\r\n               -- CD -------------->            Change Direction\r\n      Listener <------------ EERP -- Speaker    End to End Response\r\n               -------------- RTR ->            Ready to Receive\r\n      Listener <------------ NERP -- Speaker    Negative End Response\r\n               -------------- RTR ->            Ready to Receive\r\n               Go to Start File Phase\r\n \r\n   3. Speaker  -- EFID ------------> Listener   End File\r\n               <------------ EFNA --            Answer NO\r\n \r\n   Following the receipt of a positive End File command which does\r\n   not request a Change Direction command, the Speaker has the option\r\n   to send   a file (SFID), an EERP/NERP, a CD or an ESID with error. \r\n\r\n   If the Speaker wishes to end the session normally, a \r\n   Change Direction (CD) command MUST be sent to the Listener.\r\n \r\n   4. Speaker  -- EFID ------------> Listener   End File\r\n               <------------ EFPA --            Answer YES   No CD\r\n               -- CD -------------->            Change Direction\r\n      Listener <------------ ESID -- Speaker    End Session", "notes": "This erratum adds a little more documentation to the ODETTE protocol,\r\nbut doesn't seem to be correcting an actual error.", "submit_date": "2013-01-14", "submitter_name": "Ieuan Friend", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3454", "doc-id": "RFC5024", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.3.2", "orig_text": "   o-------------------------------------------------------------------o\r\n   |       SSID        Start Session                                   |\r\n   |                                                                   |\r\n   |       Start Session Phase     Initiator <---> Responder           |\r\n   |-------------------------------------------------------------------|\r\n   | Pos | Field     | Description                           | Format  |\r\n   |-----+-----------+---------------------------------------+---------|\r\n   |   0 | SSIDCMD   | SSID Command 'X'                      | F X(1)  |\r\n   |   1 | SSIDLEV   | Protocol Release Level                | F 9(1)  |\r\n   |   2 | SSIDCODE  | Initiator's Identification Code       | V X(25) |\r\n   |  27 | SSIDPSWD  | Initiator's Password                  | V X(8)  |\r\n   |  35 | SSIDSDEB  | Data Exchange Buffer Size             | V 9(5)  |\r\n   |  40 | SSIDSR    | Send / Receive Capabilities (S/R/B)   | F X(1)  |\r\n   |  41 | SSIDCMPR  | Buffer Compression Indicator (Y/N)    | F X(1)  |\r\n   |  42 | SSIDREST  | Restart Indicator (Y/N)               | F X(1)  |\r\n   |  43 | SSIDSPEC  | Special Logic Indicator (Y/N)         | F X(1)  |\r\n   |  44 | SSIDCRED  | Credit                                | V 9(3)  |\r\n   |  47 | SSIDAUTH  | Secure Authentication (Y/N)           | F X(1)  |\r\n   |  48 | SSIDRSV1  | Reserved                              | F X(4)  |\r\n   |  52 | SSIDUSER  | User Data                             | V X(8)  |\r\n   |  60 | SSIDCR    | Carriage Return                       | F X(1)  |\r\n   o-------------------------------------------------------------------o\r\n\r\n      SSIDCMD   Command Code\r\n      Character\r\n\r\n      Value: 'X'  SSID Command identifier.\r\n\r\n   SSIDLEV   Protocol Release Level                           Numeric(1)\r\n\r\n             Used to specify the level of the ODETTE-FTP protocol\r\n\r\n      Value: '1' for Revision 1.2\r\n             '2' for Revision 1.3\r\n             '4' for Revision 1.4\r\n             '5' for Revision 2.0\r\n\r\n             Future release levels will have higher numbers.  The\r\n             protocol release level is negotiable, with the lowest level\r\n             being selected.\r\n\r\n             Note: ODETTE File Transfer Protocol 1.3 (RFC 2204)\r\n                   specifies '1' for the release level, despite adhering\r\n                   to revision 1.3.", "correct_text": "   o-------------------------------------------------------------------o\r\n   |       SSID        Start Session                                   |\r\n   |                                                                   |\r\n   |       Start Session Phase     Initiator <---> Responder           |\r\n   |-------------------------------------------------------------------|\r\n   | Pos | Field     | Description                           | Format  |\r\n   |----- ----------- --------------------------------------- ---------|\r\n   |   0 | SSIDCMD   | SSID Command 'X'                      | F X(1)  |\r\n   |   1 | SSIDLEV   | Protocol Release Level                | F 9(1)  |\r\n   |   2 | SSIDCODE  | Initiator's Identification Code       | V X(25) |\r\n   |  27 | SSIDPSWD  | Initiator's Password                  | V X(8)  |\r\n   |  35 | SSIDSDEB  | Data Exchange Buffer Size             | V 9(5)  |\r\n   |  40 | SSIDSR    | Send / Receive Capabilities (S/R/B)   | F X(1)  |\r\n   |  41 | SSIDCMPR  | Buffer Compression Indicator (Y/N)    | F X(1)  |\r\n   |  42 | SSIDREST  | Restart Indicator (Y/N)               | F X(1)  |\r\n   |  43 | SSIDSPEC  | Special Logic Indicator (Y/N)         | F X(1)  |\r\n   |  44 | SSIDCRED  | Credit                                | V 9(3)  |\r\n   |  47 | SSIDAUTH  | Secure Authentication (Y/N)           | F X(1)  |\r\n   |  48 | SSIDRSV1  | Reserved                              | F X(4)  |\r\n   |  52 | SSIDUSER  | User Data                             | V X(8)  |\r\n   |  60 | SSIDCR    | Carriage Return                       | F X(1)  |\r\n   o-------------------------------------------------------------------o\r\n \r\n      SSIDCMD   Command Code\r\n      Character\r\n \r\n      Value: 'X'  SSID Command identifier.\r\n \r\n   SSIDLEV   Protocol Release Level                           Numeric(1)\r\n \r\n             Used to specify the level of the ODETTE-FTP protocol\r\n \r\n      Value: '1' for Revision 1.2\r\n             '2' for Revision 1.3\r\n             '4' for Revision 1.4\r\n             '5' for Revision 2.0\r\n \r\n             Future release levels will have higher numbers.  The\r\n             protocol release level is negotiable, with the lowest level\r\n             being selected.\r\n \r\n             Note: ODETTE File Transfer Protocol 1.3 (RFC 2204)\r\n                   specifies '1' for the release level, despite adhering\r\n                   to revision 1.3.\r\n \r\n       Negotiation of the release level:\r\n \r\n             Release level m -- SSID ------------>\r\n                             <------------ SSID --  Release level n\r\n                                                    (n less than or\r\n                                                     equal to m)\r\n             \r\n             The negotiated value will be n unless it is rejected\r\n             with an ESID '10' (Mode or capabilities incompatible).\r\n \r\n                             -- ESID '10' ------->", "notes": "Clarification of the protocol release level negotiation process.\r\n\r\nThis erratum adds a little more to the ODETTE protocol's documentation, but does not report an error. ", "submit_date": "2013-01-14", "submitter_name": "Ieuan Friend", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3460", "doc-id": "RFC5109", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "In Figure 12,\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|0|0|0|0 0 0 0|0|0 0 1 1 0 0 1|0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   ....\r\n\r\n      P rec.:    0     [0 XOR 0 XOR 0 XOR 0]\r\n      X rec.:    0     [0 XOR 0 XOR 0 XOR 0]\r\n      CC rec.:   0     [0 XOR 0 XOR 0 XOR 0]\r\n      M rec.:    0     [1 XOR 0 XOR 1 XOR 0]", "correct_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|0|0|0|0 0 0 0|1|0 0 1 1 0 0 1|0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   ....\r\n\r\n      P rec.:    0     [0 XOR 0]\r\n      X rec.:    0     [0 XOR 0]\r\n      CC rec.:   0     [0 XOR 0]\r\n      M rec.:    1     [1 XOR 0]\r\n", "notes": "These fields (P rec., X rec., CC rec., and M rec.) should be calculated from the packets that are protected at Level 0 (as specified). The specification text in previous sections are all correct. This change here is only a typo in the examples, but correcting it helps to understand the specification.", "submit_date": "2013-01-16", "submitter_name": "Adam Li", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3455", "doc-id": "RFC6546", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "If a RID system receives an improper RID message in an HTTP Request,\r\nit MUST return an appropriate 4xx Client Error result code to the \r\nrequesting RID system.\r\n", "correct_text": "If a RID system receives an improper HTTP Request, it MUST return \r\nan appropriate 4xx Client Error result code to the requesting RID \r\nsystem.\r\n", "notes": "There has been some discussion of this issue on the MILE mailing list.  Another possible option for the corrected text is to say nothing at all.  That is, by changing the specification to focus on an improper HTTP request, rather than an improper RID message, the corrected text is simply a restatement of existing HTTP behavior.  (Either way, this still does constitute a technical change since we would no longer be requiring the 400 status code when the error is with the *RID* content).  On this technical point, we had consensus on the MILE mailing list:  we SHOULD NOT require an HTTP 4xx status code when there is an error with the RID content itself (as opposed to the HTTP layer).  HTTP 4xx status is reserved for errors occurring in the HTTP protocol layer.  Errors in the RID content will be reported via the RID Acknowledgement message type, with appropriate choices for the RequestStatus element, and Justification attribute.", "submit_date": "2013-01-14", "submitter_name": "John Field", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3456", "doc-id": "RFC1180", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.4", "orig_text": "The portion of the address that is used for network number and for\r\nhost number is defined by the upper bits in the 4-byte address.  All\r\nexample IP addresses in this tutorial are of type class C, meaning\r\nthat the upper 3 bits indicate that 21 bits are the network number\r\nand 8 bits are the host number.  This allows 2,097,152 class C\r\nnetworks up to 254 hosts on each network.", "correct_text": "The portions of the address that are used as network number and as\r\nhost number are defined by the netmask. All example IP addresses in\r\nthis tutorial are of type class C and have a netmask of 255.255.255.0,\r\nmeaning that the first three bytes (24 bits) represent the network\r\nnumber and the last eight bits the host number. This allows 16,777,216\r\nclass C networks with up to 254 hosts on each network.", "notes": "The concept of IP address loses much of its meaning if the value of the\r\nnetmask is ignored. The paragraph as originally written doesn't make\r\nsense, in particular \"the upper 3 bits indicate that 21 bits are the network\r\nnumber\".", "submit_date": "2013-01-15", "submitter_name": "John Morley", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3457", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "Property parameter values that contain the COLON, SEMICOLON, or COMMA\r\ncharacter separators MUST be specified as quoted-string text values.", "correct_text": "Property parameter values that contain the COLON, SEMICOLON, COMMA or\r\nSPACE character separators MUST be specified as quoted-string text\r\nvalues.", "notes": "Section \"3.2.2. Common Name\" gives an example with an double-quoted parameter value with a SPACE in it:\r\n\r\n       ORGANIZER;CN=\"John Smith\":mailto:jsmith@example.com\n --VERIFIER NOTES-- \nThat example also shows a double-quoted parameter value with a \"J\" in it, but that doesn't mean that values that contain \"J\" MUST be quoted.  Examples are just examples, and any value MAY be quoted.\r\n\r\nThe ABNF is the definitive source.  The ABNF at the bottom of page 10 and top of page 11 (Section 3.1) says that non-quoted values may contain any number of characters from the SAFE-CHAR set, and that set includes WSP (SP and HTAB; see RFC 5234).  Quoting is not required on account of space characters.", "submit_date": "2013-01-16", "submitter_name": "Johannes Raggam", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3458", "doc-id": "RFC5261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "<!ENTITY id     \"id\\(('&ncname;')?\\)|id\\((&quot;&ncname;&quot;)?\\)\">", "correct_text": "<!ENTITY id     \"id\\('&ncname;'\\)|id\\(&quot;&ncname;&quot;\\)\">", "notes": "The regex in the XSD suggests that \"id()\" would be a valid selector for a patch, but it would not make sense to specify such a selector since it never would select a node (there's no identifier to locate in the document). This means that while \"id()\" is a valid XPath expression, it should not be allowed as a selector expression within an XML patch document.", "submit_date": "2013-01-16", "submitter_name": "Erik Wilde", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3459", "doc-id": "RFC4271", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.8", "orig_text": "If a pair of BGP speakers try to establish a BGP connection with each\r\nother simultaneously, then two parallel connections well be formed.", "correct_text": "If a pair of BGP speakers try to establish a BGP connection with each\r\nother simultaneously, then two parallel connections will be formed.", "notes": "This edit will replace the \"well\" with \"will\".", "submit_date": "2013-01-16", "submitter_name": "Lawrence Hui", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3843", "doc-id": "RFC5651", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "There are two formats for Header Extension fields, as depicted in\r\nFigure 2. The first format is used for variable-length extensions,\r\nwith Header Extension Type (HET) values between 0 and 127. The\r\nsecond format is used for fixed-length (one 32-bit word) extensions,\r\nusing HET values from 127 to 255.", "correct_text": "There are two formats for Header Extension fields, as depicted in\r\nFigure 2. The first format is used for variable-length extensions,\r\nwith Header Extension Type (HET) values between 0 and 127. The\r\nsecond format is used for fixed-length (one 32-bit word) extensions,\r\nusing HET values from 128 to 255.", "notes": "the correct range for one 32-bit word extension HET values starts from 128, and not from 127.", "submit_date": "2013-12-16", "submitter_name": "Eric Turcotte", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3847", "doc-id": "RFC2183", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "        Content-Type: image/jpeg\r\n        Content-Disposition: attachment; filename=genome.jpeg;\r\n          modification-date=\"Wed, 12 Feb 1997 16:29:51 -0500\";\r\n        Content-Description: a complete map of the human genome\r\n", "correct_text": "        Content-Type: image/jpeg\r\n        Content-Disposition: attachment; filename=genome.jpeg;\r\n          modification-date=\"Wed, 12 Feb 1997 16:29:51 -0500\"\r\n        Content-Description: a complete map of the human genome\r\n", "notes": "In section 2 it states:\r\n\r\n     disposition := \"Content-Disposition\" \":\"\r\n                    disposition-type\r\n                    *(\";\" disposition-parm)\r\n\r\nThe semicolon should not be at the end of a header field.\r\nAnd in the example there is a semicolon behind the disposition-parm \"modification-date\".", "submit_date": "2013-12-23", "submitter_name": "Eric Reitmaier", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5081", "doc-id": "RFC5801", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "                                    If any padding or non-alphabet\r\n   characters are encountered, the name is not a GS2 family mechanism\r\n   name.", "correct_text": "                                    If any padding or non-alphanumerical\r\n   characters are encountered, the name is not a GS2 family mechanism\r\n   name.", "notes": "", "submit_date": "2017-08-09", "submitter_name": "Rick van Rein", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3461", "doc-id": "RFC5109", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "In Figure 15,\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|0|0|0|0 0 0 0|0|0 0 1 1 0 0 1|0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   ....\r\n\r\n      P rec.:    0     [0 XOR 0 XOR 0 XOR 0]\r\n      X rec.:    0     [0 XOR 0 XOR 0 XOR 0]\r\n      CC rec.:   0     [0 XOR 0 XOR 0 XOR 0]\r\n      M rec.:    0     [1 XOR 0 XOR 1 XOR 0]", "correct_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|0|0|0|0 0 0 0|1|0 0 1 1 0 0 1|0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   ....\r\n\r\n      P rec.:    0     [0 XOR 0]\r\n      X rec.:    0     [0 XOR 0]\r\n      CC rec.:   0     [0 XOR 0]\r\n      M rec.:    1     [1 XOR 0]", "notes": "These fields (P rec., X rec., CC rec., and M rec.) should be calculated from the packets that are protected at Level 0 (as specified). The specification text in previous sections are all correct. This change here is only a typo in the examples, but correcting it helps to understand the specification.", "submit_date": "2013-01-16", "submitter_name": "Adam Li", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3462", "doc-id": "RFC4241", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "          |---Configure-Request-->| \\\r\n          |<--Configure-Request---|  |\r\n          |<----Configure-Nak-----|  | PPP Network Layer Protocol Phase\r\n          |<----Configure-Ack-----|  | (IPCP)\r\n          |---Configure-Request-->|  |\r\n          |<----Configure-Ack-----| /", "correct_text": "          |---Configure-Request-->| \\\r\n          |<--Configure-Request---|  |\r\n          |<----Configure-Nak-----|  | PPP Network Layer Protocol Phase\r\n          |-----Configure-Ack---->|  | (IPCP)\r\n          |---Configure-Request-->|  |\r\n          |<----Configure-Ack-----| /", "notes": "Wrong IPCP process in Figure 2.\r\nIn the IPCP phase of original Figure 2, there're both Configure-Nak and Configure-Ack for the first Configure-Request and it's impossible. The first Configure-Ack in IPCP phase of original Figure 2 should be sent to PE from CPE.", "submit_date": "2013-01-16", "submitter_name": "Pengfei Liu", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3463", "doc-id": "RFC5555", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "with error code 144", "correct_text": "", "notes": "Binding acknowledgement error status 144 is referenced in sections 4.4.2 and 4.5 to specify that MN should not use UDP encapsulation. However, there is no mention of this status number in the IANA Considerations section (section 8).\r\n\r\n-- Verifier note (EV) ---\r\n\r\nThe MIPv6 Status code 144 does not appear in https://www.iana.org/assignments/mobility-parameters/mobility-parameters.xhtml#mobility-parameters-6\r\n\r\nEven worse, it is actually assigned to MIPV6-ID-MISMATCH by a previous RFC 4285 (and the semantics of MIPV6-ID-MISMATCH probably does not match RFC 5555 semantics).", "submit_date": "2013-01-17", "submitter_name": "Romain Kuntz", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 08:28:37"}, {"errata_id": "8428", "doc-id": "RFC9692", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2", "orig_text": "enum   KVTypes {\r\n    Experimental = 1,\r\n    WellKnown    = 2,\r\n    OUI          = 3,\r\n}", "correct_text": "enum   KVTypes {\r\n    Experimental = 1,\r\n    WellKnown    = 2,\r\n    OUI          = 3,\r\n}\r\n\r\ntypedef  i16    FabricIDType\r\n\r\nconst FabricIDType   undefined_fabric_id   = 0\r\nconst FabricIDType   default_fabric_id     = 1\r\n\r\n/** <auto-evpn> */\r\n/** EVPN Fabric ID */\r\n\r\nconst    bool   default_acting_auto_evpn_dci_when_tof = false\r\n\r\nenum AutoEVPNModel {\r\n    ERB_VLAN_BUNDLE = 0,\r\n}\r\n\r\nconst AutoEVPNModel default_autoevpn_model = \r\n      AutoEVPNModel.ERB_VLAN_BUNDLE\r\n\r\nconst bool AUTO_EVPN_SUPPORT_DEFAULT = false\r\n\r\n/** </auto-evpn> */\r\n\r\n/** <auto-flood-reflection> */\r\n\r\nenum AutoFRModel {\r\n    /** Full Mesh of L1 tunnel shortcuts, only model supported \r\n        currently with auto FR */\r\n    NoTunnelMode    = 0,\r\n    TunnelMode      = 1,\r\n}\r\n\r\nconst AutoFRModel default_autofr_model = AutoFRModel.NoTunnelMode\r\n\r\ntypedef i32          FloodReflectionClusterIDType\r\n\r\n/* maybe used in future for special purposes */\r\nconst FloodReflectionClusterIDType  IllegalClusterID = 0\r\nconst FloodReflectionClusterIDType  DefaultClusterID  = 1\r\n\r\n/** preference to become FR, higher is better */\r\ntypedef i32          FloodReflectionPreferenceType\r\n\r\nconst   FloodReflectionPreferenceType \r\n        MinFloodReflectionPreference = 0\r\n\r\nconst bool AUTO_FLOOD_REFLECTION_SUPPORT = false\r\n/** </auto-flood-reflection> */\r\n\r\n/** <southbound KVs> */\r\n\r\n/** </southbound KVs> */", "notes": "Having reviewed this with the document authors I have concluded:\r\n\r\ntypedef  i16    FabricIDType\r\n\r\nconst FabricIDType   undefined_fabric_id   = 0\r\nconst FabricIDType   default_fabric_id     = 1\r\n\"\r\n\r\nlines do belong in the base specification since they are not used there explicitly but pose the foundation for further extensions like auto-evpn and auto-fabric where a fabric_id is needed everywhere. Holding for document update. ", "submit_date": "2025-05-22", "submitter_name": "Christian Kuhtz", "verifier_id": "", "verifier_name": "James Guichard", "update_date": "2025-09-04 12:28:24"}, {"errata_id": "3465", "doc-id": "RFC5261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.3", "orig_text": "- Lastly, if the above two rules still don't apply, first all\r\n  in-scope namespace prefixes of the evaluation context node are\r\n  arranged alphabetically in an ascending order. ", "correct_text": "n/a", "notes": "It is not entirely clear what \"arranged alphabetically\" refers to in this section. Sorting can be done in a variety of ways, and while many environment may have standard sort orders, not all are the same and for this standard to be implement consistently it's important to clearly state what sort order the above sentence is referring to. The suggested fix for this erratum is to add text that clearly states which sorting method should be used.", "submit_date": "2013-01-18", "submitter_name": "Erik Wilde", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3466", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.1.6", "orig_text": "   If the subjectAltName extension is present, the sequence MUST contain\r\n   at least one entry.  Unlike the subject field, conforming CAs MUST\r\n|  NOT issue certificates with subjectAltNames containing empty\r\n   GeneralName fields.  For example, an rfc822Name is represented as an\r\n   IA5String.  While an empty string is a valid IA5String, such an\r\n   rfc822Name is not permitted by this profile. ", "correct_text": "   If the subjectAltName extension is present, the sequence MUST contain\r\n   at least one entry.  Unlike the subject field, conforming CAs MUST\r\n|  NOT issue certificates with subjectAltName extensions containing empty\r\n   GeneralName fields.  For example, an rfc822Name is represented as an\r\n   IA5String.  While an empty string is a valid IA5String, such an\r\n   rfc822Name is not permitted by this profile. ", "notes": "Certificates do not have \"subjectAltNames\" but only \"subjectAltName extensions\", which is the correct wording that is thoroughly used in the document.", "submit_date": "2013-01-18", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4595", "doc-id": "RFC7439", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   RFC 3811 [RFC3811] defines the textual conventions for MPLS.  These\r\n   lack support for IPv6 in defining MplsExtendedTunnelId and\r\n   MplsLsrIdentifier.  These textual conventions are used in the MPLS-TE\r\n   MIB specification [RFC3812], the GMPLS-TE MIB specification [RFC4802]\r\n   and the FRR extension [RFC6445].  \"Definitions of Textual Conventions\r\n   (TCs) for Multiprotocol Label Switching (MPLS) Management\" [MPLS-TC]\r\n   tries to resolve this gap by marking this textual convention as\r\n   obsolete.", "correct_text": "   RFC 3811 [RFC3811] defines the textual conventions for MPLS.  These\r\n   lack support for IPv6 in defining MplsExtendedTunnelId.  This textual\r\n   conventions is used in the MPLS-TE MIB specification [RFC3812], the \r\n   GMPLS-TE MIB specification [RFC4802], and the FRR extension\r\n   [RFC6445].  \"Definitions of Textual Conventions (TCs) for \r\n   Multiprotocol Label Switching (MPLS) Management\" [MPLS-TC] tries\r\n   to resolve this gap by marking this textual convention as obsolete.", "notes": "Section 3.5 comments about MplsLsrIdentifier.\r\nIt says that RFC 3811 \"lack[s] support for IPv6 in defining MplsExtendedTunnelId and MplsLsrIdentifier.\" It also says that \"[MPLS-TC] tries to resolve this gap by marking this textual convention as obsolete.\"\r\n\r\nNote that the second quote refers to just one TC.\r\n\r\nLooking at 3811, 5036, and (most importantly) 7552, it seems to me that the LSR Identifier is *always* a 32 bit quantity regardless of whether the LDP system is v4-only, v4/v6, or v6-only. \r\n\r\nFurthermore, draft-manral-mpls-rfc3811bis (i.e., [MPLS-TC]) clearly shows no\r\nchange to MplsLsrIdentifier while marking MplsExtendedTunnelId as obsolete.\r\n\r\nNotwithstanding that draft-manral-mpls-rfc3811bis appears to have been abandoned in state \"candidate for WG adoption\", it looks to me that RFC 7439 has an error we could call a typo.", "submit_date": "2016-01-15", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3474", "doc-id": "RFC3118", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   If the RDM field contains 0x00, the replay detection field MUST be\r\n   set to the value of a monotonically increasing counter.  Using a\r\n   counter value such as the current time of day (e.g., an NTP-format\r\n   timestamp [4]) can reduce the danger of replay attacks.  This method\r\n   MUST be supported by all protocols.", "correct_text": "   If the RDM field contains 0x00, the replay detection field MUST be\r\n   set to the value of a strictly increasing counter.  Using a\r\n   counter value such as the time since the epoch (e.g., an NTP-format\r\n   timestamp [4]) can reduce the danger of replay attacks.  This method\r\n   MUST be supported by all protocols.", "notes": "The term \"monotonically increasing\" does not actually mean what the authors and editors hope it means.  :-)  An example of a monotonically increasing sequence is: \r\n  1, 2, 2, 2, 2, 2, 2...  \r\n\r\nStrictly following that definition in the current section 2 would allow replays of captured packets.  Changing the term to \"strictly increasing\" requires that subsequent values are greater than previous values.  This would mean that a captured packet replayed with the same Authentication Information value would not meet the criteria described in my proposed corrected text, and should consequently be detected as a replay attack by a recipient.\r\n\r\nThe term monotonically increasing is also used at the end of Section 6 and should also be replaced with strictly increasing.\r\n\r\nAlso, the use of the term  \"time of day\" could be problematic.  If the first packet were sent just before midnight, and the second sent just after midnight, then the value of the second would be much lower than the value of the first.  To align with the NTP example, I'm suggesting a change in text to be something that is actually increasing.", "submit_date": "2013-02-02", "submitter_name": "Chris Lonvick", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3475", "doc-id": "RFC6266", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "In Appendix B:", "orig_text": "Section 2 of [RFC2183] defines several additional disposition \r\nparameters: \"creation-date\", \"modification-date\", \"quoted-date-time\",\r\nand \"size\".", "correct_text": "Section 2 of [RFC2183] defines several additional disposition\r\nparameters: \"creation-date\", \"modification-date\", \"read-date\", and \r\n\"size\".", "notes": "Section 2 of RFC 2183 defines \"quoted-date-time\", but it is not a disposition parameter.", "submit_date": "2013-02-02", "submitter_name": "Saa\u0161ha Mets\u00e4rantala", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3476", "doc-id": "RFC4122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A,B", "orig_text": "In Appendix A, the line:\r\n    uuid_create_md5_from_name(&u, NameSpace_DNS, \"www.widgets.com\", 15);\r\nIn Appendix B, the line:\r\n     uuid_create_md5_from_name(): e902893a-9d22-3c7e-a7b8-d6e313b71d9f", "correct_text": "In Appendix A, the line:\r\n    uuid_create_md5_from_name(&u, NameSpace_DNS, \"www.example.com\", 15);\r\nIn Appendix B, the line:\r\n     uuid_create_md5_from_name(): 5df41881-3aed-3515-88a7-2f4a814cf09e", "notes": "Per RFC2606 section 5, it is best practice for standards and other documentation (including RFCs) to use the reserved example domains (e.g. example.com) rather than domains which could be in actual use. Indeed, the domain in question (www.widgets.com) is in actual use at the time of writing. So this proposed change uses \"www.example.com\" instead, and changes the example output accordingly. (Note that original output was wrong for the original input, as already noted in verified errata 1352.)", "submit_date": "2013-02-02", "submitter_name": "Simon Kissane", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3477", "doc-id": "RFC5261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "In XPath 2.0, a \"bar\" selector\r\nnot only matches an unqualified <bar> element, but also matches a\r\nqualified <bar> element that is in scope of a default namespace\r\ndeclaration.  In contrast, in this specification, a selector without\r\na prefix only matches one element, and it may match an element with\r\nor without a prefix but only if the namespace it's qualified with (or\r\nnone) is an exact match.", "correct_text": "In XPath 2.0, a \"bar\" selector matches elements that have the URI of \r\nthe \"default element/type namespace\", which is part of an XPath's \r\nstatic context. By setting this URI to the default namespace of the \r\ndiff document (or leave it empty, if there is none), XPath 2.0's \r\nbehavior matches the requirements of the previous section.", "notes": "The original text is not easy to understand, but seems to assume that an unprefixed name in XPath 2.0 matches both unprefixed names, and prefixed ones that have the same namespace than the default namespace of the XPath static context. This is not the case: Matching depends on how the \"default element/type namespace\" of the XPath static context is defined, and then matches either namespace-less elements, or those in the \"default element/type namespace\", but never both. This context, however, is defined by the XPath itself, not by the document. Thus, it can be set externally and could be set to the diff document's default namespace (if there is one). In that case, XPath 2.0 can be used to evaluate XML Patch selectors.", "submit_date": "2013-02-05", "submitter_name": "Erik Wilde", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3859", "doc-id": "RFC6735", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": "ALRP-Value                             617  3.4.2     Unsigned32", "correct_text": "ALRP-Value                             617  3.4.2     Unsigned8", "notes": "Conflicts with section 3.4.2, which says \"The ALRP-Value AVP (AVP Code 617) is of type Unsigned8\"\n --VERIFIER NOTES-- \nIn accordance with the DIME chairs: The introduction of new data types would imply a new version of the Base protocol..\r\n\r\n  \"In the event that a new Basic AVP Data Format is needed,\r\n   a new version of this RFC MUST be created.\" \r\n\r\nA bis document is required.", "submit_date": "2014-01-02", "submitter_name": "Hyungho Kim", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3861", "doc-id": "RFC6407", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "Secure group and multicast applications require a method by which\r\n   each group member shares common security policy and keying material.\r\n   This document describes the Group Domain of Interpretation (GDOI),\r\n   which is an Internet Security Association and Key Management Protocol\r\n   (ISAMKP) [RFC2408] Domain of Interpretation (DOI), a group key\r\n   management system. ", "correct_text": "Secure group and multicast applications require a method by which\r\n   each group member shares common security policy and keying material.\r\n   This document describes the Group Domain of Interpretation (GDOI),\r\n   which is an Internet Security Association and Key Management Protocol\r\n   (ISAKMP) [RFC2408] Domain of Interpretation (DOI), a group key\r\n   management system. ", "notes": "ISAMKP -> ISAKMP", "submit_date": "2014-01-07", "submitter_name": "Prashant Gupta", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5884", "doc-id": "RFC5917", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   at-clearanceSponsor ATTRIBUTE ::= {\r\n     TYPE                   DirectoryString { ub-clearance-sponsor }\r\n                            ( WITH COMPONENTS { utf8String PRESENT } )\r\n     EQUALITY MATCHING RULE caseIgnoreMatch\r\n     IDENTIFIED BY          id-clearanceSponsor\r\n   }\r\n", "correct_text": "   at-clearanceSponsor ATTRIBUTE ::= {\r\n     TYPE                   DirectoryString { ub-clearance-sponsor }\r\n                            ( WITH COMPONENTS { uTF8String PRESENT } )\r\n     EQUALITY MATCHING RULE caseIgnoreMatch\r\n     IDENTIFIED BY          id-clearanceSponsor\r\n   }\r\n", "notes": "The DirectoryString that is imported from RFC 5912 uses a different capitalization for \"uTF8String\".  They need to be the same for the ASN.1 module to compile properly.", "submit_date": "2019-10-25", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-10-26 05:39:01"}, {"errata_id": "3478", "doc-id": "RFC5261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4.3", "orig_text": "4.4.3. Replacing a Namespace Declaration URI\r\n\r\n\r\n   An example for a replacement of a namespace URI:\r\n\r\n   <replace sel=\"doc/namespace::pref\">urn:new:xxx</replace>\r\n\r\n   This will replace the URI value of 'pref' prefixed namespace node\r\n   with \"urn:new:xxx\".  The parent node of the namespace declaration\r\n   MUST be the <doc> element, otherwise an error occurs.", "correct_text": "4.4.3. Replacing a Namespace URI\r\n\r\n\r\n   An example for a replacement of a namespace URI:\r\n\r\n   <replace sel=\"doc/namespace::pref\">urn:new:xxx</replace>\r\n\r\n   This will replace the URI of the namespace associated with the\r\n   'pref' prefix with \"urn:new:xxx\". The parent node of the namespace\r\n   declaration MUST be the <doc> element, otherwise an error occurs.\r\n   Replacing the namespace at the element where it is declared MUST\r\n   also change all namespace nodes derived from this declaration in\r\n   descendant elements. ", "notes": "The spec uses the terms \"namespace declaration\" and \"namespace\" almost interchangeably, which is incorrect. It is impossible to select (and thus patch) *namespace declarations* using XPath. When selecting and replacing a *namespace*, then it should be taken into account that the *namespace declaration* very likely has resulted in numerous namespace nodes, attached to child elements of the element where the namespace was declared. It is likely that the spec intended to specify a \"recursive replace\" of the resulting namespace nodes of a namespace declaration, and this is what the corrected text suggests. The original text is mixing terminology, hard to read, and ambiguous in its meaning.\r\n\r\nIf the spec text instead tried to specify that really only this one namespace node should be changed, then this can lead to rather strange effects in the resulting document, since the XPath tree now has \"orphan\" namespace nodes, which then need to be serialized and namespace declarations in locations where previously no namespace declarations occurred.\r\n\r\nOne way or the other, this ambiguity needs to be clarified to make the spec easier to read and implement.", "submit_date": "2013-02-07", "submitter_name": "Erik Wilde", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3479", "doc-id": "RFC5155", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "The example in Appendix A has an NSEC3 next hashed owner name field \nwith the non-base 32 characters 9, 0, and 1.", "correct_text": "The example should be changed so that the field in question is \nvalid base 32.", "notes": " --VERIFIER NOTES-- \n   The example actually uses base32hex (see RFC 4648) and is, therefore, valid.", "submit_date": "2013-02-07", "submitter_name": "Andy Newton", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3480", "doc-id": "RFC4291", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7", "orig_text": "Interface-Local scope spans only a single interface on a node\r\nand is useful only for loopback transmission of multicast.", "correct_text": "Interface-Local scope spans only a single interface on a node \r\nand is useful only for loopback transmission of multicast.\r\nPackets with interface-local scope received from another node \r\nmust be discarded.", "notes": "It should be explicitly stated that interface-local scoped multicast packets \r\nreceived from the link must be discarded.\r\nThe BSD implementation currently does this, but not Linux.\r\nhttp://www.ietf.org/mail-archive/web/ipv6/current/msg17154.html", "submit_date": "2013-02-07", "submitter_name": "Erik Hugne", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3481", "doc-id": "RFC2246", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.1.2", "orig_text": "8.1.2. Diffie-Hellman\r\n\r\n   A conventional Diffie-Hellman computation is performed. The\r\n   negotiated key (Z) is used as the pre_master_secret, and is converted\r\n   into the master_secret, as specified above.\r\n", "correct_text": "8.1.2. Diffie-Hellman\r\n\r\n   A conventional Diffie-Hellman computation is performed.  The\r\n   negotiated key (Z) is used as the pre_master_secret, and is converted\r\n   into the master_secret, as specified above.  Leading bytes of Z that\r\n   contain all zero bits are stripped before it is used as the\r\n   pre_master_secret.\r\n", "notes": "Adopting the clarification from rfc4346 Section 8.1.2.  Not stripping the leading zero bits of Z will cause interop problems (handshake failures) with the installed base.  Rfc2246 is still the authoritative spec for TLSv1.0.  One can not implement TLSv1.0 from rfc4346.\n --VERIFIER NOTES-- \nWe don't post errata for things fixed when an RFC is obsoleted.", "submit_date": "2013-02-08", "submitter_name": "Martin Rex", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4462", "doc-id": "RFC6733", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.4 6.1.6", "orig_text": "6.1.4.  Processing Local Requests\r\n\r\n   A request is known to be for local consumption when one of the\r\n   following conditions occurs:\r\n\r\n   o  The Destination-Host AVP contains the local host's identity;\r\n\r\n   o  The Destination-Host AVP is not present, the Destination-Realm AVP\r\n      contains a realm the server is configured to process locally, and\r\n      the Diameter application is locally supported; or\r\n\r\n   o  Both the Destination-Host and the Destination-Realm are not\r\n      present.\r\n\r\n6.1.6.  Request Routing\r\n\r\n   Diameter request message routing is done via realms and Application\r\n   Ids. A Diameter message that may be forwarded by Diameter agents\r\n   (proxies, redirect agents, or relay agents) MUST include the target\r\n   realm in the Destination-Realm AVP.  Request routing SHOULD rely on\r\n   the Destination-Realm AVP and the Application Id present in the\r\n   request message header to aid in the routing decision.  The realm MAY\r\n   be retrieved from the User-Name AVP, which is in the form of a\r\n   Network Access Identifier (NAI).  The realm portion of the NAI is\r\n   inserted in the Destination-Realm AVP.\r\n\r\n   Diameter agents MAY have a list of locally supported realms and\r\n   applications, and they MAY have a list of externally supported realms\r\n   and applications.  When a request is received that includes a realm\r\n   and/or application that is not locally supported, the message is\r\n   routed to the peer configured in the routing table (see Section 2.7).\r\n\r\n   Realm names and Application Ids are the minimum supported routing\r\n   criteria, additional information may be needed to support redirect\r\n   semantics.", "correct_text": "6.1.6 -\r\n  When a request is received that includes a realm\r\n   and/or application that is not locally supported, the message is\r\n   routed to the peer configured\r\n\r\nconflicts with 6.1.4 -\r\n   The Destination-Host AVP is not present, the Destination-Realm AVP\r\n      contains a realm the server is configured to process locally, and\r\n      the Diameter application is locally supported\r\n", "notes": "please guide if 6.1.4 Local processing - \"hostname not present\" needs to be amended by \"not present in host peer routing table\". otherwise it conflicts with 6.1.6.\n --VERIFIER NOTES-- \nDIME WG chairs report this is erroneous.", "submit_date": "2015-09-01", "submitter_name": "Keshab Upadhya", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3889", "doc-id": "RFC1997", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   This document creates the COMMUNITIES path attribute is an optional\r\n   transitive attribute of variable length.  The attribute consists of a\r\n   set of four octet values, each of which specify a community.  All\r\n   routes with this attribute belong to the communities listed in the\r\n   attribute.", "correct_text": "   This document creates the COMMUNITIES path attribute, which is an \r\n   optional transitive attribute of variable length.  The attribute \r\n   consists of a set of four octet values, each of which specify a \r\n   community.  All routes with this attribute belong to the \r\n   communities listed in the attribute.", "notes": "Typo in first sentence. \"which\" is missing.", "submit_date": "2014-02-12", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3890", "doc-id": "RFC1997", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   The community attribute values ranging from 0x0000000 through\r\n   0x0000FFFF and 0xFFFF0000 through 0xFFFFFFFF are hereby reserved.", "correct_text": "   The community attribute values ranging from 0x00000000 through\r\n   0x0000FFFF and 0xFFFF0000 through 0xFFFFFFFF are hereby reserved.", "notes": "Since community is a 32-bit value, 0x0000000 should be 0x00000000 to remove confusion.\r\n\r\nVerifier note: It might be useful to tidy this when the text is updated, but the text is correct and there is no possibility of confusion if you read the whole sentence.\r\n", "submit_date": "2014-02-13", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3482", "doc-id": "RFC2246", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.4.9.", "orig_text": "The hash contained in finished messages sent by the server\r\nincorporate Sender.server; those sent by the client incorporate\r\nSender.client. The value handshake_messages includes all handshake\r\nmessages starting at client hello up to, but not including, this\r\nfinished message. This may be different from handshake_messages in\r\nSection 7.4.8 because it would include the certificate verify message\r\n(if sent). Also, the handshake_messages for the finished message sent\r\nby the client will be different from that for the finished message\r\nsent by the server, because the one which is sent second will include\r\nthe prior one.", "correct_text": "The value handshake_messages includes all handshake messages starting\r\nat client hello up to, but not including, this finished message. This \r\nmay be different from handshake_messages in Section 7.4.8 because it \r\nwould include the certificate verify message (if sent). Also, the\r\nhandshake_messages for the finished message sent by the client will \r\nbe different from that for the finished message sent by the server, \r\nbecause the one which is sent second will include the prior one.", "notes": "The sentence about Sender.client and Sender.server is a remainder from the draft 2 and previous versions. The verification computation changed between draft 2 and draft 3 (as showed by rfcdiff http://tools.ietf.org/rfcdiff?difftype=--hwdiff&url2=draft-ietf-tls-protocol-03.txt ) but the sentence remained. It should be stripped as the Sender enumerated type is not even declared anymore.", "submit_date": "2013-02-11", "submitter_name": "Florian Maury", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3484", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "time          = hour [minute [second]] [zone]\r\n              /  \"-\"  minute [second]  [zone]\r\n              /  \"-\"   \"-\"    second   [zone]", "correct_text": "time          = hour [minute [second]] [zone]\r\n              /  \"-\"  minute [second]  \r\n              /  \"-\"   \"-\"    second   ", "notes": "Truncated time representations are defined in ISO 8601:2000 subclause 5.3.1.4\r\n\r\nFrom ISO 8601:2000 subclauses 5.3.3 and 5.4.3.2, the UTC designator and utc-offset may only be applied to the representations specified in 5.3.1.1 through 5.3.1.3 (i.e. Complete representation, representations with reduced precision, and representation of decimal fractions). \r\n\r\nIf follows that the UTC designator or utc-offset must not be written after a truncated representation (second and third line of the corrected ABNF). For instance, the following representation should not be allowed: --42Z (the 42th second of a minute in Coordinated Universal Time)", "submit_date": "2013-02-17", "submitter_name": "Roberto Javier Godoy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3485", "doc-id": "RFC4632", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "three classes of networks: Class A\r\n(most significant address bits '00'), with 128 possible networks each\r\nand 16777216 end systems", "correct_text": "three classes of networks: Class A\r\n(most significant address bit '0'), with 128 possible networks each\r\nand 16777216 end systems", "notes": "MSB bits \u201900\u2019 would mean that only 6 bits are available for the network part and this would mean only 64 CLASS A networks.", "submit_date": "2013-02-18", "submitter_name": "Markus Falb", "verifier_id": "", "verifier_name": "RonBonica", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3486", "doc-id": "RFC6120", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.4.1", "orig_text": "The receiving entity then MUST send stream features to the initiating\r\nentity.  If the receiving entity supports TLS, the stream features\r\nMUST include an advertisement for support of STARTTLS negotiation,\r\ni.e., a <starttls/> element qualified by the\r\n'urn:ietf:params:xml:ns:xmpp-tls' namespace.", "correct_text": "The receiving entity then MUST send stream features to the initiating \r\nentity.  If the receiving entity offers TLS capability, the stream \r\nfeatures MUST include an advertisement for support of STARTTLS \r\nnegotiation, i.e., a <starttls/> element qualified by the\r\n'urn:ietf:params:xml:ns:xmpp-tls' namespace.", "notes": "Current text mixes up actual support of STARTTLS/TLS (which is mandated by section 5.2) with deployment/availableness of the said.", "submit_date": "2013-02-18", "submitter_name": "Marco Cirillo", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3487", "doc-id": "RFC5812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "                  <component access=\"read-only\" componentID=\"7\">\r\n                    <name>FEState</name>\r\n                    <synopsis>State of this FE</synopsis>\r\n                    <typeRef>FEStateValues</typeRef>\r\n                  </component>", "correct_text": "                  <component access=\"read-write\" componentID=\"7\">\r\n                    <name>FEState</name>\r\n                    <synopsis>State of this FE</synopsis>\r\n                    <typeRef>FEStateValues</typeRef>\r\n                  </component>", "notes": "FEObject FEState (component ID 7) is read-write. It was mistakenly\r\nlabelled read-only", "submit_date": "2013-02-18", "submitter_name": "Jamal Hadi Salim", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3488", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "See notes", "correct_text": "See notes", "notes": "============================================\r\nVerifier notes:\r\nThe report below is correct, and it's important that implementors understand that RFC 6350 has a number of errors here.  The problem is that properly correcting the errors goes beyond the scope of the RFC errata system, and requires an updated document.\r\n\r\nThis errata report is, therefore, going to be marked \"held for document update\", but that designation should not be taken as downplaying the importance of this report and the errors it talks about.  The verifier strongly encourages an effort to produce such an updated document soon.  There will be significant interoperability problems if different implementations handle multi-valued parameters differently.\r\n============================================\r\n\r\nMultiple errata have been submitted that draw attention to an inconsistency in how multi-valued parameters are represented in the ABNF and how they are represented in various examples throughout the specification (errata IDs 3100, 3138, 3139).\r\n\r\nIt is the opinion of this author that it is the ABNF, not the examples, which should be declared correct, since the ABNF allows for comma characters to be included in parameter values.\r\n\r\nTo briefly review the issue, in the example below, the TYPE parameter only has one value according to the ABNF, since all of the parameter values are surrounded in double quotes.  This is the way that many multi-valued parameters are represented in the specification.\r\n\r\nADR;TYPE=\"home,dom,work\":\r\n\r\nAccording to the ABNF, the correct way to encode this list of values would be to either remove the double quotes, since none of the values contain special characters, or to enclose selected, individual values in double quotes.  The properties below are all ABNF-valid:\r\n\r\nADR;TYPE=\"home\",\"dom\",\"work\":\r\nADR;TYPE=home,dom,work:\r\nADR;TYPE=home,\"dom\",work:\r\n\r\nThe example in section 6.3.1 on page 34 is a good example of why the ABNF should be followed:\r\n\r\n     ADR;GEO=\"geo:12.3457,78.910\";LABEL=\"Mr. John Q. Public, Esq.\\n\r\n      Mail Drop: TNE QB\\n123 Main Street\\nAny Town, CA  91921-1234\\n\r\n      U.S.A.\":;;123 Main Street;Any Town;CA;91921-1234;U.S.A.\r\n\r\nThe GEO and LABEL parameters are enclosed in double quotes because their values contain special characters (colons and commas).  If the ABNF is followed, then the parameters are correctly parsed as follows:\r\n\r\nGEO\r\n  (1) geo:12.3457,78.910\r\nLABEL\r\n  (1) Mr. John Q. Public, Esq.\\nMail Drop: TNE QB\\n123 Main Street\\nAny Town, CA 91921-1234\\nU.S.A.\r\n\r\nHowever, if these parameters were to be parsed according to the other method, then their values would be incorrectly split up, since they each contain a comma character.\r\n\r\nGEO\r\n  (1) geo:12.345778.910\r\n  (2) 78.910\r\nLABEL\r\n  (1) Mr. John Q. Public, Esq.\\nMail Drop: TNE QB\\n123 Main Street\\nAny Town\r\n  (2) CA 91921-1234\\nU.S.A.\r\n\r\nIt is suggested that the following corrections be made to the specification:\r\n\r\n===========\r\n\r\n1. Section 5.9, pages 21-22\r\n\r\n           FN:Rene van der Harten\r\n           N;SORT-AS=\"Harten,Rene\":van der Harten;Rene,J.;Sir;R.D.O.N.\r\n           FN:Robert Pau Shou Chang\r\n           N;SORT-AS=\"Pau Shou Chang,Robert\":Shou Chang;Robert,Pau;;\r\n           FN:Osamu Koura\r\n           N;SORT-AS=\"Koura,Osamu\":Koura;Osamu;;\r\n           FN:Oscar del Pozo\r\n           N;SORT-AS=\"Pozo,Oscar\":del Pozo Triscon;Oscar;;\r\n           FN:Chistine d\u2019Aboville\r\n           N;SORT-AS=\"Aboville,Christine\":d\u2019Aboville;Christine;;\r\n           FN:H. James de Mann\r\n           N;SORT-AS=\"Mann,James\":de Mann;Henry,James;;\r\n\r\nshould be\r\n\r\n           FN:Rene van der Harten\r\n           N;SORT-AS=Harten,Rene:van der Harten;Rene,J.;Sir;R.D.O.N.\r\n           FN:Robert Pau Shou Chang\r\n           N;SORT-AS=Pau Shou Chang,Robert:Shou Chang;Robert,Pau;;\r\n           FN:Osamu Koura\r\n           N;SORT-AS=Koura,Osamu:Koura;Osamu;;\r\n           FN:Oscar del Pozo\r\n           N;SORT-AS=Pozo,Oscar:del Pozo Triscon;Oscar;;\r\n           FN:Chistine d\u2019Aboville\r\n           N;SORT-AS=Aboville,Christine:d\u2019Aboville;Christine;;\r\n           FN:H. James de Mann\r\n           N;SORT-AS=Mann,James:de Mann;Henry,James;;\r\n\r\n===========\r\n\r\n2. Section 6.4.1, page 35\r\n\r\n      The default type is \"voice\".  These type parameter values can be\r\n      specified as a parameter list (e.g., TYPE=text;TYPE=voice) or as a\r\n      value list (e.g., TYPE=\"text,voice\").  The default can be\r\n      overridden to another set of values by specifying one or more\r\n      alternate values.  For example, the default TYPE of \"voice\" can be\r\n      reset to a VOICE and FAX telephone number by the value list\r\n      TYPE=\"voice,fax\".\r\n\r\nshould be\r\n\r\n      The default type is \"voice\".  These type parameter values can be\r\n      specified as a parameter list (e.g., TYPE=text;TYPE=voice) or as a\r\n      value list (e.g., TYPE=text,voice).  The default can be\r\n      overridden to another set of values by specifying one or more\r\n      alternate values.  For example, the default TYPE of \"voice\" can be\r\n      reset to a VOICE and FAX telephone number by the value list\r\n      TYPE=voice,fax.\r\n\r\n===========\r\n\r\n3. Section 6.4.1, page 36\r\n\r\n   Example:\r\n     TEL;VALUE=uri;PREF=1;TYPE=\"voice,home\":tel:+1-555-555-5555;ext=5555\r\n     TEL;VALUE=uri;TYPE=home:tel:+33-01-23-45-67\r\n\r\nshould be\r\n\r\n   Example:\r\n     TEL;VALUE=uri;PREF=1;TYPE=voice,home:tel:+1-555-555-5555;ext=5555\r\n     TEL;VALUE=uri;TYPE=home:tel:+33-01-23-45-67\r\n\r\n===========\r\n\r\n4. Section 8, page 57\r\n\r\n    TEL;VALUE=uri;TYPE=\"work,voice\";PREF=1:tel:+1-418-656-9254;ext=102\r\n    TEL;VALUE=uri;TYPE=\"work,cell,voice,video,text\":tel:+1-418-262-6501\r\n\r\nshould be\r\n\r\n    TEL;VALUE=uri;TYPE=work,voice;PREF=1:tel:+1-418-656-9254;ext=102\r\n    TEL;VALUE=uri;TYPE=work,cell,voice,video,text:tel:+1-418-262-6501", "submit_date": "2013-02-18", "submitter_name": "Michael Angstadt", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3489", "doc-id": "RFC4733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "Named telephone events are carried as part of the audio stream and\r\nMUST use the same sequence number and timestamp base as the regular\r\naudio channel to simplify the generation of audio waveforms at a\r\ngateway. ", "correct_text": "Named telephone events are carried as part of the audio stream and \r\nif they use the same SSRC (therefore the same timing and sequence \r\nnumber space), they MUST use the same timestamp clock rate as the \r\nregular audio channel.", "notes": "RFC4733 was written in a way to avoid the multiple clock-rate problem by mandating the use of the same SSRC for DTMF and audio. However it's not explicitly written, which brings an ambiguity. It was commented that RFC4733 needs to be updated. (c.f. http://tools.ietf.org/wg/avtext/minutes?item=minutes-85-avtext.html). This errata obsoletes the previous proposed errata (ID: 3451).", "submit_date": "2013-02-18", "submitter_name": "Xavier Marjou", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3510", "doc-id": "RFC4790", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Global", "orig_text": "US-ASCII (most places)", "correct_text": "ASCII (but see note)", "notes": "The terms \"US-ASCII\" and \"ASCII\" are used interchangeably in this document, sometimes in the same paragraph (see the first paragraph of 9.2.1).  Neither is anchored in a reference to either X3.4-1986 (e.g., the \"us-ascii charset\") or to X3.4-1968 or RFC 20 (e.g., NVT ASCII).  There is one explicit mention of the \"US-ASCII charset\" (Section 5) but all the rest, including the section titles that use \"ASCII\" already, appear to be talking about the ASCII repertoire with terms like \"ASCII\" (or \"US-ASCII\") letters.  Except where the charset, or some very special property of X3.4-1986, is intended, I believe that all of these should be just \"ASCII\".\r\n\r\nI don't think this is likely to cause any significant confusion among anyone who is likely to read this spec, much less confusion sufficient to cause interoperability problems (hence, it is not a technical error), but it is confusing and should be cleaned up --both to rationalize the terminology and to provide citations for the terminology that is used-- if the document is ever updated.", "submit_date": "2013-03-08", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3491", "doc-id": "RFC6068", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "      domain       = dot-atom-text / \"[\" *dtext-no-obs \"]\"", "correct_text": "      domain       = dot-atom-text", "notes": "Mailto URI has a hier-part that is either path-rootless or path-empty,\r\nwith an optional query component (see the syntax from RFC 3986 below).\r\nIn the path-rootless part, only characters in the set <pchar> are allowed.\r\nTherefore the <domain> rule violates the general URI syntax, as it uses\r\nthe characters \"[\" and \"]\", which are not in <pchar>, to delimit a domain literal.\r\n\r\n    URI           = scheme \":\" hier-part [ \"?\" query ] [ \"#\" fragment ]\r\n    hier-part     = \"//\" authority path-abempty\r\n                  / path-absolute\r\n                  / path-rootless\r\n                  / path-empty\r\n    path-rootless = segment-nz *( \"/\" segment )\r\n    segment       = *pchar\r\n    segment-nz    = 1*pchar\r\n    query         = *( pchar / \"/\" / \"?\" )\r\n    pchar         = unreserved / pct-encoded / sub-delims / \":\" / \"@\"\r\n    unreserved    = ALPHA / DIGIT / \"-\" / \".\" / \"_\" / \"~\"\r\n    sub-delims    = \"!\" / \"$\" / \"&\" / \"'\" / \"(\" / \")\"\r\n                        / \"*\" / \"+\" / \",\" / \";\" / \"=\"\n --VERIFIER NOTES-- \nThe \"Corrected Text\" suggested by the reporter is incorrect. There are also several things in dot-atom-text which are also not in <pchar> (\"#\", \"/\", \"?\", \"^\", \"`\", \"{\", \"|\", \"}\"), so leaving dot-atom-text in place would not address the concern of the reporter. RFC 6068's answer is to simply say that, ABNF notwithstanding, some of the characters will need to be percent-encoded:\r\n\r\n   1.  A number of characters that can appear in <addr-spec> MUST be\r\n       percent-encoded.  These are the characters that cannot appear in\r\n       a URI according to [STD66] as well as \"%\" (because it is used for\r\n       percent-encoding) and all the characters in gen-delims except \"@\"\r\n       and \":\" (i.e., \"/\", \"?\", \"#\", \"[\", and \"]\").  Of the characters\r\n       in sub-delims, at least the following also have to be percent-\r\n       encoded: \"&\", \";\", and \"=\".  Care has to be taken both when\r\n       encoding as well as when decoding to make sure these operations\r\n       are applied only once.\r\n\r\nNow, this may have been a bogus way to do it (because you've got an ABNF which then has to be re-encoded to agree with generic URI syntax), but it was clearly agreed to when this document was published. Something may be wrong here, but this is not appropriate for a simple erratum.   ", "submit_date": "2013-02-20", "submitter_name": "Stefan Ganzer", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3492", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "               | \"caf%C3%E8\"                ; Catalan, French, Galician", "correct_text": "               | \"caf%C3%E9\"                ; Catalan, French, Galician", "notes": "This error was originally reported by Larry Masinter in 2005.\r\n\r\n=============== Verifier Notes ===============\r\nOK, I feel really silly verifying errata on a joke RFC, but......\r\n=========================================", "submit_date": "2013-02-21", "submitter_name": "Giles Saunders", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3493", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "value-stmt          = value-keyword sep integer-value stmtend", "correct_text": "value-stmt          = value-keyword sep integer-value-arg-str stmtend\r\n\r\ninteger-value-arg-str   = < a string that matches the rule\r\n                           integer-value-arg >\r\n\r\ninteger-value-arg       = integer-value", "notes": "Value statement should follow the rules for specifying YANG statement arguments. Current grammar does not allow a quoted string to appear as an argument to a value-stmt. Published IETF YANG modules exist which assume a quoted string may appear as an argument to this statement (eg. ietf-inet-types).", "submit_date": "2013-02-24", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3511", "doc-id": "RFC5357", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix", "orig_text": "              controller                              responder\r\n          +-----------------+                   +-------------------+\r\n          |     Server      |<----------------->|                   |\r\n          | Control-Client  |                   | Session-Reflector |\r\n          | Session-Sender  |<--TWAMP-Test----->|                   |\r\n          +-----------------+                   +-------------------+\r\n\r\n   This example provides a simple architecture for responders where\r\n   their role will be to simply act as light test points in the network.\r\n   The controller establishes the test session with the Server through\r\n   non-standard means.  After the session is established, the controller\r\n   transmits test packets to the responder.  The responder follows the\r\n   Session-Reflector behavior of TWAMP as described in section 4.2 with\r\n   the following exceptions.\r\n\r\n   In the case of TWAMP Light, the Session-Reflector does not\r\n   necessarily have knowledge of the session state.  IF the Session-\r\n   Reflector does not have knowledge of the session state, THEN the\r\n   Session-Reflector MUST copy the Sequence Number of the received\r\n   packet to the Sequence Number field of the reflected packet.  The\r\n   controller receives the reflected test packets and collects two-way\r\n   metrics.  This architecture allows for collection of two-way metrics.", "correct_text": "              controller                              responder\r\n          +-----------------+                   +-------------------+\r\n          |     Server      |                   |                   |\r\n          | Control-Client  |                   | Session-Reflector |\r\n          | Session-Sender  |<--TWAMP-Test----->|                   |\r\n          +-----------------+                   +-------------------+\r\n\r\n   This example provides a simple architecture for responders where\r\n   their role will be to simply act as light test points in the network.\r\n   The controller establishes the test session with the Server through\r\n   non-standard means.  After the session is established, the controller\r\n   transmits test packets to the responder. Other examples are also\r\n   possible. For instance, the responder may include a light Server\r\n   responsible to instantiate the test session states based on the\r\n   received test packets. The responder follows the Session-Reflector\r\n   behavior of TWAMP as described in section 4.2 with the following\r\n   exceptions.\r\n\r\n   In the case of TWAMP Light, the Session-Reflector does not\r\n   necessarily have knowledge of the session state.  IF the Session-\r\n   Reflector does not have knowledge of the session state, THEN the\r\n   Session-Reflector MUST copy the Sequence Number of the received\r\n   packet to the Sequence Number field of the reflected packet.  The\r\n   controller receives the reflected test packets and collects two-way\r\n   metrics. This architecture allows for collection of two-way metrics.\r\n   Otherwise IF the Session- Reflector has knowledge of the session\r\n   state (using inspection of the received test packets for instance),\r\n   THEN the Session-Reflector MUST generate it is own sequence number\r\n   for each reflected packet.  The controller receives the reflected\r\n   test packets and collects two-way and one-way metrics.  This\r\n   alternative allows for collection of two-way and one-way metrics with\r\n   TWAMP Light.", "notes": "Many readers of the appendix don't understand the meaning of informative and try to interpret the TWAMP light description as a specification. To correct this problem, it is recommended to add a few more lines explaning other TWAMP light architectures are possible. The original text describes a single TWAMP light architecture and this is misleading.\n --VERIFIER NOTES-- \nErratas are not meant to be used to expand existing text beyond textual clarifications. ", "submit_date": "2013-03-08", "submitter_name": "Steve Baillargeon", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3512", "doc-id": "RFC5878", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "struct {\r\n  SupplementalDataType supplemental_data_type;\r\n  select(SupplementalDataType) {\r\n    case authz_data: AuthorizationData;\r\n  }\r\n} SupplementalData;", "correct_text": "struct {\r\n  SupplementalDataType supp_data_type;\r\n  uint16 supp_data_length;\r\n  select(SupplementalDataType) {\r\n    case authz_data: AuthorizationData;\r\n  }\r\n} SupplementalDataEntry;\r\n\r\nsupp_data_length This field is the length (in bytes) of the data \r\nselected by SupplementalDataType.", "notes": "", "submit_date": "2013-03-08", "submitter_name": "Ben Laurie", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3513", "doc-id": "RFC5878", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "struct{\r\n  AuthorizationDataEntry authz_data_list<1..2^16\u00ad1>;\r\n} AuthorizationData;\r\n", "correct_text": "struct{\r\n  AuthorizationDataEntry authz_data_list[supp_data_length];\r\n} AuthorizationData;\r\n", "notes": "", "submit_date": "2013-03-08", "submitter_name": "Ben Laurie", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3904", "doc-id": "RFC6749", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.2.2.", "orig_text": "", "correct_text": "   o  Parameter name: error\r\n   o  Parameter usage location: authorization response, token response\r\n   o  Change controller: IETF\r\n   o  Specification document(s): RFC 6749\r\n", "notes": "\"error\" is missing and should be added to the list of Initial Registry Contents of OAuth Parameters Registry.\r\n\r\nAD note: This is in the normative registry, although it doesn't appear in the final published RFC.  The WG suspects there was a mistake that removed it from RFC 6749 prior to final publication.  I've marked this as editorial since the IANA registry is normative, but also as verified.", "submit_date": "2014-03-01", "submitter_name": "Takahiko Kawasaki", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3905", "doc-id": "RFC1361", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "(original NTP described in RFC-959) messages are no longer supported.", "correct_text": "(original NTP described in RFC-958) messages are no longer supported.\r\n", "notes": "RFC959 is the FTP protocol, not NTP version 0 (RFC958).  It should be noted that RFC 1361 is obsolete.", "submit_date": "2014-02-18", "submitter_name": "J. Stals", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3993", "doc-id": "RFC2325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   potType OBJECT-TYPE\r\n        SYNTAX     INTEGER {\r\n           automatic-drip(1),\r\n           percolator(2),\r\n           french-press(3),\r\n           espresso(4),\r\n           }\r\n        MAX-ACCESS read-write\r\n        STATUS current\r\n        DESCRIPTION\r\n                \"The brew type of the coffee pot.\"\r\n        ::= { coffee 3 }\r\n", "correct_text": "   potType OBJECT-TYPE\r\n        SYNTAX     INTEGER {\r\n           automatic-drip(1),\r\n           percolator(2),\r\n           french-press(3),\r\n           espresso(4),\r\n           }\r\n        MAX-ACCESS read-only\r\n        STATUS current\r\n        DESCRIPTION\r\n                \"The brew type of the coffee pot.\"\r\n        ::= { coffee 3 }\r\n", "notes": "potName and potCapacity are read-only, as name and capacity will not change after instantiation; type should be as well, as potType will not change over time (reincarnation as a separate pot would constitute a new instance.) potLocation should remain read-write, as a pot may change locations.", "submit_date": "2014-05-20", "submitter_name": "Jack Lawson", "verifier_id": "", "verifier_name": "Nevil Brownlee (ISE)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4964", "doc-id": "RFC7049", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.9", "orig_text": "*  If two keys have different lengths, the shorter one sorts\r\n         earlier;", "correct_text": "<removed>", "notes": "I would recommend this rule be struck for the following reasons, and a simple binary comparison regardless of length is used\r\n\r\n1. It does not affect sorting order of single type entries, if the other rules around using minimal size are followed. This is because the ranges for representable values based on the 5-bit additional information are consistently increasing. In particular, minimal sized non-negative integers will sort in numerical order in either case\r\n\r\n2. It does not affect text sorting. A block of text is length-prefixed already, which means that the bytes representing length will already sort shorter strings ahead of all longer strings\r\n\r\n3. Using a simple binary comparison will group a mixed-type map by major type. All string keys will be together, for instance. As an example, a 1-6 character string value today could sort in the middle of a group of integer keys (for sufficiently large integers)\r\n\r\n4. For keys which are arrays of items, the shortest length breaks the ability for sorted order to mean anything. For example, an [int x, int y] key will sort by x value then y value if straight binary comparison is used, but will sort in a different manner if length-based sorting is involved due to the potential for large `y`.\r\n\r\nThis is the use case which I personally am hitting, as my keys are composed of an array with the first element as epoch time.\r\n\r\n5. It is not necessary to deal with mixed-length values. Due to several factors including termination of indefinite length items, it is not possible to append binary data to a well-formed CBOR value to get a different well-formed CBOR value. Thus all well-formed keys, if compared byte-for-byte, *will* differ without the need to zero-pad the data.\n --VERIFIER NOTES-- \n   This report has been rejected because this is a change in documented behavior\r\nthat would require working groupconsensus.  That said, this was taken into account\r\nby the working group during the production of the updated version of RFC 7049.", "submit_date": "2017-03-12", "submitter_name": "David Waite", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-07-17 22:08:16"}, {"errata_id": "3494", "doc-id": "RFC3680", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   NOTIFY sip:app.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP server19.example.com;branch=z9hG4bKnasaii\r\n   From: sip:joe@example.com;tag=xyzygg\r\n   To: sip:app.example.com;tag=123aa9\r\n   Call-ID: 9987@app.example.com\r\n   CSeq: 1288 NOTIFY\r\n   Contact: sip:server19.example.com\r\n   Event: reg\r\n   Max-Forwards: 70\r\n   Content-Type: application/reginfo+xml\r\n   Content-Length: ...\r\n\r\n   NOTIFY sip:app.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP server19.example.com;branch=z9hG4bKnasaij\r\n   From: sip:joe@example.com;tag=xyzygg\r\n   To: sip:app.example.com;tag=123aa9\r\n   Call-ID: 9987@app.example.com\r\n   CSeq: 1289 NOTIFY\r\n   Contact: sip:server19.example.com\r\n   Event: reg\r\n   Max-Forwards: 70\r\n   Content-Type: application/reginfo+xml\r\n   Content-Length: ...\r\n", "correct_text": "   NOTIFY sip:app.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP server19.example.com;branch=z9hG4bKnasaii\r\n   From: sip:joe@example.com;tag=xyzygg\r\n   To: sip:app.example.com;tag=123aa9\r\n   Call-ID: 9987@app.example.com\r\n   CSeq: 1288 NOTIFY\r\n   Contact: sip:server19.example.com\r\n   Event: reg\r\n   Subscription-State:active;expires=3600\r\n   Max-Forwards: 70\r\n   Content-Type: application/reginfo+xml\r\n   Content-Length: ...\r\n\r\n   NOTIFY sip:app.example.com SIP/2.0\r\n   Via: SIP/2.0/UDP server19.example.com;branch=z9hG4bKnasaij\r\n   From: sip:joe@example.com;tag=xyzygg\r\n   To: sip:app.example.com;tag=123aa9\r\n   Call-ID: 9987@app.example.com\r\n   CSeq: 1289 NOTIFY\r\n   Contact: sip:server19.example.com\r\n   Event: reg\r\n   Subscription-State:active;expires=3000\r\n   Max-Forwards: 70\r\n   Content-Type: application/reginfo+xml\r\n   Content-Length: ...\r\n", "notes": "The two NOTIFY examples are missing mandatory Subscription-State header.", "submit_date": "2013-02-24", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3495", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   revision-stmt       = revision-keyword sep revision-date optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              [description-stmt stmtsep]\r\n                              [reference-stmt stmtsep]\r\n                          \"}\")", "correct_text": "   revision-stmt       = revision-keyword sep revision-date optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              ;; these stmts can appear in any order\r\n                              [description-stmt stmtsep]\r\n                              [reference-stmt stmtsep]\r\n                          \"}\")", "notes": "The comment \"these stmts can appear in any order\" is missing from this statement.", "submit_date": "2013-02-25", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3496", "doc-id": "RFC5444", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   o  The <pkt-seq-num> field, if present, contains a sequence number\r\n      that is incremented by 1 for each packet generated by a node.  The\r\n      sequence number after 65535 is 0.  In other words, the sequence\r\n      number \"wraps\" in the usual way.\r\n", "correct_text": "   o  The <pkt-seq-num> field, if present, contains a sequence number\r\n      that SHOULD be maintained for each participating interface and\r\n      incremented by 1 for each packet generated by a node for that\r\n      interface.  The sequence number after 65535 is 0.  In other words,\r\n      the sequence number \"wraps\" in the usual way.\r\n", "notes": "Packet sequence number should be per interface, not per node. Uses that recognise missing packet sequence numbers only work in the corrected (intended) case.", "submit_date": "2013-02-25", "submitter_name": "Christopher Dearlove", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3497", "doc-id": "RFC5444", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix D.6", "orig_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |     Type      |0|0|0|0|1|M|Rsv|            Length             |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                                                               |\r\n     |                             Value                             |\r\n     |                                                               |\r\n     |               +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |               |\r\n     +-+-+-+-+-+-+-+-+\r\n", "correct_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |     Type      |0|0|0|1|1|M|Rsv|            Length             |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                                                               |\r\n     |                             Value                             |\r\n     |                                                               |\r\n     |               +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |               |\r\n     +-+-+-+-+-+-+-+-+\r\n", "notes": "Corrects example TLV to have correct <tlv-flags> bits.", "submit_date": "2013-02-25", "submitter_name": "Christopher Dearlove", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3498", "doc-id": "RFC2350", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "3.6 Incident Reporting Forms\r\n\r\n...\r\n\r\nOne example of such a form is the Incident Reporting Form provided by\r\n   the CERT Coordination Center:\r\n\r\n   - ftp://info.cert.org/incident_reporting_form", "correct_text": "...\r\n\r\n - https://www.cert.be/pro/report-incident", "notes": "The URL with an example of an Incident Reporting Form is wrong. The hostname 'info.cert.org' no longer resolves. CERT.be still has a copy of a sample Incident Reporting Form.", "submit_date": "2013-02-25", "submitter_name": "Koen Van Impe", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3514", "doc-id": "RFC5878", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3", "orig_text": "17 # Handshake.msg_type == supplemental_data(23)\r\n00 00 11 # Handshake.length = 17\r\n00 00 0e # length of SupplementalData.supp_data = 14\r\n40 02 # SupplementalDataEntry.supp_data_type = 16386\r\n00 0a # SupplementalDataEntry.supp_data_length = 10\r\n00 08 # length of AuthorizationData.authz_data_list = 8\r\n01 # authz_format = saml_assertion(1)\r\n00 05 # length of SAMLAssertion\r\naa aa aa aa aa # SAML assertion (fictitious: \"aa aa aa aa aa\")", "correct_text": "17 # Handshake.msg_type == supplemental_data(23)\r\n00 00 0f # Handshake.length = 15\r\n00 00 0d # length of SupplementalData.supp_data = 13\r\n40 02 # SupplementalDataEntry.supp_data_type = 16386\r\n00 0a # SupplementalDataEntry.supp_data_length = 8\r\n01 # authz_format = saml_assertion(1)\r\n00 05 # length of SAMLAssertion\r\naa aa aa aa aa # SAML assertion (fictitious: \"aa aa aa aa aa\")", "notes": "Per Russ Housley: We do not have an implementation that can be used to check the hex values, but they appear to be correct.", "submit_date": "2013-03-08", "submitter_name": "Ben Laurie", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5491", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "#define CRC24_POLY 0x1864CFBL", "correct_text": "#define CRC24_POLY 0x864CFBL", "notes": "In the C reference implementation of CRC-24, the generator used does not match the specification in Section 6, though the final masking step avoids a functional difference.", "submit_date": "2018-09-04", "submitter_name": "Marco Bellaccini", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3499", "doc-id": "RFC6621", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.4.", "orig_text": "  1.  Initialize the set \"MPR\" to empty.\r\n\r\n   2.  Initialize the set \"N1\" to include all 1-hop neighbors of \"n0\".\r\n\r\n   3.  Initialize the set \"N2\" to include all 2-hop neighbors, excluding\r\n       \"n0\" and any routers in \"N1\".  Nodes that are only reachable via\r\n       \"N1\" routers with router priority values of NEVER are also\r\n       excluded.\r\n\r\n   4.  For each interface \"y\" in \"N1\", initialize a set \"N2(y)\" to\r\n       include any interfaces in \"N2\" that are 1-hop neighbors of \"y\".\r\n\r\n   5.  For each interface \"x\" in \"N1\" with a router priority value of\r\n       \"ALWAYS\" (or using the CF relay algorithm), select \"x\" as an MPR:\r\n\r\n       A.  Add \"x\" to the set \"MPR\" and remove \"x\" from \"N1\".\r\n\r\n       B.  For each interface \"z\" in \"N2(x)\", remove \"z\" from \"N2\".\r\n\r\n       C.  For each interface \"y\" in \"N1\", remove any interfaces in\r\n           \"N2(x)\" from \"N2(y)\".\r\n\r\n   6.  For each interface \"z\" in \"N2\", initialize the set \"N1(z)\" to\r\n       include any interfaces in \"N1\" that are 1-hop neighbors of \"z\".\r\n\r\n   7.  For each interface \"x\" in \"N2\" where \"N1(x)\" has only one member,\r\n       select \"x\" as an MPR:\r\n\r\n       A.  Add \"x\" to the set \"MPR\" and remove \"x\" from \"N1\".\r\n\r\n       B.  For each interface \"z\" in \"N2(x)\", remove \"z\" from \"N2\" and\r\n           delete \"N1(z)\".\r\n\r\n       C.  For each interface \"y\" in \"N1\", remove any interfaces in\r\n           \"N2(x)\" from \"N2(y)\".\r\n\r\n   8.  While \"N2\" is not empty, select the interface \"x\" in \"N1\" with\r\n       the largest router priority that has the number of members in\r\n       \"N_2(x)\" as an MPR:\r\n\r\n       A.  Add \"x\" to the set \"MPR\" and remove \"x\" from \"N1\".\r\n\r\n       B.  For each interface \"z\" in \"N2(x)\", remove \"z\" from \"N2\".\r\n\r\n       C.  For each interface \"y\" in \"N1\", remove any interfaces in\r\n           \"N2(x)\" from \"N2(y)\".\r\n\r\n\r\n\r\n", "correct_text": "  1.  Initialize the set \"MPR\" to empty.\r\n\r\n   2.  Initialize the set \"N1\" to include all 1-hop neighbors of \"n0\".\r\n\r\n   3.  Initialize the set \"N2\" to include all 2-hop neighbors, excluding\r\n       \"n0\" and any routers in \"N1\".  Nodes that are only reachable via\r\n       \"N1\" routers with router priority values of NEVER are also\r\n       excluded.\r\n\r\n   4.  For each interface \"y\" in \"N1\", initialize a set \"N2(y)\" to\r\n       include any interfaces in \"N2\" that are 1-hop neighbors of \"y\".\r\n\r\n   5.  For each interface \"x\" in \"N1\" with a router priority value of\r\n       \"ALWAYS\" (or using the CF relay algorithm), select \"x\" as an MPR:\r\n\r\n       A.  Add \"x\" to the set \"MPR\" and remove \"x\" from \"N1\".\r\n\r\n       B.  For each interface \"z\" in \"N2(x)\", remove \"z\" from \"N2\".\r\n\r\n       C.  For each interface \"y\" in \"N1\", remove any interfaces in\r\n           \"N2(x)\" from \"N2(y)\".\r\n\r\n   6.  For each interface \"z\" in \"N2\", initialize the set \"N1(z)\" to\r\n       include any interfaces in \"N1\" that are 1-hop neighbors of \"z\".\r\n\r\n   7.  For each interface \"w\" in \"N2\" where \"N1(w)\" has only one member, \"x\",\r\n       select \"x\" as an MPR:\r\n\r\n       A.  Add \"x\" to the set \"MPR\" and remove \"x\" from \"N1\".\r\n\r\n       B.  For each interface \"z\" in \"N2(x)\", remove \"z\" from \"N2\".\r\n\r\n       C.  For each interface \"y\" in \"N1\", remove any interfaces in\r\n           \"N2(x)\" from \"N2(y)\".\r\n\r\n   8.  While \"N2\" is not empty, select the interface \"x\" in \"N1\" with\r\n       the highest router priority [break ties in favor of the node with the \r\n       largest number of members in \"N_2(x)\"] as an MPR:\r\n\r\n       A.  Add \"x\" to the set \"MPR\" and remove \"x\" from \"N1\".\r\n\r\n       B.  For each interface \"z\" in \"N2(x)\", remove \"z\" from \"N2\".\r\n\r\n       C.  For each interface \"y\" in \"N1\", remove any interfaces in\r\n           \"N2(x)\" from \"N2(y)\".\r\n\r\n\r\n\r\n", "notes": "There are three changes:\r\n\r\nOn line 7, the first and second occurrences of x are replaced by w, and then x is given as the name of the sole member of N1(w).\r\n\r\nOn line 7B, the phrase 'delete \"N1(z)\" is dropped to be consistent with the rest of the algorithm.\r\n\r\nOn line 8 some rewording is done for clarification.\r\n\r\nThis errata prepared in consultation with Justin Dean and Gus Macker.", "submit_date": "2013-02-26", "submitter_name": "Errol Lloyd", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3500", "doc-id": "RFC6749", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "(E)  The authorization server authenticates the client, validates the\r\n     authorization code, and ensures that the redirection URI\r\n     received matches the URI used to redirect the client in\r\n     step (C).  If valid, the authorization server responds back with\r\n     an access token and, optionally, a refresh token.", "correct_text": "(E)  The authorization server authenticates the client, validates the\r\n     authorization code, and ensures that the redirection URI\r\n     received matches the URI used to redirect (the resource owner's user-agent) \r\n     to the client in step (C).  If valid, the authorization server \r\n     responds back with an access token and, optionally, a refresh token.", "notes": "The URI in question is the URI that was used to redirect the resource owner's user-agent back to the client to deliver the code.  The original text in step (E) seems to say that this URI was used to redirect the client, but I think this is an ambiguous/imprecise use of the word \"client.\"  It was not the OAuth client that was redirected using that URI, it was the resource owner's user-agent that was redirected, *to* the client.\r\n\r\nThe parenthetical (the resource owner's user-agent) is more precise but may perhaps be too verbose.  I think, at minimum, we must say \"....the URI used to redirect *to* the client in step (C).\"", "submit_date": "2013-02-26", "submitter_name": "John Field", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3502", "doc-id": "RFC6555", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   1.  Call getaddinfo(), which returns a list of IP addresses sorted by\r\n       the host's address preference policy.", "correct_text": "   1.  Call getaddrinfo(), which returns a list of IP addresses sorted by\r\n       the host's address preference policy.", "notes": "The r appears to be missing from the getaddrinfo() call.  This may vary by language but C, POSIX and Perl seem to expect the r.  I would think this is a trivial change, and would fall into the category of \"Hold for Document Update\".", "submit_date": "2013-02-27", "submitter_name": "Elle Plato", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3503", "doc-id": "RFC6329", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "   o  I-SID is the 24-bit I-Component Service ID advertised in the SPBM\r\n      Service Identifier TLV.  It occupies the lower 24 bits of the SPBM\r\n      multicast DA.  The I-SID value 0xfff is reserved for SPBM control\r\n      traffic (refer to the default I-SID in [802.1aq]).\r\n", "correct_text": "   o  I-SID is the 24-bit I-Component Service ID advertised in the SPBM\r\n      Service Identifier TLV.  It occupies the lower 24 bits of the SPBM\r\n      multicast DA.  The I-SID value 0x0000ff is reserved for SPBM control\r\n      traffic (refer to the default I-SID in [802.1aq]).\r\n", "notes": "The correct value of the I-SID for SPBM control traffic is decimal 255 or 0xff. As a 24 bit value this is 0x0000ff.", "submit_date": "2013-02-28", "submitter_name": "Jan De Backer", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3505", "doc-id": "RFC6126", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "5.  IANA Considerations\r\n\r\n   IANA has registered the UDP port number 6697, called \"babel\", for use\r\n   by the Babel protocol.", "correct_text": "5.  IANA Considerations\r\n\r\n   IANA has registered the UDP port number 6696, called \"babel\", for use\r\n   by the Babel protocol.", "notes": "Author Juliusz Chroboczek has agreed to use the port number 6696/udp for babel as per a discussion with Nevil Brownlee.  The port number in the document therefore should be changed to 6696/udp.", "submit_date": "2013-03-01", "submitter_name": "pearl liang", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3506", "doc-id": "RFC4551", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.", "orig_text": "   resp-text-code      =/ \"HIGHESTMODSEQ\" SP mod-sequence-value /\r\n                          \"NOMODSEQ\" /\r\n                          \"MODIFIED\" SP set\r\n", "correct_text": "   resp-text-code      =/ \"HIGHESTMODSEQ\" SP mod-sequence-value /\r\n                          \"NOMODSEQ\" /\r\n                          \"MODIFIED\" SP sequence-set\r\n", "notes": "RFC 1730 and RFC 2060 mentioned \"set\". It's been changed to sequence-set in RFC 3501.\r\nTherefore, I think the same name should be applied in RFC 4551.", "submit_date": "2013-03-01", "submitter_name": "Hoa V. DINH", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3507", "doc-id": "RFC4418", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix", "orig_text": "     'a' * 2^25    5109A660  2E2DBC36860A0A5F  72C6388BACE3ACE6FBF062D9\r\n", "correct_text": "     'a' * 2^25    85EE5CAE  FACA46F856E9B45F  A621C2457C0012E64F3FDAE9", "notes": "The test vector for message 'a' * 2^25 is wrong in the RFC. This is a know error already published by the author on the page http://fastcrypto.org/umac/ (direct link: http://fastcrypto.org/umac/rfc4418.errata.txt ), but I am reporting it here because it is neither shown in Errata Search nor triggers the costumary \"Errata Exist\" alert on RFC's HTML view.", "submit_date": "2013-03-03", "submitter_name": "Lucas Clemente Vella", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5492", "doc-id": "RFC8231", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "Under section 6.1, PCRpt message is defined.\r\nIn definition of path,\r\n\r\n    Where:\r\n      <path>::= <intended-path>\r\n                [<actual-attribute-list><actual-path>]\r\n                <intended-attribute-list>\r\n\r\n", "correct_text": "Where:\r\n      <path>::= <intended-path>\r\n                [<actual-attribute-list><actual-path>]\r\n                [<intended-attribute-list>]\r\n\r\n", "notes": "The change aligns the RBNF with the following text in the document (section 6.1) -\r\n\r\n      Note that the intended-attribute-list is optional and\r\n      thus may be omitted.\r\n", "submit_date": "2018-09-05", "submitter_name": "Upendra Singh", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3515", "doc-id": "RFC5878", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "struct {\r\n  AuthzDataFormat authz_format;\r\n  select (AuthzDataFormat) {\r\n    case x509_attr_cert: X509AttrCert;\r\n    case saml_assertion: SAMLAssertion;\r\n    case x509_attr_cert_url: URLandHash;\r\n    case saml_assertion_url: URLandHash;\r\n  }\r\n} AuthorizationDataEntry;\r\n\r\nenum {\r\n  x509_attr_cert(0), saml_assertion(1), x509_attr_cert_url(2),\r\n  saml_assertion_url(3), (255)\r\n} AuthzDataFormat;opaque X509AttrCert<1..2^16\u00ad1>;\r\n\r\nopaque SAMLAssertion<1..2^16\u00ad1>;\r\n\r\nstruct {\r\n  opaque url<1..2^16\u00ad1>;\r\n  HashAlgorithm hash_alg;\r\n  select (hash_alg) {\r\n    case md5: MD5Hash;\r\n    case sha1: SHA1Hash;\r\n    case sha224: SHA224Hash;\r\n    case sha256: SHA256Hash;\r\n    case sha384: SHA384Hash;\r\n    case sha512: SHA512Hash;\r\n  } hash;\r\n} URLandHash;\r\n", "correct_text": "struct {\r\n  AuthzDataFormat authz_format;\r\n  uint16 authz_data_length;\r\n  select (AuthzDataFormat) {\r\n    case x509_attr_cert: X509AttrCert;\r\n    case saml_assertion: SAMLAssertion;\r\n    case x509_attr_cert_url: URLandHash;\r\n    case saml_assertion_url: URLandHash;\r\n  }\r\n} AuthorizationDataEntry;\r\n\r\nauthz_data_length This field is the length (in bytes) of the data \r\nselected by AuthzDataFormat.\r\n\r\nenum {\r\n  x509_attr_cert(0), saml_assertion(1), x509_attr_cert_url(2),\r\n  saml_assertion_url(3), (255)\r\n} AuthzDataFormat;\r\n\r\nopaque X509AttrCert[authz_data_length];\r\n\r\nopaque SAMLAssertion[authz_data_length];\r\n\r\nstruct {\r\n  opaque url<1..2^16\u00ad1>;\r\n  HashAlgorithm hash_alg;\r\n  select (hash_alg) {\r\n    case md5: MD5Hash;\r\n    case sha1: SHA1Hash;\r\n    case sha224: SHA224Hash;\r\n    case sha256: SHA256Hash;\r\n    case sha384: SHA384Hash;\r\n    case sha512: SHA512Hash;\r\n  } hash;\r\n} URLandHash;\r\n\r\nExample: similarly to the example on p. 7, authorization data \r\nconsisting of an X509 attribute cert\r\n\r\na SAML assertion URL is encoded as\r\n\r\n17 # Handshake.msg_type == supplemental_data(23)\r\n00 00 38 # Handshake.length = 56\r\n00 00 53 # length of SupplementalData.supp_data = 53\r\n40 02 # SupplementalDataEntry.supp_data_type = 16386\r\n00 31 # SupplementalDataEntry.supp_data_length = 49\r\n00 # authz_format = x509_attr_cert(0)\r\n00 05 # authz_data_length = 5\r\naa aa aa aa aa # X509AttrCert fictitious: \"aa aa aa aa aa\"\r\n01 # authz_format = saml_assertion_url(3)\r\n00 26 # authz_data_length = 38\r\n00 03 # length of URLAndHash url\r\nbb bb bb # url fictitious: \"bb bb bb\"\r\n04 # hash_alg = sha256(4)\r\n00 01 02 03 # sha256 hash: \"00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d\r\n04 05 06 07 # 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f\"\r\n08 09 0a 0b #\r\n0c 0d 0e 0f #\r\n10 11 12 13 #\r\n14 15 16 17 #\r\n18 19 1a 1b #\r\n1c 1d 1e 1f #", "notes": "Proposed change: Allow opaque parsing of AuthorizationData entries. As AuthorizationData\r\nmay be intended for use by applications rather than the handshake itself, it is desirable that TLS\r\nservers and clients be able to parse this data without being aware of its structure.", "submit_date": "2013-03-08", "submitter_name": "Ben Laurie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3516", "doc-id": "RFC4388", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "", "orig_text": "(1)  [word omission]\r\n\r\nThe second paragraph of section 4.2 of RFC 4388 says:\r\n\r\n   The DHCP Server MIB effort [DHCPMIB] grew out of traffic engineering\r\n   and troubleshooting activities at large DHCP installations, and is\r\n   primarily intended as a method of gathering performance statistics\r\n   about servers the load presented to them.\r\n\r\nIt should perhaps better say:\r\n\r\n   The DHCP Server MIB effort [DHCPMIB] grew out of traffic engineering\r\n   and troubleshooting activities at large DHCP installations, and is\r\n   primarily intended as a method of gathering performance statistics\r\n|  about servers and the load presented to them.\r\n                ^^^^^\r\n\r\n\r\n(2)  [improper wording]\r\n\r\nRFC 4388 repeatedly talks about\r\n\r\n   \"[an] IP address most recently accessed by a client\"\r\n                                  ^^^^^^^^^^^\r\nwhere, IMHO, it should talk about\r\n\r\n|  \"[an] IP address most recently assigned to a client\"\r\n                                  ^^^^^^^^^^^\r\nRationale:\r\n  The client may access any IP address at any time.  Such access\r\n  is mostly unrelated to the protocol described in RFC 4338.\r\n\r\nThe affected places in the text I found are:\r\n- Section 5, first paragraph of both the second and the third\r\n  bulleted items, on page 10 / 11, respectively;\r\n- Last paragraph on page 17 (within section 6.4.1).\r\n\r\n\r\n(3)  [incomplete specification]\r\n\r\nThe second paragraph of Section 6.4.1, on page 17, says:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n   DHCPLEASEUNASSIGNED message.\r\n\r\nIt should in fact say:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n|  DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message returned.\r\n   ^^^^^^^^^^^^^^^^^^^^^                           ^^^^^^^^^\r\n\r\nRationale:\r\n  From the remaining text, it can be inferred that the \"ciaddr\"\r\n  field from the DHCPLEASEQUERY message should be copied to an\r\n  DHCPRELEASEACTIVE reply message as well -- cf. section 6.4.2.\r\n\r\nIMHO, this copy should be performed generally, i.e. also in the case\r\ndescribed by the subsequent paragraph:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n   DHCPLEASEUNKNOWN message must be returned.\r\n\r\nthat therefore might be amended to say:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned, with that IP address\r\n|  set in the \"ciaddr\" field.\r\n\r\n[The original 'must' should be a 'MUST' because the alternatives\r\nare also specified as a 'MUST' -- or else the specification would\r\nbe incomplete.]\r\n\r\nTaken together, it might be preferable to restate this fact by\r\nonly changing the first paragraph cited above as follows, and leave\r\nthe second paragraph unchanged with the exception of the 'must':\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n|  DHCPLEASEQUERY message, then that IP address MUST be set in the\r\n|  \"ciaddr\" field of any reply returned.\r\n\r\n|  If that IP address is one managed by the DHCP server, then it MUST\r\n|  reply with a DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message.\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned.\r\n\r\nPlease comment on which alternative you prefer.", "correct_text": "", "notes": "from pending\n --VERIFIER NOTES-- \nTool error   ", "submit_date": "2006-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3517", "doc-id": "RFC4388", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4.1", "orig_text": "(1)  [word omission]\r\n\r\nThe second paragraph of section 4.2 of RFC 4388 says:\r\n\r\n   The DHCP Server MIB effort [DHCPMIB] grew out of traffic engineering\r\n   and troubleshooting activities at large DHCP installations, and is\r\n   primarily intended as a method of gathering performance statistics\r\n   about servers the load presented to them.\r\n\r\nIt should perhaps better say:\r\n\r\n   The DHCP Server MIB effort [DHCPMIB] grew out of traffic engineering\r\n   and troubleshooting activities at large DHCP installations, and is\r\n   primarily intended as a method of gathering performance statistics\r\n|  about servers and the load presented to them.\r\n                ^^^^^\r\n\r\n\r\n(2)  [improper wording]\r\n\r\nRFC 4388 repeatedly talks about\r\n\r\n   \"[an] IP address most recently accessed by a client\"\r\n                                  ^^^^^^^^^^^\r\nwhere, IMHO, it should talk about\r\n\r\n|  \"[an] IP address most recently assigned to a client\"\r\n                                  ^^^^^^^^^^^\r\nRationale:\r\n  The client may access any IP address at any time.  Such access\r\n  is mostly unrelated to the protocol described in RFC 4338.\r\n\r\nThe affected places in the text I found are:\r\n- Section 5, first paragraph of both the second and the third\r\n  bulleted items, on page 10 / 11, respectively;\r\n- Last paragraph on page 17 (within section 6.4.1).\r\n\r\n\r\n(3)  [incomplete specification]\r\n\r\nThe second paragraph of Section 6.4.1, on page 17, says:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n   DHCPLEASEUNASSIGNED message.\r\n\r\nIt should in fact say:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n|  DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message returned.\r\n   ^^^^^^^^^^^^^^^^^^^^^                           ^^^^^^^^^\r\n\r\nRationale:\r\n  From the remaining text, it can be inferred that the \"ciaddr\"\r\n  field from the DHCPLEASEQUERY message should be copied to an\r\n  DHCPRELEASEACTIVE reply message as well -- cf. section 6.4.2.\r\n\r\nIMHO, this copy should be performed generally, i.e. also in the case\r\ndescribed by the subsequent paragraph:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n   DHCPLEASEUNKNOWN message must be returned.\r\n\r\nthat therefore might be amended to say:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned, with that IP address\r\n|  set in the \"ciaddr\" field.\r\n\r\n[The original 'must' should be a 'MUST' because the alternatives\r\nare also specified as a 'MUST' -- or else the specification would\r\nbe incomplete.]\r\n\r\nTaken together, it might be preferable to restate this fact by\r\nonly changing the first paragraph cited above as follows, and leave\r\nthe second paragraph unchanged with the exception of the 'must':\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n|  DHCPLEASEQUERY message, then that IP address MUST be set in the\r\n|  \"ciaddr\" field of any reply returned.\r\n\r\n|  If that IP address is one managed by the DHCP server, then it MUST\r\n|  reply with a DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message.\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned.\r\n\r\nPlease comment on which alternative you prefer.", "correct_text": "(2)  [improper wording]\r\n\r\nRFC 4388 repeatedly talks about\r\n\r\n   \"[an] IP address most recently accessed by a client\"\r\n                                  ^^^^^^^^^^^\r\nwhere, IMHO, it should talk about\r\n\r\n|  \"[an] IP address most recently assigned to a client\"\r\n                                  ^^^^^^^^^^^\r\nRationale:\r\n  The client may access any IP address at any time.  Such access\r\n  is mostly unrelated to the protocol described in RFC 4338.\r\n\r\nThe affected places in the text I found are:\r\n- Section 5, first paragraph of both the second and the third\r\n  bulleted items, on page 10 / 11, respectively;\r\n- Last paragraph on page 17 (within section 6.4.1).\r\n", "notes": "Split from errata 104", "submit_date": "2006-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3518", "doc-id": "RFC4388", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.1", "orig_text": "(1)  [word omission]\r\n\r\nThe second paragraph of section 4.2 of RFC 4388 says:\r\n\r\n   The DHCP Server MIB effort [DHCPMIB] grew out of traffic engineering\r\n   and troubleshooting activities at large DHCP installations, and is\r\n   primarily intended as a method of gathering performance statistics\r\n   about servers the load presented to them.\r\n\r\nIt should perhaps better say:\r\n\r\n   The DHCP Server MIB effort [DHCPMIB] grew out of traffic engineering\r\n   and troubleshooting activities at large DHCP installations, and is\r\n   primarily intended as a method of gathering performance statistics\r\n|  about servers and the load presented to them.\r\n                ^^^^^\r\n\r\n\r\n(2)  [improper wording]\r\n\r\nRFC 4388 repeatedly talks about\r\n\r\n   \"[an] IP address most recently accessed by a client\"\r\n                                  ^^^^^^^^^^^\r\nwhere, IMHO, it should talk about\r\n\r\n|  \"[an] IP address most recently assigned to a client\"\r\n                                  ^^^^^^^^^^^\r\nRationale:\r\n  The client may access any IP address at any time.  Such access\r\n  is mostly unrelated to the protocol described in RFC 4338.\r\n\r\nThe affected places in the text I found are:\r\n- Section 5, first paragraph of both the second and the third\r\n  bulleted items, on page 10 / 11, respectively;\r\n- Last paragraph on page 17 (within section 6.4.1).\r\n\r\n\r\n(3)  [incomplete specification]\r\n\r\nThe second paragraph of Section 6.4.1, on page 17, says:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n   DHCPLEASEUNASSIGNED message.\r\n\r\nIt should in fact say:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n|  DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message returned.\r\n   ^^^^^^^^^^^^^^^^^^^^^                           ^^^^^^^^^\r\n\r\nRationale:\r\n  From the remaining text, it can be inferred that the \"ciaddr\"\r\n  field from the DHCPLEASEQUERY message should be copied to an\r\n  DHCPRELEASEACTIVE reply message as well -- cf. section 6.4.2.\r\n\r\nIMHO, this copy should be performed generally, i.e. also in the case\r\ndescribed by the subsequent paragraph:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n   DHCPLEASEUNKNOWN message must be returned.\r\n\r\nthat therefore might be amended to say:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned, with that IP address\r\n|  set in the \"ciaddr\" field.\r\n\r\n[The original 'must' should be a 'MUST' because the alternatives\r\nare also specified as a 'MUST' -- or else the specification would\r\nbe incomplete.]\r\n\r\nTaken together, it might be preferable to restate this fact by\r\nonly changing the first paragraph cited above as follows, and leave\r\nthe second paragraph unchanged with the exception of the 'must':\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n|  DHCPLEASEQUERY message, then that IP address MUST be set in the\r\n|  \"ciaddr\" field of any reply returned.\r\n\r\n|  If that IP address is one managed by the DHCP server, then it MUST\r\n|  reply with a DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message.\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned.\r\n\r\nPlease comment on which alternative you prefer.", "correct_text": "[incomplete specification]\r\n\r\nThe second paragraph of Section 6.4.1, on page 17, says:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n   DHCPLEASEUNASSIGNED message.\r\n\r\nIt should in fact say:\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n   DHCPLEASEQUERY message, if that IP address is one managed by the DHCP\r\n   server, then that IP address MUST be set in the \"ciaddr\" field of a\r\n|  DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message returned.\r\n   ^^^^^^^^^^^^^^^^^^^^^                           ^^^^^^^^^\r\n\r\nRationale:\r\n  From the remaining text, it can be inferred that the \"ciaddr\"\r\n  field from the DHCPLEASEQUERY message should be copied to an\r\n  DHCPRELEASEACTIVE reply message as well -- cf. section 6.4.2.\r\n\r\nIMHO, this copy should be performed generally, i.e. also in the case\r\ndescribed by the subsequent paragraph:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n   DHCPLEASEUNKNOWN message must be returned.\r\n\r\nthat therefore might be amended to say:\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned, with that IP address\r\n|  set in the \"ciaddr\" field.\r\n\r\n[The original 'must' should be a 'MUST' because the alternatives\r\nare also specified as a 'MUST' -- or else the specification would\r\nbe incomplete.]\r\n\r\nTaken together, it might be preferable to restate this fact by\r\nonly changing the first paragraph cited above as follows, and leave\r\nthe second paragraph unchanged with the exception of the 'must':\r\n\r\n   In the event that an IP address appears in the \"ciaddr\" field of a\r\n|  DHCPLEASEQUERY message, then that IP address MUST be set in the\r\n|  \"ciaddr\" field of any reply returned.\r\n\r\n|  If that IP address is one managed by the DHCP server, then it MUST\r\n|  reply with a DHCPRELEASEACTIVE or DHCPLEASEUNASSIGNED message.\r\n\r\n   If the IP address is not managed by the DHCP server, then a\r\n|  DHCPLEASEUNKNOWN message MUST be returned.\r\n\r\nPlease comment on which alternative you prefer.", "notes": "Split from errata 104", "submit_date": "2006-03-02", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Ralph Droms", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3520", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipSystemStatsHCOctetGroup (p. 87) says:", "orig_text": "           \"This group is mandatory for systems that have an aggregate\r\n            bandwidth of greater than 20MB.  Including this group does\r\n            not allow an entity to neglect the 32 bit versions of these\r\n            objects.\"", "correct_text": "           \"This group is mandatory for systems that have an aggregate\r\n|           bandwidth of greater than 20Mbps.  Including this group does\r\n            not allow an entity to neglect the 32 bit versions of these\r\n            objects.\"", "notes": "from pending", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4463", "doc-id": "RFC6733", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.7", "orig_text": "6.1.7.  Predictive Loop Avoidance", "correct_text": "6.1.7.  Predictive Loop Detection and termination", "notes": "one full cycle of loop execution happens before route record is identified and loop being realized. A scenario example where two Diameter Agents are configured to do precedence based routing to two different hss and where as if hss otherwise does loadshare using 4 different links each in such cases loop can even be reach stage 2 before being realized therefore it doesn't qualify the avoidance or prevention rather detection and termination. thanks.\n --VERIFIER NOTES-- \n\r\nThere is no need or benefit from this change.", "submit_date": "2015-09-01", "submitter_name": "Keshab Upadhya", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7370", "doc-id": "RFC6386", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "19.1", "orig_text": "The start_code is a constant 3-byte pattern having value 0x9d012a.", "correct_text": "The start_code is a constant 3-byte pattern having value 0x2a019d.", "notes": "The bytes in the file are 9D 01 2A, but if they are read little-endian like `tmp = (c[2] << 16) | (c[1] << 8) | c[0];` as is done for frame_tag just before, then start_code will end up as 0x2a019d in an uint32_t.\r\n\r\nAlternatively, it could say \"...having value 0x9d 0x01 0x2a\".", "submit_date": "2023-02-25", "submitter_name": "Nico Weber", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "3551", "doc-id": "RFC4295", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "The DESCRIPTION clause of the mip6MnBLAcceptedTime OBJECT-TYPE,\r\non page 39, says:\r\n                                                             v\r\n|                  \"The time at which the mobile node receives a binding\r\n                    acknowledgment indicating that Binding Update has\r\n                    been accepted (status code 0 or 1);\r\n                    [...]\r\n\r\nIt should say:\r\n                                                             v\r\n|                  \"The time at which the mobile node received a binding\r\n                    acknowledgment indicating that Binding Update has\r\n                    been accepted (status code 0 or 1);\r\n                    [...]\r\n\r\nor even better (similar to the mip6MnBLAccepted DESCRIPTION on the\r\nsame page):\r\n                                                      vvvv       v\r\n|                  \"The time at which the mobile node has received a\r\n                    binding acknowledgment indicating that Binding\r\n                    Update has been accepted (status code 0 or 1);\r\n                    [...]\r\n", "correct_text": "", "notes": "The items below are presented in RFC textual order.\r\nI use change bars ('|' in column 1) and occasionally\r\nup/down pointing marker lines ('^^^'/'vvv') to emphasize\r\nthe location of textual issues and/or proposed corrections.\r\nModified text has been re-adjusted to match RFC formatting\r\nrules, where appropriate.", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3569", "doc-id": "RFC6241", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "   (2)  The Messages layer provides a simple, transport-independent\r\n        framing mechanism for encoding RPCs and notifications.\r\n        Section 4 documents the RPC messages, and [RFC5717] documents\r\n        notifications", "correct_text": "   (2)  The Messages layer provides a simple, transport-independent\r\n        framing mechanism for encoding RPCs and notifications.\r\n        Section 4 documents the RPC messages, and [RFC5277] documents\r\n        notifications", "notes": "RFC5717 Partial Lock Remote Procedure Call (RPC) for NETCONF\r\nRFC5277 NETCONF Event Notifications", "submit_date": "2013-03-27", "submitter_name": "Xiang Li", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3570", "doc-id": "RFC5054", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5.1.3", "orig_text": "2.5.1.3.  Unknown SRP         User Name", "correct_text": "2.5.1.3.  Unknown SRP User Name", "notes": "Too many spaces in the heading.", "submit_date": "2013-03-27", "submitter_name": "Nico Roeser", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4464", "doc-id": "RFC1122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.4.2", "orig_text": "            It not required, but the application SHOULD be able to\r\n            change the TOS during the connection lifetime.  TCP SHOULD\r\n", "correct_text": "            It is not required, but the application SHOULD be able to\r\n            change the TOS during the connection lifetime.  TCP SHOULD\r\n", "notes": "just a typo (missing \"is\" as second word)", "submit_date": "2015-09-04", "submitter_name": "Michael Welzl", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4001", "doc-id": "RFC7208", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.4", "orig_text": "   example.com.           SPF  ( \"v=spf1 \"\r\n                                 \"-include:ip4._spf.%{d} \"\r\n                                 \"-include:ptr._spf.%{d} \"\r\n                                 \"+all\" )\r\n   ip4._spf.example.com.  SPF  \"v=spf1 -ip4:192.0.2.0/24 +all\"\r\n   ptr._spf.example.com.  SPF  \"v=spf1 -ptr +all\"", "correct_text": "   example.com.           TXT  ( \"v=spf1 \"\r\n                                 \"-include:ip4._spf.%{d} \"\r\n                                 \"-include:ptr._spf.%{d} \"\r\n                                 \"+all\" )\r\n   ip4._spf.example.com.  TXT  \"v=spf1 -ip4:192.0.2.0/24 +all\"\r\n   ptr._spf.example.com.  TXT  \"v=spf1 -ptr +all\"", "notes": "According to Section 14.1 and Appendix B, the use of DNS RR type SPF (99) has been removed from the protocol.", "submit_date": "2014-05-27", "submitter_name": "Jimmy Xu", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4002", "doc-id": "RFC3696", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "   The exact rule is that any ASCII character, including control\r\n   characters, may appear quoted, or in a quoted string.  When quoting\r\n   is needed, the backslash character is used to quote the following\r\n   character.  For example\r\n\r\n      Abc\\@def@example.com\r\n\r\n   is a valid form of an email address.  Blank spaces may also appear,\r\n   as in\r\n\r\n      Fred\\ Bloggs@example.com\r\n\r\n   The backslash character may also be used to quote itself, e.g.,\r\n\r\n      Joe.\\\\Blow@example.com\r\n\r\n   In addition to quoting using the backslash character, conventional\r\n   double-quote characters may be used to surround strings.  For example\r\n\r\n      \"Abc@def\"@example.com\r\n\r\n      \"Fred Bloggs\"@example.com\r\n\r\n   are alternate forms of the first two examples above.", "correct_text": "   The exact rule is that any ASCII character, including control\r\n   characters, may appear quoted, or in a quoted string.  When quoting\r\n   is needed, the backslash character is used to quote the following\r\n   character.  For example\r\n\r\n      Abc\\@def@example.com\r\n\r\n   is a valid form of an email address.  Blank spaces may also appear,\r\n   as in\r\n\r\n      Fred\\ Bloggs@example.com\r\n\r\n   The backslash character may also be used to quote itself, e.g.,\r\n\r\n      Joe.\\\\Blow@example.com\r\n\r\n   In addition to quoting using the backslash character, conventional\r\n   double-quote characters may be used to surround strings.  For example\r\n\r\n      \"Abc@def\"@example.com\r\n\r\n      \"Fred Bloggs\"@example.com\r\n\r\n      \"Joe.\\\\Blow\"@example.com\r\n\r\n   are alternate forms of the examples above.", "notes": "Errata 3563 is incorrect. The first two suggested additions it makes to the spec are actually already present in the original spec just one paragraph down. The third and final suggested addition (allowing an unquoted backslash in a quoted string), while appearing to comport with this RFC, violates RFC 2822 (the reference document for this section). While the suggested email address is valid, it is not equivalent to the original.\r\n\r\nRFC 2822 sections 3.2.1, 3.2.2, and 3.2.5 define quoted-string as consisting of any unquoted ASCII character except for backslash and double quote, and any backslash-quoted ASCII character including backslash and double quote.\r\n\r\nThus, while it is correct that\r\n\r\n   \"Joe.\\Blow\"@example.com\r\n\r\nis a valid email address, it is not equivalent to \r\n\r\n   Joe.\\\\Blow@example.com\r\n\r\nas the \\B in the first should be interpreted as a quoted B, not as an illegally unquoted backslash followed by a B. The quoted equivalent of\r\n\r\n   Joe.\\\\Blow@example.com\r\n\r\nis\r\n\r\n   \"Joe.\\\\Blow\"@example.com\r\n\r\nThis example was probably left out of the original spec because the quoted-string version differs from the original only in the quotes themselves.", "submit_date": "2014-05-28", "submitter_name": "Brandon Gabbert", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7057", "doc-id": "RFC8542", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "augment \"/nws:networks/nws:network/nws:node\" {\r\n  when '/nws:networks/nws:network/nws:network-types'\r\n     + '/sfabric:fabric-network' {\r\n    description\r\n      \"Augmentation parameters apply only for\r\n       networks with fabric topology.\";\r\n  }\r\n", "correct_text": "augment \"/nws:networks/nws:network/nws:node\" {\r\n  when '../nws:network-types/sfabric:fabric-network' {\r\n    description\r\n      \"Augmentation parameters apply only for\r\n       networks with fabric topology.\";\r\n  }\r\n", "notes": "The original YANG statements make the augmentation apply to all nws:networks as soon as there is at least one nws:network that is of sfabric:fabric-network topo. This is clearly not the author's intent, as proven by the text in the description statement.\r\n\r\nThe corrected YANG statements make the augmentation only apply to the specific nws:networks that are of fabric topology. There are also other ways to fix this issue.\r\n\r\n===\r\n[AD Note] I believe that the original intent was as shown in the corrected text.  However, the resolution is not straightforward, and an update may require further consideration in light of the current rules (rfc7950).  Therefore, I am marking this report as \"Hold for Document Update\" [1].\r\n\r\n[1] https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/", "submit_date": "2022-07-29", "submitter_name": "Jan Lindblad", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-09-07 13:29:51"}, {"errata_id": "3571", "doc-id": "RFC5460", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "5.2.1. LEASEQUERY-DATA\r\n\r\nThe LEASEQUERY-DATA message carries data about a single DHCPv6\r\nclient\u2019s leases and/or PD bindings on a single link. The purpose of\r\nthe message is to reduce redundant data when there are multiple\r\nbindings to be sent. The LEASEQUERY-DATA message MUST be preceded by\r\na LEASEQUERY-REPLY message. The LEASEQUERY-REPLY carries the query\u2019s\r\nstatus, the Leasequery\u2019s Client-ID and Server-ID options, and the\r\nfirst client\u2019s binding data if the query was successful.\r\n\r\nLEASEQUERY-DATA MUST ONLY be sent in response to a successful\r\nLEASEQUERY, and only if more than one client\u2019s data is to be sent.\r\nThe LEASEQUERY-DATA message\u2019s transaction-id field MUST match the\r\ntransaction-id of the LEASEQUERY request message. The Server-ID,\r\nClient-ID, and OPTION_STATUS_CODE options SHOULD NOT be included:\r\nthat data should be constant for any one Bulk Leasequery reply, and\r\nshould have been conveyed in the LEASEQUERY-REPLY message.", "correct_text": "5.2.1. LEASEQUERY-DATA\r\n\r\nThe LEASEQUERY-DATA message carries data about a single DHCPv6\r\nclient\u2019s leases and/or PD bindings on a single link. The purpose of\r\nthe message is to reduce redundant data when there are multiple\r\nbindings to be sent. The LEASEQUERY-DATA message MUST be preceded by\r\na LEASEQUERY-REPLY message. The LEASEQUERY-REPLY carries the query\u2019s\r\nstatus, the Leasequery\u2019s Client-ID and Server-ID options, and the\r\nfirst client\u2019s binding data if the query was successful.\r\n\r\nLEASEQUERY-DATA MUST ONLY be sent in response to a successful\r\nLEASEQUERY, and only if more than one client\u2019s data is to be sent.\r\nThe LEASEQUERY-DATA message\u2019s transaction-id field MUST match the\r\ntransaction-id of the LEASEQUERY request message. The Server-ID,\r\nrequestor's Client-ID, and OPTION_STATUS_CODE options SHOULD NOT be included:\r\nthat data should be constant for any one Bulk Leasequery reply, and\r\nshould have been conveyed in the LEASEQUERY-REPLY message.", "notes": "The term \"Client-Id\" in second paragraph sounds like client's Client-Id and it will be different for more than one client's data. So it should be corrected to \"requestor's Client-ID\" or \"Leasequery's Client-ID\" instead of just \"Client-ID\".\r\n\r\nMark Stapp reviewed this erratum and agrees that it is an improvement.   Thanks!", "submit_date": "2013-03-28", "submitter_name": "Sunil M Gandhewar", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3521", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipSystemStatsHCPacketGroup (p. 87-88) says:", "orig_text": "           \"This group is mandatory for systems that have an aggregate\r\n            bandwidth of greater than 650MB.  Including this group\r\n            does not allow an entity to neglect the 32 bit versions of\r\n            these objects.\"", "correct_text": "           \"This group is mandatory for systems that have an aggregate\r\n|           bandwidth of greater than 650Mbps.  Including this group\r\n            does not allow an entity to neglect the 32 bit versions of\r\n            these objects.\"", "notes": "from pending", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3522", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipIfStatsHCOctetGroup (p. 88) says:", "orig_text": "           \"This group is mandatory for systems that include the\r\n            ipIfStatsGroup and include links with bandwidths of greater\r\n            than 20MB.  Including this group does not allow an entity to\r\n            neglect the 32 bit versions of these objects.\"", "correct_text": "           \"This group is mandatory for systems that include the\r\n            ipIfStatsGroup and include links with bandwidths of greater\r\n|           than 20Mbps.  Including this group does not allow an entity\r\n            to neglect the 32 bit versions of these objects.\"", "notes": "from pending", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3523", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipIfStatsHCPacketGroup (p. 88) says:", "orig_text": "           \"This group is mandatory for systems that include the\r\n            ipIfStatsGroup and include links with bandwidths of greater\r\n            than 650MB.  Including this group does not allow an entity\r\n            to neglect the 32 bit versions of these objects.\"", "correct_text": "           \"This group is mandatory for systems that include the\r\n            ipIfStatsGroup and include links with bandwidths of greater\r\n|           than 650Mbps.  Including this group does not allow an entity\r\n            to neglect the 32 bit versions of these objects.\"", "notes": "from pending", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3524", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipv4SystemStatsHCPacketGroup (p. 88) says:", "orig_text": "           \"This group is mandatory for all systems supporting IPv4 and\r\n            that have an aggregate bandwidth of greater than 650MB.\r\n            Including this group does not allow an entity to neglect the\r\n            32 bit versions of these objects.\"", "correct_text": "           \"This group is mandatory for all systems supporting IPv4 and\r\n|           that have an aggregate bandwidth of greater than 650Mbps.\r\n            Including this group does not allow an entity to neglect the\r\n            32 bit versions of these objects.\"", "notes": "from pending", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4465", "doc-id": "RFC5036", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.5.3", "orig_text": "The first rule: \r\nIn section 3.5.3 \r\n   A, Label Advertisement Discipline\r\n         [omitting the first paragraph]\r\n\r\n         If one LSR proposes Downstream Unsolicited and the other\r\n         proposes Downstream on Demand, the rules for resolving this\r\n         difference is:\r\n\r\n         -  If the session is for a label-controlled ATM link or a\r\n            label-controlled Frame Relay link, then Downstream on Demand\r\n            MUST be used.\r\n\r\n         -  Otherwise, Downstream Unsolicited MUST be used.\r\n\r\n\r\nThe second rule: \r\nIn section 3.5.7.1.3.\r\n\r\n   In general, the upstream LSR is responsible for requesting label\r\n   mappings when operating in Downstream on Demand mode.  However,\r\n   unless some rules are followed, it is possible for neighboring LSRs\r\n   with different advertisement modes to get into a livelock situation\r\n   where everything is functioning properly, but no labels are \r\n   distributed.  For example, consider two LSRs Ru and Rd where Ru is\r\n   the upstream LSR and Rd is the downstream LSR for a particular FEC.\r\n   In this example, Ru is using Downstream Unsolicited advertisement\r\n   mode and Rd is using Downstream on Demand mode.  In this case, Rd may\r\n   assume that Ru will request a label mapping when it wants one and Ru\r\n   may assume that Rd will advertise a label if it wants Ru to use one.\r\n   If Rd and Ru operate as suggested, no labels will be distributed from\r\n   Rd to Ru.\r\n\r\n   This livelock situation can be avoided if the following rule is\r\n   observed: an LSR operating in Downstream on Demand mode SHOULD NOT be\r\n   expected to send unsolicited mapping advertisements.  Therefore, if\r\n   the downstream LSR is operating in Downstream on Demand mode, the\r\n   upstream LSR is responsible for requesting label mappings as needed.", "correct_text": "[not provided]", "notes": "Label advertisement mode negotiation rule is different in two sections. \r\n\r\nwhen the label advertisement mode is different between LSR peers,\r\nthe resolving rule is defined twice in two chapters, \r\nboth use \"must\" or \"SHOULD NOT\", but they are completely different.\r\n\r\nIt's better to settle down which rule to use for this case. \r\nSeems the first one is simpler for implementation.\r\n\r\nOr if you want to keep both rules, \r\nbetter to enumerate both of those two rules in each section, \r\nand say the implementer can choose any of them.\r\n\r\n --VERIFIER NOTES-- \r\n   This suggested errata requires an update to the RFC, which requires consensus.", "submit_date": "2015-09-05", "submitter_name": "Guijuan Wang", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3564", "doc-id": "RFC6044", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1", "orig_text": "Mapped into:\r\nHistory-Info:\r\n<sip: diverting_user1_address; privacy=none >; index=1,\r\n<sip: diverting_user2_address; cause=408?privacy=history>;index=1.1,\r\n<sip: diverting_user3_address; cause=486?privacy=none>;index=1.1.1,\r\n<sip: last_diverting_target; cause=302>;index=1.1.1.1\r\n\r\n", "correct_text": "Mapped into:\r\nHistory-Info:\r\n<sip: diverting_user1_address; privacy=none >; index=1,\r\n<sip: diverting_user2_address; cause=408?privacy=history>;index=1.1,\r\n<sip: diverting_user3_address; cause=486?privacy=none>;index=1.1.1,\r\n<sip: last_diverting_target; cause=302?privacy=none>;index=1.1.1.1\r\n", "notes": "Section 5 for Diversion to History Info mapping states \r\nA last History-Info entry is created and contains:\r\n- if a privacy parameter is present in the top-most Diversion entry,\r\nthen a Privacy header could be escaped in the History-Info header\r\nas described above.\r\n\r\nSo if this is rule is applied then the last History Info entry must contain a privacy param corresponding to the top most Diversion and in this case it maps to none. On the other hand if this example is to be considered correct then we ought to modify section 5 to have no privacy for the last hi entry.\n --VERIFIER NOTES-- \nIn RFC 6044 section 7.1, the last History-Info line does not\r\ncorrespond to the last diverting user (similar to the top-most\r\ndiversion entry), but to the last diversion TARGET.  We don't have the\r\nprivacy of the last call forwarding destination - that's why there is\r\nno privacy associated to this address.\r\n\r\nThe privacy info associated to diverting users 1, 2 and 3 are still\r\nassociated to these user addresses in the History-Info header. \r\n", "submit_date": "2013-03-25", "submitter_name": "Jayaraj Wilson", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3528", "doc-id": "RFC6844", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "s7.3", "orig_text": "Reserved>", "correct_text": "Reserved", "notes": "The additional \">\" is unnecessary.", "submit_date": "2013-03-10", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3530", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "The DESCRIPTION clause of the ipAddressPrefixType OBJECT-TYPE (p. 60) says:", "orig_text": "           \"The address type of ipAddressPrefix.\"", "correct_text": "|          \"The address type of ipAddressPrefixPrefix.\"", "notes": "mentions an object that does not exist in the MIB module.", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3531", "doc-id": "RFC4293", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The ipDefaultRouterPreference OBJECT-TYPE (p. 76) says:", "orig_text": "           \"An indication of preference given to this router as a\r\n            default router as described in he Default Router\r\n            Preferences document.  [...]\r\n\r\nand\r\n\r\n    REFERENCE \"RFC 4291, section 2.1\"", "correct_text": "           \"An indication of preference given to this router as a\r\n|           default router as described in the Default Router\r\n            Preferences document.  [...]\r\n\r\nand                                        \r\n\r\n|   REFERENCE \"RFC 4191, section 2.1\"", "notes": "two typos: he/the and 4291/4191.", "submit_date": "2006-07-07", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3565", "doc-id": "RFC5559", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "   [Moncaster09-1]  Moncaster, T., Briscoe, B., and M. Menth, \"Baseline\r\n                    Encoding and Transport of Pre-Congestion\r\n                    Information\", Work in Progress, May 2009.", "correct_text": "   [Moncaster09-1]  Moncaster, T., Briscoe, B., and M. Menth, \"Baseline\r\n                    Encoding and Transport of Pre-Congestion\r\n                    Information\", RFC 5696, November 2009.", "notes": "", "submit_date": "2013-03-26", "submitter_name": "Michael Welzl", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3532", "doc-id": "RFC6844", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "s7.3", "orig_text": "1-7          Reserved                 [RFC6844]\r\n", "correct_text": "1-7          Unassigned              [RFC6844]\r\n", "notes": "\"Unassigned\" is better than Reserved.", "submit_date": "2013-03-10", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3549", "doc-id": "RFC4295", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "", "orig_text": "It is accepted consensus in the IETF to use a common, mnemonic scheme\r\nfor the naming of tables, table rows, and columnar objects within\r\nthese rows, namely (variable text to be instantiated shown as <..>):\r\n\r\n          <tableName>Table\r\n            <tableName>Entry\r\n              <tableName><Object1>\r\n              <tableName><Object2>\r\n               ...\r\n              <tableName><Objectn>\r\nor:\r\n          <tableName>Table\r\n            <tableName>Entry\r\n              <tableNameShort><Object1>\r\n              <tableNameShort><Object2>\r\n               ...\r\n              <tableNameShort><Objectn>\r\nwhere\r\n  <tableNameShort> is an abbreviated version of <tableName> .\r\n\r\nUnfortunately, the mip6NodeTraffic counter table breaks this scheme.\r\nPage 24 of RFC 4295 specifies:\r\n\r\n        Mip6NodeTrafficEntry ::=\r\n           SEQUENCE {\r\n                 mip6NodeInOctets             Counter32,\r\n|                mip6HCNodeInOctets           Counter64,\r\n                 mip6NodeInPkts               Counter32,\r\n|                mip6HCNodeInPkts             Counter64,\r\n                 mip6NodeOutOctets            Counter32,\r\n|                mip6HCNodeOutOctets          Counter64,\r\n                 mip6NodeOutPkts              Counter32,\r\n|                mip6HCNodeOutPkts            Counter64,\r\n                 mip6NodeCtrDiscontinuityTime TimeStamp\r\n           }\r\n\r\nAs can be seen, the irregularity is in the 'HC' (Counter64) names;\r\n\"mip6HCNodeXxx\" should have been replaced by \"mip6NodeHCXxx\", i.e.,\r\n\r\n        Mip6NodeTrafficEntry ::=\r\n           SEQUENCE {\r\n                 mip6NodeInOctets             Counter32,\r\n|                mip6NodeHCInOctets           Counter64,\r\n                 mip6NodeInPkts               Counter32,\r\n|                mip6NodeHCInPkts             Counter64,\r\n                 mip6NodeOutOctets            Counter32,\r\n|                mip6NodeHCOutOctets          Counter64,\r\n                 mip6NodeOutPkts              Counter32,\r\n|                mip6NodeHCOutPkts            Counter64,\r\n                 mip6NodeCtrDiscontinuityTime TimeStamp\r\n           }\r\n\r\nAs the published irregular object names cannot be changed easily\r\nafter the fact, I hereby propose to introduce the regular object\r\nnames in a future update to the MIB module as *aliases* to the\r\nirregular ones, bound to the same OIDs.\r\nOf course,\r\n-  the OBJECT-TYPE declarations of the four affected MIB objects,\r\n   on page 25..28, and\r\n-  the definition of the mip6NodeTrafficGroup OBJECT-GROUP,\r\n   on page 81\r\nwould have to be adjusted accordingly.\r\n\r\n( Perhaps, it would be best to change the symbolic object names\r\n  in the above SEQUENCE definition, and in the OBJECT-TYPE and\r\n  OBJECT-GROUP definitions, and add new OBJECT IDENTIFIER\r\n  definitions to introduce the old, irregular names again,\r\n  with the same OIDs, for backwards compatibility.)\r\n", "correct_text": "", "notes": "The items below are presented in RFC textual order.\r\nI use change bars ('|' in column 1) and occasionally\r\nup/down pointing marker lines ('^^^'/'vvv') to emphasize\r\nthe location of textual issues and/or proposed corrections.\r\nModified text has been re-adjusted to match RFC formatting\r\nrules, where appropriate.\r\n\r\nfrom pending", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3566", "doc-id": "RFC6214", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Metadata", "orig_text": "RFC 6214 updates RFC 1149, in a similar way to RFC 2549 updating \r\nRFC 1149.  But there is no metadata in RFC 6214 stating that it \r\nupdates RFC 1149.\r\n", "correct_text": "\"Updates: 1149\"\r\n", "notes": "I discovered this defect while trying to find what was described to me as \"the IPv6 update to 'avian carriers'\".  So actual people are inconvenienced by this defect.", "submit_date": "2013-03-26", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4466", "doc-id": "RFC3650", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "[1] Kahn, R. and R. Wilensky, \"A Framework for Distributed \r\nDigital Object Services\", D-Lib Magazine, 1995.\r\n", "correct_text": "1] Kahn, R. and R. Wilensky, \"A Framework for Distributed \r\nDigital Object Services\", D-Lib Magazine, 1995.\r\nThis paper is now out of print.  A more recent version of it is\r\naccessible at\r\nhttps://www.doi.org/topics/2006_05_02_Kahn_Framework.pdf", "notes": "A search of the on-line index to that Journal, \r\nhttp://www.dlib.org/author-index.html#K, \r\nfor that article fails.\r\n\r\nPer the Managing Editor of D-Lib Magazine (in March 2016):\r\n\r\nA correct citation for the original paper in the RFC should simply be:\r\n\r\nKahn, Robert E., Robert Wilensky, \"A Framework for Distributed Digital Object Services\", May 1995. http://hdl.handle.net/4263537/5001.", "submit_date": "2015-09-07", "submitter_name": "Michael Message", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3567", "doc-id": "RFC6506", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   Consistent with OSPFv2 Cryptographic Authentication [RFC2328], both\r\n   OSPFv3 header checksum calculation and verification are omitted when\r\n   the OSPFv3 authentication mechanism described in this specification\r\n   is used.\r\n", "correct_text": "Please see notes\r\n\r\n=====\r\n\r\nOSPFv3 authentication mechanism provides capability to detect \r\ncorruption of OSPFv3 packet, which is under non authenticated \r\noperation achieved using OSPFv3 header checksum [RFC 5340] \r\nand LLS data block checksum [RFC 5613]. In spirit of OSPFv2 \r\nCryptographic Authentication [RFC2328], OSPFv3 header checksum \r\nand LLS Data Block Checksum calculation and verification \r\nare omitted when the OSPFv3 authentication mechanism \r\ndescribed in this specification is used.", "notes": "Readers should consult: draft-ietf-ospf-rfc6506bis for the \r\nresolution of this Erratum\r\n\r\n======\r\n\r\nRFC does not specify how to work with LLS Data Block Checksum. \r\nErrata suggests omit checksum calculation/verification in the \r\nsame way like for OSPFv3 header checksum.", "submit_date": "2013-03-27", "submitter_name": "Marek Karasek", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3568", "doc-id": "RFC6506", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "OSPFv3 Header Checksum\r\n\r\n   Both OSPFv3 header checksum calculation and verification are omitted\r\n   when the OSPFv3 authentication mechanism described in this\r\n   specification is used.  This implies:\r\n\r\n   o  For OSPFv3 packets to be transmitted, the OSPFv3 header checksum\r\n      computation is omitted, and the OSPFv3 header checksum SHOULD be\r\n      set to 0 prior to computation of the OSPFv3 Authentication Trailer\r\n      message digest.\r\n\r\n   o  For received OSPFv3 packets including an OSPFv3 Authentication\r\n      Trailer, OSPFv3 header checksum verification MUST be omitted.\r\n      However, if the OSPFv3 packet does include a non-zero OSPFv3\r\n      header checksum, it will not be modified by the receiver and will\r\n      simply be included in the OSPFv3 Authentication Trailer message\r\n      digest verification.\r\n", "correct_text": "Please see notes\r\n\r\n======\r\n\r\nOSPFv3 Header Checksum and LLS Data Block Checksum\r\n\r\nOSPFv3 Header Checksum and LLS Data Block Checksum calculation\r\nand verification are omitted when the OSPFv3 authentication \r\nmechanism described in this specification is used.  This \r\nimplies:\r\n\r\no  For OSPFv3 packets to be transmitted, the OSPFv3 header \r\nchecksum and LLS Data Block checksum computation is omitted, \r\nand the checksums SHOULD be set to 0 prior to computation \r\nof the OSPFv3 Authentication Trailer message digest.\r\n\r\no  For received OSPFv3 packets including an OSPFv3 \r\nAuthentication Trailer, OSPFv3 header checksum and LLS Data \r\nBlock checksum verification MUST be omitted.  However, \r\nif the OSPFv3 packet does include a non-zero OSPFv3 header \r\nor LLS Data Block checksum, it will not be modified by \r\nthe receiver and will simply be included in the OSPFv3 \r\nAuthentication Trailer message digest verification.", "notes": "The reader should consult draft-ietf-ospf-rfc6506bis for \r\nthe resolution of this erratum\r\n\r\n======\r\n\r\nRFC does not specify how to work with LLS Data Block \r\nChecksum. Errata suggests omit checksum calculation/\r\nverification in the same way like for OSPFv3 header \r\nchecksum.", "submit_date": "2013-03-27", "submitter_name": "Marek Karasek", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3552", "doc-id": "RFC4295", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "The DESCRIPTION clause of the mip6MnCompliance2 MODULE-COMPLIANCE,\r\non page 93, says:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB and\r\n                   support monitoring of the mobile node\r\n|                  functionality specifically the Discovery- and\r\n|                  Registration-related statistics,\r\n                   There are a number of INDEX objects [...]\r\n\r\nIt should say:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB and\r\n                   support monitoring of the mobile node\r\n|                  functionality, specifically the Discovery- and\r\n|                  Registration-related statistics.\r\n                   There are a number of INDEX objects that cannot be\r\n", "correct_text": "", "notes": "The items below are presented in RFC textual order.\r\nI use change bars ('|' in column 1) and occasionally\r\nup/down pointing marker lines ('^^^'/'vvv') to emphasize\r\nthe location of textual issues and/or proposed corrections.\r\nModified text has been re-adjusted to match RFC formatting\r\nrules, where appropriate.\r\n\r\nfrom pending", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3553", "doc-id": "RFC4295", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "The DESCRIPTION clause of the mip6CnCompliance MODULE-COMPLIANCE,\r\non page 94, says:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB and\r\n|                  support monitoring of the basic correspondent node\r\n|                  functionality.\r\n\r\nThis is the same description text as supplied for the\r\nmip6CnCoreCompliance (on the same page), and hence does not\r\nsuffice to distinguish these two compliance statements.\r\n\r\nThe above text perhaps should say:\r\n\r\n                  \"The compliance statement for SNMP entities\r\n                   that implement the MOBILEIPV6-MIB and support\r\n                   monitoring of the basic correspondent node\r\n|                  functionality and per-MN BU traffic.\r\n", "correct_text": "", "notes": "The items below are presented in RFC textual order.\r\nI use change bars ('|' in column 1) and occasionally\r\nup/down pointing marker lines ('^^^'/'vvv') to emphasize\r\nthe location of textual issues and/or proposed corrections.\r\nModified text has been re-adjusted to match RFC formatting\r\nrules, where appropriate.\r\n\r\nfrom pending", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4467", "doc-id": "RFC3473", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "Waveband switching uses the same format as the generalized label, see\r\n   section 2.2.", "correct_text": "Waveband switching uses the same format as the generalized label, see\r\n   section 2.3.", "notes": "Incorrect reference.", "submit_date": "2015-09-08", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4565", "doc-id": "RFC7430", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   Summary of the attack:\r\n\r\n      Type of attack: An attacker that can intercept the SYN/JOIN\r\n      message can alter the source address being added.\r\n\r\n      Type of attacker: partial-time on-path eavesdropper\r\n\r\n   Description:\r\n\r\n   The attacker is present along the path when the SYN/JOIN exchange\r\n   takes place.  This allows the attacker to add any new address it\r\n   wants to by simply substituting the source address of the SYN/JOIN\r\n   packet for one it chooses.  This vulnerability was readily identified\r\n   when designing the MPTCP security solution [RFC6181], and the threat\r\n   was considered acceptable.", "correct_text": "   Summary of the attack:\r\n\r\n      Type of attack: An attacker that can intercept the SYN/JOIN\r\n      message can alter the source address being added.\r\n\r\n      Type of attacker: partial-time on-path active attacker\r\n\r\n   Description:\r\n\r\n   The attacker is present along the path when the SYN/JOIN exchange\r\n   takes place.  This allows the attacker to add any new address it\r\n   wants to by simply substituting the source address of the SYN/JOIN\r\n   packet for one it chooses.  This vulnerability was readily identified\r\n   when designing the MPTCP security solution [RFC6181], and the threat\r\n   was considered acceptable.", "notes": "As noted in section 1, an active attacker is able to change, discard, or delay some of the packets of the MPTCP session. This coincide with the description of the SYN/JOIN attack in section 6.", "submit_date": "2015-12-14", "submitter_name": "Fabrizio Demaria", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3572", "doc-id": "RFC4874", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "           area A               area B              area C\r\n    <-------------------> <----------------> <------------------>\r\n\r\n   Ingress-----A1----A2----AB1----B1----B2----BC1----C1----C2----Egress\r\n   ^  \\                / | \\              / | \\                /\r\n   |   \\              /  |  \\            /  |  \\              /\r\n   |    A3----------A4--AB2--B3--------B4--BC2--C3----------C4\r\n   |                     ^                  ^\r\n   |                     |                  |\r\n   |                     |                  |\r\n   |                     |              ERO: (C3-strict, C4-strict,\r\n   |                     |                    Egress-strict)\r\n   |                     |              XRO: Not needed\r\n   |                     |\r\n   |               ERO: (B3-strict, B4-strict, BC2-strict, Egress-loose)\r\n   |               XRO: (BC1, C1, C2)\r\n   |\r\n   ERO: (A3-strict, A4-strict, AB2-strict, Egress-loose)\r\n   XRO: (AB1, B1, B2, BC1, C1, C2, Egress)\r\n\r\n", "correct_text": "           area A               area B              area C\r\n    <-------------------> <----------------> <------------------>\r\n\r\n   Ingress-----A1----A2----AB1----B1----B2----BC1----C1----C2----Egress\r\n   ^  \\                / | \\              / | \\                /\r\n   |   \\              /  |  \\            /  |  \\              /\r\n   |    A3----------A4--AB2--B3--------B4--BC2--C3----------C4\r\n   |                     ^                  ^\r\n   |                     |                  |\r\n   |                     |                  |\r\n   |                     |              ERO: (C3-strict, C4-strict,\r\n   |                     |                    Egress-strict)\r\n   |                     |              XRO: Not needed\r\n   |                     |\r\n   |               ERO: (B3-strict, B4-strict, BC2-strict, Egress-loose)\r\n   |               XRO: (BC1, C1, C2)\r\n   |\r\n   ERO: (A3-strict, A4-strict, AB2-strict, Egress-loose)\r\n   XRO: (AB1, B1, B2, BC1, C1, C2)\r\n\r\n", "notes": "The figure incorrectly shows the longest XRO to include the Egress as well. \r\n\r\nThe text in the RFC is correct - \"....so the ERO and XRO signaled at Ingress could be (A3-strict, A4-strict, AB2-strict, Egress-loose) and (AB1, B1, B2, BC1, C1, C2), respectively. \" \r\n\r\nThe editorial error exist in the figure.", "submit_date": "2013-03-28", "submitter_name": "Dhruv Dhody", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3561", "doc-id": "RFC6571", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1.1.1", "orig_text": "The LFA to P is via C2, because c < d + u.  It is node-protecting if\r\n   eq2: x + e < x + c, i.e., if e < c.", "correct_text": "The LFA to P is via C2 if x + e < d + u + x.   It is node-protecting if\r\n   eq2: x + e < c + x, i.e., if e < c.", "notes": "The condition for the first sentence e < d + u is not stated in the assumptions in Section 3.\r\n\r\nThe second sentence is not incorrect, but \"c + x\" is more consistent with eq1 in Section 2.\n --VERIFIER NOTES-- \n   The assumption that c < d + u is stated in section 3.0 (bullet 10) as a design assumption.", "submit_date": "2013-03-20", "submitter_name": "Ciril Rozic", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3562", "doc-id": "RFC3552", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3.5", "orig_text": "Note that it is only necessary to authenticate one side of the \r\ntransaction in order to prevent man-in-the-middle attacks.  In such a\r\nsituation the the peers can establish an association in which only\r\none peer is authenticated.", "correct_text": "Note that it is only necessary to authenticate one side of the \r\ntransaction in order to prevent man-in-the-middle attacks.  In such a\r\nsituation the peers can establish an association in which only\r\none peer is authenticated.", "notes": "Remove repetition of \"the\"", "submit_date": "2013-03-22", "submitter_name": "James Abley", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3582", "doc-id": "RFC5520", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.3", "orig_text": "<request>::= <RP>\r\n                    <segment-computation> | <path-key-expansion>\r\n\r\n       where:\r\n          <segment-computation> ::= <END-POINTS>\r\n                                    [<LSPA>]\r\n                                    [<BANDWIDTH>]\r\n                                    [<BANDWIDTH>]\r\n                                    [<metric-list>]\r\n                                    [<RRO>]\r\n                                    [<IRO>]\r\n                                    [<LOAD-BALANCING>]\r\n          <path-key-expansion> ::= <PATH-KEY>\r\n\r\n", "correct_text": "<request>::= <RP>\r\n                    <segment-computation> | <path-key-expansion>\r\n\r\n       where:\r\n          <segment-computation> ::= <END-POINTS>\r\n                                    [<LSPA>]\r\n                                    [<BANDWIDTH>]\r\n                                    [<metric-list>]\r\n                                    [<RRO>[<BANDWIDTH>]]\r\n                                    [<IRO>]\r\n                                    [<LOAD-BALANCING>]\r\n          <path-key-expansion> ::= <PATH-KEY>\r\n\r\n", "notes": "This document defines <path-key-expansion> to allow path request message to be used for getting the confidential path segment. The <segment-computation> should be as per RFC5440 itself. \r\nThere is a mistake in the second BANDWIDTH object which should be placed with RRO as per RFC5440.", "submit_date": "2013-04-05", "submitter_name": "Dhruv Dhody", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7058", "doc-id": "RFC9132", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "              uses data-channel:target {\r\n                when \"/dots-signal/scope/conflict-information/\"\r\n                   + \"conflict-cause = 'overlapping-targets'\";\r\n              }\r\n", "correct_text": "              uses data-channel:target {\r\n                when \"../conflict-cause = 'overlapping-targets'\";\r\n              }\r\n", "notes": "The original YANG statements make the \"uses\" statement apply to all \"list scope\" instances as soon as there is at least one \"scope\" instance that has \"conflict-cause\" set to \"overlapping-targets\". I suspect this is not the author's intent.\r\n\r\nThe corrected YANG statements make the \"uses\" statement only apply to the specific \"scope\" instances that have \"conflict-cause\" set to \"overlapping-targets\". There are also other ways to fix this issue.", "submit_date": "2022-07-29", "submitter_name": "Jan Lindblad", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-05-06 17:24:23"}, {"errata_id": "4566", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.9", "orig_text": "If the segment empties and carries an PUSH flag,", "correct_text": "If the segment empties and carries a PUSH flag,", "notes": "", "submit_date": "2015-12-16", "submitter_name": "Michael Welzl", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7900", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.", "orig_text": "An XMSS private key SK contains 2^h WOTS+ private keys, the leaf\r\nindex idx of the next WOTS+ private key that has not yet been used,\r\nSK_PRF (an n-byte key to generate pseudorandom values for randomized\r\nmessage hashing), the n-byte value root (which is the root node of\r\nthe tree and SEED), and the n-byte public seed used to pseudorandomly\r\ngenerate bitmasks and hash function keys.", "correct_text": "An XMSS private key SK contains 2^h WOTS+ private keys, the leaf\r\nindex idx of the next WOTS+ private key that has not yet been used,\r\nSK_PRF (an n-byte key to generate pseudorandom values for randomized\r\nmessage hashing), the n-byte value root (which is the root node of\r\nthe tree), and SEED (the n-byte public seed used to pseudorandomly\r\ngenerate bitmasks and hash function keys).", "notes": "SEED appearing in the parenthesis explaining the root value is confusing. It has to be paired with the explanation of it that follows.\r\n\r\nErrata verified by Andreas H\u00fclsing, 2024-04-22", "submit_date": "2024-04-18", "submitter_name": "\u00c7a\u011fda\u015f \u00c7al\u0131k", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2024-04-22 22:01:25"}, {"errata_id": "5885", "doc-id": "RFC304", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "n/a, see note", "correct_text": "n/a, see note", "notes": "Page 8 of the text version of the RFC is out of order compared to the original document. Page 8 begins \"The keyword statements of the language...\" and ends \"...the Rename Convention in the file transfer protocol.\"\r\n\r\nThis text should be inserted on page 3, right after \"Maintenance of the files must be provided with the delete and add function applied to the container referenced data.\" and before \"A second consideration in a catalog\".\r\n\r\nReaders can reference the scan at https://www.rfc-editor.org/rfc/rfc304.pdf for the correct ordering of sections.", "submit_date": "2019-10-28", "submitter_name": "Darius Kazemi", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "3563", "doc-id": "RFC3696", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "Section 3 says:\r\n\r\n   The exact rule is that any ASCII character, including control\r\n   characters, may appear quoted, or in a quoted string.  When quoting\r\n   is needed, the backslash character is used to quote the following\r\n   character.  For example\r\n\r\n      Abc\\@def@example.com\r\n\r\n   is a valid form of an email address.  Blank spaces may also appear,\r\n   as in\r\n\r\n      Fred\\ Bloggs@example.com\r\n\r\n   The backslash character may also be used to quote itself, e.g.,\r\n\r\n      Joe.\\\\Blow@example.com\r\n\r\n", "correct_text": "Section 3 says:\r\n\r\n   The exact rule is that any ASCII character, including control\r\n   characters, may appear quoted, or in a quoted string.  When quoting\r\n   is needed, the backslash character is used to quote the following\r\n   character.  For example\r\n\r\n      Abc\\@def@example.com\r\nor      \r\n      \"Abc@def\"@example.com\r\n\r\n   is a valid form of an email address.  Blank spaces may also appear,\r\n   as in\r\n\r\n      Fred\\ Bloggs@example.com\r\nor      \r\n      \"Fred Bloggs\"@example.com\r\n\r\n   The backslash character may also be used to quote itself, e.g.,\r\n\r\n      Joe.\\\\Blow@example.com\r\nor      \r\n      \" Joe.\\Blow\"@example.com\r\n\r\n", "notes": "Errata 246 is clearly wrong. The author changed the quoting to make it appear backslash quoting was required to use a single backquote. This is totally wrong, and contradicts the RFC text:\r\n\r\n\"may appear quoted, or in a quoted string\".\r\n\r\nI tested today with several mailers sending to the google pseudo-alias of first.last+note@gmail.com, where note can be arbitrary text. By testing numerous versions of quoting I was able to see that my corrected text was what appeared in the destination email.", "submit_date": "2013-03-22", "submitter_name": "David Hoerl", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3573", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "           returned.  The exception to this is when a NAMES\r\n           message is sent with no parameters and all visible\r\n           channels and contents are sent back in a series of\r\n           RPL_NAMEREPLY messages with a RPL_ENDOFNAMES to mark\r\n           the end.", "correct_text": "           returned.  The exception to this is when a NAMES\r\n           message is sent with no parameters and all visible\r\n           channels and contents are sent back in a series of\r\n           RPL_NAMREPLY messages with a RPL_ENDOFNAMES to mark\r\n           the end.", "notes": "RPL_NAMEREPLY should be RPL_NAMREPLY", "submit_date": "2013-03-29", "submitter_name": "Matthew Helsley", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3574", "doc-id": "RFC2387", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "   It is suggested that MUAs that use configuration mechanisms, see\r\n   [CFG] for an example, refer to Multipart/Related as Multi-\r\n   part/Related/<type>, were <type> is the value of the \"type\"\r\n   parameter.", "correct_text": "   It is suggested that MUAs that use configuration mechanisms\r\n   refer to Multipart/Related as Multipart/Related/<type>,\r\n   where <type> is the value of the \"type\" parameter. See [CFG]\r\n   for examples of configuration mechanism usage in MUAs.", "notes": "Changed \"were\" to \"where\". Also reworded the \"CFG\" reference to be easier to read.\r\n\r\n=== Verifier notes ===\r\nMinor typos and insignificant rewording -- goes into \"held for document update\".", "submit_date": "2013-03-29", "submitter_name": "Robert Lee", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3575", "doc-id": "RFC1319", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "      Set L to 0.\r\n\r\n      /* Process each 16-word block. */\r\n      For i = 0 to N/16-1 do\r\n\r\n         /* Checksum block i. */", "correct_text": "      Set L to 0.\r\n\r\n      /* Process each 16-byte block. */\r\n      For i = 0 to N/16-1 do\r\n\r\n         /* Checksum block i. */", "notes": "The comment should note that this section of the algorithm operates on a 16 byte -- rather than 16 word -- block.", "submit_date": "2013-03-29", "submitter_name": "Andrew Clark", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3576", "doc-id": "RFC1319", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "   Do the following:\r\n\r\n      /* Process each 16-word block. */\r\n      For i = 0 to N'/16-1 do", "correct_text": "   Do the following:\r\n\r\n      /* Process each 16-byte block. */\r\n      For i = 0 to N'/16-1 do", "notes": "The comment should note that this section of the algorithm operates on a 16 byte -- rather than 16 word -- block.", "submit_date": "2013-03-29", "submitter_name": "Andrew Clark", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3577", "doc-id": "RFC3315", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.3", "orig_text": "An example DUID of this type might look like this:\r\n\r\n +---+---+---+---+---+---+---+---+\r\n | 0 | 2 | 0 | 0 | 0 |  9| 12|192|\r\n +---+---+---+---+---+---+---+---+\r\n |132|221| 3 | 0 | 9 | 18|\r\n +---+---+---+---+---+---+\r\n\r\nThis example includes the two-octet type of 2, the Enterprise Number\r\n(9), followed by eight octets of identifier data\r\n(0x0CC084D303000912).", "correct_text": "An example DUID of this type might look like this:\r\n\r\n +---+---+---+---+---+---+---+---+\r\n | 0 | 2 | 0 | 0 | 0 |  9| 12|192|\r\n +---+---+---+---+---+---+---+---+\r\n |132|211| 3 | 0 | 9 | 18|\r\n +---+---+---+---+---+---+\r\n\r\nThis example includes the two-octet type of 2, the Enterprise Number\r\n(9), followed by eight octets of identifier data\r\n(0x0CC084D303000912).", "notes": "0xD3 is 211 decimal, not 221.\r\n\r\nI am assuming that this number is the correct one: 0x0CC084D303000912", "submit_date": "2013-03-31", "submitter_name": "Pablo Armando", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3578", "doc-id": "RFC6824", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "  Note that new subflows MUST NOT be established (using\r\n   the process documented in Section 3.2) until a Digital Signature\r\n   Standard (DSS) option has been successfully received across the path\r\n   (as documented in Section 3.3).\r\n", "correct_text": "  Note that new subflows MUST NOT be established (using\r\n   the process documented in Section 3.2) until a Data Sequence\r\n   Signal (DSS) option has been successfully received across the path\r\n   (as documented in Section 3.3).\r\n", "notes": "In this document DSS is indicated as short for both \"Digital Signature Standard\" and \"Data Sequence Signal\". I guess the reference to \"Digital Signature Standard\" was a mistake.", "submit_date": "2013-04-01", "submitter_name": "Kasper Dupont", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3579", "doc-id": "RFC5280", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1.4", "orig_text": "certificatePolicies ::= SEQUENCE SIZE (1..MAX) OF PolicyInformation", "correct_text": "CertificatePolicies ::= SEQUENCE SIZE (1..MAX) OF PolicyInformation", "notes": "ASN.1 type references must begin with an upper case character.  Schema in A.2 is correct.", "submit_date": "2013-04-03", "submitter_name": "Timothy J. Miller", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3592", "doc-id": "RFC6765", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "An object identifier for gBondMIB MODULE-IDENTITY has been allocated\r\nby IANA in the MIB-2 transmission sub-tree (211).\r\n\r\nThis document defines the first version of the IANA-maintained IANA-\r\nGBOND-TC-MIB module.  It is intended that each new G.998 bonding\r\nscheme defined by the ITU-T Q4/SG15 working group and approved for\r\npublication in a revision of ITU-T G.998.x will be added to the IANA-\r\nmaintained MIB module, provided that it is suitable for being managed\r\nby the base objects in the GBOND-MIB module.  An object identifier\r\nfor ianaGBondTcMIB MODULE-IDENTITY has been allocated by IANA in the\r\nMIB-2 transmission sub-tree (215).", "correct_text": "An object identifier for gBondMIB MODULE-IDENTITY has been allocated\r\nby IANA in the MIB-2 sub-tree (211).\r\n\r\nThis document defines the first version of the IANA-maintained IANA-\r\nGBOND-TC-MIB module.  It is intended that each new G.998 bonding\r\nscheme defined by the ITU-T Q4/SG15 working group and approved for\r\npublication in a revision of ITU-T G.998.x will be added to the IANA-\r\nmaintained MIB module, provided that it is suitable for being managed\r\nby the base objects in the GBOND-MIB module.  An object identifier\r\nfor ianaGBondTcMIB MODULE-IDENTITY has been allocated by IANA in the\r\nMIB-2 sub-tree (215).", "notes": "", "submit_date": "2013-04-15", "submitter_name": "Edward Beili", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3593", "doc-id": "RFC5273", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "s3", "orig_text": "\"CMC-Request\"", "correct_text": "\"CMC-request\"", "notes": "The text before Table 1 indicate the SMIME type parameters is \"CMC-Request\" but the table uses \"CMC-request\".  I marked this as editorial because I think implementers can figure this out, but I thought I'd submit it anyway", "submit_date": "2013-04-16", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3594", "doc-id": "RFC6698", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1.1", "orig_text": "      2 -- Certificate usage 2 is used to specify a certificate, or the\r\n      public key of such a certificate, that MUST be used as the trust\r\n      anchor when validating the end entity certificate given by the\r\n      server in TLS.  This certificate usage is sometimes referred to as\r\n      \"trust anchor assertion\" and allows a domain name administrator to\r\n      specify a new trust anchor -- for example, if the domain issues\r\n      its own certificates under its own CA that is not expected to be\r\n      in the end users' collection of trust anchors.  The target\r\n      certificate MUST pass PKIX certification path validation, with any\r\n      certificate matching the TLSA record considered to be a trust\r\n      anchor for this certification path validation.", "correct_text": "      2 -- Certificate usage 2 is used to specify a certificate, or the\r\n      public key of such a certificate, that MUST be used as the trust\r\n      anchor when validating the end entity certificate given by the\r\n      server in TLS.  This certificate usage is sometimes referred to as\r\n      \"trust anchor assertion\" and allows a domain name administrator to\r\n      specify a new trust anchor -- for example, if the domain issues\r\n      its own certificates under its own CA that is not expected to be\r\n      in the end users' collection of trust anchors.  The target\r\n      certificate MUST pass PKIX certification path validation, with any\r\n      certificate matching the TLSA record considered to be a trust\r\n      anchor for this certification path validation.  Since clients cannot\r\n      be presumed to have their own copy of the trust-anchor certificate,\r\n      when the TLSA association specifies a certificate digest, the TLS\r\n      server MUST be configured to provide the trust-anchor certificate in\r\n      its \"certificate_list\" TLS handshake message.\r\n", "notes": "As per discussion on the DANE WG list, this was overtaken by events and so is rejected.\r\n\r\n\r\nThis is critical for interoperability between clients and servers.  A client that commits to verify TLSA RR certificate associations will fail if it can't obtain the required certificates.  With usage \"2\" there is no presumption that these are available to the client.  If servers are not obligated to provide them the protocol will consistently fail.  With non-interactive protocols where there is no user to \"click OK\", such as SMTP, there is no good work-around and both client and server owners suffer.\n --VERIFIER NOTES-- \n   As per discussion on the DANE WG list, this was overtaken by events and so is rejected.", "submit_date": "2013-04-16", "submitter_name": "Viktor Dukhovni", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3608", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.2.", "orig_text": "/*\r\n         * Read command line options and initialize system variables.\r\n         * The reference implementation measures the precision specific\r\n         * to each machine by measuring the clock increments to read the\r\n         * system clock.\r\n         */\r\n        memset(&s, sizeof(s), 0);\r\n\r\n.....\r\n/*\r\n         * Initialize local clock variables\r\n         */\r\n        memset(&c, sizeof(c), 0);", "correct_text": "/*\r\n         * Read command line options and initialize system variables.\r\n         * The reference implementation measures the precision specific\r\n         * to each machine by measuring the clock increments to read the\r\n         * system clock.\r\n         */\r\n        memset(&s, 0. sizeof(s));\r\n...\r\n\r\n/*\r\n         * Initialize local clock variables\r\n         */\r\n        memset(&c, 0, sizeof(c));", "notes": "Paramters 2 and 3 of the memset functions are inverted everywhere in the example code, not just in section A2", "submit_date": "2013-04-29", "submitter_name": "Cristian Rodr\u00edguez", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3610", "doc-id": "RFC5575", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   If a given component type within a prefix in unknown, the prefix in\r\n   question cannot be used for traffic filtering purposes by the\r\n   receiver.  Since a flow specification has the semantics of a logical\r\n   AND of all components, if a component is FALSE, by definition it\r\n   cannot be applied.  However, for the purposes of BGP route\r\n   propagation, this prefix should still be transmitted since BGP route\r\n   distribution is independent on NLRI semantics.", "correct_text": "   If a given component type within a prefix is unknown, the prefix in\r\n   question cannot be used for traffic filtering purposes by the\r\n   receiver.  Since a flow specification has the semantics of a logical\r\n   AND of all components, if a component is FALSE, by definition it\r\n   cannot be applied.  However, for the purposes of BGP route\r\n   propagation, this prefix should still be transmitted since BGP route\r\n   distribution is independent of NLRI semantics.", "notes": "Two minor typos:\r\n- If a given component type within a prefix _in_ unknown\r\n- independent _on_", "submit_date": "2013-04-30", "submitter_name": "Sergey Antipov", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3612", "doc-id": "RFC3414", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5.2", "orig_text": "   maxMessageSize\r\n      The maximum message size as included in the message.  The User-bas\r\n      User-based Security module uses this value to calculate the\r\n      maxSizeResponseScopedPDU.\r\n", "correct_text": "   maxMessageSize\r\n      The maximum message size as included in the message.  The\r\n      User-based Security module uses this value to calculate the\r\n      maxSizeResponseScopedPDU.\r\n", "notes": "The words \"User-based\" were moved to the second line but not fully removed from the first.", "submit_date": "2013-05-03", "submitter_name": "Yitzchak M. Gottlieb", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4596", "doc-id": "RFC6902", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Its value MUST be one of \"add\", \"remove\", \"replace\", \r\n\"move\", \"copy\", or \"test\"; other values are errors. ", "correct_text": "Its value MUST be one of \"add\", \"append\", \"remove\", \r\n\"replace\", \"move\", \"copy\", or \"test\"; other values are errors. \r\n\r\n... and more text to add the 'append' op description.", "notes": "There is a key missing piece to this RFC.  You can do { \"op\": \"add\", \"path\": \"/attr\", \"value\": \"val\"}, which will add or modify the 'attr' attribute, if it exists or not.  However, you cannot add an item to a potentially non-existing array.  Updating an array that may or may not exists, forces the client to always call GET on the resource.   See this API spec:  https://orchestrate.io/docs/apiref#keyvalue-patch  which implements the op 'append', which would solve this problem.\n --VERIFIER NOTES-- \nThis is an enhancement suggestion, not an errata report; the errata system is not for that.", "submit_date": "2016-01-21", "submitter_name": "Missing 'Append' operation", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3595", "doc-id": "RFC5185", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   A link-LSA SHOULD NOT be advertised for a multi-area adjacency.  The\r\n   neighbor's IPv6 link local address can be learned in other ways,\r\n   e.g., it can be extracted from the IPv6 header of Hello packets\r\n   received over the multi-area adjacency.  The neighbor IPv6 link local\r\n   address is required for the OSPFv3 route next-hop calculation on\r\n   multi-access networks (refer to Section 3.8.1.1 of [OSPFV3]).\r\n", "correct_text": "OSPFv3 supports two Address Families (AF), AF IPv6 and AF IPv4, using\r\nseparate instances [RFC 5338]. The route calculation differs for the\r\nIPv4 and IPv6 address families with respect to the next-hop\r\ndetermination. OSPFv3 instances supporting an IPv6 AF SHOULD learn the\r\nIPv6 next-hop address from the IPv6 Header source address and SHOULD\r\nNOT advertise a Link-LSA for a multi-area adjacency. However, for\r\nOSPFv3 instances supporting an IPv4 AF, the next-hop address cannot be\r\nlearned from the OSPFv3 hellos and require advertisement of the\r\nLink-LSA. Hence, OSPFv3 instances supporting an IPv4 AF SHOULD\r\nadvertise a Link-LSA for the a multi-area adjacency (refer to section\r\n2.5 of [RFC 5838]). If the Link-LSA is not advertised, the OSPFv3\r\ninstance MAY learn the IPv4 next-hop address from the Link-LSA\r\nadvertised on the primary adjacency.", "notes": "RFC5185 describes next-hop calculation which is not applicable to OSPFv3 process supporting AF IPv4 as defined in RFC5838. Errata defines how RFC5838 OSPFv3 process supporting AF IPv4 calculates next-hop address on multi-area interface.\n --VERIFIER NOTES-- \n   This is a technical change and is thus cannot be addressed through the errata process. The correct process for addressing this concern is by writing a draft that updates RFC5158 and testing whether there is OSPF WG and IETF consensus for publication of the proposed update.", "submit_date": "2013-04-17", "submitter_name": "Marek Karasek", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3596", "doc-id": "RFC4480", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "[There are 8 occurrences of the following element in the schema in section 5.1]   \r\n\r\n      <xs:attributeGroup ref=\"fromUntil\"/>\r\n", "correct_text": "[Each occurrence should be replaced with the following]\r\n\r\n     <xs:attributeGroup ref=\"dm:fromUntil\"/>\r\n", "notes": "fromUntil is imported from the presence data model namespace \"urn:ietf:params:xml:ns:pidf:data-model\". This schema imports that namespace with a prefix of \"dm\". (see beginning of section 5.1)  The prefix was left off of the \"fromUntil\" entries.", "submit_date": "2013-04-17", "submitter_name": "Ben Campbell", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3597", "doc-id": "RFC6931", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "References", "orig_text": "[XMLDSIG11]   Eastlake, D., Reagle, J., Solo, D., Hirsch, F.,\r\n              Nystrom, M., Roessler, T., and K. Yiu, \"XML Signature\r\n              Syntax and Processing Version 1.1\", W3C Proposed\r\n              Recommendation, 24 January 2013,\r\n              <http://www.w3.org/TR/2013/PR-xmldsig-core1-20130124/>.\r\n\r\n", "correct_text": "[XMLDSIG11]   Eastlake, D., Reagle, J., Solo, D., Hirsch, F.,\r\n              Nystrom, M., Roessler, T., and K. Yiu, \"XML Signature\r\n              Syntax and Processing Version 1.1\", W3C Recommendation,\r\n              11 April 2013, <http://www.w3.org/TR/xmldsig-core1/>.\r\n", "notes": "A normative reference should point to the final and not to the pre version even if there are differences.", "submit_date": "2013-04-18", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3598", "doc-id": "RFC6407", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.5.1", "orig_text": "DST ID Prot (1 octet) -- Value describing an IP protocol ID (e.g.,\r\n      UDP/TCP) [PROT-REG].  A value of zero means that the DST ID Prot\r\n      field MUST be ignored.", "correct_text": "To be removed, this field does not exist", "notes": "M. Brian Weiss confirmed to me that \"The description of \"DST ID Prot (1 octet) on Page 32 is incorrect, no such field is meant to be in Figure 8. This is definitely errata. The bullet describing \"DST ID Prot (1 octet)\" should be removed\"", "submit_date": "2013-04-20", "submitter_name": "Claude Briere de L'Isle", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3599", "doc-id": "RFC6407", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.5.1", "orig_text": "o  DST ID Port (2 octets) -- Value specifying a port associated with\r\n      the source ID.  A value of zero means that the DST ID Port field\r\n      MUST be ignored.", "correct_text": "o  DST ID Port (2 octets) -- Value specifying a port associated with\r\n      the destination ID.  A value of zero means that the DST ID Port field\r\n      MUST be ignored.", "notes": "Brian Weiss wrote  \"You are correct, this should be \"destination ID\"\".", "submit_date": "2013-04-20", "submitter_name": "Claude Briere de L'Isle", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3600", "doc-id": "RFC6407", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.4", "orig_text": "The concepts \"forward access\r\ncontrol\" and \"backward access control\" have also been described as\r\n\"perfect forward security\" and \"perfect backward security\",\r\nrespectively, in the literature [RFC2627].", "correct_text": "The concepts \"forward access \r\ncontrol\" and \"backward access control\" have also been described as \r\n\"perfect forward security\" and \"perfect backward security\",\r\nrespectively, in the literature\r\n(<http://tools.ietf.org/id/draft-balenson-groupkeymgmt-oft-00.txt>).", "notes": "There is no occurrence of these terms in RFC 2627. Brian Weiss wrote : \"You are correct. I see that this wording was carried from early versions of an Internet-draft that became RFC 3547, the predecessor of RFC6407. A more accurate reference for these terms would be <http://tools.ietf.org/id/draft-balenson-groupkeymgmt-oft-00.txt>", "submit_date": "2013-04-20", "submitter_name": "Claude Briere de L'Isle", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3601", "doc-id": "RFC6367", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "CipherSuite TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256        = {0xC0,0x8D};", "correct_text": "CipherSuite TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256        = {0xC0,0x8E};", "notes": "", "submit_date": "2013-04-20", "submitter_name": "Clement Zeller", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3602", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4", "orig_text": "5. SYN-RECEIVED --> <SEQ=100><ACK=301><CTL=SYN,ACK> ...\r\n\r\n6. ESTABLISHED  <-- <SEQ=300><ACK=101><CTL=SYN,ACK> <-- SYN-RECEIVED\r\n\r\n7.              ... <SEQ=101><ACK=301><CTL=ACK>     --> ESTABLISHED\r\n\r\n              Simultaneous Connection Synchronization\r\n\r\n                             Figure 8.", "correct_text": "5. SYN-RECEIVED --> <SEQ=100><ACK=301><CTL=SYN,ACK> ...\r\n\r\n6. ESTABLISHED  <-- <SEQ=300><ACK=101><CTL=SYN,ACK> <-- SYN-RECEIVED\r\n\r\n7.              ... <SEQ=100><ACK=301><CTL=SYN,ACK> --> ESTABLISHED\r\n\r\n              Simultaneous Connection Synchronization\r\n\r\n                             Figure 8.", "notes": "\n --VERIFIER NOTES-- \nSee errata 573. Already done, thanks.", "submit_date": "2013-04-21", "submitter_name": "Dahai Jiang", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4597", "doc-id": "RFC3611", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.7.2", "orig_text": "burst density 84, which corresponds to 33%", "correct_text": "burst density 85, which corresponds to 33%", "notes": "error calculation for burst density, burst density=4/12*256=85.33...?85", "submit_date": "2016-01-22", "submitter_name": "Liu Yuanlong", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3613", "doc-id": "RFC5905", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8", "orig_text": "", "correct_text": "", "notes": "In the paragraph explaining the sanity checks on received packets, it states: \"In the exchange above, a packet is duplicate or replay if the transmit timestamp t3 in the packet matches the org state variable T3.\"  But in the pseudo-code in A.5.1 it states\r\n        /*\r\n         * If the transmit timestamp duplicates a previous one, the\r\n         * packet is a replay.\r\n         */\r\n        if (r->xmt == p->xmt)\r\ni.e. comparing the transmit timestamp p->xmt with the xmt state variable T1.  Which is correct?\r\n\r\nSimilarly for the check for a bogus packet, Section 8 states: \"A packet is bogus if the origin timestamp t1 in the packet does not match the xmt state variable T1.  But the pseudo-code says:\r\n        /*\r\n         * If this is a broadcast mode packet, skip further checking.\r\n         * If the origin timestamp is zero, the sender has not yet heard\r\n         * from us.  Otherwise, if the origin timestamp does not match\r\n         * the transmit timestamp, the packet is bogus.\r\n         */\r\n        synch = TRUE;\r\n        if (r->mode != M_BCST) {\r\n                if (r->org == 0)\r\n                        synch = FALSE;  /* unsynchronized */\r\n\r\n                else if (r->org != p->xmt)\r\n                        synch = FALSE;  /* bogus packet */\r\n        }\r\ni.e. it is comparing the transmit timestamp t3 in the packet with the org state variable T3.\r\n\r\nWhich is correct?  Looking at Figure 15 my guess would be Section 8 is correct but I have seen code that more closely follows the pseudo-code.\n --VERIFIER NOTES-- \nThe Introduction of the document clearly states that the pseudo-code in the appendix is non-normative.  Therefore the text in the main body of the specification describes the conformant behavior:\r\n\r\n\"The contents of Appendix A are non-normative examples designed to illustrate the protocol's operation and are not a requirement for a conforming implementation.\"", "submit_date": "2013-05-06", "submitter_name": "Tony O'Brien", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3614", "doc-id": "RFC4028", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13", "orig_text": "   Record-Route: sips:p1.atlanta.example.com;lr\r\n   Route: sips:p1.atlanta.example.com;lr", "correct_text": "   Record-Route: <sips:p1.atlanta.example.com;lr>\r\n   Route: <sips:p1.atlanta.example.com;lr>", "notes": "In the examples, all the Record-Route and Route headers are wrong.\r\n\r\nThey are:\r\n   Record-Route: sips:p1.atlanta.example.com;lr\r\n   Route: sips:p1.atlanta.example.com;lr\r\n\r\nBut according with the section \"25.1 Basic Rules\" of RFC3261 those headers are defined as:\r\n\r\nname-addr      =  [ display-name ] LAQUOT addr-spec RAQUOT\r\nRecord-Route  =  \"Record-Route\" HCOLON rec-route *(COMMA rec-route)\r\nrec-route     =  name-addr *( SEMI rr-param )\r\nrr-param      =  generic-param\r\nRoute        =  \"Route\" HCOLON route-param *(COMMA route-param)\r\nroute-param  =  name-addr *( SEMI rr-param )\r\n\r\nSo the headers should be:\r\n   Record-Route: <sips:p1.atlanta.example.com;lr>\r\n   Route: <sips:p1.atlanta.example.com;lr>", "submit_date": "2013-05-06", "submitter_name": "Jos\u00e9 Mar\u00eda Gonz\u00e1lez Calabozo", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3615", "doc-id": "RFC6311", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "                        Note that this solution requires that either all Child SAs\r\n   use Extended Sequence Numbers (ESNs) or else that no Child SA uses\r\n   ESNs.", "correct_text": "                        Note that this solution requires that either all Child SAs\r\n   use Extended Sequence Numbers (ESN) or else that no Child SA uses\r\n   ESN.", "notes": "\"ESN\" is used here as a name of a feature. There is no need to pluralize it. This is different from \"SAs\" or \"SPIs\", where there are many of each.", "submit_date": "2013-05-08", "submitter_name": "Yoav Nir", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3616", "doc-id": "RFC6930", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "    0-1     0       0      0         0-1      2    User-Password", "correct_text": "     0-1     0       0      0         0      2    User-Password\r\n", "notes": "RFC 2866 does not allow User-Password to be in Accounting-Request messages.", "submit_date": "2013-05-08", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3623", "doc-id": "RFC5912", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "14", "orig_text": "   -- CRL number extension OID and syntax\r\n   ext-CRLNumber EXTENSION ::= {SYNTAX\r\n       INTEGER (0..MAX) IDENTIFIED BY id-ce-cRLNumber }\r\n   id-ce-cRLNumber OBJECT IDENTIFIER ::= { id-ce 20 }\r\n\r\n   CRLNumber ::= INTEGER (0..MAX)", "correct_text": "   -- CRL number extension OID and syntax\r\n   CRLNumber ::= INTEGER \r\n\r\n   ext-CRLNumber EXTENSION ::= {SYNTAX\r\n       CRLNumber IDENTIFIED BY id-ce-cRLNumber }\r\n   id-ce-cRLNumber OBJECT IDENTIFIER ::= { id-ce 20 }\r\n", "notes": "The CRLNumber extension was not defined to use the CRLNumber type.  The CRLNumber type uses MAX to limit the maximum value.  This limitation is inconsistent with section 5.2.3 and Appendix B, which allow CRLNumber values up to 20 octets in length.\n --VERIFIER NOTES-- \nThis errata is rejected at the request of the person who reported it (i.e., Carl).  Another errata was submitted to correct a mistake.   ", "submit_date": "2013-05-16", "submitter_name": "Carl Wallace", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3624", "doc-id": "RFC5908", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "[...]\r\nThe currently defined time source suboptions are\r\nNTP_OPTION_SRV_ADDR, NTP_OPTION_SRV_MC_ADDR, and NTP_OPTION_SRV_FQDN.\r\n[...]", "correct_text": "[...]\r\nThe currently defined time source suboptions are\r\nNTP_SUBOPTION_SRV_ADDR, NTP_SUBOPTION_MC_ADDR, and NTP_SUBOPTION_SRV_FQDN.\r\n[...]", "notes": "It does not appear clearly if the type of error must be technical or editorial.\r\n\r\nThe three suboptions are defined in the sections 4.1, 4.2 and 4.3. Their names are differents of those used in second paragraph of the section 4.\r\n\r\nIana standardized the 4.1, 4.2 and 4.3 names. see:\r\nhttp://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-parameters.xml\r\n[...]\r\nValue\tName\t\t\tReference\r\n1\tNTP_SUBOPTION_SRV_ADDR\t[RFC5908]\r\n2\tNTP_SUBOPTION_MC_ADDR\t[RFC5908]\r\n3\tNTP_SUBOPTION_SRV_FQDN\t[RFC5908]\r\n[...]", "submit_date": "2013-05-16", "submitter_name": "Francois-Xavier Le Bail", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4468", "doc-id": "RFC5537", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.5", "orig_text": "   An injecting agent processes proto-articles as follows:\r\n\r\n[...]\r\n\r\n   2.   It MUST reject any proto-article that does not have the proper\r\n        mandatory header fields for a proto-article, that has Injection-\r\n        Info or Xref header fields, that has a Path header field\r\n        containing the \"POSTED\" <diag-keyword>, or that is not\r\n        syntactically valid as defined by [RFC5536].", "correct_text": "   An injecting agent processes proto-articles as follows:\r\n\r\n[...]\r\n\r\n   2.   It MAY modify header fields so that the proto-article conforms\r\n        to [RFC5536].  If made, such modifications SHOULD be as\r\n        minimal as possible.  The usual changes are the removal of\r\n        empty header fields and a bit of cleaning in folding or the\r\n        syntax used.\r\n\r\n   3.   It MUST reject any proto-article that does not have the proper\r\n        mandatory header fields for a proto-article, that has Injection-\r\n        Info or Xref header fields, that has a Path header field\r\n        containing the \"POSTED\" <diag-keyword>, or that is not\r\n        syntactically valid as defined by [RFC5536].", "notes": "Subsequent items should be renumbered at the same time.\r\n\r\nRationale:  most of server software has been removing empty header fields and made syntax cleaning for ages.  Some news clients do rely on that \"feature\" of removing empty header fields, i.e by putting empty Followup-To, Summary and Keywords header fields into each article opened in the editor and not removing them if empty when posting the article.\r\n\r\nThough RFC 1849 (Son-of-1036) says the posting agent SHOULD delete empty headers, in practice the relayer (injecting agent) took care of that when not done by the posting agent.\r\n\r\nThis erratum describes a variation from the standard and could be taken into account in a revision of RFC 5537, if it happens.", "submit_date": "2015-09-08", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3617", "doc-id": "RFC6656", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "Len = Length of the suboption (min. length of 8) (1 octet)", "correct_text": "Len = Length of the suboption (min. length of 1) (1 octet)", "notes": "RFC 6656 suggests that a DHCP Client MAY request list of previously allocated subnets from the DHCP Server in case of recovering from a restart if the Client does not have local storage in order to retain the information itself. But there will be cases when Server does not have any information to send back (this could be a new Client or this Client never spoke to this Server before). In this case, DHCP Server may decide to remain silent and discard the request. This approach will make it difficult for DHCP Client to decide if request could not reach to Server or Server did not have any information to send back. A possible approach could be to send the OFFER back to Client with Subnet-Information Suboption (without Subnet Prefix Information Block) in it. So that Client can proceed by making a request to allocate new subnets. This would require to reduce the minimum length of Subnet-Information Suboption to 1 (just include flags). Section 6 would require to be updated as well to reflect the new behavior (to respond).", "submit_date": "2013-05-08", "submitter_name": "Dushyant Raghuvanshi", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3619", "doc-id": "RFC5245", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Section 4, 5", "orig_text": "Missed candidate pair in ICE standard", "correct_text": "Scenario: X is caller, Z is callee. X is behind a non-full-cone \r\n(such as symmetric) NAT, Z is behind a full-cone NAT. \r\n\r\nICE standard: Section 2.1 of RFC5245 describes the addresses that \r\nare collected as candidate addresses: (local address, server-reflexive \r\naddress, TURN relay address).  For X: (X:x, X1:x1, Yx:yx), and for Z: \r\n(Z:z, Z1:z1, Yz:yz). \r\n\r\nMissed candidate pair in ICE standard: \r\n1. X:x sends a connection check message to the Z1:z1 (as part of the \r\nprocess in Section 2.2 of the standard) \r\n2. Since X is behind a non-full cone NAT such a symmetric one, NAT of \r\nX maps X:x to X2:x2, sends the message to Z1:z1\r\n3. Z is behind a full-cone NAT, so packets received at Z1:z1 address \r\nis forwarded to Z:z by the NAT\r\n\r\nSince X is behind a non-full cone NAT such a symmetric one and Z is \r\nbehind a full-cone NAT, connection from X:x to Z1:z1 would be via a \r\nserver-reflexive address X2:x2 of X, which is not a candidate address \r\nfor X as specified by ICE. X2:x2 should be a candidate address of X, \r\nwhich however can only be determine when X sends a message to Z. The \r\npair (X2:x2, Z1:z1) provides a direct connection option between X and Y.\r\n\r\nConditions on which X2:x2 is a valid candidate address:\r\n1. One of the peers (Z) is behind a full-cone NAT, else step 3 above \r\ndoes not succeed.\r\n2. X2:x2 is unique, i.e., different from X1:x1 (already covered by \r\nSection 2.1) if and only if one of the peers is  behind a non-full-cone \r\nNAT.\r\n\r\nSo I think there should be two stages in the candidate collection process:\r\nA: Section 2.1 -- candidate addresses independent of the other clients\r\nB: collection of the candidate pairs with respect to the peer, such as \r\nX2:x2 and Z2:z2, if any. \r\n\r\nB consists of the following steps including 1, 2, and 3:\r\n4. Z:z determines if X2:x2 from which it received the message is a \r\ndifferent address than in the candidate set of X.\r\n5. If 4 is true, then send an OK message to X2:x2 that it received the\r\nmessage with X2:x2 XOR-encoded.\r\n6. X:x receives the OK message in 4, then X:x determines X2:x2 as its \r\nnew candidate address.\r\n\r\nIf X:x decides to establish the connection via X2:x2, it sends ACK \r\nmessage to Z2:z2.", "notes": "This feedback for improvement of ICE candidate gathering and decision process was   sent to Dr. Rosenberg on Nov 09, 2012. However, since I have not received any response from him over my next two followups and this e-mail, I thought it should be reported via this method. \r\n\r\nThis is not an error mesage, but a method to improve the candidate gathering and decision process of ICE.\n --VERIFIER NOTES-- \n   ", "submit_date": "2013-05-13", "submitter_name": "Ashish Kundu", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3620", "doc-id": "RFC6236", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.4", "orig_text": "send [x=400:16:800],y=[320:16:640],sar=[1.0-1.3],par=[1.2-1.3]] ", "correct_text": "send [x=[400:16:800],y=[320:16:640],sar=[1.0-1.3],par=[1.2-1.3]] ", "notes": "Mismatching [] in original text.", "submit_date": "2013-05-14", "submitter_name": "Liangxing Wang", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3621", "doc-id": "RFC6887", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15.1", "orig_text": "   In requests where the requested Lifetime is 0, the Suggested External\r\n   Address and Suggested External Port fields MUST be set to zero on\r\n   transmission and MUST be ignored on reception, and these fields MUST\r\n   be copied into the assigned external IP address and assigned external\r\n   port of the response.", "correct_text": "   In requests where the requested Lifetime is 0, the Suggested External\r\n   Port field MUST be set to zero on transmission and MUST be ignored on\r\n   reception. The Suggested External Address field must be set to the\r\n   appropriate all-zeros address, depending on whether the request is\r\n   deleting a mapping for an External IPv4 address or an External IPv6\r\n   address. Both the Suggested External Address and Suggested External\r\n   Port fields are copied into the assigned external IP address and\r\n   assigned external port of the response.", "notes": "Since a given internal address+port can have *two* mappings -- an IPv4 one and an IPv6 one -- the deletion request needs to signify which one is being deleted.", "submit_date": "2013-05-14", "submitter_name": "Stuart Cheshire", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3622", "doc-id": "RFC6930", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "Message-Authenticator (type 80) [RFC2865] SHOULD be used to protect \r\nboth Access-Request and Access-Accept messages.\r\n", "correct_text": "Message-Authenticator (type 80) [RFC2869] SHOULD be used to protect \r\nboth Access-Request and Access-Accept messages.\r\n", "notes": "The reference of Message-Authenticator was wrong", "submit_date": "2013-05-16", "submitter_name": "Sheng Jiang", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3641", "doc-id": "RFC4122", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Advice on generating cryptographic-quality random numbers can be\r\n   found in RFC1750 [5].", "correct_text": "Advice on generating cryptographic-quality random numbers can be\r\n   found in RFC4086 [5].", "notes": "(Above sample is from section 4.5).\r\nReferences to RFC 1750 should currently refer to RFC 4086.\r\n(Likewise in Appendix A.)\r\nThe note [5] actually references RFC4086, but this is the only\r\npoint that is updated, ie, the document is inconsistent in its references.\r\nThe references in Appendix A are not cross-referenced to note [5].\r\n\r\n------------------------ Verifier notes ------------------------\r\nThis is correct: reference [5] was updated to point to 4086, but the text in the\r\ndocument body was not changed accordingly.", "submit_date": "2013-06-06", "submitter_name": "Douglas Ray", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4965", "doc-id": "RFC3091", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "1.     TCP Based Digit Generator Service\r\n\r\n   One REQUIRED PIgen service is defined as a stateless TCP service.  A\r\n   server listens on TCP port 314159.\r\n\r\n...\r\n\r\n1.1.   Approximate Service\r\n\r\n   An OPTIONAL PIgen service is defined as a stateless TCP service.  A\r\n   server listens on TCP port 220007.\r\n\r\n...\r\n\r\n2.     UDP Based Digit Generator Service\r\n\r\n   An OPTIONAL PIgen service is defined as a stateless UDP service.  A\r\n   server listens on UDP port 314159.\r\n\r\n...\r\n\r\n2.2.   Approximate Service\r\n\r\n   An OPTIONAL PIgen service is defined as a stateless UDP service.  A\r\n   server listens on UDP port 220007.", "correct_text": "1.     TCP Based Digit Generator Service\r\n\r\n   One REQUIRED PIgen service is defined as a stateless TCP service.  A\r\n   server listens on TCP port 31415.\r\n\r\n...\r\n\r\n1.1.   Approximate Service\r\n\r\n   An OPTIONAL PIgen service is defined as a stateless TCP service.  A\r\n   server listens on TCP port 22007.\r\n\r\n...\r\n\r\n2.     UDP Based Digit Generator Service\r\n\r\n   An OPTIONAL PIgen service is defined as a stateless UDP service.  A\r\n   server listens on UDP port 31415.\r\n\r\n...\r\n\r\n2.2.   Approximate Service\r\n\r\n   An OPTIONAL PIgen service is defined as a stateless UDP service.  A\r\n   server listens on UDP port 22007.", "notes": "Ports as specified in the original text exceed 16-bit integer space, violating TCP (RFC793 3.1) and UDP (RFC768, \"Format\"). As it stands, this error prevents development of fully-compliant implementations of this protocol.\r\nNote that in this correction I have elected not to round the TCP and UDP ports in sec. 1 and 2 to 31416 - this is to better-preserve the immediate recognizability of the port as the PIgen service.\r\nAlso note that the IP multicast group address specified in sec. 3 exceeds the 32-bit address space specified in RFC 791 sec. 2.3. I have abstained from proposing a correction to this, as I could not think of an IANA-compliant address that still incorporates digits of pi.", "submit_date": "2017-03-12", "submitter_name": "Jesse Friedman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3625", "doc-id": "RFC3862", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "ABNF defs", "orig_text": "From-header = \"From\" \": \" [ Formal-name ] \"<\" URI \">\"\r\n                        ; \"From\" is case-sensitive", "correct_text": "From-header = %d46 %d72 %d6f %d6g \": \" [ Formal-name ] \"<\" URI \">\"\r\n                        ; \"From\" is case-sensitive", "notes": "All the ABNF from headers are not correct, from ABNF RFC:\r\n\r\nLiteral text is specified through the use of a string enclosed in quotation marks (\"). These strings are case-insensitive and the character set used is (US-)ASCII. Therefore the string \u201cabc\u201d will match \u201cabc\u201d, \u201cAbc\u201d, \u201caBc\u201d, \u201cabC\u201d, \u201cABc\u201d, \u201cAbC\u201d, \u201caBC\u201d, and \u201cABC\u201d. For a case-sensitive match the explicit characters must be defined: to match \u201caBc\u201d the definition will be %d97 %d66 %d99.\r\n\r\n----------------------- Verifier notes -----------------------\r\nThis issue isn't limited to the From header, but applies throughout.  However...\r\n\r\nCustoms for specifying ABNF have become more strict since RFC 3862 was written.\r\nAt the time of its writing, it was considered acceptable to use the mechanism here:\r\nspecify the string (which would normally be case-insensitive, according to RFC 2234)\r\nand add a comment to note the case-sensitivity.  In fact, it was specifically considered\r\nmore clear to do that than to specify sequences of hex characters.  In addition to the\r\ncomments in the ABNF, this variance is noted in Sections 3 and 3.6:\r\n\r\n<<\r\n   NOTE: Specified text values MUST be used as given, using exactly the\r\n   indicated upper- and lower-case letters.  In this respect, the ABNF\r\n   usage here differs from RFC 2234 [6].\r\n>>\r\n\r\nGiven that, this is clearly not an *error* in RFC 3862, though a different  decision\r\nmight be made today, or whenever this document might be revised.\r\n\r\nI am therefore marking this report as \"held for document update\".", "submit_date": "2013-05-17", "submitter_name": "Sergio Garcia", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3626", "doc-id": "RFC5912", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14", "orig_text": "   -- CRL number extension OID and syntax\r\n   ext-CRLNumber EXTENSION ::= {SYNTAX\r\n       INTEGER (0..MAX) IDENTIFIED BY id-ce-cRLNumber }\r\n   id-ce-cRLNumber OBJECT IDENTIFIER ::= { id-ce 20 }\r\n\r\n   CRLNumber ::= INTEGER (0..MAX)", "correct_text": "   -- CRL number extension OID and syntax\r\n   CRLNumber ::= INTEGER  (0..MAX)\r\n\r\n   ext-CRLNumber EXTENSION ::= {SYNTAX\r\n       CRLNumber IDENTIFIED BY id-ce-cRLNumber }\r\n   id-ce-cRLNumber OBJECT IDENTIFIER ::= { id-ce 20 }", "notes": "The CRLNumber extension was not defined to use the CRLNumber type.  It should use the CRLNumber type.  This is a corrected resubmission of an earlier errata submission that included an error.", "submit_date": "2013-05-17", "submitter_name": "Carl Wallace", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3627", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.5", "orig_text": "In NTPv4, one or more extension fields can be inserted after the \r\nheader and before the MAC, which is always present when an extension \r\nfield is present.", "correct_text": "In NTPv4, one or more extension fields can be inserted after the \r\nheader and before the MAC, if a MAC is present. If a MAC is not \r\npresent, one or more extension fields can be inserted after the \r\nheader, according to the following rules:\r\no If the packet includes a single extension field, the length of the \r\n  extension  field MUST be at least 7 words, i.e., at least 28 octets.\r\no If the packet includes more than one extension field, the length of \r\n  the last extension field MUST be at least 28 octets. The length of \r\n  the other extension fields in this case MUST be at least 16 octets \r\n  each.\r\n", "notes": "The usage of NTP extension fields without authentication is aligned with Section 10 of RFC 5906:\r\n\r\nThe extension field parser initializes a pointer to the first octet beyond the NTP packet header and calculates the number of octets remaining to the end of the packet If the remaining length is 20 (128-bit digest plus 4-octet key ID) or 22 (160-bit digest plus 4-octet key ID), the remaining data are the MAC and parsing is complete.  If the remaining length is greater than 22, an extension field is present.  If the remaining length is less than 8 or not a multiple of 4, a format error has occurred and the packet is discarded; otherwise, the parser increments the pointer by the extension field length and then uses the same rules as above to determine whether a MAC is present or another extension field.", "submit_date": "2013-05-17", "submitter_name": "Tal Mizrahi", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3628", "doc-id": "RFC6878", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "This policy was chosen over lighter-weight policies due the potential\r\narchitectural impact of the semantics associated with new values.", "correct_text": "This policy was chosen over lighter-weight policies due to the potential \r\narchitectural impact of the semantics associated with new values.", "notes": "", "submit_date": "2013-05-17", "submitter_name": "Lawrence Jovellanos", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3629", "doc-id": "RFC6428", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.3", "orig_text": "The length is the length of the\r\nfollowing data: the Global_ID, Node Identifier, and Attachment\r\nCircuit ID (AC_ID) are as per [9].\r\n", "correct_text": "The length is the length in octets of the \r\ndata following the length field.  The Global_ID, Node Identifier, \r\nand Attachment Circuit ID (AC_ID) are as per [9].\r\n", "notes": "Original text gave the impression that the length related to only three fields, but it actually applies to all data following the Length field. It should also be noted that the length is counted in octets.", "submit_date": "2013-05-20", "submitter_name": "Alan Davey", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4469", "doc-id": "RFC2136", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.2.2", "orig_text": "   3.4.2.2. Any Update RR whose CLASS is the same as ZCLASS is added to\r\n   the zone.  In case of duplicate RDATAs (which for SOA RRs is always\r\n   the case, and for WKS RRs is the case if the ADDRESS and PROTOCOL\r\n   fields both match), the Zone RR is replaced by Update RR.  If the\r\n   TYPE is SOA and there is no Zone SOA RR, or the new SOA.SERIAL is\r\n   lower (according to [RFC1982]) than or equal to the current Zone SOA\r\n   RR's SOA.SERIAL, the Update RR is ignored.  In the case of a CNAME\r\n   Update RR and a non-CNAME Zone RRset or vice versa, ignore the CNAME\r\n   Update RR, otherwise replace the CNAME Zone RR with the CNAME Update\r\n   RR.\r\n", "correct_text": "   3.4.2.2. Any Update RR whose CLASS is the same as ZCLASS is added to\r\n   the zone.  In case of duplicate RDATAs (which for SOA RRs is always\r\n   the case, and for WKS RRs is the case if the ADDRESS and PROTOCOL\r\n   fields both match), the Zone RR is replaced by Update RR.  If the\r\n   TYPE is SOA and there is no Zone SOA RR, or the new SOA.SERIAL is\r\n   lower (according to [RFC1982]) than or equal to the current Zone SOA\r\n   RR's SOA.SERIAL, the Update RR is ignored.  In the case of a CNAME\r\n   Update RR and a non-CNAME Zone RRset or vice versa, ignore the\r\n   Update RR, otherwise replace the CNAME Zone RR with the CNAME Update\r\n   RR.\r\n", "notes": "In the vice versa case it it not a CNAME Update RR, just a plain Update RR.   Removing the word \"CNAME\" make the sentence cover both cases as intended.", "submit_date": "2015-09-09", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4966", "doc-id": "RFC2898", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "                   DK = Tc<0..dkLen-1>", "correct_text": "                   DK = T_c<0..dkLen-1>", "notes": "The referenced variable Tc does not exist.", "submit_date": "2017-03-13", "submitter_name": "Huu Nguyen", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-11 18:41:28"}, {"errata_id": "3630", "doc-id": "RFC6874", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "   Such bare \"%\" signs are for user interface convenience, and need to\r\n   be turned into properly encoded characters (where \"%25\" encodes \"%\")\r\n   before the URI is used in any protocol or HTML document.  However,\r\n   URIs including a ZoneID have no meaning outside the originating node.\r\n   It would therefore be highly desirable for a browser to remove the\r\n   ZoneID from a URI before including that URI in an HTTP request.", "correct_text": "   Such bare \"%\" signs are for user interface convenience, and need to\r\n   be turned into properly encoded characters (where \"%25\" encodes \"%\")\r\n   before the URI is used in any protocol or HTML document.  HTTP Clients\r\n   MUST include a ZoneID in any URIs provided in an HTTP request since\r\n   HTTP Servers will need it when generating URIs, otherwise the IPv6\r\n   address will not be routable.", "notes": "The original advice ignores a very real issue: HTTP Servers that generate URIs from the client's Host: need to include the Client's zoneid in order for the link local address to be usable/routable.\n --VERIFIER NOTES-- \nThe zoneid is internal to the HTTP client.  It would never be shared with a server, so there is no way for a server to know a client's zoneid.   ", "submit_date": "2013-05-22", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3631", "doc-id": "RFC6874", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   An HTTP client, proxy, or other intermediary MUST remove any ZoneID\r\n   attached to an outgoing URI, as it has only local significance at the\r\n   sending host.\r\n", "correct_text": "   An HTTP client, proxy, or other intermediary MUST retain any ZoneID\r\n   attached to an outgoing URI, as it will be the only way for an HTTP server\r\n   to return a URI containing a link-local address that can subsequently be\r\n   used by the HTTP client.\r\n", "notes": "The original advice ignores a very real issue: HTTP Servers that generate URIs from the client's Host: need to include the Client's zoneid in order for the link local address to be usable/routable.\n --VERIFIER NOTES-- \nThe zoneid is a strictly internal value that is not shared between devices.   ", "submit_date": "2013-05-22", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3632", "doc-id": "RFC6874", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "  Such bare \"%\" signs are for user interface convenience, and need to\r\n  be turned into properly encoded characters (where \"%25\" encodes \"%\")\r\n  before the URI is used in any protocol or HTML document.  However,\r\n  URIs including a ZoneID have no meaning outside the originating node.\r\n  It would therefore be highly desirable for a browser to remove the\r\n  ZoneID from a URI before including that URI in an HTTP request.\r\n", "correct_text": "  Such bare \"%\" signs are for user interface convenience, and need to\r\n  be turned into properly encoded characters (where \"%25\" encodes \"%\")\r\n  before the URI is used in any protocol or HTML document.  HTTP Clients\r\n  MUST include a ZoneID in any URIs provided in an HTTP request since\r\n  HTTP Servers will need it when generating URIs, otherwise the IPv6\r\n  address will not be usable by the Client.\r\n", "notes": "NOTE: PLEASE DO NOT REJECT THIS ERRATA BEFORE FURTHER REVIEW. I WILL BE SUBMITTING A NEW DRAFT PROPOSING THESE CHANGES; THIS ERRATA CAN SERVE AS PUBLIC NOTICE OF POTENTIAL CHANGES TO THE RFC.\r\n\r\nThe client uses the zoneid to choose a network interface to route packets to that link local address. If the server returns a uri in its response that uses the same link local address but without the client's zoneid, then the client will be unable to use said uri because it won't know which interface to use. Yes the server doesn't care about the zoneid but the client depends on it (for link local anyways).\r\n\r\nThe client can supply the zoneid in the Host header. For example, the following illustrates a typical IPP request using the previously recommended IPvFuture format (which CUPS implements and uses):\r\n\r\n   POST /ipp/print HTTP/1.1\r\n   Host: [v1.fe80::1234+en0]:631\r\n   Content-Type: application/ipp\r\n   Transfer-Coding: chunked\r\n\r\n   ... IPP request ...\r\n\r\nThe printer then validates the Host header and responds with URIs containing the same Host value in any reported IPv6 link-local URIs.\r\n\r\nThe key issue is one of context - the client *may* be able to query the interface used for a particular socket connection but it probably can't (easily) cache and map this information in the URIs that are embedded in the content returned by the printer, particularly when the client may have to process said content from a variety of sources - IPP is also supported over a USB transport, HTML can be read from disk, etc.  Clients are usually unable to connect to a given IPv6 link local address without the zoneid information to tell them which network interface to use.  And typically the only reason clients use an IPv6 link local address is because it was handed to them by a discovery protocol like WS-Discovery...\r\n\r\nRequiring the client to rewrite all URIs is a tremendous burden and is error-prone.  Requiring the server to use the Host header is cheap in comparison.  Having the server validate and use the Host value also helps interoperability since existing clients may not support the new IPv6addrz format - for example, CUPS doesn't support it since it validates URIs and Host values using the ABNF in RFC 3986/STD 66.\r\n\r\nThe Host header mechanism has been standard practice outside the IETF for several years now. It is part of IPP Everywhere (Printer Working Group), Wi-Fi Direct Print Services (Wi-Fi Alliance), IPP USB (USB Implementers Forum), and AirPrint (Apple).  It solves the problem of client-side routing of IPv6 link local addresses that are used in URIs embedded in content returned by printers and other embedded devices.\r\n\r\nHundreds of millions of printers, computers, and mobile devices have been certified and shipped with IPv6 link local support using the IPvFuture format over the last 8 years. The new format is incompatible with parsers that use the ABNF in STD 66 (aka RFC 3986) and prevents the use of the Host header in HTTP requests to provide a backwards-compatible IPv6 implementation.\n --VERIFIER NOTES-- \nThe errata system is not intended as a notification system for potentially new work.   ", "submit_date": "2013-05-23", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3633", "doc-id": "RFC6874", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "  An HTTP client, proxy, or other intermediary MUST remove any ZoneID\r\n  attached to an outgoing URI, as it has only local significance at the\r\n  sending host.\r\n", "correct_text": "  An HTTP client, proxy, or other intermediary MUST retain any\r\n  ZoneID attached to an outgoing URI, as it will be the only way\r\n  for an HTTP server to return a URI containing a link-local address\r\n  that can subsequently be used by the HTTP client.\r\n", "notes": "NOTE: PLEASE DO NOT REJECT THIS ERRATA BEFORE FURTHER REVIEW. I WILL BE SUBMITTING A NEW DRAFT PROPOSING THESE CHANGES; THIS ERRATA CAN SERVE AS PUBLIC NOTICE OF POTENTIAL CHANGES TO THE RFC.\r\n\r\nThe client uses the zoneid to choose a network interface to route packets to that link local address. If the server returns a uri in its response that uses the same link local address but without the client's zoneid, then the client will be unable to use said uri because it won't know which interface to use. Yes the server doesn't care about the zoneid but the client depends on it (for link local anyways).\r\n\r\nThe client can supply the zoneid in the Host header. For example, the following illustrates a typical IPP request using the previously recommended IPvFuture format (which CUPS implements and uses):\r\n\r\n   POST /ipp/print HTTP/1.1\r\n   Host: [v1.fe80::1234+en0]:631\r\n   Content-Type: application/ipp\r\n   Transfer-Coding: chunked\r\n\r\n   ... IPP request ...\r\n\r\nThe printer then validates the Host header and responds with URIs containing the same Host value in any reported IPv6 link-local URIs.\r\n\r\nThe key issue is one of context - the client *may* be able to query the interface used for a particular socket connection but it probably can't (easily) cache and map this information in the URIs that are embedded in the content returned by the printer, particularly when the client may have to process said content from a variety of sources - IPP is also supported over a USB transport, HTML can be read from disk, etc.  Clients are usually unable to connect to a given IPv6 link local address without the zoneid information to tell them which network interface to use.  And typically the only reason clients use an IPv6 link local address is because it was handed to them by a discovery protocol like WS-Discovery...\r\n\r\nRequiring the client to rewrite all URIs is a tremendous burden and is error-prone.  Requiring the server to use the Host header is cheap in comparison.  Having the server validate and use the Host value also helps interoperability since existing clients may not support the new IPv6addrz format - for example, CUPS doesn't support it since it validates URIs and Host values using the ABNF in RFC 3986/STD 66.\r\n\r\nThe Host header mechanism has been standard practice outside the IETF for several years now. It is part of IPP Everywhere (Printer Working Group), Wi-Fi Direct Print Services (Wi-Fi Alliance), IPP USB (USB Implementers Forum), and AirPrint (Apple).  It solves the problem of client-side routing of IPv6 link local addresses that are used in URIs embedded in content returned by printers and other embedded devices.\r\n\r\nHundreds of millions of printers, computers, and mobile devices have been certified and shipped with IPv6 link local support using the IPvFuture format over the last 8 years. The new format is incompatible with parsers that use the ABNF in STD 66 (aka RFC 3986) and prevents the use of the Host header in HTTP requests to provide a backwards-compatible IPv6 implementation.\n --VERIFIER NOTES-- \nThe attempt to use this erratum as a placeholder seems to be sapping the urgency from the work the author of the erratum promised to do.   This appears to be an end-run around the standards process.   Please do not re-submit this erratum, but instead please get to work in 6man fixing this problem, if indeed there is consensus that your proposed fix is correct.", "submit_date": "2013-05-23", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3635", "doc-id": "RFC917", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "4. Self-encoding fixed-width field: A specific number of bits\r\n   is is used for the subnet number. Subnets are in use if the\r\n   high-order bit of this field is one; otherwise, the entire\r\n   local address part is used for host number.", "correct_text": "4. Self-encoding fixed-width field: A specific number of bits\r\n   is used for the subnet number. Subnets are in use if the\r\n   high-order bit of this field is one; otherwise, the entire\r\n   local address part is used for host number.", "notes": "I would like to report a small/minor grammatical error on page 5 of\r\nRFC917. Point 4 of subsection 2.1 Note that the word \"is\" is repeated.", "submit_date": "2013-05-30", "submitter_name": "Michael Demirtzidis", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3636", "doc-id": "RFC3168", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6.1.1.", "orig_text": "If the TCP connection does not\r\n   wish to use ECN notification for a particular packet, the sending TCP\r\n   sets the ECN codepoint to not-ECT, and the TCP receiver ignores the\r\n   CE codepoint in the received packet.", "correct_text": "If the TCP connection does not\r\n   wish to use ECN notification for a particular packet, the sending TCP\r\n   sets the ECN codepoint to not-ECT.", "notes": "CE should not be set on not-ECT capable packets. If this happens anyway, the CE codepoint would overwrite the ECT codepoint. Thus there is no way for the receiver to know it should ignore the CE codepoint; the sentence is therefore nonsensical.\n --VERIFIER NOTES-- \nSee discussions in the tsvwg (http://www.ietf.org/mail-archive/web/tsvwg/current/msg11989.html)", "submit_date": "2013-06-04", "submitter_name": "Mirja K\u00fchlewind", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3637", "doc-id": "RFC4996", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "COMPRESSED rout_opt_0_replicate {\r\n    discriminator =:= '10000000'                     [ 8 ];\r\n    length        =:= irregular(8)                   [ 8 ];\r\n    value         =:=\r\n      irregular(length.UVALUE*64+48) [ length.UVALUE * 64 + 48 ];\r\n  }", "correct_text": "COMPRESSED rout_opt_1_replicate {\r\n    discriminator =:= '10000000'                     [ 8 ];\r\n    length        =:= irregular(8)                   [ 8 ];\r\n    value         =:=\r\n      irregular(length.UVALUE*64+48) [ length.UVALUE * 64 + 48 ];\r\n  }", "notes": "Incorrect Representation FN of IPv6 Route Options nomenclature\r\n --VERIFIER NOTES-- \r\n   This seems to be correct as this is referring to type 0 routing ext. headers. Nonetheless, this RFC has been obsoleted by RFC 6846. ", "submit_date": "2013-06-04", "submitter_name": "Raj Kumar", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4470", "doc-id": "RFC7622", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "<king@example.com/&#x265A>;", "correct_text": "<king@example.com/&#x265A;>", "notes": "Right angle bracket arrived too soon.", "submit_date": "2015-09-10", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7898", "doc-id": "RFC7644", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.12", "orig_text": "   Example of an error in response to a PUT request:\r\n\r\n   HTTP/1.1 400 Bad Request\r\n\r\n   {\r\n     \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:Error\"],\r\n     \"scimType\":\"mutability\"\r\n     \"detail\":\"Attribute 'id' is readOnly\",\r\n     \"status\": \"400\"\r\n   }", "correct_text": "   Example of an error in response to a PUT request:\r\n\r\n   HTTP/1.1 400 Bad Request\r\n\r\n   {\r\n     \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:Error\"],\r\n     \"scimType\":\"mutability\",\r\n     \"detail\":\"Attribute 'id' is readOnly\",\r\n     \"status\": \"400\"\r\n   }", "notes": "The response body is invalid JSON due to the missing comma after \"mutability\".", "submit_date": "2024-04-17", "submitter_name": "Osman Merghani Osman Elsayed", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-17 17:52:16"}, {"errata_id": "3639", "doc-id": "RFC3168", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1 / 6.1.3", "orig_text": "Section 6.1 says:\r\n\r\n\r\n      * The receiver receives the packet with the CE codepoint set, and\r\n        sets the ECN-Echo flag in its next TCP ACK sent to the sender.\r\n[...]\r\n\r\n      * The sender sets the CWR flag in the TCP header of the next\r\n        packet sent to the receiver to acknowledge its receipt of and\r\n        reaction to the ECN-Echo flag.\r\n\r\nSection 6.1.3 says:\r\n\r\n\r\n   When TCP receives a CE data packet at the destination end-system, the\r\n   TCP data receiver sets the ECN-Echo flag in the TCP header of the\r\n   subsequent ACK packet. \r\n\r\n   [...]\r\n                                               The TCP receiver uses the\r\n   CWR flag received from the TCP sender to determine when to stop\r\n   setting the ECN-Echo flag.\r\n   ", "correct_text": "Section 6.1.3 should say:\r\n \r\n   The TCP receiver uses the\r\n   CWR flag received from the TCP sender to determine when to stop\r\n   setting the ECN-Echo flag. This check has to be performed before  \r\n   checking if the received segment is CE marked.", "notes": "The ordering of the text in the bullet points in section 6.1, and the text in section 6.1.3 can led to inappropriate implementations. At least Section 6.1.3 should be strict about the handling of CE-marked CWR-segments.\r\n\r\n\r\nIf CE is checked first, and ECE set, and thereafter CWR used to disable ECE, a CE-marked CWR segment will not result in the sending of an additional window of ECEs.\r\n\r\n\r\nAll derivatives of BSD used to \r\n\r\nFirst, set ECE because of CE\r\nSecond, reset ECE because of CWR\r\n\r\nHowever, the \"authorative\" NS2 sample code, the TBIT tool, Windows, Solaris and Linux would\r\n\r\nFirst, reset ECE because of CWR\r\nSecond, set ECE because of CE\r\n\r\nThe latter approach seems to be the sensible one, and it was quickly fixed:\r\n\r\nhttp://lists.freebsd.org/pipermail/freebsd-bugs/2010-April/039450.html", "submit_date": "2013-06-05", "submitter_name": "Richard Scheffenegger", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3642", "doc-id": "RFC6292", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   Creating a new WG record causes the Datatracker state for this\r\n   potential new WG to be \"Informal IESG review\". ", "correct_text": "   Creating a new WG record causes the Datatracker state for this\r\n   potential new WG to be \"Not currently under review\". ", "notes": "This is what the charter tool does btw.\n --VERIFIER NOTES-- \nThe RFC documented what we thought we wanted at the time. It is not documentation of the as-built or evolving software.", "submit_date": "2013-06-06", "submitter_name": "Benoit Claise", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 11:18:08"}, {"errata_id": "3643", "doc-id": "RFC4543", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   In AUTH_AES_GMAC, the AH Authentication Data field consists of the IV\r\n   and the Authentication Tag, as shown in Figure 5.  Unlike the usual\r\n   AH case, the Authentication Data field contains both an input to the\r\n   authentication algorithm (the IV) and the output of the\r\n   authentication algorithm (the tag).  No padding is required in the\r\n   Authentication Data field, because its length is a multiple of 64\r\n   bits.", "correct_text": "   In AUTH_AES_GMAC, the AH Authentication Data field consists of the IV\r\n   and the Authentication Tag, as shown in Figure 5.  Unlike the usual\r\n   AH case, the Authentication Data field contains both an input to the\r\n   authentication algorithm (the IV) and the output of the\r\n   authentication algorithm (the tag).  In IPv6, padding of 4 octets is\r\n   required to bring the AH header to a multiple of 64-bits.  No padding\r\n   is required for IPv4.", "notes": "The original text fails to consider the rest of the AH header which is 12 octets plus the authentication data field.", "submit_date": "2013-06-06", "submitter_name": "Michael Bowler", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3644", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1.2", "orig_text": "                                       **FROM**\r\n\r\n                 |RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|\r\n                 |1 |2 |3 |4 |5 |6 |7 |8 |9 |10|11|12|N3|N6|N8|N9|\r\n              ----- ---------------------------------------------\r\n              RT1|  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT2|  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT3|  |  |  |  |  |6 |  |  |  |  |  |  |0 |  |  |  |\r\n              RT4|  |  |  |  |8 |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT5|  |  |  |8 |  |6 |6 |  |  |  |  |  |  |  |  |  |\r\n              RT6|  |  |8 |  |7 |  |  |  |  |5 |  |  |  |  |  |  |\r\n              RT7|  |  |  |  |6 |  |  |  |  |  |  |  |  |0 |  |  |\r\n          *   RT8|  |  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |\r\n          *   RT9|  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |\r\n          T  RT10|  |  |  |  |  |7 |  |  |  |  |  |  |  |0 |0 |  |\r\n          O  RT11|  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |0 |\r\n          *  RT12|  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |\r\n          *    N1|3 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N2|  |3 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N3|1 |1 |1 |1 |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N4|  |  |2 |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N6|  |  |  |  |  |  |1 |1 |  |1 |  |  |  |  |  |  |\r\n               N7|  |  |  |  |  |  |  |4 |  |  |  |  |  |  |  |  |\r\n               N8|  |  |  |  |  |  |  |  |  |3 |2 |  |  |  |  |  |\r\n               N9|  |  |  |  |  |  |  |  |1 |  |1 |1 |  |  |  |  |\r\n              N10|  |  |  |  |  |  |  |  |  |  |  |2 |  |  |  |  |\r\n              N11|  |  |  |  |  |  |  |  |3 |  |  |  |  |  |  |  |\r\n              N12|  |  |  |  |8 |  |2 |  |  |  |  |  |  |  |  |  |\r\n              N13|  |  |  |  |8 |  |  |  |  |  |  |  |  |  |  |  |\r\n              N14|  |  |  |  |8 |  |  |  |  |  |  |  |  |  |  |  |\r\n              N15|  |  |  |  |  |  |9 |  |  |  |  |  |  |  |  |  |\r\n               H1|  |  |  |  |  |  |  |  |  |  |  |10|  |  |  |  |\r\n               ", "correct_text": "                                    **FROM**\r\n\r\n                 |RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|\r\n                 |1 |2 |3 |4 |5 |6 |7 |8 |9 |10|11|12|N3|N6|N8|N9|\r\n              ----- ---------------------------------------------\r\n              RT1|  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT2|  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT3|  |  |  |  |  |6 |  |  |  |  |  |  |0 |  |  |  |\r\n              RT4|  |  |  |  |8 |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT5|  |  |  |8 |  |6 |6 |  |  |  |  |  |  |  |  |  |\r\n              RT6|  |  |8 |  |7 |  |  |  |  |5 |  |  |  |  |  |  |\r\n              RT7|  |  |  |  |6 |  |  |  |  |  |  |  |  |0 |  |  |\r\n          *   RT8|  |  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |\r\n          *   RT9|  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |\r\n          T  RT10|  |  |  |  |  |7 |  |  |  |  |  |  |  |0 |0 |  |\r\n          O  RT11|  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |0 |\r\n          *  RT12|  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |\r\n          *    N1|3 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N2|  |3 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N3|1 |1 |1 |1 |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N4|  |  |2 |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N6|  |  |  |  |  |  |1 |1 |  |1 |  |  |  |  |  |  |\r\n               N7|  |  |  |  |  |  |  |4 |  |  |  |  |  |  |  |  |\r\n               N8|  |  |  |  |  |  |  |  |  |3 |2 |  |  |  |  |  |\r\n               N9|  |  |  |  |  |  |  |  |1 |  |1 |1 |  |  |  |  |\r\n              N10|  |  |  |  |  |  |  |  |  |  |  |2 |  |  |  |  |\r\n              N11|  |  |  |  |  |  |  |  |3 |  |  |  |  |  |  |  |\r\n              N12|  |  |  |  |8 |  |2 |  |  |  |  |  |  |  |  |  |\r\n              N13|  |  |  |  |8 |  |  |  |  |  |  |  |  |  |  |  |\r\n              N14|  |  |  |  |8 |  |  |  |  |  |  |  |  |  |  |  |\r\n              N15|  |  |  |  |  |  |9 |  |  |  |  |  |  |  |  |  |\r\n               H1|  |  |  |  |  |  |  |  |  |  |  |10|  |  |  |  |\r\n               Ia|  |  |  |  |  |  |  |  |  |5 |  |  |  |  |  |  |\r\n               Ib|  |  |  |  |  |7 |  |  |  |  |  |  |  |  |  |  |", "notes": "section 2.1.2\r\n\r\nPage 20, Figure 2 : A sample Autonomous System.\r\n\r\nThe interfaces   Ia  and Ib  have not been added to the directed graph.\r\nBy definition of point-to-point links under OSPF, for serial interfaces defined by IP addresses,\r\nrouter RT6 should advertise a stub network to Ib whereas router RT6 should advertise a stub network to Ia .\n --VERIFIER NOTES-- \n   The reported made an error in this submission which was\r\ncorrected in Erratum 3645", "submit_date": "2013-06-07", "submitter_name": "Preet D'Souza", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3658", "doc-id": "RFC6513", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3.1", "orig_text": "   Whenever a C-multicast route is sent, it must also carry the Selected\r\n   Upstream Multicast Hop corresponding to the C-root address\r\n   (determined by the procedures of Section 5.1).  The Selected Upstream\r\n   Multicast Hop must be encoded as part of a Route Target Extended\r\n   Community to facilitate the optional use of filters that can prevent\r\n   the distribution of the update to BGP speakers other than the\r\n   Upstream Multicast Hop.  See Section 10.1.3 of [MVPN-BGP] for the\r\n   details.", "correct_text": "   Whenever a C-multicast route is sent, it must also carry the Selected\r\n   Upstream Multicast Hop corresponding to the C-root address\r\n   (determined by the procedures of Section 5.1).  The Selected Upstream\r\n   Multicast Hop must be encoded as part of a Route Target Extended\r\n   Community to facilitate the optional use of filters that can prevent\r\n   the distribution of the update to BGP speakers other than the\r\n   Upstream Multicast Hop.  See Section 11.1.3 of [MVPN-BGP] for the\r\n   details.", "notes": "", "submit_date": "2013-06-17", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3659", "doc-id": "RFC6505", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.2.4", "orig_text": "   id2:  an identifier for either a connection or a conference.  The\r\n      identifier MUST conform to the syntax defined in Section 15.1 of\r\n      [RFC6230].  The attribute is mandatory.\r\n", "correct_text": "   id2:  an identifier for either a connection or a conference.  The\r\n      identifier MUST conform to the syntax defined in Appendix A.1 of\r\n      [RFC6230].  The attribute is mandatory.\r\n", "notes": "", "submit_date": "2013-06-17", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4471", "doc-id": "RFC7530", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "16.10.4.", "orig_text": "   In the case that the lock is denied, the owner, offset, and length of\r\n   a conflicting lock are returned.", "correct_text": "   In the case that the lock is denied, the owner, offset, length, and\r\n   type of a conflicting lock are returned.", "notes": "The locktype in LOCK4denied is not specified for the LOCK operation.  See 16.11.4. for similar wording for LOCKT.", "submit_date": "2015-09-12", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4967", "doc-id": "RFC5424", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.2.1", "orig_text": "4             security/authorization messages\r\n10            security/authorization messages", "correct_text": "\"10             security/authorization messages\" should be removed", "notes": "There is a double entry in the facility list.", "submit_date": "2017-03-14", "submitter_name": "Muhammad Usman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3645", "doc-id": "RFC2328", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1.2", "orig_text": "Figure 2: A sample Autonomous System\r\n\r\n                                **FROM**\r\n\r\n                 |RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|\r\n                 |1 |2 |3 |4 |5 |6 |7 |8 |9 |10|11|12|N3|N6|N8|N9|\r\n              ----- ---------------------------------------------\r\n              RT1|  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT2|  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT3|  |  |  |  |  |6 |  |  |  |  |  |  |0 |  |  |  |\r\n              RT4|  |  |  |  |8 |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT5|  |  |  |8 |  |6 |6 |  |  |  |  |  |  |  |  |  |\r\n              RT6|  |  |8 |  |7 |  |  |  |  |5 |  |  |  |  |  |  |\r\n              RT7|  |  |  |  |6 |  |  |  |  |  |  |  |  |0 |  |  |\r\n          *   RT8|  |  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |\r\n          *   RT9|  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |\r\n          T  RT10|  |  |  |  |  |7 |  |  |  |  |  |  |  |0 |0 |  |\r\n          O  RT11|  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |0 |\r\n          *  RT12|  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |\r\n          *    N1|3 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N2|  |3 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N3|1 |1 |1 |1 |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N4|  |  |2 |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N6|  |  |  |  |  |  |1 |1 |  |1 |  |  |  |  |  |  |\r\n               N7|  |  |  |  |  |  |  |4 |  |  |  |  |  |  |  |  |\r\n               N8|  |  |  |  |  |  |  |  |  |3 |2 |  |  |  |  |  |\r\n               N9|  |  |  |  |  |  |  |  |1 |  |1 |1 |  |  |  |  |\r\n              N10|  |  |  |  |  |  |  |  |  |  |  |2 |  |  |  |  |\r\n              N11|  |  |  |  |  |  |  |  |3 |  |  |  |  |  |  |  |\r\n              N12|  |  |  |  |8 |  |2 |  |  |  |  |  |  |  |  |  |\r\n              N13|  |  |  |  |8 |  |  |  |  |  |  |  |  |  |  |  |\r\n              N14|  |  |  |  |8 |  |  |  |  |  |  |  |  |  |  |  |\r\n              N15|  |  |  |  |  |  |9 |  |  |  |  |  |  |  |  |  |\r\n               H1|  |  |  |  |  |  |  |  |  |  |  |10|  |  |  |  |", "correct_text": "Figure 2: A sample Autonomous System\r\n\r\n                                **FROM**\r\n\r\n                 |RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|RT|\r\n                 |1 |2 |3 |4 |5 |6 |7 |8 |9 |10|11|12|N3|N6|N8|N9|\r\n              ----- ---------------------------------------------\r\n              RT1|  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT2|  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT3|  |  |  |  |  |6 |  |  |  |  |  |  |0 |  |  |  |\r\n              RT4|  |  |  |  |8 |  |  |  |  |  |  |  |0 |  |  |  |\r\n              RT5|  |  |  |8 |  |6 |6 |  |  |  |  |  |  |  |  |  |\r\n              RT6|  |  |8 |  |7 |  |  |  |  |5 |  |  |  |  |  |  |\r\n              RT7|  |  |  |  |6 |  |  |  |  |  |  |  |  |0 |  |  |\r\n          *   RT8|  |  |  |  |  |  |  |  |  |  |  |  |  |0 |  |  |\r\n          *   RT9|  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |\r\n          T  RT10|  |  |  |  |  |7 |  |  |  |  |  |  |  |0 |0 |  |\r\n          O  RT11|  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |0 |\r\n          *  RT12|  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |0 |\r\n          *    N1|3 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N2|  |3 |  |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N3|1 |1 |1 |1 |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N4|  |  |2 |  |  |  |  |  |  |  |  |  |  |  |  |  |\r\n               N6|  |  |  |  |  |  |1 |1 |  |1 |  |  |  |  |  |  |\r\n               N7|  |  |  |  |  |  |  |4 |  |  |  |  |  |  |  |  |\r\n               N8|  |  |  |  |  |  |  |  |  |3 |2 |  |  |  |  |  |\r\n               N9|  |  |  |  |  |  |  |  |1 |  |1 |1 |  |  |  |  |\r\n              N10|  |  |  |  |  |  |  |  |  |  |  |2 |  |  |  |  |\r\n              N11|  |  |  |  |  |  |  |  |3 |  |  |  |  |  |  |  |\r\n              N12|  |  |  |  |8 |  |2 |  |  |  |  |  |  |  |  |  |\r\n              N13|  |  |  |  |8 |  |  |  |  |  |  |  |  |  |  |  |\r\n              N14|  |  |  |  |8 |  |  |  |  |  |  |  |  |  |  |  |\r\n              N15|  |  |  |  |  |  |9 |  |  |  |  |  |  |  |  |  |\r\n               H1|  |  |  |  |  |  |  |  |  |  |  |10|  |  |  |  |\r\n               Ia|  |  |  |  |  |  |  |  |  |5 |  |  |  |  |  |  |\r\n               Ib|  |  |  |  |  |7 |  |  |  |  |  |  |  |  |  |  |", "notes": "Notes:\r\n\r\nsection 2.1.2\r\n\r\nPage 20, Figure 2 : A sample Autonomous System.\r\nTwo additions have been made to the orginal text which are reflected in the Corrected text.\r\nThe last two rows for interfaces Ia and Ib  have been added.\r\nThe reason for the same is as explained below.\r\n\r\nBy definition of point-to-point links under OSPF, for serial interfaces defined by IP addresses, router RT6 should advertise a stub network to Ib whereas router RT10 should advertise a stub network to Ia .\r\n\r\nVerifier's note: RFC 2328 is not wrong without the stubs links. \r\nHowever, it does no harm to include them.\r\n\r\nThis table should be looked at in any future revision of this \r\nRFC. ", "submit_date": "2013-06-07", "submitter_name": "Preet D'Souza", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3646", "doc-id": "RFC2849", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Note 4", "orig_text": "Any dn or rdn that contains characters other than those\r\ndefined as \"SAFE-UTF8-CHAR\", or begins with a character other\r\nthan those defined as \"SAFE-INIT-UTF8-CHAR\",", "correct_text": "Any dn or rdn that contains characters other than those\r\ndefined as \"SAFE-CHAR\", or begins with a character other\r\nthan those defined as \"SAFE-INIT-CHAR\",", "notes": "This appears in note 4 of \"Notes on LDIF Syntax\".\r\n\r\n---- Verifier notes ----\r\nNote 4 has double text, one of which allows more than the other.   But the ABNF\r\ndoesn't have that ambiguity.  This is really something that can only be fixed by\r\nrevising the spec.   It's simply not clear what the intent was.", "submit_date": "2013-06-11", "submitter_name": "Boris Kleint", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3647", "doc-id": "RFC4364", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "If it is desired to have a particular host be in multiple virtual\r\nsites, then that host must determine, for each packet, which virtual\r\nsite the packet is associated with.", "correct_text": "If it is desired to have a particular host to be in multiple virtual \r\nsites, then that host must determine, for each packet, which virtual \r\nsite the packet is associated with.", "notes": "'host be' should be 'host to be'\n --VERIFIER NOTES-- \nThe original text is correct.   ", "submit_date": "2013-06-12", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3648", "doc-id": "RFC4364", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4", "orig_text": "If two\r\nroutes to the same IP address prefix are actually routes to different\r\nsystems, it is important to ensure that BGP not treat them as\r\ncomparable.", "correct_text": "If two \r\nroutes to the same IP address prefix are actually routes to two different\r\nsystems, it is important to ensure that BGP not treat them as comparable.", "notes": "'routes to different system' should be 'routes to two different system'\n --VERIFIER NOTES-- \nThe original text is correct.   ", "submit_date": "2013-06-12", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3649", "doc-id": "RFC4364", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "Then if\r\na route is potentially reachable over more than one attachment\r\ncircuit, the PE/CE routing can switch the preferred path for a\r\nroute from one attachment circuit to another, without there being\r\nany need to distribute new a label for that route.", "correct_text": "Then if\r\na route is potentially reachable over more than one attachment \r\ncircuit, the PE/CE routing can switch the preferred path for a \r\nroute from one attachment circuit to another, without there being \r\nany need to distribute a new label for that route.", "notes": "'distribute new a label' should be 'distribute a new label'.", "submit_date": "2013-06-12", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3660", "doc-id": "RFC6426", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   Value    Meaning                 Reference\r\n   -----    -------------------     -----------------------------\r\n   22       Static LSP              this document (Section 2.4.1)\r\n   23       Static Pseudowire       this document (Section 2.4.2)", "correct_text": "   Value    Meaning                 Reference\r\n   -----    -------------------     -----------------------------\r\n   22       Static LSP              this document (Section 2.3.1)\r\n   23       Static Pseudowire       this document (Section 2.3.2)", "notes": "", "submit_date": "2013-06-17", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3661", "doc-id": "RFC6109", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   To guarantee the verifiability of signatures on as many mail clients\r\n   as possible, X.509v3 certificates used by certified email systems\r\n   MUST abide by the profile found in section 6.5.", "correct_text": "   To guarantee the verifiability of signatures on as many mail clients\r\n   as possible, X.509v3 certificates used by certified email systems\r\n   MUST abide by the profile found in section 5.5.", "notes": "", "submit_date": "2013-06-17", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3686", "doc-id": "RFC6962", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "chain:  An array of base64-encoded Precertificates.  The first\r\n         element is the end-entity certificate; the second chains to the\r\n         first and so on to the last, which is either the root\r\n         certificate or a certificate that chains to a known root\r\n         certificate.", "correct_text": "chain:  An array of base64-encoded Precertificate and certificates. \r\n         The first element is the end-entity precertificate; the second\r\n         chains to the first and so on to the last, which is either the\r\n         root certificate or a certificate that chains to a known root\r\n         certificate. Only the first element in the array may be\r\n         a precertificate.", "notes": "The current description of Add PreCertChain implies the array may consist of multiple Precertificates. In practice it only  makes sense for the first element to be a Precertificate, the following elements should be proper certificates.", "submit_date": "2013-07-26", "submitter_name": "Eran Messeri", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4968", "doc-id": "RFC7593", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "Authentication in eduroam is achieved by using a combination of IEEE\r\n802.1X [IEEE.802.1X] and EAP [RFC4372] (the latter carried over\r\nRADIUS for guest access; see Section 2.2).\r\n", "correct_text": "Authentication in eduroam is achieved by using a combination of IEEE\r\n802.1X [IEEE.802.1X] and EAP [RFC3748] (the latter carried over\r\nRADIUS for guest access; see Section 2.2).\r\n", "notes": "EAP is 3748, not 4372.", "submit_date": "2017-03-14", "submitter_name": "Linus Nordberg", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3650", "doc-id": "RFC6120", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A.2", "orig_text": "  <xs:element name='bad-format' type='empty'/>\r\n  <xs:element name='bad-namespace-prefix' type='empty'/>\r\n  <xs:element name='conflict' type='empty'/>\r\n  <xs:element name='connection-timeout' type='empty'/>\r\n  <xs:element name='host-gone' type='empty'/>\r\n  <xs:element name='host-unknown' type='empty'/>\r\n  <xs:element name='improper-addressing' type='empty'/>\r\n  <xs:element name='internal-server-error' type='empty'/>\r\n  <xs:element name='invalid-from' type='empty'/>\r\n  <xs:element name='invalid-id' type='empty'/>\r\n  <xs:element name='invalid-namespace' type='empty'/>\r\n  <xs:element name='invalid-xml' type='empty'/>\r\n  <xs:element name='not-authorized' type='empty'/>\r\n  <xs:element name='not-well-formed' type='empty'/>\r\n  <xs:element name='policy-violation' type='empty'/>\r\n  <xs:element name='remote-connection-failed' type='empty'/>\r\n  <xs:element name='reset' type='empty'/>\r\n  <xs:element name='resource-constraint' type='empty'/>\r\n  <xs:element name='restricted-xml' type='empty'/>\r\n  <xs:element name='see-other-host' type='xs:string'/>\r\n  <xs:element name='system-shutdown' type='empty'/>\r\n  <xs:element name='undefined-condition' type='empty'/>\r\n  <xs:element name='unsupported-encoding' type='empty'/>\r\n  <xs:element name='unsupported-stanza-type' type='empty'/>\r\n  <xs:element name='unsupported-version' type='empty'/>\r\n\r\n  <xs:group name='streamErrorGroup'>\r\n    <xs:choice>\r\n      <xs:element ref='bad-format'/>\r\n      <xs:element ref='bad-namespace-prefix'/>\r\n      <xs:element ref='conflict'/>\r\n      <xs:element ref='connection-timeout'/>\r\n      <xs:element ref='host-gone'/>\r\n      <xs:element ref='host-unknown'/>\r\n      <xs:element ref='improper-addressing'/>\r\n      <xs:element ref='internal-server-error'/>\r\n      <xs:element ref='invalid-from'/>\r\n      <xs:element ref='invalid-id'/>\r\n      <xs:element ref='invalid-namespace'/>\r\n      <xs:element ref='invalid-xml'/>\r\n      <xs:element ref='not-authorized'/>\r\n      <xs:element ref='not-well-formed'/>\r\n      <xs:element ref='policy-violation'/>\r\n      <xs:element ref='remote-connection-failed'/>\r\n      <xs:element ref='reset'/>\r\n      <xs:element ref='resource-constraint'/>\r\n      <xs:element ref='restricted-xml'/>\r\n      <xs:element ref='see-other-host'/>\r\n      <xs:element ref='system-shutdown'/>\r\n      <xs:element ref='undefined-condition'/>\r\n      <xs:element ref='unsupported-encoding'/>\r\n      <xs:element ref='unsupported-stanza-type'/>\r\n      <xs:element ref='unsupported-version'/>\r\n    </xs:choice>\r\n  </xs:group>", "correct_text": "  <xs:element name='bad-format' type='empty'/>\r\n  <xs:element name='bad-namespace-prefix' type='empty'/>\r\n  <xs:element name='conflict' type='empty'/>\r\n  <xs:element name='connection-timeout' type='empty'/>\r\n  <xs:element name='host-gone' type='empty'/>\r\n  <xs:element name='host-unknown' type='empty'/>\r\n  <xs:element name='improper-addressing' type='empty'/>\r\n  <xs:element name='internal-server-error' type='empty'/>\r\n  <xs:element name='invalid-from' type='empty'/>\r\n  <xs:element name='invalid-namespace' type='empty'/>\r\n  <xs:element name='invalid-xml' type='empty'/>\r\n  <xs:element name='not-authorized' type='empty'/>\r\n  <xs:element name='not-well-formed' type='empty'/>\r\n  <xs:element name='policy-violation' type='empty'/>\r\n  <xs:element name='remote-connection-failed' type='empty'/>\r\n  <xs:element name='reset' type='empty'/>\r\n  <xs:element name='resource-constraint' type='empty'/>\r\n  <xs:element name='restricted-xml' type='empty'/>\r\n  <xs:element name='see-other-host' type='xs:string'/>\r\n  <xs:element name='system-shutdown' type='empty'/>\r\n  <xs:element name='undefined-condition' type='empty'/>\r\n  <xs:element name='unsupported-encoding' type='empty'/>\r\n  <xs:element name='unsupported-feature' type='empty'/>\r\n  <xs:element name='unsupported-stanza-type' type='empty'/>\r\n  <xs:element name='unsupported-version' type='empty'/>\r\n\r\n  <xs:group name='streamErrorGroup'>\r\n    <xs:choice>\r\n      <xs:element ref='bad-format'/>\r\n      <xs:element ref='bad-namespace-prefix'/>\r\n      <xs:element ref='conflict'/>\r\n      <xs:element ref='connection-timeout'/>\r\n      <xs:element ref='host-gone'/>\r\n      <xs:element ref='host-unknown'/>\r\n      <xs:element ref='improper-addressing'/>\r\n      <xs:element ref='internal-server-error'/>\r\n      <xs:element ref='invalid-from'/>\r\n      <xs:element ref='invalid-namespace'/>\r\n      <xs:element ref='invalid-xml'/>\r\n      <xs:element ref='not-authorized'/>\r\n      <xs:element ref='not-well-formed'/>\r\n      <xs:element ref='policy-violation'/>\r\n      <xs:element ref='remote-connection-failed'/>\r\n      <xs:element ref='reset'/>\r\n      <xs:element ref='resource-constraint'/>\r\n      <xs:element ref='restricted-xml'/>\r\n      <xs:element ref='see-other-host'/>\r\n      <xs:element ref='system-shutdown'/>\r\n      <xs:element ref='undefined-condition'/>\r\n      <xs:element ref='unsupported-encoding'/>\r\n      <xs:element ref='unsupported-feature'/>\r\n      <xs:element ref='unsupported-stanza-type'/>\r\n      <xs:element ref='unsupported-version'/>\r\n    </xs:choice>\r\n  </xs:group>", "notes": "The \"invalid-id\" error condition was removed in the changes between RFC 3920 and RFC 6120, but mistakenly not removed from the schema. The \"unsupported-feature\" error condition was added in the changes between RFC 3920 and RFC 6120, but mistakenly not added to the schema.\r\n\r\nThis bug was found by Anastasia Gornostaeva.\r\n\r\nImplementors using the schema as updated by this erratum should note that if they produce XML that includes the \"unsupported-feature\" element, then it might be rejected as invalid by implementations using the original schema.  Likewise, if they produce XML that includes the \"invalid-id\" element, then it might be rejected as invalid by implementations following the revised schema.", "submit_date": "2013-06-12", "submitter_name": "Peter Saint-Andre", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3651", "doc-id": "RFC6120", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.9.3.19", "orig_text": "\"(b) the receiving entity MAY have a policy of following redirects only\r\nif it has authenticated the receiving entity\"", "correct_text": "\"(b) the initiating entity MAY have a policy of following redirects only \r\nif it has authenticated the receiving entity\"", "notes": "This bug was found by Yann Leboulanger.", "submit_date": "2013-06-12", "submitter_name": "Peter Saint-Andre", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3652", "doc-id": "RFC4492", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4", "orig_text": "ECBasisType basis;\r\nselect (basis) {\r\n    case ec_trinomial:\r\n        opaque  k <1..2^8-1>;\r\n    case ec_pentanomial:\r\n        opaque  k1 <1..2^8-1>;\r\n        opaque  k2 <1..2^8-1>;\r\n        opaque  k3 <1..2^8-1>;\r\n};\r\n", "correct_text": "ECBasisType basis;\r\nselect (basis) {\r\n    case ec_basis_trinomial:\r\n        opaque  k <1..2^8-1>;\r\n    case ec_basis_pentanomial:\r\n        opaque  k1 <1..2^8-1>;\r\n        opaque  k2 <1..2^8-1>;\r\n        opaque  k3 <1..2^8-1>;\r\n};\r\n", "notes": "ECBasisType is earlier introduced as:\r\n    enum { ec_basis_trinomial, ec_basis_pentanomial } ECBasisType;\r\n\r\nThe cases of the select statement should spell the enum elements correctly.\r\n\r\n{spt} Related to: http://www.rfc-editor.org/errata_search.php?eid=2389", "submit_date": "2013-06-13", "submitter_name": "Peter Dettman", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3653", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "13.4.2", "orig_text": "The destinations of the first 13 storage units are:", "correct_text": "The destinations of the first 13 stripe units are:", "notes": "Same errata on Section 13.4.3", "submit_date": "2013-06-15", "submitter_name": "Kanda Motohiro", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3654", "doc-id": "RFC6493", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "   VERSION -  pro forma packaging that MUST be the second line in the\r\n      vCard and MUST have the value \"VERSION:4.0\" as described in\r\n      Section 3.7.9 of [RFC6350].\r\n", "correct_text": "   VERSION -  pro forma packaging that MUST be the second line in the\r\n      vCard and MUST have the value \"VERSION:4.0\" as described in\r\n      Section 6.7.9 of [RFC6350].\r\n", "notes": "", "submit_date": "2013-06-15", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3655", "doc-id": "RFC6494", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   In Sections 2, 4.9.10, and 4.9.11 of [RFC6487], it is stated that\r\n   RFC 3779 resource extensions MUST be marked as critical and MUST be\r\n   present in all resource certificates.  SEND certificates MUST include\r\n   the IP Address Delegation extension [RFC3779].  This extension MUST\r\n   include at least one address block for the IPv6 Address Family\r\n   (AFI=0002), as described in Section 4.9.10 of [RFC6487].  SEND\r\n   certificates MUST NOT have more than one IP Address Delegation\r\n   extension.", "correct_text": "   In Sections 2, 4.8.10, and 4.8.11 of [RFC6487], it is stated that\r\n   RFC 3779 resource extensions MUST be marked as critical and MUST be\r\n   present in all resource certificates.  SEND certificates MUST include\r\n   the IP Address Delegation extension [RFC3779].  This extension MUST\r\n   include at least one address block for the IPv6 Address Family\r\n   (AFI=0002), as described in Section 4.8.10 of [RFC6487].  SEND\r\n   certificates MUST NOT have more than one IP Address Delegation\r\n   extension.", "notes": "Sections 4.9.10 and 4.9.11 do not exist in RFC 6487.", "submit_date": "2013-06-17", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3656", "doc-id": "RFC6870", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Section 15", "correct_text": "Appendix A", "notes": "8 occurences: Section 15, 15.2, 15.5, Section 15.2, Section 15.1, Section 15.1, Section 15.3, Section 15.3", "submit_date": "2013-06-17", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3657", "doc-id": "RFC6787", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "13.7", "orig_text": "   IANA has registered the following SDP parameter values.  The\r\n   information for each follows the template given in RFC 4566\r\n   [RFC4566], Appendix B.", "correct_text": "   IANA has registered the following SDP parameter values.  The\r\n   information for each follows the template given in RFC 4566\r\n   [RFC4566], Section 8.2.", "notes": "", "submit_date": "2013-06-17", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4472", "doc-id": "RFC7233", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   o  The first and last bytes only (bytes 0 and 9999):\r\n\r\n        bytes=0-0,-1", "correct_text": "   o  The first and last bytes only (bytes 0 and 9999):\r\n\r\n        bytes=0-1,-1", "notes": "If the first byte is requested the offset must be 1.\n --VERIFIER NOTES-- \nThe reporter has retracted this after more testing, saying that \"The sentence 'the byte positions specified are inclusive' seems to explain it,\" though he thinks it could be explained more clearly and directly.", "submit_date": "2015-09-13", "submitter_name": "Florian Best", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4969", "doc-id": "RFC7593", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.2", "orig_text": "   The use of the Extensible Authentication Protocol (EAP) [RFC4372]\r\n", "correct_text": "   The use of the Extensible Authentication Protocol (EAP) [RFC3748]\r\n", "notes": "EAP is 3748, not 4372.", "submit_date": "2017-03-14", "submitter_name": "Linus Nordberg", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3662", "doc-id": "RFC5850", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "   The multi-party architecture may also need to provide a mechanism to\r\n   get information about the status/handling of a dialog (for example,\r\n   information about the history of other contacts attempted prior to\r\n   the current contact).  Finally, the architecture should provide ample\r\n   opportunities to present informational URIs that relate to calls,\r\n   conversations, or dialogs in some way.  For example, consider the SIP\r\n   Call-Info header or Contact header fields returned in a 300-class\r\n   response.  Frequently, additional information about a call or dialog\r\n   can be fetched via non-SIP URIs.  For example, consider a web page\r\n   for package tracking when calling a delivery company or a web page\r\n   with related documentation when joining a dial-in conference.  The\r\n   use of URIs in the multi-party framework is discussed in more detail\r\n   in Section 3.7.", "correct_text": "   The multi-party architecture may also need to provide a mechanism to\r\n   get information about the status/handling of a dialog (for example,\r\n   information about the history of other contacts attempted prior to\r\n   the current contact).  Finally, the architecture should provide ample\r\n   opportunities to present informational URIs that relate to calls,\r\n   conversations, or dialogs in some way.  For example, consider the SIP\r\n   Call-Info header or Contact header fields returned in a 300-class\r\n   response.  Frequently, additional information about a call or dialog\r\n   can be fetched via non-SIP URIs.  For example, consider a web page\r\n   for package tracking when calling a delivery company or a web page\r\n   with related documentation when joining a dial-in conference.  The\r\n   use of URIs in the multi-party framework is discussed in more detail\r\n   in Section 2.7.", "notes": "", "submit_date": "2013-06-17", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3663", "doc-id": "RFC6265", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.4", "orig_text": "A request-path path-matches a given cookie-path if at least one of\r\nthe following conditions holds:\r\n\r\no  The cookie-path and the request-path are identical.", "correct_text": "A request-path path-matches a given cookie-path if at least one of\r\nthe following conditions holds:\r\n\r\no  The cookie-path and the request-path are identical.  Note that this\r\n   differs from the rules in RFC 3986 for equivalence of the path\r\n   component, and hence two equivalent paths can have different\r\n   cookies.", "notes": "The \"identical\" rule differs from the URI equivalence rule(s) in RFC 3986\r\nsections 6.2 and 2.1 (e.g., \"If two URIs differ only in the case of hexadecimal\r\ndigits used in percent-encoded octets, they are equivalent.\")  The fact that\r\nequivalent URIs have different cookies arguably violates the principle of\r\nleast astonishment.  To avoid significant confusion and prevent such surprise,\r\nthis fact should be noted so that it is at least not unexpected.", "submit_date": "2013-06-17", "submitter_name": "Dave Thaler", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3693", "doc-id": "RFC5280", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.1.10", "orig_text": "   DNS name restrictions are expressed as host.example.com.  Any DNS\r\n   name that can be constructed by simply adding zero or more labels to\r\n   the left-hand side of the name satisfies the name constraint.  For\r\n   example, www.host.example.com would satisfy the constraint but\r\n   host1.example.com would not.\r\n", "correct_text": "[Add this to the paragraph]\r\n\r\n   If an implementation extracts DNS names from the subject\r\n   distinguished name, DNS name restrictions MUST be applied\r\n   to these names as well.\r\n", "notes": "When used with TLS and HTTP (according to RFC 2818), section 4.2.1.10, Name Constraints, is technically a NOP that doesn't constraint the CA that has this attribute because RFC 2818 mandates processing of the common name attribute in the subject distinguished name.  Consequentially, the constraint can be bypassed by issuing a certificate without a subject alternative name.  The fix is to apply the DNS name restrictions to the relevant parts of the subject distinguished name, too, as implemented here:\r\n\r\nhttps://bugzilla.mozilla.org/show_bug.cgi?id=394919\n --VERIFIER NOTES-- \nThe suggested change is not editorial; it represents a significant\r\ntechnical change. It also does not accurately reflect the intent of the WG.    ", "submit_date": "2013-08-12", "submitter_name": "Florian Weimer", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3664", "doc-id": "RFC5496", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "Without the PIM extensions specified in this document,\r\nthe core router cannot determine where the send the Join,\r\nto the tree cannot be constructed.", "correct_text": "Without the PIM extensions specified in this document,\r\nthe core router cannot determine where to send the Join,\r\nso the tree cannot be constructed.", "notes": "A small typo in \"where the send the join\".", "submit_date": "2013-06-17", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3687", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1.4", "orig_text": "   | messageScope [scope]       | A marker denoting this Option        |\r\n   |                            | applies to the whole IPFIX message;  |\r\n   |                            | content is ignored.", "correct_text": "   | messageScope [scope]       | A marker denoting this Option        |\r\n   |                            | applies to the whole IPFIX Message;  |\r\n   |                            | content is ignored.", "notes": "s/IPFIX message/IPFIX Message/\r\n\r\n- because that's the technical term defined in RFC5101 to which this draft refers", "submit_date": "2013-07-26", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3688", "doc-id": "RFC5655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "B.1.1", "orig_text": "   Export Time:   Aside from being called UNIX Secs in the NetFlow V9\r\n      packet header specification, the export time in seconds since 1\r\n      January 1970 at 0000 UTC appears in both NetFlow V9 and IPFIX\r\n      message headers.", "correct_text": "   Export Time:   Aside from being called UNIX Secs in the NetFlow V9\r\n      packet header specification, the export time in seconds since 1\r\n      January 1970 at 0000 UTC appears in both NetFlow V9 and IPFIX\r\n      Message headers.", "notes": "s/IPFIX message/IPFIX Message/\r\n\r\n- because that's the technical term defined in RFC5101 to which this draft refers", "submit_date": "2013-07-26", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7766", "doc-id": "RFC9513", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   The AC-bit (value 0x80) in the OSPFv3 PrefixOptions field [RFC5340]\r\n   is defined to advertise the anycast property:\r\n\r\n                          0  1  2  3  4  5  6  7\r\n                         +--+--+--+--+--+--+--+--+\r\n                         |AC|EL| N|DN| P| x|LA|NU|\r\n                         +--+--+--+--+--+--+--+--+\r\n\r\n                   Figure 2: OSPFv3 Prefix Options Field\r\n", "correct_text": "   The AC-bit (value 0x80) in the OSPFv3 PrefixOptions field [RFC5340]\r\n   is defined to advertise the anycast property:\r\n\r\n                          0  1  2  3  4  5  6  7\r\n                         +--+--+--+--+--+--+--+--+\r\n                         |AC| E| N|DN| P| x|LA|NU|\r\n                         +--+--+--+--+--+--+--+--+\r\n\r\n                   Figure 2: OSPFv3 Prefix Options Field\r\n", "notes": "Bit 1 is defined in RFC9089 section 6 as   \r\n *  Bit 0x40 in the \"OSPFv3 Prefix Options (8 bits)\" registry has been\r\n      allocated to the E-Flag (ELC Flag).\r\nIt is not the EL bit or flag.\r\n\r\nVerifier note: I added a space before the E in Tom's proposed correction, to make the diagram line up.", "submit_date": "2024-01-16", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-16 18:17:18"}, {"errata_id": "3668", "doc-id": "RFC5496", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "4.  Vector Attribute TLV Format\r\n\r\n   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |F|S| Type      | Length        |        Value\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-.......\r\n\r\n   F bit\r\n      Forward Unknown TLV.  If this bit is set, the TLV is forwarded\r\n      regardless of whether the router understands the Type.  If the TLV\r\n      is known, the F bit is ignored.\r\n\r\n   S bit\r\n      Bottom of Stack.  If this bit is set, then this is the last TLV in\r\n      the stack.\r\n", "correct_text": "4.  Vector Attribute TLV Format\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |F|E| Type      | Length        |        Value\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-.......\r\n\r\n   F-bit\r\n      Forward Unknown TLV.  If this bit is set, the TLV is forwarded\r\n      regardless of whether the router understands the Type.  If the TLV\r\n      is known, the F bit is ignored.\r\n\r\n   E-bit:\r\n      End of Attributes.  If this bit is set, then this is the last TLV\r\n      in the stack. ", "notes": "RFC 5384 defined the Join Attribute for PIM. \r\nRPF vector is one such Join attribute. \r\n\r\nRFC 5384 defined the format for Join Attributes to use the F-bit and E-bit.\r\n\r\nThis change aligns the terminology with RFC 5384 and aligns the bit numbers in the figure.\r\n\r\nThere is no change to bits on the wire, procedures, or implementation details.", "submit_date": "2013-06-17", "submitter_name": "Bharat Joshi", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3669", "doc-id": "RFC6846", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.2", "orig_text": " COMPRESSED ipv4_innermost_irregular {\r\n    ENFORCE(is_innermost == 1);\r\n    ip_id          =:=\r\n      ip_id_enc_irreg(ip_id_behavior_innermost.UVALUE) [ 0, 16 ];\r\n    ENFORCE(ip_inner_ecn == ip_ecn_flags.UVALUE);\r\n  }", "correct_text": "COMPRESSED ipv4_innermost_irregular {\r\n    ENFORCE(is_innermost == 1);\r\n    ip_id          =:=\r\n      ip_id_enc_irreg(ip_id_behavior_innermost.UVALUE) [ 0, 16 ];\r\n    \r\n  }", "notes": "I don't find any reason why IP-ID encoding in ipv4 irregular chain, should be dependent on ECN flags.\n --VERIFIER NOTES-- \n\"This errata is invalid. Those bits need to be bound in the format and needs to be done so in the irregular chain for the inner header which does special treatment for these.\"   ", "submit_date": "2013-06-24", "submitter_name": "Raj Kumar", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3670", "doc-id": "RFC5752", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "   The procedures for generating SignerInfo are as specified in Section\r\n   4.4.1 of [CMS] with the following addition:\r\n", "correct_text": "   The procedures for generating SignerInfo are as specified in Section\r\n   5.3 with the following addition:\r\n", "notes": "Sean Turner confirmed the error but did not mention the right section reference.\r\n\r\nI updated this to point to s5.3. (spt)", "submit_date": "2013-06-25", "submitter_name": "Jo\u00ebl Repiquet", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3671", "doc-id": "RFC3394", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.3.1", "orig_text": "If unwrapping produces A[0] any other value,", "correct_text": "If unwrapping produces A[0] equal to any other value,", "notes": "This resembles a copy-paste typo, where the last portion of \"If unwrapping produces A[0]\" was not removed in the second of two sentences.\r\n\r\nI edited this based on comments from the authors.", "submit_date": "2013-06-26", "submitter_name": "Lucas Garron", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3672", "doc-id": "RFC5557", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "   The <svec-list> is changed as follows:\r\n\r\n   <svec-list> ::= <SVEC>\r\n                   [<OF>]\r\n                   [<GC>]\r\n                   [<XRO>]\r\n                   [<svec-list>]", "correct_text": "   The <svec-list> is changed as follows:\r\n\r\n   <svec-list> ::= <SVEC>\r\n                   [<OF>]\r\n                   [<GC>]\r\n                   [<XRO>]\r\n                   [<metric-list>]\r\n                   [<svec-list>]", "notes": "RFC5440 defines <svec-list>::=<SVEC>[<svec-list>]\r\nRFC5541 extend <svec-list> as follows:\r\n         <svec-list> ::= <SVEC>\r\n                         [<OF>]\r\n                         [<metric-list>]\r\n                         [<svec-list>]\r\n\r\nRFC5557 should include all the elements defined by the RFCs its extending.\r\nThe position of the metric-list may be kept after the [<OF>]\n --VERIFIER NOTES-- \nThe essence of his report is that message definitions in RFCs should include all\r\nelements of RBNF from the messages as defined in previous RFCs.\r\n\r\nDiscussion of this point in the PCE working group led to a debate about\r\nwhether the RBNF is normative and should be \"compilable\". Some hold the\r\nview that being conservative in what you send and liberal in what you \r\nreceive could only make this text normative for building messages not \r\nparsing them. Others noted that, as with RSVP, the object ordering is\r\nadvisory not mandatory except as where noted explicitly in the text.\r\n\r\nIt is also worth noting that as various documents are developed in parallel,\r\ngetting the RBNF right in the RFCs might require last-minute edits in Auth48\r\nwhich is undesirable for a host of reasons. Others observed that there is no\r\nexpectation that authors will read RFC in numeric order and that the RBNF for a\r\nnew feature in PCEP applies to how that feature is added.\r\n\r\nAll this led to http://datatracker.ietf.org/doc/draft-cmfg-pce-pcep-grammar/\r\nwhich is an experiment to determine whether it is possible to derive an\r\naggregated RBNF description for all PCEP messages. This might (if successful) go\r\non to form a type of message registry to act as a stable reference point.\r\n\r\nIn rejecting this Errata report I note that the reported error is not a typo,\r\nbut a deliberate decision of the authors and working group. The fix, therefore,\r\nif it is to be applied needs to be achieved through a consensus document.", "submit_date": "2013-06-27", "submitter_name": "Cyril Margaria", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4473", "doc-id": "RFC6733", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.4", "orig_text": "6.1.4.  Processing Local Requests\r\n\r\nThe Destination-Host AVP is not present, the Destination-Realm AVP\r\ncontains a realm the server is configured to process locally, and\r\nthe Diameter application is locally supported; or\r\n", "correct_text": "6.1.4.  Processing Local Requests\r\n\r\nThe Destination-Host AVP is not present in peer routing table, \r\nthe Destination-Realm AVP contains a realm the server is \r\nconfigured to process locally, and \r\nthe Diameter application is locally supported; or\r\n", "notes": "6.1.4 - Processing Local Requests\r\n\r\n      The Destination-Host AVP is not present, the Destination-Realm AVP\r\n      contains a realm the server is configured to process locally, and\r\n      the Diameter application is locally supported\r\n\r\n6.1.6 - Request Routing\r\n\r\n   When a request is received that includes a realm\r\n   and/or application that is not locally supported, the message is\r\n   routed to the peer configured\r\n\r\nAs given above 6.1.4 second rule contradicts with 6.1.6 para 2.\n --VERIFIER NOTES-- \n   DIME chairs recommended reject", "submit_date": "2015-09-14", "submitter_name": "Keshab Upadhya", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4474", "doc-id": "RFC7315", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.4", "orig_text": "extension-access-info  = gen-value", "correct_text": "extension-access-info  = generic-param", "notes": "Most of the pre-defined access-info values are following the generic-param syntax. New access-info values (extensions) should also be allowed to follow the generic-param syntax, in order to allow both for a name and value of the extension.", "submit_date": "2015-09-14", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3673", "doc-id": "RFC4271", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "Path attributes fall into four separate categories:\r\n\r\n         1. Well-known mandatory.\r\n         2. Well-known discretionary.\r\n         3. Optional transitive.\r\n         4. Optional non-transitive.\r\n", "correct_text": "Path attributes fall into five separate categories:\r\n\r\n         1. Well-known mandatory.\r\n         2. Well-known discretionary.\r\n         3. Well-known.\r\n         4. Optional transitive.\r\n         5. Optional non-transitive.", "notes": "Local pref is only a \"well-known\" attribute as it fails the definition for the behavior as a mandatory attribute and it is not exactly discretionary per 5.1.5's definition of local pref and section 5's definition of discretionary which states:\r\n\r\n\"5.1.5.  LOCAL_PREF\r\n\r\n   LOCAL_PREF is a well-known attribute that SHALL be included in all\r\n   UPDATE messages that a given BGP speaker sends to other internal\r\n   peers.\"\r\n\r\nSection 5's definition of discretionary:\r\n\r\n\" [...]Others are discretionary and MAY\r\n   or MAY NOT be sent in a particular UPDATE message.\"\r\n\r\nAs a well-known mandatory attribute would result in a NOTIFICATION per section 6.3, it cannot be well-known mandatory because it is only for internal peers. Thus, it is a separate category.\r\n\r\n6.3\r\n\"   If any of the well-known mandatory attributes are not present, then\r\n   the Error Subcode MUST be set to Missing Well-known Attribute.  The\r\n   Data field MUST contain the Attribute Type Code of the missing,\r\n   well-known attribute.\"\r\n\r\nIn a future revision, a new term would probably be best to describe this. However, the categorization of attributes is misleading for now and the simplest approach is to add the new category already used by 5.1.5.\n --VERIFIER NOTES-- \nThis erratum was discussed on the IDR list.\r\n\r\nThe consensus was that whilst an alternative is to revert \r\nfrom OpenSent to Idle on event 18 at that point, this was not \r\nwhat was decided when RFC4271 was being produced, and\r\nno one saw a good engineering reason to change it at this \r\nstage.\r\n\r\nOn a matter of process, this proposal is not an Erratum \r\nas the IETF sees it but an engineering change.\r\n\r\nThe submitter is, of course, welcome to submit a draft \r\nproposing this change to RFC 4271 and the to discuss the \r\nmerits of the change with the IDR Working Group.", "submit_date": "2013-06-28", "submitter_name": "William McCall", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3674", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.3", "orig_text": "If the distribution point name is present in the IDP CRL \r\nextension and the distribution field is present in the DP, \r\nthen verify that one of the names in the IDP matches one \r\nof the names in the DP.", "correct_text": "If the distribution point name is present in the IDP CRL \r\nextension and the distributionPoint field is present in \r\nthe DP, then verify that one of the names in the IDP \r\nmatches one of the names in the DP.", "notes": "Original text refers to the non existent field \"distribution\" in DP.", "submit_date": "2013-06-28", "submitter_name": "Piyush Jain", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3675", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "3.2.3.  Atom Says:\r\n\r\n   dot-atom        =   [CFWS] dot-atom-text [CFWS]\r\n\r\n3.2.4.  Quoted Strings (but superseded by Errata 3135) Says:\r\n\r\n   quoted-string   =   [CFWS]\r\n                       DQUOTE ((1*([FWS] qcontent) [FWS]) / FWS) DQUOTE\r\n                       [CFWS]\r\n\r\n3.4.1.  Addr-Spec Specification Says:\r\n\r\n   addr-spec       =   local-part \"@\" domain\r\n\r\n   local-part      =   dot-atom / quoted-string / obs-local-part\r\n\r\n   domain          =   dot-atom / domain-literal / obs-domain\r\n\r\n   domain-literal  =   [CFWS] \"[\" *([FWS] dtext) [FWS] \"]\" [CFWS]\r\n", "correct_text": "3.2.3.  Atom\r\n\r\n   dot-atom        =   [CFWS] dot-atom-text [CFWS]\r\n\r\n   dot-atom-lh     =   [CFWS] dot-atom-text [FWS]\r\n\r\n   dot-atom-rh     =   [FWS] dot-atom-text [CFWS]\r\n\r\n3.2.4.  Quoted Strings (but superseded by Errata 3135)\r\n\r\n   quoted-string   =   [CFWS]\r\n                       DQUOTE ((1*([FWS] qcontent) [FWS]) / FWS) DQUOTE\r\n                       [CFWS]\r\n\r\n   quoted-string-lh =  [CFWS]\r\n                       DQUOTE ((1*([FWS] qcontent) [FWS]) / FWS) DQUOTE\r\n                       [FWS]\r\n\r\n3.4.1.  Addr-Spec Specification\r\n\r\n   addr-spec       =   local-part \"@\" domain\r\n\r\n   local-part      =   dot-atom-lh / quoted-string-lh / obs-local-part\r\n\r\n   domain          =   dot-atom-rh / domain-literal / obs-domain\r\n\r\n   domain-literal  =   [FWS] \"[\" *([FWS] dtext) [FWS] \"]\" [CFWS]\r\n", "notes": "Section 3.4.1 states \"Comments and folding white space SHOULD NOT be used around the \"@\" in the addr-spec.\", yet the ABNF specifically allows it without recourse to obsoleted terms. Given that the above statement is in fact correct, then the current ABNF should be modified as shown to reflect the above statement.\n --VERIFIER NOTES-- \nThe DRUMS Working Group made a conscious decision at the time of writing 2822 that they preferred clarity and ease of understanding of the ABNF at the expense of shift-reduce conflicts and other things that had to be limited in the text descriptions of the syntax, and that assumption carried over into 5322. This is one of those cases. While more precise, the correction is not what was intended, and there are many other cases where the text limits the more free syntax.", "submit_date": "2013-06-29", "submitter_name": "David Hoerl", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3676", "doc-id": "RFC3856", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.11.1", "orig_text": "In a presence edge server (where the PUA is co-located with the PUA),", "correct_text": "In a presence edge server (where the PA is co-located with the PUA),", "notes": "According to section 3 definitions, an edge presence server is a presence agent\r\nthat is co-located with a PUA.", "submit_date": "2013-07-01", "submitter_name": "Liangxing Wang", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3677", "doc-id": "RFC6130", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "App. B p. 65", "orig_text": "   o  L_HEARD_time MUST NOT be greater than L_time.\r\n ", "correct_text": "  o  L_HEARD_time MUST NOT be greater than L_time, \r\n     unless L_lost = true.\r\n", "notes": "The case currently indicated as a constraint failure, \r\nbut not by the relaxed constraint, can occur - and \r\ncorrectly - in normal operation of the protocol.", "submit_date": "2013-07-04", "submitter_name": "Christopher Dearlove", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3679", "doc-id": "RFC6321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.2.2", "orig_text": "<tzid>US/Eastern</tzid>", "correct_text": "<tzid><text>US/Eastern</text></tzid>", "notes": "The \"tzid\" property in the second example (p.51) is not formatted correctly.  The property value should be enclosed in a \"<text>\" element.", "submit_date": "2013-07-11", "submitter_name": "Michael Angstadt", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3680", "doc-id": "RFC3168", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.1.", "orig_text": "If the TCP connection does not\r\nwish to use ECN notification for a particular packet, the sending TCP\r\nsets the ECN codepoint to not-ECT, and the TCP receiver ignores the\r\nCE codepoint in the received packet.", "correct_text": "If the TCP connection does not\r\nwish to use ECN notification for a particular packet, the sending TCP\r\nsets the ECN codepoint to not-ECT.", "notes": "The receiver should not ignore any CE codepoint.\n --VERIFIER NOTES-- \nThis is not an editorial fix or technical clarification, but proposes to change the processing of ECN. Please go ahead and write a draft that works towards updating RFC 3168.", "submit_date": "2013-07-12", "submitter_name": "Mirja K\u00fchlewind", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3681", "doc-id": "RFC2042", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "In the References, it says:", "orig_text": "[3] Bates, T., Chandra, R, \"BGP Route Reflection An alternative\r\n    to full mesh IBGP\", RFC 1998, June 1996.", "correct_text": "[3] Bates, T., Chandra, R., \"BGP Route Reflection: An alternative\r\n    to full mesh IBGP\", RFC 1966, June 1996.", "notes": "Wrong RFC number for that document.", "submit_date": "2013-07-12", "submitter_name": "J. Noel Chiappa", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3682", "doc-id": "RFC5416", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.", "orig_text": "The AC will signal the update to the GTK using an IEEE 802.11\r\nConfiguration Request message, including an IEEE 802.11 Update WLAN\r\nmessage element with the new GTK, its index, the Transmit Sequence\r\nCounter (TSC) for the Group Key and the Key Status set to 3 (begin\r\nGTK update).\r\n...\r\nWhen the AC has completed the GTK update to all\r\nSTAs in the BSS, the AC MUST transmit an IEEE 802.11 Configuration\r\nRequest message including an IEEE 802.11 Update WLAN message element\r\ncontaining the new GTK, its index, and the Key Status set to 4 (GTK\r\nupdate complete).", "correct_text": "The AC will signal the update to the GTK using an IEEE 802.11\r\nConfiguration Request message, including an IEEE 802.11 Update WLAN\r\nmessage element with the new GTK, its index, the Transmit Sequence\r\nCounter (TSC) for the Group Key and the Key Status set to 2 (begin\r\nGTK update).\r\n...\r\nWhen the AC has completed the GTK update to all\r\nSTAs in the BSS, the AC MUST transmit an IEEE 802.11 Configuration\r\nRequest message including an IEEE 802.11 Update WLAN message element\r\ncontaining the new GTK, its index, and the Key Status set to 3 (GTK\r\nupdate complete).", "notes": "Key Status field is defined as follows:\r\n2 -  The value of 2 indicates that the AC will begin rekeying the\r\n     GTK with the STA's in the BSS.  It is only valid when IEEE\r\n     802.11 is enabled as the security policy for the BSS.\r\n\r\n3 -  The value of 3 indicates that the AC has completed rekeying\r\n     the GTK and broadcast packets no longer need to be duplicated\r\n     and transmitted with both GTK's.", "submit_date": "2013-07-15", "submitter_name": "Bulavskiy Dmitriy", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3683", "doc-id": "RFC6194", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "When n = 160, as is the case for SHA-1, it will\r\n   take 2^106 computations to find a second pre-image in a 60-byte\r\n   message.", "correct_text": "When n = 160, as is the case for SHA-1, the estimated computational\r\n complexity of finding a second preimage of any given message of \r\nabout 2^60 bytes in length is 2^106 (compression function \r\nexecutions) which is significantly less than 2^160. ", "notes": "Clarification.\r\n\r\nspt: I replaced 2^55 blocks with 2^60 bytes after some consultation with Lily and Quynh.", "submit_date": "2013-07-15", "submitter_name": "Quynh Hung Dang", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3684", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.3", "orig_text": " Specifically, any SIP header whose grammar is of the form\r\n\r\n      header  =  \"header-name\" HCOLON header-value *(COMMA header-value)\r\n\r\n   allows for combining header fields of the same name into a comma-\r\n   separated list.  The Contact header field allows a comma-separated\r\n   list unless the header field value is \"*\".", "correct_text": " Specifically, any SIP header whose grammar is of the form\r\n\r\n      header  =  header-name HCOLON header-value *(COMMA header-value)\r\n\r\n   allows for combining header fields of the same name into a comma-\r\n   separated list.  The Contact header field allows a comma-separated\r\n   list unless the header field value is \"*\".", "notes": "That is, remove the double quotes around the word `header-name' in the ABNF.", "submit_date": "2013-07-16", "submitter_name": "Colin Fraizer", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3685", "doc-id": "RFC1323", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "         This option is an offer, not a promise; both sides must send\r\n         Window Scale options in their SYN segments to enable window\r\n         scaling in either direction.  If window scaling is enabled,\r\n         then the TCP that sent this option will right-shift its true\r\n         receive-window values by 'shift.cnt' bits for transmission in\r\n         SEG.WND.  The value 'shift.cnt' may be zero (offering to scale,\r\n         while applying a scale factor of 1 to the receive window).\r\n", "correct_text": "         This option is an offer, not a promise; both sides must send\r\n         Window Scale options in their SYN segments to enable window\r\n         scaling in either direction.  If window scaling is enabled,\r\n         then the TCP that sent this option will left-shift its true\r\n         receive-window values by 'shift.cnt' bits for transmission in\r\n         SEG.WND.  The value 'shift.cnt' may be zero (offering to scale,\r\n         while applying a scale factor of 1 to the receive window).\r\n", "notes": "This need to be left shift\n --VERIFIER NOTES-- \nThe text in RFC 1323 is correct. ", "submit_date": "2013-07-16", "submitter_name": "Arul Kumar Chellappan", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4475", "doc-id": "RFC4666", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6.1, Pg 53", "orig_text": "The optional SI [7,8] field contains one or more Service\r\n      Indicators from the values described in the MTP3-User Identity\r\n      field of the DUPU message.  The absence of the SI parameter in the\r\n      Routing Key indicates the use of any SI value, excluding of course\r\n      MTP management.  Where an SI parameter does not contain a multiple\r\n      of four SIs, the parameter is padded out to 32-byte alignment.", "correct_text": "The optional SI [7,8] field contains one or more Service\r\n      Indicators from the values described in the MTP3-User Identity\r\n      field of the DUPU message.  The absence of the SI parameter in the\r\n      Routing Key indicates the use of any SI value, excluding of course\r\n      MTP management.  Where an SI parameter does not contain a multiple\r\n      of four SIs, the parameter is padded out to 32-bit alignment.", "notes": "It seems obvious that diagram is referring to 32-bit and not 32-byte (as in 32-octets) alignment.", "submit_date": "2015-09-14", "submitter_name": "Valentin Micic", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4606", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.8.8.3", "orig_text": "       rstatus    = \"REQUEST-STATUS\" rstatparam \":\"\r\n                    statcode \";\" statdesc [\";\" extdata]\r\n", "correct_text": "       rstatus    = \"REQUEST-STATUS\" statcode \":\"\r\n                    rstatparam \";\" statdesc [\";\" extdata]\r\n", "notes": "'rstatparam' and 'statcode' are interchanged.\n --VERIFIER NOTES-- \nThe original text is correct: \"rstatparam\" defines the set of allowed *parameters* on the \"REQUEST-STATUS\" property. Parameters always occur immediately after the property name and before the \":\" that separates the property value. The property *value* is a semicolon-separated structured text field with the first component being \"statcode\", and appears after the \":\".", "submit_date": "2016-01-27", "submitter_name": "Harald Lampke", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4745", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "error\r\n         REQUIRED.  A single ASCII [USASCII] error code from the\r\n         following:\r\n\r\n         invalid_request\r\n               The request is missing a required parameter, includes an\r\n               unsupported parameter value (other than grant type),\r\n               repeats a parameter, includes multiple credentials,\r\n               utilizes more than one mechanism for authenticating the\r\n               client, or is otherwise malformed.\r\n\r\n         invalid_client\r\n               Client authentication failed (e.g., unknown client, no\r\n               client authentication included, or unsupported\r\n               authentication method).  The authorization server MAY\r\n               return an HTTP 401 (Unauthorized) status code to indicate\r\n               which HTTP authentication schemes are supported.  If the\r\n               client attempted to authenticate via the \"Authorization\"\r\n               request header field, the authorization server MUST\r\n               respond with an HTTP 401 (Unauthorized) status code and\r\n               include the \"WWW-Authenticate\" response header field\r\n               matching the authentication scheme used by the client.\r\n\r\n         invalid_grant\r\n               The provided authorization grant (e.g., authorization\r\n               code, resource owner credentials) or refresh token is\r\n               invalid, expired, revoked, does not match the redirection\r\n               URI used in the authorization request, or was issued to\r\n               another client.\r\n\r\n         unauthorized_client\r\n               The authenticated client is not authorized to use this\r\n               authorization grant type.\r\n\r\n         unsupported_grant_type\r\n               The authorization grant type is not supported by the\r\n               authorization server.\r\n\r\n         invalid_scope\r\n               The requested scope is invalid, unknown, malformed, or\r\n               exceeds the scope granted by the resource owner.\r\n\r\n         Values for the \"error\" parameter MUST NOT include characters\r\n         outside the set %x20-21 / %x23-5B / %x5D-7E.", "correct_text": "error\r\n         REQUIRED.  A single ASCII [USASCII] error code from the\r\n         following:\r\n\r\n         invalid_request\r\n               The request is missing a required parameter, includes an\r\n               unsupported parameter value (other than grant type),\r\n               repeats a parameter, includes multiple credentials,\r\n               utilizes more than one mechanism for authenticating the\r\n               client, or is otherwise malformed.\r\n\r\n         invalid_client\r\n               Client authentication failed (e.g., unknown client, no\r\n               client authentication included, or unsupported\r\n               authentication method).  The authorization server MAY\r\n               return an HTTP 401 (Unauthorized) status code to indicate\r\n               which HTTP authentication schemes are supported.  If the\r\n               client attempted to authenticate via the \"Authorization\"\r\n               request header field, the authorization server MUST\r\n               respond with an HTTP 401 (Unauthorized) status code and\r\n               include the \"WWW-Authenticate\" response header field\r\n               matching the authentication scheme used by the client.\r\n\r\n         invalid_grant\r\n               The provided authorization grant (e.g., authorization\r\n               code, resource owner credentials) or refresh token is\r\n               invalid, expired, revoked, does not match the redirection\r\n               URI used in the authorization request, or was issued to\r\n               another client.\r\n\r\n         unauthorized_client\r\n               The authenticated client is not authorized to use this\r\n               authorization grant type.\r\n\r\n         unsupported_grant_type\r\n               The authorization grant type is not supported by the\r\n               authorization server.\r\n\r\n         invalid_scope\r\n               The requested scope is invalid, unknown, malformed, or\r\n               exceeds the scope granted by the resource owner.\r\n\r\n         server_error\r\n               The authorization server encountered an unexpected\r\n               condition that prevented it from fulfilling the request.\r\n               (This error code is needed because a 500 Internal Server\r\n               Error HTTP status code cannot be returned to the client\r\n               via an HTTP redirect.)\r\n\r\n         temporarily_unavailable\r\n               The authorization server is currently unable to handle\r\n               the request due to a temporary overloading or maintenance\r\n               of the server.  (This error code is needed because a 503\r\n               Service Unavailable HTTP status code cannot be returned\r\n               to the client via an HTTP redirect.)\r\n\r\n         Values for the \"error\" parameter MUST NOT include characters\r\n         outside the set %x20-21 / %x23-5B / %x5D-7E.", "notes": "This is simply adding the server_error and temporarily_unavailable errors in other responses responses to the access token response for non-implicit grant types.", "submit_date": "2016-07-20", "submitter_name": "Clark Downum", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3689", "doc-id": "RFC3031", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "      6. <PulledUnconditional, RequestWhenNeeded, N/A, ReleaseOnChange,\r\n         UseImmediate>\r\n\r\n         This is downstream-on-demand label distribution with\r\n         independent control and conservative label retention mode,\r\n         without loop detection.\r\n\r\n      7. <PulledUnconditional, RequestWhenNeeded, N/A, ReleaseOnChange,\r\n         UseIfLoopNotDetected>", "correct_text": "      6. <PulledUnconditional, RequestWhenNeeded, RequestRetry,\r\n         ReleaseOnChange, UseImmediate>\r\n\r\n         This is downstream-on-demand label distribution with\r\n         independent control and conservative label retention mode,\r\n         without loop detection.\r\n\r\n      7. <PulledUnconditional, RequestWhenNeeded, RequestRetry,\r\n         ReleaseOnChange, UseIfLoopNotDetected>", "notes": "If the \"Request Procedure\" is different than \"Request Never\", then a \"NotAvailable Procedure\" should be specified. In this case, the \"Request Retry\" procedure is the right option for Downstream on Demand.\r\n\r\n[Note that the reported original text has been updated to reflect the actual text in the RFC]\n --VERIFIER NOTES-- \nThis report is rejected for a number of reasons.\r\n\r\nThe first point to note is that the text in section 5.2 is intended to show how the different label distribution schemes will interoperate. It is not intended to cover every wrinkle or be a normative. In that light, the downstream-on-demand operations can be considered to be consistent with a converged IGP in which case the failure to return a LabelMapping would simply not arise or would represent a marginal error that should not be blindly retried.\r\n\r\nConsider for example that the routing tables on the two routers are not in agreement. Can the upstream router know which one is out of synch?\r\n\r\nConsider that the downstream router has run out of labels (maybe not realistic these days, but it was a concern once upon a time). Would retrying the request help?\r\n\r\nThe second point to note is that if this text *is* considered to be normative (i.e., an absolute definition of how downstream-on-demand operates) then any change is also normative. Since the current text is what the authors and WG intended to write, a change to this text would be a change of substance and needs more than just an errata report (for example, an Internet-Draft).", "submit_date": "2013-07-28", "submitter_name": "Renato Westphal", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3690", "doc-id": "RFC5519", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.", "orig_text": "INDEX { mgmdHostInterfaceIfIndex,\r\nmgmdHostInterfaceQuerierType }", "correct_text": "INDEX { mgmdHostInterfaceIfIndex,\r\nmgmdHostInterfaceQuerierType, mgmdHostInterfaceQuerier}", "notes": "The mgmdHostInterfaceQuerier field should be included in the index to handle the case where there are multiple aliases.\n --VERIFIER NOTES-- \nAdding support for aliases needs to be proposed for a future version of the group management protocols and the MIB.  It cannot be added via an erratum statement.   ", "submit_date": "2013-07-30", "submitter_name": "Herbie Robinson", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3691", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "\\DDD            where each D is a digit is the octet corresponding to", "correct_text": "\\DDD            where each D is a digit in the octet corresponding to", "notes": "", "submit_date": "2013-08-01", "submitter_name": "Sam Bretheim", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3692", "doc-id": "RFC5912", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14", "orig_text": "crlExtensions EXTENSION ::= {\r\n           ext-AuthorityKeyIdentifier | ext-IssuerAltName |\r\n           ext-CRLNumber | ext-DeltaCRLIndicator |\r\n           ext-IssuingDistributionPoint |  ext-FreshestCRL, ... }", "correct_text": "crlExtensions EXTENSION ::= {\r\n           ext-AuthorityKeyIdentifier | ext-IssuerAltName |\r\n           ext-CRLNumber | ext-DeltaCRLIndicator |\r\n           ext-IssuingDistributionPoint |  ext-FreshestCRL | \r\n           ext-AuthorityInfoAccess, ... }", "notes": "Section 5.2.7 of RFC 5280 allows AIA to be a CRL extension.", "submit_date": "2013-08-02", "submitter_name": "Carl Wallace", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3694", "doc-id": "RFC2104", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "References", "orig_text": "\"Keyed Hash Functions and Message Authentication\"", "correct_text": "\"Keying Hash Functions for Message Authentication\"", "notes": "This is reference [BCK1]. It is also no longer directly available at the advertised URL, though can be found on that site. Alternatively it is easily available elsewhere, by searching with the quoted corrected title (which is why this erratum may help).", "submit_date": "2013-08-14", "submitter_name": "Christopher Dearlove", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3695", "doc-id": "RFC3122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   The sender node MUST send the following options in the Advertisement\r\n   message:\r\n\r\n   Source Link-Layer Address The link-layer address of the sender.\r\n", "correct_text": "   The sender node MUST send the following options in the Advertisement\r\n   message:\r\n\r\n        Source Link-Layer Address \r\n           The link-layer address of the sender.\r\n", "notes": "The same format for the source link-layer address option as for the target link-layer address option (insert tab).", "submit_date": "2013-08-14", "submitter_name": "Arnold Plankl", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3712", "doc-id": "RFC3711", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "Replace the SRTP index by the 32-bit quantity: 0 || SRTCP index\r\n (i.e., excluding the E-bit, replacing it with a fixed 0-bit), and use\r\n<label> = 0x03 for the SRTCP encryption key, <label> = 0x04 for the\r\nSRTCP authentication key, and, <label> = 0x05 for the SRTCP salting\r\nkey.", "correct_text": "Replace the SRTP index by the 48-bit quantity: 000...0 || 0 || SRTCP\r\nindex (i.e., excluding the E-bit, replacing it with a fixed 0-bit and\r\npadding the result so that it becomes 48 bits wide to match the size\r\nof the SRTP index). Since this quantity and the SRTP index are both\r\n48 bits wide, the labels are all located in the same octet in the IV.\r\nThe labels for the derivations of the SRTCP keys are as follows:   \r\n<label> = 0x03 for the SRTCP encryption key, <label> = 0x04 for the \r\nSRTCP authentication key, and, <label> = 0x05 for the SRTCP salting \r\nkey.\r\n", "notes": "Replacing with a 32-bit quantity means that the DIV operator will\r\nyield a 32-bit quantity.  Following the specification of key_id for SRTCP\r\nthe <label> will have 32 bits to its right when XOR'ing with master_salt.\r\n\r\nThe majority of implementations, including libsrtp, invokes this XOR with the\r\n<label> at the same position as for SRTP.  According to the specification\r\nthis should be done 16 bits to the right of this, when invoking for SRTCP.", "submit_date": "2013-08-27", "submitter_name": "Christian S Oien", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3716", "doc-id": "RFC3447", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1.2", "orig_text": "   3. EME-OAEP decoding:\r\n\r\n      a. If the label L is not provided, let L be the empty string. Let\r\n         lHash = Hash(L), an octet string of length hLen (see the note\r\n         in Section 7.1.1).\r\n\r\n      b. Separate the encoded message EM into a single octet Y, an octet\r\n         string maskedSeed of length hLen, and an octet string maskedDB\r\n         of length k - hLen - 1 as\r\n\r\n            EM = Y || maskedSeed || maskedDB.\r\n\r\n      c. Let seedMask = MGF(maskedDB, hLen).", "correct_text": "   3. EME-OAEP decoding:\r\n\r\n      a. If the label L is not provided, let L be the empty string. Let\r\n         lHash = Hash(L), an octet string of length hLen (see the note\r\n         in Section 7.1.1).\r\n\r\n      b. Separate the encoded message EM into a single octet Y, an octet\r\n         string maskedSeed of length hLen, and an octet string maskedDB\r\n         of length k - hLen - 1 as\r\n\r\n            EM = Y || maskedSeed || maskedDB.\r\n\r\n      c. Check to see if Y is 00.", "notes": "Per <https://tools.ietf.org/html/rfc3447#page-21> the first byte of EM should be 00 so shouldn't RSAES-OAEP-DECRYPT / EME-OAEP decoding check that?\n --VERIFIER NOTES-- \n   Step g includes the check for Y = 0\r\n \r\nIf there is no octet with hexadecimal value 0x01 to separate PS\r\n         from M, if lHash does not equal lHash', or if Y is nonzero,\r\n         output \"decryption error\" and stop.  (See the note below.)", "submit_date": "2013-09-02", "submitter_name": "Jim Wigginton", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3696", "doc-id": "RFC3122", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "The sender node MUST send the following options in the Advertisement\r\n   message:\r\n\r\n   Source Link-Layer Address The link-layer address of the sender.\r\n\r\n      Target Link-Layer Address\r\n         The link-layer address of the target, that is, the sender of\r\n         the advertisement.", "correct_text": "The sender node MUST send the following options in the Advertisement\r\nmessage:\r\n\r\n   Source Link-Layer Address\r\n      The link-layer address of the node transmitting the\r\n      Advertisement message\r\n\r\n   Target Link-Layer Address\r\n      The link-layer address of the node that transmitted the\r\n      Solicitation message", "notes": "There is an ambiguity with the Source Link-Layer and Target Link-Layer Address option in the Inverse Neighbor Discovery Advertisement Message. It is unclear if SLLA is set to sender of the Advertisement or of the Solicitation, the same with TLLA. The RFC-text as it is would lead to SLL=TLL=sender of advertisement.\r\n\r\nHere is an example for clarification of the problem (with 2 Ethernet-nodes, no FR):\r\nEth Node A   -   Eth Node B:\r\n1. A sends IND S with SLLA=A, TLLA=B\r\n2. B takes the address pair from SLLA and source-IP in ND cache\r\n3. B answers with IND A with TAL(identified by TLLA in solicitation), SLLA=B,TLLA=B  <- problem is here (SLLA=TLLA=B). Is that acceptable? \r\nOr modify to: SLLA=A or TLLA=A? Or omit TLLA?\r\n4. A takes the address pair from SLLA and the TAL in ND cache\r\n\r\nSolution 1: B answers with IND A with TAL, SLLA=B, and TLLA=A => Then carries TLLA the address of the requesting node (is that acceptable as \u201ctarget\u201d address?)\r\n\r\nSolution 2: B answers with IND A with TAL, SLLA=A, and TLLA=B => Then A could not take the address pair from SLLA and the TAL in ND cache.", "submit_date": "2013-08-14", "submitter_name": "Arnold Plankl", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3697", "doc-id": "RFC4013", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "Indicator whether or not this is the newest version of the\r\nprofile: This is the first version of the SASPprep profile.", "correct_text": "Indicator whether or not this is the newest version of the\r\nprofile: This is the first version of the SASLprep profile.", "notes": "\"SASLprep\" has been erroneously misspelled \"SASPprep\".", "submit_date": "2013-08-17", "submitter_name": "Giovanni Cannata", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3698", "doc-id": "RFC6503", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.5.1", "orig_text": "This specification establishes the Message sub-registry under\r\nhttp://www.iana.org/assignments/ccmp-messages.", "correct_text": "This specification establishes the Message sub-registry under\r\nhttp://www.iana.org/assignments/ccmp-parameters.", "notes": "", "submit_date": "2013-08-20", "submitter_name": "Amanda Baber", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3699", "doc-id": "RFC6475", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "http://www.iana.org/mobility-parameters", "correct_text": "http://www.iana.org/assignments/mobility-parameters", "notes": "", "submit_date": "2013-08-20", "submitter_name": "Amanda Baber", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3700", "doc-id": "RFC2839", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "http://www.iana.org/assignment/port-numbers", "correct_text": "http://www.iana.org/assignments/port-numbers", "notes": "", "submit_date": "2013-08-20", "submitter_name": "Amanda Baber", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4126", "doc-id": "RFC791", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "    If internet datagram marked don't fragment cannot be\r\n    delivered to its destination without fragmenting it, it is to be\r\n    discarded instead.", "correct_text": "    If an internet datagram marked don't fragment cannot be\r\n    delivered to its destination without fragmenting it, it is to be\r\n    discarded instead.", "notes": "Grammar mistake.", "submit_date": "2014-10-04", "submitter_name": "Federico do Pino", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3702", "doc-id": "RFC3428", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12", "orig_text": "This specification registers the MESSAGE method in the\r\nhttp://www.iana.org/assignments/sip-parameters/Method registry", "correct_text": "This specification registers the MESSAGE method in the\r\nhttp://www.iana.org/assignments/sip-parameters \"Methods and \r\nResponse Codes\" registry", "notes": "", "submit_date": "2013-08-20", "submitter_name": "Amanda Baber", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3710", "doc-id": "RFC3339", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "[IERS] International Earth Rotation Service Bulletins,\r\n       <http://hpiers.obspm.fr/eop-pc/products/bulletins.html>.", "correct_text": "[IERS] International Earth Rotation Service Bulletins,\r\n       <http://hpiers.obspm.fr/eop-pc/products/bulletins\r\n        /bulletins.html>.", "notes": "Original link is missing a \"bulletins/\" before the terminal \"bulletins.html\".\r\nThis leads to a 404", "submit_date": "2013-08-26", "submitter_name": "Thomas B", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3711", "doc-id": "RFC6190", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.1.3", "orig_text": "   N:    1 bit\r\n         no_inter_layer_pred_flag.  This flag specifies, when present in\r\n         a coded slice NAL unit, whether inter-layer prediction may be\r\n         used for decoding the coded slice (when equal to 1) or not\r\n         (when equal to 0).", "correct_text": "   N:    1 bit\r\n         no_inter_layer_pred_flag.  This flag specifies, when present in\r\n         a coded slice NAL unit, whether inter-layer prediction may be\r\n         used for decoding the coded slice (when equal to 0) or not\r\n                                                          ^\r\n         (when equal to 1).\r\n                        ^", "notes": "", "submit_date": "2013-08-26", "submitter_name": "Xiaohui Wei (Joanne)", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7059", "doc-id": "RFC8960", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.5", "orig_text": "        augment \"/rt:routing/rt:ribs/rt:rib/rt:routes/rt:route/\"\r\n              + \"rt:next-hop/rt:next-hop-options/rt:simple-next-hop\" {\r\n          description\r\n            \"Augments the 'simple-next-hop' case in IP unicast routes.\";\r\n          uses nhlfe-single-contents {\r\n            when \"/rt:routing/rt:ribs/rt:rib/rt:routes/rt:route\"\r\n               + \"/mpls:mpls-enabled = 'true'\";\r\n          }\r\n        }\r\n", "correct_text": "        augment \"/rt:routing/rt:ribs/rt:rib/rt:routes/rt:route/\"\r\n              + \"rt:next-hop/rt:next-hop-options/rt:simple-next-hop\" {\r\n          description\r\n            \"Augments the 'simple-next-hop' case in IP unicast routes.\";\r\n          uses nhlfe-single-contents {\r\n            when \"../../../mpls:mpls-enabled = 'true'\";\r\n          }\r\n        }\r\n", "notes": "The original YANG statements make the \"uses\" statement apply to all rt:rib and all rt:route instances as soon as there is at least one instance that has mpls:mpls-enabled set to true. I suspect this is not the author's intent.\r\n\r\nThe corrected YANG statements make the \"uses\" statement only apply to the specific route instances that have mpls:mpls-enabled set to true. There are also other ways to fix this issue.", "submit_date": "2022-07-29", "submitter_name": "Jan Lindblad", "verifier_id": "", "verifier_name": "James N Guichard", "update_date": "2023-05-31 18:14:26"}, {"errata_id": "3713", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.9", "orig_text": "           FN:Rene van der Harten\r\n           N;SORT-AS=\"Harten,Rene\":van der Harten;Rene,J.;Sir;R.D.O.N.\r\n\r\n           FN:Robert Pau Shou Chang\r\n           N;SORT-AS=\"Pau Shou Chang,Robert\":Shou Chang;Robert,Pau;;\r\n\r\n           FN:Osamu Koura\r\n           N;SORT-AS=\"Koura,Osamu\":Koura;Osamu;;\r\n\r\n           FN:Oscar del Pozo\r\n           N;SORT-AS=\"Pozo,Oscar\":del Pozo Triscon;Oscar;;\r\n\r\n           FN:Chistine d'Aboville\r\n           N;SORT-AS=\"Aboville,Christine\":d'Aboville;Christine;;\r\n\r\n           FN:H. James de Mann\r\n           N;SORT-AS=\"Mann,James\":de Mann;Henry,James;;", "correct_text": "           FN:Rene van der Harten\r\n           N;SORT-AS=\"Harten,Rene\":van der Harten;Rene;J.;Sir;R.D.O.N.\r\n\r\n           FN:Robert Pau Shou Chang\r\n           N;SORT-AS=\"Pau Shou Chang,Robert\":Shou Chang;Robert;Pau;;\r\n\r\n           FN:Osamu Koura\r\n           N;SORT-AS=\"Koura,Osamu\":Koura;Osamu;;;\r\n\r\n           FN:Oscar del Pozo\r\n           N;SORT-AS=\"Pozo,Oscar\":del Pozo Triscon;Oscar;;;\r\n\r\n           FN:Chistine d'Aboville\r\n           N;SORT-AS=\"Aboville,Christine\":d'Aboville;Christine;;;\r\n\r\n           FN:H. James de Mann\r\n           N;SORT-AS=\"Mann,James\":de Mann;Henry;James;;", "notes": "The N properties in this example text are missing the \"additional names\" component.\r\n\r\nThree of the properties have a \"given name\" component which contains two values.  For these properties, the second value should be used as the value of the additional names component.\r\n\r\nThe other three properties do not have any additional names.  For these properties, an empty component should be added (a semi-colon character should be added to the property value).", "submit_date": "2013-08-29", "submitter_name": "Michael Angstadt", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3714", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "13.4.4.", "orig_text": "The flag NFL4_UFLG_DENSE of the nfl_util4 data type (field nflh_util\r\nof the data type nfsv4_1_file_layouthint4 and field nfl_util of data\r\ntype nfsv4_1_file_layout_ds_addr4)", "correct_text": "The flag NFL4_UFLG_DENSE of the nfl_util4 data type (field nflh_util\r\nof the data type nfsv4_1_file_layouthint4 and field nfl_util of data\r\ntype  nfsv4_1_file_layout4)", "notes": "nfsv4_1_file_layout_ds_addr4 data type does not have field nflh_util", "submit_date": "2013-08-31", "submitter_name": "Yuri Radchenko", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:30:08"}, {"errata_id": "7899", "doc-id": "RFC5925", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   o  Receive_SYN_traffic_key - the traffic key used to authenticate\r\n      incoming SYNs.  The source ISN is known (the TCP connection's\r\n      remote ISN), and the destination (remote) ISN is unknown (and so\r\n      the value 0 is used).", "correct_text": "   o  Receive_SYN_traffic_key - the traffic key used to authenticate\r\n      incoming SYNs.  The source ISN is known (the TCP connection's\r\n      remote ISN), and the destination (local) ISN is unknown (and so\r\n      the value 0 is used).", "notes": "\"remote side\" is referenced twice:  potential cut-and-paste error from the previous paragraph. Errata verified based on the discussion in tcpm mailing list : https://mailarchive.ietf.org/arch/msg/tcpm/wauBdtHFEqtltJUxTo7kdF8msIU/", "submit_date": "2024-04-17", "submitter_name": "Jean-Michel COMBES", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-05-15 10:45:00"}, {"errata_id": "3718", "doc-id": "RFC5996", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.15.3", "orig_text": "A client can be assigned an IPv6 address using the\r\nINTERNAL_IP6_ADDRESS Configuration payload. A minimal exchange might\r\nlook like this:\r\n\r\nCP(CFG_REQUEST) =\r\nINTERNAL_IP6_ADDRESS()\r\nINTERNAL_IP6_DNS()\r\nTSi = (0, 0-65535, :: - FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF)\r\nTSr = (0, 0-65535, :: - FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF)\r\n\r\nCP(CFG_REPLY) =\r\nINTERNAL_IP6_ADDRESS(2001:DB8:0:1:2:3:4:5/64)\r\nINTERNAL_IP6_DNS(2001:DB8:99:88:77:66:55:44)\r\nTSi = (0, 0-65535, 2001:DB8:0:1:2:3:4:5 - 2001:DB8:0:1:2:3:4:5)\r\nTSr = (0, 0-65535, :: - FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF)", "correct_text": "CP(CFG_REPLY) =\r\nINTERNAL_IP6_ADDRESS(2001:DB8:0:1:2:3:4:5/64)\r\nINTERNAL_IP6_DNS(2001:DB8:99:88:77:66:55:44)\r\nTSi = (0, 0-65535, 2001:DB8:0:1:2:3:4:5 - 2001:DB8:0:1:2:3:4:5)\r\nTSr = (0, 0-65535, 2001:DB8:0:1:: - 2001:DB8:0:1:FFFF:FFFF:FFFF:FFFF)", "notes": "The INTERNAL_IP6_ADDRESS returned in the CFG_REPLY is a 64 bit subnet, but the TSr returned in the CFG_REPLY shows a 0 bit subnet instead of the 64 bit subnet.\r\n\r\nKathleen told me to reject this! (Based on ipsecme list discussion.)\n --VERIFIER NOTES-- \nKathleen told me to!", "submit_date": "2013-09-04", "submitter_name": "Gerald Smith", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3719", "doc-id": "RFC2784", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3 and 5.2", "orig_text": "2.3. Reserved0 (bits 1-12)\r\n\r\n   A receiver MUST discard a packet where any of bits 1-5 are non-zero,\r\n   unless that receiver implements RFC 1701. Bits 6-12 are reserved for\r\n   future use. These bits MUST be sent as zero and MUST be ignored on\r\n   receipt.\r\n...\r\n5.2. RFC 1701 Compliant Transmitter\r\n\r\n   An RFC 1701 transmitter may set any of the Routing Present, Key\r\n   Present, Sequence Number Present, and Strict Source Route bits set to\r\n   one, and thus may transmit the RFC 1701 Key, Sequence Number or\r\n   Routing fields in the GRE header. As stated in Section 5.3, a packet\r\n   with non-zero bits in any of bits 1-5 MUST be discarded unless the\r\n   receiver implements RFC 1701.", "correct_text": "2.3. Reserved0 (bits 1-12)\r\n\r\n   A receiver MUST discard a packet where any of bits 1-4 are non-zero,\r\n   unless that receiver implements RFC 1701. Bits 5-12 are reserved for\r\n   future use. These bits MUST be sent as zero and MUST be ignored on\r\n   receipt.\r\n...\r\n5.2. RFC 1701 Compliant Transmitter\r\n\r\n   An RFC 1701 transmitter may set any of the Routing Present, Key\r\n   Present, Sequence Number Present, and Strict Source Route bits set to\r\n   one, and thus may transmit the RFC 1701 Key, Sequence Number or\r\n   Routing fields in the GRE header. As stated in Section 2.3, a packet\r\n   with non-zero bits in any of bits 1-4 MUST be discarded unless the\r\n   receiver implements RFC 1701.", "notes": "In the section entitled \"Packet header,\" RFC 1701 defined the one-bit Routing Present, Key Present, Sequence Number Present, and Strict Source Route fields in bits 1-4 , the Recursion Control field in bits 5-7, and a Flags field in bits 8-12.  It further stated that \"[b]its 5 through 12 are reserved for future use and MUST be transmitted as zero.\"  The language in RFC 2784 Section 5.2 makes it clear that incompatibilities between an  RFC 1701 transmitter and an RFC 2784 receiver arise only when one or more of the the Routing Present, Key Present, Sequence Number Present, and Strict Source Route bits are set, i.e., when any of bits 1-4 are set.\r\n\r\nVerifier's note: This looks like it was the intent of the authors, but the reader should note also RFC2890 which restores the K and S bits.\r\n", "submit_date": "2013-09-04", "submitter_name": "C, . M. Heard", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3720", "doc-id": "RFC2617", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.2.4", "orig_text": "username=\"Mufasa\", realm=myhost@testrealm.com\r\n", "correct_text": "username=\"Mufasa\", realm=\"myhost@testrealm.com\"\r\n", "notes": "The realm value within the Authorization header example is missing the quotes.", "submit_date": "2013-09-06", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3721", "doc-id": "RFC3887", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "S: Content-Type: multipart/related; boundary=%%%%; type=tracking-status\r\n", "correct_text": "S: Content-Type: multipart/related; boundary=%%%%;\r\nS:  type=\"message/tracking-status\"\r\n", "notes": "According to RFC 2387 section 3.1, the value of the type parameter for \r\nmultipart/related is supposed to be the \"MIME media type of the 'root' body \r\npart.\" Additionaly, section 3 of RFC 3886 specifically states that the value is \r\nsupposed to be \"message/tracking-status\". But all seven examples in section 4.1 \r\nshow just the subtype as the parameter value.\r\n\r\n*** This errata report applies to all of the examples in Section 4.1 ***", "submit_date": "2013-09-10", "submitter_name": "Ned Freed", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3724", "doc-id": "RFC6846", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.2", "orig_text": "tcp_opt_eol(nbits)\r\n{\r\nUNCOMPRESSED {\r\ntype =:= uncompressed_value(8, 0) [ 8 ];\r\npadding =:=\r\nuncompressed_value(nbits-8, 0) [ nbits-8 ];\r\n}\r\nCONTROL {\r\npad_len [ 8 ];\r\n}\r\nCOMPRESSED eol_list_item {\r\npad_len =:= compressed_value(8, nbits-8) [ 8 ];\r\n}\r\nCOMPRESSED eol_irregular {\r\npad_len =:= static;\r\nENFORCE(nbits-8 == pad_len.UVALUE);\r\n}\r\n}", "correct_text": "tcp_opt_eol(nbits)\r\n{\r\nUNCOMPRESSED {\r\ntype =:= uncompressed_value(8, 0) [ 8 ];\r\npadding =:=\r\nuncompressed_value(nbits-8, 0) [ nbits-8 ];\r\n}\r\nCONTROL {\r\npad_len [ 8 ];\r\n}\r\nCOMPRESSED eol_list_item {\r\n\r\n}\r\npad_len can be calculated at De compressor by following formula\r\npad_len = 4 -(length of uncompressed header formed till EOL byte % 4)\r\n\r\nCOMPRESSED eol_irregular {\r\npad_len =:= static;\r\nENFORCE(nbits-8 == pad_len.UVALUE);\r\n}\r\n}", "notes": "pad_len  has the potential to become Inferred field, by doing this we can save one byte in compressed header and can effectively increase the compression efficiency.\n --VERIFIER NOTES-- \nRejected, as this is not an errata, as the 'corrected text' is in fact a change to the formal definition of the header formats.", "submit_date": "2013-09-12", "submitter_name": "Raj Kumar", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3725", "doc-id": "RFC4880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.3.11.", "orig_text": "Some implementations do not represent the interest of a single user\r\n(for example, a key server).  Such implementations always trim local\r\ncertifications from any key they handle.\r\n\r\n", "correct_text": "Some implementations do not represent the interest of a single user\r\n(for example, a key server).  Such implementations MUST always trim \r\nlocal certifications from any key they handle.\r\n\r\n", "notes": "Inspiration taken from a thread on sks-devel: http://lists.nongnu.org/archive/html/sks-devel/2013-09/msg00022.html\r\n\n --VERIFIER NOTES-- \nAs agreed by the authors, MUST is unnecessary here.", "submit_date": "2013-09-14", "submitter_name": "Kwadronaut", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3726", "doc-id": "RFC5331", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "In the former case, an LSR distributes an upstream-assigned \r\nlabel binding for a FEC F if it is either (a) the ingress LSR \r\nfor FEC F, or (b) if it has already received an upstream label \r\nbinding for that FEC from its adjacent upstream LSR for FEC F, \r\nor (c) if it has received a request for a downstream label \r\nbinding from its upstream adjacent LSR.\r\n", "correct_text": "In the former case, an LSR distributes an upstream-assigned \r\nlabel binding for a FEC F if it is either (a) the ingress LSR \r\nfor FEC F, or (b) if it has already received an upstream label \r\nbinding for that FEC from its adjacent upstream LSR for FEC F, \r\nor (c) if it has received a request for a upstream label \r\nbinding from its downstream adjacent LSR.\r\n", "notes": "if a LSR has received a request for a downstream label binding from its upstream adjacent LSR, it will distributes a downstream-assigned label, not upstream-assigned-label. When a LSR has received a request for a upstream label binding from its downstream adjacent LSR, it may distributs a upstream-assigned label.\n --VERIFIER NOTES-- \nThe reporter has become confused between the different uses of \"upstream\" and \"downstream\" in the text.\r\n\r\nThe original text may have intended to imply that when an LSR receives a request for a downstream label from its upstream adjacent LSR then it\r\nwill use this as a trigger to send an upstream-assigned label to its\r\ndownstream adjacent LSR.\r\n\r\nThus the text is correct as it stands.", "submit_date": "2013-09-16", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3727", "doc-id": "RFC4601", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.6.1", "orig_text": "A6:  Store new assert winner as AssertWinner(S,G,I) and assert\r\n      winner metric as AssertWinnerMetric(S,G,I).\r\n      Set Assert Timer to Assert_Time.\r\n      If (I is RPF_interface(S)) AND (UpstreamJPState(S,G) == true)\r\n      set SPTbit(S,G) to TRUE.", "correct_text": "A6:  Store new assert winner as AssertWinner(S,G,I) and assert\r\n      winner metric as AssertWinnerMetric(S,G,I).\r\n      Set Assert Timer to Assert_Time.\r\n      If (I is RPF_interface(S)) AND (UpstreamJPState(S,G) == Joined)\r\n      set SPTbit(S,G) to TRUE.", "notes": "The UpstreamJPState(S,G) should be 'Joined' not 'true'.", "submit_date": "2013-09-16", "submitter_name": "Christopher Brown", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3728", "doc-id": "RFC5331", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "If the IPv4 network mask is greater than 12 bits, \r\nit is possible to map the remaining 20 bits into \r\na unique context label value.  ", "correct_text": "If the IPv4 network mask is equal or greater than 12 bits, \r\nit is possible to map the remaining bits into \r\na unique context label value.", "notes": "", "submit_date": "2013-09-16", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4476", "doc-id": "RFC5080", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Section 2", "orig_text": "Section 2.1.1. page 6:\r\nAny Access-Request packet that performs authorization checks,\r\nincluding Call Check, SHOULD contain a Message-Authenticator\r\nattribute.\r\n\r\nsection 2.2.2 page 11:\r\nHowever, Access-Request packets not containing a Message-\r\nAuthenticator attribute always affect the cache, even though they may\r\nbe trivially forged.  To avoid this issue, server implementations may\r\nbe configured to require the presence of a Message-Authenticator\r\nattribute in Access-Request packets.  Requests not containing a\r\nMessage-Authenticator attribute MAY then be silently discarded.\r\n\r\nClient implementations SHOULD include a Message-Authenticator\r\nattribute in every Access-Request to further help mitigate this\r\nissue.", "correct_text": "Section 2.1.1. page 6:\r\nAny Access-Request packet that performs authorization checks,\r\nincluding Call Check, Must contain a Message-Authenticator\r\nattribute.\r\n\r\nsection 2.2.2 page 11:\r\nHowever, Access-Request packets not containing a Message-\r\nAuthenticator attribute always affect the cache, in some case \r\nsuch forgery is not trivial.  To avoid this issue, server \r\nimplementations MUST be configured to require the presence of \r\na Message-Authenticator attribute in Access-Request packets.  \r\nRequests not containing a Message-Authenticator attribute \r\nMAY then be silently discarded.\r\n\r\nClient implementations MUST include a Message-Authenticator\r\nattribute in every Access-Request to further help mitigate this\r\nissue.\r\n", "notes": "Message-Authenticator attribute defined in [RFC3579] is mandatory attribute for IEEE802.1x EAP User and optional attribute for other type of users. In RFC5080, the message-authenticator is used as an optional attribute. However in practice, Radius Implementation without Message-Authenticator attribute for Integrity check protection has become serious issue.\r\nThe attacker can take advantage of Access-Request packets not containing a Message-Authenticator attribute to perform authentication successfully. \r\nAlternatively,the attacker can capture the packet and delete message-authenticatorattribute.\r\nIf the server do not check the message-authenticator attribute, the attacker can pass the authentication as well.\n --VERIFIER NOTES-- \n This suggested errata would result in a normative change to the RFC, which requires consensus.  The conversation has been moved to the RADext list to see if an update to the RFC is appropriate or not.", "submit_date": "2015-09-17", "submitter_name": "Michael Wang", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4477", "doc-id": "RFC5008", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "SHA-256 and SHA-256", "correct_text": "SHA-256 and SHA-384", "notes": "SHA-384 as other has algorithm", "submit_date": "2015-09-19", "submitter_name": "poima fuimaono", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3729", "doc-id": "RFC6287", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "   The input for timestamps is further qualified by G, size of the time-\r\n   step.  G can be specified in number of seconds, minutes, or hours:\r\n\r\n           +--------------------+------------------------------+\r\n           | Time-Step Size (G) |           Examples           |\r\n           +--------------------+------------------------------+\r\n           |       [1-59]S      | number of seconds, e.g., 20S |\r\n           |       [1-59]M      |  number of minutes, e.g., 5M |\r\n           |       [0-48]H      |  number of hours, e.g., 24H  |\r\n           +--------------------+------------------------------+\r\n\r\n                       Table 3: Time-step Size Table\r\n\r\n   Default value for G is 1M, i.e., time-step size is one minute and the\r\n   T represents the number of minutes since epoch time [UT].\r\n", "correct_text": "   The input for timestamps is further qualified by G, size of the time-\r\n   step.  G can be specified in number of seconds, minutes, or hours:\r\n\r\n           +--------------------+------------------------------+\r\n           | Time-Step Size (G) |           Examples           |\r\n           +--------------------+------------------------------+\r\n           |       [1-59]S      | number of seconds, e.g., 20S |\r\n           |       [1-59]M      |  number of minutes, e.g., 5M |\r\n           |       [1-48]H      |  number of hours, e.g., 24H  |\r\n           +--------------------+------------------------------+\r\n\r\n                       Table 3: Time-step Size Table\r\n\r\n   Default value for G is 1M, i.e., time-step size is one minute and the\r\n   T represents the number of minutes since epoch time [UT].\r\n", "notes": "I have changed \"[0-48]H\" to \"[1-48]H\".\r\n\r\nAccording to section 5.1, T is \"representing the number of time-steps (seconds, minutes, hours, or days depending on the specified granularity) since midnight UTC of January 1, 1970 [UT].\"\r\n\r\nHaving a granualarity of 0 is non-sense, and likely an editorial error.", "submit_date": "2013-09-17", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3730", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   This table summarizes all possible values for the CryptoFunction:\r\n\r\n     +---------------+--------------------+-------------------------+\r\n     |      Name     | HMAC Function Used |  Size of Truncation (t) |\r\n     +---------------+--------------------+-------------------------+\r\n     |  HOTP-SHA1-t  |      HMAC-SHA1     | 0 (no truncation), 4-10 |\r\n     | HOTP-SHA256-t |     HMAC-SHA256    | 0 (no truncation), 4-10 |\r\n     | HOTP-SHA512-t |     HMAC-SHA512    | 0 (no truncation), 4-10 |\r\n     +---------------+--------------------+-------------------------+\r\n", "correct_text": "   This table summarizes all possible values for the CryptoFunction:\r\n\r\n     +---------------+--------------------+-------------------------+\r\n     |      Name     | HMAC Function Used |  Size of Truncation (t) |\r\n     +---------------+--------------------+-------------------------+\r\n     |  HOTP-SHA1-t  |      HMAC-SHA1     | 0 (no truncation), 4-9  |\r\n     | HOTP-SHA256-t |     HMAC-SHA256    | 0 (no truncation), 4-9  |\r\n     | HOTP-SHA512-t |     HMAC-SHA512    | 0 (no truncation), 4-9  |\r\n     +---------------+--------------------+-------------------------+\r\n", "notes": "The change disallows 10 digit OCRA codes.  The reason for this is subtle and could be discussed.  An alternative to disallowing 10 digit codes is to add a Security Consideration discussion about the behaviour when 10 is used.\r\n\r\nThe Truncate function defined in RFC 4226 section 5.3 works on 31-bit numbers and uses modulo 10^Digit.  When Digit=10, that means 10^10.  However, 2^31 is smaller than 10^10.  This means that the output code can never take on values 2^31..10^10 which causes a significant bias in the number of valid codes.\r\n\r\nThe entire security analysis in RFC 4226 assumes this is not the case.  For example quoting section A.5 \"Security Analysis of HOTP\":  \"Suppose m = 10^Digit < 2^31,\".\r\n\r\nTo clarify, there is no attack enabled by this flaw. OCRA with 10 digit codes just doesn't offer as good security as it could.  10 digits is only roughly twice as secure as 9 digit codes instead of 10 times as one would expect.", "submit_date": "2013-09-17", "submitter_name": "Simon Josefsson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4478", "doc-id": "RFC4978", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "IMAP protoco", "orig_text": "RFC 4978 vs. RFC 5032 -- mismatch in UPDATES clauses\r\n\r\nWithin two weeks, two RFCs have been published specifying amendments\r\nto the IMAP protocol:\r\n\r\n  o  RFC 4978  -- COMPRESS\r\n\r\n  o  RFC 5032  -- WITHIN Search\r\n\r\nBoth IMAP extensions are similarly structured and arguably RFC 4978\r\nmodifies IMAP behaviour specified in RFC 3501 (and other IMAP\r\nextension specifications: IMAP TLS and SASL) to a much greater extent\r\nthan RFC 5032 does.\r\n\r\nNevertheless and surprisingly, only RFC 5032 has the line,\r\n  Updates: 3501\r\nin its document header and hence in its RFC index metadata.\r\n\r\nThis is apparently inconsistent.\r\n\r\nAn update to the RFC metadata incoporating the relation\r\n     \"RFC 4978 updates RFC 3501\"\r\nwould be welcome as well.\r\nReport New Errata", "correct_text": "TBD following modifications", "notes": "Both IMAP extensions are similarly structured and arguably RFC 4978\r\nmodifies IMAP behaviour specified in RFC 3501 (and other IMAP\r\nextension specifications: IMAP TLS and SASL) to a much greater extent\r\nthan RFC 5032 does.\r\n\r\nNevertheless and surprisingly, only RFC 5032 has the line,\r\n  Updates: 3501\r\nin its document header and hence in its RFC index metadata.\r\n\r\nThis is apparently inconsistent.\r\n\r\nAn update to the RFC metadata incoporating the relation\r\n     \"RFC 4978 updates RFC 3501\"\r\nwould be welcome as well.\r\nReport New Errata\n --VERIFIER NOTES-- \nFirst, errata isn't meant to be used for RFC metadata.\r\n\r\nSecond, the reason that RFC 5032 \"updates\" 3501 is that the grammar for the IMAP SEARCH command isn't set up to be extensible, so adding search terms is an update to the base.  In contrast, adding IMAP commands generally isn't.\r\n\r\nExcept that, yes, we have been inconsistent with that over time.", "submit_date": "2015-09-19", "submitter_name": "poima fuimaono", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4479", "doc-id": "RFC7234", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "   The Expires value is an HTTP-date timestamp, as defined in \r\n   <a href=\"#section-7.1.1.1\">Section</a>\r\n   <a href=\"#section-7.1.1.1\">7.1.1.1</a> of \r\n[<a href=\"./rfc7231\" title=\"&quot;Hypertext Transfer Protocol (HTTP/1.1)\r\n   : Semantics and Content&quot;\">RFC7231</a>].", "correct_text": "   The Expires value is an HTTP-date timestamp, as defined in \r\n   <a href=\"./rfc7231#section-7.1.1.1\">Section</a>\r\n   <a href=\"./rfc7231#section-7.1.1.1\">7.1.1.1</a> of \r\n[<a href=\"./rfc7231\" title=\"&quot;Hypertext Transfer Protocol (HTTP/1.1)\r\n   : Semantics and Content&quot;\">RFC7231</a>].", "notes": "The anchor should link to RFC 7231. It links to the not-existing section in RFC 7234 itself.\n --VERIFIER NOTES-- \nThe links are not in the RFCs, but in the HTML tools rendering.  The errata system isn't for that.", "submit_date": "2015-09-20", "submitter_name": "Florian Best", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5082", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.8.7.3", "orig_text": "N/A", "correct_text": "The value must not be in the future.", "notes": "If future values are allowed for LAST-MODIFIED, it makes it very difficult for software to perform change management for a VEVENT.\r\n\r\nSay for example, an event is imported from a source and the VEVENT has a future date. For example, December 20 2017 12:00:00Z\r\n\r\nThat event is then edited and assigned the actual correct date and time. Say August 9 2017 13:45:44Z.\r\n\r\nSoftware that examines the VEVENT's LAST-MODIFIED to determine if the VEVENT record has been modified will not see the VEVENT is updated. \r\n\r\nIn order for different systems to perform change management, the value for LAST-MODIFIED should NEVER be a future date.\n --VERIFIER NOTES-- \nThe description of the property already implies that it is not in the future.  And any handling of clock skew is an iTIP/CalDAV protocol issue, NOT a data format issue.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/calsify/x82GopunVcEh8y5UGSIsEIC3s6M/", "submit_date": "2017-08-10", "submitter_name": "George Sexton", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:22:17"}, {"errata_id": "3731", "doc-id": "RFC5755", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   Within EnvelopedData, the encapsulatedContentInfo identifies the\r\n   content type carried within the ciphertext.  In this case, the\r\n   contentType field of encapsulatedContentInfo MUST contain id-ct-\r\n   attrCertEncAttrs, which has the following value:", "correct_text": "   Within EnvelopedData, the encryptedContentInfo identifies the\r\n   content type carried within the ciphertext.  In this case, the\r\n   contentType field of encryptedContentInfo MUST contain id-ct-\r\n   attrCertEncAttrs, which has the following value:", "notes": "The EnvelopedData structure has no \"EncapsulatedContentInfo\". It has a \"EncryptedContentInfo\":\r\n\r\n      EnvelopedData ::= SEQUENCE {\r\n        version CMSVersion,\r\n        originatorInfo [0] IMPLICIT OriginatorInfo OPTIONAL,\r\n        recipientInfos RecipientInfos,\r\n        encryptedContentInfo EncryptedContentInfo,\r\n        unprotectedAttrs [1] IMPLICIT UnprotectedAttributes OPTIONAL }\r\n\r\nCMS objects that carry a \"EncapsulatedContentInfo\" are of type \"SignedData\":\r\n\r\n      SignedData ::= SEQUENCE {\r\n        version CMSVersion,\r\n        digestAlgorithms DigestAlgorithmIdentifiers,\r\n        encapContentInfo EncapsulatedContentInfo,\r\n        certificates [0] IMPLICIT CertificateSet OPTIONAL,\r\n        crls [1] IMPLICIT RevocationInfoChoices OPTIONAL,\r\n        signerInfos SignerInfos }\r\n\r\nSource: RFC 5652 (unchanged at least since RFC 3852).", "submit_date": "2013-09-18", "submitter_name": "Leonardo Cotta de Almeida", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3732", "doc-id": "RFC7011", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "A new Section 5.2 has been added to address wraparound of these\r\n     timestamp data types after they overflow in the years 2032-2038.\r\n", "correct_text": "A new Section 5.2 has been added to address wraparound of these\r\n    timestamp data types after they overflow.", "notes": "Since dateTimeSeconds is encoded in an _unsigned_ integer, it will wraparound in 2106 (as written correctly in section 5.2), not 2038.", "submit_date": "2013-09-21", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3733", "doc-id": "RFC6570", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.4.1", "orig_text": "Prefix modifiers are not applicable to variables that have composite \r\nvalues.", "correct_text": "Prefix modifiers are neither applicable to variables that have\r\ncomposite values, nor to a value which is a list of values or an\r\nassociative array of (name, value) pairs.", "notes": "It is not specified, what \"{list:1}\" with list=[\"red\",\"green\",\"blue\"] produces,\r\nsee discussion here https://github.com/uri-templates/uritemplate-test/pull/27\n --VERIFIER NOTES-- \n   The spec defines...\r\n\r\n   In Level 4 templates, a variable may have a composite value in the\r\n   form of a list of values or an associative array of (name, value)\r\n   pairs.  Such value types are not directly indicated by the template\r\n   syntax, but they do have an impact on the expansion process\r\n   (Section 3.2.1).\r\n\r\n...just three paragraphs above that sentence.  Hence, a list is a composite\r\nvalue and the quoted sentence below says that prefix modifiers are not\r\napplicable to them.", "submit_date": "2013-09-23", "submitter_name": "Franz X Antesberger", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3734", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "            The AuType specified in the packet must match the AuType\r\n            specified for the associated area.\r\n", "correct_text": "            The AuType specified in the packet must match the AuType\r\n            specified for the associated interface.\r\n", "notes": "In OSPFv2, authentication is configured per interface and not per area.\r\n    Appendix D clarifies this: \"The authentication type is configurable on a per-interface\r\n    (or equivalently, on a per-network/subnet) basis.\"", "submit_date": "2013-09-23", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3735", "doc-id": "RFC7003", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "6.1.  New RTCP XR Block Type Value\r\n\r\n   This document assigns the block type value 20 in the IANA \"RTP\r\n   Control Protocol Extended Reports (RTCP XR) Block Type Registry\" to\r\n   the \"Burst/Gap Discard Metrics Block\".\r\n\r\n", "correct_text": "6.1.  New RTCP XR Block Type Value\r\n\r\n   This document assigns the block type value 21 in the IANA \"RTP\r\n   Control Protocol Extended Reports (RTCP XR) Block Type Registry\" to\r\n   the \"Burst/Gap Discard Metrics Block\".\r\n\r\n", "notes": "This error was introduced in the final editorial process before publication. The change is needed because the correct value, as assigned in the IANA \"RTP\r\nControl Protocol Extended Reports (RTCP XR) Block Type Registry\", is 21.", "submit_date": "2013-09-24", "submitter_name": "Dan Romascanu", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3736", "doc-id": "RFC3633", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "14", "orig_text": "If a delegating router communicates with a requesting router through\r\na relay agent, the delegating router may need a protocol or other\r\nout-of-band communication to add routing information for delegated\r\nprefixes into the provider edge router.", "correct_text": "If a delegating router communicates with a requesting router through\r\na relay agent, the delegating router may need a protocol or other\r\nout-of-band communication to configure routing information for delegated\r\nprefixes on any router through which the requesting router may forward\r\ntraffic.", "notes": "This is a terminology correction.  See discussion on the email list DHCWG of the DHC WG of IETF, 24 September 2013, http://www.ietf.org/mail-archive/web/dhcwg/current/msg14709.html", "submit_date": "2013-09-25", "submitter_name": "Alexandru Petrescu (w/ text from R.  Droms)", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3737", "doc-id": "RFC5389", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "17", "orig_text": "The IAB has mandated that protocols developed for this purpose\r\ndocument a specific set of considerations. ", "correct_text": "The IAB has suggested that protocols developed for this purpose\r\ndocument a specific set of considerations. ", "notes": "The IAB UNSAF RFC (http://tools.ietf.org/html/rfc3424) is Informational, and the IAB hasn't \"mandated\" what IETF protocol documents contain for something like 20 years, if I understand correctly.", "submit_date": "2013-09-25", "submitter_name": "Spencer Dawkins", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4619", "doc-id": "RFC1055", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "ABSTRACT", "orig_text": "The TCP/IP protocol family runs over a variety of network media:\r\nIEEE 802.3 (ethernet) and 802.5 (token ring) LAN's, X.25 lines,\r\nsatellite links, and serial lines.  There are standard encapsulations\r\nfor IP packets defined for many of these networks, but there is no\r\nstandard for serial lines.  SLIP, Serial Line IP, is a currently a de\r\nfacto standard, commonly used for point-to-point serial connections\r\nrunning TCP/IP.  It is not an Internet standard.  Distribution of\r\nthis memo is unlimited.", "correct_text": "The TCP/IP protocol family runs over a variety of network media:\r\nIEEE 802.3 (ethernet) and 802.5 (token ring) LAN's, X.25 lines,\r\nsatellite links, and serial lines.  There are standard encapsulations\r\nfor IP packets defined for many of these networks.  SLIP, Serial\r\nLine IP, is commonly used for point-to-point serial connections\r\nrunning TCP/IP. Distribution of this memo is unlimited.", "notes": "Status is INTERNET STANDARD however the title says it's non-standard and the abstract says \"not a standard\".\r\n\r\nAn update could also refer to PPP as a standard... I've removed the line saying there is no standard for serial lines.", "submit_date": "2016-02-16", "submitter_name": "John Bradshaw", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3738", "doc-id": "RFC7006", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "6.1.  New SDP Attributes\r\n\r\n   IANA has registered new attributes in the \"att-field (both session\r\n   and media level)\" subregistry of the \"Session Description Protocol\r\n   (SDP) Parameters\" registry, according to the following registration\r\n   form:\r\n\r\nAttribute name: bcap\r\nLong form name: Bandwidth Capability\r\nType of attribute: Both media and session level\r\nSubject to charset: No\r\nPurpose: Negotiate session or media-level bandwidths\r\nAppropriate values: See RFC 7066, Section 3.1.1\r\nContact name: Miguel A. Garcia\r\nMiguel.A.Garcia@ericsson.com\r\n\r\nAttribute name: ccap\r\nLong form name: Connection Data Capability\r\nType of attribute: Both media and session level\r\nSubject to charset: No\r\nPurpose: Negotiate media-level connection data\r\nAppropriate values: See RFC 7066, Section 3.1.2\r\nContact name: Miguel A. Garcia\r\nMiguel.A.Garcia@ericsson.com\r\n\r\n\r\nAttribute name: icap\r\nLong form name: Title Capability\r\nType of attribute: Both media and session level\r\nSubject to charset: Yes\r\nPurpose: Negotiate human-readable information\r\ndescribing the session or media\r\nAppropriate values: See RFC 7066, Section 3.1.3\r\nContact name: Miguel A. Garcia\r\nMiguel.A.Garcia@ericsson.com\r\n", "correct_text": "6.1.  New SDP Attributes\r\n\r\n   IANA has registered new attributes in the \"att-field (both session\r\n   and media level)\" subregistry of the \"Session Description Protocol\r\n   (SDP) Parameters\" registry, according to the following registration\r\n   form:\r\n\r\nAttribute name: bcap\r\nLong form name: Bandwidth Capability\r\nType of attribute: Both media and session level\r\nSubject to charset: No\r\nPurpose: Negotiate session or media-level bandwidths\r\nAppropriate values: See RFC 7006, Section 3.1.1\r\nContact name: Miguel A. Garcia\r\nMiguel.A.Garcia@ericsson.com\r\n\r\nAttribute name: ccap\r\nLong form name: Connection Data Capability\r\nType of attribute: Both media and session level\r\nSubject to charset: No\r\nPurpose: Negotiate media-level connection data\r\nAppropriate values: See RFC 7006, Section 3.1.2\r\nContact name: Miguel A. Garcia\r\nMiguel.A.Garcia@ericsson.com\r\n\r\n\r\nAttribute name: icap\r\nLong form name: Title Capability\r\nType of attribute: Both media and session level\r\nSubject to charset: Yes\r\nPurpose: Negotiate human-readable information\r\ndescribing the session or media\r\nAppropriate values: See RFC 7006, Section 3.1.3\r\nContact name: Miguel A. Garcia\r\nMiguel.A.Garcia@ericsson.com\r\n", "notes": "The Appropriate values for the three New SDP Attributes have cited an incorrect RFC.\r\nIt should be RFC 7006, rather than RFC 7066.", "submit_date": "2013-09-25", "submitter_name": "pearl liang", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3739", "doc-id": "RFC6056", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   NetBSD 5.0.1 does not obfuscate its ephemeral port numbers.  It\r\n   selects ephemeral port numbers from the range 49152-65535, starting\r\n   from port 65535, and decreasing the port number for each ephemeral\r\n   port number selected [NetBSD].\r\n", "correct_text": "   NetBSD 5.0.1 does not obfuscate its ephemeral port numbers.  It\r\n   selects ephemeral port numbers from the range 49152-65535, starting\r\n   from port 65535, and decreasing the port number for each ephemeral\r\n   port number selected [NetBSD].\r\n\r\n   NetBSD 6.0 supports RFC 6056 Algorithms 1, 2, 3, 4 and 5 with port\r\n   numbers from the range 49152-65535 as documented in [NetBSD-RFC6056].\r\n", "notes": "The project implemented the RFC 6056 algorithms last year to obfuscate the ephemeral port numbers.\r\n\r\n[NetBSD-RFC6056] reference is:\r\nThe NetBSD Project, \"NetBSD Miscellaneous Information Manual -- RFC 6056, Randomization Algorithms\", man page - section 7, August 2011.\n --VERIFIER NOTES-- \nThe proposed text is not an errata but an addendum which isn't handled via the errata procedures. ", "submit_date": "2013-09-26", "submitter_name": "Jean-Yves Migeon", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4638", "doc-id": "RFC3830", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.8", "orig_text": "   The timestamp is as defined in NTP [NTP], i.e., a 64-bit number in\r\n   seconds relative to 0h on 1 January 1900.  An implementation MUST be\r\n   aware of (and take into account) the fact that the counter will\r\n   overflow approximately every 136th year.  It is RECOMMENDED that the\r\n   time always be specified in UTC.\r\n", "correct_text": "   The timestamp is as defined in NTP [NTP], i.e., a 64-bit number in\r\n   seconds relative to 0h on 1 January 1900.  It is RECOMMENDED that the\r\n   time always be specified in UTC.\r\n", "notes": "A 32-bt number of seconds overflows in about 136.1 years. A 64-bit number of seconds will, for all practical purposes, not overflow.\r\n\r\n(The use in Section 4.2.3 is of a 64 bit number, not a 32 bit number, so 64 bits is correct.)\n --VERIFIER NOTES-- \n   Only 32 bits of the 64 count seconds. That's clear from the referenced NTP spec.", "submit_date": "2016-03-15", "submitter_name": "Christopher Dearlove", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3756", "doc-id": "RFC6489", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "         This\r\n         request MUST include the same SIA extension that is present in\r\n         the CURRENT CA certificate.", "correct_text": "The AccessDescriptions with accessMethods of id-ad-caRepository in the\r\nrequest's SIA extension MUST be the same as the AccessDescriptions with\r\naccessMethods of id-ad-caRepository in the CURRENT CA certificate's SIA\r\nextension.", "notes": "An RFC6487-compliant CA certificate's SIA extension has AccessDescriptions for both its repository (id-ad-caRepository) and its manifest (id-ad-rpkiManifest). Section 2 of RFC6489 also states, \"While the 'current' and 'new' CA instances share a single repository publication point, each CA has its own CRL and its own manifest.\" This indicates that only the id-ad-caRepository AccessDescriptions should be identical, not the id-ad-rpkiManifest AccessDescriptions.", "submit_date": "2013-10-16", "submitter_name": "David Mandelberg", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3757", "doc-id": "RFC3183", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.2", "orig_text": "   An S/MIME signed attribute is used to indicate the type of signature.\r\n   This should be used in conjunction with the naming conventions\r\n   specified in the previous section.  When an S/MIME signed message\r\n   containing the signature type attribute is received it triggers the\r\n   software to verify that the correct naming convention has been used.\r\n\r\n   The ASN.1 [4] notation of this attribute is: -\r\n\r\n      SignatureType ::= SEQUENCE OF OBJECT IDENTIFIER\r\n", "correct_text": "   An S/MIME signed attribute is used to indicate the type of signature.\r\n   This should be used in conjunction with the naming conventions\r\n   specified in the previous section.  When an S/MIME signed message\r\n   containing the signature type attribute is received it triggers the\r\n   software to verify that the correct naming convention has been used.\r\n\r\n   The following object identifier identifies the SignatureType\r\n   attribute:\r\n\r\n      id-aa-signatureType OBJECT IDENTIFIER ::= { iso(1) \r\n          member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) 2 28 }\r\n\r\n   The ASN.1 [4] notation of this attribute is:\r\n\r\n      SignatureType ::= SEQUENCE OF OBJECT IDENTIFIER\r\n", "notes": "The specification provides the syntax for the SignatureType attribute,\r\nbut it fails to provide the object identifier for the attribute.  The object\r\nidentifier was assigned, but for some reason it is not provided in the\r\ndocument.", "submit_date": "2013-10-18", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2021-04-22 21:59:47"}, {"errata_id": "3758", "doc-id": "RFC6376", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6.1.", "orig_text": "v= Version of the DKIM key record (plain-text; RECOMMENDED, default\r\n      is \"DKIM1\").  If specified, this tag MUST be set to \"DKIM1\"\r\n      (without the quotes).  This tag MUST be the first tag in the\r\n      record.  Records beginning with a \"v=\" tag with any other value\r\n      MUST be discarded.  Note that Verifiers must do a string\r\n      comparison on this value; for example, \"DKIM1\" is not the same as\r\n      \"DKIM1.0\".", "correct_text": "v= Version of the DKIM key record (plain-text; RECOMMENDED, default\r\n      is \"1\").  If specified, this tag MUST be set to \"1\"\r\n      (without the quotes).  This tag MUST be the first tag in the\r\n      record.  Records beginning with a \"v=\" tag with any other value\r\n      MUST be discarded.  Note that Verifiers must do a string\r\n      comparison on this value; for example, \"1\" is not the same as\r\n      \"1.0\".", "notes": "The \"DKIM\" prefix in the version field is unnecessary.\r\nfor example the followings are snipped from an actual email via gmail.com:\r\n\r\nDKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;\r\n        d=gmail.com; s=20120113;\r\n        h=mime-version:from:date:message-id:subject:to:content-type;\r\n        bh=46j07/8gDec8jTto/znsrAKiXDj6YJ7Wa2DCoZuhwXc=;\r\n        b=h6SViP6DcHgPwydJD6aztqyKd0UmCN3SdwmqZd0uCHmqrprphjN8qQ8AnBDhbwDhAa\r\n         DfHIDS8RSegELKtzsp95u+DnIFg1uNhIukKVpGT+9MqxfCSAFk7WpMe2O/2gcLruilTe\r\n         MxkKJ29s64NGevYewKtI8s73xHmbzD1NFH9ugdow8i9E16kgQ+vAx56qvbFTBwdEEw8I\r\n         6Bteu3tXEsYYbU/9Akm2GXS+6PFiDSbv47u3EmhRQIOK3e8DvcobrpicjL7vUwBCpQuf\r\n         J/c+Acdq4GZQoMoG9imzku0K2o0w33CZ1xUR1bARJKCVaJfWeHiEMQ2OJ9A6ZtqpyK0z\r\n         1Ftg==\n --VERIFIER NOTES-- \nThe reporters are confused.  The text in Section 3.6.1 is about the key records in the DNS, and the document is correct.  Section 3.5 is where the dkim-signature header field is described (and that is also correct).", "submit_date": "2013-10-20", "submitter_name": "Majid Tajamolian & Nazilla Karkon", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5083", "doc-id": "RFC6275", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "Section 7.2 of RFC6275 introduces a new flag, called the R bit. This seems to update RFC 4861 section 4.6.2. However, there is no mention in RFC6275 or in RFC4861 that this happened.\r\n\r\n--- Notes ---\r\n\r\nThanks for (ahem) flagging this.\r\n\r\nRFC 8425 was produced to create an IANA registry of PIO flags and formally update RFC 4861.", "submit_date": "2017-08-10", "submitter_name": "Mikael Abrahamsson", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2023-02-08 05:43:36"}, {"errata_id": "3740", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "       BEGIN:VTIMEZONE\r\n       TZID:America/New_York\r\n       BEGIN:STANDARD\r\n       DTSTART:19981025T020000\r\n       TZOFFSETFROM:-0400\r\n       TZOFFSETTO:-0500\r\n       TZNAME:EST\r\n       END:STANDARD\r\n       BEGIN:DAYLIGHT\r\n       DTSTART:19990404T020000\r\n       TZOFFSETFROM:-0500\r\n       TZOFFSETTO:-0400\r\n       TZNAME:EDT\r\n       END:DAYLIGHT\r\n       END:VTIMEZONE", "correct_text": "\u00a0 \u00a0 \u00a0 \u00a0BEGIN:VTIMEZONE\r\n\u00a0 \u00a0 \u00a0 \u00a0TZID:America/New_York\r\n\u00a0 \u00a0 \u00a0 \u00a0BEGIN:STANDARD\r\n\u00a0 \u00a0 \u00a0 \u00a0DTSTART:19671029T020000\r\n\u00a0 \u00a0 \u00a0 \u00a0RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU;UNTIL=20061029T060000Z\r\n\u00a0 \u00a0 \u00a0 \u00a0TZOFFSETFROM:-0400\r\n\u00a0 \u00a0 \u00a0 \u00a0TZOFFSETTO:-0500\r\n\u00a0 \u00a0 \u00a0 \u00a0TZNAME:EST\r\n\u00a0 \u00a0 \u00a0 \u00a0END:STANDARD\r\n\u00a0 \u00a0 \u00a0 \u00a0BEGIN:DAYLIGHT\r\n\u00a0 \u00a0 \u00a0 \u00a0DTSTART:19870405T020000\r\n\u00a0 \u00a0 \u00a0 \u00a0RRULE:FREQ=YEARLY;BYMONTH=4;BYDAY=1SU;UNTIL=20060402T070000Z\r\n\u00a0 \u00a0 \u00a0 \u00a0TZOFFSETFROM:-0500\r\n\u00a0 \u00a0 \u00a0 \u00a0TZOFFSETTO:-0400\r\n\u00a0 \u00a0 \u00a0 \u00a0TZNAME:EDT\r\n\u00a0 \u00a0 \u00a0 \u00a0END:DAYLIGHT\r\n\u00a0 \u00a0 \u00a0 \u00a0END:VTIMEZONE", "notes": "The time zone specification in the original example does not cover the event in the example (which occurs on 19980312, before both of the listed onsets).\r\n\r\n---- Verifier notes -----\r\nThe corrected text uses part of the VTIMEZONE definition in the example on page 68.", "submit_date": "2013-09-29", "submitter_name": "Daniel Barkalow", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3741", "doc-id": "RFC1195", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3.5", "orig_text": "5.3.5 Level 2 Link State PDU\r\n    ...\r\n    IP Internal Reachability Information -- IP addresses within the\r\n    routing domain reachable directly via one or more interfaces on\r\n    this Intermediate system.\r\n", "correct_text": "    IP Internal Reachability Information -- IP addresses within the\r\n    routing domain reachable directly via one or more interfaces on\r\n    this Intermediate system, or indirectly via level 1 routing.\r\n                            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^", "notes": "Currently, the relevant text in 5.3.2 and 5.3.5 are identical, but the 5.3.5 text should have the above text added.\r\n\r\nThis would match the following (see the last clause):\r\n\r\n5.2 Overview of IP-Specific Information for IS-IS\r\n\r\n   The \"IP Internal Reachability Information\" field ...\r\n   If included in level 1 LSPs,\r\n   this field includes only entries directly reachable by the router\r\n   which originates the LSP, via one of its interfaces. If included in\r\n   level 2 LSPs, this field includes only entries reachable by the\r\n   router which originates the LSP, either via one of its interfaces, or\r\n   indirectly via level 1 routing.\r\n\r\n\r\nI have marked this report as \"held for document update\" although I do not expect any new revision to RFC 1195. This \"correction\" is more of a clarification. The \"corrected\" text can be successfully deduced from the rest of the document such that nobody reading the document in its entirety would be led to make an incorrect and/or non-interoperable implementation.\r\n\r\nFurthermore, any clarifications necessary have previously been published in the informational RFCs 3719 and in particular 3787.\r\n\r\nHowever, there is some value in retaining this record for future enquiring minds (and to stop a similar report being raised in the future).", "submit_date": "2013-10-01", "submitter_name": "Jeffrey Zhang", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3742", "doc-id": "RFC3592", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5", "orig_text": "increase the UAS count by 10 when it\r\ndetermines that available time has been entered.", "correct_text": "increase the UAS count by 10 when it\r\ndetermines that unavailable time has been entered.", "notes": "the word \"available\" should be changed to \"unavailable\";", "submit_date": "2013-10-04", "submitter_name": "Anshul Chandra", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3743", "doc-id": "RFC6112", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": " \"is ASCII string \"KeyExchange\"", "correct_text": "\"is ASCII string \"KEYEXCHANGE\"\r\n", "notes": "MIT Kerberos is the only public implementation of this draft and when I created the second implementation I noticed that the MIT folks had used the wrong constant in their code.\r\n\r\nAfter talking to them it makes more sense to change the specification then break backward compatibility with old clients since there no other implementations that we know about.", "submit_date": "2013-10-08", "submitter_name": "Love H\u00f6rnquist \u00c5strand", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3744", "doc-id": "RFC3325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "A P-Asserted-Identity header field value MUST consist of exactly one\r\nname-addr or addr-spec.", "correct_text": "A P-Asserted-Identity header field value MUST consist of exactly one\r\nname-addr or addr-spec.  If the URI contains a comma, the URI MUST\r\nbe enclosed in angle brackets (< and >).", "notes": "While the P-Asserted-Identity and P-Preferred-Identity header fields have an ambiguity only for \",\" (not for \";\" and \"?\"), we note that usage of \";\" and \"?\" also must be enclosed in angle brackets to preserve consistency with the RFC 3261 section 20 bracket rule.", "submit_date": "2013-10-08", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3894", "doc-id": "RFC3325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.2", "orig_text": "A P-Preferred-Identity header field value MUST consist of exactly one\r\nname-addr or addr-spec.", "correct_text": "A P-Preferred-Identity header field value MUST consist of exactly one\r\nname-addr or addr-spec.  If the URI contains a comma, the URI MUST\r\nbe enclosed in angle brackets (< and >).", "notes": "While the P-Asserted-Identity and P-Preferred-Identity header fields have an ambiguity only for \",\" (not for \";\" and \"?\"), we note that usage of \";\" and \"?\" also must be enclosed in angle brackets to preserve consistency with the RFC 3261 section 20 bracket rule.", "submit_date": "2014-02-15", "submitter_name": "Richard Barnes", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7060", "doc-id": "RFC8960", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.5", "orig_text": "  augment \"/rt:routing/rt:ribs/rt:rib/rt:routes/rt:route/\"\r\n        + \"rt:next-hop/rt:next-hop-options/rt:next-hop-list/\"\r\n        + \"rt:next-hop-list/rt:next-hop\" {\r\n    description\r\n      \"This leaf augments the 'next-hop-list' case of IP unicast\r\n       routes.\";\r\n    uses nhlfe-multiple-contents {\r\n      when \"/rt:routing/rt:ribs/rt:rib/rt:routes/rt:route\"\r\n         + \"/mpls:mpls-enabled = 'true'\";\r\n    }\r\n  }\r\n", "correct_text": "  augment \"/rt:routing/rt:ribs/rt:rib/rt:routes/rt:route/\"\r\n        + \"rt:next-hop/rt:next-hop-options/rt:next-hop-list/\"\r\n        + \"rt:next-hop-list/rt:next-hop\" {\r\n    description\r\n      \"This leaf augments the 'next-hop-list' case of IP unicast\r\n       routes.\";\r\n    uses nhlfe-multiple-contents {\r\n      when \"../../../../../mpls:mpls-enabled = 'true'\";\r\n    }\r\n  }\r\n", "notes": "The original YANG statements make the \"uses\" statement apply to all rt:rib and all rt:route instances as soon as there is at least one instance that has mpls:mpls-enabled set to true. I suspect this is not the author's intent.\r\n\r\nThe corrected YANG statements make the \"uses\" statement only apply to the specific route instances that have mpls:mpls-enabled set to true. There are also other ways to fix this issue.", "submit_date": "2022-07-29", "submitter_name": "Jan Lindblad", "verifier_id": "", "verifier_name": "James N Guichard", "update_date": "2023-05-31 18:14:45"}, {"errata_id": "7901", "doc-id": "RFC9359", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Echo Request/Reply for Enabled In Situ OAM (IOAM) Capabilities", "correct_text": "Echo Request/Reply for Enabled In Situ Operation, Administration,\r\nand Maintenance (IOAM) Capabilities", "notes": "Neither OAM nor IOAM are well-known and need to be expanded at first use, this is the title so this is the first occurrence.\r\n\r\n== Verifier note\r\n\r\nThe change is also consistent with the use in RFC 9486, RFC 9378, RFC 9322, RFC 9326, RFC 9197, etc.", "submit_date": "2024-04-19", "submitter_name": "Loa Andersson", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-28 10:32:28"}, {"errata_id": "3779", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.10", "orig_text": "represents the last Monday of the month.  The numeric value in a\r\nBYDAY rule part with the FREQ rule part set to YEARLY corresponds\r\nto an offset within the month when the BYMONTH rule part is\r\npresent, and corresponds to an offset within the year when the\r\nBYWEEKNO or BYMONTH rule parts are present.  If an integer\r\nmodifier is not present, it means all days of this type within the\r\nspecified frequency.  For example, within a MONTHLY rule, MO\r\nrepresents all Mondays within the month.  The BYDAY rule part MUST\r\nNOT be specified with a numeric value when the FREQ rule part is\r\nnot set to MONTHLY or YEARLY.  Furthermore, the BYDAY rule part\r\nMUST NOT be specified with a numeric value with the FREQ rule part\r\nset to YEARLY when the BYWEEKNO rule part is specified.", "correct_text": "represents the last Monday of the month.  The numeric value in a\r\nBYDAY rule part with the FREQ rule part set to YEARLY corresponds\r\nto an offset within the month when the BYMONTH rule part is\r\npresent, and corresponds to an offset within the year when the\r\nBYMONTH rule part is not present.  If an integer\r\nmodifier is not present, it means all days of this type within the\r\nspecified frequency.  For example, within a MONTHLY rule, MO\r\nrepresents all Mondays within the month.  The BYDAY rule part MUST\r\nNOT be specified with a numeric value when the FREQ rule part is\r\nnot set to MONTHLY or YEARLY.  Furthermore, the BYDAY rule part\r\nMUST NOT be specified with a numeric value with the FREQ rule part\r\nset to YEARLY when the BYWEEKNO rule part is specified.", "notes": "Other than the missing 'not', pointed out in the errata 1913, the original text contradicts itself regarding BYWEEKNO.\r\nAt the beggining of the paragraph, it says that when using a YEARLY frequency with BYWEEKNO rule part, the integer part identifies an offset within the year (i.e. either in [-53, 0) or (0, 53], as it can be a week day in a valid week of the year, even if it is not clearly specified), but at the end of the paragraph, it states that offsets should not be specified in conjunction with a BYWEEKNO rule part.", "submit_date": "2013-10-31", "submitter_name": "Daniele Mancini", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3746", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "*. Section 3.3. (Classification of routers) says:\r\n\r\n        AS boundary routers\r\n            A router that exchanges routing information with routers\r\n            belonging to other Autonomous Systems.  Such a router\r\n            advertises AS external routing information throughout the\r\n            Autonomous System.  The paths to each AS boundary router are\r\n            known by every router in the AS.  This classification is\r\n            completely independent of the previous classifications: AS\r\n            boundary routers may be internal or area border routers, and\r\n            may or may not participate in the backbone.\r\n\r\n*. Section 10.6 (Receiving Database Description Packets) says:\r\n\r\n\t      When the router accepts a received Database Description Packet\r\n        as the next in sequence the packet contents are processed as\r\n        follows.  For each LSA listed, the LSA's LS type is checked for\r\n        validity.  If the LS type is unknown (e.g., not one of the LS\r\n        types 1-5 defined by this specification), or if this is an AS-\r\n        external-LSA (LS type = 5) and the neighbor is associated with a\r\n        stub area, generate the neighbor event SeqNumberMismatch and\r\n        stop processing the packet.\r\n\r\n*. Section 13. (The Flooding Procedure) says:\r\n\r\n    (3) Else if this is an AS-external-LSA (LS type = 5), and the area\r\n        has been configured as a stub area, discard the LSA and get the\r\n        next one from the Link State Update Packet.  AS-external-LSAs\r\n        are not flooded into/throughout stub areas (see Section 3.6).\r\n\r\n    (4) Else if the LSA's LS age is equal to MaxAge, and there is\r\n        currently no instance of the LSA in the router's link state\r\n        database, and none of router's neighbors are in states Exchange\r\n", "correct_text": "*. Section 3.3. (Classification of routers) should say:\r\n\r\n        AS boundary routers\r\n            A router that exchanges routing information with routers\r\n            belonging to other Autonomous Systems.  Such a router\r\n            advertises AS external routing information throughout the\r\n            Autonomous System.  The paths to each AS boundary router are\r\n            known by every router in the AS (except stub areas).  This\r\n            classification is\r\n            completely independent of the previous classifications: AS\r\n            boundary routers may be internal or area border routers, and\r\n            may or may not participate in the backbone.\r\n\r\n*. Section 10.6 (Receiving Database Description Packets) should say:\r\n\r\n\t      When the router accepts a received Database Description Packet\r\n        as the next in sequence the packet contents are processed as\r\n        follows.  For each LSA listed, the LSA's LS type is checked for\r\n        validity.  If the LS type is unknown (e.g., not one of the LS\r\n        types 1-5 defined by this specification), or if this is an AS-\r\n        external-LSA (LS type = 5) and the neighbor is associated with a\r\n        stub area, or if this is a type-4 summary LSA and the neighbor\r\n\t\tis associated with a stub area, generate the neighbor event\r\n        SeqNumberMismatch and stop processing the packet.\r\n\r\n*. Section 13. (The Flooding Procedure) should say:\r\n\r\nThere should be an additional step in between steps 3 and 4  in\r\nSection 13. The additional step below is denoted 3.5:\r\n\r\n    (3) Else if this is an AS-external-LSA (LS type = 5), and the area\r\n        has been configured as a stub area, discard the LSA and get the\r\n        next one from the Link State Update Packet.  AS-external-LSAs\r\n        are not flooded into/throughout stub areas (see Section 3.6).\r\n\r\n    (3.5) Else if this is a type-4 Summary LSA (LS type = 4), and the\r\n        area has been configured as a stub area, discard the LSA and get\r\n        the next one from the Link State Update Packet.  Type-4 Summary\r\n        LSAs are not flooded into/throughout stub areas.\r\n\r\n    (4) Else if the LSA's LS age is equal to MaxAge, and there is\r\n        currently no instance of the LSA in the router's link state\r\n        database, and none of router's neighbors are in states Exchange\r\n", "notes": "This whole note is regarding stub areas.\r\n\r\nRFC 2328 is already consistent with respect to AS-external-LSAs\r\n(LS type =5). The RFC explicitly indicates that they should be neither\r\nsent nor received in stub areas.\r\n\r\nBut RFC 2328 seems to have some omissions with respect to type-4\r\nSummary LSA (LS type = 4). The RFC explicitly indicates that these\r\nLSAs should never be sent in stub areas. But it does not mention what\r\nshould be done if these LSAs are received in stub areas.\r\n\r\nThe above updates try to remedy this omission.\r\n\r\nIf the neighbor is associated with a stub area, then we should never\r\nreceive a type-4 summary LSA from that neighbor. Here are the relevant\r\nquotes from the RFC:\r\n\r\nSection 12.4.3.1.(Originating summary-LSAs into stub areas):\r\n\r\n              \"As specified in Section 12.4.3, Type 4 summary-LSAs\r\n               (ASBR-summary-LSAs) are never originated into stub\r\n               areas.\"\r\n\r\nSection 4.2. (AS external routes):\r\n\r\n        \"To utilize external routing information, the path to all routers\r\n        advertising external information must be known throughout the AS\r\n        (excepting the stub areas).  For that reason, the locations of\r\n        these AS boundary routers are summarized by the (non-stub) area\r\n        border routers.\"\r\n\r\n\r\nThis is an omission from RFC 2328. \r\n\r\nhttp://www.ietf.org/mail-archive/web/ospf/current/msg06720.html", "submit_date": "2013-10-09", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3748", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.3.3", "orig_text": "The following table has been used to initialize the parameters registry.", "correct_text": "The following table has been used to initialize the data types registry.", "notes": "This is a copy/paste failure from the previous section.", "submit_date": "2013-10-10", "submitter_name": "Philipp Kewisch", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6161", "doc-id": "RFC6750", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4", "orig_text": "4.  Example Access Token Response\r\n\r\n   Typically, a bearer token is returned to the client as part of an\r\n   OAuth 2.0 [RFC6749] access token response.  An example of such a\r\n   response is:\r\n\r\n     HTTP/1.1 200 OK\r\n     Content-Type: application/json;charset=UTF-8", "correct_text": "4.  Example Access Token Response\r\n\r\n   Typically, a bearer token is returned to the client as part of an\r\n   OAuth 2.0 [RFC6749] access token response.  An example of such a\r\n   response is:\r\n\r\n     HTTP/1.1 200 OK\r\n     Content-Type: application/json", "notes": "The IANA registration (see https://tools.ietf.org/html/rfc8259#section-11) does not support any parameters for the `application/json` media type. The `charset=UTF-8` parameter used in the example is therefore non-compliant and ought to be omitted.", "submit_date": "2020-05-08", "submitter_name": "Herbert Valerio Riedel", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "3783", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "chanstring = %x01-07 / %x08-09 / %x0B-0C / %x0E-1F / %x21-2B\r\nchanstring =/ %x2D-39 / %x3B-FF", "correct_text": "chanstring = *49(%x01-06 / %x08-09 / %x0B-0C / %x0E-1F / %x21-2B /\r\n             %x2D-39 / %x3B-FF)\r\n", "notes": "Unfortunately the text in 1.3 which elaborates the interpretation of this BNF rule is unclear as to whether it's permitted to have 0 chanstring characters.  The total length of the \"channel\" construct is 50 characters, so no chanstring can ever be more than 49 characters... but not all 49 characters will always be available, depending upon how \"channel\" is constructed.\r\n\r\nNote that errata 385 addresses the same rule but a different issue. Errata 385 has been taken into consideration in this correction.", "submit_date": "2013-11-05", "submitter_name": "Diman Todorov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3787", "doc-id": "RFC3345", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "      1) Ra has the following installed in its BGP table, with the path\r\n         learned via AS2 marked best:", "correct_text": "      1) Ra has the following installed in its BGP table, with the path\r\n         learned via AS10 marked best:", "notes": "The above text is related to a discussion of topology depicted in Figure 1. This figure does not have AS2 at all. The text should refer to AS10 instead.", "submit_date": "2013-11-05", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3784", "doc-id": "RFC2812", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.5", "orig_text": "mask = *( nowild / noesc wildone / noesc wildmany )", "correct_text": "mask = *( nowild / (noesc wildone) / (noesc wildmany) )", "notes": "\n --VERIFIER NOTES-- \nThe suggested change is not wrong, but neither is the existing text.  In ABNF, concatenation\r\ntakes precedence over alternatives.", "submit_date": "2013-11-05", "submitter_name": "Diman Todorov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3785", "doc-id": "RFC2812", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "params = *14( SPACE middle ) [ SPACE \":\" trailing ]\r\n=/ 14( SPACE middle ) [ SPACE [ \":\" ] trailing ]", "correct_text": "params = *13( SPACE middle ) [ SPACE \":\" trailing ]\r\n=/ 14( SPACE middle ) [ SPACE [ \":\" ] trailing ]", "notes": "\n --VERIFIER NOTES-- \nThe correction is not wrong, but the original text is not wrong either.  They're functionally equivalent.", "submit_date": "2013-11-05", "submitter_name": "Diman Todorov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3786", "doc-id": "RFC2812", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.", "orig_text": "If multiple parameters is presented, then each MUST be checked for\r\nvalidity and appropriate responses MUST be sent back to the client.", "correct_text": "If multiple parameters are present, then each MUST be checked for\r\nvalidity and appropriate responses MUST be sent back to the client.", "notes": "We don't use errata for minor, obvious typos.", "submit_date": "2013-11-05", "submitter_name": "Diman Todorov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3789", "doc-id": "RFC3470", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "It some cases, protocols have been defined", "correct_text": "In some cases, protocols have been defined", "notes": "Simple typo\r\n\r\n----- Verifier notes -----\r\nSimple typos just go into \"hold for document update\".  Best to resist the urge to submit them, unless they're likely to cause confusion.", "submit_date": "2013-11-07", "submitter_name": "Erik Wilde", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3749", "doc-id": "RFC2047", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "   An 'encoded-word' may not be more than 75 characters long, including\r\n   'charset', 'encoding', 'encoded-text', and delimiters.  If it is\r\n   desirable to encode more text than will fit in an 'encoded-word' of\r\n   75 characters, multiple 'encoded-word's (separated by CRLF SPACE) may\r\n   be used.\r\n", "correct_text": "   An 'encoded-word' may not be more than 75 characters long, including\r\n   'charset', 'encoding', 'encoded-text', and delimiters.  If it is\r\n   desirable to encode more text than will fit in an 'encoded-word' of\r\n   75 characters, multiple 'encoded-word's (separated by CRLF SPACE) may\r\n   be used.\r\n\r\n   Multiple encoded words MAY exist on a single line, in that event a \r\n   SPACE MUST separate the encoded words, and after decoding the SPACE \r\n   is not rendered.", "notes": "Section 2 makes no mention of multiple encoded words per line, or how to handle it.  However, the example at the end specifically illustrates what should happen (section 8)\r\n\r\n   (=?ISO-8859-1?Q?a?= =?ISO-8859-2?Q?_b?=)    (a b)\r\n\r\n           In order to cause a SPACE to be displayed between two strings\r\n           of encoded text, the SPACE MAY be encoded as part of one of\r\n           the 'encoded-word's.\n --VERIFIER NOTES-- \n   \r\n<<\r\nI think I just hadn't fully digested the whole RFC.  I was just re-reading the RFC in working to come up with the proposed change, and then I saw this in section 6.2:\r\n\r\n   When displaying a particular header field that contains multiple\r\n   'encoded-word's, any 'linear-white-space' that separates a pair of\r\n   adjacent 'encoded-word's is ignored.  (This is to allow the use of\r\n   multiple 'encoded-word's to represent long strings of unencoded text,\r\n   without having to separate 'encoded-word's where spaces occur in the\r\n   unencoded text.)\r\n>>\r\n\r\nSo the RFC is correct as it stands.  The text in section 2 is specifically talking about multiple encoded-words on multiple lines.  Section 6.2 covers the other case.", "submit_date": "2013-10-11", "submitter_name": "Alec H. Peterson", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3750", "doc-id": "RFC5521", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "The format and definition of PKS when it appears as an XRO subobject\r\nare as defined in [RFC5520], except for the definition of the L bit.\r\nThe L bit of the PKS subobject in the XRO MUST be ignored.\r\n", "correct_text": "The format and definition of PKS when it appears as an XRO subobject\r\nare as defined in [RFC5520], except that the L bit described in \r\n[RFC5220] is replaced with the X bit as discussed in Section 2.1.1 \r\nof this document.", "notes": "The original text did not describe the value of the X bit in \r\nPKS subobjects.", "submit_date": "2013-10-15", "submitter_name": "Dana Kutenicsova", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3751", "doc-id": "RFC6690", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   URI-Reference  = <defined in [RFC3986]>\r\n ", "correct_text": "   URI-reference  = <defined in [RFC3986]>\r\n ", "notes": "Although RFC5234 does specify that rule names are case-insensitive, URI-reference is \"misspelled\" URI-Reference throughout ABNF rules in section 2.  It is correct in the remainder of the text.\r\n\r\n----- Verifier notes -----\r\nAn unimportant typo that will not cause confusion for anyone.\r\nWe can change it if/when the document is updated.", "submit_date": "2013-10-15", "submitter_name": "Peter A. Bigot", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3752", "doc-id": "RFC2418", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "In order\r\nto take advantage of this service, working group mailing lists\r\nMUST include the address \"wg_acronym-archive@lists.ietf.org\"\r\n(where \"wg_acronym\" is the working group acronym) in the\r\nmailing list in order that a copy of all mailing list messages\r\nbe recorded in the Secretariat's archive.  ", "correct_text": "In order\r\nto take advantage of this service, working group mailing lists\r\nMUST include the address \"wg_acronym-archive@ietf.org\"\r\n(where \"wg_acronym\" is the working group acronym) in the\r\nmailing list in order that a copy of all mailing list messages\r\nbe recorded in the Secretariat's archive.  ", "notes": "'@lists.ietf.org' was changed to '@ietf.org' in the year 2005.\r\n\r\nAlthough the RFC errata system is not typically used to update email addresses that were correct at the time of publication, this report results from discussion with Russ Housley and Jari Arkko.", "submit_date": "2013-10-15", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 07:32:15"}, {"errata_id": "3753", "doc-id": "RFC4377", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Authors' Addresses, it says:", "orig_text": "Comments should be made directly to the MPLS mailing list\r\nat mpls@lists.ietf.org.", "correct_text": "", "notes": "This report has been modified from the original report submitted.\r\n\r\n'@lists.ietf.org' was changed to '@ietf.org' in the year 2005 so that comments should be made directly to the MPLS mailing list at mpls@ietf.org.\r\n\r\nHowever, this type of statement is typically removed from Internet-Drafts when they are published as RFCs, and it was only the presence of this statement in an unusual place in the document that caused it to be retained. \r\n\r\nTherefore, this statement should be removed in entirety.", "submit_date": "2013-10-15", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3754", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "-- Naming attributes of type X520countryName (digraph from IS 3166)", "correct_text": "-- Naming attributes of type X520countryName (digraph from ISO 3166)", "notes": "typo in ASN.1 comment (\"IS\", should be \"ISO\")", "submit_date": "2013-10-16", "submitter_name": "Michal Bozon", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3755", "doc-id": "RFC1818", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "header", "orig_text": "[Existing header does not contain \"Updates\".]", "correct_text": "Updates: 1796", "notes": "RFC 1796 defines the \"status\" datum of RFCs.  The \"category\" datum is similar, except that \"Draft Standard\", \"Proposed Standard\", and \"Internet Standard\" statuses are merged in the \"Standards Track\" category.\r\n\r\nRFC 1818 introduces the \"Best Current Practice\" status/category, but its metadata does not state that it updates RFC 1796 and consequently RFC 1796's metadata does not state that it is updated by RFC 1818.\r\n\r\nThis lack of pointers shows up in rfc-index.txt, making it difficult to track down the current list of categories/statuses.", "submit_date": "2013-10-16", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4571", "doc-id": "RFC7633", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "2.2.  TLS Feature, X.509 Extension\r\n\r\n   In order to avoid the confusion that would occur in attempting to\r\n   specify an X.509 extension describing the use of TLS extensions, in\r\n   this document the term \"extension\" is reserved to refer to X.509v3\r\n   extensions and the term \"TLS feature extension\" is used to refer to\r\n   what the TLS specification [RFC5246] refers to as an \"extension\".\r\n", "correct_text": "2.2.  TLS Feature, X.509 Extension\r\n\r\n   In order to avoid the confusion that would occur in attempting to\r\n   specify an X.509 extension describing the use of TLS extensions, in\r\n   this document the term \"TLS feature extension\" is used to refer to\r\n   the X.509 extension specified in this document.\r\n", "notes": "(There is no platonically correct version of the text, as the problem is with the entire RFC.)\r\n\r\nVirtually every instance of the term \"TLS feature extension\" in the RFC refers to the X.509 extension. The sole instance of it referring to TLS extensions is the first paragraph of section 3.\r\n\r\nOf the uses of the simple term \"extension,\" the first two paragraphs of Section 3 contain the only three uses consistent with 2.2. The other three (\"choose to have a certificate issued with this extension\",\"critical extensions MUST reject the certificate\",\"key usage extension\") refer to X.509 extensions.\n --VERIFIER NOTES-- \nIssue was discussed during AD eval and IESG eval so this is not an error.\r\nAn anonymously submitted erratum is also odd.\r\n", "submit_date": "2015-12-28", "submitter_name": "Anonymous", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3759", "doc-id": "RFC6376", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.6.1.", "orig_text": "   h= Acceptable hash algorithms (plain-text; OPTIONAL, defaults to\r\n      allowing all algorithms).  A colon-separated list of hash\r\n      algorithms that might be used.  Unrecognized algorithms MUST be\r\n      ignored.  Refer to Section 3.3 for a discussion of the hash\r\n      algorithms implemented by Signers and Verifiers.  The set of\r\n      algorithms listed in this tag in each record is an operational\r\n      choice made by the Signer.", "correct_text": "   a= Acceptable hash algorithms (plain-text; OPTIONAL, defaults to\r\n      allowing all algorithms).  A colon-separated list of hash\r\n      algorithms that might be used.  Unrecognized algorithms MUST be\r\n      ignored.  Refer to Section 3.3 for a discussion of the hash\r\n      algorithms implemented by Signers and Verifiers.  The set of\r\n      algorithms listed in this tag in each record is an operational\r\n      choice made by the Signer.", "notes": "The correct tag is \"a=\" for algorithms not \"h=\". The latter is used for the \"List of Included Headers in the Signature\"\n --VERIFIER NOTES-- \nThe reporters are confused.  The text in Section 3.6.1 is about the key records in the DNS, and the document is correct.  Section 3.5 is where the dkim-signature header field is described (and that is also correct).", "submit_date": "2013-10-20", "submitter_name": "Majid Tajamolian & Nazila Karkon", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3760", "doc-id": "RFC6655", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "....is 8 octets.  Each value of the\r\n   nonce_explicit MUST be distinct for each distinct invocation of the\r\n   GCM encrypt function for any fixed key.  Failure to meet...", "correct_text": "....is 8 octets.  Each value of the\r\n   nonce_explicit MUST be distinct for each distinct invocation of the\r\n   CCM encrypt function for any fixed key.  Failure to meet...", "notes": "GCM should be corrected to CCM. The draft discusses the AES-CCM mode of operation.\r\n\r\nspt: Don't think implementers will be confused by this so HFDU.", "submit_date": "2013-10-22", "submitter_name": "Sandeep S. Kumar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3761", "doc-id": "RFC6655", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "In DTLS, the 64-bit seq_num is the 16-bit epoch concatenated with the\r\n48-bit seq_num.", "correct_text": "In DTLS, the 64-bit sequence number is the 16-bit epoch concatenated \r\nwith the 48-bit sequence_number in the order they appear on the wire.", "notes": "In DTLS 1.2 (RFC 6347, Sec 4.3.1.), the 48 bit sequence number is indicated as sequence_number. There is no mention of seq_num in the DTLS RFC. \r\nThe additional ordering information is used to keep it consistent with MAC computation in DTLS RFC 6347, Sec 4.1.2.1.)", "submit_date": "2013-10-22", "submitter_name": "Sandeep S. Kumar", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3762", "doc-id": "RFC5015", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5.3.1.", "orig_text": "      Best-Offer\r\n         Used by the DF to record the identity and advertised metrics of\r\n         the router that has made the last offer, for use when sending\r\n         the Path message.\r\n", "correct_text": "      Best-Offer\r\n         Used by the DF to record the identity and advertised metrics of\r\n         the router that has made the last offer, for use when sending\r\n         the Pass message.\r\n", "notes": "typo: Path message should be Pass message", "submit_date": "2013-10-22", "submitter_name": "Christopher Brown", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3763", "doc-id": "RFC5007", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "\r\n4.3.3.  Receipt of LEASEQUERY-REPLY\r\n\r\n   A successful LEASEQUERY-REPLY is one without an OPTION_STATUS_CODE\r\n   option (or an OPTION_STATUS_CODE option with a success code).  There\r\n   are three variants:\r\n\r\n   1.  If the server had bindings for the requested client, the message\r\n       includes an OPTION_CLIENT_DATA option and the requestor extracts\r\n       the client data from the LEASEQUERY-REPLY and updates its binding\r\n       information database.  If the OPTION_CLIENT_DATA contains no\r\n       OPTION_CLT_TIME, the requestor SHOULD silently discard the\r\n       OPTION_CLIENT_DATA option.\r\n\r\n...\r\n\r\n4.3.4.  Handling DHCPv6 Client Data from Multiple Sources\r\n\r\n...\r\n\r\n   The requestor SHOULD use the OPTION_CLT_TIME to resolve data\r\n   conflicts originated from different servers, and SHOULD accept data\r\n   with most recent OPTION_CLT_TIME.", "correct_text": "4.3.3. Receipt of LEASEQUERY-REPLY\r\n\r\n   A successful LEASEQUERY-REPLY is one without an OPTION_STATUS_CODE\r\n   option (or an OPTION_STATUS_CODE option with a success code).  There\r\n   are three variants:\r\n\r\n   1.  If the server had bindings for the requested client, the message\r\n       includes an OPTION_CLIENT_DATA option and the requestor extracts\r\n       the client data from the LEASEQUERY-REPLY and updates its binding\r\n       information database.  \r\n\r\n...\r\n\r\n4.3.4. Handling DHCPv6 Client Data from Multiple Sources\r\n\r\n...\r\n\r\n   The requestor SHOULD use the OPTION_CLT_TIME to resolve data\r\n   conflicts originated from different servers, and SHOULD accept data\r\n   with most recent OPTION_CLT_TIME. If OPTION_CLT_TIME is not\r\n   present in a response, then response from other servers having\r\n   OPTION_CLT_TIME should be preferred.", "notes": "Consider the scenario of DHCPv6 Failover (as mentioned in RFC 7031), there will be cases where only one server (Main) would have communicated with the client. Bindings for the client will be present on both servers, but the partner server (Backup) will not have Client Last Transaction Time. When a requestor sends Leasequery to the backup server, the response should not contain OPTION_CLT_TIME.\r\n\r\nFurther, consider the following scenarios:\r\n1. Requestor gets response for Leasequery from both servers (main and backup).\r\nIn this scenario, response having OPTION_CLT_TIME should be preferred by the requestor. This is the justification for adding the text in Section 4.3.4.\r\n\r\n2. Requestor gets response for Leasequery from only from one server (as other server is down).\r\nConsider main to be down. So, the requestor gets response only from Backup. The requestor should still accept this data. This is justification of removing the text from Section 4.3.3.", "submit_date": "2013-10-23", "submitter_name": "Darpan Malhotra", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3764", "doc-id": "RFC7049", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4.2", "orig_text": "   C2                        -- Tag 2\r\n      29                     -- Byte string of length 9\r\n         010000000000000000  -- Bytes content", "correct_text": "   C2                        -- Tag 2\r\n      49                     -- Byte string of length 9\r\n         010000000000000000  -- Bytes content", "notes": "Major type 2, length 9 is encoded as 0x49, not 0x29.", "submit_date": "2013-10-24", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3790", "doc-id": "RFC3470", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2", "orig_text": "n/a", "correct_text": "n/a", "notes": "While at the time of writing the Infoset was the most relevant spec, now there's XDM, which is more relevant now.\r\n\r\nIt also might make sense to describe the differences between XML syntax and the more abstract view of Infoset/XML in detail, in particular when it comes to nasty edge cases such as unserializable Infosets, and the fact that some information present in the XML syntax gets lost in the more abstract view.\n --VERIFIER NOTES-- \nAs the report says,\"at the time of writing the Infoset was the most relevant spec\" -- and errata are here to report things that would have been considered errors at the time of writing, but they got missed.  This isn't that.", "submit_date": "2013-11-07", "submitter_name": "Erik Wilde", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4572", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "18.35.3", "orig_text": "A server MUST NOT use the same client ID for two different\r\nincarnations of an eir_clientowner.", "correct_text": "A server MUST NOT use the same client ID for two different\r\nincarnations of an eia_clientowner.", "notes": "", "submit_date": "2015-12-30", "submitter_name": "Sai Chakravarthy Tangudu", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:14:13"}, {"errata_id": "3765", "doc-id": "RFC6265", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "Servers SHOULD NOT include more than one Set-Cookie header field in\r\nthe same response with the same cookie-name.  (See Section 5.2 for\r\nhow user agents handle this case.)\r\n\r\n", "correct_text": "Servers MUST NOT include more than one Set-Cookie header field in\r\nthe same response.", "notes": "The HTTP specification (RFC 2616) says in its section 4.2: \"Multiple message-header fields with the same field-name MAY be present in a message if and only if the entire field-value for that header field is defined as a comma-separated list [i.e., #(values)]. [...]\"\r\n\r\nSince the mentioned condition is not fulfilled in the case of Set-Cookie headers, only one Set-Cookie header is permissible in an HTTP message.\r\n\r\nThis also applies to the third example in section 3.1, even though it is not clearly specified there whether or not the two Set-Cookies originate from the same server response.\r\n\r\nOn the internet many HTTP messages contain multiple Set-Cookie headers, and this seems to make sense in order to avoid additional roundtrips. This, however, (1) does not match the HTTP specification, see above, and therefore (2) cannot be used with implementations stating that they were HTTP compatible and consequently only allow a single Set-Cookie header per response. Clearly, this is not a defect of those implementations, but of the specifications which are at least mistakable (if not contradictory).\n --VERIFIER NOTES-- \nPart of the point of RFC 6265 is to document how cookies are actually\r\nused on the Internet.  As is noted in the introduction, existing use\r\ndoesn't always conform to what it should. \u00a0In particular, we know that\r\nRFC 6265 doesn't always match up with RFC 2616, because the actual usage\r\nisn't always strictly correct.\r\n\r\nThe variation from RFC 2616 that this report notes is intentional,\r\ndocumenting the existing usage, and this errata report is rejected.", "submit_date": "2013-10-25", "submitter_name": "Johannes Knaupp", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3766", "doc-id": "RFC3931", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2.3", "orig_text": "Further, it is far easier to change a compromised L2TPv3\r\n   Cookie than a compromised IP address,\" and a cryptographically random\r\n   [RFC1750] value is far less likely to be discovered by brute-force\r\n   attacks compared to an IP address.", "correct_text": "Further, it is far easier to change a compromised L2TPv3\r\n   Cookie than a compromised IP address, and a cryptographically random\r\n   [RFC1750] value is far less likely to be discovered by brute-force\r\n   attacks compared to an IP address.", "notes": "Erroneous quotation mark.", "submit_date": "2013-10-26", "submitter_name": "Chaz Granholm", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3768", "doc-id": "RFC5832", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.2", "orig_text": "Parameters a and b take the following values in this example:\r\n\r\n   a = 7\r\n   a = 0x7\r\n\r\n   b = 43308876546767276905765904595650931995\\\\\r\n   942111794451039583252968842033849580414\r\n\r\n   b = 0x5FBFF498AA938CE739B8E022FBAFEF40563\\\\\r\n   F6E6A3472FC2A514C0CE9DAE23B7E\r\n", "correct_text": "Parameters a and b take the following values in this example:\r\n\r\n   a = 57896044618658097711785492504343953926\\\\\r\n   634992332820282019728792003956564821034    (-7 mod p)\r\n\r\n   a = 0x8000000000000000000000000000\\\\\r\n   00000000000000000000000000000000042A\r\n\r\n   b = 43308876546767276905765904595650931995\\\\\r\n   942111794451039583252968842033849580414\r\n\r\n   b = 0x5FBFF498AA938CE739B8E022FBAFEF40563\\\\\r\n   F6E6A3472FC2A514C0CE9DAE23B7E\r\n", "notes": "The elliptic curve coefficient 'a' in section 7.1.2 is incorrectly defined, with the result that the generator point P in section 7.1.5 fails to satisfy the congruence relationship (1) in section 5.1.\r\n\r\nThe mistake emanates from the appendix in the GOST R 34.10-2001 standard.\r\n \r\nDefining  a  to be  ( -7 mod p ) restores consistency, at least to the extent that the generator point P lies on the specified curve.", "submit_date": "2013-10-27", "submitter_name": "Dick Franks", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3769", "doc-id": "RFC2985", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.1", "orig_text": "   emailAddress ATTRIBUTE ::= {\r\n           WITH SYNTAX IA5String (SIZE(1..pkcs-9-ub-emailAddress))\r\n           EQUALITY MATCHING RULE pkcs9CaseIgnoreMatch\r\n           ID pkcs-9-at-emailAdress\r\n   }\r\n", "correct_text": "   emailAddress ATTRIBUTE ::= {\r\n           WITH SYNTAX IA5String (SIZE(1..pkcs-9-ub-emailAddress))\r\n           EQUALITY MATCHING RULE pkcs9CaseIgnoreMatch\r\n           ID pkcs-9-at-emailAddress\r\n   }\r\n", "notes": "The ASN.1 is correct in Appendix A: ASN.1 Module.\r\n\r\nspt: For those who missed it there is a \"d\" missing from the pkcs-9-at-emailAddress in the original text. As it's in the text and not the module, I'll mark this as hold for document as well as reclassifying it as editorial.", "submit_date": "2013-10-27", "submitter_name": "Sean Leonard", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3770", "doc-id": "RFC7049", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "   ...\r\n   needed encoding (such as encoding \"0\" as 0b000_11101 followed by two\r\n   bytes of 0x00) as long as the application can decode an integer of\r\n   ...", "correct_text": "   ...\r\n   needed encoding (such as encoding \"0\" as 0b000_11001 followed by two\r\n   bytes of 0x00) as long as the application can decode an integer of\r\n   ...", "notes": "Additional information value for 2-byte unsigned integer is 25, which encodes as 0b11001.", "submit_date": "2013-10-29", "submitter_name": "Peter Klavins", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3771", "doc-id": "RFC4274", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "(1)  typo (missing word)\r\n\r\nThe second paragraph of Section 2.2, on page 4 of RFC 4274, says:\r\n\r\n   BGP uses an incremental update strategy to conserve bandwidth and\r\n|  processing power.  That is, after initial exchange of complete\r\n   routing information, a pair of BGP routers exchanges only the changes\r\n   to that information.  [...]\r\n\r\n\r\n\r\n", "correct_text": "It should say:\r\n\r\n   BGP uses an incremental update strategy to conserve bandwidth and\r\n|  processing power.  That is, after the initial exchange of complete\r\n   routing information, a pair of BGP routers exchanges only the changes\r\n   to that information.  [...]\r\n", "notes": "", "submit_date": "2006-07-08", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3781", "doc-id": "RFC5385", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4.2.", "orig_text": "Install the \"Generic/Text Only\" printer, as found under \"Generic\" in\r\nthe available print drivers list.  Configure the printer to save to a\r\nfile or click 'save to file' when printing.  A printed file will have\r\na .prn file suffix.\r\n", "correct_text": "Install the \"Generic/Text Only\" printer, as found under \"Generic\" in\r\nthe available print drivers list.  Configure the printer to save to a\r\nfile or click 'save to file' when printing.  Configure the paper size\r\nto be US Letter. A printed file will have a .prn file suffix.\r\n\r\n\r\n", "notes": "Adding the information about the required paper size configuration.\r\nUsing other paper sizes (e.g., A4) leads to pagination issues.", "submit_date": "2013-11-04", "submitter_name": "Martin Vigoureux", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3782", "doc-id": "RFC4273", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "There are several management objects defined in this MIB that have a\r\nMAX-ACCESS clause of read-write and/or read-create.", "correct_text": "There are several management objects defined in this MIB that have a\r\nMAX-ACCESS clause of read-write.", "notes": "No object in this MIB has MAX-ACCESS clause of \"read-create\".", "submit_date": "2013-11-04", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6162", "doc-id": "RFC2100", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Like lothlorien, pothole, or kobyashi-maru,", "correct_text": "Like lothlorien, pothole, or kobayashi-maru,", "notes": "Missed \"a\".\r\nKobayashi-maru is the name of a starship in Star Trek.", "submit_date": "2020-05-10", "submitter_name": "Toshio SARUTA", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2020-05-10 19:20:45"}, {"errata_id": "3792", "doc-id": "RFC2445", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "     BEGIN:VCALENDAR PRODID:-//xyz Corp//NONSGML PDA Calendar Verson\r\n     1.0//EN VERSION:2.0 BEGIN:VEVENT DTSTAMP:19960704T120000Z\r\n     UID:uid1@host.com ORGANIZER:MAILTO:jsmith@host.com\r\n     DTSTART:19960918T143000Z DTEND:19960920T220000Z STATUS:CONFIRMED\r\n     CATEGORIES:CONFERENCE SUMMARY:Networld+Interop Conference\r\n     DESCRIPTION:Networld+Interop Conference\r\n       and Exhibit\\nAtlanta World Congress Center\\n\r\n      Atlanta, Georgia END:VEVENT END:VCALENDAR\r\n", "correct_text": "     BEGIN:VCALENDAR\r\n     PRODID:-//xyz Corp//NONSGML PDA Calendar Verson1.0//EN\r\n     VERSION:2.0\r\n     BEGIN:VEVENT\r\n     DTSTAMP:19960704T120000Z\r\n     UID:uid1@host.com\r\n     ORGANIZER:MAILTO:jsmith@host.com\r\n     DTSTART:19960918T143000Z\r\n     DTEND:19960920T220000Z\r\n     STATUS:CONFIRMED\r\n     CATEGORIES:CONFERENCE\r\n     SUMMARY:Networld+Interop Conference\r\n     DESCRIPTION:Networld+Interop Conference\r\n       and Exhibit\\nAtlanta World Congress Center\\n\r\n      Atlanta, Georgia\r\n     END:VEVENT\r\n     END:VCALENDAR\r\n", "notes": "CRLF are missing in every content line.  The example violates at least the very first definition of iCalendar object stated at section 4.4\r\n\r\nicalobject = 1*(\"BEGIN\" \":\" \"VCALENDAR\" CRLF\r\n             icalbody\r\n             \"END\" \":\" \"VCALENDAR\" CRLF)\r\n\r\n----- Verifier Notes -----\r\nYes, and this was fixed in the updated document, RFC 5545.  RFC 2445 has been\r\nobsolete since 2009.", "submit_date": "2013-11-10", "submitter_name": "Seak, Teng-Fong", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3793", "doc-id": "RFC2549", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "In the Security Considerations", "orig_text": "", "correct_text": "Hawks.", "notes": "Per mnot.\r\n\r\n--- Verifier Notes ---\r\n 1. This erratum doesn't say which phrase in the original\r\n    text needs changing.\r\n 2. Errata are intended to note Editorial or Technical changes;\r\n    as far as I can see this one is neither.", "submit_date": "2013-11-10", "submitter_name": "Anne van Kesteren", "verifier_id": "", "verifier_name": "Nevil Brownlee (ISE)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3794", "doc-id": "RFC1774", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   To allow graceful coexistence with EGP and OSPF, BGP provides support\r\n   for carrying both EGP and OSPF derived exterior routes BGP also\r\n   allows to carry statically defined exterior routes or routes derived\r\n   by other IGP information.", "correct_text": "   To allow graceful coexistence with EGP and OSPF, BGP provides support\r\n   for carrying both EGP and OSPF derived exterior routes. BGP also\r\n   allows to carry statically defined exterior routes or routes derived\r\n   by other IGP information.", "notes": "This is a run-on sentence, missing \".\".", "submit_date": "2013-11-10", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3795", "doc-id": "RFC3611", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "rtcp-xr-attrib = \"a=\" \"rtcp-xr\" \":\" [xr-format *(SP xr-format)] CRLF", "correct_text": "rtcp-xr-attrib = \"a=\" \"rtcp-xr\" [ \":\" xr-format *(SP xr-format)] CRLF", "notes": "The ABNF for the attribute is causing some interoperability issues.\r\nThe text as written shows that the colon is required while the parameters are optional.\r\nThis leaves the format: \"a=rtcp-xr:\" the required format.  Vendors are using \"a=rtcp-xr\" which strictly violates the ABNF above. Moving the ':' into the optional part seems correct.", "submit_date": "2013-11-11", "submitter_name": "Stephen James", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4480", "doc-id": "RFC4920", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "For types 10 and 23, the Value field has the format:\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |   Length      |     IS-IS Area Identifier                     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      ~                     IS-IS Area Identifier (continued)         ~\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n       Length\r\n\r\n          Length of the actual (non-padded) IS-IS Area Identifier in\r\n          octets.  Valid values are from 2 to 11 inclusive.", "correct_text": "For types 10 and 23, the Value field has the format:\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |   Length      |     IS-IS Area Identifier                     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      ~                     IS-IS Area Identifier (continued)         ~\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n       Length\r\n\r\n          Length of the actual (non-padded) IS-IS Area Identifier in\r\n          octets.  Valid values are from 1 to 13 inclusive.", "notes": "IS-IS area IDs can vary from 1 to 13 bytes in length (max NSAP length is 20, minus 1 byte for NSEL, minus 6 bytes for SysID).\r\n\r\n*Noted by Jonathan Hardwick in another document that was using the same data.", "submit_date": "2015-09-20", "submitter_name": "Dhruv Dhody", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6176", "doc-id": "RFC2392", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "--boundary-example-1\r\n\r\nContent-ID: <foo4*foo1@bar.net>\r\nContent-Type: IMAGE/GIF\r\nContent-Transfer-Encoding: BASE64", "correct_text": "--boundary-example-1\r\nContent-ID: <foo4*foo1@bar.net>\r\nContent-Type: IMAGE/GIF\r\nContent-Transfer-Encoding: BASE64", "notes": "There should not be  a blank line between \"--boundary-example-1\"\r\nand \"Content-ID: <foo4*foo1@bar.net>\". See the syntax provided\r\nby the BNF term \"multipart-body\" in RFC 2046.", "submit_date": "2020-05-16", "submitter_name": "Michael Witten (mfwitten)", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-05-16 17:14:01"}, {"errata_id": "3796", "doc-id": "RFC3736", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   Client message: sent by a DHCP relay agent in a Relay-forward message\r\n                   to carry the client message to a server (section 20)\r\n\r\n   Server message: sent by a DHCP server in a Relay-reply message to\r\n                   carry a response message to the relay agent (section\r\n                   20)\r\n", "correct_text": "   Relay Message: sent by a DHCP relay agent in a Relay-forward\r\n                  message to carry the client message to a server or\r\n                  sent by a DHCP server in a Relay-reply message to\r\n                  carry a response message to the relay agent (section\r\n                  20)\r\n", "notes": "The correct name for the option carries in the Relay-forward message is \"Relay Message\".  That option is shared by both Relay-forward and Relay-reply messages to carry a DHCPv6 message from or to (respectively) a DHCPv6 client.\r\n\r\nI've marked this errata as \"technical\" because it might have an impact on implementations.", "submit_date": "2013-11-11", "submitter_name": "Ralph Droms", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3797", "doc-id": "RFC2743", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4.5", "orig_text": "   Outputs:\r\n\r\n   o  major_status INTEGER,\r\n\r\n   o  minor_status INTEGER,\r\n\r\n   o  output_name INTERNAL NAME  -- caller must release with\r\n   -- GSS_Release_name()\r\n\r\n   Return major_status codes:\r\n\r\n   o  GSS_S_COMPLETE indicates that a valid name representation is\r\n   output in output_name and described by the type value in\r\n   output_name_type.\r\n", "correct_text": "   Outputs:\r\n\r\n   o  major_status INTEGER,\r\n\r\n   o  minor_status INTEGER,\r\n\r\n   o  output_name INTERNAL NAME  -- caller must release with\r\n   -- GSS_Release_name()\r\n\r\n   Return major_status codes:\r\n\r\n   o  GSS_S_COMPLETE indicates that a valid name representation is\r\n   output in output_name.\r\n", "notes": "The description of the GSS_S_COMPLETE return value from GSS_Import_name() indicates that the contents of the output_name field are \"described by the type value in output_name_type\".  There is no such output_name_type parameter.", "submit_date": "2013-11-12", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3798", "doc-id": "RFC2981", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "mteTriggerSampleType's description:\r\nIf only 'existence' is set in mteTriggerTest this object has\r\nno meaning.\"\r\n", "correct_text": "If no 'boolean' is set in mteTriggerTest this object has\r\nno meaning.\"\r\n", "notes": "mteTriggerThresholdDeltaRising was added to mteTriggerThresholdTable from the version draft-ietf-disman-event-mib-09.txt and mteTriggerThresholdTable can both deal 'absoluteValue' and 'deltaValue', so mteTriggerSampleType has mean for 'boolean' only. (mteTriggerSampleType has no changed from draft-ietf-disman-event-mib-06.txt)\r\n\r\n was added to\n --VERIFIER NOTES-- \nAs justified by the DISMAN WG co-chair on the DISMAN mailing list (note: WG now closed), the RFC text is correct.  ", "submit_date": "2013-11-13", "submitter_name": "shuaixiaojuan", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3799", "doc-id": "RFC3329", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "spivalue           = 10DIGIT; 0 to 4294967295\r\n", "correct_text": "spivalue           = 1*10DIGIT; 0 to 4294967295\r\n", "notes": "The number string does not have to have 10 digit characters if the number is not 10 digits in length.", "submit_date": "2013-11-13", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Gonzalo Camarillo", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4481", "doc-id": "RFC7544", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": "   |       |       |INV C  |      |       |       |     |      |       |\r\n   |       |       |------>|      |       |       |     |      |       |\r\n   |       |       |History-Info: |       |       |     |      |       |\r\n   |       |       <sip:proxyP1>;index=1, |       |     |      |       |\r\n   |       |       <sip:userB>;index=1.1;rc=1,    |     |      |       |\r\n   |       |       <sip:proxyP2;cause=302>;index=1.1.1;mp=1.1  |       |\r\n   |       |       |       |      |       |       |     |      |       |\r\n   |       |       |       |INV C |       |       |     |      |       |\r\n   |       |       |       |----->|       |       |     |      |       |\r\n   |       |       | Diversion:   |       |       |     |      |       |\r\n   |       |     <sip:userB>;reason=unconditional;counter=1;privacy=off|\r\n   |       |       |       |History-Info: |       |     |      |       |\r\n   |       |       |       <sip:proxyP1>;index=1, |     |      |       |\r\n   |       |       |       <sip:userB>;index=1.1;rc=1,  |      |       |\r\n   |       |       |       <sip:proxyP2;cause=302>;index=1.1.1;mp=1.1  |\r\n   |       |       |       |      |       |       |     |      |       |", "correct_text": "   |       |       |INV C  |      |       |       |     |      |       |\r\n   |       |       |------>|      |       |       |     |      |       |\r\n   |       |       |History-Info: |       |       |     |      |       |\r\n   |       |       <sip:proxyP1>;index=1, |       |     |      |       |\r\n   |       |       <sip:userB>;index=1.1;rc=1,    |     |      |       |\r\n   |       |       <sip:userC;cause=302>;index=1.1.1;mp=1.1    |       |\r\n   |       |       |       |      |       |       |     |      |       |\r\n   |       |       |       |INV C |       |       |     |      |       |\r\n   |       |       |       |----->|       |       |     |      |       |\r\n   |       |       | Diversion:   |       |       |     |      |       |\r\n   |       |     <sip:userB>;reason=unconditional;counter=1;privacy=off|\r\n   |       |       |       |History-Info: |       |     |      |       |\r\n   |       |       |       <sip:proxyP1>;index=1, |     |      |       |\r\n   |       |       |       <sip:userB>;index=1.1;rc=1,  |      |       |\r\n   |       |       |       <sip:userC;cause=302>;index=1.1.1;mp=1.1    |\r\n   |       |       |       |      |       |       |     |      |       |", "notes": "Since the call is being diverted to userC, the last hi-targeted-to-uri should be that of userC instead of proxyP2. \r\nThis is same as example shown in section 3.4 which has userC in last hi-targeted-to-uri where the AS B is diverting the call.", "submit_date": "2015-09-22", "submitter_name": "Amrita Bhatt", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7061", "doc-id": "RFC6350", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "    TEL;VALUE=uri;TYPE=\"work,voice\";PREF=1:tel:+1-418-656-9254;ext=102\r\n    TEL;VALUE=uri;TYPE=\"work,cell,voice,video,text\":tel:+1-418-262-6501\r\n", "correct_text": "    TEL;VALUE=uri;TYPE=work,voice;PREF=1:tel:+1-418-656-9254;ext=102\r\n    TEL;VALUE=uri;TYPE=work,cell,voice,video,text:tel:+1-418-262-6501\r\n", "notes": "While the given TYPE parameters are grammatically correct, in their current form they don't portray what I believe to be the intent of the example.  In their current form, both TYPE parameters have just a single value because of the quoting.  Since TYPE can be multi-valued, I believe the intent of the example was for these parameters to have 3 and 5 values respectively which is accomplished by the corrected text.\r\n\r\nUnfortunately, even though examples are only informative (the ABNF is always normative), the mistake in the example has led to implementations in the wild that perform the same quoting but also assume that the parameter should be treated as multi-valued.", "submit_date": "2022-07-29", "submitter_name": "Ken Murchison", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "3800", "doc-id": "RFC3329", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "mech-parameters    = ( algorithm / protocol /mode /\r\n                             encrypt-algorithm / spi /\r\n                             port1 / port2 )\r\nencrypt-algorithm  = \"ealg\" EQUAL ( \"des-ede3-cbc\" / \"null\" )\r\nspi                = \"spi\" EQUAL spivalue\r\nport1              = \"port1\" EQUAL port\r\nport2              = \"port2\" EQUAL port\r\n", "correct_text": "mech-parameters    = ( algorithm / protocol /mode /\r\n                             encrypt-algorithm / spi-c / spi-s /\r\n                             port-c / port-s )\r\nencrypt-algorithm  = \"ealg\" EQUAL ( \"des-ede3-cbc\" / \r\n                             \"aes-cbc\" / \"null\" )\r\nspi-c              = \"spi-c\" EQUAL spivalue\r\nspi-s              = \"spi-s\" EQUAL spivalue\r\nport-c             = \"port-c\" EQUAL port\r\nport-s             = \"port-s\" EQUAL port\r\n", "notes": "3GPP 33.203 has different ABNF than the Appendix in this RFC.  Note the \"spi-c\", \"spi-s\", \"port-c\", \"port-s\" parameter names instead of \"spi\", \"port1\", or \"port2\".  And a new algorithm token of \"aes-cbc\" as well.\n --VERIFIER NOTES-- \nThe ABNF changes described here would have required substantial changes to the remainder of Appendix A.  If the reporter wishes to make this update, he should submit an Internet-draft that updates this RFC.", "submit_date": "2013-11-13", "submitter_name": "Hadriel Kaplan", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3801", "doc-id": "RFC6514", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "Usage of Intra-AS I-PMSI A-D routes is described in Section 9.2.\r\n", "correct_text": "Usage of Intra-AS I-PMSI A-D routes is described in Section 9.1.\r\n", "notes": "Section 9.2 defines Inter-AS I-PMSI A-D operation and is not the right reference to be called in Section 4.1", "submit_date": "2013-11-13", "submitter_name": "Nagendra Kumar", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3802", "doc-id": "RFC6514", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Usage of Inter-AS I-PMSI A-D routes is described in Section 9.1", "correct_text": "Usage of Inter-AS I-PMSI A-D routes is described in Section 9.2", "notes": "Section 9.1 defines Intra-AS I-PMSI A-D operation and is not the right reference to be called in Section 4.2", "submit_date": "2013-11-13", "submitter_name": "Nagendra Kumar", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3803", "doc-id": "RFC4274", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   BGP enhances the AS_PATH attribute to include sets of autonomous\r\n   systems as well as lists via the AS_SET attribute.", "correct_text": "   BGP enhances the AS_PATH attribute to include sets of autonomous\r\n   systems as well as lists via the AS_SET path segment type.", "notes": "AS_SET is not an attribute. It is a path segment type.\n --VERIFIER NOTES-- \nBCP: 172 recommends for Not Using AS_SET and AS_CONFED_SET in BGP, and thus this is unlikely to be an issue in the long term.", "submit_date": "2013-11-14", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3804", "doc-id": "RFC4960", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.2", "orig_text": "", "correct_text": "", "notes": "something was placed in the ending line that made it almost unreadable.\n --VERIFIER NOTES-- \nThis errata is not technical and the presumably editorial part is not identifiable. ", "submit_date": "2013-11-16", "submitter_name": "Stephen Galvan Jr", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3805", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "    Message Length\r\n\r\n      The Message Length field is three octets and indicates the length\r\n      of the Diameter message including the header fields and the padded\r\n      AVPs.  Thus, the Message Length field is always a multiple of 4.", "correct_text": "    Message Length\r\n\r\n      The Message Length field is three octets and indicates the number\r\n      of octets of the Diameter message, including the header fields and\r\n      the padded AVPs.  Thus, the Message Length field is always a \r\n      multiple of 4 octets.\r\n", "notes": "the actual text does not indicate the unit of length unit, which may lead to confusion and IOT issues, especially if someone considers bits instead of bytes.", "submit_date": "2013-11-18", "submitter_name": "Lionel", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3806", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7", "orig_text": "   Server Identifier\r\n\r\n      The identity of one or more servers to which the message is to be\r\n      routed.  This identity MUST also be present in the Host Identity\r\n      field of the peer table (Section 2.6).  When the Local Action is\r\n      set to RELAY or PROXY, this field contains the identity of the\r\n      server(s) to which the message MUST be routed.  When the Local\r\n      Action field is set to REDIRECT, this field contains the identity\r\n      of one or more servers to which the message MUST be redirected.\r\n", "correct_text": "   Peer Identifier\r\n\r\n      The identity of one or more peers to which the message is to be\r\n      routed.  This identity MUST also be present in the Host Identity\r\n      field of the peer table (Section 2.6).  When the Local Action is\r\n      set to RELAY or PROXY, this field contains the identity of the\r\n      peer(s) to which the message MUST be routed.  When the Local\r\n      Action field is set to REDIRECT, this field contains the identity\r\n      of one or more peers to which the message MUST be redirected.\r\n", "notes": "The host identified in a Routing Table entry is not necessarily a \"server\". It can also be a Relay, a redirect or a proxy agent. Using \"peer\" instead of \"server\" is more appropriate.", "submit_date": "2013-11-18", "submitter_name": "Lionel", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4735", "doc-id": "RFC7871", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13", "orig_text": "   7.   Due its internal implementation, ANS finds a response that is\r\n        tailored for the whole /16 of the client that performed the\r\n        query.\r\n\r\n   8.   ANS adds an ECS option in the response, containing:\r\n[...]\r\n        *  SCOPE PREFIX-LENGTH set to 0x30, indicating a /48 network.", "correct_text": "   7.   Due its internal implementation, ANS finds a response that is\r\n        tailored for the whole /48 of the client that performed the\r\n        query.\r\n\r\n   8.   ANS adds an ECS option in the response, containing:\r\n[...]\r\n        *  SCOPE PREFIX-LENGTH set to 0x30, indicating a /48 network.", "notes": "The prose description in step 7 does not match the ECS option described in step 8. Either both should say \"/16\" or both should say \"/48\". Probably /48 was meant, since a /16 would be a huge amount of IPv6 address space.", "submit_date": "2016-07-08", "submitter_name": "Robert Edmonds", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3812", "doc-id": "RFC6979", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4 (page 8)", "orig_text": "     If r turns out to be zero, a new k should be selected and r\r\n       computed again (this is an utterly improbable occurrence).\r\n\r\n   4.  The value s (modulo q) is computed:\r\n\r\n          s = (h+x*r)/k mod q\r\n\r\n", "correct_text": "     If r turns out to be zero, a new k should be selected and r\r\n       computed again (this is an utterly improbable occurrence).\r\n\r\n   4.  The value s (modulo q) is computed:\r\n\r\n          s = (h+x*r)/k mod q\r\n\r\n     If s turns out to be zero, a new k should be selected and r\r\n       and s computed again (a similarly improbable occurrence).\r\n\r\n\r\n", "notes": "My understanding is that if s is zero it has no multiplicative inverse so the signature cannot be verified. Worse, for DSA the private key can be computed directly from r and the public key components. (I'm not sure about ECDSA..)\r\n\r\nIf I'm right about this, section 3.4 and others are affected. If not, sorry for wasting your time :-(", "submit_date": "2013-11-27", "submitter_name": "Edward M Drayton", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3809", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   Before the invalid routes are deleted\r\n   from the system, it advertises, to its peers, either withdraws for\r\n   the routes marked as invalid, or the new best routes before the\r\n   invalid routes are deleted from the system.", "correct_text": "   Before the invalid routes are deleted\r\n   from the system, it advertises, to its peers, either withdraws for\r\n   the routes marked as invalid, or the new best routes.", "notes": "The phrase \"Before the invalid routes are deleted from the system\" is unnecessarily repeated in the same sentence.", "submit_date": "2013-11-21", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-05-28 12:12:27"}, {"errata_id": "3810", "doc-id": "RFC2744", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": " ,", "correct_text": " *,", "notes": "The author of draft-ietf-cat-gssv2-cbind (which became RFC2744) switched to a different formatting process between versions 05 and 06 of that draft.  This inadvertently introduced errors into the function prototypes in the example gssapi.h header, removing the asterisk which indicates that an argument is of pointer type from pointer arguments which are not the last argument in the argument list of their respective function.  All sixty-eight occurrences of <space><comma> in Appendix A should be replaced by the sequence <space><asterisk><comma> as a fix.  Additionally, the minor_status argument of gss_export_name() is not caught by this pattern, but also should be changed from scalar to pointer type in order for all function prototypes in the header to be corrected (\"OM_uint32,\" becomes \"OM_uint32 *,\").  As another concrete example, at the top of page 91, the first argument to gss_acquire_cred should change from \"OM_uint32 ,             /*  minor_status */\" to \"OM_uint32 *,             /*  minor_status */\".", "submit_date": "2013-11-22", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3811", "doc-id": "RFC6030", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.", "orig_text": "All the elements listed above (and those defined in the future)\r\n      obey a simple structure in that they MUST support child elements\r\n      to convey the data value in either plaintext or encrypted format:\r\n\r\n      Plaintext:  The <PlainValue> element carries a plaintext value\r\n         that is typed, for example, to xs:integer.\r\n\r\n      Encrypted:  The <EncryptedValue> element carries an encrypted\r\n         value.", "correct_text": "", "notes": "In case that <Counter>, <Time>, <TimeInterval> or <TimeDrift> are encrypted in the PSKC file, the standard doesn't say anything about how to interpret this encrypted data.\r\nAfter decrypting those values we have byte array. \r\n\r\nExample: \r\n   Counter plain text value: 10000 decimal\r\n\r\n   In the case that this value is encrypted and later decrypted what should we expect?\r\n   Byte content 0x27 0x10 or 0x01 0x00 0x00 or something else?\r\n\r\n   1. Byte content 0x27 0x10 is interpreted as 10000 decimal if this bytes are interpreted as binary data (Big endian). \r\n   2. Byte content 0x01 0x00 0x00 is interpreted as 10000 decimal if this bytes are interpreted as hex data (Big endian).\r\n      Each hex digit will be mapped to a resulting decimal digit. From my point of view this way is a bit confusing.\r\n       \r\nMy proposal to solve this issue is described in 1.", "submit_date": "2013-11-25", "submitter_name": "Ivan Micanovic", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4569", "doc-id": "RFC3390", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   A second set of experiments explored TCP performance over dialup\r\n   modem links.  In experiments over a 28.8 bps dialup channel [All97a,\r\n   AHO98], a four-segment initial window decreased the transfer time of\r\n   a 16KB file by roughly 10%, with no accompanying increase in the drop\r\n   rate.  A simulation study [RFC2416] investigated the effects of using\r\n   a larger initial window on a host connected by a slow modem link and\r\n   a router with a 3 packet buffer.  The study concluded that for the\r\n   scenario investigated, the use of larger initial windows was not\r\n   harmful to TCP performance.", "correct_text": "   A second set of experiments explored TCP performance over dialup\r\n   modem links.  In experiments over a 28.8 kbps dialup channel [All97a,\r\n   AHO98], a four-segment initial window decreased the transfer time of\r\n   a 16KB file by roughly 10%, with no accompanying increase in the drop\r\n   rate.  A simulation study [RFC2416] investigated the effects of using\r\n   a larger initial window on a host connected by a slow modem link and\r\n   a router with a 3 packet buffer.  The study concluded that for the\r\n   scenario investigated, the use of larger initial windows was not\r\n   harmful to TCP performance.", "notes": "Error bit rate - kbps instead of bps.", "submit_date": "2015-12-22", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3814", "doc-id": "RFC6335", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.3.1", "orig_text": "Service codes are assigned on a \"first come, first served\" basis\r\naccording to Section 19.8 of the DCCP specification [RFC4340].\r\n", "correct_text": "Service Codes are generally assigned on a \"first come, first\r\nserved\" basis, according to the rules specified in Section 19.8\r\nof the DCCP specification [RFC4340]. This also defines\r\nexceptions to this policy. [RFC5595] updated the policy\r\nto require Service Codes assignments\r\nin a Standards-Track specification to be assigned from the\r\nSpecifications-Required portion of the Service Code registry.\r\n", "notes": "RFC 6335 should have noted in Section 10.3.1:  Exceptions to the FCFS\r\npolicy are documented in RFC 4340. RFC 5595 updated the usage of the SC\r\nvalues described in RFC 4340.", "submit_date": "2013-11-29", "submitter_name": "Gorry Fairhurst", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4746", "doc-id": "RFC4256", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "section 3.2, page 4:\r\n\r\nint       num-prompts\r\n\r\nsection 3.4, page 6:\r\n\r\nint       num-responses\r\n\r\nsection 3.4.4\r\n\r\npage 7:\r\nS:   int       1\r\n...\r\nC:   int       1\r\n\r\npage 8:\r\n\r\nS:   int       1\r\n...\r\nC:   int       1\r\n...\r\nS:   int       2\r\n...\r\nC:   int       2\r\n...\r\nS:   int       0\r\n\r\npage 9:\r\n\r\nS:   int       0", "correct_text": "section 3.2, page 4:\r\n\r\nuint32       num-prompts\r\n\r\nsection 3.4, page 6:\r\n\r\nuint32       num-responses\r\n\r\nsection 3.4.4\r\n\r\npage 7:\r\nS:   uint32       1\r\n...\r\nC:   uint32       1\r\n\r\npage 8:\r\n\r\nS:   uint32       1\r\n...\r\nC:   uint32       1\r\n...\r\nS:   uint32       2\r\n...\r\nC:   uint32       2\r\n...\r\nS:   uint32       0\r\n\r\npage 9:\r\n\r\nS:   uint32       0", "notes": "The type \"int\" is not present between the list of types present in the RFC 4251, section 5 ( \"Data Type Representations Used in the SSH Protocols\" ) . Alone it's confusing and meaningless.", "submit_date": "2016-07-25", "submitter_name": "Gabriele Bonacini", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 18:28:33"}, {"errata_id": "3820", "doc-id": "RFC4556", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3.2.2", "orig_text": "      The type of the otherName field is AnotherName.  The type-id field\r\n      of the type AnotherName is id-pkinit-san:\r\n\r\n       id-pkinit-san OBJECT IDENTIFIER ::=\r\n         { iso(1) org(3) dod(6) internet(1) security(5) kerberosv5(2)\r\n           x509SanAN (2) }\r\n", "correct_text": "      The type of the otherName field is AnotherName.  The type-id field\r\n      of the type AnotherName is id-kerberos-san:\r\n\r\n       id-kerberos-san OBJECT IDENTIFIER ::=\r\n         { iso(1) org(3) dod(6) internet(1) security(5) kerberosv5(2)\r\n           x509SanAN (2) }\r\n", "notes": "The certificate subject alternative name (SAN) type added by RFC4556 is and has been used more generically than its symbolic name denotes.\r\n\r\nNote that there is no risk in using id-pkinit-san for non-PKINIT purposes as presence of that SAN is -naturally- insufficient by itself to cause an AS to issue a ticket to the client for the named principal.  RFC4556 is quite clear on this point.\r\n\r\nTherefore id-pkinit-san should have been named id-kerberos-san, and should be referred to as id-kerberos-san going forward.  (If there was a registry of PKIX certificate extensions we would additionally ask IANA to updte it.)\r\n\r\nThere are a few other mentions of id-pkinit-san in RFC4556, all of which should read id-kerberos-san instead.", "submit_date": "2013-12-05", "submitter_name": "Nicolas Williams", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5186", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.4", "orig_text": "[p17]                                                 In order to avoid\r\n   sequence number duplication in case of multiple HelloVerifyRequests,\r\n   the server MUST use the record sequence number in the ClientHello as\r\n   the record sequence number in the HelloVerifyRequest.\r\n\r\n[p17]                  In order to avoid sequence number duplication in\r\n   case of multiple cookie exchanges, the server MUST use the record\r\n   sequence number in the ClientHello as the record sequence number in\r\n   its initial ServerHello. ", "correct_text": "[p17]                                                 In order to avoid\r\n   sequence number duplication in case of multiple HelloVerifyRequests,\r\n   the server MUST use the message_seq in the ClientHello as\r\n   the message_seq in the HelloVerifyRequest.\r\n\r\n[p17]                  In order to avoid sequence number duplication in\r\n   case of multiple cookie exchanges, the server MUST use the \r\n   message_seq in the ClientHello as the message_seq in\r\n   its initial ServerHello. ", "notes": "the \"record sequence number\" here should be message_seq.", "submit_date": "2017-11-28", "submitter_name": "Chen Wumao", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3821", "doc-id": "RFC6241", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.4.1", "orig_text": "8.4.1.  Description\r\n\r\nThe :confirmed-commit:1.1 capability indicates that the server will\r\nsupport the <cancel-commit> operation and the <confirmed>,\r\n<confirm-timeout>, <persist>, and <persist-id> parameters for the\r\n<commit> operation.  See Section 8.3 for further details on the\r\n<commit> operation.\r\n\r\nA confirmed <commit> operation MUST be reverted if a confirming\r\ncommit is not issued within the timeout period (by default 600\r\nseconds = 10 minutes).  The confirming commit is a <commit> operation\r\nwithout the <confirmed> parameter.  The timeout period can be\r\nadjusted with the <confirm-timeout> parameter.  If a follow-up\r\nconfirmed <commit> operation is issued before the timer expires, the\r\ntimer is reset to the new value (600 seconds by default).  Both the\r\nconfirming commit and a follow-up confirmed <commit> operation MAY\r\nintroduce additional changes to the configuration.\r\n\r\nIf the <persist> element is not given in the confirmed commit\r\noperation, any follow-up commit and the confirming commit MUST be\r\nissued on the same session that issued the confirmed commit.  If the\r\n<persist> element is given in the confirmed <commit> operation, a\r\nfollow-up commit and the confirming commit can be given on any\r\nsession, and they MUST include a <persist-id> element with a value\r\nequal to the given value of the <persist> element.\r\n\r\nIf the server also advertises the :startup capability, a\r\n<copy-config> from running to startup is also necessary to save the\r\nchanges to startup.\r\n\r\nIf the session issuing the confirmed commit is terminated for any\r\nreason before the confirm timeout expires, the server MUST restore\r\nthe configuration to its state before the confirmed commit was\r\nissued, unless the confirmed commit also included a <persist>\r\nelement.\r\n\r\nIf the device reboots for any reason before the confirm timeout\r\nexpires, the server MUST restore the configuration to its state\r\nbefore the confirmed commit was issued.\r\n\r\nIf a confirming commit is not issued, the device will revert its\r\nconfiguration to the state prior to the issuance of the confirmed\r\ncommit.  To cancel a confirmed commit and revert changes without\r\nwaiting for the confirm timeout to expire, the client can explicitly\r\nrestore the configuration to its state before the confirmed commit\r\nwas issued, by using the <cancel-commit> operation.", "correct_text": "8.4.1.  Description\r\n \r\nThe :confirmed-commit:1.1 capability indicates that the server will\r\nsupport the <cancel-commit> operation, the <confirmed>, <confirm-\r\ntimeout>, <persist>, and <persist-id> parameters for the <commit>\r\noperation, and differentiate between a \u201cto be confirmed\u201d <commit>\r\noperation (a \u201cconfirmed commit\u201d) and a confirming <commit>\r\noperation. See Section 8.3 for further details on the <commit>\r\noperation.\r\n \r\nA confirmed <commit> operation MUST be reverted if a confirming\r\ncommit is not issued within the timeout period (by default 600\r\nseconds = 10 minutes). The confirming commit is a <commit> operation\r\nwithout the <confirmed> parameter and, if successful, cannot be\r\nreverted. The timeout period can be adjusted with the <confirm-\r\ntimeout> parameter. If a follow-up confirmed <commit> operation is\r\nissued before the timer expires, the timer is reset to the new value\r\n(600 seconds by default). Both the confirming commit and a follow-up\r\nconfirmed <commit> operation MAY introduce additional changes to the\r\nconfiguration.\r\n \r\nIf the <persist> element is not given in the confirmed commit\r\noperation, any follow-up commit and the confirming commit MUST be\r\nissued on the same session that issued the confirmed commit. If the\r\n<persist> element is given in the confirmed <commit> operation, a\r\nfollow-up commit and the confirming commit can be given on any\r\nsession, and they MUST include a <persist-id> element with a value\r\nequal to the given value of the <persist> element.\r\n \r\nIf the server also advertises the :startup capability, a <copy-\r\nconfig> from running to startup is also necessary to save the\r\nchanges to startup. If the session issuing a sequence of one or more\r\nconfirmed commits is terminated for any reason before the confirm\r\ntimeout expires, the server MUST restore the configuration to its\r\nstate before the sequence of confirmed commits was issued, unless\r\nthe last confirmed commit also included a <persist> or <persist-id>\r\nelement.\r\n \r\nIf the device reboots for any reason before the confirm timeout\r\nexpires, the server MUST restore the configuration to its state\r\nbefore the sequence of confirmed commits was issued, unless the last\r\nconfirmed commit also included a <persist> or <persist-id> element.\r\n \r\nIf a confirming commit is not issued, the device will revert its\r\nconfiguration to the state prior to the issuance of the first in the\r\ncurrent sequence of confirmed commits. To cancel the current\r\nsequence of confirmed commits and revert changes without waiting for\r\nthe confirm timeout to expire, the client can explicitly restore the\r\nconfiguration to its state before the sequence of confirmed commits\r\nwas issued, by using the <cancel-commit> operation.\r\n ", "notes": "This erratum seeks to clarify the meaning of the term \"confirmed commit\" for those not familiar with the use of the term within JUNOS. In particular, that the use of \"confirmed\" is not in the sense of the adjective (meaning \"firmly established\") but rather that the commit needs to be confirmed. It also emphasises that a \"confirming commit\" cannot be reverted. Finally it identifies that it is possible to have a sequence of \"confirmed commits\" prior to a \"confirming commit\" and that, should no \"confirming commit\" be received, the configuration will revert to the state prior to the first \"confirmed commit\" in the sequence.", "submit_date": "2013-12-06", "submitter_name": "Jonathan Hansford", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3822", "doc-id": "RFC6241", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.4.4.1", "orig_text": "Description:\r\n\r\n      Cancels an ongoing confirmed commit.  If the <persist-id>\r\n      parameter is not given, the <cancel-commit> operation MUST be\r\n      issued on the same session that issued the confirmed commit.\r\n\r\nParameters:\r\n\r\n   persist-id:\r\n\r\n         Cancels a persistent confirmed commit.  The value MUST be\r\n         equal to the value given in the <persist> parameter to the\r\n         <commit> operation.  If the value does not match, the\r\n         operation fails with an \"invalid-value\" error.\r\n", "correct_text": "Description:\r\n\r\n      Cancels an ongoing sequence of confirmed commits. If the\r\n      <persist-id> parameter is not given, the <cancel-commit>\r\n      operation MUST be issued on the same session that issued the\r\n      sequence of confirmed commits.\r\n\r\nParameters:\r\n\r\n   persist-id:\r\n\r\n         Cancels a persistent sequence of confirmed commits. The\r\n         value MUST be equal to the value given in the <persist>\r\n         parameter to the <commit> operation. If the value does not\r\n         match, the operation fails with an \"invalid-value\" error.\r\n", "notes": "This erratum seeks to clarify that <cancel-commit> will cancel all configuration changes arising from a sequence of \"confirmed commits\".", "submit_date": "2013-12-06", "submitter_name": "Jonathan Hansford", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3823", "doc-id": "RFC6241", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.4.5.1", "orig_text": "   persist:\r\n\r\n         Make the confirmed commit survive a session termination, and\r\n         set a token on the ongoing confirmed commit.", "correct_text": "   persist:\r\n\r\n         Make the confirmed commit survive a session termination,\r\n         and set a token on the ongoing sequence of confirmed\r\n         commits.", "notes": "This erratum seeks to clarify that the use of the \"persist\" parameter will persist all configuration changes arising from a sequence of \"confirmed commits\".", "submit_date": "2013-12-06", "submitter_name": "Jonathan Hansford", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3824", "doc-id": "RFC5465", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   IMAP servers that support this extension advertise the NOTIFY\r\n   capability.  This extension adds the NOTIFY command as defined in\r\n   Section 5.1.", "correct_text": "   IMAP servers that support this extension advertise the NOTIFY\r\n   capability.  This extension adds the NOTIFY command as defined in\r\n   Section 3.1.", "notes": "Wrong section reference.", "submit_date": "2013-12-06", "submitter_name": "Jan-Philipp Litza", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3825", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.4.1", "orig_text": "The Packet\r\n   Report MAY include only the final selector packetSelected, to act as\r\n   an index for that Selection Sequence in the Selection Sequence\r\n   Statistics Report Interpretation, which also allows the calculation\r\n   of the Attained Selection Fraction.\r\n", "correct_text": "The Packet\r\n   Report MAY include only the final selector packetsSelected, to act as\r\n   an index for that Selection Sequence in the Selection Sequence\r\n   Statistics Report Interpretation, which also allows the calculation\r\n   of the Attained Selection Fraction.\r\n", "notes": "Should be plural: packet[s]Selected.\r\n\r\npacketSelected is not defined and occurs nowhere else.  \r\npacketsSelected \"contains the number of packets selected by a Selector in the Selection Sequence\" which makes sense as the index into \"that Selection Sequence\".", "submit_date": "2013-12-08", "submitter_name": "Andrew Feren", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3826", "doc-id": "RFC5476", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "packetsSelected", "correct_text": "selectorIdTotalPktsSelected", "notes": "The source of packetsSelected is noted as RFC5477, but \"packetsSelected\" occurs nowhere in RFC5477.\r\nRFC5476 Figure N shows \"packetsSelected = 319\".  \r\n\r\nBoth RFC5477 and http://www.iana.org/assignments/ipfix  name elementId 319 \"selectorIdTotalPktsSelected\"", "submit_date": "2013-12-08", "submitter_name": "Andrew Feren", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3831", "doc-id": "RFC4803", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   In mplsXCTable:\r\n   {\r\n      mplsXCIndex                = 0x01,\r\n      mplsXCInSegmentIndex       = 0x00000015,\r\n      mplsXCOutSegmentIndex      = 0x00000012,\r\n      mplsXCLspId                = 0x0102 -- unique ID\r\n      mplsXCLabelStackIndex      = 0x00, -- only a single outgoing label\r\n      mplsXCRowStatus            = createAndGo(4)\r\n   }\r\n\r\n   In mplsXCTable:\r\n   {\r\n      mplsXCIndex                = 0x02,\r\n      mplsXCInSegmentIndex       = 0x00000016,\r\n      mplsXCOutSegmentIndex      = 0x00000013,\r\n      mplsXCLspId                = 0x0102 -- unique ID\r\n      mplsXCLabelStackIndex      = 0x00, -- only a single outgoing label\r\n      mplsXCRowStatus            = createAndGo(4)\r\n   }\r\n", "correct_text": "   In mplsXCTable:\r\n   {\r\n      mplsXCIndex                = 0x01,\r\n      mplsXCInSegmentIndex       = 0x00000015,\r\n      mplsXCOutSegmentIndex      = 0x00000012,\r\n      mplsXCLspId                = 0x0102 -- unique ID\r\n      mplsXCLabelStackIndex      = 0x00, -- only a single outgoing label\r\n      mplsXCRowStatus            = createAndGo(4)\r\n   }\r\n\r\n   In mplsXCTable:\r\n   {\r\n      mplsXCIndex                = 0x01,\r\n      mplsXCInSegmentIndex       = 0x00000016,\r\n      mplsXCOutSegmentIndex      = 0x00000013,\r\n      mplsXCLspId                = 0x0102 -- unique ID\r\n      mplsXCLabelStackIndex      = 0x00, -- only a single outgoing label\r\n      mplsXCRowStatus            = createAndGo(4)\r\n   }\r\n", "notes": "The entries in the mplsXCTable are indexed by {mplsXCIndex, mplsXCInSegmentIndex, mplsOutSegmentIndex}. All XC entries for the same LSP should share a common value of mplsXCIndex because mplsTunnelXCPointer can be set to point to the first entry and then all of the other entries can be found.\r\n\r\nThe error in the example in Section 6 is that it shows a different value of mplsXCIndex for the reverse direction cross-connects. It should be set to the same value as is used for the forward direction cross-connect.", "submit_date": "2013-12-12", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3832", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4.1", "orig_text": "               +------------------+---------+-------------+\r\n               | substatement     | section | cardinality |\r\n               +------------------+---------+-------------+\r\n               | bit              | 9.7.4   | 0..n        |\r\n               | enum             | 9.6.4   | 0..n        |\r\n               | length           | 9.4.4   | 0..1        |\r\n               | path             | 9.9.2   | 0..1        |\r\n               | pattern          | 9.4.6   | 0..n        |\r\n               | range            | 9.2.4   | 0..1        |\r\n               | require-instance | 9.13.2  | 0..1        |\r\n               | type             | 7.4     | 0..n        |\r\n               +------------------+---------+-------------+", "correct_text": "               +------------------+---------+-------------+\r\n               | substatement     | section | cardinality |\r\n               +------------------+---------+-------------+\r\n               | base             | 9.10.2  | 0..1        |\r\n               | bit              | 9.7.4   | 0..n        |\r\n               | enum             | 9.6.4   | 0..n        |\r\n               | fraction-digits  | 9.3.4   | 0..1        |\r\n               | length           | 9.4.4   | 0..1        |\r\n               | path             | 9.9.2   | 0..1        |\r\n               | pattern          | 9.4.6   | 0..n        |\r\n               | range            | 9.2.4   | 0..1        |\r\n               | require-instance | 9.13.2  | 0..1        |\r\n               | type             | 7.4     | 0..n        |\r\n               +------------------+---------+-------------+", "notes": "9.3.4. states 'The \"fraction-digits\" statement, which is a substatement to the \"type\" statement' but 7.4.1 does not list \"fraction-digits\" as one of the substatements of \"type\".\r\n\r\n9.10.2. states 'The \"base\" statement, which is a substatement to the \"type\" statement' but 7.4.1 does not list \"base\" as one of the substatements of \"type\".", "submit_date": "2013-12-12", "submitter_name": "Chris LaBauve", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3846", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.5.2", "orig_text": "           GEO:geo:37.386013,-122.082932\r\n", "correct_text": "           GEO:geo:37.386013\\,-122.082932\r\n", "notes": "Section 3.4 states that all property values must have COMMA characters escaped with a BACKSLASH character. The GEO property value in the example contains a comma. Therefore it must be escaped with a backslash.", "submit_date": "2013-12-20", "submitter_name": "David Riggle", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3834", "doc-id": "RFC6020", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.7.5", "orig_text": "    Given the following leaf:\r\n\r\n     leaf mybits {\r\n         type bits {\r\n             bit disable-nagle {\r\n                 position 0;\r\n             }\r\n             bit auto-sense-speed {\r\n                 position 1;\r\n             }\r\n             bit 10-Mb-only {\r\n                 position 2;\r\n             }\r\n         }\r\n         default \"auto-sense-speed\";\r\n     }\r\n\r\n   The lexical representation of this leaf with bit values disable-nagle\r\n   and 10-Mb-only set would be:\r\n\r\n     <mybits>disable-nagle 10-Mb-only</mybits>", "correct_text": "    Given the following leaf:\r\n\r\n     leaf mybits {\r\n         type bits {\r\n             bit disable-nagle {\r\n                 position 0;\r\n             }\r\n             bit auto-sense-speed {\r\n                 position 1;\r\n             }\r\n             bit ten-Mb-only {\r\n                 position 2;\r\n             }\r\n         }\r\n         default \"auto-sense-speed\";\r\n     }\r\n\r\n   The lexical representation of this leaf with bit values disable-nagle\r\n   and ten-Mb-only set would be:\r\n\r\n     <mybits>disable-nagle ten-Mb-only</mybits>", "notes": "9.7.5. Shows a usage example of the bit statement wherein the identifier '10-Mb-only' begins with a digit, which contradicts the ABNF rule 'identifier' (identifier must begin with [_A-Za-z])", "submit_date": "2013-12-12", "submitter_name": "Chris LaBauve", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3835", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   type-body-stmts     = numerical-restrictions /\r\n                         decimal64-specification /\r\n                         string-restrictions /\r\n                         enum-specification /\r\n                         leafref-specification /\r\n                         identityref-specification /\r\n                         instance-identifier-specification /\r\n                         bits-specification /\r\n                         union-specification", "correct_text": "   type-body-stmts     = numerical-restrictions /\r\n                         decimal64-specification /\r\n                         string-restrictions /\r\n                         enum-specification /\r\n                         leafref-specification /\r\n                         identityref-specification /\r\n                         instance-identifier-specification /\r\n                         bits-specification /\r\n                         union-specification / \r\n                         binary-specification\r\n\r\n   binary-specification = [length-stmt stmtsep]", "notes": "Grammar rule 'type-body-stmts' does not provide for the case when type is 'binary'; this would be a rule allowing 0 or 1 length substatements according to 9.8.1.", "submit_date": "2013-12-12", "submitter_name": "Chris LaBauve", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3836", "doc-id": "RFC6006", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.13", "orig_text": "The F-bit is used in the RP object header \r\nto signal that the initial request or response was too large\r\nto fit into a single message and will be fragmented into multiple\r\nmessages. ", "correct_text": "The F-bit is used in the RP object\r\nto signal that the initial request or response was too large\r\nto fit into a single message and will be fragmented into multiple\r\nmessages.  ", "notes": "F-bit is used in the RP object body but not the object header", "submit_date": "2013-12-13", "submitter_name": "Udayasree", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3850", "doc-id": "RFC5438", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.3", "orig_text": "   The aggregated IMDN is constructed using the multipart/mixed MIME\r\n   type and including as individual payloads all the IMDNS that were\r\n   received as message/imdn+xml.\r\n\r\n   Below is an example of aggregated IMDNs.\r\n\r\n   From: Bob <im:bob@example.com>\r\n   To: Alice <im:alice@example.com>\r\n   NS: imdn <urn:ietf:params:imdn>\r\n   imdn.Message-ID: d834jied93rf\r\n   Content-type: multipart/mixed;\r\n                      boundary=\"imdn-boundary\"\r\n   Content-Disposition: notification\r\n   Content-length: ...\r\n\r\n   --imdn-boundary\r\n   Content-type: message/imdn+xml\r\n\r\n   <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   <imdn xmlns=\"urn:ietf:params:xml:ns:imdn\">\r\n         <message-id>34jk324j</message-id>\r\n         <datetime>2008-04-04T12:16:49-05:00</datetime>\r\n        <recipient-uri>im:bob@example.com</recipient-uri>\r\n         <original-recipient-uri\r\n           >im:bob@example.com</original-recipient-uri>\r\n         <delivery-notification>\r\n            <status>\r\n               <delivered/>\r\n            </status>\r\n         </delivery-notification>\r\n       </imdn>\r\n\r\n   --imdn-boundary\r\n   Content-type: message/imdn+xml\r\n\r\n   <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   <imdn xmlns=\"urn:ietf:params:xml:ns:imdn\">\r\n         <message-id>34jk324j</message-id>\r\n         <datetime>2008-04-04T12:16:49-05:00</datetime>\r\n        <recipient-uri>im:bob@example.com</recipient-uri>\r\n         <original-recipient-uri\r\n            >im:bob@example.com</original-recipient-uri>\r\n         <display-notification>\r\n            <status>\r\n               <displayed/>\r\n            </status>\r\n         </display-notification>\r\n       </imdn>\r\n\r\n   --imdn-boundary\r\n", "correct_text": "   The aggregated IMDN is constructed using the multipart/mixed MIME\r\n   type and including as individual payloads all the IMDNS that were\r\n   received as message/imdn+xml.\r\n\r\n   Below is an example of aggregated IMDNs.\r\n\r\n   From: Bob <im:bob@example.com>\r\n   To: Alice <im:alice@example.com>\r\n   NS: imdn <urn:ietf:params:imdn>\r\n   imdn.Message-ID: d834jied93rf\r\n   Content-type: multipart/mixed;\r\n                      boundary=\"imdn-boundary\"\r\n   Content-Disposition: notification\r\n   Content-length: ...\r\n\r\n   --imdn-boundary\r\n   Content-type: message/imdn+xml\r\n\r\n   <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   <imdn xmlns=\"urn:ietf:params:xml:ns:imdn\">\r\n         <message-id>34jk324j</message-id>\r\n         <datetime>2008-04-04T12:16:49-05:00</datetime>\r\n        <recipient-uri>im:bob@example.com</recipient-uri>\r\n         <original-recipient-uri\r\n           >im:bob@example.com</original-recipient-uri>\r\n         <delivery-notification>\r\n            <status>\r\n               <delivered/>\r\n            </status>\r\n         </delivery-notification>\r\n       </imdn>\r\n\r\n   --imdn-boundary\r\n   Content-type: message/imdn+xml\r\n\r\n   <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   <imdn xmlns=\"urn:ietf:params:xml:ns:imdn\">\r\n         <message-id>34jk324j</message-id>\r\n         <datetime>2008-04-04T12:16:49-05:00</datetime>\r\n        <recipient-uri>im:bob@example.com</recipient-uri>\r\n         <original-recipient-uri\r\n            >im:bob@example.com</original-recipient-uri>\r\n         <display-notification>\r\n            <status>\r\n               <displayed/>\r\n            </status>\r\n         </display-notification>\r\n       </imdn>\r\n\r\n   --imdn-boundary--\r\n", "notes": "The last multipart MIME boundary should have a \"--\" at the end. In the above example it should be \"--imdn-boundary--\" instead of \"--imdn-boundary\"", "submit_date": "2013-12-26", "submitter_name": "Niket Kumar", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5634", "doc-id": "RFC2516", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "If there is data, and the first octet of the data is nonzero, then\r\nit MUST be a printable UTF-8 string which explains why the request\r\nwas denied.  This string MAY NOT be NULL terminated.\r\n\r\n(multiple occurrences of \"MAY NOT\")", "correct_text": "If there is data, and the first octet of the data is nonzero, then\r\nit MUST be a printable UTF-8 string which explains why the request\r\nwas denied.  This string MUST NOT be NULL terminated.\r\n\r\n(all occurrences of \"MAY NOT\" must be changed to \"MUST NOT\")", "notes": "The keyword \"MAY NOT\" does not exist in RFC 2119. It should be \"MUST NOT\".", "submit_date": "2019-02-11", "submitter_name": "Chris Fletcher", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 13:31:22"}, {"errata_id": "3851", "doc-id": "RFC2202", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "test_case =     3\r\nkey =           0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\r\nkey_len         16\r\ndata =          0xdd repeated 50 times\r\ndata_len =      50\r\ndigest =        0x56be34521d144c88dbb8c733f0e8b3f6\r\n\r\ntest_case =     4\r\nkey =           0x0102030405060708090a0b0c0d0e0f10111213141516171819\r\nkey_len         25\r\ndata =          0xcd repeated 50 times\r\ndata_len =      50\r\ndigest =        0x697eaf0aca3a3aea3a75164746ffaa79", "correct_text": "test_case =     3\r\nkey =           0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\r\nkey_len =       16\r\ndata =          0xdd repeated 50 times\r\ndata_len =      50\r\ndigest =        0x56be34521d144c88dbb8c733f0e8b3f6\r\n\r\ntest_case =     4\r\nkey =           0x0102030405060708090a0b0c0d0e0f10111213141516171819\r\nkey_len =       25\r\ndata =          0xcd repeated 50 times\r\ndata_len =      50\r\ndigest =        0x697eaf0aca3a3aea3a75164746ffaa79", "notes": "Notice the equal signs missing after \"key_len\"\r\n\r\nspt: I changed the classification to editorial and made it hold for document update because I don't believe implementers will be confused by the missing \"=\".", "submit_date": "2013-12-28", "submitter_name": "Antonio Bueno", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3852", "doc-id": "RFC7012", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1.15-17", "orig_text": "3.1.15. dateTimeSeconds\r\n\r\n   The type \"dateTimeSeconds\" represents a time value expressed with\r\n   second-level precision.\r\n\r\n3.1.16. dateTimeMilliseconds\r\n\r\n   The type \"dateTimeMilliseconds\" represents a time value expressed\r\n   with millisecond-level precision.\r\n\r\n3.1.17. dateTimeMicroseconds\r\n\r\n   The type \"dateTimeMicroseconds\" represents a time value expressed\r\n   with microsecond-level precision.\r\n\r\n3.1.18. dateTimeNanoseconds\r\n\r\n   The type \"dateTimeNanoseconds\" represents a time value expressed with\r\n   nanosecond-level precision.\r\n", "correct_text": "3.1.15. dateTimeSeconds\r\n\r\n   The type \"dateTimeSeconds\" represents a time value in units of\r\n   seconds based on coordinated universal time (UTC).  The choice of an\r\n   epoch, for example, 00:00 UTC, January 1, 1970, is left to\r\n   corresponding encoding specifications for this type, for example, the\r\n   IPFIX protocol specification.  Leap seconds are excluded.  Note that\r\n   transformation of values might be required between different\r\n   encodings if different epoch values are used.\r\n\r\n3.1.16. dateTimeMilliseconds\r\n\r\n   The type \"dateTimeMilliseconds\" represents a time value in units of\r\n   milliseconds based on coordinated universal time (UTC).  The choice\r\n   of an epoch, for example, 00:00 UTC, January 1, 1970, is left to\r\n   corresponding encoding specifications for this type, for example, the\r\n   IPFIX protocol specification.  Leap seconds are excluded.  Note that\r\n   transformation of values might be required between different\r\n   encodings if different epoch values are used.\r\n\r\n3.1.17. dateTimeMicroseconds\r\n\r\n   The type \"dateTimeMicroseconds\" represents a time value in units of\r\n   microseconds based on coordinated universal time (UTC).  The choice\r\n   of an epoch, for example, 00:00 UTC, January 1, 1970, is left to\r\n   corresponding encoding specifications for this type, for example, the\r\n   IPFIX protocol specification.  Leap seconds are excluded.  Note that\r\n   transformation of values might be required between different\r\n   encodings if different epoch values are used.\r\n\r\n3.1.18. dateTimeNanoseconds\r\n\r\n   The type \"dateTimeNanoseconds\" represents a time value in units of\r\n   nanoseconds based on coordinated universal time (UTC).  The choice of\r\n   an epoch, for example, 00:00 UTC, January 1, 1970, is left to\r\n   corresponding encoding specifications for this type, for example, the\r\n   IPFIX protocol specification.  Leap seconds are excluded.  Note that\r\n   transformation of values might be required between different\r\n   encodings if different epoch values are used.\r\n", "notes": "Although section 1.1 says : - \"Definitions of timestamp data types have been clarified.\" The edited text has removed the epoch definition, and this does not seem to have been incorporated elsewhere in the RFC. \r\n\r\nWithout a specified epoch, there is no unique definition of the timestamps. \r\n\r\nMy proposal above is to revert to the RFC5102 definitions. RFC7102 is intended to be backwards compatible with RFC5102 and thus the definitions need to be technically identical. Alternatively, if the text is now included elsewhere in RFC7012 or in another RFC, it would be helpful to the reader to provide a reference to the epoch definition in an editorial update to dateTimeX definitions in RFC7102.\n --VERIFIER NOTES-- \nReject reason: issue addressed in errata 3881", "submit_date": "2013-12-30", "submitter_name": "Stewart Bryant", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3853", "doc-id": "RFC4231", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "   Key            aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\r\n                  aaaaaaaa                          (20 bytes)\r\n   Data =         dddddddddddddddddddddddddddddddd\r\n                  dddddddddddddddddddddddddddddddd\r\n                  dddddddddddddddddddddddddddddddd\r\n                  dddd                              (50 bytes)\r\n", "correct_text": "   Key  =         aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\r\n                  aaaaaaaa                          (20 bytes)\r\n   Data =         dddddddddddddddddddddddddddddddd\r\n                  dddddddddddddddddddddddddddddddd\r\n                  dddddddddddddddddddddddddddddddd\r\n                  dddd                              (50 bytes)\r\n", "notes": "Notice the equal sign missing after \"Key\"\r\n\r\nspt: This is clearly editorial and no implementer is going to be confused by this so I marked it hold for document update.", "submit_date": "2013-12-30", "submitter_name": "Antonio Bueno", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3854", "doc-id": "RFC5766", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "0x4000 through 0x7FFF: These values are the allowed channel\r\nnumbers (16,383 possible values).", "correct_text": "0x4000 through 0x7FFF: These values are the allowed channel\r\nnumbers (16,384 possible values).", "notes": "Section 11.2: The channel number is in the range 0x4000 through 0x7FFE\r\n(inclusive);\r\nSince both the values are inclusive it should be 16384 = (0x7FFF-0x4000 + 1)", "submit_date": "2013-12-31", "submitter_name": "Venu", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3860", "doc-id": "RFC6402", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   EnrollmentMessageSyntax-2011-v88\r\n    { iso(1) identified-organization(3) dod(6) internet(1)\r\n      security(5) mechanisms(5) pkix(7) id-mod(0)\r\n      id-mod-enrollMsgSyntax-2011-88(76) }", "correct_text": "   EnrollmentMessageSyntax-2011-v88\r\n    { iso(1) identified-organization(3) dod(6) internet(1)\r\n      security(5) mechanisms(5) pkix(7) id-mod(0)\r\n      id-mod-enrollMsgSyntax-2011-88(75) }", "notes": "The ASN.1 modules in Appendix A.1 and Appendix A.2 use the same module identifier.  This correction fixes this situation, and aligns with the module identifiers assignments.", "submit_date": "2014-01-05", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6199", "doc-id": "RFC7836", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "KEK_VKO (x, y, UKM) is calculated using the formulas:\r\n\r\n\u00a0\u00a0\u00a0 KEK_VKO (x, y, UKM) = H_512 (K (x, y, UKM)),\r\n\r\n\u00a0\u00a0\u00a0 K (x, y, UKM) = (m/q*UKM*x mod q)*(y*P),", "correct_text": "KEK_VKO (x, y, UKM) is calculated using the formulas:\r\n\r\n\u00a0\u00a0\u00a0 KEK_VKO (x, y, UKM) = H_512 (K (x, y, UKM)),\r\n\r\n\u00a0\u00a0\u00a0 K (x, y, UKM) = (m/q*(UKM*x mod q))*(y*P),", "notes": "For now the original text may be interpreted in the wrong way that both multiplications inside the brackets should be performed modulo q. However, multiplication by m/q must be a simple integer multiplication, without reduction modulo q, to eliminate small subgroup component of the input elliptic curve point. The proposed text modification clarifies the correct types and order of multiplication.", "submit_date": "2020-06-03", "submitter_name": "Billy Brumley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-07-01 10:44:20"}, {"errata_id": "3862", "doc-id": "RFC6536", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.2.", "orig_text": "     typedef matchall-string-type {\r\n       type string {\r\n         pattern \"\\*\";\r\n       }\r\n       description\r\n         \"The string containing a single asterisk '*' is used\r\n          to conceptually represent all possible values\r\n          for the particular leaf using this data type.\";\r\n     }", "correct_text": "     typedef matchall-string-type {\r\n       type string {\r\n         pattern '\\*';\r\n       }\r\n       description\r\n         \"The string containing a single asterisk '*' is used\r\n          to conceptually represent all possible values\r\n          for the particular leaf using this data type.\";\r\n     }", "notes": "As per RFC6020, Section 6.1.3., a backslash within a double-quoted string introduces a special character. The only valid escape sequences inside a double-quoted YANG string are: \\n, \\t, \\\" and \\\\. As \\* is not a valid escape sequence, a single quoted string should be used to specify the offending pattern statement's argument. The quotes could also be omitted.", "submit_date": "2014-01-10", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3863", "doc-id": "RFC6536", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.2.", "orig_text": "     typedef group-name-type {\r\n       type string {\r\n         length \"1..max\";\r\n         pattern \"[^\\*].*\";\r\n       }\r\n       description\r\n         \"Name of administrative group to which\r\n          users can be assigned.\";\r\n     }", "correct_text": "     typedef group-name-type {\r\n       type string {\r\n         length \"1..max\";\r\n         pattern '[^\\*].*';\r\n       }\r\n       description\r\n         \"Name of administrative group to which\r\n          users can be assigned.\";\r\n     }", "notes": "As per RFC6020, Section 6.1.3., a backslash within a double-quoted string introduces a special character. The only valid escape sequences inside a double-quoted YANG string are: \\n, \\t, \\\" and \\\\. As \\* is not a valid escape sequence, a single quoted string should be used to specify the offending pattern statement's argument. The quotes could also be omitted.", "submit_date": "2014-01-10", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3864", "doc-id": "RFC3677", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1", "orig_text": "   The Internet Society (ISOC) provides organizational and financial\r\n   support for the IETF.  As stipulated in ISOC's by-laws the IETF is\r\n   called upon to name 3 Trustees to its Board (BoT), with staggered 3\r\n   year terms.  This requires that the IETF name one Trustee each year.", "correct_text": "   The Internet Society (ISOC) provides organizational and financial\r\n   support for the IETF.  As stipulated in ISOC's by-laws the IETF is\r\n   called upon to name four Trustees to its Board (BoT), each with a\r\n   three-year term.  On a three year rotation, the IETF names two\r\n   Trustees, one Trustee, and one Trustee.", "notes": "The Internet Society Bylaws changed on 22 July 2013.  See http://www.internetsociety.org/who-we-are/governance-and-policies/amended-and-restated-laws-internet-society.", "submit_date": "2014-01-10", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3865", "doc-id": "RFC4010", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A.", "orig_text": "     SeedEncryptionAlgorithmInCMS\r\n         { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)\r\n           pkcs9(9) smime(16) modules(0) id-mod-cms-seed(24) }\r\n", "correct_text": "     SeedEncryptionAlgorithmInCMS\r\n         { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)\r\n           pkcs9(9) smime(16) modules(0) id-mod-cms-seed(25) }\r\n", "notes": "The value assigned for id-mod-cms-seed in 25, not 24.  This error will not impact interoperability, but it could impact developers using some ASN.1 tools.", "submit_date": "2014-01-10", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3866", "doc-id": "RFC6210", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.", "orig_text": "  MD5-HASH-EXPERIMENT\r\n    { iso(1) member-body(2) us(840) rsadsi(113549)\r\n      pkcs(1) pkcs-9(9) smime(16) modules(0)\r\n      id-mod-MD5-XOR-EXPERIMENT(999) }", "correct_text": "  MD5-HASH-EXPERIMENT\r\n    { iso(1) member-body(2) us(840) rsadsi(113549)\r\n      pkcs(1) pkcs-9(9) smime(16) modules(0)\r\n      id-mod-MD5-XOR-EXPERIMENT(49) }", "notes": "The value assigned for id-mod-MD5-XOR-EXPERIMENT is 49, not 999. This error will not impact interoperability, but it could impact developers using some ASN.1 tools.", "submit_date": "2014-01-10", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Sean Turner", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4855", "doc-id": "RFC2464", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "For example, the Interface Identifier for an Ethernet interface whose\r\n   built-in address is, in hexadecimal,\r\n\r\n                             34-56-78-9A-BC-DE\r\n\r\n   would be\r\n\r\n                         36-56-78-FF-FE-9A-BC-DE.", "correct_text": "For example, the Interface Identifier for an Ethernet interface whose\r\n   built-in address is, in hexadecimal,\r\n\r\n                             34-56-78-9A-BC-DE\r\n\r\n   would be\r\n\r\n                         32-56-78-FF-FE-9A-BC-DE.", "notes": "U/L bit inversion of 34 should be 32 instead of 36\r\n\r\n--- Verifier note --\r\nThe example is correct: 0x34 = 0x0011 0100\r\nThe U/L bit is \" the next-to-lowest order bit of the first octet of the EUI-64\" 0b00000010\r\nSo flipping this bit in 0x34 gives 0x0011 0110 = 0x36 as in RFC 2464\n --VERIFIER NOTES-- \nThe example is correct: 0x34 = 0x0011 0100\r\n\r\nThe U/L bit is \" the next-to-lowest order bit of the first octet of the EUI-64\" 0b00000010\r\n\r\nSo flipping this bit in 0x34 gives 0x0011 0110 = 0x36 as in RFC 2464\r\n\r\n", "submit_date": "2016-11-06", "submitter_name": "Gigon Olivier", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-28 13:17:06"}, {"errata_id": "3917", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "   struct {\r\n     ProtocolVersion client_version;\r\n     Random random;\r\n     SessionID session_id;\r\n     opaque cookie<0..2^8-1>;                             // New field\r\n     CipherSuite cipher_suites<2..2^16-1>;\r\n           CompressionMethod compression_methods<1..2^8-1>;\r\n   } ClientHello;", "correct_text": "   struct {\r\n     ProtocolVersion client_version;\r\n     Random random;\r\n     SessionID session_id;\r\n     opaque cookie<0..2^8-1>;                             // New field\r\n     CipherSuite cipher_suites<2..2^16-1>;\r\n     CompressionMethod compression_methods<1..2^8-1>;\r\n     select (extensions_present) {\r\n       case false:\r\n         struct {};\r\n       case true:\r\n         Extension extensions<0..2^16-1>;\r\n     };\r\n   } ClientHello;", "notes": "This also affects Section 4.3.2 where the same structure is repeated.\r\n\r\nExtensions are a part of TLS.  They are also part of DTLS in practice, but the RFC omits them.  The corrected text includes the relevant part of the ClientHello from RFC 5246.", "submit_date": "2014-03-14", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3918", "doc-id": "RFC2548", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4.2", "orig_text": "         Call the shared secret S, the pseudo-random 128-bit Request\r\n         Authenticator (from the corresponding Access-Request packet) R,\r\n         and the contents of the Salt field A.  Break P into 16 octet\r\n         chunks p(1), p(2)...p(i), where i = len(P)/16.  Call the\r\n         ciphertext blocks c(1), c(2)...c(i) and the final ciphertext C.\r\n         Intermediate values b(1), b(2)...c(i) are required.", "correct_text": "         Call the shared secret S, the pseudo-random 128-bit Request\r\n         Authenticator (from the corresponding Access-Request packet) R,\r\n         and the contents of the Salt field A.  Break P into 16 octet\r\n         chunks p(1), p(2)...p(i), where i = len(P)/16.  Call the\r\n         ciphertext blocks c(1), c(2)...c(i) and the final ciphertext C.\r\n         Intermediate values b(1), b(2)...b(i) are required.", "notes": "", "submit_date": "2014-03-14", "submitter_name": "Kazuhiko Mino", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3867", "doc-id": "RFC5652", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "digestAlgorithm identifies the message digest algorithm, and any\r\nassociated parameters, used by the signer.", "correct_text": "digestAlgorithm identifies the message digest algorithm, and any\r\nassociated parameters, used by the signer in the signature Generation \r\nProcess. ", "notes": "The text stated that the message digest algorithm is \"used by the signer\". It is unclear for what purpose the message digest algorithm is used.  This recommendation is editorial and was accepted.\r\n\r\n\r\nAdditional text provided was not accepted as there is no requirement that digest used on the body is the same as the digest used in the signature operation.\r\n\r\nThe following sentence was suggested (and rejected):\r\n\"The message digest algorithm shall be equal to the message \r\ndigest algorithm used in the signatureAlgorithm field.\"\r\n\r\nWith the explanation in the original errata report for this additional sentence as:\r\nThere are implementations that use the message digest algorithm specified in the messageDigest field instead of the message digest algorithm specified in the signatureAlgorithm.\r\n\r\nIs the purpose of the messageDigest field to nest the hashing algorithm used in the signing process? If so, please use the corrected text to clarify the goal of the field.", "submit_date": "2014-01-16", "submitter_name": "Jos Breek", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3868", "doc-id": "RFC5464", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.1", "orig_text": "   Example:\r\n\r\n           C: a GETMETADATA \"INBOX\" /private/comment /shared/comment\r\n           S: * METADATA \"INBOX\" (/private/comment \"My comment\"\r\n                                  /shared/comment \"Its sunny outside!\")\r\n           S: a OK GETMETADATA complete\r\n\r\n      In the above example, two entries and their values are returned by\r\n      the server.\r\n\r\n   Example:\r\n\r\n           C: a GETMETADATA \"INBOX\" /private/comment /shared/comment\r\n           S: * METADATA \"INBOX\" (/private/comment \"My comment\")\r\n           S: * METADATA \"INBOX\" (/shared/comment \"Its sunny outside!\")\r\n           S: a OK GETMETADATA complete", "correct_text": "   Example:\r\n\r\n           C: a GETMETADATA \"INBOX\" (/private/comment /shared/comment)\r\n           S: * METADATA \"INBOX\" (/private/comment \"My comment\"\r\n                                  /shared/comment \"Its sunny outside!\")\r\n           S: a OK GETMETADATA complete\r\n\r\n      In the above example, two entries and their values are returned by\r\n      the server.\r\n\r\n   Example:\r\n\r\n           C: a GETMETADATA \"INBOX\" (/private/comment /shared/comment)\r\n           S: * METADATA \"INBOX\" (/private/comment \"My comment\")\r\n           S: * METADATA \"INBOX\" (/shared/comment \"Its sunny outside!\")\r\n           S: a OK GETMETADATA complete", "notes": "ABNF in section 5 for \"getmetadata\" says that when requesting multiple metadata entries, they must be part of a parenthesized list, and not simply space-separated:\r\n\r\ngetmetadata = \"GETMETADATA\" [SP getmetadata-options] SP mailbox SP entries\r\nentries = entry / \"(\" entry *(SP entry) \")\"\r\nentry = astring", "submit_date": "2014-01-16", "submitter_name": "Tim Gokcen", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3869", "doc-id": "RFC5969", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.2", "orig_text": "In order to prevent spoofing of IPv6 addresses, the 6rd BR and CE\r\nMUST validate the embedded IPv4 source address of the encapsulated\r\nIPv6 packet with the IPv4 source address it is encapsulated by\r\naccording to the configured parameters of the 6rd domain.", "correct_text": "In order to prevent spoofing of IPv6 addresses, the 6rd BR and CE\r\nMUST validate the embedded IPv6 source address of the encapsulated\r\nIPv6 packet with the IPv4 source address it is encapsulated by\r\naccording to the configured parameters of the 6rd domain.", "notes": "Authors have verified that the text as written in the RFC is correct, and the proposed change is incorrect.\n --VERIFIER NOTES-- \nAuthors have verified that the text as written in the RFC is correct, and the proposed change is incorrect.", "submit_date": "2014-01-20", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3919", "doc-id": "RFC2548", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4.3", "orig_text": "         Call the shared secret S, the pseudo-random 128-bit Request\r\n         Authenticator (from the corresponding Access-Request packet) R,\r\n         and the contents of the Salt field A.  Break P into 16 octet\r\n         chunks p(1), p(2)...p(i), where i = len(P)/16.  Call the\r\n         ciphertext blocks c(1), c(2)...c(i) and the final ciphertext C.\r\n         Intermediate values b(1), b(2)...c(i) are required.", "correct_text": "         Call the shared secret S, the pseudo-random 128-bit Request\r\n         Authenticator (from the corresponding Access-Request packet) R,\r\n         and the contents of the Salt field A.  Break P into 16 octet\r\n         chunks p(1), p(2)...p(i), where i = len(P)/16.  Call the\r\n         ciphertext blocks c(1), c(2)...c(i) and the final ciphertext C.\r\n         Intermediate values b(1), b(2)...b(i) are required.", "notes": "", "submit_date": "2014-03-14", "submitter_name": "Kazuhiko Mino", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4639", "doc-id": "RFC7530", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.9", "orig_text": "To provide a greater degree of compatibility with NFSv3, which\r\nidentified users and groups by 32-bit unsigned user identifiers and\r\ngroup identifiers, owner and group strings that consist of ASCII-\r\nencoded decimal numeric values with no leading zeros can be given a\r\nspecial interpretation by clients and servers that choose to provide\r\nsuch support.", "correct_text": "To provide a greater degree of compatibility with NFSv3, which\r\nidentified users and groups by 32-bit unsigned user identifiers and\r\ngroup identifiers, owner and group strings that consist of UTF-8\r\nencoded decimal numeric values with no leading zeros can be given a\r\nspecial interpretation by clients and servers that choose to provide\r\nsuch support.", "notes": "The start of section 5.9 says:\r\n\r\nThe RECOMMENDED attributes \"owner\" and \"owner_group\" (and also users\r\nand groups used as values of the who field within nfs4ace structures\r\nused in the acl attribute) are represented in the form of UTF-8\r\nstrings.\r\n\r\nI believe in the case of the digits 0-9 the ASCII encoding is the same as the UTF-8 encoding but it may cause possible confusion by not maintaining consistency.", "submit_date": "2016-03-16", "submitter_name": "Stephen Butler", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4044", "doc-id": "RFC6265", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3", "orig_text": "Otherwise:\r\n\r\n   Set the cookie's persistent-flag to false.\r\n\r\n   Set the cookie's expiry-time to the latest representable\r\n   date.\r\n", "correct_text": "Otherwise:\r\n\r\n   Set the cookie's persistent-flag to false.\r\n\r\n   Set the cookie's expiry-time to the latest representable\r\n   date. This is a best-effort approach to ensure that the cookie \r\n   will effectively expire when \"the current session is over\" \r\n   (as defined by the user agent) and not anytime before.", "notes": "The second action item isn't necessarily obvious for an implementer/reader. If I got the intention right, then I believe it might improve the \"user-friendly\" rating of this document. Otherwise, it might still be beneficial to explicit a bit the reasoning behind that action.\n --VERIFIER NOTES-- \nThis report is actually an enhancement request.  The discussion of this report on the http-state mailing list should be reviewed if the document is ever revised.", "submit_date": "2014-07-06", "submitter_name": "Pierre Lepropre", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4045", "doc-id": "RFC1533", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.10", "orig_text": "The code for the log server option is 8.", "correct_text": "The code for the cookie server option is 8.", "notes": "\n --VERIFIER NOTES-- \n   RFC 1533 was obsoleted by RFC 2132.", "submit_date": "2014-07-07", "submitter_name": "Susumu Endoh", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3873", "doc-id": "RFC6890", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2.3", "orig_text": "                 +----------------------+---------------------+\r\n                 | Attribute            | Value               |\r\n                 +----------------------+---------------------+\r\n                 | Address Block        | ::ffff:0:0/96       |\r\n                 | Name                 | IPv4-mapped Address |\r\n                 | RFC                  | [RFC4291]           |\r\n                 | Allocation Date      | February 2006       |\r\n                 | Termination Date     | N/A                 |\r\n                 | Source               | False               |\r\n                 | Destination          | False               |\r\n                 | Forwardable          | False               |\r\n                 | Global               | False               |\r\n                 | Reserved-by-Protocol | True                |\r\n                 +----------------------+---------------------+\r\n\r\n                       Table 20: IPv4-Mapped Address\r\n", "correct_text": "                 +----------------------+---------------------+\r\n                 | Attribute            | Value               |\r\n                 +----------------------+---------------------+\r\n                 | Address Block        | ::ffff/96       |\r\n                 | Name                 | IPv4-mapped Address |\r\n                 | RFC                  | [RFC4291]           |\r\n                 | Allocation Date      | February 2006       |\r\n                 | Termination Date     | N/A                 |\r\n                 | Source               | False               |\r\n                 | Destination          | False               |\r\n                 | Forwardable          | False               |\r\n                 | Global               | False               |\r\n                 | Reserved-by-Protocol | True                |\r\n                 +----------------------+---------------------+\r\n\r\n                       Table 20: IPv4-Mapped Address\r\n", "notes": "The address block for IPv4-Mapped addresses is ::ffff/96 and not ::ffff:0:0/96.\r\nSee the following reference which is also given in the table:\r\nhttp://tools.ietf.org/html/rfc4291#section-2.5.5.2\n --VERIFIER NOTES-- \n   The proposed change is in error because it puts the 16 marker bits in the lowest 16 bits of the address, where the low 16 bits of the IPv4 address are supposed to go.", "submit_date": "2014-01-23", "submitter_name": "Michael Tuexen", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3874", "doc-id": "RFC791", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "    The number 576 is selected to allow a reasonable sized data block to\r\n    be transmitted in addition to the required header information.  For\r\n    example, this size allows a data block of 512 octets plus 64 header\r\n    octets to fit in a datagram.  The maximal internet header is 60\r\n    octets, and a typical internet header is 20 octets, allowing a\r\n    margin for headers of higher level protocols.", "correct_text": "    The number 576 is selected to allow a reasonable sized data block to\r\n    be transmitted in addition to the required header information.  For\r\n    example, this size allows a data block of 516 octets plus 60 header\r\n    octets to fit in a datagram.  The maximal internet header is 60\r\n    octets, and a typical internet header is 20 octets, allowing a\r\n    margin for headers of higher level protocols.", "notes": "It is not consistent that it first give an example which illustrates the header is 64 octets, but then explains the maximum header size is 60 octets.\n --VERIFIER NOTES-- \nI believe that the discrepancy you are seeing is because in the one case the text is referring to the set of all headers, and in the other case it's referring to the IP header alone.   The IP header does have a maximum size of 60 octets, but for example an IP header plus a UDP header would be 28 octets, and IP+TCP would be 40 octets, plus a timestamp header in current practice.   Notice the \"for example\" at the beginning of the sentence that mentions 64 header octets.", "submit_date": "2014-01-23", "submitter_name": "Bo-Jhang Ho", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3875", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "17", "orig_text": "17 Transcations\r\n\r\n - Additionally, in the case of an INVITE request, the client\r\ntransaction is responsible for generating the ACK request for any\r\nfinal response accepting a 2xx response.", "correct_text": "17 Transcations\r\n\r\n - Additionally, in the case of an INVITE request, the client\r\ntransaction is responsible for generating the ACK request for any\r\nfinal response excepting a 2xx response.", "notes": "Client transaction should generate the ACK except for 2xx responses.It should not accept & generate the ACK for 2xx response.\r\nFor Server transaction RFC says - \"In the case of an INVITE transaction, it absorbs the ACK request for any final response excepting a 2xx response.\"", "submit_date": "2014-01-31", "submitter_name": "Varun Bharadwaj S V", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6735", "doc-id": "RFC5035", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "        ESSCertIDv2 ::=  SEQUENCE {\r\n            hashAlgorithm           AlgorithmIdentifier\r\n                   DEFAULT {algorithm id-sha256},\r\n            certHash                 Hash,\r\n            issuerSerial             IssuerSerial OPTIONAL\r\n        }", "correct_text": "        ESSCertIDv2 ::=  SEQUENCE {\r\n            hashAlgorithm           AlgorithmIdentifier\r\n                   DEFAULT {id-sha256},\r\n            certHash                 Hash,\r\n            issuerSerial             IssuerSerial OPTIONAL\r\n        }", "notes": "No value assignment for 'algorithm' exists, and the definition of id-sha256 already contains the full object identifier.\n --VERIFIER NOTES-- \n   Errata rejected per request from Russ Housley", "submit_date": "2021-11-12", "submitter_name": "Ernst Lawende", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-11-12 22:40:34"}, {"errata_id": "3942", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   When a Diameter server authorizes a user to implement network\r\n   resources for a finite amount of time, and it is willing to extend\r\n   the authorization via a future request, it MUST add the\r\n   Authorization- Lifetime AVP to the answer message.", "correct_text": "   When a Diameter server authorizes a user to implement network\r\n   resources for a finite amount of time, and it is willing to extend\r\n   the authorization via a future request, it MUST add the\r\n   Authorization-Lifetime AVP to the answer message.", "notes": "Authorization-Lifetime was mispelled", "submit_date": "2014-04-01", "submitter_name": "Benoit Claise", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3943", "doc-id": "RFC6402", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.8,", "orig_text": "      ChangeSubjectName ::= SEQUENCE {\r\n          subject             Name OPTIONAL,\r\n          subjectAlt          SubjectAltName OPTIONAL\r\n      }\r\n      (WITH COMPONENTS {..., subject PRESENT} |\r\n            COMPONENTS {..., subjectAlt PRESENT} )", "correct_text": "      ChangeSubjectName ::= SEQUENCE {\r\n          subject             Name OPTIONAL,\r\n          subjectAlt          [1] SubjectAltName OPTIONAL\r\n      }\r\n      (WITH COMPONENTS {..., subject PRESENT} |\r\n            COMPONENTS {..., subjectAlt PRESENT} )", "notes": "Both Name and SubjectAltName use the same tag (SEQUENCE) so it is not possible to distinguish between the two fields without having a tag on one of them.  This fix adds an (arbitrarily chosen) tag so that it is possible to differentiate the two fields.", "submit_date": "2014-04-02", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-12-16 23:49:56"}, {"errata_id": "4046", "doc-id": "RFC4469", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   S: A003 NO [BADURL \"/INBOX;UIDVALIDITY=785799047/;UID=113330;\r\n   section=1.5.9\"] CATENATE append has failed, one message expunged\r\n", "correct_text": "   S: A003 NO [BADURL /INBOX;UIDVALIDITY=785799047/;UID=113330;\r\n   section=1.5.9] CATENATE append has failed, one message expunged\r\n", "notes": "This example treats the url-resp-text in the badurl-response-code as though it were an astring.  It is not: it is a bare imapurl, as stated in section 5:\r\n\r\n   \"The astring in the definition of url and the url-resp-text in the\r\n   definition of badurl-response-code each contain an imapurl as defined\r\n   by [2].\"\r\n\r\nThe example is incorrect, in that the double quotes should be removed so the url-resp-text is a valid imapurl, and only that.", "submit_date": "2014-07-10", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3876", "doc-id": "RFC4303", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Introduction", "orig_text": "Using encryption-only for confidentiality is allowed by ESP. However, it\r\nshould be noted that in general, this will provide defense only against\r\npassive attackers.  Using encryption without a strong integrity\r\nmechanism on top of it (either in ESP or separately via AH) may render\r\nthe confidentiality service insecure against some forms of active\r\nattacks [Bel96, Kra01].  Moreover, an underlying integrity service, such\r\nas AH, applied before encryption does not necessarily protect the\r\nencryption-only confidentiality against active attackers [Kra01]. ESP\r\nallows encryption-only SAs because this may offer considerably better\r\nperformance and still provide adequate security, e.g., when higher-layer\r\nauthentication/integrity protection is offered independently. However,\r\nthis standard does not require ESP implementations to offer an\r\nencryption-only service.", "correct_text": "Using encryption-only for confidentiality is allowed by ESP.\r\nHowever, it should be noted that in general, this will provide defense\r\nonly against passive attackers.  Using encryption without a strong\r\nintegrity mechanism on top of it (either in ESP or separately via AH)\r\nmay render the confidentiality service insecure against some forms of\r\nactive attacks [Bel96, Kra01, DP07].  Moreover, applying AH\r\nbefore encryption does not protect the encryption-only\r\nconfidentiality against active attackers [DP10]. ESP\r\nallows encryption-only SAs primarily for compatibility with older\r\nimplementations, and because this may offer better performance.\r\nIt is noted (and has been demonstrated, e.g. in [DP07]) that\r\nESP in this mode does not provide adequate security even when\r\nhigher-layer authentication/integrity protection is offered\r\nindependently. This standard does not require ESP implementations to\r\noffer an encryption-only service.\r\n\r\n[DP07] Jean Paul Degabriele and Kenneth G. Paterson, Attacking the\r\nIPsec Standards in Encryption-only Configurations, IACR 2007/125.\r\n\r\n[DP10] Jean Paul Degabriele and Kenneth G. Paterson: On the\r\n(in)security of IPsec in MAC-then-encrypt configurations.\r\nACM Conference on Computer and Communications Security 2010:\r\n493-504. ", "notes": "The existing text asserts that ESP in encryption-only mode can in some cases provide \"adequate security\", even though the sense of the paragraph is in general against it. A series of papers published subsequently to the RFC demonstrate that this assertion is incorrect: active attackers can defeat the confidentiality guarantees, and such attacks are practical.", "submit_date": "2014-01-31", "submitter_name": "Yaron Sheffer", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3877", "doc-id": "RFC4254", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.10", "orig_text": "6.10.  Returning Exit Status\r\n\r\n   When the command running at the other end terminates, the following\r\n   message can be sent to return the exit status of the command.\r\n   Returning the status is RECOMMENDED.  No acknowledgement is sent for\r\n   this message.  The channel needs to be closed with\r\n   SSH_MSG_CHANNEL_CLOSE after this message.\r\n\r\n   The client MAY ignore these messages.", "correct_text": "6.10.  Returning Exit Status\r\n\r\n   When the command running at the other end terminates, the following\r\n   message can be sent to return the exit status of the command.\r\n   Returning the status is RECOMMENDED.  No acknowledgement is sent for\r\n   this message.  The channel needs to be closed by the server with\r\n   SSH_MSG_CHANNEL_CLOSE after this message.\r\n\r\n   The client MAY ignore these messages.", "notes": "Even though it can arguably be inferred from the text as written I think it'd make it more clear if the RFC explicitly said that the server is the one that should be sending the SSH_MSG_CHANNEL_CLOSE message.", "submit_date": "2014-02-02", "submitter_name": "Jim Wigginton", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3878", "doc-id": "RFC4254", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "   The maximum amount of data allowed is determined by the maximum\r\n   packet size for the channel, and the current window size, whichever\r\n   is smaller.  The window size is decremented by the amount of data\r\n   sent.  Both parties MAY ignore all extra data sent after the allowed\r\n   window is empty.", "correct_text": "   The maximum amount of data allowed is determined by the maximum\r\n   packet size for the channel, and the current window size, whichever\r\n   is smaller.  The window size is decremented by the length of the data\r\n   sent, length field included.  Both parties MAY ignore all extra data\r\n   sent after the allowed window is empty.", "notes": "This is the data transfer packet:\r\n\r\n      byte      SSH_MSG_CHANNEL_DATA\r\n      uint32    recipient channel\r\n      string    data\r\n\r\nSince string's are defined by RFC4251 as being \"stored as a uint32 containing its length (number of bytes that follow) and zero (= empty string) or more     bytes that are the value of the string\" it's unclear weather or not the uint32 length field contributes to the total or not. In my interoperability testing it seems that it does but it doesn't seem that this is all that clear from this RFC.\r\n\r\nIt is also unclear from this RFC whether or not SSH_MSG_CHANNEL_EXTENDED_DATA should be decrementing from the window size or not. A strict interpretation would suggest it does not since the RFC makes no mention of it.", "submit_date": "2014-02-02", "submitter_name": "Jim Wigginton", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4482", "doc-id": "RFC5575", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4 (page 11)", "orig_text": "   An example of a flow specification encoding for: \"all packets to\r\n   10.0.1/24 from 192/8 and port {range [137, 139] or 8080}\".\r\n\r\n   +------------------+----------+-------------------------+\r\n   | destination      | source   | port                    |\r\n   +------------------+----------+-------------------------+\r\n   | 0x01 18 0a 01 01 | 02 08 c0 | 04 03 89 45 8b 91 1f 90 |\r\n   +------------------+----------+-------------------------+", "correct_text": "   An example of a flow specification encoding for: \"all packets to\r\n   10.1.1/24 from 192/8 and port {range [137, 139] or 8080}\".\r\n\r\n   +------------------+----------+-------------------------+\r\n   | destination      | source   | port                    |\r\n   +------------------+----------+-------------------------+\r\n   | 0x01 18 0a 01 01 | 02 08 c0 | 04 03 89 45 8b 91 1f 90 |\r\n   +------------------+----------+-------------------------+\r\n\r\nOR:\r\n\r\n   An example of a flow specification encoding for: \"all packets to\r\n   10.0.1/24 from 192/8 and port {range [137, 139] or 8080}\".\r\n\r\n   +------------------+----------+-------------------------+\r\n   | destination      | source   | port                    |\r\n   +------------------+----------+-------------------------+\r\n   | 0x01 18 0a 00 01 | 02 08 c0 | 04 03 89 45 8b 91 1f 90 |\r\n   +------------------+----------+-------------------------+", "notes": "The prefix stated in the text, does not match the one encoded in the example.\r\n\r\n10.0.1/24 should be 10.1.1/24 to match the example, or alternatively the example should change from:\r\n0x01 18 0a 01 01\r\nto:\r\n0x01 18 0a 00 01", "submit_date": "2015-09-25", "submitter_name": "Wesley Eddy", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7692", "doc-id": "RFC8806", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   There is a risk that a system using a local authoritative server for\r\n   the root zone cannot refresh the contents of the root zone before the\r\n   expire time in the SOA.  A system using a local authoritative server\r\n   for the root zone MUST NOT serve stale data for the root zone.  To\r\n   mitigate the risk that stale data is served, the local root server\r\n   MUST immediately switch to using non-local root servers when it\r\n   detects that it would be serving state data.", "correct_text": "   There is a risk that a system using a local authoritative server for\r\n   the root zone cannot refresh the contents of the root zone before the\r\n   expire time in the SOA.  A system using a local authoritative server\r\n   for the root zone MUST NOT serve stale data for the root zone.  To\r\n   mitigate the risk that stale data is served, the local root server\r\n   MUST immediately switch to using non-local root servers when it\r\n   detects that it would be serving stale data.", "notes": "Based on the context, it seems that in the last sentence the intended word is \"stale\" as in stale data, instead of \"state\". So, I believe there might be a typo in the text, and the correct interpretation would be to swith back to the non-local root when stale data is detected.", "submit_date": "2023-10-31", "submitter_name": "Deliang Chang", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-10-31 16:57:06"}, {"errata_id": "6736", "doc-id": "RFC8995", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.5", "orig_text": "MASA implementations SHOULD anticipate future media ntypes but, \r\nof course, will simply fail the request if those types are not \r\nyet known.", "correct_text": "MASA implementations SHOULD anticipate future media types but, \r\nof course, will simply fail the request if those types are not \r\nyet known.", "notes": "\"ntypes\" is not a word", "submit_date": "2021-11-13", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-27 23:49:38"}, {"errata_id": "3879", "doc-id": "RFC6890", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2.3", "orig_text": "                    +----------------------+----------------+\r\n                    | Attribute            | Value          |\r\n                    +----------------------+----------------+\r\n                    | Address Block        | 2001::/32      |\r\n                    | Name                 | TEREDO         |\r\n                    | RFC                  | [RFC4380]      |\r\n                    | Allocation Date      | January 2006   |\r\n                    | Termination Date     | N/A            |\r\n                    | Source               | True           |\r\n                    | Destination          | True           |\r\n                    | Forwardable          | True           |\r\n                    | Global               | False          |\r\n                    | Reserved-by-Protocol | False          |\r\n                    +----------------------+----------------+\r\n\r\n                             Table 23: TEREDO\r\n\r\n                     +----------------------+--------------+\r\n                     | Attribute            | Value        |\r\n                     +----------------------+--------------+\r\n                     | Address Block        | fc00::/7     |\r\n                     | Name                 | Unique-Local |\r\n                     | RFC                  | [RFC4193]    |\r\n                     | Allocation Date      | October 2005 |\r\n                     | Termination Date     | N/A          |\r\n                     | Source               | True         |\r\n                     | Destination          | True         |\r\n                     | Forwardable          | True         |\r\n                     | Global               | False        |\r\n                     | Reserved-by-Protocol | False        |\r\n                     +----------------------+--------------+\r\n\r\n                          Table 28: Unique-Local\r\n", "correct_text": "                    +----------------------+----------------+\r\n                    | Attribute            | Value          |\r\n                    +----------------------+----------------+\r\n                    | Address Block        | 2001::/32      |\r\n                    | Name                 | TEREDO         |\r\n                    | RFC                  | [RFC4380]      |\r\n                    | Allocation Date      | January 2006   |\r\n                    | Termination Date     | N/A            |\r\n                    | Source               | True           |\r\n                    | Destination          | True           |\r\n                    | Forwardable          | True           |\r\n                    | Global               | N/A [RFC4380]  |\r\n                    | Reserved-by-Protocol | False          |\r\n                    +----------------------+----------------+\r\n\r\n                             Table 23: TEREDO\r\n\r\n                    +----------------------+----------------+\r\n                    | Attribute            | Value          |\r\n                    +----------------------+----------------+\r\n                    | Address Block        | fc00::/7       |\r\n                    | Name                 | Unique-Local   |\r\n                    | RFC                  | [RFC4193]      |\r\n                    | Allocation Date      | October 2005   |\r\n                    | Termination Date     | N/A            |\r\n                    | Source               | True           |\r\n                    | Destination          | True           |\r\n                    | Forwardable          | True           |\r\n                    | Global               | N/A [RFC4193]  |\r\n                    | Reserved-by-Protocol | False          |\r\n                    +----------------------+----------------+\r\n\r\n                          Table 28: Unique-Local\r\n", "notes": "The global scope of TEREDO prefix (2001::/32) and Unique-Local prefix (fc00::/7) is not false.\r\nThe proposed revision is N/A with reference to each RFC.\n --VERIFIER NOTES-- \n  After discussion, we concluded that the ULA prefix change is not appropriate; a second erratum containing just the Teredo change has been submitted, so this one is not needed.", "submit_date": "2014-02-03", "submitter_name": "Masataka MAWATARI", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3880", "doc-id": "RFC6749", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "10.16", "orig_text": "For public clients using implicit flows, this specification does not\r\nprovide any method for the client to determine what client an access\r\ntoken was issued to.", "correct_text": "For public clients using implicit flows, this specification does not\r\nprovide any method for the authorization server to determine what\r\nclient an access token was issued to.", "notes": "A client can only know about tokens issued to it and not for other clients.\r\n\r\nFrom the WG:\r\nhttps://www.ietf.org/mail-archive/web/oauth/current/msg12391.html\n --VERIFIER NOTES-- \n   The current text is correct, see https://www.ietf.org/mail-archive/web/oauth/current/msg12391.html", "submit_date": "2014-02-04", "submitter_name": "Eriksen Costa", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3881", "doc-id": "RFC7012", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "The current encodings of these data types for use with the IPFIX \r\nprotocol are defined in [RFC7011]; encodings allowing the use of \r\nthe IPFIX Information Elements [IANA-IPFIX] with other protocols \r\nmay be defined in the future by referencing this document.", "correct_text": "The abstract data type definitions in this section are intended \r\nonly to define the values which can be taken by Information \r\nElements of each type. The encodings of these data types for \r\nuse with the IPFIX protocol are defined in Section 6.1 of \r\n[RFC7011]; encodings allowing the use of the IPFIX Information \r\nElements [IANA-IPFIX] with other protocols may be defined in \r\nthe future by referencing this document. Note that for timestamp \r\nencodings (sections 3.1.15 - 3.1.18), it is the responsibility of \r\nthe encoding to ensure that each representation has an \r\nunambiguous mapping to a moment in time (e.g. relative to a \r\ndefined epoch).", "notes": "The separation of epoch selection between ADT and encoding in 7011 and 7012 (as compared to 5101 and 5102, which they obsolete, respectively) led to it being unclear that timestamp ADTs require a fixed reference epoch for interpretation. This change clarifies the point, replacing Errata ID 3852.", "submit_date": "2014-02-05", "submitter_name": "Brian Trammell", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4483", "doc-id": "RFC5952", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "\u2014", "correct_text": "\u2014", "notes": "Errata ID 2656, reported by D. Stussy in 2010-12-02 is CORRECT and perfectly justified.\r\nThis was however rejected on 2012-05-30. Justification on \"verified notes\" states \"This errata is attempting to overturn the clear consensus of the WG.\", which is WRONG, since WG consensus applies to the whole document, not specifically to section 4.3 or its unjustified and arbitrary lowercase conventioning.\r\nThere is no technical reason why lowercase \"must\" or \"should\" be used, instead, HISTORICALLY (which for any IETF work has been the \"de facto\" rule) uppercase has been used (see full justification in Errata ID 2656 mentioned above).\r\nAdditionally, and considering that modern devices are able to properly handle case changes without performance losses, the WG should discuss removing this rule altogether.\n --VERIFIER NOTES-- \nThe consensus of the working group was to employ lowercase despite your arguments.  This erratum is attempting to overturn the consensus of the WG during the publication of this RFC.", "submit_date": "2015-09-26", "submitter_name": "Andr\u00e9 Melancia", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4484", "doc-id": "RFC3580", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   The purpose of this attribute is to make it possible to link together\r\n   multiple related sessions.  While [IEEE8021X] does not act on\r\n   aggregated ports, it is possible for a Supplicant roaming between\r\n   Access Points to cause multiple RADIUS accounting packets to be sent\r\n   by different Access Points.", "correct_text": "   The purpose of this attribute is to make it possible to link together\r\n   multiple related sessions.  While [IEEE8021X] does not act on\r\n   aggregated ports, it is possible for a Supplicant roaming between\r\n   Basic Service Sets to cause multiple RADIUS accounting packets to be\r\n   sent by the same or different Access Points.", "notes": "This was written in the context of an Access Point only offering a single Basic Service Set, predating Access Points containing multiple radios or supporting Virtual Access Points. It is not accurate today.", "submit_date": "2015-09-27", "submitter_name": "Nick Lowe", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4856", "doc-id": "RFC6241", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.2", "orig_text": "config:  A hierarchy of configuration data as defined by one of\r\n         the device's data models.  The contents MUST be placed in an\r\n         appropriate namespace, to allow the device to detect the\r\n         appropriate data model, and the contents MUST follow the\r\n         constraints of that data model, as defined by its capability\r\n         definition.  Capabilities are discussed in Section 8.", "correct_text": "config:  A hierarchy of configuration data as defined by one or more of\r\n         the device's data models.  The contents MUST be placed in an\r\n         appropriate namespace, to allow the device to detect the\r\n         appropriate data model, and the contents MUST follow the\r\n         constraints of that data model, as defined by its capability\r\n         definition.  Capabilities are discussed in Section 8.", "notes": "\n --VERIFIER NOTES-- \nAs discussed on the NETCONF mailing list.", "submit_date": "2016-11-08", "submitter_name": "frank feng", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8288", "doc-id": "RFC9562", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   Length:\r\n      The length of a given timestamp directly impacts how many\r\n      timestamp ticks can be contained in a UUID before the maximum\r\n      value for the timestamp field is reached.  Take care to ensure\r\n      that the proper length is selected for a given timestamp.  UUIDv1\r\n      and UUIDv6 utilize a 60-bit timestamp valid until 5623 AD; UUIDv7\r\n      features a 48-bit timestamp valid until the year 10889 AD.", "correct_text": "   Length:\r\n      The length of a given timestamp directly impacts how many\r\n      timestamp ticks can be contained in a UUID before the maximum\r\n      value for the timestamp field is reached.  Take care to ensure\r\n      that the proper length is selected for a given timestamp.  UUIDv1\r\n      and UUIDv6 utilize a 60-bit timestamp valid until 5236 AD; UUIDv7\r\n      features a 48-bit timestamp valid until the year 10889 AD.", "notes": "I believe the error is the result of a bad calculation that used the Unix epoch as the zero-date instead of the Gregorian calendar's 1582 zero-date. I've seen online references to the following [incorrect] calculation for determining the UUIDv1 maximum date: (2^60 / 10^7 / 60 / 60 / 24 / 365.25 + 1970) = 5623.38778807. Source: https://github.com/uuid6/uuid6-ietf-draft/issues/23#issuecomment-898866487\r\n\r\nThat is: (bitsOfTimeData / 100 nanoseconds / secondsPerMin / minutesPerHour / hoursPerDay / daysPerYear + unixEpochYear). However, the max date for v1 and v6 is based, not on the Unix epoch year, but on the year 1582 (Ref: section 5.1).\r\n\r\n\r\nThe same calculation, but using 1582 as the trailing year added, is 5235.38778807.\r\n\r\n\r\n\r\n\r\nDoing manual math approximation:\r\n\r\n60 bits = 2^60 = 1152921504606846976 one-hundred-nano-second-intervals\r\n1152921504606846976 * 100 = 115292150460684697600 nanoseconds\r\n\r\n115292150460684697600 nanoseconds / 31557600000000000 nanosecondPerYear (365.25 daysPerYear assumed) =~ 3653.3878 years.\r\n\r\nDate math: 1582.7890 + 3653.3878 years = 5236.1768 =~ March of 5236\r\n\r\n\r\n\r\n\r\nExact date math spot checking using a couple of programming languages calculators:\r\n\r\nGo:\r\n\r\npackage main\r\n\r\nimport (\r\n\t\"fmt\"\r\n\t\"time\"\r\n)\r\n\r\nfunc main() {\r\n\tt := time.Date(1582, 10, 15, 0, 0, 0, 0, time.UTC)\r\n\tfor _ = range 100 {\r\n\t\tt = t.Add(1152921504606846976)\r\n\t}\r\n\tfmt.Println(t)\r\n}\r\n\r\n\r\nOutput: 5236-03-31 21:21:00.6846976 +0000 UTC\r\n\r\n\r\n\r\nPython:\r\n\r\nfrom datetime import datetime, timedelta, timezone\r\n\r\nstart_date = datetime(1582, 10, 15, tzinfo=timezone.utc)\r\n\r\nnanoseconds = 115292150460684697600\r\nseconds = nanoseconds // 1_000_000_000  # Convert to seconds\r\nremaining_nanoseconds = nanoseconds % 1_000_000_000\r\nmicroseconds = remaining_nanoseconds // 1000  # Convert remaining to microseconds\r\n\r\ndelta = timedelta(seconds=seconds, microseconds=microseconds)\r\n\r\nresult_date = start_date + delta\r\n\r\nprint(result_date)\r\n\r\n\r\nOutput: 5236-03-31 21:21:00.684697+00:00\r\n\r\n\r\n\r\nJavascript:\r\n\r\nconst startDate = new Date(Date.UTC(1582, 9, 15)); // Month is 0-based in JS\r\nconst nanoseconds = BigInt('115292150460684697600');\r\n\r\nconst milliseconds = Number(nanoseconds / BigInt(1_000_000));\r\n\r\nconst resultDate = new Date(startDate.getTime() + milliseconds);\r\n\r\nconsole.log(resultDate.toUTCString());\r\n\r\n\r\nOutput: Mon, 31 Mar 5236 21:21:00 GMT", "submit_date": "2025-02-08", "submitter_name": "Nathan McGarvey", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-02-24 21:35:49"}, {"errata_id": "3882", "doc-id": "RFC5492", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "\"   A BGP speaker determines that its peer doesn't support capabilities\r\n   advertisement if, in response to an OPEN message that carries the\r\n   Capabilities Optional Parameter, the speaker receives a NOTIFICATION\r\n   message with the Error Subcode set to Unsupported Optional Parameter.\r\n   (This is a consequence of the base BGP-4 specification [RFC4271] and\r\n   not a new requirement.)  In this case, the speaker SHOULD attempt to\r\n   re-establish a BGP connection with the peer without sending to the\r\n   peer the Capabilities Optional Parameter.\"\r\n", "correct_text": "\"   A BGP speaker determines that its peer doesn't support capabilities\r\n   advertisement if, in response to an OPEN message that carries the\r\n   Capabilities Optional Parameter, the speaker receives a NOTIFICATION\r\n   message with the Error Subcode set to Unsupported Optional Parameter.\r\n   (This is a consequence of the base BGP-4 specification [RFC4271] and\r\n   not a new requirement.) The next actions depends on the BGP\r\n   speaker that received the NOTIFICATION. The speaker may intend to\r\n   re-establish a BGP connection with the peer. In this case, the \r\n   speaker SHOULD attempt to re-establish a BGP connection with the \r\n   peer without sending to the peer the Capabilities Optional \r\n   Parameter. On the other hand, the speaker may not intend to \r\n   re-establish peering.  For example, a BGP speaker may not intend \r\n   to re-establish peering if it established\r\n   peering to exchange IPv6 routes and determines that its peer does not\r\n   support capabilities advertisement. The decision to re-establish the\r\n   peering is local to the speaker.\"\r\n", "notes": "Notes: As explained above, it does not always make sense to \r\nre-establish peering when the peer does not support capabilities \r\nadvertisement. Indeed, in a very similar scenario, this RFC itself\r\nsuggests the proposed behavior. Consider the following text in \r\nSection 3:\r\n\r\n\"   If a BGP speaker that supports a certain capability determines that\r\n   its peer doesn't support this capability, the speaker MAY send a\r\n   NOTIFICATION message to the peer and terminate peering (see Section\r\n   \"Extensions to Error Handling\" for more details).  For example, a BGP\r\n   speaker may need to terminate peering if it established peering to\r\n   exchange IPv6 routes and determines that its peer does not support\r\n   Multiprotocol Extensions for BGP-4 [RFC4760].  The Error Subcode in\r\n   the NOTIFICATION message is then set to Unsupported Capability.  The\r\n   message MUST contain the capability or capabilities that cause the\r\n   speaker to send the message.  The decision to send the message and\r\n   terminate the peering is local to the speaker.  If terminated, such\r\n   peering SHOULD NOT be re-established automatically.\"\n --VERIFIER NOTES-- \nThis is a technical matter that should be discussed in the WG and if the WG decides that clarification is needed it should be addressed in an RFC.\r\n\r\nThe text referenced above is a SHOULD, and thus an implementation decision. The provision of further guidance to the implementer is outside the scope of the errata process.", "submit_date": "2014-02-05", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3883", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8.5.3", "orig_text": "      Every 3 hours from 9:00 AM to 5:00 PM on a specific day:\r\n\r\n       DTSTART;TZID=America/New_York:19970902T090000\r\n       RRULE:FREQ=HOURLY;INTERVAL=3;UNTIL=19970902T170000Z\r\n\r\n       ==> (September 2, 1997 EDT) 09:00,12:00,15:00\r\n", "correct_text": "      Every 3 hours from 9:00 AM to 5:00 PM on a specific day:\r\n\r\n       DTSTART;TZID=America/New_York:19970902T090000\r\n       RRULE:FREQ=HOURLY;INTERVAL=3;UNTIL=19970902T210000Z\r\n\r\n       ==> (September 2, 1997 EDT) 09:00,12:00,15:00\r\n", "notes": "The UNTIL rule part is specified with UTC time, which was four hours ahead of America/New_York on 19970902. So 170000Z would only be 1:00 PM on that day.\r\n\r\nThe corrected UNTIL rule matches the description (from 9 to 5).  Note that \"UNTIL=19970902T190000Z\" would have the same effect (the last event is at 3 PM in New York, which is 19:00 Z), but 21:00 Z is what matches the description. ", "submit_date": "2014-02-05", "submitter_name": "Bruce Florman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3884", "doc-id": "RFC5952", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.2.", "orig_text": "4.2.2.  Handling One 16-Bit 0 Field\r\n\r\n   The symbol \"::\" MUST NOT be used to shorten just one 16-bit 0 field.\r\n   For example, the representation 2001:db8:0:1:1:1:1:1 is correct, but\r\n   2001:db8::1:1:1:1:1 is not correct.", "correct_text": "4.2.2.  Incorrect use of \"::\"\r\n\r\n   The symbol \"::\" MUST NOT be used to shorten just one 16-bit 0 field.\r\n   For example, the representation 2001:db8:0:1:1:1:1:1 is correct, but\r\n   2001:db8::1:1:1:1:1 is not correct.\r\n\r\n   The symbol \"::\" MUST NOT be used just so. For example, the\r\n   representation 2001:db8:1:1:1:1:1:1 is correct, but\r\n   2001:db8:1:1::1:1:1:1 is not correct.", "notes": "You would think this should be obvious, but I have seen actual discussions that 2001:db8:1:1::1:1:1:1 is correct syntax. Explicitly forbidding this form does no harm and stops all discussions in this direction.\r\n\r\nThanks for your work.\n --VERIFIER NOTES-- \nAs agreed to by the document authors and the submitter, there is a reference to RFC 4291 that addresses the concern.", "submit_date": "2014-02-06", "submitter_name": "Richard Hartmann", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3885", "doc-id": "RFC6940", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14.9", "orig_text": "   | Reserved                            | 0x8000..0xFFFE |  RFC 6940 |", "correct_text": "   | Reserved                            | 0x8000..0xFFFF |  RFC 6940 |", "notes": "Clearly there was some confusion and at least one of the authors thought that 0xFFFE was the largest 16 bit integer when in fact it should have been 0xFFFF. I would like to thank Pearl Liang for catching this mistake.", "submit_date": "2014-02-07", "submitter_name": "Cullen Jennings", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3886", "doc-id": "RFC5243", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "", "correct_text": "RFC 3623 \"Graceful OSPF Restart\" in section 2.2 \"When to Exit\r\nGraceful Restart\" specifies that if router recovering its LSDB\r\nafter switchover did not receive its own pre-restart Router LSA\r\nfrom neighbor helping in Graceful Restart then this should\r\nbe treated as unrecoverable change in the LSDB incompatible with\r\nthe Graceful Restart. To satisfy this verification neighbor's\r\nRouter LSA must never be optimized out of DBD exchange with a\r\nneighbor performing Graceful Restart. This may happen if the\r\nrestarting router has multiple adjacencies and has already\r\nlearned its pre-restart Router LSA from some neighbors before\r\nstarting DBD exchange with others.\r\n", "notes": "\n --VERIFIER NOTES-- \nThis appears to be a technical extension to the RFC and is thus outside the scope of the errata process.\r\n\r\nThe submitter should address the issue by publishing an RFC. ", "submit_date": "2014-02-10", "submitter_name": "Anton Smirnov", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3887", "doc-id": "RFC6887", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "N/A", "orig_text": "N/A", "correct_text": "N/A", "notes": "How PCP applies in the Dual-Egress NAT scene?\r\n\r\nIf the gateway device has two or more out interfaces to internet were doing different nat conversion in the ISP. \r\nPCP MAP mode does not include the destination address, the gateway device how to choose the out interfaces? And how to choose the different NAT address pools? \r\nThis scene is very common in the ISP, it means that PCP does not apply in this scene?\n --VERIFIER NOTES-- \nThis is not the right way to address the issue you have raised.   Please raise this issue in the PCP working group, so that the working group can come up with a consensus answer to the question.", "submit_date": "2014-02-11", "submitter_name": "Channy Zhang", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3888", "doc-id": "RFC4402", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "PRF+(K, L, S) = truncate(L, T1 || T2 || .. || Tn)", "correct_text": "PRF+(K, L, S) = truncate(L, T0 || T1 || .. || Tn)", "notes": "Implementors have started the counter for the PRF+ construction at 0, not 1.\r\n\r\nPaul Wouters(Sec AD): This was fixed in RFC 7802 which also obsoletes this RFC", "submit_date": "2014-02-12", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-03-07 19:26:37"}, {"errata_id": "3891", "doc-id": "RFC6887", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "13.3", "orig_text": "The Prefix Length indicates how many bits of the address are used for\r\nthe filter.  For IPv4 addresses (which are encoded using the\r\nIPv4-mapped address format (::FFFF:0:0/96)), this means valid prefix\r\nlengths are between 96 and 128 bits, inclusive.  That is, add 96 to\r\nthe IPv4 prefix length.  For IPv6 addresses, valid prefix lengths are\r\nbetween 0 and 128 bits, inclusive.  Values outside those ranges cause\r\nthe PCP server to return the MALFORMED_OPTION result code.\r\n\r\nTo remove all existing filters, the Prefix Length 0 is used.  There\r\nis no mechanism to remove a specific filter.\r\n", "correct_text": "The Prefix Length indicates how many bits of the address are used for\r\nthe filter.  For IPv4 addresses (which are encoded using the\r\nIPv4-mapped address format (::FFFF:0:0/96)), this means valid prefix\r\nlengths are between 97 and 128 bits, inclusive.  That is, add 96 to\r\nthe IPv4 prefix length.  For IPv6 addresses, valid prefix lengths are\r\nbetween 1 and 128 bits, inclusive.  Values outside those ranges cause\r\nthe PCP server to return the MALFORMED_OPTION result code.\r\n\r\nTo remove all existing filters, the Prefix Length 0 is used.  The\r\nRemote Peer Port and Remote Peer IP Address fields MUST be set to zero\r\non transmission and MUST be ignored on reception.  There is no\r\nmechanism to remove a specific filter. \r\n", "notes": "A mapping with a filter containing an address-specific prefix length of 0 doesn't provide any value as it's no different to a mapping with no filters at all.\r\n\r\nSince a prefix length of 0 is not even possible for IPv6 addresses, it should not be possible for IPv4 addresses either. Therefore the valid prefix length range for IPv4 addresses should be 97 to 128 bits inclusive and the valid range for IPv6 addresses should be documented as 1 to 128 bits inclusive in addition to a prefix length of 0 being documented as the special case.\r\n\r\nAlso clarify in that special case that it doesn't matter what the remote peer port and IP address fields are and therefore follow the convention throughout the RFC of setting to zero on transmission and ignoring on reception.", "submit_date": "2014-02-14", "submitter_name": "Matt Dainty", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3892", "doc-id": "RFC6321", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.1.1", "orig_text": "   BEGIN:VCALENDAR\r\n   CALSCALE:GREGORIAN\r\n   PRODID:-//Example Inc.//Example Calendar//EN\r\n   VERSION:2.0\r\n   BEGIN:VEVENT\r\n   DTSTAMP:20080205T191224Z\r\n   DTSTART:20081006\r\n   SUMMARY:Planning meeting\r\n   UID:4088E990AD89CB3DBB484909\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n", "correct_text": "   BEGIN:VCALENDAR\r\n   CALSCALE:GREGORIAN\r\n   PRODID:-//Example Inc.//Example Calendar//EN\r\n   VERSION:2.0\r\n   BEGIN:VEVENT\r\n   DTSTAMP:20080205T191224Z\r\n   DTSTART;VALUE=DATE:20081006\r\n   SUMMARY:Planning meeting\r\n   UID:4088E990AD89CB3DBB484909\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n\r\n", "notes": "The default value type of DTSTART is DATE-TIME. The definition of DATE-TIME makes the time portion mandatory. By declaring the value type explicitly, this solution makes the value legal and matches the xCal sample in B.1.2\r\n\r\nAnother solution is to change the property value to match the default DATE-TIME type\r\n    DTSTART:20081006T191224Z\r\nand adjust the xCal example in B.1.2 to match\r\n        <dtstart>\r\n          <date-time>2008-10-06T19:12:24Z</date-time>\r\n        </dtstart>", "submit_date": "2014-02-14", "submitter_name": "Clement Pellerin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3895", "doc-id": "RFC6550", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.8", "orig_text": "1.  The DODAG Parent Address subfield of a Transmit Information\r\n    option MUST be empty.\r\n\r\n5. ...\r\n\r\n   When a storing node generates a DAO, it uses the stored state of DAOs\r\n   it has received to produce a set of RPL Target options and their\r\n   associated Transmit Information options.\r\n", "correct_text": "1.  The DODAG Parent Address subfield of a Transit Information\r\n    option MUST be empty.\r\n\r\n5. ...\r\n\r\n   When a storing node generates a DAO, it uses the stored state of DAOs\r\n   it has received to produce a set of RPL Target options and their\r\n   associated Transit Information options.", "notes": "There is no \"Transmit Information option\", It should be Transit Information option. ", "submit_date": "2014-02-17", "submitter_name": "Lei Mou", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3896", "doc-id": "RFC2866", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "This memo documents the RADIUS Accounting protocol.  The early\r\ndeployment of RADIUS Accounting was done using UDP port number 1646,\r\nwhich conflicts with the \"sa-msg-port\" service.  The officially\r\nassigned port number for RADIUS Accounting is 1813.", "correct_text": "", "notes": "The whole 3rd paragraph of section 3 is a duplicate of \"Implementation Note\" section and is barely related to packet format description.", "submit_date": "2014-02-18", "submitter_name": "Andrew Kowal", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3899", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A.", "orig_text": "// Put the bytes of \"time\" to the message\r\n// Input is text value of minutes\r\n    if(timeStampLength > 0){\r\n        bArray = hexStr2Bytes(timeStamp);\r\n        System.arraycopy(bArray, 0, msg, ocraSuiteLength + 1 +\r\n            counterLength + questionLength +\r\n            passwordLength + sessionInformationLength,\r\n            bArray.length);\r\n    }", "correct_text": "// Put the bytes of \"time\" to the message\r\n// Input is HEX encoded value of minutes\r\n    if(timeStampLength > 0){\r\n        bArray = hexStr2Bytes(timeStamp);\r\n        System.arraycopy(bArray, 0, msg, ocraSuiteLength + 1 +\r\n            counterLength + questionLength +\r\n            passwordLength + sessionInformationLength,\r\n            bArray.length);\r\n    }", "notes": "The timestamp should be HEX encoded since hexStr2Bytes() is used. Otherwise it will fail to generate the correct OTP", "submit_date": "2014-02-24", "submitter_name": "Marcus Bring", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7062", "doc-id": "RFC6991", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "     typedef ipv4-address-no-zone {\r\n       type inet:ipv4-address {\r\n         pattern '[0-9\\.]*';\r\n       }\r\n       description\r\n         \"An IPv4 address without a zone index.  This type, derived from\r\n          ipv4-address, may be used in situations where the zone is\r\n          known from the context and hence no zone index is needed.\";\r\n     }", "correct_text": "     typedef ipv4-address-no-zone {\r\n       type inet:ipv4-address {\r\n         pattern '(([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])\\.){3}'\r\n         +  '([0-9]|[1-9][0-9]|1[0-9][0-9]|2[0-4][0-9]|25[0-5])';\r\n       }\r\n       description\r\n         \"An IPv4 address without a zone index.  This type, derived from\r\n          ipv4-address, may be used in situations where the zone is\r\n          known from the context and hence no zone index is needed.\";\r\n     }", "notes": "As per RFC 4001, dotted decimal format of IPv4 address is typically written in decimal digits, formatted as four 8-bit fields that are separated by periods.\n --VERIFIER NOTES-- \nSince the ipv4-address-no-zone type is derived from the ipv4-address\r\ntype and the ipv4-address type has the detailed pattern, there is no\r\nneed to repeat the details. An ipv4-address value has to satisfy both\r\nthe ipv4-address-no-zone pattern and the ipv4-address pattern.\r\n", "submit_date": "2022-07-29", "submitter_name": "Mazhar Rana", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2022-07-29 22:43:07"}, {"errata_id": "3944", "doc-id": "RFC7139", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "      ODUk.ts       Minimum          Nominal          Maximum\r\n      -----------------------------------------------------------\r\n      ODU2.ts    1,249,384.632    1,249,409.620     1,249,434.608\r\n      ODU3.ts    1,254,678.635    1,254,703.729     1,254,728.823\r\n      ODU4.ts    1,301,683.217    1,301,709.251     1,301,735.285\r\n\r\n              Table 1: Actual TS Bit Rate of ODUk (in Kbps)\r\n", "correct_text": "      ODTUk.ts       Minimum          Nominal           Maximum\r\n      ------------------------------------------------------------\r\n      ODTU2.ts    1,249,384.632    1,249,409.620     1,249,434.608\r\n      ODTU3.ts    1,254,678.635    1,254,703.729     1,254,728.823\r\n      ODTU4.ts    1,301,683.217    1,301,709.251     1,301,735.285\r\n\r\n              Table 1: Actual TS Bit Rate of ODUk (in Kbps)\r\n", "notes": "", "submit_date": "2014-04-02", "submitter_name": "Fred Gruman", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8107", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7", "orig_text": "   During the handshake, ACK records MUST be sent with an epoch which is\r\n   equal to or higher than the record which is being acknowledged.  Note\r\n   that some care is required when processing flights spanning multiple\r\n   epochs.  For instance, if the client receives only the ServerHello\r\n   and Certificate and wishes to ACK them in a single record, it must do\r\n   so in epoch 2, as it is required to use an epoch greater than or\r\n   equal to 2 and cannot yet send with any greater epoch.\r\n   Implementations SHOULD simply use the highest current sending epoch,\r\n   which will generally be the highest available.  After the handshake,\r\n   implementations MUST use the highest available sending epoch.", "correct_text": "   During the handshake, ACK records MUST be sent with an epoch which is\r\n   equal to or higher than the record which is being acknowledged.  Note\r\n   that some care is required when processing flights spanning multiple\r\n   epochs.  For instance, if the client receives only the ServerHello\r\n   and Certificate and wishes to ACK them in a single record, it must do\r\n   so in epoch 2, as it is required to use an epoch greater than or\r\n   equal to 2 and cannot yet send with any greater epoch.\r\n   Implementations SHOULD simply use the highest current sending epoch,\r\n   which will generally be the highest available.  The exception is that\r\n   implementations MUST NOT send ACK records in epoch 1 (early data). If\r\n   the highest current sending epoch is epoch 1 (early data),\r\n   implementations MUST use epoch 0 (unencrypted) to send ACK records.\r\n   After the handshake, implementations MUST use the highest available\r\n   sending epoch.", "notes": "With the caveat that unencrypted ACKs are generally goofy (see https://mailarchive.ietf.org/arch/msg/tls/ZEj04LyL3hJXeK1nsiOBoB2vCsg/), the document currently believes they exist. As long as they exist, the rule in the text right now does not work. The server may reject 0-RTT, in which case it will never see epoch 1.", "submit_date": "2024-09-18", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "3898", "doc-id": "RFC4456", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8", "orig_text": "ORIGINATOR_ID\r\n\r\n   ORIGINATOR_ID is a new optional, non-transitive BGP attribute of Type\r\n   code 9.  This attribute is 4 bytes long and it will be created by an\r\n   RR in reflecting a route.  This attribute will carry the BGP\r\n   Identifier of the originator of the route in the local AS.  A BGP\r\n   speaker SHOULD NOT create an ORIGINATOR_ID attribute if one already\r\n   exists.  A router that recognizes the ORIGINATOR_ID attribute SHOULD\r\n   ignore a route received with its BGP Identifier as the ORIGINATOR_ID.\r\n\r\n\r\nCLUSTER_LIST\r\n\r\n   CLUSTER_LIST is a new, optional, non-transitive BGP attribute of Type\r\n   code 10.  It is a sequence of CLUSTER_ID values representing the\r\n   reflection path that the route has passed.\r\n\r\n   When an RR reflects a route, it MUST prepend the local CLUSTER_ID to\r\n   the CLUSTER_LIST.  If the CLUSTER_LIST is empty, it MUST create a new\r\n   one.  Using this attribute an RR can identify if the routing\r\n   information has looped back to the same cluster due to\r\n   misconfiguration.  If the local CLUSTER_ID is found in the\r\n   CLUSTER_LIST, the advertisement received SHOULD be ignored.\r\n", "correct_text": "", "notes": "Although the guideline exists for the \"egress\" reflected routes (RR should create ORIGINATOR_ID if none exists, prepend its own ClusterId in CLUSTER_LIST), there is no guideline on how the routes received from iBGP peers be treated if \"only one\" attribute (ORIGINATOR_ID or CLUSTER_LIST) is present. \r\nShould such routes be dropped (Considering them as a malformed routes ?)\n --VERIFIER NOTES-- \nThis is a question that should be addressed to the IDR WG.\r\n\r\nAny new guideline that results should be considered for publication in an RFC. Technical changes of the type requested are outside the scope of the Errata process.", "submit_date": "2014-02-23", "submitter_name": "Gunjan Bansal", "verifier_id": "", "verifier_name": "Stewart Bryant", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3900", "doc-id": "RFC6287", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A.", "orig_text": "* @param password     a password that can be used, HEX encoded\r\n.\r\n.\r\n.\r\n// Put the bytes of \"password\" to the message\r\n// Input is HEX encoded", "correct_text": "* @param password     a password that can be used, hashed with the \r\n* SHA-version declared in OCRA-suite and HEX encoded.\r\n.\r\n.\r\n.\r\n// Put the bytes of \"password\" to the message\r\n// Input is SHA hashed and HEX encoded", "notes": "The password should be hashed as stated in the RFC and as it is done in the testOCRA class. \r\n\r\nThis should also eliminate the need to padd the password with zeros since the hash is always of the correct length.\r\n\r\n// Password - sha1\r\nif(DataInput.toLowerCase().indexOf(\"psha1\") > 1){\r\n    passwordLength=20;\r\n}\r\n\r\n// Password - sha256\r\nif(DataInput.toLowerCase().indexOf(\"psha256\") > 1){\r\n    passwordLength=32;\r\n}\r\n\r\n// Password - sha512\r\nif(DataInput.toLowerCase().indexOf(\"psha512\") > 1){\r\n     passwordLength=64;\r\n}", "submit_date": "2014-02-24", "submitter_name": "Marcus Bring", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3901", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "18.43.3", "orig_text": "The logr_return_on_close result field is a directive to return the\r\nlayout before closing the file.  When the metadata server sets this\r\nreturn value to TRUE, it MUST be prepared to recall the layout in the\r\ncase in which the client fails to return the layout before close.\r\nFor the metadata server that knows a layout must be returned before a\r\nclose of the file, this return value can be used to communicate the\r\ndesired behavior to the client and thus remove one extra step from\r\nthe client's and metadata server's interaction.", "correct_text": "The logr_return_on_close result field is a directive to return\r\nor forget the layout when the client returns all open/delegation\r\nstate for that file.\r\n\r\nOnce a LAYOUTGET operation returns with logr_return_on_close\r\nset to TRUE for a given file, then all subsequent LAYOUTGET\r\nrequests by that client for the same file and layout type, MUST\r\nreply with logr_return_on_close set to TRUE until the client returns\r\nall its open state for that file using CLOSE and DELEGRETURN.\r\nNote that return_on_close also applies retroactively to all layout\r\nsegments retrieved by the client for that file and layout type.\r\n\r\nAfter the client has closed all open stateids and returned the\r\ndelegation stateids for a file for which logr_return_on_close\r\nwas set to TRUE, the server MUST  invalidate all layout segments\r\nthat were  issued to the client for that file. The client MUST NOT\r\nattempt to use that layout or the layout stateid.\r\n\r\nIf the server needs to revoke all open stateids and delegation\r\nstateids owned by the client for a file for which logr_return_on_close\r\nwas set to TRUE, then it MUST also revoke all layout segments of \r\ntype loga_layout_type that were issued for that file to that client, \r\nand take action to fence the access to the DSes.", "notes": "This is intended as a replacement for the errata with id 3226, which is incomplete in that it does not discuss how return-on-close is supposed to work with delegations or with layout revoking.\r\n --VERIFIER NOTES-- \r\n Please get an agreement in the WG and submit an up to date errata, as this text part seems to be under discussion.\r\n\r\n2016-06-17: RFC Editor moved from Rejected to Reported per request from AD (Spencer Dawkins).\r\n\r\n2019-10-25: TSV AD Magnus Westerlund put this into the Held for document update so that the WG can deal with the consensus deision issues related to this clarification when updating the document. ", "submit_date": "2014-02-25", "submitter_name": "Trond Myklebust", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:33:10"}, {"errata_id": "3902", "doc-id": "RFC2350", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "[...]\r\n\r\n  Other documents of interest for the discussion of CSIRTs and their\r\n  tasks are available by anonymous FTP. A collection can be found on:\r\n\r\n  - ftp://ftp.cert.dfn.de/pub/docs/csir/\r\n    Please refer to file 01-README for further information about\r\n    the content of this directory.\r\n\r\n[...]\r\n\r\n   - http://www.cert.dfn.de/eng/team/kpk/certbib.html\r\n     This document contains an annotated bibliography of available\r\n     material, documents and files about the operation of CSIRTs\r\n     with links to many of the referenced items.", "correct_text": "[...]\r\n\r\n  Other documents of interest for the discussion of CSIRTs and their\r\n  tasks are available from the CERT Coordination Center and ENISA\r\n\r\n  - https://www.cert.org/incident-management/csirt-development/index.cfm\r\n    A collection of documents by the CERT Coordination Center on CSIRT\r\n    Development.\r\n\r\n  - http://www.enisa.europa.eu/activities/cert/support\r\n    This page contains practice material that aims at helping EU Member\r\n    States, but also other stakeholders, to smoothly establish and\r\n    operate CERTs / CSIRTs.\r\n", "notes": "The previously referenced resources do not exist anymore. They should be either removed or replaced by references to the available resources from CERT and ENISA.", "submit_date": "2014-02-26", "submitter_name": "Christian Keil", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3903", "doc-id": "RFC2350", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix C", "orig_text": "[...]\r\n\r\n  Many of the European teams, regardless of whether they are members\r\n  of FIRST or not, are listed by countries on a page maintained by\r\n  the German CSIRT:\r\n\r\n  - http://www.cert.dfn.de/eng/csir/europe/certs.html", "correct_text": "[...]\r\n\r\n  Many of the European teams, regardless of whether they are members\r\n  of FIRST or not, are listed by countries on a page maintained by\r\n  the Trusted Introducer Service (TI):\r\n\r\n  - http://www.trusted-introducer.org/directory/index.html", "notes": "The list of European teams is no longer maintained by DFN-CERT but by TI.", "submit_date": "2014-02-26", "submitter_name": "Christian Keil", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4857", "doc-id": "RFC6181", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "The\r\n   attacker can do that by pretending that the path between IPA and IPT\r\n   is congested but that the path between IPS and IPT is not.", "correct_text": "The\r\n   attacker can do that by pretending that the path between IPA and IPS\r\n   is congested but that the path between IPS and IPT is not.", "notes": "The attacker wants to pretend that the path between IPA and the Source is congested. There is no relevant path between IPA and IPT which has to be congested.", "submit_date": "2016-11-09", "submitter_name": "Tobias Seel", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 10:46:33"}, {"errata_id": "3906", "doc-id": "RFC6192", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "[...]\r\n   ip access-list extended DNS\r\n    permit udp 198.51.100.0 0.0.0.252 eq domain any\r\n   ipv6 access-list DNSv6\r\n    permit udp 2001:DB8:100:1::/64 eq domain any\r\n    permit tcp 2001:DB8:100:1::/64 eq domain any\r\n   ip access-list extended NTP\r\n    permit udp 198.51.100.4 255.255.255.252 any eq ntp\r\n   ipv6 access-list NTPv6\r\n    permit udp 2001:DB8:100:2::/64 any eq ntp\r\n   ip access-list extended SSH\r\n    permit tcp 198.51.100.128 0.0.0.128 any eq 22\r\n   ipv6 access-list SSHv6\r\n    permit tcp 2001:DB8:100:3::/64 any eq 22\r\n   ip access-list extended SNMP\r\n    permit udp 198.51.100.128 0.0.0.128 any eq snmp\r\n[...]\r\n", "correct_text": "[...]\r\n   ip access-list extended DNS\r\n    permit udp 198.51.100.0 0.0.0.3 eq domain any\r\n   ipv6 access-list DNSv6\r\n    permit udp 2001:DB8:100:1::/64 eq domain any\r\n    permit tcp 2001:DB8:100:1::/64 eq domain any\r\n   ip access-list extended NTP\r\n    permit udp 198.51.100.4 0.0.0.3 any eq ntp\r\n   ipv6 access-list NTPv6\r\n    permit udp 2001:DB8:100:2::/64 any eq ntp\r\n   ip access-list extended SSH\r\n    permit tcp 198.51.100.128 0.0.0.127 any eq 22\r\n   ipv6 access-list SSHv6\r\n    permit tcp 2001:DB8:100:3::/64 any eq 22\r\n   ip access-list extended SNMP\r\n    permit udp 198.51.100.128 0.0.0.127 any eq snmp\r\n[...]", "notes": "The bitfield masks in the Cisco Configuration example  in section A.1 look incorrect.  The authors may have intended the following meanings:\r\n\r\nip access-list extended DNS\r\n  all hosts between 198.51.100.0 and 198.51.100.3 instead of all addresses in the range 198.51.100.0/24 which are evenly divisible by 4\r\n\r\nip access-list extended NTP\r\n  all hosts between 198.51.100.4 and 198.51.100.7 instead of all addresses in the range 0.0.0.0/0 which are evenly divisible by 4\r\n\r\nip access-list extended SSH\r\n  all hosts between 198.51.100.128 and 198.51.100.255 instead of 198.51.100.128/32\r\n\r\nip access-list extended SNMP\r\n  all hosts between 198.51.100.128 and 198.51.100.255 instead of 198.51.100.128/32", "submit_date": "2014-03-02", "submitter_name": "Nick Hilliard", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3913", "doc-id": "RFC5764", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.2", "orig_text": "Arriving packets may be of types RTP, DTLS, or STUN [RFC5389].\r\n...\r\n                   |       B < 2   -+--> forward to STUN\r\n...\r\nIf the value of this byte is 0 or 1, then the packet is STUN.", "correct_text": "Arriving packets may be of types RTP, DTLS, or STUN [RFC5389].  \r\nSTUN messages with methods identifiers of 1280 or higher cannot \r\nbe demultiplexed.\r\n...\r\n                   |       B < 20  -+--> forward to STUN\r\n...\r\nIf the value of this byte is less than 20, then the packet is STUN.", "notes": "This is a tricky one. We can't distinguish all STUN message types,\r\nbecause - at least in theory - new message types >= 1280 can be added\r\nto STUN, which could collide with DTLS.\r\n\r\nPlease see Section 7 of RFC 7983 for the change that addresses this problem more\r\nholistically and *differently* than above.", "submit_date": "2014-03-06", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3914", "doc-id": "RFC3550", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.1", "orig_text": "      init_seq(s, seq);\r\n      s->max_seq = seq - 1;\r\n      s->probation = MIN_SEQUENTIAL;", "correct_text": "      init_seq(s, seq);\r\n      s->max_seq = seq == 0 ? seq : seq - 1;\r\n      s->probation = MIN_SEQUENTIAL;", "notes": "If the first RTP packet has a sequence number of 0, the logic will cause cycles to increase by 1, which will affect \"expected number of received packets\" calculations.\n --VERIFIER NOTES-- \nSubmitter requested rejection.", "submit_date": "2014-03-06", "submitter_name": "Hani Mustafa", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3945", "doc-id": "RFC7139", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "For the ingress node, a Path message with SE style SHOULD also be\r\nsent for decreasing the ODUflex bandwidth.", "correct_text": "For the ingress node, a Path message with SE style MUST also be\r\nsent for decreasing the ODUflex bandwidth.", "notes": "Section 7 requires that Shared Explicit (SE) MUST be used at the beginning when creating a resizable ODUflex connection. Thus, the SE style MUST also be used when signaling for bandwidth increase or decrease.  The increase procedure mandates the use of SE style; however, the decrease procedure uses SHOULD.  The decrease procedure should also make the SE signaling mandatory.\r\n\r\nThis change, that looks to be a change of substance, has been verified with the authors to be an editorial issue that was caused by not keeping the paragraphs in synch.", "submit_date": "2014-04-02", "submitter_name": "Fred Gruman", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3946", "doc-id": "RFC7139", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "After decreasing the bandwidth, the ingress node\r\nSHOULD send a ResvErr message to tear down the old control state.", "correct_text": "After decreasing the bandwidth, the ingress node\r\nSHOULD send a PathTear message to tear down the old control state.", "notes": "PathTear is the usual mechanism to teardown old control state. This is would also make the bandwidth decreasing procedure consistent with the bandwidth increasing procedure (bandwidth increasing procedure uses PathTear to teardown old control state.)\r\n\r\nThis change looks like a change of substance, but the authors confirm that their intent was to use the same process for both the increase and decrease in bandwidth.", "submit_date": "2014-04-02", "submitter_name": "Fred Gruman", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3947", "doc-id": "RFC1928", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6 (page 6)", "orig_text": "In is", "correct_text": "It is", "notes": "", "submit_date": "2014-04-02", "submitter_name": "Scott Conrad VanderWoude", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3952", "doc-id": "RFC5245", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "15.1", "orig_text": "priority = 1*10DIGIT\r\n", "correct_text": "", "notes": "priority = 1*10DIGIT\r\n\r\nHere the maximum value it can hold is \"9999999999\"(ten-nines)(priority is of maximum length 10 DIGIT as per grammar in sec 15.1).\r\n\r\nThe number of bits required to hold the maximum value(ten-nines) is 34. Which requires a \"double\" value instead of integer of 32 bit.\r\n\r\nCan i know why the priority is maximum of 10 DIGIT length? If possible we may decrease to 9 DIGIT, so that the value will be fit into integer of 32bit.\r\n\r\n-- VERIFIER NOTES -- \r\nThe limitation to 2^32-1 is made clear elsewhere in the text.  The ABNF does not need to enforce this constraint", "submit_date": "2014-04-04", "submitter_name": "Suresh Tummala", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4485", "doc-id": "RFC2866", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "This attribute indicates whether this Accounting-Request marks the\r\nbeginning of the user service (Start) or the end (Stop).\r\n\r\nIt MAY be used by the client to mark the start of accounting (for\r\nexample, upon booting) by specifying Accounting-On and to mark the\r\nend of accounting (for example, just before a scheduled reboot) by\r\nspecifying Accounting-Off.", "correct_text": "This attribute indicates whether this Accounting-Request marks the\r\nbeginning of the user service (Start) or the end (Stop).\r\n\r\nIt MAY be used by the client to mark the start of accounting for the\r\nNAS (for example, upon booting) by specifying Accounting-On\r\nand to mark the end of accounting for the NAS (for example, just\r\nbefore a scheduled reboot) by specifying Accounting-Off.", "notes": "Some RADIUS client implementations send scoped Accounting-On and Accounting-Off Accounting-Request packets. This is seen, for example, with some wireless APs that include a Called-Station-Id attribute to scope to a Basic Service Set (BSS).\r\n\r\nThis is an incorrect interpretation of the RFC that is not backwards compatible with consumers of RADIUS accounting information, yet the RFC is ambiguous on this point.\r\n\r\nThe RFC must be clear that Accounting-On and Accounting-Off apply to the whole NAS and cannot be scoped in this manner.\r\n\r\nNew Acct-Status-Type values must instead be defined to allow this, perhaps named something like Scoped-Accounting-On and Scoped-Accounting-Off.", "submit_date": "2015-09-27", "submitter_name": "Nick Lowe", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3912", "doc-id": "RFC6455", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "    frame-payload-length    = ( %x00-7D )\r\n                            / ( %x7E frame-payload-length-16 )\r\n                            / ( %x7F frame-payload-length-63 )\r\n                            ; 7, 7+16, or 7+64 bits in length,\r\n                            ; respectively\r\n\r\n    frame-payload-length-16 = %x0000-FFFF ; 16 bits in length\r\n\r\n    frame-payload-length-63 = %x0000000000000000-7FFFFFFFFFFFFFFF\r\n                            ; 64 bits in length", "correct_text": "    frame-payload-length    = ( %x00-7D )\r\n                            / ( %x7E frame-payload-length-16 )\r\n                            / ( %x7F frame-payload-length-64 )\r\n                            ; 7, 7+16, or 7+64 bits in length,\r\n                            ; respectively\r\n\r\n    frame-payload-length-16 = %x0000-FFFF ; 16 bits in length\r\n\r\n    frame-payload-length-64 = %x0000000000000000-FFFFFFFFFFFFFFFF\r\n                            ; 64 bits in length", "notes": "Name of field and range is implying that it should be 63 bits in length, but documentation is saying 64 bits in 2 places.\n --VERIFIER NOTES-- \nThe intended interpretation is that lexically the field is 64 bit long but the value space is constrained to 63 bit (so the length can be represented in a 64 signed integer, with the sign bit always zero). It is a bit unconventional to use ABNF like this, but it is explained in Section 5.2.", "submit_date": "2014-03-05", "submitter_name": "Mattias Ekendahl", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3909", "doc-id": "RFC6759", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1.8", "orig_text": "   Description:\r\n    Specifies if the Application ID is based on peer-to-peer\r\n    technology.  Possible values are { \"yes\", \"y\", 1 },\r\n    { \"no\", \"n\", 2 }, and { \"unassigned\", \"u\", 0 }.\r\n", "correct_text": "   Description:\r\n    Specifies if the Application ID is based on peer-to-peer\r\n    technology.  Possible values are { \"yes\", \"y\", 1 },\r\n    { \"no\", \"n\", 2 }, and { \"unassigned\", \"u\", 0 }.\r\n\r\n    Note that 0, 1, and 2 above are integer values; as UTF-8 \r\n    characters they are U+0000(NUL), U+0001(SOH), and U+0002(STX). \r\n    WARNING: the overloading of a string value with an integer \r\n    representation that can take the value 0 requires careful \r\n    handling on collectors and exporters which use this value\r\n    to signify the end of a string.", "notes": "Added clarifying text.  The difference between a quoted and unquoted\r\ndigit (1 vs \"1\") is extremely subtle and easily missed.  \r\n\r\nSee, for example,\r\nhttp://www.ietf.org/mail-archive/web/ipfix/current/msg07151.html.", "submit_date": "2014-03-03", "submitter_name": "Andrew Feren", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3910", "doc-id": "RFC6759", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1.9", "orig_text": "   Description:\r\n     Specifies if the Application ID is used as a tunnel technology.\r\n     Possible values are { \"yes\", \"y\", 1 }, { \"no\", \"n\", 2 },\r\n     and { \"unassigned\", \"u\", 0 }.\r\n", "correct_text": "   Description:\r\n     Specifies if the Application ID is used as a tunnel technology.\r\n     Possible values are { \"yes\", \"y\", 1 }, { \"no\", \"n\", 2 },\r\n     and { \"unassigned\", \"u\", 0 }.\r\n \r\n     Note that 0, 1, and 2 above are integer values; as UTF-8 \r\n     characters they are U+0000(NUL), U+0001(SOH), and U+0002(STX). \r\n     WARNING: the overloading of a string value with an integer \r\n     representation that can take the value 0 requires careful \r\n     handling on collectors and exporters which use this value\r\n     to signify the end of a string.\r\n", "notes": "Added clarifying text.  The difference between a quoted and unquoted\r\ndigit (1 vs \"1\") is extremely subtle and easily missed.  \r\n\r\nSee, for example,\r\nhttp://www.ietf.org/mail-archive/web/ipfix/current/msg07151.html.", "submit_date": "2014-03-03", "submitter_name": "Andrew Feren", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3911", "doc-id": "RFC6759", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1.10", "orig_text": "   Description:\r\n    Specifies if the Application ID is an encrypted networking\r\n    protocol.  Possible values are { \"yes\", \"y\", 1 },\r\n    { \"no\", \"n\", 2 }, and { \"unassigned\", \"u\", 0 }.\r\n", "correct_text": "   Description:\r\n    Specifies if the Application ID is an encrypted networking\r\n    protocol.  Possible values are { \"yes\", \"y\", 1 },\r\n    { \"no\", \"n\", 2 }, and { \"unassigned\", \"u\", 0 }.\r\n\r\n    Note that 0, 1, and 2 above are integer values; as UTF-8 \r\n    characters they are U+0000(NUL), U+0001(SOH), and U+0002(STX). \r\n    WARNING: the overloading of a string value with an integer \r\n    representation that can take the value 0 requires careful \r\n    handling on collectors and exporters which use this value\r\n    to signify the end of a string.\r\n", "notes": "Added clarifying text.  The difference between a quoted and unquoted\r\ndigit (1 vs \"1\") is extremely subtle and easily missed.  \r\n\r\nSee, for example,\r\nhttp://www.ietf.org/mail-archive/web/ipfix/current/msg07151.html.", "submit_date": "2014-03-03", "submitter_name": "Andrew Feren", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3915", "doc-id": "RFC7159", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   Since JSON's syntax is borrowed from JavaScript, it is possible to\r\n   use that language's \"eval()\" function to parse JSON texts.", "correct_text": "   Since JSON's syntax is borrowed from JavaScript, it is possible to\r\n   use that language's \"eval()\" function to parse most (but not all)\r\n   JSON texts.", "notes": "This wording may be construed as meaning that every compliant JSON text is parseable as JavaScript, which is not the case: <http://timelessrepo.com/json-isnt-a-javascript-subset>. (Actually I would prefer this to be stated clearly elsewhere in the document, e.g. where it says \"JSON's design goals were for it to be [...] a subset of JavaScript\".)\r\n\r\n --VERIFIER NOTES-- \r\nAs per the above citation, there are characters (in particular line terminators like U+2028 and U+2029) which are permissible in JSON but not permissible in JavaScript. The corrected text makes this clearer.", "submit_date": "2014-03-07", "submitter_name": "Vasiliy Faronov", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3916", "doc-id": "RFC3548", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "References", "orig_text": "   [12]  Wilcox-O'Hearn, B., \"Post to P2P-hackers mailing list\",\r\n         http://zgp.org/pipermail/p2p-hackers/2001-September/\r\n         000315.html, September 2001.\r\n", "correct_text": "   [8]  Wilcox-O'Hearn, B., \"Post to P2P-hackers mailing list\",\r\n         http://zgp.org/pipermail/p2p-hackers/2001-September/\r\n         000313.html, September 2001.\r\n", "notes": "Noticed by Zancas Wilcox.\r\n\r\nThis erratum was submitted as a correct to reference [12], however \r\nRFC 3548 has it as [8].\r\n", "submit_date": "2014-03-10", "submitter_name": "Daira Hopwood", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4486", "doc-id": "RFC6940", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.8", "orig_text": "10.8.  Route Query f.in 3", "correct_text": "10.8.  Route Query\r\n", "notes": "This is a formatting nit, probably caused by an nroff remnant. However, a bit confusing nevertheless...", "submit_date": "2015-09-28", "submitter_name": "Roland Bless", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6738", "doc-id": "RFC8410", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   OneAsymmetricKey ::= SEQUENCE {\r\n      version Version,\r\n      privateKeyAlgorithm PrivateKeyAlgorithmIdentifier,\r\n      privateKey PrivateKey,\r\n      attributes [0] IMPLICIT Attributes OPTIONAL,\r\n      ...,\r\n      [[2: publicKey [1] IMPLICIT PublicKey OPTIONAL ]],\r\n      ...\r\n   }", "correct_text": "   OneAsymmetricKey ::= SEQUENCE {\r\n      version Version,\r\n      privateKeyAlgorithm PrivateKeyAlgorithmIdentifier,\r\n      privateKey PrivateKey,\r\n      attributes [0] Attributes OPTIONAL,\r\n      ...,\r\n      [[2: publicKey [1] PublicKey OPTIONAL ]],\r\n      ...\r\n   }", "notes": "This is an incorrect quote from RFC 5958.", "submit_date": "2021-11-16", "submitter_name": "Daniel Minder", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-12-03 20:00:22"}, {"errata_id": "3920", "doc-id": "RFC6090", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix F", "orig_text": "Then, the product P3=(X3,Y3,Z3) = P1 * P2 is given by:\r\n\r\n     if P1 is the point at infinity,\r\n        P3 = P2\r\n     else if P2 is the point at infinity,\r\n        P3 = P1\r\n     else if u is not equal to 0 but v is equal to 0,\r\n        P3 = (0,1,0)\r\n     else if both u and v are not equal to 0,\r\n        X3 = v * (Z2 * (Z1 * u^2 - 2 * X1 * v^2) - v^3)\r\n        Y3 = Z2 * (3 * X1 * u * v^2 - Y1 * v^3 - Z1 * u^3) + u * v^3\r\n        Z3 = v^3 * Z1 * Z2\r\n     else    // P2 equals P1, P3 = P1 * P1\r\n         w = 3 * X1^2 + a * Z1^2\r\n        X3 = 2 * Y1 * Z1 * (w^2 - 8 * X1 * Y1^2 * Z1)\r\n        Y3 = 4 * Y1^2 * Z1 * (3 * w * X1 - 2 * Y1^2 * Z1) - w^3\r\n        Z3 = 8 * (Y1 * Z1)^3", "correct_text": "Then, the product P3=(X3,Y3,Z3) = P1 * P2 is given by:\r\n\r\n     if P1 is the point at infinity,\r\n        P3 = P2\r\n     else if P2 is the point at infinity,\r\n        P3 = P1\r\n     else if P1=-P2 as projective points\r\n        P3 = (0,1,0)\r\n     else if P1 does not equal P2\r\n        X3 = v * (Z2 * (Z1 * u^2 - 2 * X1 * v^2) - v^3)\r\n        Y3 = Z2 * (3 * X1 * u * v^2 - Y1 * v^3 - Z1 * u^3) + u * v^3\r\n        Z3 = v^3 * Z1 * Z2\r\n     else    // P2 equals P1, P3 = P1 * P1\r\n         w = 3 * X1^2 + a * Z1^2\r\n        X3 = 2 * Y1 * Z1 * (w^2 - 8 * X1 * Y1^2 * Z1)\r\n        Y3 = 4 * Y1^2 * Z1 * (3 * w * X1 - 2 * Y1^2 * Z1) - w^3\r\n        Z3 = 8 * (Y1 * Z1)^3", "notes": "The original algorithm was wrong and produces incorrect answers. There are several fixes that could take place.", "submit_date": "2014-03-15", "submitter_name": "Watson Ladd", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3921", "doc-id": "RFC6890", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.3", "orig_text": "                    +----------------------+----------------+\r\n                    | Attribute            | Value          |\r\n                    +----------------------+----------------+\r\n                    | Address Block        | 2001::/32      |\r\n                    | Name                 | TEREDO         |\r\n                    | RFC                  | [RFC4380]      |\r\n                    | Allocation Date      | January 2006   |\r\n                    | Termination Date     | N/A            |\r\n                    | Source               | True           |\r\n                    | Destination          | True           |\r\n                    | Forwardable          | True           |\r\n                    | Global               | False          |\r\n                    | Reserved-by-Protocol | False          |\r\n                    +----------------------+----------------+\r\n\r\n                             Table 23: TEREDO\r\n", "correct_text": "                    +----------------------+----------------+\r\n                    | Attribute            | Value          |\r\n                    +----------------------+----------------+\r\n                    | Address Block        | 2001::/32 [3]  |\r\n                    | Name                 | TEREDO         |\r\n                    | RFC                  | [RFC4380]      |\r\n                    | Allocation Date      | January 2006   |\r\n                    | Termination Date     | N/A            |\r\n                    | Source               | True           |\r\n                    | Destination          | True           |\r\n                    | Forwardable          | True           |\r\n                    | Global               | N/A [3]        |\r\n                    | Reserved-by-Protocol | False          |\r\n                    +----------------------+----------------+\r\n\r\n                      [3] See [RFC4380] for details.\r\n\r\n                             Table 23: TEREDO\r\n", "notes": "I think we can treat TEREDO(2001::/32) in the same way as 6to4 (2002::/16).  Because both prefixes are used as the anycast prefix in the internet.\r\nSuitable value of TEREDO is N/A that is the same value of 6to4.\r\n\r\nSo the global scope of TEREDO prefix (2001::/32) is not false.\r\n\r\nIf there is no TEREDO prefix(2001::/32) globally, the IPv6 packets from IPv6 host can't get to TEREDO relay router.", "submit_date": "2014-03-17", "submitter_name": "Masataka MAWATARI", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3933", "doc-id": "RFC2049", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "    (10)  Conforming user agents must be able to distinguish\r\n          encoded-words from \"text\", \"ctext\", or \"word\"s,\r\n          according to the rules in section 4, anytime they\r\n          appear in appropriate places in message headers.", "correct_text": "   (10)  Conforming user agents must be able to distinguish\r\n         encoded-words from \"text\", \"ctext\", or \"word\"s (see the\r\n         grammar in Section 3.3 of [RFC822]), according to\r\n         the recognition rules in Section 6 of [RFC2047],\r\n         any time they appear in appropriate places in\r\n         message headers.", "notes": "Section 4 of RFC 2049 was not the correct citation.", "submit_date": "2014-03-26", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3923", "doc-id": "RFC6639", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.6", "orig_text": "This MIB architecture is modeled based on PW3 architecture [RFC3985]", "correct_text": "This MIB architecture is modeled based on PWE3 architecture [RFC3985]", "notes": "PW3 -> PWE3", "submit_date": "2014-03-20", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3924", "doc-id": "RFC7139", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "11", "orig_text": "5        Unassigned                            [RFC4328]\r\n", "correct_text": "5       Reserved (for G.709)                  [RFC7139]", "notes": "(1)Unassigned->Reserved (for G.709)\r\n(2)[RFC4328]->[RFC7139]\n --VERIFIER NOTES-- \nAfter discussion with the raiser of this report who was also the lead editor on the document, and also with one of the CCAMP chairs, the conclusion is that the text in Section 11 is correct. I will contact IANA to get the registry updated.", "submit_date": "2014-03-20", "submitter_name": "Fatai Zhang", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3925", "doc-id": "RFC6639", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.9", "orig_text": "The pwTDMPerfCurrentTable [RFC5604], pwTDMPerfIntervalTable\r\n[RFC5604], and pwTDMPerf1DayIntervalTable [RFC5604] contain\r\nstatistical information accumulated per 15-minute, 24-hour, and 1-day\r\nperiods, respectively.", "correct_text": "The pwTDMPerfCurrentTable [RFC5604], pwTDMPerfIntervalTable\r\n[RFC5604], and pwTDMPerf1DayIntervalTable [RFC5604] contain\r\nstatistical information accumulated per 15-minute, 24-hour, and 1-month\r\nperiods, respectively.", "notes": "1-day  --> 1-month\r\nRFC5604 section 6.1 states: \r\n    The TDM Performance Current Table (pwTDMPerfCurrentTable) contains TDM statistics for the current 15-minute period. \r\n    The TDM Performance Interval Table (pwTDMPerfIntervalTable) contains TDM statistics for historical intervals (usually 96 15-minute entries to cover a 24 hour period).\r\n    The TDM Performance One-Day Interval Table (pwTDMPerf1DayIntervalTable) contains TDM statistics for historical intervals accumulated per day.  Usually 30 one-day entries to cover a monthly period.", "submit_date": "2014-03-21", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3949", "doc-id": "RFC4210", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.4", "orig_text": "CertRepMessage ::= SEQUENCE {\r\n         caPubs          [1] SEQUENCE SIZE (1..MAX) OF Certificate\r\n                             OPTIONAL,\r\n         response            SEQUENCE OF CertResponse\r\n     }", "correct_text": "CertRepMessage ::= SEQUENCE {\r\n         caPubs       [1] SEQUENCE SIZE (1..MAX) OF CMPCertificate\r\n                          OPTIONAL,\r\n         response         SEQUENCE OF CertResponse\r\n     }\r\n", "notes": "The definition in the text is different to the one in the ASN.1 module contained in Appendix F. The correct text is assumed to be the one from Appendix F\r\n\r\nCMPCertificate is a superset of Certificate which has one element.  The new structure would allow for a new certificate type to be included.  Not sure that it would ever happen.", "submit_date": "2014-04-02", "submitter_name": "Tom Biskupic", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3926", "doc-id": "RFC6620", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.3", "orig_text": "   +---------+  VP_NS, VP_DATA/2xNS                    +-----------+\r\n   |         |---------------------------------------->|           |\r\n   | NO_BIND |                                         | TENTATIVE |\r\n   |         |<----------------------------------------|           |\r\n   +---------+                    TP_NA, TP_NS/-       +-----------+\r\n          ^                                                |\r\n          |                                                | TimeOut\r\n   Timeout|                                                |\r\n          |                                                v\r\n   +---------+  VP_NA/-                                +-----------+\r\n   |         |---------------------------------------->|           |\r\n   | TESTING |                                TP_NS/-  |           |\r\n   |  TP-LT  |<----------------------------------------|   VALID   |\r\n   |         |                           TimeOut/2xNS  |           |\r\n   |         |<----------------------------------------|           |\r\n   +---------+                                         +-----------+\r\n     ^   |                                                ^    |\r\n     |   |                                                |    |\r\n     |   +---------------------      ---------------------+    |\r\n     |       VP_NS/-          |     |  NP_NA, TimeOut/-        |\r\n     |                        v     |                          |\r\n     |                     +-----------+                       |\r\n     |                     |           |                       |\r\n     +---------------------|  TESTING  |<----------------------+\r\n          VP_NS, VP_DATA/- |    VP     |  VP_DATA, VP_NS,\r\n                           +-----------+  VP_NA/2xNS\r\n\r\n                    Figure 2: Simplified State Machine", "correct_text": "   +---------+  VP_NS, VP_DATA/2xNS                    +-----------+\r\n   |         |---------------------------------------->|           |\r\n   | NO_BIND |                                         | TENTATIVE |\r\n   |         |<----------------------------------------|           |\r\n   +---------+                    TP_NA, TP_NS/-       +-----------+\r\n          ^                                                |\r\n          |                                                | TimeOut\r\n   Timeout|                                                |\r\n          |                                                v\r\n   +---------+  VP_NA/-                                +-----------+\r\n   |         |---------------------------------------->|           |\r\n   | TESTING |                                TP_NS/-  |           |\r\n   |  TP-LT  |<----------------------------------------|   VALID   |\r\n   |         |                           TimeOut/2xNS  |           |\r\n   |         |<----------------------------------------|           |\r\n   +---------+                                         +-----------+\r\n     ^   |                                                ^    |\r\n     |   |                                                |    |\r\n     |   +---------------------      ---------------------+    |\r\n     |       VP_NS/-          |     |  VP_NA, TimeOut/-        |\r\n     |                        v     |                          |\r\n     |                     +-----------+                       |\r\n     |                     |           |                       |\r\n     +---------------------|  TESTING  |<----------------------+\r\n          TP_NS, TP_DATA/- |    VP     |  VP_DATA, VP_NS,\r\n                           +-----------+  VP_NA/2xNS\r\n\r\n                    Figure 2: Simplified State Machine", "notes": "a. According to the description on the state machine at page 19,\r\n\r\n <quote>\r\no  If an NA message containing the IPAddr as the Target Address is\r\n      received through the Validating Port P as a reply to the DAD_NS\r\n      message, then the NA is forwarded as usual and the state is\r\n      changed to VALID.  The LIFETIME is set to DEFAULT_LT.\r\n </quote>\r\n\r\nthe state change from TESTING_VP  to VALID should be triggered by the  VP_NA (NA message containing the IPAddr as the Target Address is received through the Validating Port).\r\n\r\n\r\nb. According to the description on the state machine at page 19,\r\n\r\n <quote>\r\n   o  If a data packet containing IPAddr as the source address is\r\n      received through a Trusted Port (i.e., other than port P), the\r\n      state is moved to TESTING_TP-LT, and the packet MAY be discarded.\r\n\r\n   o  If a DAD_NS is received through a Trusted Port, the packet is\r\n      forwarded as usual, and the state is moved to TESTING_TP-LT.\r\n </quote>\r\n\r\nthe state change from TESTING_VP  to TESTING_TP-LT should be triggered by the TP_DATA (data packet containing IPAddr as the source address received through a Trusted Port), or by the TP_NS (DAD_NS is received through a Trusted Port).", "submit_date": "2014-03-21", "submitter_name": "Leaf Yeh", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3927", "doc-id": "RFC6620", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "   In order to provide proper\r\n   source address validation, it is critical that the information\r\n   distributed among the different FCFS SAVI devices be coherent.", "correct_text": "   In order to provide proper\r\n   source address validation, it is critical that the information\r\n   distributed among the different FCFS SAVI devices be not coherent.", "notes": "The above revision then complies with the other statements in the same paragraph:\r\n\r\n<quote>\r\nIn particular, it is important to avoid having the same source address bound to different binding anchors in different FCFS SAVI devices. Should that occur, then it would mean that two hosts are allowed to send packets with the same source address, which is what FCFS SAVI is trying to prevent.  In order to preserve the coherency of the FCFS SAVI bindings distributed among the FCFS SAVI devices within a realm, the Neighbor Discovery (ND) protocol [RFC4861] is used, in particular the Neighbor Solicitation (NS) and Neighbor Advertisement (NA) messages.\r\n</quote>\n --VERIFIER NOTES-- \nThe proposed change is incorrect.   I think you have misunderstood what the word \"coherent\" means, and this led to confusion.", "submit_date": "2014-03-21", "submitter_name": "Leaf Yeh", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3928", "doc-id": "RFC7139", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "      6        Och at 2.5 Gbps                       [RFC4328]", "correct_text": "      6        OCh at 2.5 Gbps                       [RFC4328]", "notes": "Trivial capitalization issue that is reflected in the IANA registry and could be tidied up as the registry action is still in the process of being completed.", "submit_date": "2014-03-22", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3929", "doc-id": "RFC3455", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "Therefore intermediaries participating in this mechanism MUST apply a\r\nhop-by-hop integrity protection mechanism such us IPsec or other\r\navailable mechanisms in order to prevent such attacks.", "correct_text": "Therefore intermediaries participating in this mechanism MUST apply a\r\nhop-by-hop integrity protection mechanism such as IPsec or other\r\navailable mechanisms in order to prevent such attacks.", "notes": "Ofcourse this errata doesn't alter the technical meaning, but it is nice to have documents free of spelling errors too.", "submit_date": "2014-03-23", "submitter_name": "Gagandeep Singh", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 19:47:43"}, {"errata_id": "3930", "doc-id": "RFC7139", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   [RFC4328] describes GMPLS signaling extensions to support the control\r\n   for the 2001 revision of the G.709 specification.  However, [RFC7096]\r\n   does not provide the means to signal all the new Signal Types and\r\n   related mapping and multiplexing functionalities.  Moreover, it\r\n   supports only the deprecated auto-MSI (Multiframe Structure\r\n   Identifier) mode, which assumes that the Tributary Port Number (TPN)\r\n   is automatically assigned in the transmit direction and not checked\r\n   in the receive direction.\r\n", "correct_text": "   [RFC4328] describes GMPLS signaling extensions to support the control\r\n   for the 2001 revision of the G.709 specification.  However, as \r\n   described in[RFC7096], that document does not provide the means to\r\n   signal all the new Signal Types and related mapping and multiplexing\r\n   functionalities.  Moreover, it supports only the deprecated auto-MSI\r\n   (Multiframe Structure Identifier) mode, which assumes that the \r\n   Tributary Port Number (TPN) is automatically assigned in the transmit\r\n   direction and not checked in the receive direction.\r\n", "notes": "RFC 7096 is the analysis of pre-existing GMPLS signalling. It does not contain any protocol extensions itself, but looks at the mechanisms provided in RFC 4328.", "submit_date": "2014-03-23", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4487", "doc-id": "RFC2866", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.5", "orig_text": "Acct-Session-Id\r\n\r\n   Description\r\n\r\n      This attribute is a unique Accounting ID to make it easy to match\r\n      start and stop records in a log file.  The start and stop records\r\n      for a given session MUST have the same Acct-Session-Id.  An\r\n      Accounting-Request packet MUST have an Acct-Session-Id.  An\r\n      Access-Request packet MAY have an Acct-Session-Id; if it does,\r\n      then the NAS MUST use the same Acct-Session-Id in the Accounting-\r\n      Request packets for that session.\r\n\r\n      The Acct-Session-Id SHOULD contain UTF-8 encoded 10646 [7]\r\n      characters.", "correct_text": "Acct-Session-Id\r\n\r\n   Description\r\n\r\n      This attribute is a globally unique Accounting ID to make it easy\r\n      to match start and stop records in a log file.  The start and stop\r\n      records for a given session MUST have the same Acct-Session-Id.\r\n      An Accounting-Request packet MUST have an Acct-Session-Id.\r\n      An Access-Request packet MAY have an Acct-Session-Id; if it does,\r\n      then the NAS MUST use the same Acct-Session-Id in the Accounting-\r\n      Request packets for that session.\r\n\r\n      The Acct-Session-Id SHOULD contain UTF-8 encoded 10646 [7]\r\n      characters.", "notes": "A very common implementation fault in RADIUS clients that perform accounting is that Acct-Session-Ids are observed to be reused after a NAS is rebooted or are only unique only in the scope/context of a NAS.\r\n\r\nThe RFC does not explicitly state the scope of uniqueness and it must be clarified to state that Acct-Session-Ids are expected to be globally unique. I believe this to be the original, implicit intent of the author.\r\n\r\nThis is necessary because the ambiguity causes substantial implementation issues today.\r\n\r\nSee: http://freeradius.org/radiusd/man/rlm_acct_unique.txt\r\n\r\nAn ideal Acct-Session-Id would have the properties of a GUID/UUID.\r\n --VERIFIER NOTES-- \r\n   As summarized by Nick:\r\n\r\n\r\nIt looks like the Acct-Session-Id and Acct-Multi-Session-Id errata\r\nboth will and should be rejected on the grounds that they would\r\nconstitute technical changes based on the original intent of the RFC,\r\nwhich we now know. That does make sense and would be a reasonable\r\ncourse of action now that that's known.\r\n\r\nI am pleased that I have engendered a discussion on what I believe to\r\nbe a pertinent issue here. Alan has commented that he feels another\r\nRADIUS fixes RFC would be sensible. I agree with that course of\r\naction.\r\n\r\nThanks for all your time here!\r\n\r\nRegards,\r\n\r\nNick", "submit_date": "2015-09-29", "submitter_name": "Nick Lowe", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7064", "doc-id": "RFC8552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.2.", "orig_text": " | URI        | _acct                 | [RFC6118]     |", "correct_text": " | URI        | _acct                 | [RFC7566]     |", "notes": "Wrong reference. Note that is also has an impact to the IANA registry: https://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#underscored-globally-scoped-dns-node-names\r\n\r\n---\r\nReaders are encouraged to read the below email thread (and may also want to read RFC6118 for additional information):\r\nhttps://mailarchive.ietf.org/arch/msg/dnsop/TuoV8FmCf1l_pKr500Fo0AI8tVM/\r\n\r\n", "submit_date": "2022-08-02", "submitter_name": "Bernie Hoeneisen", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2022-08-20 00:10:47"}, {"errata_id": "3931", "doc-id": "RFC6265", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "   The user agent MUST use an algorithm equivalent to the following\r\n   algorithm to parse a cookie-date.  Note that the various boolean\r\n   flags defined as a part of the algorithm (i.e., found-time, found-\r\n   day-of-month, found-month, found-year) are initially \"not set\".\r\n\r\n   1.  Using the grammar below, divide the cookie-date into date-tokens.\r\n\r\n   cookie-date     = *delimiter date-token-list *delimiter\r\n   date-token-list = date-token *( 1*delimiter date-token )\r\n   date-token      = 1*non-delimiter\r\n\r\n   delimiter       = %x09 / %x20-2F / %x3B-40 / %x5B-60 / %x7B-7E\r\n   non-delimiter   = %x00-08 / %x0A-1F / DIGIT / \":\" / ALPHA / %x7F-FF\r\n   non-digit       = %x00-2F / %x3A-FF\r\n\r\n   day-of-month    = 1*2DIGIT ( non-digit *OCTET )\r\n   month           = ( \"jan\" / \"feb\" / \"mar\" / \"apr\" /\r\n                       \"may\" / \"jun\" / \"jul\" / \"aug\" /\r\n                       \"sep\" / \"oct\" / \"nov\" / \"dec\" ) *OCTET\r\n   year            = 2*4DIGIT ( non-digit *OCTET )\r\n   time            = hms-time ( non-digit *OCTET )\r\n   hms-time        = time-field \":\" time-field \":\" time-field\r\n   time-field      = 1*2DIGIT\r\n\r\n   2.  Process each date-token sequentially in the order the date-tokens\r\n       appear in the cookie-date:\r\n\r\n       1.  If the found-time flag is not set and the token matches the\r\n           time production, set the found-time flag and set the hour-\r\n           value, minute-value, and second-value to the numbers denoted\r\n           by the digits in the date-token, respectively.  Skip the\r\n           remaining sub-steps and continue to the next date-token.\r\n\r\n       2.  If the found-day-of-month flag is not set and the date-token\r\n           matches the day-of-month production, set the found-day-of-\r\n           month flag and set the day-of-month-value to the number\r\n           denoted by the date-token.  Skip the remaining sub-steps and\r\n           continue to the next date-token.\r\n\r\n       3.  If the found-month flag is not set and the date-token matches\r\n           the month production, set the found-month flag and set the\r\n           month-value to the month denoted by the date-token.  Skip the\r\n           remaining sub-steps and continue to the next date-token.\r\n\r\n       4.  If the found-year flag is not set and the date-token matches\r\n           the year production, set the found-year flag and set the\r\n           year-value to the number denoted by the date-token.  Skip the\r\n           remaining sub-steps and continue to the next date-token.", "correct_text": "   The user agent MUST use an algorithm equivalent to the following\r\n   algorithm to parse a cookie-date.  Note that the various boolean\r\n   flags defined as a part of the algorithm (i.e., found-day-of-week,\r\n   found-time, found-day-of-month, found-month, found-year) are \r\n   initially \"not set\".\r\n\r\n   1.  Using the grammar below, divide the cookie-date into date-tokens.\r\n\r\n   cookie-date     = *delimiter date-token-list *delimiter\r\n   date-token-list = date-token *( 1*delimiter date-token )\r\n   date-token      = 1*non-delimiter\r\n\r\n   delimiter       = %x09 / %x20-2F / %x3B-40 / %x5B-60 / %x7B-7E\r\n   non-delimiter   = %x00-08 / %x0A-1F / DIGIT / \":\" / ALPHA / %x7F-FF\r\n   non-digit       = %x00-2F / %x3A-FF\r\n\r\n   day-of-week     = weekday / wkday\r\n   wkday           = \"mon\" / \"tue\" / \"wed\" / \"thu\" / \"fri\" / \"sat\" /\r\n                     \"sun\"\r\n   weekday         = \"monday\" / \"tuesday\" / \"wednesday\" / \"thursday\" /\r\n                     \"friday\" / \"saturday\" / \"sunday\"\r\n   day-of-month    = 1*2DIGIT ( non-digit *OCTET )\r\n   month           = ( \"jan\" / \"feb\" / \"mar\" / \"apr\" /\r\n                       \"may\" / \"jun\" / \"jul\" / \"aug\" /\r\n                       \"sep\" / \"oct\" / \"nov\" / \"dec\" ) *OCTET\r\n   year            = 2*4DIGIT ( non-digit *OCTET )\r\n   time            = hms-time ( non-digit *OCTET )\r\n   hms-time        = time-field \":\" time-field \":\" time-field\r\n   time-field      = 1*2DIGIT\r\n\r\n   2.  Process each date-token sequentially in the order the date-tokens\r\n       appear in the cookie-date:\r\n\r\n       1.  If the found-day-of-week flag is not set and the token \r\n           matches the day-of-week production, set found-day-of-week \r\n           flag. Skip the remaining steps and continue to the next \r\n           date-token.\r\n\r\n       2.  If the found-time flag is not set and the token matches the\r\n           time production, set the found-time flag and set the hour-\r\n           value, minute-value, and second-value to the numbers denoted\r\n           by the digits in the date-token, respectively.  Skip the\r\n           remaining sub-steps and continue to the next date-token.\r\n\r\n       3.  If the found-day-of-month flag is not set and the date-token\r\n           matches the day-of-month production, set the found-day-of-\r\n           month flag and set the day-of-month-value to the number\r\n           denoted by the date-token.  Skip the remaining sub-steps and\r\n           continue to the next date-token.\r\n\r\n       4.  If the found-month flag is not set and the date-token matches\r\n           the month production, set the found-month flag and set the\r\n           month-value to the month denoted by the date-token.  Skip the\r\n           remaining sub-steps and continue to the next date-token.\r\n\r\n       5.  If the found-year flag is not set and the date-token matches\r\n           the year production, set the found-year flag and set the\r\n           year-value to the number denoted by the date-token.  Skip the\r\n           remaining sub-steps and continue to the next date-token.", "notes": "4.1.1 defines \"sane-cookie-date\" as \"rfc1123-date, defined in [RFC2616], Section 3.3.1\". However, both RFC1123 and RFC2616 mandate that date starts with day of the week, and indeed, most servers send cookies where Expires starts with day of the week.\r\n\r\nIn this particular case (Expire field) the day-of-week part of the date is insignificant, and client MAY ignore it.\n --VERIFIER NOTES-- \nThe reporter misunderstood the algorithm at first, thinking that it would fail when it couldn't parse the weekday token.  In fact, the algorithm actually has the flexibility to ignore tokens it doesn't care about, and to handle tokens in any order.  So there's no error here.", "submit_date": "2014-03-24", "submitter_name": "Semyon Kholodnov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3932", "doc-id": "RFC5546", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.2", "orig_text": "   |   DAYLIGHT         | 0+       | MUST be one or more of either     |\r\n   |                    |          | STANDARD or DAYLIGHT.             |\r\n   |     COMMENT        | 0+       |                                   |\r\n   |     DTSTART        | 1        | MUST be local time format.        |\r\n   |     RDATE          | 0+       |                                   |\r\n   |     RRULE          | 0 or 1   |                                   |\r\n   |     TZNAME         | 0+       |                                   |", "correct_text": "   |   DAYLIGHT         | 0+       | MUST be one or more of either     |\r\n   |                    |          | STANDARD or DAYLIGHT.             |\r\n   |     COMMENT        | 0+       |                                   |\r\n   |     DTSTART        | 1        | MUST be local time format.        |\r\n   |     RDATE          | 0+       | If present, RRULE MUST NOT be     |\r\n   |                    |          | present                           |\r\n   |     RRULE          | 0 or 1   | If present, RDATE MUST NOT be     |\r\n   |                    |          | present                           |\r\n   |     TZNAME         | 0+       |                                   |", "notes": "The corrected text appeared in RFC 2446, however I couldn't find the reasoning as to why it was omitted in RFC 5546.\r\n\r\nThe correct comments also appear a few lines below, under \"STANDARD\".", "submit_date": "2014-03-25", "submitter_name": "Alfie John", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3934", "doc-id": "RFC4379", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.5", "orig_text": "If the Reply Mode in the echo request is \"Reply via an\r\nIPv4 UDP packet with Router Alert\", then the IP header MUST contain\r\nthe Router Alert IP option.", "correct_text": "If the Reply Mode in the echo request is \"Reply via an\r\nIPv4/IPv6 UDP packet with Router Alert\", then the IP header MUST contain\r\nthe Router Alert IP option.", "notes": "IPv4 -> IPv4/IPv6\n --VERIFIER NOTES-- \nThe issue noted is valid, but the fix is more complicated because the IPv6 solution does not work \"out of the box\". \r\n\r\nAfter discussion with the Reporter, the RFC authors, and the WG chairs, it is agreed that the situation will be fixed both by a quick I-D to allocate the necessary code points to make IPv6 work, and by a bus to this RFC for the necessary updates.\r\n", "submit_date": "2014-03-26", "submitter_name": "Nobo Akiya", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3935", "doc-id": "RFC5792", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Each PA-TNC message may\r\ncontain one or more attributes associated with the functional\r\ncomponent identified in the component type (PA Subtype) of the\r\nPosture Broker (PB) protocol.", "correct_text": "Each PA-TNC message may\r\ncontain zero or more attributes associated with the functional\r\ncomponent identified in the component type (PA Subtype) of the\r\nPosture Broker (PB) protocol.", "notes": "Section 4 of RFC 5792 says \u201cA PA-TNC message MUST contain a PA-TNC header (defined in section 3.6. followed by a sequence of zero or more PA-TNC attributes.\u201d This contradicts the text in section 3.1, which says \u201cone or more\u201d. The correct text is \u201czero or more\u201d. There\u2019s no reason why a PA-TNC message containing zero attributes should be prohibited. For PA-TNC messages with some PA subtypes, an empty message containing no attributes may be enough.", "submit_date": "2014-03-27", "submitter_name": "Steve Hanna", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3936", "doc-id": "RFC5792", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "As depicted in section 3.2, a PA-TNC message consists of a PA-TNC\r\nheader followed by a sequence of one or more attributes.\r\n", "correct_text": "As depicted in section 3.2, a PA-TNC message consists of a PA-TNC\r\nheader followed by a sequence of zero or more attributes.\r\n", "notes": "Section 4 of RFC 5792 says \u201cA PA-TNC message MUST contain a PA-TNC header (defined in section 3.6. followed by a sequence of zero or more PA-TNC attributes.\u201d This contradicts the text in section 3.4, which says \u201cone or more\u201d. The correct text is \u201czero or more\u201d. There\u2019s no reason why a PA-TNC message containing zero attributes should be prohibited. For PA-TNC messages with some PA subtypes, an empty message containing no attributes may be enough.", "submit_date": "2014-03-27", "submitter_name": "Steve Hanna", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3937", "doc-id": "RFC6971", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13.1.2", "orig_text": "OptDataLenDFF  - 8-bit unsigned integer.  Length of the option data\r\n      field of this option, in octets, as specified in [RFC2460].  This\r\n      value is set to 2 (two).", "correct_text": "OptDataLenDFF  - 8-bit unsigned integer.  Length of the option data\r\n      field of this option, in octets, as specified in [RFC2460].  This\r\n      value is set to 3 (three).", "notes": "In an earlier revision of the draft, the header was two bytes long. As a result of the IESG evaluation, the header became one octet longer (to include the version field), but I missed to update the header length.", "submit_date": "2014-03-27", "submitter_name": "Ulrich Herberg", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7065", "doc-id": "RFC8552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "          | URI        | _iax                  | [RFC6118]     |", "correct_text": "          | URI        | _iax                  | [RFC6315]     |", "notes": "Wrong reference. Note that is also has an impact to the IANA registry: https://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#underscored-globally-scoped-dns-node-names", "submit_date": "2022-08-02", "submitter_name": "Bernie Hoeneisen", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-15 21:32:30"}, {"errata_id": "3950", "doc-id": "RFC2045", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   NOTE TO IMPLEMENTORS:  When checking MIME-Version values any RFC 822\r\n   comment strings that are present must be ignored.  In particular, the\r\n   following four MIME-Version fields are equivalent:\r\n\r\n     MIME-Version: 1.0\r\n\r\n     MIME-Version: 1.0 (produced by MetaSend Vx.x)\r\n\r\n     MIME-Version: (produced by MetaSend Vx.x) 1.0\r\n\r\n     MIME-Version: 1.(produced by MetaSend Vx.x)0", "correct_text": "   NOTE TO IMPLEMENTORS:  When checking MIME-Version values any RFC 822\r\n   comment strings that are present must be ignored.  In particular, the\r\n   following three MIME-Version fields are equivalent:\r\n\r\n     MIME-Version: 1.0\r\n\r\n     MIME-Version: 1.0 (produced by MetaSend Vx.x)\r\n\r\n     MIME-Version: (produced by MetaSend Vx.x) 1.0", "notes": "Under RFC 822, a comment placed between two lexical symbols, in the case of the fourth example given, between the dot and the zero, is equivalent to a single space.  Accordingly, the fourth example would result in the field \"MIME-Version: 1. 0\", which is not exactly equivalent to the previous three examples.\n --VERIFIER NOTES-- \nIt is exactly equivalent, because, while the lexical parsing puts a blank in, the parsing of the MIME-Version value then ignores the blank.", "submit_date": "2014-04-03", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3951", "doc-id": "RFC2919", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   The syntax of the List-Id header follows:\r\n\r\n   list-id-header = \"List-ID:\" [phrase] \"<\" list-id \">\" CRLF", "correct_text": "   The syntax of the List-Id header follows:\r\n\r\n   list-id-header = \"List-ID:\" [phrase / CFWS] \"<\" list-id \">\" CRLF\r\n", "notes": "This change is needed to conform with the second and fifth examples\r\ngiven just after the syntax definition.  Without it, the case \"List-ID: <list.example.com>\" (with a space after \"List-ID:\") would not be valid; only \"List-ID:<list.example.com>\" (without a space) would be, especially since it states that \"the List-Id header does not allow free insertion of whitespace and comments around tokens.\"", "submit_date": "2014-04-03", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3953", "doc-id": "RFC5180", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "Nevertheless, for each evaluated device, it\r\nis recommended to perform as many of the applicable tests described\r\nin Section 6 as possible.\r\n", "correct_text": "Nevertheless, for each evaluated device, it\r\nis recommended to perform as many of the applicable tests described\r\nin Section 7 as possible.", "notes": "", "submit_date": "2014-04-07", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3954", "doc-id": "RFC4361", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "\"Some DHCP servers work around this problem for the common case where\r\nthe boot Programmable Read Only Memory (PROM) presents no client\r\nidentifier, and the operating system DHCP client presents a client\r\nidentifier constructed from the Message Authentication Code (MAC)\r\naddress of the network interface...\"\r\n", "correct_text": "\"Some DHCP servers work around this problem for the common case where\r\nthe boot Programmable Read Only Memory (PROM) presents no client\r\nidentifier, and the operating system DHCP client presents a client\r\nidentifier constructed from the Media Access Control (MAC)\r\naddress of the network interface...\"", "notes": "The sentence (included above) from Section 7 of RFC 4361 provides an incorrect\r\nexpansion of the MAC acronym (Message Authentication Code).", "submit_date": "2014-04-09", "submitter_name": "Samir Sawhney", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3955", "doc-id": "RFC6857", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A", "orig_text": "   Received: from ... by ...\r\n   Received: from ... by ...\r\n   From: =?UTF-8?Q?DISPLAY-LOCAL?=\r\n         =?UTF-8?Q?NON-ASCII-LOCAL@example.com?= :;\r\n   To:   =?UTF-8?Q?DISPLAY-REMOTE1?=\r\n         =?UTF-8?Q?NON-ASCII-REMOTE1@example.net?= :;,\r\n         =?UTF-8?Q?DISPLAY-REMOTE2?=\r\n         =?UTF-8?Q?NON-ASCII-REMOTE2@example.com?= :;,\r\n   Cc:   =?UTF-8?Q?DISPLAY-REMOTE3?=\r\n         =?UTF-8?Q?NON-ASCII-REMOTE3@example.org?= :;\r\n", "correct_text": "   Received: from ... by ...\r\n   Received: from ... by ...\r\n   From: =?UTF-8?Q?DISPLAY-LOCAL?=\r\n         =?UTF-8?Q?NON-ASCII-LOCAL=40example=2Ecom?= :;\r\n   To:   =?UTF-8?Q?DISPLAY-REMOTE1?=\r\n         =?UTF-8?Q?NON-ASCII-REMOTE1=40example=2Enet?= :;,\r\n         =?UTF-8?Q?DISPLAY-REMOTE2?=\r\n         =?UTF-8?Q?NON-ASCII-REMOTE2=40example=2Ecom?= :;,\r\n   Cc:   =?UTF-8?Q?DISPLAY-REMOTE3?=\r\n         =?UTF-8?Q?NON-ASCII-REMOTE3=40example=2Eorg?= :;\r\n", "notes": "The characters '@' and '.' cannot appear in an encoded-word occurring\r\nin a phrase (see rule 3 of section 5 of RFC 2047), so they must be escaped\r\nwith '=40' and '=2E', respectively, in the Q encoding.", "submit_date": "2014-04-10", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3966", "doc-id": "RFC3651", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "       <NamingAuthority> = *(<NamingAuthority>  \".\") <NAsegment>\r\n", "correct_text": "       <NamingAuthority> = *(<NAsegment>  \".\") <NAsegment>", "notes": "Strictly speaking, this is an editorial change because the corrected\r\nBNF generates the same strings as the original BNF.  But the corrected\r\nBNF is far easier for the reader to understand; it matches how people\r\nthink about the syntax.", "submit_date": "2014-04-16", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4488", "doc-id": "RFC2866", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.11", "orig_text": "Acct-Multi-Session-Id\r\n\r\n   Description\r\n\r\n      This attribute is a unique Accounting ID to make it easy to link\r\n      together multiple related sessions in a log file.  Each session\r\n      linked together would have a unique Acct-Session-Id but the same\r\n      Acct-Multi-Session-Id.  It is strongly recommended that the Acct-\r\n      Multi-Session-Id contain UTF-8 encoded 10646 [7] characters.", "correct_text": "Acct-Multi-Session-Id\r\n\r\n   Description\r\n\r\n      This attribute is a globally unique Accounting ID to make it easy\r\n      to link together multiple related sessions in a log file.  Each\r\n      session linked together would have a globally unique\r\n      Acct-Session-Id but the same Acct-Multi-Session-Id.  It is\r\n      strongly recommended that the Acct-Multi-Session-Id contain\r\n      UTF-8 encoded 10646 [7] characters.", "notes": "The RFC does not explicitly state the scope of uniqueness and it must be clarified to state that Acct-Multi-Session-Ids are expected to be globally unique. I believe this to be the original, implicit intent of the author.\r\n\r\nAn ideal Acct-Multi-Session-Id would have the properties of a GUID/UUID.\r\n\r\nSee Errata 4487 for the same clarification on the Acct-Session-Id.\r\n --VERIFIER NOTES-- \r\n As summarized with Nick:\r\n\r\n\r\nIt looks like the Acct-Session-Id and Acct-Multi-Session-Id errata\r\nboth will and should be rejected on the grounds that they would\r\nconstitute technical changes based on the original intent of the RFC,\r\nwhich we now know. That does make sense and would be a reasonable\r\ncourse of action now that that's known.\r\n\r\nI am pleased that I have engendered a discussion on what I believe to\r\nbe a pertinent issue here. Alan has commented that he feels another\r\nRADIUS fixes RFC would be sensible. I agree with that course of\r\naction.\r\n\r\nThanks for all your time here!\r\n\r\nRegards,\r\n\r\nNick", "submit_date": "2015-09-29", "submitter_name": "Nick Lowe", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4281", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.3.2", "orig_text": "For messages that do not include a payload body, the Content-Length\r\nindicates the size of the selected representation (Section 3 of\r\n[RFC7231]).", "correct_text": "For outbound messages that do not include a payload body, the\r\nContent-Length indicates the size of the selected representation\r\n(Section 3 of [RFC7231]).", "notes": "Assuming my interpretation is correct, this phrase as-is is a little confusing given the next paragraphs states:\r\n\r\n\"A user agent SHOULD NOT send a Content-Length header field when the request message does not contain a payload body and the method semantics do not anticipate such a body.\"\r\n\r\nThe former is ambiguous, the latter explicit.\n --VERIFIER NOTES-- \nThe sentence in question has to be taken in context with the entire paragraph, with the rest of the section, and with the understand that it's only a summary.  The details are provided in the rest of the section and in Section 3.3.3.", "submit_date": "2015-02-26", "submitter_name": "Demian Brecht", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3956", "doc-id": "RFC6371", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "      When an SPME is instantiated after the transport path has been\r\n      instantiated, the TTL distance to the MIPs may change for the\r\n      short-pipe model of TTL copying, and may change for the uniform\r\n      model if the SPME is not co-routed with the original path.", "correct_text": "       When an SPME is instantiated after the transport path has been\r\n       instantiated, the TTL distance to the MIPs may change for the\r\n       short-pipe model, and may change for the uniform model if the\r\n       SPME is not co-routed with the original path.\r\n", "notes": "The original report notes that there is no TTL copying in short-pipe model and states confusion arising from the text. The suggestion was to change it to:\r\n\r\n      When an SPME is instantiated after the transport path has been\r\n      instantiated, the TTL distance to the MIPs may change for the\r\n      short-pipe model of no TTL copying, and may change for the uniform\r\n      model if the SPME is not co-routed with the original path.\r\n\r\nThe authors point out that the TTL copying mode in short-pipe is \"no copying\". This is true, but leaves some potential confusion in the text.\r\n\r\nThe corrected text removes all mention of TTL copying (which is not relevant in this case).\r\n", "submit_date": "2014-04-10", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3957", "doc-id": "RFC6470", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "       uses common-session-parms {\r\n         when \"../confirm-event != 'timeout'\";\r\n       }\r\n\r\n       leaf confirm-event {\r\n", "correct_text": "       uses common-session-parms {\r\n         when \"confirm-event != 'timeout'\";\r\n       }\r\n\r\n       leaf confirm-event {\r\n", "notes": "\"uses\" does not define a node.  RFC 6020, 7.19.5 specifies that the context node for \"when\" is the node above the \"uses\" statement:\r\n\r\n   o  If the \"when\" statement is a child of a \"uses\", \"choice\", or\r\n      \"case\" statement, then the context node is the closest ancestor\r\n      node to the \"uses\", \"choice\", or \"case\" node that is also a data\r\n      node.", "submit_date": "2014-04-11", "submitter_name": "Martin Bjorklund", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3958", "doc-id": "RFC6371", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "Figure 3 describes four examples of per-interface Up MEPs: an Up\r\n   Source MEP in a source node (case 1), an Up Sink MEP in a destination\r\n   node (case 2), a Down Source MEP in a source node (case 3), and a\r\n   Down Sink MEP in a destination node (case 4).", "correct_text": "Figure 3 describes four examples of per-interface MEPs: an Up\r\n   Source MEP in a source node (case 1), an Up Sink MEP in a destination\r\n   node (case 2), a Down Source MEP in a source node (case 3), and a\r\n   Down Sink MEP in a destination node (case 4).", "notes": "per-interface Up MEPs ----> per-interface MEPs\r\n\r\nThe four instances listed include Up and Down MEPs, so the text should be more general.", "submit_date": "2014-04-11", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3959", "doc-id": "RFC6740", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "   Instead, network-layer ILNP sessions have 4 components:\r\n\r\n   - Source Locator(s) (L_S)\r\n   - Source Identifier(s) (I_S)\r\n   - Destination Locator(s) (L_D)\r\n   - Destination Identifier(s) (L_S)\r\n\r\n   and a tuple for an ILNP session would be:\r\n\r\n      <ILNP: I_S, L_S, I_D, L_D>\r\n\r\n   The phrase \"ILNP session\" refers to an ILNP-based network-layer\r\n   session, having the 4 components in the definition above.", "correct_text": "   Instead, network-layer ILNP sessions have 4 components:\r\n\r\n   - Source Locator(s) (L_S)\r\n   - Source Identifier(s) (I_S)\r\n   - Destination Locator(s) (L_D)\r\n   - Destination Identifier(s) (I_D)\r\n\r\n   and a tuple for an ILNP session would be:\r\n\r\n      <ILNP: I_S, L_S, I_D, L_D>\r\n\r\n   The phrase \"ILNP session\" refers to an ILNP-based network-layer\r\n   session, having the 4 components in the definition above.", "notes": "The \"L_S\" for destination identifier looks like a simple typo.", "submit_date": "2014-04-11", "submitter_name": "Andrew Yourtchenko", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4282", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "unknown-statement   = prefix \":\" identifier [sep string] optsep\r\n                      (\";\" / \"{\" *unknown-statement2 \"}\") \r\nunknown-statement2   = [prefix \":\"] identifier [sep string] optsep\r\n                      (\";\" / \"{\" *unknown-statement2 \"}\") \r\n", "correct_text": "unknown-statement   = prefix \":\" identifier [sep string] optsep\r\n                    (\";\" / \"{\" optsep *(unknown-statement2 optsep) \"}\")\r\nunknown-statement2   = [prefix \":\"] identifier [sep string] optsep\r\n                     (\";\" / \"{\" optsep *(unknown-statement2 optsep) \"}\")\r\n", "notes": "", "submit_date": "2015-02-27", "submitter_name": "Cesar Crusius", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4346", "doc-id": "RFC1323", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3", "orig_text": "      Since the max window is 2**S (where S is the scaling shift count)\r\n      times at most 2**16 - 1 (the maximum unscaled window), the maximum\r\n      window is guaranteed to be < 2*30 if S <= 14.  Thus, the shift\r\n      count must be limited to 14 (which allows windows of 2**30 = 1\r\n      Gbyte).  If a Window Scale option is received with a shift.cnt\r\n      value exceeding 14, the TCP should log the error but use 14\r\n      instead of the specified value.\r\n", "correct_text": "      Since the max window is 2**S (where S is the scaling shift count)\r\n      times at most 2**16 - 1 (the maximum unscaled window), the maximum\r\n      window is guaranteed to be < 2**30 if S <= 14.  Thus, the shift\r\n      count must be limited to 14 (which allows windows of 2**30 = 1\r\n      Gbyte).  If a Window Scale option is received with a shift.cnt\r\n      value exceeding 14, the TCP should log the error but use 14\r\n      instead of the specified value.\r\n", "notes": "Typo in the 3rd line: the window should be less than 2 to the power of 30, instead of 2 multiplied by 30.", "submit_date": "2015-04-24", "submitter_name": "Niels Laukens", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4489", "doc-id": "RFC2308", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the References", "orig_text": "", "correct_text": "ADD:\r\n\r\n[RFC2136]  P. Vixie, Ed., S. Thomson, Y. Rekhter, J. Bound, \"Dynamic\r\n           Updates in the Domain Name System (DNS UPDATE)\", \r\n           RFC 2136, April 1997.\r\n\r\n-------\r\n\r\nOR:  define SERVFAIL inside of the terminology section (section 1):\r\n\r\n\"SERVFAIL\" - a name for the \"Server failure\" (2) RCODE described in\r\n[RFC1035 Section 4.1.1].\r\n", "notes": "Section 2.1.1 uses the term SERVFAIL to reference DNS RCODE 2, but this term isn't defined in the document nor in the referenced documents.  It's first defined in 2136 and thus the two options available are to either add a reference to 2136 or to add a definition of SERVFAIL to the document in the terminology section.", "submit_date": "2015-09-29", "submitter_name": "Wes Hardaker", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3960", "doc-id": "RFC2412", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.8 & Appx E", "orig_text": "Section 2.8:\r\n\r\n   [...] In order to maximize this, one can\r\n   choose \"strong\" or Sophie Germaine primes, P = 2Q + 1, where P and Q\r\n   are prime.  However, if P = kQ + 1, where k is small, then the\r\n   strength of the group is still considerable.  These groups are known\r\n   as Schnorr subgroups, and they can be found with much less\r\n   computational effort than Sophie-Germaine primes.\r\n\r\n   [...]\r\n\r\n      [...]  For Sophie Germain primes, if the\r\n      generator is a square, then there are only two elements in the\r\n      subgroup: 1 and g^(-1) (same as g^(p-1)) which we have already\r\n      recommended avoiding. \r\n\r\nAppendix E:\r\n\r\n   [...] The\r\n   primes are chosen to be Sophie Germain primes (i.e., (P-1)/2 is also\r\n   prime), to have the maximum strength against the square-root attack\r\n   on the discrete logarithm problem.", "correct_text": "Section 2.8:\r\n   [...] In order to maximize this, one can\r\n   choose safe primes, P = 2Q + 1, where P and Q\r\n   are prime.  However, if P = kQ + 1, where k is small, then the\r\n   strength of the group is still considerable.  These groups are known\r\n   as Schnorr subgroups, and they can be found with much less\r\n   computational effort than safe primes.\r\n\r\n   [...]\r\n\r\n      [...]  For safe primes, if the\r\n      generator is a square, then there are only two elements in the\r\n      subgroup: 1 and g^(-1) (same as g^(p-1)) which we have already\r\n      recommended avoiding. \r\n\r\nAppendix E:\r\n   [...] The\r\n   primes are chosen to be safe primes (i.e., (P-1)/2 is also\r\n   prime), to have the maximum strength against the square-root attack\r\n   on the discrete logarithm problem.", "notes": "This is a terminology clarification.\r\n\r\nFor primes P and Q related such that P = 2Q + 1, P is a \"safe prime\" and Q is a \"Sophie Germain prime\"  The draft gets this definition backward.  The draft also suggests that \"strong\" primes are equivalent to Sophie Germain primes, which is not necessarily the case.\r\n\r\nSection 2.8 also misspells \"Germain\" with an extra e at the end twice.\r\n\r\nsee for example: http://www.ams.org/journals/mcom/1996-65-213/S0025-5718-96-00670-9/S0025-5718-96-00670-9.pdf", "submit_date": "2014-04-11", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3961", "doc-id": "RFC6371", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.7", "orig_text": "      This packet\r\n      will be delivered by the forwarding plane to all intermediate\r\n      nodes at the same TTL distance of the target MIP and to any leaf\r\n      that is located at a shorter distance.", "correct_text": "      This packet\r\n      will be delivered by the forwarding plane to all\r\n      nodes at the same TTL distance as the target MIP and to any leaf\r\n      that is located at a shorter distance.", "notes": "The packet will also be deliverd to any leaf that has the same TTL distance of the target MIP.", "submit_date": "2014-04-11", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3962", "doc-id": "RFC5915", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3 and A", "orig_text": "   ECPrivateKey ::= SEQUENCE {\r\n     version        INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),\r\n     privateKey     OCTET STRING,\r\n     parameters [0] ECParameters {{ NamedCurve }} OPTIONAL,\r\n     publicKey  [1] BIT STRING OPTIONAL\r\n   }", "correct_text": "   ECPrivateKey ::= SEQUENCE {\r\n     version        INTEGER { ecPrivkeyVer1(1) } (ecPrivkeyVer1),\r\n     privateKey     OCTET STRING,\r\n     parameters [0] ECParameters  OPTIONAL,\r\n     publicKey  [1] BIT STRING OPTIONAL\r\n   }", "notes": "ECParameters is not a parametrized type.  This means that it cannot be used as a parameterized type by passing in the NamedCurve set as a parameter.", "submit_date": "2014-04-14", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3963", "doc-id": "RFC6371", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1.2", "orig_text": "The peer MEP, upon receiving an LKI removal request, can either\r\n   accept or reject the removal instruction and replies with an LK\r\n   removal reply OAM packet indicating whether or not it has accepted\r\n   the instruction.", "correct_text": "The peer MEP, upon receiving an LKI removal request, can either\r\n   accept or reject the removal instruction and replies with an LKI\r\n   removal reply OAM packet indicating whether or not it has accepted\r\n   the instruction.", "notes": "LK  ---> LKI", "submit_date": "2014-04-15", "submitter_name": "Liu Lin", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3964", "doc-id": "RFC2439", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.8.2", "orig_text": " In either case then:\r\n\r\n     1.  set t-updated = t-now\r\n\r\n     2.  insert into a reuse list (see Section 4.8.6)", "correct_text": " In either case then:\r\n\r\n     1.  set t-updated = t-now\r\n", "notes": "The route which is unreachable should NOT be inserted into the reuse-list. reuse-list (as per explanation in Section 4.8.7) is used for fast evaluation of routes which have been suppressed long enough and can be potentially used again. The \"unreachability/withdrawal\" of route is never suppressed and never needs to be re-evaluated in future.\n --VERIFIER NOTES-- \n   RFC 2439 isn't the easiest to read, but this erratum is not correct. Despite its name, the \"reuse list\" as described in S. 4.8.7 is used for processing timer-driven events in general, including freeing up damping structures (\"histories\"). Quoting from S. 4.8.7, \"Handling Reuse Timer Events\":\r\n\r\n                      all of the routes in the first queue will be\r\n   available for immediate reuse if reachable or the history entry could\r\n                                              ^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n   be disposed of if unreachable.\r\n   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n\r\nIf you have any doubt that \"history\" means \"damping structure\", take a look at S. 4.8.2:\r\n\r\n   If there is no previous stability history (the damping structure\r\n   pointer is zero), then:\r\n\r\nPresumably, you're clear on why histories for unreachable routes need to be maintained to begin with.", "submit_date": "2014-04-15", "submitter_name": "Gunjan Bansal", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4352", "doc-id": "RFC6773", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "TOC", "orig_text": "     3.9.  Service Codes and the DCCP Port Registry . . . . . . . . . 11\r\n   4.  DCCP-UDP and Higher-Layer Protocols  . . . . . . . . . . . . . 11\r\n     5.1.  Protocol Identification  . . . . . . . . . . . . . . . . . 12\r\n", "correct_text": "     3.9.  Service Codes and the DCCP Port Registry . . . . . . . . . 11\r\n   4.  DCCP-UDP and Higher-Layer Protocols  . . . . . . . . . . . . . 11\r\n   5.  Signalling the Use of DCCP-UDP . . . . . . . . . . . . . . . . 11\r\n     5.1.  Protocol Identification  . . . . . . . . . . . . . . . . . 12\r\n", "notes": "There was a processing error when generating the table of contents.", "submit_date": "2015-04-29", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4353", "doc-id": "RFC7525", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "[RFC7507]  Moeller, B. and A. Langley, \"TLS Fallback Signaling Cipher\r\n           Suite Value (SCSV) for Preventing Protocol Downgrade\r\n           Attacks\", RFC 7507, April 2015.", "correct_text": "[RFC7507]  Moeller, B. and A. Langley, \"TLS Fallback Signaling Cipher\r\n           Suite Value (SCSV) for Preventing Protocol Downgrade\r\n           Attacks\", RFC 7507, April 2015,\r\n           <http://www.rfc-editor.org/info/rfc7507>.\r\n", "notes": "The original text lacks the link to the RFC7507 information page.", "submit_date": "2015-05-04", "submitter_name": "Xiaoyin Liu", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4490", "doc-id": "RFC6846", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2", "orig_text": "COMPRESSED sack3_irregular {\r\n   discriminator =:= '00000011';\r\n   block_1       =:= sack_block(ack_value);\r\n   block_2       =:= sack_block(block_1.UVALUE && 0xFFFFFFFF);\r\n   block_3       =:= sack_block(block_1.UVALUE && 0xFFFFFFFF);\r\n   ENFORCE(length.UVALUE == 26);\r\n }", "correct_text": "COMPRESSED sack3_irregular {\r\n   discriminator =:= '00000011';\r\n   block_1       =:= sack_block(ack_value);\r\n   block_2       =:= sack_block(block_1.UVALUE && 0xFFFFFFFF);\r\n   block_3       =:= sack_block(block_2.UVALUE && 0xFFFFFFFF);\r\n   ENFORCE(length.UVALUE == 26);\r\n }", "notes": "block_3 should be encoded with block_2.UVALUE as reference instead of block_1.UVALUE. All other sack[1-4]_list_item() and sack[1-4]_irregular() methods are defined this way.", "submit_date": "2015-10-04", "submitter_name": "Didier Barvaux", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-12-17 15:32:21"}, {"errata_id": "3965", "doc-id": "RFC6931", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2 and 4.1", "orig_text": "   2006/12/xmlc12n11#                  [CANON11]  Canonicalization\r\n   2006/12/xmlc14n11#WithComments      [CANON11]  Canonicalization\r\n", "correct_text": "   2006/12/xmlc12n11#   {Bad}          [CANON11]\r\n   2006/12/xmlc14n11#                  [CANON11]\r\n", "notes": "As explained in Appendix B of draft-eastlake-rfc6931bis-xmlsec-uris:\r\n\r\n   [RFC6931] included two bad URIs as shown below. \"{Bad}\" in the\r\n   indexes (Sections 4.1 and 4.2) indicates such a bad value.\r\n   Implementations SHOULD only generate the correct URI but SHOULD\r\n   understand both the correct and erroneous URI.\r\n\r\n   2006/12/xmlc12n11#\r\n       Appears in the indices (Section 4.1 and 4.2] of [RFC6931] when it\r\n       should be \"2006/12/xmlc14n11#\" (i.e., the \"12\" inside \"xmlc12n11\"\r\n       should have been \"14\"). This is [Err3965] and is corrected in\r\n       this document.\r\n\r\n==[ Original Text\r\n--[ corrected text\r\n   2006/12/xmlc14n11#                  [CANON11]  Canonicalization\r\n   2006/12/xmlc14n11#WithComments      [CANON11]  Canonicalization\r\n\r\n-- [notes\r\n[CANON11] referencing to <http://www.w3.org/TR/2008/REC-xml-c14n11-20080502/>\r\nonly talks about c14n and not c12n.\r\n\r\nIf this is not a flaw but done purposely, there should be a not about it.\r\n\r\nI could not find the original definitions for xmlc12n11 and xmlc14n11.\r\nThey are not in the referenced document.\r\n(And google only shows copies of this rfc.)\r\n\r\nFor stability reasons it may be better to not change/correct this, as it may be already in use.\r\nSo a note about this discrepance may be appropriate. Or a reference to the document defining those uris.", "submit_date": "2014-04-15", "submitter_name": "Axel Puhlmann", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-19 22:14:56"}, {"errata_id": "3967", "doc-id": "RFC4187", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "After obtaining the subscriber identity, the EAP server obtains an\r\n   authentication vector (RAND, AUTN, RES, CK, IK) for use in\r\n   authenticating the subscriber.  From the vector, the EAP server\r\n   derives the keying material, as specified in Section 6.4.", "correct_text": "After obtaining the subscriber identity, the EAP server obtains an\r\n   authentication vector (RAND, AUTN, RES, CK, IK) for use in\r\n   authenticating the subscriber.  From the vector, the EAP server\r\n   derives the keying material, as specified in Section 7.", "notes": "", "submit_date": "2014-04-18", "submitter_name": "Huanggj", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3968", "doc-id": "RFC4187", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.3", "orig_text": "   When processing this message, the peer MUST process AT_RAND and\r\n   AT_AUTN before processing other attributes.  Only if these attributes\r\n   are verified to be valid, the peer derives keys and verifies AT_MAC.\r\n   The operation in case an error occurs is specified in Section 6.3.1.", "correct_text": "", "notes": "The words \"these attributes\" in sentence \"Only if these attributes are verified to be valid, the peer derives keys and verifies AT_MAC.\" is obscured. It's not clear which attributes are indicated. \"AT_RAND and AT_AUTN\" or \"other attributes\"?", "submit_date": "2014-04-19", "submitter_name": "Huanggj", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3969", "doc-id": "RFC5891", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.3.2", "orig_text": "The Unicode string MUST NOT begin with a combining mark or combining\r\ncharacter (see The Unicode Standard, Section 2.11 [Unicode] for an\r\nexact definition).", "correct_text": "The Unicode string MUST NOT begin with a combining mark or combining \r\ncharacter (as defined in The Unicode Standard, Section 3.6 [Unicode], \r\ndefinition D52).", "notes": "Section 2.11 of the Unicode Standard explains what combining characters are only in general terms. Section 3.6 contains the actual definition.\r\n\r\n----- Verifier Notes -----\r\nThe actual fix is probably closer to changing \"exact definition\" to \"explanation of combining characters,\" and leaving the reference alone.  But discussion indicates that more clarification is probably good, and that clarification needs to be in the broader context of a document update.", "submit_date": "2014-04-19", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3970", "doc-id": "RFC4122", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "The version number is in the most significant 4 bits of the time\r\nstamp (bits 4 through 7 of the time_hi_and_version field).", "correct_text": "The version number is in the most significant 4 bits of the\r\ntime_hi_and_version field...", "notes": "Errata 1957 and 3546 refer to the inconsistent bit numbering. That is a separate issue and has been left out of this correction. This report is in reference to the use of \"time stamp\" vs \"time_hi_and_version field\". The version number does not replace the most significant 4 bits of the time stamp. The 4-bit version number is in addition to the 60-bit time stamp.\n --VERIFIER NOTES-- \nThis seems to be a misunderstanding of the meaning here:\r\nThe time_hi_and_version field includes 4 bits for version, followed by the most significant 12 bits of the time stamp.  Therefore, the most significant four bits of the time stamp *are* bits 4 thru 7 of the time_hi_and_version field.\r\n\r\nThat said, this is all a confusing mess, and really could use a revision for clarity.", "submit_date": "2014-04-19", "submitter_name": "Jennifer Arsenault", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3971", "doc-id": "RFC5764", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "   If the client detects a nonzero-length MKI in the server's response\r\n   that is different than the one the client offered, then the client\r\n   MUST abort the handshake and SHOULD send an invalid_parameter alert.", "correct_text": "   If the client detects a nonzero-length MKI in the server's response\r\n   that is different than the one the client offered, then the client\r\n   MUST abort the handshake and SHOULD send an illegal_parameter alert.", "notes": "invalid_parameter isn't defined anywhere; this probably means illegal_parameter(47), which is defined in RFC 5246.", "submit_date": "2014-04-22", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3972", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": " Reserved:  6 bits\r\n\r\n    Reserved for future use.  Must be zero.\r\n", "correct_text": " Reserved:  6 bits\r\n\r\n    Reserved for future use.  SHOULD be zero.\r\n", "notes": "RFC3168 specifies 2 additional bits (ECE and CWR), RFC3540 specifies one additional bit (NS). Even though RFC793 predates RFC2119, and section 2.10 states\r\n\" be conservative in what you do, be liberal in what you accept from others.\", any\r\nupdate to this RFC should adjust the wording apropriately.\n --VERIFIER NOTES-- \nThe text is correct, as is. For implementations implementing RFC 793 purely the have to set this to zero.", "submit_date": "2014-04-23", "submitter_name": "Richard Scheffenegger", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3973", "doc-id": "RFC3455", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "      F6 Invite P1 -> UA\r\n           INVITE sip:user1@192.0.2.4 SIP/2.0\r\n           Via: SIP/2.0/UDP 192.0.2.10:5060;branch=z9hG4bKg48sh128\r\n           Via: SIP/2.0/UDP 192.0.2.20:5060;branch=z9hG4bK03djaoe1\r\n           To: sip:other-user@othernetwork.com\r\n           From: sip:another-user@anothernetwork.com;tag=938s0\r\n           Call-ID: 843817637684230998sdasdh09\r\n           P-Called-Party-ID: sip:user1-business@example.com\r\n           CSeq: 101 INVITE", "correct_text": "      F6 Invite P1 -> UA\r\n           INVITE sip:user1@192.0.2.4 SIP/2.0\r\n           Via: SIP/2.0/UDP 192.0.2.10:5060;branch=z9hG4bKg48sh128\r\n           Via: SIP/2.0/UDP 192.0.2.20:5060;branch=z9hG4bK03djaoe1\r\n           To: sip:other-user@othernetwork.com\r\n           From: sip:another-user@anothernetwork.com;tag=938s0\r\n           Call-ID: 843817637684230998sdasdh09\r\n*          P-Called-Party-ID: <sip:user1-business@example.com>\r\n           CSeq: 101 INVITE", "notes": "5.2 P-Called-Party-ID header syntax\r\n\r\n   The syntax of the P-Called-Party-ID header is described as follows:\r\n\r\n      P-Called-Party-ID      = \"P-Called-Party-ID\" HCOLON\r\n                               called-pty-id-spec\r\n      called-pty-id-spec     = name-addr *(SEMI cpid-param)\r\n\r\nRFC3261:\r\nname-addr      =  [ display-name ] LAQUOT addr-spec RAQUOT\r\n\r\n-> the SIP URI of the PCPI header in the example should be enclosed in angle quotes.\n --VERIFIER NOTES-- \nThis errata was corrected in https://datatracker.ietf.org/doc/html/rfc7315 which obsoleted https://datatracker.ietf.org/doc/html/rfc3455", "submit_date": "2014-04-24", "submitter_name": "Zoltan Toth", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 19:57:05"}, {"errata_id": "3974", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13", "orig_text": "    (6) Else, if there is an instance of the LSA on the sending\r\n        neighbor's Link state request list, an error has occurred in the\r\n        Database Exchange process.  In this case, restart the Database\r\n        Exchange process by generating the neighbor event BadLSReq for\r\n        the sending neighbor and stop processing the Link State Update\r\n        packet.\r\n\r\n    (7) Else, if the received LSA is the same instance as the database\r\n        copy (i.e., neither one is more recent) the following two steps\r\n        should be performed:\r\n\r\n        (a) If the LSA is listed in the Link state retransmission list\r\n            for the receiving adjacency, the router itself is expecting\r\n            an acknowledgment for this LSA.  The router should treat the\r\n            received LSA as an acknowledgment by removing the LSA from\r\n            the Link state retransmission list.  This is termed an\r\n            \"implied acknowledgment\".  Its occurrence should be noted\r\n            for later use by the acknowledgment process (Section 13.5).\r\n\r\n        (b) Possibly acknowledge the receipt of the LSA by sending a\r\n            Link State Acknowledgment packet back out the receiving\r\n            interface.  This is explained below in Section 13.5.\r\n", "correct_text": "    (6) Else, if the received LSA is the same instance as the database\r\n        copy (i.e., neither one is more recent) the following two steps\r\n        should be performed:\r\n\r\n        (a) If the LSA is listed in the Link state retransmission list\r\n            for the receiving adjacency, the router itself is expecting\r\n            an acknowledgment for this LSA.  The router should treat the\r\n            received LSA as an acknowledgment by removing the LSA from\r\n            the Link state retransmission list.  This is termed an\r\n            \"implied acknowledgment\".  Its occurrence should be noted\r\n            for later use by the acknowledgment process (Section 13.5).\r\n\r\n        (b) Possibly acknowledge the receipt of the LSA by sending a\r\n            Link State Acknowledgment packet back out the receiving\r\n            interface.  This is explained below in Section 13.5.\r\n\r\n    (7) Else, if there is an instance of the LSA on the sending\r\n        neighbor's Link state request list, an error has occurred in the\r\n        Database Exchange process.  In this case, restart the Database\r\n        Exchange process by generating the neighbor event BadLSReq for\r\n        the sending neighbor and stop processing the Link State Update\r\n        packet.\r\n", "notes": "The problem arises when the routing domain has two instances of LSA \r\nwith the same sequence number and the same checksum,\r\nbut with an age difference bigger than MaxAgeDiff.\r\n\r\nThe above could take place in multiple scenarios. Here are two examples:\r\n\r\n1) There is a demand circuit somewhere in the routing domain\r\n2) The router lost its ASBR status and therefore flushed the self-originated Type 5 LSAs\r\n   but later on gained the ASBR status back and re-originated Type 5.    \r\n   If the network was partitioned, each partition can have two instances of LSA\r\n   with an age difference bigger than MaxAgeDiff.\r\n   \r\nThe two instances of LSA can temporarily prevent the adjacency formation. \r\n   \r\nConsider the example below:\r\n\r\n\r\nTopology\r\n========\r\n\r\n\r\nRT1 ----- RT2\r\n\r\nInitial state:\r\n==============\r\nThe physical link between RT1 and R2 just came up \r\nThe routers are about to form ospf adjacency.\r\n\r\nInitial link-state databases:\r\n=============================\r\nR1 ospf database has          LSA 10.0.0.1 age 910 seq # 0x80000001 \r\nR2 ospf database has the same LSA 10.0.0.1 age   9 seq # 0x80000001\r\n\r\nRT1 Event Sequence:\r\n===============\r\n\r\nRT1 is starting to form adjacency with RT2. \r\n\r\n1) During the Database Exchange, RT2's LSA instance is more recent because of more than 900 (MaxAgeDiff) seconds age difference (section 13.1 of RFC 2328).\r\n2) So RT1 requests the LSA\r\n3) RT2 sends the LSA after incrementing the age by 1 (InfTransDelay).\r\n4) When the LSA instance arrives to RT1, it is identical (the difference is exactly 900 seconds now).\r\n\r\nSo RT1 aborts Loading according to step (6) of section 13.\r\n\r\n\r\nSolution:\r\n=========\r\n\r\nSwap steps (6) and (7) of section 13.\r\n\r\nAcee Lindem adds:\r\n\"This situation comes into play when a router views an LSA as being\r\nmore recent when the LSA is requested (via Link-State Request) but as the\r\nsame instance when the LSA is actually received.\"", "submit_date": "2014-04-24", "submitter_name": "Mike Dubrovsky", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4055", "doc-id": "RFC5321", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6.2", "orig_text": "   This specification does not deal with the verification of return\r\n   paths for use in delivery notifications.  Recent work, such as that\r\n   on SPF [29] and DKIM [30] [31], has been done to provide ways to\r\n   ascertain that an address is valid or belongs to the person who\r\n   actually sent the message.", "correct_text": "   This specification does not deal with the verification of return\r\n   paths for use in delivery notifications.  ", "notes": "Neither SPF nor DKIM determine \"validity\" of an address.  SPF determines whether an IP Address is 'authorized' to send mail with a particular domain name in the return address, but that does not validate the entire address, nevermind validating any destination or author addresses.  DKIM has nothing at all to do with any existing address or domain name elsewhere in the message.\r\n\r\nSo I suggest merely dropping the problematic sentence.\n --VERIFIER NOTES-- \nThis is a change request, not an errata report.", "submit_date": "2014-07-19", "submitter_name": "Dave Crocker", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4056", "doc-id": "RFC4028", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "8.  Proxy Behavior\r\n\r\n   Session timers are mostly of interest to call stateful proxy servers\r\n   (that is, to servers that maintain the state of calls and dialogs\r\n   established through them).  However, a stateful proxy server (that\r\n   is, a server which is aware of transaction state but does not retain\r\n   call or dialog state) MAY also follow the rules described here.\r\n   Stateless proxies MUST NOT attempt to request session timers.\r\n   Proxies that ask for session timers SHOULD record-route, as they\r\n   won't receive refreshes if they don't.", "correct_text": "   Session timers are mostly of interest to call stateful proxy servers\r\n   (that is, to servers that maintain the state of calls and dialogs\r\n   established through them).  However, a stateless proxy server (that\r\n   is, a server which is aware of transaction state but does not retain\r\n   call or dialog state) MAY also follow the rules described here.\r\n   Stateless proxies MUST NOT attempt to request session timers.\r\n   Proxies that ask for session timers SHOULD record-route, as they\r\n   won't receive refreshes if they don't.", "notes": "After the \"However\", it should be a stateless proxy server.", "submit_date": "2014-07-17", "submitter_name": "Lucas Wang", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:48:21"}, {"errata_id": "7066", "doc-id": "RFC8552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.2.", "orig_text": "          | URI        | _dccp                 | [RFC7566]     |", "correct_text": "         | URI        | _dccp                 | [RFC4340]     |", "notes": "Wrong reference. RFC7566 does not even mention \"dccp\". \r\n\r\nNote that this also has an impact to the IANA registry: https://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#underscored-globally-scoped-dns-node-names\r\n\r\n\r\n[ Warren Kumari (Ops AD): Please see the thread for resolution: https://mailarchive.ietf.org/arch/msg/dnsop/WFMXL5dY8sniHwVtkPfcqvWk3nI/\r\n\r\nThis was added as \"part of a list used to \"reserve\" the names of (transport) protocols, so that constructs like _25._quic.example.com could be constructed where the _name denotes the protocol and not the name of something.\" . I am requesting that the IANA update the reference to match. ]\r\n", "submit_date": "2022-08-02", "submitter_name": "Bernie Hoeneisen", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-29 18:41:22"}, {"errata_id": "3975", "doc-id": "RFC6969", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   +---------+---------------------------------------------+-----------+\r\n   | Value   | Description                                 | Reference |\r\n   +---------+---------------------------------------------+-----------+\r\n   | 0       | IPv6 unicast AF                             | [RFC5838] |\r\n   | 1 - 31  | Base IPv6 Unicast AF dependent on local     | [RFC5838] |\r\n   |         | policy                                      |           |\r\n   | 32      | Base IPv6 Multicast                         | [RFC5838] |\r\n   | 33-63   | IPv6 Multicast AFs dependent on local       | [RFC5838] |\r\n   |         | policy                                      |           |\r\n   | 64      | Base IPv4 Unicast AF                        | [RFC5838] |\r\n   | 65-95   | IPv4 Unicast AFs dependent on local policy  | [RFC5838] |\r\n   | 96      | Base IPv4 Multicast                         | [RFC5838] |\r\n   | 97-127  | IPv4 Multicast AFs dependent on local       | [RFC5838] |\r\n   |         | policy                                      |           |\r\n   | 128-255 | Unassigned                                  | [RFC5838] |\r\n   +---------+---------------------------------------------+-----------+\r\n", "correct_text": "   +---------+---------------------------------------------+-----------+\r\n   | Value   | Description                                 | Reference |\r\n   +---------+---------------------------------------------+-----------+\r\n   | 0       | Base IPv6 Unicast AF                        | [RFC5838] |\r\n   | 1 - 31  | IPv6 Unicast AFs dependent on local policy  | [RFC5838] |\r\n   | 32      | Base IPv6 Multicast AF                      | [RFC5838] |\r\n   | 33-63   | IPv6 Multicast AFs dependent on local       | [RFC5838] |\r\n   |         | policy                                      |           |\r\n   | 64      | Base IPv4 Unicast AF                        | [RFC5838] |\r\n   | 65-95   | IPv4 Unicast AFs dependent on local policy  | [RFC5838] |\r\n   | 96      | Base IPv4 Multicast                         | [RFC5838] |\r\n   | 97-127  | IPv4 Multicast AFs dependent on local       | [RFC5838] |\r\n   |         | policy                                      |           |\r\n   | 128-255 | Unassigned                                  | [RFC5838] |\r\n   +---------+---------------------------------------------+-----------+\r\n", "notes": "The term \"Base\" applies to Instance ID 0, not to IDs 1-31 which are additional IPv6 unicast AFs. Additionally, to keep the formatting consistent, the first letter in terms \"Unicast\" and \"Multicast\" is capitalized in each term instance. Also, in the description of values 1-31, \"AF\" is replaced with \"AFs\".", "submit_date": "2014-04-27", "submitter_name": "Peter Paluch", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3976", "doc-id": "RFC6969", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   +--------------------------+---------------+-----------------------+\r\n   | Value                    | Description   | Reference             |\r\n   +--------------------------+---------------+-----------------------+\r\n   | 128-191                  | Unassigned    | 192-255               |\r\n   | Reserved for Private Use | this document | Private Use [RFC5226] |\r\n   +--------------------------+---------------+-----------------------+\r\n", "correct_text": "   +-------------+--------------------------+-------------------------+\r\n   | Value       | Description              | Reference               |\r\n   +-------------+--------------------------+-------------------------+\r\n   | 128-191     | Unassigned               |                         |\r\n   | 192-255     | Reserved for Private Use | This Document [RFC6969] |\r\n   +-------------+--------------------------+-------------------------+\r\n", "notes": "The table was obviously misformatted.", "submit_date": "2014-04-27", "submitter_name": "Peter Pal\u00fach", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3977", "doc-id": "RFC6860", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   To hide a transit-only network in [OSPFv3], the IPv6 address prefixes\r\n   are omitted from the router-LSA.  Consequently, when a Designated\r\n   Router builds an intra-area-prefix-LSA referencing a network-LSA,\r\n   these IPv6 address prefixes will be omitted.", "correct_text": "   To hide a transit-only network in [OSPFv3], the associated IPv6\r\n   address prefixes MUST be omitted from the link-LSA. Consequently,\r\n   when a Designated Router builds an intra-area-prefix-LSA referencing\r\n   a network-LSA, these IPv6 address prefixes will be omitted.\r\n", "notes": "The change essentially reverts the paragraph back to the formulation from http://tools.ietf.org/html/draft-ietf-ospf-prefix-hiding-05#section-3 . Most importantly, the term \"router-LSA\" is replaced with \"link-LSA\", as there are already no prefixes carried in OSFPv3 router-LSA whatsoever, and the removal of transit-network prefixes influences link-LSAs and intra-area-prefix-LSAs. Also, the change reintroduces the keyword \"MUST\" that underlines the behavior that is crucial to the proper implementation of the feature.", "submit_date": "2014-04-28", "submitter_name": "Peter Paluch", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3978", "doc-id": "RFC3516", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "If the domain of the decoded data is \"8bit\" and the data does\r\nnot contain the NUL octet, the server SHOULD return the data in\r\na <string> instead of a <literal8>; this allows the client to\r\ndetermine if the \"8bit\" data contains the NUL octet without\r\nhaving to explicitly scan the data stream for for NULs.", "correct_text": "If the domain of the decoded data is \"8bit\" and the data does\r\nnot contain the NUL octet, the server SHOULD return the data in\r\na <string> instead of a <literal8>; this allows the client to\r\ndetermine if the \"8bit\" data contains the NUL octet without\r\nhaving to explicitly scan the data stream for NULs.", "notes": "Typo: duplication of \"for\".", "submit_date": "2014-04-29", "submitter_name": "Michael Slusarz", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3979", "doc-id": "RFC5322", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6.7; 4.5.7", "orig_text": "received        =   \"Received:\" *received-token \";\" date-time CRLF\r\n\r\nobs-received    =   \"Received\" *WSP \":\" *received-token CRLF", "correct_text": "received        =   \"Received:\" [1*received-token / CFWS]\r\n                      \";\" date-time CRLF\r\n\r\nobs-received    =   \"Received\" *WSP \":\" [1*received-token / CFWS] CRLF", "notes": "\"The 'Received:' field contains a (possibly empty) list of tokens followed by a semicolon and a date-time specification.\" As it was originally written, though, whitespace and comments are disallowed right after the colon if the list of tokens is empty: for example, the header field \"Received: ; Wed, 30 Apr 2014 00:00:00 -0000\\r\\n\" (with a space after the first colon) would be invalid according to the current spec; only \"Received:; Wed, 30 Apr 2014 00:00:00 -0000\\r\\n\" (without a space) would be.\r\n\r\nVerifier note: The erratum is clearly correct. There are other possible ABNF solutions, but the one above is sufficient to fix the problem.", "submit_date": "2014-04-30", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3984", "doc-id": "RFC7159", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "unescaped = %x20-21 / %x23-5B / %x5D-10FFFF", "correct_text": "unescaped = %x20-21 / %x23-5B / %x5D-D7FF / %xE000-10FFFF", "notes": "Section 1 says:\r\n[START QUOTE]\r\nA string is a sequence of zero or more Unicode characters [UNICODE]. Note that this citation references the latest version of Unicode rather than a specific release.\r\n[END QUOTE]\r\n\r\nSection 8.2 emphasizes on the characters not allowed by the Unicode norm:\r\n[START QUOTE]\r\nHowever, the ABNF in this specification allows member names and string values to contain bit sequences that cannot encode Unicode characters; for example, \"\\uDEAD\" (a single unpaired UTF-16 surrogate).\r\n[END QUOTE]\r\n\r\nThe ABNF cannot at the same time allow non conformant Unicode codepoints (section 7) and states conformance to Unicode (section 1).\r\n\r\nTherefore, there is an incoherence that must be fixed between section 1 (and 8.2 that emphasizes it) and section 7. Hence the proposition of modification in section 7.\r\n\r\nThe other less preferable solution to this fix incoherence in RFC7159 would have been to NOT require Unicode conformance.\n --VERIFIER NOTES-- \nThe WG's consensus was to leave the full range present in the ABNF and add the interoperability guidance about values outside the Unicode accepted range.\r\n", "submit_date": "2014-05-09", "submitter_name": "Alain BENEDETTI", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3980", "doc-id": "RFC6241", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Sections 6.2.5 and 6.3", "orig_text": "In section 6.3:\r\n\r\nOLD:\r\n   The\r\n   algorithm continues until all sibling sets in all subtrees specified\r\n   in the filter have been processed.\r\n\r\nIn section 6.2.5\r\n\r\nOLD:\r\n  o  If any sibling nodes of the selection node are instance identifier\r\n      components for a conceptual data structure (e.g., list key leaf),\r\n      then they MAY also be included in the filter output.\r\n", "correct_text": "In section 6.3:\r\n\r\nNEW:\r\n\r\n   The \r\n   algorithm continues until all sibling sets in all subtrees specified\r\n   in the filter have been processed. If any sibling nodes of a node\r\n   are instance identifier components for a conceptual data structure\r\n   (e.g., list key leaf), then they MAY also be included in the filter \r\n   output.\r\n\r\nIn section 6.2.5\r\n\r\nNEW:\r\n", "notes": "The intent is to allow the server to always include the key node values and the wording accidentally does not cover this case.\r\n\r\nHere is the OLD/NEW in a more intuitive way:\r\nIn section 6.3:\r\n\r\nOLD:\r\n\r\n  The algorithm continues until all sibling sets in all subtrees specified\r\n   in the filter have been processed.\r\nNEW:\r\n\r\n   The algorithm continues until all sibling sets in all subtrees specified\r\n   in the filter have been processed. If any sibling nodes of a node\r\n   are instance identifier components for a conceptual data structure\r\n   (e.g., list key leaf), then they MAY also be included in the filter output.\r\n\r\nImplicitly in section 6.2.5 to delete the moved text:\r\n\r\nOLD:\r\n\r\n   If any sibling nodes of the selection node are instance identifier\r\n   components for a conceptual data structure (e.g., list key leaf),\r\n   then they MAY also be included in the filter output.\r\n\r\nNEW:\r\n   <void>\r\n\r\n", "submit_date": "2014-05-05", "submitter_name": "Klement Sekera", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3981", "doc-id": "RFC6901", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "See Notes", "correct_text": "The following two examples from section 5 are different:\r\n\r\nOriginal: \"/a~1b\"\r\nProposed: \"/a//b\"\r\n\r\nOriginal: \"/m~0n\"\r\nProposed: \"/m~n\"\r\n\r\nThe other examples are the same.", "notes": "The escape syntax seems weird and confusing. Rather than ~0 and ~1, why not use a repeated (double) slash to escape a slash? This is similar to how SQL escapes single quotes in string literals by using the single quote twice.\r\n\r\nWe have JSON functions in Presto (prestodb.io) that could benefit from an improved syntax (they currently use JSONPath), but I can't see understanding ~0 and ~1.\n --VERIFIER NOTES-- \nThis is a change request, not an errata report.  The suggested change isn't directly acceptable, but could well be useful input into a new version of the specification.  In any case, it's not addressing an error, but a feature change.", "submit_date": "2014-05-06", "submitter_name": "David Phillips", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3982", "doc-id": "RFC2152", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Definitions", "orig_text": "               Character   ASCII & Unicode Value (decimal)\r\n\r\n                 [...]       [...]\r\n\r\n                  '           96", "correct_text": "               Character   ASCII & Unicode Value (decimal)\r\n\r\n                 [...]       [...]\r\n\r\n                  `           96", "notes": "The wrong character is used in the left column: code point 96 corresponds to \"Grave Accent\", not \"Apostrophe\".", "submit_date": "2014-05-08", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3983", "doc-id": "RFC7159", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.", "orig_text": "JSON-text = ws value ws", "correct_text": "JSON-text = [BOM] ws value ws\r\n\r\nBOM = %xFEFF", "notes": "Section 8.1 states:\r\n[START QUOTE]\r\n(...) implementations that parse JSON texts *MAY* ignore the presence of a byte order mark rather than treating it as an error.\r\n[END QUOTE]\r\n\r\nIndeed that means that a BOM *CAN* occur, and *MAY* be accepted instead of returning an error. So, if the BOM can be accepted, the grammar is incomplete as it does not show it.\r\n\r\nFurthermore, about BOMs, see my other comments.\n --VERIFIER NOTES-- \nThe WG was clear that syntactically, the BOM is not part of a valid JSON-text, but implementation advice included that if one appears, it MAY be ignored. The document is correct as-is.", "submit_date": "2014-05-09", "submitter_name": "Alain BENEDETTI", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3991", "doc-id": "RFC5198", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2, pg.3", "orig_text": "   3.  The control characters in the ASCII range (U+0000 to U+001F and\r\n|      U+007F to U+009F) SHOULD generally be avoided.  Space (SP,\r\n|      U+0020), CR, LF, and Form Feed (FF, U+000C) are exceptions to\r\n|      this principle, but use of all but the first requires care as\r\n       discussed elsewhere in this document.  The so-called \"C1\r\n       Controls\" (U+0080 through U+009F), which did not appear in ASCII,\r\n       MUST NOT appear.", "correct_text": "   3.  The control characters in the ASCII range (U+0000 to U+001F and\r\n|      U+007F to U+009F) SHOULD generally be avoided. CR, LF, and\r\n|      Form Feed (FF, U+000C) are exceptions to\r\n|      this principle, but use of these requires care as\r\n|      discussed elsewhere in this document.\r\n|      Space (SP, U+0020) is often treated as a control character and\r\n|      described that way in many documents.  It SHOULD NOT appear in\r\n|      identifiers.  When used in more general strings, it should be\r\n|      used with caution because Unicode supports a number of other\r\n|      spacing characters (see, e.g., NO-BREAK SPACE (U+00A0) and the\r\n|      collection of characters in the range 2000..200B that may or may\r\n|      not be considered equivalent depending on the normalization and\r\n|      other rules used.  The so-called \"C1 Controls\" (U+0080 through\r\n|       U+009F), which did not appear in ASCII, MUST NOT appear.", "notes": "Logical inconsistency:\r\nSPACE is not contained in the enumeration in the first sentence;\r\nthus, it is no *exception* to that rule, and the published text\r\ndoes not make proper sense.\n --VERIFIER NOTES-- \nThe part of this erratum which says:\r\n\r\n\tIt SHOULD NOT appear in identifiers.  When used in more\r\n\tgeneral strings, it should be used with caution because\r\n\tUnicode supports a number of other spacing characters\r\n\t(see, e.g., NO-BREAK SPACE (U+00A0) and the collection\r\n\tof characters in the range 2000..200B that may or may\r\n\tnot be considered equivalent depending on the\r\n\tnormalization and other rules used.\r\n\r\nwhile possibly true, is not appropriate for an erratum. It is a substantive change.", "submit_date": "2008-03-31", "submitter_name": "Alfred Hoenes", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4057", "doc-id": "RFC2209", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   This memo assumes the generic interface calls defined in [RFC 2005]\r\n   and the following data structures.  An actual implementation may use\r\n   additional or different data structures and interfaces.  The data\r\n   structure fields that are shown are required unless they are\r\n   explicitly labelled as optional.", "correct_text": "   This memo assumes the generic interface calls defined in [RFC 2205]\r\n   and the following data structures.  An actual implementation may use\r\n   additional or different data structures and interfaces.  The data\r\n   structure fields that are shown are required unless they are\r\n   explicitly labelled as optional.", "notes": "Replace \"RFC 2005\" with \"RFC 2205\".\r\n\r\nThe generic interface calls are defined in RFC 2205 and not in RFC 2005.", "submit_date": "2014-07-21", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4058", "doc-id": "RFC7241", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "(three IEEE 802 plenaries plus three\r\nIETF 802 interim meetings each year,\r\ncompared to three IETF plenaries per year)", "correct_text": "(three IEEE 802 plenaries plus three\r\nIEEE 802 interim meetings each year,\r\ncompared to three IETF plenaries per year)", "notes": "\"IETF 802 interim\" should read \"IEEE 802 interim\"", "submit_date": "2014-07-21", "submitter_name": "James Lepp", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3985", "doc-id": "RFC4890", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "if [ \"$STATE_ENABLED\" -eq \"1\" ]\r\nthen\r\n  # Allow incoming time exceeded code 0 messages\r\n  # only for existing sessions\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n         -d $inner_prefix \\\r\n         --state ESTABLISHED,RELATED --icmpv6-type packet-too-big \\\r\n         -j ACCEPT\r\n  done\r\nelse\r\n  # Allow incoming time exceeded code 0 messages\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type ttl-zero-during-transit -j ACCEPT\r\n  done\r\nfi", "correct_text": "if [ \"$STATE_ENABLED\" -eq \"1\" ]\r\nthen\r\n  # Allow incoming time exceeded code 0 messages\r\n  # only for existing sessions\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n     -d $inner_prefix \\\r\n     --state ESTABLISHED,RELATED --icmpv6-type ttl-zero-during-transit \\\r\n     -j ACCEPT\r\n  done\r\nelse\r\n  # Allow incoming time exceeded code 0 messages\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type ttl-zero-during-transit -j ACCEPT\r\n  done\r\nfi", "notes": "RFC 4890 Errata ID 2706 states that icmpv6-type packet-too-big should\r\nstate icmpv6-type ttl-zero-during-transmit. This should read\r\nttl-zero-during-transit.", "submit_date": "2014-05-13", "submitter_name": "James Robertson", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3986", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.1.3", "orig_text": "4.1.1.3.  signatureValue\r\n\r\n   The signatureValue field contains a digital signature computed upon\r\n   the ASN.1 DER encoded tbsCertificate.  The ASN.1 DER encoded\r\n   tbsCertificate is used as the input to the signature function.  This\r\n   signature value is encoded as a BIT STRING and included in the\r\n   signature field.  The details of this process are specified for each\r\n   of the algorithms listed in [RFC3279], [RFC4055], and [RFC4491].", "correct_text": "4.1.1.3.  signatureValue\r\n\r\n   The signatureValue field contains a digital signature computed upon\r\n   the ASN.1 DER encoded tbsCertificate.  The ASN.1 DER encoded\r\n   tbsCertificate is used as the input to the signature function. The \r\n   output of the signature function is encoded as a BIT STRING and \r\n   included in the signatureValue field.  The details of this process \r\n   are specified for each of the algorithms listed in [RFC3279], \r\n   [RFC4055], and [RFC4491].", "notes": "The \"included in the signature field\" should have been \"included in the signatureValue field\".  A field called \"signature\" does exist in the 5280 structure, but it is not intended to hold the value of the result of the signature function.  The sentence was reworded for word flow (and to avoid using \"signature value\" and \"signatureValue\" in the same sentence).\r\n\r\nVerifier note:  Hold for document update to prevent potential ASN.1 breaks", "submit_date": "2014-05-13", "submitter_name": "Sandra Murphy", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-29 15:14:39"}, {"errata_id": "3987", "doc-id": "RFC6655", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4", "orig_text": "             CipherSuite TLS_PSK_DHE_WITH_AES_128_CCM_8 = {0xC0,0xAA}\r\n             CipherSuite TLS_PSK_DHE_WITH_AES_256_CCM_8 = {0xC0,0xAB}", "correct_text": "             CipherSuite TLS_DHE_PSK_WITH_AES_128_CCM_8 = {0xC0,0xAA}\r\n             CipherSuite TLS_DHE_PSK_WITH_AES_256_CCM_8 = {0xC0,0xAB}", "notes": "Since these suites use the DHE_PSK key exchange, their name should start with TLS_DHE_PSK, not TLS_PSK_DHE, which is inconsistent with the general naming scheme of ciphersuites, and with the names of their CCM (as opposed to CCM_8) counterparts.", "submit_date": "2014-05-14", "submitter_name": "Manuel P\u00e9gouri\u00e9-Gonnard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3988", "doc-id": "RFC6946", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "...MUST NOT be discarded upon receipt of... ", "correct_text": "...MUST be discarded upon receipt of... ", "notes": "\n --VERIFIER NOTES-- \nThe text in the RFC is correct.  Atomic fragments should not affect the re-assembly of legitimate fragments present in the re-assembly buffer.   ", "submit_date": "2014-05-15", "submitter_name": "Panos Kampanakis", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3989", "doc-id": "RFC5589", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3", "orig_text": "Target-Dialog: 592435881734450904;local-tag=9m2n3wq\r\n ;remote-tag=763231", "correct_text": "Target-Dialog: 090459243588173445;local-tag=7553452\r\n ;remote-tag=31431", "notes": "The ladder diagram states that F5 (REFER) should have Target-Dialog referencing dialog 1 and the embedded Replaces header should reference dialog 2.  The complete F5 message references dialog 2 in both places, which is incorrect.", "submit_date": "2014-05-15", "submitter_name": "Michael Procter", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-09 09:09:01"}, {"errata_id": "3990", "doc-id": "RFC6655", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "   ... The input and output lengths are as for\r\n   AEAD_AES_128_CCM.  An AEAD_AES_128_CCM_8 ciphertext is exactly 8\r\n   octets longer than its corresponding plaintext.", "correct_text": "   ... The input and output lengths are as for\r\n   AEAD_AES_128_CCM.  An AEAD_AES_256_CCM_8 ciphertext is exactly 8\r\n   octets longer than its corresponding plaintext.", "notes": "This section is about AEAD_AES_256_CCM_8, so it should describe the length of a cihpertext with this cipher, not with An AEAD_AES_128_CCM_8 (which was the object of the prevous section).", "submit_date": "2014-05-16", "submitter_name": "Manuel P\u00e9gouri\u00e9-Gonnard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4573", "doc-id": "RFC6325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.9.1", "orig_text": "   o  End-station service disable (trunk port) bit.  When this bit is\r\n      set, all native frames received on the port and all native frames\r\n      that would have been sent on the port are discarded.  (See\r\n      Appendix B.)  (Note that, for this document, \"native frames\" does\r\n      not include Layer 2 control frames.)  By default, ports are not\r\n      restricted to being trunk ports.\r\n\r\n      If a port with end-station service disabled reports, in a TRILL-\r\n      Hello frame it sends out that port, which VLANs it provides end-\r\n      station support for, it reports that there are none.\r\n\r\n   o  TRILL traffic disable (access port) bit.  If this bit is set, the\r\n      goal is to avoid sending any TRILL frames, except TRILL-Hello\r\n      frames, on the port since it is intended only for native end-\r\n      station traffic.  By default, ports are not restricted to being\r\n      access ports.  This bit is reported in TRILL-Hello frames.  If RB1\r\n      is the DRB and has this bit set in its TRILL-Hello, the DRB still\r\n      appoints VLAN forwarders.  However, usually no pseudonode is\r\n      reported, and none of the inter-RBridge links associated with that\r\n      link are reported in LSPs.\r\n\r\n      If the DRB RB1 does not have this bit set, but neighbor RB2 on the\r\n      link does have the bit set, then RB1 does not appoint RB2 as\r\n      appointed forwarder for any VLAN, and none of the RBridges\r\n      (including the pseudonode) report RB2 as a neighbor in LSPs.\r\n\r\n", "correct_text": "   o  End-station service disable (trunk port) bit.  When this bit is\r\n      set, all native frames received on the port and all native frames\r\n      that would have been sent on the port are discarded.  (See\r\n      Appendix B.)  (Note that, for this document, \"native frames\" does\r\n      not include Layer 2 control frames.)  By default, ports are not\r\n      restricted to being trunk ports.\r\n\r\n      If the DRB RB1 does not have this bit set, but neighbor RB2 on the\r\n      link does have the bit set, then RB1 does not appoint RB2 as\r\n      appointed forwarder for any VLAN, and none of the RBridges\r\n      (including the pseudonode) report RB2 as a neighbor in LSPs.\r\n\r\n      If a port with end-station service disabled reports, in a TRILL-\r\n      Hello frame it sends out that port, which VLANs it provides end-\r\n      station support for, it reports that there are none.\r\n\r\n   o  TRILL traffic disable (access port) bit.  If this bit is set, the\r\n      goal is to avoid sending any TRILL frames, except TRILL-Hello\r\n      frames, on the port since it is intended only for native end-\r\n      station traffic.  By default, ports are not restricted to being\r\n      access ports.  This bit is reported in TRILL-Hello frames.  If RB1\r\n      is the DRB and has this bit set in its TRILL-Hello, the DRB still\r\n      appoints VLAN forwarders.  However, usually no pseudonode is\r\n      reported, and none of the inter-RBridge links associated with that\r\n      link are reported in LSPs.\r\n", "notes": "There is a paragraph in the wrong place so that it appears to apply to the wrong bit.\r\n\r\nThe second paragraph of bullet item 3 in Section 4.9.1 (the second bullet item at the top of page 72) is in the wrong place and appears to apply to the TRILL traffic disable (access port) bit. This text should instead be part of the previous bullet item and, in fact, applies to the end-station service disable (trunk port) bit.", "submit_date": "2015-12-30", "submitter_name": "Donald Eastlake, 3rd", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4062", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "Value:  Is the <character-string> encoding of the value field as\r\nspecified in [RFC1035], Section 5.1.", "correct_text": "Value:  The value field, expressed as a contiguous set of characters\r\nwithout interior spaces, or as a quoted string.  See the the\r\n<character-string> format specified in [RFC1035], Section 5.1,\r\nbut note that the value field contains no length byte and is not\r\nlimited to 255 characters.", "notes": "<character-string> is defined in RFC 1035 as being limited to 255 characters\r\npreceded by a length byte. Saying the field is encoded as a <character-string>\r\ncreates ambiguity as to whether the value field is intended to be size-limited.\r\n\r\nRFC author agreed that it was okay to make this more explicit with the proposed text.", "submit_date": "2014-07-24", "submitter_name": "Evan Hunt", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3994", "doc-id": "RFC5302", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "L2->L1 inter-area external routes with external metric:  These are\r\n      advertised in L1 LSPs, in TLV 130.  The up/down bit is set to one,\r\n      metric-type is external metric.  These IP prefixes are learned via\r\n      L2 routing, and were derived during the L1 SPF computation from\r\n      prefixes advertised in L2 LSPs in TLV 130 with external metrics.\r\n", "correct_text": "L2->L1 inter-area external routes with external metric:  These are\r\n      advertised in L1 LSPs, in TLV 130.  The up/down bit is set to one,\r\n      metric-type is external metric.  These IP prefixes are learned via\r\n      L2 routing, and were derived during the L2 SPF computation from\r\n      prefixes advertised in L2 LSPs in TLV 130 with external metrics.\r\n", "notes": "The following part has been corrected:\r\n\r\n\"These IP prefixes are learned via\r\n      L2 routing, and were derived during the L1 (should be L2) SPF computation from\r\n      prefixes advertised in L2 LSPs in TLV 130 with external metrics.\"\r\n\r\nThe IP prefixes which are learned via L2 routing were derived during L2 SPF computation instead of L1 SPF computation from prefixes advertised in L2 LSPs. As these prefixes were originally advertised in L2 area hence the SPF for these prefixes should  run on the L2 LSPs and eventually the prefixes derived through L2 LSP should be leaked into L1 area.", "submit_date": "2014-05-20", "submitter_name": "Amit Kalita", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3995", "doc-id": "RFC6409", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.7", "orig_text": "   NOTE: SMTP [SMTP-MTA] prohibits the use of domain name aliases in\r\n   addresses and the session-opening announcement.  As with other SMTP\r\n   requirements, RFC 5321 effectively prohibits an MSA from forwarding\r\n   such messages into the public Internet.  Nonetheless, unconditionally\r\n   resolving aliases could be harmful.  For example, if www.example.net\r\n   and ftp.example.net are both aliases for mail.example.net, rewriting\r\n   them could lose useful information.\r\n", "correct_text": "   NOTE: RFC 821 and RFC 1123 prohibited the use of domain name\r\n   aliases in addresses and the session-opening announcement.\r\n   Because of this it is still common for MTAs to canonicalize\r\n   domains in email addresses.  However this requirement was dropped\r\n   during the development of RFC 2821.  The current rules about \r\n   domain name aliases are set out in RFC 5321 section 2.3.5.", "notes": "This errata report is correct, but the above wording is not quite correct and needs to be examined carefully before a revised version goes into a revised document.", "submit_date": "2014-05-22", "submitter_name": "Tony Finch", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3996", "doc-id": "RFC2453", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4.2", "orig_text": "   Unfortunately, the question of how long convergence will take is not\r\n   amenable to quite so simple an answer.  Before going any further, it\r\n   will be useful to look at an example (taken from [2]).", "correct_text": "   Unfortunately, the question of how long convergence will take is not\r\n   amenable to quite so simple an answer.  Before going any further, it\r\n   will be useful to look at an example (taken from [5]).", "notes": "Correct the reference.", "submit_date": "2014-05-22", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4063", "doc-id": "RFC7320", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1 and 5.2", "orig_text": "Section 2.1 says \"MUST do so by modifying [BCP115]\".\r\n\r\nSection 5.2 says\r\n\r\n   [BCP115]   Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n              Registration Procedures for New URI Schemes\", RFC 4395,\r\n              BCP 115, February 2006.\r\n", "correct_text": "Section 2.1 should say \"MUST do so by modifying [BCP35]\".\r\n\r\nSection 5.2 should say\r\n\r\n   [BCP35]    Hansen, T., Hardie, T., and L. Masinter, \"Guidelines and\r\n              Registration Procedures for New URI Schemes\", RFC 4395,\r\n              BCP 35, February 2006.\r\n", "notes": "RFC 4395 is BCP 35, not BCP 115.  See the entry in bcp-index.txt:\r\n\r\n0115 [BCP number 115 is retired. It was mistakenly assigned to RFC\r\n     4395. RFC 4395 is BCP 35.]", "submit_date": "2014-07-25", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4064", "doc-id": "RFC2141", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "Functional equivalence is determined by practice within a given\r\nnamespace and managed by resolvers for that namespeace.", "correct_text": "Functional equivalence is determined by practice within a given\r\nnamespace and managed by resolvers for that namespace.", "notes": "Namespace is misspelled", "submit_date": "2014-07-25", "submitter_name": "Dave Thaler", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4090", "doc-id": "RFC6145", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "   1.  In the IPv4-to-IPv6 direction: if the MTU value of ICMPv4 Packet\r\n       Too Big (PTB) messages is less than 1280, change it to 1280.\r\n       This is intended to cause the IPv6 host and IPv6 firewall to\r\n       process the ICMP PTB message and generate subsequent packets to\r\n       this destination with an IPv6 Fragment Header.", "correct_text": "   1.  In the IPv4-to-IPv6 direction: if the MTU value of ICMPv4 Packet\r\n       Too Big (PTB) messages is less than 1280, change it to 1280.\r\n       This is intended to cause the IPv6 host and IPv6 firewall to\r\n       process the ICMP PTB message.", "notes": "An ICMPv6 PTB message reporting an MTU equal to 1280 does not trigger IPv6 atomic fragments. Only ICMPv6 PTB < 1280 do.\r\n\r\nAD Comment (Magnus Westerlund): As RFC 6145 has been superseeded by  RFC 7915. In that document the above text is gone. So I consider this issue handled and not necessary to determine if it is verified or not. ", "submit_date": "2014-08-20", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-06-02 14:18:47"}, {"errata_id": "4091", "doc-id": "RFC1459", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "The presence of a prefix is indicated with a single leading ASCII\r\n   colon character (':', 0x3b), which must be the first character of the\r\n   message itself.", "correct_text": "The presence of a prefix is indicated with a single leading ASCII\r\n   colon character (':', 0x3a), which must be the first character of the\r\n   message itself.", "notes": "The ASCII colon character is represented by 0x3A, not 0x3B (which is the semicolon).", "submit_date": "2014-08-23", "submitter_name": "Peter Kovacs", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4092", "doc-id": "RFC5255", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "    lang-range-quoted = astring\r\n        ; Once any literal wrapper or quoting is removed, this\r\n        ; follows the language-range rule in [RFC4647]\r\n", "correct_text": "    lang-range-quoted = astring\r\n        ; Once any literal wrapper or quoting is removed, this\r\n        ; follows the language-range rule in [RFC4647],\r\n        ; or is the 7-character string \"default\"", "notes": "This change makes the ABNF comment match the prose and example in section 3.2.", "submit_date": "2014-08-26", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3997", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Section 2.1.\r\n\r\n   The base Diameter protocol is run on port 3868 for both TCP [RFC0793]\r\n   and SCTP [RFC4960].  For TLS [RFC5246] and Datagram Transport Layer\r\n   Security (DTLS) [RFC6347], a Diameter node that initiates a\r\n   connection prior to any message exchanges MUST run on port 5658.  It\r\n   is assumed that TLS is run on top of TCP when it is used, and DTLS is\r\n   run on top of SCTP when it is used.\r\n\r\n   If the Diameter peer does not support receiving TLS/TCP and DTLS/SCTP\r\n   connections on port 5658 (i.e., the peer complies only with RFC\r\n   3588), then the initiator MAY revert to using TCP or SCTP on port\r\n   3868.  Note that this scheme is kept only for the purpose of backward\r\n   compatibility and that there are inherent security vulnerabilities\r\n   when the initial CER/CEA messages are sent unprotected (see\r\n   Section 5.6).\r\n\r\n   Diameter clients MUST support either TCP or SCTP; agents and servers\r\n   SHOULD support both.\r\n\r\n   A Diameter node MAY initiate connections from a source port other\r\n   than the one that it declares it accepts incoming connections on, and\r\n   it MUST always be prepared to receive connections on port 3868 for\r\n   TCP or SCTP and port 5658 for TLS/TCP and DTLS/SCTP connections.\r\n   When DNS-based peer discovery (Section 5.2) is used, the port numbers\r\n   received from SRV records take precedence over the default ports\r\n   (3868 and 5658).\r\n\r\nSection 4.3.1.\r\n\r\n      port               = \":\" 1*DIGIT\r\n\r\n                      ; One of the ports used to listen for\r\n                      ; incoming connections.\r\n                      ; If absent, the default Diameter port\r\n                      ; (3868) is assumed if no transport\r\n                      ; security is used and port 5658 when\r\n                      ; transport security (TLS/TCP and DTLS/SCTP)\r\n                      ; is used.", "correct_text": "Section 2.1.\r\n\r\n   The base Diameter protocol is run on port 3868 for both TCP [RFC0793]\r\n   and SCTP [RFC4960].  For TLS [RFC5246] and Datagram Transport Layer\r\n   Security (DTLS) [RFC6347], a Diameter node that initiates a\r\n   connection prior to any message exchanges MUST run on port 5868.  It\r\n   is assumed that TLS is run on top of TCP when it is used, and DTLS is\r\n   run on top of SCTP when it is used.\r\n\r\n   If the Diameter peer does not support receiving TLS/TCP and DTLS/SCTP\r\n   connections on port 5868 (i.e., the peer complies only with RFC\r\n   3588), then the initiator MAY revert to using TCP or SCTP on port\r\n   3868.  Note that this scheme is kept only for the purpose of backward\r\n   compatibility and that there are inherent security vulnerabilities\r\n   when the initial CER/CEA messages are sent unprotected (see\r\n   Section 5.6).\r\n\r\n   Diameter clients MUST support either TCP or SCTP; agents and servers\r\n   SHOULD support both.\r\n\r\n   A Diameter node MAY initiate connections from a source port other\r\n   than the one that it declares it accepts incoming connections on, and\r\n   it MUST always be prepared to receive connections on port 3868 for\r\n   TCP or SCTP and port 5868 for TLS/TCP and DTLS/SCTP connections.\r\n   When DNS-based peer discovery (Section 5.2) is used, the port numbers\r\n   received from SRV records take precedence over the default ports\r\n   (3868 and 5868).\r\n\r\nSection 4.3.1.\r\n\r\n      port               = \":\" 1*DIGIT\r\n\r\n                      ; One of the ports used to listen for\r\n                      ; incoming connections.\r\n                      ; If absent, the default Diameter port\r\n                      ; (3868) is assumed if no transport\r\n                      ; security is used and port 5868 when\r\n                      ; transport security (TLS/TCP and DTLS/SCTP)\r\n                      ; is used.", "notes": "RFC 6733 defined the Diameter port number for secure transport in IANA considerations Section 11.4. to be 5868. This is also in IANA port numbers registry \"Service Name and Transport Protocol Port Number Registry\". However, the RFC 6733 body text uses different port number in Sections 2.1. and 4.3.1. for secure transports. Since the IANA registry already contains the port number 5868 instead of the body text used value 5658, the values in Sections 2.1. and 4.3.1. should be 5868 instead of 5658.", "submit_date": "2014-05-24", "submitter_name": "Jouni Korhonen", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4005", "doc-id": "RFC6365", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "US-ASCII", "correct_text": "ASCII", "notes": "The term \"US-ASCII\" is an IETF artifact, left over from some misunderstandings about what \"ASCII\" referred to (and the complete absence of CSCII or CASCII, MSCII or MXSCII, BRSCII, ARSCII, and other \"American\" coded character sets).  It is a source of confusion for people who come to IETF specifications with a background in coded character sets and terminology from other areas or standards bodies and has been warned against multiple times.  It should not have appeared in this document except possibly with a warning against its use (and the use of other bogus terms like \"ASCII7\").  The second author, who is normally sensitive to the issue, has no idea how this got past him, even in text picked up from other documents, but supposes this is what errata are for.\r\n\r\nIn any event, there is no such thing as \"US-ASCII\": the term is an erroneous and misleading synonym/ substitute for \"ASCII\".  The reference for the latter is correct, but the citation anchor should probably be corrected as well.\n --VERIFIER NOTES-- \n(1) It's clear that this is NOT errata: the use of \"US-ASCII\" in the document was quite intentional at the time.\r\n\r\n(2) If (and it's not clear that there's consensus on this) we think that \"US-ASCII\" is not the right term, the right answer is to revise the document.  Should that be done, we'd open up quite a debate about what terminology is right, and why.  Simply replacing all occurrences of \"US-ASCII\" with \"ASCII\" is unlikely to be the answer.  Whatever should happen would be more complicated than that.", "submit_date": "2014-06-04", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4006", "doc-id": "RFC6935", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "Middleboxes supporting IPv6 MUST follow requirements 9, 10, and 11\r\nof the usage requirements specified in Section 5 of \"Applicability\r\nStatement for the Use of IPv6 UDP Datagrams with Zero Checksums\"\r\n[RFC6936].", "correct_text": "Middleboxes supporting IPv6 MUST follow requirements 8, 9, and 10\r\nof the usage requirements specified in Section 5 of \"Applicability\r\nStatement for the Use of IPv6 UDP Datagrams with Zero Checksums\"\r\n[RFC6936].", "notes": "", "submit_date": "2014-06-05", "submitter_name": "Andreas Cudok", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4007", "doc-id": "RFC5246", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.3.", "orig_text": "Note: To help avoid pipeline stalls, ChangeCipherSpec is an\r\n   independent TLS protocol content type, and is not actually a TLS\r\n   handshake message.\r\n", "correct_text": "Note: To avoid ChangeCipherSpec being transmitted in mix with\r\n   other handshake fragments in one record, ChangeCipherSpec is\r\n   an independent TLS protocol content type, and is not actually\r\n   a TLS handshake message.  To help avoid pipeline stalls, \r\n   ChangeCipherSpec is sent from both the server and the client.\r\n", "notes": "The original text can be read like we can handle ChangeCipherSpec asynchronously.\r\nThis is harmful and may  be a cause of CCS Injection vulnerability.", "submit_date": "2014-06-06", "submitter_name": "KIKUCHI Masashi", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "3999", "doc-id": "RFC2453", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "\"   4.ne The method so far only has a way to lower the metric, as the\r\n   existing metric is kept until a smaller one shows up.  It is possible\r\n   that the initial estimate might be too low.\"", "correct_text": "\"  The method so far only has a way to lower the metric, as the\r\n   existing metric is kept until a smaller one shows up.  It is possible\r\n   that the initial estimate might be too low.\"", "notes": "Spurious text \"4.ne\"", "submit_date": "2014-05-25", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4000", "doc-id": "RFC6374", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "Upon receipt of a query message including an unrecognized mandatory \r\nTLV object, the recipient MUST respond with an Unsupported Mandatory \r\nTLV Object error code.", "correct_text": "In this specification an object that is classed as mandatory is \r\none that the responder MUST either support or respond to indicating \r\nthat it does not support. Thus upon receipt of a query message \r\nincluding an unrecognized mandatory TLV object, the recipient \r\nMUST respond with an Unsupported Mandatory TLV Object error \r\ncode. Note that the term mandatory does not indicate mandatory \r\nto implement or mandatory to send.", "notes": "In discussion on the MPLS list there was concern about the meaning \r\nof the term \"mandatory\" in this RFC. The use of the term is \r\nsomewhat unusual in an IETF context, but the quoted original \r\ntext makes it clear that there is no requirement to implement \r\nmandatory objects, only to respond to the reception of one if \r\nit is not supported.", "submit_date": "2014-05-27", "submitter_name": "Stewart Bryant", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7067", "doc-id": "RFC8552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.2.", "orig_text": "          | URI        | _sctp                 | [RFC6118]     |", "correct_text": "          | URI        | _sctp                 | [RFC4340]     |", "notes": "Wrong reference. RFC6118 does not even mention \"sctp\". \r\n\r\nNote that this also has an impact to the IANA registry: https://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#underscored-globally-scoped-dns-node-names\r\n\r\n[ Warren Kumari (Ops AD): Please also see Errata 7066, and the thread https://mailarchive.ietf.org/arch/msg/dnsop/WFMXL5dY8sniHwVtkPfcqvWk3nI/\r\n\r\nThis was added as \"part of a list used to \"reserve\" the names of (transport) protocols, so that constructs like _25._quic.example.com could be constructed where the _name denotes the protocol and not the name of something.\" . I am requesting that the IANA update the reference to match. ] ", "submit_date": "2022-08-02", "submitter_name": "Bernie Hoeneisen", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-29 18:47:26"}, {"errata_id": "4003", "doc-id": "RFC5444", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "  o  <msg-hop-limit> field, if present, contains the number of hops on\r\n     which the packet is allowed to travel before being discarded by a\r\n     MANET router.  The <msg-hop-limit> is set by the message\r\n     originator and is used to prevent messages from endlessly\r\n     circulating in a MANET.  When forwarding a message, a MANET router\r\n     should decrease the <msg-hop-limit> by 1, and the message should\r\n     be discarded when <msg-hop-limit> reaches 0.\r\n\r\n  o  <msg-hop-count> field, if present, contains the number of hops on\r\n     which the packet has traveled across the MANET.  The <msg-hop-\r\n     count> is set to 0 by the message originator and is used to\r\n     prevent messages from endlessly circulating in a MANET.  When\r\n     forwarding a message, a MANET router should increase <msg-hop-\r\n     count> by 1 and should discard the message when <msg-hop-count>\r\n     reaches 255.\r\n", "correct_text": "  o  <msg-hop-limit> field, if present, contains the number of hops on\r\n     which the message is allowed to travel before being discarded by a\r\n     MANET router.  The <msg-hop-limit> is set by the message\r\n     originator and is used to prevent messages from endlessly\r\n     circulating in a MANET.  When forwarding a message, a MANET router\r\n     should decrease the <msg-hop-limit> by 1, and the message should\r\n     be discarded when <msg-hop-limit> reaches 0.\r\n\r\n  o  <msg-hop-count> field, if present, contains the number of hops on\r\n     which the message has traveled across the MANET.  The <msg-hop-\r\n     count> is set to 0 by the message originator and is used to\r\n     prevent messages from endlessly circulating in a MANET.  When\r\n     forwarding a message, a MANET router should increase <msg-hop-\r\n     count> by 1 and should discard the message when <msg-hop-count>\r\n     reaches 255.\r\n", "notes": "Two changes of \"packet\" to \"message\". Message is consistent with the normative Section 5.2 that defines these fields (which may appear in each message, so are not uniquely defined for a packet), the text introducing these bullet points, and the remainder of these paragraphs.\r\n\r\n(Note that the original and corrected text has had indentation reduced by one space.)", "submit_date": "2014-05-29", "submitter_name": "Christopher Dearlove", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4004", "doc-id": "RFC6931", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3.11", "orig_text": "2.3.11.  RSA-SHA224\r\n\r\nIdentifier:\r\n     http://www.w3.org/2007/05/xmldsig-more#rsa-sha224\r\n\r\n  This implies the PKCS#1 v1.5 padding algorithm [RFC3447] as described\r\n  in Section 2.3.1, but with the ASN.1 BER SHA-224 algorithm designator\r\n  prefix.  An example of use is\r\n\r\n  <SignatureMethod\r\n     Algorithm=\"http://www.w3.org/2007/05/xmldsig-more#rsa-sha224\" />\r\n\r\n  Because it takes about the same effort to calculate a SHA-224 message\r\n  digest as it does a SHA-256 message digest, it is suggested that\r\n  RSA-SHA256 be used in preference to RSA-SHA224 where possible.", "correct_text": "2.3.11.  RSA-SHA224\r\n\r\nIdentifier:\r\n     http://www.w3.org/2001/04/xmldsig-more#rsa-sha224\r\n\r\n  This implies the PKCS#1 v1.5 padding algorithm [RFC3447] as described\r\n  in Section 2.3.1, but with the ASN.1 BER SHA-224 algorithm designator\r\n  prefix.  An example of use is\r\n\r\n  <SignatureMethod\r\n     Algorithm=\"http://www.w3.org/2001/04/xmldsig-more#rsa-sha224\" />\r\n\r\n  Because it takes about the same effort to calculate a SHA-224 message\r\n  digest as it does a SHA-256 message digest, it is suggested that\r\n  RSA-SHA256 be used in preference to RSA-SHA224 where possible.", "notes": "RFC 6931 should be corrected to use the same identifier for RSA-SHA224 as is used in the W3C Recommendation \"XML Signature Syntax and Processing Version 1.1? normative section 6.4.2 ( http://www.w3.org/TR/2013/REC-xmldsig-core1-20130411/#sec-PKCS1 ). \r\n\r\nThis same identifier is also specified in the W3C Note \"XML Security Algorithm Cross-Reference? section 3.2 ( http://www.w3.org/TR/2013/NOTE-xmlsec-algorithms-20130411/#RSA )\r\n\r\nAt least two shipping code implementations use this value from the W3C Recommendation ; to enable interoperability, avoid confusion and be consistent with the published Recommendation RFC 6931 should be updated to be consistent.\r\n\r\nPlease note that the revision affects both the identifier URL and the Algorithm attribute value in the 2.3.11 section which is why the entire section is given in the Original and Corrected text above.", "submit_date": "2014-05-29", "submitter_name": "Frederick Hirsch", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-18 18:29:27"}, {"errata_id": "4008", "doc-id": "RFC5116", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   The\r\n   authenticated decrypt operation will, with high probability, return\r\n   FAIL whenever the inputs N, P, and A were crafted by a nonce-\r\n   respecting adversary that does not know the secret key (assuming that\r\n   the AEAD algorithm is secure).", "correct_text": "   The\r\n   authenticated decrypt operation will, with high probability, return\r\n   FAIL whenever the inputs N, C, and A were crafted by a nonce-\r\n   respecting adversary that does not know the secret key (assuming that\r\n   the AEAD algorithm is secure).", "notes": "Inputs to the authenticated decrypt operation do not include plaintext P, but instead includes ciphertext C.\r\n\r\nThanks for the correction, since this is descriptive text, it will be marked as editorial.", "submit_date": "2014-06-08", "submitter_name": "Tapio Sokura", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4016", "doc-id": "RFC7210", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "      SendLifetimeStart\r\n         The SendLifetimeStart field specifies the earliest date and\r\n         time in Coordinated Universal Time (UTC) at which this key\r\n         should be considered for use when sending traffic.  The format\r\n         is YYYYMMDDHHSSZ, where four digits specify the year, two\r\n         digits specify the month, two digits specify the day, two\r\n         digits specify the hour, two digits specify the minute, and two\r\n         digits specify the second.  The \"Z\" is included as a clear\r\n         indication that the time is in UTC.\r\n\r\n      SendLifeTimeEnd\r\n         The SendLifeTimeEnd field specifies the latest date and time at\r\n         which this key should be considered for use when sending\r\n         traffic.  The format is the same as the SendLifetimeStart\r\n         field.\r\n\r\n      AcceptLifeTimeStart\r\n         The AcceptLifeTimeStart field specifies the earliest date and\r\n         time in Coordinated Universal Time (UTC) at which this key\r\n         should be considered for use when processing received traffic.\r\n         The format is YYYYMMDDHHSSZ, where four digits specify the\r\n         year, two digits specify the month, two digits specify the day,\r\n         two digits specify the hour, two digits specify the minute, and\r\n         two digits specify the second.  The \"Z\" is included as a clear\r\n         indication that the time is in UTC.\r\n", "correct_text": "      SendLifetimeStart\r\n         The SendLifetimeStart field specifies the earliest date and\r\n         time in Coordinated Universal Time (UTC) at which this key\r\n         should be considered for use when sending traffic.  The format\r\n         is YYYYmmddHHMMSSZ, where four digits specify the year, two\r\n         digits specify the month, two digits specify the day, two\r\n         digits specify the hour, two digits specify the minute, and two\r\n         digits specify the second.  The \"Z\" is included as a clear\r\n         indication that the time is in UTC.\r\n\r\n      SendLifeTimeEnd\r\n         The SendLifeTimeEnd field specifies the latest date and time at\r\n         which this key should be considered for use when sending\r\n         traffic.  The format is the same as the SendLifetimeStart\r\n         field.\r\n\r\n      AcceptLifeTimeStart\r\n         The AcceptLifeTimeStart field specifies the earliest date and\r\n         time in Coordinated Universal Time (UTC) at which this key\r\n         should be considered for use when processing received traffic.\r\n         The format is YYYYmmddHHMMSSZ, where four digits specify the\r\n         year, two digits specify the month, two digits specify the day,\r\n         two digits specify the hour, two digits specify the minute, and\r\n         two digits specify the second.  The \"Z\" is included as a clear\r\n         indication that the time is in UTC.\r\n", "notes": "The date and time format in the original document omits minute even though the descriptive text indicates it should be included.", "submit_date": "2014-06-18", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4017", "doc-id": "RFC6435", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "Two useful Operations, Administration, and Maintenance (OAM)\r\nfunctions in a transport network are \"lock\" and \"loopback\".  This\r\ndocument discusses these functions in the context of MPLS networks.", "correct_text": "Two useful Operations, Administration, and Maintenance (OAM)\r\nfunctions in a transport network are \"lock\" and \"loopback\".  This\r\ndocument discusses these functions in the context of MPLS networks.\r\n\r\nFurther information about these abstract OAM functions in an MPLS\r\nTransport Profile context can be found in RFC 6371 [6] where the\r\nlock function is referred to as the \"Lock Instruct function (LKI)\"\r\nand the loopback function is called \"data-plane loopback.\"", "notes": "RFC6435 uses \"LI\" as acronym for \"Lock Instruct\" throughout the document.\r\nRFC6371 uses \"LKI\" for \"Lock Instruct\" in sections 7.1, 7.1.1 and 7.1.2.\r\nThis may confuse the reader of both documents.\r\nA similar confusion can occur for refering to the loopback function.", "submit_date": "2014-06-19", "submitter_name": "Huub van Helvoort", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4574", "doc-id": "RFC7541", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A.", "orig_text": "   Table 1 lists the predefined header fields that make up the static\r\n   table and gives the index of each entry.\r\n", "correct_text": "   Table 1 lists the predefined header fields that make up the static\r\n   table and gives the index of each entry.\r\n\r\n   This list of predefined header fields is NOT sorted.\r\n", "notes": "The list of header fields actually is sorted except for one field. The field with index 19 should be between the fields with index 14 and 15).\r\n\r\nThat is why it gives the false impression that an implementer may use binary search algorithm to look up for header fields (while encoding) in order to retrieve their index numbers.\r\n\r\nI highly encourage to at either move that field up or at least clarify that this list (even though it looks sorted), it is not.", "submit_date": "2015-12-31", "submitter_name": "Christian Parpart", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4009", "doc-id": "RFC2849", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "LDIF Syntax", "orig_text": "change-moddn             = (\"modrdn\" / \"moddn\") SEP\r\n                            \"newrdn:\" (    FILL rdn /\r\n                                       \":\" FILL base64-rdn) SEP\r\n                            \"deleteoldrdn:\" FILL (\"0\" / \"1\")  SEP\r\n                            0*1(\"newsuperior:\"\r\n                            (    FILL distinguishedName /\r\n                             \":\" FILL base64-distinguishedName) SEP)", "correct_text": "change-moddn             = (\"modrdn\" / \"moddn\") SEP\r\n                            \"newrdn:\" (    FILL rdn /\r\n                                       \":\" FILL base64-rdn) SEP\r\n                            \"deleteoldrdn:\" FILL (\"0\" / \"1\")  SEP [8]\r\n                            0*1(\"newsuperior:\"\r\n                            (    FILL distinguishedName /\r\n                             \":\" FILL base64-distinguishedName) SEP)\r\n\r\nNote 8: If deleteoldrdn is \"0\" the old rdn will be kept; if it is \"1\"\r\nthe old rdn will be deleted.", "notes": "There is no formal specification of the meaning of the \"deleteoldrdn\" value 0 or 1. 1 stands for deletion, 0 stands for keeping the old rdn. Add a note to explain the value meaning.\r\n\r\n-----\r\nVerifier note:\r\nIt is correct that the meaning of \"deleteoldrdn\" is never explained in the document.  The proposed resolution is a reasonable fix for that, and such an explanation is needed.", "submit_date": "2014-06-09", "submitter_name": "Giovanni Cannata", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4011", "doc-id": "RFC7196", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "Table 1: Default RFD Parameters of Juniper and Cisco", "correct_text": "Table 1: The default RFD parameters for Cisco and Juniper \r\n         provided for the information of the reader.", "notes": "The RFC Editor Note (resulting from Barry and Benoit's DISCUSS) documented at https://datatracker.ietf.org/doc/draft-ietf-idr-rfd-usable/writeup/ has been forgotten.", "submit_date": "2014-06-10", "submitter_name": "Benoit Claise", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4012", "doc-id": "RFC6426", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.6", "orig_text": "Missing section", "correct_text": "7.6 New Global Flags Bit\r\n\r\nRFC 6425 defines a registry for \"Global Flags\" under the\r\n\"Multi-Protocol Label Switching (MPLS) Label Switched Path\r\n(LSP) Ping Parameters\" registry.\r\n\r\nThis document defines a new Global Flag, \"Validate Reverse\r\nPath (R)\". IANA has added this flag to the registry as\r\nfollows:\r\n\r\n   Bit number  |  Name                      | Reference\r\n   ------------+----------------------------+--------------\r\n      13       |  Validate Reverse Path     | [RFC 6426]\r\n\r\n", "notes": "\"Global Flags\" registry was created per request of RFC 6425 and did not yet existed when RFC 6426 was published leading to the fumbling of this allocation. This \"race condition\" has to be fixed to avoid possible name-space collision between RFC 6426 and new extensions to LSP ping.", "submit_date": "2014-06-10", "submitter_name": "Gregory Mirsky", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4013", "doc-id": "RFC3618", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12.2", "orig_text": "12.2. Defined TLVs\r\n\r\n\r\n   The following TLV Types are defined:\r\n\r\n   Code                        Type\r\n   ===================================================\r\n     1                  IPv4 Source-Active\r\n     2                  IPv4 Source-Active Request\r\n     3                  IPv4 Source-Active Response\r\n     4                  KeepAlive\r\n     5                  Reserved (Previously: Notification)\r\n\r\n\r\n", "correct_text": "12.2. Defined TLVs\r\n\r\n\r\n   The following TLV Types are defined:\r\n\r\n   Code                        Type\r\n   ===================================================\r\n     1                  IPv4 Source-Active\r\n     2                  (Previously IPv4 Source-Active Request)\r\n     3                  (Previously IPv4 Source-Active Response)\r\n     4                  KeepAlive\r\n     5                  Reserved (Previously: Notification)", "notes": "Since SA caching is mandatory for all MSDP speakers, the Source-Active request and response messages are no longer necessary. They should be removed from the text to avoid confusion or include a reason as to why they are included and a description of their purpose.\n --VERIFIER NOTES-- \nThis needs to go through the standards process.  Deprecating messages in the protocol is not an errata item.", "submit_date": "2014-06-12", "submitter_name": "Ramiro Garza Rios", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4015", "doc-id": "RFC4954", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "See also Section 15 for additional requirements on\r\nimplementations of [PLAIN] over [TLS].", "correct_text": "See also Section 14 for additional requirements on\r\nimplementations of [PLAIN] over [TLS].", "notes": "----- Verifier Notes -----\r\nThis happened when the RFC Editor moved the authors' addresses out of numbered section 13, and caused the subsequent sections to be renumbered.  We missed the internal reference.", "submit_date": "2014-06-15", "submitter_name": "Jeffrey 'jf' Lim", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4018", "doc-id": "RFC3757", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "A SEP key either used to generate a\r\n   DS RR or is distributed to resolvers that use the key as the root of\r\n   a trusted subtree", "correct_text": "A SEP key _is_ either used to generate a\r\n   DS RR or is distributed to resolvers that use the key as the root of\r\n   a trusted subtree", "notes": "I am not a native english speaker so I may be wrong... But the first part of the sentence without a verb puzzles me.\r\n\r\nI know that the RFC is theorically obsolete but RFC 4034 is very short on this secure entry point (SEP) and defers to the RFC 3757 it obsoletes.", "submit_date": "2014-06-19", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4019", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.2.1", "orig_text": "   An\r\n   example of this calculation is shown by the rootdist() routine in\r\n   Appendix A.5.1.1.\r\n", "correct_text": "   An\r\n   example of this calculation is shown by the root_dist() routine in\r\n   Appendix A.5.5.2.\r\n", "notes": "No rootdist() routine is in Appendix.  root_dist() appears in Appendix A.5.5.2.", "submit_date": "2014-06-20", "submitter_name": "Teruaki Kitasuka", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4020", "doc-id": "RFC6068", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.", "orig_text": "   2.  <obs-local-part> and <NO-WS-CTL> as defined in [RFC5322] MUST NOT\r\n       be used.", "correct_text": "   2.  <obs-local-part> and <obs-NO-WS-CTL> as defined in [RFC5322] MUST\r\n       NOT be used.", "notes": "NO-WS-CTL doesn't exist in RFC5322; it was changed to obs-NO-WS-CTL.\r\n\r\nA future update to \"mailto\" should consider other whitespace changes as well.", "submit_date": "2014-06-23", "submitter_name": "NARUSE, Yui", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4033", "doc-id": "RFC7193", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "[RFC5751] registered the application/pkc7-mime media type.", "correct_text": "[RFC5751] registered the application/pkcs7-mime media type.", "notes": "The correct media type is application/pkcs7-mime.  \r\nThe references are correct to PKCS#7 and the RFC that establishes the media type.  This is clearly a typo, hence accepting the errata, but a change to editorial.", "submit_date": "2014-07-02", "submitter_name": "Sean Leonard", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4021", "doc-id": "RFC5707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "8.3\r\n      deletewhen: defines whether a media server should automatically\r\n      delete the conference.  Possible values are \"nomedia\",\r\n      \"nocontrol\", and \"never\".  Default is \"nomedia\".\r\n16.2.2\r\n<xs:attribute name=\"deletewhen\" default=\"never\">\r\n      <xs:simpleType>\r\n       <xs:restriction base=\"xs:string\">\r\n        <xs:enumeration value=\"nomedia\"/>\r\n        <xs:enumeration value=\"nocontrol\"/>\r\n        <xs:enumeration value=\"never\"/>\r\n       </xs:restriction>\r\n      </xs:simpleType>\r\n     </xs:attribute>\r\n10.2.2.1\r\ndeletewhen: as defined by <createconference> element in MSML\r\n      Conference Core Package.\r\n16.4.4\r\n<xs:attribute name=\"deletewhen\" use=\"optional\" default=\"never\">\r\n      <xs:simpleType>\r\n       <xs:restriction base=\"xs:string\">\r\n        <xs:enumeration value=\"nomedia\"/>\r\n        <xs:enumeration value=\"nocontrol\"/>\r\n        <xs:enumeration value=\"never\"/>\r\n       </xs:restriction>\r\n      </xs:simpleType>\r\n     </xs:attribute>", "correct_text": "", "notes": "I don't know which is right, it is \"nomedia\" from 8.3 and \"never\" from xsd. One of it should be rewrite. The same thing to the 10.2.2.1 and 16.4.4.\r\n\r\n16.2.2 may be missed 'use=\"optional\"'.\r\n\r\n---\r\n\r\nThis RFC's authors confirm that section 8.3 is incorrect; deletewhen's deafult should be 'never'.\r\n\r\nAs well, \"if the 'use=' atribute is not specified in the schema definition for a given attribute, then it defaults to 'optional'\".", "submit_date": "2014-06-23", "submitter_name": "Wang Lihe", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4022", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.5", "orig_text": "When receiving an Hello Packet from a neighbor on a broadcast,\r\nPoint-to-MultiPoint or NBMA network, set the neighbor\r\nstructure's Neighbor ID equal to the Router ID found in the\r\npacket's OSPF header. For these network types, the neighbor\r\nstructure's Router Priority field, Neighbor's Designated Router\r\nfield, and Neighbor's Backup Designated Router field are also\r\nset equal to the corresponding fields found in the received\r\nHello Packet; changes in these fields should be noted for\r\npossible use in the steps below. When receiving an Hello on a\r\npoint-to-point network (but not on a virtual link) set the\r\nneighbor structure's Neighbor IP address to the packet's IP\r\nsource address.", "correct_text": "When receiving an Hello Packet from a neighbor on a broadcast,\r\nPoint-to-MultiPoint or NBMA network, set the neighbor\r\nstructure's Neighbor ID equal to the Router ID found in the\r\npacket's OSPF header. For broadcast and NBMA network types, the neighbor\r\nstructure's Router Priority field, Neighbor's Designated Router\r\nfield, and Neighbor's Backup Designated Router field are also\r\nset equal to the corresponding fields found in the received\r\nHello Packet; changes in these fields should be noted for\r\npossible use in the steps below. When receiving an Hello on a\r\npoint-to-point network (but not on a virtual link) set the\r\nneighbor structure's Neighbor IP address to the packet's IP\r\nsource address.", "notes": "This is unnecessary in case of Point-to-MultiPoint network type to hold neighbor's Router Priority, DR, and BDR values.", "submit_date": "2014-06-23", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4023", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.4.1", "orig_text": "o Otherwise, the link descriptions added to the router-LSA\r\ndepend on the OSPF interface type. Link descriptions\r\nused for point-to-point interfaces are specified in\r\nSection 12.4.1.1, for virtual links in Section 12.4.1.2,\r\nfor broadcast and NBMA interfaces in 12.4.1.3, and for\r\nPoint-to-MultiPoint interfaces in 12.4.1.4.", "correct_text": "o Otherwise, the link descriptions added to the router-LSA\r\ndepend on the OSPF interface type. Link descriptions\r\nused for point-to-point interfaces are specified in\r\nSection 12.4.1.1, for broadcast and NBMA interfaces in 12.4.1.2,\r\nfor virtual links in Section 12.4.1.3, and for \r\nPoint-to-MultiPoint interfaces in 12.4.1.4.", "notes": "Incorrect references.", "submit_date": "2014-06-24", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4025", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "-678,491", "correct_text": "-678,941", "notes": "In Figure 4, the MJD of 1 Jan 0 has a typo.\r\n\r\nThere are 365 (not 815) days from 1 Jan -1 to 1 Jan 0, and 366 (not -84) from 1 Jan 0 to 1 Jan 1. I took NTP Timestamp Era Offset as a reference for the number of days in these years.", "submit_date": "2014-06-25", "submitter_name": "Julien Cretin", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6838", "doc-id": "RFC8665", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "            B-Flag:  Backup Flag.  If set, the Adj-SID refers to an\r\n               adjacency that is eligible for protection (e.g., using IP\r\n               Fast Reroute or MPLS-FRR (MPLS-Fast Reroute) as described\r\n               in Section 2.1 of [RFC8402].", "correct_text": "            B-Flag:  Backup Flag.  If set, the Adj-SID refers to an\r\n               adjacency that is eligible for protection (e.g., using IP\r\n               Fast Reroute or MPLS-FRR (MPLS-Fast Reroute) as described\r\n               in Section 3.4 of [RFC8402].", "notes": "I don't see any section 2.1 in RFC 8402. Reference of section 2.1 of RFC 8402 seems incorrect. It should be section 3.4 as per my understanding. Kindly fix it if possible.", "submit_date": "2022-02-05", "submitter_name": "Praveen Kumar", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-02-07 18:17:46"}, {"errata_id": "4029", "doc-id": "RFC6855", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   Once an IMAP client has enabled UTF-8 support with the \"ENABLE\r\n   UTF8=ACCEPT\" command, it MUST NOT issue a \"SEARCH\" command that\r\n   contains a charset specification.  If an IMAP server receives such a\r\n   \"SEARCH\" command in that situation, it SHOULD reject the command with\r\n   a \"BAD\" response (due to the conflicting charset labels).\r\n", "correct_text": "   Once an IMAP client has enabled UTF-8 support with the \"ENABLE\r\n   UTF8=ACCEPT\" command, it MUST NOT issue a \"SEARCH\" command that\r\n   contains a charset specification. If an IMAP server receives such a\r\n   \"SEARCH\" command in that situation, it SHOULD reject the command with\r\n   a \"BAD\" response (due to the conflicting charset labels). This also\r\n   applies to any IMAP command or extension that includes an optional\r\n   charset label and associated strings in the command arguments,\r\n   including the MULTISEARCH extension. For commands with a mandatory\r\n   charset field, such as SORT and THREAD, servers SHOULD reject charset\r\n   values other than UTF-8 with a \u201cBAD\u201d response (due to the conflicting\r\n   charset labels).", "notes": "This is a straightforward extrapolation of the existing text, but a literal reading of the existing text is silent about how to deal with this situation.", "submit_date": "2014-06-27", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4030", "doc-id": "RFC2388", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "Required parameters:\r\n  none", "correct_text": "Required parameters:\r\n  boundary (see Section 4.1)", "notes": "Without that parameter you cannot parse the payload body.", "submit_date": "2014-06-30", "submitter_name": "Anne van Kesteren", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4093", "doc-id": "RFC4108", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "", "correct_text": "id-aa-fwPkgMessageDigest OBJECT IDENTIFIER ::= {\r\n        iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9)\r\n        smime(16) aa(2) 41 }\r\nand \r\nFirmwarePackageMessageDigest ::= SEQUENCE {\r\n        algorithm AlgorithmIdentifier,\r\n        msgDigest OCTET STRING }\r\nfrom section 2.2.10 do not appear in the ASN.1 module.", "notes": "\r\n\r\nYes the two items are missing from the ASN.1 module at the end of the document.", "submit_date": "2014-09-03", "submitter_name": "George Taylor", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4026", "doc-id": "RFC5906", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "One or more extension fields follow the NTP packet header and the\r\n   last followed by the MAC.  The extension field parser initializes a\r\n   pointer to the first octet beyond the NTP packet header and\r\n   calculates the number of octets remaining to the end of the packet.\r\n   If the remaining length is 20 (128-bit digest plus 4-octet key ID) or\r\n   22 (160-bit digest plus 4-octet key ID), the remaining data are the\r\n   MAC and parsing is complete.  If the remaining length is greater than\r\n   22, an extension field is present.  If the remaining length is less\r\n   than 8 or not a multiple of 4, a format error has occurred and the\r\n   packet is discarded; otherwise, the parser increments the pointer by\r\n   the extension field length and then uses the same rules as above to\r\n   determine whether a MAC is present or another extension field.", "correct_text": "One or more extension fields follow the NTP packet header and the\r\n   last followed by the MAC.  The extension field parser initializes a\r\n   pointer to the first octet beyond the NTP packet header and\r\n   calculates the number of octets remaining to the end of the packet.\r\n   If the remaining length is 20 (128-bit digest plus 4-octet key ID) or\r\n   24 (160-bit digest plus 4-octet key ID), the remaining data are the\r\n   MAC and parsing is complete.  If the remaining length is greater than\r\n   24, an extension field is present.  If the remaining length is less\r\n   than 8 or not a multiple of 4, a format error has occurred and the\r\n   packet is discarded; otherwise, the parser increments the pointer by\r\n   the extension field length and then uses the same rules as above to\r\n   determine whether a MAC is present or another extension field.", "notes": "The original text stated that a MAC is present if the remaining length is 20 octets or 22 octets. This was a typo; the correct statement is that a MAC is present if the remaining length is 20 octets or *24 octets*.", "submit_date": "2014-06-25", "submitter_name": "Tal Mizrahi", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4027", "doc-id": "RFC4601", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.8.2", "orig_text": "     if( iif == RPF_interface(S) AND UpstreamJPState(S,G) == Joined ) {\r\n         oiflist = inherited_olist(S,G)\r\n     } else if( iif is in inherited_olist(S,G) ) {\r\n         send Assert(S,G) on iif\r\n     }\r\n\r\n     oiflist = oiflist (-) iif\r\n     forward packet on all interfaces in oiflist\r\n", "correct_text": "     oiflist = NULL\r\n\r\n     if( iif == RPF_interface(S) AND UpstreamJPState(S,G) == Joined ) {\r\n         oiflist = inherited_olist(S,G)\r\n     } else if( iif is in inherited_olist(S,G) ) {\r\n         send Assert(S,G) on iif\r\n     }\r\n\r\n     oiflist = oiflist (-) iif\r\n     forward packet on all interfaces in oiflist\r\n", "notes": "The followng line is missing:\r\n\r\n    oiflist = NULL\r\n\r\nWithout this, it may lead to accessing uninitialized variable\r\noiflist. This line is present in Section 4.2 from which the simplified\r\nSSM specific pseudo code is derived.", "submit_date": "2014-06-26", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4028", "doc-id": "RFC7227", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          option-code          |           option-len          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   |                         ipv6-address                          |\r\n   |                                                               |\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   |                         ipv6-address                          |\r\n   |                                                               |\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                              ...                              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                   Figure 1: Option with IPv6 Addresses", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          option-code          |           option-len          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                                                               |\r\n   |                         ipv6-address                          |\r\n   |                                                               |\r\n   |                                                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   :                              ...                              :\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                   Figure 1: Option with IPv6 Addresses\r\n", "notes": "Original text shows two IPv6 addresses are required in an option.  However, it should be possible to send just one IPv6 address.", "submit_date": "2014-06-26", "submitter_name": "Dan Wing", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4039", "doc-id": "RFC3820", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "   OID                      Description\r\n   ---                      -----------\r\n   1.3.6.1.5.5.7.21.1       id-ppl-inheritALL\r\n   1.3.6.1.5.5.7.21.2       id-ppl-independent", "correct_text": "   OID                      Description\r\n   ---                      -----------\r\n   1.3.6.1.5.5.7.21.0       id-ppl-anyLanguage\r\n   1.3.6.1.5.5.7.21.1       id-ppl-inheritAll\r\n   1.3.6.1.5.5.7.21.2       id-ppl-independent", "notes": "Two changes.  First, include id-ppl-anyLanguage.  Second, change \"ALL\" to \"All\"' to match the ASN.1 module.", "submit_date": "2014-07-03", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4101", "doc-id": "RFC2910", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "   The IPP/1.1 document defines a new scheme 'ipp' as the value of a URL\r\n   that identifies either an IPP printer object or an IPP job object.\r\n   The IPP attributes using the 'ipp' scheme are specified below.\r\n   Because the HTTP layer does not support the 'ipp' scheme, a client\r\n   MUST map 'ipp' URLs to 'http' URLs, and then follows the HTTP\r\n   [RFC2616][RFC2617] rules for constructing a Request-Line and HTTP\r\n   headers.  The mapping is simple because the 'ipp' scheme implies all\r\n   of the same protocol semantics as that of the 'http' scheme\r\n   [RFC2616], except that it represents a print service and the implicit\r\n   (default) port number that clients use to connect to a server is port\r\n   631.\r\n\r\n   In the remainder of this section the term 'ipp-URL' means a URL whose\r\n   scheme is 'ipp' and whose implicit (default) port is 631. The term\r\n   'http-URL' means a URL whose scheme is 'http', and the term 'https-\r\n   URL' means a URL whose scheme is 'https',\r\n\r\n   A client and an IPP object (i.e. the server) MUST support the ipp-URL\r\n   value in the following IPP attributes.\r\n       job attributes:\r\n           job-uri\r\n           job-printer-uri\r\n       printer attributes:\r\n           printer-uri-supported\r\n       operation attributes:\r\n           job-uri\r\n           printer-uri\r\n   Each of the above attributes identifies a printer or job object. The\r\n   ipp-URL is intended as the value of the attributes in this list, and\r\n   for no other attributes. All of these attributes have a syntax type\r\n   of 'uri', but there are attributes with a syntax type of 'uri' that\r\n   do not use the 'ipp' scheme, e.g. 'job-more-info'.\r\n\r\n   If a printer registers its URL with a directory service, the printer\r\n   MUST register an ipp-URL.\r\n\r\n   User interfaces are beyond the scope of this document. But if\r\n   software exposes the ipp-URL values of any of the above five\r\n   attributes to a human user, it is REQUIRED that the human see the\r\n   ipp-URL as is.\r\n\r\n   When a client sends a request, it MUST convert a target ipp-URL to a\r\n   target http-URL for the HTTP layer according to the following rules:\r\n\r\n      1. change the 'ipp' scheme to 'http'\r\n      2. add an explicit port 631 if the URL does not contain an\r\n         explicit port. Note: port 631 is the IANA assigned Well Known\r\n         Port for the 'ipp' scheme.\r\n\r\n   The client  MUST use the target http-URL in both the HTTP Request-\r\n   Line and HTTP headers, as specified by HTTP [RFC2616] [RFC2617] .\r\n   However, the client MUST use the target ipp-URL for the value of the\r\n   \"printer-uri\" or \"job-uri\" operation attribute within the\r\n   application/ipp body of the request. The server MUST use the ipp-URL\r\n   for the value of the \"printer-uri\", \"job-uri\" or \"printer-uri-\r\n   supported\" attributes within the application/ipp body of the\r\n   response.\r\n\r\n   For example, when an IPP client sends a request directly (i.e. no\r\n   proxy) to an ipp-URL \"ipp://myhost.com/myprinter/myqueue\", it opens a\r\n   TCP connection to port 631 (the ipp implicit port) on the host\r\n   \"myhost.com\" and sends the following data:\r\n\r\n    POST /myprinter/myqueue HTTP/1.1\r\n    Host: myhost.com:631\r\n    Content-type: application/ipp\r\n    Transfer-Encoding: chunked\r\n    ...\r\n    \"printer-uri\" \"ipp://myhost.com/myprinter/myqueue\"\r\n              (encoded in application/ipp message body)\r\n    ...\r\n\r\n   As another example, when an IPP client sends the same request as\r\n   above via a proxy \"myproxy.com\", it opens a TCP connection to the\r\n   proxy port 8080 on the proxy host \"myproxy.com\" and sends the\r\n   following data:\r\n\r\n    POST http://myhost.com:631/myprinter/myqueue   HTTP/1.1\r\n    Host: myhost.com:631\r\n    Content-type: application/ipp\r\n    Transfer-Encoding: chunked\r\n    ...\r\n    \"printer-uri\" \"ipp://myhost.com/myprinter/myqueue\"\r\n              (encoded in application/ipp message body)\r\n    ...\r\n\r\n   The proxy then connects to the IPP origin server with headers that\r\n   are the same as the \"no-proxy\" example above.\r\n", "correct_text": "    The IPP URL scheme is defined in [RFC3510].\r\n\r\n   A client and an IPP object (i.e. the server) MUST support the ipp-URL\r\n   value in the following IPP attributes.\r\n       job attributes:\r\n           job-uri\r\n           job-printer-uri\r\n       printer attributes:\r\n           printer-uri-supported\r\n       operation attributes:\r\n           job-uri\r\n           printer-uri\r\n   Each of the above attributes identifies a printer or job object. The\r\n   ipp-URL is intended as the value of the attributes in this list, and\r\n   for no other attributes. All of these attributes have a syntax type\r\n   of 'uri', but there are attributes with a syntax type of 'uri' that\r\n   do not use the 'ipp' scheme, e.g. 'job-more-info'.\r\n\r\n   If a printer registers its URL with a directory service, the printer\r\n   MUST register an ipp-URL.\r\n\r\n   User interfaces are beyond the scope of this document. But if\r\n   software exposes the ipp-URL values of any of the above five\r\n   attributes to a human user, it is REQUIRED that the human see the\r\n   ipp-URL as is.\r\n\r\n", "notes": "Change inline text to a reference to the document that actually defines and registers it.\n --VERIFIER NOTES-- \nWhile this consolidation and reference to RFC 3510 makes sense, RFC 3510 was published two and a half years *after* RFC 2910... so this dos not represent an error in RFC 2910.  Any update to RFC 2910 will clearly refer to RFC 3510 for this information.", "submit_date": "2014-09-05", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4102", "doc-id": "RFC3279", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": " This specification describes the encoding of digital signatures\r\n generated with the following cryptographic algorithms:\r\n\r\n|   * Rivest-Shamir-Adelman (RSA);\r\n    * Digital Signature Algorithm (DSA); and\r\n    * Elliptic Curve Digital Signature Algorithm (ECDSA).", "correct_text": " This specification describes the encoding of digital signatures\r\n generated with the following cryptographic algorithms:\r\n\r\n|   * Rivest-Shamir-Adleman (RSA);\r\n    * Digital Signature Algorithm (DSA); and\r\n    * Elliptic Curve Digital Signature Algorithm (ECDSA).", "notes": "Len is \"Adleman\" and not \"Adelman\". The error repeats a few lines later again. The spelling in 2.2.1 is correct.", "submit_date": "2014-09-07", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4031", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1.1.1", "orig_text": "media-type = type \"/\" subtype *( OWS \";\" OWS parameter )", "correct_text": "media-type = type \"/\" subtype *( OWS \";\" OWS [parameter] )", "notes": "See the thread at http://lists.w3.org/Archives/Public/ietf-http-wg/2011JulSep/0027.html\r\n\r\nImplementations are much more relaxed when it comes to parsing MIME types.\r\n\r\nThe above is probably still too strict. E.g. requiring that a parameter contains \"=\" is something I doubt is actually the case in practice.\n --VERIFIER NOTES-- \nThe ABNF is there to specify what the expected productions are, and is correct as it stands: we do not *want* things such as these to be produced:\r\n\r\n   Content-Type: text/plain;\r\n   Content-Type: text/plain; charset=iso8859-1;\r\n   Content-Type: text/plain;;;;;;;;;;;; ;;; ;;; ;;;\r\n\r\nThat said, this report addresses a real problem: lack of direction to parsers on how to be appropriately lenient.  Because the fact is that general interoperability of this stuff in the wild would be improved if parsers accepted at least the first two of the examples above, which are illegal by the grammar, but which do get generated by less-than-perfect implementations.\r\n\r\nI'm marking this report as \"Rejected\" because the problem it means to address is much broader than this one case, and can't be fixed with an errata report.  But it's important that we take up work on a document that does properly address this issue.", "submit_date": "2014-06-30", "submitter_name": "Anne van Kesteren", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4032", "doc-id": "RFC4541", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1.2", "orig_text": "1) Packets with a destination IP address outside 224.0.0.X which are\r\n      not IGMP should be forwarded according to group-based port\r\n      membership tables and must also be forwarded on router ports.", "correct_text": "1) Packets with a destination IP address outside 224.0.0.X which are\r\n      not IGMP should be forwarded according to group-based port\r\n      membership tables. ", "notes": "IMHO it makes no sense to forward non-IGMP datagrams to router ports if these are not members of the refering groups.\r\n\r\nConsider the following example:\r\nA IGMP snooping switch is connected to two mcast servers and some hosts. Server A is the querier, server B is the non-querier.\r\n\r\nNow with the prevailing version of RFC4541 any mcast data stream (outside 224.0.0.x, non IGMP) would be routed to the hosts which are members of the refering group (correct), but also to server A, because the switch recognizes this port as a mcast server port due to the querier function. But server A is not interested in the data streams of server B unless it joins the group. This behaviour uneccessarily loads the port of server A with bandwidth.\r\n\r\nObviously some (all?) switch models (like HP2920) show this erroneous behavior.\r\n\r\nKind Regards, Josef Felber\n --VERIFIER NOTES-- \nThe text in the RFC is correct. Router ports need to see the multicast traffic in order to correctly forward it to interested members not connected to the switch. ", "submit_date": "2014-06-30", "submitter_name": "Josef Felber", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4034", "doc-id": "RFC7186", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "   [RFC7185]  Herberg, U., Dearlove, C., and T. Clausen, \"Integrity\r\n              Protection for the Neighborhood Discovery Protocol (NHDP)\r\n              and Optimized Link State Routing Protocol Version 2\r\n              (OLSRv2)\", RFC 7185, April 2014.\r\n", "correct_text": "   [RFC7183]   Herberg, U., Dearlove, C., and T. Clausen, \"Integrity\r\n               Protection for the Neighborhood Discovery Protocol (NHDP)\r\n               and Optimized Link State Routing Protocol Version 2\r\n               (OLSRv2)\", RFC 7183, April 2014.\r\n", "notes": "Apparently, the wrong RFC number was cited: RFC7185 is \"Rationale for the Use of Link Metrics in the Optimized Link State Routing Protocol Version 2 (OLSRv2)\"\r\n\r\nAdditionally, all references to RFC7185 in the document (Section 1 and Section 6) should read RFC7183.", "submit_date": "2014-07-02", "submitter_name": "Thomas Clausen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4035", "doc-id": "RFC7186", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "[RFC7185]", "correct_text": "[RFC7183]", "notes": "Related to errata 4034, which corrects the reference in the references section, the actual citation keys (which are RFC7185 in the document) should be corrected to [RFC7183] also. \r\n\r\nNot quite sure if this should be a separate errata or the two should be combined?\n --VERIFIER NOTES-- \nThis is rejected as a duplicate of report 4034. That report can be used to capture all of the information required.", "submit_date": "2014-07-03", "submitter_name": "Thomas Clausen", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4036", "doc-id": "RFC3279", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.3", "orig_text": "g specifies the generator of the multiplicative subgroup of order g;", "correct_text": "g specifies the generator of the multiplicative subgroup of order q;", "notes": "RFC2631 states that g is of order q mod p (section 2.1.1).\r\nAlso, X9.42 (which is referenced in section 2.3.3 of RFC3279) defines g as\r\n\"generator of the q-order cyclic subgroup of GF(p), that is, an element of order q in the multiplicative group of GF(p)\" (X9.42:2001, section 4.1)", "submit_date": "2014-07-03", "submitter_name": "Matthias Koenig", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4037", "doc-id": "RFC2797", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "EnrollmentMessageSyntax\r\n   { iso(1) identified-organization(3) dod(4) internet(1)\r\n   security(5) mechansims(5) pkix(7) id-mod(0) id-mod-cmc(6) }", "correct_text": "EnrollmentMessageSyntax\r\n   { iso(1) identified-organization(3) dod(6) internet(1)\r\n   security(5) mechansims(5) pkix(7) id-mod(0) id-mod-cmc(6) }", "notes": "The PKIX Object Identifier arc is:\r\n\r\nid-pkix OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) \r\n            dod(6) internet(1) security(5) mechanisms(5) pkix(7) }\r\n\r\nSo, the third element in the object identifier should be \"dod(6)\" instead of \"dod(4)\".", "submit_date": "2014-07-03", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4038", "doc-id": "RFC2797", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   id-cmc-confirmCertAcceptance OBJECT IDENTIFIER ::= {pkix-cmc 24}\r\n", "correct_text": "   id-cmc-confirmCertAcceptance OBJECT IDENTIFIER ::= {id-cmc 24}\r\n", "notes": "This is a typo in the ASN.1 module.  The proper definition for this object identifier is  {id-cmc 24}.", "submit_date": "2014-07-03", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8108", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.2", "orig_text": "   acknowledgements for records which have already been ACKed.  As noted\r\n   above, the receipt of any record responding to a given flight MUST be\r\n   taken as an implicit acknowledgement for the entire flight to which\r\n   it is responding.", "correct_text": "   acknowledgements for records which have already been ACKed.  As noted\r\n   above, the receipt of any record responding to a given flight MUST be\r\n   taken as an implicit acknowledgement for the entire flight to which\r\n   it is responding.\r\n\r\n   If any element of record_numbers in the ACK references an epoch that\r\n   is higher than the epoch in which the ACK was received, the\r\n   implementation MUST terminate the connection with an\r\n   \"illegal_parameter\" alert.", "notes": "Section 7 discusses that you cannot send ACKs for later epochs, but does not say anything about what the receiver does. To prevent an attacker from, e.g., using a plaintext ACK to interfere with ACKs of an encrypted epoch, I think we need to tell the receiver to check this.\r\n\r\nOtherwise we need to be much more explicit about the points at which the receiver MUST close old epochs. Honestly, we probably should be explicit about this too, but we should also be clear on this point.", "submit_date": "2024-09-18", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "4040", "doc-id": "RFC5234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "B.1", "orig_text": "HEXDIG         =  DIGIT / \"A\" / \"B\" / \"C\" / \"D\" / \"E\" / \"F\"", "correct_text": "HEXDIG         =  DIGIT\r\n               / \"A\" / \"B\" / \"C\" / \"D\" / \"E\" / \"F\"\r\n               / \"a\" / \"b\" / \"c\" / \"d\" / \"e\" / \"f\"", "notes": "Various RFCs are quoting HEXDIG under the currently incorrect understanding that it includes a-f as well as 0-9 and A-F, and I believe this is the place where it should be changed, rather than altering them to use a different rule.\r\n\r\nHere are a couple of examples of the problem this causes that came quickly to hand:\r\n\r\n- RFC 7230: section 1.2 cites ?HEXDIG (hexadecimal 0-9/A-F/a-f)?, section 4.1 proceeds to use HEXDIG in chunk-size, which in RFC 2616 was HEX which did indeed include a-f.\r\n\r\n- RFC 3986: it replaces the hex of RFC 2396, which included a-f, with this HEXDIG of RFC 2234 (of which this document is the latest form). This is then used in pct-encoded (percent-encoding in URLs), IPvFuture and h16 (IPv6 addresses), all of which can reasonably be expected to permit lowercase a-f as well as uppercase.\n --VERIFIER NOTES-- \nIn Section 2.3, RFC 5234 explicitly says this:\r\n\r\n   NOTE:\r\n      ABNF strings are case insensitive and the character set for these\r\n      strings is US-ASCII.\r\n\r\nSo the definition of HEXDIG already allows for both upper and lower case (or a mixture).\r\n\r\nIt's true that some people aren't aware of that, and write their documents without understanding it.  But it is not an error in 5234.", "submit_date": "2014-07-03", "submitter_name": "Chris Morgan", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4041", "doc-id": "RFC6549", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "8.  IANA Considerations\r\n\r\nThe size of the AuType field is reduced from 16 octets to 8 octets.\r\nThis changes the OSPF Authentication Codes registry in that the\r\nvalues 256-65535 are no longer defined and are therefore deprecated.\r\nThere is no backward compatibility issue since this range of values\r\nwas previously defined as \"Reserved and should not be assigned\".\r\n", "correct_text": "8.  IANA Considerations\r\n\r\nThe size of the AuType field is reduced from 16 bits to 8 bits.\r\nThis changes the OSPF Authentication Codes registry in that the\r\nvalues 256-65535 are no longer defined and are therefore deprecated.\r\nThere is no backward compatibility issue since this range of values\r\nwas previously defined as \"Reserved and should not be assigned\".\r\n", "notes": "Earlier in RFC6549 Section 2. OSPFv2 Instance Packet Encoding, Paragraph 2 states \"All fields are as defined in [OSPFV2] except that the Instance ID field is new, and the AuType field is reduced to 8 bits from 16 bits without any change in meaning.  The Instance ID field is defined as follows:\".  The proposed corrected text makes section 8 consistent with section 2.", "submit_date": "2014-07-05", "submitter_name": "Jim Young", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4042", "doc-id": "RFC3161", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   8.    not to examine the imprint being time-stamped in any way (other\r\n         than to check its length, as specified in the previous bullet).\r\n\r\n   9.    not to include any identification of the requesting entity in\r\n         the time-stamp tokens.\r\n\r\n   10.   to sign each time-stamp token using a key generated exclusively\r\n         for this purpose and have this property of the key indicated on\r\n         the corresponding certificate.\r\n\r\n   11.   to include additional information in the time-stamp token, if\r\n         asked by the requester using the extensions field, only for the\r\n         extensions that are supported by the TSA.  If this is not\r\n         possible, the TSA SHALL respond with an error message.\r\n", "correct_text": "   8.    not to examine the imprint being time-stamped in any way (other\r\n         than to check its length, as specified in the previous bullet).\r\n\r\n   9.    to sign each time-stamp token using a key generated exclusively\r\n         for this purpose and have this property of the key indicated on\r\n         the corresponding certificate.\r\n\r\n   10.   to include additional information in the time-stamp token, if\r\n         asked by the requester using the extensions field, only for the\r\n         extensions that are supported by the TSA.  If this is not\r\n         possible, the TSA SHALL respond with an error message.\r\n", "notes": "\r\n\r\nThere exists at least one legal mandate in at least one jurisdiction that contravenes strict compliance with RFC3161.  It is easier to work to change IETF non-binding standards than it is to change legal mandates.\r\n\r\nThe State of Nevada regulates Time Stamps, under Nevada Administrative Code chapter 720 section 160.  It requires that Time Stamps, to be recognized by its courts, must contain the identification of the requesting entity (the \"identity of the person appending or attaching the notation\") in the time-stamp tokens.\r\n\r\nThe Administrative Code may be found at this URL: http://www.leg.state.nv.us/NAC/NAC-720.html#NAC720Sec160  I have also quoted the relevant section below.  (The parenthetical reference to NRS 720.150 is a reference to Nevada Revised Statutes, the statutory authority for the administrative code section.)\r\n\r\nNAC 720.160  \"Time stamp\" defined. (NRS 720.150)  \"Time stamp\" means:\r\n     1.  A notation that:\r\n     (a) Is digitally signed by a certification authority;\r\n     (b) Is appended or attached to a message, digital signature or certificate; and\r\n     (c) Indicates at least:\r\n          (1) The date and time the notation was appended or attached; and\r\n          (2) The identity of the person appending or attaching the notation; or\r\n     2.  To append or attach such a notation to a message, digital signature or certificate.\r\n     (Added to NAC by Sec'y of State by R155-98, eff. 12-2-99)\r\n\r\nPlease note that the requirement of NAC 720.160.1(c)(2) went into effect in December 1999, more than 18 months before RFC3161 was published in August 2001.  The attempt by a non-legislative body (IETF pkix-wg) to contravene the will of a legislative body was either abject ignorance or utter hubris.\r\n\r\nA TimeStampToken extension would be able to contain the mandatory data.  However, such an extension would necessarily violate current RFC3161 section 2.1.9.\r\n\r\nThe reason for this change is actually technical (from a legal sense), though it may appear to be editorial in nature.  As digests grow older, they necessarily have a much longer time that they have subject to the Birthday Attack.  As of the date of this errata submission, SHA-1 is disallowed by the Computer Security Resource Center of US National Institute of Science and Technology (NIST) for new digital signature generation, due to potential weakening due to increased temporal attack surface.\r\n\r\nThis means that sooner or later, an older timestamp is going to be found that matches the digest of a newer document.  The goal is to ensure that the document in question was actually in the possession of the particularly-named person identified as having attached the timestamp, by making that person available for testimony in the event of a dispute.  If there are multiple timestamps available using different digest algorithms that all have the same time (within a few seconds of each other), that raises the probability that the document did in fact exist at that time.  However, because new digest algorithms are introduced over time, it is not feasible to expect that all provided timestamps for a given document will necessarily be at the same time -- as long as all the digests that existed at the time the timestamps were generated have their times match, and the timestamps with new digests were not created before the new digests were implemented, it's the best evidence available that the timestamped data existed at the latest of the times of the timestamps from digests that existed simultaneously.  (Be VERY careful about accepting timestamps that are more than thirty seconds apart from algorithms that existed simultaneously, and only in the murkiest situations should any set of timestamps using algorithms that existed simultaneously ever be accepted that are stamped as being more than two minutes apart.)\r\n\r\nRFC3161 Section 2.4.1 defines a TimeStampReq format which does not provide the actual datum to be timestamped.  Any attempt at a protocol which does make the Certification Authority be the one attaching the timestamp to the datum would have to provide the datum to the custody of the Certification Authority, which would exceed the scope of the protocol defined by RFC3161.  Thus, a true RFC3161-compliant implementation would have to use nonstandard extensions to either the submission protocol (leaving the datum in the care of the Time Stamp Server) or the TimeStampReq and TimeStampToken contents (containing the datum in, presumably, an extension containing an ASN.1 OCTET STRING), in order to comply with this legal mandate in such a way that the identity of the person requesting the imprint (and thus presumed to hold the datum in the first place) does not need to be included within the TimeStampToken.  Unfortunately, this would also necessitate a violation of RFC3161 section 2.1.8, to prevent false statements from being signed in a jurisdiction where digital signatures have the force of acknowledgments before notaries public.\r\n\r\nThe erratum submitter respectfully requests that a Time Stamp working group be reconvened for an update to the protocol to address this and other errata which are currently held for update.\n --VERIFIER NOTES-- \n\r\nThis is not an erratum but a change request. Please send to the pkix list if\r\nit's still useful.", "submit_date": "2014-07-05", "submitter_name": "Kyle Hamilton", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4043", "doc-id": "RFC6265", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1.4", "orig_text": "The user agent MUST use an algorithm equivalent to the following\r\nalgorithm to compute the default-path of a cookie:", "correct_text": "The user agent MUST use an algorithm equivalent to the following\r\nalgorithm to compute the default value for a cookie-path \r\n(and thereby matching the server-side semantics as defined in 4.1.2.4):", "notes": "The term \"default-path\" is not formally defined before and is quite misleading for the reader \r\n  A. going through the section 5.1.4 as it's only used there once and not again\r\n     until section 5.2.4 (once again) and 5.3 (once again).\r\n  B. not being a native English speaker\r\n\r\nFurthermore, the true meaning of the \"default-path\" only appears sometime after at section 5.2.4 where it's finally bound altogether. Therefore, my personal recommendation would be to also replace the other occurrences of the \"default-path\" terms by \"default cookie-path\"\n --VERIFIER NOTES-- \nThis report is actually an enhancement request.  The discussion of this report on the http-state mailing list should be reviewed if the document is ever revised.", "submit_date": "2014-07-06", "submitter_name": "Pierre Lepropre", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4108", "doc-id": "RFC7332", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "If the received request did not contain a Max-Forwards header field,\r\none MUST be created in any request generated in the UAC side, as\r\ndescribed for proxies in Section 16.6, Step 3 of [RFC3261].", "correct_text": "If B2BUA creates a request as a result of processing a\r\nincoming response, Max-Forwards MUST be added in any request\r\ngenerated in the UAC side, as described for proxies in\r\nSection 16.6, Step 3 of [RFC3261].", "notes": "Max-Forward is mandatory for Request as per RFC 3261. So this case is possible only on response processing.\n --VERIFIER NOTES-- \n   The existing text is correct. The fact that Max-Forwards is required to be present in a request does not invalidate text that says what to do if it is not.", "submit_date": "2014-09-11", "submitter_name": "Chozhan A", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4109", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.2", "orig_text": "   opaque ASN.1Cert<2^24-1>;\r\n", "correct_text": "   opaque ASN.1Cert<1..2^24-1>;", "notes": "The appendix definition of ASN.1Cert leaves out the floor of the variable-length vector, which must be specified according to the vector syntax specification in section 4.3. Fortunately, the original definition of ASN.1Cert in section 7.4.2 does specify the floor as 1, so the definition in A.4.2 should be updated to match.", "submit_date": "2014-09-11", "submitter_name": "Christopher Armstrong", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4047", "doc-id": "RFC3665", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   F3 REGISTER Bob -> SIP Server\r\n\r\n   REGISTER sips:ss2.biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TLS client.biloxi.example.com:5061;branch=z9hG4bKnashd92\r\n   Max-Forwards: 70\r\n   From: Bob <sips:bob@biloxi.example.com>;tag=ja743ks76zlflH\r\n   To: Bob <sips:bob@biloxi.example.com>\r\n   Call-ID: 1j9FpLxk3uxtm8tn@biloxi.example.com\r\n   CSeq: 2 REGISTER\r\n   Contact: <sips:bob@client.biloxi.example.com>\r\n   Authorization: Digest username=\"bob\", realm=\"atlanta.example.com\"\r\n    nonce=\"ea9c8e88df84f1cec4341ae6cbe5a359\", opaque=\"\",\r\n    uri=\"sips:ss2.biloxi.example.com\",\r\n    response=\"dfe56131d1958046689d83306477ecc\"\r\n   Content-Length: 0", "correct_text": "   F3 REGISTER Bob -> SIP Server\r\n\r\n   REGISTER sips:ss2.biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TLS client.biloxi.example.com:5061;branch=z9hG4bKnashd92\r\n   Max-Forwards: 70\r\n   From: Bob <sips:bob@biloxi.example.com>;tag=ja743ks76zlflH\r\n   To: Bob <sips:bob@biloxi.example.com>\r\n   Call-ID: 1j9FpLxk3uxtm8tn@biloxi.example.com\r\n   CSeq: 2 REGISTER\r\n   Contact: <sips:bob@client.biloxi.example.com>\r\n   Authorization: Digest username=\"bob\", realm=\"atlanta.example.com\",\r\n    nonce=\"ea9c8e88df84f1cec4341ae6cbe5a359\", opaque=\"\",\r\n    uri=\"sips:ss2.biloxi.example.com\",\r\n    response=\"dfe56131d1958046689d83306477ecc\"\r\n   Content-Length: 0", "notes": "A comma (,) is missing before the 'nonce' parameter of the Authorization header.", "submit_date": "2014-07-11", "submitter_name": "Gergely Szabo", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-09 09:06:58"}, {"errata_id": "4049", "doc-id": "RFC6686", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   Resource Record (RR) type.  These are always expressed internally in\r\n   software as numbers, assigned according to the procedures in\r\n   [DNS-IANA] Assigned RRTYPEs also have names.  The two of interest in", "correct_text": "   Resource Record (RR) type.  These are always expressed internally in\r\n   software as numbers, assigned according to the procedures in\r\n   [DNS-IANA].  Assigned RRTYPEs also have names.  The two of interest\r\n   in", "notes": "Wrong punctuation: missing period and space.\r\n\r\n----- Verifier Notes -----\r\nWe don't use errata reports for insignificant typos.", "submit_date": "2014-07-11", "submitter_name": "Nico Roeser", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4050", "doc-id": "RFC7230", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.4", "orig_text": "A server MUST reject any received request message that contains\r\nwhitespace between a header field-name and colon with a response code\r\nof 400 (Bad Request).", "correct_text": "A server MUST reject any received request message that contains\r\nwhitespace between a header field-name and colon with a status code\r\nof 400 (Bad Request).", "notes": "Basically HTTP RFCs seem to prefer \"status code\" over \"response code\". RFC 7231 Section 6 uses status code or \"Response Status Code\", but rarely uses the term \"response code\" (though it uses it, once). Some technical books actually refer those codes as \"response codes\". I tend to be confused with the mixture of those two terms.", "submit_date": "2014-07-11", "submitter_name": "Daisuke Miyakawa", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4051", "doc-id": "RFC5660", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "Connection latches can exist in any of the following five states:", "correct_text": "Connection latches can exist in any of the following four states:", "notes": "This sentence is followed by a list with four elements, not five. The state machine diagram also has four states, not five.", "submit_date": "2014-07-16", "submitter_name": "Watson Ladd", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 01:34:17"}, {"errata_id": "4052", "doc-id": "RFC4959", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "This extension adds an optional second argument to the AUTHENTICATE\r\ncommand that is defined in Section 6.2.2 of [RFC3501].  If this\r\nsecond argument is present, it represents the contents of the\r\n\"initial client response\" defined in Section 5.1 of [RFC4422].", "correct_text": "This extension adds an optional second argument to the AUTHENTICATE\r\ncommand that is defined in Section 6.2.2 of [RFC3501].  If this\r\nsecond argument is present, it represents the contents of the\r\n\"initial client response\" defined in Section 5 of [RFC4422].", "notes": "There is no Section 5.1 in RFC 4422 - Section 5 is a single section.", "submit_date": "2014-07-16", "submitter_name": "Michael Slusarz", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4053", "doc-id": "RFC879", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14", "orig_text": "For example, if the IP Security option (11 octets) were in use and\r\nthe IP maximum datagram size remained at 576 octets, then the TCP\r\nshould send the MSS with a value of 525 (536-11).", "correct_text": "For example, if the IP Security option (11 octets) were in use and\r\nthe IP maximum datagram size remained at 576 octets, then the TCP\r\nshould send the MSS with a value of 524 (536-11-1).", "notes": "IP and TCP header must be multiple of 4 octets.\r\n\r\nA side note: The value 11  for the IP security option is apparently copied from RFC 791 without considering that a padding to 32 bit word boundaries is required. ", "submit_date": "2014-07-17", "submitter_name": "Susumu Endoh", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4054", "doc-id": "RFC4084", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "The provider may impose a filtering Web proxy on the \r\nconnections; that proxy may change and redirect URLs \r\nto other sites than the one originally specified by the \r\nuser or embedded link.", "correct_text": "The provider may require a HTTP proxy to be used.", "notes": "RFC7230 Section 2 defines a Web proxy as being nominated by the client, not the network operator; operator-imposed proxies (so-called \"interception\" proxies) are not legitimate in HTTP, even if they are not uncommon.\r\n\r\nFurthermore, RFC7230 section 5.7.2 defines the constraints on the transformations HTTP proxies can make, not this document.\n --VERIFIER NOTES-- \n   the original is not wrong in the sense that it's historically appropriate. We should consider revising this document but lodging this as erratum doesn't change the intention of the original text.", "submit_date": "2014-07-17", "submitter_name": "Mark Nottingham", "verifier_id": "", "verifier_name": "joel jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7068", "doc-id": "RFC8552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.2", "orig_text": "          | URI        | _tcp                  | [RFC6118]     |\r\n          | URI        | _udp                  | [RFC6118]     |", "correct_text": "| URI        | _tcp                 | [RFC4340]     |\r\n| URI        | _udp                 | [RFC4340]     |", "notes": "Wrong reference. RFC6118 does not even mention \"tcp\" nor \"udp\". \r\n\r\nNote that this also has an impact to the IANA registry: https://www.iana.org/assignments/dns-parameters/dns-parameters.xhtml#underscored-globally-scoped-dns-node-names\r\n\r\n[ Warren Kumari (Ops AD):  Please also see Errata 7066, and the thread https://mailarchive.ietf.org/arch/msg/dnsop/WFMXL5dY8sniHwVtkPfcqvWk3nI/\r\n\r\nThis was added as \"part of a list used to \"reserve\" the names of (transport) protocols, so that constructs like _25._quic.example.com could be constructed where the _name denotes the protocol and not the name of something.\" . IANA will update the reference. ]\r\n\r\n", "submit_date": "2022-08-02", "submitter_name": "Bernie Hoeneisen", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-31 01:34:30"}, {"errata_id": "4059", "doc-id": "RFC7257", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "N/A - this is about some missing MIB objects that should be there", "correct_text": "N/A - this is hardly the right place to define missing MIB objects", "notes": "As per RFC 4762 (which defines at least one of the two VPLS types for which this RFC defines Management Information Base), Virtual Switching Instance (VSI)(a local representation of a given VPLS instance within a given PE) is connected to CE devices via Attachment Circuits (AC). Hence I would expect that Management Information Base for VPLS would provide for some representation of ACs that perform this function for a given VSI.\r\n\r\nHowever, this RFC does not even mention attachment circuits in any way.\r\n\r\nI have tried to raise this issue with the WG and the authors. One of the authors has replied (see http://www.ietf.org/mail-archive/web/l2vpn/current/msg04539.html) that \"ACs are attached to the VPLS instances and are represented as IfMIB entries\". However, neither Interfaces MIB nor any of its key elements (e.g., ifIndex) are mentioned in this RFC.\n --VERIFIER NOTES-- \nThe errata system isn't to be used for recording future work or major defects in RFCs. These need to be taken to the relevant mailing lists (in this case pals@ietf.org) and progressed with Internet-Drafts.\r\n\r\nThis concern could probably be addressed through a new MIB module that augments the on in RFC 7257.", "submit_date": "2014-07-23", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4060", "doc-id": "RFC6476", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "parameters have the value 08 00 02 01 01.", "correct_text": "parameters have the value 04 00 02 01 01.", "notes": "The text with the encoded form was added at the request of a reviewer who felt that providing only the ASN.1 might lead to developers getting the encoding wrong.  Ironically, this had the opposite effect to what was intended for anyone who used the encoded form rather than just going with the ASN.1.\r\n\r\nErrata report was verified by the editor of this RFC.", "submit_date": "2014-07-23", "submitter_name": "Peter Gutmann", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4061", "doc-id": "RFC6844", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": "Tag values SHOULD NOT contain any other characters.", "correct_text": "Tag values MUST NOT contain any other characters.", "notes": "Since the text representation of the tag field is unquoted, spaces and other whitespace must be explicitly excluded.  Otherwise, it is possible to create a CAA record whose text representation cannot be parsed.\n --VERIFIER NOTES-- \n   This really gets down to MUST/SHOULD theology and whether you consider\r\nthe zone file syntax at the same level of conformance as DNS protocol.\r\n\r\nThe author believes SHOULD is correct here. The protocol on the wire will work\r\njust fine if someone breaks this advice.\r\n\r\nYes, it might well break some zone file parsers. But those aren't on\r\nthe wire and that type of incompatibility is exactly what I would\r\nexpect from violating a SHOULD.\r\n\r\nCode has to work if someone creates a RR with a non conformant label,\r\ntherefore a MUST does not saves any work. And the only circumstance in\r\nwhich the editor can imagine someone using it would be where they wanted a\r\nlabel that could not be inserted through normal zone files.\r\n\r\nPhil Hallam-Baker certainly doesn't want people writing parsers to strip out records\r\nwith non conformant labels. So, stick with SHOULD.", "submit_date": "2014-07-24", "submitter_name": "Evan Hunt", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4491", "doc-id": "RFC3580", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.20", "orig_text": "Called-Station-Id\r\n\r\n   For IEEE 802.1X Authenticators, this attribute is used to store the\r\n   bridge or Access Point MAC address in ASCII format (upper case only),\r\n   with octet values separated by a \"-\".  Example: \"00-10-A4-23-19-C0\".\r\n   In IEEE 802.11, where the SSID is known, it SHOULD be appended to the\r\n   Access Point MAC address, separated from the MAC address with a \":\".\r\n   Example \"00-10-A4-23-19-C0:AP1\".", "correct_text": "Called-Station-Id\r\n\r\n   For IEEE 802.1X Authenticators, this attribute is used to store the\r\n   bridge MAC address or IEEE 802.11 BSSID (upper case only), with octet\r\n   values separated by a \"-\".  Example: \"00-10-A4-23-19-C0\".\r\n   In IEEE 802.11, where the SSID is known, it SHOULD be appended to the\r\n   BSSID, separated from the BSSID with a \":\".\r\n   Example \"00-10-A4-23-19-C0:AP1\".\r\n\r\n   The Called-Station-Id MUST be UTF-8 encoded.", "notes": "The RFC was written in the context of an Access Point only offering a\r\nsingle Basic Service Set, predating and not anticipating Access Points\r\ncontaining multiple radios or supporting Virtual Access Points. It is\r\nnot accurate today and the RFC should originally have stated a Basic\r\nService Set. It was an error to not state this.\r\n\r\nThis errata, however, emphatically does not change the original\r\nmeaning or intention of the RFC. Basic Service Set was always meant.\r\n\r\nSince 802.11 SSIDs may be UTF-8 encoded, the Called-Station-Id MUST always be treated as being UTF-8 encoded in the context of 802.1X to accommodate 802.11 where the SSID has been appended. (This inherently encodes the bridge MAC address or IEEE 802.11 BSSID as ASCII would.)", "submit_date": "2015-10-04", "submitter_name": "Nick Lowe", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4492", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "18.17.4", "orig_text": "If the server does not support named attributes for the current \r\nfilehandle, an error of NFS4ERR_NOTSUPP will be returned to the \r\nclient.", "correct_text": "If the server does not support named attributes for file system \r\nobjects on the file system associated with the current filehandle, \r\nan error of NFS4ERR_NOTSUPP will be returned to the client.", "notes": "There are a number of situations in which, a server might not support named attributes on particular file system objects.   A number of cases concern doing an OPENATTR on a named attribute directory or named attribute and are mentioned in the immediately preceeding section.\r\nAside from that contradiction, many implementations might allow named attributes on \r\nsymbolic likes or special files.  The existing text would require NFS4ERR_NOTSUPP rather \r\nthan NFS4ERR_WRONG_TYPE to be returned in such cases, causing the client to conclude \r\nincorrectly that named attribute support is not present for the file system in question, or at \r\nleast be uncertain about the presence/absence of such support.", "submit_date": "2015-10-05", "submitter_name": "David Noveck", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:36:06"}, {"errata_id": "4640", "doc-id": "RFC5707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "16.3.10", "orig_text": "<xs:element name=\"tts\" type=\"smediaType\" substitutionGroup=\"smedia\"/>", "correct_text": " <xs:element name=\"tts\" substitutionGroup=\"smedia\">\r\n  <xs:complexType mixed=\"true\">\r\n   <xs:complexContent>\r\n    <xs:extension base=\"smediaType\">\r\n     <xs:attribute name=\"uri\" type=\"xs:string\" use=\"optional\"/>\r\n    </xs:extension>\r\n   </xs:complexContent>\r\n  </xs:complexType>\r\n </xs:element>", "notes": "The tts element as is provided does not accept the uri attribute, nor the text content indicated by the RFC. The corrected validation supports commands like the following:\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<msml version=\"1.1\">\r\n  <dialogstart target=\"conn:AAI_Unique_ID_1\" name=\"sample\" type=\"application/moml+xml\">\r\n    <play>                    \r\n      <tts uri=\"file:///somefile.vxml\"/>\r\n      <tts uri=\"file:///someotherfile.vxml\" iterate=\"2\" xml:lang=\"en-us\"/>\r\n      <tts xml:lang=\"es-ar\">text to be read</tts>\r\n      <tts>other text</tts>\r\n    </play>\r\n  </dialogstart>\r\n</msml>", "submit_date": "2016-03-16", "submitter_name": "Ignacio Bertacchini", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4065", "doc-id": "RFC3862", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   Examples:\r\n\r\n      From: Winnie the Pooh <im:pooh@100akerwood.com>\r\n\r\n      From: <im:tigger@100akerwood.com>", "correct_text": "   Examples:\r\n\r\n      From: \"Winnie the Pooh\" <im:pooh@100akerwood.com>\r\n\r\n      From: <im:tigger@100akerwood.com>\r\n\r\n\r\n\r\nAlso there are other From and To headers examples in\r\n which name should be double quoted:\r\n\r\n      h: From: \"MR SANDERS\" <im:piglet@100akerwood.com>\r\n      h: To: \"Depressed Donkey\" <im:eeyore@100akerwood.com>", "notes": "From-header = \"From\" \": \" [ Formal-name ] \"<\" URI \">\"\r\n\r\n Examples:\r\n\r\n      From: Winnie the Pooh <im:pooh@100akerwood.com>\r\n\r\nBut \r\n\r\nFormal-name  = 1*( Token SP ) / String\r\nToken        = 1*TOKENCHAR\r\nString       = DQUOTE *( Str-char / Escape ) DQUOTE\r\nNAMECHAR     = %x21 / %x23-27 / %x2a-2b / %x2d\r\n                / %x5e-60 / %x7c / %x7e\r\n                / ALPHA / DIGIT\r\n\r\n                ; Any UCS char except CTLs or SEPARATORS:\r\nTOKENCHAR    = NAMECHAR / \".\" / UCS-high\u00e7\r\n\r\nSo Winnie the Pooh is not a TOKEN but a STRING and should be quoted:\r\n\r\n      From: \"Winnie the Pooh\" <im:pooh@100akerwood.com>\n --VERIFIER NOTES-- \nThe reporter missed seeing the \"1*\" in the ABNF for Formal-name; the construct can actually contain multiple space-delimited Tokens, and those names are all valid.", "submit_date": "2014-07-28", "submitter_name": "Sergio Garcia", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4066", "doc-id": "RFC6241", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "If the \"operation\" attribute is not specified, the\r\nconfiguration is merged into the configuration datastore.", "correct_text": "If the \"operation\" attribute is not specified, then the \r\noperation applied to the parent data node of the configuration\r\nis used. If no parent data node is available, then the value of \r\nthe <default-operation> parameter is used.  If the \r\n<default-operation> parameter is not given, the configuration \r\nis merged into the configuration datastore.\r\n", "notes": "sentence in para 6 is not correct.\r\nThe default-operation value is used, not the value \"merge\".\r\n\r\nDiscussion on the NETCONF mailing list. See http://www.ietf.org/mail-archive/web/netconf/current/msg09169.html", "submit_date": "2014-07-30", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4067", "doc-id": "RFC2203", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "The client should assume that the server supports RPCSEC_GSS_VERS_1\r\nand issue a Context Creation message (as described in the section\r\nRPCSEC_GSS_VERS_1, the RPC response will have a reply_stat of\r\nMSG_DENIED, a rejection status of AUTH_ERROR, and an auth_stat of\r\nAUTH_REJECTED_CRED.", "correct_text": "The client should assume that the server supports RPCSEC_GSS_VERS_1\r\nand issue a Context Creation message (as described in the section\r\n'Context Creation'). If the server does not support\r\nRPCSEC_GSS_VERS_1, the RPC response will have a reply_stat of\r\nMSG_DENIED, a rejection status of AUTH_ERROR, and an auth_stat of\r\nAUTH_REJECTED_CRED.", "notes": "This line was somehow lost in the transition from draft-ietf-oncrpc-rpcsec_gss-04 to RFC 2203.", "submit_date": "2014-07-30", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4127", "doc-id": "RFC6377", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "creating that signature.  Section 5.5 of [DKIM] lists\r\nRFC5322.Subject as one that should be covered as it contains\r\nimportant user-visible text, so this is expected to be an issue\r\nfor any list that makes such changes.", "correct_text": "creating that signature.  Section 5.4.1 of [DKIM] lists\r\nRFC5322.Subject as one that should be covered as it contains\r\nimportant user-visible text, so this is expected to be an issue\r\nfor any list that makes such changes.", "notes": "----- Verifier notes -----\r\nThe section reference was correct when the DKIM reference was RFC 4871, but as 6376 and 6377 were published together, the reference was not changed accordingly.  Oops.", "submit_date": "2014-10-09", "submitter_name": "Andrew Richards", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4128", "doc-id": "RFC3495", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.5.", "orig_text": "   The PacketCable architecture requires an MTA to authenticate itself\r\n   to the TSP's network via the Kerberos protocol.  A Kerberos Realm\r\n   name is required at the MTA to permit a DNS lookup for the address of\r\n   the TSP's Kerberos Key Distribution Center (KDC) entity.\r\n\r\n   The Kerberos Realm name MUST be encoded per the domain style realm\r\n   name described in RFC 1510 [5].  This realm name MUST be all capital\r\n   letters and conform to the syntax described in RFC 1035 [3] section\r\n   3.1.  The sub-option is encoded as follows:\r\n\r\n       Code   Len   Kerberos Realm Name\r\n      +-----+-----+-----+-----+   +-----+\r\n      |  6  |  n  |  k1 |  k2 |...|  kn |\r\n      +-----+-----+-----+-----+   +-----+", "correct_text": "   The PacketCable architecture requires an MTA to authenticate itself\r\n   to the TSP's network via the Kerberos protocol.  A Kerberos Realm\r\n   name is required at the MTA to permit a DNS lookup for the address of\r\n   the TSP's Kerberos Key Distribution Center (KDC) entity.\r\n\r\n   The Kerberos Realm name MUST be use a domain style realm name\r\n   described in RFC 1510 [5].  This realm name MUST be all capital\r\n   letters and be encoded as described in RFC 1035 [3] section 3.1.\r\n   The sub-option is encoded as follows:\r\n\r\n       Code   Len   Kerberos Realm Name\r\n      +-----+-----+-----+-----+   +-----+\r\n      |  6  |  n  |  k1 |  k2 |...|  kn |\r\n      +-----+-----+-----+-----+   +-----+\r\n\r\n   Where k1...kn is the \"DNS wire\" encoded realm name (see RFC 3315,\r\n   section 8). Thus, the realm \"BASIC.1\" is encoded as\r\n   \"\\005BASIC\\0011\\000\".", "notes": "This text is not completely clear about how the realm name is to be encoded - as a 'string' or 'fqdn'.\r\n\r\nRFC 1510 states:\r\n\r\n   Kerberos realms are encoded as GeneralStrings. Realms shall not\r\n   contain a character with the code 0 (the ASCII NUL).  Most realms\r\n   will usually consist of several components separated by periods (.),\r\n   in the style of Internet Domain Names, or separated by slashes (/) in\r\n   the style of X.500 names.\r\n\r\nAnd the reference to RFC 1035 section 3.1 is \"conform to the syntax\" which isn't the same as use this encoding - though I do agree that section 3.1 is mostly about \"DNS wire encoding\". It is just the use of \"encoded\" and \"confirm to the syntax\" combination that makes this unclear.\r\n\r\nIt is believed that the intended encoding is in DNS wire format. And, this should be clarified.", "submit_date": "2014-10-10", "submitter_name": "Bernie Volz", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4129", "doc-id": "RFC6824", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.1.1.", "orig_text": "MPTCP.Checksum (flag):  This flag is set to true if at least one of\r\n      the hosts has set the C bit in the MP_CAPABLE options exchanged\r\n      during connection establishment, and is set to false otherwise.\r\n      If this flag is set, the checksum must be computed in all DSS\r\n      options.", "correct_text": "MPTCP.Checksum (flag):  This flag is set to true if at least one of\r\n      the hosts has set the A bit in the MP_CAPABLE options exchanged\r\n      during connection establishment, and is set to false otherwise.\r\n      If this flag is set, the checksum must be computed in all DSS\r\n      options.", "notes": "Checksum is not on bit \"C\", but instead on bit \"A\". There are no other instances of referring on bit \"C\" as the checksum. Bit \"C\" is unassigned in this version.\r\n\r\nOther instances of bit \"A\" as checksum:\r\n* Section 3.1. Connection Initiation, p. 16 f.\r\n* Section 8. IANA Considerations, Table 3: MPTCP Handshake Algorithms, p. 56", "submit_date": "2014-10-11", "submitter_name": "Friedrich Haussmann", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4641", "doc-id": "RFC2319", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "    180       B4      U0403      CYRILLIC CAPITAL LETTER UKRAINIAN IE", "correct_text": "    180       B4      U0404      CYRILLIC CAPITAL LETTER UKRAINIAN IE", "notes": "Typo in Unicode code point number (main text of RFC has proper number 0404, but Appendix A has a typo: 0403).", "submit_date": "2016-03-18", "submitter_name": "Dmitry Kohmanyuk", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4858", "doc-id": "RFC7539", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.8.", "orig_text": " 1.  The amount of encrypted data possible in a single invocation is\r\n     2^32-1 blocks of 64 bytes each, because of the size of the block\r\n     counter field in the ChaCha20 block function.  This gives a total\r\n     of 247,877,906,880 bytes, or nearly 256 GB.", "correct_text": " 1.  The amount of encrypted data possible in a single invocation is\r\n     2^32-1 blocks of 64 bytes each, because of the size of the block\r\n     counter field in the ChaCha20 block function.  This gives a total\r\n     of 274,877,906,880 bytes, or nearly 256 GB.", "notes": "There is an error in the result of the P_MAX = ((2^32) - 1) * 64  calculation.\r\nThe correct value is 2_74_,877,906,880 while the document states 2_47_,877,906,880.\r\nThis error has already been adopted by multiple implementations as P_MAX value.", "submit_date": "2016-11-10", "submitter_name": "Timm Korte", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4068", "doc-id": "RFC5681", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "The problem is the use of the phrase \"new data\" in an imprecise manner to sometimes mean \"previously unacknowledged data\" and other times mean \"never before sent data\".\r\n\r\nFor example, in Section 3.1\r\n\r\n   During slow start, a TCP increments cwnd by at most SMSS bytes for\r\n   each ACK received that cumulatively acknowledges new data. \r\n\r\nThis should read \r\n\r\n   During slow start, a TCP increments cwnd by at most SMSS bytes for\r\n   each ACK received that cumulatively acknowledges previously \r\n   unacknowledged data.\r\n\r\nI believe that throughout Section 3.1 \"new data\" refers to \"previously unacknowledged data\".\r\n\r\nHowever, in Section 3.2 we have\r\n\r\n   After the fast retransmit algorithm sends what appears to be the\r\n   missing segment, the \"fast recovery\" algorithm governs the\r\n   transmission of new data until a non-duplicate ACK arrives.\r\n\r\nI believe that here \"new data\" refers to \"previously unsent data\".  \r\n\r\nThis is clearer in the following paragraph from Section 3.2\r\n\r\n   1.  On the first and second duplicate ACKs received at a sender, a\r\n       TCP SHOULD send a segment of previously unsent data per [RFC3042]\r\n       provided that the receiver's advertised window allows, the total\r\n       FlightSize would remain less than or equal to cwnd plus 2*SMSS,\r\n       and that new data is available for transmission.\r\n\r\nHere we can see the use of \"previously unsent data\" followed by \"new data\" \r\nwhich refers to the aforementioned \"previously unsent data\".\r\n\r\nWhile the meaning of \"new data\" might be clear to those with extensive experience\r\nin TCP it is imprecise and therefore may be quite confusing to those who are learning about the protocol.", "submit_date": "2014-08-04", "submitter_name": "Michael Taylor", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4069", "doc-id": "RFC5601", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": " pwAttachedPwIndex OBJECT-TYPE\r\n     SYNTAX        PwIndexOrZeroType\r\n     MAX-ACCESS    read-create\r\n     STATUS        current\r\n     DESCRIPTION\r\n         \"If the PW is attached to another PW instead of a local\r\n          native service, this item indicates the pwIndex of the\r\n          attached PW.  Otherwise, this object MUST\r\n          be set to zero.  Attachment to another PW will have no\r\n          PW specific entry in any of the service MIB modules.\"\r\n     DEFVAL { 0 }\r\n     ::= { pwEntry 10 }", "correct_text": " pwAttachedPwIndex OBJECT-TYPE\r\n     SYNTAX        PwIndexOrZeroType\r\n     MAX-ACCESS    read-create\r\n     STATUS        current\r\n     DESCRIPTION\r\n          \"If the PW is attached to another PW instead of a local\r\n           native service, this item indicates the pwIndex of the\r\n           attached PW.  Otherwise, this object MUST\r\n           be set to zero.  Attachment to another PW will have no\r\n           PW specific entry in any of the service MIB modules.\r\n           This object may be modified only when the value of\r\n           the associated pwAdminStatus object is down(2), and\r\n           the associated pwOperStatus object has value down(2)\r\n           or notPresent(5) such that the row in the pwTable\r\n           represents an inactive PW.\"\r\n     DEFVAL { 0 }\r\n     ::= { pwEntry 10 }", "notes": "Description of the pwEntry object in the same RFC states that \"The read-create objects in this table are divided into\r\n           three categories:\r\n           1) Objects that MUST NOT be changed after row activation.\r\n              These are objects that define basic properties of the\r\n              PW (for example type, destination, etc.).\r\n           2) Objects that MAY be changed when the PW is\r\n              defined as not active.  A change of these objects involves\r\n              re-signaling of the PW or it might be traffic affecting.\r\n              PW not active is defined as one of the following\r\n              conditions:\r\n                  a) The pwRowStatus is notInService(2).\r\n                  b) The pwRowStatus is notReady(3).\r\n                  c) The pwAdminStatus is down(2).\r\n           If the operator needs to change one of the values for an\r\n           active row, the operator can either set the pwRowStatus to\r\n           notInService(2) or set pwAdminStatus to down(2).\r\n           Signaling (or traffic) is initiated again upon setting\r\n           the pwRowStatus to active(1) or setting the pwAdminStatus\r\n           to up(1) or testing(3), respectively.\r\n           3) Objects that MAY be changed at any time.\"\r\n\r\nIn further states (in tthe same description) that \"By default, all the read-create objects MUST NOT be changed after row activation, unless specifically indicated in the individual object description.\"\r\n\r\npwAttachedPwIndex object is used to stitch a couple of PWs represented by two different rows in the pwTable, with the pwAttachedPwIndex value in the row representing one of them set to the pwIndex of the other one and vice versa.\r\nSince there is no way in the SMIv2 paradigm to create two rows in the same table\r\nin a single atomic operation, setting a this attribute in a pair of rows is only \r\npossible when both are created. In order to do that, read-create access mode of\r\nthe pwAttachedPwIndex object has to be interpreted as ability to set its value\r\nwhen the row represents an inactive PW. \r\nIn accordance with the quoted description, such an interpretation must be\r\nexplicitly specified in the description of this object.\r\n\r\nSuch a specification is missing in the current text, hence the default\r\ninterpretation of the read-create access mode is holds.\r\nProposed text fixes this problem.", "submit_date": "2014-08-05", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4070", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   $ORIGIN example.com\r\n   .       CAA 0 issue \"ca.example.net\"\r\n", "correct_text": "   $ORIGIN example.com.\r\n           CAA 0 issue \"ca.example.net\"\r\n", "notes": "The original text is obviously incorrect (or at least something not really intended) in that the owner name is absolute.  It just doesn't make sense to use $ORIGIN if we use an absolute owner name for the actual RR.  The \"corrected text\" is one representation of what I guess the author really intended.\r\n\r\nThere are other instances of the same kind of this error in this section, but I don't bother to list all of them as it should be obvious and the sense of the \"fix\" should be the same.\r\n\r\nFrom the verification of the errata:\r\nThe errata is correct as reported with the following caveat, some implementations of DNS presentation format assume all $ORIGIN statements are Fully Qualified Domain Names,\r\nbut others do not and those will take the domain name and append to it current origin. \r\nThus the trailing dot removes any ambiguity that the name specified is FQDN. ", "submit_date": "2014-08-05", "submitter_name": "JINMEI Tatuya", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4071", "doc-id": "RFC4960", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "      However, regardless of the value of rwnd (including if it is 0),\r\n      the data sender can always have one DATA chunk in flight to the\r\n      receiver if allowed by cwnd (see rule B below).  This rule allows\r\n      the sender to probe for a change in rwnd that the sender missed\r\n      due to the SACK having been lost in transit from the data receiver\r\n      to the data sender.\r\n", "correct_text": "[empty]", "notes": "The whole paragraph is a one-to-one repetition of the final part of first paragraph of Rule A).\r\nThe position of the paragraph does not affect meaning, but the repetition hinders readability.", "submit_date": "2014-08-06", "submitter_name": "Federico Zuccardi Merli", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4072", "doc-id": "RFC7231", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "TOC", "orig_text": "ed ", "correct_text": "", "notes": "Three extraneous characters \"ed \" appear before the table of contents entry for 7.1.1.", "submit_date": "2014-08-06", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4073", "doc-id": "RFC6470", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   <CODE BEGINS> file=\"ietf-netconf-notifications@2011-12-09.yang\"", "correct_text": "   <CODE BEGINS> file=\"ietf-netconf-notifications@2012-02-06.yang\"", "notes": "Reported to me by Martin Bjorklund", "submit_date": "2014-08-07", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4074", "doc-id": "RFC4523", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.7", "orig_text": "      ( 2.5.13.40 NAME 'algorithmIdentifier'\r\n           DESC 'X.509 Algorithm Identifier Match'\r\n           SYNTAX 1.3.6.1.1.15.7 )\r\n", "correct_text": "      ( 2.5.13.40 NAME 'algorithmIdentifierMatch'\r\n           DESC 'X.509 Algorithm Identifier Match'\r\n           SYNTAX 1.3.6.1.1.15.7 )\r\n", "notes": "The name should be 'algorithmIdentifierMatch', in order to be used in section 4.7 as an EQUALITY MatchingRule.", "submit_date": "2014-08-07", "submitter_name": "Emmanuel L\u00e9charny", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4130", "doc-id": "RFC1985", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "If one of the 500 level error codes (550 or 551) are sent, the client\r\nshould assume that the protocol is not supported in the remote host\r\nor that the protocol has not been implemented correctly on either the\r\nclient or server host. ", "correct_text": "If one of the 500 level error codes (500 or 501) is sent, the client\r\nshould assume that the protocol is not supported in the remote host\r\nor that the protocol has not been implemented correctly on either the\r\nclient or server host. ", "notes": "550 (mailbox unavailable) and 551 (user not local) are clearly not the codes intended here; this text is meant to refer to the two syntax error codes specified in Section 5.1.", "submit_date": "2014-10-13", "submitter_name": "Michael Slusarz", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4131", "doc-id": "RFC6109", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.22", "orig_text": "X-Trasplorto: errore", "correct_text": "X-Trasporto: errore", "notes": "typo error", "submit_date": "2014-10-14", "submitter_name": "Luigi De Rosa", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4075", "doc-id": "RFC6797", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "14", "orig_text": "   Without the \"includeSubDomains\" directive, HSTS is unable to protect\r\n   such Secure-flagged domain cookies.", "correct_text": "   Without the \"includeSubDomains\" directive, HSTS is unable to protect\r\n   such Secure-flagged domain cookies.\r\n\r\n   Even with the \"includeSubDomains\" directive, the unavailability of \r\n   an \"includeParent\" directive means that an Active MITM attacker can \r\n   perform a cookie-injection attack against an otherwise \r\n   HSTS-protected victim domain.\r\n\r\n   Consider the following scenario:\r\n\r\n    The user visits https://sub.example.com and gets a HSTS policy with\r\n    includeSubdomains set. All subsequent navigations to \r\n    sub.example.com and its subdomains will be secure.\r\n\r\n    An attacker causes the victim's browser to navigate to \r\n    http://example.com. Because the HSTS policy applies only to \r\n    sub.example.com and its superdomain matches, this insecure \r\n    navigation is not blocked by the user agent.\r\n\r\n    The attacker intercepts this insecure request and returns a \r\n    response that sets a cookie on the entire domain tree using a \r\n    Set-Cookie header.\r\n\r\n    All subsequent requests to sub.example.com carry the injected\r\n    cookie, despite the use of HSTS.", "notes": "To mitigate this attack, HSTS-protected websites should perform a background fetch of a resource at the first-level domain. This resource should carry a HSTS header that will apply to the entire domain and all subdomains.\n --VERIFIER NOTES-- \nThis is a valid issue, but not suitable for the errata system.  The websec working group is discussing handling this with a short document to update RFC 6797.", "submit_date": "2014-08-08", "submitter_name": "Eric Lawrence", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4076", "doc-id": "RFC6991", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "In date-and-time typedef description-stmt\r\n\r\n      (c) The canonical format (see below) of data-and-time values\r\n", "correct_text": "      (c) The canonical format (see below) of date-and-time values\r\n", "notes": "date-and-time spelled data-and-time", "submit_date": "2014-08-09", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4085", "doc-id": "RFC6896", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   o  AES-CBC-128 key: \"123456789abcdef\"", "correct_text": "Appendix A.  Examples\r\n\r\n   The examples in this section have been created using the 'scs' test\r\n   tool bundled with LibSCS, a free and opensource reference\r\n   implementation of the SCS protocol that can be found at\r\n   (http://github.com/koanlogic/libscs).\r\n\r\nA.1.  No Compression\r\n\r\n   The following parameters:\r\n\r\n   o  Plaintext cookie: \"a state string\"\r\n\r\n   o  AES-CBC-128 key: 0123456789abcdef\r\n\r\n   o  HMAC-SHA1 key: 12345678901234567890\r\n\r\n   o  TID: tid\r\n\r\n   o  ATIME: 1347265955\r\n\r\n   o  IV:\r\n      \\xb4\\xbd\\xe5\\x24\\xf7\\xf6\\x9d\\x44\\x85\\x30\\xde\\x9d\\xb5\\x55\\xc9\\x4f\r\n\r\n   produce the following tokens:\r\n\r\n   o  DATA: pzSOjcNui9-HWS_Qk1Pwpg\r\n\r\n   o  ATIME: MTM0NzI2NTk1NQ\r\n\r\n   o  TID: dGlk\r\n\r\n   o  IV: tL3lJPf2nUSFMN6dtVXJTw\r\n\r\n   o  AUTHTAG: uea1fgC67RmOxfpNz8gMbnPWfDA\r\n\r\nA.2.  Use Compression\r\n\r\n   The same parameters as above, except ATIME and IV:\r\n\r\n   o  Plaintext cookie: \"a state string\"\r\n\r\n   o  AES-CBC-128 key: 0123456789abcdef\r\n\r\n   o  HMAC-SHA1 key: 12345678901234567890\r\n\r\n   o  TID: tid\r\n\r\n   o  ATIME: 1347281709\r\n\r\n   o  IV:\r\n      \\x1d\\xa7\\x6f\\xa0\\xff\\x11\\xd7\\x95\\xe3\\x4b\\xfb\\xa9\\xff\\x65\\xf9\\xc7\r\n\r\n   produce the following tokens:\r\n\r\n   o  DATA: gEnL9b92EEFBLg1qNVLoO9BpVh4GH9fyOo-NkV354JU\r\n\r\n   o  ATIME: MTM0NzI4MTcwOQ\r\n\r\n   o  TID: dGlk\r\n\r\n   o  IV: HadvoP8R15XjS_up_2X5xw\r\n\r\n   o  AUTHTAG: ak1Kq1MJV-VHZ5zaci9FsI78wSw\r\n\r\n   In both cases, the resulting SCS cookie is obtained via ordered\r\n   concatenation of the produced tokens, as described in Section 3.1.\r\n\r\n\r\n", "notes": "The key length for AES-CBC-128 is 128 bit (16 byte). The specified \r\nstring has a length of 15 bytes (and thus, cannot be used as the key).\r\n\r\nThis error is both in A.1. and A.2.\r\n\r\nThe corrected text above is a complete replacement (supplied by the Author) for \r\nAppendix A, with corrected results.", "submit_date": "2014-08-17", "submitter_name": "Sven Herzberg", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4086", "doc-id": "RFC7305", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "that come to mind being IPv6 [RFC2480]", "correct_text": "that come to mind being IPv6 [RFC2460]", "notes": "Correct RFC number in the reference.", "submit_date": "2014-08-18", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Russ Housley", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4087", "doc-id": "RFC4659", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "No \"updates\" metadata reference to update RFC4364", "correct_text": "This document updates RFC4364 (and associated metadata links)", "notes": "RFC4659 provides an extension to the standard defined in RFC4364 to add IPv6 support to a standard that was originally IPv4-only. This metadata link will make it clearer for implementers that both standards are necessary for a full implementation.\n --VERIFIER NOTES-- \nConsidering the definition of \"updates\", the normal terms of an errata report, and the discussion on the Bess mailing list I am rejecting this. \r\n\r\nThis should not be construed as meaning that IPv6 support is not critically important: BGP/MPLS VPNs should, of course, be fully functional in IPv6 networks.", "submit_date": "2014-08-18", "submitter_name": "Wesley George", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4088", "doc-id": "RFC1027", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "The gateway can then respond for host B,\r\n    saying that the network address for host B is that of the gateway\r\n    itself.", "correct_text": "The gateway can then respond for host A,\r\n    saying that the network address for host B is that of the gateway\r\n    itself.", "notes": "I'm a bit confused about the sentence :) I think there should be \"A\" instead of \"B\". Next phrase says that host A sees a reply message from gateway, therefore gateway have to send that reply message to A in the previous sentence.\n --VERIFIER NOTES-- \n   Since A and B are on separate networks, the gateway responds *on behalf of host B*.", "submit_date": "2014-08-19", "submitter_name": "Sergey Yarin", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4269", "doc-id": "RFC1034", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "The organization of the domain system derives from some assumptions\r\nabout the needs and usage patterns of its user community and is designed\r\nto avoid many of the the complicated problems found in general purpose\r\ndatabase systems.", "correct_text": "The organization of the domain system derives from some assumptions\r\nabout the needs and usage patterns of its user community and is designed\r\nto avoid many of the complicated problems found in general purpose\r\ndatabase systems.", "notes": "Just a duplicate \"the\".", "submit_date": "2015-02-12", "submitter_name": "Jean-Philippe Paradis", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8073", "doc-id": "RFC8639", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "identity configurable-encoding {\r\n    description\r\n      \"If a transport identity derives from this identity, it means\r\n       that it supports configurable encodings.  An example of a\r\n       configurable encoding might be a new identity such as", "correct_text": "identity configurable-encoding {\r\n    base transport;\r\n    description\r\n      \"If a transport identity derives from this identity, it means\r\n       that it supports configurable encodings.  An example of a\r\n       configurable encoding might be a new identity such as", "notes": "This identity is incorrectly located in the section 'identities for encodings'\r\nIt is actually an identity for the 'transport' leaf.\r\nThe base is missing making it incorrect\r\n(page 44)\r\n\r\nVerifier Note: The configurable-encoding identity is intentionally designed as a capability marker (mixin), not a subtype of transport. Transport identities that support configurable encodings should derive from both transport and configurable-encoding. The when condition on the encoding leaf functions correctly with this design. Appendix A demonstrates the valid case of a transport that does not support configurable encodings. Adding base transport to configurable-encoding would change the semantics by making any identity derived from it transitively a transport, which is not the intent.", "submit_date": "2024-08-11", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-05-26 22:44:03"}, {"errata_id": "4077", "doc-id": "RFC2865", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "      Response Authenticator\r\n\r\n         The value of the Authenticator field in Access-Accept, Access-\r\n         Reject, and Access-Challenge packets is called the Response\r\n         Authenticator, and contains a one-way MD5 hash calculated over\r\n         a stream of octets consisting of: the RADIUS packet, beginning\r\n         with the Code field, including the Identifier, the Length, the\r\n         Request Authenticator field from the Access-Request packet, and\r\n         the response Attributes, followed by the shared secret.  That\r\n         is, ResponseAuth =\r\n         MD5(Code+ID+Length+RequestAuth+Attributes+Secret) where +\r\n         denotes concatenation.\r\n", "correct_text": "      Response Authenticator\r\n\r\n         The value of the Authenticator field in Access-Accept, Access-\r\n         Reject, and Access-Challenge packets is called the Response\r\n         Authenticator, and contains a one-way MD5 hash calculated over\r\n         a stream of octets consisting of: the response Code field, the\r\n         Identifier, the response Length, the Request Authenticator, the\r\n         response Attributes, and finally the shared secret. \r\n         That is, ResponseAuth =\r\n         MD5(Code+ID+Length+RequestAuth+Attributes+Secret) where +\r\n         denotes concatenation.\r\n", "notes": "This sentence fragment \"[...] consisting of: the RADIUS packet, [...]\" tends to imply one is considering either the Access-Request packet, or the reply packet being under construction.\r\n\r\nBut this is inconsistent with the idea of having the the MD5 hash calculated over both the Request Authenticator and the response Attributes...\n --VERIFIER NOTES-- \nAs discussed with the AAA doctors", "submit_date": "2014-08-10", "submitter_name": "Axel Luttgens", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4078", "doc-id": "RFC4210", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.4", "orig_text": "     CertOrEncCert ::= CHOICE {\r\n         certificate     [0] Certificate,\r\n         encryptedCert   [1] EncryptedValue\r\n     }", "correct_text": "     CertOrEncCert ::= CHOICE {\r\n         certificate     [0] CMPCertificate,\r\n         encryptedCert   [1] EncryptedValue\r\n     }", "notes": "The definition of CertOrEncCert in Section 5.3.4 and Appendix F of CertOrEncCert differs.\r\n\r\nThis is a change that makes no difference on the wire.  This is the same issue as errata 3949.", "submit_date": "2014-08-11", "submitter_name": "Lijun Liao", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4079", "doc-id": "RFC5321", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3.2.", "orig_text": "      DATA\r\n\r\n         I: 354 -> data -> S: 250\r\n\r\n                           E: 552, 554, 451, 452\r\n\r\n                           E: 450, 550 (rejections for policy reasons)\r\n\r\n         E: 503, 554\r\n", "correct_text": "      DATA\r\n\r\n         I: 354 -> data -> S: 250\r\n\r\n                           E: 552, 554, 451, 452\r\n\r\n                           E: 450, 550 (rejections for policy reasons)\r\n\r\n         E: 451, 503, 554\r\n", "notes": "\"E: 451\" after DATA exists in section 4.3.2 of RFC 2821:\r\n\r\n   DATA\r\n      I: 354 -> data -> S: 250\r\n                        E: 552, 554, 451, 452\r\n      E: 451, 554, 503\n --VERIFIER NOTES-- \nAs discussed with the reporter: As far as we can tell, it was the intention to remove 451 in the transition from 2821 to 5321. This is not an error in the document. Error codes can be used by extensions without an update to 5321.", "submit_date": "2014-08-12", "submitter_name": "Sergey Afonin", "verifier_id": "", "verifier_name": "Pete Resnick", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4493", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5", "orig_text": "      Message Header Error subcodes:\r\n\r\n               1 - Connection Not Synchronized.\r\n               2 - Bad Message Length.\r\n               3 - Bad Message Type.\r\n\r\n      OPEN Message Error subcodes:\r\n\r\n               1 - Unsupported Version Number.\r\n               2 - Bad Peer AS.\r\n               3 - Bad BGP Identifier.\r\n               4 - Unsupported Optional Parameter.\r\n               5 - [Deprecated - see Appendix A].\r\n               6 - Unacceptable Hold Time.\r\n\r\n      UPDATE Message Error subcodes:\r\n\r\n               1 - Malformed Attribute List.\r\n               2 - Unrecognized Well-known Attribute.\r\n               3 - Missing Well-known Attribute.\r\n               4 - Attribute Flags Error.\r\n               5 - Attribute Length Error.\r\n               6 - Invalid ORIGIN Attribute.\r\n               7 - [Deprecated - see Appendix A].\r\n               8 - Invalid NEXT_HOP Attribute.\r\n               9 - Optional Attribute Error.\r\n              10 - Invalid Network Field.\r\n              11 - Malformed AS_PATH.", "correct_text": "      Message Header Error subcodes:\r\n\r\n               0 - Unspecific.\r\n               1 - Connection Not Synchronized.\r\n               2 - Bad Message Length.\r\n               3 - Bad Message Type.\r\n\r\n      OPEN Message Error subcodes:\r\n\r\n               0 - Unspecific.\r\n               1 - Unsupported Version Number.\r\n               2 - Bad Peer AS.\r\n               3 - Bad BGP Identifier.\r\n               4 - Unsupported Optional Parameter.\r\n               5 - [Deprecated - see Appendix A].\r\n               6 - Unacceptable Hold Time.\r\n\r\n      UPDATE Message Error subcodes:\r\n\r\n               0 - Unspecific.\r\n               1 - Malformed Attribute List.\r\n               2 - Unrecognized Well-known Attribute.\r\n               3 - Missing Well-known Attribute.\r\n               4 - Attribute Flags Error.\r\n               5 - Attribute Length Error.\r\n               6 - Invalid ORIGIN Attribute.\r\n               7 - [Deprecated - see Appendix A].\r\n               8 - Invalid NEXT_HOP Attribute.\r\n               9 - Optional Attribute Error.\r\n              10 - Invalid Network Field.\r\n              11 - Malformed AS_PATH.", "notes": "RFC 4271 defines a use and a name for Error subcode 0:\r\n- \u00a74.5 (any error code): \r\n         If no appropriate Error Subcode is defined, then a zero\r\n         (Unspecific) value is used for the Error Subcode field.\r\n\r\n- \u00a76.2 (OPEN error code): \r\n   If one of the Optional Parameters in the OPEN message is recognized,\r\n   but is malformed, then the Error Subcode MUST be set to 0\r\n   (Unspecific).\r\n\r\nThe \"IANA Considerations\" section would also need to be updated \r\naccordingly (says \"0 Reserved\u201d).  However, IANA has corrected the \r\ncorresponding registry at http://www.iana.org/assignments/bgp-parameters.\r\n", "submit_date": "2015-10-06", "submitter_name": "Bruno Decraene", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4494", "doc-id": "RFC6274", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "In Figure 3, an attacker sends ...", "correct_text": "In Figure 5, an attacker sends ...", "notes": "Text immediately below Figure 5 incorrectly references to incorrect figure number 3.", "submit_date": "2015-10-06", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4495", "doc-id": "RFC7616", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.9.1.", "orig_text": "   Both client and\r\n   server know that the username for this document is \"Mufasa\" and the\r\n   password is \"Circle of Life\" (with one space between each of the\r\n   three words).", "correct_text": "   Both client and\r\n   server know that the username for this document is \"Mufasa\" and the \r\n   password is \"Circle of Life\" (with one space between \r\n   each of the three words and non-capital o in word of).", "notes": "In RFC 2617, the password was \"Circle Of Life\" with capital O in the word \"Of\". Also, RFC 7616 section 3.4.5 mentions the password \"Circle Of Life\" with capital O in the word \"Of\". It can be difficult to notice a non-capital o from an example password as it is elsewhere capital O.", "submit_date": "2015-10-09", "submitter_name": "Tuomo Untinen", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4496", "doc-id": "RFC4271", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.1.1", "orig_text": "... If the return value indicates the route is\r\n      ineligible, the route MAY NOT serve as an input to the next phase\r\n      of route selection; ...", "correct_text": "... If the return value indicates the route is\r\n      ineligible, the route MUST NOT serve as an input to the next phase\r\n      of route selection; ...", "notes": "RFC 2119 does not define special word MAY NOT. Obviously, ineligible route must not be used in route selection.\r\n====", "submit_date": "2015-10-10", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8869", "doc-id": "RFC9651", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "An Item can be an Integer (Section 3.3.1), a Decimal (Section 3.3.2),\r\n   a String (Section 3.3.3), a Token (Section 3.3.4), a Byte Sequence\r\n   (Section 3.3.5), a Boolean (Section 3.3.6), or a Date\r\n   (Section 3.3.7).  It can have associated parameters (Section 3.1.2).", "correct_text": "An Item can be an Integer (Section 3.3.1), a Decimal (Section 3.3.2),\r\n   a String (Section 3.3.3), a Token (Section 3.3.4), a Byte Sequence\r\n   (Section 3.3.5), a Boolean (Section 3.3.6), a Date\r\n   (Section 3.3.7), or a Display String (Section 3.3.8).  It can have\r\n   associated parameters (Section 3.1.2).", "notes": "Display String missing.", "submit_date": "2026-04-06", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Mike Bishop", "update_date": "2026-05-27 03:58:47"}, {"errata_id": "4080", "doc-id": "RFC6487", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.1", "orig_text": "This field MAY be omitted.  If present, the value of this field\r\nSHOULD be empty (i.e., NULL), in which case the CA MUST\r\ngenerate a subject name that is unique in the context of\r\ncertificates issued by this CA.  This field is allowed to be\r\nnon-empty only for a re-key/reissuance request, and only if the\r\nCA has adopted a policy (in its Certificate Practice Statement\r\n(CPS)) that permits reuse of names in these circumstances.", "correct_text": "This field\r\nSHOULD be empty (i.e., NULL), in which case the CA MUST\r\ngenerate a subject name that is unique in the context of\r\ncertificates issued by this CA.  This field is allowed to be\r\nnon-empty only for a re-key/reissuance request, and only if the\r\nCA has adopted a policy (in its Certificate Practice Statement\r\n(CPS)) that permits reuse of names in these circumstances.\r\n\r\n", "notes": "Submitted after consultation with the responsible AD and WG chairs.\r\n\r\nThe subject field included in the PKCS#10 request can't be omitted because the ASN.1 in RFC 2986 doesn\u2019t allow subject to be omitted - there\u2019s no \u201cOPTIONAL\u201d in the ASN.1:\r\n\r\nCertificationRequestInfo ::= SEQUENCE {\r\n       version       INTEGER { v1(0) } (v1,...),\r\n       subject       Name,\r\n       subjectPKInfo SubjectPublicKeyInfo{{ PKInfoAlgorithms }},\r\n       attributes    [0] Attributes{{ CRIAttributes }}\r\n  }\r\n\r\nIn other words, four fields are included in every certificate request.  If there\u2019s no subject field it\u2019s a NULL (see RFC5280 for omitting subjects) and if there\u2019s no attributes it\u2019s an empty sequence.  version and subjectPKInfo (subject public key information) are always present.", "submit_date": "2014-08-12", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4081", "doc-id": "RFC7208", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.4", "orig_text": "(Paragraph 2):  if supported, the 5.7.1 enhanced status code\r\n...\r\n\r\n       550 5.7.1 SPF MAIL FROM check failed:\r\n       550 5.7.1 The domain example.com explains:\r\n       550 5.7.1 Please see http://www.example.com/mailpolicy.html\r\n", "correct_text": "if supported, the 5.7.7 enhanced status code\r\n...\r\n\r\n       550 5.7.7 SPF MAIL FROM check failed:\r\n       550 5.7.7 The domain example.com explains:\r\n       550 5.7.7 Please see http://www.example.com/mailpolicy.html\r\n", "notes": "5.7.1 generally refers to messages refused due to content or LOCAL policies.\r\n5.7.7 refers to messages where there is an integrity problem.\r\n\r\n5.7.7 is a better description for rejecting an unauthorized message due to the application of automatic checking criterion set by remote validation.\r\n\r\nThe author of this errata notes that the IANA is showing a pending addition to the enhanced codes to add SPF-specific error code 5.7.23 (in lieu of 5.7.1 or 5.7.7), but currently sees no valid RFC proposing it.  The draft is located at: http://tools.ietf.org/html/draft-ietf-appsawg-email-auth-codes-07\n --VERIFIER NOTES-- \nThe code used was the clear choice of the working group, and can't be changed through the errata system.", "submit_date": "2014-08-13", "submitter_name": "D. Stussy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4082", "doc-id": "RFC7208", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.7", "orig_text": "...  If the message is rejected during the SMTP transaction for\r\nthis reason, the software SHOULD use an SMTP reply code of 550\r\nand, if supported, the 5.5.2 enhanced status code ...", "correct_text": "...  If the message is rejected during the SMTP transaction for\r\nthis reason, the software SHOULD use an SMTP reply code of 550\r\nand, if supported, the 5.7.8 enhanced status code ...", "notes": "5.5.2 refers to responses where there's an SMTP COMMAND syntax error.\r\n5.7.8 refers to messages where authentication credentials are invalid.\r\n\r\n5.7.8 is a better description for rejecting an unauthorized message due to the\r\napplication of invalid authentication credentials such as bad syntax in an SPF DNS record.\r\n\r\nThe author of this errata notes that the IANA is showing a pending addition to\r\nthe enhanced codes to add SPF-specific error code 5.7.24 (in lieu of 5.5.2 or\r\n5.7.8), but currently sees no valid RFC proposing it.  The draft is located at:\r\nhttp://tools.ietf.org/html/draft-ietf-appsawg-email-auth-codes-07\r\n\r\nThe use of 5.5.2 here is misleading since the source of the error is not the\r\nSMTP command stream.\n --VERIFIER NOTES-- \nThe code used was the clear choice of the working group, and can't be changed through the errata system.", "submit_date": "2014-08-13", "submitter_name": "D. Stussy", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4083", "doc-id": "RFC6944", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "N/A", "correct_text": "[RFC6605]   Hoffman, P. and W. Wijngaards, \"Elliptic Curve Digital Signature\r\n            Algorithm (DSA) for DNSSEC\", RFC 6605, April 2012.\r\n", "notes": "This Normative Reference is simply missing from the document, even though the algorithms from RFC 6605 are \"Recommended to Implement\" in RFC 6944.  (Cf. how RFC 5933 is referenced, even though its algorithms are merely optional.)", "submit_date": "2014-08-14", "submitter_name": "Bodo Moeller", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4084", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "13.2.2.4", "orig_text": "   If the dialog identifier in the 2xx response matches the dialog\r\n   identifier of an existing dialog, the dialog MUST be transitioned to\r\n   the \"confirmed\" state, and the route set for the dialog MUST be\r\n   recomputed based on the 2xx response using the procedures of Section\r\n   12.2.1.2.", "correct_text": "   If the dialog identifier in the 2xx response matches the dialog\r\n   identifier of an existing dialog, the dialog MUST be transitioned to\r\n   the \"confirmed\" state, and the route set for the dialog MUST be\r\n   recomputed based on the 2xx response using the procedures of Section\r\n   12.2.1.1.", "notes": "The procedures of recomputing the route set should refer to the Section 12.2.1.1, rather than Section 12.2.1.2. \r\n\r\nActually in Section 12.2.1.2, there is no procedure of computing route set. Instead, the related procedures can only be found in Section 12.2.1.1.\r\n\r\nTo avoid misleading, \"12.2.1.2\" here should be \"12.2.1.1\" instead.", "submit_date": "2014-08-15", "submitter_name": "Xing Lou Han", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 14:10:52"}, {"errata_id": "4859", "doc-id": "RFC7483", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "\"network\" :\r\n     {\r\n       \"objectClassName\" : \"ip network\",\r\n       \"handle\" : \"XXXX-RIR\",\r\n       \"startAddress\" : \"192.0.2.0\",\r\n       \"endAddress\" : \"192.0.2.255\",\r\n       \"ipVersion\" : \"v6\",", "correct_text": "\"network\" :\r\n     {\r\n       \"objectClassName\" : \"ip network\",\r\n       \"handle\" : \"XXXX-RIR\",\r\n       \"startAddress\" : \"192.0.2.0\",\r\n       \"endAddress\" : \"192.0.2.255\",\r\n       \"ipVersion\" : \"v4\",", "notes": "", "submit_date": "2016-11-10", "submitter_name": "Marcos Sanz", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4862", "doc-id": "RFC7265", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3.6.1", "orig_text": "   Example:\r\n\r\n   [\"attach\", {}, \"binary\", \"SGVsbG8gV29ybGQh\"]", "correct_text": "   Example:\r\n\r\n   [\"attach\", {\"encoding\": \"BASE64\"}, \"binary\", \"SGVsbG8gV29ybGQh\"]", "notes": "The ENCODING=BASE64 parameter must be preserved for BINARY values; no part of the RFC allows removing it.", "submit_date": "2016-11-10", "submitter_name": "Sean Bartell", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4094", "doc-id": "RFC2435", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "/*\r\n * Table K.1 from JPEG spec.\r\n */\r\nstatic const int jpeg_luma_quantizer[64] = {\r\n        16, 11, 10, 16, 24, 40, 51, 61,\r\n        12, 12, 14, 19, 26, 58, 60, 55,\r\n        14, 13, 16, 24, 40, 57, 69, 56,\r\n        14, 17, 22, 29, 51, 87, 80, 62,\r\n        18, 22, 37, 56, 68, 109, 103, 77,\r\n        24, 35, 55, 64, 81, 104, 113, 92,\r\n        49, 64, 78, 87, 103, 121, 120, 101,\r\n        72, 92, 95, 98, 112, 100, 103, 99\r\n};\r\n\r\n/*\r\n * Table K.2 from JPEG spec.\r\n */\r\nstatic const int jpeg_chroma_quantizer[64] = {\r\n        17, 18, 24, 47, 99, 99, 99, 99,\r\n        18, 21, 26, 66, 99, 99, 99, 99,\r\n        24, 26, 56, 99, 99, 99, 99, 99,\r\n        47, 66, 99, 99, 99, 99, 99, 99,\r\n        99, 99, 99, 99, 99, 99, 99, 99,\r\n        99, 99, 99, 99, 99, 99, 99, 99,\r\n        99, 99, 99, 99, 99, 99, 99, 99,\r\n        99, 99, 99, 99, 99, 99, 99, 99\r\n};", "correct_text": "/*\r\n * Table K.1 from JPEG spec.\r\n */\r\nstatic const int jpeg_luma_quantizer[64] = {\r\n           16, 11, 12, 14, 12, 10, 16, 14,\r\n           13, 14, 18, 17, 16, 19, 24, 40,\r\n           26, 24, 22, 22, 24, 49, 35, 37,\r\n           29, 40, 58, 51, 61, 60, 57, 51,\r\n           56, 55, 64, 72, 92, 78, 64, 68,\r\n           87, 69, 55, 56, 80, 109, 81, 87,\r\n           95, 98, 103, 104, 103, 62, 77, 113,\r\n           121, 112, 100, 120, 92, 101, 103, 99,\r\n};\r\n\r\n/*\r\n * Table K.2 from JPEG spec.\r\n */\r\nstatic const int jpeg_chroma_quantizer[64] = {\r\n           17, 18, 18, 24, 21, 24, 47, 26,\r\n           26, 47, 99, 66, 56, 66, 99, 99,\r\n           99, 99, 99, 99, 99, 99, 99, 99,\r\n           99, 99, 99, 99, 99, 99, 99, 99,\r\n           99, 99, 99, 99, 99, 99, 99, 99,\r\n           99, 99, 99, 99, 99, 99, 99, 99,\r\n           99, 99, 99, 99, 99, 99, 99, 99,\r\n           99, 99, 99, 99, 99, 99, 99, 99\r\n};", "notes": "Luma and Chroma was not in Zig Zag order and Luma energy has been de-saturated.\n --VERIFIER NOTES-- \n  Rejected per discussion in avtcore ", "submit_date": "2014-09-04", "submitter_name": "Julius Richard Friedman", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4095", "doc-id": "RFC2435", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "int MakeHeaders(u_char *p, int type, int w, int h, u_char *lqt,\r\n                u_char *cqt, u_short dri)\r\n{\r\n        u_char *start = p;\r\n\r\n        /* convert from blocks to pixels */\r\n        w <<= 3;\r\n        h <<= 3;\r\n\r\n\r\n\r\nBerc, et. al.               Standards Track                    [Page 19]\r\n \r\nRFC 2435              RTP Payload Format for JPEG           October 1998\r\n\r\n\r\n        *p++ = 0xff;\r\n        *p++ = 0xd8;            /* SOI */\r\n\r\n        p = MakeQuantHeader(p, lqt, 0);\r\n        p = MakeQuantHeader(p, cqt, 1);\r\n\r\n        if (dri != 0)\r\n                p = MakeDRIHeader(p, dri);\r\n\r\n        *p++ = 0xff;\r\n        *p++ = 0xc0;            /* SOF */\r\n        *p++ = 0;               /* length msb */\r\n        *p++ = 17;              /* length lsb */\r\n        *p++ = 8;               /* 8-bit precision */\r\n        *p++ = h >> 8;          /* height msb */\r\n        *p++ = h;               /* height lsb */\r\n        *p++ = w >> 8;          /* width msb */\r\n        *p++ = w;               /* wudth lsb */\r\n        *p++ = 3;               /* number of components */\r\n        *p++ = 0;               /* comp 0 */\r\n        if (type == 0)\r\n                *p++ = 0x21;    /* hsamp = 2, vsamp = 1 */\r\n        else\r\n                *p++ = 0x22;    /* hsamp = 2, vsamp = 2 */\r\n        *p++ = 0;               /* quant table 0 */\r\n        *p++ = 1;               /* comp 1 */\r\n        *p++ = 0x11;            /* hsamp = 1, vsamp = 1 */\r\n        *p++ = 1;               /* quant table 1 */\r\n        *p++ = 2;               /* comp 2 */\r\n        *p++ = 0x11;            /* hsamp = 1, vsamp = 1 */\r\n        *p++ = 1;               /* quant table 1 */\r\n        p = MakeHuffmanHeader(p, lum_dc_codelens,\r\n                              sizeof(lum_dc_codelens),\r\n                              lum_dc_symbols,\r\n                              sizeof(lum_dc_symbols), 0, 0);\r\n        p = MakeHuffmanHeader(p, lum_ac_codelens,\r\n                              sizeof(lum_ac_codelens),\r\n                              lum_ac_symbols,\r\n                              sizeof(lum_ac_symbols), 0, 1);\r\n        p = MakeHuffmanHeader(p, chm_dc_codelens,\r\n                              sizeof(chm_dc_codelens),\r\n                              chm_dc_symbols,\r\n                              sizeof(chm_dc_symbols), 1, 0);\r\n        p = MakeHuffmanHeader(p, chm_ac_codelens,\r\n                              sizeof(chm_ac_codelens),\r\n                              chm_ac_symbols,\r\n                              sizeof(chm_ac_symbols), 1, 1);\r\n\r\n\r\n\r\n\r\nBerc, et. al.               Standards Track                    [Page 20]\r\n \r\nRFC 2435              RTP Payload Format for JPEG           October 1998\r\n\r\n\r\n        *p++ = 0xff;\r\n        *p++ = 0xda;            /* SOS */\r\n        *p++ = 0;               /* length msb */\r\n        *p++ = 12;              /* length lsb */\r\n        *p++ = 3;               /* 3 components */\r\n        *p++ = 0;               /* comp 0 */\r\n        *p++ = 0;               /* huffman table 0 */\r\n        *p++ = 1;               /* comp 1 */\r\n        *p++ = 0x11;            /* huffman table 1 */\r\n        *p++ = 2;               /* comp 2 */\r\n        *p++ = 0x11;            /* huffman table 1 */\r\n        *p++ = 0;               /* first DCT coeff */\r\n        *p++ = 63;              /* last DCT coeff */\r\n        *p++ = 0;               /* sucessive approx. */\r\n\r\n        return (p - start);\r\n};\r\n", "correct_text": "int MakeHeaders(u_char *p, int type, int w, int h, u_char *lqt,\r\n                u_char *cqt, u_short dri)\r\n{\r\n        u_char *start = p;\r\n\r\n        /* convert from blocks to pixels */\r\n        w <<= 3;\r\n        h <<= 3;\r\n        *p++ = 0xff;\r\n        *p++ = 0xd8;            /* SOI */\r\n\r\n        p = MakeQuantHeader(p, lqt, 0);\r\n        if(cqt != NULL) p = MakeQuantHeader(p, cqt, 1);\r\n\r\n        if (dri != 0)\r\n                p = MakeDRIHeader(p, dri);\r\n\r\n        *p++ = 0xff;\r\n        *p++ = 0xc0;            /* SOF */\r\n        *p++ = 0;               /* length msb */\r\n        *p++ = 17;              /* length lsb */\r\n        *p++ = 8;               /* 8-bit precision */\r\n        *p++ = h >> 8;          /* height msb */\r\n        *p++ = h;               /* height lsb */\r\n        *p++ = w >> 8;          /* width msb */\r\n        *p++ = w;               /* wudth lsb */\r\n        *p++ = 3;               /* number of components */\r\n        *p++ = 1;               /* comp 1 */\r\n        if (type == 0)\r\n                *p++ = 0x21;    /* hsamp = 2, vsamp = 1 */\r\n        else\r\n                *p++ = 0x22;    /* hsamp = 2, vsamp = 2 */\r\n        *p++ = 0;               /* quant table 0 */\r\n        *p++ = 1;               /* comp 1 */\r\n        *p++ = 0x11;            /* hsamp = 1, vsamp = 1 */\r\n        *p++ = 1;               /* quant table 1 */\r\n        *p++ = 2;               /* comp 2 */\r\n        *p++ = 0x11;            /* hsamp = 1, vsamp = 1 */\r\n        *p++ = 1;               /* quant table 1 */\r\n        p = MakeHuffmanHeader(p, lum_dc_codelens,\r\n                              sizeof(lum_dc_codelens),\r\n                              lum_dc_symbols,\r\n                              sizeof(lum_dc_symbols), 0, 0);\r\n        p = MakeHuffmanHeader(p, lum_ac_codelens,\r\n                              sizeof(lum_ac_codelens),\r\n                              lum_ac_symbols,\r\n                              sizeof(lum_ac_symbols), 0, 1);\r\n        if(cqt != NULL)\r\n        {\r\n        p = MakeHuffmanHeader(p, chm_dc_codelens,\r\n                              sizeof(chm_dc_codelens),\r\n                              chm_dc_symbols,\r\n                              sizeof(chm_dc_symbols), 1, 0);\r\n        p = MakeHuffmanHeader(p, chm_ac_codelens,\r\n                              sizeof(chm_ac_codelens),\r\n                              chm_ac_symbols,\r\n                              sizeof(chm_ac_symbols), 1, 1);\r\n       }\r\n\r\n\r\n\r\n\r\nBerc, et. al.               Standards Track                    [Page 20]\r\n \r\nRFC 2435              RTP Payload Format for JPEG           October 1998\r\n\r\n\r\n        *p++ = 0xff;\r\n        *p++ = 0xda;            /* SOS */\r\n        *p++ = 0;               /* length msb */\r\n        *p++ = cqt != NULL ? 0x12 : 0x0b;/* length lsb */\r\n        *p++ = cqt != NULL ? 0x03 : 0x01;/* 3 components */\r\n        *p++ = 0;               /* comp 0 */\r\n        *p++ = 0;               /* huffman table 0 */\r\n        *p++ = 0x01;               /* comp 1 */\r\n        *p++ = cqt != NULL ? 0x11 : 0x00;/* huffman table 1 */\r\n        if(cqt != NULL) *p++ = 2;/* comp 2 */\r\n        *p++ = cqt != NULL ? 0x11 : 0x00;/* huffman table 1 */\r\n        *p++ = 0;               /* first DCT coeff */\r\n        *p++ = 63;              /* last DCT coeff */\r\n        *p++ = 0;               /* sucessive approx. */\r\n\r\n        return (p - start);\r\n};\r\n", "notes": "Did not take into account cases with only 1 component was used.\n --VERIFIER NOTES-- \n   Rejected due to discussion in avtcore", "submit_date": "2014-09-04", "submitter_name": "Julius Richard Friedman", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4096", "doc-id": "RFC2435", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Discussion", "orig_text": " types  component samp. fact. samp. fact. table number\r\n         +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n         |       |  1 (Y)  |     2     |     1     |     0     |\r\n         | 0, 64 |  2 (U)  |     1     |     1     |     1     |\r\n         |       |  3 (V)  |     1     |     1     |     1     |\r\n         +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n         |       |  1 (Y)  |     2     |     2     |     0     |\r\n         | 1, 65 |  2 (U)  |     1     |     1     |     1     |\r\n         |       |  3 (V)  |     1     |     1     |     1     |\r\n         +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "TO BE DETERMINED", "notes": "types  component samp. fact. samp. fact. table number\r\n        FROM StartOf Frame (0xFFC0)\r\n\r\nRead Nf - Number of image components in frame\r\n\r\nif(Nf > 1) \r\n\r\nRead Each Component\r\n\r\n          0 1 2 3 4 5 6 7 \r\n         +-+-+-+-+-+-+-+-+\r\n         |   H   |   V   |\r\n         +-+-+-+-+-+-+-+-+\r\n\r\nH: Horizontal sampling factor \u2013 Specifies the relationship between the component horizontal dimension\r\nand maximum image dimension X (see Jpeg Spec A.1.1); also specifies the number of horizontal data units of component\r\nCi in each MCU, when more than one component is encoded in a scan.\r\nVi: Vertical sampling factor \u2013 Specifies the relationship between the component vertical dimension and\r\nmaximum image dimension Y (see Jpeg Spec A.1.1); also specifies the number of vertical data units of component Ci in\r\neach MCU, when more than one component is encoded in a scan.\r\nTqi: Implied from the position in parsing\n --VERIFIER NOTES-- \n   Rejected based on discussion in avtcore. (And also because the errata does not contain a proposed change to the text).", "submit_date": "2014-09-04", "submitter_name": "Julius Richard Friedman", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4243", "doc-id": "RFC6351", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   Examples:\r\n\r\n     <x-my-prop>\r\n       <parameters>\r\n         <pref><integer>1</integer></pref>\r\n       </parameters>\r\n       <text>value goes here</text>\r\n     </x-my-prop>\r\n\r\n     <ext:my-prop\r\n         ext:xmlns=\"http://example.com/extensions/my-vcard\">\r\n       <parameters>\r\n         <pref><integer>1</integer></pref>\r\n       </parameters>                 <!-- Core vCard elements  -->\r\n       <text>value goes here</text>  <!-- are still accessible -->\r\n     </ext:my-prop>", "correct_text": "   Examples:\r\n\r\n     <x-my-prop>\r\n       <parameters>\r\n         <pref><integer>1</integer></pref>\r\n       </parameters>\r\n       <text>value goes here</text>\r\n     </x-my-prop>\r\n\r\n     <ext:my-prop\r\n         xmlns:ext=\"http://example.com/extensions/my-vcard\">\r\n       <parameters>\r\n         <pref><integer>1</integer></pref>\r\n       </parameters>                 <!-- Core vCard elements  -->\r\n       <text>value goes here</text>  <!-- are still accessible -->\r\n     </ext:my-prop>", "notes": "The correct declaration of the \"ext\" namespace is \"xmlns:ext\", not \"ext:xmlns\".", "submit_date": "2015-01-27", "submitter_name": "Ivan Enderlin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4500", "doc-id": "RFC3107", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "   A BGP speaker that is capable of handling multiple routes to a\r\n   destination (as described above) should use the Capabilities Optional\r\n   Parameter, as defined in [BGP-CAP], to inform its peers about this\r\n   capability.  The value of this capability is 4.", "correct_text": "   A BGP speaker that is capable of handling multiple routes to a\r\n   destination (as described above) should use the Capabilities Optional\r\n   Parameter, as defined in [BGP-CAP], to inform its peers about this\r\n   capability.  This capability is advertised using the Capability Code\r\n   4 and Capability Length 0.", "notes": "To remove confusion what word value means - Capability Value or value of Capability Code.\r\nAlso, format of multiple routes capability is not described, so length = 0 is assumed.\n --VERIFIER NOTES-- \n   ", "submit_date": "2015-10-13", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4863", "doc-id": "RFC4752", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1 - 3.3", "orig_text": "conf_flag", "correct_text": "conf_req_flag", "notes": "The three sections 3.1, 3.2 and 3.3 refer to a flag \"conf_flag\" which does not exist in the GSS_Wrap call as specified in RFC 2743 (https://tools.ietf.org/html/rfc2743#page-65). The correct name is \"conf_req_flag\".\r\n\r\nI also looked in the previous version of RFC 2743 -> RFC 2078 but the same applies there.", "submit_date": "2016-11-13", "submitter_name": "Lars Francke", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4097", "doc-id": "RFC2435", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1.5", "orig_text": "3.1.5.  Width: 8 bits\r\n\r\n   This field encodes the width of the image in 8-pixel multiples (e.g.,\r\n   a width of 40 denotes an image 320 pixels wide).  The maximum width\r\n   is 2040 pixels.\r\n\r\n3.1.6.  Height: 8 bits\r\n\r\n   This field encodes the height of the image in 8-pixel multiples\r\n   (e.g., a height of 30 denotes an image 240 pixels tall). When\r\n   encoding interlaced video, this is the height of a video field, since\r\n   fields are individually JPEG encoded. The maximum height is 65535\r\n   pixels.", "correct_text": "3.1.5.  Width: 8 bits\r\n\r\n   This field encodes the width of the image in 8-pixel multiples (e.g.,\r\n   a width of 40 denotes an image 320 pixels wide).  The maximum width\r\n   is 2040 pixels.\r\n\r\n3.1.6.  Height: 8 bits\r\n\r\n   This field encodes the height of the image in 8-pixel multiples\r\n   (e.g., a height of 30 denotes an image 240 pixels tall). When\r\n   encoding interlaced video, this is the height of a video field, since\r\n   fields are individually JPEG encoded. The maximum height is 65535\r\n   pixels.", "notes": "Use a divisor of 256 to determine the height, where 8 / 256 = 32.\r\n\r\nEnsure FragmentOffset does not exceed 2^24, if it does then use 2^24 - value)\n --VERIFIER NOTES-- \n   Rejected based on discussion in avtcore", "submit_date": "2014-09-04", "submitter_name": "Julius Richard Friedman", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4098", "doc-id": "RFC6621", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "This distributed relay set selection technique has been shown to \r\napproximate a minimal connected dominating set (MCDS) in [JLMV02].", "correct_text": "This distributed relay set selection technique has been shown to \r\napproximate a minimum connected dominating set (MCDS) in [JLMV02].", "notes": "Minimum connected dominating set [1] is the established terminology and \r\nminimal was an editorial error.\r\n\r\n[1] Sampathkumar, E.; Walikar, HB (1979), \r\n\"The connected domination number of a graph\", J. Math. Phys. Sci 13 (6): 607\u2013613.", "submit_date": "2014-09-04", "submitter_name": "Joe Macker", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4099", "doc-id": "RFC5531", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "This document describes the Open Network Computing (ONC) Remote\r\nProcedure Call (RPC) version 2 protocol as it is currently deployed\r\nand accepted.", "correct_text": "", "notes": "The document doesn't describe UDP and TCP port number 111, which is used to make initial connection for RCP services discovery and port mapping. Port mapping is an essential part of protocol without which ONC RPC services can't work.\r\n\r\nRFC doesn't describe 111 is hardcoded number or can be changed. Doesn't say that servers typically listen on both UDP and TCP 111 (Linux nfs-kernel-server).\r\n --VERIFIER NOTES-- \r\nThis RFC is solely describing the RPC protocol and not the underlying transport that might be used. ", "submit_date": "2014-09-05", "submitter_name": "anatoly techtonik", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4100", "doc-id": "RFC2910", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.1.2", "orig_text": "   IPP Printers SHOULD support Transport Layer Security (TLS) [RFC2246]\r\n   for Server Authentication and Operation Privacy. IPP Printers MAY\r\n   also support TLS for Client Authentication.  If an IPP Printer\r\n   supports TLS, it MUST support the TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA\r\n   cipher suite as mandated by RFC 2246 [RFC2246].  All other cipher\r\n   suites are OPTIONAL.  An IPP Printer MAY support Basic Authentication\r\n   (described in HTTP/1.1 [RFC2617])  for Client Authentication if the\r\n   channel is secure. TLS with the above mandated cipher suite can\r\n   provide such a secure channel.\r\n\r\n   If a IPP client supports TLS, it MUST support the\r\n   TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA cipher suite as mandated by RFC\r\n   2246 [RFC2246].  All other cipher suites are OPTIONAL.\r\n", "correct_text": "   IPP Printers SHOULD support Transport Layer Security (TLS) [RFC2246]\r\n   for Server Authentication and Operation Privacy. IPP Printers MAY\r\n   also support TLS for Client Authentication.  An IPP Printer MAY\r\n   support Basic Authentication (described in HTTP/1.1 [RFC2617]) for\r\n   Client Authentication if the channel is secure.\r\n", "notes": "Per the PWG IPP WG discussions at the August 2014 F2F, any mention of cipher suites in RFC 2910 is inappropriate. In particular, the cipher suite mentioned is no longer mandatory in TLS/1.2.\r\n\r\n----- Verifier notes -----\r\nWhile the cipher suites listed were correct when RFC 2910 was written, the list of required/recommended cipher suites has changed since then, to the point that some what were required at the time are specifically *not* recommended now.  For that reason, RFC 2910 is in need of an update.  This errata report will serve to note that, until such time as the update is done and a new RFC is published.", "submit_date": "2014-09-05", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7071", "doc-id": "RFC8994", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2.2", "orig_text": "   The acp-node-name in Figure 2 is the ABNF definition (\"Augmented BNF\r\n   for Syntax Specifications: ABNF\" [RFC5234]) of the ACP Node Name.  An\r\n   ACP certificate MUST carry this information.  It MUST contain an\r\n   otherName field in the X.509 Subject Alternative Name extension, and\r\n   the otherName MUST contain an AcpNodeName as described in\r\n   Section 6.2.2.", "correct_text": "   The acp-node-name in Figure 2 is the ABNF definition (\"Augmented BNF\r\n   for Syntax Specifications: ABNF\" [RFC5234]) of the ACP Node Name.  An\r\n   ACP certificate MUST carry this information.  It MUST contain an\r\n   otherName field in the X.509 Subject Alternative Name extension, and\r\n   the otherName MUST contain an AcpNodeName as described in\r\n   Section 6.2.2.1.", "notes": "David von Oheimb discovered [1] that section 6.2.2 is self-referential and incorrect regarding the section reference to the ASN.1 module.\r\n\r\nThe correct section number is 6.2.2.1.\r\n\r\n[1] https://mailarchive.ietf.org/arch/msg/spasm/-ymZk94KFzzolZSsJh6HONnypXQ/", "submit_date": "2022-08-04", "submitter_name": "Corey Bonnell", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 10:52:26"}, {"errata_id": "4753", "doc-id": "RFC793", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1.5", "orig_text": "A pair of sockets uniquely identifies each connection.\r\nThat is, a socket may be simultaneously used in multiple\r\nconnections", "correct_text": "A pair of sockets uniquely identifies each connection. Sockets can be\r\nclassified into client and server sockets. Typically a server socket \r\nmay be simultaneously used in multiple connections.", "notes": "TCP is connection oriented therefore when we say \"sockets used in multiple connections\" it implies that the context is TCP.  Considering their use in TCP,  though a single client socket can be implemented in a way to multiplex it for connection with multiple server sockets and exchange different SYN segments but then its  same what a server process listening for connections on server port does typically. \r\n\r\nI feel classification of sockets here is vital to facilitate understand implicitly that in what use-case can a socket be typically multiplexed while still keeping generality of the statement.\n --VERIFIER NOTES-- \n   TCP sockets don't have a client/server concept therefore this clarification is inappropriate.", "submit_date": "2016-07-30", "submitter_name": "Sanjeev Ranot", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4103", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "\r\n   [p. 15]            DTLS 1.2 server implementations SHOULD use DTLS\r\n   version 1.0 regardless of the version of TLS that is expected to be\r\n   negotiated.\r\n\r\n   [p. 16]                                The server MUST use the same\r\n   version number in the HelloVerifyRequest that it would use when\r\n   sending a ServerHello.\r\n\r\n   [p. 15]      DTLS 1.2 and 1.0 clients MUST use the version solely to\r\n   indicate packet formatting (which is the same in both DTLS 1.2 and\r\n   1.0) and not as part of version negotiation.  In particular, DTLS 1.2\r\n   clients MUST NOT assume that because the server uses version 1.0 in\r\n   the HelloVerifyRequest that the server is not DTLS 1.2 or that it\r\n   will eventually negotiate DTLS 1.0 rather than DTLS 1.2.\r\n\r\n   [p. 16]                 Upon receipt of the ServerHello, the client\r\n   MUST verify that the server version values match.\r\n", "correct_text": "   [p. 15]            DTLS 1.2 server implementations MAY use DTLS\r\n   version 1.0 regardless of the version of TLS that is expected to be\r\n   negotiated, or the version that is expected to be negotiated.\r\n\r\n   [p. 15]      DTLS 1.2 and 1.0 clients MUST use the version solely to\r\n   indicate packet formatting (which is the same in both DTLS 1.2 and\r\n   1.0) and not as part of version negotiation.  In particular, DTLS 1.2\r\n   clients MUST NOT assume that because the server uses version 1.0 in\r\n   the HelloVerifyRequest that the server is not DTLS 1.2 or that it\r\n   will eventually negotiate DTLS 1.0 rather than DTLS 1.2.\r\n\r\n   [p. 16] [Delete text relating to HelloVerifyRequest.server_version]\r\n", "notes": "The statements on the bottom of page 15 and on the top of page 16 are mutually contradictory. It looks like the statements on page 16 were copied from RFC 4347, but the intention was to replace them with the version from page 15 in this revision of the standard.", "submit_date": "2014-09-08", "submitter_name": "Manuel P\u00e9gouri\u00e9-Gonnard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4104", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   [Page 8]                                                   In order\r\n   to ensure that any given sequence/epoch pair is unique,\r\n   implementations MUST NOT allow the same epoch value to be reused\r\n   within two times the TCP maximum segment lifetime.  In practice, TLS\r\n   implementations rarely rehandshake; therefore, we do not expect this\r\n   to be a problem.\r\n", "correct_text": "[Delete these two sentences.]", "notes": "Page 9 starts with: \"Similarly, implementations MUST NOT allow the epoch to wrap\" which is a stronger requirement (not allowing to wrap at all vs not allowing reuse within some period), so the weaker requirement should be eliminated to avoid confusion.", "submit_date": "2014-09-08", "submitter_name": "Manuel P\u00e9gouri\u00e9-Gonnard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4105", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.1.2.1", "orig_text": "                                                                      In\r\n   DTLS, the receiving implementation MAY simply discard the offending\r\n   record and continue with the connection.  This change is possible\r\n   because DTLS records are not dependent on each other in the way that\r\n   TLS records are.\r\n\r\n   In general, DTLS implementations SHOULD silently discard records with\r\n   bad MACs or that are otherwise invalid.  They MAY log an error.  If a\r\n   DTLS implementation chooses to generate an alert when it receives a\r\n   message with an invalid MAC, it MUST generate a bad_record_mac alert\r\n   with level fatal and terminate its connection state.  Note that\r\n   because errors do not cause connection termination, DTLS stacks are\r\n   more efficient error type oracles than TLS stacks.  Thus, it is\r\n   especially important that the advice in Section 6.2.3.2 of [TLS12] be", "correct_text": "See section 4.1.2.7.\r\n[And merge the last two sentences above in section 4.1.2.7.]\r\n", "notes": "Some text is duplicated between 4.1.2.1 and 4.1.2.7, which my cause confusion or give rise to diverging updates in future revisions of this document.", "submit_date": "2014-09-08", "submitter_name": "Manuel P\u00e9gouri\u00e9-Gonnard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4106", "doc-id": "RFC7260", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5.2", "orig_text": "   IANA has created the \"OAM Sub-TLVs\" sub-registry of the \"RSVP-TE OAM\r\n   Configuration Registry\" as follows:\r\n\r\n   Range       | Note                         | Registration Procedures\r\n   ------------+------------------------------|------------------------\r\n   0-31        | Generic Sub-TLVs             | IETF Review\r\n   32-65534    | Technology-specific Sub-TLVs | IETF Review\r\n   65535-65536 | Experimental Sub-TLVs        | Reserved for\r\n               |                              |   Experimental Use\r\n\r\n   IANA has populated the registry as follows:\r\n\r\n      Sub-TLV Type | Description                   | Reference\r\n      -------------+-------------------------------+----------\r\n          0        | Reserved                      | [RFC7260]\r\n          1        | OAM Function Flags Sub-TLV    | [RFC7260]\r\n          2-65534  | Unassigned                    |\r\n      65535-65536  | Reserved for Experimental Use | [RFC7260]\r\n\r\n", "correct_text": "    IANA has created the \"OAM Sub-TLVs\" sub-registry of the \"RSVP-TE OAM\r\n    Configuration Registry\" as follows:\r\n\r\n    Range       | Note                         | Registration Procedures\r\n    ------------+------------------------------|------------------------\r\n    0-31        | Generic Sub-TLVs             | IETF Review\r\n    32-65533    | Technology-specific Sub-TLVs | IETF Review\r\n    65534-65535 | Experimental Sub-TLVs        | Reserved for\r\n                |                              |   Experimental Use\r\n\r\n    IANA has populated the registry as follows:\r\n\r\n       Sub-TLV Type | Description                   | Reference\r\n       -------------+-------------------------------+----------\r\n           0        | Reserved                      | [RFC7260]\r\n           1        | OAM Function Flags Sub-TLV    | [RFC7260]\r\n           2-65533  | Unassigned                    |\r\n       65534-65535  | Reserved for Experimental Use | [RFC7260]\r\n", "notes": "Because the Type field is two octets long the value 65536 is unrealizable.\r\nNevertheless, it was the intention of the working group to assign to values as experimental.", "submit_date": "2014-09-08", "submitter_name": "Gregory Mirsky", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4107", "doc-id": "RFC4523", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   The IANA has updated the LDAP\r\n   Descriptor registry [RFC44520] as indicated below.\r\n", "correct_text": "   The IANA has updated the LDAP\r\n   Descriptor registry [RFC4520] as indicated below.\r\n", "notes": "", "submit_date": "2014-09-09", "submitter_name": "Sean Leonard", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4504", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": "   LI Leap Indicator (leap): 2-bit integer warning of an impending leap\r\n   second to be inserted or deleted in the last minute of the current\r\n   month with values defined in Figure 9.\r\n\r\n           +-------+----------------------------------------+\r\n           | Value | Meaning                                |\r\n           +-------+----------------------------------------+\r\n           | 0     | no warning                             |\r\n           | 1     | last minute of the day has 61 seconds  |\r\n           | 2     | last minute of the day has 59 seconds  |\r\n", "correct_text": "   LI Leap Indicator (leap): 2-bit integer warning of an impending leap\r\n   second to be inserted or deleted in the last minute of the current\r\n   day with values defined in Figure 9.\r\n\r\n           +-------+----------------------------------------+\r\n           | Value | Meaning                                |\r\n           +-------+----------------------------------------+\r\n           | 0     | no warning                             |\r\n           | 1     | last minute of the day has 61 seconds  |\r\n           | 2     | last minute of the day has 59 seconds  |\r\n", "notes": "There is an inconsistency (day vs month) between the LI description and the description of values in the Figure 9.  Few paragraphs before that text there is: Except for a minor variation when using the IPv6 address family, these fields are backwards compatible with NTPv3.\r\n\r\nIf it was month instead of day it would not be compatible with RFC 1305 (NTPv3) and RFC 4330 (SNTPv4), which were obsoleted by RFC 5905.", "submit_date": "2015-10-15", "submitter_name": "Miroslav Lichvar", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-07-27 15:02:31"}, {"errata_id": "4110", "doc-id": "RFC3339", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   ISO 8601 also requires (in section 5.3.1.3) that a decimal fraction\r\n   be proceeded by a \"0\" if less than unity.  Annex B.2 of ISO 8601\r\n   gives examples where the decimal fractions are not preceded by a \"0\".\r\n   This grammar assumes section 5.3.1.3 is correct and that Annex B.2 is\r\n   in error.", "correct_text": "   ISO 8601/Cor1:1991 also requires (in section 5.3.1.3) that a decimal\r\n   fraction be proceeded by \"00\" if less than unity.\r\n\r\n", "notes": "ISO 8601:1988/Cor 1:1991 says:\r\n\r\n\"Subclause 5.3.1.3\r\n\"Last line, delete \u201cshall be preceded by a zero\u201d and insert \u201cshall be preceded by two zeros in accordance with 4.6\u201d \"\r\n\r\nThe RFC3339 grammar never allowed just one zero (\"0\") preceding the fraction and has always been compliant with ISO 8601/Cor 1:1991.\r\n\r\n----- Note from the RFC authors -----\r\nThere are interpretations of ISO 8601 under which section 5.3.1.3 and Annex B.2 are entirely consistent, and the implication that they are in conflict can cause confusion.\r\n\r\n----- Note from the Area Director -----\r\nThere is a newer version of the ISO spec, ISO 8601:2004.  That version came after this RFC, so it cannot be a definitive reference with respect to this RFC, but readers should be aware of the newer version.", "submit_date": "2014-09-12", "submitter_name": "Derek P. Moore", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4111", "doc-id": "RFC4583", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9", "orig_text": "For the purpose of brevity, the main portion of the session\r\n   description is omitted in the examples, which only show 'm' lines and\r\n   their attributes.\r\n\r\n   The following is an example of an offer sent by a conference server\r\n   to a client.\r\n\r\n   m=application 50000 TCP/TLS/BFCP *\r\n   a=setup:passive\r\n   a=connection:new\r\n   a=fingerprint:SHA-1 \\\r\n        4A:AD:B9:B1:3F:82:18:3B:54:02:12:DF:3E:5D:49:6B:19:E5:7C:AB\r\n   a=floorctrl:s-only\r\n   a=confid:4321\r\n   a=userid:1234\r\n   a=floorid:1 m-stream:10\r\n   a=floorid:2 m-stream:11\r\n   m=audio 50002 RTP/AVP 0\r\n   a=label:10\r\n   m=video 50004 RTP/AVP 31\r\n   a=label:11\r\n\r\n...", "correct_text": "For the purpose of brevity, the main portion of the session\r\n   description is omitted in the examples, which only show 'm' lines and\r\n   their attributes.\r\n\r\n   The following is an example of an offer sent by a conference server\r\n   to a client.\r\n\r\n   m=application 50000 TCP/TLS/BFCP *\r\n   a=setup:passive\r\n   a=connection:new\r\n   a=fingerprint:SHA-1 \\\r\n        4A:AD:B9:B1:3F:82:18:3B:54:02:12:DF:3E:5D:49:6B:19:E5:7C:AB\r\n   a=floorctrl:s-only\r\n   a=confid:4321\r\n   a=userid:1234\r\n   a=floorid:1 mstrm:10\r\n   a=floorid:2 mstrm:11\r\n   m=audio 50002 RTP/AVP 0\r\n   a=label:10\r\n   m=video 50004 RTP/AVP 31\r\n   a=label:11\r\n\r\n...", "notes": "In section 6 of the RFC the ABNF for the \"floorid\" attribute is:\r\n  floor-id-attribute = \"a=floorid:\" token [\" mstrm:\" token *(SP token)]\r\n\r\nThe text string \" mstrm:\" is used to reference the media stream rather than \"m-stream\" that appears in the examples.\n --VERIFIER NOTES-- \nThe error noted in the erratum is already being addressed in a document that will obsolete this RFC.", "submit_date": "2014-09-14", "submitter_name": "Christian Groves", "verifier_id": "", "verifier_name": "Richard Barnes", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4112", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5", "orig_text": "OCRA = CryptoFunction(K, DataInput)", "correct_text": "R = CryptoFunction(K, DataInput)", "notes": "The acronym \u201cOCRA\u201d is used page 5 as the output of the CryptoFunction, page 9 as the name of a (family of) algorithm(s), in diagrams of pages 11, 13, 14 and 16 as a cryptographic function. This is inconsistent.", "submit_date": "2014-09-16", "submitter_name": "Marc Girault", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4113", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "7", "orig_text": "R = OCRA(K, {[C] | Q | [P | S | T]})\r\n\r\nRS = OCRA(K, [C] | QC | QS | [S | T])\r\n\r\nOCRA(K, [C] | QC | QS | [S | T]) != RS -> STOP\r\n\r\nRC = OCRA(K, [C] | QS | QC | [P | S | T])\r\n\r\nOCRA(K, [C] | QS | QC | [P|S|T]) != RC -> STOP\r\n\r\nSIGN = OCRA(K, [C] | QS | [P | T])\r\n\r\nRS = OCRA(K, [C] | QC | QS | [T]\r\n\r\nOCRA(K, [C] | QC | QS | [T]) != RS -> STOP \r\n\r\nSIGN = OCRA( K, [C] | QS | QC | [P | T])\r\n\r\nOCRA(K, [C] | QS | QC | [P|T]) != SIGN -> STOP ", "correct_text": "R = CryptoFunction(K, {[C] | Q | [P | S | T]})\r\n\r\nRS = CryptoFunction(K, [C] | QC | QS | [S | T])\r\n\r\nCryptoFunction(K, [C] | QC | QS | [S | T]) != RS -> STOP\r\n\r\nRC = CryptoFunction(K, [C] | QS | QC | [P | S | T])\r\n\r\nCryptoFunction(K, [C] | QS | QC | [P|S|T]) != RC -> STOP\r\n\r\nSIGN = CryptoFunction(K, [C] | QS | [P | T])\r\n\r\nRS = CryptoFunction(K, [C] | QC | QS | [T]\r\n\r\nCryptoFunction(K, [C] | QC | QS | [T]) != RS -> STOP \r\n\r\nSIGN = CryptoFunction( K, [C] | QS | QC | [P | T])\r\n\r\nCryptoFunction(K, [C] | QS | QC | [P|T]) != SIGN -> STOP ", "notes": "The acronym \u201cOCRA\u201d is used page 5 as the output of the CryptoFunction, page 9 as the name of a (family of) algorithm(s), in diagrams of pages 11, 13, 14 and 16 as a cryptographic function. This is inconsistent.", "submit_date": "2014-09-16", "submitter_name": "Marc Girault", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4184", "doc-id": "RFC6455", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.4", "orig_text": "5.4.  Fragmentation\r\n\r\n   The primary purpose of fragmentation is to allow sending a message\r\n   that is of unknown size when the message is started without having to\r\n   buffer that message.  If messages couldn't be fragmented, then an\r\n   endpoint would have to buffer the entire message so its length could\r\n   be counted before the first byte is sent.  With fragmentation, a\r\n   server or intermediary may choose a reasonable size buffer and, when\r\n   the buffer is full, write a fragment to the network.\r\n\r\n   A secondary use-case for fragmentation is for multiplexing, where it\r\n   is not desirable for a large message on one logical channel to\r\n   monopolize the output channel, so the multiplexing needs to be free\r\n   to split the message into smaller fragments to better share the\r\n   output channel.  (Note that the multiplexing extension is not\r\n   described in this document.)\r\n\r\n   Unless specified otherwise by an extension, frames have no semantic\r\n   meaning.  An intermediary might coalesce and/or split frames, if no\r\n   extensions were negotiated by the client and the server or if some\r\n   extensions were negotiated, but the intermediary understood all the\r\n   extensions negotiated and knows how to coalesce and/or split frames\r\n   in the presence of these extensions.  One implication of this is that\r\n   in absence of extensions, senders and receivers must not depend on\r\n   the presence of specific frame boundaries.\r\n\r\n   The following rules apply to fragmentation:\r\n\r\n   o  An unfragmented message consists of a single frame with the FIN\r\n      bit set (Section 5.2) and an opcode other than 0.\r\n\r\n   o  A fragmented message consists of a single frame with the FIN bit\r\n      clear and an opcode other than 0, followed by zero or more frames\r\n      with the FIN bit clear and the opcode set to 0, and terminated by\r\n      a single frame with the FIN bit set and an opcode of 0.  A\r\n      fragmented message is conceptually equivalent to a single larger\r\n      message whose payload is equal to the concatenation of the\r\n      payloads of the fragments in order; however, in the presence of\r\n      extensions, this may not hold true as the extension defines the\r\n      interpretation of the \"Extension data\" present.  For instance,\r\n      \"Extension data\" may only be present at the beginning of the first\r\n      fragment and apply to subsequent fragments, or there may be\r\n      \"Extension data\" present in each of the fragments that applies\r\n      only to that particular fragment.  In the absence of \"Extension\r\n      data\", the following example demonstrates how fragmentation works.\r\n\r\n      EXAMPLE: For a text message sent as three fragments, the first\r\n      fragment would have an opcode of 0x1 and a FIN bit clear, the\r\n      second fragment would have an opcode of 0x0 and a FIN bit clear,\r\n      and the third fragment would have an opcode of 0x0 and a FIN bit\r\n      that is set.\r\n\r\n   o  Control frames (see Section 5.5) MAY be injected in the middle of\r\n      a fragmented message.  Control frames themselves MUST NOT be\r\n      fragmented.\r\n\r\n   o  Message fragments MUST be delivered to the recipient in the order\r\n      sent by the sender.\r\n\r\n   o  The fragments of one message MUST NOT be interleaved between the\r\n      fragments of another message unless an extension has been\r\n      negotiated that can interpret the interleaving.\r\n\r\n   o  An endpoint MUST be capable of handling control frames in the\r\n      middle of a fragmented message.\r\n\r\n   o  A sender MAY create fragments of any size for non-control\r\n      messages.\r\n\r\n   o  Clients and servers MUST support receiving both fragmented and\r\n      unfragmented messages.\r\n\r\n   o  As control frames cannot be fragmented, an intermediary MUST NOT\r\n      attempt to change the fragmentation of a control frame.\r\n\r\n   o  An intermediary MUST NOT change the fragmentation of a message if\r\n      any reserved bit values are used and the meaning of these values\r\n      is not known to the intermediary.\r\n\r\n   o  An intermediary MUST NOT change the fragmentation of any message\r\n      in the context of a connection where extensions have been\r\n      negotiated and the intermediary is not aware of the semantics of\r\n      the negotiated extensions.  Similarly, an intermediary that didn't\r\n      see the WebSocket handshake (and wasn't notified about its\r\n      content) that resulted in a WebSocket connection MUST NOT change\r\n      the fragmentation of any message of such connection.\r\n\r\n   o  As a consequence of these rules, all fragments of a message are of\r\n      the same type, as set by the first fragment's opcode.  Since\r\n      control frames cannot be fragmented, the type for all fragments in\r\n      a message MUST be either text, binary, or one of the reserved\r\n      opcodes.\r\n\r\n   NOTE: If control frames could not be interjected, the latency of a\r\n   ping, for example, would be very long if behind a large message.\r\n   Hence, the requirement of handling control frames in the middle of a\r\n   fragmented message.\r\n\r\n   IMPLEMENTATION NOTE: In the absence of any extension, a receiver\r\n   doesn't have to buffer the whole frame in order to process it.  For\r\n   example, if a streaming API is used, a part of a frame can be\r\n   delivered to the application.  However, note that this assumption\r\n   might not hold true for all future WebSocket extensions.\r\n", "correct_text": "", "notes": "There is no indication or mention of the payload length of the frame with regards to fragmentation. In abstract, it's apparent that the payload length specified in the header of the frame corresponds to the actual frames payload length. However, implementations have been observed that allow the headers payload length to be specified as a higher length than the actual raw payload of that frame. In the event that this occurs, some implementations are reallocating memory to support the length of what is reported as the entire payload of all fragmented messages combined, and continue building the buffer off of each frame from that point forward by allocating enough memory for specified payload length. Obviously, this opens up the potential for a memory consumption DoS attack on an implementation that uses this method. A lack of specification with regards to the RFC allows for such a mistake to happen, as it is not clearly defined in the fragmentation section.\r\n\r\nThe RFC specifies that fragmented messages should be used to send messages of an unknown length, i.e. streaming media, and therefore should also specify that the frame length bit should be preserved to the length of only that current frame and not be used to specify the overall payload length of all fragmented messages combined. Implementations should be forced to work with them on a frame-by-frame basis and to drop the connection of any instances where the specified length of the frames payload does not match the length of the actual raw payload data for that one frame.\n --VERIFIER NOTES-- \nThanks, Jonathan, for some useful comments.  As we discussed, these aren't appropriate for the errata system, but should be discussed on the relevant mailing list for possibly inclusion in an update or follow-on to the document.  That list is <hybi@ietf.org>.", "submit_date": "2014-11-17", "submitter_name": "Jonathan Hall", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4502", "doc-id": "RFC3110", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "conservative choice would be 65537 (F4, the fourth fermat number).\r\n", "correct_text": "conservative choice would be 65537 (F4, the fifth Fermat number).\r\n", "notes": "Numbering of Fermat numbers starts from zero. F4 and 65537 agree, but F4 is fifth Fermat number in the series, not fourth.", "submit_date": "2015-10-14", "submitter_name": "Mikko Rantanen", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4768", "doc-id": "RFC7929", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.", "orig_text": "For example, if the OPENPGPKEY RR query for hugh@example.com\r\n(8d57[...]b7._openpgpkey.example.com) yields a CNAME to\r\n8d57[...]b7._openpgpkey.example.net, and an OPENPGPKEY RR for\r\n8d57[...]b7._openpgpkey.example.net exists,", "correct_text": "For example, if the OPENPGPKEY RR query for hugh@example.com\r\n(c93f[...]d6._openpgpkey.example.com) yields a CNAME to\r\nc93f[...]d6._openpgpkey.example.net, and an OPENPGPKEY RR for\r\nc93f[...]d6._openpgpkey.example.net exists,", "notes": "The example hash 8d57[...]b7 is wrong. It has been calculated with the wrong hash algorithm: SHA-224, instead of SHA-256. The correct hash is c93f[...]d6, which is shown in the example in section 3.", "submit_date": "2016-08-08", "submitter_name": "James Manger", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4114", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7", "orig_text": "R = OCRA(K, {[C] | Q | [P | S | T]})\r\n\r\nRS = OCRA(K, [C] | QC | QS | [S | T])\r\n\r\nOCRA(K, [C] | QC | QS | [S | T]) != RS \r\n\r\nRC = OCRA(K, [C] | QS | QC | [P | S | T])\r\n\r\nOCRA(K, [C] | QS | QC | [P|S|T]) != RC \r\n\r\nSIGN = OCRA(K, [C] | QS | [P | T])\r\n\r\nRS = OCRA(K, [C] | QC | QS | [T]\r\n\r\nOCRA(K, [C] | QC | QS | [T]) != RS\r\n\r\nSIGN = OCRA( K, [C] | QS | QC | [P | T])\r\n\r\nOCRA(K, [C] | QS | QC | [P|T]) != SIGN \r\n", "correct_text": "R = CryptoFunction(K, OCRASuite | 00 | [C] | Q | [P | S | T])\r\n\r\nRS = CryptoFunction(K, OCRASuite | 00 | [C] | QC | QS | [S | T])\r\n\r\nCryptoFunction(K, OCRASuite | 00 | [C] | QC | QS | [S | T]) != RS \r\n\r\nRC = CryptoFunction(K, OCRASuite | 00 | [C] | QS | QC | [P | S | T])\r\n\r\nCryptoFunction(K, OCRASuite | 00 | [C] | QS | QC | [P|S|T]) != RC\r\n\r\nSIGN = CryptoFunction(K, OCRASuite | 00 | [C] | QS | [P | T])\r\n\r\nRS = CryptoFunction(K, OCRASuite | 00 | [C] | QC | QS | [T]\r\n\r\nCryptoFunction(K, OCRASuite | 00 | [C] | QC | QS | [T]) != RS  \r\n\r\nSIGN = CryptoFunction( K, OCRASuite | 00 | [C] | QS | QC | [P | T])\r\n\r\nCryptoFunction(K, OCRASuite | 00 | [C] | QS | QC | [P|T]) != SIGN\r\n", "notes": "Page 5, DataInput is defined as the concatenation of OCRASuite, byte 00 and five parameters. Pages 11 and subsequent ones, it is defined as the concatenation of only those five parameters, omitting OCRASuite and byte 00. This is technically inconsistent.\r\n\r\nThe proposed new text anticipates positive verification of errata n\u00b04113 and supersedes it.", "submit_date": "2014-09-16", "submitter_name": "Marc Girault", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4115", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5", "orig_text": "DataInput = {OCRASuite | 00 | C | Q | P | S | T} where:\r\n\r\n   o  OCRASuite is a value representing the suite of operations to\r\n      compute an OCRA response", "correct_text": "DataInput = {OCRASuite | 00 | [C] | Q | [P | S | T]) where:\r\n\r\n   o  [] indicates a value is optional\r\n\r\n   o  OCRASuite is a value representing the suite of operations to\r\n      compute an OCRA response\r\n", "notes": "It is useful to know as early as possible which parameters are optional or not, especially as it is not exhaustively specified page 6.", "submit_date": "2014-09-16", "submitter_name": "Marc Girault", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4116", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5", "orig_text": "5.1.  DataInput Parameters\r\n", "correct_text": "5.1.  DataInput ", "notes": "DataInput means two different things in (contents of) section 5.1 and (title of) section 6.3. This is inconsistent.", "submit_date": "2014-09-16", "submitter_name": "Marc Girault", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4117", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "6.3.  DataInput\r\n", "correct_text": "6.3.  DataInput Parameters", "notes": "DataInput means two different things in (contents of) section 5.1 and (title of) section 6.3. This is inconsistent.", "submit_date": "2014-09-16", "submitter_name": "Marc Girault", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4118", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "20.12.3", "orig_text": "NOTIFY_DEVICEID4_CHANGE\r\n  A previously provided device-ID-to-device-address mapping has\r\n  changed and the client uses GETDEVICEINFO to obtain the updated\r\n  mapping.  The notification is encoded in a value of data type\r\n  notify_deviceid_change4.  This data type also contains a boolean\r\n  field, ndc_immediate, which if TRUE indicates that the change will\r\n  be enforced immediately, and so the client might not be able to\r\n  complete any pending I/O to the device ID.  If ndc_immediate is\r\n  FALSE, then for an indefinite time, the client can complete\r\n  pending I/O.  After pending I/O is complete, the client SHOULD get\r\n  the new device-ID-to-device-address mappings before sending new\r\n  I/O requests to the storage devices addressed by the device ID.", "correct_text": "NOTIFY_DEVICEID4_CHANGE\r\n  A previously provided device-ID-to-device-address mapping has\r\n  changed and the client uses GETDEVICEINFO to obtain the updated\r\n  mapping.  The notification is encoded in a value of data type\r\n  notify_deviceid_change4.  This data type also contains a boolean\r\n  field, ndc_immediate, which SHOULD be ignored by the client.\r\n  The client may finish any outstanding I/Os that reference the\r\n  previously provided device-ID-to-device-address mapping and SHOULD\r\n  use GETDEVICEINFO to obtain the updated mapping for the previously\r\n  provided device-ID-to-device-address mapping before requesting new\r\n  layouts.  All outstanding layouts remain valid after a notification\r\n  of type NOTIFY_DEVICEID4_CHANGE.  If the device-ID-to-device-address\r\n  mapping changed in an incompatible way that would invalidate\r\n  outstanding layouts, the server MUST recall all outstanding layouts\r\n  and send a NOTIFY_DEVICEID4_DELETE notification instead.", "notes": "Clarify what DEVICEID4_CHANGE means vs layouts instead of I/Os. Drop the under specified ndc_immediate flag, which can't be enforced.", "submit_date": "2014-09-17", "submitter_name": "Christoph Hellwig", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4132", "doc-id": "RFC7386", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "define MergePatch(Target, Patch):\r\n       if Patch is an Object:\r\n         if Target is not an Object:\r\n       Target = {} # Ignore the contents and set it to an empty Object\r\n         for each Name/Value pair in Patch:\r\n       if Value is null:\r\n         if Name exists in Target:\r\n           remove the Name/Value pair from Target\r\n       else:\r\n         Target[Name] = MergePatch(Target[Name], Value)\r\n         return Target\r\n       else:\r\n         return Patch", "correct_text": "   define MergePatch(Target, Patch):\r\n     if Patch is an Object:\r\n       if Target is not an Object:\r\n         Target = {} # Ignore the contents and set it to an empty Object\r\n       for each Name/Value pair in Patch:\r\n         if Value is null:\r\n           if Name exists in Target:\r\n             remove the Name/Value pair from Target\r\n         else:\r\n           Target[Name] = MergePatch(Target[Name], Value)\r\n       return Target\r\n     else:\r\n       return Patch", "notes": "Indentation of the pseudo-code example was correct in the Internet-Drafts but was messed up in the final version. For instance, \"Target = {}\" should be under the two ifs. (Reported by James H. Manger on the appsawg mailing list.)\r\n\r\nThis is a technical erratum, rather than editorial, because the correct indentation is essential to understanding the pseudocode.", "submit_date": "2014-10-15", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4133", "doc-id": "RFC5944", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.10", "orig_text": "This format is applicable for non-skippable extensions that carry\r\ninformation of more that 256 bytes.\r\n.\r\n.\r\n.\r\nSince the Length field is 16 bits wide, the extension data can exceed\r\n256 bytes in length.", "correct_text": "This format is applicable for non-skippable extensions that carry\r\ninformation of more that 254 bytes.\r\n.\r\n.\r\n.\r\nSince the Length field is 16 bits wide, the extension data can exceed\r\n254 bytes in length.", "notes": "Since the short extension form defined in section 1.11 can only carry up to 254 bytes of data, all extensions with 255 or more bytes needs to use the long extension.", "submit_date": "2014-10-17", "submitter_name": "Jack Martin", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4791", "doc-id": "RFC2637", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "   Error Code               This field is set to 0 unless a \"General\r\n                            Error\" exists, in which case Result Code is\r\n                            set to 2 and this field is set to the value\r\n                            corresponding to the general error condition\r\n                            as specified in section 2.2.\r\n", "correct_text": "   Error Code               This field is set to 0 unless a \"General\r\n                            Error\" exists, in which case Result Code is\r\n                            set to 2 and this field is set to the value\r\n                            corresponding to the general error condition\r\n                            as specified in section 2.16.\r\n", "notes": "Incorrect reference to section 2.2", "submit_date": "2016-09-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:48:23"}, {"errata_id": "4119", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12.2.10", "orig_text": "A device ID lives as long as there is a layout referring to the\r\ndevice ID.  If there are no layouts referring to the device ID, the\r\nserver is free to delete the device ID any time.", "correct_text": "A device ID is established by referencing it in the result of a\r\nGETDEVICELIST or LAYOUTGET operation and can be deleted by the server\r\nas soon as there are no layouts referring to the device ID.\r\n\r\nIf the client requested notifications for device ID mappings, the\r\nserver SHOULD send CB_NOTIFY_DEVICEID notifications for device ID\r\ndeletions or changes to the device-ID-to-device-address mappings to any\r\nclient which has used the device-ID in question at least once,\r\nirrespective of whether the client has any layouts currently referring\r\nto it. If the server does not support or the client does not request\r\nnotifications for device ID mappings, the client SHOULD periodically\r\nretired unused device IDs.\r\n\r\n\r\nGiven that GETDEVICELIST does not support requesting notifications a\r\nserver that implements GETDEVICELIST MUST not not advertise support\r\nfor NOTIFY_DEVICEID4_CHANGE notification in GETDEVICEINFO, and client\r\nusing GETDEVICELIST must not rely on NOTIFY_DEVICEID4_CHANGE or\r\nNOTIFY_DEVICEID4_DELETE notifications to work reliably.", "notes": "The lifetime rules in RFC5661 are contradictory - both GETDEVICELIST and CB_NOTIFY_DEVICEID (NOTIFY4_DEVICEID_DELETE) operations imply that device IDs are valid even without layouts referring to them. Implementations rely on this fact by caching not referenced device IDs to avoid the huge setup costs, and thus require notifications to be sent for that case.", "submit_date": "2014-09-17", "submitter_name": "Christoph Hellwig", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:34:40"}, {"errata_id": "4120", "doc-id": "RFC5239", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.4", "orig_text": "   ...\r\n   A media session within a conferencing system can have any number of\r\n   floors (0 or more) that are represented by the conference identifier.\r\n   When using SDP offer/answer exchange to negotiate a floor control\r\n   connection with the focus using the call signaling interface, the\r\n   unique conference identifier is contained in the 'floorid' SDP\r\n   attribute, as defined in [RFC4583], e.g., a=floorid:1 m-stream:10 .\r\n   Each 'floorid' attribute, representing a unique floor, has an\r\n   'm-stream' tag containing one or more identifiers.  The identifiers\r\n   represent individual SDP media sessions (as defined using 'm=' from\r\n   SDP) using the SDP 'Label' attribute, as defined in [RFC4574].", "correct_text": "   ...   \r\n   A media session within a conferencing system can have any number of\r\n   floors (0 or more) that are represented by the conference identifier.\r\n   When using SDP offer/answer exchange to negotiate a floor control\r\n   connection with the focus using the call signaling interface, the\r\n   unique conference identifier is contained in the 'floorid' SDP\r\n   attribute, as defined in [RFC4583], e.g., a=floorid:1 mstrm:10 .\r\n   Each 'floorid' attribute, representing a unique floor, has an\r\n   'mstrm' tag containing one or more identifiers.  The identifiers\r\n   represent individual SDP media sessions (as defined using 'm=' from\r\n   SDP) using the SDP 'Label' attribute, as defined in [RFC4574].", "notes": "In section 6 of the RFC4583 the ABNF for the \"floorid\" attribute is: floor-id-attribute = \"a=floorid:\" token [\" mstrm:\" token *(SP token)]\r\n\r\nThe text string \"mstrm\" is used to reference the media stream rather than \"m-stream\" that appears in this section.", "submit_date": "2014-09-21", "submitter_name": "Christian Groves", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:14:45"}, {"errata_id": "4121", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "In the exchange above, a packet is duplicate or\r\n   replay if the transmit timestamp t3 in the packet matches the org\r\n   state variable T3. ", "correct_text": "In the exchange above, a packet is duplicate or\r\n   replay if the transmit timestamp t3 in the packet matches the org\r\n   state variable. ", "notes": "The org state variable for peer A has not yet been assigned the value T3.", "submit_date": "2014-09-23", "submitter_name": "Marina Gertsvolf", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4122", "doc-id": "RFC6933", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.12.1", "orig_text": "The URN namespace for CLEIs is defined in [RFC4152], and the CLEI format\r\nis defined in [T1.213] and [T1.213a]. For example, an entPhysicalUris \r\ninstance may have the value of:\r\n\r\nURN:CLEI:D4CE18B7AA\r\n\r\n[RFC3986] and [RFC4152] identify this as a URI in the CLEI URN \r\nnamespace. The specific CLEI code, D4CE18B7AA, is based on the \r\nexample provided in [T1.213a].\r\n", "correct_text": "The URN namespace for CLEIs is defined in [RFC4152], and the CLEI format\r\nis defined in [ATIS-0300213]. For example, an entPhysicalUris instance\r\nmay have the value of:\r\n\r\nURN:CLEI:IPUIADEUAA\r\n\r\n[RFC3986] and [RFC4152] identify this as a URI in the CLEI URN \r\nnamespace. The specific CLEI code, IPUIADEUAA, is based on the \r\nexample provided in [ATIS-0300213].\r\n", "notes": "The ATIS standards T1.213 and T1.213a are obsolete and have \r\nbeen replaced by ATIS-0300213. The example in ATIS-0300213 uses a \r\ndifferent CLEI Code, IPUIADEUAA", "submit_date": "2014-09-24", "submitter_name": "Robert Fox", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4123", "doc-id": "RFC6933", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "[T1.213] ATIS T1.213-2001, \"Coded Identification of Equipment\r\nEntities in the North American Telecommunications\r\nSystem for Information Exchange\", 2001, <www.ansi.org>.\r\n\r\n[T1.213a] ATIS T1.213a, \"Supplement to T1.213-2001, Coded\r\nIdentification of Equipment Entities in the North\r\nAmerican Telecommunications System for Information\r\nExchange, to Correct the Representation of the Basic\r\nCode in Figure B.1\", 2001, <www.ansi.org>.", "correct_text": "[ATIS-0300213] ATIS-0300213, \"Structure for the \r\nIdentification of Equipment Entities for Information \r\nExchange\", 2006, <www.ansi.org>.\r\n", "notes": "The ATIS standards T1.213 and T1.213a are obsolete and have \r\nbeen replaced by ATIS-0300213.", "submit_date": "2014-09-24", "submitter_name": "Robert Fox", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4124", "doc-id": "RFC2397", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   The <mediatype> is an Internet media type specification (with\r\n   optional parameters.)", "correct_text": "   The <mediatype> is an Internet media type specification (with\r\n   optional parameters).", "notes": "Periods go inside parentheses only if an entire sentence is inside the parentheses.", "submit_date": "2014-09-26", "submitter_name": "Xue Fuqiao", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4138", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "      This current edition of the FTP specification is intended to\r\n      correct some minor documentation errors, to improve the\r\n      explanation of some protocol features, and to add some new\r\n      optional commands.\r\n\r\n      In particular, the following new optional commands are included in\r\n      this edition of the specification:\r\n\r\n         CDUP - Change to Parent Directory\r\n\r\n         SMNT - Structure Mount\r\n\r\n         STOU - Store Unique\r\n\r\n         RMD - Remove Directory\r\n\r\n         MKD - Make Directory\r\n\r\n         PWD - Print Directory\r\n\r\n         SYST - System\r\n\r\n      This specification is compatible with the previous edition.  A\r\n      program implemented in conformance to the previous specification\r\n      should automatically be in conformance to this specification.", "correct_text": "      This current edition of the FTP specification is intended to\r\n      correct some minor documentation errors, to improve the\r\n      explanation of some protocol features, to add some new\r\n      optional commands, and to remove obsolete ones.\r\n\r\n      In particular, the following new optional commands are included in\r\n      this edition of the specification:\r\n\r\n         CDUP - Change to Parent Directory\r\n\r\n         SMNT - Structure Mount\r\n\r\n         STOU - Store Unique\r\n\r\n         RMD - Remove Directory\r\n\r\n         MKD - Make Directory\r\n\r\n         PWD - Print Directory\r\n\r\n         SYST - System\r\n\r\n      All commands for the mail service are now obsolete and removed\r\n      from this FTP specification. These commands are MLFL, MAIL,\r\n      MSND, MSOM, MSAM, MRSQ, MRCP.  The return codes used for the\r\n      mail service are also removed: 151, 152, 354.  Return code 215\r\n      is reassigned here to another use.\r\n\r\n      This specification is compatible with the previous edition.  A\r\n      program implemented in conformance to the previous specification\r\n      should automatically be in conformance to this specification, as\r\n      long as it does not use the obsolete commands.", "notes": "Before claiming the specification is compliant with the previous version, noting what is added is not enough; we need to note what was removed also.", "submit_date": "2014-10-21", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4140", "doc-id": "RFC5663", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.3.5", "orig_text": "   Block/volume class storage devices are not required to perform read\r\n   and write operations atomically.  Overlapping concurrent read and\r\n   write operations to the same data may cause the read to return a\r\n   mixture of before-write and after-write data.  Overlapping write\r\n   operations can be worse, as the result could be a mixture of data\r\n   from the two write operations; data corruption can occur if the\r\n   underlying storage is striped and the operations complete in\r\n   different orders on different stripes.  When there are multiple\r\n   clients who wish to access the same data, a pNFS server can avoid\r\n   these conflicts by implementing a concurrency control policy of\r\n   single writer XOR multiple readers.  This policy MUST be implemented\r\n   when storage devices do not provide atomicity for concurrent\r\n   read/write and write/write operations to the same data.", "correct_text": "   Block/volume class storage devices do not provide byte granularity\r\n   access and can only perform read and write operations atomically at\r\n   block granularity, and thus require read-modify-write cycles to write\r\n   data smaller than the block size.  Overlapping concurrent read and\r\n   write operations to the same data thus may cause the read to return\r\n   a mixture of before-write and after-write data.  Additionally, data\r\n   corruption can occur if the underlying storage is striped and the\r\n   operations complete in different orders on different stripes.  When\r\n   there are multiple clients who wish to access the same data, a pNFS\r\n   server MUST avoid these conflicts by implementing a concurrency\r\n   control policy of single writer XOR multiple readers for a given data\r\n   region.", "notes": "No device classified as block device can support concurrent writes at arbitrary byte granularity, so reword the section to not confuse the reader.  Also make it explicit that the reader XOR writer policy only applies to different clients, as existing client implementation require layouts not to be recalled due to their own LAYOUTGET operations.  Note that fixing this on the client also isn't feasible as the block layout unfortunately decided to introduce it's own extent concept instead of using layouts to describe individual I/O mappings.\n --VERIFIER NOTES-- \nDavid Black:   \" The new text effectively states that block I/O operations are always atomic at block granularity.  That is not correct for all SCSI devices. The existing text suffices to warn implementers about what can go wrong here.\"", "submit_date": "2014-10-23", "submitter_name": "Christoph Hellwig", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4503", "doc-id": "RFC7483", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2 and 5.3", "orig_text": "In Section 5.2:\r\n\r\n\"ldhName\" : \"ns1.xn--fo-5ja.example\",\r\n\"unicodeName\" : \"ns1.foo.example\",\r\n\r\nIn Section 5.3:\r\n\r\n\"ldhName\" : \"xn--fo-5ja.example\",\r\n\"unicodeName\" : \"foo.example\",\r\n\r\n\"ldhName\" : \"xn--fo-cka.example\",\r\n\"unicodeName\" : \"foo.example\"\r\n\r\n\"ldhName\" : \"xn--fo-fka.example\",\r\n\"unicodeName\" : \"foo.example\"\r\n\r\n\"ldhName\": \"xn--fo-8ja.example\",\r\n\"unicodeName\" : \"foo.example\"", "correct_text": "In Section 5.2:\r\n\r\n\"ldhName\" : \"ns1.xn--fo-5ja.example\",\r\n\"unicodeName\" : \"ns1.f\u00f3o.example\",\r\n\r\nIn Section 5.3:\r\n\r\n\"ldhName\" : \"xn--fo-5ja.example\",\r\n\"unicodeName\" : \"f\u00f3o.example\",\r\n\r\n\"ldhName\" : \"xn--fo-cka.example\",\r\n\"unicodeName\" : \"f\u00f5o.example\"\r\n\r\n\"ldhName\" : \"xn--fo-fka.example\",\r\n\"unicodeName\" : \"f\u00f6o.example\"\r\n\r\n\"ldhName\" : \"xn--fo-8ja.example\",\r\n\"unicodeName\" : \"f\u00f4o.example\"", "notes": "The unicodeName examples in RFC 7483 are invalid per RFC 5890. Here's an example from Section 5.2 on page 23:\r\n\r\n\"unicodeName\" : \"ns1.foo.example\",\r\n\r\nSection 3 of 7483 says this about Unicode names:\r\n\r\n\"Unicode names: Textual representations of DNS names where one or more of the labels are U-labels as described by [RFC5890].\"\r\n\r\n5890 says: \"A \"U-label\" is an IDNA-valid string of Unicode characters, in Normalization Form C (NFC) and including at least one non-ASCII character, expressed in a standard Unicode Encoding Form (such as UTF-8).\"\r\n\r\nThe examples in 7483 contain all ASCII characters. Syntactically valid examples are shown in the corrected text.\r\n\r\n", "submit_date": "2015-10-14", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4792", "doc-id": "RFC2637", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.6", "orig_text": "   Error Code               This field is set to 0 unless a \"General\r\n                            Error\" condition exists, in which case\r\n                            Result Code is set to 2 and this field is\r\n                            set to the value corresponding to the\r\n                            general error condition as specified in\r\n                            section 2.2.\r\n", "correct_text": "   Error Code               This field is set to 0 unless a \"General\r\n                            Error\" condition exists, in which case\r\n                            Result Code is set to 2 and this field is\r\n                            set to the value corresponding to the\r\n                            general error condition as specified in\r\n                            section 2.16.\r\n", "notes": "Incorrect reference to section 2.2", "submit_date": "2016-09-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:49:00"}, {"errata_id": "7070", "doc-id": "RFC8410", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "10.2", "orig_text": "   -----BEGIN CERTIFICATE-----\r\n   MIIBLDCB36ADAgECAghWAUdKKo3DMDAFBgMrZXAwGTEXMBUGA1UEAwwOSUVURiBUZX\r\n   N0IERlbW8wHhcNMTYwODAxMTIxOTI0WhcNNDAxMjMxMjM1OTU5WjAZMRcwFQYDVQQD\r\n   DA5JRVRGIFRlc3QgRGVtbzAqMAUGAytlbgMhAIUg8AmJMKdUdIt93LQ+91oNvzoNJj\r\n   ga9OukqY6qm05qo0UwQzAPBgNVHRMBAf8EBTADAQEAMA4GA1UdDwEBAAQEAwIDCDAg\r\n   BgNVHQ4BAQAEFgQUmx9e7e0EM4Xk97xiPFl1uQvIuzswBQYDK2VwA0EAryMB/t3J5v\r\n   /BzKc9dNZIpDmAgs3babFOTQbs+BolzlDUwsPrdGxO3YNGhW7Ibz3OGhhlxXrCe1Cg\r\n   w1AH9efZBw==\r\n   -----END CERTIFICATE-----\r\n", "correct_text": "A corrected encoding of the certificate.", "notes": "In addition to the mis-encoding described in 6936, there are additional misencodings. The critical field of X.509 extensions have `DEFAULT FALSE` (per RFC 5280). Default field values shall not be encoded in a DER sequence, but in the certificate encoding presented there these critical fields are encoded.", "submit_date": "2022-08-02", "submitter_name": "Alex Gaynor", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "4861", "doc-id": "RFC7539", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.8.", "orig_text": "   o  C_MAX = P_MAX + tag length = 247,877,906,896 octets.\r\n", "correct_text": "   o  C_MAX = P_MAX + tag length = 274,877,906,896 octets.\r\n", "notes": "When reviewing errata 4858, Adam Langely and Yoav Nir identified that this text should also be changed.\r\n\r\n(This errata was created by duplicating 4858 in the system by Lars Eggert.)", "submit_date": "2016-11-10", "submitter_name": "Timm Korte", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4142", "doc-id": "RFC5663", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.8", "orig_text": "<section does not exist yet>", "correct_text": "2.8.  Device-ID-to-device-address\r\n\r\n   A pNFS block volume layout server MAY signal\r\n   device-ID-to-device-address changes to the client using the\r\n   CB_NOTIFY_DEVICEID callback operation.\r\n\r\n   If the change is compatible and does not require outstanding layouts\r\n   to be recalled the server can issue a notification of type\r\n   NOTIFY_DEVICEID4_CHANGE.\r\n\r\n   A device-ID-to-device-address mapping change signaled by\r\n   NOTIFY_DEVICEID4_CHANGE must not change the storage system specific\r\n   addressing of the volume, and can only add new storage to the\r\n   existing device.  In particular the following changes are allowed:\r\n\r\n     o increasing the size of the underlying block device of a\r\n       PNFS_BLOCK_VOLUME_SIMPLE volume.\r\n     o increasing the size of a PNFS_BLOCK_VOLUME_SLICE volume if the\r\n       underlying block device of the PNFS_BLOCK_VOLUME_SIMPLE volume\r\n       it refers to is big enough to fit the new size.\r\n     o increasing the size of each volume in a bsv_volumes of a\r\n       PNFS_BLOCK_VOLUME_SLICE volume by the same amount.\r\n     o increasing the size of the last volume in bcv_volumes of a\r\n       PNFS_BLOCK_VOLUME_CONCAT volume.\r\n     o adding new members to the end of bcv_volumes of a\r\n       PNFS_BLOCK_VOLUME_CONCAT volume.", "notes": "Specify what device configuration changes can be supported without recalling layouts.", "submit_date": "2014-10-23", "submitter_name": "Christoph Hellwig", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4143", "doc-id": "RFC5766", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.Intro...", "orig_text": "attempt discover a direct communication path; that is, a", "correct_text": "attempt to discover a direct communication path; that is, a", "notes": "line 177 in the txt version, attempt *to* do something", "submit_date": "2014-10-23", "submitter_name": "Florian Waltersdorfer", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4144", "doc-id": "RFC4762", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   In a VPLS, we use a VCID (which, when using the PWid FEC, has been\r\n   substituted with a more general identifier (AGI), to address\r\n   extending the scope of a VPLS) to identify an emulated LAN segment.\r\n   Note that the VCID as specified in [RFC4447] is a service identifier,\r\n   identifying a service emulating a point-to-point virtual circuit.  In\r\n   a VPLS, the VCID is a single service identifier, so it has global\r\n   significance across all PEs involved in the VPLS instance.", "correct_text": "   In a VPLS, we use a PWID (which, when using the Generalized PW ID \r\n   FEC, has been substituted with a more general identifier (AGI), \r\n   to address\r\n   extending the scope of a VPLS) to identify an emulated LAN segment.\r\n   Note that the PWID as specified in [RFC4447] is a service identifier,\r\n   identifying a service emulating a point-to-point virtual circuit.  In\r\n   a VPLS, the PWID is a single service identifier, so it has global\r\n   significance across all PEs involved in the VPLS instance.", "notes": "1. The problematic text follows a diagram depicting the PWID FEC (a.k.a. FEC-128) as it appears in RFC 4447. This diagram includes a 32-bit PWID field, but there is no VCID field. Nor is VCID mentioned anywhere in RFC 4447 - it has been used in the original Martini drafts but has then been replaced by PWID. \r\n\r\n2. According to RFC 4447, AGI is used only in the Generalized PW ID FEC (a.k.a. FEC-129) but not in the PWID FEC (a.k.a. FEC-128).", "submit_date": "2014-10-23", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4145", "doc-id": "RFC5912", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "14", "orig_text": "  --  3.  A more complex version, but one that automatically ties\r\n  --      together both the signature algorithm and the\r\n  --      signature value for automatic decoding.\r\n  --\r\n  SIGNED{ToBeSigned} ::= SEQUENCE {\r\n     toBeSigned           ToBeSigned,\r\n     algorithmIdentifier  SEQUENCE {\r\n         algorithm        SIGNATURE-ALGORITHM.\r\n                            &id({SignatureAlgorithms}),\r\n         parameters       SIGNATURE-ALGORITHM.\r\n                            &Params({SignatureAlgorithms}\r\n                              {@algorithmIdentifier.algorithm}) OPTIONAL\r\n     },\r\n     signature BIT STRING (CONTAINING SIGNATURE-ALGORITHM.&Value(\r\n                              {SignatureAlgorithms}\r\n                              {@algorithmIdentifier.algorithm}))\r\n  }", "correct_text": "  SIGNED{ToBeSigned} ::= SEQUENCE {\r\n     toBeSigned           ToBeSigned,\r\n     algorithmIdentifier  SEQUENCE {\r\n         algorithm        SIGNATURE-ALGORITHM.\r\n                            &id({SignatureAlgorithms}),\r\n         parameters       SIGNATURE-ALGORITHM.\r\n                            &Params({SignatureAlgorithms}\r\n                              {@algorithmIdentifier.algorithm}) OPTIONAL\r\n     },\r\n     signature BIT STRING \r\n  }", "notes": "I *believe* the 3rd option for SIGNED{} is invalid.  The \"signature\" BIT STRING contains an OpenType which references an optional class field.  It's possible to define objects with no type and OpenTypes must refer to a type.  There's no mechanism to allow an OpenType to reference random bytes (not ASN.1 encoded).\r\n\r\nI understand the intent is to allow for automatic decoding, but unless the \"&Value\" is required in SIGNATURE-ALGORITHM this will not work.  Requiring it will not work because not all signature algorithms require the signature value to be encoded (e.g. RSA).  The syntax would be valid is if \"signature\" was OPTIONAL (obviously not desirable).\r\n\r\nSo I propose we revert \"signature\" to \"BIT STRING\" without constraints.\n --VERIFIER NOTES-- \nThe proposed change is one way to handle it, but it does not support the many signature values that are ASN.1 encoded.", "submit_date": "2014-10-23", "submitter_name": "Pierce Leonberger", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:05:51"}, {"errata_id": "7078", "doc-id": "RFC9285", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   QR codes have a limited ability to store binary data.  In practice,\r\n   binary data have to be encoded in characters according to one of the\r\n   modes already defined in the standard for QR codes.  The easiest mode\r\n   to use in called Alphanumeric mode (see Section 7.3.4 and Table 2 of\r\n   [ISO18004].  Unfortunately Alphanumeric mode uses 45 different\r\n   characters which implies neither Base32 nor Base64 are very effective\r\n   encodings.", "correct_text": "   QR codes have a limited ability to store binary data.  In practice,\r\n   binary data have to be encoded in characters according to one of the\r\n   modes already defined in the standard for QR codes.  The easiest mode\r\n   to use in called Alphanumeric mode (see Section 7.3.4 and Table 2 of\r\n   [ISO18004]).  Unfortunately Alphanumeric mode uses 45 different\r\n   characters which implies neither Base32 nor Base64 are very effective\r\n   encodings.", "notes": "Missing closing bracket.", "submit_date": "2022-08-10", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-08-10 21:11:02"}, {"errata_id": "7073", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4", "orig_text": "These messages are encrypted under keys derived from the [sender]_handshake_traffic_secret.", "correct_text": "These messages are encrypted under keys derived from the [sender]_handshake_traffic_secret, except for post-handshake authentication", "notes": "There's an exception", "submit_date": "2022-08-06", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:40:02"}, {"errata_id": "4146", "doc-id": "RFC7161", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.2.1", "orig_text": "4.2.2.1.  Proxy Binding Update Message\r\n\r\n   As result of the new defined flag, the PBU message format is updated\r\n   as follows:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n                                     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n                                     |           Sequence #          |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |A|H|L|K|M|R|P|S|   Reserved    |            Lifetime           |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                                                               |\r\n     .                                                               .\r\n     .                          Mobility Options                     .\r\n     .                                                               .\r\n     |                                                               |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "4.2.2.1.  Proxy Binding Update Message\r\n\r\n   As result of the new defined flag, the PBU message format is updated\r\n   as follows:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n                                     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n                                     |           Sequence #          |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |A|H|L|K|M|R|P|F|T|B|S| Reserved|            Lifetime           |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                                                               |\r\n     .                                                               .\r\n     .                          Mobility Options                     .\r\n     .                                                               .\r\n     |                                                               |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "There is a mistake in the flags portion of the PBU/PBA messages.\r\nIt seems to be overlapping with flags defined in RFC5845. RFC5555. Both the specs were published many years before RFC7161. \r\n\r\nBinding Update Flags\r\n\r\nRegistration Procedure(s)\r\nStandards Action or IESG Approval\r\nReference\r\n[RFC5213]\r\nAvailable Formats\r\n\r\nCSV\r\nFlag \tValue \tReference \r\nA\t0x8000\t[RFC6275]\r\nH\t0x4000\t[RFC6275]\r\nL\t0x2000\t[RFC6275]\r\nK\t0x1000\t[RFC6275]\r\nM\t0x0800\t[RFC4140]\r\nR\t0x0400\t[RFC3963]\r\nP\t0x0200\t[RFC5213]\r\nF\t0x0100\t[RFC5555]\r\nT\t0x0080\t[RFC5845]\r\nB\t0x0040\t[RFC6602]\r\nS\t0x0020\t[RFC7161]\r\n\r\n\r\nCompare Section 6.2 of RFC 5845 and Section 4.2.2.1 of RFC 7161.", "submit_date": "2014-10-28", "submitter_name": "Sri Gundavelli", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4258", "doc-id": "RFC6038", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "Last bullet on Page 8:\r\nSection 4.1.2 defines...", "correct_text": "Section 5.1.2 defines...", "notes": "(There's actually not a section 4.1.2 in this RFC)", "submit_date": "2015-02-04", "submitter_name": "Huck Zhao", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4259", "doc-id": "RFC6038", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "o  Symmetrical Size mode: The Session-Reflector MUST operate using\r\n      the Session_Reflector Packet Format defined in Section 5.1.4,\r\n      where the Padding Octets are separated from the information\r\n      fields.\r\n\r\nSection 5.1.4 defines Session_Sender Packet Format.", "correct_text": "o  Symmetrical Size mode: The Session-Reflector MUST operate using\r\n      the Session_Sender Packet Format defined in Section 5.1.4,\r\n      where the Padding Octets are separated from the information\r\n      fields.", "notes": "This is just dropping a sentence that repeats what was just said previously.", "submit_date": "2015-02-04", "submitter_name": "Huck Zhao", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4260", "doc-id": "RFC6038", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "   ... When the Reflect Octets mode is selected, the\r\n   Session-Sender SHALL use the following TWAMP-Test Packet Format in\r\n   Unauthenticated mode:\r\n\r\nIt should be Session-Reflector that SHALL use the following format.", "correct_text": "   ... When the Reflect Octets mode is selected, the\r\n   Session-Reflector SHALL use the following TWAMP-Test Packet Format in\r\n   Unauthenticated mode:", "notes": "I confirmed this with Al Morton via e-mail.", "submit_date": "2015-02-04", "submitter_name": "Huck Zhao", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4793", "doc-id": "RFC2637", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.8", "orig_text": "   Error Code               This field is set to 0 unless a \"General\r\n                            Error\" condition exists, in which case\r\n                            Result Code is set to 2 and this field is\r\n                            set to the value corresponding to the\r\n                            general error condition as specified in\r\n                            section 2.2.\r\n", "correct_text": "   Error Code               This field is set to 0 unless a \"General\r\n                            Error\" condition exists, in which case\r\n                            Result Code is set to 2 and this field is\r\n                            set to the value corresponding to the\r\n                            general error condition as specified in\r\n                            section 2.16.\r\n", "notes": "Incorrect reference to section 2.2.", "submit_date": "2016-09-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:50:02"}, {"errata_id": "4354", "doc-id": "RFC7469", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   As in Section 2.4, the token refers to the algorithm name, and the\r\n   quoted-string refers to the base64 encoding of the SPKI Fingerprint.\r\n   When formulating the JSON POST body, the UA MUST either use single-\r\n   quoted JSON strings or use double-quoted JSON strings and backslash-\r\n   escape the embedded double quotes in the quoted-string part of the\r\n   known-pin.\r\n\r\n....\r\n\r\n      'pin-sha256=\"d6qzRu9zOECb90Uez27xWltNsj0e1Md7GkYYkVoZWmM=\"',", "correct_text": "   As in Section 2.4, the token refers to the algorithm name, and the\r\n   quoted-string refers to the base64 encoding of the SPKI Fingerprint.\r\n   When formulating the JSON POST body, the UA MUST use double-quoted\r\n   JSON strings and backslash-escape the embedded double quotes in the\r\n   quoted-string part of the known-pin.\r\n\r\n....\r\n\r\n      \"pin-sha256=\\\"d6qzRu9zOECb90Uez27xWltNsj0e1Md7GkYYkVoZWmM=\\\"\",", "notes": "This RFC seems to think that single quotes are permissible in JSON. This is not the case. See http://tools.ietf.org/html/rfc7159#section-7", "submit_date": "2015-05-04", "submitter_name": "Kirit Saelensminde", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4355", "doc-id": "RFC2849", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "In the section \"Formal Syntax Definition of LDIF\", Notes 2 and 8 \r\nindirectly imply, that folded lines may contain leading whitespaces(1) \r\nand not allowed trailing whitespaces(2).\r\nOr, in other words, a fold must occur before a whitespace, or entire \r\nvalue must be base64-encoded before folding.\r\nHowever, the understanding is implied, rather than clearly stated.", "correct_text": "I suggest to clarify the folding rules to include a reference to \r\ntrailing whitespaces in this specific case.\r\nSomething as simple as \"in case of folding a line containing \r\nwhitespaces, the fold MUST NOT occur after a whitespace character\" will \r\ngo a long way towards clearing the confusion.\r\nOr, in ABNF syntax,\r\nfolding-sequence = (SAFE-INIT-CHAR / \":\" / \"<\") FILL SEP SPACE SAFE-CHAR\r\n(That is, symbols \":\" and \"<\" may safely appear at the end of a value \r\nstring, given it is not the first character of attribute value...)", "notes": "The implication is drawn from the \r\n(1): Note 2, \"When joining folded lines, exactly one space character at the beginning of each continued line must be discarded.\" (Emphasis on \"exactly one\".)\r\n(2): Note 8, \"Values \u2026 that end with SPACE SHOULD be base-64 encoded.\", implied premise of the format that each single line read from the file must be \"basically correct\", means, follow generic rule of (<empty line> / <comment> / <name:value pair> / <continuation line>) and the generic experience that trailing whitespaces are not apparently visible in text files without the use of special tools.\n --VERIFIER NOTES-- \n\r\nExcept that it's an incorrect implication.  The space at the beginning of the continued line is discarded simply because it's the space that was added to fold the line, so it has to be removed when you unfold.  There is no restriction on where the folding is done other than what Note 2 says (MUST NOT fold before the first character of the line, and SHOULD NOT fold in the middle of a multi-byte UTF-8 character).\r\n\r\nIn particular, a line can be folded in the middle of a FILL sequence, in the middle of a sequence of SPACE characters in a string, or in the middle of a sequence of SPACE characters in a comment line.  It is perfectly valid to have SPACE characters both before and after the <SEP SPACE> sequence that folding adds.", "submit_date": "2015-05-05", "submitter_name": "Andrey Repin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4356", "doc-id": "RFC7292", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.2 says:", "orig_text": "   6.  For i=1, 2, ..., c, do the following:\r\n\r\n       A.  Set A2=H^r(D||I). (i.e., the r-th hash of D||1,\r\n           H(H(H(... H(D||I))))\r\n\r\n       B.  Concatenate copies of Ai to create a string B of length v\r\n           bits (the final copy of Ai may be truncated to create B).", "correct_text": "   6.  For i=1, 2, ..., c, do the following:\r\n\r\n       A.  Set A_i=H^r(D||I). (i.e., the r-th hash of D||I,\r\n           H(H(H(... H(D||I))))\r\n\r\n       B.  Concatenate copies of A_i to create a string B of length v\r\n           bits (the final copy of A_i may be truncated to create B).", "notes": "Step 6A explains a number of rounds of hashing D concatenated with I, however the i.e. clause shows concatenating D with 1 in one place. Also, Step 6A has been changed from \"A2\" to \"A_i\", and Step 6B has been changed from \"Ai\" to \"A_i\". \r\n\r\n[David Thompson sent additional corrections, which have been incorporated above.]", "submit_date": "2015-05-05", "submitter_name": "Will Bond", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4261", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "In RFC6351 (Appendice A), we have a Relax NG Schema defining date and\r\ntime format:\r\n\r\n# 4.3.1\r\nvalue-date = element date {\r\n    xsd:string { pattern = \"\\d{8}|\\d{4}-\\d\\d|--\\d\\d(\\d\\d)?|---\\d\\d\" }\r\n  }\r\n\r\n# 4.3.2\r\nvalue-time = element time {\r\n    xsd:string { pattern = \"(\\d\\d(\\d\\d(\\d\\d)?)?|-\\d\\d(\\d\\d?)|--\\d\\d)\"\r\n                         ~ \"(Z|[+\\-]\\d\\d(\\d\\d)?)?\" }\r\n  }\r\n\r\n# 4.3.3\r\nvalue-date-time = element date-time {\r\n    xsd:string { pattern = \"(\\d{8}|--\\d{4}|---\\d\\d)T\\d\\d(\\d\\d(\\d\\d)?)?\"\r\n                         ~ \"(Z|[+\\-]\\d\\d(\\d\\d)?)?\" }\r\n  }\r\n\r\n# 4.3.4\r\nvalue-date-and-or-time = value-date | value-date-time | value-time\r\n\r\nWe assume this is the format from ISO.8601.2004 mentioned in RFC6350.\r\nThere is no link on ISO.8601.2004 because ISO documents are not free.\r\nSo this is our guess: These formats are very close based on different\r\nexamples in RFC6350 and RFC6351.\r\n", "correct_text": "See notes.", "notes": "Question: --10 is October or 10 seconds?\r\n\r\n--10 can fit into value-date and value-time:\r\n\r\n  * From value-date, the 3rd element in the disjunction is --\\d\\d(\\d\\d)?, so it matches --10,\r\n  * From value-time, the last element in the first disjunction is --\\d\\d, so it matches --10.\r\n\r\nvalue-date-and-or-time matches value-date before value-time. Conclusion: --10 is always October and never 10 seconds. Is it a technical error in the RFC.\r\n\r\n\r\nPS: This erratum can be applied on RFC6350 and RFC6351.\r\nPPS: Consider the following erratum http://www.rfc-editor.org/errata_search.php?rfc=6351&eid=4247 on value-time also.\r\n\r\n----- Verifier Notes -----\r\nThis errata report highlights a real problem that was not foreseen by the working group at the time when the RFC was published. Interoperability issues could result, so it's important to take note of this.\r\n\r\nFixing the problem will require revising the RFC, possibly in a non-backward-compatible manner. The fix is not trivial and discussion and a document update will be necessary.", "submit_date": "2015-02-05", "submitter_name": "Ivan Enderlin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4147", "doc-id": "RFC7161", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.2.2", "orig_text": "4.2.2.2.  Proxy Binding Acknowledgement Message\r\n\r\n   As result of the new defined flag, the PBA message format is updated\r\n   as follows:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n                                     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n                                     |    Status     |K|R|P|S| Rsrvd |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |           Sequence #          |           Lifetime            |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                                                               |\r\n     .                                                               .\r\n     .                        Mobility Options                       .\r\n     .                                                               .\r\n     |                                                               |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "4.2.2.2.  Proxy Binding Acknowledgement Message\r\n\r\n   As result of the new defined flag, the PBA message format is updated\r\n   as follows:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n                                     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n                                     |    Status     |K|R|P|T|B|S|Res|\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |           Sequence #          |           Lifetime            |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                                                               |\r\n     .                                                               .\r\n     .                        Mobility Options                       .\r\n     .                                                               .\r\n     |                                                               |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "There is an error in the flags portion of the PBA.\r\n\r\nBinding Acknowledgment Flags\r\n\r\nRegistration Procedure(s)\r\nStandards Action or IESG Approval\r\nReference\r\n[RFC5213]\r\nAvailable Formats\r\n\r\nCSV\r\nFlag \tValue \tReference \r\nK\t0x80\t[RFC6275]\r\nR\t0x40\t[RFC3963]\r\nP\t0x20\t[RFC5213]\r\nT\t0x10\t[RFC5845]\r\nB\t0x08\t[RFC6602]\r\nS\t0x04\t[RFC7161]\r\n\r\n\r\nCompare Section 6.3 of RFC 5845 and Section 4.2.2.2 of RFC 7161. ", "submit_date": "2014-10-28", "submitter_name": "Sri Gundavelli", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4257", "doc-id": "RFC2328", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": "In NBMA mode, OSPF emulates operation over a broadcast\r\nnetwork: a Designated Router is elected for the NBMA\r\nnetwork, and the Designated Router originates an LSA for the\r\nnetwork. The graph representation for broadcast networks and\r\nNBMA networks is identical. This representation is pictured\r\nin the middle of Figure 1a.", "correct_text": "In NBMA mode, OSPF emulates operation over a broadcast\r\nnetwork: a Designated Router is elected for the NBMA\r\nnetwork, and the Designated Router originates an LSA for the\r\nnetwork. The graph representation for broadcast networks and\r\nNBMA networks is identical. This representation is pictured\r\nin the bottom of Figure 1a.", "notes": "The bottom, not middle, of Figure 1a depicts the identical graph representation of broadcast and NBMA networks.", "submit_date": "2015-02-04", "submitter_name": "Eugene M. Kim", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4148", "doc-id": "RFC6265", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "   day-of-month    = 1*2DIGIT ( non-digit *OCTET )\r\n...\r\n   year            = 2*4DIGIT ( non-digit *OCTET )\r\n   time            = hms-time ( non-digit *OCTET )\r\n", "correct_text": "   day-of-month    = 1*2DIGIT [ non-digit *OCTET ]\r\n...\r\n   year            = 2*4DIGIT [ non-digit *OCTET ]\r\n   time            = hms-time [ non-digit *OCTET ]\r\n", "notes": "The trailing extra chars for these fields should be *optional*, not *required*.", "submit_date": "2014-10-28", "submitter_name": "Zhong Yu", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4149", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "BEGIN:VCALENDAR\r\nVERSION:2.0\r\nPRODID:-//RDU Software//NONSGML HandCal//EN\r\nBEGIN:VFREEBUSY\r\nORGANIZER:mailto:jsmith@example.com\r\nDTSTART:19980313T141711Z\r\nDTEND:19980410T141711Z", "correct_text": "BEGIN:VCALENDAR\r\nVERSION:2.0\r\nPRODID:-//RDU Software//NONSGML HandCal//EN\r\nBEGIN:VFREEBUSY\r\nUID:19970901T115957Z-76A912@example.com\r\nDTSTAMP:19970901T120000Z\r\nORGANIZER:mailto:jsmith@example.com\r\nDTSTART:19980313T141711Z\r\nDTEND:19980410T141711Z", "notes": "3.6.4 says\r\n       fbprop     = *(\r\n                  ;\r\n                  ; The following are REQUIRED,\r\n                  ; but MUST NOT occur more than once.\r\n                  ;\r\n                  dtstamp / uid /", "submit_date": "2014-10-29", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4505", "doc-id": "RFC5905", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.5.1", "orig_text": "        /*\r\n         * Update the origin and destination timestamps.  If\r\n         * unsynchronized or bogus, abandon ship.\r\n         */\r\n        p->org = r->xmt;\r\n        p->rec = r->dst;\r\n        if (!synch)\r\n                return;                 /* unsynch */\r\n\r\n        /*\r\n         * The timestamps are valid and the receive packet matches the\r\n         * last one sent.  If the packet is a crypto-NAK, the server\r\n         * might have just changed keys.  We demobilize the association\r\n         * and wait for better times.\r\n         */\r\n        if (auth == A_CRYPTO) {\r\n                clear(p, X_CRYPTO);\r\n                return;                 /* crypto-NAK */\r\n        }\r\n\r\n        /*\r\n         * If the association is authenticated, the key ID is nonzero\r\n         * and received packets must be authenticated.  This is designed\r\n         * to avoid a bait-and-switch attack, which was possible in past\r\n         * versions.\r\n         */\r\n        if (!AUTH(p->keyid || (p->flags & P_NOTRUST), auth))\r\n                return;                 /* bad auth */\r\n", "correct_text": "        /*\r\n         * If the packet is a valid crypto-NAK, the server might have\r\n         * just changed keys.  We demobilize the association and wait\r\n         * for better times.\r\n         */\r\n        if (synch && auth == A_CRYPTO) {\r\n                clear(p, X_CRYPTO);\r\n                return;                 /* crypto-NAK */\r\n        }\r\n\r\n        /*\r\n         * If the association is authenticated, the key ID is nonzero\r\n         * and received packets must be authenticated.  This is designed\r\n         * to avoid a bait-and-switch attack, which was possible in past\r\n         * versions.\r\n         */\r\n        if (!AUTH(p->keyid || (p->flags & P_NOTRUST), auth))\r\n                return;                 /* bad auth */\r\n\r\n        /*\r\n         * Update the origin and destination timestamps.  If\r\n         * unsynchronized or bogus, abandon ship.\r\n         */\r\n        p->org = r->xmt;\r\n        p->rec = r->dst;\r\n        if (!synch)\r\n                return;                 /* unsynch */\r\n", "notes": "The state variables must be updated after the authentication is checked in order to prevent DoS attacks on authenticated symmetric associations (CVE-2015-1799).\n --VERIFIER NOTES-- \n   The appendix is not the normative description of the protocol behavior. A change such as this needs consensus within the working group. To do that, a draft should be submitted with the proposed changes.", "submit_date": "2015-10-15", "submitter_name": "Miroslav Lichvar", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4150", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "[TZDB]                 Eggert, P. and A.D. Olson, \"Sources for Time\r\n                          Zone and Daylight Saving Time Data\",\r\n                          July 2009,\r\n                          <http://www.twinsun.com/tz/tz-link.htm>.", "correct_text": "[TZDB]       Eggert, P. and A. Olson, \"Sources for Time Zone and\r\n                Daylight Saving Time Data\", 1987,\r\n                <ftp://ftp.iana.org/tz/code/tz-link.htm>.\r\n\r\n              Internet Assigned Numbers Authority (IANA)\r\n              \"Time Zone Database\"\r\n                <http://www.iana.org/time-zones>.", "notes": "The twinsun.com version is no longer maintained by the volunteer(s) tz@elsie.nci.nih.gov. The document and the tz database, have been adopted by members of IETF and iana.org. The database itself is public domain. \r\n\r\nThe corrected text matches that of rfc6557 11.1.  Normative References [TZDB]\r\n\r\n\r\n\r\nhttp://tools.ietf.org/html/rfc6557\r\nhttp://www.iana.org/time-zones/repository/tz-link.html\r\nhttp://www.iana.org/time-zones\n --VERIFIER NOTES-- \nThe document was correct at the time it was published, so this report does not meet the formal criteria for errata.\r\n\r\nThat said, Peter is correct that the location of the time zone database has since changed, and readers should look to the new location, as he has specified in this report.", "submit_date": "2014-11-03", "submitter_name": "Peter Bachman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4151", "doc-id": "RFC2743", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.4", "orig_text": "   o  GSS_S_FAILURE indicates that the context is recognized, but that\r\n   the GSS_Process_context_token() operation could not be performed for\r\n   reasons unspecified at the GSS-API level.\r\n", "correct_text": "   o  GSS_S_FAILURE indicates that the context is recognized, but\r\n   either the GSS_Process_context_token() operation could not be\r\n   performed for reasons unspecified at the GSS-API level, or the peer\r\n   had an error consuming the last context token sent to it.  The latter\r\n   occurs when the local side became fully established and produced one\r\n   last token which was sent to the peer, but the peer encountered an\r\n   error while processing that last context token.  In either case the\r\n   minor status code provides additional information.\r\n\r\n   In the case of successful processing of error tokens, the minor\r\n   status code provides information from the input token.  The display\r\n   string outputs of GSS_Display_status() as applied to such minor\r\n   status codes should indicate that the error originated on the remote\r\n   peer, along with the nature of the error.  Note that there is no\r\n   way to distinguish failures of GSS_Process_context_token() from\r\n   error token information other than to read the human-readable status\r\n   display strings.\r\n", "notes": "The other major status codes that GSS_Process_context_token() can return are: GSS_S_COMPLETE (input token successfully processed), GSS_S_DEFECTIVE_TOKEN (e.g., integrity protection for the input token failed), GSS_S_NO_CONTEXT (invalid input security context).\r\n\r\nThis leaves a) no way to report error token information, b) no purpose for GSS_S_FAILURE, since the other major status codes cover all plausible error conditions.\r\n\r\nBut clearly the intention was that \"asynchronous error tokens\" should be passed to GSS_Process_context_token(), and for such tokens to be useful as far as conveying information about the error goes.\r\n\r\nThere are at least two easy ways to fix this: either have GSS_Process_context_token() report the error information in the minor status with a major status of GSS_S_COMPLETE, or decide that the GSS_S_FAILURE description was incorrect, that it should have been used to convey error token information.  The latter is the more natural fix.\r\n\r\nThe KITTEN WG will have to review this erratum and decide whether to reject it, accept one fix, or the other. That review happened resulting in the corrected\r\ntext above.\r\n", "submit_date": "2014-11-03", "submitter_name": "Nicolas Williams", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4357", "doc-id": "RFC5888", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.4.1", "orig_text": "          v=0\r\n          o=Laura 289083124 289083124 IN IP4 seven.example.com\r\n          c=IN IP4 192.0.2.1\r\n          t=0 0\r\n          a=group:FID 1 2\r\n          m=audio 30000 RTP/AVP 0\r\n          a=mid:1\r\n          m=audio 20000 RTP/AVP 97\r\n          c=IN IP4 192.0.2.2\r\n          a=rtpmap:97 telephone-events\r\n          a=mid:2\r\n", "correct_text": "          v=0\r\n          o=Laura 289083124 289083124 IN IP4 seven.example.com\r\n          c=IN IP4 192.0.2.1\r\n          t=0 0\r\n          a=group:FID 1 2\r\n          m=audio 30000 RTP/AVP 0\r\n          a=mid:1\r\n          m=audio 20000 RTP/AVP 97\r\n          c=IN IP4 192.0.2.2\r\n          a=rtpmap:97 telephone-event\r\n          a=mid:2\r\n", "notes": "Minor typo on page 10.  Per RFC 4733, the rtpmap entry should use the media type \"telephone-event\" not \"telephone-events\".", "submit_date": "2015-05-06", "submitter_name": "Jeff Poole", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4358", "doc-id": "RFC7233", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "The 206 (Partial Content) status code indicates that the server is\r\nsuccessfully fulfilling a range request for the target resource by\r\ntransferring one or more parts of the selected representation that\r\ncorrespond to the satisfiable ranges found in the request's Range\r\nheader field (Section 3.1).", "correct_text": "The 206 (Partial Content) status code indicates that the server is\r\nsuccessfully fulfilling a range request for the target resource by\r\ntransferring one or more parts of the selected representation that\r\ncorrespond to the satisfiable ranges found in the request's Range\r\nheader field (Section 3.1). A response may chose to satisfy only\r\npart of a requested range.\r\n", "notes": "Firefox and Chrome already behave as if the \"Corrected Text\"\r\nstatement is true.\r\n\r\nIt may be desirable if for example a user returns to a\r\nhtml5 video with auto play, pauses the video and is only\r\ninterested in responding to a comment on the page. In this example\r\nit would be unnecessarily costly to transfer the whole 128GB when\r\nthe user only consumes a few MB.\r\n\r\nAlternative: maybe it should only be true if last-byte-pos is\r\nabsent.\r\n\r\n----- Verifier Notes -----\r\nThe reporter is uncertain of the meaning and asks that it be clarified, one way or the other.  A future update of the document might consider clarifying wording.", "submit_date": "2015-05-07", "submitter_name": "Tim", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6840", "doc-id": "RFC4577", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.4", "orig_text": "[...] If they are in different domains, and\r\n   if routes from one are distributed into the other, the routes will\r\n   appear as intra-network routes, which may not be what is intended.)", "correct_text": "[...] If they are in different domains, and\r\n   if routes from one are distributed into the other, the routes will\r\n   appear as inter-network routes, which may not be what is intended.)", "notes": "Inter-intra typo. Inter-network routes are used between the OSPF instances with the same Domain ID. With different Domain IDs, external-AS routes are applicable.\n --VERIFIER NOTES-- \n   The issue is that they will appear as intra-network routes while they are not.", "submit_date": "2022-02-07", "submitter_name": "Igor Malyushkin", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 13:00:26"}, {"errata_id": "8926", "doc-id": "RFC4028", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2", "orig_text": "If, however, the proxy remembers that\r\n   the UAC did support the session timer, additional processing is\r\n   needed.", "correct_text": "If, however, the proxy remembers that\r\n   the UAC did support the session timer, and UAC's desired refresher is not set to 'uas',\r\n   additional processing is needed.", "notes": "A UAC MAY include the refresher parameter with value 'uas' in the Session-Expires header of an initial INVITE request, explicitly indicating that it is not willing to act as the refreshing party and expects the UAS to perform session refresh. In such a case, a proxy SHOULD NOT override the refresher parameter to 'uac' and SHOULD NOT insert the 'timer' option tag into any Require header field in the response. The proxy SHOULD forward the response upstream normally.\r\n\r\nNote that Section 7.2 defines a case: when no Require or Session-Expires header field is present in the 2xx response (i.e., the UAS does not support the session timer extension), the UAC that still wishes to use the session timer performs refresh itself.", "submit_date": "2026-05-25", "submitter_name": "Tran Minh Duc", "verifier_id": "", "verifier_name": null, "update_date": "2026-05-28 16:57:59"}, {"errata_id": "4152", "doc-id": "RFC4791", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7.8.1", "orig_text": "   BEGIN:VEVENT\r\n   DTSTART;TZID=US/Eastern:20060102T120000\r\n   DURATION:PT1H\r\n   RRULE:FREQ=DAILY;COUNT=5\r\n   SUMMARY:Event #2\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   BEGIN:VEVENT\r\n   DTSTART;TZID=US/Eastern:20060104T140000\r\n   DURATION:PT1H\r\n   RECURRENCE-ID;TZID=US/Eastern:20060104T120000\r\n   SUMMARY:Event #2 bis\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   BEGIN:VEVENT\r\n   DTSTART;TZID=US/Eastern:20060106T140000\r\n   DURATION:PT1H\r\n   RECURRENCE-ID;TZID=US/Eastern:20060106T120000\r\n   SUMMARY:Event #2 bis bis\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n", "correct_text": "   BEGIN:VEVENT\r\n   DTSTART;TZID=US/Eastern:20060102T120000\r\n   DURATION:PT1H\r\n   RRULE:FREQ=DAILY;COUNT=5\r\n   SUMMARY:Event #2\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   BEGIN:VEVENT\r\n   DTSTART;TZID=US/Eastern:20060104T140000\r\n   DURATION:PT1H\r\n   RECURRENCE-ID;TZID=US/Eastern:20060104T120000\r\n   SUMMARY:Event #2 bis\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n", "notes": "Remove the last VEVENT component in abcd2.ics, because it is outside of the time-range.\n --VERIFIER NOTES-- \nThe query requests the return of an entire resource (including all overridden instances) for any resource that has at least one component overlapping the time range.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4153", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.8.1", "orig_text": "       <D:href>http://cal.example.com/bernard/work/abcd3.ics</D:href>\r\n       <D:propstat>\r\n         <D:prop>\r\n           <D:getetag>\"fffff-abcd3\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTIMEZONE\r\n   LAST-MODIFIED:20040110T032845Z\r\n   TZID:US/Eastern\r\n", "correct_text": "       <D:href>http://cal.example.com/bernard/work/abcd3.ics</D:href>\r\n       <D:propstat>\r\n         <D:prop>\r\n           <D:getetag>\"fffff-abcd3\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   BEGIN:VTIMEZONE\r\n   LAST-MODIFIED:20040110T032845Z\r\n   TZID:US/Eastern\r\n", "notes": "Remove the PRODID property in abcd3.ics, which was not selected by C:calendar-date/C:comp[@name=\"VCALENDAR\"]/*", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4154", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.8.5", "orig_text": "   <D:multistatus xmlns:D=\"DAV:\"\r\n                  xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:response>\r\n       <D:href>http://cal.example.com/bernard/work/abcd4.ics</D:href>\r\n       <D:propstat>\r\n         <D:prop>\r\n           <D:getetag>\"fffff-abcd5\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n", "correct_text": "   <D:multistatus xmlns:D=\"DAV:\"\r\n                  xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:response>\r\n       <D:href>http://cal.example.com/bernard/work/abcd5.ics</D:href>\r\n       <D:propstat>\r\n         <D:prop>\r\n           <D:getetag>\"fffff-abcd5\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n", "notes": "Typo in D:href", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4508", "doc-id": "RFC7468", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "  preeb      = \"-----BEGIN \" label \"-----\" ; unlike [RFC1421] (A)BNF,\r\n                                           ; eol is not required (but\r\n  posteb     = \"-----END \" label \"-----\"   ; see [RFC1421], Section 4.4)\r\n", "correct_text": "  preeb      = \"-----\" %x42.45.47.49.4E \" \" label \"-----\" \r\n\r\n  posteb     = \"-----\" %x45.4E.44 \" \" label\"-----\"\r\n                         ; unlike [RFC1421] (A)BNF, eol is not required\r\n                         ; (but see [RFC1421], Section 4.4)\r\n\r\nOR:\r\n\r\n  preeb      = %s\"-----BEGIN \" label \"-----\" ; unlike [RFC1421] (A)BNF,\r\n                                             ; eol is not required (but\r\n  posteb     = %s\"-----END \" label \"-----\"   ; see [RFC1421],\r\n                                             ; Section 4.4)\r\n\r\n...with reference to RFC 7405.", "notes": "The encapsulation boundaries are case-sensitive, including (especially) the BEGIN and END characters. Nearly all implementations enforce the case sensitivity of BEGIN and END on input, and all surveyed implementations output all-caps.", "submit_date": "2015-10-20", "submitter_name": "Sean Leonard", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4186", "doc-id": "RFC5272", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.1.3.2", "orig_text": "The Data content type allows for general transport of unstructured\r\n   data.\r\n\r\n   The Data content type is used by this document for:\r\n\r\n      Holding the encrypted random value y for POP proof in the\r\n      encrypted POP control (see Section 6.7).", "correct_text": "See Notes", "notes": "It's invalid for the encoding of an ANY or OpenType to have \"unstructured\" data.  See X.690 section 8.15:\r\n\r\n8.15 Encoding of an open type\r\nThe value of an open type is also a value of some (other) ASN.1 type. The encoding of such a value shall be the complete encoding herein specified for the value considered as being of that other type.\r\n\r\nNote there's similar wording in X.209 section 21 for ANY:\r\n\r\n21 Encoding of a value of the ANY type\r\nThe encoding of an ANY type shall be the complete encoding specified in this Recommendation for the type of the value of the ANY type.\n --VERIFIER NOTES-- \nThe Data content type being referenced here is the Data content type from CMS.  This type is defined as using an OCTET STRING wrapper around the data.  Therefore unstructured data is not being placed at the ASN.1 level and the referenced text does not apply.", "submit_date": "2014-11-18", "submitter_name": "Pierce Leonberger", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4256", "doc-id": "RFC7052", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "    REFERENCE\r\n        \"RFC 6830, Section 14.2 and\r\n         LISP Canonical Address Format (LCAF), Work in Progress,\r\n         March 2013.\"\r\n    SYNTAX OCTET STRING (SIZE (5..39))\r\n", "correct_text": "    REFERENCE\r\n        \"RFC 6830, Section 14.2 and\r\n         LISP Canonical Address Format (LCAF), Work in Progress,\r\n         March 2013.\"\r\n    SYNTAX OCTET STRING (SIZE (0..39))\r\n", "notes": "The minimum octet string length of 5 specified for the LispAddressType is incorrect. The smallest non-empty address is an IPv4 address that is not using the LCAF format to include an instance ID. This requires 8 octets (see example 1 above keeping in mind that the AFI requires 2 octets). However, in many places in the MIB definition the LispAddressType is used as the type for attributes where \u201cunspecified\u201d is a valid return. For example in lispEidRegistrationLastRegisterSender, an EID prefix that is configured on a Map-Server may not have any active registrations. To encode the absence of an address the minimum length of zero should be allowed.", "submit_date": "2015-02-04", "submitter_name": "Isidor Kouvelas", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4373", "doc-id": "RFC7539", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.5.1", "orig_text": "s = le_num(key[16..31])", "correct_text": "s = le_bytes_to_num(key[16..31])", "notes": "Other usages in the same pseudo-code example call the function le_bytes_to_num to perform what appears to be the same task.", "submit_date": "2015-05-21", "submitter_name": "Adam Eijdenberg", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4155", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.8.3", "orig_text": "           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VEVENT\r\n   DTSTAMP:20060206T001121Z\r\n   DTSTART:20060103T170000\r\n   DURATION:PT1H\r\n   RECURRENCE-ID:20060103T170000\r\n   SUMMARY:Event #2\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   BEGIN:VEVENT\r\n   DTSTAMP:20060206T001121Z\r\n   DTSTART:20060104T190000\r\n   DURATION:PT1H\r\n   RECURRENCE-ID:20060104T170000\r\n   SUMMARY:Event #2 bis\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "correct_text": "           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VEVENT\r\n   DTSTAMP:20060206T001121Z\r\n   DTSTART:20060103T170000Z\r\n   DURATION:PT1H\r\n   RECURRENCE-ID:20060103T170000Z\r\n   SUMMARY:Event #2\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   BEGIN:VEVENT\r\n   DTSTAMP:20060206T001121Z\r\n   DTSTART:20060104T190000Z\r\n   DURATION:PT1H\r\n   RECURRENCE-ID:20060104T170000Z\r\n   SUMMARY:Event #2 bis\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "notes": "9.6.5 says:\r\n      Date and local\r\n      time with reference to time zone information MUST be converted\r\n      into date with UTC time.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4156", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.8.3", "orig_text": "           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VEVENT\r\n   ATTENDEE;PARTSTAT=ACCEPTED;ROLE=CHAIR:mailto:cyrus@example.com\r\n   ATTENDEE;PARTSTAT=NEEDS-ACTION:mailto:lisa@example.com\r\n   DTSTAMP:20060206T001220Z\r\n   DTSTART:20060104T150000\r\n   DURATION:PT1H\r\n   LAST-MODIFIED:20060206T001330Z\r\n   ORGANIZER:mailto:cyrus@example.com\r\n   SEQUENCE:1\r\n   STATUS:TENTATIVE\r\n   SUMMARY:Event #3\r\n   UID:DC6C50A017428C5216A2F1CD@example.com\r\n   X-ABC-GUID:E1CX5Dr-0007ym-Hz@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "correct_text": "           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VEVENT\r\n   ATTENDEE;PARTSTAT=ACCEPTED;ROLE=CHAIR:mailto:cyrus@example.com\r\n   ATTENDEE;PARTSTAT=NEEDS-ACTION:mailto:lisa@example.com\r\n   DTSTAMP:20060206T001220Z\r\n   DTSTART:20060104T150000Z\r\n   DURATION:PT1H\r\n   LAST-MODIFIED:20060206T001330Z\r\n   ORGANIZER:mailto:cyrus@example.com\r\n   SEQUENCE:1\r\n   STATUS:TENTATIVE\r\n   SUMMARY:Event #3\r\n   UID:DC6C50A017428C5216A2F1CD@example.com\r\n   X-ABC-GUID:E1CX5Dr-0007ym-Hz@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "notes": "9.6.5 says:\r\nDate and local\r\ntime with reference to time zone information MUST be converted\r\ninto date with UTC time.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4157", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.8.4", "orig_text": "           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VFREEBUSY\r\n   ORGANIZER;CN=\"Bernard Desruisseaux\":mailto:bernard@example.com\r\n   UID:76ef34-54a3d2@example.com\r\n   DTSTAMP:20050530T123421Z\r\n   DTSTART:20060101T100000Z\r\n   DTEND:20060108T100000Z\r\n   FREEBUSY;FBTYPE=BUSY-TENTATIVE:20060102T100000Z/20060102T120000Z\r\n   END:VFREEBUSY\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "correct_text": "           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VFREEBUSY\r\n   ORGANIZER;CN=\"Bernard Desruisseaux\":mailto:bernard@example.com\r\n   UID:76ef34-54a3d2@example.com\r\n   DTSTAMP:20050530T123421Z\r\n   DTSTART:20060101T000000Z\r\n   DTEND:20060108T000000Z\r\n   FREEBUSY;FBTYPE=BUSY-TENTATIVE:20060102T100000Z/20060102T120000Z\r\n   END:VFREEBUSY\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "notes": "Typo in DTSTART, DTEND property.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4158", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.8.5", "orig_text": "     <D:response>\r\n       <D:href>http://cal.example.com/bernard/work/abcd4.ics</D:href>\r\n       <D:propstat>\r\n         <D:prop>\r\n           <D:getetag>\"fffff-abcd4\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n", "correct_text": "     <D:response>\r\n       <D:href>http://cal.example.com/bernard/work/abcd5.ics</D:href>\r\n       <D:propstat>\r\n         <D:prop>\r\n           <D:getetag>\"fffff-abcd5\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n", "notes": "Typo in D:href and D:getetag. \"Task #2\" is abcd5.ics.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4507", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.4.1.2", "orig_text": "After sending the ClientHello message, the client waits for a\r\nServerHello message.  Any handshake message returned by the server,\r\nexcept for a HelloRequest, is treated as a fatal error.\r\n", "correct_text": "After sending the ClientHello message, the client waits for a\r\nServerHello message.  Any other handshake message returned by the\r\nserver, except for a HelloRequest, is treated as a fatal error.", "notes": "A ServerHello received after a ClientHello should not be treated as a fatal error.\r\n\r\nPaul Wouters (AD): TLS 1.2 has been obsoleted by TLS 1.3 RFC8446. The language in that RFC does not contain the same issue (see https://datatracker.ietf.org/doc/html/rfc8446#section-4.1.2). As such, this is marked as Verified.", "submit_date": "2015-10-19", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 02:33:56"}, {"errata_id": "4509", "doc-id": "RFC7630", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8 and 10", "orig_text": "snmpModules 235", "correct_text": "mib-2 235", "notes": "IANA registered snmpUsmHmacSha2MIB under mib-2.235 (as advised by the MIB doctors), but the document mentions snmpModules.235 ", "submit_date": "2015-10-20", "submitter_name": "Johannes Merkle", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7074", "doc-id": "RFC6616", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "The nonce value MUST be at least 2^32 bits and large enough to \r\nhandle well in excess of the number of concurrent transactions \r\na SASL server shall see.", "correct_text": "The nonce value MUST be at least 32 bits and large enough to \r\nhandle well in excess of the number of concurrent transactions \r\na SASL server shall see.", "notes": "A nonce of 512MiB is rather excessive to be generated for every authenticating client.\r\n\r\nAs this nonce also has to be transported within the URI sent to both the SASL client and called by the OIDC IdP the Note in section 3.2.1 of RFC 2616 seems to apply:\r\n\"Servers ought to be cautious about depending on URI lengths above 255 bytes, because some older client or proxy implementations might not properly support these lengths.\"\r\n\r\nA lower bound requirement of 32 bits for the nonce seems more appropiate; most platforms are able to efficiently handle 32-bit integers and is still likely to prevent a brute-force attack given the HTTP request overhead.", "submit_date": "2022-08-06", "submitter_name": "Nadja Reitzenstein", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "4159", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.8.5", "orig_text": "   BEGIN:VTODO\r\n   DTSTAMP:20060205T235300Z\r\n   DUE;TZID=US/Eastern:20060106T120000\r\n   LAST-MODIFIED:20060205T235308Z\r\n   SEQUENCE:1\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #2\r\n   UID:E10BA47467C5C69BB74E8720@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=START:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n", "correct_text": "   BEGIN:VTODO\r\n   DTSTAMP:20060205T235300Z\r\n   DUE;TZID=US/Eastern:20060106T120000\r\n   LAST-MODIFIED:20060205T235308Z\r\n   SEQUENCE:1\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #2\r\n   UID:E10BA47467C5C69BB74E8720@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=END:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n", "notes": "RELATED is not START but END.\r\n\r\nBoth rfc2445 section4.8.6.3 and rfc5545 section3.8.6.3 says:\r\n\r\nIf the trigger is set relative to START, then the \"DTSTART\"\r\nproperty MUST be present in the associated \"VEVENT\" or \"VTODO\"\r\ncalendar component. If an alarm is specified for an event with\r\nthe trigger set relative to the END, then the \"DTEND\" property or\r\nthe \"DTSTART\" and \"DURATION \" properties MUST be present in the\r\nassociated \"VEVENT\" calendar component. If the alarm is specified\r\nfor a to-do with a trigger set relative to the END, then either\r\nthe \"DUE\" property or the \"DTSTART\" and \"DURATION \" properties\r\nMUST be present in the associated \"VTODO\" calendar component.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4160", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.8.9", "orig_text": "           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTODO\r\n   DTSTAMP:20060205T235335Z\r\n   DUE;VALUE=DATE:20060104\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #1\r\n   UID:DDDEEB7915FA61233B861457@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=START:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "correct_text": "           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTODO\r\n   DTSTAMP:20060205T235335Z\r\n   DUE;VALUE=DATE:20060104\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #1\r\n   UID:DDDEEB7915FA61233B861457@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=END:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "notes": "RELATED is not START but END.\r\n\r\nBoth rfc2445 section4.8.6.3 and rfc5545 section3.8.6.3 says:\r\n\r\nIf the trigger is set relative to START, then the \"DTSTART\"\r\nproperty MUST be present in the associated \"VEVENT\" or \"VTODO\"\r\ncalendar component. If an alarm is specified for an event with\r\nthe trigger set relative to the END, then the \"DTEND\" property or\r\nthe \"DTSTART\" and \"DURATION \" properties MUST be present in the\r\nassociated \"VEVENT\" calendar component. If the alarm is specified\r\nfor a to-do with a trigger set relative to the END, then either\r\nthe \"DUE\" property or the \"DTSTART\" and \"DURATION \" properties\r\nMUST be present in the associated \"VTODO\" calendar component.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4512", "doc-id": "RFC5036", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.5.2", "orig_text": "2.4.1.  Basic Discovery Mechanism\r\n\r\n   To engage in LDP Basic Discovery on an interface, an LSR periodically\r\n   sends LDP Link Hellos out the interface.  LDP Link Hellos are sent as\r\n   UDP packets addressed to the well-known LDP discovery port for the\r\n   \"all routers on this subnet\" group multicast address.\r\n\r\n\r\n2.5.2.  Transport Connection Establishment\r\n\r\n   Note that when an LSR sends a Hello, it selects the transport address\r\n   for its end of the session connection and uses the Hello to advertise\r\n   the address, either explicitly by including it in an optional\r\n   Transport Address TLV or implicitly by omitting the TLV and using it\r\n   as the Hello source address.", "correct_text": "", "notes": "According to 2.4.1, an LSR send Hellos to \"all routers on this subnet\", the eligible reception LSR should be on this subnet.\r\n\r\n2.5.2 states that one way for an LSR to advertise Transport Address is to uses it as Hello source address. \r\n\r\nOn the topology below, LSRa uses 1.1.1.1 as Transport Address and sends Hello(source:1.1.1.1 destination:224.0.0.2) to LSRb.\r\nLSRb will ignore this packet which is not on its interface subnet.\r\n\r\n1.1.1.1\r\n|LSRa|--------------|LSRb|\r\n      10.1.1.1             10.1.1.2\r\n\r\nMy question is: \r\nWhat's the scenario to use \"implicitly\" way to send Hello?\r\n --VERIFIER NOTES-- \r\n   This is not an errata, it is a question to be asked on the MPLS mailing list.", "submit_date": "2015-10-26", "submitter_name": "Jiessie", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4187", "doc-id": "RFC2817", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2", "orig_text": "   The Draft Standard for HTTP/1.1 [1] specifies that these tokens obey\r\n   the production for 'product':\r\n\r\n      product         = token [\"/\" product-version]\r\n      product-version = token\r\n\r\n[...]\r\n\r\n   This specification defines the protocol token \"TLS/1.0\" as the\r\n   identifier for the protocol specified by The TLS Protocol [6].\r\n", "correct_text": "   The Draft Standard for HTTP/1.1 [1] specifies that these tokens obey\r\n   the production for 'product':\r\n\r\n      product         = token [\"/\" product-version]\r\n      product-version = token\r\n\r\n[...]\r\n\r\n   This specification defines the product token \"TLS\" as the\r\n   identifier for the protocol specified by The TLS Protocol [6].\r\n   When a specific version of TLS is desired, it is indicated by\r\n   appending a slash (\"/\") and the TLS version number as the\r\n   product-version (e.g., \"TLS/1.0\").\r\n", "notes": "This erratum clarifies that \"TLS\" is the product token and any TLS version number (currently DIGIT \".\" DIGIT) is the product-version token.  This has already been corrected in the Upgrade Token Registry.", "submit_date": "2014-11-20", "submitter_name": "Roy T. Fielding", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4188", "doc-id": "RFC5810", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.5.", "orig_text": "                0x12        E_E_INVALID_FLAGS\r\n", "correct_text": "                0x12        E_INVALID_FLAGS\r\n", "notes": "The 'E_INVALID_FLAGS' is defined in 'section 7.1.7 RESULT TLV'.\r\n\r\nThe same problem exist in IANA Protocol Registries database at\r\nhttp://www.internetassignednumbersauthority.org/assignments/forces/forces.xhtml#tlv-types because the typo occurs in 'Appendix A. IANA Considerations'", "submit_date": "2014-11-21", "submitter_name": "Francois-Xavier Le Bail", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4511", "doc-id": "RFC1034", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "identifies a mail exchange for the domain. See [RFC-974 for details.", "correct_text": "identifies a mail exchange for the domain. See [RFC-974] for details.", "notes": "Just missing the \"]\"", "submit_date": "2015-10-23", "submitter_name": "Han Ge Xin", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4161", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.8.9", "orig_text": "           <D:getetag>\"fffff-abcd5\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTODO\r\n   DTSTAMP:20060205T235300Z\r\n   DUE;VALUE=DATE:20060106\r\n   LAST-MODIFIED:20060205T235308Z\r\n   SEQUENCE:1\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #2\r\n   UID:E10BA47467C5C69BB74E8720@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=START:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "correct_text": "           <D:getetag>\"fffff-abcd5\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTIMEZONE\r\n   LAST-MODIFIED:20040110T032845Z\r\n   TZID:US/Eastern\r\n   BEGIN:DAYLIGHT\r\n   DTSTART:20000404T020000\r\n   RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4\r\n   TZNAME:EDT\r\n   TZOFFSETFROM:-0500\r\n   TZOFFSETTO:-0400\r\n   END:DAYLIGHT\r\n   BEGIN:STANDARD\r\n   DTSTART:20001026T020000\r\n   RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10\r\n   TZNAME:EST\r\n   TZOFFSETFROM:-0400\r\n   TZOFFSETTO:-0500\r\n   END:STANDARD\r\n   END:VTIMEZONE\r\n   BEGIN:VTODO\r\n   DTSTAMP:20060205T235300Z\r\n   DUE;TZID=US/Eastern:20060106T120000\r\n   LAST-MODIFIED:20060205T235308Z\r\n   SEQUENCE:1\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #2\r\n   UID:E10BA47467C5C69BB74E8720@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=END:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "notes": "1. DUE VTODO component property in abcd5.ics is using TZID=US/Eastern and response needs VTIMEZONE component.\r\n\r\n2. RELATED is not START but END, because VTODO has only DUE property.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4162", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.10.1", "orig_text": "   <?xml version=\"1.0\" encoding=\"utf-8\" ?>\r\n   <C:free-busy-query xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <C:time-range start=\"20060104T140000Z\"\r\n                     end=\"20060105T220000Z\"/>\r\n   </C:free-busy-query>\r\n", "correct_text": "   <?xml version=\"1.0\" encoding=\"utf-8\" ?>\r\n   <C:free-busy-query xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <C:time-range start=\"20060104T140000Z\"\r\n                     end=\"20060104T220000Z\"/>\r\n   </C:free-busy-query>\r\n", "notes": "Typo in C:time-range/@end", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4163", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.10.1", "orig_text": "   BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Server//EN\r\n   BEGIN:VFREEBUSY\r\n   DTSTAMP:20050125T090000Z\r\n   DTSTART:20060104T140000Z\r\n   DTEND:20060105T220000Z\r\n   FREEBUSY;FBTYPE=BUSY-TENTATIVE:20060104T150000Z/PT1H\r\n   FREEBUSY:20060104T190000Z/PT1H\r\n   END:VFREEBUSY\r\n   END:VCALENDAR\r\n", "correct_text": "   BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Server//EN\r\n   BEGIN:VFREEBUSY\r\n   DTSTAMP:20050125T090000Z\r\n   DTSTART:20060104T140000Z\r\n   DTEND:20060104T220000Z\r\n   FREEBUSY;FBTYPE=BUSY-TENTATIVE:20060104T150000Z/PT1H\r\n   FREEBUSY:20060104T190000Z/PT1H\r\n   END:VFREEBUSY\r\n   END:VCALENDAR\r\n", "notes": "Typo in DTEND.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4164", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "   BEGIN:VEVENT\r\n   DTSTAMP:20060206T001121Z\r\n   DTSTART;TZID=US/Eastern:20060104T140000\r\n   DURATION:PT1H\r\n   RECURRENCE-ID;TZID=US/Eastern:20060104T120000\r\n   SUMMARY:Event #2 bis\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n", "correct_text": "   BEGIN:VEVENT\r\n   DTSTAMP:20060206T001121Z\r\n   DTSTART;TZID=US/Eastern:20060104T140000\r\n   DURATION:PT1H\r\n   RECURRENCE-ID;TZID=US/Eastern:20060104T120000\r\n   SUMMARY:Event #2 bis\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   BEGIN:VEVENT\r\n   DTSTAMP:20060206T001121Z\r\n   DTSTART;TZID=US/Eastern:20060106T140000\r\n   DURATION:PT1H\r\n   RECURRENCE-ID;TZID=US/Eastern:20060106T120000\r\n   SUMMARY:Event #2 bis bis\r\n   UID:00959BC664CA650E933C892C@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n", "notes": "\"Event #2 bis bis\" seems to be required.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4165", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "   STATUS:TENTATIVE\r\n   SUMMARY:Event #3\r\n   UID:DC6C50A017428C5216A2F1CD@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n", "correct_text": "   STATUS:TENTATIVE\r\n   SUMMARY:Event #3\r\n   UID:DC6C50A017428C5216A2F1CD@example.com\r\n   X-ABC-GUID:E1CX5Dr-0007ym-Hz@example.com\r\n   END:VEVENT\r\n   END:VCALENDAR\r\n", "notes": "abcd3.ics seems to have X-ABC-GUID property.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4166", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "   TRIGGER;RELATED=START:-PT10M\r\n", "correct_text": "   TRIGGER;RELATED=END:-PT10M\r\n", "notes": "abcd4.ics RELATED parameter is not START but END, because TODO has only DUE property.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4513", "doc-id": "RFC7652", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.5", "orig_text": "      Option-Length: The length of the PA_AUTHENTICATION option for the\r\n      PCP Auth message (in octets), including the 4-octet fixed-length\r\n      header and the variable-length authentication data.\r\n", "correct_text": "      Option-Length: The length of the PA_AUTHENTICATION_TAG option\r\n      for the PCP Auth message (in octets), including the 4-octet\r\n      fixed-length header and the variable-length authentication data.", "notes": "Incorrect option name in the field description.", "submit_date": "2015-10-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4209", "doc-id": "RFC6733", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.4.3", "orig_text": "      BUSY                              1\r\n         The peer\u2019s internal resources are constrained, and it has\r\n         determined that the transport connection needs to be closed.\r\n         A receiver of a DPR with above result code SHOULD NOT attempt\r\n         reconnection.", "correct_text": "      BUSY                              1\r\n         The peer\u2019s internal resources are constrained, and it has\r\n         determined that the transport connection needs to be closed.\r\n         A receiver of a DPR with above result code SHOULD either \r\n         connect to an alternate node, or attempt reconnection\r\n         after a time period.", "notes": "In most implementations, the Diameter node will continue to serve its peer after the resources recover and expect reconnection. If the Diameter node won't like reconnection from peer, DO_NOT_WANT_TO_TALK_TO_YOU can be used instead of BUSY.\n --VERIFIER NOTES-- \nThe text describing the \"BUSY\" and \"DO_NOT_WANT_TO_TALK_TO_YOU\" cases is consistent with the text found in the introduction of the section 5.4.\r\n\r\n  \"In the event that the\r\n   disconnect was a result of either a shortage of internal resources or\r\n   simply that the node in question has no intentions of forwarding any\r\n   Diameter messages to the peer in the foreseeable future, a periodic\r\n   connection request would not be welcomed.  The Disconnection-Reason\r\n   AVP contains the reason the Diameter node issued the Disconnect-Peer-\r\n   Request message.\r\n\r\n   The Disconnect-Peer-Request message is used by a Diameter node to\r\n   inform its peer of its intent to disconnect the transport layer and\r\n   that the peer shouldn't reconnect unless it has a valid reason to do\r\n   so (e.g., message to be forwarded). \" \r\n\r\nSo the main purpose for sending a DPR with the causes \"BUSY\" and \"DO_NOT_WANT_TO_TALK_TO_YOU\" is actually to avoid the periodic reconnection attempts governed by the Tc timer.\r\nThese exceptions are mentioned in the section 2.1:\r\n\r\n  \"When no transport connection exists with a peer, an attempt to\r\n   connect SHOULD be made periodically.  This behavior is handled via\r\n   the Tc timer (see Section 12 for details), whose recommended value is\r\n   30 seconds.  There are certain exceptions to this rule, such as when\r\n   a peer has terminated the transport connection stating that it does\r\n   not wish to communicate.\"\r\n\r\nNow, it is true that there is no clear guideline on how to behave when receiving the cause \"BUSY\" and this explains why some implementations in the field still attempt to re-open the connection, as after a normal transport failure detection. But it does not mean that the text in the RFC6733 is wrong.\r\n\r\nFinally, if it is an attempt to clarify/modify the behavior of the peer receiving DPR with the \"BUSY\" cause, I don't think that using errata would be the most appropriate way. ", "submit_date": "2014-12-25", "submitter_name": "Hans Liu", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7077", "doc-id": "RFC6788", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "The link-layer destination address of the outer IPv6 datagram containing the outer IPv6 datagram MUST be resolved using regular Neighbor Discovery procedures.", "correct_text": "The link-layer destination address of the outer IPv6 datagram MUST be resolved using regular Neighbor Discovery procedures.", "notes": "The corrected text removes the text duplication with is technically incorrect. The text may also be fixed as:\r\n\r\nThe link-layer destination address of the outer IPv6 datagram containing the tunneled Router Advertisement MUST be resolved using regular Neighbor Discovery procedures.", "submit_date": "2022-08-09", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-10-17 04:26:10"}, {"errata_id": "4167", "doc-id": "RFC4791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "           <D:getetag>\"fffff-abcd5\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTODO\r\n   DTSTAMP:20060205T235300Z\r\n   DUE;VALUE=DATE:20060106\r\n   LAST-MODIFIED:20060205T235308Z\r\n   SEQUENCE:1\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #2\r\n   UID:E10BA47467C5C69BB74E8720@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=START:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "correct_text": "           <D:getetag>\"fffff-abcd5\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTIMEZONE\r\n   LAST-MODIFIED:20040110T032845Z\r\n   TZID:US/Eastern\r\n   BEGIN:DAYLIGHT\r\n   DTSTART:20000404T020000\r\n   RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4\r\n   TZNAME:EDT\r\n   TZOFFSETFROM:-0500\r\n   TZOFFSETTO:-0400\r\n   END:DAYLIGHT\r\n   BEGIN:STANDARD\r\n   DTSTART:20001026T020000\r\n   RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10\r\n   TZNAME:EST\r\n   TZOFFSETFROM:-0400\r\n   TZOFFSETTO:-0500\r\n   END:STANDARD\r\n   END:VTIMEZONE\r\n   BEGIN:VTODO\r\n   DTSTAMP:20060205T235300Z\r\n   DUE;TZID=US/Eastern:20060106T120000\r\n   LAST-MODIFIED:20060205T235308Z\r\n   SEQUENCE:1\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #2\r\n   UID:E10BA47467C5C69BB74E8720@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=END:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n", "notes": "1. \"Task #2\" seems to be intended to show DUE with US/Eastern timezone, because \"Task #1\" is DATE.\r\n\r\n2. RELATED would be not START, but END.", "submit_date": "2014-11-05", "submitter_name": "Hiroaki KAWAI", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4168", "doc-id": "RFC6527", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "       vrrpv3OperationsAcceptMode OBJECT-TYPE\r\n           SYNTAX       TruthValue\r\n           MAX-ACCESS   read-create\r\n           STATUS       current\r\n           DESCRIPTION\r\n              \"Controls whether a virtual router in master state\r\n              will accept packets addressed to the address owner's\r\n              IPv6 address as its own if it is not the IPv6 address\r\n              owner.  Default is false(2).\r\n              This object is not relevant for rows representing VRRP\r\n              over IPv4 and should be set to false(2).\"\r\n           DEFVAL       { false }\r\n           ::= { vrrpv3OperationsEntry 11 }", "correct_text": "       vrrpv3OperationsAcceptMode OBJECT-TYPE\r\n           SYNTAX       TruthValue\r\n           MAX-ACCESS   read-create\r\n           STATUS       current\r\n           DESCRIPTION\r\n              \"Controls whether a virtual router in master state\r\n              will accept packets addressed to the address owner's\r\n              address as its own if it is not the address\r\n              owner.  Default is false(2).\r\n           DEFVAL       { false }\r\n           ::= { vrrpv3OperationsEntry 11 }", "notes": "The correction is to remove the specialization on IPv4 and IPv6.\r\n\r\nThe original description says not allow to set to True for IPv4. But in practice IPv4 has use case for acceptMode-as-true too. \r\n\r\nHere is the related state-machine description on accept mode in VRRP RFC. Step 650 doesn't not distinguish IPv4 and IPv6.\r\n  (650) - MUST accept packets addressed to the IPvX address(es)\r\n      associated with the virtual router if it is the IPvX address owner\r\n      or if Accept_Mode is True.  Otherwise, MUST NOT accept these\r\n      packets.", "submit_date": "2014-11-06", "submitter_name": "vrrpv3OperationsAcceptMode description seems not proper", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4169", "doc-id": "RFC7230", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "     #element => [ ( \",\" / element ) *( OWS \",\" [ OWS element ] ) ]\r\n\r\n     1#element => *( \",\" OWS ) element *( OWS \",\" [ OWS element ] )\r\n\r\n   Empty elements do not contribute to the count of elements present.\r\n   For example, given these ABNF productions:\r\n\r\n     example-list      = 1#example-list-elmt\r\n     example-list-elmt = token ; see Section 3.2.6\r\n\r\n   Then the following are valid values for example-list (not including\r\n   the double quotes, which are present for delimitation only):\r\n\r\n     \"foo,bar\"\r\n     \"foo ,bar,\"\r\n     \"foo , ,bar,charlie   \"", "correct_text": "     #element => [ ( \",\" / element ) *( OWS \",\" [ OWS element ] ) ]\r\n\r\n     1#element => *( \",\" OWS ) element *( OWS \",\" [ OWS element ] )\r\n\r\n   Empty elements do not contribute to the count of elements present.\r\n   For example, given these ABNF productions:\r\n\r\n     example-list      = 1#example-list-elmt\r\n     example-list-elmt = token ; see Section 3.2.6\r\n\r\n   Then the following are valid values for example-list (not including\r\n   the double quotes, which are present for delimitation only):\r\n\r\n     \"foo,bar\"\r\n     \"foo ,bar,\"\r\n     \"foo , ,bar,charlie\"", "notes": "\"foo , ,bar,charlie   \" cannot be derived from 1#token (legacy list rule)\r\n\"foo , ,bar,charlie\" can be derived from 1#token (legacy list rule)", "submit_date": "2014-11-09", "submitter_name": "Simon Schueppel", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4170", "doc-id": "RFC5480", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   ---------+----------+------------+-----------\r\n   256      | 512      | SHA-512    | secp521r1\r\n   ---------+----------+------------+-----------", "correct_text": "   ---------+----------+------------+-----------\r\n   256      | 512+     | SHA-512    | secp521r1\r\n   ---------+----------+------------+-----------", "notes": "The first table in section 4 (p. 9) provides the right text. The corresponding line in the table on p. 10 is the wrong one. In fact the key size is exactly 521 and not only 512+. Therefore 512+ in both tables could also be replaced by 521.", "submit_date": "2014-11-11", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:12:13"}, {"errata_id": "4180", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.4", "orig_text": "n/a", "correct_text": "n/a", "notes": "The section on status code 304 is missing even though that status code is mentioned in other parts of the document. RFC2616 described the status code as follows (in section 10.3.5):\r\n\r\n\r\n> 10.3.5 304 Not Modified\r\n>\r\n>    If the client has performed a conditional GET request and access is\r\n>    allowed, but the document has not been modified, the server SHOULD\r\n>    respond with this status code. The 304 response MUST NOT contain a\r\n>    message-body, and thus is always terminated by the first empty line\r\n>    after the header fields.\r\n>\r\n>    The response MUST include the following header fields:\r\n>\r\n>       - Date, unless its omission is required by section 14.18.1\r\n\r\n\r\nThis section would go right after \"6.4.4.  303 See Other\".\n --VERIFIER NOTES-- \nStatus code 304 relates to conditional requests, and is therefore documented in RFC 7232 (Section 4.1).  This fact is shown in the table in RFC 7231, Section 6.1, and in the IANA registry \"HTTP Status Codes\" <http://www.iana.org/assignments/http-status-codes>.", "submit_date": "2014-11-14", "submitter_name": "Michel Albert", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4514", "doc-id": "RFC3711", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "The format of an SRTP packet is illustrated in Figure 1.\r\n\r\n   0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+<+", "correct_text": "The format of an SRTP packet is illustrated in Figure 1.\r\n\r\n 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+<+", "notes": "The bit index second decimal digit is shifted by two characters. These digits should align with the zeros in the second line.", "submit_date": "2015-10-29", "submitter_name": "Bernhard Kirchen", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4171", "doc-id": "RFC5707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "16.3.4", "orig_text": "<xs:element name=\"record\" substitutionGroup=\"primitive\">\r\n<xs:complexType>\r\n<xs:complexContent>\r\n<xs:extension base=\"primitiveType\">\r\n<xs:choice minOccurs=\"0\">\r\n<xs:element ref=\"play\" minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n<xs:element ref=\"tonegen\" minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n<xs:element name=\"recordexit\">\r\n<xs:complexType>\r\n<xs:group ref=\"sendType\"/>\r\n</xs:complexType>\r\n</xs:element>\r\n</xs:choice>", "correct_text": "<xs:element name=\"record\" substitutionGroup=\"primitive\">\r\n<xs:complexType>\r\n<xs:complexContent>\r\n<xs:extension base=\"primitiveType\">\r\n<xs:choice minOccurs=\"0\">\r\n<xs:element ref=\"play\" minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n<xs:element ref=\"tonegen\" minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n</xs:choice>\r\n<xs:element name=\"recordexit\">\r\n<xs:complexType>\r\n<xs:group ref=\"sendType\"/>\r\n</xs:complexType>\r\n</xs:element>", "notes": "Example in section 13.3 shows both <play> and <recordexit> within <record>\r\nbut the schema doesn't allows this\r\n\r\nSec 13.3 example\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<msml version=\"1.1\">\r\n<dialogstart target=\"conn:12345\" name=\"12345\">\r\n<record prespeech=\"3s\" postspeech=\"5s\" maxtime=\"60s\" termkey=\"#\"\r\ndest=\"file://record.wav\" format=\"g729\">\r\n<play barge=\"true\">\r\n<audio uri=\"file://prompt.wav\"/>\r\n</play>\r\n<recordexit>\r\n<send target=\"source\" event=\"done\"\r\nnamelist=\"record.len record.end\"/>\r\n</recordexit>\r\n</record>\r\n</dialogstart>\r\n</msml>", "submit_date": "2014-11-11", "submitter_name": "Mistake in Schema", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4172", "doc-id": "RFC2910", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   a value that the parser treats atomically.  Values from 0x00 to\r\n   0x37777777 are reserved for definition in future IETF standard track\r\n   documents.  The values 0x40000000 to 0x7FFFFFFF are reserved for\r\n   vendor extensions.\r\n", "correct_text": "   a value that the parser treats atomically.  Values from 0x00 to\r\n   0x3FFFFFFF are reserved for definition in future IETF Standards Track\r\n   documents.  The values 0x40000000 to 0x7FFFFFFF are reserved for\r\n   vendor extensions.\r\n", "notes": "", "submit_date": "2014-11-12", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4173", "doc-id": "RFC2911", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4.15", "orig_text": "    0x4000-0x8FFF       reserved for vendor extensions (see section 6.4)\r\n", "correct_text": "    0x4000-0x7FFF       reserved for vendor extensions (see section 6.4)\r\n", "notes": "operation code is a 16-bit signed integer; max is therefore 0x7FFF...", "submit_date": "2014-11-12", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4174", "doc-id": "RFC5222", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15 & Apdx A", "orig_text": "In section 15, the Exception pattern says (in part):\r\n  locationProfileUnrecognized =\r\n    element locationProfileUnrecognized {\r\n      attribute unsupportedProfiles { xsd:NMTOKENS },\r\n      basicException\r\n    }\r\n\r\nThe corresponding section in Appendix A says:\r\n       <define name=\"locationProfileUnrecognized\">\r\n         <element name=\"locationProfileUnrecognized\">\r\n           <attribute name=\"unsupportedProfiles\">\r\n             <data type=\"NMTOKENS\"/>\r\n           </attribute>\r\n           <ref name=\"basicException\"/>\r\n         </element>\r\n       </define>\r\n", "correct_text": "Section 15 should say:\r\n  locationProfileUnrecognized =\r\n    element locationProfileUnrecognized {\r\n      basicException\r\n    }\r\n\r\nAppendix A should say:\r\n       <define name=\"locationProfileUnrecognized\">\r\n         <element name=\"locationProfileUnrecognized\">\r\n           <ref name=\"basicException\"/>\r\n         </element>\r\n       </define>\r\n", "notes": "The \u2018unsupportedProfiles\u2019 attribute is not referenced anywhere else in the text of the document; no instruction is given describing the use of this attribute.  This, by itself, is problematic.  However, based on the type, it seems reasonable that the intent may have been to list the location profiles which the server is unable to understand.\r\n\r\nConsider the condition under which the \u2018locationProfileUnrecognized\u2019 error is returned (section 12.1):\r\n    8. If a server receives a request that only contains location\r\n       information using profiles it does not understand, the server\r\n       responds with a <locationProfileError>\r\n\r\nIf none of the locations include the optional \u2018profile\u2019 attribute, the server may not be able to identify any of the profiles and therefore would be incapable of returning a list of profile names.  This is especially problematic considering that the \u2018unsupportedProfiles\u2019 attribute is required by the schema.\r\n\r\nEven in cases where one or more locations include the profile attribute, the client already knows what profiles were used in the request, so returning a list of these profiles does not provide new information to the client.\r\n\r\nAt best, use of the \u2018unsupportedProfiles\u2019 attribute appears to be redundant; at worst, it is impossible.  Therefore, the suggested course of action is to remove the attribute from the schema.", "submit_date": "2014-11-12", "submitter_name": "Dan Banks", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4175", "doc-id": "RFC5222", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "     <location id=\"DEF 345\" profile=\"geodetic-2d\">\r\n       <gml:Point id=\"point1\" srsName=\"urn:ogc:def:crs:EPSG:4326\">\r\n         <gml:pos>42.656844 -73.348157</gml:pos>\r\n       </gml:Point>\r\n     </location>", "correct_text": "     <location id=\"DEF 345\" profile=\"geodetic-2d\">\r\n       <gml:Point id=\"point1\"\r\n       srsName=\"urn:ogc:def:crs:EPSG::4326\">\r\n         <gml:pos>42.656844 -73.348157</gml:pos>\r\n       </gml:Point>\r\n     </location>", "notes": "The 'srsName' in the location provided as part of example in Figure 15 is missing a required ':' between 'EPSG' and '4326'.", "submit_date": "2014-11-12", "submitter_name": "Dan Banks", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4181", "doc-id": "RFC7044", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.3", "orig_text": "9.3. Receiving a Response with History-Info or Request Timeouts", "correct_text": "9.3. Receiving a Response or Request times out", "notes": "The title of section 9.3 is misleading in the sense that it suggests that it only applies to responses that contain the History-Info header. This is not correct, it applies to all responses when the RFC7044 applies.\n --VERIFIER NOTES-- \n   This errata indicates an editorial preference rather than an error.", "submit_date": "2014-11-14", "submitter_name": "Hans Erik van Elburg", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4182", "doc-id": "RFC7404", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "Telnet [RFC0495]", "correct_text": "Telnet [RFC0854]", "notes": "Isn't STD 8 (RFC 854) the official telnet specification?", "submit_date": "2014-11-16", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "joel jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4183", "doc-id": "RFC7404", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "Hardware dependency: LLAs have usually been based on 64-bit Extended\r\nUnique Identifiers (EUI-64); hence, they change when the Message\r\nAuthentication Code (MAC) address is changed.", "correct_text": "Hardware dependency: LLAs have usually been based on 64-bit Extended\r\nUnique Identifiers (EUI-64); hence, they change when the Media\r\nAccess Control (MAC) address is changed.", "notes": "", "submit_date": "2014-11-16", "submitter_name": "Andreas Cudok", "verifier_id": "", "verifier_name": "joel jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6433", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "Each SPF record is placed in the DNS tree at the owner name it\r\n   pertains to, not in a subdomain under the owner name.  This is\r\n   similar to how SRV records [RFC2782] are done.", "correct_text": "Each SPF record is placed in the DNS tree at the owner name it\r\n   pertains to, not in a subdomain under the owner name.  This is\r\n   different from how SRV records [RFC2782] are done.", "notes": "SRV records are placed at specific subdomains, which is not the case for SPF records. (I've chosen Editorial instead of Technical because the meaning of this paragraph should be clear from the context and thus this feels more like a typo.)\r\n\r\nRPC changed from \"Editorial\" to \"Technical\": Unable to verify, requires review.", "submit_date": "2021-02-17", "submitter_name": "Kaspar Etter", "verifier_id": "", "verifier_name": null, "update_date": "2026-05-28 17:11:45"}, {"errata_id": "4176", "doc-id": "RFC5222", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15 & Apdx A", "orig_text": "Section 15:  \r\n\r\nexceptionContainer =\r\n    (badRequest?\r\n     & internalError?\r\n     & serviceSubstitution?\r\n     & defaultMappingReturned?\r\n     & forbidden?\r\n     & notFound?\r\n     & loop?\r\n     & serviceNotImplemented?\r\n     & serverTimeout?\r\n     & serverError?\r\n     & locationInvalid?\r\n     & locationProfileUnrecognized?),\r\n    extensionPoint,\r\n    source\r\n\r\nAnd:\r\n\r\n  serverError = element serverError { basicException }\r\n  locationInvalid = element locationInvalid { basicException }\r\n\r\nAppendix A:\r\n\r\n           <optional>\r\n             <ref name=\"serverError\"/>\r\n           </optional>\r\n           <optional>\r\n             <ref name=\"locationInvalid\"/>\r\n           </optional>\r\n\r\nAnd:\r\n\r\n       <define name=\"serverError\">\r\n         <element name=\"serverError\">\r\n           <ref name=\"basicException\"/>\r\n         </element>\r\n       </define>\r\n\r\n       <define name=\"locationInvalid\">\r\n         <element name=\"locationInvalid\">\r\n           <ref name=\"basicException\"/>\r\n         </element>\r\n       </define>", "correct_text": "Section 15:  \r\n\r\nexceptionContainer =\r\n    (badRequest?\r\n     & internalError?\r\n     & serviceSubstitution?\r\n     & defaultMappingReturned?\r\n     & forbidden?\r\n     & notFound?\r\n     & loop?\r\n     & serviceNotImplemented?\r\n     & serverTimeout?\r\n     & serverError?\r\n     & SRSInvalid?\r\n     & locationInvalid?\r\n     & locationProfileUnrecognized?),\r\n    extensionPoint,\r\n    source\r\n\r\nAnd:\r\n\r\n  serverError = element serverError { basicException }\r\n  SRSInvalid = element SRSInvalid { basicException }\r\n  locationInvalid = element locationInvalid { basicException }\r\n\r\nAppendix A:\r\n\r\n           <optional>\r\n             <ref name=\"serverError\"/>\r\n           </optional>\r\n           <optional>\r\n             <ref name=\"SRSInvalid\"/>\r\n           </optional>\r\n           <optional>\r\n             <ref name=\"locationInvalid\"/>\r\n           </optional>\r\n\r\nAnd:\r\n\r\n       <define name=\"serverError\">\r\n         <element name=\"serverError\">\r\n           <ref name=\"basicException\"/>\r\n         </element>\r\n       </define>\r\n\r\n       <define name=\"SRSInvalid\">\r\n         <element name=\"SRSInvalid\">\r\n           <ref name=\"basicException\"/>\r\n         </element>\r\n       </define>\r\n\r\n       <define name=\"locationInvalid\">\r\n         <element name=\"locationInvalid\">\r\n           <ref name=\"basicException\"/>\r\n         </element>\r\n       </define>", "notes": "The SRSInvalid error is defined in section 13.1, but was omitted from the schemas.", "submit_date": "2014-11-13", "submitter_name": "Dan Banks", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4177", "doc-id": "RFC4975", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   line, and a flag character.  If a body is present, the end-line MUST\r\n   be preceded by a CRLF that is not part of the body.  If the chunk\r\n   represents the data that forms the end of the complete message, the\r\n   flag value MUST be a \"$\".  If the sender is aborting an incomplete\r\n   message, and intends to send no further chunks in that message, the\r\n   flag MUST be a \"#\".  Otherwise, the flag MUST be a \"+\".\r\n\r\n   If the request contains a body, the sender MUST ensure that the end-\r\n   line (seven hyphens, the transaction identifier, and a continuation\r\n   flag) is not present in the body.  If the end-line is present in the\r\n", "correct_text": "   line, and a flag character.  If a body is present, the end-line MUST\r\n   be preceded by a CRLF that is not part of the body.  If the chunk\r\n   represents the data that forms the end of the complete message, the\r\n   flag value MUST be a \"$\".  If the sender is aborting an incomplete\r\n   message, and intends to send no further chunks in that message, the\r\n   flag MUST be a \"#\".  Otherwise, the flag MUST be a \"+\".\r\n\r\n   If the request contains a body, the sender MUST ensure that the end-\r\n   line (seven hyphens, the transaction identifier, and a continuation\r\n   flag) is not present in the body.  A receiver detecting an end-line\r\n   present in the body preceded by a non-empty sequence other than CRLF\r\n   SHOULD terminate the session. If the end-line is present in the\r\n", "notes": "The way the text is written leaves unspecified how a receiver should handle the situation where it encounters an end-line within the body that's preceded by something OTHER than CRLF.\r\n\r\nObviously, this indicates the sender is not complying with this RFC, but what should the receiver do?\r\n\r\nShould the receiver terminate the connection? Or just proceed giving no special interpretation to the end-line, which would actually work just fine?\r\n\r\nThe suggested change reflects the first choice. If the second choice were made, the change could be:\r\n\r\n   If the request contains a body, the sender MUST ensure that the\r\n   end-line (seven hyphens, the transaction identifier, and a continuation\r\n   flag) neither appears at the beginning of the body nor is not present\r\n   in the body preceded by CRLF. An end-line MAY appear in the body if\r\n   preceded in the body by any non-empty sequence other than CRLF.\r\n\r\nThis would force the interpretation that an end-line not preceded by CRLF has no special significance.", "submit_date": "2014-11-13", "submitter_name": "Archie Cobbs", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 20:54:23"}, {"errata_id": "4178", "doc-id": "RFC5444", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5.1", "orig_text": "When an Address Block TLV Type is registered, then a new registry for\r\ntype extensions of that type must be created.  A document that\r\ndefines a Message TLV Type MUST also specify the mechanism by which\r\nits type extensions are allocated, from among those in [BCP26].", "correct_text": "When an Address Block TLV Type is registered, then a new registry for\r\ntype extensions of that type must be created.  A document that\r\ndefines an Address Block TLV Type MUST also specify the mechanism by\r\nwhich its type extensions are allocated, from among those in [BCP26].", "notes": "'Message TLV Type' should read 'Address Block TLV Type'. This is likely a 'Copy-Paste' error from section 6.4.1, which stipulates a similar requirement for Message TLV Type Extension Registry creation.", "submit_date": "2014-11-13", "submitter_name": "Ronald in 't Velt", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4179", "doc-id": "RFC3777", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   3.  The nominating committee comprises at least a Chair, 10 voting\r\n       volunteers, 3 liaisons, and an advisor.", "correct_text": "   3.  The nominating committee comprises at least a Chair, 10 voting\r\n       volunteers, two liaisons, and an advisor.", "notes": "The ISOC liaison is optional. Saying \"at least ... two\" is future-proof.", "submit_date": "2014-11-13", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4515", "doc-id": "RFC6844", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   o  If A(X) is not null, and R(A(X)) is not empty, then R(X) =\r\n      R(A(X)), otherwise\r\n", "correct_text": "   o  If A(X) is not null, and CAA(A(X)) is not empty, then R(X) =\r\n      CAA(A(X)), otherwise\r\n", "notes": "R is the algorithm being described here, so R(A(X)) means a recursive search on the CNAME target, including its parents. However, the example that follows, Parent(Alias(x.y.z)) is not part of the search. Either the algorithm is incorrectly specified, or the example is incomplete.\r\n\r\nWhile this change is correct, it has already been accepted with HFDU in errata 5065.\n --VERIFIER NOTES-- \n   Errata 5065 was accepted first and covers this error.", "submit_date": "2015-10-29", "submitter_name": "Tom Clegg", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4216", "doc-id": "RFC7011", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.2.2", "orig_text": "   Scope Field Count\r\n\r\n      Number of scope fields in this Options Template Record.  The Scope\r\n      Fields are normal Fields, except that they are interpreted as\r\n      scope at the Collector.  A scope field count of N specifies that\r\n      the first N Field Specifiers in the Template Record are Scope\r\n      Fields.  The Scope Field Count MUST NOT be zero.", "correct_text": "   Scope Field\r\n\r\n      Scope Fields are normal Fields, except that they are interpreted\r\n      as scope at the Collector.\r\n\r\n   Scope Field Count\r\n\r\n      Number of scope fields in this Options Template Record.\r\n      A scope field count of N specifies that\r\n      the first N Field Specifiers in the Template Record are Scope\r\n      Fields.  The Scope Field Count MUST NOT be zero.", "notes": "Separate out the \"Scope Field\" definition from \"Scope Field Count\", since \"Scope Field\" is used as a defined term throughout the document without a formal definition.", "submit_date": "2014-12-31", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6843", "doc-id": "RFC8555", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.3", "orig_text": "Because many web servers\r\nallocate a default HTTPS virtual host to a particular low-privilege\r\ntenant user in a subtle and non-intuitive manner, the challenge must\r\nbe completed over HTTP, not HTTPS.\r\n", "correct_text": "Because many web servers\r\nallocate a default HTTPS virtual host to a particular low-privilege\r\ntenant user in a subtle and non-intuitive manner, the challenge must\r\nbe initiated over HTTP, not HTTPS.", "notes": "Completing the entire http-01 challenge over HTTP is unnecessary. The threat of default HTTPS virtual hosts is remediated by \"initiating\" the http-01 challenge over HTTP. Validation servers which redirect from HTTP to HTTPS should be permitted following the rest of the guidance within Section 10, Security Considerations.", "submit_date": "2022-02-08", "submitter_name": "James Kasten", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-11 18:51:38"}, {"errata_id": "4189", "doc-id": "RFC7230", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "     field-name     = token\r\n     field-value    = *( field-content / obs-fold )\r\n     field-content  = field-vchar [ 1*( SP / HTAB ) field-vchar ]\r\n     field-vchar    = VCHAR / obs-text\r\n\r\n     obs-fold       = CRLF 1*( SP / HTAB )\r\n                    ; obsolete line folding\r\n                    ; see Section 3.2.4", "correct_text": "     field-name     = token\r\n     field-value    = *( field-content / obs-fold )\r\n     field-content  = field-vchar [ 1*( SP / HTAB / field-vchar )\r\n                      field-vchar ]\r\n     field-vchar    = VCHAR / obs-text\r\n\r\n     obs-fold       = OWS CRLF 1*( SP / HTAB )\r\n                    ; obsolete line folding\r\n                    ; see Section 3.2.4", "notes": "the field-value rule given in Section 3.2 will not recognize several strings recognized by specific header rules.\r\n\r\nExamples:\r\n    - \", , ,\" recognized by legacy list rule\r\n    - \"abrowser/0.001 (C O M M E N T)\" recognized by User-Agent rule\r\n    - \"gzip , chunked\" recognized by Transfer-Encoding rule\r\n    - etc.\r\n\r\nGeneral Problem:\r\n    the specified field-value rule does not allow single field-vchar surrounded by whitespace anywhere\r\n\r\nFurther Notes:\r\n    -what the authors propably wanted to say:\r\n        a string of octets is a field-value if, and only if:\r\n            -it is *( field-vchar / SP / HTAB / obs-fold )\r\n            -if it is not empty, it starts and ends with field-vchar\r\n\r\n    -the suggested correction was designed according to these criteria\r\n\r\n--------------------- Notes from verifier ---------------------\r\nThis has been edited from the original report after discussion, but even this is not right.  There's more here than can be reasonably fixed in an errata report, and the proper fix needs to be done in a revision of the document -- hence, \"Held for Document Update\".  Note that this *is* a valid report, and that a fix is needed.  The one above is the best approach for now, and a better fix will be developed in 7230bis.", "submit_date": "2014-11-26", "submitter_name": "Simon Schueppel", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4190", "doc-id": "RFC5785", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "             <http://www.w3.org/TR/2002/ REC-P3P-20020416>.\r\n\r\n\r\n             <http:// www.w3.org/TR/2004/REC-webarch-20041215>.", "correct_text": "             <http://www.w3.org/TR/2002/REC-P3P-20020416>.\r\n\r\n\r\n             <http://www.w3.org/TR/2004/REC-webarch-20041215>.", "notes": "There are erroneous spaces in links", "submit_date": "2014-11-27", "submitter_name": "Lauri Rooden", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4191", "doc-id": "RFC6840", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.11", "orig_text": "...\r\n\r\nA signed zone MUST include a DNSKEY for each algorithm present in\r\n      the zone's DS RRset and expected trust anchors for the zone.  The\r\n      zone MUST also be signed with each algorithm (though not each key)\r\n      present in the DNSKEY RRset.  ", "correct_text": "A signed zone MUST include a DNSKEY for each algorithm present in\r\n      the zone's DS RRset and expected trust anchors for the zone.  Each\r\n      authoritative RRset in the zone MUST be signed with each \r\n      algorithm (though not each key) present in the DNSKEY RRset.  ", "notes": "Zones aren't signed (per se), the data sets within them are.  But not cut point (NS) and glue.\n --VERIFIER NOTES-- \n This erratum is being rejected as the nomenclature being updated is understood within the community and is used in other DNSSEC specifications.  ", "submit_date": "2014-12-02", "submitter_name": "Edward Lewis", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4217", "doc-id": "RFC20", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "      2 The use of the symbols in 2/2, 2/7, 2/12, 5/14, /6/0, and 7/14\r\n   as diacritical marks is described in Appendix A, A5.2\r\n      3 These characters should not be used in international interchange\r\n   without determining that there is agreement between sender and\r\n   recipient.  (See Appendix B4.)\r\n", "correct_text": "     2 The use of the symbols in 2/2, 2/7, 2/12, 5/14, /6/0, and 7/14\r\n   as diacritical marks is described in Appendix A, A5.2, of X3.4-1968.\r\n      3 These characters should not be used in international interchange\r\n   without determining that there is agreement between sender and\r\n   recipient.  (See Appendix B4 of X3.4-1968.)\r\n", "notes": "The appendixes are in the original standard, not the RFC.\r\n\r\nIn the abstract, it says \"X3, 4-\" rather than \"X3.4-\" which is surely an OCR or transcription error.", "submit_date": "2015-01-03", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4218", "doc-id": "RFC3461", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10.5", "orig_text": "Note that RET, ENVID, and ORCPT all retain their original values.\r\n\r\n...\r\n\r\n>>> RCPT TO:<Sam@Boondoggle.GOV> NOTIFY=SUCCESS \\\r\nORCPT=rfc822;George@Tax-ME.GOV\r\n<<< 250 recipient okay", "correct_text": "Note that RET, ENVID, NOTIFY, and ORCPT all retain their original\r\nvalues.\r\n\r\n...\r\n\r\n>>> RCPT TO:<Sam@Boondoggle.GOV> NOTIFY=FAILURE \\\r\nORCPT=rfc822;George@Tax-ME.GOV\r\n<<< 250 recipient okay", "notes": "See the original conversation during the submission (section 10.1) where the NOTIFY parameter has a \"FAILURE\" value for \"George@Tax-ME.GOV\" recipient.\r\n\r\n>>> RCPT TO:<George@Tax-ME.GOV> NOTIFY=FAILURE \\\r\nORCPT=rfc822;George@Tax-ME.GOV\r\n<<< 250 <George@Tax-ME.GOV> recipient ok\r\n\r\nSee section 5.2.7.2, \"single-recipient aliases\".\r\n\r\nUnder normal circumstances, when a message arrives for an \"alias\"\r\nwhich has a single forwarding address, a DSN SHOULD NOT be issued.\r\nAny ENVID, NOTIFY, RET, or ORCPT parameters SHOULD be propagated with\r\nthe message as it is redistributed to the forwarding address.\r\n\r\nWhere it saids that all ENVID, NOTIFY, RET, and ORCPT should be propagated.\n --VERIFIER NOTES-- \nThere are specific cases in which NOTIFY doesn't retain its value when a message is relayed (such as if the next hop doesn't support the extension) and the omission of NOTIFY from that list is deliberate.", "submit_date": "2015-01-03", "submitter_name": "Jaime Hablutzel", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7691", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8.4.2", "orig_text": "The following is an example of this property with an alternate\r\nrepresentation of an LDAP URI to a directory entry containing the\r\ncontact information:\r\n\r\nCONTACT;ALTREP=\"ldap://example.com:6666/o=ABC%20Industries\\,\r\n c=US???(cn=Jim%20Dolittle)\":Jim Dolittle\\, ABC Industries\\,\r\n +1-919-555-1234", "correct_text": "The following is an example of this property with an alternate\r\nrepresentation of an LDAP URI to a directory entry containing the\r\ncontact information:\r\n\r\nCONTACT;ALTREP=\"ldap://example.com:6666/o=ABC%20Industries,\r\n c=US???(cn=Jim%20Dolittle)\":Jim Dolittle\\, ABC Industries\\,\r\n +1-919-555-1234", "notes": "Note that the original text has an escaped comma in the ALTREP parameter value at the end of the unfolded line.\r\n\r\nThe characters '\\' and ',' are allowed in quoted parameter values.\r\nThis means that the URL must be parsed as\r\n\"ldap://example.com:6666/o=ABC%20Industries\\,c=US???(cn=Jim%20Dolittle)\"\r\nbut this is not a valid URI because of the extra backslash.\r\n\r\nBecause commas do not need to be escaped in quoted parameter values, I assume that this is an error and the comma should not have been quoted.", "submit_date": "2023-10-30", "submitter_name": "Tom Sydney Kerckhove", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-11-01 13:40:39"}, {"errata_id": "6844", "doc-id": "RFC9067", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2. grouping prefix", "orig_text": "       leaf mask-length-upper {\r\n         type uint8 {\r\n           range \"1..128\";\r\n         }\r\n", "correct_text": "       leaf mask-length-upper {\r\n         type uint8 {\r\n           range \"0..128\";\r\n         }\r\n", "notes": "With the original definition, it is not possible to specify an exact match for the default routes (0.0.0.0/0 and ::/0) which is a valid use case.\r\n\r\n=====  AD Note ====\r\nThis report is valid, but the resolution requires an update to the YANG model and not just a text correction.", "submit_date": "2022-02-10", "submitter_name": "Kris Lambrechts", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-02-11 19:04:10"}, {"errata_id": "4192", "doc-id": "RFC3550", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.4.1", "orig_text": "sender's octet count: 32 bits\r\n      The total number of payload octets (i.e., not including header or\r\n      padding) transmitted in RTP data packets by the sender since\r\n      starting transmission up until the time this SR packet was\r\n      generated.  The count SHOULD be reset if the sender changes its\r\n      SSRC identifier.  This field can be used to estimate the average\r\n      payload data rate.", "correct_text": "sender's octet count: 32 bits\r\n      The total number of payload octets \r\n      transmitted in RTP data packets by the sender since\r\n      starting transmission up until the time this SR packet was\r\n      generated.  The count SHOULD be reset if the sender changes its\r\n      SSRC identifier.  This field can be used to estimate the average\r\n      payload data rate.", "notes": "Where as payload octets is defined as the total number of data octets contained in a Rtp Packet minus the 12 Header octets for Rtp Packets.\r\n\r\nPadding octets as well as octets which occur in the contributing source list should also be included as they may differ on a per packet basis and would make the total calculation invalid.\r\n\r\nDuring TCP communication any application layer header should NOT be included in the total bytes count when including the header length.\r\n\r\nAny Rtcp packet counters should include the total length of the packet (header, padding and any other data).\n --VERIFIER NOTES-- \n   Rejected based on discussion in avtcore", "submit_date": "2014-12-03", "submitter_name": "Julius Friedman", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4193", "doc-id": "RFC4724", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "See Section 8 for a description of this behavior", "correct_text": "See Section 5 for a description of this behavior", "notes": "", "submit_date": "2014-12-04", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4194", "doc-id": "RFC4632", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": " Systems that process route announcements must be able to verify that\r\n   information that they receive is acceptable according to policy\r\n   rules.  Implementations that filter route advertisements must allow\r\n   masks or prefix lengths in filter elements.  Thus, filter elements\r\n   that formerly were specified as\r\n\r\n      accept 172.16.0.0\r\n      accept 172.25.120.0.0\r\n      accept 172.31.0.0\r\n      deny 10.2.0.0\r\n      accept 10.0.0.0", "correct_text": " Systems that process route announcements must be able to verify that\r\n   information that they receive is acceptable according to policy\r\n   rules.  Implementations that filter route advertisements must allow\r\n   masks or prefix lengths in filter elements.  Thus, filter elements\r\n   that formerly were specified as\r\n\r\n      accept 172.16.0.0\r\n      accept 172.25.120.0\r\n      accept 172.31.0.0\r\n      deny 10.2.0.0\r\n      accept 10.0.0.0", "notes": "the second network address has 40 bits (5 groups of numbers instead of 4-32 bits).\r\n\r\n172.25.120.0.0", "submit_date": "2014-12-04", "submitter_name": "larry", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4195", "doc-id": "RFC7110", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4", "orig_text": "When an echo reply is received, if the Reply Mode is \"Reply via\r\nSpecified Path\" and the Reply Path return code is \"The echo reply was\r\nsent successfully using the specified Reply Path\", and if the return\r\npath is an MPLS LSP.  The ingress LSR MUST perform FEC validation\r\n(based on the FEC Stack information of the return path carried in the\r\nReply Path TLV) as an egress LSR does when receiving an echo request,\r\nthe FEC validation process (relevant to \"ping\" mode) defined in\r\nSection 4.4.1 of [RFC4379] applies here.\r\n\r\nWhen an echo reply is received with return code set to \"Malformed\r\necho request received\" and the Subcode set to zero.  It is possible\r\nthat the egress LSR may not know the \"Reply via Specified Path\" Reply\r\nMode, the operator may choose to re-perform another LSP ping by using\r\none of the four Reply Modes defined [RFC4379].\r\n", "correct_text": "When an echo reply is received, if the Reply Mode is \"Reply via\r\nSpecified Path\" and the Reply Path return code is \"The echo reply was\r\nsent successfully using the specified Reply Path\", and if the return\r\npath is an MPLS LSP, the ingress LSR MUST perform FEC validation\r\n(based on the FEC Stack information of the return path carried in the\r\nReply Path TLV) as an egress LSR does when receiving an echo request,\r\nthe FEC validation process (relevant to \"ping\" mode) defined in\r\nSection 4.4.1 of [RFC4379] applies here.\r\n\r\nWhen an echo reply is received with return code set to \"Malformed\r\necho request received\" and the Subcode set to zero, it is possible\r\nthat the egress LSR may not know the \"Reply via Specified Path\" Reply\r\nMode; the operator may choose to re-perform another LSP ping by using\r\none of the four Reply Modes defined in [RFC4379].\r\n", "notes": "In the first two paragraphs of section 5.4, the conditional clauses and the main clause have been separated by periods, not commas, which creates uncertainty as to whether or not text of the main clause has been elided.  This changes the periods into commas.", "submit_date": "2014-12-09", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4196", "doc-id": "RFC7110", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "the recommended type value is 26.\r\n\r\n", "correct_text": "the type value is 26.", "notes": "The WG commended a value of 26 to IANA for the \"IPv4 RSVP Tunnel sub-TLV\r\nType\" which IANA confirmed. Leaving in the 'recommended' introduces a\r\nelement of uncertainty that is best avoided.", "submit_date": "2014-12-09", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4197", "doc-id": "RFC7110", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "The Reply Path TLV contains one or more nested sub-TLVs that can be\r\nused\r\n", "correct_text": "The Reply Path TLV contains zero or more nested sub-TLVs that can be\r\nused", "notes": "As section 4.2 correctly states, the Reply Path TLV can contain zero\r\nsub-TLVs; this brings section 4 inline.", "submit_date": "2014-12-09", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4198", "doc-id": "RFC5321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "Whenever possible, a receiver-\r\nSMTP SHOULD test the first digit (severity indication) of the reply\r\ncode.\r\n", "correct_text": "Whenever possible, a sender-\r\nSMTP SHOULD test the first digit (severity indication) of a reply\r\ncode it receives.", "notes": "The \"sender\" is the entity that issues commands and receives response codes (from the \"receiver\").", "submit_date": "2014-12-09", "submitter_name": "Jasen Betts", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4516", "doc-id": "RFC3665", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   F3 ACK Alice -> Proxy 1\r\n\r\n   ACK sip:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TCP client.atlanta.example.com:5060;branch=z9hG4bK74b43\r\n   Max-Forwards: 70\r\n   From: Alice <sip:alice@atlanta.example.com>;tag=9fxced76sl\r\n   To: Bob <sip:bob@biloxi.example.com>;tag=3flal12sf\r\n   Call-ID: 3848276298220188511@atlanta.example.com\r\n   CSeq: 1 ACK\r\n   Content-Length: 0\r\n", "correct_text": "   F3 ACK Alice -> Proxy 1\r\n\r\n   ACK sip:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TCP client.atlanta.example.com:5060;branch=z9hG4bK12345\r\n   Max-Forwards: 70\r\n   From: Alice <sip:alice@atlanta.example.com>;tag=9fxced76sl\r\n   To: Bob <sip:bob@biloxi.example.com>;tag=3flal12sf\r\n   Call-ID: 3848276298220188511@atlanta.example.com\r\n   CSeq: 1 ACK\r\n   Content-Length: 0\r\n", "notes": "ACK is a new transaction and need a new value for via-branch\n --VERIFIER NOTES-- \n The flow in the RFC is correct. ACK is only a new transaction if the final response to the INVITE was in the 2xx class. In this case, the final response was a 407 - this ACK is hop-by-hop, and is part of the INVITE transaction.\r\n", "submit_date": "2015-10-30", "submitter_name": "Fritz", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4199", "doc-id": "RFC2326", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "4 RTSP Message\r\n\r\n   RTSP is a text-based protocol and uses the ISO 10646 character set in\r\n   UTF-8 encoding (RFC 2279 [21]). Lines are terminated by CRLF, but\r\n   receivers should be prepared to also interpret CR and LF by\r\n   themselves as line terminators.\r\n\r\n     Text-based protocols make it easier to add optional parameters in a\r\n     self-describing manner. Since the number of parameters and the\r\n     frequency of commands is low, processing efficiency is not a\r\n     concern. Text-based protocols, if done carefully, also allow easy\r\n     implementation of research prototypes in scripting languages such\r\n     as Tcl, Visual Basic and Perl.\r\n\r\n     The 10646 character set avoids tricky character set switching, but\r\n     is invisible to the application as long as US-ASCII is being used.\r\n     This is also the encoding used for RTCP. ISO 8859-1 translates\r\n     directly into Unicode with a high-order octet of zero. ISO 8859-1\r\n     characters with the most-significant bit set are represented as\r\n     1100001x 10xxxxxx. (See RFC 2279 [21])\r\n\r\n   RTSP messages can be carried over any lower-layer transport protocol\r\n   that is 8-bit clean.\r\n\r\n   Requests contain methods, the object the method is operating upon and\r\n   parameters to further describe the method. Methods are idempotent,\r\n   unless otherwise noted. Methods are also designed to require little\r\n   or no state maintenance at the media server.", "correct_text": "\r\n4 RTSP Message\r\n\r\n   RTSP is a text-based protocol and uses the ISO 10646 character set in\r\n   UTF-8 encoding (RFC 2279 [21]). Lines are terminated by CRLF, but\r\n   receivers should be prepared to also interpret CR and LF by\r\n   themselves as line terminators.\r\n\r\n     Text-based protocols make it easier to add optional parameters in a\r\n     self-describing manner. Since the number of parameters and the\r\n     frequency of commands is low, processing efficiency is not a\r\n     concern. Text-based protocols, if done carefully, also allow easy\r\n     implementation of research prototypes in scripting languages such\r\n     as Tcl, Visual Basic and Perl.\r\n\r\n     The 10646 character set avoids tricky character set switching, but\r\n     is invisible to the application as long as US-ASCII is being used.\r\n     This is also the encoding used for RTCP. ISO 8859-1 translates\r\n     directly into Unicode with a high-order octet of zero. ISO 8859-1\r\n     characters with the most-significant bit set are represented as\r\n     1100001x 10xxxxxx. (See RFC 2279 [21])\r\n\r\n   RTSP messages can be carried over any lower-layer transport protocol\r\n   that is 8-bit clean.\r\n\r\n   Requests contain methods, the object the method is operating upon and\r\n   parameters to further describe the method. Methods are idempotent,\r\n   unless otherwise noted. Methods are also designed to require little\r\n   or no state maintenance at the media server.\r\n\r\n*Please note the hexadecimal octet 0x36 should not be included in any \r\npart of a RTSP message, if present it should be replaced with binary \r\nescaped sequence as defined in: <consensus>*.", "notes": "Section [15.1 Base Syntax] makes the following definitions:\r\n..\r\nsafe               =  \"\\$\" | \"-\" | \"_\" | \".\" | \"+\"\r\n..\r\nreserved           =  \";\" | \"/\" | \"?\" | \":\" | \"@\" | \"&\" | \"=\"\r\nextra              =  \"!\" | \"*\" | \"$'$\" | \"(\" | \")\" | \",\"\r\nunreserved         =  alpha | digit | safe | extra\r\nxchar              =  unreserved | reserved | escape\r\n\r\nHowever it doesn't explicitly state the association of \"$\" [hexadecimal 0x24]\r\n\r\nSection [10.12 Embedded (Interleaved) Binary Data] specified a mechanism of transferring RTSP messages over a TCP connection with a application layer header consisting of the hexadecimal octet 0x24; followed by a single octet channel identifier and the RFC4571 length specifier of the frame.\r\n\r\nDue to the fact 0x24 violates section 4's requirements based on the fact it cannot be masked with the octet (AND 0xc3) to ensure it is a valid character I am filing this errata.\r\n\r\nThe chosen octet may also be present, specifically in the types of RTSP messages which are interleaved during playback such as ANNOUNCE. E.g. 0x24 could be a part of the configuration specifying the bits per pixel or audio bit depth as part of the SDP inter alia.\r\n\r\nIn such cases the underlying parser would interpret this octet as the start of the defined application header and cause framing errors which could cause data loss as allow for buffer overflow attacks of carefully crafted binary data.\r\n\r\nThere are also definitions which need to be made in the stadard for what to do when less then the amount of bytes indicated by the application layer frame header are or are not present. (e.g. more or less bytes are required then are present during reception of the given the [$CXX] application header sequence).\r\n\r\nIt is based on these considerations among others that I recommend that \"$\" [hexadecimal octet 0x24] be added to the reserved list and if necessary an escaping mechanism be defined where it is replaced with an escaped sequence which is agreed upon after consensus.\r\n\r\nDue to the fact that drafts also specify that RTSP can be extended with any type of message so long as the data is not \"$\" the first character it is ambiguous may also appear elsewhere in the status line.\r\n\r\nThere are also issues with the ambiguous definition of pdu fragmentation defined in the latest draft, e.g. the mechanism defined as possibly required when pdu's larger then 65535 bytes are used however it specified no way to convey how this occurs or why.\r\n\r\nThe same can also be said for \"sink\" and \"source\" however I will address those definitions et al when appropriate.\r\n\r\nThank you for your time!\r\n\r\nThe review noted the following: \r\n\r\n\"The reason is that is is technical change that can cause compatibility issues, and\r\nfurther does not resolve the issue as it is missing the required\r\nescaping definitions (another technical change). In addition we know\r\nthat RFC 2326 is quite buggy and attempting to fix it with Errata does\r\nnot work.\"\r\n\r\nMMUSIC is considering whether this should be fixed in RTSP 2.0.\n --VERIFIER NOTES-- \nThe reviewer noted the following: \r\n\r\n\"The reason is that is is technical change that can cause compatibility issues, and\r\nfurther does not resolve the issue as it is missing the required\r\nescaping definitions (another technical change). In addition we know\r\nthat RFC 2326 is quite buggy and attempting to fix it with Errata does\r\nnot work.\"\r\n\r\nMMUSIC is considering whether this should be fixed in RTSP 2.0.", "submit_date": "2014-12-11", "submitter_name": "Julius Friedman", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4200", "doc-id": "RFC5731", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.3", "orig_text": " C:        <domain:curExpDate>2000-04-03</domain:curExpDate>", "correct_text": " C:        <domain:curExpDate>2000-04-03Z</domain:curExpDate>", "notes": "The Z for UTC seems mandatory, per section 2.4 (in XML schema, it is optional http://www.w3.org/TR/2004/REC-xmlschema-2-20041028/#date ). Since <renew> is the only command with date (and not date-times), one may think dates are not forced to have a trailing Z but it is not mentioned in the RFC.\r\n\r\nDetected by Kim-Minh Kaplan at AFNIC.\n --VERIFIER NOTES-- \nThe RFC could be clearer, but it is consistent that the \"Z\" is required in date-time but not on date only.", "submit_date": "2014-12-15", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4201", "doc-id": "RFC7001", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "C.5", "orig_text": "        Authentication-Results: example.com;\r\n                  sender-id=fail header.from=example.com;\r\n                  dkim=pass (good signature) header.d=example.com", "correct_text": "No idea", "notes": "The Sender-ID test is OK (header From:) but the DKIM one names a field\r\nin the DKIM-Signature: header (d=). Isn't it a violation of section\r\n2.2, which says 'if \"ptype\" is \"header\", this indicates from which header field the value being evaluated was extracted' Or is section 2.2 an insufficient description?\r\n\r\n----- Verifier Notes -----\r\nThe resolution of this isn't straightforward, and will require discussion and a proper update.  That is now ongoing.", "submit_date": "2014-12-15", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4202", "doc-id": "RFC3325", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "P-Asserted-Identity: \"Cullen Jennings\" <sip:fluffy@vovida.org>\r\n", "correct_text": "P-Asserted-Identity: \"Cullen Jennings\" <sip:fluffy@cisco.com>\r\n", "notes": "May be an editorial error in the message F4, section 10.2.\r\nIn that message is added the P-Asserted-Identity with the SIP URI sip:fluffy@vovida.org\r\nI suppose it should be cisco.com and not vovida.com.\r\nThank you.", "submit_date": "2014-12-17", "submitter_name": "Giovanni Signoriello", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 19:38:52"}, {"errata_id": "4203", "doc-id": "RFC4090", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "Whenever the PLR has a backup path available, the PLR MUST set\r\nthe \"local protection available\" flag.\r\n", "correct_text": "Whenever the PLR has a backup path available, the PLR MUST set\r\nthe \"local protection available\" flag.  For example, if the PLR \r\nhas determined to use a bypass tunnel and set up the necessary \r\nlocal forwarding state to be able to use it as a backup path, \r\nthen that PLR has a backup path available.\r\n", "notes": "In the case of facility-based FRR the PLR must set the \"local protection available\" flag if it has the bypass tunnel available and the local forwarding state is set up.", "submit_date": "2014-12-17", "submitter_name": "Yakov Rekhter", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4204", "doc-id": "RFC6962", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   \"precertificate_chain\" is a chain of additional certificates required\r\n   to verify the Precertificate submission.  The first certificate MAY\r\n   be a valid Precertificate Signing Certificate and MUST certify the\r\n   first certificate.  Each following certificate MUST directly certify\r\n   the one preceding it.  The final certificate MUST be a root\r\n   certificate accepted by the log.\r\n", "correct_text": "   \"precertificate_chain\" is a chain of additional certificates required\r\n   to verify the Precertificate submission.  The first certificate MAY\r\n   be a valid Precertificate Signing Certificate and MUST certify the\r\n   Precertificate.  Each following certificate MUST directly certify\r\n   the one preceding it.  The final certificate MUST be a root\r\n   certificate accepted by the log.\r\n", "notes": "It seems to be a cut and paste error that affects the meaning.", "submit_date": "2014-12-18", "submitter_name": "Paul Hadfield", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4205", "doc-id": "RFC7230", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "   o  If the received protocol is HTTP/1.0, the \"keep-alive\" connection\r\n      option is present, the recipient is not a proxy, and the recipient\r\n      wishes to honor the HTTP/1.0 \"keep-alive\" mechanism, the\r\n      connection will persist after the current response; otherwise,", "correct_text": "  o  If the received protocol is HTTP/1.0, the \"keep-alive\" connection\r\n     option is present in a message that is not a request to a proxy,\r\n     and the recipient wishes to honor the HTTP/1.0 \"keep-alive\"\r\n     mechanism, the connection will persist after the current response;\r\n     otherwise,", "notes": "The correction makes it clearer that the reference is meant to be client-to-proxy and not proxy-to-server.", "submit_date": "2014-12-23", "submitter_name": "Semyon Kholodnov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4517", "doc-id": "RFC7203", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "The schema has the <sequence> </sequence> tags.", "correct_text": "The tags should be <xsd:sequence></xsd:sequence>.", "notes": "The schema is invalid without the correction.\r\n\r\nThe examples use <xsd:sequence>, but the actual schema just has <sequence> and does need to be fixed.  With this errata update, the hope is the IANA registered schema can be updated.", "submit_date": "2015-10-31", "submitter_name": "Takeshi Takahashi", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4518", "doc-id": "RFC7203", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Addresses", "orig_text": " Phone: +80 423 27 5862", "correct_text": " Phone: +81 423 27 5862", "notes": "Number update from editor", "submit_date": "2015-10-31", "submitter_name": "Takeshi Takahashi", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8897", "doc-id": "RFC6740", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "(Additionally, in IPv4 the IPv4 subnet mask uses bits from the host ID, a further confusion of the structure, even thought it is an extremely useful engineering mechanism.)", "correct_text": "(Additionally, in IPv4 the IPv4 subnet mask uses bits from the host ID, a further confusion of the structure, even though it is an extremely useful engineering mechanism.)", "notes": "Simple typo, used thought instead of though.", "submit_date": "2026-04-29", "submitter_name": "Jake Telford", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-05-28 17:14:58"}, {"errata_id": "4206", "doc-id": "RFC6749", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   (E)  The authorization server authenticates the client, validates the\r\n        authorization code, and ensures that the redirection URI\r\n        received matches the URI used to redirect the client in\r\n        step (C).  If valid, the authorization server responds back with\r\n        an access token and, optionally, a refresh token.", "correct_text": "   (E)  The authorization server authenticates the client, validates the\r\n        authorization code, and ensures that the redirection URI\r\n        received matches the redirection URI provided by the client in\r\n        step (A).  If valid, the authorization server responds back with\r\n        an access token and, optionally, a refresh token.", "notes": "AD & WG notes: The wording is better, so this is accepted, but it does mean the same thing.  The URI in A and C are the same.\r\n\r\nSee https://www.ietf.org/mail-archive/web/oauth/current/msg15277.html and responses.\r\n\r\nSubmitter notes: As written in section 4.1.3, the redirection URI in the access token request must match the redirection URI provided by the client in the authorization request (4.1.1). The URI used to redirect the user agent to the client in step (C) is actually different from this URI, as it contains the additional query parameters \"code\" and \"state\".\r\n\r\nAffects the same sentence as Errata ID: 3500.", "submit_date": "2014-12-23", "submitter_name": "Alexander Kempgen", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4207", "doc-id": "RFC5656", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "   [SEC1]         Standards for Efficient Cryptography Group, \"Elliptic\r\n                  Curve Cryptography\", SEC 1, May 2009,\r\n                  <http://www.secg.org/download/aid-780/sec1-v2.pdf>.\r\n\r\n   [SEC2]         Standards for Efficient Cryptography Group,\r\n                  \"Recommended Elliptic Curve Domain Parameters\", SEC 2,\r\n                  September 2000,\r\n                  <http://www.secg.org/download/aid-386/sec2_final.pdf>.", "correct_text": "  [SEC1]         Standards for Efficient Cryptography Group, \"Elliptic\r\n                 Curve Cryptography\", SEC 1, May 2009,\r\n                 <http://www.secg.org/sec1-v2.pdf>.\r\n\r\n  [SEC2]         Standards for Efficient Cryptography Group,\r\n                 \"Recommended Elliptic Curve Domain Parameters\", SEC 2,\r\n                 September 2000,\r\n                 <http://www.secg.org/SEC2-Ver-1.0.pdf>.", "notes": "The link presented in these references are now 404s.  \r\n\r\nCorrected text was provided by Douglas Stebila.\r\n\r\nVerified the issue with old links and verified the new links have the referenced documents.", "submit_date": "2014-12-23", "submitter_name": "Alex Gaynor", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4208", "doc-id": "RFC994", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.5.4", "orig_text": "7.5.4    Source Routing\r\n\r\n   The source routing parameter specifies, either completely or partial-\r\n   ly, the route to be taken from Source Network Address to Destination\r\n   Network Address.\r\n\r\n   Parameter Code:        1100 0101", "correct_text": "7.5.4    Source Routing\r\n\r\n   The source routing parameter specifies, either completely or partial-\r\n   ly, the route to be taken from Source Network Address to Destination\r\n   Network Address.\r\n\r\n   Parameter Code:        1100 1000", "notes": "The Source Routing (7.5.4) and the Security (7.5.3) options have the same parameter code.\r\nSee RFC926 7.5.4 for the correction.", "submit_date": "2014-12-24", "submitter_name": "Jean-Baptiste Cayrou", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4210", "doc-id": "RFC6733", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.4.3", "orig_text": "   The Disconnect-Cause AVP (AVP Code 273) is of type Enumerated.  A\r\n   Diameter node MUST include this AVP in the Disconnect-Peer-Request\r\n   message to inform the peer of the reason for its intention to shut\r\n   down the transport connection.  The following values are supported:\r\n      REBOOTING                         0\r\n         A scheduled reboot is imminent.  A receiver of a DPR with\r\n         above result code MAY attempt reconnection.\r\n      BUSY                              1\r\n         The peer\u2019s internal resources are constrained, and it has\r\n         determined that the transport connection needs to be closed.\r\n         A receiver of a DPR with above result code SHOULD NOT attempt\r\n         reconnection.\r\n      DO_NOT_WANT_TO_TALK_TO_YOU        2\r\n         The peer has determined that it does not see a need for the\r\n         transport connection to exist, since it does not expect any\r\n         messages to be exchanged in the near future.  A receiver of a\r\n         DPR with above result code SHOULD NOT attempt reconnection.", "correct_text": "   The Disconnect-Cause AVP (AVP Code 273) is of type Enumerated.  A\r\n   Diameter node MUST include this AVP in the Disconnect-Peer-Request\r\n   message to inform the peer of the reason for its intention to shut\r\n   down the transport connection.  The following values are supported:\r\n      REBOOTING                         0\r\n         A scheduled reboot is imminent.  A receiver of a DPR with\r\n         above result code MAY attempt reconnection.\r\n      BUSY                              1\r\n         The internal resources are constrained, and it has\r\n         determined that the transport connection needs to be closed.\r\n         A receiver of a DPR with above result code SHOULD NOT attempt\r\n         reconnection.\r\n      DO_NOT_WANT_TO_TALK_TO_YOU        2\r\n         The node has determined that it does not see a need for the\r\n         transport connection to exist, since it does not expect any\r\n         messages to be exchanged in the near future.  A receiver of a\r\n         DPR with above result code SHOULD NOT attempt reconnection.", "notes": "A peer can either be a sender or receiver, depending on the contexst.\r\n\r\nHowever in same section describing usage for the same AVP (description for cause), the 1st appearance represents the role of receiver, the 2nd and 3rd appearances has changed to the role of senders, it's confusing literally.", "submit_date": "2014-12-25", "submitter_name": "Hans Liu", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4211", "doc-id": "RFC7422", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "As noted in RFC 6292 [RFC6292], accurate timekeeping\r\n   (e.g., use of NTP or Simple NTP) is vital).", "correct_text": "As noted in RFC 6269 [RFC6269], accurate timekeeping\r\n   (e.g., use of NTP or Simple NTP) is vital.", "notes": "", "submit_date": "2014-12-26", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4519", "doc-id": "RFC6822", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.1 and 4", "orig_text": "   MI-RTRs include the IID-TLV in the point-to-point Hello PDUs they\r\n   originate.\r\n\r\n------------------------------\r\nAlso in Section 4:\r\n\r\nThe following subsections describe the additional rules\r\n   an MI-RTR MUST follow when establishing adjacencies.", "correct_text": "MI-RTRs include the IID-TLV in the point-to-point Hello PDUs associated\r\nwith non-zero instances that they originate.\r\n\r\n-----------------------------\r\nIn Section 4:\r\n\r\nThe following subsections describe the additional rules an MI-RTR MUST\r\nfollow when establishing adjacencies for non-zero instances.", "notes": "The exception case (point-to-point hellos on a point-to-point IIHs on a point-to-point circuit (sic)) is discussed in Section 2.6.2.\r\nThe proposed text is therefore unnecessary.  However, clarification is useful.", "submit_date": "2015-11-02", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4945", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "If the access token request is valid and authorized, the\r\n   authorization server issues an access token and optional refresh\r\n   token as described in Section 5.1.  If the request client\r\n   authentication failed or is invalid, the authorization server returns\r\n   an error response as described in Section 5.2.", "correct_text": "If the access token request is valid and authorized, the\r\n   authorization server issues an access token and optional refresh\r\n   token as described in Section 5.1.  If the request failed client\r\n   authentication or is invalid, the authorization server returns\r\n   an error response as described in Section 5.2.", "notes": "In the 2nd line, \"request failed\" makes more sense than the original text.\r\nThe 1st paragraph of section 5 in the document and the para just before section 5 also state \"If the request failed client authentication or ...\" instead of what is currently mentioned in section 4.1.4.\r\n\r\nIt is just a typing mistake, I think the words got exchanged during typing.\r\nPlease, correct it.", "submit_date": "2017-02-21", "submitter_name": "Abhimanyu Singh Gaur", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4212", "doc-id": "RFC7366", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   In TLS [2] notation, the MAC calculation for TLS 1.0 without\r\n   the explicit Initialization Vector (IV) is:\r\n\r\n   MAC(MAC_write_key, seq_num +\r\n       TLSCipherText.type +\r\n       TLSCipherText.version +\r\n       TLSCipherText.length +\r\n       ENC(content + padding + padding_length));\r\n\r\n   and for TLS 1.1 and greater with an explicit IV is:\r\n\r\n   MAC(MAC_write_key, seq_num +\r\n       TLSCipherText.type +\r\n       TLSCipherText.version +\r\n       TLSCipherText.length +\r\n       IV +\r\n       ENC(content + padding + padding_length));\r\n", "correct_text": "Note that the length value used for the MAC computation differs from \r\nthe value of the 'uint16 length' field in the TLSCiphertext record as \r\nencoded on the wire.  The encoded TLSCiphertext record contains both \r\nthe ciphtertext and the MAC, while the MAC calculation is performed \r\nonly over the ciphertext.  The length value encoded in the \r\nTLSCiphertext record is therefore 'length' while the length value \r\nused in the MAC calculation is 'length - SecurityParameters.mac_length'.\r\n\r\nMore formally, if:\r\n\r\n  TLSCiphertext.enc_content = ENC(content + padding + padding_length)\r\n\r\nthen in TLS notation the MAC calculation for TLS 1.0 without the \r\nexplicit Initialization Vector (IV) is:\r\n\r\n   MAC(MAC_write_key, seq_num +\r\n       TLSCipherText.type +\r\n       TLSCipherText.version +\r\n       length of (TLSCiphertext.enc_content) +\r\n       TLSCiphertext.enc_content);\r\n\r\nand for TLS 1.1 and greater with an explicit IV is:\r\n\r\n   MAC(MAC_write_key, seq_num +\r\n       TLSCipherText.type +\r\n       TLSCipherText.version +\r\n       length of (IV + TLSCiphertext.enc_content) +\r\n       IV +\r\n       TLSCiphertext.enc_content);\r\n", "notes": "After the RFC was published a new set of implementers (who hadn't been part of the pre-publication interop testing) pointed out that the text covering the use of length values could be interpreted in two different ways.  This correction attempts to remove the ambiguity by making explicit what's MACd vs. what's encoded on the wire.", "submit_date": "2014-12-27", "submitter_name": "Peter Gutmann", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4213", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.4", "orig_text": "\"Two property instances are considered alternative representations of\r\nthe same logical property if and only if their names as well as the\r\nvalue of their ALTID parameters are identical.  Property instances\r\nwithout the ALTID parameter MUST NOT be considered an alternative\r\nrepresentation of any other property instance.  Values for the ALTID\r\nparameter are not globally unique: they MAY be reused for different\r\nproperty names.\"", "correct_text": "\"Two property instances are considered alternative representations of\r\nthe same logical property if and only if their names as well as the\r\nvalue of their ALTID parameters are identical.  Property instances\r\nwithout the ALTID parameter MUST NOT be considered an alternative\r\nrepresentation of any other property instance.  Values for the ALTID\r\nparameter are not globally unique: they MAY be reused for different\r\nproperty names.\r\n\r\n\"Values for group and for the PREF parameter SHOULD be the same for all\r\nalternative representations of the same property. The values of group\r\nand PREF are not defined for a property if they differ among alternative\r\nrepresentations of the same logical property.\"", "notes": "The corrected text \"not defined\" is intended as a literal statement of the consequences of the current specification and not a change to the meaning of the current specification. The submitter recommends that the text \"Values for the group and for the PREF parameter MUST be the same...\" be considered for future versions of this document.\r\n\r\nIt is also requested that the example below be added to the \"legal but questionable\" list in section 5.4.\r\n\r\nSection 3.3 contains the text:\r\n\r\n\"The group construct is used to group related properties together.\r\nThe group name is a syntactic convention used to indicate that all\r\nproperty names prefaced with the same group name SHOULD be grouped\r\ntogether when displayed by an application.\"\r\n\r\nThere is no valid interpretation available for an application if a logical property has more than one group (see example below) and clearly no way to display such properties together, therefore the group construct has no defined meaning for such a case. This is particularly troublesome when converting to formats such as the VCard XML Schema where the group is represented as an XML schema in which properties are contained.\r\n\r\nAlso, Section 5.3 states in reference to the PREF parameter:\r\n\r\n\"Note that the value of this parameter is to be interpreted only in\r\nrelation to values assigned to other instances of the same property\r\nin the same vCard.  A given value, or the absence of a value, MUST\r\nNOT be interpreted on its own.\"\r\n\r\nThe meaning of \"instances of the same property\" is not decipherable with respect to logical properties which differ in their PREF parameter value, therefore application behavior is also not defined for this case.\r\n\r\nExample:\r\n\r\nvolunteer.ORG;ALTID=1;PREF=1;LANGUAGE=en:Doctors Without Borders\r\ncauses.ORG;ALTID=1;LANGUAGE=fr:M\u00e9decins Sans Fronti\u00e8res\r\nvolunteer.ORG:Community Emergency Response Team;Some County\\, Some State\r\nvolunteer.ROLE:CERT Instructor\r\nORG;TYPE=WORK:Sometown Medical Center\r\n\r\nThe alternative representation of \"Doctors Without Borders\" is legal according to the current text but breaks the 'volunteer' grouping: the same logical property is requested by the VCard to appear in two places. Similarly, the PREF tag on \"Doctors Without Borders\" is legal but nonsensical. The logical application representation of the ORG properties with ALTID=1 as the same logical property breaks sort ordering or selection by PREF. Similarly, application representation of PREF as a priority queue of properties breaks for this case. The application is forced to drop consideration of PREF and group in these cases and should be explicitly allowed to do so (even though it may support PREF and grouping in the general case).\r\n\r\n======================================\r\n======================================\r\n\r\nVerifier notes:\r\n\r\nThis is a complicated issue that needs discussion and that goes well beyond what errata can cover.  I'm marking this as \"held for document update\" to leave the introduction to the issue here, because the confusion about how to interoperate here is real.  But readers need to follow any subsequent discussion on the vcarddav mailing list.\r\n======================================\r\n", "submit_date": "2014-12-28", "submitter_name": "Eric Vought", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4214", "doc-id": "RFC7331", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Various", "orig_text": "bfdSessionTable, bfdSessionPerfTable ", "correct_text": "bfdSessTable, bfdSessPerfTable", "notes": "Throughout the document, bfdSessionTable and bfdSessionPerfTable are used in various text.  The underlying MIB OBJECT-TYPEs are bfdSessTable and bfdSessPerfTable.  While these discrepancies occur within the MIB module itself, they do not do so in any component that impacts compilation of the MIB module.", "submit_date": "2014-12-30", "submitter_name": "Jeffrey Haas", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4215", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "22.1", "orig_text": "   All assignments to the registry are made on a First Come First Served\r\n   basis, per Section 4.1 of [55].  The policy for each assignment is\r\n   Specification Required, per Section 4.1 of [55].\r\n", "correct_text": "The registry is to be maintained using the Specification Required\r\npolicy as defined in Section 4.1 of [55].", "notes": "Found during the IANA Review of 3530bis.", "submit_date": "2014-12-30", "submitter_name": "Tom Haynes", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4520", "doc-id": "RFC6822", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6.1", "orig_text": "   An MI-RTR will use the AllL1IS or AllL2IS ISIS MAC-layer address (as\r\n   defined in [ISO10589]) as the destination address when sending an\r\n   IS-IS PDU for the standard instance.  An MI-RTR will use one of two\r\n   new dedicated layer 2 multicast addresses (AllL1MI-ISs or AllL2MI-\r\n   ISs) as the destination address when sending an IS-IS PDU for any\r\n   non-zero IID.  These addresses are specified in Section 6.  If\r\n   operating in point-to-point mode on a broadcast circuit [RFC5309], an\r\n   MI-RTR MUST use one of the two new multicast addresses as the\r\n   destination address when sending point-to-point IIHs associated with\r\n   a non-zero instance.  (Either address will do.)\r\n\r\n   MI-RTRs MUST discard IS-IS PDUs received if either of the following\r\n   is true:\r\n\r\n   o  The destination multicast address is AllL1IS or AllL2IS and the\r\n      PDU contains an IID-TLV.\r\n\r\n   o  The destination multicast address is one of the two new addresses,\r\n      and the PDU contains an IID-TLV with a zero value for the IID or\r\n      has no IID-TLV.\r\n\r\n   NOTE: If the multicast addresses AllL1IS and/or AllL2IS are\r\n   improperly used to send IS-IS PDUs for non-zero IIDs, legacy systems\r\n   will interpret these PDUs as being associated with IID #0.  This will\r\n   cause inconsistencies in the LSDB in those routers, may incorrectly\r\n   maintain adjacencies, and may lead to inconsistent DIS election.", "correct_text": "   An MI-RTR will use the AllL1ISs or AllL2ISs ISIS MAC-layer address\r\n   (as defined in [ISO10589]) as the destination address when sending\r\n   an IS-IS PDU for the standard instance.  An MI-RTR will use one of\r\n   two new dedicated layer 2 multicast addresses (AllL1MI-ISs or\r\n   AllL2MI-ISs) as the destination address when sending an IS-IS PDU\r\n   for any non-zero IID.  These addresses are specified in Section 6.\r\n\r\n   If operating in point-to-point mode on a broadcast circuit\r\n   [RFC5309], an MI-RTR will use the AllL1ISs, AllL2ISs or AllISs\r\n   MAC-layer address (as defined in [ISO10589]) as the destination\r\n   address when sending an IS-IS PDU for the standard instance,\r\n   and will use one of two new multicast addresses (AllL1MI-ISs or\r\n   AllL2MI-ISs; either address will do) as the destination address\r\n   when sending an IS-IS PDU for any non-zero IID.\r\n\r\n   MI-RTRs MUST discard IS-IS PDUs received if either of the    \r\n   following is true:\r\n\r\n   o  The destination multicast address is AllL1ISs, AllL2ISs or \r\n      AllISs and the PDU contains an IID-TLV.\r\n\r\n   o  The destination multicast address is one of the two new \r\n      addresses and the PDU contains an IID-TLV with a zero value for \r\n      the IID or has no IID-TLV.\r\n\r\n   NOTE: If the multicast addresses AllL1ISs and/or AllL2ISs and/or \r\n   AllISs are improperly used to send IS-IS PDUs for non-zero IIDs, \r\n   legacy systems will interpret these PDUs as being associated with \r\n   IID #0.  This will cause inconsistencies in the LSDB in those \r\n   routers, may incorrectly maintain adjacencies, and may lead to \r\n   inconsistent DIS election.", "notes": "1. While operating in point-to-point mode over broadcast circuit, MI-RTR can use any of three multicast addresses for PDUs in standard instance - AllL1ISs, AllL2ISs or AllISs.\r\n\r\n2. New multicast addresses must be used for all kinds of IS-IS PDUs, not only for IIHs\r\n\r\n3. AllL1IS and AllL2IS are replaced by AllL1ISs and AllL2ISs, respectively (according to ISO 10589:2002).", "submit_date": "2015-11-02", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4521", "doc-id": "RFC6822", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.6.2", "orig_text": "   In order for an MI-RTR to interoperate over a point-to-point \r\n   circuit with a router that does NOT support this extension, the \r\n   MI-RTR MUST NOT send IS-IS PDUs for instances other than IID #0 \r\n   over the point-to-point circuit as these PDUs may affect the state \r\n   of IID #0 in the neighbor.", "correct_text": "   Note: The procedure below should not be used when MI-RTR is \r\n   operating in point-to-point mode over broadcast circuit \r\n   [RFC 5309].\r\n\r\n   In order for an MI-RTR to interoperate over a point-to-point \r\n   circuit with a router that does NOT support this extension, the \r\n   MI-RTR MUST NOT send IS-IS PDUs for instances other than IID #0 \r\n   over the point-to-point circuit as these PDUs may affect the state \r\n   of IID #0 in the neighbor.", "notes": "In Section 2.6.1, it clearly says \"If operating in point-to-point mode on a broadcast circuit [RFC5309]\" which reinforces that Section 2.6.2 is about point-to-point circuits and not broadcast circuits.\r\n\r\nHowever, there isn't any harm in adding a bit of clarity going forward.  This can be looked at if and when RFC 6822 is updated.", "submit_date": "2015-11-02", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4220", "doc-id": "RFC7159", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "   [\u2026] All Unicode characters may be placed within the\r\n   quotation marks, except for the characters that must be escaped:\r\n   quotation mark, reverse solidus, and the control characters (U+0000\r\n   through U+001F).\r\n\r\n[\u2026]\r\n\r\n      unescaped = %x20-21 / %x23-5B / %x5D-10FFFF", "correct_text": "   [\u2026] All Unicode characters may be placed within the\r\n   quotation marks, except for the characters that must be escaped:\r\n   quotation mark, reverse solidus, the control characters (U+0000\r\n   through U+001F), and codepoints beyond the BMP (U-00010000\r\n   through U-0010FFFF).\r\n\r\n[\u2026]\r\n\r\n      unescaped = %x20-21 / %x23-5B / %x5D-FFFF", "notes": "ECMA-262 states that \"ECMAScript source text is assumed to be a sequence\r\nof 16-bit code units\", and everything must be converted to UTF-16 first.\r\nThis stems from the fact that Java\u2122, like Win32, used UCS-2, which only\r\nlater got extended to allow UTF-16. This means that SMP codepoints must\r\nalways be escaped into their twelve-character form.\r\n\r\nThis is also an interoperability issue: implementations may wish to parse\r\n(or generate) JSON by using a wchar_t data type (in C) which, depending on\r\nthe platform, may be only 16 bits wide. ECMAscript allows for this.\n --VERIFIER NOTES-- \nThis is reporting a disagreement with a decision the working group made in the development of the document, and is not reporting an erratum.", "submit_date": "2015-01-05", "submitter_name": "mirabilos", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4221", "doc-id": "RFC4357", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11.4", "orig_text": "163 30  159:  SEQUENCE {\r\n166 06    7:   OBJECT IDENTIFIER\r\n           :    id-GostR3410-2001-CryptoPro-A-ParamSet\r\n175 30  147:   SEQUENCE {\r\n178 02   33:    INTEGER\r\n           :     00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF\r\n           :     FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FD\r\n           :     94\r\n213 02    2:    INTEGER 166\r\n217 02   33:    INTEGER\r\n           :     00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF\r\n           :     FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FD\r\n           :     97\r\n...\r\n", "correct_text": "163 30  159:  SEQUENCE {\r\n166 06    7:   OBJECT IDENTIFIER\r\n           :    id-GostR3410-2001-CryptoPro-A-ParamSet\r\n175 30  147:   SEQUENCE {\r\n178 02   33:    INTEGER\r\n           :     00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF\r\n           :     FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FD\r\n           :     94\r\n213 02    2:    INTEGER A6\r\n217 02   33:    INTEGER\r\n           :     00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF\r\n           :     FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FD\r\n           :     97\r\n...\r\n", "notes": "EC parameter 'b' is incorrectly specified using its base10 value where base16 expected.\n --VERIFIER NOTES-- \nFrom Jim Schaad: \r\nShort integers are dumped by the tool using base 10 not base 16.  This was auto generated from the tool.\r\n \r\nThe difference in the format easy to see from the single line to the multiple line for base16 dumps.\r\n \r\n(At best it is editorial in terms of clarification between bases)", "submit_date": "2015-01-05", "submitter_name": "Dick Franks", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4222", "doc-id": "RFC3461", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   (b) If an SMTP client issues a RCPT command containing any valid\r\n       NOTIFY and/or ORCPT parameters, a conforming SMTP server MUST\r\n       return the same response as it would to the same RCPT command\r\n       without those NOTIFY and/or ORCPT parameters.  A conforming SMTP\r\n       server MUST NOT refuse a RCPT command based on the presence or\r\n       absence of any of these parameters.\r\n", "correct_text": "   (b) If an SMTP client issues a RCPT command containing any valid\r\n       NOTIFY and/or ORCPT parameters, a conforming SMTP server MUST NOT\r\n       alter its response solely based on the use or nonuse of these\r\n       parameters. A conforming SMTP server MUST NOT refuse a RCPT\r\n       command based on the presence of any of these parameters for\r\n       anything other than reasons of local policy.\r\n\r\n", "notes": "The text as written effectively precludes using the content of the ORCPT or\r\nNOTIFY parameters in implementing local filtering policies in general and\r\nAS/AV policies in particular. If, for example, a particular ORCPT value\r\nis known to associated with a source of spam, rejecting messages on that basis\r\nat RCPT TO time should not be prohibited. Similarly, a site may place a high\r\npriority on avoiding the possibility of blow-back spam associated with the\r\nuse of NOTIFY=SUCCESS; it should again be possible to reject messages\r\nrequesting success receipts as a matter of local policy.", "submit_date": "2015-01-06", "submitter_name": "Ned Freed", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4223", "doc-id": "RFC5307", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.3", "orig_text": "Maximum Link State Protocol Data Unit (LSP) Bandwidth is encoded as a\r\nlist of eight 4-octet fields in the IEEE floating point format\r\n[IEEE], with priority 0 first and priority 7 last.", "correct_text": "Maximum Label Switched Path (LSP) Bandwidth is encoded as a\r\nlist of eight 4-octet fields in the IEEE floating point format\r\n[IEEE], with priority 0 first and priority 7 last.", "notes": "Mixed up LSP abbreviation expansion.", "submit_date": "2015-01-07", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4224", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1 and A. D", "orig_text": "     method = token\r\n", "correct_text": "     method = <method, see [RFC7230], Section 3.1.1>\r\n", "notes": "The HTTP/1.1 RFCs define rules imported across documents using prose rules for all rules except this one. This is an error because RFC7231 does not mean to re-define the production rule.\n --VERIFIER NOTES-- \nThis is asking for an editorial change, but the errata system is not the place to record proposals for editorial improvements.  There is an issue tracker at <https://github.com/httpwg/http11bis/issues> for keeping issues for a possible future HTTP 1.1 update.", "submit_date": "2015-01-09", "submitter_name": "Bjoern Hoehrmann", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4225", "doc-id": "RFC7231", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A. C & A. D", "orig_text": "     field-name    = <comment, see [RFC7230], Section 3.2>\r\n", "correct_text": "     field-name    = <field-name, see [RFC7230], Section 3.2>\r\n", "notes": "field-name does not follow the `comment` production. The section number is correct.", "submit_date": "2015-01-09", "submitter_name": "Bjoern Hoehrmann", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4226", "doc-id": "RFC1035", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "Messages sent using UDP user server port 53 (decimal).", "correct_text": "Messages sent using UDP uses server port 53 (decimal).", "notes": "\n --VERIFIER NOTES-- \n   Duplicate of errata #4227.", "submit_date": "2015-01-09", "submitter_name": "Sun Congyou", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4227", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "Messages sent using UDP user server port 53 (decimal).", "correct_text": "Messages sent using UDP use server port 53 (decimal).", "notes": "I'm very sorry for my previous mistake in errata ID 4226, this should be a correct one.", "submit_date": "2015-01-09", "submitter_name": "Sun Congyou", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4228", "doc-id": "RFC6120", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.6.", "orig_text": "     <xs:element name='subject'>\r\n       <xs:complexType>\r\n         <xs:simpleContent>\r\n           <xs:extension base='xs:string'>\r\n             <xs:attribute ref='xml:lang' use='optional'/>\r\n           </xs:extension>\r\n         </xs:simpleContent>\r\n       </xs:complexType>\r\n     </xs:element>\r\n\r\n     <xs:element name='thread'>\r\n       <xs:complexType>\r\n         <xs:simpleContent>\r\n           <xs:extension base='xs:NMTOKEN'>\r\n             <xs:attribute name='parent'\r\n                           type='xs:NMTOKEN'\r\n                           use='optional'/>\r\n           </xs:extension>\r\n         </xs:simpleContent>\r\n       </xs:complexType>\r\n     </xs:element>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSaint-Andre                  Standards Track                  [Page 202]\r\n\r\n \r\nRFC 6120                        XMPP Core                     March 2011\r\n\r\n\r\n     <xs:element name='subject'>\r\n       <xs:complexType>\r\n         <xs:simpleContent>\r\n           <xs:extension base='xs:NMTOKEN'>\r\n             <xs:attribute name='parent'\r\n                           type='xs:NMTOKEN'\r\n                           use='optional'/>\r\n           </xs:extension>\r\n         </xs:simpleContent>\r\n       </xs:complexType>\r\n     </xs:element>", "correct_text": "     <xs:element name='subject'>\r\n       <xs:complexType>\r\n         <xs:simpleContent>\r\n           <xs:extension base='xs:string'>\r\n             <xs:attribute ref='xml:lang' use='optional'/>\r\n           </xs:extension>\r\n         </xs:simpleContent>\r\n       </xs:complexType>\r\n     </xs:element>\r\n\r\n     <xs:element name='thread'>\r\n       <xs:complexType>\r\n         <xs:simpleContent>\r\n           <xs:extension base='xs:NMTOKEN'>\r\n             <xs:attribute name='parent'\r\n                           type='xs:NMTOKEN'\r\n                           use='optional'/>\r\n           </xs:extension>\r\n         </xs:simpleContent>\r\n       </xs:complexType>\r\n     </xs:element>\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSaint-Andre                  Standards Track                  [Page 202]\r\n\r\n \r\nRFC 6120                        XMPP Core                     March 2011\r\n\r\n\r\n", "notes": "The issue is that the definition of the referenced element 'subject' is duplicated.\r\n\r\nThis can be easily tested via a command like:\r\n\r\n$ xmllint --schema XMLSchema_1.1.xsd server.xsd --noout\r\nserver.xsd:84: element element: Schemas validity error : Element '{http://www.w3.org/2001/XMLSchema}element': Duplicate key-sequence ['subject'] in key identity-constraint '{http://www.w3.org/2001/XMLSchema}element'.\r\nserver.xsd fails to validate\r\n\r\nThe corrected text contains one possible edit how to make the XSD of the server namespace valid again. Of course, another possibility would be to remove the first definition of the 'subject' element.\r\n\r\nI've eliminated the second definition because the first one equals the one from section A.5. (Client Namespace).", "submit_date": "2015-01-10", "submitter_name": "Georg Sauthoff", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4229", "doc-id": "RFC1034", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.2", "orig_text": "[RFC-1033] catalogs available DNS software an discusses administration \r\nprocedures.", "correct_text": "[RFC-1033] catalogs available DNS software and discusses administration \r\nprocedures.", "notes": "", "submit_date": "2015-01-11", "submitter_name": "Sun Congyou", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4230", "doc-id": "RFC1034", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.3", "orig_text": "   - When the query name or a name between the wildcard domain and\r\n     the query name is know to exist.", "correct_text": "   - When the query name or a name between the wildcard domain and\r\n     the query name is known to exist.", "notes": "", "submit_date": "2015-01-11", "submitter_name": "Sun Congyou", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4233", "doc-id": "RFC5389", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "18.2", "orig_text": "Comprehension-required range (0x0000-0x7FFF):\r\n     0x0000: (Reserved)\r\n     0x0001: MAPPED-ADDRESS\r\n     0x0002: (Reserved; was RESPONSE-ADDRESS)\r\n     0x0003: (Reserved; was CHANGE-ADDRESS)\r\n     0x0004: (Reserved; was SOURCE-ADDRESS)\r\n     0x0005: (Reserved; was CHANGED-ADDRESS)", "correct_text": "Comprehension-required range (0x0000-0x7FFF):\r\n     0x0000: (Reserved)\r\n     0x0001: MAPPED-ADDRESS\r\n     0x0002: (Reserved; was RESPONSE-ADDRESS)\r\n     0x0003: (Reserved; was CHANGE-REQUEST)\r\n     0x0004: (Reserved; was SOURCE-ADDRESS)\r\n     0x0005: (Reserved; was CHANGED-ADDRESS)", "notes": "Text says that attribute 0x0003 was known as CHANGE-ADDRESS, but it was named CHANGE-REQUEST in RFC 3489. It is the only place in RFC 5389, where CHANGE-ADDRESS is used instead of CHANGE-REQUEST, as I can see.", "submit_date": "2015-01-15", "submitter_name": "Anatoliy Sivov", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4232", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1.1.1", "orig_text": "GMT", "correct_text": "+0000", "notes": "The text refers to RFC 5322. There Sect 3.3 calls the use timezone abbreviations, like GMT, obsolete. It encourages using a numeric offset such as +0000.\r\n\r\nThe grammar for dates in 7231 Sect 7.1.1.1 uses GMT. Example dates throughout this RFC and others related to HTTP use GMT. This is inconsistent with 5322.\r\n\r\nThe RFCs for HTTP need to be modified to match 5322, or 7.1.1.1 needs a note that HTTP deliberately deviates from 5322 with regards to the timezone.\n --VERIFIER NOTES-- \nThe document is quite clear that the \"GMT\" version is preferred, and is necessary for compatibility with earlier versions and implementations.", "submit_date": "2015-01-14", "submitter_name": "Christopher Olson", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4231", "doc-id": "RFC4719", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "The entire Ethernet frame, without the preamble or frame check\r\nsequence (FCS), is encapsulated in L2TPv3 and is sent as a single\r\npacket by the ingress LCCE.", "correct_text": "The entire Ethernet frame, without the preamble and frame check\r\nsequence (FCS), is encapsulated in L2TPv3 and is sent as a single\r\npacket by the ingress LCCE.", "notes": "The LCCE should remove the preamble AND FCS\n --VERIFIER NOTES-- \n The without/or construct is a valid way in English to indicate that both fields are omitted during encapsulation.  ", "submit_date": "2015-01-12", "submitter_name": "Karsten Thomann", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4262", "doc-id": "RFC5831", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3.2.", "orig_text": "STEP 3.\r\n\r\n   H    = 95BEA0BE 88D5AA02 FE3C9D45 436CE821\r\n          B8287CB6 2CBC135B 3E339EFE F6576CA9\r\n\r\n   L    = 00000000 00000000 00000000 00000000\r\n          00000000 00000000 00000000 00000190\r\n\r\n   K[1] = 95FEB83E BE3C2833 A09D7C9E BE45B6FE\r\n          88432CF6 D56CBC57 AAE8136D 02215B39\r\n\r\n   K[2] = 8695FEB8 1BBE3C28 E2A09D7C 48BE45B6\r\n          DA88432C EBD56CBC 7FABE813 F292215B\r\n\r\n   K[2] = 8695FEB8 1BBE3C28 E2A09D7C 48BE45B6\r\n          DA88432C EBD56CBC 7FABE813 F292215B\r\n\r\n   K[3] = B9799501 141B413C 1EE2A062 0CB74145\r\n          6FDA88BC D0142A6C FA80AA16 15F2FDB1", "correct_text": "STEP 3.\r\n\r\n   H    = 95BEA0BE 88D5AA02 FE3C9D45 436CE821\r\n          B8287CB6 2CBC135B 3E339EFE F6576CA9\r\n\r\n   L    = 00000000 00000000 00000000 00000000\r\n          00000000 00000000 00000000 00000190\r\n\r\n   K[1] = 95FEB83E BE3C2833 A09D7C9E BE45B6FE\r\n          88432CF6 D56CBC57 AAE8136D 02215B39\r\n   \r\n   K[2] = 8695FEB8 1BBE3C28 E2A09D7C 48BE45B6\r\n          DA88432C EBD56CBC 7FABE813 F292215B\r\n\r\n   K[3] = B9799501 141B413C 1EE2A062 0CB74145\r\n          6FDA88BC D0142A6C FA80AA16 15F2FDB1", "notes": "You need to remove the double K[2]", "submit_date": "2015-02-05", "submitter_name": "Andrey Pilsky", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4522", "doc-id": "RFC2616", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "13.5.1", "orig_text": " The following HTTP/1.1 headers are hop-by-hop headers:\r\n\r\n      - Connection\r\n      - Keep-Alive\r\n      - Proxy-Authenticate\r\n      - Proxy-Authorization\r\n      - TE\r\n      - Trailers\r\n      - Transfer-Encoding\r\n      - Upgrade\r\n", "correct_text": " The following HTTP/1.1 headers are hop-by-hop headers:\r\n\r\n      - Connection\r\n      - Keep-Alive\r\n      - Proxy-Authenticate\r\n      - Proxy-Authorization\r\n      - TE\r\n      - Trailer\r\n      - Transfer-Encoding\r\n      - Upgrade\r\n", "notes": "Trailers (with a s) does not seem to a header field, just a keyword for TE.\r\nI think that Trailer (without a s) is expected here.\r\n\r\nAFAIK, RFC 7230 does not have such an explicit list and is not concerned.", "submit_date": "2015-11-03", "submitter_name": "Christophe JAILLET", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4234", "doc-id": "RFC6733", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.4", "orig_text": "In the last sentence of first paragraph odf the section 5.4, it is said:\r\n\r\n   When a Diameter node disconnects one of its transport connections,\r\n   its peer cannot know the reason for the disconnect and will most\r\n   likely assume that a connectivity problem occurred or that the peer\r\n   has rebooted.  In these cases, the peer may periodically attempt to\r\n   reconnect, as stated in Section 2.1.  In the event that the\r\n   disconnect was a result of either a shortage of internal resources or\r\n   simply that the node in question has no intentions of forwarding any\r\n   Diameter messages to the peer in the foreseeable future, a periodic\r\n   connection request would not be welcomed.  The Disconnection-Reason\r\n   AVP contains the reason the Diameter node issued the Disconnect-Peer-\r\n   Request message.", "correct_text": "the sentence should be:\r\n\r\n\r\n   When a Diameter node disconnects one of its transport connections,\r\n   its peer cannot know the reason for the disconnect and will most\r\n   likely assume that a connectivity problem occurred or that the peer\r\n   has rebooted.  In these cases, the peer may periodically attempt to\r\n   reconnect, as stated in Section 2.1.  In the event that the\r\n   disconnect was a result of either a shortage of internal resources or\r\n   simply that the node in question has no intentions of forwarding any\r\n   Diameter messages to the peer in the foreseeable future, a periodic\r\n   connection request would not be welcomed.  The Disconnect-Cause AVP\r\n   contains the reason the Diameter node issued the Disconnect-Peer-\r\n   Request message.", "notes": "The correct name of the AVP is \"Disconnect-Cause AVP\" and not \"Disconnection-Reason AVP\" that does not exist.", "submit_date": "2015-01-16", "submitter_name": "Lionel Morand", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8927", "doc-id": "RFC8058", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Section 8.3", "orig_text": "Content-Type: multipart/form-data; boundary=---FormBoundaryjWmhtjORrn", "correct_text": "Content-Type: multipart/form-data; boundary=-FormBoundaryjWmhtjORrn", "notes": "RFC 7578, Section 4.1 defines each boundary delimiter line in a multipart/form-data body as `--` followed by the value of the `boundary` parameter. In the example, the delimiter line is `---FormBoundaryjWmhtjORrn`, so the `boundary` parameter value must omit the two leading hyphens and be set to `-FormBoundaryjWmhtjORrn`.\r\n\r\nThis supplements Errata 5117, which proposed the same fix without explanation and has remained unverified for nearly 9 years.", "submit_date": "2026-05-27", "submitter_name": "Ahmed Bouhoula", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:27:56"}, {"errata_id": "4235", "doc-id": "RFC7052", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "       Example 3: As an example where LCAF is used, suppose\r\n       that the IPv4 EID-Prefix stored is 192.0.2.0/24 and it\r\n       is part of LISP Instance ID 101.  In this case, the values\r\n       within lispMapCacheEntry would be:\r\n\r\n          lispMapCacheEidLength  = 11\r\n          lispMapCacheEid = 16387, 7, 2, 101, 1, 192.0.2.0, 24\r\n          ... [skip] ...\r\n\r\n       where 11 is the total length in octets of the next object\r\n       (lispMapCacheEID of type LispAddressType).  Then, the value\r\n       16387 indicates the LCAF AF (see the\r\n       IANA-ADDRESS-FAMILY-NUMBERS-MIB), the value 7 indicates that\r\n       the LCAF AF is 7 octets in length in this case, 2 indicates\r\n       that LCAF Type 2 encoding is used (see the LCAF document), 101\r\n       gives the Instance ID, 1 gives the AFI (per the\r\n       IANA-ADDRESS-FAMILY-NUMBERS-MIB) for an IPv4 address, 192.0.2.0\r\n       is the IPv4 address, and 24 is the mask-length in bits.  Note\r\n       that the lispMapCacheEidLength value of 11 octets is used to\r\n       compute the length of the last field in lispMapCacheEid to be 1\r\n       octet -- as computed by 11 - (2 + 1 + 1 + 1 + 1 + 4) = 1.\r\n", "correct_text": "       Example 3: As an example where LCAF is used, suppose\r\n       that the IPv4 EID-Prefix stored is 192.0.2.0/24 and it\r\n       is part of LISP Instance ID 101.  In this case, the values\r\n       within lispMapCacheEntry would be:\r\n\r\n          lispMapCacheEidLength  = 14\r\n          lispMapCacheEid = 16387, 10, 2, 101, 1, 192.0.2.0, 24\r\n          ... [skip] ...\r\n\r\n       where 14 is the total length in octets of the next object\r\n       (lispMapCacheEID of type LispAddressType).  Then, the value\r\n       16387 indicates the LCAF AF (see the\r\n       IANA-ADDRESS-FAMILY-NUMBERS-MIB), the value 10 indicates that\r\n       the LCAF AF is 10 octets in length in this case, 2 indicates\r\n       that LCAF Type 2 encoding is used (see the LCAF document), 101\r\n       gives the Instance ID, 1 gives the AFI (per the\r\n       IANA-ADDRESS-FAMILY-NUMBERS-MIB) for an IPv4 address, 192.0.2.0\r\n       is the IPv4 address, and 24 is the mask-length in bits.  Note\r\n       that the lispMapCacheEidLength value of 14 octets is used to\r\n       compute the length of the last field in lispMapCacheEid to be 1\r\n       octet -- as computed by 14 - (2 + 1 + 1 + 3 + 2 + 4) = 1.\r\n", "notes": "The Instance ID within the type 2 LCAF is 24 bits and requires 3 octets (incorrectly calculated as 1)\r\nThe AFI within the LCAF type 2 requires 2 octets (incorrectly calculated as 1)", "submit_date": "2015-01-17", "submitter_name": "Isidor Kouvelas", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4236", "doc-id": "RFC6442", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1, 5.2", "orig_text": "              <gbp:retransmission-allowed>false\r\n              </gbp:retransmission-allowed>\r\n", "correct_text": "              <gbp:retransmission-allowed>no\r\n              </gbp:retransmission-allowed>\r\n", "notes": "as per section 4.4\r\n\r\nThis location error is specific to having the PIDF-LO [RFC4119]\r\n   <retransmission-allowed> element set to \"no\".  This location error is\r\n   stating it requires permission (i.e., PIDF-LO <retransmission-\r\n   allowed> element set to \"yes\")\r\n\r\nand RFC4119 section 2.2.2", "submit_date": "2015-01-19", "submitter_name": "Richard Appleton", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4237", "doc-id": "RFC4235", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.4", "orig_text": "<xs:complexType name=\"participant\">\r\n          <xs:sequence>\r\n            <xs:element name=\"identity\" type=\"tns:nameaddr\"\r\n              minOccurs=\"0\" maxOccurs=\"1\"/>\r\n            <xs:element name=\"target\" minOccurs=\"0\" maxOccurs=\"1\">\r\n              <xs:complexType>\r\n                <xs:sequence>\r\n                  <xs:element name=\"param\" minOccurs=\"0\"\r\n                    maxOccurs=\"unbounded\">\r\n                    <xs:complexType>\r\n                      <xs:attribute name=\"pname\" type=\"xs:string\"\r\n                        use=\"required\"/>\r\n                      <xs:attribute name=\"pval\" type=\"xs:string\"\r\n                        use=\"required\"/>\r\n                    </xs:complexType>\r\n                  </xs:element>\r\n                </xs:sequence>\r\n                <xs:attribute name=\"uri\" type=\"xs:string\"\r\n                                           use=\"required\"/>\r\n              </xs:complexType>\r\n            </xs:element>\r\n            <xs:element name=\"session-description\" type=\"tns:sessd\"\r\n              minOccurs=\"0\" maxOccurs=\"1\"/>\r\n            <xs:element name=\"cseq\" type=\"xs:nonNegativeInteger\"\r\n              minOccurs=\"0\" maxOccurs=\"1\"/>\r\n            <xs:any namespace=\"##other\" processContents=\"lax\"\r\n              minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          </xs:sequence>\r\n        </xs:complexType>", "correct_text": "<xs:complexType name=\"participant\">\r\n          <xs:sequence>\r\n            <xs:element name=\"identity\" type=\"tns:nameaddr\"\r\n              minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n            <xs:element name=\"target\" minOccurs=\"0\" maxOccurs=\"1\">\r\n              <xs:complexType>\r\n                <xs:sequence>\r\n                  <xs:element name=\"param\" minOccurs=\"0\"\r\n                    maxOccurs=\"unbounded\">\r\n                    <xs:complexType>\r\n                      <xs:attribute name=\"pname\" type=\"xs:string\"\r\n                        use=\"required\"/>\r\n                      <xs:attribute name=\"pval\" type=\"xs:string\"\r\n                        use=\"required\"/>\r\n                    </xs:complexType>\r\n                  </xs:element>\r\n                </xs:sequence>\r\n                <xs:attribute name=\"uri\" type=\"xs:string\"\r\n                                           use=\"required\"/>\r\n              </xs:complexType>\r\n            </xs:element>\r\n            <xs:element name=\"session-description\" type=\"tns:sessd\"\r\n              minOccurs=\"0\" maxOccurs=\"1\"/>\r\n            <xs:element name=\"cseq\" type=\"xs:nonNegativeInteger\"\r\n              minOccurs=\"0\" maxOccurs=\"1\"/>\r\n            <xs:any namespace=\"##other\" processContents=\"lax\"\r\n              minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          </xs:sequence>\r\n        </xs:complexType>", "notes": "The identity element is defined as maxOccurs=\"1\" in the XML schema. However, in the section 4.1.6 of RFC4235, it says \"Note that multiple identities (for example a sip: URI and a tel: URI) could be included if they all correspond to the participant\". This seems to contradict with the XML schema.", "submit_date": "2015-01-19", "submitter_name": "Xiaofeng Xu", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4238", "doc-id": "RFC7413", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "   Kind            1 byte: value = 34\r\n   Length          1 byte: range 6 to 18 (bytes); limited by\r\n                           remaining space in the options field.\r\n                           The number MUST be even.\r\n   Cookie          0, or 4 to 16 bytes (Length - 2)", "correct_text": "   Kind            1 byte: value = 34\r\n   Length          1 byte: range 2 to 18 (bytes); limited by\r\n                           remaining space in the options field.\r\n                           The number MUST be even.\r\n   Cookie          0, or 4 to 16 bytes in length (Length - 2)", "notes": "A Nil cookie is a fast open option with no cookie value.  A length range of 6 to 18 bytes excludes a Nil cookie.", "submit_date": "2015-01-22", "submitter_name": "Matthew Luckie", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4239", "doc-id": "RFC7413", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "   1. The client sends a SYN packet with a Fast Open option with a\r\n      Length field of 0 (empty cookie field).", "correct_text": "   1. The client sends a SYN packet with a Fast Open option with a\r\n      Length field of 2 (empty cookie field).", "notes": "A Nil fast-open option has an option length of 2.  A length field of zero would mean an invalid TCP option.", "submit_date": "2015-01-22", "submitter_name": "Matthew Luckie", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4240", "doc-id": "RFC7407", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.8", "orig_text": "     augment /snmp:snmp/snmp:target {\r\n       when \"snmp:v1 or snmp:v2c\";", "correct_text": "     augment /snmp:snmp/snmp:target {", "notes": "The nodes refered to in the \"when\" expression do not exist.\r\n(They were there in an early draft version, but when they were moved, we forgot to fix the \"when\" expression).", "submit_date": "2015-01-23", "submitter_name": "Martin Bj\u00f6rklund", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4244", "doc-id": "RFC5912", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14", "orig_text": "  at-x520StateOrProvinceName ATTRIBUTE ::=\r\n      { TYPE DirectoryString {ub-state-name}\r\n          IDENTIFIED BY id-at-stateOrProvinceName }\r\n  X520StateOrProvinceName ::= DirectoryString {ub-state-name}\r\n\r\n  at-x520OrganizationName ATTRIBUTE ::=\r\n      { TYPE DirectoryString {ub-organization-name}\r\n          IDENTIFIED BY id-at-organizationName }\r\n  X520OrganizationName ::= DirectoryString {ub-organization-name}\r\n\r\n  at-x520OrganizationalUnitName ATTRIBUTE ::=\r\n      { TYPE DirectoryString  {ub-organizational-unit-name}\r\n          IDENTIFIED BY id-at-organizationalUnitName }\r\n  X520OrganizationalUnitName ::= DirectoryString\r\n                                     {ub-organizational-unit-name}", "correct_text": "  at-x520StateOrProvinceName ATTRIBUTE ::=\r\n      { TYPE X520StateOrProvinceName\r\n          IDENTIFIED BY id-at-stateOrProvinceName }\r\n  X520StateOrProvinceName ::= DirectoryString {ub-state-name}\r\n\r\n  at-x520OrganizationName ATTRIBUTE ::=\r\n      { TYPE X520OrganizationName IDENTIFIED BY id-at-organizationName }\r\n  X520OrganizationName ::= DirectoryString {ub-organization-name}\r\n\r\n  at-x520OrganizationalUnitName ATTRIBUTE ::=\r\n      { TYPE X520OrganizationalUnitName\r\n          IDENTIFIED BY id-at-organizationalUnitName }\r\n  X520OrganizationalUnitName ::= DirectoryString\r\n                                     {ub-organizational-unit-name}", "notes": "The definitions of the three ATTRIBUTE objects (at-x520StateOrProvinceName, at-x520OrganizationName, at-x520OrganizationalUnitName) should be changed to reference the existing type definitions.  This change will eliminate the extra type definition in each of those objects as well as make those object definitions consistent with the definitions for the at-x520LocalityName and at-x520CommonName ATTRIBUTE objects.", "submit_date": "2015-01-27", "submitter_name": "Richard Nicholas", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:04:26"}, {"errata_id": "4245", "doc-id": "RFC6350", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.7.7", "orig_text": "   Value type:  A semicolon-separated pair of values.  The first field\r\n      is a small integer corresponding to the second field of a PID\r\n      parameter instance.  The second field is a URI.  The \"uuid\" URN\r\n      namespace defined in [RFC4122] is particularly well suited to this\r\n      task, but other URI schemes MAY be used.", "correct_text": "   Value type:  A single structured text value consisting of components\r\n      separated by the SEMICOLON character (U+003B). The first\r\n      component is a small integer corresponding to the second\r\n      component of a PID parameter instance.  The second component is a\r\n      URI. The \"uuid\" URN namespace defined in [RFC4122] is particularly\r\n      well suited to this task, but other URI schemes MAY be used.\r\n", "notes": "A \u201csemicolon-separated pair of values\u201d is a structured text value. Moreover, the RFC6351 considers the CLIENTPIDMAP property with a structured text value (see the Relax NG Schema definition of property-clientpidmap).\r\n\r\n----- Verifier Notes -----\r\nThe original text would not cause any real confusion or interoperability issues, so this is held for document update.  That said, the corrected text is more accurate and better represents the working group's consensus at the time the RFC was published.", "submit_date": "2015-01-27", "submitter_name": "Ivan Enderlin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4246", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2.5", "orig_text": "             BDAY;19531015T231000Z", "correct_text": "             BDAY:19531015T231000Z", "notes": "A typo when declaring the third BDAY property example: It is a colon, not a semi-colon.", "submit_date": "2015-01-28", "submitter_name": "Ivan Enderlin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4247", "doc-id": "RFC6351", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "# 4.3.2\r\nvalue-time = element time {\r\n    xsd:string { pattern = \"(\\d\\d(\\d\\d(\\d\\d)?)?|-\\d\\d(\\d\\d?)|--\\d\\d)\"\r\n                         ~ \"(Z|[+\\-]\\d\\d(\\d\\d)?)?\" }\r\n  }", "correct_text": "# 4.3.2\r\nvalue-time = element time {\r\n    xsd:string { pattern = \"(\\d\\d(\\d\\d(\\d\\d)?)?|-\\d\\d(\\d\\d)?|--\\d\\d)\"\r\n                         ~ \"(Z|[+\\-]\\d\\d(\\d\\d)?)?\" }\r\n  }", "notes": "The second element of the first disjunction is -\\d\\d(\\d\\d)?, not -\\d\\d(\\d\\d?) (the question mark is not well placed).", "submit_date": "2015-01-28", "submitter_name": "Ivan Enderlin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4248", "doc-id": "RFC6920", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "   | .well-known URL (split over 2 lines):                             |\r\n   | http://example.com/.well-known/ni/sha256/                         |\r\n   | UyaQV-Ev4rdLoHyJJWCi11OHfrYv9E1aGQAlMO2X_-Q                       |", "correct_text": "   | .well-known URL (split over 2 lines):                             |\r\n   | http://example.com/.well-known/ni/sha-256/                        |\r\n   | UyaQV-Ev4rdLoHyJJWCi11OHfrYv9E1aGQAlMO2X_-Q                       |", "notes": "The 'alg' part of the well-known URL should be the same as that of the ni URI (\"sha-256\"), but is missing the hyphen in the example.", "submit_date": "2015-01-28", "submitter_name": "Matthew Kerwin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4249", "doc-id": "RFC6238", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2", "orig_text": "The provisioning flow is out of scope of this document; refer to\r\n[RFC6030] for such provisioning container specifications.", "correct_text": "", "notes": "It's insufficient to simply refer to RFC6030 here. See RFC6030 \u00a74.3.4 where it states that the precise semantics of fields such as the <Suite> element are defined according to the algorithm profile. It does provide in \u00a710 the definitions for HOTP and PIN algorithms \u2014 but it doesn't give them for TOTP because the standardisation of TOTP came later.\r\n\r\nSo *someone* needs to tell us what strings to put in the <Suite> element to indicate SHA1/SHA256/SHA512 etc.  Either an update to RFC6030, or I would have thought it was better done with a section in RFC6238... which is missing.\r\n\r\nAm I missing something?", "submit_date": "2015-01-30", "submitter_name": "David Woodhouse", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4263", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.3, Fig 8", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |LI | VN  |Mode |    Stratum     |     Poll      |  Precision   |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |LI | VN  |Mode |    Stratum    |     Poll      |  Precision    |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The field boundaries are not aligned with the bit boundaries in \"Figure 8: Packet Header Format\".", "submit_date": "2015-02-05", "submitter_name": "Priyesh Patel", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4523", "doc-id": "RFC2826", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "The DNS type of unique naming and name-mapping system may not be\r\nideal for a number of purposes for which it was never designed, such\r\na locating information when the user doesn't precisely know the\r\ncorrect names.", "correct_text": "The DNS type of unique naming and name-mapping system may not be\r\nideal for a number of purposes for which it was never designed, such\r\nas locating information when the user doesn't precisely know the\r\ncorrect names.", "notes": "Typo: \"such a locating\" should be \"such as locating\"\r\n\r\nAlso typo in section 1.2.  It says\r\n\"any set of resources records\"\r\nand should say\r\n\"any set of resource records\"", "submit_date": "2015-11-05", "submitter_name": "Dave Thaler", "verifier_id": "", "verifier_name": "Andrew Sullivan", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4250", "doc-id": "RFC4960", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.4", "orig_text": "                     +--------------------------------+\r\n                     |   Cumulative TSN Ack = 12      |\r\n                     +--------------------------------+\r\n                     |        a_rwnd = 4660           |\r\n                     +----------------+---------------+\r\n                     | num of block=2 | num of dup=0  |\r\n                     +----------------+---------------+\r\n                     |block #1 strt=2 |block #1 end=3 |\r\n                     +----------------+---------------+\r\n                     |block #2 strt=5 |block #2 end=5 |\r\n                     +----------------+---------------+", "correct_text": "                     +--------------------------------+\r\n                     |   Cumulative TSN Ack = 12      |\r\n                     +--------------------------------+\r\n                     |        a_rwnd = 4660           |\r\n                     +----------------+---------------+\r\n                     | num of block=2 | num of dup=0  |\r\n                     +----------------+---------------+\r\n                     |block #1 strt=2 |block #1 end=3 |\r\n                     +----------------+---------------+\r\n                     |block #2 strt=5 |block #2 end=6 |\r\n                     +----------------+---------------+", "notes": "According to the illustration of the DATA chunks just above it, with \"still missing\" TSN 13 and TSN 16, the block #2 end=6 not 5.\n --VERIFIER NOTES-- \nReasoning provided by M. T\u00fcxen: \"I think the RFC is correct. The first block is TSN 14 and TSN 15. Since the cumulative TSN ack is 12, this\r\nis [2, 3]. The second block consists only of TSN 17. Therefore is is reported as [5, 5].\r\nThe block [5, 6] as you suggest would mean that TSN 17 and TSN 18 would have been received, which\r\nis not the case described in the illustration.\"   ", "submit_date": "2015-01-31", "submitter_name": "Phung Pham", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4251", "doc-id": "RFC7230", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7.1", "orig_text": "     http-URI = \"http:\" \"//\" authority path-abempty [ \"?\" query ]\r\n                [ \"#\" fragment ]\r\n", "correct_text": "     http-URI = \"http:\" \"//\" authority path-abempty [ \"?\" query ]\r\n", "notes": "Per http://tools.ietf.org/html/rfc3986#section-4.3 \"URI scheme specifications must define their own syntax so that all strings matching their scheme-specific syntax will also match the <absolute-URI> grammar.\" See the discussion around http://mailarchive.ietf.org/arch/msg/apps-discuss/gZVRtgOUFyzOk68FgL1jHTzWG2s", "submit_date": "2015-02-01", "submitter_name": "Bjoern Hoehrmann", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4252", "doc-id": "RFC7230", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7.2.", "orig_text": "     https-URI = \"https:\" \"//\" authority path-abempty [ \"?\" query ]\r\n                 [ \"#\" fragment ]\r\n", "correct_text": "     https-URI = \"https:\" \"//\" authority path-abempty [ \"?\" query ]\r\n", "notes": "See erratum 4251 on the same document.", "submit_date": "2015-02-01", "submitter_name": "Bjoern Hoehrmann", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4254", "doc-id": "RFC7027", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "1", "orig_text": "   pseudo-random way and comply with the security requirements of\r\n|  relevant standards from ISO [ISO1] [ISO2], ANSI [ANSI1], NIST [FIPS],\r\n|  and SecG [SEC2].\r\n\r\n ", "correct_text": "   pseudo-random way and comply with the security requirements of\r\n|  relevant standards from ISO [ISO1], ANSI [ANSI1], NIST [FIPS],\r\n|  and SECG [SEC2].", "notes": "The referenced by [ISO2] standard ISO/IEC 15946-2:2002 was already withdrawn at 2007-11-07 and is therefore no more relevant.\r\nThe industry consortium Standards for Efficient Cryptography Group uses itself the abbreviation SECG, see http://www.secg.org.", "submit_date": "2015-02-03", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4255", "doc-id": "RFC6887", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "11,12", "orig_text": "", "correct_text": "", "notes": "Add (preferable at the start of both section 11 and 12) the actual numerical definition of the OpCode explained in the section.\r\n\r\nThere is a lot of mentioning of the MAP and PEER opcodes in the document, but nowhere in the text can be found what the actual OpCodes are. Everywhere where the MAP OpCode or PEER OpCode is mentioned is the reader directed to section 11 or 12 respectively, 'where the OpCode is defined'. But in those sections there is no definition of the OpCode.\r\n\r\ne.g.: section 7.1, in the field description of a PCP request packet:\r\n\"Opcode:  A 7-bit value specifying the operation to be performed.  MAP\r\n          and PEER Opcodes are defined in Sections 11 and 12.\"\r\n\r\nI had to search the internet and found them at:\r\nhttps://www.iana.org/assignments/pcp-parameters/pcp-parameters.xhtml\r\n\r\nWhere is stated:\r\n\r\nValue  Description  Reference\r\n0  ANNOUNCE  [RFC6887]\r\n1  MAP  [RFC6887]\r\n2  PEER  [RFC6887]\r\n\r\nThe above three numerical definitions are nowhere to be found in the RFC6887 document and seem quite crucial for correct PCP implementations. Should the OpCodes already be defined in some other RFC document and is the reader expected to know about it, then I'd suggest to put a link to that other RFC document at the start of sections 11 and 12.\n --VERIFIER NOTES-- \nThe numerical opcodes are defined in section 19.2.   I agree that the use of the term \"opcode\" is confusing, and it would be good to clarify that in a future update to the document, but the erratum as written is not correct.", "submit_date": "2015-02-03", "submitter_name": "Ad Steijvers", "verifier_id": "", "verifier_name": "Ted Lemon", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4264", "doc-id": "RFC7159", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.2", "orig_text": "   [Err3607]  RFC Errata, Errata ID 3607, RFC 3607,\r\n              <http://www.rfc-editor.org>.\r\n\r\n   [Err607]   RFC Errata, Errata ID 607, RFC 607,\r\n              <http://www.rfc-editor.org>.", "correct_text": "   [Err3607]  RFC Errata, Errata ID 3607, for RFC 4627,\r\n              <http://www.rfc-editor.org>.\r\n\r\n   [Err607]   RFC Errata, Errata ID 607, for RFC 4627,\r\n              <http://www.rfc-editor.org>.", "notes": "The references point to RFCs by the same numbers as the errata IDs, while the intention was to refer to errata (by the same IDs) reported for the previous JSON RFC, namely RFC 4627. (RFCs 607 and 3607 are completely unrelated.)\r\n\r\nThe links may also be replaced with direct links to the errata pages, for instance http://www.rfc-editor.org/errata_search.php?eid=607 and http://www.rfc-editor.org/errata_search.php?eid=3607", "submit_date": "2015-02-05", "submitter_name": "Federico do Pino", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4306", "doc-id": "RFC5655", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.5", "orig_text": "   224: 0A 47 0A B6 E5 47 0C 07 48 00|01 03 00 18 00 3E\r\n           [ message checksum record ^ -->\r\n   240: 2B 37 08 CE B2 0E 30 11 32 12 4A 5F E3 AD DB 00\r\n\r\n   256:|00 0A 05 10 47 0A B6 E5 00 00 00 06 00 00 00 01\r\n\r\n", "correct_text": "   224: 0A 47 0A B6 E5 47 0C 07 48 00|01 03 00 16 00 3E\r\n           [ message checksum record ^ -->\r\n   240: 2B 37 08 CE B2 0E 30 11 32 12 4A 5F E3 AD DB 00\r\n\r\n   256:|00 0A 05 10 47 0A B6 E5 00 00 00 06 00 00 00 01\r\n\r\n", "notes": "First of all, note that per erratum #2030, the offsets in this whole section are wrong, it should begin (I think) at 192.  I shall use the published (incorrect) offset for illuminating this point:\r\n\r\nI believe the byte at #237 should be 0x16 and not 0x18.  I suspect this checksum was copy-pasted from a prior instance in the example, where there were three pad bytes added to the data record for #259 (0x103).    In this instance, there is only one pad byte at #255, hence the offset here should be two less (22 or 0x16 and not 24 or 0x18): \r\n\r\n  2 bytes set ID\r\n  2 bytes length\r\n  1 byte option data\r\n 16 bytes checksum data\r\n  1 byte pad (at #255)\r\n\r\n ...totalling 22. Thanks!", "submit_date": "2015-03-19", "submitter_name": "Wayne Tackabury", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4265", "doc-id": "RFC5321", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "F.2", "orig_text": "SMTP servers MUST continue to accept source route syntax as specified\r\nin the main body of this document and in RFC 1123.  They MAY, if\r\nnecessary, ignore the routes and utilize only the target domain in the\r\naddress.", "correct_text": "SMTP servers MUST continue to accept source route syntax within RFC\r\n5322 headers as specified in the main body of this document and in RFC\r\n1123.  They SHOULD ignore source routes specified in envelope addresses\r\nand utilize only the target domain, or MAY decline to accept envelope\r\naddresses that specify source routes.", "notes": "The current wording of Section F.2 appears to contradict Sections 3.3 and 3.6.1.\r\n\r\nSection 3.3 states: \"Servers MUST be prepared to encounter a list of source routes in the forward-path, but they SHOULD ignore the routes or MAY decline to support the relaying they imply.\"\r\n\r\nSection 3.6.1 states: \"SMTP servers MAY decline to act as mail relays or to accept addresses that specify source routes.\"\r\n\r\nRFC 1123 contains *two* separate relevant requirements: Section 5.2.6 states \"A receiver-SMTP MUST accept the explicit source route syntax in the envelope...\" and Section 5.2.19 states \"Internet host software SHOULD NOT create an RFC-822 header containing an address with an explicit source route, but MUST accept such headers for compatibility with earlier systems.\"\r\n\r\nIt appears that Sections 3.3 and 3.6.1 are intended to remove the requirement to accept source route syntax within envelope addresses, but the current wording of Section F.2 contradicts this.  If the intent of Section F.2 is only to continue the requirement to accept source route syntax within message headers, this should be made clear.  The proposed text is written with this assumption in mind.  If the intent of RFC 5321 is to remove both requirements, the proposed wording for Section F.2 requires further revision.\r\n\r\nAlso, if the intent of Sections 3.3 and 3.6.1 is to treat source routing differently for a <forward-path> and <reverse-path>, this should be clarified in all three sections.  The proposed text assumes the requirements for both are the same.\n --VERIFIER NOTES-- \nThe text as it is, is what was intended.  Moreover, this is another step along the way toward the deprecation of source routes, a path we started on a good many years ago.  John Klensin is taking input for his working copy of a 5321bis, if specific text changes are suggested.", "submit_date": "2015-02-07", "submitter_name": "Vance Kochenderfer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4266", "doc-id": "RFC4458", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2 Cause", "orig_text": "                +---------------------------------+-------+\r\n                | Redirecting Reason              | Value |\r\n                +---------------------------------+-------+\r\n                | Unknown/Not available           | 404   |\r\n                | User busy                       | 486   |\r\n                | No reply                        | 408   |\r\n                | Unconditional                   | 302   |\r\n                | Deflection during alerting      | 487   |\r\n                | Deflection immediate response   | 480   |\r\n                | Mobile subscriber not reachable | 503   |\r\n                +---------------------------------+-------+\r\n", "correct_text": "                +---------------------------------+-------+\r\n                | Redirecting Reason              | Value |\r\n                +---------------------------------+-------+\r\n                | Unknown                         | 404   |\r\n                | User busy                       | 486   |\r\n                | No reply                        | 408   |\r\n                | Not available                   | 503   |\r\n                | Unconditional                   | 302   |\r\n                | Deflection during alerting      | 487   |\r\n                | Deflection immediate response   | 480   |\r\n                | Mobile subscriber not reachable | 503   |\r\n                +---------------------------------+-------+\r\n", "notes": "The two redirect reasons \"Unknown\" and \"Not available\" are totally different in their meaning. In the first case the user is unknown, whereas in the second case it is a valid address but not reachable.\r\n\r\nUnfortunately 3GPP TS 24.604 \"Communication Diversion\" refers to RFC 4458 and in case of \"communication forwarding not logged in\" it therefore requests cause value 404 in the meaning of \"not available\". This cause value is mapped to \"unknown\" in interworking SIP to ISUP (3GPP TS 29.163 Table 7.4.6.2.2.4) and therefore a missed call notification cannot be sent to a subscriber which is not logged in.\r\n\r\n\"Not available\" should use the same value as \"Mobile subscriber not reachable\".", "submit_date": "2015-02-09", "submitter_name": "Franz Edler", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4267", "doc-id": "RFC6819", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.1.11", "orig_text": "If an authorization server includes a nontrivial amount of entropy", "correct_text": "If an authorization server includes a trivial amount of entropy", "notes": "The threat being described outlines a scenario where too little entropy is involved; countermeasures include using non-trivial amounts of entropy.", "submit_date": "2015-02-09", "submitter_name": "David Gladstone", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4268", "doc-id": "RFC5116", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "As an example, the nonce 100 could be stored, after which the nonces\r\n1 through 99 could be used for encryption.  The nonce value 200 could\r\nbe stored at the same time that nonces 1 through 99 are being used,\r\nand so on.", "correct_text": "As an example, the nonce 100 could be stored, after which the nonces\r\n1 through 99 could be used for encryption.  Then, nonces 101 to 199\r\ncould be used after the nonce 200 was saved.", "notes": "This might be confusing in its original form, maybe even suggesting an interpretation where nonces are reused.", "submit_date": "2015-02-09", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8289", "doc-id": "RFC2549", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Multicasting is supported, but requires the implementation of a clone device.", "correct_text": "Multicasting is supported, but requires the implementation of a cloning and memory-altering device.", "notes": "As the destination addresses are brain-embedded in carriers, simply using a cloning device on a carrier would result in multiple packets sent to the same unicast address. Following this issue, an implementation of a memory-altering functionality would be required to change the destination address when replicating packets to reach multiple receivers.\n --VERIFIER NOTES-- \nThank you for your errata report.  An addressing model is not fully specified, particular source address selection.  Memory is apparently necessary only for the destination address, and for multicast that represents no conflict.", "submit_date": "2025-02-08", "submitter_name": "Pavel Pikirenia", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-02-13 14:17:24"}, {"errata_id": "4307", "doc-id": "RFC7477", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "sec 2, page 4", "orig_text": "nonpunishable data", "correct_text": "nonpublishable data", "notes": "confusing typo, confirmed with author.", "submit_date": "2015-03-19", "submitter_name": "Donald Eastlake 3rd", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4308", "doc-id": "RFC5655", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "A.5", "orig_text": "A.5.  Complete File Example\r\n\r\n   Bringing together the examples above and adding message headers as\r\n   appropriate, a hex dump of the first 317 bytes of the example File\r\n   constructed above would appear as in the annotated Figure 10 below.", "correct_text": "A.5.  Complete File Example\r\n\r\n   Bringing together the examples above and adding message headers as\r\n   appropriate, a hex dump of the first 285 bytes of the example File\r\n   constructed above would appear as in the annotated Figure 10 below.", "notes": "s/317/285/\r\n\r\nFigure 10 shows 18 lines of 16 octets each, less three octets in the final row.\r\n(18 x 16 - 3) = 285 octets.\r\n\r\nThis can also be confirmed by the revised numbering in errata 2030 - though note that the dump is numbered from octet zero:\r\n\r\n272: 80 02 00 50 06 00 00 46 50 00 00 00 41\r\n\r\nSince the offset of the final octet (\"41\") is 284, the overall length must be 285.\n --VERIFIER NOTES-- \nThe errata 2030 has been updated to reflect this, as proposed by Paul Aitken.", "submit_date": "2015-03-19", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4309", "doc-id": "RFC6368", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "   In the traditional model, where External BGP sessions are used\r\n   between the BGP/MPLS VPN PE and CE, the PE router identifies itself\r\n   as belonging to the customer network autonomous system.", "correct_text": "   In the traditional model, where External BGP sessions are used\r\n   between the BGP/MPLS VPN PE and CE, the PE router identifies itself\r\n   as belonging to the provider network autonomous system.", "notes": "", "submit_date": "2015-03-20", "submitter_name": "Guillaume Gaulon", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4274", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "-- Naming attributes of type X520CommonName:\r\n--   X520CommonName ::= DirectoryName (SIZE (1..ub-common-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520LocalityName:\r\n--   X520LocalityName ::= DirectoryName (SIZE (1..ub-locality-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520StateOrProvinceName:\r\n--   X520StateOrProvinceName ::= DirectoryName (SIZE (1..ub-state-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520OrganizationName:\r\n--   X520OrganizationName ::=\r\n--          DirectoryName (SIZE (1..ub-organization-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520OrganizationalUnitName:\r\n--   X520OrganizationalUnitName ::=\r\n--          DirectoryName (SIZE (1..ub-organizational-unit-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520Title:\r\n--   X520Title ::= DirectoryName (SIZE (1..ub-title))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520Pseudonym:\r\n--   X520Pseudonym ::= DirectoryName (SIZE (1..ub-pseudonym))\r\n", "correct_text": "-- Naming attributes of type X520CommonName:\r\n--   X520CommonName ::= DirectoryString (SIZE (1..ub-common-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520LocalityName:\r\n--   X520LocalityName ::= DirectoryString (SIZE (1..ub-locality-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520StateOrProvinceName:\r\n--   X520StateOrProvinceName ::=\r\n--          DirectoryString (SIZE (1..ub-state-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520OrganizationName:\r\n--   X520OrganizationName ::=\r\n--          DirectoryString (SIZE (1..ub-organization-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520OrganizationalUnitName:\r\n--   X520OrganizationalUnitName ::=\r\n--          DirectoryString (SIZE (1..ub-organizational-unit-name))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520Title:\r\n--   X520Title ::= DirectoryString (SIZE (1..ub-title))\r\n\r\n...\r\n\r\n-- Naming attributes of type X520Pseudonym:\r\n--   X520Pseudonym ::= DirectoryString (SIZE (1..ub-pseudonym))\r\n", "notes": "Appendix B.  ASN.1 Notes says that:\r\n\r\n   For many of the attribute types defined in [X.520], the\r\n   AttributeValue uses the DirectoryString type.  Of the attributes\r\n   specified in Appendix A, the name, surname, givenName, initials,\r\n   generationQualifier, commonName, localityName, stateOrProvinceName,\r\n   organizationName, organizationalUnitName, title, and pseudonym\r\n   attributes all use the DirectoryString type.  X.520 uses a\r\n   parameterized type definition [X.683] of DirectoryString to specify\r\n   the syntax for each of these attributes.  The parameter is used to\r\n   indicate the maximum string length allowed for the attribute.  In\r\n   Appendix A, in order to avoid the use of parameterized type\r\n   definitions, the DirectoryString type is written in its expanded form\r\n   for the definition of each of these attribute types.  So, the ASN.1\r\n   in Appendix A describes the syntax for each of these attributes as\r\n   being a CHOICE of TeletexString, PrintableString, UniversalString,\r\n   UTF8String, and BMPString, with the appropriate constraints on the\r\n   string length applied to each of the types in the CHOICE, rather than\r\n   using the ASN.1 type DirectoryString to describe the syntax.\r\n\r\nThere is nothing about DirectoryName type here. So comments in ASN.1 in\r\nA.1 are wrong and DirectoryName should be fixed to DirectoryString.\r\n\r\nFrom Expert PKIX reviewers:\r\nThe errata calls for changing \"DirectoryName\" to \"DirectoryString\" in the comments\r\nof the ASN.1. Nobody seems to disagree with this correction.\r\n\r\nThis message triggered a lot of discussion about whether to remove the string size limits.\r\nThat discussion ended with consensus to retain the size limits.", "submit_date": "2015-02-19", "submitter_name": "Ilya V. Matveychikov", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4275", "doc-id": "RFC3261", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "15", "orig_text": "The caller's UA MAY send a BYE for either confirmed or early dialogs", "correct_text": "The caller's UA MUST send a BYE for confirmed dialogs", "notes": "In general, BYE shall be handled in the same way as CANCEL if it is for early dialogs.\r\nIn case, when BYE is on the way to the destination, the callee probably accepts INVITE, the race condition will occure.\r\nIf we follow the procedure as CANCEL, caller shall send ACK for 200 OK and immediately release the session using BYE.\r\nSo two BYEs will be triggered in the case, it does not make sense.\n --VERIFIER NOTES-- \nThis behavior was clarified in https://www.rfc-editor.org/rfc/rfc6141#section-5.3", "submit_date": "2015-02-19", "submitter_name": "Chao Wang", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:13:35"}, {"errata_id": "4276", "doc-id": "RFC6130", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Section 12.6", "orig_text": "               then create a 2-Hop Neighbor Tuple with:\r\n", "correct_text": "               then create a 2-Hop Tuple with:\r\n", "notes": "There is no such thing as a 2-Hop Neighbor Tuple. There is a 2-Hop Tuple (which is what is meant) but also a Neighbor Tuple (which is not meant).", "submit_date": "2015-02-23", "submitter_name": "Christopher Dearlove", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4277", "doc-id": "RFC4413", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": "| DSCP*               |      6      |   ALTERNATING  |", "correct_text": "| DSCP*               |      6      |    CHANGING    |", "notes": "Fields marked as changing are classified as alternating, irregular, etc., in section 4 and Figure 11.\r\nClassifying DSCP as alternating in Figure 1 implies a possible distinction between changing and alternating, despite alternating being a subclass of changing.\n --VERIFIER NOTES-- \n   The value ALTERNATING is correct, even though it is a subset of CHANGING. ", "submit_date": "2015-02-23", "submitter_name": "Justin Yirka", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4278", "doc-id": "RFC4413", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.1.2", "orig_text": "| DSCP*               |      6      |   ALTERNATING  |", "correct_text": "| DSCP*               |      6      |    CHANGING    |", "notes": "Fields marked as changing are classified as alternating, irregular, etc., in section 4 and Figure 11.\r\nClassifying DSCP as alternating in Figure 3 implies a possible distinction between changing and alternating, despite alternating being a subclass of changing.\n --VERIFIER NOTES-- \n   The value ALTERNATING is correct, even though it is a subset of CHANGING. ", "submit_date": "2015-02-23", "submitter_name": "Justin Yirka", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4279", "doc-id": "RFC2460", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "   Hop Limit            8-bit unsigned integer.  Decremented by 1 by\r\n                        each node that forwards the packet. The packet\r\n                        is discarded if Hop Limit is decremented to\r\n                        zero.", "correct_text": "TBD", "notes": "The original text overlooks the case that a node receives a packet which already has a hop limit of zero (eg, coming from a misbehaving node, or malicious traffic). Following the instructions in that case would result in decrementing the hop limit from 0 to -1 (so, 255), then forwarding the packet.\r\n\r\nThe text also doesn't state what a non-forwarding node (ie, a host) should do upon reception of a packet which already has a hop limit of zero: should the packet be accepted or dropped?\r\n\r\n\r\n* While the above issues are worth discussing, they are beyond the scope of an erratum.  Discussion on updating the text to handle Hop Limits from malicious or misbehaving nodes should be taken up within the working group. *", "submit_date": "2015-02-24", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4280", "doc-id": "RFC5176", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6", "orig_text": "   0         0        0+  101   Error-Cause\r\n\r\n\r\nIn both tables, for CoA and Disconnect messages.", "correct_text": "   0         0+        0+  101   Error-Cause\r\n\r\n\r\nIn both tables, for CoA and Disconnect messages.", "notes": "Section 3.5 says that Error-Cause may be sent in a CoA-ACK or Disconnect-ACK packet:\r\n\r\n      ...\r\n      Values 200-299 represent successful completion, so that these\r\n      values may only be sent within CoA-ACK or Disconnect-ACK packets", "submit_date": "2015-02-24", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4321", "doc-id": "RFC7511", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "0 - Don't use Avian IP Carrier links (maybe the packet is\r\n    afraid of pigeons).", "correct_text": "0 - Don't use Avian IP Carrier links (maybe the packet is\r\n    afraid of avians).", "notes": "Neither RFC 1149 nor RFC 6214 mandates any particular species. If it is\r\nrequired to specify a given species, an additional Species ID field\r\nwould be needed in the option.", "submit_date": "2015-04-01", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4524", "doc-id": "RFC6958", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "  Number of Bursts: 16 bits\r\n\r\n    The number of bursts in the period of the report (Interval or\r\n    Cumulative).\r\n\r\n    The measured value is an unsigned value.  If the measured value\r\n    exceeds 0xFFFD, the value 0xFFFE MUST be reported to indicate\r\n    an over-range measurement.  If the measurement is unavailable,\r\n    the value 0xFFFF MUST be reported.\r\n", "correct_text": "  Number of Bursts: 12 bits\r\n\r\n    The number of bursts in the reporting period (Interval or\r\n    Cumulative).\r\n\r\n    The measured value is an unsigned value.  If the measured value\r\n    exceeds 0xFFD, the value 0xFFE MUST be reported to indicate\r\n    an over-range measurement.  If the measurement is unavailable,\r\n    the value 0xFFF MUST be reported.", "notes": "This was discussed on the mailing list after the Prague meeting and agreed at the Yokohama meeting.", "submit_date": "2015-11-06", "submitter_name": "Varun Singh", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4283", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "stmtend = \";\" / \"{\" *unknown_statement \"}\"", "correct_text": "stmtend = optsep (\";\" / \"{\" stmtsep \"}\") stmtsep", "notes": "Note1: As specified, there are no spaces allowed between the unknown statements, and between the braces and the unknown statements.\r\n\r\nNotes2:\r\nThe original \"stmtend\" rule does not allow for spaces between unknown\r\nstatements, which requires the \"*unknown-statement\" fix in \"stmtend\".\r\n\r\nThere is at least one place (\"revision-date-stmt\") where \"stmtend\" end\r\nis not preceded by \"optsep\". Instead of fixing those rules, it is better to\r\ninclude \"optsep\" in \"stmtend\" itself, since it should always be present.\r\n\r\nOn the same note, almost all \"stmtend\" uses are followed by a\r\n\"stmtsep\", and any cases where that does not happen are probably an error, so again it is better to make that explicit in the \"stmtend\" rule itself.\r\n\r\nWith the change in this errata, there will be a lot of rules in the\r\nABNF with redundant (but not technically incorrect) \"optsep\" and \"stmtsep\" parts, as for example\r\n\r\n      module-header-stmts = ;; these stmts can appear in any order\r\n                            [yang-version-stmt stmtsep]\r\n                            namespace-stmt stmtsep\r\n                            prefix-stmt stmtsep\r\n\r\n      namespace-stmt = namespace-keyword sep uri-str optsep stmtend\r\n\r\nwhich now could be replaced with\r\n\r\n      module-header-stmts = ;; these stmts can appear in any order\r\n                            [yang-version-stmt]\r\n                            namespace-stmt\r\n                            prefix-stmt\r\n\r\n      namespace-stmt = namespace-keyword sep uri-str stmtend\r\n\r\nThese changes should probably be incorporated into the next ABNF\r\nrevision.", "submit_date": "2015-02-28", "submitter_name": "Cesar Crusius", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4288", "doc-id": "RFC3262", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   Handling of subsequent reliable provisional responses for the same\r\n   initial request follows the same rules as above, with the following\r\n   difference: reliable provisional responses are guaranteed to be in\r\n   order.  As a result, if the UAC receives another reliable provisional\r\n   response to the same request, and its RSeq value is not one higher\r\n   than the value of the sequence number, that response MUST NOT be\r\n   acknowledged with a PRACK, and MUST NOT be processed further by the\r\n   UAC.  An implementation MAY discard the response, or MAY cache the\r\n   response in the hopes of receiving the missing responses.\r\n", "correct_text": "   Handling of subsequent reliable provisional responses for the same\r\n   initial request follows the same rules as above, with the following\r\n   difference: reliable provisional responses are guaranteed to be in\r\n   order.  As a result, if the UAC receives another reliable provisional\r\n   response to the same request on a given dialog, and its RSeq value is\r\n   not one higher than the value of the sequence number, that response\r\n   MUST NOT be acknowledged with a PRACK, and MUST NOT be processed\r\n   further by the  UAC.  An implementation MAY discard the response, or\r\n   MAY cache the response in the hopes of receiving the missing\r\n   responses. If forking occurs, RSeq values are processed on each early\r\n   dialog independently. ", "notes": "Each UAS receiving a forked request selects the RSeq values independently. Without this addition of the text the forking proxy would need to change the RSeq values on the received responses to keep them in order.\n --VERIFIER NOTES-- \n   The proposed wording is not correct, since RSeq values are managed per transaction, not per dialog. The \"on each dialog\" language may mislead users. However, I agree that there is a problem with the original language here, and have asked sipcore to decide how to correct it. Therefore I am rejecting this errata, but we may replace it with a new one if that's what sipcore decides", "submit_date": "2015-03-04", "submitter_name": "J\u00f6rgen Axell", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4289", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.1", "orig_text": "target     =  nickname / server\r\n", "correct_text": "target     =  nickname / servername", "notes": "There is no \"server\" rule.", "submit_date": "2015-03-06", "submitter_name": "Tony Tam", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4290", "doc-id": "RFC2608", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "This substring is the Naming Authority, as described in Section 9.6.", "correct_text": "This substring is the Naming Authority, as described in Section 4.2.", "notes": "", "submit_date": "2015-03-06", "submitter_name": "Peter Budny", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4291", "doc-id": "RFC6020", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "12", "orig_text": "   deviate-not-supported-stmt =\r\n                         deviate-keyword sep\r\n                         not-supported-keyword optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                          \"}\") \r\n", "correct_text": "   deviate-not-supported-stmt =\r\n                         deviate-keyword sep\r\n                         not-supported-keyword\r\n                         stmtend\r\n", "notes": "The rule is not incorrect, but unnecessarily replicates 'stmtend' within it.\n --VERIFIER NOTES-- \nThis is already fixed in draft-ietf-netmod-rfc6020bis-04.\r\n\r\nSince this is not really a bug, I don't know if it is worth the effort\r\nto accept this errata.\r\n", "submit_date": "2015-03-07", "submitter_name": "Cesar Crusius", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4292", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   type-stmt           = type-keyword sep identifier-ref-arg-str optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              type-body-stmts\r\n                          \"}\")\r\n", "correct_text": "   type-stmt           = type-keyword sep identifier-ref-arg-str optsep\r\n                         (\";\" /\r\n                          \"{\" stmtsep\r\n                              [ type-body-stmts ]\r\n                          \"}\")\r\n", "notes": "Every statement that can end with a single ';' should also accept ending with '{ stmtsep }' (that is what the 'stmtend' rule implies). This is the only instance I found so far of a statement that does not follow this rule.\r\n\r\nThe other option would be to replace all \";\" in rules like that with 'stmtend'.", "submit_date": "2015-03-07", "submitter_name": "Cesar Crusius", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4293", "doc-id": "RFC3986", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?", "correct_text": "^(([^:/?#]+):)(//([^/?#]*))?([^?#]*)(\\?([^#]*))?(#(.*))?", "notes": "The regular expression makes the scheme part optional, but both the ABNF in Appendix A and the text in Section 3 state that the scheme is in fact required.\n --VERIFIER NOTES-- \nThe context is that this is for parsing references:\r\n\r\n   The following line is the regular expression for breaking-down a\r\n   well-formed URI reference into its components.\r\n\r\nThe ABNF makes it clear that the scheme is, in fact, NOT required for URI references (see the ABNF for the \"relative-ref\" production).", "submit_date": "2015-03-07", "submitter_name": "Cesar Crusius", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4294", "doc-id": "RFC7049", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "   BF           -- Start indefinite-length map\r\n      63        -- First key, UTF-8 string length 3\r\n         46756e --   \"Fun\"\r\n      F5        -- First value, true\r\n      63        -- Second key, UTF-8 string length 3\r\n         416d74 --   \"Amt\"\r\n      21        -- -2\r\n      FF        -- \"break\"", "correct_text": "   BF           -- Start indefinite-length map\r\n      63        -- First key, UTF-8 string length 3\r\n         46756e --   \"Fun\"\r\n      F5        -- First value, true\r\n      63        -- Second key, UTF-8 string length 3\r\n         416d74 --   \"Amt\"\r\n      21        -- Second value, -2\r\n      FF        -- \"break\"", "notes": "This is only a break in phrasing consistency.  There is no technical error.", "submit_date": "2015-03-07", "submitter_name": "Eric Myhre", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4301", "doc-id": "RFC2325", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3", "orig_text": "The MIB contains objects that\r\nrelate to physical connections,\r\nconfiguration, storage levels,\r\navailability, quality of service, and\r\navailability.", "correct_text": "The MIB contains objects that\r\nrelate to physical connections,\r\nconfiguration, storage levels,\r\nquality of service, and availability.", "notes": "Availability is stated twice.\n --VERIFIER NOTES-- \nAny coffee drinker will tell you that availability is absolutely critical.  Its appearance twice\r\nin the list reflects that importance, and I am rejecting this errata report on those...grounds.", "submit_date": "2015-03-12", "submitter_name": "Anthony Yu", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8256", "doc-id": "RFC9639", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2", "orig_text": "   SSAAAAAASSBBBBBBSSCCCCCC\r\n   ^   ^   ^   ^   ^   ^\r\n   |   |   |   |   |  Bits of 2nd sample of 1st channel\r\n   |   |   |   |  Sign extension bits of 2nd sample of 2nd channel\r\n   |   |   |  Bits of 1st sample of 2nd channel\r\n   |   |  Sign extension bits of 1st sample of 2nd channel\r\n   |  Bits of 1st sample of 1st channel\r\n   Sign extension bits of 1st sample of 1st channel", "correct_text": "   SSAAAAAASSBBBBBBSSCCCCCC\r\n   ^   ^   ^   ^   ^   ^\r\n   |   |   |   |   |  Bits of 2nd sample of 1st channel\r\n   |   |   |   |  Sign extension bits of 2nd sample of 1st channel\r\n   |   |   |  Bits of 1st sample of 2nd channel\r\n   |   |  Sign extension bits of 1st sample of 2nd channel\r\n   |  Bits of 1st sample of 1st channel\r\n   Sign extension bits of 1st sample of 1st channel", "notes": "One of the diagram labels appears to contradict the sign-extension + interleaving method described in the preceding paragraph.", "submit_date": "2025-01-20", "submitter_name": "Casey", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-01-23 00:38:04"}, {"errata_id": "4295", "doc-id": "RFC7427", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "A.4.2", "orig_text": "   Here the parameters are present and contain the default parameters,\r\n   i.e., hashAlgorithm of SHA-1, maskGenAlgorithm of mgf1SHA1,\r\n   saltLength of 20, and trailerField of 1.\r\n\r\n   0000 : SEQUENCE\r\n   0002 :   OBJECT IDENTIFIER  RSASSA-PSS (1.2.840.113549.1.1.10)\r\n   000d :   SEQUENCE\r\n   000f :     CONTEXT 0\r\n   0011 :       SEQUENCE\r\n   0013 :         OBJECT IDENTIFIER  id-sha1 (1.3.14.3.2.26)\r\n   001a :         NULL\r\n   001c :     CONTEXT 1\r\n   001e :       SEQUENCE\r\n   0020 :         OBJECT IDENTIFIER  1.2.840.113549.1.1.8\r\n   002b :         SEQUENCE\r\n   002d :           OBJECT IDENTIFIER  id-sha1 (1.3.14.3.2.26)\r\n   0034 :           NULL\r\n   0036 :     CONTEXT 2\r\n   0038 :       INTEGER   0x14 (5 bits)\r\n   003b :     CONTEXT 3\r\n   003d :       INTEGER   0x1 (1 bits)\r\n\r\n   Name = RSASSA-PSS with default parameters,\r\n          oid = 1.2.840.113549.1.1.10\r\n   Length = 64\r\n   0000: 303e 0609 2a86 4886 f70d 0101 0a30 31a0\r\n   0010: 0b30 0906 052b 0e03 021a 0500 a118 3016\r\n   0020: 0609 2a86 4886 f70d 0101 0830 0906 052b\r\n   0030: 0e03 021a 0500 a203 0201 14a3 0302 0101\r\n\r\n", "correct_text": "   If the default parameters are used, i.e., hashAlgorithm of SHA-1, \r\n   maskGenAlgorithm of mgf1SHA1, saltLength of 20, and trailerField \r\n   of 1, the parameters MUST NOT be encoded according to the \r\n   Distiguished Encoding Rules (DER) of ASN.1. Therefore the encoding\r\n   is the same as of A.4.1.\r\n\r\n   0000 : SEQUENCE\r\n   0002 :   OBJECT IDENTIFIER  RSASSA-PSS (1.2.840.113549.1.1.10)\r\n   000d :   SEQUENCE\r\n\r\n   Name = RSASSA-PSS with default parameters,\r\n          oid = 1.2.840.113549.1.1.10\r\n   Length = 15\r\n   0000: 300d 0609 2a86 4886 f70d 0101 0a30 00\r\n", "notes": "Section 3 requires the use of DER:\r\nThe ASN.1 used here is the same ASN.1 used in the AlgorithmIdentifier of PKIX (see Section 4.1.1.2 of [RFC5280]), encoded using distinguished encoding rules (DER) [CCITT.X690.2002].\r\n\r\nKM: Reviewed by expert and response provided.\r\n\n --VERIFIER NOTES-- \nFrom Tero Kivinen\r\n\r\nIn the RFC 4055 the section 3.1 says that even when the\r\ndefault values are used the implementation MUST understand both\r\nformats, i.e. the case where the default value is omitted and the case\r\nwhere the default value is explicitly given:\r\n\r\nFrom RFC4055 section 3.1:\r\n\r\n      hashAlgorithm\r\n\r\n         The hashAlgorithm field identifies the hash function.  It MUST\r\n         be one of the algorithm identifiers listed in Section 2.1, and\r\n         the default hash function is SHA-1.  Implementations MUST\r\n         support SHA-1 and MAY support any of the other one-way hash\r\n         functions listed in Section 2.1.  Implementations that perform\r\n         signature generation MUST omit the hashAlgorithm field when\r\n         SHA-1 is used, indicating that the default algorithm was used.\r\n         Implementations that perform signature validation MUST\r\n         recognize both the sha1Identifier algorithm identifier and an\r\n         absent hashAlgorithm field as an indication that SHA-1 was\r\n         used.\r\n\r\nIn this case we are not actually doing either one of those options, we\r\nare not generating signature, and we are not validating them. In this\r\ndocument we are simply indicating what kind of signature will follows\r\nthis binary blob. Yes, when generating those ASN.1 objects for default\r\nvalues implementations should use the A.4.1 version, but they might\r\nalso want to understand the version specified in the A.4.2.\r\n\r\nNote, that in some cases the implementations might simply take the\r\nAlgorithmIdentifier pieces from their own certificate and not generate\r\nit at all, and this might cause them to take whatever the CA vendor\r\ngenerated for them.\r\n\r\nActually when checking for the RFC4055 I notice it says that same\r\nthing (MUST omit in generate, MUST recognize both) for everything else\r\n(hashAlgorithm, maskGenAlgorithm, and trailerField) expect for\r\nsaltLength... I do not know if this means that for saltLength we\r\nshould actually not encode the default as number or if this is just\r\nsloppy writing of the RFC4055...\r\n\r\n>    0000 : SEQUENCE\r\n>    0002 :   OBJECT IDENTIFIER  RSASSA-PSS (1.2.840.113549.1.1.10)\r\n>    000d :   SEQUENCE\r\n>\r\n>    Name = RSASSA-PSS with default parameters,\r\n>           oid = 1.2.840.113549.1.1.10\r\n>    Length = 15\r\n>    0000: 300d 0609 2a86 4886 f70d 0101 0a30 00\r\n>\r\n>\r\n> Notes\r\n> -----\r\n> Section 3 requires the use of DER:\r\n> The ASN.1 used here is the same ASN.1 used in the AlgorithmIdentifier of PKIX (see Section 4.1.1.2 of [RFC5280]), encoded using distinguished encoding rules (DER) [CCITT.X690.2002].\r\n\r\nYes, when generating them they needs to be in DER, when matching the\r\nvalues sent from the other end, the matching can be looser.\r\n\r\n\r\nThe format A.4.1 MUST be used when generating the RSASSA-PSS with default parameters, but A.4.2 can also be recognized.\r\n\r\nIf the implementation has real ASN.1 parser this is exactly what it will do automatically.", "submit_date": "2015-03-10", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4296", "doc-id": "RFC7427", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "A.4.3", "orig_text": "   Here the parameters are present and contain hashAlgorithm of SHA-256,\r\n|  maskGenAlgorithm of SHA-256, saltLength of 32, and trailerField of 1.\r\n\r\n   0000 : SEQUENCE\r\n   0002 :   OBJECT IDENTIFIER  RSASSA-PSS (1.2.840.113549.1.1.10)\r\n   000d :   SEQUENCE\r\n   000f :     CONTEXT 0\r\n   0011 :       SEQUENCE\r\n   0013 :         OBJECT IDENTIFIER  id-sha256 (2.16.840.1.101.3.4.2.1)\r\n   001e :         NULL\r\n   0020 :     CONTEXT 1\r\n   0022 :       SEQUENCE\r\n|  0024 :         OBJECT IDENTIFIER  1.2.840.113549.1.1.8\r\n   002f :         SEQUENCE\r\n   0031 :           OBJECT IDENTIFIER id-sha256 (2.16.840.1.101.3.4.2.1)\r\n   003c :           NULL\r\n   003e :     CONTEXT 2\r\n   0040 :       INTEGER   0x20 (6 bits)\r\n|  0043 :     CONTEXT 3\r\n|  0045 :       INTEGER   0x1 (1 bits)\r\n\r\n   Name = RSASSA-PSS with sha-256, oid = 1.2.840.113549.1.1.10\r\n|  Length = 72\r\n   0000: 3046 0609 2a86 4886 f70d 0101 0a30 39a0\r\n   0010: 0f30 0d06 0960 8648 0165 0304 0201 0500\r\n   0020: a11c 301a 0609 2a86 4886 f70d 0101 0830\r\n   0030: 0d06 0960 8648 0165 0304 0201 0500 a203\r\n|  0040: 0201 20a3 0302 0101\r\n", "correct_text": "   Here the parameters are present and contain hashAlgorithm of SHA-256,\r\n|  maskGenAlgorithm of MGF1 with SHA-256, saltLength of 32, and \r\n|  trailerField of 1.\r\n|  Note that since the trailerField has the default value it MUST NOT be\r\n|  encoded according to the Distiguished Encoding Rules (DER) of ASN.1.\r\n\r\n   0000 : SEQUENCE\r\n   0002 :   OBJECT IDENTIFIER  RSASSA-PSS (1.2.840.113549.1.1.10)\r\n   000d :   SEQUENCE\r\n   000f :     CONTEXT 0\r\n   0011 :       SEQUENCE\r\n   0013 :         OBJECT IDENTIFIER  id-sha256 (2.16.840.1.101.3.4.2.1)\r\n   001e :         NULL\r\n   0020 :     CONTEXT 1\r\n   0022 :       SEQUENCE\r\n|  0024 :         OBJECT IDENTIFIER  id-mgf1 (1.2.840.113549.1.1.8)\r\n   002f :         SEQUENCE\r\n   0031 :           OBJECT IDENTIFIER id-sha256 (2.16.840.1.101.3.4.2.1)\r\n   003c :           NULL\r\n   003e :     CONTEXT 2\r\n   0040 :       INTEGER   0x20 (6 bits)\r\n\r\n   Name = RSASSA-PSS with sha-256, oid = 1.2.840.113549.1.1.10\r\n|  Length = 67\r\n   0000: 3046 0609 2a86 4886 f70d 0101 0a30 39a0\r\n   0010: 0f30 0d06 0960 8648 0165 0304 0201 0500\r\n   0020: a11c 301a 0609 2a86 4886 f70d 0101 0830\r\n   0030: 0d06 0960 8648 0165 0304 0201 0500 a203\r\n|  0040: 0201 20\r\n", "notes": "1. The maskGenAlgorithm is in fact not SHA-256 (2.16.840.1.101.3.4.2.1), but MGF1 (1.2.840.113549.1.1.8) based on SHA-256 (2.16.840.1.101.3.4.2.1).\r\n\r\n2. Section 3 requires the use of DER:\r\nThe ASN.1 used here is the same ASN.1 used in the AlgorithmIdentifier of PKIX (see Section 4.1.1.2 of [RFC5280]), encoded using distinguished encoding rules (DER) [CCITT.X690.2002].\n --VERIFIER NOTES-- \nPer Tero Kivinen:\r\n\r\n   The id-mgf1 oid is there in the example, the tool I used didn't know\r\nthe name for it thus it just printed out the oid. As this does not\r\naffect the binary object at all there is no problem in here.\r\n\r\n> 2. Section 3 requires the use of DER:\r\n> The ASN.1 used here is the same ASN.1 used in the\r\n> AlgorithmIdentifier of PKIX (see Section 4.1.1.2 of [RFC5280]),\r\n> encoded using distinguished encoding rules (DER) [CCITT.X690.2002].\r\n\r\nYes, but RFC4055 says that:\r\n\r\n      trailerField\r\n\r\n         The trailerField field is an integer.  It provides\r\n         compatibility with IEEE Std 1363a-2004 [P1363A].  The value\r\n         MUST be 1, which represents the trailer field with hexadecimal\r\n         value 0xBC.  Other trailer fields, including the trailer field\r\n         composed of HashID concatenated with 0xCC that is specified in\r\n         IEEE Std 1363a, are not supported.  Implementations that\r\n         perform signature generation MUST omit the trailerField field,\r\n         indicating that the default trailer field value was used.\r\n         Implementations that perform signature validation MUST\r\n         recognize both a present trailerField field with value 1 and an\r\n         absent trailerField field.\r\n\r\nI.e. you should recognize both formats. Yes, we could have another\r\nexample also showing the object value to used when generating these\r\nand when omitting the default values (like we do have for SHA-1).", "submit_date": "2015-03-10", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4297", "doc-id": "RFC7394", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "3.1. TTL TLV Format\r\n\r\n\r\n   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Type = 32769                 |   Length = 8                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   Value       |   Reserved    |   Flags                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                  Figure 1: Time To Live TLV Format", "correct_text": "3.1. TTL TLV Format\r\n\r\n\r\n   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Type = 32769                 |   Length = 4                  |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   Value       |   Reserved    |   Flags                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                  Figure 1: Time To Live TLV Format", "notes": "In an LSP Ping TTL, Length value should show length of the value fields only. See RFC 4379 section 3.", "submit_date": "2015-03-10", "submitter_name": "Himanshu Shah", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4298", "doc-id": "RFC7159", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7 Strings", "orig_text": "4HEXDIG", "correct_text": "Something along the lines\r\n\r\n4hexdig\r\nhexdig = 0..9 A..F a..f", "notes": "The prose states that within a six-character escape sequence starting \\u, the hex digits can be either upper or lower case. But the grammar only allows upper case, because it uses the symbol HEXDIG which is defined in RFC 5234 to include upper case A..F only. There is thus an inconsistency beween the grammar and the prose, and although most readers are likely to know which to believe, the spec is formally ambiguous on this point.\n --VERIFIER NOTES-- \nThe reporter doesn't understand RFC 5234.  Look in Section 2.3 (Terminal Values), and see this:\r\n\r\n>   NOTE:\r\n>\r\n>      ABNF strings are case insensitive and the character set for these\r\n>      strings is US-ASCII.\r\n\r\nThere is no inconsistency, and the text as written allows both upper and lower case for the hex digits.", "submit_date": "2015-03-11", "submitter_name": "Michael Kay", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4299", "doc-id": "RFC3205", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "This further requires that each\r\nclient know the secret to be used with each server, but it does not\r\nprovide any means of securely transmitting such secrets between the\r\nparties.", "correct_text": "This further requires that each\r\nclient knows the secret to be used with each server, but it does not\r\nprovide any means of securely transmitting such secrets between the\r\nparties.", "notes": "Grammatical mistake: each client knowS\n --VERIFIER NOTES-- \nActually, it is not a grammatical error, but is grammatically correct.  It's using the subjunctive mood, which is appropriate with \"requires\" (and other verbs, such as \"insists\", \"hopes\", and so on).  Subjunctive mood is fading in English, with a few notable exceptions (\"So be it,\" \"If I were king,\" and the like), but it's still around here and there.  In most cases, as here, the subjunctive form is only distinctive in the third person: \"This requires that he know the secret.\"", "submit_date": "2015-03-12", "submitter_name": "Anthony Yu", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4300", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "24.2", "orig_text": "F2 100 Trying atlanta.com proxy -> Alice\r\n(...)\r\nF3 INVITE atlanta.com proxy -> biloxi.com proxy\r\n(...)\r\nF4 100 Trying biloxi.com proxy -> atlanta.com proxy\r\n(...)\r\nF5 INVITE biloxi.com proxy -> Bob", "correct_text": "F3 100 Trying atlanta.com proxy -> Alice\r\n(...)\r\nF2 INVITE atlanta.com proxy -> biloxi.com proxy\r\n(...)\r\nF5 100 Trying biloxi.com proxy -> atlanta.com proxy\r\n(...)\r\nF4 INVITE biloxi.com proxy -> Bob", "notes": "Figure 1 in Section 4 shows different indexes for the 100 Trying and INVITE messages.", "submit_date": "2015-03-12", "submitter_name": "Tamas Horvath", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 13:45:15"}, {"errata_id": "5218", "doc-id": "RFC8259", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12", "orig_text": "JSON is a subset of JavaScript", "correct_text": "JSON is nearly a subset of JavaScript", "notes": "JSON is not a subset of JavaScript: there are syntactically valid JSON texts that are not syntactically valid JavaScript. Namely, JSON strings can contain unescaped U+2028 LINE SEPARATOR or U+2029 PARAGRAPH SEPARATOR characters, while JavaScript string literals cannot. Thus, a sequence of characters U+0022 U+2028 U+0022 matches this RFC's 'string' production, but does not match ECMA-262's 'Expression' production.", "submit_date": "2017-12-28", "submitter_name": "Vasiliy Faronov", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:33:08"}, {"errata_id": "4312", "doc-id": "RFC6093", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Unfortunately, virtually all TCP implementations process TCP urgent\r\nindications differently.  By default, the last byte of \"urgent data\"\r\nis delivered \"out of band\" to the application.  That is, it is not\r\ndelivered as part of the normal data stream [UNPv1].  For example,\r\nthe \"out-of-band\" byte is read by an application when a recv(2)\r\nsystem call with the MSG_OOB flag set is issued.", "correct_text": "Unfortunately, virtually all TCP implementations process TCP urgent\r\nindications differently.\r\n\r\nFor example, by default in particular UNIX implementations, the last\r\nbyte of \"urgent data\" is delivered \"out of band\" to the application.\r\nThat is, it is not delivered as part of the normal data stream [UNPv1].\r\nFor example, the \"out-of-band\" byte is read by an application when a\r\nrecv(2) system call with the MSG_OOB flag set is issued.", "notes": "The first and latter statements are contradictory, as a default is unlikely to apply when \"virtually all\" implementations process differently.\r\nThis correction to include \"in particular UNIX implementations\" would be appropriate at many points throughout the document in order to differentiate references to implementation specific features and terminology from references to terminology established in prior RFCs.\n --VERIFIER NOTES-- \nReading the text in a flow isn't giving the contradiction that there is a contradiction. ", "submit_date": "2015-03-24", "submitter_name": "Justin Yirka", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4313", "doc-id": "RFC2747", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   In this approach, we could use an NTP based timestamp value as the\r\n   sequence number.  The roll-over period of an NTP timestamp is about\r\n   136 years, much longer than any reasonable lifetime of a key.  In\r\n   addition, the granularity of the NTP timestamp is fine enough to\r\n   allow the generation of an RSVP message every 200 picoseconds for a\r\n   given key.  Many real time clock modules do not have the resolution\r\n   of an NTP timestamp.  In these cases, the least significant bits of\r\n   the timestamp can be generated using a message counter, which is\r\n   reset every clock tick.  For example, when the real time clock\r\n   provides a resolution of 1 second, the 32 least significant bits of\r\n   the sequence number can be generated using a message counter.  The\r\n   remaining 32 bits are filled with the 32 least significant bits of\r\n   the timestamp.  Assuming that the recovery time after failure takes\r\n   longer than one tick of the real time clock, the message counter for\r\n   the low order bits can be safely reset to zero after a restart.", "correct_text": "   In this approach, we could use an NTP based timestamp value as the\r\n   sequence number.  The roll-over period of an NTP timestamp is about\r\n   136 years, much longer than any reasonable lifetime of a key.  In\r\n   addition, the granularity of the NTP timestamp is fine enough to\r\n   allow the generation of an RSVP message every 200 picoseconds for a\r\n   given key.  Many real time clock modules do not have the resolution\r\n   of an NTP timestamp.  In these cases, the least significant bits of\r\n   the sequence number can be generated using a message counter, which\r\n   is reset every clock tick.  For example, when the real time clock\r\n   provides a resolution of 1 second, the 32 least significant bits of\r\n   the sequence number can be generated using a message counter.  The\r\n   remaining 32 bits are filled with the 32 most significant bits of\r\n   the timestamp.  Assuming that the recovery time after failure takes\r\n   longer than one tick of the real time clock, the message counter for\r\n   the low order bits can be safely reset to zero after a restart.", "notes": "32 least significant bits of the timestamp will in this case be set to zero.", "submit_date": "2015-03-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4314", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "Since the maximum segment\r\nlifetime in the net is not likely to exceed a few tens of seconds,\r\nthis is deemed ample protection for foreseeable nets, even if data\r\nrates escalate to l0's of megabits/sec.  At 100 megabits/sec, the\r\ncycle time is 5.4 minutes which may be a little short, but still\r\nwithin reason.", "correct_text": "Since the maximum segment\r\nlifetime in the net is not likely to exceed a few tens of seconds,\r\nthis is deemed ample protection for foreseeable nets, even if data\r\nrates escalate to 10's of megabits/sec.  At 100 megabits/sec, the\r\ncycle time is 5.4 minutes which may be a little short, but still\r\nwithin reason.", "notes": "s/l0/10", "submit_date": "2015-03-26", "submitter_name": "Ramakrishna Rao DTV", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4315", "doc-id": "RFC5321", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "   IPv6-full      = IPv6-hex 7(\":\" IPv6-hex)\r\n\r\n   IPv6-comp      = [IPv6-hex *5(\":\" IPv6-hex)] \"::\"\r\n                  [IPv6-hex *5(\":\" IPv6-hex)]\r\n                  ; The \"::\" represents at least 2 16-bit groups of\r\n                  ; zeros.  No more than 6 groups in addition to the\r\n                  ; \"::\" may be present.\r\n\r\n   IPv6v4-full    = IPv6-hex 5(\":\" IPv6-hex) \":\" IPv4-address-literal\r\n\r\n   IPv6v4-comp    = [IPv6-hex *3(\":\" IPv6-hex)] \"::\"\r\n                  [IPv6-hex *3(\":\" IPv6-hex) \":\"]\r\n                  IPv4-address-literal\r\n                  ; The \"::\" represents at least 2 16-bit groups of\r\n                  ; zeros.  No more than 4 groups in addition to the\r\n                  ; \"::\" and IPv4-address-literal may be present.", "correct_text": "   IPv6-full      = IPv6-hex 7(\":\" IPv6-hex)\r\n\r\n   IPv6-comp      = \"::\" [IPv6-hex *6(\":\" IPv6-hex)]\r\n                  | IPv6-hex \"::\" [IPv6-hex *5(\":\" IPv6-hex)]\r\n                  | IPv6-hex 1(\":\" IPv6-hex) \"::\"\r\n                  [IPv6-hex *4(\":\" IPv6-hex)]\r\n                  | IPv6-hex 2(\":\" IPv6-hex) \"::\"\r\n                  [IPv6-hex *3(\":\" IPv6-hex)]\r\n                  | IPv6-hex 3(\":\" IPv6-hex) \"::\"\r\n                  [IPv6-hex *2(\":\" IPv6-hex)]\r\n                  | IPv6-hex 4(\":\" IPv6-hex) \"::\"\r\n                  [IPv6-hex *1(\":\" IPv6-hex)]\r\n                  | IPv6-hex 5(\":\" IPv6-hex) \"::\" [IPv6-hex]\r\n                  | IPv6-hex 6(\":\" IPv6-hex) \"::\"\r\n                  ; The \"::\" represents at least one 16-bit groups of\r\n                  ; zeros.  No more than 7 groups in addition to the\r\n                  ; \"::\" may be present.\r\n\r\n   IPv6v4-full    = IPv6-hex 5(\":\" IPv6-hex) \":\" IPv4-address-literal\r\n\r\n   IPv6v4-comp    = (\"::\" [IPv6-hex *4(\":\" IPv6-hex) \":\"] \r\n                  | IPv6-hex \"::\" [IPv6-hex *3(\":\" IPv6-hex) \":\"]\r\n                  | IPv6-hex 1(\":\" IPv6-hex) \"::\"\r\n                  [IPv6-hex *2(\":\" IPv6-hex) \":\"]\r\n                  | IPv6-hex 2(\":\" IPv6-hex) \"::\"\r\n                  [IPv6-hex *1(\":\" IPv6-hex) \":\"]\r\n                  | IPv6-hex 3(\":\" IPv6-hex) \"::\" [IPv6-hex \":\"]\r\n                  | IPv6-hex 4(\":\" IPv6-hex) \"::\")\r\n                  IPv4-address-literal\r\n                  ; The \"::\" represents at least one 16-bit groups of\r\n                  ; zeros.  No more than 5 groups in addition to the\r\n                  ; \"::\" and IPv4-address-literal may be present.", "notes": "I had the same impression that Michael Rushton (Errata 2467).\r\n\r\nSearching about what says the others RFCs ([RFC 3986] , [RFC 4291] , [RFC 5952]), I believe that Michael Rushton's affirmative may be right.\r\n\r\n\r\nCase 1 - Section 3.2.2 of [RFC 3986] says:\r\n\r\n\"(...) A sequence of one or more consecutive zero-valued 16-bit pieces within the address may be elided, omitting all their digits and leaving exactly two consecutive colons in their place to mark the elision.\" (sic).\r\n\r\n\r\nTranscription of Section 3.2.2 of [RFC 3986]\r\n\r\n\"(...)\r\n\r\nA 128-bit IPv6 address is divided into eight 16-bit pieces.  Each piece is represented numerically in case-insensitive hexadecimal, using one to four hexadecimal digits (leading zeroes are permitted). The eight encoded pieces are given most-significant first, separated by colon characters.  Optionally, the least-significant two pieces may instead be represented in IPv4 address textual format.  A sequence of one or more consecutive zero-valued 16-bit pieces within the address may be elided, omitting all their digits and leaving exactly two consecutive colons in their place to mark the elision.\r\n\r\n(...)\"\r\n\r\n\r\n\r\nCase 2 - Section 2.2 of [RFC 4291] says:\r\n\r\n\"(...) The use of \"::\" indicates one or more groups of 16 bits of zeros. (...)\" (sic).\r\n\r\n\r\nTranscription of Item 2, Section 2.2 of [RFC 4291]\r\n\r\n\"2. Due to some methods of allocating certain styles of IPv6 addresses, it will be common for addresses to contain long strings of zero bits.  In order to make writing addresses containing zero bits easier, a special syntax is available to compress the zeros. The use of \"::\" indicates one or more groups of 16 bits of zeros. The \"::\" can only appear once in an address.  The \"::\" can also be used to compress leading or trailing zeros in an address.\r\n\r\n(...)\"\r\n\r\n\r\n\r\nCase 3 - Recommendations of [RFC 5952]\r\n\r\nIn reply to the question of Errata 2467, was quoted the words of Section 4.2.2 of [RFC 5952], that recommends:\r\n\r\n\"The symbol \"::\" MUST NOT be used to shorten just one 16-bit 0 field. For example, the representation 2001:db8:0:1:1:1:1:1 is correct, but 2001:db8::1:1:1:1:1 is not correct.\" (sic).\r\n\r\n\r\nBut the Section 4 of the same RFC, says:\r\n\r\n\"(...) The recommendation in this section SHOULD be followed by systems when generating an address to be represented as text, but all implementations MUST accept and be able to handle any legitimate [RFC4291] format.\"\r\n\r\n\r\nTranscription of Section 4 and 4.2.2 of [RFC 5952]\r\n\r\n\"4.  A Recommendation for IPv6 Text Representation\r\n\r\nA recommendation for a canonical text representation format of IPv6 addresses is presented in this section.  The recommendation in this document is one that complies fully with [RFC4291], is implemented by various operating systems, and is human friendly.  The recommendation in this section SHOULD be followed by systems when generating an address to be represented as text, but all implementations MUST accept and be able to handle any legitimate [RFC4291] format.  It is advised that humans also follow these recommendations when spelling an address.\r\n\r\n(...)\r\n   \r\n4.2.2.  Handling One 16-Bit 0 Field\r\n\r\nThe symbol \"::\" MUST NOT be used to shorten just one 16-bit 0 field. For example, the representation 2001:db8:0:1:1:1:1:1 is correct, but 2001:db8::1:1:1:1:1 is not correct.\r\n\r\n(...)\"\r\n\r\n\r\n\r\nTherefore, it is clear that the intent of what was said in Section 4.2.2 only serves to standardize the generation and not to interpretation of a IPv6 representation.\r\n\r\n\r\n\r\nFor more explanations see:\r\n\r\nRFC 4291 - Errata 2702, 2735 and 2466\r\nhttp://www.rfc-editor.org/errata_search.php?rfc=4291\r\n\r\nRFC 4291 - Errata 2735 discussion\r\nhttp://www.ietf.org/mail-archive/web/v6ops/current/msg07722.html\r\n\t\r\n\r\n\t\r\n[RFC 3986] Berners-Lee, T., Fielding, R., and L. Masinter, \"Uniform Resource Identifier (URI): Generic Syntax\", STD 66, RFC 3986, January 2005.\r\n\r\n[RFC 4291] Hinden, R. and S. Deering, \"IP Version 6 Addressing Architecture\", RFC 4291, February 2006.\r\n\r\n[RFC 5952] Kawamura, S. and M. Kawashima, \"A Recommendation for IPv6 Address Text Representation\", RFC 5952, August 2010.\r\n\r\n===== Verifier notes =====\r\nThe text in 5321 was correct at the time of publication, according to advice from the IPv6 folks.  This was, of course, well before 5952 came out.  This report has been noted in the notes for a future 5321bis document.", "submit_date": "2015-03-27", "submitter_name": "Rodrigo Speller", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4316", "doc-id": "RFC7240", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "within Sections 3.2.1 and 3.2.4 of [RFC7230]; as well as the\r\n\"delta-seconds\" rule defined in Section 8.1.3 of [RFC7231].", "correct_text": "within Sections 3.2.1 and 3.2.4 of [RFC7230]; as well as the\r\n\"delay-seconds\" rule defined in Section 7.1.3 of [RFC7231].", "notes": "The reference to \"delta-seconds\" seems to come from an earlier version of the HTTP-bis draft.  This was changed to \"delay-seconds\" in later versions, and the section number changed.", "submit_date": "2015-03-27", "submitter_name": "Matthew Kerwin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4317", "doc-id": "RFC7240", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Prefer: respond-async, wait=100\r\nPrefer: handling=lenient\r\n\r\nPrefer: handling=lenient, wait=100, respond-async\r\n\r\nPrefer: respond-async, wait=10\r\nPrefer: priority=5\r\n\r\nPrefer: respond-async, wait=10", "correct_text": "Prefer: respond-async; wait=100\r\nPrefer: handling=lenient\r\n\r\nPrefer: handling=lenient; wait=100; respond-async\r\n\r\nPrefer: respond-async; wait=10\r\nPrefer: priority=5\r\n\r\nPrefer: respond-async; wait=10", "notes": "The ABNF in Section 2 says that preferences are separated with \";\", but some of the examples use \",\".\r\n--VERIFIER NOTES-- \r\nThe document is correct as is stands.  The commas are separating\r\nmultiple preferences in a single header, as described in RFC 7230,\r\nSection 7.  The ABNF in Section 2 specifies how to separate parameters\r\nwithin a single preference.", "submit_date": "2015-03-30", "submitter_name": "Brendan Long", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4325", "doc-id": "RFC7511", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "This document defines another way to deal with Green IT for traffic\r\nand network engineers and will hopefully aid the wellbeing of a\r\nmyriad of network packets around the world.  It proposes Scenic\r\nRouting, which incorporates the green-ness of a network path into the\r\nrouting decision.  A routing engine implementing Scenic Routing\r\nshould therefore choose paths based on Avian IP Carriers [RFC1149]\r\nand/or wireless technologies so the packets will get out of the\r\nmiles/kilometers of dark fibers that are in the ground and get as\r\nmuch fresh-air time and sunlight as possible.", "correct_text": "This document defines another way to deal with Green IT for traffic\r\nand network engineers and will hopefully aid the wellbeing of a\r\nmyriad of network packets around the world.  It proposes Scenic\r\nRouting, which incorporates the green-ness of a network path into the\r\nrouting decision.  A routing engine implementing Scenic Routing\r\nshould therefore choose paths based on IP over Avian Carriers with\r\nQuality of Service [RFC2549] and/or wireless technologies so the \r\npackets will get out of the miles/kilometers of dark fibers that are\r\nin the ground and get as much fresh-air time and sunlight as possible.\r\n", "notes": "Although RFC2549 (\"IP over Avian Carriers with Quality of Service\") does not obsolete RFC1149, the recommendations in the former improve Scenic Routing quality considerably, contributing to a subsequently more positive result in the TCP Mood option defined in [RFC5841].", "submit_date": "2015-04-02", "submitter_name": "Andr\u00e9 Melancia", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4326", "doc-id": "RFC6803", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "10", "orig_text": "   Sample encryptions (all using the default cipher state):\r\n\r\n   Plaintext: (empty)\r\n   128-bit Camellia key:\r\n       1D C4 6A 8D 76 3F 4F 93 74 2B CB A3 38 75 76 C3\r\n   Random confounder:\r\n       B6 98 22 A1 9A 6B 09 C0 EB C8 55 7D 1F 1B 6C 0A\r\n   Ciphertext:\r\n       C4 66 F1 87 10 69 92 1E DB 7C 6F DE 24 4A 52 DB\r\n       0B A1 0E DC 19 7B DB 80 06 65 8C A3 CC CE 6E B8\r\n\r\n   Plaintext: 1\r\n   Random confounder:\r\n       6F 2F C3 C2 A1 66 FD 88 98 96 7A 83 DE 95 96 D9\r\n   128-bit Camellia key:\r\n       50 27 BC 23 1D 0F 3A 9D 23 33 3F 1C A6 FD BE 7C\r\n   Ciphertext:\r\n       84 2D 21 FD 95 03 11 C0 DD 46 4A 3F 4B E8 D6 DA\r\n       88 A5 6D 55 9C 9B 47 D3 F9 A8 50 67 AF 66 15 59\r\n       B8\r\n\r\n   Plaintext: 9 bytesss\r\n   Random confounder:\r\n       A5 B4 A7 1E 07 7A EE F9 3C 87 63 C1 8F DB 1F 10\r\n   128-bit Camellia key:\r\n       A1 BB 61 E8 05 F9 BA 6D DE 8F DB DD C0 5C DE A0\r\n   Ciphertext:\r\n       61 9F F0 72 E3 62 86 FF 0A 28 DE B3 A3 52 EC 0D\r\n       0E DF 5C 51 60 D6 63 C9 01 75 8C CF 9D 1E D3 3D\r\n       71 DB 8F 23 AA BF 83 48 A0\r\n\r\n   Plaintext: 13 bytes byte\r\n   Random confounder:\r\n       19 FE E4 0D 81 0C 52 4B 5B 22 F0 18 74 C6 93 DA\r\n   128-bit Camellia key:\r\n       2C A2 7A 5F AF 55 32 24 45 06 43 4E 1C EF 66 76\r\n   Ciphertext:\r\n       B8 EC A3 16 7A E6 31 55 12 E5 9F 98 A7 C5 00 20\r\n       5E 5F 63 FF 3B B3 89 AF 1C 41 A2 1D 64 0D 86 15\r\n       C9 ED 3F BE B0 5A B6 AC B6 76 89 B5 EA\r\n\r\n   Plaintext: 30 bytes bytes bytes bytes byt \r\n   Random confounder:\r\n       CA 7A 7A B4 BE 19 2D AB D6 03 50 6D B1 9C 39 E2\r\n   128-bit Camellia key:\r\n       78 24 F8 C1 6F 83 FF 35 4C 6B F7 51 5B 97 3F 43\r\n   Ciphertext:\r\n       A2 6A 39 05 A4 FF D5 81 6B 7B 1E 27 38 0D 08 09\r\n       0C 8E C1 F3 04 49 6E 1A BD CD 2B DC D1 DF FC 66\r\n       09 89 E1 17 A7 13 DD BB 57 A4 14 6C 15 87 CB A4\r\n       35 66 65 59 1D 22 40 28 2F 58 42 B1 05 A5\r\n\r\n   Plaintext: (empty)\r\n   Random confounder:\r\n       3C BB D2 B4 59 17 94 10 67 F9 65 99 BB 98 92 6C\r\n   256-bit Camellia key:\r\n       B6 1C 86 CC 4E 5D 27 57 54 5A D4 23 39 9F B7 03\r\n       1E CA B9 13 CB B9 00 BD 7A 3C 6D D8 BF 92 01 5B\r\n   Ciphertext:\r\n       03 88 6D 03 31 0B 47 A6 D8 F0 6D 7B 94 D1 DD 83\r\n       7E CC E3 15 EF 65 2A FF 62 08 59 D9 4A 25 92 66\r\n\r\n   Plaintext: 1\r\n   Random confounder:\r\n       DE F4 87 FC EB E6 DE 63 46 D4 DA 45 21 BB A2 D2\r\n   256-bit Camellia key:\r\n       1B 97 FE 0A 19 0E 20 21 EB 30 75 3E 1B 6E 1E 77\r\n       B0 75 4B 1D 68 46 10 35 58 64 10 49 63 46 38 33\r\n   Ciphertext:\r\n       2C 9C 15 70 13 3C 99 BF 6A 34 BC 1B 02 12 00 2F\r\n       D1 94 33 87 49 DB 41 35 49 7A 34 7C FC D9 D1 8A\r\n       12\r\n\r\n   Plaintext: 9 bytesss\r\n   Random confounder:\r\n       AD 4F F9 04 D3 4E 55 53 84 B1 41 00 FC 46 5F 88\r\n   256-bit Camellia key:\r\n       32 16 4C 5B 43 4D 1D 15 38 E4 CF D9 BE 80 40 FE\r\n       8C 4A C7 AC C4 B9 3D 33 14 D2 13 36 68 14 7A 05\r\n   Ciphertext:\r\n       9C 6D E7 5F 81 2D E7 ED 0D 28 B2 96 35 57 A1 15\r\n       64 09 98 27 5B 0A F5 15 27 09 91 3F F5 2A 2A 9C\r\n       8E 63 B8 72 F9 2E 64 C8 39\r\n\r\n   Plaintext: 13 bytes byte\r\n   Random confounder:\r\n       CF 9B CA 6D F1 14 4E 0C 0A F9 B8 F3 4C 90 D5 14\r\n   256-bit Camellia key:\r\n       B0 38 B1 32 CD 8E 06 61 22 67 FA B7 17 00 66 D8\r\n       8A EC CB A0 B7 44 BF C6 0D C8 9B CA 18 2D 07 15\r\n   Ciphertext:\r\n       EE EC 85 A9 81 3C DC 53 67 72 AB 9B 42 DE FC 57\r\n       06 F7 26 E9 75 DD E0 5A 87 EB 54 06 EA 32 4C A1\r\n       85 C9 98 6B 42 AA BE 79 4B 84 82 1B EE\r\n\r\n   Plaintext: 30 bytes bytes bytes bytes byt\r\n   Random confounder:\r\n       64 4D EF 38 DA 35 00 72 75 87 8D 21 68 55 E2 28\r\n   256-bit Camellia key:\r\n       CC FC D3 49 BF 4C 66 77 E8 6E 4B 02 B8 EA B9 24\r\n       A5 46 AC 73 1C F9 BF 69 89 B9 96 E7 D6 BF BB A7\r\n   Ciphertext:\r\n       0E 44 68 09 85 85 5F 2D 1F 18 12 52 9C A8 3B FD\r\n       8E 34 9D E6 FD 9A DA 0B AA A0 48 D6 8E 26 5F EB\r\n       F3 4A D1 25 5A 34 49 99 AD 37 14 68 87 A6 C6 84\r\n       57 31 AC 7F 46 37 6A 05 04 CD 06 57 14 74\r\n", "correct_text": "   Sample encryptions (all using the default cipher state):\r\n\r\n   Plaintext: (empty)\r\n   Random confounder:\r\n       B6 98 22 A1 9A 6B 09 C0 EB C8 55 7D 1F 1B 6C 0A\r\n   128-bit Camellia key:\r\n       1D C4 6A 8D 76 3F 4F 93 74 2B CB A3 38 75 76 C3\r\n   Key usage: 0\r\n   Ciphertext:\r\n       C4 66 F1 87 10 69 92 1E DB 7C 6F DE 24 4A 52 DB\r\n       0B A1 0E DC 19 7B DB 80 06 65 8C A3 CC CE 6E B8\r\n\r\n   Plaintext: 1\r\n   Random confounder:\r\n       6F 2F C3 C2 A1 66 FD 88 98 96 7A 83 DE 95 96 D9\r\n   128-bit Camellia key:\r\n       50 27 BC 23 1D 0F 3A 9D 23 33 3F 1C A6 FD BE 7C\r\n   Key usage: 1\r\n   Ciphertext:\r\n       84 2D 21 FD 95 03 11 C0 DD 46 4A 3F 4B E8 D6 DA\r\n       88 A5 6D 55 9C 9B 47 D3 F9 A8 50 67 AF 66 15 59\r\n       B8\r\n\r\n   Plaintext: 9 bytesss\r\n   Random confounder:\r\n       A5 B4 A7 1E 07 7A EE F9 3C 87 63 C1 8F DB 1F 10\r\n   128-bit Camellia key:\r\n       A1 BB 61 E8 05 F9 BA 6D DE 8F DB DD C0 5C DE A0\r\n   Key usage: 2\r\n   Ciphertext:\r\n       61 9F F0 72 E3 62 86 FF 0A 28 DE B3 A3 52 EC 0D\r\n       0E DF 5C 51 60 D6 63 C9 01 75 8C CF 9D 1E D3 3D\r\n       71 DB 8F 23 AA BF 83 48 A0\r\n\r\n   Plaintext: 13 bytes byte\r\n   Random confounder:\r\n       19 FE E4 0D 81 0C 52 4B 5B 22 F0 18 74 C6 93 DA\r\n   128-bit Camellia key:\r\n       2C A2 7A 5F AF 55 32 24 45 06 43 4E 1C EF 66 76\r\n   Key usage: 3\r\n   Ciphertext:\r\n       B8 EC A3 16 7A E6 31 55 12 E5 9F 98 A7 C5 00 20\r\n       5E 5F 63 FF 3B B3 89 AF 1C 41 A2 1D 64 0D 86 15\r\n       C9 ED 3F BE B0 5A B6 AC B6 76 89 B5 EA\r\n\r\n   Plaintext: 30 bytes bytes bytes bytes byt \r\n   Random confounder:\r\n       CA 7A 7A B4 BE 19 2D AB D6 03 50 6D B1 9C 39 E2\r\n   128-bit Camellia key:\r\n       78 24 F8 C1 6F 83 FF 35 4C 6B F7 51 5B 97 3F 43\r\n   Key usage: 4\r\n   Ciphertext:\r\n       A2 6A 39 05 A4 FF D5 81 6B 7B 1E 27 38 0D 08 09\r\n       0C 8E C1 F3 04 49 6E 1A BD CD 2B DC D1 DF FC 66\r\n       09 89 E1 17 A7 13 DD BB 57 A4 14 6C 15 87 CB A4\r\n       35 66 65 59 1D 22 40 28 2F 58 42 B1 05 A5\r\n\r\n   Plaintext: (empty)\r\n   Random confounder:\r\n       3C BB D2 B4 59 17 94 10 67 F9 65 99 BB 98 92 6C\r\n   256-bit Camellia key:\r\n       B6 1C 86 CC 4E 5D 27 57 54 5A D4 23 39 9F B7 03\r\n       1E CA B9 13 CB B9 00 BD 7A 3C 6D D8 BF 92 01 5B\r\n   Key usage: 0\r\n   Ciphertext:\r\n       03 88 6D 03 31 0B 47 A6 D8 F0 6D 7B 94 D1 DD 83\r\n       7E CC E3 15 EF 65 2A FF 62 08 59 D9 4A 25 92 66\r\n\r\n   Plaintext: 1\r\n   Random confounder:\r\n       DE F4 87 FC EB E6 DE 63 46 D4 DA 45 21 BB A2 D2\r\n   256-bit Camellia key:\r\n       1B 97 FE 0A 19 0E 20 21 EB 30 75 3E 1B 6E 1E 77\r\n       B0 75 4B 1D 68 46 10 35 58 64 10 49 63 46 38 33\r\n   Key usage: 1\r\n   Ciphertext:\r\n       2C 9C 15 70 13 3C 99 BF 6A 34 BC 1B 02 12 00 2F\r\n       D1 94 33 87 49 DB 41 35 49 7A 34 7C FC D9 D1 8A\r\n       12\r\n\r\n   Plaintext: 9 bytesss\r\n   Random confounder:\r\n       AD 4F F9 04 D3 4E 55 53 84 B1 41 00 FC 46 5F 88\r\n   256-bit Camellia key:\r\n       32 16 4C 5B 43 4D 1D 15 38 E4 CF D9 BE 80 40 FE\r\n       8C 4A C7 AC C4 B9 3D 33 14 D2 13 36 68 14 7A 05\r\n   Key usage: 2\r\n   Ciphertext:\r\n       9C 6D E7 5F 81 2D E7 ED 0D 28 B2 96 35 57 A1 15\r\n       64 09 98 27 5B 0A F5 15 27 09 91 3F F5 2A 2A 9C\r\n       8E 63 B8 72 F9 2E 64 C8 39\r\n\r\n   Plaintext: 13 bytes byte\r\n   Random confounder:\r\n       CF 9B CA 6D F1 14 4E 0C 0A F9 B8 F3 4C 90 D5 14\r\n   256-bit Camellia key:\r\n       B0 38 B1 32 CD 8E 06 61 22 67 FA B7 17 00 66 D8\r\n       8A EC CB A0 B7 44 BF C6 0D C8 9B CA 18 2D 07 15\r\n   Key usage: 3\r\n   Ciphertext:\r\n       EE EC 85 A9 81 3C DC 53 67 72 AB 9B 42 DE FC 57\r\n       06 F7 26 E9 75 DD E0 5A 87 EB 54 06 EA 32 4C A1\r\n       85 C9 98 6B 42 AA BE 79 4B 84 82 1B EE\r\n\r\n   Plaintext: 30 bytes bytes bytes bytes byt\r\n   Random confounder:\r\n       64 4D EF 38 DA 35 00 72 75 87 8D 21 68 55 E2 28\r\n   256-bit Camellia key:\r\n       CC FC D3 49 BF 4C 66 77 E8 6E 4B 02 B8 EA B9 24\r\n       A5 46 AC 73 1C F9 BF 69 89 B9 96 E7 D6 BF BB A7\r\n   Key usage: 4\r\n   Ciphertext:\r\n       0E 44 68 09 85 85 5F 2D 1F 18 12 52 9C A8 3B FD\r\n       8E 34 9D E6 FD 9A DA 0B AA A0 48 D6 8E 26 5F EB\r\n       F3 4A D1 25 5A 34 49 99 AD 37 14 68 87 A6 C6 84\r\n       57 31 AC 7F 46 37 6A 05 04 CD 06 57 14 74\r\n", "notes": "The encryption test vectors were missing key usage numbers.", "submit_date": "2015-04-02", "submitter_name": "Greg Hudson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4327", "doc-id": "RFC5780", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "This test apples to UDP and TCP, but not TLS over TCP connections.", "correct_text": "This test applies to UDP and TCP, but not TLS over TCP connections.", "notes": "\"apples\" should be \"applies\".", "submit_date": "2015-04-03", "submitter_name": "Xinbang Hu", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4328", "doc-id": "RFC7479", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "\r\n    ssh.example.com IN SSHFP 4 2 ( a87f1b687ac0e57d2a081a2f2826723\r\n                                     34d90ed316d2b818ca9580ea384d924\r\n                                     01 )", "correct_text": "\r\n    ssh.example.com. IN SSHFP 4 2 ( a87f1b687ac0e57d2a081a2f2826723\r\n                                     34d90ed316d2b818ca9580ea384d924\r\n                                     01 )", "notes": "\r\nThere was a missing \".\" after .com\r\n\r\nOtherwise, the name server will complete the relative name, with unexpected results. (Yes, I know, it depends on how the $ORIGIN is set. Nevertheless, it is strange.)", "submit_date": "2015-04-05", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4329", "doc-id": "RFC7530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "21.1.", "orig_text": "   [openg_symlink]\r\n              The Open Group, \"Section 3.372 of Chapter 3 of Base\r\n              Definitions of The Open Group Base Specifications\r\n              Issue 7\", IEEE Std 1003.1, 2013 Edition (HTML Version),\r\n              ISBN 1937218287, April 2013, <http://www.opengroup.org/>.", "correct_text": "   [openg_symlink]\r\n              The Open Group, \"Section 3.375 of Chapter 3 of Base\r\n              Definitions of The Open Group Base Specifications\r\n              Issue 7\", IEEE Std 1003.1, 2013 Edition (HTML Version),\r\n              ISBN 1937218287, April 2013, <http://www.opengroup.org/>.", "notes": "", "submit_date": "2015-04-07", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4330", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "        The link-state database for the backbone is shown in Figure 8.\r\n        The set of routers pictured are the backbone routers.  Router\r\n        RT11 is a backbone router because it belongs to two areas.  In\r\n        order to make the backbone connected, a virtual link has been\r\n        configured between Routers R10 and R11.", "correct_text": "        The link-state database for the backbone is shown in Figure 8.\r\n        The set of routers pictured are the backbone routers.  Router\r\n        RT11 is a backbone router because it belongs to two areas.  In\r\n        order to make the backbone connected, a virtual link has been\r\n        configured between Routers RT10 and RT11.", "notes": "s/R10/RT10\r\ns/R11/RT11", "submit_date": "2015-04-08", "submitter_name": "Ramakrishna Rao DTV", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4331", "doc-id": "RFC3031", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.22", "orig_text": "When a labeled packet is traveling along an LSP, it may occasionally\r\nhappen that it reaches an LSR at which the ILM does not map the\r\npacket's incoming label into an NHLFE, even though the incoming label\r\nis itself valid.  This can happen due to transient conditions, or due\r\nto an error at the LSR which should be the packet's next hop.", "correct_text": "When a labeled packet is traveling along an LSP, it may occasionally\r\nhappen that it reaches an LSR at which the ILM does not map the\r\npacket's incoming label into an NHLFE, even though the incoming label\r\nis itself valid and it has a usable L3 next hop.  This can happen due\r\nto transient conditions, or due to an error at the LSR which should\r\nbe the packet's next hop.", "notes": "Although the reporter is concerned about ambiguity in terms of why the ILM doesn't map a valid label into an NHLFE, the reason that might happen is really irrelevant.  The original statement clearly specifies that it could be an error or transient condition.\r\n\r\nThe correct action of discarding a packet where the label doesn't map into a n NHLFE applies regardless of whether or not there is a usable L3 next hop.\r\nThis proposed errata would thus add incorrect ambiguity for no purpose.\r\n\r\n================================================\r\n\r\nThere is ambiguity as to the cause of the \"ILM [not mapping] the packet's incoming label into an NHLFE\". It could be read in a number of ways, of which only one can be correct:\r\n\r\n1. The label is valid in terms of syntax (e.g. not Implicit NULL), but no binding has been installed because the label hasn't been advertised. Clearly, 3.18 covers this case already, and is inconsistent with the section title of \"Lack of Outgoing Label\" so this interpretation is unlikely to have been intended.\r\n\r\n2. The label is valid and is expected to be used for forwarding, but an NHLFE entry is missing or not usable because the interface the next hop is reachable over has gone down, or for some other reason isn't usable. This interpretation is ruled out by the statement that \"it is tempting in such cases to strip off the label stack and attempt to forward the packet further via conventional forwarding\", which wouldn't be possible if the interface was down.\r\n\r\n3. A resource allocation error occurred meaning that the ILM binding was allocated, but the NHLFE entry couldn't be allocated. There is no mention of resource issues in this or related sections so again this interpretation seems unlikely.\r\n\r\n4. The label is valid and is expected to be used for forwarding, but the LSR has received no label binding from the LSP's next hop even though it has a usable L3 next hop  (i.e. it lacks an outgoing label). It cannot map to an NHLFE entry because the actions in section 3.10 don't include popping and forwarding as unlabeled. This is therefore the interpretation that best fits.\r\n\r\nTo clarify that interpretation 4 is the one intended, the phrase \"and it has a usable L3 next hop\" is inserted into the text, using the definition of L3 next hop from section 3.17.\n --VERIFIER NOTES-- \n   Although the reporter is concerned about ambiguity in terms of why the ILM doesn't map a valid label into an NHLFE, the reason that might happen is really irrelevant. The original statement clearly specifies that it could be an error or transient condition.\r\n\r\nThe correct action of discarding a packet where the label doesn't map into a n NHLFE applies regardless of whether or not there is a usable L3 next hop.\r\nThis proposed errata would thus add incorrect ambiguity for no purpose.", "submit_date": "2015-04-09", "submitter_name": "Robert Shearman", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4332", "doc-id": "RFC3720", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "B.4.", "orig_text": "32 bytes of ones:", "correct_text": "32 bytes of 255s:", "notes": "The test data is correct but the description is wrong.\n --VERIFIER NOTES-- \nThis is purely editorial and on the edge of personal preference, if the \"ones\" are described based on base 2 notation or base 10 notation. ", "submit_date": "2015-04-11", "submitter_name": "Peter Powell", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4333", "doc-id": "RFC7511", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "      The lowest-order two bits (XY) are currently unused and reserved\r\n      for future use.", "correct_text": "      The lowest-order two bits (XY) are currently unused and reserved\r\n      for a rainy day.", "notes": "Packets should be free to use spare SRO parameter bits during work hours (for bits in leu) or in their own spare time.", "submit_date": "2015-04-12", "submitter_name": "William ML Leslie", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4340", "doc-id": "RFC6485", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "                                           the SIDR Architecture\r\n   [RFC6480],\r\n", "correct_text": "                                           the RPKI Architecture\r\n   [RFC6480],\r\n", "notes": "Neither \"SIDR\" nor \"Secure Inter-Domain Routing\" is mentioned in RFC6480.  RFC6480 is about the design of the RPKI, so \"RPKI Architecture\" seems like a more appropriate fit.", "submit_date": "2015-04-20", "submitter_name": "Richard Hansen", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4336", "doc-id": "RFC7159", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "[NO MENTION OF SECTION 3 OF RFC 4627]", "correct_text": "   o  Removed method of detection of character encoding from\r\n      section 3 \"Encoding\" of RFC 4627.\r\n\r\n       ", "notes": "Appendix 1 (listing changes between RFC 4627 and RFC 7159) does not include any comment on the removal of this text from RFC 4627 section 3:\r\n\r\n[START QUOTE]\r\n   Since the first two characters of a JSON text will always be ASCII\r\n   characters [RFC0020], it is possible to determine whether an octet\r\n   stream is UTF-8, UTF-16 (BE or LE), or UTF-32 (BE or LE) by looking\r\n   at the pattern of nulls in the first four octets.\r\n\r\n           00 00 00 xx  UTF-32BE\r\n           00 xx 00 xx  UTF-16BE\r\n           xx 00 00 00  UTF-32LE\r\n           xx 00 xx 00  UTF-16LE\r\n           xx xx xx xx  UTF-8\r\n[END QUOTE]\r\n\r\n\r\nThe new section 8.1 \"Character encoding\" states that:\r\n\r\n[START QUOTE]\r\nJSON text SHALL be encoded in UTF-8, UTF-16, or UTF-32\r\n[END QUOTE]\r\n\r\nbut, unlike RFC 4627 section 3, it does not say anything about how to distinguish which has been used when parsing a byte string as JSON.\r\n\r\n\r\nRFC 7159 section 8.1 also says:\r\n\r\n[START QUOTE]\r\n   Implementations MUST NOT add a byte order mark to the beginning of a\r\n   JSON text.\r\n[END QUOTE]\r\n\r\nwhich rules out using a byte order mark for this purpose.\r\n\r\n\r\nAdditionally, RFC 7159 section 11 says:\r\n\r\n[START QUOTE]\r\n   Note:  No \"charset\" parameter is defined for this registration.\r\n      Adding one really has no effect on compliant recipients.\r\n[END QUOTE]\r\n\r\nwhich rules out one means of communicating which character encoding is in use when communicating JSON over HTTP (namely a charset parameter on the media type), and implies that there is another means of detecting the character encoding, but does not say what it is.\r\n\r\n\r\nI've reported this as an erratum on the appendix, as I expect there is an existing means of detecting which of the Unicode character encodings are in use, but I was expecting the appendix to reference it as part of an explanation of the removal of the text I quoted from RFC 4627 section 3 but no such explanation is present. It may be the case that the erratum ought to be against section 8.1 to provide a reference there.", "submit_date": "2015-04-14", "submitter_name": "Martin Pain", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4337", "doc-id": "RFC6680", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.5", "orig_text": "   This function outputs the value(s) associated with a given GSS name\r\n   object for a given name attribute.", "correct_text": "   This function outputs the value(s) associated with a given GSS name\r\n   object for a given name attribute.  It is permitted to block pending\r\n   network interactions when the attr input is not an attribute which\r\n   would be included in the attrs output of a call to GSS_Inquire_name()\r\n   on the same name input.\r\n", "notes": "RFC 6680 makes no mention of blocking or not blocking on network interaction, though RFC 2743 does.  This seems like the most reasonable interpretation of what is currently in RFC 6680.  Calls which are not explicitly permitted to block are assumed to be not permitted to block.", "submit_date": "2015-04-18", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4338", "doc-id": "RFC5116", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "      +-------------------+--------------------+---------------+\r\n      |    Fixed-Common   |   Fixed-Distinct   |    Counter    |\r\n      +-------------------+--------------------+---------------+\r\n       <---- implicit ---> <------------ explicit ------------>\r\n\r\n                 Figure 2: Partially implicit nonce format\r\n\r\n      The rationale for the partially implicit nonce format is as\r\n      follows.  This method of nonce construction incorporates the best\r\n      known practice; it is used by both GCM Encapuslating Security\r\n      Payload (ESP) [RFC4106] and CCM ESP [RFC4309], in which the Fixed\r\n      field contains the Salt value and the lowest eight octets of the\r\n      nonce are explicitly carried in the ESP packet.  In GCM ESP, the\r\n      Fixed field must be at least four octets long, so that it can\r\n      contain the Salt value.  In CCM ESP, the Fixed field must be at\r\n      least three octets long for the same reason.  This nonce\r\n      generation method is also used by several counter mode variants\r\n      including CTR ESP.\r\n", "correct_text": "      +-------------------+------------------------------------+\r\n      |    Fixed-Common   |           Fixed-Distinct           |\r\n      +-------------------+------------------------------------+\r\n       <---- implicit ---> <------------ explicit ------------->\r\n\r\n                 Figure 2: Partially implicit nonce format\r\n\r\n      The rationale for the partially implicit nonce format is as\r\n      follows.  This method of nonce construction incorporates the best\r\n      known practice; it is used by both GCM Encapuslating Security\r\n      Payload (ESP) [RFC4106] and CCM ESP [RFC4309], in which the\r\n      Fixed-Common field contains the Salt value and the lowest eight\r\n      octets of the nonce are explicitly carried in the ESP packet. In\r\n      GCM ESP, the Fixed-Common field must be at least four octets\r\n      long, so that it can contain the Salt value.  In CCM ESP, the\r\n      Fixed-Common field must be at least three octets long for the\r\n      same reason.  This nonce generation method is also used by\r\n      several counter mode variants including CTR ESP.\r\n", "notes": "The counter is generally not considered part of the nonce.\r\n\r\nThe counter itself is not /send/ as part of the nonce, so the figure doesn't comply with the sentence in the text above: \"We call the portion of the nonce that is stored or sent with the ciphertext the explicit part.\" Furthermore the text above also reads: \"lowest eight octets of the nonce are explicitly carried in the ESP packet\"\r\n\r\nThe referred to documents (e.g. RFC 4106) also explicitly specify a 12 byte nonce.\r\n\r\nThe GCM documentation recommends using a nonce of 96 bits (12 bytes) and then proceeds to build a counter (specified as J0) out of that. If the nonce is considered 128 bits instead then J0 is created using a GMAC invocation, which is probably not what was meant by this specification.\r\n\r\nFinally, the text about GCM ESP and CCM ESP didn't distinguish between Fixed-Common and Fixed Distinct. It seems clear to me that Fixed-Common was meant the text below Figure 2. (If this should be in a separate Report, please let me know - the text between these parentheses may be removed of course)", "submit_date": "2015-04-19", "submitter_name": "Maarten Bodewes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4339", "doc-id": "RFC6485", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.", "orig_text": "      In a certification request, the OID appears in the PKCS #10\r\n      signatureAlgorithm field [RFC2986] or in the Certificate Request\r\n      Message Format (CRMF) POPOSigningKey signature field [RFC4211].", "correct_text": "      In a certification request, the OID appears in the PKCS #10\r\n      signatureAlgorithm field [RFC2986] or in the Certificate Request\r\n      Message Format (CRMF) POPOSigningKey algorithmIdentifier field \r\n      [RFC4211].", "notes": "This is technically a technical change, as it would technically affect implementation, but I believe in fact it is just a typo.  Only a very inexperienced implementor would put the RFC6485 algorithm OID in the signature field of the POPOSigningKey.\r\n\r\nThis problem was noted in a message to the sidr list https://www.ietf.org/mail-archive/web/sidr/current/msg06587.html and supported by another message https://www.ietf.org/mail-archive/web/sidr/current/msg06649.html\r\n\r\nAt noted in the message to the sidr list, RFC4211 says that the POPOSigningKey is:\r\n\r\n   POPOSigningKey ::= SEQUENCE {\r\n       poposkInput         [0] POPOSigningKeyInput OPTIONAL,\r\n       algorithmIdentifier     AlgorithmIdentifier,\r\n       signature               BIT STRING }\r\n\r\nThe OID mentioned in the RFC6485 text is for the algorithm identifier and so should appear in the algorithmIdentifier field, not the signature field.", "submit_date": "2015-04-20", "submitter_name": "Sandra Murphy", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4342", "doc-id": "RFC3929", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "[VOTE]     Center for Democracy and Voting. \"Frequently Asked\r\n              Questions about IRV\", http://www.fairvote.org/irv/faq.htm.\r\n", "correct_text": "[VOTE]     Center for Democracy and Voting.\r\n               \"Frequently Asked Questions about IRV\",\r\n               http://www.fairvote.org/reforms/instant-runoff-voting/\r\n               instant-runoff-voting-faq/", "notes": "This is a correction of the link to the Instant Runoff Voting FAQ to its current location.", "submit_date": "2015-04-21", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 07:27:33"}, {"errata_id": "4525", "doc-id": "RFC6958", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "      0               1               2               3               4\r\n      0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |     BT=33     |   Reserved    |      Block length = 4         |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       SSRC of Source                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |       begin_seq               |          end_seq              |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Post-repair loss count       |     Repaired loss count       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\nBlock length: 16 bits\r\n\r\n      This field is in accordance with the definition in [RFC3611].  In\r\n      this report block, it MUST be set to 4.  The block MUST be\r\n      discarded if the block length is set to a different value.", "correct_text": "      0               1               2               3               4\r\n      0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0 1 2 3 4 5 6 7 0\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |     BT=33     |   Reserved    |      Block length = 3         |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       SSRC of Source                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |       begin_seq               |          end_seq              |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Post-repair loss count       |     Repaired loss count       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\nBlock length: 16 bits\r\n\r\n      This field is in accordance with the definition in [RFC3611].  In\r\n      this report block, it MUST be set to 3.  The block MUST be\r\n      discarded if the block length is set to a different value.", "notes": "The block length is calculated and indicated incorrectly in two places: the packet format and the definition of the block length.", "submit_date": "2015-11-06", "submitter_name": "Varun Singh", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4347", "doc-id": "RFC4867", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "   CMR (4 bits): Indicates a codec mode request sent to the speech\r\n      encoder at the site of the receiver of this payload.  The value of\r\n      the CMR field is set to the frame type index of the corresponding\r\n      speech mode being requested.  The frame type index may be 0-7 for\r\n      AMR, as defined in Table 1a in [2], or 0-8 for AMR-WB, as defined\r\n      in Table 1a in [4].  CMR value 15 indicates that no mode request\r\n      is present, and other values are for future use.\r\n\r\n   The codec mode request received in the CMR field is valid until the\r\n   next codec mode request is received, i.e., a newly received CMR value\r\n   corresponding to a speech mode, or NO_DATA overrides the previously\r\n   received CMR value corresponding to a speech mode or NO_DATA.\r\n   Therefore, if a terminal continuously wishes to receive frames in the\r\n   same mode X, it needs to set CMR=X for all its outbound payloads, and\r\n   if a terminal has no preference in which mode to receive, it SHOULD\r\n   set CMR=15 in all its outbound payloads.\r\n\r\n   If receiving a payload with a CMR value that is not a speech mode or\r\n   NO_DATA, the CMR MUST be ignored by the receiver.\r\n", "correct_text": "   CMR (4 bits): Indicates a codec mode request sent to the speech\r\n      encoder at the site of the receiver of this payload.  The value of\r\n      the CMR field is set to the frame type index of the corresponding\r\n      speech mode being requested.  The frame type index may be 0-7 for\r\n      AMR, as defined in Table 1a in [2], or 0-8 for AMR-WB, as defined\r\n      in Table 1a in [4].  CMR value 15 indicates that the receiver has\r\n      no preference in which mode within the negotiated mode set to\r\n      receive, and other values are for future use.\r\n\r\n   The codec mode request received in the CMR field is valid until the\r\n   next codec mode request is received, i.e., a newly received CMR value\r\n   corresponding to a speech mode, or CMR=15 overrides the previously\r\n   received CMR value corresponding to a speech mode or CMR=15.\r\n   Therefore, if a terminal continuously wishes to receive frames not \r\n   higher than mode X, it needs to set CMR=X for all its outbound\r\n   payloads, and if a terminal has no preference in which mode within \r\n   the negotiated mode set to receive, it SHOULD set CMR=15 in all its\r\n   outbound payloads.\r\n\r\n   If receiving a payload with a CMR value that is not a speech mode or\r\n   CMR=15, the CMR MUST be ignored by the receiver.\r\n", "notes": "The definition of CMR 15 as \"no mode request is present\", could be understood to suggest that other previously received CMR values remain applicable. However, this contradicts text in the subsequent paragraphs suggesting CMR=15 should be used when the \"terminal has no preference in which mode to receive\", and stating that any previously received CMR value is overridden by CMR=15.\r\n\r\nIt is thus unclear for a receiving entity that has previously received a CMR value requesting a lower AMR mode and then receives a CMR value 15 if it should continue to send using the lower AMR mode or if it can select a higher mode within the negotiated mode set based on own preferences.\r\n\r\nCMR 15 is referred to as \"NO_DATA\" in subsequent text, but \"NO_DATA\" is not well defined. This value appears in the quoted references, but these references are only quoted for CMR values 0 to 7/8.\r\n\r\nIt is also not perfectly clear if CMR=15 allows for any mode, or only modes within the negotiated mode set. However, the definition of the mode-set parameter in Clause 8.1 suggests that only modes within the negotiated mode-set can be sent when a mode-set has been negotiated.\r\n\r\nThe text \"if a terminal continuously wishes to receive frames in the same mode X, it needs to set CMR=X for all its outbound payloads\" seems to suggest that the receiver will always follow the request, although it may also choose to send lower modes, as explained in text further below.\r\n\r\nThis erratum has been discussed and endorsed by the 3GPP SA4 group before submission to IETF.", "submit_date": "2015-04-27", "submitter_name": "Thomas Belling", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4348", "doc-id": "RFC4867", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "   The encoder SHOULD follow a received codec mode request, but MAY\r\n   change to a lower-numbered mode if it so chooses, for example, to\r\n   control congestion.\r\n", "correct_text": "   The encoder MUST follow a received codec mode request as soon as\r\n   possible. It SHOULD use the requested mode, but MAY change to a\r\n   lower-numbered mode if it so chooses, for example, to\r\n   control congestion. However, the encoder MUST NOT use a\r\n   higher-numbered mode than the received codec mode request.\r\n", "notes": "This seems to be the intention of the existing text, but is not explicitly stated. It is essential for the end-to-end mode control and interoperability with 3GPP CS networks that a peer does not send higher modes than requested.\r\n\r\nThis erratum has been discussed and endorsed by the 3GPP SA4 group before submission to IETF.", "submit_date": "2015-04-27", "submitter_name": "Thomas Belling", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4349", "doc-id": "RFC4867", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "      mode-set: Restricts the active codec mode set to a subset of all\r\n               modes, for example, to be able to support transport\r\n               channels such as GSM networks in gateway use cases.\r\n               Possible values are a comma separated list of modes from\r\n               the set: 0,...,7 (see Table 1a [2]).  The SID frame type\r\n               8 and NO_DATA (frame type 15) are never included in the\r\n               mode set, but can always be used.  If mode-set is\r\n               specified, it MUST be abided, and frames encoded with\r\n               modes outside of the subset MUST NOT be sent in any RTP\r\n               payload or used in codec mode requests.  If not present,\r\n               all codec modes are allowed for the payload type.\r\n", "correct_text": "      mode-set: Restricts the active codec mode set to a subset of all\r\n               modes, for example, to be able to support transport\r\n               channels such as GSM networks in gateway use cases.\r\n               Possible values are a comma separated list of modes from\r\n               the set: 0,...,7 (see Table 1a [2]).  The SID frame type\r\n               8 and NO_DATA (frame type 15) are never included in the\r\n               mode set, but can always be used.  If mode-set is\r\n               specified, it MUST be abided, i.e. frames encoded with\r\n               modes outside of the subset MUST NOT be sent in any RTP\r\n               payload and codec mode requests MUST only use modes\r\n               within the mode-set or CMR=15. If the mode-set parameter\r\n               is not present, then all codec modes are allowed for the\r\n               payload type.\r\n", "notes": "The existing text rules out that CMR=15 is used when a mode-set has been negotiated. However, this contradicts a statement in .clause 4.3.1 that if a terminal has no preference in which mode to receive, it SHOULD set CMR=15 in all its outbound payloads.\r\n\r\nThis erratum has been discussed and endorsed by the 3GPP SA4 group before submission to IETF.", "submit_date": "2015-04-27", "submitter_name": "Thomas Belling", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4350", "doc-id": "RFC7510", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "Absent", "correct_text": "7.1  BGP Tunnel Encapsulation Attribute Tunnel Type\r\n\r\n   IANA maintains a registry called \"Border Gateway Protocol (BGP)\r\n   Parameters\" with a sub-registry called \"BGP Tunnel Encapsulation\r\n   Attribute Tunnel Types\".  IANA has previously allocated a code point\r\n   called \"MPLS in UDP Encapsulation\" with value 13. IANA has added\r\n   this document as a further reference for that code point.\r\n", "notes": "This text reflects a pre-publication agreement to include a request to IANA for the action that it describes.\r\n\r\nNote that the text supplied here shows the use of the past tense as is normal in an RFC that reports IANA action.", "submit_date": "2015-04-27", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4351", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3.6", "orig_text": "   A server MUST NOT send any Transfer-Encoding or Content-Length header\r\n   fields in a 2xx (Successful) response to CONNECT.  A client MUST\r\n   ignore any Content-Length or Transfer-Encoding header fields received\r\n   in a successful response to CONNECT.\r\n\r\n   A payload within a CONNECT request message has no defined semantics;\r\n   sending a payload body on a CONNECT request might cause some existing\r\n   implementations to reject the request.", "correct_text": "   Historically no semantics have been defined for request and 2xx\r\n   (Successful) response bodies for CONNECT, but nonetheless some\r\n   clients and some servers do use request and 2xx response bodies.\r\n\r\n   Servers MUST NOT send a response body in a 2xx (Successful)\r\n   response to CONNECT.  Because some proxies send an initial flight\r\n   of tunneled application data in 2xx response bodies, clients MUST\r\n   accept response bodies in 2xx responses to CONNECT, and MUST\r\n   treat the response body as the initial flight of application data.\r\n\r\n   Servers that receive a CONNECT request body SHOULD treat it as the\r\n   initial flight of tunneled application data.", "notes": "Implementing the original text (\"A client MUST ignore...\") has the effect\r\nthat the client will leave in the lower layer's buffer any 2xx CONNECT\r\nresponse body, and when the Transfer-Encoding is the identity, then this\r\nwill have the effect that the 2xx response body is seamlessly prepended\r\nto the tunneled application data in the server-to-client direction.\r\nIt seems almost like this was the intent of the original text, but if so,\r\nthen it would be much better to state this than to describe one possible\r\nimplementation approach.\r\n\r\nAlso, it seems rather unlikely that ignoring the Transfer-Encoding for any\r\nTE other than the identity.  If the proxy really did use a compression\r\nor chunked transfer encoding, then ignoring this on the client side\r\n(and prepending the encoded 2xx response body to the server-to-client\r\ntunneled application data) would quite clearly be wrong.\r\n\r\nIt also seems that some clients send the first flight of tunneled\r\napplication data in a CONNECT request body.  While historically the\r\nsemantics of CONNECT request and 2xx response bodies have not been\r\ndefined, it is worth pointing out that [it appears, so I'm told; see\r\nbelow] some clients and some proxies rely on CONNECT request and 2xx\r\nresponse bodies bearing the first flight of tunneled application data,\r\nand if so, then the RFC should mention it.  I'm not sure how much\r\nevidence we can demand for such behaviors, but the RFC demands behavior\r\nthat implies the intent described in this erratum and gives no evidence\r\nto support the need for such behavior, therefore it seems much better\r\nto describe the previously-implied intent explicitly and continue with\r\na little-or-no-evidence approach that should nonetheless yield the most\r\ninteroperability.\r\n\r\nFinally, I asked for clarification on the HTTPbis list, and the answers\r\nI received indicate that the intent may have been as described in\r\nthese notes.\r\n\r\nSee https://lists.w3.org/Archives/Public/ietf-http-wg/2015AprJun/0260.html\r\nand follow-ups.\n --VERIFIER NOTES-- \nThis is a change request, not an errata report.  Such changes can be proposed in the working group's issue tracker, here:\r\nhttps://github.com/httpwg/http11bis/issues", "submit_date": "2015-04-29", "submitter_name": "Nicolas Williams", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4526", "doc-id": "RFC4635", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "      Optional       hamc-sha384\r\n", "correct_text": "      Optional       hmac-sha384\r\n", "notes": "Simple typo (transposed characters).\r\n\r\n2018-06-21: Status changed from \"Held for Document Update\" to \"Verified\".", "submit_date": "2015-11-09", "submitter_name": "Richard Hansen", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5853", "doc-id": "RFC8259", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11", "orig_text": "Note:  No \"charset\" parameter is defined for this registration.\r\n    Adding one really has no effect on compliant recipients.", "correct_text": "Note:  No \"charset\" parameter is defined for this registration.\r\n    JSON text is encoded as described in RFC 8259, Section 8.1.", "notes": "Last sentence of last note of section 11 should be amended, as it introduces confusion by going against other explicit statements, like the followings:\r\n * RFC8259 sect. 8.1 defines that inner encoding is UTF-8\r\n * RFC8259 sect. 11 defines no formal (optional/required) parameters for this registered type\r\n * RFC6838 sect. 4.2.1 defines the common usage of a \"charset\" parameter as a \"required\" one (which isn't the case here)\r\n * RFC6838 sect. 4.2.1 defines that \"charset\" should not be used if the inner payload already transports charset information (e.g. mandatory UTF-8, which is the case here)\r\n * RFC6838 sect. 4.2.1 defines a \"charset\" parameter only for subtypes of the \"text/*\" hierarchy (which isn't the case here)", "submit_date": "2019-09-05", "submitter_name": "Luca BRUNO", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:34:26"}, {"errata_id": "4359", "doc-id": "RFC4944", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   ESC:  Specifies that the following header is a single 8-bit field for\r\n      the Dispatch value.  It allows support for Dispatch values larger\r\n      than 127.", "correct_text": "   ESC:  Specifies that the following header is a single 8-bit field for\r\n      the Dispatch value.  It allows support for Dispatch values larger\r\n      than 63.", "notes": "The (non-ESCaped) Dispatch value is a 6-bit selector. However, it used to be a 7-bit selector, which has a value at most 127. When the field became a 6-bit selector, this maximum became 63, but the referring text was never updated. \r\n\r\nFor historical reference, see an early version from IETF 67 proposing the Dispatch value within the Dispatch header as a 7-bit field:\r\n\r\nhttp://6lowpan.tzi.org/FrontPage?action=AttachFile&do=view&target=tentative-draft2-ietf-6lowpan-format-07.txt\r\n\r\n   The dispatch type is defined by a zero-bit as the first bit.  The\r\n   dispatch type and header is shown here:\r\n\r\n                        1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |0|  Dispatch   |  type-specific header\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\n   Dispatch               7-bit selector.  Identifies the type of header\r\n                          immediately following the Dispatch type.\r\n\r\nThe relevant slides also show this (slide 8): http://6lowpan.tzi.org/FrontPage?action=AttachFile&do=view&target=6lowpan-header-proposal-2.ppt", "submit_date": "2015-05-07", "submitter_name": "Gabriel Montenegro", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4360", "doc-id": "RFC7525", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "6.1. Host Name Validation\r\n\r\n   Application authors should take note that some TLS implementations do\r\n   not validate host names.  If the TLS implementation they are using\r\n   does not validate host names, authors might need to write their own\r\n   validation code or consider using a different TLS implementation.", "correct_text": "6.1. Host Name Validation\r\n\r\n   Application authors should take note that the TLS protocol explicitly\r\n   defers checking of names and attributes of end-entity certificates\r\n   to applications, see last sentence of RFC5246 , Section 1 (TLSv1.2).\r\n\r\n   Some TLS implementations may offer a convenience function to perform\r\n   a server endpoint identification according to RFC 2818, Section 3\r\n   (HTTP over TLS).  For TLS implementations without such a convenience\r\n   function, and for applications with different server identification\r\n   schemes, application implementors may have to write the necessary\r\n   code themselves.\r\n\r\n", "notes": "TLSv1.0 (rfc2246), TLSv1.1 (rfc4346) and TLSv1.2 (rfc5246) are quite\r\nclear in that the original text is misleading on the actual properties\r\nprovided by a TLS implementation itself:\r\n\r\nhttps://tools.ietf.org/html/rfc5246#page-5\r\n\r\n                        how to interpret the authentication certificates\r\n   exchanged are left to the judgment of the designers and implementors\r\n   of protocols that run on top of TLS.\n --VERIFIER NOTES-- \nThe text is not incorrect as it stands, and, while this suggested change would have been good input during document development, it's not an erratum.", "submit_date": "2015-05-08", "submitter_name": "Martin Rex", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4527", "doc-id": "RFC7498", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "Although this problem statement does not introduce any protocols,\r\n   when considering service function chaining, the three main areas\r\n   begin investigated (see Section 3) by the WG have security aspects\r\n   that warrant consideration.", "correct_text": "Although this problem statement does not introduce any protocols,\r\n   when considering service function chaining, the three main areas\r\n   being investigated (see Section 3) by the WG have security aspects\r\n   that warrant consideration.", "notes": "\"begin\" replaced by \"being\", it seems to have been a missed typo.", "submit_date": "2015-11-09", "submitter_name": "Igor Duarte Cardoso", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4528", "doc-id": "RFC7665", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "packets at certain points on certain service chains, the control\r\nmechanism MUST verify that appropriate protective treatment of\r\nNSH information is available from the point where the\r\ninformation is added to the point where it will be removed.  If\r\nsuch mechanisms are unavailable, error notifications SHOULD be\r\ngenerated.", "correct_text": "packets at certain points on certain service chains, the control\r\nmechanism MUST verify that appropriate protective treatment of\r\nSFC encapsulation information is available from the point where the\r\ninformation is added to the point where it will be removed.  If\r\nsuch mechanisms are unavailable, error notifications SHOULD be\r\ngenerated.", "notes": "NSH has not been introduced earlier in the document. Moreover, the reference to NSH itself seems to have been a tiny mistake that slipped.\r\nThe corrected text replaces NSH with SFC encapsulation.", "submit_date": "2015-11-09", "submitter_name": "Igor Duarte Cardoso", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4529", "doc-id": "RFC6762", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix G", "orig_text": "We do not recommend use of unregistered top-level\r\n   domains at all, but should network operators decide to do this, the\r\n   following top-level domains have been used on private internal\r\n   networks without the problems caused by trying to reuse \".local.\" for\r\n   this purpose:\r\n\r\n      .intranet.\r\n      .internal.\r\n      .private.\r\n      .corp.\r\n      .home.\r\n      .lan.", "correct_text": "We do not recommend use of unregistered top-level domains.", "notes": "Since TLDs like .private are currently available for register. Appendix G is outdated and I would strongly advise the IETF to remove the suggested TLDs since they are no longer problem free. I believe that it is wise to make a harder statement in the RFC.\n --VERIFIER NOTES-- \n   During the development of this RFC, the text is consistent with the consensus of the community. Later developments by ICANN superseded the appendix, but that is not applicable for an erratum. Updates to the text should be proposed via the draft publication process.", "submit_date": "2015-11-11", "submitter_name": "Willem Bermon", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4530", "doc-id": "RFC6238", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": " public static String generateTOTP(String key,\r\n             String time,\r\n             String returnDigits){\r\n         return generateTOTP(key, time, returnDigits, \"HmacSHA1\");\r\n     }", "correct_text": "", "notes": "Function will be recursive on his self. Maybe forget a second condition or statement?", "submit_date": "2015-11-11", "submitter_name": "Simone Campagna", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4531", "doc-id": "RFC6551", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "Figure 3: NE Sub-Object Format", "correct_text": "Figure 3: NE Object Body Format", "notes": "Figure 3 describes the format of the NE object body while Figure 4 describes the format of the NE Sub-Object.", "submit_date": "2015-11-13", "submitter_name": "Jeremy Dubrulle", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4361", "doc-id": "RFC5234", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "Unlike original BNF, angle brackets (\"<\", \">\") are not required.\r\nHowever, angle brackets may be used around a rule name whenever their\r\npresence facilitates in discerning the use of a rule name.  This is\r\ntypically restricted to rule name references in free-form prose", "correct_text": "", "notes": "Section 2.1 could be more explicit as to whether a parser, encountering a string that could be interpreted by humans as a rule name inside angles, should process it as a <rule-name> or not.  The use of the words \"typically restricted\" allow for leeway in interpretation, and in light of section 4 note 1, implementors may be tempted to disregard the formal definition as being simply informative.  Section 3.10 gives <prose-val> looser precedence than rule-name, adding weight to the idea that since there is a ambiguity to be resolved, angle brackets around rule names might be expected to appear in parser input.\r\n\r\nIt is also worth noting that the rule definition for <prose-val> prohibits the use of angle brackets around rule names within the contents of <prose-val> itself, and that the intended use of the <prose-val> rule is only described via comments.\r\n\r\nCorrected text is not provided as the intent is unclear.\n --VERIFIER NOTES-- \nWithin an ABNF parsing context, the handling of rulenames with or\r\nwithout angle-brackets is a small distinction.  Parsers can and do\r\neasily handle rulenames without the brackets; obviously they also can\r\nhandle the presence of the angle-brackets, although they generally\r\ndon't. Omitting brackets from ABNF intended for parsing was generally\r\nreceived as an improvement over BNF, 40 years ago.", "submit_date": "2015-05-10", "submitter_name": "Brian S. Julin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4362", "doc-id": "RFC6497", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "All", "orig_text": "This registration is invalid because it attempts to\r\nimpose restrictions on field ordering the governing\r\nBCP47 has as illegal for extension subtag\r\ncanonicalization. The subtags are limited to 8\r\ncharacters, and any subfields of a subtag must use a\r\nDIGIT or ALPHA that is not a valid subfield character\r\nas separator, not DASH as specified, to maintain a\r\nparticular subfield order.", "correct_text": "Not correctable, must be reformulated and resubmitted\r\nas new RFC.", "notes": "\n --VERIFIER NOTES-- \nBCP 47 requires that extensions have a canonical form. There is no restriction on subtag ordering in an extension imposed by BCP 47, but an extension can specify such an order (in this case it does). Subtags in this RFC are separated by DASH and the dash is not part of any subtag. Unlike the base language tag, there is interplay between subtags, but this is not the same thing as the submitter implies. There exist important implementations that depend on this.", "submit_date": "2015-05-11", "submitter_name": "Mark Ziegast", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4363", "doc-id": "RFC6067", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "All", "orig_text": "This registration is invalid because it attempts to\r\nimpose restrictions on field ordering the governing\r\nBCP47 has as illegal for extension subtag\r\ncanonicalization. The subtags are limited to 8\r\ncharacters, and any subfields of a subtag must use a\r\nDIGIT or ALPHA that is not a valid subfield character\r\nas separator, not DASH as specified, to maintain a\r\nparticular subfield order.", "correct_text": "Not correctable, must be reformulated and a new RFC submitted.", "notes": "\n --VERIFIER NOTES-- \nBCP 47 requires that extensions have a canonical form. There is no restriction on subtag ordering in an extension imposed by BCP 47, but an extension can specify such an order (in this case it does). Subtags in this RFC are separated by DASH and the dash is not part of any subtag. Unlike the base language tag, there is interplay between subtags, but this is not the same thing as the submitter implies. There exist important implementations that depend on this.", "submit_date": "2015-05-11", "submitter_name": "Mark Ziegast", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4364", "doc-id": "RFC5586", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "   The Time-To-Live (TTL) field of the LSE that contains the GAL follows\r\n   the definition and processing rules specified in [RFC3443].", "correct_text": "The value of the  Time-To-Live (TTL) field of the LSE that contains the \r\nGAL follows is irrelevant as long as it exceeds 1. (Setting this value \r\nto 0 or 1 SHOULD be avoided because it could result in trapping the OAM \r\npackets in with wrong reason: \"TTL expiration\" instead of \"GAL  \r\nencountered\").  ", "notes": "The processing rules specific in RFC 3443 deal with handling TTL in the LSE of a labeled packets that are forwarded based on this LSE, or with setting the TTL value by a LER pushing a label stack on an unlabeled packet.\r\nAs per the last para in Section 4.2, LSRs and LERs MUST NOT forward packets based on the LSE that contains GAL, hence these rules are mainly not applicable.\n --VERIFIER NOTES-- \nThis proposes a change to the RFC which needs to be agreed via working group consensus.   ", "submit_date": "2015-05-12", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4384", "doc-id": "RFC7030", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.2", "orig_text": "CsrAttrs ::= SEQUENCE SIZE (0..MAX) OF AttrOrOID\r\n\r\nAttrOrOID ::= CHOICE (oid OBJECT IDENTIFIER, attribute Attribute }\r\n\r\nAttribute { ATTRIBUTE:IOSet } ::= SEQUENCE {\r\n     type   ATTRIBUTE.&id({IOSet}),\r\n     values SET SIZE(1..MAX) OF ATTRIBUTE.&Type({IOSet}{@type}) }", "correct_text": "AttrOrOID ::= CHOICE {\r\n      oid OBJECT IDENTIFIER, \r\n      attribute Attribute{YouNeedToDefineOrReferenceAnObjectSet}\r\n}", "notes": "1. The AttrOrOID CHOICE was started with a '(' versus a '{'.\r\n\r\n2. Attribute{} is a parameterized type and you are missing the parameter reference within the AttrOrOID CHOICE for \"attribute\".\r\n\r\n3. You need to define or reference the object set to be used in #2.\r\n\r\nHighly recommend you create an ASN.1 Module as part of this specification.  This will make it clear which specifications (and the versions there of) you are importing types from (i.e. Attribute{}) and the tagging that should be used (module level).  If you need to define a new object set for #3 then this new module would be the perfect home for it.", "submit_date": "2015-06-02", "submitter_name": "Pierce Leonberger", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2020-08-19 19:58:54"}, {"errata_id": "4393", "doc-id": "RFC3986", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.2", "orig_text": "dec-octet   = DIGIT                 ; 0-9\r\n            / %x31-39 DIGIT         ; 10-99\r\n            / \"1\" 2DIGIT            ; 100-199\r\n            / \"2\" %x30-34 DIGIT     ; 200-249\r\n            / \"25\" %x30-35          ; 250-255", "correct_text": "dec-octet = \"25\" %x30-35          ; 250-255\r\n          / \"2\" %x30-34 DIGIT     ; 200-249\r\n          / \"1\" 2DIGIT            ; 100-199\r\n          / %x31-39 DIGIT         ; 10-99\r\n          / DIGIT                 ; 0-9", "notes": "The 'dec-octet' rule requires more than 1 lookahead symbol.\r\n\r\nExample value: 127\r\n\r\nParsers that implement a first-match-wins strategy will erroneously match 127 as ( DIGIT ), followed by two unexpected symbols.\r\n\r\nParsers that implement a first-match-wins strategy with the corrected grammar will correctly match 127 as ( \"1\" 2DIGIT ).\n --VERIFIER NOTES-- \nYes, except that ABNF defined in RFC 5234 is designed to describe what's valid to produce -- it's not designed as the definitive source for building a perfect parser.  In particular, the order of the alternatives is not significant in ABNF, so reordering them is irrelevant.\r\n\r\nIn fact, the ABNF here is more specific than it often is.  In other RFCs it will say things like\r\n   xyz = 0 / %x31-39 *2DIGIT ; valid values are 0-255\r\n...and just let the comment restrict the maximum value.", "submit_date": "2015-06-15", "submitter_name": "Steven Liekens", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4365", "doc-id": "RFC5925", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.6", "orig_text": "   TCP's 4-bit data offset requires that the options end 60 bytes (15\r\n   32-bit words) after the header begins, including the 20-byte header.\r\n   This leaves 40 bytes for options, of which 15 are expected in current\r\n   implementations (listed below), leaving at most 25 for other uses.\r\n   TCP-AO consumes 16 bytes, leaving 9 bytes for additional SYN options\r\n   (depending on implementation dependant alignment padding, which could\r\n   consume another 2 bytes at most).\r\n\r\n   o  SACK permitted (2 bytes) [RFC2018][RFC3517]\r\n\r\n   o  Timestamps (10 bytes) [RFC1323]\r\n\r\n   o  Window scale (3 bytes) [RFC1323]\r\n", "correct_text": "   TCP's 4-bit data offset requires that the options end 60 bytes (15\r\n   32-bit words) after the header begins, including the 20-byte header.\r\n   This leaves 40 bytes for options, of which 19 are expected in current\r\n   implementations (listed below), leaving at most 21 for other uses.\r\n   TCP-AO consumes 16 bytes, leaving 5 bytes for additional SYN options\r\n   (depending on implementation dependent alignment padding, which could\r\n   consume another 2 bytes at most).\r\n\r\n   o  SACK permitted (2 bytes) [RFC2018][RFC3517]\r\n\r\n   o  Timestamps (10 bytes) [RFC1323]\r\n\r\n   o  Window scale (3 bytes) [RFC1323]\r\n\r\n   o  Maximum Segment Size (4 bytes) [RFC793]\r\n", "notes": "MSS was missing in the original text. New text includes MSS and updates numbers accordingly.\r\n\r\nAlso corrects a spelling error (dependant -> dependent), which is non-technical but included in the revised text.", "submit_date": "2015-05-12", "submitter_name": "Joe Touch", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4366", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "11.2.1", "orig_text": "5.  Is d = f and l < u?  If yes, then follow step 5A; else, follow\r\n   step 5B.\r\n", "correct_text": "5.  Is d <= f and l < u?  If yes, then follow step 5A; else, follow\r\n   step 5B.\r\n", "notes": "Original text doesn't correspond to sample implementation at A.5.5.1. And, I suppose, described algorithm may throw out reasonable set of measures.", "submit_date": "2015-05-13", "submitter_name": "Vyacheslav", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4367", "doc-id": "RFC6839", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Encoding considerations:\r\n\r\n      Per [RFC4627], JSON is allowed to be represented using UTF-8,\r\n      UTF-16, or UTF-32.  When JSON is written in UTF-8, JSON is 8bit\r\n      compatible ([RFC2045]).  When JSON is written in UTF-16 or UTF-32,\r\n      JSON is binary ([RFC2045]).", "correct_text": "Encoding considerations:  binary as per section 11 of RFC 7159", "notes": "RFC 7159, section 11 specifies that encoding for JSON is binary.\n --VERIFIER NOTES-- \nThis does not qualify as an erratum, but do see the mailing list discussion that starts here:\r\nhttp://www.ietf.org/mail-archive/web/apps-discuss/current/msg14321.html", "submit_date": "2015-05-15", "submitter_name": "Yakov Shafranovich", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4368", "doc-id": "RFC3463", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "X.3.2\r\n[...]\r\nExamples of such conditions include an immanent shutdown, ", "correct_text": "X.3.2\r\n[...]\r\nExamples of such conditions include an imminent shutdown, ", "notes": "This is an obvious typographic or editorial error.  I understand that a correction to the relevant IANA registry is in progress, so this erratum is to preserve consistency and provide a marker in case the RFC is ever revised.  \r\n\r\nThis issue was noticed in the process of reviewing IANA actions that affected this code but not the phrase in question.  Alex van den Bogaerdt <alex@vandenbogaerdt.nl> found and reported this issue independently and at just about the same time.  Chris Newman, Expert Reviewer for the corresponding IANA registry, suggested filing the erratum.", "submit_date": "2015-05-15", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4369", "doc-id": "RFC2548", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.4.1", "orig_text": "The Keys field MUST be encrypted by the RADIUS server using the\r\nsame method defined for the User-Password Attribute [3].  Padding\r\nis required because the method referenced above requires the field\r\nto be encrypted to be a multiple of sixteen octets in length.", "correct_text": "The Keys field MUST be encrypted by the RADIUS server using the\r\nsame method defined for the User-Password Attribute [3].  Padding\r\nis required because the method referenced above requires the field\r\nto be encrypted to be a multiple of sixteen octets in length.\r\n\r\nWe note that the encryption method for the User-Password attribute\r\ndoes not contain a field describing the length of the decrypted data.\r\n  Despite this, the User-Password attribute contains data which is\r\nvariable length.  The length of that data is commonly determined by\r\nlooking for either the end of the data, or the first zero octet in the\r\ndata, whichever comes first.\r\n\r\nThat practice cannot be used here, as the Keys field can contain\r\nembedded zero octets.  This means that the length of the decrypted\r\ndata MUST be set explicitly to 32 octets for this attribute.", "notes": "re: MS-CHAP-MPPE-Keys \"obfuscation\"\n --VERIFIER NOTES-- \nSection 2.4.1 describes 32 octets of content, which *include* padding.\r\n\r\nThe decrypted data is thus less than 32 octets. The ASCII art in that sections shows 64 bit of padding in the end, meaning it's only 24 octets of decrypted keys.", "submit_date": "2015-05-19", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4370", "doc-id": "RFC6728", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.8", "orig_text": "   isFlowKey:  If this state parameter is present, this is a Flow Key\r\n      field.\r\n      This parameter is only available for non-Options Templates (i.e.,\r\n      if setId is 2).\r\n\r\n   isFlowKey:  If this state parameter is present, this is a scope\r\n      field.\r\n      This parameter is only available for Options Templates (i.e., if\r\n      setId is 3).", "correct_text": "   isFlowKey:  If this state parameter is present, this is a Flow Key\r\n      field.\r\n      This parameter is only available for non-Options Templates (i.e.,\r\n      if setId is 2).\r\n\r\n   isScope:    If this state parameter is present, this is a scope\r\n      field.\r\n      This parameter is only available for Options Templates (i.e., if\r\n      setId is 3).", "notes": "", "submit_date": "2015-05-21", "submitter_name": "Michael Duggan", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4371", "doc-id": "RFC7539", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.8.1", "orig_text": "         mac_data |= num_to_4_le_bytes(aad.length)\r\n         mac_data |= num_to_4_le_bytes(ciphertext.length)\r\n", "correct_text": "         mac_data |= num_to_8_le_bytes(aad.length)\r\n         mac_data |= num_to_8_le_bytes(ciphertext.length)\r\n", "notes": "Per section 2.8 the lengths should be 64-bit (8 bytes), not 4.\r\n\r\nAfter this change the pseudo-code output matches the test vectors shown in 2.8.2.", "submit_date": "2015-05-21", "submitter_name": "Adam Eijdenberg", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4372", "doc-id": "RFC7539", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.5.1", "orig_text": "accumulator = 0", "correct_text": "a = 0", "notes": "This variable goes by both \"accumulator\" and \"a\" in the pseudo-code.  Renaming this line allows the pseudo-code to pseudo-compile.", "submit_date": "2015-05-21", "submitter_name": "Adam Eijdenberg", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4374", "doc-id": "RFC6868", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "   When parsing iCalendar or vCard parameter values, the following\r\n   apply:\r\n\r\n   o  the character sequence ^n (U+005E, U+006E) is decoded into an\r\n      appropriate formatted line break according to the type of system\r\n      being used\r\n\r\n   o  the character sequence ^^ (U+005E, U+005E) is decoded into the ^\r\n      character (U+005E)\r\n\r\n   o  the character sequence ^' (U+005E, U+0027) is decoded into the \"\r\n      character (U+0022)\r\n\r\n   o  if a ^ (U+005E) character is followed by any character other than\r\n      the ones above, parsers MUST leave both the ^ and the following\r\n      character in place\r\n", "correct_text": "\r\n   When parsing iCalendar or vCard parameter values, the following\r\n   apply:\r\n\r\n   o  first all occurrences of the character sequence ^n (U+005E,\r\n      U+006E) is decoded into an appropriate formatted line break\r\n      according to the type of system being used\r\n\r\n   o  second all occurrences of the character sequence ^' (U+005E,\r\n      U+0027) is decoded into the \" character (U+0022)\r\n\r\n   o  third all occurrences of the character sequence ^^ (U+005E,\r\n      U+005E) is decoded into the ^ character (U+005E)\r\n\r\n   o  if a ^ (U+005E) character is followed by any character other than\r\n      the ones above, parsers MUST leave both the ^ and the following\r\n      character in place\r\n", "notes": "It is unclear how a string like: FOO=^^n should be decoded.\r\n\r\nPossibly FOO=^n  or FOO=^\\n or FOO=\\n\r\n\r\nSection 3 implies that ^n is converted first, then ^^, then ^'.  But it is not explicit.  Also this leads to a contradiction.  FOO=^^n will become FOO=\\n, not what is expected.  \r\n\r\nAn equally reasonable interpretation is to proceed from the left and convert as encountered.\r\n\r\nThe first gives FOO=\\n  the second FOO=^n. \r\n\r\nIn the absence of an explicit definition of the order of interpretation it is impossible to decide which to use.", "submit_date": "2015-05-21", "submitter_name": "Worik Stanton", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4375", "doc-id": "RFC3376", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.13", "orig_text": "8.12. Older Version Querier Present Timeout\r\n\r\n   The Older Version Querier Interval is the time-out for transitioning\r\n   a host back to IGMPv3 mode once an older version query is heard.\r\n   When an older version query is received, hosts set their Older\r\n   Version Querier Present Timer to Older Version Querier Interval.\r\n\r\n   This value MUST be ((the Robustness Variable) times (the Query\r\n   Interval in the last Query received)) plus (one Query Response\r\n   Interval).", "correct_text": "8.12. Older Version Querier Present Timeout\r\n\r\n   The Older Version Querier Interval is the time-out for transitioning\r\n   a host back to IGMPv3 mode once an older version query is heard.\r\n   When an older version query is received, hosts set their Older\r\n   Version Querier Present Timer to Older Version Querier Interval.\r\n\r\n   This value MUST be ((the Robustness Variable) times (the Query\r\n   Interval )) plus (one Query Response Interval in the last Query \r\n   received).", "notes": "The last query received is older version query.\r\nAs such - it does not include query interval.\r\nIt looks like it should be operator responsibility to configure identical robustness variable and query interval  values network-wide for supporting older versions.\r\n\r\n=== Alvaro Retana ===\r\n\r\nThe pim WG was consulted on the proposed text of this errata, but no clear direction was determined.  In fact, no significant discussion took place.\r\n\r\nGiven that this issue doesn't seem to be causing a problem that the WG wants to address wight away, I'm disposing of this errata as \"Held for Document Update\".  If this RFC is updated the WG must then address the issue.\r\n\r\nhttps://mailarchive.ietf.org/arch/msg/pim/s9dMx_O3cFUyn38CHj81yw4Wp2o", "submit_date": "2015-05-26", "submitter_name": "Yechiel Rosengarten", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4376", "doc-id": "RFC3966", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "phonedigit           = DIGIT / [ visual-separator ]\r\nphonedigit-hex       = HEXDIG / \"*\" / \"#\" / [ visual-separator ]\r\n", "correct_text": "phonedigit           = DIGIT / visual-separator;\r\nphonedigit-hex       = HEXDIG / \"*\" / \"#\" / visual-separator;\r\n", "notes": "An optional and alternative rule is typically meaningless.", "submit_date": "2015-05-26", "submitter_name": "OKUMURA Shinji", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4377", "doc-id": "RFC2849", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "LDIF Syntax", "orig_text": "ldap-oid                 = 1*DIGIT 0*1(\".\" 1*DIGIT)\r\n                           ; An LDAPOID, as defined in [4]", "correct_text": "ldap-oid                 = 1*DIGIT 0*(\".\" 1*DIGIT)\r\n                           ; An LDAPOID, as defined in [4]", "notes": "ldap-oid syntax on RFC2849 allow only ONE dot.\r\nBut it should allow decimal string separated by multi dots.\r\n\r\nRFC2251 LDAPOID definition:\r\n   The LDAPOID is a notational convenience to indicate that the\r\n   permitted value of this string is a (UTF-8 encoded) dotted-decimal\r\n   representation of an OBJECT IDENTIFIER.\r\n\r\n        LDAPOID ::= OCTET STRING\r\n\r\n   For example,\r\n\r\n        1.3.6.1.4.1.1466.1.2.3", "submit_date": "2015-05-28", "submitter_name": "Keita Kondou", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4378", "doc-id": "RFC6281", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "all", "orig_text": "", "correct_text": "", "notes": "This entire RFC needs to be either updated or marked as obsolete. Terms in the text such as the URL reference to me.com are obsolete as Apple has moved on and renamed the entire product. Apple no longer uses NAT-PMP as the name for their port mapping protocol and that product has moved to version 2.\n --VERIFIER NOTES-- \n   Erratas are not used to obsolote documents or mark them as historic. ", "submit_date": "2015-05-28", "submitter_name": "Sterling Garwood", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4379", "doc-id": "RFC3261", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "25.1", "orig_text": "Errata ID: 316\r\ndigest-uri-value  =  request-uri ; Equal to request-uri\r\n                                   as specified by HTTP/1.1\r\n", "correct_text": "digest-uri-value  =  rquest-uri ; Equal to request-uri\r\n                                  as specified by HTTP/1.1\r\n", "notes": "Rule names are case-insensitive.\r\nRequest-URI has been defined already.\r\nAn original definition is correct.\r\nAlternatively, it may refer to request-target as specified by RFC 7230.\n --VERIFIER NOTES-- \nThe original text includes: Errata ID: 316\r\n\r\nBut the current text matches the suggestion:\r\n\r\nhttps://datatracker.ietf.org/doc/html/rfc3261#section-25.1", "submit_date": "2015-05-28", "submitter_name": "OKUMURA Shinji", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 13:52:34"}, {"errata_id": "7600", "doc-id": "RFC8259", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "The representation of numbers is similar to that used in most\r\n   programming languages.  A number is represented in base 10 using\r\n   decimal digits.  It contains an integer component that may be\r\n   prefixed with an optional minus sign, which may be followed by a\r\n   fraction part and/or an exponent part.  Leading zeros are not\r\n   allowed.", "correct_text": "The representation of numbers is similar to that used in most\r\n   programming languages.  A number is represented in base 10 using\r\n   decimal digits.  It contains an integer component that may be\r\n   prefixed with an optional minus sign, which may be followed by a\r\n   fraction part and/or an exponent part.  Leading zeros in the\r\n   integer component beyond the units digit are not allowed.", "notes": "The original wording about leading zeros contradicts the documented ABNF grammar for JSON numbers in the following cases:\r\n- If the integer component is equal to 0 and the fractional component exists. (Examples: 0.1, 0.001)\r\n- In the exponent part, after the letter E or e or the optional sign. (Example: 1E01)", "submit_date": "2023-08-11", "submitter_name": "Guillaume Fortin-Debigar\u00e9", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:36:09"}, {"errata_id": "4380", "doc-id": "RFC7361", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   At least one of the following sub-TLVs MUST be included in the MAC\r\n   Flush Parameters TLV if the C-flag is set to 1:\r\n\r\n   o  PBB B-MAC List Sub-TLV:\r\n\r\n      Type: 0x0407\r\n\r\n      Length: Value length in octets.  At least one B-MAC address MUST\r\n      be present in the list.\r\n\r\n      Value: One or a list of 48-bit B-MAC addresses.  These are the\r\n      source B-MAC addresses associated with the B-VPLS instance that\r\n      originated the MAC withdraw message.  It will be used to identify\r\n      the C-MAC(s) mapped to the B-MAC(s) listed in the sub-TLV.\r\n\r\n   o  PBB I-SID List Sub-TLV:\r\n\r\n      Type: 0x0408\r\n\r\n      Length: Value length in octets.  Zero indicates an empty I-SID\r\n      list.  An empty I-SID list means that the flushing applies to all\r\n      the I-SIDs mapped to the B-VPLS indicated by the FEC TLV.\r\n\r\n      Value: One or a list of 24-bit I-SIDs that represent the\r\n      I-component FIB(s) where the MAC flushing needs to take place.", "correct_text": "   At least one of the following sub-TLVs MUST be included in the MAC\r\n   Flush Parameters TLV if the C-flag is set to 1:\r\n\r\n   o  PBB B-MAC List Sub-TLV:\r\n\r\n      Type: 0x01\r\n      Length: Value length in octets.  At least one B-MAC address MUST\r\n      be present in the list.\r\n\r\n      Value: One or a list of 48-bit B-MAC addresses.  These are the\r\n      source B-MAC addresses associated with the B-VPLS instance that\r\n      originated the MAC withdraw message.  It will be used to identify\r\n      the C-MAC(s) mapped to the B-MAC(s) listed in the sub-TLV.\r\n\r\n   o  PBB I-SID List Sub-TLV:\r\n\r\n      Type: 0x02\r\n      Length: Value length in octets.  Zero indicates an empty I-SID\r\n      list.  An empty I-SID list means that the flushing applies to all\r\n      the I-SIDs mapped to the B-VPLS indicated by the FEC TLV.\r\n\r\n      Value: One or a list of 24-bit I-SIDs that represent the\r\n      I-component FIB(s) where the MAC flushing needs to take place.", "notes": "Type definition was error. The PBB B-MAC List Sub-TLV abd I-SID List Sub-TLV are only support for one byte, as defined in section 5.1.1 MAC flush parameters TLV.\r\nThis error was imported from draft-ietf-l2vpn-vpls-ldp-mac-opt-12. For this version, it submit the 2 sub-tlv to IANA for alloc id. But the two kinds tlv were sub-tlv, not LDP TLV", "submit_date": "2015-05-29", "submitter_name": "rainsword", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4383", "doc-id": "RFC6868", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   GEO;X-ADDRESS=\"Pittsburgh Pirates^n115 Federal St^nPitt\r\n    sburgh, PA 15212\":geo:40.446816,-80.00566", "correct_text": "   GEO;X-ADDRESS=\"Pittsburgh Pirates^n115 Federal St^nPitt\r\n    sburgh, PA 15212\":geo:40.446816\\,-80.00566", "notes": "RFC 6350 Section 3.4 states that all property values must have COMMA characters escaped with a BACKSLASH character. The GEO property value in the example contains a comma. Therefore it must be escaped with a backslash.\r\n(The GEO example in RFC 6350 is incorrect see Errata 3846)", "submit_date": "2015-06-01", "submitter_name": "Mark Wierbosch", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4382", "doc-id": "RFC5246", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "In the following example, Datum is defined to be three consecutive\r\n   bytes that the protocol does not interpret, while Data is three\r\n   consecutive Datum, consuming a total of nine bytes.\r\n\r\n      opaque Datum[3];      /* three uninterpreted bytes */\r\n      Datum Data[9];        /* 3 consecutive 3 byte vectors */\r\n", "correct_text": "In the following example, Datum is defined to be three consecutive\r\n   bytes that the protocol does not interpret, while Data is three\r\n   consecutive Datum, consuming a total of nine bytes.\r\n\r\n      opaque Datum[3];      /* three uninterpreted bytes */\r\n      Datum Data[3];        /* 3 consecutive 3 byte vectors */\r\n", "notes": "The 9 in \"Datum Data[9]\" should be a 3 because Datum is a data type that consumes 3 bytes, so as written the Data vector is 27 bytes long. To make it a 9 byte vector the 9 must change to a 3.\n --VERIFIER NOTES-- \n   This is not correct. The value here is the number of bytes, not the count of items.", "submit_date": "2015-05-29", "submitter_name": "Laura Corcoran", "verifier_id": "", "verifier_name": "EKR", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4533", "doc-id": "RFC4253", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "[[ A paragraph is missing in this section to clarify implementation\r\n   requirements for the reserved field. This paragraph could suitably\r\n   be inserted after the description of first_kex_packet_follows. ]]", "correct_text": "      (reserved field)\r\n         Servers and clients may or may not be aware of a future\r\n         extension to this RFC that specifies a use for this field.\r\n\r\n         Servers and clients that are NOT aware of such an extension:\r\n         - MUST send this field with value zero;\r\n         - MUST NOT act on any value of this field when received,\r\n           whether the received value is zero or non-zero;\r\n         - in key exchange, MUST properly hash the actual received\r\n           value of this field.\r\n\r\n         This behavior is REQUIRED to allow use of this field in\r\n         future protocol extension.\r\n", "notes": "RFC 4253 defines the KEXINIT reserved field as follows:\r\n\r\nuint32       0 (reserved for future extension)\r\n\r\nThis has in practice not been sufficient for developers to understand the requirements for sending and handling this field.\r\n\r\nAt least one common implementation will currently fail key exchange if the field is non-zero, because it forgets to decode it, and just assumes it is always zero.\r\n\r\nAt least one other implementation will currently disconnect if the field is non-zero, because it takes the above definition to mean that the field must be zero when received.\r\n\r\nThe above paragraph clarifies the correct treatment of this field. This has been discussed during November 2015 with other implementers on the \"ietf-ssh@netbsd.org\" mailing list. There appears to be consensus that the above is the correct treatment.", "submit_date": "2015-11-13", "submitter_name": "denis bider", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 18:00:57"}, {"errata_id": "4534", "doc-id": "RFC7622", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.2", "orig_text": "   An entity that performs enforcement in XMPP domainpart slots MUST\r\n   prepare a string as described in Section 3.2.1 and MUST also apply\r\n   the normalization, case-mapping, and width-mapping rules defined in\r\n   [RFC5892].", "correct_text": "  An entity that performs enforcement in XMPP domainpart slots MUST\r\n  prepare a string as described in Section 3.2.1 and MUST also apply\r\n  the normalization, case-mapping, and width-mapping rules defined in\r\n  [RFC5895].", "notes": "RFC 5892 is just a list of codepoints; the rules to which it is referring (and that are referred to in the ABNF and other places in the document) are in RFC 5895.", "submit_date": "2015-11-14", "submitter_name": "Sam Whited", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4535", "doc-id": "RFC7540", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1", "orig_text": "(content of Figure 2)", "correct_text": "(see notes, below)", "notes": "Section 5.1 Figure 2 is unclear about what stream is being depicted when PUSH_PROMISE is used.  The figure shows a transition from /idle/ to /reserved (local)/ on a PUSH_PROMISE receive, but Section 6.6 only allows PUSH_PROMISE to be sent on a stream that is in /open/ or /half-closed (remote)/ state.  But these are talking about different streams.\r\n\r\nA note should be added to figure 2 in section 5.1 clarifying that where a PUSH_PROMISE is sent or received, the state diagram is for the promised stream, not the original stream.", "submit_date": "2015-11-17", "submitter_name": "Erik Schnell", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8258", "doc-id": "RFC9528", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "C.2", "orig_text": "EAD_1 = 1* ead\r\nEAD_2 = 1* ead\r\nEAD_3 = 1* ead\r\nEAD_4 = 1* ead\r\n...\r\nPLAINTEXT_2 = (\r\n  C_R,\r\n  ID_CRED_R : map / bstr / -24..23,\r\n...\r\nPLAINTEXT_3 = (\r\n  ID_CRED_I : map / bstr / -24..23,\r\n", "correct_text": "EAD_1 = (+ ead)\r\nEAD_2 = (+ ead)\r\nEAD_3 = (+ ead)\r\nEAD_4 = (+ ead)\r\n...\r\nPLAINTEXT_2 = (\r\n  C_R : bstr / -24..23,\r\n  ID_CRED_R : header_map / bstr / -24..23,\r\n...\r\nPLAINTEXT_3 = (\r\n  ID_CRED_I : header_map / bstr / -24..23,\r\n", "notes": "The EAD groups are missing parentheses.\r\nThe PLAINTEXT_2 field C_R is missing a type entirely, which is identical to message_1 field C_I.\r\nThe ID_CRED_R and ID_CRED_I fields use an undefined type \"map\" but could use the valid COSE-defined type \"header_map\" or some locally-defined equivalent.", "submit_date": "2025-01-23", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "4385", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "17.2.1", "orig_text": "                               |INVITE\r\n                               |pass INV to TU\r\n            INVITE             V send 100 if TU won't in 200ms\r\n            send response+-----------+\r\n                +--------|           |--------+101-199 from TU\r\n                |        | Proceeding|        |send response\r\n                +------->|           |<-------+\r\n                         |           |          Transport Err.\r\n                         |           |          Inform TU\r\n                         |           |--------------->+\r\n                         +-----------+                |", "correct_text": "                               |INVITE\r\n                               |-\r\n            INVITE             V send 100 if TU won't in 200ms\r\n            send response+-----------+\r\n                +--------|           |--------+101-199 from TU\r\n                |        | Proceeding|        |send response\r\n                +------->|           |<-------+\r\n                         |           |          Transport Err.\r\n                         |           |          Inform TU\r\n                         |           |--------------->+\r\n                         +-----------+                |", "notes": "The standard states about lifetime of the server transaction:\r\n\r\n\"Server transactions are created by the\r\ncore when a request is received, and transaction handling is desired\r\nfor that request (this is not always the case).\"(17.2)\r\n\r\nSo this means that the server transaction is created by the TU (the core). This also means that it is useless to *pass INV to TU* due to that TU itself already has the request.\r\n\r\nThe same logic should apply to Figure 8. as well.", "submit_date": "2015-06-02", "submitter_name": "Krisztian Sinka", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4386", "doc-id": "RFC3611", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.7.2", "orig_text": "   For example, a 1 denotes a received packet, 0 a lost packet, and X a\r\n   discarded packet in the following pattern covering 64 packets:\r\n\r\n      11110111111111111111111X111X1011110111111111111111111X111111111\r\n      |---------gap----------|--burst---|------------gap------------|\r\n\r\n   The burst consists of the twelve packets indicated above, starting at\r\n   a discarded packet and ending at a lost packet.  The first gap starts\r\n   at the beginning of the session and the second gap ends at the time\r\n   of the report.\r\n\r\n   If the packet spacing is 10 ms and the Gmin value is the recommended\r\n   value of 16, the burst duration is 120 ms, the burst density 0.33,\r\n   the gap duration 230 ms + 290 ms = 520 ms, and the gap density 0.04.", "correct_text": "   For example, a 1 denotes a received packet, 0 a lost packet, and X a\r\n   discarded packet in the following pattern covering 64 packets:\r\n\r\n      11110111111111111111111X111X1011110111111111111111111X1111111111\r\n      |---------gap----------|--burst---|------------gap------------|\r\n\r\n   The burst consists of the twelve packets indicated above, starting at\r\n   a discarded packet and ending at a lost packet.  The first gap starts\r\n   at the beginning of the session and the second gap ends at the time\r\n   of the report.\r\n\r\n   If the packet spacing is 10 ms and the Gmin value is the recommended\r\n   value of 16, the burst duration is 120 ms, the burst density 0.33,\r\n   the gap duration 230 ms + 290 ms = 520 ms, and the gap density 0.04.", "notes": "The pattern in the example shows 63 packets rather than 64. Added a \"1\" at the end. Another option is to keep the pattern unchanged, and redo the math.", "submit_date": "2015-06-03", "submitter_name": "Tong Zhou", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4387", "doc-id": "RFC7296", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.7", "orig_text": "   The Certificate Request payload, denoted CERTREQ in this document,\r\n   provides a means to request preferred certificates via IKE and can\r\n   appear in the IKE_INIT_SA response and/or the IKE_AUTH request.\r\n   Certificate Request payloads MAY be included in an exchange when the\r\n   sender needs to get the certificate of the receiver.", "correct_text": "   The Certificate Request payload, denoted CERTREQ in this document,\r\n   provides a means to request preferred certificates via IKE and can\r\n   appear in the IKE_SA_INIT response and/or the IKE_AUTH request.\r\n   Certificate Request payloads MAY be included in an exchange when the\r\n   sender needs to get the certificate of the receiver.", "notes": "IKE_SA_INIT is mis-spelled as IKE_INIT_SA this one time.", "submit_date": "2015-06-04", "submitter_name": "Yoav Nir", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4388", "doc-id": "RFC7159", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "   This document updates [RFC4627], which describes JSON and registers\r\n   the media type \"application/json\".\r\n\r\n", "correct_text": "   This document replaces [RFC4627], which previously described JSON and\r\n   registered the media type \"application/json\".\r\n\r\n", "notes": "The link at https://tools.ietf.org/html/rfc7159 says it obsoletes RFC 4627.  I believe this is the intent and result of RFC 7159, and that RFC 4627 need not be consulted except for historical reasons going forward.", "submit_date": "2015-06-09", "submitter_name": "Kerry Lynn", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4389", "doc-id": "RFC7556", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "Figure 3: An Example of PvD Use with Wi-Fi and Mobile Interfaces", "correct_text": "Figure 3: An Example of PvD Use within a Home Network", "notes": "The title for Figure 3 is erroneously the same as the title for Figure 1 in section 4.1.", "submit_date": "2015-06-10", "submitter_name": "Ian Farrer", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4390", "doc-id": "RFC3514", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "this permit easy encoding", "correct_text": "this permits easy encoding", "notes": "permit -> permits.  Singular verb form instead of plural", "submit_date": "2015-06-10", "submitter_name": "-", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4391", "doc-id": "RFC7233", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   If a valid byte-range-set includes at least one byte-range-spec with\r\n   a first-byte-pos that is less than the current length of the\r\n   representation, or at least one suffix-byte-range-spec with a\r\n   non-zero suffix-length, then the byte-range-set is satisfiable.\r\n   Otherwise, the byte-range-set is unsatisfiable.\r\n", "correct_text": "   If a valid byte-range-set includes at least one byte-range-spec with\r\n   a first-byte-pos that is less than the current length of the\r\n   representation, or at least one suffix-byte-range-spec with a\r\n   non-zero suffix-length and the current length of the representation\r\n   is non-zero, then the byte-range-set is satisfiable. Otherwise, the\r\n   byte-range-set is unsatisfiable.\r\n", "notes": "Asking for a range that includes trailing bytes (e.g., Range: bytes=-1) when the entity is zero bytes is, as stated here, satisfiable, and yet the service would be forced to yield a 206 code and there is no valid representation of Content-Range header, since you cannot specify a range with no length using the byte range type, the none range type is specified in section 2.3 with a meaning for Accept-Ranges only, and there are no other acceptable ranges in the IANA registry.\r\n\r\nThe alternative would be that we could overload the use of the none range and return 206 with Content-Length: 0, Content-Range: none for these requests for final bytes.\n --VERIFIER NOTES-- \nIt also says, in the same section:\r\n\r\n   If the selected representation is shorter than the specified\r\n   suffix-length, the entire representation is used.\r\n\r\nSo the response for the posited request is 200 (not 206).", "submit_date": "2015-06-11", "submitter_name": "Nathan Herring", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4392", "doc-id": "RFC6716", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "The Opus codec scales from 6 kbit/s narrowband mono speech to\r\n510 kbit/s fullband stereo music, with algorithmic delays ranging\r\nfrom 5 ms to 65.2 ms.\r\n\r\n(further in the same section)\r\n\r\nTo\r\ncompensate for the different look-ahead required by each layer, the\r\nCELT encoder input is delayed by an additional 2.7 ms.", "correct_text": "The Opus codec scales from 6 kbit/s narrowband mono speech to\r\n510 kbit/s fullband stereo music, with algorithmic delays ranging\r\nfrom 5 ms to 66.5 ms.\r\n\r\n(further in the same section)\r\n\r\nTo\r\ncompensate for the different look-ahead required by each layer, the\r\nCELT encoder input is delayed by an additional 4 ms.", "notes": "For the latter text, the delays for the CELT and SILK layers must match.  SILK has a \"5 ms look-ahead for noise shaping estimation\", and \"1.5 ms delay for sampling rate conversion\", totaling 6.5 ms.  CELT has a \"2.5 ms look-ahead due to the overlapping MDCT windows\".  Thus, the amount of delay needed to align CELT with SILK is 6.5ms - 2.5ms = 4ms.\r\n\r\nThe text at the beginning of the section must reflect this as well.  The \"algorithmic delays\" reported apparently include framing (minimum frame size 2.5ms + look-ahead delay in CELT-only mode 2.5ms = 5ms).  In that case, the maximum delay is the maximum frame size (60ms) + the maximum delay for look-ahead and resampling (6.5ms) = 66.5ms.\r\n\r\nConfirmed by author (\"Jmvalin\") at https://en.wikipedia.org/wiki/Talk:Opus_(audio_format)/Archive_1#Codec_delay_values", "submit_date": "2015-06-15", "submitter_name": "Peter Budny", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4536", "doc-id": "RFC5412", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2.3", "orig_text": "The AC Name with Index message element is sent by the AC to the WTP\r\n   to configure preferred ACs.  The number of instances where this\r\n   message element would be present is equal to the number of ACs\r\n   configured on the WTP.\r\n\r\n       0                   1\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |     Index     |   AC Name...\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   90 for AC Name with Index\r\n\r\n   Length:   5\r\n\r\n   Index:   The index of the preferred server (e.g., 1=primary,\r\n      2=secondary).\r\n\r\n   AC Name:   A variable-length ASCII string containing the AC's name.", "correct_text": "", "notes": "This entire section is in the wrong location or needs to be revised. Section 7.2 is the definition for Configure Request, which is suppose to be a message sent from the WTP to the AC. But here at 7.2.3, this message element clearly states it is an element to be sent from the AC to the WTP. Does this section belong in the Configure Response section instead?\r\n\r\n[This section does seem to be in the wrong place.  However, moving it will need to wait fo a new (revised) RFC.  ISE, July 2017]", "submit_date": "2015-11-18", "submitter_name": "Tony Deng", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7379", "doc-id": "RFC5272", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "2.2. Protocol Requests/Responses says:\r\n\r\n> Simple PKI Response\r\n> ...\r\n> encapsulatedContentInfo is absent.\r\n\r\n4.1. Simple PKI Response says:\r\n\r\n> The Simple PKI Response consists of a SignedData with no EncapsulatedContentInfo\r\nand no SignerInfo.", "correct_text": "2.2. Protocol Requests/Responses should say:\r\n\r\n> Simple PKI Response\r\n> ...\r\n> encapContentInfo eContent field is absent.\r\n\r\n4.1. Simple PKI Response should say:\r\n\r\n> The Simple PKI Response consists of a SignedData with no eContent field in the EncapsulatedContentInfo and no SignerInfo.\r\n", "notes": "This change is required for consistency with RFC 8551:\r\n\r\n> 3.8.  Creating a Certificate Management Message\r\n>    The certificate management message or MIME entity is used to\r\n>    transport certificates and/or Certificate Revocation Lists (CRLs),\r\n>    such as in response to a registration request.\r\n>    Step 1.  The certificates and/or CRLs are made available to the CMS\r\n>             generating process that creates a CMS object of type\r\n>             SignedData.  The SignedData encapContentInfo eContent field\r\n>             MUST be absent, and the signerInfos field MUST be empty.\r\n\r\nAdditionally, RFC 3852 doesn't allow for the absence of the EncapsulatedContentInfo in a SignedData:\r\n\r\n> The signed-data content type shall have ASN.1 type SignedData:\r\n> SignedData ::= SEQUENCE {\r\n> version CMSVersion,\r\n> digestAlgorithms DigestAlgorithmIdentifiers,\r\n> encapContentInfo EncapsulatedContentInfo,\r\n> certificates [0] IMPLICIT CertificateSet OPTIONAL,\r\n> crls [1] IMPLICIT RevocationInfoChoices OPTIONAL,\r\n> signerInfos SignerInfos }", "submit_date": "2023-03-08", "submitter_name": "Jaime Hablutzel", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-19 10:56:29"}, {"errata_id": "4642", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   version\r\n      The version of the protocol being employed.  This document\r\n      describes DTLS version 1.2, which uses the version { 254, 253 }.\r\n      The version value of 254.253 is the 1's complement of DTLS version\r\n      1.2.  This maximal spacing between TLS and DTLS version numbers\r\n      ensures that records from the two protocols can be easily\r\n      distinguished.  It should be noted that future on-the-wire version\r\n      numbers of DTLS are decreasing in value (while the true version\r\n      number is increasing in value.)\r\n", "correct_text": "Replace \"1's complement of DTLS version\" with \"1's complement\r\nof TLS version\":\r\n\r\n   version\r\n      The version of the protocol being employed.  This document\r\n      describes DTLS version 1.2, which uses the version { 254, 253 }.\r\n      The version value of 254.253 is the 1's complement of TLS version\r\n      1.2.  This maximal spacing between TLS and DTLS version numbers\r\n      ensures that records from the two protocols can be easily\r\n      distinguished.  It should be noted that future on-the-wire version\r\n      numbers of DTLS are decreasing in value (while the true version\r\n      number is increasing in value.)\r\n", "notes": "Clearly this won't confuse the reader, but it is incorrect as written and should be corrected at some time.", "submit_date": "2016-03-18", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4970", "doc-id": "RFC6761", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "168.192.in-addr.arpa.", "correct_text": "192.168.in-addr.arpa.", "notes": "The IP address ranges listed in this document as private do not align with those listed as private in the referenced RFC 1918.\n --VERIFIER NOTES-- \nNope, there are in \"reverse lookup\" format.  \r\n\r\n\r\nThe useful references are probably:\r\nhttps://tools.ietf.org/html/rfc1033 Section IN-ADDR.ARPA and\r\nhttps://tools.ietf.org/html/rfc6303 Section 4.1. RFC 1918 Zones.\r\n\r\nMore info (from rfc1033):\r\nIN-ADDR.ARPA\r\n\r\n   The structure of names in the domain system is set up in a\r\n   hierarchical way such that the address of a name can be found by\r\n   tracing down the domain tree contacting a server for each label of\r\n   the name.  Because of this 'indexing' based on name, there is no easy\r\n   way to translate a host address back into its host name.\r\n\r\n   In order to do the reverse translation easily, a domain was created\r\n   that uses hosts' addresses as part of a name that then points to the\r\n   data for that host.  In this way, there is now an 'index' to hosts'\r\n   RRs based on their address.  This address mapping domain is called\r\n   IN-ADDR.ARPA.  Within that domain are subdomains for each network,\r\n   based on network number.  Also, for consistency and natural\r\n   groupings, the 4 octets of a host number are reversed.\r\n\r\n   For example, the ARPANET is net 10.  That means there is a domain\r\n   called 10.IN-ADDR.ARPA.  Within this domain there is a PTR RR at\r\n   51.0.0.10.IN-ADDR that points to the RRs for the host SRI-NIC.ARPA\r\n   (who's address is 10.0.0.51).  Since the NIC is also on the MILNET\r\n   (Net 26, address 26.0.0.73), there is also a PTR RR at 73.0.0.26.IN-\r\n   ADDR.ARPA that points to the same RR's for SRI-NIC.ARPA.  The format\r\n   of these special pointers is defined below along with the examples\r\n   for the NIC.\r\n\r\nPTR\r\n\r\n           <special-name>   [<ttl>] [<class>]   PTR   <name>\r\n\r\n   The PTR record is used to let special names point to some other\r\n   location in the domain tree.  They are mainly used in the IN-\r\n   ADDR.ARPA records for translation of addresses to names.  PTR's\r\n   should use official names and not aliases.\r\n\r\n   For example, host SRI-NIC.ARPA with addresses 10.0.0.51 and 26.0.0.73\r\n   would have the following records in the respective zone files for net\r\n   10 and net 26:\r\n\r\n           51.0.0.10.IN-ADDR.ARPA.  PTR   SRI-NIC.ARPA.\r\n           73.0.0.26.IN-ADDR.ARPA.  PTR   SRI-NIC.ARPA.\r\n", "submit_date": "2017-03-15", "submitter_name": "Alexander Lay", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4394", "doc-id": "RFC3986", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.2", "orig_text": "IPv6address =                            6( h16 \":\" ) ls32\r\n                 /                       \"::\" 5( h16 \":\" ) ls32\r\n                 / [               h16 ] \"::\" 4( h16 \":\" ) ls32\r\n                 / [ *1( h16 \":\" ) h16 ] \"::\" 3( h16 \":\" ) ls32\r\n                 / [ *2( h16 \":\" ) h16 ] \"::\" 2( h16 \":\" ) ls32\r\n                 / [ *3( h16 \":\" ) h16 ] \"::\"    h16 \":\"   ls32\r\n                 / [ *4( h16 \":\" ) h16 ] \"::\"              ls32\r\n                 / [ *5( h16 \":\" ) h16 ] \"::\"              h16\r\n                 / [ *6( h16 \":\" ) h16 ] \"::\"", "correct_text": "IPv6address = (                6( h16 \":\" ) ls32 ) \r\n            / (           \"::\" 5( h16 \":\" ) ls32 )\r\n            / ( [   h16 ] \"::\" 4( h16 \":\" ) ls32 )\r\n            / ( [ h16-2 ] \"::\" 3( h16 \":\" ) ls32 )\r\n            / ( [ h16-3 ] \"::\" 2( h16 \":\" ) ls32 )\r\n            / ( [ h16-4 ] \"::\"    h16 \":\"   ls32 )\r\n            / ( [ h16-5 ] \"::\"              ls32 )\r\n            / ( [ h16-6 ] \"::\"               h16 )\r\n            / ( [ h16-7 ] \"::\"                   )\r\n\r\nh16-7       = ( *6( h16 \":\" ) h16 ) / h16-6\r\n\r\nh16-6       = ( *5( h16 \":\" ) h16 ) / h16-5\r\n\r\nh16-5       = ( *4( h16 \":\" ) h16 ) / h16-4\r\n\r\nh16-4       = ( *3( h16 \":\" ) h16 ) / h16-3\r\n\r\nh16-3       = ( *2( h16 \":\" ) h16 ) / h16-2\r\n\r\nh16-2       = (   [ h16 \":\" ] h16 ) / h16", "notes": "The 'IPv6address' rule requires more than 1 lookahead symbol.\r\n\r\nExample value: 1::\r\n\r\nParsers that implement a first-match-wins strategy will erroneously match 1:: as ( h16 \":\" ), followed by an unexpected symbol.\r\n\r\nParsers that implement a first-match-wins strategy with the corrected grammar will correctly match 1:: as ( h16 \"::\" ).\n --VERIFIER NOTES-- \nAs with errata report 4393, this is trying to use ABNF beyond what it's meant for.", "submit_date": "2015-06-15", "submitter_name": "Steven Liekens", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4395", "doc-id": "RFC5705", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "   If no context is provided, it then computes:\r\n\r\n           PRF(SecurityParameters.master_secret, label,\r\n               SecurityParameters.client_random +\r\n               SecurityParameters.server_random\r\n               )[length]\r\n\r\n   If context is provided, it computes:\r\n\r\n           PRF(SecurityParameters.master_secret, label,\r\n               SecurityParameters.client_random +\r\n               SecurityParameters.server_random +\r\n               context_value_length + context_value\r\n               )[length]\r\n", "correct_text": "   If no context is provided, it then computes:\r\n\r\n           PRF(SecurityParameters.master_secret, label,\r\n               SecurityParameters.client_random +\r\n               SecurityParameters.server_random\r\n               )[0..length-1]\r\n\r\n   If context is provided, it computes:\r\n\r\n           PRF(SecurityParameters.master_secret, label,\r\n               SecurityParameters.client_random +\r\n               SecurityParameters.server_random +\r\n               context_value_length + context_value\r\n               )[0..length-1]\r\n", "notes": "The current notation is not in line with that of RFC 5246, where the [0..N-1] notation is used on a PRF outcome in Sections 7.4.9 and 8.1 and similar [A..B] notation is also used elsewhere.  This makes me believe that the current text is technically wrong, and not in line with the intentions stated informally below it,\r\n\r\n   The output is a pseudorandom bit string of length bytes generated\r\n   from the master_secret.", "submit_date": "2015-06-16", "submitter_name": "Rick van Rein", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4537", "doc-id": "RFC5917", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Introduction", "orig_text": "This document specifies the clearance sponsor attribute.  It is\r\n   included in public key certificates [RFC5280] and attribute\r\n   certificates [RFC5755].  This attribute is only meaningful as a\r\n   companion of the clearance attribute [RFC5755] [RFC5912].  The\r\n   clearance sponsor is the entity (e.g., agency, department, or\r\n   organization) that granted the clearance to the subject named in the\r\n   certificate.  For example, the clearance sponsor for a subject\r\n   asserting the Amoco clearance values [RFC3114] could be\r\n   \"Engineering\".\r\n", "correct_text": "This document specifies the clearance sponsor attribute.  It is\r\n   included in public key certificates [RFC5280] and attribute\r\n   certificates [RFC5755].  This attribute is only meaningful as a\r\n   companion of the clearance attribute [RFC5755] [RFC5913].  The\r\n   clearance sponsor is the entity (e.g., agency, department, or\r\n   organization) that granted the clearance to the subject named in the\r\n   certificate.  For example, the clearance sponsor for a subject\r\n   asserting the Amoco clearance values [RFC3114] could be\r\n  \"Engineering\".\r\n\r\nRFC 5913 should be added to the references:\r\n\r\n   [RFC5913]  Turner, S. and S. Chokhani, \"Clearance Attribute and\r\n                        Authority Clearance Constraints Certificate Extension\",\r\n                        RFC 5913, June 2010.\r\n", "notes": "The first paragraph in the section references RFC 5912. As far as I can see, it should really reference RFC 5913 (Clearance Attribute and Authority Clearance Constraints - Certificate Extension).", "submit_date": "2015-11-18", "submitter_name": "Lars Wilhelmsen", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6481", "doc-id": "RFC7838", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "   Furthermore, if the connection to the alternative service fails or is\r\n   unresponsive, the client MAY fall back to using the origin or another\r\n   alternative service.  Note, however, that this could be the basis of\r\n   a downgrade attack, thus losing any enhanced security properties of\r\n   the alternative service.", "correct_text": " \u00af\\_(\u30c4)_/\u00af", "notes": "Alt-Svc fall back is described in section 2.4 and mentions security properties, so I was expecting to see something about fall back in the security considerations. This might be implicitly covered by Section 9.3 but it could potentially be made more clear.\n --VERIFIER NOTES-- \nGeneral clarifications and request for improvements to the RFC in a possible future update of the document should be proposed using channels other than the errata process, such as the WG mailing list.", "submit_date": "2021-03-13", "submitter_name": "Lucas Pardue", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-03-15 11:12:52"}, {"errata_id": "8262", "doc-id": "RFC1157", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.6.3", "orig_text": "             iso org dod internet mgmt mib system sysDescr\r\n              1   3   6     1      2    1    1       1", "correct_text": "             iso identified-organization dod internet mgmt mib system sysDescr\r\n              1             3             6     1      2    1    1       1", "notes": "ISO has never assigned the alphanumeric identifier \"org\" to OID \"1.3\".\r\n\r\nThe correct and legal alphanumeric identifier is \"identified-organization\".\r\n\r\nThe ASN.1 representation of the OID with its correct alphanumeric identifiers is:\r\n{ iso(1) identified-organization(3) dod(6) internet(1) mgmt(2) mib(1) system(1) sysDescr(1) }", "submit_date": "2025-01-26", "submitter_name": "Daniel Marschall", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "4971", "doc-id": "RFC1350", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "(i.e., Datagram length < 516)", "correct_text": "(i.e., Datagram length < 512)", "notes": "", "submit_date": "2017-03-15", "submitter_name": "Ondrej", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4396", "doc-id": "RFC7011", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Incremental sequence counter modulo 2^32 of all IPFIX Data Records\r\nsent in the current stream from the current Observation Domain by\r\nthe Exporting Process.", "correct_text": "Incremental sequence counter modulo 2^32 of all IPFIX Data Records\r\nsent in the current stream from the current Observation Domain by\r\nthe Exporting Process, prior to the receipt of this IPFIX Message.", "notes": "The original specification can be interpreted in two ways:\r\n\r\n(1) Incremental sequence counter modulo 2^32 of all IPFIX Data Records sent in the current stream from the current Observation Domain by the Exporting Process *up to* this Message.\r\n(2) Incremental sequence counter modulo 2^32 of all IPFIX Data Records sent in the current stream from the current Observation Domain by the Exporting Process *up to and including* this Message.\r\n\r\nIt seems that only Section 10.3.2 \u2014 Reliability explains which of the two interpretations is right: In the case of UDP, the IPFIX Sequence Number contains the total number of IPFIX Data Records sent for the Transport Session *prior* to the receipt of this IPFIX Message, modulo 2^32.\r\n\r\nIn my opinion, it would be good to clarify the use of sequence numbers in Message headers already in the definition of sequence numbers in RFC 7011, namely in Section 3.1.\r\n\r\nDiscussed here: https://mailarchive.ietf.org/arch/msg/ipfix/AQKObQ2WA_zIXgRzdxRsDrIWjx0", "submit_date": "2015-06-19", "submitter_name": "Rick Hofstede", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4397", "doc-id": "RFC7183", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "Generation of TIMESTAMP Message TLVs (as defined in [RFC7182]) for\r\n      inclusion in an outgoing message.  An implementation of [RFC6130]\r\n      and [RFC7181] MAY use more than one ICV TLV in a message, but it\r\n      MUST NOT use the same type extensio", "correct_text": "Generation of TIMESTAMP Message TLVs (as defined in [RFC7182]) for\r\n      inclusion in an outgoing message.  An implementation of [RFC6130]\r\n      and [RFC7181] MAY use more than one TIMESTAMP TLV in a message\r\n      , but it MUST NOT use the same type extensio", "notes": "We are only talking about TIMESTAMP TLV in this paragraph. \r\nI think it's an error when copying the text from the previous paragraph.", "submit_date": "2015-06-22", "submitter_name": "Jiazi", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4398", "doc-id": "RFC6455", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "1. The components of the WebSocket URI passed into this algorithm\r\n   (/host/, /port/, /resource name/, and /secure/ flag) MUST be\r\n   valid according to the specification of WebSocket URIs specified\r\n   in Section 3.  If any of the components are invalid, the client\r\n   MUST _Fail the WebSocket Connection_ and abort these steps.", "correct_text": "1. The components of the WebSocket URI passed into this algorithm\r\n   (/host/, /port/, /resource name/, and /secure/ flag) MUST be\r\n   valid according to the specification of WebSocket URIs specified\r\n   in Section 3.  If any of the components are invalid, the client\r\n   MUST _Fail the WebSocket Connection_ and abort these steps.\r\n\r\n2. If secure is false, and the algorithm in Mixed Content's \"\u00a75.1\r\n   Does settings object restrict mixed content?\" returns Restricts\r\n   Mixed Content when applied to client's entry script's relevant\r\n   settings object's, then the client MUST fail the WebSocket\r\n   connection and abort the connection.", "notes": "This change is suggested by the W3C's \"Mixed Content\" document (https://w3c.github.io/webappsec/specs/mixedcontent/#websockets-integration), and will bring WebSockets' behaviors into line with XMLHttpRequest, EventSource, and Fetch, all of which act as though there was a network error when blocking a mixed content request, rather than throwing a SecurityError exception.", "submit_date": "2015-06-24", "submitter_name": "Mike West", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4399", "doc-id": "RFC4120", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1", "orig_text": "All prefixes expect those beginning with used.\r\n", "correct_text": "??", "notes": "Hmmm, looks like part of the sentence ended up in /dev/null.  (Also, was \"expect\" perhaps meant to be \"except\"?)  It looks to me as though this happened between kerberos-clarifications-04 and -05.  If I had to guess, it was probably trying to say that you can roll your own private-use prefixes (beginning with \"X-\" or \"x-\"), but any other prefixes must go through the official registry process, per RFC 6111?\r\n\r\nPaul Wouters (AD): the -04 draft said: All prefixes must be assigned before they may be used. The -05 version is as in the RFC. It seems indeed that an exception was contemplated for specific prefixes starting with x- or X-. This can be read in The IANA Considerations section.", "submit_date": "2015-06-24", "submitter_name": "Thomas Maslen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 02:05:19"}, {"errata_id": "4400", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.6.", "orig_text": "                                    /-- INIT ACK [Veri Tag=Tag_A,\r\n                                   /             I-Tag=Tag_Z,\r\n    (Cancel T1-init timer) <------/              Cookie_Z, & other info]\r\n                                         (destroy temp TCB)\r\n    COOKIE ECHO [Cookie_Z] ------\\\r\n    (Start T1-init timer)         \\\r\n    (Enter COOKIE-ECHOED state)    \\---> (build TCB enter ESTABLISHED\r\n                                          state)\r\n                                   /---- COOKIE-ACK\r\n                                  /\r\n    (Cancel T1-init timer, <-----/", "correct_text": "                                    /-- INIT ACK [Veri Tag=Tag_A,\r\n                                   /             I-Tag=Tag_Z,\r\n    (Cancel T1-init timer) <------/              Cookie_Z, & other info]\r\n                                         (destroy temp TCB)\r\n    COOKIE ECHO [Cookie_Z] ------\\\r\n    (Start T1-cookie timer)       \\\r\n    (Enter COOKIE-ECHOED state)    \\---> (build TCB enter ESTABLISHED\r\n                                          state)\r\n                                   /---- COOKIE-ACK\r\n                                  /\r\n    (Cancel T1-cookie timer, <---/", "notes": "Upon reception of an INIT ACK Endpoint A should start the T1-cookie timer, not the T1-init timer. Reception of a COOKIE-ACK cancels The T1-cookie timer, not the T1-init timer.", "submit_date": "2015-06-25", "submitter_name": "Julien Pourtet", "verifier_id": "", "verifier_name": "Martin Stiemerling", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4401", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "\"OCRA-1:HOTP-SHA1-4:QH8-S512\" means version 1 of OCRA with HMAC-\r\nSHA1 function, truncated to a 4-digit value, using a random\r\nhexadecimal challenge up to 8 nibbles and a session value of 512\r\nbytes", "correct_text": "\"OCRA-1:HOTP-SHA1-4:QH08-S512\" means version 1 of OCRA with HMAC-\r\nSHA1 function, truncated to a 4-digit value, using a random\r\nhexadecimal challenge up to 8 nibbles and a session value of 512\r\nbytes", "notes": "I have changed \"QH8\" to \"QH08\".", "submit_date": "2015-06-25", "submitter_name": "Anthony", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7367", "doc-id": "RFC2131", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   The 'server identifier' field is used both to identify a DHCP server\r\n   in a DHCP message and as a destination address from clients to\r\n   servers.  A server with multiple network addresses MUST be prepared\r\n   to to accept any of its network addresses as identifying that server\r\n   in a DHCP message.", "correct_text": "   The 'server identifier' field is used both to identify a DHCP server\r\n   in a DHCP message and as a destination address from clients to\r\n   servers.  A server with multiple network addresses MUST be prepared\r\n   to accept any of its network addresses as identifying that server in\r\n   a DHCP message.", "notes": "redundant word\r\ns/to to/to/", "submit_date": "2023-02-23", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-23 22:57:13"}, {"errata_id": "4402", "doc-id": "RFC7543", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "    +------------------------------------------------+---------------+\r\n    | Registry                                       | Code Point    |\r\n    +------------------------------------------------+---------------+\r\n    | BGP Outbound Route Filtering (ORF) Types       | CP-ORF (65)   |\r\n    | Transitive Opaque Extended Community Sub-Types | CP-ORF (0x03) |\r\n    +------------------------------------------------+---------------+", "correct_text": "    +------------------------------------------------+---------------+\r\n    | Registry                                       | Code Point    |\r\n    +------------------------------------------------+---------------+\r\n    | BGP Outbound Route Filtering (ORF) Types       | CP-ORF (65)   |\r\n    | Transitive Opaque Extended Community Sub-Types | CP-ORF (0x03) |\r\n    | Capability Codes                               | CP-ORF (72)   |\r\n    +------------------------------------------------+---------------+", "notes": "In the original text, we forgot to mention the value of the BGP capability code.\n --VERIFIER NOTES-- \nRFC 5291 describes The Outbound Route Filter (ORF) Capability for BGP. According to RFC 5291, when two BGP speakers initiate a session between one another and they intend to exchange ORFs of any type, they must advertise the ORF capability. The ORF capability is registered with a value of 3 in the IANA BGP Capability Code Registry. The ORF capability also includes a list of ORF types that the BGP speaker can send and/or receive. IANA also maintains a BGP Outbound Route Filtering (ORF) Types registry.\r\n\r\nRFC 7543 describes a new ORF type, called the Covering Prefix ORF (CP-ORF). RFC 7543 should conform to generic ORF procedures defined in RFC 5291. Specifically, when two BGP speakers initiate a session between one another and they intend to exchange CP-ORFs, they must advertise the ORF capability (value 3). The ORF capability must include CP-ORF (value 65) in the ORF type list.", "submit_date": "2015-06-26", "submitter_name": "Ron Bonica", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4403", "doc-id": "RFC7457", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.7", "orig_text": "While the Bleichenbacher attack has been mitigated in TLS 1.0,\r\nthe Klima attack, which relies on a version-check oracle, is only\r\nmitigated by TLS 1.1.", "correct_text": "The Bleichenbacher attack has been first addressed in TLS 1.0. This\r\nmitigation closed the error message-based attack, but opened a\r\npotentially exploitable timing leak [*] which has been addressed in\r\nTLS 1.2. The Klima attack, which relies on a version-check oracle,\r\nis mitigated by TLS 1.1.\r\n\r\n[*]: Revisiting SSL/TLS Implementations: New Bleichenbacher Side\r\nChannels and Attacks. Meyer, Somorovsky, Weiss, Schwenk, Schinzel,\r\nTews.  23rd Usenix Security Symposium 2014.", "notes": "RFC 7457 states: \"While the Bleichenbacher attack has been mitigated\r\nin TLS 1.0, the Klima attack, which relies on a version-check oracle,\r\nis only mitigated by TLS 1.1.\"\r\n\r\nRFC 2246 (TLS 1.0) states: \"The best way to avoid vulnerability\r\nto this attack is to treat incorrectly formatted messages in a\r\nmanner indistinguishable from correctly formatted RSA blocks. Thus,\r\nwhen it receives an incorrectly formatted RSA block, a server should\r\ngenerate a random 48-byte value and proceed using it as the premaster\r\nsecret. Thus, the server will act identically whether the received\r\nRSA block is correctly encoded or not.\"\r\n\r\nThis does not safely prevent Bleichenbacher style attacks. To rephrase\r\nit: implementations should generate and proceed with a random PMS\r\nif (implied \"*and only if*\") an incorrectly formatted message was\r\nreceived.  This opens a timing side channel that we successfully\r\nexploited in several TLS implementations that comply with RFC 2246\r\n(see [1], [2]).\r\n\r\nThis timing side channel was first addressed in TLS 1.2 (RFC 5246),\r\nwhich gives the following timing-constant algorithm to prevent\r\nBleichenbacher's attack: \"1. Generate a string R of 46 random bytes\r\n2. Decrypt the message to recover the plaintext M 3. If the PKCS#1\r\npadding is not correct, or the length of message\r\n      M is not exactly 48 bytes:\r\n         pre_master_secret = ClientHello.client_version || R\r\n      else If ClientHello.client_version <= TLS 1.0, and version\r\n      number check is explicitly disabled:\r\n         pre_master_secret = M\r\n      else:\r\n         pre_master_secret = ClientHello.client_version || M[2..47]\"\r\n\r\nThus, it is not TLS 1.0 which safely prevents Bleichenbacher attacks,\r\nbut TLS 1.2.", "submit_date": "2015-06-28", "submitter_name": "Sebastian Schinzel", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4404", "doc-id": "RFC4941", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3", "orig_text": "The way PPP is used today, however, PPP servers\r\ntypically unilaterally inform the client what address they are to use\r\n(i.e., the client doesn't generate one on its own).  This practice,\r\nif continued in IPv6, would avoid the concerns that are the focus of\r\nthis document.", "correct_text": "In contrast to LAN clients, the way PPP is used today, however, does\r\nnot allow the client to freely and unilaterally change its own\r\ninterface identifier. PPP servers also do not unilaterally inform the\r\nclient what 128-bit address to use. In the same manner as for LAN\r\nconnected clients (without PPP), a PPP client generates its\r\nglobal-scope IPv6 address from the Interface-Identifier part and the\r\nPrefix part. The client obtains a prefix from the PPP server in the\r\nsame way as LAN clients do, i.e. via Neighbor Discovery Protocol.\r\nHowever, an interface identifier of a PPP client MUST be negotiated\r\nwith the PPP server via IPv6CP protocol (Interface-Identifier option).\r\nOnly then, after IPv6CP was successfully negotiated between the PPP\r\nclient and the PPP server, the PPP client can generate and assign its\r\nindividual global IPv6 address compounded from the negotiated\r\ninterface identifier and the obtained prefix.\r\nIn order to change the old negotiated interface identifier later in the\r\nsame PPP session, the client MUST initiate a new IPv6CP negotiation\r\nwith the PPP server, proposing a new client's interface identifier.\r\n", "notes": "Such an extensive additional explanation of PPP specifics regarding changing of interface identifier on PPP clients is very important for both PPP servers manufacturers and PPP slients manufacturers, in order to define a method for legal changing of interface IDs on PPP clients (according to the  recommendations of this RFC 4941) and to correctly support of a changed client\u2019s interface ID on the PPP Server (for correct IPv6 routes in the routing table et al.).\r\nFailure to comply with these PPP specifics and requirements can lead to misinterpretation, fault implementations, and then to critical PPP sessions issues in real operation!", "submit_date": "2015-06-29", "submitter_name": "Jewgenij Bytschkow", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4405", "doc-id": "RFC7223", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2.", "orig_text": "   o  Symbols after data node names: \"?\" means an optional node, \"!\"\r\n      means a presence container, and \"*\" denotes a list and leaf-list.", "correct_text": "   o  Symbols after data node names: \"?\" means an optional node, \"!\"\r\n      means a presence container, and \"*\" denotes either a list or a \r\n      leaf-list.", "notes": "Change \"list and leaf-list\" to \"list or leaf-list\"", "submit_date": "2015-06-29", "submitter_name": "Rob Wilton", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4538", "doc-id": "RFC6793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "If the BGP4-MIB [RFC4273] is supported, there are no additional\r\nmanageability concerns that arise from the use of four-octet AS\r\nnumbers, since the InetAutonomousSystemNumber textual convention\r\n[RFC4001] is defined as Unsigned32.", "correct_text": "If the BGP4-MIBv2 [draft-ietf-idr-bgp4-mibv2] is supported, there are \r\nno additional manageability concerns that arise from the use of \r\nfour-octet AS numbers, since the InetAutonomousSystemNumber \r\ntextual convention [RFC4001] is defined as Unsigned32.", "notes": "I do not have corrected text. RFC4273 does not use InetAutonomousSystemNumber for AS numbers:\r\nbgpPeerRemoteAs OBJECT-TYPE\r\n            SYNTAX     Integer32 (0..65535)\r\n            MAX-ACCESS read-only\r\n            STATUS     current\r\n            DESCRIPTION\r\n                    \"The remote autonomous system number received in\r\n                     the BGP OPEN message.\"\r\n            REFERENCE\r\n                    \"RFC 4271, Section 4.2.\"\r\n            ::= { bgpPeerEntry 9 }\r\n\r\nThis uses \"Integer32 (0...65535)\" (note, Integer, not Unsigned Int). \r\nIt is unclear to me how to fix this, I know some folk are simply treating it as a UInt32.\r\n\r\n=====\r\nThe report is correct, rfc4273 can't support 4-byte ASNs.\r\n\r\nAfter consulting with the authors and the WG, it seems like the correct reference should have been \r\ndraft-ietf-idr-bgp4-mibv2 (BGP4 MIBv2).   Besides the corrected text above, an Informative Reference should be added to draft-ietf-idr-bgp4-mibv2.", "submit_date": "2015-11-19", "submitter_name": "Warren Kumari", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4406", "doc-id": "RFC4291", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.5.6", "orig_text": "   Link-Local addresses are for use on a single link.  Link-Local\r\n   addresses have the following format:\r\n\r\n   |   10     |\r\n   |  bits    |         54 bits         |          64 bits           |\r\n   +----------+-------------------------+----------------------------+\r\n   |1111111010|           0             |       interface ID         |\r\n   +----------+-------------------------+----------------------------+\r\n", "correct_text": "   Link-Local addresses are for use on a single link.  Link-Local\r\n   addresses have the following format:\r\n\r\n   |   10     |\r\n   |  bits    |         54 bits         |          64 bits           |\r\n   +----------+-------------------------+----------------------------+\r\n   |1111111010|     arbitrary value     |       interface ID         |\r\n   +----------+-------------------------+----------------------------+\r\n", "notes": "Section 2.4 of this RFC states that link-local addresses are identified by having the prefix FE80::/10. According to this prefix, the entire range of link-local addresses covers all addresses within the range of FE80:: through FEBF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF.\r\n\r\nThe format of link-local addresses as stated in Section 2.5.6 seems to partially contradict Section 2.4 in that it fixes the internal 54 bits between the 10-bit prefix and the IID to the value of 0. If that was the case then the prefix of link-local addresses would have been in fact FE80::/64 instead of FE80::/10, and the range of link-local addresses would have been limited to FE80:: through FE80::FFFF:FFFF:FFFF:FFFF. Thus, the definition of link-local addresses as follows from Section 2.4 does not align with the definition of link-local addresses as presented in Section 2.5.6.\r\n\r\nI suggest resolving this internal contradiction by explicitly stating in Section 2.5.6 that the internal 54 bits of a link-local address that follow the FE80::/10 prefix can be of an arbitrary value.\r\n\r\nThank you!\n --VERIFIER NOTES-- \n   Section 2.4 reserves the FE80::/10 prefix for use on the local link.  Section 2.5.6 specifies that the current definition of a link-local address falls in the FE80::/64 prefix.  The suggested change would be a technical change to a consensus-based decision.  The re-definition of the link-local address would need to be driven by a draft updating RFC 4291.", "submit_date": "2015-06-29", "submitter_name": "Peter Paluch", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4407", "doc-id": "RFC2217", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Discussion", "orig_text": "By in large", "correct_text": "By and large", "notes": "\"By in large\" is an eggcorn.  It should read \"By and large\".", "submit_date": "2015-06-29", "submitter_name": "Jeremy Visser", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4539", "doc-id": "RFC2296", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   and if the request contains the Accept- headers\r\n\r\n     Accept: text/html:q=1.0, */*:q=0.8\r\n     Accept-Language: en;q=1.0, fr;q=0.5", "correct_text": "   and if the request contains the Accept- headers\r\n\r\n     Accept: text/html;q=1.0, */*;q=0.8\r\n     Accept-Language: en;q=1.0, fr;q=0.5", "notes": "(quality) parameter must be separated by \";\" instead of \":\".", "submit_date": "2015-11-19", "submitter_name": "Florian Best", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4540", "doc-id": "RFC7315", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "5.1. P-Associated-URI Header Syntax\r\n\r\n\r\n   The syntax of the P-Associated-URI header field is described as\r\n   follows:\r\n\r\n         P-Associated-URI       = \"P-Associated-URI\" HCOLON\r\n                                  [p-aso-uri-spec]\r\n                                  *(COMMA p-aso-uri-spec)\r\n         p-aso-uri-spec         = name-addr *(SEMI ai-param)\r\n         ai-param               = generic-param\r\n", "correct_text": "5.1. P-Associated-URI Header Syntax\r\n\r\n\r\n   The syntax of the P-Associated-URI header field is described as\r\n   follows:\r\n\r\n         P-Associated-URI       = \"P-Associated-URI\" HCOLON\r\n                                  (p-aso-uri-spec)\r\n                                  *(COMMA p-aso-uri-spec)\r\n         p-aso-uri-spec         = name-addr *(SEMI ai-param)\r\n         ai-param               = generic-param\r\n", "notes": "P-Associated-URI cannot include an empty header value (which was able to be included according to RFC 3455)\r\n\r\n- Background.\r\n\r\nThe policy of P-Associated-URI has been updated from RFC 3455.\r\nRFC 3455 : 4.1.2.2 Procedures at the registrar\r\n...\r\nIn case the address-of-record under registration does not have any\r\n   other SIP or SIPS URIs associated, the registrar MUST include an\r\n   empty P-Associated-URI header value.\r\n\r\n\r\nRFC 7315 : 4.1.2.2 Procedures at the Registrar\r\n...\r\nIf the address-of-record under registration does not have any\r\n   associated URIs, the P-Associated-URI header field SHALL NOT be\r\n   included.\r\n...\r\n\r\nMoreover, we can say RFC 3455 has same errata based on this analysis.", "submit_date": "2015-11-20", "submitter_name": "Dongo Yi", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4541", "doc-id": "RFC5755", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.4", "orig_text": "      name           id-ce-authorityInfoAccess\r\n      OID            { id-pe 1 }\r\n", "correct_text": "      name           id-pe-authorityInfoAccess\r\n      OID            { id-pe 1 }\r\n", "notes": "id-pe-authorityInfoAccess OBJECT IDENTIFIER ::= { id-pe 1 } is defined in http://tools.ietf.org/html/rfc5280#section-4.2.2.1", "submit_date": "2015-11-20", "submitter_name": "Vlad Semenov", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7079", "doc-id": "RFC6482", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   Before a relying party can use a ROA to validate a routing\r\n   announcement, the relying party MUST first validate the ROA.  To\r\n   validate a ROA, the relying party MUST perform all the validation\r\n   checks specified in [RFC6488] as well as the following additional\r\n   ROA-specific validation step.\r\n\r\n   o  The IP address delegation extension [RFC3779] is present in the\r\n      end-entity (EE) certificate (contained within the ROA), and each\r\n      IP address prefix(es) in the ROA is contained within the set of IP\r\n      addresses specified by the EE certificate's IP address delegation\r\n      extension.", "correct_text": "   Before a relying party can use a ROA to validate a routing\r\n   announcement, the relying party MUST first validate the ROA.  To\r\n   validate a ROA, the relying party MUST perform all the validation\r\n   checks specified in [RFC6488] as well as the following additional\r\n   ROA-specific validation step.\r\n\r\n   o  The IP address delegation extension [RFC3779] is present in the\r\n      end-entity (EE) certificate (contained within the ROA), and each\r\n      IP address prefix(es) in the ROA is contained within the set of IP\r\n      addresses specified by the EE certificate's IP address delegation\r\n      extension.\r\n   o  The AS Resources extension is not used in Route Origin Authorizations\r\n      and MUST be omitted.", "notes": "The ROA RFC is a bit under-specified compared to other RPKI Signed Object profile definitions. (For example, RFC 8209 \u00a7 3.1.3.4 is less ambiguous on the matter of RFC3779 extensions.)\n --VERIFIER NOTES-- \nThis is a material (albeit small) change to the spec and doesn't appear to reflect the WG consensus at time of publication. Therefore rejecting, see https://mailarchive.ietf.org/arch/msg/sidr/A_2jMTLbpgpK1H0G3QsVJ44T-kE/ as well.", "submit_date": "2022-08-10", "submitter_name": "Job Snijders", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-09-06 18:54:33"}, {"errata_id": "4643", "doc-id": "RFC6030", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.3.4", "orig_text": "...\r\n      'CheckDigit':  This attribute indicates whether a device needs to\r\n         check the appended Luhn check digit, as defined in\r\n         [ISOIEC7812], contained in a challenge.\r\n...\r\n      'CheckDigit':  This attribute indicates whether the device needs\r\n         to append a Luhn check digit, as defined in [ISOIEC7812], to\r\n         the response.\r\n...", "correct_text": "...\r\n      'CheckDigits':  This attribute indicates whether a device needs to\r\n         check the appended Luhn check digit, as defined in\r\n         [ISOIEC7812], contained in a challenge.\r\n...\r\n      'CheckDigits':  This attribute indicates whether the device needs\r\n         to append a Luhn check digit, as defined in [ISOIEC7812], to\r\n         the response.\r\n...", "notes": "The text notes the singular CheckDigit while the schema specifies the plural CheckDigits. Either the text or the schema should be changed. Some implementations in the while seem to use the plural form.", "submit_date": "2016-03-19", "submitter_name": "Arthur de Jong", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4550", "doc-id": "RFC4384", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "The chart at the bottom of 4.1:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |      0x00     |      0x0008   |           0x2A7C              |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |      0x00     |      0x00     |           0x10F2              |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |      0x00     |      0x08     |           0x2A7C              |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |      0x00     |      0x00     |           0x10F2              |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The second group has a hex value that looks like two octets: \"0x0008\". If I am interpreting the chart, extended community RFCs, and the extended community IANA registry correctly, the second group should be a single octet (i.e., \"0x08\").\r\n\r\nAlso, the same error is in the Section 4.2 chart.\r\n\r\nWarren Kumari: I've marked this Verified, and retained the previous rejection note below for transparency.\r\n\r\nSee registry at: https://www.iana.org/assignments/bgp-extended-communities/bgp-extended-communities.xhtml#trans-two-octet-as for details, and also thread at: https://mailarchive.ietf.org/arch/msg/grow/p0NDCuSN8YfvVqG1mlyGv0b3-Ng/\r\n\r\n\r\n\r\n\r\n --PREVIOUS VERIFIER NOTES-- \r\nThe    Transitive Two-Octet AS-Specific Extended Community Sub-Types registry specifies the low order byte as it notes:\r\n\r\nReference\r\n[RFC7153]\r\nNote\r\nThis registry contains values of the second octet (the \"Sub-Type\" \r\nfield) of an extended community when the value of the first \r\noctet (the \"Type\" field) is 0x00.\r\n\r\nso the diagram which includes both is correct but obviously somewhat hard to read since it contains both bytes. I think this proposed text ads little additional clarity.", "submit_date": "2015-12-01", "submitter_name": "Warren Turkal", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2023-02-06 14:51:06"}, {"errata_id": "4544", "doc-id": "RFC6241", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   XML subtree filtering is a mechanism that allows an application to\r\n   select particular XML subtrees to include in the <rpc-reply> for a\r\n   <get> or <get-config> operation.  A small set of filters for\r\n   inclusion, simple content exact-match, and selection is provided,\r\n   which allows some useful, but also very limited, selection\r\n   mechanisms.  The server does not need to utilize any data-model-\r\n   specific semantics during processing, allowing for simple and\r\n   centralized implementation strategies.\r\n\r\n   Conceptually, a subtree filter is comprised of zero or more element\r\n   subtrees, which represent the filter selection criteria.  At each\r\n   containment level within a subtree, the set of sibling nodes is\r\n   logically processed by the server to determine if its subtree and\r\n   path of elements to the root are included in the filter output.\r\n\r\n   Each node specified in a subtree filter represents an inclusive\r\n   filter.  Only associated nodes in underlying data model(s) within the\r\n   specified datastore on the server are selected by the filter.  A node\r\n   is selected if it matches the selection criteria and hierarchy of\r\n   elements given in the filter data, except that the filter absolute\r\n   path name is adjusted to start from the layer below <filter>.\r\n\r\n   Response messages contain only the subtrees selected by the filter.\r\n   Any selection criteria that were present in the request, within a\r\n   particular selected subtree, are also included in the response.  Note\r\n   that some elements expressed in the filter as leaf nodes will be\r\n   expanded (i.e., subtrees included) in the filter output.  Specific\r\n   data instances are not duplicated in the response in the event that\r\n   the request contains multiple filter subtree expressions that select\r\n   the same data.", "correct_text": "   XML subtree filtering is a mechanism that allows an application to\r\n   select particular XML subtrees to include in the <rpc-reply> for a\r\n   <get> or <get-config> operation.  A small set of filters for\r\n   inclusion, simple content exact-match, and selection is provided,\r\n   which allows some useful, but also very limited, selection\r\n   mechanisms.  The server does not need to utilize any data-model-\r\n   specific semantics during processing, allowing for simple and\r\n   centralized implementation strategies.\r\n\r\n   Conceptually, a subtree filter is comprised of zero or more element\r\n   subtrees, which represent the filter selection criteria.  At each\r\n   containment level within a subtree, the set of sibling nodes is\r\n   logically processed by the server to determine if its subtree and\r\n   path of elements to the root are included in the filter output.\r\n\r\n   Each node specified in a subtree filter represents an inclusive\r\n   filter.  Only associated nodes in underlying data model(s) within the\r\n   specified datastore on the server are selected by the filter.  A node\r\n   is selected if it matches the selection criteria and hierarchy of\r\n   elements given in the filter data, except that the filter absolute\r\n   path name is adjusted to start from the layer below <filter>.\r\n\r\n   Response messages contain only the subtrees selected by the filter.\r\n   Any selection criteria that were present in the request, within a\r\n   particular selected subtree, are also included in the response.  Note\r\n   that some elements expressed in the filter as leaf nodes will be\r\n   expanded (i.e., subtrees included) in the filter output.  Specific\r\n   data instances are not duplicated in the response in the event that\r\n   the request contains multiple filter subtree expressions that select\r\n   the same data.\r\n\r\n   When a node in the subtree filter is unknown, the server sends a \r\n   <rpc-error> as reply with \"unknown-element\" error-tag. In case of\r\n   <get-config> RPC, if the subtree filter contains a node that is\r\n   not a configuration node, the server sends <rpc-error> as reply\r\n   with \"bad-element\" error-tag. ", "notes": "It is not clear in the RFC what a netconf server should do when \r\nit encounters invalid nodes in a subtree filter in case of \r\nget/get-config RPC.\r\n --VERIFIER NOTES-- \r\nI think the text is clear - it says that if the element \"exactly\r\nmatches a corresponding portion of the supported data model\" it is\r\nincluded.  If it is not even in the server's schema, it doesn't match\r\nthe \"supported data model\".\r\n\r\nXPath filtering works the same way; elements that are not part of the\r\ndata model simply won't match, without producing an error.", "submit_date": "2015-11-24", "submitter_name": "Keshava Bhat", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4546", "doc-id": "RFC5054", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6", "orig_text": "B = k*v + g^b % N", "correct_text": "B = ( k*v + g^b ) % N", "notes": "The customary binding is that + has lower priority than % and so the default reading of the expression would be \r\nB = k*v + ( g^b % N )\r\nThat is inconsistent with the existence of PAD(B) and the size of B in the test vectors, so the context hints at proper brackets, but this may still lead to implementation errors (of which I actually ran into an example).\r\n\r\nPaul Wouters (AD): This errata is correct, but note that this RFC is applicable only for TLS < 1.3. For TLS 1.3, one needs to use a PAKE as replacement, such as those defined in RFC8492. As such, this errata is left as Verified as there won't be a document update for this document.", "submit_date": "2015-11-30", "submitter_name": "Rick van Rein", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 02:23:23"}, {"errata_id": "4545", "doc-id": "RFC5570", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.1.7", "orig_text": "", "correct_text": "Add the following clarifying text:\r\n\r\nWhile the code listed in RFC 1662 Appendix C reportedly does not \r\nnatively use IETF Network Byte Order, the CRC generated using the \r\nalgorithm from RFC 1662, Appendix C, MUST be stored on-the-wire \r\nin Network Byte Order in the \"16-bit Checksum Field\" defined by \r\nRFC 5570, Section 5.1.7, in order to remain consistent with all \r\nother fields in the RFC 5570 CALIPSO option.  \r\n\r\nNetwork Byte Order is defined in RFC 791, Appendix B.\r\n\r\nAs an implementation note, at least one implementer has found \r\nthat in his implementation it is easiest to use the RFC 1662,\r\nAppendix C code as-is for the purposes of generating and calculating \r\nthe checksum.  That implementation reportedly has code that on \r\npacket creation writes the generated checksum into this field --in \r\nNetwork Byte Order-- prior to packet transmission.  The same \r\nimplementation reportedly has code that on packet reception reads\r\nthe transmitted checksum in Network Byte Order and then locally \r\ntransforms the value into RFC 1662, Appendix C, byte order \r\n(i.e. for the purpose of checksum verification upon packet reception\r\nas per RFC 5570, Section 5.1, paragraph 2).", "notes": "An implementer was confused about whether Network Byte Order applied \r\nto all fields in the CALIPSO option defined in RFC 5570.  This erratum clarifies \r\nthat Network Byte Order does apply to all fields in the RFC 5570 CALIPSO \r\noption.", "submit_date": "2015-11-24", "submitter_name": "R. Atkinson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4551", "doc-id": "RFC2217", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "0", "orig_text": "Remove Service", "correct_text": "Remote Service", "notes": "Definition of Terms contains a simple spelling error. Illustration on next page shows correct spelling.", "submit_date": "2015-12-04", "submitter_name": "Marko Kohtala", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-05-10 00:05:16"}, {"errata_id": "4649", "doc-id": "RFC5002", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "The following is an example of a P-Profile-Key header field that\r\ncontains a Wildcarded Public Service Identity:", "correct_text": "If the URI contains a comma, question mark or semicolon, the\r\nURI MUST be enclosed in angle brackets (< and >).\r\n\r\nThe following is an example of a P-Profile-Key header field that\r\ncontains a Wildcarded Public Service Identity:", "notes": "If addr-spec is used when there are parameters, it is ambiguous if the parameters are URI parameters or header parameters.  For consistency with RFC 3261 section 20, the same bracket rule is indicated even if comma and question mark do not cause an issue.", "submit_date": "2016-03-29", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 10:56:16"}, {"errata_id": "4576", "doc-id": "RFC1997", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Well-known Communities\r\n\r\n   The following communities have global significance and their\r\n   operations shall be implemented in any community-attribute-aware BGP\r\n   speaker.\r\n\r\nNO_EXPORT (0xFFFFFF01)\r\n         All routes received carrying a communities attribute\r\n         containing this value MUST NOT be advertised outside a BGP\r\n         confederation boundary (a stand-alone autonomous system that\r\n         is not part of a confederation should be considered a\r\n         confederation itself).\r\nNO_ADVERTISE (0xFFFFFF02)\r\n         All routes received carrying a communities attribute\r\n         containing this value MUST NOT be advertised to other BGP\r\n         peers.\r\nNO_EXPORT_SUBCONFED (0xFFFFFF03)\r\n         All routes received carrying a communities attribute\r\n         containing this value MUST NOT be advertised to external BGP\r\n         peers (this includes peers in other members autonomous\r\n         systems inside a BGP confederation).", "correct_text": "Well-known Communities\r\n\r\n   The following communities have global significance and their\r\n   operations shall be implemented in any community-attribute-aware BGP\r\n   speaker.\r\n\r\nNO_EXPORT (0xFFFFFF01)\r\n         All routes received carrying a communities attribute\r\n         containing this value MUST NOT be advertised to external BGP\r\n         peers (this includes peers in other members autonomous\r\n         systems inside a BGP confederation).  \r\nNO_ADVERTISE (0xFFFFFF02)\r\n         All routes received carrying a communities attribute\r\n         containing this value MUST NOT be advertised to other BGP\r\n         peers.\r\nNO_EXPORT_SUBCONFED (0xFFFFFF03)\r\n         All routes received carrying a communities attribute\r\n         containing this value MUST NOT be advertised outside a BGP\r\n         confederation boundary (a stand-alone autonomous system that\r\n         is not part of a confederation should be considered a\r\n         confederation itself).", "notes": "Definitions of NO_EXPORT and NO_EXPORT_SUBCONFED are interchanged in the original text.\r\n\r\n=== (Alvaro Retana) ===\r\n\r\nAfter some research and discussion with the WG [1], I'm rejecting this report.\r\n\r\n[1] https://www.ietf.org/mail-archive/web/idr/current/msg15364.html\n --VERIFIER NOTES-- \n   After some research and discussion with the WG [1], I'm rejecting this report.\r\n\r\n[1] https://www.ietf.org/mail-archive/web/idr/current/msg15364.html\r\n", "submit_date": "2016-01-02", "submitter_name": "Gjoko Stamenkov", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4577", "doc-id": "RFC3454", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   Some characters are only useful in line-based text, and are otherwise\r\n   invisible and ignored.\r\n\r\n   00AD; SOFT HYPHEN\r\n   1806; MONGOLIAN TODO SOFT HYPHEN\r\n   200B; ZERO WIDTH SPACE\r\n   2060; WORD JOINER\r\n   FEFF; ZERO WIDTH NO-BREAK SPACE", "correct_text": "   Some characters are only useful in line-based text, and are otherwise\r\n   invisible and ignored.\r\n\r\n   00AD; SOFT HYPHEN\r\n   200B; ZERO WIDTH SPACE\r\n   2060; WORD JOINER\r\n   FEFF; ZERO WIDTH NO-BREAK SPACE", "notes": "This issue has been reported to the unicode consortium (http://www.unicode.org/L2/L2015/15277-pubrev.html), according to which: U+1806 is not a control character; RFC 3454 is mistaken in mapping it to nothing, since the character always has a distinct visual appearance; For more information about the character, see page 528 of Core Specification, Version 8.0.", "submit_date": "2016-01-04", "submitter_name": "Lo\u00efc Jonas Etienne", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4578", "doc-id": "RFC7303", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "In addition to the changes described above, the change controller has\r\nbeen changed to be the World Wide Web Consortium (W3C).\r\n", "correct_text": "In addition to the changes described above, the change controller for\r\nthe '+xml' Structured Syntax Suffix has been changed to be the World\r\nWide Web Consortium (W3C).\r\n", "notes": "At https://mailarchive.ietf.org/arch/msg/lager/hRVFkda9GKFTYeBcmK2Ge9OdvoA, the sentence was misread to apply to all registrations with a +xml suffix, rather than only to the registration of the suffix itself.", "submit_date": "2016-01-05", "submitter_name": "Martin D\u00fcrst", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 20:00:45"}, {"errata_id": "4611", "doc-id": "RFC7719", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "CNAME:  \"It is traditional to refer to the owner of a CNAME record as\r\n   'a CNAME'.  This is unfortunate, as 'CNAME' is an abbreviation of\r\n   'canonical name', and the owner of a CNAME record is most certainly\r\n   not a canonical name.\"  (Quoted from [RFC2181], Section 10.1.1)\r\n", "correct_text": "CNAME:  \"It is traditional to refer to the label of a CNAME record as\r\n   'a CNAME'.  This is unfortunate, as 'CNAME' is an abbreviation of\r\n   'canonical name', and the label of a CNAME record is an alias, not\r\n   a canonical name.\"  (Quoted from [RFC2181], Section 10.1.1)", "notes": "Incorrect quote from RFC 2181.\n --VERIFIER NOTES-- \n Not a technical erratum.\r\n\r\nis corrected already in \r\n\r\nhttps://tools.ietf.org/html/draft-ietf-dnsop-terminology-bis-05\r\n\r\nwhich  should be examined for consistency\r\n", "submit_date": "2016-02-02", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4650", "doc-id": "RFC5360", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.9.3", "orig_text": "The following is an example of a Permission-Missing header field:", "correct_text": "If the URI contains a comma, question mark or semicolon, the\r\nURI MUST be enclosed in angle brackets (< and >).\r\n\r\nThe following is an example of a Permission-Missing header field:", "notes": "Comma and semicolon can cause decode ambiguities when the header contains addr-spec values instead of name-addr values.  For consistency with RFC 3261 section 20, the same bracket rule is indicated to resolve the ambiguity.", "submit_date": "2016-03-29", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4651", "doc-id": "RFC5318", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "The members P-Header parameter MUST contain a cid-url, which is\r\ndefined in RFC 2392 [2].", "correct_text": "The members P-Header parameter MUST contain a cid-url, which is\r\ndefined in RFC 2392 [2].\r\n\r\nIf the URI contains a comma, question mark or semicolon, the URI\r\nMUST be enclosed in angle brackets (< and >).", "notes": "Comma and semicolon can cause decode ambiguities when the header contains addr-spec values instead of name-addr values.  For consistency with RFC 3261 section 20, the same bracket rule is indicated to resolve the ambiguity.", "submit_date": "2016-03-29", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 10:56:42"}, {"errata_id": "4652", "doc-id": "RFC3515", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1", "orig_text": "The Refer-To header field MAY be encrypted as part of end-to-end\r\nencryption.", "correct_text": "If the URI contains a comma, question mark or semicolon, the URI\r\nMUST be enclosed in angle brackets (< and >).\r\n\r\nThe Refer-To header field MAY be encrypted as part of end-to-end\r\nencryption.", "notes": "If addr-spec is used when there are parameters, it is ambiguous if the parameters are URI parameters or header parameters.  For consistency with RFC 3261 section 20, the same bracket rule is indicated even if comma and question mark do not cause an issue.", "submit_date": "2016-03-30", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:43:10"}, {"errata_id": "8269", "doc-id": "RFC8995", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "\"BRSKI\", pronounced like \"brewski\", is a colloquial term for beer\r\nin Canada and parts of the Midwestern United States [brewski].", "correct_text": "\"BRSKI\" is pronounced \"brewski\", a colloquial term for beer\r\nin Canada and parts of the Midwestern United States [brewski].", "notes": "The original sentence structure here implies the \"BRSKI\" is the colloquial term.", "submit_date": "2025-01-28", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-02-01 18:32:19"}, {"errata_id": "4972", "doc-id": "RFC3280", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.1.5", "orig_text": "   id-ce-certificatePolicies OBJECT IDENTIFIER ::=  { id-ce 32 }\r\n\r\n   anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificate-policies 0 }", "correct_text": "   id-ce-certificatePolicies OBJECT IDENTIFIER ::=  { id-ce 32 }\r\n\r\n   anyPolicy OBJECT IDENTIFIER ::= { id-ce-certificatePolicies 0 }", "notes": "The ASN.1 did not compile due to a missing identifier.  The corrected text does also occur in A.2.\r\n\r\nPaul Wouters (AD): This is resolved in RFC 5280 which obsoletes this RFC.", "submit_date": "2017-03-17", "submitter_name": "Rick van Rein", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-12 20:37:00"}, {"errata_id": "4600", "doc-id": "RFC3262", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "The provisional response to be sent reliably is constructed by the\r\nUAS core according to the procedures of Section 8.2.6 of RFC 3261.\r\nIn addition, it MUST contain a Require header field containing the\r\noption tag 100rel, and MUST include an RSeq header field.  The value\r\nof the header field for the first reliable provisional response in a\r\ntransaction MUST be between 1 and 2**31 - 1.  It is RECOMMENDED that\r\nit be chosen uniformly in this range.  The RSeq numbering space is\r\nwithin a single transaction.  This means that provisional responses\r\nfor different requests MAY use the same values for the RSeq number.", "correct_text": "The provisional response to be sent reliably is constructed by the\r\nUAS core according to the procedures of Section 8.2.6 of RFC 3261.\r\nIn addition, it MUST contain a Require header field containing the\r\noption tag 100rel, and MUST include an RSeq header field.  The\r\nvalue of the header field for the first reliable provisional \r\nresponse in a transaction MUST be between 1 and 2**31 - 1.  It is\r\nRECOMMENDED that it be chosen uniformly in this range. The RSeq \r\nnumbering space is within a single transaction. This means that\r\nthe RSeq value of a provisional response within a fork of a request\r\nis independent of the RSeq value of a provisional response within \r\nany other fork of that request, or for the responses for any other\r\nrequest. It thus may be higher, lower, or the same as any other such\r\nRSeq value.", "notes": "", "submit_date": "2016-01-25", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4601", "doc-id": "RFC3262", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "If a provisional response is received for an initial request, and\r\nthat response contains a Require header field containing the option\r\ntag 100rel, the response is to be sent reliably.  If the response is\r\na 100 (Trying) (as opposed to 101 to 199), this option tag MUST be\r\nignored, and the procedures below MUST NOT be used.\r\n", "correct_text": "If a provisional response is received for an initial request, and\r\nthat response contains a Require header field containing the option\r\ntag 100rel, the response was sent by the UAS reliably.  If the\r\nresponse is a 100 (Trying) (as opposed to 101 to 199), this option\r\ntag MUST be ignored, and the procedures below MUST NOT be used.\r\n", "notes": "", "submit_date": "2016-01-25", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4602", "doc-id": "RFC3262", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "Assuming the response is to be transmitted reliably, the UAC MUST\r\ncreate a new request with method PRACK.  This request is sent within\r\nthe dialog associated with the provisional response (indeed, the\r\nprovisional response may have created the dialog).  PRACK requests\r\nMAY contain bodies, which are interpreted according to their type and\r\ndisposition.", "correct_text": "Assuming the response was transmitted reliably by the UAS, the UAC\r\nMUST create a new request with method PRACK.  This request is sent\r\nwithin the dialog associated with the provisional response (indeed,\r\nthe provisional response may have created the dialog). PRACK \r\nrequests MAY contain bodies, which are interpreted according to\r\ntheir type and disposition.\r\n", "notes": "", "submit_date": "2016-01-25", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4654", "doc-id": "RFC6550", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2, 5.1, 6.3", "orig_text": "Section 2 defines DODAGID:\r\n\r\n   DODAGID: A DODAGID is the identifier of a DODAG root.  The DODAGID is\r\n         unique within the scope of a RPL Instance in the LLN.  The\r\n         tuple (RPLInstanceID, DODAGID) uniquely identifies a DODAG.\r\n\r\n", "correct_text": "DODAGID: A DODAGID is the identifier of a DODAG root.  \r\n  The DODAGID MUST be a reachable IPv6 address of the root node.\r\n  The DODAG MUST be unique within the scope of a RPL Instance \r\n  in the LLN. The tuple (RPLInstanceID, DODAGID) uniquely \r\n  identifies a DODAG.\r\n\r\n", "notes": "section 5.1, and 6.3 also offered definitions of DODAGID, the above text summarizes those sections.", "submit_date": "2016-04-04", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4655", "doc-id": "RFC6773", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "Network optimisations for DCCP-STP and UDP may need to be updated to \r\nallow these optimisations to take advantage of DCCP-UDP.", "correct_text": "Network optimisations for DCCP-STD and UDP may need to be updated to \r\nallow these optimisations to take advantage of DCCP-UDP.", "notes": "\"DCCP-STP\" is nowhere defined, and so is presumably a typo for \"DCCP-STD\".", "submit_date": "2016-04-05", "submitter_name": "Timothy Pederick", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-12-19 15:35:12"}, {"errata_id": "4656", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "6.2.  Acknowledgement on Reception of DATA Chunks\r\n\r\n   The SCTP endpoint MUST always acknowledge the reception of each valid\r\n   DATA chunk when the DATA chunk received is inside its receive window.\r\n\r\n   When the receiver's advertised window is 0, the receiver MUST drop\r\n   any new incoming DATA chunk with a TSN larger than the largest TSN\r\n   received so far.  If the new incoming DATA chunk holds a TSN value\r\n   less than the largest TSN received so far, then the receiver SHOULD\r\n   drop the largest TSN held for reordering and accept the new incoming\r\n   DATA chunk.  In either case, if such a DATA chunk is dropped, the\r\n   receiver MUST immediately send back a SACK with the current receive\r\n   window showing only DATA chunks received and accepted so far.  The\r\n   dropped DATA chunk(s) MUST NOT be included in the SACK, as they were\r\n   not accepted.  The receiver MUST also have an algorithm for\r\n   advertising its receive window to avoid receiver silly window\r\n   syndrome (SWS), as described in [RFC0813].  The algorithm can be\r\n   similar to the one described in Section 4.2.3.3 of [RFC1122].\r\n\r\n   The guidelines on delayed acknowledgement algorithm specified in\r\n   Section 4.2 of [RFC2581] SHOULD be followed.  Specifically, an\r\n   acknowledgement SHOULD be generated for at least every second packet\r\n   (not every second DATA chunk) received, and SHOULD be generated\r\n   within 200 ms of the arrival of any unacknowledged DATA chunk.  In\r\n   some situations, it may be beneficial for an SCTP transmitter to be\r\n   more conservative than the algorithms detailed in this document\r\n   allow.  However, an SCTP transmitter MUST NOT be more aggressive than\r\n   the following algorithms allow.\r\n\r\n   An SCTP receiver MUST NOT generate more than one SACK for every\r\n   incoming packet, other than to update the offered window as the\r\n   receiving application consumes new data.\r\n\r\n   IMPLEMENTATION NOTE: The maximum delay for generating an\r\n   acknowledgement may be configured by the SCTP administrator, either\r\n   statically or dynamically, in order to meet the specific timing\r\n   requirement of the protocol being carried.\r\n\r\n   An implementation MUST NOT allow the maximum delay to be configured\r\n   to be more than 500 ms.  In other words, an implementation MAY lower\r\n   this value below 500 ms but MUST NOT raise it above 500 ms.\r\n\r\n[ remaining of the section unchanged ]\r\n\r\n***********************************************************************\r\n15.  Suggested SCTP Protocol Parameter Values\r\n\r\n   The following protocol parameters are RECOMMENDED:\r\n\r\n      RTO.Initial - 3 seconds\r\n      RTO.Min - 1 second\r\n      RTO.Max - 60 seconds\r\n      Max.Burst - 4\r\n      RTO.Alpha - 1/8\r\n      RTO.Beta - 1/4\r\n      Valid.Cookie.Life - 60 seconds\r\n      Association.Max.Retrans - 10 attempts\r\n      Path.Max.Retrans - 5 attempts (per destination address)\r\n      Max.Init.Retransmits - 8 attempts\r\n      HB.interval - 30 seconds\r\n      HB.Max.Burst - 1\r\n\r\n   IMPLEMENTATION NOTE: The SCTP implementation may allow ULP to\r\n   customize some of these protocol parameters (see Section 10).\r\n\r\n   Note: RTO.Min SHOULD be set as recommended above.", "correct_text": "6.2.  Acknowledgement on Reception of DATA Chunks\r\n\r\n   The SCTP endpoint MUST always acknowledge the reception of each valid\r\n   DATA chunk when the DATA chunk received is inside its receive window.\r\n\r\n   When the receiver's advertised window is 0, the receiver MUST drop\r\n   any new incoming DATA chunk with a TSN larger than the largest TSN\r\n   received so far.  If the new incoming DATA chunk holds a TSN value\r\n   less than the largest TSN received so far, then the receiver SHOULD\r\n   drop the largest TSN held for reordering and accept the new incoming\r\n   DATA chunk.  In either case, if such a DATA chunk is dropped, the\r\n   receiver MUST immediately send back a SACK with the current receive\r\n   window showing only DATA chunks received and accepted so far.  The\r\n   dropped DATA chunk(s) MUST NOT be included in the SACK, as they were\r\n   not accepted.  The receiver MUST also have an algorithm for\r\n   advertising its receive window to avoid receiver silly window\r\n   syndrome (SWS), as described in [RFC0813].  The algorithm can be\r\n   similar to the one described in Section 4.2.3.3 of [RFC1122].\r\n\r\n   The guidelines on delayed acknowledgement algorithm specified in\r\n   Section 4.2 of [RFC2581] SHOULD be followed.  Specifically, an\r\n   acknowledgement SHOULD be generated for at least every second packet\r\n   (not every second DATA chunk) received, and SHOULD be generated\r\n   within 200 ms of the arrival of any unacknowledged DATA chunk.  In\r\n   some situations, it may be beneficial for an SCTP transmitter to be\r\n   more conservative than the algorithms detailed in this document\r\n   allow.  However, an SCTP transmitter MUST NOT be more aggressive than\r\n   the following algorithms allow.\r\n\r\n   An SCTP receiver MUST NOT generate more than one SACK for every\r\n   incoming packet, other than to update the offered window as the\r\n   receiving application consumes new data.\r\n\r\n   IMPLEMENTATION NOTE: The maximum delay for generating an\r\n   acknowledgement may be configured by the SCTP administrator, either\r\n   statically or dynamically, in order to meet the specific timing\r\n   requirement of the protocol being carried.\r\n\r\n   An implementation MUST NOT allow the maximum delay (protocol \r\n   parameter 'SACK.Delay') to be configured to be more than 500 ms.\r\n   In other words, an implementation MAY lower the value of \r\n   'SACK.Delay' below 500 ms but MUST NOT raise it above 500 ms.\r\n\r\n[ remaining of the section unchanged ]\r\n\r\n***********************************************************************\r\n15.  Suggested SCTP Protocol Parameter Values\r\n\r\n   The following protocol parameters are RECOMMENDED:\r\n\r\n      RTO.Initial - 3 seconds\r\n      RTO.Min - 1 second\r\n      RTO.Max - 60 seconds\r\n      Max.Burst - 4\r\n      RTO.Alpha - 1/8\r\n      RTO.Beta - 1/4\r\n      Valid.Cookie.Life - 60 seconds\r\n      Association.Max.Retrans - 10 attempts\r\n      Path.Max.Retrans - 5 attempts (per destination address)\r\n      Max.Init.Retransmits - 8 attempts\r\n      HB.interval - 30 seconds\r\n      HB.Max.Burst - 1\r\n      SACK.Delay - 200 milliseconds\r\n\r\n   IMPLEMENTATION NOTE: The SCTP implementation may allow ULP to\r\n   customize some of these protocol parameters (see Section 10).\r\n\r\n   Note: RTO.Min SHOULD be set as recommended above.", "notes": "In section 6.2, the name 'SACK.Delay' is given to the protocol parameter that indicate themaximum delay for generating a SACK.\r\n\r\nIn section 15, the list of SCTP protocol parameters and associated recommended value is not complete. The maximum delay for generating an acknowledgement ('SACK.Delay') is missing from this list.", "submit_date": "2016-04-06", "submitter_name": "Lionel Morand", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4657", "doc-id": "RFC2460", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "", "correct_text": "   Extension headers must never be inserted by any node other than the\r\n   source of the packet.  IP Encapsulation must be used to meet any\r\n   requirement for inserting headers, for example, as defined in\r\n   [RFC2473].\r\n", "notes": "This is being handled in the 2460bis work.", "submit_date": "2016-04-07", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4658", "doc-id": "RFC7469", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.  Reporting Pin Validation Failure", "orig_text": "  {\r\n    \"date-time\": \"2014-04-06T13:00:50Z\",\r\n    \"hostname\": \"www.example.com\",\r\n    \"port\": 443,\r\n    \"effective-expiration-date\": \"2014-05-01T12:40:50Z\"\r\n", "correct_text": "  {\r\n    \"date-time\": \"2014-04-06T13:00:50Z\",\r\n    \"hostname\": \"www.example.com\",\r\n    \"port\": 443,\r\n    \"effective-expiration-date\": \"2014-05-01T12:40:50Z\",\r\n ", "notes": "Missing comma after \"effective-expiration-date\": \"2014-05-01T12:40:50Z\" in JSON at              Figure 8: Pin Validation Failure Report Example", "submit_date": "2016-04-08", "submitter_name": "Jxck", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7368", "doc-id": "RFC2131", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "DHCPNAK      -  Server to client indicating client's notion of network\r\n                   address is incorrect (e.g., client has moved to new\r\n                   subnet) or client's lease as expired", "correct_text": "DHCPNAK      -  Server to client indicating client's notion of network\r\n                   address is incorrect (e.g., client has moved to new\r\n                   subnet) or client's lease has expired", "notes": "Spelling: \"as expired\" -> \"has expired\". (The original might have been the intended spelling, but grammatically it would make more sense to write \"has\" instead of \"as\" with the verb \"indicate\".)", "submit_date": "2023-02-24", "submitter_name": "Panayiotis Gavriil", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-24 22:26:48"}, {"errata_id": "4603", "doc-id": "RFC3262", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "Once a reliable provisional response is received, retransmissions of\r\nthat response MUST be discarded.  A response is a retransmission when\r\nits dialog ID, CSeq, and RSeq match the original response.  The UAC\r\nMUST maintain a sequence number that indicates the most recently\r\nreceived in-order reliable provisional response for the initial\r\nrequest.  This sequence number MUST be maintained until a final\r\nresponse is received for the initial request.  Its value MUST be\r\ninitialized to the RSeq header field in the first reliable\r\nprovisional response received for the initial request.", "correct_text": "Once a reliable provisional response is received, retransmissions of\r\nthat response MUST be discarded.  A response is a retransmission \r\nwhen its dialog ID, CSeq, and RSeq match the original response. The\r\nUAC MUST maintain, independently for each dialog ID, a sequence\r\nnumber that indicates the most recently received in-order reliable\r\nprovisional response for the initial request.  This sequence number\r\nMUST be maintained until a final response is received for the\r\ninitial request. Its value MUST, for each dialog (or early dialog),\r\nbe initialized to the RSeq header field in the first reliable\r\nprovisional response associated with the dialog received for the\r\ninitial request.\r\n", "notes": "Verifier edit: I removed  two commas around \"associated with the dialog\" from the last sentence of the corrected text.", "submit_date": "2016-01-25", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4604", "doc-id": "RFC3262", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "Handling of subsequent reliable provisional responses for the same\r\ninitial request follows the same rules as above, with the following\r\ndifference: reliable provisional responses are guaranteed to be in\r\norder.  As a result, if the UAC receives another reliable provisional\r\nresponse to the same request, and its RSeq value is not one higher\r\nthan the value of the sequence number, that response MUST NOT be\r\nacknowledged with a PRACK, and MUST NOT be processed further by the\r\nUAC.  An implementation MAY discard the response, or MAY cache the\r\nresponse in the hopes of receiving the missing responses.\r\n", "correct_text": "Subsequent reliable provisional responses for the same initial\r\nrequest are guaranteed  to have been generated by the UAS in the\r\norder of their RSeq values and must be acknowledged in that order.\r\nAs a result, if the UAC receives another reliable provisional\r\nresponse to the same request, and its RSeq value is one higher than\r\nthe value of the previously received RSeq value in the dialog (or \r\nearly dialog), then the new RSeq value is saved and the response is\r\nhandled as described above. If the RSeq value is not one higher than\r\nthe value of the sequence number, that response MUST NOT be\r\nacknowledged with a PRACK, and MUST NOT be processed further by the\r\nUAC. An implementation MAY discard the response, or MAY cache the\r\nresponse to be processed (and acknowledged) after receiving the\r\nmissing responses.", "notes": "", "submit_date": "2016-01-25", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4659", "doc-id": "RFC4577", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.4", "orig_text": "   If a PE attaches to a CE via a link that is in a non-zero area, then\r\n   the PE serves as an ABR for that area.", "correct_text": "   PE always serves as an ABR if it attaches to a CE.", "notes": "Even the PE attaches to a CE via a link that is in backbone area, it should also be thought as an ABR. Otherwise the CE cannot calculate the type 3 LSAs from PE because there is no ABR. \r\n\r\nSection 4.2.3 has the similar description and should also be updated:\r\n   \"If a PE has a link that belongs to a non-zero area, the PE functions\r\n   as an Area Border Router (ABR) for that area.\"\r\n\r\n  --VERIFIER'S NOTES--\r\nAfter discussing with authors, a more preferred revision of the text could be:\r\nSince OSPF VPN-IPv4 routes are advertised as inter-area summary (type 3) LSAs, a PE will act as an ABR for attached CEs.", "submit_date": "2016-04-08", "submitter_name": "Chao Fu", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4660", "doc-id": "RFC7801", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   delta: V_8 -> Q  bijective mapping that maps a binary string from V_8\r\n           into an element from field Q as follows: string\r\n           z_7||...||z_1||z_0, where z_i in {0, 1}, i = 0, ..., 7,\r\n           corresponds to the element z_0+(z_1*theta)+...+(z_7*theta^7)\r\n           belonging to Z,\r\n", "correct_text": "   delta: V_8 -> Q  bijective mapping that maps a binary string from V_8\r\n           into an element from field Q as follows: string\r\n           z_7||...||z_1||z_0, where z_i in {0, 1}, i = 0, ..., 7,\r\n           corresponds to the element z_0+(z_1*theta)+...+(z_7*theta^7)\r\n           belonging to Q,\r\n", "notes": "", "submit_date": "2016-04-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4661", "doc-id": "RFC7600", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "BR(s) and/or N4T64+", "correct_text": "BR(s) and/or NAT64+", "notes": "A minor typo in Figure 1 (s/N4T64+/NAT64+/).", "submit_date": "2016-04-10", "submitter_name": "Masao Uebayashi", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4662", "doc-id": "RFC2460", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "With one exception, extension headers are not examined or processed\r\nby any node along a packet's delivery path, until the packet reaches\r\nthe node (or each of the set of nodes, in the case of multicast)\r\nidentified in the Destination Address field of the IPv6 header.\r\n", "correct_text": "With one exception, extension headers are not examined, processed,\r\nmodified, inserted or deleted\r\nby any node along a packet's delivery path, until the packet reaches\r\nthe node (or each of the set of nodes, in the case of multicast)\r\nidentified in the Destination Address field of the IPv6 header.", "notes": "This is being handled in the 2460bis work.", "submit_date": "2016-04-11", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4954", "doc-id": "RFC7252", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.3", "orig_text": "CoAP does not include a separate way to convey content-encoding\r\ninformation with a request or response, and for that reason the\r\ncontent-encoding is also specified for each identifier (if any).  If\r\nmultiple content-encodings will be used with a media type, then a\r\nseparate Content-Format identifier for each is to be registered.\r\nSimilarly, other parameters related to an Internet media type, such\r\nas level, can be defined for a CoAP Content-Format entry.\r\n\r\n+--------------------------+----------+----+------------------------+\r\n| Media type               | Encoding | ID | Reference              |\r\n+--------------------------+----------+----+------------------------+\r\n", "correct_text": "CoAP does not include a separate way to convey content-coding\r\ninformation with a request or response, and for that reason the\r\ncontent-coding is also specified for each identifier (if any).  If\r\nmultiple content-codings will be used with a media type, then a\r\nseparate Content-Format identifier for each is to be registered.\r\nSimilarly, other parameters related to an Internet media type, such\r\nas level, can be defined for a CoAP Content-Format entry.\r\n\r\n+--------------------------+----------------+----+------------------+\r\n| Content type             | Content coding | ID | Reference        |\r\n+--------------------------+----------------+----+------------------+\r\n", "notes": "A CoAP Content-Format is the combination of an Internet Media Type with an HTTP Content Coding, as correctly explained in the first paragraphs of Section 12.3. However, the next paragraph (the original text above) incorrectly uses the term \"content-encoding\". The correct term is \"content-coding\", as shown in the corrected text.\r\n\r\nExamples for _valid_ CoAP Content-Format registrations:\r\n\r\n- media type \"text/plain; charset=iso-8859-1\" with content-coding \"deflate\"\r\n\r\n- media type \"image/png\" with content-coding \"\" (no content-coding)\r\n\r\n- media type \"image/png\" with content-coding \"identity\" (same as previous, no content-coding)\r\n\r\n- media type \"application/example+xml\" with content-coding \"exi\"\r\n\r\nExamples for _invalid_ CoAP Content-Format registrations:\r\n\r\n- media type \"application/coap-group+json\" with content-coding \"UTF-8\" (UTF-8 is a character encoding, not a content-coding; should be media type \"application/coap-group+json; charset=utf-8\" with content-coding \"identity\")\r\n\r\n- media type \"audio/opus\" with content-coding \"identity\" (\"audio/opus\" has a required parameter \"rate\"; should be media type \"audio/opus; rate=48000\" with content-coding \"identity\")\r\n\r\n- media type \"application/example+xml\" with content-coding \"identity, exi\" (too many content-codings; should be media type \"application/example+xml\" with content-coding \"identity\" and, separately, media type \"application/example+xml\" with content-coding \"exi\")\r\n\r\n- media type \"application/example+exi\" with content-coding \"identity\" (\"+exi\" is not a registered structured syntax suffix at the time of writing of this erratum)\r\n\r\n- media type \"video/ogg\" with content-coding \"exi\" (EXI is a content-coding for XML information)", "submit_date": "2017-02-28", "submitter_name": "Klaus Hartke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:11:47"}, {"errata_id": "4605", "doc-id": "RFC3262", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3, 4", "orig_text": "Section 3:\r\n\r\n   The provisional response to be sent reliably is constructed by the\r\n   UAS core according to the procedures of Section 8.2.6 of RFC 3261.\r\n   In addition, it MUST contain a Require header field containing the\r\n   option tag 100rel, and MUST include an RSeq header field.  The value\r\n   of the header field for the first reliable provisional response in a\r\n   transaction MUST be between 1 and 2**31 - 1.  It is RECOMMENDED that\r\n   it be chosen uniformly in this range.  The RSeq numbering space is\r\n   within a single transaction.  This means that provisional responses\r\n   for different requests MAY use the same values for the RSeq number.\r\n\r\n\r\nSection 4:\r\n\r\n   If a provisional response is received for an initial request, and\r\n   that response contains a Require header field containing the option\r\n   tag 100rel, the response is to be sent reliably.  If the response is\r\n   a 100 (Trying) (as opposed to 101 to 199), this option tag MUST be\r\n   ignored, and the procedures below MUST NOT be used.\r\n\r\n   The provisional response MUST establish a dialog if one is not yet\r\n   created.\r\n\r\n   Assuming the response is to be transmitted reliably, the UAC MUST\r\n   create a new request with method PRACK.  This request is sent within\r\n   the dialog associated with the provisional response (indeed, the\r\n   provisional response may have created the dialog).  PRACK requests\r\n   MAY contain bodies, which are interpreted according to their type and\r\n   disposition.\r\n\r\n   Note that the PRACK is like any other non-INVITE request within a\r\n   dialog.  In particular, a UAC SHOULD NOT retransmit the PRACK request\r\n   when it receives a retransmission of the provisional response being\r\n   acknowledged, although doing so does not create a protocol error.\r\n\r\n   Once a reliable provisional response is received, retransmissions of\r\n   that response MUST be discarded.  A response is a retransmission when\r\n   its dialog ID, CSeq, and RSeq match the original response.  The UAC\r\n   MUST maintain a sequence number that indicates the most recently\r\n   received in-order reliable provisional response for the initial\r\n   request.  This sequence number MUST be maintained until a final\r\n   response is received for the initial request.  Its value MUST be\r\n   initialized to the RSeq header field in the first reliable\r\n   provisional response received for the initial request.\r\n\r\n   Handling of subsequent reliable provisional responses for the same\r\n   initial request follows the same rules as above, with the following\r\n   difference: reliable provisional responses are guaranteed to be in\r\n   order.  As a result, if the UAC receives another reliable provisional\r\n   response to the same request, and its RSeq value is not one higher\r\n   than the value of the sequence number, that response MUST NOT be\r\n   acknowledged with a PRACK, and MUST NOT be processed further by the\r\n   UAC.  An implementation MAY discard the response, or MAY cache the\r\n   response in the hopes of receiving the missing responses.\r\n\r\n", "correct_text": "Section 3:\r\n\r\n   The provisional response to be sent reliably is constructed by the\r\n   UAS core according to the procedures of Section 8.2.6 of RFC 3261.\r\n   In addition, it MUST contain a Require header field containing the\r\n   option tag 100rel, and MUST include an RSeq header field.  The\r\n   value of the header field for the first reliable provisional \r\n   response in a transaction MUST be between 1 and 2**31 - 1.  It is\r\n   RECOMMENDED that it be chosen uniformly in this range. The RSeq \r\n   numbering space is within a single transaction. This means that\r\n   the RSeq value of a provisional response within a fork of a request\r\n   is independent of the RSeq value of a provisional response within \r\n   any other fork of that request, or for the responses for any other\r\n   request. It thus may be higher, lower, or the same as any other such\r\n   RSeq value.\r\n\r\n\r\nSection 4:\r\n\r\n   If a provisional response is received for an initial request, and\r\n   that response contains a Require header field containing the option\r\n   tag 100rel, the response was sent by the UAS reliably.  If the\r\n   response is a 100 (Trying) (as opposed to 101 to 199), this option\r\n   tag MUST be ignored, and the procedures below MUST NOT be used.\r\n\r\n   The provisional response MUST establish a dialog if one is not yet\r\n   created.\r\n\r\n   Assuming the response was transmitted reliably by the UAS, the UAC\r\n   MUST create a new request with method PRACK.  This request is sent\r\n   within the dialog associated with the provisional response (indeed,\r\n   the provisional response may have created the dialog). PRACK \r\n   requests MAY contain bodies, which are interpreted according to\r\n   their type and disposition.\r\n\r\n   Note that the PRACK is like any other non-INVITE request within a\r\n   dialog. In particular, a UAC SHOULD NOT retransmit the PRACK request\r\n   when it receives a retransmission of the provisional response being\r\n   acknowledged, although doing so does not create a protocol error.\r\n\r\n   Once a reliable provisional response is received, retransmissions of\r\n   that response MUST be discarded.  A response is a retransmission \r\n   when its dialog ID, CSeq, and RSeq match the original response. The\r\n   UAC MUST maintain, independently for each dialog ID, a sequence\r\n   number that indicates the most recently received in-order reliable\r\n   provisional response for the initial request.  This sequence number\r\n   MUST be maintained until a final response is received for the\r\n   initial request. Its value MUST, for each dialog (or early dialog),\r\n   be initialized to the RSeq header field in the first reliable\r\n   provisional response, associated with the dialog, received for the\r\n   initial request.\r\n\r\n   Subsequent reliable provisional responses for the same initial\r\n   request are guaranteed  to have been generated by the UAS in the\r\n   order of their RSeq values and must be acknowledged in that order.\r\n   As a result, if the UAC receives another reliable provisional\r\n   response to the same request, and its RSeq value is one higher than\r\n   the value of the previously received RSeq value in the dialog (or \r\n   early dialog), then the new RSeq value is saved and the response is\r\n   handled as described above. If the RSeq value is not one higher than\r\n   the value of the sequence number, that response MUST NOT be\r\n   acknowledged with a PRACK, and MUST NOT be processed further by the\r\n   UAC. An implementation MAY discard the response, or MAY cache the\r\n   response to be processed (and acknowledged) after receiving the\r\n   missing responses.\r\n", "notes": "\n --VERIFIER NOTES-- \nThe erratum is invalid or proposes a significant change to the RFC that should be done by publishing a new RFC that replaces or updates the current one.", "submit_date": "2016-01-05", "submitter_name": "Christer Holmberg", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:26:55"}, {"errata_id": "4609", "doc-id": "RFC2046", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "          particular, formats that employ embeddded binary\r\n", "correct_text": "          particular, formats that employ embedded binary\r\n", "notes": "\"embeddded\" has triple \"d\".", "submit_date": "2016-02-01", "submitter_name": "Oleg Andriyanov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4607", "doc-id": "RFC2076", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.5", "orig_text": "   Address to which notifications       Errors-To:,    Non-standard,\r\n   are to be sent and a request to      Return-        discouraged.\r\n   get delivery notifications.          Receipt-To:\r\n   Internet standards recommend,\r\n   however, the use of RCPT TO and\r\n   Return-Path, not Errors-To, for\r\n   where delivery notifications are\r\n   to be sent.", "correct_text": "   Address to which notifications       Errors-To:,    Non-standard,\r\n   are to be sent and a request to      Return-        discouraged.\r\n   get delivery notifications.          Receipt-To:\r\n   Internet standards recommend,\r\n   however, the use of MAIL FROM\r\n   and  Return-Path, not Errors-To,\r\n   for where delivery notifications\r\n   are to be sent.", "notes": "Notifications and bounces are delivered to \"MAIL FROM\" envelope address of original message.\n --VERIFIER NOTES-- \nReturn-Path *is* where the MAIL FROM address is put into a message header.", "submit_date": "2016-01-29", "submitter_name": "Vladimir Dubrovin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4797", "doc-id": "RFC4211", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   3.  The certificate subject places its name in the Certificate\r\n       Template structure along with the public key.  In this case the\r\n       poposkInput field is omitted from the POPOSigningKey structure.\r\n       The signature field is computed over the DER-encoded certificate\r\n       template structure.", "correct_text": "   3.  The certificate subject places its name in the Certificate\r\n       Template structure along with the public key.  In this case the\r\n       poposkInput field is omitted from the POPOSigningKey structure.\r\n       The signature field is computed over the DER-encoded value of\r\n       certReq", "notes": "The original text conflicts with the following text block (just several lines later).\r\n\r\n\"     The fields of POPOSigningKey have the following meaning:\r\n      ...\r\n \r\n      signature contains the POP value produce.  If poposkInput is\r\n      present, the signature is computed over the DER-encoded value of\r\n      poposkInput.  If poposkInput is absent, the signature is computed\r\n      over the DER-encoded value of certReq.\"", "submit_date": "2016-09-08", "submitter_name": "Lijun Liao", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4798", "doc-id": "RFC4303", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "         * If tunnel mode is being used, then the IPsec implementation\r\n           can add Traffic Flow Confidentiality (TFC) padding (see\r\n           Section 2.4)  after the Payload Data and before the Padding\r\n           (0-255 bytes) field.", "correct_text": "         * If tunnel mode is being used, then the IPsec implementation\r\n           can add Traffic Flow Confidentiality (TFC) padding (see\r\n           Section 2.7)  after the Payload Data and before the Padding\r\n           (0-255 bytes) field.", "notes": "Section 2.4 refers to padding for Encryption. It is section 2.7 which refers to Traffic Flow Confidentiality (TFC) Padding", "submit_date": "2016-09-09", "submitter_name": "Antonios Atlasis", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-11 00:00:03"}, {"errata_id": "4799", "doc-id": "RFC4303", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.6", "orig_text": "   To facilitate the rapid generation and discarding of the padding\r\n   traffic in support of traffic flow confidentiality (see Section 2.4),\r\n   the protocol value 59 (which means \"no next header\") MUST be used to\r\n   designate a \"dummy\" packet.", "correct_text": "   To facilitate the rapid generation and discarding of the padding\r\n   traffic in support of traffic flow confidentiality (see Section 2.7),\r\n   the protocol value 59 (which means \"no next header\") MUST be used to\r\n   designate a \"dummy\" packet.", "notes": "Section 2.4 refers to padding for Encryption. It is section 2.7 which refers to Traffic Flow Confidentiality (TFC) Padding.", "submit_date": "2016-09-09", "submitter_name": "Antonios Atlasis", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-11 00:32:07"}, {"errata_id": "4620", "doc-id": "RFC5515", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.", "orig_text": "   The following AVPs MUST be present in the CSUN:\r\n\r\n      Message Type\r\n\r\n      Connect Speed Update (more than one may be present in the CSUN)\r\n\r\n   Note that the LAC MUST NOT include a Connect Speed Update AVP for\r\n   which it did not send a Connect Speed Update Enable AVP in the prior\r\n   Incoming-Call-Request (ICRQ) control message for the session.", "correct_text": "   The following AVPs MUST be present in the CSUN:\r\n\r\n      Message Type\r\n\r\n      Connect Speed Update (more than one may be present in the CSUN)\r\n\r\n   If a CSUN message contains two or more Connect Speed Update AVPs\r\n   (as updates for two or more sessions in the tunnel), the Session ID\r\n   of the L2TP control message MUST be 0.  It is because a CSUN message\r\n   with several Connect Speed Update AVPs is related to several sessions\r\n   in the tunnel, rather than to a single session. \r\n\r\n   Note that the LAC MUST NOT include a Connect Speed Update AVP for\r\n   which it did not send a Connect Speed Update Enable AVP in the prior\r\n   Incoming-Call-Request (ICRQ) control message for the session.\r\n", "notes": "The suggested additional MUST requirement is important for LAC-LNS\r\noperation in order to avoid arbitrary, opposite and conflicting\r\ninterpretations and implementations of the RFC5515 on LAC and LNS.\n --VERIFIER NOTES-- \n Section 4.1.1.2 of RFC 3931 has reserved that value of 0 for Session ID, this specific value cannot be re-used.", "submit_date": "2016-02-17", "submitter_name": "Jewgenij Bytschkow", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 11:46:13"}, {"errata_id": "4621", "doc-id": "RFC3693", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "This means that Geopriv may not as a general matter, \r\nsecure the Target against general traffic analysis attacks \r\nor other forms of privacy violations.", "correct_text": "This means that Geopriv might not, as a general matter, \r\nsecure the Target against general traffic analysis attacks \r\nor other forms of privacy violations.", "notes": "Aside from the missing comma on the parenthetical, the use of MAY NOT, even uncapitalized, appears to collide with RFC 2119: It's pretty clear the authors intended to say that there may exist conditions in which Geopriv won't secure targets, but the chosen wording, interpreted in context of 2119, means that Geopriv *will not* or *must not* secure Targets, and that interpretation is sort of bogus.\r\n\r\nIn short: May here is directive, rather than predictive/descriptive, which seems what was intended.", "submit_date": "2016-02-17", "submitter_name": "Jay R. Ashworth", "verifier_id": "", "verifier_name": "Alissa Cooper", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7080", "doc-id": "RFC8416", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4.2", "orig_text": "   The above is expressed as a value of the \"bgpsecAssertions\" member,\r\n   as an array of zero or more objects.  Each object MUST contain one\r\n   each of all of the following members:\r\n\r\n   o  An \"asn\" member, whose value is a number.\r\n\r\n   o  An \"SKI\" member, whose value is the Base64 encoding without\r\n      trailing '=' (Section 5 of [RFC4648]) of the certificate's Subject\r\n      Key Identifier as described in Section 4.8.2 of [RFC6487] (This is\r\n      the value of the ASN.1 OCTET STRING without the ASN.1 tag or\r\n      length fields.)\r\n\r\n   o  A \"routerPublicKey\" member, whose value is the Base64 encoding\r\n      without trailing '=' (Section 5 of [RFC4648]) of the equivalent to\r\n      the subjectPublicKeyInfo value of the router certificate's public\r\n      key, as described in [RFC8208].  This is the full ASN.1 DER\r\n      encoding of the subjectPublicKeyInfo, including the ASN.1 tag and\r\n      length values of the subjectPublicKeyInfo SEQUENCE.\r\n", "correct_text": "   The above is expressed as a value of the \"bgpsecAssertions\" member,\r\n   as an array of zero or more objects.  Each object MUST contain one\r\n   each of all of the following members:\r\n\r\n   o  An \"asn\" member, whose value is a number.\r\n\r\n   o  An \"SKI\" member, whose value is the Base64 encoding without\r\n      trailing '=' (Section 5 of [RFC4648]) of the certificate's Subject\r\n      Key Identifier as described in Section 4.8.2 of [RFC6487] (This is\r\n      the value of the ASN.1 OCTET STRING without the ASN.1 tag or\r\n      length fields.)\r\n\r\n   o  A \"routerPublicKey\" member, whose value is the Base64 encoding\r\n      without trailing '=' (Section 5 of [RFC4648]) of the equivalent to\r\n      the subjectPublicKeyInfo value of the router certificate's public\r\n      key, as described in [RFC8208].  This is the full ASN.1 DER\r\n      encoding of the subjectPublicKeyInfo, including the ASN.1 tag and\r\n      length values of the subjectPublicKeyInfo SEQUENCE.\r\n\r\n   In addition, each object MAY contain one optional \"comment\" member,\r\n   whose value is a string.\r\n", "notes": "The \"comment\" member is allowed to appear in every other structure defined by the document, and was clearly intended to be allowed here too, since it appears in the examples presented in sections 3.4.2 and 3.5\r\n\r\n[Warren Kumari: See thread https://mailarchive.ietf.org/arch/msg/sidrops/uEc7K01ex0GJ6tE_FqfDwDTZTws/\r\n\r\nWe are not aware of any implementations which will choke on comments] ", "submit_date": "2022-08-10", "submitter_name": "Ben Maddison", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2022-10-07 16:22:20"}, {"errata_id": "7081", "doc-id": "RFC8754", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "A reduced SRH does not contain the first segment of the related SR\r\nPolicy (the first segment is the one already in the DA of the IPv6\r\nheader), and the Last Entry field is set to n-2, where n is the\r\nnumber of elements in the SR Policy.\r\n", "correct_text": "A reduced SRH does not contain the first segment of the related SR\r\nPolicy (the first segment is the one already in the DA of the IPv6\r\nheader), and the Last Entry field is set to n-2, where n is the\r\nnumber of elements in the SR Policy.\r\n\r\nWhen an SRH includes TLVs and only one 128-bit Segment, the reduced\r\nSRH MUST NOT be used to avoid errors of SRH TLV processing defined\r\nin section 2.1. \r\n", "notes": "When only one single Segment is included in the SRH, the last entry will be 0 forever, so a segment endpoint node cannot specify whether the last Segment is included or removed from the SRH. \r\n\r\nAs defined in section 2.1, only when the header length of SRH larger then (0+1)*2, the TLVs will be processed. \r\n1.\tWhen the Segment is removed, Segment Lefts = Last Entry = 0, each segment endpoint node will skip the bytes 8-16, and then process the following bytes following the TLV processing rules, which will cause errors.\r\n2.\tWhen the segment is not removed, Segment Lefts = Last Entry = 0, each segment endpoint will process the TLVs correctly from byte 8+16. \r\n\r\nChoosing option 2 can avoid processing error of SRH TLVs and be compatible with the current hardware implementation. Thus option 1 MUST be avoid in implementation.\r\n", "submit_date": "2022-08-11", "submitter_name": "Tianran Zhou", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2023-07-23 22:30:32"}, {"errata_id": "4622", "doc-id": "RFC5155", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.8", "orig_text": "7.2.8.  Responding to Queries for NSEC3 Owner Names\r\n\r\n   The owner names of NSEC3 RRs are not represented in the NSEC3 RR\r\n   chain like other owner names.  As a result, each NSEC3 owner name is\r\n   covered by another NSEC3 RR, effectively negating the existence of\r\n   the NSEC3 RR.  This is a paradox, since the existence of an NSEC3 RR\r\n   can be proven by its RRSIG RRSet.\r\n\r\n   If the following conditions are all true:\r\n\r\n   o  the QNAME equals the owner name of an existing NSEC3 RR, and\r\n\r\n   o  no RR types exist at the QNAME, nor at any descendant of QNAME,\r\n\r\n   then the response MUST be constructed as a Name Error response\r\n   (Section 7.2.2).  Or, in other words, the authoritative name server\r\n   will act as if the owner name of the NSEC3 RR did not exist.\r\n", "correct_text": "7.2.8.  Responding to Queries for NSEC3 Owner Names\r\n\r\n   The owner names of NSEC3 RRs are not represented in the NSEC3 RR\r\n   chain like other owner names.  As a result, each NSEC3 owner name is\r\n   covered by another NSEC3 RR, effectively negating the existence of\r\n   the NSEC3 RR.  This is a paradox, since the existence of an NSEC3 RR\r\n   can be proven by its RRSIG RRSet.\r\n\r\n   If the following conditions are all true:\r\n\r\n   o  the QNAME equals the owner name of an existing NSEC3 RR, and\r\n\r\n   o  no RR types exist at the QNAME besides NSEC3, nor at any\r\n      descendant of QNAME,\r\n\r\n   then the response MUST be constructed as a Name Error response\r\n   (Section 7.2.2).  Or, in other words, the authoritative name server\r\n   will act as if the owner name of the NSEC3 RR did not exist.\r\n", "notes": "If the QNAME is equal to the owner name of an existing NSEC3 RR, then the NSEC3 RR type itself will exist at the QNAME, and the second condition will always be false.", "submit_date": "2016-02-18", "submitter_name": "Robert Edmonds", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4623", "doc-id": "RFC5080", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2.1", "orig_text": "   For Accounting-Request packets, the default values for MRC, MRD, and\r\n   MRT SHOULD be zero.  These settings will enable a RADIUS client to\r\n   continue sending accounting requests to a RADIUS server until the\r\n   request is acknowledged.  If any of MRC, MRD, or MRT are non-zero,\r\n   then the accounting information could potentially be discarded\r\n   without being recorded.\r\n", "correct_text": "   For Accounting-Request packets, the default values for MRC, MRD, and\r\n   MRT SHOULD be zero.  These settings will enable a RADIUS client to\r\n   continue sending accounting requests to a RADIUS server until the\r\n   request is acknowledged.  If any of MRC, MRD, or MRT are non-zero,\r\n   then the accounting information could potentially be discarded\r\n   without being recorded.\r\n\r\n  This retransmission behavior can be modified for Accounting-Request \r\n  packets containing Acct-Status-Type of Interim-Update.  A \r\n  \"retransmission\" MAY include updated statistics, but will otherwise be\r\n  treated as a retransmission of the original packet, with timers as \r\n  described above.  Such an updated packet MUST set Acct-Delay-Time \r\n  (if present) to zero, and Event-Timestamp (if present) to the current\r\n  time.  These changes indicate that the statistics contained in the \r\n  packet are new, and were not previously sent.\r\n\r\n  When the NAS sends periodic Accounting-Request packets containing \r\n  Acct-Status-Type of Interim-Update, the NAS SHOULD NOT continue to\r\n  retransmit an old Accounting-Request packet when it is time to send a\r\n  new one.  The old packet SHOULD be discarded, and the new one sent\r\n  in its place.\r\n\r\n  The alternative is for a NAS to send a new Accounting-Request\r\n  packet while it still is trying to send an old one.  This situation\r\n  could lead to the NAS sending multiple Accounting-Request packets\r\n  simultaneously for the same session, leading to congestive collapse\r\n  of the network.\r\n", "notes": "- if we're retransmitting an Accounting-Request packet, it should be acceptable\r\n to update the statistics in it.\r\n\r\n- i.e. there should not be a requirement that the content remain the same.  The \r\nAcct-Delay-Time attribute is changing, so why not other things, too?\r\n\r\n- And MRT of zero for Accounting-Request packet SHOULD NOT mean that the \r\nNAS starts a new retransmission timer every 5 minutes.\r\n\r\n- e.g. if the server is down for 20 minutes, the NAS should have *one* \r\nAccounting-Status packet in it's retransmit queue.  Not 4.", "submit_date": "2016-02-22", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4624", "doc-id": "RFC4578", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "            Type   Architecture Name\r\n            ----   -----------------\r\n              0    Intel x86PC\r\n              1    NEC/PC98\r\n              2    EFI Itanium\r\n              3    DEC Alpha\r\n              4    Arc x86\r\n              5    Intel Lean Client\r\n              6    EFI IA32\r\n              7    EFI BC\r\n              8    EFI Xscale\r\n              9    EFI x86-64\r\n", "correct_text": "            Type   Architecture Name\r\n            ----   -----------------\r\n              0    Intel x86PC\r\n              1    NEC/PC98\r\n              2    EFI Itanium\r\n              3    DEC Alpha\r\n              4    Arc x86\r\n              5    Intel Lean Client\r\n              6    EFI IA32\r\n              7    EFI x86-64\r\n              8    EFI Xscale\r\n              9    EFI BC\r\n", "notes": "The values for EFI BC and EFI x86-64 should be swapped. UEFI imeplementations use value 7 to report EFI x86-64, not value 9. The IANA registry for DHCPv6 options (http://www.iana.org/assignments/dhcpv6-parameters/dhcpv6-parameters.xhtml#processor-architecture) correctly reflects reality, with values 7 and 9 swapped compared to RFC 4578.", "submit_date": "2016-02-23", "submitter_name": "David Anderson", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4625", "doc-id": "RFC7240", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "     applied-pref = token [ BWS \"=\" BWS word ]\r\n", "correct_text": "     applied-pref = preference-parameter\r\n                    ; see Errata ID: 4439", "notes": "This updates the syntax of the Preference-Applied header field in accordance with a previous erratum to this document, which fixed the Prefer header field.", "submit_date": "2016-02-24", "submitter_name": "Vasiliy Faronov", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4626", "doc-id": "RFC5545", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "[Missing item]", "correct_text": "6.  The value of the \"DUE\" property MUST be strictly later in time than\r\n    the value of the \"DTSTART\" property (as opposed to only \"equal or\r\n    later in time\").", "notes": "See http://www.ietf.org/mail-archive/web/calsify/current/msg02217.html", "submit_date": "2016-02-25", "submitter_name": "Tim Ruffing", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4627", "doc-id": "RFC2308", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "   The history of the early CHIVES work (Section 9.1) was supplied by\r\n   Rob Austein <sra@epilogue.com> and is reproduced here in the form in\r\n   which he supplied it [MPA].\r\n\r\n   Sometime around the spring of 1985, I mentioned to Paul Mockapetris\r\n   that our experience with his JEEVES DNS resolver had pointed out the\r\n   need for some kind of negative caching scheme.  Paul suggested that\r\n   we simply cache authoritative errors, using the SOA MINIMUM value for\r\n   the zone that would have contained the target RRs.  I'm pretty sure\r\n   that this conversation took place before RFC-973 was written, but it\r\n   was never clear to me whether this idea was something that Paul came\r\n   up with on the spot in response to my question or something he'd\r\n   already been planning to put into the document that became RFC-973.\r\n   In any case, neither of us was entirely sure that the SOA MINIMUM\r\n   value was really the right metric to use, but it was available and\r\n   was under the control of the administrator of the target zone, both\r\n   of which seemed to us at the time to be important feature.\r\n", "correct_text": "   The history of the early CHIVES work (Section 9.1) was supplied by\r\n   Rob Austein <sra@epilogue.com> and is reproduced here in the form in\r\n   which he supplied it [MPA].\r\n\r\n9.1 CHIVES \r\n   Sometime around the spring of 1985, I mentioned to Paul Mockapetris\r\n   that our experience with his JEEVES DNS resolver had pointed out the\r\n   need for some kind of negative caching scheme.  Paul suggested that\r\n   we simply cache authoritative errors, using the SOA MINIMUM value for\r\n   the zone that would have contained the target RRs.  I'm pretty sure\r\n   that this conversation took place before RFC-973 was written, but it\r\n   was never clear to me whether this idea was something that Paul came\r\n   up with on the spot in response to my question or something he'd\r\n   already been planning to put into the document that became RFC-973.\r\n   In any case, neither of us was entirely sure that the SOA MINIMUM\r\n   value was really the right metric to use, but it was available and\r\n   was under the control of the administrator of the target zone, both\r\n   of which seemed to us at the time to be important feature.\r\n", "notes": "Section name are referenced but absent.", "submit_date": "2016-02-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4628", "doc-id": "RFC2308", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "References", "orig_text": "", "correct_text": "[MPA] ??? ", "notes": "Section 9 says\r\n   The history of the early CHIVES work (Section 9.1) was supplied by\r\n   Rob Austein <sra@epilogue.com> and is reproduced here in the form in\r\n   which he supplied it [MPA].\r\n\r\nBut [MPA] reference not included into Reference section. \r\nI can't find original publication (Rob Austein) referenced by [MPA]", "submit_date": "2016-02-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8394", "doc-id": "RFC6188", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4, tables 1-4", "orig_text": "   | Default key lifetime         | 2^31 packets                       |", "correct_text": "   | Maximum key lifetime (SRTP)  | 2^48 packets                       |\r\n   | Maximum key lifetime (SRTCP) | 2^31 packets                       |\r\n", "notes": "RFC 3711 and RFC 7714 specifies different maximum key lifetime values for SRTP and SRTCP (2^48 and 2^31). Additionally word \"Default\" suggests that higher values are also allowed, what may lead to two-time pad vulnerability for a very long streams.", "submit_date": "2025-04-26", "submitter_name": "Daniel Fru\u017cy\u0144ski", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "4629", "doc-id": "RFC3344", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   If sent periodically, the nominal interval at which Agent\r\n   Advertisements are sent SHOULD be no longer than 1/3 of the\r\n   advertisement Lifetime given in the ICMP header.  This interval MAY\r\n   be shorter than 1/3 the advertised Lifetime.  This allows a mobile\r\n   node to miss three successive advertisements before deleting the\r\n   agent from its list of valid agents.  The actual transmission time\r\n   for each advertisement SHOULD be slightly randomized [10] in order to\r\n   avoid synchronization and subsequent collisions with other Agent\r\n\r\n   Advertisements that may be sent by other agents (or with other Router\r\n   Advertisements sent by other routers).  Note that this field has no\r\n   relation to the \"Registration Lifetime\" field within the Mobility\r\n   Agent Advertisement Extension defined below.\r\n\r\n", "correct_text": "   If sent periodically, the nominal interval at which Agent\r\n   Advertisements are sent SHOULD be no longer than 1/3 of the\r\n   advertisement Lifetime given in the ICMP header.  This interval MAY\r\n   be shorter than 1/3 the advertised Lifetime.  This allows a mobile\r\n   node to miss three successive advertisements before deleting the\r\n   agent from its list of valid agents.  The actual transmission time\r\n   for each advertisement SHOULD be slightly randomized [10] in order to\r\n   avoid synchronization and subsequent collisions with other Agent\r\n   Advertisements that may be sent by other agents (or with other Router\r\n   Advertisements sent by other routers).  Note that this field has no\r\n   relation to the \"Registration Lifetime\" field within the Mobility\r\n   Agent Advertisement Extension defined below.\r\n\r\n", "notes": "Excessive empty string.", "submit_date": "2016-02-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4631", "doc-id": "RFC2182", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "     + While positive DNS results are usually cached, the lack of a\r\n       result is not cached.  Thus, unnecessary inability to resolve\r\n       creates an undesirable load on the net.", "correct_text": "     + While positive DNS results are usually cached, the lack of a\r\n       result will either be cached with less frequency or not at all,\r\n       depending on a server's caching behaviours and the\r\n       operator's local configuration.  Thus, unnecessary inability to\r\n       resolve creates an undesirable load on the net.", "notes": "BCP 16 predates RFC 2308 (Negative Caching of DNS Queries), and the blanket statement that \"lack of a result is not cached\" is inaccurate by modern standards.\r\n\r\nAD Note: \r\n\r\n1) The errata has been moved to editorial, as the outcome \"undesirable load on the net\" is the same.\r\n\r\n2) The errata itself has been moved to hold for update. Change in deployment and technology over time will always affect documents already published. The Errata text is not spurious, and does add clarification but does not impact interoperability.", "submit_date": "2016-03-02", "submitter_name": "Andrew Boling", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4632", "doc-id": "RFC2308", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11", "orig_text": "   For such an attack to be successful, the NXDOMAIN indiction must be\r\n   injected into a parent server (or a busy caching resolver).  One way\r\n   this might be done by the use of a CNAME which results in the parent\r\n   server querying an attackers server.  Resolvers that wish to prevent\r\n   such attacks can query again the final QNAME ignoring any NS data in\r\n   the query responses it has received for this query.\r\n", "correct_text": "   For such an attack to be successful, the NXDOMAIN indication must be\r\n   injected into a parent server (or a busy caching resolver).  One way\r\n   this might be done by the use of a CNAME which results in the parent\r\n   server querying an attackers server.  Resolvers that wish to prevent\r\n   such attacks can query again the final QNAME ignoring any NS data in\r\n   the query responses it has received for this query.\r\n", "notes": "A typo in the word \"indication\".", "submit_date": "2016-03-02", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Brian Haberman", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4633", "doc-id": "RFC4492", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.1", "orig_text": "        struct {\r\n            NamedCurve elliptic_curve_list<1..2^16-1>\r\n        } EllipticCurveList;", "correct_text": "        struct {\r\n            NamedCurve elliptic_curve_list<2..2^16-1>\r\n        } EllipticCurveList;", "notes": "The count is in bytes, not items.", "submit_date": "2016-03-02", "submitter_name": "Kurt Roeckx", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4635", "doc-id": "RFC3973", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.2", "orig_text": "Upstream interface-specific:\r\n       Graft/Prune State:\r\n         State: One of {\"NoInfo\" (NI), \"Pruned\" (P), \"Forwarding\" (F),\r\n                        \"AckPending\" (AP) }\r\n", "correct_text": "\"NoInfo\" (NI) is not defined as an upstream interface state in 4.4.1.", "notes": "Suggest to remove \"NoInfo\" (NI) here.", "submit_date": "2016-03-08", "submitter_name": "Rui Lin", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4637", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "23.4.3", "orig_text": "        ghyHhHUujhJhjH77n8HHGTrfvbnj756tbB9HG4VQpfyF467GhIGfHfYT6\r\n        4VQpfyF467GhIGfHfYT6jH77n8HHGghyHhHUujhJh756tbB9HGTrfvbnj\r\n        n8HHGTrfvhJhjH776tbB9HG4VQbnj7567GhIGfHfYT6ghyHhHUujpfyF4\r\n        7GhIGfHfYT64VQbnj756\r\n\r\n        --boundary42-", "correct_text": "        ghyHhHUujhJhjH77n8HHGTrfvbnj756tbB9HG4VQpfyF467GhIGfHfYT6\r\n        4VQpfyF467GhIGfHfYT6jH77n8HHGghyHhHUujhJh756tbB9HGTrfvbnj\r\n        n8HHGTrfvhJhjH776tbB9HG4VQbnj7567GhIGfHfYT6ghyHhHUujpfyF4\r\n        7GhIGfHfYT64VQbnj756\r\n\r\n        --boundary42--", "notes": "As far as I know a boundary end should end with two dashes as for RFC 3851 for that specific case, hence it should be :\r\n\r\n --boundary42--", "submit_date": "2016-03-11", "submitter_name": "Boris Shtrasman", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 14:03:59"}, {"errata_id": "7082", "doc-id": "RFC5880", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.7.3", "orig_text": "Otherwise (bfd.AuthSeqKnown is 0), bfd.AuthSeqKnown MUST be set to\r\n1, and bfd.RcvAuthSeq MUST be set to the value of the received\r\nSequence Number field.\r\n\r\nReplace the contents of the Auth Key/Digest field with the\r\nauthentication key selected by the received Auth Key ID field.  If\r\nthe MD5 digest of the entire BFD Control packet is equal to the\r\nreceived value of the Auth Key/Digest field, the received packet\r\nMUST be accepted.  Otherwise (the digest does not match the Auth\r\nKey/Digest field), the received packet MUST be discarded.", "correct_text": "Replace the contents of the Auth Key/Digest field with the\r\nauthentication key selected by the received Auth Key ID field.  If\r\nthe MD5 digest of the entire BFD Control packet is not equal to the\r\nreceived value of the Auth Key/Digest field, the received packet\r\nMUST be discarded.\r\n\r\nOtherwise, the packet MUST be accepted, bfd.AuthSeqKnown MUST be set to\r\n1, and bfd.RcvAuthSeq MUST be set to the value of the received\r\nSequence Number field.", "notes": "1. Don't manipulate bfd.AuthSeqKnown and bfd.RcvAuthSeq before Auth Key/Digest check.\r\n2. Explicitly mention what bfd.AuthSeqKnown and bfd.RcvAuthSeq must be set to in both cases (bfd.AuthSeqKnown is 0 and bfd.AuthSeqKnown is 1).\r\n\r\nBased on email exchange: https://mailarchive.ietf.org/arch/msg/rtg-bfd/lDxFfNpqo4kwuNEUY0AbjMBb8JU/\r\n\r\n(See also https://mailarchive.ietf.org/arch/msg/rtg-bfd/Ngf3Chmpy_EqNPlmuMZOslayy2E/)", "submit_date": "2022-08-12", "submitter_name": "Glebs Ivanovskis", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-09-06 17:23:40"}, {"errata_id": "4644", "doc-id": "RFC7816", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "QNAME minimisation can decrease performance in some cases -- for\r\ninstance, for a deep domain name (like\r\nwww.host.group.department.example.com, where \r\nhost.group.department.example.com is hosted on example.com's name\r\nservers).  Let's assume a resolver that knows only the name servers of\r\n.example.  Without QNAME minimisation, it would send these .example name\r\nservers a query for www.host.group.department.example.com and\r\nimmediately get a specific referral or an answer, without the need for\r\nmore queries to probe for the zone cut.  For such a name, a cold\r\nresolver with QNAME minimisation will, depending on how QNAME\r\nminimisation is implemented, send more queries, one per label.  Once the\r\ncache is warm, there will be no difference with a traditional resolver.\r\nActual testing is described in [Huque-QNAME-Min].  Such deep domains are\r\nespecially common under ip6.arpa.", "correct_text": "QNAME minimisation can decrease performance in some cases -- for \r\ninstance, for a deep domain name (like\r\nwww.host.group.department.example.com, where \r\nhost.group.department.example.com is hosted on example.com's name\r\nservers).  Let's assume a resolver that knows only the name servers of\r\n.example.com.  Without QNAME minimisation, it would send these \r\n.example.com name servers a query for \r\nwww.host.group.department.example.com and immediately get a specific\r\nreferral or an answer, without the need for more queries to probe for\r\nthe zone cut.  For such a name, a cold resolver with QNAME minimisation\r\nwill, depending on how QNAME minimisation is implemented, send more\r\nqueries, one per label.  Once the cache is warm, there will be no\r\ndifference with a traditional resolver.  Actual testing is described in\r\n[Huque-QNAME-Min].  Such deep domains are especially common under\r\nip6.arpa.", "notes": "Changed \".example\" to \".example.com\".", "submit_date": "2016-03-24", "submitter_name": "Robert Edmonds", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4955", "doc-id": "RFC7240", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "     Prefer: Lenient", "correct_text": "     Prefer: Handling=\"lenient\"", "notes": "\"Prefer: Lenient\" is a valid header that specifies an (unregistered) preference named \"lenient\" with an empty value.\r\n\r\nOn the other hand, this document defines a preference named \"handling\", which can take the value \"lenient\" to indicate lenient processing, which is the stated intent of this example.\r\n\r\nThere is no provision for specifying a preference by its *value*, as opposed to by its *name*.", "submit_date": "2017-03-01", "submitter_name": "Vasiliy Faronov", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4956", "doc-id": "RFC5440", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.3", "orig_text": "", "correct_text": "", "notes": "This section does not tell IANA the range for the Object-Types to be registered for each Object-Class, nor what to do with the values not assigned in this document.\r\n\r\nIANA has correctly recognised that the top value is 15, and that the values between those shown here and 15 should be marked as \"Unassigned.\" \r\n\r\nHowever, there is confusion over the value 0 for an Object-Type. The old entries (arising from RFC 5440) do not mention 0. Newer entries for RFC 7470 and several I-Ds in the pipe mark 0 as Unassigned.\r\n\r\nFor consistency, ALL 0 Object-Types should be marked \"Reserved\".\r\n\r\n(This might need an Errata Report against some other RFCs if you are particularly fussy, but I think we can do it all on this report.)", "submit_date": "2017-03-01", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4645", "doc-id": "RFC7540", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": "idle:\r\n      All streams start in the \"idle\" state.\r\n\r\n      The following transitions are valid from this state:\r\n\r\n      *  Sending or receiving a HEADERS frame causes the stream to\r\n         become \"open\".  The stream identifier is selected as described\r\n         in Section 5.1.1.  The same HEADERS frame can also cause a\r\n         stream to immediately become \"half-closed\".\r\n\r\n      *  Sending a PUSH_PROMISE frame on another stream reserves the\r\n         idle stream that is identified for later use.  The stream state\r\n         for the reserved stream transitions to \"reserved (local)\".\r\n\r\n      *  Receiving a PUSH_PROMISE frame on another stream reserves an\r\n         idle stream that is identified for later use.  The stream state\r\n         for the reserved stream transitions to \"reserved (remote)\".\r\n\r\n      *  Note that the PUSH_PROMISE frame is not sent on the idle stream\r\n         but references the newly reserved stream in the Promised Stream\r\n         ID field.\r\n\r\n      Receiving any frame other than HEADERS or PRIORITY on a stream in\r\n      this state MUST be treated as a connection error (Section 5.4.1)\r\n      of type PROTOCOL_ERROR.", "correct_text": "idle:\r\n      All streams start in the \"idle\" state.\r\n\r\n      The following transitions are valid from this state:\r\n\r\n      *  Sending or receiving a HEADERS frame causes the stream to\r\n         become \"open\".  The stream identifier is selected as described\r\n         in Section 5.1.1.  The same HEADERS frame can also cause a\r\n         stream to immediately become \"half-closed\".\r\n\r\n      *  Sending a PUSH_PROMISE frame on another stream reserves the\r\n         idle stream that is identified for later use.  The stream state\r\n         for the reserved stream transitions to \"reserved (local)\".\r\n\r\n      *  Receiving a PUSH_PROMISE frame on another stream reserves an\r\n         idle stream that is identified for later use.  The stream state\r\n         for the reserved stream transitions to \"reserved (remote)\".\r\n\r\n      *  Note that the PUSH_PROMISE frame is not sent on the idle stream\r\n         but references the newly reserved stream in the Promised Stream\r\n         ID field.\r\n\r\n      Receiving any frame other than HEADERS, PUSH_PROMISE or \r\n      PRIORITY on a stream in this state MUST be treated as a \r\n      connection error (Section 5.4.1) of type PROTOCOL_ERROR.", "notes": "According to the description above and the state transformation in Figure 2, a stream in the 'idle' state could receive a PUSH_PROMISE frame. \r\n\r\nWhile in the last statement of Original Text, receiving a PUSH_PROMISE on a stream in 'idle' state is a connection error.\r\n\r\nPlease fix this inconsistency problem.\n --VERIFIER NOTES-- \nThis is a duplicate of errata report #4535.\r\n\r\nThe report is incorrect: the text says \"another stream\" and has a note that explains this.  The confusion that obviously exists should be considered in a future revision of the document.", "submit_date": "2016-03-29", "submitter_name": "Jessie Liu", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4653", "doc-id": "RFC4517", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "4.2.  Matching Rule Definitions\r\n\r\n   Nominated character strings in assertion and attribute values are\r\n   prepared according to the string preparation algorithms [RFC4518] for\r\n   LDAP when evaluating the following matching rules:\r\n\r\n      numericStringMatch,\r\n      numericStringSubstringsMatch,\r\n      caseExactMatch,\r\n      caseExactOrderingMatch,\r\n      caseExactSubstringsMatch,\r\n      caseExactIA5Match,\r\n      caseIgnoreIA5Match,\r\n      caseIgnoreIA5SubstringsMatch,\r\n      caseIgnoreListMatch,\r\n      caseIgnoreListSubstringsMatch,\r\n      caseIgnoreMatch,\r\n      caseIgnoreOrderingMatch,\r\n      caseIgnoreSubstringsMatch,\r\n      directoryStringFirstComponentMatch,\r\n      telephoneNumberMatch,\r\n      telephoneNumberSubstringsMatch and\r\n      wordMatch.\r\n", "correct_text": "4.2.  Matching Rule Definitions\r\n\r\n   Nominated character strings in assertion and attribute values are\r\n   prepared according to the string preparation algorithms [RFC4518] for\r\n   LDAP when evaluating the following matching rules:\r\n\r\n      numericStringMatch,\r\n      numericStringOrderingMatch,\r\n      numericStringSubstringsMatch,\r\n      caseExactMatch,\r\n      caseExactOrderingMatch,\r\n      caseExactSubstringsMatch,\r\n      caseExactIA5Match,\r\n      caseIgnoreIA5Match,\r\n      caseIgnoreIA5SubstringsMatch,\r\n      caseIgnoreListMatch,\r\n      caseIgnoreListSubstringsMatch,\r\n      caseIgnoreMatch,\r\n      caseIgnoreOrderingMatch,\r\n      caseIgnoreSubstringsMatch,\r\n      directoryStringFirstComponentMatch,\r\n      telephoneNumberMatch,\r\n      telephoneNumberSubstringsMatch and\r\n      wordMatch.\r\n", "notes": "The 'numericStringOrderingMatch' matching rule should be in the list of Matching Rules that are prepared accordingly to RFC 4518. \r\n\r\nIn 4.2.23, a reference to the String Preparation algorithm is made :\r\n\r\n\"In preparing the attribute value and assertion value for comparison,\r\n   characters are not case folded in the Map preparation step, and only\r\n   numericString Insignificant Character Handling is applied in the\r\n   Insignificant Character Handling step.\"", "submit_date": "2016-03-31", "submitter_name": "Emmanuel Lecharny", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4648", "doc-id": "RFC5502", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "EQUAL, HCOLON, SEMI, name-addr, addr-spec, and generic-param are\r\ndefined in RFC 3261 [2].\r\n", "correct_text": "EQUAL, HCOLON, SEMI, name-addr, addr-spec, and generic-param are\r\ndefined in RFC 3261 [2].\r\n\r\nIf the URI contains a comma, question mark or semicolon, the URI MUST\r\nbe enclosed in angle brackets (< and >).", "notes": "If addr-spec is used when there are parameters, it is ambiguous if the parameters are URI parameters or served-user-param.  For consistency with RFC 3261 section 20, the same bracket rule is indicated even if comma and question mark do not cause an issue.", "submit_date": "2016-03-29", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:45:55"}, {"errata_id": "7694", "doc-id": "RFC3413", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "       - If the isAccessAllowed ASI returns a noSuchView, noAccessEntry,\r\n         or noGroupName error, processing of the management operation is\r\n         halted, a PDU value is constructed using the values from the\r\n         originally received PDU, but replacing the error-status with an\r\n         authorizationError code, and error-index value of 0, and\r\n         control is passed to step (6) below.\r\n\r\n       - If the isAccessAllowed ASI returns an otherError, processing of\r\n         the management operation is halted, a different PDU value is\r\n         constructed using the values from the originally received PDU,\r\n         but replacing the error-status with a genError code and the\r\n         error-index with the index of the failed variable binding, and\r\n         control is passed to step (6) below.", "correct_text": "       - If the isAccessAllowed ASI returns a notInView error for a\r\n         Write-Class viewType (e.g. for a SetRequest-PDU), processing\r\n         of the management operation is halted, a different PDU value is\r\n         constructed using the values from the originally received PDU,\r\n         but replacing the error-status with a noAccess code and the\r\n         error-index with the index of the failed variable binding, and\r\n         control is passed to step (6) below.\r\n\r\n       - If the isAccessAllowed ASI returns a noSuchView, noAccessEntry,\r\n         or noGroupName error, processing of the management operation is\r\n         halted, a PDU value is constructed using the values from the\r\n         originally received PDU, but replacing the error-status with an\r\n         authorizationError code, and error-index value of 0, and\r\n         control is passed to step (6) below.\r\n\r\n       - If the isAccessAllowed ASI returns an otherError, processing of\r\n         the management operation is halted, a different PDU value is\r\n         constructed using the values from the originally received PDU,\r\n         but replacing the error-status with a genError code and the\r\n         error-index with the index of the failed variable binding, and\r\n         control is passed to step (6) below.", "notes": "RFC3415, Section 3, defines 6 distinct errorIndication types for the isAccessAllowed ASI: notInView, noSuchView, noSuchContext, noGroupName, noAccessEntry, and otherError.\r\n\r\nWhereas RFC3413 does not define handling of the notInView error. Whereby one might, presumably mistakenly, assume that notInView should be handled as \"an otherError\". However otherError is a distinct errorIndication for \"undefined error\" (presumably as a catch-all for possible implementation-level errors), whereas notInView is a defined error.\r\n\r\nAdditionally, RFC3416, Section 4.2.5, and only for SetRequest-PDU, clearly defines noAccess error-status as the first-priority validation check for \"not...in the appropriate MIB view\" case:\r\n   (1)   If the variable binding's name specifies an existing or non-\r\n         existent variable to which this request is/would be denied\r\n         access because it is/would not be in the appropriate MIB view,\r\n         then the value of the Response-PDU's error-status field is set\r\n         to \"noAccess\", and the value of its error-index field is set to\r\n         the index of the failed variable binding.\n --VERIFIER NOTES-- \nThis change is too significant to do as part of an errata update to a 20 year old RFC, and there is not clear consensus as to whether any changes are required here at all (hence rejected rather than marked as \"held for document update\").\r\n\r\nThere has been some further discussion of this errata here:\r\nhttps://mailarchive.ietf.org/arch/msg/opsawg/TDMmdSZpDYIqGYHa5SvW1cfnW4c/`\r\nhttps://mailarchive.ietf.org/arch/msg/opsawg/xnXWL9fTjOhVaiAFD6kmqa-ZeNc/", "submit_date": "2023-11-02", "submitter_name": "Blake Nemura", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 10:07:29"}, {"errata_id": "4663", "doc-id": "RFC7540", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8 omits", "orig_text": "[Note:  RFC 3875, section 4.1.16, defines the protocol version as:\r\n\r\nHTTP-Version = \"HTTP\" \"/\" 1*digit \".\" 1*digit\r\n\r\nNothing in RFC 7540 redefines this.]", "correct_text": "Add paragraph at end of section 8 (before 8.1) - Clarification:\r\n\r\nHTTP/2 preserves the format of the SERVER_PROTOCOL CGI variable,\r\nboth in the CGI interface and for any server logging purposes.  Where\r\na version string is necessary, it is \"HTTP/2.0\" as defined by RFC 3875.", "notes": "Compatibility is required with a prior published RFC, or a specific change superseding the prior RFC need be explicitly stated.  This RFC states in its abstract:\r\n\r\n\"This specification is an alternative to, but does not obsolete, the HTTP/1.1 message syntax.  HTTP's existing semantics remain unchanged\"\r\n\r\nRFC 7540, section 3.5's connection preface string containing \"HTTP/2.0\" implies that the RFC authors should have forseen this issue, and added a paragraph to section 8 to explicitly state no change in the CGI interface variable SERVER_PROTOCOL was desired.  At least one implementation is using a version string of \"HTTP/2\", not \"HTTP/2.0\", because of how it is referred in this RFC. (\"nghttp2.org\" has incorrectly implemented this in its library routines.)\n --VERIFIER NOTES-- \nMark Nottingham:  As discussed on HTTPBIS mailing list, this isn't an issue for the HTTP specification.", "submit_date": "2016-04-12", "submitter_name": "D. Stussy", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4664", "doc-id": "RFC7233", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "The 416 (Range Not Satisfiable) status code indicates that none of\r\nthe ranges in the request's Range header field (Section 3.1) overlap\r\nthe current extent of the selected resource or that the set of ranges\r\nrequested has been rejected due to invalid ranges or an excessive\r\nrequest of small or overlapping ranges.", "correct_text": "The 416 (Range Not Satisfiable) status code indicates that none of\r\nthe ranges in the request's Range header field (Section 3.1) overlap\r\nthe current extent of the selected representation or that the set of\r\nranges requested has been rejected due to invalid ranges or an excessive\r\nrequest of small or overlapping ranges.", "notes": "The overlap may depend on the representation, not only the resource, as is the case with byte ranges.", "submit_date": "2016-04-13", "submitter_name": "Amichai Rothman", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4665", "doc-id": "RFC7233", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "", "correct_text": "If all of the preconditions are true and the target representation\r\nlength is zero, the server SHOULD send a 200 (OK) response.", "notes": "An empty representation is unsatisfiable according to section 2.1, but not unsatisfiable according to section 4.4 if the first-byte-pos is zero. An empty 200 response is the simplest solution to this contradiction, since it is a valid response anyway (if the server chooses to ignore the Range header), clients already handle it properly, it provides all necessary information to the client, and stating it explicitly can prevent subtle edge-case pitfalls in both the RFC and its implementations.\n --VERIFIER NOTES-- \n Mark Nottingham: this is not an erratum. Please raise an issue here:\r\n <https://github.com/httpwg/http11bis/issues>", "submit_date": "2016-04-13", "submitter_name": "Amichai Rothman", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4666", "doc-id": "RFC7540", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.1.2", "orig_text": "   A 421 response is cacheable by default, i.e., unless otherwise\r\n   indicated by the method definition or explicit cache controls (see\r\n   Section 4.2.2 of [RFC7234]).\r\n", "correct_text": "   [paragraph removed]", "notes": "The HTTP cache key (RFC 7234 Section 2) is based on the request URI, not on properties of the connection. Therefore, if a client were to cache a 421 response, it would then use this cached 421 to satisfy further requests to the same URI, before it has a chance to connect to an authoritative server.\r\n\r\nMark Nottingham: As discussed on list, I think the best we can do here is to note that in many cases, it'd be desireable to mark this as explicitly uncacheable.\r\n\r\nWith this paragraph removed, a 421 response is not cacheable by default, per RFC 7231 Section 6.1.", "submit_date": "2016-04-13", "submitter_name": "Vasiliy Faronov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4667", "doc-id": "RFC7230", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "chunk-ext      = *( \";\" chunk-ext-name [ \"=\" chunk-ext-val ] )\r\n", "correct_text": "chunk-ext      = *( BWS  \";\" BWS chunk-ext-name\r\n                    [ BWS  \"=\" BWS chunk-ext-val ] )\r\n", "notes": "The infamous \"implicit *LWS\" syntax rule in RFC 2616 allowed whitespace between\r\n\";\" and chunk-ext-name in chunk-ext. Some HTTP agents generate that whitespace.\r\nIn my experience, HTTP agents that can parse chunk extensions usually can handle\r\nthat whitespace. Moreover, ICAP, which generally relies on HTTP/1 for its message\r\nsyntax, uses that whitespace when defining the \"ieof\" chunk extension in RFC 3507\r\nSection 4.5:\r\n\r\n\\r\\n\r\n0; ieof\\r\\n\\r\\n\r\n\r\nIMHO, RFC 7230 should either allow BWS before chunk-ext-name or at the very least\r\nexplicitly document the HTTP/1 syntax change and its effect on parsers used for both\r\nICAP and HTTP/1 messages (a very common case for ICAP-supporting HTTP\r\nintermediaries and ICAP services).\r\n\r\nI also recommend adding BWS around \"=\", for consistency and RFC 2616 backward\r\ncompatibility reasons. HTTPbis RFCs already do that for transfer-parameter and\r\nauth-param that have similar syntax.\r\n\r\nPlease also consider adding BWS _before_ \";\" for consistency and RFC 2616 backward\r\ncompatibility reasons. HTTPbis RFCs already do that for transfer-extension,\r\naccept-ext, t-ranking, and other constructs with similar syntax.", "submit_date": "2016-04-13", "submitter_name": "Alex Rousskov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4672", "doc-id": "RFC6455", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.6", "orig_text": "   Data frames (e.g., non-control frames) are identified by opcodes\r\n   where the most significant bit of the opcode is 0.  Currently defined\r\n   opcodes for data frames include 0x1 (Text), 0x2 (Binary).  Opcodes\r\n   0x3-0x7 are reserved for further non-control frames yet to be\r\n   defined.\r\n\r\n   Data frames carry application-layer and/or extension-layer data.  The\r\n   opcode determines the interpretation of the data:\r\n\r\n   Text\r\n\r\n      The \"Payload data\" is text data encoded as UTF-8.  Note that a\r\n      particular text frame might include a partial UTF-8 sequence;\r\n      however, the whole message MUST contain valid UTF-8.  Invalid\r\n      UTF-8 in reassembled messages is handled as described in\r\n      Section 8.1.\r\n\r\n   Binary\r\n\r\n      The \"Payload data\" is arbitrary binary data whose interpretation\r\n      is solely up to the application layer.\r\n", "correct_text": "   Data frames (i.e., non-control frames) are identified by opcodes\r\n   where the most significant bit of the opcode is 0.  Currently defined\r\n   opcodes for data frames include 0x00 (Continuation), 0x1 (Text) and\r\n   0x2 (Binary).  Opcodes 0x3-0x7 are reserved for further non-control\r\n   frames yet to be defined.\r\n\r\n   Data frames carry application-layer and/or extension-layer data.  The\r\n   opcode determines the interpretation of the data:\r\n\r\n   Text\r\n\r\n      The \"Payload data\" is text data encoded as UTF-8.  Note that a\r\n      particular text frame might include a partial UTF-8 sequence;\r\n      however, the whole message MUST contain valid UTF-8.  Invalid\r\n      UTF-8 in reassembled messages is handled as described in\r\n      Section 8.1.\r\n\r\n   Binary\r\n\r\n      The \"Payload data\" is arbitrary binary data whose interpretation\r\n      is solely up to the application layer.\r\n\r\n   Continuation\r\n\r\n      These frames MUST be always preceeded by either Text or Binary\r\n      frame with FIN bit clear (See Section 5.2). The \"Payload data\"\r\n      contains next fragment (See section 5.4) of the message whose\r\n      transmission were opened by the latest Text or Binary frame and\r\n      MUST be interpreted in the same way as the initial fragment of\r\n      the message.\r\n", "notes": "For any other opcode defined frames are explicitly listed and described in either Section 5.5 or Section 5.6. But continuation frame is not. \r\n\r\nFormally it matches definition of data frame (given in section 5.6) as the most significant bit of its opcode is 0. Logically it should be data frame too. But it is unclear whether there are two categories of frames (data and control) or the Continuation frame represents the third.\r\n\r\nOne could guess though that Continuation frame is a data frame from the content of the section 5.5.1 stating that \"An endpoint MAY delay sending a Close frame until its current message is sent (for instance, if the majority of a fragmented message is already sent, an endpoint MAY send the remaining fragments before sending a Close frame)\". This fragment clarifies that Close frame is sent after an endpoint finished message transmission. Thus such interpreation would be consistent with the Section 5.5.1 stating that \"The application MUST NOT send any more data frames after sending a Close frame\".", "submit_date": "2016-04-18", "submitter_name": "Anton Dunaev", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4673", "doc-id": "RFC7420", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "pcePcepSessState OBJECT-TYPE\r\n       SYNTAX      INTEGER {\r\n                      tcpPending(1),\r\n                      openWait(2),\r\n                      keepWait(3),\r\n                      sessionUp(4)\r\n                   }\r\n       MAX-ACCESS  read-only\r\n       STATUS      current\r\n       DESCRIPTION\r\n           \"The current state of the session.\r\n\r\n            The set of possible states excludes the idle state since\r\n            entries do not exist in this table in the idle state.\"\r\n       ::= { pcePcepSessEntry 3 }", "correct_text": "pcePcepSessState OBJECT-TYPE\r\n       SYNTAX      INTEGER {\r\n\t\t      idle(0),\r\n                      tcpPending(1),\r\n                      openWait(2),\r\n                      keepWait(3),\r\n                      sessionUp(4)\r\n                   }\r\n       MAX-ACCESS  read-only\r\n       STATUS      current\r\n       DESCRIPTION\r\n           \"The current state of the session.\"\r\n       ::= { pcePcepSessEntry 3 }\t", "notes": "As per security consideration, if PCE needs to allow incomming connections from only known PCCs. \r\nSource addresses of PCCs are configured on PCE. If PCEP session on PCE goes down with configured PCCs. \r\nPCE needs to raise notification pcePcepSessDown (i.e. details mentioned below).\r\nIssue is whiling sending the notification pcePcepSessDown, as session state (pcePcepSessState) defined in RFC doesn't include idle state.\r\nI suggest to include idle(0) state for pcePcepSessState. \r\n \r\n\r\n   pcePcepSessDown NOTIFICATION-TYPE\r\n       OBJECTS     {\r\n                      pcePcepSessState,\r\n                      pcePcepSessStateLastChange\r\n                   }\r\n       STATUS      current\r\n       DESCRIPTION\r\n           \"This notification is sent when the value of\r\n            pcePcepSessState leaves the sessionUp state.\"\r\n       ::= { pcePcepNotifications 2 }", "submit_date": "2016-04-20", "submitter_name": "Mahendra Singh Negi", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4674", "doc-id": "RFC7234", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4", "orig_text": "   When sending a no-cache request, a client ought to include both the\r\n   pragma and cache-control directives, unless Cache-Control: no-cache\r\n   is purposefully omitted to target other Cache-Control response\r\n                                                         ^^^^^^^^\r\n   directives at HTTP/1.1 caches.", "correct_text": "   When sending a no-cache request, a client ought to include both the\r\n   pragma and cache-control directives, unless Cache-Control: no-cache\r\n   is purposefully omitted to target other Cache-Control request\r\n                                                         ^^^^^^^\r\n   directives at HTTP/1.1 caches.", "notes": "\"other Cache-Control response directives\" was probably intended to be \"other Cache-Control request directives,\" because a request cannot have response directives.", "submit_date": "2016-04-21", "submitter_name": "Vasiliy Faronov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7083", "doc-id": "RFC5880", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.7.4", "orig_text": "Otherwise (bfd.AuthSeqKnown is 0), bfd.AuthSeqKnown MUST be set to\r\n1, bfd.RcvAuthSeq MUST be set to the value of the received\r\nSequence Number field, and the received packet MUST be accepted.\r\n\r\nReplace the contents of the Auth Key/Hash field with the\r\nauthentication key selected by the received Auth Key ID field.  If\r\nthe SHA1 hash of the entire BFD Control packet is equal to the\r\nreceived value of the Auth Key/Hash field, the received packet\r\nMUST be accepted.  Otherwise (the hash does not match the Auth\r\nKey/Hash field), the received packet MUST be discarded.", "correct_text": "Replace the contents of the Auth Key/Hash field with the\r\nauthentication key selected by the received Auth Key ID field.  If\r\nthe SHA1 hash of the entire BFD Control packet is not equal to the\r\nreceived value of the Auth Key/Hash field, the received packet\r\nMUST be discarded.\r\n\r\nOtherwise, the packet MUST be accepted, bfd.AuthSeqKnown MUST be set to\r\n1, and bfd.RcvAuthSeq MUST be set to the value of the received\r\nSequence Number field.", "notes": "1. Don't manipulate bfd.AuthSeqKnown and bfd.RcvAuthSeq before Auth Key/Hash check.\r\n2. Explicitly mention what bfd.AuthSeqKnown and bfd.RcvAuthSeq must be set to in both cases (bfd.AuthSeqKnown is 0 and bfd.AuthSeqKnown is 1).\r\n\r\nBased on email exchange: https://mailarchive.ietf.org/arch/msg/rtg-bfd/lDxFfNpqo4kwuNEUY0AbjMBb8JU/\r\n\r\n(See also https://mailarchive.ietf.org/arch/msg/rtg-bfd/Ngf3Chmpy_EqNPlmuMZOslayy2E/)", "submit_date": "2022-08-12", "submitter_name": "Glebs Ivanovskis", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-09-06 17:24:31"}, {"errata_id": "7091", "doc-id": "RFC5965", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "   e.  Except as discussed below, each feedback report MUST be related\r\n       to only a single email message.  Summary and aggregate formats\r\n       are outside of the scope of this specification.\r\n", "correct_text": "   e.  Except when using the Incidents field (see below),\r\n       each feedback report MUST be related\r\n       to only a single email message.  Summary and aggregate formats\r\n       are outside of the scope of this specification.\r\n", "notes": "There doesn't seem to be another discussion of similarity.\n --VERIFIER NOTES-- \nA single report is about a single message, even if it includes a claim that it is similar to other messages.", "submit_date": "2022-08-16", "submitter_name": "Alessandro Vesely", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2024-02-03 00:28:06"}, {"errata_id": "4675", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1.1.3", "orig_text": "   Examples:\r\n\r\n      From: \"Bob\" <sips:bob@biloxi.com> ;tag=a48s\r\n      From: sip:+12125551212@phone2net.com;tag=887s\r\n      From: Anonymous <sip:c8oqz84zk7z@privacy.org>;tag=hyh8\r\n", "correct_text": "   Examples:\r\n\r\n      From: \"Bob\" <sips:bob@biloxi.com> ;tag=a48smh2\r\n      From: sip:+12125551212@phone2net.com;tag=887s6pa\r\n      From: Anonymous <sip:c8oqz84zk7z@privacy.org>;tag=hyh8mtf\r\n", "notes": "I know this is more than a little picayune, but...\r\n\r\nSection 19.3 says:\r\n\r\n   When a tag is generated by a UA for insertion into a request or\r\n   response, it MUST be globally unique and cryptographically random\r\n   with at least 32 bits of randomness.\r\n\r\nThis implies that the tag value must be at least 32 bits in size.\r\n\r\nSection 25.1 says:\r\n\r\n      token       =  1*(alphanum / \"-\" / \".\" / \"!\" / \"%\" / \"*\"\r\n                     / \"_\" / \"+\" / \"`\" / \"'\" / \"~\" )\r\nand\r\n      tag-param   =  \"tag\" EQUAL token\r\n\r\nAlthough the actual representation of the tag value is implementation-specific, since there are only 72 characters available with which to encode it, a tag value with only four characters can represent a maximum of 72^4 distinct numeric values, which is less than the 2^32 values that can be represented by 32 bits by a factor of nearly 160.\r\n\r\nEven if the implementation chooses to omit \"leading zeros\" (or something equivalent), the likelihood of three 32 bit random values all falling in the range of values that can be represented in four characters would be less than one in five million. So even if the given examples are theoretically possible for a conforming implementation, they seem rather misleading.\r\n\r\nFor a \"typical\" 32 bit random value, even with base74 encoding, the shortest tag value would require six characters. Given that all three examples (which are also repeated almost unchanged in section 20.20) contain no uppercase ALPHA characters in the tag values, the implied encoding is more likely something like base32 or base36, which would require at least seven characters to represent a typical 32 bit random value. So that's how I'm suggesting that the examples be amended.", "submit_date": "2016-04-21", "submitter_name": "Bruce Florman", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4676", "doc-id": "RFC7578", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.", "orig_text": "       --AaB03x\r\n       content-disposition: form-data; name=\"_charset_\"\r\n\r\n       iso-8859-1\r\n       --AaB03x--\r\n       content-disposition: form-data; name=\"field1\"\r\n\r\n       ...text encoded in iso-8859-1 ...\r\n       AaB03x--", "correct_text": "       --AaB03x\r\n       content-disposition: form-data; name=\"_charset_\"\r\n\r\n       iso-8859-1\r\n       --AaB03x\r\n       content-disposition: form-data; name=\"field1\"\r\n\r\n       ...text encoded in iso-8859-1 ...\r\n       --AaB03x--", "notes": "Boundary hyphens were misplaced, I think.  The second boundary delimiter should not have them on the end of the line, and the last boundary delimiter should have them on the beginning of the line too.", "submit_date": "2016-04-26", "submitter_name": "Egon Eckert", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4677", "doc-id": "RFC7788", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "   A network-wide\r\n   zone is appended to all single labels or unqualified zones in order\r\n   to qualify them. \".home\" is the default; however, an administrator\r\n   MAY configure the announcement of a Domain-Name TLV (Section 10.6)\r\n   for the network to use a different one.", "correct_text": "   A network-wide\r\n   zone is appended to all single labels or unqualified zones in order \r\n   to qualify them.  A default value for this TLV MUST be set, although \r\n   the default value of the Domain-Name TLV (Section 10.6) is out of \r\n   scope of this document, and an administrator MAY configure the \r\n   announcement of a Domain-Name TLV for the network.", "notes": "It may appear that the use of the label \".home\" is unofficially assigning this to be added to the Special Use Domain Registry. That registry can only be updated using the process outlined in RFC6761, therefore the text identifying \".home\" as the default network-wide zone is in error.\r\n\r\nIt is unclear of the IESG and the IETF in publishing this proposed standard if the intent was to use \".home\" as an example or placeholder until a name can be reserved.\r\n\r\nAD Note: A default label is a requirement for HNCP and its interoperability. As such the Homenet chosen label, \".home\", is a strong candidate for the RFC6761 process. The WG will be directed to follow this process and seek (again) the consensus on the \".home\" label and work with other IETF WGs as appropriate.", "submit_date": "2016-04-26", "submitter_name": "Tim Wicinski", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4678", "doc-id": "RFC6238", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "* @return: a numeric String in base 10 that includes\r\n*              {@link truncationDigits} digits", "correct_text": "* @return: a numeric String in base 10 that includes\r\n*              {@link DIGITS_POWER} digits", "notes": "The JavaDoc for the functions refers to truncationDigits, which doesn't exist in the example code. I think the authors mean the DIGITS_POWER array.\r\n\r\nNote that this happens four times for the four different versions of the generateTOTP() method.", "submit_date": "2016-04-27", "submitter_name": "Osric Wilkinson", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4679", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "     Content-Type: application/json;charset=UTF-8\r\n", "correct_text": "     Content-Type: application/json", "notes": "application/json does not have charset parameter.", "submit_date": "2016-04-29", "submitter_name": "Yi EungJun", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7092", "doc-id": "RFC8713", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.17", "orig_text": "If the Chair is unable to contact a voting volunteer, the Chair must\r\nrepeat the random selection process in order to replace the unavailable\r\nvolunteer.  There should be at least one day between the announcement of\r\nthe iteration and the selection process.", "correct_text": "TBD", "notes": "Historically, it appears that NomCom chairs treat \"can't contact\" as \"ineligible\" and just move down the list. This also appears to be IETF consensus.\r\n\r\nWas the intent to really announce seed source, wait, pick them, re-run the process? If so, how long to wait for objections?  This needs much more clarification. For example, a timeline of how long to take if following RFC 3797.", "submit_date": "2022-08-16", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:16:56"}, {"errata_id": "4806", "doc-id": "RFC7934", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "3.  Benefits of Providing Multiple Addresses\r\n\r\n   Today, there are many host functions that require more than one IP\r\n   address to be available to the host, including:\r\n\r\n   o  Privacy addressing to prevent tracking by off-network hosts\r\n      [RFC4941].\r\n\r\n ...", "correct_text": "3.  Benefits of Providing Multiple Addresses\r\n\r\n   Today, there are many host functions that require more than one IP\r\n   address to be available to the host, including:\r\n\r\n   o  Privacy addressing to prevent tracking by off-network hosts\r\n      [RFC4941].\r\n\r\n...\r\n\r\n   o  Other potential use cases such as those described in [RFC1681].", "notes": "Somewhat trivial errata, a reference to RFC1681, \" On Many Addresses per Host\", would be good to credit Steve's early thoughts, and those which probably in part lead to [TARP]. No urgency to update, a note to include it if this RFC is ever updated.", "submit_date": "2016-09-20", "submitter_name": "Mark Smith", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4680", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6, Fig 3", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           Era Number                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           Era Offset                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                                                               |\r\n      |                           Fraction                            |\r\n      |                                                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                              NTP Date Format", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           Era Number                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           Era Offset                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                                                               |\r\n      +                           Fraction                            +\r\n      |                                                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n                              NTP Date Format", "notes": "This allows to better appreciate only two 32b rows really form the Fraction part, leading to an overall type length of 128b instead of 160b as it could otherwise be misunderstood in the original figure.\r\n\r\n---\r\n\r\nThe \"+\" vs \"|\" on the Fraction line would seem to improve consistency with packet layouts in other documents.", "submit_date": "2016-04-29", "submitter_name": "Riccardo Brama", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-07-27 15:13:09"}, {"errata_id": "4681", "doc-id": "RFC7233", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "byte-range-set  = 1#( byte-range-spec / suffix-byte-range-spec )\r\n", "correct_text": "byte-range-set = *( \",\" OWS ) ( byte-range-spec /\r\n    suffix-byte-range-spec ) *( OWS \",\" [ OWS ( byte-range-spec /\r\n    suffix-byte-range-spec ) ] )\r\n", "notes": "The document contains two ABNF definitions for \"byte-range-set\".  They appear in Section 2.1 \"Byte Ranges\" and Appendix D \"Collected ABNF\".\r\n\r\nThe two definitions are different.  It seems like the definition in Appendix D is the correct one.\n --VERIFIER NOTES-- \nAlexey: As per comment from Julian: \"Both are correct. See first sentence of Appendix D.\"", "submit_date": "2016-04-29", "submitter_name": "Kannan Goundan", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4682", "doc-id": "RFC7233", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "byte-range-set= 1#( byte-range-spec / suffix-byte-range-spec )", "correct_text": "According to the \"1#element\" rule, the expansion would be:\r\n\r\n    byte-range-set = ( byte-range-spec /\r\n        suffix-byte-range-spec ) *( OWS \",\" OWS ( byte-range-spec /\r\n        suffix-byte-range-spec ) )\r\n\r\nBut Appendix D has the definition:\r\n\r\n    byte-range-set = *( \",\" OWS ) ( byte-range-spec /\r\n        suffix-byte-range-spec ) *( OWS \",\" [ OWS ( byte-range-spec /\r\n        suffix-byte-range-spec ) ] )\r\n", "notes": "This is a followup to my original report: <http://www.rfc-editor.org/errata_search.php?rfc=7233&eid=4681>\r\n\r\nMy original report was incorrect because I didn't notice the difference between \"1*element\" and \"1#element\".  Thanks to Julian Reschke for pointing this out to me.\r\n\r\nAfter looking up the \"1#element\" rule <https://tools.ietf.org/html/rfc7230#section-7>, it looks like Section 2.1 and Appendix D are more similar, but not exactly equivalent.\r\n\r\nThe Appendix D version of the rule seems to allow extra commas and OWS.  \r\nI'm trying to write strict parsing code for this header and am not sure which definition to follow.\r\n\r\nP.S. I hope I didn't screw up again.  I apologize for wasting your time (again) if I did.\n --VERIFIER NOTES-- \n See HTTPBIS mailing list discussion.", "submit_date": "2016-05-03", "submitter_name": "Kannan Goundan", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4683", "doc-id": "RFC7230", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "", "correct_text": "The name part of a transfer-parameter is case insensitive and MUST not\r\nbe \"q\" (as this would be ambiguous when used as part of the TE header).", "notes": "Nothing is said about how to handle transfer-parameters.\r\nNotably, nothing is said about the case sensitivity of the parameter key.\r\n\r\nThis results in a conflict with the TE header: if you see a \"q\" token,\r\nyou cannot know if it is a transfer-parameter vs a t-ranking.\r\n\r\nIt *is* noted that the \"q\" token is case insensitive in section 4.3.\r\n> When multiple transfer codings are acceptable, the client MAY rank\r\n> the codings by preference using a case-insensitive \"q\" parameter\r\n\r\n\r\nAlexey: as per Mark, this should be discussed in the HTTPBis WG.\r\n", "submit_date": "2016-05-04", "submitter_name": "Daurnimator", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4684", "doc-id": "RFC4462", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "      The family of SSH key exchange method names beginning with \"gss-\r\n      group1-sha1-\" and not containing the at-sign ('@'), to name the\r\n      key exchange methods defined in Section 2.3.\r\n", "correct_text": "      The family of SSH key exchange method names beginning with \"gss-\r\n      group1-sha1-\" and not containing the at-sign ('@'), to name the\r\n      key exchange methods defined in Section 2.3.\r\n\r\n      The family of SSH key exchange method names beginning with \"gss-\r\n      group14-sha1-\" and not containing the at-sign ('@'), to name the\r\n      key exchange methods defined in Section 2.4.", "notes": "The group14-sha1 family of key exchange method names was not listed in the IANA considerations as being registered.  The registration is (already) correct in http://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-16", "submit_date": "2016-05-05", "submitter_name": "Dave Thompson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-02-14 20:29:52"}, {"errata_id": "4685", "doc-id": "RFC6987", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "", "correct_text": "(At the end of the section)\r\n\r\nIf the stub router is located in transit area, crossed by virtual\r\nlink(s), latter will become inoperational in case the stub router is\r\non path between two virtual link endpoints - either due to only path\r\nin transit area or due to topology changes which move stub router onto\r\nthis path. ", "notes": "Virtual links become inoperational in case path metric between two endpoints is > 0xffff. Path metric of two or more links, one of which has MaxLinkMetric, will inevitably exceed value 0xffff.\n --VERIFIER NOTES-- \n   The suggested text is technically correct, however it is really providing additional information rather than an actual errata.   If this RFC is revised, then a discussion with the working group would be appropriate.", "submit_date": "2016-05-06", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4692", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.4", "orig_text": "   qtext           =   %d33 /             ; Printable US-ASCII\r\n                       %d35-91 /          ;  characters not including\r\n                       %d93-126 /         ;  \"\\\" or the quote character\r\n                       obs-qtext", "correct_text": "   qtext           =   %d32 /             ; Printable US-ASCII\r\n                       %d33 /             ;  characters not including\r\n                       %d35-91 /          ;  \"\\\" or the quote character\r\n                       %d93-126 /\r\n                       obs-qtext", "notes": "According to the Open Group's definition of the \"print\" class of characters in a locale [1], the SPACE character (%d32) is printable as well. So either it should be included in the \"qtext\" definition or the comment should state explicitly that it is excluded from \"qtext\" along with backslash and double quote.\r\n\r\n[1]: pubs.opengroup.org/onlinepubs/009695399/basedefs/xbd_chap07.html\r\n\r\n----- Verifier notes -----\r\nThere are many places in the document that refer to \"printable US-ASCII characters\", and it's clear from the context of them that SPACE was not included there.  This issue does need to be looked at when we revise this document to advance it to Internet Standard.", "submit_date": "2016-05-13", "submitter_name": "Oleg Andriyanov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4693", "doc-id": "RFC5085", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.3.1", "orig_text": "8.3.1.  Control Message Attribute Value Pairs (AVPs)\r\n\r\n   An additional AVP Attribute is specified in Section 6.3.1.  It was\r\n   defined by IANA as described in Section 2.2 of [RFC3438].", "correct_text": "8.3.1.  Control Message Attribute Value Pairs (AVPs)\r\n\r\n   An additional AVP Attribute is specified in Section 6.3.1.  It was\r\n   defined by IANA as described in Section 2.1 of [RFC3438].", "notes": "The correct section of RFC 3438 is 2.1 instead of 2.2", "submit_date": "2016-05-13", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4694", "doc-id": "RFC5288", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   AES-GCM security requires that the counter is never reused.  The IV\r\n   construction in Section 3 is designed to prevent counter reuse.\r\n\r\n   Implementers should also understand the practical considerations of\r\n   IV handling outlined in Section 9 of [GCM].", "correct_text": "   Security of AES-GCM requires that the \"nonce\" (number used once) is\r\n   never reused.  The IV construction in Section 3 does not prevent \r\n   implementers from reusing the nonce by mistake.  It is paramount that \r\n   the implementer be aware of the security implications when a nonce \r\n   is reused even once. \r\n\r\n   Nonce reuse in AES-GCM allows for the recovery of the authentication key \r\n   resulting in complete failure of the mode's authenticity.  Hence, TLS \r\n   sessions can be effectively attacked through forgery by an adversary.\r\n   This enables an attacker to inject data into the TLS allowing for XSS and \r\n   other attack vectors.", "notes": "Obviously the original wording is so ambiguous that implementers got it wrong in the real world. Related to: https://www.blackhat.com/us-16/briefings.html#nonce-disrespecting-adversaries-practical-forgery-attacks-on-gcm-in-tls\r\n\r\nIt may be worth adding a reference to [JOUX] http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/...38.../GCM/Joux_comments.pdf and maybe the paper we're intending to release on the actual HTTPS forgery/injection attack.\r\n\r\nI'd actually like to change the nonce construction to that of the ChaCha20/Poly1305 document, but I figure this will cause massive breakage for already deployed implementations. TLS 1.3 fixes this issue per design.", "submit_date": "2016-05-14", "submitter_name": "Aaron Zauner", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4695", "doc-id": "RFC5890", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.2.1", "orig_text": "expansion of the A-label form to a U-label may produce strings that are\r\nmuch longer than the normal 63 octet DNS limit (potentially up to 252\r\ncharacters)\r\n^^^^^^^^^", "correct_text": "expansion of the A-label form to a U-label may produce strings that are\r\nmuch longer than the normal 63 octet DNS limit (potentially up to 252\r\noctets)\r\n^^^^^", "notes": "The sentence should have used \"octets\" instead of \"characters\".\r\n\r\nA separate erratum was files for possible tightening of the upper bound in a future revision of this document.", "submit_date": "2016-05-17", "submitter_name": "Juan Altmayer Pizzorno", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7775", "doc-id": "RFC7270", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.12", "orig_text": "Abstract Data Type:  unsigned32", "correct_text": "Abstract Data Type:  unsigned8", "notes": "Section 4.12 describes an 8-bit forwardingStatus field, and xrefs CCO-NF9FMT where FORWARDING STATUS has a length of 1 (ie, 8 bits).\r\n\r\nIANA's IPFIX registry lists the Abstract Data Type for forwardingStatus as \"unsigned8\".\r\n\r\nThe \"unsigned32\" Abstract Data Type is out of sync with these other documents.\r\n\r\n== Verifier Note\r\n\r\nThis contradicts with the fix made in https://www.rfc-editor.org/rfc/rfc9710.html#section-4.3.", "submit_date": "2024-01-23", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2026-05-22 17:49:59"}, {"errata_id": "4699", "doc-id": "RFC5798", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4.3", "orig_text": "         (630) ++ MUST send ND Router Advertisements for the virtual\r\n         router.\r\n\r\n         (635) ++ If Accept_Mode is False:  MUST NOT drop IPv6 Neighbor\r\n         Solicitations and Neighbor Advertisements.\r\n\r\n      (640) +-endif // ipv4?\r\n\r\nand\r\n\r\n         (705) -+ If the Priority in the ADVERTISEMENT is zero, then:\r\n\r\n            (710) -* Send an ADVERTISEMENT\r\n\r\n            (715) -* Reset the Adver_Timer to Advertisement_Interval\r\n\r\n         (720) -+ else // priority was non-zero\r\n\r\n            (725) -* If the Priority in the ADVERTISEMENT is greater\r\n            than the local Priority,\r\n\r\n            (730) -* or\r\n\r\n            (735) -* If the Priority in the ADVERTISEMENT is equal to\r\n            the local Priority and the primary IPvX Address of the\r\n            sender is greater than the local primary IPvX Address, then:\r\n\r\n               (740) -@ Cancel Adver_Timer\r\n\r\n               (745) -@ Set Master_Adver_Interval to Adver Interval\r\n               contained in the ADVERTISEMENT\r\n\r\n               (750) -@ Recompute the Skew_Time", "correct_text": "         (630) + MUST send ND Router Advertisements for the virtual\r\n         router.\r\n\r\n         (635) + If Accept_Mode is False:  MUST NOT drop IPv6 Neighbor\r\n         Solicitations and Neighbor Advertisements.\r\n\r\n      (640) -endif // ipv4?\r\n\r\nand\r\n\r\n         (705) + If the Priority in the ADVERTISEMENT is zero, then:\r\n\r\n            (710) * Send an ADVERTISEMENT\r\n\r\n            (715) * Reset the Adver_Timer to Advertisement_Interval\r\n\r\n         (720) + else // priority was non-zero\r\n\r\n            (725) * If the Priority in the ADVERTISEMENT is greater\r\n            than the local Priority,\r\n\r\n            (730) * or\r\n\r\n            (735) * If the Priority in the ADVERTISEMENT is equal to\r\n            the local Priority and the primary IPvX Address of the\r\n            sender is greater than the local primary IPvX Address, then:\r\n\r\n               (740) @ Cancel Adver_Timer\r\n\r\n               (745) @ Set Master_Adver_Interval to Adver Interval\r\n               contained in the ADVERTISEMENT\r\n\r\n               (750) @ Recompute the Skew_Time\r\n", "notes": "Between\r\n     (750) -@ Recompute the Skew_Time\r\nand\r\n    (755) @ Recompute the Master_Down_Interval\r\n\r\nthe indentation level marking changes from '-@' to '@'. The corrected text removes the extra '+' from (630) to (640) and '-' from (705) to (750).", "submit_date": "2016-05-19", "submitter_name": "Quentin Armitage", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4700", "doc-id": "RFC7539", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.8", "orig_text": "    The output from the AEAD is twofold:\r\n\r\n   o  A ciphertext of the same length as the plaintext.\r\n   o  A 128-bit tag, which is the output of the Poly1305 function.", "correct_text": "    The output from the AEAD is the concatenation of:\r\n\r\n   o  A ciphertext of the same length as the plaintext.\r\n   o  A 128-bit tag, which is the output of the Poly1305 function.", "notes": "Section 2.1 of RFC 5116 defines the AEAD interface, and that interface produces a single output, C (or an error).", "submit_date": "2016-05-24", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4701", "doc-id": "RFC5639", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "    Seed_ab_384 for brainpoolP384r1:\r\n    BCFBFA1C877C56284DAB79CD4C2B3293D20E9E5E\r\n\r\n|   Seed_ab_512 for brainpoolP384r1:\r\n    AF02AC60ACC93ED874422A52ECB238FEEE5AB6AD", "correct_text": "    Seed_ab_384 for brainpoolP384r1:\r\n    BCFBFA1C877C56284DAB79CD4C2B3293D20E9E5E\r\n\r\n|   Seed_ab_512 for brainpoolP512r1:\r\n    AF02AC60ACC93ED874422A52ECB238FEEE5AB6AD", "notes": "Copy/Paste-Error, change noted as correct by Manfred Lochter", "submit_date": "2016-05-25", "submitter_name": "Mirko Dressler", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4824", "doc-id": "RFC5890", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "Because A-labels (the form actually used in the\r\nDNS) are potentially much more compressed than UTF-8 (and UTF-8 is,\r\nin general, more compressed that UTF-16 or UTF-32), U-labels that\r\nobey all of the relevant symmetry (and other) constraints of these\r\ndocuments may be quite a bit longer, potentially up to 252 characters\r\n(Unicode code points).", "correct_text": "Because A-labels (the form actually used in the\r\nDNS) are potentially much more compressed than UTF-8 (and UTF-8 is,\r\nin general, more compressed that UTF-16 or UTF-32), U-labels that\r\nobey all of the relevant symmetry (and other) constraints of these\r\ndocuments may be quite a bit longer, potentially up to 59 Unicode\r\ncode points, or up to 236 octets.", "notes": "(The same rationale as my report for 2.3.2.1 applies:)\r\n\r\nThe contents of U-labels are encoded in the up to 59 ASCII characters (see 2.3.2.1)\r\noutput by the Punycode algorithm in their corresponding A-labels.  The Punycode\r\ndecoder (https://tools.ietf.org/html/rfc3492#section-6.2) consumes at least one\r\nof those ASCII characters for each code point inserted into the U-label. An U-label,\r\nthus, can contain at the most 59 Unicode code points.\r\n\r\nSince U-labels are defined (in 2.3.2.1) to be expressed in a standard Unicode Encoding\r\nForm, and UTF-32, UTF-16 and UTF-8 (as revised by RFC3629) all can encode a code\r\npoint in at most 4 octets, 236 octets is an upper bound for an U-label's length.\r\n\r\nI think it should be possible to derive a tighter bound, but its rationale would likely be\r\nless straighforward.\r\n\r\nI imagine the number 252 was originally derived by multiplying 63, the maximum\r\nlength of an A-label (including the \"xn--\" prefix), by 4, the maximum number of\r\noctets needed to represent a code point.", "submit_date": "2016-05-17", "submitter_name": "Juan Altmayer Pizzorno", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4696", "doc-id": "RFC5890", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Because A-labels (the form actually used in the\r\nDNS) are potentially much more compressed than UTF-8 (and UTF-8 is,\r\nin general, more compressed that UTF-16 or UTF-32), U-labels that\r\nobey all of the relevant symmetry (and other) constraints of these\r\ndocuments  may be quite a bit longer, potentially up to 252 characters\r\n(Unicode code points).", "correct_text": "Because A-labels (the form actually used in the\r\nDNS) are potentially much more compressed than UTF-8 (and UTF-8 is,\r\nin general, more compressed that UTF-16 or UTF-32), U-labels that\r\nobey all of the relevant symmetry (and other) constraints of these\r\ndocuments  may be quite a bit longer, potentially up to 252 octets.\r\n                                                        ^^^^^^^^^^\r\n", "notes": "Similar to Erratum 4695.\r\n", "submit_date": "2016-05-17", "submitter_name": "Juan Altmayer Pizzorno", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4825", "doc-id": "RFC7230", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "chunk-ext      = *( \";\" chunk-ext-name [ \"=\" chunk-ext-val ] )\r\n", "correct_text": "chunk-ext      = *( BWS  \";\" BWS chunk-ext-name\r\n                    [ BWS  \"=\" BWS chunk-ext-val ] )", "notes": "The infamous \"implicit *LWS\" syntax rule in RFC 2616 allowed whitespace between\r\n\";\" and chunk-ext-name in chunk-ext. Some HTTP agents generate that whitespace.\r\nIn my experience, HTTP agents that can parse chunk extensions usually can handle\r\nthat whitespace. Moreover, ICAP, which generally relies on HTTP/1 for its message\r\nsyntax, uses that whitespace when defining the \"ieof\" chunk extension in RFC 3507\r\nSection 4.5:\r\n\r\n      \\r\\n\r\n      0; ieof\\r\\n\\r\\n\r\n\r\nIMHO, RFC 7230 should either allow BWS before chunk-ext-name or at the very least\r\nexplicitly document the HTTP/1 syntax change and its effect on parsers used for both\r\nICAP and HTTP/1 messages (a very common case for ICAP-supporting HTTP\r\nintermediaries and ICAP services).\r\n\r\nI also recommend adding BWS around \"=\", for consistency and RFC 2616 backward\r\ncompatibility reasons. HTTPbis RFCs already do that for transfer-parameter and\r\nauth-param that have similar syntax.\r\n\r\nPlease also consider adding BWS _before_ \";\" for consistency and RFC 2616 backward\r\ncompatibility reasons. HTTPbis RFCs already do that for transfer-extension,\r\naccept-ext,  t-ranking, and other constructs with similar syntax.\r\n", "submit_date": "2016-04-13", "submitter_name": "Alex Rousskov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4697", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "For example, the \"bearer\" token type defined in [RFC6750] is utilized\r\n   by simply including the access token string in the request:\r\n", "correct_text": "For example, the \"Bearer\" token type defined in [RFC6750] is utilized\r\n   by simply including the access token string in the request:\r\n", "notes": "RFC6750 defines the \"Bearer\" token type not the \"bearer\" token type.", "submit_date": "2016-05-19", "submitter_name": "Ludwig Seitz", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4698", "doc-id": "RFC5798", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4.2", "orig_text": "(465) * else // preempt was true or priority was less", "correct_text": "(465) * else // preempt was true and priority was less", "notes": "This is the complement of (445) - If Preempt_Mode is False, or if the Priority ... is greater than or equal to the local priority, and so should be Preempt_Mode is True and the Priority is less than the local priority", "submit_date": "2016-05-19", "submitter_name": "Quentin Armitage", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4807", "doc-id": "RFC6564", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4 and 9", "orig_text": "In Section 4:\r\n\r\nNext Header          8-bit selector.  Identifies the type of header\r\n                        immediately following the extension header.\r\n                        Uses the same values as the IPv4 Protocol field\r\n                        [IANA_IP_PARAM].\r\n\r\nIn Section 9:\r\n\r\n[IANA_IP_PARAM] IANA, \"IP Parameters\",\r\n                   <http://www.iana.org/assignments/ip-parameters>.", "correct_text": "In Section 4:\r\n\r\nNext Header          8-bit selector.  Identifies the type of header\r\n                        immediately following the extension header.\r\n                        Uses the same values as the IPv4 Protocol field\r\n                        [IANA-PN].\r\n\r\nIn Section 9:\r\n\r\n[IANA-PN]  \"Assigned Internet Protocol Numbers\",\r\n              <https://www.iana.org/assignments/protocol-numbers/\r\n              protocol-numbers.xhtml>.", "notes": "This is being handled in the 2460bis work.", "submit_date": "2016-09-20", "submitter_name": "Tim Chown", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4836", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "  key        =  1*23( %x01-05 / %x07-08 / %x0C / %x0E-1F / %x21-7F )\r\n                  ; any 7-bit US_ASCII character,\r\n                  ; except NUL, CR, LF, FF, h/v TABs, and \" \"", "correct_text": "  key        =  1*23( %x01-05 / %x07-08 / %x0C / %x0E-1F / %x21-7F )\r\n                  ; any 7-bit US_ASCII character,\r\n                  ; except NUL, CR, LF, ACK, h/v TABs, and \" \"\r\n\r\nOR\r\n\r\n  key        =  1*23( %x01-08 / %x0E-1F / %x21-7F )\r\n                  ; any 7-bit US_ASCII character,\r\n                  ; except NUL, CR, LF, FF, h/v TABs, and \" \"", "notes": "The hex for ACK and FF are x06 and x0C, respectively. The expression of the original text excludes ACK and includes FF. Therefore there is an error in either the expression or the comments following.\r\nIf the error is in the comments, then the first corrected text should be selected.\r\nIf the error is in the expression, then the second corrected text should be selected.\r\n\r\n----- Verifier Notes -----\r\nThis is quite correct, though I have no idea which correction is right.  In practice, I imagine it makes little difference, as it's unlikely that either character will actually be used.", "submit_date": "2016-10-19", "submitter_name": "Brenden Case", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4705", "doc-id": "RFC6192", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   ipv6 access-list EBGPv6\r\n    permit tcp host 2001:DB8:100::25 eq bgp any\r\n    permit tcp host 2001:DB8:100::25 any eq bgp\r\n    permit tcp host 2001:DB8:100::27 eq bgp any\r\n    permit tcp host 2001:DB8:100::27 any eq bgp\r\n    permit tcp host 2001:DB8:100::29 eq bgp any\r\n    permit tcp host 2001:DB8:100::29 any eq bgp\r\n    permit tcp host 2001:DB8:100::31 eq bgp any\r\n    permit tcp host 2001:DB8:100::31 any eq bgp\r\n   ip access-list extended DNS\r\n    permit udp 198.51.100.0 0.0.0.252 eq domain any\r\n   ipv6 access-list DNSv6\r\n    permit udp 2001:DB8:100:1::/64 eq domain any\r\n    permit tcp 2001:DB8:100:1::/64 eq domain any\r\n   ip access-list extended NTP", "correct_text": "   ipv6 access-list EBGPv6\r\n    permit tcp host 2001:DB8:100::25 eq bgp any\r\n    permit tcp host 2001:DB8:100::25 any eq bgp\r\n    permit tcp host 2001:DB8:100::27 eq bgp any\r\n    permit tcp host 2001:DB8:100::27 any eq bgp\r\n    permit tcp host 2001:DB8:100::29 eq bgp any\r\n    permit tcp host 2001:DB8:100::29 any eq bgp\r\n    permit tcp host 2001:DB8:100::31 eq bgp any\r\n    permit tcp host 2001:DB8:100::31 any eq bgp\r\n   ip access-list extended DNS\r\n    permit udp 198.51.100.0 0.0.0.252 eq domain any\r\n    permit tcp 198.51.100.0 0.0.0.252 eq domain any\r\n   ipv6 access-list DNSv6\r\n    permit udp 2001:DB8:100:1::/64 eq domain any\r\n    permit tcp 2001:DB8:100:1::/64 eq domain any\r\n   ip access-list extended NTP", "notes": "DNS is transported sometimes over UDP and sometimes over TCP. The Cisco example fails to demonstrate this behaviour in the case of IPv4. The Cisco example clearly shows this behaviour in the case of IPv6.\r\n\r\nThe Juniper example in Section A.2 should be amended in the same fashion, however I'm unfamiliar with the proper JunOS syntax.", "submit_date": "2016-06-07", "submitter_name": "Trond Endrest\u00f8l", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4706", "doc-id": "RFC6068", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3", "orig_text": "3.  Whitespace and comments within <local-part> and <domain> MUST NOT\r\n    be used.  They would not have any operational semantics.", "correct_text": "3.  Whitespace and comments within <local-part> and <domain> MUST NOT\r\n    be used except quoted whitespace in <quoted-string>. \r\n    They would not have any operational semantics.", "notes": "<local-part> contain <quoted-string> and <quoted-string> contains <quoted-pair> according to definition in RFC 5322.\r\n\r\nquoted-pair     =   (\"\\\" (VCHAR / WSP)) / obs-qp\r\n\r\nAs definition above, <quoted-pair> contains whitespace <WSP> which according to RFC 6068, MUST NOT be used.\r\n\r\nBut example in RFC 6068 section 6.2 contain quoted whitespace. So I guess this is an exception.", "submit_date": "2016-06-08", "submitter_name": "stream9", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4707", "doc-id": "RFC7233", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix C", "orig_text": "The following core rules are included by reference, as defined in\r\nAppendix B.1 of [RFC5234]: ALPHA (letters), CR (carriage return),\r\nCRLF (CR LF), CTL (controls), DIGIT (decimal 0-9), DQUOTE (double\r\nquote), HEXDIG (hexadecimal 0-9/A-F/a-f), LF (line feed), OCTET (any\r\n8-bit sequence of data), SP (space), and VCHAR (any visible US-ASCII\r\ncharacter).", "correct_text": "The following core rules are included by reference, as defined in\r\nAppendix B.1 of [RFC5234]: ALPHA (letters), CHAR (single character),\r\nCR (carriage return),\r\nCRLF (CR LF), CTL (controls), DIGIT (decimal 0-9), DQUOTE (double\r\nquote), HEXDIG (hexadecimal 0-9/A-F/a-f), LF (line feed), OCTET (any\r\n8-bit sequence of data), SP (space), and VCHAR (any visible US-ASCII\r\ncharacter).", "notes": "CHAR is used in Section 4.2 but not mentioned here.", "submit_date": "2016-06-09", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4708", "doc-id": "RFC5538", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "newsURL         = \"news:\" [ server \"/\" ] ( article / newsgroups )", "correct_text": "newsURL         = \"news:\" [ server \"/\" ] [ article / newsgroups ]", "notes": "Neither <article> nor <newsgroups> allow empty entries, but in the example there is an empty entry.\r\n\r\nnews://news.server.example/\r\n\r\nWhich means the as same as\r\n\r\nnews://news.server.example/*", "submit_date": "2016-06-11", "submitter_name": "stream9", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4724", "doc-id": "RFC7574", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.3", "orig_text": "swarm ID\r\nUnique identifier for a swarm of peers, in PPSPP a sequence of\r\nbytes. For video on demand with content integrity protection\r\nenabled, the identifier is the so-called root hash of a Merkle\r\nhash tree over the content. For live streaming, the swarm ID is\r\na public key.", "correct_text": "swarm ID\r\nUnique identifier for a swarm of peers, in PPSPP a sequence of\r\nbytes. For video on demand, the identifier is the so-called root hash\r\nof a Merkle hash tree over the content. For live streaming, the \r\nswarm ID is a public key.", "notes": "According to chapter 5 and chapter 6.1, it seems that it is not mandatory to use content integrity protection scheme.\r\nThe definition of swarm ID in the original text does not define how the ID is used in environment with the content integrity protection disabled.\r\nIt is possible to add new description on how swarm ID is defined in the content integrity protection scheme is disabled. \r\nOr, it is possible to remove the parts regarding content integrity protection.\r\n\r\nWe propose to remove \"with content integrity protection enabled\" part.\r\n\r\nSpencer: confirmed in conversations with Victor Grishchenko <victor.grishchenko@gmail.com> on the PPSP mailing list.", "submit_date": "2016-07-01", "submitter_name": "Sung Hei Kim, Chang Kyu Lee", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4837", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "[RFC2235] Zakon, R., \"Hobbes' Internet Timeline\", FYI 32, RFC 2230,\r\n   November 1997.  See also", "correct_text": "[RFC2235] Zakon, R., \"Hobbes' Internet Timeline\", FYI 32, RFC 2235,\r\n   November 1997.  See also", "notes": "The reference entry to RFC 2235 contains the wrong RFC number.", "submit_date": "2016-10-19", "submitter_name": "Ignasi Cavero", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4839", "doc-id": "RFC7230", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   Parameters are in the form of a name or name=value pair.\r\n\r\n     transfer-parameter = token BWS \"=\" BWS ( token / quoted-string )", "correct_text": "   Parameters are in the form of a name=value pair.\r\n\r\n     transfer-parameter = token BWS \"=\" BWS ( token / quoted-string )", "notes": "The ABNF does not allow the form of a name.", "submit_date": "2016-10-23", "submitter_name": "Etan Kissling", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4709", "doc-id": "RFC4301", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix C", "orig_text": "In the ASN.1 module for this RFC, the following errors prevented syntax \r\nchecking and compilation for programming language code generation:\r\n\r\n1. Changed \"DEFINITIONS IMPLICIT TAGS = BEGIN\" to \r\n           \"DEFINITIONS IMPLICIT TAGS ::= BEGIN\"\r\n\r\n2. Changed \"SPD = SEQUENCE OF SPDEntry\" to \r\n           \"SPD ::= SEQUENCE OF SPDEntry\"\r\n\r\n3. Changed \r\n   \"parameters  ANY -- DEFINED BY algorithm } -- defined outside\" to\r\n   \"parameters  ANY } -- defined outside\"\r\n\r\n4. Changed \"SPDEntry = CHOICE\" to \"SPDEntry := CHOICE\"\r\n\r\n5. Changed \"IPsecEntry = SEQUENCE\" to \"IPsecEntry ::= SEQUENCE\"\r\n\r\n6. Changed \"BypassOrDiscardEntry = SEQUENCE\" to \r\n           \"BypassOrDiscardEntry ::= SEQUENCE\"\r\n\r\n7. Changed \"InOutBound = CHOICE\" to \"InOutBound ::= CHOICE\"\r\n\r\n8. Changed \"iso(1) org (3) dod (6)\" to \r\n           \"iso(1) identified-organization (3) dod (6)\"\r\n\r\nA correct ASN.1 module follows in the \"Corrected Text\" field. \r\n\r\n\r\n", "correct_text": "SPDModule { \r\n   iso(1) identified-organization (3) dod (6) internet (1) security (5) \r\n      mechanisms (5) ipsec (8) asn1-modules (3) spd-module (1) \r\n}\r\n   DEFINITIONS IMPLICIT TAGS ::= BEGIN\r\n\r\n   IMPORTS\r\n      RDNSequence FROM PKIX1Explicit88 { \r\n         iso(1) identified-organization(3) dod(6) internet(1) \r\n            security(5) mechanisms(5) pkix(7) id-mod(0) \r\n               id-pkix1-explicit(18) };\r\n\r\n-- An SPD is a list of policies in decreasing order of preference\r\n\r\nSPD ::= SEQUENCE OF SPDEntry\r\n\r\nSPDEntry ::= CHOICE {\r\n           iPsecEntry       IPsecEntry,               -- PROTECT traffic\r\n           bypassOrDiscard  [0] BypassOrDiscardEntry } -- DISCARDBYPASS\r\n\r\n       IPsecEntry ::= SEQUENCE {       -- Each entry consists of\r\n           name        NameSets OPTIONAL,\r\n           pFPs        PacketFlags,    -- Populate from packet flags\r\n                              -- Applies to ALL of the corresponding\r\n                              -- traffic selectors in the SelectorLists\r\n           condition   SelectorLists,  -- Policy condition\r\n           processing  Processing      -- Policy action\r\n}\r\n\r\nBypassOrDiscardEntry ::= SEQUENCE {\r\n   bypass      BOOLEAN,        -- TRUE BYPASS, FALSE DISCARD\r\n   condition   InOutBound }\r\n\r\nInOutBound ::= CHOICE {\r\n           outbound    [0] SelectorLists,\r\n           inbound     [1] SelectorLists,\r\n           bothways    [2] BothWays }\r\n\r\n       BothWays ::= SEQUENCE {\r\n           inbound     SelectorLists,\r\n           outbound    SelectorLists }\r\n\r\n       NameSets ::= SEQUENCE {\r\n           passed      SET OF Names-R,  -- Matched to IKE ID by\r\n                                        -- responder\r\n           local       SET OF Names-I } -- Used internally by IKE\r\n                                        -- initiator\r\n\r\n       Names-R ::= CHOICE {                   -- IKEv2 IDs\r\n           dName       RDNSequence,           -- ID_DER_ASN1_DN\r\n           fqdn        FQDN,                  -- ID_FQDN\r\n           rfc822      [0] RFC822Name,        -- ID_RFC822_ADDR\r\n           keyID       OCTET STRING }         -- KEY_ID\r\n\r\n       Names-I ::= OCTET STRING       -- Used internally by IKE\r\n                                      -- initiator\r\n\r\n       FQDN ::= IA5String\r\n\r\n       RFC822Name ::= IA5String\r\n\r\n       PacketFlags ::= BIT STRING {\r\n                   -- if set, take selector value from packet\r\n                   -- establishing SA\r\n                   -- else use value in SPD entry\r\n           localAddr  (0),\r\n           remoteAddr (1),\r\n           protocol   (2),\r\n           localPort  (3),\r\n           remotePort (4)  }\r\n\r\n       SelectorLists ::= SET OF SelectorList\r\n\r\n       SelectorList ::= SEQUENCE {\r\n           localAddr   AddrList,\r\n           remoteAddr  AddrList,\r\n           protocol    ProtocolChoice }\r\n\r\n       Processing ::= SEQUENCE {\r\n           extSeqNum   BOOLEAN, -- TRUE 64 bit counter, FALSE 32 bit\r\n           seqOverflow BOOLEAN, -- TRUE rekey, FALSE terminate & audit\r\n           fragCheck   BOOLEAN, -- TRUE stateful fragment checking,\r\n                                -- FALSE no stateful fragment checking\r\n           lifetime    SALifetime,\r\n           spi         ManualSPI,\r\n           algorithms  ProcessingAlgs,\r\n           tunnel      TunnelOptions OPTIONAL } -- if absent, use\r\n                                                -- transport mode\r\n\r\n       SALifetime ::= SEQUENCE {\r\n           seconds   [0] INTEGER OPTIONAL,\r\n           bytes     [1] INTEGER OPTIONAL }\r\n\r\n       ManualSPI ::= SEQUENCE {\r\n           spi     INTEGER,\r\n           keys    KeyIDs }\r\n\r\n       KeyIDs ::= SEQUENCE OF OCTET STRING\r\n\r\n       ProcessingAlgs ::= CHOICE {\r\n           ah          [0] IntegrityAlgs,  -- AH\r\n           esp         [1] ESPAlgs}        -- ESP\r\n\r\n       ESPAlgs ::= CHOICE {\r\n           integrity       [0] IntegrityAlgs,       -- integrity only\r\n           confidentiality [1] ConfidentialityAlgs, -- confidentiality\r\n                                                    -- only\r\n           both            [2] IntegrityConfidentialityAlgs,\r\n           combined        [3] CombinedModeAlgs }\r\n\r\n       IntegrityConfidentialityAlgs ::= SEQUENCE {\r\n           integrity       IntegrityAlgs,\r\n           confidentiality ConfidentialityAlgs }\r\n\r\n       -- Integrity Algorithms, ordered by decreasing preference\r\n\r\n       IntegrityAlgs ::= SEQUENCE OF IntegrityAlg\r\n\r\n       -- Confidentiality Algorithms, ordered by decreasing preference\r\n\r\n       ConfidentialityAlgs ::= SEQUENCE OF ConfidentialityAlg\r\n\r\n       -- Integrity Algorithms\r\n\r\n       IntegrityAlg ::= SEQUENCE {\r\n           algorithm   IntegrityAlgType,\r\n           parameters  ANY -- DEFINED BY algorithm -- OPTIONAL }\r\n\r\n       IntegrityAlgType ::= INTEGER {\r\n           none              (0),\r\n           auth-HMAC-MD5-96  (1),\r\n           auth-HMAC-SHA1-96 (2),\r\n           auth-DES-MAC      (3),\r\n           auth-KPDK-MD5     (4),\r\n           auth-AES-XCBC-96  (5)\r\n       --  tbd (6..65535)\r\n           }\r\n\r\n       -- Confidentiality Algorithms\r\n\r\n       ConfidentialityAlg ::= SEQUENCE {\r\n           algorithm   ConfidentialityAlgType,\r\n           parameters  ANY -- DEFINED BY algorithm -- OPTIONAL }\r\n\r\n       ConfidentialityAlgType ::= INTEGER {\r\n           encr-DES-IV64   (1),\r\n           encr-DES        (2),\r\n           encr-3DES       (3),\r\n           encr-RC5        (4),\r\n           encr-IDEA       (5),\r\n           encr-CAST       (6),\r\n           encr-BLOWFISH   (7),\r\n           encr-3IDEA      (8),\r\n           encr-DES-IV32   (9),\r\n           encr-RC4       (10),\r\n           encr-NULL      (11),\r\n           encr-AES-CBC   (12),\r\n           encr-AES-CTR   (13)\r\n       --  tbd (14..65535)\r\n           }\r\n\r\n       CombinedModeAlgs ::= SEQUENCE OF CombinedModeAlg\r\n\r\n       CombinedModeAlg ::= SEQUENCE {\r\n           algorithm   CombinedModeType,\r\n           parameters  ANY } -- defined outside\r\n\r\n                                    -- of this document for AES modes.\r\n       CombinedModeType ::= INTEGER {\r\n           comb-AES-CCM    (1),\r\n           comb-AES-GCM    (2)\r\n       --  tbd (3..65535)\r\n           }\r\n\r\n       TunnelOptions ::= SEQUENCE {\r\n           dscp        DSCP,\r\n           ecn         BOOLEAN,    -- TRUE Copy CE to inner header\r\n           df          DF,\r\n           addresses   TunnelAddresses }\r\n\r\n       TunnelAddresses ::= CHOICE {\r\n           ipv4        IPv4Pair,\r\n           ipv6        [0] IPv6Pair }\r\n\r\n       IPv4Pair ::= SEQUENCE {\r\n           local       OCTET STRING (SIZE(4)),\r\n           remote      OCTET STRING (SIZE(4)) }\r\n\r\n       IPv6Pair ::= SEQUENCE {\r\n           local       OCTET STRING (SIZE(16)),\r\n           remote      OCTET STRING (SIZE(16)) }\r\n\r\n       DSCP ::= SEQUENCE {\r\n           copy      BOOLEAN, -- TRUE copy from inner header\r\n                              -- FALSE do not copy\r\n           mapping   OCTET STRING OPTIONAL} -- points to table\r\n                                            -- if no copy\r\n       DF ::= INTEGER {\r\n           clear   (0),\r\n           set     (1),\r\n           copy    (2) }\r\n\r\n       ProtocolChoice::= CHOICE {\r\n           anyProt  AnyProtocol,              -- for ANY protocol\r\n           noNext   [0] NoNextLayerProtocol,  -- has no next layer\r\n                                              -- items\r\n           oneNext  [1] OneNextLayerProtocol, -- has one next layer\r\n                                              -- item\r\n           twoNext  [2] TwoNextLayerProtocol, -- has two next layer\r\n                                              -- items\r\n           fragment FragmentNoNext }          -- has no next layer\r\n                                              -- info\r\n\r\n       AnyProtocol ::= SEQUENCE {\r\n           id          INTEGER (0),    -- ANY protocol\r\n           nextLayer   AnyNextLayers }\r\n\r\n       AnyNextLayers ::= SEQUENCE {      -- with either\r\n           first       AnyNextLayer,     -- ANY next layer selector\r\n           second      AnyNextLayer }    -- ANY next layer selector\r\n\r\n       NoNextLayerProtocol ::= INTEGER (2..254)\r\n\r\n       FragmentNoNext ::= INTEGER (44)   -- Fragment identifier\r\n\r\n       OneNextLayerProtocol ::= SEQUENCE {\r\n           id          INTEGER (1..254),   -- ICMP, MH, ICMPv6\r\n           nextLayer   NextLayerChoice }   -- ICMP Type*256+Code\r\n                                           -- MH   Type*256\r\n\r\n       TwoNextLayerProtocol ::= SEQUENCE {\r\n           id          INTEGER (2..254),   -- Protocol\r\n           local       NextLayerChoice,    -- Local and\r\n           remote      NextLayerChoice }   -- Remote ports\r\n\r\n       NextLayerChoice ::= CHOICE {\r\n           any         AnyNextLayer,\r\n           opaque      [0] OpaqueNextLayer,\r\n           range       [1] NextLayerRange }\r\n\r\n       -- Representation of ANY in next layer field\r\n\r\n       AnyNextLayer ::= SEQUENCE {\r\n           start       INTEGER (0),\r\n           end         INTEGER (65535) }\r\n\r\n       -- Representation of OPAQUE in next layer field.\r\n       -- Matches IKE convention\r\n\r\n       OpaqueNextLayer ::= SEQUENCE {\r\n           start       INTEGER (65535),\r\n           end         INTEGER (0) }\r\n\r\n-- Range for a next layer field\r\n\r\nNextLayerRange ::= SEQUENCE {\r\n   start  INTEGER (0..65535),\r\n   end    INTEGER (0..65535) \r\n}\r\n\r\n-- List of IP addresses\r\n\r\nAddrList ::= SEQUENCE {\r\n   v4List  IPv4List OPTIONAL,\r\n   v6List  [0] IPv6List OPTIONAL\r\n}\r\n\r\n-- IPv4 address representations\r\n\r\nIPv4List ::= SEQUENCE OF IPv4Range\r\n\r\nIPv4Range ::= SEQUENCE {    -- close, but not quite right ...\r\n   ipv4Start  OCTET STRING (SIZE (4)),\r\n   ipv4End    OCTET STRING (SIZE (4)) \r\n}\r\n\r\n-- IPv6 address representations\r\n\r\nIPv6List ::= SEQUENCE OF IPv6Range\r\n\r\nIPv6Range ::= SEQUENCE {    -- close, but not quite right ...\r\n   ipv6Start  OCTET STRING (SIZE (16)),\r\n   ipv6End    OCTET STRING (SIZE (16)) \r\n}\r\n\r\nEND\r\n\r\n", "notes": "Note that I included an ASN.1 module stub to resolve an imported value in the module. \r\n\r\nPKIX1Explicit88 { \r\n   iso(1) identified-organization(3) dod(6) internet(1) security(5) \r\n      mechanisms(5) pkix(7) id-mod(0) id-pkix1-explicit(18) \r\n}\r\n   DEFINITIONS EXPLICIT TAGS ::= BEGIN\r\n\r\nRDNSequence ::= SEQUENCE {}\r\n\r\nEND  -- PKIX1Explicit88 --\n --VERIFIER NOTES-- \n        This is for RFC4301 and tries to fix the ASN.1 in Appendix C.\r\n        The proposed changes uses lines which are not part of the\r\n        RFC4301, i.e., the \"=\" -> \"::=\" that are listed as needed to\r\n        be done, are already \"::=\" in the RFC4301.\r\n\r\n        The only other proposed changes are to remove\r\n        \"-- DEFINED BY algorithm\" from one location, but it\r\n        leaves it in in few other places. It also proposes to change\r\n        iso(1) org (3) dod (6)\" to \"iso(1) identified-organization (3)\r\n        dod (6) which might be correct, but is not needed.", "submit_date": "2016-06-14", "submitter_name": "Phillip H. Griffin", "verifier_id": "", "verifier_name": null, "update_date": "2023-08-02 17:05:04"}, {"errata_id": "4710", "doc-id": "RFC7666", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2 IANA MIB", "orig_text": "IANAStorageMediaType ::= TEXTUAL-CONVENTION\r\n       STATUS       current\r\n       DESCRIPTION\r\n               \"The media type of a storage device:\r\n\r\n               unknown(1)     The media type is unknown, e.g., because\r\n                              the implementation failed to obtain the\r\n                              media type from the hypervisor.\r\n\r\n               other(2)       The media type is other than those\r\n                              defined in this conversion.", "correct_text": "IANAStorageMediaType ::= TEXTUAL-CONVENTION\r\n       STATUS       current\r\n       DESCRIPTION\r\n               \"The media type of a storage device:\r\n\r\n                 other(1)       The media type is other than those\r\n                                defined in this conversion.\r\n\r\n                 unknown(2)     The media type is unknown, e.g., because\r\n                                the implementation failed to obtain the\r\n                                media type from the hypervisor.\r\n", "notes": "Inversion of other and unknown integer values in the description of the IANAStorageMediaType TEXTUAL-CONVENTION.\r\n\r\nFIrst referenced at IANA  RT as [IANA #913286] Incoherency in IANA-STORAGE-MEDIA-TYPE-MIB", "submit_date": "2016-06-15", "submitter_name": "jean-marie Kubek", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4711", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15.1.5.5", "orig_text": "A stateid with a non-zero seqid value does match the current seqid\r\n   for the state designated by the user.", "correct_text": "A stateid with a non-zero seqid value is not the most current seqid\r\n   for the state.", "notes": "Two issues here:\r\n\r\n1) The negation of the fact, i.e., \"does not match\".\r\n2) The state is not associated with an user.", "submit_date": "2016-06-16", "submitter_name": "Tom Haynes", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-09-03 11:05:40"}, {"errata_id": "7776", "doc-id": "RFC2131", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "Client identifier         MUST NOT     MUST NOT           MAY", "correct_text": "Client identifier         MUST NOT     MUST NOT           MUST NOT", "notes": "In the \"Options\" list in Table 3 (\"Fields and options used by DHCP server\"), the \"Client identifier\" option has \"MUST NOT\" for both DHCPOFFER and DHCPACK; however, for DHCPNAK, it has \"MAY\".\r\n\r\n\"Client identifier\" should be a \"MUST NOT\" for DHCPNAK as well. \r\n\r\nIt seems that the field should only be used by a client and never by a server, and if that's true for the OFFER and ACK, then it should be even more correct for the NAK.\r\n\r\n\"Vendor class identifier\" has a MAY for all three messages, so maybe it was a typo in the previous option because of the repetitive input in the next one.\n --VERIFIER NOTES-- \nRFC 6842 has addressed this problem with more information than a simple errata.\r\n\r\nI.e., the problem in RFC 2131 exists indeed but has been fixed.", "submit_date": "2024-01-23", "submitter_name": "Imrane", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-04-23 12:59:15"}, {"errata_id": "4730", "doc-id": "RFC7748", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "V(P)  147816194475895447910205935684099868872646061346164752889648818\r\n37755586237401", "correct_text": "V(P)  431144251710685529207648989359339670393703861982038067307639101\r\n66200978582548", "notes": "The Montgomery form of the curve is generally used with a ladder, where the v coordinate is unused and unspecified. Thus I picked the smaller of the two possible values for v.\r\n\r\nHowever, the curve is birationally equivalent to edwards25519, where both coordinates of the base point are used and are already in widespread use. Sadly, picking the smaller of the values for v ends up mapping to the negative of the base point on edwards25519.\r\n\r\nThis change replaces v with -v so that it matches up.", "submit_date": "2016-07-05", "submitter_name": "Adam Langley", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4744", "doc-id": "RFC4028", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "   A UAC starts by sending an INVITE.  This includes a Supported header\r\n   field with the option tag 'timer', indicating support for this\r\n   extension.\r\n", "correct_text": "   A UAC starts by sending an INVITE.  This includes a Supported header\r\n   field with the option tag 'timer', indicating support for this\r\n   extension.If UAC or UAS knows one negotiation of session timer is \r\n   ongoing, it SHALL not start a new one.\r\n", "notes": "Add one more sentence here \"If UAC knows one negotiation of session timer is ongoing, it SHALL  not start a new one.\"\r\nActually in the scenarios of session set-up or session modification, it is easy to see the message exchange of UPDATE and (re-)INVITE, according to this RFC, both of them are allowed for the negotiation of session timer, the decision shall be taken on their own 200 OK. Normally the negotiation of session time of (re-)INVITE is started at first and the UPDATE's will be taken place, from UAS perspective, it needs to treat two negotiations of session timer in-parallel, since there is no kind of mechanism to protect the parameters carried in (re-)INVITE and UPDATE being inconsistent, it brings a problem on UAS that the result of two negotiations might be different specially for the parameter of refresher and also the inconsistency will cause UAS to meet a conflict while it is deciding the parameters especially for refresher on 200 OK of (re-)INVITE. In order to avoid this problem, it is better to disallow a net negotiation of session timer until the ongoing one is finished.", "submit_date": "2016-07-19", "submitter_name": "Chao Wang", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4725", "doc-id": "RFC7574", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "PPSPP can use different methods for protecting the integrity of the\r\ncontent while it is being distributed via the peer-to-peer network.\r\nMore specifically, PPSPP can use different methods for receiving\r\npeers to detect whether a requested chunk has been maliciously\r\nmodified by the sending peer. In benign environments, content\r\nintegrity protection can be disabled.\r\n\r\nFor static content, PPSPP currently defines one method for protecting\r\nintegrity, called the Merkle Hash Tree scheme. If PPSPP operates\r\nover the Internet, this scheme MUST be used. If PPSPP operates in a\r\nbenign environment, this scheme MAY be used. So the scheme is\r\nmandatory to implement, to satisfy the requirement of strong security\r\nfor an IETF protocol [RFC3365]. An extended version of the scheme is\r\nused to efficiently protect dynamically generated content (live\r\nstreams), as explained below and in Section 6.1.", "correct_text": "PPSPP can use different methods for protecting the integrity of the\r\ncontent while it is being distributed via the peer-to-peer network.\r\nMore specifically, PPSPP can use different methods for receiving\r\npeers to detect whether a requested chunk has been maliciously\r\nmodified by the sending peer.\r\n\r\nFor static content, PPSPP currently defines one method for protecting\r\nintegrity, called the Merkle Hash Tree scheme.\r\nThe scheme is mandatory to implement, to satisfy the requirement of \r\nstrong security for an IETF protocol [RFC3365]. An extended version\r\nof the scheme is used to efficiently protect dynamically generated\r\ncontent (live streams), as explained below and in Section 6.1.", "notes": "RFC 7574 (PPSP-PP) defines how the peers exchange chunks regarding content integrity protection scheme. It describes the relationship of the DATA and INTEGRITY messages.\r\nBut, it does not describes how peers exchange chunks when the content integrity protection scheme is disabled.\r\nThus, to the readers, it seems that content integrity protection scheme is very important part of PPSP-PP and must be used in order to implement PPSP-PP.\r\nI think the RFC 7574 (PPSP-PP) should be changed to clearly express that the content integrity protection scheme must be used in PPSP-PP.\r\nThe proposed changes is to remove options regarding the use of content integrity protection.\r\n\r\nSpencer: confirmed in conversations with Victor Grishchenko <victor.grishchenko@gmail.com> on the PPSP mailing list.", "submit_date": "2016-07-01", "submitter_name": "Sung Hei Kim, Chang Kyu Lee", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4726", "doc-id": "RFC7574", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "In the \"Unified Merkle Tree\" method, PPSPP combines the Merkle Hash\r\nTree scheme for static content with signatures to unify the video-on-\r\ndemand and live streaming scenarios. The use of Merkle hash trees\r\nreduces the number of signing and verification operations, hence\r\nproviding a similar signature amortization to the approach described\r\nin [SIGMCAST]. If PPSPP operates over the Internet, the \"Unified\r\nMerkle Tree\" method MUST be used. If the protocol operates in a\r\nbenign environment, the \"Unified Merkle Tree\" method MAY be used. So\r\nthis method is mandatory to implement.", "correct_text": "In the \"Unified Merkle Tree\" method, PPSPP combines the Merkle Hash\r\nTree scheme for static content with signatures to unify the video-on-\r\ndemand and live streaming scenarios. The use of Merkle hash trees\r\nreduces the number of signing and verification operations, hence\r\nproviding a similar signature amortization to the approach described\r\nin [SIGMCAST].", "notes": "RFC 7574 (PPSP-PP) defines how the peers exchange chunks regarding content integrity protection scheme. It describes the relationship of the DATA and INTEGRITY messages.\r\nBut, it does not describes how peers exchange chunks when the content integrity protection scheme is disabled.\r\nThus, to the readers, it seems that content integrity protection scheme is very important part of PPSP-PP and must be used in order to implement PPSP-PP.\r\nI think the RFC 7574 (PPSP-PP) should be changed to clearly express that the content integrity protection scheme must be used in PPSP-PP.\r\nThe proposed changes is to remove options regarding the use of content integrity protection.\r\n\r\nSpencer: confirmed in conversations with Victor Grishchenko <victor.grishchenko@gmail.com> on the PPSP mailing list.", "submit_date": "2016-07-01", "submitter_name": "Sung Hei Kim, Chang Kyu Lee", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4727", "doc-id": "RFC5084", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   The AES-GCM authenticated encryption algorithm is described in [GCM].\r\n   A brief summary of the properties of AES-CCM is provided in Section\r\n   1.5.\r\n", "correct_text": "   The AES-GCM authenticated encryption algorithm is described in [GCM].\r\n   A brief summary of the properties of AES-GCM is provided in Section\r\n   1.5.\r\n", "notes": "Section 3.2 discusses AES-GCM, and links to Section 1.5 (titled \"AES-GCM\"), so the text \"AES-CCM\" in the second sentence should be \"AES-GCM\".", "submit_date": "2016-07-01", "submitter_name": "Peter Dettman", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4728", "doc-id": "RFC6555", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "However, this does not scale well (to the number of DNS servers\r\nworldwide or the number of content providers worldwide) and does\r\nreact to intermittent network path outages.", "correct_text": "However, this does not scale well (to the number of DNS servers\r\nworldwide or the number of content providers worldwide) and does\r\nnot react to intermittent network path outages.", "notes": "The introduction makes a case against a whitelist of DNS servers because it does not scale well and is not flexible.\r\nDNS server whitelists indeed to not react to intermittent network outages, so the only logical sentence to form is to state that they do not.\r\nThe \"not\" has been omitted, reversing the logical meaning of the sentence.", "submit_date": "2016-07-05", "submitter_name": "Stefan Winter", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4729", "doc-id": "RFC7872", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "The domain names corresponding to the WIPv6LD dataset is\r\n      available at\r\n      <http://www.si6networks.com/datasets/wipv6day-domains.txt>.", "correct_text": "given that this was a set of names used for a one time test \r\nit would not be expected to change.\r\n\r\na stable reference to it would be:\r\n\r\n\"https://web.archive.org/web/20150313063829/\r\nhttp://www.si6networks.com/datasets/wipv6day-domains.txt\"\r\n\r\nnote line truncated due to 72 char limit", "notes": "% wget http://www.si6networks.com/datasets/wipv6day-domains.txt\r\n--2016-07-05 11:56:27--  http://www.si6networks.com/datasets/wipv6day-domains.txt\r\nResolving www.si6networks.com (www.si6networks.com)... 2001:67c:27e4::14, 91.239.96.14\r\nConnecting to www.si6networks.com (www.si6networks.com)|2001:67c:27e4::14|:80... connected.\r\nHTTP request sent, awaiting response... 301 Moved Permanently\r\nLocation: https://www.si6networks.com/datasets/wipv6day-domains.txt [following]\r\n--2016-07-05 11:56:28--  https://www.si6networks.com/datasets/wipv6day-domains.txt\r\nConnecting to www.si6networks.com (www.si6networks.com)|2001:67c:27e4::14|:443... connected.\r\nHTTP request sent, awaiting response... 404 Not Found\r\n2016-07-05 11:56:28 ERROR 404: Not Found.", "submit_date": "2016-07-05", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7118", "doc-id": "RFC9286", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "fileList           SEQUENCE SIZE (0..MAX) OF FileAndHash", "correct_text": "fileList           SEQUENCE SIZE (1..MAX) OF FileAndHash", "notes": "Section 7 specifies \" A CA's manifest will always contain at least one entry\"; therefor, a fileList sequence of size 0 is invalid.\r\n\r\n", "submit_date": "2022-09-03", "submitter_name": "Job Snijders", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2022-09-06 19:45:41"}, {"errata_id": "7106", "doc-id": "RFC8085", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "More description of the set of checks performed using the checksum field is provided in Section 3.1 of [RFC6396].", "correct_text": "More description of the set of checks performed using the checksum field is provided in Section 3.1 of [RFC6936].", "notes": "The wrong RFC was referenced under \"Checksum Guidelines\" Section 3.4, including the same wrong RFC information within the \"Informative References\" Section 8.2.", "submit_date": "2022-08-31", "submitter_name": "Adam Wall", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-09-22 17:46:59"}, {"errata_id": "4731", "doc-id": "RFC5610", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "                     1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Set ID = 3           |          Length =  26         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Template ID = 257        |        Field Count = 4        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Scope Field Count = 2      |0| priv.EnterpriseNumber   346 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 4        |0| informationElementId    303 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |0| inf.El.DataType         339 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 1        |0| inf.El.Semantics        344 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 1        |0| inf.El.Name             341 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Field Length = 65536      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "                     1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |          Set ID = 3           |          Length =  30         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |      Template ID = 257        |        Field Count = 5        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Scope Field Count = 2      |0| priv.EnterpriseNumber   346 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 4        |0| informationElementId    303 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 2        |0| inf.El.DataType         339 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 1        |0| inf.El.Semantics        344 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       Field Length = 1        |0| inf.El.Name             341 |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Field Length = 65536      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Length should be 30 and Field Count should be 5.", "submit_date": "2016-07-06", "submitter_name": "Logarajan", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4732", "doc-id": "RFC2205", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A.5", "orig_text": "      Error Value\r\n\r\n           A two-octet field containing additional information about the\r\n                error.  Its contents depend upon the Error Type.", "correct_text": "       Error Value\r\n\r\n           A two-octet field containing additional information about the\r\n                error.  Its contents depend upon the Error Code.", "notes": "s/Error Type/Error Code\r\n\r\n\"Error Type\" is neither defined nor used elsewhere in RFC 2205.", "submit_date": "2016-07-06", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4733", "doc-id": "RFC3209", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "   To formalize the discussion, we call each group of nodes an abstract\r\n   node.  Thus, we say that an explicit route is a specification of a\r\n   set of abstract nodes to be traversed.  If an abstract node consists\r\n   of only one node, we refer to it as a simple abstract node.\r\n", "correct_text": "   To formalize the discussion, we call each group of nodes an abstract\r\n   node.  Thus, we say that an explicit route is a specification of a\r\n   sequence of abstract nodes to be traversed.  If an abstract node \r\n   consists of only one node, we refer to it as a simple abstract node.\r\n", "notes": "s/set/sequence\r\n\r\nA set implies ordering of abstract nodes is NOT important.\r\nA sequence implies ordering of abstract nodes IS important.\r\n\r\nIn the rest of RFC 3209, this distinction is maintained, but not\r\nin this paragraph.", "submit_date": "2016-07-06", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7107", "doc-id": "RFC9110", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.5.1", "orig_text": "For example, the chunked transfer coding in HTTP/1.1\r\nallows a trailer section to be sent after the content\r\n(Section 7.1.2 of [HTTP/1.1]).", "correct_text": "For example, the chunked transfer coding in HTTP/1.1\r\nallows a trailer section to be sent after the content\r\n(Section ?.?.? of [HTTP/1.1]).", "notes": "Section 7.1.2 does not exist. It isn't clear to me which section is the intended target of the reference.\n --VERIFIER NOTES-- \nErrata rejected per Julian Reschke. Section 7.1.2 does exist.\r\nSee <https://www.rfc-editor.org/rfc/rfc9112#section-7.1.2>.\r\n", "submit_date": "2022-08-31", "submitter_name": "James Synge", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 21:39:50"}, {"errata_id": "7108", "doc-id": "RFC8033", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1 & 10.2", "orig_text": "5.1.  ECN Support\r\n\r\n   PIE MAY support ECN by marking (rather than dropping) ECN-capable\r\n   packets [ECN].  ...\r\n\r\n...\r\n\r\n\r\n\r\n10.2.  Informative References\r\n...\r\n\r\n   [ECN]      Briscoe, B., Kaippallimalil, J., and P. Thaler,\r\n              \"Guidelines for Adding Congestion Notification to\r\n              Protocols that Encapsulate IP\", Work in Progress,\r\n              draft-ietf-tsvwg-ecn-encap-guidelines-07, July 2016.\r\n...", "correct_text": "5.1.  ECN Support\r\n\r\n   PIE MAY support ECN by marking (rather than dropping) ECN-capable\r\n   packets [RFC3168].  ...\r\n\r\n...\r\n\r\n\r\n\r\n10.2.  Informative References\r\n...\r\n\r\n   [RFC3168]      Ramakrishnan, K., Floyd, S., and D. Black, \r\n                  \"The Addition of Explicit Congestion Notification \r\n                  (ECN) to IP\", RFC 3168, DOI 10.17487/RFC3168, \r\n                  September 2001, <https://www.rfc-editor.org/info/rfc3168>.\r\n...", "notes": "The reference provided for ECN points to the incorrect IETF document.", "submit_date": "2022-08-31", "submitter_name": "Greg White", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 23:58:28"}, {"errata_id": "7695", "doc-id": "RFC9111", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "   The proper evaluation of conditional requests by a cache depends on\r\n   the received precondition header fields and their precedence.  In\r\n   summary, the If-Match and If-Unmodified-Since conditional header\r\n   fields are not applicable to a cache, and If-None-Match takes\r\n   precedence over If-Modified-Since.  See Section 13.2.2 of [HTTP] for\r\n   a complete specification of precondition precedence.", "correct_text": "   The proper evaluation of conditional requests by a cache depends on\r\n   the received precondition header fields and their precedence.  In\r\n   summary, the If-Match and If-Unmodified-Since conditional header\r\n   fields are not applicable to a cache and hence such requests MUST\r\n   be forwarded to the origin, and If-None-Match takes precedence\r\n   over If-Modified-Since.  See Section 13.2.2 of [HTTP] for a complete\r\n   specification of precondition precedence.", "notes": "Correction:\r\n\"the If-Match and If-Unmodified-Since conditional header fields are not applicable\r\n to a cache [and hence such requests MUST be forwarded to the origin]\"\r\n\r\nThis is based upon the reading of RFC 9111#section-4.3.2-3[1]:\r\n \r\n   A cache MUST NOT evaluate conditional header fields that only apply\r\n   to an origin server, occur in a request with semantics that cannot be\r\n   satisfied with a cached response, or occur in a request with a target\r\n   resource for which it has no stored responses; such preconditions are\r\n   likely intended for some other (inbound) server.\r\n\r\n\r\nCurrent RFC 9110#section-13.1.1-13[2], RFC 9110#section-13.2.2[3] and RFC \r\n9111#section-4.3.2-4[4] does not explicitly provide clear direction to cache servers as to \r\nhow to deal with If-Match and If-Unmodified-Since conditional headers[5].\r\n\r\nThe correction intends to provide more clarity for If-Match and If-Unmodified-Since\r\nheader as to how a cache server should handle conditional header which are meant\r\nfor origin server based on the reading of above produced section of \r\nthe RFC 9111#section-4.3.2-3.\r\n\r\nIf cache nodes have to ignore If-Match and If-Unmodified-Since header as per \r\nRFC 9110#section-13.1.1-13 then in scenarios where they have a cached non-expired\r\ncontent representation which can be satisfied sans If-Match and If-Unmodified-Since\r\nheaders the same will be returned back by cache and intermediary servers. \r\n\r\nCaching layers with multiple content representation cached in the network may \r\nreturn invalid response back causing higher requests errors when dealing with origin \r\napplicable conditional headers that are sent to intermediary cache nodes from \r\nedge cache nodes for cache hydration. \r\n\r\nConsider the below scenario:\r\n\r\n1. A caching system consisting of 2 cache layers with 3 servers each,\r\nServer nodes \"A\" representing Edge cache nodes(A1, A2, A3),\r\nServer nodes \"B\" representing intermediary cache nodes(B1, B2, B3), and an \r\norigin server\r\n\r\n2. All cache servers (A and B) make use of If-Match and If-Unmodified-Since to \r\nhydrate their own cached content representation as per RFC 9110#section-13.1.1-12 [6]\r\n\r\n3. All cache servers make use of 5MiB chunk ranges for cache hydration of large \r\nfiles \r\n\r\n4. Origin server contains a file foo with size 20MiB, with content \r\nrepresentation Etag E1 \r\n\r\n5. A client C1 who sends a range request for file foo with range 10-20MiB to edge node A1\r\n\r\n6. For initial set of requests sent by edge node A1 the representation E1 gets \r\ncached on 2 of the intermediary nodes B1 and B2 (because of 2 requests for \r\n5MiB chunk each) \r\n\r\n6. Content representation for file foo changes to Etag E2 on origin \r\n\r\n7. A client C2 who sends a range request for file foo with range 10-20MiB to edge node A2\r\n\r\n8. Requests to edge node A2 which does not have a cached representation causes it \r\nto send 2 range requests for 5MiB each, in this case lets assume it is sent to \r\nintermediary cache nodes B1(range:10-15MiB) and B3(range:15-20MiB), \r\nB3 node faces cache-miss and hydrates its own cache from Range 15Mib-20MiB\r\nwith content representation E2. B1 node already has a cached representation E1\r\nfor requested range so it returns it back. A2 node which has now cached 10-15MiB E1\r\nrepresentation received from B1 has to returns error and performs a cache reset for\r\nitself because of mixed representation for the whole user requested range.\r\n\r\nIn such a case where intermediary cache severs/nodes may end up with multiple \r\ncontent representation an edge node who is trying to hydrate its own cache \r\nwill find it hard to do so, i.e. the first 5MiB \r\nchunk may end up being served by intermediary cache nodes with representation \r\nE1 and the other half of the chunk by nodes who have a content representation \r\nE2. The error rates will be higher whenever content representation changes at\r\nthe origin server for such range requests.\r\n\r\n\r\n[1]: https://www.rfc-editor.org/rfc/rfc9111#section-4.3.2-3\r\n[2]: https://www.rfc-editor.org/rfc/rfc9110#section-13.1.1-13\r\n[3]: https://www.rfc-editor.org/rfc/rfc9110#section-13.2.2\r\n[4]: https://www.rfc-editor.org/rfc/rfc9111#section-4.3.2-4\r\n[5]: https://github.com/httpwg/http-core/issues/1111\r\n[6]: https://www.rfc-editor.org/rfc/rfc9110#section-13.1.1-12\n --VERIFIER NOTES-- \nThe suggestion is not a desired solution for the problematic text.\r\n\r\nThis part is not an error in the specification. Even when If-Match and If-Unmodified-Since are not applicable to a cache, their presence does not imply that the request must be forwarded to the origin. It will depend on other factors in the request and how/where the cache has been configured.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/httpbisa/k8UTKPDMQQZ-H5sHyJb7dldew7I/ for details.", "submit_date": "2023-11-07", "submitter_name": "Dron Rathore", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:58:15"}, {"errata_id": "4734", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.3.5", "orig_text": "   The \"Accept-Language\" header field can be used by user agents to\r\n   indicate the set of natural languages that are preferred in the\r\n   response.  Language tags are defined in Section 3.1.3.1.\r\n\r\n     Accept-Language = 1#( language-range [ weight ] )\r\n     language-range  =\r\n               <language-range, see [RFC4647], Section 2.1>\r\n\r\n   Each language-range can be given an associated quality value\r\n   representing an estimate of the user's preference for the languages\r\n   specified by that range, as defined in Section 5.3.1.  For example,\r\n\r\n     Accept-Language: da, en-gb;q=0.8, en;q=0.7\r\n\r\n   would mean: \"I prefer Danish, but will accept British English and\r\n   other types of English\".", "correct_text": "   The \"Accept-Language\" header field can be used by user agents to\r\n   indicate the set of natural languages that are preferred in the\r\n   response.  Language tags are defined in Section 3.1.3.1.\r\n\r\n     Accept-Language = 1#( language-range [ weight ] )\r\n     language-range  =\r\n               <language-range, see [RFC5646], Section 2.1>\r\n\r\n   Each language-range can be given an associated quality value\r\n   representing an estimate of the user's preference for the languages\r\n   specified by that range, as defined in Section 5.3.1.  For example,\r\n\r\n     Accept-Language: da, en-GB;q=0.8, en;q=0.7\r\n\r\n   would mean: \"I prefer Danish, but will accept British English and\r\n   other types of English\".", "notes": "RFC4647 -> RFC5646\r\nen-gb      -> en-GB\r\n\r\n\n --VERIFIER NOTES-- \nRejected per Mark Nottingham (chair of HTTPBIS WG):\r\nAs far as I can tell, language-range is defined in RFC 4647, not in RFC 5646. So the change as proposed seems to be incorrect. (See BCP 47.)\r\n\r\nThe other change, from 'en-gb' to 'en-GB', may be seen as a tiny stylistic improvement (because the 'canonical' way to write country codes in language tags is upper case), but is not at all required (because language tags are case-insensitive).", "submit_date": "2016-07-06", "submitter_name": "Alexey Blyshko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4736", "doc-id": "RFC7871", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "the Internet Software Consortium", "correct_text": "Internet Systems Consortium", "notes": "ISC (no \"the\") was originally founded as Internet Software Consortium, Inc. in 1994 but it has been known as Internet Systems Consortium, Inc. since 2004.\n --VERIFIER NOTES-- \n   Internet Software Consortium occurs only in the acknowledgements and while incorrect now it is generally the perogative of the authors to include in this section what they see fit. were a future version to be updated it's acknowledgements would probably include the then current contributors not the previous ones.", "submit_date": "2016-07-08", "submitter_name": "Robert Edmonds", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4740", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "   6. Using local data only, attempt to add other RRs which may be\r\n      useful to the additional section of the query.  Exit.", "correct_text": "   6. Using local data only, attempt to add other RRs which may be\r\n      useful to the additional section of the response.  Exit.", "notes": "Changed \"query\" to \"response\".\r\n\r\nSection 4.3.2 describes the algorithm used by nameservers to answer queries. I.e., a nameserver receives a query from a client, and then it performs this algorithm in order to construct a response to send to the client. \r\n\r\nSteps 1, 3, and 5 of this algorithm talk about setting fields or bits in the response, or about adding resource records to the answer section of the response, but then step 6 says to add resource records to the additional section of the *query*. This doesn't make any sense, because the server is constructing a response to a query that it's already received. \"Response\" must have been intended instead.", "submit_date": "2016-07-11", "submitter_name": "Robert Edmonds", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7109", "doc-id": "RFC9110", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.4.9", "orig_text": "   The 308 (Permanent Redirect) status code indicates that the target\r\n   resource has been assigned a new permanent URI and any future\r\n   references to this resource ought to use one of the enclosed URIs.", "correct_text": "   The 308 (Permanent Redirect) status code indicates that the target\r\n   resource has been assigned a new permanent URI and any future\r\n   references to this resource ought to use one of the enclosed URIs.\r\n   The user agent MUST NOT change the request method if it performs\r\n   an automatic redirection to that URI.\r\n\r\nand/or add note as is present in RFC 7538, e.g.:\r\n\r\n      Note: This status code is similar to 301 (Moved Permanently)\r\n      (Section 15.4.2), except that it does not allow changing\r\n      the request method from POST to GET.", "notes": "The current text in this section for 308 Permanent Redirect does not include any mention of the user agent not changing the request method. I am suggesting that similar wording be used as in 15.4.8.  307 Temporary Redirect and/or a note added similar to the one present in RFC 7538 but excluded from this section's current text. Whichever is chosen, it would be good to make the wording/notes consistent across both the 307 and 308 status code sections.", "submit_date": "2022-08-31", "submitter_name": "Gary Wilson Jr.", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:33:22"}, {"errata_id": "4946", "doc-id": "RFC7252", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "coap-URI = \"coap:\" \"//\" host [ \":\" port ] path-abempty [ \"?\" query ]", "correct_text": "coap-URI = \"coap:\" \"//\" host [ \":\" port ] path-abempty [ \"?\" query ]\r\n               [ \"#\" fragment ]", "notes": "The optional fragment component allows for indirect identification of a secondary resource, as defined in Section 3.5 of RFC 3986. The fragment identifier is separated from the rest of the URI prior to a dereference; fragment identifiers are processed client-side and are not included in CoAP requests. The original text shows the syntax of coap:// URIs _after_ separating the fragment identifier, which leaves ambiguity as to whether fragment identifiers are supported or not. The corrected text shows the syntax of CoAP URIs _before_ separating the fragment identifier, which makes clear that fragment identifiers are supported.\n --VERIFIER NOTES-- \nThis errata is rejected to remain aligned with HTTP, see RFC 9110, Section 4.2.1", "submit_date": "2017-02-22", "submitter_name": "Klaus Hartke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:01:21"}, {"errata_id": "4947", "doc-id": "RFC7252", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.2", "orig_text": "coaps-URI = \"coaps:\" \"//\" host [ \":\" port ] path-abempty\r\n               [ \"?\" query ]", "correct_text": "coaps-URI = \"coaps:\" \"//\" host [ \":\" port ] path-abempty\r\n               [ \"?\" query ] [ \"#\" fragment ]", "notes": "The optional fragment component allows for indirect identification of a secondary resource, as defined in Section 3.5 of RFC 3986. The fragment identifier is separated from the rest of the URI prior to a dereference; fragment identifiers are processed client-side and are not included in CoAP requests. The original text shows the syntax of coaps:// URIs _after_ separating the fragment identifier, which leaves ambiguity as to whether fragment identifiers are supported or not. The corrected text shows the syntax of CoAP URIs _before_ separating the fragment identifier, which makes clear that fragment identifiers are supported.\n --VERIFIER NOTES-- \n   This errata is rejected to remain aligned with HTTP, see RFC 9110, Section 4.2.2", "submit_date": "2017-02-22", "submitter_name": "Klaus Hartke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:02:10"}, {"errata_id": "4748", "doc-id": "RFC4754", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "8.1.  ECDSA-256\r\n\r\n   IANA assigned the ID value 9 to ECDSA-256.\r\n\r\n   ...\r\n\r\n          vvvv\r\n 00000048 00090000 CB28E099 9B9C7715 FD0A80D8 E47A7707 9716CBBF 917DD72E\r\n 97566EA1 C066957C 86FA3BB4 E26CAD5B F90B7F81 899256CE 7594BB1E A0C89212\r\n 748BFF3B 3D5B0315\r\n\r\n8.2.  ECDSA-384\r\n\r\n   IANA assigned the ID value 10 to ECDSA-384.\r\n\r\n   ...\r\n\r\n          vvvv\r\n 00000068 000A0000 FB017B91 4E291494 32D8BAC2 9A514640 B46F53DD AB2C6994\r\n 8084E293 0F1C8F7E 08E07C9C 63F2D21A 07DCB56A 6AF56EB3 B263A130 5E057F98\r\n 4D38726A 1B468741 09F417BC A112674C 528262A4 0A629AF1 CBB9F516 CE0FA7D2\r\n FF630863 A00E8B9F\r\n\r\n8.3.  ECDSA-521\r\n\r\n   IANA assigned the ID value 11 to ECDSA-521.\r\n\r\n   ...\r\n\r\n          vvvv\r\n 0000008C 000B0000 0154FD38 36AF92D0 DCA57DD5 341D3053 988534FD E8318FC6\r\n AAAAB68E 2E6F4339 B19F2F28 1A7E0B22 C269D93C F8794A92 78880ED7 DBB8D936\r\n 2CAEACEE 54432055 22510177 05A70302 90D1CEB6 05A9A1BB 03FF9CDD 521E87A6\r\n 96EC926C 8C10C836 2DF49753 67101F67 D1CF9BCC BF2F3D23 9534FA50 9E70AAC8\r\n 51AE01AA C68D62F8 66472660\r\n\r\n", "correct_text": "8.1.  ECDSA-256\r\n\r\n   IANA assigned the ID value 9 to ECDSA-256.\r\n\r\n   ...\r\n\r\n          vvvv\r\n 00000048 09000000 CB28E099 9B9C7715 FD0A80D8 E47A7707 9716CBBF 917DD72E\r\n 97566EA1 C066957C 86FA3BB4 E26CAD5B F90B7F81 899256CE 7594BB1E A0C89212\r\n 748BFF3B 3D5B0315\r\n\r\n8.2.  ECDSA-384\r\n\r\n   IANA assigned the ID value 10 to ECDSA-384.\r\n\r\n   ...\r\n\r\n          vvvv\r\n 00000068 0A000000 FB017B91 4E291494 32D8BAC2 9A514640 B46F53DD AB2C6994\r\n 8084E293 0F1C8F7E 08E07C9C 63F2D21A 07DCB56A 6AF56EB3 B263A130 5E057F98\r\n 4D38726A 1B468741 09F417BC A112674C 528262A4 0A629AF1 CBB9F516 CE0FA7D2\r\n FF630863 A00E8B9F\r\n\r\n8.3.  ECDSA-521\r\n\r\n   IANA assigned the ID value 11 to ECDSA-521.\r\n\r\n   ...\r\n\r\n          vvvv\r\n 0000008C 0B000000 0154FD38 36AF92D0 DCA57DD5 341D3053 988534FD E8318FC6\r\n AAAAB68E 2E6F4339 B19F2F28 1A7E0B22 C269D93C F8794A92 78880ED7 DBB8D936\r\n 2CAEACEE 54432055 22510177 05A70302 90D1CEB6 05A9A1BB 03FF9CDD 521E87A6\r\n 96EC926C 8C10C836 2DF49753 67101F67 D1CF9BCC BF2F3D23 9534FA50 9E70AAC8\r\n 51AE01AA C68D62F8 66472660\r\n\r\n", "notes": "In Figure 14 of Section 3.8 of RFC 7296 describing IKEv2 AUTH Payload format, the Auth Method field is a one byte field located just after the Payload Length field, i.e. Auth Method is encoded in the fifth byte of the AUTH Payload.\r\n\r\nIn Section 8.1 of RFC 4754, the example AUTH payload for ECDSA-256 encodes the Auth Method (0x09) in the sixth byte of the AUTH Payload instead of the fifth. This is the same in section 8.2 for ECDSA-384 and 8.3 for ECDSA-512, for which the Auth Method values (respectively 0x0A and 0x0B) are also encoded in the sixth bytes instead of the fifth.", "submit_date": "2016-07-26", "submitter_name": "Arnaud EBALARD", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-02-27 19:57:03"}, {"errata_id": "4749", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "Clients in possession of a client password MAY use the HTTP Basic\r\nauthentication scheme as defined in [RFC2617] to authenticate with\r\nthe authorization server.  The client identifier is encoded using the\r\n\"application/x-www-form-urlencoded\" encoding algorithm per\r\nAppendix B, and the encoded value is used as the username; the client\r\npassword is encoded using the same algorithm and used as the\r\npassword.  The authorization server MUST support the HTTP Basic\r\nauthentication scheme for authenticating clients that were issued a\r\nclient password.", "correct_text": "Clients in possession of a client password MAY use the HTTP Basic\r\nauthentication scheme as defined in [RFC2617] to authenticate with\r\nthe authorization server.  The client identifier is encoded using the\r\n\"application/x-www-form-urlencoded\" encoding algorithm per\r\nAppendix B, and the encoded value is used as the username; the client\r\npassword is encoded using the same algorithm and used as the\r\npassword. The url encoded values are then encoded as defined in\r\n[RFC2617]. The authorization server MUST support the HTTP Basic\r\nauthentication scheme for authenticating clients that were issued a\r\nclient password.", "notes": "It was not clear to some implementers that the intention is a 2-step encoding. First for special characters and second the 2617 base 64 encoding.  Implementers thought 6749 was in conflict with 2617.\r\n\r\nTo avoid inter-op issues, a new clarifying sentence is proposed.\r\n\"The url encoded values are then encoded as defined in [RFC2617].\"", "submit_date": "2016-07-26", "submitter_name": "Phil Hunt", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4750", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3 Vectors", "orig_text": "The length of\r\n   an encoded vector must be an even multiple of the length of a single\r\n   element (for example, a 17-byte vector of uint16 would be illegal).", "correct_text": "The length of\r\n   an encoded vector must be a whole multiple of the length of a single\r\n   element (for example, a 17-byte vector of uint16 would be illegal).", "notes": "Original text implies vectors can only contain even (0,2,4,6,8...) numbers of elements.  The example does not resolve this but indicates the intent is that parts of elements are not allowed. It is clear from other examples that odd numbers of elements are permitted.\r\n\r\nPaul Wouters (AD): As TLS 1.2 is obsoleted by TLS 1.3, this errata is closed as Verified. In TLS 1.3 in RFC 8447 the text states more clearly:  Here, T' occupies n bytes in the data stream, where n is a multiple of the size of T. \r\n\r\n", "submit_date": "2016-07-27", "submitter_name": "Adrien de Croy", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 02:41:39"}, {"errata_id": "4751", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.5", "orig_text": "This mechanism matches if\r\n\r\no  the <target-name> is a subdomain of a validated domain name, or\r\n\r\no  the <target-name> and a validated domain name are the same.", "correct_text": "This mechanism matches if\r\n\r\no  a validated domain name is a subdomain of the <target-name>, or\r\n\r\no  the <target-name> and a validated domain name are the same.", "notes": "The first bullet point is in contradiction to the description of the ptr mechanism evaluation in the preceding paragraph:\r\n\"Check all validated domain names to see if they either match the <target-name> domain or are a subdomain of the <target-name> domain. If any do, this mechanism matches. If no validated domain name can be found, or if none of the validated domain names match or are a subdomain of the <target-name>, this mechanism fails to match.\"", "submit_date": "2016-07-27", "submitter_name": "Ken Mortimer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4752", "doc-id": "RFC791", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.", "orig_text": "The Option Length is the number of octets \r\nin the option counting the type, length, \r\npointer, and overflow/flag octets (maximum length 40).", "correct_text": "The Option Length is the number of octets \r\nin the option counting the type, length, \r\npointer, overflow/flag octets \r\nand timestamp area (maximum length 40).", "notes": "The original version implies that the length is only the sum of the constant fields, in this case, 4. This is in conflict with\r\nA) All prior statements that the length is variable\r\nB) The pointer with it >=5 constraint, implies the timestamp area is always full, which is the case when pointer > length\r\nC) Any need to know how much timestamps will follow", "submit_date": "2016-07-29", "submitter_name": "Markus Klemm", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7111", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "insure\r\n", "correct_text": "ensure\r\n", "notes": "Section 3.6.2 uses both ensure and insure to mean the same thing, which is to guarantee or make certain. Sections 4.1, 4.2.2, and 5.3.3 all use the insure form.\r\n\r\nGenerally, insure is used in the financial sense, with making certain being a secondary definition. At the very least, consistency in the same paragraph of 3.6.2 would be cleaner.", "submit_date": "2022-09-01", "submitter_name": "Stephan Garland", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-09-02 20:35:39"}, {"errata_id": "4973", "doc-id": "RFC7115", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3 & 5", "orig_text": "section 3\r\n---------\r\nFor example, if, instead of 10.0.0.0/16-24, one issues\r\n   10.0.0.0/16 and 10.0.42.0/24, a forged origin attack cannot succeed\r\n   against 10.0.666.0/24. \r\n\r\nsection 5\r\n---------\r\nConsider having a ROA for AS 42 for prefix\r\n   10.0.0.0/16-24.  A BGP announcement for 10.0.666.0/24 from AS 666\r\n   would be Invalid", "correct_text": "section 3\r\n---------\r\nFor example, if, instead of 10.0.0.0/16-24, one issues\r\n   10.0.0.0/16 and 10.0.42.0/24, a forged origin attack cannot succeed\r\n   against 10.0.66.0/24. \r\n\r\nsection 5\r\n---------\r\nConsider having a ROA for AS 42 for prefix\r\n   10.0.0.0/16-24.  A BGP announcement for 10.0.66.0/24 from AS 666\r\n   would be Invalid\r\n", "notes": "666 is not a valid octet for an ipv4 address\r\n\r\n===\r\nI am marking this report as \"Held for Document Update\" [1], which means that the author might consider its merits for a future update.  If the use of the \"666\" octet was intentional, then a short note explaining might be appropriate to avoid further confusion.\r\n\r\n- Alvaro.\r\n\r\n[1] https://www.ietf.org/iesg/statement/errata-processing.html", "submit_date": "2017-03-18", "submitter_name": "Tassos Chatzithomaoglou", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4754", "doc-id": "RFC3168", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Header block", "orig_text": "Updates: 2474, 2401, 2003, 793\r\n", "correct_text": "Updates: 2474, 2401, 2003, 2473, 793", "notes": "RFC 3168 updates RFC 2473 but does not indicate this in its header block.\r\n\r\nSpecifically, Section 9 of RFC 3168 defined processing of the ECN field for Encapsulated Packets, which updated section 6.4 of RFC 2473, where the creation of the \"IPv6 Tunnel Packet Traffic Class\" was specified. RFC3168 also updated the decapsulation behaviour of the ECN field in an IPv6 tunnel header, which had not been specified in RFC2473.\r\n\r\nNote 1: As well as tagging RFC3168 with this erratum, RFC2473 needs to be tagged (in the RFC index and associated tools outputs) to indicate that it is updated by RFC3168.\r\n\r\nNote 2: Originally, the \"Updates:\" header of RFC3168 did not contain \"2003\", which was added as a result of Errata ID 2660.\r\n\r\nNote 3: The first sentence of section 9.1 in RFC3168 should also be modified as follows:\r\nOriginal text:\r\n   The encapsulation of IP packet headers in tunnels is used in many\r\n   places, including IPsec and IP in IP [RFC2003].\r\nCorrected text:\r\n   The encapsulation of IP packet headers in tunnels is used in many\r\n   places, including IPsec and IP in IP [RFC2003, 2473].\r\nComment: \r\n   Nowadays RFC2473 would be a normative reference, but RFC3168 pre-dated the categorisation of references into normative and informative.\r\n\r\nNote 4: Section 9 of RFC3168 has since been updated by RFC6040. Nonetheless, that is already correctly identified in RFC6040.\r\n\r\nThis reported errata has be moved to \"Held for Document Update\". While the reported problem is correct and needs to be addressed, it is not just an errata but a larger oversight at publication time.", "submit_date": "2016-07-31", "submitter_name": "Bob Briscoe", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 09:58:32"}, {"errata_id": "4755", "doc-id": "RFC7706", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "The system MUST be able to run an authoritative server on one of\r\nthe IPv4 loopback addresses (that is, an address in the range\r\n127/8 for IPv4 or ::1 in IPv6).", "correct_text": "The system MUST be able to run an authoritative server on one of\r\nthe IP loopback addresses (that is, an address in the range\r\n127/8 for IPv4 or ::1 in IPv6).", "notes": "reviewed", "submit_date": "2016-08-01", "submitter_name": "John W. O'Brien", "verifier_id": "", "verifier_name": "joel jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7112", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "        NegotiationDone\r\n            The Master/Slave relationship has been negotiated, and DD\r\n            sequence numbers have been exchanged.  This signals the\r\n            start of the sending/receiving of Database Description\r\n            packets.  For more information on the generation of this\r\n            event, consult Section 10.8.", "correct_text": "        NegotiationDone\r\n            The Master/Slave relationship has been negotiated, and DD\r\n            sequence numbers have been exchanged.  This signals the\r\n            start of the sending/receiving of Database Description\r\n            packets.  For more information on the generation of this\r\n            event, consult Section 10.6.", "notes": "The generation of the NegotiationDone event is specified in Section 10.6 (not Section 10.8).\r\n\r\n(Also discussed at https://mailarchive.ietf.org/arch/msg/lsr/NZMWapi62sJuExnBZFBBMdW169k/)", "submit_date": "2022-09-01", "submitter_name": "Renato Westphal", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-09-01 21:36:54"}, {"errata_id": "4840", "doc-id": "RFC4791", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.3.4", "orig_text": "A response to a GET request targeted at a calendar object resource\r\nMUST contain an ETag response header field indicating the current\r\nvalue of the strong entity tag of the calendar object resource.", "correct_text": "A response to a GET request targeted at a calendar object resource\r\nMUST contain an ETag response header field indicating the current\r\nvalue of the strong entity tag of the calendar object resource.\r\n\r\nNote that using another content coding (Content-Encoding) than\r\n\"identity\" (for instance, when a compressed version of the resource\r\nis sent) will cause the ETag reported by GET to change and make it\r\nunusable for If-Match etc.", "notes": "Content-Encoding (in opposite to Transfer-Encoding) changes strong ETags, see RFC 7232 2.3.3 for an example. So if you GET a resource with another content coding than \"identity\" (for instance, \"gzip\"), the (strong) ETag could be \"abc-gzip\" instead of \"abc\". If you then send a conditional request (which requires a strong ETag) with If-Match: \"abc-gzip\", it may not work as expected. The solution seems to be to use Transfer-Encoding whenever possible.", "submit_date": "2016-10-25", "submitter_name": "Ricki Hirner", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4841", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3.5.", "orig_text": "      EXAMPLE.COM.          MX      10      A.EXAMPLE.COM\r\n      *.EXAMPLE.COM.        MX      10      A.EXAMPLE.COM\r\n      A.EXAMPLE.COM.        MX      10      A.EXAMPLE.COM\r\n      *.A.EXAMPLE.COM.      MX      10      A.EXAMPLE.COM\r\n\r\n", "correct_text": "      EXAMPLE.COM.          MX      10      A.EXAMPLE.COM.\r\n      *.EXAMPLE.COM.        MX      10      A.EXAMPLE.COM.\r\n      A.EXAMPLE.COM.        MX      10      A.EXAMPLE.COM.\r\n      *.A.EXAMPLE.COM.      MX      10      A.EXAMPLE.COM.\r\n", "notes": "This is an editorial errata, since it is a punctuation error.\r\n\r\nIt is not technical, because the example might have implied an $ORIGIN of \".\" or some other strange setting, while a normative reference --rfc 1035-- makes it very clear that \"[d]omain names that end in a dot are called absolute, and are taken as complete.\"  Hence no technical meaning is affected.", "submit_date": "2016-10-25", "submitter_name": "Alessandro Vesely", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4842", "doc-id": "RFC6687", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "RPL makes use of trickle timers: the protocol sets a minimum time\r\nperiod with which the nodes start re-issuing DAOs, and this\r\nminimum period is denoted by the trickle parameter Imin.", "correct_text": "RPL makes use of trickle timers: the protocol sets a minimum time\r\nperiod with which the nodes start re-issuing DIOs, and this\r\nminimum period is denoted by the trickle parameter Imin.", "notes": "\"DAOs\" in this sentence seems a typo; it should be \"DIOs\".", "submit_date": "2016-10-25", "submitter_name": "Yasuyuki Tanaka", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5251", "doc-id": "RFC7905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4. Security", "orig_text": "   Poly1305 is designed to ensure that forged messages are rejected with\r\n   a probability of 1-(n/2^107), where n is the maximum length of the\r\n   input to Poly1305.  In the case of (D)TLS, this means a maximum\r\n   forgery probability of about 1 in 2^93.", "correct_text": "   Poly1305 is designed to ensure that forged messages are rejected with\r\n   a probability of 1-(n/2^106), where n is the maximum length of the\r\n   input to Poly1305.  In the case of (D)TLS, this means a maximum\r\n   forgery probability of about 1 in 2^92.", "notes": "The security claimed on poly1305 is slightly beyond what was proven by the designer (see https://cr.yp.to/mac/poly1305-20050329.pdf), and the trivial forgery attempt with a message of length 1 succeeds with probability 2^{-106}.\r\n\r\nPaul Wouters(AD): See https://mailarchive.ietf.org/arch/msg/tls/dBMIsLsaA7XevXpd9hzJ6skMqE4/", "submit_date": "2018-02-01", "submitter_name": "Xavier Bonnetain", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-18 04:03:56"}, {"errata_id": "4756", "doc-id": "RFC6146", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5.3", "orig_text": "If the NAT64 filters on its IPv4 interface, then the NAT64 checks\r\nto see if the incoming packet is allowed according to the Address-\r\nDependent Filtering rule.  To do this, it searches for a Session\r\nTable Entry with an STE source IPv4 address equal to X, an STE\r\nICMPv4 Identifier equal to i2, and a STE destination IPv4 address\r\nequal to Y.  If such an entry is found (there may be more than\r\none), packet processing continues.  Otherwise, the packet is\r\ndiscarded.  If the packet is discarded, then an ICMP error message\r\nMAY be sent to the original sender of the packet.  The ICMP error\r\nmessage, if sent, has Type 3 (Destination Unreachable) and Code 13\r\n(Communication Administratively Prohibited).\r\n\r\nIn case the packet is not discarded in the previous processing\r\nsteps (either because the NAT64 is not filtering or because the\r\npacket is compliant with the Address-Dependent Filtering rule),\r\nthen the NAT64 searches for a Session Table Entry (...)", "correct_text": "The NAT64 then searches for a Session Table Entry (...)", "notes": "The statement \"there may be more than one\" is incorrect; the triplet (X,i2,Y) constitutes the whole ICMP session's v4 identifier. Considering that, the whole paragraph tends to fall apart.\r\n\r\nThe point of Address-Dependent Filtering (ADF) is to provide a means to allow or disallow IPv4-started \"sibling\" connections. If there is an ongoing connection whose binding state is\r\n\r\n\tBIB entry: (*,*)       <--> (T,t)\r\n\tSession: (*,*),(*,*) <--> (T,t),(Z,z)\r\n\r\n(Left side is v6, right side is v4. This is the same notation as the RFC; see for example https://tools.ietf.org/html/rfc6146#section-3.5.1; '*' is anything/irrelevant)\r\n\r\nThen ADF dictates whether the v4 endpoint is allowed to create the following new session (using the same BIB entry):\r\n\r\n\tSession: (*,*),(*,*) <--> (T,t),(Z,m)\r\n\r\n(where 'z' is not equal to 'm')\r\n\r\nADF works in UDP/TCP because t and z/m are separate variables. This is not the case in ICMP:\r\n\r\n\tBIB entry: (*,*)       <--> (T,t)\r\n\tSession: (*,*,*)     <--> (T,t,Z)\r\n\r\nIf only one ICMP triplet can match, there is no room for \"sibling\" ICMP \"connections\" that share a \"source\" IPv4 identifier but not a \"destination\" IPv4 identifier like TCP and UDP do. The two pings will share both BIB entry and v4 endpoint address and therefore also share the session. The NAT64 is incapable of telling the two pings apart, and therefore cannot filter one of them.\r\n\r\nThere is no such thing as \"Address-Dependent Filtering\" on ICMP.", "submit_date": "2016-08-02", "submitter_name": "Alberto Leiva Popper", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2021-01-13 14:41:50"}, {"errata_id": "4767", "doc-id": "RFC3101", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.5.(6).(e)", "orig_text": "          (e) If the current LSA is functionally the same as an\r\n              installed LSA (i.e., same destination, cost and non-zero\r\n              forwarding address) then apply the following priorities in\r\n              deciding which LSA is preferred:\r\n\r\n                 1. A Type-7 LSA with the P-bit set.\r\n\r\n                 2. A Type-5 LSA.\r\n\r\n                 3. The LSA with the higher router ID.\r\n\r\n              [NSSA]", "correct_text": "NULL (it should be deleted because no LSAs would be compared here.)", "notes": "If one LSA is Type-5 and the other is Type-7, one of them would be rejected at step (2.5.(3) ( please refer to OSPF mail list: https://mailarchive.ietf.org/arch/msg/ospf/KBoh5T75o-s7n_bL1knrc6uVlTs ). If both of them are Type-7 LSAs, one of them would be flushed according 2.4: \r\n   If two NSSA routers, both\r\n   reachable from one another over the NSSA, originate functionally\r\n   equivalent Type-7 LSAs (i.e., same destination, cost and non-zero\r\n   forwarding address), then the router having the least preferred LSA\r\n   should flush its LSA.\r\n\r\nAs a result, rule (e) would never be applied and should be removed.\r\n\n --VERIFIER NOTES-- \nIt is easy to envision a topology where an ABR for an NSSA receives an NSSA-LSA from an NSSA internal router and an AS-Exernal-LSA from originating routers that do not receive each others equivalent LSAs. Furthermore, even if this were not the case, the  referenced text refers to LSAs that are both NSSA-LSAs as opposed to a\r\nmixture of an NSSA-LSA and an AS-External-LSA.\r\n", "submit_date": "2016-08-08", "submitter_name": "Chao Fu", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4759", "doc-id": "RFC2516", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   Concentrator.  With this model, each host utilizes it's own PPP stack\r\n", "correct_text": "   Concentrator.  With this model, each host utilizes its own PPP stack\r\n", "notes": "Typo.", "submit_date": "2016-08-03", "submitter_name": "Patrick Timmons", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2023-06-10 23:55:07"}, {"errata_id": "4760", "doc-id": "RFC2516", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   network byte order.  It's value is defined below for Discovery\r\n", "correct_text": "   network byte order.  Its value is defined below for Discovery\r\n", "notes": "Typo.", "submit_date": "2016-08-03", "submitter_name": "Patrick Timmons", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2023-06-10 23:56:31"}, {"errata_id": "4761", "doc-id": "RFC2516", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   of time, it SHOULD resend it's PADI packet and double the waiting\r\n", "correct_text": "   of time, it SHOULD resend its PADI packet and double the waiting\r\n", "notes": "Typo.", "submit_date": "2016-08-03", "submitter_name": "Patrick Timmons", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2023-06-10 23:57:06"}, {"errata_id": "4762", "doc-id": "RFC4141", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "S: 250-<June@some.example.com> recipient ok", "correct_text": "S: 250 <June@some.example.com> recipient ok", "notes": "The example in section 9.1 incorrectly lists a hyphen between the status code (250) and message text (<June...) as if there would be more data coming from the server regarding the \"RCPT TO:<June...\" command but there is not.", "submit_date": "2016-08-04", "submitter_name": "Andris Reinman", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4763", "doc-id": "RFC4941", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "DESYNC_FACTOR -- A random value within the range 0 -\r\n   MAX_DESYNC_FACTOR.  It is computed once at system start (rather than\r\n   each time it is used) and must never be greater than\r\n   (TEMP_VALID_LIFETIME - REGEN_ADVANCE).\r\n", "correct_text": "DESYNC_FACTOR -- A random value within the range 0 -\r\n   MAX_DESYNC_FACTOR.  It is computed once at system start (rather than\r\n   each time it is used) and must never be greater than\r\n   (TEMP_PREFERRED_LIFETIME - REGEN_ADVANCE).\r\n", "notes": "At various places in the RFC, DESYNC_FACTOR is used in a calculation like (TEMP_PREFERRED_LIFETIME - DESYNC_FACTOR) or (TEMP_PREFERRED_LIFETIME - REGEN_ADVANCE - DESYNC_FACTOR). It needs to be smaller than (TEMP_PREFERRED_LIFETIME - REGEN_ADVANCE) for the result of these calculations to be larger than zero. It's never used in a calculation together with TEMP_VALID_LIFETIME.", "submit_date": "2016-08-04", "submitter_name": "Jiri Bohac", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-01-28 07:13:24"}, {"errata_id": "4764", "doc-id": "RFC7662", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "OAuth registration client metadata names and descriptions are\r\nregistered by", "correct_text": "OAuth token introspection response parameters are registered by", "notes": "The original text erroneously mentions registration of client metadata names, however, this RFC 7662 is about about token introspection and this section is about registration of token introspection response parameters (client metadata name registration is RFC 7591).", "submit_date": "2016-08-04", "submitter_name": "Brian Campbell", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-17 14:22:46"}, {"errata_id": "7603", "doc-id": "RFC8259", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "A string is a sequence of zero or more Unicode characters [UNICODE].", "correct_text": "A string is a sequence of zero or more Unicode code points [UNICODE].", "notes": "Surrogate code points are not Unicode characters, as explained here: https://www.unicode.org/glossary/#surrogate_character\r\n\r\nHowever, a surrogate code point outside of a surrogate pair is allowed in JSON strings both in escaped and unescaped forms according to the ABNF grammar in section 7 and the warning in section 8.2, despite an UTF-8 incompatibility for the unescaped form. In addition, the original text contradicts ECMA-404 section 9, which states: \"A string is a sequence of Unicode code points wrapped with quotation marks (U+0022). All code points may be placed within the quotation marks except for the code points that must be escaped: quotation mark (U+0022), reverse solidus (U+005C), and the control characters U+0000 to U+001F. \"", "submit_date": "2023-08-13", "submitter_name": "Guillaume Fortin-Debigar\u00e9", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:37:21"}, {"errata_id": "4769", "doc-id": "RFC4566", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3.", "orig_text": "5.3.  Session Name (\"s=\")\r\n\r\n      s=<session name>\r\n\r\n   The \"s=\" field is the textual session name.  There MUST be one and\r\n   only one \"s=\" field per session description.  The \"s=\" field MUST NOT\r\n   be empty and SHOULD contain ISO 10646 characters (but see also the\r\n   \"a=charset\" attribute).  If a session has no meaningful name, the\r\n   value \"s= \" SHOULD be used (i.e., a single space as the session\r\n   name).\r\n", "correct_text": "5.3.  Session Name (\"s=\")\r\n\r\n      s=<session name>\r\n\r\n   The \"s=\" field is the textual session name.  There MUST be one and\r\n   only one \"s=\" field per session description.  The \"s=\" field MUST NOT\r\n   be empty and SHOULD contain ISO 10646 characters (but see also the\r\n   \"a=charset\" attribute).  If a session has no meaningful name, the\r\n   value \"s=-\" SHOULD be used (i.e., a single dash as the session\r\n   name).\r\n", "notes": "In 3rd paragraph of section 5. is written: whitespace MUST NOT be used on either side of the \"=\" sign, which is incosistent with subsection 5.3. Therefore I suggest to use \"-\" (single dash) instead of \" \" (single space) for sessions without meaningful name.\n --VERIFIER NOTES-- \n The mmusic working group is in the process of updating RFC 4566. If the issue applies to the updated text ( https://datatracker.ietf.org/doc/draft-ietf-mmusic-rfc4566bis/ ), please send comments to mmusic@ietf.org rather than file errata reports against RFC 4566.", "submit_date": "2016-08-08", "submitter_name": "Petr Van\u011bk", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4770", "doc-id": "RFC3550", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.", "orig_text": "   RTP session: An association among a set of participants\r\n      communicating with RTP.  A participant may be involved in multiple\r\n      RTP sessions at the same time.  In a multimedia session, each\r\n      medium is typically carried in a separate RTP session with its own\r\n      RTCP packets unless the the encoding itself multiplexes multiple\r\n      media into a single data stream.  A participant distinguishes\r\n      multiple RTP sessions by reception of different sessions using\r\n      different pairs of destination transport addresses, where a pair\r\n      of transport addresses comprises one network address plus a pair\r\n      of ports for RTP and RTCP.  All participants in an RTP session may\r\n      share a common destination transport address pair, as in the case\r\n      of IP multicast, or the pairs may be different for each\r\n      participant, as in the case of individual unicast network\r\n      addresses and port pairs.  In the unicast case, a participant may\r\n      receive from all other participants in the session using the same\r\n      pair of ports, or may use a distinct pair of ports for each.", "correct_text": "   RTP session: An association among a set of participants\r\n      communicating with RTP.  A participant may be involved in multiple\r\n      RTP sessions at the same time.  In a multimedia session, each\r\n      medium is typically carried in a separate RTP session with its own\r\n      RTCP packets unless the encoding itself multiplexes multiple\r\n      media into a single data stream.  A participant distinguishes\r\n      multiple RTP sessions by reception of different sessions using\r\n      different pairs of destination transport addresses, where a pair\r\n      of transport addresses comprises one network address plus a pair\r\n      of ports for RTP and RTCP.  All participants in an RTP session may\r\n      share a common destination transport address pair, as in the case\r\n      of IP multicast, or the pairs may be different for each\r\n      participant, as in the case of individual unicast network\r\n      addresses and port pairs.  In the unicast case, a participant may\r\n      receive from all other participants in the session using the same\r\n      pair of ports, or may use a distinct pair of ports for each.", "notes": "typo: double the in 5th line.", "submit_date": "2016-08-08", "submitter_name": "Petr Van\u011bk", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4773", "doc-id": "RFC3810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.6", "orig_text": "MISSING", "correct_text": "5.1.6.  Resv\r\n\r\n   Initialized to zero by the sender; ignored by receivers.\r\n", "notes": "A description for the Resv field is missing. Section numbering indicates that this has been lost in editing.\r\n\r\n== Alvaro Retana == \r\nYes, \u00a75.1.6 is missing.  I think it is obvious that \"Resv\" and \"Reserved\" have the same meaning, so I'm disposing of this report to be considered when/if the document is updated.", "submit_date": "2016-08-11", "submitter_name": "Michael Lundkvist", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4772", "doc-id": "RFC5961", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "[The entire section]", "correct_text": "No suggested text because it requires a much more serious analysis. \r\nMay be adding that the rate-limit counter SHOULD be per-connection, \r\nin the spirit of RFC 6528?", "notes": "It appears the section does not specify that the counter for ACK throttling SHOULD be per-connection. In Linux, it is apparently global, which allowed its use as a side channel enabling nasty attacks (CVE-2016-5696 and the paper \"Off-Path TCP Exploits: Global Rate Limit Considered Dangerous\" <http://www.cs.ucr.edu/~zhiyunq/pub/sec16_TCP_pure_offpath.pdf>).\r\nAlso see discussion on tcpm list about this reported errata!", "submit_date": "2016-08-10", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5266", "doc-id": "RFC3875", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.17", "orig_text": "SERVER_SOFTWARE = 1*( product | comment )", "correct_text": "SERVER_SOFTWARE = 1*( *( SP | HT ) ( product | comment ) )", "notes": "It seems actual usage separates products and comments with spaces such as \u00abApache/2.4.27 (Win32) OpenSSL/1.1.0f PHP/7.1.9\u00bb.  The definition \u00ab1*rule\u00bb in section 2.1 doesn't include implicit optional (required?) spaces as a separator.\r\n\r\nThe proposed definition is backward compatible with the original.", "submit_date": "2018-02-25", "submitter_name": "Denny O'Breham", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5268", "doc-id": "RFC8324", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "\"The current\r\n   case where this problem rears its head involves attempts at solutions\r\n   that return both TYPE A (IPv4) and type AAA (IPv6) addresses\r\n   collectively. \"", "correct_text": "\"The current\r\n   case where this problem rears its head involves attempts at solutions\r\n   that return both TYPE A (IPv4) and type AAAA (IPv6) addresses\r\n   collectively. \"", "notes": "Simple typo.", "submit_date": "2018-02-28", "submitter_name": "Tim Chown", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5269", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "The interface is to a broadcast or NBMA network on\r\n which another router has been selected to be the \r\nDesignated Router.", "correct_text": "The interface is connected to a broadcast or NBMA \r\nnetwork on which another router has been selected \r\nto be the Designated Router.", "notes": "\n --VERIFIER NOTES-- \n   An interface is the connection point.  This minor editorial suggestion does not add significant clarity.", "submit_date": "2018-03-01", "submitter_name": "Angelos Vassiliou", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5359", "doc-id": "RFC2638", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9", "orig_text": "[10] D. Clark and W. Fang, \"Explicit Allocation of Best Effort packet\r\n       Delivery Service\", IEEE/ACM Transactions on Networking, August,\r\n       1998, Vol6, No 4, pp. 362-373. also at: http://\r\n       diffserv.lcs.mit.edu/Papers/exp-alloc-ddc-wf.pdf\r\n", "correct_text": "[10] D. Clark and W. Fang, \"Explicit Allocation of Best Effort\r\npacket Delivery Service\", IEEE/ACM Transactions on Networking,\r\nAugust, 1998, Vol6, No 4, pp. 362-373. also at:\r\nhttps://web.archive.org/web/20000816232212/\r\nhttp://diffserv.lcs.mit.edu:80/Papers/exp-alloc-ddc-wf.pdf ", "notes": "The diffserv.lcs.mit.edu web server is no longer available.  However, the paper can be accessed via the Internet Archive.  (I needed to split the last sentence of the corrected text so it would be accepted by the errata tool.) If using Internet Archive links is not permitted or recommended, I would accept just omitting the last sentence (\"also at: ...) altogether.  The article is available at https://dl.acm.org/citation.cfm?id=288401&dl=ACM&coll=DL, but it is behind a paywall.", "submit_date": "2018-05-15", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4774", "doc-id": "RFC5084", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "aes-ICVlen       AES-GCM-ICVlen DEFAULT 12\r\n\r\nA length of 12 octets is RECOMMENDED.", "correct_text": "aes-ICVlen       AES-GCM-ICVlen DEFAULT 16\r\n\r\nA length of 16 octets is RECOMMENDED.", "notes": "Many JCE providers including OpenJDK, BouncyCastle, Conscrypt have a bug to use 12 bytes authentication tag (aes-ICVlen) as default if the code path [1] uses CMS. According to Ferguson's attack (http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/comments/CWC-GCM/Ferguson2.pdf), if a user encrypts 2^32 block length message, then 12 bytes authentication tag length has only 96 - 32 = 64 bits security which is not good enough nowadays. Furthermore, once a forgery happens then authentication is leaked.\r\n\r\n[1] In other code paths, all providers use 16 bytes authentication tag as default.\r\n\r\n------\r\nAD Note: through on list discussions, it is clear this errata should be rejected.\r\n\r\nThe first half of this errata must be rejected.  We do not change the ASN.1\r\nfor something like this under just about any circumstances.\r\n\r\nChanging the recommendation of a value should probably not be done by an\r\nerratum but by publishing a new document.  We could make discuss and make\r\nthe recommendation change in the new S/MIME document in the LAMPS group\r\nrather than in this document.\r\n\r\nA possible way forward is a short draft that updates RFC 5084 to recommend the use of 16 octet authentication tags in all situations.\n --VERIFIER NOTES-- \n   AD Note: through on list discussions, it is clear this errata should be rejected.\r\n\r\nThe first half of this errata must be rejected. We do not change the ASN.1\r\nfor something like this under just about any circumstances.\r\n\r\nChanging the recommendation of a value should probably not be done by an\r\nerratum but by publishing a new document. We could make discuss and make\r\nthe recommendation change in the new S/MIME document in the LAMPS group\r\nrather than in this document.\r\n\r\nA possible way forward is a short draft that updates RFC 5084 to recommend the use of 16 octet authentication tags in all situations.", "submit_date": "2016-08-11", "submitter_name": "QUAN NGUYEN", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4775", "doc-id": "RFC5272", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.1", "orig_text": "eContentType = id-ct-PKIData", "correct_text": "eContentType = id-cct-PKIData", "notes": "This is repeated a few times throughout Appendix B.", "submit_date": "2016-08-11", "submitter_name": "Kees-Jan Hermans", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-19 10:57:59"}, {"errata_id": "4776", "doc-id": "RFC5769", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "2.1.  Sample Request\r\n\r\n   This request uses the following parameters:\r\n\r\n   Software name:  \"STUN test client\" (without quotes)", "correct_text": "2.1.  Sample Request\r\n\r\n   This request uses the following parameters:\r\n\r\n   Software name:  \"STUN-test-client@v0.0.0\" (without quotes)", "notes": "https://tools.ietf.org/html/rfc5389#section-15.10 says that\r\nIts value SHOULD include manufacturer and version number.\r\nso test vector of SOFTWARE at 2.1, 2.2, 2.3 should include this.", "submit_date": "2016-08-12", "submitter_name": "software should include manufacturer and version number", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-06-02 13:52:12"}, {"errata_id": "4777", "doc-id": "RFC5753", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "-  originator MUST be the alternative originatorKey.  The\r\n      originatorKey algorithm field MUST contain the id-ecPublicKey\r\n      object identifier (see Section 7.1.2).  The parameters associated\r\n      with id-ecPublicKey MUST be absent, ECParameters, or NULL.  The\r\n      parameters associated with id-ecPublicKey SHOULD be absent or\r\n      ECParameters, and NULL is allowed to support legacy\r\n      implementations.  The previous version of this document required\r\n      NULL to be present.  If the parameters are ECParameters, then they\r\n      MUST be namedCurve.  The originatorKey publicKey field MUST\r\n      contain the DER encoding of the value of the ASN.1 type ECPoint\r\n      (see Section 7.2), which represents the sending agent's ephemeral\r\n      EC public key.  The ECPoint in uncompressed form MUST be\r\n      supported.", "correct_text": "-  originator MUST be the alternative originatorKey.  The\r\n      originatorKey algorithm field MUST contain the id-ecPublicKey\r\n      object identifier (see Section 7.1.2).  The parameters associated\r\n      with id-ecPublicKey MUST be absent, ECParameters, or NULL.  The\r\n      parameters associated with id-ecPublicKey SHOULD be absent or\r\n      ECParameters, and NULL is allowed to support legacy\r\n      implementations.  The previous version of this document required\r\n      NULL to be present.  If the parameters are ECParameters, then they\r\n      MUST be namedCurve.  The originatorKey publicKey field MUST\r\n      contain the encoded public key as defined in [X9.62].  The hybred\r\n      form MUST NOT be used.  The ECPoint in uncompressed form MUST be\r\n      supported.  This mirrors the same format used in public key \r\n      certificates as defined in Section 2.2 of [RFC5480].", "notes": "There is a problem in that for ECPoints, the public key is defined to be encoded differently in this document than it is in a public key certificate.  The difference is the presence of the ASN.1 OCTET STRING wrapper.\r\n\r\nOpenSSL and BouncyCastle both use the unwrapped version per Dr. Stephen Henson note to me in mail.\r\n\r\nThis error is also present in sections 3.1.2, 3.1.3, 3.2.1, 3.2.2, 7.2", "submit_date": "2016-08-13", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:14:39"}, {"errata_id": "4778", "doc-id": "RFC1122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.3.4", "orig_text": "(3) or if at least a fraction Fs of the maximum window\r\n    can be sent, i.e., if:\r\n        [SND.NXT = SND.UNA and]\r\n\r\n                min(D.U) >= Fs * Max(SND.WND);\r\n", "correct_text": "(3) or if at least a fraction Fs of the maximum window\r\n    can be sent, i.e., if:\r\n        [SND.NXT = SND.UNA and]\r\n\r\n                min(D,U) >= Fs * Max(SND.WND);\r\n", "notes": "correct min(D.U) to min(D,U)", "submit_date": "2016-08-18", "submitter_name": "Sanjeev Ranot", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-08 01:29:08"}, {"errata_id": "4779", "doc-id": "RFC7230", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.2.", "orig_text": "   [...] Non-US-ASCII content in header fields and the reason\r\n   phrase has been obsoleted and made opaque (the TEXT rule was\r\n   removed).  (Section 3.2.6)", "correct_text": "   [...] Non-US-ASCII content in header field values and the reason\r\n   phrase has been obsoleted and made opaque (the TEXT rule was\r\n   removed).  (Section 3.2.6)", "notes": "Section 3.2 plainly states header field names are token \r\n(VCHARs less separators) as defined in 3.2.6. \r\n\r\nThe \"header fields\" identified in this footnote are neither \r\nclear nor correct.\r\n\r\nAlexey: While this is a clarification, the whole section is likely to be deleted when the document is revised.", "submit_date": "2016-08-18", "submitter_name": "William A. Rowe Jr.", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7104", "doc-id": "RFC9276", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "Smaller zones, or large\r\nbut relatively static zones, are encouraged to not use the opt-opt\r\nflag and to take advantage of DNSSEC's authenticated denial of\r\nexistence.\r\n", "correct_text": "Smaller zones, or large\r\nbut relatively static zones, are encouraged to not use the opt-out\r\nflag and to take advantage of DNSSEC's authenticated denial of\r\nexistence.\r\n", "notes": "There is a typo, \"opt-opt\" should be \"opt-out\".", "submit_date": "2022-08-26", "submitter_name": "Stefan Ubbink", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-08-26 20:59:02"}, {"errata_id": "4958", "doc-id": "RFC6603", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "6.1.  Requesting Router\r\n\r\n   The requesting router behavior regarding the use of the\r\n   OPTION_PD_EXCLUDE option is mostly identical to the steps described\r\n   in Section 5.1, with the difference being the use of a DHCPv6 Request\r\n   instead of an Solicit message.  The requesting router SHOULD include\r\n   the OPTION_PD_EXCLUDE option code in the OPTION_ORO option for DHCPv6\r\n   messages as described in Section 22.7 of [RFC3315].  The requesting\r\n   router SHOULD include the OPTION_PD_EXCLUDE option code in the\r\n   OPTION_ORO option for DHCPv6 messages as described in Section 22.7 of\r\n   [RFC3315].", "correct_text": "6.1.  Requesting Router\r\n\r\n   The requesting router behavior regarding the use of the\r\n   OPTION_PD_EXCLUDE option is mostly identical to the steps described\r\n   in Section 5.1, with the difference being the use of a DHCPv6 Request\r\n   instead of an Solicit message.  The requesting router SHOULD include\r\n   the OPTION_PD_EXCLUDE option code in the OPTION_ORO option for DHCPv6\r\n   messages as described in Section 22.7 of [RFC3315].\r\n", "notes": "Minor editorial bug: the last sentence of that paragraph was duplicated.", "submit_date": "2017-03-07", "submitter_name": "Sander Steffann", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4780", "doc-id": "RFC5731", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.5", "orig_text": "   -  A <domain:registrant> element that contains the identifier for the\r\n      human or organizational social information (contact) object to be\r\n      associated with the domain object as the object registrant.  This\r\n      object identifier MUST be known to the server before the contact\r\n      object can be associated with the domain object.  An empty element\r\n      can be used to remove registrant information.\r\n\r\n   -  A <domain:authInfo> element that contains authorization\r\n      information associated with the domain object.  This mapping\r\n      includes a password-based authentication mechanism, but the schema\r\n      allows new mechanisms to be defined in new schemas.  A <domain:\r\n      null> element can be used within the <domain:authInfo> element to\r\n      remove authorization information.", "correct_text": "   -  An OPTIONAL <domain:registrant> element that contains the\r\n      identifier for the human or organizational social information\r\n      (contact) object to be associated with the domain object as the\r\n      object registrant.  This object identifier MUST be known to the\r\n      server before the contact object can be associated with the domain\r\n      object.  An empty element can be used to remove registrant\r\n      information.\r\n\r\n   -  An OPTIONAL <domain:authInfo> element that contains authorization\r\n      information associated with the domain object.  This mapping\r\n      includes a password-based authentication mechanism, but the schema\r\n      allows new mechanisms to be defined in new schemas.  A <domain:\r\n      null> element can be used within the <domain:authInfo> element to\r\n      remove authorization information.", "notes": "The registrant and authinfo parameters are both optional according to the XML Schema specification.\r\nBut the text of the 3.2.5 is currently ambiguous (IMHO), and may lead to think both parameters are mandatory.", "submit_date": "2016-08-18", "submitter_name": "Romuald Brunet", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:20:47"}, {"errata_id": "4781", "doc-id": "RFC1535", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Solution(s)", "orig_text": "Given user@a.b.c.d. connecting to host those same two\r\ntries would appear as:\r\n\r\n   x.b.c.d.  and x.\r\n", "correct_text": "Given user@a.b.c.d. connecting to host x those same two\r\ntries would appear as:\r\n\r\n   x.b.c.d.  and x.\r\n", "notes": "The original example text in section \"Solution(s)\" does not list the specific host the user@a.b.c.d. wants to connect to. From the search items listed next, I would suspect that the user wants to connect to host \"x\". However, I'm not exactly sure. In any case, it would be helpful to clarify the text with respect to the search list given next.", "submit_date": "2016-08-18", "submitter_name": "Harald Albrecht", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:25:21"}, {"errata_id": "4782", "doc-id": "RFC1624", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "   The problem is avoided by not assuming this property.  The correct\r\n   equation is given below:\r\n\r\n          HC' = ~(C + (-m) + m')    --    [Eqn. 3]\r\n              = ~(~HC + ~m + m')", "correct_text": "   The problem is avoided by not assuming this property.  The correct\r\n   equation is given below:\r\n\r\n          HC' = ~(C + (-m) + m')    --    [Eqn. 3]\r\n              = ~(~HC + ~m + m')", "notes": "The RFC is for computing incremental checksum and ensuring the computed checksum does not result in 0xFFFF (representing -0). However, when in cases where the original value (m) has not changed, and original header checksum (HC) is 0, it will change the fianl checksum value to 0xFFFF (against the intent of this RFC).\r\n\r\nExample:\r\nm = 0x5555\r\n~m = 0xAAAA\r\nm' = 0x5555\r\nChecksum (HC) = 0x0000\r\nChecksum compliment (~HC) = 0xFFFF\r\nincremental checksum = ~(~HC + ~m + m')\t~(0xFFFF + 0xAAAA + 0x5555) = ~(0x0000) = 0xFFFF\r\n\r\nSolution:\r\nNeed to explicitly mention that the incremental checksum computation should be done only when there is change in value (ie, m != m').", "submit_date": "2016-08-18", "submitter_name": "Ihsan Ulla Sharief", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 20:32:15"}, {"errata_id": "4783", "doc-id": "RFC4492", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.7", "orig_text": "Actions of the sender:\r\n\r\n   The client selects an ephemeral ECDH public key corresponding to the\r\n   parameters it received from the server according to the ECKAS-DH1\r\n   scheme from IEEE 1363 [6].  It conveys this information to the client\r\n   in the ClientKeyExchange message using the format defined above.", "correct_text": "Actions of the sender:\r\n\r\n   The client selects an ephemeral ECDH public key corresponding to the\r\n   parameters it received from the server according to the ECKAS-DH1\r\n   scheme from IEEE 1363 [6].  It conveys this information to the server\r\n   in the ClientKeyExchange message using the format defined above.", "notes": "The client conveys data to the server, not itself.", "submit_date": "2016-08-19", "submitter_name": "Florent Tatard", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4784", "doc-id": "RFC6352", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.4", "orig_text": "attributes can be used on each variant of the\r\nCALDAV:address-data XML element.", "correct_text": "attributes can be used on each variant of the\r\nCARDDAV:address-data XML element.", "notes": "The address-data element is located in the CARDDAV namespace.", "submit_date": "2016-08-20", "submitter_name": "Ricki Hirner", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7105", "doc-id": "RFC9110", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.1.", "orig_text": "B.1.  Changes from RFC 2818\r\n\r\n   None.", "correct_text": "B.1.  Changes from RFC 2818\r\n\r\n   The use of CN-ID has been deprecated.", "notes": "In RFC2818:\r\n\r\n   If a subjectAltName extension of type dNSName is present, that MUST\r\n   be used as the identity. Otherwise, the (most specific) Common Name\r\n   field in the Subject field of the certificate MUST be used.\r\n\r\nCN-ID may be used (when a subjectAltName of type dNSName is not present).\r\n\r\nIn RFC9110:\r\n\r\n   A reference identity of type CN-ID MUST NOT be used by clients.\r\n\r\nCN-ID is not used at all.  It is a change from RFC2818.", "submit_date": "2022-08-26", "submitter_name": "Tomoyuki Sahara", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-01 15:53:42"}, {"errata_id": "5361", "doc-id": "RFC2638", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix", "orig_text": "After the draft-nichols-diff-svc-00 was submitted, the co-authors had\r\na discussion with Dave Clark and John Wroclawski which resulted in\r\nClark's using the presentation slot for the draft at the December\r\n1997 IETF Integrated Services Working Group meeting.", "correct_text": "After the draft-nichols-diff-svc-arch-00 was submitted, the co-authors\r\nhad a discussion with Dave Clark and John Wroclawski which resulted in\r\nClark's using the presentation slot for the draft at the December\r\n1997 IETF Integrated Services Working Group meeting.", "notes": "The original text refers to a draft that never existed.", "submit_date": "2018-05-15", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5362", "doc-id": "RFC8342", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "The convention adopted by the interfaces\r\n   data model [RFC8343] and the IP data model [RFC8344] was to use two\r\n   separate branches rooted at the root of the data tree: one branch for\r\n   configuration data objects and one branch for operational state data\r\n   objects.\r\n", "correct_text": "The convention adopted by the interfaces\r\n   data model [RFC7223] and the IP data model [RFC7277] was to use two\r\n   separate branches rooted at the root of the data tree: one branch for\r\n   configuration data objects and one branch for operational state data\r\n   objects.\r\n", "notes": "The duplication of definition and separation of operational state data and configuration data happened in RFC7223 and RFC7277. RFC8343 and RFC8344 have corrected this using NMDA architecture.\r\n\r\nThe Informative References section should point to RFCs 7223 and 7277.", "submit_date": "2018-05-17", "submitter_name": "Rohit R Ranade", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4785", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.9  p. 72", "orig_text": "\r\nIf the ACK is a duplicate\r\n(SEG.ACK < SND.UNA), it can be ignored.", "correct_text": "If the ACK is a duplicate\r\n(SEG.ACK =< SND.UNA), it can be ignored except when equality is met, \r\nthen window should be updated. This can happen when there are \r\nsegments in flight but the receiver shrinks its RCV.BUF to drop all \r\nof them and send an ACK carrying zero window update. Upon its \r\narrival at the sending TCP, condition SND.UNA = SEG.ACK is met and \r\nwe must update SND.WND <- 0. Then sender starts persist timer for \r\nsending zero-window probes [Ref. RFC 1122 Section 4.2.2.17, page 92]\r\n\r\n\r\n\r\n", "notes": "The condition is corrected as Duplicate ACK in \r\nRFC 1122, Section 4.2.2.20 (g) p. 94. Accordingly old text must be \r\nmodified and new text should also be present to support the corrected \r\ncondition in RFC 793. \r\n\r\nThis is one case where duplicate acknowledgment cannot be ignored. i.e. \r\nwhen SEG.ACK == SND.UNA and advertised window in the incoming ACK is 0\r\nin which case sender needs to :\r\n1. update window\r\n2. start persist timer\r\n3. send zero window probe segments. \r\n\r\n\r\nNote:\r\nSuch ACKs should not be called as duplicates as it fails condition (e) \r\nof definition of \"DUPLICATE ACKNOWLEDGMENT\" in Ref 5681 Section 2, pg 4", "submit_date": "2016-08-20", "submitter_name": "Sanjeev Ranot", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4786", "doc-id": "RFC6643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "      If the current object belongs to a conceptual table,\r\n      then a sequence of leaf statements is generated for each INDEX\r\n      object of the conceptual table.  These leafs are named after the\r\n      INDEX objects and of type leafref.\r\n", "correct_text": "      If the current object belongs to a conceptual table,\r\n      then a sequence of leaf statements is generated for each INDEX\r\n      object of the conceptual table, except that a leaf statement is\r\n      not generated for the current object if it is also an INDEX\r\n      object. These leafs are named after the INDEX objects and of type\r\n      leafref.\r\n", "notes": "The original text would lead to duplicate leaf nodes if the current object is also part of the INDEX.  Section 9.2 contains an example which shows such a situation, without any duplicates.", "submit_date": "2016-08-24", "submitter_name": "Martin Bj\u00f6rklund", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4787", "doc-id": "RFC6902", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "The \"remove\" operation removes the value at the target location.\r\n\r\nThe target location MUST exist for the operation to be successful.\r\n\r\nFor example:\r\n\r\n{ \"op\": \"remove\", \"path\": \"/a/b/c\" }\r\n\r\nIf removing an element from an array, any elements above the\r\nspecified index are shifted one position to the left.\r\n", "correct_text": "The \"remove\" operation removes the value at the target location.\r\n\r\nThe target location MUST exist for the operation to be successful.\r\n\r\nFor example:\r\n\r\n{ \"op\": \"remove\", \"path\": \"/a/b/c\" }\r\n\r\nIf removing an element from an array, any elements above the\r\nspecified index are shifted one position to the left.\r\n\r\nThe target location MUST NOT be a reference to the root. It is an\r\nerror in this document:\r\n\r\n{ \"op\": \"remove\", \"path\": \"\" }\r\n", "notes": "The semantics of { \"op\": \"remove\", \"path\": \"\" } are never specified. If we allow to remove the root element, what would the result be? It would no longer be a valid JSON document, hence I propose to explicitly require the path of the \"remove\" operation to not reference the root.\r\n\r\nMark Nottingham: This isn't an errata; it would require gaining consensus and updating the document. See also: https://github.com/json-patch/json-patch2", "submit_date": "2016-08-25", "submitter_name": "Daniel Frey", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4788", "doc-id": "RFC5764", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   which are assigned as shown below.  The per-association context value\n   is empty.", "correct_text": "   which are assigned as shown below.  No per-association context value\r\n   is used.", "notes": "This code is somewhat ambiguous, though the better interpretation is probably that you should use a zero-length context (arm 2 of https://tools.ietf.org/html/rfc5705#section-4). However, real implementations do not seem to use the exporter value, so we need to resolve this in that direction.", "submit_date": "2016-08-30", "submitter_name": "Eric Rescorla", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4789", "doc-id": "RFC3986", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.3", "orig_text": "   o  If the base URI has a defined authority component and an empty\r\n      path, then return a string consisting of \"/\" concatenated with the\r\n      reference's path; otherwise,\r\n", "correct_text": "   o  If the base URI has a defined authority component and an empty \r\n      path, or if the base URI's path is ending with \"/..\", then return \r\n      a string consisting of base's path concatenated with \"/\" and then \r\n      concatenated with the reference's path; otherwise,", "notes": "this is about case when reference does not have scheme and authority and its path is not starting with \"/\".", "submit_date": "2016-08-31", "submitter_name": "Dinar Qurbanov", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 20:27:29"}, {"errata_id": "4790", "doc-id": "RFC2637", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   Error Code               This field is set to 0 unless a \"General\r\n                            Error\" exists, in which case Result Code is\r\n                            set to 2 and this field is set to the value\r\n                            corresponding to the general error condition\r\n                            as specified in section 2.2.\r\n", "correct_text": "   Error Code               This field is set to 0 unless a \"General\r\n                            Error\" exists, in which case Result Code is\r\n                            set to 2 and this field is set to the value\r\n                            corresponding to the general error condition\r\n                            as specified in section 2.16.\r\n", "notes": "Incorrect reference to section 2.2.  \r\n\r\nNote - Similar pointers occur in Sections 2.4, 2.6, 2.8, 2.10, 2.13.", "submit_date": "2016-09-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5386", "doc-id": "RFC4086", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   [DoD]           \"Password Management Guideline\", United States of\r\n                   America, Department of Defense, Computer Security\r\n                   Center, CSC-STD-002-85, April 1885.", "correct_text": "   [DoD]           \"Password Management Guideline\", United States of\r\n                   America, Department of Defense, Computer Security\r\n                   Center, CSC-STD-002-85, April 1985.", "notes": "This Informative Reference had the wrong century as publish date.\r\n", "submit_date": "2018-06-08", "submitter_name": "David Jonasson", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-08-03 01:30:48"}, {"errata_id": "5452", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "The EBNF (scattered throughout the document) does not match the examples\r\nnor the prose. It is also ambiguous in places (allowing two different\r\ninterpretations of a parameter list), and nonsensical in others (such\r\nas the handling of whitespace).", "correct_text": "The EBNF should be corrected as follows:\r\n\r\nissuevalue = *WSP [domain *WSP] [\";\" *WSP [parameters *WSP]]\r\n\r\ndomain = label *(\".\" label)\r\nlabel = (ALPHA / DIGIT) *( *(\"-\") (ALPHA / DIGIT))\r\n\r\nparameters = (parameter *WSP \";\" *WSP parameters) / parameter\r\nparameter = tag *WSP \"=\" *WSP value\r\ntag = (ALPHA / DIGIT) *(ALPHA / DIGIT)\r\nvalue = *(%x21-3A / %x3C-7E)\r\n", "notes": "[EBNF, text, examples do not match.]\r\n\r\nI am proposing this on behalf of the IETF ACME WG. We want to submit a standards-track document, but the current CAA specification is broken. We know it is being revised, but we do not want to wait.  Our AD has said to submit the errata and he will accept it.", "submit_date": "2018-08-06", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "EKR", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4794", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.21.5", "orig_text": "   o  If the \"when\" statement is a child of an \"augment\" statement, then\r\n      the context node is the augment's target node in the data tree, if\r\n      the target node is a data node.  Otherwise, the context node is\r\n      the closest ancestor node to the target node that is also a data\r\n      node.  If no such node exists, the context node is the root node.\r\n      The accessible tree is tentatively altered during the processing\r\n      of the XPath expression by removing all instances (if any) of the\r\n      nodes added by the \"augment\" statement.\r\n", "correct_text": "   o  If the \"when\" statement is a child of an \"augment\" statement, then\r\n      the context node is the augment's target node in the data tree, if\r\n      the target node is a data node, rpc, action or notification.\r\n      Otherwise, the context node is the closest ancestor node to the\r\n      target node that is also a data node, rpc, action or notification.\r\n      If no such node exists, the context node is the root node. The\r\n      accessible tree is tentatively altered during the processing of\r\n      the XPath expression by removing all instances (if any) of the\r\n      nodes added by the \"augment\" statement.\r\n", "notes": "If the target node of an \"augment\" is inside an rpc, action or notification, the context node also needs to be inside that rpc, action or notification. For example, if the target node is the \"input\" node of an action, the context node should be the action node, not the data node for which the action is defined as the original text implies. This is also in accordance with the definition of the accessible tree in Sec. 6.4.1.", "submit_date": "2016-09-02", "submitter_name": "Ladislav Lhotka", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4795", "doc-id": "RFC7317", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "typedef crypt-hash {\r\n       type string {\r\n         pattern\r\n           '$0$.*'\r\n         + '|$1$[a-zA-Z0-9./]{1,8}$[a-zA-Z0-9./]{22}'\r\n         + '|$5$(rounds=\\d+$)?[a-zA-Z0-9./]{1,16}$[a-zA-Z0-9./]{43}'\r\n         + '|$6$(rounds=\\d+$)?[a-zA-Z0-9./]{1,16}$[a-zA-Z0-9./]{86}';\r\n       }", "correct_text": "typedef crypt-hash {\r\n  type string {\r\n    pattern\r\n        '\\$0\\$.*'\r\n      + '|\\$1\\$[a-zA-Z0-9./]{1,8}\\$[a-zA-Z0-9./]{22}'\r\n      + '|\\$5\\$(rounds=\\d+\\$)?[a-zA-Z0-9./]{1,16}\\$[a-zA-Z0-9./]{43}'\r\n      + '|\\$6\\$(rounds=\\d+\\$)?[a-zA-Z0-9./]{1,16}\\$[a-zA-Z0-9./]{86}';\r\n  }\r\n  ", "notes": "Character $ has special meaning in regular expression.\n --VERIFIER NOTES-- \nNo, \"$\" is not special in the regular expression dialect used in YANG\r\n(XML Schema).", "submit_date": "2016-09-05", "submitter_name": "Kaja Mohideen", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4796", "doc-id": "RFC7929", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   6.  The domain name (the \"right-hand side\" of the email address,\r\n       called the \"domain\" in [RFC5322]) is appended to the result of\r\n       step 2 to complete the prepared domain name.\r\n", "correct_text": "   6.  The domain name (the \"right-hand side\" of the email address,\r\n       called the \"domain\" in [RFC5322]) is appended to the result of\r\n       step 5 to complete the prepared domain name.\r\n", "notes": "Technically, it should be step 5, not step 2: after step 2, there is no _openpgpkey label in the composed domain name.  step 5 adds the _openpgpkey label.", "submit_date": "2016-09-08", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5389", "doc-id": "RFC8233", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "The METRIC object is defined in Section 7.8 of [RFC5440], comprising\r\nmetric-value and metric-type (T field), and a flags field, comprising\r\na number of bit flags (B bit and P bit).  This document defines the\r\nfollowing types for the METRIC object.", "correct_text": "The METRIC object is defined in Section 7.8 of [RFC5440], comprising\r\nmetric-value and metric-type (T field), and a flags field, comprising\r\na number of bit flags (B bit and C bit).  This document defines the\r\nfollowing types for the METRIC object.", "notes": "The METRIC object (https://tools.ietf.org/html/rfc5440#section-7.8) has 2 flags defined - B (Bound) and C (Computed Metric). The P bit is incorrect in the original text, it should be C bit.", "submit_date": "2018-06-13", "submitter_name": "DHRUV DHODY", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5429", "doc-id": "RFC7252", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4", "orig_text": "An Acknowledgement or Reset message is related to a Confirmable\r\nmessage or Non-confirmable message by means of a Message ID along\r\nwith additional address information of the corresponding endpoint.\r\nThe Message ID is a 16-bit unsigned integer that is generated by the\r\nsender of a Confirmable or Non-confirmable message and included in\r\nthe CoAP header.  The Message ID MUST be echoed in the\r\nAcknowledgement or Reset message by the recipient.\r\n\r\nThe same Message ID MUST NOT be reused (in communicating with the\r\nsame endpoint) within the EXCHANGE_LIFETIME (Section 4.8.2).\r\n\r\nImplementation Note:  Several implementation strategies can be\r\n  employed for generating Message IDs.  In the simplest case, a CoAP\r\n  endpoint generates Message IDs by keeping a single Message ID\r\n  variable, which is changed each time a new Confirmable or Non-\r\n  confirmable message is sent, regardless of the destination address\r\n  or port.  Endpoints dealing with large numbers of transactions\r\n  could keep multiple Message ID variables, for example, per prefix\r\n  or destination address.  (Note that some receiving endpoints may\r\n  not be able to distinguish unicast and multicast packets addressed\r\n  to it, so endpoints generating Message IDs need to make sure these\r\n  do not overlap.)  It is strongly recommended that the initial\r\n  value of the variable (e.g., on startup) be randomized, in order\r\n  to make successful off-path attacks on the protocol less likely.", "correct_text": "An Acknowledgement or Reset message is related to a Confirmable\r\nmessage or Non-confirmable message by means of a Message ID along\r\nwith additional address information of the corresponding endpoint.\r\nThe Message ID is a 16-bit unsigned integer that is generated by the\r\nsender of a Confirmable or Non-confirmable message and included in\r\nthe CoAP header.  Message IDs of subsequence messages send to the\r\nsame endpoint within EXCHANGE_LIFETIME MUST be strictly ascending\r\n(wrapping around at a value of 65535).  Additionally, two\r\nsubsequently send Message IDs to the same endpoint SHOULD have a\r\ndifference of at most 16.  The Message ID MUST be echoed in the\r\nAcknowledgement or Reset message by the recipient.\r\n\r\nThe same Message ID MUST NOT be reused (in communicating with the\r\nsame endpoint) within the EXCHANGE_LIFETIME (Section 4.8.2).\r\n\r\nImplementation Note:  Several implementation strategies can be\r\n  employed for generating Message IDs.  In the simplest case, a CoAP\r\n  endpoint generates Message IDs by keeping a single Message ID\r\n  variable, which is incremented each time a new Confirmable or Non-\r\n  confirmable message is sent, regardless of the destination address\r\n  or port.  Endpoints dealing with large numbers of transactions\r\n  could keep multiple Message ID variables, for example, per prefix\r\n  or destination address.  (Note that some receiving endpoints may\r\n  not be able to distinguish unicast and multicast packets addressed\r\n  to it, so endpoints generating Message IDs need to make sure these\r\n  do not overlap.)  It is strongly recommended that the initial\r\n  value of the variable (e.g., on startup) be randomized, in order\r\n  to make successful off-path attacks on the protocol less likely.", "notes": "Without any restrictions on how Message IDs are generated, an implementation of CoAP duplication detection must be prepared to receive a random sequence of Message IDs.\r\nOne simple implementation strategy would be to store the received Message IDs along with a timestamp when they were received.\r\nIf a 16 bit time stamp would be used, 4 Bytes per tracked Message ID would be required.\r\nIf additionaly a CoAP server expects requests to be received at a rate of 1 message per second, at least 247 * 4 Byte or approximately 1 KiB have to be allocated per client.\r\nA class 1 (see RFC 7228 Section 3) server could handle at most 10 clients in parallel, if anything apart duplicate detection could be implemented without using any memory at all.\r\n\r\nIf instead Message IDs have to be generated by incrementing a (global or per endpoint/network prefix/...) counter variable, duplicate detection can be implemented in a time and memory efficient way without limiting the rate of the message exchange between to nodes.\n --VERIFIER NOTES-- \nIn rejecting this Errata report I note that the reported error is not a typo, but a deliberate decision of the authors and working group. The change, therefore, if it is to be applied needs to be achieved through a consensus document.", "submit_date": "2018-07-18", "submitter_name": "Marian Buschsieweke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:28:38"}, {"errata_id": "5430", "doc-id": "RFC3380", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "      5. if the \"job-message-from-operator\" Printer Description\r\n         attribute is supported (see [RFC2911], 4.3.16), then it MUST be\r\n         settable.\r\n", "correct_text": "      5. if the \"job-message-from-operator\" Job Description\r\n         attribute is supported (see [RFC2911], 4.3.16), then it MUST be\r\n         settable.\r\n", "notes": "\"job-message-from-operator\" is an attribute for Jobs, not Printers.", "submit_date": "2018-07-18", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4959", "doc-id": "RFC3859", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "When an application wants to subscriber to the presence information\r\n   associated with a PRESENTITY (in order to receive periodic\r\n   notifications of presence information), it invokes the subscribe\r\n   operation, e.g.,", "correct_text": "When an application wants to subscribe to the presence information\r\n   associated with a PRESENTITY (in order to receive periodic\r\n   notifications of presence information), it invokes the subscribe\r\n   operation, e.g.,", "notes": "The word \"subscriber\" should be the verb \"subscribe.\"", "submit_date": "2017-03-07", "submitter_name": "Matt Kern", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:38:35"}, {"errata_id": "4800", "doc-id": "RFC5077", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "      struct {\r\n          uint32 ticket_lifetime_hint;\r\n          opaque ticket<0..2^16-1>;\r\n      } NewSessionTicket;\r\n\r\n(...)\r\n\r\n   The ticket is structured as follows:\r\n\r\n      struct {\r\n          opaque key_name[16];\r\n          opaque iv[16];\r\n          opaque encrypted_state<0..2^16-1>;\r\n          opaque mac[32];\r\n      } ticket;\r\n\r\n(...)\r\n\r\n      struct {\r\n          ProtocolVersion protocol_version;\r\n          CipherSuite cipher_suite;\r\n          CompressionMethod compression_method;\r\n          opaque master_secret[48];\r\n          ClientIdentity client_identity;\r\n          uint32 timestamp;\r\n      } StatePlaintext;\r\n\r\n      enum {\r\n         anonymous(0),\r\n         certificate_based(1),\r\n         psk(2)\r\n     } ClientAuthenticationType;\r\n\r\n      struct {\r\n          ClientAuthenticationType client_authentication_type;\r\n          select (ClientAuthenticationType) {\r\n              case anonymous: struct {};\r\n              case certificate_based:\r\n                  ASN.1Cert certificate_list<0..2^24-1>;\r\n              case psk:\r\n                  opaque psk_identity<0..2^16-1>;   /* from [RFC4279] */\r\n          };\r\n       } ClientIdentity;", "correct_text": "", "notes": "The ticket construction recommended in section 4 appears to be unimplementable in two respects:\r\n\r\n1. Tickets are up to 2^16-1 bytes in length, given they appear in both the client hello extension and the NewSessionTicket handshake message. The recommended format defines a ticket of up to 16+16+32+2+2^16-1 bytes in length.  This does not fit.\r\n\r\n2. The recommended format allows for up to 2^16-1 bytes of state plaintext in the encrypted_state field. The suggested StatePlaintext is up to 2+2+1+48+1+4+3+2^24-1 bytes in length. This does not fit.", "submit_date": "2016-09-10", "submitter_name": "Joseph Birr-Pixton", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4803", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "In section 3.2\r\n\r\n      header           = \"<Diameter-Header:\" command-id\r\n\r\n                         [r-bit] [p-bit] [e-bit] [application-id]\">\"\r\n\r\n\r\nIn section 3.4\r\n\r\n         header           = \"<\" \"AVP-Header:\" avpcode [vendor] \">\"", "correct_text": "In section 3.2\r\n\r\n      header           = \"<Diameter Header:\" command-id\r\n\r\n                         [r-bit] [p-bit] [e-bit] [application-id]\">\"\r\n\r\nIn section 3.4\r\n\r\n         header           = \"<\" \"AVP Header:\" avpcode [vendor] \">\"", "notes": "Background:\r\nThere was an initial errata (kept for background information at the bottom of this note). After some discussion with the dime WG, this errata was modified.\r\n\r\n This errata report is correct on the inconsistency regarding the definition of the command header and AVP header and how they are used in the rest of the document in the ABNF description of commands and Grouped AVPs.\r\n\r\n \r\n\r\nFor commands, the header is defined as follow:\r\n\r\n \r\n\r\n   header           = \"<Diameter-Header:\" command-id\r\n\r\n                         [r-bit] [p-bit] [e-bit] [application-id]\">\"\r\n\r\n \r\n\r\nwhereas \"<Diameter Header:\" is used when defining commands.\r\n\r\n \r\n\r\nSame for Grouped AVP. It is defined as follow:\r\n\r\n \r\n\r\n         header           = \"<\" \"AVP-Header:\" avpcode [vendor] \">\"\r\n\r\n \r\n\r\nwhereas \"<AVP Header:\" is used when defining Grouped AVPs.\r\n\r\n \r\n\r\nConsidering that most (if not all) the ABNF descriptions have been copied from the commands and Grouped AVPs defined in the RFC3588 or RFC6733, I would be in favor to correct the specification by modifying the definition of the headers, i.e.\r\n\r\n \r\n\r\n--> In section 3.2.  Command Code Format Specification\r\n\r\n \r\n\r\nOLD:\r\n\r\n \r\n\r\n   header           = \"<Diameter-Header:\" command-id\r\n\r\n                         [r-bit] [p-bit] [e-bit] [application-id]\">\"\r\n\r\n \r\n\r\nNEW:\r\n\r\n \r\n\r\n   header           = \"<Diameter Header:\" command-id\r\n\r\n                         [r-bit] [p-bit] [e-bit] [application-id]\">\"\r\n\r\n \r\n\r\n \r\n\r\n--> And in section 4.4\r\n\r\n \r\n\r\nOLD:\r\n\r\n \r\n\r\n         header           = \"<\" \"AVP-Header:\" avpcode [vendor] \">\"\r\n\r\n \r\n\r\nNEW:\r\n\r\n \r\n\r\n         header           = \"<\" \"AVP Header:\" avpcode [vendor] \">\"\r\n\r\n=============================================================================\r\n\r\nThis initial errata is below:\r\nOriginal text:\r\n   Example-Request ::= < Diameter Header: 9999999, REQ, PXY >\r\n                       { User-Name }\r\n                    1* { Origin-Host }\r\n                     * [ AVP ]\r\n\r\nCorrected text:\r\n   <Example-Request> ::= < Diameter-Header: 9999999, REQ, PXY >\r\n                       { User-Name }\r\n                    1* { Origin-Host }\r\n                     * [ AVP ]\r\n\r\nI converted the BNF into a PetitParser parser in Smalltalk/Pharo and noticed that example and grammar do not match. The first issue is with the example following the grammar but most definitions do not follow the BNF so maybe it is best to update the BNF. \r\n\r\n  header           = \"<Diameter-Header:\" command-id\r\n                         [r-bit] [p-bit] [e-bit] [application-id]\">\"\r\n\r\nBut \"Diameter-Header:\" is not used throughout the text so maybe it is better to update the grammar to \"Diameter Header:\".\r\n\r\n\r\n command-def      = \"<\" command-name \">\" \"::=\" diameter-message\r\n\r\nbut the example is not using <> for the command-name (\"Example-Request\"). For the grouped-avp-def application is sometimes used with \"<\" name \">\" and sometimes just name.", "submit_date": "2016-09-13", "submitter_name": "Holger Freyther", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4804", "doc-id": "RFC2327", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   This appendix provides an Augmented BNF grammar for SDP. ABNF is\r\n   defined in RFC 2234.\r\n", "correct_text": "   This appendix provides an Augmented BNF grammar for SDP. ABNF is\r\n   defined in RFC 2234 [13].\r\n\r\nIn References:\r\n\r\n   [13] Crocker, D. and P. Overell, \"Augmented BNF for syntax\r\n   specifications: ABNF\", RFC 2234, November 1997.\r\n", "notes": "A reference for RFC 2234 is not provided in the original text. The intent is clear, but as an editorial matter (at least) the text needs to be corrected.\n --VERIFIER NOTES-- \nRFC 2327 was obsoleted by 4566, which will in turn be obsoleted by draft-ietf-mmusic-rfc4566bis. If the concern still exists in the draft, please address it there.", "submit_date": "2016-09-18", "submitter_name": "Sean Leonard", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4802", "doc-id": "RFC7520", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.7.5", "orig_text": "The figure 150 is:\r\n\r\n   {\r\n     \"protected\": \"eyJhbGciOiJBMjU2R0NNS1ciLCJpdiI6IktrWVQwR1hfMm\r\n         pIbGZxTl8iLCJraWQiOiIxOGVjMDhlMS1iZmE5LTRkOTUtYjIwNS0yYj\r\n         RkZDFkNDMyMWQiLCJ0YWciOiJrZlBkdVZRM1QzSDZ2bmV3dC0ta3N3Ii\r\n         wiZW5jIjoiQTEyOENCQy1IUzI1NiJ9\",\r\n     \"encrypted_key\": \"lJf3HbOApxMEBkCMOoTnnABxs_CvTWUmZQ2ElLvYNo\r\n         k\",\r\n     \"iv\": \"gz6NjyEFNm_vm8Gj6FwoFQ\",\r\n     \"ciphertext\": \"Jf5p9-ZhJlJy_IQ_byKFmI0Ro7w7G1QiaZpI8OaiVgD8E\r\n         qoDZHyFKFBupS8iaEeVIgMqWmsuJKuoVgzR3YfzoMd3GxEm3VxNhzWyW\r\n         tZKX0gxKdy6HgLvqoGNbZCzLjqcpDiF8q2_62EVAbr2uSc2oaxFmFuIQ\r\n         HLcqAHxy51449xkjZ7ewzZaGV3eFqhpco8o4DijXaG5_7kp3h2cajRfD\r\n         gymuxUbWgLqaeNQaJtvJmSMFuEOSAzw9Hdeb6yhdTynCRmu-kqtO5Dec\r\n         4lT2OMZKpnxc_F1_4yDJFcqb5CiDSmA-psB2k0JtjxAj4UPI61oONK7z\r\n         zFIu4gBfjJCndsZfdvG7h8wGjV98QhrKEnR7xKZ3KCr0_qR1B-gxpNk3\r\n         xWU\",\r\n     \"tag\": \"NvBveHr_vonkvflfnUrmBQ\"\r\n   }\r\n\r\nBut the protected header in the figure 145 is:\r\n\r\n   eyJhbGciOiJBMjU2R0NNS1ciLCJraWQiOiIxOGVjMDhlMS1iZmE5LTRkOTUtYj\r\n   IwNS0yYjRkZDFkNDMyMWQiLCJ0YWciOiJrZlBkdVZRM1QzSDZ2bmV3dC0ta3N3\r\n   IiwiaXYiOiJLa1lUMEdYXzJqSGxmcU5fIiwiZW5jIjoiQTEyOENCQy1IUzI1Ni\r\n   J9\r\n\r\nAnd the figure 147 indicates the tag is \"DKW7jrb4WaRSNfbXVPlT5g\".", "correct_text": "The figure 150 should be:\r\n\r\nThe figure 150 is:\r\n\r\n   {\r\n     \"protected\": \"eyJhbGciOiJBMjU2R0NNS1ciLCJraWQiOiIxOGVjMDhlMS\r\n      1iZmE5LTRkOTUtYjIwNS0yYjRkZDFkNDMyMWQiLCJ0YWciOiJrZlBkdVZRM\r\n      1QzSDZ2bmV3dC0ta3N3IiwiaXYiOiJLa1lUMEdYXzJqSGxmcU5fIiwiZW5j\r\n      IjoiQTEyOENCQy1IUzI1NiJ9\",\r\n     \"encrypted_key\": \"lJf3HbOApxMEBkCMOoTnnABxs_CvTWUmZQ2ElLvYNo\r\n         k\",\r\n     \"iv\": \"gz6NjyEFNm_vm8Gj6FwoFQ\",\r\n     \"ciphertext\": \"Jf5p9-ZhJlJy_IQ_byKFmI0Ro7w7G1QiaZpI8OaiVgD8E\r\n         qoDZHyFKFBupS8iaEeVIgMqWmsuJKuoVgzR3YfzoMd3GxEm3VxNhzWyW\r\n         tZKX0gxKdy6HgLvqoGNbZCzLjqcpDiF8q2_62EVAbr2uSc2oaxFmFuIQ\r\n         HLcqAHxy51449xkjZ7ewzZaGV3eFqhpco8o4DijXaG5_7kp3h2cajRfD\r\n         gymuxUbWgLqaeNQaJtvJmSMFuEOSAzw9Hdeb6yhdTynCRmu-kqtO5Dec\r\n         4lT2OMZKpnxc_F1_4yDJFcqb5CiDSmA-psB2k0JtjxAj4UPI61oONK7z\r\n         zFIu4gBfjJCndsZfdvG7h8wGjV98QhrKEnR7xKZ3KCr0_qR1B-gxpNk3\r\n         xWU\",\r\n     \"tag\": \"DKW7jrb4WaRSNfbXVPlT5g\"\r\n   }", "notes": "Wrong JSON Flattened Representation", "submit_date": "2016-09-13", "submitter_name": "Florent Morselli", "verifier_id": "", "verifier_name": null, "update_date": "2019-12-10 17:31:13"}, {"errata_id": "4805", "doc-id": "RFC2565", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.", "orig_text": "   [RFC2234] Crocker, D. and P. Overell, \"Augmented BNF for Syntax\r\n             Specifications: ABNF\", RFC 2234. November 1997.\r\n", "correct_text": "   [RFC2234] Crocker, D. and P. Overell, \"Augmented BNF for Syntax\r\n             Specifications: ABNF\", RFC 2234, November 1997.\r\n", "notes": "The reference to RFC 2234 should have the \"RFC 2234\" series information followed by a comma (not a period).", "submit_date": "2016-09-18", "submitter_name": "Sean Leonard", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7696", "doc-id": "RFC7642", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "The user selects some attributes and authorizes the transfer of data via authorization protocols (e.g., OAuth, SAML), so selected attributes of the user are transferred from the user's account in directory service A to the website of replying party B at the time of the user's first visit to that site.", "correct_text": "The user selects some attributes and authorizes the transfer of data via authorization protocols (e.g., OAuth, SAML), so selected attributes of the user are transferred from the user's account in directory service A to the website of relying party B at the time of the user's first visit to that site.", "notes": "\"relying party\", not \"replying party\"", "submit_date": "2023-11-10", "submitter_name": "Masaya Watanabe", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-11-10 21:33:51"}, {"errata_id": "5405", "doc-id": "RFC1606", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Allocation", "orig_text": "groups of a million addresses to be allocated for each discreet unit", "correct_text": "groups of a million addresses to be allocated for each discrete unit", "notes": "The document uses the word \"discreet\" where it ought to say \"discrete\"", "submit_date": "2018-06-22", "submitter_name": "Nick Hudson", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-14 22:17:44"}, {"errata_id": "5406", "doc-id": "RFC1606", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Manufacture", "orig_text": "by the billion for the price or a grain of sugar", "correct_text": "by the billion for the price of a grain of sugar", "notes": "", "submit_date": "2018-06-22", "submitter_name": "Edwin Mons", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-14 22:21:58"}, {"errata_id": "4808", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.1.3", "orig_text": "This document obsoletes RFC 3588 but is fully backward compatible\r\n   with that document.", "correct_text": "This document obsoletes RFC 3588.", "notes": "When comparing the BNF for the answer messages CEA, DPA, DWA, RAA, STA and ASA it can be seen that FAILED-AVP avp is no longer marked with the * which means it can be present only once in the diameter message.\r\nPrevious specification (rfc3588) defines multiple FAILED-AVP avp usage in a single diameter message.\r\nSimilar case is for Vendor-Specific-Application-Id AVP definition. \r\nPrevious specification allows multiple usage of Vendor-Id avp in a single message while the new specification defines it as a single mandatory AVP:\r\nrfc3588:\r\n<Vendor-Specific-Application-Id> ::= < AVP Header: 260 >\r\n                                     1* [ Vendor-Id ]\r\n                                     0*1{ Auth-Application-Id }\r\n                                     0*1{ Acct-Application-Id }\r\n\r\nrfc6733:\r\n<Vendor-Specific-Application-Id> ::= < AVP Header: 260 >\r\n                                           { Vendor-Id }\r\n                                           [ Auth-Application-Id ]\r\n                                           [ Acct-Application-Id ]\r\n\t\t\t\t\t\t\t\t\t\t   \r\nHow this facts applies to the sentence about fully backward compatibility in the section 1.1.3?", "submit_date": "2016-09-22", "submitter_name": "Zbigniew Rapnicki", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4809", "doc-id": "RFC2104", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "Applications that use keys longer\r\n   than B bytes will first hash the key using H and then use the\r\n   resultant L byte string as the actual key to HMAC.", "correct_text": "Applications MUST not use keys longer than B bytes.", "notes": "Using this approach creates an exploitable vulnerability where there are two known K instances, one the hashed key, and the other the key itself.  As shown in the sample Java code below:\r\n\r\n    final byte[] keyBytes = KEY.getBytes();\r\n    final byte[] sha1 = HashUtil.sha1(keyBytes);\r\n    final String a = hmac_sha1(keyBytes, TEXT);\r\n    final String b = hmac_sha1(sha1, TEXT);\r\n\r\nAs demonstrated a equals b.  To cite a real world vulnerability; for all keys longer than B, using password storage configurations which store the hash of the key for integrity checks, and store the key itself in a tamper proof device, there will exist plain text keys stored on both storage systems.  Compromising a hash database should not reveal plain text secrets, which will only be true if an implementation first hashes the key and uses the resultant L byte string as the actual key to HMAC.\r\n\r\nI suggest simply not allowing keys longer than B bytes, which will greatly improve the security of the standard.\r\n\r\nVerifier notes: I started a thread [1] on the CFRG mailing list to discuss this. My reading of that thread leads me to conclude there there's consensus to not verify the erratum on the basis that the threat isn't that significant and a backwards incompatible change as would be required is not justified. However, if HMAC were to be updated in a manner that didn't require backwards compatibility then one would likely consider this. Hence marking this as \"hold for document update\"\r\n", "submit_date": "2016-09-23", "submitter_name": "Erdem Memisyazici", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4810", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "x-sig-q-tag-args = qp-hdr-value", "correct_text": "x-sig-q-tag-args = dkim-quoted-printable  ; with \":\" encoded", "notes": "sig-q-tag-methods are \":\"-separated in sig-q-tag, so \":\" shouldn't be permitted\r\nwithin x-sig-q-tag-args.  Note that qp-hdr-value (which I believe was originally\r\ndefined for sig-z-tag, which includes \"|\"-separated values) is defined as\r\n\r\n   qp-hdr-value    =  dkim-quoted-printable    ; with \"|\" encoded", "submit_date": "2016-09-26", "submitter_name": "Juan Altmayer Pizzorno", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4811", "doc-id": "RFC6415", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "   The XRD \"Link\" element, when used with the \"href\" attribute, conveys\r\n   a link relation between the host described by the document and a\r\n   common target URI.", "correct_text": "   The XRD \"Link\" element, when used with the \"href\" attribute, conveys\r\n   a link relation between the host described by the document and a\r\n   common target URI-reference.", "notes": "The erratum changes the text to allow the value of the href attribute to be a URI-reference, that is, either a URI or a relative-reference.\r\n\r\nIt appears that the new text is what has always been intended, because RFC 6415 is taken from Extensible Resource Descriptor (XRD) Version 1.0\r\n(http://docs.oasis-open.org/xri/xrd/v1.0/xrd-1.0.html) sections 2.6 and 1.5.2, which specifies the value to be an \"anyURI\" in the XML schema datatypes, which includes relative URIs.  \"URI-reference\" in RFC 3986 is equivalent to \"anyURI\" in XML schema datatypes.\r\n\r\nThis erratum now matters, because draft-ietf-netconf-restconf makes significant use of href values that are relative URLs.  Also, see the discussion at https://www.ietf.org/mail-archive/web/netconf/current/msg11768.html", "submit_date": "2016-09-26", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4843", "doc-id": "RFC6728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "          leaf isFlowKey {\r\n            when \"(name(../../..) != 'immediateCache')\r\n...\r\n      leaf activeTimeout {\r\n        when \"(name(..) = 'timeoutCache') or\r\n          (name(..) = 'naturalCache')\" {\r\n...\r\n      leaf idleTimeout {\r\n        when \"(name(..) = 'timeoutCache') or\r\n          (name(..) = 'naturalCache')\" {\r\n...\r\n      leaf exportInterval {\r\n        when \"name(..) = 'permanentCache'\" {\r\n\r\n", "correct_text": "          leaf isFlowKey {\r\n            when \"(local-name(../../..) != 'immediateCache')\r\n...\r\n      leaf activeTimeout {\r\n        when \"(local-name(..) = 'timeoutCache') or\r\n          (local-name(..) = 'naturalCache')\" {\r\n...\r\n      leaf idleTimeout {\r\n        when \"(local-name(..) = 'timeoutCache') or\r\n          (local-name(..) = 'naturalCache')\" {\r\n...\r\n      leaf exportInterval {\r\n        when \"local-name(..) = 'permanentCache'\" {\r\n\r\n", "notes": "The XPath function name() returns fully-qualified name (with namespace), but the comparisons are done on simple node names, which are returned by the local-name() XPath function.", "submit_date": "2016-10-26", "submitter_name": "Michal Vasko", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4876", "doc-id": "RFC4960", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1.5.", "orig_text": "3)  Compare the port numbers and the Verification Tag contained\r\n    within the COOKIE ECHO chunk to the actual port numbers and the\r\n    Verification Tag within the SCTP common header of the received\r\n    packet.  If these values do not match, the packet MUST be\r\n    silently discarded.", "correct_text": "3)  Compare the port numbers and the Verification Tag contained\r\n    within the TCB data carried in the State Cookie to the actual\r\n    port numbers and the Verification Tag within the SCTP common\r\n    header of the received packet.  If these values do not match,\r\n    the packet MUST be silently discarded.", "notes": "The comparison has to be performed between the values found in the SCTP common header and what is inside the TCB carried in the State Cookie. The current phrasing can lead to think that there are Verifcation Tag and port number fields within the COOKIE ECHO chunk yet outside the State Cookie.\n --VERIFIER NOTES-- \nThis errata was withdrawn by the submitter, and was not included in draft-ietf-tsvwg-rfc4960-errata.", "submit_date": "2016-12-01", "submitter_name": "Julien Pourtet", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4812", "doc-id": "RFC5882", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.1.2", "orig_text": "   IS-IS may be used to support only one data protocol, or multiple data\r\n   protocols.  [ISIS] specifies a common topology for multiple data\r\n   protocols, but work is under way to support multiple topologies.  If\r\n   multiple topologies are used to support multiple data protocols (or\r\n   multiple classes of service of the same data protocol), the topology-\r\n   specific path associated with a failing BFD session should no longer\r\n   be advertised in IS-IS Label Switched Paths (LSPs) in order to signal\r\n   a lack of connectivity.", "correct_text": "   IS-IS may be used to support only one data protocol, or multiple data\r\n   protocols.  [ISIS] specifies a common topology for multiple data\r\n   protocols, but work is under way to support multiple topologies.  If\r\n   multiple topologies are used to support multiple data protocols (or\r\n   multiple classes of service of the same data protocol), the topology-\r\n   specific path associated with a failing BFD session should no longer\r\n   be advertised in IS-IS Link State Packets (LSPs) in order to signal\r\n   a lack of connectivity.", "notes": "In the context of this section (that discusses usage of BFD sessions for detection of failure of an IS-IS adjacency) the abbreviation \"LSP\" should be expanded as \"Link State Packet\" and not as \"Label Switched Path\". \r\n\r\nFrom my POV this is an editorial erratum since I believe the readers of the RFC understand what the authors wanted to say.", "submit_date": "2016-09-27", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4813", "doc-id": "RFC7512", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.4", "orig_text": "   o  If the value contains \"|<absolute-command-path>\", the\r\n      implementation SHOULD read the PIN from the output of an\r\n      application specified with absolute path \"<absolute-command-\r\n      path>\".  Note that character \"|\" representing a pipe does not have\r\n      to be percent-encoded in the query component of a PKCS #11 URI.\r\n", "correct_text": "(Eliminate)", "notes": "The \"|\" character is not a valid URI [RFC3986] character. Strings that include \"|\" are not URIs and therefore are not valid pkcs11: URIs.\r\n\r\nThe ABNF in Section 2.3 also needs to be updated to remove \"|\".\r\n\r\nSection 2.3 Original:\r\n pk11-query-res-avail = pk11-res-avail / \"/\" / \"?\" / \"|\"\r\n\r\nSection 2.3 Corrected:\r\n pk11-query-res-avail = pk11-res-avail / \"/\" / \"?\"", "submit_date": "2016-09-27", "submitter_name": "Sean Leonard", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4814", "doc-id": "RFC6282", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "Additionally, a Hop Limit value of 255 is often used to verify that a\r\ncommunication occurs over a single-hop.\r\n", "correct_text": "Additionally, a Hop Limit value of 1 is often used to verify that a\r\ncommunication occurs over a single-hop.\r\n", "notes": "The other Hop Limit values in this paragraph may also be mistaken.\r\nThe document treats the values 1, 64, and 255 specially, but fixing\r\nthis sentence would leave no reason for the value 255 to be treated\r\nspecially, so I expect that 255 is the value intended for another\r\nsentence.\n --VERIFIER NOTES-- \nHop limit set to 255 is indeed used to detect a forward operation. I.e., the RFC 6282 is correct.\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/6lo/bCUwBUFbxyfORIuqy5oWGBuwQR8/ ", "submit_date": "2016-09-27", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-04-23 13:21:13"}, {"errata_id": "4815", "doc-id": "RFC5766", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.2.", "orig_text": " The channel number is in the range 0x4000 through 0x7FFE\r\n      (inclusive);", "correct_text": " The channel number is in the range 0x4000 through 0x7FFF\r\n      (inclusive);", "notes": "It seems in the rest of the channel numbers allowed range definitions the values are 0x4000 through 0x7FFF. See: 11.  Channels, 18.  IANA Considerations.", "submit_date": "2016-09-28", "submitter_name": "Costin", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-12-17 15:39:49"}, {"errata_id": "4816", "doc-id": "RFC5007", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "There are references to OPTION_CLIENT_LINK, which doesn't exist.", "correct_text": "The references are apparently for option 48: OPTION_LQ_CLIENT_LINK.", "notes": "-- Verifier note --\r\nSection 4.1.2.5 of this RFC indeed specifies OPTION_LQ_CLIENT_LINK (the DHCPv6 IANA registry also uses OPTION_LQ_CLIENT_LINK). So, sections 4.3.3 and 4.4.1 should use \"OPTION_LQ_CLIENT_LINK\" rather than \"OPTION_CLIENT_LINK\".", "submit_date": "2016-10-02", "submitter_name": "Sander Steffann", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-02-08 09:20:42"}, {"errata_id": "4817", "doc-id": "RFC6066", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "In the OCSPStatusRequest, the \"ResponderIDs\" provides a list of OCSP\r\nresponders that the client trusts. ", "correct_text": "In the OCSPStatusRequest, the \"ResponderID\" provides a list of OCSP\r\nresponders that the client trusts.\r\n\r\nor clearer \r\n\r\nIn OCSPStatusRequest, the \"responder_id_list\" provides a list of\r\n\"ResponderID\", OCSP responders that the client trusts.", "notes": "ResponderIDs is not defined anywhere within the document.\r\n\r\nQuote of this section in RFC6961 section 2.2 (p.4) seem to have fixed this.", "submit_date": "2016-10-03", "submitter_name": "ResponderIDs type is not defined anywhere.", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4877", "doc-id": "RFC8027", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.13", "orig_text": "(a server today that supports this is alltypes.res.dnssecready.org).", "correct_text": "[No text]", "notes": "The domain name was deleted in 2015... Relying on it was noted in https://www.mail-archive.com/dnsop@ietf.org/msg12129.html\r\n\r\nIf someone wants to reactivate the service, I just reserved the domain. I wlll of course redirect/transfer/whatever it gratis.", "submit_date": "2016-12-04", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4878", "doc-id": "RFC6719", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "MRHOF works with additive metrics along a route, and\r\nthe metrics it uses are determined by the metrics that the RPL\r\nDestination Information Object (DIO) messages advertise.", "correct_text": "MRHOF works with additive metrics along a route, and\r\nthe metrics it uses are determined by the metrics that the RPL\r\nDODAG Information Object (DIO) messages advertise.", "notes": "DIO stands for DODAG Information Object", "submit_date": "2016-12-06", "submitter_name": "Cenk G\u00fcndogan", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4879", "doc-id": "RFC6719", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "RPL advertises metrics in RPL Destination Information\r\nObject (DIO) messages with a Metric Container suboption.", "correct_text": "RPL advertises metrics in RPL DODAG Information\r\nObject (DIO) messages with a Metric Container suboption.", "notes": "DIO stands for DODAG Information Object", "submit_date": "2016-12-06", "submitter_name": "Cenk G\u00fcndogan", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5431", "doc-id": "RFC6154", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2", "orig_text": "An IMAP server that supports this extension MAY include any or all of\r\nthe following attributes in responses to the non-extended IMAP LIST\r\ncommand.", "correct_text": "An IMAP server that supports this extension SHOULD include any or all of\r\nthe following attributes in responses to the non-extended IMAP LIST\r\ncommand.", "notes": "There exist clients which send a non-extended LIST command and will correctly display and interact with mailboxes usefully if their special-uses are given in the response.\r\n\r\nBecause of this, many servers are already replying with the special-use attributes, and there are no known reports of clients being broken by that behaviour.  Because of this, the MAY should be raised to a SHOULD, and server implementations should default to turning this on.\n --VERIFIER NOTES-- \nThe right way to make this change is to revise the document. MAY was intended at the time of publication.\r\n", "submit_date": "2018-07-19", "submitter_name": "Bron Gondwana", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4818", "doc-id": "RFC7915", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "Example contains following IPv4-to-IPv6 translations:\r\n   192.0.2.33   -> 2001:db8:1c0:2:21::\r\n   198.51.100.2 -> 2001:db8:1c6:3364:2::\r\n", "correct_text": "The correct translations are:\r\n   192.0.2.33   -> 2001:db8:1c0:2:2100::\r\n   198.51.100.2 -> 2001:db8:1c6:3364:200::", "notes": "\n --VERIFIER NOTES-- \n   \r\nThis errata should be rejected. RFC7915 is correct as published.\r\n\r\nWhen using 40-bit translation prefixes (as RFC7915 appendix A does),\r\nbits 64 thru 71 is zero while the eight least significant bits of the\r\nIPv4 address is stored in bits 72 thru 79 of the resulting\r\nIPv4-embedded IPv6 address.\r\n\r\nThe errata appears to based on the false assumption that the entire 32\r\nbits of the IPv4 address should be stored in bits 40-71 of the\r\nresulting IPv4-embedded IPv6 address.\r\n\r\nRelevant quotes from RFC6052 section 2.2:\r\n\r\n>    +--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+\r\n>    |PL| 0-------------32--40--48--56--64--72--80--88--96--104---------|\r\n>    +--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+\r\n>    |40|     prefix        |v4(24)     | u |(8)| suffix                |\r\n>    +--+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+\r\n\r\n>   The IPv4 address is encoded following the prefix, most significant\r\n>   bits first.  Depending of the prefix length, the 4 octets of the\r\n>   address may be separated by the reserved octet \"u\", whose 8 bits MUST\r\n>   be set to zero.  In particular:\r\n\r\n>   o  When the prefix is 40 bits long, 24 bits of the IPv4 address are\r\n>      encoded in positions 40 to 63, with the remaining 8 bits in\r\n>      position 72 to 79.\r\n", "submit_date": "2016-10-04", "submitter_name": "Wrong IPv4-to-IPv6 translations", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4819", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "HTTP/1.1 302 Found\r\nLocation: http://example.com/cb#\r\n          access_token=2YotnFZFEjr1zCsicMWpAA\r\n          &state=xyz&token_type=example&expires_in=3600", "correct_text": "HTTP/1.1 302 Found\r\nLocation: http://client.example.com/cb#\r\n          access_token=2YotnFZFEjr1zCsicMWpAA\r\n          &state=xyz&token_type=example&expires_in=3600", "notes": "In the example for section 4.2.1, the request was made with a `redirect_uri` parameter value of `redirect_uri=https%3A%2F%2Fclient%2Eexample%2Ecom%2Fcb`. If I understand correctly, the `client` subdomain should be included in the `Location` header in the response.", "submit_date": "2016-10-05", "submitter_name": "Lars Kemmann", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7090", "doc-id": "RFC5702", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2", "orig_text": "8.2.  Signature Type Downgrade Attacks\r\n\r\n   Since each RRSet MUST be signed with each algorithm present in the\r\n   DNSKEY RRSet at the zone apex (see Section 2.2 of [RFC4035]), a\r\n   malicious party cannot filter out the RSA/SHA-2 RRSIG and force the\r\n   validator to use the RSA/SHA-1 signature if both are present in the\r\n   zone.  This should provide resilience against algorithm downgrade\r\n   attacks, if the validator supports RSA/SHA-2.", "correct_text": "[none]", "notes": "The section is incorrect in its entirety. Although the requirement on signers does exist, there is no related requirement for validators to check that all signature algorithms are present. RFC6840 5.11 (which I do realise is newer than RFC5702) re-states this explicitly, where RFC4035 merely implied this distinction.\r\n", "submit_date": "2022-08-15", "submitter_name": "Peter van Dijk", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2022-08-26 19:34:10"}, {"errata_id": "4892", "doc-id": "RFC4006", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "   | PendingU | CC update answer received     | Terminate   | Idle     |\r\n   |          | with result code equal to     | end user's  |          |\r\n   |          | CREDIT_CONTROL_NOT_APPLICABLE | service     |          |\r\n", "correct_text": "   | PendingU | CC update answer received     | Grant     |   Idle   |\r\n   |          | with result code equal to     | service to|          |\r\n   |          | CREDIT_CONTROL_NOT_APPLICABLE | end user  |          |\r\n", "notes": "Note that in Section 9, It said:\r\n  when the result code in the CCA is DIAMETER_CREDIT_CONTROL_NOT_APPLICABLE 4011, it indicates that the credit-control server determines that the service can be granted to the end user but that no further credit-control is needed for the service (e.g., service is free of charge).\n --VERIFIER NOTES-- \nThis is not an erratum against 4006 but a proposed change in the draft RFC4006bis (https://tools.ietf.org/html/draft-ietf-dime-rfc4006bis-00).\r\n\r\nThe original text quoted below is not in the RFC4006 but in the draft.\r\n\r\nHence this should be discussed on the dime mailing list.\r\n\r\n ", "submit_date": "2016-12-19", "submitter_name": "dengzhenjie", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4893", "doc-id": "RFC1034", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.7.1", "orig_text": "For example, a mailer tying to send mail to Mockapetris@ISI.EDU might\r\nask the resolver for mail information about ISI.EDU, resulting in a\r\nquery for QNAME=ISI.EDU, QTYPE=MX, QCLASS=IN.", "correct_text": "For example, a mailer trying to send mail to Mockapetris@ISI.EDU might\r\nask the resolver for mail information about ISI.EDU, resulting in a\r\nquery for QNAME=ISI.EDU, QTYPE=MX, QCLASS=IN.", "notes": "Trying, not tying.", "submit_date": "2016-12-22", "submitter_name": "anonymous", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4894", "doc-id": "RFC7457", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   STARTTLS and similar mechanisms are vulnerable to downgrade attacks,\r\n   whereby the attacker simply removes the STARTTLS indication from the\r\n   (unprotected) request.  This cannot be mitigated unless HSTS-like\r\n   solutions are added.", "correct_text": "", "notes": "The second paragraph in Section 2.2 (\"STARTTLS Command Injection Attack\") should have been in Section 2.1 (\"SSL Stripping\") because it concerns the attack known as \"SSL Stripping\".\r\n\r\nNote that Section 3.2 of RFC 7525 refers to Section 2.1 (and not 2.2) of this RFC, when speaking about lack of advertise support for TLS.", "submit_date": "2016-12-22", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4895", "doc-id": "RFC7252", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "Note that these rules completely resolve any percent-encoding.", "correct_text": "Note that these rules completely resolve any percent-encoding. Also \r\nnote that a trailing slash character in the <path> component represents\r\na separate, zero-character path segment (see [RFC3986] Section 3.3 \r\nABNF) and therefore it is encoded using a Uri-Path Option of zero\r\nlength.", "notes": "The current specification for decomposing a URI into CoAP Options (Section 6.4) is correct; however the text may still be unclear to implementers who may think that the phrase \"not including the delimiting slash characters\" means simply omitting a trailing slash character in the URI path. This is incorrect. See the discussion outcome in email thread https://www.ietf.org/mail-archive/web/core/current/msg08223.html . Therefore, a minor clarification is proposed in the notes after the parsing steps.", "submit_date": "2016-12-23", "submitter_name": "Esko Dijk", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 08:56:42"}, {"errata_id": "4820", "doc-id": "RFC2863", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.7", "orig_text": "   Network speeds are increasing.  The range of ifSpeed is limited to\r\n   reporting a maximum speed of (2**31)-1 bits/second, or approximately\r\n   2.2Gbs.  SONET defines an OC-48 interface, which is defined at\r\n   operating at 48 times 51 Mbs, which is a speed in excess of 2.4Gbs.\r\n   Thus, ifSpeed is insufficient for the future, and this memo defines\r\n   an additional object: ifHighSpeed.\r\n", "correct_text": "   Network speeds are increasing.  The range of ifSpeed is limited to\r\n   reporting a maximum speed of (2**32)-1 bits/second, or approximately\r\n   4.3Gbs.  SONET defines an OC-48 interface, which is defined at\r\n   operating at 48 times 51 Mbs, which is a speed in excess of 2.4Gbs.\r\n   Thus, ifSpeed is insufficient for the future, and this memo defines\r\n   an additional object: ifHighSpeed.\r\n", "notes": "RFC 3635, in section 3.2.8 quotes RFC2863 as if it were using the correct 4.3Gbps value: \"For these speeds, ifSpeed should report a maximum unsigned 32-bit value of 4,294,967,295 as specified in [RFC2863].\"\r\n\r\n-- Verifier note --\r\n\r\nIndeed https://www.rfc-editor.org/rfc/rfc2578#section-7.1.6 states that Gauge32 has a max of 4.3 Gbps (in this case). Noting that this value renders the justification of ifHighSpeed not relevant but nowadays network speeds are much higher anyway than 4.3 Gbps", "submit_date": "2016-10-05", "submitter_name": "Christopher L Marshall", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:36:51"}, {"errata_id": "4831", "doc-id": "RFC1628", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "       OBJECT     upsOutputSource\r\n       SYNTAX     INTEGER {\r\n           normal(2),\r\n           battery(4)\r\n       }\r\n       DESCRIPTION\r\n               \"Support of the values other(1), none(2), bypass(4),\r\n               booster(6) and reducer(7) is not required.\"", "correct_text": "       OBJECT     upsOutputSource\r\n       SYNTAX     INTEGER {\r\n           normal(3),\r\n           battery(5)\r\n       }\r\n       DESCRIPTION\r\n               \"Support of the values other(1), none(2), bypass(4),\r\n               booster(6) and reducer(7) is not required.\"", "notes": "This error appears 3 separate times, in the MODULE-COMPLIANCE definitions upsSubsetCompliance, upsBasicCompliance, and upsFullCompliance.\r\n\r\nThe wrong numbers are specified with the named values, which must match the OBJECT-TYPE definition of upsOutputSource.", "submit_date": "2016-10-14", "submitter_name": "Sean Van Gorder", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4822", "doc-id": "RFC7931", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.8", "orig_text": "Note that the NFSv4.0 specification requires the server to make \r\nsure that such verifiers are very unlikely to be regenerated.\r\nGiven that it is already highly unlikely that the clientid4 XC is \r\nduplicated by distinct servers, the probability that SCn is \r\nduplicated as well has to be considered vanishingly small.  Note \r\nalso that the callback update procedure can be repeated multiple \r\ntimes to reduce the probability of further spurious matches.", "correct_text": "Although the NFSv4.0 specification requires the server to make \r\nsure that such verifiers are very unlikely to be regenerated, \r\ndifferent servers may use the same approach to the construction \r\nof such verifiers, raising the probability that two distinct \r\nservers might inadvertently assign the same verifier value. The \r\nfact that the servers in question have assigned the same \r\nclientid4 may raise this probability.  In order to guard \r\nagainst the possibility that such assignments might cause two \r\ndistinct servers to be incorrectly considered the same, \r\nthe SETCLIENTID procedure mentioned above needs to be repeated.  \r\nRepeating the procedure once  is sufficient to ensure that the \r\nsuccessive confirm values SCn, SCn'  generated by these repeated \r\nSETCLIENTID operations cannot all collide with a verifier \r\npreviously received by the client when communicating with IPn.", "notes": "It appears that the original text underestimated the probability inadvertant of duplication of clientid4's and verifiers.  Existing servers while conforming to to RFC7530, may generate the same sequence of clientid4's when they all happen to be rebooted at the same time.  The new text deals with this possibility and ensures that two different servers cannot be considered the same.", "submit_date": "2016-10-06", "submitter_name": "David Noveck", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4823", "doc-id": "RFC5890", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3.2.1", "orig_text": "expansion of the A-label form to a U-label may produce strings that are\r\nmuch longer than the normal 63 octet DNS limit (potentially up to 252\r\ncharacters)", "correct_text": "expansion of the A-label form to a U-label may produce strings that are\r\nmuch longer than the normal 63 octet DNS limit (potentially up to 59\r\nUnicode code points or 236 octets)", "notes": "The contents of U-labels are encoded in the up to 59 ASCII characters (see 2.3.2.1 itself)\r\noutput by the Punycode algorithm in their corresponding A-labels.  The Punycode\r\ndecoder (https://tools.ietf.org/html/rfc3492#section-6.2) consumes at least one\r\nof those ASCII characters for each code point inserted into the U-label. An U-label,\r\nthus, can contain at the most 59 Unicode code points.\r\n\r\nSince U-labels are defined (in 2.3.2.1) to be expressed in a standard Unicode Encoding\r\nForm, and UTF-32, UTF-16 and UTF-8 (as revised by RFC3629) all can encode a code\r\npoint in at most 4 octets, 236 octets is an upper bound for an U-label's length.\r\n\r\nI think it should be possible to derive a tighter bound, but its rationale would likely be\r\nless straighforward.\r\n\r\nI imagine the number 252 was originally derived by multiplying 63, the maximum\r\nlength of an A-label (including the \"xn--\" prefix), by 4, the maximum number of\r\noctets needed to represent a code point.", "submit_date": "2016-05-17", "submitter_name": "Juan Altmayer Pizzorno", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7093", "doc-id": "RFC9083", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "The data structure named \"rdapConformance\" is an array of strings,\r\neach providing a hint as to the specifications used in the construction\r\nof the response.", "correct_text": "The data structure named \"rdapConformance\" is an array of strings,\r\neach identifying a registered specification used in the construction\r\nof the response.\r\n", "notes": "The original text uses the word \"hint\", which some people have interpreted to mean \"not normative\" and/or \"can be ignored\". This misinterpretation will likely cause significant misunderstanding of the technical specification and might result in faulty implementations if not corrected. The intention and meaning of this sentence is more clearly specified with the corrected text, noting that the array of string identifiers is directly associated with the set of specifications used to construct an RDAP response.", "submit_date": "2022-08-17", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 21:48:02"}, {"errata_id": "4826", "doc-id": "RFC7635", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.", "orig_text": "8.  STUN Client Behavior\r\n\r\n   o  The client looks for the MESSAGE-INTEGRITY attribute in the\r\n      response.  If MESSAGE-INTEGRITY is absent or the value computed\r\n      for message integrity using mac_key does not match the contents of\r\n      the MESSAGE-INTEGRITY attribute, then the response MUST be\r\n      discarded.\r\n\r\n   o  If the access token expires, then the client MUST obtain a new\r\n      token from the authorization server and use it for new STUN\r\n      requests.", "correct_text": "8.  STUN Client Behavior\r\n\r\n   o  The client looks for the MESSAGE-INTEGRITY attribute in the\r\n      response.  If MESSAGE-INTEGRITY is absent or the value computed\r\n      for message integrity using mac_key does not match the contents of\r\n      the MESSAGE-INTEGRITY attribute, then the response MUST be\r\n      discarded.\r\n\r\n9.  Application (OAuth Client) Behavior\r\n\r\n   o  If the access token expires, then the Application (OAuth client) \r\n      MUST obtain a new token from the authorization server, and update\r\n      STUN client to use it for new STUN requests.\r\n\r\n   o  Application SHOULD pass only a subset of the received OAuth \r\n      parameters to the STUN client. Only parameters SHOULD be passed \r\n      that will be really needed and used by the STUN Client. \r\n      In this way, only the kid, the mac_key, and the access_token\r\n      parameters SHOULD be passed to the STUN client.\r\n      \r\n\r\n...\r\nRenumber the sections\r\n...", "notes": "1. Remove from STUN client behaviour the access_token renewal function, \r\nand move this function up to application level.\r\n2. Pass to STUN only that subset of the OAuth parameters, that will be really used by STUN Client.", "submit_date": "2016-10-10", "submitter_name": "Mih\u00e1ly M\u00e9sz\u00e1ros", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2021-01-14 14:00:38"}, {"errata_id": "4827", "doc-id": "RFC5502", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "   sessioncase-param        = \"sescase\" EQUAL \"orig\" / \"term\"\r\n   registration-state-param = \"regstate\" EQUAL \"unreg\" / \"reg\"\r\n", "correct_text": "   sessioncase-param        = \"sescase\" EQUAL ( \"orig\" / \"term\" )\r\n   registration-state-param = \"regstate\" EQUAL ( \"unreg\" / \"reg\" )\r\n", "notes": "The ABNF as written does not take into account that concatenation binds tighter than alternation.", "submit_date": "2016-10-11", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4828", "doc-id": "RFC7530", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "16.24.4.", "orig_text": "   The arguments contain a cookie value that represents where the\r\n   READDIR should start within the directory.  A value of 0 (zero) for\r\n   the cookie is used to start reading at the beginning of the\r\n   directory.  For subsequent READDIR requests, the client specifies a\r\n   cookie value that is provided by the server in a previous READDIR\r\n   request.", "correct_text": "   The arguments contain a cookie value that represents where the\r\n   READDIR should start within the directory.  A value of 0 (zero) for\r\n   the cookie is used to start reading at the beginning of the\r\n   directory.  For subsequent READDIR requests, the client specifies a\r\n   cookie value that is provided by the server in a previous READDIR\r\n   reply.", "notes": "The new cookie is provided by the server in a reply, not in a request.", "submit_date": "2016-10-11", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4829", "doc-id": "RFC6716", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Coeffieients", "correct_text": "Coefficients", "notes": "Just a small typo in the Table of Contents.", "submit_date": "2016-10-12", "submitter_name": "flacs", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "8290", "doc-id": "RFC7680", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.", "orig_text": "At each of the selected times in this process, we obtain one value of Type-P-One-way-Delay.", "correct_text": "At each of the selected times in this process, we obtain one value of Type-P-One-way-Packet-Loss.", "notes": "It is not generally incorrect that a value of Type-P-One-way-Delay can be obtained at each of the selected times. However, in that case it should also be mentioned in the following sentence (\"The value of the sample is the sequence made up of the resulting <time, loss> pairs\"), that the loss is 0 exactly when Type-P-One-way-Delay is a finite value, and it is 1 exactly when Type-P-One-way-Delay is undefined. But, as this observation is already made for the singleton metric Type-P-One-way-Packet-Loss in section 2.5., it would be easier to directly refer to this singleton metric in section 3.4. (as suggested in this errata).\r\n\r\n== Verifier note\r\n\r\nPer https://mailarchive.ietf.org/arch/msg/ippm/Jh_XqG4eruyNkY3zgG8TOeVxI7E/", "submit_date": "2025-02-09", "submitter_name": "Pablo Navarro", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-28 17:44:38"}, {"errata_id": "4896", "doc-id": "RFC4690", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "[IESG-IDN]          Internet Engineering Steering Group (IESG), \"IESG\r\n                    Statement on IDN\", IESG Statements IDN Statement,\r\n                    February 2003, <http://www.ietf.org/IESG/\r\n                    STATEMENTS/IDNstatement.txt>.\r\n", "correct_text": "[IESG-IDN]          Internet Engineering Steering Group (IESG), \"IESG\r\n                    Statement on IDN\", IESG Statements IDN Statement,\r\n                    February 2003, <https://www.ietf.org/iesg/statement/\r\n                    idn.html>.\r\n\r\n", "notes": "URL of resource has changed. Original gives 'Not found'.\n --VERIFIER NOTES-- \nThe right thing to do here is make sure the original URL redirects to the right place, which is now happening.", "submit_date": "2016-12-27", "submitter_name": "Hugo Salgado", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4897", "doc-id": "RFC7616", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.9.2", "orig_text": "3.9.2.  Example with SHA-512-256, Charset, and Userhash\r\n\r\n   The following example assumes that an access-protected document is\r\n   being requested from the server via a GET request.  The URI for the\r\n   request is \"http://api.example.org/doe.json\".  Both client and server\r\n   know the userhash of the username, support the UTF-8 character\r\n   encoding scheme, and use the SHA-512-256 algorithm.  The username for\r\n   the request is a variation of \"Jason Doe\", where the 'a' actually is\r\n   Unicode code point U+00E4 (\"LATIN SMALL LETTER A WITH DIAERESIS\"),\r\n   and the first 'o' is Unicode code point U+00F8 (\"LATIN SMALL LETTER O\r\n   WITH STROKE\"), leading to the octet sequence using the UTF-8 encoding\r\n   scheme:\r\n\r\n      J  U+00E4 s  U+00F8 n      D  o  e\r\n      4A C3A4   73 C3B8   6E 20 44  6F 65\r\n\r\n   The password is \"Secret, or not?\".\r\n\r\n   The first time the client requests the document, no Authorization\r\n   header field is sent, so the server responds with:\r\n\r\n   HTTP/1.1 401 Unauthorized\r\n   WWW-Authenticate: Digest\r\n       realm=\"api@example.org\",\r\n       qop=\"auth\",\r\n       algorithm=SHA-512-256,\r\n       nonce=\"5TsQWLVdgBdmrQ0XsxbDODV+57QdFR34I9HAbC/RVvkK\",\r\n       opaque=\"HRPCssKJSGjCrkzDg8OhwpzCiGPChXYjwrI2QmXDnsOS\",\r\n       charset=UTF-8,\r\n       userhash=true\r\n\r\n\r\n\r\n\r\n\r\nShekh-Yusef, et al.          Standards Track                   [Page 19]\r\n\f\r\nRFC 7616            HTTP Digest Access Authentication     September 2015\r\n\r\n\r\n   The client can prompt the user for the required credentials and send\r\n   a new request with following Authorization header field:\r\n\r\n   Authorization: Digest\r\n       username=\"488869477bf257147b804c45308cd62ac4e25eb717\r\n          b12b298c79e62dcea254ec\",\r\n       realm=\"api@example.org\",\r\n       uri=\"/doe.json\",\r\n       algorithm=SHA-512-256,\r\n       nonce=\"5TsQWLVdgBdmrQ0XsxbDODV+57QdFR34I9HAbC/RVvkK\",\r\n       nc=00000001,\r\n       cnonce=\"NTg6RKcb9boFIAS3KrFK9BGeh+iDa/sm6jUMp2wds69v\",\r\n       qop=auth,\r\n       response=\"ae66e67d6b427bd3f120414a82e4acff38e8ecd9101d\r\n          6c861229025f607a79dd\",\r\n       opaque=\"HRPCssKJSGjCrkzDg8OhwpzCiGPChXYjwrI2QmXDnsOS\",\r\n       userhash=true\r\n\r\n   If the client cannot provide a hashed username for any reason, the\r\n   client can try a request with this Authorization header field:\r\n\r\n   Authorization: Digest\r\n       username*=UTF-8''J%C3%A4s%C3%B8n%20Doe,\r\n       realm=\"api@example.org\",\r\n       uri=\"/doe.json\",\r\n       algorithm=SHA-512-256,\r\n       nonce=\"5TsQWLVdgBdmrQ0XsxbDODV+57QdFR34I9HAbC/RVvkK\",\r\n       nc=00000001,\r\n       cnonce=\"NTg6RKcb9boFIAS3KrFK9BGeh+iDa/sm6jUMp2wds69v\",\r\n       qop=auth,\r\n       response=\"ae66e67d6b427bd3f120414a82e4acff38e8ecd9101d\r\n          6c861229025f607a79dd\",\r\n       opaque=\"HRPCssKJSGjCrkzDg8OhwpzCiGPChXYjwrI2QmXDnsOS\",\r\n       userhash=false\r\n", "correct_text": "3.9.2.  Example with SHA-512-256, Charset, and Userhash\r\n\r\n   The following example assumes that an access-protected document is\r\n   being requested from the server via a GET request.  The URI for the\r\n   request is \"http://api.example.org/doe.json\".  Both client and server\r\n   know the userhash of the username, support the UTF-8 character\r\n   encoding scheme, and use the SHA-512-256 algorithm.  The username for\r\n   the request is a variation of \"Jason Doe\", where the 'a' actually is\r\n   Unicode code point U+00E4 (\"LATIN SMALL LETTER A WITH DIAERESIS\"),\r\n   and the first 'o' is Unicode code point U+00F8 (\"LATIN SMALL LETTER O\r\n   WITH STROKE\"), leading to the octet sequence using the UTF-8 encoding\r\n   scheme:\r\n\r\n      J  U+00E4 s  U+00F8 n      D  o  e\r\n      4A C3A4   73 C3B8   6E 20 44  6F 65\r\n\r\n   The password is \"Secret, or not?\".\r\n\r\n   The first time the client requests the document, no Authorization\r\n   header field is sent, so the server responds with:\r\n\r\n   HTTP/1.1 401 Unauthorized\r\n   WWW-Authenticate: Digest\r\n       realm=\"api@example.org\",\r\n       qop=\"auth\",\r\n       algorithm=SHA-512-256,\r\n       nonce=\"5TsQWLVdgBdmrQ0XsxbDODV+57QdFR34I9HAbC/RVvkK\",\r\n       opaque=\"HRPCssKJSGjCrkzDg8OhwpzCiGPChXYjwrI2QmXDnsOS\",\r\n       charset=UTF-8,\r\n       userhash=true\r\n\r\n\r\n\r\n\r\n\r\nShekh-Yusef, et al.          Standards Track                   [Page 19]\r\n\f\r\nRFC 7616            HTTP Digest Access Authentication     September 2015\r\n\r\n\r\n   The client can prompt the user for the required credentials and send\r\n   a new request with following Authorization header field:\r\n\r\n   Authorization: Digest\r\n       username=\"793263caabb707a56211940d90411ea4a575adeccb\r\n          7e360aeb624ed06ece9b0b\",\r\n       realm=\"api@example.org\",\r\n       uri=\"/doe.json\",\r\n       algorithm=SHA-512-256,\r\n       nonce=\"5TsQWLVdgBdmrQ0XsxbDODV+57QdFR34I9HAbC/RVvkK\",\r\n       nc=00000001,\r\n       cnonce=\"NTg6RKcb9boFIAS3KrFK9BGeh+iDa/sm6jUMp2wds69v\",\r\n       qop=auth,\r\n       response=\"3798d4131c277846293534c3edc11bd8a5e4cdcbff78\r\n          b05db9d95eeb1cec68a5\",\r\n       opaque=\"HRPCssKJSGjCrkzDg8OhwpzCiGPChXYjwrI2QmXDnsOS\",\r\n       userhash=true\r\n\r\n   If the client cannot provide a hashed username for any reason, the\r\n   client can try a request with this Authorization header field:\r\n\r\n   Authorization: Digest\r\n       username*=UTF-8''J%C3%A4s%C3%B8n%20Doe,\r\n       realm=\"api@example.org\",\r\n       uri=\"/doe.json\",\r\n       algorithm=SHA-512-256,\r\n       nonce=\"5TsQWLVdgBdmrQ0XsxbDODV+57QdFR34I9HAbC/RVvkK\",\r\n       nc=00000001,\r\n       cnonce=\"NTg6RKcb9boFIAS3KrFK9BGeh+iDa/sm6jUMp2wds69v\",\r\n       qop=auth,\r\n       response=\"3798d4131c277846293534c3edc11bd8a5e4cdcbff78\r\n          b05db9d95eeb1cec68a5\",\r\n       opaque=\"HRPCssKJSGjCrkzDg8OhwpzCiGPChXYjwrI2QmXDnsOS\",\r\n       userhash=false\r\n", "notes": "If the SHA512/256 algorithm first mentioned in Section 3.2 is to be implemented as defined in FIPS 180.4 Section 6.7 the values of username and response need to be corrected.\r\n\r\nChanges start at page 19 of the RFC.\r\n\r\nI created this as technical errata since the current values given in the example are for a SHA512/256 algorithm implemented as described in Section 7 of both FIPS 180-3 and FIPS 180-4", "submit_date": "2016-12-29", "submitter_name": "Chaim Geretz", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4898", "doc-id": "RFC3515", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "Refer-To: <sip:bob@biloxi.example.net?Accept-Contact=sip:bobsdesk.\r\n       biloxi.example.net&Call-ID%3D55432%40alicepc.atlanta.example.com>", "correct_text": "Refer-To: <sip:bob@biloxi.example.net?Accept-Contact=sip:bobsdesk.\r\n       biloxi.example.net&Call-ID=55432%40alicepc.atlanta.example.com>", "notes": "The \"=\" between the header name (hname) and the value (hvalue) in the headers component of the URI does not have to be in the percent-coded format as part of the ABNF of the headers component defined in RFC3261:\r\nsip:user:password@host:port;uri-parameters?headers\r\nheaders         =  \"?\" header *( \"&\" header )\r\nheader          =  hname \"=\" hvalue\r\nhname           =  1*( hnv-unreserved / unreserved / escaped )\r\nhvalue          =  *( hnv-unreserved / unreserved / escaped )\r\nhnv-unreserved  =  \"[\" / \"]\" / \"/\" / \"?\" / \":\" / \"+\" / \"$\"", "submit_date": "2017-01-03", "submitter_name": "Marianne MOHALI", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:17:48"}, {"errata_id": "4899", "doc-id": "RFC3062", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   PasswdModifyRequestValue ::= SEQUENCE {\r\n     userIdentity    [0]  OCTET STRING OPTIONAL\r\n     oldPasswd       [1]  OCTET STRING OPTIONAL\r\n     newPasswd       [2]  OCTET STRING OPTIONAL }\r\n", "correct_text": "   PasswdModifyRequestValue ::= SEQUENCE {\r\n     userIdentity    [0]  OCTET STRING OPTIONAL,\r\n     oldPasswd       [1]  OCTET STRING OPTIONAL,\r\n     newPasswd       [2]  OCTET STRING OPTIONAL }\r\n", "notes": "The missing commas are probably just a typo in the formal specifications, but it is pleasant if they are acceptable to ASN.1 compilers.", "submit_date": "2017-01-09", "submitter_name": "Rick van Rein", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:08:13"}, {"errata_id": "4830", "doc-id": "RFC7854", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.9", "orig_text": "Peer Down Notification\r\n\r\n   This message is used to indicate that a peering session was\r\n   terminated.\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+\r\n     |    Reason     |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |            Data (present if Reason = 1, 2 or 3)               |\r\n     ~                                                               ~\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "Peer Down Notification\r\n\r\n   This message is used to indicate that a peering session was\r\n   terminated. Following the common BMP header and per-peer header is \r\n   the following:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+\r\n     |    Reason     |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |            Data (present if Reason = 1, 2 or 3)               |\r\n     ~                                                               ~\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "What: \r\n\r\nFor Peer Down Notification: To the programmer implementing the RFC, it is not clear if the Peer Down message consists of per peer header", "submit_date": "2016-10-12", "submitter_name": "Suhas Anand", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4832", "doc-id": "RFC7292", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "B.4", "orig_text": "pbeWithSHAAnd128BitRC4           OBJECT IDENTIFIER ::= {pkcs-12PbeIds 1}\r\npbeWithSHAAnd40BitRC4            OBJECT IDENTIFIER ::= {pkcs-12PbeIds 2}\r\npbeWithSHAAnd3-KeyTripleDES-CBC  OBJECT IDENTIFIER ::= {pkcs-12PbeIds 3}\r\npbeWithSHAAnd2-KeyTripleDES-CBC  OBJECT IDENTIFIER ::= {pkcs-12PbeIds 4}\r\npbeWithSHAAnd128BitRC2-CBC       OBJECT IDENTIFIER ::= {pkcs-12PbeIds 5}\r\npbewithSHAAnd40BitRC2-CBC        OBJECT IDENTIFIER ::= {pkcs-12PbeIds 6}", "correct_text": "pbeWithSHAAnd128BitRC4           OBJECT IDENTIFIER ::= {pkcs-12PbeIds 1}\r\npbeWithSHAAnd40BitRC4            OBJECT IDENTIFIER ::= {pkcs-12PbeIds 2}\r\npbeWithSHAAnd3-KeyTripleDES-CBC  OBJECT IDENTIFIER ::= {pkcs-12PbeIds 3}\r\npbeWithSHAAnd2-KeyTripleDES-CBC  OBJECT IDENTIFIER ::= {pkcs-12PbeIds 4}\r\npbeWithSHAAnd128BitRC2-CBC       OBJECT IDENTIFIER ::= {pkcs-12PbeIds 5}\r\npbeWithSHAAnd40BitRC2-CBC        OBJECT IDENTIFIER ::= {pkcs-12PbeIds 6}", "notes": "All the other OID names have a camelcase With. The last one, however (pbewithSHAAnd40BitRC2-CBC), has a lowercase with.", "submit_date": "2016-10-15", "submitter_name": "Jim Wigginton", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4833", "doc-id": "RFC5465", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2, 7", "orig_text": "Section 5.2 paragraph 4:\r\n   ...  The FETCH response(s) MUST follow any\r\n   ESEARCH ADDTO responses.\r\n\r\nSection 7 paragraph 2:\r\n   Note that the EXISTS response MUST precede any FETCH responses, and\r\n   together they MUST precede the ESEARCH response.", "correct_text": "", "notes": "As the RFC is internally inconsistent on this point, servers can have either behavior. I know of at least one deployed implementation that follows the MUST in section 7 rather than the one in section 5.2.\r\n\r\nAt this point I can't suggest specific corrected text, so this is a hold-for-document-update issue.", "submit_date": "2016-10-17", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4834", "doc-id": "RFC4762", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "For\r\n   example, if a customer site A, is shut down, eventually the other PEs\r\n   should unlearn A's MAC address.", "correct_text": "For example, if a customer site is shut down, eventually the other PEs\r\nshould unlearn the MAC address(es) of this site.", "notes": "Prakash noted the customer site name is not mentioned in example. Suggested naming the site (A1) gives clear info than just stating \"customer site A\".\r\nAfter discussion with the Chairs and Authors, the above text was agreed.", "submit_date": "2016-10-18", "submitter_name": "Prakash Ragunathan", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4838", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   Parameters are in the form of a name or name=value pair.\r\n\r\n     transfer-parameter = token BWS \"=\" BWS ( token / quoted-string )", "correct_text": "   Parameters are in the form of a name or name=value pair.\r\n\r\n     transfer-parameter = token \r\n                        / token BWS \"=\" BWS ( token / quoted-string )", "notes": "The form of a name cannot be represented with the original ABNF.\n --VERIFIER NOTES-- \nRejected as per the mailing list discussion:\r\n\r\n<https://www.w3.org/Search/Mail/Public/search?type-index=ietf-http-wg&index-type=t&keywords=4838&search=Search>", "submit_date": "2016-10-22", "submitter_name": "Etan Kissling", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7703", "doc-id": "RFC7854", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "      *  The L flag, if set to 1, indicates that the message reflects\r\n         the post-policy Adj-RIB-In (i.e., its path attributes reflect\r\n         the application of inbound policy).  It is set to 0 if the\r\n         message reflects the pre-policy Adj-RIB-In.  Locally sourced\r\n         routes also carry an L flag of 1.  See Section 5 for further\r\n         detail.  This flag has no significance when used with route\r\n         mirroring messages (Section 4.7).", "correct_text": "      *  The L flag, if set to 1, indicates that the message reflects\r\n         the post-policy Adj-RIB-In (i.e., its path attributes reflect\r\n         the application of inbound policy).  It is set to 0 if the\r\n         message reflects the pre-policy Adj-RIB-In.  Locally sourced\r\n         routes also carry an L flag of 1.  See Section 5 for further\r\n         detail.  This flag has significance only when used with Route\r\n         Monitoring messages.", "notes": "The L flag is used to indicate whether the route monitoring update reflects Adj-RIB-In pre-policy or post-policy (RFC 7854), or Adj-RIB-Out pre-policy or post-policy (RFC 8671). It does not apply to any message other than the Route Monitoring message.\r\n", "submit_date": "2023-11-16", "submitter_name": "Dhananjay S. Patki", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2023-12-11 16:50:18"}, {"errata_id": "4960", "doc-id": "RFC4086", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "   If the adversary can command a highly parallel processor or a large\r\n   network of work stations, 10^11 cycles per second is probably a\r\n   minimum assumption today.  Looking forward a few years, there should\r\n   be at least an order of magnitude improvement.  Thus, it is\r\n   reasonable to assume that 10^10 keys could be checked per second, or\r\n   3.6*10^12 per hour or 6*10^14 per week, or 2.4*10^15 per month. ", "correct_text": "   If the adversary can command a highly parallel processor or a large\r\n   network of work stations, 10^11 cycles per second is probably a\r\n   minimum assumption today.  Looking forward a few years, there should\r\n   be at least an order of magnitude improvement.  Thus, it is\r\n   reasonable to assume that 10^10 keys could be checked per second, or\r\n   3.6*10^13 per hour or 8.6*10^14 per week, or 2.6*10^16 per month. ", "notes": "Incorrect values.\r\n\r\nAD Note: The proposed corrected text is also incorrect though. The number 8.6*10^14 is per day, not per week. The per week number is 6.48 * 10^15. The proposed updated numbers for per hour and per month are a correct update. So the proposed final text should be:\r\n\r\nor  3.6*10^13 per hour or 6.48 * 10^15 per week, or 2.6*10^16 per month. ", "submit_date": "2017-03-09", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-08-03 00:53:45"}, {"errata_id": "4844", "doc-id": "RFC6781", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "   initial:  Initial version of the zone.  The parental DS points to\r\n      DNSKEY_K_1.  Before the rollover starts, the child will have to\r\n      verify what the TTL is of the DS RR that points to DNSKEY_K_1 --\r\n      it is needed during the rollover, and we refer to the value as\r\n      TTL_DS.\r\n\r\n   new DNSKEY:  During the \"new DNSKEY\" phase, the zone administrator\r\n      generates a second KSK, DNSKEY_K_2.  The key is provided to the\r\n      parent, and the child will have to wait until a new DS RR has been\r\n      generated that points to DNSKEY_K_2.  After that DS RR has been\r\n      published on all servers authoritative for the parent's zone, the\r\n      zone administrator has to wait at least TTL_DS to make sure that\r\n      the old DS RR has expired from caches.\r\n\r\n   DS change:  The parent replaces DS_K_1 with DS_K_2.", "correct_text": "initial:  Initial version of the zone.  The parental DS points to\r\n    DNSKEY_K_1.  Before the rollover starts, the child will have to\r\n    verify what the TTL is of the DS RR that points to DNSKEY_K_1 --\r\n    it is needed during the rollover, and we refer to the value as\r\n    TTL_DS.  Also, we refer to the TTL value of the DNSKEY_K_1 RR as\r\n    TTL_DNSKEY.\r\n\r\nnew DNSKEY:  During the \"new DNSKEY\" phase, the zone administrator\r\n    generates a second KSK, DNSKEY_K_2.  The new DNSKEY RRSet that\r\n    includes DNSKEY_K_2 is published at the child.  After waiting at\r\n    least TTL_DNSKEY, DNSKEY_K_2 (or the DS RR generated from it, that\r\n    is DS_K_2) is provided to the parent.\r\n\r\nDS change:  The parent replaces DS_K_1 with DS_K_2.  After that DS RR\r\n    has been published on all servers authoritative for the parent's\r\n    zone, the zone administrator has to wait at least TTL_DS to make\r\n    sure that the old DS RR has expired from caches.", "notes": "I just corrected what is fundamentally flawed. RFC 7583 section 3.3.1 provides a much detailed explanation of the process.", "submit_date": "2016-10-26", "submitter_name": "Marcos Sanz", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4845", "doc-id": "RFC5961", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   1) If the RST bit is set and the sequence number is outside the\r\n      current receive window (SEG.SEQ <= RCV.NXT || SEG.SEQ > RCV.NXT+\r\n      RCV.WND), silently drop the segment.\r\n", "correct_text": "   1) If the RST bit is set and the sequence number is outside the\r\n      current receive window (SEG.SEQ < RCV.NXT || SEG.SEQ >= RCV.NXT+\r\n      RCV.WND), silently drop the segment.\r\n", "notes": "The condition should be the opposite of (RCV.NXT <= SEG.SEQ < RCV.NXT+RCV.WND), which is stated in the second item of the enumeration.", "submit_date": "2016-10-27", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4846", "doc-id": "RFC5754", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "section 3.2", "orig_text": "   The SMIMECapabilities attribute value indicates support for one of\r\n|  the DSA signature algorithms in a SEQUENCE with the capabilityID\r\n   field containing the object identifier sha*WithRSAEncryption (where *\r\n   is 224, 256, 384, or 512) with NULL parameters.  ", "correct_text": "   The SMIMECapabilities attribute value indicates support for one of\r\n|  the RSA signature algorithms in a SEQUENCE with the capabilityID\r\n   field containing the object identifier sha*WithRSAEncryption (where *\r\n   is 224, 256, 384, or 512) with NULL parameters.  ", "notes": "The section 3.2 is related to RSA.", "submit_date": "2016-10-28", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 14:31:28"}, {"errata_id": "4847", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "    id-qt OBJECT IDENTIFIER ::= { id-pkix 2 }\r\n            -- arc for policy qualifier types\r\n    id-kp OBJECT IDENTIFIER ::= { id-pkix 3 }\r\n|           -- arc for extended key purpose OIDS\r\n    id-ad OBJECT IDENTIFIER ::= { id-pkix 48 }\r\n            -- arc for access descriptors", "correct_text": "    id-qt OBJECT IDENTIFIER ::= { id-pkix 2 }\r\n            -- arc for policy qualifier types\r\n    id-kp OBJECT IDENTIFIER ::= { id-pkix 3 }\r\n|           -- arc for extended key purpose OIDs\r\n    id-ad OBJECT IDENTIFIER ::= { id-pkix 48 }\r\n            -- arc for access descriptors", "notes": "\"Object Identifiers\" are abbreviated as \"OIDs\" and not as \"OIDS\".", "submit_date": "2016-10-30", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4852", "doc-id": "RFC1939", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3 and app. A", "orig_text": "Section 3 :\r\n\r\nResponses may be up to 512 characters\r\nlong, including the terminating CRLF.\r\n\r\nAppendix A :\r\n\r\n- specifies a status indicator length limitation\r\n  of 512 octets, including the CRLF.", "correct_text": "(See 'Notes')", "notes": "What is written in appendix A does not match with what is written in section 3.\r\nI guess both are wrong. The length of 512 may not concern the length of an entire response, and also not the length of only the status indicator, but the length of the first line returned as an answer by the server, which contains the status indicator, but sometimes some other text too (and, of course, is terminated by CRLF).\r\nAs I'm not sure that my guess is correct, and also because I'm not very comfortable with the English language, I am not able to propose a corrected text.\n --VERIFIER NOTES-- \n   \r\nThe text is correct as written, in that a single-line response is limited to 512 octets (which is also 512 characters in US-ASCII).  The subsequent paragraph in Section 3 explains multi-line responses.", "submit_date": "2016-11-02", "submitter_name": "Claude SIMON", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4849", "doc-id": "RFC5531", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix C says:", "orig_text": "   RPCSEC_GSS      6               /* GSS-based RPC security for auth,\r\n                                      integrity and privacy, RPC 5403 */", "correct_text": "   RPCSEC_GSS      6               /* GSS-based RPC security for auth,\r\n                                      integrity and privacy, RFC 5403 */", "notes": "\"RPC 5403\" should be \"RFC 5403\".", "submit_date": "2016-10-31", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4854", "doc-id": "RFC1459", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "To reply to a NAMES message, a reply pair consisting\r\nof RPL_NAMREPLY and RPL_ENDOFNAMES is sent by the\r\nserver back to the client.  If there is no channel\r\nfound as in the query, then only RPL_ENDOFNAMES is\r\nreturned.  The exception to this is when a NAMES\r\nmessage is sent with no parameters and all visible\r\nchannels and contents are sent back in a series of\r\nRPL_NAMEREPLY messages with a RPL_ENDOFNAMES to mark\r\nthe end.", "correct_text": "To reply to a NAMES message, a reply pair consisting\r\nof RPL_NAMREPLY and RPL_ENDOFNAMES is sent by the\r\nserver back to the client.  If there is no channel\r\nfound as in the query, then only RPL_ENDOFNAMES is\r\nreturned.  The exception to this is when a NAMES\r\nmessage is sent with no parameters and all visible\r\nchannels and contents are sent back in a series of\r\nRPL_NAMREPLY messages with a RPL_ENDOFNAMES to mark\r\nthe end.", "notes": "RPL_NAMEREPLY does not exist anywhere else in the document, while RPL_NAMREPLY is used 4 times. This is likely a typo.\r\n\r\n----- Verifier Notes -----\r\nOne of them is clearly a typo, but a little research shows that implementations differ as to which one they use.  Best that this be revisited in the unlikely event that the spec is ever revised.", "submit_date": "2016-11-04", "submitter_name": "Chase Smith", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4850", "doc-id": "RFC7749", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.", "orig_text": "A.4.  The \"consensus\" Attribute\r\n\r\n   For some of the publication streams (see Appendix A.3), the \"Status\r\n   of This Memo\" section depends on whether there was a consensus to\r\n   publish (again, see Section 3.2.2 of [RFC5741]).\r\n\r\n   The \"consensus\" attribute (\"yes\"/\"no\", defaulting to \"yes\") can be\r\n   used to supply this information.  The effect for the various\r\n   streams is:\r\n\r\n   o  \"independent\" and \"IAB\": none.\r\n\r\n   o  \"IETF\": mention that there was an IETF consensus.\r\n\r\n   o  \"IRTF\": mention that there was a research group consensus (where\r\n      the name of the research group is extracted from the <workgroup>\r\n      element).", "correct_text": "A.4.  The \"consensus\" Attribute\r\n\r\n   For some of the publication streams (see Appendix A.3), the \"Status\r\n   of This Memo\" section depends on whether there was a consensus to\r\n   publish (again, see Section 3.2.2 of [RFC5741]).\r\n\r\n   The \"consensus\" attribute (\"yes\"/\"no\", defaulting to \"yes\") can be\r\n   used to supply this information.  The effect for the various\r\n   streams is:\r\n\r\n   o  \"independent\": none.\r\n\r\n   o  \"IAB\": mention that there was an IAB consensus.\r\n\r\n   o  \"IETF\": mention that there was an IETF consensus.\r\n\r\n   o  \"IRTF\": mention that there was a research group consensus (where\r\n      the name of the research group is extracted from the <workgroup>\r\n      element).", "notes": "IAB documents may or may not include a consensus statement. See https://www.rfc-editor.org/materials/status-memos.txt, numbers 9-12.", "submit_date": "2016-10-31", "submitter_name": "Heather Flanagan", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4851", "doc-id": "RFC6192", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2", "orig_text": "   term ebgp-reply {\r\n                   from {\r\n                       source-prefix-list {\r\n                           EBGP-NEIGHBORS;\r\n                       }\r\n                       protocol tcp;\r\n                       port bgp;\r\n                   }\r\n                   then accept;\r\n               }", "correct_text": "   term ebgp-reply {\r\n                   from {\r\n                       source-prefix-list {\r\n                           EBGP-NEIGHBORS;\r\n                       }\r\n                       protocol tcp;\r\n                       tcp-established;\r\n                       source-port bgp;\r\n                   }\r\n                   then accept;\r\n               }\r\n\r\n", "notes": "There is a security question in that firewall relating to bgp reply.\r\nAny neighbor that fakes a tcp source port to 179 can access any router port, for example, ssh.\r\nNeed to add the line tcp-established. Would also be better to add source-port bgp since bgp protocol uses the 179 port to destination. Add the fix to all bgps, including ipv6.", "submit_date": "2016-11-01", "submitter_name": "Hugo Leonardo Canalli", "verifier_id": "", "verifier_name": "joel jaeggli", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7094", "doc-id": "RFC9083", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "If The Registry of the Moon desires to express information not found\r\nin this specification, it might select \"lunarNIC\" as its identifying\r\nprefix and insert, as an example, the member named\r\n\"lunarNIC_beforeOneSmallStep\" to signify registrations occurring\r\nbefore the first moon landing and the member named\r\n\"lunarNIC_harshMistressNotes\" that contains other descriptive text.\r\n\r\nConsider the following JSON response with JSON names, some of which\r\nshould be ignored by clients without knowledge of their meaning.\r\n\r\n{\r\n  \"handle\" : \"ABC123\",\r\n  \"lunarNIC_beforeOneSmallStep\" : \"TRUE THAT!\",\r\n  \"remarks\" :\r\n  [\r\n    {\r\n      \"description\" :\r\n      [\r\n        \"She sells sea shells down by the sea shore.\",\r\n        \"Originally written by Terry Sullivan.\"\r\n      ]\r\n    }\r\n  ],\r\n  \"lunarNIC_harshMistressNotes\" :\r\n  [\r\n    \"In space,\",\r\n    \"nobody can hear you scream.\"\r\n  ]\r\n}\r\nFigure 2", "correct_text": "If The Registry of the Moon desires to express information not found\r\nin this specification, it might select \"lunarNIC_level_0\" as its\r\nidentifying prefix and insert, as an example, the member named\r\n\"lunarNIC_level_0_beforeOneSmallStep\" to signify registrations occurring\r\nbefore the first moon landing and the member named\r\n\"lunarNIC_level_0_harshMistressNotes\" that contains other descriptive\r\ntext.\r\n\r\nConsider the following JSON response with JSON names, some of which\r\nshould be ignored by clients without knowledge of their meaning.\r\n\r\n{\r\n  \"handle\" : \"ABC123\",\r\n  \"lunarNIC_level_0_beforeOneSmallStep\" : \"TRUE THAT!\",\r\n  \"remarks\" :\r\n  [\r\n    {\r\n      \"description\" :\r\n      [\r\n        \"She sells sea shells down by the sea shore.\",\r\n        \"Originally written by Terry Sullivan.\"\r\n      ]\r\n    }\r\n  ],\r\n  \"lunarNIC_level_0_harshMistressNotes\" :\r\n  [\r\n    \"In space,\",\r\n    \"nobody can hear you scream.\"\r\n  ]\r\n}\r\nFigure 2", "notes": "The original text uses the string identifier \"lunarNIC\" as the prefix for an example extension. This is inconsistent with the example given in Section 4.1, where \"lunarNIC_level_0\" is used as an example of a registered identifier for an RDAP extension. This inconsistency can lead implementers to believe that the registered identifier and the extension prefix can be inconsistent, when the intent of the specification is that they should be consistent. This inconsistency can cause significant misunderstanding of the technical specification and might result in faulty implementations if not corrected. Changing the examples in Section 2.1 aligns the text with the example in Section 4.1, demonstrating that the extension prefix and the registered identifier should be one and the same.", "submit_date": "2022-08-17", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2022-11-29 04:17:19"}, {"errata_id": "7095", "doc-id": "RFC7748", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A says:", "orig_text": "This section specifies the procedure that was used to generate the\r\nabove curves; specifically, it defines how to generate the parameter\r\nA of the Montgomery curve y^2 = x^3 + A*x^2 + x.\r\n", "correct_text": "This section specifies the procedure that was used to generate the\r\nabove curves; specifically, it defines how to generate the parameter\r\nA of the Montgomery curve v^2 = u^3 + A*u^2 + u.\r\n", "notes": "For consistency with the other parts of the document (e.g. Section 3), use the variables u and v in the Montgomery curve equation.", "submit_date": "2022-08-18", "submitter_name": "James Muir", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-23 05:17:49"}, {"errata_id": "7096", "doc-id": "RFC7748", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "# section A.1 sage code:\r\n\r\n       for A in xrange(3, int(1e9)):\r\n           if (A-2) % 4 != 0:\r\n             continue\r\n\r\n# section A.3 sage code:\r\n\r\n       for uInt in range(1, 1e3):\r\n         u = F(uInt)", "correct_text": "# section A.1 sage code:\r\n\r\n       for A in xsrange(3, int(1e9)):\r\n           if (A-2) % 4 != 0:\r\n             continue\r\n\r\n# section A.3 sage code:\r\n\r\n       for uInt in xsrange(1, int(1e3)):\r\n         u = F(uInt)", "notes": "\"xrange\" is not recognized by Sage with python 3, so the script from section A.1 fails with a syntax error (using \"xrange\" likely worked fine for Sage with python 2).  The suggested changes in A.3 are just for consistency.\r\n\r\nHeld for Document Update. Errata 7096 updates Sage code in Appendix A to make it compatible with Python 3 by replacing 'xrange' with 'xsrange'. This change addresses a compatibility issue for modern implementations but does not affect the cryptographic security or functionality of the protocol, making it low-priority and suitable for future document updates. - CFRG co-chair", "submit_date": "2022-08-18", "submitter_name": "James Muir", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:31:17"}, {"errata_id": "7683", "doc-id": "RFC9135", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.", "orig_text": "  2.  However, if PE2 is configured for asymmetric IRB mode, PE2 will\r\n       advertise TS4 MAC/IP information in a MAC/IP Advertisement route\r\n       with a zero Label2 field and no Route Target identifying IP-VRF1.\r\n       In this case, PE2 will install TS4 information in its ARP table\r\n       and BT1.  When a packet from TS2 to TS4 arrives at PE1, a longest\r\n       prefix match on IP-VRF1's route table will yield the local IRB\r\n       interface to BT1, where a subsequent ARP and bridge table lookup\r\n       will provide the information for an asymmetric forwarding mode to\r\n       PE2.", "correct_text": "  2.  However, if PE2 is configured for asymmetric IRB mode, PE2 will\r\n       advertise TS4 MAC/IP information in a MAC/IP Advertisement route\r\n       with a zero Label2 field and no Route Target identifying IP-VRF1.\r\n       In this case, PE1 will install TS4 information in its ARP table\r\n       and BT1.  When a packet from TS2 to TS4 arrives at PE1, a longest\r\n       prefix match on IP-VRF1's route table will yield the local IRB\r\n       interface to BT1, where a subsequent ARP and bridge table lookup\r\n       will provide the information for an asymmetric forwarding mode to\r\n       PE2.", "notes": "PE1 will use ARP table for forwarding traffic to PE2 - seems like typo", "submit_date": "2023-10-19", "submitter_name": "Denis Vrkic", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-02-09 21:23:24"}, {"errata_id": "4864", "doc-id": "RFC6106", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.", "orig_text": "Length:\r\n8-bit unsigned integer.  The length of the option\r\n(including the Type and Length fields) is in units of\r\n8 octets.  The minimum value is 2 if at least one\r\ndomain name is contained in the option.  The Length\r\nfield is set to a multiple of 8 octets to accommodate\r\nall the domain names in the field of Domain Names of\r\nDNS Search List.", "correct_text": "Length:\r\n8-bit unsigned integer.  The length of the option\r\n(including the Type and Length fields) is in units of\r\n8 octets.  The minimum value is 2 if at least one\r\ndomain name is contained in the option.  The Length\r\nfield is set to a multiple of 8 octets to accommodate\r\nall the domain names in the field of Domain Names of\r\nDNS Search List.\r\n\r\nThe exact maximum value supported by a given network\r\nis dictated by the MTU of the link, because the\r\nRouter Advertisement MUST NOT be fragmented as per\r\nRFC6980#section5. The lowest possible MTU of 1280\r\nresults in a lower bound for the maximum value of 148\r\n(representing 1192 octets).", "notes": "While the submitter's point is valid, there is not much that can be done on a per-option basis. Even if this option is sized so that it does not result in the fragmentation of the RA message, there might be other options that do. That is why the restriction for non-fragmentation is specified in a separate document and not in each document that defines an ND option.\n --VERIFIER NOTES-- \nWhile the submitter's point is valid, there is not much that can be done on a per-option basis. Even if this option is sized so that it does not result in the fragmentation of the RA message, there might be other options that do. That is why the restriction for non-fragmentation is specified in a separate document and not in each document that defines an ND option.\r\n", "submit_date": "2016-11-14", "submitter_name": "Robin Johnson", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4865", "doc-id": "RFC7598", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "dmr-prefix6-len: 8 bits long; expresses the bitmask length of the \r\nIPv6 prefix specified in the dmr-ipv6-prefix field.  Allowed\r\nvalues range from 0 to 128.", "correct_text": "dmr-prefix6-len: 8 bits long; expresses the bitmask length of the \r\nIPv6 prefix specified in the dmr-ipv6-prefix field.  Allowed\r\nvalues range from 0 to 96.", "notes": "This field is used to provision the default mapping rule prefix length, which is defined in section 5.1 of RFC7599:\r\nThe DMR IPv6 prefix length SHOULD be 64 bits long by default and in any case MUST NOT exceed 96 bits.", "submit_date": "2016-11-15", "submitter_name": "Ian Farrer", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4866", "doc-id": "RFC6130", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "   o  For each MANET interface, within every time interval equal to the\r\n      corresponding REFRESH_INTERVAL, sent HELLO messages MUST\r\n      collectively include all of the relevant information in the\r\n      corresponding Link Set and the Neighbor Information Base.  Note\r\n      that when determining whether to include information in a HELLO\r\n      message, the sender MUST consider all times up to the latest time\r\n      when it may send its next HELLO message on this MANET interface.\r\n\r\n   o  For each MANET interface, within every time interval equal to the\r\n      corresponding REFRESH_INTERVAL, sent HELLO messages MUST\r\n      collectively include all of the relevant information in the\r\n      corresponding Link Set and the Neighbor Information Base.\r\n", "correct_text": "   o  For each MANET interface, within every time interval equal to the\r\n      corresponding REFRESH_INTERVAL, sent HELLO messages MUST\r\n      collectively include all of the relevant information in the\r\n      corresponding Link Set and the Neighbor Information Base.  Note\r\n      that when determining whether to include information in a HELLO\r\n      message, the sender MUST consider all times up to the latest time\r\n      when it may send its next HELLO message on this MANET interface.\r\n\r\n", "notes": "The second statement is already contained in the first one.\r\n\r\n=====\r\nFrom Christopher Dearlove (author):\r\n\r\nit is the other paragraph that should be deleted. Because the paragraph following the two quoted paragraphs, which I copy here:\r\n\r\n   o  When determining whether to include a given piece of neighbor\r\n      information in a HELLO message, it is not sufficient to consider\r\n      whether that information has been sent in the interval of length\r\n      REFRESH_INTERVAL up to the current time.  Instead, the router MUST\r\n      consider the interval of length REFRESH_INTERVAL that will end at\r\n      the latest possible time at which the next HELLO message will be\r\n      sent on this MANET interface.  (Normally, this will be\r\n      HELLO_INTERVAL past the current time, but MAY be earlier if this\r\n      router elects to divide its neighbor information among more than\r\n      one HELLO message in order to reduce the size of its HELLO\r\n      messages.)  All neighbor information MUST be sent in this\r\n      interval, i.e., the router MUST ensure that this HELLO message\r\n      includes all neighbor information that has not already been\r\n      included in any HELLO messages sent since the start of this\r\n      interval (normally, the current time - (REFRESH_INTERVAL -\r\n      HELLO_INTERVAL)).\r\n\r\ncontains the additional information in the longer paragraph, expanded to explain what it means.\r\n\r\nThus the resolution is to delete the first paragraph:\r\n\r\nOLD:\r\n\r\n   o  For each MANET interface, within every time interval equal to the\r\n      corresponding REFRESH_INTERVAL, sent HELLO messages MUST\r\n      collectively include all of the relevant information in the\r\n      corresponding Link Set and the Neighbor Information Base.  Note\r\n      that when determining whether to include information in a HELLO\r\n      message, the sender MUST consider all times up to the latest time\r\n      when it may send its next HELLO message on this MANET interface.\r\n\r\nNEW:\r\n", "submit_date": "2016-11-15", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4867", "doc-id": "RFC6006", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "           <PCReq Message>::= <Common Header>\r\n                                 <request>\r\n        where:\r\n                <request>::= <RP>\r\n                                <end-point-rro-pair-list>\r\n                                [<OF>]\r\n                                [<LSPA>]\r\n                                [<BANDWIDTH>]\r\n                                [<metric-list>]\r\n                                [<IRO>]\r\n                                [<LOAD-BALANCING>]\r\n\r\n        where:\r\n\r\n                <end-point-rro-pair-list>::=\r\n                                   <END-POINTS>[<RRO-List>][<BANDWIDTH>]\r\n                                   [<end-point-rro-pair-list>]\r\n\r\n                <RRO-List>::=<RRO>[<BANDWIDTH>][<RRO-List>]\r\n                <metric-list>::=<METRIC>[<metric-list>]", "correct_text": "           <PCReq Message>::= <Common Header>\r\n                              [<svec-list>]\r\n                              <request-list>\r\n\r\n           where:\r\n\r\n                <svec-list>::=<SVEC>\r\n                              [<OF>]\r\n                              [<metric-list>]\r\n                              [<svec-list>]\r\n\r\n                <request-list>::=<request>[<request-list>]\r\n\r\n                <request>::= <RP>\r\n                             <end-point-rro-pair-list>\r\n                             [<OF>]\r\n                             [<LSPA>]\r\n                             [<BANDWIDTH>]\r\n                             [<metric-list>]\r\n                             [<IRO>|<BNC>]\r\n                             [<LOAD-BALANCING>]\r\n\r\n           where:\r\n\r\n                <end-point-rro-pair-list>::=\r\n                                   <END-POINTS>[<RRO-List>[<BANDWIDTH>]]\r\n                                   [<end-point-rro-pair-list>]\r\n                <RRO-List>::=(<RRO>|<SRRO>)[<RRO-List>]\r\n                <metric-list>::=<METRIC>[<metric-list>]", "notes": "o Update the Routing Backus-Naur Form (RBNF) [RFC5511] for Request\r\n   message format: \r\n\r\n      * Update the request message to allows for the bundling of\r\n      multiple path computation requests within a single Path\r\n      Computation Request (PCReq) message.\r\n\r\n      * Add <svec-list> in PCReq message. This object was  missed in\r\n      [RFC6006].\r\n\r\n      * Add BNC object in PCReq message. This object is required to\r\n      support P2MP. It shares the same format as Include Route Object\r\n      (IRO) but it is a different object. \r\n \r\n      * Update the <RRO-List> format to also allow Secondary Record\r\n      Route object (SRRO). This object was  missed in [RFC6006].\r\n\r\n      * Removed the BANDWIDTH Object followed by Record Route Object\r\n      (RRO) from <RRO-List>. As BANDWIDTH object doesn't need to follow\r\n      for each RRO in the <RRO-List>, there already exist BANDWIDTH\r\n      object follow <RRO-List> and is backward compatible with\r\n      [RFC5440].\r\n\r\n      * Update the <end-point-rro-pair-list> to allow optional BANDWIDTH\r\n      object only if <RRO-List> is included. \r\n\r\nRefer https://datatracker.ietf.org/doc/draft-palleti-pce-rfc6006bis/?include_text=1", "submit_date": "2016-11-16", "submitter_name": "DHRUV DHODY", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4900", "doc-id": "RFC5952", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2.2.", "orig_text": "Handling One 16-Bit 0 Field\r\n\r\nThe symbol \"::\" MUST NOT be used to shorten just one 16-bit 0 field.\r\n   For example, the representation 2001:db8:0:1:1:1:1:1 is correct, but\r\n   2001:db8::1:1:1:1:1 is not correct.", "correct_text": "But Section 2.2.  Zero Compression\r\nsays:\r\n\r\n'A special syntax is available to compress the zeros.  The use of\r\n      \"::\" indicates one or more groups of 16 bits of zeros.'\r\n\r\n   It is possible to select whether or not to omit just one 16-bit 0\r\n   field.\r\n\r\n      2001:db8:aaaa:bbbb:cccc:dddd::1\r\n\r\n      2001:db8:aaaa:bbbb:cccc:dddd:0:1", "notes": "In 2.2 :: for only one 16-bit 0 filed :: is used\r\n4.2.2 says MUST NOT -RFC 2119 says\r\n2. MUST NOT   This phrase, or the phrase \"SHALL NOT\", mean that the\r\n   definition is an absolute prohibition of the specification.\n --VERIFIER NOTES-- \nValid versus canonical forms; see https://www.rfc-editor.org/errata/eid4986 for links to further discussion.", "submit_date": "2017-01-10", "submitter_name": "Michael Krzyzaniak", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-12-27 02:08:02"}, {"errata_id": "4911", "doc-id": "RFC6020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.3", "orig_text": "Within a double-quoted string (enclosed within \" \"), a backslash\r\ncharacter introduces a special character, which depends on the\r\ncharacter that immediately follows the backslash:\r\n\r\n \\n      new line\r\n \\t      a tab character\r\n \\\"      a double quote\r\n \\\\      a single backslash\r\n", "correct_text": "Within a double-quoted string (enclosed within \" \"), a backslash\r\ncharacter introduces a special character, which depends on the\r\ncharacter that immediately follows the backslash:\r\n\r\n \\n      new line\r\n \\t      a tab character\r\n \\\"      a double quote\r\n \\\\      a single backslash\r\n\r\n\r\nThe interpretation of any character other than the ones listed above\r\nfollowing a backslash is undefined. Authors are advised to avoid using\r\nsuch backslash sequences in double-quoted strings in their YANG\r\nmodules.", "notes": "The text doesn't state whether other characters may follow the backslash, and if yes, what it means. Existing implementations have used three approaches:\r\n\r\n1. report an error if another character follows the backslash\r\n2. keep only the character following the backslash, i.e., for example, \"\\x\" is the same as \"x\".\r\n3. keep both the backslash and the character following it.\r\n\r\nThis ambiguity is undesirable and YANG 1.1 [RFC 7950] explicitly adopted option #1. However, many modules are still being written using YANG version 1.0, so it is important to clarify this issue in RFC 6020 as well.", "submit_date": "2017-01-18", "submitter_name": "Ladislav Lhotka", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4868", "doc-id": "RFC6006", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "          <PCRep Message>::= <Common Header>\r\n                                <response>\r\n          <response>::=<RP>\r\n                          [<end-point-path-pair-list>]\r\n                          [<NO-PATH>]\r\n                          [<attribute-list>]\r\n\r\n        where:\r\n\r\n           <end-point-path-pair-list>::=\r\n                   [<END-POINTS>]<path>[<end-point-path-pair-list>]\r\n\r\n          <path> ::= (<ERO>|<SERO>) [<path>]\r\n\r\n          <attribute-list>::=[<OF>]\r\n                               [<LSPA>]\r\n                               [<BANDWIDTH>]\r\n                               [<metric-list>]\r\n                               [<IRO>]", "correct_text": "          <PCRep Message>::= <Common Header>\r\n                             <response-list>\r\n\r\n          where:\r\n\r\n              <response-list>::=<response>[<response-list>]\r\n\r\n              <response>::=<RP>\r\n                         [<end-point-path-pair-list>]\r\n                        [<NO-PATH>]\r\n                        [<UNREACH-DESTINATION>]\r\n                        [<attribute-list>]\r\n\r\n              <end-point-path-pair-list>::=\r\n                      [<END-POINTS>]<path>[<end-point-path-pair-list>]\r\n\r\n              <path> ::= (<ERO>|<SERO>) [<path>]\r\n\r\n          where:\r\n\r\n              <attribute-list>::=[<OF>]\r\n                                 [<LSPA>]\r\n                                 [<BANDWIDTH>]\r\n                                 [<metric-list>]\r\n                                 [<IRO>]", "notes": "o Update the RBNF for Reply message format:\r\n\r\n      * Update PCEP allows for the bundling of multiple path computation\r\n      responses within a single Path Computation Reply (PCRep) message.\r\n\r\n      * Update UNREACH-DESTINATION in PCRep message. This object was \r\n      missed in [RFC6006].\r\n\r\nRefer: https://datatracker.ietf.org/doc/draft-palleti-pce-rfc6006bis/?include_text=1", "submit_date": "2016-11-16", "submitter_name": "DHRUV DHODY", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4869", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4", "orig_text": "               CDUP\r\n                  200\r\n                  500, 501, 502, 421, 530, 550", "correct_text": "               CDUP\r\n                  250\r\n                  500, 501, 502, 421, 530, 550", "notes": "The reply codes for CDUP are supposed to be identical to those of CWD according to Appendix II - Reply Codes. Thus, the proper return code for a successful CDUP should be 250 - Requested file action okay, not 200 - Command okay.", "submit_date": "2016-11-21", "submitter_name": "Megan Ruggiero", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-07 16:24:02"}, {"errata_id": "4875", "doc-id": "RFC6376", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "The header field text itself must encode the vertical bar\r\n(\"|\", %x7C) character (i.e., vertical bars in the \"z=\" text are\r\nmeta-characters, and any actual vertical bar characters in a\r\ncopied header field must be encoded).  Note that all whitespace\r\nmust be encoded, including whitespace between the colon and the\r\nheader field value.  After encoding, FWS MAY be added at arbitrary\r\nlocations in order to avoid excessively long lines; such\r\nwhitespace is NOT part of the value of the header field and MUST\r\nbe removed before decoding.\r\n", "correct_text": "The header field value itself must encode the vertical bar\r\n(\"|\", %x7C) character (i.e., vertical bars in the \"z=\" text are\r\nmeta-characters, and any actual vertical bar characters in a\r\ncopied header field must be encoded).  Note that all whitespace\r\nmust be encoded, including whitespace between the colon and the\r\nheader field value.  After encoding, FWS MAY be added at arbitrary\r\nlocations inside the header field value in order to avoid \r\nexcessively long lines; such whitespace is NOT part of the value \r\nof the header field and MUST be removed before decoding. FWS MAY NOT\r\nbe added to the header field name.", "notes": "The original text is confusing on whether FWS may be added to just the header field values or to both the header field names and header field values. The ABNF suggests that it is just allowed inside the values, but we've seen in practice that this whitespace is also added to the field names.\r\n\r\nFurther more, the use of the three terms \"header field name\", \"header field value\" and \"header field text\" is confusing. It is better to stick with just \"header field name\" and \"header field value\".", "submit_date": "2016-12-01", "submitter_name": "Emiel Bruijntjes", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4912", "doc-id": "RFC5246", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.4.1", "orig_text": "   SignatureAndHashAlgorithm\r\n    supported_signature_algorithms<2..2^16-1>;\r\n", "correct_text": "   SignatureAndHashAlgorithm\r\n    supported_signature_algorithms<2..2^16-2>;\r\n", "notes": "Error in last sentence. See errata ID 2865.\r\n\r\nPaul Wouters (AD): From errata ID 2865: The supported_signature_algorithms field is a variable length array. As such ceiling and floor should be specified, and they should be multiple of the base type (which is two bytes long in this case). See section 7.4.1.4.1 for a valid definition of this field.\r\nThis is already fixed in TLS 1.3 RFC8446", "submit_date": "2017-01-18", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 02:47:43"}, {"errata_id": "4913", "doc-id": "RFC2047", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "           Any amount of linear-space-white between 'encoded-word's,\r\n           even if it includes a CRLF followed by one or more SPACEs,\r\n           is ignored for the purposes of display.", "correct_text": "           Any amount of linear-white-space between 'encoded-word's,\r\n           even if it includes a CRLF followed by one or more SPACEs,\r\n           is ignored for the purposes of display.", "notes": "", "submit_date": "2017-01-19", "submitter_name": "John Drinkwater", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4914", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "14.3.3", "orig_text": "Mapping Used by nfs4_cis_prep", "correct_text": "Mapping Used by nfs4_mixed_prep", "notes": "Section header is incorrect, possibly copied from previous section 14.2.3", "submit_date": "2017-01-22", "submitter_name": "Dylan Simon", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:12:10"}, {"errata_id": "4915", "doc-id": "RFC7463", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   To: <sips:alice@example.com>;tag=428765950880801", "correct_text": "   To: <sips:alice@example.com>", "notes": "PUBLISH must not contain To tag unless sending within dialog.  The To tag (428765950880801) appears to be extraneous within the following SIP messages since there is no explanation about which dialog is being shared: section 11.7 F32, section 11.9 F32, section 11.10 F22, and section 11.14 F48.  The To/From URI values within section 11.7 F32 also should be swapped since it does not appear to be intentional and is different than the other examples indicating To tag value 428765950880801.\r\n\r\nSection 11.4 F2 also has To tag issues since a To tag must be present to comply with RFC 3261.  Section 11.6 F28 also should not be missing a To tag.", "submit_date": "2017-01-23", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7121", "doc-id": "RFC9180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "A.1.1\r\nskEm\r\n52c4a758a802cd8b936eceea314432798d5baf2d7e9235dc084ab1b9cfa2f736\r\nskRm\r\n4612c550263fc8ad58375df3f557aac531d26850903e55a9f23f21d8534e8ac8\r\n\r\nA.1.2\r\nskEm\r\n463426a9ffb42bb17dbe6044b9abd1d4e4d95f9041cef0e99d7824eef2b6f588\r\nskRm\r\nc5eb01eb457fe6c6f57577c5413b931550a162c71a03ac8d196babbd4e5ce0fd\r\n\r\nA.1.3\r\nskEm\r\nff4442ef24fbc3c1ff86375b0be1e77e88a0de1e79b30896d73411c5ff4c3518\r\nskRm\r\nfdea67cf831f1ca98d8e27b1f6abeb5b7745e9d35348b80fa407ff6958f9137e\r\nskSm\r\ndc4a146313cce60a278a5323d321f051c5707e9c45ba21a3479fecdf76fc69dd\r\n\r\nA.1.4\r\nskEm\r\n14de82a5897b613616a00c39b87429df35bc2b426bcfd73febcb45e903490768\r\nskRm\r\ncb29a95649dc5656c2d054c1aa0d3df0493155e9d5da6d7e344ed8b6a64a9423\r\nskSm\r\nfc1c87d2f3832adb178b431fce2ac77c7ca2fd680f3406c77b5ecdf818b119f4\r\n\r\nA.2.1\r\nskEm\r\nf4ec9b33b792c372c1d2c2063507b684ef925b8c75a42dbcbf57d63ccd381600\r\nskRm\r\n8057991eef8f1f1af18f4a9491d16a1ce333f695d4db8e38da75975c4478e0fb\r\n\r\nA.2.2\r\nskEm\r\n0c35fdf49df7aa01cd330049332c40411ebba36e0c718ebc3edf5845795f6321\r\nskRm\r\n77d114e0212be51cb1d76fa99dd41cfd4d0166b08caa09074430a6c59ef17879\r\n\r\nA.2.3\r\nskEm\r\nc94619e1af28971c8fa7957192b7e62a71ca2dcdde0a7cc4a8a9e741d600ab13\r\nskRm\r\n3ca22a6d1cda1bb9480949ec5329d3bf0b080ca4c45879c95eddb55c70b80b82\r\nskSm\r\n2def0cb58ffcf83d1062dd085c8aceca7f4c0c3fd05912d847b61f3e54121f05\r\n\r\nA.2.4\r\nskEm\r\n5e6dd73e82b856339572b7245d3cbb073a7561c0bee52873490e305cbb710410\r\nskRm\r\n7b36a42822e75bf3362dfabbe474b3016236408becb83b859a6909e22803cb0c\r\nskSm\r\n90761c5b0a7ef0985ed66687ad708b921d9803d51637c8d1cb72d03ed0f64418\r\n\r\nA.7.1\r\nskEm\r\n095182b502f1f91f63ba584c7c3ec473d617b8b4c2cec3fad5af7fa6748165ed\r\nskRm\r\n33d196c830a12f9ac65d6e565a590d80f04ee9b19c83c87f2c170d972a812848\r\n\r\nA.7.2\r\nskEm\r\n1d72396121a6a826549776ef1a9d2f3a2907fc6a38902fa4e401afdb0392e627\r\nskRm\r\n98f304d4ecb312689690b113973c61ffe0aa7c13f2fbe365e48f3ed09e5a6a0c\r\n\r\nA.7.3\r\nskEm\r\n83d3f217071bbf600ba6f081f6e4005d27b97c8001f55cb5ff6ea3bbea1d9295\r\nskRm\r\ned88cda0e91ca5da64b6ad7fc34a10f096fa92f0b9ceff9d2c55124304ed8b4a\r\nskSm\r\nc85f136e06d72d28314f0e34b10aadc8d297e9d71d45a5662c2b7c3b9f9f9405\r\n\r\nA.7.4\r\nskEm\r\na2b43f5c67d0d560ee04de0122c765ea5165e328410844db97f74595761bbb81\r\nskRm\r\nc4962a7f97d773a47bdf40db4b01dc6a56797c9e0deaab45f4ea3aa9b1d72904\r\nskSm\r\n6175b2830c5743dff5b7568a7e20edb1fe477fb0487ca21d6433365be90234d0", "correct_text": "A.1.1\r\nskEm\r\n50c4a758a802cd8b936eceea314432798d5baf2d7e9235dc084ab1b9cfa2f776\r\nskRm\r\n4012c550263fc8ad58375df3f557aac531d26850903e55a9f23f21d8534e8a48\r\n\r\nA.1.2\r\nskEm\r\n403426a9ffb42bb17dbe6044b9abd1d4e4d95f9041cef0e99d7824eef2b6f548\r\nskRm\r\nc0eb01eb457fe6c6f57577c5413b931550a162c71a03ac8d196babbd4e5ce07d\r\n\r\nA.1.3\r\nskEm\r\nf84442ef24fbc3c1ff86375b0be1e77e88a0de1e79b30896d73411c5ff4c3558\r\nskRm\r\nf8ea67cf831f1ca98d8e27b1f6abeb5b7745e9d35348b80fa407ff6958f9137e\r\nskSm\r\nd84a146313cce60a278a5323d321f051c5707e9c45ba21a3479fecdf76fc695d\r\n\r\nA.1.4\r\nskEm\r\n10de82a5897b613616a00c39b87429df35bc2b426bcfd73febcb45e903490768\r\nskRm\r\nc829a95649dc5656c2d054c1aa0d3df0493155e9d5da6d7e344ed8b6a64a9463\r\nskSm\r\nf81c87d2f3832adb178b431fce2ac77c7ca2fd680f3406c77b5ecdf818b11974\r\n\r\nA.2.1\r\nskEm\r\nf0ec9b33b792c372c1d2c2063507b684ef925b8c75a42dbcbf57d63ccd381640\r\nskRm\r\n8057991eef8f1f1af18f4a9491d16a1ce333f695d4db8e38da75975c4478e07b\r\n\r\nA.2.2\r\nskEm\r\n0835fdf49df7aa01cd330049332c40411ebba36e0c718ebc3edf5845795f6361\r\nskRm\r\n70d114e0212be51cb1d76fa99dd41cfd4d0166b08caa09074430a6c59ef17879\r\n\r\nA.2.3\r\nskEm\r\nc84619e1af28971c8fa7957192b7e62a71ca2dcdde0a7cc4a8a9e741d600ab53\r\nskRm\r\n38a22a6d1cda1bb9480949ec5329d3bf0b080ca4c45879c95eddb55c70b80b42\r\nskSm\r\n28ef0cb58ffcf83d1062dd085c8aceca7f4c0c3fd05912d847b61f3e54121f45\r\n\r\nA.2.4\r\nskEm\r\n586dd73e82b856339572b7245d3cbb073a7561c0bee52873490e305cbb710450\r\nskRm\r\n7836a42822e75bf3362dfabbe474b3016236408becb83b859a6909e22803cb4c\r\nskSm\r\n90761c5b0a7ef0985ed66687ad708b921d9803d51637c8d1cb72d03ed0f64458\r\n\r\nA.7.1\r\nskEm\r\n085182b502f1f91f63ba584c7c3ec473d617b8b4c2cec3fad5af7fa67481656d\r\nskRm\r\n30d196c830a12f9ac65d6e565a590d80f04ee9b19c83c87f2c170d972a812848\r\n\r\nA.7.2\r\nskEm\r\n1872396121a6a826549776ef1a9d2f3a2907fc6a38902fa4e401afdb0392e667\r\nskRm\r\n98f304d4ecb312689690b113973c61ffe0aa7c13f2fbe365e48f3ed09e5a6a4c\r\n\r\nA.7.3\r\nskEm\r\n80d3f217071bbf600ba6f081f6e4005d27b97c8001f55cb5ff6ea3bbea1d9255\r\nskRm\r\ne888cda0e91ca5da64b6ad7fc34a10f096fa92f0b9ceff9d2c55124304ed8b4a\r\nskSm\r\nc85f136e06d72d28314f0e34b10aadc8d297e9d71d45a5662c2b7c3b9f9f9445\r\n\r\nA.7.4\r\nskEm\r\na0b43f5c67d0d560ee04de0122c765ea5165e328410844db97f74595761bbb41\r\nskRm\r\nc0962a7f97d773a47bdf40db4b01dc6a56797c9e0deaab45f4ea3aa9b1d72944\r\nskSm\r\n6075b2830c5743dff5b7568a7e20edb1fe477fb0487ca21d6433365be9023450\r\n", "notes": "The introduction section in Appendix A states that 'Each key pair (skX, pkX) is written in its serialized form, where skXm = SerializePrivateKey(skX) ' For X25519 entries this means that values for skXm should be clamped in the following way to modify the first and last bytes: skXm[0] &= 248; skXm[skXmlen - 1] &= 127; skXm[skXmlen - 1] |= 64; (See Section 5 of https://www.ietf.org/rfc/rfc7748.txt)\r\n\r\nVerified. RFC 9180 Section 7.1.2 states SerializePrivateKey() MUST clamp its output for X25519. Appendix A states \"skXm = SerializePrivateKey(skX)\". The published sk* values are not clamped, violating the spec's MUST requirement. The erratum's corrections apply RFC 7748 Section 5 clamping exactly. Clamped values produce identical public keys (X25519 clamps internally), so this is a documentation consistency fix that enables compliant implementations to match test vectors byte-for-byte. See also: https://github.com/cfrg/draft-irtf-cfrg-hpke/issues/255", "submit_date": "2022-09-07", "submitter_name": "Shane Lontis", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 03:12:08"}, {"errata_id": "4871", "doc-id": "RFC7540", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.3.4", "orig_text": "For example, assume streams A and B share a parent, and streams C\r\nand D both depend on stream A. Prior to the removal of stream A,\r\nif streams A and D are unable to proceed, then stream C receives\r\nall the resources dedicated to stream A. If stream A is removed\r\nfrom the tree, the weight of stream A is divided between streams\r\nC and D. If stream D is still unable to proceed, this results in\r\nstream C receiving a reduced proportion of resources. For equal\r\nstarting weights, C receives one third, rather than one half, of\r\navailable resources.", "correct_text": "For example, assume streams A and B share a parent, and streams C\r\nand D both depend on stream A. When A is complete, streams C and\r\nD receive all the resources that would be allocated to stream\r\nA. If stream D is unable to proceed, stream C shares resources\r\nwith stream B. Assuming equal starting weights on all streams,\r\nthis means that streams B and C receive an equal share.  However,\r\nif stream A is removed from the tree, the weight of stream A is\r\ndivided between streams C and D. With stream A removed and stream\r\nD unable to proceed, stream C receives a reduced proportion of\r\nresources. For equal starting weights, C receives one third,\r\nrather than one half, of available resources.", "notes": "The example was incorrect.  Dependent streams do not receive resources if their parent is blocked; they only receive resources once the parent is complete.\r\n\r\nNote that I didn't correct the common misunderstanding regarding the third here.  That might be further improved by doing the math.  That is:\r\n\r\nBefore removal: A=N (C=N, D=N), B=N;\r\nAfter removal: B=N, C=N/2, D=N/2;\r\nTherefore viable streams are B=N and C=N/2 meaning a total pool of 3N/2.  The resource proportion allocated to C is therefore (N/2)/(3N/2)=1/3.\r\n\r\nBut that would probably need an entire section for the example, rather than a single paragraph.\n --VERIFIER NOTES-- \n   See HTTPBIS mailing list discussion.", "submit_date": "2016-11-30", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4872", "doc-id": "RFC7181", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "16.2", "orig_text": "   TC messages MAY be generated in response to a change in the\r\n   information that they are to advertise, indicated by a change in the\r\n   ANSN in the Neighbor Information Base.  In this case, a router MAY\r\n   send a complete TC message and, if so, MAY restart its TC message\r\n   schedule.  Alternatively, a router MAY send an incomplete TC message\r\n   with at least the newly advertised network addresses (i.e., not\r\n   previously, but now, an N_orig_addr or in an N_neighbor_addr_list in\r\n   a Neighbor Tuple with N_advertised = true or an AL_net_addr) in its\r\n   Address Blocks, with associated Address Block TLV(s).  Note that a\r\n   router cannot report removal of advertised content using an\r\n   incomplete TC message.", "correct_text": "   TC messages MAY be generated in response to a change in the\r\n   information that they are to advertise, indicated by a change in the\r\n   ANSN in the Neighbor Information Base.  In this case, a router MAY\r\n   send a complete TC message and, if so, MAY restart its TC message\r\n   schedule.  Alternatively, a router MAY send an incomplete TC message\r\n   with at least the newly advertised network addresses (i.e., not\r\n   previously, but now, an N_orig_addr or an N_neighbor_addr_list in\r\n   a Neighbor Tuple with N_advertised = true or an AL_net_addr) in its\r\n   Address Blocks, with associated Address Block TLV(s).  Note that a\r\n   router cannot report removal of advertised content using an\r\n   incomplete TC message.", "notes": "Unnecessary preposition \"in\"\n --VERIFIER NOTES-- \n From Christopher Dearlove (author):\r\n\r\nThe \"in\" distinguishes the cases of N_orig_addr and an N_neighbor_addr_list. The former is a single address, the latter is a list of addresses. Therefore one looks for the address as the former, or in (the word that should not be deleted) the latter.\r\n\r\nThis erratum must be rejected. ", "submit_date": "2016-11-30", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4873", "doc-id": "RFC5764", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.1", "orig_text": "When the mechanism described in this document is in\r\neffect, this is modified so that data written by upper-level protocol\r\nclients of DTLS is assumed to be RTP/RTP and is encrypted using SRTP\r\nrather than the standard TLS record encoding.", "correct_text": "When the mechanism described in this document is in\r\neffect, this is modified so that data written by upper-level protocol\r\nclients of DTLS is assumed to be RTP/RTCP and is encrypted using SRTP\r\nrather than the standard TLS record encoding.", "notes": "Section 5.1 notes that RTP or RTCP can be sent over the channel, so \"RTP/RTP\" should be \"RTP/RTCP\".", "submit_date": "2016-11-30", "submitter_name": "Peter Wu", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-11-08 08:37:24"}, {"errata_id": "4874", "doc-id": "RFC7181", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "17.1", "orig_text": "   If the router changes its originator address, then:\r\n\r\n   1.  If there is no Originator Tuple with:\r\n\r\n       *  O_orig_addr = old originator address\r\n\r\n       then create an Originator Tuple with:\r\n\r\n       *  O_orig_addr := old originator address\r\n\r\n       The Originator Tuple (existing or new) with:\r\n\r\n       *  O_orig_addr = new originator address\r\n\r\n       is then modified as follows:\r\n\r\n       *  O_time := current time + O_HOLD_TIME\r\n", "correct_text": "   If the router changes its originator address, then:\r\n\r\n   1.  If there is an Originator Tuple with:\r\n\r\n       *  O_orig_addr = old originator address\r\n\r\n       then modify it as follows:\r\n\r\n       *  O_orig_addr := new originator address\r\n       *  O_time := current time + O_HOLD_TIME\r\n\r\n       otherwise create an Originator Tuple with:\r\n\r\n       *  O_orig_addr := new originator address\r\n       *  O_time := current time + O_HOLD_TIME\r\n", "notes": "At the time of the modification Originator Tuple with O_orig_addr = new originator address does not yet exist.\r\n\r\n===\r\nThe Corrected text reflects consultation with the WG.", "submit_date": "2016-12-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4916", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.17.", "orig_text": "If the target node is a container, list, case, input, output, or\r\nnotification node, the \"container\", \"leaf\", \"list\", \"leaf-list\",\r\n\"uses\", and \"choice\" statements can be used within the \"augment\"\r\nstatement.", "correct_text": "If the target node is a container, list, case, input, output, or\r\nnotification node, the \"anydata\", \"anyxml\", \"container\", \"leaf\",\r\n\"list\", \"leaf-list\", \"uses\", and \"choice\" statements can be used\r\nwithin the \"augment\" statement.", "notes": "It was forgotten to mention \"anydata\" and \"anyxml\" as valid substatements in this case.", "submit_date": "2017-01-24", "submitter_name": "Michal Vasko", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4917", "doc-id": "RFC1738", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "the chararacter which has that octet as its code within the US-ASCII\r\n[20] coded character set.", "correct_text": "the character which has that octet as its code within the US-ASCII\r\n[20] coded character set.", "notes": "The word \"character\" is misspelled as \"chararacter.\"", "submit_date": "2017-01-26", "submitter_name": "Stephan Casas", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-15 14:05:34"}, {"errata_id": "4880", "doc-id": "RFC7574", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.5", "orig_text": "   A peer MUST include the content integrity method used by a swarm.\r\n   The code for this option is 3.  Defined values are listed in Table 4.\r\n\r\n                   +--------+-------------------------+\r\n                   | Method | Description             |\r\n                   +--------+-------------------------+\r\n                   | 0      | No integrity protection |\r\n                   | 1      | Merkle Hash Tree        |\r\n                   | 2      | Sign All                |\r\n                   | 3      | Unified Merkle Tree     |\r\n                   | 4-255  | Unassigned              |\r\n                   +--------+-------------------------+\r\n\r\n            Table 4: PPSPP Content Integrity Protection Methods", "correct_text": "   A peer MUST include the content integrity method used by a swarm.\r\n   The code for this option is 3.  Defined values are listed in Table 4.\r\n\r\n                   +--------+-------------------------+\r\n                   | Method | Description             |\r\n                   +--------+-------------------------+\r\n                   | 0      | Unassigned              |\r\n                   | 1      | Merkle Hash Tree        |\r\n                   | 2      | Sign All                |\r\n                   | 3      | Unified Merkle Tree     |\r\n                   | 4-255  | Unassigned              |\r\n                   +--------+-------------------------+\r\n\r\n            Table 4: PPSPP Content Integrity Protection Methods", "notes": "As stated in the first sentence of chapter 7.5, \u201cA peer MUST include the content integrity method used by a swarm.\u201d, \u201cNo integrity protection\u201d must not be one of the option for PPSPP content integrity protection method. Or, IETF 7574 must define PPSP-PP that does not use the integrity protection method.\r\n\r\nThe proposed is to remove option of \u201cNo integrity protection\u201d  in Table 4.\r\n\r\nSpencer: confirmed in conversations with Victor Grishchenko <victor.grishchenko@gmail.com> on the PPSP mailing list.", "submit_date": "2016-12-07", "submitter_name": "Sung Hei Kim, Chang Kyu Lee", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4881", "doc-id": "RFC6238", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "   [CN]       Coron, J. and D. Naccache, \"An Accurate Evaluation of\r\n              Maurer's Universal Test\", LNCS 1556, February 1999,\r\n              <http://www.gemplus.com/smart/rd/publications/pdf/\r\n              CN99maur.pdf>.", "correct_text": "   [CN]       Coron, J. and D. Naccache, \"An Accurate Evaluation of\r\n              Maurer's Universal Test\", Selected Areas in Cryptography: \r\n              SAC 1998, Lecture Notes in Computer Science Vol. 1556, \r\n              pp. 57-71, DOI: 10.1007/3-540-48892-8_5, February 1999,\r\n              <http://www.jscoron.fr/publications/universal.pdf>.", "notes": "Gemplus (today Gemalto) no longer provide thie linked research paper.", "submit_date": "2016-12-07", "submitter_name": "Malte Simon", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4882", "doc-id": "RFC6961", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "opaque OCSPResponse<0..2^24-1>;", "correct_text": "opaque OCSPResponse<1..2^24-1>;", "notes": "- The text below the definition states: \r\n    Only one OCSP response, with a length of at least one byte, may be sent for status_type \"ocsp\".\r\n\r\n- `OCSPResponse` was originally (correctly) defined in RFC6066 (https://tools.ietf.org/html/rfc6066#section-8) with a lower bound of 1 byte.", "submit_date": "2016-12-10", "submitter_name": "Ashwini Oruganti", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4883", "doc-id": "RFC3312", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "11", "orig_text": "Therefore, a user agent\r\n   including preconditions in the SDP MUST support the PRACK and UPDATE\r\n   methods. Consequently, it MUST include the \"100rel\" [7] tag in the\r\n   Supported header field and SHOULD include an Allow header field with\r\n   the \"UPDATE\" tag [5].", "correct_text": "Therefore, a user agent\r\n   including preconditions in the SDP MUST support the PRACK and UPDATE\r\n   methods. Consequently, it MUST include the \"100rel\" [7] tag in the\r\n   Supported header field and MUST include an Allow header field with\r\n   the \"UPDATE\" tag [5].", "notes": "As stated in first line in the mentioned paragraph, the user agent MUST support the UPDATE method, hence even in Allow header field also, UPDATE method MUST be included.\r\n\r\nAs per RFC 2119\r\n\"SHOULD -This word, or the adjective \"RECOMMENDED\", mean that there\r\n   may exist valid reasons in particular circumstances to ignore a\r\n   particular item, but the full implications must be understood and\r\n   carefully weighed before choosing a different course.   \"\r\n\r\nHere in precondition case, whether any chance of ignoring the UPDATE method happens ?\r\n\r\nAs per RFC 3261 \r\nSection 8.2.1 states -\r\n\"The Allow header field MUST list the set of methods supported by the UAS\r\n   generating the message. ... If the method is one supported by the server, processing continues.\"\r\n\r\nand also in RFC 3261 Sections 20.5 states-\r\n\"All methods, including ACK and CANCEL, understood by the UA MUST be\r\n   included in the list of methods in the Allow header field, when\r\n   present.\"", "submit_date": "2016-12-12", "submitter_name": "Shraddha Soni", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4884", "doc-id": "RFC3312", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "If a peer has requested confirmation on a particular stream, an agent\r\n   MUST mark that stream with a flag in its local status table. ", "correct_text": "If a peer has requested confirmation on a particular stream, an agent \r\n   MUST mark that stream with a flag in its local status table.  ", "notes": "The only place in RFC, where 'agent' is mentioned instead of 'User Agent'. Use of 'User agent' is more appropriate in SIP context as per RFC 3261. \r\nUnable to submit the errata when corrected text is mentioned as \"user agent\" Hence pasting same text in original text. Have submitted feedback online for the webpage issue.", "submit_date": "2016-12-12", "submitter_name": "Shraddha Soni", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4885", "doc-id": "RFC5246", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1.", "orig_text": "   server random\r\n      A 32-byte value provided by the server.\r\n\r\n      These parameters are defined in the presentation language as:\r\n\r\n      enum { server, client } ConnectionEnd;", "correct_text": "   server random\r\n      A 32-byte value provided by the server.\r\n\r\n   These parameters are defined in the presentation language as:\r\n\r\n      enum { server, client } ConnectionEnd;", "notes": "The line \"These parameters are ...\" after the list of parameters is at the same indentation level as the list of parameters, instead of coming back left by one level.", "submit_date": "2016-12-13", "submitter_name": "Wail Yahyaoui", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4886", "doc-id": "RFC6228", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "   If the Supported header field of an initial dialog initiation request\r\n   does not contain a \"199\" option-tag, the UAC MUST NOT send a 199\r\n   response on any early dialog associated with the request.\r\n", "correct_text": "   If the Supported header field of an initial dialog initiation request\r\n   does not contain a \"199\" option-tag, the UAS MUST NOT send a 199\r\n   response on any early dialog associated with the request.\r\n", "notes": "Changed \"UAC\" to \"UAS\" since the UAC does not send responses.", "submit_date": "2016-12-13", "submitter_name": "Brett Tate", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4918", "doc-id": "RFC1071", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "while( count > 1 )  {\r\n        /*  This is the inner loop */\r\n        sum += * (unsigned short) addr++;\r\n        count -= 2;\r\n}", "correct_text": "while( count > 1 )  {\r\n        /*  This is the inner loop */\r\n        sum += * (unsigned short *) addr;\r\n        addr += 2;\r\n        count -= 2;\r\n}", "notes": "- In the original text, code incorrectly casts from pointer to integer.\r\n- Increments addr pointer by 1. Because unsigned short is two bytes, it should have been incremented by 2 instead.\r\n", "submit_date": "2017-01-26", "submitter_name": "Cihangir Akturk", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 06:33:59"}, {"errata_id": "4887", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": " When a request is locally processed, the following procedures MUST be\r\n   applied to create the associated answer, in addition to any\r\n   additional procedures that MAY be discussed in the Diameter\r\n   application defining the command:\r\n\r\n   o  The same Hop-by-Hop Identifier in the request is used in the\r\n      answer.\r\n\r\n   o  The local host's identity is encoded in the Origin-Host AVP.\r\n\r\n   o  The Destination-Host and Destination-Realm AVPs MUST NOT be\r\n      present in the answer message.\r\n", "correct_text": " When a request is locally processed, the following procedures MUST be\r\n   applied to create the associated answer, in addition to any\r\n   additional procedures that MAY be discussed in the Diameter\r\n   application defining the command:\r\n\r\n   o  The same Hop-by-Hop Identifier in the request is used in the\r\n      answer.\r\n\r\n   o  The local host's identity is encoded in the Origin-Host AVP.\r\n\r\n   o  The local realm's identity is encoded in the Origin-Realm AVP.\r\n\r\n   o  The Destination-Host and Destination-Realm AVPs MUST NOT be\r\n      present in the answer message.", "notes": "Unlike Origin-Host AVP, it is not stated explicitly that Origin-Realm AVP MUST be encoded in the associated answer. While both these AVPs MUST be present in all Diameter messages according to their descriptions.", "submit_date": "2016-12-13", "submitter_name": "Mikhail Zaytsev", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4888", "doc-id": "RFC5137", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "So, even for the fairly simple cases of ASCII and standard built by\r\nextending ASCII, such as the ISO 8859 family, we have been living", "correct_text": "So, even for the fairly simple cases of ASCII and standards built by\r\nextending ASCII, such as the ISO 8859 family, we have been living", "notes": "Should be plural \"standards\"", "submit_date": "2016-12-14", "submitter_name": "Matthew Kerwin", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 20:55:33"}, {"errata_id": "4889", "doc-id": "RFC4648", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "When fewer than 40 input bits\r\nare available in an input group, bits with value zero are added (on\r\nthe right) to form an integral number of 5-bit groups.", "correct_text": "When fewer than 40 input bits\r\nare available in an input group, bits with value zero are added (on\r\nthe right) to form an integral number of 8-bit groups.", "notes": "8-bit instead of 5-bit.\r\nWhat follows the correction clearly shows that the final input group must be 8, 16, 24, 32 or 40 bit long, that is, a multiple of 8, not of 5.\r\nAlso examples of commonly-used Base32 encoders/decoders seem to show this behaviour.\r\nAlso, I would not say \"When fewer than 40 input bits are available in an input group\" but rather \"When fewer than 40 input bits are available in the final input group\", to better clarify and not to change the subject ambiguously, unless this is intentionally applicable to any input lot.", "submit_date": "2016-12-14", "submitter_name": "Umberto Rustichelli", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4890", "doc-id": "RFC4006", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7", "orig_text": "   | PendingE | Failure to send; requested     | Store      | Idle     |\r\n   |          | action DIRECT_DEBITING; DDFH   | request    |          |\r\n   |          | equal to TERMINATE_OR_BUFFER   | with       |          |\r\n   |          |                                | T-flag     |          |\r\n   | PendingE | Failure to send; requested     | Store      | Idle     |\r\n   |          | action DIRECT_DEBITING; DDFH   | request    |          |\r\n   |          | equal to TERMINATE_OR_BUFFER   | with       |          |\r\n   |          |                                | T-flag     |          |", "correct_text": "   | PendingE | Failure to send; requested     | Store      | Idle     |\r\n   |          | action DIRECT_DEBITING; DDFH   | request    |          |\r\n   |          | equal to TERMINATE_OR_BUFFER   | with       |          |\r\n   |          |                                | T-flag     |          |", "notes": "the state machine  in the table of ''client, event based'' is duplicated\n --VERIFIER NOTES-- \nYes, this is an editorial mistake. but this not related to the RFC4006 but to the current version of the draft https://datatracker.ietf.org/doc/draft-ietf-dime-rfc4006bis/, version 00 as of today.", "submit_date": "2016-12-16", "submitter_name": "dengzhenjie", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4891", "doc-id": "RFC7230", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.6", "orig_text": "qdtext         = HTAB / SP /%x21 / %x23-5B / %x5D-7E / obs-text", "correct_text": "qdtext         = HTAB / SP / %x21 / %x23-5B / %x5D-7E / obs-text", "notes": "Lack of space between the slash and the alternative makes it unclear that the slash isn't part of the next alternative.\r\n\r\nMark Nottingham: Not a bug, but certainly an improvement.", "submit_date": "2016-12-16", "submitter_name": "Mike Bishop", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4919", "doc-id": "RFC6455", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.4.1", "orig_text": "1001 indicates that an endpoint is \"going away\", such as a server\r\n      going down or a browser having navigated away from a page.", "correct_text": "(unsure)", "notes": "This status code apparently covers two entirely different situations: a server going down, and a browser having navigated away.  What is meant by \"going away\", why can't these be 2 different status codes?  That info should be present in the RFC text.", "submit_date": "2017-01-28", "submitter_name": "Jefferson Carpenter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4920", "doc-id": "RFC864", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "TCP Based", "orig_text": "   It is fairly likely that users of this service will abruptly decide\r\n   that they have had enough and abort the TCP connection, instead of\r\n   carefully closing it.  The service should be prepared for either the\r\n   carfull close or the rude abort.", "correct_text": "   It is fairly likely that users of this service will abruptly decide\r\n   that they have had enough and abort the TCP connection, instead of\r\n   carefully closing it.  The service should be prepared for either the\r\n   careful close or the rude abort.", "notes": "Spelling of \"carfull\" for \"careful\".", "submit_date": "2017-01-29", "submitter_name": "Jim Young", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 01:24:46"}, {"errata_id": "4921", "doc-id": "RFC6458", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.1", "orig_text": "If sd is an IPv4 socket, the addresses passed must be IPv4 addresses.\r\nIf the sd is an IPv6 socket, the addresses passed can either be IPv4\r\nor IPv6 addresses.", "correct_text": "If sd is an IPv4 socket, the passed addresses must be IPv4 addresses.\r\nIf sd is an IPv6 socket, the passed addresses must be IPv6 addresses.\r\nUse IPv4-mapped IPv6 addresses to bind an IPv6 socket to an IPv4\r\naddress. Note that some implementations optionally allow IPv4 addresses\r\nto be passed in directly.", "notes": "The erratum is a subtle change in meaning that would be a useful clarification.", "submit_date": "2017-02-02", "submitter_name": "Jonathan Leighton", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 20:45:03"}, {"errata_id": "4901", "doc-id": "RFC6350", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "10.1", "orig_text": "   IANA has registered the following Media Type (in\r\n   <http://www.iana.org/>) and marked the text/directory Media Type as\r\n   DEPRECATED.\r\n\r\n...\r\n\r\n      In addition, the following media types are known to have been used\r\n      to refer to vCard data.  They should be considered deprecated in\r\n      favor of text/vcard.\r\n\r\n      *  text/directory\r\n      *  text/directory; profile=vcard\r\n      *  text/x-vcard\r\n", "correct_text": "   IANA has registered the following Media Type (in\r\n   <http://www.iana.org/>).\r\n\r\n...\r\n\r\n      In addition, the following media types are known to have been used\r\n      to refer to vCard data.  They should be considered deprecated in\r\n      favor of text/vcard.\r\n\r\n      *  text/directory\r\n      *  text/directory; profile=vcard\r\n      *  text/x-vcard\r\n", "notes": "The first section needs correction, I quoted the second without change because I believe it carries the true intention; this looks like a mix-up of language between author and IANA.\r\n\r\nThis is a specification of media type for the vCard data format.  Once vCards were carried along with the text/directory media type, and that _use_ is to be deprecated, but not the _entire_ media type.  This media type applies to a completely different topic, namely LDAP, and it can't be right that a (former) usage of this media type leads to its retraction.\r\n\r\nI posted this with IANA too, correspondence with them should use [IANA #944546] in the subject header.", "submit_date": "2017-01-10", "submitter_name": "Rick van Rein", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4910", "doc-id": "RFC4594", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.8", "orig_text": "It can be assumed that this class will consume any available\r\nbandwidth and that packets traversing congested links may\r\nexperience higher queuing delays or packet loss.", "correct_text": "This class is expected to consist of TCP traffic and\r\nother traffic with a TCP-like response to available bandwidth\r\nand network bottlenecks; therefore, it can be assumed that this traffic\r\nwill consume any bandwidth available to the class and that packets\r\ntraversing congested links may experience higher queuing\r\ndelays and/or packet loss.", "notes": "This errata adds some explanation to a sentence in the description of the High-Throughput Data Service Class.  The original sentence was misread to imply less than best effort service as part of work on WiFi mapping of Diffserv.  That implication is incorrect, e.g., as indicated by the AF1x DSCP marking recommendation.  The added explanation was agreed to with the WiFi Diffserv draft authors as sufficient to avoid any implication that less than best effort service is appropriate for this traffic service class.", "submit_date": "2017-01-18", "submitter_name": "David Black", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4903", "doc-id": "RFC4566", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9", "orig_text": "   ; SDP Syntax\r\n   session-description = proto-version\r\n                         origin-field\r\n                         session-name-field\r\n                         information-field\r\n                         uri-field\r\n                         email-fields\r\n                         phone-fields\r\n                         connection-field\r\n                         bandwidth-fields\r\n                         time-fields\r\n                         key-field\r\n                         attribute-fields\r\n                         media-descriptions\r\n\r\n   connection-field =    [%x63 \"=\" nettype SP addrtype SP\r\n                         connection-address CRLF]\r\n                         ;a connection field must be present\r\n                         ;in every media description or at the\r\n                         ;session-level\r\n\r\n   media-descriptions =  *( media-field\r\n                         information-field\r\n                         *connection-field\r\n                         bandwidth-fields\r\n                         key-field\r\n                         attribute-fields )\r\n", "correct_text": "   ; SDP Syntax\r\n   session-description = proto-version\r\n                         origin-field\r\n                         session-name-field\r\n                         information-field\r\n                         uri-field\r\n                         email-fields\r\n                         phone-fields\r\n                         [connection-field]\r\n                         bandwidth-fields\r\n                         time-fields\r\n                         key-field\r\n                         attribute-fields\r\n                         media-descriptions\r\n\r\n   connection-field =    %x63 \"=\" nettype SP addrtype SP\r\n                         connection-address CRLF\r\n                         ;a connection field must be present\r\n                         ;in every media description or at the\r\n                         ;session-level\r\n\r\n   media-descriptions =  *( media-field\r\n                         information-field\r\n                         *connection-field\r\n                         bandwidth-fields\r\n                         key-field\r\n                         attribute-fields )\r\n", "notes": "in BNF of SDP, \r\nconnection-field itself is optional [0, 1], but media-description has multiple [0,) connection-field.\r\nit seems conflict, because multiple of optional fields doesn't finish because multiple filed can't find when to end.\r\n\r\nso change connection-field itself not optional (remove []) and, replace session-descriptions connection-field as optional.", "submit_date": "2017-01-12", "submitter_name": "Jxck", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 19:53:04"}, {"errata_id": "4904", "doc-id": "RFC7991", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.25.2", "orig_text": "   Deprecated.  If the goal is to provide a single URI for a reference,\r\n   use the \"target\" attribute in <reference> instead.", "correct_text": "", "notes": "This text doesn't make any sense, as the purpose for \"alt\" is something entirely different. The reason why it really was deprecated will have to be included here.", "submit_date": "2017-01-15", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4905", "doc-id": "RFC7991", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "   [BCP14]    Bradner, S., \"Key words for use in RFCs to Indicate\r\n              Requirement Levels\", BCP 14, RFC 2119,\r\n              DOI 10.17487/RFC2119, March 1997,\r\n              <http://www.rfc-editor.org/info/bcp14>.", "correct_text": "   [BCP14]    Bradner, S., \"Key words for use in RFCs to Indicate\r\n              Requirement Levels\", BCP 14, RFC 2119,\r\n              March 1997,\r\n              <http://www.rfc-editor.org/info/bcp14>.", "notes": "BCP14 (as opposed to RFC 2119) doesn't have a DOI, thus it shouldn't be listed here.", "submit_date": "2017-01-15", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4906", "doc-id": "RFC7991", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "   artwork =\r\n     element artwork {\r\n       attribute xml:base { text }?,\r\n       attribute xml:lang { text }?,\r\n       attribute anchor { xsd:ID }?,\r\n       attribute pn { text }?,\r\n       attribute xml:space { text }?,\r\n       [ a:defaultValue = \"\" ] attribute name { text }?,\r\n       [ a:defaultValue = \"\" ] attribute type { text }?,\r\n       attribute src { text }?,\r\n       [ a:defaultValue = \"left\" ]\r\n       attribute align { \"left\" | \"center\" | \"right\" }?,\r\n       [ a:defaultValue = \"\" ] attribute alt { text }?,\r\n       [ a:defaultValue = \"\" ] attribute width { text }?,\r\n       [ a:defaultValue = \"\" ] attribute height { text }?,\r\n       attribute originalSrc { text }?,\r\n       (text* | svg)\r\n     }\r\n   # https://www.rfc-editor.org/materials/format/SVG-1.2-RFC.rnc\r\n", "correct_text": "   artwork =\r\n     element artwork {\r\n       attribute xml:base { text }?,\r\n       attribute xml:lang { text }?,\r\n       attribute anchor { xsd:ID }?,\r\n       attribute pn { text }?,\r\n       attribute xml:space { text }?,\r\n       [ a:defaultValue = \"\" ] attribute name { text }?,\r\n       [ a:defaultValue = \"\" ] attribute type { text }?,\r\n       attribute src { text }?,\r\n       [ a:defaultValue = \"left\" ]\r\n       attribute align { \"left\" | \"center\" | \"right\" }?,\r\n       [ a:defaultValue = \"\" ] attribute alt { text }?,\r\n       [ a:defaultValue = \"\" ] attribute width { text }?,\r\n       [ a:defaultValue = \"\" ] attribute height { text }?,\r\n       attribute originalSrc { text }?,\r\n       (text* | svg)\r\n     }\r\n\r\n   include \"https://www.rfc-editor.org/materials/format/SVG-1.2-RFC.rnc\"\r\n", "notes": "Without actually including the SVG RNC grammar, *this* grammar is incomplete.\r\n\r\n(Note that when this is applied, Appendix D, if still present, would need to be adjusted as well)", "submit_date": "2017-01-15", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4907", "doc-id": "RFC7489", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "B.1.1.", "orig_text": "   Example 3: SPF not in alignment:\r\n\r\n        MAIL FROM: <sender@example.net>\r\n\r\n        From: sender@child.example.com\r\n        Date: Fri, Feb 15 2002 16:54:30 -0800\r\n        To: receiver@example.org\r\n        Subject: here's a sample\r\n\r\n   In this case, the RFC5321.MailFrom parameter includes a DNS domain\r\n   that is neither the same as nor a parent of the RFC5322.From domain.\r\n   Thus, the identifiers are not in alignment.", "correct_text": "   Example 3: SPF not in alignment:\r\n\r\n        MAIL FROM: <sender@example.net>\r\n\r\n        From: sender@child.example.com\r\n        Date: Fri, Feb 15 2002 16:54:30 -0800\r\n        To: receiver@example.org\r\n        Subject: here's a sample\r\n\r\n   In this case, the RFC5322.From parameter includes a DNS domain\r\n   that is neither the same as nor a parent of the RFC5321.MailFrom\r\n   domain. Thus, the identifiers are not in alignment.", "notes": "Obviously, in the example MailFrom domain IS a parent of From domain.\n --VERIFIER NOTES-- \nexample.NET is not a parent of child.example.COM\r\n\r\nFurther, the explanatory text makes that clear.", "submit_date": "2017-01-16", "submitter_name": "Don", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4908", "doc-id": "RFC7919", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "   If a compatible TLS server receives a Supported Groups extension from\r\n   a client that includes any FFDHE group (i.e., any codepoint between\r\n   256 and 511, inclusive, even if unknown to the server), and if none\r\n   of the client-proposed FFDHE groups are known and acceptable to the\r\n   server, then the server MUST NOT select an FFDHE cipher suite.  In\r\n   this case, the server SHOULD select an acceptable non-FFDHE cipher\r\n   suite from the client's offered list.  If the extension is present\r\n   with FFDHE groups, none of the client's offered groups are acceptable\r\n   by the server, and none of the client's proposed non-FFDHE cipher\r\n   suites are acceptable to the server, the server MUST end the\r\n   connection with a fatal TLS alert of type insufficient_security(71).", "correct_text": "   If a compatible TLS server receives a Supported Groups extension from\r\n   a client that includes any FFDHE group (i.e., any codepoint between\r\n   256 and 511, inclusive, even if unknown to the server), and if none\r\n   of the client-proposed FFDHE groups are known and acceptable to the\r\n   server, then the server MUST NOT select an FFDHE cipher suite.  In\r\n   this case, the server SHOULD select an acceptable non-FFDHE cipher\r\n   suite from the client's offered list.", "notes": "The text is overly prescriptive about the alert code that needs to used if there are no acceptable cipher suites available.  If the server is unable to pick a cipher suite, it can send a handshake_failure(40) alert, which this text would prohibit.  handshake_failure is at least equally valid in practice.\r\n\r\nThis eliminates the prescriptive text about the alert type.\r\n\r\nServers eliminate cipher suites from considerations in numerous ways.  Being able to definitively identify the reason as a (perceived) shortcoming in the strength of the offered security is actually quite challenging in practice.\r\n\r\nIt's true that insufficient_security is perhaps a more desirable code to use in this case, but it's not generically possible to determine that the server configuration is \"more secure\" than the combinations on offer by the client.  Consider also the possibility that it's the server that is insecure because it doesn't some of the options offered by the client.  That's a general criticism of the value of insufficient_security, but it should at least motivate why insufficient_security should never be mandated in this way.\r\n\r\nPaul Wouters(AD): After discussion with Martin, we propose that the correction required is only the removal of \"of type insufficient_security(71).\".\r\n\r\nAs Martin explains: \r\n\r\nHaving a MUST on this is not appropriate in that sense.  What would be acceptable is:\r\n\r\n   [...] the server terminates the connection according to Section 4.1.1 of [RFC8446].\r\n\r\nOf course, that would depend on time travel in the sense that RFC 7919 pre-dates TLS 1.3 by a fair bit and so it can't really refer to it like that.\r\n", "submit_date": "2017-01-16", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 03:13:36"}, {"errata_id": "4909", "doc-id": "RFC6728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "  pattern \"\\S+\";\r\n\r\n...\r\n\r\n  pattern \"\\S(.*\\S)?\";", "correct_text": "  pattern '\\S+';\r\n\r\n...\r\n\r\n  pattern '\\S(.*\\S)?';\r\n\r\n", "notes": "RFC 7950 in section 6.1.3 says that backslash has special meaning if it is in the double-quoted string. The only characters immediately following the backslash are n, t, \\, \". Other characters are forbidden. This can be solved using single-quoted string or double backslash.", "submit_date": "2017-01-16", "submitter_name": "Pavol Vican", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7102", "doc-id": "RFC8754", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "Segments Left:  Defined in [RFC8200], Section 4.4.", "correct_text": "Segments Left:  Defined in [RFC8200], Section 4.4.\r\nSpecifically, for the SRH, the number of unprocessed \r\n128-bit entries in the Segment List.", "notes": "RFC8754 describes \u201cThe encoding of IPv6 segments in the SRH\u201d where IPv6 segments are defined in RFC8402.  RFC8402 describes binding SIDs and adjacency SIDs for SRv6. Both these SID types identify more than a single explicitly listed intermediate node to be visited.\r\n\r\nThe current definition of Segments Left only indicates it is defined in RFC8200, and RFC8200 defines it as \u201cNumber of route  segments remaining, i.e., number of explicitly listed intermediate nodes still to be visited before reaching the final destination\u201d.\r\n\r\nPrevious versions of draft-ietf-6man-segment-routing-header (0-11) referenced RFC2460/RFC8200 and described the Segments Left field by use in the SRH; as an index into the Segment List. This was removed in later versions (12/13) to consolidate the use of segments left to be specific to the segment processed (now section 4.3.1).  However, that removed the definition of its meaning in the SRH which led to the current issue.\r\n\r\nThe corrected text restores the meaning of Segments Left for the SRH in relation to Segment List (which is not defined in RFC8200), while still leaving its use during segment processing to the segment definition (section 4.3.1 or future documents).", "submit_date": "2022-08-23", "submitter_name": "Darren Dukes", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2023-06-06 21:11:09"}, {"errata_id": "4922", "doc-id": "RFC6844", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "The search for a CAA record climbs the DNS name tree from the\r\n   specified label up to but not including the DNS root '.'.", "correct_text": "The search for a CAA record must not climb the DNS name tree from the\r\n   specified label up.", "notes": "Obviously it does not make any sense to climb up. If there would be CAA record published for the \"com\" TLD, than it would make what relation to the CAA of the \"example.com\" domain? From an other viewpoint: all CAs are going to check the \"com\" TLD for CAA record if a given organization has no CAA record published in its own domain?\r\nAnother, more practical example: \"example.com\" needs a certificate for his top domain (https://example.com/), so it decides to publish the CAA record to enforce the security. Doing this it may unknowingly affect the renewal of the certificate for the wellhidden.hr.example.com where the hr.example.com domain is under different administrative authority than example.com domain itself.\n --VERIFIER NOTES-- \n   This would be a change and hence is not an erratum", "submit_date": "2017-02-03", "submitter_name": "Attila Bruncs\u00e1k", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4923", "doc-id": "RFC7635", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix B.", "orig_text": "          \"key\":\"v51N62OM65kyMvfTI08O\"", "correct_text": "        \"key\": \"ew0KICAgICJrdHkiOiJvY3QiLA0KICAgICJ\r\nraWQiOiJpZDEyMyIsDQogICAgImFsZyI6IkhTMjU2IiwNCiAgIC\r\nAiayI6IlpvUlNPckZ6Tl9GelVBNVhLTVlvVkh5emZmNW9SSnhsL\r\nUlYUnR6dEo2dUUiDQp9\"", "notes": "\"key\" according https://tools.ietf.org/html/draft-ietf-oauth-pop-key-distribution-02#section-4.2\r\n\"The 'key' parameter either contains a plain JWK structure or a JWK encrypted with a JWE.\"\r\n\r\nAccording Example Figure 2. \"key\" in draft-ietf-oauth-pop-key-distribution-02#section-4.2 \r\nIt seems they missed to write plain JWK MUST be base64 format.\r\nSo according the example coorected the above sentence:\r\n\r\n\"The 'key' parameter either contains a plain BASE64 ENCODED JWK structure or a JWK encrypted with a JWE.\"\r\n\r\nAnyhow in RFC7635 Appendix B. the\r\n\"key\" seems to be not in base64 (JWK) or JWE encrypted JWK format. \r\n(Base64 decoded key value string is \"Salted__\"....)", "submit_date": "2017-02-03", "submitter_name": "M\u00e9sz\u00e1ros Mih\u00e1ly", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2021-01-14 13:59:29"}, {"errata_id": "4924", "doc-id": "RFC6840", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "IANA Conside", "orig_text": "This document specifies no IANA Actions.", "correct_text": "Add this document as an additional reference for AD in the\r\nDNS Parameters - DNS Header Flags registry.", "notes": "RFC6840 introduces new behaviour for AD in requests.  This should be reflected in the DNS Header Flags registry otherwise it is likely DNS Implementors will overlook the new behaviour.", "submit_date": "2017-02-07", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7099", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2.1.1", "orig_text": "   The extension MUST be \"xml\" for a plain XML file, or \"xml.gz\" for an\r\n   XML file compressed using GZIP.\r\n\r\n   \"unique-id\" allows an optional unique ID generated by the Mail\r\n   Receiver to distinguish among multiple reports generated\r\n   simultaneously by different sources within the same Domain Owner.\r\n\r\n   For example, this is a possible filename for the gzip file of a\r\n   report to the Domain Owner \"example.com\" from the Mail Receiver\r\n   \"mail.receiver.example\":\r\n\r\n     mail.receiver.example!example.com!1013662812!1013749130.gz", "correct_text": "   The extension MUST be \"xml\" for a plain XML file, or \"xml.gz\" for an\r\n   XML file compressed using GZIP.\r\n\r\n   \"unique-id\" allows an optional unique ID generated by the Mail\r\n   Receiver to distinguish among multiple reports generated\r\n   simultaneously by different sources within the same Domain Owner.\r\n\r\n   For example, this is a possible filename for the gzip file of a\r\n   report to the Domain Owner \"example.com\" from the Mail Receiver\r\n   \"mail.receiver.example\":\r\n\r\n     mail.receiver.example!example.com!1013662812!1013749130.xml.gz", "notes": "The example filename uses an invalid extension (not one of \"xml\", \"xml.gz\").", "submit_date": "2018-05-28", "submitter_name": "Cris van Pelt", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-03 07:05:58"}, {"errata_id": "7100", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2.1.1", "orig_text": "   The extension MUST be \"xml\" for a plain XML file, or \"xml.gz\" for an\r\n   XML file compressed using GZIP.\r\n\r\n   \"unique-id\" allows an optional unique ID generated by the Mail\r\n   Receiver to distinguish among multiple reports generated\r\n   simultaneously by different sources within the same Domain Owner.\r\n\r\n   For example, this is a possible filename for the gzip file of a\r\n   report to the Domain Owner \"example.com\" from the Mail Receiver\r\n   \"mail.receiver.example\":\r\n\r\n     mail.receiver.example!example.com!1013662812!1013749130.gz", "correct_text": "   The extension MUST be \"xml\" for a plain XML file, or \"xml.gz\" for an\r\n   XML file compressed using GZIP.\r\n\r\n   \"unique-id\" allows an optional unique ID generated by the Mail\r\n   Receiver to distinguish among multiple reports generated\r\n   simultaneously by different sources within the same Domain Owner.\r\n\r\n   For example, this is a possible filename for the gzip file of a\r\n   report to the Domain Owner \"example.com\" from the Mail Receiver\r\n   \"mail.receiver.example\":\r\n\r\n     mail.receiver.example!example.com!1013662812!1013749130.xml.gz", "notes": "The example filename uses an invalid extension (not one of \"xml\", \"xml.gz\").", "submit_date": "2018-05-28", "submitter_name": "Cris van Pelt", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-03 07:06:40"}, {"errata_id": "4925", "doc-id": "RFC7540", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "It's unclear from the text whether PRIORITY frames affect stream states (as shown in the state machine in Section 5.1).  The original intent was that prioritization of streams was independent of the mechanics of opening and closing streams, but this was not consistently captured.\r\n\r\nTwo small additions to the document would help considerably.\r\n\r\nIn Section 5.3 (Stream Priority) add a new paragraph:\r\n\r\n> The information that an endpoint maintains for stream priority is separate from other state. Importantly, this includes stream states (Section 5.1).  A stream in any state can have its priority changed with a PRIORITY frame. The state of a stream is not changed as a result of changing its priority.  The number of streams for which state is remembered is at the discretion of an endpoint, see Section 5.3.4 for details.\r\n\r\n In Section 6.4 (PRIORITY) a new sentence at the end of the first paragraph:\r\n\r\n> Sending or receiving a PRIORITY frame does not affect the state of any stream (Section 5.1), only the priority of streams is altered.", "submit_date": "2017-02-07", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4926", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2, A.3", "orig_text": "DKIM-Signature: v=1; a=rsa-sha256; s=brisbane; d=example.com;\r\n     c=simple/simple; q=dns/txt; i=joe@football.example.com;\r\n     h=Received : From : To : Subject : Date : Message-ID;\r\n     bh=2jUSOH9NhtVGCQWNr9BrIAPreKQjO6Sn7XIkfJVOzv8=;\r\n     b=AuUoFEfDxTDkHlLXSZEpZj79LICEps6eda7W3deTVFOk4yAUoqOB\r\n     4nujc7YopdG5dWLSdNg6xNAZpOPr+kHxt1IrE+NahM6L/LbvaHut\r\n     KVdkLLkpVaVVQPzeRDI009SO2Il5Lu7rDNH6mZckBdrIx0orEtZV\r\n     4bmp/YzhwvcubU4=;\r\nReceived: from client1.football.example.com  [192.0.2.1]\r\n     by submitserver.example.com with SUBMISSION;\r\n     Fri, 11 Jul 2003 21:01:54 -0700 (PDT)\r\nFrom: Joe SixPack <joe@football.example.com>\r\nTo: Suzie Q <suzie@shopping.example.net>\r\nSubject: Is dinner ready?\r\nDate: Fri, 11 Jul 2003 21:00:37 -0700 (PDT)\r\nMessage-ID: <20030712040037.46341.5F8J@football.example.com>\r\n", "correct_text": "DKIM-Signature: v=1; a=rsa-sha256; s=brisbane; d=example.com;\r\n      c=simple/simple; q=dns/txt; i=joe@football.example.com;\r\n      h=Received : From : To : Subject : Date : Message-ID;\r\n      bh=2jUSOH9NhtVGCQWNr9BrIAPreKQjO6Sn7XIkfJVOzv8=;\r\n      b=AuUoFEfDxTDkHlLXSZEpZj79LICEps6eda7W3deTVFOk4yAUoqOB\r\n      4nujc7YopdG5dWLSdNg6xNAZpOPr+kHxt1IrE+NahM6L/LbvaHut\r\n      KVdkLLkpVaVVQPzeRDI009SO2Il5Lu7rDNH6mZckBdrIx0orEtZV\r\n      4bmp/YzhwvcubU4=;\r\nReceived: from client1.football.example.com  [192.0.2.1]\r\n      by submitserver.example.com with SUBMISSION;\r\n      Fri, 11 Jul 2003 21:01:54 -0700 (PDT)\r\nFrom: Joe SixPack <joe@football.example.com>\r\nTo: Suzie Q <suzie@shopping.example.net>\r\nSubject: Is dinner ready?\r\nDate: Fri, 11 Jul 2003 21:00:37 -0700 (PDT)\r\nMessage-ID: <20030712040037.46341.5F8J@football.example.com>", "notes": "The \"simple\" header canonicalization doesn't change the header fields in any way.\r\n\r\nFolded header fields are missing one space of indentation (they have 5 spaces instead of 6), which makes the verification fail. Note that the plain text version of the RFC adds a prefix of three spaces before each line of text, which must be ignored.\r\n\r\nVerifier note: this was disposed of as per the IETF DKIM mailing list discussion.\r\n\r\nIn section A.3, the indentation is changed again (5 spaces instead of 6 + the \"b=\" tag has 2 additional spaces of indentation).\r\n\r\nTest cases:\r\n- opendkim: https://github.com/cyrusimap/opendkim/blob/ab2934e131cbe670b49f11db9daf8cd1223e3839/libopendkim/tests/t-testdata.h#L74\r\n- go-dkim: https://github.com/emersion/go-dkim/blob/master/verify_test.go#L9", "submit_date": "2017-02-07", "submitter_name": "Simon Ser", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4927", "doc-id": "RFC6840", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "IANA Conside", "orig_text": "(This document specifies no IANA Actions.)", "correct_text": "(Add following text:)\r\nThis document adds an additional reference for CD bit in the DNS\r\nParameters - DNS Header Flags registry.", "notes": "RFC6840 introduces new requirements for validating resolvers. This should be reflected in the DNS Header Flags registry otherwise it is likely DNS Implementors will overlook the new behaviour.", "submit_date": "2017-02-08", "submitter_name": "Petr \u0160pa\u010dek", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4928", "doc-id": "RFC6840", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "IANA Conside", "orig_text": "(This document specifies no IANA Actions.)", "correct_text": "(Add following text:)\r\nThis document adds an additional reference for DO bit in the DNS\r\nParameters - DNS Header Flags registry.", "notes": "RFC6840 introduces new behaviour for DO bit in replies. This should be reflected in the DNS Header Flags registry otherwise it is likely DNS Implementors will overlook the new behaviour.", "submit_date": "2017-02-08", "submitter_name": "Petr \u0160pa\u010dek", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4929", "doc-id": "RFC5954", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   Because the <hexpart> production rule is defined such that two of its\r\n   alternatives already include the \"::\" token, this may yield to the\r\n   faulty construction of an IPv6-mapped IPv4 address with an extra\r\n   colon when expanding those alternatives.", "correct_text": "   Because the <hexpart> production rule is defined such that two of its\r\n   alternatives already include the \"::\" token, this may yield to the\r\n   faulty construction of an IPv4-mapped IPv6 address with an extra\r\n   colon when expanding those alternatives.", "notes": "The text refers to an IPv6 address, and thus should use the proper term \"IPv4-mapped IPv6 address,\" in line with the section title, the rest of the document, and (in particular) RFC 4291.", "submit_date": "2017-02-08", "submitter_name": "David van Moolenbroek", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4930", "doc-id": "RFC7296", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.16", "orig_text": "   Note that since IKE passes an indication of initiator identity in the\r\n   first message in the IKE_AUTH exchange, the responder SHOULD NOT send\r\n   EAP Identity requests.  The initiator MAY, however, respond to such\r\n   requests if it receives them.", "correct_text": "", "notes": "The last sentence of this section contains unnecessary repetition written above (the last sentence in description of Type field).\n --VERIFIER NOTES-- \n   The text is fine and clear as is.", "submit_date": "2017-02-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-11 00:02:03"}, {"errata_id": "4931", "doc-id": "RFC6733", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.9", "orig_text": "Figure 6.1 provides an example of message routing using the procedures\r\nlisted in these sections.\r\n\r\n(Origin-Host=nas.example.net)    (Origin-Host=nas.example.net)\r\n(Origin-Realm=example.net)       (Origin-Realm=example.net)\r\n(Destination-Realm=example.com)  (Destination-Realm=example.com)\r\n                                 (Route-Record=nas.example.net)\r\n\r\n+------+      ------>      +------+      ------>      +------+\r\n|      |     (Request)     |      |      (Request)    |      |\r\n| NAS  +-------------------+ DRL  +-------------------+ HMS  |\r\n|      |                   |      |                   |      |\r\n+------+     <------       +------+     <------       +------+\r\nexample.net    (Answer)   example.net     (Answer)   example.com\r\n(Origin-Host=hms.example.com)   (Origin-Host=hms.example.com)\r\n(Origin-Realm=example.com)      (Origin-Realm=example.com)\r\n\r\n       Figure 6: Routing of Diameter messages", "correct_text": "Figure 6.1 provides an example of message routing using the procedures\r\nlisted in these sections.\r\n\r\n(Origin-Host=nas.example.net)    (Origin-Host=nas.example.net)\r\n(Origin-Realm=example.net)       (Origin-Realm=example.net)\r\n(Destination-Realm=example.com)  (Destination-Realm=example.com)\r\n(Route-Record=nas.example.net)*  (Route-Record=nas.example.net)\r\n                                 (Route-Record=drl.example.net)*\r\n+------+      ------>      +------+      ------>      +------+\r\n|      |     (Request)     |      |      (Request)    |      |\r\n| NAS  +-------------------+ DRL  +-------------------+ HMS  |\r\n|      |                   |      |                   |      |\r\n+------+     <------       +------+     <------       +------+\r\nexample.net    (Answer)   example.net     (Answer)   example.com\r\n(Origin-Host=hms.example.com)   (Origin-Host=hms.example.com)\r\n(Origin-Realm=example.com)      (Origin-Realm=example.com)\r\n\r\n*Optional.\r\n\r\n                  Figure 6: Routing of Diameter messages", "notes": "The relay or proxy agent should append their own identity optionally in an additional Route-Record AVP (282).\n --VERIFIER NOTES-- \nThe Route-Record is primarily used to detect loops:\r\n\r\n6.1.3.  Receiving Requests\r\n\r\n   A relay or proxy agent MUST check for forwarding loops when receiving\r\n   requests.  A loop is detected if the server finds its own identity in\r\n   a Route-Record AVP.  When such an event occurs, the agent MUST answer\r\n   with the Result-Code AVP set to DIAMETER_LOOP_DETECTED.\r\n\r\nHow  to populate the Route-Record is described twice:\r\n\r\nSection 2.9:\r\n\r\n   As noted in Section 6.1.9, a relay or proxy agent MUST append a\r\n   Route-Record AVP to all requests forwarded.  The AVP contains the\r\n   identity of the peer from which the request was received.\r\n\r\n6.7.1.  Route-Record AVP\r\n\r\n   The Route-Record AVP (AVP Code 282) is of type DiameterIdentity.  The\r\n   identity added in this AVP MUST be the same as the one received in\r\n   the Origin-Host of the Capabilities Exchange message.\r\n\r\nTherefore, it's  \"rather clear\" that a relay and a proxy MUST append a Route-Record to all requests forwarded with the identity of the peer from which the request was received\r\n\r\nI think that Luis was maybe misled by the following text:\r\n\r\n6.1.3.  Receiving Requests\r\n\r\n   A relay or proxy agent MUST check for forwarding loops when receiving\r\n   requests.  A loop is detected if the server finds its own identity in\r\n   a Route-Record AVP.  When such an event occurs, the agent MUST answer\r\n   with the Result-Code AVP set to DIAMETER_LOOP_DETECTED.\r\n\r\nin which \"find its own identity\" might have been confusing out of context. But sections 2.9 and 6.7.1 should have clarified this misunderstanding. \r\n\r\nWhatever the reason for the proposed errata, it can be safely rejected.\r\n", "submit_date": "2017-02-09", "submitter_name": "Luiz Solis", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4932", "doc-id": "RFC6944", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   This document lists the implementation status of cryptographic\r\n   algorithms used with DNSSEC.  These algorithms are maintained in an\r\n   IANA registry at http://www.iana.org/assignments/dns-sec-alg-numbers.\r\n   Because this document establishes the implementation status of every\r\n   algorithm, it has been listed as a reference for the registry itself.", "correct_text": "   This document lists the implementation status of cryptographic\r\n   algorithms used with DNSSEC.  These algorithms are maintained in an\r\n   IANA registry at http://www.iana.org/assignments/dns-sec-alg-numbers.\r\n   Because this document establishes the implementation status of every\r\n   algorithm, it has been listed as a reference for the registry itself.\r\n\r\n   Given significance of status change of RSAMD5 algorithm, a reference\r\n   to this RFC should be added to the registry.", "notes": "\"RSAMD5 has an implementation status of Must Not Implement because of known weaknesses in MD5.\"\r\n\r\nThis is very important. An additional reference would lower likelihood that DNS Implementors will overlook the important piece of information.", "submit_date": "2017-02-12", "submitter_name": "Petr \u0160pa\u010dek", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7101", "doc-id": "RFC4506", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.3", "orig_text": "Enumerations have the same representation as signed integers.\r\nEnumerations are handy for describing subsets of the integers.\r\nEnumerated data is declared as follows:\r\n\r\n    enum { name-identifier = constant, ... } identifier;\r\n\r\nFor example, the three colors red, yellow, and blue could be\r\ndescribed by an enumerated type:\r\n\r\n    enum { RED = 2, YELLOW = 3, BLUE = 5 } colors;", "correct_text": "...\r\n\r\n    enum identifier { name-identifier = constant, ... } ;\r\n         ^^^^^^^^^^\r\n\r\n...\r\n\r\n    enum colors { RED = 2, YELLOW = 3, BLUE = 5 } ;\r\n         ^^^^^^ ", "notes": "The grammar for this definition, as specified in 6.3, is:\r\n\r\n    type-def:\r\n           \"typedef\" declaration \";\"\r\n         | \"enum\" identifier enum-body \";\"\r\n         | \"struct\" identifier struct-body \";\"\r\n         | \"union\" identifier union-body \";\"\r\n\r\nIt is unclear whether the original intent was for identifies to precede or succeed the definition bodies. The example in section 7 shows: enum filekind { ... }\r\n\r\nAnd several RFCs which depend on 4506 have also followed that pattern, such as this example from RFC 5531, section 8.2: enum auth_flavor { ... }", "submit_date": "2022-08-21", "submitter_name": "Dylan Allbee", "verifier_id": "", "verifier_name": null, "update_date": "2022-08-22 21:38:05"}, {"errata_id": "4937", "doc-id": "RFC3947", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   The source IP and port address of the INITIAL-CONTACT notification\r\n   for the host behind NAT are not meaningful (as NAT can change them),\r\n   so the IP and port numbers MUST NOT be used to determine which\r\n   IKE/IPsec SAs to remove (see [RFC3715], section 2.1, case c).  The ID\r\n   payload sent from the other end SHOULD be used instead; i.e., when an\r\n   INITIAL-CONTACT notification is received from the other end, the\r\n   receiving end SHOULD remove all the SAs associated with the same ID\r\n   payload.", "correct_text": "   The source IP and port number of the INITIAL-CONTACT notification\r\n   for the host behind NAT are not meaningful (as NAT can change them),\r\n   so the IP and port numbers MUST NOT be used to determine which\r\n   IKE/IPsec SAs to remove (see [RFC3715], section 2.1, case c).  The ID\r\n   payload sent from the other end SHOULD be used instead; i.e., when an\r\n   INITIAL-CONTACT notification is received from the other end, the\r\n   receiving end SHOULD remove all the SAs associated with the same ID\r\n   payload.", "notes": "Port address should be replaced with port number.", "submit_date": "2017-02-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-10 23:51:03"}, {"errata_id": "4948", "doc-id": "RFC7252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6", "orig_text": "For a presented request, a CoAP endpoint MUST NOT use a stored\r\nresponse, unless:\r\n\r\no  the presented request method and that used to obtain the stored\r\n   response match,\r\n\r\no  all options match between those in the presented request and those\r\n   of the request used to obtain the stored response (which includes\r\n   the request URI), except that there is no need for a match of any\r\n   request options marked as NoCacheKey (Section 5.4) or recognized\r\n   by the Cache and fully interpreted with respect to its specified\r\n   cache behavior (such as the ETag request option described in\r\n   Section 5.10.6; see also Section 5.4.2), and\r\n\r\no  the stored response is either fresh or successfully validated as\r\n   defined below.\r\n\r\nThe set of request options that is used for matching the cache entry\r\nis also collectively referred to as the \"Cache-Key\".", "correct_text": "For a presented request, a CoAP endpoint MUST NOT use a stored\r\nresponse, unless:\r\n\r\no  the presented request method and that used to obtain the stored\r\n   response match,\r\n\r\no  all options match between those in the presented request and those\r\n   of the request used to obtain the stored response (which includes\r\n   the request URI), except that there is no need for a match of any\r\n   request options marked as NoCacheKey (Section 5.4) or recognized\r\n   by the Cache and fully interpreted with respect to its specified\r\n   cache behavior (such as the ETag request option described in\r\n   Section 5.10.6; see also Section 5.4.2), \r\n\r\no  the payload of the presented request and the payload of the\r\n   request used to obtain the stored response match, and\r\n\r\no  the stored response is either fresh or successfully validated as\r\n   defined below.\r\n\r\nThe set of request options that is used for matching the cache entry\r\nplus (if applicable) the request payload are also collectively referred\r\nto as the \"Cache-Key\".", "notes": "CoAP servers may return error responses in reply to requests that are invalid at the CoAP level (e.g., 4.02 Bad Option if the client includes an unrecognized option) or at the application level above (e.g., 4.00 Bad Request if the client includes a malformed payload according to application semantics).\r\n\r\nIf the error response does not depend on the request payload, then it is desirable that repeated requests that differ only in the payload can be satisfied with the same cached response. E.g., repeated requests for a non-existing resource should result in a cached 4.04 Not Found response as often as possible, regardless of the payload, rather than hit the server every time.\r\n\r\nIf the error response depends on the request payload, then it is not desirable that cached responses are reused for repeated requests that differ only in the payload. E.g., a client should not receive an error response for a valid request payload because another client sent an identical request but with a malformed request payload. In this case, including the request payload in the Cache-Key would give the expected result.\r\n\r\nThe original text does not include the request in the Cache-Key, which may lead to unexpected results. The corrected text changes that.\r\n\r\nSince CoAP does not provide any indication in responses to distinguish between the two cases, caches generally cannot determine whether the response depends on the request payload or not and thus must always include the request payload in the Cache-Key to give the expected result. (As an exception, a cache at an origin server may be able to determine whether a cached response depends on the request payload or not, and thus can reuse responses accordingly. This already applies to responses that do not depend on the request method.)", "submit_date": "2017-02-22", "submitter_name": "Klaus Hartke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:14:15"}, {"errata_id": "4949", "doc-id": "RFC7252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.10.7", "orig_text": "If any\r\nof these reserved option numbers occurs in addition to Location-Path\r\nand/or Location-Query and are not supported, then a 4.02 (Bad Option)\r\nerror MUST be returned.", "correct_text": "If any\r\nof these reserved option numbers occurs in addition to Location-Path\r\nand/or Location-Query and are not supported, then the response MUST\r\nbe rejected (Sections 4.2 and 4.3).", "notes": "The Location-* options are used in responses. A client cannot return a 4.02 (Bad Option) response in reply to a response. The correct behavior is to reject the response.", "submit_date": "2017-02-22", "submitter_name": "Klaus Hartke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:07:22"}, {"errata_id": "4933", "doc-id": "RFC5766", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "17.3.3", "orig_text": "An attacker might attempt to disrupt service to other users of the\r\nTURN server by sending Refresh requests or CreatePermission requests\r\nthat (through source address spoofing) appear to be coming from\r\nanother user of the TURN server.  TURN prevents this by requiring\r\nthat the credentials used in CreatePermission, Refresh, and\r\nChannelBind messages match those used to create the initial\r\nallocation.  Thus, the fake requests from the attacker will be\r\nrejected.", "correct_text": "", "notes": "When using short-term, credentials expire after a specific amount of time (such as 5\r\nminutes)  and clients get new credentials. The restriction imposed at section 17.3.3 \r\nprevents from refreshing allocation or permission using the new credentials.\r\n\r\nThis RFC approves RFC 5389. So one can use short-term credentials.  But short-term credentials are useless if it can not be used to refresh allocation or permission.\r\n\r\n\r\nThe goal of 17.3.3 can be achieved by sending 438 with the new nonce.\n --VERIFIER NOTES-- \nSo TURN does not actually specify the usage of short-term credentials. It mandates support of long-term credentials as authentication mechanism. Also RFC 7635 (STUN for Third party Authorization) specifies how to handle expire of the access token. This is clearer in the replacement of RFC 5766 that will soon be published that specifies the following in Section 7.2:\r\n\r\n        If\r\n        the request is authenticated, the authentication MUST be done\r\n        either using the long-term credential mechanism of\r\n        [I-D.ietf-tram-stunbis] or the STUN Extension for Third-Party\r\n        Authorization [RFC7635] unless the client and server agree to\r\n        use another mechanism through some procedure outside the scope\r\n        of this document.\r\n\r\n", "submit_date": "2017-02-15", "submitter_name": "shakeeb", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-02-17 09:48:40"}, {"errata_id": "4934", "doc-id": "RFC7530", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "9.1.7.", "orig_text": "   When a request is received, its sequence number (r) is compared to\r\n   that of the last one received (L).  Only if it has the correct next\r\n   sequence, normally L + 1, is the request processed beyond the point\r\n   of seqid checking.  Given a properly functioning client, the response\r\n   to (r) must have been received before the last request (L) was sent.", "correct_text": "   When a request is received, its sequence number (r) is compared to\r\n   that of the last one received (L).  Only if it has the correct next\r\n   sequence, normally L + 1, is the request processed beyond the point\r\n   of seqid checking.  Given a properly functioning client, the response\r\n   to (L) must have been received before the subsequent request (r) was\r\n   sent.", "notes": "", "submit_date": "2017-02-15", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4935", "doc-id": "RFC8080", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "6.  Examples\r\n\r\n6.1.  Ed25519 Examples\r\n\r\nPrivate-key-format: v1.2\r\nAlgorithm: 15 (ED25519)\r\nPrivateKey: ODIyNjAzODQ2MjgwODAxMjI2NDUxOTAyMDQxNDIyNjI=\r\n\r\nexample.com. 3600 IN DNSKEY 257 3 15 (\r\n             l02Woi0iS8Aa25FQkUd9RMzZHJpBoRQwAQEX1SxZJA4= )\r\n\r\nexample.com. 3600 IN DS 3613 15 2 (\r\n             3aa5ab37efce57f737fc1627013fee07bdf241bd10f3b1964ab55c78e79\r\n             a304b )\r\n\r\nexample.com. 3600 IN MX 10 mail.example.com.\r\n\r\nexample.com. 3600 IN RRSIG MX 3 3600 (\r\n             1440021600 1438207200 3613 example.com. (\r\n             Edk+IB9KNNWg0HAjm7FazXyrd5m3Rk8zNZbvNpAcM+eysqcUOMIjWoevFkj\r\n             H5GaMWeG96GUVZu6ECKOQmemHDg== )\r\n\r\n\r\n\r\nSury & Edmonds               Standards Track                    [Page 3]\r\n\f\r\nRFC 8080                    EdDSA for DNSSEC               February 2017\r\n\r\n\r\nPrivate-key-format: v1.2\r\nAlgorithm: 15 (ED25519)\r\nPrivateKey: DSSF3o0s0f+ElWzj9E/Osxw8hLpk55chkmx0LYN5WiY=\r\n\r\nexample.com. 3600 IN DNSKEY 257 3 15 (\r\n             zPnZ/QwEe7S8C5SPz2OfS5RR40ATk2/rYnE9xHIEijs= )\r\n\r\nexample.com. 3600 IN DS 35217 15 2 (\r\n             401781b934e392de492ec77ae2e15d70f6575a1c0bc59c5275c04ebe80c\r\n             6614c )\r\n\r\nexample.com. 3600 IN MX 10 mail.example.com.\r\n\r\nexample.com. 3600 IN RRSIG MX 3 3600 (\r\n             1440021600 1438207200 35217 example.com. (\r\n             5LL2obmzdqjWI+Xto5eP5adXt/T5tMhasWvwcyW4L3SzfcRawOle9bodhC+\r\n             oip9ayUGjY9T/rL4rN3bOuESGDA== )\r\n\r\n6.2.  Ed448 Examples\r\n\r\nPrivate-key-format: v1.2\r\nAlgorithm: 16 (ED448)\r\nPrivateKey: xZ+5Cgm463xugtkY5B0Jx6erFTXp13rYegst0qRtNsOYnaVpMx0Z/c5EiA9x\r\n            8wWbDDct/U3FhYWA\r\n\r\nexample.com. 3600 IN DNSKEY 257 3 16 (\r\n             3kgROaDjrh0H2iuixWBrc8g2EpBBLCdGzHmn+G2MpTPhpj/OiBVHHSfPodx\r\n             1FYYUcJKm1MDpJtIA )\r\n\r\nexample.com. 3600 IN DS 9713 16 2 (\r\n             6ccf18d5bc5d7fc2fceb1d59d17321402f2aa8d368048db93dd811f5cb2\r\n             b19c7 )\r\n\r\nexample.com. 3600 IN MX 10 mail.example.com.\r\n\r\nexample.com. 3600 IN RRSIG MX 3 3600 (\r\n             1440021600 1438207200 9713 example.com. (\r\n             Nmc0rgGKpr3GKYXcB1JmqqS4NYwhmechvJTqVzt3jR+Qy/lSLFoIk1L+9e3\r\n             9GPL+5tVzDPN3f9kAwiu8KCuPPjtl227ayaCZtRKZuJax7n9NuYlZJIusX0\r\n             SOIOKBGzG+yWYtz1/jjbzl5GGkWvREUCUA )\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSury & Edmonds               Standards Track                    [Page 4]\r\n\f\r\nRFC 8080                    EdDSA for DNSSEC               February 2017\r\n\r\n\r\nPrivate-key-format: v1.2\r\nAlgorithm: 16 (ED448)\r\nPrivateKey: WEykD3ht3MHkU8iH4uVOLz8JLwtRBSqiBoM6fF72+Mrp/u5gjxuB1DV6NnPO\r\n            2BlZdz4hdSTkOdOA\r\n\r\nexample.com. 3600 IN DNSKEY 257 3 16 (\r\n             kkreGWoccSDmUBGAe7+zsbG6ZAFQp+syPmYUurBRQc3tDjeMCJcVMRDmgcN\r\n             Lp5HlHAMy12VoISsA )\r\n\r\nexample.com. 3600 IN DS 38353 16 2 (\r\n             645ff078b3568f5852b70cb60e8e696cc77b75bfaaffc118cf79cbda1ba\r\n             28af4 )\r\n\r\nexample.com. 3600 IN MX 10 mail.example.com.\r\n\r\nexample.com. 3600 IN RRSIG MX 3 3600 (\r\n             1440021600 1438207200 38353 example.com. (\r\n             +JjANio/LIzp7osmMYE5XD3H/YES8kXs5Vb9H8MjPS8OAGZMD37+LsCIcjg\r\n             5ivt0d4Om/UaqETEAsJjaYe56CEQP5lhRWuD2ivBqE0zfwJTyp4WqvpULbp\r\n             vaukswvv/WNEFxzEYQEIm9+xDlXj4pMAMA )", "correct_text": "6.  Examples\r\n\r\n6.1.  Ed25519 Examples\r\n\r\nPrivate-key-format: v1.2\r\nAlgorithm: 15 (ED25519)\r\nPrivateKey: ODIyNjAzODQ2MjgwODAxMjI2NDUxOTAyMDQxNDIyNjI=\r\n\r\nexample.com. 3600 IN DNSKEY 257 3 15 (\r\n             l02Woi0iS8Aa25FQkUd9RMzZHJpBoRQwAQEX1SxZJA4= )\r\n\r\nexample.com. 3600 IN DS 3613 15 2 (\r\n             3aa5ab37efce57f737fc1627013fee07bdf241bd10f3b1964ab55c78e79\r\n             a304b )\r\n\r\nexample.com. 3600 IN MX 10 mail.example.com.\r\n\r\nexample.com. 3600 IN RRSIG MX 15 2 3600 (\r\n             1440021600 1438207200 3613 example.com. (\r\n             oL9krJun7xfBOIWcGHi7mag5/hdZrKWw15jPGrHpjQeRAvTdszaPD+QLs3f\r\n             x8A4M3e23mRZ9VrbpMngwcrqNAg== )\r\n\r\n\r\n\r\nSury & Edmonds               Standards Track                    [Page 3]\r\n\f\r\nRFC 8080                    EdDSA for DNSSEC               February 2017\r\n\r\n\r\nPrivate-key-format: v1.2\r\nAlgorithm: 15 (ED25519)\r\nPrivateKey: DSSF3o0s0f+ElWzj9E/Osxw8hLpk55chkmx0LYN5WiY=\r\n\r\nexample.com. 3600 IN DNSKEY 257 3 15 (\r\n             zPnZ/QwEe7S8C5SPz2OfS5RR40ATk2/rYnE9xHIEijs= )\r\n\r\nexample.com. 3600 IN DS 35217 15 2 (\r\n             401781b934e392de492ec77ae2e15d70f6575a1c0bc59c5275c04ebe80c\r\n             6614c )\r\n\r\nexample.com. 3600 IN MX 10 mail.example.com.\r\n\r\nexample.com. 3600 IN RRSIG MX 15 2 3600 (\r\n             1440021600 1438207200 35217 example.com. (\r\n             zXQ0bkYgQTEFyfLyi9QoiY6D8ZdYo4wyUhVioYZXFdT410QPRITQSqJSnzQ\r\n             oSm5poJ7gD7AQR0O7KuI5k2pcBg== )\r\n\r\n6.2.  Ed448 Examples\r\n\r\nPrivate-key-format: v1.2\r\nAlgorithm: 16 (ED448)\r\nPrivateKey: xZ+5Cgm463xugtkY5B0Jx6erFTXp13rYegst0qRtNsOYnaVpMx0Z/c5EiA9x\r\n            8wWbDDct/U3FhYWA\r\n\r\nexample.com. 3600 IN DNSKEY 257 3 16 (\r\n             3kgROaDjrh0H2iuixWBrc8g2EpBBLCdGzHmn+G2MpTPhpj/OiBVHHSfPodx\r\n             1FYYUcJKm1MDpJtIA )\r\n\r\nexample.com. 3600 IN DS 9713 16 2 (\r\n             6ccf18d5bc5d7fc2fceb1d59d17321402f2aa8d368048db93dd811f5cb2\r\n             b19c7 )\r\n\r\nexample.com. 3600 IN MX 10 mail.example.com.\r\n\r\nexample.com. 3600 IN RRSIG MX 16 2 3600 (\r\n             1440021600 1438207200 9713 example.com. (\r\n             3cPAHkmlnxcDHMyg7vFC34l0blBhuG1qpwLmjInI8w1CMB29FkEAIJUA0am\r\n             xWndkmnBZ6SKiwZSAxGILn/NBtOXft0+Gj7FSvOKxE/07+4RQvE581N3Aj/\r\n             JtIyaiYVdnYtyMWbSNyGEY2213WKsJlwEA )\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nSury & Edmonds               Standards Track                    [Page 4]\r\n\f\r\nRFC 8080                    EdDSA for DNSSEC               February 2017\r\n\r\n\r\nPrivate-key-format: v1.2\r\nAlgorithm: 16 (ED448)\r\nPrivateKey: WEykD3ht3MHkU8iH4uVOLz8JLwtRBSqiBoM6fF72+Mrp/u5gjxuB1DV6NnPO\r\n            2BlZdz4hdSTkOdOA\r\n\r\nexample.com. 3600 IN DNSKEY 257 3 16 (\r\n             kkreGWoccSDmUBGAe7+zsbG6ZAFQp+syPmYUurBRQc3tDjeMCJcVMRDmgcN\r\n             Lp5HlHAMy12VoISsA )\r\n\r\nexample.com. 3600 IN DS 38353 16 2 (\r\n             645ff078b3568f5852b70cb60e8e696cc77b75bfaaffc118cf79cbda1ba\r\n             28af4 )\r\n\r\nexample.com. 3600 IN MX 10 mail.example.com.\r\n\r\nexample.com. 3600 IN RRSIG MX 16 2 3600 (\r\n             1440021600 1438207200 38353 example.com. (\r\n             E1/oLjSGIbmLny/4fcgM1z4oL6aqo+izT3urCyHyvEp4Sp8Syg1eI+lJ57C\r\n             SnZqjJP41O/9l4m0AsQ4f7qI1gVnML8vWWiyW2KXhT9kuAICUSxv5OWbf81\r\n             Rq7Yu60npabODB0QFPb/rkW3kUZmQ0YQUA )", "notes": "The script used to generate the examples (see https://gitlab.labs.nic.cz/labs/ietf/blob/master/dnskey.py) contains two errors that make the RRSIG records in the example section invalid.\r\n1. The script fails to print the algorithm identifier (15 & 16, TBD1 & TBD2 in earlier drafts) for RRSIGs, and\r\n2. the implementation of label counting includes the root zone as a label, giving an incorrect count of 3 rather than 2.\r\n\r\nThe first bug is more cosmetic but does result in unparsable RRSIG records, while the second bug causes invalid signatures to be produced.\r\n\r\nWith these two bugs corrected (and no other changes) the script produces valid examples which are included in the correction above. They have been successfully tested with an independent implementation of RFC 8080 based on https://github.com/miekg/dns & https://godoc.org/golang.org/x/crypto/ed25519 .", "submit_date": "2017-02-16", "submitter_name": "Tom Thorogood", "verifier_id": "", "verifier_name": "Stephen Farrell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4936", "doc-id": "RFC3947", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   The NAT-OA payloads are sent inside the first and second packets of\r\n   Quick Mode.  The initiator MUST send the payloads if it proposes any\r\n   UDP-Encapsulated-Transport mode, and the responder MUST send the\r\n   payload only if it selected UDP-Encapsulated-Transport mode.  It is\r\n   possible that the initiator sends the NAT-OA payload but proposes\r\n   both UDP-Encapsulated transport and tunnel mode.  Then the responder\r\n   selects the UDP-Encapsulated tunnel mode and does not send the NAT-OA\r\n   payload back.", "correct_text": "   The NAT-OA payloads are sent inside the first and second packets of\r\n   Quick Mode.  The initiator MUST send the payloads if it proposes any\r\n   UDP-Encapsulated mode, and the responder MUST send the\r\n   payload only if it selected UDP-Encapsulated-Transport mode.  It is\r\n   possible that the initiator sends the NAT-OA payload but proposes\r\n   both UDP-Encapsulated transport and tunnel mode.  Then the responder\r\n   selects the UDP-Encapsulated tunnel mode and does not send the NAT-OA\r\n   payload back.", "notes": "\n --VERIFIER NOTES-- \nThis is an incorrect errata to the RFC3947 (IKEv1 NAT-T negotiation).\r\n\r\nIt asks to change where initiator MUST send NAT-OA payloads if it proposes any UDP-Encapsulation mode, compared to the proposing EDP-Encapsulated-Transport mode. The original text is correct, we only need to send NAT-OA payloads if UDP-Encapsulated-Transport mode is proposed, it is not required if only UDP-Encapsulated-Tunnel mode is proposed.    ", "submit_date": "2017-02-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-10 23:48:13"}, {"errata_id": "4944", "doc-id": "RFC4360", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Type high    |  Type low(*)  |                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+          Value                |\r\n      |                                                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n             0 1 2 3 4 5 6 7\r\n            +-+-+-+-+-+-+-+-+\r\n            |I|T|           |\r\n            +-+-+-+-+-+-+-+-+\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | 0x00 or 0x40  |   Sub-Type    |    Global Administrator       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Local Administrator                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | 0x01 or 0x41  |   Sub-Type    |    Global Administrator       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Global Administrator (cont.)  |    Local Administrator        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | 0x03 or 0x43  |   Sub-Type    |                Value          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Value (cont.)                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\n", "correct_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  Type high    |  Type low(*)  |                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+          Value                |\r\n      |                                                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n            0 1 2 3 4 5 6 7\r\n            +-+-+-+-+-+-+-+-+\r\n            |I|T|           |\r\n            +-+-+-+-+-+-+-+-+\r\n\r\n   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | 0x00 or 0x40  |   Sub-Type    |    Global Administrator       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                     Local Administrator                       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | 0x01 or 0x41  |   Sub-Type    |    Global Administrator       |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Global Administrator (cont.)  |    Local Administrator        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | 0x03 or 0x43  |   Sub-Type    |                Value          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Value (cont.)                         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The packet format convention used in this RFC is different from how it is commonly used.\n --VERIFIER NOTES-- \nWhile the format used may not be the \"common\" one, the representation is clear and there's no need for this errata.", "submit_date": "2017-02-21", "submitter_name": "Yang Yu", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4938", "doc-id": "RFC7714", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11", "orig_text": "A Key Derivation Function (KDF) is used to derive all of the required\r\nencryption and authentication keys from a secret value shared by the\r\nendpoints.  The AEAD_AES_128_GCM algorithm MUST use the (128-bit)\r\nAES_CM PRF KDF described in [RFC3711].  AEAD_AES_256_GCM MUST use the\r\nAES_256_CM_PRF KDF described in [RFC6188].", "correct_text": "A Key Derivation Function (KDF) is used to derive all of the required\r\nencryption and authentication keys from a secret value shared by the\r\nendpoints.  The AEAD_AES_128_GCM algorithm MUST use the (128-bit)\r\nAES_CM PRF KDF described in [RFC3711].  AEAD_AES_256_GCM MUST use the\r\nAES_256_CM_PRF KDF described in [RFC6188].  Since the KDF functions in\r\nthose RFCs assume as input a 112-bit master salt, the 96-bit master\r\nsalt specified in this document must be multiplied by 2^16 to form the\r\n112-bit salt used as the master salt in those key derivation functions.", "notes": "The salt specified in RFC 7714 is 96 bits in length, but intended for use in KDF functions defined in RFC 3711.  This led to different interpretations when implementing this RFC.  A more complete description was presented on the avtcore mailing list (https://mailarchive.ietf.org/arch/msg/avt/IRfLuNKglD3qhqwSz3v3t0CG6fA) and, after some dialog, there seemed to be agreement to adopt the approach most widely implemented (https://mailarchive.ietf.org/arch/msg/avt/-C1cIWQXpyzS2KfBjGR6B2kK92w).  This suggested text is intended to reflect that agreement.  In effect, 16 zero bits are padded to the right of the salt value  defined in RFC 7714 (creating a 112 bit salt value) before it is used as described in the KDF functions defined in RFC 3711 that require a 112 bit salt value.", "submit_date": "2017-02-16", "submitter_name": "Paul E. Jones", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-11-08 08:41:29"}, {"errata_id": "4939", "doc-id": "RFC1925", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "No matter how hard you push and no matter what the priority,\r\n        you can't increase the speed of light.", "correct_text": "No matter how hard you push and no matter what the priority, \r\nyou can't increase the speed of light. You can, however, \r\nslow it down.", "notes": "Light travels more slowly through media such as glass, and the speed depends on frequency - this is how refraction works.\n --VERIFIER NOTES-- \nThe erratum would have been correct if the original text had said \u201cspeed of light in vacuum\u201c, or its synonym, \u201cc\u201d. But it didn\u2019t, so as far as I can see it\u2019s correct, and consistent with the observations made in the notes that were submitted.", "submit_date": "2017-02-17", "submitter_name": "T Rogers", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-02-11 15:25:03"}, {"errata_id": "4940", "doc-id": "RFC4194", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "   [2]  Eastlake, 3rd, D. and P. Jones, \"US Secure Hash Algorithm 1\r\n        (SHA1)\", BCP 14, RFC 3174, September 2001.", "correct_text": "   [2]  Eastlake, 3rd, D. and P. Jones, \"US Secure Hash Algorithm 1\r\n        (SHA1)\", RFC 3174, September 2001.", "notes": "RFC 3174 is not part of BCP 14.", "submit_date": "2017-02-19", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 21:00:05"}, {"errata_id": "4941", "doc-id": "RFC4194", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "   [4]  Makoto, M., Simon, S., and D. Dan, \"(Extensible Markup Language)\r\n        XML Media Types\", RFC 3023, January 2001.\r\n", "correct_text": "   [4]  Murata, M., St. Laurent, S., and D. Kohn, \"XML Media Types\",\r\n        RFC 3023, January 2001.\r\n", "notes": "See https://www.rfc-editor.org/refs/ref3023.txt:\r\n\r\n\"Murata, M., St. Laurent, S., and D. Kohn, \"XML Media Types\", RFC 3023, DOI 10.17487/RFC3023, January 2001, <http://www.rfc-editor.org/info/rfc3023>.\"", "submit_date": "2017-02-19", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 21:02:53"}, {"errata_id": "4942", "doc-id": "RFC3986", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.2. Host", "orig_text": "Such a name consists of a sequence of domain labels separated by \".\",\r\neach domain label starting and ending with an alphanumeric character\r\nand possibly also containing \"-\" characters.  The rightmost domain\r\nlabel of a fully qualified domain name in DNS may be followed by a\r\nsingle \".\" and should be if it is necessary to distinguish between\r\nthe complete domain name and some local domain.\r\n\r\n   reg-name    = *( unreserved / pct-encoded / sub-delims )\r\n\r\nIf the URI scheme defines a default for host, then that default\r\n", "correct_text": "Such a name consists of a sequence of domain labels separated by \".\",\r\neach domain label starting and ending with an alphanumeric character\r\nand possibly also containing \"-\" characters.  The rightmost domain\r\nlabel of a fully qualified domain name in DNS may be followed by a\r\nsingle \".\" and should be if it is necessary to distinguish between\r\nthe complete domain name and some local domain.\r\n\r\n   reg-name    = *( unreserved / pct-encoded / \"-\" / \".\")\r\n\r\nIf the URI scheme defines a default for host, then that default\r\n", "notes": "sub-delims  are defined as \"!\" / \"$\" / \"&\" / \"'\" / \"(\" / \")\" / \"*\" / \"+\" / \",\" / \";\" / \"=\" these are not characters that are allowed in host, domain or tld names, in addition the sub-delims do not sontain the \"-\" and \".\" \r\ntherefore the reg-name (fully qualified domain name) definition is incorrect   \r\n\r\nThe same issue appears in \"Appendix A.\"", "submit_date": "2017-02-19", "submitter_name": "r. de raat", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 20:30:13"}, {"errata_id": "4943", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.5.", "orig_text": "it must assume that its copy of the zone is obsolete an discard it.", "correct_text": "it must assume that its copy of the zone is obsolete and discard it.", "notes": "Fix typo; \"an\" should be \"and\".", "submit_date": "2017-02-20", "submitter_name": "Shane Kerr", "verifier_id": "", "verifier_name": "Terry Manderson", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7103", "doc-id": "RFC8996", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "<a href=\"https://www.rfc-editor.org/rfc/rfc%E2%80%8B%204162\"\r\nclass=\"eref\">\u200b 4162</a>", "correct_text": "<a href=\"https://www.rfc-editor.org/rfc/rfc4162\"\r\nclass=\"eref\">\u200b4162</a>", "notes": "(Note: the line wrapping here is mine; the errata tool assumes that this is text, so it won't accept long lines.)\r\n\r\nThe text for this specification is OK, but the HTML rendering has some hard-to-notice errors in the \"Updates\" field in the metadata block that is being caused by errors in the XML source.\r\n\r\nThe XML source includes a number of Unicode zero width space characters (U+200B) after commas in the rfc@updates attribute.  xml2rfc is unable to handle these characters correctly, treating them - and the space that follows - as part of the RFC number.  It generates the bad link as you see above.\r\n\r\nThis can be addressed in xml2rfc, maybe, but this is probably not XML we want to permit.\r\n\r\nPaul Wouters (AD): Verified, as this RFC won't get any updates.", "submit_date": "2022-08-24", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 01:20:17"}, {"errata_id": "7120", "doc-id": "RFC2045", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "Note that this does NOT imply thay they have no meaning at all", "correct_text": "Note that this does NOT imply that they have no meaning at all", "notes": "Fixing a typo: 'thay' instead of 'that'.", "submit_date": "2022-09-07", "submitter_name": "Maciej Szumski", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-09-07 22:23:33"}, {"errata_id": "4982", "doc-id": "RFC7692", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.1.1.1", "orig_text": "A server MAY include the \"server_no_context_takeover\" extension\r\nparameter in an extension negotiation response even if the extension\r\nnegotiation offer being accepted by the extension negotiation\r\nresponse didn't include the \"server_no_context_takeover\" extension\r\nparameter.", "correct_text": "A server MAY include the \"server_no_context_takeover\" extension\r\nparameter in an extension negotiation response even if the extension\r\nnegotiation offer being accepted by the extension negotiation\r\nresponse didn't include the \"server_no_context_takeover\" extension\r\nparameter.\r\nA client SHOULD treat the \"server_no_context_takeover\" extension\r\nparameter in an extension negotiation response as a hint with no\r\nrequirement to provide an implementation, and MUST NOT treat this\r\nparameter, if included in the response, as an invalid configuration.", "notes": "It is currently possible for a client and a server to implement per spec and fail to make a connection.\r\n\r\nThere is no requirement for a client to implement this purely optional parameter, nor to understand this parameter if not implemented. If not supported, this would result in an invalid configuration. As a result, point 7 mandates that the socket connection MUST be closed.\r\nThis will only occur if a client has no implementation for this parameter and does not understand/accept the parameter, and the server sends an unsolicited \"server_no_context_takeover\" parameter in its response, which is allowed.", "submit_date": "2017-03-28", "submitter_name": "Mark Straver", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4983", "doc-id": "RFC2308", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "   \"QNAME\" - the name in the query section of an answer, or where this\r\n   resolves to a CNAME, or CNAME chain, the data field of the last\r\n   CNAME.", "correct_text": "   \"QNAME\" - the name in the query section (RFC 1034, section 3.7.1).\r\n\r\n", "notes": "RFC 2308 is the only RFC that defines QNAME this way. Original definition in RFC 1034 is clear, and is used by all other RFC since. (This point was raised during the development of RFC 8020, and is now discussed in the context of draft-ietf-dnsop-terminology-bis)\r\n\r\n-- verifier note --\r\n\r\nRFC 8499 (replacing draft-ietf-dnsop-terminology-bis) notes that there are indeed several definitions of \"QNAME\".", "submit_date": "2017-03-28", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:31:04"}, {"errata_id": "4984", "doc-id": "RFC5102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.10, appA", "orig_text": "Each bit represents an Information Element in the Data Record \r\nwith the n-th bit\r\nrepresenting the n-th Information Element.", "correct_text": "Each bit represents an Information Element in the Data Record,\r\nwith the n-th least significant bit\r\nrepresenting the n-th Information Element.", "notes": "A misunderstand arose as to whether bits were assigned in host order or network order - so clarify that the bits are assigned from the least significant to the most significant, ie right-to-left rather than left-to-right.\r\n\r\nMoreover, this clarification applies to IANA's IPFIX registry.\r\n\r\nNB RFC 8038 re-uses this definition for mibIndexIndicator. Consistency between the definitions is desirable.", "submit_date": "2017-03-30", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4985", "doc-id": "RFC5952", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "In cases where there is more than one field of only zeros, there is a\r\nchoice of how many fields can be shortened.\r\n\r\n2001:db8:0:0:0::1\r\n2001:db8:0:0::1\r\n2001:db8:0::1\r\n2001:db8::1", "correct_text": "In cases where there is more than one field of only zeros,there is a\r\nchoice of how many fields can be shortened, but must be shortened to \r\nits maximum capability.\r\n\r\n2001:db8:0:0:0::1 is NOT acceptable\r\n2001:db8:0:0::1 is NOT acceptable\r\n2001:db8:0::1 is NOT acceptable\r\n2001:db8::1 is CORRECT\r\n", "notes": "Applying section 4.2.1\n --VERIFIER NOTES-- \n--- ek@ ---\r\n\r\nSection 2.2 is, as part of Section 2, listing \"Examples of flexibility\".  There is nothing prescriptive in any of these sections and, as noted, section 4.2.* is where the recommendations are made.", "submit_date": "2017-03-31", "submitter_name": "Julian de Prado", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-09-04 06:01:18"}, {"errata_id": "4986", "doc-id": "RFC5952", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "'A special syntax is available to compress the zeros. The use of\r\n\"::\" indicates one or more groups of 16 bits of zeros.'\r\n", "correct_text": "'A special syntax is available to compress the zeros. The use of\r\n\"::\" indicates two or more groups of 16 bits of zeros.'\r\n\r\n", "notes": "\"indicates one\" should be written as \"indicates two\"\r\n\r\n for example:\r\n'A special syntax is available to compress the zeros. The use of\r\n\"::\" indicates two or more groups of 16 bits of zeros.'\r\n\r\n2001:db8:aaaa:bbbb:cccc::1\r\n\r\n2001:db8:aaaa:bbbb:cccc:0:0:1\n --VERIFIER NOTES-- \nRFC 4291, section 2.2, #2 is clear that the current text is valid.  Section 4.2.2 contains a specific recommendation for the defined canonical form in this situation.  The canonical form is (must be) valid, but not all valid forms are canonical (of necessity :-).\r\n\r\nTo reach the working group discussion see this thread: https://mailarchive.ietf.org/arch/msg/ipv6/41x17WLwxBoS6AAtH6p0nuC84sk/", "submit_date": "2017-03-31", "submitter_name": "Julian de Prado", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-12-27 02:05:21"}, {"errata_id": "4987", "doc-id": "RFC1438", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "and the Academie Francais for review", "correct_text": "and the Academie Francaise for review", "notes": "Perfect day to file an erratum against this RFC\r\n\r\n\"Academie\" is female so \"francais\" needs the final e.\r\n\r\n[Also, it should be \"Acad\u00e9mie fran\u00e7aise\" but I'll wait for the implementation of RFC 7997.]\r\n\r\n-- Verifier note (EV) --\r\n\r\nIndeed, it should be \"Acad\u00e9mie fran\u00e7aise\" ;-)", "submit_date": "2017-04-01", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-01-12 12:06:26"}, {"errata_id": "5042", "doc-id": "RFC5939", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2", "orig_text": "m=audio 59000 UDP/TLS/RTP/AVP 98", "correct_text": "m=audio 59000 UDP/TLS/RTP/SAVP 98", "notes": "The example missed an S in the mine type. The list of allowed types is at https://www.iana.org/assignments/sdp-parameters/sdp-parameters.xhtml#sdp-parameters-2 and UDP/TLS/RTP/AVP  is not a registered device. Because this is over TLS, it is a SRTP (not RTP) and should use SAVP not AVP.", "submit_date": "2017-06-16", "submitter_name": "Typo in example", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5048", "doc-id": "RFC2387", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4", "orig_text": "related-param   := [ \";\" \"start\" \"=\" cid ]\r\n                        [ \";\" \"start-info\"  \"=\"\r\n                           ( cid-list / value ) ]\r\n                        [ \";\" \"type\"  \"=\" type \"/\" subtype ]\r\n                        ; order independent\r\n", "correct_text": "Unsure of best way to express this, but this syntax does not seem\r\nto allow for the values to be in quotes. e.g. type=\"text/html\"\r\nrather than type=text/html", "notes": "Basically, the examples all have quotes around the values, e.g. type=\"Application/X-FixedRecord\" rather than type=Application/X-FixedRecord\r\n\r\nIt appears that Yahoo email cannot accept type=text/html as per \"syntax\" in 3.4, but will accept type=\"text/html\" which is consistent with the examples\r\n\r\nThe examples in the RFC currently do not comply with the RFC.\r\n\r\n----- Verifier Notes -----\r\nI think the last sentence in the submitter's notes is the correct one: it's the examples that are wrong, not the ABNF -- the values are not intended to be in quotes.  In any case, this needs to be dealt with in a revision of the document, so we're sure we get it right and consider what multiple implementations are doing.", "submit_date": "2017-06-22", "submitter_name": "Adrian Kennard", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5043", "doc-id": "RFC5575", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "        +--------+--------------------+--------------------------+\r\n        | type   | extended community | encoding                 |\r\n        +--------+--------------------+--------------------------+\r\n        | 0x8006 | traffic-rate       | 2-byte as#, 4-byte float |\r\n        | 0x8007 | traffic-action     | bitmask                  |\r\n        | 0x8008 | redirect           | 6-byte Route Target      |\r\n        | 0x8009 | traffic-marking    | DSCP value               |\r\n        +--------+--------------------+--------------------------+\r\n\r\n   Traffic-rate:  The traffic-rate extended community is a non-\r\n      transitive extended community across the autonomous-system\r\n      boundary and uses following extended community encoding:", "correct_text": "\r\n        +--------+--------------------+--------------------------+\r\n        | type   | extended community | encoding                 |\r\n        +--------+--------------------+--------------------------+\r\n        | 0x8006 | traffic-rate       | 2-byte as#, 4-byte float |\r\n        | 0x8007 | traffic-action     | bitmask                  |\r\n        | 0x8008 | redirect           | 6-byte Route Target      |\r\n        | 0x8009 | traffic-marking    | DSCP value               |\r\n        +--------+--------------------+--------------------------+\r\n\r\n   Traffic-rate:  The traffic-rate extended community\r\n      uses following extended community encoding:", "notes": "The traffic rate type is allocated in the Transitive Experimental Range (https://www.iana.org/assignments/bgp-extended-communities/bgp-extended-communities.xhtml#bgp-extended-communities-10) but the text declares it non-transitive.\r\n\r\n=====\r\n[Alvaro Retana]\r\n\r\nI am marking this report as Verified knowing that the issue is already being addressed in rfc5575bis.", "submit_date": "2017-06-20", "submitter_name": "Jan Matejka", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5181", "doc-id": "RFC7725", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "   Link: <https://spqr.example.org/legislatione>; rel=\"blocked-by\"\r\n", "correct_text": "   Link: <https://search.example.net/legal>; rel=\"blocked-by\"\r\n", "notes": "Of course, it is hard to say from just an URL but it seems that the original \"blocked-by\" mentioned the authority requesting the blocking (spqr = Roman Senate and People) while the text in section 4 says \"The intent is that the header be used to identify the entity actually implementing blockage, not any other entity mandating it.\"\r\n\r\nExperience with the 451 crawler during the IETF 99 hackathon showed that several implementors got this wrong and used a \"blocked-by\" indicating the authority.\r\n\r\n[It could be a good idea to have two links, one for the authority and one for the implementor, but this is outside the scope of this errata.]", "submit_date": "2017-11-11", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:27:34"}, {"errata_id": "5044", "doc-id": "RFC3887", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14.1.", "orig_text": "   [RFC-MTRK-MODEL]   Hansen, T., \"Message Tracking Models and\r\n                      Requirements\", RFC 3885, September 2004.", "correct_text": "   [RFC-MTRK-MODEL]   Hansen, T., \"Message Tracking Model and\r\n                      Requirements\", RFC 3888, September 2004.", "notes": "The reference references a wrong RFC number. The text says RFC 3885, but the correct one is RFC 3888.\r\n\r\nVerifier Notes: Also corrected title (Model not Models).", "submit_date": "2017-06-20", "submitter_name": "Wolfgang Keller", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5189", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   | 31 Dec 1999 | 51,543     | 0   | 3,155,587,200 | Last day 20th    |\r\n   |             |            |     |               | Century          |\r\n", "correct_text": "   | 31 Dec 2000 | 51,909     | 0   | 3,187,209,600 | Last day 20th    |\r\n   |             |            |     |               | Century          |\r\n", "notes": "20th Century was from 1901 to 2000.\r\n\r\n---\r\n\r\n[verifier notes]\r\n\r\nSee also: https://mailarchive.ietf.org/arch/msg/ntp/Cbg3sOhChyfenYoj7UG5wCymFMU/", "submit_date": "2017-11-28", "submitter_name": "Marcel Telka", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-09-26 00:16:18"}, {"errata_id": "5190", "doc-id": "RFC6487", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "         3) A randomly generated ASCII HEX encoded string of length 20\r\n            or greater:\r\n            example: cn=\"0f8fcc28e3be4869bc5f8fa114db05e1\">\r\n            (A string of 20 ASCII HEX digits would have 80-bits of\r\n            entropy)\r\n", "correct_text": "         3) A randomly generated ASCII HEX encoded string of length 20\r\n            or greater:\r\n            example: cn=\"0f8fcc28e3be4869bc5f8fa114db05e1\"\r\n            (A string of 20 ASCII HEX digits would have 80-bits of\r\n            entropy)\r\n", "notes": "Typo", "submit_date": "2017-11-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5221", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix C.", "orig_text": "       <xs:pattern value=\"((1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5]).){3}\r\n                   (1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5])|\r\n                   ([A-Fa-f0-9]{1,4}:){7}[A-Fa-f0-9]{1,4}\"/>", "correct_text": "       <xs:pattern value=\"^((1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5]).){3}\r\n                   (1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5])$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){7}[A-Fa-f0-9]{1,4})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,1}(:[0-9A-Fa-f]{1,4}){1,6})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,2}(:[0-9A-Fa-f]{1,4}){1,5})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,3}(:[0-9A-Fa-f]{1,4}){1,4})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,4}(:[0-9A-Fa-f]{1,4}){1,3})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,5}(:[0-9A-Fa-f]{1,4}){1,2})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,6}(:[0-9A-Fa-f]{1,4}){1,1})$|\r\n                   ^((([0-9A-Fa-f]{1,4}:){1,7}|:):)$|\r\n                   ^(:(:[0-9A-Fa-f]{1,4}){1,7})$|\r\n                   ^(((([0-9A-Fa-f]{1,4}:){6})\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3}))$|\r\n                   ^((([0-9A-Fa-f]{1,4}:){5}[0-9A-Fa-f]{1,4}:\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3}))$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){5}:[0-9A-Fa-f]{1,4}:\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,1}(:[0-9A-Fa-f]{1,4}){1,4}:\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,2}(:[0-9A-Fa-f]{1,4}){1,3}:\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,3}(:[0-9A-Fa-f]{1,4}){1,2}:\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3})$|\r\n                   ^(([0-9A-Fa-f]{1,4}:){1,4}(:[0-9A-Fa-f]{1,4}){1,1}:\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3})$|\r\n                   ^((([0-9A-Fa-f]{1,4}:){1,5}|:):\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3})$|\r\n                   ^(:(:[0-9A-Fa-f]{1,4}){1,5}:\r\n                     (25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)\r\n                     (\\.(25[0-5]|2[0-4]\\d|[0-1]?\\d?\\d)){3})$\"/>", "notes": "The document does not address compressed IPv6 addresses, and the IPv6 regular expression pattern does provided in the proposed XML validation does not match compressed IPv6 addresses.\r\n\r\nI recommend using a more comprehensive regular expression, adding another note to the appendix that the IPv6 pattern is only included for brevity, or modifying the document to require fully expanded IPv6 addresses.\r\n\r\nCredit for the IPv6 regular expression above goes to Vernon Mauery (http://vernon.mauery.com/content/projects/linux/ipv6_regex).", "submit_date": "2017-12-31", "submitter_name": "Steven Hilton", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-03 07:01:43"}, {"errata_id": "4990", "doc-id": "RFC7348", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "Outer IPv4 Header:\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |Version|  IHL  |Type of Service|          Total Length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         Identification        |Flags|      Fragment Offset    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Time to Live |Protocl=17(UDP)|   Header Checksum             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Outer Source IPv4 Address               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                   Outer Destination IPv4 Address              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "Outer IPv4 Header:\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |Version|  IHL  |Type of Service|          Total Length         |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |         Identification        |Flags|      Fragment Offset    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Time to Live |Protocol=17(UDP)|   Header Checksum             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                       Outer Source IPv4 Address               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                   Outer Destination IPv4 Address              |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Minor spelling mistake while writing \"procotol\"", "submit_date": "2017-04-06", "submitter_name": "Kaustubh Kelkar", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4991", "doc-id": "RFC7585", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "The document describes how to look up realms, but doesn't describe what to do after that.  i.e. are the lookups cached? Are the lookups done for every request that comes in?\r\n\r\nThis gives little guidance for an implementor.\r\n\r\nI suggest leveraging the \"logical AAA routing table\" described in RFC 7542 Section 3.  In short form:\r\n\r\n* a client MUST maintain a table of known dynamic realms.\r\n\r\n* the table MUST be keyed by the realm name, and the contents MUST be server-specific information as described in RFC 7542 Section 3\r\n\r\n* when a realm is being looked up, the realm SHOULD be inserted into the table with a \"pending\" flag, so subsequent requests during the lookup process do not cause additional lookups to be made\r\n\r\n* if server validation fails, the realm SHOULD be updated with a \"failed\" state and a TTL, so that subsequent requests do not cause additional lookups for a period of time.  No server information should be stored for this entry. i.e. the realm is marked as \"failed\", the corresponding server MUST NOT be marked as \"failed\".  This prevents attacks where a malicious actor could point their realm to an unknowing third-party server, and cause poorly implemented proxies to mark it \"failed\".\r\n\r\n* if server validation succeeds, the realm MUST be updated with a \"live\" state (and a TTL), so that subsequent requests go to the same server without additional lookups\r\n\r\n*  if server validation succeeds, all realms in the TLS \"subject alternative names\" presented by the server SHOULD be inserted into the realm table, all pointing to the same server definition, so that subsequent requests for those other realms do not cause additional lookups to be made.\r\n\r\n* servers which have been dynamically looked up MUST NOT be added to any global pool of servers.  i.e. the lookup is always \"realm -> server\", and not \"There's a known server at this IP address\"\r\n\r\nI thought we had a short discussion of some of these topics on RADEXT, but I can't find it in the archives.\r\n\r\nI think these comments are substantial enough to warrant \"wait for document update\".  I just wanted to ensure they weren't lost.", "submit_date": "2017-04-07", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5045", "doc-id": "RFC5357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "   The minimum data segment length of TWAMP-Test packets in\r\n   unauthenticated mode is 41 octets, and 104 octets in both\r\n   authenticated mode and encrypted modes.", "correct_text": "   The minimum data segment length of TWAMP-Test packets in\r\n   unauthenticated mode is 41 octets, and 112 octets in both\r\n   authenticated mode and encrypted modes.", "notes": "In authenticated/encrypted mode, the minimum data segment length should be 112 octets, instead of 104 octets.", "submit_date": "2017-06-21", "submitter_name": "Xiao Min", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 13:22:41"}, {"errata_id": "5046", "doc-id": "RFC5357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "   each direction of transmission (this is usually desirable).  To\r\n   compensate for the Reflector's larger test packet format, the Sender\r\n   appends at least 27 octets of padding in unauthenticated mode, and at\r\n   least 56 octets in authenticated and encrypted modes.", "correct_text": "   each direction of transmission (this is usually desirable).  To\r\n   compensate for the Reflector's larger test packet format, the Sender\r\n   appends at least 27 octets of padding in unauthenticated mode, and at\r\n   least 64 octets in authenticated and encrypted modes.", "notes": "In authenticated/encrypted mode, the minimum data segment length of TWAMP-Test and OWAMP-Test packets is 112 octets and 48 octets respectively, so the Sender should append at least 64 octets, instead of 56 octets.", "submit_date": "2017-06-21", "submitter_name": "Xiao Min", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5050", "doc-id": "RFC7644", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.7.3", "orig_text": "       {\r\n         \"method\": \"PATCH\",\r\n         \"path\": \"/Users/5d8d29d3-342c-4b5f-8683-a3cb6763ffcc\",\r\n         \"version\": \"W/\\\"edac3253e2c0ef2\\\"\",\r\n         \"data\": {[\r\n           {\r\n               \"op\": \"remove\",\r\n               \"path\": \"nickName\"\r\n           },\r\n           {\r\n               \"op\": \"add\",\r\n               \"path\": \"userName\",\r\n               \"value\": \"Dave\"\r\n           }\r\n         ]}\r\n       },\r\n", "correct_text": "       {\r\n         \"method\": \"PATCH\",\r\n         \"path\": \"/Users/5d8d29d3-342c-4b5f-8683-a3cb6763ffcc\",\r\n         \"version\": \"W/\\\"edac3253e2c0ef2\\\"\",\r\n         \"data\": {\r\n           \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:PatchOp\"],\r\n           \"Operations\": [\r\n               {\r\n                  \u201cschemas\u201d:[\"\r\n                  \"op\": \"remove\",\r\n                  \"path\": \"nickName\"\r\n               },\r\n               {\r\n                  \"op\": \"add\",\r\n                  \"path\": \"userName\",\r\n                  \"value\": \"Dave\"\r\n               }\r\n           ]\r\n         }\r\n       },", "notes": "The example figure is incorrect. It should show the actual patch operation request body in the JSON attribute \"data\" as it would be expressed in its own HTTP request payload.  Instead it shows the values of the \"operations\" attribute. See sec 3.7 definition of \"data\".", "submit_date": "2017-06-23", "submitter_name": "Phil Hunt", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7373", "doc-id": "RFC8966", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.8.2.2.", "orig_text": "Additionally, since metric computation does not necessarily coincide\r\nwith the delay in propagating updates, a node might receive an\r\nunfeasible update from a currently unselected neighbour that is\r\npreferable to the currently selected route (e.g., because it has a\r\nmuch smaller metric); in that case, the node SHOULD send a unicast\r\nseqno request to the neighbour that advertised the preferable update.\r\n", "correct_text": "Additionally, since metric computation does not necessarily coincide\r\nwith the delay in propagating updates, a node might receive an\r\nunfeasible update from a currently unselected neighbour that would\r\nlead to the received route becoming selected were it feasible. In that\r\ncase, the node SHOULD send a unicast seqno request to the neighbour\r\nthat advertised the preferable update.\r\n", "notes": "As currently written the text does not recommend sending a seqno request when no route is currently selected because \".. that is preferable to the currently selected route\" implies a selected route as a precondition.\r\n\r\nWe recommend reinstating some of the RFC6126 wording instead. (Thanks to Juliusz for pointing this out)", "submit_date": "2023-02-27", "submitter_name": "Daniel Gr\u00f6ber", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-10-30 14:10:47"}, {"errata_id": "5049", "doc-id": "RFC8078", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   The contents of the CDS or CDNSKEY RRset MUST contain one RR and only\r\n   contain the exact fields as shown below.\r\n\r\n      CDS 0 0 0 0\r\n\r\n      CDNSKEY 0 3 0 0\r\n\r\n   The keying material payload is represented by a single 0.  This\r\n   record is signed in the same way as regular CDS/CDNSKEY RRsets are\r\n   signed.\r\n\r\n   Strictly speaking, the CDS record could be \"CDS X 0 X 0\" as only the\r\n   DNSKEY algorithm is what signals the DELETE operation, but for\r\n   clarity, the \"0 0 0 0\" notation is mandated -- this is not a\r\n   definition of DS digest algorithm 0.  The same argument applies to\r\n   \"CDNSKEY 0 3 0 0\"; the value 3 in the second field is mandated by\r\n   [RFC4034], Section 2.1.2.\r\n", "correct_text": "   The contents of the CDS or CDNSKEY RRset MUST contain one RR and only\r\n   contain the exact fields as shown below.\r\n\r\n      CDS 0 0 0 00\r\n\r\n      CDNSKEY 0 3 0 AA==\r\n\r\n   The keying material payload is represented by a single octet with\r\n   the value 00. This record is signed in the same way as regular\r\n   CDS/CDNSKEY RRsets are signed.\r\n\r\n   Strictly speaking, the CDS record could be \"CDS X 0 X X\" as only the\r\n   DNSKEY algorithm is what signals the DELETE operation, but for\r\n   clarity, the \"0 0 0 00\" notation is mandated -- this is not a\r\n   definition of DS digest algorithm 0.  The same argument applies to\r\n   \"CDNSKEY 0 3 0 AA==\"; the value 3 in the second field is mandated by\r\n   [RFC4034], Section 2.1.2.", "notes": "RFC 7344 defines both CDS and CDNSKEY record wire and presentation format to be identical to DS and DNSKEY wire and presentation format defined in RFC 4034.\r\n\r\nIn case of CDNSKEY record, RFC 4034 section 2.2 requires that:\r\n> The Public Key field MUST be represented as a Base64 encoding of the Public Key.\r\n\r\nAs Base64 encoding encodes 6 bits into one character, one character alone can never be a valid Base64 sequence. The proper encoding of one-byte long sequence with binary value of 00 is AA==.\r\n\r\nIn case of CDS record, RFC 4034 section 5.3 requires that:\r\n> The Digest MUST be represented as a sequence of case-insensitive hexadecimal digits\r\n\r\nAlthough the value of a single 0 fulfils this requirement per se, it's not properly parsable by many implementations since it is expected to be even number of hex digits to align with octet boundaries in the wire format. So proper form of CDS record should contain two zeroes in place of the digest.\r\n\r\n\r\n[ AD Note: Discussion on the DNSOP list: - https://www.ietf.org/mail-archive/web/dnsop/current/msg20267.html ] ", "submit_date": "2017-06-23", "submitter_name": "Ond\u0159ej Caletka", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4993", "doc-id": "RFC5155", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "  ; H(example)       = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom\r\n  ; H(a.example)     = 35mthgpgcu1qg68fab165klnsnk3dpvl\r\n  ; H(ai.example)    = gjeqe526plbf1g8mklp59enfd789njgi\r\n  ; H(ns1.example)   = 2t7b4g4vsa5smi47k61mv5bv1a22bojr\r\n  ; H(ns2.example)   = q04jkcevqvmu85r014c7dkba38o0ji5r\r\n  ; H(w.example)     = k8udemvp1j2f7eg6jebps17vp3n8i58h\r\n  ; H(*.w.example)   = r53bq7cc2uvmubfu5ocmm6pers9tk9en\r\n  ; H(x.w.example)   = b4um86eghhds6nea196smvmlo4ors995\r\n  ; H(y.w.example)   = ji6neoaepv8b5o6k4ev33abha8ht9fgc\r\n  ; H(x.y.w.example) = 2vptu5timamqttgl4luu9kg21e0aor3s\r\n  ; H(xx.example)    = t644ebqk9bibcna874givr6joj62mlhv\r\n- ; H(2t7b4g4vsa5smi47k61mv5bv1a22bojr.example)\r\n- ;                  = kohar7mbb8dc2ce8a9qvl8hon4k53uhi\r\n  example. 3600  IN SOA  ns1.example. bugs.x.w.example. 1 3600 300 (\r\n                         3600000 3600 )\r\n                 NS      ns1.example.\r\n                 NS      ns2.example.\r\n                 MX      1 xx.example.\r\n                 DNSKEY  256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU (\r\n                         sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h\r\n                         TY4hHn9npWFRw5BYubE= )\r\n                 DNSKEY  257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ (\r\n                         j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9\r\n                         AbsUdblMFin8CVF3n4s= )\r\n                 NSEC3PARAM 1 0 12 aabbccdd:1\r\n  0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd (\r\n                         2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS\r\n                         SOA NSEC3PARAM RRSIG )\r\n! 2t7b4g4vsa5smi47k61mv5bv1a22bojr.example. A 192.0.2.127\r\n!                NSEC3   1 1 12 aabbccdd (\r\n                         2vptu5timamqttgl4luu9kg21e0aor3s A RRSIG )\r\n  2vptu5timamqttgl4luu9kg21e0aor3s.example. NSEC3 1 1 12 aabbccdd (\r\n                         35mthgpgcu1qg68fab165klnsnk3dpvl MX RRSIG )\r\n  35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd (\r\n                         b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )\r\n  a.example.     NS      ns1.a.example.\r\n                 NS      ns2.a.example.\r\n                 DS      58470 5 1 (\r\n                         3079F1593EBAD6DC121E202A8B766A6A4837206C )\r\n  ns1.a.example. A       192.0.2.5\r\n  ns2.a.example. A       192.0.2.6\r\n  ai.example.    A       192.0.2.9\r\n                 HINFO   \"KLH-10\" \"ITS\"\r\n                 AAAA    2001:db8:0:0:0:0:f00:baa9\r\n  b4um86eghhds6nea196smvmlo4ors995.example. NSEC3 1 1 12 aabbccdd (\r\n                         gjeqe526plbf1g8mklp59enfd789njgi MX RRSIG )\r\n  c.example.     NS      ns1.c.example.\r\n                 NS      ns2.c.example.\r\n  ns1.c.example. A       192.0.2.7\r\n  ns2.c.example. A       192.0.2.8\r\n  gjeqe526plbf1g8mklp59enfd789njgi.example. NSEC3 1 1 12 aabbccdd (\r\n                         ji6neoaepv8b5o6k4ev33abha8ht9fgc HINFO A AAAA\r\n                         RRSIG )\r\n  ji6neoaepv8b5o6k4ev33abha8ht9fgc.example. NSEC3 1 1 12 aabbccdd (\r\n                         k8udemvp1j2f7eg6jebps17vp3n8i58h )\r\n  k8udemvp1j2f7eg6jebps17vp3n8i58h.example. NSEC3 1 1 12 aabbccdd (\r\n!                        kohar7mbb8dc2ce8a9qvl8hon4k53uhi )\r\n! kohar7mbb8dc2ce8a9qvl8hon4k53uhi.example. NSEC3 1 1 12 aabbccdd (\r\n!                        q04jkcevqvmu85r014c7dkba38o0ji5r A RRSIG )\r\n  ns1.example.   A       192.0.2.1\r\n  ns2.example.   A       192.0.2.2\r\n  q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd (\r\n                         r53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG )\r\n  r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. NSEC3 1 1 12 aabbccdd (\r\n                         t644ebqk9bibcna874givr6joj62mlhv MX RRSIG )\r\n  t644ebqk9bibcna874givr6joj62mlhv.example. NSEC3 1 1 12 aabbccdd (\r\n                         0p9mhaveqvm6t7vbl5lop2u3t2rp3tom HINFO A AAAA\r\n                         RRSIG )\r\n  *.w.example.   MX      1 ai.example.\r\n  x.w.example.   MX      1 xx.example.\r\n  x.y.w.example. MX      1 xx.example.\r\n  xx.example.    A       192.0.2.10\r\n                 HINFO   \"KLH-10\" \"TOPS-20\"\r\n                 AAAA    2001:db8:0:0:0:0:f00:baaa", "correct_text": "  ; H(example)       = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom\r\n  ; H(a.example)     = 35mthgpgcu1qg68fab165klnsnk3dpvl\r\n  ; H(ai.example)    = gjeqe526plbf1g8mklp59enfd789njgi\r\n  ; H(ns1.example)   = 2t7b4g4vsa5smi47k61mv5bv1a22bojr\r\n  ; H(ns2.example)   = q04jkcevqvmu85r014c7dkba38o0ji5r\r\n  ; H(w.example)     = k8udemvp1j2f7eg6jebps17vp3n8i58h\r\n  ; H(*.w.example)   = r53bq7cc2uvmubfu5ocmm6pers9tk9en\r\n  ; H(x.w.example)   = b4um86eghhds6nea196smvmlo4ors995\r\n  ; H(y.w.example)   = ji6neoaepv8b5o6k4ev33abha8ht9fgc\r\n  ; H(x.y.w.example) = 2vptu5timamqttgl4luu9kg21e0aor3s\r\n  ; H(xx.example)    = t644ebqk9bibcna874givr6joj62mlhv\r\n  example. 3600  IN SOA  ns1.example. bugs.x.w.example. 1 3600 300 (\r\n                         3600000 3600 )\r\n                 NS      ns1.example.\r\n                 NS      ns2.example.\r\n                 MX      1 xx.example.\r\n                 DNSKEY  256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU (\r\n                         sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h\r\n                         TY4hHn9npWFRw5BYubE= )\r\n                 DNSKEY  257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ (\r\n                         j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9\r\n                         AbsUdblMFin8CVF3n4s= )\r\n                 NSEC3PARAM 1 0 12 aabbccdd:1\r\n  0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd (\r\n                         2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS\r\n                         SOA NSEC3PARAM RRSIG )\r\n! 2t7b4g4vsa5smi47k61mv5bv1a22bojr.example. NSEC3   1 1 12 aabbccdd (\r\n                         2vptu5timamqttgl4luu9kg21e0aor3s A RRSIG )\r\n  2vptu5timamqttgl4luu9kg21e0aor3s.example. NSEC3 1 1 12 aabbccdd (\r\n                         35mthgpgcu1qg68fab165klnsnk3dpvl MX RRSIG )\r\n  35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd (\r\n                         b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG )\r\n  a.example.     NS      ns1.a.example.\r\n                 NS      ns2.a.example.\r\n                 DS      58470 5 1 (\r\n                         3079F1593EBAD6DC121E202A8B766A6A4837206C )\r\n  ns1.a.example. A       192.0.2.5\r\n  ns2.a.example. A       192.0.2.6\r\n  ai.example.    A       192.0.2.9\r\n                 HINFO   \"KLH-10\" \"ITS\"\r\n                 AAAA    2001:db8:0:0:0:0:f00:baa9\r\n  b4um86eghhds6nea196smvmlo4ors995.example. NSEC3 1 1 12 aabbccdd (\r\n                         gjeqe526plbf1g8mklp59enfd789njgi MX RRSIG )\r\n  c.example.     NS      ns1.c.example.\r\n                 NS      ns2.c.example.\r\n  ns1.c.example. A       192.0.2.7\r\n  ns2.c.example. A       192.0.2.8\r\n  gjeqe526plbf1g8mklp59enfd789njgi.example. NSEC3 1 1 12 aabbccdd (\r\n                         ji6neoaepv8b5o6k4ev33abha8ht9fgc HINFO A AAAA\r\n                         RRSIG )\r\n  ji6neoaepv8b5o6k4ev33abha8ht9fgc.example. NSEC3 1 1 12 aabbccdd (\r\n                         k8udemvp1j2f7eg6jebps17vp3n8i58h )\r\n  k8udemvp1j2f7eg6jebps17vp3n8i58h.example. NSEC3 1 1 12 aabbccdd (\r\n!                        q04jkcevqvmu85r014c7dkba38o0ji5r )\r\n  ns1.example.   A       192.0.2.1\r\n  ns2.example.   A       192.0.2.2\r\n  q04jkcevqvmu85r014c7dkba38o0ji5r.example. NSEC3 1 1 12 aabbccdd (\r\n                         r53bq7cc2uvmubfu5ocmm6pers9tk9en A RRSIG )\r\n  r53bq7cc2uvmubfu5ocmm6pers9tk9en.example. NSEC3 1 1 12 aabbccdd (\r\n                         t644ebqk9bibcna874givr6joj62mlhv MX RRSIG )\r\n  t644ebqk9bibcna874givr6joj62mlhv.example. NSEC3 1 1 12 aabbccdd (\r\n                         0p9mhaveqvm6t7vbl5lop2u3t2rp3tom HINFO A AAAA\r\n                         RRSIG )\r\n  *.w.example.   MX      1 ai.example.\r\n  x.w.example.   MX      1 xx.example.\r\n  x.y.w.example. MX      1 xx.example.\r\n  xx.example.    A       192.0.2.10\r\n                 HINFO   \"KLH-10\" \"TOPS-20\"\r\n                 AAAA    2001:db8:0:0:0:0:f00:baaa", "notes": "The obligatory RRSIG records have been omitted for clarity.\r\n\r\nThe zone prior to NSEC3 signing seems to have contained an unexpected\r\n    2t7b4g4vsa5smi47k61mv5bv1a22bojr.example.\tA\t192.0.2.127\r\nwhich was then lovingly included in the NSEC3 chain.\r\n\r\nThe error is readily detectable from the list of hashes of the original owner names. The source zone prior to signing can never contain a hashed name.\r\n\r\nFor completeness, B5 also needs a corresponding amendment, although this does not invalidate the proof presented therein.", "submit_date": "2017-04-13", "submitter_name": "Dick Franks", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4994", "doc-id": "RFC4226", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "The HOTP client (hardware or software token) increments its counter\r\nand then calculates the next HOTP value HOTP client.  If the value\r\nreceived by the authentication server matches the value calculated by\r\nthe client, then the HOTP value is validated.  In this case, the\r\nserver increments the counter value by one.\r\n\r\nIf the value received by the server does not match the value\r\ncalculated by the client, the server initiate the resynch protocol\r\n(look-ahead window) before it requests another pass.", "correct_text": "The HOTP client (hardware or software token) increments its counter\r\nand then calculates the next HOTP value HOTP client.  If the value\r\nreceived by the authentication server matches the value calculated by\r\nthe server, then the HOTP value is validated.  In this case, the\r\nserver increments the counter value by one.\r\n\r\nIf the value received by the server does not match the value\r\ncalculated by the server, the server initiate the resynch protocol\r\n(look-ahead window) before it requests another pass.", "notes": "The OTP value received by the server is the one calculated by the client.\r\n\r\nAD Note: this text still has the stray \"HOTP client\" string that errata eid 5723 reported.", "submit_date": "2017-04-14", "submitter_name": "Mathias Tausig", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-08-03 01:41:23"}, {"errata_id": "5001", "doc-id": "RFC4271", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "   BGP implementations MUST recognize all well-known attributes.  Some\r\n   of these attributes are mandatory and MUST be included in every\r\n   UPDATE message that contains NLRI.  Others are discretionary and MAY\r\n   or MAY NOT be sent in a particular UPDATE message.\r\n", "correct_text": "   BGP implementations MUST recognize all well-known attributes.  Some\r\n   of these attributes are mandatory and MUST be included in every\r\n   UPDATE message that contains NLRI.  Others are discretionary and may\r\n   or may not be sent in a particular UPDATE message.", "notes": "The original text uses \"MAY NOT\" capitalized as if it were an RFC 2119 keyword. However, RFC 2119 does not have any defined meaning for \"MAY NOT\". In context, it is unlikely the reader would be at risk of misinterpreting the text, but nonetheless it's a misuse of RFC 2119 terminology and difficult to parse if reading closely.\r\n\r\n(The replacement text was suggested by Eric Rosen; thanks.)\r\n\r\n=====\r\nI updated the Corrected Text to simply use lower case wording, eliminating any rfc2119-related confusion. -- Alvaro.", "submit_date": "2017-04-19", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5002", "doc-id": "RFC3031", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.8", "orig_text": "   Liberal label retention mode allows for quicker adaptation to routing\r\n   changes, but conservative label retention mode though requires an LSR\r\n   to maintain many fewer labels.", "correct_text": "   Liberal label retention mode allows for quicker adaptation to routing\r\n   changes, while conservative label retention mode requires an LSR to\r\n   maintain many fewer labels.", "notes": "Grammar error in original text, which may make it harder for some to read and understand.\r\nVerifier Notes: (removed the spurious \"though\")", "submit_date": "2017-04-21", "submitter_name": "Eric Gray", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4995", "doc-id": "RFC6704", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   IANA has assigned the following new DHCPv4 option code from the\r\n   registry \"BOOTP Vendor Extensions and DHCP Options\" maintained at\r\n   http://www.iana.org/assignments/bootp-dhcp-parameters:\r\n\r\n   Tag: 145\r\n\r\n   Name: FORCERENEW_NONCE_CAPABLE\r\n\r\n   Data length: 1\r\n\r\n   Description: Forcerenew Nonce Capable\r\n\r\n   Reference: this document", "correct_text": "   IANA has assigned the following new DHCPv4 option code from the\r\n   registry \"BOOTP Vendor Extensions and DHCP Options\" maintained at\r\n   http://www.iana.org/assignments/bootp-dhcp-parameters:\r\n\r\n   Tag: 145\r\n\r\n   Name: FORCERENEW_NONCE_CAPABLE\r\n\r\n   Data length: n\r\n\r\n   Description: Forcerenew Nonce Capable\r\n\r\n   Reference: this document", "notes": "RFC 6704 Section 3.1.1 states that the FORCERENEW_NONCE_CAPABLE option is variable length and contains a list of algorithm types:\r\n\r\nThe FORCERENEW_NONCE_CAPABLE option contains code 145, length n, and\r\n   a sequence of algorithms the client supports:\r\n\r\n             Code   Len   Algorithms\r\n            +-----+-----+----+----+----+\r\n            | 145 |  n  | A1 | A2 | A3 | ....\r\n            +-----+-----+----+----+----+\r\n\r\n                 Figure 1: FORCERENEW_NONCE_CAPABLE Option\r\n\r\n\r\nVerifier's note(Suresh Krishnan - INT AD): This erratum is correct and it requires a change in the IANA registry. I authorize IANA to make this change.", "submit_date": "2017-04-14", "submitter_name": "Niels Widger", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4996", "doc-id": "RFC6531", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3", "orig_text": "The definition of <atext> is extended to permit both the RFC 5321\r\ndefinition and a UTF-8 string. That string MUST NOT contain any\r\nof the ASCII graphics or control characters.", "correct_text": "The definition of <atext> is extended to permit both the RFC 5321\r\ndefinition and a UTF-8 string. That string MUST NOT contain any\r\nof the Extended ASCII graphics (%d128-255) or control characters.", "notes": "The question is: what is \"ASCII graphics characters\"? Either meant that is possible to transmit 8bit characters, but they should not be in range %d128-255. Or something else. A better clarification is appreciated.\r\n\r\nAlexey Melnikov: see Ned Freed' reply and the thread that follows <https://www.ietf.org/mail-archive/web/ima/current/msg05506.html>", "submit_date": "2017-04-16", "submitter_name": "Vitaliy V. Tokarev", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4997", "doc-id": "RFC3168", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Header", "orig_text": "Updates: 2474, 2401, 793", "correct_text": "Updates: 2474, 2460, 2401, 793\r\n\r\n", "notes": "RFC 3168 updates RFC 2460 but does not indicate this in its header block.\r\n\r\nSpecifically, Section 5.3 of RFC 3168 requires that the ECN field of a reassembled IPv6 datagram be calculated from the ECN fields of all of the fragments, rather than simply copying it from the initial fragment as specified in RFC 2460.\r\n\r\nThere are other missing Updates: fields; see e.g. Erratum 2660.\n --VERIFIER NOTES-- \nThis is a borderline case, as RFC 2474 already changes the semantics of this field and is correctly listed in the Updates field. Anyway, this would be \"Hold for Document Update\", but RFC 2460 has already been updated with RFC 8200.", "submit_date": "2017-04-17", "submitter_name": "C. M. Heard", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-20 15:32:09"}, {"errata_id": "4998", "doc-id": "RFC2544", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "The authors understand that it will take a\r\n   considerable period of time to perform all of the recommended tests\r\n   nder  all of the recommended conditions.", "correct_text": "The authors understand that it will take a\r\n   considerable period of time to perform all of the recommended tests\r\n   under  all of the recommended conditions.", "notes": "It's missing the letter 'u'", "submit_date": "2017-04-18", "submitter_name": "Daniel Andrei Minca", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "4999", "doc-id": "RFC6335", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "Many port number assignments are to individuals, but the document does not\r\ncontemplate how they should be handled when the assignee is dead or\r\notherwise can't be contacted. \r\n\r\nThe most obvious procedure to follow is a transfer (8.5), but that requires \r\nde-assignment (8.2), and that doesn't cover the case above.", "submit_date": "2017-04-19", "submitter_name": "Mark Nottingham", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 11:30:26"}, {"errata_id": "5000", "doc-id": "RFC4271", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.1.1", "orig_text": "      If the route is learned from an external peer, then the local BGP\r\n      speaker computes the degree of preference based on preconfigured\r\n      policy information.  If the return value indicates the route is\r\n      ineligible, the route MAY NOT serve as an input to the next phase\r\n      of route selection; otherwise, the return value MUST be used as\r\n      the LOCAL_PREF value in any IBGP readvertisement.\r\n", "correct_text": "      If the route is learned from an external peer, then the local BGP\r\n      speaker computes the degree of preference based on preconfigured\r\n      policy information.  If the return value indicates the route is\r\n      ineligible, the route MUST NOT serve as an input to the next phase\r\n      of route selection; otherwise, the return value MUST be used as\r\n      the LOCAL_PREF value in any IBGP readvertisement.\r\n", "notes": "The original text uses \"MAY NOT\" capitalized as if it were an RFC 2119 keyword. However, RFC 2119 does not have any defined meaning for \"MAY NOT\". If a reader were to interpret this text as suggesting it is optional -- meaning, in effect, \"the route MAY serve as an input to the next phase of route selection\" -- that would be wrong and potentially problematic.\r\n\r\nThe minimal correction would be to use lower-case \"may not\", which makes the proper meaning reasonably clear. However, the English construct \"may not\" is notoriously ambiguous, therefore the proposed correction is \"MUST NOT\".\r\n\r\n=====\r\nAfter consultation with the idr WG, it was confirmed that the correct interpretation (based on implementation experience) is \"MUST NOT\".  --- Alvaro.", "submit_date": "2017-04-19", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5008", "doc-id": "RFC5915", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "Though the ASN.1 indicates that the parameters field is OPTIONAL,\r\nimplementations that conform to this document MUST always include\r\nthe parameters field.", "correct_text": "Though the ASN.1 indicates that the parameters field is OPTIONAL,\r\nwhether the parameters field is optional, required, or forbidden\r\ndepends on the context. When serializing an ECPrivateKey into a PKCS#8\r\nfile, the parameters field MUST NOT be included in the serialization.\r\n(This is required to interoperate with PKCS#11.)\r\n\r\nWhen parsing an ECPrivateKey within a PKCS#8 file, when the parser\r\nencounters an ECPrivateKey without a parameters field, the parser MUST\r\nuse the parameters from the PKCS#8 privateKeyAlgorithm field, and MUST\r\nNOT reject the key solely due to the missing parameters field.\r\n\r\nWhen parsing an ECPrivateKey within a PKCS#8 file, when the parser \r\nencounters an ECPrivateKey with a parameters field present, the parser\r\nSHOULD reject the key if the ECPrivateKey parameters do not exactly\r\nmatch the the PKCS#8 privateKeyAlgorithm parameters.\r\n\r\nMore generally, these rules should be followed whenever parsing an\r\nECPrivateKey within a larger structure that contains the parameters.\r\n", "notes": "Section 1 notes that we must put \"id-ecPublicKey, id-ecDH, or id-ecMQV (from [RFC5480]) with the namedCurve as the parameters in the privateKeyAlgorithm field;\"\r\n\r\nThus, in a PKCS#8 file containing an ECC private key, there's no need to include the parameters in the ECPrivateKey field, because they are already in the privateKeyAlgorithm field.\r\n\r\nPKCS#11 says \"Since the EC domain parameters are placed in the PKCS #8\u2019s privateKeyAlgorithm field, the optional parameters field in an ECPrivateKey must be omitted.\" - http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/pkcs11-curr-v2.40.pdf\r\n\r\nFurther, with OpenSSL 1.0.2h and the OpenSSL trunk, the `openssl genpkey` command only encode the parameters in the PKCS#8 privateKeyAlgorithm, not in the parameters field of the ECPrivateKey:\r\n\r\n    openssl genpkey -algorithm EC \\\r\n        -pkeyopt ec_paramgen_curve:P-256 \\\r\n        -pkeyopt ec_param_enc:named_curve | \\\r\n      openssl pkcs8 -topk8 -nocrypt -outform der > p256-private-key.pk8\r\n\r\nThus, a parser that wishes to interoperate with OpenSSL cannot enforce the MUST requirement here.", "submit_date": "2017-04-30", "submitter_name": "Brian Smith", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5009", "doc-id": "RFC8045", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   o  sourceTransportPortsLimit:\r\n\r\n      *  Name: sourceTransportPortsLimit\r\n\r\n      *  Element ID: 458\r\n\r\n      *  Description: This Information Element contains the maximum\r\n         number of IP source transport ports that can be used by an end\r\n         user when sending IP packets; each user is associated with one\r\n         or more (source) IPv4 or IPv6 addresses.  This Information\r\n         Element is particularly useful in address-sharing deployments\r\n         that adhere to REQ-4 of [RFC6888].  Limiting the number of\r\n         ports assigned to each user ensures fairness among users and\r\n         mitigates the denial-of-service attack that a user could launch\r\n         against other users through the address-sharing device in order\r\n         to grab more ports.\r\n\r\n      *  Data type: unsigned16\r\n\r\n      *  Data type semantics: totalCounter", "correct_text": "   o  sourceTransportPortsLimit:\r\n\r\n      *  Name: sourceTransportPortsLimit\r\n\r\n      *  Element ID: 458\r\n\r\n      *  Description: This Information Element contains the maximum\r\n         number of IP source transport ports that can be used by an end\r\n         user when sending IP packets; each user is associated with one\r\n         or more (source) IPv4 or IPv6 addresses.  This Information\r\n         Element is particularly useful in address-sharing deployments\r\n         that adhere to REQ-4 of [RFC6888].  Limiting the number of\r\n         ports assigned to each user ensures fairness among users and\r\n         mitigates the denial-of-service attack that a user could launch\r\n         against other users through the address-sharing device in order\r\n         to grab more ports.\r\n\r\n      *  Data type: unsigned16\r\n\r\n      *  Data type semantics: quantity", "notes": "Only change is \r\n\r\n      *  Data type semantics: totalCounter\r\nto\r\n      *  Data type semantics: quantity\r\n\r\nThe description is pretty clear that this IE is a maximum value and not a counter.", "submit_date": "2017-05-02", "submitter_name": "Andrew Feren", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5010", "doc-id": "RFC5424", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.1", "orig_text": "This document guards against the technical issues outlined in UTR36 by\r\nREQUIRING \"shortest form\" encoding for syslog applications.", "correct_text": "\"Shortest Form\" encoding is REQUIRED for syslog applications to guard\r\nagainst the technical issues outlined in UTR36.", "notes": "\"REQUIRING\" is not a RFC 2119 keyword.", "submit_date": "2017-05-05", "submitter_name": "Job Snijders", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5020", "doc-id": "RFC5905", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8", "orig_text": "theta = T(B) - T(A) = 1/2 * [(T2-T1) + (T3-T4)]", "correct_text": "theta = T(B) - T(A) = 1/2 * [(T2-T1) + (T4-T3)]", "notes": "The corresponding code line in A.5.1.1. agrees with this correction:\r\n\r\noffset = (LFP2D(r->rec - r->org) + LFP2D(r->dst - r->xmt)) / 2;\r\n\r\ntaking Figure 7 into account:\r\n\r\n| org       | T1         | origin timestamp      |\r\n| rec       | T2         | receive timestamp     |\r\n| xmt       | T3         | transmit timestamp    |\r\n| dst       | T4         | destination timestamp |\n --VERIFIER NOTES-- \nAs noted this thread:\r\n\r\n    https://mailarchive.ietf.org/arch/msg/ntp/AR7k0IP2PMgXdq2bknx6Eiz4upE/\r\n\r\n'''\r\nTheta is \"the offset of B relative to A\". The proposed revision is\r\n\r\n   1/2 * [(T2-T1) + (T4-T3)]\r\n\r\nExample: Let's assume that B and A are exactly synced to UTC and that the\r\nnetwork delay is 50msec in each direction.\r\n\r\n    T2-T1 is the NTP mode 3 request delay (including network delay).\r\n\r\nThis gives 50 msec\r\n    T4-T3 is the NTP mode 4 response delay (including network delay).\r\n\r\nThis gives 50 msec.\r\n\r\nThe proposed revision gives 100msec/2 = RTT/2, not the expected offset of\r\nzero.\r\n\r\nThe RFC5905 formula seems correct.\r\n\r\n    theta = T(B) - T(A) = 1/2 * [(T2-T1) + (T3-T4)]\r\n\r\nbut might have been clearer had it been written:\r\n\r\n    theta = T(B) - T(A) = 1/2 * [(T2-T1) - (T4-T3)]\r\n'''", "submit_date": "2017-05-15", "submitter_name": "Ferenc W\u00e1gner", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-08-29 22:39:08"}, {"errata_id": "5011", "doc-id": "RFC5247", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   EAP-AKA\r\n\r\n      EAP-AKA is defined in [RFC4187].  The EAP-AKA Session-Id is the\r\n      concatenation of the EAP Type Code (0x17) with the contents of the\r\n      RAND field from the AT_RAND attribute, followed by the contents of\r\n      the AUTN field in the AT_AUTN attribute:\r\n\r\n      Session-Id = 0x17 || RAND || AUTN\r\n", "correct_text": "   EAP-AKA\r\n\r\n      EAP-AKA is defined in [RFC4187].  When using full authentication,\r\n      the EAP-AKA Session-Id is the\r\n      concatenation of the EAP Type Code (0x17) with the contents of the\r\n      RAND field from the AT_RAND attribute, followed by the contents of\r\n      the AUTN field in the AT_AUTN attribute:\r\n\r\n      Session-Id = 0x17 || RAND || AUTN\r\n\r\n      When using fast re-authentication, the EAP-AKA Session-Id is the\r\n      concatenation of the EAP Type Code (0x17) with the contents of the\r\n      NONCE_S field from the AT_NONCE_S attribute, followed by the\r\n      contents of the MAC field from the AT_MAC attribute from\r\n      EAP-Request/AKA-Reauthentication:\r\n\r\n      Session-Id = 0x17 || NONCE_S || MAC\r\n", "notes": "RFC 5247 was supposed to define exported parameters for existing EAP methods in Appendix A. The way Session-Id was defined for EAP-AKA and EAP-SIM works only for the full authentication case, i.e., it cannot be used when the optional fast re-authentication case is used since the used parameters (RAND, AUTN, NONCE_MT) are not used in the fast re-authentication case. Based on RFC 4187 chapter 5.2 (and similar chapter in RFC 4186), NONCE_S corresponds to RAND and MAC in EAP-Request/AKA-Reauthentication corresponds to AUTN. That would seem to imply that the Session-Id could be defined using NONCE_S and MAC instead of RAND and AUTN/NONCE_MT.\r\n\r\nThe corrected text in this errata shows the changes for EAP-AKA. Similar changes should be done for EAP-SIM (replace RAND || NONCE_MT with NONCE_S || MAC for fast re-authentication).\r\n\r\nIt should be noted that EAP-AKA' (RFC 5448) specification did not follow the MUST requirement in RFC 5247, i.e., it did not define Session-Id derivation. That could be done in an update of RFC 5247 with a clone of EAP-AKA design.\r\n\r\nIn addition, RFC 5247 did not define Session-Id definition for PEAP and there does not seem to exist any IETF RFC which such definition. That could also be included in RFC 5247 update and done similarly to EAP-TLS (Session-Id = EAP type || client.random || server.random).\r\n\r\nIt would be good to have a clear IETF reference for these details since EAP Session-Id is needed for ERP (RFC 6696) and that is now seeing additional implementation and deployment interest as a component of FILS authentication (IEEE 802.11ai). Same definition of EAP Session-Id is needed to make FILS shared key authentication implementation interoperable.", "submit_date": "2017-05-07", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2020-07-27 13:29:43"}, {"errata_id": "5012", "doc-id": "RFC7044", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10.1.2", "orig_text": "If there is not a Privacy header field in the message", "correct_text": "If there is no Privacy header field in the message", "notes": "\"If there is not a Privacy header\" is not a correct sentence. We have to use  \"If there is no Privacy header\"\n --VERIFIER NOTES-- \n   Either usage is acceptable.", "submit_date": "2017-05-10", "submitter_name": "Dinoop Paloli", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5014", "doc-id": "RFC7044", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.1 and 10.3", "orig_text": "", "correct_text": "", "notes": "Ambiguity exists regarding the handling of missing history info entry\r\n\r\nSection 9.1 says,\r\n\tIf the Request-URI of the incoming request does not match the hi\r\n   -targeted-to-uri in the last hi-entry (i.e., the previous SIP entity\r\n   that sent the request did not include a History-Info header field),\r\n   the SIP entity MUST add an hi-entry to the end of the cache on\r\n   behalf of the previous SIP entity\r\n  \r\n\tAccording to that, for example, if request is received with,\r\n\tRequest URI : sip:peter@example.com\r\n\tand History info :  <sip:bob@example.com>;index=1\r\n\t\t\t\t\t\t<sip:alice@example>;index=1.1\r\n\t\t\t\t\t\t<sip:jain@example>;index=1.1.1\r\n\t\t\t\t\t\t<sip:dave@example>;index=1.1.2\r\n\r\n\tThen processing entity has to add an history info in to cache on behalf of previous entity as,\r\n\tHistory info : <sip:bob@example.com>;index=1\r\n               <sip:alice@example>;index=1.1\r\n\t\t\t   <sip:jain@example>;index=1.1.1\r\n\t\t\t   <sip:dave@example>;index=1.1.2\r\n\t\t\t   <sip:peter@example.com>;index=1.1.2.1\r\n\t\t\t   \r\nBut in section 10.3 basic rules 6 states,\r\n\t\tIf the request clearly has a gap in the hi-entry\r\n       (i.e., the last hi-entry and Request-URI differ), the entity\r\n       adding an hi-entry MUST add a single index with a value of \"0\"\r\n       (i.e., the non negative integer zero) prior to adding the\r\n       appropriate index for the action to be taken. For example, if\r\n       the index of the last hi-entry in the request received was 1.1.2\r\n       and there was a missing hi-entry and the request was being\r\n       forwarded to the next hop, the resulting index will be 1.1.2.0.1.\r\n\t   \r\n\t   But as per 9.1 stated above, once an entity receive a request with missing history info\r\n\t\tit has to add an entry to cache on behalf of previous one.\r\n\t\tSo referring the previous example the added index would be 1.1.2.1\r\n\t\tAnd by applying the rule in 10.3, the index for the new request created by this entity would be 1.1.2.1.0.1 not 1.1.2.0.1", "submit_date": "2017-05-10", "submitter_name": "Dinoop Paloli", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5015", "doc-id": "RFC5229", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "# Imagine the header\r\n      # Subject: [acme-users] [fwd] version 1.0 is out\r\n      if header :matches \"Subject\" \"[*] *\" {\r\n          # ${1} will hold \"acme-users\",\r\n          # ${2} will hold \"[fwd] version 1.0 is out\"\r\n          fileinfo \"INBOX.lists.${1}\"; stop;\r\n                ^\r\n      }", "correct_text": "# Imagine the header\r\n      # Subject: [acme-users] [fwd] version 1.0 is out\r\n      if header :matches \"Subject\" \"[*] *\" {\r\n          # ${1} will hold \"acme-users\",\r\n          # ${2} will hold \"[fwd] version 1.0 is out\"\r\n          fileinto \"INBOX.lists.${1}\"; stop;\r\n      }", "notes": "This suggestion corrects the spelling of the \"fileinto\" action in the example.", "submit_date": "2017-05-10", "submitter_name": "Stan Kalisch", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5017", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "       352    RPL_WHOREPLY\r\n              \"<channel> <user> <host> <server> <nick>\r\n              ( \"H\" / \"G\" > [\"*\"] [ ( \"@\" / \"+\" ) ]\r\n                          ^\r\n              :<hopcount> <real name>\"", "correct_text": "       352    RPL_WHOREPLY\r\n              \"<channel> <user> <host> <server> <nick>\r\n              ( \"H\" / \"G\" ) [\"*\"] [ ( \"@\" / \"+\" ) ]\r\n              :<hopcount> <real name>\"", "notes": "'>' should be ')'", "submit_date": "2017-05-14", "submitter_name": "Les De Ridder", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5493", "doc-id": "RFC8040", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "Note that the YANG definitions within this module do not\r\nrepresent configuration data of any kind.\r\nThe 'restconf-media-type' YANG extension statement\r\nprovides a normative syntax for XML and JSON\r\nmessage-encoding purposes.\r\n\r\n", "correct_text": "Note that the YANG definitions within this module do not\r\nrepresent configuration data of any kind.\r\nThe yang-data extension statement\r\nprovides a normative syntax for XML and JSON\r\nmessage-encoding purposes.\r\n\r\n", "notes": "The 'restconf-media-type' YANG extension has been replaced by more generic yang-data extension.", "submit_date": "2018-09-06", "submitter_name": "Qin Wu", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-22 12:13:31"}, {"errata_id": "5495", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.6.3 step 1", "orig_text": "   1.  Mail Receivers MUST query the DNS for a DMARC TXT record at the\r\n       DNS domain matching the one found in the RFC5322.From domain in\r\n       the message.  A possibly empty set of records is returned.", "correct_text": "   1.  Mail Receivers MUST query the DNS for a DMARC TXT record at the\r\n       DNS domain matching the _dmarc subdomain of the one found in\r\n       the RFC5322.From domain in the message.  A possibly empty set\r\n       of records is returned.", "notes": "Section 6.1.  DMARC Policy Record states that DMARC records are 'stored as DNS TXT records in    subdomains named \"_dmarc\"'.  The policy discovery procedure needs to match.  As I read it, it currently doesn't.", "submit_date": "2018-09-08", "submitter_name": "Scott Kitterman", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-03 07:05:23"}, {"errata_id": "5517", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.4.2", "orig_text": "The derived-from-or-self() function returns \"true\" if any node in the\r\n   argument \"nodes\" is a node of type \"identityref\" and its value is an\r\n   identity that is equal to or derived from (see Section 7.18.2) the\r\n   identity \"identity\"; otherwise, it returns \"false\".\r\n", "correct_text": " The derived-from-or-self() function returns \"true\" if any node in the\r\n argument \"nodes\" is a node of type \"identityref\" or a type derived\r\n from \"identityref\", and its value is an identity that is equal to or\r\n derived from (see Section 7.18.2) the identity \"identity\"; \r\n otherwise, it returns \"false\".\r\n", "notes": "The node-set can have node which are of types that may be derived from an identityref. Typical example is in ietf-netconf-nmda, where \"when 'derived-from-or-self(datastore, \"ds:operational\")';\" is used, but the \"datastore\" node is of type \"datastore-ref\" defined in ietf-datastores module, which is in-turn derived from \"identityref\"\r\n\r\ncorrected text proposal with additional editing by Martin Bjorklund and Ladislav Lhotka ", "submit_date": "2018-10-08", "submitter_name": "Rohit R Ranade", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-24 16:56:10"}, {"errata_id": "5019", "doc-id": "RFC2633", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "id-aa-encrypKeyPref OBJECT IDENTIFIER ::= {id-aa 11}\r\n", "correct_text": "id-aa-encrypKeyPref [sic] OBJECT IDENTIFIER ::= {id-aa 11}", "notes": "encryp isn't a word, it's a typo. Unfortunately, like http's (rfc1945) referer [sic] before it, this is now part of the API.\r\n\r\nThis error should be highlighted (as rfc2068 does for referer [sic]) so that people are aware that the natural spelling doesn't apply.\r\n\r\nIf it's possible for a revised RFC to be published suggesting the correct spelling w/ a way for clients/servers to handle the old spelling, that would be nice, but based on precedent, that seems unlikely.\r\n\r\n---\r\nKathleen Moriarty: As AD, this discussion needs to be continued and possibly with a different draft.  As such, I am marking this as hold for document update and listing it as editorial so that there are no n the wire changes at this time with this errata.\r\n----\r\nThere was quite a bit of on list discussion that should be reviewed for any future changes.\r\n\r\nOne summary from the discussion:\r\nhe mailing list participants are copied on these errata to get their opinion in order to inform the AD how to dispose of the errata.  Most folks are just making their opinions known.\r\n\r\n1) The next thing that folks look at is whether it\u2019s technical or not.  Debate ensues, but generally technical errata are those that affect interoperability.  This one I don\u2019t think does because there are no changes to the bits on the wire.\r\n\r\n2) And, well folks want to get lots of changes, but the change has to run through the consensus process (back to mailing list input).\r\n\r\nSo to the import bit:\r\n\r\nAs I see it, there are two ways to get the note incorporated:\r\n\r\n1. Write a draft that adds the note; this seems a bit heavy weight for what you are trying to do.\r\n\r\n2. Apply the note to the latest RFC/draft that obsoletes RFC 2633; I guess you went for upstream, but generally the IETF applies changes to the latest/greatest RFC/draft.  That obsoletes chain is: RFC 3851 obsoleted RFC 2633, RFC 3851 was obsoleted by RFC 5751, and draft-ietf-lamps-rfc5751-bis is about to obsolete RFC 5751.  Luckily, draft-ietf-lamps-rfc5751-bis isn\u2019t yet an RFC so there\u2019s an option to have the note added there.\r\n\r\nAny objections to adding a note in draft-ietf-lamps-rfc5751-bis along the same lines as the note for receipentKeyId?\r\n\r\nPaul Wouters (AD): This note made it into RFC 8551, so marking this errata Verified to close it", "submit_date": "2017-05-14", "submitter_name": "Josh Soref", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-12 20:08:12"}, {"errata_id": "5021", "doc-id": "RFC7788", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "", "orig_text": "HNCP uses opaque 32-bit node identifiers\r\n(DNCP_NODE_IDENTIFIER_LENGTH = 32).", "correct_text": "HNCP uses opaque 32-bit node identifiers\r\n(DNCP_NODE_IDENTIFIER_LENGTH = 4).", "notes": "RFC 7787 (DNCP) in section 9 defines DNCP_NODE_IDENTIFIER_LENGTH as being bytes, not bits.\r\n\r\n-- Verifier note --\r\nIndeed, section 9 of RFC 7787 clearly specifies \"DNCP_NODE_IDENTIFIER_LENGTH: The fixed length of a node identifier (in bytes).\"", "submit_date": "2017-05-19", "submitter_name": "Dirk Feytons", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-03 08:14:53"}, {"errata_id": "5022", "doc-id": "RFC8174", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "by clarifying that only UPPERCASE usage of the key words have the\r\ndefined special meanings.", "correct_text": "by clarifying that only UPPERCASE usage of the key words has the\r\ndefined special meanings.", "notes": "The text appears in both \"Abstract\" and Section 1. The verb should be \"has\" because \"usage\" is a singular noun.", "submit_date": "2017-05-19", "submitter_name": "Xiaoyin Liu", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5023", "doc-id": "RFC8164", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "This mechanism not a replacement for \"https\"\r\nURIs; it is vulnerable to active attacks.\r\n", "correct_text": "This mechanism is not a replacement for \"https\"\r\nURIs; it is vulnerable to active attacks.\r\n", "notes": "This sentence is in the Abstract. It misses the verb \"is\".\r\n\r\nAlexey: This is correct, but it is unlikely to confuse readers.", "submit_date": "2017-05-19", "submitter_name": "Xiaoyin Liu", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5024", "doc-id": "RFC4827", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14", "orig_text": "   The authors would like to thank Jari Urpalainen, Jonathan Rosenberg,\r\n   Hisham Khartabil, Aki Niemi, Mikko Lonnfors, Oliver Biot, Alex Audu,\r\n", "correct_text": "   The authors would like to thank Jari Urpalainen, Jonathan Rosenberg,\r\n   Hisham Khartabil, Aki Niemi, Mikko Lonnfors, Olivier Biot, Alex Audu,\r\n                                                ", "notes": "My name [Olivier Biot]  was misspelled.\r\n\r\n(Verifier Note: There were carets marking the change in the original errata, but they were misaligned when viewed outside of the errata tool. I removed them, and added a mention of the changed name in the notes.)", "submit_date": "2017-05-22", "submitter_name": "Olivier Biot", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5088", "doc-id": "RFC5884", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1,4,7,11.2", "orig_text": "[5085]", "correct_text": "[5885]", "notes": "RFC 5884 refers to RFC 5085, when in fact it should refer to RFC 5885 (or at the very least to both RFCs 5085 and 5885 consecutively).\r\n\r\nHistorically, RFC 5085 and RFC 5885 come from the same Internet-Draft, which was Referenced from RFC 5884. It included general VCCV as well as BFD for VCCV. Subsequently, that document was split into two I-Ds that resulted in RFCs 5085 and 5885. BFD for Pseudowires is actually covered by RFC 5885 (not 5085).\r\n\r\nIn Section 3.1.  BFD for MPLS LSPs: Motivation\r\n\r\n      e) Pseudowires based on PWid FEC and Generalized PWid FEC\r\n         [RFC4447]\r\n\r\ne) is covered by RFC 5885 as BFD single-hop for PWs. And not as per the more complex RFC 5884.\r\n\r\nA better technical normalization of BFD for PWs versus BFD for other MPLS LSPs is needed to adequately cover the subject matter of RFC 5884.\r\n\r\nNote, RFC 5884 and 5885 were part of the same RFC-Editor cluster.", "submit_date": "2017-08-17", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5089", "doc-id": "RFC4490", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "   [GOSTR341194] \"Information technology. Cryptographic Data Security.\r\n                 Hashing function.\", GOST R 34.10-94, Gosudarstvennyi\r\n                 Standard of Russian Federation, Government Committee of\r\n                 the Russia for Standards, 1994. (In Russian)\r\n\r\n", "correct_text": "   [GOSTR341194] \"Information technology. Cryptographic Data Security.\r\n                 Hashing function.\", GOST R 34.11-94, Gosudarstvennyi\r\n                 Standard of Russian Federation, Government Committee of\r\n                 the Russia for Standards, 1994. (In Russian)\r\n\r\n", "notes": "Incorrect standard number.", "submit_date": "2017-08-18", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5090", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   Resource Record Set (RRSet):  A set of Resource Records or a\r\n      particular owner name, class, and type.  The time to live on all\r\n      RRs with an RRSet is always the same, but the data may be\r\n      different among RRs in the RRSet.", "correct_text": "   Resource Record Set (RRSet):  A set of Resource Records for a\r\n      particular owner name, class, and type.  The time to live on all\r\n      RRs with an RRSet is always the same, but the data may be\r\n      different among RRs in the RRSet.", "notes": "Changed 'or' to 'for', the former not making sense in this context and being a likely typo.", "submit_date": "2017-08-18", "submitter_name": "Mak Kolybabi", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5025", "doc-id": "RFC6761", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   The private-address [RFC1918] reverse-mapping domains listed below,\r\n   and any names falling within those domains, are Special-Use Domain\r\n   Names:\r\n\r\n     10.in-addr.arpa.      21.172.in-addr.arpa.  26.172.in-addr.arpa.\r\n     16.172.in-addr.arpa.  22.172.in-addr.arpa.  27.172.in-addr.arpa.\r\n     17.172.in-addr.arpa.  30.172.in-addr.arpa.  28.172.in-addr.arpa.\r\n     18.172.in-addr.arpa.  23.172.in-addr.arpa.  29.172.in-addr.arpa.\r\n     19.172.in-addr.arpa.  24.172.in-addr.arpa.  31.172.in-addr.arpa.\r\n     20.172.in-addr.arpa.  25.172.in-addr.arpa.  168.192.in-addr.arpa.", "correct_text": "   The private-address [RFC1918] reverse-mapping domains listed below,\r\n   and any names falling within those domains, are Special-Use Domain\r\n   Names:\r\n\r\n     10.in-addr.arpa.      21.172.in-addr.arpa.  26.172.in-addr.arpa.\r\n     16.172.in-addr.arpa.  22.172.in-addr.arpa.  27.172.in-addr.arpa.\r\n     17.172.in-addr.arpa.  30.172.in-addr.arpa.  28.172.in-addr.arpa.\r\n     18.172.in-addr.arpa.  23.172.in-addr.arpa.  29.172.in-addr.arpa.\r\n     19.172.in-addr.arpa.  24.172.in-addr.arpa.  30.172.in-addr.arpa.\r\n     20.172.in-addr.arpa.  25.172.in-addr.arpa.  31.172.in-addr.arpa.\r\n     168.192.in-addr.arpa", "notes": "30.172.in-addr.arpa. is missing in the original list.\n --VERIFIER NOTES-- \nActually, as noted in Errata ID: 5039 it's not missing - it is between 22.172.in-addr.arpa and 23.172.in-addr.arpa. I've marked Errata 5039 as \"Held for update\" and am rejecting this one.\r\n", "submit_date": "2017-05-25", "submitter_name": "Michael Kohl", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5026", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   length\r\n      Identical to the length field in a TLS 1.2 record.  As in TLS 1.2,\r\n      the length should not exceed 2^14.", "correct_text": "   length\r\n      Identical to the length field in a TLS 1.2 record.  As in TLS 1.2,\r\n      the length MUST NOT exceed 2^14.", "notes": "The originial comment on length in RFC 5246, 6.2.1 is:\r\n   length\r\n      The length (in bytes) of the following TLSPlaintext.fragment.  The\r\n      length MUST NOT exceed 2^14.\r\nso it has to be \"MUST NOT\" - instead of \"should not\" as currently stated.", "submit_date": "2017-05-31", "submitter_name": "Timm Korte", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5027", "doc-id": "RFC6442", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": " --boundary1\r\n\r\n   Content-Type: application/pidf+xml\r\n   Content-ID: <target123@atlanta.example.com>\r\n   <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n       <presence", "correct_text": " --boundary1\r\n\r\n   Content-Type: application/pidf+xml\r\n   Content-ID: <target123@atlanta.example.com>\r\n\r\n   <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n       <presence", "notes": "The PIDF-LO examples in RFC 6442 don't have an empty line between the message headers and the message body in the pidf+xml bodies.\r\n\r\nRFC 2046, section 5.1 says this about multipart MIME body parts:  \" After its boundary delimiter line, each body part then consists of a header area, a blank line, and a body area\".\r\n\r\nThis errata also applies to the example in section 5.2", "submit_date": "2017-05-31", "submitter_name": "Larry Reeder", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5028", "doc-id": "RFC7748", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "Input u-coordinate as a number (base 10):", "correct_text": "Decoded u-coordinate as a number (base 10):", "notes": "It is unclear that the base 10 numbers are the decoded values (i.e. after masking). That should have been made more explicit to reduce confusion.", "submit_date": "2017-06-02", "submitter_name": "Adam Langley", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2020-12-15 06:58:47"}, {"errata_id": "5030", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.7.4", "orig_text": "6.7.4.  0x0004 - SOFTWARE_VERSION_TYPE\r\n\r\n           Field                        Length\r\n           Vender OS major version        1\r\n           Vender OS minor version        1\r\n           EIGRP major revision           1\r\n           EIGRP minor revision           1\r\n\r\n   The EIGRP TLV Version fields are used to determine TLV format\r\n   versions.  Routers using Version 1.2 TLVs do not understand Version\r\n   2.0 TLVs, therefore Version 2.0 routers must send the packet with\r\n   both TLV formats in a mixed network.\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            0x0004             |            0x000C             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |Vendor Major V.|Vendor Minor V.| EIGRP Major V.| EIGRP Minor V.|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "6.7.4.  0x0004 - SOFTWARE_VERSION_TYPE\r\n\r\n           Field                        Length\r\n           Vender OS major version        1\r\n           Vender OS minor version        1\r\n           EIGRP major revision           1\r\n           EIGRP minor revision           1\r\n\r\n   The EIGRP TLV Version fields are used to determine TLV format\r\n   versions.  Routers using Version 1.2 TLVs do not understand Version\r\n   2.0 TLVs, therefore Version 2.0 routers must send the packet with\r\n   both TLV formats in a mixed network.\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |            0x0004             |            0x0008             |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |Vendor Major V.|Vendor Minor V.| EIGRP Major V.| EIGRP Minor V.|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Hello! In looking over the TLV construct in Section 6.7.4 0x0004 - SOFTWARE_VERSION_TYPE it appears that they might be a 'typo' with respect to the 'Length' value provided in the RFC diagram.  The current value is shown as 0x000C (12 bytes), but in reality it appears that it should be 0x0008 (8 bytes) given the format/length of the specific TLV being discussed.  Thank you.\r\n\r\nCheers,\r\nTravis", "submit_date": "2017-06-06", "submitter_name": "Travis P. Bonfigli", "verifier_id": "", "verifier_name": "Nevil Brownlee", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5031", "doc-id": "RFC7540", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   That is, the connection preface starts with the string \"PRI *\r\n   HTTP/2.0\\r\\n\\r\\nSM\\r\\n\\r\\n\"). \r\n                              ^ ", "correct_text": "   That is, the connection preface starts with the string \"PRI *\r\n   HTTP/2.0\\r\\n\\r\\nSM\\r\\n\\r\\n\".  ", "notes": "Typo", "submit_date": "2017-06-07", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5032", "doc-id": "RFC4103", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "After an idle period, the transmitter SHOULD set the M-bit to one in\r\nthe first packet with new text.", "correct_text": "After an idle period, the transmitter SHOULD set the M-bit to one in\r\nthe first packet with new text.\r\n\r\nA number of approaches can be taken for how to compose the initial\r\npackets in the session, and the packets sent at resumption after an\r\nidle period. In order to harmonize transmitter behavior, and fulfill\r\nrequirements in RFC 2198[3] and RFC 4102[9], transmitters SHOULD\r\napply the following mechanism:  Initially in the session and at \r\nresumption of transmission after an idle period, when redundancy is\r\nused, the packets to send SHOULD contain the same level of redundancy\r\nas specified for the session. If redundant data for the specified\r\nnumber of generations is not available for transmission, empty \r\nT140blocks SHOULD be inserted in the packet for transmission to make\r\nit contain the specified level of redundancy. ", "notes": "RFC 4103 does not exactly specify how to compose the first packets in the session and the packets after an idle period, when redundancy is used in the session. \r\n\r\nEven if receivers should be prepared to decode any valid packet composition, it eases interoperability when transmitters behave consistently. \r\n\r\nRFC 2198 requires that the redundant format must carry at least the primary and one redundant level. RFC 4102 requires that if different compositions of the payloads in the packet is to be used, then each combination needs to be assigned its own payload type number. Assuming that that includes use of varying levels of redundancy with the same payload in the redundant data, these requirements lead to the recommendation to use the approach documented in the corrected text.\n --VERIFIER NOTES-- \nYour comment is not in scope for errata reports, which are meant to collect errors in the documents, things that were actual errors at publication and that would have been fixed at that time had the working group or document authors noticed them -- they were just missed. What you've reported goes beyond what can be done in errata. The change, therefore, if it is to be applied needs to be achieved through a consensus document.", "submit_date": "2017-06-07", "submitter_name": "Gunnar Hellstrom", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-07 09:21:42"}, {"errata_id": "5041", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "1-Way\r\n    An Hello packet has been received from the neighbor, in\r\n    which the router is not mentioned.  This indicates that\r\n    communication with the neighbor is not bidirectional.", "correct_text": "1-WayReceived\r\n    An Hello packet has been received from the neighbor, in\r\n    which the router is not mentioned.  This indicates that\r\n    communication with the neighbor is not bidirectional.", "notes": "RFC2328 defines The Neighbor state machine and it's states. One of the states is defined/named as 1-WayReceived ([Page 95] 10.3.).\r\n1-WayReceived is also mentioned on page 84 and 98.\r\n\r\nPages 85 and 88 use event 1Way which should be renamed to 1-WayReceived for consistency with definition of the state.\r\n\r\n[Page 85]\r\nEvent 1-Way forces Init state,\r\n\r\n\r\n[Page 88]\r\n10.2.  Events causing neighbor state changes \r\n1-Way\r\n    An Hello packet has been received from the neighbor, in\r\n    which the router is not mentioned.  This indicates that\r\n    communication with the neighbor is not bidirectional.\r\n\r\nOn p. 85 after Figure 13, it says \"Figure 13: Neighbor state changes (Database Exchange)\r\n ....\r\n                Event 1-Way forces Init state,\r\n \"\r\nand Event 1-Way should be replaced with 1-WayReceived", "submit_date": "2017-06-13", "submitter_name": "Adam Augustyn", "verifier_id": "", "verifier_name": "Alia Atlas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5033", "doc-id": "RFC1122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3.2", "orig_text": "Section 2.3.2, and subsections 2.3.2.1 and 2.3.2.2, do not belong where \r\nthey are in this RFC.\r\n\r\n\r\n", "correct_text": "Move the text in this section either under section 2.4, or in section \r\n3.\r\n\r\n", "notes": "ARP is a protocol used by Internet devices for the purpose of mapping Internet Addresses to MAC addresses.  Link layer devices and associated protocols will only support and/or use ARP to the extent that they are also Internet devices (for example if participating in management protocols developed to operate between IP addressed devices).\r\n\r\nHence referring to ARP as a Link Layer Protocol will only continue to confuse the industry.\r\n\r\nBecause the number of references to ARP refering to Link.2, perhaps it would be easiest to move the text to section 2.4, adding a new subsection header 2.4.1 for the text currently in section 2.4, and renumbering current section 2.3.2 to 2.4.2 (as well as renumbering subsections 2.3.2.1 and 2.3.2.2 to 2.4.2.1 and 2.4.2.2, respectively).\r\n\r\nRefering to ARP as a part of the Link/Internet Layer Interface is more accurate.\r\n\r\n-- Verifier Note (EV) --\r\n\r\nThe erratum is correct, i.e., ARP is not a layer-2 protocol. The erratum reflects more the modern thinking though of ARP position in the OSI stack and does not impact the protocol itself.\r\n\r\nTherefore, the status if \"held for document update\" even of RFC 1122 will probably never be updated in the world of NDP and IPv6.\r\n\r\n", "submit_date": "2017-06-08", "submitter_name": "Eric Gray", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-01-12 11:36:58"}, {"errata_id": "5034", "doc-id": "RFC6030", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.1", "orig_text": " Camellia128    | http://www.w3.org/2001/04/xmldsig-more#camellia128\r\n Camellia192    | http://www.w3.org/2001/04/xmldsig-more#camellia192\r\n Camellia256    | http://www.w3.org/2001/04/xmldsig-more#camellia256", "correct_text": " Camellia128-CBC| http://www.w3.org/2001/04/xmldsig-more#camellia128-cbc\r\n Camellia192-CBC| http://www.w3.org/2001/04/xmldsig-more#camellia192-cbc\r\n Camellia256-CBC| http://www.w3.org/2001/04/xmldsig-more#camellia256-cbc", "notes": "The original URIs are not defined in RFC 4051 but the URIs with -cbc appended are which and those are what was probably meant.", "submit_date": "2017-06-08", "submitter_name": "Arthur de Jong", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5035", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   time            =   time-of-day zone\r\n\r\n   zone            =   (FWS ( \"+\" / \"-\" ) 4DIGIT) / obs-zone\r\n", "correct_text": "time            =       time-of-day FWS zone\r\n\r\nzone            =       (( \"+\" / \"-\" ) 4DIGIT) / obs-zone\r\n", "notes": "The rfc5322 version of the syntax clearly forces the obs-zone to follow the time-of-day with no space.  The syntax from rfc2822 seems to be what is actually in use in the real world.  Why was this change made?  Should it just be changed back?\n --VERIFIER NOTES-- \nAs per reply from Pete Resnick:\r\n\r\nI believe this erratum report should be rejected. While it is true that\r\nobs-zone does not begin with FWS, time-of-day ends with second, which\r\ncan be an obs-second, and obs-second ends with an optional CFWS.\r\nTherefore, obs-zone is not forced to follow time-of-day with no space;\r\nit just makes the space optional. And this allows for the original 822\r\nsyntax, which did not require space between the time-of-day and the\r\nzone. (Somewhat goofy to allow that, but it is parseable.)\r\n", "submit_date": "2017-06-09", "submitter_name": "Gene Hightower", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5036", "doc-id": "RFC5246", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.4.1.2", "orig_text": "The ClientHello Structure indicates that a SessionID could be present.\r\nHowever if I take a wireshark of a TLS session I always see a \"Session \r\nID Length\" field, either with value 0 or value 32", "correct_text": "In the ClientHello structure and ServerHello structure, include \r\na 1 byte \"Session ID Length\" field.", "notes": "The ClientHello Structure indicates that a SessionID could be present.\r\nHowever if I take a wireshark of a TLS session I always see a \r\n\"Session ID Length\" field, either with value 0 or value 32.\n --VERIFIER NOTES-- \nThis erratum is incorrect.\r\n\r\nHere is the definition of SessionID:\r\n      opaque SessionID<0..32>;\r\n\r\nThe angle brackets mean that it is variable length and the 0..32 means that there is\r\na one-byte length field.", "submit_date": "2017-06-09", "submitter_name": "Stefan Goeman", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-18 04:06:12"}, {"errata_id": "5037", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOSSARY", "orig_text": "NFB\r\n          The Number of Fragment Blocks in a the data portion of an\r\n          internet fragment.  That is, the length of a portion of data\r\n          measured in 8 octet units.", "correct_text": "NFB\r\n          The Number of Fragment Blocks in the data portion of an\r\n          internet fragment.  That is, the length of a portion of data\r\n          measured in 8-octet units.", "notes": "Extra article 'a' before the term 'data portion of an internet fragment'.", "submit_date": "2017-06-10", "submitter_name": "Prabhu K Lokesh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5051", "doc-id": "RFC8188", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "   [FIPS180-4]\r\n              National Institute of Standards and Technology, \"Secure\r\n              Hash Standard (SHS)\", FIPS PUB 180-4,\r\n              DOI 10.6028/NIST.FIPS180-4, August 2015,\r\n              <http://nvlpubs.nist.gov/nistpubs/FIPS/\r\n              NIST.FIPS.180-4.pdf>.\r\n", "correct_text": "   [FIPS180-4]\r\n              National Institute of Standards and Technology, \"Secure\r\n              Hash Standard (SHS)\", FIPS PUB 180-4,\r\n              DOI 10.6028/NIST.FIPS.180-4, August 2015,\r\n              <http://nvlpubs.nist.gov/nistpubs/FIPS/\r\n              NIST.FIPS.180-4.pdf>.\r\n", "notes": "(incorrect DOI)", "submit_date": "2017-06-24", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5052", "doc-id": "RFC7991", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.1", "orig_text": "<x:include href=\"file://home/chris/ietf/drafts/commontext.xml\"/>\r\n", "correct_text": "<xi:include href=\"file://home/chris/ietf/drafts/commontext.xml\"/>\r\n", "notes": "Section B.1. talks about using XInclude for inclusion of external materials, instead of using entity references or processing instructions to include materials.  It shows an example namespace declaration:\r\n\r\nxmlns:xi=\"http://www.w3.org/2001/XInclude\"\r\n\r\nand then continues with various examples using <xi:include/>, except that in one case, an 'i\" has been dropped from the \"xi:\", giving <x:include...>.", "submit_date": "2017-06-25", "submitter_name": "Henrik Levkowetz", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5091", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   o  If CAA(X) is not empty, R(X) = CAA (X), otherwise", "correct_text": "   o  If CAA(X) is not empty, R(X) = CAA(X), otherwise", "notes": "Remove unnecessary space after second CAA, making appearances of CAA(X) consistent throughout the section.\r\nThis builds on errata 5065, where this error wasn't fixed.", "submit_date": "2017-08-18", "submitter_name": "Mak Kolybabi", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5038", "doc-id": "RFC791", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "The option begins with the option type code.  The second octet\r\n        is the option length which includes the option type code and the\r\n        length octet, the pointer octet, and length-3 octets of route\r\n        data.", "correct_text": "The option begins with the option type code.  The second octet\r\n        is the option length, measured in octets, including the option \r\n        type code octet, the length octet, the pointer octet, and the\r\n        octets of route data.", "notes": "The way the second octet is defined, although readable to majority of the audience with no concern, will incorrectly equate to:\r\nlength = 'option type code octet' + 'length octet + 'pointer octet' + length - 3 octet of route data\r\n\r\nSo, what is the value of 'length' in 'length - 3'; when reader encounters 'length - 3', the term 'length' itself is not completely defined. Using the term 'length - 3' to define the term 'length' may not be very appropriate. \r\n\r\nFor better readability, we can simply write -\r\nThe second octet is the option length, measured in octets, including the option type code octet, the length octet, the pointer octet, and the octets of route data.\r\n\r\nThe same correction applies to the following sections -\r\n3.1.  Internet Header Format > Loose Source and Record Route\r\n3.1.  Internet Header Format > Strict Source and Record Route\r\n3.1.  Internet Header Format > Record Route\n --VERIFIER NOTES-- \nWhile the text can be simplified as the submitter of the Erratum implies, the current text has been in use for close to 4 decades without any interoperability issues rising out of it. Hence this ", "submit_date": "2017-06-10", "submitter_name": "Prabhu K Lokesh", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-03-25 20:50:22"}, {"errata_id": "5039", "doc-id": "RFC6761", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "   The private-address [RFC1918] reverse-mapping domains listed below,\r\n   and any names falling within those domains, are Special-Use Domain\r\n   Names:\r\n\r\n     10.in-addr.arpa.      21.172.in-addr.arpa.  26.172.in-addr.arpa.\r\n     16.172.in-addr.arpa.  22.172.in-addr.arpa.  27.172.in-addr.arpa.\r\n     17.172.in-addr.arpa.  30.172.in-addr.arpa.  28.172.in-addr.arpa.\r\n     18.172.in-addr.arpa.  23.172.in-addr.arpa.  29.172.in-addr.arpa.\r\n     19.172.in-addr.arpa.  24.172.in-addr.arpa.  31.172.in-addr.arpa.\r\n     20.172.in-addr.arpa.  25.172.in-addr.arpa.  168.192.in-addr.arpa.\r\n", "correct_text": "   The private-address [RFC1918] reverse-mapping domains listed below,\r\n   and any names falling within those domains, are Special-Use Domain\r\n   Names:\r\n\r\n     10.in-addr.arpa.      21.172.in-addr.arpa.  27.172.in-addr.arpa.\r\n     16.172.in-addr.arpa.  22.172.in-addr.arpa.  28.172.in-addr.arpa.\r\n     17.172.in-addr.arpa.  23.172.in-addr.arpa.  29.172.in-addr.arpa.\r\n     18.172.in-addr.arpa.  24.172.in-addr.arpa.  30.172.in-addr.arpa.\r\n     19.172.in-addr.arpa.  25.172.in-addr.arpa.  31.172.in-addr.arpa.\r\n     20.172.in-addr.arpa.  26.172.in-addr.arpa.  168.192.in-addr.arpa.\r\n", "notes": "the original list is not correctly ordered, therefore is Errata-ID 5025 obsolete: this said that 30.172.in-addr.arpa. were missing in the original list.", "submit_date": "2017-06-12", "submitter_name": "Walter H.", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5040", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "18.46.3", "orig_text": "Operations other than SEQUENCE, BIND_CONN_TO_SESSION, EXCHANGE_ID,\r\nCREATE_SESSION, and DESTROY_SESSION, MUST NOT appear as the first\r\noperation in a COMPOUND.  ", "correct_text": "Operations other than SEQUENCE, BIND_CONN_TO_SESSION, \r\nEXCHANGE_ID, DESTROY_CLIENTID, CREATE_SESSION, and \r\nDESTROY_SESSION, MUST NOT appear as the first \r\noperation in a COMPOUND.  ", "notes": "In the section for DESTROY_CLIENTID (18.50.3), the following text exists (see snipped section below).\r\nThis means that DESTROY_CLIENTID must also be in the list for operations that are allowed\r\nin the first operation of a compound.\r\n\r\n<...snip...>\r\n   If DESTROY_CLIENTID is not prefixed by SEQUENCE, it MUST be the only\r\n   operation in the COMPOUND request (otherwise, the server MUST return\r\n   NFS4ERR_NOT_ONLY_OP).  If the operation is sent without a SEQUENCE\r\n   preceding it, a client that retransmits the request may receive an\r\n   error in response, because the original request might have been\r\n   successfully executed.\r\n<...snip...>", "submit_date": "2017-06-12", "submitter_name": "Jonathan Price", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-09-03 11:15:15"}, {"errata_id": "5053", "doc-id": "RFC8007", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.3", "orig_text": "| canceling |\r\n| canceled  |", "correct_text": "| cancelling |\r\n| cancelled  |\r\n", "notes": "In the final editing phase, I believe it was agreed that text would use the American spelling with 1 \"l\", but that the actual status strings would use 2 \"l\"s.  In sections 2.3, 4.3, 4.5, and Appendix A, the quoted status strings all use 2 \"l\"s.  The first column of the table in section 5.2.3 is providing the JSON string values, which should match the quoted status strings in sections 2.3, 4.3, 4.5, and Appendix A and have 2 \"l\"s.", "submit_date": "2017-06-27", "submitter_name": "Kevin J. Ma", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-01-22 15:11:03"}, {"errata_id": "5054", "doc-id": "RFC8007", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.7", "orig_text": "| ecanceled    |", "correct_text": "| ecancelled   |\r\n\r\n", "notes": "In the final editing phase, I believe it was agreed that text would use the American spelling with 1 \"l\", but that the status strings would use 2 \"l\"s.  This should apply to the error codes as well.  The first column of the table in section 5.2.7 is providing the Error Code values, which like the status code strings in sections 2.3, 4.3, 4.5, 5.2.3, and Appendix A, should have 2 \"l\"s.  Note: The IANA registry has the error code as \"ecancelled\" with 2 \"l\"s.  http://www.iana.org/assignments/cdni-parameters/cdni-parameters.xhtml#error-codes\r\n\r\nNote: This errata also applies to Appendix A.", "submit_date": "2017-06-27", "submitter_name": "Kevin J. Ma", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-01-22 15:11:40"}, {"errata_id": "5092", "doc-id": "RFC3626", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "      Reserved\r\n\r\n         This field must be set to \"0000000000000\" to be in compliance\r\n         with this specification.\r\n", "correct_text": "      Reserved\r\n\r\n         This field must be set to zero to be in compliance with this \r\n         specification.\r\n", "notes": "Reserved takes 16+n*8 bits in this message, but the text specifies a 13-bit constant.", "submit_date": "2017-08-19", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5093", "doc-id": "RFC3575", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Global", "orig_text": "", "correct_text": "", "notes": "Errata report was blank, assuming submitted in error / by a bot.\n --VERIFIER NOTES-- \n Reported errata was blank - assuming submitted in error.", "submit_date": "2017-08-20", "submitter_name": "Octabiolopez", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5055", "doc-id": "RFC7162", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.2.1", "orig_text": "   C: A142 SELECT INBOX\r\n   S: * 172 EXISTS\r\n   S: * 1 RECENT\r\n   S: * OK [UNSEEN 12] Message 12 is first unseen\r\n   S: * OK [UIDVALIDITY 3857529045] UIDs valid\r\n   S: * OK [UIDNEXT 4392] Predicted next UID\r\n   S: * FLAGS (\\Answered \\Flagged \\Deleted \\Seen \\Draft)\r\n   S: * OK [PERMANENTFLAGS (\\Deleted \\Seen \\*)] Limited\r\n   S: * OK [HIGHESTMODSEQ 715194045007]\r\n   S: A142 OK [READ-WRITE] SELECT completed", "correct_text": "   C: A142 SELECT INBOX\r\n   S: * 172 EXISTS\r\n   S: * 1 RECENT\r\n   S: * OK [UNSEEN 12] Message 12 is first unseen\r\n   S: * OK [UIDVALIDITY 3857529045] UIDs valid\r\n   S: * OK [UIDNEXT 4392] Predicted next UID\r\n   S: * FLAGS (\\Answered \\Flagged \\Deleted \\Seen \\Draft)\r\n   S: * OK [PERMANENTFLAGS (\\Deleted \\Seen \\*)] Limited\r\n   S: * OK [HIGHESTMODSEQ 715194045007] Ok\r\n                                       ^^^\r\n   S: A142 OK [READ-WRITE] SELECT completed", "notes": "RFC 7162 purports to extend RFC 3501 by adding the HIGHESTMODSEQ value as an option for the resp-text-code syntax. However, RFC 3501 only uses resp-text-code in the resp-text ABNF production, in which case it is always followed by a single space (\"SP\") and the \"text\" non-terminal, which expands to \"1*TEXT-CHAR\", as in non-empty text. As such, having a response code without any human-readable text suffix is illegal per the RFC 3501 spec, and the examples should be updated to be correct.", "submit_date": "2017-06-28", "submitter_name": "Dirkjan Ochtman", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2020-02-21 16:39:29"}, {"errata_id": "5056", "doc-id": "RFC7296", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1.7", "orig_text": "   This document removes discussion of the INTERNAL_ADDRESS_EXPIRY\r\n   configuration attribute because its implementation was very\r\n   problematic.  Implementations that conform to this document MUST\r\n   ignore proposals that have configuration attribute type 5, the old\r\n   value for INTERNAL_ADDRESS_EXPIRY \r\n", "correct_text": "Unclear what it should be", "notes": "Configuration attribute 5, INTERNAL_ADDRESS_EXPIRY, is a type of attribute in a configuration payload.  It is not an attribute in a proposal.  As documented in Section 2.7 proposals are part of an SA payload.\r\n\r\n   An SA payload consists of one or more proposals.  Each proposal\r\n   includes one protocol.  Each protocol contains one or more transforms\r\n   -- each specifying a cryptographic algorithm.  Each transform\r\n   contains zero or more attributes (attributes are needed only if the\r\n   Transform ID does not completely specify the cryptographic\r\n   algorithm).\r\n\r\nSo the correct behavior when one receives a *configuration* payload with INTERNAL_ADDRESS_EXPIRY cannot be to ignore a proposal.  Was the intent to say that the configuration payload should be ignored?  Was the intent to say that the configuration payload should be processed but the INTERNAL_ADDRESS_EXPIRY attribute ignored?  Clearly these choices would result in radically different outcomes for the negotiation.\r\n\r\nPaul Wouters:\r\n\r\nThis comment is about the use of the word \"proposal\" which I agree is open to wrong interpretation. My suggestion would be:\r\n\r\nCurrent:\r\n\r\n    Implementations that conform to this document MUST\r\n    ignore proposals that have configuration attribute type 5, the old\r\n    value for INTERNAL_ADDRESS_EXPIRY\r\n\r\nProposed:\r\n\r\n    Implementations that conform to this document MUST\r\n    process configuration attribute value 5 similar to\r\n    any other unknown Attribute Type.\r\n\r\nIt is mostly obvious that only the attribute type should be ignored, not the entire proposal. Therefor Held for Document update as it does not affect implementations but the wording should be improved in future versions of the document", "submit_date": "2017-06-29", "submitter_name": "Michael Taylor", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-11 00:06:13"}, {"errata_id": "5057", "doc-id": "RFC7774", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1", "orig_text": "DM_IMAX (unsigned 8-bit integer):  DATA_MESSAGE_IMAX.  The actual\r\n      maximum timeout is described as a number of doublings of\r\n      DATA_MESSAGE_IMIN, as described in [RFC6206], Section 4.1.\r\n      0 and 0xff are reserved and MUST NOT be used.\r\n\r\n", "correct_text": "DM_IMAX (unsigned 8-bit integer):  DATA_MESSAGE_IMAX.  The actual\r\n      maximum timeout is described as a number of doublings of\r\n      DATA_MESSAGE_IMIN, as described in [RFC6206], Section 4.1.\r\n      0xff is reserved and MUST NOT be used.", "notes": "RFC6206\r\nThe maximum interval size, Imax, is described as a number of\r\n      doublings of the minimum interval size.\r\n\r\nRFC7731\r\nDATA_MESSAGE_IMAX  - The maximum Trickle timer interval, as defined\r\n      in [RFC6206], for MPL Data Message transmissions.\r\n      DATA_MESSAGE_IMAX has a default value equal to DATA_MESSAGE_IMIN.\r\nalso\r\n   The default MPL parameters specify a forwarding strategy that\r\n   utilizes both proactive and reactive techniques.  Using these default\r\n   values, an MPL Forwarder proactively transmits any new MPL Data\r\n   Messages it receives and then uses MPL Control Messages to trigger\r\n   additional MPL Data Message retransmissions where message drops are\r\n   detected.  Setting DATA_MESSAGE_IMAX to the same value as\r\n   DATA_MESSAGE_IMIN in this case is acceptable, since subsequent MPL\r\n   Data Message retransmissions are triggered by MPL Control Messages,\r\n   where CONTROL_MESSAGE_IMAX is greater than CONTROL_MESSAGE_IMIN.\r\n\r\nFor DATA_MESSAGE_IMAX == DATA_MESSAGE_IMIN implies DM_IMAX=0.  0 is a valid value for DM_IMAX.\r\n\r\n=====\r\n[Alvaro Retana] \r\n\r\nThe pointer to rfc7731 seems to indicate that the description for is incorrect. However, this document uses Normative language to define the DM_IMAX parameter. \r\n\r\nI am then not marking this report as Verified, but as \"Hold for Document Update\", which means that when this document is updated, the validity should be considered then. [1] \r\n\r\n[1] https://www.ietf.org/iesg/statement/errata-processing.html \r\n", "submit_date": "2017-06-29", "submitter_name": "James K.", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5069", "doc-id": "RFC7946", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1.6", "orig_text": "3.1.6.  Polygon\r\n\r\n   To specify a constraint specific to Polygons, it is useful to\r\n   introduce the concept of a linear ring:\r\n\r\n   o  A linear ring is a closed LineString with four or more positions.\r\n\r\n   o  The first and last positions are equivalent, and they MUST contain\r\n      identical values; their representation SHOULD also be identical.\r\n\r\n   o  A linear ring is the boundary of a surface or the boundary of a\r\n      hole in a surface.\r\n\r\n   o  A linear ring MUST follow the right-hand rule with respect to the\r\n      area it bounds, i.e., exterior rings are counterclockwise, and\r\n      holes are clockwise.\r\n\r\n   Note: the [GJ2008] specification did not discuss linear ring winding\r\n   order.  For backwards compatibility, parsers SHOULD NOT reject\r\n   Polygons that do not follow the right-hand rule.\r\n\r\n   Though a linear ring is not explicitly represented as a GeoJSON\r\n   geometry type, it leads to a canonical formulation of the Polygon\r\n   geometry type definition as follows:\r\n\r\n   o  For type \"Polygon\", the \"coordinates\" member MUST be an array of\r\n      linear ring coordinate arrays.\r\n\r\n   o  For Polygons with more than one of these rings, the first MUST be\r\n      the exterior ring, and any others MUST be interior rings.  The\r\n      exterior ring bounds the surface, and the interior rings (if\r\n      present) bound holes within the surface.\r\n", "correct_text": "3.1.6.  Polygon\r\n\r\n   To specify a constraint specific to Polygons, it is useful to\r\n   introduce the concept of a linear ring:\r\n\r\n   o  A linear ring is a closed LineString with four or more positions.\r\n\r\n   o  The first and last positions are equivalent, and they MUST contain\r\n      identical values; their representation SHOULD also be identical.\r\n\r\n   o  A linear ring is the boundary of a surface or the boundary of a\r\n      hole in a surface.\r\n\r\n   o  A linear ring MUST follow the right-hand rule with respect to the\r\n      area it bounds, i.e., exterior rings are clockwise, and holes are\r\n      counterclockwise.\r\n\r\n   Note: the [GJ2008] specification did not discuss linear ring winding\r\n   order.  For backwards compatibility, parsers SHOULD NOT reject\r\n   Polygons that do not follow the right-hand rule.\r\n\r\n   Though a linear ring is not explicitly represented as a GeoJSON\r\n   geometry type, it leads to a canonical formulation of the Polygon\r\n   geometry type definition as follows:\r\n\r\n   o  For type \"Polygon\", the \"coordinates\" member MUST be an array of\r\n      linear ring coordinate arrays.\r\n\r\n   o  For Polygons with more than one of these rings, the first MUST be\r\n      the exterior ring, and any others MUST be interior rings.  The\r\n      exterior ring bounds the surface, and the interior rings (if\r\n      present) bound holes within the surface.\r\n", "notes": "This is only for the bullet point describing the right-hand rule for linear rings. It seems like the clockwise/counterclockwise descriptions are the opposite of the right-hand rule. Walking an exterior ring in a counterclockwise direction would have the exterior of the ring to the right of the observer.", "submit_date": "2017-07-14", "submitter_name": "Clark Archer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5094", "doc-id": "RFC7541", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "Integers are used to represent name indexes, header field indexes,\r\nor string lengths.", "correct_text": "Integers are used to represent name indexes, header field indexes,\r\nstring lengths, or dynamic table size.", "notes": "Section 5.1 says, Integer encodings that exceed implementation limits \u2014 in value or octet length \u2014 MUST be treated as decoding errors.\r\n\r\nSection 6.3 is using HPACK integer to represent value of dynamic table size. This size can be more larger than index or string length. \r\n\r\nThis change make user who implement integer encoding/decoding can figure out a proper integer value limit for each condition.", "submit_date": "2017-08-24", "submitter_name": "Xue Fei", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5058", "doc-id": "RFC6121", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1.6", "orig_text": "   2.  A receiving client MUST ignore the stanza unless it has no 'from'\r\n       attribute (i.e., implicitly from the bare JID of the user's\r\n       account) or it has a 'from' attribute whose value matches the\r\n       user's bare JID <user@domainpart>.", "correct_text": "   2.  A receiving client MUST ignore the stanza unless it has no 'from'\r\n       attribute (i.e., implicitly from the bare JID of the user's\r\n       account) or it has a 'from' attribute whose value matches either\r\n       the user's bare JID <user@domainpart> or the address of an entity\r\n       authorized performing roster pushes.", "notes": "RFC 6121 \u00a7 2.1.6 2. specifies that roster pushes have to origin from the \"user's account\", i.e., no 'from' attribute or 'from' attribute matching the user's bare JID. However the Security Warning in the same section states that\r\n\r\n      ... this specification allows entities other than the user's server to\r\n      maintain roster information, which means that a roster push might\r\n      include a 'from' address other than the bare JID of the user's\r\n      account.  Therefore, the client MUST check the 'from' address to\r\n      verify that the sender of the roster push is authorized to update\r\n      the roster.\r\n\r\nwhich contradicts what is specified in \u00a7 2.1.6 2.\r\n\r\nVerifier note: This seems more than editorial, and probably needs some discussion about third party authorizations. I will set the status to \"Held for Document Update\"", "submit_date": "2017-07-02", "submitter_name": "Florian Schmaus", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5059", "doc-id": "RFC7635", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2", "orig_text": "   key_length:  Length of the session key in octets.  The key length of\r\n      160 bits MUST be supported (i.e., only the 160-bit key is used by\r\n      HMAC-SHA-1 for message integrity of STUN messages).  The key\r\n      length facilitates the hash agility plan discussed in Section 16.3\r\n      of [RFC5389].\r\n", "correct_text": "   key_length:  Length of the session key in octets.", "notes": "RFC2104 section 2 states:\r\n\r\n   The authentication key K can be of any length up to B, the\r\n   block length of the hash function.  Applications that use keys longer\r\n   than B bytes will first hash the key using H and then use the\r\n   resultant L byte string as the actual key to HMAC.\r\n\r\nMeaning any key length is allowed. The fact that the hash output is 20 bytes doesn't mean the key needs to be 20 bytes as well.", "submit_date": "2017-07-05", "submitter_name": "Taylor Brandstetter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7669", "doc-id": "RFC5662", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "   /// /*\r\n   ///  * From RFC 2203\r\n   ///  */\r\n   /// enum rpc_gss_svc_t {\r\n   ///         RPC_GSS_SVC_NONE        = 1,\r\n   ///         RPC_GSS_SVC_INTEGRITY   = 2,\r\n   ///         RPC_GSS_SVC_PRIVACY     = 3\r\n   /// };\r\n   ///\r\n   /// struct rpcsec_gss_info {\r\n   ///         sec_oid4        oid;\r\n   ///         qop4            qop;\r\n   ///         rpc_gss_svc_t   service;\r\n   /// };", "correct_text": "   /// /*\r\n   ///  * From RFC 2203\r\n   ///  */\r\n   /// enum rpc_gss_service_t {\r\n   ///         /* Note: the enumerated value for 0 is reserved. */\r\n   ///         rpc_gss_svc_none        = 1,\r\n   ///         rpc_gss_svc_integrity   = 2,\r\n   ///         rpc_gss_svc_privacy     = 3\r\n   /// };\r\n   ///\r\n   /// struct rpcsec_gss_info {\r\n   ///         sec_oid4            oid;\r\n   ///         qop4                qop;\r\n   ///         rpc_gss_service_t   service;\r\n   /// };", "notes": "Mentioned RFC 2203 (and also its updates RFC 5403 and RFC 7861) does not have any enum rpc_gss_svc_t. Instead it has enum rpc_gss_service_t and all enum values are lowercase.", "submit_date": "2023-10-06", "submitter_name": "Pali Roh\u00e1r", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5118", "doc-id": "RFC1738", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.", "orig_text": "gopherurl      = \"gopher://\" hostport [ / [ gtype [ selector\r\n                 [ \"%09\" search [ \"%09\" gopher+_string ] ] ] ] ]\r\n", "correct_text": "gopherurl      = \"gopher://\" hostport [ \"/\" [ gtype [ selector\r\n                 [ \"%09\" search [ \"%09\" gopher+_string ] ] ] ] ]\r\n", "notes": "The slash after the first square bracket open should be quoted because it is a literal slash, as evidenced in the example in section 3.4.1:\r\n\r\n3.4.1. Gopher URL syntax\r\n\r\n      gopher://<host>:<port>/<gopher-path>", "submit_date": "2017-09-15", "submitter_name": "literal slash needed in gopher BNF", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5119", "doc-id": "RFC4592", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.7", "orig_text": "4.7.  NSEC RRSet at a Wildcard Domain Name\r\n\r\n   Wildcard domain names in DNSSEC signed zones will have an NSEC RRSet.\r\n   Synthesis of these records will only occur when the query exactly\r\n   matches the record.  Synthesized NSEC RRs will not be harmful as they\r\n   will never be used in negative caching or to generate a negative\r\n   response [RFC2308].\r\n", "correct_text": "4.7.  NSEC RRSet at a Wildcard Domain Name\r\n\r\n   Wildcard domain names in DNSSEC signed zones will have an NSEC RRSet.\r\n   NSEC RRSets must not be synthesized from this wildcard NSEC.", "notes": "Synthesizing these records would destroy the semantics of the NSEC chain and could be very harmful if implementations would cache them and use them for \"Aggressive Use of DNSSEC-Validated Cache\" (RFC 8198).", "submit_date": "2017-09-21", "submitter_name": "Karst Koymans", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5123", "doc-id": "RFC2361", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "WAVE form wFormatTag ID:        WAVE_FORMAT_ CREATIVE_FASTSPEECH10", "correct_text": "WAVE form wFormatTag ID:        WAVE_FORMAT_CREATIVE_FASTSPEECH10", "notes": "", "submit_date": "2017-09-24", "submitter_name": "David Russo", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:01:50"}, {"errata_id": "5124", "doc-id": "RFC2361", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A.58 says:", "orig_text": "WAVE form wFormatTag ID:n       WAVE_FORMAT_VOXWARE_BYTE_ALIGNED", "correct_text": "WAVE form wFormatTag ID:        WAVE_FORMAT_VOXWARE_BYTE_ALIGNED", "notes": "", "submit_date": "2017-09-24", "submitter_name": "David Russo", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-16 06:00:24"}, {"errata_id": "5125", "doc-id": "RFC2361", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "A.40    Rockwell Digit LK", "correct_text": "A.40    Rockwell DigiTalk", "notes": "The existing text matches what appears in the Internet-Draft (https://datatracker.ietf.org/doc/draft-fleischman-codec-subtree/01/) and the IANA registry (https://www.iana.org/assignments/wave-avi-codec-registry/).", "submit_date": "2017-09-24", "submitter_name": "David Russo", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-29 01:59:52"}, {"errata_id": "5126", "doc-id": "RFC2361", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "Codec ID in the IANA Namespace:         audio/vnd.wave;codec=1401\r\nWAVE form wFormatTag ID:                WAVE_FORMAT_ISIAUDIO", "correct_text": "Codec ID in the IANA Namespace:         audio/vnd.wave;codec=1401\r\nWAVE form wFormatTag ID:                WAVE_FORMAT_ISIAUDIO_2", "notes": "Codec 1401 has an ID of \"WAVE_FORMAT_ISIAUDIO_2\" according to \"mmreg.h\", from which it presumably derives. \"WAVE_FORMAT_ISIAUDIO\" is already the ID of codec 88, which appears earlier in the appendix.", "submit_date": "2017-09-24", "submitter_name": "David Russo", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:03:38"}, {"errata_id": "5127", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.", "orig_text": "IMSK = First 32 octets of TLS-PRF(EMSK, \"TEAPbindkey@ietf.org\" |\r\n     \"\\0\" | 64)", "correct_text": "IMSK = First 32 octets of TLS-PRF(EMSK, \"TEAPbindkey@ietf.org\" |\r\n     \"\\0\", 64)", "notes": "According to\r\n\r\nRFC5246 The Transport Layer Security (TLS) Protocol Version 1.2\r\n\r\n5.  HMAC and the Pseudorandom Function\r\n\r\n\"TLS's PRF is created by applying P_hash to the secret as:\r\n\r\n      PRF(secret, label, seed) = P_<hash>(secret, label + seed)\"", "submit_date": "2017-09-25", "submitter_name": "Tuure Vartiainen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:02:36"}, {"errata_id": "5060", "doc-id": "RFC7635", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "   [STUN] supports hash agility and accomplishes this agility by\r\n   computing message integrity using both HMAC-SHA-1 and\r\n   HMAC-SHA-256-128.  The client signals the algorithm supported by it\r\n   to the authorization server in the 'alg' parameter defined in\r\n   [POP-KEY-DIST].  The authorization server determines the length of\r\n   the mac_key based on the HMAC algorithm conveyed by the client.  If\r\n   the client supports both HMAC-SHA-1 and HMAC-SHA-256-128, then it\r\n   signals HMAC-SHA-256-128 to the authorization server, gets a 256-bit\r\n   key from the authorization server, and calculates a 160-bit key for\r\n   HMAC-SHA-1 using SHA1 and taking the 256-bit key as input.", "correct_text": "   [STUN] supports hash agility and accomplishes this agility by\r\n   computing message integrity using both HMAC-SHA-1 and\r\n   HMAC-SHA-256-128.  The client signals the algorithm supported by it\r\n   to the authorization server in the 'alg' parameter defined in\r\n   [POP-KEY-DIST].  The authorization server determines the length of\r\n   the mac_key based on the HMAC algorithm conveyed by the client.  If\r\n   the client supports both HMAC-SHA-1 and HMAC-SHA-256-128, then it\r\n   signals HMAC-SHA-256-128 to the authorization server, and gets a\r\n   256-bit key from the authorization server, which can be used to\r\n   compute both the HMAC-SHA-1 and HMAC-SHA-256-128 hashes. If the\r\n   client only supports HMAC-SHA-1, the authorization server could\r\n   return a 160-bit key, as keys longer than the HMAC-SHA-1 output\r\n   size of 160-bits would not significantly increase the function's\r\n   strength.", "notes": "The SHA-1 block size is 512 bits, so a 256-bit key does not need to be shortened to compute a HMAC-SHA-1 hash.\r\n\r\nAlso added an example for \"if the client only supports HMAC-SHA-1\", to make the hash agility logic more clear.", "submit_date": "2017-07-05", "submitter_name": "Taylor Brandstetter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5061", "doc-id": "RFC7848", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "      *  One or more <mark:protection> elements that contain the\r\n         countries and region of the country where the mark is\r\n         protected.  The <mark:protection> element contains the\r\n         following child elements:\r\n\r\n         +  A <mark:cc> element that contains the two-character code of\r\n            the country in which the mark is protected.  This is a two-\r\n            character code from [ISO3166-2].\r\n\r\n         +  An OPTIONAL <mark:region> element that contains the name of\r\n            a city, state, province, or other geographic region of\r\n            <mark:country> in which the mark is protected.\r\n\r\n         +  Zero or more OPTIONAL <mark:ruling> elements that contain\r\n            the two-character code of the national territory in which\r\n            the statute or treaty is applicable.  This is a two-\r\n            character code from [ISO3166-2].\r\n\r\n         +  Zero or more OPTIONAL <mark:label> elements; see definition\r\n            in the <mark:trademark> section above.", "correct_text": "      *  One or more <mark:protection> elements that contain the\r\n         countries and region of the country where the mark is\r\n         protected.  The <mark:protection> element contains the\r\n         following child elements:\r\n\r\n         +  A <mark:cc> element that contains the two-character code of\r\n            the country in which the mark is protected.  This is a two-\r\n            character code from [ISO3166-2].\r\n\r\n         +  An OPTIONAL <mark:region> element that contains the name of\r\n            a city, state, province, or other geographic region of\r\n            <mark:country> in which the mark is protected.\r\n\r\n         +  Zero or more OPTIONAL <mark:ruling> elements that contain\r\n            the code from [ISO3166-2] of the national territory in which\r\n            the statute or treaty is applicable.\r\n\r\n      *  Zero or more OPTIONAL <mark:label> elements; see definition\r\n         in the <mark:trademark> section above.", "notes": "ISO 3166-2 subdivisions are not strictly two-character codes, but can be numeric or contain more than two characters, so the description of the <mark:ruling> element needs to be changed.\r\n\r\nAdditionally, the indentation of the <mark:label> element makes it appear as a child of <mark:protection>, which is in contradiction to the XML schema on pages 17 and 18.", "submit_date": "2017-07-06", "submitter_name": "Nicos Gollan", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5062", "doc-id": "RFC7848", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "All occurrences citing [ISO3166-2]", "correct_text": "Replace with [ISO3166]", "notes": "The RFC mistakenly references ISO 3166-2 for general country codes which is incorrect. Country codes are defined in ISO 3166-1, the 2-character codes used throughout this document in ISO 3166-1 alpha-2, administrative subdivisions in ISO 3166-2. The actual content of the citation points to the general standards \"family\" already.", "submit_date": "2017-07-06", "submitter_name": "Nicos Gollan", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5070", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   tag-spec  =  [FWS] tag-name [FWS] \"=\" [FWS] tag-value [FWS]\r\n   tag-name  =  ALPHA *ALNUMPUNC\r\n   tag-value =  [ tval *( 1*(WSP / FWS) tval ) ]\r\n                     ; Prohibits WSP and FWS at beginning and end", "correct_text": "   tag-spec  =  [FWS] tag-name [FWS] \"=\" [FWS] [tag-value [FWS]]\r\n   tag-name  =  ALPHA *ALNUMPUNC\r\n   tag-value =  tval *( 1*(WSP / FWS) tval )\r\n                     ; Prohibits WSP and FWS at beginning and end", "notes": "The ABNF in the document permits two FWS rules to appear in the row. This results in permitting a line with only whitespace in the header which falls into obsolete syntax in RFC 5322 (Appendix B rule 12). The corrected text disallows this by eliding the second FWS when the tag-value is empty/omitted.", "submit_date": "2017-07-15", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5072", "doc-id": "RFC3218", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   [PKCS-1-v2]   Kaliski, B., \"PKCS #1: RSA Encryption, Version 2.0\",\r\n                 RFC 2347, October 1998.\r\n", "correct_text": "   [PKCS-1-v2]   Kaliski, B. and J. Staddon, \"PKCS #1: RSA Cryptography\r\n                 Specifications Version 2.0\", RFC 2437, October 1998.\r\n", "notes": "RFC 2347 is \"TFTP Option Extension\", unrelated to PKCS.\r\n-----\r\nVerifier Notes: Transposition of the RFC number and incorrect author and title have been updated in the corrected text.  ", "submit_date": "2017-07-25", "submitter_name": "Kalle Olavi Niemitalo", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5518", "doc-id": "RFC6265", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": " cookie-octet      = %x21 / %x23-2B / %x2D-3A / %x3C-5B / %x5D-7E\r\n                       ; US-ASCII characters excluding CTLs,\r\n                       ; whitespace DQUOTE, comma, semicolon,\r\n                       ; and backslash", "correct_text": " cookie-octet      = %x21 / %x23-2B / %x2D-3A / %x3C-5B / %x5D-7E\r\n                       ; US-ASCII characters excluding CTLs,\r\n                       ; whitespace, DQUOTE, comma, semicolon,\r\n                       ; and backslash", "notes": "Missing comma separator between \"whitespace\" and \"DQUOTE\".", "submit_date": "2018-10-09", "submitter_name": "Peter Wu", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-29 19:37:18"}, {"errata_id": "5519", "doc-id": "RFC8032", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.7", "orig_text": "Decode the first half as a point R, and the second half as an integer S,\r\nin the range 0 <= s < L.\r\n", "correct_text": "Decode the first half as a point R, and the second half as an integer S,\r\nin the range 0 <= S < L.\r\n", "notes": "original document expression is ' 0 <= s < L', but it must be '0 <= S < L'. upper/lower case problem.", "submit_date": "2018-10-10", "submitter_name": "Susumu Endoh", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5063", "doc-id": "RFC7774", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   C_T_EXP (unsigned 16-bit integer):\r\n      CONTROL_MESSAGE_TIMER_EXPIRATIONS.  0 and 0xffff are reserved and\r\n      MUST NOT be used.", "correct_text": "   C_T_EXP (unsigned 16-bit integer):\r\n      CONTROL_MESSAGE_TIMER_EXPIRATIONS.  0xffff is reserved and\r\n      MUST NOT be used.", "notes": "[RFC 7731] states:\r\n\r\n9.3.  MPL Data Message Processing\r\n\r\n   o  If the MPL Control Message Trickle timer is not running and\r\n      CONTROL_MESSAGE_TIMER_EXPIRATIONS is non-zero, the MPL Forwarder\r\n      MUST initialize and start the MPL Control Message Trickle timer.\r\n\r\n10.2.  MPL Control Message Transmission\r\n\r\n   An MPL Forwarder transmits MPL Control Messages using the Trickle\r\n   algorithm.  An MPL Forwarder maintains a single Trickle timer for\r\n   each MPL Domain.  When CONTROL_MESSAGE_TIMER_EXPIRATIONS is 0, the\r\n   MPL Forwarder does not execute the Trickle algorithm and does not\r\n   transmit MPL Control Messages.\r\n\r\nThus, 0 is a valid configuration for C_T_EXP to disable Reactive Forwarding.\r\n\r\n=====\r\n[Alvaro Retana]\r\n\r\nThe pointer to rfc7731 seems to indicate that the description for CONTROL_MESSAGE_TIMER_EXPIRATIONS is incorrect.  However, this document uses Normative language to define the C_T_EXP parameter.\r\n\r\nI am then not marking this report as Verified, but as \"Hold for Document Update\", which means that when this document is updated, the validity should be considered then. [1]\r\n\r\n[1] https://www.ietf.org/iesg/statement/errata-processing.html", "submit_date": "2017-07-06", "submitter_name": "James K.", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5064", "doc-id": "RFC8007", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2.5", "orig_text": "6.2.5.  Deleting Trigger Status Resources\r\n\r\n   The uCDN can delete completed and failed Trigger Status Resources to\r\n   reduce the size of the collections, as described in Section 4.4.  For\r\n   example, to delete the \"preposition\" request from earlier examples:\r\n", "correct_text": "6.2.5.  Canceling or Deleting Trigger Status Resources\r\n\r\n   The uCDN can cancel pending or active Trigger Status Resource\r\n   processing, as described in Section 4.3.  For example, to cancel\r\n   the \"preposition\" request from earlier examples:\r\n\r\n   REQUEST:\r\n\r\n     POST /triggers HTTP/1.1\r\n     User-Agent: example-user-agent/0.1\r\n     Host: dcdn.example.com\r\n     Accept: */*\r\n     Content-Type: application/cdni; ptype=ci-trigger-command\r\n     Content-Length: 91\r\n\r\n     {\r\n       \"cancel\" : [ \"https://dcdn.example.com/triggers/0\" ],\r\n       \"cdn-path\" : [ \"AS64496:1\" ]\r\n     }\r\n\r\n   RESPONSE:\r\n\r\n     HTTP/1.1 200 OK\r\n     Content-Length: 0\r\n     Server: example-server/0.1\r\n     Date: Wed, 04 May 2016 08:50:00 GMT\r\n\r\n   The uCDN can also delete completed and/or failed Trigger Status\r\n   Resources to reduce the size of the collections, as described in\r\n   Section 4.4.  For example, to delete the \"preposition\" request from\r\n   earlier examples:\r\n", "notes": "There is no example for canceling a trigger.  Section 4.3 does not specify what the response payload should be for cancel responses.  An explicit example would help clarify the intent of an empty response.  A cancel example probably warrants its own section, but for the purposes of simplifying this errata, it has been combined with the delete example.", "submit_date": "2017-07-07", "submitter_name": "Kevin J. Ma", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-01-22 15:13:05"}, {"errata_id": "5073", "doc-id": "RFC3414", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1.5.1", "orig_text": "When an SNMP message contains a\r\n   payload which expects a response (those messages that contain a\r\n   Confirmed Class PDU [RFC3411]), then the receiver of such messages is\r\n   authoritative.  When an SNMP message contains a payload which does\r\n   not expect a response (those messages that contain an Unconfirmed\r\n   Class PDU [RFC3411]), then the sender of such a message is\r\n   authoritative.", "correct_text": "When an SNMP message contains a\r\n   payload which expects a response (those messages that contain a\r\n   Confirmed Class PDU [RFC3411]), then the receiver of such messages is\r\n   authoritative.  When an SNMP message contains a payload which does\r\n   not expect a response (those messages that contain an Unconfirmed\r\n   Class PDU [RFC3411]), then the sender of such a message is\r\n   non-authoritative.", "notes": "In both cases the receiver was classified as \"authoritative\".\n --VERIFIER NOTES-- \n   The initial text says it correctly:  the sender of such a message is  authoritative", "submit_date": "2017-07-26", "submitter_name": "Fabio Costantini", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5074", "doc-id": "RFC1180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "When an incoming IP packet arrives it is never forwarded back out\r\nthrough the same network interface.", "correct_text": "When an incoming IP packet arrives it may be forwarded back out\r\nthrough the same network interface.", "notes": "IP routers can and do send IP packets out the ingress interface. An ICMP redirect message may be sent in this case.\r\n\r\nThis is different to Ethernet bridge behavior, where a frame will not be sent out the ingress interface.\r\n\r\nAn IP packet that egresses the ingress interface is carried in a new Ethernet frame, this is not the same frame that arrived at the ingress interface (different SRC and DST MAC addresses, decreased TTL in the IP header).", "submit_date": "2017-07-29", "submitter_name": "Erik Auerswald", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:22:01"}, {"errata_id": "7617", "doc-id": "RFC8259", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "Note that when such software is used, numbers that are integers and\r\n   are in the range [-(2**53)+1, (2**53)-1] are interoperable in the\r\n   sense that implementations will agree exactly on their numeric\r\n   values.", "correct_text": "Note that when such software parses numbers as rational numbers in\r\n   decimal or scientific notation, they are interoperable in the sense\r\n   that implementations will agree exactly on their numeric values. In\r\n   particular, when such software is used, numbers that are integers and\r\n   are in the range [-(2**53)+1, (2**53)-1] are interoperable in that\r\n   sense.", "notes": "IEEE 754 does not consider negative zero and positive zero to be the same numeric value, even though it considers them equal. Despite this, JavaScript serializes negative zero as the JSON text \"0\", which contradicts the original text.\r\n\r\nMy suggested correction mentions \"rational numbers in decimal or scientific notation\" since it's never explicitly mentioned in the document how a number should be interpreted when parsed to maximize interoperability. This version addresses that concern at the same time.", "submit_date": "2023-08-25", "submitter_name": "Guillaume Fortin-Debigar\u00e9", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:38:09"}, {"errata_id": "7380", "doc-id": "RFC9073", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "The following changes to the syntax defined in iCalendar [RFC5545]\r\n   are made here.  New elements are defined in subsequent sections.\r\n\r\n   ; Addition of PARTICIPANT, VLOCATION, and VRESOURCE\r\n   ; as valid components\r\n   eventc     = \"BEGIN\" \":\" \"VEVENT\" CRLF\r\n                eventprop *alarmc *participantc *locationc *resourcec\r\n                \"END\" \":\" \"VEVENT\" CRLF\r\n\r\n   ; Addition of properties STYLED-DESCRIPTION and STRUCTURED-DATA\r\n   eventprop  =/ *styleddescription\r\n                 *sdataprop\r\n\r\n   ; Addition of PARTICIPANT, VLOCATION, and VRESOURCE\r\n   ; as valid components\r\n   todoc      = \"BEGIN\" \":\" \"VTODO\" CRLF\r\n                todoprop *alarmc *participantc *locationc *resourcec\r\n                \"END\" \":\" \"VTODO\" CRLF\r\n\r\n   ; Addition of properties STYLED-DESCRIPTION and STRUCTURED-DATA\r\n   todoprop =/ *styleddescription\r\n               *sdataprop\r\n\r\n   ; Addition of PARTICIPANT, VLOCATION, and VRESOURCE\r\n   ; as valid components\r\n   journalc   = \"BEGIN\" \":\" \"VJOURNAL\" CRLF\r\n                jourprop *participantc *locationc *resourcec\r\n                \"END\" \":\" \"VJOURNAL\" CRLF\r\n\r\n   ; Addition of properties STYLED-DESCRIPTION and STRUCTURED-DATA\r\n   jourprop =/ *styleddescription\r\n               *sdataprop\r\n\r\n   ; Addition of PARTICIPANT, VLOCATION, and VRESOURCE\r\n   ; as valid components\r\n   freebusyc  = \"BEGIN\" \":\" \"VFREEBUSY\" CRLF\r\n                fbprop *participantc *locationc *resourcec\r\n                \"END\" \":\" \"VFREEBUSY\" CRLF\r\n\r\n   ; Addition of property STYLED-DESCRIPTION\r\n   fbprop     =/ *styleddescription", "correct_text": "The following changes to the syntax defined in iCalendar [RFC5545]\r\n   are made here.  New elements are defined in subsequent sections.\r\n\r\n   ; Addition of PARTICIPANT, VLOCATION, and VRESOURCE\r\n   ; as valid components\r\n   eventc     = \"BEGIN\" \":\" \"VEVENT\" CRLF\r\n                eventprop *alarmc *participantc *locationc *resourcec\r\n                \"END\" \":\" \"VEVENT\" CRLF\r\n\r\n   ; Addition of properties STYLED-DESCRIPTION and STRUCTURED-DATA\r\n   eventprop  =/ *styleddescription\r\n                 *sdataprop\r\n\r\n   ; Addition of PARTICIPANT, VLOCATION, and VRESOURCE\r\n   ; as valid components\r\n   todoc      = \"BEGIN\" \":\" \"VTODO\" CRLF\r\n                todoprop *alarmc *participantc *locationc *resourcec\r\n                \"END\" \":\" \"VTODO\" CRLF\r\n\r\n   ; Addition of properties STYLED-DESCRIPTION and STRUCTURED-DATA\r\n   todoprop =/ *styleddescription\r\n               *sdataprop\r\n\r\n   ; Addition of PARTICIPANT, VLOCATION, and VRESOURCE\r\n   ; as valid components\r\n   journalc   = \"BEGIN\" \":\" \"VJOURNAL\" CRLF\r\n                jourprop *participantc *locationc *resourcec\r\n                \"END\" \":\" \"VJOURNAL\" CRLF\r\n\r\n   ; Addition of properties STYLED-DESCRIPTION and STRUCTURED-DATA\r\n   jourprop =/ *styleddescription\r\n               *sdataprop\r\n\r\n   ; Addition of PARTICIPANT, VLOCATION, and VRESOURCE\r\n   ; as valid components\r\n   freebusyc  = \"BEGIN\" \":\" \"VFREEBUSY\" CRLF\r\n                fbprop *participantc *locationc *resourcec\r\n                \"END\" \":\" \"VFREEBUSY\" CRLF\r\n\r\n   ; Addition of property STYLED-DESCRIPTION\r\n   fbprop     =/ *styleddescription\r\n\r\n   ; Addition of property STYLED-DESCRIPTION\r\n   alarmprop  =/ *styleddescription", "notes": "The usage of STYLED-DESCRIPTION in VALARMs is mentioned in section 6.5, but not represented as an extension to the syntax in section 4.\n --VERIFIER NOTES-- \n   See https://mailarchive.ietf.org/arch/msg/calsify/HmJBbZpxrvLqn2TR3HkBr9um08s/ for wg discussion.", "submit_date": "2023-03-09", "submitter_name": "Olaf Bartelt", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-09 10:15:21"}, {"errata_id": "5128", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.", "orig_text": "IMCK[j] = TLS-PRF(S-IMCK[j-1], \"Inner Methods Compound Keys\",\r\n                IMSK[j], 60)", "correct_text": "IMCK[j] = the first 60 octets of TLS-PRF(S-IMCK[j-1],\r\n              \"Inner Methods Compound Keys\",\r\n              IMSK[j])", "notes": "According to\r\n\r\nRFC5246 The Transport Layer Security (TLS) Protocol Version 1.2\r\n\r\n5.  HMAC and the Pseudorandom Function\r\n\r\n\"TLS's PRF is created by applying P_hash to the secret as:\r\n\r\n     PRF(secret, label, seed) = P_<hash>(secret, label + seed)\"\r\n\r\nPaul Wouters(AD): Corrected the text proposed by the original submitter, as it now appears in 7170bis", "submit_date": "2017-09-25", "submitter_name": "Tuure Vartiainen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:15:26"}, {"errata_id": "5065", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "   Let CAA(X) be the record set returned in response to performing a CAA\r\n   record query on the label X, P(X) be the DNS label immediately above\r\n   X in the DNS hierarchy, and A(X) be the target of a CNAME or DNAME\r\n   alias record specified at the label X.\r\n\r\n   o  If CAA(X) is not empty, R(X) = CAA (X), otherwise\r\n\r\n   o  If A(X) is not null, and R(A(X)) is not empty, then R(X) =\r\n      R(A(X)), otherwise\r\n\r\n   o  If X is not a top-level domain, then R(X) = R(P(X)), otherwise\r\n\r\n   o  R(X) is empty.", "correct_text": "   Let CAA(X) be the record set returned in response to performing a CAA\r\n   record query on the label X, P(X) be the DNS label immediately above\r\n   X in the DNS hierarchy, and A(X) be the target of a CNAME or DNAME\r\n   alias record chain specified at the label X.\r\n \r\n   o  If CAA(X) is not empty, R(X) = CAA (X), otherwise\r\n \r\n   o  If A(X) is not null, and CAA(A(X)) is not empty, then R(X) =\r\n      CAA(A(X)), otherwise\r\n \r\n   o  If X is not a top-level domain, then R(X) = R(P(X)), otherwise\r\n \r\n   o  R(X) is empty.\r\n \r\n  Thus, when a search at node X returns a CNAME record, the CA will\r\n  follow the CNAME record chain to its target. If the target label \r\n  contains a CAA record, it is returned.\r\n\r\n  ?O?therwise, the CA continues the search at\r\n  the parent of node X.\r\n \r\n  Note that the search does not include the parent of a target of a\r\n  CNAME record (except when the CNAME points back to its own path).\r\n \r\n  To prevent resource exhaustion attacks, CAs SHOULD limit the length of\r\n  CNAME chains that are accepted. However CAs MUST process CNAME\r\n  chains that contain 8 or fewer CNAME records.", "notes": "This is the updated errata to replace the ones previously deleted. It has been reviewed by all the parties concerned. Since this is a breaking change, this will have to go to hold for document update. The LAMPS working group is currently considering a more radical re-working of the CAA discovery scheme as a work item for its new charter.\r\n\r\nI will be in Prague to discuss...", "submit_date": "2017-07-10", "submitter_name": "Phillip Hallam-Baker", "verifier_id": "", "verifier_name": "EKR", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5066", "doc-id": "RFC8152", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14", "orig_text": "   o  The restriction applies to the encoding of the Sig_structure, the\r\n      Enc_structure, and the MAC_structure.", "correct_text": "   o  The restriction applies to the encoding of the COSE_KDF_Context, \r\n      Sig_structure, the Enc_structure, and the MAC_structure.\r\n", "notes": "When listing the set of structure that need to be canonically encoded, I missed this one.\r\n\r\nVerifier Notes: this is being fixed in draft-ietf-cose-rfc8152bis-algs.", "submit_date": "2017-07-11", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-10-07 16:11:52"}, {"errata_id": "5067", "doc-id": "RFC7239", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "proxy", "correct_text": "message-forwarding agent", "notes": "According to RFC 7230 Section 2.3, an HTTP \"proxy\" is a message-forwarding agent that is selected by the client. But this specification (as is clear from Section 1) uses the word \"proxy\" to refer also to message-forwarding agents that are *not* selected by the client.", "submit_date": "2017-07-12", "submitter_name": "Vasiliy Faronov", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5068", "doc-id": "RFC5961", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   [RFC0793] currently requires handling of a segment with the RST bit\r\n   when in a synchronized state to be processed as follows:\r\n", "correct_text": "   [RFC0793] currently requires handling of a segment with the RST bit\r\n   when not in SYN-SENT to be processed as follows:\r\n\r\n", "notes": "The text in section 3.2 begins by stating a change from RFC 793 for RST bit handling \"when in a synchronized state\" (which means all states except for LISTEN, SYN-SENT, and SYN-RECEIVED).  \r\n\r\nSection 3.4 of RFC 793 refers to \"all states but SYN-SENT\", so the description of RFC 793 is inaccurate.", "submit_date": "2017-07-12", "submitter_name": "Wesley Eddy", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-20 14:53:10"}, {"errata_id": "6079", "doc-id": "RFC8020", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "   [balakrichenan-dafa888]\r\n              Balakrichenan, S., \"Disturbance in the DNS - \"Random\r\n              qnames\", the dafa888 DoS attack\"\", October 2014,\r\n              <https://indico.dns-oarc.net/event/20/session/3/contribution/3>.\r\n", "correct_text": "   [balakrichenan-dafa888]\r\n              Balakrichenan, S., \"Disturbance in the DNS - \"Random\r\n              qnames\", the dafa888 DoS attack\"\", October 2014,\r\n              <https://indico.dns-oarc.net/event/20/contributions/278/>.\r\n", "notes": "The url for [balakrichenan-dafa888] returns \u00abNot Found The page you are looking for doesn't exist.\u00bb, and seems to have done so for some time: https://web.archive.org/web/20180615000000*/https://indico.dns-oarc.net/event/20/session/3/contribution/3/\r\n\r\nThe referenced content was found at https://indico.dns-oarc.net/event/20/contributions/278/", "submit_date": "2020-04-07", "submitter_name": "\u00c1ngel", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-04-07 15:49:03"}, {"errata_id": "5134", "doc-id": "RFC3028", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   CHAR-NOT-SLASH = (%x00-57 / %x58-ff)\r\n\r\n   CHAR-NOT-STAR = (%x00-51 / %x53-ff)", "correct_text": "   CHAR-NOT-SLASH = (%x00-2e / %x30-ff)\r\n\r\n   CHAR-NOT-STAR = (%x00-29 / %x2b-ff)", "notes": "The CHAR-NOT-SLASH is attempting to not include the SLASH character and makes two errors.  Firstly, no character is skipped.  Secondly, a slash character is octal 57.  The correct hex value for slash is 2F.\r\n\r\nThe CHAR-NOT-STAR is attempting to not include the STAR character and claims that this is character 52.  STAR is actually hex 0x2A.  The apparent mistake is that the octal value of the character (STAR is octal 52) was entered as a hex value.", "submit_date": "2017-10-03", "submitter_name": "Peter Smith", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5135", "doc-id": "RFC3625", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   FMT             = %x66 %x6D %x74 %x20\r\n\r\n   LABL            = %x6C %x61 %x62 %x6C\r\n\r\n   OFFS            = %x6F %x66 %x66 %x73\r\n\r\n   DATA            = %x64 %x61 %x74 %x61\r\n\r\n   CNFG            = %x63 %x6E %x66 %x67\r\n\r\n   TEXT            = %x74 %x65 %x78 %x74", "correct_text": "The values for FMT, LABL, OFFS, DATA, CNFG and TEXT all specify\r\nlower-case text values, not upper-case.", "notes": "We can reduce the number of bad implementations by adding a small note mentioning that some of these values are lower case.  The values appear at first glance to all be upper-case.  A hasty implementer might carelessly use upper case values here instead of the correct lower-case values.\r\n\r\n=ISE Note=\r\nThe observation is correct (that these six labels use lower case text values and that a careless implementer might miss that fact), but there is no editorial error in the document.\r\nA future revision of this document might add such a note.", "submit_date": "2017-10-03", "submitter_name": "Peter Smith", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-06-01 20:08:45"}, {"errata_id": "5136", "doc-id": "RFC3642", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "      day     =   ( %x30 %x31-39 )    ; \"01\" to \"09\"\r\n                / ( %x31-32 %x30-39 ) ; \"10\" to \"29\"\r\n                / ( %x32 %x30-31 )    ; \"30\" to \"31\"", "correct_text": "      day     =   ( %x30 %x31-39 )    ; \"01\" to \"09\"\r\n                / ( %x31-32 %x30-39 ) ; \"10\" to \"29\"\r\n                / ( %x33 %x30-31 )    ; \"30\" to \"31\"", "notes": "The day value incorrectly includes values 01 to 09, 10 to 29 and then 20 to 21.  The last field should instead allow for values 30 to 31.", "submit_date": "2017-10-03", "submitter_name": "Peter Smith", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5075", "doc-id": "RFC5639", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2 and 7.2", "orig_text": "2.2.  Technical Requirements\r\n       [...]\r\n                                            This property permits the\r\n       use of the arithmetical advantages of curves with A = -3, as\r\n       shown by Brier and Joyce [BJ].\r\n\r\n7.2.  Informative References\r\n       [...]\r\n   [BJ]       Brier, E. and M. Joyce, \"Fast Multiplication on Elliptic\r\n              Curves through Isogenies\", Applied Algebra Algebraic\r\n              Algorithms and Error-Correcting Codes, Lecture Notes in\r\n              Computer Science 2643, Springer Verlag, 2003.", "correct_text": "2.2.  Technical Requirements\r\n       [...]\r\n                                            This property permits the\r\n       use of the arithmetical advantages of curves with A = -3, as\r\n       shown by Brier and Joye [BJ].\r\n\r\n7.2.  Informative References\r\n       [...]\r\n   [BJ]       Brier, E. and M. Joye, \"Fast Multiplication on Elliptic\r\n              Curves through Isogenies\", Applied Algebra Algebraic\r\n              Algorithms and Error-Correcting Codes, Lecture Notes in\r\n              Computer Science 2643, Springer Verlag, 2003.", "notes": "The author's name is Marc Joye, not Marc Joyce.  See the original paper here: https://link.springer.com/chapter/10.1007/3-540-44828-4_6", "submit_date": "2017-08-01", "submitter_name": "Taylor R Campbell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5076", "doc-id": "RFC7322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "Every RFC must have an Abstract that provides a concise and \r\ncomprehensive overview ...\r\n[...]\r\nSimilarly, the Abstract should be complete in itself.  It will appear\r\nin isolation in publication announcements and in the online index \r\nof RFCs. Therefore, the Abstract must not contain citations.", "correct_text": "   (Because this document is already being revised and there are \r\n   more fundamental issues involved than simple textual changes,\r\n   the optimal fix for these issues should be left to the \r\n   discretion of the RFC Editor.)\r\n", "notes": "While the intent seems to me to be clear, this subsection can be read to contradict both other \"preferences\" and that intent.   For example, \"comprehensive\", when taken out of the context of the text that follows (as it appears to have recently been taken by an AD acting in official capacity [1] [2]) can be used to insist that the abstract contain copies of extracts of almost any part of a well-written document, thereby defeating the purpose of an abstract and violating the RFC Editor's historical \"no more than 13 lines\" guidance (which does not appear in this RFC).\r\n\r\nIn addition, the prohibition on citations has often been taken as a prohibition on explicit citation anchors.  But, if the intent is to be sure that abstracts are self-contained, any mention of another document by reference, without context appropriate to abstracts explaining what they document is about, is a citation.  For example, the statement (from the abstract of this document) 'This document obsoletes RFC 2223, \"Instructions to RFC Authors\"' is plausible in an abstract because it is clear to the reader what RFC 2223 is about although one could reasonably argue for different presentation.  By contract, a statement such as \"This document obsoletes RFC 4637\" should not be acceptable because it not only contains a citation (even if the explicit anchor is absent) but has no actual meaning unless the number is very well-known (i.e., meets criteria roughly equivalent to those for common abbreviations in section 3.6) or the reader tracks the citation down, violating the \"complete in itself\" principle.   If readers of this submission do not immediately recognize \"4637\" and associate it with important other issues, Q.E.D.\r\n\r\nI note that prohibitions of statements like \"This document obsoletes RFC 4637\" or \"This document makes RFC 7 Historic\"  appear to contradict popular interpretations of an IESG statement [3].  That further suggests that either this subsection is in need of further clarification or that the RFC Editor and IESG have some sorting out to do.\r\n\r\n -----\r\n[1] https://www.ietf.org/mail-archive/web/urn/current/msg03783.html\r\n[2] https://www.ietf.org/mail-archive/web/urn/current/msg03784.html\r\n[3] https://www.ietf.org/iesg/statement/designating-rfcs-as-historic-2011-06-27.html", "submit_date": "2017-08-02", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5078", "doc-id": "RFC7252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.1", "orig_text": "The Content-Format code\r\nattribute MAY include a space-separated sequence of Content-Format\r\ncodes, indicating that multiple content-formats are available.  The\r\nsyntax of the attribute value is summarized in the production \"ct-\r\nvalue\" in Figure 12, where \"cardinal\", \"SP\", and \"DQUOTE\" are defined\r\nas in [RFC6690].", "correct_text": "The Content-Format code\r\nattribute MAY include a space-separated sequence of Content-Format\r\ncodes, indicating that multiple content-formats are available.\r\nThe Content-Format code attribute MUST NOT appear more than once in a \r\nlink.  The syntax of the attribute value is summarized in the \r\nproduction \"ct-value\" in Figure 12, where \"cardinal\", \"SP\", and \r\n\"DQUOTE\" are defined as in [RFC6690].", "notes": "Insert a sentence that says that the code MUST NOT appear more than once.  This appears to be what was intended, but not stated, by the authors since it supports the space separated values to appear in a single attribute value.", "submit_date": "2017-08-07", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:16:38"}, {"errata_id": "5079", "doc-id": "RFC2326", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "10.8", "orig_text": "     S->C: GET_PARAMETER rtsp://example.com/fizzle/foo RTSP/1.0\r\n           CSeq: 431\r\n           Content-Type: text/parameters\r\n           Session: 12345678\r\n           Content-Length: 15\r\n\r\n           packets_received\r\n           jitter", "correct_text": "     S->C: GET_PARAMETER rtsp://example.com/fizzle/foo RTSP/1.0\r\n           CSeq: 431\r\n           Content-Type: text/parameters\r\n           Session: 12345678\r\n           Content-Length: 24\r\n\r\n           packets_received\r\n           jitter", "notes": "The Content-Length value is wrong, it should be either 24 (as proposed) or 26, depending on end-of-line marker used for message content.\n --VERIFIER NOTES-- \n   RFC 2326 has been obsoleted by RFC 7826. The similar examples in RFC 7826 appear to have correct content-length field values.", "submit_date": "2017-08-08", "submitter_name": "Vadim Zhukov", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5137", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "      key-k-tag        = %x76 [FWS] \"=\" [FWS] key-k-tag-type\r\n", "correct_text": "      key-k-tag        = %x6b [FWS] \"=\" [FWS] key-k-tag-type\r\n", "notes": "The key-k-tag should (presumably) start with the letter \"k\" to match the other key-LETTER-tag definitions and to match the \"k=\" heading.  However, the ABNF specifies %76 which is the letter \"v\", not the letter \"k\".  The correct value is %x6b.", "submit_date": "2017-10-03", "submitter_name": "Peter Smith", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5138", "doc-id": "RFC5137", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3", "orig_text": "   EmbeddedUnicodeChar =   %x5C.7A 4HEXDIG ; starts with \"\\u\"", "correct_text": "   EmbeddedUnicodeChar =   %x5C.75 4HEXDIG ; starts with \"\\u\"", "notes": "Hex 7A is the character 'z', which doesn't match the comment.  \r\nAs far as I can tell, the Java language defines unicode characters to be \\u, like the comment says, and therefore the ABNF should be %x5C.75", "submit_date": "2017-10-04", "submitter_name": "Peter Smith", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5139", "doc-id": "RFC3748", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "3.4.  Lower Layer Indications\r\n\r\n   The reliability and security of lower layer indications is dependent\r\n   on the lower layer.  Since EAP is media independent, the presence or\r\n   absence of lower layer security is not taken into account in the\r\n   processing of EAP messages.\r\n\r\n   To improve reliability, if a peer receives a lower layer success\r\n   indication as defined in Section 7.2, it MAY conclude that a Success\r\n   packet has been lost, and behave as if it had actually received a\r\n   Success packet.  This includes choosing to ignore the Success in some\r\n   circumstances as described in Section 4.2.\r\n\r\n   A discussion of some reliability and security issues with lower layer\r\n   indications in PPP, IEEE 802 wired networks, and IEEE 802.11 wireless\r\n   LANs can be found in the Security Considerations, Section 7.12.\r\n\r\n   After EAP authentication is complete, the peer will typically\r\n   transmit and receive data via the authenticator.  It is desirable to\r\n   provide assurance that the entities transmitting data are the same\r\n   ones that successfully completed EAP authentication.  To accomplish\r\n   this, it is necessary for the lower layer to provide per-packet\r\n   integrity, authentication and replay protection, and to bind these\r\n   per-packet services to the keys derived during EAP authentication.\r\n   Otherwise, it is possible for subsequent data traffic to be modified,\r\n   spoofed, or replayed.\r\n\r\n   Where keying material for the lower layer ciphersuite is itself\r\n   provided by EAP, ciphersuite negotiation and key activation are\r\n   controlled by the lower layer.  In PPP, ciphersuites are negotiated\r\n   within ECP so that it is not possible to use keys derived from EAP\r\n   authentication until the completion of ECP.  Therefore, an initial\r\n   EAP exchange cannot be protected by a PPP ciphersuite, although EAP\r\n   re-authentication can be protected.\r\n\r\n   In IEEE 802 media, initial key activation also typically occurs after\r\n   completion of EAP authentication.  Therefore an initial EAP exchange\r\n   typically cannot be protected by the lower layer ciphersuite,\r\n   although an EAP re-authentication or pre-authentication exchange can\r\n   be protected.", "correct_text": "3.4.  Lower Layer Indications\r\n\r\n   The reliability and security of lower layer indications is dependent\r\n   on the lower layer.  Since EAP is media independent, the presence or\r\n   absence of lower layer security is not taken into account in the\r\n   processing of EAP messages.\r\n\r\n   To improve reliability, if a peer receives a lower layer success\r\n   indication as defined in Section 7.12, it MAY conclude that a Success\r\n   packet has been lost, and behave as if it had actually received a\r\n   Success packet.  This includes choosing to ignore the Success in some\r\n   circumstances as described in Section 4.2.\r\n\r\n   A discussion of some reliability and security issues with lower layer\r\n   indications in PPP, IEEE 802 wired networks, and IEEE 802.11 wireless\r\n   LANs can be found in the Security Considerations, Section 7.12.\r\n\r\n   After EAP authentication is complete, the peer will typically\r\n   transmit and receive data via the authenticator.  It is desirable to\r\n   provide assurance that the entities transmitting data are the same\r\n   ones that successfully completed EAP authentication.  To accomplish\r\n   this, it is necessary for the lower layer to provide per-packet\r\n   integrity, authentication and replay protection, and to bind these\r\n   per-packet services to the keys derived during EAP authentication.\r\n   Otherwise, it is possible for subsequent data traffic to be modified,\r\n   spoofed, or replayed.\r\n\r\n   Where keying material for the lower layer ciphersuite is itself\r\n   provided by EAP, ciphersuite negotiation and key activation are\r\n   controlled by the lower layer.  In PPP, ciphersuites are negotiated\r\n   within ECP so that it is not possible to use keys derived from EAP\r\n   authentication until the completion of ECP.  Therefore, an initial\r\n   EAP exchange cannot be protected by a PPP ciphersuite, although EAP\r\n   re-authentication can be protected.\r\n\r\n   In IEEE 802 media, initial key activation also typically occurs after\r\n   completion of EAP authentication.  Therefore an initial EAP exchange\r\n   typically cannot be protected by the lower layer ciphersuite,\r\n   although an EAP re-authentication or pre-authentication exchange can\r\n   be protected.", "notes": "2nd paragraph of section 3.4 of RFC3748 states:\r\n---------------------\r\n   To improve reliability, >>if a peer receives a lower layer success\r\n   indication as defined in Section 7.2<<, it MAY conclude that a Success\r\n   packet has been lost, and behave as if it had actually received a\r\n   Success packet.  This includes choosing to ignore the Success in some\r\n   circumstances as described in Section 4.2.\r\n---------------------\r\n\r\nRFC3748 section 7.2 does not seem to state anything about lower layer indications. \r\n\r\nRFC3748 section 7.12 contains some text on the lower layer indications and also RFC3748 section 7.16 contains some text on lower layer indications.\r\n\r\nSo, it is proposed to change 2nd paragraph of section 3.4 of RFC3748 to reference section 7.12 (or section 7.16) instead of referencing section 7.2.\r\n\r\n-- Verifier note --\r\n\r\nIndeed, the 2nd paragraph of section 3.4 should have a reference to section 7.12. draft-ietf-eap-rfc2284bis-00 has text relevant to section 3.4 that was moved to section 7.12 in later revisions.", "submit_date": "2017-10-04", "submitter_name": "Ivo Sedlacek", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:46:09"}, {"errata_id": "5141", "doc-id": "RFC894", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "The minimum length of the data field of a packet sent\r\nover an Ethernet is 1500 octets, thus the maximum \r\nlength of an IP datagram sent over an Ethernet is \r\n1500 octets", "correct_text": "The maximum length of the data field of a packet sent\r\nover an Ethernet is 1500 octets, thus the maximum \r\nlength of an IP datagram sent over an Ethernet is \r\n1500 octets", "notes": "", "submit_date": "2017-10-04", "submitter_name": "Orestes Leal Rodriguez", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 01:27:20"}, {"errata_id": "5084", "doc-id": "RFC6733", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.16", "orig_text": "By including Origin-State-Id in a message, it allows other Diameter\r\nentities to infer that sessions associated with a lower Origin-State-Id \r\nare no longer active.\r\nIf an access device does not intend for such inferences to be made, it \r\nMUST either not include Origin-State-Id in any message or set its value \r\nto 0.\r\n\r\n", "correct_text": "By including Origin-State-Id in a message, it allows other Diameter\r\nentities to infer that sessions associated with a lower Origin-State-Id \r\nare no longer active.\r\nIf an access device does not intend for such inferences to be made, it \r\nMUST either not include Origin-State-Id in any message or set its value \r\nto 0. \r\nAs a special case when the value of Origin-State-Id changes from \r\n4294967295 to 0, then also the access device  clear all the sessions.", "notes": "Origin-State-Id is defined as Unsigned32 in RFC 6733, Section 8.16. So the maximum \r\nvalue it can have is 4294967295. If the system restarts many times and the value of\r\nOrigin-State-Id reaches the value which is same as its maximum value 4294967295. \r\nThen what will happen for the next restart. At the next restart the value of Origin-State-Id \r\nwill be 0 if we try to increase the value of Origin-State-Id.\r\nIt is not defined in the RFC 6733, that how the system should behave after 4294967295-th \r\nrestart with respect to Origin-State-Id.\r\n\r\nGenerally when the peer receives an increased value of Origin-State-Id, then it clear all sessions.\r\nIf the value of Origin-State-Id reaches its maximum i.e., 4294967295, then after another restart \r\nits value will be 0. For a special case for transition of value of Origin-State-Id from \r\n4294967295 to 0, the peer should clear its session.", "submit_date": "2017-08-11", "submitter_name": "Priyatosh Mandal", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5085", "doc-id": "RFC5884", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   On receipt of the LSP Ping Echo request message, the egress LSR MUST\r\n   send a BFD Control packet to the ingress LSR, if the validation of\r\n   the FEC in the LSP Ping Echo request message succeeds.  This BFD\r\n   Control packet MUST set the Your Discriminator field to the\r\n   discriminator received from the ingress LSR in the LSP Ping Echo\r\n   request message.  The egress LSR MAY respond with an LSP Ping Echo\r\n   reply message that carries the local discriminator assigned by it for\r\n   the BFD session.  The local discriminator assigned by the egress LSR\r\n   MUST be used as the My Discriminator field in the BFD session packets\r\n   sent by the egress LSR.\r\n\r\n   The ingress LSR follows the procedures in [BFD] to send BFD Control\r\n   packets to the egress LSR in response to the BFD Control packets\r\n   received from the egress LSR.  The BFD Control packets from the\r\n   ingress to the egress LSR MUST set the local discriminator of the\r\n   egress LSR, in the Your Discriminator field.  The egress LSR\r\n   demultiplexes the BFD session based on the received Your\r\n   Discriminator field.  As mentioned above, the egress LSR MUST send\r\n   Control packets to the ingress LSR with the Your Discriminator field\r\n   set to the local discriminator of the ingress LSR.  The ingress LSR\r\n   uses this to demultiplex the BFD session.", "correct_text": "On receipt of the LSP Ping Echo request message, the egress LSR\r\nMUST send a BFD Control packet to the ingress LSR, if the\r\nvalidation of the FEC in the LSP Ping Echo request message\r\nsucceeds.  This BFD Control packet MUST set the Your Discriminator\r\nfield to the discriminator received from the ingress LSR in the LSP\r\nPing Echo request message. The local discriminator assigned by the\r\negress LSR MUST be used as the My Discriminator field in the BFD\r\nsession packets sent by the egress LSR.\r\n\r\nThe ingress LSR follows the procedures in [BFD] to send BFD Control\r\npackets to the egress LSR in response to the BFD Control packets\r\nreceived from the egress LSR.  The BFD Control packets from the\r\ningress to the egress LSR MUST set the local discriminator of the\r\negress LSR in the Your Discriminator field. The egress LSR\r\ndemultiplexes the BFD session based on the received Your\r\nDiscriminator field. As mentioned above, the egress LSR MUST send\r\nControl packets to the ingress LSR with the Your Discriminator field\r\nset to the local discriminator of the ingress LSR.The ingress LSR\r\nuses this to demultiplex the BFD session.\r\n\r\nThe egress LSR processes the LSP Ping Echo request message in\r\naccordance with the procedures defined in [RFC 8029]. The LSP Ping\r\nEcho reply message generated by the egress LSR MAY carry the local\r\ndiscriminator assigned by it for the BFD session, as specified in\r\nsection 6.1.", "notes": "Submitter:\r\nIt is not clear from the original text which of the following is optional:\r\n  -  The egress MUST send a reply, but the discriminator in the reply is optional\r\n  -  The reply itself is optional\r\n \r\nTechnically, the reply cannot be optional, because the egress needs to report LSP-Ping verification status to the ingress.\r\n\r\nThe proposed text recommends to include BFD discriminator in the reply. This was the intent of the original text.\r\n\r\nVerifier:\r\nThe original Errata proposed correcting the last sentences of the second paragraph of Section 6. After discussion in the working group, it was agreed both the second and third paragraphs shown above of Section 6 needed to be revised to the three paragraphs of the corrected text shown above.", "submit_date": "2017-08-11", "submitter_name": "Balaji Rajagopalan", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5086", "doc-id": "RFC6527", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "Errata 4168 states the modified text should be:\r\n\r\n       vrrpv3OperationsAcceptMode OBJECT-TYPE\r\n           SYNTAX       TruthValue\r\n           MAX-ACCESS   read-create\r\n           STATUS       current\r\n           DESCRIPTION\r\n              \"Controls whether a virtual router in master state\r\n              will accept packets addressed to the address owner's\r\n              address as its own if it is not the address\r\n              owner.  Default is false(2).\r\n           DEFVAL       { false }\r\n           ::= { vrrpv3OperationsEntry 11 }", "correct_text": "       vrrpv3OperationsAcceptMode OBJECT-TYPE\r\n           SYNTAX       TruthValue\r\n           MAX-ACCESS   read-create\r\n           STATUS       current\r\n           DESCRIPTION\r\n              \"Controls whether a virtual router in master state\r\n              will accept packets addressed to the address owner's\r\n              address as its own if it is not the address\r\n              owner.  Default is false(2).\"\r\n           DEFVAL       { false }\r\n           ::= { vrrpv3OperationsEntry 11 }", "notes": "The DESCRIPTION needs a closing quote at the end.", "submit_date": "2017-08-13", "submitter_name": "P Quentin Armitage", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5087", "doc-id": "RFC5884", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "7.  Encapsulation\r\n\r\n[...]\r\n\r\n   The BFD Control packet sent by the ingress LSR MUST be a UDP packet\r\n   with a well-known destination port 3784 [BFD-IP] and a source port\r\n   assigned by the sender as per the procedures in [BFD-IP].  The source\r\n   IP address is a routable address of the sender.  The destination IP\r\n   address MUST be randomly chosen from the 127/8 range for IPv4 and\r\n   from the 0:0:0:0:0:FFFF:7F00/104 range for IPv6 with the following\r\n   exception.  If the FEC is an LDP IP FEC, the ingress LSR may discover\r\n   multiple alternate paths to the egress LSR for this FEC using LSP\r\n   Ping traceroute.  In this case, the destination IP address, used in a\r\n   BFD session established for one such alternate path, is the address\r\n   in the 127/8 range for IPv4 or 0:0:0:0:0:FFFF:7F00/104 range for IPv6\r\n   discovered by LSP Ping traceroute [RFC4379] to exercise that\r\n   particular alternate path.\r\n\r\n[...]\r\n\r\n   Or the BFD Control packet sent by the egress LSR to the ingress LSR\r\n   MAY be encapsulated in an MPLS label stack.  In this case, the\r\n   presence of the fault detection message is indicated as described\r\n   above.  This may be the case if the FEC for which the fault detection\r\n   is being performed corresponds to a bidirectional LSP or an MPLS PW.\r\n   This may also be the case when there is a return LSP from the egress\r\n   LSR to the ingress LSR.  In this case, the destination IP address\r\n   MUST be randomly chosen from the 127/8 range for IPv4 and from the\r\n   0:0:0:0:0:FFFF:7F00/104 range for IPv6.", "correct_text": "7.  Encapsulation\r\n\r\n[...]\r\n\r\n   The BFD Control packet sent by the ingress LSR MUST be a UDP packet\r\n   with a well-known destination port 3784 [BFD-IP] and a source port\r\n   assigned by the sender as per the procedures in [BFD-IP].  The source\r\n   IP address is a routable address of the sender.  The destination IP\r\n   address MUST be randomly chosen from the 127/8 range for IPv4 and\r\n   from the 0:0:0:0:0:FFFF:7F00:0/104 range for IPv6 with the following\r\n   exception.  If the FEC is an LDP IP FEC, the ingress LSR may discover\r\n   multiple alternate paths to the egress LSR for this FEC using LSP\r\n   Ping traceroute.  In this case, the destination IP address, used in a\r\n   BFD session established for one such alternate path, is the address\r\n   in the 127/8 range for IPv4 or 0:0:0:0:0:FFFF:7F00:0/104 range for \r\n   IPv6 discovered by LSP Ping traceroute [RFC4379] to exercise that\r\n   particular alternate path.\r\n\r\n[...]\r\n\r\n   Or the BFD Control packet sent by the egress LSR to the ingress LSR\r\n   MAY be encapsulated in an MPLS label stack.  In this case, the\r\n   presence of the fault detection message is indicated as described\r\n   above.  This may be the case if the FEC for which the fault detection\r\n   is being performed corresponds to a bidirectional LSP or an MPLS PW.\r\n   This may also be the case when there is a return LSP from the egress\r\n   LSR to the ingress LSR.  In this case, the destination IP address\r\n   MUST be randomly chosen from the 127/8 range for IPv4 and from the\r\n   0:0:0:0:0:FFFF:7F00:0/104 range for IPv6.", "notes": "There are three instances of the IPv4-mapped IPv6 prefix for the IPv4 loopback range 127.0.0.0/8 written as 0:0:0:0:0:FFFF:7F00/104, and it should instead be written as 0:0:0:0:0:FFFF:7F00:0/104.\r\n\r\ns/0:0:0:0:0:FFFF:7F00/0:0:0:0:0:FFFF:7F00:0/g (3 replacements)\r\n\r\nSame rationale as https://mailarchive.ietf.org/arch/msg/rtg-bfd/DqH_LFCEyUqCLQhffEb7_jU24uQ", "submit_date": "2017-08-16", "submitter_name": "Carlos Pignataro", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7681", "doc-id": "RFC8536", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.2", "orig_text": "   | 135    | 00           | UT/local[0]      | 1 (UT)                 |\r\n...\r\n   | 141    | 00           | standard/wall[0] | 1 (standard)           |", "correct_text": "   | 135    | 00           | UT/local[0]      | 0 (local)              |\r\n...\r\n   | 141    | 00           | standard/wall[0] | 0 (wall)               |", "notes": "The field value is inconsistent with the hexadecimal octets. This change corrects it to be the same as for bytes 310 and 316 in the same section.\r\n===\r\nVerifier's notes: There are several errors in these tables. An update to the document implementing the fix is being worked on.", "submit_date": "2023-10-17", "submitter_name": "Jacob Pratt", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-05-02 09:37:02"}, {"errata_id": "5095", "doc-id": "RFC8033", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "      if PIE->in_measurement_ == TRUE:\r\n         PIE->dq_count_ = PIE->dq_count_ + deque_pkt_size;\r\n         if PIE->dq_count_ >= DQ_THRESHOLD then\r\n            weight = DQ_THRESHOLD/2^16\r\n            PIE->avg_dq_time_ = (now - PIE->measurement_start_) *\r\n                                weight + PIE->avg_dq_time_ *\r\n                                (1 - weight);\r\n            PIE->dq_count_ = 0;\r\n            PIE->measurement_start_ = now\r\n         else\r\n            PIE->in_measurement_ = FALSE;", "correct_text": "      if PIE->in_measurement_ == TRUE:\r\n         PIE->dq_count_ = PIE->dq_count_ + deque_pkt_size;\r\n         if PIE->dq_count_ >= DQ_THRESHOLD then\r\n            weight = DQ_THRESHOLD/2^16\r\n            PIE->avg_dq_time_ = (now - PIE->measurement_start_) *\r\n                                weight + PIE->avg_dq_time_ *\r\n                                (1 - weight);\r\n            PIE->in_measurement_ = FALSE;", "notes": "There should not be an \"else\" because if PIE->dq_count_ >= DQ_THRESHOLD, this measurement is over: avg_dq_time is calculated and in_measurement is set to FALSE; otherwise dq_count has been increased before this \"if\" and now we wait for next packet. Resetting dq_count and measurement_start is not necessary because they will be set again when a new measurement begins.", "submit_date": "2017-08-24", "submitter_name": "Liang Tian", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 11:00:52"}, {"errata_id": "5097", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "Let CAA(X) be the record set returned in response to performing a CAA\r\nrecord query on the label X, P(X) be the DNS label immediately above\r\nX in the DNS hierarchy, and A(X) be the target of a CNAME or DNAME\r\nalias record specified at the label X.", "correct_text": "Let CAA(X) be the record set returned in response to performing a CAA\r\nrecord query on the label X, P(X) be the DNS label immediately above\r\nX in the DNS hierarchy, and A(X) be the target of a CNAME\r\nalias record specified at the label X.", "notes": "As currently worded, section 4 tells the CA to look up a DNAME record specified *at* the label X, and if one is found, look up a CAA record at the DNAME's target.  This is contrary to the behavior of DNAME as specified in RFC 6672, which is to redirect names subordinate of the DNAME but not the DNAME itself.\r\n\r\nSince DNAMEs cause CNAMEs to be synthesized for subordinate names, there is no need for implementers of CAA to care about the presence of DNAMEs at all, so this erratum simply removes any mention of DNAME.", "submit_date": "2017-08-25", "submitter_name": "Andrew Ayer", "verifier_id": "", "verifier_name": "EKR", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5099", "doc-id": "RFC4490", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "   [GOST3431004] \"Information technology. Cryptographic Data Security.\r\n                 Formation and verification processes of (electronic)\r\n                 digital signature based on Asymmetric Cryptographic\r\n                 Algorithm.\", GOST 34.310-2004, Council for\r\n                 Standardization, Metrology and Certification of the\r\n                 Commonwealth of Independence States (EASC), Minsk,\r\n                 2004. (In Russian)\r\n", "correct_text": "   [GOST3431004] \"Information technology. Cryptographic Data Security.\r\n                 Formation and verification processes of [electronic]\r\n                 digital signature.\", GOST 34.310-2004, Council for\r\n                 Standardization, Metrology and Certification of the\r\n                 Commonwealth of Independence States (EASC), Minsk,\r\n                 2004. (In Russian)\r\n", "notes": "Incorrect standard name.", "submit_date": "2017-08-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5100", "doc-id": "RFC2131", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1", "orig_text": "Normally, DHCP servers and BOOTP relay agents attempt to deliver\r\nDHCPOFFER, DHCPACK and DHCPNAK messages directly to the client using\r\nuicast delivery.", "correct_text": "Normally, DHCP servers and BOOTP relay agents attempt to deliver\r\nDHCPOFFER, DHCPACK messages directly to the client using\r\nunicast delivery.", "notes": "According to prior part description in section 4.1: \"In all cases, when \u2019giaddr\u2019 is zero, the server broadcasts any DHCPNAK messages to 0xffffffff.\", the DHCP server should not send DHCPNAK in unicast to client unless 'giaddr' is not zero.\n --VERIFIER NOTES-- \n   DHC WG feedback on this errata is:\r\n\"What's possibly being missed here is that the DHCP server has the client's MAC address, and is not relying on just on the routing table in the kernel, but also on giaddr and chaddr to determine how to send unicast responses. If giaddr is nonzero, the server sends the response using regular unicast through the IP stack's routing table, but if giaddr is zero, the server constructs a layer 2 frame with chaddr as the layer 2 destination address and unicasts that frame out the appropriate interface, bypassing the kernel's routing table and layer 3 processing entirely. So it doesn't actually matter what the IP destination address is other than that the client stack has to recognize that address as its own. The 'broadcast' bit takes care of the case where the client isn't able to do this. The server is always permitted to broadcast if it doesn't have the ability to route the response directly over layer 2, but at the time this RFC was written this was considered suboptimal, and the RFC goes to some lengths to make it possible for DHCP servers and relay agents to avoid sending broadcasts\"\r\n\r\nI.e., the current text is correct.", "submit_date": "2017-08-29", "submitter_name": "Fan Wei", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-04-23 12:52:27"}, {"errata_id": "8995", "doc-id": "RFC9989", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A.4.", "orig_text": "If the response code received for a query for a domain name is NXDOMAIN, then the name and all the names under it do not exist.", "correct_text": "If the response received for a query for a domain name proves that the queried name does not exist, then the name and all names under it are considered non-existent for the purposes of this specification. This proof can be conveyed by an NXDOMAIN response, or by a DNSSEC-validated denial-of-existence response that otherwise indicates non-existence of the queried name, such as an RFC 9824 Compact Denial response containing the NXNAME type in the relevant NSEC bitmap.", "notes": "RFC 9824 (Compact Denial of Existence in DNSSEC) is a Proposed Standard that defines a way to reduce the size and signing cost of DNSSEC denial-of-existence responses. For a non-existent name, Compact Denial can return a NODATA-shaped response, i.e. RCODE=NOERROR with an empty Answer section, while signalling non-existence using the NXNAME RR type (TYPE128) in the NSEC/NSEC3 type bitmap.\r\n\r\nRFC 9989 describes non-existent domains only in terms of NXDOMAIN. This is incomplete for DNSSEC-validated responses from zones using RFC 9824 Compact Denial. A receiver that only treats RCODE=NXDOMAIN as proof of non-existence may fail to recognize an RFC 9824 NXNAME denial proof and may therefore fail to apply the DMARC np= policy for a non-existent Author Domain.", "submit_date": "2026-06-09", "submitter_name": "Johnathon Mihalop", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-10 18:16:48"}, {"errata_id": "7122", "doc-id": "RFC7644", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5.2", "orig_text": "   The \"path\" attribute is described by the following ABNF syntax rule:\r\n\r\n                   PATH = attrPath / valuePath [subAttr]\r\n\r\n                      Figure 7: SCIM PATCH PATH Rule\r\n\r\n   The ABNF rules \"attrPath\", \"valuePath\", and \"subAttr\" are defined in\r\n   Section 3.4.2.2.  The \"valuePath\" rule allows specific values of a\r\n   complex multi-valued attribute to be selected.", "correct_text": "   The \"path\" attribute is described by the following ABNF syntax rule:\r\n\r\n                   PATH = attrPath / valuePath [subAttr] / attrExp\r\n\r\n                      Figure 7: SCIM PATCH PATH Rule\r\n\r\n   The ABNF rules \"attrPath\", \"valuePath\", \"subAttr\", and \"attrExp\" are \r\n   defined in Section 3.4.2.2. The \"valuePath\" rule allows specific \r\n   values of a complex multi-valued attribute to be selected.", "notes": "In section 3.5.2.2. (Remove Operation), states:\r\n\r\n\"If the target location is a multi-valued attribute and a complex\r\nfilter is specified comparing a \"value\", the values matched by the\r\nfilter are removed.  If no other values remain after removal of\r\nthe selected values, the multi-valued attribute SHALL be\r\nconsidered unassigned.\"\r\n\r\nThis means it should be possible to create a filter that selects a value from a multi-valued attribute that is not complex. Writing such a filter seems impossible without having \"attrExp\" as a possible legal PATH.\r\n\r\nIn section 3.4.2.2.  (Filtering) there is an example that shows how such a filter could look for a multi-valued attribute, i.e.:\r\n\r\nfilter=\r\n schemas eq \"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\"\r\n\r\nThis would also work for a path filter, e.g.:\r\n\r\n{\r\n  \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:PatchOp\"],\r\n  \"Operations\":[{\r\n    \"op\":\"remove\",\r\n    \"path\":\"schemas eq \\\"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\\\"\"\r\n  }]\r\n}\r\n\r\n[AD Note: The document reflects consensus of the working group at the time of publication, but on review it is believed that any future update work in this space should consider this erratum.]", "submit_date": "2022-09-08", "submitter_name": "Egil Hansen", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2022-09-12 16:13:03"}, {"errata_id": "5101", "doc-id": "RFC2119", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "5. MAY   This word, or the adjective \"OPTIONAL\", mean that an item is\r\n   truly optional.  One vendor may choose to include the item because a\r\n   particular marketplace requires it or because the vendor feels that\r\n   it enhances the product while another vendor may omit the same item.\r\n   An implementation which does not include a particular option MUST be\r\n   prepared to interoperate with another implementation which does\r\n   include the option, though perhaps with reduced functionality. In the\r\n   same vein an implementation which does include a particular option\r\n   MUST be prepared to interoperate with another implementation which\r\n   does not include the option (except, of course, for the feature the\r\n   option provides.)", "correct_text": "5. MAY   This word, or the adjective \"OPTIONAL\", mean that an item is\r\n   truly optional.  One vendor may choose to include the item because a\r\n   particular marketplace requires it or because the vendor feels that\r\n   it enhances the product while another vendor may omit the same item.\r\n   An implementation which does not include a particular option MUST be\r\n   prepared to interoperate with another implementation which does\r\n   include the option, though perhaps with reduced functionality. In the\r\n   same vein an implementation which does include a particular option\r\n   MUST be prepared to interoperate with another implementation which\r\n   does not include the option (except, of course, for the feature the\r\n   option provides).", "notes": "Full stop should appear outside the parentheses in the last sentence.", "submit_date": "2017-08-29", "submitter_name": "Jim Tonti", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5102", "doc-id": "RFC8029", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.5", "orig_text": "   VPN-IPv4 Network Layer Routing Information (NLRI) is defined in\r\n   [RFC4365].", "correct_text": "   VPN-IPv4 Network Layer Routing Information (NLRI) is defined in\r\n   [RFC4364].", "notes": "Incorrect reference.", "submit_date": "2017-08-30", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5103", "doc-id": "RFC8029", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.6", "orig_text": "   VPN-IPv6 NLRI is defined in [RFC4365].", "correct_text": "   VPN-IPv6 NLRI is defined in [RFC4659].", "notes": "Incorrect reference.", "submit_date": "2017-08-30", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5104", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3, Fig 8", "orig_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          Key Identifier                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                                                               |\r\n      |                            dgst (128)                         |\r\n      |                                                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          Key Identifier                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                                                               |\r\n      |                       Message Digest (128)                    |\r\n      |                                                               |\r\n      |                                                               |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "As the text before the figure explains, the last field is called \"Message Digest\", which is consistent with the rest of the document. In this document \"dgst\" and \"mac\" mean two protocol variables associated with this packet field.\r\n\r\n---\r\n\r\nNote: edited to clarify 4 32bit words, rather than 3 rows.", "submit_date": "2017-08-30", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-07-27 15:17:40"}, {"errata_id": "5105", "doc-id": "RFC6991", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "A schema node of this type will be set to zero (0) on creation\r\nand will thereafter increase monotonically until it reaches\r\na maximum value of 2^32-1 (4294967295 decimal), when it\r\nwraps around and starts increasing again from zero.", "correct_text": "A leaf instance of this type will be set to zero (0) on creation\r\nand will thereafter increase monotonically until it reaches\r\na maximum value of 2^32-1 (4294967295 decimal), when it\r\nwraps around and starts increasing again from zero.", "notes": "In a number of descriptions in both ietf-yang-types and ietf-inet-types, the term \"schema node\" is used incorrectly in places where \"leaf instance\" or \"instance of a leaf\" should be used instead. However, not all occurences of \"schema node\" are wrong: schema nodes just have to be distinguished from nodes in an instance data tree.", "submit_date": "2017-09-01", "submitter_name": "Ladislav Lhotka", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5106", "doc-id": "RFC20", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1 Control", "orig_text": "   FF Form Feed (FE)                       FS File Separator IS)", "correct_text": "   FF Form Feed (FE)                       FS File Separator (IS)", "notes": "Missing parenthesis.", "submit_date": "2017-09-07", "submitter_name": "Kuba Ober", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5198", "doc-id": "RFC8275", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "1", "orig_text": "The same solution should work for NFS.  However, the NFSv4 protocol\r\n   does not currently give the client a way to transmit the umask of the\r\n   process opening a file.  And clients have no way of atomically\r\n   checking for inheritable permissions and applying the umask only when\r\n   necessary.  As a result, the server receives an OPEN with a mode\r\n   attribute that already has the umask applied.", "correct_text": "Implementing a comparable solution for NFS is not currently possible.\r\nIt cannot be implemented in the server as the server does not know\r\nthe umask, and the protocol does not allow the client to tell it.\r\nIt cannot be implemented in the client as the client cannot atomically\r\ncheck the inheritable permissions on the containing directory and\r\napply the umask selectively. As a result, the server receives an\r\nOPEN with a mode attribute that already has the umask applied.", "notes": "The intent of the paragraph is obscured by clumsy language.  It is explaining how neither the server\r\nnor the client can currently make the required decision, but this is not immediately obvious.", "submit_date": "2017-12-05", "submitter_name": "Neil Brown", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5234", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1.", "orig_text": "   public\r\n      Clients incapable of maintaining the confidentiality of their\r\n      credentials (e.g., clients executing on the device used by the\r\n      resource owner, such as an installed native application or a web\r\n      browser-based application), and incapable of secure client\r\n      authentication via any other means.", "correct_text": "   public\r\n      Clients incapable of maintaining the confidentiality of their\r\n      credentials (e.g., clients executing on the device used by the\r\n      third-party (not resource owner but another end user), such as an\r\n      installed native application or a web\r\n      browser-based application), and incapable of secure client\r\n      authentication via any other means.", "notes": "I think in case of public client type, it should state as \"e.g. the clients executing on the device used by third-party and not the actual resource owner\" as mentioned in the original RFC. I let the author or experts to review my remark. Thanks.", "submit_date": "2018-01-12", "submitter_name": "Randip Kumar Malakar", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5107", "doc-id": "RFC7030", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "", "correct_text": "Add the following is as the last paragraph of Section 3.2.1:\r\n\r\n  [RFC2616] indicates \"HTTP does not use the\r\n  Content-Transfer-Encoding (CTE) field of RFC 2045\u201d; nevertheless, this\r\n  document was published specifying the use of the\r\n  Content-Transfer-Encoding header with a value of \u2018base64' in Sections\r\n  4.1.3, 4.3.1, 4.3.2, 4.4.2, 4.5.2, as well as in the examples in\r\n  Appendices A.1-A.4.   As HTTP is binary-clean transport, there is no\r\n  need to indicate this for HTTP-based protocols like EST.  EST server\r\n  implementations SHOULD omit the Content-Transfer-Encoding header if\r\n  they know a priori that EST clients do not rely this field.  EST\r\n  Clients SHOULD expect that the Content-Transfer-Encoding header will\r\n  be absent unless they have an a priori agreement with the EST server.\r\n  The mechanism to establish this client dependency is out-of-scope.", "notes": "EST, which is an HTTP-based protocol, erroneous used CTE.  This errata addresses this error.\r\n\r\nNote that the text was reviewed by a RAI AD as well as multiple EST implementors.", "submit_date": "2017-09-07", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2020-08-19 19:59:42"}, {"errata_id": "5108", "doc-id": "RFC7030", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.3, 4.4.2", "orig_text": "OLD from s.4.2.3:\r\n\r\n  If the content-type is not set, the response data MUST be a plaintext\r\n  human-readable error message containing explanatory information\r\n  describing why the request was rejected (for example, indicating that\r\n  CSR attributes are incomplete).\r\n\r\nOLD from s4.4.2:\r\n\r\n  If the content-type is not set, the response data MUST be a plaintext\r\n  human-readable error message.", "correct_text": "NEW for s4.2.3:\r\n\r\n  If the content-type is not set, the response data must be a plaintext\r\n  human-readable error message containing explanatory information\r\n  describing why the request was rejected (for example, indicating that\r\n  CSR attributes are incomplete).  Servers MAY use the \"text/plain\u201d\r\n  content-type [RFC2046] for human-readable errors.\r\n\r\nNEW for s4.4.2:\r\n\r\n  If the content-type is not set, the response data must be a plaintext\r\n  human-readable error message. Servers MAY use the \"text/plain\u201d\r\n  content-type [RFC2046] for human-readable errors.", "notes": "The current text is somewhat unclear as to what content-type needs to be used for the human-readable error.  There are many human-readable content-types, but \"text/plain\" seems to be the most sensible.\r\n\r\nNote that the MUST was reduced to a must because no content-type is specified.", "submit_date": "2017-09-07", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2020-08-19 20:00:37"}, {"errata_id": "5211", "doc-id": "RFC7880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   o  bfd.SessionType: This is a new state variable that describes\r\n      the type of a particular session.  Allowable values for S-BFD\r\n      sessions are:\r\n\r\n      *  SBFDInitiator - an S-BFD session on a network node that\r\n         performs a continuity test to a target entity by sending S-BFD\r\n         packets.\r\n\r\n      *  SBFDReflector - an S-BFD session on a network node that listens\r\n         for incoming S-BFD Control packets to local entities and\r\n         generates response S-BFD Control packets.\r\n\r\n   The bfd.SessionType variable MUST be initialized to the appropriate\r\n   type when an S-BFD session is created.\r\n", "correct_text": "   o  bfd.SessionType: This is a new state variable that describes\r\n      the type of a particular session.  Allowable values for S-BFD\r\n      sessions are:\r\n\r\n      *  SBFDNone - indicates that the BFD session is not of S-BFD type.\r\n\r\n      *  SBFDInitiator - an S-BFD session on a network node that\r\n         performs a continuity test to a target entity by sending S-BFD\r\n         packets.\r\n\r\n      *  SBFDReflector - an S-BFD session on a network node that listens\r\n         for incoming S-BFD Control packets to local entities and\r\n         generates response S-BFD Control packets.\r\n\r\n   The bfd.SessionType variable MUST be set to SBFDNone when a BFD\r\n   session other than S-BFD. The bfd.SessionType variable MUST be \r\n   initialized to the appropriate type when an S-BFD session is created.\r\n", "notes": "The original text leaves value of the new variable bfd.SessionType unspecified if the type of BFD session is other than S-BFD.\n --VERIFIER NOTES-- \nThis report goes beyond pointing out an error in the document. If the changes are to me made (or discussed beyond the thread related to this report), it should be done through the normal WG channels.\r\n\r\nhttps://mailarchive.ietf.org/arch/msg/rtg-bfd/dI5Y2YXBG3kACEjX5vIZgSJHVw4 ", "submit_date": "2017-12-16", "submitter_name": "Greg Mirsky", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5233", "doc-id": "RFC5116", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "An AEAD_AES_128_CCM ciphertext is exactly 16 octets longer than its\r\n corresponding plaintext.", "correct_text": "An AEAD_AES_128_CCM ciphertext is exactly 2 octets longer than its\r\n corresponding plaintext.", "notes": "As described in NIST SP 800-38c the length of the MAC is given in bits. The algorithm specified therein at 6.2 returns a string of PLen + TLen bits.", "submit_date": "2018-01-10", "submitter_name": "Lars Maier", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5235", "doc-id": "RFC8017", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.1.1", "orig_text": "Errors:  \"message too long;\" \"encoding error\"", "correct_text": "Errors:  \"message too long\"; \"encoding error\"", "notes": "The semicolon needs to be placed outside of the quoted strings.", "submit_date": "2018-01-14", "submitter_name": "Joern Heissler", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5524", "doc-id": "RFC6381", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   One of the OTI values for 'mp4a' is 40 (identifying MPEG-4 audio).\r\n   For this value, the third element identifies the audio\r\n   ObjectTypeIndication (OTI) as defined in [MP4A] (including\r\n   amendments), expressed as a decimal number.\r\n", "correct_text": "   One of the OTI values for 'mp4a' is 40 (identifying MPEG-4 audio).\r\n   For this value, the third element identifies the AudioObjectType \r\n   (AOT) as defined in [MP4A] (including amendments), expressed as a \r\n   decimal number.\r\n", "notes": "[MP4A]  \"Information technology--Coding of audio-visual objects -- 3: Audio\", ISO/IEC 14496-3:2009. Only speaks of ObjectTypeIndications in the context of systems OTIs in the previous paragraph and never mentions \"audio ObjectTypeIndication\". In the example that follows the third element is an \"AudioObjectType\".", "submit_date": "2018-10-12", "submitter_name": "Alex Converse", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5525", "doc-id": "RFC3929", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "the IETF executive director.", "correct_text": "the Managing Director, IETF Secretariat.", "notes": "The definition of what the IETF Executive Director is has changed under IASA2. This correction reflects the new job definition and title.", "submit_date": "2018-10-15", "submitter_name": "Jason Livingood", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 07:13:32"}, {"errata_id": "5109", "doc-id": "RFC5282", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.", "orig_text": "8.  IKEv2 Algorithm Selection\r\n\r\n   This section applies to the use of any authenticated encryption\r\n   algorithm with the IKEv2 Encrypted Payload and is unique to that\r\n   usage.\r\n\r\n   IKEv2 (Section 3.3.3 of [RFC4306]) specifies that both an encryption\r\n   algorithm and an integrity checking algorithm are required for an IKE\r\n   SA (Security Association).  This document updates [RFC4306] to\r\n   require that when an authenticated encryption algorithm is selected\r\n   as the encryption algorithm for any SA (IKE or ESP), an integrity\r\n   algorithm MUST NOT be selected for that SA.  This document further\r\n   updates [RFC4306] to require that if all of the encryption algorithms\r\n   in any proposal are authenticated encryption algorithms, then the\r\n   proposal MUST NOT propose any integrity transforms.", "correct_text": "8.  IKEv2 Algorithm Selection\r\n\r\nIKEv2 [rfc7296], section 3.3. Security Association Payload, specifies\r\nAEAD algorithm selection.\r\n", "notes": "RFC-7296 and RFC-5282 contradict each other (yet RFC-7296 cites RFC-5282 without any\r\nclarification):\r\n\r\n- RFC-7296 explicitly disallows mixing AEAD and non-AEAD algorithms in a single\r\n  proposal; RFC-5282 does not (and strongly implies it is allowed)\r\n\r\n- RFC-7296 allows 'none' integrity in an AEAD-only proposal; RFC-5282 does not", "submit_date": "2017-09-08", "submitter_name": "Andrew Cagney", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5110", "doc-id": "RFC5234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "B.1.", "orig_text": "BIT            =  \"0\" / \"1\"", "correct_text": "BIT            =  %b0 / %b1", "notes": "The core rule BIT is written in the char-val rule syntax, which produces the ASCII chars %x30 (\"0\") and %x31 (\"1\"). For producing the 0 and 1 bit the bin-val rule should be used instead. Since the core rules use the hex-val rule extensively, using the bin-val rule shouldn't be a problem.\n --VERIFIER NOTES-- \nNo, the \"BIT\" construct is part of the \"bin-val\" construct, which gives \"b0\" or \"b1\", and \"bin-val\" is then part of \"num-val\", which is what produces \"%b0\" or \"%b1\".  The ABNF is correct as written.", "submit_date": "2017-09-09", "submitter_name": "Allan Hazarian", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-05-14 13:11:45"}, {"errata_id": "5111", "doc-id": "RFC8017", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2.3", "orig_text": "   The object identifier id-RSASSA-PSS identifies the RSASSA-PSS\r\n   encryption scheme.", "correct_text": "   The object identifier id-RSASSA-PSS identifies the RSASSA-PSS\r\n   signature scheme.", "notes": "RSASSA-PSS is a signature scheme, it has no encrypt/decrypt operations.\r\nThis errata also applies to RFC 3447 (Section A.2.3)\r\nVerified by Burt Kaliski", "submit_date": "2017-09-11", "submitter_name": "Peter Wu", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5112", "doc-id": "RFC4343", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "comparisons on name lookup for DNS queries should be case insensitive", "correct_text": "comparisons on name lookup for DNS queries must be case insensitive", "notes": "--- Original report ---\r\nSome authoritative DNS servers and/or mitigation devices/software silently drop queries that have uppercase letters in them.  Furthermore, the clarification of the case insensitive comparison in the following two sentences after that particular sentence use the term MUST.  I suspect some readers of the RFC are reading the word \"should\" and aren't reading the rest of the paragraph.\r\n\r\n---- WK Update ----\r\nThe full quote is: \"According to the original DNS design decision, comparisons on name\r\n   lookup for DNS queries should be case insensitive [STD13]. \", and the title of this (RFC4343) is \"Domain Name System (DNS) Case Insensitivity Clarification\" -- seeing as the whole point of this document is to clarify the original spec, I think that readers will read the RFC2119 bits.\r\n\r\nHowever, I do agree that this could be better worded, and future updates of this document should probably reword this to make it clearer. ", "submit_date": "2017-09-12", "submitter_name": "Rich Tom", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5150", "doc-id": "RFC8006", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.10", "orig_text": "         \"generic-metadata-type\": \"MI.SourceMetadata\",\r\n         \"generic-metadata-value\": {\r\n           \"sources\": [\r\n             {\r\n               \"endpoint\": [\"acq1.ucdn.example\"],\r\n               \"protocol\": \"http/1.1\"\r\n             },\r\n             {\r\n               \"endpoint\": [\"acq2.ucdn.example\"],\r\n               \"protocol\": \"http/1.1\"\r\n             }\r\n           ]\r\n         }\r\n", "correct_text": "         \"generic-metadata-type\": \"MI.SourceMetadata\",\r\n         \"generic-metadata-value\": {\r\n           \"sources\": [\r\n             {\r\n               \"endpoints\": [\"acq1.ucdn.example\"],\r\n               \"protocol\": \"http/1.1\"\r\n             },\r\n             {\r\n               \"endpoints\": [\"acq2.ucdn.example\"],\r\n               \"protocol\": \"http/1.1\"\r\n             }\r\n           ]\r\n         }\r\n", "notes": "The SourceMetadata object contains an array of \"sources\", which in turn contains an array of \"endpoints\".  The example in section 6.10 uses the singular \"endpoint\" instead of the plural \"endpoints\".  The examples in sections 4.2.1 and 4.2.1.1 correctly use the plural \"endpoints\" for the property name, as defined in section 4.2.1.1.", "submit_date": "2017-10-08", "submitter_name": "Kevin J. Ma", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5152", "doc-id": "RFC7050", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "IANA Conside", "orig_text": "N/A ", "correct_text": "8.x DNSSEC\r\n\r\n    ipv4only.arpa MUST be insecurely delegated.  This allows ISP's to\r\n    modify / generate AAAA responses for ipv4only.arpa AAAA queries that\r\n    will pass through unmodified caching servers as required by 8.1 (4).\r\n", "notes": "The protocol as described does not work when there is a validating caching server in the resolution path.  \r\n\r\nIANA should have been instructed to insecurely delegate ipv4only.arpa.  This allows ISP's to modify the\r\nAAAA response without running foul of DNSSEC  validation.\n --VERIFIER NOTES-- \nSo this errata was correct on the issue, but errata was not the appropriate way of resolving this issue. RFC 8880 that updates RFC 7050 specifies a resolution to this errata. ", "submit_date": "2017-10-11", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2021-01-13 15:21:10"}, {"errata_id": "5526", "doc-id": "RFC3929", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "the IETF Executive Director within", "correct_text": "the Managing Director, IETF Secretariat, within", "notes": "The definition of what the IETF Executive Director is has changed under IASA2. This correction reflects the new job definition and title.", "submit_date": "2018-10-15", "submitter_name": "Jason Livingood", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 07:13:55"}, {"errata_id": "5527", "doc-id": "RFC3929", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "The IETF Executive Director then uses ", "correct_text": "The Managing Director, IETF Secretariat, then uses ", "notes": "The definition of what the IETF Executive Director is has changed under IASA2. This correction reflects the new job definition and title.", "submit_date": "2018-10-15", "submitter_name": "Jason Livingood", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 07:14:13"}, {"errata_id": "5113", "doc-id": "RFC7788", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10", "orig_text": "10.2.2.  DHCPv6-Data TLV\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Type: DHCPv6-Data (37)     |          Length: > 0          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n[...]\r\n\r\n10.2.3.  DHCPv4-Data TLV\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type: DHCPv4-Data (38)    |          Length: > 0          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "10.2.2.  DHCPv6-Data TLV\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |    Type: DHCPv6-Data (38)     |          Length: > 0          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n[...]\r\n\r\n10.2.3.  DHCPv4-Data TLV\r\n\r\n    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type: DHCPv4-Data (37)    |          Length: > 0          |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "Section 13 (IANA Considerations) of the document says:\r\n\r\n      37: DHCPv4-Data\r\n\r\n      38: DHCPv6-Data\r\n\r\nThose code points from Section 13 are in the \"HNCP TLV Types\" IANA registry as well as in the current source code of shncpd and tcpdump. The code points shown in Sections 10.2.2 and 10.2.3 were likely swapped by mistake.\r\n\r\n-- Verifier note --\r\nThe IANA registry for HNCP TLV types (https://www.iana.org/assignments/dncp-registry/dncp-registry.xhtml#hncp-tlv-types) has indeed 37 for DHCPv4 and the open source SHNCPD has the same https://github.com/jech/shncpd/blob/master/receive.c\r\n", "submit_date": "2017-09-13", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-03 08:24:06"}, {"errata_id": "5114", "doc-id": "RFC5378", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1(j)", "orig_text": "\"Legend Instructions\": the standardized text that is maintained by the\r\nIETF Trust and is included in IETF Documents and the instructions and\r\nrequirements for including that standardized text in IETF Documents.\r\nThe text and instructions are posted from time to time at\r\nhttp://trustee.ietf.org/license-info.", "correct_text": "Beats me.  See below.  It is probably better to fix this problem by\r\nmaking the link point to what the RFC says it points to than to\r\ncreate a final erratum for the RFC, but even the latter would require \r\nsome effort for the erratum to describe a stable reference.", "notes": "When this link is used, it redirects to http://trustee.ietf.org/license-info, but that link redirects to the Trust Legal Provisions main page  (https://trustee.ietf.org/trust-legal-provisions.html ) which not only does not contain the promised text and instructions, but doesn't even contain the word \"Legend\".    One might figure out that one is supposed to go to the actual TLP page (currently https://trustee.ietf.org/documents/IETF-TLP-5_001.html), but, while that page mentions \"legend(s)\" several times, one of those places is not in Section 6, which is described as \"Text To Be Included...\" and not \"Legends\" as this RFC implies.\n --VERIFIER NOTES-- \n   The web page at http://trustee.ietf.org/license-info still redirects to https://trustee.ietf.org/documents/trust-legal-provisions/, but that page was recently updated to point the reader to the IETF Trust FAQ for RFC5378 instructions. ", "submit_date": "2017-09-14", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-29 08:28:17"}, {"errata_id": "5115", "doc-id": "RFC5090", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "3.17.  Digest-Domain Attribute\r\n[...]\r\n   Length\r\n         3\r\n[...]\r\n\r\n3.18.  Digest-Stale Attribute\r\n[...]\r\n   Length\r\n         3\r\n", "correct_text": "3.17.  Digest-Domain Attribute\r\n[...]\r\n   Length\r\n         >= 3\r\n[...]\r\n\r\n3.18.  Digest-Stale Attribute\r\n[...]\r\n   Length\r\n         >= 3\r\n", "notes": "Those two attributes contain string values. All other such attributes in Section 3 uniformly define Length >= 3.", "submit_date": "2017-09-14", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5116", "doc-id": "RFC5536", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   fields          =/ *( approved /\r\n                         archive /\r\n                         control /\r\n                         distribution /\r\n                         expires /\r\n                         followup-to /\r\n                         injection-date /\r\n                         injection-info /\r\n                         lines /\r\n                         newsgroups /\r\n                         organization /\r\n                         path /\r\n                         summary /\r\n                         supersedes /\r\n                         user-agent /\r\n                         xref )\r\n", "correct_text": "   optional-field  = <see RFC 5322 Section 3.6.8>\r\n\r\n   news-fields     =  approved /\r\n                      archive /\r\n                      control /\r\n                      distribution /\r\n                      expires /\r\n                      followup-to /\r\n                      injection-date /\r\n                      injection-info /\r\n                      lines /\r\n                      newsgroups /\r\n                      organization /\r\n                      path /\r\n                      summary /\r\n                      supersedes /\r\n                      user-agent /\r\n                      xref\r\n\r\n   optional-field  =/    news-fields\r\n", "notes": "In Section 3 of RFC5536, the ABNF syntax provided does not do what is clearly intended. What is specified is:\r\n\r\n    fields          =/ *( approved /\r\n                          archive /\r\n                          control /\r\n                          distribution /\r\n                          expires /\r\n                          followup-to /\r\n                          injection-date /\r\n                          injection-info /\r\n                          lines /\r\n                          newsgroups /\r\n                          organization /\r\n                          path /\r\n                          summary /\r\n                          supersedes /\r\n                          user-agent /\r\n                          xref )\r\n\r\nand that extends RFC5322:\r\n\r\n    fields          =   *(trace\r\n                          *optional-field /\r\n                          *(resent-date /\r\n                           resent-from /\r\n                           resent-sender /\r\n                           resent-to /\r\n                           resent-cc /\r\n                           resent-bcc /\r\n                           resent-msg-id))\r\n                        *(orig-date /\r\n                        from /\r\n                        sender /\r\n                        reply-to /\r\n                        to /\r\n                        cc /\r\n                        bcc /\r\n                        message-id /\r\n                        in-reply-to /\r\n                        references /\r\n                        subject /\r\n                        comments /\r\n                        keywords /\r\n                        optional-field)\r\n\r\n    message         =   (fields / obs-fields)\r\n                        [CRLF body]\r\n\r\nThe problem is with the way things are grouped. Let me give a simpler example:\r\n\r\n    foo = *(\"a\" / \"b\") / *(\"c\" / \"d\")\r\n\r\nThis means the following are valid: ab aabb bab cd ccdd dcd\r\nBut the following are not: abcd ac\r\n\r\nI think it is clear that the latter is intended to be valid, for which the syntax would be:\r\n\r\n    foo = *(\"a\" / \"b\" / \"c\" / \"d\")\r\n\r\nIt isn't easy to do a valid syntax extension that achieves this effect \r\nbecause of way the ABNF of RFC5322 is structured. However, after offline \r\ndiscussion, we realized that RFC5322 already has an extension point for \r\nnew headers via the <optional-field> rule. Along with that, RFC3864 \r\nestablished a process for registering header fields with IANA.\r\n\r\nThe above fix is based on discussion with Pete Resnick (editor of RFC 5322), Julien \u00c9LIE, Alexey Melnikov and Paul Kyzivat.\r\n\r\nAn alternative fix from Paul Kyzuvat is:\r\n\r\nSo, my recommendation is that to fix this, remove from section 3 the \r\nextension of the <fields> rule:\r\n\r\n    fields          =/ *( approved / ...\r\n                          xref )\r\n\r\nInstead, simply rely on the text to specify the newly defined header \r\nfields, and the IANA registration to link them to RFC5322.\r\n", "submit_date": "2017-09-14", "submitter_name": "Paul Kyzivat", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5120", "doc-id": "RFC4760", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "global", "orig_text": "section 3:  ... each NLRI ... [2 occurrences]\r\n\r\nsection 5:  The Network Layer Reachability information is encoded as ...\r\n", "correct_text": "... each NLRI item ...\r\n\r\nWhen the Subsequent Address Family Identifier field is set to one of\r\nthe values defined in this document (1 or 2), the NLRI field is encoded\r\nas ...\r\n", "notes": "The text in section 3 makes it clear that the NLRI encoding in section 5 is only\r\nspecified for SAFI 1 and 2, but the text in section 5 does not state this.  This tends\r\nto cause readers to believe that section 5 applies to any SAFI.  (See, e.g.,\r\ndraft-ietf-mpls-rfc3107bis.)  (However, other RFCs do specify similar encoding structures\r\nfor some other SAFIs; see, e.g., RFC 3107.)\r\n\r\nThe wording \"each NLRI\" is incorrect, as NLRI is a field and there is only one of them in an UPDATE message.", "submit_date": "2017-09-23", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5121", "doc-id": "RFC3180", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "The IANA has allocated 223/8 as per RFC 2770 [RFC2770].", "correct_text": "The IANA has allocated 233/8 as per RFC 2770 [RFC2770].", "notes": "", "submit_date": "2017-09-24", "submitter_name": "Dale Worley", "verifier_id": "", "verifier_name": "Warren Kumari", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5122", "doc-id": "RFC2361", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "WAVE form Registration Number (hex):    0x00111", "correct_text": "WAVE form Registration Number (hex):    0x0111", "notes": "The registration number can be no more than four hexadecimal places (i.e. two bytes) long, according to WAVE format specifications.", "submit_date": "2017-09-24", "submitter_name": "David Russo", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:00:29"}, {"errata_id": "7124", "doc-id": "RFC9309", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "In the following case,\r\n/example/page/disallowed.gif MUST be used for the URI\r\nexample.com/example/page/disallow.gif.", "correct_text": "In the following case,\r\n/example/page/disallowed.gif MUST be used for the URI\r\nexample.com/example/page/disallowed.gif.", "notes": "The two file names in that sentence (\"disallowed.gif\" and \"disallow.gif\")\r\ndoesn't match.  i.e. \"ed\" is missing from the second file name.\r\n\r\nThis error renders the example given in section 5.2 incorrect.", "submit_date": "2022-09-10", "submitter_name": "Samuel K. Lam", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5528", "doc-id": "RFC3716", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1.2", "orig_text": "focused on the IETF executive structure ", "correct_text": "focused on the IETF administrative structure ", "notes": "Should be changed in future versions to describe as administratively-focused, consistent with the organizational descriptions in IASA1 and IASA2. However, IASA1/2 were published after this RFC and therefore this was not an errata at the time of publication.", "submit_date": "2018-10-15", "submitter_name": "Jason Livingood", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2024-01-11 16:16:03"}, {"errata_id": "5129", "doc-id": "RFC4226", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix D", "orig_text": "Count    Hexadecimal    Decimal        HOTP\r\n   0        4c93cf18       1284755224     755224\r\n   1        41397eea       1094287082     287082\r\n   2         82fef30        137359152     359152\r\n   3        66ef7655       1726969429     969429\r\n   4        61c5938a       1640338314     338314\r\n   5        33c083d4        868254676     254676\r\n   6        7256c032       1918287922     287922\r\n   7         4e5b397         82162583     162583\r\n   8        2823443f        673399871     399871\r\n   9        2679dc69        645520489     520489\r\n\r\n", "correct_text": "Count     Hexadecimal    Decimal        HOTP\r\n   0         4c93cf18      1284755224    755224\r\n   1         75a48a19      1973717529    717529\r\n   2         bacb7fa       195868666     868666\r\n   3         66c28227      1724023335    023335\r\n   4         2904c900      688179456     179456\r\n   5         237e783d      595490877     490877\r\n   6         3c9cd285      1016910469    910469\r\n   7         24fb960c      620467724     467724\r\n   8         1b3c89f6      456952310     952310\r\n   9         16374098      372719768     719768\r\n", "notes": "From https://www.ietf.org/rfc/rfc4226.txt, Appendix D, page 31\r\n\r\na. There is no mention of the parameters that were used to run the reference implementation to provide to test data. These should be: \r\n\r\ncodeDigits: 6, addCheckSum: false, truncationOffset: 0.\r\n\r\nb. The hashes correspond. And the first row of Table2 (i.e for Count==0) correspond, but for Count 1...9 the values for Hex, Decimal and Hotp do not correspond with the values of the reference implementation.\r\n\r\nI am using JDK 1.8.0_144\r\n\r\nAs a test I have done a copy and paste 'as is' from the reference implementation and run it with sysout statements to print the truncation and otp values for each counter.\r\n\r\nThe only changes made are: System.out and use of counter=movingFactor to print the movingFactor. None of which alter the logic. Note the differences in test data were found before adding the debug info.\r\n\r\nPlease see:\r\nhttps://github.com/gerritjvv/cryptoplayground/tree/master/hmac/java/hmac/src/test/java/org/funsec/hmac\r\n\r\nUnitTest method:\r\nhttps://github.com/gerritjvv/cryptoplayground/blob/master/hmac/java/hmac/src/test/java/org/funsec/hmac/HTOPTest.java#L83\r\n\r\nReference Impl:\r\nhttps://github.com/gerritjvv/cryptoplayground/blob/master/hmac/java/hmac/src/test/java/org/funsec/hmac/HOTPRef.java", "submit_date": "2017-09-27", "submitter_name": "Gerrit Jansen van Vuuren", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5130", "doc-id": "RFC4226", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": " static public String generateOTP(byte[] secret,\r\n                  long movingFactor,\r\n             int codeDigits,\r\n                  boolean addChecksum,\r\n             int truncationOffset)\r\n           throws NoSuchAlgorithmException, InvalidKeyException\r\n       {\r\n           // put movingFactor value into text byte array\r\n     String result = null;\r\n     int digits = addChecksum ? (codeDigits + 1) : codeDigits;\r\n           byte[] text = new byte[8];\r\n           for (int i = text.length - 1; i >= 0; i--) {\r\n               text[i] = (byte) (movingFactor & 0xff);\r\n               movingFactor >>= 8;\r\n           }", "correct_text": " static public String generateOTP(byte[] secret,\r\n                  long movingFactor,\r\n             int codeDigits,\r\n                  boolean addChecksum,\r\n             int truncationOffset)\r\n           throws NoSuchAlgorithmException, InvalidKeyException\r\n       {\r\n           // put movingFactor value into text byte array\r\n     String result = null;\r\n     long count = movingFactor;\r\n     int digits = addChecksum ? (codeDigits + 1) : codeDigits;\r\n           byte[] text = new byte[8];\r\n           for (int i = text.length - 1; i >= 0; i--) {\r\n               text[i] = (byte) (count & 0xff);\r\n               count >>= 8;\r\n           }", "notes": "method parameters like movingFactor should not be edited or changed in the method logic. This may lead to misunderstanding and bugs when the code is ported to other platforms and or re-implemented. Here movingFactor would be expected to stay constant and can be reused, but the original implementation updates the value to 0, which means any extra logic or updates (even debug statements) would always see movingFactor == 0 no matter what.", "submit_date": "2017-09-27", "submitter_name": "Gerrit Jansen van Vuuren", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-08-03 01:44:50"}, {"errata_id": "5131", "doc-id": "RFC8072", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "Regarding section 2.2 of RFC 8072, the third paragraph states:\r\n\r\n\r\n                                       ... If the edit does not identify\r\n    any existing resource instance and the operation for the edit is not\r\n    \"create\", then the request MUST NOT be processed and a \"404 Not\r\n    Found\" error response MUST be sent by the server.", "correct_text": "                                      ... If the edit does not identify\r\n   any existing resource instance and the operation for the edit is\r\n   \"delete\" or \"move\" then the request MUST NOT be processed and a\r\n   \"404 Not Found\" error response MUST be sent by the server.", "notes": "As per the second paragraph of section 2.2 of RFC 8072, the operations are expected to mirror the semantics of the \"operation\" attribute described in Section 7.2 of [RFC6241].\r\n\r\nThe spec also doesn't specify what happens if it is a \"create\" operation and the resource already exists.  It should probably also state that \"400 Bad Request\" is returned.", "submit_date": "2017-09-28", "submitter_name": "Robert Wilton", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5117", "doc-id": "RFC8058", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "Content-Type: multipart/form-data; boundary=---FormBoundaryjWmhtjORrn", "correct_text": "Content-Type: multipart/form-data; boundary=-FormBoundaryjWmhtjORrn", "notes": "Mirrors EID8927, both confirmed by John Levine", "submit_date": "2017-09-15", "submitter_name": "Gerald W. Lester", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:27:25"}, {"errata_id": "5132", "doc-id": "RFC6238", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "The test token shared secret uses the ASCII string value\r\n   \"12345678901234567890\"", "correct_text": "The test token used for each SHA mode is:\r\n// Seed for HMAC-SHA1 - 20 bytes\r\n         String seed = \"3132333435363738393031323334353637383930\";\r\n         // Seed for HMAC-SHA256 - 32 bytes\r\n         String seed32 = \"3132333435363738393031323334353637383930\" +\r\n         \"313233343536373839303132\";\r\n         // Seed for HMAC-SHA512 - 64 bytes\r\n         String seed64 = \"3132333435363738393031323334353637383930\" +\r\n         \"3132333435363738393031323334353637383930\" +\r\n         \"3132333435363738393031323334353637383930\" +\r\n         \"31323334\";", "notes": "The text suggests that the secret \"12345678901234567890\" is used, when in fact this value cannot be found in the reference implementation test generation code and leads to different values (as is expected). The actual secret used is called seed, seed32 and seed64 in the reference implementation test generation code.", "submit_date": "2017-09-28", "submitter_name": "Gerrit Jansen van Vuuren", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5133", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "The input for S is further qualified by the length of the session\r\ndata in bytes.  The client and server could agree to any length but\r\nthe typical values are:", "correct_text": "The input for S is further qualified by the length of the session\r\ndata in bytes.  The client and server could agree to any length up to\r\n512 but the typical values are:", "notes": "Section 6.3 it is said the session data can be any length, as it is three digits this means it could be from 000 to 999. However in section 5.1 it is said session data cannot exceed 512 bytes so this should be reflected.", "submit_date": "2017-09-29", "submitter_name": "Mathieu Lechat", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7679", "doc-id": "RFC7852", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "An example\r\n   Call-Info header field for this would be:\r\n\r\n   Call-Info:  https://www.example.com/23sedde3;\r\n       purpose=\"EmergencyCallData.ProviderInfo\"", "correct_text": "An example\r\n   Call-Info header field for this would be:\r\n\r\n   Call-Info:  https://www.example.com/23sedde3;\r\n       purpose=EmergencyCallData.ProviderInfo", "notes": "Remove double quote on purpose attribute. It's a token type instead of \"String\" type.", "submit_date": "2023-10-16", "submitter_name": "Tom Hsu", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-11-07 14:51:06"}, {"errata_id": "5145", "doc-id": "RFC7307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "   The format of this sub-TLV is similar to the LDP IPv4 FEC sub-TLV as\r\n   defined in [RFC4379].  In addition to \"IPv4 prefix\" and \"Prefix\r\n   Length\" fields, this new sub-TLV also specifies the MT-ID (Multi-\r\n   Topology ID).  The Length for this sub-TLV is 5.", "correct_text": "   The format of the MT LDP IPv4 prefix sub-TLV (type 31) is similar to\r\n   the LDP IPv4 prefix sub-TLV (type 1) as defined in [RFC4379].  In\r\n   addition to the \"IPv4 prefix\" and \"Prefix Length\" fields already\r\n   defined in the LDP IPv4 prefix sub-TLV, the new MT LDP IPv4 prefix\r\n   sub-TLV also specifies the MT-ID (Multi-Topology ID) field.  While\r\n   the length of the LDP IPv4 prefix sub-TLV is 5 (and does not include\r\n   the trailing MBZ bytes), the length of this new MT LDP IPv6 prefix \r\n   sub-TLV is 8 (and does include the internal MBZ byte).", "notes": "The original text uses \"this sub-TLV\" in ways that can be ambiguous. In particular, the final sentence \"The Length for this sub-TLV is 5.\" is incorrect if \"this sub-TLV\" refers to the topic of the section, i.e., \"MT LDP IPv4 FEC Sub-TLV\", but is correct if \"this sub-TLV\" refers to the LDP IPv4 prefix sub-TLV defined in RFC4379/RFC8029. The revised text is suggested to remove the ambiguities. Adrian Farrell provided the bulk of the suggested revisions.\r\n\r\nIn addition, the sub-TLV names are changed to match the names that were registered in the IANA registry, to aid those trying to find the registry entries.", "submit_date": "2017-10-05", "submitter_name": "Sandra Murphy", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 22:11:56"}, {"errata_id": "5142", "doc-id": "RFC7696", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "Performance is always a factor is selecting cryptographic algorithms.", "correct_text": "Performance is always a factor in selecting cryptographic algorithms.", "notes": "A simple typo.", "submit_date": "2017-10-04", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-17 14:24:58"}, {"errata_id": "5143", "doc-id": "RFC7696", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.3", "orig_text": "reasonable to expect that a the status of a MUST-", "correct_text": "reasonable to expect that the status of a MUST-", "notes": "Typo", "submit_date": "2017-10-04", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-17 14:26:06"}, {"errata_id": "5144", "doc-id": "RFC7183", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1.3", "orig_text": "   is contained in message.  As an attacker cannot modify the content of\r\n   this timestamp (as it is protected by the identity check value), an\r\n   attacker cannot replay messages after this time.  Within this time\r\n", "correct_text": "   is contained in message.  As an attacker cannot modify the content of\r\n   this timestamp (as it is protected by the integrity check value), an\r\n   attacker cannot replay messages after this time.  Within this time\r\n", "notes": "Integrity check value (ICV) is the means of protection in this document.", "submit_date": "2017-10-04", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5146", "doc-id": "RFC7307", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.3", "orig_text": "   The format of this sub-TLV is similar to the LDP IPv6 FEC sub-TLV as\r\n   defined in [RFC4379].  In addition to the \"IPv6 prefix\" and \"Prefix\r\n   Length\" fields, this new sub-TLV also specifies the MT-ID (Multi-\r\n   Topology ID).  The Length for this sub-TLV is 17.", "correct_text": "   The format of the MT LDP IPv6 prefix sub-TLV (type 32) is similar to\r\n   the LDP IPv6 prefix sub-TLV (type 2) as defined in [RFC4379].  In\r\n   addition to the \"IPv6 prefix\" and \"Prefix Length\" fields already\r\n   defined in the LDP IPv6 prefix sub-TLV, the new MT LDP IPv6 prefix \r\n   sub-TLV also specifies the MT-ID (Multi-Topology ID) field.  While\r\n   the length of the LDP IPv6 prefix sub-TLV is 17 (and does not include\r\n   the trailing MBZ bytes), the length of this new MT LDP IPv6 prefix\r\n   sub-TLV is 20 (and does include the internal MBZ byte).", "notes": "The original text uses \"this sub-TLV\" in ways that can be ambiguous. In particular, the final sentence \"The Length for this sub-TLV is 17.\u201d is incorrect if \"this sub-TLV\" refers to the topic of the section, i.e., \"MT LDP IPv6 FEC Sub-TLV\", but is correct if \"this sub-TLV\" refers to the LDP IPv6 prefix sub-TLV defined in RFC4379/RFC8029. The revised text is suggested to remove the ambiguities. Adrian Farrell provided the bulk of the suggested revisions.\r\n\r\nIn addition, the sub-TLV names are changed to match the names that were registered in the IANA registry, to aid those trying to find the registry entries.", "submit_date": "2017-10-05", "submitter_name": "Sandra Murphy", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 22:12:25"}, {"errata_id": "5151", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "However, there has been no single widely\r\naccepted or publicly available mechanism to communication of\r\ndomain-specific message-handling policies for receivers, or to\r\nrequest reporting of authentication and disposition of received mail.", "correct_text": "However, there has been no single widely\r\naccepted or publicly available mechanism to communicate\r\ndomain-specific message-handling policies to receivers, or to\r\nrequest reporting of authentication and disposition of received mail.", "notes": "\"Mechanism to communication of [...] policies for receivers\" should instead read,\r\n\"Mechanism to COMMUNICATE [...] policies TO receivers.", "submit_date": "2017-10-10", "submitter_name": "Clara Nees", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5153", "doc-id": "RFC3587", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "    | 3 |     45 bits         |  16 bits  |       64 bits              |\r\n    +---+---------------------+-----------+----------------------------+\r\n    |001|global routing prefix| subnet ID |       interface ID         |\r\n    +---+---------------------+-----------+----------------------------+", "correct_text": "    | 3 |     45 bits         |  16 bits  |       64 bits              |\r\n    +---+---------------------+-----------+----------------------------+\r\n    |001|                     | subnet ID |       interface ID         |\r\n    +---+---------------------+-----------+----------------------------+\r\n    |<-global routing prefix->|", "notes": "In the last figure of Section 3. Address Format, the global routing prefix should inlcude the prefix 001 in order to be consistent with the first two figures in the same section.\r\n\r\n=====\r\n\r\nAlternatively, the description of the 45 bits within the diagram might be updated to clarify these are the /remaining bits/ of the global routing prefix.", "submit_date": "2017-10-12", "submitter_name": "ZHANG Hongyuan", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-12-18 22:21:34"}, {"errata_id": "5529", "doc-id": "RFC3716", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1.3", "orig_text": "including the IETF Executive Director", "correct_text": "including the Managing Director, IETF Secretariat,", "notes": "The definition of what the IETF Executive Director is has changed under IASA2. This correction reflects the new job definition and title. However, IASA 2 was published after this RFC and therefore this was not an errata at the time of publication.", "submit_date": "2018-10-15", "submitter_name": "Jason Livingood", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2024-01-11 16:21:27"}, {"errata_id": "5163", "doc-id": "RFC7230", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.4", "orig_text": "A field value might be preceded and/or followed by optional\r\nwhitespace (OWS); a single SP preceding the field-value is preferred\r\nfor consistent readability by humans.  The field value does not\r\ninclude any leading or trailing whitespace: OWS occurring before the\r\nfirst non-whitespace octet of the field value or after the last\r\nnon-whitespace octet of the field value ought to be excluded by\r\nparsers when extracting the field value from a header field.\r\n", "correct_text": "A field value might be preceded and/or followed by optional\r\nwhitespace (OWS); a single SP preceding the field-value is preferred\r\nfor consistent readability by humans.  The field value does not\r\ninclude any leading or trailing whitespace: OWS occurring before the\r\nfirst non-whitespace octet of the field value or after the last\r\nnon-whitespace octet of the field value ought to be excluded by\r\nparsers when extracting the field value from a header field.\r\n\r\nAll optional whitespace between tokens in field-content has the same\r\nsemantics as SP. Any sequence of SP / HTAB that occurs between tokens\r\nin field-content MAY be replaced with a single SP before interpreting\r\nthe field value or forwarding the message downstream.", "notes": "RFC 2616, section 2.2, contained the following text:\r\n\r\nAll linear white space, including folding, has the same semantics as SP. A recipient MAY replace any linear white space with a single SP before interpreting the field value or forwarding the message downstream.\r\n\r\nSimilarly, RFC 2616 section 4.2 contained the following text:\r\nAny LWS that occurs between field-content MAY be replaced with a single SP before interpreting the field value or forwarding the message downstream.\r\n\r\nIn section A.2. Changes from RFC 2616, the document does not list any intended change for how space and tab are handled, but the current text does appear to constitute a change. I suspect the change is accidental due to rewording the document when line folding was made deprecated.\r\n\r\nNote that in RFC 2616, LWS is defined as follows:\r\nLWS            = [CRLF] 1*( SP | HT )\r\n\r\nIn particular, the leading CRLF was optional.\r\n\r\nThus, the wording in RFC 2616 covered two cases:\r\n1. LWS that includes line folding.\r\n2. LWS that does not include line folding.\r\n\r\nThe current text does cover how to handle case #1 - former LWS that began with a CRLF; later in section 3.2.4 it requires rejecting or replacing with SP. (The old \"MAY\" language has effectively become a \"MUST\" for the leading CRLF case.)\r\n\r\nHowever, the current text does not appear to address case #2 - former LWS that does not begin with a CRLF - in other words, SP and HTAB occurring between field-content. I suspect the intention is still that a recipient should treat such whitespace as insignificant, and may replace any sequence of SP and HTAB with a single SP before interpreting the field content, but I believe the text of the current RFC no longer provides this behavior.\r\n\r\n(I have not read all of the specifications in full, so please accept my apologies if I have misread or missed a relevant portion elsewhere.)", "submit_date": "2017-10-20", "submitter_name": "David Matson", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-08-23 16:30:46"}, {"errata_id": "5540", "doc-id": "RFC7728", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2.  PAUSED", "orig_text": "   PAUSED SHALL contain a fixed-length 32-bit parameter at the start of\r\n   the Type Specific field with the extended RTP sequence number of the\r\n   last RTP packet sent before the RTP stream was paused, in the same\r\n   format as the extended highest sequence number received\r\n   (Section 6.4.1 of [RFC3550]).", "correct_text": "   PAUSED SHALL contain a fixed-length 32-bit parameter at the start of\r\n   the Type Specific field with the extended RTP sequence number of the\r\n   last RTP packet sent before the RTP stream was paused, in the same\r\n   format as the extended highest sequence number received\r\n   (Section 6.4.1 of [RFC3550]), or, if no packet has been sent, the\r\n   value one less than the sequence number that will be chosen for the\r\n   next packet sent (modulo 2^32).", "notes": "The paragraph leaves the value of the parameter undefined when the stream is paused before any data has been sent.", "submit_date": "2018-11-02", "submitter_name": "Nicholas Wilson", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5165", "doc-id": "RFC2100", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "    Such as pearly-gates.vatican, or else diplomatic-\r\n", "correct_text": "    Such as pearly-gates.vatican, or else diplomatic--\r\n", "notes": "For consistency with treatment of em-dash elsewhere", "submit_date": "2017-10-24", "submitter_name": "Nick Nicholas", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5166", "doc-id": "RFC2100", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "It's ineffable,\r\neffable,\r\nEffanineffable,\r\nDeep and inscrutable,\r\nsingular\r\nName.\r\n", "correct_text": "Its ineffable,\r\neffable,\r\nEffanineffable,\r\nDeep and inscrutable,\r\nsingular\r\nName.\r\n", "notes": "Is parodying T.S. Eliot's \"*His* ineffable effable. Effanineffable\"", "submit_date": "2017-10-24", "submitter_name": "Nick Nicholas", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5167", "doc-id": "RFC7940", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.3.7", "orig_text": "   Whenever an LGR depends on character properties from a given version\r\n   of the Unicode Standard, the version number used in creating the LGR\r\n   MUST be listed in the form x.y.z, where x, y, and z are positive\r\n   decimal integers (see [Unicode-Versions]).\r\n", "correct_text": "   Whenever an LGR depends on character properties from a given version\r\n   of the Unicode Standard, the version number used in creating the LGR\r\n   MUST be listed in the form x.y.z, where x, y, and z are non-negative\r\n   decimal integers (see [Unicode-Versions]).\r\n", "notes": "A zero needs to be allowed in the version numbering, as included in the example below.  Zero is neither positive nor negative.  \"0, 1, 2, ...\" are the \"non-negative decimal integers\".  Positive decimal integers start at 1.\r\n\r\nThus for \"6.3.0\" to be a valid example, the constraint needs to be \"non-negative\" rather than \"positive\".", "submit_date": "2017-10-24", "submitter_name": "Phil Pennock", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5168", "doc-id": "RFC8288", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "B.3", "orig_text": "input is modified to remove the parsed parameters.", "correct_text": "Input is modified to remove the parsed parameters.", "notes": "The first letter of the sentence is not capitalized.", "submit_date": "2017-10-25", "submitter_name": "Sawood Alam", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5169", "doc-id": "RFC8288", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "B.4", "orig_text": "input is modified to remove the parsed string.", "correct_text": "Input is modified to remove the parsed string.", "notes": "The first letter of the sentence is not capitalized.", "submit_date": "2017-10-25", "submitter_name": "Sawood Alam", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5212", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "15.2", "orig_text": "   | LAYOUTGET            | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,     |\r\n   |                      | NFS4ERR_BADIOMODE, NFS4ERR_BADLAYOUT,      |\r\n   |                      | NFS4ERR_BADXDR, NFS4ERR_BAD_STATEID,       |\r\n   |                      | NFS4ERR_DEADSESSION, NFS4ERR_DELAY,        |\r\n   |                      | NFS4ERR_DELEG_REVOKED, NFS4ERR_DQUOT,      |\r\n   |                      | NFS4ERR_FHEXPIRED, NFS4ERR_GRACE,          |\r\n   |                      | NFS4ERR_INVAL, NFS4ERR_IO,                 |\r\n   |                      | NFS4ERR_LAYOUTTRYLATER,                    |\r\n   |                      | NFS4ERR_LAYOUTUNAVAILABLE, NFS4ERR_LOCKED, |\r\n   |                      | NFS4ERR_MOVED, NFS4ERR_NOFILEHANDLE,       |\r\n   |                      | NFS4ERR_NOSPC, NFS4ERR_NOTSUPP,            |\r\n   |                      | NFS4ERR_OLD_STATEID, NFS4ERR_OPENMODE,     |\r\n   |                      | NFS4ERR_OP_NOT_IN_SESSION,                 |\r\n   |                      | NFS4ERR_RECALLCONFLICT,                    |\r\n   |                      | NFS4ERR_REP_TOO_BIG,                       |\r\n   |                      | NFS4ERR_REP_TOO_BIG_TO_CACHE,              |\r\n   |                      | NFS4ERR_REQ_TOO_BIG,                       |\r\n   |                      | NFS4ERR_RETRY_UNCACHED_REP,                |\r\n   |                      | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,        |\r\n   |                      | NFS4ERR_TOOSMALL, NFS4ERR_TOO_MANY_OPS,    |\r\n   |                      | NFS4ERR_UNKNOWN_LAYOUTTYPE,                |\r\n   |                      | NFS4ERR_WRONG_TYPE                         |\r\n", "correct_text": "   | LAYOUTGET            | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,     |\r\n   |                      | NFS4ERR_BADIOMODE, NFS4ERR_BADLAYOUT,      |\r\n   |                      | NFS4ERR_BADXDR, NFS4ERR_BAD_STATEID,       |\r\n   |                      | NFS4ERR_DEADSESSION, NFS4ERR_DELAY,        |\r\n   |                      | NFS4ERR_DELEG_REVOKED, NFS4ERR_DQUOT,      |\r\n   |                      | NFS4ERR_FHEXPIRED, NFS4ERR_GRACE,          |\r\n   |                      | NFS4ERR_INVAL, NFS4ERR_IO,                 |\r\n   |                      | NFS4ERR_LAYOUTTRYLATER,                    |\r\n   |                      | NFS4ERR_LAYOUTUNAVAILABLE, NFS4ERR_LOCKED, |\r\n   |                      | NFS4ERR_MOVED, NFS4ERR_NOFILEHANDLE,       |\r\n   |                      | NFS4ERR_NOSPC, NFS4ERR_NOTSUPP,            |\r\n   |                      | NFS4ERR_OLD_STATEID, NFS4ERR_OPENMODE,     |\r\n   |                      | NFS4ERR_OP_NOT_IN_SESSION,                 |\r\n   |                      | NFS4ERR_RECALLCONFLICT,                    |\r\n   |                      | NFS4ERR_REP_TOO_BIG,                       |\r\n   |                      | NFS4ERR_REP_TOO_BIG_TO_CACHE,              |\r\n   |                      | NFS4ERR_REQ_TOO_BIG,                       |\r\n   |                      | NFS4ERR_RETRY_UNCACHED_REP, NFS4ERR_ROFS,  |\r\n   |                      | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,        |\r\n   |                      | NFS4ERR_TOOSMALL, NFS4ERR_TOO_MANY_OPS,    |\r\n   |                      | NFS4ERR_UNKNOWN_LAYOUTTYPE,                |\r\n   |                      | NFS4ERR_WRONG_TYPE                         |\r\n", "notes": "It could be argued that the OPEN takes care of a NFS4ERR_ROFS for a LAYOUTGET of a LAYOUTIOMODE4_RW, but that does not explain why WRITE is allowed to return a NFS4ERR_ROFS.\r\n\r\nWith the Flex File Layout Type, the storage device depends on the metadata server enforcing the read-only filesystem semantics. An NFSv3 WRITE to the storage device might be accepted even though the filesystem might be RO. Further, if a snapshot is taken, the storage device might not be aware of the fact that a data file is in a snapshot.\r\n\r\nCurrently, if the underlying filesystem determines that the LAYOUTGET for a LAYOUTIOMODE4_RW is going to return NFS4ERR_ROFS, to be spec compliant, it MUST convert the error code to NFS4ERR_SERVERFAULT.  The client may then decide to perform IO through the metadata server with NFSv4 WRITE calls, which will in turn get a NFS4ERR_ROFS error. This change pushes the responsibility to be on the LAYOUTGET and allows the client to inform the application of an error earlier.\r\n\r\nAD Comments:\r\nThis topic requires WG discussion and establishment of consensus. Thus for future document update. \r\n\r\n --VERIFIER NOTES-- \r\n   This topic requires WG discussion and establishment of consensus. Thus for future document update.\r\n", "submit_date": "2017-12-19", "submitter_name": "NFS4ERR_ROFS is not a valid error code for LAYOUTGET", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-09-04 20:58:13"}, {"errata_id": "5213", "doc-id": "RFC2322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Issuing IP-numbers section says:", "orig_text": "   If someone could apply for a networkrange, and he net-extension isn't\r\n   used, coat-hangers can be prepared with sets of pegs attached to\r\n   them.", "correct_text": "   If someone could apply for a networkrange, and the net-extension\r\n   isn't used, coat-hangers can be prepared with sets of pegs attached\r\n   to them.", "notes": "typo \u201che\u201d", "submit_date": "2017-12-23", "submitter_name": "Junxiao Shi", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-17 06:49:44"}, {"errata_id": "5530", "doc-id": "RFC6940", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "10.7.4.4", "orig_text": "P SHOULD then send a Ping for its own Node-ID routed through B.", "correct_text": "P SHOULD then send a Ping for its own Resource-ID n+1 routed through B.", "notes": "10.7.4.4 says, \"repeat the discovery process used in the initial join\", which refers to the 2nd paragraph after 10.5.9:\r\n\r\n\"It SHOULD send a Ping directed at Resource-ID n+1 (directly after its own Resource-ID).\"\r\n\r\nPing Node-ID is simply wrong. This correction makes it consistent with 10.5.9. Credit goes to xramtsov in the mailing list.", "submit_date": "2018-10-16", "submitter_name": "Michael Chen", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5170", "doc-id": "RFC8200", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.5", "orig_text": "              A Fragment Offset containing the offset of the fragment,\r\n              in 8-octet units, relative to the start of the\r\n              Fragmentable Part of the original packet.  The Fragment\r\n              Offset of the first (\"leftmost\") fragment is 0.", "correct_text": "              A Fragment Offset containing the offset of the fragment,\r\n              in 8-octet units, relative to the start of the\r\n              \"Extension & Upper-Layer Headers\" Part of the original \r\n              packet. The Fragment Offset of the fragment containing\r\n              the \"Extension & Upper-Layer Headers\" part is 0.", "notes": "Clearly, the first fragment will contain a Fragment Offset of 0.\r\n\r\nHowever, given the figure:\r\n\r\n---- cut here ----\r\n   original packet:\r\n\r\n   +-----------------+-----------------+--------+--------+-//-+--------+\r\n   |  Per-Fragment   |Ext & Upper-Layer|  first | second |    |  last  |\r\n   |    Headers      |    Headers      |fragment|fragment|....|fragment|\r\n   +-----------------+-----------------+--------+--------+-//-+--------+\r\n\r\n   fragment packets:\r\n\r\n   +------------------+---------+-------------------+----------+\r\n   |  Per-Fragment    |Fragment | Ext & Upper-Layer |  first   |\r\n   |    Headers       | Header  |   Headers         | fragment |\r\n   +------------------+---------+-------------------+----------+\r\n\r\n   +------------------+--------+-------------------------------+\r\n   |  Per-Fragment    |Fragment|    second                     |\r\n   |    Headers       | Header |   fragment                    |\r\n   +------------------+--------+-------------------------------+\r\n                         o\r\n                         o\r\n                         o\r\n   +------------------+--------+----------+\r\n   |  Per-Fragment    |Fragment|   last   |\r\n   |    Headers       | Header | fragment |\r\n   +------------------+--------+----------+\r\n\r\n\r\nit is the part market as \"Ext & Upper-Layer Headers\" the one that will have a Fragment offset of 0, rather than the part marked as \"first fragment\". For example, one could envision this scenario:\r\n\r\n---- cut here ----\r\n   original packet:\r\n\r\n   +-----------------+-----------------+---------------+\r\n   |  Per-Fragment   |Ext & Upper-Layer| first & last  |\r\n   |    Headers      |    Headers      |   fragment    |\r\n   +-----------------+-----------------+---------------+\r\n\r\n   fragment packets:\r\n\r\n   +------------------+---------+-------------------+\r\n   |  Per-Fragment    |Fragment | Ext & Upper-Layer |\r\n   |    Headers       | Header  |   Headers         |\r\n   +------------------+---------+-------------------+\r\n\r\n   +------------------+--------+---------------+\r\n   |  Per-Fragment    |Fragment| first & last  |\r\n   |    Headers       | Header |   fragment    |\r\n   +------------------+--------+---------------+\r\n\r\n---- cut here ----\r\n\r\nWhere the first fragment just contains the entire IPv6 header chain, and then second fragment contains the chunk marked as \"first fragment\" (this \"first fragment\" part is the only \"Fragmentable\" part of the packet).\r\n\r\nNote: the text \"The Fragment Offset of the first (\"leftmost\") fragment is 0.\" was re-phrased in the \"corrected text\", since it might confuse the reader regarding whether it refers to the actual first fragment (i.e. the first packet corresponding to the fragmented datagram), or the chunk marked as \"first fragment\" in the figure.\n --VERIFIER NOTES-- \nVerifier's Note by Suresh Krishnan (Responsible AD for 6man): The 6man working group has chosen to address the subject of this Erratum and other related Errata using a consolidated fix detailed in the Erratum report #5945. I would like to thank the submitter Fernando Gont for bringing this up. ", "submit_date": "2017-10-28", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-02-03 14:14:55"}, {"errata_id": "5171", "doc-id": "RFC8200", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.5", "orig_text": "   The subsequent fragment packets are composed of:\r\n\r\n      (1)  The Per-Fragment headers of the original packet, with the\r\n           Payload Length of the original IPv6 header changed to contain\r\n           the length of this fragment packet only (excluding the length\r\n           of the IPv6 header itself), and the Next Header field of the\r\n           last header of the Per-Fragment headers changed to 44.\r\n\r\n      (2)  A Fragment header containing:\r\n\r\n              The Next Header value that identifies the first header\r\n              after the Per-Fragment headers of the original packet.\r\n\r\n              A Fragment Offset containing the offset of the fragment,\r\n              in 8-octet units, relative to the start of the\r\n              Fragmentable Part of the original packet.", "correct_text": "   The subsequent fragment packets are composed of:\r\n\r\n      (1)  The Per-Fragment headers of the original packet, with the\r\n           Payload Length of the original IPv6 header changed to contain\r\n           the length of this fragment packet only (excluding the length\r\n           of the IPv6 header itself), and the Next Header field of the\r\n           last header of the Per-Fragment headers changed to 44.\r\n\r\n      (2)  A Fragment header containing:\r\n\r\n              The Next Header value that identifies the first header\r\n              after the Per-Fragment headers of the original packet.\r\n\r\n              A Fragment Offset containing the offset of the fragment,\r\n              in 8-octet units, relative to the start of the\r\n              \"Extension & Upper-Layer Headers\" part of the original\r\n              packet.", "notes": "This complements this errata:\r\n\r\nReported By: Fernando Gont\r\nDate Reported: 2017-10-28\n --VERIFIER NOTES-- \nVerifier's Note by Suresh Krishnan (Responsible AD for 6man): The 6man working group has chosen to address the subject of this Erratum and other related Errata using a consolidated fix detailed in the Erratum report #5945. I would like to thank the submitter Fernando Gont for bringing this up. ", "submit_date": "2017-10-29", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-02-03 14:15:26"}, {"errata_id": "5172", "doc-id": "RFC8200", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.5", "orig_text": "         The Fragmentable Part of the reassembled packet is constructed\r\n         from the fragments following the Fragment headers in each of\r\n         the fragment packets.  The length of each fragment is computed\r\n         by subtracting from the packet's Payload Length the length of\r\n         the headers between the IPv6 header and fragment itself; its\r\n         relative position in Fragmentable Part is computed from its\r\n         Fragment Offset value.", "correct_text": "         The \"Ext & Upper-Layer Headers\" part and Fragmentable Part of \r\n         the reassembled packet are constructed from the \"chunks\" \r\n         following the Fragment headers in each of the fragment packets.\r\n         The length of each chunk is computed by subtracting from the \r\n         packet's Payload Length the length of the headers between the\r\n         IPv6 header and chunk itself; the relative position of the \r\n         chunk is computed from its Fragment Offset value.", "notes": "* The original text misses how to construct the \"Ext & Upper-Layer Headers\" of the packet, which in the figures is not considered to be part of the \"Unfragmentable part\" (it *was* considered part of it in RFC2460).\r\n\r\n* The original text does says:\r\n         The length of each fragment is computed\r\n         by subtracting from the packet's Payload Length the length of\r\n         the headers between the IPv6 header and fragment itself\r\n\r\nAssuming \"each fragment\" refers to the pieces marked as \"first fragment\", \"second fragment\", etc., this does not apply for the computation of the length of the first fragment, since such computed length would otherwise include the length of the first fragment, plus the length of \"Ext & Upper-Layer Headers\".\r\n\r\n* The \"corrected text\" requires more work, and employs the (previously undefined) term \"chunk\" to refer to the content of a fragment (the chunk following a Fragment Header in a given packet). This is because for all fragments other than the first, \"fragment\" is what follows an FH, but for the first fragment (given the figures), \"first fragment\" is NOT everything that follows the FH (i.e., it does not include the \"Ext & Upper-Layer Headers\" part.\r\n\r\n* Note that in the corrected text, the phrase \"its relative position in Fragmentable Part is computed from its Fragment Offset value\", since the relative position is really from the \"Ext & Upper-Layer Headers\" part, rather than from the Unfragmentable part.\n --VERIFIER NOTES-- \nVerifier's Note by Suresh Krishnan (Responsible AD for 6man): The 6man working group has chosen to address the subject of this Erratum and other related Errata using a consolidated fix detailed in the Erratum report #5945. I would like to thank the submitter Fernando Gont for bringing this up. ", "submit_date": "2017-10-29", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-02-03 14:15:55"}, {"errata_id": "5173", "doc-id": "RFC8200", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.5", "orig_text": "   reassembled original packet:\r\n\r\n   +---------------+-----------------+---------+--------+-//--+--------+\r\n   | Per-Fragment  |Ext & Upper-Layer|  first  | second |     | last   |\r\n   |    Headers    |     Headers     |frag data|fragment|.....|fragment|\r\n   +---------------+-----------------+---------+--------+-//--+--------+\r\n", "correct_text": "   reassembled original packet:\r\n\r\n   +---------------+-----------------+---------+--------+-//--+--------+\r\n   | Per-Fragment  |Ext & Upper-Layer|  first  | second |     | last   |\r\n   |    Headers    |     Headers     | fragment|fragment|.....|fragment|\r\n   +---------------+-----------------+---------+--------+-//--+--------+\r\n", "notes": "The figure in the \"original text\" is inconsistent with an earlier figure of the \"original packet\" (in page 18), where the \"Ext & Upper-Layer Headers\" part is followed by \"first fragment\" (rather than \"first fragment data\").\r\n\r\nAs an alternative to the \"corrected text\" above, one could modify such earlier figure (s/first fragment/first fragment data/), but this would beg a definition of \"how is a fragment composed?\" i.e., what's \"fragment data\" and what's not).\n --VERIFIER NOTES-- \nVerifier's Note by Suresh Krishnan (Responsible AD for 6man): The 6man working group has chosen to address the subject of this Erratum and other related Errata using a consolidated fix detailed in the Erratum report #5945. I would like to thank the submitter Fernando Gont for bringing this up. ", "submit_date": "2017-10-29", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-02-03 14:16:27"}, {"errata_id": "5174", "doc-id": "RFC6781", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.", "orig_text": "   is reduced to the following representation:\r\n\r\n            SOA_2005092303\r\n            RRSIG_Z_14(SOA_2005092303)\r\n            DNSKEY_K_14\r\n            DNSKEY_Z_15\r\n            RRSIG_K_14(DNSKEY)\r\n            RRSIG_Z_15(DNSKEY)\r\n\r\nThe rest of the zone data has the same signature as the SOA record,\r\n   i.e., an RRSIG created with DNSKEY_K_14.\r\n", "correct_text": "   is reduced to the following representation:\r\n\r\n            SOA_2005092303\r\n            RRSIG_Z_14(SOA_2005092303)\r\n            DNSKEY_Z_14\r\n            DNSKEY_K_15\r\n            RRSIG_Z_14(DNSKEY)\r\n            RRSIG_K_15(DNSKEY)\r\n\r\nThe rest of the zone data has the same signature as the SOA record,\r\n   i.e., an RRSIG created with DNSKEY_K_15.", "notes": "Note: K and Z were swapped. \r\n", "submit_date": "2017-10-29", "submitter_name": "Andreas Cudok", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5175", "doc-id": "RFC7707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.4.", "orig_text": "the response would\r\n   contain an RCODE of 0 (no error).  Otherwise, the response would\r\n   contain an RCODE of 4 (NXDOMAIN).", "correct_text": "the response would\r\n   contain an RCODE of 0 (no error).  Otherwise, the response would\r\n   contain an RCODE of 3 (NXDOMAIN).", "notes": "In RFC1035 section 4.1.1. it states that an RCODE of 3 is 'Name Error' aka NXDOMAIN. RCODE 4 is \"Not Implemented\". RFC 7707 incorrectly refers to NXDOMAIN as RCODE 4 instead of RCODE 3. \r\n\r\nHere is the output of testing this in Wireshark:\r\n.... .... .... 0011 = Reply code: No such name (3)", "submit_date": "2017-10-30", "submitter_name": "Kevin Tyers", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5176", "doc-id": "RFC7301", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "IANA Considerations", "correct_text": "+Protocol:  HTTP/1.0\r\n+Protocol:  HTTP/0.9", "notes": "RFC does not register ALPN identifiers for http/0.9 or http/1.0.\n --VERIFIER NOTES-- \nErrata is not the method for modifying requests to IANA \r\n\r\nSee also: https://mailarchive.ietf.org/arch/msg/tls/j_A2WszoHniWzD609Cal5lFslxw/", "submit_date": "2017-11-02", "submitter_name": "Ilya Grigorik", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:37:16"}, {"errata_id": "5177", "doc-id": "RFC3264", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": "Section 5.1 says:\r\nHowever, for sendonly and sendrecv streams, the answer might indicate\r\ndifferent payload type numbers for the same codecs, in which case,\r\nthe offerer MUST send with the payload type numbers from the answer.\r\n\r\nSection 6.2 says:\r\nIn the case of RTP, if a particular codec was referenced with a\r\nspecific payload type number in the offer, that same payload type\r\nnumber SHOULD be used for that codec in the answer.", "correct_text": "Only one of the above statements can be correct.\r\n", "notes": "Above two statements are conflicting.\r\nThe answerer should be able to either map the payload type to a different codec or not.\n --VERIFIER NOTES-- \n   See https://mailarchive.ietf.org/arch/msg/mmusic/HRD7ISwLIwiHOA73mc2KW680xAg/", "submit_date": "2017-11-03", "submitter_name": "Sandeep Kumar Aitha", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-05-06 21:11:49"}, {"errata_id": "5178", "doc-id": "RFC6218", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "MAC = MAC-ALG(Key, Type + Identifier + Length + Attributes)\r\n               where \u2019+\u2019 represents concatenation", "correct_text": "MAC = HASH-ALG(Key, Type + Identifier + Length + Attributes)\r\n               where \u2019+\u2019 represents concatenation", "notes": "HASH-ALG is the name of a free variable for the hash algorithm.", "submit_date": "2017-11-06", "submitter_name": "Yogesh Kumar Bansal", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5179", "doc-id": "RFC6234", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.5", "orig_text": " *    This file will exercise the HKDF code performing\r\n *      the seven tests documented in RFC 4869.", "correct_text": " *    This file will exercise the HKDF code performing\r\n *      the seven tests documented in RFC 5869.", "notes": "Typo.  Provide the correct reference in the code comment.", "submit_date": "2017-11-06", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-19 22:28:14"}, {"errata_id": "5180", "doc-id": "RFC8253", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "       *  PCEPS implementations MUST, at a minimum, support negotiation\r\n          of the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 [RFC6460] and\r\n          SHOULD support TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 as\r\n          well.  ...", "correct_text": "       *  PCEPS implementations MUST, at a minimum, support negotiation\r\n          of the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 [RFC5289] and\r\n          SHOULD support TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 as\r\n          well.  ...", "notes": "RFC 6460 makes reference to the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 and TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 ciphersuites, but it does not define them.  These ciphersuites are defined in RFC 5289.", "submit_date": "2017-11-06", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5191", "doc-id": "RFC6487", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "            (The issuing CA may wish to be able to extract the database\r\n            key or subscriber ID from the commonName.  Since only the\r\n            issuing CA would need to be able to parse the commonName,\r\n            the database key and the source of entropy (e.g., a UUID)\r\n            could be separated in any way that the CA wants, as long as\r\n            it conforms to the rules for PrintableString.  The separator\r\n\r\n\r\n\r\n\r\nHuston, et al.               Standards Track                   [Page 21]\r\n\f\r\nRFC 6487              Resource Certificate Profile         February 2012\r\n\r\n\r\n            could be a space character, parenthesis, hyphen, slash,\r\n            question mark, etc.\r\n", "correct_text": "            (The issuing CA may wish to be able to extract the database\r\n            key or subscriber ID from the commonName.  Since only the\r\n            issuing CA would need to be able to parse the commonName,\r\n            the database key and the source of entropy (e.g., a UUID)\r\n            could be separated in any way that the CA wants, as long as\r\n            it conforms to the rules for PrintableString.  The separator\r\n\r\n\r\n\r\n\r\nHuston, et al.               Standards Track                   [Page 21]\r\n\f\r\nRFC 6487              Resource Certificate Profile         February 2012\r\n\r\n\r\n            could be a space character, parenthesis, hyphen, slash,\r\n            question mark, etc).\r\n", "notes": "The closing parenthesis is missing.", "submit_date": "2017-11-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5193", "doc-id": "RFC1464", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.", "orig_text": "string2      `abc`           string2=``abc``         \"string2=``abc``\"", "correct_text": "string2      `abc`           string2=`abc`         \"string2=`abc`\"", "notes": "Quote:\r\n--------------------------------------------\r\nAttribute Values\r\n\r\n   All printable ASCII characters are permitted in the attribute value.\r\n   No characters need to be quoted with a \"`\".  In other words, the\r\n   first unquoted equals sign in the TXT record is the name/value\r\n   delimiter.  All subsequent characters are part of the value.\r\n\r\n   Once again, note that in most implementations the backslash character\r\n   is an active quoting character (and must, itself, be quoted).\r\n\r\n--------------------------------------------\r\n\r\n\"All subsequent characters are part of the value.\" would indicate that the part of the string  after the \"=\" character could be copied as one.\r\n The accent grave shoud not be escaped within the value.", "submit_date": "2017-12-02", "submitter_name": "Victor Toni", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5194", "doc-id": "RFC1464", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.", "orig_text": "   a=a          true            a`=a=true               \"a`=a=true\"\r\n   a\\=a false           a\\`=a=false             \"a\\\\`=a=false\"", "correct_text": "   a=a          true            a`=a=true               \"a`=a=true\"\r\n   a\\=a         false           a\\`=a=false             \"a\\\\`=a=false\"", "notes": "The second line needs an adjustment so that it aligns with the other lines.", "submit_date": "2017-12-03", "submitter_name": "Victor Toni", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5195", "doc-id": "RFC8276", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3", "orig_text": "   Baloo, the file indexing and search framework for Key Distribution\r\n   Exchange (KDE), has moved to storing metadata such as tags, ratings,\r\n   and comments in file system xattrs instead of a custom database for\r\n   simplicity.  Starting with KDE Plasma 5.1, NFS is no longer supported\r\n   due to its lack of xattr support [KDE].\r\n", "correct_text": "   Baloo, the file indexing and search framework for K Desktop\r\n   Environment (KDE), has moved to storing metadata such as tags,\r\n   ratings, and comments in file system xattrs instead of a custom\r\n   database for simplicity.  Starting with KDE Plasma 5.1, NFS is no\r\n   longer supported due to its lack of xattr support [KDE].\r\n", "notes": "", "submit_date": "2017-12-05", "submitter_name": "Mantas Mikulenas", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5196", "doc-id": "RFC6480", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "      3. For each manifest, verify that certificates and CRLs issued\r\n         under the corresponding CA certificate match the hash values\r\n         contained in the manifest.  Additionally, verify that no\r\n         certificate or manifest listed on the manifest is missing from\r\n         the repository.  If the hash values do not match, or if any\r\n         certificate or CRL is missing, notify the appropriate\r\n         repository administrator that the repository data has been\r\n         corrupted.\r\n", "correct_text": "      3. For each manifest, verify that certificates and CRLs issued\r\n         under the corresponding CA certificate match the hash values\r\n         contained in the manifest.  Additionally, verify that no\r\n         certificate or CRL listed on the manifest is missing from\r\n         the repository.  If the hash values do not match, or if any\r\n         certificate or CRL is missing, notify the appropriate\r\n         repository administrator that the repository data has been\r\n         corrupted.\r\n", "notes": "On the fourth line: it should read \"certificate or CRL\" instead of \"certificate or manifest\".", "submit_date": "2017-12-05", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5197", "doc-id": "RFC2453", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.8", "orig_text": "Every 30 seconds, the RIP process is awakened to send an unsolicited\r\nResponse message containing the complete routing table (see section\r\n3.9 on Split Horizon) to every neighboring router.", "correct_text": "Every 30 seconds, the RIP process is awakened to send an unsolicited\r\nResponse message containing the complete routing table (see section\r\n3.4.3 on Split Horizon) to every neighboring router.", "notes": "There are a few more invalid references to section 3.9 instead of section 3.4.3 in the text.", "submit_date": "2017-12-05", "submitter_name": "Vitaly Sinilin", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7125", "doc-id": "RFC4134", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B", "orig_text": "***5.2.bin***\r\n\r\n|* Example 5.2.bin\r\n|>5.2.bin\r\n|MIIBZQYJKoZIhvcNAQcDoIIBVjCCAVICAQIxggEAMIG9AgEAMCYwEjEQMA4GA1UEAxMHQ2\r\n|FybFJTQQIQRjRrx4AAVrwR024uzV1x0DANBgkqhkiG9w0BAQEFAASBgJQmQojGi7Z4IP+C\r\n|VypBmNFoCDoEp87khtgyff2N4SmqD3RxPx+8hbLQt9i3YcMwcap+aiOkyqjMalT03VUC0X\r\n|BOGv+HYI3HBZm/aFzxoq+YOXAWs5xlGerZwTOc9j6AYlK4qXvnztR5SQ8TBjlzytm4V7zg\r\n|+TGrnGVNQBNw47Ewoj4CAQQwDQQLTWFpbExpc3RSQzIwEAYLKoZIhvcNAQkQAwcCAToEGH\r\n|cUr5MSJ/g9HnJVHsQ6X56VcwYb+OfojTBJBgkqhkiG9w0BBwEwGgYIKoZIhvcNAwIwDgIC\r\n|AKAECJwE0hkuKlWhgCBeKNXhojuej3org9Lt7n+wWxOhnky5V50vSpoYRfRRyw==\r\n|<5.2.bin", "correct_text": "***5.2.bin***\r\n\r\n|* Example 5.2.bin\r\n|>5.2.bin\r\n|MIIBIwYJKoZIhvcNAQcDoIIBFDCCARACAQAxgcAwgb0CAQAwJjASMRAwDgYDVQQDEwdDYX\r\n|JsUlNBAhBGNGvHgABWvBHTbi7NXXHQMA0GCSqGSIb3DQEBAQUABIGAhUK+4wsu5Q8JqiTK\r\n|3trB0wm4Jysly9Vx+8mc2/CybqCKXxydSu2YnRU5JgEaLmvwRDmJNzxvx0phCwsnd6r51J\r\n|ek0iE/wj8g1NwQ6dY/ANucgkfWfpb/Em6HhKC67YEPVm2mHeurw7ehufhfi8wbSuUUNgZh\r\n|0MdkX2lnkalQ7tgwSAYJKoZIhvcNAQcBMBkGCCqGSIb3DQMCMA0CAToECOhwgeLvxRVXgC\r\n|AGUwp7jVwWDczVdtaLWdZFjBoaDOYe895DVgCbQIw4XQ==\r\n|<5.2.bin", "notes": "The base64 encoding in the Appending B doesn't correspond to the data in the section 5.2. Provided base64 was generated using data in the section 5.2 instead.", "submit_date": "2022-09-11", "submitter_name": "Dmitry Baryshkov", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-06-27 16:50:54"}, {"errata_id": "5199", "doc-id": "RFC4055", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "The pSourceFunc field identifies the source (and possibly the value)\r\nof the encoding parameters, commonly called P.", "correct_text": "The pSourceFunc field identifies the source (and possibly the value)\r\nof the encoding parameters, commonly called P. (Note: it is referred\r\nto as label L in [P1v2.1], and it is referred to as\r\nP throughout [P1v2.0],\r\nalthough the ASN.1 structures in both document use the letter \u201cp\u201d.)", "notes": "There is no place where P is linked to the parameter name L as used in\r\nreferenced [P1v2.1]\r\nPer Burt Kaliski (and edited by Russ Housley):\r\n\"\"\"\r\nThe text in Sec. 4.1 of RFC4055 including the syntax of RSAES-OAEP-params largely follows Sec. 11.2.1 of RFC2437 (PKCS #1 v2.0), which uses the term \u201cencoding parameters P\u201d, rather than the Sec. A.2.1 of RFC3447 (PKCS #1 v2.1), which uses the term \u201clabel L\u201d.  (RFC3560, the CMS profile for these algorithms, similarly follows RFC2437.)\r\n \r\nRFC3447 acknowledges that \u201cIn previous versions of this specification, the term \u2018encoding parameters\u2019 was used\u201d.  Given that RFC4055 inserts \u201ccommonly called\u201d before RFC2437\u2019s \u201cP\u201d, it appears that RFC4055 is attempting to bridge between RFC3447 and RFC2437.\r\n\"\"\"\r\n\r\nI observe that RFC 2437, RFC 3447, and RFC 4055 all use the same ASN.1 structure for RSAES-OAEP-params.  While the description of RSAES-OAEP in [P1v2.1] uses \"L\" instead of \"P\", this change in terminology did not carry through to the ASN.1 structure.\r\n\r\nI think that this should not be classified as a technical errata.  Perhaps a better text would be:\r\n\r\n   The pSourceFunc field identifies the source (and possibly the value)\r\n   of the encoding parameters, commonly called P. (Note: it is referred\r\n   to as label L in Section 7.1.1 of [P1v2.1], and it is referred to as P\r\n   throughout [P1v2.0] and Section A.2.1 of [P1v2.1].)\r\n\r\n   [P1v2.0] = RFC 2437\r\n\r\nI don\u2019t see an error here, so I think the corrected errata should be approved as editorial.", "submit_date": "2017-12-05", "submitter_name": "Bernd Eckenfels", "verifier_id": "", "verifier_name": "Kathleen Moriarty", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5200", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "<Issuer Domain Name> [; <name>=<value> ]*", "correct_text": "<Issuer Domain Name> [; [ <name>=<value> ]* ]", "notes": "For values of the \"issue\" and \"issuewild\" property tags, section 3 specifies [; <name>=<value> ]* (which seems to indicate that every parameter is preceded by a semicolon) but the grammar in section 5.2 specifies [\";\" *(space parameter) space] (in which parameters are separated by whitespace and the entire list is preceded by a single semicolon). Presumably, the formal grammar is definitive and the preceding shorthand should be updated to better express it.", "submit_date": "2017-12-08", "submitter_name": "Richard Gibson", "verifier_id": "", "verifier_name": "EKR", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5201", "doc-id": "RFC4210", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix D.4", "orig_text": "   Initialization Response -- ip\r\n\r\n   Field                Value\r\n\r\n   sender               CA name\r\n     -- the name of the CA who produced the message\r\n   messageTime          present\r\n     -- time at which CA produced message\r\n   protectionAlg        MS_MAC_ALG\r\n     -- only MAC protection is allowed for this response", "correct_text": "   Initialization Response -- ip\r\n\r\n   Field                Value\r\n\r\n   sender               CA name\r\n     -- the name of the CA who produced the message\r\n   messageTime          present\r\n     -- time at which CA produced message\r\n   protectionAlg        MSG_MAC_ALG\r\n     -- only MAC protection is allowed for this response", "notes": "There is a typo in Appendix D.4 -- \"MS_MAC_ALG\" should be \"MSG_MAC_ALG\"", "submit_date": "2017-12-12", "submitter_name": "Simon Ed\u00e4nge", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-02-04 18:17:37"}, {"errata_id": "5202", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.4.", "orig_text": "   The SACK also contains zero or more Gap Ack Blocks.  Each Gap Ack\r\n   Block acknowledges a subsequence of TSNs received following a break\r\n   in the sequence of received TSNs.  By definition, all TSNs\r\n   acknowledged by Gap Ack Blocks are greater than the value of the\r\n   Cumulative TSN Ack.", "correct_text": "   The SACK also contains zero or more Gap Ack Blocks.  Each Gap Ack\r\n   Block acknowledges a subsequence of TSNs received following a break\r\n   in the sequence of received TSNs.  By definition, all TSNs\r\n   acknowledged by Gap Ack Blocks are greater than the value of the\r\n   Cumulative TSN Ack.\r\n\r\n   The sequence of Gap Ack Blocks MUST be an increasing sequence of\r\n   ranges, non-intersecting, and with at least one TSN as a gap between\r\n   each Block and between the Cumulative TSN Ack and the first Block.", "notes": "It seems clear that the Gap Ack sequence must be sent in its \"canonical\" form (monotonic non-overlapping ranges) but I can't find anywhere where this is actually stated.\r\n\r\nIt is implied (but not stated) by the following sentence on the next page, which implies that there is no freedom of choice in how the Gap Ack sequence is encoded:\r\n\r\n    \"For example, assume that ...\r\n    then the parameter part of the SACK MUST be constructed as follows\"\r\n\r\nVerifier Notes:\r\nThis errata suggests two corrections:\r\n(1) Ensure that the gap ack blocks are not overlapping.\r\n(2) Ensure that the gap ack blocks are monotonic.\r\n\r\nSubsequent discussion in TSVWG, as documented in \r\nhttps://tools.ietf.org/html/draft-ietf-tsvwg-rfc4960-errata-06#section-3.47,\r\n has converged on this resolution:\r\n\r\n* The intention actually was to have the gap blocks isolated. So (1) ought \r\n   to be included in the next revision of SCTP. \r\n* In some cases gap blocks might not be monotonic. This is the same as with \r\n  the handling of gap reports in TCP SACK. Therefore (2) ought not be \r\n  included in the next revision of SCTP.\r\n\r\n", "submit_date": "2017-12-13", "submitter_name": "Nicholas Wilson", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5203", "doc-id": "RFC2544", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "26.3", "orig_text": "Note: See section 18 for the maximum frame rates that SHOULD be used.", "correct_text": "Note: See section 20 for the maximum frame rates that SHOULD be used.", "notes": "Section 18 is \"Multiple frame sizes\", section 20 is \"Maximum frame rate\".", "submit_date": "2017-12-13", "submitter_name": "James Bensley", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5220", "doc-id": "RFC7489", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.6.", "orig_text": "A.6.  Organizational Domain Discovery Issues\r\n\r\n   Although protocols like ADSP are useful for \"protecting\" a specific\r\n   domain name, they are not helpful at protecting subdomains.  If one\r\n   wished to protect \"example.com\" by requiring via ADSP that all mail\r\n   bearing an RFC5322.From domain of \"example.com\" be signed, this would\r\n   \"protect\" that domain; however, one could then craft an email whose\r\n   RFC5322.From domain is \"security.example.com\", and ADSP would not\r\n   provide any protection.  One could use a DNS wildcard, but this can\r\n   undesirably interfere with other DNS activity; one could add ADSP\r\n   records as fraudulent domains are discovered, but this solution does\r\n   not scale and is a purely reactive measure against abuse.\r\n\r\n   The DNS does not provide a method by which the \"domain of record\", or\r\n   the domain that was actually registered with a domain registrar, can\r\n   be determined given an arbitrary domain name.  Suggestions have been\r\n   made that attempt to glean such information from SOA or NS resource\r\n   records, but these too are not fully reliable, as the partitioning of\r\n   the DNS is not always done at administrative boundaries.\r\n\r\n   When seeking domain-specific policy based on an arbitrary domain\r\n   name, one could \"climb the tree\", dropping labels off the left end of\r\n   the name until the root is reached or a policy is discovered, but\r\n   then one could craft a name that has a large number of nonsense\r\n   labels; this would cause a Mail Receiver to attempt a large number of\r\n   queries in search of a policy record.  Sending many such messages\r\n   constitutes an amplified denial-of-service attack.\r\n\r\n   The Organizational Domain mechanism is a necessary component to the\r\n   goals of DMARC.  The method described in Section 3.2 is far from\r\n   perfect but serves this purpose reasonably well without adding undue\r\n   burden or semantics to the DNS.  If a method is created to do so that\r\n   is more reliable and secure than the use of a public suffix list,\r\n   DMARC should be amended to use that method as soon as it is generally\r\n   available.", "correct_text": "A.6.  Organizational Domain Discovery Issues\r\n\r\n   Although protocols like ADSP are useful for \"protecting\" a specific\r\n   domain name, they are not helpful at protecting subdomains.  If one\r\n   wished to protect \"example.com\" by requiring via ADSP that all mail\r\n   bearing an RFC5322.From domain of \"example.com\" be signed, this would\r\n   \"protect\" that domain; however, one could then craft an email whose\r\n   RFC5322.From domain is \"security.example.com\", and ADSP would not\r\n   provide any protection.  One could use a DNS wildcard, but this can\r\n   undesirably interfere with other DNS activity; one could add ADSP\r\n   records as fraudulent domains are discovered, but this solution does\r\n   not scale and is a purely reactive measure against abuse.\r\n\r\n   The DNS does not provide a method by which the \"domain of record\", or\r\n   the domain that was actually registered with a domain registrar, can\r\n   be determined given an arbitrary domain name.  Suggestions have been\r\n   made that attempt to glean such information from SOA or NS resource\r\n   records, but these too are not fully reliable, as the partitioning of\r\n   the DNS is not always done at administrative boundaries.\r\n\r\n   When seeking domain-specific policy based on an arbitrary domain\r\n   name, one could \"climb the tree\", dropping labels off the left end of\r\n   the name until the root is reached or a policy is discovered, but\r\n   then one could craft a name that has a large number of nonsense\r\n   labels; this would cause a Mail Receiver to attempt a large number of\r\n   queries in search of a policy record.  Sending many such messages\r\n   constitutes an amplified denial-of-service attack.\r\n\r\n   Certain TLDs could be classified as a Organizational Domains. The \r\n   benefits to those organizations do not yet justify the necessary \r\n   modifications to this document. An few organizations may \r\n   prefer the simplified reporting and DNS configuration of a \r\n   TLD Organizational Domain. This would require modifications to \r\n   this document and DMARC receivers for a capability that may not even\r\n   be desired by those organizations that strictly control a TLD.\r\n\r\n   The Organizational Domain mechanism is a necessary component to the\r\n   goals of DMARC.  The method described in Section 3.2 is far from\r\n   perfect but serves this purpose reasonably well without adding undue\r\n   burden or semantics to the DNS.  If a method is created to do so that\r\n   is more reliable and secure than the use of a public suffix list,\r\n   DMARC should be amended to use that method as soon as it is generally\r\n   available.", "notes": "RFC7489 does not address Organizational Top Level Domains. There are advantages and disadvantages to using a strictly controlled TLD as an Organizational Domain.\r\n\r\nAdvantages:\r\nSimplified reporting for nonexistent domains\r\nSimplified external reporting to another email address with the same TLD\r\nReduced need for multiple wildcard TXT records\r\n\r\nDisadvantages:\r\nDecreased flexibility for subdomains\r\nA \"_dmarc.tld\" record is not be a dotless domain, but may not be recommended\r\nSignificant changes to current DMARC processing systems\r\nNew requirement to manage which TLDs are eligible to be Organizational Domains\r\nOrganizations with a strictly controlled TLD may not desire this change\n --VERIFIER NOTES-- \nThe proposed addition is not an erratum and should be addressed in future work.", "submit_date": "2017-12-31", "submitter_name": "Steven Hilton", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-01 13:09:23"}, {"errata_id": "7126", "doc-id": "RFC9142", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2.1", "orig_text": "The curve25519 and curve488 security-level numbers are in [RFC7748].", "correct_text": "The curve25519 and curve448 security-level numbers are in [RFC7748].", "notes": "\"curve488\" should be \"curve448\". (From context, this is unlikely to cause significant confusion for readers, since \"Curve488\" does not represent a well-known primitive and is not mentioned in the reference, whereas Curve448 is well-known and referred to in the reference and elsewhere in this document.)", "submit_date": "2022-09-12", "submitter_name": "Jacob Nevins", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-09-13 21:56:50"}, {"errata_id": "9088", "doc-id": "RFC9999", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6 and 9.6.2", "orig_text": "Section 6\r\n----------\r\n   $cbor-tag /= tag-cm-cbor<1668547091, cbor-collection>\r\n   $cbor-tag /= tag-cm-cbor<1668547092, signed-cbor-cmw>\r\n\r\n   $cbor-tag /= tag-cm-data<1668547093> ; bytes(cmw+json collection)\r\n   $cbor-tag /= tag-cm-data<1668547094> ; bytes(cmw+jws)\r\n\r\nTable 4\r\n--------\r\n   +============+===============================+\r\n   | Tag Number | Tag Content                   |\r\n   +============+===============================+\r\n   | 1668547091 | bytes .cbor cbor-collection   |\r\n   +------------+-------------------------------+\r\n   | 1668547092 | bytes .cbor signed-cbor-cmw   |\r\n   +------------+-------------------------------+\r\n   | 1668547093 | bytes-wrapped json-collection |\r\n   +------------+-------------------------------+\r\n   | 1668547094 | bytes-wrapped signed-json-cmw |\r\n   +------------+-------------------------------+\r\n\r\nFigure 7\r\n---------\r\n   $cbor-tag /= tag-cm-cbor<1668547091, cbor-collection>\r\n   $cbor-tag /= tag-cm-cbor<1668547092, signed-cbor-cmw>\r\n   $cbor-tag /= tag-cm-data<1668547093> ; bytes(cmw+json collection)\r\n   $cbor-tag /= tag-cm-data<1668547094> ; bytes(cmw+jws)", "correct_text": "Section 6\r\n----------\r\n   $cbor-tag /= tag-cm-cbor<1668547091, cbor-collection>\r\n   $cbor-tag /= tag-cm-data<1668547092> ; bytes(cmw+json collection)\r\n\r\n   $cbor-tag /= tag-cm-cbor<1668547093, signed-cbor-cmw>\r\n   $cbor-tag /= tag-cm-data<1668547094> ; bytes(cmw+jws)\r\n\r\nTable 4\r\n--------\r\nTag Number\tTag Content\r\n1668547091\tbytes .cbor cbor-collection\r\n1668547092\tbytes-wrapped json-collection\r\n1668547093\tbytes .cbor signed-cbor-cmw\r\n1668547094\tbytes-wrapped signed-json-cmw\r\n\r\nFigure 7\r\n---------\r\n   $cbor-tag /= tag-cm-cbor<1668547091, cbor-collection>\r\n   $cbor-tag /= tag-cm-data<1668547092> ; bytes(cmw+json collection)\r\n   $cbor-tag /= tag-cm-cbor<1668547093, signed-cbor-cmw>\r\n   $cbor-tag /= tag-cm-data<1668547094> ; bytes(cmw+jws)", "notes": "Under the assumption that Table 3 and https://www.iana.org/assignments/core-parameters \r\nare the authoritative IDs, then the RFC9277-calculated tags for cmw+json and cmw+cose \r\nare swapped in the given section, table, and figure.", "submit_date": "2026-08-04", "submitter_name": "Steven Bellock", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-10 16:05:34"}, {"errata_id": "5204", "doc-id": "RFC6797", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1.2", "orig_text": "includeSubDomains", "correct_text": "include-sub-domains\r\n\r\nor\r\n\r\nincludesubdomains", "notes": "- In Section 6.1 the Strict-Transport-Security is defined as follows:\r\n\r\nStrict-Transport-Security = \"Strict-Transport-Security\" \":\" [ directive ]  *( \";\" [ directive ] )\r\n\r\n - valueless Directive \"includeSubDomains\" is defined as a optional directive\r\n - a directive is definied as followed:\r\n\r\ndirective = directive-name [ \"=\" directive-value ]\r\n\r\n - so \"includeSubDomains\" is only a directive-name which is defined as \"token\"\r\n - according to \"[RFC2616], Section 2.2\" a token is any octet from 0 - 127 except CTL's (octets 0 - 31 + 127) and separators which NOT exclude '-' (octet 45)\r\n\r\n\r\nSo all Fine? Yes, BUT at [RFC6797], Section 6.1 the \"overall reuqirements for directives\", Rule 3 defines:\r\n\r\n3.  Directive names are case-insensitive.\r\n\r\nAnd there is no other specification in Section 6.1.2 or has a IANA policy definition [RFC5226] like it is defined for additionals.\r\n\r\n\r\n\r\n - That means the \"directive-name\" includeSubDomains is \"case-insensitive\"!\r\n\r\nThe \"case-sensitive\" camelized directive-name is misleading, because of many other definitions with \"-\", like seen in all examples or in Header Field itself. \r\n\r\n\r\n - to aware the clear understanding the \"directive definition\" in section 6.1.2 and ALL occurences needs to be renamend.\r\n\r\nthe minimum of renaming is \"includesubdomains\" OR \"INCLUDESUBDOMAINS\", but this is not readable anymore.\r\n- So it should be renamed like other valuless directives for Example the \"schemes-source's\" directives at \"Content-Security-Policy\", which means:\r\n\r\n\"include-sub-domains\"\r\n\r\n\r\nBest Regards\r\n\r\nNick\n --VERIFIER NOTES-- \nThat is true, directive names are case insensitive, which means that, except for possibly misleading the reader, includeSubDomains and includesubdomains are equivalent. Making this change might be considered an editorial fix, however I do not believe this is necessary. Changing the name to \"include-sub-domains\" can't be done via an erratum, and would need a publishing a consensus document and an update to this rfc.", "submit_date": "2017-12-13", "submitter_name": "Nick Dil\u00dfner", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-29 10:16:31"}, {"errata_id": "5205", "doc-id": "RFC5880", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.8.4", "orig_text": "If Demand mode is not active, and a period of time equal to the\r\nDetection Time passes without receiving a BFD Control packet from the\r\nremote system, and bfd.SessionState is Init or Up, the session has\r\ngone down -- the local system MUST set bfd.SessionState to Down and\r\nbfd.LocalDiag to 1 (Control Detection Time Expired).", "correct_text": "If Demand mode is not active, and a period of time equal to the\r\nDetection Time passes without receiving a BFD Control packet from the\r\nremote system, the session has\r\ngone down -- the local system MUST set bfd.SessionState to Down and\r\nbfd.LocalDiag to 1 (Control Detection Time Expired).", "notes": "This is based on an email I received from Anil Kumar of Nokia (anil.kumar_t_v@nokia.com).\r\n\r\nThe language as originally written made a session timeout a no-op when in Down state.  This was a gratuitous attempt to avoid a null state transition, but had the side effect of not setting the diag code (and otherwise is no different).\r\n\r\nThis turns out to be problematic in the case where system \"A\" signals AdminDown, causing system \"B\" to respond with Down state.  If the link then fails, the existing verbiage implies that \"B\" will not report the detection timeout, even locally.\r\n\r\nIf the link fails in a unidirectional manner (such that \"B\" is deaf), B will give no indication of a timeout in its outgoing Control packets back to A (which can in fact hear them).\r\n\r\nMaking the suggested change should ensure that the diagnostic code is always set to Detection Time Expired when Control packets stop arriving, even if the far end system was previously reporting AdminDown.", "submit_date": "2017-12-14", "submitter_name": "Dave Katz", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5206", "doc-id": "RFC2119", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "MAY   This word, or the adjective \"OPTIONAL\", mean", "correct_text": "MAY   This word, or the adjective \"OPTIONAL\", means", "notes": "This correction is analogous to that pointed out by Erratas 495, 498, 500 and 2969 for sections 1, 3 and 4, but for section. The correction replaces \"mean\" with \"means\"", "submit_date": "2017-12-14", "submitter_name": "Hugo Gabriel Eyherabide", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 07:35:30"}, {"errata_id": "5207", "doc-id": "RFC2544", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "25", "orig_text": "The DUT SHOULD be able to respond to address resolution requests sent\r\nby the DUT wherever the protocol requires such a process.", "correct_text": "The DUT and tester SHOULD both be able to respond to address\r\nresolution requests wherever the protocol requires such a\r\nprocess.", "notes": "DUT responding to its own address resolution requests does not make sense.\r\n\r\n[Original corrected text was \"The DUT SHOULD be able to respond to address resolution requests sent by the tester wherever the protocol requires such a process.\" - after discussions with the BMWG  I edited the corrected text as above - the tester also needs to respond, as otherwise the DUT will age out its resolution  -- WK ]", "submit_date": "2017-12-14", "submitter_name": "Beno\u00eet Monin", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5208", "doc-id": "RFC4745", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "   The access to data items needs to be matched with the rule set stored\r\n   at the PS.  Each instance of a request has different attributes\r\n   (e.g., the identity of the requestor) that are used for\r\n   authorization.  A rule in a rule set might have a number of\r\n   conditions that need to be met before executing the remaining parts\r\n   of a rule (i.e., actions and transformations).  Details about rule\r\n   matching are described in Section 10.  This document specifies only a\r\n   few conditions (i.e., identity, sphere, and validity).  Further\r\n   condition elements can be added via extensions to this document.  If\r\n   a child element of the <conditions> element is in a namespace that is\r\n   not known or not supported, then this child element evaluates to\r\n   FALSE.", "correct_text": "   The access to data items needs to be matched with the rule set stored\r\n   at the PS.  Each instance of a request has different attributes\r\n   (e.g., the identity of the requestor) that are used for\r\n   authorization.  A rule in a rule set might have a number of\r\n   conditions that need to be met before executing the remaining parts\r\n   of a rule (i.e., actions and transformations).  Details about rule\r\n   matching are described in Section 10.  This document specifies only a\r\n   few conditions (i.e., identity, sphere, and validity).  Further\r\n   condition elements can be added via extensions to this document.  If\r\n   a child element of the <conditions> element is in a namespace that is\r\n   not known or not supported, then this child element evaluates to\r\n   FALSE.  A rule without a <conditions> element evaluates to TRUE.\r\n           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\r\n\r\n(Only change is new sentence at end.)", "notes": "The schema in RFC 4745 (Common Policy: A Document Format for Expressing Privacy Preferences) allows the <conditions> element to be omitted.  The RFC should say that omitted <conditions> evaluates to TRUE, as the alternative (omitted <conditions> evaluating to FALSE) makes no sense.  Omitted <conditions> as TRUE allows for a rule that is always executed, while evaluating as FALSE would create a rule that is never executed, a meaningless thing.", "submit_date": "2017-12-14", "submitter_name": "Randall Gellens", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:41:41"}, {"errata_id": "5209", "doc-id": "RFC1001", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14", "orig_text": "FEGHGFCAEOGFHEECEJEPFDCAHEGBGNGF", "correct_text": "FEGIGFCAEOGFHEECEJEPFDCAGOGBGNGF", "notes": "I notice the same issue that Anvish received. I did not find the corrected answer anywhere after doing a few searches.\r\n\r\nVerifier note: this checks out, but doesn\u2019t rise to the level of a technical erratum as defined in https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/ so I\u2019ve verified it as editorial. ", "submit_date": "2017-12-16", "submitter_name": "Brian", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 21:50:54"}, {"errata_id": "7127", "doc-id": "RFC3277", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   As such, it is recommended that each time a router establishes an\r\n   adjacency, it will update its LSP and flood it immediately, even\r\n   before beginning database synchronization.  This will allow for the\r\n   Overload bit setting to propagate immediately, and remove the\r\n   potential for an older version of the reloaded routers LSP to be\r\n   used.\r\n", "correct_text": "   As such, it is recommended that each time a router establishes an\r\n   adjacency, it will update its LSP and flood it immediately, even\r\n   before beginning database synchronization.  This will allow for the\r\n   Overload bit setting to propagate immediately, and remove the\r\n   potential for an older version of the reloaded router's LSP to be\r\n   used.\r\n", "notes": "\"reloaded router's\" should be possessive singular.", "submit_date": "2022-09-12", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-09-12 19:05:27"}, {"errata_id": "5214", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6.5", "orig_text": "       timezonec  = \"BEGIN\" \":\" \"VTIMEZONE\" CRLF\r\n                    *(\r\n                    ;\r\n                    ; 'tzid' is REQUIRED, but MUST NOT occur more\r\n                    ; than once.\r\n                    ;\r\n                    tzid /\r\n                    ;\r\n                    ; 'last-mod' and 'tzurl' are OPTIONAL,\r\n                    ; but MUST NOT occur more than once.\r\n                    ;\r\n                    last-mod / tzurl /\r\n                    ;\r\n                    ; One of 'standardc' or 'daylightc' MUST occur\r\n                    ; and each MAY occur more than once.\r\n                    ;\r\n                    standardc / daylightc /\r\n                    ;\r\n                    ; The following are OPTIONAL,\r\n                    ; and MAY occur more than once.\r\n                    ;\r\n                    x-prop / iana-prop\r\n                    ;\r\n                    )\r\n                    \"END\" \":\" \"VTIMEZONE\" CRLF", "correct_text": "       timezonec    = \"BEGIN\" \":\" \"VTIMEZONE\" CRLF\r\n                      timezoneprop timezonesubc\r\n                      \"END\" \":\" \"VTIMEZONE\" CRLF\r\n\r\n       timezoneprop = *(\r\n                      ;\r\n                      ; 'tzid' is REQUIRED, but MUST NOT occur more\r\n                      ; than once.\r\n                      ;\r\n                      tzid /\r\n                      ;\r\n                      ; 'last-mod' and 'tzurl' are OPTIONAL,\r\n                      ; but MUST NOT occur more than once.\r\n                      ;\r\n                      last-mod / tzurl /\r\n                      ;\r\n                      ; The following are OPTIONAL,\r\n                      ; and MAY occur more than once.\r\n                      ;\r\n                      x-prop / iana-prop\r\n                      ;\r\n\r\n       timezonesubc = *(\r\n                      ;\r\n                      ; One of 'standardc' or 'daylightc' MUST occur\r\n                      ; and each MAY occur more than once.\r\n                      ;\r\n                      standardc / daylightc\r\n                      ;\r\n                      )\r\n", "notes": "The definition of icalbody shows that calendar properties precede components. Some components may contains sub-components. For those that may:\r\n\r\nThe definition of eventc (section 3.6.1 - Event Component) also shows that properties precede sub-components.\r\n\r\nThe definition of todoc (section 3.6.2 - To-Do Component) also shows that properties precede sub-components.\r\n\r\nHowever, the definition of timezonec (section 3.6.5 - Time Zone Component) shows that properties and sub-components may be intermingled. The corrected text assumes this was not intended.\n --VERIFIER NOTES-- \nThe current ABNF doesn't appear to cause any interop problems, given that both ical4j and libical don't care about the order of properties and components within a VTIMEZONE component.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/calsify/x82GopunVcEh8y5UGSIsEIC3s6M/", "submit_date": "2017-12-24", "submitter_name": "Richard Smith", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:25:28"}, {"errata_id": "5215", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.8.5.1", "orig_text": "   Purpose:  This property defines the list of DATE-TIME exceptions for\r\n   recurring events, to-dos, journal entries, or time zone\r\n   definitions.\r\n\r\n...\r\n\r\n   Conformance:  This property can be specified in recurring \"VEVENT\",\r\n   \"VTODO\", and \"VJOURNAL\" calendar components as well as in the\r\n   \"STANDARD\" and \"DAYLIGHT\" sub-components of the \"VTIMEZONE\"\r\n   calendar component.", "correct_text": "   Purpose:  This property defines the list of DATE-TIME exceptions for\r\n   recurring events, to-dos or journal entries.\r\n\r\n...\r\n\r\n   Conformance:  This property can be specified in recurring \"VEVENT\",\r\n   \"VTODO\", and \"VJOURNAL\" calendar components.", "notes": "Section 3.8.5.1 describes Exception Date-Times (EXDATE).\r\n\r\ntzprop (section 3.6.5) does not allow EXDATE.\r\n\r\n(Of course, the problem could be that 3.6.5 should include EXDATE.)\n --VERIFIER NOTES-- \nExcluding EXDATE from tzprop is the actual error and is worthy of a new errata.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/calsify/x82GopunVcEh8y5UGSIsEIC3s6M/", "submit_date": "2017-12-24", "submitter_name": "Richard Smith", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:27:42"}, {"errata_id": "5216", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.4.", "orig_text": "A client MUST send a Host header field in all HTTP/1.1 request\r\nmessages.  If the target URI includes an authority component, then a\r\nclient MUST send a field-value for Host that is identical to that\r\nauthority component, excluding any userinfo subcomponent and its \"@\"\r\ndelimiter (Section 2.7.1).  If the authority component is missing or\r\nundefined for the target URI, then a client MUST send a Host header\r\nfield with an empty field-value.", "correct_text": "A client MUST send a Host header field in all HTTP/1.1 request\r\nmessages.  If the target URI includes an authority component, then a\r\nclient MUST send a field-value for Host that is identical to that\r\nauthority component, excluding any userinfo subcomponent and its \"@\"\r\ndelimiter (Section 2.7.1).  If the authority component is missing or\r\nundefined for the target URI, then a recipient MUST reject this\r\nrequest.", "notes": "First, \r\n\r\n   If the target URI includes an authority component, then a\r\n   client MUST send a field-value for Host that is identical to that\r\n   authority component.\r\n\r\nSecondly, section 2.7.1 said:\r\n\r\n   A sender MUST NOT generate an \"http\" URI with an empty host\r\n   identifier.  A recipient that processes such a URI reference MUST\r\n   reject it as invalid.\r\n\r\nSo a recipient MUST reject a request with empty authority.\n --VERIFIER NOTES-- \nAs per Roy T. Fielding: Reject. A target URI can be any URI scheme.", "submit_date": "2017-12-25", "submitter_name": "Jingcheng Zhang", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5217", "doc-id": "RFC3091", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3", "orig_text": "   An OPTIONAL PIgen service is defined as a stateless UDP service.  A\r\n   random distribution of digits of Pi are sent using the payload format\r\n   described in section 2.1.2. to the IP multicast group\r\n   314.159.265.359.", "correct_text": "   An OPTIONAL PIgen service is defined as a stateless UDP service.  A\r\n   random distribution of digits of Pi are sent using the payload format\r\n   described in section 2.1.2. to the IPv6 multicast group\r\n   ff0e:3141:5926:5358:9793:2384:6264:3833.", "notes": "314.159.265.359 is not a valid IPv4 address, because it contains octets larger than 255. Using IPv6 multicast allows 28 digits of Pi in the address and will accelerate the transition to it.", "submit_date": "2017-12-26", "submitter_name": "Lu\u00eds C\u00e2mara", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5219", "doc-id": "RFC5116", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1, 5.2", "orig_text": "P_MAX is 2^36 - 31 octets", "correct_text": "P_MAX is 2^36 - 32 octets", "notes": "There is an off-by-one error in the specification of the maximum input size for AES-GCM.\r\n\r\nNIST SP-800-38D [1] Section 5.2.1.1 says:\r\n\r\n    len(P) \u2264 2^39-256\r\n\r\n\r\n    (2^39-256) / 8 = 2^36 - 32\r\n\r\nSee also RFC 7539 Errata 4858.\r\n\r\n[1] http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf", "submit_date": "2017-12-28", "submitter_name": "Brian Smith", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7680", "doc-id": "RFC7520", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.9", "orig_text": "   This example illustrates encrypting content that is first compressed.\r\n   It reuses the AES symmetric key, key encryption algorithm, and\r\n   content encryption algorithm from Section 5.8.\r\n\r\n   Note that whitespace is added for readability as described in\r\n   Section 1.1.\r\n", "correct_text": "   This example illustrates encrypting content that is first compressed.\r\n   It reuses the AES symmetric key, key encryption algorithm, and\r\n   content encryption algorithm from Section 5.8.\r\n\r\n   Note that DEFLATE [RFC1951] is not a deterministic algorithm; its\r\n   implementations must properly round-trip but are not required to\r\n   produce the same compressed data; it might not be possible to exactly\r\n   replicate the results in this section.\r\n\r\n   Note that whitespace is added for readability as described in\r\n   Section 1.1.", "notes": "This added text is aligned with other non-deterministic algorithms in sections 4.2, 4.3, 5.1, 5.2, 5.13, and 6. It gives the reader a heads up that the results might not be replicable, e.g. when using a modern zlib deflate implementation which uses ANZAC++ hash in favour of hardware accelerated hashing function (i.e. CRC32) to insert symbols in the dictionary during compression.", "submit_date": "2023-10-17", "submitter_name": "Filip Skokan", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5229", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "   <!-- The DMARC policy that applied to the messages in\r\n        this report. -->\r\n   <xs:complexType name=\"PolicyPublishedType\">\r\n     <xs:all>\r\n       <!-- The domain at which the DMARC record was found. -->\r\n       <xs:element name=\"domain\" type=\"xs:string\"/>\r\n       <!-- The DKIM alignment mode. -->\r\n       <xs:element name=\"adkim\" type=\"AlignmentType\"\r\n                   minOccurs=\"0\"/>\r\n       <!-- The SPF alignment mode. -->\r\n       <xs:element name=\"aspf\" type=\"AlignmentType\"\r\n                   minOccurs=\"0\"/>\r\n       <!-- The policy to apply to messages from the domain. -->\r\n       <xs:element name=\"p\" type=\"DispositionType\"/>\r\n       <!-- The policy to apply to messages from subdomains. -->\r\n       <xs:element name=\"sp\" type=\"DispositionType\"/>\r\n       <!-- The percent of messages to which policy applies. -->\r\n       <xs:element name=\"pct\" type=\"xs:integer\"/>\r\n       <!-- Failure reporting options in effect. -->\r\n       <xs:element name=\"fo\" type=\"xs:string\"/>\r\n     </xs:all>\r\n   </xs:complexType>\r\n", "correct_text": "   <!-- The DMARC policy that applied to the messages in\r\n        this report. -->\r\n   <xs:complexType name=\"PolicyPublishedType\">\r\n     <xs:all>\r\n       <!-- The domain at which the DMARC record was found. -->\r\n       <xs:element name=\"domain\" type=\"xs:string\"/>\r\n       <!-- The DKIM alignment mode. -->\r\n       <xs:element name=\"adkim\" type=\"AlignmentType\"\r\n                   minOccurs=\"0\"/>\r\n       <!-- The SPF alignment mode. -->\r\n       <xs:element name=\"aspf\" type=\"AlignmentType\"\r\n                   minOccurs=\"0\"/>\r\n       <!-- The policy to apply to messages from the domain. -->\r\n       <xs:element name=\"p\" type=\"DispositionType\"/>\r\n       <!-- The policy to apply to messages from subdomains. -->\r\n       <xs:element name=\"sp\" type=\"DispositionType\"/\r\n                   minOccurs=\"0\"/>\r\n       <!-- The percent of messages to which policy applies. -->\r\n       <xs:element name=\"pct\" type=\"xs:integer\"/>\r\n       <!-- Failure reporting options in effect. -->\r\n       <xs:element name=\"fo\" type=\"xs:string\"/\r\n                   minOccurs=\"0\"/>\r\n     </xs:all>\r\n   </xs:complexType>\r\n", "notes": "Per section 6.3, \"adkim\", \"aspf\", \"sp\", \"pct\", and \"fo\" are optional. All but \"sp\" have a default value, which is inconsistently applied in Appendix C.\r\n\r\nIf the Subdomain Policy (sp) is required in aggregate reports, I recommend clarification on how to provide this information for domains that do not publish this information.\r\nFor example:\r\n- If a subdomain policy is published on a subdomain of an organizational domain, return an 'ignored' subdomain policy in the aggregate report\r\n- If a subdomain policy is NOT published on an organizational domain, recommend returning the effective subdomain policy in the aggregate report, which is the domain policy per section 6.3\r\n- Recommend addition of the \"fo\" tag only if the \"ruf\" tag is published.", "submit_date": "2018-01-07", "submitter_name": "Steven Hilton", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-03 07:01:07"}, {"errata_id": "5223", "doc-id": "RFC5514", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1", "orig_text": "", "correct_text": "[RFC2119]  Bradner, S., \"Key words for use in RFCs to Indicate\r\n           Requirement Levels\", BCP 14, RFC 2119, March 1997.", "notes": "RFC 2119 key words (like SHOULD, SHOULD NOT, ...) are used throughout RFC 5514, but RFC 2119 is not referenced.\n --VERIFIER NOTES-- \nThe presence of RFC 2119 boilerplate and reference is needed if and only if the authors intend the use of upper case words to be interpreted as defined in RFC 2119. ", "submit_date": "2018-01-01", "submitter_name": "Lu\u00eds C\u00e2mara", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5224", "doc-id": "RFC4954", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "If the initial\r\nresponse argument is omitted and the chosen mechanism requires\r\nan initial client response, the server MUST proceed as defined\r\nin Section 5.1 of [SASL]. \r\n\r\n[...]\r\n\r\nIf use of the initial response\r\nargument would cause the AUTH command to exceed this length,\r\nthe client MUST NOT use the initial response parameter (and\r\ninstead proceed as defined in Section 5.1 of [SASL]).", "correct_text": "If the initial\r\nresponse argument is omitted and the chosen mechanism requires\r\nan initial client response, the server MUST proceed as defined\r\nin Section 5.1 of [RFC 2222]. \r\n\r\n[...]\r\n\r\nIf use of the initial response\r\nargument would cause the AUTH command to exceed this length,\r\nthe client MUST NOT use the initial response parameter (and\r\ninstead proceed as defined in Section 5.1 of [RFC 2222]).", "notes": "[SASL] points to RFC 4422 that does not contain a Section 5.1.\r\nSo the Original text leads to confusion. The referenced Text can be found in RFC 2222 instead.", "submit_date": "2018-01-02", "submitter_name": "Bastian Schumacher", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 20:46:12"}, {"errata_id": "5225", "doc-id": "RFC7599", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "In the case of an IPv4 prefix, the IPv4 address field is right-padded\r\nwith zeros up to 32 bits.  The PSID is left-padded with zeros to\r\ncreate a 16-bit field.  For an IPv4 prefix or a complete IPv4\r\naddress, the PSID field is zero.", "correct_text": "The PSID is left-padded with zeros to\r\ncreate a 16-bit field.  For an IPv4 prefix or a complete IPv4\r\naddress, the PSID field is zero.", "notes": "This text has been copied from RFC7597 (MAP-E). While it is correct in the context of MAP-E, for MAP-T the complete IPv4 source address must be embedded in the interface-identifier for correct translation in the case of an IPv4 prefix. Right padding the prefix with zeroes would lead to the translated packet having all zeroes in its source address.", "submit_date": "2018-01-03", "submitter_name": "Ole Troan", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2020-01-08 22:05:03"}, {"errata_id": "5226", "doc-id": "RFC4035", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.4.1", "orig_text": "   The need for special processing by a security-aware name server only\r\n   arises when all the following conditions are met:\r\n\r\n   o  The name server has received a query for the DS RRset at a zone\r\n      cut.\r\n\r\n   o  The name server is authoritative for the child zone.\r\n\r\n   o  The name server is not authoritative for the parent zone.\r\n\r\n   o  The name server does not offer recursion.", "correct_text": "   The need for special processing by a security-aware name server only\r\n   arises when all the following conditions are met:\r\n\r\n   o  The name server has received a query for the DS RRset at a zone\r\n      cut.\r\n\r\n   o  The name server is authoritative for the child zone.\r\n\r\n   o  The name server is not authoritative for any zone above the\r\n      child's apex.\r\n\r\n   o  The name server does not offer recursion.", "notes": "The original text is ambiguous in the face of an authoritative server having zones C.B.A. and A. but not B.A., and could cause DS queries for C to return a NODATA at C's apex, instead of the desired referral to B. which would allow resolution to continue correctly.", "submit_date": "2018-01-04", "submitter_name": "Peter van Dijk", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 11:53:19"}, {"errata_id": "5227", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.5", "orig_text": "   The <ip>'s name is looked up using this procedure:\r\n\r\n   o  Perform a DNS reverse-mapping for <ip>: Look up the corresponding\r\n      PTR record in \"in-addr.arpa.\" if the address is an IPv4 address\r\n      and in \"ip6.arpa.\" if it is an IPv6 address.\r\n\r\n   o  For each record returned, validate the domain name by looking up\r\n      its IP addresses.  To prevent DoS attacks, the PTR processing\r\n      limits defined in Section 4.6.4 MUST be applied.  If they are\r\n      exceeded, processing is terminated and the mechanism does not\r\n      match.\r\n\r\n   o  If <ip> is among the returned IP addresses, then that domain name\r\n      is validated.\r\n\r\n   Check all validated domain names to see if they either match the\r\n   <target-name> domain or are a subdomain of the <target-name> domain.\r\n   If any do, this mechanism matches.  If no validated domain name can\r\n   be found, or if none of the validated domain names match or are a\r\n   subdomain of the <target-name>, this mechanism fails to match.  If a\r\n   DNS error occurs while doing the PTR RR lookup, then this mechanism\r\n   fails to match.  If a DNS error occurs while doing an A RR lookup,\r\n   then that domain name is skipped and the search continues.\r\n\r\n   This mechanism matches if\r\n\r\n   o  the <target-name> is a subdomain of a validated domain name, or\r\n\r\n   o  the <target-name> and a validated domain name are the same.\r\n\r\n   For example, \"mail.example.com\" is within the domain \"example.com\",\r\n   but \"mail.bad-example.com\" is not.\r\n", "correct_text": "   The <ip>'s name is looked up using this procedure:\r\n\r\n   o  Perform a DNS reverse-mapping for <ip>: Look up the corresponding\r\n      PTR record in \"in-addr.arpa.\" if the address is an IPv4 address\r\n      and in \"ip6.arpa.\" if it is an IPv6 address.\r\n\r\n   Check all domain names to see if they either match the\r\n   <target-name> domain or are a subdomain of the <target-name>\r\n   domain.  If any do, this domain name can be validated.  If no\r\n   domain name can be found, or if none of the domain names match or\r\n   are a subdomain of the <target-name>, this mechanism fails to\r\n   match.  If a DNS error occurs while doing the PTR RR lookup, then\r\n   this mechanism fails to match.\r\n\r\n   This mechanism may match if\r\n\r\n   o  the <target-name> is a subdomain of a domain name, or\r\n\r\n   o  the <target-name> and a domain name are the same.\r\n\r\n   For example, \"mail.example.com\" is within the domain \"example.com\",\r\n   but \"mail.bad-example.com\" is not.\r\n\r\n\r\n   The domain names received must also be validated for the mechanism\r\n   to match.\r\n\r\n   o For each matched record, validate the domain name by looking up\r\n      its IP addresses.  To prevent DoS attacks, the PTR processing\r\n      limits defined in Section 4.6.4 MUST be applied.  If they are\r\n      exceeded, processing is terminated and the mechanism does not\r\n      match.\r\n\r\n   o  If <ip> is among the returned IP addresses, then that domain name\r\n      is validated.\r\n\r\n   If a DNS error occurs while doing an A RR lookup, then that domain\r\n   name is skipped and the search continues.\r\n\r\n\r\n   The mechanism matches if a domain name is found that properly\r\n   matches the target name and can be properly validated.  While these\r\n   tests can be done in either order, performing the match before\r\n   validating prevents needless DNS queries being performed.\r\n", "notes": "As specified, the RFC calls for all names to be validated, even those that can be immediately discarded because they do not match.   The RFC should call for the local-only operation to be done first.  While it may be argued that the RFC doesn't require the order, implementers shouldn't be misled.\r\n\r\nMy corrected text probably needs editorial work.\r\n\r\nI have not fixed errata 4751 in my corrected text.", "submit_date": "2018-01-04", "submitter_name": "David Garfield", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "9089", "doc-id": "RFC9474", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2", "orig_text": "Steps:\r\n1. encoded_msg = EMSA-PSS-ENCODE(msg, bit_len(n))", "correct_text": "Steps:\r\n1. encoded_msg = EMSA-PSS-ENCODE(msg, bit_len(n) - 1)", "notes": "Section 4.5 (Verification) states that verifying the unblinded signature may be done \"by invoking the RSASSA-PSS-VERIFY routine defined in Section 8.1.2 of RFC8017 with (n, e) as pk, M as input_msg, and S as sig.\".  This runs \"EMSA-PSS-VERIFY(M, EM, modBits - 1)\" as Step 3.\r\n\r\nFollowing Section 4.2 as written will yield signatures that fail to verify with the method defined in Section 4.5 roughly 50% of the time.", "submit_date": "2026-08-04", "submitter_name": "Robert Lee", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-10 16:20:12"}, {"errata_id": "5228", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.5", "orig_text": "   Note: This mechanism is slow, it is not as reliable as other\r\n   mechanisms in cases of DNS errors, and it places a large burden on\r\n   the .arpa name servers.  If used, proper PTR records have to be in\r\n   place for the domain's hosts and the \"ptr\" mechanism SHOULD be one of\r\n   the last mechanisms checked.  After many years of SPF deployment\r\n   experience, it has been concluded that it is unnecessary and more\r\n   reliable alternatives should be used instead.  It is, however, still\r\n   in use as part of the SPF protocol, so compliant check_host()\r\n   implementations MUST support it.\r\n", "correct_text": "   Note: This mechanism is not as reliable as other\r\n   mechanisms in cases of DNS errors.\r\n   If used, proper PTR records have to be in\r\n   place for the domain's hosts and the \"ptr\" mechanism SHOULD be one of\r\n   the last mechanisms checked.  After many years of SPF deployment\r\n   experience, it has been concluded that it is unnecessary and more\r\n   reliable alternatives should be used instead.  It is, however, still\r\n   in use as part of the SPF protocol, so compliant check_host()\r\n   implementations MUST support it.\r\n", "notes": "I have not reflowed the text so it can be more clear what I changed.\r\n\r\n        This mechanism is slow\r\n\r\nIn fact, if all the DNS records are in place, Errata 5227 is accounted\r\nfor, and the single PTR query is discounted, this mechanism produces\r\nno more additional DNS queries than mechanism \"a\".  I.e. it produces\r\none A (or AAAA) query.  It is not slow.\r\n\r\n        it places a large burden on the .arpa name servers\r\n\r\nIn fact, it requires 1 PTR query, for however many ptr mechanisms are\r\nin the SPF record.  Further, most mail servers already do this PTR\r\nquery, to report the information on the \"Received\" line.  Even if a\r\nseperate daemon is used to the SPF check, the data should already be\r\nin a local caching name server.", "submit_date": "2018-01-04", "submitter_name": "David Garfield", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5230", "doc-id": "RFC8291", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5", "orig_text": "   Content-Length: 145", "correct_text": "   Content-Length: 144", "notes": "Reported here: https://github.com/webpush-wg/webpush-encryption/pull/22", "submit_date": "2018-01-07", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5231", "doc-id": "RFC5766", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "16", "orig_text": "    |<-- Refresh success response -------|             |             |\r\n    |    Transaction-Id=0x427BD3E625A85FC731DC4191     |             |\r\n    |    SOFTWARE=\"Example server, version 1.17\"       |             |\r\n    |    LIFETIME=600 (10 minutes)       |             |             |\r\n", "correct_text": "    |<-- Refresh success response -------|             |             |\r\n    |    Transaction-Id=0x427BD3E625A85FC731DC4191     |             |\r\n    |    SOFTWARE=\"Example server, version 1.17\"       |             |\r\n    |    LIFETIME=600 (10 minutes)       |             |             |\r\n    |    MESSAGE-INTEGRITY=...           |             |             |", "notes": "The last example refresh success response lacks message-integrity, incorrectly implying that the response after a stale nonce exchange does not have to be authenticated.", "submit_date": "2018-01-09", "submitter_name": "Hannes Landeholm", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5531", "doc-id": "RFC7530", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "10.4.6.", "orig_text": "   o  When the callback path is down, the server MUST NOT revoke the\r\n      delegation if one of the following occurs:\r\n\r\n      *  (...)\r\n\r\n      *  The client has not issued a RENEW operation for some period of\r\n         time after the server attempted to recall the delegation.  This\r\n         period of time MUST NOT be less than the value of the\r\n         lease_time attribute.", "correct_text": "   o  When the callback path is down, the server MUST NOT revoke the\r\n      delegation if one of the following occurs:\r\n\r\n      *  (...)\r\n\r\n      *  The client has not issued a RENEW operation for some period of\r\n         time after the server attempted to recall the delegation.  This\r\n         period of time MUST be less than the value of the\r\n         lease_time attribute.", "notes": "It does not make sense to revoke the delegation before lease_time period expiration and to not revoke it after.", "submit_date": "2018-10-16", "submitter_name": "Sylvain Etienne", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5532", "doc-id": "RFC4752", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   with the first octet containing a bit-mask specifying the security\r\n   layers supported by the server and the second through fourth octets\r\n   containing in network byte order the maximum size output_token the\r\n   server is able to receive (which MUST be 0 if the server does not\r\n   support any security layer).", "correct_text": "   with the first octet containing a bit-mask specifying the security\r\n   layers supported by the server and the second through fourth octets\r\n   containing in network byte order the maximum size output_message the\r\n   server is able to receive (which MUST be 0 if the server does not\r\n   support any security layer).", "notes": "\u2018output_token\u2019 should be 'output_message' here, since 'output_token' is an output of GSS_Init_sec_context while here we are talking about the maximum data length that GSS_Unwrap (GSS_Wrap of the oppsite side) can handle", "submit_date": "2018-10-18", "submitter_name": "Borun Song", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7671", "doc-id": "RFC8402", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   A likely use case for the BGP-Prefix segment is an IGP-free hyper-\r\n   scale spine-leaf topology where connectivity is learned solely via\r\n   BGP [RFC7938]", "correct_text": "   A likely use case for the BGP-Prefix segment is an IGP-free hyper-\r\n   scale spine-leaf topology where connectivity is learned solely via\r\n   BGP [RFC7938].", "notes": "The period is missing at the end of the sentence.", "submit_date": "2023-10-09", "submitter_name": "Alvaro Retana", "verifier_id": "", "verifier_name": "James N Guichard", "update_date": "2023-10-09 19:29:31"}, {"errata_id": "5236", "doc-id": "RFC7232", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "Likewise, a validator is weak if it is shared by two or more\r\nrepresentations of a given resource at the same time, unless those\r\nrepresentations have identical representation data.  For example, if\r\nthe origin server sends the same validator for a representation with\r\na gzip content coding applied as it does for a representation with no\r\ncontent coding, then that validator is weak.  However, two\r\nsimultaneous representations might share the same strong validator if\r\nthey differ only in the representation metadata, such as when two\r\ndifferent media types are available for the same representation data.", "correct_text": "Likewise, a validator is weak if it is shared by two or more\r\nrepresentations of a given resource at the same time, even if those\r\nrepresentations have identical representation data.  For example, if\r\nthe origin server sends the same validator for a representation with\r\na gzip content coding applied as it does for a representation with no\r\ncontent coding, then that validator is weak.", "notes": "This paragraph (and only this paragraph) seems to be in direct conflict with this earlier text from the same section:\r\n\r\n\"However, if a resource has distinct representations that differ only in their metadata, such as might occur with content negotiation over media types that happen to share the same data format, then the origin server needs to incorporate additional information in the [strong] validator to distinguish those representations.\"\n --VERIFIER NOTES-- \n   There is not a conflict here: The text quoted in the notes needs to be read in the context of the entire paragraph it appears in, which the \"however\" references.  The quoted statement is being made in the context of generating strong validators based only upon the message body, when the headers might also change.", "submit_date": "2018-01-16", "submitter_name": "Chris Pacejo", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-08-27 12:39:08"}, {"errata_id": "5237", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.4.1.1", "orig_text": "The accessible tree for an action invocation of \"reset\" on\r\n/a/b[id=\"1\"] with the \"when\" parameter set to \"10\" would be:\r\n\r\n<a xmlns=\"urn:example:a\">\r\n<b>\r\n<id>1</id>\r\n<reset>\r\n<delay>10</delay>\r\n</reset>\r\n</b>\r\n<b>\r\n<id>2</id>\r\n</b>\r\n</a>\r\n// possibly other top-level nodes here", "correct_text": "The accessible tree for an action invocation of \"reset\" on\r\n/a/b[id=\"1\"] with the \"delay\" parameter set to \"10\" would be:\r\n\r\n<a xmlns=\"urn:example:a\">\r\n<b>\r\n<id>1</id>\r\n<reset>\r\n<delay>10</delay>\r\n</reset>\r\n</b>\r\n<b>\r\n<id>2</id>\r\n</b>\r\n</a>\r\n// possibly other top-level nodes here", "notes": "The example action \"reset\" has an input parameter named \"delay\" and not a parameter named \"when\".", "submit_date": "2018-01-18", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5238", "doc-id": "RFC6234", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   e. The rotate left (circular left shift) operation ROTL^n(x), where x\r\n      is a w-bit word and n is an integer with 0 <= n < w, is defined by\r\n\r\n         ROTL^n(X) = (x<<n) OR (x>>(w-n))", "correct_text": "   e. The rotate left (circular left shift) operation ROTL^n(x), where x\r\n      is a w-bit word and n is an integer with 0 <= n < w, is defined by\r\n\r\n         ROTL^n(x) = (x<<n) OR (x>>(w-n))", "notes": "A typo. The function argument has to be x, not X.", "submit_date": "2018-01-19", "submitter_name": "Yeong-u Kim (K.)", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5239", "doc-id": "RFC6902", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.16", "orig_text": "An example target JSON document:\r\n\r\n   { \"foo\": [\"bar\"] }\r\n\r\n   A JSON Patch document:\r\n\r\n   [\r\n     { \"op\": \"add\", \"path\": \"/foo/-\", \"value\": [\"abc\", \"def\"] }\r\n   ]\r\n\r\n   The resulting JSON document:\r\n\r\n   { \"foo\": [\"bar\", [\"abc\", \"def\"]] }", "correct_text": "An example target JSON document:\r\n\r\n   { \"foo\": [\"bar\"] }\r\n\r\n   A JSON Patch document:\r\n\r\n   [\r\n     { \"op\": \"add\", \"path\": \"/foo/-\", \"value\": [\"abc\", \"def\"] }\r\n   ]\r\n\r\n   The resulting JSON document:\r\n\r\n   { \"foo\": [\"bar\", \"abc\", \"def\"] }", "notes": "surplus square brackets in resulting JSON document\n --VERIFIER NOTES-- \n   The example is correct as written: the value to be added to the array is itself an array, so the new element is [\"abc\", \"def\"].", "submit_date": "2018-01-19", "submitter_name": "Grzegorz Olszewski", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-12-09 15:42:31"}, {"errata_id": "5240", "doc-id": "RFC6234", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6", "orig_text": "6.1.  SHA-224 and SHA-256 Initialization\r\n\r\n   For SHA-224, the initial hash value, H(0), consists of the following\r\n   32-bit words in hex:\r\n\r\n      H(0)0 = c1059ed8\r\n      H(0)1 = 367cd507\r\n      H(0)2 = 3070dd17\r\n      H(0)3 = f70e5939\r\n      H(0)4 = ffc00b31\r\n      H(0)5 = 68581511\r\n      H(0)6 = 64f98fa7\r\n      H(0)7 = befa4fa4", "correct_text": "6.1.  SHA-224 and SHA-256 Initialization\r\n\r\n   For SHA-224, the initial hash value, H(0), consists of the following\r\n   32-bit words in hex.  These words were obtained by taking the second\r\n   32 bits of the fractional parts of the square roots of the ninth\r\n   through sixteenth prime numbers.\r\n\r\n      H(0)0 = c1059ed8\r\n      H(0)1 = 367cd507\r\n      H(0)2 = 3070dd17\r\n      H(0)3 = f70e5939\r\n      H(0)4 = ffc00b31\r\n      H(0)5 = 68581511\r\n      H(0)6 = 64f98fa7\r\n      H(0)7 = befa4fa4", "notes": "The explanation for the way in which the initial hash value of SHA-224 was obtained is missing.", "submit_date": "2018-01-21", "submitter_name": "Yeong-u Kim (K.)", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5242", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6.2.5", "orig_text": "                                                                K5\r\n      metric =[(K1*Net-Throughput) + Latency)+(K6*ExtAttr)] * ------\r\n                                                              K4+Rel", "correct_text": "                                                        K5\r\n      metric =[Net-Throughput+Latency+(K6*ExtAttr)] * ------\r\n                                                      K4+Rel", "notes": "1. Round brackets aren't balanced.\r\n2. There shouldn't be K1, as Net-Throughput already includes it.", "submit_date": "2018-01-24", "submitter_name": "Innokentiy Solntsev", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-04-01 12:33:19"}, {"errata_id": "5533", "doc-id": "RFC8152", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   alg:  This parameter is used to indicate the algorithm used for the\r\n      security processing.  This parameter MUST be authenticated where\r\n      the ability to do so exists.  This support is provided by AEAD\r\n      algorithms or construction (COSE_Sign, COSE_Sign0, COSE_Mac, and\r\n      COSE_Mac0).", "correct_text": "   alg:  This parameter is used to indicate the algorithm used for the\r\n      security processing.  This parameter MUST be authenticated where\r\n      the ability to do so exists.  This support is provided by AEAD\r\n      algorithms or construction (COSE_Sign, COSE_Sign1, COSE_Mac, and\r\n      COSE_Mac0).", "notes": "COSE_Sign0 is only mentioned once in the document, but COSE_Sign1 appears many times.", "submit_date": "2018-10-18", "submitter_name": "Jian Huang", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5243", "doc-id": "RFC8077", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "-  Group ID\r\n\r\n      An arbitrary 32-bit value that represents a group of PWs that is\r\n      used to create groups in the PW space.  The Group ID is intended\r\n      to be used as a port index or a virtual tunnel index.  To simplify\r\n      configuration, a particular PW Group ID at ingress could be part\r\n      of a Group ID assigned to the virtual tunnel for transport to the\r\n      egress router.  The Group ID is very useful for sending wildcard\r\n      label withdrawals or PW wildcard status Notification messages to\r\n      remote PEs upon physical port failure.", "correct_text": "-  Group ID\r\n \r\n      An arbitrary 32-bit value that represents a group of PWs that is\r\n      used to create groups in the PW space.  The Group ID is intended\r\n      to be used as a port index or a virtual tunnel index.  To simplify\r\n      configuration, a particular PW Group ID at ingress could be part\r\n      of a Group ID assigned to the virtual tunnel for transport to the\r\n      egress router.  The Group ID is very useful for sending wildcard\r\n      label withdrawals or PW wildcard status Notification messages to\r\n      remote PEs upon physical port failure or transport tunnel failure.\r\n\r\n", "notes": "The PW group can be created on basis of the transport tunnel index.\r\n\r\nSo  Group Id can be used to send PW wildcard status notification to remote PEs on physical port failure or Transport tunnel failure.\n --VERIFIER NOTES-- \nBased on input from the Chair and pals wg members, I have rejected this errata. This sentence is not a normative sentence, it is an example. There are no interoperability concerns with the current text.", "submit_date": "2018-01-25", "submitter_name": "JAYANT BHARDWAJ", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5244", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2", "orig_text": "CAA authorizations are additive; thus, the result of specifying both\r\nthe empty issuer and a specified issuer is the same as specifying\r\njust the specified issuer alone.", "correct_text": "CAA authorizations are additive; thus, the result of specifying both\r\nthe empty issuer and a specified issuer is the same as specifying\r\njust the specified issuer alone.  A non-empty CAA record set that does\r\nnot contain an issue property tag is authorization to any certificate\r\nissuer to issue for the corresponding domain, provided that no\r\nrecords in the CAA record set otherwise prohibit issuance.", "notes": "The current wording in the RFC does not clearly state how non-empty CAA record sets which do not contain any \"issue\" property tags should be handled in terms of whether or not such record sets authorize issuance. The additional wording clarifies the correct handling of this case.", "submit_date": "2018-01-26", "submitter_name": "Corey Bonnell", "verifier_id": "", "verifier_name": "EKR", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5245", "doc-id": "RFC5805", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.4", "orig_text": "\r\n\"The server returns an End Transaction Response with a resultCode of\r\n   success (0) and no responseValue to indicate all the requested\r\n   updates were applied.\"", "correct_text": "The server returns an End Transaction Response with a resultCode of\r\n   success (0) and optionally a responseValue with updateControls, \r\nif any to indicate all the requested updates were applied.", "notes": "The original text mention that the responseValue should not be sent back when the commit was successful, which would makes the updateControls useless. As the caller would need to get back the controls result for each operation having a control, we need to send them back when the transaction is successful.", "submit_date": "2018-01-28", "submitter_name": "Emmanuel Lecharny", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5246", "doc-id": "RFC5805", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3", "orig_text": "      txnEndRes ::= SEQUENCE {\r\n           messageID MessageID OPTIONAL,\r\n                -- msgid associated with non-success resultCode\r\n           updatesControls SEQUENCE OF updateControls SEQUENCE {\r\n                messageID MessageID,\r\n                     -- msgid associated with controls\r\n                controls  Controls\r\n           } OPTIONAL\r\n      }\r\n", "correct_text": "      TxnEndRes ::= SEQUENCE {\r\n           messageID MessageID OPTIONAL,\r\n                -- msgid associated with non-success resultCode\r\n           updatesControls SEQUENCE OF updateControl SEQUENCE {\r\n                messageID MessageID,\r\n                     -- msgid associated with controls\r\n                controls  Controls\r\n           } OPTIONAL\r\n      }\r\n\r\n      UpdateControl SEQUENCE {\r\n                messageID MessageID,\r\n                     -- msgid associated with controls\r\n                controls  Controls\r\n      }", "notes": "The type after SEQUENCE OF should be different than the name used before SEQUENCE OF, to avoid confusion. \r\n'txnEndRes' should also be 'TxnEndRes' as it's a typeReference, so it should start with a upper case, accordingly to the ASN.1 grammar specification", "submit_date": "2018-01-28", "submitter_name": "Emmanuel Lecharny", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5247", "doc-id": "RFC7296", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.10.", "orig_text": "   o  Protocol ID (1 octet) - If this notification concerns an existing\r\n      SA whose SPI is given in the SPI field, this field indicates the\r\n      type of that SA.  For notifications concerning Child SAs, this\r\n      field MUST contain either (2) to indicate AH or (3) to indicate\r\n      ESP.  Of the notifications defined in this document, the SPI is\r\n      included only with INVALID_SELECTORS, REKEY_SA, and\r\n      CHILD_SA_NOT_FOUND.  If the SPI field is empty, this field MUST be\r\n      sent as zero and MUST be ignored on receipt.", "correct_text": "   o  Protocol ID (1 octet) - If this notification concerns an existing\r\n      SA whose SPI is given in the SPI field, this field indicates the\r\n      type of that SA.  For notifications concerning Child SAs, this\r\n      field MUST contain either (2) to indicate AH or (3) to indicate\r\n      ESP.  Of the notifications defined in this document, the SPI is\r\n      included only with INVALID_SELECTORS, REKEY_SA, and\r\n      CHILD_SA_NOT_FOUND.  If the SPI field is empty, this field MUST be\r\n      sent as zero to indicate NONE and MUST be ignored on receipt.", "notes": "If I assume that the 'Protocol ID' field in the notification payload is specified by:\r\n\r\n  Internet Key Exchange Version 2 (IKEv2) Parameters\r\n  IKEv2 Security Protocol Identifiers\r\n\r\nthen a notification is using the 'Reserved' value 0.   Since the value is being used,\r\nI think it would be better to give it a name.  Other uses of 'Protocol ID' don't need\r\nupdating as they all explicitly list allowed values, and in no case is 0 allowed.\r\n\r\nPaul Wouters:\r\n\r\nThis is about name for Protocol ID 0 to be seen as \"NONE\", versus giving it a better name. While I agree with the poster the writing could be improved, this change is not required for implementing the RFC. Thus moved to Held for Document Update where this text can then be improved upon.\r\n", "submit_date": "2018-01-30", "submitter_name": "Andrew Cagney", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-11 00:15:02"}, {"errata_id": "5250", "doc-id": "RFC2488", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   The\r\n   propagation delay to a LEO orbit ranges from several milliseconds\r\n   when communicating with a satellite directly overhead, to as much as\r\n   80 ms when the satellite is on the horizon.", "correct_text": "The propagation delay to a LEO orbit ranges from several milliseconds\r\nwhen communicating with a satellite directly overhead, to as much as\r\n20 ms when the satellite is on the horizon.", "notes": "80 ms * speed of light gives 24,000 km,\r\nwhich is a distance larger than MEO GPS altitude.\r\n\r\nGiven that the diameter of the Earth is just over 12,000 km,\r\na LEO satellite on the horizon will clearly not need that\r\npropagation delay or light travel time to reach it.\r\n\r\n(As it's defined as propagation delay,\r\nwe're not considering MAC retransmits.)\r\n\r\n30ms gives up to 6000km slant path, which is barely\r\npossible for a very high definition of LEO orbit that is\r\nalmost MEO. Tighten the value further, if you like, after\r\ndrawing a couple of circles and doing a bit of trigonometry.\r\n\r\nThis 80ms is being cited uncritically in papers\r\n(found it in a recent PhD thesis),\r\nso needs correction.\r\n", "submit_date": "2018-02-01", "submitter_name": "Lloyd Wood", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5248", "doc-id": "RFC7841", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2.2", "orig_text": "Documents approved for publication\r\nby the [stream approver -- currently, one of: \"IAB\",\r\n\"IRSG\", or \"RFC Editor\"] are not a candidate for any level of\r\nInternet Standard; ...", "correct_text": "Documents approved for publication by the [stream approver\r\n-- currently, one of: \"IAB\", \"IRSG\", or \"RFC Editor\"] are\r\nnot candidates for any level of Internet Standard; ...", "notes": "--- Verifier Notes : The originally submitted \"Corrected Text\" is below. The Corrected Text was edited to make it clear which option was chosen. ---\r\n\r\nDocuments approved for publication by the [stream approver\r\n-- currently, one of: \"IAB\", \"IRSG\", or \"RFC Editor\"] are\r\nnot candidates for any level of Internet Standard; ...\r\n\r\n--or--\r\n\r\nA document approved for publication by the [stream approver\r\n-- currently, one of: \"IAB\", \"IRSG\", or \"RFC Editor\"] is \r\nnot a candidate for any level of Internet Standard; ...\r\n\r\n--- End Verifier Notes ---\r\nThe present sentence is egregiously bad English, at roughly the \"every fourth-grader is English-speaking countries is expected to know better\" level.  Having it in this document and, because of what it specifies, in every non-IETF-stream RFC, reflects badly on the IAB, the RFC Editor, and the RFC Series.  In addition, because we do not explicitly differentiate between boilerplate text and text supplied and approved by authors, it may reflect badly on individual document  authors.   \r\n\r\nIf it is not possible for this erratum to be quickly reviewed and approved, with the RFC Editor allowed to make this (and if necessary other) clearly editorial change to boilerplate text for documents published after today, I suggest that explicit notes be added to \"Status of this Memo\" sections going forward that identify the boilerplate text  and its sources.  For example, a new first sentence should be added immediately after \"Status of this Memo\"  that says \"This section and the one on Copyright that follows, are as specified by the Internet Architecture Board [RFC7841] and the Trustees of the IETF Trust.\"\r\n\r\nThe problem identified here may suggest that, when 7841 and similar documents are revised, it may be better to establish principles and leave specific text to agreements between the relevant bodies and the RFC  Editor rather than building exact text to be used into archival and hard-to-revise documents.", "submit_date": "2018-01-31", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Robert Sparks", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5249", "doc-id": "RFC7540", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "     HTTP2-Settings    = token68", "correct_text": "     HTTP2-Settings    = [ token68 ]", "notes": "An initial SETTINGS frame is explicitly allowed by Section 3.5 to be empty. The payload of an empty SETTINGS frame is an empty sequence of octets, whose base64url encoding is an empty string. Thus, the HTTP2-Settings header field ought to permit an empty string as value. But the ABNF for \"token68\" does not match an empty string.\n --VERIFIER NOTES-- \nMartin Thomson wrote:\r\n\r\nThe observation is correct.  However, I'm not sure that this is the\r\nsolution I would choose.  I'm not sure, but I think that an empty\r\nheader field would cause problems.  Maybe the right conclusion to draw\r\nhere is that you have to include at least one setting if you use this\r\nheader field.\r\n\r\nAlexey:\r\n\r\nAgreement in the WG to reject the erratum as proposed, but a better fix might be proposed separately.\r\n", "submit_date": "2018-02-01", "submitter_name": "Vasiliy Faronov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7128", "doc-id": "RFC9309", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2.2", "orig_text": "   For example:\r\n\r\n   +==================+=======================+=======================+\r\n   | Path             | Encoded Path          | Path to Match         |\r\n   +==================+=======================+=======================+\r\n   | /foo/bar?baz=quz | /foo/bar?baz=quz      | /foo/bar?baz=quz      |\r\n   +------------------+-----------------------+-----------------------+\r\n   | /foo/bar?baz=    | /foo/bar?baz=         | /foo/bar?baz=         |\r\n   | https://foo.bar  | https%3A%2F%2Ffoo.bar | https%3A%2F%2Ffoo.bar |\r\n   +------------------+-----------------------+-----------------------+\r\n   | /foo/bar/        | /foo/bar/%E3%83%84    | /foo/bar/%E3%83%84    |\r\n   | U+E38384         |                       |                       |\r\n   +------------------+-----------------------+-----------------------+\r\n   | /foo/            | /foo/bar/%E3%83%84    | /foo/bar/%E3%83%84    |\r\n   | bar/%E3%83%84    |                       |                       |\r\n   +------------------+-----------------------+-----------------------+\r\n   | /foo/            | /foo/bar/%62%61%7A    | /foo/bar/baz          |\r\n   | bar/%62%61%7A    |                       |                       |\r\n   +------------------+-----------------------+-----------------------+", "correct_text": "   For example:\r\n\r\n   +==================+=======================+=======================+\r\n   | Path             | Encoded Path          | Path to Match         |\r\n   +==================+=======================+=======================+\r\n   | /foo/bar?baz=quz | /foo/bar?baz=quz      | /foo/bar?baz=quz      |\r\n   +------------------+-----------------------+-----------------------+\r\n   | /foo/bar?baz=    | /foo/bar?baz=         | /foo/bar?baz=         |\r\n   | https://foo.bar  | https%3A%2F%2Ffoo.bar | https%3A%2F%2Ffoo.bar |\r\n   +------------------+-----------------------+-----------------------+\r\n   | /foo/bar/        | /foo/bar/%E3%83%84    | /foo/bar/%E3%83%84    |\r\n   | U+30C4           |                       |                       |\r\n   +------------------+-----------------------+-----------------------+\r\n   | /foo/            | /foo/bar/%E3%83%84    | /foo/bar/%E3%83%84    |\r\n   | bar/%E3%83%84    |                       |                       |\r\n   +------------------+-----------------------+-----------------------+\r\n   | /foo/            | /foo/bar/%62%61%7A    | /foo/bar/baz          |\r\n   | bar/%62%61%7A    |                       |                       |\r\n   +------------------+-----------------------+-----------------------+", "notes": "The \"Path\" component of third example seems to indicate Unicode codepoint, rather than UTF-8 encoded hexadecimal. If it was, the correct codepoint for %E3%83%84 is U+30C4, or \u30c4 (in Unicode form).", "submit_date": "2022-09-13", "submitter_name": "Yoshiro Yoneya", "verifier_id": "", "verifier_name": null, "update_date": "2024-06-19 18:15:05"}, {"errata_id": "7129", "doc-id": "RFC6920", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "   The following ni URI is generated from the text \"Hello World!\" (12\r\n   characters without the quotes), using the sha-256 algorithm shown\r\n   with and without an authority field:\r\n\r\n   ni:///sha-256;f4OxZX_x_FO5LcGBSKHWXfwtSx-j1ncoSt3SABJtkGk\r\n\r\n   ni://example.com/sha-256;f4OxZX_x_FO5LcGBSKHWXfwtSx-j1ncoSt3SABJtkGk\r\n", "correct_text": "   The following ni URI is generated from the text \"Hello World!\" (12\r\n   characters without the quotes), using the sha-256 algorithm shown\r\n   with and without an authority field:\r\n\r\n   ni://example.com/sha-256;f4OxZX_x_FO5LcGBSKHWXfwtSx-j1ncoSt3SABJtkGk\r\n\r\n   ni:///sha-256;f4OxZX_x_FO5LcGBSKHWXfwtSx-j1ncoSt3SABJtkGk\r\n", "notes": "Make example consistent with the \"with and without\" language.\r\n\r\n --VERIFIER NOTES--\r\nThis has been marked as held for document update per author input: co-authors [\u2026] concluded that indeed it would be more clear if the order of the examples was changed as suggested by the report.", "submit_date": "2022-09-13", "submitter_name": "Venkatesh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-09-19 21:16:04"}, {"errata_id": "7132", "doc-id": "RFC8851", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10", "orig_text": "rid-id            = 1*(alpha-numeric / \"-\" / \"_\")", "correct_text": "rid-id            = 1*255(alpha-numeric)", "notes": "The BNF should be consistent with the rules for the RtpStreamId/RepairedRtpStreamId SDES from RFC 8852 section 3:\r\n\r\n\"As with all SDES items, RtpStreamId and RepairedRtpStreamId are limited to a total of 255 octets in length. RtpStreamId and RepairedRtpStreamId are constrained to contain only alphanumeric characters. For avoidance of doubt, the only allowed byte values for these IDs are decimal 48 through 57, 65 through 90, and 97 through 122.\"", "submit_date": "2022-09-14", "submitter_name": "Byron Campen", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2022-10-13 14:45:31"}, {"errata_id": "5252", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.7", "orig_text": "   More formally, pseudo-code for the signature algorithm is:\r\n\r\n   body-hash    =  hash-alg (canon-body, l-param)\r\n   data-hash    =  hash-alg (h-headers, D-SIG, body-hash)\r\n   signature    =  sig-alg (d-domain, selector, data-hash)\r\n\r\n   where:\r\n\r\n   body-hash:  is the output from hashing the body, using hash-alg.\r\n\r\n   hash-alg:   is the hashing algorithm specified in the \"a\" parameter.\r\n\r\n   canon-body: is a canonicalized representation of the body, produced\r\n               using the body algorithm specified in the \"c\" parameter,\r\n               as defined in Section 3.4 and excluding the\r\n               DKIM-Signature field.\r\n\r\n   l-param:    is the length-of-body value of the \"l\" parameter.\r\n\r\n   data-hash:  is the output from using the hash-alg algorithm, to hash\r\n               the header including the DKIM-Signature header, and the\r\n               body hash.\r\n\r\n   h-headers:  is the list of headers to be signed, as specified in the\r\n               \"h\" parameter.\r\n\r\n   D-SIG:      is the canonicalized DKIM-Signature field itself without\r\n               the signature value portion of the parameter, that is, an\r\n               empty parameter value.\r\n", "correct_text": "   More formally, pseudo-code for the signature algorithm is:\r\n\r\n   body-hash    =  hash-alg (canon-body, l-param)\r\n   data-hash    =  hash-alg (h-headers, D-SIG)\r\n   signature    =  sig-alg (d-domain, selector, data-hash)\r\n\r\n   where:\r\n\r\n   body-hash:  is the output from hashing the body, using hash-alg.\r\n\r\n   hash-alg:   is the hashing algorithm specified in the \"a\" parameter.\r\n\r\n   canon-body: is a canonicalized representation of the body, produced\r\n               using the body algorithm specified in the \"c\" parameter,\r\n               as defined in Section 3.4 and excluding the\r\n               DKIM-Signature field.\r\n\r\n   l-param:    is the length-of-body value of the \"l\" parameter.\r\n\r\n   data-hash:  is the output from using the hash-alg algorithm, to hash\r\n               the header including the DKIM-Signature header, and the\r\n               body hash.\r\n\r\n   h-headers:  is the list of headers to be signed, as specified in the\r\n               \"h\" parameter.\r\n\r\n   D-SIG:      is the canonicalized DKIM-Signature field itself without\r\n               the signature value portion of the parameter, that is, an\r\n               empty parameter value, with no trailing CRLF.\r\n", "notes": "data-hash does not include body-hash (body-hash is already included by virtue of  the \"bh=\" tag in D-SIG). Also, D-SIG should not include the trailing CRLF, unlike the headers in h-headers.", "submit_date": "2018-02-02", "submitter_name": "Alastair Houghton", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5253", "doc-id": "RFC5549", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2", "orig_text": "Length of Next Hop Network Address = 16 (or 32)", "correct_text": "Length of Next Hop Network Address = 24 (or 48)", "notes": "The lengths should include the RD length also, right ?\r\n\r\n===\r\nThis report is being addressed in draft-ietf-bess-rfc5549revision.", "submit_date": "2018-02-02", "submitter_name": "Shyam Sethuram", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-08-24 16:43:18"}, {"errata_id": "5254", "doc-id": "RFC6690", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "relation-types = relation-type\r\n                   / DQUOTE relation-type *( 1*SP relation-type ) DQUOTE", "correct_text": "relation-types = reg-rel-type\r\n               / DQUOTE relation-type *( 1*SP relation-type ) DQUOTE\r\n", "notes": "As defined originally \"relation-types\" may consist of a \"URI\".  RFC 3986 defines URI to allow semi-colons in various places.  For example, \"http://;\" seems to be a valid URI.  Unfortunately, that makes parsing a link-param list ambiguous since its elements are separated by semicolons.\r\n\r\nThe proposed fix to to allow \"ext-rel-type\" (i.e., \"URI\") to appear only inside a quoted relation-type list.\n --VERIFIER NOTES-- \nAlthough identifying a valid concern, this errata does not aim to clarify the original intent, but makes changes to the original RFC that were not agreed upon. The change, therefore, if it is to be applied needs to be achieved through a consensus document.", "submit_date": "2018-02-03", "submitter_name": "David Mosberger", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:24:43"}, {"errata_id": "5255", "doc-id": "RFC8040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.3.", "orig_text": "If there are multiple key leaf values, the path \r\nsegment is constructed by having the list name, \r\nfollowed by the value of each leaf identified \r\nin the \"key\" statement, encoded in the order\r\nspecified in the YANG \"key\" statement.  Each key \r\nleaf value except the last one is followed by \r\na comma character.", "correct_text": "If there are multiple key leaf values, the path \r\nsegment is constructed by having the list name,  \r\nfollowed by an \"=\" character, \r\nfollowed by the value of each leaf identified \r\nin the \"key\" statement, encoded in the order\r\nspecified in the YANG \"key\" statement.  Each key \r\nleaf value except the last one is followed by \r\na comma character.", "notes": "When describing the encoding of key values for a list, in the case of multiple keys the \"=\" equal sign is not mentioned although it is used in the examples.", "submit_date": "2018-02-06", "submitter_name": "Balazs Lengyel", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5256", "doc-id": "RFC8200", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.8", "orig_text": "      Hdr Ext Len           8-bit unsigned integer.  Length of the\r\n                            Destination Options header in 8-octet units,\r\n                            not including the first 8 octets.\r\n", "correct_text": "      Hdr Ext Len           8-bit unsigned integer.  Length of the\r\n                            extension header in 8-octet units,\r\n                            not including the first 8 octets.\r\n", "notes": "Copy-paste error.", "submit_date": "2018-02-06", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-02-03 14:17:43"}, {"errata_id": "7133", "doc-id": "RFC7854", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "   In BMP's normal operating mode, after the BMP session is up, Route\r\n   Monitoring messages are used to provide a snapshot of the Adj-RIB-In\r\n   of each monitored peer.  This is done by sending all routes stored in\r\n   the Adj-RIB-In of those peers using standard BGP Update messages,\r\n   encapsulated in Route Monitoring messages.  There is no requirement\r\n   on the ordering of messages in the peer dumps.  When the initial dump\r\n   is completed for a given peer, this MUST be indicated by sending an\r\n   End-of-RIB marker for that peer (as specified in Section 2 of\r\n   [RFC4724], plus the BMP encapsulation header).  See also Section 9.\r\n", "correct_text": "Regrettably, there is no straightforward correction. Please see the notes for details.", "notes": "BMP is specified in the indicated text as sending \"an End-of-RIB marker for that peer\". The problem is that End-of-RIB (EoR) markers aren't specified in RFC 4724 as being per-peer, but per address family (AF), thus it doesn't make sense to talk about sending a single EoR to indicate BMP completion, except in the special case where BMP is only transporting routes for a single address family. \r\n\r\nThis problem also occurs in Section 3.3:\r\n\r\n   encapsulated in Route Monitoring messages.  Once it has sent all the\r\n   routes for a given peer, it MUST send an End-of-RIB message for that\r\n   peer; when End-of-RIB has been sent for each monitored peer, the\r\n   initial table dump has completed.  (A monitoring station that only\r\n   wants to gather a table dump could close the connection once it has\r\n   gathered an End-of-RIB or Peer Down message corresponding to each\r\n   Peer Up message.)\r\n\r\nbut the underlying fault is in Section 5, so that's what I've referenced above.\r\n\r\nThere are various fixes that could be applied. Some of them include:\r\n\r\n1. Remove all references to EoR. Don't require that an EoR be sent in \u00a75, don't talk about what to do with it in \u00a73.3. I'm not very fond of this option, its only merit is that it's simple to specify the textual changes.\r\n\r\n2. Update \u00a75 to note that an EoR has to be sent per AF, and update \u00a73.3 similarly, including in the parenthetical comment noting that the station would have to gather an EoR per AF that's supported on the session.\r\n\r\n3. Introduce a new BMP message \"end of initial BMP convergence\" to provide the functionality. Probably this would be in addition to the fixes in #2, since it's still useful to know that a given AF dump has completed. But introduction of the new message would provide a simpler and probably more reliable way for the monitoring station to know that BMP-level synchronization had completed.\r\n\r\nIt seems to me that the best way to address this will be with either a new spec that updates RFC 7854, or an rfc7854bis. For this reason, I suggest this erratum should be verified as \"hold for document update\", since the solution requires more WG discussion and consensus than an erratum can provide.\r\n\r\nThis issue was first reported by Vincent Bernat in https://mailarchive.ietf.org/arch/msg/idr/FOEcdxtI03CdgDrn497NBFSpz-s/, and see also https://mailarchive.ietf.org/arch/msg/grow/o16w8s5Ba9J4MdIipbxIqDiZrCI/\r\n\r\n===Verifier notes\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/grow/7ZFA52R3KI9pgpAN302xLl9MBBA/", "submit_date": "2022-09-14", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-06-02 04:39:32"}, {"errata_id": "5534", "doc-id": "RFC6386", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "19.1", "orig_text": "unsigned char *c = pbi->source;\r\nunsigned int tmp;\r\n\r\ntmp = (c[2] << 16) | (c[1] << 8) | c[0];\r\n\r\nkey_frame = tmp & 0x1;\r\nversion = (tmp >> 1) & 0x7;\r\nshow_frame = (tmp >> 4) & 0x1;\r\nfirst_part_size = (tmp >> 5) & 0x7FFFF;", "correct_text": "unsigned char *c = pbi->source;\r\nunsigned int tmp;\r\n\r\ntmp = (c[2] << 16) | (c[1] << 8) | c[0];\r\n\r\nkey_frame = !(tmp & 0x1);\r\nversion = (tmp >> 1) & 0x7;\r\nshow_frame = (tmp >> 4) & 0x1;\r\nfirst_part_size = (tmp >> 5) & 0x7FFFF;", "notes": "In section 9.1, where the frame tag is described, the field for the key frame is defined as \"A 1-bit frame type (0 for key frames, 1 for interframes).\"\r\n\r\nThe code block in section 19.1 interprets the bit in the opposite way: 1 for key frames and 0 for interframes.", "submit_date": "2018-10-18", "submitter_name": "Ard Oerlemans", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5257", "doc-id": "RFC7230", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "For compatibility with legacy list rules, a recipient MUST parse and\r\nignore a reasonable number of empty list elements: enough to handle\r\ncommon mistakes by senders that merge values, but not so much that\r\nthey could be used as a denial-of-service mechanism.  In other words,\r\na recipient MUST accept lists that satisfy the following syntax:\r\n\r\n  #element => [ ( \",\" / element ) *( OWS \",\" [ OWS element ] ) ]\r\n\r\n  1#element => *( \",\" OWS ) element *( OWS \",\" [ OWS element ] )", "correct_text": "For compatibility with legacy list rules, a recipient MUST parse and\r\nignore a reasonable number of empty list elements: enough to handle\r\ncommon mistakes by senders that merge values, but not so much that\r\nthey could be used as a denial-of-service mechanism.  In other words,\r\na recipient MUST accept lists that satisfy the following syntax:\r\n\r\n  #element => [ ( (\",\" OWS element) / element ) *( OWS \",\" [ OWS \r\n    element ] ) ]\r\n\r\n  1#element => *( \",\" OWS ) element *( OWS \",\" [ OWS element ] )", "notes": "With the current ABNF rule for #element, and using token as an element, the construction:\r\n\r\n    \",     foobar\" \r\n\r\ncannot be derived from #element, but can be derived from 1#element. (legacy list rule)\r\nSince #element is meant to be a superset of 1#element, lists derived from 1#element should satisfy the #element rule as well.", "submit_date": "2018-02-07", "submitter_name": "Erwin Pe", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-08-23 16:31:32"}, {"errata_id": "5258", "doc-id": "RFC7543", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Section 5", "orig_text": "The UMR is characterized as follows:\r\n\r\n   o  EVPN Route Type is equal to MAC/IP Advertisement Route\r\n\r\n   o  MAC address length is equal to 0\r\n\r\n   o  IP address length is equal to 0", "correct_text": "In Section 5:\r\n\r\nThe UMR is characterized as follows:\r\n\r\n   o  EVPN Route Type is equal to MAC/IP Advertisement Route\r\n\r\n   o  MAC address length is equal to 48\r\n\r\n   o  IP address length is equal to 0", "notes": "The original text provides conflicting definitions of the MAC Address Length in the Unknown MAC Route (UMR).\r\n\r\nSince the UMR is a MAC/IP Advertisement Route defined in RFC 7432, and since this RFC states that the MAC Address Length in these routes is 48, the text in Section 5 should be corrected to match RFC 7432 as well as the text in Section 1 of this RFC (where MAC Address Length in the UMR is correctly defined as 48).", "submit_date": "2018-02-08", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5259", "doc-id": "RFC8200", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "      -  Updated the Fragmentation header text to correct the inclusion\r\n         of an Authentication Header (AH) and noted No Next Header case.\r\n", "correct_text": "      -  Updated the Fragment header text to correct the inclusion\r\n         of an Authentication Header (AH) and noted No Next Header case.\r\n", "notes": "Typo", "submit_date": "2018-02-08", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-02-03 14:18:47"}, {"errata_id": "5260", "doc-id": "RFC6376", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "", "correct_text": "DKIM-Signature = \"DKIM-Signature:\" tag-list", "notes": "A formal definition is needed to make it explicit that this header field name is case insensitive, like all the other header field names.\n --VERIFIER NOTES-- \n   \r\nHeader field names are case-insensitive, in general; there is neither need nor desire to repeat that in the DKIM spec.", "submit_date": "2018-02-08", "submitter_name": "Ale", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5261", "doc-id": "RFC4512", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "And where a server is unable (or\r\nunwilling) to preserve the value of user information, the server\r\nSHALL ensure that an equivalent value (per Section 2.3) is returned.", "correct_text": "And where a server is unable (or\r\nunwilling) to preserve the value of user information, the server\r\nSHALL ensure that an equivalent value (per Section 2.2) is returned.", "notes": "The concept of equivalent  values is defined in Section 2.2 of RFC 4512. Section 2.3 does not mention equivalent values.", "submit_date": "2018-02-12", "submitter_name": "Jonathan Giddy", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 21:17:43"}, {"errata_id": "5262", "doc-id": "RFC7270", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.12", "orig_text": "        value : 0x89 = 137\r\n        binary: 10001001\r\n        decode: 10        -> Drop\r\n                  001001  -> Fragmentation and DF set", "correct_text": "        value : 0x89 = 137\r\n        binary: 10001001\r\n        decode: 10        -> Drop\r\n                  001001  -> Bad TTL", "notes": "Per the \"Reason Code (status = 10b, Dropped)\" table, \"Fragmentation and DF set\" is code 000101b:\r\n\r\n      10 000101b = 133 = Fragmentation and DF set\r\n\r\nwhereas code 001001b is \"Bad TTL\":\r\n\r\n      10 001001b = 137 = bad TTL\r\n\r\n\r\n IANA's IPFIX registry has been updated accordingly: https://www.iana.org/assignments/ipfix.", "submit_date": "2018-02-15", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5263", "doc-id": "RFC8216", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.2", "orig_text": "   [SampleEnc]\r\n              Apple Inc., \"MPEG-2 Stream Encryption Format for HTTP Live\r\n              Streaming\",\r\n              <https://developer.apple.com/library/ios/documentation/\r\n              AudioVideo/Conceptual/HLS_Sample_Encryption/>.", "correct_text": "   [SampleEnc]\r\n              Apple Inc., \"MPEG-2 Stream Encryption Format for HTTP Live\r\n              Streaming\",\r\n              <https://developer.apple.com/library/content/\r\n              documentation/AudioVideo/Conceptual/HLS_Sample_Encryption/\r\n              Encryption/Encryption.html>.\r\n", "notes": "The [SampleEnc] reference is currently a broken link.", "submit_date": "2018-02-20", "submitter_name": "Sebastian Hubbard", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5267", "doc-id": "RFC5926", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "- Label:     A binary string that clearly identifies the purpose\r\n                   of this KDF's derived keying material.  For TCP-AO,\r\n                   we use the ASCII string \"TCP-AO\", where the last\r\n                   character is the capital letter \"O\", not to be\r\n                   confused with a zero.  While this may seem like\r\n                   overkill in this specification since TCP-AO only\r\n                   describes one call to the KDF, it is included in\r\n                   order to comply with FIPS 140 certifications.\r\n", "correct_text": "- Label:     A binary string that clearly identifies the purpose\r\n                   of this KDF's derived keying material.  For TCP-AO,\r\n                   we use the ASCII string \"TCP-AO\", where the last\r\n                   character is the capital letter \"O\", not to be\r\n                   confused with a zero. The ASCII string is terminated\r\n                   with a null octet (0x00). While this may seem like\r\n                   overkill in this specification since TCP-AO only\r\n                   describes one call to the KDF, it is included in\r\n                   order to comply with FIPS 140 certifications.", "notes": "This section states that \"Both of these KDFs are based on the iteration-mode KDFs specified in [NIST-SP800-108].\", which is later clarified to be the \"counter mode\" KDF defined in that document. The definition of the \"Label\" input to the KDF in the original text is not clear.\r\n\r\n[NIST-SP800-108] specifies that a 0x00 octet should follow the Label. This 0x00 octet is important when the KDF does not have control over the Context given it, which is the case here -- RFC 5926 depends on the definition in RFC 5925. RFC 5925 currently declares two fixed-size inputs for the Context (See Figures 7 & 8 of RFC 5925), so the Context length differs. Also, RFC 5925 RFC could be updated over over time to include other Contexts that are variable sized. The risk of excluding 0x00 is enabling an attacker to choose a specially-crafted Context that violates the clean separation between the Label and Context arguments. Therefore, it is important to include the 0x00 octet for TCP-AO.\r\n\r\nI believe this 0x00 is implied in the specification of the string \"TCP-AO\", since conventionally many string definitions include a trailing 0x00 octet, The text should state that the 0x00 octet is present as part of the string.\r\n\r\nIf this errata does not result in adding the 0x00 octet, then its omission needs to be justified.\n --VERIFIER NOTES-- \nNIST-SP800-108 does not require the use of 0x00. It only requires that the length and order of each field be defined unambiguously. The method of providing that length unambiguously to the KDF algorithm is an implementation issue.", "submit_date": "2018-02-26", "submitter_name": "Brian Weis", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5265", "doc-id": "RFC6154", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "In RFC6154, the special-use attributes are consistently shown with initial capitals, but there doesn't appear to be any guidance whether the special-use attributes are case-sensitive, case-insensitive, or implementation defined. This could lead to interoperability issues.", "submit_date": "2018-02-25", "submitter_name": "Roy A. Gilmore", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5271", "doc-id": "RFC5802", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1, 7", "orig_text": "Section 5.1:\r\n\r\n   o  e: This attribute specifies an error that occurred during\r\n      authentication exchange.  It is sent by the server in its final\r\n      message and can help diagnose the reason for the authentication\r\n      exchange failure.  On failed authentication, the entire server-\r\n      final-message is OPTIONAL; specifically, a server implementation\r\n      MAY conclude the SASL exchange with a failure without sending the\r\n      server-final-message.  This results in an application-level error\r\n      response without an extra round-trip.  If the server-final-message\r\n      is sent on authentication failure, then the \"e\" attribute MUST be\r\n      included.\r\n\r\nSection 7:\r\n\r\n   server-first-message =\r\n                     [reserved-mext \",\"] nonce \",\" salt \",\"\r\n                     iteration-count [\",\" extensions]", "correct_text": "Section 5.1:\r\n\r\n   o  e: This attribute specifies an error that occurred during\r\n      authentication exchange.  It is sent by the server in its first\r\n      or final message and can help diagnose the reason for the\r\n      authentication exchange failure.  On failed authentication, the\r\n      entire server-first-message or server-final-message is OPTIONAL;\r\n      specifically, a server implementation MAY conclude the SASL\r\n      exchange with a failure without sending the a message.  This\r\n      results in an application-level error response without an extra\r\n      round-trip.  If a server message is sent on authentication\r\n      failure, then the \"e\" attribute MUST be included.\r\n\r\nSection 7:\r\n\r\n   server-first-message-bare =\r\n                     [reserved-mext \",\"] nonce \",\" salt \",\"\r\n                     iteration-count\r\n\r\n   server-first-message = (server-error / server-first-message-bare)\r\n                     [\",\" extensions]\r\n", "notes": "Many of the server-error message options in the formal syntax apply to fields received in the client-first message, e.g. \"invalid-username-encoding\" or \"extensions-not-supported\".  There is no existing provision in the formal syntax for a server to return a server-error in response to a client-first message.  The intent of the server-error field appears to include responses to the client-first message and there are no meaningful responses to such errors. E.g. what salt and iteration count should be returned in the case of invalid-username-encoding?  Therefore, this proposed errata allows server-error to be returned as the server-first-message and amends the explanatory text of section 5.1 accordingly.", "submit_date": "2018-03-02", "submitter_name": "David Golden", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5272", "doc-id": "RFC6020", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.18.1", "orig_text": "   In order for a device to implement a feature that is dependent on any\r\n   other features (i.e., the feature has one or more \"if-feature\" sub-\r\n   statements), the device MUST also implement all the dependant\r\n   features.", "correct_text": "   In order for a device to implement a feature that is dependent on any\r\n   other features (i.e. the feature is a sub-statement of another \r\n   \"if-feature\" statement), the device MUST also implement all the \r\n   dependent features.", "notes": "The direction of the dependency is stated backwards.\r\nConsider for example:\r\n\r\nif-feature aaa;\r\n    statements ...;\r\n    if-feature bbb;\r\n\r\nThis should allow feature aaa to exist without feature bbb.\r\nbbb should depend on aaa, but aaa should not depend on bbb\n --VERIFIER NOTES-- \nThe current text is correct, according to Kent Watsen\r\n\r\n", "submit_date": "2018-03-02", "submitter_name": "Bob Harold", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5275", "doc-id": "RFC7239", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "Forwarded   = 1#forwarded-element\r\n", "correct_text": "Forwarded   = forwarded-element *(OWS \",\" OWS forwarded-element)\r\nOWS = <Defined in [RFC7230], Section 3.2.3>\r\n", "notes": "Currently the only mention of commas in the RFC is in the text:\r\n\r\n> A proxy server that wants to add a new \"Forwarded\" header field value can either append it to the last existing \"Forwarded\" header field after a comma separator or add a new field at the end of the header block.\r\n\r\nThis should be reflected in the ABNF.  The original ABNF suggests you just smash the forwarded-elements together with no delimiters.", "submit_date": "2018-03-06", "submitter_name": "W. Trevor King", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5274", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.16.3", "orig_text": "   A corresponding XML instance example of the complete notification:\r\n\r\n     <notification\r\n       xmlns=\"urn:ietf:params:xml:ns:netconf:notification:1.0\">\r\n       <eventTime>2008-07-08T00:01:00Z</eventTime>\r\n       <event xmlns=\"urn:example:event\">\r\n         <event-class>fault</event-class>\r\n         <reporting-entity>\r\n           /ex:interface[ex:name='Ethernet0']\r\n         </reporting-entity>\r\n         <severity>major</severity>\r\n       </event>\r\n     </notification>", "correct_text": "   A corresponding XML instance example of the complete notification\r\n   follows.  This example reports an event for an interface from the\r\n   \"example-foo\" module defined in Section 13.1.1.\r\n\r\n     <notification\r\n       xmlns=\"urn:ietf:params:xml:ns:netconf:notification:1.0\">\r\n       <eventTime>2008-07-08T00:01:00Z</eventTime>\r\n       <event xmlns=\"urn:example:event\">\r\n         <event-class>fault</event-class>\r\n         <reporting-entity xmlns:ex=\"urn:example:foo\">\r\n           /ex:interface[ex:name='Ethernet0']\r\n         </reporting-entity>\r\n         <severity>major</severity>\r\n       </event>\r\n     </notification>\r\n", "notes": "The \"ex\" prefix is not declared.  The \"example-foo\" module in 13.1.1 is the only module in the draft that matches the given instance-identifier.  An alternative fix would be to use a different module and a matching instance-identifier.", "submit_date": "2018-03-04", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Benoit Claise", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5298", "doc-id": "RFC6672", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.4.2", "orig_text": "   ;; Header: QR AA RCODE=3(NXDOMAIN)\r\n   ;; OPT PSEUDOSECTION:\r\n   ; EDNS: version: 0, flags: do; udp: 4096\r\n\r\n   ;; Question\r\n   cee.example.com. IN A\r\n   ;; Authority\r\n   bar.example.com. NSEC dub.example.com. A DNAME\r\n   bar.example.com. RRSIG NSEC [valid signature]", "correct_text": "   ;; Header: QR AA RCODE=3(NXDOMAIN)\r\n   ;; OPT PSEUDOSECTION:\r\n   ; EDNS: version: 0, flags: do; udp: 4096\r\n\r\n   ;; Question\r\n   cee.example.com. IN A\r\n   ;; Authority\r\n   bar.example.com. NSEC dub.example.com. A DNAME RRSIG NSEC\r\n   bar.example.com. RRSIG NSEC [valid signature]", "notes": "The NSEC record in the original text would in no case be valid as it denies it's own existence and the existence of the RRSIG, while the text indicates that \" the validator can see that it is a BOGUS reply from an attacker that collated existing records from the DNS to create a confusing reply\". This indicates that NSEC and RRSIG should be set in the NSEC bitmap\r\n\r\nEdit: Thread - https://www.ietf.org/mail-archive/web/dnsext/current/msg13879.html", "submit_date": "2018-03-02", "submitter_name": "Pieter Lexis", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 13:40:28"}, {"errata_id": "5276", "doc-id": "RFC6781", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.4", "orig_text": "   ----------------------------------------------------------------\r\n    new DS               DNSKEY removal       RRSIGs removal\r\n   ----------------------------------------------------------------\r\n   Parent:\r\n    SOA_1 ------------------------------------------------------->\r\n    RRSIG_par(SOA) ---------------------------------------------->\r\n    DS_K_2 ------------------------------------------------------>\r\n    RRSIG_par(DS_K_2) ------------------------------------------->\r\n\r\n   Child:\r\n    -------------------> SOA_3                SOA_4\r\n    -------------------> RRSIG_Z_10(SOA)\r\n    -------------------> RRSIG_Z_11(SOA)      RRSIG_Z_11(SOA)\r\n\r\n    ------------------->\r\n    -------------------> DNSKEY_K_2           DNSKEY_K_2\r\n    ------------------->\r\n    -------------------> DNSKEY_Z_11          DNSKEY_Z_11\r\n    ------------------->\r\n    -------------------> RRSIG_K_2(DNSKEY)    RRSIG_K_2(DNSKEY)\r\n   ----------------------------------------------------------------\r\n\r\n        Figure 8: Stages of Deployment during an Algorithm Rollover", "correct_text": "   ----------------------------------------------------------------\r\n    new DS               DNSKEY removal       RRSIGs removal\r\n   ----------------------------------------------------------------\r\n   Parent:\r\n    SOA_1 ------------------------------------------------------->\r\n    RRSIG_par(SOA) ---------------------------------------------->\r\n    DS_K_2 ------------------------------------------------------>\r\n    RRSIG_par(DS_K_2) ------------------------------------------->\r\n\r\n   Child:\r\n    -------------------> SOA_3                SOA_4\r\n    -------------------> RRSIG_Z_10(SOA)\r\n    -------------------> RRSIG_Z_11(SOA)      RRSIG_Z_11(SOA)\r\n\r\n    ------------------->\r\n    -------------------> DNSKEY_K_2           DNSKEY_K_2\r\n    ------------------->\r\n    -------------------> DNSKEY_Z_11          DNSKEY_Z_11\r\n    -------------------> RRSIG_K_1(DNSKEY)\r\n    -------------------> RRSIG_K_2(DNSKEY)    RRSIG_K_2(DNSKEY)\r\n   ----------------------------------------------------------------\r\n\r\n        Figure 8: Stages of Deployment during an Algorithm Rollover", "notes": "This is about Figure 8 on page 30.\r\n\r\nThe figure should have the signature of the old KSK, called RRSIG_K_1(DNSKEY) in the \"DNSKEY removal\" step.\r\n\r\nBecause a conservative validator may have the DNSKEY RRset cached that includes DNSKEY_K_1, DNSKEY_K_2, DNSKEY_Z_1, and DNSKEY_Z_2.", "submit_date": "2018-03-06", "submitter_name": "Matthijs Mekking", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5277", "doc-id": "RFC7683", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.2", "orig_text": "7.2.  OC-Feature-Vector AVP\r\n\r\n   The OC-Feature-Vector AVP (AVP Code 622) is of type Unsigned64 and\r\n   contains a 64-bit flags field of announced capabilities of a DOIC\r\n   node.  The value of zero (0) is reserved.\r\n\r\n   The OC-Feature-Vector sub-AVP is used to announce the DOIC features\r\n   supported by the DOIC node, in the form of a flag-bits field in which\r\n   each bit announces one feature or capability supported by the node.\r\n   The absence of the OC-Feature-Vector AVP in request messages\r\n   indicates that only the default traffic abatement algorithm described\r\n   in this specification is supported.  The absence of the OC-Feature-\r\n   Vector AVP in answer messages indicates that the default traffic\r\n   abatement algorithm described in this specification is selected\r\n   (while other traffic abatement algorithms may be supported), and no\r\n   features other than abatement algorithms are supported.\r\n\r\n\r\n   The following capability is defined in this document:\r\n\r\n   OLR_DEFAULT_ALGO (0x0000000000000001)\r\n\r\n      When this flag is set by the a DOIC reacting node, it means that\r\n      the default traffic abatement (loss) algorithm is supported.  When\r\n      this flag is set by a DOIC reporting node, it means that the loss\r\n      algorithm will be used for requested overload abatement.", "correct_text": "7.2.  OC-Feature-Vector AVP\r\n\r\n   The OC-Feature-Vector AVP (AVP Code 622) is of type Unsigned64 and\r\n   contains a 64-bit flags field of announced capabilities of a DOIC\r\n   node.  The value of zero (0) is reserved.\r\n\r\n      Note: The value of zero (0) any DOIC node supports at least the \r\n            Loss algorithm. Therefore, the OC-Feature-Vector AVP \r\n            cannot be sent with no bit set.\r\n\r\n   The OC-Feature-Vector sub-AVP is used to announce the DOIC features\r\n   supported by the DOIC node, in the form of a flag-bits field in which\r\n   each bit announces one feature or capability supported by the node.\r\n   The absence of the OC-Feature-Vector AVP in request messages\r\n   indicates that only the default traffic abatement algorithm described\r\n   in this specification is supported.  The absence of the OC-Feature-\r\n   Vector AVP in answer messages indicates that the default traffic\r\n   abatement algorithm described in this specification is selected\r\n   (while other traffic abatement algorithms may be supported), and no\r\n   features other than abatement algorithms are supported.\r\n\r\n   The following capability is defined in this document:\r\n\r\n+---+------------------+----------------------------------------------+\r\n|bit|  Feature Name    |  Description                                 |\r\n+---+------------------+----------------------------------------------+\r\n| 0 | OLR_DEFAULT_ALGO |When set by a DOIC reacting node, it means    |\r\n|   |                  |that the default traffic abatement (loss)     |\r\n|   |                  |algorithm is supported. When set by a DOIC    |\r\n|   |                  |reporting node, it means that the loss        |\r\n|   |                  |algorithm will be used for requested overload |\r\n|   |                  |abatment.                                     |\r\n+---+------------------+----------------------------------------------+\r\n", "notes": "The OC-Feature-Vector AVP is a 64-bit flag field and not a set of values (one per feature). Using the hexadecimal notation, it gives the feeling that there is a unique value for the OC-Feature-Vector AVP per supported capability, hich is incorrect. It is only required to define the use of each bit. This errata report has an impact on the associated IANA regisrty.", "submit_date": "2018-03-06", "submitter_name": "Lionel Morand", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5278", "doc-id": "RFC7683", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.2", "orig_text": "9.2.  New Registries\r\n\r\n   Two new registries have been created in the \"AVP Specific Values\"\r\n   sub-registry under the \"Authentication, Authorization, and Accounting\r\n   (AAA) Parameters\" registry.\r\n\r\n   A new \"OC-Feature-Vector AVP Values (code 622)\" registry has been\r\n   created.  This registry contains the following:\r\n\r\n      Feature Vector Value Name\r\n\r\n      Feature Vector Value\r\n\r\n      Specification defining the new value\r\n\r\n   See Section 7.2 for the initial Feature Vector Value in the registry.\r\n   This specification defines the value.  New values can be added to the\r\n   registry using the Specification Required policy [RFC5226].\r\n\r\n   A new \"OC-Report-Type AVP Values (code 626)\" registry has been\r\n   created.  This registry contains the following:\r\n\r\n      Report Type Value Name\r\n\r\n      Report Type Value\r\n\r\n      Specification defining the new value\r\n\r\n   See Section 7.6 for the initial assignment in the registry.  New\r\n   types can be added using the Specification Required policy [RFC5226].", "correct_text": "9.2.  New Registries\r\n\r\n   Two new registries have been created in the \"AVP Specific Values\"\r\n   sub-registry under the \"Authentication, Authorization, and Accounting\r\n   (AAA) Parameters\" registry.\r\n\r\n   A new \"OC-Feature-Vector AVP Values (code 622)\" registry has been\r\n   created.  This registry contains the following:\r\n\r\n      Assigned Bit\r\n\r\n      Feature Name\r\n\r\n      Specification defining the new capability\r\n\r\n   See Section 7.2 for the initial assigned bit in the registry.\r\n   This specification defines the capbility announced by the setting of \r\n   this bit.  New values can be added to the registry using the \r\n   Specification Required policy [RFC5226].\r\n\r\n   A new \"OC-Report-Type AVP Values (code 626)\" registry has been\r\n   created.  This registry contains the following:\r\n\r\n      Report Type Value Name\r\n\r\n      Report Type Value\r\n\r\n      Specification defining the new value\r\n\r\n   See Section 7.6 for the initial assignment in the registry.  New\r\n   types can be added using the Specification Required policy [RFC5226].", "notes": "This errata report is linked to the following errata report: Errata ID: 5277\r\nThe IANA registry created for the OC-Feature-Vector AVP Values (code 622) should only describe the use of the bit assigned to a given feature. There is no AVP value assigned to a given feature. The associated IANA registry should provide a table describing the setting of the bit assigned to a given feature/capability.", "submit_date": "2018-03-06", "submitter_name": "Lionel Morand", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 12:04:23"}, {"errata_id": "5279", "doc-id": "RFC3743", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "CodePoint = 4*8DIGIT  [ \"(\" Reflist \")\" ]", "correct_text": "CodePoint = 4*8HEXDIG  [ \"(\" Reflist \")\" ]", "notes": "Per RFC 2234, the definition for \"DIGIT\" in ABNF encompasses only decimal digits (i.e., 0-9), while \"HEXDIG\" includes the hexadecimal digits (i.e., 0-F).\r\n\r\nSection 4 of RFC 3743 includes example Language Variant Tables that describe the code points using hexadecimal, not decimal. Looking at tables published in IANA, they seem to use hexadecimal too. It would appear that the use of \"DIGIT\" instead of \"HEXDIGIT\" in section 5.1 was an error.", "submit_date": "2018-03-06", "submitter_name": "Francisco Arias", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-01 17:02:45"}, {"errata_id": "5280", "doc-id": "RFC8327", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "BGP Session Culling is the practice of ensuring BGP sessions are\r\nforcefully torn down before maintenance activities on a lower-layer\r\nnetwork commence -- activities that otherwise would affect the flow\r\nof data between the BGP speakers.  BGP Session Culling is the\r\npractice of ensuring BGP sessions are forcefully torn down before\r\ncommencing maintenance activities (that otherwise would affect the\r\nflow of data between the BGP speakers) on a lower-layer network.", "correct_text": "BGP Session Culling is the practice of ensuring BGP sessions are\r\nforcefully torn down before maintenance activities on a lower-layer\r\nnetwork commence -- activities that otherwise would affect the flow\r\nof data between the BGP speakers.", "notes": "The original version of a corrected sentence was left in the document in the editing phase\r\n", "submit_date": "2018-03-07", "submitter_name": "Job Snijders", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5299", "doc-id": "RFC5817", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   The OSPF and IS-IS procedures for graceful shutdown of TE links are\r\n   similar to the graceful restart of OSPF and IS-IS as described in\r\n   [RFC4203] and [RFC5307], respectively.  Specifically, the node where\r\n   graceful shutdown of a link is desired originates the TE LSA or IS-\r\n   IS-LSP containing a Link TLV for the link under graceful shutdown\r\n   with the Traffic Engineering metric set to 0xffffffff, 0 as\r\n   unreserved bandwidth.", "correct_text": "   The OSPF and IS-IS procedures for graceful shutdown of TE links are\r\n   similar to the graceful restart of OSPF and IS-IS as described in\r\n   [RFC4203] and [RFC5307], respectively.  Specifically, the node where\r\n   graceful shutdown of a link is desired originates the TE LSA or IS-\r\n   IS-LSP containing a Link TLV for the link under graceful shutdown\r\n   with the Traffic Engineering metric set to 0xffffffff for OSPF and\r\n   to 0xffffff for IS-IS, 0 as unreserved bandwidth.", "notes": "IS-IS TE Default Metric is a 24-bit unsigned integer as defined in RFC 5305 section 3.7 \"Sub-TLV 18: Traffic Engineering Default Metric\"; while in OSPF, RFC 3630 section 2.5.5, the OSPF TE metric is four octets in length.", "submit_date": "2018-03-24", "submitter_name": "Naiming Shen", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5284", "doc-id": "RFC7252", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3.1", "orig_text": "The client SHOULD generate tokens in such a way that tokens currently\r\nin use for a given source/destination endpoint pair are unique.", "correct_text": "The client SHOULD generate tokens in such a way that tokens currently\r\nin use for a given source/destination endpoint pair are unique per\r\nrequest.", "notes": "Multiple requests may be active for a given source/destination\r\nendpoint pair.  The OLD text is thus broken.\r\n\r\nThe NEW text is aligned with the definition of the Token:\r\n\r\n  A token is intended for use as a client-local identifier for\r\n  differentiating between concurrent requests (see Section 5.3); it\r\n  could have been called a \"request ID\".\r\n\r\nFurther, using the same token for a given source/destination endpoint\r\npair have some implications, for example, for applications which\r\nrequire the support of multiple observe queries because RFC7641\r\nstates the following:\r\n\r\n   The entry in the list of observers is keyed by the client endpoint\r\n    and the token specified by the client in the request.  If an entry\r\n    with a matching endpoint/token pair is already present in the list\r\n    (which, for example, happens when the client wishes to reinforce\r\n    its interest in a resource), the server MUST NOT add a new entry\r\n    but MUST replace or update the existing one.\n --VERIFIER NOTES-- \nAfter discussing with the working group, it was agreed that the original text is correct and that the addition is redundant and does not help clarify it.", "submit_date": "2018-03-09", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:27:44"}, {"errata_id": "5282", "doc-id": "RFC7240", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1.1", "orig_text": "   This specification uses the Augmented Backus-Naur Form (ABNF)\r\n   notation of [RFC5234] and includes, by reference, the \"token\",\r\n   \"word\", \"OWS\", and \"BWS\" rules and the #rule extension as defined\r\n   within Sections 3.2.1 and 3.2.4 of [RFC7230]; as well as the\r\n   \"delta-seconds\" rule defined in Section 8.1.3 of [RFC7231]", "correct_text": "   This specification uses the Augmented Backus-Naur Form (ABNF)\r\n   notation of [RFC5234] and includes rules, by reference, the \"token\"\r\n   as defined in Sections 3.2.6 of [RFC7230], \"OWS\" and \"BWS\" as defined\r\n   in Sections 3.2.3 of [RFC7230], and the #rule extension as defined in\r\n   Sections 7 of [RFC7230]; as well as the \"delta-seconds\" rule defined\r\n   in Section 8.1.3 of [RFC7231].", "notes": "Mapping of the keywords with the section numbers is incorrect. The correct mapping is as following:\r\n\"token\" => Section 3.2.6 of RFC7320;\r\n\"word\" => Not defined in RFC7320, but reported at Errata ID: 4439;\r\n\"OWS\" and \"BWS\" => Section 3.2.3 of RFC7320;\r\n\"the #rule extension\" => Section 7 of RFC7320;", "submit_date": "2018-03-07", "submitter_name": "Sawood Alam", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5283", "doc-id": "RFC6719", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "whose paths have a large range of Ranks will likely result in\r\nsubptimal routing: nodes might not choose good paths because they are", "correct_text": "whose paths have a large range of Ranks will likely result in\r\nsuboptimal routing: nodes might not choose good paths because they are", "notes": "Incorrect spelling of suboptimal.", "submit_date": "2018-03-07", "submitter_name": "Dario Tedeschi", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5285", "doc-id": "RFC8095", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "section 3.1", "orig_text": "3.1 Transport Control Protocol (TCP)", "correct_text": "3.1 Transmission Control Protocol (TCP)", "notes": "The acronym-expansion for TCP is incorrect in the section title, but is correct in other text within the document.", "submit_date": "2018-03-12", "submitter_name": "Wesley Eddy", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5286", "doc-id": "RFC8358", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   The RFC Editor recently published the first RFC that includes non-\r\n   ASCII characters in a text file.  The conventions specified in RFC\r\n   7997 were followed.  We assume that non-ASCII characters will soon\r\n   start appearing in Internet-Drafts as well. (...)", "correct_text": "", "notes": "This statement is misleading as the drafts for RFC 8187 (which has the non-ASCII characters) were indeed submitted and published as regular internet drafts.", "submit_date": "2018-03-13", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 12:21:28"}, {"errata_id": "5287", "doc-id": "RFC5250", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "inter-area procedures described in Section 6 of this document.", "correct_text": "inter-area procedures described in Section 5 of this document.", "notes": "Inter-Area Considerations are discussed in Section 5, not Section 6.", "submit_date": "2018-03-14", "submitter_name": "Angelos Vassiliou", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5288", "doc-id": "RFC6455", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "frame-payload-length-16 = %x0000-FFFF ; 16 bits in length\r\n\r\nframe-payload-length-63 = %x0000000000000000-7FFFFFFFFFFFFFFF\r\n                        ; 64 bits in length\r\n\r\nframe-masking-key       = 4( %x00-FF )\r\n                        ; present only if frame-masked is 1\r\n                        ; 32 bits in length", "correct_text": "frame-payload-length-16 = %x0000-FFFF ; 16 bits in length\r\n\r\nframe-payload-length-63 = %x0000000000000000-7FFFFFFFFFFFFFFF\r\n                        ; 64 bits in length\r\n\r\nframe-masking-key       = %x00000000-FFFFFFFF\r\n                        ; present only if frame-masked is 1\r\n                        ; 32 bits in length", "notes": "frame-masking-key is 32bits in length", "submit_date": "2018-03-20", "submitter_name": "champkeh", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5289", "doc-id": "RFC6243", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5.1", "orig_text": "taken from the \u2019with-defaults-type\u2019 typedef in Section 5.", "correct_text": "taken from the \u2019with-defaults-mode\u2019 typedef in Section 5.", "notes": "Text reference typedef \"with-defaults-type\" does not exist in Section 5 and even in ietf-netconf-with-defaults.yang\r\nRather it is named typedef \u201cwith-defaults-mode\u201d\r\n\r\n[ WK: Verified, with agreement of authors. ]", "submit_date": "2018-03-20", "submitter_name": "Ganesh Sivasankaran", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5307", "doc-id": "RFC8280", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.3.4.1.", "orig_text": "While the\r\nprotocol does not specify that the resource must be exposed by the\r\nclient's server to remote users, in practice this has become the\r\ndefault behavior.", "correct_text": "", "notes": "The sentence is incorrect. The resource is exposed to the remote user in standard 1:1 chats, since servers are required to stamp the 'from' value with the full JID as per RFC 6120 \u00a7  8.1.2.1 (stanza-attribute-from-stamp conformance requirement).\r\nNote that the situation is different in groupchats: The resource is not required to be exposed, but when MUC is used, the presence in the channel also reveals the overall presence of the user. This is however, likely to change with future MUC replacement protocols.\r\nI'd also like to point out that RFC 6120 \u00a7 13.10.2. and RFC 6121 \u00a7 11. discuss the security considerations and provide guidance in order to prevent those leaks\n --VERIFIER NOTES-- \nThe RFC's editors concluded that accepting the erratum would not add value.  IRTF Chair agrees.   ", "submit_date": "2018-03-26", "submitter_name": "Florian Schmaus", "verifier_id": "", "verifier_name": "Allison Mankin (IRTF Chair)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5290", "doc-id": "RFC8287", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   The IPv4 IGP-Prefix Segment ID is defined in [SR].  The format is as\r\n   specified below:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                         IPv4 Prefix                           |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |Prefix Length  |    Protocol   |         Reserved              |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   IPv4 Prefix\r\n\r\n      This field carries the IPv4 Prefix to which the Segment ID is\r\n      assigned.  In case of an Anycast Segment ID, this field will carry\r\n      the IPv4 Anycast address.  If the prefix is shorter than 32 bits,\r\n      trailing bits SHOULD be set to zero.\r\n\r\n   Prefix Length\r\n\r\n      The Prefix Length field is one octet.  It gives the length of the\r\n      prefix in bits (values can be 1-32).", "correct_text": "   The IPv4 IGP-Prefix Segment ID is defined in [SR]. \r\n   The sub-TLV length MUST be set to 8, and its format is \r\n   as specified below:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                         IPv4 Prefix                           |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |Prefix Length  |    Protocol   |         Reserved              |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   IPv4 Prefix\r\n\r\n      This field carries the IPv4 Prefix to which the Segment ID is\r\n      assigned.  In case of an Anycast Segment ID, this field will carry\r\n      the IPv4 Anycast address.  If the prefix is shorter than 32 bits,\r\n      trailing bits SHOULD be set to zero.\r\n\r\n   Prefix Length\r\n\r\n      The Prefix Length field is one octet.  \r\n      It gives the length of the\r\n      prefix in bits (values can be 1-32).", "notes": "The RFC in its current form does not explicitly specify the length of the sub-TLV for the IPv4 IGP-Prefix Segment ID, while the format includes a reserved (MBZ) field at the end. \r\nthe implementers therefore must guess whether the reserved bits are or are not included in the sub-TLV guess. Such guesses have already caused interoperabilty issues with some implementations including these bits and some not including them.\r\n\r\nFor comparison, RFC 8029 explicitly specifies length of every sub-TLV it defines. It also never includes MBZ fields at the end of sub-TLVs in the sub-TLV length.\r\n\r\nThe proposed text is aligned with majority of implementations known to me.\r\n\r\nNote also that sub-TLV length is also omitted in section 6.1. However, I am not aware of any actual interoperability issues with this sub-TLV.\n --VERIFIER NOTES-- \n   This change requires an update to the RFC, requires consensus.", "submit_date": "2018-03-20", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5291", "doc-id": "RFC1459", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "Because of IRC's scandanavian origin, the characters {}| are\r\n   considered to be the lower case equivalents of the characters []\\,\r\n   respectively.", "correct_text": "Because of IRC's scandinavian origin, the characters {}| are\r\n   considered to be the lower case equivalents of the characters []\\,\r\n   respectively.", "notes": "The demonym for those of the Scandinavian region is \"Scandinavian\", not \"Scandanavian\", as far as I know.", "submit_date": "2018-03-20", "submitter_name": "Mat\u00edas Fachal", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5292", "doc-id": "RFC4511", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.5.1/Appx.B", "orig_text": "Filter ::= CHOICE {\r\nand [0] SET SIZE (1..MAX) OF filter Filter,\r\nor [1] SET SIZE (1..MAX) OF filter Filter,\r\nnot [2] Filter,", "correct_text": "Filter ::= CHOICE {\r\nand [0] SET SIZE (1..MAX) OF filter Filter,\r\nor [1] SET SIZE (1..MAX) OF filter Filter,\r\nnot [2] EXPLICIT Filter,", "notes": "As currently written, the specification requires IMPLICIT tagging for the not-filter. This, according to ITU-T X.690, Section 8.14.3, Example \"Type5\", requires the [2]-tag of the not-filter to overwrite the tag of the negated filter, making reliable identification of the type of the negated filter impossible. Thus, the definition of the not-filter needs to specify EXPLICIT tagging. Alternatively, the filter could be specified as \r\n\r\nnot [2] SEQUENCE { filter Filter },\r\n\r\nor (to match the definition of \"and\" and \"or\")\r\n\r\nnot [2] SET SIZE (1..1) OF filter Filter,\r\n\r\nThis applies to both, Section 4.5.1 and Appendix B.", "submit_date": "2018-03-21", "submitter_name": "Markus Ansmann", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5308", "doc-id": "RFC6787", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "S->C:   MRCP/2.0 634 INTERPRETATION-COMPLETE 543266 200 COMPLETE", "correct_text": "S->C:   MRCP/2.0 634 INTERPRETATION-COMPLETE 543266 COMPLETE", "notes": "The definition of event-line in Section 5.5 NOT include status-code.", "submit_date": "2018-03-28", "submitter_name": "Xiong Chao", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5309", "doc-id": "RFC3514", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "Routers that are not intended as as security devices SHOULD NOT", "correct_text": "Routers that are not intended as security devices SHOULD NOT", "notes": "Duplicated word.", "submit_date": "2018-03-28", "submitter_name": "micheal65536", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5310", "doc-id": "RFC8331", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2, Figure 1", "orig_text": "Data_Count=0x84\r\n\r\nData_Count=0x105", "correct_text": "Data_Count=0x104\r\n\r\nData_Count=0x205", "notes": "In the example described in section 2, the first ANC packet is said to have 4 User_Data_Words, and the second packet is said to have 5 User_Data_Words.  The values in Figure 1 for the Data_Count fields do not have the correct parity bits according to the definition of Data_Count described in section 2.1.\r\n\r\n4 = 0b0000'0100, with parity bits 0b01'0000'0100 = 0x104\r\n\r\n5 = 0b0000'0101, with parity bits 0b10'0000'0101 = 0x205", "submit_date": "2018-03-28", "submitter_name": "Anthony Malizia", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5311", "doc-id": "RFC8179", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4.2.", "orig_text": "an IPR\r\ndisclosure must be updated or a new disclosure made promptly after\r\nany of the following has occurred: ...\r\n(4) a material change to the IETF\r\nDocument covered by the Disclosure that causes the Disclosure to\r\nbe covered by additional IPR.", "correct_text": "an IPR\r\ndisclosure must be updated or a new disclosure made promptly after\r\nany of the following has occurred: ...\r\n(4) a material change to the IETF\r\nDocument covered by the Disclosure that causes the *Document* to\r\nbe covered by additional IPR.", "notes": "The changed word is indicated by asterisks. Section 5.4.2 (Updating IPR Disclosures) of RFC 8179 is talking about IPR that covers IETF Documents, not IPR that covers IETF Disclosures.", "submit_date": "2018-03-28", "submitter_name": "Stuart Cheshire", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-31 07:00:41"}, {"errata_id": "9090", "doc-id": "RFC10023", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.6, Table 1, first entry", "orig_text": "\"Root zone\"", "correct_text": "\"TLD Zone\" OR \"Top-Level Domain\"", "notes": "In this example, the \"_for-sale\" prefix is neither within the root\r\nzone nor would it semantically refer to it. It would signal that the\r\nwhole TLD is \"for sale\". Another way to say describe the \"situation\"\r\n(as per the table header) that the \"_for-sale\" prefix resides \"at the\r\nzone apex\" (of the \"example\" TLD, in this case), but again, there is\r\nno relation to the root zone.", "submit_date": "2026-08-04", "submitter_name": "Peter Koch", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-10 16:27:30"}, {"errata_id": "5293", "doc-id": "RFC7810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.5-4.7", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   Type        |     Length    |  RESERVED     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Residual Bandwidth                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   where:\r\n\r\n   Type: 37\r\n\r\n   Length: 4\r\n\r\n   RESERVED: This field is reserved for future use", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |   Type        |     Length    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Residual Bandwidth                   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   where:\r\n\r\n   Type: 37\r\n\r\n   Length: 4\r\n\r\n", "notes": "In sections 4.5, 4.6 and 4.7, a RESERVED field is in the diagram and the text.  However, the length field of each of these TLVs is 4.  The RESERVED field is thus not present and should be removed in future editions of this document.\r\n===\r\nThe discussion in the WG is here: https://mailarchive.ietf.org/arch/msg/lsr/x5DlcGmwMPf9hvgL6mofNqGpbQA/", "submit_date": "2018-03-22", "submitter_name": "Jeffrey Haas", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5294", "doc-id": "RFC3665", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "BYE sip:alice@client.atlanta.example.com SIP/2.0", "correct_text": "BYE sip:alice@client.atlanta.example.com;transport=tcp SIP/2.0", "notes": "In Example 3.1, the URI of the Contact header field of the INVITE request (F1) containes a parameter \"transport=tcp\".\r\nAccording to section 12.2.1.1 of RFC 3261, this URI should be used as the Request-URI for Bob sending requests within this dialog.\r\nAs there is no explicit text about omitting parameters from the URI, the Request-URI should contain the \"transport=tcp\" parameter.\r\nHence, the Request-URI of the BYE request (F5) should contain the parameter.\r\n\r\nIt seems that the this problem was reported some years ago in the sip-implementors list:\r\nhttps://lists.cs.columbia.edu/pipermail/sip-implementors/2006-July/013507.html\r\n\r\nThe same problem appear in other examples, specifically 3.2 and 3.6.", "submit_date": "2018-03-22", "submitter_name": "Yehoshua Gev", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5295", "doc-id": "RFC7644", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.5.2.1", "orig_text": "If the user was already a member of this group, no changes should be\r\nmade to the resource, and a success response should be returned.\r\nThe server responds with either the entire updated Group or no\r\nresponse body:\r\n\r\n   HTTP/1.1 204 No Content\r\n   Authorization: Bearer h480djs93hd8\r\n   ETag: W/\"b431af54f0671a2\"\r\n   Location:\r\n   \"https://example.com/Groups/acbf3ae7-8463-...-9b4da3f908ce\"\r\n", "correct_text": "If the user was already a member of this group, no changes should be\r\nmade to the resource, and a success response should be returned.\r\nThe server responds with either the entire updated Group or no\r\nresponse body:\r\n\r\n   HTTP/1.1 204 No Content\r\n   ETag: W/\"b431af54f0671a2\"\r\n", "notes": "The Authorization header is a request header and should not be included in a response.\r\nThe Location header is used to redirect a client to a new location or indicate the location of a new resource. Neither is the case here, so the header should be omitted.\r\n\r\nAlso, it's unclear from the text whether it's valid to respond with 204 No Content if the user was successfully added to the group.", "submit_date": "2018-03-22", "submitter_name": "Marcel van den Dungen", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5296", "doc-id": "RFC5", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Network Working Group                                           4691\r\nRFC-5                                                           Jeff Rulifson\r\n                                                                June 2, l969", "correct_text": "Network Working Group                                           4691\r\nRFC-5                                                           Jeff Rulifson\r\n                                                                June 2, 1969", "notes": "Most likely OCR interpreted 1 as L. The date should be 1969 obviously.", "submit_date": "2018-03-22", "submitter_name": "Krzysztof Piecuch", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 01:04:38"}, {"errata_id": "5297", "doc-id": "RFC6672", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.4.1", "orig_text": "   ;; Header: QR AA RCODE=3(NXDOMAIN)\r\n   ;; OPT PSEUDOSECTION:\r\n   ; EDNS: version: 0, flags: do; udp: 4096\r\n\r\n   ;; Question\r\n   foo.bar.example.com. IN A\r\n   ;; Authority\r\n   bar.example.com. NSEC dub.example.com. A DNAME \r\n   bar.example.com. RRSIG NSEC [valid signature]", "correct_text": "   ;; Header: QR AA RCODE=3(NXDOMAIN)\r\n   ;; OPT PSEUDOSECTION:\r\n   ; EDNS: version: 0, flags: do; udp: 4096\r\n\r\n   ;; Question\r\n   foo.bar.example.com. IN A\r\n   ;; Authority\r\n   bar.example.com. NSEC dub.example.com. A DNAME RRSIG NSEC\r\n   bar.example.com. RRSIG NSEC [valid signature]", "notes": "The NSEC record in the original text would in no case be valid as it denies it's own existence and the existence of the RRSIG, while the text indicates that \" the validator can see that it is a  BOGUS reply from an attacker that collated existing records from the DNS to create a confusing reply\". This indicates that NSEC and RRSIG should be set in the NSEC bitmap.\r\n\r\nEdit: Thread: https://www.ietf.org/mail-archive/web/dnsext/current/msg13879.html", "submit_date": "2018-03-23", "submitter_name": "Pieter Lexis", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7672", "doc-id": "RFC9172", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.6", "orig_text": "Security Context Id:\r\n This field identifies the security context used to implement\r\n the security service represented by this block and applied to\r\n each security target.  This field SHALL be represented by a\r\n CBOR unsigned integer.  The values for this Id should come from\r\n the registry defined in Section 11.3.\r\n", "correct_text": "Security Context Id:\r\n This field identifies the security context used to implement\r\n the security service represented by this block and applied to\r\n each security target.  This field SHALL be represented by a\r\n CBOR unsigned or negative integer.  The values for this Id should\r\n come from the registry defined in Section 11.3.\r\n", "notes": "Per the IANA sub-registry in Section 11.3 the Context ID has \"The value range: signed 16-bit integer.\" and negative values are reserved for private use, so the value can be either an unsigned or a negative integer.", "submit_date": "2023-10-10", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": "", "update_date": "2025-08-12 02:57:19"}, {"errata_id": "5325", "doc-id": "RFC4055", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4055", "orig_text": "If the keyUsage extension is present in a certificate conveys an RSA\r\npublic key with the id-RSAES-OAEP object identifier, then the\r\nkeyUsage extension MUST contain only the following values:\r\n", "correct_text": "If the keyUsage extension is present in a certificate that conveys an\r\nRSA public key with the id-RSAES-OAEP object identifier, then the\r\nkeyUsage extension MUST contain only the following values:\r\n", "notes": "The certificate, rather than the keyUsage extension, conveys the id-RSAES-OAEP OID.\r\n\r\nThis was likely a typo based on the wording of the previous paragraph, \"When a certificate conveys an RSA public key\". This aligns the language with the paragraph earlier in this section, \"If the keyUsage extension is present in an end-entity certificate that conveys an RSA public key\".", "submit_date": "2018-04-13", "submitter_name": "Ryan Sleevi", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5300", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.1", "orig_text": "8.1.1.  Procedure\r\n\r\n   HTTP method registrations MUST include the following fields:\r\n\r\n   o  Method Name (see Section 4)\r\n\r\n   o  Safe (\"yes\" or \"no\", see Section 4.2.1)\r\n\r\n   o  Idempotent (\"yes\" or \"no\", see Section 4.2.2)\r\n\r\n   o  Pointer to specification text\r\n\r\n   Values to be added to this namespace require IETF Review (see\r\n   [RFC5226], Section 4.1).\r\n\r\n\u2026\r\n\r\n8.1.3.  Registrations\r\n\r\n   The \"Hypertext Transfer Protocol (HTTP) Method Registry\" has been\r\n   populated with the registrations below:\r\n\r\n   +---------+------+------------+---------------+\r\n   | Method  | Safe | Idempotent | Reference     |\r\n   +---------+------+------------+---------------+\r\n   | CONNECT | no   | no         | Section 4.3.6 |\r\n   | DELETE  | no   | yes        | Section 4.3.5 |\r\n   | GET     | yes  | yes        | Section 4.3.1 |\r\n   | HEAD    | yes  | yes        | Section 4.3.2 |\r\n   | OPTIONS | yes  | yes        | Section 4.3.7 |\r\n   | POST    | no   | no         | Section 4.3.3 |\r\n   | PUT     | no   | yes        | Section 4.3.4 |\r\n   | TRACE   | yes  | yes        | Section 4.3.8 |\r\n   +---------+------+------------+---------------+", "correct_text": "8.1.1.  Procedure\r\n\r\n   HTTP method registrations MUST include the following fields:\r\n\r\n   o  Method Name (see Section 4)\r\n\r\n   o  Safe (\"yes\" or \"no\", see Section 4.2.1)\r\n\r\n   o  Idempotent (\"yes\" or \"no\", see Section 4.2.2)\r\n\r\n   o  Cacheable (\"yes\" or \"no\", see Section 4.2.3)\r\n\r\n   o  Pointer to specification text\r\n\r\n   Values to be added to this namespace require IETF Review (see\r\n   [RFC5226], Section 4.1).\r\n\r\n\u2026\r\n\r\n8.1.3.  Registrations\r\n\r\n   The \"Hypertext Transfer Protocol (HTTP) Method Registry\" has been\r\n   populated with the registrations below:\r\n\r\n   +---------+------+------------+-----------+---------------+\r\n   | Method  | Safe | Idempotent | Cacheable | Reference     |\r\n   +---------+------+------------+-----------+---------------+\r\n   | CONNECT | no   | no         | no        | Section 4.3.6 |\r\n   | DELETE  | no   | yes        | no        | Section 4.3.5 |\r\n   | GET     | yes  | yes        | yes       | Section 4.3.1 |\r\n   | HEAD    | yes  | yes        | yes       | Section 4.3.2 |\r\n   | OPTIONS | yes  | yes        | no        | Section 4.3.7 |\r\n   | POST    | no   | no         | yes       | Section 4.3.3 |\r\n   | PUT     | no   | yes        | no        | Section 4.3.4 |\r\n   | TRACE   | yes  | yes        | no        | Section 4.3.8 |\r\n   +---------+------+------------+-----------+---------------+", "notes": "HTTP Methods have 3 boolean properties, all of which 8.1.2 says a registration needs to define, but only 2 of them were included in the registry.\n --VERIFIER NOTES-- \nAs discussed during work on the HTTP core documents:\r\n> \"Cacheable\" is not a boolean property of the method, but rather a capability inherent in the system in which one aspect is the method semantics.\r\nSee https://github.com/httpwg/http-core/issues/54 for detailed discussion.", "submit_date": "2018-03-24", "submitter_name": "Jeffrey Yasskin", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-08-23 11:35:50"}, {"errata_id": "5301", "doc-id": "RFC7426", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   All planes mentioned above are connected via interfaces (indicated\r\n   with \"Y\" in Figure 1.  An interface may take multiple roles depending\r\n   on whether the connected planes reside on the same (physical or\r\n   virtual) device.  If the respective planes are designed so that they\r\n   do not have to reside in the same device, then the interface can only\r\n   take the form of a protocol.  If the planes are collocated on the\r\n", "correct_text": "   All planes mentioned above are connected via interfaces (indicated\r\n   with \"Y\" in Figure 1). An interface may take multiple roles depending\r\n   on whether the connected planes reside on the same (physical or\r\n   virtual) device.  If the respective planes are designed so that they\r\n   do not have to reside in the same device, then the interface can only\r\n   take the form of a protocol.  If the planes are collocated on the\r\n", "notes": "The closing bracket is missing in the second line.", "submit_date": "2018-03-24", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5302", "doc-id": "RFC7426", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "   [REST]        Fielding, Roy, \"Chapter 5: Representational State\r\n                 Transfer (REST)\", in Disseration \"Architectural Styles\r\n                 and the Design of Network-based Software\r\n                 Architectures\", 2000.\r\n", "correct_text": "   [REST]        Fielding, Roy, \"Chapter 5: Representational State\r\n                 Transfer (REST)\", in Dissertation \"Architectural Styles\r\n                 and the Design of Network-based Software\r\n                 Architectures\", 2000.\r\n", "notes": "Typo (t letter missing).", "submit_date": "2018-03-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5303", "doc-id": "RFC7254", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "         gsma-urn-char         = ALPHA / DIGIT\r\n                                 / \"-\" / \".\" / \"_\" / \"%\" / \":\"\r\n", "correct_text": "         gsma-urn-char         = ALPHA / DIGIT\r\n                                 / \"-\" / \".\" / \"_\" / pct-encoded / \":\"\r\n", "notes": "As written, the RFC allows the URN to contain a \"%\" without consideration of the following characters, which is contrary to the syntax of URNs.  Where the grammar shows \"%\", it really wants \"pct-encoded\".  Though you'll probably have to update the references to provide the definition of pct-encoded -- that seems to have been introduced in RFC 3986.", "submit_date": "2018-03-26", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5305", "doc-id": "RFC6242", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "   This document also recommends that SSH servers be configurable to\r\n   allow access to the \"netconf\" SSH subsystem over other ports.  Use of\r\n   that configuration option without corresponding changes to firewall\r\n   or network device configuration may unintentionally result in the\r\n   ability for nodes outside of the firewall or other administrative\r\n   boundaries to gain access to the \"netconf\" SSH subsystem.\r\n", "correct_text": "   This document also recommends that SSH servers be configurable to\r\n   allow access to the \"netconf\" SSH subsystem over other ports.  Use of\r\n   that configuration option without corresponding changes to firewall\r\n   or network device configuration may unintentionally result in the\r\n   inability for nodes outside of the firewall or other administrative\r\n   boundaries to gain access to the \"netconf\" SSH subsystem.\r\n", "notes": "ability -> inability\n --VERIFIER NOTES-- \nIt was discussed among reporter, document authors, and WG members and the conclusion was that the original text in the document is technically correct. \r\n\r\nEmail discussion: \r\nhttps://mailarchive.ietf.org/arch/msg/netconf/xMBJjW9Sn5xzXZYhwVbRM0Im1fg\r\n ", "submit_date": "2018-03-26", "submitter_name": "HengyingFan", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5306", "doc-id": "RFC8280", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.3.4.1.", "orig_text": "Likewise, user invisibility so that communication can\r\noccur while users don't notify all buddies and other servers of their\r\navailability is not part of the formal protocol and has only been\r\nadded as an extension within the XML stream rather than enforced by\r\nthe protocol.", "correct_text": "", "notes": "The sentence is not correct and thus misleading. XMPP imposes no restriction on communication depending on your own presence status. It is perfectly fine to communicate with someone *without* notifying \"all buddies and other servers\" of your availability.\n --VERIFIER NOTES-- \n   The RFC's editors concluded that accepting the erratum would not add value.  IRTF Chair agrees.", "submit_date": "2018-03-26", "submitter_name": "Florian Schmaus", "verifier_id": "", "verifier_name": "Allison Mankin (IRTF Chair)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "9091", "doc-id": "RFC8288", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "Previous definitions of the Link header did not equate the token and\r\n   quoted-string forms explicitly; the title parameter was always\r\n   quoted, and the hreflang parameter was always a token.  Senders\r\n   wishing to maximize interoperability will send them in those forms.\r\n\r\n   Individual link-params specify their syntax in terms of the value\r\n   after any necessary unquoting (as per [RFC7230], Section 3.2.6).\r\n\r\n   This specification establishes the link-params \"rel\", \"anchor\", and\r\n   \"rev\" (which are part of the general link model), as well as\r\n   \"hreflang\", \"media\", \"title\", \"title*\", and \"type\" (which are target\r\n   attributes defined by the serialisation).", "correct_text": "\u200bLink relation types MUST be compared as ASCII case-insensitive strings.", "notes": "The original text refers to ABNF 'LOALPHA' (which contains only\r\nlowercase ASCII letters) to specify case-insensitive comparison, which\r\nis contradictory and confusing. Defining comparison as \"ASCII\r\ncase-insensitive\" accurately reflects the intent to match relation\r\ntypes regardless of whether upper or lowercase characters are used.", "submit_date": "2026-08-05", "submitter_name": "Angelie Marie Francisco", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-10 16:29:36"}, {"errata_id": "5312", "doc-id": "RFC8179", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.7", "orig_text": "If a Contribution is oral and is not followed promptly by a written\r\ndisclosure of the same material, and if such oral Contribution would\r\nbe subject to a requirement that an IPR Disclosure be made (had such\r\noral Contribution been written), then the Contributor must accompany\r\nsuch oral Contribution with an oral declaration that he/she is aware\r\nof relevant IPR in as much detail as reasonably possible or file an\r\nIPR Declaration with respect to such oral Contribution that otherwise\r\ncomplies with the provisions of Sections 5.1 to 5.6 above.", "correct_text": "If a Contribution is oral and is not followed promptly by a written\r\n*Contribution* of the same material, and if such oral Contribution would\r\nbe subject to a requirement that an IPR Disclosure be made (had such\r\noral Contribution been written), then the Contributor must accompany\r\nsuch oral Contribution with an oral declaration that he/she is aware\r\nof relevant IPR in as much detail as reasonably possible or file an\r\nIPR Declaration with respect to such oral Contribution that otherwise\r\ncomplies with the provisions of Sections 5.1 to 5.6 above.", "notes": "The changed word is indicated by asterisks. RFC 8179 provides clear definitions of the terms it uses, particularly the important term \u201cContribution\u201d. In this case, Section 5.7 (Disclosures for Oral Contributions) is talking very specifically about a written \u201cContribution\u201d, as defined in Section 1, not a \u201cdisclosure\u201d. This interpretation of what this text was intending to say is supported by the (non-normative) change summary given in Section 13, which says, \u201cHowever, if an oral contribution is made and it is not followed by a written contribution, then...\u201d Note use of the term, \u201cwritten contribution\u201d, not \u201cwritten disclosure\u201d.", "submit_date": "2018-03-28", "submitter_name": "Stuart Cheshire", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-31 07:00:59"}, {"errata_id": "5313", "doc-id": "RFC6787", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "9.8", "orig_text": "   C->S:MRCP/2.0 ... DEFINE-GRAMMAR 543258\r\n   Channel-Identifier:32AECB23433801@speechrecog\r\n   Content-Type:application/srgs+xml\r\n   Content-ID:<helpgrammar@root-level.store>\r\n   Content-Length:...\r\n\r\n   <?xml version=\"1.0\"?>\r\n\r\n   <!-- the default grammar language is US English -->\r\n   <grammar xmlns=\"http://www.w3.org/2001/06/grammar\"\r\n            xml:lang=\"en-US\" version=\"1.0\">\r\n\r\n         <rule id=\"request\">\r\n               I need help\r\n         </rule>\r\n\r\n   S->C:MRCP/2.0 ... 543258 200 COMPLETE", "correct_text": "   C->S:MRCP/2.0 ... DEFINE-GRAMMAR 543258\r\n   Channel-Identifier:32AECB23433801@speechrecog\r\n   Content-Type:application/srgs+xml\r\n   Content-ID:<helpgrammar@root-level.store>\r\n   Content-Length:...\r\n\r\n   <?xml version=\"1.0\"?>\r\n\r\n   <!-- the default grammar language is US English -->\r\n   <grammar xmlns=\"http://www.w3.org/2001/06/grammar\"\r\n            xml:lang=\"en-US\" version=\"1.0\">\r\n\r\n         <rule id=\"request\">\r\n               I need help\r\n         </rule>\r\n\r\n   </grammar>\r\n\r\n   S->C:MRCP/2.0 ... 543258 200 COMPLETE", "notes": "</grammar> is missing", "submit_date": "2018-03-29", "submitter_name": "Xiong Chao", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5314", "doc-id": "RFC6063", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.4.1.1.", "orig_text": "checksum of 0x356, resulting in a Checksum TLV of \"334D5\"", "correct_text": "checksum of 0xEA4C, resulting in a Checksum TLV of \"304EA4C\"", "notes": "The ALG_ISO3309_CRC16 should be based on polynomial : x^16+x^12+x^5+1\r\n\r\nwidth=16  poly=0x1021  init=0x0000  refin=false  refout=false  xorout=0xffff\r\n\r\nIt should it be zero left padded", "submit_date": "2018-03-29", "submitter_name": "Walter Summonte", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5315", "doc-id": "RFC6787", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "11.11", "orig_text": "   C->S:  MRCP/2.0 ... QUERY-VOICEPRINT 314163\r\n          Channel-Identifier:32AECB23433801@speakverify\r\n          Repository-URI:http://www.example.com/voiceprints/\r\n          Voiceprint-Identifier:johnsmith", "correct_text": "   C->S:  MRCP/2.0 ... QUERY-VOICEPRINT 314163\r\n          Channel-Identifier:32AECB23433801@speakverify\r\n          Repository-URI:http://www.example.com/voiceprints/\r\n          Voiceprint-Identifier:johnsmith.voiceprint", "notes": "", "submit_date": "2018-03-30", "submitter_name": "Xiong Chao", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5316", "doc-id": "RFC1034", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.3", "orig_text": "A * label appearing in a query name has no special effect, but can be\r\nused to test for wildcards in an authoritative zone; such a query is the\r\nonly way to get a response containing RRs with an owner name with * in\r\nit.  The result of such a query should not be cached.\r\n", "correct_text": "A * label appearing in a query name has no special effect, but can be\r\nused to test for wildcards in an authoritative zone; such a query is the\r\nonly way to get a response containing RRs with an owner name with * in\r\nit.  The result of such a query should not be used to synthesize RRs.\r\n", "notes": "It is perfectly OK for an RR with a wildcard label '*' to be cached as long as it's not used to synthesize any RRs on a caching resolver. The DNS implementations BIND and Unbound both cache such RRsets with wildcard label in the owner name.\r\n\r\nWK (OpsAD): Please see thread https://www.ietf.org/mail-archive/web/dnsop/current/msg22563.html for additional information.", "submit_date": "2018-03-31", "submitter_name": "Mukund Sivaraman", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5317", "doc-id": "RFC8140", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "as they are sometimes know).", "correct_text": "as they are sometimes known).", "notes": "", "submit_date": "2018-04-02", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7134", "doc-id": "RFC9252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4", "orig_text": "                  +---------------------------------------+\r\n                  |  RD (8 octets)                        |\r\n                  +---------------------------------------+\r\n                  |  Ethernet Tag ID (4 octets)           |\r\n                  +---------------------------------------+\r\n                  |  IP Address Length (1 octet)          |\r\n                  +---------------------------------------+\r\n                  |  Originating Router's IP Address      |\r\n                  |          (4 or 16 octets)             |\r\n                  +---------------------------------------+\r\n\r\n                        Figure 10: EVPN Route Type 4\r\n", "correct_text": "                  +---------------------------------------+\r\n                  |  RD (8 octets)                        |\r\n                  +---------------------------------------+\r\n                  |Ethernet Segment Identifier (10 octets)|\r\n                  +---------------------------------------+\r\n                  |  IP Address Length (1 octet)          |\r\n                  +---------------------------------------+\r\n                  |  Originating Router's IP Address      |\r\n                  |          (4 or 16 octets)             |\r\n                  +---------------------------------------+\r\n\r\n                        Figure 10: EVPN Route Type 4\r\n", "notes": "The 2nd field in the figure should be \"Ethernet Segment Identifier\" of size 10 octets instead of the \"Ethernet Tag ID\" of size 4 octets.\r\n\r\nRFC7432 is the EVPN specification for Ethernet Segment Route (Type 4) and hence the format in section 7.4 of RFC7432 is the correct one.\r\nRFC9252 has an error when showing the encoding format of this EVPN Route Type 4 as a reminder in Figure 10 in section 6.4. \r\n\r\nThis is an editorial error.", "submit_date": "2022-09-15", "submitter_name": "Ketan Talaulikar", "verifier_id": "", "verifier_name": "James N Guichard", "update_date": "2023-05-31 16:30:09"}, {"errata_id": "5319", "doc-id": "RFC8288", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "   This document uses the Augmented Backus-Naur Form (ABNF) [RFC5234]\r\n   notation of [RFC7230], including the #rule, and explicitly includes\r\n   the following rules from it: quoted-string, token, SP (space), BWS\r\n   (bad whitespace), OWS (optional whitespace), RWS (required\r\n   whitespace), LOALPHA, DIGIT.", "correct_text": "   This document uses the Augmented Backus-Naur Form (ABNF) [RFC5234]\r\n   notation of [RFC7230], including the #rule, and explicitly includes\r\n   the following rules from it: quoted-string, token, SP (space), BWS\r\n   (bad whitespace), OWS (optional whitespace), RWS (required\r\n   whitespace), DIGIT. It also uses the following additional rule:\r\n\r\n   LOALPHA = %x61-7A\r\n\r\n   ", "notes": "I can't find a definition of LOALPHA in RFC5234 or RFC7230. I see a definition in RFC2616, which seems to have been dropped in the update.", "submit_date": "2018-04-04", "submitter_name": "Jeffrey Yasskin", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-27 08:07:07"}, {"errata_id": "5320", "doc-id": "RFC8229", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "TCP provides reliable transport, so there is no need for applications \r\nto deal with retransmissions. Moreover, sending retransmissions by IKE \r\nin case of TCP on congested networks could further increase congestion \r\nand degrade performance. For this reason IKE initiators SHOULD NOT \r\nretransmit requests if they are sent over TCP. However, both IKE \r\ninitiators and responders MUST correctly handle retransmitted messages \r\nreceived over TCP, but responders SHOULD NOT resend response messages \r\nin this case. If IKE initiators still choose to retransmit requests \r\nover TCP, then the retransmission policy SHOULD be less aggressive than \r\nit would have been in case of UDP.\r\n", "notes": "While Section 12.2 discusses some implications that TCP transport could have on ESP protocol, the IKE retransmission behavior, described in Section 2.1 of RFC7296, is not redefined by this RFC. This is an oversight and some recommendations for implementers should have been given. The suggested text should be placed in a new section, presumably between sections 8 and 9.\r\n\r\nPaul Wouters:\r\n\r\nThe reported of this errata is writing a bis draft for this document where this is indeed already clarified.\r\nSee https://datatracker.ietf.org/doc/html/draft-ietf-ipsecme-rfc8229bis-05#section-7.2\r\n\r\nResolving as Held for Document Update", "submit_date": "2018-04-09", "submitter_name": "Valery Smyslov", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-11 00:23:47"}, {"errata_id": "5321", "doc-id": "RFC7282", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "A valid justification needs to me made.\r\n", "correct_text": "A valid justification needs to be made.\r\n", "notes": "Typo: \"me\" should be \"be\"", "submit_date": "2018-04-10", "submitter_name": "Dave Thaler", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5322", "doc-id": "RFC7599", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "Example 2 - BR:\r\nPSID:  0                  x34 (1232)\r\n\r\nExample 4:\r\n\r\n", "correct_text": "Example 2 - BR:\r\n\r\nPSID:                     0x34 (1232)", "notes": "There is a long space between 0 and x34", "submit_date": "2018-04-11", "submitter_name": "Shachar Rosenberg", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2019-12-25 11:51:08"}, {"errata_id": "5323", "doc-id": "RFC7599", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "Example 4:\r\n\r\nIPv4 address:            192.0.2.18 (0xc0000212)", "correct_text": "Example 4:\r\n\r\nIPv4 address:            192.0.2.1 (0xc0000201)", "notes": "BMR defines 0 EA bits and IPv4 prefix 192.0.2.1/32, shouldn't the IPv4 address be 192.0.2.1?\r\n\r\nAnother possible option perhaps would be to change the BMR IPv4 prefix to 192.0.2.18/32 and the IPv6 address of MAP CE to: 2001:db8:0012:3400:0000:c000:0212:0000", "submit_date": "2018-04-11", "submitter_name": "Shachar Rosenberg", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2020-01-08 14:47:07"}, {"errata_id": "5324", "doc-id": "RFC7599", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "Example 5:\r\n\r\nPSID:                    0x20 (provisioned with DHCPv6)", "correct_text": "Example 5:\r\n\r\nPSID:                    0x34 (provisioned with DHCPv6)", "notes": "In IPv4, IPv6 and port ranges presented in the example the PSID matches to 0x34 and not 0x20:\r\n\r\n   PSID:                    0x34\r\n   Available ports (63 ranges): 1232-1235, 2256-2259, ...... ,\r\n                                63696-63699, 64720-64723\r\n   IPv6 address of MAP CE:  2001:db8:0012:3400:0000:c000:0212:0034", "submit_date": "2018-04-11", "submitter_name": "Shachar Rosenberg", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2019-12-25 15:45:27"}, {"errata_id": "7401", "doc-id": "RFC9249", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "  identity hmac-sha-256 {\r\n    description\r\n      \"HMAC-SHA-256 authentication algorithm\";\r\n    reference\r\n      \"SHS: Secure Hash Standard (SHS) (FIPS PUB 180-4)\";\r\n  }\r\n\r\n  identity hmac-sha-384 {\r\n    description\r\n      \"HMAC-SHA-384 authentication algorithm\";\r\n    reference\r\n      \"SHS: Secure Hash Standard (SHS) (FIPS PUB 180-4)\";\r\n  }\r\n\r\n  identity hmac-sha-512 {\r\n    description\r\n      \"HMAC-SHA-512 authentication algorithm\";\r\n    reference\r\n      \"SHS: Secure Hash Standard (SHS) (FIPS PUB 180-4)\";\r\n  }", "correct_text": "  identity hmac-sha-256 {\r\n    base crypto-algorithm;\r\n    description\r\n      \"HMAC-SHA-256 authentication algorithm\";\r\n    reference\r\n      \"SHS: Secure Hash Standard (SHS) (FIPS PUB 180-4)\";\r\n  }\r\n\r\n  identity hmac-sha-384 {\r\n    base crypto-algorithm;\r\n    description\r\n      \"HMAC-SHA-384 authentication algorithm\";\r\n    reference\r\n      \"SHS: Secure Hash Standard (SHS) (FIPS PUB 180-4)\";\r\n  }\r\n\r\n  identity hmac-sha-512 {\r\n    base crypto-algorithm;\r\n    description\r\n      \"HMAC-SHA-512 authentication algorithm\";\r\n    reference\r\n      \"SHS: Secure Hash Standard (SHS) (FIPS PUB 180-4)\";\r\n  }", "notes": "The identity definitions of \"hmac-sha-256\", \"hmac-sha-384\" and \"hmac-sha-512\" lack the \"base crypto-algorithm;\" statement and therefore basically cannot be used in the scope of ietf-ntp@2022-07-05.yang.", "submit_date": "2023-03-21", "submitter_name": "Maurice Angermann", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2023-04-06 23:02:24"}, {"errata_id": "5326", "doc-id": "RFC8314", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.3", "orig_text": "   Historically, port 465 was briefly registered as the \"smtps\" port.\r\n   This registration made no sense, as the SMTP transport MX\r\n   infrastructure has no way to specify a port, so port 25 is always\r\n   used.  As a result, the registration was revoked and was subsequently\r\n   reassigned to a different service.  In hindsight, the \"smtps\"\r\n   registration should have been renamed or reserved rather than\r\n   revoked.  Unfortunately, some widely deployed mail software\r\n   interpreted \"smtps\" as \"submissions\" [RFC6409] and used that port for\r\n   email submission by default when an end user requested security\r\n   during account setup.  If a new port is assigned for the submissions\r\n", "correct_text": "   Historically, port 465 was briefly registered as the \"smtps\" port.\r\n   This registration was misleading because the \"SMTP relay\" service\r\n   registered as \"smtp\" on port 25 can not use a different port because\r\n   the SMTP transport MX infrastructure has no way to specify a port.\r\n   As a result, the registration was revoked and was subsequently\r\n   reassigned to a different service. In hindsight, the \"smtps\"\r\n   registration should have been reserved or renamed to \"submissions\"\r\n   (to parallel the \"submission\" SMTP service on port 587 [RFC6409])\r\n   rather than revoked. Some widely deployed mail user agent software\r\n   used the \"smtps\" port for the \"submissions\" service when an end user\r\n   requested security during account setup.", "notes": "The \"made no sense\" statement is technically and factually incorrect. Not only is implicit TLS SMTP submission service on port 465 deployed and used, but the rest of the document recommends using it (thus contradicting the \"made no sense\" statement). When two ports provide the same service in both cleartext and implicit TLS, the naming convention is to use an \"s\" suffix for the implicit TLS port. So the problem with the \"smtps\" was it violated that naming convention.\r\n\r\nThe proposed errata corrects the technical/factual error and clarifies the distinction between the two different services (SMTP submission & SMTP relay) that both use SMTP.", "submit_date": "2018-04-13", "submitter_name": "Chris Newman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5327", "doc-id": "RFC5798", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "This document discusses both IPv4 and IPv6 operation,", "correct_text": "This document discusses both IPv4 and IPv6 operations,", "notes": "Spelling mistake.", "submit_date": "2018-04-14", "submitter_name": "Ariel Otilibili Anieli", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5328", "doc-id": "RFC1878", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Introduction\r\n\r\n  [...]\r\n\r\n   This document itemizes the potential values for IPv4 subnets.\r\n   Additional information is provided for Hex and Decmial values,\r\n   classfull equivalants, and number of addresses available within the\r\n   indicated block.\r\n\r\nTable\r\n\r\n   The following table lists the variable length subnets from 1 to 32,\r\n   the CIDR [3] representation form (/xx) and the Decmial equivalents.\r\n   (M = Million, K=Thousand, A,B,C= traditional class values)", "correct_text": "Introduction\r\n\r\n  [...]\r\n\r\n   This document itemizes the potential values for IPv4 subnets.\r\n   Additional information is provided for Hex and Decimal values,\r\n   classful equivalents, and number of addresses available within the\r\n   indicated block.\r\n\r\nTable\r\n\r\n   The following table lists the variable length subnets from 1 to 32,\r\n   the CIDR [3] representation form (/xx) and the Decimal equivalents.\r\n   (M = Million, K=Thousand, A,B,C= traditional class values)", "notes": "Introduction\r\n\r\nTypos: classfull , equivalants, Decmial\r\n\r\nTable\r\nTypo: Decmial", "submit_date": "2018-04-16", "submitter_name": "Cuauhtemoc Amox", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5329", "doc-id": "RFC8037", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "The JSON Web Algorithm (JWA) ECDH-ES KDF construction does not mix\r\nkeys into the final shared secret.  In key exchange, such mixing\r\ncould be a bad mistake; whereas here either the receiver public key\r\nhas to be chosen maliciously or the sender has to be malicious in\r\norder to cause problems.  In either case, all security evaporates.", "correct_text": "The JSON Web Algorithm (JWA) ECDH-ES KDF construction does not mix\r\nkeys into the final shared secret unless they are included in the \r\n\"apu\" or \"apv\" claims. It is recommended to include the public keys \r\nof both parties in the key derivation. ", "notes": "There are two technical errors here. \r\n\r\nFirstly, the JWA ECDH-ES KDF does allow for mixing keys into the final shared secret via the \"apu\" and \"apv\" claims. RFC 7518 (JWA) normatively references NIST SP.800-56A, which explicitly recommends doing this.\r\n\r\nSecondly, it is not clear what the security issue is here, as there are known security issues in some cases from *not* mixing in public keys and other identifiers, as described in SP.800-56Ar3 Appendix B, and in the Security Considerations of RFC 7748 (another normative reference), which states:\r\n\r\n\"Thus\r\n   using a public key as an identifier and knowledge of a shared secret\r\n   as proof of ownership (without including the public keys in the key\r\n   derivation) might lead to subtle vulnerabilities.\"", "submit_date": "2018-04-17", "submitter_name": "Neil Madden", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5330", "doc-id": "RFC2183", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "   NOTE ON PARAMETER VALUE LENGHTS: A short (length <= 78 characters)\r\n   parameter value containing only non-`tspecials' characters SHOULD be\r\n   represented as a single `token'.  A short parameter value containing\r\n   only ASCII characters, but including `tspecials' characters, SHOULD\r\n   be represented as `quoted-string'.  Parameter values longer than 78\r\n   characters, or which contain non-ASCII characters, MUST be encoded as\r\n   specified in [RFC 2184].", "correct_text": "   NOTE ON PARAMETER VALUE LENGTHS: A short (length <= 78 characters)\r\n   parameter value formed solely from characters valid for a `token'\r\n   SHOULD be represented as a single `token', and not as a\r\n   `quoted-string'.  Parameter values longer than 78 characters, or\r\n   which contain non-ASCII characters, MUST be encoded as specified in\r\n   [RFC 2184].", "notes": "The RFC seems to assume that token = ASCII - tspecials. Token in fact is defined more strictly: token := 1*<any (US-ASCII) CHAR except SPACE, CTLs, or tspecials>.\r\n\r\nConsequently, a value with spaces (such as \"Some file.txt\"), which is a value without any tspecials, is expected to be recorded as a token, when in fact this is impossible. The same applies to CTLs.\r\n\r\nI've written the corrected text according to the apparent intent, to avoid quotes around the value when they are unnecessary. You may wish to revise the correction for clarity or to better suit the intent of this restriction.", "submit_date": "2018-04-20", "submitter_name": "Daniel Beardsmore", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5331", "doc-id": "RFC5652", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1 and 8", "orig_text": "EncryptedData ::= SEQUENCE {\r\n   version CMSVersion,\r\n   encryptedContentInfo EncryptedContentInfo,\r\n   unprotectedAttrs [1] IMPLICIT UnprotectedAttributes OPTIONAL }\r\n\r\nEncryptedContentInfo ::= SEQUENCE {\r\n   contentType ContentType,\r\n   contentEncryptionAlgorithm ContentEncryptionAlgorithmIdentifier,\r\n   encryptedContent [0] IMPLICIT EncryptedContent OPTIONAL }\r\n", "correct_text": "EncryptedData ::= SEQUENCE {\r\n   version CMSVersion,\r\n   encryptedContentInfo EncryptedContentInfo,\r\n   encryptedContent [0] IMPLICIT EncryptedContent OPTIONAL,\r\n   unprotectedAttrs [1] IMPLICIT UnprotectedAttributes OPTIONAL }\r\n\r\nEncryptedContentInfo ::= SEQUENCE {\r\n   contentType ContentType,\r\n   contentEncryptionAlgorithm ContentEncryptionAlgorithmIdentifier }\r\n", "notes": "- Wrong enumeration of UnprotectedAttributes OPTIONAL [1] instead of [0]. \r\n- \u2018UnprotectedAttributes OPTIONAL\u2019 makes only sense, if \u2018EncryptedContent OPTIONAL\u2019 is available.\r\n- It seems that OpenSSL and wolfSSL are using the suggested wrapping and are not following the RFC, here.\n --VERIFIER NOTES-- \n   Misunderstanding of the specification", "submit_date": "2018-04-23", "submitter_name": "Thomas Stimm", "verifier_id": "", "verifier_name": "Eric Rescorla", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5332", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1", "orig_text": "(B)  The authorization server authenticates the resource owner (via\r\n     the user-agent) and establishes whether the resource owner\r\n     grants or denies the client's access request.", "correct_text": "(B)  The authorization server validates the request to ensure that \r\n     all required parameters are present and valid.  If the request \r\n     is valid, the authorization server authenticates the resource \r\n     owner and obtains an authorization decision (by asking the \r\n     resource owner via the user-agent or by use of other \r\n     established approval means).\r\n", "notes": "\"Section 4.1 Authorization Code Grant (B)\" conflicts with \"Section 4.1.1 Authorization\r\nRequest\".  The current verbiage implies the resource owner should be authenticated \r\nprior to \"The authorization server validates the request to ensure that all required \r\nparameters are present and valid\".  Such implementations lead to overly complex \r\nuser experiences when the Authorization Server determines the request is invalid.", "submit_date": "2018-04-24", "submitter_name": "Donald F Coffin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5333", "doc-id": "RFC864", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "      One popular pattern is 72 chraracter lines of the ASCII printing\r\n      characters.  There are 95 printing characters in the ASCII\r\n      character set.  Sort the characters into an ordered sequence and", "correct_text": "      One popular pattern is 72 character lines of the ASCII printing\r\n      characters.  There are 95 printing characters in the ASCII\r\n      character set.  Sort the characters into an ordered sequence and", "notes": "Misspelling of 'character' in the first line.", "submit_date": "2018-04-25", "submitter_name": "Richard Bos", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5432", "doc-id": "RFC2712", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix", "orig_text": "", "correct_text": "Appendix\r\n\r\n   RFC 2712 introduces new cipher suites values, starting with the\r\n   cipher value { 0x00, 0x1E }.\r\n   This cipher value was earlier known as a Fortezza cipher suite,\r\n   and this could lead to a conflict.", "notes": "Errata 5409 was rejected and I was suggested to post another one at this place.\r\n\r\nRFC 2712 (Addition of Kerberos Cipher Suites to Transport Layer Security) in its Draft 01 version introduces new cipher suites values, among them three are colliding with the Fortezza cipher suites. The Draft 02 version partially corrects that, by shifting all of the Kerberos cipher suites values by two.\r\nThis omission of the third Fortezza cipher suite has never been corrected, and this remains in the same state in the final RFC 2712. As a result, the cipher suite value { 0x00, 0x1E } is now officially known as a Kerberos one.\r\n\r\nAlthough not documented themselves by any RFC, the two non conflicting Fortezza cipher suites are mentioned in the same note in the TLS protocol RFC (2246, 4346, 5246). This gives an explanation on how the Kerberos cipher suite values were chosen.", "submit_date": "2018-07-20", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-12 20:32:14"}, {"errata_id": "5433", "doc-id": "RFC2978", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "mime-charset-chars = ALPHA / DIGIT /\r\n            \"!\" / \"#\" / \"$\" / \"%\" / \"&\" /\r\n            \"'\" / \"+\" / \"-\" / \"^\" / \"_\" /\r\n            \"`\" / \"{\" / \"}\" / \"~\"\r\n", "correct_text": "mime-charset-chars = ALPHA / DIGIT /\r\n            \"!\" / \"#\" / \"$\" / \"%\" / \"&\" /\r\n            \"+\" / \"-\" / \"^\" / \"_\" / \"`\" /\r\n            \"~\" ", "notes": "HTTP (RFC 7231, Section 3.1.1.2) uses \"token\" in Accept-Charset. However, token does not allow for curly braces (see RFC 7230, Section 3.2.6). The IANA charset registry does not contain registered names with curly braces, so it would be good to disallow them completely.\r\n\r\n(Note that the corrected ABNF incorporates the change for <https://www.rfc-editor.org/errata/eid1912>)\r\n\r\nAlexey: Taking into consideration that this RFC is unlikely to be revised, I am approving this erratum, instead of insisting on a new version of the RFC that incorporates this change.", "submit_date": "2018-07-22", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5434", "doc-id": "RFC7049", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "E.6", "orig_text": "   |               |                         |                         |\r\n   | UBJSON        | 61 02 42 01 61 02 42 02 | 61 ff 42 01 61 02 42 02 |\r\n   |               | 42 03                   | 42 03 45                |\r\n   |               |                         |                         |\r\n", "correct_text": "   |               |                         |                         |\r\n   | UBJSON        | 5B 23 55 02 55 01 5B 23 | 5B 55 01 5B 55 02 55 03 |\r\n   |               | 55 02 55 02 55 03       | 5D 5D                   |\r\n   |               |                         |                         |\r\n", "notes": "According to UBJSON type specification available at\r\nhttp://ubjson.org/type-reference/ arrays are encoded with square-brackets '[' and ']', or with '[' followed by '#' to specify the element count.", "submit_date": "2018-07-22", "submitter_name": "LAMBERT David", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-07-17 22:09:04"}, {"errata_id": "5435", "doc-id": "RFC7601", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "resinfo = [CFWS] \";\" methodspec [ CFWS reasonspec ]\r\n               *( CFWS propspec )\r\n", "correct_text": "resinfo = [CFWS] \";\" methodspec [ CFWS reasonspec ]\r\n            [ CFWS 1*propspec ]\r\n", "notes": "Since propspec includes optional CFWS at end, parsing the current version of resinfo will result in at most one propspec even if methodspec is followed by more than one propspec.", "submit_date": "2018-07-23", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7408", "doc-id": "RFC2418", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "The working group is announced to the IETF-announce a by the IETF Secretariat.", "correct_text": "The working group is announced to the IETF-announce mailing list by the IETF Secretariat.", "notes": "\"a\" appears to have been used in place of \"mailing list.\"", "submit_date": "2023-03-29", "submitter_name": "Ian Williams", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-04-27 22:13:30"}, {"errata_id": "5334", "doc-id": "RFC7405", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "2.2.  ABNF Definition of ABNF - char-val\r\n\r\n         char-val       =  case-insensitive-string /\r\n                           case-sensitive-string\r\n\r\n         case-insensitive-string =\r\n                           [ \"%i\" ] quoted-string\r\n\r\n         case-sensitive-string =\r\n                           \"%s\" quoted-string\r\n\r\n         quoted-string  =  DQUOTE *(%x20-21 / %x23-7E) DQUOTE\r\n                                ; quoted string of SP and VCHAR\r\n                                ;  without DQUOTE", "correct_text": "2.2.  ABNF Definition of ABNF - char-val\r\n\r\n         char-val       =  case-insensitive-string /\r\n                           case-sensitive-string\r\n\r\n         case-insensitive-string =\r\n                                DQUOTE *(%x20-21 / %x23-7E) DQUOTE\r\n                                ; quoted string of SP and VCHAR\r\n                                ;  without DQUOTE\r\n\r\n         case-sensitive-string  =\r\n                                QUOTE *(%x20-26 / %x28-7E) QUOTE\r\n                                ; quoted string of SP and VCHAR\r\n                                ;  without QUOTE\r\n\r\n         QUOTE       = %x27     ; '", "notes": "Use  \"%s' / '%i' hard to write. In addition to writing more characters, there are the following problems:\r\n\r\n         rule = (%s\"if\" / %s\"elif\") condition (%s\"then\" / LF)\r\n\r\nWhy not use single quotes directly?\r\n\r\n         rule = ('if' / 'elif') condition ('then' / LF)\r\n\r\nEven if single quotation marks cannot be used, the workaround can be complicated:\r\n\r\n         rule = %s( \"if\" / \"elif\" ) condition (%s\"then\" / LF)\n --VERIFIER NOTES-- \nSee https://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20080730/\r\n\r\nThis errata proposes a change to the RFC that should be done by publishing a new RFC that replaces the current RFC. Such changes should be proposed using channels other than the errata process, such as a WG mailing list.", "submit_date": "2018-04-25", "submitter_name": "YU HengChun", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-06-13 20:39:08"}, {"errata_id": "5335", "doc-id": "RFC6750", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "b64token", "correct_text": "token68", "notes": "Usage of b64token is confusing. Definition is self explanatory but could be easily confused with Base64.\r\n\r\nRFC7235 defines token68. Following some old RFC draft discussions (http://w3-org.9356.n7.nabble.com/p7-rename-b64token-to-token68-to-avoid-misunderstandings-td108256.html) I found that b64token was renamed to token68.\r\n\r\nI believe it's appropriate to use naming of token68 (instead of b64token) in RFC6750. So that it is less confusing as well as refers to an existing standard.", "submit_date": "2018-04-26", "submitter_name": "Kavindu Dodanduwa", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5336", "doc-id": "RFC7498", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   The SFC encapsulation also carries data-plane metadata that provides\r\n   the ability to exchange information between logical classification\r\n   points and service functions (and vice versa) and between service\r\n   functions.  Metadata is not used as forwarding information to deliver\r\n   packets along the service overlay.\r\n", "correct_text": "   The SFC encapsulation also carries data-plane metadata that provides\r\n   the ability to exchange information between logical classification\r\n   points and service functions (and vice versa) and between service\r\n   functions.  Metadata is used as forwarding information to deliver\r\n   packets along the service overlay.\r\n", "notes": "Error occurs in the last sentence of 2nd paragraph in Section 3.3. Metadata should be used as forwarding information to deliver packets along the service overlay.\n --VERIFIER NOTES-- \nSFC Path identification is not part of the metadata.", "submit_date": "2018-04-26", "submitter_name": "Boyuan Yan", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5337", "doc-id": "RFC3746", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "   [4] Section 5, requirement #9 dictates \"Any proposed ForCES\r\n", "correct_text": "   [4] Section 4, requirement #9 dictates \"Any proposed ForCES\r\n", "notes": "Incorrect reference to Section 5.\r\n\r\n[Additional notes added at status change]\r\nIn fact The 5 to 4 change need to also be applied to these:\r\n(see [4], Section 5, requirement #6)\r\n(see [4] Section 5, requirement #11)\r\n(See [4], Section 5, Requirement #3)\r\n(see [4] Section 5, requirement #1)\r\n(see [4] Section 5, requirements #12)\r\n(see [4] Section 5, requirement #7)", "submit_date": "2018-04-27", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5436", "doc-id": "RFC7208", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "    header-field     = \"Received-SPF:\" [CFWS] result FWS [comment FWS]\r\n                       [ key-value-list ] CRLF", "correct_text": "    header-field     = \"Received-SPF:\" [CFWS] result [ FWS comment ]\r\n                       [ FWS key-value-list ] [FWS] CRLF", "notes": "As specified, this ABNF doesn't allow a header field value like result-FWS-comment with no FWS or key-value-list following it, a header field value which occurs very often in Received-SPF header fields I see in practice.  (Note that FWS must contain at least one white space.)  The corrected ABNF better follows practice in implementations.", "submit_date": "2018-07-23", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7135", "doc-id": "RFC5925", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.3", "orig_text": ">> A TCP-AO implementation MUST allow for configuration of the\r\n   behavior of segments with TCP-AO but that do not match an MKT.  The\r\n   initial default of this configuration SHOULD be to silently accept\r\n   such connections.  If this is not the desired case, an MKT can be\r\n   included to match such connections, or the connection can indicate\r\n   that TCP-AO is required.  Alternately, the configuration can be\r\n   changed to discard segments with the AO option not matching an MKT.", "correct_text": ">> A TCP-AO implementation MUST allow for configuration of the\r\n   behavior of segments with TCP-AO but that do not match any MKT or \r\n   no MKT is available. The initial default of this configuration \r\n   SHOULD be to silently accept such connections. In this mode of \r\n   operation, both the endpoints will not perform TCP-AO validation.\r\n   If this is not the desired case, an MKT can be included to match such \r\n   connections, or the connection can indicate that TCP-AO is required. \r\n   Alternately, the configuration can be changed to discard segments\r\n   with the AO option not matching an MKT.", "notes": "The RFC does not clearly draw out the distinction between treatment of segments with TCP-AO and without TCP-AO option.\r\nNote that in the case of MKT mismatch as per existing RFC text, if either endpoint does TCP-AO validation, the session would not get established.\n --VERIFIER NOTES-- \nAs noted in the email below, when both sides do not have common configuration, the handshake will fail.  \r\n\r\n Please see https://mailarchive.ietf.org/arch/msg/tcpm/0zG2aP5tGBvbRJxuNOIPFYDK9Jg/", "submit_date": "2022-09-16", "submitter_name": "Venkatesh Natarajan", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-10-06 21:46:08"}, {"errata_id": "5561", "doc-id": "RFC6558", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "       require [\"mime\", \"fileinto\", \"convert\"];\r\n       if header :mime :anychild :contenttype\r\n                 \"Content-Type\" \"image/tiff\"\r\n       {\r\n        if (convert \"image/tiff\" \"image/jpeg\" [\"pix-x=320\",\"pix-y=240\"])\r\n        {\r\n         fileinto \"INBOX.pics\";\r\n        }\r\n       }", "correct_text": "       require [\"mime\", \"fileinto\", \"convert\"];\r\n       if header :mime :anychild :contenttype\r\n                 \"Content-Type\" \"image/tiff\"\r\n       {\r\n        if convert \"image/tiff\" \"image/jpeg\" [\"pix-x=320\",\"pix-y=240\"]\r\n        {\r\n         fileinto \"INBOX.pics\";\r\n        }\r\n       }", "notes": "the if condition is wrapped in parentheses which is invalid sieve syntax.\r\n\r\nAccording to RFC 5288 a test has to start with and alpha numerical identifier. \r\n\r\nWhich is not true in this case. Either the parentheses need to be removed or any \"anyof\" or \"allof\" needs to be added.", "submit_date": "2018-11-25", "submitter_name": "Thomas Schmid", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5338", "doc-id": "RFC3746", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   a change via asynchronous messages (see [4], Section 5, requirement\r\n   #6).\r\n...\r\n   This architecture permits multiple FEs to be present in an NE.  [4]\r\n   dictates that the ForCES Protocol must be able to scale to at least\r\n   hundreds of FEs (see [4] Section 5, requirement #11).  Each of these\r\n   FEs may potentially have a different set of packet processing\r\n...\r\n   When multiple FEs are present, ForCES requires that packets must be\r\n   able to arrive at the NE by one FE and leave the NE via a different\r\n   FE (See [4], Section 5, Requirement #3).  Packets that enter the NE\r\n", "correct_text": "   a change via asynchronous messages (see [4], Section 4, requirement\r\n   #6).\r\n...\r\n   This architecture permits multiple FEs to be present in an NE.  [4]\r\n   dictates that the ForCES Protocol must be able to scale to at least\r\n   hundreds of FEs (see [4] Section 4, requirement #11).  Each of these\r\n   FEs may potentially have a different set of packet processing\r\n...\r\n   When multiple FEs are present, ForCES requires that packets must be\r\n   able to arrive at the NE by one FE and leave the NE via a different\r\n   FE (See [4], Section 4, Requirement #3).  Packets that enter the NE\r\n", "notes": "Incorrect reference to Section 5.\r\n\r\nsee also: https://www.rfc-editor.org/verify_errata_select.php?eid=5338", "submit_date": "2018-04-27", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5339", "doc-id": "RFC3746", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "   The ForCES Working Group has made a conscious decision that the first\r\n   version of ForCES will be focused on \"very close\" CE/FE localities in\r\n   IP networks.  Very Close localities consist of control and forwarding\r\n   elements that are either components in the same physical box, or\r\n   separated at most by one local network hop ([8]).  CEs and FEs can be\r\n   connected by a variety of interconnect technologies, including\r\n   Ethernet connections, backplanes, ATM (cell) fabrics, etc.  ForCES\r\n   should be able to support each of these interconnects (see [4]\r\n   Section 5, requirement #1).  When the CEs and FEs are separated\r\n   beyond a single L3 routing hop, the ForCES Protocol will make use of\r\n   an existing RFC 2914 [3] compliant L4 protocol with adequate\r\n   reliability, security, and congestion control (e.g., TCP, SCTP) for\r\n   transport purposes.\r\n", "correct_text": "   The ForCES Working Group has made a conscious decision that the first\r\n   version of ForCES will be focused on \"very close\" CE/FE localities in\r\n   IP networks.  Very Close localities consist of control and forwarding\r\n   elements that are either components in the same physical box, or\r\n   separated at most by one local network hop ([8]).  CEs and FEs can be\r\n   connected by a variety of interconnect technologies, including\r\n   Ethernet connections, backplanes, ATM (cell) fabrics, etc.  ForCES\r\n   should be able to support each of these interconnects (see [4]\r\n   Section 4, requirement #1).  When the CEs and FEs are separated\r\n   beyond a single L3 routing hop, the ForCES Protocol will make use of\r\n   an existing RFC 2914 [3] compliant L4 protocol with adequate\r\n   reliability, security, and congestion control (e.g., TCP, SCTP) for\r\n   transport purposes.\r\n", "notes": "https://www.rfc-editor.org/errata/eid5337", "submit_date": "2018-04-27", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5568", "doc-id": "RFC7748", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   Input u-coordinate:\r\n     e5210f12786811d3f4b7959d0538ae2c31dbe7106fc03c3efc4cd549c715a493", "correct_text": "   Input u-coordinate:\r\n     e5210f12786811d3f4b7959d0538ae2c31dbe7106fc03c3efc4cd549c715a413", "notes": "In the X25519 2nd test vector the last byte of input u-coordinate should be 13 instead of 93. This will fix inconsistency between u-coordinate, its base10 representation and the output u-coordinate.\n --VERIFIER NOTES-- \nA change of one bit of the input u-coordinate in the hexadecimal representation is proposed (to make it \"consistent\" with the base 10 representation). However, implementations of x25519 should \"mask\" that bit after taking a u-coordinate as an input - therefore, the existing text of RFC does not have any errors there. ", "submit_date": "2018-12-07", "submitter_name": "Juan Alcasabas", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2020-12-15 07:02:25"}, {"errata_id": "5570", "doc-id": "RFC8427", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2", "orig_text": "\"responseMessage\": { \"ID\": 32784, \"QR\": 1, \"AA\": 1, \"RCODE\": 0,\r\n                         \"QDCOUNT\": 1, \"ANCOUNT\": 1, \"NSCOUNT\": 1,", "correct_text": "\"responseMessage\": { \"ID\": 32784, \"QR\": 1, \"AA\": 1, \"RCODE\": 0,\r\n                         \"QDCOUNT\": 1, \"ANCOUNT\": 2, \"NSCOUNT\": 1,", "notes": "ANCOUNT should, IMHO, be 2 and not 1. There are two resource records in the answer section.\r\n\r\nTrue, the RFC explicitely says (section 8, 1st paragraph) that there can be a discrepancy between ANCOUNT and the actual number of records but I doubt this example was meant to illustrate this point.", "submit_date": "2018-12-07", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5652", "doc-id": "RFC8239", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "      o  Last iteration: Ingress port N-2 sending line rate to egress\r\n         port N-1, while port N is sending a known low amount of\r\n         oversubscription traffic (1% recommended) with the same packet\r\n         size to egress port N.  Measure the buffer size value by\r\n         multiplying the number of extra frames sent by the frame size.\r\n", "correct_text": "      o  Last iteration: Ingress port N-2 sending line rate to egress\r\n         port N-1, while port N is sending a known low amount of\r\n         oversubscription traffic (1% recommended) with the same packet\r\n         size to egress port N-1.  Measure the buffer size value by\r\n         multiplying the number of extra frames sent by the frame size.\r\n", "notes": "Incorrect number of the output port for oversubscription traffic.\r\n\r\n[WK]: See https://mailarchive.ietf.org/arch/msg/bmwg/_zZOrFmBwGq3dc5Pfb833tmLSGk for additional context.", "submit_date": "2019-03-12", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5340", "doc-id": "RFC3746", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "   FEs and CEs may join and leave NEs dynamically (see [4] Section 5,\r\n   requirements #12).  When an FE or CE leaves the NE, the association\r\n   with the NE is broken.  If the leaving party rejoins an NE later, to\r\n   re-establish the association, it may need to re-enter the pre-\r\n   association phase.  Loss of association can also happen unexpectedly\r\n   due to a loss of connection between the CE and the FE.  Therefore,\r\n   the framework allows the bi-directional transition between these two\r\n   phases, but the ForCES Protocol is only applicable for the post-\r\n   association phase.  However, the protocol should provide mechanisms\r\n   to support association re-establishment.  This includes the ability\r\n   for CEs and FEs to determine when there is a loss of association\r\n   between them, and to restore association and efficient state\r\n   (re)synchronization mechanisms (see [4] Section 5, requirement #7).\r\n   Note that security association and state must also be re-established\r\n   to guarantee the same level of security (including both\r\n   authentication and authorization) exists before and after the\r\n   association re-establishment.\r\n\r\n", "correct_text": "   FEs and CEs may join and leave NEs dynamically (see [4] Section 4,\r\n   requirements #12).  When an FE or CE leaves the NE, the association\r\n   with the NE is broken.  If the leaving party rejoins an NE later, to\r\n   re-establish the association, it may need to re-enter the pre-\r\n   association phase.  Loss of association can also happen unexpectedly\r\n   due to a loss of connection between the CE and the FE.  Therefore,\r\n   the framework allows the bi-directional transition between these two\r\n   phases, but the ForCES Protocol is only applicable for the post-\r\n   association phase.  However, the protocol should provide mechanisms\r\n   to support association re-establishment.  This includes the ability\r\n   for CEs and FEs to determine when there is a loss of association\r\n   between them, and to restore association and efficient state\r\n   (re)synchronization mechanisms (see [4] Section 4, requirement #7).\r\n   Note that security association and state must also be re-established\r\n   to guarantee the same level of security (including both\r\n   authentication and authorization) exists before and after the\r\n   association re-establishment.\r\n\r\n", "notes": "Incorrect reference to Section 5.\r\n\r\nhttps://www.rfc-editor.org/errata/eid5337", "submit_date": "2018-04-27", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5341", "doc-id": "RFC4503", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2.", "orig_text": "     mkey = [00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00]", "correct_text": "     key  = [00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00]", "notes": "The letter combination \"mkey\" for the key is only used in section \"A.2.  Testing with IV Setup\" and nowhere else. In sections A.1, B.1 and B.2 instead consistently \"key\" is used. So I assume that the additional \"m\" is a typo. To retain formatting, an additional space is added after \"key\" as in sections A.1, B.1 and B.2.", "submit_date": "2018-04-28", "submitter_name": "Wolfgang Keller", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5342", "doc-id": "RFC7761", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.2", "orig_text": "set KeepaliveTimer(S,G) to RP_Keepalive_Period;", "correct_text": "set KeepaliveTimer(S,G) to max(Keepalive_Period, RP_Keepalive_Period);", "notes": "The normal keepalive period for the KAT(S,G) defaults to 210 seconds. However, at the RP, the keepalive period must be at least the Register_Suppression_Time, or the RP may time out the (S,G) state before the next Null-Register arrives. Thus, the KAT(S,G) is set to max(Keepalive_Period, RP_Keepalive_Period) when a Register-Stop is sent.\r\n\r\n====\r\nNote that the text above comes from \u00a74.11.", "submit_date": "2018-04-28", "submitter_name": "Frank Hua Li", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5356", "doc-id": "RFC3618", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3", "orig_text": "5.3.  SA Cache Timeout (SA-State Timer)\r\n\r\n   Each entry in an SA Cache has an associated SA-State Timer.  A\r\n   (S,G)-SA-State-Timer is started when an (S,G)-SA message is initially\r\n   received by an MSDP peer.  The timer is reset to [SG-State-Period] if\r\n   another (S,G)-SA message is received before the (S,G)-SA-State Timer\r\n   expires.  [SG-State-Period] MUST NOT be less than [SA-Advertisement-\r\n   Period] + [SA-Hold-Down-Period].", "correct_text": "5.3.  SA Cache Timeout (SA-State Timer)\r\n\r\n   Each entry in an SA Cache has an associated SA-State Timer.  A\r\n   (S,G)-SA-State-Timer is started when an (S,G)-SA message is initially\r\n   received by an MSDP peer.  The timer is reset to [SG-State-Period] if\r\n   another (S,G)-SA message is received before the (S,G)-SA-State Timer\r\n   expires.  [SG-State-Period] MUST NOT be less than [SA-Advertisement-\r\n   Period].\r\n\r\nOr define the [SA-Hold-Down-Period] refers to.", "notes": "There is no definition of [SA-Hold-Down-Period] timer in the document. We should either remove the reference of [SA-Hold-Down-Period] from 5.3 or clearly define what [SA-Hold-Down-Period] refers to. If not, this will cause confusion for implementation.\n --VERIFIER NOTES-- \n   The discussion on the WG list is here: https://mailarchive.ietf.org/arch/msg/pim/HeCvgF59HdxWMp7PYSUUteL2D5E ", "submit_date": "2018-05-10", "submitter_name": "Frank Hua Li", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5357", "doc-id": "RFC8013", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.1", "orig_text": "      configuration.  In essence, the control plane when explicitly\r\n      making a decision for the MTU settings of the egress port is\r\n      implicitly deciding how much metadata will be allowed.  Caution\r\n      needs to be exercised on how low the resulting reported link MTU\r\n      could be: for IPv4 packets, the minimum size is 64 octets [RFC791]\r\n      and for IPv6 the minimum size is 1280 octets [RFC2460].\r\n\r\n", "correct_text": "      configuration).  In essence, the control plane when explicitly\r\n      making a decision for the MTU settings of the egress port is\r\n      implicitly deciding how much metadata will be allowed.  Caution\r\n      needs to be exercised on how low the resulting reported link MTU\r\n      could be: for IPv4 packets, the minimum size is 64 octets [RFC791]\r\n      and for IPv6 the minimum size is 1280 octets [RFC2460].\r\n\r\n", "notes": "The closing parenthesis is missing.", "submit_date": "2018-05-13", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5653", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "17.1.1.2", "orig_text": "", "correct_text": "", "notes": "When a INVITE client transaction transitions to Proceeding state (upon receiving a provisional response), the request retransmission stops (for an unreliable transport) i.e. Timer A is stopped. \r\nHowever in Proceeding state, Timer B, i.e. Transaction Timeout Timer can still fire if no final response is received in stipulated time in which case the TU should be informed and the transaction should transition to Terminated state.\r\n\"Figure 5: INVITE client transaction\" in RFC 3261 does not show the Timer B expiry event in Proceeding state. This means that we are saying there is a guarantee that a final response will always be received in Proceeding state which may not always be the case.\r\nIn my opinion, the Proceeding state in Figure 5 should be updated to include a Timer B event.", "submit_date": "2019-03-12", "submitter_name": "Vimal Chandra Tewari", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:31:19"}, {"errata_id": "7410", "doc-id": "RFC9126", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1.1", "orig_text": "Uses \"urn:example:bwc4JK-ESC0w8acc191e-Y1LTC2\" in two examples.", "correct_text": "Use \"urn:ietf:params:oauth:request_uri:bwc4JK-ESC0w8acc191e-Y1LTC2\"\r\ninstead.", "notes": "Some may find the use of \"urn:example:\" a bit misleading.", "submit_date": "2023-03-31", "submitter_name": "Andrii Deinega", "verifier_id": "", "verifier_name": null, "update_date": "2023-04-26 00:42:58"}, {"errata_id": "5343", "doc-id": "RFC7761", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.11", "orig_text": "4.11 Page 128: \r\nThe normal keepalive period for the KAT(S,G) defaults to 210 seconds.\r\nHowever, at the RP, the keepalive period must be at least the\r\nRegister_Suppression_Time, or the RP may time out the (S,G) state\r\nbefore the next Null-Register arrives. Thus, the KAT(S,G) is set to\r\nmax(Keepalive_Period, RP_Keepalive_Period) when a Register-Stop\r\nis sent.", "correct_text": "If the pseudo code in 4.4.2 page 43 is correct, the text should be:\r\nThe normal keepalive period for the KAT(S,G) defaults to 210 seconds.\r\nHowever, at the RP, the keepalive period must be at least the\r\nRegister_Suppression_Time, or the RP may time out the (S,G) state\r\nbefore the next Null-Register arrives. Thus, the KAT(S,G) is set to\r\nRP_Keepalive_Period when a Register-Stop\r\nis sent.", "notes": "4.11 Page 128: 4.11 Page 128: \r\nThe normal keepalive period for the KAT(S,G) defaults to 210 seconds.\r\nHowever, at the RP, the keepalive period must be at least the\r\nRegister_Suppression_Time, or the RP may time out the (S,G) state\r\nbefore the next Null-Register arrives. Thus, the KAT(S,G) is set to\r\nmax(Keepalive_Period, RP_Keepalive_Period) when a Register-Stop\r\nis sent.\r\n\r\nFrank's Note: This statement contradicts with pseudo code in 4.4.2 page 43. \r\nIn page 43, the KeepaliveTimer(S,G) is set to \r\nRP_Keepalive_Period instead of max(Keepalive_Period, RP_Keepalive_Period).\r\nquote from page 43:\r\nif ( SPTbit(S,G) OR SwitchToSptDesired(S,G) ) {\r\n if ( sentRegisterStop == TRUE ) {\r\n  set KeepaliveTimer(S,G) to RP_Keepalive_Period;\r\n } else {\r\n  set KeepaliveTimer(S,G) to Keepalive_Period;\r\n }\r\n}\n --VERIFIER NOTES-- \n   See Errata ID 5342.", "submit_date": "2018-04-28", "submitter_name": "Frank Hua Li", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5344", "doc-id": "RFC8369", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "unobfsucated", "correct_text": "unobfuscated", "notes": "", "submit_date": "2018-04-29", "submitter_name": "Roland Illig", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5345", "doc-id": "RFC4180", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "6.  Fields containing line breaks (CRLF), double quotes, and commas \r\nshould be enclosed in double-quotes.", "correct_text": "6.  Fields containing line breaks (CRLF), double quotes, and commas \r\nmust be enclosed in double-quotes.\r\n", "notes": "CSV is clearly unparsable if commas are not enclosed in double quotes.", "submit_date": "2018-04-30", "submitter_name": "Abed BenBrahim", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:35:01"}, {"errata_id": "5346", "doc-id": "RFC7182", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "      then L > log2(NRT/P).  For example, if N is 32, R is 1000, T is\r\n      86400 (I day) and P is 10^-6, then L must be at least 52 bits.\r\n", "correct_text": "      then L > log2(NRT/P).  For example, if N is 32, R is 1000, T is\r\n      86400 (1 day) and P is 10^-6, then L must be at least 52 bits.\r\n", "notes": "A Roman numeral in this context makes it more difficult to follow.", "submit_date": "2018-05-03", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5347", "doc-id": "RFC5925", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "3. The TCP header, by default including options, and where the TCP\r\n   checksum and TCP-AO MAC fields are set to zero, all in network-\r\n   byte order.\r\n\r\n   The TCP option flag of the MKT indicates whether the TCP options\r\n   are included in the MAC.  When included, only the TCP-AO MAC field\r\n   is zeroed.\r\n\r\n   When TCP options are not included, all TCP options except for TCP-\r\n   AO are omitted from MAC processing.  Again, the TCP-AO MAC field\r\n   is zeroed for the MAC processing.\r\n", "correct_text": "3. The TCP header and TCP options, where the TCP checksum and TCP-AO\r\n   MAC fields are always set to zero, all in network-byte order.\r\n\r\n   The TCP option flag of the MKT indicates which TCP options are\r\n   included in the MAC. When TCP options are not included, only the\r\n   TCP option for TCP-AO (as described in Section 2.2) is included\r\n   in the MAC. Otherwise, all the TCP options are included in the MAC.\r\n", "notes": "Rewording for clarity and simplification.\r\nThe original text could lead to confusion re '...When included, only the TCP-AO MAC field is zeroed.'\n --VERIFIER NOTES-- \nRejected as the proposed text does not seem fundamentally clearer.", "submit_date": "2018-05-03", "submitter_name": "Ignacio Goyret", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 10:35:42"}, {"errata_id": "5348", "doc-id": "RFC5810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.6.1", "orig_text": "   Type:\r\n\r\n   The operation type for Config message.  Two types of operations for\r\n   the Config message are defined:\r\n\r\n       Type = \"SET\" - This operation is to set LFB components\r\n\r\n       Type = \"SET-PROP\" - This operation is to set LFB component\r\n              properties.\r\n\r\n       Type = \"DEL\" - This operation is to delete some LFB components.\r\n\r\n       Type = \"COMMIT\" - This operation is sent to the FE to commit in a\r\n              2pc transaction.  A COMMIT TLV is an empty TLV, i.e., it\r\n              has no \"V\"alue.  In other words, there is a length of 4\r\n              (which is for the header only).\r\n\r\n       Type = \"TRCOMP\" - This operation is sent to the FE to mark the\r\n              success from an NE perspective of a 2pc transaction.  A\r\n              TRCOMP TLV is an empty TLV, i.e., it has no \"V\"alue.  In\r\n              other words, there is a length of 4 (which is for the\r\n              header only).\r\n", "correct_text": "   Type:\r\n\r\n   The operation type for Config message.  Five types of operations for\r\n   the Config message are defined:\r\n\r\n       Type = \"SET\" - This operation is to set LFB components\r\n\r\n       Type = \"SET-PROP\" - This operation is to set LFB component\r\n              properties.\r\n\r\n       Type = \"DEL\" - This operation is to delete some LFB components.\r\n\r\n       Type = \"COMMIT\" - This operation is sent to the FE to commit in a\r\n              2pc transaction.  A COMMIT TLV is an empty TLV, i.e., it\r\n              has no \"V\"alue.  In other words, there is a length of 4\r\n              (which is for the header only).\r\n\r\n       Type = \"TRCOMP\" - This operation is sent to the FE to mark the\r\n              success from an NE perspective of a 2pc transaction.  A\r\n              TRCOMP TLV is an empty TLV, i.e., it has no \"V\"alue.  In\r\n              other words, there is a length of 4 (which is for the\r\n              header only).\r\n", "notes": "The number of types is incorrect (two instead of five).", "submit_date": "2018-05-06", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7136", "doc-id": "RFC8599", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1; 4.1.3", "orig_text": "In section 1. Introduction it says:\r\nExample of a SIP REGISTER request in the flow above:\r\n\r\nREGISTER sip:alice@example.com SIP/2.0\r\n(the rest part of the message is omitted)\r\n\r\nIn section 4.1.4.  Sending Binding-Refresh Requests Using Non-push Mechanism it says:\r\n\r\nExample of a SIP REGISTER request including a 'sip.pnsreg' media feature tag:\r\n\r\nREGISTER sip:alice@example.com SIP/2.0\r\n(the rest part of the message is omitted)", "correct_text": "In section 1. Introduction it should be:\r\nExample of a SIP REGISTER request in the flow above:\r\n\r\nREGISTER sip:example.com SIP/2.0\r\n(the rest part of the message is omitted)\r\n\r\nIn section 4.1.4.  Sending Binding-Refresh Requests Using Non-push Mechanism it should be:\r\n\r\nExample of a SIP REGISTER request including a 'sip.pnsreg' media feature tag:\r\n\r\nREGISTER sip:example.com SIP/2.0\r\n(the rest part of the message is omitted)\r\n", "notes": "The error is in R-URI:\r\nREGISTER sip:alice@example.com SIP/2.0\r\nIt should be:\r\nREGISTER sip:example.com SIP/2.0\r\n\r\nAccording to RFC3261 - 10.2 Constructing the REGISTER Request -  Request-URI: The Request-URI names the domain of the location service for which the registration is meant (for example, \"sip:chicago.com\").  The \"userinfo\" and \"@\" components of the SIP URI MUST NOT be present.", "submit_date": "2022-09-18", "submitter_name": "Alex Vasilchenko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7405", "doc-id": "RFC8017", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.2, 7.2", "orig_text": "\"HAASTAD\"\r\n\r\nand\r\n\r\n\"Haastad, J\"", "correct_text": "\"HASTAD\"\r\n\r\nand\r\n\r\n\"Hastad, J\"", "notes": "https://epubs.siam.org/doi/10.1137/0217019 indicates that the author of \"Solving Simultaneous Modular Equations of Low Degree\" is \"Johan Hastad\", not \"Johan Haastad\".", "submit_date": "2023-03-25", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-04-27 21:22:29"}, {"errata_id": "5349", "doc-id": "RFC5810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.6.2", "orig_text": "   Type:\r\n          The operation type for Config Response message.  Two types of\r\n          operations for the Config Response message are defined:\r\n\r\n       Type = \"SET-RESPONSE\" - This operation is for the response of the\r\n              SET operation of LFB components.\r\n\r\n       Type = \"SET-PROP-RESPONSE\" - This operation is for the response\r\n              of the SET-PROP operation of LFB component properties.\r\n\r\n       Type = \"DEL-RESPONSE\" - This operation is for the response of the\r\n              DELETE operation of LFB components.\r\n\r\n       Type = \"COMMIT-RESPONSE\" - This operation is sent to the CE to\r\n              confirm a commit success in a 2pc transaction.  A\r\n              COMMIT-RESPONSE TLV MUST contain a RESULT-TLV indicating\r\n              success or failure.\r\n", "correct_text": "   Type:\r\n          The operation type for Config Response message.  Four types of\r\n          operations for the Config Response message are defined:\r\n\r\n       Type = \"SET-RESPONSE\" - This operation is for the response of the\r\n              SET operation of LFB components.\r\n\r\n       Type = \"SET-PROP-RESPONSE\" - This operation is for the response\r\n              of the SET-PROP operation of LFB component properties.\r\n\r\n       Type = \"DEL-RESPONSE\" - This operation is for the response of the\r\n              DELETE operation of LFB components.\r\n\r\n       Type = \"COMMIT-RESPONSE\" - This operation is sent to the CE to\r\n              confirm a commit success in a 2pc transaction.  A\r\n              COMMIT-RESPONSE TLV MUST contain a RESULT-TLV indicating\r\n              success or failure.\r\n", "notes": "The number of types is incorrect (two instead of four).", "submit_date": "2018-05-06", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5350", "doc-id": "RFC5810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "         <events baseID=\"61\">\r\n           <event eventID=\"1\">\r\n             <name>PrimaryCEDown</name>\r\n             <synopsis>\r\n                 The pimary CE has changed\r\n             </synopsis>\r\n             <eventTarget>\r\n                 <eventField>LastCEID</eventField>\r\n             </eventTarget>\r\n             <eventChanged/>\r\n             <eventReports>\r\n                <eventReport>\r\n                  <eventField>LastCEID</eventField>\r\n                </eventReport>\r\n             </eventReports>\r\n           </event>\r\n         </events>\r\n\r\n       </LFBClassDef>\r\n     </LFBClassDefs>\r\n   </LFBLibrary>\r\n", "correct_text": "         <events baseID=\"61\">\r\n           <event eventID=\"1\">\r\n             <name>PrimaryCEDown</name>\r\n             <synopsis>\r\n                 The primary CE has changed\r\n             </synopsis>\r\n             <eventTarget>\r\n                 <eventField>LastCEID</eventField>\r\n             </eventTarget>\r\n             <eventChanged/>\r\n             <eventReports>\r\n                <eventReport>\r\n                  <eventField>LastCEID</eventField>\r\n                </eventReport>\r\n             </eventReports>\r\n           </event>\r\n         </events>\r\n\r\n       </LFBClassDef>\r\n     </LFBClassDefs>\r\n   </LFBLibrary>\r\n", "notes": "A typo in the word \u00a8primary\u00a8.", "submit_date": "2018-05-07", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5358", "doc-id": "RFC8013", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "   The inter-FE LFB (instance) can be positioned at the ingress of a\r\n   receiving FE.  Figure 5 illustrates an example destination FE in the\r\n   form of FE1.  In such a case, an inter-FE LFB receives, via an LFB\r\n   port in the IngressInGroup, an encapsulated Ethernet frame.\r\n   Successful processing of the packet will result in a raw packet with\r\n   associated metadata IDs going downstream to an LFB connected on OUT2.\r\n   On failure, the data is sent out EXCEPTIONOUT.\r\n", "correct_text": "   The inter-FE LFB (instance) can be positioned at the ingress of a\r\n   receiving FE.  Figure 5 illustrates an example destination FE in the\r\n   form of FE2.  In such a case, an inter-FE LFB receives, via an LFB\r\n   port in the IngressInGroup, an encapsulated Ethernet frame.\r\n   Successful processing of the packet will result in a raw packet with\r\n   associated metadata IDs going downstream to an LFB connected on OUT2.\r\n   On failure, the data is sent out EXCEPTIONOUT.\r\n", "notes": "Destination FE is FE2 not FE1.", "submit_date": "2018-05-13", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-07-21 15:08:23"}, {"errata_id": "5679", "doc-id": "RFC791", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "The time is measured in units of seconds, but since every module that\r\nprocesses a datagram must decrease the TTL by at least one even if it\r\nprocess the datagram in less than a second, the TTL must be thought of\r\nonly as an upper bound on the time a datagram may exist.", "correct_text": "The time is measured in units of seconds, but since every module that\r\nprocesses a datagram must decrease the TTL by at least one even if it\r\nprocesses the datagram in less than a second, the TTL must be thought\r\nof only as an upper bound on the time a datagram may exist.", "notes": "Grammar mistake (s/process/processes)", "submit_date": "2019-03-30", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5680", "doc-id": "RFC1498", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "\"What is the Problem?\"", "orig_text": "To start with, let us review Shoch's suggested terminology in its\r\nbroadest form:\r\n\r\n     -  a name identifies what you want,\r\n     -  an address identifies where it is, and\r\n     -  an route identifies a way to get there.", "correct_text": "To start with, let us review Shoch's suggested terminology in its\r\nbroadest form:\r\n\r\n     -  a name identifies what you want,\r\n     -  an address identifies where it is, and\r\n     -  a route identifies a way to get there.", "notes": "Grammar mistake (\"an router\").  Also, see the text under the heading 'The General Model' in IEN 19.", "submit_date": "2019-03-30", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6058", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM273\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP273\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> (! a! a' a? aa c, n? A: .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! '? U: DO *  )  ;  '>\r\n  -  /  A> <( A! A' A? AA C, N? o: ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  Nb SE '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My ss s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co At PI 14 12 34 NO !! '- ': '' *X\r\n  a: A  B  C  D  E  F  G  H  I  -- o> BB o! o' o?\r\n  u: J  K  L  M  N  O  P  Q  R  1S u> !) u! u' y:\r\n  O: -: S  T  U  V  W  X  Y  Z  2S O> // O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> )> U! U' DT", "correct_text": "  &charset IBM273\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP273\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> (! a! a' a? aa c, n? A: .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! '? U: DO *  )  ;  '>\r\n  -  /  A> <( A! A' A? AA C, N? o: ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  Nb SE '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My ss s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co At PI 14 12 34 NO !! '- ': '' *X\r\n  a: A  B  C  D  E  F  G  H  I  -- o> BB o! o' o?\r\n  u: J  K  L  M  N  O  P  Q  R  1S u> !) u! u' y:\r\n  O: -: S  T  U  V  W  X  Y  Z  2S O> // O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> )> U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:25:22"}, {"errata_id": "5351", "doc-id": "RFC7970", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.16", "orig_text": "The attributes of the iodef:ExtensionType type are:\r\n\r\n   name\r\n      Optional.  STRING.  A free-form name of the field or data element.\r\n\r\n   dtype\r\n      Required.  ENUM.  The data type of the element content.  The\r\n      default value is \"string\".  These values are maintained in the\r\n      \"ExtensionType-dtype\" IANA registry per Section 10.2.\r\n\r\n      1.   boolean.  The element content is of type BOOLEAN.\r\n\r\n      2.   byte.  The element content is of type BYTE.\r\n\r\n      3.   bytes.  The element content is of type HEXBIN.\r\n\r\n      4.   character.  The element content is of type CHARACTER.\r\n\r\n      5.   date-time.  The element content is of type DATETIME.\r\n\r\n      6.   ntpstamp.  Same as date-time.\r\n\r\n      7.   integer.  The element content is of type INTEGER.\r\n\r\n      8.   portlist.  The element content is of type PORTLIST.\r\n\r\n      9.   real.  The element content is of type REAL.\r\n\r\n      10.  string.  The element content is of type STRING.\r\n\r\n      11.  file.  The element content is a base64-encoded binary file\r\n           encoded as a BYTE[] type.\r\n\r\n      12.  path.  The element content is a file-system path encoded as a\r\n           STRING type.\r\n\r\n      13.  frame.  The element content is a Layer 2 frame encoded as a\r\n           HEXBIN type.\r\n\r\n      14.  packet.  The element content is a Layer 3 packet encoded as a\r\n           HEXBIN type.\r\n\r\n      15.  ipv4-packet.  The element content is an IPv4 packet encoded\r\n           as a HEXBIN type.\r\n\r\n      16.  ipv6-packet.  The element content is an IPv6 packet encoded\r\n           as a HEXBIN type.\r\n\r\n      17.  url.  The element content is of type URL.\r\n\r\n      18.  csv.  The element content is a comma-separated value (CSV)\r\n           list per Section 2 of [RFC4180] encoded as a STRING type.\r\n\r\n      19.  winreg.  The element content is a Microsoft Windows registry\r\n           key encoded as a STRING type.\r\n\r\n      20.  xml.  The element content is XML.  See Section 5.2.\r\n\r\n      21.  ext-value.  A value used to indicate that this attribute is\r\n           extended and the actual value is provided using the\r\n           corresponding ext-* attribute.  See Section 5.1.1.", "correct_text": "The attributes of the iodef:ExtensionType type are:\r\n\r\n   name\r\n      Optional.  STRING.  A free-form name of the field or data element.\r\n\r\n   dtype\r\n      Required.  ENUM.  The data type of the element content.  The\r\n      default value is \"string\".  These values are maintained in the\r\n      \"ExtensionType-dtype\" IANA registry per Section 10.2.\r\n\r\n      1.   boolean.  The element content is of type BOOLEAN.\r\n\r\n      2.   byte.  The element content is of type BYTE.\r\n\r\n      3.   bytes.  The element content is of type HEXBIN[].\r\n\r\n      4.   character.  The element content is of type CHARACTER.\r\n\r\n      5.   date-time.  The element content is of type DATETIME.\r\n\r\n      6.   ntpstamp.  Same as date-time.\r\n\r\n      7.   integer.  The element content is of type INTEGER.\r\n\r\n      8.   portlist.  The element content is of type PORTLIST.\r\n\r\n      9.   real.  The element content is of type REAL.\r\n\r\n      10.  string.  The element content is of type STRING.\r\n\r\n      11.  file.  The element content is a base64-encoded binary file\r\n           encoded as a BYTE[] type.\r\n\r\n      12.  path.  The element content is a file-system path encoded as a\r\n           STRING type.\r\n\r\n      13.  frame.  The element content is a Layer 2 frame encoded as a\r\n           HEXBIN[] type.\r\n\r\n      14.  packet.  The element content is a Layer 3 packet encoded as a\r\n           HEXBIN[] type.\r\n\r\n      15.  ipv4-packet.  The element content is an IPv4 packet encoded\r\n           as a HEXBIN[] type.\r\n\r\n      16.  ipv6-packet.  The element content is an IPv6 packet encoded\r\n           as a HEXBIN[] type.\r\n\r\n      17.  url.  The element content is of type URL.\r\n\r\n      18.  csv.  The element content is a comma-separated value (CSV)\r\n           list per Section 2 of [RFC4180] encoded as a STRING type.\r\n\r\n      19.  winreg.  The element content is a Microsoft Windows registry\r\n           key encoded as a STRING type.\r\n\r\n      20.  xml.  The element content is XML.  See Section 5.2.\r\n\r\n      21.  ext-value.  A value used to indicate that this attribute is\r\n           extended and the actual value is provided using the\r\n           corresponding ext-* attribute.  See Section 5.1.1.", "notes": "Section 2.5.2 (explanation of HEXBIN and HEXBIN[] types) says:\r\n\" A binary octet encoded as a character tuple consistent of two\r\n   hexadecimal digits is represented in the information model by the\r\n   HEXBIN data type.  A sequence of these octets is of the HEXBIN[] data\r\n   type.\r\n   The HEXBIN and HEXBIN[] data types are implemented in the data model\r\n   as an \"xs:hexBinary\" type per Section 3.2.15 of [W3C.SCHEMA.DTYPES].\"\r\n\r\nIf I am reading that section correctly, HEXBIN is for hex-encoded things that decode to exactly one byte, while HEXBIN[] is for hex-encoded things that decode to one or more bytes. Thus, things that may decode to multiple bytes should be HEXBIN[], not HEXBIN. \r\n\r\nThe extension types in Section 2.16  that are currently HEXBIN should probably be HEXBIN[]. The name \"bytes\" implies decoding to multiple bytes (so it should be HEXBIN[]). Frames and packets (regardless of layer) tend to be multiple bytes long (so they should be HEXBIN[] as well).", "submit_date": "2018-05-07", "submitter_name": "Logan Widick", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 01:04:29"}, {"errata_id": "5352", "doc-id": "RFC5246", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.2.3.3.", "orig_text": "struct {\r\n    opaque nonce_explicit[SecurityParameters.record_iv_length];\r\n    aead-ciphered struct {\r\n        opaque content[TLSCompressed.length];\r\n    };\r\n} GenericAEADCipher;", "correct_text": "struct {\r\n    opaque nonce_explicit[SecurityParameters.record_iv_length];\r\n    aead-ciphered struct {\r\n        opaque content[TLSCiphertext.length];\r\n    };\r\n} GenericAEADCipher;", "notes": "6.2.3.3. says: \"The aead_output consists of the ciphertext output by the AEAD encryption operation. The length will generally be larger than TLSCompressed.length, [...]\".\r\n\r\nThe definition is duplicated at A.1., and needs the same adjustment.\n --VERIFIER NOTES-- \naead-ciphered is an operator that takes content as the input.", "submit_date": "2018-05-09", "submitter_name": "Loic Etienne", "verifier_id": "", "verifier_name": "Eric Rescorla", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5353", "doc-id": "RFC8103", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   The amount of encrypted data possible in a single invocation of\r\n   AEAD_CHACHA20_POLY1305 is 2^32-1 blocks of 64 octets each, because of\r\n   the size of the block counter field in the ChaCha20 block function.\r\n   This gives a total of 247,877,906,880 octets, which is likely to be\r\n   sufficient to handle the size of any CMS content type.  Note that the\r\n   ciphertext length field in the authentication buffer will accommodate\r\n   2^64 octets, which is much larger than necessary.", "correct_text": "   The amount of encrypted data possible in a single invocation of\r\n   AEAD_CHACHA20_POLY1305 is 2^32-1 blocks of 64 octets each, because of\r\n   the size of the block counter field in the ChaCha20 block function.\r\n   This gives a total of 274,877,906,880 octets, which is likely to be\r\n   sufficient to handle the size of any CMS content type.  Note that the\r\n   ciphertext length field in the authentication buffer will accommodate\r\n   2^64 octets, which is much larger than necessary.", "notes": "The calculated total number of octets that can be encrypted in a single invocation is incorrect. See RFC Errata, Erratum ID 4858, RFC 7539.", "submit_date": "2018-05-10", "submitter_name": "Kevin Israel", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5354", "doc-id": "RFC7493", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "An I-JSON sender cannot expect a receiver to treat an integer whose\r\nabsolute value is greater than 9007199254740991 (i.e., that is\r\noutside the range [-(2**53)+1, (2**53)-1]) as an exact value.", "correct_text": "An I-JSON sender cannot expect a receiver to treat an integer whose\r\nabsolute value is greater than 9007199254740992 (i.e., that is\r\noutside the range [-(2**53), (2**53)]) as an exact value.", "notes": "The limit is presumably derived from ECMAScript which says:\r\n\r\n\"The value of Number.MAX_SAFE_INTEGER is the largest integer n such that n and n + 1 are both exactly representable as a Number value\"\r\n\r\nHowever, Number.MAX_SAFE_INTEGER is 9007199254740991.", "submit_date": "2018-05-10", "submitter_name": "Anders Rundgren", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7608", "doc-id": "RFC6455", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.1.1", "orig_text": "The underlying TCP connection, in most normal cases, SHOULD be closed\r\n   first by the server, so that it holds the TIME_WAIT state and not the\r\n   client (as this would prevent it from re-opening the connection for 2\r\n   maximum segment lifetimes (2MSL), while there is no corresponding\r\n   server impact as a TIME_WAIT connection is immediately reopened upon\r\n   a new SYN with a higher seq number).  ", "correct_text": "The underlying TCP connection, in most normal cases, SHOULD be closed\r\n   first by the server, so that the TIME_WAIT occurs at the\r\n   client, not at the server.  ", "notes": "1. There is no such thing as a 'TIME_WAIT connection'.\r\n2. TCP connections are never reused.\r\n3. It is better for the TIME_WAIT *port* states to accumulate at the clients rather than at the server, as this distributes them among the client base and avoids possible resource exhaustion at the server (NB *not* port exhaustion, as the server is only using one port).\r\n4. The part about 'as this would prevent it [the client] from re-opening the connection' is only true if the client is using a fixed local port number, which never works anyway.\r\n5. The part about ' a TIME_WAIT connection is immediately reopened upon\r\n   a new SYN with a higher seq number' is nonsense.", "submit_date": "2023-08-19", "submitter_name": "Esmond Pitt", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7137", "doc-id": "RFC8714", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "Trustees appointed by the IESG or by the ISOC Board of\r\nDirectors may be recalled by the appointing body. ", "correct_text": "Trustees appointed by the IESG or by the ISOC Board of\r\nTrustees may be recalled by the appointing body. ", "notes": "ISOC has a Board of Trustees, not a Board of Directors.\r\n\r\n --VERIFIER NOTES--\r\nStatus changed to HFDU per input from Ted Hardie", "submit_date": "2022-09-21", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-09-26 22:04:12"}, {"errata_id": "7406", "doc-id": "RFC9350", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "The IS-IS FAD sub-TLV MAY be advertised in a\r\nLabel Switched Path (LSP) of any number.", "correct_text": "The IS-IS FAD sub-TLV MAY be advertised in a\r\nLink State PDU (LSP) of any number.", "notes": "I assume LSP is meant to refer to the PDU carrying the FAD, not a Label Switched Path.", "submit_date": "2023-03-28", "submitter_name": "Barry Friedman", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2023-04-13 13:56:18"}, {"errata_id": "5363", "doc-id": "RFC5812", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.8", "orig_text": "   An interesting issue related to class inheritance is backward\r\n   compatibility between a descendant and an ancestor class.  Consider\r\n   the following hypothetical scenario where a standardized LFB class\r\n   \"L1\" exists.  Vendor A builds an FE that implements LFB \"L1\", and\r\n   vendor B builds a CE that can recognize and operate on LFB \"L1\".\r\n   Suppose that a new LFB class, \"L2\", is defined based on the existing\r\n   \"L1\" class by extending its capabilities incrementally.  Let us\r\n   examine the FE backward-compatibility issue by considering what would\r\n   happen if vendor B upgrades its FE from \"L1\" to \"L2\" and vendor C's\r\n\r\n\r\n\r\n\r\n\r\nHalpern & Hadi Salim         Standards Track                   [Page 29]\r\n\f\r\nRFC 5812                     ForCES FE Model                  March 2010\r\n\r\n\r\n   CE is not changed.  The old L1-based CE can interoperate with the new\r\n   L2-based FE if the derived LFB class \"L2\" is indeed backward\r\n   compatible with the base class \"L1\".\r\n", "correct_text": "   An interesting issue related to class inheritance is backward\r\n   compatibility between a descendant and an ancestor class.  Consider\r\n   the following hypothetical scenario where a standardized LFB class\r\n   \"L1\" exists.  Vendor A builds an FE that implements LFB \"L1\", and\r\n   vendor B builds a CE that can recognize and operate on LFB \"L1\".\r\n   Suppose that a new LFB class, \"L2\", is defined based on the existing\r\n   \"L1\" class by extending its capabilities incrementally.  Let us\r\n   examine the FE backward-compatibility issue by considering what would\r\n   happen if vendor A upgrades its FE from \"L1\" to \"L2\" and vendor B's\r\n\r\n\r\n\r\n\r\n\r\nHalpern & Hadi Salim         Standards Track                   [Page 29]\r\n\f\r\nRFC 5812                     ForCES FE Model                  March 2010\r\n\r\n\r\n   CE is not changed.  The old L1-based CE can interoperate with the new\r\n   L2-based FE if the derived LFB class \"L2\" is indeed backward\r\n   compatible with the base class \"L1\".\r\n", "notes": "Confusion in the notation of vendors.", "submit_date": "2018-05-18", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 19:18:10"}, {"errata_id": "5364", "doc-id": "RFC5812", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.1", "orig_text": "   (b) Using pure encoded state approach to represent the LFB\r\n   topology in 5(a), if LFB#1, LFB#2, ..., and LFB#N are of the\r\n   same type (e.g., meter).\r\n\r\n", "correct_text": "   (b) Using pure encoded state approach to represent the LFB\r\n   topology in 7(a), if LFB#1, LFB#2, ..., and LFB#N are of the\r\n   same type (e.g., meter).\r\n\r\n", "notes": "Invalid reference to figure 5(a) instead of figure 7(a).", "submit_date": "2018-05-18", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 18:51:47"}, {"errata_id": "5365", "doc-id": "RFC7489", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.1.1", "orig_text": "     mail.receiver.example!example.com!1013662812!1013749130.gz\r\n", "correct_text": "     mail.receiver.example!example.com!1013662812!1013749130.xml.gz\r\n", "notes": "The specification states that the suffix should be \"xml\" for an uncompressed file, and \"xml.gz\" for a compressed file.  The example filename is missing the \"xml\" component of the suffix", "submit_date": "2018-05-22", "submitter_name": "Gary Palmer", "verifier_id": "", "verifier_name": "Eliot Lear (ISE)", "update_date": "2022-09-30 12:10:18"}, {"errata_id": "5366", "doc-id": "RFC7948", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2", "orig_text": "[RS-ARCH]  Govindan, R., Alaettinoglu, C., Varadhan, K., and D.\r\n           Estrin, \"A Route Server Architecture for Inter-Domain\r\n           Routing\", 1995,\r\n           <http://www.cs.usc.edu/assets/003/83191.pdf>.", "correct_text": "[RS-ARCH]  Govindan, R., Alaettinoglu, C., Varadhan, K., and D.\r\n           Estrin, \"A Route Server Architecture for Inter-Domain\r\n           Routing\", 1995,\r\n<https://www.researchgate.net/\r\npublication/\r\n2297181_A_Route_Server_Architecture_for_Inter-Domain_Routing>", "notes": "The paper is no longer accessible from the www.cs.usc.edu site.  A related paper can be accessed at https://doi.org/10.1016/S0169-7552(98)00008-7 by those who are registered members or will pay for the paper.  It would be cited as:\r\n[RS-ARCH]  Govindan, R., Alaettinoglu, C., Varadhan, K., and D.\r\n                  Estrin, \"A Route Server Architecture for Inter-Domain\r\n                  Routing\", Computer Networks and ISDN Systems, Volume 30,\r\n                  Issue 12, 13 July 1998, Pages 1157-1174,\r\n                  <https://doi.org/10.1016/S0169-7552(98)00008-7>.\r\n\r\nSorry, I had to split the link in the corrected text to satisfy the 72-character line length requirement in the corrected text.", "submit_date": "2018-05-23", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5367", "doc-id": "RFC7761", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4.2", "orig_text": "4.4.2 Page 44\r\n   Thus, at the RP, KeepaliveTimer(S,G) should be restarted to ( 3 *\r\n   Register_Suppression_Time + Register_Probe_Time ).", "correct_text": "4.4.2 Page 44\r\n   Thus, at the RP, KeepaliveTimer(S,G) should be restarted to the \r\n   maximum of ( 3 * Register_Suppression_Time + Register_Probe_Time ) \r\n   and Keepalive_Period.\r\n", "notes": "The normal keepalive period for the KAT(S,G) defaults to 210 seconds. However, at the RP, the keepalive period must be at least the Register_Suppression_Time, or the RP may time out the (S,G) state before the next Null-Register arrives. Thus, the KAT(S,G) is set to max(Keepalive_Period, RP_Keepalive_Period) when a Register-Stop is sent.\r\n\r\n====\r\nNote that the text above comes from \u00a74.11.\r\n\r\n===\r\nPlease also refer to Errata ID 5342.", "submit_date": "2018-05-24", "submitter_name": "Frank Hua Li", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5368", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:Group\",\r\n    \"name\" : \"Group\",\r\n    \"description\" : \"Group\",\r\n    \"attributes\" : [\r\n      {\r\n        \"name\" : \"displayName\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"A human-readable name for the Group.\r\nREQUIRED.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "correct_text": "  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:Group\",\r\n    \"name\" : \"Group\",\r\n    \"description\" : \"Group\",\r\n    \"attributes\" : [\r\n      {\r\n        \"name\" : \"displayName\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"A human-readable name for the Group.\r\nREQUIRED.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "notes": "On page 68, in the JSON example schema for the Group resource, the displayName attribute is highlighted as REQUIRED in the \"description\" but the value of the \"required\" field is false. Given that section 4.2 also indicates displayName is a required attribute for Group resources, I believe the conflict in section 8.7.1 is best corrected by changing the value of the \"required\" attribute to true.", "submit_date": "2018-05-24", "submitter_name": "Brendan McCollam", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:37:01"}, {"errata_id": "5369", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2.2.2", "orig_text": "         route MUST have the ORIGIN attribute with the value EGP.  In\r\n         all other cases,, the value of the ORIGIN attribute of the\r\n         aggregated route is IGP.", "correct_text": "         route MUST have the ORIGIN attribute with the value EGP.  In\r\n         all other cases, the value of the ORIGIN attribute of the\r\n         aggregated route is IGP.", "notes": "Extra comma after 'cases'.", "submit_date": "2018-05-25", "submitter_name": "Eric Osborne", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5370", "doc-id": "RFC7489", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.2.1.1", "orig_text": "   The extension MUST be \"xml\" for a plain XML file, or \"xml.gz\" for an\r\n   XML file compressed using GZIP.\r\n\r\n   \"unique-id\" allows an optional unique ID generated by the Mail\r\n   Receiver to distinguish among multiple reports generated\r\n   simultaneously by different sources within the same Domain Owner.\r\n\r\n   For example, this is a possible filename for the gzip file of a\r\n   report to the Domain Owner \"example.com\" from the Mail Receiver\r\n   \"mail.receiver.example\":\r\n\r\n     mail.receiver.example!example.com!1013662812!1013749130.gz", "correct_text": "   The extension MUST be \"xml\" for a plain XML file, or \"xml.gz\" for an\r\n   XML file compressed using GZIP.\r\n\r\n   \"unique-id\" allows an optional unique ID generated by the Mail\r\n   Receiver to distinguish among multiple reports generated\r\n   simultaneously by different sources within the same Domain Owner.\r\n\r\n   For example, this is a possible filename for the gzip file of a\r\n   report to the Domain Owner \"example.com\" from the Mail Receiver\r\n   \"mail.receiver.example\":\r\n\r\n     mail.receiver.example!example.com!1013662812!1013749130.xml.gz", "notes": "The example filename uses an invalid extension (not one of \"xml\", \"xml.gz\").\n --VERIFIER NOTES-- \n  Thank you for your report.  This is a duplicate of another erratum: 5365.", "submit_date": "2018-05-28", "submitter_name": "Cris van Pelt", "verifier_id": "", "verifier_name": "Eliot Lear (ISE)", "update_date": "2022-08-21 08:07:54"}, {"errata_id": "5371", "doc-id": "RFC7489", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.1.1", "orig_text": "The aggregate data MUST be an XML file that SHOULD be subjected to\r\nGZIP compression.", "correct_text": "The aggregate data MUST be an XML file that SHOULD be subjected to\r\nGZIP compression (described in [RFC1952]).", "notes": "The term \"GZIP compression\" is not defined in the text. To clarify, maintain compatibility with future (potentially incompatible) gzip versions, and to bring the document in line with other RFCs (e.g. 3712, 6713, 6968), a reference to RFC 1952 (\"GZIP file format specification version 4.3\") should be added.\r\n\r\nThis is assuming RFC 1952 was the author's intent.", "submit_date": "2018-05-28", "submitter_name": "Cris van Pelt", "verifier_id": "", "verifier_name": "Eliot Lear (ISE)", "update_date": "2022-09-30 12:12:36"}, {"errata_id": "7138", "doc-id": "RFC9110", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12.5.1", "orig_text": "The media type quality factor associated with a given type is \r\ndetermined by finding the media range with the highest precedence \r\nthat matches the type. For example,\r\n\r\nAccept: text/*;q=0.3, text/plain;q=0.7, text/plain;format=flowed,\r\n       text/plain;format=fixed;q=0.4, */*;q=0.5\r\n\r\nwould cause the following values to be associated:\r\n\r\nTable 5: \r\n\r\nMedia Type\t                Quality Value\r\ntext/plain;format=flowed\t      1\r\ntext/plain\t                     0.7\r\ntext/html\t                     0.3\r\nimage/jpeg\t                     0.5\r\ntext/plain;format=fixed\t             0.4\r\ntext/html;level=3\t             0.7", "correct_text": "The media type quality factor associated with a given type is \r\ndetermined by finding the media range with the highest precedence \r\nthat matches the type. For example,\r\n\r\nAccept: text/*;q=0.3, text/plain;q=0.7, text/plain;format=flowed,\r\n       text/plain;format=fixed;q=0.4, */*;q=0.5\r\n\r\nwould cause the following values to be associated:\r\n\r\nTable 5: \r\n\r\nMedia Type\t                Quality Value\r\ntext/plain;format=flowed\t      1\r\ntext/plain\t                     0.7\r\ntext/html\t                     0.3\r\nimage/jpeg\t                     0.5\r\ntext/plain;format=fixed\t             0.4\r\ntext/html;level=3\t             0.3", "notes": "To illustrate how the media type quality factor associated with a given type is determined, the following example is given: \r\n\r\nAccept: text/*;q=0.3, text/plain;q=0.7, text/plain;format=flowed, text/plain;format=fixed;q=0.4, */*;q=0.5\r\n\r\nThe last row of the result table (table 5) presenting the values to be associated cannot be deduced (MediaType: text/html;level=3, Quality Value: 0.7), since only \"text/*;q=0.3\" and \"*/*;q=0.5\" are possible values and as explained in the RFC \"text/*;q=0.3\" should take precedence. \r\n\r\nIn section 5.3.2 of RFC7231, a similar example is given, where the last row of the table is correct (text/html;level=3 | 0.7) since in that example the accept header contains (text/html;q=0.7).", "submit_date": "2022-09-23", "submitter_name": "Yousouf Taghzouti", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:34:16"}, {"errata_id": "5372", "doc-id": "RFC6797", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.1", "orig_text": "o  Update the UA's cached information for the Known HSTS Host if\r\n      either or both of the max-age and includeSubDomains header field\r\n      value tokens are conveying information different than that already\r\n      maintained by the UA.", "correct_text": "o  Update the UA's cached information for the Known HSTS Host.", "notes": "Section 8.1 states:\r\n\r\n   Update the UA's cached information for the Known HSTS Host if either\r\n   or both of the max-age and includeSubDomains header field value\r\n   tokens are conveying information different than that already\r\n   maintained by the UA.\r\n\r\nThe way I understand this is that if a HSTS host keeps sending the same values to a conforming client, this should not update the information cached and hence the cached information will expire after max-age seconds have passed since the _first_reception_ of this header.\r\n\r\nHowever, section 11.2 states:\r\n\r\n   The \"constant value into the future\" approach can be accomplished by\r\n   constantly sending the same max-age value to UAs.\r\n\r\n   For example, a max-age value of 7776000 seconds is 90 days:\r\n\r\n   Strict-Transport-Security: max-age=7776000\r\n\r\n   Note that each receipt of this header by a UA will require the UA to\r\n   update its notion of when it must delete its knowledge of this Known\r\n   HSTS Host.\r\n\r\nThis seems to contradict what I quoted from section 8.1. If the server constantly sends a max-age of 7776000 and includeSubDomains is not changed (which is implicit in the example), then by 8.1 the cache\r\ninformation won't be updated.\r\n\r\nI believe that the desired implementation behavior is as described in 11.2, that is, UA must update the cached information, regardless of whether either of the max-age or includeSubDomains header field values are different from what is already maintained by the UA.\r\n\n --VERIFIER NOTES-- \n I believe this comes from a misinterpretation of the following text:\r\n\"conveying information different than that already maintained\"\r\n\r\nThe text covers the case this report describes, and is consistent with what described in 11.2 and how the reporter reads it, i.e. even if the \"max-age\" value is the same, as the age is evolving, the _information_ on its expiracy is in fact different. As such, this report is rejected.", "submit_date": "2018-05-29", "submitter_name": "Claudio Saavedra", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-29 14:20:35"}, {"errata_id": "5373", "doc-id": "RFC7413", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.3.1.", "orig_text": "   For any negative responses, the client SHOULD disable Fast Open on\r\n   the specific path (the source and destination IP addresses and ports)\r\n   at least temporarily.\r\n", "correct_text": "   For any negative responses, the client SHOULD disable Fast Open on\r\n   the specific path (the source and destination IP addresses \r\n   and the destination port) at least temporarily.\r\n", "notes": "The original language seems to imply that the cached negative response should only affect connections if they are initiated from the same source port and source IP.\r\n\r\nSince the client source port can change for subsequent TCP connections, and it's unlikely that just changing the source port would result in a successful TCP FO connection when a previous connection from a different source port failed, associating the cached negative response with the source port is probably not very useful, and could actually be detrimental to performance and reliability, depending on the implementation.\r\n\r\nIf the implementation would decide to check the source port when matching negative cached responses to a new connection, it would negatively impact performance when the source port changes, because the implementation wouldn't find a matching negative response in the cache.\r\n\r\nFurthermore, if each connection retry is made from a different source port, checking the source port when matching the cached negative responses would make the client unable to connect to the server, until all possible source ports are included in cached negative responses.\r\n\r\nThis means it's much better not recommending to associate the source port to the cached negative responses, to prevent any confusion and possible implementation issues.\r\n\r\nEither that, or add additional clarification, describing exactly how a negative cached response should be matched to a subsequent connection attempt.", "submit_date": "2018-05-31", "submitter_name": "Vladimir Nicolici", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5374", "doc-id": "RFC8373", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4.", "orig_text": "   An offer or answer indicating written Greek both ways:\r\n\r\n      m=text 45020 RTP/AVP 103 104\r\n      a=hlang-send:gr\r\n      a=hlang-recv:gr", "correct_text": "   An offer or answer indicating written Greek both ways:\r\n\r\n      m=text 45020 RTP/AVP 103 104\r\n      a=hlang-send:el\r\n      a=hlang-recv:el", "notes": "The language tag to represent Greek is \"el\" per BCP 47.\r\n\r\nThe IANA language subtag registry has the following entry for Greek:\r\n\r\nType: language\r\nSubtag: el\r\nDescription: Modern Greek (1453-)\r\nAdded: 2005-10-16\r\n\r\nhttps://www.iana.org/assignments/language-subtag-registry/language-subtag-registry", "submit_date": "2018-05-31", "submitter_name": "Dan Chiba", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5375", "doc-id": "RFC7858", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "   [DNSCRYPT-WEBSITE]\r\n              Denis, F., \"DNSCrypt\", December 2015,\r\n              <https://www.dnscrypt.org/>.", "correct_text": "   [DNSCRYPT-WEBSITE]\r\n              Denis, F., \"DNSCrypt\", December 2015,\r\n              <https://www.dnscrypt.info/>.", "notes": "www.dnscrypt.org leads to a parking page. The official website is now at www.dnscrypt.info.", "submit_date": "2018-06-01", "submitter_name": "Jelte Jansen", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-10 00:24:44"}, {"errata_id": "5376", "doc-id": "RFC8231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "In case of SRP-ID-number wrapping, the last\r\n   SRP-ID-number before the wrapping MUST be explicitly acknowledged, to\r\n   avoid a situation where SRP-ID-numbers remain unacknowledged after\r\n   the wrap.  This means that the PCC may need to issue two PCUpd\r\n   messages on detecting a wrap.", "correct_text": "In case of SRP-ID-number wrapping, the last\r\n   SRP-ID-number before the wrapping MUST be explicitly acknowledged, to\r\n   avoid a situation where SRP-ID-numbers remain unacknowledged after\r\n   the wrap.  This means that the PCC may need to issue two PCRpt\r\n   messages on detecting a wrap.", "notes": "incase of srp id wrap, once PCC detects it, PCC needs to issue PCRpt message not PCUpd message.", "submit_date": "2018-06-01", "submitter_name": "Hari Krushna Kotni", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5377", "doc-id": "RFC7469", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3.4", "orig_text": "2.3.4.  HTTP-Equiv <Meta> Element Attribute\r\n\r\n   UAs MUST NOT heed http-equiv=\"Public-Key-Pins\" or\r\n   http-equiv=\"Public-Key-Pins-Report-Only\" attribute settings on <meta>\r\n   elements [W3C.REC-html401-19991224] in received content.", "correct_text": "(remove the section)", "notes": "The spec attempts to make a normative requirement on HTML consumers. It can't do that; that's the role of the HTML spec.\r\n\r\nIn addition to that, this is already covered by what recent HTML specs say about http-equiv extensibility.", "submit_date": "2018-06-02", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5453", "doc-id": "RFC6455", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   2.  If the response lacks an |Upgrade| header field or the |Upgrade|\r\n       header field contains a value that is not an ASCII case-\r\n       insensitive match for the value \"websocket\", the client MUST\r\n       _Fail the WebSocket Connection_.", "correct_text": "   2.  If the response lacks an |Upgrade| header field or the |Upgrade|\r\n       header field contains a value that does not match \"WebSocket\",\r\n       the client MUST _Fail the WebSocket Connection_.", "notes": "HTTP upgrade tokens are case-sensitive, and the token registered by RFC 6455 is \"WebSocket\" (see <https://www.iana.org/assignments/http-upgrade-tokens/http-upgrade-tokens.xhtml>). Examples should be adjusted accordingly.\r\n\r\nIf stricter checks actually break the protocol, an alternative would be to register more variants of the token, such as \"websocket\".\n --VERIFIER NOTES-- \n   See <https://www.rfc-editor.org/errata/eid5498>. Implementations seem to be using \"websocket\", as shown in all examples in this RFC.", "submit_date": "2018-08-08", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5454", "doc-id": "RFC8146", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "salted-password = Hash(password | salt)", "correct_text": "salted-password = Hash(password || salt)", "notes": "Elsewhere in this document || is used to denote concatenation.", "submit_date": "2018-08-09", "submitter_name": "Edward Huff", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5378", "doc-id": "RFC8336", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "   +-------------------------------+-------------------------------+\r\n   |         Origin-Len (16)       | ASCII-Origin?               ...\r\n   +-------------------------------+-------------------------------+\r\n\r\n   Specifically:\r\n\r\n   Origin-Len:  An unsigned, 16-bit integer indicating the length, in\r\n      octets, of the ASCII-Origin field.\r\n\r\n   Origin:  An OPTIONAL sequence of characters containing the ASCII\r\n      serialization of an origin ([RFC6454], Section 6.2) that the\r\n      sender asserts this connection is or could be authoritative for.", "correct_text": "   +-------------------------------+-------------------------------+\r\n   |         Origin-Len (16)       | ASCII-Origin?               ...\r\n   +-------------------------------+-------------------------------+\r\n\r\n   Specifically:\r\n\r\n   Origin-Len:  An unsigned, 16-bit integer indicating the length, in\r\n      octets, of the ASCII-Origin field.\r\n\r\n   ASCII-Origin:  An OPTIONAL sequence of characters containing the\r\n   ^^^^^^\r\n      ASCII serialization of an origin ([RFC6454], Section 6.2) that the\r\n      sender asserts this connection is or could be authoritative for.", "notes": "The term used in the description of the Frame fields is inconsistent with the figure. I.E. the figure uses \"ASCII-Origin\" while the text uses \"Origin\". ASCII-Origin is used elsewhere in the document.", "submit_date": "2018-06-04", "submitter_name": "Lucas Pardue", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5379", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.1, 4.2.2", "orig_text": "expires_in\r\n         RECOMMENDED.  The lifetime in seconds of the access token.  For\r\n         example, the value \"3600\" denotes ...", "correct_text": "expires_in\r\n         RECOMMENDED.  The lifetime in seconds of the access token.  For\r\n         example, the value 3600 denotes ...", "notes": "The \"expires_in\" member in JSON must be a numeric value, not a string. Unfortunately quite a few implementations have got this wrong. A likely reason is the quoted value \"3600\" in the RFC where \"expires_in\" is defined. The quotes in the text version of the RFC are only an artefact of the marked-up as a protocol value in the RFC production chain.", "submit_date": "2018-06-06", "submitter_name": "James Manger", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5380", "doc-id": "RFC8355", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "An alternative protection strategy consists in management-free local\r\n   protection that is aimed at providing a repair for the destination\r\n   based on the shortest path to the destination.", "correct_text": "An alternative protection strategy exists in management-free local\r\n protection", "notes": "\n --VERIFIER NOTES-- \nNo justification given to justify the need for the change.", "submit_date": "2018-06-06", "submitter_name": "James Bensley", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5381", "doc-id": "RFC1912", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "A CNAME record is not allowed to coexist with any other data.  In\r\n   other words, if suzy.podunk.xx is an alias for sue.podunk.xx, you\r\n   can't also have an MX record for suzy.podunk.edu, or an A record, or\r\n   even a TXT record.", "correct_text": "A CNAME record is not allowed to coexist with any other data.  In\r\n   other words, if suzy.podunk.xx is an alias for sue.podunk.xx, you\r\n   can't also have an MX record for suzy.podunk.xx, or an A record, or\r\n   even a TXT record.", "notes": "The .edu is a typo and should be corrected to .xx", "submit_date": "2018-06-06", "submitter_name": "Jonathan Teague", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5382", "doc-id": "RFC5440", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.8", "orig_text": "The Close message MUST contain exactly one CLOSE object (see\r\n   Section 6.8). ", "correct_text": "The Close message MUST contain exactly one CLOSE object (see\r\n   Section 7.17). ", "notes": "Section pointed in the text is incorrect.", "submit_date": "2018-06-06", "submitter_name": "VENUGOPAL REDDY KONDREDDY", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5383", "doc-id": "RFC6266", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1", "orig_text": "     disp-ext-parm       = token \"=\" value\r\n                         | ext-token \"=\" ext-value\r\n     ext-token           = <the characters in token, followed by \"*\">\r\n\r\n   Defined in [RFC2616]:\r\n\r\n     token         = <token, defined in [RFC2616], Section 2.2>\r\n     quoted-string = <quoted-string, defined in [RFC2616], Section 2.2>\r\n     value         = <value, defined in [RFC2616], Section 3.6>\r\n                   ; token | quoted-string\r\n\r\n   Defined in [RFC5987]:\r\n\r\n     ext-value   = <ext-value, defined in [RFC5987], Section 3.2>", "correct_text": "     disp-ext-parm       = parmname \"=\" value\r\n                         | ext-parmname \"=\" ext-value\r\n     ext-parmname        = <the characters in parmname, followed by \"*\">\r\n\r\n   Defined in [RFC2616]:\r\n\r\n     quoted-string = <quoted-string, defined in [RFC2616], Section 2.2>\r\n     value         = <value, defined in [RFC2616], Section 3.6>\r\n                   ; token | quoted-string\r\n\r\n   Defined in [RFC5987]:\r\n\r\n     parmname    = <parmname, defined in [RFC5987], Section 3.2>\r\n     ext-value   = <ext-value, defined in [RFC5987], Section 3.2>", "notes": "RFC 5987, Section 3.2.1, modifies the grammar from RFC 2616. These modifications should be used in RFC 6266. If not, it is impossible to determine whether a parameter should be a value or an ext-value based on the parameter name, since \"*\" is a valid character in token.\n --VERIFIER NOTES-- \nThe extended syntax is currently defined only for \"filename\", and any new parameter using the extended syntax would need to be defined in a document extending RFC 6266.", "submit_date": "2018-06-07", "submitter_name": "Magnar Ovedal Myrtveit", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:26:50"}, {"errata_id": "5384", "doc-id": "RFC7855", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.3.1.1.1", "orig_text": "      C1k has a link to C2j iff k = j.\r\n\r\n         The core nodes of a given region are directly connected.\r\n         Inter-region links only connect core nodes of the same plane.\r\n\r\n      {C1k has a link to C1j} iff {C2k has a link to C2j}.", "correct_text": "      C1k has a link to C2j if k = j.\r\n\r\n         The core nodes of a given region are directly connected.\r\n         Inter-region links only connect core nodes of the same plane.\r\n\r\n      {C1k has a link to C1j} if {C2k has a link to C2j}.", "notes": "Does \"iff\" mean something special that is different to \"if\" or is this a typo? If the former, should it be called out in a glossary?\n --VERIFIER NOTES-- \n\"iff\" means \"if and only if\"\r\nThis abreviation is part of the RFC Editor's well known ones.\r\nPlease see: https://www.rfc-editor.org/materials/abbrev.expansion.txt", "submit_date": "2018-06-08", "submitter_name": "James Bensley", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5385", "doc-id": "RFC7855", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   Hence, the policy is instantiated in the packet header and does not\r\n   requires any policy state in midpoints and tail-ends.", "correct_text": "   Hence, the policy is instantiated in the packet header and does not\r\n   require any policy state in midpoints and tail-ends.", "notes": "require/requires - singular/plural.\r\nVerifier Notes: subject/verb agreement error.", "submit_date": "2018-06-08", "submitter_name": "James Bensley", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5387", "doc-id": "RFC8373", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4.", "orig_text": "      m=text 45020 RTP/AVP 103 104\r\n      a=hlang-send:sp pt\r\n\r\n      m=audio 49250 RTP/AVP 20\r\n      a=hlang-recv:sp pt\r\n\r\n   An answer for the above offer, indicating text in which the callee\r\n   will receive written Spanish and audio in which the callee will send\r\n   spoken Spanish.  (The answering party has no video capability):\r\n\r\n      m=video 0 RTP/AVP 31 32\r\n      m=text 45020 RTP/AVP 103 104\r\n      a=hlang-recv:sp\r\n\r\n      m=audio 49250 RTP/AVP 20\r\n      a=hlang-send:sp\r\n\r\nand later on the same page:\r\n\r\n   An answer for the above offer, indicating text in which the callee\r\n   will receive written Spanish, audio in which the callee will send\r\n   spoken Spanish, and supplemental video:\r\n\r\n      m=text 45020 RTP/AVP 103 104\r\n      a=hlang-recv:sp\r\n\r\n      m=audio 49250 RTP/AVP 20\r\n      a=hlang-send:sp\r\n\r\n      m=video 51372 RTP/AVP 31 32\r\n", "correct_text": "      m=text 45020 RTP/AVP 103 104\r\n      a=hlang-send:es pt\r\n\r\n      m=audio 49250 RTP/AVP 20\r\n      a=hlang-recv:es pt\r\n\r\n   An answer for the above offer, indicating text in which the callee\r\n   will receive written Spanish and audio in which the callee will send\r\n   spoken Spanish.  (The answering party has no video capability):\r\n\r\n      m=video 0 RTP/AVP 31 32\r\n      m=text 45020 RTP/AVP 103 104\r\n      a=hlang-recv:es\r\n\r\n      m=audio 49250 RTP/AVP 20\r\n      a=hlang-send:es\r\n\r\nand later on the same page:\r\n\r\n   An answer for the above offer, indicating text in which the callee\r\n   will receive written Spanish, audio in which the callee will send\r\n   spoken Spanish, and supplemental video:\r\n\r\n      m=text 45020 RTP/AVP 103 104\r\n      a=hlang-recv:es\r\n\r\n      m=audio 49250 RTP/AVP 20\r\n      a=hlang-send:es\r\n\r\n      m=video 51372 RTP/AVP 31 32\r\n", "notes": "The language tag to represent Spanish is \"es\" per BCP 47.\r\n\r\nThe IANA language subtag registry has the following entry for Spanish:\r\n\r\nType: language\r\nSubtag: es\r\nDescription: Spanish\r\nDescription: Castilian\r\nAdded: 2005-10-16\r\n\r\nhttps://www.iana.org/assignments/language-subtag-registry/language-subtag-registry", "submit_date": "2018-05-31", "submitter_name": "Dan Chiba", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5388", "doc-id": "RFC6241", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3.4.2", "orig_text": "8.3.4.2.  <discard-changes>\r\n\r\n   If the client decides that the candidate configuration is not to be\r\n   committed, the <discard-changes> operation can be used to revert the\r\n   candidate configuration to the current running configuration.\r\n\r\n     <rpc message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <discard-changes/>\r\n     </rpc>\r\n\r\n   This operation discards any uncommitted changes by resetting the\r\n   candidate configuration with the content of the running\r\n   configuration.", "correct_text": "8.3.4.2.  <discard-changes>\r\n\r\n   Description:\r\n\r\n         If the client decides that the candidate configuration is not\r\n         to be committed, the <discard-changes> operation can be used to\r\n         revert the candidate configuration to the current running\r\n         configuration.\r\n\r\n         This operation discards any uncommitted changes by resetting\r\n         the candidate configuration with the content of the running\r\n         configuration.\r\n\r\n   Positive Response:\r\n\r\n         If the device was able to satisfy the request, an <rpc-reply>\r\n         is sent that contains an <ok> element.\r\n\r\n   Negative Response:\r\n\r\n         An <rpc-error> element is included in the <rpc-reply> if the\r\n         request cannot be completed for any reason.\r\n\r\n   Example:\r\n\r\n     <rpc message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <discard-changes/>\r\n     </rpc>\r\n\r\n     <rpc-reply message-id=\"101\"\r\n          xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <ok/>\r\n     </rpc-reply>", "notes": "RFC 6241 section 1.1 includes the following two definitions:\r\n\r\n   o  protocol operation: A specific remote procedure call, as used\r\n      within the NETCONF protocol.\r\n\r\n   o  remote procedure call (RPC): Realized by exchanging <rpc> and\r\n      <rpc-reply> messages.\r\n\r\nPositive and negative responses are detailed for all instances of an operation within the RFC with the exception of <discard-changes>.\r\n\r\nSection 8.3.4.2 identifies <discard-changes> as an operation, and appendices A and C identify \"rollback-failed\" as an error-tag to be used when the \"Request to roll back some configuration change (via rollback-on-error or <discard-changes> operations) was not completed for some reason.\"\r\n\r\nThis change clarifies that <discard-changes> requires an <rpc-reply>.", "submit_date": "2018-06-11", "submitter_name": "Jonathan Hansford", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-18 18:34:13"}, {"errata_id": "5455", "doc-id": "RFC7664", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "The Commit Exchange consists of an exchange of data that is the\r\n   output of the random function, H(), the key confirmation key, and the\r\n   two scalars and two elements exchanged in the Commit Exchange.", "correct_text": "The Confirm Exchange consists of an exchange of data that is the\r\n   output of the random function, H(), the key confirmation key, and the\r\n   two scalars and two elements exchanged in the Commit Exchange.", "notes": "The sentence is explaining what will be exchanged in the Confirm Exchange but incorrectly calls it the Commit Exchange (seems like an editorial oversight)", "submit_date": "2018-08-12", "submitter_name": "Darshak Thakore", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5456", "doc-id": "RFC1123", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.2.5", "orig_text": "                 This is required because of the long delay after a TCP\r\n                 connection is closed until its socket pair can be\r\n                 reused, to allow multiple transfers during a single FTP\r\n                 session.  Sending a port command can avoided if a\r\n                 transfer mode other than stream is used, by leaving the\r\n                 data transfer connection open between transfers.", "correct_text": "                 This is required because of the long delay after a TCP\r\n                 connection is closed until its socket pair can be\r\n                 reused, to allow multiple transfers during a single FTP\r\n                 session.  Sending a port command can be avoided if a\r\n                 transfer mode other than stream is used, by leaving the\r\n                 data transfer connection open between transfers.", "notes": "The verb is missing in the last sentence.\r\n\"Sending a port command can avoided...\"", "submit_date": "2018-08-12", "submitter_name": "David LAMBERT", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7139", "doc-id": "RFC8659", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   parameters = (parameter *WSP \";\" *WSP parameters) / parameter\r\n   parameter = tag *WSP \"=\" *WSP value\r\n   tag = (ALPHA / DIGIT) *( *(\"-\") (ALPHA / DIGIT))\r\n   value = *(%x21-3A / %x3C-7E)", "correct_text": "   parameters = (parameter *WSP \";\" *WSP parameters) / parameter\r\n   parameter = parameter-tag *WSP \"=\" *WSP parameter-value\r\n   parameter-tag = (ALPHA / DIGIT) *( *(\"-\") (ALPHA / DIGIT))\r\n   parameter-value = *(%x21-3A / %x3C-7E)", "notes": "1. Original text uses \"tag\" and \"value\" in the ABNF is ambiguous or conflicting with the usage of \"tag\" and \"value\" in terms \"Property Tag\" and \"Property Value\" (which are in the main CAA context).\r\n\r\n2. The text for \"tag\" (meaning Property Tag) in 4.1.1 reads:\r\n\r\n   Tag:  A non-zero-length sequence of ASCII letters and numbers in\r\n      lowercase.\r\n\r\n3. The Tag definition above does not have an ABNF definition. This can (and does) lead to confusion for implementers.\r\n\r\nThe above change to the ABNF removes the ambiguity, without changing the meaning of the ABNF itself.", "submit_date": "2022-09-02", "submitter_name": "Brian Dickson", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:40:33"}, {"errata_id": "6200", "doc-id": "RFC7836", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "where m and q are the parameters of an elliptic curve defined in the\r\nGOST R 34.10-2012 [GOST3411-2012] standard (m is an elliptic curve\r\npoints group order, q is an order of a cyclic subgroup), P is a non-\r\nzero point of the subgroup; P is defined by a protocol.", "correct_text": "where m and q are the parameters of an elliptic curve defined in the\r\nGOST R 34.10-2012 [GOST3411-2012] standard (m is an elliptic curve\r\npoints group order, q is an order of a cyclic subgroup), P is a non-\r\nzero point of the subgroup; P is defined by a specification of an elliptic\r\ncurve or by a protocol. Note that in most practical cases the private key\r\ny is unknown so the point (y*P) is just a pair of coordinates, which\r\nMUST be checked for satisfying the curve equation before calculating\r\nthe K value.", "notes": "The proposed text clarifies the P point specification ways and the need to check the public key of one side for belonging to the elliptic curve used by the opposite side.", "submit_date": "2020-06-03", "submitter_name": "Billy Brumley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-07-01 10:45:16"}, {"errata_id": "5390", "doc-id": "RFC8224", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12.1", "orig_text": "When signing a request that contains a fingerprint of keying material\r\nin SDP for DTLS-SRTP [RFC5763], this mechanism always provides a\r\nsignature over that fingerprint. \r\n", "correct_text": "When signing a request that contains a fingerprint\r\nof keying material in SDP, this mechanism always \r\nprovides a signature over that fingerprint. \r\n", "notes": "Attack vector described in 12.1 to justify addition of \"mky\" is applicable for scenarios, where a fingerprint in SDP is used for reasons other than DTLS-STRP as well. \r\nUse of fingerprint for MSRP per RFCRFC4975 is an example of this.\r\n\r\nFrom RFC4975:\r\n\r\n14.4.  Using TLS in Peer-to-Peer Mode\r\n\r\n   TLS can be used with a self-signed certificate as long as there is a\r\n   mechanism for both sides to ascertain that the other side used the\r\n   correct certificate.  When used with SDP and SIP, the correct\r\n   certificate can be verified by passing a fingerprint of the\r\n   certificate in the SDP and ensuring that the SDP has suitable\r\n   integrity protection.  When SIP is used to transport the SDP, the\r\n   integrity can be provided by the SIP Identity mechanism [17].  The\r\n   rest of this section describes the details of this approach.\n --VERIFIER NOTES-- \n   ", "submit_date": "2018-06-14", "submitter_name": "Invalid restriction on when to add \"mky\"", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 21:09:09"}, {"errata_id": "5391", "doc-id": "RFC8224", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "      Third, the JSON key \"iat\" MUST appear.  The authentication service\r\n      SHOULD set the value of \"iat\" to an encoding of the value of the\r\n      SIP Date header field as a JSON NumericDate (as UNIX time, per\r\n      [RFC7519], Section 2), though an authentication service MAY set\r\n      the value of \"iat\" to its own current clock time.  If the\r\n      authentication service uses its own clock time, then the use of\r\n      the full form of PASSporT is REQUIRED.  In either case, the\r\n      authentication service MUST NOT generate a PASSporT for a SIP\r\n      request if the Date header is outside of its local policy for\r\n      freshness (sixty seconds is RECOMMENDED).\r\n", "correct_text": "\u201c4.1 PASSPorT Construction\u201d:\r\n\r\nThird, the JSON key \"iat\" MUST appear. \r\nThe authentication service SHOULD set the \r\nvalue of \"iat\" to an encoding of the value of \r\nJWT generation as a JSON NumericDate \r\n(as UNIX time, per [RFC7519], Section 2).\r\n", "notes": "RFC7519 JSON Web Token (JWT)\r\n \r\n4.1.6.  \"iat\" (Issued At) Claim\r\n \r\n   The \"iat\" (issued at) claim identifies the time at which the JWT was\r\n   issued.  This claim can be used to determine the age of the JWT.  Its\r\n   value MUST be a number containing a NumericDate value.  Use of this\r\n   claim is OPTIONAL.\r\n \r\nThis text clearly states that \u201ciat\u201d is for the generation time of JWS. \r\n\r\nOne may argue that origination of SIP dialog - on which Date header content is based - and JWT generation times would be very close to each other but this is not always true. JWT, for example, can be added only at administrative boundaries and a session may have started long before that,e .g. it involves user interaction with an IVR for announcement/PIN verification. \r\n\r\nIt should be noted that populating \"iat\" with JWT issuance time makes use of complete form mandatory. So, if this errata is accepted, there probably would be a need to remove compact form as an option.\r\n\r\nSee related: https://www.rfc-editor.org/errata/eid5392", "submit_date": "2018-06-14", "submitter_name": "Invalid content for \"iat\"", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 21:02:49"}, {"errata_id": "5392", "doc-id": "RFC8225", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": " \r\n   The JSON claim MUST include the \"iat\" (Issued At) claim ([RFC7519],\r\n   Section 4.1.6).  As defined, the \"iat\" claim should be set to the\r\n   date and time of issuance of the JWT and MUST indicate the date and\r\n   time of the origination of the personal communications.  The time\r\n   value should be of the NumericDate format as defined in [RFC7519],\r\n   Section 2.  This is included for securing the token against replay\r\n   and cut-and-paste attacks, as explained further in Section 10\r\n   (\"Security Considerations\").\r\n \r\n", "correct_text": "The JSON claim MUST include the \"iat\" (Issued At) \r\nclaim ([RFC7519], Section 4.1.6).  As defined, the \r\n\"iat\" claim should be set to the date and time of \r\nissuance of the JWT. The time value should be of the \r\nNumericDate format as defined in [RFC7519], Section 2. \r\nThis is included for securing the token against replay \r\nand cut-and-paste attacks, as explained further in \r\nSection 10 (\"Security Considerations\").", "notes": "It is mentioned that \u201ciat\u201d should be set based on issuance of JWT (which would be when PASSPorT is constructed). OTOH, it is also stated that it MUST indicate the date and time of the origination of the personal communication. The former seems to be  the right approach as what we would like to protect against cut-and-paste attacks is the PASSPorT in the context of a particular communication session. The times for these two events are not necessarily the same/close enough to be considered the same.\r\n\r\nRFC7519 JSON Web Token (JWT)\r\n \r\n4.1.6.  \"iat\" (Issued At) Claim\r\n \r\n   The \"iat\" (issued at) claim identifies the time at which the JWT was\r\n   issued.  This claim can be used to determine the age of the JWT.  Its\r\n   value MUST be a number containing a NumericDate value.  Use of this\r\n   claim is OPTIONAL.\r\n \r\nThis text clearly states that \u201ciat\u201d is for the generation time of JWS.", "submit_date": "2018-06-14", "submitter_name": "Invalid \"iat\" content", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 20:29:05"}, {"errata_id": "5393", "doc-id": "RFC7976", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "3.  Updates to RFC 7315\r\n\r\n   This section implements the update to Section 5.7 of RFC 7315, in\r\n   order to implement the misalignment fixes and the 3GPP requirements\r\n   described in Section 2.\r\n\r\n   Old text:\r\n\r\n   The P-Associated-URI header field can appear in SIP REGISTER method\r\n   and 2xx resonses [sic].  The P-Called-Party-ID header field can\r\n   appear in SIP INVITE, OPTIONS, PUBLISH, SUBSCRIBE, and MESSAGE\r\n   methods and all responses.  The P-Visited-Network-ID header field can\r\n   appear in all SIP methods except ACK, BYE, and CANCEL and all\r\n   responses.  The P-Access-Network-Info header field can appear in all\r\n   SIP methods except ACK and CANCEL.  The P-Charging-Vector header\r\n   field can appear in all SIP methods except CANCEL.  The\r\n   P-Charging-Function-Addresses header field can appear in all SIP\r\n   methods except ACK and CANCEL.\r\n\r\n   New text:\r\n\r\n   The P-Associated-URI header field can appear in SIP REGISTER 2xx\r\n   responses.  The P-Called-Party-ID header field can appear in the SIP\r\n   INVITE, OPTIONS, PUBLISH, REFER, SUBSCRIBE, and MESSAGE methods.  The\r\n   P-Visited-Network-ID header field can appear in all SIP methods\r\n   except ACK, BYE, CANCEL, NOTIFY, PRACK, INFO, and UPDATE.  The\r\n   P-Access-Network-Info header field can appear in all SIP methods and\r\n   non-100 responses, except in CANCEL methods, CANCEL responses, and\r\n   ACK methods triggered by non-2xx responses.  The P-Charging-Vector\r\n   header field can appear in all SIP methods and non-100 responses,\r\n   except in CANCEL methods, CANCEL responses, and ACK methods triggered\r\n   by non-2xx responses.  The P-Charging-Function-Addresses header field\r\n   can appear in all SIP methods and non-100 responses, except in CANCEL\r\n   methods, CANCEL responses, and ACK methods.", "correct_text": "3.  Updates to RFC 7315\r\n\r\n   This section implements the update to Section 5.7 of RFC 7315, in\r\n   order to implement the misalignment fixes and the 3GPP requirements\r\n   described in Section 2.\r\n\r\n   Old text:\r\n\r\n   The P-Associated-URI header field can appear in SIP REGISTER method\r\n   and 2xx resonses [sic].  The P-Called-Party-ID header field can\r\n   appear in SIP INVITE, OPTIONS, PUBLISH, SUBSCRIBE, and MESSAGE\r\n   methods and all responses.  The P-Visited-Network-ID header field can\r\n   appear in all SIP methods except ACK, BYE, and CANCEL and all\r\n   responses.  The P-Access-Network-Info header field can appear in all\r\n   SIP methods except ACK and CANCEL.  The P-Charging-Vector header\r\n   field can appear in all SIP methods except CANCEL.  The\r\n   P-Charging-Function-Addresses header field can appear in all SIP\r\n   methods except ACK and CANCEL.\r\n\r\n   New text:\r\n\r\n   The P-Associated-URI header field can appear in SIP REGISTER 2xx\r\n   responses.  The P-Called-Party-ID header field can appear in the SIP\r\n   INVITE, OPTIONS, PUBLISH, REFER, SUBSCRIBE, and MESSAGE methods.  The\r\n   P-Visited-Network-ID header field can appear in all SIP methods\r\n   except ACK, BYE, CANCEL, NOTIFY, PRACK, INFO, and UPDATE and all\r\n   responses exept 100.  The\r\n   P-Access-Network-Info header field can appear in all SIP methods and\r\n   non-100 responses, except in CANCEL methods, CANCEL responses, and\r\n   ACK methods triggered by non-2xx responses.  The P-Charging-Vector\r\n   header field can appear in all SIP methods and non-100 responses,\r\n   except in CANCEL methods, CANCEL responses, and ACK methods triggered\r\n   by non-2xx responses.  The P-Charging-Function-Addresses header field\r\n   can appear in all SIP methods and non-100 responses, except in CANCEL\r\n   methods, CANCEL responses, and ACK methods.", "notes": "The Third Generation Partnership Project (3GPP) has identified cases\r\n   where the private header field P-Visited-Network-ID SIP private\r\n   header extensions, which is defined in RFC 7315 and updated by RFC\r\n   7976, needs to be included in SIP requests and responses.  This\r\n   eratta updates RFC 7976, in order to allow inclusion of the P-\r\n   Visited-Network-ID header field in responses exept 100.\r\nThe issue was also discussed within a 3GPP - IETF coordination meeting.", "submit_date": "2018-06-15", "submitter_name": "Roland Jesske", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5394", "doc-id": "RFC7749", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.33.3", "orig_text": "   Note that the file extension is not part of the draft, so in general\r\n   it should end with the current draft number (\"-\", plus two digits).\r\n", "correct_text": "   Note that the file extension is not part of the draft name, so in\r\n   general it should end with the current draft number (\"-\", plus two\r\n   digits).\r\n", "notes": "replace \"draft\" by \"draft name\"", "submit_date": "2018-06-15", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2024-01-11 16:37:41"}, {"errata_id": "5395", "doc-id": "RFC7672", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.1", "orig_text": "   DNS records that would be\r\n   classified \"indeterminate\" in the sense of [RFC4035] are simply\r\n   classified as \"insecure\".", "correct_text": "   DNS records that would be\r\n   classified \"indeterminate\" in the sense of [RFC4033] are simply\r\n   classified as \"insecure\".", "notes": "", "submit_date": "2018-06-16", "submitter_name": "Matt McCutchen", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6278", "doc-id": "RFC8610", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "BCHAR = %x20-26 / %x28-5B / %x5D-10FFFD / SESC / CRLF\r\n", "correct_text": "BCHAR = %x20-26 / %x28-5B / %x5D-7E / %x80-10FFFD / SESC / CRLF\r\n", "notes": "Between draft 6 and 7 of the RFC, the ASCII DELETE character 0x7F was excluded from the character set allowed in text literals.  I believe it should also be excluded from the character set of bytestring literals.\r\n\r\nA 0x7F byte could not be decoded if included in a hex or base64 bytestring, leaving only UTF-8 bytestrings.  Since there is no discussion in the text of any reason to allow this character in a UTF-8 bytestring when it was not allowed in a UTF-8 text string, I suspect this was an oversight.\r\n\r\n===== Verifier notes =====\r\nIt was, indeed, an oversight, but discussion on the CBOR working group list shows that the proper fix is not straightforward, and that it should be handled in the next version of the spec.", "submit_date": "2020-09-04", "submitter_name": "Eric Seppanen", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-09-04 19:24:34"}, {"errata_id": "5396", "doc-id": "RFC4928", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Section 2", "orig_text": "   A less obvious case is when the packets of a given flow happen to\r\n   have constant values in the fields upon which IP ECMP would be\r\n   performed.  For example, if an Ethernet frame immediately follows the\r\n   label and the LSR does ECMP on IPv4, but does not do ECMP on IPv6,\r\n   then either the first nibble will be 0x4, or it will be something\r\n   else.  If the nibble is not 0x4 then no IP ECMP is performed, but\r\n   Label ECMP may be performed.  If it is 0x4, then the constant values\r\n   of the MAC addresses overlay the fields that would have been occupied\r\n   by the source and destination addresses of an IP header.  In this\r\n   case, the input to the ECMP algorithm would be a constant value and\r\n   thus the algorithm would always return the same result.", "correct_text": "<This paragraph should be removed>", "notes": "The example stated here seems incorrect. It talks about an L2VPN case where Ethernet frame starts immediately after the last label in the stack. But had it been an IP packet instead, the same initial 12 bytes, which is the place for MAC addresses in an Ethernet Frame, would not be the place of IP addresses, as IP addresses are placed at the end of 20-byte IP header (not start). Hence it would still be subjected to ECMP if precautions (as recommended in this RFC) are not been followed.\n --VERIFIER NOTES-- \n   This should be addressed by the working group (e.g., updating or revising the RFC).", "submit_date": "2018-06-18", "submitter_name": "Jitendra Kumar Sharma", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 22:07:08"}, {"errata_id": "5779", "doc-id": "RFC7030", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "A.4", "orig_text": " Because the DecryptKeyIdentifier attribute is not included in this\r\n   request, the response does not include additional encryption beyond\r\n   the TLS session.  The EST server response is:\r\n\r\n   HTTP/1.1 200 OK\r\n   Status: 200 OK\r\n   Content-Type: multipart/mixed ; boundary=estServerExampleBoundary\r\n   Content-Length: 3219\r\n\r\n   This is the preamble.  It is to be ignored, though it\r\n   is a handy place for estServer to include an explanatory note,\r\n   including contact or support information.\r\n   --estServerExampleBoundary\r\n   Content-Type: application/pkcs8\r\n   Content-Transfer-Encoding: base64", "correct_text": " Because the DecryptKeyIdentifier attribute is not included in this\r\n   request, the response does not include additional encryption beyond\r\n   the TLS session.  The EST server response is:\r\n\r\n   HTTP/1.1 200 OK\r\n   Status: 200 OK\r\n   Content-Type: multipart/mixed; boundary=estServerExampleBoundary\r\n   Content-Length: 3219\r\n\r\n   This is the preamble.  It is to be ignored, though it\r\n   is a handy place for estServer to include an explanatory note,\r\n   including contact or support information.\r\n   --estServerExampleBoundary\r\n   Content-Type: application/pkcs8\r\n   Content-Transfer-Encoding: base64", "notes": "Content-Type: multipart/mixed ; boundary=estServerExampleBoundary\r\n\r\nThe ; has a space, believe it or not, we implemented it that way.\r\n\r\nContent-Type: multipart/mixed; boundary=estServerExampleBoundary\n --VERIFIER NOTES-- \n  per Ben Kaduk:   https://tools.ietf.org/html/rfc7231#section-3.1.1.1 says\r\n       media-type = type \"/\" subtype *( OWS \";\" OWS parameter )\r\nwhich would seem to allow for whitespace before the semicolon.", "submit_date": "2019-07-13", "submitter_name": "Simon Ed\u00e4nge", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:20:47"}, {"errata_id": "5780", "doc-id": "RFC6130", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "F.3", "orig_text": "   The content of the Interface Information Base is in this case\r\n   identical to than in Example 1, except that the 2-Hop Set contains an\r\n   extra 2-Hop Tuple with N2_neighbor_iface_addr_list being {2} and\r\n   N2_2hop_addr being {4}.  These two 2-Hop Tuples are illustrated by\r\n   the two lines from {2} to {3} and (2) to {4}, respectively.\r\n", "correct_text": "   The content of the Interface Information Base is in this case\r\n   identical to than in Example 1, except that the 2-Hop Set contains an\r\n   extra 2-Hop Tuple with N2_neighbor_iface_addr_list being {2} and\r\n   N2_2hop_addr being {4}.  These two 2-Hop Tuples are illustrated by\r\n   the two lines from {2} to {3} and {2} to {4}, respectively.\r\n", "notes": "Parentheses are mistakenly typed.  s/(2)/{2}", "submit_date": "2019-07-14", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5781", "doc-id": "RFC7991", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Hdr & Abstra", "orig_text": "Header: Obsoletes: 7749\r\n\r\nAnd, in the Abstract: \r\n\r\nThis document obsoletes the v2 grammar described in RFC 7749.", "correct_text": "Header: remove the \"Obsoletes\" line\r\n\r\nAbstract: \r\n\r\nThis new version of the syntax is expected to supersede the v2 grammar\r\ndescribed in RFC 7749 and has started to do so.", "notes": "The norm in the IETF is that is one document obsoletes another, we treat the obsoleted document as dead and no longer to be referenced.   But xml2rfc v2 is very much not obsolete and won't be obsolete until v3 is fully deployed, I-Ds are __no longer__ being prepared and passed to the submission tool in v2, and the RFC Editor stops accepting v2 files when a document is transferred to them from a Stream manager.\r\n\r\nWe should accurately describe the status of documents, not anticipate the future, especially while the most common practice _in the IETF_ is still to use the prior version and its syntax.\n --VERIFIER NOTES-- \nAn RFC can obsolete another RFC without moving the RFC to historic. This is also what is done for newer versions of certain protocols like e.g. TLS.", "submit_date": "2019-07-14", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind (RSAB chair)", "update_date": "2024-03-13 17:52:16"}, {"errata_id": "7140", "doc-id": "RFC6637", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "-", "correct_text": "Updates: 4480", "notes": "RFC 6637 updates RFC 4880 (adds algorithms to OpenPGP), but it does not contain \"Updates: 4480\" in the header.\r\nRFC 5581, that does also add algorithms to OpenPGP provides this link.\r\n\r\nPeople might miss this update when reading RFC 4880.", "submit_date": "2022-09-27", "submitter_name": "Christoph Gr\u00fcninger", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5782", "doc-id": "RFC8272", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |E|E| SetID |        Length     | Sequence      | Ext. Sequenz  |\r\n    |1|2|Lookup |                   | Number        |  Number       |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n      Figure 9: TinyIPFIX Message Header Format if E1 = 0 and E2 = 1\r\n\r\n     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |1|1| SetID |        Length     | Sequence      | Ext. Sequenz  |\r\n    | | |Lookup |                   | Number        |  Number       |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    | Ext. SetID    |\r\n    +-+-+-+-+-+-+-+-+\r\n\r\n      Figure 10: TinyIPFIX Message Header Format if E1 = E2 = 1", "correct_text": "     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |0|1| SetID |        Length     | Sequence      | Ext. Sequence |\r\n    | | |Lookup |                   | Number        |  Number       |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n      Figure 9: TinyIPFIX Message Header Format if E1 = 0 and E2 = 1\r\n\r\n     0                   1                   2                   3\r\n     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    |1|1| SetID |        Length     | Sequence      | Ext. Sequence |\r\n    | | |Lookup |                   | Number        |  Number       |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n    | Ext. SetID    |\r\n    +-+-+-+-+-+-+-+-+\r\n\r\n      Figure 10: TinyIPFIX Message Header Format if E1 = E2 = 1", "notes": "Figure 9: In Figures 7,8,10 E1 and E2 is replaced with the actual values (can be seen in Figure 10 in the submission; 1,1), while in Figure 9 this was missed (probably copy-paste-error): Is E1, E2; should be 0, 1\r\n\r\nFigure 9 and Figure 10: In the rest of the RFC and all the other figures, the field is called \"Ext. Sequence Number\" and not \"Ext. Sequenz Number\" (Looks like a translation error).", "submit_date": "2019-07-15", "submitter_name": "Gernot Vormayr", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5398", "doc-id": "RFC7970", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.29.2", "orig_text": "   The AlternativeIndicatorID class lists alternative identifiers for an\r\n   indicator.\r\n   \r\n   +-------------------------+\r\n   | AlternativeIndicatorID  |\r\n   +-------------------------+\r\n   | ENUM restriction        |<>--{1..*}--[ IndicatorReference ]\r\n   | STRING ext-restriction  |\r\n   +-------------------------+\r\n\r\n                Figure 61: The AlternativeIndicatorID Class\r\n\r\n   The aggregate class of the AlternativeIndicatorID class is:\r\n\r\n   IndicatorReference\r\n      One or more.  A reference to an indicator.  See Section 3.29.7.\r\n\r\n   The attributes of the AlternativeIndicatorID class are:\r\n\r\n   restriction\r\n      Optional.  ENUM.  See Section 3.3.1.\r\n\r\n   ext-restriction\r\n      Optional.  STRING.  A means by which to extend the restriction\r\n      attribute.  See Section 5.1.1.\r\n", "correct_text": "   \r\n   The AlternativeIndicatorID class lists alternative identifiers for an\r\n   indicator.\r\n   \r\n   +-------------------------+\r\n   | AlternativeIndicatorID  |\r\n   +-------------------------+\r\n   | ENUM restriction        |<>--{1..*}--[ IndicatorID ]\r\n   | STRING ext-restriction  |\r\n   +-------------------------+\r\n\r\n                Figure 61: The AlternativeIndicatorID Class\r\n\r\n   The aggregate class of the AlternativeIndicatorID class is:\r\n\r\n   IndicatorID\r\n      One or more.  An alternative ID for the indicator. \r\n      See Section 3.29.1.\r\n\r\n   The attributes of the AlternativeIndicatorID class are:\r\n\r\n   restriction\r\n      Optional.  ENUM.  See Section 3.3.1.\r\n\r\n   ext-restriction\r\n      Optional.  STRING.  A means by which to extend the restriction\r\n      attribute.  See Section 5.1.1.", "notes": "Change: Update Section 3.29.1 to show that AlternativeIndicatorID contains IndicatorIDs, not IndicatorReferences. \r\n\r\nFrom the notations part of the introduction (Section 1.2), the UML diagrams in Section 3 are non-normative, and the \"IODEF Data Model (XML Schema)\" in Section 8 is normative. \r\nIf my understanding of the text is correct, this means that if the UML diagrams conflict with the schema in Section 8, the schema in Section 8 is correct, and the UML diagrams must be changed to align with the schema in Section 8.\r\n\r\nPage 153 of the document contains the (normative) AlternativeIndicatorID schema from Section 8:\r\n\r\n   <xs:element name=\"AlternativeIndicatorID\">\r\n      <xs:complexType>\r\n        <xs:sequence>\r\n          <xs:element ref=\"iodef:IndicatorID\" maxOccurs=\"unbounded\"/>\r\n        </xs:sequence>\r\n        <xs:attribute name=\"restriction\"\r\n                      type=\"iodef:restriction-type\" use=\"optional\"/>\r\n        <xs:attribute name=\"ext-restriction\"\r\n                      type=\"xs:string\" use=\"optional\"/>\r\n      </xs:complexType>\r\n    </xs:element>\r\n    \r\nFrom the above schema, the AlternativeIndicatorID is a sequence of IndicatorID, not the sequence of IndicatorReference implied by Section 3.29.2 (Figure 61 and the accompanying text).  Thus, if I understand the document correctly, Section 3.29.2 must be changed to something more like the \"Corrected Text\" in this report.", "submit_date": "2018-06-19", "submitter_name": "Logan Widick", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5399", "doc-id": "RFC8311", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "(n/a, this errata adds an additional IANA Consideration)", "correct_text": "To reflect the experimental use of ECT(1) envisioned by this memo,\r\nIANA has added the following footnote to the ECN Field registry\r\n<https://www.iana.org/assignments/dscp-registry/\r\ndscp-registry.xhtml#ecn-field>:\r\n\r\nECT(1) is for experimental use only [RFC8311, Section 4.2]\r\n", "notes": "The Corrected Text is written as if IANA has already added the footnote, which will be done upon approval of this errata, citing this approved errata as justification.\r\n\r\n(From Spencer - this could have been Held for Document Update, but I think Verified is just about as correct)", "submit_date": "2018-06-19", "submitter_name": "David Black", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5400", "doc-id": "RFC8400", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "IETF Review [8216]", "correct_text": "IETF Review [8126]", "notes": "This looks like a simple typo.  RFC 8216 is \"HTTP Live Streaming\"; the intent seems to be \"Guidelines for Writing an IANA Considerations Section in RFCs\".", "submit_date": "2018-06-21", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5401", "doc-id": "RFC6241", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.9.1", "orig_text": "   The XPath expression MUST return a node set.  If it does not return a\r\n   node set, the operation fails with an \"invalid-value\" error.", "correct_text": "   The XPath expression MUST return a node set.  If it does not return a\r\n   node set, the operation fails with an <error-tag> value of \r\n   \"invalid-value\".", "notes": "It is unclear what is the meaning of \"invalid-value\" \"error\". Since the xpath will be part of \"select\" attribute, we can assume that a server can return a \"bad-attribute\" error-tag and having error-message indicating invalid-value for the attribute. This clarifies the <error-tag> to be used in such cases.\r\nIn other places, where error-tag has been mentioned, it is clear that \"invalid-value\" <error-tag> must be used.", "submit_date": "2018-06-21", "submitter_name": "Rohit R Ranade", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-18 19:39:15"}, {"errata_id": "5402", "doc-id": "RFC8326", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "C.2.2.", "orig_text": "      4.  If, for any reason, RR3 processes the withdraw generated in\r\n          step 3 before processing the update generated in step 2, RR3\r\n          transiently suffers from unreachability for the affected\r\n          prefix.", "correct_text": "      4.  If, for any reason, RR2 processes the withdraw generated in\r\n          step 3 before processing the update generated in step 2, RR2\r\n          transiently suffers from unreachability for the affected\r\n          prefix.", "notes": "The original text names RR3, but it should be RR2. This becomes evident when one works through the example using a diagram.", "submit_date": "2018-06-21", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5403", "doc-id": "RFC8138", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2.3.", "orig_text": "This is encoded as S/DAC = 1 and S/AM=11.", "correct_text": "This is encoded as S/DAC = 1 and S/DAM=11.", "notes": "The corrected part refers to SAM and DAM defined in Section 3.1.1 of RFC 6282 (https://tools.ietf.org/html/rfc6282#section-3.1.1)", "submit_date": "2018-06-21", "submitter_name": "Yasuyuki Tanaka", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5404", "doc-id": "RFC1606", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Routing", "orig_text": "vendor to do remote diagnostics on discreet elements of the device. \r\n\r\n", "correct_text": "vendor to do remote diagnostics on discrete elements of the device. \r\n\r\n", "notes": "The document uses the word \"discreet\" where it ought to say \"discrete\"", "submit_date": "2018-06-22", "submitter_name": "Nick Hudson", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-14 22:16:50"}, {"errata_id": "5407", "doc-id": "RFC7530", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "16.36", "orig_text": "The write\r\n   verifier is a cookie that the client can use to determine whether the\r\n   server has changed instance (boot) state between a call to WRITE and\r\n   a subsequent call to either WRITE or COMMIT.  This cookie must be\r\n   consistent during a single instance of the NFSv4 protocol service and\r\n   must be unique between instances of the NFSv4 protocol server, where\r\n   uncommitted data may be lost.", "correct_text": "The write\r\n   verifier is a cookie that the client can use to determine whether the\r\n   server has changed instance (boot) state between a call to WRITE and\r\n   a subsequent call to either WRITE or COMMIT.  This cookie must be\r\n   consistent during a single instance of the NFSv4 protocol service and\r\n   must be unique between instances of the NFSv4 protocol server, where\r\n   uncommitted data may be lost. The server implementation should not\r\n   assume that the cookie is on per file basis.", "notes": "Different NFS client implementation has chosen to interpret above statement differently. Semantically, it is correct to track cookie on per file basis since both WRITE and COMMIT happens on a single file handle. But, RFC wording says that the cookie should be maintained on a per server instance basis. Either way, I believe the RFC can be more clearer for both client and server implementer.", "submit_date": "2018-06-24", "submitter_name": "Viral Mehta", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5408", "doc-id": "RFC5984", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "The DPAUI sends a signal to the PPG (Deep Packet And User Inspection)", "correct_text": "The DPAUI sends a signal to the PPG (Precognitive Packet Generator)", "notes": "Incorrect expansion of acronym is given.", "submit_date": "2018-06-25", "submitter_name": "micheal65536", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5409", "doc-id": "RFC5246", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A.5", "orig_text": "   Note: The cipher suite values { 0x00, 0x1C } and { 0x00, 0x1D } are\r\n   reserved to avoid collision with Fortezza-based cipher suites in\r\n   SSL 3.", "correct_text": "   Note: The cipher suite values { 0x00, 0x1C } and { 0x00, 0x1D } are\r\n   reserved to avoid collision with Fortezza-based cipher suites in\r\n   SSL 3. The cipher suite value { 0x00, 0x1E } firstly also assigned to\r\n   Fortezza has been released and has since been be reassigned. ", "notes": "RFC 2712 (Addition of Kerberos Cipher Suites to Transport Layer Security) in its Draft 01 version introduces three new cipher suites colliding with the three Fortezza ones. The Draft 02 version partially corrects that, by moving the Kerberos cipher suites values by two.\r\nThis omission of the third cipher suite has never been corrected, and this remains in the same state in the final RFC 2712, RFC 2246 and its successors including this one.\r\n\r\nChanging the first Kerberos cipher suite value, or moving all of them, would now not make any sense. Enhancing the note as suggested is probably enough to mention how one Fortezza cipher suite disappeared.\n --VERIFIER NOTES-- \n   RFC 5246 is not the appropriate location to document this conflict.", "submit_date": "2018-06-26", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5410", "doc-id": "RFC2388", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   As with other multipart types, a boundary is selected that does not\r\n   occur in any of the data. Each field of the form is sent, in the\r\n   order defined by the sending appliction and form, as a part of the\r\n   multipart stream.  Each part identifies the INPUT name within the\r\n   original form. Each part should be labelled with an appropriate\r\n   content-type if the media type is known (e.g., inferred from the file\r\n   extension or operating system typing information) or as\r\n   \"application/octet-stream\".", "correct_text": "   As with other multipart types, a boundary is selected that does not\r\n   occur in any of the data. Each field of the form is sent, in the\r\n   order defined by the sending application and form, as a part of the\r\n   multipart stream.  Each part identifies the INPUT name within the\r\n   original form. Each part should be labelled with an appropriate\r\n   content-type if the media type is known (e.g., inferred from the file\r\n   extension or operating system typing information) or as\r\n   \"application/octet-stream\".", "notes": "A typo is present in the second sentence, the word \"appliction\" should be \"application\".\r\n\r\nAlexey: why this is correct, this is unlikely to get readers confused. So marking it as \"held for document update\".", "submit_date": "2018-06-26", "submitter_name": "S\u00e9bastien Puyet", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5411", "doc-id": "RFC3996", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.2", "orig_text": "     Table 4.  Additional Attributes in Event Notification Content for\r\n                                Job Events\r\n\r\n   Source Value                                  Sends  Source Object\r\n\r\n   job-id (integer(1:MAX))                       MUST   Job\r\n   job-state (type1 enum)                        MUST   Job\r\n", "correct_text": "     Table 4.  Additional Attributes in Event Notification Content for\r\n                                Job Events\r\n\r\n   Source Value                                  Sends  Source Object\r\n\r\n   notify-job-id (integer(1:MAX))                MUST   Job\r\n   job-state (type1 enum)                        MUST   Job\r\n", "notes": "The notify-job-id attribute [RFC3995] contains the subscribed Job identifier.", "submit_date": "2018-06-26", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5412", "doc-id": "RFC2428", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "References", "orig_text": "[AO98]   Allman, M., and S. Ostermann, \"FTP Security\r\n         Considerations\", Work in Progress.", "correct_text": "[AO98]   Allman, M., and S. Ostermann, \"FTP Security\r\n         Considerations\", adopted as RFC 2577.", "notes": "Time has moved on, and a WIP became an RFC; this change makes it easer for the reader to cross reference.\r\n\r\n\r\n\n --VERIFIER NOTES-- \n Errata reports are intended only for errors at the time of publication (RFC 2577 was not published until May 1999). \r\n\r\nA future update of RFC 2428 can resolve this by pointing to the following as a reference entry:\r\n\r\n[RFC2577] Allman, M. and S. Ostermann, \"FTP Security Considerations\", RFC 2577, DOI 10.17487/RFC2577, May 1999, <https://www.rfc-editor.org/info/rfc2577>.\r\n", "submit_date": "2018-06-27", "submitter_name": "Igor Mozolevsky", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5418", "doc-id": "RFC8398", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "   This non-normative example demonstrates using SmtpUTF8Mailbox as an\r\n   otherName in GeneralName to encode the email address\r\n   \"u+8001u+5E2B@example.com\".\r\n\r\n      The hexadecimal DER encoding of the email address is:\r\n      A022060A 2B060105 05070012 0809A014 0C12E880 81E5B8AB 40657861\r\n      6D706C65 2E636F6D\r\n\r\n      The text decoding is:\r\n        0  34: [0] {\r\n        2  10:   OBJECT IDENTIFIER '1 3 6 1 5 5 7 0 18 8 9'\r\n       14  20:   [0] {\r\n       16  18:     UTF8String '..@example.com'\r\n             :     }\r\n             :   }\r\n\r\n                                 Figure 2\r\n\r\n   The example was encoded on the OSS Nokalva ASN.1 Playground and the\r\n   above text decoding is an output of Peter Gutmann's \"dumpasn1\"\r\n   program.\r\n", "correct_text": "   This non-normative example demonstrates using SmtpUTF8Mailbox as an\r\n   otherName in GeneralName to encode the email address\r\n   \"u+533Bu+751F@u+5927u+5B66.example.com\".\r\n\r\n   The hexadecimal DER encoding of the block is:\r\n   a0330608 2b060105 05070809 a0270c25 c3a5c28c c2bbc3a7 c294c29f \r\n   40c3a5c2 a4c2a7c3 a5c2adc2 a62e6578 616d706c 652e636f 6d\r\n\r\n\r\n   The text decoding is:\r\n     2  51: [0] {\r\n     4   8:   OBJECT IDENTIFIER '1 3 6 1 5 5 7 8 9'\r\n    14  39:   [0] {\r\n    16  37:     UTF8String '..@...example.com'\r\n          :     }\r\n          :   }\r\n\r\n                                 Figure 2\r\n\r\n   The example was encoded on the OSS Nokalva ASN.1 Playground and the\r\n   above text decoding is an output of Peter Gutmann's \"dumpasn1\"\r\n   program.", "notes": "The OID used in Appendix B does not match the OID for id-on-SmtpUTF8Mailbox defined in \"Appendix A.  ASN.1 Module\" and is not mentioned anywhere in the RFC.\r\n\r\nPaul Wouters (AD): Note that it seems different versions of the dumpasn1 tool seem to handle non-ASCII characters in the output differently, so the tool output can slightly vary from the Reporter's corrected output. The OID correction has been verified by my and Russ Housley", "submit_date": "2018-07-11", "submitter_name": "Belyavskiy Dmitry", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 16:53:00"}, {"errata_id": "5413", "doc-id": "RFC3996", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "   The value of this attribute MUST be at least as large as that of the\r\n   Printer's \"ippget-event-life\" Printer Description attribute (see\r\n   section 8.1).  The Printer MAY return a value that is larger than\r\n   that of the \"ippget-event-life\" Printer Description attribute\r\n   provided that the Printer increases the Event Life for this\r\n   Subscription object so that Notification Recipients taking account of\r\n   the larger value and polling with a longer interval will not miss\r\n   events.  Note:  Implementing such an algorithm requires some hidden\r\n   attributes in the Subscription object that are IMPLEMENTATION\r\n   DEPENDENT.\r\n", "correct_text": "   If the value of this attribute is larger than that of the\r\n   \"ippget-event-life\" Printer Description attribute, the Printer MUST\r\n   increase the Event Life for this Subscription object so that\r\n   Notification Recipients taking account of the larger value and\r\n   polling with a longer interval will not miss events.  Note:\r\n   Implementing such an algorithm requires some hidden state in the\r\n   Subscription object that is IMPLEMENTATION DEPENDENT.\r\n", "notes": "The range of values allowed for the \"notify-get-interval\" attribute (0 to 2^31-1) is different from the \"ippget-event-life\" attribute (15 to 2^31-1), and implementations have ignored this requirement because it makes no sense. Furthermore, the use of MAY for larger values does not clearly capture the requirement to extend event lives in order to avoid missing notifications.", "submit_date": "2018-06-28", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5414", "doc-id": "RFC5321", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "Quoted-string  = DQUOTE *QcontentSMTP DQUOTE", "correct_text": "Quoted-string  = DQUOTE 1*QcontentSMTP DQUOTE", "notes": "As written, this allows for an email envelope recipient (Forward-path) with a NULL value for the local part of their address. This is a functional departure from similar wording in the preceding RFC 821, which defines quoted-string in such a way as to require at least one character that is not one of the surrounding quotation marks.", "submit_date": "2018-06-29", "submitter_name": "David Romerstein", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-13 20:49:30"}, {"errata_id": "7141", "doc-id": "RFC3891", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "section-7.1", "orig_text": "SIP/2.0 180 Ringing\r\n   To: <sip:bob@example.org>;tag=6472\r\n   From: <sip:alice@example.org>;tag=7743\r\n   Call-ID: 425928@phone.example.org\r\n   CSeq: 1 INVITE\r\n   Contact: <sip:bob@bobster.example.org>\r\n\r\n   Message *3: Bob in lab -> Alice\r\n\r\n   INVITE sip:alice@phone.example.org\r\n   To: <sip:alice@example.org>\r\n   From: <sip:bob@example.org>;tag=8983\r\n   Call-ID: 09870@labpc.example.org\r\n   CSeq: 1 INVITE\r\n   Contact: <sip:bob@labpc.example.org>\r\n   Replaces: 425928@phone.example.org\r\n    ;to-tag=7743;from-tag=6472;early-only", "correct_text": "SIP/2.0 180 Ringing\r\n   To: <sip:bob@example.org>;tag=6472\r\n   From: <sip:alice@example.org>;tag=7743\r\n   Call-ID: 425928@phone.example.org\r\n   CSeq: 1 INVITE\r\n   Contact: <sip:bob@bobster.example.org>\r\n\r\n   Message *3: Bob in lab -> Alice\r\n\r\n   INVITE sip:alice@phone.example.org\r\n   To: <sip:alice@example.org>\r\n   From: <sip:bob@example.org>;tag=8983\r\n   Call-ID: 09870@labpc.example.org\r\n   CSeq: 1 INVITE\r\n   Contact: <sip:bob@labpc.example.org>\r\n   Replaces: 425928@phone.example.org\r\n    ;to-tag=6472;from-tag=7743;early-only", "notes": "The To and From tags are mismatched in the Replaces header", "submit_date": "2022-09-28", "submitter_name": "Aaron Brumpton", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-09-29 20:31:42"}, {"errata_id": "5419", "doc-id": "RFC6857", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "From:\r\n   Sender:\r\n   To:\r\n   Cc:\r\n   Bcc:\r\n   Reply-To:\r\n   Resent-From:\r\n   Resent-Sender:\r\n   Resent-To:\r\n   Resent-Cc:\r\n   Resent-Bcc:\r\n   Resent-Reply-To:\r\n   Return-Path:\r\n   ^^^^^^^^^^^\r\n   Disposition-Notification-To:\r\n", "correct_text": "From:\r\n   Sender:\r\n   To:\r\n   Cc:\r\n   Bcc:\r\n   Reply-To:\r\n   Resent-From:\r\n   Resent-Sender:\r\n   Resent-To:\r\n   Resent-Cc:\r\n   Resent-Bcc:\r\n   Resent-Reply-To:\r\n   Disposition-Notification-To:\r\n", "notes": "Under RFC 5322 sec. 3.6.7, the Return-Path header field contains no production named \"address\", but at most a production named \"angle-addr\", which does not accept display names, for one.  An update to this RFC could discuss this header field in its own section.\r\n\r\nI agree with John Levine's comment on this:\r\nThis erratum is correct.  I would suggest hold for update, since it is not \r\nmy impression that this flavor of downgrade is used very much if at all.\r\n", "submit_date": "2018-07-13", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5420", "doc-id": "RFC7953", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   availabilityprop  = *(\r\n                    ;\r\n                    ; the following are REQUIRED\r\n                    ; but MUST NOT occur more than once\r\n                    ;\r\n                    dtstamp / uid\r\n                    ;\r\n                    ; the following are OPTIONAL\r\n                    ; but MUST NOT occur more than once\r\n                    ;\r\n                    busytype / class / created / description /\r\n                    dtstart / last-mod / location / organizer /\r\n                    priority /seq / summary / url /\r\n                    ;\r\n                    ; Either 'dtend' or 'duration' MAY appear\r\n                    ; in an 'availableprop', but 'dtend' and\r\n                             ^^^^^^^^^^^^^\r\n                    ; 'duration' MUST NOT occur in the same\r\n                    ; 'availabilityprop'.\r\n                    ; 'duration' MUST NOT be present if\r\n                    ; 'dtstart' is not present\r\n                    ;\r\n                    dtend / duration /\r\n                    ;\r\n                    ; the following are OPTIONAL\r\n                    ; and MAY occur more than once\r\n                    ;\r\n                    categories / comment / contact /\r\n                    x-prop / iana-prop\r\n                    ;\r\n                    )", "correct_text": "   availabilityprop  = *(\r\n                    ;\r\n                    ; the following are REQUIRED\r\n                    ; but MUST NOT occur more than once\r\n                    ;\r\n                    dtstamp / uid\r\n                    ;\r\n                    ; the following are OPTIONAL\r\n                    ; but MUST NOT occur more than once\r\n                    ;\r\n                    busytype / class / created / description /\r\n                    dtstart / last-mod / location / organizer /\r\n                    priority /seq / summary / url /\r\n                    ;\r\n                    ; Either 'dtend' or 'duration' MAY appear\r\n                    ; in an 'availabilityprop', but 'dtend' and\r\n                             ^^^^^^^^^^^^^^^^\r\n                    ; 'duration' MUST NOT occur in the same\r\n                    ; 'availabilityprop'.\r\n                    ; 'duration' MUST NOT be present if\r\n                    ; 'dtstart' is not present\r\n                    ;\r\n                    dtend / duration /\r\n                    ;\r\n                    ; the following are OPTIONAL\r\n                    ; and MAY occur more than once\r\n                    ;\r\n                    categories / comment / contact /\r\n                    x-prop / iana-prop\r\n                    ;\r\n                    )\r\n", "notes": "The text 'availableprop' is a typo and should be 'availabilityprop' instead.  The text is only concerned with 'dtend' and 'duration' in the VAVAILABILITY component, and has nothing to do with the AVAILABLE component and its associated 'availableprop'.", "submit_date": "2018-07-14", "submitter_name": "Julian Cowley", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5421", "doc-id": "RFC4271", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2.2", "orig_text": "If the local system receives a KeepaliveTimer_Expires event (Event\r\n      11), the local system:\r\n\r\n        - sends a KEEPALIVE message,\r\n\r\n        - restarts the KeepaliveTimer, and\r\n\r\n        - remains in the OpenConfirmed state.", "correct_text": "If the local system receives a KeepaliveTimer_Expires event (Event\r\n      11), the local system:\r\n\r\n        - sends a KEEPALIVE message,\r\n\r\n        - restarts the KeepaliveTimer, and\r\n\r\n        - remains in the OpenConfirm state.", "notes": "", "submit_date": "2018-07-15", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5422", "doc-id": "RFC7970", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "<xs:simpleType name=\"bulkobservable-type-type\">\r\n      <xs:restriction base=\"xs:NMTOKEN\">\r\n        <xs:enumeration value=\"asn\"/>\r\n        <xs:enumeration value=\"atm\"/>\r\n        <xs:enumeration value=\"e-mail\"/>\r\n        <xs:enumeration value=\"ipv4-addr\"/>\r\n        <xs:enumeration value=\"ipv4-net\"/>\r\n        <xs:enumeration value=\"ipv4-net-mask\"/>\r\n        <xs:enumeration value=\"ipv6-addr\"/>\r\n        <xs:enumeration value=\"ipv6-net\"/>\r\n        <xs:enumeration value=\"ipv6-net-mask\"/>\r\n        <xs:enumeration value=\"mac\"/>\r\n        <xs:enumeration value=\"site-uri\"/>\r\n        <xs:enumeration value=\"domain-name\"/>\r\n        <xs:enumeration value=\"domain-to-ipv4\"/>\r\n        <xs:enumeration value=\"domain-to-ipv6\"/>\r\n        <xs:enumeration value=\"domain-to-ipv4-timestamp\"/>\r\n        <xs:enumeration value=\"domain-to-ipv6-timestamp\"/>\r\n        <xs:enumeration value=\"ipv4-port\"/>\r\n        <xs:enumeration value=\"ipv6-port\"/>\r\n        <xs:enumeration value=\"windows-reg-key\"/>\r\n        <xs:enumeration value=\"file-hash\"/>\r\n        <xs:enumeration value=\"email-x-mailer\"/>\r\n        <xs:enumeration value=\"email-subject\"/>\r\n        <xs:enumeration value=\"http-user-agent\"/>\r\n        <xs:enumeration value=\"http-request-uri\"/>\r\n        <xs:enumeration value=\"mutex\"/>\r\n        <xs:enumeration value=\"file-path\"/>\r\n        <xs:enumeration value=\"user-name\"/>\r\n      </xs:restriction>\r\n    </xs:simpleType>", "correct_text": "<xs:simpleType name=\"bulkobservable-type-type\">\r\n      <xs:restriction base=\"xs:NMTOKEN\">\r\n        <xs:enumeration value=\"asn\"/>\r\n        <xs:enumeration value=\"atm\"/>\r\n        <xs:enumeration value=\"e-mail\"/>\r\n        <xs:enumeration value=\"ipv4-addr\"/>\r\n        <xs:enumeration value=\"ipv4-net\"/>\r\n        <xs:enumeration value=\"ipv4-net-mask\"/>\r\n        <xs:enumeration value=\"ipv6-addr\"/>\r\n        <xs:enumeration value=\"ipv6-net\"/>\r\n        <xs:enumeration value=\"ipv6-net-mask\"/>\r\n        <xs:enumeration value=\"mac\"/>\r\n        <xs:enumeration value=\"site-uri\"/>\r\n        <xs:enumeration value=\"domain-name\"/>\r\n        <xs:enumeration value=\"domain-to-ipv4\"/>\r\n        <xs:enumeration value=\"domain-to-ipv6\"/>\r\n        <xs:enumeration value=\"domain-to-ipv4-timestamp\"/>\r\n        <xs:enumeration value=\"domain-to-ipv6-timestamp\"/>\r\n        <xs:enumeration value=\"ipv4-port\"/>\r\n        <xs:enumeration value=\"ipv6-port\"/>\r\n        <xs:enumeration value=\"windows-reg-key\"/>\r\n        <xs:enumeration value=\"file-hash\"/>\r\n        <xs:enumeration value=\"email-x-mailer\"/>\r\n        <xs:enumeration value=\"email-subject\"/>\r\n        <xs:enumeration value=\"http-user-agent\"/>\r\n        <xs:enumeration value=\"http-request-uri\"/>\r\n        <xs:enumeration value=\"mutex\"/>\r\n        <xs:enumeration value=\"file-path\"/>\r\n        <xs:enumeration value=\"user-name\"/>\r\n        <xs:enumeration value=\"ext-value\"/>\r\n      </xs:restriction>\r\n    </xs:simpleType>", "notes": "The main body text says that the enum values of the type attribute of bulkobservable class include \u201cext-value\u201d. The schema was not consistentent with the body text, thus corrected.", "submit_date": "2018-07-15", "submitter_name": "Takeshi Takahashi", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5415", "doc-id": "RFC6052", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   Bits 64 to 71 of the address are reserved for compatibility with the\r\n   host identifier format defined in the IPv6 addressing architecture\r\n   [RFC4291].  These bits MUST be set to zero.  When using a /96\r\n   Network-Specific Prefix, the administrators MUST ensure that the bits\r\n   64 to 71 are set to zero.  A simple way to achieve that is to\r\n   construct the /96 Network-Specific Prefix by picking a /64 prefix,\r\n   and then adding 4 octets set to zero.\r\n\r\n[and other parts of the text]\r\n", "correct_text": "[This paragraph should be removed and corresponding changes made to\r\nthe rest of section 2.2.]", "notes": "Section 2.2 says that bits 64 to 71 of the Ipv6 address MUST be set to zero and references RFC 4291 as the authority.  However, RFC 7136 says:\r\n\r\n   In particular, RFC 4291 defines a method by which the\r\n   Universal and Group bits of an IEEE link-layer address are mapped\r\n   into an IPv6 unicast interface identifier.  This document clarifies\r\n   that those two bits are significant only in the process of deriving\r\n   interface identifiers from an IEEE link-layer address, and it updates\r\n   RFC 4291 accordingly.\r\n\r\nThus, the text I've referenced in RFC 6052 is to enforce a requirement that was not correctly applied, and RFC 6052's statement about bits 64 to 71 should be removed.  In addition, there are consequent changes in other parts of RFC 6052, including Figure 1, where the \"u\" field should be removed from the address formats.\n --VERIFIER NOTES-- \n   AD (Magnus Westerlund): A clarification by a later RFC that impacts this RFC is not an errata. The change appears to require a consensus decision on how to handle it. Thus rejected on formal grounds, should be considered if document is revised in the future. ", "submit_date": "2018-07-01", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-01-16 10:40:11"}, {"errata_id": "5416", "doc-id": "RFC4570", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.5", "orig_text": "a=source-filter incl IN IP6 FF0E::11A 2001:DB8:1:2:240:96FF:FE25:8EC9", "correct_text": "a=source-filter: incl IN IP6 FF0E::11A 2001:DB8:1:2:240:96FF:FE25:8EC9", "notes": "Normative text in section 3 requires a colon after the source-filter attribute, but the ipv6 example in section 3.2.5 omits this colon.", "submit_date": "2018-07-06", "submitter_name": "Simon Rankine", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 20:37:26"}, {"errata_id": "5417", "doc-id": "RFC2866", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.11", "orig_text": "      This attribute is a unique Accounting ID to make it easy to link\r\n      together multiple related sessions in a log file.  Each session\r\n      linked together would have a unique Acct-Session-Id but the same\r\n      Acct-Multi-Session-Id.  It is strongly recommended that the Acct-\r\n      Multi-Session-Id contain UTF-8 encoded 10646 [7] characters.", "correct_text": "      This attribute is a unique Accounting ID to make it easy to link\r\n      together multiple related sessions in a log file.  Each session\r\n      linked together would have a unique Acct-Session-Id but the same\r\n      Acct-Multi-Session-Id.  The start and stop records for a given\r\n      session MUST have the same Acct-Multi-Session-Id.  An\r\n      Access-Request packet MAY contain Acct-Multi-Session-Id; if it\r\n      does, then the NAS MUST use the same Acct-Multi-Session-Id in\r\n      the Accounting-Request packets for that session.  It is strongly\r\n      recommended that the Acct-Multi-Session-Id contain UTF-8 encoded\r\n      10646 [7] characters.", "notes": "RFC2866 does not make clear that an Access-Request packet MAY contain Acct-Multi-Session-Id in section 5.11 as it does for the Acct-Session-Id in section 5.5 or that consistency is expected between the start and stop records.", "submit_date": "2018-07-06", "submitter_name": "Nick Lowe", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-28 22:10:50"}, {"errata_id": "6287", "doc-id": "RFC2637", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.3", "orig_text": "When the PAC receives the Outgoing-Call-Reply, it attempts to connect the call, assuming the calling party has not hung up.", "correct_text": "When the PAC receives the Incoming-Call-Reply, it attempts to connect the call, assuming the calling party has not hung up.", "notes": "The PAC does not receive Outgoing-Call-Reply messages, as also indicated in sections 3.2.4.1 and 3.2.4.2. It receives Incoming-Call-Reply messages, as indicated in sections 3.2.3.1 and 3.2.3.2.", "submit_date": "2020-09-13", "submitter_name": "Casper van Eersel", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 13:19:58"}, {"errata_id": "6288", "doc-id": "RFC2637", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.14", "orig_text": "Th Call ID assigned by the PNS to this call.", "correct_text": "The Call ID assigned by the PNS to this call.", "notes": "A missing \u2018e\u2019 in \u2018Th\u2019.", "submit_date": "2020-09-13", "submitter_name": "Casper van Eersel", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 13:15:03"}, {"errata_id": "6289", "doc-id": "RFC8231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3.2", "orig_text": "   Length (16 bits): indicates the total length of the TLV in octets and\r\n   MUST be greater than 0.  The TLV MUST be zero-padded so that the TLV\r\n   is 4-octet aligned.", "correct_text": "   Length (16 bits): indicates the length of the value portion of the \r\n   TLV in octets and MUST be greater than 0.  The TLV MUST be zero-\r\n   padded so that the TLV is 4-octet aligned.\r\n", "notes": "The \"total length of the TLV\" is incorrect, as in PCEP the TLV formatting is as per RFC 5440 which requires the length to be of the value portion only. The other text such as \"MUST be greater than 0\", the padding rules along with \"without a NULL terminator\" also point to the fact that the intention of the authors/WG was not \"total\" (and it is simply a mistake).", "submit_date": "2020-09-14", "submitter_name": "Dhruv Dhody", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-09-29 22:01:36"}, {"errata_id": "6290", "doc-id": "RFC8489", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "18.1", "orig_text": "Bits are assigned starting from the most significant side of the bit\r\nset, so Bit 0 is the leftmost bit and Bit 23 is the rightmost bit.", "correct_text": "Bits are assigned starting from the least significant side of the bit\r\nset, so Bit 0 is the rightmost bit, and Bit 23 is the leftmost bit.\r\n", "notes": "", "submit_date": "2020-09-14", "submitter_name": "Jared Williams", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-09-15 12:10:08"}, {"errata_id": "7142", "doc-id": "RFC9230", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Acknowledgements", "orig_text": "Paul Schmitt, Brian Swander, ", "correct_text": "Paul Schmitt, Sudheesh Singanamalla, Brian Swander, ", "notes": "Unintentional omission from list of acknowledgements.\n --VERIFIER NOTES-- \nThe authors are free to buy Sudheesh Singanamalla flowers or chocolate if they so wish, but this is not an appropriate use of errata.", "submit_date": "2022-09-30", "submitter_name": "Marwan Fayed", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-11-01 12:50:55"}, {"errata_id": "5423", "doc-id": "RFC7970", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "<xs:element name=\"ThreatActor\">\r\n      <xs:complexType>\r\n        <xs:sequence>\r\n          <xs:element ref=\"iodef:ThreatActorID\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:URL\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:Description\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:AdditionalData\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n        </xs:sequence>\r\n        <xs:attribute name=\"restriction\"\r\n                      type=\"iodef:restriction-type\" use=\"optional\"/>\r\n        <xs:attribute name=\"ext-restriction\"\r\n                      type=\"xs:string\" use=\"optional\"/>\r\n      </xs:complexType>\r\n    </xs:element>", "correct_text": "<xs:element name=\"ThreatActor\">\r\n      <xs:complexType>\r\n        <xs:sequence>\r\n          <xs:element ref=\"iodef:ThreatActorID\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:URL\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:Description\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:AdditionalData\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n        </xs:sequence>\r\n        <xs:attribute name=\"restriction\"\r\n                      type=\"iodef:restriction-type\" use=\"optional\"/>\r\n        <xs:attribute name=\"ext-restriction\"\r\n                      type=\"xs:string\" use=\"optional\"/>\r\n      </xs:complexType>\r\n    </xs:element>", "notes": "The number of URL occurance could be zero, according to the main body text.\r\nThe minOccurs of the URL in the TreatActorclass was defined.\r\n(The default value of minOccurs is one, not zero.)", "submit_date": "2018-07-15", "submitter_name": "Takeshi Takahashi", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5424", "doc-id": "RFC4361", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "   DHCPv4 clients and servers that are implemented according to this\r\n   document should be implemented as if the changes specified in\r\n   sections 6.3 and 6.4 have been made to RFC 2131 and RFC 2132.  DHCPv4\r\n   clients should, in addition, follow the behavior specified in section\r\n   6.1.  DHCPv6 clients should follow the behavior specified in section\r\n   6.2.  DHCPv4 servers should additionally follow the behavior\r\n   specified in section 6.3.\r\n", "correct_text": "   DHCPv4 clients and servers that are implemented according to this\r\n   document should be implemented as if the changes specified in\r\n   sections 6.4 and 6.5 have been made to RFC 2131 and RFC 2132.  DHCPv4\r\n   clients should, in addition, follow the behavior specified in section\r\n   6.1.  DHCPv6 clients should follow the behavior specified in section\r\n   6.2.  DHCPv4 servers should additionally follow the behavior\r\n   specified in section 6.3.\r\n", "notes": "Incorrect links to sections of this document.\r\n\r\n-- Verifier note --\r\nThe corrected text is indeed correct. As a normal reader will correct the text by herself and the error is not catastrophic, this errata is marked as \"help for document update\".", "submit_date": "2018-07-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-02-08 08:18:24"}, {"errata_id": "5425", "doc-id": "RFC4361", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "   - DHCPv4 servers that do conform to this specification must\r\n     interoperate correctly with DHCPv4 clients that do not conform to\r\n     this specification, except that when configuring such clients,\r\n     behaviors such as those described in section 2 may occur.\r\n", "correct_text": "   - DHCPv4 servers that do conform to this specification must\r\n     interoperate correctly with DHCPv4 clients that do not conform to\r\n     this specification, except that when configuring such clients,\r\n     behaviors such as those described in section 4.2 may occur.\r\n", "notes": "Incorrect referenct to section 2.\r\n\r\n-- Verifier note --\r\nThe original text should indeed refer to section 4.2 but it can be expected that the reader will auto-correct and as the error does not prevent interoperation, this errata is classified as \"held for document update\".", "submit_date": "2018-07-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-02-08 08:22:14"}, {"errata_id": "5426", "doc-id": "RFC4361", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "   Here we specify changes to the behavior of DHCPv4 clients and\r\n   servers.  We also specify changes to the wording in RFC 2131 and RFC\r\n   2132.  DHCPv4 clients, servers, and relay agents that conform to this\r\n   specification must implement RFC 2131 and RFC 2132 with the wording\r\n   changes specified in sections 6.3 and 6.4.\r\n", "correct_text": "   Here we specify changes to the behavior of DHCPv4 clients and\r\n   servers.  We also specify changes to the wording in RFC 2131 and RFC\r\n   2132.  DHCPv4 clients, servers, and relay agents that conform to this\r\n   specification must implement RFC 2131 and RFC 2132 with the wording\r\n   changes specified in sections 6.4 and 6.5.\r\n", "notes": "Incorrect references to sections of this document.\r\n\r\n-- Verifier note --\r\nThe original text should indeed refer to sections 6.4 and 6.5 but it can be expected that the reader will auto-correct and as the error does not prevent interoperation, this errata is classified as \"held for document update\".", "submit_date": "2018-07-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-02-08 08:26:25"}, {"errata_id": "5437", "doc-id": "RFC8427", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "2.1.  Message Object Members\r\n   o  compressedQNAME - Object that describes the name with two optional\r\n      values: \"isCompressed\" (with a value of 0 for no and 1 for yes)\r\n      and \"length\" (with an integer giving the length in the message)\r\n\r\n2.2.  Resource Record Object Members\r\n   o  compressedNAME - Object that describes the name with two optional\r\n      values: \"isCompressed\" (with a value of 0 for no and 1 for yes)\r\n      and \"length\" (with an integer giving the length in the message)", "correct_text": "2.1.  Message Object Members\r\n   o  compressedQNAME - Object that describes the name with two optional\r\n      values: \"isCompressed\" (with a value of 0 for no and 1 for yes)\r\n      and \"length\" (an integer giving the count of octets of the name in\r\n      the message, including but not following compression pointers)\r\n\r\n2.2.  Resource Record Object Members\r\n   o  compressedNAME - Object that describes the name with two optional\r\n      values: \"isCompressed\" (with a value of 0 for no and 1 for yes)\r\n      and \"length\" (an integer giving the count of octets of the name in\r\n      the message, including but not following compression pointers)", "notes": "\"length in the message\" is ambiguous for compressed names... taking for example a compressed domain name that represents \"a.b.example.com.\" as 0x0161 0x0162 0xC00C (i.e., label \"a\", then label \"b\", then a pointer to \"example.com.\" at offset 12), it could mean 1) the count of octets constituting the absolute name, including both compression pointers and labels referenced by them (6+13=19), or 2) the count of octets of the compression pointer plus immediately preceding labels (6), or 3) the count of octets of labels _preceding_ the compression pointer (4), or even 4) the offset in the compression pointer (12).\r\n\r\nThe above Corrected Text specifies option 3, because that interpretation allows for the most uniform treatment of compressed vs. uncompressed names.", "submit_date": "2018-07-24", "submitter_name": "Richard Gibson", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-11-25 19:16:11"}, {"errata_id": "5438", "doc-id": "RFC8427", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.3", "orig_text": "   o  rdataCNAME - A domain name\r\n\r\n   o  rdataDNAME - A domain name\r\n\r\n   o  rdataNS - A domain name\r\n\r\n   o  rdataPTR - A domain name\r\n\r\n   o  rdataTXT - A text value\r\n\r\n   In addition, each of the following members has a value that is a\r\n   space-separated string that matches the display format definition in\r\n   the RFC that defines that RDATA type.  It is not expected that every\r\n   receiving application will know how to parse these values.\r\n\r\n   rdataCDNSKEY, rdataCDS, rdataCSYNC, rdataDNSKEY, rdataHIP,\r\n   rdataIPSECKEY, rdataKEY, rdataMX, rdataNSEC, rdataNSEC3,\r\n   rdataNSEC3PARAM, rdataOPENPGPKEY, rdataRRSIG, rdataSMIMEA, rdataSPF,\r\n   rdataSRV, rdataSSHFP, rdataTLSA", "correct_text": "   o  rdataCNAME - A domain name\r\n\r\n   o  rdataDNAME - A domain name\r\n\r\n   o  rdataNS - A domain name\r\n\r\n   o  rdataPTR - A domain name\r\n\r\n   In addition, each of the following members has a value that is a\r\n   space-separated string that matches the presentation format\r\n   definition in the RFC that defines that RDATA type.  It is not\r\n   expected that every receiving application will know how to parse\r\n   these values.\r\n\r\n   rdataCDNSKEY, rdataCDS, rdataCSYNC, rdataDNSKEY, rdataHIP,\r\n   rdataIPSECKEY, rdataKEY, rdataMX, rdataNSEC, rdataNSEC3,\r\n   rdataNSEC3PARAM, rdataOPENPGPKEY, rdataRRSIG, rdataSMIMEA, rdataSPF,\r\n   rdataSRV, rdataSSHFP, rdataTLSA, rdataTXT", "notes": "\"A text value\" is insufficiently clear to describe the contents of a TXT record, which consists of \"One or more <character-string>s\". However, the immediately following description relying upon \"display format\" (corrected to \"presentation format\" per RFC 4034 and draft-ietf-dnsop-terminology-bis) _does_ cover it, so rdataTXT should move into the undifferentiated list.\n --VERIFIER NOTES-- \n   This is a request for a technical change, and is outside the scope of errata reports.\r\n\r\nThe change from \"matches the display format\" to \"matches the presentation format\" is a reasonable change in an errata report.", "submit_date": "2018-07-24", "submitter_name": "Richard Gibson", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-11-25 19:19:29"}, {"errata_id": "5439", "doc-id": "RFC8427", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6", "orig_text": "   o  If the member name does not end in \"HEX\", the value is a domain\r\n      name encoded as DNS labels consisting of UTF-8 codepoints from\r\n      U+0000 to U+007F.  Within a label, codepoints above U+007F and the\r\n      codepoint U+002E (ASCII period) MUST be expressed using JSON's\r\n      escaping rules within this set of codepoints.  Separation between\r\n      labels is indicated with a period (codepoint U+002E).\r\n      Internationalized Domain Name (IDN) labels are always expressed in\r\n      their A-label form, as described in [RFC5890].", "correct_text": "   o  If the member name does not end in \"HEX\", the value is a domain\r\n      name encoded in common display format as DNS labels separated by\r\n      U+002E \".\" characters. Internationalized Domain Name (IDN) labels\r\n      are always expressed in their A-label form, as described in\r\n      [RFC5890]. Label characters with code points equal to U+0022\r\n      QUOTATION MARK or U+005C REVERSE SOLIDUS or less than U+0020 SPACE\r\n      MUST be expressed using the JSON escaping rules of [RFC8259].\r\n      U+002E \".\" and U+005C \"\\\" characters within labels MUST be\r\n      preceded by a backslash escape as specified by [RFC1035] (and that\r\n      backslash must itself be escaped for use in a JSON string,\r\n      resulting in either the three-character sequence \"\\\\.\" or the\r\n      four-character sequence \"\\\\\\\\\", respectively).", "notes": "The Original Text appears to specify inclusion of raw characters less than U+0020 in JSON strings, which is disallowed by section 7 of RFC 8259.\r\n\r\nFurther, as specifically noted in section 8 of RFC 8259, \"implementations that compare strings with escaped characters unconverted may incorrectly find that \"a\\\\b\" and \"a\\u005Cb\" are not equal\", a fact logically deducible from the preceding \"when all the strings represented in a JSON text are composed entirely of Unicode characters [UNICODE] (however escaped), then that JSON text is interoperable in the sense that all software implementations that parse it will agree on the contents of names and of string values in objects and arrays\" text. Therefore, _correct_ JSON implementations must not distinguish e.g. \"a.b.example.\" from \"a\\u002Eb.example.\", as seems to be required by the Original Text.", "submit_date": "2018-07-24", "submitter_name": "Richard Gibson", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-11-25 19:20:32"}, {"errata_id": "5446", "doc-id": "RFC5965", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "B.2", "orig_text": "Authentication-Results: mail.example.com;\r\n                  spf=fail smtp.mail=somespammer@example.com\r\n", "correct_text": "Authentication-Results: mail.example.com;\r\n                  spf=fail smtp.mail=somespammer@example.net\r\n", "notes": "The TLD of the spammer's emailaddress should be `.net` as in the rest of the example.", "submit_date": "2018-07-30", "submitter_name": "Martijn van der Lee", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5447", "doc-id": "RFC6047", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "ATTENDEE;RSVP=YES:mailto:foo2@example.com", "correct_text": "ATTENDEE;RSVP=TRUE:mailto:foo2@example.com", "notes": "In the examples that include the ATTENDEE property, there is a minor issue.  According to RFC 5545, Section 3.2.17, the RSVP parameter value should be \"TRUE\" or \"FALSE\", not \"YES\" or \"NO\".", "submit_date": "2018-07-31", "submitter_name": "Julian Cowley", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5457", "doc-id": "RFC5646", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2.9", "orig_text": "   A tag is considered \"valid\" if it satisfies these conditions:\r\n\r\n   o  The tag is well-formed.\r\n\r\n   o  Either the tag is in the list of grandfathered tags or all of its\r\n      primary language, extended language, script, region, and variant\r\n      subtags appear in the IANA Language Subtag Registry as of the\r\n      particular registry date.\r\n\r\n   o  There are no duplicate variant subtags.\r\n\r\n   o  There are no duplicate singleton (extension) subtags.\r\n", "correct_text": "   A tag is considered \"valid\" if it satisfies these conditions:\r\n\r\n   o  The tag is well-formed.\r\n\r\n   o  Either the tag is in the list of grandfathered tags or all of its\r\n      primary language, extended language, script, region, and variant\r\n      subtags appear in the IANA Language Subtag Registry as of the\r\n      particular registry date.\r\n\r\n   o  There are no duplicate variant subtags.\r\n\r\n   o  There are no duplicate singleton (extension) subtags.\r\n\r\n   o  There is no more than one extended language subtag.", "notes": "Sec. 2.2.2 contains an additional validity requirement (point 4): the existence of no more than one extended language subtag.  This is not reflected in the definition of validity given in sec. 2.2.9 of the RFC.", "submit_date": "2018-08-12", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5440", "doc-id": "RFC7489", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1, B.2.1, B.2.3, B.2.4", "orig_text": "==7.1==\r\nIn particular, the \"v=DMARC1\" tag is\r\n\r\ncomes back containing a tag of \"v=DMARC1\",\r\n\r\ncontaining at least \"v=DMARC1\"\r\n\r\n==B.2.1==\r\n\r\nThe version of DMARC being used is \"DMARC1\" (\"v=DMARC1\")\r\n\r\n==B.2.3==\r\n\r\nwith the value \"=DMARC1\".\r\n\r\n     % dig +short TXT example.com._report._dmarc.thirdparty.example.net\r\n     \"v=DMARC1\"\r\n\r\n     example.com._report._dmarc   IN   TXT    \"v=DMARC1\"\r\n\r\n==B.2.4==\r\n\r\n        o  The version of DMARC being used is \"DMARC1\" (\"v=DMARC1\")\r\n", "correct_text": "==7.1==\r\nIn particular, the \"v=DMARC1;\" tag is\r\n\r\ncomes back containing a tag of \"v=DMARC1;\",\r\n\r\ncontaining at least \"v=DMARC1;\"\r\n\r\n==B.2.1==\r\n\r\nThe version of DMARC being used is \"DMARC1\" (\"v=DMARC1;\")\r\n\r\n==B.2.3==\r\n\r\nwith the value \"v=DMARC1;\".\r\n\r\n     % dig +short TXT example.com._report._dmarc.thirdparty.example.net\r\n     \"v=DMARC1;\"\r\n\r\n     example.com._report._dmarc   IN   TXT    \"v=DMARC1;\"\r\n\r\n==B.2.4==\r\n\r\n   o  The version of DMARC being used is \"DMARC1\" (\"v=DMARC1;\")\r\n", "notes": "The ABNF of dmarc-record in section 6.4 says that there has to be a semicolon after v=DMARC1, but several of the examples for the _report._dmarc record are missing the semicolon.", "submit_date": "2018-07-25", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5441", "doc-id": "RFC7634", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "   When negotiating the ChaCha20-Poly1305 algorithm for use in IKE or\r\n   IPsec, the value ENCR_CHACHA20_POLY1305 (28) should be used in the\r\n   transform substructure of the SA payload as the ENCR (type 1)\r\n   transform ID.  As with other AEAD algorithms, INTEG (type 3)\r\n   transform substructures MUST NOT be specified, or just one INTEG\r\n   transform MAY be included with value NONE (0).", "correct_text": "   When negotiating the ChaCha20-Poly1305 algorithm for use in IKE or\r\n   IPsec, the value ENCR_CHACHA20_POLY1305 (28) should be used in the\r\n   transform substructure of the SA payload as the ENCR (type 1)\r\n   transform ID.\r\n   As with other transforms that use a fixed-length key, the Key Length\r\n   attribute MUST NOT be specified.\r\n   As with other AEAD algorithms, INTEG (type 3)\r\n   transform substructures MUST NOT be specified, or just one INTEG\r\n   transform MAY be included with value NONE (0).", "notes": "Reading both RFC7634 and RFC7539 there seems to be a single fixed-length key of 256-bits. \r\nHence, I think https://tools.ietf.org/html/rfc7296#section-3.3.5:\r\n   o  The Key Length attribute MUST NOT be used with transforms that use\r\n      a fixed-length key.  For example, this includes ENCR_DES,\r\n      ENCR_IDEA,...\r\napplies (my intent is to clarify this).\r\n\r\nPaul Wouters:\r\n\r\nI agree this should be added in future versions of this document to prevent implementation mistakes. However, not mentioning it here is not an error, so resolving this as Held for Document Update.", "submit_date": "2018-07-26", "submitter_name": "Andrew Cagney", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-11 00:17:44"}, {"errata_id": "5442", "doc-id": "RFC7044", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.3,10.2", "orig_text": "9.3   \r\n   When a SIP entity receives a non-100 response or a request times out,\r\n   the SIP entity performs the following steps:\r\n\r\n      If the response is not a 100 or 2xx response, the SIP entity adds\r\n      one or more Reason header fields to the hi-targeted-to-uri in the\r\n      (newly) cached hi-entry reflecting the SIP response code in the\r\n      non-100 or non-2xx response, per the procedures of Section 10.2.\r\n\r\n10.2\r\n   A Reason header field is added when the hi-entry is added to the\r\n   cache based upon the receipt of a SIP response that is neither a 100\r\n   nor a 2xx response, as described in Section 9.3. ", "correct_text": "9.3   \r\n   When a SIP entity receives a non-18x response or a request times out,\r\n   the SIP entity performs the following steps:\r\n\r\n      If the response is not a 18x or 2xx response, the SIP entity adds\r\n      one or more Reason header fields to the hi-targeted-to-uri in the\r\n      (newly) cached hi-entry reflecting the SIP response code in the\r\n      non-18x or non-2xx response, per the procedures of Section 10.2.\r\n\r\n10.2\r\n   A Reason header field is added when the hi-entry is added to the\r\n   cache based upon the receipt of a SIP response that is neither a 18x\r\n   nor a 2xx response, as described in Section 9.3. ", "notes": "I see we have several places using \"100\" or \"non-100\". I think the correct one should be \"18x\" or \"non-18x\".\r\nOr, we can use \"1xx\" or \"non-1xx\".\r\n\r\n100 means \"100 Tring\", it's not accurate.", "submit_date": "2018-07-27", "submitter_name": "Ted Zhou", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5443", "doc-id": "RFC6241", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "The <ok> element is sent in <rpc-reply> messages if no errors or\r\nwarnings occurred during the processing of an <rpc> request, and no\r\ndata was returned from the operation.", "correct_text": "The <ok> element is sent in <rpc-reply> messages if\r\nand only if\r\nno errors or\r\nwarnings occurred during the processing of an <rpc> request, and no\r\ndata was returned from the operation.", "notes": "I have been informed that an <ok> element should not include any errors or warnings, even in the event of the associated operation completing because the error's severity was only at warning level).\n --VERIFIER NOTES-- \n   Rejected based on WG mailing list discussion: https://mailarchive.ietf.org/arch/msg/netconf/nQYVm8sm5pZamtRAIhbcB9cOuos\r\n\r\n", "submit_date": "2018-07-27", "submitter_name": "Jonathan Natale", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-18 20:35:49"}, {"errata_id": "5444", "doc-id": "RFC2640", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "        C> LANG fr\r\n        S> 200 Le response sera changez au francais\r\n\r\n        C> feat\r\n        S> 211- <quelconque descriptif texte>\r\n        S>  ...\r\n        S>  LANG EN;FR*\r\n        S>  ...\r\n        S> 211 end", "correct_text": "        C> LANG fr\r\n        S> 200 Les r\u00e9ponses seront en fran\u00e7ais\r\n\r\n        C> feat\r\n        S> 211- <texte descriptif quelconque>\r\n        S>  ...\r\n        S>  LANG EN;FR*\r\n        S>  ...\r\n        S> 211 end", "notes": "I'm natively speaking French, and the original text is not correct.\r\nIn particular, some words stayed in English, and word order is not the same in French.\r\n\r\nThe correction make the hypothesis that UTF-8 is allowed in reply messages, which is not specified in the RFC (see other errata).", "submit_date": "2018-07-28", "submitter_name": "David LAMBERT", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7143", "doc-id": "RFC9291", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   Figure 1 illustrates how the L2NM is used.  As a reminder, this\r\n   figure is an expansion of the architecture presented in Section 3 of\r\n   [RFC8466] and decomposes the box marked \"orchestration\" in that\r\n   figure into three separate functional components called \"Service\r\n   Orchestration\", \"Network Orchestration\", and \"Domain Orchestration\".\r\n\r\n", "correct_text": "   Figure 1 illustrates how the L2NM is used.  As a reminder, this\r\n   figure is an expansion of the architecture presented in Section 4 of\r\n   [RFC8466] and decomposes the box marked \"orchestration\" in that\r\n   figure into three separate functional components called \"Service\r\n   Orchestration\", \"Network Orchestration\", and \"Domain Orchestration\".\r\n\r\n", "notes": "Wrong reference to Section 3 [RFC8466] (must be Section 4).", "submit_date": "2022-10-03", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-27 17:01:40"}, {"errata_id": "5448", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1.1.1", "orig_text": "Recipients of a timestamp value in rfc850-date format, which uses a\r\ntwo-digit year, MUST interpret a timestamp that appears to be more\r\nthan 50 years in the future as representing the most recent year in\r\nthe past that had the same last two digits.", "correct_text": "Recipients of a timestamp value in rfc850-date format, which uses a\r\ntwo-digit year, MUST interpret a timestamp that appears to be more\r\nthan 200 years in the future as representing the most recent date in\r\nthe past that also matches the timestamp.", "notes": "The combination of day-of-the-week, day-of-the-month, month, and the two last digits of the year repeats every 400 years. For example, \"Friday, 01-Jan-00 00:00:00 GMT\" (as formatted by rfc850) happens in the years ...1300, 1700, 2100, 2500, 2900...\r\n\r\nWith the original text, \"Friday, 01-Jan-00 00:00:00 GMT\" is interpreted as year 2000, since year 2100 is more than 50 years in the future, and year 2000 is the most recent year in the past with the same last two digits as 2100. However, if it really was year 2000, it should have said \"Saturday, 01-Jan-00 00:00:00 GMT\". So it would make more sense to interpret it as either year 1700 or year 2100. The corrected text interprets it as year 2100.\r\n\r\n\"Monday, 01-Jan-00 00:00:00 GMT\" happens in years ...1100, 1500, 1900, 2300, 2700..., and is interpreted as year 1900, since 2300 is more than 200 years in the future.\n --VERIFIER NOTES-- \n  This changes the original intent of the text, so errata mechanism is not suitable.", "submit_date": "2018-08-02", "submitter_name": "Magnar Ovedal Myrtveit", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5449", "doc-id": "RFC7986", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.9 COLOR Pr", "orig_text": "Description:   ...The value is a case-insensitive color name taken from\r\nthe CSS3 set of names, defined in Section 4.3 of [W3C.REC-css3-color-\r\n20110607].\r\n\r\nExample:  The following is an example of this property:\r\n   COLOR:turquoise", "correct_text": "Description:   ...The value is either a case-insensitive color name\r\ntaken from the CSS3 set of names, defined in Section 4.3 of [W3C.REC-\r\ncss3-color-20110607], or a lower-cased rgb() functional notation with\r\nabsolute values specified in Section 4.2.1 of the same document.\r\n\r\nExamples:  The following are examples of this property:\r\n   COLOR:turquoise\r\n   COLOR:rgb(61\\,211\\,68)", "notes": "draft-daboo-icalendar-extensions-07 removed the possibily to have RGB colours for COLOR.\r\n\r\nCSS3 included color names, that browsers at that time suppored, originating from X11's rgb.txt.  The color names and values were randomly chosen.  The minimal distance between the colors isn't consistent.  One motivation for creating a color name were hardware capabilities - an argument which isn't valid for 20 years now.  There is no reason to limit the number of possible values for COLOR.  A user interface for choosing a named color has either to offer the user the possibility to choose from a pre-filled list of colors, which could clutter the interface, or let the user choose any RGB color and narrow it later to the closest color with CSS3 name.  This narrowing isn't trivial and performing it seems like having an RFC running in itself.\n --VERIFIER NOTES-- \nIn rejecting this Errata report I note that the reported error is not a typo, but a deliberate decision of the authors and working group. This sort of change needs to be achieved through a consensus document.", "submit_date": "2018-08-03", "submitter_name": "\u0414\u0438\u043b\u044f\u043d \u041f\u0430\u043b\u0430\u0443\u0437\u043e\u0432", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-23 08:30:16"}, {"errata_id": "7144", "doc-id": "RFC9277", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix D", "orig_text": "As with the Labeled CBOR Sequence {#sequences}, this choice of the\r\ntag content places the ASCII characters \"CBOR\" prominently into the\r\nheader.", "correct_text": "As with the Labeled CBOR Sequence (Section 2.3), this choice of the\r\ntag content places the ASCII characters \"CBOR\" prominently into the\r\nheader.", "notes": "It looks like a typo in the markdown (a missing pair of curly brackets) managed to trickle through the publication process.", "submit_date": "2022-10-04", "submitter_name": "Thomas Fossati", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-03-15 09:39:25"}, {"errata_id": "7145", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.3", "orig_text": "   The Crypto-Binding TLV MUST be exchanged and verified\r\n   before the final Result TLV exchange, regardless of whether or not\r\n   there is an inner EAP method authentication.", "correct_text": "   Except as noted below, the Crypto-Binding TLV MUST be exchanged and verified\r\n   before the final Result TLV exchange, regardless of whether or not\r\n   there is an inner EAP method authentication", "notes": "The text contradicts itself in the same paragraph, because it goes on to say:\r\n\r\n   The server may send the final Result TLV along with an\r\n   Intermediate-Result TLV and a Crypto-Binding TLV to indicate its\r\n   intention to end the conversation.  If the peer requires nothing more\r\n   from the server, it will respond with a Result TLV indicating success\r\n   accompanied by a Crypto-Binding TLV and Intermediate-Result TLV if\r\n   necessary.\r\n\r\nSo there are actually several legal combinations here:\r\n\r\n1. Server and peer perform a crypto-binding exchange in anticipation of later sending Result TLVs\r\n2. The server and peer combine their crypto-binding and Result TLV in the same message.\r\n3. One side initiates a crypto-binding TLV and the OTHER responds with both crypto-binding and Result TLV.\r\n\r\nThe practice seems to be to include the crypto-binding TLVs alongside Result TLVs.", "submit_date": "2022-10-05", "submitter_name": "Eliot Lear", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:32:40"}, {"errata_id": "5458", "doc-id": "RFC5681", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   DUPLICATE ACKNOWLEDGMENT: An acknowledgment is considered a\r\n      \"duplicate\" in the following algorithms when (a) the receiver of\r\n      the ACK has outstanding data, (b) the incoming acknowledgment\r\n      carries no data, (c) the SYN and FIN bits are both off, (d) the\r\n      acknowledgment number is equal to the greatest acknowledgment\r\n      received on the given connection (TCP.UNA from [RFC793]) and (e)\r\n      the advertised window in the incoming acknowledgment equals the\r\n      advertised window in the last incoming acknowledgment.", "correct_text": "   DUPLICATE ACKNOWLEDGMENT: An acknowledgment is considered a\r\n      \"duplicate\" in the following algorithms when (a) the receiver of\r\n      the ACK has outstanding data, (b) the incoming acknowledgment\r\n      carries no data, (c) the SYN and FIN bits are both off, (d) the\r\n      acknowledgment number is equal to the greatest acknowledgment\r\n      received on the given connection (SND.UNA from [RFC793]) and (e)\r\n      the advertised window in the incoming acknowledgment equals the\r\n      advertised window in the last incoming acknowledgment.", "notes": "There is no such thing as TCP.UNA in RFC793.  The boundary between acknowledged and unacknowledged sent data is SND.UNA.", "submit_date": "2018-08-12", "submitter_name": "James McCauley", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5459", "doc-id": "RFC8410", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "   -----BEGIN PRIVATE KEY-----\r\n   MHICAQEwBQYDK2VwBCIEINTuctv5E1hK1bbY8fdp+K06/nwoy/HU++CXqI9EdVhC\r\n   oB8wHQYKKoZIhvcNAQkJFDEPDA1DdXJkbGUgQ2hhaXJzgSEAGb9ECWmEzf6FQbrB\r\n   Z9w7lshQhqowtrbLDFw4rXAxZuE=\r\n   -----END PRIVATE KEY------", "correct_text": "   -----BEGIN PRIVATE KEY-----\r\n   MHICAQEwBQYDK2VwBCIEINTuctv5E1hK1bbY8fdp+K06/nwoy/HU++CXqI9EdVhC\r\n   oB8wHQYKKoZIhvcNAQkJFDEPDA1DdXJkbGUgQ2hhaXJzgSEAGb9ECWmEzf6FQbrB\r\n   Z9w7lshQhqowtrbLDFw4rXAxZuE=\r\n   -----END PRIVATE KEY-----", "notes": "Should be five dashes instead of six, at the end", "submit_date": "2018-08-13", "submitter_name": "Conrado Gouvea", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5460", "doc-id": "RFC7484", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "      In the case of a domain object, the client may first query the DNS\r\n      to see if the respective entry has been delegated or if it is\r\n      mistyped information by the user.  The DNS query could be to fetch\r\n      the NS records for the TLD domain.  If the DNS answer is negative,\r\n      then there is no need to fetch the new version of the registry.\r\n      However, if the DNS answer is positive, this may mean that the\r\n      currently cached registry is no longer current.  The client could\r\n      then fetch the registry, parse, and then do the normal matching as\r\n      specified above.  This method may not work for all types of RDAP\r\n      objects.", "correct_text": "", "notes": "I would remove the whole section. The point is: if the DNS answer is positive, then you need to fetch the registry. But if the answer is negative, this does not mean anything because it it possible that a registered domain is not delegated.", "submit_date": "2018-08-14", "submitter_name": "Pieter Vandepitte", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2021-12-02 15:44:19"}, {"errata_id": "5461", "doc-id": "RFC7484", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "{\r\n       \"version\": \"1.0\",\r\n       \"publication\": \"YYYY-MM-DDTHH:MM:SSZ\",\r\n       \"description\": \"Some text\",\r\n       \"services\": [\r\n         [\r\n           [\"net\", \"com\"],\r\n           [\r\n             \"https://registry.example.com/myrdap/\"\r\n           ]\r\n         ],\r\n         [\r\n           [\"org\", \"mytld\"],\r\n           [\r\n             \"http://example.org/\"\r\n           ]\r\n         ],\r\n         [\r\n           [\"xn--zckzah\"],\r\n           [\r\n             \"https://example.net/rdapxn--zckzah/\",\r\n             \"http://example.net/rdapxn--zckzah/\"\r\n           ]\r\n         ]\r\n       ]\r\n   }", "correct_text": "{\r\n       \"version\": \"1.0\",\r\n       \"publication\": \"YYYY-MM-DDTHH:MM:SSZ\",\r\n       \"description\": \"Some text\",\r\n       \"services\": [\r\n         [\r\n           [\"net\", \"com\"],\r\n           [\r\n             \"https://registry.example.com/myrdap/\"\r\n           ]\r\n         ],\r\n         [\r\n           [\"org\", \"mytld\"],\r\n           [\r\n             \"http://example.org/\"\r\n           ]\r\n         ],\r\n         [\r\n           [\"xn--zckzah\"],\r\n           [\r\n             \"https://example.net/rdap/xn--zckzah/\",\r\n             \"http://example.net/rdap/xn--zckzah/\"\r\n           ]\r\n         ]\r\n       ]\r\n   }", "notes": "Include a slash between rdap and xn--zckzah. rdapxn--zckzah is not a valid a-label", "submit_date": "2018-08-14", "submitter_name": "Pieter Vandepitte", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2021-12-02 15:45:24"}, {"errata_id": "7147", "doc-id": "RFC9260", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "          +----+--------------------------------------------------+\r\n          | 00 | Stop processing this SCTP packet and discard the |\r\n          |    | unrecognized chunk and all further chunks.       |\r\n          +----+--------------------------------------------------+\r\n          | 01 | Stop processing this SCTP packet, discard the    |\r\n          |    | unrecognized chunk and all further chunks, and   |\r\n          |    | report the unrecognized chunk in an ERROR chunk  |\r\n          |    | using the 'Unrecognized Chunk Type' error cause. |\r\n          +----+--------------------------------------------------+\r\n          | 10 | Skip this chunk and continue processing.         |\r\n          +----+--------------------------------------------------+\r\n          | 11 | Skip this chunk and continue processing, but     |\r\n          |    | report it in an ERROR chunk using the            |\r\n          |    | 'Unrecognized Chunk Type' error cause.           |\r\n          +----+--------------------------------------------------+\r\n", "correct_text": "          +----+--------------------------------------------------+\r\n          | 00 | Stop processing this SCTP packet and discard the |\r\n          |    | unrecognized chunk and all further chunks.       |\r\n          +----+--------------------------------------------------+\r\n          | 01 | Stop processing this SCTP packet, discard the    |\r\n          |    | unrecognized chunk and all further chunks, and   |\r\n          |    | report the unrecognized chunk in an ERROR chunk  |\r\n          |    | using the \"Unrecognized Chunk Type\" error cause. |\r\n          +----+--------------------------------------------------+\r\n          | 10 | Skip this chunk and continue processing.         |\r\n          +----+--------------------------------------------------+\r\n          | 11 | Skip this chunk and continue processing, but     |\r\n          |    | report it in an ERROR chunk using the            |\r\n          |    | \"Unrecognized Chunk Type\" error cause.           |\r\n          +----+--------------------------------------------------+\r\n", "notes": "In the rest of the document, error cause names are enclosed in double quotes, not in single quotes.", "submit_date": "2022-10-06", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-10 21:00:11"}, {"errata_id": "5466", "doc-id": "RFC8422", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "   Actions of the sender:\r\n\r\n   The server constructs an appropriate certificate chain and conveys it\r\n   to the client in the Certificate message.  If the client has used a\r\n   Supported Elliptic Curves Extension, the public key in the server's\r\n   certificate MUST respect the client's choice of elliptic curves.  A\r\n   server that cannot satisfy this requirement MUST NOT choose an ECC\r\n   cipher suite in its ServerHello message.)", "correct_text": "   Actions of the sender:\r\n\r\n   The server constructs an appropriate certificate chain and conveys it\r\n   to the client in the Certificate message.  If the client has used a\r\n   Supported Elliptic Curves Extension, the public key in the server's\r\n   certificate MUST respect the client's choice of elliptic curves.  A\r\n   server that cannot satisfy this requirement MUST NOT choose an ECC\r\n   cipher suite in its ServerHello message.", "notes": "This removes the spurious closing parenthesis of the last sentence of the \"Actions of the sender\" paragraph.", "submit_date": "2018-08-17", "submitter_name": "Masato Gosui", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5467", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15.2", "orig_text": "   | LAYOUTGET            | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,     |\r\n   |                      | NFS4ERR_BADIOMODE, NFS4ERR_BADLAYOUT,      |\r\n   |                      | NFS4ERR_BADXDR, NFS4ERR_BAD_STATEID,       |\r\n   |                      | NFS4ERR_DEADSESSION, NFS4ERR_DELAY,        |\r\n   |                      | NFS4ERR_DELEG_REVOKED, NFS4ERR_DQUOT,      |\r\n   |                      | NFS4ERR_FHEXPIRED, NFS4ERR_GRACE,          |\r\n   |                      | NFS4ERR_INVAL, NFS4ERR_IO,                 |\r\n   |                      | NFS4ERR_LAYOUTTRYLATER,                    |\r\n   |                      | NFS4ERR_LAYOUTUNAVAILABLE, NFS4ERR_LOCKED, |\r\n   |                      | NFS4ERR_MOVED, NFS4ERR_NOFILEHANDLE,       |\r\n   |                      | NFS4ERR_NOSPC, NFS4ERR_NOTSUPP,            |\r\n   |                      | NFS4ERR_OLD_STATEID, NFS4ERR_OPENMODE,     |\r\n   |                      | NFS4ERR_OP_NOT_IN_SESSION,                 |\r\n   |                      | NFS4ERR_RECALLCONFLICT,                    |\r\n   |                      | NFS4ERR_REP_TOO_BIG,                       |\r\n   |                      | NFS4ERR_REP_TOO_BIG_TO_CACHE,              |\r\n   |                      | NFS4ERR_REQ_TOO_BIG,                       |\r\n   |                      | NFS4ERR_RETRY_UNCACHED_REP, NFS4ERR_ROFS,  |\r\n   |                      | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,        |\r\n   |                      | NFS4ERR_TOOSMALL, NFS4ERR_TOO_MANY_OPS,    |\r\n   |                      | NFS4ERR_UNKNOWN_LAYOUTTYPE,                |\r\n   |                      | NFS4ERR_WRONG_TYPE                         |", "correct_text": "   | LAYOUTGET            | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,     |\r\n   |                      | NFS4ERR_BADIOMODE, NFS4ERR_BADLAYOUT,      |\r\n   |                      | NFS4ERR_BADXDR, NFS4ERR_BAD_STATEID,       |\r\n   |                      | NFS4ERR_DEADSESSION, NFS4ERR_DELAY,        |\r\n   |                      | NFS4ERR_DELEG_REVOKED, NFS4ERR_DQUOT,      |\r\n   |                      | NFS4ERR_EXPIRED, NFS4ERR_FHEXPIRED,        |\r\n   |                      | NFS4ERR_GRACE, NFS4ERR_INVAL, NFS4ERR_IO,  |\r\n   |                      | NFS4ERR_LAYOUTTRYLATER,                    |\r\n   |                      | NFS4ERR_LAYOUTUNAVAILABLE, NFS4ERR_LOCKED, |\r\n   |                      | NFS4ERR_MOVED, NFS4ERR_NOFILEHANDLE,       |\r\n   |                      | NFS4ERR_NOSPC, NFS4ERR_NOTSUPP,            |\r\n   |                      | NFS4ERR_OLD_STATEID, NFS4ERR_OPENMODE,     |\r\n   |                      | NFS4ERR_OP_NOT_IN_SESSION,                 |\r\n   |                      | NFS4ERR_RECALLCONFLICT,                    |\r\n   |                      | NFS4ERR_REP_TOO_BIG,                       |\r\n   |                      | NFS4ERR_REP_TOO_BIG_TO_CACHE,              |\r\n   |                      | NFS4ERR_REQ_TOO_BIG,                       |\r\n   |                      | NFS4ERR_RETRY_UNCACHED_REP, NFS4ERR_ROFS,  |\r\n   |                      | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,        |\r\n   |                      | NFS4ERR_TOOSMALL, NFS4ERR_TOO_MANY_OPS,    |\r\n   |                      | NFS4ERR_UNKNOWN_LAYOUTTYPE,                |\r\n   |                      | NFS4ERR_WRONG_TYPE                         |", "notes": "LAYOUTGET takes a stateid argument that can represent either a layout or a delegation,\r\nor open/lock state. As such, it needs to be able to report back when the state represented\r\nby that stateid has expired.\r\n\r\n(Verified on NFSv4 mailing list)", "submit_date": "2018-08-17", "submitter_name": "Trond Myklebust", "verifier_id": "", "verifier_name": "Spencer Dawkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5468", "doc-id": "RFC8422", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.4", "orig_text": "   namedCurve: Specifies a recommended set of elliptic curve domain", "correct_text": "   namedcurve: Specifies a recommended set of elliptic curve domain", "notes": "This fixes mismatched names of the variable \"namedcurve\" in the \"Structure of this message\" paragraph.", "submit_date": "2018-08-17", "submitter_name": "Masato Gosui", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 02:52:13"}, {"errata_id": "5469", "doc-id": "RFC2047", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "    In this case the set of characters that may be used in a \"Q\"-encoded\r\n    'encoded-word' is restricted to: <upper and lower case ASCII\r\n    letters, decimal digits, \"!\", \"*\", \"+\", \"-\", \"/\", \"=\", and \"_\"\r\n    (underscore, ASCII 95.)>", "correct_text": "In this case the set of characters that may be used in a \"Q\"-encoded\r\n'encoded-text' is restricted to: <upper and lower case ASCII\r\nletters, decimal digits, \"!\", \"*\", \"+\", \"-\", \"/\", \"=\" (only if\r\nfollowed by two hexadecimal digits), and \"_\" (underscore, ASCII 95.)>", "notes": "This sentence discusses the use of encoded words within a phrase.  However, the original text is wrong in at least two ways: \r\n\r\n1. The production \"encoded-word\" also allows \"?\" to appear, as well as characters allowed in MIME \"token\"s.\r\n2. Even in the \"encoded-text\" portion the \"=\" sign can't appear freely in Q-encoding, but must be followed by two hexadecimal characters (as stated later in section 5).\r\n\r\nThe correction given here changes \"encoded-word\" to \"encoded-text\" and adds text restricting where \"=\" can appear.  Another plausible correction would be to add \"?\" and the other characters allowed in \"tokens\" (and leave the text \"'q'-encoded 'encoded-word'\" alone), but that would interfere with later RFCs, notably RFC 2231, that restrict the syntax of the charset component of encoded-words.", "submit_date": "2018-08-17", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7148", "doc-id": "RFC9260", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.3", "orig_text": "A receiver of an INIT ACK chunk with the a_rwnd value set to a\r\nvalue smaller than 1500 MUST discard the packet, SHOULD send a\r\npacket in response containing an ABORT chunk and using the\r\nInitiate Tag as the Verification Tag, and MUST NOT change the\r\nstate of any existing association.\r\n", "correct_text": "If an endpoint in the COOKIE-WAIT state receives an INIT ACK chunk\r\nwith the a_rwnd value set to a value smaller than 1500, it MUST\r\ndestroy the TCB and SHOULD send an ABORT chunk.  If such an\r\nINIT ACK chunk is received in any state other than CLOSED or\r\nCOOKIE-WAIT, it SHOULD be discarded silently (see Section 5.2.3).\r\n", "notes": "The handling of a_rwnd < 1500 should be similar to the handling of OS = 0 or MIS = 0.", "submit_date": "2022-10-06", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-10-06 17:59:19"}, {"errata_id": "7149", "doc-id": "RFC1337", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "As a result, B sends segment 6, an ACK for sequence = 640, which\r\nis 40 beyond any data sent by A.  Assume for the present that this\r\nACK arrives at A *after* A has sent segment 7a, the next full data\r\nsegment.  In that case, the ACK segment 8a acknowledges data that\r\nhas been sent, and the error goes undetected.  Another possible\r\ncontinuation after segment 6 leads to hazard H3, shown below.\r\n", "correct_text": "As a result, B sends segment 6, an ACK for sequence = 640, which\r\nis 40 beyond any data sent by A.  Assume for the present that this\r\nACK arrives at A *after* A has sent segment 7a, the next full data\r\nsegment.  In that case, the ACK segment 8a acknowledges data that\r\nhas been sent, and the error goes undetected.  Another possible\r\ncontinuation after segment 6 leads to hazard H2, shown below.\r\n", "notes": "The forward reference in the last sentence should be H2, not H3.", "submit_date": "2022-10-06", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-06 21:21:48"}, {"errata_id": "7150", "doc-id": "RFC5598", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "Figure 5: Protocols and Services", "correct_text": "Figure 5: Protocols and Services (with reporting details)", "notes": "Figure 5 is careful to list each of the architectural components from an author to a recipient.  However there are multiple places in that sequence that can generate a report back to the author or originating system.  The diagram showing these is overly simplistic and for example, does not show the requisite submission or delivery agents needed for such return reporting.\r\n\r\nFixing this will require some thoughtful reworking of the diagram.", "submit_date": "2022-10-08", "submitter_name": "Dave Crocker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5472", "doc-id": "RFC7530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2.1", "orig_text": "   When NFS4ERR_EXPIRED is returned, the server MAY retain information\r\n   about the delegations held by the client, deleting those that are\r\n   invalidated by a conflicting request.  Retaining such information\r\n   will allow the client to recover all non-invalidated delegations\r\n   using the claim type CLAIM_DELEGATE_PREV, once the\r\n   SETCLIENTID_CONFIRM is done to recover.  Attempted recovery of a\r\n   delegation that the client has no record of, typically because they\r\n   were invalidated by conflicting requests, will result in the error\r\n   NFS4ERR_BAD_RECLAIM.  Once a reclaim is attempted for all delegations\r\n   that the client held, it SHOULD do a DELEGPURGE to allow any\r\n   remaining server delegation information to be freed.", "correct_text": "   When NFS4ERR_EXPIRED is returned, the server MAY retain information\r\n   about the delegations held by the client, deleting those that are\r\n   invalidated by a conflicting request.  Retaining such information\r\n   will allow the client to recover all non-invalidated delegations\r\n   using the claim type CLAIM_DELEGATE_PREV, once the\r\n   SETCLIENTID_CONFIRM is done to recover.  Attempted recovery of a\r\n   delegation that the client has no record of, typically because they\r\n   were invalidated by conflicting requests, will result in the error\r\n   NFS4ERR_RECLAIM_BAD.  Once a reclaim is attempted for all delegations\r\n   that the client held, it SHOULD do a DELEGPURGE to allow any\r\n   remaining server delegation information to be freed.", "notes": "The defined error code is NFS4ERR_RECLAIM_BAD\r\n\r\n\r\n--\r\nRFC Editor Note: This also appears in 16.16.5. See https://www.rfc-editor.org/errata/eid5471.", "submit_date": "2018-08-18", "submitter_name": "Tigran Mkrtchyan", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-02 22:02:24"}, {"errata_id": "5473", "doc-id": "RFC6381", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   The 'codecs' parameter takes either of two forms.  The first form is\r\n   used when the value does not contain any octets that require\r\n   encoding.  The second form uses [RFC2231] to allow arbitrary octets\r\n   to be encoded.  With either form, quotes allow for commas and other\r\n   characters in <tspecials> (quotes MAY be used even when not\r\n   required).\r\n\r\n [...]\r\n\r\n   The BNF syntax is as follows:\r\n\r\n [...]\r\n\r\n      fancy-list  := DQUOTE [charset] \"'\" [language] \"'\" id-list DQUOTE\r\n                  ; Parsers MAY ignore <language>\r\n                  ; Parsers MAY support only US-ASCII and UTF-8\r\n", "correct_text": "   The 'codecs' parameter takes either of two forms.  The first form is\r\n   used when the value does not contain any octets that require\r\n   encoding.  The second form uses [RFC2231] to allow arbitrary octets\r\n   to be encoded.  With the first form only, quotes allow for commas and other\r\n   characters in <tspecials> (quotes MAY be used even when not\r\n   required).\r\n\r\n [...]\r\n\r\n   The BNF syntax is as follows:\r\n\r\n [...]\r\n\r\n      fancy-list  := [charset] \"'\" [language] \"'\" fancy-id-list\r\n                  ; Parsers MAY ignore <language>\r\n                  ; Parsers MAY support only US-ASCII and UTF-8\r\n      fancy-id-list     := id-encoded *( \"%2c\" id-encoded )\r\n\r\n", "notes": "RFC 6381's definition of \"codecs\" (and \"profiles\") conflicts with the generic syntax for RFC 2231 section 4 character set and language information.  Notably, RFC 2231 (which changes the syntax in RFC 2045 in a manner relevant here) disallows quoted strings as the attribute value if a parameter name ends with an asterisk (see the productions \"extended-initial-value\" and \"extended-other-values\" in RFC 2231).  Thus, for example, the example\r\n\r\n  codecs*=\"''%25%20xz, gork\"\r\n\r\nis ill-formed under RFC 2231, since it uses a quoted-string in a parameter name ending in \"*\".\r\n\r\nThis erratum shows the correction only in section 3.1, but conforming corrections may need to be made elsewhere in the document.", "submit_date": "2018-08-20", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5474", "doc-id": "RFC7233", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.", "orig_text": "For byte ranges, failing to overlap the current extent means that the\r\n   first-byte-pos of all of the byte-range-spec values were greater than\r\n   the current length of the selected representation.", "correct_text": "For byte ranges, failing to overlap the current extent means that the\r\n   first-byte-pos of all of the byte-range-spec values were greater than\r\n   or equal to the current length of the selected representation.\r\n   ^^^^^^^^^^^", "notes": "If the length of the representation is 500 bytes, then the range of the entire representation is 0-499. Then a range starting at byte position 500 fails to overlap the representation.", "submit_date": "2018-08-21", "submitter_name": "Kalin Gyokov", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5475", "doc-id": "RFC2152", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Discussion", "orig_text": "      Content-type: multipart/mixed; boundary=foo\r\n      Content-Disposition: inline\r\n\r\n      --foo\r\n      Content-type: text/plain; charset=us-ascii\r\n\r\n      Hi Mom\r\n      --foo\r\n      Content-type: text/plain; charset=UNICODE-2-0\r\n      Content-transfer-encoding: base64\r\n\r\n      Jjo=\r\n      --foo\r\n      Content-type: text/plain; charset=us-ascii\r\n\r\n      !\r\n      --foo--", "correct_text": "      Content-type: multipart/mixed; boundary=foo\r\n      Content-Disposition: inline\r\n\r\n      --foo\r\n      Content-type: text/plain; charset=us-ascii\r\n\r\n      Hi Mom\r\n      --foo\r\n      Content-type: text/plain; charset=UTF-7\r\n      Content-transfer-encoding: base64\r\n\r\n      Jjo=\r\n      --foo\r\n      Content-type: text/plain; charset=us-ascii\r\n\r\n      !\r\n      --foo--", "notes": "The charset name for this RFC is UTF-7, not UNICODE-2-0.\n --VERIFIER NOTES-- \n   \r\nThis is an example that's specifically introduced with, \"As an alternative to use of UTF-7,\" and quite intentionally uses a charset other than UTF-7.", "submit_date": "2018-08-22", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5476", "doc-id": "RFC5661", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "18.42.3", "orig_text": "   matching layout segment(s) for the defined byte-range, the server\r\n   should return the error NFS4ERR_BAD_LAYOUT.", "correct_text": "   matching layout segment(s) for the defined byte-range, the server\r\n   should return the error NFS4ERR_BADLAYOUT.", "notes": "The error code is   NFS4ERR_BADLAYOUT.", "submit_date": "2018-08-23", "submitter_name": "Tigran Mkrtchyan", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2019-10-25 08:10:36"}, {"errata_id": "7151", "doc-id": "RFC7209", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12", "orig_text": "   [RFC4364]  Bersani, F. and H. Tschofenig, \"The EAP-PSK Protocol: A\r\n              Pre-Shared Key Extensible Authentication Protocol (EAP)\r\n              Method\", RFC 4764, January 2007.\r\n", "correct_text": "   [RFC4364]  Rosen, E., and Rekhter, Y., \"BGP/MPLS IP Virtual Private \r\n              Networks (VPNs)\", RFC 4364, February 2007.\r\n              \r\n", "notes": "Incorrect document title and data.", "submit_date": "2022-10-11", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 22:43:52"}, {"errata_id": "7153", "doc-id": "RFC2229", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "   \"OPTIONAL\") means that his item is optional, and may be omitted", "correct_text": "   \"OPTIONAL\") means that this item is optional, and may be omitted", "notes": "Typo.", "submit_date": "2022-10-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 20:30:54"}, {"errata_id": "7154", "doc-id": "RFC2229", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.2", "orig_text": "   For code 150, parameters 1 indicates the number of definitions", "correct_text": "   For code 150, parameter 1 indicates the number of definitions", "notes": "Wrong plural.", "submit_date": "2022-10-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 20:38:53"}, {"errata_id": "7155", "doc-id": "RFC2229", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.2", "orig_text": "   definition has been retrieved, and parameter 3 is the the short", "correct_text": "   definition has been retrieved, and parameter 3 is the short", "notes": "Doubled \"the\".", "submit_date": "2022-10-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 21:02:19"}, {"errata_id": "5477", "doc-id": "RFC7938", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2.3", "orig_text": "   The small example of topology in Figure 3 is built from devices with\r\n   a port count of 4.  In this document, one set of directly connected\r\n   Tier 2 and Tier 3 devices along with their attached servers will be\r\n   referred to as a \"cluster\".  For example, DEV A, B, C, D, and the\r\n   servers that connect to DEV A and B, on Figure 3 form a cluster.  The\r\n   concept of a cluster may also be a useful concept as a single\r\n   deployment or maintenance unit that can be operated on at a different\r\n   frequency than the entire topology.", "correct_text": "   The small example of topology in Figure 3 is built from devices with\r\n   a port count of 4. By introducing an additional Tier the 4-port\r\n   Tier 1 device has still two unused ports to connect further devices,\r\n   therefore scaling from a maximum of 8 servers in a 3-stage Clos to a\r\n   maximum of 16 servers in this 5-stage Clos.\r\n   In this document, one set of directly connected Tier 2 and Tier 3\r\n   devices along with their attached servers will be referred to as a\r\n   \"cluster\".  For example, DEV A, B, C, D, and the servers that\r\n   connect to DEV A and B, on Figure 3 form a cluster.  The concept of\r\n   a cluster may also be a useful concept as a single deployment or\r\n   maintenance unit that can be operated on at a different frequency\r\n   than the entire topology.", "notes": "Section does not properly describe where the scaling happens, also the depicted topology still connects only 8 servers (the same amount as with a 3-stage Clos). The reader can grasp the scaling only when looking very carefully at the figure.", "submit_date": "2018-08-24", "submitter_name": "Klemens Schragel", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5478", "doc-id": "RFC8264", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.12", "orig_text": "   L: Control(cp) = True", "correct_text": "   L: General_Category(cp) = Cc", "notes": "Nothing in the Unicode Standard (including UAX 44) defines a property or function named Control.  What is probably meant is the General_Category property value Control, which is abbreviated Cc.", "submit_date": "2018-08-26", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5479", "doc-id": "RFC8265", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   A userpart is allowed to contain only code\r\n   points that are allowed by the PRECIS IdentifierClass defined in\r\n   Section 4.2 of [RFC8264] and thus consists almost exclusively of\r\n   letters and digits.\r\n", "correct_text": "   A userpart is allowed to contain only code\r\n   points that are allowed by the PRECIS IdentifierClass defined in\r\n   Section 4.2 of [RFC8264] (with respect to the userpart containing\r\n   them, not to the username as a whole) and thus consists almost \r\n   exclusively of letters and digits.", "notes": "Because certain characters in IdentifierClass are CONTEXTO and are not valid unless the whole string doesn't contain certain other characters (an example is ARABIC-INDIC DIGITS), it is unclear whether the context-specific rules apply to the whole username or to individual userparts.  However, section 3.5 strongly suggests that usernames (as opposed to userparts) are the matter of a higher-level protocol than this RFC.  As a result, this erratum adds the text in parentheses to clarify that context-specific rules apply to individual userparts.", "submit_date": "2018-08-26", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5480", "doc-id": "RFC2631", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.1", "orig_text": "h is any integer with 1 < h < p-1 such that h{(p-1)/q} mod p > 1\r\n(g has order q mod p; i.e. g^q mod p = 1 if g!=1)", "correct_text": "h is any integer with 1 < h < p-1 such that h^{(p-1)/q} mod p > 1\r\n(g has order q mod p; i.e. g^q mod p = 1 if g!=1)", "notes": "The explanation of h omitted the exponentiation operator in the inline formula.", "submit_date": "2018-08-27", "submitter_name": "Charlie Zhuo", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5481", "doc-id": "RFC4791", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.8.5", "orig_text": ">> Response <<\r\n\r\n   HTTP/1.1 207 Multi-Status\r\n   Date: Sat, 11 Nov 2006 09:32:12 GMT\r\n   Content-Type: application/xml; charset=\"utf-8\"\r\n   Content-Length: xxxx\r\n\r\n   <?xml version=\"1.0\" encoding=\"utf-8\" ?>\r\n   <D:multistatus xmlns:D=\"DAV:\"\r\n                  xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:response>\r\n       <D:href>http://cal.example.com/bernard/work/abcd4.ics</D:href>\r\n       <D:propstat>\r\n         <D:prop>\r\n           <D:getetag>\"fffff-abcd4\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTODO\r\n   DTSTAMP:20060205T235300Z\r\n   DUE;TZID=US/Eastern:20060106T120000\r\n   LAST-MODIFIED:20060205T235308Z\r\n   SEQUENCE:1\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #2\r\n   UID:E10BA47467C5C69BB74E8720@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=START:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n         </D:prop>\r\n         <D:status>HTTP/1.1 200 OK</D:status>\r\n       </D:propstat>\r\n     </D:response>\r\n   </D:multistatus>", "correct_text": ">> Response <<\r\n\r\n   HTTP/1.1 207 Multi-Status\r\n   Date: Sat, 11 Nov 2006 09:32:12 GMT\r\n   Content-Type: application/xml; charset=\"utf-8\"\r\n   Content-Length: xxxx\r\n\r\n   <?xml version=\"1.0\" encoding=\"utf-8\" ?>\r\n   <D:multistatus xmlns:D=\"DAV:\"\r\n                  xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:response>\r\n       <D:href>http://cal.example.com/bernard/work/abcd5.ics</D:href>\r\n       <D:propstat>\r\n         <D:prop>\r\n           <D:getetag>\"fffff-abcd5\"</D:getetag>\r\n           <C:calendar-data>BEGIN:VCALENDAR\r\n   VERSION:2.0\r\n   PRODID:-//Example Corp.//CalDAV Client//EN\r\n   BEGIN:VTIMEZONE\r\n   LAST-MODIFIED:20040110T032845Z\r\n   TZID:US/Eastern\r\n   BEGIN:DAYLIGHT\r\n   DTSTART:20000404T020000\r\n   RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4\r\n   TZNAME:EDT\r\n   TZOFFSETFROM:-0500\r\n   TZOFFSETTO:-0400\r\n   END:DAYLIGHT\r\n   BEGIN:STANDARD\r\n   DTSTART:20001026T020000\r\n   RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10\r\n   TZNAME:EST\r\n   TZOFFSETFROM:-0400\r\n   TZOFFSETTO:-0500\r\n   END:STANDARD\r\n   END:VTIMEZONE\r\n   BEGIN:VTODO\r\n   DTSTAMP:20060205T235300Z\r\n   DUE;TZID=US/Eastern:20060106T120000\r\n   LAST-MODIFIED:20060205T235308Z\r\n   SEQUENCE:1\r\n   STATUS:NEEDS-ACTION\r\n   SUMMARY:Task #2\r\n   UID:E10BA47467C5C69BB74E8720@example.com\r\n   BEGIN:VALARM\r\n   ACTION:AUDIO\r\n   TRIGGER;RELATED=END:-PT10M\r\n   END:VALARM\r\n   END:VTODO\r\n   END:VCALENDAR\r\n   </C:calendar-data>\r\n         </D:prop>\r\n         <D:status>HTTP/1.1 200 OK</D:status>\r\n       </D:propstat>\r\n     </D:response>\r\n   </D:multistatus>", "notes": "The timezone is missing from the response in Section 7.8.5. \r\n\r\nThis is probably related to the previous errata (Errata ID: 4154, Errata ID: 4158, Errata ID: 4159), which all corrected the result to return abcd5.ics instead of abcd4.ics (which contains no timezone).\r\n\r\nFrom rfc4791, Section 4.1.:\r\n\r\n   Calendar object resources contained in calendar collections MUST NOT\r\n   contain more than one type of calendar component (e.g., VEVENT,\r\n   VTODO, VJOURNAL, VFREEBUSY, etc.) with the exception of VTIMEZONE\r\n   components, which **MUST be specified for each unique TZID parameter\r\n   value specified in the iCalendar object.**", "submit_date": "2018-08-27", "submitter_name": "Stefanie Schirmer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5482", "doc-id": "RFC1557", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Formal Syn.", "orig_text": "   segment         = SO 1*(one-of-94 one-of-94 SI\r\n", "correct_text": "   segment         = SO 1*(one-of-94 one-of-94) SI\r\n", "notes": "Missing parenthesis in ABNF", "submit_date": "2018-08-27", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7156", "doc-id": "RFC2229", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.12.1", "orig_text": "   OPTION MIME is not set, then BASE64 encoding MUST be used.  If\r\n\r\n   OPTION MIME is set, then BASE64 is the default encoding, as specified\r\n   in section 3.10.1.", "correct_text": "   OPTION MIME is not set, then BASE64 encoding MUST be used.  If\r\n   OPTION MIME is set, then BASE64 is the default encoding, as specified\r\n   in section 3.10.1.", "notes": "Empty line.", "submit_date": "2022-10-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 21:06:06"}, {"errata_id": "7157", "doc-id": "RFC2229", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   commands can improved DICT performance significantly, especially in", "correct_text": "   commands can improve DICT performance significantly, especially in", "notes": "The correct verb form would be \"improve\".", "submit_date": "2022-10-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 21:10:36"}, {"errata_id": "7158", "doc-id": "RFC2229", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   definition cannot be retrieved, and the client should report and\r\n   error or retry the command.  If the server is working, it may be able", "correct_text": "   definition cannot be retrieved, and the client should report an\r\n   error or retry the command.  If the server is working, it may be able", "notes": "Typo.", "submit_date": "2022-10-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 21:15:34"}, {"errata_id": "7159", "doc-id": "RFC2229", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   Theses are samples of the conversations that might be expected with", "correct_text": "   These are samples of the conversations that might be expected with", "notes": "Typo.", "submit_date": "2022-10-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-12 21:20:38"}, {"errata_id": "5483", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.8.2", "orig_text": "For X25519 and X448, the contents of the public value are the byte\r\nstring inputs and outputs of the corresponding functions defined in\r\n[RFC7748]: 32 bytes for X25519 and 56 bytes for X448.", "correct_text": "For X25519 and X448, the contents of the public value are the byte\r\nstring outputs of the corresponding functions defined in [RFC7748]: 32\r\nbytes for X25519 and 56 bytes for X448.", "notes": "Per Section 7.4.2 of this RFC and Section 6 of RFC7748, the byte string inputs to the corresponding ECDH scalar multiplication function are the private key and the u-coordinate of the standard public base point, the former of which of course must not be transmitted and the latter of which is a known constant.\r\n\r\nPaul Wouters (AD): Resolved but with the following Corrected Text:\r\n\r\nFor X25519 and X448, the contents of the public value is the K_A or\r\nK_B value described in Section 6 of [RFC7748].  This is 32 bytes for\r\nX25519 and 56 bytes for X448.\r\n\r\nFrom another perspective, including the byte string inputs in the contents of the public value would contradict the resulting content sizes given at the end of the cited paragraph as well as the statement in Section 7.4.2 that the public key put into the KeyShareEntry is the output of ECDH scalar multiplication function.", "submit_date": "2018-08-28", "submitter_name": "Patrick Kelsey", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-29 00:57:07"}, {"errata_id": "5484", "doc-id": "RFC5890", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3.2.1", "orig_text": "   For IDNA-aware applications, the three types of valid labels are\r\n   \"A-labels\", \"U-labels\", and \"NR-LDH labels\", each of which is defined\r\n   below.\r\n", "correct_text": "   For IDNA-aware applications, the three types of valid labels are\r\n   \"A-labels\", \"U-labels\", and \"NR-LDH labels\", each of which is defined\r\n   below and in section 2.3.1.", "notes": "The term NR-LDH label is actually defined in section 2.3.1, not later in this section.\r\n\r\n[Note from the document author: In reality, at least from the author's perspective, \"NR-LDH label\" is defined in the section of that name, i.e., 2.3.2.2, which is \"below\" 2.3.2.1.  Whether 2.3.1 also \"defines\" it or supplements that definition (or if 2.3.2.1 supplements what 2.3.1 has to say) is a matter for debate, but it is clear that the text cited would benefit from a reference to 2.3.1.]", "submit_date": "2018-08-28", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-01-04 00:28:43"}, {"errata_id": "5485", "doc-id": "RFC8135", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "This document defines an Experimental Protocol for the \r\nInternet community.", "correct_text": "This document could have defined an Experimental Protocol \r\nfor the Internet community. It might well have been useful \r\nto use floating point addresses for addressing qubits in \r\na quantum computer where many small objects will occupy a \r\ntiny space, or with a protocol where location defines the \r\ndynamic address rather than the user. \r\n\r\nInstead of presenting a useful document it was thought that \r\nan April Fool's joke would be preferable. Furthermore, no \r\nsubmissions or work is to be performed on April 1st henceforth, \r\nlest it be confused with useful work versus a time for levity.", "notes": "We don't come here for jokes or porn or to hear about your intestinal problems. We come here for facts.\n --VERIFIER NOTES-- \n While it is possible that you don't use the Internet for jokes or porn, this cannot be said for everyone. And you forgot pictures of cats.", "submit_date": "2018-08-29", "submitter_name": "John Doe", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5486", "doc-id": "RFC7810", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.6", "orig_text": "Available Bandwidth: This field carries the available bandwidth on a\r\n   link, forwarding adjacency, or bundled link in IEEE floating-point\r\n   format with units of bytes per second.  For a link or forwarding\r\n   adjacency, available bandwidth is defined to be residual bandwidth\r\n   (see Section 4.5) minus the measured bandwidth used for the actual\r\n   forwarding of non-RSVP-TE label switched path packets.  For a bundled\r\n   link, available bandwidth is defined to be the sum of the component\r\n   link available bandwidths minus the measured bandwidth used for the\r\n   actual forwarding of non-RSVP-TE label switched path packets.  For a\r\n   bundled link, available bandwidth is defined to be the sum of the\r\n   component link available bandwidths.", "correct_text": "Available Bandwidth: This field carries the available bandwidth on a\r\n   link, forwarding adjacency, or bundled link in IEEE floating-point\r\n   format with units of bytes per second.  For a link or forwarding\r\n   adjacency, available bandwidth is defined to be residual bandwidth\r\n   (see Section 4.5) minus the measured bandwidth used for the actual\r\n   forwarding of non-RSVP-TE label switched path packets.  For a bundled\r\n   link, available bandwidth is defined to be the sum of the component\r\n   link (residual) bandwidths minus the measured bandwidth used for the\r\n   actual forwarding of non-RSVP-TE label switched path packets.For a\r\n   bundled link, available bandwidth is defined to be the sum of the\r\n   component link available bandwidths.", "notes": "Two sentences to explain 'available bandwidth' on a bundled link, but one says \"sum of component available bandwidth minus xxx\", the other says \"sum of component available bandwidth\", is conflicting. need to change the first sentence to 'sum of component residual bandwidth minus xxx'", "submit_date": "2018-08-31", "submitter_name": "Teresa", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5487", "doc-id": "RFC1867", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   If the user also indicated an image file \"file2.gif\" for the answer\r\n   to 'What files are you sending?', the client might client might send\r\n   back the following data:", "correct_text": "   If the user also indicated an image file \"file2.gif\" for the answer\r\n   to 'What files are you sending?', the client might send back the\r\n   following data:", "notes": "\"client might\" appears twice, which is a typo", "submit_date": "2018-08-31", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5488", "doc-id": "RFC1522", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   especials = \"(\" / \")\" / \"<\" / \">\" / \"@\" / \",\" / \";\" / \":\" / \"\r\n               <\"> / \"/\" / \"[\" / \"]\" / \"?\" / \".\" / \"=\"", "correct_text": "   especials = \"(\" / \")\" / \"<\" / \">\" / \"@\" / \",\" / \";\" / \":\" / \r\n               <\"> / \"/\" / \"[\" / \"]\" / \"?\" / \".\" / \"=\"", "notes": "this double quote at the end of the line is a mistake", "submit_date": "2018-09-03", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5489", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.20.3.2", "orig_text": "The argument \"delete\" deletes properties from the target node.  The\r\n   properties to delete are identified by substatements to the \"delete\"\r\n   statement. ", "correct_text": "The argument \"delete\" deletes properties from the target node.  The\r\n   properties to delete are identified by substatements to the \"deviate\"\r\n   statement. ", "notes": "", "submit_date": "2018-09-03", "submitter_name": "Andreas Jakobik", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5490", "doc-id": "RFC8164", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "in order minimize the delays that might be incurred.", "correct_text": "in order to minimize the delays that might be incurred.", "notes": "Grammar only.", "submit_date": "2018-09-04", "submitter_name": "Steven Meixner", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:31:03"}, {"errata_id": "5496", "doc-id": "RFC7804", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   o  Normalize(str): Apply the Preparation and Enforcement steps\r\n      according to the OpaqueString profile (see [RFC7613]) to a UTF-8\r\n      [RFC3629] encoded \"str\".  The resulting string is also in UTF-8.\r\n      Note that implementations MUST either implement OpaqueString\r\n      profile operations from [RFC7613] or disallow the use of non\r\n      US-ASCII Unicode codepoints in \"str\".  The latter is a particular\r\n      case of compliance with [RFC7613].\r\n", "correct_text": "   o  Normalize(str): Apply the Preparation and Enforcement steps\r\n      according to the OpaqueString profile (see [RFC7613]) to a UTF-8\r\n      [RFC3629] encoded \"str\".  The resulting string is also in UTF-8.\r\n      Note that implementations MUST either implement OpaqueString\r\n      profile operations from [RFC7613] or disallow the use of Unicode \r\n      codepoints not ranging from U+0020 to U+007E in \"str\".  The latter\r\n      is a particular case of compliance with [RFC7613].\r\n", "notes": "Control code points (including the ASCII controls U+0000 to U+001F as well as U+007F) are disallowed in the PRECIS FreeformClass, which the OpaqueString profile uses.  Thus it's not enough to just disallow non-US-ASCII codepoints (rather than implement the full OpaqueString profile) to comply with a subset of the OpaqueString profile.", "submit_date": "2018-09-08", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5497", "doc-id": "RFC8365", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.3", "orig_text": "   list of encapsulation types defined in [RFC5512]; they are listed in\r\n   Section 11.\r\n\r\n   The MPLS encapsulation tunnel type, listed in Section 11, is needed", "correct_text": "   list of encapsulation types defined in [RFC5512]; they are listed in\r\n   Section 12.\r\n\r\n   The MPLS encapsulation tunnel type, listed in Section 12, is needed", "notes": "Typo in the reference, Section 11 is \"11.  Security Considerations\", but text refers to \"12.  IANA Considerations\"", "submit_date": "2018-09-12", "submitter_name": "Klemens Schragel", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5498", "doc-id": "RFC6455", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "11.2", "orig_text": "   Name of token\r\n      WebSocket", "correct_text": "   Name of token\r\n      websocket", "notes": "The HTTP bootstrap request is required to use an upgrade token of all lowercase \"websocket\" - \r\n\r\n   5.   The request MUST contain an |Upgrade| header field whose value\r\n        MUST include the \"websocket\" keyword.\r\n\r\nThe registration is for \"WebSocket\" (capital W and capital S). In practice \"websocket\" is used.\r\n\r\nAlthough the interpretation of that is defined case-insensitively for this RFC (which conflicts with general HTTP semantics where this is case sensitive). As part of RFC 8441, the IANA registry has been updated to also include \"websocket\" with a reference to both RFC 6455 and RFC 8441.\r\n\r\nimo this errata should be held for update and the reference to \"WebSocket\" removed at that time.\r\n\r\nSee also https://www.rfc-editor.org/errata/eid5453", "submit_date": "2018-09-14", "submitter_name": "Patrick McManus", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5499", "doc-id": "RFC3325", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "   * F4   proxy.cisco.com -> proxy.pstn.net (trusted)\r\n\r\n   INVITE sip:+14085551212@proxy.pstn.net SIP/2.0\r\n   Via: SIP/2.0/TCP useragent.cisco.com;branch=z9hG4bK-124\r\n   Via: SIP/2.0/TCP proxy.cisco.com;branch=z9hG4bK-abc\r\n", "correct_text": "   * F4   proxy.cisco.com -> proxy.pstn.net (trusted)\r\n\r\n   INVITE sip:+14085551212@proxy.pstn.net SIP/2.0\r\n   Via: SIP/2.0/TCP proxy.cisco.com;branch=z9hG4bK-abc\r\n   Via: SIP/2.0/TCP useragent.cisco.com;branch=z9hG4bK-124\r\n", "notes": "As per RFC 3261, chapter 16.6, step 8:\r\n  The proxy MUST insert a Via header field value into the copy before the existing Via header field values.\r\n\r\nThe order of Via headers should be reversed. This applies to the following message examples:\r\nchapter 10.1: F4, F5\r\nchapter 10.2: F4, F5, F6\r\n\r\nText and examples in RFC3261 Section 20.42 supports the argument that the order is reversed.", "submit_date": "2018-09-20", "submitter_name": "Richard Phernambucq", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 19:33:43"}, {"errata_id": "5500", "doc-id": "RFC8441", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "Using a SETTINGS parameter to opt into an otherwise incompatible\r\nprotocol change is a use of \"Extending HTTP/2\" defined by Section 5.5\r\nof [RFC7540].  Specifically, the addition a new pseudo-header field,\r\n", "correct_text": "Using a SETTINGS parameter to opt into an otherwise incompatible\r\nprotocol change is a use of \"Extending HTTP/2\" defined by Section 5.5\r\nof [RFC7540].  Specifically, the addition of a new pseudo-header field,\r\n", "notes": "I think it's missing a word.", "submit_date": "2018-09-21", "submitter_name": "Lo\u00efc Hoguin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-01 20:59:37"}, {"errata_id": "5501", "doc-id": "RFC8270", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "[RFC4419] specifies a recommended minimum size of 1024 bits for k,\r\n   which is the modulus length of the DH group.  It also suggests that,\r\n   in all cases, the size of the group needs be at least 1024 bits.", "correct_text": "[RFC4419] specifies a recommended minimum size of 1024 bits for k,\r\n   which is the modulus length of the DH group.  It also suggests that,\r\n   in all cases, the size of the group needs to be at least 1024 bits.", "notes": "Fix a typo (missing \"to\").", "submit_date": "2018-09-21", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7160", "doc-id": "RFC7599", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.1", "orig_text": "Translating an IPv4 packet to carry it across the MAP domain will increase its size (typically by 20 bytes).", "correct_text": "Translating an IPv4 packet to carry it across the MAP domain will increase its size (typically either 20 or 28 bytes with fragmentation).", "notes": "In the context of MTU, it is important to account for packet fragmentation. If an IPv4 packet is fragmented, the size will increase by 28 bytes during translation. The IPv6 header is 20 bytes larger than the IPv4 header, and in addition the 8 byte IPv6 Fragmentation Header must be added.\r\n\r\n----\r\nVerifier note\r\n==========\r\n with help of Yong Cui: fragmentation indeed needs to be taken into account.", "submit_date": "2022-10-12", "submitter_name": "Michael Overcash", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2022-10-13 06:22:22"}, {"errata_id": "7520", "doc-id": "RFC8325", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9", "orig_text": "[IEEE.802.11-2016]\r\n              IEEE, \"IEEE Standard for Information technology -\r\n              Telecommunications and information exchange between\r\n              systems - Local and metropolitan area networks - Specific\r\n              requirements - Part 11: Wireless LAN Medium Access Control\r\n              (MAC) and Physical Layer (PHY) Specifications\",\r\n              IEEE 802.11, DOI 10.1109/IEEESTD.2016.7786995, December\r\n              2016, <https://standards.ieee.org/findstds/\r\n              standard/802.11-2016.html>.", "correct_text": "[IEEE.802.11-2016]\r\n              IEEE, \"IEEE Standard for Information technology -\r\n              Telecommunications and information exchange between\r\n              systems - Local and metropolitan area networks - Specific\r\n              requirements - Part 11: Wireless LAN Medium Access Control\r\n              (MAC) and Physical Layer (PHY) Specifications\",\r\n              IEEE 802.11, DOI 10.1109/IEEESTD.2016.7786995, December\r\n              2016, <https://standards.ieee.org/ieee/8802-11/10034/802.11/5536/>.", "notes": "The format links of IEEE standards has changed on the IEEE website. \r\nThe old URL now gives a 404 error. \r\n\r\nThe new one appears to be https://standards.ieee.org/ieee/8802-11/10034/802.11/5536/.\r\n\r\n--VERIFIER NOTES--\r\nThe URL worked at the time of publication. This should be reviewed if/when the RFC is updated. \r\n", "submit_date": "2023-05-22", "submitter_name": "Jason Livingood", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-05-24 20:22:53"}, {"errata_id": "5502", "doc-id": "RFC8270", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "   A malicious client could cause a Denial of Service by intentionally\r\n   making multiple connections that are less than 2048 bits in size.\r\n   Therefore, operating systems SHOULD NOT log DH groups that are less\r\n   than 2048 bits in size, as it would create an additional attack\r\n   surface.", "correct_text": "   A malicious client could cause a Denial of Service by intentionally\r\n   making multiple connections that are less than 2048 bits in size.\r\n   Therefore, operating systems without any rate-limited logging \r\n   SHOULD NOT log DH groups that are less than 2048 bits in size, as it\r\n   would create an additional attack surface.", "notes": "Instead of ignoring attacks, the administrator wants to know when one is taking place, particularly if it is an intense one which would lead to a denial of service, as suggested by the authors. Thus, using a rate-limited logging mechanism is an appropriate solution to keep records of the attack, and to notify the administrator in real-time then he can take actions if he wants to. As there might not be other ways to inform the administrator of an attack taking place, not logging at all is the last choice.\n --VERIFIER NOTES-- \n We are rejecting because it is not clear what course of action an administrator has when seeing such log messages, so the usefulness of this kind of logging seems marginal at best and the security considerations advice to just silently drop these connections without logging them still seems best.", "submit_date": "2018-09-21", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-30 09:53:55"}, {"errata_id": "5504", "doc-id": "RFC8040", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.3.8", "orig_text": "      GET /mystreams/NETCONF?start-time=2014-10-25T10%3A02%3A00Z\\\r\n         &stop-time=2014-10-25T12%3A31%3A00Z", "correct_text": "      GET /streams/NETCONF?start-time=2014-10-25T10%3A02%3A00Z\\\r\n         &stop-time=2014-10-25T12%3A31%3A00Z", "notes": "The node 'mystreams' is incorrect.", "submit_date": "2018-09-22", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5505", "doc-id": "RFC5545", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.19", "orig_text": "       tzidparam  = \"TZID\" \"=\" [tzidprefix] paramtext\r\n", "correct_text": "       tzidparam  = \"TZID\" \"=\" [tzidprefix] param-value\r\n", "notes": "TZID appears to be the only parameter defined 5545 whose value can not be a quoted string.  This is problematic in that time zone IDs such as \"GMT-03:00\" are beginning to appear (note the embedded colon).  RFC 6868 has no mechanism to quote a colon character, as it relies on such characters appearing within a quoted string.  I see no technical reason why a TZID parameter can not be quoted, and existing implementations already accept quoted TZIDs.", "submit_date": "2018-09-26", "submitter_name": "Ken Murchison", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:28:12"}, {"errata_id": "5506", "doc-id": "RFC8200", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix B.", "orig_text": "      -  Updated the Fragmentation header text to correct the inclusion\r\n         of an Authentication Header (AH) and noted No Next Header case.", "correct_text": "      -  Updated the Fragmentation header text to correct the inclusion\r\n         the Encapsulating Security Payload (ESP)  and noted No Next \r\n         Header case.", "notes": "The Extension headers are all other extension headers that are not\r\n      included in the Per-Fragment headers part of the packet.  For this\r\n      purpose, the Encapsulating Security Payload (ESP) is not\r\n      considered an extension header.  The Upper-Layer header is the\r\n      first upper-layer header that is not an IPv6 extension header.\r\n      Examples of upper-layer headers include TCP, UDP, IPv4, IPv6,\r\n      ICMPv6, and as noted ESP.\r\n\r\n      The Fragmentable Part consists of the rest of the packet after the\r\n      upper-layer header or after any header (i.e., initial IPv6 header\r\n      or extension header) that contains a Next Header value of No Next\r\n      Header.", "submit_date": "2018-09-27", "submitter_name": "jiangmaoyong", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-02-03 14:19:35"}, {"errata_id": "5512", "doc-id": "RFC7725", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3", "orig_text": "Note that in many cases clients can still access the denied resource\r\nby using technical countermeasures such as a VPN or the Tor network.", "correct_text": "(remove the sentence)", "notes": "I understand that the status code itself is kind of a joke (Fahrenheit 451), but the sentence above seems to have no place in a technical document. It provides no insight into use cases for either a client or implementing software.\n --VERIFIER NOTES-- \nThis statement went through IETF and IESG review as part of the original document. Removing it would be a material change to the contents of the document without first gaining consensus from the appropriate parties. The errata process cannot be used to make this kind of material change.", "submit_date": "2018-10-02", "submitter_name": "Curt Self", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:29:56"}, {"errata_id": "5516", "doc-id": "RFC8188", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "HTTP/1.1 200 OK\r\nContent-Type: application/octet-stream\r\nContent-Length: 54\r\nContent-Encoding: aes128gcm\r\n\r\nI1BsxtFttlv3u_Oo94xnmwAAEAAA-NAVub2qFgBEuQKRapoZu-IxkIva3MEB1PD-\r\nly8Thjg", "correct_text": "HTTP/1.1 200 OK\r\nContent-Type: application/octet-stream\r\nContent-Length: 53\r\nContent-Encoding: aes128gcm\r\n\r\nI1BsxtFttlv3u_Oo94xnmwAAEAAA-NAVub2qFgBEuQKRapoZu-IxkIva3MEB1PD-\r\nly8Thjg", "notes": "16-bit encrypted payload\r\n16-bit authentication tag\r\n21-bit header\r\n\r\nThe other example, in Section 3.2, reports the correct content length of 53", "submit_date": "2018-10-05", "submitter_name": "Dolan Murvihill", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:31:54"}, {"errata_id": "5514", "doc-id": "RFC8342", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "C.1", "orig_text": "   <system\r\n       xmlns=\"urn:example:system\"\r\n       xmlns:or=\"urn:ietf:params:xml:ns:yang:ietf-origin\">\r\n\r\n     <hostname or:origin=\"or:learned\">bar.example.com</hostname>\r\n\r\n     <interface or:origin=\"or:intended\">\r\n       <name>eth0</name>\r\n       <auto-negotiation>\r\n         <enabled or:origin=\"or:default\">true</enabled>\r\n         <speed>1000</speed>\r\n       </auto-negotiation>\r\n       <speed>100</speed>\r\n       <address>\r\n         <ip>2001:db8::10</ip>\r\n         <prefix-length>64</prefix-length>\r\n       </address>\r\n       <address or:origin=\"or:learned\">\r\n         <ip>2001:db8::1:100</ip>\r\n         <prefix-length>64</prefix-length>\r\n       </address>\r\n     </interface>\r\n\r\n     <interface or:origin=\"or:system\">\r\n       <name>lo0</name>\r\n       <address>\r\n         <ip>::1</ip>\r\n         <prefix-length>128</prefix-length>\r\n       </address>\r\n     </interface>\r\n\r\n   </system>", "correct_text": "   <system\r\n       xmlns=\"urn:example:system\"\r\n       xmlns:or=\"urn:ietf:params:xml:ns:yang:ietf-origin\"\r\n       or:origin=\"or:intended\">\r\n\r\n     <hostname or:origin=\"or:learned\">bar.example.com</hostname>\r\n\r\n     <interface or:origin=\"or:intended\">\r\n       <name>eth0</name>\r\n       <auto-negotiation>\r\n         <enabled or:origin=\"or:default\">true</enabled>\r\n         <speed>1000</speed>\r\n       </auto-negotiation>\r\n       <speed>100</speed>\r\n       <address>\r\n         <ip>2001:db8::10</ip>\r\n         <prefix-length>64</prefix-length>\r\n       </address>\r\n       <address or:origin=\"or:learned\">\r\n         <ip>2001:db8::1:100</ip>\r\n         <prefix-length>64</prefix-length>\r\n       </address>\r\n     </interface>\r\n\r\n     <interface or:origin=\"or:system\">\r\n       <name>lo0</name>\r\n       <address>\r\n         <ip>::1</ip>\r\n         <prefix-length>128</prefix-length>\r\n       </address>\r\n     </interface>\r\n\r\n   </system>", "notes": "There was no \"origin\" attribute to the \"system\" top-level container, though it is a configuration node.\r\nAs per the extension definition \"The origin for any top-level configuration data nodes must be specified.\"\r\n\r\nTo choose an extension for top-level container in such cases, I would prefer one of the origin of its children and used \"intended\". , instead of \"unknown\".\r\n\r\nThis has already been discussed in the mail chain, but also mentioned here to help readers in future.", "submit_date": "2018-10-05", "submitter_name": "Rohit R Ranade", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5507", "doc-id": "RFC4868", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.7.2.2.", "orig_text": "Test Case AUTH384-4:\r\n   Key =          0102030405060708090a0b0c0d0e0f10\r\n                  1112131415161718191a1b1c1d1e1f20\r\n                  0a0b0c0d0e0f10111213141516171819", "correct_text": "Test Case AUTH384-4:\r\n   Key =          0102030405060708090a0b0c0d0e0f10\r\n                  1112131415161718191a1b1c1d1e1f20\r\n                  2122232425262728292a2b2c2d2e2f30", "notes": "as the keys increase from case 256 to 384 and to 512, they have the same base.", "submit_date": "2018-09-27", "submitter_name": "f. Le Pouliquen", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:35:25"}, {"errata_id": "5508", "doc-id": "RFC2662", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "             OBJECT      adslAtucConfMinSnrMgn\r\n             MIN-ACCESS  read-wr\r\n             MIN-ACCESS  read-write\r\n             DESCRIPTION\r\n                 \"Read-write access is applicable when\r\n                  static profiles are implemented.\"\r\n", "correct_text": "             OBJECT      adslAtucConfMinSnrMgn\r\n             MIN-ACCESS  read-write\r\n             DESCRIPTION\r\n                 \"Read-write access is applicable when\r\n                  static profiles are implemented.\"\r\n", "notes": "The extra line\r\n                   MIN-ACCESS  read-wr\r\nresults in MIB compilation errors.", "submit_date": "2018-09-29", "submitter_name": "Glenn Mansfield Keeni", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5509", "doc-id": "RFC2006", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": " mipSecNotifcationsGroup NOTIFICATION-GROUP\r\n        NOTIFICATIONS { mipAuthFailure }\r\n        STATUS      current\r\n        DESCRIPTION\r\n                \"The notification related to security violations.\"\r\n        ::= { mipGroups 13 }", "correct_text": " mipSecNotificationsGroup NOTIFICATION-GROUP\r\n        NOTIFICATIONS { mipAuthFailure }\r\n        STATUS      current\r\n        DESCRIPTION\r\n                \"The notification related to security violations.\"\r\n        ::= { mipGroups 13 }", "notes": "'i' missing in mipSecNotifcationsGroup", "submit_date": "2018-09-29", "submitter_name": "Glenn Mansfield Keeni", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:26:58"}, {"errata_id": "5511", "doc-id": "RFC6396", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "|  BGP Update =\r\n\r\n                ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\r\n                00 3e 02 00 00 00 1f 40 01 01 02 40 02 0e 02 03\r\n                00 00 fb f0 00 00 fb ff 00 00 fb f6 40 03 04 c6\r\n                33 64 55 c0 08 04 fb f0 00 0e 18 cb 00 71\r\n\r\n                 Figure 16: MRT BGP4MP_MESSAGE_AS4 Example", "correct_text": "|  BGP Update =\r\n\r\n                ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff\r\n                00 3e 02 00 00 00 23 40 01 01 02 40 02 0e 02 03\r\n                00 00 fb f0 00 00 fb ff 00 00 fb f6 40 03 04 c6\r\n                33 64 bc c0 08 04 fb f0 00 0e 18 cb 00 71\r\n\r\n                 Figure 16: MRT BGP4MP_MESSAGE_AS4 Example", "notes": "The total path attribute length is incorrectly encoded as 0x001F when it should be 0x0023 and the next hop ip address is incorrectly encoded as 0xc6336455 when it should be 0xc63364bc", "submit_date": "2018-10-01", "submitter_name": "James Clarke", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5515", "doc-id": "RFC7807", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   o  \"type\" (string) - A URI reference [RFC3986] that identifies the\r\n      problem type.  This specification encourages that, when\r\n      dereferenced, it provide human-readable documentation for the\r\n      problem type (e.g., using HTML [W3C.REC-html5-20141028]).  When\r\n      this member is not present, its value is assumed to be\r\n      \"about:blank\".", "correct_text": "   o  \"type\" (string) - A URI reference [RFC3986] that identifies the\r\n      problem type.  This specification encourages that, when\r\n      dereferenced, it provide human-readable documentation for the\r\n      problem type (e.g., using HTML [W3C.REC-html5-20141028]).  When\r\n      this member is missing or null, its value is assumed to be\r\n      \"about:blank\".", "notes": "JSON objects with a null \"type\" are syntactically correct, but there is no information on how it should be handled.\r\n\r\n{\r\n    \"type\": null,\r\n    \"status\": 404,\r\n    \"title\": \"Not Found\"\r\n}\r\n\r\nIt makes sense to treat null as an alias of \"about:blank\" and that's how I think it should be documented.", "submit_date": "2018-10-05", "submitter_name": "Steven", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7400", "doc-id": "RFC8650", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A.3", "orig_text": "   POST /restconf/operations\r\n        /ietf-subscribed-notifications:establish-subscription\r\n   {\r\n      \"ietf-subscribed-notifications:input\": {\r\n         \"stream\": \"NETCONF\",\r\n         \"stream-xpath-filter\":\r\n           \"/ietf-vrrp:vrrp-protocol-error-event[\r\n             protocol-error-reason='checksum-error']/\",\r\n      }\r\n   }\r\n\r\n       Figure 16: Establishing a Subscription Error Reason via XPath\r\n\r\n...\r\n\r\n   POST /restconf/operations\r\n        /ietf-subscribed-notifications:modify-subscription\r\n   {\r\n      \"ietf-subscribed-notifications:input\": {\r\n         \"stream\": \"NETCONF\",\r\n         \"stream-subtree-filter\": {\r\n           \"/ietf-vrrp:vrrp-protocol-error-event\" : {}\r\n         }\r\n      }\r\n   }\r\n                Figure 17: Example \"modify-subscription\" RPC", "correct_text": "   POST /restconf/operations\r\n        /ietf-subscribed-notifications:establish-subscription\r\n\r\n   {\r\n      \"ietf-subscribed-notifications:input\": {\r\n         \"stream\": \"NETCONF\",\r\n         \"stream-xpath-filter\":\r\n           \"/ietf-vrrp:vrrp-protocol-error-event[\r\n             protocol-error-reason='checksum-error']/\"\r\n      }\r\n   }\r\n\r\n       Figure 16: Establishing a Subscription Error Reason via XPath\r\n\r\n...\r\n\r\n   POST /restconf/operations\r\n        /ietf-subscribed-notifications:modify-subscription\r\n\r\n   {\r\n      \"ietf-subscribed-notifications:input\": {\r\n         \"stream\": \"NETCONF\",\r\n         \"stream-subtree-filter\": {\r\n           \"/ietf-vrrp:vrrp-protocol-error-event\" : {}\r\n         }\r\n      }\r\n   }\r\n                Figure 17: Example \"modify-subscription\" RPC\r\n", "notes": "* There is a missing CRLF in both figures as per RFC9112:\r\n\r\n--\r\n  HTTP-message   = start-line CRLF\r\n                   *( field-line CRLF )\r\n                   CRLF\r\n                   [ message-body ]\r\n--\r\n\r\n* The last item in the JSON of figure 16 includes a trailing \",\" while it shouldn't.", "submit_date": "2023-03-21", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 14:07:28"}, {"errata_id": "5520", "doc-id": "RFC6176", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2", "orig_text": "   o  Sessions can be easily terminated.  A man-in-the-middle can easily\r\n      insert a TCP FIN to close the session, and the peer is unable to\r\n      determine whether or not it was a legitimate end of the session.", "correct_text": "   o  Sessions can be easily terminated.  A man-in-the-middle can easily\r\n      insert a TCP FIN to close the session, and the peer is unable to\r\n      determine whether or not it was a legitimate end of the session.\r\n\r\n   o  The root certificate authority keys are overexposed. The server\r\n      sends only one certificate signed by a root certificate authority,\r\n      which means a frequent use of this authority keys for signing new\r\n      certificates. This use can lead to key loss and the compromise of\r\n      all certificates previously signed including the root certificate.", "notes": "Adding a deficiency.\r\nRecent history showed that well-known authorities could loose their keys and it had a wide impact on security.\r\nSSL 2.0 limits the certificate handshake message to one single certificate, thus making it impossible to send a certificate chain.\r\nA certificate chain doesn't completely prevent key loss, but it gives more protection to the root certificate keys which can be stored and hidden until we need them again, which is much less often than without chaining.\r\n\r\n\r\n\n --VERIFIER NOTES-- \n   This isn't an error in the original document. It's new text you want to add.", "submit_date": "2018-10-11", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "EKR", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5521", "doc-id": "RFC5789", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   Successful PATCH response to existing text file:\r\n\r\n   HTTP/1.1 204 No Content\r\n   Content-Location: /file.txt\r\n   ETag: \"e0023aa4f\"\r\n\r\n   The 204 response code is used because the response does not carry a\r\n   message body (which a response with the 200 code would have).  Note\r\n   that other success codes could be used as well.\r\n\r\n   Furthermore, the ETag response header field contains the ETag for the\r\n   entity created by applying the PATCH, available at\r\n   http://www.example.com/file.txt, as indicated by the Content-Location\r\n   response header field.", "correct_text": "   Successful PATCH response to existing text file:\r\n\r\n   HTTP/1.1 204 No Content\r\n   ETag: \"e0023aa4f\"\r\n\r\n   The 204 response code is used because the response does not carry a\r\n   message body (which a response with the 200 code would have).  Note\r\n   that other success codes could be used as well.\r\n\r\n   Furthermore, the ETag response header field contains the ETag for the\r\n   entity created by applying the PATCH.", "notes": "See discussion at:\r\n  https://github.com/httpwg/http-core/issues/20", "submit_date": "2018-10-12", "submitter_name": "Mark Nottingham", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-01-07 13:55:53"}, {"errata_id": "5522", "doc-id": "RFC3961", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.2.3", "orig_text": "                               des-cbc-crc\r\n   --------------------------------------------------------------------\r\n   protocol key format      8 bytes, parity in low bit of each\r\n\r\n   specific key structure   copy of original key\r\n\r\n   required checksum        rsa-md5-des\r\n   mechanism\r\n", "correct_text": "                               des-cbc-crc\r\n   --------------------------------------------------------------------\r\n   protocol key format      8 bytes, parity in low bit of each\r\n\r\n   specific key structure   copy of original key\r\n\r\n   required checksum        CRC32\r\n   mechanism\r\n", "notes": "des-cbc-crc is using the modified crc32 checksum, its required checksum should be CRC32, constant defined in section 8\n --VERIFIER NOTES-- \n   Rejected per submitter request; the required Checksum is a distinct operation, not a subset of the encryption operation.", "submit_date": "2018-10-12", "submitter_name": "Wrong required required checksum mechanism for des-cbc-crc", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5523", "doc-id": "RFC7432", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "Clarifications to following sub-sections:\r\nSection 7.1\r\nSection 7.2\r\nSection 7.5\r\n", "correct_text": "Section 7.1:\r\nAdd below text to the section 7.1 regarding the encoding \r\nof MPLS label:\r\n\r\n\"The value of the 20-bit MPLS label is encoded in the \r\nhigh-order 20 bits of the 3 bytes MPLS Label field.\"\r\n\r\nSection 7.2:\r\nAdd below text to the section 7.2 regarding the encoding\r\nof both the MPLS label fields:\r\n\r\n\"The value of the 20-bit MPLS label is encoded in the \r\nhigh-order 20 bits of the 3 bytes MPLS Label field for\r\nboth MPLS Label1 and MPLS Label2.\"\r\n\r\nSection 7.5:\r\nAdd below text to the section 7.5 regarding the encoding\r\nof ESI Label fields:\r\n\r\n\"The value of the 20-bit MPLS label is encoded in the \r\nhigh-order 20 bits of the ESI Label field.\"\r\n", "notes": "MPLS label is a 20-bit value and is stored in a 3 bytes field in a packet. The 20-bit MPLS label value is generally stored in higher order 20 bits of the 3 byte label field. The exact encoding to be followed for storing MPLS label values are not explicitly mentioned in the RFC 7432 under section 7.1, 7.2 and 7.5 for different types of EVPN routes. This lead to ambiguity in different implementations. Hence a clarification is required.\n --VERIFIER NOTES-- \nThe ESI label is required to be a \"valid MPLS label value\", there is no reason to interpret that it should be different from Label 1 and Label 2. There is nothing technically wrong with what is currently in the RFC.", "submit_date": "2018-10-12", "submitter_name": "Krishnamoorthy Arumugham", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7162", "doc-id": "RFC9291", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "   'ethernet-segments' and 'vpn-services':  An attacker who is able to\r\n      access network nodes can undertake various attacks, such as\r\n      deleting a running L2VPN service, interrupting all the traffic of\r\n      a client.  In addition, an attacker may modify the attributes of a\r\n      running service (e.g., QoS, bandwidth) or an ES, leading to\r\n      malfunctioning of the service and therefore to SLA violations.  In\r\n      addition, an attacker could attempt to create an L2VPN service,\r\n      add a new network access, or intercept/redirect the traffic to a\r\n      non-authorized node.  In addition to using NACM to prevent\r\n      authorized access, such activity can be detected by adequately\r\n      monitoring and tracking network configuration changes.\r\n", "correct_text": "   'ethernet-segments' and 'vpn-services':  An attacker who is able to\r\n      access network nodes can undertake various attacks, such as\r\n      deleting a running L2VPN service, interrupting all the traffic of\r\n      a client.  In addition, an attacker may modify the attributes of a\r\n      running service (e.g., QoS, bandwidth) or an ES, leading to\r\n      malfunctioning of the service and therefore to SLA violations.  In\r\n      addition, an attacker could attempt to create an L2VPN service,\r\n      add a new network access, or intercept/redirect the traffic to a\r\n      non-authorized node.  In addition to using NACM to prevent\r\n      unauthorized access, such activity can be detected by adequately\r\n      monitoring and tracking network configuration changes.\r\n", "notes": "Typo in last sentence, should be \"unauthorized\".", "submit_date": "2022-10-13", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2022-10-14 10:53:17"}, {"errata_id": "7163", "doc-id": "RFC9291", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "                      Figure 25: An Example of VPLS", "correct_text": "                      Figure 25: An Example of VPWS", "notes": "Typo", "submit_date": "2022-10-13", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-13 23:24:31"}, {"errata_id": "5535", "doc-id": "RFC5246", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.7", "orig_text": "   In DSA, the 20 bytes of the SHA-1 hash are run directly through the\r\n   Digital Signing Algorithm with no additional hashing. ...", "correct_text": "   In DSA, the bytes of the selected hash are run directly through the\r\n   Digital Signing Algorithm with no additional hashing. ...", "notes": "In 2246 and 4346 this statement (then using the less-accurate spellings DSS and SHA) was correct because only SHA1 was used for DSA (and ECDSA, in 4492, versus SHA1+MD5 for RSA), but 5246 changed this to allow specifying one of several hashes, with selection constrained by the signature_algorithms extension (if present) or CertificateRequest field from the peer.\r\n\r\nFIPS 186 actually defines the hashing step as part of signature generation and verification, so it might be even better to make this something like \"For DSA, signature generation applies the selected hash [to the contents] and then computes two values, r and s.\" similar to the way the preceding paragraph of 5246 \"In RSA signing\" differs from the 2246 and 4346 versions by no longer treating the hashing as separate, but that is a bigger change to an obsoleted document, and arguably problematic because the normative reference is FIPS 186-2; as indicated in Appendix B on page 80, 186-3 which officially allowed DSA to use FIPS 180-3 hashes (not only SHA-1) was released in draft before 5246 but not finalized until after (2006-03 to 2009-06 versus 2008-08).\n --VERIFIER NOTES-- \n As described in the reported Notes, at the time of publication, the DSA specification in force only allowed for the usage of SHA-1.  So the document was correct at time of publication and an errata is not appropriate, even though subsequent events have allowed for the usage of a broader set of hash algorithms with DSA.", "submit_date": "2018-10-19", "submitter_name": "Dave Thompson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5536", "doc-id": "RFC6176", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "   RFC 4346 [TLS1.1], and later RFC 5246 [TLS1.2], explicitly warned\r\n   implementers that the \"ability to send version 2.0 CLIENT-HELLO\r\n   messages will be phased out with all due haste\".  This document\r\n   accomplishes this by updating the backward compatibility sections\r\n   found in TLS [TLS1.0][TLS1.1][TLS1.2].", "correct_text": "   RFC 2246 [TLS1.0], and later RFC 4346 [TLS1.1], then RFC 5246\r\n   [TLS1.2] explicitly warned implementers that the \"ability to send\r\n   version 2.0 CLIENT-HELLO messages will be phased out with all due\r\n   haste\". This document accomplishes this by updating the backward\r\n   compatibility sections found in TLS [TLS1.0][TLS1.1][TLS1.2].", "notes": "The warning on the version 2.0 Client Hello is as old as the first TLS version (RFC 2246 Appendix E). That's what the authors meant and wanted to highlight by listing two of the three RFCs containing this warning. This is confirmed by their last sentence. It looks like a small mistake without concrete effects, I push this errata considering \"IESG Processing of RFC Errata for the IETF Stream rule 6\"", "submit_date": "2018-10-19", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-18 08:11:10"}, {"errata_id": "5539", "doc-id": "RFC8180", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "(...)\r\n\r\n   The Rank computation is described in Section 4.1 of [RFC6552].  A\r\n   node's Rank (see Figure 4 for an example) is computed by the\r\n   following equations:\r\n\r\n      R(N) = R(P) + rank_increment\r\n\r\n      rank_increment = (Rf*Sp + Sr) * MinHopRankIncrease\r\n\r\n(...)\r\n\r\n   This section illustrates the use of OF0 (see Figure 4).  We have:\r\n\r\n      rank_increment = ((3*numTx/numTxAck)-2)*minHopRankIncrease = 512\r\n", "correct_text": "(...)\r\n\r\n   The Rank computation is described in Section 4.1 of [RFC6552].  A\r\n   node's Rank (see Figure 4 for an example) is computed by the\r\n   following equations:\r\n\r\n      R(N) = R(P) + rank_increase\r\n\r\n      rank_increase = (Rf*Sp + Sr) * MinHopRankIncrease\r\n\r\n(...)\r\n\r\n   This section illustrates the use of OF0 (see Figure 4).  We have:\r\n\r\n      rank_increase = ((3*numTx/numTxAck)-2)*minHopRankIncrease = 512\r\n", "notes": "s/rank_increment/rank_increase/\r\n\r\nIt'd be better to use \"rank_increase\" as the variable name for consistency, which is used in Section 4.1 of RFC 6552 (https://tools.ietf.org/html/rfc6552#section-4.1):\r\n\r\n[excerpt from RFC 6552]\r\n\r\n   The step_of_rank Sp that is computed for that link is multiplied by\r\n   the rank_factor Rf and then possibly stretched by a term Sr that is\r\n   less than or equal to the configured stretch_of_rank.  The resulting\r\n   rank_increase is added to the Rank of preferred parent R(P) to obtain\r\n   that of this node R(N):\r\n\r\n   R(N) = R(P) + rank_increase where:\r\n\r\n   rank_increase = (Rf*Sp + Sr) * MinHopRankIncrease", "submit_date": "2018-10-29", "submitter_name": "Yasuyuki Tanaka", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-01-13 06:50:42"}, {"errata_id": "5541", "doc-id": "RFC7231", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.5", "orig_text": "If a DELETE\r\n   request passes through a cache that has one or more stored responses\r\n   for the effective request URI, those stored responses will be\r\n   invalidated", "correct_text": "If a successful DELETE\r\n   request passes through a cache that has one or more stored responses\r\n   for the effective request URI, those stored responses will be\r\n   invalidated", "notes": "RFC 7234 4.4 describes the semantics of cache invalidation for successful requests (non-error status code), but does not describe semantics for unsuccessful requests.  The corrected text parallels the construction in section 4.3.4 (\"If a successful PUT request...\").\r\n\r\nMark Nottingham wrote:\r\n\r\nI think HOLD FOR UPDATE; we can address this in the current http-core work. ", "submit_date": "2018-11-02", "submitter_name": "Danil Suits", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5542", "doc-id": "RFC7719", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "https://specs.webplatform.org/url/webspecs/develop", "correct_text": "https://webplatform.github.io/\r\n\r\n", "notes": "The RFC should be edited to reflect the intended content. Unfortunately, although I am technical, I do not have knowledge of the original. There are also other dead references.... and a reference to a \"dead project\" which is still living, here, but with little reference to DNS or domains.\r\n\r\nRFC Editor note: Errata are typically not used to correct URLs that were functioning at the time of publication. For this case, please see RFC 8499 (which obsoleted RFC 7719) for the current information.\n --VERIFIER NOTES-- \n   Thank you for submitting this. RFC 7719 has been updated by RFC8499 (published after your errata was submitted), which doesn't contain the reference. \r\n\r\nThanks again\r\nW", "submit_date": "2018-11-03", "submitter_name": "Scott Corcoran", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6064", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM285\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP285\r\n  &alias ebcdic-cp-gb\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: a! a' a? aa c, n? DO .  <  (  +  !!\r\n  &  e' e> e: e! i' i> i: i! ss !  Pd *  )  ;  NO\r\n  -  /  A> A: A! A' A? AA C, N? BB ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  Nb At '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My '? s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct <( Ye .M Co SE PI 14 12 34 '> )> '- ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  !) J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM285\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP285\r\n  &alias ebcdic-cp-gb\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: a! a' a? aa c, n? DO .  <  (  +  !!\r\n  &  e' e> e: e! i' i> i: i! ss !  Pd *  )  ;  NO\r\n  -  /  A> A: A! A' A? AA C, N? BB ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  Nb At '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My '? s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct <( Ye .M Co SE PI 14 12 34 '> )> '- ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  !) J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:26:57"}, {"errata_id": "5543", "doc-id": "RFC7970", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "    <xs:element name=\"Confidence\">\r\n      <xs:complexType>\r\n        <xs:attribute name=\"rating\"\r\n                      type=\"confidence-rating-type\" use=\"required\"/>\r\n        <xs:attribute name=\"ext-rating\"\r\n                      type=\"xs:string\" use=\"optional\"/>\r\n      </xs:complexType>\r\n    </xs:element>", "correct_text": "    <xs:element name=\"Confidence\">\r\n      <xs:complexType>\r\n        <xs:simpleContent>\r\n          <xs:extension base=\"xs:float\">\r\n            <xs:attribute name=\"rating\"\r\n                          type=\"confidence-rating-type\" use=\"required\"/>\r\n            <xs:attribute name=\"ext-rating\"\r\n                          type=\"xs:string\" use=\"optional\"/>\r\n          </xs:extension>\r\n        </xs:simpleContent>\r\n      </xs:complexType>\r\n    </xs:element>", "notes": "Section 3.12.5 says as follows:\r\n  \"The content of the class is of type REAL and specifies a numerical\r\n   assessment in the confidence of the data when the value of the rating\r\n   attribute is \"numeric\".  Otherwise, this element MUST be empty.\"\r\n\r\nThe current schema does not allow the confidence class to have the content (REAL type), thus the correction (note the addition of \"<xs:extension base=\"xs:float\">\") is proposed.", "submit_date": "2018-11-04", "submitter_name": "Takeshi Takahashi", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5544", "doc-id": "RFC7970", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": " <xs:element name=\"Node\">\r\n      <xs:complexType>\r\n        <xs:sequence>\r\n          <xs:choice maxOccurs=\"unbounded\">\r\n            <xs:element ref=\"iodef:DomainData\"\r\n                        minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n            <xs:element ref=\"iodef:Address\"\r\n                        minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          </xs:choice>\r\n          <xs:element ref=\"iodef:PostalAddress\" minOccurs=\"0\"/>\r\n          <xs:element ref=\"iodef:Location\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:Counter\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n        </xs:sequence>\r\n      </xs:complexType>\r\n    </xs:element>", "correct_text": " <xs:element name=\"Node\">\r\n      <xs:complexType>\r\n        <xs:sequence>\r\n          <xs:choice maxOccurs=\"unbounded\">\r\n            <xs:element ref=\"iodef:DomainData\"\r\n                        maxOccurs=\"unbounded\"/>\r\n            <xs:element ref=\"iodef:Address\"\r\n                        maxOccurs=\"unbounded\"/>\r\n          </xs:choice>\r\n          <xs:element ref=\"iodef:PostalAddress\" minOccurs=\"0\"/>\r\n          <xs:element ref=\"iodef:Location\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:Counter\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n        </xs:sequence>\r\n      </xs:complexType>\r\n    </xs:element>", "notes": "Section 3.18 says as follows:\r\n\r\n\"DomainData\r\n      Zero or more.  The domain (DNS) information associated with this\r\n      node.  If an Address is not provided, at least one DomainData MUST\r\n      be specified.  See Section 3.19.\r\n\r\n   Address\r\n      Zero or more.  The hardware, network, or application address of\r\n      the node.  If a DomainData is not provided, at least one Address\r\n      MUST be specified.  See Section 3.18.1.\"\r\n\r\nTo comply with the above definition, \"minOccurs\" attribute for both DomainData and Address elements need to be removed. (Current schema allows to omit both of the elements, but the RFC says that at least one of them need to be presented.)", "submit_date": "2018-11-04", "submitter_name": "Takeshi Takahashi", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5545", "doc-id": "RFC8152", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   +---------+-------+----------------+------------+-------------------+\r\n   | Name    | Label | CBOR Type      | Value      | Description       |\r\n   |         |       |                | Registry   |                   |\r\n   +---------+-------+----------------+------------+-------------------+\r\n   | kty     | 1     | tstr / int     | COSE Key   | Identification of |\r\n   |         |       |                | Common     | the key type      |\r\n   |         |       |                | Parameters |                   |\r\n   |         |       |                |            |                   |\r\n   | kid     | 2     | bstr           |            | Key               |\r\n   |         |       |                |            | identification    |\r\n   |         |       |                |            | value -- match to |\r\n   |         |       |                |            | kid in message    |\r\n   |         |       |                |            |                   |\r\n   | alg     | 3     | tstr / int     | COSE       | Key usage         |\r\n   |         |       |                | Algorithms | restriction to    |\r\n   |         |       |                |            | this algorithm    |\r\n   |         |       |                |            |                   |\r\n   | key_ops | 4     | [+ (tstr/int)] |            | Restrict set of   |\r\n   |         |       |                |            | permissible       |\r\n   |         |       |                |            | operations        |\r\n   |         |       |                |            |                   |\r\n   | Base IV | 5     | bstr           |            | Base IV to be     |\r\n   |         |       |                |            | xor-ed with       |\r\n   |         |       |                |            | Partial IVs       |\r\n   +---------+-------+----------------+------------+-------------------+\r\n\r\n                          Table 3: Key Map Labels", "correct_text": "   +---------+-------+----------------+------------+-------------------+\r\n   | Name    | Label | CBOR Type      | Value      | Description       |\r\n   |         |       |                | Registry   |                   |\r\n   +---------+-------+----------------+------------+-------------------+\r\n   | kty     | 1     | tstr / int     | COSE Key   | Identification of |\r\n   |         |       |                | Types      | the key type      |\r\n   |         |       |                |            |                   |\r\n   |         |       |                |            |                   |\r\n   | kid     | 2     | bstr           |            | Key               |\r\n   |         |       |                |            | identification    |\r\n   |         |       |                |            | value -- match to |\r\n   |         |       |                |            | kid in message    |\r\n   |         |       |                |            |                   |\r\n   | alg     | 3     | tstr / int     | COSE       | Key usage         |\r\n   |         |       |                | Algorithms | restriction to    |\r\n   |         |       |                |            | this algorithm    |\r\n   |         |       |                |            |                   |\r\n   | key_ops | 4     | [+ (tstr/int)] |            | Restrict set of   |\r\n   |         |       |                |            | permissible       |\r\n   |         |       |                |            | operations        |\r\n   |         |       |                |            |                   |\r\n   | Base IV | 5     | bstr           |            | Base IV to be     |\r\n   |         |       |                |            | xor-ed with       |\r\n   |         |       |                |            | Partial IVs       |\r\n   +---------+-------+----------------+------------+-------------------+\r\n\r\n                          Table 3: Key Map Labels", "notes": "The value registry for kty should be COSE Key Types, as indicated in the text following Table 3. This change affects the IANA registry: https://www.iana.org/assignments/cose/cose.xhtml#key-common-parameters", "submit_date": "2018-11-05", "submitter_name": "Francesca Palombini", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5553", "doc-id": "RFC1812", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.3.4", "orig_text": "When a router is forwarding a packet and the TTL field of the packet\r\nis reduced to 0, the requirements of section [5.2.3.8] apply.\r\n", "correct_text": "When a router is forwarding a packet and the TTL field of the packet\r\nis reduced to 0, the requirements of section [5.3.1] apply.", "notes": "", "submit_date": "2018-11-15", "submitter_name": "Stefan Marksteiner", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6089", "doc-id": "RFC7868", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.5.2", "orig_text": "    EIGRP uses one-way-\r\n   based values either provided by the interface or computed as a factor\r\n   of the link s bandwidth.", "correct_text": "    EIGRP uses one-way-\r\n   based values either provided by the interface or computed as a factor\r\n   of the link's bandwidth.", "notes": "Missing apostrophe (') in \"link's\".", "submit_date": "2020-04-12", "submitter_name": "Rafa\u0142 Cygnarowski", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-04-22 08:18:37"}, {"errata_id": "6090", "doc-id": "RFC7868", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.6.2.5.", "orig_text": "metric = (K1 * min(Throughput)) + (K3 * sum(Latency)) }", "correct_text": "metric = K1 * Max-Throughput + Latency", "notes": "This errata is consequence of:\r\n- erratas 5242 and 6084,\r\n- inconsistency of using (Max-)Throughput and Latency variables,\r\n- using additional min() and sum() functions which are not used in formula where all K-values takes effect ( metric =[Net-Throughput+Latency+(K6*ExtAttr)] * K5/(K4+Rel)) .\r\n\r\nThe Max-Throughput variable defined in 5.6.2.3. is a little bit unfortunate, as in fact it is minimum of maximum available throughput of all network segments in the path. \r\n\r\nI removed also K3 value from the metric as it is already embraced in Latency calculation in 5.6.2.4.\r\n\r\nI decided to use this formula as it is mathematically correct and is least intrusive but the best would be to review notations from 5.6.2.3. up to .5 and remove all inaccuracies. Also highlighting usage of K-Values in final metric calculation would make this document more readable, eg. metric = K1 * Throughtput + K3 * Latency - which shows best how K-values affect metric.", "submit_date": "2020-04-12", "submitter_name": "Rafa\u0142 Cygnarowski", "verifier_id": "", "verifier_name": "", "update_date": "2025-04-03 17:04:54"}, {"errata_id": "6091", "doc-id": "RFC7868", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.7.4.", "orig_text": "           Vender OS major version        1\r\n           Vender OS minor version        1", "correct_text": "           Vendor OS major version        1\r\n           Vendor OS minor version        1", "notes": "Typo in 'Vendor' word.", "submit_date": "2020-04-12", "submitter_name": "Rafa\u0142 Cygnarowski", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-04-22 08:19:38"}, {"errata_id": "6092", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.7.7.", "orig_text": "0x0007 - PEER_ TERMINATION_TYPE", "correct_text": "0x0007 - PEER_TERMINATION_TYPE", "notes": "Removed extra space in section title.", "submit_date": "2020-04-12", "submitter_name": "Rafa\u0142 Cygnarowski", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-04-22 08:20:22"}, {"errata_id": "5547", "doc-id": "RFC6052", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   The Well-Known Prefix MUST NOT be used to represent non-global IPv4\r\n   addresses, such as those defined in [RFC1918] or listed in Section 3\r\n   of [RFC5735].  Address translators MUST NOT translate packets in\r\n   which an address is composed of the Well-Known Prefix and a non-\r\n   global IPv4 address; they MUST drop these packets.", "correct_text": "The paragraph should be removed.", "notes": "IPv4 packets with private addresses are routinely translated to IPv4 packets with global addresses in NAT44. If a 464XLAT CLAT (stateless NAT64) cannot translate a private address to an IPv6 /96 prefix with that address as an IID (or whatever it's called), then the packet may not be translated to an IPv4 packet with a global address by the 464XLAT PLAT (stateful NAT64). This changes the intent of the sender, and in so doing violates the end to end principle. Practically speaking, it means that a network that uses 464XLAT or MAP-T with IPv4 in the subscriber and translating to IPv4 via NAT64 into the IPv4 Internet, it forces the network or the subscriber to purchase global address space. That's just silly. Let the user use private address space in the home or whatever.\n --VERIFIER NOTES-- \nThe orginial text was intended at time of publication. If this is not current anymore, the RFC needs to be updated by an IETF consensus doc.", "submit_date": "2018-11-06", "submitter_name": "Fred Baker", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5548", "doc-id": "RFC6330", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.2", "orig_text": "   o  Transfer Length (F): 40-bit unsigned integer.  A non-negative\r\n      integer that is at most 946270874880.  This is the transfer length\r\n      of the object in units of octets.\r\n\r\n...\r\n\r\n      NOTE: The limit of 946270874880 on the transfer length is a\r\n      consequence of the limitation on the symbol size to 2^^16-1, the\r\n      limitation on the number of symbols in a source block to 56403,\r\n      and the limitation on the number of source blocks to 2^^8.\r\n", "correct_text": "   o  Transfer Length (F): 40-bit unsigned integer.  A non-negative\r\n      integer that is at most 942574504275.  This is the transfer length\r\n      of the object in units of octets.\r\n\r\n...\r\n\r\n      NOTE: The limit of 942574504275 on the transfer length is a\r\n      consequence of the limitation on the symbol size to 2^^16-1, the\r\n      limitation on the number of symbols in a source block to 56403,\r\n      and the limitation on the number of source blocks to 2^^8-1.\r\n", "notes": "Section 3.3.3 defines the number of source blocks (Z) as an unsigned 8-bit integer, whose maximum value is 2^^8-1 (255), and not 2^^8.  This in turn changes the limit on the transfer length, which is now 56403*(2^^16-1)*(2^^8-1) = 942574504275.", "submit_date": "2018-11-07", "submitter_name": "Eugene Kim", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-06-02 13:26:20"}, {"errata_id": "5549", "doc-id": "RFC6038", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.5", "orig_text": "In this combined mode, the Packet Padding to be reflected follows the\r\n27 MBZ octets.  In Authenticated or Encrypted modes, the Packet\r\nPadding to be reflected follows the 56 MBZ octets.", "correct_text": "In this combined mode, the Packet Padding to be reflected follows the\r\n27 MBZ octets.  In Authenticated or Encrypted modes, the Packet\r\nPadding to be reflected follows the 64 MBZ octets.", "notes": "To achieve symmetrical size in authenticated and encrypted mode length of mbz field needs to be 64 octects instead of 56 octects.", "submit_date": "2018-11-07", "submitter_name": "Prabhjot Singh Sethi", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 10:43:19"}, {"errata_id": "5550", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3.", "orig_text": "   Note that requirements for the domain presented in the EHLO or HELO\r\n   command are not always clear to the sending party, and SPF verifiers\r\n   have to be prepared for the identity to be an IP address literal (see\r\n   [RFC5321], Section 4.1.3) or simply be malformed.  This SPF check can\r\n   only be performed when the \"HELO\" string is a valid, multi-label\r\n   domain name.", "correct_text": "", "notes": "It looks like that those who have HELO <IP Address> or <malformed> will have result \"none\" (and pass) but those that have HELO <hostname> and have not yet published their hostname (A record) as allowed sender will get fail. This becomes a very common case for all messages which are DSNs. The whole idea that it is better to have your HELO malformed than a valid hostname which identifies the system is wrong. The point is to fight spam but you actually make it easier for spammers to just have the EHLO malformed and send with <> reverse-path rather than having some proper EHLO/HELO which is subject to other verifications like rDNS, etc.", "submit_date": "2018-11-09", "submitter_name": "Borislav Petrov", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5551", "doc-id": "RFC6376", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.3.", "orig_text": "If an MTA does wish to reject such\r\n   messages during an SMTP session (for example, when communicating with\r\n   a peer who, by prior agreement, agrees to only send signed messages),\r\n   and a signature is missing or does not verify, the handling MTA\r\n   SHOULD use a 550/5.7.x reply code.\r\n\r\n   Where the Verifier is integrated within the MTA and it is not\r\n   possible to fetch the public key, perhaps because the key server is\r\n   not available, a temporary failure message MAY be generated using a\r\n   451/4.7.5 reply code, such as:\r\n\r\n   451 4.7.5 Unable to verify signature - key server unavailable\r\n\r\n   Temporary failures such as inability to access the key server or\r\n   other external service are the only conditions that SHOULD use a 4xx\r\n   SMTP reply code. ", "correct_text": "", "notes": "This contradicts RFC5321 which says:\r\n\r\n...a relay SMTP has no need to inspect or\r\n   act upon the header section or body of the message data and MUST NOT\r\n   do so except to add its own \"Received:\" header field...\n --VERIFIER NOTES-- \n   \r\nThere is nothing in the cited text above that suggests modifications to the message.  The text only talks about which SMTP reply codes to use.", "submit_date": "2018-11-09", "submitter_name": "Borislav Petrov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5552", "doc-id": "RFC7489", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "10.3.", "orig_text": "Everything about it..", "correct_text": "", "notes": "DMARC relies on inspecting header information. This section suggestion is not allowed by rfc5321 and contradicts it:\r\n\r\n...a relay SMTP has no need to inspect or\r\n   act upon the header section or body of the message data and MUST NOT\r\n   do so except to add its own \"Received:\" header field..\r\n\r\nSo the correct behaviour shoud be only the second option - 2xy and decide what to do after that being silent or not.\n --VERIFIER NOTES-- \nThe reporter has quoted from the wrong section of RFC 5321, and that that section does not discuss Message Submission Servers.", "submit_date": "2018-11-09", "submitter_name": "Borislav Petrov", "verifier_id": "", "verifier_name": "Eliot Lear (ISE)", "update_date": "2022-09-30 12:07:58"}, {"errata_id": "6109", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "The anniversary type of \"VEVENT\" can span more than one date (i.e., \"DTEND\"\r\nproperty value is set to a calendar date after the \"DTSTART\" property value).", "correct_text": "The anniversary type of \"VEVENT\" can span more than one date (i.e., \"DTEND\"\r\nproperty value is set to a calendar date at least two days after the \"DTSTART\"\r\nproperty value).", "notes": "\"DTEND\" comes, by definition (3.8.2.2), always after \"DTSTART\". The span (duration) is the difference between the two.", "submit_date": "2020-04-19", "submitter_name": "Lars Henriksen", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:32:45"}, {"errata_id": "5554", "doc-id": "RFC7432", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "Clarifications to following sub-sections:\r\nSection 7.1\r\nSection 7.2\r\nSection 7.5\r\n", "correct_text": "Section 7.1:\r\nAdd below text to the section 7.1 regarding the encoding\r\nof MPLS label field:\r\n\r\n\"The value of the 20-bit MPLS label is encoded in the high-order \r\n20 bits of the 3 octets MPLS Label field.\"\r\n\r\nSection 7.2:\r\nAdd below text to the section 7.2 regarding the encoding \r\nof both the MPLS label fields:\r\n\r\n\"The value of the 20-bit MPLS label is encoded in the high-order\r\n20 bits of the 3 octets MPLS Label1 and MPLS Label2 fields.\"\r\n\r\nSection 7.5:\r\nAdd below text to the section 7.5 regarding the encoding of \r\nESI Label field:\r\n\r\n\"The value of the 20-bit MPLS label is encoded in the high-order\r\n20 bits of the 3 octets ESI Label field.\"\r\n", "notes": "MPLS label is a 20-bit value and is stored in a 3 bytes field in a packet. \r\nThe 20-bit MPLS label value is generally stored in higher order 20 bits \r\nof the 3 octet label field. The exact encoding to be followed for storing \r\nMPLS label values are not explicitly mentioned in the RFC 7432 under \r\nsection 7.1, 7.2 and 7.5 for different types of EVPN routes. This lead to\r\nambiguity in different  implementations. Hence a clarification is required.", "submit_date": "2018-11-16", "submitter_name": "Ali Sajassi", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5555", "doc-id": "RFC2663", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   Changes to ICMP error message will include changes to the original IP\r\n   packet (or portions thereof) embedded in the payload of the ICMP\r\n   error message.", "correct_text": "   Changes to ICMP error message will include changes to the original IP\r\n   packet and portions of data embedded in the payload of the ICMP\r\n   error message.", "notes": "IP packet is not embedded in ICMP payload, but the other way around.\n --VERIFIER NOTES-- \nThe orginal IP packet IS included in the ICMP payload.", "submit_date": "2018-11-17", "submitter_name": "Majid Motallebikashani", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5556", "doc-id": "RFC8493", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.3", "orig_text": " bag checksum algorithm:  The name of a cryptographic checksum\r\n      algorithm that has been normalized for use in a manifest or tag\r\n      manifest file name (e.g., \"sha512\") as described in Section 2.4.", "correct_text": " bag checksum algorithm:  The name of a cryptographic checksum\r\n      algorithm that has been normalized for use in a manifest or tag\r\n      manifest file name.  See Section 2.4.", "notes": "Remove confusing example and leave with reference to section that provides normative explanation.", "submit_date": "2018-11-20", "submitter_name": "Devin Edmison", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7164", "doc-id": "RFC5280", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.5", "orig_text": "   If the distributionPoint field is absent, the CRL MUST contain\r\n   entries for all revoked unexpired certificates issued by the CRL\r\n   issuer, if any, within the scope of the CRL.", "correct_text": "   If the distributionPoint field is absent, the CRL MUST contain\r\n   entries for all revoked unexpired certificates issued by the CRL\r\n   issuer.", "notes": "The removed phrase does not appear in the original text that this requirement is derived from, ITU-T Rec. X.509 (08/2005) Section 8.6.2.2: \"If the issuing distribution point field, the AA issuing distribution point field, and the CRL scope field are all absent, the CRL shall contain entries for all revoked unexpired public-key certificates issued by the CRL issuer.\"\r\n\r\nThe removed phrase does not serve to create a stricter requirement; rather it creates a looser requirement which allows a CRL which does contain entries for all revoked unexpired certificates *within its scope* to not include the distributionPoint field. Given that the distributionPoint field serves an important security purpose in preventing substitution attacks, it is unlikely that this loosening was the intent of the original authors.\n --VERIFIER NOTES-- \n   Verifier notes:  Discussed here:  https://mailarchive.ietf.org/arch/msg/pkix/YuErTrIPYt7MzTKE6R_KRqNouto/", "submit_date": "2022-10-14", "submitter_name": "Aaron Gable", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-29 15:35:05"}, {"errata_id": "7387", "doc-id": "RFC9260", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.4.1", "orig_text": "   Endpoint A                                          Endpoint Z\r\n   <-------------- Association is established---------------------->\r\n   Tag=Tag_A                                             Tag=Tag_Z\r\n   <--------------------------------------------------------------->\r\n   {A crashes and restarts}\r\n   {app sets up an association with Z}\r\n   (build TCB)\r\n   INIT [I-Tag=Tag_A'\r\n         & other info]  --------\\\r\n   (Start T1-init timer)         \\\r\n   (Enter COOKIE-WAIT state)      \\---> (find an existing TCB,\r\n                                         populate TieTags if needed,\r\n                                         compose Cookie_Z with Tie-Tags\r\n                                         and other info)\r\n                                   /--- INIT ACK [Veri Tag=Tag_A',\r\n                                  /               I-Tag=Tag_Z',\r\n   (Cancel T1-init timer) <------/                Cookie_Z]\r\n                                        (leave original TCB in place)\r\n   COOKIE ECHO [Veri=Tag_Z',\r\n                Cookie_Z]-------\\\r\n   (Start T1-init timer)         \\\r\n   (Enter COOKIE-ECHOED state)    \\---> (Find existing association,\r\n                                         Tie-Tags in Cookie_Z match\r\n                                         Tie-Tags in TCB,\r\n                                         Tags do not match, i.e.,\r\n                                         case X X M M above,\r\n                                         Announce Restart to ULP\r\n                                         and reset association).\r\n                                  /---- COOKIE ACK\r\n   (Cancel T1-init timer, <------/\r\n    Enter ESTABLISHED state)\r\n   {app sends 1st user data; strm 0}\r\n   DATA [TSN=Initial TSN_A\r\n       Strm=0,Seq=0 & user data]--\\\r\n   (Start T3-rtx timer)            \\\r\n                                    \\->\r\n                                 /--- SACK [TSN Ack=init TSN_A,Block=0]\r\n   (Cancel T3-rtx timer) <------/\r\n", "correct_text": "   Endpoint A                                          Endpoint Z\r\n   <-------------- Association is established---------------------->\r\n   Tag=Tag_A                                             Tag=Tag_Z\r\n   <--------------------------------------------------------------->\r\n   {A crashes and restarts}\r\n   {app sets up an association with Z}\r\n   (build TCB)\r\n   INIT [I-Tag=Tag_A'\r\n         & other info]  --------\\\r\n   (Start T1-init timer)         \\\r\n   (Enter COOKIE-WAIT state)      \\---> (find an existing TCB,\r\n                                         populate TieTags if needed,\r\n                                         compose Cookie_Z with Tie-Tags\r\n                                         and other info)\r\n                                   /--- INIT ACK [Veri Tag=Tag_A',\r\n                                  /               I-Tag=Tag_Z',\r\n   (Cancel T1-init timer) <------/                Cookie_Z]\r\n                                        (leave original TCB in place)\r\n   COOKIE ECHO [Veri=Tag_Z',\r\n                Cookie_Z]-------\\\r\n   (Start T1-cookie timer)       \\\r\n   (Enter COOKIE-ECHOED state)    \\---> (Find existing association,\r\n                                         Tie-Tags in Cookie_Z match\r\n                                         Tie-Tags in TCB,\r\n                                         Tags do not match, i.e.,\r\n                                         case X X M M above,\r\n                                         Announce Restart to ULP\r\n                                         and reset association).\r\n                                  /---- COOKIE ACK\r\n   (Cancel T1-cookie timer, <----/\r\n    Enter ESTABLISHED state)\r\n   {app sends 1st user data; strm 0}\r\n   DATA [TSN=Initial TSN_A\r\n       Strm=0,Seq=0 & user data]--\\\r\n   (Start T3-rtx timer)            \\\r\n                                    \\->\r\n                                 /--- SACK [TSN Ack=init TSN_A,Block=0]\r\n   (Cancel T3-rtx timer) <------/\r\n", "notes": "A packet containing an COOKIE-ECHO chunk is protected against loss by the T1-cookie timer, not the T1-init timer.", "submit_date": "2023-03-16", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2023-04-27 21:14:18"}, {"errata_id": "7388", "doc-id": "RFC1964", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "202207990", "orig_text": "Hisham kurdi", "correct_text": "Hisham kurdi", "notes": "Hisham kurdi\n --VERIFIER NOTES-- \nThe submitted report references text which does not appear in the document", "submit_date": "2023-03-17", "submitter_name": "Hisham kurdi", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2023-03-29 07:50:09"}, {"errata_id": "7389", "doc-id": "RFC8824", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "For example, the Uri-Path option is\r\nmandatory in the request, and it might not be present in the\r\nresponse.", "correct_text": "For example, the Uri-Path option can\r\nbe used in the request, while it is not used in the response.", "notes": "The Uri-Path option is not mandatory in a CoAP request, and it is not supposed to be used in a CoAP response.", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:30:16"}, {"errata_id": "7390", "doc-id": "RFC8824", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "CoAP Content and Accept Options", "correct_text": "CoAP Option Content-Format and Accept Fields", "notes": "The new title of Section 5.1 uses the correct CoAP option name \"Content-Format\", and is consistent with the title of other sections.", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2023-08-02 14:15:18"}, {"errata_id": "5557", "doc-id": "RFC8505", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "This specification updates RFC 6775 -- the Low-Power Wireless\r\n   Personal Area Network (6LoWPAN) Neighbor Discovery specification --\r\n   to clarify the role of the protocol as a registration technique and\r\n   simplify the registration operation in 6LoWPAN routers, as well as to\r\n   provide enhancements to the registration capabilities and mobility\r\n   detection for different network topologies, including the Routing\r\n   Registrars performing routing for host routes and/or proxy Neighbor\r\n   Discovery in a low-power network.", "correct_text": "This specification updates RFC 6775 -- the Low-Power Wireless\r\n   Personal Area Network (6LoWPAN) Neighbor Discovery specification --\r\n   to clarify the role of the protocol as a registration technique,\r\n   to simplify the registration operation in 6LoWPAN routers, and to\r\n   provide enhancements to the registration capabilities and mobility\r\n   detection for different network topologies, including the Routing\r\n   Registrars performing routing for host routes and/or proxy Neighbor\r\n   Discovery in a low-power network.", "notes": "Change wording to flow in a smooth way.\r\n\r\n-----\r\n\r\nFrom https://www.ietf.org/about/groups/iesg/statements/processing-rfc-errata/\r\n\r\n\"Changes which are simply stylistic issues or simply make things read better should be Hold for Document Update. \"", "submit_date": "2018-11-20", "submitter_name": "Devin Edmison", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-04-29 21:01:43"}, {"errata_id": "5558", "doc-id": "RFC8058", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8.3", "orig_text": "Content-Length: 124", "correct_text": "Content-Length: 126", "notes": "The entity body of the message should have the sequence of carriage return and line feed after the final boundary marker. The inclusion of these two control codes would bring the count of octets of bits to 126, not 124. Given that the sequence of carriage return and line feed should have no associated glyphs, no change is needed at the end of the example.\n --VERIFIER NOTES-- \nJohn R Levine wrote:\r\n\r\nI believe this one is wrong and 124 is the correct length.  It would be \r\n126 if you put a \\r\\n after the -- at the end of the last MIME separator. \r\nIf the problem were that we'd left out the carriage returns, there are \r\nfour lines so the (wrong) length would have been 120.", "submit_date": "2018-11-22", "submitter_name": "Etan Wexler", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5559", "doc-id": "RFC8058", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.3", "orig_text": "   Header in Email\r\n\r\n   List-Unsubscribe:\r\n       <mailto:listrequest@example.com?subject=unsubscribe>,\r\n       <https://example.com/unsubscribe.html/opaque123456789>\r\n   List-Unsubscribe-Post: List-Unsubscribe=One-Click\r\n\r\n\r\n   Resulting POST request\r\n\r\n   POST /unsubscribe.html/opaque=123456789 HTTP/1.1\r\n                                ^", "correct_text": "   Header in Email\r\n\r\n   List-Unsubscribe:\r\n       <mailto:listrequest@example.com?subject=unsubscribe>,\r\n       <https://example.com/unsubscribe.html/opaque123456789>\r\n   List-Unsubscribe-Post: List-Unsubscribe=One-Click\r\n\r\n\r\n   Resulting POST request\r\n\r\n   POST /unsubscribe.html/opaque123456789 HTTP/1.1", "notes": "The extraneous equality sign (\u201c=\u201d) between \u201copaque\u201d and \u201c123456789\u201d appears in the target of the HTTP message but not in the \u201chttps\u201d URI in the \u201cList-Unsubscribe\u201d field of the mail snippet.", "submit_date": "2018-11-22", "submitter_name": "Etan Wexler", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5560", "doc-id": "RFC4122", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "   The following table lists the contents of the variant field, where\r\n   the letter \"x\" indicates a \"don't-care\" value.\r\n\r\n   Msb0  Msb1  Msb2  Description\r\n\r\n    0     x     x    Reserved, NCS backward compatibility.\r\n\r\n    1     0     x    The variant specified in this document.", "correct_text": "   The following table lists the contents of the variant field, where\r\n   the letter \"x\" indicates a \"don't-care\" value.\r\n\r\n   Msb0  Msb1  Msb2  Description\r\n\r\n    0     x     x    Reserved, NCS backward compatibility.\r\n\r\n    1     0     0    The variant specified in this document.", "notes": "If Msb2 is a \u00ab don't-care \u00bb value, this means it's not wrong to set the bit to 0 or 1.\r\nIn the case of UUIDv3 and UUIDv5, this does not specify if the bit from the hash output should be left untouched or not.\r\nIt's not stated that it's illegal to reset it to 0 when setting Msb0 and Msb1 altogether (as libuuid does), since it's a \u00ab don't-care \u00bb value.\r\nBut letting it untouched whenever it's set to 1 by the hash output (as the Python stdlib does) causes two UUIDv{3,5} to be different for the same input namespaces and data. (Example: NS=Nil UUID, data = 0x44 (\u00abD\u00bb).\r\n\r\nThe RFC should enforce the value of the bit to 0 or 1, or clarify if it should be left untouched depending on the context-dependent data (Clock ID {1,2}, hash output {3,5}, random input {4}). (Which would mean it's then just a libuuid bug to forcibly set Msb2 to 0 when it should be untouched.)\r\n\r\nSee also : https://uuid.pirate-server.com/blog/brother-uuids-or-why-uuids-are-not-unique.html", "submit_date": "2018-11-25", "submitter_name": "GLOBAL UUID DATABASE", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-24 16:06:23"}, {"errata_id": "7175", "doc-id": "RFC8417", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1.4", "orig_text": "{\r\n    \"iss\": \"https://idp.example.com/\",\r\n    \"jti\": \"756E69717565206964656E746966696572\",\r\n    \"iat\": 1508184845,\r\n    \"aud\": \"636C69656E745F6964\",\r\n    \"events\": {\r\n  \"https://schemas.openid.net/secevent/risc/event-type/account-disabled\"\r\n          : {\r\n        \"subject\": {\r\n          \"subject_type\": \"iss-sub\",\r\n          \"iss\": \"https://idp.example.com/\",\r\n          \"sub\": \"7375626A656374\"\r\n        },\r\n        \"reason\": \"hijacking\"\r\n      }\r\n    }\r\n  }\r\n\r\n                       Figure 4: Example RISC Event\r\n\r\n   Notice that parameters to the event are included in the event\r\n   payload, in this case, the \"reason\" and \"cause-time\" values.  The\r\n   subject of the event is identified using the \"subject\" payload value,\r\n   which itself is a JSON object.", "correct_text": "{\r\n    \"iss\": \"https://idp.example.com/\",\r\n    \"jti\": \"756E69717565206964656E746966696572\",\r\n    \"iat\": 1508184845,\r\n    \"aud\": \"636C69656E745F6964\",\r\n    \"events\": {\r\n  \"https://schemas.openid.net/secevent/risc/event-type/account-disabled\"\r\n          : {\r\n        \"subject\": {\r\n          \"subject_type\": \"iss-sub\",\r\n          \"iss\": \"https://idp.example.com/\",\r\n          \"sub\": \"7375626A656374\"\r\n        },\r\n        \"reason\": \"hijacking\"\r\n      }\r\n    }\r\n  }\r\n\r\n                       Figure 4: Example RISC Event\r\n\r\n   Notice that parameters to the event are included in the event\r\n   payload, in this case, the \"reason\" value.  The\r\n   subject of the event is identified using the \"subject\" payload value,\r\n   which itself is a JSON object.", "notes": "The included RISC event example JSON object does not contain a \"cause-time\" member, however this is referred to in the explanation following the example.  It would be valuable to either include the \"cause-time\" member, or to remove it from the explanation as per the above.", "submit_date": "2022-10-21", "submitter_name": "Nigel Somerfield", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5562", "doc-id": "RFC3376", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2.1", "orig_text": "   When a router filter-mode for a group is EXCLUDE, the source record\r\n   list contains two types of sources.  The first type is the set which\r\n   represents conflicts in the desired reception state; this set must be\r\n   forwarded by some router on the network.  The second type is the set\r\n   of sources which hosts have requested to not be forwarded.  Appendix\r\n   A describes the reasons for keeping this second set when in EXCLUDE\r\n   mode.", "correct_text": "[see note]", "notes": "Appendix A.3 contains the following:\r\n   One of the ways to accomplish this is for routers to keep track of\r\n   all sources desired by hosts that are in INCLUDE mode even though the\r\n   router itself is in EXCLUDE mode.\r\n\r\nAppendix A.3 makes clear that in EXCLUDE mode we need to keep track of the set of hosts that *are* desired (i.e. set A in section 6.4 or the \"first type\" in this paragraph). The second set (set B in section 6.4) is the set that will be reported to upstream routers, it is not the set which is needed for smooth switching to INCLUDE mode (the behavior described in appendix A). I believe that the intended description may have been \"Appendix A describes the reasons for keeping two different sets when in EXCLUDE mode\".  At the very least, it appears to be set A (the \"first set\") which is intended in appendix A.", "submit_date": "2018-11-26", "submitter_name": "Wim De Smet", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5563", "doc-id": "RFC4252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.", "orig_text": "      SSH_MSG_USERAUTH_FAILURE without partial success - The password\r\n      has not been changed.  Either password changing was not supported,\r\n      or the old password was bad.  Note that if the server has already\r\n      sent SSH_MSG_USERAUTH_PASSWD_CHANGEREQ, we know that it supports\r\n      changing the password.\r\n\r\n      SSH_MSG_USERAUTH_CHANGEREQ - The password was not changed because\r\n      the new password was not acceptable (e.g., too easy to guess).", "correct_text": "      SSH_MSG_USERAUTH_FAILURE without partial success - The password\r\n      has not been changed.  Either password changing was not supported,\r\n      or the old password was bad.  Note that if the server has already\r\n      sent SSH_MSG_USERAUTH_PASSWD_CHANGEREQ, we know that it supports\r\n      changing the password.\r\n\r\n      SSH_MSG_USERAUTH_PASSWD_CHANGEREQ - The password was not changed \r\n      because the new password was not acceptable (e.g., too easy to \r\n      guess).", "notes": "SSH_MSG_USERAUTH_PASSWD_CHANGEREQ seems to have been truncated to SSH_MSG_USERAUTH_CHANGEREQ for no apparent reason.", "submit_date": "2018-11-27", "submitter_name": "Beno\u00eet Morgan", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 17:59:44"}, {"errata_id": "5564", "doc-id": "RFC7234", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.4", "orig_text": "A cache MUST NOT send stale responses unless it is disconnected\r\n   (i.e., it cannot contact the origin server or otherwise find a\r\n   forward path) or doing so is explicitly allowed (e.g., by the\r\n   max-stale request directive; see Section 5.2.1).", "correct_text": "A cache SHOULD NOT send stale responses unless it is disconnected\r\n   (i.e., it cannot contact the origin server or otherwise find a\r\n   forward path) or doing so is explicitly allowed (e.g., by the\r\n   max-stale request directive; see Section 5.2.1).\r\n\r\nA cache MAY send stale responses if a cache-control extension for\r\nstale content such as \"stale-while-revalidate\" is used \r\n(see RFC5861).", "notes": "The original text seems to conflict with https://tools.ietf.org/html/rfc5861#section-3\r\n\r\n3.  The stale-while-revalidate Cache-Control Extension\r\n\r\n   When present in an HTTP response, the stale-while-revalidate Cache-\r\n   Control extension indicates that caches MAY serve the response in\r\n   which it appears after it becomes stale, up to the indicated number\r\n   of seconds.\r\n\r\n     stale-while-revalidate = \"stale-while-revalidate\" \"=\" delta-seconds\r\n\r\n   If a cached response is served stale due to the presence of this\r\n   extension, the cache SHOULD attempt to revalidate it while still\r\n   serving stale responses (i.e., without blocking).\r\n\r\nSee also https://stackoverflow.com/questions/53324538/rest-low-latency-how-should-i-reply-to-a-get-while-an-upload-is-pending\n --VERIFIER NOTES-- \nMark Nottingham wrote:\r\n\r\nExtensions are explicitly allowed to override requirements, and\r\nmaking this a SHOULD would be too confusing (as many would read it as\r\n\"optional\").\r\n", "submit_date": "2018-11-27", "submitter_name": "Bruce Adams", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5565", "doc-id": "RFC8040", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "              +-------------------------+------------------+\r\n              | error-tag               | status code      |\r\n              +-------------------------+------------------+\r\n              | in-use                  | 409              |\r\n              | lock-denied             | 409              |\r\n              | resource-denied         | 409              |\r\n              | data-exists             | 409              |\r\n              | data-missing            | 409              |\r\n", "correct_text": "              +-------------------------+------------------+\r\n              | error-tag               | status code      |\r\n              +-------------------------+------------------+\r\n              | in-use                  | 409              |\r\n              | lock-denied             | 409              |\r\n              | resource-denied         | 409              |\r\n              | data-exists             | 409              |\r\n              | data-missing            | 404              |\r\n", "notes": "The <error-tag> data missing should be mapped to status code '404' instead of '409' to get consistent with the defintion of data-missing in RFC6241.\n --VERIFIER NOTES-- \n   Rejected based on WG discussion: https://mailarchive.ietf.org/arch/msg/netconf/XfoOpKslbdbGbX8HZrQHtNRvVkw\r\n", "submit_date": "2018-12-03", "submitter_name": "Qin Wu", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-23 21:45:37"}, {"errata_id": "5566", "doc-id": "RFC8040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.3.2", "orig_text": "          \"player\" : {\r\n            \"gap\" : 0.5\r\n          }\r\n", "correct_text": "          \"player\" : {\r\n            \"gap\" : \"0.5\"\r\n          }\r\n", "notes": "The quoted text occurs twice; p 128 and p 130.\r\n\r\nThe leaf \"gap\" is defined as type decimal64 in A.1.  According to RFC 7951, section 6.1, a decimal64 type is represented as a string in JSON.", "submit_date": "2018-12-03", "submitter_name": "Martin Bj\u00f6rklund", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5567", "doc-id": "RFC4419", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "     byte    SSH_MSG_KEY_DH_GEX_REQUEST\r\n", "correct_text": "     byte    SSH_MSG_KEX_DH_GEX_REQUEST\r\n", "notes": "KEY should be KEX.\r\n\r\n1. Section 5. defines \"SSH_MSG_KEX_DH_GEX_REQUEST\".\r\n2. Other messages in RFC4419 have the same prefix \"SSH_MSG_KEX_DH_GEX_\".\r\n3. RFC5656 defines two messages start with \"SSH_MSG_KEX_\".\r\n\r\nRFC8270 refers to \"SSH_MSG_KEY_DH_GEX_REQUEST\" and it should be corrected too.", "submit_date": "2018-12-07", "submitter_name": "Tomoyuki Sahara", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 18:09:16"}, {"errata_id": "7177", "doc-id": "RFC2131", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "If the server has received a message through a DHCP relay agent, the server SHOULD choose an address from the interface on which the message was recieved as the 'server identifier' (unless the server has other, better information on which to make its choice).", "correct_text": "If the server has received a message through a DHCP relay agent, the server SHOULD choose an address from the interface on which the message was received as the 'server identifier' (unless the server has other, better information on which to make its choice).", "notes": "spelling correction\r\n\r\ns/recieved/received/", "submit_date": "2022-10-22", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-10-22 23:32:53"}, {"errata_id": "5571", "doc-id": "RFC8214", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "C If set to 1, a control word [RFC4448] MUST be present\r\nwhen sending EVPN packets to this PE. It is\r\nrecommended that the control word be included in the\r\nabsence of an entropy label [RFC6790].", "correct_text": "C If set to 1, a control word [RFC4448] MUST be present\r\nwhen sending EVPN packets to this PE. It is\r\nrecommended that the control word be included in the\r\nabsence of an entropy label [RFC6790]. \r\n\r\nFor detailed explanation of the behavior of EVPN VPWS \r\nsession based on control word bit can be referred link: \r\nhttps://tools.ietf.org/html/rfc4447#section-6.2\r\n\r\nwhich explains all combinations of control word \r\nconfigurations in detailed way whic was missing in RFC8214.", "notes": "RFC8214 doesn't mention the cases where control word configuration between the PE's can mismatch, disabled, enabled. which will lead to ambiguity in protocol implementation.\n --VERIFIER NOTES-- \nThis could change the specification in a way which in fact would likely require consensus. Authors of this errata are encouraged to follow the normal process and start with having a discussion in BESS WG.", "submit_date": "2018-12-10", "submitter_name": "gangadhara reddy chavva; SatishKumar N Rodd", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5572", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.5", "orig_text": "Input: WOTS+ public key pk, address ADRS, seed SEED", "correct_text": "Input: WOTS+ public key pk, seed SEED, address ADRS", "notes": "ltree is called twice as ltree(pk, seed, adr).", "submit_date": "2018-12-10", "submitter_name": "Franziskus Kiefer", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5573", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.6", "orig_text": "Output: n-byte root node - top node on Stack", "correct_text": "Output: n-byte root node - top node on Stack or -1", "notes": "The algorithm can fail and might return -1 instead of a root node", "submit_date": "2018-12-10", "submitter_name": "Franziskus Kiefer", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5574", "doc-id": "RFC8505", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1.", "orig_text": "ARO Status", "correct_text": "Bit", "notes": "Title of the first column in table 2 should be \u2018Bit\u2019 as opposed to \u2018ARO Status\u2019.\r\n", "submit_date": "2018-12-11", "submitter_name": "Pascal Thubert", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-04-29 20:54:37"}, {"errata_id": "5575", "doc-id": "RFC3461", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "When initially submitting a message via SMTP, if the ORCPT parameter\r\nis used, it MUST contain the same address as the RCPT TO address\r\n(unlike the RCPT TO address, the ORCPT parameter will be encoded as\r\nxtext).  Likewise, when a mailing list submits a message via SMTP to\r\nbe distributed to the list subscribers, if ORCPT is used, the ORCPT\r\nparameter MUST match the new RCPT TO address of each recipient, not\r\nthe address specified by the original sender of the message.)", "correct_text": "When initially submitting a message via SMTP, if the ORCPT parameter\r\nis used, it MUST contain the same address as the RCPT TO address\r\n(unlike the RCPT TO address, the ORCPT parameter will be encoded as\r\nxtext).  Likewise, when a mailing list submits a message via SMTP to\r\nbe distributed to the list subscribers, if ORCPT is used, the ORCPT\r\nparameter MUST match the new RCPT TO address of each recipient, not\r\nthe address specified by the original sender of the message.", "notes": "Superfluous closing parenthesis at the end of paragraph.", "submit_date": "2018-12-13", "submitter_name": "M. Shulhan", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7167", "doc-id": "RFC1350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   The end of a transfer is marked by a DATA packet that contains\r\n   between 0 and 511 bytes of data (i.e., Datagram length < 516).", "correct_text": "   The end of a transfer is marked by a DATA packet that contains\r\n   between 0 and 511 bytes of data (i.e., Datagram length < 524).", "notes": "After careful reading it seems clear to me that \"Datagram\" here refers to the UDP datagram.\r\n\r\n\"Datagram\" is used to refer to UDP in several places (section 1: \"the Internet User Datagram protocol (UDP or Datagram)\", section 3: \"Since  Datagram is implemented\", \"the Datagram layer\", Figure 3.1, Figure \"Order of headers\" at beginning of Appendix).\r\n\r\nUDP header + TFTP header + 512 bytes of data is 8+4+512 = 524.\r\n\r\nNote this errata conflicts with errata #4971", "submit_date": "2022-10-15", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 20:28:56"}, {"errata_id": "7168", "doc-id": "RFC879", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "         For some networks the the directly attached network address can", "correct_text": "         For some networks the directly attached network address can", "notes": "Duplicated word.", "submit_date": "2022-10-15", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-17 22:08:13"}, {"errata_id": "7169", "doc-id": "RFC7998", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.5.1", "orig_text": "Note: since this feature can't be used for RFCs at the moment, this\r\nentire feature might be\r\n", "correct_text": "Note: since this feature can't be used for RFCs at the moment, this\r\nentire feature might be de-prioritized.", "notes": "RFCs do not currently use binary-art as an artwork type. An Internet\r\nDraft may be created with binary-art as an artwork type, but that\r\nartwork will not be published in any resulting RFC.", "submit_date": "2022-10-16", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "Alexis Rossi (RFC Series Approval Board Chair)", "update_date": "2025-01-10 18:21:11"}, {"errata_id": "8248", "doc-id": "RFC1185", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.3.", "orig_text": "However, the receiver algorithm dpes place some requirements on\r\n         the frequency of the timestamp \"clock\":", "correct_text": "However, the receiver algorithm does place some requirements on\r\n         the frequency of the timestamp \"clock\":", "notes": "Typo: \"dpes\" instead of \"does\"\r\n\n --VERIFIER NOTES-- \nThis document has been obsoleted by RFC 1323 (https://www.rfc-editor.org/rfc/rfc1323.txt). This error was corrected in the obsoleting document. See Section 4.2.2 of RFC 1323. ", "submit_date": "2025-01-01", "submitter_name": "Fabio Fernandes", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-21 18:31:38"}, {"errata_id": "8249", "doc-id": "RFC7162", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7", "orig_text": "   resp-text-code      =/ \"HIGHESTMODSEQ\" SP mod-sequence-value /\r\n                          \"NOMODSEQ\" /\r\n                          \"MODIFIED\" SP sequence-set", "correct_text": "   resp-text-code      =/ \"HIGHESTMODSEQ\" SP mod-sequence-value /\r\n                          \"NOMODSEQ\" /\r\n                          \"MODIFIED\" SP sequence-set\r\n                          ;; * in sequence-set is not allowed.", "notes": "RFC 4551 used \"set\" (context: https://www.rfc-editor.org/errata/eid3506). This was rectified to \"sequence-set\" but I assume we should further exclude \"*\".", "submit_date": "2025-01-12", "submitter_name": "Damian Poddebniak", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7342", "doc-id": "RFC8486", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "8.  IANA Considerations\r\n\r\n   IANA has added 17 new assignments to the \"Opus Channel Mapping\r\n   Families^\ba registry.\r\n", "correct_text": "8.  IANA Considerations\r\n\r\n   IANA has added 17 new assignments to the \"Opus Channel Mapping\r\n   Families\" registry.\r\n", "notes": "There is a backspace character enclosed with ^ and a in place of what should be a typewriter quote character.", "submit_date": "2023-02-11", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-13 22:33:06"}, {"errata_id": "5576", "doc-id": "RFC8017", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "B.1", "orig_text": "   The object identifiers id-md2, id-md5, id-sha1, id-sha224, id-sha256,\r\n   id-sha384, id-sha512, id-sha512/224, and id-sha512/256 identify the\r\n   respective hash functions:\r\n...\r\n   The parameters field associated with id-sha1, id-sha224, id-sha256,\r\n   id-sha384, id-sha512, id-sha512/224, and id-sha512/256 should\r\n...\r\n   Exception: When formatting the DigestInfoValue in EMSA-PKCS1-v1_5\r\n   (see Section 9.2), the parameters field associated with id-sha1,\r\n   id-sha224, id-sha256, id-sha384, id-sha512, id-sha512/224, and\r\n   id-sha512/256 shall have a value of type NULL.  This is to maintain\r\n", "correct_text": "   The object identifiers id-md2, id-md5, id-sha1, id-sha224, id-sha256,\r\n   id-sha384, id-sha512, id-sha512-224, and id-sha512-256 identify the\r\n   respective hash functions:\r\n...\r\n   The parameters field associated with id-sha1, id-sha224, id-sha256,\r\n   id-sha384, id-sha512, id-sha512-224, and id-sha512-256 should\r\n...\r\n   Exception: When formatting the DigestInfoValue in EMSA-PKCS1-v1_5\r\n   (see Section 9.2), the parameters field associated with id-sha1,\r\n   id-sha224, id-sha256, id-sha384, id-sha512, id-sha512-224, and\r\n   id-sha512-256 shall have a value of type NULL.  This is to maintain\r\n", "notes": "ASN.1 identifiers don't allow slash. The actual ASN.1 code in the middle of B.1, and the ASN.1 module in C, correctly use hyphens for id-sha512-224 and id-sha512-256.", "submit_date": "2018-12-16", "submitter_name": "Dave Thompson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5577", "doc-id": "RFC8017", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.1", "orig_text": "   As of today, the best (known) collision attacks against these hash\r\n   functions are generic attacks with complexity 2L/2, where L is the\r\n   bit length of the hash output.  For the signature schemes in this\r\n   document, a collision attack is easily translated into a signature\r\n   forgery.  Therefore, the value L / 2 should be at least equal to the\r\n   desired security level in bits of the signature scheme (a security\r\n   level of B bits means that the best attack has complexity 2B).  The", "correct_text": "   As of today, the best (known) collision attacks against these hash\r\n   functions are generic attacks with complexity 2^(L/2), where L is the\r\n   bit length of the hash output.  For the signature schemes in this\r\n   document, a collision attack is easily translated into a signature\r\n   forgery.  Therefore, the value L / 2 should be at least equal to the\r\n   desired security level in bits of the signature scheme (a security\r\n   level of B bits means that the best attack has complexity 2^B).  The", "notes": "Superscripting presumably lost in translation from the original. RFC 3447 (for v2.1) had these correct. To a person familiar with the art they are obvious typos (Editorial) but to other readers they could change the meaning.", "submit_date": "2018-12-16", "submitter_name": "Dave Thompson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5578", "doc-id": "RFC2387", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": ".4", "orig_text": "     related-param   := [ \";\" \"start\" \"=\" cid ]\r\n                        [ \";\" \"start-info\"  \"=\"\r\n                           ( cid-list / value ) ]\r\n                        [ \";\" \"type\"  \"=\" type \"/\" subtype ]\r\n                        ; order independent", "correct_text": "     related-param   := ( \";\" \"type\"  \"=\" type \"/\" subtype )\r\n                        [ \";\" \"start\" \"=\" cid ]\r\n                        [ \";\" \"start-info\"  \"=\"\r\n                           ( cid-list / value ) ]\r\n                        ; order independent, \"type\" is required", "notes": "The \"type\" parameter is specified by the rest of the document to be mandatory, but the ABNF in section 3.4 indicates that it is optional. Even though the ABNF is specified somewhat informally (and arguably should be formalized if this RFC is ever re-issued), it should not be giving information that contradicts the formal part of the specification (e.g., section 2).\r\n\r\n===== Verifier notes =====\r\nAs the reporter says, the ABNF here needs more work, and that should be held for document update.  This particular item, though, does, indeed, contradict the normative text.  I have also moved the required item to the top of the parameter list for clarity.", "submit_date": "2018-12-18", "submitter_name": "Sloane Bernstein", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-05-05 14:26:58"}, {"errata_id": "5579", "doc-id": "RFC5228", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.", "orig_text": "   Example:  if size :over 100k { # this is a comment\r\n                discard;\r\n             }", "correct_text": "   Example:  if size :over 100K { # this is a comment\r\n                discard;\r\n             }", "notes": "The small \"k\" after the 100 is invalid syntax according the ABNF.\r\n\r\n\"8.1.  Lexical Tokens\" defines a number as:\r\n\r\nnumber             = 1*DIGIT [ QUANTIFIER ]\r\nQUANTIFIER         = \"K\" / \"M\" / \"G\"\r\n\r\nEither the Quantifier needs to be extended to allow also lowercase characters or the example needs to be corrected.", "submit_date": "2018-12-19", "submitter_name": "Thomas Schmid", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:03:18"}, {"errata_id": "7391", "doc-id": "RFC8824", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.4", "orig_text": "The SCHC Rule description MAY define sending some field values by\r\nsetting the TV to \"not-sent\", the MO to \"ignore\", and the CDA to\r\n\"value-sent\".", "correct_text": "The SCHC Rule description MAY define sending some field values by\r\ndescribing an empty TV, with the MO set to \"ignore\" and the CDA set to\r\n\"value-sent\".", "notes": "The new text indicates to use an empty TV, consistent with the intended CDA \"value-sent\".\n --VERIFIER NOTES-- \nThe WG/author wrote:\r\n\"As you can see 'not set' has been transformed into 'not-sent' during\r\nthe edition. And I prefer to use this terminology that corresponds to\r\nthe RFC8724.\"\r\nin https://mailarchive.ietf.org/arch/msg/lp-wan/Vw5P6i0DysYqxClBj-gUjMEmqWY/", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:12:45"}, {"errata_id": "7519", "doc-id": "RFC6386", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.3", "orig_text": "       a.  L(1), the mode of segment feature data\r\n           (segment_feature_mode), can be absolute-value mode (0) or\r\n           delta value mode (1).", "correct_text": "       a.  L(1), the mode of segment feature data\r\n           (segment_feature_mode), can be delta value mode (0) or\r\n           absolute-value mode (1).", "notes": "9.3 lists the meanings of the bits the wrong way round.\r\n\r\nSection 19.2 has it the right way round:\r\n\r\n\"\"\"\r\n   o  segment_feature_mode indicates the feature data update mode, 0 for\r\n      delta and 1 for the absolute value\r\n\"\"\"\r\n\r\nThat is, at the moment two sections in the spec directly contradict each other. Section 19.2 is right, section 9.3 is wrong from what I can tell.", "submit_date": "2023-05-22", "submitter_name": "Nico Weber", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5580", "doc-id": "RFC5802", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "7", "orig_text": "   server-error-value = \"invalid-encoding\" /\r\n                  \"extensions-not-supported\" /  ; unrecognized 'm' value\r\n                  \"invalid-proof\" /\r\n                  \"channel-bindings-dont-match\" /\r\n                  \"server-does-support-channel-binding\" /\r\n                    ; server does not support channel binding\r\n                  \"channel-binding-not-supported\" /\r\n                  \"unsupported-channel-binding-type\" /\r\n                  \"unknown-user\" /\r\n                  \"invalid-username-encoding\" /\r\n                    ; invalid username encoding (invalid UTF-8 or\r\n                    ; SASLprep failed)\r\n                  \"no-resources\" /\r\n                  \"other-error\" /\r\n                  server-error-value-ext\r\n           ; Unrecognized errors should be treated as \"other-error\".\r\n           ; In order to prevent information disclosure, the server\r\n           ; may substitute the real reason with \"other-error\".", "correct_text": "   server-error-value = \"invalid-encoding\" /\r\n                  \"extensions-not-supported\" /  ; unrecognized 'm' value\r\n                  \"invalid-proof\" /\r\n                  \"channel-bindings-dont-match\" /\r\n                  \"server-does-support-channel-binding\" /\r\n                    ; the client thinks the server does not support \r\n                    ; channel binding, but the server does\r\n                  \"channel-binding-not-supported\" /\r\n                  \"unsupported-channel-binding-type\" /\r\n                  \"unknown-user\" /\r\n                  \"invalid-username-encoding\" /\r\n                    ; invalid username encoding (invalid UTF-8 or\r\n                    ; SASLprep failed)\r\n                  \"no-resources\" /\r\n                  \"other-error\" /\r\n                  server-error-value-ext\r\n           ; Unrecognized errors should be treated as \"other-error\".\r\n           ; In order to prevent information disclosure, the server\r\n           ; may substitute the real reason with \"other-error\".", "notes": "See Section 6, \"If the flag is set to \"y\" and the server supports channel binding, the server MUST fail authentication. \"\r\nI assume the server-error-value \"server-does-support-channel-binding\" is designed for such situation.", "submit_date": "2018-12-19", "submitter_name": "Wang Xin", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5581", "doc-id": "RFC6154", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "\r\n     C: t1 CAPABILITY\r\n     S: * CAPABILITY IMAP4rev1 SPECIAL-USE\r\n     S: t1 OK done", "correct_text": "\r\n     C: t1 CAPABILITY\r\n     S: * CAPABILITY IMAP4rev1 SPECIAL-USE LIST-EXTENDED\r\n     S: t1 OK done", "notes": "Is it okay for a server to support SPECIAL-USE without supporting LIST-EXTENDED? The example seems to imply this, but it's not clear from the RFC text. Section 2 starts with: \"For the extended list command [RFC5258]\", but doesn't say the server MUST support LIST-EXTENDED.", "submit_date": "2018-12-21", "submitter_name": "Not clear whether SPECIAL-USE implies LIST-EXTENDED", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7343", "doc-id": "RFC9051", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9", "orig_text": "resp-cond-auth  = (\"OK\" / \"PREAUTH\") SP resp-text\r\n                    ; Authentication condition\r\n\r\nresp-cond-bye   = \"BYE\" SP resp-text\r\n\r\nresp-cond-state = (\"OK\" / \"NO\" / \"BAD\") SP resp-text\r\n                    ; Status condition\r\n\r\n...\r\n\r\nresp-text       = [\"[\" resp-text-code \"]\" SP] [text]\r\n\r\n", "correct_text": "resp-cond-auth  = (\"OK\" / \"PREAUTH\") [SP resp-text]\r\n                    ; Authentication condition\r\n                    ;\r\n                    ; Servers SHOULD send the trailing SP when resp-text\r\n                    ; is empty.\r\n                    \r\n\r\nresp-cond-bye   = \"BYE\" [SP resp-text]\r\n                    ; Servers SHOULD send the trailing SP when resp-text\r\n                    ; is empty.\r\n\r\nresp-cond-state = (\"OK\" / \"NO\" / \"BAD\") [SP resp-text]\r\n                    ; Status condition\r\n                    ;\r\n                    ; Servers SHOULD send the trailing SP when resp-text\r\n                    ; is empty.\r\n\r\n...\r\n\r\n\r\nresp-text       = \"[\" resp-text-code \"]\" [SP [text]] / [text]\r\n                    ; Servers SHOULD send then trailing SP when\r\n                    ; resp-text-code is present but text is empty.", "notes": "Appendix E, Changes from RFC 3501 / IMAP4rev1, item 23 states that \"resp-text ABNF non-terminal was updated to allow for empty text.\"\r\n\r\nIn the spirit of Appendix E. 23, resp-text should allow \"[\" resp-text-code \"]\" without a trailing SP.  Similarly, resp-cond-auth, resp-cond-bye, and resp-cond-state should also allow the trailing SP to be dropped when resp-text is empty.  In all of these cases, the missing SP does not change the semantics of the response, so clients should not require it to be present.  However, for compatibility with clients that strictly adhere to the formal syntax as-is, servers should conservatively send the trailing SP even when text or resp-text is empty.\r\n\r\nThis aligns with existing practice, as some existing IMAP4rev1 servers already fail to send these trailing spaces, and some liberal clients already allow them to be missing.", "submit_date": "2023-02-13", "submitter_name": "Nicholas Evans", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5597", "doc-id": "RFC5036", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.5.3", "orig_text": "   The session establishment setup attempt following a NAK'd\r\n   Initialization message MUST be delayed no less than 15 seconds, and\r\n   subsequent delays MUST grow to a maximum delay of no less than 2\r\n   minutes.  The specific session establishment action that must be\r\n   delayed is the attempt to open the session transport connection by\r\n   the LSR playing the active role.\r\n", "correct_text": "   The session establishment setup attempt following a NAK'd\r\n   Initialization message MUST be delayed no less than 15 seconds, and\r\n   subsequent delays MUST grow to a maximum delay of no more than 2\r\n   minutes.  The specific session establishment action that must be\r\n   delayed is the attempt to open the session transport connection by\r\n   the LSR playing the active role.\r\n", "notes": "In the 3rd line, \"less\" is changed to \"more\".\r\n\r\nThe intention is to cap the maximum delay. But the existing text implies no cap\r\nessentially.\n --VERIFIER NOTES-- \nThis change is a technical change as it changes from no cap to a cap of 2 minutes. This request needs to go via the consensus process (e.g. RFC).", "submit_date": "2019-01-10", "submitter_name": "Ramakrishna Rao DTV", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5598", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "25.1", "orig_text": "display-name   =  *(token LWS)/ quoted-string", "correct_text": "display-name   =  token *(LWS token)/ quoted-string", "notes": "There is a contradiction between the ABNF rule and specification.\r\n\r\nThe name-addr ABNF rule in RFC 3261 specifies:\r\n\r\nname-addr      =  [ display-name ] LAQUOT addr-spec RAQUOT\r\naddr-spec      =  SIP-URI / SIPS-URI / absoluteURI\r\ndisplay-name   =  *(token LWS)/ quoted-string\r\n\r\nBased on this, LWS is always required between token and the \"<\" and the following Name-Address value is invalid: foo<sip:foo@bar.com>\r\n\r\nAt the same time section 20.10 says:\r\n\r\nThere may or may not be LWS between the display-name and the \"<\".\r\n\r\nThis implies that foo<sip:foo@bar.com> should be acceptable.\r\n\r\nI propose to change ABNF rule for display-name to allow no LWS between last token and the \"<\"", "submit_date": "2019-01-11", "submitter_name": "Roman Shpount", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6904", "doc-id": "RFC8969", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.3", "orig_text": "     +-------------------------------+-------------------------------+\r\n     |      Topology YANG modules    |     Tunnel YANG modules       |\r\n     +-------------------------------+-------------------------------+\r\n     |  +------------------+         |                               |\r\n     |  |Network Topologies|         | +------+  +-----------+       |\r\n     |  |       Model      |         | |Other |  | TE Tunnel |       |\r\n     |  +--------+---------+         | |Tunnel|  +----+------+       |\r\n     |           |   +---------+     | +------+       |              |\r\n     |           +---+Service  |     |     +----------+---------+    |\r\n     |           |   |Topology |     |     |          |         |    |\r\n     |           |   +---------+     |     |          |         |    |\r\n     |           |   +---------+     |+----+---+ +----+---+ +---+---+|\r\n     |           +---+Layer 3  |     ||MPLS-TE | |RSVP-TE | | SR-TE ||\r\n     |           |   |Topology |     || Tunnel | | Tunnel | |Tunnel ||\r\n     |           |   +---------+     |+--------+ +--------+ +-------+|\r\n     |           |   +---------+     |                               |\r\n     |           +---+TE       |     |                               |\r\n     |           |   |Topology |     |                               |\r\n     |           |   +---------+     |                               |\r\n     |           |   +---------+     |                               |\r\n     |           +---+Layer 3  |     |                               |\r\n     |               |Topology |     |                               |\r\n     |               +---------+     |                               |\r\n     +-------------------------------+-------------------------------+", "correct_text": "     +-------------------------------+-------------------------------+\r\n     |      Topology YANG modules    |     Tunnel YANG modules       |\r\n     +-------------------------------+-------------------------------+\r\n     |  +------------------+         |                               |\r\n     |  |Network Topologies|         | +------+  +-----------+       |\r\n     |  |       Model      |         | |Other |  | TE Tunnel |       |\r\n     |  +--------+---------+         | |Tunnel|  +----+------+       |\r\n     |           |   +---------+     | +------+       |              |\r\n     |           +---+Service  |     |     +----------+---------+    |\r\n     |           |   |Topology |     |     |          |         |    |\r\n     |           |   +---------+     |     |          |         |    |\r\n     |           |   +---------+     |+----+---+ +----+---+ +---+---+|\r\n     |           +---+Layer 3  |     ||MPLS-TE | |RSVP-TE | | SR-TE ||\r\n     |           |   |Topology |     || Tunnel | | Tunnel | |Tunnel ||\r\n     |           |   +---------+     |+--------+ +--------+ +-------+|\r\n     |           |   +---------+     |                               |\r\n     |           +---+TE       |     |                               |\r\n     |           |   |Topology |     |                               |\r\n     |           |   +---------+     |                               |\r\n     |           |   +---------+     |                               |\r\n     |           +---+Layer 2  |     |                               |\r\n     |               |Topology |     |                               |\r\n     |               +---------+     |                               |\r\n     +-------------------------------+-------------------------------+", "notes": "\"Layer 3 Topology\" is cited twice. \"Layer 2 Topology\" is missing as per the text right after Figure 9.", "submit_date": "2022-03-30", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-30 21:44:53"}, {"errata_id": "5582", "doc-id": "RFC7970", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "    <xs:simpleType name=\"contact-role-type\">\r\n      <xs:restriction base=\"xs:NMTOKEN\">\r\n        <xs:enumeration value=\"creator\"/>\r\n        <xs:enumeration value=\"reporter\"/>\r\n        <xs:enumeration value=\"admin\"/>\r\n        <xs:enumeration value=\"tech\"/>\r\n        <xs:enumeration value=\"provider\"/>\r\n        <xs:enumeration value=\"user\"/>\r\n        <xs:enumeration value=\"billing\"/>\r\n        <xs:enumeration value=\"legal\"/>\r\n        <xs:enumeration value=\"abuse\"/>\r\n        <xs:enumeration value=\"irt\"/>\r\n        <xs:enumeration value=\"cc\"/>\r\n        <xs:enumeration value=\"cc-irt\"/>\r\n        <xs:enumeration value=\"leo\"/>\r\n        <xs:enumeration value=\"vendor\"/>\r\n        <xs:enumeration value=\"vendor-services\"/>", "correct_text": "    <xs:simpleType name=\"contact-role-type\">\r\n      <xs:restriction base=\"xs:NMTOKEN\">\r\n        <xs:enumeration value=\"creator\"/>\r\n        <xs:enumeration value=\"reporter\"/>\r\n        <xs:enumeration value=\"admin\"/>\r\n        <xs:enumeration value=\"tech\"/>\r\n        <xs:enumeration value=\"provider\"/>\r\n        <xs:enumeration value=\"user\"/>\r\n        <xs:enumeration value=\"billing\"/>\r\n        <xs:enumeration value=\"legal\"/>\r\n        <xs:enumeration value=\"abuse\"/>\r\n        <xs:enumeration value=\"irt\"/>\r\n        <xs:enumeration value=\"cc\"/>\r\n        <xs:enumeration value=\"cc-irt\"/>\r\n        <xs:enumeration value=\"leo\"/>\r\n        <xs:enumeration value=\"vendor\"/>\r\n        <xs:enumeration value=\"vendor-support\"/>", "notes": "In section 3.9, the body text says that the role attribute can take the value \"vendor-support,\" but the schema says that the role can take the value \"vendor-services.\" This inconsistency needs to be solved.", "submit_date": "2018-12-25", "submitter_name": "Takeshi Takahashi", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5583", "doc-id": "RFC7970", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "    <xs:simpleType name=\"action-type\">\r\n      <xs:restriction base=\"xs:NMTOKEN\">\r\n        <xs:enumeration value=\"nothing\"/>\r\n        <xs:enumeration value=\"contact-source-site\"/>\r\n        <xs:enumeration value=\"contact-target-site\"/>\r\n        <xs:enumeration value=\"contact-sender\"/>\r\n        <xs:enumeration value=\"investigate\"/>\r\n        <xs:enumeration value=\"block-host\"/>\r\n        <xs:enumeration value=\"block-network\"/>\r\n        <xs:enumeration value=\"block-port\"/>\r\n        <xs:enumeration value=\"rate-limit-host\"/>\r\n        <xs:enumeration value=\"rate-limit-network\"/>\r\n        <xs:enumeration value=\"rate-limit-port\"/>\r\n        <xs:enumeration value=\"redirect-traffic\"/>\r\n        <xs:enumeration value=\"honeypot\"/>\r\n        <xs:enumeration value=\"upgrade-software\"/>\r\n        <xs:enumeration value=\"rebuild-asset\"/>\r\n        <xs:enumeration value=\"harden-asset\"/>\r\n        <xs:enumeration value=\"remediate-other\"/>\r\n        <xs:enumeration value=\"status-triage\"/>\r\n        <xs:enumeration value=\"status-new-info\"/>\r\n        <xs:enumeration value=\"watch-and-report\"/>\r\n        <xs:enumeration value=\"defined-coa\"/>", "correct_text": "    <xs:simpleType name=\"action-type\">\r\n      <xs:restriction base=\"xs:NMTOKEN\">\r\n        <xs:enumeration value=\"nothing\"/>\r\n        <xs:enumeration value=\"contact-source-site\"/>\r\n        <xs:enumeration value=\"contact-target-site\"/>\r\n        <xs:enumeration value=\"contact-sender\"/>\r\n        <xs:enumeration value=\"investigate\"/>\r\n        <xs:enumeration value=\"block-host\"/>\r\n        <xs:enumeration value=\"block-network\"/>\r\n        <xs:enumeration value=\"block-port\"/>\r\n        <xs:enumeration value=\"rate-limit-host\"/>\r\n        <xs:enumeration value=\"rate-limit-network\"/>\r\n        <xs:enumeration value=\"rate-limit-port\"/>\r\n        <xs:enumeration value=\"redirect-traffic\"/>\r\n        <xs:enumeration value=\"honeypot\"/>\r\n        <xs:enumeration value=\"upgrade-software\"/>\r\n        <xs:enumeration value=\"rebuild-asset\"/>\r\n        <xs:enumeration value=\"harden-asset\"/>\r\n        <xs:enumeration value=\"remediate-other\"/>\r\n        <xs:enumeration value=\"status-triage\"/>\r\n        <xs:enumeration value=\"status-new-info\"/>\r\n        <xs:enumeration value=\"watch-and-report\"/>\r\n        <xs:enumeration value=\"training\"/>\r\n        <xs:enumeration value=\"defined-coa\"/>", "notes": "The narrative text in Section 3.1.5 defined an enumerated value of \"training\" for the action attribute, but the schema omitted it.", "submit_date": "2018-12-25", "submitter_name": "Takeshi Takahashi", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 00:58:42"}, {"errata_id": "5584", "doc-id": "RFC8223", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.3.2", "orig_text": "1. The S-bit of the TAC is set to 1 or 0 to advertise or withdraw it.", "correct_text": "1. The E-bit of the TAC is set to 1 or 0 to advertise or withdraw it.", "notes": "My understanding of this RFC suggests that in order to Advertize or Withdraw TAC , the bit E in TAC is used. In Point # 1 of section 2.3.2, it is mentioned that bit S is used. Looks this is Editorial mistake.\n --VERIFIER NOTES-- \n I believe this errata is inaccurate. The S-bit is part of the \"Capability Parameter\" TLV as defined in RFC 5561 Section 3 and the TAE is the Targeted Application Capability that is defined in RFC8223. Section 2.3.2 is correct in stating that the S-bit of the TAC is set to 1. ", "submit_date": "2018-12-27", "submitter_name": "Jayant Bhardwaj", "verifier_id": "", "verifier_name": "James N Guichard", "update_date": "2023-05-31 16:51:45"}, {"errata_id": "7171", "doc-id": "RFC586", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10.3.1", "orig_text": "Section 10.3.1 says:\r\n\r\n    4. The contributor represents that contribution properly\r\n       acknowledge major contributors.\r\n\r\n    5. The contribuitor, the organization (if any) he represents and\r\n       the owners of any proprietary rights in the contribution, agree\r\n       that no information in the contribution is confidential and\r\n       that the ISOC and its affiliated organizations may freely\r\n       disclose any information in the contribution.", "correct_text": "It should say:\r\n\r\n    4. The contributor represents that the contribution properly\r\n       acknowledges major contributors.\r\n\r\n    5. The contributor, the organization (if any) he represents and\r\n       the owners of any proprietary rights in the contribution, agree\r\n       that no information in the contribution is confidential and\r\n       that the ISOC and its affiliated organizations may freely\r\n       disclose any information in the contribution", "notes": "Notes:\r\n\r\nverb agreement (\"acknowledges\") and spelling correction (\"contributor\")\n --VERIFIER NOTES-- \nThis erratum appears to be a mistake, RFC 586 doesn't contain the quoted text.", "submit_date": "2022-10-17", "submitter_name": "bossbitxh52", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 01:18:14"}, {"errata_id": "7173", "doc-id": "RFC8520", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "Within each access list, access is permitted to packets flowing to or from the Thing that can be mapped to the domain name of \"service.bms.example.com\".", "correct_text": "Within each access list, access is permitted to packets flowing to or from the Thing that can be mapped to the domain name of \"test.example.com\".", "notes": "The subdomain in the Figure does not correspond to the one in the text.", "submit_date": "2022-10-20", "submitter_name": "Zeno Heeb", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 14:45:54"}, {"errata_id": "7174", "doc-id": "RFC8713", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.7.3", "orig_text": "The sitting IAB members review the IESG candidates.", "correct_text": "The sitting IAB members review the IESG candidates\r\n(including IETF Chair).", "notes": "Sometimes IETF Chair is mentioned and sometimes Gen AD is mentioned;\r\nthe clarification avoids confusion.", "submit_date": "2022-10-20", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:17:59"}, {"errata_id": "7176", "doc-id": "RFC9167", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "xmlns=\"https://www.w3.org/2001/XMLSchema\"", "correct_text": "xmlns=\"http://www.w3.org/2001/XMLSchema\"", "notes": "XML Schema standard https://www.w3.org/TR/xmlschema-1/ \"The XML representation of schema components uses a vocabulary identified by the namespace name http://www.w3.org/2001/XMLSchema. \"", "submit_date": "2022-10-21", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 21:49:43"}, {"errata_id": "5585", "doc-id": "RFC7323", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "2.2.  Window Scale Option\r\n\r\n   The three-byte Window Scale option MAY be sent in a <SYN> segment by\r\n   a TCP.  It has two purposes: (1) indicate that the TCP is prepared to\r\n   both send and receive window scaling, and (2) communicate the\r\n   exponent of a scale factor to be applied to its receive window.\r\n   Thus, a TCP that is prepared to scale windows SHOULD send the option,\r\n   even if its own scale factor is 1 and the exponent 0.  The scale\r\n   factor is limited to a power of two and encoded logarithmically, so\r\n   it may be implemented by binary shift operations.  The maximum scale\r\n   exponent is limited to 14 for a maximum permissible receive window\r\n   size of 1 GiB (2^(14+16)).\r\n", "correct_text": "2.2.  Window Scale Option\r\n\r\n   The three-byte Window Scale option MAY be sent in a <SYN> segment by\r\n   a TCP.  It has two purposes: (1) indicate that the TCP is prepared to\r\n   both send and receive window scaling, and (2) communicate the\r\n   exponent of a scale factor to be applied to its receive window.\r\n   Thus, a TCP that is prepared to scale windows SHOULD send the option,\r\n   even if its own scale factor is 1 and the exponent 0.  The scale\r\n   factor is limited to a power of two and encoded logarithmically, so\r\n   it may be implemented by binary shift operations.  The maximum scale\r\n   exponent is limited to 14 for a maximum permissible receive window\r\n   size of approximately 1 GiB ((2^30-1) - (2^14-1)).\r\n", "notes": "Left shift inserts zero's on the right hand side so the maximum window size is actually 16KiB shy of 1 GiB. The exact calculation would be  ((2^30-1) - (2^14-1)). As it is stated as \"approximately 1 GiB\" the text is not incorrect but it would be good to provide the complete calculation in a document update to avoid invalid implementations.", "submit_date": "2018-12-27", "submitter_name": "Marco Caspers", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5586", "doc-id": "RFC7323", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.3", "orig_text": "Since the max window is 2^S (where S is the scaling shift count)\r\n   times at most 2^16 - 1 (the maximum unscaled window), the maximum\r\n   window is guaranteed to be < 2^30 if S <= 14.  Thus, the shift count\r\n   MUST be limited to 14 (which allows windows of 2^30 = 1 GiB).  If a\r\n   Window Scale option is received with a shift.cnt value larger than\r\n   14, the TCP SHOULD log the error but MUST use 14 instead of the\r\n   specified value.  This is safe as a sender can always choose to only\r\n   partially use any signaled receive window.  If the receiver is\r\n   scaling by a factor larger than 14 and the sender is only scaling by\r\n   14, then the receive window used by the sender will appear smaller\r\n   than it is in reality.\r\n\r\n", "correct_text": "Since the max window is 2^S (where S is the scaling shift count)\r\n   times at most 2^16 - 1 (the maximum unscaled window), the maximum\r\n   window is guaranteed to be < 2^30-2^14 if S <= 14.  Thus, the shift\r\n count\r\n   MUST be limited to 14 (which allows windows of 2^30-2^14 ~ 1 GiB).\r\n  If a\r\n   Window Scale option is received with a shift.cnt value larger than\r\n   14, the TCP SHOULD log the error but MUST use 14 instead of the\r\n   specified value.  This is safe as a sender can always choose to only\r\n   partially use any signaled receive window.  If the receiver is\r\n   scaling by a factor larger than 14 and the sender is only scaling by\r\n   14, then the receive window used by the sender will appear smaller\r\n   than it is in reality.\r\n", "notes": "Shifting is inserting zeroes on the right hand side. Thus for S = 14 the 14 right most bits are zero and thus the calculation 2^30 is invalid for the guaranteed maximum window size.\r\n\r\nCorrect calculation formulae is (2^30 - 1) - (2^14 -1).\r\nWhich can be simplified to 2^30 - 2^14.\n --VERIFIER NOTES-- \nThat section is for illustration purposes only, and not intended as an exact value for the maximum supported window size.\r\n\r\nIt is correct that the maximum supported window size is 2^30-2^14, but the requirement is, that the window size has to remain smaller than 2^30.", "submit_date": "2018-12-27", "submitter_name": "Marco Caspers", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-06 13:08:13"}, {"errata_id": "5587", "doc-id": "RFC5036", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.6.2.2", "orig_text": "  \"In Downstream Unsolicited advertisement mode, label mapping\r\n   advertisements for all routes may be received from all LDP peers.\r\n   When using Liberal Label retention, every label mappings received\r\n   from a peer LSR is retained regardless of whether the LSR is the next\r\n   hop for the advertised mapping...\"\r\n", "correct_text": "  \"In Downstream Unsolicited advertisement mode, label mapping\r\n   advertisements for all routes may be received from all LDP peers.\r\n   When using Liberal Label retention, every label mapping received\r\n   from a peer LSR is retained regardless of whether the LSR is the next\r\n   hop for the advertised mapping...\"\r\n", "notes": "s/mappings/mapping/", "submit_date": "2018-12-28", "submitter_name": "Ramakrishna Rao DTV", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7392", "doc-id": "RFC8824", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.2", "orig_text": "Since the Observe Option MAY use a RST message to inform a server\r\nthat the client does not require the Observe response, a specific\r\nSCHC Rule SHOULD exist to allow the message's compression with the\r\nRST type.", "correct_text": "Since the Observe extension MAY use a RST message to inform a server\r\nthat the client does not require the Observe response, a specific\r\nSCHC Rule SHOULD exist to allow the message's compression with the\r\nRST type.", "notes": "A RST message is not used by the Observe option itself, but by a CoAP client when using Observe.\n --VERIFIER NOTES-- \n The authors wrote:\r\n\"[Ana] as soon as I understand CoAP RFC7252 uses Options, and in the\r\nRFC7641 Observe is also an Option, so I don't think that the change is\r\nneeded. Because Observe is not an extension.\"\r\nin https://mailarchive.ietf.org/arch/msg/lp-wan/amZkZfocq1SQCpFPNJzoxn3TMsY/\r\n", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:11:05"}, {"errata_id": "7393", "doc-id": "RFC8824", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "Figure 4 shows the OSCORE option value encoding defined in\r\nSection 6.1 of [RFC8613], where the first byte specifies the content\r\nof the OSCORE options using flags.", "correct_text": "Figure 4 shows the OSCORE option value encoding defined in\r\nSection 6.1 of [RFC8613], where the first byte specifies the content\r\nof the OSCORE option using flags.", "notes": "The end of the sentence should still refer to a single OSCORE option, i.e., in the singular.", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2023-08-02 14:14:25"}, {"errata_id": "7394", "doc-id": "RFC8824", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1", "orig_text": "equal 1", "correct_text": "equal", "notes": "See the cell value of Table 3, last row, column \"MO\".\n --VERIFIER NOTES-- \n   Per the WG/author in https://mailarchive.ietf.org/arch/msg/lp-wan/ZVVEzAILvuGbudfpLhNp2xJuBDc/", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:16:28"}, {"errata_id": "5588", "doc-id": "RFC6545", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "Page 18 says:\r\n\r\nPolicyRegion\r\n\r\n      One or many.  REQUIRED.  The values for the attribute \"region\" are\r\n      used to determine what policy area may require consideration\r\n      before a trace can be approved.  The PolicyRegion may include\r\n      multiple selections from the attribute list in order to fit all\r\n      possible policy considerations when crossing regions, consortiums,\r\n      or networks.\r\n\r\n   region\r\n\r\n      One or many.  REQUIRED.  ENUM.  The attribute region is used to\r\n      identify the expected sharing range of the incident information.\r\n      The region may be within a region or defined by existing\r\n      relationships such as those of a consortium or a client to a\r\n      service provider.", "correct_text": "Page 18 should say:\r\n\r\nPolicyRegion\r\n\r\n      One or many.  REQUIRED.  The values for the attribute \"region\" are\r\n      used to determine what policy area may require consideration\r\n      before a trace can be approved.  The PolicyRegion may include\r\n      multiple selections from the attribute list in order to fit all\r\n      possible policy considerations when crossing regions, consortiums,\r\n      or networks.\r\n\r\n   region\r\n\r\n      One.  REQUIRED.  ENUM.  The attribute region is used to\r\n      identify the expected sharing range of the incident information.\r\n      The region may be within a region or defined by existing\r\n      relationships such as those of a consortium or a client to a\r\n      service provider.", "notes": "The text as written (with \"One or many\" instances of the \"region\" attribute) suggests that \r\n<PolicyRegion region=\"ClientToSP\" region=\"SPToClient\"/> \r\nwould be legal. \r\n\r\nHowever, the schema (Section 8) and the fact that a single XML tag can't contain more than one instance of a given attribute (see https://www.w3.org/TR/xml/#uniqattspec, \"An attribute name MUST NOT appear more than once in the same start-tag or empty-element tag\") indicate that the above example of a PolicyRegion is not legal, and would need to be replaced with:\r\n<PolicyRegion region=\"ClientToSP\"/>\r\n<PolicyRegion region=\"SPToClient\"/> ", "submit_date": "2018-12-28", "submitter_name": "Logan Widick", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5614", "doc-id": "RFC6545", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "TrafficType\r\n\r\n      One or many.  REQUIRED.  The values for the attribute \"type\" are\r\n      meant to assist in determining if a trace is appropriate for the\r\n      SP receiving the request to continue the trace.  Multiple values\r\n      may be selected for this element; however, where possible, it\r\n      should be restricted to one value that most accurately describes\r\n      the traffic type.\r\n\r\n   type\r\n\r\n      One or many.  REQUIRED.  ENUM.  The attribute type is used to\r\n      identify the type of information included in the RID message or\r\n      the type of incident.\r\n\r\n\r\n", "correct_text": "TrafficType\r\n\r\n      One or many.  REQUIRED.  The values for the attribute \"type\" are\r\n      meant to assist in determining if a trace is appropriate for the\r\n      SP receiving the request to continue the trace.  Multiple values\r\n      may be selected for this element; however, where possible, it\r\n      should be restricted to one value that most accurately describes\r\n      the traffic type.\r\n\r\n   type\r\n\r\n      One.  REQUIRED.  ENUM.  The attribute type is used to\r\n      identify the type of information included in the RID message or\r\n      the type of incident.\r\n\r\n\r\n", "notes": "This is the \"similar\r\nissue [that] is also present with the way that the TrafficType is defined\r\non pages 19-20\" that was mentioned in the original submission for errata id 5588. \r\n\r\nThe text as written (with \"One or many\" instances of the \"type\" attribute) suggests that \r\n<TrafficType type=\"Attack\" type=\"Network\"/> \r\nwould be legal.\r\n\r\nHowever, the schema (Section 8) and the fact that a single XML tag can't contain more than one instance of a given attribute (see https://www.w3.org/TR/xml/#uniqattspec, \"An attribute name MUST NOT appear more than once in the same start-tag or empty-element tag\") indicate that the above example of a TrafficType is not legal, and would need to be replaced with:\r\n<TrafficType type=\"Attack\"/>\r\n<TrafficType type=\"Network\"/>", "submit_date": "2019-01-28", "submitter_name": "Logan Widick", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7178", "doc-id": "RFC9316", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "   Furthermore, this document is already proving to be extremely\r\n   relevant to the research community as it has been used as the basis\r\n   for proposing self-generated Intent-based systems [Bezahaf19], for\r\n   advancing Virtual Network Function (VNF) placement solutions based on\r\n   Internet-Based Networks (IBNs) that rely on defining user intent\r\n   profiles corresponding to abstract network services [Leivadeas21],\r\n   for improving existing solutions in provisioning intent-based\r\n   networks, for proposing new approaches to service management\r\n   [Davoli21], and even for defining grammars for users to specify the\r\n   high-level requirements for blockchain selection in the form of\r\n   intent [Padovan20].  As well, the document has been mentioned in\r\n   surveys addressing the topic of intelligent intent-based autonomous\r\n   networks [Mehmood21] [Szilagyi21].", "correct_text": "   Furthermore, this document is already proving to be extremely\r\n   relevant to the research community as it has been used as the basis\r\n   for proposing self-generated Intent-based systems [Bezahaf19], for\r\n   advancing Virtual Network Function (VNF) placement solutions based on\r\n   Intent-Based Networks (IBNs) that rely on defining user intent\r\n   profiles corresponding to abstract network services [Leivadeas21],\r\n   for improving existing solutions in provisioning intent-based\r\n   networks, for proposing new approaches to service management\r\n   [Davoli21], and even for defining grammars for users to specify the\r\n   high-level requirements for blockchain selection in the form of\r\n   intent [Padovan20].  As well, the document has been mentioned in\r\n   surveys addressing the topic of intelligent intent-based autonomous\r\n   networks [Mehmood21] [Szilagyi21].", "notes": "Typo (Internet-Based instead Intent-Based)", "submit_date": "2022-10-22", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2022-10-23 12:17:52"}, {"errata_id": "5599", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "2.3.  Intermediaries \r\n...\r\n   HTTP is defined as a stateless protocol, meaning that each request\r\n   message can be understood in isolation.  Many implementations depend\r\n   on HTTP's stateless design in order to reuse proxied connections or\r\n   dynamically load balance requests across multiple servers.  Hence, a\r\n   server MUST NOT assume that two requests on the same connection are\r\n   from the same user agent unless the connection is secured and\r\n   specific to that agent.\r\n\r\n2.5.  Conformance and Error Handling\r\n...\r\n   A recipient MUST interpret a received protocol element according to\r\n   the semantics defined for it by this specification, including\r\n   extensions to this specification, unless the recipient has determined\r\n   (through experience or configuration) that the sender incorrectly\r\n   implements what is implied by those semantics.  For example, an\r\n   origin server might disregard the contents of a received\r\n   Accept-Encoding header field if inspection of the User-Agent header\r\n   field indicates a specific implementation version that is known to\r\n   fail on receipt of certain content codings.\r\n...\r\n\r\n2.6.  Protocol Versioning\r\n...\r\n   A server MAY send an HTTP/1.0 response to a request if it is known or\r\n   suspected that the client incorrectly implements the HTTP\r\n   specification and is incapable of correctly processing later version\r\n   responses, such as when a client fails to parse the version number\r\n   correctly or when an intermediary is known to blindly forward the\r\n   HTTP-version even when it doesn't conform to the given minor version\r\n   of the protocol.  Such protocol downgrades SHOULD NOT be performed\r\n   unless triggered by specific client attributes, such as when one or\r\n   more of the request header fields (e.g., User-Agent) uniquely match\r\n   the values sent by a client known to be in error.\r\n...", "correct_text": "2.3.  Intermediaries \r\n...\r\n   HTTP is defined as a stateless protocol, meaning that each request\r\n   message can be understood in isolation.  Many implementations depend\r\n   on HTTP's stateless design in order to reuse proxied connections or\r\n   dynamically load balance requests across multiple servers.  Hence, a\r\n   server MUST NOT assume that two requests on the same connection are\r\n   from the same user agent unless the connection is secured and\r\n   specific to that agent. User agents MUST include a User-Agent\r\n   request-header field with CONNECT and individual query requests that\r\n   uniquely identify the product making the request thru an\r\n   intermediary.\r\n\r\n2.5.  Conformance and Error Handling\r\n...\r\n   A recipient MUST interpret a received protocol element according to\r\n   the semantics defined for it by this specification, including\r\n   extensions to this specification, unless the recipient has determined\r\n   (through experience or configuration) that the sender incorrectly\r\n   implements what is implied by those semantics.  For example, an\r\n   origin server might disregard the contents of a received\r\n   Accept-Encoding header field if inspection of the User-Agent header\r\n   field indicates a specific implementation version that is known to\r\n   fail on receipt of certain content codings. User agents MUST \r\n   include a User-Agent request-header field with CONNECT and \r\n   individual query requests that uniquely identify the product\r\n   making the request.\r\n...\r\n\r\n2.6.  Protocol Versioning\r\n...\r\n   A server MAY send an HTTP/1.0 response to a request if it is known or\r\n   suspected that the client incorrectly implements the HTTP\r\n   specification and is incapable of correctly processing later version\r\n   responses, such as when a client fails to parse the version number\r\n   correctly or when an intermediary is known to blindly forward the\r\n   HTTP-version even when it doesn't conform to the given minor version\r\n   of the protocol.  Such protocol downgrades SHOULD NOT be performed\r\n   unless triggered by specific client attributes, such as when one or\r\n   more of the request header fields (e.g., User-Agent) uniquely match\r\n   the values sent by a client known to be in error. User agents \r\n   MUST include a User-Agent request-header field with CONNECT and \r\n   individual query requests that uniquely identify the product making\r\n   the request.\r\n...", "notes": "User agents MUST include a User-Agent \r\n   request-header field with CONNECT and individual query requests that \r\n   uniquely identify the product making the request thru an intermediary.\r\n\r\nRFC 2616 Sec 14.43 specified made the \"User-Agent\" request-header as optional \"User agents SHOULD include this field with requests.\" But RFC7230 drops most mentions of the User-Agent request-header field. Without this field intermediaries are left guessing. \r\n\r\n\r\nMost of the complaints against including the User-Agent header is the monstrosity they have become an the spoofing. Even if the field only contains a SHA-256 hash of the binary making the request, this would differentiate between processes. But having it is still better from a security and interoperability perceptive.\n --VERIFIER NOTES-- \n   See WG summary at <https://lists.w3.org/Archives/Public/ietf-http-wg/2019JanMar/0029.html>", "submit_date": "2019-01-13", "submitter_name": "Michael James", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5589", "doc-id": "RFC5453", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "   +-----------------------------------------+-------------------------+\r\n   |        Interface Identifier Range       |       Description       |\r\n   +-----------------------------------------+-------------------------+\r\n   |           0000:0000:0000:0000           |  Subnet-Router Anycast  |\r\n   |                                         |        [RFC4291]        |\r\n   |                                         |                         |\r\n   | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast |\r\n   |                                         |    Addresses[RFC2526]   |\r\n   +-----------------------------------------+-------------------------+\r\n\r\n                       Table 1: Current Assignments", "correct_text": "   +-----------------------------------------+-------------------------+\r\n   |        Interface Identifier Range       |       Description       |\r\n   +-----------------------------------------+-------------------------+\r\n   |           0000:0000:0000:0000           |  Subnet-Router Anycast  |\r\n   |                                         |        [RFC4291]        |\r\n   |                                         |                         |\r\n   | FDFF:FFFF:FFFF:FF80-FDFF:FFFF:FFFF:FFFF | Reserved Subnet Anycast |\r\n   | FFFF:FFFF:FFFF:FF80-FFFF:FFFF:FFFF:FFFF |    Addresses[RFC2526]   |\r\n   +-----------------------------------------+-------------------------+\r\n\r\n                       Table 1: Current Assignments", "notes": "Both these ranges are in fact reserved by Section 2 of RFC2526. Under current recommendations [RFC7217] the FDFF range is no longer recommended for routine use, and the FFFF range is equally likely to occur in a pseudo-random 64-bit IID. Credit to Kerry Lynn for pointing this out.", "submit_date": "2019-01-02", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5590", "doc-id": "RFC7970", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.18", "orig_text": "   The Node class identifies a system, asset, or network and its\r\n   location.\r\n\r\n   +---------------+\r\n   | Node          |\r\n   +---------------+\r\n   |               |<>--{0..*}--[ DomainData    ]\r\n   |               |<>--{0..*}--[ Address       ]\r\n   |               |<>--{0..1}--[ PostalAddress ]\r\n   |               |<>--{0..*}--[ Location      ]\r\n   |               |<>--{0..*}--[ Counter       ]\r\n   +---------------+\r\n\r\n                         Figure 34: The Node Class\r\n\r\n   The aggregate classes of the Node class are:\r\n\r\n   DomainData\r\n      Zero or more.  The domain (DNS) information associated with this\r\n      node.  If an Address is not provided, at least one DomainData MUST\r\n      be specified.  See Section 3.19.\r\n\r\n   Address\r\n      Zero or more.  The hardware, network, or application address of\r\n      the node.  If a DomainData is not provided, at least one Address\r\n      MUST be specified.  See Section 3.18.1.\r\n\r\n   PostalAddress\r\n      Zero or one.  POSTAL.  The postal address of the node.\r\n\r\n   Location\r\n      Zero or more.  ML_STRING.  A free-form text description of the\r\n      physical location of the node.  This description may provide a\r\n      more detailed description of where at the address specified by the\r\n      PostalAddress class this node is found (e.g., room number, rack\r\n      number, or slot number in a chassis).\r\n", "correct_text": "   The Node class identifies a system, asset, or network and its\r\n   location.\r\n\r\n   +---------------+\r\n   | Node          |\r\n   +---------------+\r\n   |               |<>--{0..*}--[ DomainData    ]\r\n   |               |<>--{0..*}--[ Address       ]\r\n   |               |<>--{0..1}--[ PostalAddress ]\r\n   |               |<>--{0..*}--[ Location      ]\r\n   |               |<>--{0..*}--[ Counter       ]\r\n   +---------------+\r\n\r\n                         Figure 34: The Node Class\r\n\r\n   The aggregate classes of the Node class are:\r\n\r\n   DomainData\r\n      Zero or more.  The domain (DNS) information associated with this\r\n      node.  If an Address is not provided, at least one DomainData MUST\r\n      be specified.  See Section 3.19.\r\n\r\n   Address\r\n      Zero or more.  The hardware, network, or application address of\r\n      the node.  If a DomainData is not provided, at least one Address\r\n      MUST be specified.  See Section 3.18.1.\r\n\r\n   PostalAddress\r\n      Zero or one.  The postal address of the node. See Section 3.9.2.\r\n\r\n   Location\r\n      Zero or more.  ML_STRING.  A free-form text description of the\r\n      physical location of the node.  This description may provide a\r\n      more detailed description of where at the address specified by the\r\n      PostalAddress class this node is found (e.g., room number, rack\r\n      number, or slot number in a chassis).\r\n", "notes": "According to \"Section 8: The IODEF Data Model (XML Schema)\", the Node class structure is the following:\r\n    <xs:element name=\"Node\">\r\n      <xs:complexType>\r\n        <xs:sequence>\r\n          <xs:choice maxOccurs=\"unbounded\">\r\n            <xs:element ref=\"iodef:DomainData\"\r\n                        minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n            <xs:element ref=\"iodef:Address\"\r\n                        minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          </xs:choice>\r\n          <xs:element ref=\"iodef:PostalAddress\" minOccurs=\"0\"/>\r\n          <xs:element ref=\"iodef:Location\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n          <xs:element ref=\"iodef:Counter\"\r\n                      minOccurs=\"0\" maxOccurs=\"unbounded\"/>\r\n        </xs:sequence>\r\n      </xs:complexType>\r\n    </xs:element>\r\n\r\nNote that the schema is referring to the PostalAddress class (iodef:PostalAddress) instead of the \"PAddress\" (POSTAL) member of the PostalAddress class. Also, the UML diagram (Figure 34) and other parts of Section 3.18 refer to the PostalAddress class instead of the \"PAddress\" (POSTAL) member of the PostalAddress class. Thus, the \"PostalAddress\" field of the Node class is most likely an instance of the PostalAddress class, and not the POSTAL type stated in the text.  \r\n\r\nThe corrected text (\"The aggregate classes of the Node class are... PostalAddress\") includes a reference to the PostalAddress class (\"See Section 3.9.2\") instead of the \"POSTAL.\" type.", "submit_date": "2019-01-04", "submitter_name": "Logan Widick", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5591", "doc-id": "RFC7111", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.3", "orig_text": "This is a reasonable fallback behavior and, in general users, should\r\ntake into account the possibility that a program interpreting a given\r\nURI will fail to interpret the fragment identifier part.", "correct_text": "This is reasonable fallback behavior, and in general, users should\r\ntake into account the possibility that a program interpreting a given\r\nURI will fail to interpret the fragment identifier part.", "notes": "fixed grammatical errors", "submit_date": "2019-01-05", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5592", "doc-id": "RFC7605", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "                                      [RFC1340] also establishes the\r\n   Registered range of 1024-59151, though it notes that it is not\r\n   controlled by the IANA (at that point). ", "correct_text": "                                      [RFC1340] first indicated the\r\n   Registered range of 1024-65535. This noted that the range was only\r\n   recorded (rather than controlled) by IANA. The list provided by\r\n   [RFC1700] in 1994 remained the standard, until replaced by an\r\n   online version in 2002 [RFC3232].  At some time after 1994, but\r\n   before 2000, the Registered range was changed to 1024-49151 and the\r\n   Dynamic/Private range of 49152-65535 was established, although this\r\n   change was not recorded in the RFC series until 2011 [RFC6335].", "notes": "There is an editorial issue as the original text indicated the wrong range with respect to RFC1340. However, the range should not just be updated in the text as there is more history that needs clarification.", "submit_date": "2019-01-05", "submitter_name": "C. M. Heard", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5593", "doc-id": "RFC4180", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "There maybe an optional header line appearing as the first line\r\nof the file with the same format as normal record lines.", "correct_text": "There may be an optional header line appearing as the first line\r\nof the file with the same format as normal record lines.", "notes": "fixed spelling error", "submit_date": "2019-01-06", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:58:02"}, {"errata_id": "5594", "doc-id": "RFC4290", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.1", "orig_text": "The\r\n   definition of the subset was embedded in the DNS protocol itself,\r\n   although some applications protocols, notably those concerned with\r\n   electronic mail, did impose and enforce similar rules.\r\n", "correct_text": "The\r\n   definition of the subset was not embedded in the DNS protocol itself,\r\n   although some applications protocols, notably those concerned with\r\n   electronic mail, did impose and enforce similar rules.\r\n", "notes": "Author confirms the \"not\" is missing.", "submit_date": "2019-01-07", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-06-01 20:13:32"}, {"errata_id": "5620", "doc-id": "RFC7233", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "Content-Range       = byte-content-range\r\n                    / other-content-range\r\n\r\nother-content-range = other-range-unit SP other-range-resp\r\nother-range-resp    = *CHAR", "correct_text": "", "notes": "Due to the loose definition of \"other-content-range\" invalid \"byte content range\" values are possible.\r\n\r\nFor example, following invalid header value is not valid according to \"byte-content-range\" (as \"complete-length\" or \"*\" is missing) but is yet allowed by \"other-content-range\".\r\n\r\nContent-Range: bytes 42-1233/\r\n\r\nThe problem might be solved by excluding \"bytes-unit\" in \"other-range-unit\".", "submit_date": "2019-02-01", "submitter_name": "Armin Abfalterer", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-11-13 01:13:18"}, {"errata_id": "7518", "doc-id": "RFC9051", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.1.", "orig_text": "   A set of messages can be referenced by a sequence set containing\r\n   either message sequence numbers or unique identifiers.  See Section 9\r\n   for details.  A sequence set can contain ranges of sequence numbers\r\n   (such as \"5:50\"), an enumeration of specific sequence numbers, or a\r\n   combination of the above.  A sequence set can use the special symbol\r\n   \"*\" to represent the maximum sequence number in the mailbox.  A\r\n   sequence set never contains unique identifiers.", "correct_text": "Why am I required to fix someone else's sloppy writing?", "notes": "The first and last sentences are in direct contradiction. Clarification is needed.", "submit_date": "2023-05-18", "submitter_name": "Jo\u00f3 \u00c1d\u00e1m", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5595", "doc-id": "RFC4566", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "An example SDP description is:\r\n\r\n      v=0\r\n      o=jdoe 2890844526 2890842807 IN IP4 10.47.16.5\r\n      s=SDP Seminar\r\n      i=A Seminar on the session description protocol\r\n      u=http://www.example.com/seminars/sdp.pdf\r\n      e=j.doe@example.com (Jane Doe)\r\n      c=IN IP4 224.2.17.12/127\r\n      t=2873397496 2873404696\r\n      a=recvonly\r\n      m=audio 49170 RTP/AVP 0\r\n      m=video 51372 RTP/AVP 99\r\n      a=rtpmap:99 h263-1998/90000", "correct_text": "An example SDP description is:\r\n\r\n      v=0\r\n      o=jdoe 2890844526 2890842807 IN IP4 10.47.16.5\r\n      s=SDP Seminar\r\n      i=A Seminar on the session description protocol\r\n      u=http://www.example.com/seminars/sdp.pdf\r\n      e=j.doe@example.com (Jane Doe)\r\n      c=IN IP4 224.2.17.12/127\r\n      a=recvonly\r\n      t=2873397496 2873404696\r\n      m=audio 49170 RTP/AVP 0\r\n      m=video 51372 RTP/AVP 99\r\n      a=rtpmap:99 h263-1998/90000", "notes": "In section 5 it indicates that the SDP lines MUST appear in the exact order given at the top of Page 9.\r\nThe order that is shown indicates that the Session Attributes  appear before the Time Description.\r\n\r\nHowever in the example included in this section which explains that Media Attributes have precedence over Session Attributes for a media stream  contradicts the order as the  Session Attribute of sendonly is included below the  Time Description.\r\n\r\nEither the example is incorrect, or the normative description is poorly explained and some variability in the order of lines in the SDP is allowed.", "submit_date": "2019-01-08", "submitter_name": "Gavin Scallan", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5596", "doc-id": "RFC6241", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7.5", "orig_text": "      The duration of the lock is defined as beginning when the lock is\r\n      acquired and lasting until either the lock is released or the\r\n      NETCONF session closes.  The session closure can be explicitly\r\n      performed by the client, or implicitly performed by the server\r\n      based on criteria such as failure of the underlying transport,\r\n      simple inactivity timeout, or detection of abusive behavior on the\r\n      part of the client.  These criteria are dependent on the\r\n      implementation and the underlying transport.", "correct_text": "      The duration of the lock is defined as beginning when the lock is\r\n      acquired and lasting until either the lock is released or the\r\n      NETCONF session closes.  The session closure can be explicitly\r\n      performed by the client, or implicitly performed by the server\r\n      based on criteria such as failure of the underlying transport,\r\n      simple inactivity timeout, or detection of abusive behavior on the\r\n      part of the client.  These criteria are dependent on the\r\n      implementation and the underlying transport. Note that a lock\r\n      associated with a persistent confirmed commit will be released if\r\n      the NETCONF session closes and, if required, a new lock will have\r\n      to be acquired.", "notes": "A persistent confirmed commit can survive a session termination, however any lock on that same session cannot. If a new session is established between the client and server, the client will need to acquire new locks if it wishes to protect the ongoing persistent confirmed commit.\n --VERIFIER NOTES-- \n   Rejected based on WG mailing list discussion: https://mailarchive.ietf.org/arch/msg/netconf/lNr91W5aK-abxDaqzadftjoE2Pg\r\n\r\n", "submit_date": "2019-01-09", "submitter_name": "Jonathan Hansford", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-19 14:31:23"}, {"errata_id": "5621", "doc-id": "RFC7482", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "IDN: Internationalized Domain Name\r\n\r\nIDNA: Internationalized Domain Names in Applications, a protocol\r\n      for the handling of IDNs.", "correct_text": "IDN: Internationalized Domain Name, a [fully-qualified] domain name\r\ncontaining one or more labels that are intended to include one or more\r\nUnicode code points outside the ASCII range (cf. \"domain name\",\r\n\"fully-qualified domain name\" and \"internationalized domain name\" in\r\nRFC 8499).\r\n\r\nIDNA: Internationalized Domain Names in Applications, a protocol for\r\nthe handling of IDNs.  In this document, \"IDNA\" refers specifically to\r\nthe version of those specifications known as \"IDNA2008\" [RFC5980].\r\n", "notes": "While the proposed new text above borders on the painfully pedantic, failure to be specific about these things undermines the technical validity and consistency of the text (making this a technical issue rather than exclusively an editorial one like a missing reference).  IDNA2008 [RFC5890 Section 2.3.2.3] is very precise about what an \"IDN\" is (a definition incorporated by reference in RFC 6365 and consistent with the definition in RFC 8499) , but there are other things around that, e.g., assume either that \"IDN\" refers to a label, not an FQDN; that an ASCII label, even one in ACE form, does not make the FQDN in which it is imbedded an IDN; that all of the label components of an IDN must be U-labels or A-labels, etc.  Without the definition being clear, some of the statements in the document make no sense.\r\n\r\nA reference to 8499 is suggested above because it is the most recent authoritative definition (and because I didn't write it), but 5980 would be equally legitimate if the authors prefer.\r\n\r\nPinning down the IDNA definition is even more important.  While there are IDNA2008 references further on in the document, if the question of what the generic term \"IDNA\" means is left to the imagination of the reader, then the specification is missing language about what to do if, e.g., a query is inconsistent with the U-label form of what is stored in the registry database without mapping.   The opportunity for that sort of problem is clearly created by the \"performs any local case mapping deemed necessary\" statement in Section 6.1 of the document, at least unless that case mapping is constrained to not be applied to domain name labels (which the text definitely does not say).", "submit_date": "2019-02-01", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Adam Roach", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5622", "doc-id": "RFC8306", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.13", "orig_text": "   The total PCEP message length, including the common header, is\r\n   16 bytes.", "correct_text": "   The total PCEP message length, including the common header, is\r\n   (2^16)-1 bytes.", "notes": "The message length field is 16 bits, so the maximum message length is (2^16)-1.", "submit_date": "2019-02-04", "submitter_name": "Adrian FARREL", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5623", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.7", "orig_text": "absolute-URI  = <absolute-URI, see [RFC3986], Section 4.3>", "correct_text": "", "notes": "RFC3986 defines \"absolute-URI\" very openly, especially regarding to \"hier-part\":\r\n\r\n      absolute-URI  = scheme \":\" hier-part [ \"?\" query ]\r\n\r\n      hier-part   = \"//\" authority path-abempty\r\n                  / path-absolute\r\n                  / path-rootless\r\n                  / path-empty\r\n\r\nThe impact is reflected in RFC 7231 in the definition of the header fields Referer and Content-Location.\r\n\r\n      absolute-URI = <absolute-URI, see [RFC7230], Section 2.7>\r\n\r\nThus, following examples of header values are considered valid\r\n\r\nReferer: https:foo/bar\r\nReferer: https:/foo\r\nReferer: https:/\r\nReferer: foo:/\r\n\r\nI'd suggest to define \"hier-part\" (but also \"scheme\") more strictly.\n --VERIFIER NOTES-- \n   As per WG discussion: <https://lists.w3.org/Archives/Public/ietf-http-wg/2019JanMar/0130.html>", "submit_date": "2019-02-05", "submitter_name": "Armin Abfalterer", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7179", "doc-id": "RFC6497", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.5.c", "orig_text": "There are three dated versions of the UNGEGN transliteration\r\n          specification for Hebrew to Latin.  They can be represented by\r\n          the following language tags:\r\n\r\n          +  und-Hebr-t-und-latn-m0-ungegn-1972\r\n\r\n          +  und-Hebr-t-und-latn-m0-ungegn-1977\r\n\r\n          +  und-Hebr-t-und-latn-m0-ungegn-2007", "correct_text": "Either:\r\n\r\nThere are three dated versions of the UNGEGN transliteration\r\n          specification for Hebrew to Latin.  They can be represented by\r\n          the following language tags:\r\n\r\n          +  und-Latn-t-und-hebr-m0-ungegn-1972\r\n\r\n          +  und-Latn-t-und-hebr-m0-ungegn-1977\r\n\r\n          +  und-Latn-t-und-hebr-m0-ungegn-2007\r\n\r\nOr:\r\n\r\nThere are three dated versions of the UNGEGN transliteration\r\n          specification for Hebrew from Latin.  They can be represented by\r\n          the following language tags:\r\n\r\n          +  und-Hebr-t-und-latn-m0-ungegn-1972\r\n\r\n          +  und-Hebr-t-und-latn-m0-ungegn-1977\r\n\r\n          +  und-Hebr-t-und-latn-m0-ungegn-2007", "notes": "The examples provided in the RFC are for \"undefined language using hebrew script, transliterated from undefined language using latin script, following the UNGEGN revision of 1972/1977/2007.\r\n\r\nHowever the text says these examples are for Hebrew to Latin, although these examples are for Latin to Hebrew. The text should either change the example description from \"for Hebrew from Latin\", or swap the language tags as suggested.", "submit_date": "2022-10-24", "submitter_name": "Frederic G. Marand", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:53:09"}, {"errata_id": "5600", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.", "orig_text": "   Let the first stage offset in the sorted list be theta_0; then, for\r\n   the other stages in any order, the jitter is the RMS average\r\n\r\n                          +-----                 -----+^1/2\r\n                          |  n-1                      |\r\n                          |  ---                      |\r\n                  1       |  \\                     2  |\r\n      psi   =  -------- * |  /    (theta_0-theta_j)   |\r\n                (n-1)     |  ---                      |\r\n                          |  j=1                      |\r\n                          +-----                 -----+", "correct_text": "   Let the first stage offset in the sorted list be theta_0; then, for\r\n   the other stages in any order, the jitter is the RMS average\r\n\r\n               +-----                             -----+^1/2\r\n               |              n-1                      |\r\n               |              ---                      |\r\n               |    1         \\                     2  |\r\n      psi   =  | -------- *   /    (theta_0-theta_j)   |\r\n               |  (n-1)       ---                      |\r\n               |              j=1                      |\r\n               +-----                             -----+", "notes": "The formula to calculate jitter \"psi\" in section \"10.  Clock Filter Algorithm\" is incorrect, and also inconsistent with the formulate to calculate \"psi_s\" in section \"11.2.2.  Cluster Algorithm\".\r\n\r\n\"psi\" is defined as RMS average, so the term 1/(n-1) should be within [ ]^1/2 block.", "submit_date": "2019-01-15", "submitter_name": "Takashi Nakamoto", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-08-29 23:26:05"}, {"errata_id": "5601", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.2.3.", "orig_text": "                  | s.rootdisp  <-- p.epsilon_r + p.epsilon + |\r\n                  |                 p.psi + PHI * (s.t - p.t) |\r\n                  |                 + |THETA|                 |\r\n                  | s.refid     <-- p.refid                   |\r\n                  | s.reftime   <-- p.reftime                 |\r\n                  | s.t         <-- p.t                       |\r\n                  +-------------------------------------------+\r\n\r\n                    Figure 25: System Variables Update\r\n\r\n   There is an important detail not shown.  The dispersion increment\r\n   (p.epsilon + p.psi + PHI * (s.t - p.t) + |THETA|) is bounded from\r\n   below by MINDISP.", "correct_text": "                  | s.rootdisp  <-- p.epsilon_r + p.epsilon + |\r\n                  |                 p.psi + PHI * (t_s - p.t) |\r\n                  |                 + |THETA|                 |\r\n                  | s.refid     <-- p.refid                   |\r\n                  | s.reftime   <-- p.reftime                 |\r\n                  | s.t         <-- p.t                       |\r\n                  +-------------------------------------------+\r\n\r\n                    Figure 25: System Variables Update\r\n\r\n   where t_s is the time when the system variables are updated.\r\n   There is an important detail not shown.  The dispersion increment\r\n   (p.epsilon + p.psi + PHI * (t_s - p.t) + |THETA|) is bounded from\r\n   below by MINDISP.", "notes": "In the same section, it is said that \"By rule, an update is discarded if its time of arrival p.t is not strictly later than the last update used s.t.\" This means that p.t > s.t when the system variable is updated. Hence, (s.t - p.t) is negative. It may lead to a negative dispersion, but, by definition, the dispersion cannot be negative. So, the original formula should be wrong.\r\n\r\nBecause the dispersion is defined as the value that grows at constant rate PHI, s.rootdisp should be\r\n\r\n  s.rootdisp <-- p.epsilon_r + p.epsilon + p.psi + PHI * (t_s - p.t) + |THETA|\r\n\r\nwhere t_s is the time when the system variables are updated. The symbol t_s is arbitrary because it is not defined in other places.\r\n\r\n---\r\n\r\n[verifier notes]\r\n\r\nFrom https://mailarchive.ietf.org/arch/msg/ntp/CHcBo-my1WdRg5PbhSU8aFlIS_k/ :\r\n\r\n\"\"\"\r\n... the reported section with is indeed erroneous, and s.t\r\nshould be replaced with c.t, defined in section 9.1/12. The attached\r\nnote seems inaccurate in the statement that a new name (t_s) is\r\nneeded, since c.t covers the required concept...\r\n\"\"\"\r\n", "submit_date": "2019-01-15", "submitter_name": "Takashi Nakamoto", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-09-26 00:11:45"}, {"errata_id": "5602", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.3", "orig_text": "     ATTACH;FMTTYPE=text/plain;ENCODING=BASE64;VALUE=BINARY:VGhlIH\r\n      F1aWNrIGJyb3duIGZveCBqdW1wcyBvdmVyIHRoZSBsYXp5IGRvZy4\r\n", "correct_text": "     ATTACH;FMTTYPE=text/plain;ENCODING=BASE64;VALUE=BINARY:VGhlIH\r\n      F1aWNrIGJyb3duIGZveCBqdW1wcyBvdmVyIHRoZSBsYXp5IGRvZy4=\r\n", "notes": "The base64 text used in the example misses the base64 padding.  RFC 5545 appears to be using base64 according to RFC 4648 Section 4 with padding throughout, except for this example.  (The corrected text decodes to \"The quick brown fox jumps over the lazy dog.\")  Beyond temporary confusion in implementers, it is possible that this example will turn up in a test suite and ultimately cause unnecessarily lenient behavior of decoders (\"soup\"); it should be either clarified that this lenient behavior is not the intention or the behavior should be codified.", "submit_date": "2019-01-15", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:28:55"}, {"errata_id": "5603", "doc-id": "RFC8484", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   The URI Template defined in this document is processed without any\r\n   variables when the HTTP method is POST.  When the HTTP method is GET,\r\n   the single variable \"dns\" is defined as the content of the DNS\r\n   request (as described in Section 6), encoded with base64url\r\n   [RFC4648].\r\n", "correct_text": "   The URI Template defined in this document is processed without any\r\n   variables when the HTTP method is POST.  When the HTTP method is GET,\r\n   the single variable \"dns\" is defined as the content of the DNS\r\n   request (as described in Section 6), encoded with base64url\r\n   [RFC4648]. Padding characters for base64url MUST NOT be included.\r\n", "notes": "Note that Section 6 does say the same thing for a different usage of base64url, and note that the examples in 4.1.1 even explicitly state this, but the text that states the usual deviation from the default of RFC 4648 should be in the defining part as well.  (This is almost, but not quite, an editorial erratum.)", "submit_date": "2019-01-15", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5624", "doc-id": "RFC3339", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.6", "orig_text": "The following profile of ISO 8601 [ISO8601] dates SHOULD be used in\r\nnew protocols on the Internet.  This is specified using the syntax\r\ndescription notation defined in [ABNF].\r\n", "correct_text": "The following profile of ISO 8601 [ISO8601] dates SHOULD be used in\r\nnew protocols on the Internet.  This is specified using the syntax\r\ndescription notation defined in [ABNF].\r\n\r\nThe syntax production 'full-time' is intended for use in protocols \r\nthat wish to convey precise timestamps (e.g. for logging or ordering \r\nof events).  Other productions (e.g. 'full-date', 'full-time', \r\n'partial-time' may be referenced by applications that have different \r\nrequirements.\r\n", "notes": "There has been some misunderstanding of the intended scope of RFC3339; e.g. see [1]\r\n\r\nThe added paragraph clarifies the intent that RFC3339 definitions can be used by applications that don't need to convey a full date+time value.\r\n\r\n[1] https://stackoverflow.com/a/522281/324122", "submit_date": "2019-02-06", "submitter_name": "Graham Klyne", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 19:40:27"}, {"errata_id": "6115", "doc-id": "RFC6458", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2.1", "orig_text": "sstat_state:  This contains the association's current state, i.e.,\r\n      one of the following values:\r\n\r\n      *  SCTP_CLOSED\r\n\r\n      *  SCTP_BOUND\r\n\r\n      *  SCTP_LISTEN\r\n\r\n      *  SCTP_COOKIE_WAIT\r\n\r\n      *  SCTP_COOKIE_ECHOED\r\n\r\n      *  SCTP_ESTABLISHED\r\n\r\n      *  SCTP_SHUTDOWN_PENDING\r\n\r\n      *  SCTP_SHUTDOWN_SENT\r\n\r\n      *  SCTP_SHUTDOWN_RECEIVED\r\n\r\n      *  SCTP_SHUTDOWN_ACK_SENT\r\n", "correct_text": "sstat_state:  This contains the association's current state, i.e.,\r\n      one of the following values:\r\n\r\n      *  SCTP_CLOSED\r\n\r\n      *  SCTP_LISTEN\r\n\r\n      *  SCTP_COOKIE_WAIT\r\n\r\n      *  SCTP_COOKIE_ECHOED\r\n\r\n      *  SCTP_ESTABLISHED\r\n\r\n      *  SCTP_SHUTDOWN_PENDING\r\n\r\n      *  SCTP_SHUTDOWN_SENT\r\n\r\n      *  SCTP_SHUTDOWN_RECEIVED\r\n\r\n      *  SCTP_SHUTDOWN_ACK_SENT\r\n", "notes": "SCTP_BOUND is not a state of an SCTP association, so it should not be part of this list.", "submit_date": "2020-04-20", "submitter_name": "Michael Tuexen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 22:34:03"}, {"errata_id": "5604", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "11.2.3.", "orig_text": "                  | s.rootdisp  <-- p.epsilon_r + p.epsilon + |\r\n                  |                 p.psi + PHI * (s.t - p.t) |\r\n                  |                 + |THETA|                 |", "correct_text": "                  | s.rootdisp  <-- p.epsilon_r + p.epsilon   |\r\n                  |                 + 5 * p.psi +             |\r\n                  |                 + PHI * (s.t - p.t)       |\r\n                  |                 + |THETA|                 |\r\n", "notes": "In addition to the correction proposed in Errata ID 5601, I think that the formula to calculate the dispersion should be revised. The term \"p.psi\" should be multiplied by not one, but a larger value.\r\n\r\nThis is because the dispersion is defined as the statistics that represent the maximum error, so when it is calculated, it should take into account the maximum errors in the offset estimation. However, the jitter p.psi is defined as the RMS average of the offset values theta_j relative to theta_0, so the term \"p.psi\" does not represent the maximum error caused by the distribution of the offset values.\r\n\r\nIf we assume that the offset value follows the uniform distribution, the error bound is represented as sqrt(3) * p.psi. So, at least, the term \"p.psi\" should be multiplied by sqrt(3). There is arbitrarity in choice of the distribution type, so depending on the distribution type the factor may change. For example, if the normal distribution is assumed, 5 * p.psi gives us 99.99994% confidence. Assuming that the system variable is updated every 16 seconds, the actual offset may be outside the range [theta_0 - 5 * p.psi, theta_0 + 5 * p.psi] approximately once a year. It should be sufficient for usual Internet applications, though someone may think that the factor \"5\" may not be sufficient depending on the application.\r\n\r\n---\r\n\r\n[INT AD notes]\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/ntp/Cbg3sOhChyfenYoj7UG5wCymFMU/ :\r\n\r\n\"\"\"\r\n...That makes some sense to me, but I'd say it really depends on the model of the clock and that's arbitrary...\r\n\"\"\"\r\n", "submit_date": "2019-01-15", "submitter_name": "Takashi Nakamoto", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-09-26 00:23:59"}, {"errata_id": "5605", "doc-id": "RFC6625", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "      - If there is an installed S-PMSI A-D route originated by PE2,\r\n        whose NLRI contains (C-S,C-G), then (C-S,C-G) matches that\r\n        route.\r\n\r\n      - Otherwise, if there is an installed S-PMSI A-D route originated\r\n        by PE2, whose NLRI contains (C-S,C-*), AND if C-G is an SSM\r\n        multicast group address, then (C-S,C-G) matches that route.\r\n\r\n      - Otherwise, if there is an installed S-PMSI A-D route originated\r\n        by PE2, whose NLRI contains (C-*,C-G), AND if C-G is an ASM\r\n        multicast group address, then (C-S,C-G) matches that route.\r\n\r\n      - Otherwise, if there is an installed S-PMSI A-D route originated\r\n        by PE2, whose NLRI contains (C-*,C-*), then (C-S,C-G) matches\r\n        that route.", "correct_text": "      - If there is an installed S-PMSI A-D route originated by PE2,\r\n        whose NLRI contains (C-S,C-G), then (C-S,C-G) matches that\r\n        route.\r\n\r\n      - If there is an installed S-PMSI A-D route originated\r\n        by PE2, whose NLRI contains (C-S,C-*), AND if C-G is an SSM\r\n        multicast group address, then (C-S,C-G) matches that route too.\r\n\r\n      - If there is an installed S-PMSI A-D route originated\r\n        by PE2, whose NLRI contains (C-*,C-G), AND if C-G is an ASM\r\n        multicast group address, then (C-S,C-G) matches that route too.\r\n\r\n      - If there is an installed S-PMSI A-D route originated\r\n        by PE2, whose NLRI contains (C-*,C-*), then (C-S,C-G) matches\r\n        that route too.", "notes": "The 'Match for data reception' is an behavior on the MVPN receiver-site PE. If an SPMSI A-D route is matched for data reception, it means that the receiver-site PE will respond to this SPMSI A-D route, either send a responded Leaf A-D route in case there is an explicit-tracking flag (LIR or LIRpF), or join the PMSI tunnel in the SPMSI A-D route in case the tunnel type is mLDP/PIM etc. This usage of 'match for data reception' is not explicitly explained in this RFC but it is used in <draft-ietf-bess-mvpn-expl-track-13>. \r\nThere is clear inclusive-selective relationship between S-PMSI A-D (*,*) and S-PMSI A-D(S,G).\r\nThinking the S-PMSI A-D (*,*) as an Inclusive one, the receiver site PE with a (C-S,C-G) state should keep its join state on both the S-PMSI A-D (*,*) and S-PMSI A-D(S,G), and setup the 'reception state' on both the (*,*) PMSI-tunnel and (S,G) PMSI-tunnel. So the 'match for reception' should be one or more SPMSI A-D routes.  The 'if/othersize/othersize' sentences make the wrong meaning.\r\n\r\n\r\n=== AD Note ====\r\nThis section of rfc6625 has been Updated by rfc7582, rfc7900, and rfc8534 for various scenarios.  Any general change to the overall procedure must take those updates into consideration.  I am then marking this report as \"Held for Document Update\" so these modifications can be taken into account. ", "submit_date": "2019-01-16", "submitter_name": "Jingrong Xie", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-06-22 20:09:48"}, {"errata_id": "5645", "doc-id": "RFC8448", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "   Ephemeral private keys are shown as they are generated in the traces.", "correct_text": "   Ephemeral private keys are shown as they are generated in the traces.\r\nNote that X25519 private keys are trimmed in accordance to [RFC 7748]\r\nSection 5, before use. This is done by clearing bit 0 to 2 of the first\r\nbyte and bit 7 of the last byte. And then set bit 6 of the last byte.", "notes": "On page 3,5,16,20,29,43,44,55,57, there are ten X25519 ephemeral private\r\nkeys listed. None of these private key value, when used directly in X25519\r\ncalculation, will yield the associated public key listed. These private key\r\nvalues are not the actual values used. Instead up to 5 bits are modified as\r\nrecommended by RFC 7748 section 5. Some implementations may choose NOT to\r\ndo such trimming, and it does not affect the connectivity, as the private\r\nkeys are never sent over the wire and does not affect network behavior.\r\n\r\nNot clarifying how the X25519 private keys were modified before using could\r\ncause serious confusion. I personally struggled for a day before figuring\r\nout this little obscure detail.", "submit_date": "2019-02-28", "submitter_name": "Anthony Mai", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-18 15:17:47"}, {"errata_id": "5646", "doc-id": "RFC6152", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "Naturally, the usual SMTP data-stuffing algorithm applies, so that a\r\ncontent that contains the five-character sequence of\r\n<CR> <LF> <DOT> <CR> <LF>\r\nor a content that begins with the three-character sequence of\r\n<DOT> <CR> <LF>\r\ndoes not prematurely terminate the transfer of the content.", "correct_text": "Naturally, the usual SMTP data-stuffing algorithm applies, so that a\r\ncontent that contains the five-character sequence of\r\n<CR> <LF> <DOT> <CR> <LF>\r\nor a content that begins with the three-character sequence of\r\n<DOT> <CR> <LF>\r\nwould prematurely terminate the transfer of the content.", "notes": "RFC 5321, section 4.5.2: \r\nWithout some provision for data transparency, the character sequence \"<CRLF>.<CRLF>\" ends the mail text and cannot be sent by the user.\n --VERIFIER NOTES-- \n   The text is referring to original, unprocessed text, and is saying that the example strings will \"naturally\" have \"the usual SMTP data stuffing algorithm\" applied to them.  As a result, the existence of these strings in the original data will not terminate the transfer because they will be data-stuffed and will no longer appear as termination strings.\r\n\r\nThe text is correct as written, and the suggested rewrite incorrectly negates the meaning.", "submit_date": "2019-03-04", "submitter_name": "HE Zhixiang", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-01 17:48:10"}, {"errata_id": "7517", "doc-id": "RFC1952", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.1.1", "orig_text": "      0x41 ('A')  0x70 ('P')  Apollo file type information\r\n", "correct_text": "      0x41 ('A')  0x70 ('p')  Apollo file type information\r\n", "notes": "ASCII \\x70 is lowercase p, not uppercase.", "submit_date": "2023-05-16", "submitter_name": "Mingye Wang", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-10-11 00:05:49"}, {"errata_id": "5606", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "          {\r\n            \"name\" : \"type\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The attribute's data type.\r\n              Valid values include 'string', 'complex', 'boolean',\r\n              'decimal', 'integer', 'dateTime', 'reference'.\",\r\n            \"required\" : true,\r\n            \"canonicalValues\" : [\r\n              \"string\",\r\n              \"complex\",\r\n              \"boolean\",\r\n              \"decimal\",\r\n              \"integer\",\r\n              \"dateTime\",\r\n              \"reference\"\r\n            ],\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "correct_text": "          {\r\n            \"name\" : \"type\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The attribute's data type.\r\n              Valid values include 'string', 'complex', 'boolean',\r\n              'decimal', 'integer', 'dateTime', 'reference', 'binary'.\",\r\n            \"required\" : true,\r\n            \"canonicalValues\" : [\r\n              \"string\",\r\n              \"complex\",\r\n              \"boolean\",\r\n              \"decimal\",\r\n              \"integer\",\r\n              \"dateTime\",\r\n              \"reference\",\r\n              \"binary\"\r\n            ],\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "notes": "On page 83, the \"canonicalValues\" definition of \"type\" attribute missing \"binary\".", "submit_date": "2019-01-16", "submitter_name": "Takashi Kato", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:38:14"}, {"errata_id": "5607", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "              {\r\n                \"name\" : \"referenceTypes\",\r\n                \"type\" : \"string\",\r\n                \"multiValued\" : false,\r\n                \"description\" : \"Used only with an attribute of type\r\n                  'reference'.  Specifies a SCIM resourceType that a\r\n                  reference attribute MAY refer to, e.g., 'User'.\",\r\n                \"required\" : false,\r\n                \"caseExact\" : true,\r\n                \"mutability\" : \"readOnly\",\r\n                \"returned\" : \"default\",\r\n                \"uniqueness\" : \"none\"\r\n              }", "correct_text": "              {\r\n                \"name\" : \"referenceTypes\",\r\n                \"type\" : \"string\",\r\n                \"multiValued\" : true,\r\n                \"description\" : \"Used only with an attribute of type\r\n                  'reference'.  Specifies a SCIM resourceType that a\r\n                  reference attribute MAY refer to, e.g., 'User'.\",\r\n                \"required\" : false,\r\n                \"caseExact\" : true,\r\n                \"mutability\" : \"readOnly\",\r\n                \"returned\" : \"default\",\r\n                \"uniqueness\" : \"none\"\r\n              }", "notes": "On page 90, the multiValued of resourceTypes should be true.", "submit_date": "2019-01-16", "submitter_name": "Takashi Kato", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:38:52"}, {"errata_id": "5608", "doc-id": "RFC3439", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.", "orig_text": "Further, it is widely assumed that IP is simpler that circuit switching,\r\nand hence should be more economical to deploy and manage [MCK2002].", "correct_text": "Further, it is widely assumed that PS is simpler than circuit switching,\r\nand hence should be more economical to deploy and manage [MCK2002].", "notes": "Replaced second \"that\" with \"than\" and replaced \"IP\" with \"PS\" seeing as packet and circuit switching are being compared", "submit_date": "2019-01-19", "submitter_name": "Sascha Hanse", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5609", "doc-id": "RFC6482", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Table of Contents", "orig_text": "   5. Security Considerations .........................................5\r\n   6. Acknowledgments .................................................6\r\n   7. References ......................................................6\r\n      7.1. Normative References .......................................6\r\n      7.2. Informative References .....................................6", "correct_text": "   5. Security Considerations .........................................5\r\n   6. IANA Considerations .............................................6\r\n   7. Acknowledgments .................................................6\r\n   8. References ......................................................6\r\n      8.1. Normative References .......................................6\r\n      8.2. Informative References .....................................6", "notes": "The Table of Contents omits the \"IANA Considerations\" section, which should be section 6, which consequently causes the numbered sections to be follow be labeled incorrectly.", "submit_date": "2019-01-20", "submitter_name": "John Kristoff", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5610", "doc-id": "RFC8226", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "    JWTClaimPermittedValuesList ::= SEQUENCE SIZE (1..MAX) Of\r\n                                      JWTClaimPermittedValues", "correct_text": "    JWTClaimPermittedValuesList ::= SEQUENCE SIZE (1..MAX) OF\r\n                                      JWTClaimPermittedValues", "notes": "The ASN.1 Compiler require \"OF\" to be all capital letters.", "submit_date": "2019-01-21", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 20:23:47"}, {"errata_id": "7180", "doc-id": "RFC4364", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.4", "orig_text": "   Note that this VPN architecture does not require the capability to\r\n   distribute unlabeled VPN-IPv4 addresses.", "correct_text": "   Note that this VPN architecture does not require the capability to\r\n   distribute unlabeled IPv4 addresses.", "notes": "From my understanding, VPN-IPv4 addresses are necessarily labeled, but IPv4 adresses are not indeed. Section 10 seems to confirm the error by using the correct term: \"distribute unlabeled IPv4 addresses to each other.\"\r\n\r\nAdditional note from verifier: this was reported as technical, but I have changed it to editorial following the guidelines in https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/ (\u201cTechnical errata are expected to be things that would likely cause significant misunderstandings of the technical specification and might result in faulty implementations if they are not corrected. Editorial errata are, as the name implies, editorial - for example, typos, missing commas, etc. Errors in examples will generally be editorial\u2026\u201d) Since the text in question is a \u201cnote that\u201d I take the view that it\u2019s similar in character to an example. Furthermore, I don\u2019t think it\u2019s likely the error would result in faulty implementations. Finally, the uncorrected text, while kind of silly, isn\u2019t strictly speaking untrue, so I have chosen \u201chold for document update\u201c rather than \u201cverified\u201d.", "submit_date": "2022-10-24", "submitter_name": "Ang\u00e9ly", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 14:43:04"}, {"errata_id": "7395", "doc-id": "RFC8824", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1", "orig_text": "SCHC compression reduces the header, sending only the Type, a mapped\r\ncode, and the least significant bits of the Message ID (9 bits in the\r\nexample above).", "correct_text": "SCHC compression reduces the header, sending only a mapped Type (and\r\nonly for uplink messages), a mapped code, and the least significant\r\nbits of the Message ID (9 bits in the example above).", "notes": "As per the discussed rule from Table 3, the Type is also omitted if it is CON for downlink messages.\n --VERIFIER NOTES-- \n The author/WG wrote:\r\n\"In this case we are making a difference between the index of the\r\nmatching-list sent in Type and the mapped index used for Code that belongs\r\nto the RFC7252 section 12.1 IANA values.\"\r\nin https://mailarchive.ietf.org/arch/msg/lp-wan/s7EO2F4JUPHUyFLc3Qr-5RnwNZE/\r\n", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:24:15"}, {"errata_id": "5611", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "16.1 (4)", "orig_text": "In this case, the current routing table entry\r\n            should be overwritten if and only if the newly found path is\r\n            just as short and the current routing table entry's Link\r\n            State Origin has a smaller Link State ID than the newly\r\n            added vertex' LSA.", "correct_text": "In this case, if the newly found path is just as short, \r\nthen both the paths should be added to the routing table. ", "notes": "If the newly found path is just as short then both the paths should be considered for ECMP. Why should the smaller Link State ID path overwrite the current one even if the paths are equi distant?\n --VERIFIER NOTES-- \nSee WG discussion here: https://mailarchive.ietf.org/arch/msg/lsr/ACVzdktoiFbIcMyQck1RCGn50es \r\n\r\nFrom Acee Lindem: \"This is the case where the transit network vertex corresponding to a network-LSA is newly added to the current intra-area graph and an intra-area route corresponding to the SPF in progress already exists. This implies that there was another network-LSA. So, either the network corresponding to the subnet is partitioned or there is a network configuration error with the same subnet configured for multiple multi-access networks. In either case, I don't really see the benefit of an ECMP route. In fact, it could make trouble-shooting the problem more difficult. \"\r\n\r\nNote also that the proposed text would result in a modification of the process to calculate the routing table, not just a correction.  A change like that should be discussed in the WG/mailing list instead.\r\n", "submit_date": "2019-01-22", "submitter_name": "Anil Chaitanya Mandru", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5613", "doc-id": "RFC2", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "[unknown title]\r\n[page 1 missing]", "correct_text": "Title: Host Software\r\nAuthor: Bill Duvall\r\nInstallation: Standford Research Institute\r\nDate: 9 April 1969\r\nNetwork Working Group Request for Comment: 2", "notes": "On https://tools.ietf.org/html/rfc2\r\nit says:\r\n \r\n[unknown title]\r\n[page 1 missing]\r\n\r\nHowever, page 1 has resurfaced here: https://write.as/365-rfcs/update-scans-of-early-rfcs\r\nin particular: https://tinysubversions.com/pics/rfc-update-01-03.png\r\n\r\nMore scans area available here: https://www.computerhistory.org/collections/catalog/102661172\r\n\r\nPlease adjust the online version(s) accordingly.", "submit_date": "2019-01-27", "submitter_name": "Emil Fihman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5615", "doc-id": "RFC8466", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.10.1", "orig_text": "   The svc-bandwidth parameter must include a \"cos-id\" parameter if the\r\n   \"type\" is set to \"bw-per-cos\".  The cos-id can be assigned based on\r\n   either (1) the IEEE 802.1p value [IEEE-802-1D] in the C-tag or\r\n   (2) the Differentiated Services Code Point (DSCP) in the Ethernet\r\n   frame header.  Service frames are metered against the bandwidth\r\n   profile based on the cos-id.", "correct_text": "   The svc-bandwidth parameter must include a \"cos-id\" parameter if the\r\n   \"type\" is set to \"bw-per-cos\".  The cos-id can be assigned based on\r\n   either (1) the IEEE 802.1p value [IEEE-802-1D] in the C-tag or\r\n   (2) the Differentiated Services Code Point (DSCP) in the IP\r\n   header.  Service frames are metered against the bandwidth\r\n   profile based on the cos-id.", "notes": "The DSCP field is part of the IP packet header, not the Ethernet frame \u0440\u0443\u0444\u0432\u0443\u043a.", "submit_date": "2019-01-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5616", "doc-id": "RFC7578", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.5", "orig_text": "For example, a form with a text field in\r\nwhich a user typed \"Joe owes <eu>100\", where <eu> is the Euro symbol,\r\nmight have form data returned as:\r\n    --AaB03x\r\n    content-disposition: form-data; name=\"field1\"\r\n    content-type: text/plain;charset=UTF-8\r\n    content-transfer-encoding: quoted-printable\r\n\r\n    Joe owes =E2=82=AC100.\r\n    --AaB03x", "correct_text": "For example, a form with a text field in\r\nwhich a user typed \"Joe owes <eu>100\", where <eu> is the Euro symbol,\r\nmight have form data returned as:\r\n    --AaB03x\r\n    content-disposition: form-data; name=\"field1\"\r\n    content-type: text/plain;charset=UTF-8\r\n    content-transfer-encoding: quoted-printable\r\n\r\n    Joe owes <eu>100.\r\n    --AaB03x", "notes": "Section 4.7 says that \"Senders SHOULD NOT generate any parts with a Content-Transfer-Encoding header field.\"", "submit_date": "2019-01-30", "submitter_name": "Philip McGrath", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5617", "doc-id": "RFC7950", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "14", "orig_text": "path-arg            = absolute-path / relative-path", "correct_text": "path-arg            = deref-expr / path-str\r\n\r\nderef-expr          = deref-function-invocation *WSP \"/\" *WSP \r\n                      relative-path\r\n\r\npath-str            = absolute-path / relative-path\r\n\r\nderef-function-invocation = deref-keyword *WSP\r\n                            \"(\" *WSP path-str *WSP \")\"\r\n\r\nderef-keyword       = %s\"deref\"", "notes": "This is to allow path statement to contain also \"deref\" function invocation which is supported by pyang and Cisco compiler but for now is not supported by i.e. yanglint validator because of above statement which does not allow for it.", "submit_date": "2019-01-30", "submitter_name": "Marek Michalak, Pawel Koch", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-10-15 18:44:09"}, {"errata_id": "5618", "doc-id": "RFC7991", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.5.6", "orig_text": "It is an error to have both a \"src\" attribute and content in the\r\n<artwork> element.\r\n", "correct_text": "", "notes": "This sentence needs to be removed because the second paragraph in Section 2.5 says that the \"textual content acts as a fallback\" for the \"src\" attribute.", "submit_date": "2019-01-31", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewnd (IAB/RSAB chair)", "update_date": "2024-03-14 11:59:14"}, {"errata_id": "5619", "doc-id": "RFC3261", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "The address \r\nof the atlanta.com SIP server could have been configured in Alice's\r\nsoftphone, or it could have been discovered by DHCP, for example.", "correct_text": "The address \r\nof the atlanta.com SIP server could have been configured in Alice's \r\nsoftphone, or it could have been discovered by DNS, for example.", "notes": "DHCP Server gives away the DNS-Server to use (or sets it with DHCP option) but usually does no address translation itself. It would also be possible to omit the whole sentence.\n --VERIFIER NOTES-- \n   DHCP was the intent of the example.", "submit_date": "2019-01-31", "submitter_name": "Isabella Damb\u00f6ck", "verifier_id": "", "verifier_name": "Ben Campbell", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5625", "doc-id": "RFC6287", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "// put selected bytes into result int\r\nint offset = hash[hash.length - 1] & 0xf;\r\n\r\nint binary =\r\n  ((hash[offset] & 0x7f) << 24) |\r\n  ((hash[offset + 1] & 0xff) << 16) |\r\n  ((hash[offset + 2] & 0xff) << 8) |\r\n  (hash[offset + 3] & 0xff);\r\n\r\nint otp = binary % DIGITS_POWER[codeDigits];\r\n\r\nresult = Integer.toString(otp);\r\nwhile (result.length() < codeDigits) {\r\n  result = \"0\" + result;\r\n}\r\nreturn result;\r\n", "correct_text": "if (codeDigits > 0) {\r\n  // put selected bytes into result int\r\n  int offset = hash[hash.length - 1] & 0xf;\r\n\r\n  int binary =\r\n      ((hash[offset] & 0x7f) << 24) |\r\n      ((hash[offset + 1] & 0xff) << 16) |\r\n      ((hash[offset + 2] & 0xff) << 8) |\r\n      (hash[offset + 3] & 0xff);\r\n\r\n  int otp = binary % DIGITS_POWER[codeDigits];\r\n\r\n  result = Integer.toString(otp);\r\n  while (result.length() < codeDigits) {\r\n      result = \"0\" + result;\r\n  }\r\n  return result;\r\n} else {\r\n  return asHex(hash);\r\n}\r\n", "notes": "The code does not honor what the RFC says in section 5.2:\r\n\r\n   3.  t=0 means that no truncation is performed and the full HMAC value\r\n       is used for authentication purposes\r\n\r\nand still applies dynamic truncation to suites requesting \"0\" digits.\r\nAs a result, the computation performs a \"modulo 1\" operation causing\r\nthe code to always return 0 for such suites.\r\n\r\nThe proposed patch explicitly disables dynamic truncation for such suites and returns the full HMAC\r\nencoded as a Base16 string. The \"asHex\" function is the same defined in Appendix B.", "submit_date": "2019-02-07", "submitter_name": "Emanuele Giacomelli", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5626", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.", "orig_text": "Several other validity checks that should be performed in addition to\r\ninsuring that the file is syntactically correct:\r\n\r\n   1. All RRs in the file should have the same class.\r\n\r\n   2. Exactly one SOA RR should be present at the top of the zone.\r\n\r\n   3. If delegations are present and glue information is required,\r\n      it should be present.\r\n\r\n   4. Information present outside of the authoritative nodes in the\r\n      zone should be glue information, rather than the result of an\r\n      origin or similar error.", "correct_text": "Several other validity checks that should be performed in addition to\r\ninsuring that the file is syntactically correct:\r\n\r\n   1. All RRs in the file should have the same class.\r\n\r\n   2. Exactly one SOA RR should be present at the top of the zone.\r\n\r\n   3. If delegations are present and glue information is required,\r\n      it should be present.\r\n\r\n   4. Information present outside of the authoritative nodes in the\r\n      zone should be glue information, rather than the result of an\r\n      origin or similar error.\r\n\r\n   5. At least one NS RR must be present at the top of the zone.", "notes": "[ WK (OpsAD): This is correct, and should be considered / included if this RFC is updated. ] \r\n\r\nRFC 1034 Section 4.2.1 vaguely specifies that NS RRs are expected to be found at zone apex but it is missing in the original algorithm above. This erratum adds explicit requirement for NS RR at zone apex.\r\n\r\nEven more importantly this expectation was built into subsequent RFCs, e.g. RFC 2181 which would break if NS was present only in the parent zone but not in the child zone.\r\n\r\nReferences to dnsop mailing list:\r\n- https://mailarchive.ietf.org/arch/msg/dnsop/ipwko314FenUxrdzMl5vcick9wQ\r\n- https://mailarchive.ietf.org/arch/msg/dnsop/JAS6TREsOh-b2J4rEAND6cds0Og", "submit_date": "2019-02-07", "submitter_name": "Petr \u0160pa\u010dek", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5627", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.11", "orig_text": "In TLS versions prior to TLS 1.3, the Server Name Identification\r\n(SNI) value ", "correct_text": "In TLS versions prior to TLS 1.3, the Server Name Indication\r\n(SNI) value ", "notes": "RFC 6066 and many other places indicate that the correct expansion for \"SNI\" is \"Server Name Indication\", not \"Server Name Identification\".", "submit_date": "2019-02-08", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5628", "doc-id": "RFC4758", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.5", "orig_text": "K_TOKEN = CT-KIP-PRF (R_C, \"Key generation\" || k || R_S, dsLen)", "correct_text": "K_TOKEN = CT-KIP-PRF (R_C, k || \"Key generation\" || R_S, dsLen)", "notes": "Here the RFC is simply incorrect w.r.t. the reference implementation (RSA's proprietary software).\r\n\r\nThe corrected text matches the reference implementation.\r\n\r\nThere are several more errata along these lines.  With (all) the corrections, it becomes possible to implement 3rd party RFC4758 clients and servers that interact correctly with RSA clients and servers from the RFC text.", "submit_date": "2019-02-09", "submitter_name": "Conrad Meyer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5629", "doc-id": "RFC4758", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.8.6", "orig_text": "MAC = CT-KIP-PRF (K_AUTH, \"MAC 2 computation\" || R_C, dsLen)", "correct_text": "MAC = CT-KIP-PRF (K_AUTH, \"MAC 2 Computation\" || R_C, dsLen)", "notes": "Note the capitalization of the \"C\" in \"Computation.\"\r\n\r\nHere the RFC is simply incorrect w.r.t. the reference implementation (RSA's proprietary software); the corrected text matches the reference implementation.", "submit_date": "2019-02-09", "submitter_name": "Conrad Meyer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5630", "doc-id": "RFC4758", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "D.2.2", "orig_text": "F (k, s, i) = OMAC1-AES (k, INT (i) || s)", "correct_text": "F (k, s, i) = OMAC1-AES (k, s || INT (i))", "notes": "The corrected text matches the (only) reference implementation; the RFC text does not.", "submit_date": "2019-02-09", "submitter_name": "Conrad Meyer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5631", "doc-id": "RFC4758", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "D.2.1", "orig_text": "For tokens supporting this realization of CT-KIP-PRF, the following\r\nURI may be used to identify this algorithm in CT-KIP:\r\n\r\nhttp://www.rsasecurity.com/rsalabs/otps/schemas/2005/12/\r\nct-kip#ct-kip-prf-aes\r\n\r\n", "correct_text": "For tokens supporting this realization of CT-KIP-PRF, either of\r\nthe following URIs may be used to identify this algorithm in CT-KIP:\r\n\r\nhttp://www.rsasecurity.com/rsalabs/otps/schemas/2005/12/\r\nct-kip#ct-kip-prf-aes\r\n\r\nhttp://www.rsasecurity.com/rsalabs/otps/schemas/2005/11/\r\nct-kip#ct-kip-prf-aes", "notes": "It seems some versions of the reference implementation use the 2005/11 date and some the 2005/12 one.  Both refer to the same PRF construction.", "submit_date": "2019-02-09", "submitter_name": "Conrad Meyer", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5632", "doc-id": "RFC2661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "It is sent by either the LAC or the LNS to being the tunnel\r\nestablishment process.", "correct_text": "It is sent by either the LAC or the LNS to begin the tunnel\r\nestablishment process.", "notes": "", "submit_date": "2019-02-11", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6291", "doc-id": "RFC4568", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.1.4", "orig_text": "If the offerer includes an IP address and/or port that differs from\r\n   that used previously for a media stream (or FEC stream), the offerer\r\n   MUST include a new master key with the offer (and in so doing, it\r\n   will be creating a new crypto context where the ROC is set to zero).      \r\n   Similarly, if the answerer includes an IP address and/or port that\r\n   differs from that used previously for a media stream (or FEC stream),\r\n   the answerer MUST include a new master key with the answer (and hence\r\n   create a new crypto context with the ROC set to zero).  The reason\r\n   for this is that when the answerer receives an offer or the offerer\r\n   receives an answer with an updated IP address and/or port, it is not\r\n   possible to determine if the other side has access to the old crypto\r\n   context parameters (and in particular the ROC).  For example, if one\r\n   side is a decomposed media gateway, or if a SIP back-to-back user\r\n   agent is involved, it is possible that the media endpoint changed and\r\n   no longer has access to the old crypto context.  By always requiring\r\n   a new master key in this case, the answerer/offerer will know that\r\n   the ROC is zero for this offer/answer, and any key lifetime\r\n   constraints will trivially be satisfied too.  Another consideration\r\n   here applies to media relays; if the relay changes the media endpoint\r\n   on one side transparently to the other side, the relay cannot operate\r\n   as a simple packet reflector but will have to actively engage in SRTP\r\n   packet processing and transformation (i.e., decryption and re-\r\n   encryption, etc.).\r\nFinally, note that if the new offer is rejected, the old crypto\r\n   parameters remain in place.\r\n", "correct_text": "", "notes": "(and in so doing, it\r\n   will be creating a new crypto context where the ROC is set to zero).      \r\n    -Which crypto context for which direction?  Logically this would be the crypto context for media towards the new IP address ?\r\n\r\n(and hence\r\n   create a new crypto context with the ROC set to zero). \r\n   -What if the offerer stays the same and only the answerer changes the IP address?\r\nNew crypto context in direction towards new IP address?  \r\n\r\nBy always requiring\r\n   a new master key in this case, the answerer/offerer will know that\r\n   the ROC is zero for this offer/answer,\r\n   -Is this resetting crypto context for both directions of media flow?\r\n\r\nIs this section based on having offer and answerer both change the IP address.  \r\nWhat if the offerer did not change the IP address but the answerer does change it.\r\nWhat is the expected behavior for media/crypto context/ROC for both sides?\r\n\r\nWhat is expected for IP address of 0.0.0.0 for hold, should this reset crypto context as well?\r\n\r\nHow should all of this be handled for the case of switching to MoH server and then back to original call?\r\nSBC ------------- CUCM ------------ EXP (signaling)\r\nSBC --------------------------------- EXP (media stream 1)\r\nSBC --------------------------------- MOH (media stream 2)\r\n\r\nSBC ------------- CUCM ------------ EXP \r\n<--------------------SDP with IP1ofEXP part of early offer from SBC\r\nCrypto context for media towards EXP \r\n<--------------------SDP with IP2ofMoH part of delayed offer from CUCM and additional early offer CUCM.  CUCM initiates MoH signaling towards SBC.\r\nCrypto context for media towards MoH (only SBC and MoH know about this)\r\n<--------------------SDP with IP1ofEXP part of delayed offer from CUCM\r\nCrypto context for media towards EXP.  Should this be the same as the original if SSRC did not change for media from SBC towards Expressway?", "submit_date": "2020-09-16", "submitter_name": "David Nguyen", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5633", "doc-id": "RFC8040", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "B.2.2.", "orig_text": "      PATCH /restconf/data/example-jukebox:jukebox/\\\r\n          library/artist=Foo%20Fighters/album=Wasting%20Light/\\\r\n          genre HTTP/1.1\r\n      Host: example.com\r\n      If-Unmodified-Since: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Content-Type: application/yang-data+json\r\n\r\n      { \"example-jukebox:genre\" : \"example-jukebox:alternative\" }\r\n\r\n   In this example, the datastore resource has changed since the time\r\n   specified in the \"If-Unmodified-Since\" header.  The server might\r\n   respond as follows:\r\n\r\n      HTTP/1.1 412 Precondition Failed\r\n      Date: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Server: example-server\r\n      Last-Modified: Thu, 26 Jan 2017 19:41:00 GMT\r\n      ETag: \"b34aed893a4c\"\r\n", "correct_text": "      PATCH /restconf/data/example-jukebox:jukebox/\\\r\n          library/artist=Foo%20Fighters/album=Wasting%20Light/\\\r\n          genre HTTP/1.1\r\n      Host: example.com\r\n      If-Unmodified-Since: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Content-Type: application/yang-data+json\r\n\r\n      { \"example-jukebox:genre\" : \"example-jukebox:alternative\" }\r\n\r\n   In this example, the datastore resource has changed since the time\r\n   specified in the \"If-Unmodified-Since\" header.  The server might\r\n   respond as follows:\r\n\r\n      HTTP/1.1 412 Precondition Failed\r\n      Date: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Server: example-server\r\n      Last-Modified: Thu, 26 Jan 2017 20:57:10 GMT\r\n      ETag: \"b34aed893a4c\"\r\n", "notes": "The date in the Last-Modified field of the response HTTP header should be greater than the date in the If-Unmodified-Since field of the request HTTP header.", "submit_date": "2019-02-11", "submitter_name": "Qin WU", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-22 10:07:02"}, {"errata_id": "5635", "doc-id": "RFC2516", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "If there is data, and the first octet of the data is nonzero, then\r\nit MUST be a printable UTF-8 string which explains the nature of\r\nthe error.  This string MAY NOT be NULL terminated.", "correct_text": "If there is data, and the first octet of the data is nonzero, then\r\nit MUST be a printable UTF-8 string which explains the nature of\r\nthe error.  This string MUST NOT be NULL terminated.", "notes": "Keyword \"MAY NOT\" should be \"MUST NOT\" to comply with RFC 2119.\r\n\r\n-- Verifier note --\r\nThe use of \"MAY NOT\" is  not covered by RFC 2219 but the text is nevertheless clear. See point 2 of https://www.ietf.org/about/groups/iesg/statements/processing-rfc-errata/", "submit_date": "2019-02-11", "submitter_name": "Chris Fletcher", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-28 13:22:58"}, {"errata_id": "5639", "doc-id": "RFC7567", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1 and 7.2", "orig_text": "1.1\r\n\r\nThe original fix for Internet meltdown was provided by Van Jacobsen.\r\nBeginning in 1986, Jacobsen developed the congestion avoidance\r\n\r\n7.2\r\n\r\n[Flo92]    Floyd, S. and V. Jacobsen, \"On Traffic Phase Effects in\r\n           Packet-Switched Gateways\", 1992,\r\n           <http://www.icir.org/floyd/papers/phase.pdf>.\r\n\r\n[Flo94]    Floyd, S. and V. Jacobsen, \"The Synchronization of\r\n           Periodic Routing Messages\", 1994,\r\n           <http://ee.lbl.gov/papers/sync_94.pdf>.\r\n", "correct_text": "1.1\r\n\r\nThe original fix for Internet meltdown was provided by Van Jacobson.\r\nBeginning in 1986, Jacobson developed the congestion avoidance\r\n\r\n7.2\r\n\r\n[Flo92]    Floyd, S. and V. Jacobson, \"On Traffic Phase Effects in\r\n           Packet-Switched Gateways\", 1992,\r\n            <http://www.icir.org/floyd/papers/phase.pdf>.\r\n\r\n[Flo94]    Floyd, S. and V. Jacobson, \"The Synchronization of\r\n           Periodic Routing Messages\", 1994,\r\n           <http://ee.lbl.gov/papers/sync_94.pdf>.\r\n", "notes": "Typographical error / misspelled name of Mr. Van Jacobson", "submit_date": "2019-02-18", "submitter_name": "Roland Bless", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5638", "doc-id": "RFC8360", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.4.4", "orig_text": "   7.  Compute the VRS-IP and VRS-AS set values as indicated below:\r\n\r\n       *  If the IP Address Delegation extension is present in\r\n          certificate x and x=1, set the VRS-IP to the resources found\r\n          in this extension.\r\n\r\n       *  If the IP Address Delegation extension (...)\r\n\r\n       *  If the IP Address Delegation extension (...)\r\n\r\n       *  If the IP Address Delegation extension is present in\r\n          certificate x and x=1, set the VRS-IP to the resources found\r\n          in this extension.\r\n\r\n       *  If the AS Identifier Delegation extension (...)\r\n\r\n       *  If the AS Identifier Delegation extension (...)", "correct_text": "   7.  Compute the VRS-IP and VRS-AS set values as indicated below:\r\n\r\n       *  If the IP Address Delegation extension is present in\r\n          certificate x and x=1, set the VRS-IP to the resources found\r\n          in this extension.\r\n\r\n       *  If the IP Address Delegation extension (...)\r\n\r\n       *  If the IP Address Delegation extension (...)\r\n\r\n       *  If the AS Identifier Delegation extension is present in\r\n          certificate x and x=1, set the VRS-AS to the resources found\r\n          in this extension.\r\n\r\n       *  If the AS Identifier Delegation extension (...)\r\n\r\n       *  If the AS Identifier Delegation extension (...)", "notes": "There seems to be a copy-paste error.\r\n\r\nThere are two bullet points explaining the initialization of VRS-IP, and none explaining the initialization of VRS-AS.\r\n\r\nAll the evidence suggests that the two extensions (IP Address Delegation and AS Identifier Delegation) are meant to be handled similarly, so I believe that the last three bullet points are supposed to perfectly mirror the first three.", "submit_date": "2019-02-13", "submitter_name": "Alberto Leiva Popper", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7181", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.4", "orig_text": "   Note: Standards track specifications normally must not depend on\r\n   other standards track specifications which are at a lower maturity\r\n   level or on non standards track specifications other than referenced\r\n   specifications from other standards bodies.  (See Section 7.)\r\n\r\n", "correct_text": "Move to Section 4:\r\n\r\n   Standards track specifications normally must not depend on\r\n   other standards track specifications which are at a lower maturity\r\n   level or on non standards track specifications other than referenced\r\n   specifications from other standards bodies.  (See Section 7.)\r\n\r\n", "notes": "The note in \u00a74.2.4 (Historic) applies to standards track documents in general, and not specifically to Historic documents (which are not in the Standards Track) as it seems by including it in that subsection.\r\n\r\nThe text should be moved, unchanged (except for maybe removing the leading \"Note:\") to be the last paragraph in \u00a74 (before the start of \u00a74.1).", "submit_date": "2022-10-25", "submitter_name": "Alvaro Retana", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-27 21:04:08"}, {"errata_id": "6292", "doc-id": "RFC8785", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.2.2", "orig_text": "see Section 24.3.2.2 of [ECMA-262]", "correct_text": "see Section 24.5.2.2 of [ECMA-262]", "notes": "", "submit_date": "2020-09-20", "submitter_name": "Matt Langston", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-09-22 21:42:14"}, {"errata_id": "5778", "doc-id": "RFC5385", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "http://www.isi.edu/touch/tools/", "correct_text": "https://www.strayalpha.com/tools/", "notes": "Although we cannot use Errata Reports to update referenced URLs, I am leaving this report as \"Held for Document Update\" so that the information remains available for any future revision and also so that it is linked to the RFC and can be found by resourceful readers.\r\n\r\n=====\r\n\r\nThis RFC describes Word templates which were at Joe Touch's ISI webpages. Those webpages are no more. There is a redirect to Joe's personal website at www.strayalpha.com as a hint and the current correct reference for the tools being maintained is presumably\r\nhttps://www.strayalpha.com/tools/ but who knows how long that redirect will exist and how long those personal webpages will be there? An expired credit card could kill the domain and the resource.\r\n\r\nhttps://web.archive.org/web/20171121144145/https://www.isi.edu/touch/tools/\r\nhas a copy of the original page referenced.\r\n\r\nA copy of the template and tools probably needs to be hosted on an IETF-controlled server, with this erratum pointing at that IETF copy as canonical.\r\n\r\n(Also, don' t add periods after urls to preserve grammar -just confuses everyone.)", "submit_date": "2019-07-11", "submitter_name": "Lloyd Wood", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5643", "doc-id": "RFC3031", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Terminology", "orig_text": "<missing>", "correct_text": "label edge router - a router capable of accepting an unlabelled packet,\r\nand through MPLS processing, may MPLS encapsulate the packet by adding\r\n a label stack. ", "notes": "I am doing some MPLS review.\r\n\r\nThe book I'm using said an LER was an (RFC3031) MPLS edge node. I believed it was any router that could take unlabelled packets and label them, regardless of where the router was within the MPLS domain. (In other words, an MPLS router was not an LER if it would not MPLS label unlabelled packets and forward them.)\r\n\r\nI decided to check RFC3031 for a definition, and discovered there isn't a definition at all for \"label edge router\", or a match on any text that matches \"label edge\" or \"LER\".\r\n\r\nRFC6178 clarifies LER processing of IPv4 packets, and the general description of processing matches my understanding of what an LER is. \r\n\r\nHowever, it doesn't formally define an \"label edge router\" either, and I think an update to RFC3031 should be where \"label edge router\" is formally defined.\n --VERIFIER NOTES-- \nThis is not an error with RFC3031. It is inappropriate to use an Errata Report to add a new term to an RFC.", "submit_date": "2019-02-25", "submitter_name": "Mark Smith", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5641", "doc-id": "RFC8296", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2.3", "orig_text": "   By requiring the use of a distinct codepoint for \"non-MPLS BIER\", we\r\n   allow for deployment scenarios where non-MPLS BIER can coexist with\r\n   non-BIER MPLS.  The BIFT-id values used by the former will not\r\n   conflict with MPLS label values used by the latter.", "correct_text": "   By requiring the use of a distinct codepoint for \"non-MPLS BIER\", we\r\n   allow for deployment scenarios where non-MPLS BIER can coexist with\r\n   MPLS BIER.  The BIFT-id values used by the former will not\r\n   conflict with MPLS label values used by the latter.", "notes": "There are \"MPLS BIER\" and \"BIER-MPLS\" in this RFC.\r\nThe \"MPLS BIER\" is the right text here for comparison.", "submit_date": "2019-02-21", "submitter_name": "Jingrong Xie", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 19:31:00"}, {"errata_id": "5642", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.6.4", "orig_text": "It takes as an argument a string that is the assigned name. ", "correct_text": "It takes as an argument an unquoted string that is the assigned name.", "notes": "Readers are not beeing made aware that careful reading of section 6.1.3 and the detailed definition of string in section 14 must be consulted.\r\nFor comming versions of this RFC it would be preferable to use a more specialized grammar token for these cases (e.g. unquoted-string).\n --VERIFIER NOTES-- \n Juergen Schoenwaelder wrote:\r\n\r\nSection 6.1 defines the lexical rules and what the scanner returns is\r\nan unquopted string but it accepts unquoted strings and quoted string\r\nand combinations thereof with the \"+\" concatenation operator as input.\r\n\r\nThe errata should be rejected.\r\n\r\n", "submit_date": "2019-02-21", "submitter_name": "Peter Loborg", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-10-05 15:55:42"}, {"errata_id": "5644", "doc-id": "RFC4664", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.3", "orig_text": "   Relative to the VPLS there are three different possibilities for\r\n   allocate functions to a device in such a position in the provider\r\n   network:\r\n", "correct_text": "   Relative to the VPLS there are two different possibilities for\r\n   allocating functions to a device in such a position in the provider\r\n   network:\r\n", "notes": "", "submit_date": "2019-02-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7182", "doc-id": "RFC9316", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   Other definitions relevant to this document, such as intent scope,\r\n   intent network scope, intent abstraction, intent abstraction, and\r\n   intent life cycle are available in Section 5.\r\n", "correct_text": "   Other definitions relevant to this document, such as intent scope,\r\n   intent network scope, intent abstraction, and intent life cycle \r\n   are available in Section 5.\r\n", "notes": "Unnecessary repeat \"intent abstraction\"", "submit_date": "2022-10-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-26 21:46:44"}, {"errata_id": "5647", "doc-id": "RFC1524", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   The two characters \"%s\", if used, will be replaced by the name of a\r\n   file for the actual mail body data.  In the case of the edit adn\r\n   view-command, the body part will be passed to this command as\r\n   standard input unless one or more instances of \"%s\" appear in the\r\n   view-command, in which case %s will be replaced by the name of a file\r\n   containing the body part, a file which may have to be created before\r\n   the view-command program is executed.", "correct_text": "   The two characters \"%s\", if used, will be replaced by the name of a\r\n   file for the actual mail body data.  In the case of the edit and\r\n   view-command, the body part will be passed to this command as\r\n   standard input unless one or more instances of \"%s\" appear in the\r\n   view-command, in which case %s will be replaced by the name of a file\r\n   containing the body part, a file which may have to be created before\r\n   the view-command program is executed.", "notes": "Typo in \"Appendix A; Semantics of executable commands; 3rd paragraph\";\r\nadn vs. and", "submit_date": "2019-03-08", "submitter_name": "Urs Jan\u00dfen", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5648", "doc-id": "RFC7519", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "JSON Web Token (JWT) is a compact claims representation format\r\n   intended for space constrained environments such as HTTP\r\n   Authorization headers and URI query parameters.  JWTs encode claims\r\n   to be transmitted as a JSON [RFC7159] object that is used as the\r\n   payload of a JSON Web Signature (JWS) [JWS] structure or as the\r\n   plaintext of a JSON Web Encryption (JWE) [JWE] structure, enabling\r\n   the claims to be digitally signed or integrity protected with a\r\n   Message Authentication Code (MAC) and/or encrypted.  JWTs are always\r\n   represented using the JWS Compact Serialization or the JWE Compact\r\n   Serialization.\r\n\r\n   The suggested pronunciation of JWT is the same as the English word\r\n   \"jot\".\r\n\r\n", "correct_text": "JSON Web Token (JWT) is a compact claims representation format\r\n   intended for space constrained environments such as HTTP\r\n   Authorization headers and URI query parameters.  JWTs encode claims\r\n   to be transmitted as a JSON [RFC7159] object that is used as the\r\n   payload of a JSON Web Signature (JWS) [JWS] structure or as the\r\n   plaintext of a JSON Web Encryption (JWE) [JWE] structure, enabling\r\n   the claims to be digitally signed or integrity protected with a\r\n   Message Authentication Code (MAC) and/or encrypted.  JWTs are always\r\n   represented using the JWS Compact Serialization or the JWE Compact\r\n   Serialization.\r\n", "notes": "The suggested pronunciation is strange and confusing. It makes it hard to onboard new people verbally and always requires an explanation of the pronunciation. The standard already has a perfectly reasonable initialism of JWT that clearly refers to JSON Web Tokens. It is jarring to suggest a pronunciation that does not map to the letters of the spec, and in my experience often leads to confusion when used.\n --VERIFIER NOTES-- \nThis guidance was produced with the consensus of the WG.  Per https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/, \"Errata are items that were errors at the time the document was published\"", "submit_date": "2019-03-08", "submitter_name": "Andy Delcambre", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-12 02:53:29"}, {"errata_id": "5649", "doc-id": "RFC8311", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.", "orig_text": "see Appendix B.1 of [ECN-L4S].", "correct_text": "see Appendix C.1 of [ECN-L4S].", "notes": "At the end of Section 8. there is another reference to the same information in the same Appendix:\r\n\r\n   See Appendix C.1 of [ECN-L4S] for discussion of alternatives to the\r\n   ECN nonce.\r\n\r\nSo we have to change one to be consistent with the other. Let's use C.1, because that is the current number of the appendix in the relevant draft.", "submit_date": "2019-03-10", "submitter_name": "Bob Briscoe", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5650", "doc-id": "RFC8152", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Section 13.2", "orig_text": "   | crv  | 1     | -1    | int /  | EC identifier - Taken from the    |\r\n   |      |       |       | tstr   | \"COSE Key Common Parameters\"      |\r\n   |      |       |       |        | registry                          |", "correct_text": "   | crv  | 1     | -1    | int /  | EC identifier - Taken from the    |\r\n   |      |       |       | tstr   | \"COSE Elliptic Curves\" registry   |", "notes": "The set of curve identifiers lives in the COSE Elliptic Curves registry and not in the COSE Key Common Parameters registry.", "submit_date": "2019-03-11", "submitter_name": "Jim Schaad", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5651", "doc-id": "RFC7748", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "z_2 = E * (AA + a24 * E)", "correct_text": "z_2 = E * (BB + a24 * E)", "notes": "When BB is used, the point multiplication of the second test vector\r\n\r\nP = (0x13a415c749d54cfc3e3cc06f10e7db312cae38059d95b7f4d3116878120f21e5, 0x1) \r\n\r\nby scalar k\r\n0x4dba18799e16a42cd401eae021641bc1f56a7d959126d25a3c67b4d1d4e96648\r\n\r\ngives the expected point\r\n[k]P = (0x5779ac7a64f7f8e652a19f79685a598bf873b8b45ce4ad7a7d90e87694decb95, 0x1)\r\n\r\nThe implementation based on AA gives the unexpected point \r\n[k]P = (0x3884d5c22af664f822cb3dd728b03c9fac1e1d78c772a74f05546566bd7bed9c, 1)\n --VERIFIER NOTES-- \nIt is proposed to modify the algorithm description for calculation of z_2. However, after checking the original algorithm independently, it was confirmed that the expected numbers are obtained. Therefore, the existing text of RFC does not have any errors here.", "submit_date": "2019-03-11", "submitter_name": "Pierre Laurent", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2020-12-15 07:06:31"}, {"errata_id": "7183", "doc-id": "RFC8206", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "Since SPs are using migration methods that are transparent to customers and therefore do not require coordination with customers, they do not have as much control over the length of the transition period as they might with something completely under their administrative control", "correct_text": "Since SPs are using migration methods that are transparent to customers and therefore do not require coordination with customers, they can transition at any time without delay.", "notes": "I have no corrected text. If the migration methods are transparent, how is it possible that SPs \"do not have as much control over the length of the transition period as they might with something completely under their administrative control\"? As it's transparent they would in fact have complete administrative control.\n --VERIFIER NOTES-- \n   === \r\nThis report is rejected because the current statement is correct in the context in which it is written.  In short, SPs and customers both need to transition their configurations to the new ASN.\r\n\r\nhttps://mailarchive.ietf.org/arch/msg/sidr/6OYVQlXdJcllkB-motxDi7uuqhg/", "submit_date": "2022-10-26", "submitter_name": "Iljitsch van Beijnum", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-10-27 10:52:38"}, {"errata_id": "7185", "doc-id": "RFC8794", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.1.16", "orig_text": "       <xs:attribute name=\"maxOccurs\" default=\"1\">\r\n         <xs:simpleType>\r\n           <xs:restriction base=\"xs:integer\">\r\n             <xs:minInclusive value=\"0\"/>\r\n           </xs:restriction>\r\n         </xs:simpleType>\r\n       </xs:attribute>\r\n", "correct_text": "       <xs:attribute name=\"maxOccurs\" default=\"unbounded\">\r\n         <xs:simpleType>\r\n           <xs:union>\r\n             <xs:simpleType>\r\n               <xs:restriction base=\"xs:integer\">\r\n                 <xs:minInclusive value=\"0\"/>\r\n               </xs:restriction>\r\n             </xs:simpleType>\r\n             <xs:simpleType>\r\n               <xs:restriction base=\"xs:string\">\r\n                 <xs:enumeration value=\"unbounded\"/>\r\n               </xs:restriction>\r\n             </xs:simpleType>\r\n           </xs:union>\r\n         </xs:simpleType>\r\n       </xs:attribute>\r\n", "notes": "maxOccurs doesn't have a defined default value and has no upper bound.\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/issues/395", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7186", "doc-id": "RFC8794", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "10.2.", "orig_text": "   The version of the EBML Body is found in EBMLDocTypeVersion.  A\r\n   parser for the particular DocType format can read the EBML Document\r\n   if it can read either the EBMLDocTypeVersion version of that format\r\n   or a version equal or higher than the one found in\r\n   EBMLDocTypeReadVersion.\r\n", "correct_text": "   The version of the EBML Body is found in DocTypeVersion.  A parser\r\n   for the particular DocType format can read the EBML Document if it\r\n   can read either the DocTypeVersion version of that format or a\r\n   version equal or higher than the one found in DocTypeReadVersion.\r\n", "notes": "Use DocTypeVersion in the text rather than EBMLDocTypeVersion for more consistency.\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/pull/405", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5654", "doc-id": "RFC6125", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.4", "orig_text": "   A more recent approach, formally specified in [TLS-EXT], is for the\r\n   client to use the TLS \"Server Name Indication\" (SNI) extension when\r\n   sending the client_hello message, stipulating the DNS domain name it\r\n   desires or expects of the service.  The service can then return the\r\n   appropriate certificate in its Certificate message, and that\r\n   certificate can represent a single DNS domain name.", "correct_text": "   A more recent approach, formally specified in [TLS-EXT], is for the\r\n   client to use the TLS \"Server Name Indication\" (SNI) extension when\r\n   sending the client_hello message, stipulating the DNS domain name it\r\n   desires or expects of the service.  The service can then return the\r\n   appropriate certificate in its Certificate message, and that\r\n   certificate can represent a single DNS domain name. The client SHOULD\r\n   include the \"source domain\" in the SNI extension and SHOULD NOT\r\n   include the \u201cderived domain\u201d.\r\n", "notes": "There is nothing wrong with the text, however its missing some clarifying text.\r\n\r\nWhen a client discovers a service using SRV, when it is doing TLS it should include the \"source domain\" in the SNI extension and SHOULD NOT include the \u201cderived domain\u201d in SNI. Now, this is obviously the correct thing to do. However, it doesnt explicitly state this anywhere in the RFC, or in RFC6066.", "submit_date": "2019-03-13", "submitter_name": "Owen Friel", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5655", "doc-id": "RFC270", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "The normative text version of RFC 270 is missing four attached pages that are referenced in the RFC. A PDF scan of the complete RFC 270 is available at https://www.rfc-editor.org/info/rfc270", "submit_date": "2019-03-13", "submitter_name": "Darius Kazemi", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5656", "doc-id": "RFC5812", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.8.6", "orig_text": "                <synopsis>\r\n                  the path to the component target\r\n                  each 4 octets is read as one path element,\r\n                  using the path construction in the ForCES protocol,\r\n                  [2].\r\n                </synopsis>\r\n", "correct_text": "                <synopsis>\r\n                  the path to the component target\r\n                  each 4 octets is read as one path element,\r\n                  using the path construction in the ForCES protocol,\r\n                  [RFC5810].\r\n                </synopsis>\r\n", "notes": "Incorrect reference", "submit_date": "2019-03-13", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5658", "doc-id": "RFC6066", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "", "correct_text": "When a client uses DNS SRV to discover and connect to a server, the \r\nclient SHOULD include the \"source domain\" in the \"host_name\" and SHOULD\r\nNOT include the \"derived domain\", where \"source domain\" and \"derived\r\ndomain\" are defined in RFC6125. ", "notes": "The original text is all fine, but it is missing some additional clarifying text on use of SNI when a client users DNS SRV to discover the service it is connecting to.", "submit_date": "2019-03-14", "submitter_name": "Owen Friel", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5665", "doc-id": "RFC8552", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.3", "orig_text": "4.1.3.  _ta\r\n\r\n   Under the NULL RR Type, the entry \"_ta-*\" denotes all node names\r\n   beginning with the string \"_ta-*\".  It does NOT refer to a DNS\r\n   wildcard specification.\r\n", "correct_text": "4.1.3.  _ta\r\n\r\n   Under the NULL RR Type, the entry \"_ta-*\" denotes all node names\r\n   beginning with the string \"_ta-\".  It does NOT refer to a DNS\r\n   wildcard specification.\r\n", "notes": "The second '*' should not be present, as a literal asterisk does not appear in all node names beginning with \"_ta-\".", "submit_date": "2019-03-21", "submitter_name": "Ronan Flood", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5662", "doc-id": "RFC7408", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3 (page 20)", "orig_text": "               <!-- Extension RFC 7408 -->\r\n               <xsd:attribute name=\"access\" use=\"optional\"\r\n                  default=\"read-write\">\r\n                  <xsd:simpleType>\r\n                     <xsd:list itemType=\"accessModeType\"/>\r\n                  </xsd:simpleType>\r\n               </xsd:attribute>\r\n               <!-- Extension RFC 7408 -->\r\n", "correct_text": "               <!-- Extension RFC 7408 -->\r\n               <xsd:attribute name=\"access\" use=\"optional\"\r\n                  default=\"read-write\">\r\n                  <xsd:simpleType>\r\n                     <xsd:list itemType=\"accessModeType\"/>\r\n                  </xsd:simpleType>\r\n               </xsd:attribute>\r\n               <!-- /Extension RFC 7408 -->\r\n", "notes": "\u00a8/\u00a8 missing.", "submit_date": "2019-03-17", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-07-21 15:17:32"}, {"errata_id": "7187", "doc-id": "RFC8794", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "15.1.", "orig_text": "   Non-mandatory EBML Elements can be added in a new EBMLDocTypeVersion.\r\n   Since they are not mandatory, they won't be found in older versions\r\n   of the EBMLDocTypeVersion, just as they might not be found in newer\r\n   versions.  This causes no compatibility issue.\r\n", "correct_text": "   Non-mandatory EBML Elements can be added in a new DocTypeVersion.\r\n   Since they are not mandatory, they won't be found in older versions\r\n   of the DocTypeVersion, just as they might not be found in newer\r\n   versions.  This causes no compatibility issue.\r\n", "notes": "Use DocTypeVersion in the text rather than EBMLDocTypeVersion for more consistency.\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/pull/405", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": "2022-11-15 21:40:03"}, {"errata_id": "5704", "doc-id": "RFC8586", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.2", "orig_text": "   This specification uses the Augmented Backus-Naur Form (ABNF)\r\n   notation of [RFC5234] with a list extension, defined in Section 7 of\r\n   [RFC7230], that allows for compact definition of comma-separated\r\n   lists using a '#' operator (similar to how the '*' operator indicates\r\n   repetition).  Additionally, it uses a token (OWS), uri-host, and port\r\n   rules from [RFC7230] and the parameter rule from [RFC7231].", "correct_text": "   This specification uses the Augmented Backus-Naur Form (ABNF)\r\n   notation of [RFC5234] with a list extension, defined in Section 7 of\r\n   [RFC7230], that allows for compact definition of comma-separated\r\n   lists using a '#' operator (similar to how the '*' operator indicates\r\n   repetition).  Additionally, it uses the token, OWS, uri-host and port\r\n   rules from [RFC7230] and the parameter rule from [RFC7231].", "notes": "The last sentence apparently was mangled during AUTH48. The correct version is from draft-ietf-httpbis-cdn-loop-02. \"token\", \"OWS\", \"uri-host\" and \"port\" are all ABNF rules.", "submit_date": "2019-04-25", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:32:48"}, {"errata_id": "5663", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "14", "orig_text": "deviate-delete-stmt = deviate-keyword sep delete-keyword-str optsep\r\n                      (\";\" /\r\n                       \"{\" stmtsep\r\n                           ;; these stmts can appear in any order\r\n                           [units-stmt]\r\n                           *must-stmt\r\n                           *unique-stmt\r\n                           *default-stmt\r\n                       \"}\") stmtsep\r\n", "correct_text": "deviate-delete-stmt = deviate-keyword sep delete-keyword-str optsep\r\n                      (\";\" /\r\n                       \"{\" stmtsep\r\n                           ;; these stmts can appear in any order\r\n                           [units-stmt]\r\n                           *must-stmt\r\n                           *unique-stmt\r\n                           *default-stmt\r\n                           [config-stmt]\r\n                           [mandatory-stmt]\r\n                           [min-elements-stmt]\r\n                           [max-elements-stmt]\r\n                       \"}\") stmtsep\r\n", "notes": "Section 7.20.3.2 specifies all permitted substatements for the \"deviate\" statement however the ABNF grammar specifies different valid substatements per deviate argument.  The \"delete\" argument is one such that only contains a subset of what is defined in the substatement table in this section.\r\n\r\nThe errata mentioned at: https://www.rfc-editor.org/errata/eid5489 is meant to correct the following statement\r\n\r\n\"\"\"\r\nThe argument \"delete\" deletes properties from the target node.  The\r\nproperties to delete are identified by substatements to the \"delete\"\r\nstatement.\r\n\"\"\"\r\n\r\nHowever this either needs to be a per argument table or ABNF correction\n --VERIFIER NOTES-- \n   Martin Bjorklund wrote:\r\n\r\nI agree that the document needs clarification, and the yang-next issue\r\nwill take care of that.  The document needs a clarification that the\r\nrefers to the grammar, or perhaps different substatement tables for\r\nadd/replace/delete.\r\n\r\nMeanwhile, I think that this errata should be rejected.\r\n\r\nrob wilton and robert varga wrote:\r\n\r\nHi Ebben,\r\n\r\nI've always taken the ABNF to list the definitive sub-statements that are allowed for the various deviate \"add\", \"replace\", or \"delete\" options.  Perhaps the RFC could state this more explicitly.  Perhaps raise an issue on the YANG Next issue tracker to clarify this (https://github.com/netmod-wg/yang-next/issues) and it might get discussed tomorrow.\r\n\r\nI agree.\r\n\r\nProposed statements are simple cases, for which 'deviate replace' can be\r\nused to specify the correct value -- for example remove 'min-elements'\r\nby replacing it with 'min-elements 0'.", "submit_date": "2019-03-18", "submitter_name": "Ebben Aries", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-10-15 18:44:15"}, {"errata_id": "5664", "doc-id": "RFC8520", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Universal Resource Locator\r\n\r\nUniversal Resource Name", "correct_text": "Uniform Resource Locator\r\n\r\nUniform Resource Name", "notes": "Note that there are multiple instances throughout the document.\r\n\r\nThere haven't been UNIVERSAL resource locators, identifiers, or names for twenty years.    I've labeled these as technical errata because they refer to something that doesn't exist.", "submit_date": "2019-03-18", "submitter_name": "Leslie Daigle", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5666", "doc-id": "RFC7483", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3", "orig_text": "handle:           DNRs and RIRs have registry-unique identifiers that\r\n                     may be used to specifically reference an object\r\n                     instance.  The semantics of this data type as found\r\n                     in this document are to be a registry-unique\r\n                     reference to the closest enclosing object where the\r\n                     value is found.  The data type names \"registryId\",\r\n                     \"roid\", \"nic-handle\", \"registrationNo\", etc., are\r\n                     terms often synonymous with this data type.  In\r\n                     this document, the term \"handle\" is used.  The term\r\n                     exposed to users by clients is a presentation issue\r\n                     beyond the scope of this document.", "correct_text": "handle:           DNRs and RIRs have registry-unique identifiers that\r\n                     may be used to specifically reference an object\r\n                     instance.  The semantics of this data type as found\r\n                     in this document are to be a registry-unique\r\n                     reference to the closest enclosing object where the\r\n                     value is found.  The data type names \"registryId\",\r\n                     \"roid\", \"nic-handle\", \"registrationNo\", etc., are\r\n                     terms often synonymous with this data type.  In\r\n                     this document, the term \"handle\" is used.  The term\r\n                     exposed to users by clients is a presentation issue\r\n                     beyond the scope of this document. This value is a \r\n                     simple string.", "notes": "All uses of handle in section 5 call \"handle\" out as being a string, but if a reader were to only read section 3 they would not know it.", "submit_date": "2019-03-22", "submitter_name": "Andrew Newton", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5667", "doc-id": "RFC7483", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.8", "orig_text": "identifier -- a public identifier of the type denoted by \"type\"", "correct_text": "identifier -- a string denoting a public identifier of the type \r\n              related to \"type\"", "notes": "While the example given in section 4.8 shows \"identifier\" being a string, the prose description does not clearly state it.", "submit_date": "2019-03-22", "submitter_name": "Andrew Newton", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5669", "doc-id": "RFC8152", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "16.7", "orig_text": "Value:  This is the value used to identify the curve.  These values\r\n   MUST be unique.  The value can be a positive integer, a negative\r\n   integer, or a string.\r\n\r\nDescription:  This field contains a brief description of the curve.\r\n\r\nReferences:  This contains a pointer to the public specification for\r\n   the curve if one exists.", "correct_text": "Value:  This is the value used to identify the key type.  These values\r\n   MUST be unique.  The values are positive integers.\r\n\r\nDescription:  This field contains a brief description of the key type.\r\n\r\nReferences:  This contains a pointer to the public specification for\r\n   the key type if one exists.", "notes": "This Registry is about Key Types, but the current text refers to curves.\r\n\r\nThe value identifying a key type can be only a positive integer.", "submit_date": "2019-03-23", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5670", "doc-id": "RFC8228", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "13", "orig_text": "In this document, the symbol \"r-n\" means \"a reflexive \r\n(identity) mapping of type 'n'\".", "correct_text": "In this document, the symbol \"r-k\" means \"a reflexive\r\n(identity) mapping of type 'k'\".", "notes": "The notation \"r-n\" is used a few lines later for \"r-neither\". Therefore, a different letter needs to be used for a generic placeholder for all types. \"k\" seems appropriate.", "submit_date": "2019-03-23", "submitter_name": "Asmus Freytag", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5671", "doc-id": "RFC8228", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "17", "orig_text": "The following shows such an example resulting in conflicting \r\nreflexive variants:", "correct_text": "The following shows such an example resulting in conflicting \r\nvariant dispositions:", "notes": "typo", "submit_date": "2019-03-23", "submitter_name": "Asmus Freytag", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7188", "doc-id": "RFC8794", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "15.2.", "orig_text": "   EBML Elements MAY be marked as deprecated in a new EBMLDocTypeVersion\r\n   using the \"maxver\" attribute of the EBML Schema.  If such an Element\r\n   is found in an EBML Document with a newer version of the\r\n   EBMLDocTypeVersion, it SHOULD be discarded.\r\n", "correct_text": "   EBML Elements MAY be marked as deprecated in a new DocTypeVersion\r\n   using the \"maxver\" attribute of the EBML Schema.  If such an Element\r\n   is found in an EBML Document with a newer version of the\r\n   DocTypeVersion, it SHOULD be discarded.\r\n", "notes": "Use DocTypeVersion in the text rather than EBMLDocTypeVersion for more consistency.\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/pull/405", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5672", "doc-id": "RFC5925", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "     /* set the flag when the SEG.SEQ first rolls over */\r\n     if ((RCV.SNE_FLAG == 0)\r\n        && (RCV.PREV_SEQ > 0x7fff) && (SEG.SEQ < 0x7fff)) {\r\n           RCV.SNE = RCV.SNE + 1;\r\n           RCV.SNE_FLAG = 1;\r\n     }\r\n     /* decide which SNE to use after incremented */\r\n     if ((RCV.SNE_FLAG == 1) && (SEG.SEQ > 0x7fff)) {\r\n        SNE = RCV.SNE - 1; # use the pre-increment value\r\n     } else {\r\n        SNE = RCV.SNE; # use the current value\r\n     }\r\n     /* reset the flag in the *middle* of the window */\r\n     if ((RCV.PREV_SEQ < 0x7fff) && (SEG.SEQ > 0x7fff)) {\r\n        RCV.SNE_FLAG = 0;\r\n     }\r\n     /* save the current SEQ for the next time through the code */\r\n     RCV.PREV_SEQ = SEG.SEQ;", "correct_text": "     /* set the flag when the SEG.SEQ first rolls over */\r\n     if ((RCV.SNE_FLAG == 0)\r\n        && (RCV.PREV_SEQ > 0x7fffffff) && (SEG.SEQ < 0x7fffffff)) {\r\n           RCV.SNE = RCV.SNE + 1;\r\n           RCV.SNE_FLAG = 1;\r\n     }\r\n     /* decide which SNE to use after incremented */\r\n     if ((RCV.SNE_FLAG == 1) && (SEG.SEQ > 0x7fffffff)) {\r\n        SNE = RCV.SNE - 1; # use the pre-increment value\r\n     } else {\r\n        SNE = RCV.SNE; # use the current value\r\n     }\r\n     /* reset the flag in the *middle* of the window */\r\n     if ((RCV.PREV_SEQ < 0x7fffffff) && (SEG.SEQ > 0x7fffffff)) {\r\n        RCV.SNE_FLAG = 0;\r\n     }\r\n     /* save the current SEQ for the next time through the code */\r\n     RCV.PREV_SEQ = SEG.SEQ;", "notes": "The SNE values are 32 bits; the current pseudocode used 16-bit masks (0x7fff) instead of their 32-bit equivalent (0x7fffffff).\r\n\r\nThis error was first noted by Tero Kivinen <kivinen@iki.fi>.", "submit_date": "2019-03-24", "submitter_name": "Joe Touch", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 10:23:08"}, {"errata_id": "5673", "doc-id": "RFC6125", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   If the certificate will be used for only a single type of application\r\n   service, then the service provider is encouraged to request a\r\n   certificate that includes a DNS-ID and, if appropriate for the\r\n   application service type, an SRV-ID or URI-ID that limits the\r\n   deployment scope of the certificate to only the defined application\r\n   service type.", "correct_text": "   If the certificate will be used for only a single type of application\r\n   service, the service provider is encouraged to request a\r\n   certificate that includes a DNS-ID and, if appropriate for the\r\n   application service type, an SRV-ID or URI-ID that limits the\r\n   deployment scope of the certificate to only the defined application\r\n   service type.", "notes": "All the sentences in the RFC (not just the one above) are written as pseudo code using IF...THEN.  Normative English sentence structure the IF is a Conjunction for a Subordinating Clause.   The THEN after the comma should be dropped to start the subject or main clause of the sentence.", "submit_date": "2019-03-25", "submitter_name": "Michael James", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5674", "doc-id": "RFC5036", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.2.8", "orig_text": "-  FEC.  The FEC for which a label request is to be sent.\r\n", "correct_text": "-  FEC.  The FEC for which a label mapping is to be sent.\r\n", "notes": "Prepare_Label_Mapping_Attributes is used for sending label mapping message and\r\nNOT label request message.", "submit_date": "2019-03-25", "submitter_name": "Ramakrishna Rao DTV", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5675", "doc-id": "RFC8439", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.5.1", "orig_text": "for i=1 upto ceil(msg length in bytes / 16)\r\n   n = le_bytes_to_num(msg[((i-1)*16)..(i*16)] | [0x01])\r\n   a += n\r\n   a = (r * a) % p\r\n   end", "correct_text": "for i=1 upto floor(msg length in bytes / 16)\r\n   j = min(i*16-1, msg length in bytes - 1)\r\n   n = le_bytes_to_num(msg[((i-1)*16)..j] | [0x01])\r\n   a += n\r\n   a = (r * a) % p\r\n   end\r\n", "notes": "Corection for lengths of msg blocks (full blocks are of size 16, NOT 17 and last blocks of size != 16 have to be treated separately).\n --VERIFIER NOTES-- \n   Rejected in favour of errata 5689.", "submit_date": "2019-03-25", "submitter_name": "Stefan Heiss", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5676", "doc-id": "RFC6281", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "Following our example for alice, it queries the SRV RR for _dns-\r\nupdate-tls._udp.alice.members.me.com.  Then, the updates are sent to\r\nthe dynamic DNS server returned in the Target field of query response.\r\n\r\n...\r\n\r\nSo alice's host issues a query for\r\n_dns-llq-tls._udp.alice.members.me.com\r\nand obtains the server that provides LLQ service.", "correct_text": "Following our example for alice, it queries the SRV RR for _dns-\r\nupdate-tls._tcp.alice.members.me.com.  Then, the updates are sent to\r\nthe dynamic DNS server returned in the Target field of query response.\r\n\r\n...\r\n\r\nSo alice's host issues a query for\r\n_dns-llq-tls._tcp.alice.members.me.com\r\nand obtains the server that provides LLQ service.", "notes": "In both cases \u201c_udp\u201d should be replaced by \u201c_tcp\u201d.\r\n\r\nThe IANA service type \u201c_dns-update-tls._tcp\u201d is DNS Update (RFC 2136) over TLS over TCP.\r\n\r\nThe IANA service type \u201c_dns-llq-tls._tcp\u201d is DNS Long-Lived Queries (draft-sekar-dns-llq-03) over TLS over TCP.\r\n\r\nIn both cases RFC 6281 inadvertently used the label \u201c_udp\u201d instead of \u201c_tcp\u201d. Of course, TLS runs over TCP, not UDP. (I do know that DTLS can be used over UDP, but that is not what is being used here.)", "submit_date": "2019-03-27", "submitter_name": "Stuart Cheshire", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 10:52:36"}, {"errata_id": "5677", "doc-id": "RFC7121", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   If the FE is unable to find an associated FE in its list of CEs, then\r\n   it MUST attempt to connect and associate with the first from the list\r\n   of all CEs and continue in a round-robin fashion until it connects\r\n   and associates with a CE or the CEFTI timer expires.\r\n", "correct_text": "   If the FE is unable to find an associated CE in its list of CEs, then\r\n   it MUST attempt to connect and associate with the first from the list\r\n   of all CEs and continue in a round-robin fashion until it connects\r\n   and associates with a CE or the CEFTI timer expires.\r\n", "notes": "First line at p. 17\r\nFE is mistakenly specified instead of CE.", "submit_date": "2019-03-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 19:26:02"}, {"errata_id": "5678", "doc-id": "RFC7729", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "Omitted", "correct_text": "   [RFC7121]  Ogawa, K., Wang, W., Haleplidis, E., and J. Hadi Salim,\r\n              \"High Availability within a Forwarding and Control Element\r\n              Separation (ForCES) Network Element\", RFC 7121,\r\n              February 2014, <http://www.rfc-editor.org/info/rfc7121>.\r\n", "notes": "The document referenced in section 2.2 is not specified.\n --VERIFIER NOTES-- \nSubmitter states the reference is missing. It's not, in the copy I reviewed (https://www.rfc-editor.org/rfc/rfc7729) it's at the top of page 19.", "submit_date": "2019-03-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2025-02-13 15:33:18"}, {"errata_id": "7396", "doc-id": "RFC8824", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "Note that a client located in an Application Server sending a request\r\nto a server located in the Device may not be compressed through this\r\nRule, since the MID might not start with 7 bits equal to 0.", "correct_text": "Note that, if a client is located in an Application Server and sends a\r\nrequest to a server located in the Device, then the request may not be\r\ncompressed through this Rule, since the MID might not start with 7 bits\r\nequal to 0.", "notes": "In the old text, \"compressed\" seems referred to \"client\" rather than to \"request\" as intended.", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:32:48"}, {"errata_id": "5681", "doc-id": "RFC5931", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.8.3", "orig_text": "2.8.3 Fixing the Password Element\r\n\r\n   Fixing the Password Element involves an iterative hunting-and-pecking\r\n   technique using the prime from the negotiated group's domain\r\n   parameter set and an ECC- or FFC-specific operation depending on the\r\n   negotiated group. \r\n\r\n2.8.3.1.  ECC Operation for PWE\r\n\r\n   The group-specific operation for ECC groups uses pwd-value, pwd-seed,\r\n   and the equation for the curve to produce the Password Element.\r\n   First, pwd-value is used directly as the x-coordinate, x, with the\r\n   equation for the elliptic curve, with parameters a and b from the\r\n   domain parameter set of the curve, to solve for a y-coordinate, y.\r\n   If there is no solution to the quadratic equation, this operation\r\n   fails and the hunting-and-pecking process continues.  If a solution\r\n   is found, then an ambiguity exists as there are technically two\r\n   solutions to the equation and pwd-seed is used to unambiguously\r\n   select one of them.  If the low-order bit of pwd-seed is equal to the\r\n   low-order bit of y, then a candidate PWE is defined as the point\r\n   (x, y); if the low-order bit of pwd-seed differs from the low-order\r\n   bit of y, then a candidate PWE is defined as the point (x, p - y),\r\n   where p is the prime over which the curve is defined.  The candidate\r\n   PWE becomes PWE, and the hunting and pecking terminates successfully.\r\n\r\n   Algorithmically, the process looks like this:\r\n\r\n      found = 0\r\n      counter = 1\r\n      do {\r\n        pwd-seed = H(token | peer-ID | server-ID | password | counter)\r\n        pwd-value = KDF(pwd-seed, \"EAP-pwd Hunting And Pecking\", len(p))\r\n        if (pwd-value < p)\r\n        then\r\n          x = pwd-value\r\n          if ( (y = sqrt(x^3 + ax + b)) != FAIL)\r\n          then\r\n            if (LSB(y) == LSB(pwd-seed))\r\n            then\r\n              PWE = (x, y)\r\n            else\r\n              PWE = (x, p-y)\r\n            fi\r\n            found = 1\r\n          fi\r\n        fi\r\n        counter = counter + 1\r\n      } while (found == 0)\r\n\r\n                    Figure 3: Fixing PWE for ECC Groups\r\n\r\n\r\n2.8.3.2.  FFC Operation for pwe\r\n\r\n   The group-specific operation for FFC groups takes pwd-value, and the\r\n   prime, p, and order, r, from the group's domain parameter set (see\r\n   Section 2.2.1 when the order is not part of the defined domain\r\n   parameter set) to directly produce a candidate Password Element, pwe,\r\n   by exponentiating the pwd-value to the value ((p-1)/r) modulo the\r\n   prime.  If the result is greater than one (1), the candidate pwe\r\n   becomes pwe, and the hunting and pecking terminates successfully.\r\n\r\n   Algorithmically, the process looks like this:\r\n\r\n      found = 0\r\n      counter = 1\r\n      do {\r\n        pwd-seed = H(token | peer-ID | server-ID | password | counter)\r\n        pwd-value = KDF(pwd-seed, \"EAP-pwd Hunting And Pecking\", len(p))\r\n        if (pwd-value < p)\r\n        then\r\n          pwe = pwd-value ^ ((p-1)/r) mod p\r\n          if (pwe > 1)\r\n          then\r\n            found = 1\r\n          fi\r\n        fi\r\n        counter = counter + 1\r\n      } while (found == 0)\r\n\r\n                    Figure 4: Fixing PWE for FFC Groups\r\n\r\n\r\n", "correct_text": "\r\n\r\n2.8.3 Fixing the Password Element\r\n\r\n   Fixing the Password Element involves an iterative hunting-and-pecking\r\n   technique using the prime from the negotiated group's domain\r\n   parameter set and an ECC- or FFC-specific operation depending on the\r\n   negotiated group. \r\n\r\n   To thwart side-channel attacks that attempt to determine the number\r\n   of iterations of the hunting-and-pecking loop used to find the PE for\r\n   a given password, a security parameter, k, is used that ensures that\r\n   at least k iterations are always performed.  The probability that one\r\n   requires more than n iterations of the hunting-and-pecking loop to\r\n   find an ECC PE is roughly (q/2p)^n and to find an FFC PE is roughly\r\n   (q/p)^n, both of which rapidly approach zero (0) as n increases.  The\r\n   security parameter, k, SHOULD be set sufficiently large such that the\r\n   probability that finding the PE would take more than k iterations is\r\n   sufficiently small. It is RECOMMENDED that an implementation set the\r\n   security parameter, k, to a value of at least forty (40) which will\r\n   put the probability that more than forty iterations are needed in the\r\n   order of one in one trillion (1:1,000,000,000,000)\r\n\r\n2.8.3.1.  ECC Operation for PWE\r\n\r\n   The group-specific operation for ECC groups uses pwd-value, pwd-seed,\r\n   and the equation for the curve to produce the Password Element.\r\n   First, pwd-value is used directly as an x-coordinate, v, with the\r\n   equation for the elliptic curve, with parameters a and b from the\r\n   domain parameter set of the curve, to check whether v^3 + a*v + b\r\n   is a quadratic residue modulo p.  \r\n\r\n   If it is a quadratic non residue, this operation fails and the\r\n   hunting-and-pecking process continues. If it is a quadratic residue,\r\n   then the x-coordinate is saved and the current seed is stored. When\r\n   the hunting-and-pecking loop terminates, the x-coordinate is used\r\n   with the equation of the curve to solve for a y-coordinate.  An\r\n   ambiguity exists since two values for the y-coordinate would be\r\n   valid, and the low-order bit of the stored base is used to\r\n   unambiguously determine the correct y-coordinate. The resulting\r\n   (x,y) pair becomes PWE.\r\n\r\n   Algorithmically, the process looks like this:\r\n\r\n      found = 0\r\n      counter = 1\r\n      do {\r\n        pwd-seed = H(token | peer-ID | server-ID | password | counter)\r\n        pwd-value = KDF(pwd-seed, \"EAP-pwd Hunting And Pecking\", len(p))\r\n        if (pwd-value < p)\r\n        then\r\n\t  v = pwd-value\r\n          if ((v^3 + av + b)) is a quadratic residue)\r\n          then\r\n            if ( found == 0 )\r\n\t    then\r\n\t       x = v\r\n\t       save = pwd-seed\r\n\t       found = 1\r\n\t    fi\r\n          fi\r\n        fi\r\n        counter = counter + 1\r\n      } while ((found == 0) || (counter < k))\r\n      y = sqrt(x^3 + ax + b)\r\n      if ( lsb(y) == lsb(save))\r\n      then\r\n        PWE = (x, y)\r\n      else\r\n        PWE = (x, p-y)\r\n      fi\r\n\r\n                    Figure 3: Fixing PWE for ECC Groups\r\n\r\n   Checking whether a value is a quadratic residue modulo a prime can\r\n   leak information about that value in a side-channel attack.\r\n   Therefore, it is RECOMMENDED that the technique used to determine if\r\n   the value is a quadratic residue modulo p blind the value with a\r\n   random number so that the blinded value can take on all numbers\r\n   between 1 and p-1 with equal probability while not changing its\r\n   quadratic residuosity.  Determining the quadratic residue in a\r\n   fashion that resists leakage of information is handled by flipping a\r\n   coin and multiplying the blinded value by either a random quadratic\r\n   residue or a random quadratic nonresidue and checking whether the\r\n   multiplied value is a quadratic residue (qr) or a quadratic\r\n   nonresidue (qnr) modulo p, respectively.  The random residue and\r\n   nonresidue can be calculated prior to hunting and pecking by\r\n   calculating the Legendre symbol on random values until they are\r\n   found:\r\n\r\n      do {\r\n        qr = random() mod p\r\n      } while ( lgr(qr, p) != 1)\r\n\r\n      do {\r\n        qnr = random() mod p\r\n      } while ( lgr(qnr, p) != -1)\r\n\r\n   Algorithmically, the masking technique to find out whether or not a\r\n   value is a quadratic residue looks like this:\r\n\r\n      is_quadratic_residue (val, p) {\r\n          r = (random() mod (p - 1)) + 1\r\n          num = (val * r * r) mod p\r\n          if ( lsb(r) == 1 )\r\n             num = (num * qr) mod p\r\n             if ( lgr(num, p) == 1)\r\n             then\r\n                return TRUE\r\n             fi\r\n          else\r\n             num = (num * qnr) mod p\r\n             if ( lgr(num, p) == -1)\r\n             then\r\n                return TRUE\r\n             fi\r\n          fi\r\n          return FALSE\r\n      }\r\n\r\n\r\n2.8.3.2.  FFC Operation for pwe\r\n\r\n   The group-specific operation for FFC groups takes pwd-value, and the\r\n   prime, p, and order, r, from the group's domain parameter set (see\r\n   Section 2.2.1 when the order is not part of the defined domain\r\n   parameter set) to directly produce a candidate Password Element, pwe,\r\n   by exponentiating the pwd-value to the value ((p-1)/r) modulo the\r\n   prime.  If the result is greater than one (1), the candidate pwe\r\n   becomes pwe, and the hunting and pecking continues.\r\n\r\n   Algorithmically, the process looks like this:\r\n\r\n      found = 0\r\n      counter = 1\r\n      do {\r\n        pwd-seed = H(token | peer-ID | server-ID | password | counter)\r\n        pwd-value = KDF(pwd-seed, \"EAP-pwd Hunting And Pecking\", len(p))\r\n        if (pwd-value < p)\r\n        then\r\n          temp = pwd-value ^ ((p-1)/r) mod p\r\n          if (temp > 1)\r\n          then\r\n            found = 1\r\n\t    pwe = temp\r\n          fi\r\n        fi\r\n        counter = counter + 1\r\n      } while ((found == 0) || (counter < k))\r\n\r\n                    Figure 4: Fixing PWE for FFC Groups\r\n\r\n", "notes": "The key exchange in EAP-pwd is dragonfly which was described in RFC 7664. During the standardization of RFC 7664, comments were received to prevent a side-channel attack against the hunting-and-pecking loop and the technique used in RFC 7664 should be done in RFC 5931 to prevent side-channel attack.", "submit_date": "2019-03-31", "submitter_name": "Dan Harkins", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5682", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.2, B.3.2", "orig_text": "     struct {\r\n         opaque certificate_request_context<0..2^8-1>;\r\n         Extension extensions<2..2^16-1>;\r\n     } CertificateRequest;", "correct_text": "     struct {\r\n         opaque certificate_request_context<0..2^8-1>;\r\n         Extension extensions<0..2^16-1>;\r\n     } CertificateRequest;", "notes": "The length of this vector can never 2.  It is either 0, if the vector is empty, or >=4, if the vector has at least one extension.  Nothing elsewhere in the spec requires a non-zero number of extensions here, so this syntax should allow a zero-length vector.\r\n\r\nPaul Wouters (AD): There are two places in the mentioned sections that need this one liner fix.", "submit_date": "2019-04-01", "submitter_name": "Richard Barnes", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-22 18:29:40"}, {"errata_id": "5683", "doc-id": "RFC8122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "             Table 1: IANA Hash Function Textual Name Registry\r\n", "correct_text": "             Table 1: IANA \"Hash Function Textual Names\" Registry\r\n", "notes": "The name of the registry is the \"Hash Function Textual Names\" registry.", "submit_date": "2019-04-04", "submitter_name": "Sean Leonard", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5684", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.4", "orig_text": "These two alternatives (~=\">=1 BDRs\" vs. ~=\"no BDRs\") seem (to me at\r\nleast, maybe I missed the point) to have the same outcome (~=\"highest\r\nbecomes BDR\")--please clarify it:\r\nIf one or more of these\r\n            routers have declared themselves Backup Designated\r\nRouter[alternative1]\r\n            (i.e., they are currently listing themselves as Backup\r\n            Designated Router, but not as Designated Router, in their\r\n            Hello Packets) the one having highest Router Priority is\r\n            declared to be Backup Designated Router.  In case of a tie,\r\n            the one having the highest Router ID is chosen.  If no\r\n            routers have declared themselves Backup Designated\r\nRouter[alternative2],\r\n\r\n\r\n\r\nMoy                         Standards Track                    [Page 75]\r\n \r\nRFC 2328                     OSPF Version 2                   April 1998\r\n\r\n\r\n            choose the router having highest Router Priority, (again\r\n            excluding those routers who have declared themselves\r\n            Designated Router), and again use the Router ID to break\r\n            ties.\r\n", "correct_text": "TBD", "notes": "It is unclear to me if a BDR should get preempted (I know the BDR should not).\n --VERIFIER NOTES-- \n   The confusion was cleared on the WG list.", "submit_date": "2019-04-04", "submitter_name": "jonathan natale", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5685", "doc-id": "RFC7525", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   [TLS-XMPP] Saint-Andre, P. and a. alkemade, \"Use of Transport Layer\r\n              Security (TLS) in the Extensible Messaging and Presence\r\n              Protocol (XMPP)\", Work in Progress,\r\n              draft-ietf-uta-xmpp-07, April 2015.", "correct_text": "   [TLS-XMPP] Saint-Andre, P. and T. Alkemade, \"Use of Transport Layer\r\n              Security (TLS) in the Extensible Messaging and Presence\r\n              Protocol (XMPP)\", Work in Progress,\r\n              draft-ietf-uta-xmpp-07, April 2015.", "notes": "Fixed my name.", "submit_date": "2019-04-05", "submitter_name": "Thijs Alkemade", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-16 05:38:01"}, {"errata_id": "5686", "doc-id": "RFC8423", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "   [CNSA]     National Security Agency, \"Commercial National Security\r\n              Algorithm Suite\", August 2015,\r\n              <https://www.iad.gov/iad/programs/iad-initiatives/\r\n              cnsa-suite.cfm>.", "correct_text": "   [CNSA]     National Security Agency, \"Commercial National Security\r\n              Algorithm Suite\", August 2015,\r\n              <https://apps.nsa.gov/iaarchive/programs/iad-initiatives/\r\n              cnsa-suite.cfm>.", "notes": "The NSA re-worked their website, and the URL for reference [CNSA] is no longer valid.", "submit_date": "2019-04-09", "submitter_name": "Adam Crosby", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5705", "doc-id": "RFC7659", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4", "orig_text": "This notification is triggered when an address pool's usage\r\nbecomes less than or equal to the value of the\r\nnatv2PoolThresholdUsageLow object for that pool, unless the\r\nnotification has been disabled by setting the value of the\r\nthreshold to -1.  It is reported subject to the rate\r\nlimitation specified by natv2PortMapNotificationInterval.", "correct_text": "This notification is triggered when an address pool's usage\r\nbecomes less than or equal to the value of the\r\nnatv2PoolThresholdUsageLow object for that pool, unless the\r\nnotification has been disabled by setting the value of the\r\nthreshold to -1.  It is reported subject to the rate\r\nlimitation specified by natv2PoolNotificationInterval.", "notes": "Description is pointing on nonexistent object natv2PortMapNotificationInterval. It should be natv2PoolNotificationInterval.\n --VERIFIER NOTES-- \nThis Erratum is correct, however, in this case the same edit can be applied twice, and was  a single consilated Errata was approved.", "submit_date": "2019-04-25", "submitter_name": "Igor Ryzhov", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-01-23 09:59:43"}, {"errata_id": "5687", "doc-id": "RFC7636", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "Server implementations of this specification MAY accept OAuth2.0\r\nclients that do not implement this extension.  If the \"code_verifier\"\r\nis not received from the client in the Authorization Request, servers\r\nsupporting backwards compatibility revert to the OAuth 2.0 [RFC6749]\r\nprotocol without this extension.\r\n\r\nAs the OAuth 2.0 [RFC6749] server responses are unchanged by this\r\nspecification, client implementations of this specification do not\r\nneed to know if the server has implemented this specification or not\r\nand SHOULD send the additional parameters as defined in Section 4 to\r\nall servers.\r\n", "correct_text": "Server implementations of this specification MAY accept OAuth2.0\r\nclients that do not implement this extension.  If the \"code_challenge\"\r\nis not received from the client in the Authorization Request, servers\r\nsupporting backwards compatibility revert to the OAuth 2.0 [RFC6749]\r\nprotocol without this extension.\r\n\r\nAs the OAuth 2.0 [RFC6749] server responses are unchanged by this\r\nspecification, client implementations of this specification do not\r\nneed to know if the server has implemented this specification or not\r\nand SHOULD send the additional parameters as defined in Section 4 to\r\nall servers.\r\n", "notes": "The code_verifier is not sent in the authorization request.", "submit_date": "2019-04-09", "submitter_name": "Collin Sauve", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5688", "doc-id": "RFC2317", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "[Page 2]", "orig_text": " Let us assume we have assigned the address spaces to three different\r\n   parties as follows:\r\n\r\n           192.0.2.0/25   to organization A\r\n           192.0.2.128/26 to organization B\r\n           192.0.2.192/26 to organization C\r\n", "correct_text": " Let us assume we have assigned the address spaces to three different\r\n   parties as follows:\r\n\r\n           192.0.2.0/25   to organization A\r\n           192.0.2.128/26 to organization B\r\n           192.0.2.192/27 to organization C\r\n\r\n ", "notes": "Ip mask 27 ?\n --VERIFIER NOTES-- \n   Actually, the last octet of 192.0.2.128 is b'1000 0000 and 192.0.2.192 is n'1100 0000 and the latter is *not* a subnet of the former in this RFC. I.e., both are /26", "submit_date": "2019-04-11", "submitter_name": "Dominik", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 13:36:56"}, {"errata_id": "5689", "doc-id": "RFC8439", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.5.1", "orig_text": "for i=1 upto ceil(msg length in bytes / 16)\r\n   n = le_bytes_to_num(msg[((i-1)*16)..(i*16)] | [0x01])\r\n   a += n\r\n   a = (r * a) % p\r\n   end\r\n", "correct_text": "for i=1 upto ceil(msg length in bytes / 16)\r\n   j = min(i*16-1, msg length in bytes - 1)\r\n   n = le_bytes_to_num(msg[((i-1)*16)..j] | [0x01])\r\n   a += n\r\n   a = (r * a) % p\r\n   end\r\n", "notes": "Correction of Errata 5675", "submit_date": "2019-04-11", "submitter_name": "Stefan Heiss", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5691", "doc-id": "RFC7868", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.6.1.1", "orig_text": "The calculated EIGRP bandwidth (BW) metric is then:\r\n\r\n               256 * (10^7)/BW = 256 * {(10^7)/10,000}\r\n                               = 256 * 1000\r\n                               = 256,000\r\n\r\n   And the calculated EIGRP delay metric is then:\r\n\r\n            256 * sum of delay = 256 * 100 * 10 microseconds\r\n                               = 25,600 (in tens of microseconds)", "correct_text": "The calculated EIGRP bandwidth (BW) metric is then:\r\n\r\n               (10^7)/BW = {(10^7)/10,000}\r\n                         = 1,000\r\n\r\n   And the calculated EIGRP delay metric is then:\r\n\r\n               sum of delay = 1 ms = 100 tens of microseconds\r\n\r\n   Thus the composite metric is:\r\n\r\n               256 * 1000 * 100 = 25,600,000", "notes": "The 256 should be multiplied by the sum of the bandwidth and the delay, and not multiplied by each individual parameter.\r\n\r\n1 ms = 1,000 microseconds = 100 tens of microseconds", "submit_date": "2019-04-14", "submitter_name": "Gabriel Torres", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5692", "doc-id": "RFC2047", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix", "orig_text": "   + explicitly state that the MIME-Version is not requried to use\r\n     'encoded-word's.", "correct_text": "   + explicitly state that the MIME-Version is not required to use\r\n     'encoded-word's.", "notes": "a minor spelling mistake", "submit_date": "2019-04-14", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5693", "doc-id": "RFC8407", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.17", "orig_text": "Note that the set of features within a module\r\n   is easily discovered by the reader, but the set of related modules\r\n   within the entire YANG library is not as easy to identity.  Module\r\n   names with a common prefix can help readers identity the set of\r\n   related modules, but this assumes the reader will have discovered and\r\n   installed all the relevant modules.", "correct_text": "Note that the set of features within a module\r\n   is easily discovered by the reader, but the set of related modules\r\n   within the entire YANG library is not as easy to identify.  Module\r\n   names with a common prefix can help readers identify the set of\r\n   related modules, but this assumes the reader will have discovered and\r\n   installed all the relevant modules.", "notes": "The word identity is not correct here. It should be identify to give the sentence correct meaning.", "submit_date": "2019-04-15", "submitter_name": "Mobashshera Rasool", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5695", "doc-id": "RFC6275", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "[none]", "correct_text": "Updates: 4302 [in RFC header]", "notes": "Section 11.3.2 says:\r\n      The treatment of destination options described in RFC 4302 is\r\n      extended as follows.  The AH authentication data MUST be\r\n      calculated... [etc.]\r\nThis is a change to the AH algorithm and should be flagged as a formal update to RFC 4302.\r\n\r\n-- Verifier note (EV) ----\r\n\r\nIndeed, RFC 6275 should formally update RFC 4302. This erratum sits somewhere between editorial and technical, and as it does not change the technical content itself, I edited the type to 'editorial'.", "submit_date": "2019-04-16", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-01-12 10:52:53"}, {"errata_id": "5696", "doc-id": "RFC8410", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "   If the keyUsage extension is present in a certification authority\r\n   certificate that indicates id-Ed25519 or id-Ed448, then the keyUsage\r\n   extension MUST contain one or more of the following values:\r\n\r\n          nonRepudiation;\r\n          digitalSignature;\r\n          keyCertSign; and\r\n          cRLSign.", "correct_text": "   If the keyUsage extension is present in a certification authority\r\n   certificate that indicates id-Ed25519 or id-Ed448, then the keyUsage\r\n   extension MUST contain keyCertSign, and zero, one or more of the\r\n   following values:\r\n\r\n          nonRepudiation;\r\n          digitalSignature; and\r\n          cRLSign.", "notes": "The usage keyCertSign must be set in a CA certificate.", "submit_date": "2019-04-17", "submitter_name": "Lijun Liao", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-04-25 20:22:43"}, {"errata_id": "5697", "doc-id": "RFC8574", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3", "orig_text": " type=\"text/ttl\"/>", "correct_text": ">", "notes": "Media type text/ttl is not registered.  The example does not require a type.", "submit_date": "2019-04-18", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-01-04 16:41:50"}, {"errata_id": "5706", "doc-id": "RFC7659", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "It is reported subject to the rate\r\nlimitation specified by natv2PortMapNotificationInterval.", "correct_text": "It is reported subject to the rate\r\nlimitation specified by natv2PoolNotificationInterval.", "notes": "There are two occurance of the nonexistent object: natv2PortMapNotificationInterval, both should be replaced by the object: natv2PoolNotificationInterval.", "submit_date": "2019-04-25", "submitter_name": "Igor Ryzhov", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-01-23 09:56:29"}, {"errata_id": "5698", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.5.4.3", "orig_text": "     container interface {\r\n       leaf ifType {\r\n         type enumeration {\r\n           enum ethernet;\r\n           enum atm;\r\n         }\r\n       }\r\n       leaf ifMTU {\r\n         type uint32;\r\n       }\r\n       must 'ifType != \"ethernet\" or ifMTU = 1500' {\r\n         error-message \"An Ethernet MTU must be 1500\";\r\n       }\r\n       must 'ifType != \"atm\" or'\r\n          + ' (ifMTU <= 17966 and ifMTU >= 64)' {\r\n         error-message \"An ATM MTU must be 64 .. 17966\";\r\n       }\r\n     }\r\n", "correct_text": "     container interface {\r\n       leaf ifType {\r\n         type enumeration {\r\n           enum ethernet;\r\n           enum atm;\r\n         }\r\n       }\r\n       leaf ifMTU {\r\n         type uint32;\r\n       }\r\n       must 'string(ifType) != \"ethernet\" or ifMTU = 1500' {\r\n         error-message \"An Ethernet MTU must be 1500\";\r\n       }\r\n       must 'string(ifType) != \"atm\" or'\r\n          + ' (ifMTU <= 17966 and ifMTU >= 64)' {\r\n         error-message \"An ATM MTU must be 64 .. 17966\";\r\n       }\r\n     }\r\n", "notes": "The intent of the example is for each must-stmt to be false if the ifType leaf does not exist.\r\nHowever the XPath is incorrect.\r\n\r\nFrom the XPath 1.0 spec, section 3.4, para 5\r\n\r\nIf one object to be compared is a node-set and the other is a string, then the comparison will be true if and only if there is a node in the node-set such that the result of performing the comparison on the string-value of the node and the other string is true. \r\n\r\nThe empty node-set is not implicitly converted to an empty string for a = or != comparison.\r\nInstead the string() function must explicitly convert the node-set to a string", "submit_date": "2019-04-18", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5699", "doc-id": "RFC7421", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Internet Engineering Task Force (IETF)                 B. Carpenter, Ed.\r\nRequest for Comments: 7421                             Univ. of Auckland\r\nCategory: Informational                                         T. Chown\r\nISSN: 2070-1721                                     Univ. of Southampton\r\n                                                                 F. Gont\r\n                                                  SI6 Networks / UTN-FRH\r\n                                                                S. Jiang\r\n                                            Huawei Technologies Co., Ltd\r\n                                                             A. Petrescu\r\n                                                               CEA, LIST\r\n                                                          A. Yourtchenko\r\n                                                                   Cisco\r\n                                                            January 2015\r\n\r\n", "correct_text": "Internet Engineering Task Force (IETF)                 B. Carpenter, Ed.\r\nRequest for Comments: 7421                             Univ. of Auckland\r\nCategory: Informational                                         T. Chown\r\nISSN: 2070-1721                                     Univ. of Southampton\r\n                                                                 F. Gont\r\n                                                  SI6 Networks / UTN-FRH\r\n                                                                S. Jiang\r\n                                            Huawei Technologies Co., Ltd\r\n                                                          A. Yourtchenko\r\n                                                                   Cisco\r\n                                                            January 2015\r\n\r\n", "notes": "For some reason I got in the group, then participated positively to the discussion, and I let myself tempted to have my name up on the first page of a published RFC; but finally, after much time and reflexion, I think I do not agree with the effects of this RFC.\r\n\r\nI do not agree that 64bit is a boundary.\r\n\r\nRemark: you are asking Type 'Technical' or 'Editorial'; only one choice is possible.  I do not understand that.  My issue is both.\n --VERIFIER NOTES-- \nQuoting the AD at the time: \"RFCs are immutable once published. Period.\"\r\n\r\nFor more discussion, see the mail archive thread https://mailarchive.ietf.org/arch/msg/ipv6/HzHbbAqaa4qquKNjaYtv3Te7IJc/", "submit_date": "2019-04-19", "submitter_name": "Alexandre PETRESCU", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-12-18 22:37:03"}, {"errata_id": "5700", "doc-id": "RFC6956", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4", "orig_text": "                  <name>IPv4HeaderLengthMismatch</name>\r\n                  <synopsis>\r\n                   Exception case: packet with header length more\r\n                   than 5 words.\r\n                  </synopsis>\r\n", "correct_text": "                  <name>IPv4HeaderLengthMismatch</name>\r\n                  <synopsis>\r\n                   Exception case: packet with header length less\r\n                   than 5 words.\r\n                  </synopsis>\r\n", "notes": "page 37\n --VERIFIER NOTES-- \n   From the forces mailing list:\r\n\r\nOn April 22, 2019 at 9:25:22 PM, Weiming Wang (wmwang@zjsu.edu.cn) wrote:\r\n\r\nHi\uff0c \r\n\r\nPackets with the header length more than 5 words are marked with Exceptional packest. Packets header with less than 5 words should be marked with Validate Error, as defined in \r\n\r\nSection 4.4 \r\n\r\n<specialValue value=\"3\"> \r\n<name>InvalidIPv4HeaderLengthSize</name> \r\n<synopsis> \r\nError case: packet with header length field in \r\nthe header less than 5 words. \r\n</synopsis> \r\n\r\n", "submit_date": "2019-04-19", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 19:23:29"}, {"errata_id": "5701", "doc-id": "RFC2231", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7", "orig_text": "regular-parameter-name := attribute [section]", "correct_text": "regular-parameter-name := attribute", "notes": "It seems to me that there is no need for a [section] value to be appended to a regular-parameter-name, and that the existing rule that allows for this violates the intent of the text in Section 3 that states \"The asterisk character (\"*\") followed by a decimal count is employed to indicate that multiple parameters are being used to encapsulate a single parameter value\". With the existing rule, it is unclear how to treat the [section] value in this case. (e.g., Is it to be considered as part of the attribute name, or is it to be ignored?)", "submit_date": "2019-04-19", "submitter_name": "Paul Freeman", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5702", "doc-id": "RFC8520", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "16", "orig_text": "   implementors should take into\r\n   account what other information they are advertising through\r\n   mechanisms such as Multicast DNS (mDNS) [RFC6872]", "correct_text": "   implementors should take into\r\n   account what other information they are advertising through\r\n   mechanisms such as Multicast DNS (mDNS) [RFC6762]", "notes": "Incorrect reference for Multicast DNS (mDNS).", "submit_date": "2019-04-22", "submitter_name": "Stuart Cheshire", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5703", "doc-id": "RFC8422", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.10.", "orig_text": "All RSA signatures must be generated and verified according to\r\n   Section 7.2 of [RFC8017].", "correct_text": "All RSA signatures must be generated and verified according to\r\n   Section 8.2 of [RFC8017].", "notes": "Section 7.2 of RFC 8017 describes the RSAES-PKCS1-v1_5 encryption scheme. Section 8.2 of RFC 8017 describes the RSASSA-PKCS1-v1_5 signature scheme. The original text contradicts the natural expectation and is probably wrong. If it was intended, there should have been a thorough explanation (like in the well-known case of IKEv1 using the encryption scheme for signing).", "submit_date": "2019-04-23", "submitter_name": "Frank Theinen", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7397", "doc-id": "RFC8824", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "These classes point out that the Outer option contains the OSCORE\r\noption and that the message is OSCORE protected; this option carries\r\nthe information necessary to retrieve the Security Context.", "correct_text": "As per these classes, the Outer options comprise the OSCORE option,\r\nwhich indicates that the message is OSCORE protected and carries\r\nthe information necessary to retrieve the Security Context.", "notes": "\"Outer options\" should be in the plural, to refer to the set of CoAP options left unencrypted. Such a set comprises also the OSCORE option, which is the actual indicator of the message being protected with OSCORE.", "submit_date": "2023-03-19", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:33:56"}, {"errata_id": "8716", "doc-id": "RFC8881", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.4", "orig_text": "   *  The per-file system attributes are:\r\n\r\n         supported_attrs, suppattr_exclcreat, fh_expire_type,\r\n         link_support, symlink_support, unique_handles, aclsupport,\r\n         cansettime, case_insensitive, case_preserving,\r\n         chown_restricted, files_avail, files_free, files_total,\r\n         fs_locations, homogeneous, maxfilesize, maxname, maxread,\r\n         maxwrite, no_trunc, space_avail, space_free, space_total,\r\n         time_delta, change_policy, fs_status, fs_layout_type,\r\n         fs_locations_info, fs_charset_cap\r\n\r\n   *  The per-file system object attributes are:\r\n\r\n         type, change, size, named_attr, fsid, rdattr_error, filehandle,\r\n         acl, archive, fileid, hidden, maxlink, mimetype, mode,\r\n         numlinks, owner, owner_group, rawdev, space_used, system,\r\n         time_access, time_backup, time_create, time_metadata,\r\n         time_modify, mounted_on_fileid, dir_notif_delay,\r\n         dirent_notif_delay, dacl, sacl, layout_type, layout_hint,\r\n         layout_blksize, layout_alignment, mdsthreshold, retention_get,\r\n         retention_set, retentevt_get, retentevt_set, retention_hold,\r\n         mode_set_masked", "correct_text": "   *  The per-file system attributes are:\r\n\r\n         fsid, supported_attrs, suppattr_exclcreat, fh_expire_type,\r\n         link_support, symlink_support, unique_handles, aclsupport,\r\n         cansettime, case_insensitive, case_preserving,\r\n         chown_restricted, files_avail, files_free, files_total,\r\n         fs_locations, homogeneous, maxfilesize, maxname, maxread,\r\n         maxwrite, no_trunc, space_avail, space_free, space_total,\r\n         time_delta, change_policy, fs_status, fs_layout_type,\r\n         fs_locations_info, fs_charset_cap\r\n\r\n   *  The per-file system object attributes are:\r\n\r\n         type, change, size, named_attr, rdattr_error, filehandle,\r\n         acl, archive, fileid, hidden, maxlink, mimetype, mode,\r\n         numlinks, owner, owner_group, rawdev, space_used, system,\r\n         time_access, time_backup, time_create, time_metadata,\r\n         time_modify, mounted_on_fileid, dir_notif_delay,\r\n         dirent_notif_delay, dacl, sacl, layout_type, layout_hint,\r\n         layout_blksize, layout_alignment, mdsthreshold, retention_get,\r\n         retention_set, retentevt_get, retentevt_set, retention_hold,\r\n         mode_set_masked", "notes": "The per-file system attribute in section 5.4 is defined as:\r\nThe value of the attribute will be the same for some or all file objects that share the same fsid attribute (Section 5.8.1.9).\r\n\r\nSo the fsid attribute needs to be classified as the per-file system attribute too, not as the per-file system object.", "submit_date": "2026-01-23", "submitter_name": "Pali Roh\u00e1r", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5707", "doc-id": "RFC8410", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "", "correct_text": "", "notes": "In the example certificate, the critical-field of extensions keyUsage and subjectKeyIdentifier are of default value 'false'. They should not be included according to DER encoding rule.", "submit_date": "2019-04-29", "submitter_name": "Lijun Liao", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5708", "doc-id": "RFC6749", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1 and 3.2", "orig_text": "Parameters sent without a value MUST be treated as if they were\r\nomitted from the request.  The authorization server MUST ignore\r\nunrecognized request parameters.  Request and response parameters\r\nMUST NOT be included more than once.", "correct_text": "Parameters sent without a value MUST be treated as if they were\r\nomitted from the request.  The authorization server MUST ignore\r\nunrecognized request parameters.  Request and response parameters\r\ndefined by this specification MUST NOT be included more than once.", "notes": "Adds the text \"defined by this specification\" to the last sentence to clarify that the restriction only applies to parameters defined in RFC 6749 and not to unrecognized parameters or parameters defined by extension.", "submit_date": "2019-04-29", "submitter_name": "Brian Campbell", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-17 14:07:04"}, {"errata_id": "5709", "doc-id": "RFC8410", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "-", "correct_text": "-", "notes": "The example certificate is a self-signed certificate containing X25519 public key. Unlike standard EC public key, the public key for key exchange is NOT the same as the one for digital signature in curve25519. That means, for the same private key, the public keys for X25519 and for Ed25519 are different. As a result, the public key in the self-signed certificate can NOT be used to verify the signature. In this context, please replace the example certificate by one containing the Ed25519 public key.\n --VERIFIER NOTES-- \nX25519 keys are only capable of key agreement, not signing, so by necessity a self-issued X25519 certificate cannot be self-signed.  This document specifies, among other things, how to encode  X25519 public keys into X.509 certificates, and so the example is accordingly a self-issued but not self-signed certificate.  The issuing certificate has the same subject name but a different key (and key type).", "submit_date": "2019-04-29", "submitter_name": "Lijun Liao", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5710", "doc-id": "RFC8392", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1.1", "orig_text": "In JSON, maps are called objects and only have one kind of map key: a\r\n   string.  CBOR uses strings, negative integers, and unsigned integers\r\n   as map keys.", "correct_text": "In JSON, maps are called objects and only have one kind of map key:\r\na string.  CBOR allows other data types, such as strings, negative\r\nintegers, and unsigned integers, as map keys.", "notes": "The text as it stands risks an interpretation that CBOR limits map keys to integers and strings; per discussion on the CBOR mailing list, this is not the case.", "submit_date": "2019-04-29", "submitter_name": "Felipe Gasper", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 02:22:25"}, {"errata_id": "5711", "doc-id": "RFC5321", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "D.3", "orig_text": "      C: Bill:\r\n      C: The next meeting of the board of directors will be\r\n      C: on Tuesday.\r\n      C: John.", "correct_text": "      C: Bill:\r\n      C: The next meeting of the board of directors will be\r\n      C: on Tuesday.\r\n      C:                         John.", "notes": "Since step 1 and step 2 are transmitting the same message, the relay host should not change its body.\r\n\r\nThe previous version of this document, RFC 2821, had the \"John.\" signature centered by padding spaces before it on both steps, not just step 2.", "submit_date": "2019-04-29", "submitter_name": "Guillaume Fortin-Debigar\u00e9", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-13 20:48:58"}, {"errata_id": "5724", "doc-id": "RFC6514", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "11.1.3", "orig_text": "The Source AS field in the C-multicast\r\nroute is set to value of the Originating Router's IP Address field of\r\nthe found Intra-AS I-PMSI A-D route.\r\n", "correct_text": "The Source AS field in the C-multicast\r\nroute is set to value of the Originating Router's IP Address field of\r\nthe found Intra-AS I-PMSI A-D route when the Originating Router's IP \r\nAddress is an IPv4 address.\r\n", "notes": "Source AS field in C-multicast route is a 4-octet field, and only an IPv4 address is possible to be filled in it. The Originating Router's IP Address can be an IPv6 address according to RFC6515.", "submit_date": "2019-05-20", "submitter_name": "Jingrong Xie", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-06-22 19:23:11"}, {"errata_id": "7398", "doc-id": "RFC8895", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "     \"my-network-map\": {\r\n       \"uri\": \"https://alto.example.com/networkmap\",\r\n       \"media-type\": \"application/alto-networkmap+json\",\r\n     },\r\n     ...", "correct_text": "     \"my-network-map\": {\r\n       \"uri\": \"https://alto.example.com/networkmap\",\r\n       \"media-type\": \"application/alto-networkmap+json\"\r\n     },\r\n     ...", "notes": "The OLD text includes a trailing \",\"", "submit_date": "2023-03-20", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 22:53:04"}, {"errata_id": "5712", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.2", "orig_text": "   FWS             =   ([*WSP CRLF] 1*WSP) /  obs-FWS\r\n                                          ; Folding white space", "correct_text": "   FWS             =   ([*WSP] CRLF 1*WSP) /  obs-FWS\r\n                                          ; Folding white space", "notes": "Both section 2.2.3 and part of section 3.2.2 (\"Wherever folding appears in a message (that is, a header field body containing a CRLF followed by any WSP)\") describe folding as adding CRLF followed by WSP, so CRLF is required for folding.  However, the CRLF in the FWS rule is shown inside the square brackets, which would make it optional.  It should not be inside the square brackets.\r\n\r\nSquare brackets:  section 1.2.2 states \"This specification uses the Augmented Backus-Naur Form (ABNF) [RFC5234] notation for the formal definitions of the syntax of messages.\"  In RFC 5234, section 3.8 states \"Square brackets enclose an optional element sequence\".\n --VERIFIER NOTES-- \n \r\nThe FWS construct shows where folding is permitted (where CRLF *can* appear).  The mechanism for actual folding is described in the text, and won't happen at each instance of FWS.  Having the CRLF be optional is intentional and necessary.", "submit_date": "2019-04-29", "submitter_name": "Victor Shrubowich", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5713", "doc-id": "RFC6376", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.8", "orig_text": "FWS =   [*WSP CRLF] 1*WSP", "correct_text": "FWS =   [*WSP] CRLF 1*WSP", "notes": "In the ABNF RFC ([RFC5234]), section 3.8 states \"Square brackets enclose an optional element sequence\".\r\n\r\nCRLF is required for folding.  However, the CRLF in the FWS rule is shown inside the square brackets, which would make it optional. It should not be inside the square brackets.\r\n\r\n(See Errata ID 5712 for FWS in [RFC5322], which is referenced at the end of section 2.8.)\n --VERIFIER NOTES-- \nAs noted by Dave Crocker, Folding White Space is a construct that permits a newline but does not require it -- only whitespace of  some form is required to be present in order  to match, not a specific kind of  whitespace.  The present construction, as corresponds  to RFC 5322, is as intended.", "submit_date": "2019-04-30", "submitter_name": "Victor Shrubowich", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5714", "doc-id": "RFC4180", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5, 6", "orig_text": "Section 5: \r\n  \"aaa\",\"bbb\",\"ccc\" CRLF\r\nSection 6: \r\n  \"aaa\",\"b CRLF\r\n  bb\",\"ccc\" CRLF\r\n  zzz,yyy,xxx\r\n", "correct_text": "Section 5:\r\n  \"aaa\",\"bbb\",\"ccc\"CRLF\r\nSection 6:\r\n  \"aaa\",\"b CRLF\r\n  bb\",\"ccc\"CRLF\r\n  zzz,yyy,xxx\r\n", "notes": "As implied in the ABNF grammar, escaped (quoted) fields may not be followed by a space.\r\nThe corrected text removes those spaces from the examples, making them syntactically correct.", "submit_date": "2019-05-01", "submitter_name": "Damon Koach", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5715", "doc-id": "RFC8224", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "o  Second, the JSON \"dest\" array MUST be populated.  If the\r\n   destination identity is a telephone number, then the array MUST be\r\n   populated with a JSON object containing a \"tn\" element with a\r\n   value set to the value of the quoted destination identity, a\r\n   canonicalized telephone number (see Section 8.3).  Otherwise, the\r\n   array MUST be populated with a JSON object containing a \"uri\"\r\n   element, set to the value of the addr-spec component of the\r\n   To header field, which is the AoR to which the request is being\r\n   sent, per the procedures in Section 8.5.  Multiple JSON objects\r\n   are permitted in \"dest\" for future compatibility reasons.\r\n\r\n...\r\n\r\nThe \"orig\" and \"dest\" arrays may contain identifiers of heterogeneous\r\ntype; for example, the \"orig\" array might contain a \"tn\" claim, while\r\nthe \"dest\" contains a \"uri\" claim.  Also note that in some cases, the\r\n\"dest\" array may be populated with more than one value.  This could,\r\nfor example, occur when multiple \"dest\" identities are specified in a\r\nmeshed conference.  Defining how a SIP implementation would align\r\nmultiple destination identities in PASSporT with such systems is left\r\nas a subject for future specifications.", "correct_text": "o  Second, the JSON \"dest\" object MUST be populated.  If the\r\n   destination identity is a telephone number, then the object MUST\r\n   contain a \"tn\" element with a value set to an array containing the\r\n   value of the quoted destination identity, a\r\n   canonicalized telephone number (see Section 8.3).  Otherwise, the\r\n   object MUST contain a \"uri\" element, set to an array containing\r\n   the value of the addr-spec component of the\r\n   To header field, which is the AoR to which the request is being\r\n   sent, per the procedures in Section 8.5.  Additional elements\r\n   are permitted in \"dest\" for future compatibility reasons.\r\n\r\n...\r\n\r\nThe \"orig\" and \"dest\" objects may contain identifiers of heterogeneous\r\ntype; for example, the \"orig\" object might contain a \"tn\" claim, while\r\nthe \"dest\" contains a \"uri\" claim.  Also note that in some cases, the\r\n\"dest\" object may be populated with more than one claim, and its claim\r\nvalue arrays may contain more than one value.  This could,\r\nfor example, occur when multiple \"dest\" identities are specified in a\r\nmeshed conference.  Defining how a SIP implementation would align\r\nmultiple destination identities in PASSporT with such systems is left\r\nas a subject for future specifications.", "notes": "The description of the \"dest\" element does not match RFC8225 or the example that is provided in this section.\r\n\r\nThe terminology is a bit less clear than in RFC8225 section 5.2.1, in that no differentiation is made between the top level \"claims\" and embedded \"identity claims\". The proposed correction does not address this lack of clarity, however.\r\n\r\nFrom RFC8225 section 5.2.1:\r\n\r\nThe \"dest\" claim is a JSON object with the claim name of \"dest\" and\r\nMUST have at least one identity claim object.  The \"dest\" claim value\r\nis an array containing one or more identity claim JSON objects\r\nrepresenting the destination identities of any type (currently \"tn\"\r\nor \"uri\").  If the \"dest\" claim value array contains both \"tn\" and\r\n\"uri\" claim names, the JSON object should list the \"tn\" array first\r\nand the \"uri\" array second.  Within the \"tn\" and \"uri\" arrays, the\r\nidentity strings should be put in lexicographical order, including\r\nthe scheme-specific portion of the URI characters.\r\n\r\n(The above text might need correction as well, because it refers to the '\"dest\" claim value array'.)", "submit_date": "2019-05-01", "submitter_name": "Alex Lee", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 20:57:23"}, {"errata_id": "5716", "doc-id": "RFC4291", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.5", "orig_text": "   A slightly sophisticated host (but still rather simple) may\r\n   additionally be aware of subnet prefix(es) for the link(s) it is\r\n   attached to, where different addresses may have different values for\r\n   n:", "correct_text": "   For Link-Local unicast addresses, which comprise a flat address\r\n   space that is reused on every link, the consideration above is all\r\n   that is relevant. For Global Unicast addresses, however, a slightly\r\n   sophisticated host (but still rather simple) may additionally be\r\n   aware of subnet prefix(es) for the link(s) it is attached to, where\r\n   different addresses may have different values for n:\r\n", "notes": "Text in several sections of 4291 seem to be logically inconsistent with respect to Link-Local unicast addresses. The inconsistency spans Sections 2.1, 2.5 and 2.5.6.\r\n\r\nSection 2.5 says that unicast addresses, including Link-Local unicast addresses, on links a host is attached to have the following internal structure, providing a definition for \"subnet prefix\":\r\n\r\n   |          n bits               |           128-n bits            |\r\n   +-------------------------------+---------------------------------+\r\n   |       subnet prefix           |           interface ID          |\r\n   +-------------------------------+---------------------------------+\r\n\r\nSection 2.5.6 specifies that Link-Local unicast addresses have the following format:\r\n\r\n   |   10     |\r\n   |  bits    |         54 bits         |          64 bits           |\r\n   +----------+-------------------------+----------------------------+\r\n   |1111111010|           0             |       interface ID         |\r\n   +----------+-------------------------+----------------------------+\r\n\r\nApplying the Section 2.5 definition, Link-Local unicast addresses hence have a subnet prefix of fe80::/64 on every link.\r\n\r\nSection 2.1 says this about the addressing model:\r\n\r\n   Currently, IPv6 continues the IPv4 model in that a subnet prefix is\r\n   associated with one link.\r\n\r\nClearly the use of a same Link-Local unicast subnet prefix on every link is inconsistent with an addressing model that requires a subnet prefix to be unique to one link. The plain reading of this text is that it disagrees with itself, so either something needs to change to bring it into agreement or some explanation of how this is in fact consistent needs to be made. Since I don't know what the intent of this was I don't really know what needs fixing.\r\n\r\nThe proposed text hence reflects my personal biases; while I understand subnet prefix uniqueness to be foundational to the forwarding behaviour of Global Unicasts I have no idea what a \"subnet prefix\" even means in the context of Link-Local unicasts. The proposed text hence modifies Section 2.5 to exclude Link-Local addresses from the part of that section defining a \"subnet prefix\" and instead be defines them to provide a flat address space that is reused on every link. That is, Link-Local addresses are defined without a subnet prefix.\r\n\r\nThis leaves the Section 2.1 statement about subnet prefixes, and the forwarding behaviour implied by that, applicable to Global Unicast addresses but inapplicable to Link-Local addresses. Given this Section 2.5.6 can be read to be solely a constraint on Link-Local address construction, i.e. requiring SLAAC and other methods of Link-Local configuration to only produce addresses from that subset, without any implication for forwarding behaviour that \"subnet prefix\" might suggest.\r\n\r\nThat this general topic seems to produce periodic flurries of concern might be an indication that greater clarity in specification here might be useful.", "submit_date": "2019-05-01", "submitter_name": "Dennis Ferguson", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5754", "doc-id": "RFC7664", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.2", "orig_text": "      do {\r\n        base = H(max(Alice,Bob) | min(Alice,Bob) | password | counter)\r\n        temp = KDF-n(seed, \"Dragonfly Hunting And Pecking\")\r\n        seed = (temp mod (p - 1)) + 1", "correct_text": "      do {\r\n        base = H(max(Alice,Bob) | min(Alice,Bob) | password | counter)\r\n        temp = KDF-n(base, \"Dragonfly Hunting And Pecking\")\r\n        seed = (temp mod (p - 1)) + 1", "notes": "A variable \"seed\" is passed to the function KDF-n before defined. It should be the variable \"base\" instead of \"seed\". The variable \"base\" is passed to KDF-n in Figure 1.\r\n\r\nVerified by Kenny Paterson and Dan Harkins, June 2019. ", "submit_date": "2019-06-16", "submitter_name": "Araki Makoto", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2020-06-06 12:49:02"}, {"errata_id": "5755", "doc-id": "RFC2694", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "DNS_ALG would simply simply respond back", "correct_text": "DNS_ALG would simply respond back", "notes": "Dups", "submit_date": "2019-06-18", "submitter_name": "Lee Chan Gyu", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5756", "doc-id": "RFC8040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "  module ietf-system {\r\n    leaf system-reset {\r\n      type empty;\r\n    }\r\n  }\r\n", "correct_text": "  module ietf-system {\r\n    leaf system-restart {\r\n      type empty;\r\n    }\r\n  }\r\n", "notes": "The section on page 84 discusses the \"system-restart\" RPC from RFC 7317, but the conceptual example has \"system-reset\".  Fix: s/system-reset/system-restart/.", "submit_date": "2019-06-21", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5717", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.2.", "orig_text": " Figure 3 shows a pair of handshakes in which the first handshake\r\n   establishes a PSK and the second handshake uses it:\r\n \r\n          Client                                               Server\r\n \r\n   Initial Handshake:\r\n          ClientHello\r\n          + key_share               -------->\r\n                                                          ServerHello\r\n                                                          + key_share\r\n                                                {EncryptedExtensions}\r\n                                                {CertificateRequest*}\r\n                                                       {Certificate*}\r\n                                                 {CertificateVerify*}\r\n                                                           {Finished}\r\n                                    <--------     [Application Data*]\r\n          {Certificate*}\r\n          {CertificateVerify*}\r\n          {Finished}                -------->\r\n                                    <--------      [NewSessionTicket]\r\n          [Application Data]        <------->      [Application Data]\r\n \r\n \r\n   Subsequent Handshake:\r\n          ClientHello\r\n          + key_share*\r\n          + pre_shared_key          -------->\r\n                                                          ServerHello\r\n                                                     + pre_shared_key\r\n                                                         + key_share*\r\n                                                {EncryptedExtensions}\r\n                                                           {Finished}\r\n                                    <--------     [Application Data*]\r\n          {Finished}                -------->\r\n          [Application Data]        <------->      [Application Data]\r\n \r\n               Figure 3: Message Flow for Resumption and PSK\r\n", "correct_text": " Figure 3 shows a pair of handshakes in which the first handshake\r\n   establishes a PSK and the second handshake uses it:\r\n \r\n          Client                                               Server\r\n \r\n   Initial Handshake:\r\n          ClientHello\r\n          + key_share               -------->\r\n                                                          ServerHello\r\n                                                          + key_share\r\n                                                {EncryptedExtensions}\r\n                                                {CertificateRequest*}\r\n                                                       {Certificate*}\r\n                                                 {CertificateVerify*}\r\n                                                           {Finished}\r\n                                    <--------     [Application Data*]\r\n          {Certificate*}\r\n          {CertificateVerify*}\r\n          {Finished}                -------->\r\n                                    <--------      [NewSessionTicket]\r\n          [Application Data]        <------->      [Application Data]\r\n \r\n \r\n   Subsequent Handshake:\r\n          ClientHello\r\n          + key_share*\r\n          + psk_key_exchange_modes        \r\n          + pre_shared_key          -------->\r\n\r\n                                                          ServerHello\r\n                                                     + pre_shared_key\r\n                                                         + key_share*\r\n                                                {EncryptedExtensions}\r\n                                                           {Finished}\r\n                                    <--------     [Application Data*]\r\n          {Finished}                -------->\r\n          [Application Data]        <------->      [Application Data]\r\n \r\n               Figure 3: Message Flow for Resumption and PSK\r\n", "notes": "The pre_shared_key requires the pre_share_key extension.\r\n\r\nThis Issue and PR should address this erratum:\r\nhttps://github.com/tlswg/tls13-spec/issues/1344\r\nhttps://github.com/tlswg/tls13-spec/pull/1345\r\n", "submit_date": "2019-05-03", "submitter_name": "Daniel Migault", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-29 01:17:26"}, {"errata_id": "5718", "doc-id": "RFC7432", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "5.  Ethernet Segment\r\n   - Type 4 (T=0x04)\r\n     + Local Discriminator value (4 octets).  The Local Discriminator\r\n       value MUST be encoded in the 4 octets next to the IP address.", "correct_text": "     + Local Discriminator value (4 octets).  The Local Discriminator\r\n       value MUST be encoded in the 4 octets next to the Router ID.", "notes": "Since the field before that is defined as \"Router ID\", the notation of \"IP address\" is not correct.", "submit_date": "2019-05-03", "submitter_name": "Kazuhiko Mino", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5719", "doc-id": "RFC8531", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "   There are several RPC commands defined for the purpose of OAM.  In\r\n   this section, we present a snippet of the Continuity Check command\r\n   for illustration purposes.  Please refer to Section 4.5 for the\r\n   complete data hierarchy and Section 5 for the YANG module.\r\n", "correct_text": "   There are several RPC commands defined for the purpose of OAM.  In\r\n   this section, we present a snippet of the Continuity Check command\r\n   for illustration purposes.  Please refer to Section 4.7 for the\r\n   complete data hierarchy and Section 5 for the YANG module.\r\n", "notes": "Incorrect Section No.", "submit_date": "2019-05-05", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5720", "doc-id": "RFC8448", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "00 0d 00 20 00 1e 04 03 05 03 06 03 02 03 08 04 08 05\r\n08 06 04 01 05 01 06 01 02 01 04 02 05 02 06 02 02 02 \r\n\r\n", "correct_text": "00 0d 00 18 00 16 04 03 05 03 06 03 02 03 08 04 08 05\r\n08 06 04 01 05 01 06 01 02 01", "notes": "The traces all show DSA signature schemes in ClientHello messages.  The use of these is prohibited by RFC 8446.  To be compliant, these would be removed.\r\n\r\nNote that this isn't a simple substitution as implied above.  The length fields on all of the messages would also need to be reduced by 8 in addition to making the substitution.  The value of the PSK binders used in the resumption case in Section 4 would need to be recalculated also.", "submit_date": "2019-05-05", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5721", "doc-id": "RFC8299", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2.1.", "orig_text": "Hub_Site ------- (VRF_Hub)  PE1\r\n                               (VRF_Spoke)\r\n                                  /  |\r\n  Spoke_Site1 -------------------+   |\r\n                                     |\r\n  Spoke_Site2 -----------------------+", "correct_text": "Hub_Site ------- (VRF_Hub)  PE1\r\n                             (VRF_Spoke1) (VRF_Spoke2)\r\n                                  /            |\r\n  Spoke_Site1 -------------------+             |\r\n                                               |\r\n  Spoke_Site2 ---------------------------------+", "notes": "Submitter's comment:\r\n\r\nOn the picture, two spoke sites (\u201cSpoke_Site1\u201d, \u201cSpoke_Site2\u201d) are using the same VRF (\u201cVRF_Spoke\u201d) in PE1 router. For Hub and Spoke topology, it seems confusing. The spoke sites must not have a common routing table in the device and each spoke site must have its own VRF if there are more than one site using the same physical router.\r\n\r\nVerifier's comment:\r\n\r\nSubsequent discussion with the authors came to the conclusion that while the diagram is not technically wrong (for example, a single VRF could be used with policies to control inter-site communication), it would represent a very unusual configuration and therefore isn't a great choice as an example. The proposed replacement text represents the common deployment model and would be a better example.", "submit_date": "2019-05-01", "submitter_name": "Ivan Frolov", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-05-14 01:05:10"}, {"errata_id": "5725", "doc-id": "RFC5819", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "3.  Examples\r\n\r\n   C: A01 LIST \"\" % RETURN (STATUS (MESSAGES UNSEEN))\r\n   S: * LIST () \".\"  \"INBOX\"\r\n   S: * STATUS \"INBOX\" (MESSAGES 17 UNSEEN 16)\r\n   S: * LIST () \".\" \"foo\"\r\n   S: * STATUS \"foo\" (MESSAGES 30 UNSEEN 29)\r\n   S: * LIST (\\NoSelect) \".\" \"bar\"\r\n   S: A01 OK List completed.\r\n\r\n   The \"bar\" mailbox isn't selectable, so it has no STATUS reply.\r\n\r\n   C: A02 LIST (SUBSCRIBED RECURSIVEMATCH)\"\" % RETURN (STATUS\r\n      (MESSAGES))\r\n   S: * LIST (\\Subscribed) \".\"  \"INBOX\"\r\n   S: * STATUS \"INBOX\" (MESSAGES 17)\r\n   S: * LIST () \".\" \"foo\" (CHILDINFO (\"SUBSCRIBED\"))\r\n   S: A02 OK List completed.", "correct_text": "3.  Examples\r\n\r\n   C: A01 LIST \"\" % RETURN (STATUS (MESSAGES UNSEEN))\r\n   S: * LIST () \".\" \"INBOX\"\r\n   S: * STATUS \"INBOX\" (MESSAGES 17 UNSEEN 16)\r\n   S: * LIST () \".\" \"foo\"\r\n   S: * STATUS \"foo\" (MESSAGES 30 UNSEEN 29)\r\n   S: * LIST (\\NoSelect) \".\" \"bar\"\r\n   S: A01 OK List completed.\r\n\r\n   The \"bar\" mailbox isn't selectable, so it has no STATUS reply.\r\n\r\n   C: A02 LIST (SUBSCRIBED RECURSIVEMATCH)\"\" % RETURN (STATUS\r\n      (MESSAGES))\r\n   S: * LIST (\\Subscribed) \".\" \"INBOX\"\r\n   S: * STATUS \"INBOX\" (MESSAGES 17)\r\n   S: * LIST () \".\" \"foo\" (CHILDINFO (\"SUBSCRIBED\"))\r\n   S: A02 OK List completed.", "notes": "Lines 141 and 152 each contain two spaces between \"\".\"\" and \"\"INBOX\"\" instead of one.  While I had the instinct to mark these as editorial, these sample server responses have also ended up in another RFC and two IDs (which were corrected before they became RFCs).  In any event, given that these responses also violate the ABNF, and given the RFC Ed.'s guideline on ambiguity, I'm just marking them as technical.  I'll leave it to others more familiar with the practical issues for various implementers to make the final determination on how to label them.\r\n\r\nPlease note:  a previously verified erratum (Errata ID 2072) addresses this same section; I've just left the corresponding error as is in this corrected text.\r\n\r\n----- Verifier notes -----\r\nYes, this is an error: it comes from a combination of the RFC Editor style of double-spacing between sentences, the construction of the examples in XML in a manner that doesn't distinguish them from sentences, and the fact that it's nearly impossible to notice the situation when one is giving a final review.\r\n\r\nEditorial, though, because it's in examples.  The ABNF is the authoritative place, and that's correct.", "submit_date": "2019-05-20", "submitter_name": "Stan Kalisch", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5723", "doc-id": "RFC4226", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "The HOTP client (hardware or software token) increments its counter\r\nand then calculates the next HOTP value HOTP client.", "correct_text": "The HOTP client (hardware or software token) increments its counter\r\nand then calculates the next HOTP value.", "notes": "Stray \"HOTP client\" at the end of the sentence (for no reason).", "submit_date": "2019-05-18", "submitter_name": "Adam Sorini", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 16:20:29"}, {"errata_id": "5726", "doc-id": "RFC7889", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   C: t1 LIST \"\" % RETURN (STATUS (APPENDLIMIT))\r\n   S: * LIST () \".\"  \"INBOX\"\r\n   S: * STATUS \"INBOX\" (APPENDLIMIT 257890)\r\n   S: t1 OK List completed.", "correct_text": "   C: t1 LIST \"\" % RETURN (STATUS (APPENDLIMIT))\r\n   S: * LIST () \".\" \"INBOX\"\r\n   S: * STATUS \"INBOX\" (APPENDLIMIT 257890)\r\n   S: t1 OK List completed.", "notes": "Line 198 contains two spaces between \"\".\"\" and \"\"INBOX\"\" instead of one.  While I had the instinct to mark this as editorial, this sample server response, whose genesis appears to be RFC 5819, ended up in two IDs (which were corrected before they became RFCs) as well.  In any event, given that this response also violates the ABNF, and given the RFC Ed.'s guideline on ambiguity, I'm just marking it as technical.  I'll leave it to others more familiar with the practical issues for various implementers to make the final determination on how to label it.\r\n\r\n----- Verifier notes -----\r\nYes, this is an error: it comes from a combination of the RFC Editor style of double-spacing between sentences, the construction of the examples in XML in a manner that doesn't distinguish them from sentences, and the fact that it's nearly impossible to notice the situation when one is giving a final review.\r\n\r\nEditorial, though, because it's in examples.  The ABNF is the authoritative place, and that's correct.", "submit_date": "2019-05-20", "submitter_name": "Stan Kalisch", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5727", "doc-id": "RFC8492", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   username: fred\r\n   password: barney\r\n\r\n   ---- prior to running TLS-PWD ----\r\n\r\n   server generates salt:\r\n\r\n   96 3c 77 cd c1 3a 2a 8d 75 cd dd d1 e0 44 99 29\r\n   84 37 11 c2 1d 47 ce 6e 63 83 cd da 37 e4 7d a3\r\n\r\n   and a base:\r\n\r\n   6e 7c 79 82 1b 9f 8e 80 21 e9 e7 e8 26 e9 ed 28\r\n   c4 a1 8a ef c8 75 0c 72 6f 74 c7 09 61 d7 00 75\r\n\r\n   ---- state derived during the TLS-PWD exchange ----\r\n\r\n   client and server agree to use brainpoolP256r1\r\n\r\n   client and server generate the PE:\r\n\r\n   PE.x:\r\n   29 b2 38 55 81 9f 9c 3f c3 71 ba e2 84 f0 93 a3\r\n   a4 fd 34 72 d4 bd 2e 9d f7 15 2d 22 ab 37 aa e6\r\n\r\n   server private and mask:\r\n\r\n   private:\r\n   21 d9 9d 34 1c 97 97 b3 ae 72 df d2 89 97 1f 1b\r\n   74 ce 9d e6 8a d4 b9 ab f5 48 88 d8 f6 c5 04 3c\r\n   mask:\r\n   0d 96 ab 62 4d 08 2c 71 25 5b e3 64 8d cd 30 3f\r\n   6a b0 ca 61 a9 50 34 a5 53 e3 30 8d 1d 37 44 e5\r\n\r\n   client private and mask:\r\n\r\n   private:\r\n   17 1d e8 ca a5 35 2d 36 ee 96 a3 99 79 b5 b7 2f\r\n   a1 89 ae 7a 6a 09 c7 7f 7b 43 8a f1 6d f4 a8 8b\r\n   mask:\r\n   4f 74 5b df c2 95 d3 b3 84 29 f7 eb 30 25 a4 88\r\n   83 72 8b 07 d8 86 05 c0 ee 20 23 16 a0 72 d1 bd\r\n\r\n   both parties generate premaster secret and master secret\r\n\r\n   premaster secret:\r\n   01 f7 a7 bd 37 9d 71 61 79 eb 80 c5 49 83 45 11\r\n   af 58 cb b6 dc 87 e0 18 1c 83 e7 01 e9 26 92 a4\r\n   master secret:\r\n   65 ce 15 50 ee ff 3d aa 2b f4 78 cb 84 29 88 a1\r\n   60 26 a4 be f2 2b 3f ab 23 96 e9 8a 7e 05 a1 0f\r\n   3d 8c ac 51 4d da 42 8d 94 be a9 23 89 18 4c ad\r\n\r\n   ---- ssldump output of exchange ----\r\n\r\n   New TCP connection #1: Charlene Client <-> Sammy Server\r\n   1 1  0.0018 (0.0018)  C>SV3.3(173)  Handshake\r\n         ClientHello\r\n           Version 3.3\r\n           random[32]=\r\n             52 8f bf 52 17 5d e2 c8 69 84 5f db fa 83 44 f7\r\n             d7 32 71 2e bf a6 79 d8 64 3c d3 1a 88 0e 04 3d\r\n           ciphersuites\r\n           TLS_ECCPWD_WITH_AES_128_GCM_SHA256_PRIV\r\n           TLS_ECCPWD_WITH_AES_256_GCM_SHA384_PRIV\r\n           Unknown value 0xff\r\n           compression methods\r\n                     NULL\r\n           extensions\r\n           TLS-PWD unprotected name[5]=\r\n             04 66 72 65 64\r\n           elliptic curve point format[4]=\r\n             03 00 01 02\r\n           elliptic curve list[58]=\r\n             00 38 00 0e 00 0d 00 1c 00 19 00 0b 00 0c 00 1b\r\n             00 18 00 09 00 0a 00 1a 00 16 00 17 00 08 00 06\r\n             00 07 00 14 00 15 00 04 00 05 00 12 00 13 00 01\r\n             00 02 00 03 00 0f 00 10 00 11\r\n   Packet data[178]=\r\n     16 03 03 00 ad 01 00 00 a9 03 03 52 8f bf 52 17\r\n     5d e2 c8 69 84 5f db fa 83 44 f7 d7 32 71 2e bf\r\n     a6 79 d8 64 3c d3 1a 88 0e 04 3d 00 00 06 ff b3\r\n     ff b4 00 ff 01 00 00 7a b8 aa 00 05 04 66 72 65\r\n     64 00 0b 00 04 03 00 01 02 00 0a 00 3a 00 38 00\r\n     0e 00 0d 00 1c 00 19 00 0b 00 0c 00 1b 00 18 00\r\n     09 00 0a 00 1a 00 16 00 17 00 08 00 06 00 07 00\r\n     14 00 15 00 04 00 05 00 12 00 13 00 01 00 02 00\r\n     03 00 0f 00 10 00 11 00 0d 00 22 00 20 06 01 06\r\n     02 06 03 05 01 05 02 05 03 04 01 04 02 04 03 03\r\n     01 03 02 03 03 02 01 02 02 02 03 01 01 00 0f 00\r\n     01 01\r\n\r\n   1 2  0.0043 (0.0024)  S>CV3.3(94)  Handshake\r\n         ServerHello\r\n           Version 3.3\r\n           random[32]=\r\n             52 8f bf 52 43 78 a1 b1 3b 8d 2c bd 24 70 90 72\r\n             13 69 f8 bf a3 ce eb 3c fc d8 5c bf cd d5 8e aa\r\n           session_id[32]=\r\n             ef ee 38 08 22 09 f2 c1 18 38 e2 30 33 61 e3 d6\r\n             e6 00 6d 18 0e 09 f0 73 d5 21 20 cf 9f bf 62 88\r\n           cipherSuite         TLS_ECCPWD_WITH_AES_128_GCM_SHA256_PRIV\r\n           compressionMethod                   NULL\r\n           extensions\r\n           renegotiate[1]=\r\n             00\r\n           elliptic curve point format[4]=\r\n             03 00 01 02\r\n           heartbeat[1]=\r\n             01\r\n   Packet data[99]=\r\n     16 03 03 00 5e 02 00 00 5a 03 03 52 8f bf 52 43\r\n     78 a1 b1 3b 8d 2c bd 24 70 90 72 13 69 f8 bf a3\r\n     ce eb 3c fc d8 5c bf cd d5 8e aa 20 ef ee 38 08\r\n     22 09 f2 c1 18 38 e2 30 33 61 e3 d6 e6 00 6d 18\r\n     0e 09 f0 73 d5 21 20 cf 9f bf 62 88 ff b3 00 00\r\n     12 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 0f\r\n     00 01 01\r\n\r\n   1 3  0.0043 (0.0000)  S>CV3.3(141)  Handshake\r\n         ServerKeyExchange\r\n           params\r\n             salt[32]=\r\n               96 3c 77 cd c1 3a 2a 8d 75 cd dd d1 e0 44 99 29\r\n               84 37 11 c2 1d 47 ce 6e 63 83 cd da 37 e4 7d a3\r\n             EC parameters = 3\r\n             curve id = 26\r\n             element[65]=\r\n               04 22 bb d5 6b 48 1d 7f a9 0c 35 e8 d4 2f cd 06\r\n               61 8a 07 78 de 50 6b 1b c3 88 82 ab c7 31 32 ee\r\n               f3 7f 02 e1 3b d5 44 ac c1 45 bd d8 06 45 0d 43\r\n               be 34 b9 28 83 48 d0 3d 6c d9 83 24 87 b1 29 db\r\n               e1\r\n             scalar[32]=\r\n               2f 70 48 96 69 9f c4 24 d3 ce c3 37 17 64 4f 5a\r\n               df 7f 68 48 34 24 ee 51 49 2b b9 66 13 fc 49 21\r\n   Packet data[146]=\r\n     16 03 03 00 8d 0c 00 00 89 00 20 96 3c 77 cd c1\r\n     3a 2a 8d 75 cd dd d1 e0 44 99 29 84 37 11 c2 1d\r\n     47 ce 6e 63 83 cd da 37 e4 7d a3 03 00 1a 41 04\r\n     22 bb d5 6b 48 1d 7f a9 0c 35 e8 d4 2f cd 06 61\r\n     8a 07 78 de 50 6b 1b c3 88 82 ab c7 31 32 ee f3\r\n     7f 02 e1 3b d5 44 ac c1 45 bd d8 06 45 0d 43 be\r\n     34 b9 28 83 48 d0 3d 6c d9 83 24 87 b1 29 db e1\r\n     00 20 2f 70 48 96 69 9f c4 24 d3 ce c3 37 17 64\r\n     4f 5a df 7f 68 48 34 24 ee 51 49 2b b9 66 13 fc\r\n     49 21\r\n\r\n   1 4  0.0043 (0.0000)  S>CV3.3(4)  Handshake\r\n         ServerHelloDone\r\n   Packet data[9]=\r\n     16 03 03 00 04 0e 00 00 00\r\n\r\n   1 5  0.0086 (0.0043)  C>SV3.3(104)  Handshake\r\n         ClientKeyExchange\r\n           element[65]=\r\n             04 a0 c6 9b 45 0b 85 ae e3 9f 64 6b 6e 64 d3 c1\r\n             08 39 5f 4b a1 19 2d bf eb f0 de c5 b1 89 13 1f\r\n             59 5d d4 ba cd bd d6 83 8d 92 19 fd 54 29 91 b2\r\n             c0 b0 e4 c4 46 bf e5 8f 3c 03 39 f7 56 e8 9e fd\r\n             a0\r\n           scalar[32]=\r\n             66 92 44 aa 67 cb 00 ea 72 c0 9b 84 a9 db 5b b8\r\n             24 fc 39 82 42 8f cd 40 69 63 ae 08 0e 67 7a 48\r\n   Packet data[109]=\r\n     16 03 03 00 68 10 00 00 64 41 04 a0 c6 9b 45 0b\r\n     85 ae e3 9f 64 6b 6e 64 d3 c1 08 39 5f 4b a1 19\r\n     2d bf eb f0 de c5 b1 89 13 1f 59 5d d4 ba cd bd\r\n     d6 83 8d 92 19 fd 54 29 91 b2 c0 b0 e4 c4 46 bf\r\n     e5 8f 3c 03 39 f7 56 e8 9e fd a0 00 20 66 92 44\r\n     aa 67 cb 00 ea 72 c0 9b 84 a9 db 5b b8 24 fc 39\r\n     82 42 8f cd 40 69 63 ae 08 0e 67 7a 48\r\n\r\n   1 6  0.0086 (0.0000)  C>SV3.3(1)  ChangeCipherSpec\r\n   Packet data[6]=\r\n     14 03 03 00 01 01\r\n\r\n   1 7  0.0086 (0.0000)  C>SV3.3(40)  Handshake\r\n   Packet data[45]=\r\n     16 03 03 00 28 44 cd 3f 26 ed 64 9a 1b bb 07 c7\r\n     0c 6d 3e 28 af e6 32 b1 17 29 49 a1 14 8e cb 7a\r\n     0b 4b 70 f5 1f 39 c2 9c 7b 6c cc 57 20\r\n\r\n   1 8  0.0105 (0.0018)  S>CV3.3(1)  ChangeCipherSpec\r\n   Packet data[6]=\r\n     14 03 03 00 01 01\r\n\r\n   1 9  0.0105 (0.0000)  S>CV3.3(40)  Handshake\r\n   Packet data[45]=\r\n     16 03 03 00 28 fd da 3c 9e 48 0a e7 99 ba 41 8c\r\n     9f fd 47 c8 41 2c fd 22 10 77 3f 0f 78 54 5e 41\r\n     a2 21 94 90 12 72 23 18 24 21 c3 60 a4\r\n\r\n   1 10 0.0107 (0.0002)  C>SV3.3(100)  application_data\r\n   Packet data....", "correct_text": "   username: fred\r\n   password: barney\r\n\r\n   ---- prior to running TLS-PWD ----\r\n\r\n   server generates salt:\r\n\r\n   96 3c 77 cd c1 3a 2a 8d 75 cd dd d1 e0 44 99 29\r\n   84 37 11 c2 1d 47 ce 6e 63 83 cd da 37 e4 7d a3\r\n\r\n   and a base:\r\n\r\n   6e 7c 79 82 1b 9f 8e 80 21 e9 e7 e8 26 e9 ed 28\r\n   c4 a1 8a ef c8 75 0c 72 6f 74 c7 09 61 d7 00 75\r\n\r\n   ---- state derived during the TLS-PWD exchange ----\r\n\r\n   client and server agree to use brainpoolP256r1\r\n\r\n   client and server generate the PE:\r\n\r\n   PE.x:\r\n   00 68 6b 0d 3f c4 98 94  dd 62 1e c0 4f 92 5e 02\r\n   9b 2b 15 28 ed ed ca 46  00 72 54 28 1e 9a 6e dc\r\n\r\n   server private and mask:\r\n\r\n   private:\r\n   21 d9 9d 34 1c 97 97 b3 ae 72 df d2 89 97 1f 1b\r\n   74 ce 9d e6 8a d4 b9 ab f5 48 88 d8 f6 c5 04 3c\r\n   mask:\r\n   0d 96 ab 62 4d 08 2c 71 25 5b e3 64 8d cd 30 3f\r\n   6a b0 ca 61 a9 50 34 a5 53 e3 30 8d 1d 37 44 e5\r\n\r\n   client private and mask:\r\n\r\n   private:\r\n   17 1d e8 ca a5 35 2d 36 ee 96 a3 99 79 b5 b7 2f\r\n   a1 89 ae 7a 6a 09 c7 7f 7b 43 8a f1 6d f4 a8 8b\r\n   mask:\r\n   4f 74 5b df c2 95 d3 b3 84 29 f7 eb 30 25 a4 88\r\n   83 72 8b 07 d8 86 05 c0 ee 20 23 16 a0 72 d1 bd\r\n\r\n   both parties generate premaster secret and master secret\r\n\r\n   premaster secret:\r\n   a1 3e 9e a0 d3 56 ab 1d  97 55 a0 f7 33 9e f1 c1\r\n   21 b3 43 f5 2f f2 e6 7f  aa 4c 35 71 3b ed af b1\r\n\r\n   master secret:\r\n   f7 73 ba 1d dc a9 89 4c  8b 71 31 48 5a f9 5f dd\r\n   06 83 5e 18 13 26 dd b7  8f 36 03 ef 78 75 67 fb\r\n   01 e9 ad ba 7d e0 d6 0e  89 28 0b 43 74 8d 2f 53\r\n\r\n   ---- ssldump output of exchange ----\r\n\r\nNew TCP connection #1: Charlene Client <-> Sammy Server\r\n   1 1  0.0018 (0.0018)  C>SV3.3(173)  Handshake\r\n         ClientHello\r\n           Version 3.3\r\n           random[32]=\r\n             52 8f bf 52 17 5d e2 c8 69 84 5f db fa 83 44 f7\r\n             d7 32 71 2e bf a6 79 d8 64 3c d3 1a 88 0e 04 3d\r\n           ciphersuites\r\n           TLS_ECCPWD_WITH_AES_128_GCM_SHA256_PRIV\r\n           TLS_ECCPWD_WITH_AES_256_GCM_SHA384_PRIV\r\n           Unknown value 0xff\r\n           compression methods\r\n                     NULL\r\n           extensions\r\n           TLS-PWD unprotected name[5]=\r\n             04 66 72 65 64\r\n           elliptic curve point format[4]=\r\n             03 00 01 02\r\n           elliptic curve list[58]=\r\n             00 38 00 0e 00 0d 00 1c 00 19 00 0b 00 0c 00 1b\r\n             00 18 00 09 00 0a 00 1a 00 16 00 17 00 08 00 06\r\n             00 07 00 14 00 15 00 04 00 05 00 12 00 13 00 01\r\n             00 02 00 03 00 0f 00 10 00 11\r\n   Packet data[178]=\r\n     16 03 03 00 ad 01 00 00 a9 03 03 52 8f bf 52 17\r\n     5d e2 c8 69 84 5f db fa 83 44 f7 d7 32 71 2e bf\r\n     a6 79 d8 64 3c d3 1a 88 0e 04 3d 00 00 06 ff b3\r\n     ff b4 00 ff 01 00 00 7a b8 aa 00 05 04 66 72 65\r\n     64 00 0b 00 04 03 00 01 02 00 0a 00 3a 00 38 00\r\n     0e 00 0d 00 1c 00 19 00 0b 00 0c 00 1b 00 18 00\r\n     09 00 0a 00 1a 00 16 00 17 00 08 00 06 00 07 00\r\n     14 00 15 00 04 00 05 00 12 00 13 00 01 00 02 00\r\n     03 00 0f 00 10 00 11 00 0d 00 22 00 20 06 01 06\r\n     02 06 03 05 01 05 02 05 03 04 01 04 02 04 03 03\r\n     01 03 02 03 03 02 01 02 02 02 03 01 01 00 0f 00\r\n     01 01\r\n\r\n1 2  0.0043 (0.0024)  S>CV3.3(94)  Handshake\r\n         ServerHello\r\n           Version 3.3\r\n           random[32]=\r\n             52 8f bf 52 43 78 a1 b1 3b 8d 2c bd 24 70 90 72\r\n             13 69 f8 bf a3 ce eb 3c fc d8 5c bf cd d5 8e aa\r\n           session_id[32]=\r\n             ef ee 38 08 22 09 f2 c1 18 38 e2 30 33 61 e3 d6\r\n             e6 00 6d 18 0e 09 f0 73 d5 21 20 cf 9f bf 62 88\r\n           cipherSuite TLS_ECCPWD_WITH_AES_128_GCM_SHA256_PRIV\r\n           compressionMethod                   NULL\r\n           extensions\r\n           renegotiate[1]=\r\n             00\r\n           elliptic curve point format[4]=\r\n             03 00 01 02\r\n           heartbeat[1]=\r\n             01\r\n   Packet data[99]=\r\n     16 03 03 00 5e 02 00 00 5a 03 03 52 8f bf 52 43\r\n     78 a1 b1 3b 8d 2c bd 24 70 90 72 13 69 f8 bf a3\r\n     ce eb 3c fc d8 5c bf cd d5 8e aa 20 ef ee 38 08\r\n     22 09 f2 c1 18 38 e2 30 33 61 e3 d6 e6 00 6d 18\r\n     0e 09 f0 73 d5 21 20 cf 9f bf 62 88 ff b3 00 00\r\n     12 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 0f\r\n     00 01 01\r\n\r\n1 3  0.0043 (0.0000)  S>CV3.3(141)  Handshake\r\n         ServerKeyExchange\r\n           params\r\n             salt[32]=\r\n               96 3c 77 cd c1 3a 2a 8d 75 cd dd d1 e0 44 99 29\r\n               84 37 11 c2 1d 47 ce 6e 63 83 cd da 37 e4 7d a3\r\n             EC parameters = 3\r\n             curve id = 26\r\n             element[65]=\r\n                  04 7b de a7 7c 03 8e dc d5 66 16 99 81 c5 87 07\r\n                  fa db a8 a8 d8 3e c9 0c 37 e3 c0 66 6a 5a 67 99\r\n                  11 40 d6 85 1a 6c 81 a5 01 75 64 d5 26 b1 57 db\r\n                  cd 97 a6 42 7c b0 e4 7e e5 ca a4 39 66 33 e0 51\r\n                  31\r\n\r\n             scalar[32]=\r\n               2f 70 48 96 69 9f c4 24 d3 ce c3 37 17 64 4f 5a\r\n               df 7f 68 48 34 24 ee 51 49 2b b9 66 13 fc 49 21\r\n   Packet data[146]=\r\n     16 03 03 00 8d 0c 00 00 89 00 20 96 3c 77 cd c1\r\n     3a 2a 8d 75 cd dd d1 e0 44 99 29 84 37 11 c2 1d\r\n     47 ce 6e 63 83 cd da 37 e4 7d a3 03 00 1a 41 04\r\n     7b de a7 7c 03 8e dc d5 66 16 99 81 c5 87 07 fa\r\n     db a8 a8 d8 3e c9 0c 37 e3 c0 66 6a 5a 67 99 11\r\n     40 d6 85 1a 6c 81 a5 01 75 64 d5 26 b1 57 db cd\r\n     97 a6 42 7c b0 e4 7e e5 ca a4 39 66 33 e0 51 31\r\n     00 20 2f 70 48 96 69 9f c4 24 d3 ce c3 37 17 64\r\n     4f 5a df 7f 68 48 34 24 ee 51 49 2b b9 66 13 fc\r\n     49 21\r\n\r\n1 4  0.0043 (0.0000)  S>CV3.3(4)  Handshake\r\n         ServerHelloDone\r\n   Packet data[9]=\r\n     16 03 03 00 04 0e 00 00 00\r\n\r\n1 5  0.0086 (0.0043)  C>SV3.3(104)  Handshake\r\n         ClientKeyExchange\r\n           element[65]=\r\n             04 89 07 f2 0c a8 ff 2b ad bf a6 3e de c5 93 4d\r\n             f1 ec ff 10 75 3f 7a a4 f7 50 ba 8a 2d bd 92 63\r\n             33 3d af f9 43 a2 1c d0 79 d7 75 07 b9 27 82 ee\r\n             77 98 91 98 b9 0a d7 78 de 38 46 c3 19 c7 bc d2\r\n             45\r\n\r\n           scalar[32]=\r\n             66 92 44 aa 67 cb 00 ea 72 c0 9b 84 a9 db 5b b8\r\n             24 fc 39 82 42 8f cd 40 69 63 ae 08 0e 67 7a 48\r\n   Packet data[109]=\r\n     16 03 03 00 68 10 00 00 64 41 04 89 07 f2 0c a8\r\n     ff 2b ad bf a6 3e de c5 93 4d f1 ec ff 10 75 3f\r\n     7a a4 f7 50 ba 8a 2d bd 92 63 33 3d af f9 43 a2\r\n     1c d0 79 d7 75 07 b9 27 82 ee 77 98 91 98 b9 0a\r\n     d7 78 de 38 46 c3 19 c7 bc d2 45 00 20 66 92 44\r\n     aa 67 cb 00 ea 72 c0 9b 84 a9 db 5b b8 24 fc 39\r\n     82 42 8f cd 40 69 63 ae 08 0e 67 7a 48\r\n\r\n   1 6  0.0086 (0.0000)  C>SV3.3(1)  ChangeCipherSpec\r\n   Packet data[6]=\r\n     14 03 03 00 01 01\r\n\r\n   1 7  0.0086 (0.0000)  C>SV3.3(40)  Handshake\r\n   Packet data[45]=\r\n     16 03 03 00 28 00 00 00 00 00 00 00 00 3f c4 e5\r\n     87 f1 1c a6 1e ee f0 8f af ee c9 47 c4 9c 0e 24\r\n     4a 93 56 ab 15 3f f3 4f 0d 43 4a 16 e5\r\n\r\n   1 8  0.0105 (0.0018)  S>CV3.3(1)  ChangeCipherSpec\r\n   Packet data[6]=\r\n     14 03 03 00 01 01\r\n\r\n   1 9  0.0105 (0.0000)  S>CV3.3(40)  Handshake\r\n   Packet data[45]=\r\n     16 03 03 00 28 00 00 00 00 00 00 00 00 f6 73 c4\r\n     4f f1 62 61 cf d6 a0 e6 46 b0 7f 98 1a 6d 81 37\r\n     24 86 99 42 ec 42 0d a3 76 30 53 c1 92\r\n\r\n   1 10 0.0107 (0.0002)  C>SV3.3(100)  application_data\r\n   Packet data....", "notes": "There is an error regarding the Password Element used in\r\nthe example in the appendix.\r\nCurve used in the example: brainpoolP256r1\r\nPE.x used in the example:\r\n29 b2 38 55 81 9f 9c 3f c3 71 ba e2 84 f0 93 a3\r\na4 fd 34 72 d4 bd 2e 9d f7 15 2d 22 ab 37 aa e6\r\n\r\nThis is not a valid point on the given curve. Using\r\nMagma (http://magma.maths.usyd.edu.au/calc/) and the values for\r\nbrainpool from https://tools.ietf.org/html/rfc5639#section-3.4 gives a\r\nLegendre Symbol of -1, indicating that y^2 is not a quadratic residue\r\nand therefore that PE.x is not a valid point on the curve. Code used:\r\n\r\na :=\r\n56698187605326110043627228396178346077120614539475214109386828188763884139993;\r\n\r\nb :=\r\n17577232497321838841075697789794520262950426058923084567046852300633325438902;\r\n\r\nx :=\r\n18859714372486306827330584431184663996963158272766618598705097205657493809894;\r\n\r\np :=\r\n76884956397045344220809746629001649093037950200943055203735601445031516197751;\r\n\r\ny2 := (x*x*x + a*x + b) mod p;\r\nls := LegendreSymbol(y2, p);\r\nprint ls;\r\n\r\nThe PE.x in the example seems to be the PRF output in the third round in\r\nthe algorithm in 4.4.1 of the RFC.\r\nIn older revisions this value was used directly as the X-Coordinate.\r\nHowever a) This has changed in newer revisions and\r\nb) The output of the first round is already a valid point and should\r\ntherefore be used instead.\r\n\r\nThe client and server seem to use a different point than the given PE.x on the curve for\r\ntheir key exchange. The actual value used can be calculated from the\r\ngiven mask:\r\nPE = (-element) * (mask^-1 mod q)\r\nActual PE.x:\r\nA7 EE 9B 10 90 C5 DE AF  AD FE A2 EC 93 50 1F B8\r\n9E A4 CC 40 2D D5 CE 03  AF 59 FB 4C D1 9B 86 9B\r\n\r\nDoing this for the client Element as well gives the same PE.\r\nUsing this PE and the given private values also results in the same\r\npremaster secret in the example.\r\n\r\nHowever, the PRF output of the first round (using the base in the\r\nexample) is:\r\nAE 80 44 FE 9A 02 7F A3  26 0C B2 4D 26 FB EC FB\r\n0C D3 1A 28 E0 08 79 98  47 6F 48 24 84 28 AA 1B\r\nA1 4C 25 3C E3 00 CF E5\r\nResulting X-Coordinate ((pwd-tmp mod (p - 1)) + 1)):\r\n00 68 6B 0D 3F C4 98 94  DD 62 1E C0 4F 92 5E 02\r\n9B 2B 15 28 ED ED CA 46  00 72 54 28 1E 9A 6E DC\r\nIn decimal:\r\n184490938790914521010164124495537968992184466437601025180409064591686528732\r\nThis gives us a Legendre Symbol of 1. This should be the correct PE to\r\nuse for the key exchange. The element of the server and client as well\r\nas the premaster and master secret have been adjusted accordingly.", "submit_date": "2019-05-21", "submitter_name": "Alexander Freiherr von Buddenbrock", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-03-05 23:48:49"}, {"errata_id": "5728", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.5", "orig_text": "See the definition of MX and [RFC-974] for details ofw\r\nthe new scheme.", "correct_text": "See the definition of MX and [RFC-974] for details of\r\nthe new scheme.", "notes": "ofw -> of", "submit_date": "2019-05-21", "submitter_name": "Etan Wexler", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5729", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.5.1", "orig_text": "The client indicates to the server that it is ready for the challenge\r\nvalidation by sending an empty JSON body (\"{}\") carried in a POST\r\nrequest to the challenge URL (not the authorization URL).", "correct_text": "The client indicates to the server that it is ready for the challenge\r\nvalidation by sending a POST request to the challenge URL (not the\r\nauthorization URL), where the body of the POST request is a JWS object\r\nwhose JSON payload is a response object (see Section 8).  For all\r\nchallenge types defined in this document, the response object is the\r\nempty JSON object (\"{}\").", "notes": "It's clear from other text in section 7.5.1 that the \"empty JSON body\" is interpreted by the ACME server as a \"response object\".  (The first function of this erratum is to clarify this point).\r\n\r\nSection 8 says that \"The definition of a challenge type includes...Contents of response objects\", and section 7.5.1 notes that \"the challenges in this document do not define any response fields, but future specifications might define them\".  (The second function of this erratum is to permit clients to send response objects that contain response fields).", "submit_date": "2019-05-22", "submitter_name": "Rob Stradling", "verifier_id": "", "verifier_name": "Roman Danyliw.com", "update_date": "2024-01-11 14:07:36"}, {"errata_id": "5730", "doc-id": "RFC6960", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "optionalSignature contains the algorithm identifier and any\r\nassociated algorithm parameters in signatureAlgorithm; the\r\nsignature value in signature; and, optionally, certificates the\r\nserver needs to verify the signed response (normally up to but not\r\nincluding the client\u2019s root certificate).\r\n", "correct_text": "optionalSignature contains the algorithm identifier and any\r\nassociated algorithm parameters in signatureAlgorithm; the\r\nsignature value in signature; and, optionally, certificates the\r\nserver needs to verify the signed request (normally up to but not\r\nincluding the client\u2019s root certificate).\r\n", "notes": "The paragraph refers to the signed \"response\" where it should refer to the signed \"request\".", "submit_date": "2019-05-22", "submitter_name": "Jaime Hablutzel", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-02-23 21:17:29"}, {"errata_id": "5731", "doc-id": "RFC4210", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "N/A", "correct_text": "N/A", "notes": "In appendixes D.4, D.5, E.5 and E.6, the recipient field of requests and the sender field of responses are specified as \"the name of the CA\". It is no problem for CA which signs the CMP response.\r\n\r\nHowever, as best practice, the CA's private key which is used to sign the certificates, is NOT RECOMMENDED to sign/decrypt the communication messages. In this case, another entity (private key + certificate) is used to decrypt the incoming messages and sign the outgoing ones.\r\n\r\nThe text and comment for the fields \"recipient\" in requests and \"sender\" in responses need to be corrected to the case described above. If you think the original text and comment are correct, then we need instruction on how to handle this case.", "submit_date": "2019-05-22", "submitter_name": "Lijun Liao", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-04-27 02:03:57"}, {"errata_id": "5732", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "A challenge object with an error MUST have status\r\nequal to \"invalid\".", "correct_text": "A challenge object with an error MUST have status\r\nequal to \"processing\" or \"invalid\".", "notes": "Section 8.2 says that 'The server MUST add an entry to the \"error\" field in the challenge after each failed validation query'.  However, if the challenge must then become \"invalid\", it is never possible to retry any validation query (because \"invalid\" is a final state for a challenge object).\r\nThis erratum is necessary to permit validation query retries to ever happen.", "submit_date": "2019-05-23", "submitter_name": "Rob Stradling", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-02-22 15:52:09"}, {"errata_id": "5733", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.3", "orig_text": "POST /acme/chall/prV_B7yEyA4", "correct_text": "POST /acme/chall/prV_B7yEyA4 HTTP/1.1", "notes": "", "submit_date": "2019-05-23", "submitter_name": "Rob Stradling", "verifier_id": "", "verifier_name": "Roman Danyliw.com", "update_date": "2024-01-11 14:11:53"}, {"errata_id": "5734", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.4", "orig_text": "POST /acme/chall/Rg5dV14Gh1Q", "correct_text": "POST /acme/chall/Rg5dV14Gh1Q HTTP/1.1", "notes": "", "submit_date": "2019-05-23", "submitter_name": "Rob Stradling", "verifier_id": "", "verifier_name": "Roman Danyliw.com", "update_date": "2024-01-11 14:13:29"}, {"errata_id": "5735", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.3", "orig_text": "GET /.well-known/acme-challenge/LoqXcYV8...jxAjEuX0", "correct_text": "GET /.well-known/acme-challenge/LoqXcYV8...jxAjEuX0 HTTP/1.1", "notes": "", "submit_date": "2019-05-23", "submitter_name": "Rob Stradling", "verifier_id": "", "verifier_name": "Roman Danyliw.com", "update_date": "2024-01-11 14:14:39"}, {"errata_id": "5757", "doc-id": "RFC8032", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": ".1", "orig_text": "An element (x,y) of E is encoded as a b-bit string called ENC(x,y),\r\n which is the (b-1)-bit encoding of y concatenated with one bit that\r\n is 1 if x is negative and 0 if x is not negative.", "correct_text": "An element (x,y) of E is encoded as a b-bit string called ENC(x,y),\r\n which is the (b-1)-bit encoding of y concatenated \r\nwith the least significant bit of x.", "notes": "Section 3.1 is not coherent with encodings described for Ed25519 (5.1.2) and Ed448 (5.2.2)\n --VERIFIER NOTES-- \nThe original text was correct (verified by Nick Sullivan).", "submit_date": "2019-06-21", "submitter_name": "Franck Rondepierre", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2021-10-26 05:43:13"}, {"errata_id": "5736", "doc-id": "RFC7854", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |   Peer Type   |  Peer Flags   |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |         Peer Distinguisher (present based on peer type)       |\r\n     |                                                               |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                 Peer Address (16 bytes)                       |\r\n     ~                                                               ~\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                           Peer AS                             |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                         Peer BGP ID                           |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                    Timestamp (seconds)                        |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                  Timestamp (microseconds)                     |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |   Peer Type   |  Peer Flags   |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |         Peer Distinguisher (present based on peer type)       |\r\n     |                                                               |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                 Peer Address (16 bytes)                       |\r\n     ~                                                               ~\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                           Peer AS                             |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                         Peer BGP ID                           |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                    Timestamp (seconds)                        |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                  Timestamp (microseconds)                     |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The OLD figure may be misinterpreted as if there are unused bits between the \"Peer Flags\" and \"Peer Distinguisher\".\r\nWK: This also makes is consistent with other diagrams in this RFC.", "submit_date": "2019-05-23", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5737", "doc-id": "RFC7935", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "algorithm (which is an AlgorithmIdentifier type):\r\n   The object identifier for RSA PKCS #1 v1.5 with SHA-256 MUST be\r\n   used in the algorithm field, as specified in Section 5 of\r\n   [RFC4055].  The value for the associated parameters from that\r\n   clause MUST also be used for the parameters field.", "correct_text": "algorithm (which is an AlgorithmIdentifier type):\r\n   The object identifier for RSA (rsaEncryption) MUST be used for the\r\n   algorithm field, as specified in Section 3.2 of [RFC3370]. The value\r\n   for the associated parameters from that clause MUST also be used for\r\n   the parameters field.", "notes": "The field described in the paragraph belongs to a public key. The way I understand it, particularly due to the inclusion of a digest, \"RSA PKCS #1 v1.5 with SHA-256\" (sha256WithRSAEncryption) is not really a public key algorithm identifier; it's a signature algorithm identifier.\r\n\r\n(Courtesy of Russ Housley) rsaEncryption also allows the public key to be used with PKCS#1 v1.5, RSASSA-PSS, and RSAES-OAEP.\r\n\r\nAll existing RPKI readers and writers that I've seen, as well as the global RPKI repository certificates themselves, currently use rsaEncryption as the public key algorithm of subjectPublicKeyInfo. Therefore, this change should also reflect existing practice.\n --VERIFIER NOTES-- \nAny changes to normative statements require WG consensus.  In this case, rfc7935 has been updated twice.  Discussion should happen in the sidrops WG.", "submit_date": "2019-05-24", "submitter_name": "Alberto Leiva Popper", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7189", "doc-id": "RFC8794", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "17.1.", "orig_text": "   One-octet Element IDs MUST be between 0x81 and 0xFE.  These items are\r\n   valuable because they are short, and they need to be used for\r\n   commonly repeated elements.  Element IDs are to be allocated within\r\n   this range according to the \"RFC Required\" policy [RFC8126].\r\n\r\n   The following one-octet Element IDs are RESERVED: 0xFF and 0x80.\r\n\r\n   Values in the one-octet range of 0x00 to 0x7F are not valid for use\r\n   as an Element ID.\r\n\r\n   Two-octet Element IDs MUST be between 0x407F and 0x7FFE.  Element IDs\r\n   are to be allocated within this range according to the \"Specification\r\n   Required\" policy [RFC8126].\r\n\r\n   The following two-octet Element IDs are RESERVED: 0x7FFF and 0x4000.\r\n\r\n   Values in the two-octet ranges of 0x0000 to 0x3FFF and 0x8000 to\r\n   0xFFFF are not valid for use as an Element ID.\r\n\r\n   Three-octet Element IDs MUST be between 0x203FFF and 0x3FFFFE.\r\n   Element IDs are to be allocated within this range according to the\r\n   \"First Come First Served\" policy [RFC8126].\r\n\r\n   The following three-octet Element IDs are RESERVED: 0x3FFFFF and\r\n   0x200000.\r\n\r\n   Values in the three-octet ranges of 0x000000 to 0x1FFFFF and 0x400000\r\n   to 0xFFFFFF are not valid for use as an Element ID.\r\n\r\n   Four-octet Element IDs MUST be between 0x101FFFFF and 0x1FFFFFFE.\r\n   Four-octet Element IDs are somewhat special in that they are useful\r\n   for resynchronizing to major structures in the event of data\r\n   corruption or loss.  As such, four-octet Element IDs are split into\r\n   two categories.  Four-octet Element IDs whose lower three octets (as\r\n   encoded) would make printable 7-bit ASCII values (0x20 to 0x7E,\r\n   inclusive) MUST be allocated by the \"Specification Required\" policy.\r\n   Sequential allocation of values is not required: specifications\r\n   SHOULD include a specific request and are encouraged to do early\r\n   allocations.\r\n\r\n   To be clear about the above category: four-octet Element IDs always\r\n   start with hex 0x10 to 0x1F, and that octet may be chosen so that the\r\n   entire VINT has some desirable property, such as a specific CRC.  The\r\n   other three octets, when ALL having values between 0x20 (32, ASCII\r\n   Space) and 0x7E (126, ASCII \"~\"), fall into this category.\r\n\r\n   Other four-octet Element IDs may be allocated by the \"First Come\r\n   First Served\" policy.\r\n\r\n   The following four-octet Element IDs are RESERVED: 0x1FFFFFFF and\r\n   0x10000000.\r\n\r\n   Values in the four-octet ranges of 0x00000000 to 0x0FFFFFFF and\r\n   0x20000000 to 0xFFFFFFFF are not valid for use as an Element ID.\r\n\r\n", "correct_text": "   One-octet Element IDs MUST be allocated in the range 0x80 - 0xFE.  \r\n   These items are valuable because they are short, and they need to be \r\n   used for commonly repeated elements.  Element IDs are to be allocated within\r\n   this range according to the \"RFC Required\" policy [RFC8126].\r\n\r\n   The following one-octet Element ID is RESERVED: 0xFF.\r\n\r\n   Values in the one-octet range of 0x00 - 0x7F are not valid for use\r\n   as Element IDs.\r\n\r\n   Two-octet Element IDs MUST be allocated in the range 0x407F - 0x7FFE.  \r\n   Element IDs are to be allocated within this range according to the \r\n   \"Specification Required\" policy [RFC8126].\r\n\r\n   The following two-octet Element ID is RESERVED: 0x7FFF.\r\n\r\n   Values in the two-octet ranges of 0x0100 - 0x407E and \r\n   0x8000 - 0xFFFF are not valid for use as Element IDs.\r\n\r\n   Three-octet Element IDs MUST be allocated in the range 0x203FFF - 0x3FFFFE.\r\n   Element IDs are to be allocated within this range according to the\r\n   \"First Come First Served\" policy [RFC8126].\r\n\r\n   The following three-octet Element ID is RESERVED: 0x3FFFFF.\r\n\r\n   Values in the three-octet ranges of 0x010000 - 0x203FFE and \r\n   0x400000 - 0xFFFFFF are not valid for use as Element IDs.\r\n\r\n   Four-octet Element IDs MUST be allocated in the range 0x101FFFFF - 0x1FFFFFFE.\r\n   Four-octet Element IDs are somewhat special in that they are useful\r\n   for resynchronizing to major structures in the event of data\r\n   corruption or loss.  As such, four-octet Element IDs are split into\r\n   two categories.  Four-octet Element IDs whose lower three octets (as\r\n   encoded) would make printable 7-bit ASCII values (0x20 to 0x7E,\r\n   inclusive) MUST be allocated by the \"Specification Required\" policy.\r\n   Sequential allocation of values is not required: specifications\r\n   SHOULD include a specific request and are encouraged to do early\r\n   allocations.\r\n\r\n   To be clear about the above category: four-octet Element IDs always\r\n   start with hex 0x10 to 0x1F, and that octet may be chosen so that the\r\n   entire VINT has some desirable property, such as a specific CRC.  The\r\n   other three octets, when ALL having values between 0x20 (32, ASCII\r\n   Space) and 0x7E (126, ASCII \"~\"), fall into this category.\r\n\r\n   Other four-octet Element IDs may be allocated by the \"First Come\r\n   First Served\" policy.\r\n\r\n   The following four-octet Element ID is RESERVED: 0x1FFFFFFF.\r\n\r\n   Values in the four-octet ranges of 0x01000000 - 0x101FFFFE and \r\n   0x20000000 - 0xFFFFFFFF are not valid for use as Element IDs.", "notes": "This erratum corrects values in this text.", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2024-08-22 20:25:28"}, {"errata_id": "7190", "doc-id": "RFC8794", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.1.6.2.", "orig_text": "   EBMLAtomName           = ALPHA / DIGIT 0*EBMLNameChar\r\n", "correct_text": "   EBMLAtomName           = (ALPHA / DIGIT) 0*EBMLNameChar\r\n", "notes": "Fix grouping in the EBMLAtomName\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/pull/418", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7530", "doc-id": "RFC9110", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "15.5.2.", "orig_text": "The 401 (Unauthorized) status code indicates that the request has not\r\nbeen applied because it lacks valid authentication credentials for\r\nthe target resource.", "correct_text": "The 401 (Unauthorized) status code indicates that the request has not\r\nbeen processed because it lacks valid authentication credentials for\r\nthe target resource.", "notes": "\"applying a request\" is not a standard expression. Usually, requests are \"treated\", \"granted\" or \"processed\".\r\n\r\nThis phrasing was imported in Apache Tomcat; thanks to Mark Thomas for pointing out it came from this RFC.\n --VERIFIER NOTES-- \n A method is applied to a resource to have an effect that results in a response. Any web search on \"method applied\" will show you that it is quite common in standard English.  The request has already been processed, at least partially, in order to make a decision that resulted in a 401 error", "submit_date": "2023-05-29", "submitter_name": "Philippe Cloutier", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-07-07 21:22:25"}, {"errata_id": "7531", "doc-id": "RFC5198", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "section 2, page 3", "orig_text": "3. The control characters in the ASCII range (U+0000 to U+001F and U+007F to U+009F) SHOULD generally be avoided.", "correct_text": "3. The control characters in the ASCII range (U+0000 to U+001F, and U+007F) SHOULD generally be avoided.", "notes": "Characters in the range U+0080 to U+009F are explicitly noted in the following text as lying outside the ASCII range, and in fact they are discussed separately at that point (which, given the phrasing error pointed out here, currently is duplicate coverage).  They do not pertain to any range of ASCII characters and should not be treated as such.", "submit_date": "2023-06-01", "submitter_name": "Gordon Steemson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5738", "doc-id": "RFC6515", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "   1. \"Network Address of Next Hop\" field in the MP_REACH_NLRI\r\n      attribute, as defined in Section 3 of [BGP-MP].  This field is\r\n      preceded by a \"length of next hop address\" field. Hence, it is\r\n      always clear whether the address is an IPv4 address (length is 4)\r\n      or an IPv6 address (length is 16).  If the length of the next hop\r\n      address is neither 4 nor 16, the MP_REACH_NLRI attribute MUST be\r\n      considered to be \"incorrect\", and MUST be handled as specified in\r\n      Section 7 of [BGP-MP].", "correct_text": "   1. \"Network Address of Next Hop\" field in the MP_REACH_NLRI\r\n      attribute, as defined in Section 3 of [BGP-MP].  This field is\r\n      preceded by a \"length of next hop address\" field. Hence, it is\r\n      always clear whether the address is an IPv4 address (length is 12)\r\n      or an IPv6 address (length is 24).  If the length of the next hop\r\n      address is neither 12 nor 24, the MP_REACH_NLRI attribute MUST be\r\n      considered to be \"incorrect\", and MUST be handled as specified in\r\n      Section 7 of [BGP-MP].", "notes": "According to section 4.3.2 of RFC4364:\r\nWhen a PE router distributes a VPN-IPv4 route via BGP, it uses its own address as \r\nthe \"BGP next hop\".  This address is encoded as a VPN-IPv4 address with an RD of 0. \r\nThe MVPN should follow the same rule to use RD+IPv4 (len 12) or RD+IPv6 (len 24) \r\nin \"Network Address of Next Hop\".\n --VERIFIER NOTES-- \n   as requested by the original poster:\r\nhttps://mailarchive.ietf.org/arch/msg/bess/V3Qkf-Aeg3oIFiswDVRaSN43tyo/", "submit_date": "2019-05-25", "submitter_name": "Jingrong Xie", "verifier_id": "", "verifier_name": "Martin Vigourex", "update_date": "2021-02-08 22:21:42"}, {"errata_id": "5739", "doc-id": "RFC5831", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "      3.4 SIGMA := SIGMA (+)' M[s]", "correct_text": "      3.4 SIGMA := SIGMA (+)' M_s", "notes": "M[s] is not defined, and GOST R 34.11-94 also says M_s.", "submit_date": "2019-05-25", "submitter_name": "Vitaly Chikunov", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5740", "doc-id": "RFC5019", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "In the case where a responder does not have the ability to respond to\r\nan OCSP request containing a option not supported by the server, it\r\nSHOULD return the most complete response it can.\r\n", "correct_text": "In the case where a responder does not have the ability to respond to\r\nan OCSP request containing an option not supported by the server, it\r\nSHOULD return the most complete response it can.", "notes": "\"a option\" should be \"an option\"", "submit_date": "2019-05-26", "submitter_name": "Jaime Hablutzel", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5741", "doc-id": "RFC7130", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "While there are native Ethernet mechanisms to detect failures \r\n(802.1ax, .3ah)", "correct_text": "While there are native Ethernet mechanisms to detect failures \r\n(802.1AX, 802.3ah)", "notes": "ax should be capitalized.", "submit_date": "2019-05-30", "submitter_name": "Anoop Ghanwani", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5742", "doc-id": "RFC7130", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "Micro-BFD packets SHOULD always be sent untagged.  However, when the\r\nLAG is operating in the context of IEEE 802.1q or IEEE 802.qinq, ", "correct_text": "Micro-BFD packets SHOULD always be sent untagged.  However, when the\r\nLAG is operating in the context of IEEE 802.1Q or IEEE 802.1ad, ", "notes": "q should be capitalized.  The IEEE standard for QinQ is IEEE 802.1ad.", "submit_date": "2019-05-30", "submitter_name": "Anoop Ghanwani", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7191", "doc-id": "RFC8794", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.", "orig_text": "      +=========================+================+=================+\r\n      | Element ID Octet Length | Range of Valid | Number of Valid |\r\n      |                         |  Element IDs   |     Element IDs |\r\n      +=========================+================+=================+\r\n      |            1            |  0x81 - 0xFE   |             126 |\r\n      +-------------------------+----------------+-----------------+\r\n", "correct_text": "      +=========================+================+=================+\r\n      | Element ID Octet Length | Range of Valid | Number of Valid |\r\n      |                         |  Element IDs   |     Element IDs |\r\n      +=========================+================+=================+\r\n      |            1            |  0x80 - 0xFE   |             127 |\r\n      +-------------------------+----------------+-----------------+\r\n", "notes": "0x80 is allowed in Matroska so in EBML as well.\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/pull/414", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2024-02-29 16:06:03"}, {"errata_id": "7192", "doc-id": "RFC8794", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.6.", "orig_text": "   The Date Element stores an integer in the same format as the Signed\r\n   Integer Element that expresses a point in time referenced in\r\n   nanoseconds from the precise beginning of the third millennium of the\r\n   Gregorian Calendar in Coordinated Universal Time (also known as\r\n   2001-01-01T00:00:00.000000000 UTC).  This provides a possible\r\n   expression of time from 1708-09-11T00:12:44.854775808 UTC to\r\n   2293-04-11T11:47:16.854775807 UTC.\r\n", "correct_text": "   The Date Element stores an integer in the same format as the Signed\r\n   Integer Element that expresses a point in time referenced in\r\n   nanoseconds from the precise beginning of the third millennium of the\r\n   Gregorian Calendar in Coordinated Universal Time (also known as\r\n   2001-01-01T00:00:00.000000000 UTC).  This provides a possible\r\n   expression of time from September 1708 to April 2293.\r\n\r\n   The integer stored represents the number of nanoseconds between the\r\n   date to express and 2001-01-01T00:00:00.000000000 UTC, not counting\r\n   leap seconds.  That is 86,400,000,000,000 nanoseconds for each day.\r\n   Conversions from other date systems should ensure leap seconds are\r\n   not counted in EBML values.\r\n\r\n   The 2001-01-01T00:00:00.000000000 UTC date also corresponds to\r\n   978307200 seconds in Unix time [POSIX].\r\n", "notes": "Add some notice about leap seconds not being counted as in POSIX. Remove bogus nanosecond values.\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/pull/415", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": "2022-11-01 20:34:50"}, {"errata_id": "5893", "doc-id": "RFC3507", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.5", "orig_text": "100 Continue.  If the entire encapsulated HTTP body did not fit in the preview, the ICAP client MUST send the remainder of its ICAP message, starting from the first chunk after the preview.  If the entire message fit in the preview (detected by the \"EOF\" symbol explained below), then the ICAP server MUST NOT respond with 100 Continue.", "correct_text": "100 Continue.  If the entire encapsulated HTTP body did not fit in the preview, the ICAP client MUST send the remainder of its ICAP message, starting from the first chunk after the preview.  If the entire message fit in the preview (detected by the \"EOF\" symbol explained below), then the ICAP client MUST ignore a 100 Continue response.", "notes": "Originally, the ICAP server was prohibited from sending a 100 Continue if the entire HTTP body fits in the preview.  However, the ICAP server cannot know if the entire body fits in the preview until the whole preview has been received.  An ICAP server cannot begin loop-back streaming of the HTTP transaction until the whole preview has been received, because it cannot know whether or not it is appropriate to send a \"100 Continue\" first.  This severely impacts situations where an HTTP server is producing a very slow data stream and therefore causes the preview to take a long time.\r\n\r\nThe corrected text makes it permissible for an ICAP server to blindly send a \"100 Continue\" before it knows whether or not it is appropriate, and requires the ICAP client to ignore the \"100 Continue\" in the event that it turned out to not be appropriate.\r\n\r\nA server that sends a \"100 Continue\" response before receiving the final preview chunk will be able to note the presence or absence of the ieof chunk extension when the final preview chunk later arrives, and therefore determine whether that marks the end of the ICAP request or whether to expect the client to immediately begin streaming the non-preview data.", "submit_date": "2019-11-04", "submitter_name": "Steve Hill", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5743", "doc-id": "RFC8577", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.3", "orig_text": "   IANA manages the \"Record Route Object Sub-object Flags\" registry as\r\n   part of the \"Resource Reservation Protocol-Traffic Engineering (RSVP-\r\n   TE) Parameters\" registry located at <http://www.iana.org/assignments/\r\n   rsvp-te-parameters>.  Prior to this document, this registry did not\r\n   include Label Sub-object Flags.  This document creates the addition\r\n   of a new subregistry for Label Sub-object Flags as shown below.\r\n\r\n      Flag  Name                    Reference\r\n\r\n      0x1   Global Label            [RFC3209]\r\n      0x02  TE Link Label           [RFC8577], Section 9.3\r\n      0x04  Delegation Label        [RFC8577], Section 9.5\r\n", "correct_text": "   IANA manages the \"Record Route Object Sub-object Flags\" registry as\r\n   part of the \"Resource Reservation Protocol-Traffic Engineering (RSVP-\r\n   TE) Parameters\" registry located at <http://www.iana.org/assignments/\r\n   rsvp-te-parameters>.  Prior to this document, this registry did not\r\n   include Label Sub-object Flags.  This document creates the addition\r\n   of a new subregistry for Label Sub-object Flags as shown below.\r\n\r\n      Flag  Name                    Reference\r\n\r\n      0x1   Global Label            [RFC3209]\r\n      0x02  TE Link Label           [RFC8577], Section 9.3\r\n      0x04  Delegation Label        [RFC8577], Section 9.5\r\n \r\n  All assignments in this sub-registry are to be performed via\r\n  Standards Action.", "notes": "This errata is being reported as a response to the following email from IANA.\r\n\r\n**\r\nAuthors/WG Chairs/ADs for RFC 8577,\r\n\r\nDuring the publication process, the registration procedures were unintentionally removed from the document.  Is this something that an errata should be submitted for?\r\n\r\nIn version 9 of the document, it says: All assignments in this sub-registry are to be performed via Standards Action.\t\r\n\r\nIn the published RFC this sentence does not appear to be there.\r\n\r\nPlease advise.\r\n\r\nThank you,\r\n\r\nMichelle Cotton\r\nProtocol Parameters Engagement Sr. Manager", "submit_date": "2019-05-30", "submitter_name": "Vishnu Pavan Beeram", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5744", "doc-id": "RFC6083", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.8", "orig_text": "4.8.  Handling of Endpoint-Pair Shared Secrets\r\n\r\n   The endpoint-pair shared secret for Shared Key Identifier 0 is empty\r\n   and MUST be used when establishing a DTLS connection.  Whenever the\r\n   master key changes, a 64-byte shared secret is derived from every\r\n   master secret and provided as a new endpoint-pair shared secret by\r\n   using the exporter described in [RFC5705].  The exporter MUST use the\r\n   label given in Section 5 and no context.  The new Shared Key\r\n   Identifier MUST be the old Shared Key Identifier incremented by 1.\r\n   If the old one is 65535, the new one MUST be 1.\r\n\r\n   Before sending the Finished message, the active SCTP-AUTH key MUST be\r\n   switched to the new one.\r\n\r\n   Once the corresponding Finished message from the peer has been\r\n   received, the old SCTP-AUTH key SHOULD be removed.", "correct_text": "4.8.  Handling of Endpoint-Pair Shared Secrets\r\n\r\n   The endpoint-pair shared secret for Shared Key Identifier 0 is empty\r\n   and MUST be used when establishing a DTLS connection.  Whenever the\r\n   master key changes, a 64-byte shared secret is derived from every\r\n   master secret and provided as a new endpoint-pair shared secret by\r\n   using the exporter described in [RFC5705].  The exporter MUST use the\r\n   label given in Section 5 and no context.  The new Shared Key\r\n   Identifier MUST be the old Shared Key Identifier incremented by 1.\r\n   If the old one is 65535, the new one MUST be 1.\r\n\r\n   Before sending the Finished message, the active SCTP-AUTH key \r\n   SHOULD be switched to the new one.\r\n   However if the ChangeCipherSpec and Finished messages are sent \r\n   back to back, there may be a case if Finished message is sent with\r\n   the new key might get dropped by peer, if the new key is not \r\n   configured yet.\r\n   Hence the sender MAY send the Finished message with Old Key which\r\n   SHOULD be accepted by the peer. \r\n\r\n   Once the corresponding Finished message from the peer has been\r\n   received, the old SCTP-AUTH key SHOULD be removed.", "notes": "If the time gap between the ChangeCipherSpec and Finished messages is very less than either the peer may wait to configure the new key received in ChangeCipherSpec and then validate the Finished messges with new key. Alternatively the Sender may choose to send the Finished message with Old key to peer which should still be configured at the peer. Once the peer recevies the Finished message it should accept with Old key. Subsequently the Old key Should be removed.\r\nHence during this switchover of Key , two keys can be used by both peer nodes.", "submit_date": "2019-05-30", "submitter_name": "Sidhartha Pant", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-21 16:22:56"}, {"errata_id": "5745", "doc-id": "RFC6901", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5", "orig_text": "The following JSON strings evaluate to the accompanying values:\r\n\r\n    \"/i\\\\j\"      5\r\n    \"/k\\\"l\"      6", "correct_text": "The following JSON strings evaluate to the accompanying values:\r\n\r\n    /i\\j      5\r\n    /k\"l      6", "notes": "In JSON itself some special characters like the backslash and the double quote character can be escaped using a backslash. A similar escaping was not described for JSON pointers. Therefore it is not clear to me why such an escaping is needed in JSON pointers too. Maybe the additional double quotes around the example JSON pointers enforce this. In the corrected text I have stated my view on this.", "submit_date": "2019-06-04", "submitter_name": "Sven Willenb\u00fccher", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5746", "doc-id": "RFC7432", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11.2", "orig_text": "11.2.  P-Tunnel Identification\r\n\"...+ If the PE that originates the advertisement uses ingress \r\nreplication for the P-tunnel for EVPN, the route MUST include the\r\nPMSI Tunnel attribute with the Tunnel Type set to Ingress\r\nReplication and the Tunnel Identifier set to a routable address of\r\nthe PE.\"\r\n\r\n", "correct_text": "a routable address of the PE is not so strict. And does this mean \r\nwe use the Tunnel Identifier to construct P2P tunnel for ingress \r\nreplication, or we use the Originating Router's IP Address in the \r\nIMET route key, or they are equivalent meaning?\r\nThis may cause interact problems when it implements differently. \r\nCould you clarify this? Thanks.", "notes": "\n --VERIFIER NOTES-- \n   Errata is not the place to ask questions for clarifications", "submit_date": "2019-06-05", "submitter_name": "Yang Huang", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5747", "doc-id": "RFC8558", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "Intermediate path elements should not add visible signals that\r\n      identify the user, origin node, or origin network [RFC8164].", "correct_text": "Intermediate path elements should not add visible signals that\r\n      identify the user, origin node, or origin network [RFC8165].", "notes": "This was a typo.", "submit_date": "2019-06-05", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2024-01-11 16:36:17"}, {"errata_id": "5748", "doc-id": "RFC5797", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   | RNTO  | base | Rename From       | s    | m    | 959              |", "correct_text": "   | RNTO  | base | Rename To         | s    | m    | 959              |", "notes": "Obviously RNTO = Rename To as defined in RFC 959", "submit_date": "2019-06-08", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:24:04"}, {"errata_id": "5749", "doc-id": "RFC5896", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Updates: 4120", "correct_text": "Updates: 2743, 2744, 4120, and 4121", "notes": "The content of RFC5896 modifies the technical meaning of all four RFCs not just 4120.", "submit_date": "2019-06-08", "submitter_name": "Jeffrey Altman", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-11-26 15:55:46"}, {"errata_id": "5753", "doc-id": "RFC2322", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Security", "orig_text": "But, once the peg is attached to a network cable, \r\nthe chance to loose the peg is minimized.", "correct_text": "But, once the peg is attached to a network cable, \r\nthe chance to lose the peg is minimized.", "notes": "Although there is a possibility that the author intended to use the verb form of \"loose\", implying that there would be a chance to unbind the peg to go about its own business, it's more likely that they intended to refer to the situation where the peg is lost, rather than simply released.", "submit_date": "2019-06-14", "submitter_name": "Adam Schumacher", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5894", "doc-id": "RFC3973", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4.1", "orig_text": "Forwarding (F)\r\n       This is the starting state of the Upsteam(S,G) state machine.\r\n       The state machine is in this state if it just started or if\r\n       oiflist(S,G) != NULL.", "correct_text": "Forwarding (F)\r\n       This is the starting state of the Upstream(S,G) state machine.\r\n       The state machine is in this state if it just started or if\r\n       oiflist(S,G) != NULL.", "notes": "Upsteam(S,G) is a typo and should be corrected as Upstream(S,G)", "submit_date": "2019-11-06", "submitter_name": "Ehsan Hemmati", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-11-06 18:13:51"}, {"errata_id": "5761", "doc-id": "RFC8040", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4.1", "orig_text": "If the data resource already exists, then the POST request MUST fail\r\nand a \"409 Conflict\" status-line MUST be returned.  The error-tag\r\nvalue \"resource-denied\" is used in this case", "correct_text": "If the data resource already exists, then the POST request MUST fail\r\nand a \"409 Conflict\" status-line MUST be returned.  The error-tag \r\nvalue \"data-exists\" is used in this case", "notes": "The error-tag value should be corrected as \"data-exists\" in this case \r\nbased on the context. According to error-tag definition in RFC6241:\r\n\r\n   error-tag:      resource-denied\r\n   error-type:     transport, rpc, protocol, application\r\n   error-severity: error\r\n   error-info:     none\r\n   Description:    Request could not be completed because of\r\n                   insufficient resources.\r\n\r\nIt is apparent error-tag value \"data-exists\" should be corresponding \r\nto the data resource already exists condition.\n --VERIFIER NOTES-- \n   Rejected based on the discussion on WG mailing list: https://mailarchive.ietf.org/arch/msg/netconf/LNYNKiK7RYhTeita4oCte0HVcLA\r\n ", "submit_date": "2019-06-24", "submitter_name": "Qin WU", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-17 13:57:23"}, {"errata_id": "5762", "doc-id": "RFC8519", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1", "orig_text": "leaf type {\r\ntype acl-type;\r\ndescription\r\n  \"Type of ACL.  Indicates the primary intended\r\n   type of match criteria (e.g., Ethernet, \r\n   IPv4, IPv6, mixed, etc.) used in the list\r\n   instance.\";\r\n}", "correct_text": "leaf type {\r\ntype acl-type;\r\ndefault \"ipv4-acl-type\";\r\ndescription\r\n  \"Type of ACL.  Indicates the primary intended\r\n   type of match criteria (e.g., Ethernet, \r\n   IPv4, IPv6, mixed, etc.) used in the list\r\n   instance.\";\r\n}", "notes": "I am wondering why not  set default value for acl-type,e.g., set default value as \"ipv4-acl-type\" otherwise, how to determine which field under which choice will be matched upon and which action should be taken on them if the opetional parameter type under acl list is not set.\r\n\r\nAlso I want to better understand why acl type is removed from key indexes of access list and keep it as optional parameter under acl list. One case I am thinking in my mind is we add a mixed Ethernet, IPv4, and IPv6 ACL entry when we already have Ethernet ACL entry,IPv4 ACL entry , we don't need to remove existing ethernet entry and existing IPv4 entry in the list (\"aces\") and create a new entry with mixed ethernet, IPv4, IPv6 ACL, instead, we just add a new identity called mixed-eth-ipv4-ipv6-acl-type and add a new IPv6 entry.\n --VERIFIER NOTES-- \n   \r\nMahesh Jethanandani replied:\r\n\r\nThis errata should be rejected for the following reason.\r\n\r\nThe whole idea of defining the identities for acl-type was to allow vendors to specify what capabilities their box is capable of supporting and then to specify what capabilities the vendors want to support. As such there is no \u201cdefault capability\" for every vendor. Besides, if a device advertises a mixed-eth-ipv4 feature, it is because it can only support Ethernet and IPv4 ACL combinations, and it cannot support IPv6 ACL matches. You do not add a capability of IPv6 match on the fly. It either has it, or it does not. If it does, advertise mixed-eth-ipv4-ipv6 capability to begin with.\r\n\r\nThe errata proposes a change to the standard and is not correcting an error in the document.  additionaly it not clear why it would be appraise to set a default acl type.\r\n\r\nThe errata is declined.\r\n", "submit_date": "2019-06-24", "submitter_name": "Qin WU", "verifier_id": "", "verifier_name": "Joel Jaeggli", "update_date": "2019-09-24 06:37:31"}, {"errata_id": "5763", "doc-id": "RFC7049", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.4", "orig_text": "A tag always applies to the item that is directly followed by it.", "correct_text": "A tag always applies to the item that directly follows it.", "notes": "The 'it' in the original text refers to the tag, so the sentence reads that the tag follows the item.  In fact, the item follows the tag.", "submit_date": "2019-06-26", "submitter_name": "John Visosky", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-07-17 22:09:25"}, {"errata_id": "5764", "doc-id": "RFC5903", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "8", "orig_text": "Sections 8.1, 8.2 and 8.3 say \"We suppose\r\nthat the response Diffie-Hellman private key is:\"", "correct_text": "\"We suppose that the responder's Diffie-Hellman private key is:\"", "notes": "While the text did not cause me any problems in testing my P-256 implementation, it did initially confuse me. IKE has initiator and responder. The way the text is currently phrased, it seems as if the private key is sent in response to a message from the initiator.", "submit_date": "2019-06-27", "submitter_name": "Mohit Sethi", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5765", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "   M\r\n\r\n      Mandatory, set to one (1)\r\n", "correct_text": "   M\r\n\r\n      0 (Optional)\r\n", "notes": "Authority-ID TLV is used only as an Outer TLV (in TEAP/Start) and Section 4.3.1 mandates all Outer TLVs to be marked as optional (\"Outer TLVs MUST be marked as optional\"). As such, Section 4.2.2 is incorrect in claiming the Authority-ID TLV to use M=1.", "submit_date": "2019-06-28", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-03-18 00:02:32"}, {"errata_id": "5766", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "   If, due to the limits on the maximum size of an UPDATE message (see\r\n   Section 4), a single route doesn't fit into the message, the BGP\r\n   speaker MUST not advertise the route to its peers and MAY choose to\r\n   log an error locally.\r\n", "correct_text": "   If, due to the limits on the maximum size of an UPDATE message (see\r\n   Section 4), a single route doesn't fit into the message, the BGP\r\n   speaker MUST NOT advertise the route to its peers and MAY choose to\r\n   log an error locally.\r\n", "notes": "The Normative text should be \"MUST NOT\", and not \"MUST not\" -- both words should be capitalized.", "submit_date": "2019-06-28", "submitter_name": "Alvaro Retana", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-05-28 12:13:20"}, {"errata_id": "5788", "doc-id": "RFC2516", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   It is RECOMMENDED that the Access Concentrator ocassionally send\r\n   Echo-Request packets to the Host to determine the state of the\r\n   session.  Otherwise, if the Host terminates a session without sending\r\n   a Terminate-Request packet, the Access Concentrator will not be able\r\n   to determine that the session has gone away.", "correct_text": "   It is RECOMMENDED that the Access Concentrator occasionally send\r\n   Echo-Request packets to the Host to determine the state of the\r\n   session.  Otherwise, if the Host terminates a session without sending\r\n   a Terminate-Request packet, the Access Concentrator will not be able\r\n   to determine that the session has gone away.", "notes": "Typo. The word \"ocassionally\" should be \"occasionally\".", "submit_date": "2019-07-22", "submitter_name": "Bo Li", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-02-10 23:32:15"}, {"errata_id": "7193", "doc-id": "RFC8794", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "19.", "orig_text": "   [Matroska] Lhomme, S., Bunkus, M., and D. Rice, \"Matroska Media\r\n              Container Format Specifications\", Work in Progress,\r\n              Internet-Draft, draft-ietf-cellar-matroska-05, 17 April\r\n              2020, <https://tools.ietf.org/html/draft-ietf-cellar-\r\n              matroska-05>.\r\n", "correct_text": "   [Matroska] Lhomme, S., Bunkus, M., and D. Rice, \"Matroska Media\r\n              Container Format Specifications\", Work in Progress,\r\n              Internet-Draft, draft-ietf-cellar-matroska-05, 17 April\r\n              2020, <https://tools.ietf.org/html/draft-ietf-cellar-\r\n              matroska-05>.\r\n\r\n   [POSIX]    IEEE and The Open Group, \"Portable Operating System\r\n              Interface (POSIX(R)) Base Specifications, Issue 7\",\r\n              DOI 10.1109/IEEESTD.2018.8277153, 31 January 2018,\r\n              <https://standards.ieee.org/standard/1003_1-2017.html>.\r\n", "notes": "Added a reference to POSIX for the new nanosecond explanation.\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/pull/415", "submit_date": "2022-10-30", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5767", "doc-id": "RFC7170", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3.1", "orig_text": "   EAP method messages are carried within EAP-Payload TLVs defined in\r\n   Section 4.2.10.  If more than one method is going to be executed in\r\n   the tunnel, then upon method completion, the server MUST send an\r\n   Intermediate-Result TLV indicating the result.", "correct_text": "   EAP method messages are carried within EAP-Payload TLVs defined in\r\n   Section 4.2.10.  Upon completion of each EAP authentication method in\r\n   the tunnel, the server MUST send an Intermediate-Result TLV\r\n   indicating the result.", "notes": "TEAP description is somewhat vague in discussion about \"EAP methods\" vs. \"EAP authentication methods\" as it comes to the EAP methods performed in Phase 2 within the TLS tunnel. RFC 3748 defines Identity request/response as an EAP method. However, this method is not an \"authentication method\" which is a special case of an method where the Type is 4 or greater.\r\n\r\nRFC 7170 uses correct terminology in the first paragraph of Section 3.3.1 when talking about multiple authentication methods not being allowed by RFC 3748 in a single EAP conversation. However, many, but not all, of the following \"[EAP] method\" instances are actually referring to \"[EAP] authentication method\". This results in incorrect claims on when the Intermediate-Result TLV and Crypto-Binding TLV are used. They are not used after an EAP non-authentication method like Identity (e.g., see the example in C.3); they are used after each EAP authentication method like EAP-pwd.\r\n\r\nFurthermore, the comment about \"more than one method is going to be executed in the tunnel\" does not sound accurate. This applies even if only a single EAP authentication method is executed in the tunnel (Identity method is not required to be executed). The proposed text in this errata entry addresses these two issues in Section 3.3.1. The following additional changes would be needed to make rest of the specification use the terms more accurately:\r\n\r\n3.3.3: \"after each successful EAP method\" --> \"after each successful EAP authentication method\"\r\n3.8.3: \"completion of the EAP method\" --> \"completion of the EAP authentication method\"\r\n4.2.11: \"between multiple inner EAP methods within EAP\" --> \"after each inner EAP authentication method\"\r\n4.2.13: \"after each successful EAP method\" --> \"after each successful EAP authentication method\"", "submit_date": "2019-06-28", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:16:19"}, {"errata_id": "5768", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.", "orig_text": "   The Compound MAC computation is as follows:\r\n\r\n      CMK = CMK[j]\r\n      Compound-MAC = MAC( CMK, BUFFER )\r\n\r\n   where j is the number of the last successfully executed inner EAP\r\n   method, MAC is the MAC function negotiated in TLS 1.2 [RFC5246], and\r\n   BUFFER is created after concatenating these fields in the following\r\n   order:\r\n", "correct_text": "The Compound MAC computation is as follows:\r\n\r\n    Compound-MAC = the first 20 octets of MAC( CMK[n], BUFFER )\r\n\r\nwhere n is the number of the last successfully executed inner method, MAC is the MAC function negotiated in TLS (e.g. TLS 1.2 in [RFC5246]), and BUFFER is created after concatenating these fields in the following order:\r\n", "notes": "This definition of how Compound MAC is computed is not compatible with the definition of Compound MAC fields in the Crypto-Binding TLV. Those fields have a fixed length of 20 octets based on Section 4.2.13 (and that TLV is claimed to have a fixed length of 76 octets). However, the MAC function negotiated in TLS have variable mac_length (e.g., MAC=SHA256 used HMAC-SHA256 with mac_length=32).\r\n\r\nHow is this supposed to work? Is Section 4.2.13 wrong in claiming that the Compound MAC fields are 20 octets? Or is Section 5.3 wrong in not specifying MAC() function to truncate the output to 20 octets? One of those need to be changed since the current design would work only with the mac_length=20 case (i.e., MAC=SHA with HMAC-SHA1).\r\n\r\nFurthermore, that \"TLS 1.2\" part should not be hardcoding this to not allow TLS 1.3 or newer versions from being used.\r\n\r\nIt is also a bit strange to see the BUFFER include \"The EAP Type sent by the other party in the first TEAP message.\" since that can only be EAP Type=TEAP, i.e., 55. If that is indeed a fixed value, it does not seem to add any protection for a negotiated parameter as a part of the crypto binding. Regardless, it would be good to be clearer in the text on how this \"EAP Type\" is to be encoded here (assumable it is a single octet field with value 0x37).\r\n\r\nPaul Wouters(AD): Corrected Text provided by the WG and in 7170bis", "submit_date": "2019-06-29", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:19:26"}, {"errata_id": "7194", "doc-id": "RFC7854", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.8", "orig_text": "   Information type values 0 through 32767 MUST be assigned using the\r\n   \"Standards Action\" policy, and values 32768 through 65530 using the\r\n   \"Specification Required\" policy, defined in [RFC5226].  Values 65531\r\n   through 65534 are Experimental, and values 0 and 65535 are Reserved.", "correct_text": "   Information type values 0 through 127 MUST be assigned using the\r\n   \"Standards Action\" policy, and values 128 through 250 using the\r\n   \"Specification Required\" policy, defined in [RFC5226].  Values 251\r\n   through 254 are Experimental, and values 0 and 255 are Reserved.", "notes": "In Section 4.9 Peer Down Notification. The \"Reason\" field is defined as one octet, while the IANA consideration section is defining values as 2-octets range. This errata suggests updating the IANA registry, instead of the size of the \"Reason\" field in the Peer Down Notification message to avoid breaking existing implementations that use one-octet reason.\r\n\r\n[WK]: See thread https://mailarchive.ietf.org/arch/msg/grow/s-qcQpAkFVK3beirNYqY4MYfbFw/ for tracking. IANA has confirmed that they can update registries from verified errata.", "submit_date": "2022-10-30", "submitter_name": "Ahmed Elhassany", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2022-11-03 11:17:40"}, {"errata_id": "7195", "doc-id": "RFC4532", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   specification, the term \"the authorization identity\" and \"the\r\n   authzId\" are generally to be read as \"the primary authorization\r\n   identity\" and the \"the primary authzId\", respectively.", "correct_text": "   specification, the term \"the authorization identity\" and \"the\r\n   authzId\" are generally to be read as \"the primary authorization\r\n   identity\" and \"the primary authzId\", respectively.", "notes": "Doubled \"the\".", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-31 23:15:08"}, {"errata_id": "7196", "doc-id": "RFC4532", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   When a Proxied Authorization Control is be attached to the \"Who am", "correct_text": "   When a Proxied Authorization Control is attached to the \"Who am", "notes": "Erroneous \"be\".", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-31 23:20:00"}, {"errata_id": "7197", "doc-id": "RFC4532", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   The LDAP \"Who am I?\" operation takes it's name from the UNIX", "correct_text": "   The LDAP \"Who am I?\" operation takes its name from the UNIX", "notes": "The possessive form of \"it\" should be written without an apostrophe.", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-31 23:26:03"}, {"errata_id": "7198", "doc-id": "RFC4528", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   part the operation.", "correct_text": "   part of the operation.", "notes": "Missing \"of\".", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-31 23:29:47"}, {"errata_id": "7199", "doc-id": "RFC4529", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   object class identifier from an attribute descriptions.", "correct_text": "   object class identifier from an attribute description.", "notes": "Erroneous \"descriptions\".", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-31 23:42:25"}, {"errata_id": "7200", "doc-id": "RFC4527", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   controlType is 1.3.6.1.1.13.1 and whose the controlValue, an OCTET", "correct_text": "   controlType is 1.3.6.1.1.13.1 and whose controlValue, an OCTET", "notes": "Erroneous \"the\".", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-31 23:46:40"}, {"errata_id": "7201", "doc-id": "RFC4526", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   This documents extends LDAPv3 to support absolute True and False", "correct_text": "   This document extends LDAPv3 to support absolute True and False", "notes": "Wrong noun form.", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-10-31 23:54:00"}, {"errata_id": "5769", "doc-id": "RFC7622", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "An entity that prepares a string for inclusion in an XMPP domainpart\r\nslot MUST ensure that the string consists only of Unicode code points\r\nthat are allowed in NR-LDH labels or U-labels as defined in\r\n[RFC5890].", "correct_text": "An entity that prepares a string for inclusion in an XMPP domainpart\r\nslot MUST ensure that the string consists only of Unicode code points\r\nthat are allowed in NR-LDH labels or U-labels as defined in\r\n[RFC5890], or the DNS label separator \"dot\" (U+002E, FULL STOP).", "notes": "The current specification forbids the inclusion of dots (\".\") in the domainpart, since they are not allowed in NR-LDH nor U-labels. But they should be allowed, as otherwise a DNS name could never be put into an XMPP domainpart (which is commonly done).\r\n\r\n----- Verifier notes -----\r\nThis is correct as far as it goes, but there's more to the fix than this, so proper discussion, consensus, and document update are needed.  There are, for example, other dot characters that need to be allowed as well as U+002E.  The bottom line is that Florian is correct that DNS label separators need to be allowed, and the proper fix to the text is deferred to any future document update.", "submit_date": "2019-06-30", "submitter_name": "Florian Schmaus", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5770", "doc-id": "RFC7170", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.4", "orig_text": "   TEAP authentication assures the Master Session Key (MSK) and Extended\r\n   Master Session Key (EMSK) output from the EAP method are the result\r\n   of all authentication conversations by generating an Intermediate\r\n   Compound Key (IMCK).  The IMCK is mutually derived by the peer and\r\n   the server as described in Section 5.2 by combining the MSKs from\r\n   inner EAP methods with key material from TEAP Phase 1.  The resulting\r\n   MSK and EMSK are generated as part of the IMCKn key hierarchy as\r\n   follows:\r\n\r\n      MSK  = TLS-PRF(S-IMCK[j], \"Session Key Generating Function\", 64)\r\n      EMSK = TLS-PRF(S-IMCK[j],\r\n           \"Extended Session Key Generating Function\", 64)\r\n\r\n   where j is the number of the last successfully executed inner EAP\r\n   method.\r\n", "correct_text": "", "notes": "Section 5.4 claims that IMCK (and as such, also) S-IMCK[j] is derived by combining the MSKs from inner EAP methods while Section 5.2 talks about two different derivations: one based on MSK and the other one based on EMSK. Section 5.2 seems clear on both MSK and EMSK based values being used in Compound MAC (since both are actually included in the Crypto-Binding TLV). However, Section 5.2 does not clarify how a unique S-IMCK[j] should be derived since there can be two different IMSK[j] values based on whether the inner EAP method generates MSK and EMSK. This gets even more confusing if there is a series of inner EAP methods of which at least one generates both MSK and EMSK, at least one generates only MSK, and at least one does not generate either MSK or EMSK. How exactly would MSK/EMSK from TEAP be derived in those cases? Based on Section 5.4, these are based on S-IMCK[j], but it is not clear how that is derived due to Section 5.2 having three different ways of deriving the IMSK[j] and two different Compound MAC values (and consequently, two different ways of deriving S-IMCK[j] after each successfully completed EAP authentication method).\r\n\r\nIt does not look like this could work in practice. There needs to be a clear definition of how to derive a single S-IMCK[j] value for TEAP MSK/EMSK derivation. It would also be helpful to clarify how CMK[j] is derived for each inner EAP method in case of different MSK/EMSK derivation support between the EAP methods used in the sequence.\r\n\r\nPaul Wouters(AD): This is curently all addressed in the 7170bis draft", "submit_date": "2019-07-01", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-02 15:02:31"}, {"errata_id": "5789", "doc-id": "RFC7622", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "An entity that prepares a string for inclusion in an XMPP domainpart\r\nslot MUST ensure that the string consists only of Unicode code points\r\nthat are allowed in NR-LDH labels or U-labels as defined in\r\n[RFC5890].", "correct_text": "An entity that prepares a string for inclusion in an XMPP\r\ndomainpart slot MUST ensure that the string consists only of\r\n- code points allowed in U-labels as defined in [RFC5890]\r\n- % U+0025 PERCENT SIGN\r\n- . U+002E (FULL STOP, DNS label separator \"dot\")\r\n- : U+003A (COLON)\r\n- ] U+005B (LEFT SQUARE BRACKET)\r\n- [ U+005D (RIGHT SQUARE BRACKET)", "notes": "This is a follow up and update on Errata ID #5769.  Besides allowing DNS label separators in the domainpart, this further allows codepoints not allowed in U-labels but required by the IP-literal rule of RFC6874, which is used by RFC7622 to allow IPv6 addresses in XMPP domainparts. As in the previous errata, this also drops the reference to NR-LDH labels, which I believe to be unnecessary.\r\n\r\n===== Verifier Notes =====\r\nAs with the related errata report, this is held for document update because more discussion and consensus is needed.  So this is on record for that discussion.", "submit_date": "2019-07-22", "submitter_name": "Florian Schmaus", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5791", "doc-id": "RFC8620", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "\"capabilities\": {\r\n  \"urn:ietf:params:jmap:core\": {\r\n    \"maxSizeUpload\": 50000000,\r\n    \"maxConcurrentUpload\": 8,\r\n    \"maxSizeRequest\": 10000000,\r\n    \"maxConcurrentRequest\": 8,\r\n    \"maxCallsInRequest\": 32,\r\n    \"maxObjectsInGet\": 256,\r\n    \"maxObjectsInSet\": 128,\r\n    \"collationAlgorithms\": [\r\n      \"i;ascii-numeric\",\r\n      \"i;ascii-casemap\",\r\n      \"i;unicode-casemap\"\r\n    ]\r\n  },\r\n  \"urn:ietf:params:jmap:mail\": {}\r\n  \"urn:ietf:params:jmap:contacts\": {},\r\n  \"https://example.com/apis/foobar\": {\r\n    \"maxFoosFinangled\": 42\r\n  }\r\n}", "correct_text": "\"capabilities\": {\r\n  \"urn:ietf:params:jmap:core\": {\r\n    \"maxSizeUpload\": 50000000,\r\n    \"maxConcurrentUpload\": 8,\r\n    \"maxSizeRequest\": 10000000,\r\n    \"maxConcurrentRequests\": 8,\r\n    \"maxCallsInRequest\": 32,\r\n    \"maxObjectsInGet\": 256,\r\n    \"maxObjectsInSet\": 128,\r\n    \"collationAlgorithms\": [\r\n      \"i;ascii-numeric\",\r\n      \"i;ascii-casemap\",\r\n      \"i;unicode-casemap\"\r\n    ]\r\n  },\r\n  \"urn:ietf:params:jmap:mail\": {},\r\n  \"urn:ietf:params:jmap:contacts\": {},\r\n  \"https://example.com/apis/foobar\": {\r\n    \"maxFoosFinangled\": 42\r\n  }\r\n}", "notes": "In the capabilities section of the example Session Resource response, \"maxConcurrentRequest\" should be \"maxConcurrentRequests\". \r\n\r\nIn addition, the following line is missing a trailing comma:\r\n  \"urn:ietf:params:jmap:mail\": {}", "submit_date": "2019-07-02", "submitter_name": "Neil Jhaveri", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-23 16:32:45"}, {"errata_id": "7202", "doc-id": "RFC4524", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   CCITT (Commite' Consultatif International de Telegraphique et", "correct_text": "   CCITT (Comite Consultatif International de Telegraphique et", "notes": "Misspelling \"Commite\".", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 00:10:56"}, {"errata_id": "5771", "doc-id": "RFC8555", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1.1", "orig_text": "Clients access the directory by sending a GET request to the\r\ndirectory URL.", "correct_text": "Clients access the directory by sending a GET request to the directory\r\nURL.  Before making a request to any URL from the directory, the client\r\nMUST evaluate whether the directory object is still fresh according to\r\nthe Cache-Control header(s) received when that directory object was\r\naccessed.  If no Cache-Control header(s) were received, the client MUST\r\nact as if \"Cache-Control: no-cache\" was received.  If the directory\r\nobject is no longer fresh, the client MUST access the directory again\r\n(by sending another GET request to the directory URL) and then use the\r\nupdated directory object.", "notes": "The original text is underspecified, because it doesn't say how long a directory remains valid.  A server should be able to update its directory (e.g., to add support for newAuthz, to update the termsOfService URL, etc) without having to worry about clients holding on to stale directory objects.\r\nWhilst in practice many clients tend to re-fetch the server's directory object frequently, I think that it's unwise to leave this to chance.\n --VERIFIER NOTES-- \n   WG consensus per the thread including https://mailarchive.ietf.org/arch/msg/acme/I2oeALKJTyCwlMOp1v9BTadahyE is to reject the proposed erratum.", "submit_date": "2019-07-02", "submitter_name": "Rob Stradling", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5772", "doc-id": "RFC8126", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   Jon Postel and Joyce Reynolds provided a detailed explanation on what\r\n   IANA needs in order to manage assignments efficiently, and patiently\r\n   provided comments on multiple versions of this document.  Brian\r\n   Carpenter provided helpful comments on earlier versions of the\r\n   document.  One paragraph in the Security Considerations section was\r\n   borrowed from RFC 4288.\r\n", "correct_text": "   Jon Postel and Joyce Reynolds provided a detailed explanation on what\r\n   IANA needs in order to manage assignments efficiently, and patiently\r\n   provided comments on multiple versions of this document.  Brian\r\n   Carpenter provided helpful comments on earlier versions of the\r\n   document.  One paragraph in the Security Considerations section was\r\n   borrowed from RFC 2048.\r\n", "notes": "Incorrect reference in \u00a8Acknowledgments from the First Edition (1998)\u00a8, p. 46", "submit_date": "2019-07-03", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5773", "doc-id": "RFC7489", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "   <!-- The DMARC policy that applied to the messages in\r\n        this report. -->\r\n   <xs:complexType name=\"PolicyPublishedType\">\r\n     <xs:all>\r\n       <!-- The domain at which the DMARC record was found. -->\r\n       <xs:element name=\"domain\" type=\"xs:string\"/>\r\n       <!-- The DKIM alignment mode. -->\r\n       <xs:element name=\"adkim\" type=\"AlignmentType\"\r\n                   minOccurs=\"0\"/>\r\n       <!-- The SPF alignment mode. -->\r\n       <xs:element name=\"aspf\" type=\"AlignmentType\"\r\n                   minOccurs=\"0\"/>\r\n       <!-- The policy to apply to messages from the domain. -->\r\n       <xs:element name=\"p\" type=\"DispositionType\"/>\r\n       <!-- The policy to apply to messages from subdomains. -->\r\n       <xs:element name=\"sp\" type=\"DispositionType\"/>\r\n       <!-- The percent of messages to which policy applies. -->\r\n       <xs:element name=\"pct\" type=\"xs:integer\"/>\r\n       <!-- Failure reporting options in effect. -->\r\n       <xs:element name=\"fo\" type=\"xs:string\"/>\r\n     </xs:all>\r\n   </xs:complexType>", "correct_text": "   <!-- The DMARC policy that applied to the messages in\r\n        this report. -->\r\n   <xs:complexType name=\"PolicyPublishedType\">\r\n     <xs:all>\r\n       <!-- The domain at which the DMARC record was found. -->\r\n       <xs:element name=\"domain\" type=\"xs:string\"/>\r\n       <!-- The DKIM alignment mode. -->\r\n       <xs:element name=\"adkim\" type=\"AlignmentType\"/>\r\n       <!-- The SPF alignment mode. -->\r\n       <xs:element name=\"aspf\" type=\"AlignmentType\"/>\r\n       <!-- The policy to apply to messages from the domain. -->\r\n       <xs:element name=\"p\" type=\"DispositionType\"/>\r\n       <!-- The policy to apply to messages from subdomains. -->\r\n       <xs:element name=\"sp\" type=\"DispositionType\"/>\r\n       <!-- The percent of messages to which policy applies. -->\r\n       <xs:element name=\"pct\" type=\"xs:integer\"/>\r\n       <!-- Failure reporting options. -->\r\n       <xs:element name=\"fo\" type=\"xs:string\" />\r\n     </xs:all>\r\n   </xs:complexType>", "notes": "The name \"PolicyPublishedType\" suggests that the elements within it represent the domain's published policy. But the comment from element \"fo\" describes itself as \"Failure reporting options IN EFFECT\".\r\n\r\nA lot of organizations do not send failure (forensic) reports and do not publish the \"fo\" element in their aggregate reports (Google, Yahoo!, Zoho) . This is reasonable since the description says \"in effect\". But the field also has a (default) MinOccurs of 1 because MinOccurs is not defined. So by omitting the element, the reports from these organizations are in violation of the guidelines.\r\n\r\nShould an aggregate report have a mandatory \"fo\" element, even if the organization doesn't do failure (forensic) reporting? If so, than the comment \"<!-- Failure reporting options in effect. -->\" should be \"<!-- Failure reporting options. -->\". And if not, than the minOccurs=\"0\" should be added to the \"fo\" element to allow it to be optional.\r\n\r\nEven if DMARC policy options are OPTIONAL and not specified, the messages are processed by the receiver with the default values. This is also the case for adkim and aspf, which also have a minOccurs of 0.\r\n\r\nSo i would suggest the following:\r\n\r\nThe PolicyPublishedType describe the policy that is applied tot the messages in the reports. Elements that are not defined by the domain's DMARC policy should be filled with the default values, as they would also be processed that way. So when adkim is not configured in the policy, the report should state value \"r\" as this is the default value. Same applies to aspf (\"r\"), sp (same as \"p\"), pct (100) and fo (0). Even if an organization doesn't send out failure reports it MUST mention the \"fo\" value from the domain's policy, or, when not specified, the default value of 0.\n --VERIFIER NOTES-- \nThe design choice may be debatable, but this not an erratum in the sense of an error.", "submit_date": "2019-07-03", "submitter_name": "Freddie Leeman", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-03 07:04:28"}, {"errata_id": "5801", "doc-id": "RFC7616", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.7", "orig_text": "   This specification defines the following algorithms:\r\n\r\n   o  SHA2-256 (mandatory to implement)\r\n\r\n   o  SHA2-512/256 (as a backup algorithm)\r\n\r\n   o  MD5 (for backward compatibility).\r\n", "correct_text": "   This specification defines the following algorithms:\r\n\r\n   o  SHA-256 (mandatory to implement)\r\n\r\n   o  SHA-512/256 (as a backup algorithm)\r\n\r\n   o  MD5 (for backward compatibility).\r\n", "notes": "The SHA-2 family of algorithms are conventionally referred to using just \"SHA-\" and the bit strength, not \"SHA2-\" and the bit strength.", "submit_date": "2019-08-06", "submitter_name": "Franck MOURRE", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5802", "doc-id": "RFC5280", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1.12", "orig_text": "   id-kp-serverAuth             OBJECT IDENTIFIER ::= { id-kp 1 }\r\n   -- TLS WWW server authentication\r\n   -- Key usage bits that may be consistent: digitalSignature,\r\n   -- keyEncipherment or keyAgreement\r\n\r\n   id-kp-clientAuth             OBJECT IDENTIFIER ::= { id-kp 2 }\r\n   -- TLS WWW client authentication\r\n   -- Key usage bits that may be consistent: digitalSignature\r\n   -- and/or keyAgreement", "correct_text": "   id-kp-serverAuth             OBJECT IDENTIFIER ::= { id-kp 1 }\r\n   -- TLS server authentication\r\n   -- Key usage bits that may be consistent: digitalSignature,\r\n   -- keyEncipherment or keyAgreement\r\n\r\n   id-kp-clientAuth             OBJECT IDENTIFIER ::= { id-kp 2 }\r\n   -- TLS client authentication\r\n   -- Key usage bits that may be consistent: digitalSignature\r\n   -- and/or keyAgreement", "notes": "The proposed change removes the WWW part of the description. In practice these object identifiers are used for server and client applications, but not necessarily web applications. In particular:\r\n - openssl verification considers them unconditionally even if the server is not a web server or the client a web client\r\n - There is no object identifier that can be used for protocols like SMTP, IMAP, POP3, LDAP, radius, ...; in practice all these protocols are deployed with the identifiers for WWW\r\n - Standards like common criteria assume that these object identifiers are for generic server and clients [0].\r\n\r\n[0]. https://www.niap-ccevs.org/MMO/PP/-442-/#FCS_TLSC_EXT.1.1", "submit_date": "2019-08-06", "submitter_name": "Nikos Mavrogiannopoulos", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-29 15:19:26"}, {"errata_id": "5803", "doc-id": "RFC7616", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A", "orig_text": "   o  Adds support for two new algorithms, SHA2-256 as mandatory and\r\n      SHA2-512/256 as a backup, and defines the proper algorithm\r\n      negotiation.  The document keeps the MD5 algorithm support but\r\n      only for backward compatibility.", "correct_text": "   o  Adds support for two new algorithms, SHA-256 as mandatory and\r\n      SHA-512/256 as a backup, and defines the proper algorithm\r\n      negotiation.  The document keeps the MD5 algorithm support but\r\n      only for backward compatibility.", "notes": "The SHA-2 family of algorithms are conventionally referred to using just \"SHA-\" and the bit strength, not \"SHA2-\" and the bit strength.", "submit_date": "2019-08-06", "submitter_name": "Franck MOURRE", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6201", "doc-id": "RFC7836", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "where m and q are the parameters of an elliptic curve defined in the\r\nGOST R 34.10-2012 [GOST3411-2012] standard (m is an elliptic curve\r\npoints group order, q is an order of a cyclic subgroup), P is a non-\r\nzero point of the subgroup; P is defined by a protocol.", "correct_text": "where m and q are the parameters of an elliptic curve defined in the\r\nGOST R 34.10-2012 [GOST3411-2012] standard (m is an elliptic curve\r\npoints group order, q is an order of a cyclic subgroup), P is a non-\r\nzero point of the subgroup; P is defined by a specification of an elliptic\r\ncurve or by a protocol. Note that in most practical cases the private key\r\ny is unknown so the point (y*P) is just a pair of coordinates, which\r\nMUST be checked for satisfying the curve equation before calculating\r\nthe K value.", "notes": "The proposed text clarifies the P point specification ways and the need to check the public key of one side for belonging to the elliptic curve used by the opposite side.", "submit_date": "2020-06-03", "submitter_name": "Billy Brumley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-07-01 10:46:18"}, {"errata_id": "5895", "doc-id": "RFC4330", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   Root Delay: This is a 32-bit signed fixed-point number indicating the\r\n   total roundtrip delay to the primary reference source, in seconds\r\n   with the fraction point between bits 15 and 16.  Note that this\r\n   variable can take on both positive and negative values, depending on\r\n   the relative time and frequency offsets.  This field is significant\r\n   only in server messages, where the values range from negative values\r\n   of a few milliseconds to positive values of several hundred\r\n   milliseconds.\r\n", "correct_text": "   Root Delay: This is a 32-bit unsigned fixed-point number indicating\r\n   the total roundtrip delay to the primary reference source, in seconds\r\n   with the fraction point between bits 15 and 16.  This field is\r\n   significant only in server messages.\r\n", "notes": "RFC 4330 claims the root delay is a number indicating the \"total roundtrip delay to the primary reference source\". As the minimum amount of time it can take to reach the other server is zero, the delay must be greater than or equal to zero. A sign should never be necessary for root delay alone.\r\n\r\nNTPv3 (RFC 1305) defines the root delay type to be \"\u2026a signed fixed-point number indicating the total roundtrip delay to the primary reference source at the root of the synchronization subnet, in seconds. Note that this variable can take on both positive and negative values, depending on clock precision and skew.\"\r\n\r\nWhile NTPv3 clearly indicates that it should be signed, it should still never be possible to populate this with a negative value since it is still a total roundtrip delay.\r\n\r\nNTPv4 (RFC 5905) changes the root delay type to be the NTP Short Format, which \"\u2026includes a 16-bit unsigned seconds field and a 16-bit fraction field.\"\r\n\r\nRFC 5905's Code Skeleton also has implementations that treat the root delay field as entirely unsigned:\r\n/*\r\n * Timestamp conversion macroni\r\n */\r\n#define FRIC        65536.                  /* 2^16 as a double */\r\n#define D2FP(r)     ((tdist)((r) * FRIC))   /* NTP short */\r\n#define FP2D(r)     ((double)(r) / FRIC)\r\n\u2026\r\n        p->rootdelay = FP2D(r->rootdelay);\r\n\u2026\r\n        x.rootdelay = D2FP(s.rootdelay);\n --VERIFIER NOTES-- \n RFC 4330 has been obsoleted by RFC 5905, an IETF standards track document. It is, therefore, inappropriate to continue to make errata reports against RFC 4330.\r\n\r\nIt may be worth noting that in RFC 5905, the 'Root Delay' field of the NTP message is described as:\r\n\r\n   Total round-trip delay to the reference clock, in NTP short format.", "submit_date": "2019-11-07", "submitter_name": "Daniel Loffgren", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-11-07 13:30:41"}, {"errata_id": "5774", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix C", "orig_text": "       <!-- The DMARC disposition applying to matching\r\n            messages. -->\r\n       <xs:element name=\"policy_evaluated\"\r\n                   type=\"PolicyEvaluatedType\"\r\n                   minOccurs=\"1\"/>\r\n\r\n       <!-- The RFC5321.MailFrom domain. -->\r\n       <xs:element name=\"envelope_from\" type=\"xs:string\"\r\n                   minOccurs=\"1\"/>\r\n\r\n       <!-- The RFC5322.From domain. -->\r\n       <xs:element name=\"header_from\" type=\"xs:string\"\r\n                   minOccurs=\"1\"/>\r\n\r\n       <!-- The \"d=\" parameter in the signature. -->\r\n       <xs:element name=\"domain\" type=\"xs:string\"\r\n                   minOccurs=\"1\"/>\r\n\r\n       <!-- The DKIM verification result. -->\r\n       <xs:element name=\"result\" type=\"DKIMResultType\"\r\n                   minOccurs=\"1\"/>\r\n\r\n       <!-- The checked domain. -->\r\n       <xs:element name=\"domain\" type=\"xs:string\" minOccurs=\"1\"/>\r\n\r\n       <!-- The scope of the checked domain. -->\r\n       <xs:element name=\"scope\" type=\"SPFDomainScope\" minOccurs=\"1\"/>\r\n\r\n       <!-- The SPF verification result. -->\r\n       <xs:element name=\"result\" type=\"SPFResultType\"\r\n                   minOccurs=\"1\"/>\r\n\r\n       <!-- There will always be at least one SPF result. -->\r\n       <xs:element name=\"spf\" type=\"SPFAuthResultType\" minOccurs=\"1\"\r\n                   maxOccurs=\"unbounded\"/>", "correct_text": "       <!-- The DMARC disposition applying to matching\r\n            messages. -->\r\n       <xs:element name=\"policy_evaluated\"\r\n                   type=\"PolicyEvaluatedType\"/>\r\n\r\n       <!-- The RFC5321.MailFrom domain. -->\r\n       <xs:element name=\"envelope_from\" type=\"xs:string\"/>\r\n\r\n       <!-- The RFC5322.From domain. -->\r\n       <xs:element name=\"header_from\" type=\"xs:string\"/>\r\n\r\n       <!-- The \"d=\" parameter in the signature. -->\r\n       <xs:element name=\"domain\" type=\"xs:string\"/>\r\n\r\n       <!-- The DKIM verification result. -->\r\n       <xs:element name=\"result\" type=\"DKIMResultType\"/>\r\n\r\n       <!-- The checked domain. -->\r\n       <xs:element name=\"domain\" type=\"xs:string\"/>\r\n\r\n       <!-- The scope of the checked domain. -->\r\n       <xs:element name=\"scope\" type=\"SPFDomainScope\"/>\r\n\r\n       <!-- The SPF verification result. -->\r\n       <xs:element name=\"result\" type=\"SPFResultType\"/>\r\n\r\n       <!-- There will always be at least one SPF result. -->\r\n       <xs:element name=\"spf\" type=\"SPFAuthResultType\"\r\n                   maxOccurs=\"unbounded\"/>\r\n", "notes": "Removed all minOccurs=\"1\" from the DMARC XML Schema since the NOTE at the beginning of the appendix already states that 'unless otherwise specified, the minOccurs and maxOccurs values for each element are set to 1'. These (9) unnecessary specifications of minOccurs can cause confusion and lead to incorrect implementations.\r\n\r\nWhile this report is technically correct, it is hard to see that the text as currently present is harmful or confusing. This is left for an update if/when the document is revised.", "submit_date": "2019-07-03", "submitter_name": "Freddie Leeman", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-06-01 19:59:49"}, {"errata_id": "5775", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.", "orig_text": "   For authentication methods that generate keying material, further\r\n   protection against man-in-the-middle attacks is provided through\r\n   cryptographically binding keying material established by both TEAP\r\n   Phase 1 and TEAP Phase 2 conversations.  After each successful inner\r\n   EAP authentication, EAP EMSK and/or MSKs are cryptographically\r\n   combined with key material from TEAP Phase 1 to generate a Compound\r\n   Session Key (CMK).  The CMK is used to calculate the Compound MAC as\r\n   part of the Crypto-Binding TLV described in Section 4.2.13, which\r\n   helps provide assurance that the same entities are involved in all\r\n   communications in TEAP.  During the calculation of the Compound MAC,\r\n   the MAC field is filled with zeros.\r\n\r\n   The Compound MAC computation is as follows:\r\n\r\n      CMK = CMK[j]\r\n      Compound-MAC = MAC( CMK, BUFFER )\r\n\r\n   where j is the number of the last successfully executed inner EAP\r\n   method, MAC is the MAC function negotiated in TLS 1.2 [RFC5246], and\r\n   BUFFER is created after concatenating these fields in the following\r\n   order:\r\n", "correct_text": "[Append to the end of section 5.3] \r\n\r\nIf no key generating inner method is run then no EMSK or MSK will be generated. If an IMSK needs to be generated then the MSK and therefore the IMSK is set to all zeroes (i.e., IMSK = MSK = 32 octets of 0x00s).", "notes": "Section 5.3 does not describe how CMK is derived for the case where not inner EAP authentication method is executed (e.g., when Basic-Password-Auth is used at TLV level). Section 5.4 seems to address that case by implying that S-IMCK = session_key_seed (S-IMCK[0] does indeed have that value, but MSK/EMSK derivation uses S-IMCK[j], so use of S-IMCK here is slightly misleading). This seems to imply that MSK/EMSK derivation uses S-IMCK[0] and as such, Compound MAC derivation might use CMK[0], but CMK[0] is not defined (Section 5.2 defines CMK[j] for j=1..n-1, but not for j=0.\r\n\r\nFurthermore, Section 4.2.13 is not clear on what Flags should be used in Crypto-Binding TLV when no inner EAP authentication method is executed. The only three values defined for Flags (1..3) all imply that either EMSK or MSK (or both) based Compound MAC is present, but there is no inner EAP method MSK/EMSK in this case since no such inner EAP method was executed. Maybe a new Flags value should be defined or alternatively, the MSK Compound MAC case could be extended to cover this no inner-EAP case with CMK[0] defined as proposed above to calculate the MSK Compound MAC.\r\n\r\nPaul Wouters(AD): Corrected Text provided by the WG and in 7170bis", "submit_date": "2019-07-04", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:29:12"}, {"errata_id": "5777", "doc-id": "RFC3394", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.1", "orig_text": "   1) Initialize variables.\r\n\r\n       Set A0 to an initial value (see 2.2.3)\r\n       For i = 1 to n\r\n            R[0][i] = P[i]", "correct_text": "   1) Initialize variables.\r\n\r\n       Set A[0] to an initial value (see 2.2.3)\r\n       For i = 1 to n\r\n            R[0][i] = P[i]", "notes": "An array subscript notation should be used for A[] ", "submit_date": "2019-07-10", "submitter_name": "Charles Timko", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 14:44:41"}, {"errata_id": "5783", "doc-id": "RFC3339", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.6", "orig_text": "   date-time       = full-date \"T\" full-time\r\n\r\n...\r\n\r\n      NOTE: ISO 8601 defines date and time separated by \"T\".\r\n      Applications using this syntax may choose, for the sake of\r\n      readability, to specify a full-date and full-time separated by\r\n      (say) a space character.", "correct_text": "", "notes": "This specification seems ambiguous; the ABNF allows only \u201cT\u201d/\u201ct\u201d as the separator, but the \u201cNOTE:\u201d paragraph describes acceptability of other separators.\r\n\r\nIt\u2019s unclear what \u201cthis syntax\u201d refers to: if \u201cthis\u201d refers to ISO 8601, then it seems irrelevant, but if \u201cthis\u201d means RFC 3339, then the paragraph conflicts with the ABNF.\r\n\r\nI\u2019m not sure of the proper fix because I don\u2019t know the intended meaning.", "submit_date": "2019-07-15", "submitter_name": "Felipe Gasper", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-04 14:21:36"}, {"errata_id": "5784", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.3.2", "orig_text": "Leading and trailing zeros are prohibited, subject to the rule that \r\nthere MUST be at least one digit before and after the decimal point.  \r\nThe value zero is represented as \"0.0\".\r\n\r\n\r\n", "correct_text": "Leading zeros before the first digit and trailing zeros after the \r\nlast digit are prohibited, subject to the rule that there MUST be \r\nat least one digit before and after the decimal point.  The value \r\nzero is represented as \"0.0\".", "notes": "Based on the rule in the orginal text, the value such as \"0.5\",\"0.0\" is illegal. So I think the intention of the original text is to make sure the leading zeros before the first digit and the trailing zero after the last digit are prohibited.\n --VERIFIER NOTES-- \n   The consensus on the NetMod WG was that this text was somewhat confusing, but understandable (and that crafting clear, concise replacement text will be ugly). I'm rejecting this, but future updates may want to consider addressing this anyway (I didn't feel it rose to the HFDU level) ", "submit_date": "2019-07-17", "submitter_name": "Qin WU", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5785", "doc-id": "RFC6130", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "F.3", "orig_text": "The content of the Interface Information Base is in this case\r\nidentical to than in Example 1, except that the 2-Hop Set contains an\r\nextra 2-Hop Tuple with N2_neighbor_iface_addr_list being {2} and\r\nN2_2hop_addr being {4}.  These two 2-Hop Tuples are illustrated by\r\nthe two lines from {2} to {3} and (2) to {4}, respectively.", "correct_text": "The content of the Interface Information Base is in this case\r\nidentical to that in Example 1, except that the 2-Hop Set contains an\r\nextra 2-Hop Tuple with N2_neighbor_iface_addr_list being {2} and\r\nN2_2hop_addr being {4}.  These two 2-Hop Tuples are illustrated by\r\nthe two lines from {2} to {3} and (2) to {4}, respectively.\r\n", "notes": "Typo in first sentence. \"than\" should read \"that\"", "submit_date": "2019-07-18", "submitter_name": "Steve Matty", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5786", "doc-id": "RFC8478", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.1.2.3", "orig_text": "   A Compressed_Block has the extra restriction that Block_Size is\r\n   always strictly less than the decompressed size.  If this condition\r\n   cannot be respected, the block must be sent uncompressed instead\r\n   (i.e., treated as a Raw_Block).", "correct_text": "   If this condition cannot be respected when generating a\r\n   Compressed_Block, the block must be sent uncompressed instead\r\n   (i.e., treated as a Raw_Block).", "notes": "The RFC as originally written places a limit on the size of compressed\r\nblocks (that they can be no larger than the compressed content they\r\nrepresent) above and beyond the restrictions placed on the other block\r\ntypes.\r\n\r\nThis restriction does not belong in the spec, and it should be\r\nremoved. Here's why:\r\n\r\nUnder only cursory examination, a rule like this makes sense. A\r\ncompressed representation that is larger than the uncompressed content\r\nit represents seems useless, since Zstandard supports raw blocks.\r\nHowever, even if this were true (which, see below), that reasoning\r\nmotivates implementing such a fallback in the compressor, it doesn't\r\nexplain why compressors should be required to implement such behavior.\r\n\r\nHowever, this restriction is not actually useful for decoders, and its\r\nremoval will not negatively affect decompressors or their\r\ninteroperability. All conforming decompressor implementations must\r\nalready be prepared to accept blocks, including compressed blocks, up\r\nto the Block_Maximum_Decompressed_Size, so loosening this restriction\r\nwill not require them to allocate any more memory than required at\r\npresent. And in fact, to the best of my knowledge, no decompressor\r\nimplementation currently enforces the restriction in question or has\r\never done so in the past.\r\n\r\nFinally, this restriction does in fact over-constrain compressors.\r\nCompressed blocks that are larger than the content they represent can\r\nnonetheless have value, when they contain entropy tables (e.g., a\r\nHuffman_Tree_Description), the cost of which is amortized over\r\nsubsequent blocks that reuse the same table description.\r\n\r\nIn short, this change is a safe, strict improvement over the existing\r\nlanguage, which better reflects the reality of implementations, and\r\nwhich removes a restriction which should never have been in the spec\r\nin the first place.\r\n\r\nWe've already made this change to the Zstandard format document\r\nmaintained in the reference implementation repo[0].\r\n\r\n[0] https://github.com/facebook/zstd/blob/dev/doc/zstd_compression_format.md#blocks\r\n\r\n===== Verifier Notes =====\r\nAll this is fine, but the document says exactly what it was meant to say when it was written; this is not an erratum.  This is now on record for discussion if the document is updated.", "submit_date": "2019-07-17", "submitter_name": "Felix Handte", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5787", "doc-id": "RFC124", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "RFCs Updated:  106", "correct_text": "RFCs Updated:  107", "notes": "Amusingly, this early RFC errata mis-labels the very RFC that it's updating (though it's correct in two other places in the document, including the title).", "submit_date": "2019-07-19", "submitter_name": "Darius Kazemi", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-01-12 12:01:27"}, {"errata_id": "5792", "doc-id": "RFC4226", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.3", "orig_text": "Implementations MUST extract a 6-digit code at a minimum and possibly\r\n7 and 8-digit code.  Depending on security requirements, Digit = 7 or\r\nmore SHOULD be considered in order to extract a longer HOTP value.", "correct_text": "Implementations MUST extract a 6-digit code at a minimum and possibly\r\n7, 8 and 9-digit code.  Depending on security requirements, Digit = 7\r\nor more SHOULD be considered in order to extract a longer HOTP value.\r\nThe code MUST NOT exceed 9 digits. ", "notes": "Although the detailed description of the dynamic truncation algorithm makes is clear that the code is generated from a 31 bit value, it is not explicitly stated in the main sections of the RFC that nine digits is the maximum number of digits supported by the algorithm.\r\n\r\nThe fact that nine digits is the maximum supported is alluded to in E.2, but this should be made more clear.\r\n\r\nThere are reports that TOTP implementations in the wild are supporting 10 digit codes. That mistaken behavior would be better discouraged by clarifying the limit of digits to 9.", "submit_date": "2019-07-24", "submitter_name": "Jeffrey Goldberg", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5793", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "   Alternatively, the authorization server MAY support including the\r\n   client credentials in the request-body using the following\r\n   parameters:", "correct_text": "   In addition to that, the authorization server MAY support including\r\n   the client credentials in the request-body using the following\r\n   parameters:", "notes": "Given that the authorization MUST support the HTTP Basic authentication scheme in the paragraphs just before this one, using the word \"alternatively\" here can be understood as \"instead of\", which is not the intention and can lead to confusion for implementors.\r\n\r\nThis intention is further highlighted by the use of the word MAY in the paragraph above.", "submit_date": "2019-07-25", "submitter_name": "Martin May", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5794", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "ToC", "orig_text": "   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   5\r\n   2.  Basic Grammar and Conventions . . . . . . . . . . . . . . . .   6\r\n     2.1.  Formatting Conventions  . . . . . . . . . . . . . . . . .   6\r\n     2.2.  Related Memos . . . . . . . . . . . . . . . . . . . . . .   7\r\n   3.  iCalendar Object Specification  . . . . . . . . . . . . . . .   8\r\n     3.1.  Content Lines . . . . . . . . . . . . . . . . . . . . . .   8\r\n       3.1.1.  List and Field Separators . . . . . . . . . . . . . .  11\r\n       3.1.2.  Multiple Values . . . . . . . . . . . . . . . . . . .  11\r\n       3.1.3.  Binary Content  . . . . . . . . . . . . . . . . . . .  11\r\n       3.1.4.  Character Set . . . . . . . . . . . . . . . . . . . .  12\r\n     3.2.  Property Parameters . . . . . . . . . . . . . . . . . . .  12\r\n       3.2.1.  Alternate Text Representation . . . . . . . . . . . .  13\r\n       3.2.2.  Common Name . . . . . . . . . . . . . . . . . . . . .  15\r\n       3.2.3.  Calendar User Type  . . . . . . . . . . . . . . . . .  15\r\n       3.2.4.  Delegators  . . . . . . . . . . . . . . . . . . . . .  16\r\n       3.2.5.  Delegatees  . . . . . . . . . . . . . . . . . . . . .  16\r\n       3.2.6.  Directory Entry Reference . . . . . . . . . . . . . .  17\r\n       3.2.7.  Inline Encoding . . . . . . . . . . . . . . . . . . .  17\r\n       3.2.8.  Format Type . . . . . . . . . . . . . . . . . . . . .  18\r\n       3.2.9.  Free/Busy Time Type . . . . . . . . . . . . . . . . .  19\r\n       3.2.10. Language  . . . . . . . . . . . . . . . . . . . . . .  20\r\n       3.2.11. Group or List Membership  . . . . . . . . . . . . . .  20\r\n       3.2.12. Participation Status  . . . . . . . . . . . . . . . .  21\r\n       3.2.13. Recurrence Identifier Range . . . . . . . . . . . . .  22\r\n       3.2.14. Alarm Trigger Relationship  . . . . . . . . . . . . .  23\r\n       3.2.15. Relationship Type . . . . . . . . . . . . . . . . . .  24\r\n       3.2.16. Participation Role  . . . . . . . . . . . . . . . . .  25\r\n       3.2.17. RSVP Expectation  . . . . . . . . . . . . . . . . . .  25\r\n       3.2.18. Sent By . . . . . . . . . . . . . . . . . . . . . . .  26\r\n       3.2.19. Time Zone Identifier  . . . . . . . . . . . . . . . .  26\r\n       3.2.20. Value Data Types  . . . . . . . . . . . . . . . . . .  28\r\n     3.3.  Property Value Data Types . . . . . . . . . . . . . . . .  29\r\n       3.3.1.  Binary  . . . . . . . . . . . . . . . . . . . . . . .  29\r\n       3.3.2.  Boolean . . . . . . . . . . . . . . . . . . . . . . .  30\r\n       3.3.3.  Calendar User Address . . . . . . . . . . . . . . . .  30\r\n       3.3.4.  Date  . . . . . . . . . . . . . . . . . . . . . . . .  31\r\n       3.3.5.  Date-Time . . . . . . . . . . . . . . . . . . . . . .  31\r\n       3.3.6.  Duration  . . . . . . . . . . . . . . . . . . . . . .  34\r\n       3.3.7.  Float . . . . . . . . . . . . . . . . . . . . . . . .  35\r\n       3.3.8.  Integer . . . . . . . . . . . . . . . . . . . . . . .  35\r\n       3.3.9.  Period of Time  . . . . . . . . . . . . . . . . . . .  36\r\n       3.3.10. Recurrence Rule . . . . . . . . . . . . . . . . . . .  37\r\n       3.3.11. Text  . . . . . . . . . . . . . . . . . . . . . . . .  45\r\n       3.3.12. Time  . . . . . . . . . . . . . . . . . . . . . . . .  46\r\n       3.3.13. URI . . . . . . . . . . . . . . . . . . . . . . . . .  48\r\n       3.3.14. UTC Offset  . . . . . . . . . . . . . . . . . . . . .  49\r\n     3.4.  iCalendar Object  . . . . . . . . . . . . . . . . . . . .  49\r\n     3.5.  Property  . . . . . . . . . . . . . . . . . . . . . . . .  50\r\n     3.6.  Calendar Components . . . . . . . . . . . . . . . . . . .  50\r\n       3.6.1.  Event Component . . . . . . . . . . . . . . . . . . .  52\r\n       3.6.2.  To-Do Component . . . . . . . . . . . . . . . . . . .  56\r\n       3.6.3.  Journal Component . . . . . . . . . . . . . . . . . .  58\r\n       3.6.4.  Free/Busy Component . . . . . . . . . . . . . . . . .  60\r\n       3.6.5.  Time Zone Component . . . . . . . . . . . . . . . . .  63\r\n       3.6.6.  Alarm Component . . . . . . . . . . . . . . . . . . .  72\r\n     3.7.  Calendar Properties . . . . . . . . . . . . . . . . . . .  77\r\n       3.7.1.  Calendar Scale  . . . . . . . . . . . . . . . . . . .  77\r\n       3.7.2.  Method  . . . . . . . . . . . . . . . . . . . . . . .  78\r\n       3.7.3.  Product Identifier  . . . . . . . . . . . . . . . . .  79\r\n       3.7.4.  Version . . . . . . . . . . . . . . . . . . . . . . .  80\r\n     3.8.  Component Properties  . . . . . . . . . . . . . . . . . .  81\r\n       3.8.1.  Descriptive Component Properties  . . . . . . . . . .  81\r\n         3.8.1.1.  Attachment  . . . . . . . . . . . . . . . . . . .  81\r\n         3.8.1.2.  Categories  . . . . . . . . . . . . . . . . . . .  82\r\n         3.8.1.3.  Classification  . . . . . . . . . . . . . . . . .  83\r\n         3.8.1.4.  Comment . . . . . . . . . . . . . . . . . . . . .  84\r\n         3.8.1.5.  Description . . . . . . . . . . . . . . . . . . .  85\r\n         3.8.1.6.  Geographic Position . . . . . . . . . . . . . . .  87\r\n         3.8.1.7.  Location  . . . . . . . . . . . . . . . . . . . .  88\r\n         3.8.1.8.  Percent Complete  . . . . . . . . . . . . . . . .  89\r\n         3.8.1.9.  Priority  . . . . . . . . . . . . . . . . . . . .  90\r\n         3.8.1.10. Resources . . . . . . . . . . . . . . . . . . . .  92\r\n         3.8.1.11. Status  . . . . . . . . . . . . . . . . . . . . .  93\r\n         3.8.1.12. Summary . . . . . . . . . . . . . . . . . . . . .  94\r\n       3.8.2.  Date and Time Component Properties  . . . . . . . . .  95\r\n         3.8.2.1.  Date-Time Completed . . . . . . . . . . . . . . .  95\r\n         3.8.2.2.  Date-Time End . . . . . . . . . . . . . . . . . .  96\r\n         3.8.2.3.  Date-Time Due . . . . . . . . . . . . . . . . . .  97\r\n         3.8.2.4.  Date-Time Start . . . . . . . . . . . . . . . . .  99\r\n         3.8.2.5.  Duration  . . . . . . . . . . . . . . . . . . . . 100\r\n         3.8.2.6.  Free/Busy Time  . . . . . . . . . . . . . . . . . 101\r\n         3.8.2.7.  Time Transparency . . . . . . . . . . . . . . . . 102\r\n       3.8.3.  Time Zone Component Properties  . . . . . . . . . . . 103\r\n         3.8.3.1.  Time Zone Identifier  . . . . . . . . . . . . . . 103\r\n         3.8.3.2.  Time Zone Name  . . . . . . . . . . . . . . . . . 105\r\n         3.8.3.3.  Time Zone Offset From . . . . . . . . . . . . . . 106\r\n         3.8.3.4.  Time Zone Offset To . . . . . . . . . . . . . . . 106\r\n         3.8.3.5.  Time Zone URL . . . . . . . . . . . . . . . . . . 107\r\n       3.8.4.  Relationship Component Properties . . . . . . . . . . 108\r\n         3.8.4.1.  Attendee  . . . . . . . . . . . . . . . . . . . . 108\r\n         3.8.4.2.  Contact . . . . . . . . . . . . . . . . . . . . . 111\r\n\r\n         3.8.4.3.  Organizer . . . . . . . . . . . . . . . . . . . . 113\r\n         3.8.4.4.  Recurrence ID . . . . . . . . . . . . . . . . . . 114\r\n         3.8.4.5.  Related To  . . . . . . . . . . . . . . . . . . . 117\r\n         3.8.4.6.  Uniform Resource Locator  . . . . . . . . . . . . 118\r\n         3.8.4.7.  Unique Identifier . . . . . . . . . . . . . . . . 119\r\n       3.8.5.  Recurrence Component Properties . . . . . . . . . . . 120\r\n         3.8.5.1.  Exception Date-Times  . . . . . . . . . . . . . . 120\r\n         3.8.5.2.  Recurrence Date-Times . . . . . . . . . . . . . . 122\r\n         3.8.5.3.  Recurrence Rule . . . . . . . . . . . . . . . . . 124\r\n       3.8.6.  Alarm Component Properties  . . . . . . . . . . . . . 134\r\n         3.8.6.1.  Action  . . . . . . . . . . . . . . . . . . . . . 134\r\n         3.8.6.2.  Repeat Count  . . . . . . . . . . . . . . . . . . 135\r\n         3.8.6.3.  Trigger . . . . . . . . . . . . . . . . . . . . . 135\r\n       3.8.7.  Change Management Component Properties  . . . . . . . 138\r\n         3.8.7.1.  Date-Time Created . . . . . . . . . . . . . . . . 138\r\n         3.8.7.2.  Date-Time Stamp . . . . . . . . . . . . . . . . . 139\r\n         3.8.7.3.  Last Modified . . . . . . . . . . . . . . . . . . 140\r\n         3.8.7.4.  Sequence Number . . . . . . . . . . . . . . . . . 141\r\n       3.8.8.  Miscellaneous Component Properties  . . . . . . . . . 142\r\n         3.8.8.1.  IANA Properties . . . . . . . . . . . . . . . . . 142\r\n         3.8.8.2.  Non-Standard Properties . . . . . . . . . . . . . 142\r\n         3.8.8.3.  Request Status  . . . . . . . . . . . . . . . . . 144\r\n   4.  iCalendar Object Examples . . . . . . . . . . . . . . . . . . 146\r\n   5.  Recommended Practices . . . . . . . . . . . . . . . . . . . . 150\r\n   6.  Internationalization Considerations . . . . . . . . . . . . . 151\r\n   7.  Security Considerations . . . . . . . . . . . . . . . . . . . 151\r\n   8.  IANA Considerations . . . . . . . . . . . . . . . . . . . . . 151\r\n     8.1.  iCalendar Media Type Registration . . . . . . . . . . . . 151\r\n     8.2.  New iCalendar Elements Registration . . . . . . . . . . . 155\r\n       8.2.1.  iCalendar Elements Registration Procedure . . . . . . 155\r\n       8.2.2.  Registration Template for Components  . . . . . . . . 155\r\n       8.2.3.  Registration Template for Properties  . . . . . . . . 156\r\n       8.2.4.  Registration Template for Parameters  . . . . . . . . 156\r\n       8.2.5.  Registration Template for Value Data Types  . . . . . 157\r\n       8.2.6.  Registration Template for Values  . . . . . . . . . . 157\r\n     8.3.  Initial iCalendar Elements Registries . . . . . . . . . . 158\r\n       8.3.1.  Components Registry . . . . . . . . . . . . . . . . . 158\r\n       8.3.2.  Properties Registry . . . . . . . . . . . . . . . . . 158\r\n       8.3.3.  Parameters Registry . . . . . . . . . . . . . . . . . 161\r\n       8.3.4.  Value Data Types Registry . . . . . . . . . . . . . . 162\r\n       8.3.5.  Calendar User Types Registry  . . . . . . . . . . . . 162\r\n       8.3.6.  Free/Busy Time Types Registry . . . . . . . . . . . . 163\r\n       8.3.7.  Participation Statuses Registry . . . . . . . . . . . 163\r\n       8.3.8.  Relationship Types Registry . . . . . . . . . . . . . 164\r\n       8.3.9.  Participation Roles Registry  . . . . . . . . . . . . 164\r\n       8.3.10. Actions Registry  . . . . . . . . . . . . . . . . . . 165\r\n       8.3.11. Classifications Registry  . . . . . . . . . . . . . . 165\r\n       8.3.12. Methods Registry  . . . . . . . . . . . . . . . . . . 165\r\n   9.  Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 165\r\n   10. References  . . . . . . . . . . . . . . . . . . . . . . . . . 166\r\n     10.1. Normative References  . . . . . . . . . . . . . . . . . . 166\r\n     10.2. Informative References  . . . . . . . . . . . . . . . . . 167\r\n   Appendix A.  Differences from RFC 2445  . . . . . . . . . . . . . 169\r\n     A.1.  New Restrictions  . . . . . . . . . . . . . . . . . . . . 169\r\n     A.2.  Restrictions Removed  . . . . . . . . . . . . . . . . . . 169\r\n     A.3.  Deprecated Features . . . . . . . . . . . . . . . . . . . 169\r\n", "correct_text": "   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   5\r\n   2.  Basic Grammar and Conventions . . . . . . . . . . . . . . . .   6\r\n     2.1.  Formatting Conventions  . . . . . . . . . . . . . . . . .   6\r\n     2.2.  Related Memos . . . . . . . . . . . . . . . . . . . . . .   8\r\n   3.  iCalendar Object Specification  . . . . . . . . . . . . . . .   8\r\n     3.1.  Content Lines . . . . . . . . . . . . . . . . . . . . . .   9\r\n       3.1.1.  List and Field Separators . . . . . . . . . . . . . .  11\r\n       3.1.2.  Multiple Values . . . . . . . . . . . . . . . . . . .  12\r\n       3.1.3.  Binary Content  . . . . . . . . . . . . . . . . . . .  12\r\n       3.1.4.  Character Set . . . . . . . . . . . . . . . . . . . .  13\r\n     3.2.  Property Parameters . . . . . . . . . . . . . . . . . . .  13\r\n       3.2.1.  Alternate Text Representation . . . . . . . . . . . .  14\r\n       3.2.2.  Common Name . . . . . . . . . . . . . . . . . . . . .  15\r\n       3.2.3.  Calendar User Type  . . . . . . . . . . . . . . . . .  16\r\n       3.2.4.  Delegators  . . . . . . . . . . . . . . . . . . . . .  17\r\n       3.2.5.  Delegatees  . . . . . . . . . . . . . . . . . . . . .  17\r\n       3.2.6.  Directory Entry Reference . . . . . . . . . . . . . .  18\r\n       3.2.7.  Inline Encoding . . . . . . . . . . . . . . . . . . .  18\r\n       3.2.8.  Format Type . . . . . . . . . . . . . . . . . . . . .  19\r\n       3.2.9.  Free/Busy Time Type . . . . . . . . . . . . . . . . .  20\r\n       3.2.10. Language  . . . . . . . . . . . . . . . . . . . . . .  21\r\n       3.2.11. Group or List Membership  . . . . . . . . . . . . . .  21\r\n       3.2.12. Participation Status  . . . . . . . . . . . . . . . .  22\r\n       3.2.13. Recurrence Identifier Range . . . . . . . . . . . . .  23\r\n       3.2.14. Alarm Trigger Relationship  . . . . . . . . . . . . .  24\r\n       3.2.15. Relationship Type . . . . . . . . . . . . . . . . . .  25\r\n       3.2.16. Participation Role  . . . . . . . . . . . . . . . . .  25\r\n       3.2.17. RSVP Expectation  . . . . . . . . . . . . . . . . . .  26\r\n       3.2.18. Sent By . . . . . . . . . . . . . . . . . . . . . . .  27\r\n       3.2.19. Time Zone Identifier  . . . . . . . . . . . . . . . .  27\r\n       3.2.20. Value Data Types  . . . . . . . . . . . . . . . . . .  29\r\n     3.3.  Property Value Data Types . . . . . . . . . . . . . . . .  30\r\n       3.3.1.  Binary  . . . . . . . . . . . . . . . . . . . . . . .  30\r\n       3.3.2.  Boolean . . . . . . . . . . . . . . . . . . . . . . .  31\r\n       3.3.3.  Calendar User Address . . . . . . . . . . . . . . . .  31\r\n       3.3.4.  Date  . . . . . . . . . . . . . . . . . . . . . . . .  32\r\n       3.3.5.  Date-Time . . . . . . . . . . . . . . . . . . . . . .  32\r\n       3.3.6.  Duration  . . . . . . . . . . . . . . . . . . . . . .  35\r\n       3.3.7.  Float . . . . . . . . . . . . . . . . . . . . . . . .  36\r\n       3.3.8.  Integer . . . . . . . . . . . . . . . . . . . . . . .  37\r\n       3.3.9.  Period of Time  . . . . . . . . . . . . . . . . . . .  37\r\n       3.3.10. Recurrence Rule . . . . . . . . . . . . . . . . . . .  38\r\n       3.3.11. Text  . . . . . . . . . . . . . . . . . . . . . . . .  45\r\n       3.3.12. Time  . . . . . . . . . . . . . . . . . . . . . . . .  47\r\n       3.3.13. URI . . . . . . . . . . . . . . . . . . . . . . . . .  49\r\n       3.3.14. UTC Offset  . . . . . . . . . . . . . . . . . . . . .  49\r\n     3.4.  iCalendar Object  . . . . . . . . . . . . . . . . . . . .  50\r\n     3.5.  Property  . . . . . . . . . . . . . . . . . . . . . . . .  51\r\n     3.6.  Calendar Components . . . . . . . . . . . . . . . . . . .  51\r\n       3.6.1.  Event Component . . . . . . . . . . . . . . . . . . .  52\r\n       3.6.2.  To-Do Component . . . . . . . . . . . . . . . . . . .  55\r\n       3.6.3.  Journal Component . . . . . . . . . . . . . . . . . .  57\r\n       3.6.4.  Free/Busy Component . . . . . . . . . . . . . . . . .  59\r\n       3.6.5.  Time Zone Component . . . . . . . . . . . . . . . . .  62\r\n       3.6.6.  Alarm Component . . . . . . . . . . . . . . . . . . .  71\r\n     3.7.  Calendar Properties . . . . . . . . . . . . . . . . . . .  76\r\n       3.7.1.  Calendar Scale  . . . . . . . . . . . . . . . . . . .  76\r\n       3.7.2.  Method  . . . . . . . . . . . . . . . . . . . . . . .  77\r\n       3.7.3.  Product Identifier  . . . . . . . . . . . . . . . . .  78\r\n       3.7.4.  Version . . . . . . . . . . . . . . . . . . . . . . .  79\r\n     3.8.  Component Properties  . . . . . . . . . . . . . . . . . .  80\r\n       3.8.1.  Descriptive Component Properties  . . . . . . . . . .  80\r\n         3.8.1.1.  Attachment  . . . . . . . . . . . . . . . . . . .  80\r\n         3.8.1.2.  Categories  . . . . . . . . . . . . . . . . . . .  81\r\n         3.8.1.3.  Classification  . . . . . . . . . . . . . . . . .  82\r\n         3.8.1.4.  Comment . . . . . . . . . . . . . . . . . . . . .  83\r\n         3.8.1.5.  Description . . . . . . . . . . . . . . . . . . .  84\r\n         3.8.1.6.  Geographic Position . . . . . . . . . . . . . . .  85\r\n         3.8.1.7.  Location  . . . . . . . . . . . . . . . . . . . .  87\r\n         3.8.1.8.  Percent Complete  . . . . . . . . . . . . . . . .  88\r\n         3.8.1.9.  Priority  . . . . . . . . . . . . . . . . . . . .  89\r\n         3.8.1.10. Resources . . . . . . . . . . . . . . . . . . . .  91\r\n         3.8.1.11. Status  . . . . . . . . . . . . . . . . . . . . .  92\r\n         3.8.1.12. Summary . . . . . . . . . . . . . . . . . . . . .  93\r\n       3.8.2.  Date and Time Component Properties  . . . . . . . . .  94\r\n         3.8.2.1.  Date-Time Completed . . . . . . . . . . . . . . .  94\r\n         3.8.2.2.  Date-Time End . . . . . . . . . . . . . . . . . .  95\r\n         3.8.2.3.  Date-Time Due . . . . . . . . . . . . . . . . . .  96\r\n         3.8.2.4.  Date-Time Start . . . . . . . . . . . . . . . . .  97\r\n         3.8.2.5.  Duration  . . . . . . . . . . . . . . . . . . . .  99\r\n         3.8.2.6.  Free/Busy Time  . . . . . . . . . . . . . . . . . 100\r\n         3.8.2.7.  Time Transparency . . . . . . . . . . . . . . . . 101\r\n       3.8.3.  Time Zone Component Properties  . . . . . . . . . . . 102\r\n         3.8.3.1.  Time Zone Identifier  . . . . . . . . . . . . . . 102\r\n         3.8.3.2.  Time Zone Name  . . . . . . . . . . . . . . . . . 103\r\n         3.8.3.3.  Time Zone Offset From . . . . . . . . . . . . . . 104\r\n         3.8.3.4.  Time Zone Offset To . . . . . . . . . . . . . . . 105\r\n         3.8.3.5.  Time Zone URL . . . . . . . . . . . . . . . . . . 106\r\n       3.8.4.  Relationship Component Properties . . . . . . . . . . 106\r\n         3.8.4.1.  Attendee  . . . . . . . . . . . . . . . . . . . . 107\r\n         3.8.4.2.  Contact . . . . . . . . . . . . . . . . . . . . . 109\r\n         3.8.4.3.  Organizer . . . . . . . . . . . . . . . . . . . . 111\r\n         3.8.4.4.  Recurrence ID . . . . . . . . . . . . . . . . . . 112\r\n         3.8.4.5.  Related To  . . . . . . . . . . . . . . . . . . . 115\r\n         3.8.4.6.  Uniform Resource Locator  . . . . . . . . . . . . 116\r\n         3.8.4.7.  Unique Identifier . . . . . . . . . . . . . . . . 117\r\n       3.8.5.  Recurrence Component Properties . . . . . . . . . . . 118\r\n         3.8.5.1.  Exception Date-Times  . . . . . . . . . . . . . . 118\r\n         3.8.5.2.  Recurrence Date-Times . . . . . . . . . . . . . . 120\r\n         3.8.5.3.  Recurrence Rule . . . . . . . . . . . . . . . . . 122\r\n       3.8.6.  Alarm Component Properties  . . . . . . . . . . . . . 132\r\n         3.8.6.1.  Action  . . . . . . . . . . . . . . . . . . . . . 132\r\n         3.8.6.2.  Repeat Count  . . . . . . . . . . . . . . . . . . 133\r\n         3.8.6.3.  Trigger . . . . . . . . . . . . . . . . . . . . . 133\r\n       3.8.7.  Change Management Component Properties  . . . . . . . 136\r\n         3.8.7.1.  Date-Time Created . . . . . . . . . . . . . . . . 136\r\n         3.8.7.2.  Date-Time Stamp . . . . . . . . . . . . . . . . . 137\r\n         3.8.7.3.  Last Modified . . . . . . . . . . . . . . . . . . 138\r\n         3.8.7.4.  Sequence Number . . . . . . . . . . . . . . . . . 138\r\n       3.8.8.  Miscellaneous Component Properties  . . . . . . . . . 139\r\n         3.8.8.1.  IANA Properties . . . . . . . . . . . . . . . . . 140\r\n         3.8.8.2.  Non-Standard Properties . . . . . . . . . . . . . 140\r\n         3.8.8.3.  Request Status  . . . . . . . . . . . . . . . . . 141\r\n   4.  iCalendar Object Examples . . . . . . . . . . . . . . . . . . 144\r\n   5.  Recommended Practices . . . . . . . . . . . . . . . . . . . . 147\r\n   6.  Internationalization Considerations . . . . . . . . . . . . . 148\r\n   7.  Security Considerations . . . . . . . . . . . . . . . . . . . 148\r\n   8.  IANA Considerations . . . . . . . . . . . . . . . . . . . . . 149\r\n     8.1.  iCalendar Media Type Registration . . . . . . . . . . . . 149\r\n     8.2.  New iCalendar Elements Registration . . . . . . . . . . . 152\r\n       8.2.1.  iCalendar Elements Registration Procedure . . . . . . 152\r\n       8.2.2.  Registration Template for Components  . . . . . . . . 152\r\n       8.2.3.  Registration Template for Properties  . . . . . . . . 153\r\n       8.2.4.  Registration Template for Parameters  . . . . . . . . 153\r\n       8.2.5.  Registration Template for Value Data Types  . . . . . 154\r\n       8.2.6.  Registration Template for Values  . . . . . . . . . . 154\r\n     8.3.  Initial iCalendar Elements Registries . . . . . . . . . . 155\r\n       8.3.1.  Components Registry . . . . . . . . . . . . . . . . . 155\r\n       8.3.2.  Properties Registry . . . . . . . . . . . . . . . . . 156\r\n       8.3.3.  Parameters Registry . . . . . . . . . . . . . . . . . 158\r\n       8.3.4.  Value Data Types Registry . . . . . . . . . . . . . . 159\r\n       8.3.5.  Calendar User Types Registry  . . . . . . . . . . . . 160\r\n       8.3.6.  Free/Busy Time Types Registry . . . . . . . . . . . . 160\r\n       8.3.7.  Participation Statuses Registry . . . . . . . . . . . 161\r\n       8.3.8.  Relationship Types Registry . . . . . . . . . . . . . 161\r\n       8.3.9.  Participation Roles Registry  . . . . . . . . . . . . 162\r\n       8.3.10. Actions Registry  . . . . . . . . . . . . . . . . . . 162\r\n       8.3.11. Classifications Registry  . . . . . . . . . . . . . . 162\r\n       8.3.12. Methods Registry  . . . . . . . . . . . . . . . . . . 163\r\n   9.  Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 163\r\n   10. References  . . . . . . . . . . . . . . . . . . . . . . . . . 164\r\n     10.1. Normative References  . . . . . . . . . . . . . . . . . . 164\r\n     10.2. Informative References  . . . . . . . . . . . . . . . . . 165\r\n   Appendix A.  Differences from RFC 2445  . . . . . . . . . . . . . 167\r\n     A.1.  New Restrictions  . . . . . . . . . . . . . . . . . . . . 167\r\n     A.2.  Restrictions Removed  . . . . . . . . . . . . . . . . . . 167\r\n     A.3.  Deprecated Features . . . . . . . . . . . . . . . . . . . 167\r\n", "notes": "Most of the Table Of Contents gives wrong page numbers.\r\n\r\n===== Verifier notes =====\r\nIndeed: the character table in Section 2.1, which appears at the top of page 8 in the RFC, appears to have been added during final editing, and has thrown off the page numbering for all sections beginning with 2.2.", "submit_date": "2019-07-28", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-12-15 15:08:46"}, {"errata_id": "5795", "doc-id": "RFC7292", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "   pkcs-12PbeParams ::= SEQUENCE {\r\n       salt        OCTET STRING,\r\n       iterations  INTEGER\r\n   }", "correct_text": "   Pkcs-12PbeParams ::= SEQUENCE {\r\n       salt        OCTET STRING,\r\n       iterations  INTEGER\r\n   }", "notes": "ASN.1 types must begin with a capital letter.\r\n\r\nThis might have been caught earlier if the parameters structure were included in the ASN.1 module, which is part of Appendix D.", "submit_date": "2019-07-28", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5796", "doc-id": "RFC8231", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.3.3", "orig_text": "               Value      Description\r\n               -----      -------------------------------------\r\n                 1        Unknown reason\r\n                 2        Limit reached for PCE-controlled LSPs\r\n                 3        Too many pending LSP Update Requests\r\n                 4        Unacceptable parameters\r\n                 5        Internal error\r\n                 6        LSP administratively brought down\r\n                 7        LSP preempted\r\n                 8        RSVP signaling error", "correct_text": "Remove Value 2\r\n 2        Limit reached for PCE-controlled LSPs", "notes": "Value 2 \"Limit reached for PCE-controlled LSPs\" can occur when an PC update message comes for either PCInitiated or PCDelegated LSP. But since the lsp is already created or delegated, it means the resource is available and allocated. Also RFC 8281 (section 5.3) states that if LSP provisioned exceeds the limit, an LSP error message should be sent with Error-type=19 (Invalid Operation) and\r\nError-value=6 (PCE-initiated LSP limit reached). So, I believe there is no scenario where LSP Error code TLV \"Limit reached for PCE-controlled LSPs\" would be used.\r\nPlease let me know if there is some scenario which can trigger the same.", "submit_date": "2019-07-29", "submitter_name": "Hillol", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-07-13 20:34:01"}, {"errata_id": "5797", "doc-id": "RFC8528", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "   {\r\n     \"ietf-interfaces:interfaces\": {\r\n       \"interface\": [\r\n         {\r\n           \"name\": \"eth0\",\r\n           \"type\": \"iana-if-type:ethernetCsmacd\",\r\n           \"enabled\": true,\r\n           \"ietf-logical-network-element:bind-lne-name\": \"eth0\"\r\n         }\r\n       ]\r\n     },", "correct_text": "   {\r\n     \"ietf-interfaces:interfaces\": {\r\n       \"interface\": [\r\n         {\r\n           \"name\": \"eth0\",\r\n           \"type\": \"iana-if-type:ethernetCsmacd\",\r\n           \"enabled\": true,\r\n           \"ietf-logical-network-element:bind-lne-name\": \"lne-1\"\r\n         }\r\n       ]\r\n     },", "notes": "leafref is for an LNE name, not an interface name", "submit_date": "2019-07-29", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5798", "doc-id": "RFC7126", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "   The terms \"fast path\", \"slow path\", and associated relative terms\r\n   (\"faster path\" and \"slower path\") are loosely defined as in Section 2\r\n   of [RFC6398].", "correct_text": "", "notes": "These terms are not used in the document. The quoted text should be removed.", "submit_date": "2019-07-30", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5800", "doc-id": "RFC8407", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "appendix b", "orig_text": "       \"WG Web:   <http://datatracker.ietf.org/wg/your-wg-name/>\r\n.....\r\n        (http://trustee.ietf.org/license-info).\r\n", "correct_text": "       \"WG Web:   <https://datatracker.ietf.org/wg/your-wg-name/>\r\n.....\r\n        (https://trustee.ietf.org/license-info).\r\n", "notes": "Appendix A rightly says that these URL should have a scheme of https:\r\nbut Appendix B wrongly specifies http:\r\n\r\n[WK]: I'm marking this as 'Verified' (instead of \"Hold for Document Update\") as it is in a template which is likely to be copied and pasted, and this seems like it may get more visibility.", "submit_date": "2019-07-31", "submitter_name": "tom Petch", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6202", "doc-id": "RFC6594", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "5.1.  RSA Public Key\r\n\r\n   A public key with the following value in OpenSSH format [RFC4716]\r\n   would appear as follows:\r\n", "correct_text": "5.1.  RSA Public Key\r\n                                                                                   \r\n   A public key with the following value in secure shell public key file\r\n   format [RFC4716] would appear as follows:\r\n", "notes": "RFC4716 defines secure shell public key file format, not OpenSSH format.\r\n\r\nSection 5.2 and 5.3 have the same issue.", "submit_date": "2020-06-03", "submitter_name": "IWAMOTO Kouichi", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5844", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "C.1", "orig_text": "                            <- Crypto-Binding TLV (Request),\r\n                                Result TLV (Success),\r\n                                (Optional PAC TLV)\r\n\r\n       Crypto-Binding TLV(Response),\r\n       Result TLV (Success),\r\n       (PAC-Acknowledgement TLV) ->\r\n", "correct_text": "                            <- Intermediate-Result-TLV (Success),\r\n                                Crypto-Binding TLV (Request),\r\n                                Result TLV (Success),\r\n                                (Optional PAC TLV)\r\n\r\n       Intermediate-Result-TLV (Success),\r\n       Crypto-Binding TLV(Response),\r\n       Result TLV (Success),\r\n       (PAC-Acknowledgement TLV) ->\r\n", "notes": "Section 3.3.2 implies that Intermediate-Result TLV is used after each round of Basic-Password-Auth-Req/Resp TLVs. However, the example sequence in C.1 does not show this. The proposed change in this errata adds the Intermediate-Result TLV indication here. Similar change should be done in C.2 (i.e., add Intermediate-Result TLV (Failure) to the messages that include Result TLV) since the language in 3.3.2 describe the indication to be used for both success and failure cases.\r\n\r\nIn addition to this change in C.1, it would be good to clarify the specification globally to avoid confusion about this case since almost all discussion regarding Intermediate-Result TLV currently is in the context of inner EAP authentication. 3.3.2 should have a MUST statement similar to 3.3.1. 3.6 should cover success or failure indications of basic password auth like it does EAP methods. 4.2.11 should note Intermediate-Result TLV is used with both inner EAP and basic password auth. 4.2.13 should mention basic password auth in the \"regardless of whether there is an inner EAP method authentication or not\" sentence.", "submit_date": "2019-08-24", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:31:38"}, {"errata_id": "5806", "doc-id": "RFC7231", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3.7", "orig_text": "A server MUST generate a Content-Length field with a value of \"0\" if no\r\npayload body is to be sent in the response.", "correct_text": "If no payload body is to be sent in the response, a server MUST\r\ngenerate a status code of 204 (No Content) or a Content-Length field\r\nwith a value of \"0\" (but not both).", "notes": "The original text contradicts RFC 7230 \u00a73.3.2: \u201cA server MUST NOT send a Content-Length header field in any response with a status code of 1xx (Informational) or 204 (No Content)\u201d, unless the intention was to disallow all 204 responses to OPTIONS requests, which I assume it was not.", "submit_date": "2019-08-12", "submitter_name": "Anders Kaseorg", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-08-23 11:40:26"}, {"errata_id": "5807", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.21.5.", "orig_text": "   o  If the \"when\" statement is a child of a \"uses\", \"choice\", or\r\n      \"case\" statement, then the context node is the closest ancestor\r\n      node to the node with the \"when\" statement that is also a data\r\n      node.  If no such node exists, the context node is the root node.\r\n      The accessible tree is tentatively altered during the processing\r\n      of the XPath expression by removing all instances (if any) of the\r\n      nodes added by the \"uses\", \"choice\", or \"case\" statement.", "correct_text": "   o  If the \"when\" statement is a child of a \"uses\", \"choice\", or\r\n      \"case\" statement, then the context node is the closest ancestor\r\n      node to the node with the \"when\" statement that is also a data\r\n      node, rpc, action or notification.  If no such node exists, the\r\n      context node is the root node. The accessible tree is tentatively\r\n      altered during the processing of the XPath expression by removing\r\n      all instances (if any) of the nodes added by the \"uses\",\r\n      \"choice\", or \"case\" statement.", "notes": "Similar to verified errata 4794 (https://www.rfc-editor.org/errata/eid4794) but covers the \"uses\", \"choice\" and \"case\" corner case (instead of \"augment\"). If the node for which the \"when\" statement is defined is within an rpc, action or notification, the context node also needs to be inside that rpc, action or notification. There are published IETF modules, which rely on this to be true, such as \"ietf-netconf-nmda@2019-01-07\" in RFC8526 (https://tools.ietf.org/html/rfc8526) at schema node id \"/ncds:get-data/ncds:input/ncds:origin-filters\". Original text assigns the context node to the root node, if no data node ancestor is found. \"rpc\", \"action\" and \"notification\" are not data nodes and are represented by nodes that are descendants of the root node, as described in Section 6.4.1.", "submit_date": "2019-08-13", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5808", "doc-id": "RFC8018", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "   PBKDF2-PRFs ALGORITHM-IDENTIFIER ::= {\r\n     {NULL IDENTIFIED BY id-hmacWithSHA1},\r\n     {NULL IDENTIFIED BY id-hmacWithSHA224},\r\n     {NULL IDENTIFIED BY id-hmacWithSHA256},\r\n     {NULL IDENTIFIED BY id-hmacWithSHA384},\r\n     {NULL IDENTIFIED BY id-hmacWithSHA512},\r\n     {NULL IDENTIFIED BY id-hmacWithSHA512-224},\r\n     {NULL IDENTIFIED BY id-hmacWithSHA512-256},\r\n     ...\r\n   }", "correct_text": "   PBKDF2-PRFs ALGORITHM-IDENTIFIER ::= {\r\n     {NULL IDENTIFIED BY id-hmacWithSHA1}        |\r\n     {NULL IDENTIFIED BY id-hmacWithSHA224}      |\r\n     {NULL IDENTIFIED BY id-hmacWithSHA256}      |\r\n     {NULL IDENTIFIED BY id-hmacWithSHA384}      |\r\n     {NULL IDENTIFIED BY id-hmacWithSHA512}      |\r\n     {NULL IDENTIFIED BY id-hmacWithSHA512-224}  |\r\n     {NULL IDENTIFIED BY id-hmacWithSHA512-256},\r\n     ...\r\n   }", "notes": "For the ASN.1 Module to compile properly, six commas need to be replaced with \"|\" in the definition of PBKDF2-PRFs.", "submit_date": "2019-08-13", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5840", "doc-id": "RFC8628", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "An attacker who guesses the device code would be able to potentially\r\n   obtain the authorization code once the user completes the flow.", "correct_text": "An attacker who guesses the device code would be able to potentially\r\n   obtain the access token once the user completes the flow.\r\n", "notes": "The \"authorization code\" term is associated with Authorization Code Grant (defined in RFC 6749) and has the meaning of a temporary credential used by an OAuth 2.0 client to obtain the access token. Section 5.2 of RFC 8628 seems to refer to the steps of the device authorization flow during which the device code and the client identifier are exchanged for the access token (and the optional refresh token). \r\n\r\nAlternative correction:\r\n\r\n\"An attacker who guesses the device code would be able to potentially obtain the access token and the optional refresh token once the user completes the flow.\"", "submit_date": "2019-08-19", "submitter_name": "Konstantin Lapine", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7544", "doc-id": "RFC5576", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2", "orig_text": "Every <ssrc-id> listed in an \"ssrc-group\" attribute MUST be defined by a corresponding \"ssrc:\" line in the same media description", "correct_text": "Every <ssrc-id> listed in an \"ssrc-group\" attribute MUST be defined by a corresponding \"ssrc:\" line in the same media description and MUST appear only once in this ssrc-group", "notes": "The goal is to clarify that something like\r\n  a=ssrc-group:FID 1234 1234\r\nis not valid. While this is demuxable (in the BUNDLE sense) it would require chaining of ssrc-demuxing and payload type demuxing which is a lot of complexity.\r\nThe uniqueness is already implied by the following sentence (emphasis is mine):\r\n   The SDP media attribute \"ssrc-group\" expresses a relationship among *several* sources of an RTP session\r\nearlier in the section.", "submit_date": "2023-06-15", "submitter_name": "Philipp Hancke", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5809", "doc-id": "RFC8018", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "   SupportingAlgorithms ALGORITHM-IDENTIFIER ::= {\r\n      {NULL IDENTIFIED BY id-hmacWithSHA1}                   |\r\n      {OCTET STRING (SIZE(8)) IDENTIFIED BY desCBC}          |\r\n      {OCTET STRING (SIZE(8)) IDENTIFIED BY des-EDE3-CBC}    |\r\n      {RC2-CBC-Parameter IDENTIFIED BY rc2CBC}               |\r\n      {RC5-CBC-Parameters IDENTIFIED BY rc5-CBC-PAD},        |\r\n      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes128-CBC-PAD} |\r\n      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes192-CBC-PAD} |\r\n      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes256-CBC-PAD},\r\n       ...\r\n   }", "correct_text": "   SupportingAlgorithms ALGORITHM-IDENTIFIER ::= {\r\n      {NULL IDENTIFIED BY id-hmacWithSHA1}                   |\r\n      {OCTET STRING (SIZE(8)) IDENTIFIED BY desCBC}          |\r\n      {OCTET STRING (SIZE(8)) IDENTIFIED BY des-EDE3-CBC}    |\r\n      {RC2-CBC-Parameter IDENTIFIED BY rc2CBC}               |\r\n      {RC5-CBC-Parameters IDENTIFIED BY rc5-CBC-PAD}         |\r\n      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes128-CBC-PAD} |\r\n      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes192-CBC-PAD} |\r\n      {OCTET STRING (SIZE(16)) IDENTIFIED BY aes256-CBC-PAD},\r\n       ...\r\n   }", "notes": "For the ASN.1 Module to compile properly, the extra comma needs to be removed in the definition of SupportingAlgorithms.", "submit_date": "2019-08-13", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5811", "doc-id": "RFC4707", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   The organizational structure of NAS is hierarchical; this means that\r\n   a NAS root server collects data from the sub-servers that are\r\n   authoritative for certain hierarchies.", "correct_text": "   The organizational structure of NAS is hierarchical; this means that\r\n   an NAS root server collects data from the sub-servers that are\r\n   authoritative for certain hierarchies.", "notes": "For consistency throughout the document, spell \"an NAS root server\" instead of \"a NAS root server\".", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5812", "doc-id": "RFC4707", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   An attached time stamp makes it possible to distinguish between\r\n   new and old data and to avoid loops in the propagation.", "correct_text": "   An attached timestamp makes it possible to distinguish between\r\n   new and old data and to avoid loops in the propagation.", "notes": "For consistency throughout the document, spell \"timestamp\" instead of \"time stamp\".", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5813", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.1", "orig_text": "   Answer = response-code [answertext] CRLF\r\n            text CRLF\r\n            \".\" CRLF", "correct_text": "   answer = response-code [answertext] CRLF\r\n            *(text CRLF)\r\n            \".\" CRLF", "notes": "There may be zero, one or more additional lines of text followed by a CRLF.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5814", "doc-id": "RFC4707", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "The report raised said:\r\n\r\n> A future revision of the NAS protocol should mention the character set that MUST\r\n> be used in commands, and also in answers.\r\n>\r\n> I advise current NAS implementations to use UTF-8 everywhere because UTF-8 is the\r\n> encoding that will be encouraged in Netnews (NNTP commands already are in UTF-8\r\n> per RFC 3977, and internationalized headers including newsgroup names are likely to\r\n> be in UTF-8).\r\n\r\nWhether or not this is good advice to future specifications and current implementations, this is not an erratum. Changes of this nature require to be documented in separate publications.\n --VERIFIER NOTES-- \n   ", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5815", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.3.1", "orig_text": "   help-answer =  \"410\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   help-answer =/ \"100\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF", "correct_text": "   help-answer =  \"410\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF\r\n   help-answer =/ \"100\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF", "notes": "Per the examples shown, it is clear that zero, one, or more lines of text may be supplied.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5816", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.3.2", "orig_text": "   info-answer =  \"400\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   info-answer =/ \"101\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF", "correct_text": "   info-answer =  \"400\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF\r\n   info-answer =/ \"101\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF", "notes": "Per the examples shown in the text, it is clear that a response may include zero, one, or many additional lines of text.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5817", "doc-id": "RFC4707", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.3.3.3", "orig_text": "   date-answer =  \"511\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF", "correct_text": "   date-answer =  \"511\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF", "notes": "I suggest [1*text CRLF] that is to say a possible non-empty line.\r\nWe need at least *text anyway (several characters), as shown in the example in Section 6.3.3.3.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5818", "doc-id": "RFC4707", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.3.4", "orig_text": "   This version number MUST not be higher\r\n   than that requested by the client.", "correct_text": "   This version number MUST NOT be higher\r\n   than that requested by the client.", "notes": "Capitalized \"NOT\" is needed per RFC 2119.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "7203", "doc-id": "RFC4524", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "          internationaliSDNNumber $ facsimileTelephoneNumber $ street $\r\n          postOfficeBox $ postalCode $ postalAddress $\r\n          physicalDeliveryOfficeName $ st $ l $ description $ o $\r\n          associatedName ) )\r\n\r\n   The 'top' object class and the 'dc', 'userPassword', 'searchGuide',\r\n   'seeAlso', 'businessCategory', 'x121Address', 'registeredAddress',\r\n   'destinationIndicator', 'preferredDeliveryMethod', 'telexNumber',\r\n   'teletexTerminalIdentifier', 'telephoneNumber',\r\n   'internationaliSDNNumber', 'facsimileTelephoneNumber', 'street',", "correct_text": "          internationalISDNNumber $ facsimileTelephoneNumber $ street $\r\n          postOfficeBox $ postalCode $ postalAddress $\r\n          physicalDeliveryOfficeName $ st $ l $ description $ o $\r\n          associatedName ) )\r\n\r\n   The 'top' object class and the 'dc', 'userPassword', 'searchGuide',\r\n   'seeAlso', 'businessCategory', 'x121Address', 'registeredAddress',\r\n   'destinationIndicator', 'preferredDeliveryMethod', 'telexNumber',\r\n   'teletexTerminalIdentifier', 'telephoneNumber',\r\n   'internationalISDNNumber', 'facsimileTelephoneNumber', 'street',", "notes": "RFC 4519 has the spelling \"internationalISDNNumber\" instead of \"internationaliSDNNumber\".", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 21:23:43"}, {"errata_id": "5819", "doc-id": "RFC4707", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.3.3.4", "orig_text": "   The VERS command is used to determine the protocol level to use\r\n   between client and server.  The parameter is a protocol level that\r\n   the client supports and wants to use.  The server will respond with\r\n   the highest level accepted.\r\n[...]\r\n   When no option is given, the current protocol level will be printed.", "correct_text": "   The VERS command is used to determine the protocol level to use\r\n   between client and server.  The optional parameter is a protocol\r\n   level that the client supports and wants to use.  When this\r\n   parameter is given, and is valid, the server will respond with\r\n   the highest level accepted, at the start of the second line of its\r\n   response, and the highest level it supports, at the end of that\r\n   same line.\r\n[...]\r\n   When no parameter is given, or if the given parameter is invalid,\r\n   the server will respond with the current protocol level, at the start\r\n   of the second line of its response.", "notes": "The description should detail the syntax of the different possible answers to the VERS command.  Especially, ABNF shows two \"level\" keywords in 302 and 402 answers, that are not explained in the original text.\n --VERIFIER NOTES-- \n The suggested replacement text adds little or nothing to the understanding of the text which was clear to this uninformed reader.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5820", "doc-id": "RFC4707", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.3.3.5", "orig_text": "   quit-answer = \"201\" [answertext] CRLF", "correct_text": "   quit-answer = \"201\" [answertext] CRLF\r\n                 [1*text CRLF]\r\n                 \".\" CRLF", "notes": "The QUIT command is the only one whose answer does not follow the general ABNF description of answers requiring them to end with a (\".\" CRLF) line.\r\nI suggest either fixing quit-answer to the above corrected text, or modifying Section 6.1.1 to take into account a special case for QUIT.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5821", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.3.6", "orig_text": "   The data consist of a newsgroup- or hierarchy-name/status indicator\r\n   pair per line.  Name and status indicator must be separated by at\r\n   least one white space.\r\n[...]\r\n   listdata    =  name WSP list-status", "correct_text": "   The data consist of a newsgroup- or hierarchy-name/status indicator\r\n   pair per line.  Name and status indicator must be separated by at\r\n   least one white space.\r\n[...]\r\n   listdata    =  name 1*WSP list-status", "notes": "Only one white space is allowed in the definition of listdata.  I suggest allowing several WSP for consistency with the description.\r\nSame remark for the definition of listdata in Section 6.3.3.7 (LSTR command).", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5822", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.3.6", "orig_text": "   list-answer =/ \"401\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   list-answer =/ \"510\" [answertext] CRLF\r\n                   text CRLF\r\n                   \".\" CRLF", "correct_text": "   list-answer =/ \"401\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF\r\n   list-answer =/ \"510\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF", "notes": "Zero, one, or more lines of text are allowed.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5823", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.3.7", "orig_text": "   lstr-answer =/ \"401\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   lstr-answer =/ \"510\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF", "correct_text": "   lstr-answer =/ \"401\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF\r\n   lstr-answer =/ \"510\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF", "notes": "Zero, one, or more lines of text are allowed.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5841", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.3", "orig_text": "   text          = %d1-9 /           ; all octets except\r\n                   %d11-12 /         ; US-ASCII NUL, CR and LF\r\n                   %d14-255\r\n", "correct_text": "   text          = *(%d1-9 /         ; all octets except\r\n                     %d11-12 /       ; US-ASCII NUL, CR and LF\r\n                     %d14-255)\r\n", "notes": "Each time the \"text\" keyword is used in ABNF definitions in this RFC, it means \"any number, including none, of octets except NUL, CR and LF\" and not one such octet.", "submit_date": "2019-08-19", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5842", "doc-id": "RFC5841", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Authors' Addresses", "orig_text": "Warren Turkal\r\n", "correct_text": "Wren Turkal", "notes": "The author changed her name.", "submit_date": "2019-08-20", "submitter_name": "Wren Turkal", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5843", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.1", "orig_text": "Received-SPF: pass (mybox.example.org: domain of\r\n    myname@example.com designates 192.0.2.1 as permitted sender)\r\n       receiver=mybox.example.org; client-ip=192.0.2.1;\r\n       mechanism=ip4:192.0.2.1; envelope-from=\"myname@example.com\";\r\n       helo=foo.example.com;", "correct_text": "Received-SPF: pass (mybox.example.org: domain of\r\n    myname@example.com designates 192.0.2.1 as permitted sender)\r\n       receiver=mybox.example.org; client-ip=192.0.2.1;\r\n       mechanism=\"ip4:192.0.2.1\"; envelope-from=\"myname@example.com\";\r\n       helo=foo.example.com;", "notes": "There's an error in the last example of this section:\r\nBy the definition of key-value-pair, a \"value\" can only be a dot-atom or a quoted-string. \r\nThe string ip4:192.0.2.1 in the mechanism key is not a legal dot-atom, so it should be surrounded by double quotes, to be a quoted-string instead", "submit_date": "2019-08-22", "submitter_name": "Jesus Donaldo Osornio", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5848", "doc-id": "RFC8252", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix B.1", "orig_text": "Apps can initiate an authorization request in the browser, without\r\nthe user leaving the app, through the \"SFSafariViewController\" class\r\nor its successor \"SFAuthenticationSession\", which implement the in-\r\napp browser tab pattern.  Safari can be used to handle requests on\r\nold versions of iOS without in-app browser tab functionality.", "correct_text": "Apps can initiate an authorization request in the browser, without\r\nthe user leaving the app, through the \"ASWebAuthenticationSession\"\r\nclass or its successors \"SFAuthenticationSession\" and\r\n\"SFSafariViewController\", which implement the in-app browser tab\r\npattern.  The first of these allows calls to a handler registered\r\nfor the AS URL, consistent with Section 7.2. The latter two classes,\r\nnow deprecated, can use Safari to handle requests on old versions of\r\niOS without in-app browser tab functionality.", "notes": "SFAuthenticationSession documentation reflects deprecated status:\r\n\r\nhttps://developer.apple.com/documentation/safariservices/sfauthenticationsession\r\n\r\nHere's the documentation for ASWebAuthenticationSession:\r\n\r\nhttps://developer.apple.com/documentation/authenticationservices/aswebauthenticationsession\n --VERIFIER NOTES-- \nThis sort of change to update for events since the time of publication is not appropriate for an erratum; errata are intended solely to indicate errors in a document that were errors at the time of publication.  A revision of the document or a new document with an \"Updates:\" relationship would be more appropriate ways to indicate that the situation has changed.", "submit_date": "2019-08-26", "submitter_name": "Bayard Bell", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5824", "doc-id": "RFC4707", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Section 6.3.3.8:\r\n\r\n   hier-answer =/ \"510\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF\r\n   hier-answer =/ \"401\" [answertext] CRLF\r\n                  *(text CRLF)\r\n                  \".\" CRLF\r\n\r\n   hierdata    =  \"Name:\" WSP text CRLF\r\n                  \"Status:\" WSP text CRLF\r\n                  *(header \":\" WSP text CRLF)\r\n                  [(\"Ctl-PGP-Key:\" CRLF PGP-answer /\r\n                    \"Mod-PGP-Key:\" CRLF PGP-answer)]\r\n\r\nSection 6.3.3.9:\r\n\r\n   data-answer =/ \"510\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   data-answer =/ \"401\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n\r\n   datadata    =  \"Name:\" WSP text CRLF\r\n                  \"Status:\" WSP text CRLF\r\n                  *(header \":\" WSP text CRLF)\r\n                  [(\"Ctl-PGP-Key:\" CRLF PGP-answer /\r\n                    \"Mod-PGP-Key:\" CRLF PGP-answer)]", "correct_text": "Section 6.3.3.8:\r\n\r\n   hier-answer =/ \"510\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n   hier-answer =/ \"401\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n\r\n   hierdata    =  \"Name:\" WSP name CRLF\r\n                  \"Status:\" WSP list-status CRLF\r\n                  *(header \":\" WSP *text CRLF)\r\n                  [(\"Ctl-PGP-Key:\" CRLF PGP-answer /\r\n                    \"Mod-PGP-Key:\" CRLF PGP-answer)]\r\n\r\nSection 6.3.3.9:\r\n\r\n   data-answer =/ \"510\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n   data-answer =/ \"401\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n\r\n   datadata    =  \"Name:\" WSP name CRLF\r\n                  \"Status:\" WSP list-status CRLF\r\n                  *(header \":\" WSP *text CRLF)\r\n                  [(\"Ctl-PGP-Key:\" CRLF PGP-answer /\r\n                    \"Mod-PGP-Key:\" CRLF PGP-answer)]", "notes": "I suggest [1*text CRLF], that is to say a possible non-empty line, for hier-answer and data-answer with 501 or 401 response codes.\r\nWe need at least *text anyway (several characters), as shown in the examples in Section 6.3.3.8 and 6.3.3.9.\r\n\r\nAs for hierdata and datadata, the text keyword used thrice alone is also not right.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5825", "doc-id": "RFC4707", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Section 6.3.3.10:\r\n\r\n   username =  *1( VCHAR ) / \"0\" ; Length of VCHAR >= 1\r\n\r\n   password =  *1( VCHAR ) / \"0\" ; Length of VCHAR >= 1\r\n\r\n[...]\r\n\r\n   getp-answer =/ \"213\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   getp-answer =/ \"430\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   getp-answer =/ \"411\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   getp-answer =/ \"510\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n\r\n   getpdata   =   \"Name:\" WSP text CRLF\r\n                  \"Status:\" WSP text CRLF\r\n                  \"Serial:\" WSP timestamp CRLF\r\n                  *(header \":\" WSP text CRLF)\r\n                  [(\"Ctl-PGP-Key:\" CRLF PGP-answer /\r\n                    \"Mod-PGP-Key:\" CRLF PGP-answer)]\r\n\r\nSection 6.3.3.11:\r\n\r\n   geta-answer =/ \"215\" [answertext] CRLF\r\n                   text CRLF\r\n                   \".\" CRLF\r\n   geta-answer =/ \"430\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   geta-answer =/ \"411\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n   geta-answer =/ \"510\" [answertext] CRLF\r\n                  text CRLF\r\n                  \".\" CRLF\r\n\r\n   getadata   =   \"Name:\" WSP text CRLF\r\n                  \"Status:\" WSP text CRLF\r\n                  \"Serial:\" WSP timestamp CRLF\r\n                  *(header \":\" WSP text CRLF)\r\n                  [(\"Ctl-PGP-Key:\" CRLF PGP-answer/\r\n                    \"Mod-PGP-Key:\" CRLF PGP-answer)]", "correct_text": "Section 6.3.3.10:\r\n\r\n   username =  1*VCHAR / \"0\"\r\n\r\n   password =  1*VCHAR / \"0\"\r\n\r\n[...]\r\n\r\n   getp-answer =/ \"213\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n   getp-answer =/ \"430\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n   getp-answer =/ \"411\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n   getp-answer =/ \"510\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n\r\n   getpdata   =   \"Name:\" WSP name CRLF\r\n                  \"Status:\" WSP list-status CRLF\r\n                  \"Serial:\" WSP timestamp CRLF\r\n                  *(header \":\" WSP *text CRLF)\r\n                  [(\"Ctl-PGP-Key:\" CRLF PGP-answer /\r\n                    \"Mod-PGP-Key:\" CRLF PGP-answer)]\r\n\r\nSection 6.3.3.11:\r\n\r\n   geta-answer =/ \"215\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n   geta-answer =/ \"430\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n   geta-answer =/ \"411\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n   geta-answer =/ \"510\" [answertext] CRLF\r\n                  [1*text CRLF]\r\n                  \".\" CRLF\r\n\r\n   getadata   =   \"Name:\" WSP name CRLF\r\n                  \"Status:\" WSP list-status CRLF\r\n                  \"Serial:\" WSP timestamp CRLF\r\n                  *(header \":\" WSP *text CRLF)\r\n                  [(\"Ctl-PGP-Key:\" CRLF PGP-answer /\r\n                    \"Mod-PGP-Key:\" CRLF PGP-answer)]", "notes": "For username and password, RFC 4234 defines VCHAR as %x21-7E, that is to say only one character.\r\n\r\nI suggest [1*text CRLF], that is to say a possible non-empty line, for getp-answer and geta-answer with 213, 215, 430, 411 and 510 response codes.\r\nWe need at least *text anyway (several characters), as shown in the examples in Sections 6.3.3.10 and 6.3.3.11.\r\n\r\nAs for getpdata and getadata, the text keyword used thrice alone is also not right.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5826", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3.3.10", "orig_text": "   <-- GETP 0 0 0 humanities\r\n   --> 615 data follow", "correct_text": "   <-- GETP 0 0 0 humanities\r\n   --> 613 data follow", "notes": "Section 10 and also getp-answer in Section 6.3.3.10 indicates a 613 response code for GETP.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5827", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3.3.11", "orig_text": "   <-- GETA 0 0 0 humanities\r\n   --> 613 data follow", "correct_text": "   <-- GETA 0 0 0 humanities\r\n   --> 615 data follow", "notes": "Section 10 and also geta-answer in Section 6.3.3.11 indicates a 615 response code for GETA.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5828", "doc-id": "RFC4707", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.3.10", "orig_text": "   pgp-ascii-armor-start and the pgp-ascii-armor-end are built according\r\n   to [RFC2440], Section 6.2., \"Forming ASCII Armor\".", "correct_text": "   pgp-ascii-armor-start and pgp-ascii-armor-end are built according\r\n   to [RFC2440], Section 6.2, \"Forming ASCII Armor\".", "notes": "", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5829", "doc-id": "RFC4707", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.3.10", "orig_text": "       Newsgroup-Type: Announce\r\n       Date-Create: 19950725182040\r\n       Name: humanities.classics\r\n       [...]\r\n       -----BEGIN PGP SIGNATURE-----\r\n       Version: GnuPG v1.0.7 (IRIX64)", "correct_text": "       Newsgroup-Type: Announce\r\n       Date-Create: 19950725182040\r\n\r\n       Name: humanities.classics\r\n       [...]\r\n       -----BEGIN PGP SIGNATURE-----\r\n       Version: GnuPG v1.0.7 (IRIX64)", "notes": "In the first example, an empty separation line is missing before the beginning of the description of another newsgroup.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5830", "doc-id": "RFC4707", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.4", "orig_text": "   Description: Name of a newsgroup\r\n\r\n   Example:     Status: Hierarchy-Complete\r\n\r\n   Example:     Status: Group-Moderated\r\n\r\n   Comment:     The value can be used as default value for the\r\n                \"Followup-To:\" header on postings to a moderated group.\r\n                This value is only useful on groups that are moderated\r\n                (Status Group-Moderated) and have a dedicated discussion\r\n                group.\r\n\r\n   Comment:     If there is no \"Mod-Sub-Adr\" for a moderated newsgroup,\r\n                \"Mod-Wildcard\" of the hierarchy is used.  This is useful\r\n                only for moderated groups (Status Group-Moderated).\r\n\r\n   Comment:     If there is no code \"Mod-Adm-Adr\" for a moderated\r\n                newsgroup, \"Mod-Wildcard\" of the hierarchy is used.\r\n                This is useful only for moderated groups\r\n                (Status Group-Moderated).\r\n\r\n   Example:     Encoding text/plain\r\n\r\n   Description: Name of the hierarchy that replaced a removed hierarchy\r\n                if status is \"Hierarchy-Obsolete\" or will replace a\r\n                hierarchy if the date of removal is in the future.\r\n\r\n   Description: Name of the newsgroup or newsgroups that will replace a\r\n                removed newsgroup if status is  \"Group-Removed\" or will\r\n                replace the newsgroup if the date of removal is in the\r\n                future.", "correct_text": "   Description: Name of a newsgroup.\r\n\r\n   Example:     Status: Complete\r\n\r\n   Example:     Status: Moderated\r\n\r\n   Comment:     The value can be used as default value for the\r\n                \"Followup-To:\" header field on postings to a moderated\r\n                group.  This value is only useful on groups that are\r\n                moderated (Status \"Moderated\") and have a dedicated\r\n                discussion group.\r\n\r\n   Comment:     If there is no \"Mod-Sub-Adr\" for a moderated newsgroup,\r\n                \"Mod-Wildcard\" of the hierarchy is used.  This is useful\r\n                only for moderated groups (Status \"Moderated\").\r\n\r\n   Comment:     If there is no code \"Mod-Adm-Adr\" for a moderated\r\n                newsgroup, \"Mod-Wildcard\" of the hierarchy is used.\r\n                This is useful only for moderated groups\r\n                (Status \"Moderated\").\r\n\r\n   Example:     Encoding: text/plain\r\n\r\n   Description: Name of the hierarchy that replaced a removed hierarchy\r\n                if status is \"Obsolete\" or will replace a\r\n                hierarchy if the date of removal is in the future.\r\n\r\n   Description: Name of the newsgroup or newsgroups that will replace a\r\n                removed newsgroup if status is \"Removed\" or will\r\n                replace the newsgroup if the date of removal is in the\r\n                future.", "notes": "Several fixes in syntax and also in spelling of keywords.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5831", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3.4", "orig_text": "   Serial\r\n\r\n   Header:      Serial\r\n\r\n   Used for:    hierarchy\r\n   Mandatory:   no\r\n   Inheritable: no\r\n   Repeatable:  no\r\n   Description: Timestamp for hierarchy data.\r\n   Comment:     For a detailed description, see Section 6.4.\r\n   Example:     Serial: 20020821102413\r\n\r\n   Used for:    newsgroup\r\n   Mandatory:   no\r\n   Inheritable: no\r\n   Repeatable:  no\r\n   Description: Timestamp for newsgroup data.\r\n   Comment:     For a detailed description, see Section 6.4.\r\n   Example:     Serial: 20020821102413\r\n", "correct_text": "   Serial\r\n\r\n   Header:      Serial\r\n\r\n   Used for:    hierarchy\r\n   Mandatory:   no\r\n   Inheritable: no\r\n   Repeatable:  no\r\n   Description: Timestamp for hierarchy data.\r\n   Comment:     For a detailed description, see Section 6.3.3.10.\r\n   Example:     Serial: 20020821102413\r\n\r\n   Used for:    newsgroup\r\n   Mandatory:   no\r\n   Inheritable: no\r\n   Repeatable:  no\r\n   Description: Timestamp for newsgroup data.\r\n   Comment:     For a detailed description, see Section 6.3.3.10.\r\n   Example:     Serial: 20020821102413\r\n", "notes": "Its use as a timestamp is described in Section 6.3.3.10, for both hierarchies and newsgroups.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5832", "doc-id": "RFC4707", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.3.4", "orig_text": "   Serial\r\n[...]\r\n   Used for:    newsgroup\r\n   Mandatory:   no\r\n   Inheritable: no\r\n   Repeatable:  no", "correct_text": "   Serial\r\n[...]\r\n   Used for:    newsgroup\r\n   Mandatory:   no\r\n   Repeatable:  no", "notes": "\"Inheritable\" does not apply to newsgroups.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5833", "doc-id": "RFC4707", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.3.4", "orig_text": "   Header: Source\r\n\r\n   Used for:    hierarchy\r\n   Mandatory:   no\r\n   Inheritable: yes\r\n   Repeatable:  no", "correct_text": "   Header: Source\r\n\r\n   Used for:    hierarchy\r\n   Mandatory:   no\r\n   Inheritable: yes\r\n   Repeatable:  yes", "notes": "This header is repeatable, as stated in Section 11.\r\n\r\nHowever, it is currently unclear whether section 6.3.4 is correct (note use of the singular in the explanatory text) of whether section 11 is correct.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5834", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11", "orig_text": "    Mod-Sub-Adr      no           N    no         Submission address", "correct_text": "    Mod-Sub-Adr      no           N    yes        Submission address", "notes": "This header is repeatable, as stated in its definition in Section 6.3.4.\r\nA newsgroup may have several e-mails to be reached.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5835", "doc-id": "RFC4707", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.7", "orig_text": "   PGP keys for Ctrl-PGP-Key and Mod-PGP-Key are transmitted in the\r\n   following structure:\r\n\r\n   PGP-answer = \"V\" SP Version CRLF\r\n                \"U\" SP User-ID CRLF\r\n                \"B\" SP Bits CRLF\r\n                \"I\" SP Key-ID CRLF\r\n                \"F\" SP Finger CRLF\r\n                *(\"L\" SP Location CRLF)\r\n                *(\"K-\" Keyblock CRLF)\r\n                \"K\" SP Keyblock CRLF\r\n\r\n   Version  = text\r\n   User-ID  = text\r\n   Bits     = text\r\n   Key-ID   = text\r\n   Finger   = text\r\n   Location = text\r\n   Keyblock = text", "correct_text": "   PGP keys for Ctl-PGP-Key and Mod-PGP-Key are transmitted in the\r\n   following structure:\r\n\r\n   PGP-answer = [*(\"U\" SP User-ID CRLF)]\r\n                [\"B\" SP Bits CRLF]\r\n                [\"I\" SP Key-ID CRLF]\r\n                [*(\"L\" SP Location CRLF)]\r\n                [\"F\" SP Finger CRLF]\r\n                \"V\" SP Version CRLF\r\n                1*(\"K-\" Keyblock CRLF)\r\n                \"K\" SP Keyblock CRLF\r\n\r\n   Version  = 1*text\r\n   User-ID  = 1*text\r\n   Bits     = 1*text\r\n   Key-ID   = 1*text\r\n   Finger   = 1*text\r\n   Location = 1*text\r\n   Keyblock = 1*text", "notes": "Several fixes :\r\n1- Spelling of \"Ctl-PGP-Key\" at the first line.\r\n2- Several UIDs are possible for a given key.\r\n3- We need several characters (text is only a byte, so use 1*text).\r\n4- Only Version and Keyblocks are mandatory.\r\n5- Re-arrange the lines of PGP-answer to match the example in the same Section.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5836", "doc-id": "RFC4707", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11", "orig_text": "    Article-Length   no           H    no         Article length", "correct_text": "    Article-Length   no          H/N    no        Article length", "notes": "As stated in the definition of Article-Length in Section 6.3.4, it also applies to newsgroups.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5837", "doc-id": "RFC4707", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.1.2", "orig_text": "   Answers of the type 1xx, 2xx, 4xx, and\r\n   5xx can have a text after the numerical code.  3xx answers contain\r\n   one or more parameters with data; the exact format is explained in\r\n   the description of the commands.", "correct_text": "", "notes": "These sentences are not clear.\r\nI suggest to just remove them, or reformulate them if they really have importance.\r\nThe 202 response code for VERS also has a parameter with data (the current protocol level) for instance.\r\nAnd 6xx response codes are not mentioned.", "submit_date": "2019-08-18", "submitter_name": "Julien \u00c9lie", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5838", "doc-id": "RFC5408", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   IBEPublicParameters ::= SEQUENCE (1..MAX) OF\r\n     IBEPublicParameter", "correct_text": "   IBEPublicParameters ::= SEQUENCE SIZE (1..MAX) OF\r\n     IBEPublicParameter", "notes": "Need to add \"SIZE\" for the ASN.1 module to compile properly.", "submit_date": "2019-08-18", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5839", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.2", "orig_text": "   o  Delete all WSP characters at the end of each unfolded header field\r\n      value.", "correct_text": "   o  Delete the SP character, if present, at the end of each unfolded\r\n      header field value before its final CRLF", "notes": "A prior step in this section suggests that header field values include the trailing CRLF.  If that is the case, then a header field value can't end with WSP, which suggests that this step is incorrectly specified.  The correction I give here restores the apparent intent of this step.\r\n\r\n[MSK: The corrected text was modified after discussion on the WG mailing list.]", "submit_date": "2019-08-18", "submitter_name": "Peter Occil", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2021-12-02 16:17:23"}, {"errata_id": "5845", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.1", "orig_text": "   EAP method messages are carried within EAP-Payload TLVs defined in\r\n   Section 4.2.10.  If more than one method is going to be executed in\r\n   the tunnel, then upon method completion, the server MUST send an\r\n   Intermediate-Result TLV indicating the result.\r\n", "correct_text": "   EAP method messages are carried within EAP-Payload TLVs defined in\r\n   Section 4.2.10.  Upon method completion, the server MUST send an\r\n   Intermediate-Result TLV indicating the result.\r\n", "notes": "Description of whether Intermediate-Result TLV is supposed to be used in the case where only a single inner EAP authentication method is used. Section 3.3.1 says \"more than one method is going to be executed in the tunnel, then upon method completion, the server MUST send an Intermediate-Result TLV indicating the result\", Section 3.3.3 says \"The Crypto-Binding TLV and Intermediate-Result TLV MUST be included to perform cryptographic binding after each successful EAP method in a sequence of one or more EAP methods\", 4.2.13 says \"It MUST be included with the Intermediate-Result TLV to perform cryptographic binding after each successful EAP method in a sequence of EAP methods\", Annex C.3 shows an example exchange with a single inner EAP authentication method with use of Intermediate-Result TLV.\r\n\r\nIt looks like the majority of the places discussion this topic implies that there is going to be an Intermediate-Result TLV after each inner EAP authentication method and the text in 3.3.1 is the only clear case of conflicting (or well, at least misleading if one were to claim it does not explicitly say MUST NOT for the one inner EAP authentication method case). As such, I'd conclude the Intermediate-Result TLV is indeed going to be exchanged after each EAP authentication method and the proposed text change to 3.3.1 covers that.", "submit_date": "2019-08-24", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:32:04"}, {"errata_id": "5846", "doc-id": "RFC4791", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2.3", "orig_text": "Conformance:  This property MAY be defined on any calendar\r\n collection.  If defined, it MUST be protected and SHOULD NOT be\r\n returned by a PROPFIND DAV:allprop request (as defined in Section\r\n 12.14.1 of [RFC2518]).\r\n\r\nDescription: ... Any attempt by the client to store calendar object\r\n resources with component types not listed in this property, if it\r\n exists, MUST result in an error, with the\r\n CALDAV:supported-calendar-component precondition (Section 5.3.2.1)\r\n being violated.  Since this property is protected, it cannot be\r\n changed by clients using a PROPPATCH request.  However, clients can\r\n initialize the value of this property when creating a new calendar\r\n collection with MKCALENDAR. ", "correct_text": "Conformance:  This property MAY be defined on any calendar\r\n collection.  If defined, it MAY be protected and SHOULD NOT be\r\n returned by a PROPFIND DAV:allprop request (as defined in Section\r\n 12.14.1 of [RFC2518]).\r\n\r\nDescription: ... Any attempt by the client to store calendar object\r\n resource with component types not listed in this property, if it\r\n exists, MUST result in an error, with the\r\n CALDAV:supported-calendar-component precondition (Section 5.3.2.1)\r\n being violated.  Clients can initialize the value of this property\r\n when creating a new calendar collection with MKCALENDAR. \u2026", "notes": "The protected status of supported-calendar-component-set is removed, so that CUAs can add component types to existing callendars, like VAVAILABILITY, which component types were not defined, when the calendar was created.", "submit_date": "2019-08-25", "submitter_name": "\u0414\u0438\u043b\u044f\u043d \u041f\u0430\u043b\u0430\u0443\u0437\u043e\u0432", "verifier_id": "", "verifier_name": null, "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5847", "doc-id": "RFC6333", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3", "orig_text": "   However, as not all service providers will be able to increase their\r\n   link MTU, the B4 element MUST perform fragmentation and reassembly if\r\n   the outgoing link MTU cannot accommodate the extra IPv6 header.  The\r\n   original IPv4 packet is not oversized.  The packet is oversized after\r\n   the IPv6 encapsulation.  The inner IPv4 packet MUST NOT be\r\n   fragmented.  Fragmentation MUST happen after the encapsulation of the\r\n   IPv6 packet.  Reassembly MUST happen before the decapsulation of the\r\n   IPv4 packet.  A detailed procedure has been specified in [RFC2473]\r\n   Section 7.2.", "correct_text": "   However, as not all service providers will be able to increase their\r\n   link MTU, the B4 element MUST perform fragmentation and reassembly if\r\n   the outgoing link MTU cannot accommodate the extra IPv6 header.  The\r\n   original IPv4 packet is not oversized.  The packet is oversized after\r\n   the IPv6 encapsulation.  The inner IPv4 packet MUST NOT be\r\n   fragmented.  Fragmentation MUST happen after the encapsulation of the\r\n   IPv4 packet in the IPv6 packet.  Reassembly of the IPv6 packet MUST happen before the decapsulation of the\r\n   IPv4 packet.  A detailed procedure has been specified in [RFC2473]\r\n   Section 7.2 following point b) and ignoring the DF-bit setting.", "notes": "I do not have a corrected text. The above text doesn't say what RFC2473 section 7.2 says, so... what should it be? RFC2473 7.2 says to use the DF bit and decide whether to inner fragment or drop+send ICMP error. The above text seems to make normative statements that counter at least the DF=1 case in RFC2473 7.2. Also the text above says \"Fragmentation MUST happen after the encapsulation of the IPv6 packet.\". The IPv6 packet isn't encapsulated, so that sentence should be changed?\r\n\r\n--- Verifier note ---\r\nFollowing the discussion in https://mailarchive.ietf.org/arch/msg/softwires/bBQT97R7p1Ho4cUZIP2MFU5ZYJ4/ , the original intent is to avoid fragmenting the IPv4 packet before encapsulation.", "submit_date": "2019-08-26", "submitter_name": "Mikael Abrahamsson", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-05-17 07:57:08"}, {"errata_id": "7204", "doc-id": "RFC4524", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7", "orig_text": "          facsimileTelephoneNumber $ internationaliSDNNumber $\r\n          physicalDeliveryOfficeName $ postalAddress $ postalCode $\r\n          postOfficeBox $ preferredDeliveryMethod $ registeredAddress $\r\n          seeAlso $ sn $ street $ telephoneNumber $\r\n          teletexTerminalIdentifier $ telexNumber $ x121Address ) )\r\n\r\n   The 'domain' object class is described in Section 3.4 of this\r\n   document.  The 'cn', 'description', 'destinationIndicator',\r\n   'facsimileTelephoneNumber', 'internationaliSDNNumber,", "correct_text": "          facsimileTelephoneNumber $ internationalISDNNumber $\r\n          physicalDeliveryOfficeName $ postalAddress $ postalCode $\r\n          postOfficeBox $ preferredDeliveryMethod $ registeredAddress $\r\n          seeAlso $ sn $ street $ telephoneNumber $\r\n          teletexTerminalIdentifier $ telexNumber $ x121Address ) )\r\n\r\n   The 'domain' object class is described in Section 3.4 of this\r\n   document.  The 'cn', 'description', 'destinationIndicator',\r\n   'facsimileTelephoneNumber', 'internationalISDNNumber,", "notes": "RFC 4519 has the spelling \"internationalISDNNumber\" instead of \"internationaliSDNNumber\".", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 19:42:16"}, {"errata_id": "7205", "doc-id": "RFC4524", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.9", "orig_text": "   class does not require (or allow) the 'userPassword attribute'.", "correct_text": "   class does not require (or allow) the 'userPassword' attribute.", "notes": "Unlucky positioning of quotation marks.", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 00:18:48"}, {"errata_id": "5850", "doc-id": "RFC7906", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   id-enumeratedRestrictiveAttributes OBJECT IDENTIFIER ::=\r\n     { 2 16 840 1 101 2 1 8 3 4 }\r\n\r\n   id-enumeratedPermissiveAttributes OBJECT IDENTIFIER ::=\r\n     { 2 16 840 1 101 2 1 8 3 1 }\r\n\r\n   EnumeratedTag ::= SEQUENCE {\r\n     tagName          OBJECT IDENTIFIER,\r\n     attributeList    SET OF SecurityAttribute }\r\n\r\n   SecurityAttribute ::= INTEGER (0..MAX)\r\n", "correct_text": "   id-enumeratedRestrictiveAttributes OBJECT IDENTIFIER ::=\r\n     { 2 16 840 1 101 2 1 8 3 4 }\r\n\r\n   id-enumeratedPermissiveAttributes OBJECT IDENTIFIER ::=\r\n     { 2 16 840 1 101 2 1 8 3 1 }\r\n\r\n   EnumeratedTag ::= SEQUENCE {\r\n     tagName          OBJECT IDENTIFIER,\r\n     attributeList    SET OF SecurityAttribute }\r\n\r\n    id-informativeAttributes OBJECT IDENTIFIER ::=\r\n      { 2 16 840 1 101 2 1 8 3 3 }\r\n\r\n    InformativeTag ::= SEQUENCE {\r\n      tagName     OBJECT IDENTIFIER,\r\n      attributes  FreeFormField }\r\n\r\n    FreeFormField ::= CHOICE {\r\n      bitSetAttributes    BIT STRING,\r\n      securityAttributes  SET OF SecurityAttribute }\r\n\r\n   SecurityAttribute ::= INTEGER (0..MAX)\r\n", "notes": "RFC 7906, Section 17.1 includes the definition of the Informative Tag, but it does not appear in the ASN.1 module in Appendix A.  This change adds the Informative Tag to the ASN.1 module.", "submit_date": "2019-08-29", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-06-01 20:10:56"}, {"errata_id": "5896", "doc-id": "RFC8521", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "The bootstrap service registry for the RDAP service provider space is represented using the structure specified in Section 3 of RFC 7484 [RFC7484].", "correct_text": "The bootstrap service registry for the RDAP service provider space is based on the structure specified in Section 3 of RFC 7484 [RFC7484].", "notes": "The registry structure specific in RFC 8521 includes an additional contact information field that does not appear in the structure defined in RFC 7484. So, the 8521 registry is not \"represented using the structure specified in Section 3 of RFC 7484\". It extends the structure with the addition of the contact field.", "submit_date": "2019-11-07", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 21:41:29"}, {"errata_id": "5852", "doc-id": "RFC8392", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.3", "orig_text": "   d28443a10126a104524173796d6d657472696345434453413235365850a701756\r\n   36f61703a2f2f61732e6578616d706c652e636f6d02656572696b77037818636f\r\n   61703a2f2f6c696768742e6578616d706c652e636f6d041a5612aeb0051a5610d\r\n   9f0061a5610d9f007420b7158405427c1ff28d23fbad1f29c4c7c6a555e601d6f\r\n   a29f9179bc3d7438bacaca5acd08c8d4d4f96131680c429a01f85951ecee743a5\r\n   2b9b63632c57209120e1c9e30", "correct_text": "   d28443a10126a104524173796d6d657472696345434453413235365850a70175\r\n   636f61703a2f2f61732e6578616d706c652e636f6d02656572696b7703781863\r\n   6f61703a2f2f6c696768742e6578616d706c652e636f6d041a5612aeb0051a56\r\n   10d9f0061a5610d9f007420b7158405427c1ff28d23fbad1f29c4c7c6a555e60\r\n   1d6fa29f9179bc3d7438bacaca5acd08c8d4d4f96131680c429a01f85951ecee\r\n   743a52b9b63632c57209120e1c9e30", "notes": "The ASCII representation of binary bytes in Figure 10 is wrapped\r\non an odd number of ASCII characters. Since there are two ASCII\r\ncharacters per binary bytes this splits the last byte over two\r\nlines. \r\n\r\nThe CBOR playground (http://cbor.me) cannot handle this and\r\nerrors out. \r\n\r\nThis is slightly confusing for readers.\r\n\r\nThe actual bytes values are correct by all the checks I did.", "submit_date": "2019-09-03", "submitter_name": "Laurence Lundblade", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "5854", "doc-id": "RFC8452", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "...mulX_POLYVAL of it is 3931819bf271fada0503eb52574ca5f2.", "correct_text": "...mulX_POLYVAL of it is 3931819bf271fada0503eb52574ca572.", "notes": "The last hex byte is typoed (f2, should be 72).\r\n\r\nConfirmed this was the case on the CFRG mailing list (2019-09-05)", "submit_date": "2019-09-05", "submitter_name": "Tony Arcieri", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2020-06-06 13:17:56"}, {"errata_id": "5855", "doc-id": "RFC4648", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.", "orig_text": "10.  Test Vectors\r\n\r\n   BASE64(\"\") = \"\"\r\n\r\n   BASE64(\"f\") = \"Zg==\"\r\n\r\n   ...", "correct_text": "", "notes": "TL;DR: Test Vectors section should specify the character encoding (ASCII/UTF-8) of the _character_ sequences used to represent input-data _octet_ sequences.\r\n\r\nThe input to a Base 64/-32/-16 encoding operation is sequence of _octets_.\r\n\r\nHowever, the test vector expressions use sequences of _characters_ to represent input _octet_ sequences.\r\n\r\nThat's a type mismatch (characters where octets are needed), and although it's pretty obvious that the strings were meant to represent octet sequences, there's no mention the the intended character encoding isn't, say, EBCDIC.  \r\n\r\nSome possible fixes:\r\n1) The text should specify the character encoding (ASCII/UTF-8) to be used to interpret the character sequences as input octet sequences.\r\n2) The input octet sequences should be represented with a more direct (encoding-independent) representation of octets (e.g., \"0x48, 0x69\".).", "submit_date": "2019-09-06", "submitter_name": "Daniel Barclay", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 20:41:14"}, {"errata_id": "5856", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.6.4", "orig_text": "It takes as an argument a string that is the assigned name. ", "correct_text": "It takes as an argument an unquoted string that is the assigned name.", "notes": "Readers are not beeing made aware that careful reading of section 6.1.3 and the detailed definition of string in section 14 must be consulted.\r\nFor comming versions of this RFC it would be preferable to use a more specialized grammar token for these cases (e.g. unquoted-string).\r\n\r\n\r\n\n --VERIFIER NOTES-- \n   Please see the thread  https://mailarchive.ietf.org/arch/browse/netmod/?gbt=1&index=L3rZ7qFjnpsPeRJ4FfJZegWXdig for further discussions.", "submit_date": "2019-02-21", "submitter_name": "Peter Loborg", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-09-10 16:09:03"}, {"errata_id": "6505", "doc-id": "RFC6921", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "For protocols that do not work in this environment, the IESG should add work items to exiting working group charters or charter new working groups ...", "correct_text": "For protocols that do not work in this environment, the IESG should add work items to existing working group charters or charter new working groups", "notes": "Spelling mistake: exiting ->existing", "submit_date": "2021-04-01", "submitter_name": "Sanjeev Gupta", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-04-18 10:47:43"}, {"errata_id": "7206", "doc-id": "RFC4521", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   operation defined in [RFC4511] (e.g., search, modify) , an extended", "correct_text": "   operation defined in [RFC4511] (e.g., search, modify), an extended", "notes": "Space before comma.", "submit_date": "2022-10-30", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 00:26:04"}, {"errata_id": "7207", "doc-id": "RFC4520", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": ".6", "orig_text": "   [RFC4511.  The protocolOp CHOICE indicates the type of message", "correct_text": "   [RFC4511].  The protocolOp CHOICE indicates the type of message", "notes": "A closing bracket is missing.", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 00:28:54"}, {"errata_id": "5859", "doc-id": "RFC194", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "  +-------------+                        +--------------+\r\n  | inputstream |                        | outputstream |\r\n  +-------------+                        +--------------+\r\n             /\\                           /\r\n              \\                          /\r\n               \\                        /\r\n                \\                     \\/\r\n                +-----------------------+\r\n                |         CPU           |\r\n                +-----------------------+\r\n                       |        /\\\r\n                       |         |\r\n                       |         |\r\n                       \\/        |\r\n                +-----------------------+\r\n    Storage:    | Instruction           |\r\n                | Sequence              |\r\n                +-----------------------+\r\n                | Label Table           |\r\n                +-----------------------+\r\n                | Literal/Identifier    |\r\n                | Pool                  |\r\n                +-----------------------+\r\n                | Variable length       |\r\n                | string area           |\r\n                +-----------------------+\r\n\r\n\r\n                Fig. 1. Form Interpreter", "correct_text": "  +-------------+                        +--------------+\r\n  | inputstream |                        | outputstream |\r\n  +-------------+                        +--------------+\r\n             \\                           /\\\r\n              \\                          /\r\n               \\                        /\r\n               \\/                      /\r\n                +-----------------------+\r\n                |         CPU           |\r\n                +-----------------------+\r\n                       |        /\\\r\n                       |         |\r\n                       |         |\r\n                       \\/        |\r\n                +-----------------------+\r\n    Storage:    | Instruction           |\r\n                | Sequence              |\r\n                +-----------------------+\r\n                | Label Table           |\r\n                +-----------------------+\r\n                | Literal/Identifier    |\r\n                | Pool                  |\r\n                +-----------------------+\r\n                | Variable length       |\r\n                | string area           |\r\n                +-----------------------+\r\n\r\n\r\n                Fig. 1. Form Interpreter", "notes": "This was discovered while cross-referencing the online RFC Editor txt version to a paper original at the Computer History Museum. Reference: https://write.as/365-rfcs/rfc-194", "submit_date": "2019-09-14", "submitter_name": "Darius Kazemi", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 01:14:39"}, {"errata_id": "5857", "doc-id": "RFC8040", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   The server might respond as follows:\r\n\r\n      HTTP/1.1 200 OK\r\n      Date: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Server: example-server\r\n      Cache-Control: no-cache\r\n      Last-Modified: Thu, 26 Jan 2017 16:00:14 GMT\r\n      Content-Type: application/yang-data+json\r\n\r\n      { \"operations\" : { \"example-jukebox:play\" : [null] } }", "correct_text": "   The server might respond as follows:\r\n\r\n      HTTP/1.1 200 OK\r\n      Date: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Server: example-server\r\n      Cache-Control: no-cache\r\n      Last-Modified: Thu, 26 Jan 2017 16:00:14 GMT\r\n      Content-Type: application/yang-data+json\r\n\r\n      { \"operations\" :[ { \"example-jukebox:play\" : [null] } ]}", "notes": "Returned operations in the RESTCONF response should be an array of the particular type, therefore the brackets are needed to enclose a list of operations associated with example-jukebox.\n --VERIFIER NOTES-- \n   Rejected based on mailing list discussion: https://mailarchive.ietf.org/arch/msg/netconf/T9y2CxELL4gmvkbBischAUtnYMg", "submit_date": "2019-09-11", "submitter_name": "Qin WU", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-17 14:04:09"}, {"errata_id": "5858", "doc-id": "RFC8040", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3.1,5.3.2", "orig_text": "      GET /restconf/data/interfaces/interface=eth1\r\n          ?with-defaults=report-all-tagged HTTP/1.1\r\n      Host: example.com\r\n      Accept: application/yang-data+xml\r\n\r\n      GET /restconf/data/interfaces/interface=eth1\\\r\n          ?with-defaults=report-all-tagged HTTP/1.1\r\n      Host: example.com\r\n      Accept: application/yang-data+json", "correct_text": "      GET /restconf/data/ietf-interfaces:interfaces/interface=eth1\r\n          ?with-defaults=report-all-tagged HTTP/1.1\r\n      Host: example.com\r\n      Accept: application/yang-data+xml\r\n\r\n      GET /restconf/data/ietf-interfaces:interfaces/interface=eth1\\\r\n          ?with-defaults=report-all-tagged HTTP/1.1\r\n      Host: example.com\r\n      Accept: application/yang-data+json", "notes": "Based on the rule defined in section 3.5.3 of RFC8040,  the module name ietf-interface followed by a colon character (\":\") should be prepended to the node name interfaces.\n --VERIFIER NOTES-- \n   Examples in sections 5.3.1 and 5.3.2 are not based on ietf-intrefaces module. \r\n", "submit_date": "2019-09-11", "submitter_name": "Qin WU", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-22 12:25:26"}, {"errata_id": "5860", "doc-id": "RFC7464", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   Note that on some systems it\"s possible to input RS by typing\r\n", "correct_text": "   Note that on some systems it's possible to input RS by typing\r\n", "notes": "The contraction \"it's\" needs a single apostrophe, not a double-quote mark.", "submit_date": "2019-09-18", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2019-09-23 16:26:54"}, {"errata_id": "5861", "doc-id": "RFC8555", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.4.1", "orig_text": "", "correct_text": "If a server receives a newAuthz request for an identifier where the authorization object already exists, whether created by CA provisioning on the ACME server or by the ACME server handling a previous newAuthz request from a client, the server returns a 200 (OK) response with the existing authorization URL in the Location header field and the existing JSON authorization object in the body.", "notes": "The above text (or similar) should be appended to the end of section 7.4.1", "submit_date": "2019-09-23", "submitter_name": "owen friel", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5862", "doc-id": "RFC675", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "4.2.1  INTERNETWORK PACKET FONMAT", "correct_text": "4.2.1  INTERNETWORK PACKET FORMAT", "notes": "Typo in the word \"FONMAT\" - unusual typo though, since the N key is quite a distance from the R key on a QWERTY keyboard.\r\n\r\n----- Verifier notes -----\r\nAlmost certainly not a typo, but an OCR error from scanning in paper copies of old RFCs.", "submit_date": "2019-09-24", "submitter_name": "Mark Smith", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-09-24 02:49:58"}, {"errata_id": "7208", "doc-id": "RFC4519", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   The 'dcObject' object class permits an entry to contains domain", "correct_text": "   The 'dcObject' object class permits an entry to contain domain", "notes": "Wrong verb form.", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 00:36:14"}, {"errata_id": "7209", "doc-id": "RFC4519", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.14", "orig_text": "   The 'uidObject' object class permits an entry to contains user", "correct_text": "   The 'uidObject' object class permits an entry to contain user", "notes": "Wrong verb form.", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 00:42:33"}, {"errata_id": "7210", "doc-id": "RFC4519", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.21", "orig_text": "            mailing list object, would be the DN of the director (role):", "correct_text": "            mailing list object would be the DN of the director (role):", "notes": "Unnecessary comma.", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 00:47:26"}, {"errata_id": "7211", "doc-id": "RFC4519", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.19", "orig_text": "   Examples: \"Widget\", \"Widget, Inc.\", and \"Widget, Incorporated.\".", "correct_text": "   Examples: \"Widget\", \"Widget, Inc.\", and \"Widget, Incorporated\".", "notes": "The name \"Widget, Incorporated\" should be written without a period.", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 00:53:31"}, {"errata_id": "7212", "doc-id": "RFC4519", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.5", "orig_text": "             1pm.\", and \"distribution list for all technical staff\".", "correct_text": "             1 p.m.\", and \"distribution list for all technical staff\".", "notes": "Missing space and period.", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-02 00:19:00"}, {"errata_id": "5871", "doc-id": "RFC7914", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   scrypt-0 {1 3 6 1 4 1 11591 4 10}\r\n\r\n   DEFINITIONS ::= BEGIN\r\n\r\n   id-scrypt OBJECT IDENTIFIER ::= {1 3 6 1 4 1 11591 4 11}\r\n\r\n   scrypt-params ::= SEQUENCE {\r\n       salt OCTET STRING,\r\n       costParameter INTEGER (1..MAX),\r\n       blockSize INTEGER (1..MAX),\r\n       parallelizationParameter INTEGER (1..MAX),\r\n       keyLength INTEGER (1..MAX) OPTIONAL\r\n   }\r\n\r\n   PBES2-KDFs ALGORITHM-IDENTIFIER ::=\r\n          { {scrypt-params IDENTIFIED BY id-scrypt}, ... }\r\n\r\n   END", "correct_text": "   Module-scrypt-0 {1 3 6 1 4 1 11591 4 10}\r\n\r\n   DEFINITIONS ::= BEGIN\r\n\r\n   IMPORTS\r\n     ALGORITHM-IDENTIFIER\r\n       FROM PKCS5v2-0 -- [RFC2898]\r\n         { iso(1) member-body(2) us(840) rsadsi(113549)\r\n           pkcs(1) pkcs-5(5) modules(16) pkcs5v2-0(1) } ;\r\n\r\n   id-scrypt OBJECT IDENTIFIER ::= {1 3 6 1 4 1 11591 4 11}\r\n\r\n   Scrypt-params ::= SEQUENCE {\r\n       salt OCTET STRING,\r\n       costParameter INTEGER (1..MAX),\r\n       blockSize INTEGER (1..MAX),\r\n       parallelizationParameter INTEGER (1..MAX),\r\n       keyLength INTEGER (1..MAX) OPTIONAL\r\n   }\r\n\r\n   PBES2-KDFs ALGORITHM-IDENTIFIER ::=\r\n          { {Scrypt-params IDENTIFIED BY id-scrypt}, ... }\r\n\r\n   END", "notes": "The ASN.1 module does not compile without some minor corrections.\r\n\r\nFirst, ALGORITHM-IDENTIFIER needs to be defined.  The simplest solution is to IMPORT it from RFC 2898.\r\n\r\nSecond, the module name and the scrypt-params structure name must begin with capital letters.  Small changes are made to meet these ASN.1 requirements.", "submit_date": "2019-10-07", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-10-10 07:44:31"}, {"errata_id": "5897", "doc-id": "RFC2631", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.2", "orig_text": "     KeySpecificInfo ::= SEQUENCE {\r\n       algorithm OBJECT IDENTIFIER,\r\n       counter OCTET STRING SIZE (4..4) }", "correct_text": "     KeySpecificInfo ::= SEQUENCE {\r\n       algorithm OBJECT IDENTIFIER,\r\n       counter OCTET STRING (SIZE (4..4)) }", "notes": "The addition of '(' and ')' are needed for an ASN.1 compiler to accept the syntax without raising an error.", "submit_date": "2019-11-07", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-19 22:25:17"}, {"errata_id": "5864", "doc-id": "RFC1624", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "(end of section 3 Discussion)", "correct_text": "(Add text at end of section 3 Discussion:)\r\n\r\nWhere \"+\" denotes 1's complement addition, in which carry bits are added\r\nto the low-order bits of the sum. For machines employing e.g. 32-bit\r\narithmetic, the 1's complement addition of three 16-bit words A and B\r\nand C is accomplished as follows:\r\n\r\n        sum = A + B + C\r\n        while (sum > 0xFFFF) {\r\n            sum = (sum & 0xFFFF) + (sum >> 16)\r\n        }", "notes": "The existing Errata ID: 4782 does not appear to correctly implement 1's complement addition.\r\n\r\nIts example should read as follows:\r\n\r\n~(~HC + ~m + m')\r\n~(~0x0000 + ~0x5555 + 0x5555)\r\n~(0xFFFF + 0xAAAA + 0x5555)\r\n~(0x1FFFE)                -- 32bit\r\n~(0xFFFE + 0x1)        -- carry foldaround\r\n~(0xFFFF)\r\n0x0000\r\n\r\nA different example showing multiple carry foldaround is replacing a 0x5555 value by 0x5556 where the original header checksum was 0x0000:\r\n\r\n~(~HC + ~m + m')\r\n~(~0x0000 + ~0x5555 + 0x5556)\r\n~(0xFFFF + 0xAAAA + 0x5556)\r\n~(0x1FFFF)                -- 32bit\r\n~(0xFFFF + 0x1)        -- carry foldaround\r\n~(0x10000)                -- 32bit\r\n~(0x0000 + 0x1)        -- carry foldaround\r\n~(0x0001)\r\n0xFFFE", "submit_date": "2019-09-25", "submitter_name": "J.A. Bezemer", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 20:35:04"}, {"errata_id": "5865", "doc-id": "RFC1624", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "(end of section 3 Discussion)", "correct_text": "(Add text after end of section 3 Discussion:)\r\n\r\n3.1 Considerations for larger-bitsize machines\r\n\r\nIn above equations, \"+\" denotes 1's complement addition, in which any\r\nhigh-order carry bits are added to the low-order bits of the sum, when\r\nexecuted in 16-bit arithmetic.\r\n\r\nWhen implementing on machines with larger bitsize words, the 1's complement\r\naddition can be accomplished by explicity folding back the carry bits.\r\nFor this to work, all negation operations must be limited to the relevant\r\n16 bits only, for example by means of exclusive-or by 0xFFFF. The following\r\nroutine can be used:\r\n\r\n        HCnew = (HCorig xor 0xFFFF) + (valueorig xor 0xFFFF) + valuenew\r\n        while (HCnew > 0xFFFF) {\r\n                HCnew = (HCnew & 0xFFFF) + (HCnew >> 16)\r\n        }\r\n        HCnew = (HCnew xor 0xFFFF)\r\n\r\nwhere valueorig and valuenew contain the original and new 16-bit (aligned)\r\npayload values, and HCorig and HCnew are the 16-bit header checksum values,\r\nall as least-significant 16 bits inside a larger-bitsize word using\r\ncorresponding arithmetic. As long as the bitsize is large enough that the\r\nsummations do not overflow, no negative values will be generated and any\r\nbinary arithmetic can be used.", "notes": "This updates the previous Errata ID: 5864 by including details on the bit-limited negation, which was probably a(nother) cause of the failing result in Errata ID: 4782.", "submit_date": "2019-09-25", "submitter_name": "J.A. Bezemer", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 20:53:21"}, {"errata_id": "5866", "doc-id": "RFC5", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "FORWARD", "orig_text": "FORWARD", "correct_text": "FOREWORD", "notes": "\"Foreword\" is a generally accepted name for text that is put before a document.  In this case \"PREFACE\" would also be acceptable, but it seems to be the case that \"FOREWORD\" was the intent.", "submit_date": "2019-09-26", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-09-26 03:50:27"}, {"errata_id": "5867", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5.7", "orig_text": "   obs-received    =   \"Received\" *WSP \":\" *received-token CRLF\r\n", "correct_text": "   obs-received    =   \"Received\" *WSP \":\"\r\n                       [1*received-token / CFWS] [ \";\" date-time CRLF ]\r\n                    ", "notes": "Erratum 3979 already describes that CFWS should be allowed in an otherwise empty list of received-tokens. This adds an optional date-time after that.", "submit_date": "2019-10-01", "submitter_name": "Pete Resnick", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-13 20:46:45"}, {"errata_id": "5886", "doc-id": "RFC7407", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "        leaf fingerprint {\r\n           type x509c2n:tls-fingerprint;\r\n           mandatory true;\r\n           description\r\n             \"Specifies a value with which the fingerprint of the\r\n              full certificate presented by the peer is compared.  If\r\n              the fingerprint of the full certificate presented by the\r\n              peer does not match the fingerprint configured, then the\r\n              entry is skipped, and the search for a match continues.\";\r\n", "correct_text": "        leaf fingerprint {\r\n           type x509c2n:tls-fingerprint;\r\n           mandatory true;\r\n           description\r\n             \"Specifies a value with which the certificate presented by\r\n              the peer is compared, according to the algorithm defined \r\n\t      in the description of the list node 'cert-to-name'.\";\r\n", "notes": "The quoted text is not consistent with the algorithm described in the list 'cert-to-name'.  Better to simply refer to the cert-to-name description.  The algorithm described in 'cert-to-name' works in the same way as described in the referenced RFC 6353, which makes it clear that this is the intended behaviour.", "submit_date": "2019-10-29", "submitter_name": "Martin Bj\u00f6rklund", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-11-18 03:09:15"}, {"errata_id": "6203", "doc-id": "RFC4090", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "If the \"bandwidth protection guaranteed\" flag is set, the PLR SHOULD try to\r\nprovide a bandwidth guarantee; if this is not feasible, the PLR SHOULD then try\r\nto provide a backup without a guarantee of the full bandwidth.\r\n\r\n", "correct_text": "If the \"bandwidth protection desired\" flag is set in SESSION_ATTRIBUTE, the PLR\r\nSHOULD try to provide a bandwidth guarantee; if this is not feasible, the PLR\r\nSHOULD then try to provide a backup without a guarantee of the full bandwidth.\r\n\r\n", "notes": "Correcting flag name.", "submit_date": "2020-06-03", "submitter_name": "Mihir Amrelia", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 22:03:01"}, {"errata_id": "5868", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.3", "orig_text": "   ECDSA algorithms:  Indicates a signature algorithm using ECDSA\r\n      [ECDSA], the corresponding curve as defined in ANSI X9.62 [ECDSA]\r\n      and FIPS 186-4 [DSS], and the corresponding hash algorithm as\r\n      defined in [SHS].  The signature is represented as a DER-encoded\r\n      [X690] ECDSA-Sig-Value structure.", "correct_text": "   ECDSA algorithms:  Indicates a signature algorithm using ECDSA\r\n      [ECDSA], the corresponding curve as defined in ANSI X9.62 [ECDSA]\r\n      and FIPS 186-4 [DSS], and the corresponding hash algorithm as\r\n      defined in [SHS].  The signature is represented as a DER-encoded\r\n      [X690] ECDSA-Sig-Value structure as defined in [RFC4492].", "notes": "There is a possibility for confusion as the ECDSA-Sig-Value has two conflicting definitions in authoritative standards. TLS always used the following (see RFC4492):\r\n\r\n   ECDSA-Sig-Value ::= SEQUENCE {\r\n     r  INTEGER,\r\n     s  INTEGER\r\n   }\r\n\r\nbut the publicly accessible SECG SEC1 v2.0 (https://www.secg.org/sec1-v2.pdf) defines it like this:\r\n\r\nECDSA-Sig-Value ::= SEQUENCE {\r\n r INTEGER,\r\n s INTEGER,\r\n a INTEGER OPTIONAL,\r\n y CHOICE { b BOOLEAN, f FieldElement } OPTIONAL\r\n}\r\n\r\nI think using the RFC5480 in the Corrected Text would be cleaner than RFC4492, but the former is not an existing reference, so we would need to update section 12 also.", "submit_date": "2019-10-02", "submitter_name": "Hubert Kario", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:24:17"}, {"errata_id": "5869", "doc-id": "RFC8419", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "      hashalgs  OBJECT IDENTIFIER  ::=  { joint-iso-itu-t(2)\r\n                              country(16) us(840) organization(1)\r\n                              gov(101) csor(3) nistalgorithm(4) 2 }", "correct_text": "      hashAlgs  OBJECT IDENTIFIER  ::=  { joint-iso-itu-t(2)\r\n                              country(16) us(840) organization(1)\r\n                              gov(101) csor(3) nistalgorithm(4) 2 }", "notes": "The \"hashAlgs\" requires a capital letter for the other definitions in the section.", "submit_date": "2019-10-02", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 01:45:17"}, {"errata_id": "5872", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.8.5.3", "orig_text": "Weekly on Tuesday and Thursday for five weeks:\r\n\r\n       DTSTART;TZID=America/New_York:19970902T090000\r\n       RRULE:FREQ=WEEKLY;UNTIL=19971007T000000Z;WKST=SU;BYDAY=TU,TH", "correct_text": "Weekly on Tuesday and Thursday for five weeks:\r\n\r\n       DTSTART;TZID=America/New_York:19970902T090000\r\n       RRULE:FREQ=WEEKLY;UNTIL=19971002T000000Z;WKST=SU;BYDAY=TU,TH", "notes": "The UNTIL rule is inclusive, and October 7, a Tuesday, should not be included.\n --VERIFIER NOTES-- \nNeil Jenkins wrote: This erratum is invalid. The original example, while slightly weird, is correct as is. The event's DTSTART time is 09:00 New York TIme, and the UNTIL time is 00:00 UTC, which is before this. Therefore you would not get a recurrence on the 7 Oct with this rule and so it would produce 10 occurrences, as specified. The \"corrected text\" is in fact invalid, as this would remove the 2nd Oct occurrence.", "submit_date": "2019-10-10", "submitter_name": "Lars Henriksen", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2020-03-25 17:03:47"}, {"errata_id": "5873", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.4", "orig_text": "", "correct_text": "11.4.2 Initial Registry Contents\r\n\r\nThe OAuth Extensions Error registry's initial contents are:\r\n\r\no Error name: invalid_request\r\no Error usage location: authorization code grant error response, implicit grant error response, token error response\r\no Related protocol extension: authorization code grant, implicit grant, any access token type\r\no Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: unauthorized_client\r\no Error usage location: authorization code grant error response, implicit grant error response, token error response\r\no Related protocol extension: authorization code grant, implicit grant, any access token type\r\no Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: access_denied\r\no Error usage location: authorization code grant error response, implicit grant error response\r\no Related protocol extension: authorization code grant, implicit grant\r\no Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: unsupported_response_type\r\no Error usage location: authorization code grant error response, implicit grant error response\r\no Related protocol extension: authorization code grant, implicit grant\r\no Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: invalid_scope\r\no Error usage location: authorization code grant error response, implicit grant error response, token error response\r\no Related protocol extension: authorization code grant, implicit grant, any access token type\r\no Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: server_error\r\no Error usage location: authorization code grant error response, implicit grant error response\r\no Related protocol extension: authorization code grant, implicit grant\r\no Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: temporarily_unavailable\r\no Error usage location: authorization code grant error response, implicit grant error response\r\no Related protocol extension: authorization code grant, implicit granto Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: invalid_client\r\no Error usage location: token error response\r\no Related protocol extension: any access token type\r\no Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: invalid_grant\r\no Error usage location: token error response\r\no Related protocol extension: any access token type\r\no Change controller: IETF\r\no Specification document(s): RFC 6749\r\n\r\no Error name: unsupported_grant_type\r\no Error usage location: token error response\r\no Related protocol extension: any access token type\r\no Change controller: IETF\r\no Specification document(s): RFC 6749", "notes": "It seems that the values specified in sections 4.1.2.1.,4.2.2.1. and 5.2. should have been added to the registry but were forgotten.\r\nThis errata suggests \"any access token type\" for \"Related protocol extension\" for the error codes of 5.2 since they seem to apply to any errors returned from the token endpoint, no matter which access token type is involved.", "submit_date": "2019-10-11", "submitter_name": "Ludwig Seitz", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7213", "doc-id": "RFC4518", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.6.1", "orig_text": "   \"foo<SPACE>bar<SPACE><SPACE>\", result in the output", "correct_text": "   \"foo<SPACE>bar<SPACE><SPACE>\" result in the output", "notes": "Unnecessary comma.", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-15 21:56:25"}, {"errata_id": "5878", "doc-id": "RFC8288", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.2", "orig_text": "       15.  Let star_param_names be the set of param_names in the\r\n            (param_name, param_value) tuples of link_parameters where\r\n            the last character of param_name is an asterisk (\"*\").\r\n       16.  For each star_param_name in star_param_names:\r\n            1.  Let base_param_name be star_param_name with the last\r\n                character removed.\r\n            2.  If the implementation does not choose to support an\r\n                internationalised form of a parameter named\r\n                base_param_name for any reason (including, but not\r\n                limited to, it being prohibited by the parameter's\r\n                specification), remove all tuples from link_parameters\r\n                whose first member is star_param_name, and skip to the\r\n                next star_param_name.\r\n            3.  Remove all tuples from link_parameters whose first\r\n                member is base_param_name.\r\n            4.  Change the first member of all tuples in link_parameters\r\n                whose first member is star_param_name to\r\n                base_param_name.", "correct_text": "       15.  Let star_param_names be the set of param_names in the\r\n            (param_name, param_value) tuples of target_attributes where\r\n            the last character of param_name is an asterisk (\"*\").\r\n       16.  For each star_param_name in star_param_names:\r\n            1.  Let base_param_name be star_param_name with the last\r\n                character removed.\r\n            2.  If the implementation does not choose to support an\r\n                internationalised form of a parameter named\r\n                base_param_name for any reason (including, but not\r\n                limited to, it being prohibited by the parameter's\r\n                specification), remove all tuples from target_attributes\r\n                whose first member is star_param_name, and skip to the\r\n                next star_param_name.\r\n            3.  Remove all tuples from target_attributes whose first\r\n                member is base_param_name.\r\n            4.  Change the first member of all tuples in target_attributes\r\n                whose first member is star_param_name to\r\n                base_param_name.", "notes": "The modified link_parameters value is not used, but target_attributes is. Additionally, the normative part of the document states that the RFC 8187 decoding scheme MAY be used for target attributes (especially extension attributes), not the ones that belong to the general link model.", "submit_date": "2019-10-22", "submitter_name": "Jinoh Kang", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-10-24 13:22:31"}, {"errata_id": "5879", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "o  schema tree: The definition hierarchy specified within a module.\r\n", "correct_text": "o  schema tree: The hierarchy of schema nodes defined in the set of all modules \r\n   implemented by a server, as specified in the YANG library data [RFC7895].\r\n\r\n", "notes": "The original definition of the term has two problems:\r\n\r\n1. Schema tree is not limited to a single module. Some YANG constructs, such as augment and leafref type, may refer to a schema node that is defined in another module.\r\n\r\n2. Apart from schema nodes, YANG modules contain definitions that do not contribute to the schema tree: groupings, typedefs, identities etc.\n --VERIFIER NOTES-- \n   Rejected based on WG discussion: https://mailarchive.ietf.org/arch/msg/netmod/5uDEBwgNehfLaPONpDSjVnCcWx8\r\n", "submit_date": "2019-10-22", "submitter_name": "Ladislav Lhotka", "verifier_id": "", "verifier_name": "Ignas Bagdonas", "update_date": "2019-10-28 21:48:30"}, {"errata_id": "5880", "doc-id": "RFC3875", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "...that has a permanent affect, such a change in a database.", "correct_text": "...that has a permanent effect, such as a change in a database.", "notes": "", "submit_date": "2019-10-23", "submitter_name": "Zach Scott", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-10-26 17:33:31"}, {"errata_id": "5881", "doc-id": "RFC6482", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   END\r\n", "correct_text": "   id-ct-routeOriginAuthz OBJECT IDENTIFIER ::= { 1 2 840 113549 1 9 16 1 24 }\r\n\r\n   END\r\n", "notes": "The object identifier for the ROA content type is mentioned in the document, but it is not included in the ASN.1 Module.", "submit_date": "2019-10-23", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2019-10-24 18:04:55"}, {"errata_id": "5899", "doc-id": "RFC8584", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1.1", "orig_text": "BD: Broadcast Domain.  An EVI may be comprised of one BD\r\n      (VLAN-based or VLAN Bundle services) or multiple BDs (VLAN-aware\r\n      Bundle services).", "correct_text": "BD: Bridge Domain.  An EVI may be comprised of one BD\r\n      (VLAN-based or VLAN Bundle services) or multiple BDs (VLAN-aware\r\n      Bundle services).", "notes": "broadcast domain is not comprised in any services (VLAN-based or VLAN Bundle service).\n --VERIFIER NOTES-- \nit is Broadcast Domain as per\r\nhttps://datatracker.ietf.org/doc/html/draft-ietf-bess-rfc7432bis-10#name-terminology", "submit_date": "2019-11-12", "submitter_name": "Sean.Chen", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-10-31 13:53:16"}, {"errata_id": "5900", "doc-id": "RFC8584", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.1", "orig_text": "BD: Broadcast Domain.  An EVI may be comprised of one BD\r\n      (VLAN-based or VLAN Bundle services) or multiple BDs (VLAN-aware\r\n      Bundle services).", "correct_text": "BD: Broadcast Domain.  An EVI may be comprised of one BD\r\n      (VLAN-based) or multiple BDs (VLAN Bundle services \r\nor VLAN-aware Bundle services).", "notes": "", "submit_date": "2019-11-12", "submitter_name": "Frank Lu", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2025-02-10 10:32:59"}, {"errata_id": "5874", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1", "orig_text": "...\r\n\r\n   Application Data messages contain data that is opaque to TLS.\r\n   Application Data messages are always protected.  Zero-length\r\n   fragments of Application Data MAY be sent, as they are potentially\r\n   useful as a traffic analysis countermeasure.  Application Data\r\n   fragments MAY be split across multiple records or coalesced into a\r\n   single record.", "correct_text": "...\r\n\r\n   Application Data messages contain data that is opaque to TLS.\r\n   Application Data messages are always protected.  Zero-length\r\n   fragments of Application Data (i.e. those encapsulating an\r\n   TLSInnerPlaintext record having a content field of length zero)\r\n   MAY be sent, as they are potentially useful as a traffic analysis\r\n   countermeasure. Application Data fragments MAY be split across\r\n   multiple records or coalesced into a single record.", "notes": "In the interest of clarity, it may be prudent to specify the type of record for\r\nwhich a fragment of length zero is being considered - it cannot be that of the\r\nTLSCiphertext itself, for \"Application Data messages are always protected,\"\r\ntherefore I infer this relates to the TLSInnerPlaintext content field (of\r\nlength \"TLSPlaintext.length\") - i.e. to the TLSPlaintext fragment.\r\n\r\nNote: This comment also applies to previous versions of the TLS specification,\r\nin particular with the introduction of the respective text concerning zero-length\r\nfragments in RFC 5246. In TLS 1.2, this would be the GenericXXCipher content\r\nfield of length \"TLSCompressed.length\" - i.e. to the TLSCompressed fragment.\r\n\r\nNote: The implications of zero-length records must be considered with respect to\r\npotential vectors for denial of service.\r\n\r\nPaul Wouters(AD): Currently discussed at:\r\n\r\nhttps://github.com/tlswg/tls13-spec/issues/1346\r\nhttps://github.com/tlswg/tls13-spec/pull/1347", "submit_date": "2019-10-12", "submitter_name": "Mr Laurie Perrin", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-05 12:46:18"}, {"errata_id": "5875", "doc-id": "RFC7508", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "     mod-SMimeSecureHeadersV1\r\n       { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)\r\n       pkcs-9(9) smime(16) modules(0) secure-headers-v1(65) }\r\n\r\n     DEFINITIONS IMPLICIT TAGS ::=\r\n\r\n     BEGIN", "correct_text": "     Mod-SMimeSecureHeadersV1\r\n       { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)\r\n       pkcs-9(9) smime(16) modules(0) secure-headers-v1(65) }\r\n\r\n     DEFINITIONS IMPLICIT TAGS ::=\r\n\r\n     BEGIN", "notes": "The ASN.1 module name must begin with a capital letter.", "submit_date": "2019-10-15", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-11-06 19:02:35"}, {"errata_id": "5876", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.1.6", "orig_text": "   When the subjectAltName extension contains an iPAddress, the address\r\n   MUST be stored in the octet string in \"network byte order\", as\r\n   specified in [RFC791]. ", "correct_text": "   When the subjectAltName extension contains an IP address, the address\r\n   MUST be stored in the iPAddress (an octet string). The address \r\n   MUST be stored in the octet string in \"network byte order\", as\r\n   specified in [RFC791]. ", "notes": "For email addresses and domain names, this section is very prescriptive:\r\n\r\n   When the subjectAltName extension contains an Internet mail address,\r\n   the address MUST be stored in the rfc822Name. \r\n...\r\n   When the subjectAltName extension contains a domain name system\r\n   label, the domain name MUST be stored in the dNSName\u2026\r\n\r\nHowever, for IP addresses, it's possible to interpret the current wording as saying that *if* you happen to choose the iPAddress form for an IP address, then you must represent that as big-endian. I suspect this was a poor choice of wording and the intent was to say that you MUST use the iPAddress form for an IP address.", "submit_date": "2019-10-16", "submitter_name": "David Woodhouse", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-10-20 23:44:06"}, {"errata_id": "5877", "doc-id": "RFC8579", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "require \"imapsieve\";\r\nrequire \"special-use\";\r\nrequire \"environment\";\r\nrequire \"variables\";\r\n\r\nif environment :contains \"imap.mailbox\" \"*\" {\r\n    set \"mailbox\" \"${1}\";\r\n}\r\n\r\nif allof(\r\n    environment \"imap.cause\" \"COPY\",\r\n    specialuse_exists \"${mailbox}\" \"\\\\Junk\") {\r\n    redirect \"spam-report@example.org\";\r\n}\r\n", "correct_text": "require \"imapsieve\";\r\nrequire \"special-use\";\r\nrequire \"environment\";\r\nrequire \"variables\";\r\n\r\nif environment :matches \"imap.mailbox\" \"*\" {\r\n    set \"mailbox\" \"${1}\";\r\n}\r\n\r\nif allof(\r\n    environment \"imap.cause\" \"COPY\",\r\n    specialuse_exists \"${mailbox}\" \"\\\\Junk\") {\r\n    redirect \"spam-report@example.org\";\r\n}\r\n", "notes": "The final example is using the \":contains\" match type to extract a match variable, which will not work. It should use \":matches\" instead.", "submit_date": "2019-10-18", "submitter_name": "Stephan Bosch", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-10-19 01:55:34"}, {"errata_id": "7534", "doc-id": "RFC9399", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   After a certification path is successfully validated, the replying\r\n   party trusts the information that the CA includes in the certificate,\r\n   including any certificate extensions.", "correct_text": "   After a certification path is successfully validated, the relying\r\n   party trusts the information that the CA includes in the certificate,\r\n   including any certificate extensions.", "notes": "The phrase \"replying party\" is a typo and should be \"relying party\"", "submit_date": "2023-06-05", "submitter_name": "Preston Locke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-05 21:02:52"}, {"errata_id": "5882", "doc-id": "RFC5802", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "Hi(str, salt, i):\r\n\r\n     U1   := HMAC(str, salt + INT(1))\r\n     U2   := HMAC(str, U1)\r\n     ...\r\n     Ui-1 := HMAC(str, Ui-2)\r\n     Ui   := HMAC(str, Ui-1)\r\n\r\n     Hi := U1 XOR U2 XOR ... XOR Ui\r\n", "correct_text": "Hi(str, salt, i):\r\n\r\n     U1   := HMAC(str, salt + INT(i))\r\n     U2   := HMAC(str, U1)\r\n     ...\r\n     Ui-1 := HMAC(str, Ui-2)\r\n     Ui   := HMAC(str, Ui-1)\r\n\r\n     Hi := U1 XOR U2 XOR ... XOR Ui\r\n", "notes": "The first round of PBKDF2 is defined incorrectly with a hard-coded value \"INT(1)\" rather than \"INT(i)\" (the iteration count). See RFC 2898 section 5.2 step 3. This error means that the computation of PBKDF2 with n iterations is a prefix of the computation required for PBKDF2 with m iterations (with m > n), which is otherwise not the case (and may have security implications?).\n --VERIFIER NOTES-- \n   Rejected per submitter request.  The 1 here indicates it is the first block of the output stream being computed, and only one such block is needed.", "submit_date": "2019-10-25", "submitter_name": "Neil Madden", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-10-25 23:05:01"}, {"errata_id": "5883", "doc-id": "RFC5917", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "     DirectoryString\r\n       PKIX1Explicit-2009\r\n         { iso(1) identified-organization(3) dod(6) internet(1)\r\n           security(5) mechanisms(5) pkix(7) id-mod(0)\r\n           id-pkix1-explicit-02(51) }", "correct_text": "     DirectoryString\r\n       FROM PKIX1Explicit-2009\r\n         { iso(1) identified-organization(3) dod(6) internet(1)\r\n           security(5) mechanisms(5) pkix(7) id-mod(0)\r\n           id-mod-pkix1-explicit-02(51) }", "notes": "As already reported in eid4558, the \"FROM\" is missing.  In addition, \"-mod\" is missing from the text portion of the object identifier.", "submit_date": "2019-10-25", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-10-26 05:44:30"}, {"errata_id": "5887", "doc-id": "RFC7991", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "xref =\r\n  element xref {\r\n    attribute xml:base { text }?,\r\n    attribute xml:lang { text }?,\r\n    attribute target { xsd:IDREF },\r\n    [ a:defaultValue = \"false\" ]\r\n    attribute pageno { \"true\" | \"false\" }?,\r\n    [ a:defaultValue = \"default\" ]\r\n    attribute format { \"default\" | \"title\" | \"counter\" | \"none\" }?,\r\n    attribute derivedContent { text }?,\r\n    text\r\n  }", "correct_text": "xref =\r\n  element xref {\r\n    attribute xml:base { text }?,\r\n    attribute xml:lang { text }?,\r\n    attribute target { xsd:IDREF },\r\n    [ a:defaultValue = \"false\" ]\r\n    attribute pageno { \"true\" | \"false\" }?,\r\n    [ a:defaultValue = \"default\" ]\r\n    attribute format { \"default\" | \"title\" | \"counter\" | \"none\" }?,\r\n    attribute derivedContent { text }?,\r\n    attribute relative { text }?,\r\n    attribute section { text }?,\r\n    [ a:defaultValue = \"of\" ]\r\n    attribute sectionFormat { \"of\" | \"comma\" | \"parens\" | \"bare\" }?,\r\n    text\r\n  }", "notes": "In section 1.3.2: New Attributes for Existing Elements, the attributes 'relative', 'section', and 'sectionFormat' are added to the xref element. This is, however, not reflected in appendix C.\r\n\r\nThis same mistake is reflected in appendix D.", "submit_date": "2019-10-30", "submitter_name": "Rolf van Kleef", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewnd (IAB/RSAB chair)", "update_date": "2024-03-14 12:00:38"}, {"errata_id": "5914", "doc-id": "RFC7991", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.3", "orig_text": "The consensus attribute can be used to supply this information.  The\r\n   acceptable values are \"true\" (the default) and \"false\"; \"yes\" and\r\n   \"no\" from v2 are deprecated.", "correct_text": "The consensus attribute can be used to supply this information.  The\r\n   acceptable values are \"true\" and \"false\" (the default); \"yes\" and\r\n   \"no\" from v2 are deprecated.", "notes": "Section 2.45.2.  \"consensus\" Attribute says,\r\n\r\n>>>>>>\r\n Affects the generated boilerplate.  Note that the values of \"no\" and\r\n   \"yes\" are deprecated and are replaced by \"false\" (the default) and\r\n   \"true\".\r\n\r\n   See [RFC7841] for more information.\r\n\r\n   Allowed values:\r\n\r\n   o  \"no\"\r\n\r\n   o  \"yes\"\r\n\r\n   o  \"false\" (default)\r\n\r\n   o  \"true\"\r\n<<<<<<\r\n\r\nWhich is the opposite default from what A.3 currently claims. These should be consistent.", "submit_date": "2019-11-19", "submitter_name": "Jeffrey Yasskin", "verifier_id": "", "verifier_name": null, "update_date": "2024-03-01 22:18:19"}, {"errata_id": "5889", "doc-id": "RFC8460", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.7", "orig_text": "Item is missing entirely", "correct_text": "6.7 DKIM Service Type\r\n\r\nThis document registers a new DKIM Service Type in the DomainKeys Identified Mail (DKIM) Parameters registry:\r\n\r\nService Type name: tlsrpt\r\n\r\nReference: RFC 8460\r\n\r\nStatus Active", "notes": "The new service type is discussed in Section 3, so it should have been added to the registry.  It's an IETF Review required registry, not Specification Required, so this can (and should) be addressed in terms at least of the registry now.\r\n\r\nAlexey: Murray wrote:\r\n\r\nI would guess we can't rectify this oversight via the errata system.  What got IETF Review was the need for the registration, but not the registration itself.\r\n\r\nI imagine this should either be done through DISPATCH (which is chartered to do minor housekeeping things like this) or through an AD-sponsored document that contains only the registration.\r\n", "submit_date": "2019-10-31", "submitter_name": "Scott Kitterman", "verifier_id": "", "verifier_name": "Alexey Melnikov", "update_date": "2020-03-25 16:57:51"}, {"errata_id": "5890", "doc-id": "RFC5913", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Section 3", "orig_text": "     id-pe-authorityClearanceConstraints OBJECT IDENTIFIER ::= {\r\n       iso(1) identified-organization(3) dod(6) internet(1) security(5)\r\n       mechanisms(5) pkix(7) pe(1) 21 }", "correct_text": "   id-pe-clearanceConstraints OBJECT IDENTIFIER ::=\r\n     { iso(1) identified-organization(3) dod(6) internet(1) security(5)\r\n       mechanisms(5) pkix(7) pe(1) 21 }", "notes": "Section 3 and Appendix A use different names for the object identifier.  They should match.  This change treats the complete ASN.1 module from Appendix A as the canonical version.", "submit_date": "2019-10-31", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-11-05 18:53:35"}, {"errata_id": "5891", "doc-id": "RFC6960", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B.2", "orig_text": "AuthorityInfoAccessSyntax, GeneralName, CrlEntryExtensions\r\nFROM PKIX1Implicit-2009 -- From [RFC5912]\r\n    {iso(1) identified-organization(3) dod(6) internet(1) security(5)\r\n    mechanisms(5) pkix(7) id-mod(0) id-mod-pkix1-implicit-02(59)}", "correct_text": "AuthorityInfoAccessSyntax, GeneralName, CrlEntryExtensions, CRLReason\r\nFROM PKIX1Implicit-2009 -- From [RFC5912]\r\n    {iso(1) identified-organization(3) dod(6) internet(1) security(5)\r\n    mechanisms(5) pkix(7) id-mod(0) id-mod-pkix1-implicit-02(59)}", "notes": "The CRLReason is not defined in the ASN.1 module, and it should have been imported from the one that is defined in RFC 5212.  The ASN.1 compiler will generate an error without this correction.", "submit_date": "2019-11-02", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-11-06 17:06:01"}, {"errata_id": "5892", "doc-id": "RFC6277", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A.1", "orig_text": "   PreferredSignatureAlgorithm ::= SEQUENCE {\r\n    sigIdentifier       AlgorithmIdentifier{SIGNATURE-ALGORITHM, {...}},\r\n    pubKeyAlgIdentifier SMIMECapability{PUBLIC-KEY, {...}} OPTIONAL  }\r\n", "correct_text": "   PreferredSignatureAlgorithm ::= SEQUENCE {\r\n    sigIdentifier       AlgorithmIdentifier{SIGNATURE-ALGORITHM, {...}},\r\n    pubKeyAlgIdentifier AlgorithmIdentifier{PUBLIC-KEY, {...}} OPTIONAL}", "notes": "The original ASN.1 definition does not compile.  The correction uses a syntax that is aligned with RFC 6960, which obsoletes RFC 6277.", "submit_date": "2019-11-02", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-11-09 01:11:35"}, {"errata_id": "5898", "doc-id": "RFC6275", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "It should say:\r\n\r\nUpdates: 4861 [in RFC header]\r\n", "notes": "RFC4861 Section 6.2.1 says that \r\n\"MaxRtrAdvInterval ..MUST be no less than 4 seconds\"\r\nand \r\n\"MinRtrAdvInterval...MUST MUST be no less than 3 seconds\"\r\n\r\nRFC6275 Section 7.5.  changes those requirements to:\r\n\"Routers supporting mobility SHOULD be able to be configured with a\r\n   smaller MinRtrAdvInterval value and MaxRtrAdvInterval value to allow\r\n   sending of unsolicited multicast Router Advertisements more often.\r\n   The minimum allowed values are:\r\n\r\n   o  MinRtrAdvInterval 0.03 seconds\r\n\r\n   o  MaxRtrAdvInterval 0.07 seconds\r\n\"\r\nso it  should be flagged as a formal update to RFC4861.\n --VERIFIER NOTES-- \nDeviation from RFC 4861 are allowed by its section 6.2.1: \r\n\" The default values for some of the variables listed below may be\r\n   overridden by specific documents that describe how IPv6 operates over\r\n   different link layers.\"", "submit_date": "2019-11-08", "submitter_name": "Jen Linkova", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 11:58:36"}, {"errata_id": "5901", "doc-id": "RFC3125", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A.1", "orig_text": "CommitmentType ::= SEQUENCE {\r\n        identifier                      CommitmentTypeIdentifier,\r\n        fieldOfApplication      [0] FieldOfApplication OPTIONAL,\r\n        semantics                       [1] DirectoryString OPTIONAL }", "correct_text": "CommitmentType ::= SEQUENCE {\r\n        identifier                      CommitmentTypeIdentifier,\r\n        fieldOfApplication      [0] FieldOfApplication OPTIONAL,\r\n        semantics                       [1] DirectoryString OPTIONAL }\r\n\r\nCommitmentTypeIdentifier ::= OBJECT IDENTIFIER", "notes": "The definition of CommitmentTypeIdentifier is missing from the ASN.1 module.  RFC 3126 shows that it is an object identifier.", "submit_date": "2019-11-12", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 02:00:58"}, {"errata_id": "5904", "doc-id": "RFC7030", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "Content-Transfer-Encoding: base64", "correct_text": "Transfer-Encoding: base64", "notes": "Verifier Notes: Marked verified by the RFC Editor at the request of Roman Danyliw.\r\n--------------------\r\n\r\nContent-Transfer-Encoding is not a valid HTTP header. RFC 7030 is not compliant with RFC 2616.\r\n\r\n- \"MIME Content-Transfer-Encoding: base64\" => Base64 Basic with CRLFs\r\n- \"HTTP Transfer-Encoding: base64\" => Base64 Basic without CRLFs\r\n\r\nThis is traceable from RFC 7030 (EST) through RFC 2818 (TLS) to RFC 2616 (HTTP).\r\n\r\n- RFC 7030 (EST): EST specifies how to transfer messages securely via HTTP over TLS (HTTPS) [RFC2818]\r\n- RFC 2818 (TLS): HTTP [RFC2616] was originally used in the clear on the Internet.\r\n- RFC 2616 (HTTP): HTTP does not use the Content-Transfer-Encoding (CTE) field of RFC 2045.\r\n- RFC 2616 (HTTP): HTTP/1.1 introduces the Transfer-Encoding header field (section 14.41).\r\n\r\nRFC 7030 sections affected are:\r\n\r\n- All references to Content-Transfer-Encoding are not valid: Sections 4.1.3, 4.3.1, 4.3.2, 4.4.2, 4.5.2, A.1, A.2, A.3, and A.4.\r\n- All references to RFC 2045 are not valid: Sections 4.1.3, 4.3.1, 4.3.2, 4.4.2, 4.5.2, and 7.1.\r\n- All references to \"base64\" need to be updated or removed: Sections 3.5, 4.1.3, 4.3.1, 4.3.2, 4.4.2, 4.5.2, and 7.1.\r\n\r\nRFC 7030 fix options:\r\n\r\nOption #1: Change all references from Content-Transfer-Encoding to Transfer-Encoding. A caveat is that \"base64\" has a different meaning in HTTP (no CRLFs) vs MIME (includes CRLFs).\r\n\r\nOption #2: Remove all references to Content-Transfer-Encoding and base64. Responses would be transmitted as binary. This allows the response to be transported more efficiently without base64 size bloat, and it allows optional use of Content-Length header so the response can be parsed more efficiently knowing the length ahead of time.", "submit_date": "2019-11-12", "submitter_name": "Justin Cranford", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2020-11-13 20:52:03"}, {"errata_id": "5905", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   The time-of-day specifies the number of hours, minutes, and\r\n   optionally seconds since midnight of the date indicated.\r\n\r\n   The date and time-of-day SHOULD express local time.\r\n", "correct_text": "   The time-of-day specifies the number of hours, minutes, and\r\n   optionally seconds since midnight of the date indicated or, when\r\n   a time-zone transition has intervened in the interval, since the\r\n   nominal midnight of the zone now in effect.\r\n\r\n   The date and time-of-day SHOULD express local time.\r\n", "notes": "The problem with the original text is its reading on the day of a time-zone transition.\r\n\r\nFor example, if the hour from 02:00 to 03:00 was repeated (a fall-back, as at the end of DST), then what local time refers to as 04:00 is 5 hours after midnight \"of the date indicated\" and what local time refers to as 23:59 is almost 25 hours after midnight.  Likewise, if an hour early in the day has been skipped (a spring-forward, as at the start of DST), the time since midnight is one hour short of the local time, as normally understood; for example, 23:00 is only 22 hours after midnight.\r\n\r\nThere are zones in which transitions happen at midnight, for which 01:00 is midnight on a relevant day: at the other end of the year, there may then be a day that repeats 00:00, so may be argued to have two midnights (with a rather literal \"midnight hour\" in between).\r\n\r\nI cannot think of a good replacement text, sad to say, but I have tried my (painfully verbose) best.  I assume everyone has always just used the conventional meaning of local time (as per the SHOULD in the paragraph I haven't changed), without worrying about the inaccurate \"since midnight\" phrasing.", "submit_date": "2019-11-13", "submitter_name": "Edward Welbourne", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-13 20:46:18"}, {"errata_id": "5906", "doc-id": "RFC7519", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.2", "orig_text": "   Finally, note that it is an application decision which algorithms may\r\n   be used in a given context.  Even if a JWT can be successfully\r\n   validated, unless the algorithms used in the JWT are acceptable to\r\n   the application, it SHOULD reject the JWT.", "correct_text": "   Finally, note that it is an application decision which algorithms may\r\n   be used in a given context.  Even if a JWT can be successfully\r\n   validated, unless the algorithms used in the JWT are acceptable to\r\n   the application, it MUST reject the JWT.", "notes": "A vulnerability exists in certain implementations in the wild where applications simply look for valid JWT tokens which includes the \"none\" algorithm (https://medium.com/swlh/hacking-json-web-tokens-jwts-9122efe91e4a).  A fairly popular library is auth0's java-jwt and at verification (https://github.com/auth0/java-jwt/blob/master/lib/src/main/java/com/auth0/jwt/JWTVerifier.java) quite reasonably you cannot initialize the class without an algorithm.  Given all capital SHOULD may be interpreted as a recommendation and as this RFC dictates the algorithm \"none\" MUST be implemented as a default algorithm under Section 8, one could argue JWTVerifier in the example doesn't have to verifyAlgorithm leading to the vulnerability pointed out in the first article while still complying by the specification.  There is no good reason why an algorithm unacceptable to the application must not be rejected as it does more harm than good and all popular library implementations interpret it as such.", "submit_date": "2019-11-13", "submitter_name": "Erdem Memisyazici", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7214", "doc-id": "RFC9112", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1.2", "orig_text": "The following core rules are included by reference, as defined in\r\n[RFC5234], Appendix B.1: ALPHA (letters), CR (carriage return), CRLF\r\n(CR LF), CTL (controls), DIGIT (decimal 0-9), DQUOTE (double quote),\r\nHEXDIG (hexadecimal 0-9/A-F/a-f), HTAB (horizontal tab), LF (line\r\nfeed), OCTET (any 8-bit sequence of data), SP (space), and VCHAR (any\r\nvisible [USASCII] character).", "correct_text": "The following core rules are included by reference, as defined in\r\n[RFC5234], Appendix B.1: ALPHA (letters), CR (carriage return), CRLF\r\n(CR LF), CTL (controls), DIGIT (decimal 0-9), DQUOTE (double quote),\r\nHEXDIG (hexadecimal 0-9/A-F), HTAB (horizontal tab), LF (line\r\nfeed), OCTET (any 8-bit sequence of data), SP (space), and VCHAR (any\r\nvisible [USASCII] character).", "notes": "Rule HEXDIG from RFC5234 is \r\nHEXDIG =  DIGIT / \"A\" / \"B\" / \"C\" / \"D\" / \"E\" / \"F\"\r\nexcluding lower-case letters.\n --VERIFIER NOTES-- \nRFC 5234 section 2.3 says: ABNF strings are case insensitive and the character set for these strings is US-ASCII.", "submit_date": "2022-10-31", "submitter_name": "Niklas Wolber", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-09 08:38:39"}, {"errata_id": "7215", "doc-id": "RFC4510", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   [RFC4511] replaces the majority RFC 2251, portions of RFC 2252, and", "correct_text": "   [RFC4511] replaces the majority of RFC 2251, portions of RFC 2252,\r\n   and", "notes": "Missing \"of\".", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 01:13:52"}, {"errata_id": "7216", "doc-id": "RFC4511", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.6", "orig_text": "   the value syntax.  See objectIdentiferFirstComponentMatch in", "correct_text": "   the value syntax.  See objectIdentifierFirstComponentMatch in", "notes": "Typo.", "submit_date": "2022-10-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-02 00:35:00"}, {"errata_id": "5907", "doc-id": "RFC8312", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": " +--------+----------+-----------+------------+-----------+----------+\r\n   |   Loss |  Average |   Average |      CUBIC |     CUBIC |    CUBIC |\r\n   | Rate P |    TCP W |   HSTCP W |   (C=0.04) |   (C=0.4) |    (C=4) |\r\n   +--------+----------+-----------+------------+-----------+----------+\r\n   |  10^-2 |       12 |        12 |         12 |        12 |       12 |\r\n   |  10^-3 |       38 |        38 |         38 |        38 |       59 |\r\n   |  10^-4 |      120 |       263 |        120 |       187 |      333 |\r\n   |  10^-5 |      379 |      1795 |        593 |      1054 |     1874 |\r\n   |  10^-6 |     1200 |     12279 |       3332 |      5926 |    10538 |\r\n   |  10^-7 |     3795 |     83981 |      18740 |     33325 |    59261 |\r\n   |  10^-8 |    12000 |    574356 |     105383 |    187400 |   333250 |\r\n   +--------+----------+-----------+------------+-----------+----------+\r\n\r\n                                  Table 1", "correct_text": " +--------+----------+-----------+------------+-----------+----------+\r\n   |   Loss |  Average |   Average |      CUBIC |     CUBIC |    CUBIC |\r\n   | Rate P |    TCP W |   HSTCP W |   (C=0.04) |   (C=0.4) |    (C=4) |\r\n   +--------+----------+-----------+------------+-----------+----------+\r\n   |  10^-2 |       12 |        12 |          3 |         6 |       11 |\r\n   |  10^-3 |       38 |        38 |         19 |        33 |       59 |\r\n   |  10^-4 |      120 |       263 |        120 |       187 |      333 |\r\n   |  10^-5 |      379 |      1795 |        593 |      1054 |     1874 |\r\n   |  10^-6 |     1200 |     12279 |       3332 |      5926 |    10538 |\r\n   |  10^-7 |     3795 |     83981 |      18740 |     33325 |    59261 |\r\n   |  10^-8 |    12000 |    574356 |     105383 |    187400 |   333250 |\r\n   +--------+----------+-----------+------------+-----------+----------+\r\n\r\n                                  Table 1", "notes": "The CUBIC average window sizes for 10^2 and 10^3 are incorrect in the original text using expression 6.\n --VERIFIER NOTES-- \nSee Section 4.2. on how Cubic calculates the congestion window in TCP-Friendly Region.", "submit_date": "2019-11-14", "submitter_name": "Elliott Ecton", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 11:05:25"}, {"errata_id": "5908", "doc-id": "RFC8519", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "section-4.1", "orig_text": "choice l2 {\r\n              container eth {\r\n                when \"derived-from-or-self(/acls/acl/type, \"\r\n                   + \"'acl:eth-acl-type')\";\r\n                if-feature \"match-on-eth\";\r\n                uses pf:acl-eth-header-fields;\r\n                description\r\n                  \"Rule set that matches Ethernet headers.\";\r\n              }\r\n              description\r\n                \"Match Layer 2 headers, for example, Ethernet\r\n                 header fields.\";\r\n            }\r\n\r\n            choice l3 {\r\n              container ipv4 {\r\n                when \"derived-from-or-self(/acls/acl/type, \"\r\n                   + \"'acl:ipv4-acl-type')\";\r\n                if-feature \"match-on-ipv4\";\r\n                uses pf:acl-ip-header-fields;\r\n                uses pf:acl-ipv4-header-fields;\r\n                description\r\n                  \"Rule set that matches IPv4 headers.\";\r\n              }\r\n\r\n              container ipv6 {\r\n                when \"derived-from-or-self(/acls/acl/type, \"\r\n                   + \"'acl:ipv6-acl-type')\";\r\n                if-feature \"match-on-ipv6\";\r\n                uses pf:acl-ip-header-fields;\r\n                uses pf:acl-ipv6-header-fields;\r\n                description\r\n                  \"Rule set that matches IPv6 headers.\";\r\n              }\r\n              description\r\n                \"Choice of either IPv4 or IPv6 headers\";\r\n            }", "correct_text": "choice l2 {\r\n              container eth {\r\n                when \"derived-from-or-self(../../../../type, \"\r\n                   + \"'acl:eth-acl-type')\";\r\n                if-feature \"match-on-eth\";\r\n                uses pf:acl-eth-header-fields;\r\n                description\r\n                  \"Rule set that matches Ethernet headers.\";\r\n              }\r\n              description\r\n                \"Match Layer 2 headers, for example, Ethernet\r\n                 header fields.\";\r\n            }\r\n\r\n            choice l3 {\r\n              container ipv4 {\r\n                when \"derived-from-or-self(../../../../type, \"\r\n                   + \"'acl:ipv4-acl-type')\";\r\n                if-feature \"match-on-ipv4\";\r\n                uses pf:acl-ip-header-fields;\r\n                uses pf:acl-ipv4-header-fields;\r\n                description\r\n                  \"Rule set that matches IPv4 headers.\";\r\n              }\r\n\r\n              container ipv6 {\r\n                when \"derived-from-or-self(../../../../type, \"\r\n                   + \"'acl:ipv6-acl-type')\";\r\n                if-feature \"match-on-ipv6\";\r\n                uses pf:acl-ip-header-fields;\r\n                uses pf:acl-ipv6-header-fields;\r\n                description\r\n                  \"Rule set that matches IPv6 headers.\";\r\n              }\r\n              description\r\n                \"Choice of either IPv4 or IPv6 headers\";\r\n            }", "notes": "In access-list-control yang definition, the absolute path was used in when derived-from-or-self. This mean it will check all the type in configured acl lists one by one the return the first matched result (If there is any). For examples, I have acls acl acl_test1 configured, and type is set to ipv4-acl-type. Then if I create acl_test2 with ipv6-acl-type, when choice happened in acl_test2, it starts from acl_test1 because it's the first entry for acl list. Choice found there is ipv4-acl-type, then it chooses containter ipv4 rather than ipv6. This is not the correct behivour, it should choose ipv6 container because current acl type is ipv6-acl-type.\r\nI think it should only check the current acl type not the whole acl list. So I changed it to relevant path only match the type field in current acl.\r\nPlease review my change and corret me if my understanding is not match your design.\r\nIf you need more information, please contact me directly.\r\n\r\nAD Note: I agree that the errata is valid, but we cannot update a YANG module revision through the errata process, hence I've moved this errata to \"Held for Document Update\" so that it can be fixed by publishing a new revision of the YANG module.", "submit_date": "2019-11-14", "submitter_name": "Fanqiang Kong", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:30:32"}, {"errata_id": "7217", "doc-id": "RFC4511", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.11", "orig_text": "   - direction as to what value the sender should provide for the\r\n     criticality field (note: the semantics of the criticality field are\r\n     defined above should not be altered by the control's\r\n     specification),", "correct_text": "   - direction as to what value the sender should provide for the\r\n     criticality field (note: the semantics of the criticality field\r\n     defined above should not be altered by the control's\r\n     specification),", "notes": "Erroneous \"are\".", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 21:24:51"}, {"errata_id": "7218", "doc-id": "RFC4511", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "   choice using the ExtendedResponse type (See Section 4.12).  The", "correct_text": "   choice using the ExtendedResponse type (see Section 4.12).  The", "notes": "The word \"see\" should not be capitalized here.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 21:29:19"}, {"errata_id": "7219", "doc-id": "RFC4511", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "   - the OBJECT IDENTIFIER assigned to the notification (to be specified\r\n     in the responseName,", "correct_text": "   - the OBJECT IDENTIFIER assigned to the notification (to be specified\r\n     in the responseName),", "notes": "Missing parenthesis.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 21:38:41"}, {"errata_id": "7220", "doc-id": "RFC4511", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "   [RFC4512]     Zeilenga, K., Lightweight Directory Access Protocol\r\n                 (LDAP): Directory Information Models\", RFC 4512, June\r\n                 2006.", "correct_text": "   [RFC4512]     Zeilenga, K., \"Lightweight Directory Access Protocol\r\n                 (LDAP): Directory Information Models\", RFC 4512, June\r\n                 2006.", "notes": "Missing quotation mark.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 21:49:07"}, {"errata_id": "7221", "doc-id": "RFC4511", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "         the code may used to indicate an alias has been dereferenced\r\n         that names no object.", "correct_text": "         the code may be used to indicate an alias has been\r\n         dereferenced that names no object.", "notes": "Missing \"be\".", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 21:53:30"}, {"errata_id": "7222", "doc-id": "RFC4511", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "C.1.17", "orig_text": "   - The SubstringFilter substrings 'initial, 'any', and 'final' types\r\n     are now AssertionValue rather than LDAPString.  Also, added", "correct_text": "   - The SubstringFilter substrings 'initial', 'any', and 'final'\r\n     types are now AssertionValue rather than LDAPString.  Also, added", "notes": "Missing quotation mark.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 22:05:04"}, {"errata_id": "7223", "doc-id": "RFC8572", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "    4.  Loop back to Step 1\r\n", "correct_text": "    4.  Loop back to Step 2\r\n", "notes": "There is no need to repeat step 1.\n --VERIFIER NOTES-- \nAs per Kent's (the author) clarification:\r\n\r\nPer the note beneath the diagram and the last paragraph in that section (Section 5.2), alternate config mechanisms MAY be used and they SHOULD unset the \"flag enabling SZTP bootstrapping\", which is what Step 1 tests.", "submit_date": "2022-11-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2022-11-02 11:40:10"}, {"errata_id": "7224", "doc-id": "RFC4512", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.3", "orig_text": "   An alias, or alias name, is \"an name for an object, provided by the", "correct_text": "   An alias, or alias name, is a \"name for an object, provided by the", "notes": "Wrong form of the indefinite article (the cited source has \"an alternative name\").", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 22:23:42"}, {"errata_id": "5909", "doc-id": "RFC8312", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   +--------+-----------+-----------+------------+-----------+---------+\r\n   |   Loss |   Average |   Average |      CUBIC |     CUBIC |   CUBIC |\r\n   | Rate P |     TCP W |   HSTCP W |   (C=0.04) |   (C=0.4) |   (C=4) |\r\n   +--------+-----------+-----------+------------+-----------+---------+\r\n   |  10^-2 |        12 |        12 |         12 |        12 |      12 |\r\n   |  10^-3 |        38 |        38 |         38 |        38 |      38 |\r\n   |  10^-4 |       120 |       263 |        120 |       120 |     120 |\r\n   |  10^-5 |       379 |      1795 |        379 |       379 |     379 |\r\n   |  10^-6 |      1200 |     12279 |       1200 |      1200 |    1874 |\r\n   |  10^-7 |      3795 |     83981 |       3795 |      5926 |   10538 |\r\n   |  10^-8 |     12000 |    574356 |      18740 |     33325 |   59261 |\r\n   +--------+-----------+-----------+------------+-----------+---------+\r\n\r\n                                  Table 2", "correct_text": "   +--------+-----------+-----------+------------+-----------+---------+\r\n   |   Loss |   Average |   Average |      CUBIC |     CUBIC |   CUBIC |\r\n   | Rate P |     TCP W |   HSTCP W |   (C=0.04) |   (C=0.4) |   (C=4) |\r\n   +--------+-----------+-----------+------------+-----------+---------+\r\n   |  10^-2 |        12 |        12 |          1 |         1 |       2 |\r\n   |  10^-3 |        38 |        38 |          3 |         6 |      11 |\r\n   |  10^-4 |       120 |       263 |         19 |        33 |      59 |\r\n   |  10^-5 |       379 |      1795 |        105 |       187 |     333 |\r\n   |  10^-6 |      1200 |     12279 |        593 |      1054 |    1874 |\r\n   |  10^-7 |      3795 |     83981 |       3332 |      5926 |   10538 |\r\n   |  10^-8 |     12000 |    574356 |      18740 |     33325 |   59261 |\r\n   +--------+-----------+-----------+------------+-----------+---------+\r\n\r\n                                  Table 2", "notes": "The average window size for the CUBIC columns were mostly incorrect in table 2. Corrected them using expression 6\n --VERIFIER NOTES-- \nSee Section 4.2. on how Cubic calculates the congestion window in TCP-Friendly Region.", "submit_date": "2019-11-14", "submitter_name": "Elliott Ecton", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-03-04 11:10:26"}, {"errata_id": "5910", "doc-id": "RFC7958", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1.2", "orig_text": "The validFrom and validUntil attributes in the KeyDigest element\r\n   specify the range of times that the KeyDigest element can be used as\r\n   a trust anchor.  Note that the KeyDigest element is optional; if it\r\n   is not given, the trust anchor can be used until a KeyDigest element\r\n   covering the same DNSKEY record, but having a validUntil attribute,\r\n   is trusted by the relying party.  Relying parties SHOULD NOT use a\r\n   KeyDigest outside of the time range given in the validFrom and\r\n   validUntil attributes.", "correct_text": "The validFrom and validUntil attributes in the KeyDigest element\r\n   specify the range of times that the KeyDigest element can be used as\r\n   a trust anchor.  Note that the validUntil element is optional; if it\r\n   is not given, the trust anchor can be used until a KeyDigest element\r\n   covering the same DNSKEY record, but having a validUntil attribute,\r\n   is trusted by the relying party.  Relying parties SHOULD NOT use a\r\n   KeyDigest outside of the time range given in the validFrom and\r\n   validUntil attributes.", "notes": "The text after the ';' is difficult to read. I am not sure what is should say.\n --VERIFIER NOTES-- \nThe text does take a little effort to parse, but is correct as written.\r\nIt says validUntil is optional:\r\nIF validUntil not given\r\n   DO FOREVER\r\n       use trust anchor\r\n       IF ( (NewKeyDigest covers same DNSKEY record) &&\r\n               (NewKeyDigest has a validUntil) &&\r\n                 (NewKeyDigest is trusted by relying party) )\r\n            exit\r\n       ENDIF\r\n   ENDDO", "submit_date": "2019-11-15", "submitter_name": "John Dickinson", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2019-11-22 14:04:47"}, {"errata_id": "5929", "doc-id": "RFC6960", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4.1", "orig_text": "   The nonce cryptographically binds a request and a response to prevent\r\n   replay attacks.  The nonce is included as one of the\r\n   requestExtensions in requests, while in responses it would be\r\n   included as one of the responseExtensions.  In both the request and\r\n   the response, the nonce will be identified by the object identifier\r\n   id-pkix-ocsp-nonce, while the extnValue is the value of the nonce.\r\n\r\n     id-pkix-ocsp           OBJECT IDENTIFIER ::= { id-ad-ocsp }\r\n     id-pkix-ocsp-nonce     OBJECT IDENTIFIER ::= { id-pkix-ocsp 2 }\r\n\r\n     Nonce ::= OCTET STRING", "correct_text": "", "notes": "In section 4.1.1, the standard MUST define a maximum length for Nonce or the Nonce MUST be of a defined fixed length. The current implementations that follow this standard are vulnerable to denial of service attacks since they will try to accept even the large size OCSP requests with very big nonce value and eventually will consume more memory.\n --VERIFIER NOTES-- \n   Rejected per submitter after discussion.\r\n   This is an enhancement request and will be discussed on the lamps@ietf.org mailing list.", "submit_date": "2019-12-06", "submitter_name": "Mohit Sahni", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-12-10 04:06:22"}, {"errata_id": "5930", "doc-id": "RFC8032", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "def verify(public, msg, signature):\r\n    if len(public) != 32:\r\n        raise Exception(\"Bad public key length\")\r\n    if len(signature) != 64:\r\n        Exception(\"Bad signature length\")", "correct_text": "def verify(public, msg, signature):\r\n    if len(public) != 32:\r\n        raise Exception(\"Bad public key length\")\r\n    if len(signature) != 64:\r\n        raise Exception(\"Bad signature length\")", "notes": "Missing raise before Exception", "submit_date": "2019-12-06", "submitter_name": "Daniel Bleichenbacher", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2021-05-24 11:25:10"}, {"errata_id": "5931", "doc-id": "RFC6402", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A.1", "orig_text": "    id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }\r\n    id-kp-cmcRA OBJECT IDENTIFIER ::= { id-kp 28 }\r\n    id-kp-cmcArchive OBJECT IDENTIFIER ::= { id-kp 28 }", "correct_text": "    id-kp-cmcCA OBJECT IDENTIFIER ::= { id-kp 27 }\r\n    id-kp-cmcRA OBJECT IDENTIFIER ::= { id-kp 28 }\r\n    id-kp-cmcArchive OBJECT IDENTIFIER ::= { id-kp 29 }", "notes": "id-kp-cmcRA and id-kp-cmcArchive are supposed to be different values.  This change matches what is already in Appendix A.2.", "submit_date": "2019-12-07", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-12-11 05:50:26"}, {"errata_id": "7225", "doc-id": "RFC4512", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.3/5.1.4/5.1.5", "orig_text": "   Procedures for registering object identifiers used to discovery of\r\n   protocol mechanisms are detailed in BCP 64, RFC 4520 [RFC4520].", "correct_text": "   Procedures for registering object identifiers used for discovery of\r\n   protocol mechanisms are detailed in BCP 64, RFC 4520 [RFC4520].", "notes": "Either \"used for discovery of protocol mechanisms\" or \"used to discover protocol mechanisms\" would be correct.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 22:32:38"}, {"errata_id": "7226", "doc-id": "RFC4512", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1.4", "orig_text": "   The Section 6.1 and the second paragraph of Section 6.2 of RFC 2251\r\n   where incorporated into this document.", "correct_text": "   The Section 6.1 and the second paragraph of Section 6.2 of RFC 2251\r\n   were incorporated into this document.", "notes": "Misspelling.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 22:50:54"}, {"errata_id": "7227", "doc-id": "RFC4512", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2.2", "orig_text": "   Definitions of operational attributes provided in Section 5 of RFC\r\n   2252 where incorporated into this document.", "correct_text": "   Definitions of operational attributes provided in Section 5 of RFC\r\n   2252 were incorporated into this document.", "notes": "Misspelling.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 22:53:33"}, {"errata_id": "5911", "doc-id": "RFC6743", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |     Code      |           Checksum            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Num of Locs  |    RESERVED   |           RESERVED            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |     Type      |     Code      |           Checksum            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Num of Locs  |   Operation   |           RESERVED            |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "In RFC 6743, Section 2.1, page 7, in the packet diagram, the first field marked \"RESERVED\" should be marked \"Operation\", as it is in the introduction for Section 2. \u00a0This was a typographical error. The definition of the \"Operation\" field and the packet format in RFC 6743, Section 2, on pages 5 through 6 are correct and complete.\r\n\r\n(The original errata suggested to change the packet header diagram in Section 2 to change the Operation field to RESERVED. After consulting with the authors, the correct fix is to correct the example in Section 2.1)", "submit_date": "2019-11-16", "submitter_name": "Rick Payne", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2022-12-27 15:09:24"}, {"errata_id": "5912", "doc-id": "RFC882", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Page 14", "orig_text": "3.  In must provide redundant name servers.", "correct_text": "3.  It must provide redundant name servers.", "notes": "", "submit_date": "2019-11-18", "submitter_name": "Sharbel Bousemaan", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-18 03:00:07"}, {"errata_id": "5913", "doc-id": "RFC3058", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "     IDEA-CBC OBJECT IDENTIFIER\r\n       ::= { iso(1) identified-organization(3)\r\n           usdod(6) oid(1) private(4) enterprises(1)\r\n           ascom(188) systec(7) security(1) algorithms(1) 2 }", "correct_text": "     id-IDEA-CBC OBJECT IDENTIFIER\r\n       ::= { iso(1) identified-organization(3)\r\n           usdod(6) oid(1) private(4) enterprises(1)\r\n           ascom(188) systec(7) security(1) algorithms(1) 2 }", "notes": "ASN.1 requires that such an identifier begin with a lower case letter.  The prefix of \"id-\" is a common approach to meeting this requirement for an OBJECT IDENTIFIER.", "submit_date": "2019-11-19", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-11-23 04:01:32"}, {"errata_id": "5915", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "When a response is so long that truncation is required, the truncation\r\nshould start at the end of the response and work forward in the\r\ndatagram.  Thus if there is any data for the authority section, the\r\nanswer section is guaranteed to be unique.\r\n", "correct_text": "When a response is so long that truncation is required, the truncation\r\nshould start at the end of the response and work forward in the\r\ndatagram.  Thus if there is any data for the authority section, the\r\nanswer section is guaranteed to be complete.\r\n", "notes": "It's not clear what it might mean for an answer section to be unique. However, by following the algorithm described of removing RRs from the back to the front, if any RRs remain in the authority (or additional) section, the answer section is guaranteed to be complete.\r\n\r\n[ See thread at: https://mailarchive.ietf.org/arch/msg/dnsop/L_yjf4eyDRlkIOqaWULf1HUK8f0/ ]", "submit_date": "2019-11-21", "submitter_name": "Alexander Dupuy", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-01-26 19:29:00"}, {"errata_id": "5916", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "[SAFE] K. Holtman. \"The Safe Response Header Field\", September 1997.", "correct_text": "[SAFE] K. Holtman. \"The Safe Response Header Field\", RFC 2310, April 1998.", "notes": "It looks like The Safe Response Header Field was accepted in the same month that this RFC was issued.\r\n\r\n===== Verifier notes =====\r\nAh, but not on the same *day*, it must be noted.", "submit_date": "2019-11-22", "submitter_name": "Benj Azose", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-23 02:23:25"}, {"errata_id": "5917", "doc-id": "RFC7049", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "simple(24)                   | 0xf818  ", "correct_text": "", "notes": "This example violates RFC 7049 section 2.3 Floating-Point Numbers and Values with No Content.  \r\n\r\nThe incorrect example in Appendix A clearly uses a value <32 which is not allowed.\r\n\r\nFirst, RFC 7049 section 2.3 has a table that shows:\r\n | 24          | Simple value (value 32..255 in following byte)   |\r\n\r\nNext, RFC 7049 section 2.3 says:\r\nAs with all other major types, the 5-bit value 24 signifies a single-\r\nbyte extension: it is followed by an additional byte to represent the\r\nsimple value.  (To minimize confusion, only the values 32 to 255 are\r\nused.)\r\n\r\nWikipedia is also currently incorrect by having an interpretation based on the incorrect example from RFC 7049 Appendix A instead of the text from RFC 7049 Section 2.3.\r\n\r\nCredits: This problem was first reported at https://github.com/fxamacker/cbor/issues/46", "submit_date": "2019-11-24", "submitter_name": "Faye Amacker", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2019-11-24 09:28:32"}, {"errata_id": "5918", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "Header fields are lines beginning with a field name, followed by a\r\n   colon (\":\"), followed by a field body, and terminated by CRLF.  A\r\n   field name MUST be composed of printable US-ASCII characters (i.e.,\r\n   characters that have values between 33 and 126, inclusive), except\r\n   colon.", "correct_text": "", "notes": "I'm reporting an omission rather than a correction. The description of field names in S2.2 does not describe any length limit, but it implicitly prohibits folding by not permitting WSP chars in the name. 3.6.8 defines an ABNF for field-name, but does not specify a length limit either. \r\n\r\nAs far as I can see this means that field names should be limited to 77 characters \u2013 the field name and a trailing : \u2013 after which the field body can start after FWS on the next line.\r\n\r\nI suspect this will be open to some debate, so I'm not sure what to suggest as a correction beyond that. Nor do I know whether common clients & servers impose their own arbitrary limits on field names.", "submit_date": "2019-11-26", "submitter_name": "Marcus Bointon", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-05-15 08:57:58"}, {"errata_id": "7228", "doc-id": "RFC4512", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2.", "orig_text": "   'extensibleObject' object classes.  These definitions where\r\n   integrated into Section 4.2 and Section 4.3 of this document,", "correct_text": "   'extensibleObject' object classes.  These definitions were\r\n   integrated into Section 4.2 and Section 4.3 of this document,", "notes": "Misspelling.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 22:57:48"}, {"errata_id": "7229", "doc-id": "RFC4514", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "   AttributeValue is represented by an number sign ('#' U+0023)", "correct_text": "   AttributeValue is represented by a number sign ('#' U+0023)", "notes": "Wrong form of the indefinite article.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 23:11:14"}, {"errata_id": "5920", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.8.5.3", "orig_text": "Every Friday the 13th, forever:\r\n\r\n       DTSTART;TZID=America/New_York:19970902T090000\r\n       EXDATE;TZID=America/New_York:19970902T090000\r\n       RRULE:FREQ=MONTHLY;BYDAY=FR;BYMONTHDAY=13\r\n\r\n       ==> (1998 9:00 AM EST) February 13;March 13;November 13\r\n           (1999 9:00 AM EDT) August 13\r\n           (2000 9:00 AM EDT) October 13\r\n           ...", "correct_text": "Every Friday the 13th, forever:\r\n\r\n       DTSTART;TZID=America/New_York:19980213T090000\r\n       RRULE:FREQ=MONTHLY;BYDAY=FR;BYMONTHDAY=13\r\n\r\n       ==> (1998 9:00 AM EST) February 13;March 13;November 13\r\n           (1999 9:00 AM EDT) August 13\r\n           (2000 9:00 AM EDT) October 13\r\n           ...", "notes": "The \"DTSTART\" property is not synchronized with the recurrence rule.\r\n\r\nAlthough it may be removed from the recurrence set by an \"EXDATE\" property, the description at the start of section 3.8.5.3 leaves no doubt that the \"DTSTART\" property should still be synchronized with the recurrence rule.\n --VERIFIER NOTES-- \nRejected since it changes the intent of the example (showing exclusion the first instance).  The example should be something like the following (possibly to be reported in a new errata):\r\n\r\n        DTSTART;TZID=America/New_York:19970613T090000\r\n        EXDATE;TZID=America/New_York:19970613T090000\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/calsify/x82GopunVcEh8y5UGSIsEIC3s6M/", "submit_date": "2019-11-26", "submitter_name": "Lars Henriksen", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:30:54"}, {"errata_id": "5921", "doc-id": "RFC8466", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "identity vpws-evpn {\r\n    base service-type;\r\n    description\r\n      \"VPWS service type using Ethernet VPNs (EVPNs)\r\n       as specified in RFC 7432.\";\r\n  \r\n\r\n  identity pbb-evpn {\r\n   base service-type;\r\n    description\r\n      \"Provider Backbone Bridge (PBB) service type using\r\n       EVPNs as specified in RFC 7432.\";\r\n}", "correct_text": "identity vpws-evpn {\r\n    base service-type;\r\n    description\r\n      \"VPWS service type using Ethernet VPNs (EVPNs)\r\n       as specified in RFC 8214.\";\r\n  \r\n\r\n  identity pbb-evpn {\r\n   base service-type;\r\n    description\r\n      \"Provider Backbone Bridge (PBB) service type using\r\n       EVPNs as specified in RFC 7623.\";\r\n}", "notes": "Neither VPWS-EVPN nor PBB-EVPN are mentioned in RFC 7432. \r\nThe former is defined in RFC 8214, and the latter - in RFC 7623.\r\n\r\nPlease note also that RFC 7623 is  not mentioned as one of the references.\r\n\r\nAD Note: I agree with this errata, but given the change is within a YANG module, it needs a new revision of that YANG module to be published.  Hence, I've moved this errata to \"Held for Document Update\".", "submit_date": "2019-11-27", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 17:29:09"}, {"errata_id": "5922", "doc-id": "RFC8466", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "  identity bgp-vpls {\r\n    base service-type;\r\n    description\r\n      \"BGP-based multipoint VPLS service type.  This VPLS uses a\r\n       BGP control plane as described in RFCs 4761 and 6624.\";\r\n  }\r\n\r\n  identity vpws-evpn {\r\n    base service-type;\r\n    description\r\n      \"VPWS service type using Ethernet VPNs (EVPNs)\r\n       as specified in RFC 7432.\";\r\n  }", "correct_text": "  identity bgp-vpls {\r\n    base service-type;\r\n    description\r\n      \"BGP-based multipoint VPLS service type.  This VPLS uses a\r\n       BGP control plane as described in RFCs 4761 and 6624.\";\r\n  }\r\n identity evpn {\r\n    base service-type;\r\n    description\r\n      \" EVPN service type as specified in RFC 7432\"\r\n}\r\n  identity vpws-evpn {\r\n    base service-type;\r\n    description\r\n      \"VPWS service type using Ethernet VPNs (EVPNs)\r\n       as specified in RFC 7432.\";\r\n  }", "notes": "The service type for an EVPN service as defined in RFC 7432 is missing.\r\n\r\nIt seems likely that a standalone EVPN identity should have been defined, but that cannot be fixed using the errata process.  It requires a new version of the YANG module to be published, hence I've moved this to errata report to \"Held for Document Update\".", "submit_date": "2019-11-27", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 17:36:24"}, {"errata_id": "5932", "doc-id": "RFC7958", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.2", "orig_text": "  Note that the KeyDigest element is optional; if it\r\n  is not given, the trust anchor can be used until a KeyDigest element\r\n  covering the same DNSKEY record, but having a validUntil attribute,\r\n  is trusted by the relying party.\r\n", "correct_text": "  Note that the validUntil attribute of the KeyDigest element is\r\n  optional. If the relying party is using a trust anchor that has a\r\n  KeyDigest element that does not have a validUntil attribute, it can\r\n  change to a trust anchor with a KeyDigest element that does have a\r\n  validUntil attribute, as long as that trust anchor's validUntil\r\n  attribute is in the future and the DNSKEY elements of the KeyDigest\r\n  are the same as the previous trust anchor.", "notes": "It is the validUntil attribute that is optional, not the KeyDigest element. Also, it was noted that the sentence did not clearly explain the logic.", "submit_date": "2019-12-11", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-01-26 21:26:04"}, {"errata_id": "7230", "doc-id": "RFC4513", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3.3", "orig_text": "   support a policy mechanism that at the time of authentication or\r\n   password modification, requires that:", "correct_text": "   support a policy mechanism that, at the time of authentication or\r\n   password modification, requires that:", "notes": "Missing comma.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-15 21:51:40"}, {"errata_id": "5999", "doc-id": "RFC7643", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "\"id\" : \"urn:ietf:params:scim:schemas:core:2.0:User\",\r\n\"name\" : \"User\",\r\n\"description\" : \"User Account\",\r\n\r\n\"id\" : \"urn:ietf:params:scim:schemas:core:2.0:Group\",\r\n\"name\" : \"Group\",\r\n\"description\" : \"Group\",\r\n\r\n\"id\" : \"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\",\r\n\"name\" : \"EnterpriseUser\",\r\n\"description\" : \"Enterprise User\"\r\n", "correct_text": "\"schemas\": [\"urn:ietf:params:scim:schemas:core:2.0:Schema\"],\r\n\"id\" : \"urn:ietf:params:scim:schemas:core:2.0:User\",\r\n\"name\" : \"User\",\r\n\"description\" : \"User Account\",\r\n\r\n\"schemas\": [\"urn:ietf:params:scim:schemas:core:2.0:Schema\"],\r\n\"id\" : \"urn:ietf:params:scim:schemas:core:2.0:Group\",\r\n\"name\" : \"Group\",\r\n\"description\" : \"Group\",\r\n\r\n\"schemas\": [\"urn:ietf:params:scim:schemas:core:2.0:Schema\"],\r\n\"id\" : \"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\",\r\n\"name\" : \"EnterpriseUser\",\r\n\"description\" : \"Enterprise User\"", "notes": "The \"schemas\" attribute is missing from the example JSON representation schema resources. According to Sections 2.1 and Section 3, the \"schemas\" attribute is a REQUIRED and MUST be provided.", "submit_date": "2020-03-02", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7231", "doc-id": "RFC4513", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2", "orig_text": "   requested, time of day, etc..  Some factors may be specific to the", "correct_text": "   requested, time of day, etc.  Some factors may be specific to the", "notes": "No additional period should be used after the abbreviation.", "submit_date": "2022-11-01", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 23:23:06"}, {"errata_id": "7232", "doc-id": "RFC5870", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3.", "orig_text": "Due to it's short length", "correct_text": "Due to its short length", "notes": "https://www.grammarly.com/blog/its-vs-its/", "submit_date": "2022-11-01", "submitter_name": "Christian Paul", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-01 23:29:17"}, {"errata_id": "5923", "doc-id": "RFC2397", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "3. Syntax\r\n\r\n       dataurl    := \"data:\" [ mediatype ] [ \";base64\" ] \",\" data\r\n       mediatype  := [ type \"/\" subtype ] *( \";\" parameter )\r\n       data       := *uric\r\n       parameter  := attribute \"=\" value\r\n\r\n   where \"uric\" is imported from [RFC2396], and \"type\", \"subtype\",\r\n   \"attribute\" and \"value\" are the corresponding tokens from [RFC2045],\r\n   represented using URL escaped encoding of [RFC2396] as necessary.\r\n\r\n   Attribute values in [RFC2045] are allowed to be either represented as\r\n   tokens or as quoted strings. However, within a \"data\" URL, the\r\n   \"quoted-string\" representation would be awkward, since the quote mark\r\n   is itself not a valid urlchar. For this reason, parameter values\r\n   should use the URL Escaped encoding instead of quoted string if the\r\n   parameter values contain any \"tspecial\".", "correct_text": "3. Syntax\r\n\r\n       dataurl    := \"data:\" [ mediatype ] [ \";base64\" ] \",\" data\r\n       mediatype  := [ type \"/\" subtype ] *( \";\" parameter )\r\n       data       := *uric\r\n       parameter  := attribute \"=\" value\r\n       value      := token\r\n\r\n   where \"uric\" is imported from [RFC2396], and \"type\", \"subtype\",\r\n   \"attribute\" and \"token\" are the corresponding syntax from [RFC2045],\r\n   with values represented using %xx escaped encoding of [RFC2396] as\r\n   necessary.\r\n\r\n   Parameter values in [RFC2045] are allowed to be either represented as\r\n   tokens or as quoted strings. However, within a \"data\" URL, the\r\n   \"quoted-string\" representation would be awkward, since the quote mark\r\n   is itself not a valid urlchar. For this reason, parameter values are\r\n   required to be represented as tokens and %xx encoding MUST be used for\r\n   \"tspecials\" characters within them.", "notes": "Section 3 is not clear about excluding the \"quoted-string\" production completely as opposed to permitting it through percent-encoding, resulting in ambiguity for interpretation of URLs such as \"data:text/example;foo=%22bar%22,*baz*\". But Section 5 refers to accepted changes that 'eliminate \"quoted printable\" as an encoding since it would not easily yield valid URLs without additional %xx encoding, which itself is sufficient', so it seems that the intent is to *replace* quoted-string and always interpret percent-encoded characters as content (i.e., that my example corresponds with `Content-Type: text/example; foo=\"\\\"bar\\\"\"` rather than `Content-Type: text/example;foo=\"bar\").", "submit_date": "2019-11-29", "submitter_name": "Richard Gibson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5924", "doc-id": "RFC8199", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Section 6.1", "orig_text": "6.1.  Normative References\r\n\r\n...\r\n\r\n   [RFC8049]  Litkowski, S., Tomotaki, L., and K. Ogaki, \"YANG Data\r\n              Model for L3VPN Service Delivery\", RFC 8049,\r\n              DOI 10.17487/RFC8049, February 2017,\r\n              <http://www.rfc-editor.org/info/rfc8049>.", "correct_text": "6.1.  Informative References\r\n\r\n...\r\n\r\n   [RFC8049]  Litkowski, S., Tomotaki, L., and K. Ogaki, \"YANG Data\r\n              Model for L3VPN Service Delivery\", RFC 8049,\r\n              DOI 10.17487/RFC8049, February 2017,\r\n              <http://www.rfc-editor.org/info/rfc8049>.", "notes": "RFC8049 is cited only as an example (Section 2.1):\r\n\r\n\"An example of a Network Service YANG Module is in [RFC8049]...\"\r\n\r\nNot sure why it was listed as normative.\r\n\r\n[Warren Kumari: Thanks to Benoit and Joel for review. ]", "submit_date": "2019-12-02", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-01-05 16:55:11"}, {"errata_id": "5925", "doc-id": "RFC5598", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1.2", "orig_text": "{addition to the end of the section. there might be a better way to handle this, but this is my best guess. Note that this also means that RFC 5598 should also be modified to have the status of updating RFC 5321.}\r\n\r\n", "correct_text": "Sections 5.1 and 5.3 of this document supersede Section 3.9 of RFC 5321. ", "notes": "RFC 5598 is intended to document existing email architecture and terminology. It's explicit discussion of aliases and mailing lists represent a community consensus view.  \r\n\r\nThe language in RFC 5321 dates back to RFC 821 and its differences from what is stated in RFC 5598 do /not/ represent a modern view of email architecture, nor should a hop-by-hop transport-like protocol make statements about higher-level, end-to-end services, any more than IP should dictate details for TCP (or SMTP).", "submit_date": "2019-12-02", "submitter_name": "David Crocker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5948", "doc-id": "RFC7932", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   Note that a code of 16 that follows an immediately preceding 16\r\n   modifies the previous repeat count, which becomes the new repeat\r\n   count.  The same is true for a 17 following a 17.  A sequence of\r\n   three or more 16 codes in a row or three of more 17 codes in a row is\r\n   possible, modifying the count each time.  Only the final repeat count\r\n   is used.  The modification only applies if the same code follows.  A\r\n   16 repeat does not modify an immediately preceding 17 count nor vice\r\n   versa.\r\n", "correct_text": "   Note that a code of 16 that follows an immediately preceding 16\r\n   modifies the previous repeat count, which becomes the new repeat\r\n   count.  The same is true for a 17 following a 17.  A sequence of\r\n   three or more 16 codes in a row or three or more 17 codes in a row is\r\n   possible, modifying the count each time.  Only the final repeat count\r\n   is used.  The modification only applies if the same code follows.  A\r\n   16 repeat does not modify an immediately preceding 17 count nor vice\r\n   versa.\r\n", "notes": "\"three of more\" should be \"three or more\"", "submit_date": "2019-12-28", "submitter_name": "Bret Abel", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-12-31 02:00:19"}, {"errata_id": "5977", "doc-id": "RFC3810", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "I think PIM WG (which now owns this RFC) repeatedly re-confirmed in discussions that the intended interpretation of RFC3810 is that multicast receivers MUST report MLDv2 membership reports ALSO for link-local IPv6 addresses. Alas, this is still rejected by readers outside of PIM-WG, for example in current IESG review of a new new protocol spec that is stating that MLDv2 must be used to join the link-local IPv6 address of that protocol. \r\n\r\nThe problem seems to stem from the fact that there is no positively reaffirming text in MLDv2 RFC stating that MLDv2 MUST be used for all addresses scope 2..14 (except FF:01). Instead the text seems to only mentions exceptions (scope 0 and 1 and FF:01) unless i overlooked a passage explicitly reaffirming the need to use MLDv2 for scope 2.\r\n\r\nHence, this errata is editorial in nature to what i understand to be the desired meaning according to PIM-WG, but would be a technical change to what seems to be the interpretation by many implementers.\r\n\r\n\r\n-------------- Verifier note --------\r\nAn errata is for minor change in well-defined sections. The proposed change is more global and should be addressed by a -bis or an update I-D.", "submit_date": "2020-02-05", "submitter_name": "Toerless Eckert", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 13:25:12"}, {"errata_id": "5978", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.5.1.1.", "orig_text": "    /*\r\n        * Verify valid root distance.\r\n        */\r\n    if (r->rootdelay / 2 + r->rootdisp >= MAXDISP || p->reftime >\r\n        r->xmt)\r\n            return;                 /* invalid header values */\r\n", "correct_text": "    /*\r\n        * Verify valid root distance.\r\n        */\r\n    if (p->rootdelay / 2 + p->rootdisp >= MAXDISP || p->reftime >\r\n        r->xmt)\r\n            return;                 /* invalid header values */\r\n", "notes": "The r->rootdelay and r->rootdisp are the received values not in double format and therefore, should not be compared against MAXDISP. Use the p->rootdelay and p->rootdisp instead which have already been converted to double via FP2D macro.\r\n\r\n---\r\n\r\n[verifier notes]\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/ntp/Cbg3sOhChyfenYoj7UG5wCymFMU/", "submit_date": "2020-02-08", "submitter_name": "David Verbree", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-09-26 00:13:57"}, {"errata_id": "5926", "doc-id": "RFC7030", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1 to A.4", "orig_text": "   HTTP/1.1 200 OK\r\n   Status: 200 OK\r\n   Content-Type: application/pkcs7-mime\r\n   Content-Transfer-Encoding: base64\r\n   Content-Length: 4246", "correct_text": "   HTTP/1.1 200 OK\r\n   Status: 200 OK\r\n   Content-Type: application/pkcs7-mime\r\n   Transfer-Encoding: base64", "notes": "EST examples in appendix A.1 through A.4 have incorrect \"Content-Length\". That header is mutually exclusive with \"Transfer-Encoding\" according to HTTP 1.1 RFC 2616. If a clients receives both headers, \"Transfer-Encoding\" header takes precedence and the erroneous \"Content-Length\" header must be ignored.\r\n\r\nHTTP 1.1 RFC 2616 Section 4.4 (https://tools.ietf.org/html/rfc2616#section-4.4)\r\n\r\n3.If a Content-Length header field (section 14.13) is present, its\r\n     decimal value in OCTETs represents both the entity-length and the\r\n     transfer-length. The Content-Length header field MUST NOT be sent\r\n     if these two lengths are different (i.e., if a Transfer-Encoding\r\n     header field is present). If a message is received with both a\r\n     Transfer-Encoding header field and a Content-Length header field,\r\n     the latter MUST be ignored.\r\n\r\n\r\nEST RFC 7030 is non-compliant with HTTP 1.1 RFC 2616.\r\n\r\nPlease remove erroneous \"Content-Length\" header from all affected EST response examples in Appendixes A.1 through to A.4. This is incorrect and misleading.\r\n\r\nPlease make this fix at same time the erroneous \"Content-Transfer-Encoding\" header is corrected to be \"Transfer-Encoding\", as reported in a different errata.", "submit_date": "2019-12-03", "submitter_name": "Justin Cranford", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:39:12"}, {"errata_id": "5927", "doc-id": "RFC4357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.6", "orig_text": "           Gost28147-89-ParamSet\r\n           FROM Gost28147-89-EncryptionSyntax\r\n\r\n...\r\n\r\n       GostR3410-94-PublicKeyParameters ::=\r\n           SEQUENCE {\r\n               publicKeyParamSet\r\n                   OBJECT IDENTIFIER (\r\n                       id-GostR3410-94-TestParamSet |\r\n                           -- Only for testing purposes\r\n                       id-GostR3410-94-CryptoPro-A-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-B-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-C-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-D-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-XchA-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-XchB-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-XchC-ParamSet\r\n                   ),\r\n               digestParamSet\r\n                   OBJECT IDENTIFIER (\r\n                       id-GostR3411-94-TestParamSet |\r\n                           -- Only for testing purposes\r\n                       id-GostR3411-94-CryptoProParamSet\r\n                   ),\r\n               encryptionParamSet Gost28147-89-ParamSet OPTIONAL\r\n           }", "correct_text": "           id-Gost28147-89-CryptoPro-A-ParamSet, Gost28147-89-ParamSet\r\n           FROM Gost28147-89-EncryptionSyntax\r\n\r\n...\r\n\r\n       GostR3410-94-PublicKeyParameters ::=\r\n           SEQUENCE {\r\n               publicKeyParamSet\r\n                   OBJECT IDENTIFIER (\r\n                       id-GostR3410-94-TestParamSet |\r\n                           -- Only for testing purposes\r\n                       id-GostR3410-94-CryptoPro-A-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-B-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-C-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-D-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-XchA-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-XchB-ParamSet |\r\n                       id-GostR3410-94-CryptoPro-XchC-ParamSet\r\n                   ),\r\n               digestParamSet\r\n                   OBJECT IDENTIFIER (\r\n                       id-GostR3411-94-TestParamSet |\r\n                           -- Only for testing purposes\r\n                       id-GostR3411-94-CryptoProParamSet\r\n                   ),\r\n               encryptionParamSet Gost28147-89-ParamSet DEFAULT\r\n                    id-Gost28147-89-CryptoPro-A-ParamSet\r\n           }", "notes": "The parameters structures of GostR3410-94-PublicKeyParameters defined in RFC 4357 and RFC 4491 that do not match. In RFC4491, a DEFAULT is provided for the 'encryptionParamSet' object identifier, while in RFC 4357, the 'encryptionParamSet' object identifier is OPTIONAL.\r\n\r\n\r\n---Verifier Notes:---\r\nPaul Wouters (AD): Closed as Verified. There won't be any updates for RFC 4357 as the algorithms are not used anymore.\r\nThe current GOST algorithms are defined in RFC 6986, RFC 7801 and RFC 7836.\r\n", "submit_date": "2019-12-06", "submitter_name": "Stanislav Smyshlyaev", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 18:02:34"}, {"errata_id": "5928", "doc-id": "RFC4357", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.8", "orig_text": "           Gost28147-89-ParamSet\r\n           FROM Gost28147-89-EncryptionSyntax\r\n\r\n...\r\n\r\n       GostR3410-2001-PublicKeyParameters ::=\r\n           SEQUENCE {\r\n               publicKeyParamSet\r\n                   OBJECT IDENTIFIER (\r\n                       id-GostR3410-2001-TestParamSet |\r\n                           -- Only for testing purposes\r\n                       id-GostR3410-2001-CryptoPro-A-ParamSet |\r\n                       id-GostR3410-2001-CryptoPro-B-ParamSet |\r\n                       id-GostR3410-2001-CryptoPro-C-ParamSet |\r\n                       id-GostR3410-2001-CryptoPro-XchA-ParamSet |\r\n                       id-GostR3410-2001-CryptoPro-XchB-ParamSet\r\n                   ),\r\n               digestParamSet\r\n                   OBJECT IDENTIFIER (\r\n                       id-GostR3411-94-TestParamSet |\r\n                           -- Only for testing purposes\r\n                       id-GostR3411-94-CryptoProParamSet\r\n                   ),\r\n               encryptionParamSet Gost28147-89-ParamSet OPTIONAL\r\n           }", "correct_text": "           id-Gost28147-89-CryptoPro-A-ParamSet, Gost28147-89-ParamSet\r\n           FROM Gost28147-89-EncryptionSyntax\r\n\r\n...\r\n\r\n       GostR3410-2001-PublicKeyParameters ::=\r\n           SEQUENCE {\r\n               publicKeyParamSet\r\n                   OBJECT IDENTIFIER (\r\n                       id-GostR3410-2001-TestParamSet |\r\n                           -- Only for testing purposes\r\n                       id-GostR3410-2001-CryptoPro-A-ParamSet |\r\n                       id-GostR3410-2001-CryptoPro-B-ParamSet |\r\n                       id-GostR3410-2001-CryptoPro-C-ParamSet |\r\n                       id-GostR3410-2001-CryptoPro-XchA-ParamSet |\r\n                       id-GostR3410-2001-CryptoPro-XchB-ParamSet\r\n                   ),\r\n               digestParamSet\r\n                   OBJECT IDENTIFIER (\r\n                       id-GostR3411-94-TestParamSet |\r\n                           -- Only for testing purposes\r\n                       id-GostR3411-94-CryptoProParamSet\r\n                   ),\r\n               encryptionParamSet Gost28147-89-ParamSet DEFAULT\r\n                    id-Gost28147-89-CryptoPro-A-ParamSet\r\n           }", "notes": "The parameters structures of GostR3410-2001-PublicKeyParameters defined in RFC 4357 and RFC 4491 do not match. In RFC4491, a DEFAULT is provided for the 'encryptionParamSet' object identifier, while in RFC 4357, the 'encryptionParamSet' object identifier is OPTIONAL.\r\n\r\n---Verifier Notes:---\r\nPaul Wouters (AD): Closed as Verified. There won't be any updates for RFC 4357 as the algorithms are not used anymore.\r\nThe current GOST algorithms are defined in RFC 6986, RFC 7801 and RFC 7836.", "submit_date": "2019-12-06", "submitter_name": "Stanislav Smyshlyaev", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 18:04:12"}, {"errata_id": "6231", "doc-id": "RFC8231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.5", "orig_text": "      20       LSP State Synchronization Error\r\n\r\n                Error-value\r\n                1:   A PCE indicates to a PCC that it cannot process (an\r\n                     otherwise valid) LSP State Report.  The PCEP-ERROR\r\n                     object is followed by the LSP object that\r\n                     identifies the LSP.", "correct_text": "      20       LSP State Synchronization Error\r\n\r\n                Error-value\r\n                1:   A PCE indicates to a PCC that it cannot process (an\r\n                     otherwise valid) LSP State Report.  ", "notes": "This is a companion errata to https://www.rfc-editor.org/errata/eid5970 which identified the issue in Error-type 19 Error-value 1. The same issue exists for Error-type 20 Error-value 1 i.e. LSP Object is not part of the PCErr message.", "submit_date": "2020-07-13", "submitter_name": "Dhruv Dhody", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-09-29 22:02:32"}, {"errata_id": "5971", "doc-id": "RFC7914", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "The CPU/Memory cost parameter N (\"costParameter\") must be larger than 1, a power of 2, and less than 2^(128 * r / 8).", "correct_text": "The CPU/Memory cost parameter N (\"costParameter\") must be larger than 1, and a power of 2.", "notes": "The presented limit on N was incorrectly derived from the original scrypt publication. The correct theoretical upper limit on N is 2^(128 * r) for r < 5, and 2^512 for all other values of r. Thus, the least upper bound is 2^128, which far exceeds all possible values for N in the foreseeable future, making the limit irrelevant for current implementations.", "submit_date": "2020-02-02", "submitter_name": "Tobias Nie\u00dfen", "verifier_id": "", "verifier_name": null, "update_date": "2020-02-25 03:52:25"}, {"errata_id": "5972", "doc-id": "RFC7914", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "Input:\r\n         r       Block size parameter.\r\n         B       Input octet vector of length 128 * r octets.\r\n         N       CPU/Memory cost parameter, must be larger than 1,\r\n                 a power of 2, and less than 2^(128 * r / 8).", "correct_text": "Input:\r\n         r       Block size parameter.\r\n         B       Input octet vector of length 128 * r octets.\r\n         N       CPU/Memory cost parameter, must be larger than 1,\r\n                 and a power of 2.", "notes": "The presented limit on N was incorrectly derived from the original scrypt publication. The correct theoretical upper limit on N is 2^(128 * r) for r < 5, and 2^512 for all other values of r. Thus, the least upper bound is 2^128, which far exceeds all possible values for N in the foreseeable future, making the limit irrelevant for current implementations.", "submit_date": "2020-02-02", "submitter_name": "Tobias Nie\u00dfen", "verifier_id": "", "verifier_name": null, "update_date": "2020-02-25 03:52:46"}, {"errata_id": "5933", "doc-id": "RFC8200", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "   Extension headers (except for the Hop-by-Hop Options header) are not\r\n   processed, inserted, or deleted by any node along a packet's delivery\r\n   path, until the packet reaches the node (or each of the set of nodes,\r\n   in the case of multicast) identified in the Destination Address field\r\n   of the IPv6 header.\r\n\r\n   The Hop-by-Hop Options header is not inserted or deleted, but may be\r\n   examined or processed by any node along a packet's delivery path,\r\n   until the packet reaches the node (or each of the set of nodes, in\r\n   the case of multicast) identified in the Destination Address field of\r\n   the IPv6 header.  The Hop-by-Hop Options header, when present, must\r\n   immediately follow the IPv6 header.  Its presence is indicated by the\r\n   value zero in the Next Header field of the IPv6 header.\r\n", "correct_text": "   Extension headers (except for the Hop-by-Hop Options header, or a \r\n   Destination Options header preceding a Routing header) are not processed,\r\n   inserted, or deleted by any node along a packet's delivery path, until the\r\n   packet reaches the final destination node (or each of the set of final\r\n   destination nodes, in the case of multicast). \r\n\r\n   For packets that do not include a Routing Header, the final destination\r\n   node is identified by the Destination Address field of the IPv6 header. \r\n   For packets that include a Routing Header, the final destination node is \r\n   identified by the Destination Address field of the IPv6 header only when\r\n   the Segments Left field of the Routing Header is 0. \r\n\r\n   The Hop-by-Hop Options header is not inserted or deleted, but may be\r\n   examined or processed by any node along a packet's delivery path,\r\n   until the packet reaches the final destination node (or each of the set of\r\n   final destination nodes, in the case of multicast). The Hop-by-Hop Options \r\n   header, when present, must immediately follow the IPv6 header.  Its \r\n   presence is indicated by the value zero in the Next Header field of the \r\n   IPv6 header.\r\n\r\n   A Destination Options header preceding a Routing Header is not\r\n   processed, inserted, or deleted by any node along a packet's delivery\r\n   path, until the packet reaches the destination node (or each of the set \r\n   of destination nodes, in the case of multicast) identified by the \r\n   Destination Address field of the IPv6 header. This means that  a \r\n   Destination Options header preceding a Routing Header will be\r\n   processed by the first destination of the packet (specified by the\r\n   Destination Address field of the IPv6 header at the origin node) and by \r\n   each node listed in the Routing Header.", "notes": "This errata clarifies two different issues:\r\n\r\n* It clarifies that nodes other than the final destination do not insert o remove extension headers.\r\n\r\n* It clarifies that the Destination Options header preceding a routing header *is* processed along the\r\n   packet delivery's path, but the node(s) identified by the Destination Address of the IPv6 header.\r\n\r\nArea Director's Note (Suresh Krishnan):\r\n\r\nI am handling this based on the IESG Statement about processing of RFC Errata for the IETF Stream (https://ietf.org/about/groups/iesg/statements/processing-rfc-errata/)\r\n\r\n\"Changes that modify the working of a protocol to something that might be different from the intended consensus when the document was approved should be either Hold for Document Update or Rejected. Deciding between these two depends on judgment. Changes that are clearly modifications to the intended consensus, or involve large textual changes, should be Rejected.\"\r\n\r\nSome people might interpret the text in RFC8200 to mean the replacement text provided above in the erratum but others might read the text exactly as written (\"until the packet reaches the node identified in the Destination Address field of the IPv6 header\u201d). Given that the text in RFC8200 had consensus and it is impossible to tell after the fact if the proposed replacement text would have achieved consensus, I believe this erratum falls under the above category. \r\n\r\nThe change proposed by this erratum has to be evaluated for correctness and consensus if and when there is an update of RFC8200.", "submit_date": "2019-12-11", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-03-02 03:29:39"}, {"errata_id": "5934", "doc-id": "RFC8659", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "It also allows hyphens in Property Tags.", "correct_text": "It also allows hyphens in tags of Property Value of\r\nissue and issuewild Property Tags.", "notes": "Subsection 4.1 explicitly prohibits hyphens in Property Tags.\r\nWhile obsoleted RFC 6844 did not allow hyphens in tags of Property Value of issue and issuewild Property Tags, new ABNF definition in subsection 4.2 allows them.", "submit_date": "2019-12-12", "submitter_name": "IIDA Yosiaki", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:41:20"}, {"errata_id": "5935", "doc-id": "RFC5636", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   -- Imports from RFC 3280 [PROFILE], Appendix A.1\r\n              AlgorithmIdentifier, Certificate, CertificateList,\r\n              CertificateSerialNumber, Name FROM PKIX1Explicit88\r\n                   { iso(1) identified-organization(3) dod(6)\r\n                     internet(1) security(5) mechanisms(5) pkix(7)\r\n                      mod(0) pkix1-explicit(18) }\r\n\r\n   -- Imports from CMS\r\n            ContentInfo, SignedData FROM\r\n            CryptographicMessageSyntax2004{ iso(1)\r\n            member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n            smime(16) modules(0) cms-2004(24)}", "correct_text": "   -- Imports from CMS\r\n            ContentInfo, ContentType FROM\r\n            CryptographicMessageSyntax2004{ iso(1)\r\n            member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n            smime(16) modules(0) cms-2004(24)} ;", "notes": "None of the imports from RFC 3280 are used.  The import list from RFC 3852 should not include SignedData, and it should include ContentType.  A semi-colon is needed at the end of the IMPORTS statement.", "submit_date": "2019-12-12", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:14:25"}, {"errata_id": "5936", "doc-id": "RFC5636", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "DEFINITIONS IMPLICIT TAGS ::=\r\n", "correct_text": "RFC5636Module\r\nDEFINITIONS IMPLICIT TAGS ::=\r\n", "notes": "A module name is needed for the module to properly compile.", "submit_date": "2019-12-12", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:14:51"}, {"errata_id": "5975", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.1", "orig_text": "3.4.1. A RDATA format\r\n\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    ADDRESS                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n\r\nwhere:\r\n\r\nADDRESS         A 32 bit Internet address.", "correct_text": "3.4.1. A RDATA format\r\n\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    ADDRESS                    |\r\n    |                                               |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n\r\nwhere:\r\n\r\nADDRESS         A 32 bit Internet address.", "notes": "There is an error in the ADDRESS field of A RDATA format. ADDRESS field should occupy two lines because it is 32 bit.", "submit_date": "2020-02-03", "submitter_name": "Xu Mingjie", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-02-05 00:41:21"}, {"errata_id": "5976", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "   This document updates an entry in the TLS Certificate Types registry\r\n   originally created in [RFC6091] and updated in [RFC8447].  IANA has\r\n   updated the entry for value 1 to have the name \"OpenPGP_RESERVED\",\r\n   \"Recommended\" value \"N\", and comment \"Used in TLS versions prior\r\n   to 1.3.\"\r\n", "correct_text": "   This document updates two entries in the TLS Certificate Types registry\r\n   originally created in [RFC6091] and updated in [RFC8447].  IANA has\r\n   updated the entry for value 1 to have the name \"OpenPGP_RESERVED\",\r\n   \"Recommended\" value \"N\", and comment \"Used in TLS versions prior\r\n   to 1.3.\"  IANA has updated the entry for value 0 to have the name\r\n   \"X509\", \"Recommended\" value \"Y\", and comment \"Was X.509 before TLS 1.3\".", "notes": "The protocol description language changed the spelling used for \"X509\", and the registry should be updated to match.", "submit_date": "2020-02-04", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-03-07 03:01:36"}, {"errata_id": "6204", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "E.1", "orig_text": "Implementations MUST NOT combine external PSKs with certificate-based authentication of either the client or the server unless negotiated by some extension.", "correct_text": "Implementations MUST NOT combine external PSKs with certificate-based authentication of either client or the server. Future specifications MAY provide an extension to permit this. ", "notes": "The existing text can be misread as permitting this combination upon negotiation of the \"post_handshake_auth\" extension, which would be incorrect. [1] describes an attack that can occur based on this misinterpretation. The proposed text aims to make clear that a *new* extension is required for this combination. \r\n\r\nPaul Wouters(AD): See https://mailarchive.ietf.org/arch/msg/tls/uDjERicvcTimiecyhiSrYA0H1Sc/\r\n[1] https://link.springer.com/article/10.1007%2Fs11416-020-00352-0", "submit_date": "2020-06-03", "submitter_name": "Chris Wood", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-29 01:13:30"}, {"errata_id": "5937", "doc-id": "RFC7118", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2", "orig_text": "INVITE sip:bob@example.com SIP/2.0\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nFrom: sip:alice@example.com;tag=asdyka899\r\nTo: sip:bob@example.com\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\nMax-Forwards: 70\r\nSupported: path, outbound, gruu\r\nRoute: <sip:proxy.example.com:443;transport=ws;lr>\r\nContact: <sip:alice@example.com;gr=urn:uuid:f81-7dec-14a06cf1;ob>\r\nContent-Type: application/sdp\r\n\r\n\r\nF2 100 Trying  proxy.example.com -> Alice (transport WSS)\r\n\r\nSIP/2.0 100 Trying\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nFrom: sip:alice@example.com;tag=asdyka899\r\nTo: sip:bob@example.com\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\n\r\n\r\nF3 INVITE  proxy.example.com -> Bob (transport UDP)\r\n\r\nINVITE sip:bob@203.0.113.22:5060 SIP/2.0\r\nVia: SIP/2.0/UDP proxy.example.com;branch=z9hG4bKhjhjqw32c\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nRecord-Route: <sip:proxy.example.com;transport=udp;lr>,\r\n <sip:h7kjh12s@proxy.example.com:443;transport=wss;lr>\r\nFrom: sip:alice@example.com;tag=asdyka899\r\nTo: sip:bob@example.com\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\nMax-Forwards: 69\r\nSupported: path, outbound, gruu\r\nContact: <sip:alice@example.com;gr=urn:uuid:f81-7dec-14a06cf1;ob>\r\nContent-Type: application/sdp\r\n\r\nF4 200 OK  Bob -> proxy.example.com (transport UDP)\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/UDP proxy.example.com;branch=z9hG4bKhjhjqw32c\r\n ;received=192.0.2.10\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nRecord-Route: <sip:proxy.example.com;transport=udp;lr>,\r\n <sip:h7kjh12s@proxy.example.com:443;transport=ws;lr>\r\nFrom: sip:alice@example.com;tag=asdyka899\r\nTo: sip:bob@example.com;tag=bmqkjhsd\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\nContact: <sip:bob@203.0.113.22:5060;transport=udp>\r\nContent-Type: application/sdp\r\n\r\n\r\nF5 200 OK  proxy.example.com -> Alice (transport WSS)\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nRecord-Route: <sip:proxy.example.com;transport=udp;lr>,\r\n <sip:h7kjh12s@proxy.example.com:443;transport=ws;lr>\r\nFrom: sip:alice@example.com;tag=asdyka899\r\nTo: sip:bob@example.com;tag=bmqkjhsd\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\nContact: <sip:bob@203.0.113.22:5060;transport=udp>\r\nContent-Type: application/sdp\r\n\r\n\r\nF6 ACK  Alice -> proxy.example.com (transport WSS)\r\n\r\nACK sip:bob@203.0.113.22:5060;transport=udp SIP/2.0\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bKhgqqp090\r\nRoute: <sip:h7kjh12s@proxy.example.com:443;transport=ws;lr>,\r\n <sip:proxy.example.com;transport=udp;lr>,\r\nFrom: sip:alice@example.com;tag=asdyka899\r\nTo: sip:bob@example.com;tag=bmqkjhsd\r\nCall-ID: asidkj3ss\r\nCSeq: 1 ACK\r\nMax-Forwards: 70\r\n\r\nF7 ACK  proxy.example.com -> Bob (transport UDP)\r\n\r\nACK sip:bob@203.0.113.22:5060;transport=udp SIP/2.0\r\nVia: SIP/2.0/UDP proxy.example.com;branch=z9hG4bKhwpoc80zzx\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bKhgqqp090\r\nFrom: sip:alice@example.com;tag=asdyka899\r\nTo: sip:bob@example.com;tag=bmqkjhsd\r\nCall-ID: asidkj3ss\r\nCSeq: 1 ACK\r\nMax-Forwards: 69\r\n\r\n\r\nF8 BYE  Bob -> proxy.example.com (transport UDP)\r\n\r\nBYE sip:alice@example.com;gr=urn:uuid:f81-7dec-14a06cf1;ob SIP/2.0\r\nVia: SIP/2.0/UDP 203.0.113.22;branch=z9hG4bKbiuiansd001\r\nRoute: <sip:proxy.example.com;transport=udp;lr>,\r\n <sip:h7kjh12s@proxy.example.com:443;transport=ws;lr>\r\nFrom: sip:bob@example.com;tag=bmqkjhsd\r\nTo: sip:alice@example.com;tag=asdyka899\r\nCall-ID: asidkj3ss\r\nCSeq: 1201 BYE\r\nMax-Forwards: 70\r\n\r\n\r\nF9 BYE  proxy.example.com -> Alice (transport WSS)\r\n\r\nBYE sip:alice@example.com;gr=urn:uuid:f81-7dec-14a06cf1;ob SIP/2.0\r\nVia: SIP/2.0/WSS proxy.example.com:443;branch=z9hG4bKmma01m3r5\r\nVia: SIP/2.0/UDP 203.0.113.22;branch=z9hG4bKbiuiansd001\r\nFrom: sip:bob@example.com;tag=bmqkjhsd\r\nTo: sip:alice@example.com;tag=asdyka899\r\nCall-ID: asidkj3ss\r\nCSeq: 1201 BYE\r\nMax-Forwards: 69\r\n\r\n\r\nF10 200 OK  Alice -> proxy.example.com (transport WSS)\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/WSS proxy.example.com:443;branch=z9hG4bKmma01m3r5\r\nVia: SIP/2.0/UDP 203.0.113.22;branch=z9hG4bKbiuiansd001\r\nFrom: sip:bob@example.com;tag=bmqkjhsd\r\nTo: sip:alice@example.com;tag=asdyka899\r\nCall-ID: asidkj3ss\r\nCSeq: 1201 BYE\r\n\r\n\r\nF11 200 OK  proxy.example.com -> Bob (transport UDP)\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/UDP 203.0.113.22;branch=z9hG4bKbiuiansd001\r\nFrom: sip:bob@example.com;tag=bmqkjhsd\r\nTo: sip:alice@example.com;tag=asdyka899\r\nCall-ID: asidkj3ss\r\nCSeq: 1201 BYE", "correct_text": "F1 INVITE  Alice -> proxy.example.com (transport WSS)\r\n\r\nINVITE sips:bob@example.com SIP/2.0\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nFrom: sips:alice@example.com;tag=asdyka899\r\nTo: sips:bob@example.com\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\nMax-Forwards: 70\r\nSupported: path, outbound, gruu\r\nRoute: <sips:proxy.example.com:443;transport=wss;lr>\r\nContact: <sips:alice@example.com;gr=urn:uuid:f81-7dec-14a06cf1;ob>\r\nContent-Type: application/sdp\r\n\r\n\r\nF2 100 Trying  proxy.example.com -> Alice (transport WSS)\r\n\r\nSIP/2.0 100 Trying\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nFrom: sips:alice@example.com;tag=asdyka899\r\nTo: sips:bob@example.com\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\n\r\n\r\nF3 INVITE  proxy.example.com -> Bob (transport TLS)\r\n\r\nINVITE sips:bob@203.0.113.22 SIP/2.0\r\nVia: SIP/2.0/TLS proxy.example.com;branch=z9hG4bKhjhjqw32c\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nRecord-Route: <sips:proxy.example.com;lr>,\r\n <sips:h7kjh12s@proxy.example.com:443;transport=ws;lr>\r\nFrom: sip:alice@example.com;tag=asdyka899\r\nTo: sips:bob@example.com\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\nMax-Forwards: 69\r\nSupported: path, outbound, gruu\r\nContact: <sips:alice@example.com\r\n ;gr=urn:uuid:f81-7dec-14a06cf1;ob>\r\nContent-Type: application/sdp\r\n\r\nF4 200 OK  Bob -> proxy.example.com (transport TLS)\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/TLS proxy.example.com;branch=z9hG4bKhjhjqw32c\r\n ;received=192.0.2.10\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nRecord-Route: <sips:proxy.example.com;lr>,\r\n <sips:h7kjh12s@proxy.example.com:443;transport=ws;lr>\r\nFrom: sips:alice@example.com;tag=asdyka899\r\nTo: sips:bob@example.com;tag=bmqkjhsd\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\nContact: <sips:bob@203.0.113.22>\r\nContent-Type: application/sdp\r\n\r\n\r\nF5 200 OK  proxy.example.com -> Alice (transport WSS)\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bK56sdasks\r\nRecord-Route: <sips:proxy.example.com;lr>,\r\n <sips:h7kjh12s@proxy.example.com:443;transport=ws;lr>\r\nFrom: sips:alice@example.com;tag=asdyka899\r\nTo: sips:bob@example.com;tag=bmqkjhsd\r\nCall-ID: asidkj3ss\r\nCSeq: 1 INVITE\r\nContact: <sips:bob@203.0.113.22>\r\nContent-Type: application/sdp\r\n\r\n\r\nF6 ACK  Alice -> proxy.example.com (transport WSS)\r\n\r\nACK sips:bob@203.0.113.22 SIP/2.0\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bKhgqqp090\r\nRoute: <sips:h7kjh12s@proxy.example.com:443;transport=ws;lr>,\r\n <sips:proxy.example.com;lr>,\r\nFrom: sips:alice@example.com;tag=asdyka899\r\nTo: sips:bob@example.com;tag=bmqkjhsd\r\nCall-ID: asidkj3ss\r\nCSeq: 1 ACK\r\nMax-Forwards: 70\r\n\r\nF7 ACK  proxy.example.com -> Bob (transport TLS)\r\n\r\nACK sips:bob@203.0.113.22 SIP/2.0\r\nVia: SIP/2.0/TLS proxy.example.com;branch=z9hG4bKhwpoc80zzx\r\nVia: SIP/2.0/WSS df7jal23ls0d.invalid;branch=z9hG4bKhgqqp090\r\nFrom: sips:alice@example.com;tag=asdyka899\r\nTo: sips:bob@example.com;tag=bmqkjhsd\r\nCall-ID: asidkj3ss\r\nCSeq: 1 ACK\r\nMax-Forwards: 69\r\n\r\n\r\nF8 BYE  Bob -> proxy.example.com (transport TLS)\r\n\r\nBYE sips:alice@example.com;gr=urn:uuid:f81-7dec-14a06cf1;ob SIP/2.0\r\nVia: SIP/2.0/TLS 203.0.113.22;branch=z9hG4bKbiuiansd001\r\nRoute: <sips:proxy.example.com;lr>,\r\n <sips:h7kjh12s@proxy.example.com:443;transport=ws;lr>\r\nFrom: sips:bob@example.com;tag=bmqkjhsd\r\nTo: sips:alice@example.com;tag=asdyka899\r\nCall-ID: asidkj3ss\r\nCSeq: 1201 BYE\r\nMax-Forwards: 70\r\n\r\n\r\nF9 BYE  proxy.example.com -> Alice (transport WSS)\r\n\r\nBYE sips:alice@example.com;gr=urn:uuid:f81-7dec-14a06cf1;ob SIP/2.0\r\nVia: SIP/2.0/WSS proxy.example.com:443;branch=z9hG4bKmma01m3r5\r\nVia: SIP/2.0/TLS 203.0.113.22;branch=z9hG4bKbiuiansd001\r\nFrom: sips:bob@example.com;tag=bmqkjhsd\r\nTo: sips:alice@example.com;tag=asdyka899\r\nCall-ID: asidkj3ss\r\nCSeq: 1201 BYE\r\nMax-Forwards: 69\r\n\r\n\r\nF10 200 OK  Alice -> proxy.example.com (transport WSS)\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/WSS proxy.example.com:443;branch=z9hG4bKmma01m3r5\r\nVia: SIP/2.0/TLS 203.0.113.22;branch=z9hG4bKbiuiansd001\r\nFrom: sips:bob@example.com;tag=bmqkjhsd\r\nTo: sips:alice@example.com;tag=asdyka899\r\nCall-ID: asidkj3ss\r\nCSeq: 1201 BYE\r\n\r\n\r\nF11 200 OK  proxy.example.com -> Bob (transport TLS)\r\n\r\nSIP/2.0 200 OK\r\nVia: SIP/2.0/TLS 203.0.113.22;branch=z9hG4bKbiuiansd001\r\nFrom: sips:bob@example.com;tag=bmqkjhsd\r\nTo: sips:alice@example.com;tag=asdyka899\r\nCall-ID: asidkj3ss\r\nCSeq: 1201 BYE", "notes": "This example states that WSS protocol is used, but Route header specifies SIP URI with transport=ws. which would mean WS (insecure Web Socket). Furthermore, if SIPS URI is used in Route header, then all other URI must be SIPS as well and message cannot be forwarded over UDP, SIPS over TLS must be used instead. I have modified the entire example to use SIPS and TLS, instead of SIP and UDP.", "submit_date": "2019-12-14", "submitter_name": "Roman Shpount", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5938", "doc-id": "RFC5280", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "The primary goal of path validation is to verify the binding between\r\na subject distinguished name or a subject alternative name and\r\nsubject public key, as represented in the target certificate, based\r\non the public key of the trust anchor. In most cases, the target", "correct_text": "  The primary goal of path validation is to verify the binding between\r\n| a subject distinguished name and/or a subject alternative name and\r\n  subject public key, as represented in the target certificate, based\r\n  on the public key of the trust anchor. In most cases, the target", "notes": "The correction conforms to the first paragraph, Sec. 6, \"Certification \r\npath processing verifies the binding between the subject distinguished\r\nname and/or subject alternative name and subject public key.\" \r\n\r\nIn addition, it is not very clear in RFC 5280, given a certificate with\r\na non-empty subject DN and an SAN extension instance (critical or \r\nnon-critical), which one (the subject DN, the SAN extension,  or they \r\nboth) should be bound to the subject public key during path validation.\r\nMore explanations are needed.", "submit_date": "2019-12-15", "submitter_name": "Yuting Chen", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-29 15:21:21"}, {"errata_id": "5939", "doc-id": "RFC8300", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2.1", "orig_text": "Given that NSH is transport independent, as mentioned above, \r\na secure transport, such as IPsec can be used for carry NSH.", "correct_text": "Given that NSH is transport independent, as mentioned above, \r\na secure transport, such as IPsec, can be used for carrying NSH.", "notes": "Grammar issue: \"carry\" should be \"carrying\".", "submit_date": "2019-12-18", "submitter_name": "Alissa Cooper", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2020-02-05 23:09:35"}, {"errata_id": "5941", "doc-id": "RFC7606", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.16", "orig_text": "         An UPDATE message with a malformed ATTR_SET attribute SHALL be\r\n         handled using the approach of \"treat as withdraw\".\r\n", "correct_text": "         An UPDATE message with a malformed ATTR_SET attribute SHALL be\r\n         handled using the approach of \"treat-as-withdraw\".\r\n", "notes": "All 20 other instances of \"treat-as-withdraw\" in the document use the hyphenated form.", "submit_date": "2019-12-18", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2019-12-18 18:10:56"}, {"errata_id": "5943", "doc-id": "RFC5275", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.1", "orig_text": "   GLOwnerInfo ::= SEQUENCE {\r\n     glOwnerName     GeneralName,\r\n     glOwnerAddress  GeneralName,\r\n     certificate     Certificates OPTIONAL }", "correct_text": "   GLOwnerInfo ::= SEQUENCE {\r\n     glOwnerName     GeneralName,\r\n     glOwnerAddress  GeneralName,\r\n     certificates    Certificates OPTIONAL }", "notes": "The definition of GLOwnerInfo in Section 3.1.1 does not match the ASN.1 module or the discussion that follows.  Changing \"certificate\" to \"certificates\" resolves this problem.", "submit_date": "2019-12-21", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2019-12-24 20:20:56"}, {"errata_id": "5989", "doc-id": "RFC8439", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.1", "orig_text": "encrypted_message +=  block ^ key_stream\r\n...\r\nencrypted_message += (block^key_stream)[0..len(plaintext)%64]", "correct_text": "encrypted_message |= block ^ key_stream\r\n...\r\nencrypted_message |= (block^key_stream)[0..len(plaintext)%64]", "notes": "The encrypted_message is the result of concatenation of blocks.\r\n\"|\" and \"|=\" are used for concatenation elsewhere in the document, changing \"+=\" to \"|=\" will reduce ambiguity. ", "submit_date": "2020-02-26", "submitter_name": "L\u00ea Minh \u0110\u0103ng", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2021-04-28 13:48:23"}, {"errata_id": "5945", "doc-id": "RFC8200", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5", "orig_text": "4.5.  Fragment Header\r\n\r\n   The Fragment header is used by an IPv6 source to send a packet larger\r\n   than would fit in the path MTU to its destination.  (Note: unlike\r\n   IPv4, fragmentation in IPv6 is performed only by source nodes, not by\r\n   routers along a packet's delivery path -- see [RFC8200].)  The\r\n   Fragment header is identified by a Next Header value of 44 in the\r\n   immediately preceding header and has the following format:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Next Header  |   Reserved    |      Fragment Offset    |Res|M|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Identification                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n      Next Header         8-bit selector.  Identifies the initial header\r\n                          type of the Fragmentable Part of the original\r\n                          packet (defined below).  Uses the same values\r\n                          as the IPv4 Protocol field [IANA-PN].\r\n\r\n      Reserved            8-bit reserved field.  Initialized to zero for\r\n                          transmission; ignored on reception.\r\n\r\n      Fragment Offset     13-bit unsigned integer.  The offset, in\r\n                          8-octet units, of the data following this\r\n                          header, relative to the start of the\r\n                          Fragmentable Part of the original packet.\r\n\r\n      Res                 2-bit reserved field.  Initialized to zero for\r\n                          transmission; ignored on reception.\r\n\r\n      M flag              1 = more fragments; 0 = last fragment.\r\n\r\n      Identification      32 bits.  See description below.\r\n\r\n   In order to send a packet that is too large to fit in the MTU of the\r\n   path to its destination, a source node may divide the packet into\r\n   fragments and send each fragment as a separate packet, to be\r\n   reassembled at the receiver.\r\n\r\n   For every packet that is to be fragmented, the source node generates\r\n   an Identification value.  The Identification must be different than\r\n   that of any other fragmented packet sent recently* with the same\r\n   Source Address and Destination Address.  If a Routing header is\r\n   present, the Destination Address of concern is that of the final\r\n   destination.\r\n\r\n\r\n      *  \"recently\" means within the maximum likely lifetime of a\r\n         packet, including transit time from source to destination and\r\n         time spent awaiting reassembly with other fragments of the same\r\n         packet.  However, it is not required that a source node knows\r\n         the maximum packet lifetime.  Rather, it is assumed that the\r\n         requirement can be met by implementing an algorithm that\r\n         results in a low identification reuse frequency.  Examples of\r\n         algorithms that can meet this requirement are described in\r\n         [RFC7739].\r\n\r\n   The initial, large, unfragmented packet is referred to as the\r\n   \"original packet\", and it is considered to consist of three parts, as\r\n   illustrated:\r\n\r\n   original packet:\r\n\r\n   +------------------+-------------------------+---//----------------+\r\n   |  Per-Fragment    | Extension & Upper-Layer |   Fragmentable      |\r\n   |    Headers       |       Headers           |      Part           |\r\n   +------------------+-------------------------+---//----------------+\r\n\r\n      The Per-Fragment headers must consist of the IPv6 header plus any\r\n      extension headers that must be processed by nodes en route to the\r\n      destination, that is, all headers up to and including the Routing\r\n      header if present, else the Hop-by-Hop Options header if present,\r\n      else no extension headers.\r\n\r\n      The Extension headers are all other extension headers that are not\r\n      included in the Per-Fragment headers part of the packet.  For this\r\n      purpose, the Encapsulating Security Payload (ESP) is not\r\n      considered an extension header.  The Upper-Layer header is the\r\n      first upper-layer header that is not an IPv6 extension header.\r\n      Examples of upper-layer headers include TCP, UDP, IPv4, IPv6,\r\n      ICMPv6, and as noted ESP.\r\n\r\n      The Fragmentable Part consists of the rest of the packet after the\r\n      upper-layer header or after any header (i.e., initial IPv6 header\r\n      or extension header) that contains a Next Header value of No Next\r\n      Header.\r\n\r\n   The Fragmentable Part of the original packet is divided into\r\n   fragments.  The lengths of the fragments must be chosen such that the\r\n   resulting fragment packets fit within the MTU of the path to the\r\n   packet's destination(s).  Each complete fragment, except possibly the\r\n   last (\"rightmost\") one, is an integer multiple of 8 octets long.\r\n\r\n   The fragments are transmitted in separate \"fragment packets\" as\r\n   illustrated:\r\n\r\n   original packet:\r\n\r\n   +-----------------+-----------------+--------+--------+-//-+--------+\r\n   |  Per-Fragment   |Ext & Upper-Layer|  first | second |    |  last  |\r\n   |    Headers      |    Headers      |fragment|fragment|....|fragment|\r\n   +-----------------+-----------------+--------+--------+-//-+--------+\r\n\r\n   fragment packets:\r\n\r\n   +------------------+---------+-------------------+----------+\r\n   |  Per-Fragment    |Fragment | Ext & Upper-Layer |  first   |\r\n   |    Headers       | Header  |   Headers         | fragment |\r\n   +------------------+---------+-------------------+----------+\r\n\r\n   +------------------+--------+-------------------------------+\r\n   |  Per-Fragment    |Fragment|    second                     |\r\n   |    Headers       | Header |   fragment                    |\r\n   +------------------+--------+-------------------------------+\r\n                         o\r\n                         o\r\n                         o\r\n   +------------------+--------+----------+\r\n   |  Per-Fragment    |Fragment|   last   |\r\n   |    Headers       | Header | fragment |\r\n   +------------------+--------+----------+\r\n\r\n   The first fragment packet is composed of:\r\n\r\n      (1)  The Per-Fragment headers of the original packet, with the\r\n           Payload Length of the original IPv6 header changed to contain\r\n           the length of this fragment packet only (excluding the length\r\n           of the IPv6 header itself), and the Next Header field of the\r\n           last header of the Per-Fragment headers changed to 44.\r\n\r\n      (2)  A Fragment header containing:\r\n\r\n              The Next Header value that identifies the first header\r\n              after the Per-Fragment headers of the original packet.\r\n\r\n              A Fragment Offset containing the offset of the fragment,\r\n              in 8-octet units, relative to the start of the\r\n              Fragmentable Part of the original packet.  The Fragment\r\n              Offset of the first (\"leftmost\") fragment is 0.\r\n\r\n              An M flag value of 1 as this is the first fragment.\r\n\r\n              The Identification value generated for the original\r\n              packet.\r\n\r\n      (3)  Extension headers, if any, and the Upper-Layer header.  These\r\n           headers must be in the first fragment.  Note: This restricts\r\n           the size of the headers through the Upper-Layer header to the\r\n           MTU of the path to the packet's destinations(s).\r\n\r\n      (4)  The first fragment.\r\n\r\n   The subsequent fragment packets are composed of:\r\n\r\n      (1)  The Per-Fragment headers of the original packet, with the\r\n           Payload Length of the original IPv6 header changed to contain\r\n           the length of this fragment packet only (excluding the length\r\n           of the IPv6 header itself), and the Next Header field of the\r\n           last header of the Per-Fragment headers changed to 44.\r\n\r\n      (2)  A Fragment header containing:\r\n\r\n              The Next Header value that identifies the first header\r\n              after the Per-Fragment headers of the original packet.\r\n\r\n              A Fragment Offset containing the offset of the fragment,\r\n              in 8-octet units, relative to the start of the\r\n              Fragmentable Part of the original packet.\r\n\r\n              An M flag value of 0 if the fragment is the last\r\n              (\"rightmost\") one, else an M flag value of 1.\r\n\r\n              The Identification value generated for the original\r\n              packet.\r\n\r\n      (3)  The fragment itself.\r\n\r\n   Fragments must not be created that overlap with any other fragments\r\n   created from the original packet.\r\n\r\n   At the destination, fragment packets are reassembled into their\r\n   original, unfragmented form, as illustrated:\r\n\r\n   reassembled original packet:\r\n\r\n   +---------------+-----------------+---------+--------+-//--+--------+\r\n   | Per-Fragment  |Ext & Upper-Layer|  first  | second |     | last   |\r\n   |    Headers    |     Headers     |frag data|fragment|.....|fragment|\r\n   +---------------+-----------------+---------+--------+-//--+--------+\r\n\r\n   The following rules govern reassembly:\r\n\r\n      An original packet is reassembled only from fragment packets that\r\n      have the same Source Address, Destination Address, and Fragment\r\n      Identification.\r\n\r\n      The Per-Fragment headers of the reassembled packet consists of all\r\n      headers up to, but not including, the Fragment header of the first\r\n      fragment packet (that is, the packet whose Fragment Offset is\r\n      zero), with the following two changes:\r\n\r\n         The Next Header field of the last header of the Per-Fragment\r\n         headers is obtained from the Next Header field of the first\r\n         fragment's Fragment header.\r\n\r\n         The Payload Length of the reassembled packet is computed from\r\n         the length of the Per-Fragment headers and the length and\r\n         offset of the last fragment.  For example, a formula for\r\n         computing the Payload Length of the reassembled original packet\r\n         is:\r\n\r\n            PL.orig = PL.first - FL.first - 8 + (8 * FO.last) + FL.last\r\n\r\n\r\n            where\r\n            PL.orig  =  Payload Length field of reassembled packet.\r\n            PL.first =  Payload Length field of first fragment packet.\r\n            FL.first =  length of fragment following Fragment header of\r\n                        first fragment packet.\r\n            FO.last  =  Fragment Offset field of Fragment header of last\r\n                        fragment packet.\r\n            FL.last  =  length of fragment following Fragment header of\r\n                        last fragment packet.\r\n\r\n         The Fragmentable Part of the reassembled packet is constructed\r\n         from the fragments following the Fragment headers in each of\r\n         the fragment packets.  The length of each fragment is computed\r\n         by subtracting from the packet's Payload Length the length of\r\n         the headers between the IPv6 header and fragment itself; its\r\n         relative position in Fragmentable Part is computed from its\r\n         Fragment Offset value.\r\n\r\n         The Fragment header is not present in the final, reassembled\r\n         packet.\r\n\r\n         If the fragment is a whole datagram (that is, both the Fragment\r\n         Offset field and the M flag are zero), then it does not need\r\n         any further reassembly and should be processed as a fully\r\n         reassembled packet (i.e., updating Next Header, adjust Payload\r\n         Length, removing the Fragment header, etc.).  Any other\r\n         fragments that match this packet (i.e., the same IPv6 Source\r\n         Address, IPv6 Destination Address, and Fragment Identification)\r\n         should be processed independently.\r\n\r\n   The following error conditions may arise when reassembling fragmented\r\n   packets:\r\n\r\n      o  If insufficient fragments are received to complete reassembly\r\n         of a packet within 60 seconds of the reception of the first-\r\n         arriving fragment of that packet, reassembly of that packet\r\n         must be abandoned and all the fragments that have been received\r\n         for that packet must be discarded.  If the first fragment\r\n         (i.e., the one with a Fragment Offset of zero) has been\r\n         received, an ICMP Time Exceeded -- Fragment Reassembly Time\r\n         Exceeded message should be sent to the source of that fragment.\r\n\r\n      o  If the length of a fragment, as derived from the fragment\r\n         packet's Payload Length field, is not a multiple of 8 octets\r\n         and the M flag of that fragment is 1, then that fragment must\r\n         be discarded and an ICMP Parameter Problem, Code 0, message\r\n         should be sent to the source of the fragment, pointing to the\r\n         Payload Length field of the fragment packet.\r\n\r\n      o  If the length and offset of a fragment are such that the\r\n         Payload Length of the packet reassembled from that fragment\r\n         would exceed 65,535 octets, then that fragment must be\r\n         discarded and an ICMP Parameter Problem, Code 0, message should\r\n         be sent to the source of the fragment, pointing to the Fragment\r\n         Offset field of the fragment packet.\r\n\r\n      o  If the first fragment does not include all headers through an\r\n         Upper-Layer header, then that fragment should be discarded and\r\n         an ICMP Parameter Problem, Code 3, message should be sent to\r\n         the source of the fragment, with the Pointer field set to zero.\r\n\r\n      o  If any of the fragments being reassembled overlap with any\r\n         other fragments being reassembled for the same packet,\r\n         reassembly of that packet must be abandoned and all the\r\n         fragments that have been received for that packet must be\r\n         discarded, and no ICMP error messages should be sent.\r\n\r\n         It should be noted that fragments may be duplicated in the\r\n         network.  Instead of treating these exact duplicate fragments\r\n         as overlapping fragments, an implementation may choose to\r\n         detect this case and drop exact duplicate fragments while\r\n         keeping the other fragments belonging to the same packet.\r\n\r\n   The following conditions are not expected to occur frequently but are\r\n   not considered errors if they do:\r\n\r\n      The number and content of the headers preceding the Fragment\r\n      header of different fragments of the same original packet may\r\n      differ.  Whatever headers are present, preceding the Fragment\r\n      header in each fragment packet, are processed when the packets\r\n      arrive, prior to queueing the fragments for reassembly.  Only\r\n      those headers in the Offset zero fragment packet are retained in\r\n      the reassembled packet.\r\n\r\n      The Next Header values in the Fragment headers of different\r\n      fragments of the same original packet may differ.  Only the value\r\n      from the Offset zero fragment packet is used for reassembly.\r\n\r\n      Other fields in the IPv6 header may also vary across the fragments\r\n      being reassembled.  Specifications that use these fields may\r\n      provide additional instructions if the basic mechanism of using\r\n      the values from the Offset zero fragment is not sufficient.  For\r\n      example, Section 5.3 of [RFC3168] describes how to combine the\r\n      Explicit Congestion Notification (ECN) bits from different\r\n      fragments to derive the ECN bits of the reassembled packet.\r\n      \r\n", "correct_text": "4.5.  Fragment Header\r\n\r\n   The Fragment header is used by an IPv6 source to send a packet larger\r\n   than would fit in the path MTU to its destination.  (Note: unlike\r\n   IPv4, fragmentation in IPv6 is performed only by source nodes, not by\r\n   routers along a packet's delivery path -- see [RFC8200].)  The\r\n   Fragment header is identified by a Next Header value of 44 in the\r\n   immediately preceding header and has the following format:\r\n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Next Header  |   Reserved    |      Fragment Offset    |Res|M|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                         Identification                        |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n      Next Header         8-bit selector.  Identifies the initial header\r\n                          type of the Fragmentable Part of the original\r\n                          packet (defined below).  Uses the same values\r\n                          as the IPv4 Protocol field [IANA-PN].\r\n\r\n      Reserved            8-bit reserved field.  Initialized to zero for\r\n                          transmission; ignored on reception.\r\n\r\n      Fragment Offset     13-bit unsigned integer.  The offset, in\r\n                          8-octet units, of the data following this\r\n                          header, relative to the start of the\r\n                          Fragmentable Part of the original packet.\r\n\r\n      Res                 2-bit reserved field.  Initialized to zero for\r\n                          transmission; ignored on reception.\r\n\r\n      M flag              1 = more fragments; 0 = last fragment.\r\n\r\n      Identification      32 bits.  See description below.\r\n\r\n   In order to send a packet that is too large to fit in the MTU of the\r\n   path to its destination, a source node may divide the packet into\r\n   fragments and send each fragment as a separate packet, to be\r\n   reassembled at the receiver.\r\n\r\n   For every packet that is to be fragmented, the source node generates\r\n   an Identification value.  The Identification must be different than\r\n   that of any other fragmented packet sent recently* with the same\r\n   Source Address and Destination Address.  If a Routing header is\r\n   present, the Destination Address of concern is that of the final\r\n   destination.\r\n\r\n      *  \"recently\" means within the maximum likely lifetime of a\r\n         packet, including transit time from source to destination and\r\n         time spent awaiting reassembly with other fragments of the same\r\n         packet.  However, it is not required that a source node knows\r\n         the maximum packet lifetime.  Rather, it is assumed that the\r\n         requirement can be met by implementing an algorithm that\r\n         results in a low identification reuse frequency.  Examples of\r\n         algorithms that can meet this requirement are described in\r\n         [RFC7739].\r\n\r\n   The initial, large, unfragmented packet is referred to as the\r\n   \"original packet\", and it is considered to consist of two parts, as\r\n   illustrated:\r\n\r\n   original packet:\r\n\r\n   +------------------+-----------------------------//----------------+\r\n   |  Per-Fragment    |               Fragmentable                    |\r\n   |    Headers       |                   Part                        |\r\n   +------------------+-----------------------------//----------------+\r\n\r\n      The Per-Fragment headers must consist of the IPv6 header plus any\r\n      extension headers that must be processed by nodes en route to the\r\n      destination, that is, all headers up to and including the Routing\r\n      header if present, else the Hop-by-Hop Options header if present,\r\n      else no extension headers.\r\n\r\n      The Fragmentable Part consists of the rest of the packet, that is,\r\n      any extension headers that need be processed only by the final\r\n      destination node(s), plus the upper-layer header and data.\r\n\r\n   The Fragmentable Part of the original packet is divided into\r\n   fragments.  The lengths of the fragments must be chosen such that the\r\n   resulting fragment packets fit within the MTU of the path to the\r\n   packet's destination(s).  Each complete fragment, except possibly the\r\n   last (\"rightmost\") one, is an integer multiple of 8 octets long.\r\n\r\n   The fragments are transmitted in separate \"fragment packets\" as\r\n   illustrated:\r\n\r\n   original packet:\r\n\r\n    +------------------+--------------+--------------+--//--+----------+\r\n    |  Per-Fragment    |    first     |    second    |      |   last   |\r\n    |   Headers        |   fragment   |   fragment   | .... | fragment |\r\n    +------------------+--------------+--------------+--//--+----------+\r\n\r\n   fragment packets:\r\n\r\n   +------------------+--------+--------------+\r\n   |  Per-Fragment    |Fragment|    first     |\r\n   |    Headers       | Header |   fragment   |\r\n   +------------------+--------+--------------+\r\n\r\n   +------------------+--------+--------------+\r\n   |  Per-Fragment    |Fragment|    second    |\r\n   |    Headers       | Header |   fragment   |\r\n   +------------------+--------+--------------+\r\n                         o\r\n                         o\r\n                         o\r\n   +------------------+--------+----------+\r\n   |  Per-Fragment    |Fragment|   last   |\r\n   |    Headers       | Header | fragment |\r\n   +------------------+--------+----------+\r\n\r\n   The first fragment packet is composed of:\r\n\r\n      (1)  The Per-Fragment headers of the original packet, with the\r\n           Payload Length of the original IPv6 header changed to contain\r\n           the length of this fragment packet only (excluding the length\r\n           of the IPv6 header itself), and the Next Header field of the\r\n           last header of the Per-Fragment headers changed to 44.\r\n\r\n      (2)  A Fragment header containing:\r\n\r\n              The Next Header value that identifies the first header\r\n              after the Per-Fragment headers of the original packet.\r\n\r\n              A Fragment Offset containing the offset of the fragment,\r\n              in 8-octet units, relative to the start of the\r\n              Fragmentable Part of the original packet.  The Fragment\r\n              Offset of the first (\"leftmost\") fragment is 0.\r\n\r\n              An M flag value of 1 as this is the first fragment.\r\n\r\n              The Identification value generated for the original\r\n              packet.\r\n\r\n      (3)  Extension headers, if any, and the Upper-Layer header.  These\r\n           headers must be in the first fragment.  Note: This restricts\r\n           the size of the headers through the Upper-Layer header to the\r\n           MTU of the path to the packet's destinations(s).\r\n\r\n           Extension headers are all other extension headers that are\r\n           not included in the Per-Fragment headers part of the packet.\r\n           For this purpose, the Encapsulating Security Payload (ESP) is\r\n           not considered an extension header.  The Upper-Layer header\r\n           is the first upper-layer header that is not an IPv6 extension\r\n           header.  Examples of upper-layer headers include TCP, UDP,\r\n           IPv4, IPv6, ICMPv6, and as noted ESP.\r\n\r\n      (4)  The remainder of the first fragment.\r\n\r\n   The subsequent fragment packets are composed of:\r\n\r\n      (1)  The Per-Fragment headers of the original packet, with the\r\n           Payload Length of the original IPv6 header changed to contain\r\n           the length of this fragment packet only (excluding the length\r\n           of the IPv6 header itself), and the Next Header field of the\r\n           last header of the Per-Fragment headers changed to 44.\r\n\r\n      (2)  A Fragment header containing:\r\n\r\n              The Next Header value that identifies the first header\r\n              after the Per-Fragment headers of the original packet.\r\n\r\n              A Fragment Offset containing the offset of the fragment,\r\n              in 8-octet units, relative to the start of the\r\n              Fragmentable Part of the original packet.\r\n\r\n              An M flag value of 0 if the fragment is the last\r\n              (\"rightmost\") one, else an M flag value of 1.\r\n\r\n              The Identification value generated for the original\r\n              packet.\r\n\r\n      (3)  The fragment itself.\r\n\r\n   Fragments must not be created that overlap with any other fragments\r\n   created from the original packet.\r\n\r\n   At the destination, fragment packets are reassembled into their\r\n   original, unfragmented form, as illustrated:\r\n\r\n   reassembled original packet:\r\n\r\n   +------------------+----------------------//------------------------+\r\n   |  Per-Fragment    |                 Fragmentable                   |\r\n   |    Headers       |                     Part                       |\r\n   +------------------+----------------------//------------------------+\r\n\r\n   The following rules govern reassembly:\r\n\r\n      An original packet is reassembled only from fragment packets that\r\n      have the same Source Address, Destination Address, and Fragment\r\n      Identification.\r\n\r\n      The Per-Fragment headers of the reassembled packet consists of all\r\n      headers up to, but not including, the Fragment header of the first\r\n      fragment packet (that is, the packet whose Fragment Offset is\r\n      zero), with the following two changes:\r\n\r\n         The Next Header field of the last header of the Per-Fragment\r\n         headers is obtained from the Next Header field of the first\r\n         fragment's Fragment header.\r\n\r\n         The Payload Length of the reassembled packet is computed from\r\n         the length of the Per-Fragment headers and the length and\r\n         offset of the last fragment.  For example, a formula for\r\n         computing the Payload Length of the reassembled original packet\r\n         is:\r\n\r\n            PL.orig = PL.first - FL.first - 8 + (8 * FO.last) + FL.last\r\n\r\n\r\n            where\r\n            PL.orig  =  Payload Length field of reassembled packet.\r\n            PL.first =  Payload Length field of first fragment packet.\r\n            FL.first =  length of fragment following Fragment header of\r\n                        first fragment packet.\r\n            FO.last  =  Fragment Offset field of Fragment header of last\r\n                        fragment packet.\r\n            FL.last  =  length of fragment following Fragment header of\r\n                        last fragment packet.\r\n\r\n         The Fragmentable Part of the reassembled packet is constructed\r\n         from the fragments following the Fragment headers in each of\r\n         the fragment packets.  The length of each fragment is computed\r\n         by subtracting from the packet's Payload Length the length of\r\n         the headers between the IPv6 header and fragment itself; its\r\n         relative position in Fragmentable Part is computed from its\r\n         Fragment Offset value.\r\n\r\n         The Fragment header is not present in the final, reassembled\r\n         packet.\r\n\r\n         If the fragment is a whole datagram (that is, both the Fragment\r\n         Offset field and the M flag are zero), then it does not need\r\n         any further reassembly and should be processed as a fully\r\n         reassembled packet (i.e., updating Next Header, adjust Payload\r\n         Length, removing the Fragment header, etc.).  Any other\r\n         fragments that match this packet (i.e., the same IPv6 Source\r\n         Address, IPv6 Destination Address, and Fragment Identification)\r\n         should be processed independently.\r\n\r\n   The following error conditions may arise when reassembling fragmented\r\n   packets:\r\n\r\n      o  If insufficient fragments are received to complete reassembly\r\n         of a packet within 60 seconds of the reception of the first-\r\n         arriving fragment of that packet, reassembly of that packet\r\n         must be abandoned and all the fragments that have been received\r\n         for that packet must be discarded.  If the first fragment\r\n         (i.e., the one with a Fragment Offset of zero) has been\r\n         received, an ICMP Time Exceeded -- Fragment Reassembly Time\r\n         Exceeded message should be sent to the source of that fragment.\r\n\r\n      o  If the length of a fragment, as derived from the fragment\r\n         packet's Payload Length field, is not a multiple of 8 octets\r\n         and the M flag of that fragment is 1, then that fragment must\r\n         be discarded and an ICMP Parameter Problem, Code 0, message\r\n         should be sent to the source of the fragment, pointing to the\r\n         Payload Length field of the fragment packet.\r\n\r\n      o  If the length and offset of a fragment are such that the\r\n         Payload Length of the packet reassembled from that fragment\r\n         would exceed 65,535 octets, then that fragment must be\r\n         discarded and an ICMP Parameter Problem, Code 0, message should\r\n         be sent to the source of the fragment, pointing to the Fragment\r\n         Offset field of the fragment packet.\r\n\r\n      o  If the first fragment does not include all headers through an\r\n         Upper-Layer header, then that fragment should be discarded and\r\n         an ICMP Parameter Problem, Code 3, message should be sent to\r\n         the source of the fragment, with the Pointer field set to zero.\r\n\r\n      o  If any of the fragments being reassembled overlap with any\r\n         other fragments being reassembled for the same packet,\r\n         reassembly of that packet must be abandoned and all the\r\n         fragments that have been received for that packet must be\r\n         discarded, and no ICMP error messages should be sent.\r\n\r\n         It should be noted that fragments may be duplicated in the\r\n         network.  Instead of treating these exact duplicate fragments\r\n         as overlapping fragments, an implementation may choose to\r\n         detect this case and drop exact duplicate fragments while\r\n         keeping the other fragments belonging to the same packet.\r\n\r\n   The following conditions are not expected to occur frequently but are\r\n   not considered errors if they do:\r\n\r\n      The number and content of the headers preceding the Fragment\r\n      header of different fragments of the same original packet may\r\n      differ.  Whatever headers are present, preceding the Fragment\r\n      header in each fragment packet, are processed when the packets\r\n      arrive, prior to queueing the fragments for reassembly.  Only\r\n      those headers in the Offset zero fragment packet are retained in\r\n      the reassembled packet.\r\n\r\n      The Next Header values in the Fragment headers of different\r\n      fragments of the same original packet may differ.  Only the value\r\n      from the Offset zero fragment packet is used for reassembly.\r\n\r\n      Other fields in the IPv6 header may also vary across the fragments\r\n      being reassembled.  Specifications that use these fields may\r\n      provide additional instructions if the basic mechanism of using\r\n      the values from the Offset zero fragment is not sufficient.  For\r\n      example, Section 5.3 of [RFC3168] describes how to combine the\r\n      Explicit Congestion Notification (ECN) bits from different\r\n      fragments to derive the ECN bits of the reassembled packet.\r\n", "notes": "This errata replaces and resolves the issues raised in Errata 5170, 5171, 5172, 5173.   Credit goes to Fernando Gont for reporting the issues raised in these errata.   They correctly reported that the text in Section 4.5 of RFC8200 defined Fragment Offset as pointing to \u201cFragmentable Part\u201d, this was an error and should have pointed to \u201cExtension & Upper-Layer Headers\u201d.\r\n\r\nAfter review by the 6man working group the conclusion was to fix the issue in a more general way than what was proposed in Errata 5170, 5171, 5172, 5173, hence the need for a new errata.", "submit_date": "2019-12-24", "submitter_name": "Bob Hinden", "verifier_id": "", "verifier_name": "Suresh Krishnan", "update_date": "2020-02-03 14:16:57"}, {"errata_id": "5946", "doc-id": "RFC8700", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   +--------------------+----------+-----------------------------------+\r\n   | [RFC0748]          | April    | First April 1st RFC               |\r\n   |                    | 1977     | published                         |\r\n   +--------------------+----------+-----------------------------------+", "correct_text": "   +--------------------+----------+-----------------------------------+\r\n   | [RFC0748]          | April    | First April 1st RFC               |\r\n   |                    | 1978     | published                         |\r\n   +--------------------+----------+-----------------------------------+", "notes": "RFC 748 carries the date \"1 April 1978\".", "submit_date": "2019-12-26", "submitter_name": "Matth\u00e4us Wander", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2024-01-11 16:34:14"}, {"errata_id": "7237", "doc-id": "RFC7141", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "2.2.  Recommendation on Encoding Congestion Notification\r\n\r\n   When encoding congestion notification (e.g., by drop, ECN, or PCN),\r\n   the probability that network equipment drops or marks a particular\r\n   packet to notify congestion SHOULD NOT depend on the size of the\r\n   packet in question.\r\n[...]\r\n2.3.  Recommendation on Responding to Congestion\r\n\r\n   When a transport detects that a packet has been lost or congestion\r\n   marked, it SHOULD consider the strength of the congestion indication\r\n   as proportionate to the size in octets (bytes) of the missing or\r\n   marked packet.\r\n\r\n   In other words, when a packet indicates congestion (by being lost or\r\n   marked), it can be considered conceptually as if there is a\r\n   congestion indication on every octet of the packet, not just one\r\n   indication per packet.\r\n\r\n   To be clear, the above recommendation solely describes how a\r\n   transport should interpret the meaning of a congestion indication, as\r\n   a long term goal.  It makes no recommendation on whether a transport\r\n   should act differently based on this interpretation.  It merely aids\r\n   interoperability between transports, if they choose to make their\r\n   actions depend on the strength of congestion indications.", "correct_text": "I am not sure the text is actually salvageable, as it appears ti be a logic disconnect at the core of the recommendations.", "notes": "The recommendations seem not self consistent:\r\nA) Section 2.2.  recommends that CE marking should be made independent of packet size, so a CE-mark carries no information about packet size.\r\n\r\nB) Section 2.3 then recommends to use the size of marked packets as direct indicators of congestion strength.\r\n\r\nC) Section 2.3 then later clarifies that transports should interpret the size of CE-marked packets as correlate for congestion strength but are in no way required to take this interpretation into account when acting based on the congestion signal.\r\n\r\n\r\nThis has several problems:\r\n1) A) and B) are in direct contradiction to each other. If we ask marking nodes to ignore packet size while marking, but end nodes to take it into account we basically create random congestion strength \"information\" by the pure chance of a specific packet of a specific size \"catching\" a CE mark. At which point we might as well simply draw a random number at the end-point to interpret congestion strength (except that packet sizes are not distributed randomly).\r\n\r\n2) Asking endpoints to interpret CE_marks in this way but not act on it, is hardly actionable advice for potential implementers. If we can not recommend a specific way, we should refrain from offering recommendations at all to keep things as simple as reasonably possible.\n --VERIFIER NOTES-- \n I would summarize the discussion on the WG list as follows:\r\n\r\n1) while there is a tension between the two recommendations, it is logically coherent for one endpoint to do one thing and the other input to assume the opposite.\r\n\r\n2) This is the original intent of the authors\r\n\r\n3) Some people disagree with that design, but that is not a subject for errata.", "submit_date": "2022-11-03", "submitter_name": "Sebastian Moeller", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 23:17:41"}, {"errata_id": "9040", "doc-id": "RFC9846", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "E.2", "orig_text": "A TLS server can also receive a ClientHello indicating a version\r\n   number smaller than its highest supported version.  If the\r\n   \"supported_versions\" extension is present, the server MUST negotiate\r\n   using that extension as described in Section 4.3.1.  If the\r\n   \"supported_versions\" extension is not present, the server MUST\r\n   negotiate the minimum of ClientHello.legacy_version and TLS 1.2.  For\r\n   example, if the server supports TLS 1.0, 1.1, and 1.2, and\r\n   legacy_version is TLS 1.0, the server will proceed with a TLS 1.0\r\n   ServerHello.  If the \"supported_versions\" extension is absent and the\r\n   server only supports versions greater than\r\n   ClientHello.legacy_version, the server MUST abort the handshake with\r\n   a \"protocol_version\" alert.", "correct_text": "TLS server can also receive a ClientHello indicating a version\r\n   number smaller than its highest supported version.  If the\r\n   \"supported_versions\" extension is present, the server MUST\r\n   negotiate using that extension as described in Section 4.3.1. If\r\n   the \"supported_versions\" extension is absent and the\r\n   ClientHello.legacy_version is TLS 1.2, then the server MUST proceed\r\n   with TLS 1.2. Otherwise, the server MUST abort the handshake with a\r\n   \"protocol_version\" alert.", "notes": "We no longer support < TLS 1.2.\r\n\r\nIssue originally reported by Jaime Gomez Garcia", "submit_date": "2026-07-24", "submitter_name": "Eric Rescorla", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-27 20:37:55"}, {"errata_id": "5956", "doc-id": "RFC2328", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12.4.1", "orig_text": "Router-LSAs\r\n\r\nIf the state of the interface is Loopback, add a Type 3\r\nlink (stub network) as long as this is not an interface\r\nto an unnumbered point-to-point network.  The Link ID\r\nshould be set to the IP interface address, the Link Data\r\nset to the mask 0xffffffff (indicating a host route),\r\nand the cost set to 0.\r\n\r\n===================================\r\n12.4.1.4.  Describing Point-to-MultiPoint interfaces\r\n\r\n                For operational Point-to-MultiPoint interfaces, one or\r\n                more link descriptions are added to the router-LSA as\r\n                follows:\r\n\r\n                o   A single Type 3 link (stub network) is added with\r\n                    Link ID set to the router's own IP interface\r\n                    address, Link Data set to the mask 0xffffffff\r\n                    (indicating a host route), and cost set to 0.\r\n=============================================================================\r\nC.3 Router interface parameters\r\n \r\n Interface output cost\r\n            The cost of sending a packet on the interface, expressed in\r\n            the link state metric.  This is advertised as the link cost\r\n            for this interface in the router's router-LSA. The interface\r\n            output cost must always be greater than 0.\r\n", "correct_text": "\"cost set to 0\" to at least \"greater than 0\"", "notes": "The section 12.4.1 and 12.4.1.4 are inconsistent with the appendix c.3.\r\n\r\nThese both section we find the cost to stub networks have to be set to 0, but in appendix c.3 we see that the interfaces must have greater than 0.\n --VERIFIER NOTES-- \nA discussion on the WG list (lsr) resulted a consensus of no change needed. \r\nhttps://mailarchive.ietf.org/arch/msg/lsr/FFiqi15XPunSwOV5BO1pl4o5xYY/", "submit_date": "2020-01-08", "submitter_name": "Marcelo Bustani", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-03-18 14:38:59"}, {"errata_id": "5950", "doc-id": "RFC8572", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.  Initia", "orig_text": "   7.  Devices that support decrypting SZTP artifacts MUST posses the", "correct_text": "   7.  Devices that support decrypting SZTP artifacts MUST possess the", "notes": "", "submit_date": "2019-12-30", "submitter_name": "Tetsuya Hasegawa", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-01-05 16:53:07"}, {"errata_id": "5951", "doc-id": "RFC8110", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4 Table 2", "orig_text": "HMAC-SHA-521", "correct_text": "HMAC-SHA-512", "notes": "", "submit_date": "2019-12-30", "submitter_name": "David Goodall", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-01-02 14:45:09"}, {"errata_id": "5952", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.5", "orig_text": "   RS-Flag (0x04): The Restart flag is set in the HELLO and the UPDATE\r\n      packets during the restart period.  The router looks at the RS-\r\n      Flag to detect if a neighbor is restarting.  From the restarting\r\n      routers perspective, if a neighboring router detects the RS-Flag\r\n      set, it will maintain the adjacency, and will set the RS-Flag in\r\n      its UPDATE packet to indicated it is doing a soft restart.", "correct_text": "   RS-Flag (0x04): The Restart flag is set in the HELLO and the UPDATE\r\n      packets during the restart period.  A router looks at the RS-\r\n      Flag to detect if a neighbor is restarting.  From the restarting\r\n      router's perspective, if a neighboring router detects the RS-\r\n      Flag is set, the neighboring router will maintain the adjacency\r\n      with the restarting router. The restarting router will set the\r\n      RS-Flag in its UPDATE packet to indicate it is performing a soft\r\n      restart.", "notes": "Cleaning up the grammar for the RS-Flag portion of Section 6.5. The grammar used in the original text can be ambiguously interpreted as to whether the restarting router initially sets the RS-Flag in its Update packet, or the neighboring router initially sets the RS-Flag in its Update packet.", "submit_date": "2019-12-30", "submitter_name": "Christopher Hart", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-01-19 23:05:42"}, {"errata_id": "5953", "doc-id": "RFC8632", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.5.1.", "orig_text": "   From a resource perspective, an alarm can, for example, have the\r\n   following lifecycle: raise, change severity, change severity, clear,", "correct_text": "   From a resource perspective, an alarm can, for example, have the\r\n   following lifecycle: raise, change severity, clear,", "notes": "\n --VERIFIER NOTES-- \n Per authors and chairs, the current RFC text is correct as it exemplifies how the severity can change multiple times over the lifecycle of an alarm.", "submit_date": "2019-12-31", "submitter_name": "Tetsuya Hasegawa", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-07-13 21:13:51"}, {"errata_id": "5954", "doc-id": "RFC2631", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1.5.", "orig_text": "     1. Verify that y lies within the interval [2,p-1]. If it does not,\r\n        the key is invalid.\r\n     2. Compute y^q mod p. If the result == 1, the key is valid.\r\n        Otherwise the key is invalid.\r\n", "correct_text": "     1. Verify that y lies within the interval [2,p-1]. If it does not,\r\n        the key is invalid.\r\n     2. Compute y^q mod p. If the result == 1, the key is valid.\r\n        Otherwise the key is invalid.\r\n     3. Verify that y does not match g.\r\n", "notes": "Validating that (g == received y) needs to be an additional exclusion to the valid range [2,p-1]. If party 'a' accepts received public key 'yb' matching 'g', then ZZ matches  public key 'ya'. i.e. if yb = 2, then xb = 1, therefore ZZ = ya^1 = ya", "submit_date": "2020-01-02", "submitter_name": "Paul Janson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-01-13 04:44:09"}, {"errata_id": "6213", "doc-id": "RFC7996", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "1", "orig_text": "      Graphics may include ASCII art and a more complex form to be\r\n      defined, such as SVG line art [SVG].", "correct_text": "      Graphics may include ASCII art and a more complex form to be\r\n      defined, such as SVG line art [W3C.REC-SVG11-20110816].", "notes": "There is no [SVG] reference. I think that's the most likely candidate.\r\nSending this in so we don't forget to fix it in a future revision.", "submit_date": "2020-06-23", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6214", "doc-id": "RFC5524", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "This document defines the URLFETCH=BINARY IMAP capability.  IANA has added it to the registry accordingly.", "correct_text": "This document defines the URLAUTH=BINARY IMAP capability.  IANA is asked to replace URLFETCH=BINARY with URLAUTH=BINARY in the IMAP registry.", "notes": "This document talks about URLAUTH=BINARY.  Mentioning URLFETCH=BINARY in the IANA section was not intended.", "submit_date": "2020-06-24", "submitter_name": "\u0414\u0438\u043b\u044f\u043d \u041f\u0430\u043b\u0430\u0443\u0437\u043e\u0432", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-06-25 19:23:28"}, {"errata_id": "5957", "doc-id": "RFC4960", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "D) Abort\r\n\r\n      Format: ABORT(association id [, Upper Layer Abort Reason]) ->\r\n      result\r\n\r\n   Ungracefully closes an association.  Any locally queued user data\r\n   will be discarded, and an ABORT chunk is sent to the peer.  A success\r\n   code will be returned on successful abort of the association.  If\r\n   attempting to abort the association results in a failure, an error\r\n   code shall be returned.\r\n\r\n   Mandatory attributes:\r\n\r\n   o association id - local handle to the SCTP association.\r\n\r\n   Optional attributes:\r\n\r\n   o Upper Layer Abort Reason - reason of the abort to be passed to the\r\n   peer.\r\n\r\n   None.", "correct_text": "D) Abort\r\n\r\n      Format: ABORT(association id [, Upper Layer Abort Reason]) ->\r\n      result\r\n\r\n   Ungracefully closes an association.  Any locally queued user data\r\n   will be discarded, and an ABORT chunk is sent to the peer.  A success\r\n   code will be returned on successful abort of the association.  If\r\n   attempting to abort the association results in a failure, an error\r\n   code shall be returned.\r\n\r\n   Mandatory attributes:\r\n\r\n   o association id - local handle to the SCTP association.\r\n\r\n   Optional attributes:\r\n\r\n   o Upper Layer Abort Reason - reason of the abort to be passed to the\r\n   peer.\r\n", "notes": "There is an extra \"None.\" at the end but it is not necessary because there is an optional attribute.", "submit_date": "2020-01-13", "submitter_name": "F\u00f6ldv\u00e1ri Zolt\u00e1n", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-01-13 15:52:43"}, {"errata_id": "5958", "doc-id": "RFC4960", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10.1", "orig_text": "", "correct_text": "", "notes": "From A) to I) there are \"Mandatory attributes\" and \"Optional attributes\" section for each primitive.\r\n\"Optional attributes\" section is missing from J) Request HeartBeat.\r\n\"Optional attributes\" section is missing from K) Get SRTT Report.\r\n\"Optional attributes\" section is missing from L) Set Failure Threshold.\r\n\"Mandatory attributes\" label is missing from N) Receive Unsent Message.\r\n\"Mandatory attributes\" label is missing from o  Receive Unacknowledged Message.\r\n\"Mandatory attributes\" label is missing from P) Destroy SCTP Instance.", "submit_date": "2020-01-13", "submitter_name": "F\u00f6ldv\u00e1ri Zolt\u00e1n", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 20:50:47"}, {"errata_id": "5959", "doc-id": "RFC8272", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "Value = 15; look up extended SetID field, shifting enabled.", "correct_text": "Value = 15; look up extended SetID field, Shifting disabled.", "notes": "Typo error identified by RFC authors during new implementation in RIOT OS.", "submit_date": "2020-01-20", "submitter_name": "Corinna Schmitt", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-01-26 12:51:45"}, {"errata_id": "5962", "doc-id": "RFC5958", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   PrivateKeyAlgorithms ALGORITHM ::= {\r\n     ... -- Extensible\r\n   }\r\n\r\n   KeyEncryptionAlgorithms ALGORITHM ::= {\r\n     ... -- Extensible\r\n   }", "correct_text": "   PrivateKeyAlgorithms PUBLIC-KEY ::= {\r\n     ... -- Extensible\r\n   }\r\n\r\n   KeyEncryptionAlgorithms CONTENT-ENCRYPTION ::= {\r\n     ... -- Extensible\r\n   }", "notes": "The above given information object sets are used in defining types PrivateKeyAlgorithmIdentifier and EncryptionAlgorithmIdentifier:\r\n\r\n   PrivateKeyAlgorithmIdentifier ::= AlgorithmIdentifier\r\n                                      { PUBLIC-KEY,\r\n                                        { PrivateKeyAlgorithms } }\r\n\r\n   EncryptionAlgorithmIdentifier ::= AlgorithmIdentifier\r\n                                       { CONTENT-ENCRYPTION,\r\n                                         { KeyEncryptionAlgorithms } }\r\n\r\nThe parameterized type AlgorithmIdentifier has two parameters, one an information object class and the other an information object set.  The information object set must be contain objects of the given class, or else the table constraint in AlgorithmIdentifier will not be valid.  This requirement is not met as PrivateKeyAlgorithms  and KeyEncryptionAlgorithms are currently defined, and therefore the definition is not valid according to ITU-T X.682.\r\n\r\nAn alternative correction would be to change the type definitions to specify \"ALGORITHM\" in the invocation of the parameterized type AlgorithmIdentifier.", "submit_date": "2020-01-22", "submitter_name": "Kevin Braun", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5963", "doc-id": "RFC6979", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   b.  Set:\r\n\r\n          V = 0x01 0x01 0x01 ... 0x01\r\n\r\n       such that the length of V, in bits, is equal to 8*ceil(hlen/8).\r\n:\r\n:\r\n   c.  Set:\r\n\r\n          K = 0x00 0x00 0x00 ... 0x00\r\n\r\n       such that the length of K, in bits, is equal to 8*ceil(hlen/8).\r\n", "correct_text": "   b.  Set:\r\n\r\n          V = 0x010101...01\r\n\r\n       such that the length of V, in bits, is equal to 8*ceil(hlen/8).\r\n:\r\n:\r\n   c.  Set:\r\n\r\n          K = 0x000000...00\r\n\r\n       such that the length of K, in bits, is equal to 8*ceil(hlen/8).\r\n", "notes": "Hrmonize the notations in 3.2 and A.1.1, where the hex string q is denoted as\r\n0x4000000000000000000020108A2E0CC0D99F8A5EF\r\nand not as \r\n0x40 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x20 0x10 0x8A 0x2E 0x0C 0xC0 0x0D 0x99 0xF8 0xA5 0xEF.", "submit_date": "2020-01-23", "submitter_name": "Annie Yousar", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-01-26 12:41:16"}, {"errata_id": "5964", "doc-id": "RFC7230", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.7.1", "orig_text": "   The URI generic syntax for authority also includes a deprecated\r\n   userinfo subcomponent ([RFC3986], Section 3.2.1) for including user\r\n   authentication information in the URI.  Some implementations make use\r\n   of the userinfo component for internal configuration of\r\n   authentication information, such as within command invocation\r\n   options, configuration files, or bookmark lists, even though such\r\n   usage might expose a user identifier or password.  A sender MUST NOT\r\n   generate the userinfo subcomponent (and its \"@\" delimiter) when an\r\n   \"http\" URI reference is generated within a message as a request\r\n   target or header field value.  Before making use of an \"http\" URI\r\n   reference received from an untrusted source, a recipient SHOULD parse\r\n   for userinfo and treat its presence as an error; it is likely being\r\n   used to obscure the authority for the sake of phishing attacks.\r\n", "correct_text": "   The URI generic syntax for authority also includes a\r\n   userinfo subcomponent in which the format \"user:password\" is deprecated\r\n   ([RFC3986], Section 3.2.1).  The user is permitted, but the password\r\n   is not.  Some implementations make use\r\n   of the userinfo component for internal configuration of\r\n   authentication information, such as within command invocation\r\n   options, configuration files, or bookmark lists, even though such\r\n   usage might expose a user identifier or password.  A sender MUST NOT\r\n   generate a colon in a userinfo subcomponent when an\r\n   \"http\" URI reference is generated within a message as a request\r\n   target or header field value, but it may prefix a user and an \"@\" delimiter\r\n   before the host name in an \"http\" URI.  Before making use of an \"http\" URI\r\n   reference received from an untrusted source, a recipient SHOULD parse\r\n   for userinfo and treat the presence of a colon in it as an error.\r\n", "notes": "RFC3986 does not forbid or even discourage the \"user\" in the userinfo subcomponent.  It only says\r\n\r\n   Use of the format \"user:password\" in the userinfo field is\r\n   deprecated.\r\n\r\nand continues to describe \":password\" handling.\r\n\r\nObscuring the authority for the purposes of phishing is not mitigated by parsing the userinfo; subdomains in DNS offer similar notational flexibility.  Parsing does help against misleading password popups.\r\n\r\nThe user is part of the authority section of the URI and its purpose is to zoom in on a scope for authoritative resource addressing.  This syntax has in the past been (ab)used for Basic/Digest authentication details, which only works if visitor and visited resource happen to be the same user; it is this (ab)use that is now deprecated.\r\n\r\n===========================\r\nVerifier notes:\r\nThis is not really an erratum, as the document says exactly what it was intended to say when it was written.  That said, the issue does need to be discussed as the document is updated, and an update is planned... so I'm marking it \"Held for Document Update\", rather than \"Rejected\".", "submit_date": "2020-01-23", "submitter_name": "Rick van Rein", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-02-05 14:39:06"}, {"errata_id": "5965", "doc-id": "RFC6819", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4.1.2", "orig_text": "Store access token hashes only (Section 5.1.4.1.3).", "correct_text": "Store authorization code hashes only (Section 5.1.4.1.3).", "notes": "", "submit_date": "2020-01-23", "submitter_name": "David Piggott", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-01-30 21:39:58"}, {"errata_id": "6229", "doc-id": "RFC8410", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "10.2", "orig_text": "An example of a self-issued PKIX certificate using Ed25519 to sign an\r\nX25519 public key would be", "correct_text": "", "notes": "The given example certificate is self-issued but not self-signed (which is fine because its public key cannot be used for signing).\r\nIt includes a subjectKeyIdentifier but not an authorityKeyIdentifier.\r\n\r\nFor not self-signed certificates RFC 5280 requires in section 4.2.1.1 (https://tools.ietf.org/html/rfc5280#section-4.2.1.1) that the authorityKeyIdentifier is present.\r\n\r\nThus for such an example certificate the authorityKeyIdentifier MUST be added in order to be a conforming certificate.\r\nOtherwise, cert chain validation will be mislead to assume that the certificate is self-signed (while usually not actually verifying this supposition).", "submit_date": "2020-07-12", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5966", "doc-id": "RFC3168", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "Section 6.1 states:\r\n\r\n      * The sender sets the CWR flag in the TCP header of the next\r\n        packet sent to the receiver to acknowledge its receipt of and\r\n        reaction to the ECN-Echo flag.\r\n\r\nsection 6.1.2 clarifies:\r\n\r\n   \r\n   We ensure that the \"Congestion Window Reduced\" information is\r\n   reliably delivered to the TCP receiver.  This comes about from the\r\n   fact that if the new data packet carrying the CWR flag is dropped,\r\n   then the TCP sender will have to again reduce its congestion window,\r\n   and send another new data packet with the CWR flag set.  Thus, the\r\n   CWR bit in the TCP header SHOULD NOT be set on retransmitted packets.\r\n\r\n   When the TCP data sender is ready to set the CWR bit after reducing\r\n   the congestion window, it SHOULD set the CWR bit only on the first\r\n   new data packet that it transmits.", "correct_text": "Section 6.1 should say:\r\n\r\n\r\n      * The sender sets the CWR flag in the TCP header of the next new \r\n        data packet sent to the receiver to acknowledge its receipt of and\r\n        reaction to the ECN-Echo flag.\r\n ", "notes": "Discrepancies in the above text lead to poorly interoperating implementations. In NetBSD (and derived implementationd), the \"SHOULD set CWR on new data\" was used liberal in setting CWR on the very next packet to be sent, regardless of type. While at the same time the Linux implementation performed very stingent tests on the receiver side, if the sender was complying with the \"SHOULD\" like a \"MUST\". In request-response session with frequently changing data direction, this leads to a collapse of the congestion window, as the *BSD side will continue to interpret the still latched ECE flag as an indication of another RTT of congestion.\r\n\r\n== Reviewer note: The original report recommended a requirement that TCP receivers MUST process CWR on any packet, data or otherwise. While this would be helpful to interoperate implementations that are incorrect due to this erratum, it is a slight change in the intent of the document.", "submit_date": "2020-01-26", "submitter_name": "Richard Scheffenegger", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-20 15:42:05"}, {"errata_id": "5967", "doc-id": "RFC5280", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.2.1.", "orig_text": "The authority information access extension indicates how to access information and services for the issuer of the certificate in which the extension appears.", "correct_text": "The authority information access extension indicates how to access information and services of the issuer of the certificate in which the extension appears.", "notes": "When you use \"access services for the issuer\" you refer to grandparent node for the certificate in certification path. But actually you mean here the parent node  in certification path (the services of the CA that has issued the certificate) and that would be  \"services of the issuer\".\n --VERIFIER NOTES-- \n\"the issuer of the certificate in which the extension appears\" is a precise indication of the parent node and does not refer to the grandparent node.", "submit_date": "2020-01-27", "submitter_name": "Maxim", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-02-02 05:23:49"}, {"errata_id": "5968", "doc-id": "RFC8032", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "3.1.  Encoding\r\n\r\n   An integer 0 < S < L - 1 is encoded in little-endian form as a b-bit\r\n   string ENC(S).", "correct_text": "3.1.  Encoding\r\n\r\n   An integer 0 <= S <= L - 1 is encoded in little-endian form as a b-bit\r\n   string ENC(S).", "notes": "The range of the scalar should include the end-points: 0 and L-1.\r\n\r\n--VERIFIER NOTE--\r\nVerified. Section 3.1 specifies 0 < S < L - 1 (excluding both 0 and\r\nL-1) but Section 5.1.7 verification requires 0 <= S < L (including\r\nboth endpoints). This internal inconsistency is corrected by changing\r\nSection 3.1 to 0 <= S <= L - 1, which is mathematically equivalent\r\nto 0 <= S < L. Security is unaffected as both formulations reject\r\nS >= L (preventing malleability). All known implementations follow\r\nSection 5.1.7's range. See EID 7031 (same paper - held for document\r\nupdate as it adds content rather than fixing an error).", "submit_date": "2020-01-28", "submitter_name": "Valeria Nikolaenko", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 22:12:27"}, {"errata_id": "5969", "doc-id": "RFC7725", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3", "orig_text": "This status code indicates that the server is denying access to the\r\nresource as a consequence of a legal demand.", "correct_text": "This status code indicates that the server is denying access to the\r\nresource as a consequence of a legal demand or contractual restrictions to content.", "notes": "There are many cases where documents are not available in a part of the world because of contractual obligations, rather than legal ones.\r\n\r\nFor example, a television network may only have the rights to stream a video in a specific country. This is a legal requirement to comply with a contract. Visitors from other countries should receive an HTTP 451.\n --VERIFIER NOTES-- \nThis is not an erratum: the document says what it was intended to say at the time it was written.", "submit_date": "2020-01-29", "submitter_name": "Robert Rothenberg", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-01-29 17:20:14"}, {"errata_id": "5970", "doc-id": "RFC8231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.5", "orig_text": "19       Invalid Operation\r\n\r\n                Error-value\r\n                1:   Attempted LSP Update Request for a non-delegated\r\n                     LSP.  The PCEP-ERROR object is followed by the LSP\r\n                     object that identifies the LSP.", "correct_text": "19       Invalid Operation\r\n\r\n                Error-value\r\n                1:   Attempted LSP Update Request for a non-delegated\r\n                     LSP.", "notes": "RFC 8231 Section 6.3 - LSP Object is not part of PCErr message.\r\n", "submit_date": "2020-01-31", "submitter_name": "Subham Burnwal", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-07-13 21:00:34"}, {"errata_id": "7234", "doc-id": "RFC5137", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "      or more decoding steps to determine a Unicode code point that can\r\n      used to look up the character in a table.  That may be appropriate\r\n      in some cases where the goal is really to represent the UTF-8 form\r\n      but, in general, it just obscures desired information and makes\r\n      errors more likely and debugging harder.", "correct_text": "      or more decoding steps to determine a Unicode code point that can\r\n      be used to look up the character in a table.  That may be\r\n      appropriate in some cases where the goal is really to represent\r\n      the UTF-8 form but, in general, it just obscures desired\r\n      information and makes errors more likely and debugging harder.", "notes": "Missing \"be\".", "submit_date": "2022-11-02", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-03 20:48:57"}, {"errata_id": "7235", "doc-id": "RFC5137", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   form used in Java (See Section 6.3).  While those forms are", "correct_text": "   form used in Java (see Section 6.3).  While those forms are", "notes": "The word \"see\" should not be capitalized here.", "submit_date": "2022-11-02", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:00:06"}, {"errata_id": "7236", "doc-id": "RFC5137", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   start in \"\\u\" (See, e.g., Section 6.1, below>), but uses explicit", "correct_text": "   start in \"\\u\" (see, e.g., Section 6.1, below), but uses explicit", "notes": "The character \">\" should not be here and the word \"see\" should not be capitalized here.", "submit_date": "2022-11-02", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:01:20"}, {"errata_id": "5973", "doc-id": "RFC7914", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "Input:\r\n         P       Passphrase, an octet string.\r\n         S       Salt, an octet string.\r\n         N       CPU/Memory cost parameter, must be larger than 1,\r\n                 a power of 2, and less than 2^(128 * r / 8).\r\n         r       Block size parameter.\r\n         p       Parallelization parameter, a positive integer\r\n                 less than or equal to ((2^32-1) * hLen) / MFLen\r\n                 where hLen is 32 and MFlen is 128 * r.\r\n         dkLen   Intended output length in octets of the derived\r\n                 key; a positive integer less than or equal to\r\n                 (2^32 - 1) * hLen where hLen is 32.", "correct_text": "Input:\r\n         P       Passphrase, an octet string.\r\n         S       Salt, an octet string.\r\n         N       CPU/Memory cost parameter, must be larger than 1,\r\n                 and a power of 2.\r\n         r       Block size parameter.\r\n         p       Parallelization parameter, a positive integer\r\n                 less than or equal to ((2^32-1) * hLen) / MFLen\r\n                 where hLen is 32 and MFlen is 128 * r.\r\n         dkLen   Intended output length in octets of the derived\r\n                 key; a positive integer less than or equal to\r\n                 (2^32 - 1) * hLen where hLen is 32.", "notes": "The presented limit on N was incorrectly derived from the original scrypt publication. The correct theoretical upper limit on N is 2^(128 * r) for r < 5, and 2^512 for all other values of r. Thus, the least upper bound is 2^128, which far exceeds all possible values for N in the foreseeable future, making the limit irrelevant for current implementations.", "submit_date": "2020-02-02", "submitter_name": "Tobias Nie\u00dfen", "verifier_id": "", "verifier_name": null, "update_date": "2020-02-25 03:53:06"}, {"errata_id": "5974", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4.2", "orig_text": "3.4.2. WKS RDATA format\r\n\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    ADDRESS                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |       PROTOCOL        |                       |\r\n    +--+--+--+--+--+--+--+--+                       |\r\n    |                                               |\r\n    /                   <BIT MAP>                   /\r\n    /                                               /\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n\r\nwhere:\r\n\r\nADDRESS         An 32 bit Internet address\r\n\r\nPROTOCOL        An 8 bit IP protocol number\r\n\r\n<BIT MAP>       A variable length bit map.  The bit map must be a\r\n                multiple of 8 bits long", "correct_text": "3.4.2. WKS RDATA format\r\n\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    ADDRESS                    |\r\n    |                                               |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |       PROTOCOL        |                       |\r\n    +--+--+--+--+--+--+--+--+                       |\r\n    |                                               |\r\n    /                   <BIT MAP>                   /\r\n    /                                               /\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n\r\nwhere:\r\n\r\nADDRESS         An 32 bit Internet address\r\n\r\nPROTOCOL        An 8 bit IP protocol number\r\n\r\n<BIT MAP>       A variable length bit map.  The bit map must be a\r\n                multiple of 8 bits long", "notes": "There is an error in the ADDRESS field of WKS RDATA format. ADDRESS field should occupy two lines because it is 32 bit.", "submit_date": "2020-02-03", "submitter_name": "Xu Mingjie", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-02-05 00:40:38"}, {"errata_id": "7238", "doc-id": "RFC9114", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "Because this limit is applied separately by each implementation that\r\nprocesses the message, messages below this limit are not guaranteed\r\nto be accepted.\r\n", "correct_text": "Because this limit is applied separately by each implementation that\r\nprocesses the message, messages above this limit are not guaranteed\r\nto be accepted.\r\n", "notes": "The section 4.2.2 specifies header size constraints and notes that implementations can send a SETTINGS frame with a SETTINGS_MAX_FIELD_SECTION_SIZE identifier to set a limit on the maximum size of the message header. Since this a maximum size, the sentence that states that intermediaries aren't guaranteed to accept a message below this limit seems odd and I think it should instead say \"above this limit\".\n --VERIFIER NOTES-- \nThe current RFC text is correct. The problem that is being described is where 1) a client sends a message smaller than MAX_FIELD_SECTION_SIZE and might expect that to work but 2) the server is an intermediary that needs to forward the message onto another server that, for example,  has a smaller value for MAX_FIELD_SECTION_SIZE preventing this.\r\n\r\nAny further clarification to this text, if any is needed, should be made via an update to this document. We encourage you to participate in suggesting improvement/clarifications by opening an issue on the spec issue tracker (https://github.com/quicwg) or in the mailing list: <quic@ietf.org>.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/quic/8E8kNJe1VGKEjotTl3IT2oZoGGo/", "submit_date": "2022-11-04", "submitter_name": "Jaikiran Pai", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-30 08:54:40"}, {"errata_id": "5979", "doc-id": "RFC8555", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.4", "orig_text": " If the server is willing to issue the requested certificate, it\r\n   responds with a 201 (Created) response.  The body of this response is\r\n   an order object reflecting the client's request and any\r\n   authorizations the client must complete before the certificate will\r\n   be issued.\r\n\r\n", "correct_text": " If the server is willing to issue the requested certificate, it\r\n   responds with a 201 (Created) response.  The body of this response is\r\n   an order object reflecting the client's request and any\r\n   authorizations the client must complete before the certificate will\r\n   be issued. The server returns an order URL in a Location header field.\r\n", "notes": "The RFC does not specify/require where the \"order URL\" is presented.  The RFC is very explicit about where other URLs are obtained, and the common understanding is that the URL appears in a Location header after a new-order. \r\n\r\nFor example: \r\n\r\nIn 7.3; 7.3.1; 7.3.5, the RFC explicitly declares the account URL is in the Location header field.\r\n\r\nIn 7.4.1 the RFC is explicit that authorization URLs in pre-authorization appear in the Location header field.\r\n\r\nBut the order URL is only mentioned by example:\r\n\r\nIn 7.4, the RFC illustrates the order URL appearing in the Location header field (All clients seem to implement this).  In 7.1, the RFC shows a table with \"a typical sequence of requests\" that note the \"account\" and \"order\" URLs appear in the location header field.\r\n\r\nThe specification should state something to the effect of \"The server returns an order URL in a Location header field.\" making this functionality explicit.", "submit_date": "2020-02-11", "submitter_name": "jonathan vanasco", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-02-24 17:45:19"}, {"errata_id": "5980", "doc-id": "RFC8110", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   This failure should be logged, and if the client abandons association\r\n   due to the (repeated) receipt of invalid elements, notification of\r\n   this fact should be provided to the user.", "correct_text": "   This failure SHOULD be logged, and if the client abandons association\r\n   due to the (repeated) receipt of invalid elements, notification of\r\n   this fact SHOULD be provided to the user.", "notes": "Uncapitalized \"should\" used instead of RFC 2119 \"SHOULD\".\n --VERIFIER NOTES-- \nUse of RFC 2119 keywords is optional. The text is sufficiently clear with the lower-case \u201cshould\u201d. ", "submit_date": "2020-02-12", "submitter_name": "Alexander Martin", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-02-11 16:20:21"}, {"errata_id": "5981", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.2.1", "orig_text": "       Accept-Additions = \"Accept-Additions\" \":\"\r\n                          #( addition-range [ accept-params ] )\r\n\r\n        addition-type   = ( \"*\"\r\n                          | milk-type\r\n                          | syrup-type\r\n                          | sweetener-type\r\n                          | spice-type\r\n                          | alcohol-type\r\n                          ) *( \";\" parameter )", "correct_text": "       Accept-Additions = \"Accept-Additions\" \":\"\r\n                          #( addition-type [ accept-params ] )\r\n\r\n        addition-type   = ( \"*\"\r\n                          | milk-type\r\n                          | syrup-type\r\n                          | sweetener-type\r\n                          | spice-type\r\n                          | alcohol-type\r\n                          ) *( \";\" parameter )", "notes": "The Accept-Additions rule references a non-existent addition-range rule, and the addition-type rule was not referenced anywhere. I assume that addition-range was supposed to be addition-type.\r\n\r\n----- Verifier notes -----\r\nVerified by Adrian Farrel, as Independent Stream Editor.", "submit_date": "2020-02-12", "submitter_name": "Nick Harper", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-03-11 13:59:14"}, {"errata_id": "5982", "doc-id": "RFC5661", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.10.6.1.3.1", "orig_text": "   If a requester sent a Sequence operation with a slot ID and sequence\r\n   ID that are in the reply cache but the replier detected that the\r\n   retried request is not the same as the original request, including a\r\n   retry that has different operations or different arguments in the\r\n   operations from the original and a retry that uses a different\r\n   principal in the RPC request's credential field that translates to a\r\n   different user, then this is a false retry.  When the replier detects\r\n   a false retry, it is permitted (but not always obligated) to return\r\n   NFS4ERR_FALSE_RETRY in response to the Sequence operation when it\r\n   detects a false retry.", "correct_text": "   If a requester sent a Sequence operation with a slot ID and sequence\r\n   ID that are in the reply cache but the replier detected that the\r\n   retried request is not the same as the original request, including a\r\n   retry that was issued with a different XID or has different operations \r\n   or different arguments in the operations from the original and a retry \r\n   that uses a different principal in the RPC request's credential field \r\n   that translates to a different user, then this is a false retry.  When \r\n   the replier detects a false retry, it is permitted (but not always \r\n   obligated) to return NFS4ERR_FALSE_RETRY in response to the Sequence \r\n   operation when it detects a false retry", "notes": "The existing text can be read as requiring checksumming of all requests to foreclose the possibility of not noticing a false retry, which can result in data corruption.  This can be a\r\nsignificant performance consideraation in the processing of WRITE requests and could undercut the benefits of directly placing data to be written which is one of the impotant goals of RPC-over-RDMA.\n --VERIFIER NOTES-- \n   No consensus in the WG if this is just a correction. Thus rejecting the issue and may be brought for WG consenus discussion in the context of document update. ", "submit_date": "2020-02-13", "submitter_name": "David Noveck", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-09-03 11:29:29"}, {"errata_id": "5983", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "   A file of this type contains one or more certificates encoded with\r\n   the PEM textual encoding, according to [RFC7468].  The textual\r\n   encoding of certificates in this file MUST use the strict encoding\r\n   and MUST NOT include explanatory text.  The ABNF for this format is\r\n   as follows, where \"stricttextualmsg\" and \"eol\" are as defined in\r\n   Section 3 of RFC 7468:\r\n\r\n   certchain = stricttextualmsg *(eol stricttextualmsg)", "correct_text": "   A file of this type contains one or more certificates encoded with\r\n   the PEM textual encoding, according to [RFC7468].  The textual\r\n   encoding of certificates in this file MUST use the strict encoding\r\n   and MUST NOT include explanatory text.  The ABNF for this format is\r\n   as follows, where \"stricttextualmsg\" is as defined in\r\n   Section 3 of RFC 7468:\r\n\r\n   certchain = stricttextualmsg *(stricttextualmsg)", "notes": "Examples within RFC 8555 indicate that only one EOL should be present between entries in the PEM chain.\r\n\r\nRFC 7468 already defines a stricttextualmsg as ending with EOL\r\nstricttextualmsg = preeb eol\r\n                           strictbase64text\r\n                           posteb eol\r\n\r\nIf a second EOL is to be added before each strict textual message this would result in a blank line between entries.  The prior example in https://tools.ietf.org/html/rfc8555#section-7.4.2 indicates an intention for only one EOL marker to be used:\r\n   -----BEGIN CERTIFICATE-----\r\n   [End-entity certificate contents]\r\n   -----END CERTIFICATE-----\r\n   -----BEGIN CERTIFICATE-----\r\n   [Issuer certificate contents]\r\n   -----END CERTIFICATE-----\r\n   -----BEGIN CERTIFICATE-----\r\n   [Other certificate contents]\r\n   -----END CERTIFICATE-----", "submit_date": "2020-02-14", "submitter_name": "Jason Baker", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-02-29 18:25:37"}, {"errata_id": "5984", "doc-id": "RFC6052", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3", "orig_text": "Organizations deploying stateless IPv4/IPv6 translation SHOULD assign a Network-Specific Prefix to their IPv4/IPv6 translation service.", "correct_text": "Organizations deploying stateless IPv4/IPv6 translation SHOULD assign a Network-Specific Prefix for the exclusive use of their IPv4/IPv6 translation service.", "notes": "This seems obvious but is not. The NSP must only be used for the translation service. If the NSP is used only, for example in an enterprise network, in the LANs, and the translator allows it, it may create conflicts, as the resulting IPv6 address (NSP+IPv4 address) may be the same as a host inside the LAN has been configured with (either manually, or with SLAAC, DHCPv6), etc.\r\n\r\nIt has been confirmed that at least one vendor already realized this and the implementation doesn't work if the prefix is used both for the translator service and one of the LANs, but there is no explicit documentation on that. So if configured, the box doesn't work, but doesn't report is an an \"invalid\" config.\n --VERIFIER NOTES-- \nThis Errata requests requires WG consensus decision and thus outside of the Errata process. The specification does not prevent what is propsed as the appropriate way of assigning a NSP. The RFC does not restrict the usage, and as commented on the mailing list, there are ways to make even using the same prefix for both clients and the NAT64 device. ", "submit_date": "2020-02-16", "submitter_name": "Jordi Palet Martinez", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-02-17 09:26:25"}, {"errata_id": "5985", "doc-id": "RFC8225", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "eyJkZXN0Ijp7InVyaSI6WyJzaXA6YWxpY2VAZXhhbXBsZS5jb20iXX0sImlhdCI\r\n6IjE0NDMyMDgzNDUiLCJvcmlnIjp7InRuIjoiMTIxNTU1NTEyMTIifX0", "correct_text": "eyJkZXN0Ijp7InVyaSI6WyJzaXA6YWxpY2VAZXhhbXBsZS5jb20iXX0sImlhdCI\r\n6MTQ0MzIwODM0NSwib3JpZyI6eyJ0biI6IjEyMTU1NTUxMjEyIn19Cg", "notes": "The \"iat\" claim in the example's JWT payload is incorrectly encoded as a string (with double-quotes around its value), instead of a number (without double-quotes).\r\nWRONG: Base64url( ... \"iat\":\"1443208345\", ... ) = ... 6IjE0NDMyMDgzNDUiLCJv ...\r\nRIGHT: Base64url( ... \"iat\":1443208345,   ... ) = ... 6MTQ0MzIwODM0NSwi ...\r\n\r\nThe same example appears in Appendix A, where it is correct. I assume the JWS signature in section 7.1 should also be replaced with the value from Appendix A.", "submit_date": "2020-02-20", "submitter_name": "James Manger", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5986", "doc-id": "RFC7940", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.1", "orig_text": "   A simple rule to match a label where all characters are members of\r\n   some class called \"preferred-codepoint\":          \r\n\r\n       <rule name=\"preferred-label\">\r\n           <start />\r\n           <class by-ref=\"preferred-codepoint\" count=\"1\"/>\r\n           <end />\r\n       </rule>", "correct_text": "   A simple rule to match a label where all characters are members of\r\n   some class called \"preferred-codepoint\":           \r\n\r\n       <rule name=\"preferred-label\">\r\n           <start />\r\n           <class by-ref=\"preferred-codepoint\" count=\"1+\"/>\r\n           <end />\r\n       </rule>", "notes": "Currently the value for count is 1, which means that the rule will match a label composed of only one char.\r\nHowever, since the rule is supposed to match a label composed one or more chars, the value ofr count must be \"1+\" .", "submit_date": "2020-02-22", "submitter_name": "KIM Kyongsok", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-02-22 18:43:44"}, {"errata_id": "5987", "doc-id": "RFC7940", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.1", "orig_text": "   Variant code points are specified using one of more \"var\" elements as\r\n   children of a \"char\" element.  ", "correct_text": "   Variant code points are specified using one or more \"var\" elements as\r\n   children of a \"char\" element.  ", "notes": "Based on the context, \"one or more\" seems correct, NOT \"one of more\".", "submit_date": "2020-02-22", "submitter_name": "KIM Kyongsok", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-02-22 18:45:37"}, {"errata_id": "7239", "doc-id": "RFC8182", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "Certificate Authorities that use RRDP MUST include an instance of an\r\nSIA AccessDescription extension in resource certificates they\r\nproduce, in addition to the ones defined in [RFC6487]:", "correct_text": "Certificate Authorities that use RRDP MUST include an instance of an\r\nSIA AccessDescription extension in CA resource certificates they\r\nproduce, in addition to the ones defined in [RFC6487]:", "notes": "Between draft-ietf-sidr-delta-protocol-04 and draft-ietf-sidr-delta-protocol-05 a bit of text was removed (perhaps because it was considered redundant). But, unfortunately that snippet helped establish important context as to what types of certificates are expected to contain the id-ad-rpkiNotify accessMethod inside the Subject Information Access extension. The text that was removed:\r\n\r\n\"\"\"\r\nRelying Parties that do not support this delta protocol MUST MUST NOT\r\nreject a CA certificate merely because it has an SIA extension\r\ncontaining this new kind of AccessDescription.\r\n\"\"\"\r\n\r\nFrom the removed text is is clear that id-ad-rpkiNotify was only expected to show up on CA certificates. However, without the above text, Section 3.2 of RFC 8182 is somewhat ambiguous whether 'resource certificates' is inclusive of EE certificates or not.\r\n\r\nRFC 6487 Section 4.8.8.2 sets expectations that only id-ad-signedObject is expected to show up in the SIA of EE certificates \"Other AccessMethods MUST NOT be used for an EE certificates's SIA.\"\r\n\r\nThe ambiguity in RFC8182 led to one RIR including id-ad-rpkiNotify in the SIA of the EE certificate of all signed objects they produce (such as ROAs). The RIR indicated they'll work to remove id-ad-rpkiNotify from all EE certificates their CA implementation produces.\r\n\r\nIt should be noted that the presence of id-ad-rpkiNotify in EE certificates is superfluous; Relying Parties can't use the rpkiNotify accessMethod in EE certificates for any purpose in the validation decision tree.\r\n\r\n(Verifying this Errata does not block a future transition from rsync to https; as RFC6487 Section 4.8.8.2 leaves room for additional instances of id-ad-signedObject with non-rsync URIs)", "submit_date": "2022-11-04", "submitter_name": "Job Snijders", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2023-02-08 17:31:43"}, {"errata_id": "5990", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "  \"addresses\": [\r\n    {\r\n      \"type\": \"work\",\r\n      \"streetAddress\": \"100 Universal City Plaza\",\r\n      \"locality\": \"Hollywood\",\r\n      \"region\": \"CA\",\r\n      \"postalCode\": \"91608\",\r\n      \"country\": \"USA\",\r\n      \"formatted\": \"100 Universal City Plaza\\nHollywood, CA 91608 USA\",\r\n      \"primary\": true\r\n    },\r\n    {\r\n      \"type\": \"home\",\r\n      \"streetAddress\": \"456 Hollywood Blvd\",\r\n      \"locality\": \"Hollywood\",\r\n      \"region\": \"CA\",\r\n      \"postalCode\": \"91608\",\r\n      \"country\": \"USA\",\r\n      \"formatted\": \"456 Hollywood Blvd\\nHollywood, CA 91608 USA\"\r\n    }\r\n  ],", "correct_text": "  \"addresses\": [\r\n    {\r\n      \"type\": \"work\",\r\n      \"streetAddress\": \"100 Universal City Plaza\",\r\n      \"locality\": \"Hollywood\",\r\n      \"region\": \"CA\",\r\n      \"postalCode\": \"91608\",\r\n      \"country\": \"US\",\r\n      \"formatted\": \"100 Universal City Plaza\\nHollywood, CA 91608 USA\",\r\n      \"primary\": true\r\n    },\r\n    {\r\n      \"type\": \"home\",\r\n      \"streetAddress\": \"456 Hollywood Blvd\",\r\n      \"locality\": \"Hollywood\",\r\n      \"region\": \"CA\",\r\n      \"postalCode\": \"91608\",\r\n      \"country\": \"US\",\r\n      \"formatted\": \"456 Hollywood Blvd\\nHollywood, CA 91608 USA\"\r\n    }\r\n  ],", "notes": "Section 4.1.2 requires the use of the ISO 3166-1 \"alpha-2\" code format for the \"country\" attribute; however, sections 8.2 and 8.3 incorrectly specify \"USA\" instead of \"US\" for the \"country\" attribute.", "submit_date": "2020-02-26", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-02-26 21:40:10"}, {"errata_id": "5991", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.3", "orig_text": "  \"addresses\": [\r\n    {\r\n      \"streetAddress\": \"100 Universal City Plaza\",\r\n      \"locality\": \"Hollywood\",\r\n      \"region\": \"CA\",\r\n      \"postalCode\": \"91608\",\r\n      \"country\": \"USA\",\r\n      \"formatted\": \"100 Universal City Plaza\\nHollywood, CA 91608 USA\",\r\n      \"type\": \"work\",\r\n      \"primary\": true\r\n    },\r\n    {\r\n      \"streetAddress\": \"456 Hollywood Blvd\",\r\n      \"locality\": \"Hollywood\",\r\n      \"region\": \"CA\",\r\n      \"postalCode\": \"91608\",\r\n      \"country\": \"USA\",\r\n      \"formatted\": \"456 Hollywood Blvd\\nHollywood, CA 91608 USA\",\r\n      \"type\": \"home\"\r\n     }\r\n  ],", "correct_text": "  \"addresses\": [\r\n    {\r\n      \"streetAddress\": \"100 Universal City Plaza\",\r\n      \"locality\": \"Hollywood\",\r\n      \"region\": \"CA\",\r\n      \"postalCode\": \"91608\",\r\n      \"country\": \"US\",\r\n      \"formatted\": \"100 Universal City Plaza\\nHollywood, CA 91608 USA\",\r\n      \"type\": \"work\",\r\n      \"primary\": true\r\n    },\r\n    {\r\n      \"streetAddress\": \"456 Hollywood Blvd\",\r\n      \"locality\": \"Hollywood\",\r\n      \"region\": \"CA\",\r\n      \"postalCode\": \"91608\",\r\n      \"country\": \"US\",\r\n      \"formatted\": \"456 Hollywood Blvd\\nHollywood, CA 91608 USA\",\r\n      \"type\": \"home\"\r\n     }\r\n  ],", "notes": "Section 4.1.2 requires the use of the ISO 3166-1 \"alpha-2\" code format for the \"country\" attribute; however, sections 8.2 and 8.3 incorrectly specify \"USA\" instead of \"US\" for the \"country\" attribute.", "submit_date": "2020-02-26", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-02-26 21:38:55"}, {"errata_id": "5992", "doc-id": "RFC8700", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.", "orig_text": "would be several years before\r\n   ideas like mobile code, remote procedure calls, ActiveX, JAVA, and\r\n   Representational State Transfer (RESTful) interfaces appeared.\r\n", "correct_text": "would be several years before\r\n   ideas like mobile code, remote procedure calls, ActiveX, Java, and\r\n   Representational State Transfer (RESTful) interfaces appeared.\r\n", "notes": "Java doesn't stand for anything else. It's a name not an acronym.", "submit_date": "2020-02-26", "submitter_name": "Nicole Ortizo", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2024-01-11 16:32:59"}, {"errata_id": "5993", "doc-id": "RFC7155", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Redirected-Host*", "correct_text": "Redirect-Host*", "notes": "I did not find AVP Redirected-Host defined anywhere, however there is Redirect-Host in RFC 6733 (same with Redirected-Host-Usage)\r\n\r\n[WK: Note that Errata 5993, 5994, 5995 are all related / similar. Readers are encouraged to read all 3 ]", "submit_date": "2020-02-27", "submitter_name": "Michal Liptak", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-03-04 18:03:40"}, {"errata_id": "5994", "doc-id": "RFC7155", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "Redirected-Host-Cache-Time", "correct_text": "Redirect-Max-Cache-Time", "notes": "As per RFC 6733 section 8.3.2\r\n\r\n[WK: Note that Errata 5993, 5994, 5995 are all related / similar. Readers are encouraged to read all 3 ]", "submit_date": "2020-02-27", "submitter_name": "Michal Liptak", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-03-16 04:43:37"}, {"errata_id": "5995", "doc-id": "RFC7155", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Connection-Info", "correct_text": "Connect-Info", "notes": "typo in AVP name\r\n\r\n[WK: Note that Errata 5993, 5994, 5995 are all related / similar. Readers are encouraged to read all 3 ]", "submit_date": "2020-02-27", "submitter_name": "Michal Liptak", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-03-04 18:03:53"}, {"errata_id": "5996", "doc-id": "RFC8163", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.", "orig_text": "       /*\r\n        * Sanity check the encoding to prevent the while() loop below\r\n        * from overrunning the output buffer.\r\n        */\r\n       if (read_index + code > length)\r\n         return 0;\r\n", "correct_text": "       /*\r\n        * Sanity check the encoding to prevent the while() loop below\r\n        * from overrunning the output buffer.\r\n        */\r\n       if (code == 0 || read_index + code > length)\r\n         return 0;\r\n", "notes": "This was submitted as a change to [BACnet], Annex T, by James Butler.  The normative procedure for decoding COBS is correct in [BACnet], 9.10.3.2(a) but this bug appears in the informative example in Annex T.  Since the purpose of COBS encoding is to eliminate all zero bytes from the data, the presence of a zero indicates an error.", "submit_date": "2020-02-27", "submitter_name": "Kerry Lynn", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-08-06 05:28:19"}, {"errata_id": "5997", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.1.10", "orig_text": "   DNS name restrictions are expressed as host.example.com.  Any DNS\r\n   name that can be constructed by simply adding zero or more labels to\r\n   the left-hand side of the name satisfies the name constraint.  For\r\n   example, www.host.example.com would satisfy the constraint but\r\n   host1.example.com would not.\r\n", "correct_text": "   For DNS names, restrictions MUST use the dNSName syntax in\r\n   Section 4.2.1.6.  Any DNS name that can be constructed by simply\r\n   adding zero or more labels to the left-hand side of the name satisfies\r\n   the name constraint.  For example, if the constraint contains\r\n   host.example.com, then www.host.example.com would satisfy the\r\n   constraint but host1.example.com would not.", "notes": "Currently, the syntax for a dNSName nameConstraint is left implicit, and thus has resulted in ambiguities in encoding and processing that have resulted in ineroperability issues.\r\n\r\nOne interpretation is that the dNSName nameConstraint must be a valid \"host name\" (as discussed in RFC 8499), which is to say must be a Fully-Qualified Domain Name in the preferred name syntax. This interpretation is supported by Section 4.2.1.6, which explicitly states that for the subjectAltName. As 4.2.1.10 does not define an exception to this (as discussed in Appendix B), the interpretation, along with the existing example, would conclude that this field uses preferred name syntax, and that \"DNS name\" here matches the \"host name\" interpretation from RFC 8499\r\n\r\nA different interpretation is that the dNSName nameConstraint uses the modified syntax similar to the URI nameConstraint. That is, it explicitly permits a leading period to indicate that one or more labels preceding is required in order to satisfy the constraint. This allows subdomains, but does not allow the base domain to match. While the language for the DNS name constraint makes it clear that a host name with no preceding period matches both that host and sub-domains, the existence of a preceding period would constraint it to only subdomains.\r\n\r\nAligning with Section 4.2.1.6 would prohibit the latter interpretation, as the preferred name syntax does not permit leading periods. Alternatively, if the latter interpretation is intended, this section would benefit from making that explicit.\r\n\r\nThis has been a source of interoperability issues, with additional information and discussion captured at:\r\n- https://github.com/golang/go/issues/16347\r\n- https://rt.openssl.org/Ticket/Display.html?id=3562\r\n\r\nWhile \"running code\" has aligned in being permissive with a leading period, implementations have gone and seemingly aligned on a third interpretation:\r\n\r\nThe syntax of a dNSName MUST be as described in Section 4.2.1.6, with the exception that it MAY contain a leading period. Any DNS name that can be constructed by simply adding zero or more labels to the left-hand side of the name, ignoring any leading period, satisfies the name constraint.\r\n\r\nThis seems to support implementations expecting the first interpretation in the certificates they receive, and seeing leading period as an encoding mistake, not an explicit desire for the second interpretation.", "submit_date": "2020-02-27", "submitter_name": "Ryan Sleevi", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-03-17 05:13:33"}, {"errata_id": "5998", "doc-id": "RFC7464", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "in contexts where, for example, data that is appended to log files to log files is truncated by the filesystem", "correct_text": "in contexts where, for example, data that is appended to log files is truncated by the filesystem", "notes": "the text \"to log files\" is accidentally duplicated within the sentence", "submit_date": "2020-03-01", "submitter_name": "Claes Wallin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6000", "doc-id": "RFC7643", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"x509Certificates\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of certificates issued to the User.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"binary\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The value of an X.509 certificate.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "correct_text": "      {\r\n        \"name\" : \"x509Certificates\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of certificates issued to the User.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"binary\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The value of an X.509 certificate.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : true,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "notes": "Section 2.3.6 indicates that \"binary is case exact.\" The \"x509Certificates\" binary \"value\" subattribute's \"caseExact\" characteristic is currently listed as \"false\", but should be \"true\".", "submit_date": "2020-03-02", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6001", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"profileUrl\",\r\n        \"type\" : \"reference\",\r\n        \"referenceTypes\" : [\"external\"],\r\n        \"multiValued\" : false,\r\n        \"description\" : \"A fully qualified URL pointing to a page representing the User's online profile.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n\r\n\r\n      {\r\n        \"name\" : \"photos\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"URLs of photos of the User.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\"external\"],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"URL of a photo of the User.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n\r\n\r\n          {\r\n            \"name\" : \"$ref\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\r\n              \"User\",\r\n              \"Group\"\r\n            ],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The URI of the corresponding 'Group' resource to which the user belongs.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "correct_text": "      {\r\n        \"name\" : \"profileUrl\",\r\n        \"type\" : \"reference\",\r\n        \"referenceTypes\" : [\"external\"],\r\n        \"multiValued\" : false,\r\n        \"description\" : \"A fully qualified URL pointing to a page representing the User's online profile.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : true,\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n\r\n\r\n      {\r\n        \"name\" : \"photos\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"URLs of photos of the User.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\"external\"],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"URL of a photo of the User.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : true,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n\r\n\r\n          {\r\n            \"name\" : \"$ref\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\r\n              \"User\",\r\n              \"Group\"\r\n            ],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The URI of the corresponding 'Group' resource to which the user belongs.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : true,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "notes": "Section 2.3.7 indicates that \"A reference is case exact.\" Section 8.7.1 defines a number of \"reference\" attributes that incorrectly have the \"caseExact\" characteristic set to \"false\"; these should instead be \"true.\"", "submit_date": "2020-03-02", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:40:35"}, {"errata_id": "6002", "doc-id": "RFC8422", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "   IANA has assigned two values in the \"TLS SignatureAlgorithm\" registry\r\n   for ed25519 (7) and ed448 (8) with this document as reference.  This\r\n   keeps compatibility with TLS 1.3.\r\n", "correct_text": "   IANA has assigned two values in the \"TLS SignatureAlgorithm\" registry\r\n   for ed25519 (7) and ed448 (8) with DTLS-OK set to \"Y\" and this document\r\n   as reference.  This keeps compatibility with TLS 1.3.", "notes": "IANA had consulted with Yoav, one of the authors (and a TLS registry expert), who explicitly told them to use DTLS-OK of \"Y\", but this clarification was not reflected in the final RFC.  This also matches the text in the subsequent paragraph.", "submit_date": "2020-03-02", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-03-05 22:34:52"}, {"errata_id": "6003", "doc-id": "RFC8200", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   Extension headers (except for the Hop-by-Hop Options header) are not\r\n   processed, inserted, or deleted by any node along a packet's delivery\r\n   path, until the packet reaches the node (or each of the set of nodes,\r\n   in the case of multicast) identified in the Destination Address field\r\n   of the IPv6 header.\r\n\r\n   The Hop-by-Hop Options header is not inserted or deleted, but may be\r\n   examined or processed by any node along a packet's delivery path,\r\n   until the packet reaches the node (or each of the set of nodes, in\r\n   the case of multicast) identified in the Destination Address field of\r\n   the IPv6 header.  The Hop-by-Hop Options header, when present, must\r\n   immediately follow the IPv6 header.  Its presence is indicated by the\r\n   value zero in the Next Header field of the IPv6 header.", "correct_text": "   The source node of a packet, identified by the source address, may\r\n   include extension headers in a packet when it is created. Extension\r\n   headers must not be inserted or removed or have their length altered\r\n   by any node for the lifetime of the IPv6 packet. Note that it follows\r\n   from these requirements that the length of an IPv6 packet cannot\r\n   change once the packet has been created by the source node. The\r\n   aforementioned rules apply to all IPv6 extension headers.\r\n\r\n   Extension headers (except for the Hop-by-Hop Options header, a\r\n   Routing Header, or a Destination Options header preceding a Routing\r\n   Header) are not processed by any node along a packet's delivery path,\r\n   until the packet reaches the final destination node (or each of the\r\n   set of final destination nodes, in the case of multicast).\r\n\r\n   For packets that do not include a Routing Header, the final\r\n   destination node is identified by the Destination Address field of\r\n   the IPv6 header. For packets that include a Routing Header, the final\r\n   destination node is identified by the Destination Address field of\r\n   the IPv6 header only when the Segments Left field of the Routing\r\n   Header is 0.\r\n\r\n   The Hop-by-Hop Options header may be examined or processed by any\r\n   node along a packet's delivery path, until the packet reaches the\r\n   final destination node (or each of the set of final destination\r\n   nodes, in the case of multicast). The Hop-by-Hop Options header, when\r\n   present, must immediately follow the IPv6 header.  Its presence is\r\n   indicated by the value zero in the Next Header field of the IPv6\r\n   header.\r\n\r\n   A Destination Options header preceding a Routing Header is processed\r\n   only by the destination node (or each of the set of destination\r\n   nodes, in the case of multicast) identified by the Destination\r\n   Address field of the IPv6 header. This means that a Destination\r\n   Options header preceding a Routing Header will be processed by the\r\n   first destination of the packet (specified by the Destination Address\r\n   field of the IPv6 header at the source node) and by each node listed\r\n   in the Routing Header.\r\n\r\n   A Routing Header is processed only by the destination node (or each\r\n   of the set of destination nodes, in the case of multicast) identified\r\n   by the Destination Address field of the IPv6 header. This means that\r\n   a Routing Header will be processed by the first destination of the\r\n   packet (specified by the Destination Address field of the IPv6 header\r\n   at the source node) and by each node listed in the Routing Header. ", "notes": "This erratum addresses the following problems from RFC8200:\r\n\r\n* It clarifies that IPv6 does not support en-route insertion/removal\r\n  of IPv6 Extension Headers\r\n\r\n* Clarifies the the processing rules for Routing Headers and Destination\r\n  Options headers preceding a Routing Header.\r\n\r\n\r\nRATIONALE:\r\n\r\nIPv6 never supported the en-route insertion/removal of IPv6 Extension Headers, since it would have broken a number of IPv6 core components, including:\r\n\r\n* IPsec Authentication Header (AH)\r\n\r\n* Path-MTU Discovery for IPv6 (RFC8201)\r\n\r\n* Error reporting based on ICMPv6 error messages (RFC4443), since hosts\r\n  validate that received error messages correspond to packets sent by\r\n  the host receiving the error message.\r\n\r\n\r\nIt was the intent of RFC8200 to clarify this behavior, as noted by Appendix B (\"Changes Since RFC 2460\") of RFC8200:\r\n\r\n   o  Clarified that extension headers (except for the Hop-by-Hop\r\n      Options header) are not processed, inserted, or deleted by any\r\n      node along a packet's delivery path.\r\n\r\nhowever, the resulting text was far from perfect. This erratum means to more closely reflect and respect the intent of RFC8200.\r\n\r\nThe corrected text has benefited from the review and input from Ron Bonica, Brian Carpenter, and Tom Herbert.\n --VERIFIER NOTES-- \nSection 3 clearly highlights for the reader when the IPv6 Destination Address in the header might differ from the IPv6 address of the ultimate destination.\r\n\r\nAs such, all references in the document to \"Destination Address\" lacking further qualifying text should be read bearing this in mind.  The text in section 4 is no exception.  The key text has remained unchanged since RFC 1883.\r\n\r\nThough it may be fraught with operational peril, including impeding the correct processing by the source node of a received ICMPv6 error message's encapsulated packet payload, a strict literal reading of the existing text affords any node in the header's Destination Address field a (possibly surprising) degree of flexibility in the handling of extension headers.\r\n\r\nIf IPsec AH (RFC 4302) were in use, the overall IPv6 header Payload Length field would need to remain intact, but the contents of certain types of extension headers between the IPv6 header and the AH header may not need to be preserved.  If AH is not in use, it is not clear that any AH-related requirements need apply at all.\r\n\r\nGiven the continuing discussion, whether this text (and its strict literal interpretation) is a feature or a bug appears to lack consensus.\r\n\r\nIn fact, considering the apparent lack of substantive progress toward resolution on this issue in the working group since https://www.rfc-editor.org/errata/eid5933 previously attempted to revise this text, continuing use of the erratum report process for this could risk the appearance of bypassing the working group consensus process.\r\n\r\nThe text from Section 3 makes it clear that making the kind of change proposed would require a consensus change; this is not a matter to be address by an erratum alone.\r\n", "submit_date": "2020-03-02", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2020-05-10 18:41:11"}, {"errata_id": "6004", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"name\",\r\n        \"type\" : \"complex\",\r\n        ...\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n      ...\r\n      {\r\n        \"name\" : \"emails\",\r\n        \"type\" : \"complex\",\r\n        ...\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n      ...\r\n      {\r\n        \"name\" : \"addresses\",\r\n        \"type\" : \"complex\",\r\n        ...\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n", "correct_text": "      {\r\n        \"name\" : \"name\",\r\n        \"type\" : \"complex\",\r\n        ...\r\n      },\r\n      ...\r\n      {\r\n        \"name\" : \"emails\",\r\n        \"type\" : \"complex\",\r\n        ...\r\n      },\r\n      ...\r\n      {\r\n        \"name\" : \"addresses\",\r\n        \"type\" : \"complex\",\r\n        ...\r\n      },\r\n", "notes": "The \"emails\", \"name\", and \"addresses\" complex user attributes have a \"uniqueness\" characteristic defined. According to Section 2.3.8, complex attributes have no uniqueness. No other complex attributes in Section 8.7.1 specify a \"uniqueness\" characteristic. For compliance with Section 2.3.8 and consistency with other attribute definitions, the \"uniqueness\" sub-attribute for these complex attributes should be removed.", "submit_date": "2020-03-03", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:41:54"}, {"errata_id": "6005", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"addresses\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A physical mailing address for this User. Canonical type values of 'work', 'home', and 'other'.  This attribute is a complex type with the following sub-attributes.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"formatted\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The full mailing address, formatted for display or use with a mailing label.  This attribute MAY contain newlines.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"streetAddress\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The full street address component, which may include house number, street name, P.O. box, and multi-line extended street address information.  This attribute MAY contain newlines.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"locality\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The city or locality component.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"region\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The state or region component.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"postalCode\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The zip code or postal code component.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"country\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The country name component.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"type\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A label indicating the attribute's function, e.g., 'work' or 'home'.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"canonicalValues\" : [\r\n              \"work\",\r\n              \"home\",\r\n              \"other\"\r\n            ],\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          }\r\n        ],\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "correct_text": "      {\r\n        \"name\" : \"addresses\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A physical mailing address for this User. Canonical type values of 'work', 'home', and 'other'.  This attribute is a complex type with the following sub-attributes.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"formatted\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The full mailing address, formatted for display or use with a mailing label.  This attribute MAY contain newlines.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"streetAddress\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The full street address component, which may include house number, street name, P.O. box, and multi-line extended street address information.  This attribute MAY contain newlines.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"locality\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The city or locality component.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"region\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The state or region component.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"postalCode\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The zip code or postal code component.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"country\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The country name component.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"type\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A label indicating the attribute's function, e.g., 'work' or 'home'.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"canonicalValues\" : [\r\n              \"work\",\r\n              \"home\",\r\n              \"other\"\r\n            ],\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"primary\",\r\n            \"type\" : \"boolean\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A Boolean value indicating the 'primary' or preferred attribute value for this attribute, e.g., the preferred mailing address.  The primary attribute value 'true' MUST appear no more than once.\",\r\n            \"required\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\"\r\n          }\r\n        ],\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "notes": "The \"addresses\" user attribute should specify a \"primary\" sub-attribute. \"addresses\" is a multi-valued attribute. According to Section 2.4, multi-valued attributes include a \"primary\" sub-attribute. The \"primary\" sub-attribute text even mentions this attribute's use for mailing \"addresses.\"", "submit_date": "2020-03-03", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:25:11"}, {"errata_id": "6007", "doc-id": "RFC7643", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"preferredLanguage\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"Indicates the User's preferred written or\r\nspoken language.  Generally used for selecting a localized user\r\ninterface; e.g., 'en_US' specifies the language English and country\r\nUS.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "correct_text": "      {\r\n        \"name\" : \"preferredLanguage\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"Indicates the User's preferred written or\r\nspoken language.  Generally used for selecting a localized user\r\ninterface; e.g., 'en-US' specifies the language English and country\r\nUS.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "notes": "The \"preferredLanguage\" attribute, as defined in Section 4.1.1, follows RFC 7231's \"Accept-Language\" format, where \"en_US\" would not be syntactically valid, since language tags are separated by hyphens, not underscores.", "submit_date": "2020-03-04", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6008", "doc-id": "RFC8357", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |    OPTION_RELAY_PORT    |         Option-Len                  |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |    Downstream Source Port     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n ", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |       OPTION_RELAY_PORT       |         Option-Len            |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |    Downstream Source Port     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Discrepancy between the diagram and the text noted by draft-mcquistin-augmented-ascii-diagrams-02.\r\n\r\n-- Verifier note --\r\nThere is clearly an error in the diagram that does not reflect the text. As the text is sensible and used as a reference, implementors will follow the text. Hence, the status of 'hold for document update' as it does not cause significant implementation error.", "submit_date": "2020-03-05", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-28 10:13:16"}, {"errata_id": "6009", "doc-id": "RFC8447", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "14", "orig_text": "   o  Added a \"Recommended\" column to the registry.  X.509 and Raw\r\n", "correct_text": "   o  Added a \"Recommended\" column to the registry.  X509 and Raw\r\n", "notes": "Update to match https://www.rfc-editor.org/errata/eid5976", "submit_date": "2020-03-07", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:44:47"}, {"errata_id": "6010", "doc-id": "RFC7644", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "\"totalResults\":2,\r\n\"itemsPerPage\":10,", "correct_text": "\"totalResults\":2,\r\n\"itemsPerPage\":2,", "notes": "Per Section 3.4.2.4, \"itemsPerPage\" specifies the number of query results returned in a page. In Section 4 Figure 9, the page contains only 2 items, so the \"itemsPerPage\" should be 2 not 10.", "submit_date": "2020-03-09", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7240", "doc-id": "RFC5880", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.8.1", "orig_text": "   bfd.LocalDiag\r\n\r\n      The diagnostic code specifying the reason for the most recent\r\n      change in the local session state.  This MUST be initialized to\r\n      zero (No Diagnostic).", "correct_text": "No proposed changes are offered here. See the notes for further discussion.", "notes": "RFC 5880 at various points calls out setting the value of bfd.LocalDiag as part of state transitions. The text defining the feature calls for it to be initialized to zero. Discussion on the WG mailing list following the filing of the initial version of this erratum revealed two things:\r\n\r\nFirst, the text of the RFC is correct, complete, and reflects the authors\u2019 intention at the time of writing, which really WAS that the value should only be initialized to zero but not reset to zero at any other time. \r\n\r\nSecond, by not emphasizing this point, the spec although formally speaking unambiguous, left space for implementors to exercise their intuitions and creativity. As a result, several implementations are reported to reset this value to zero when the session transitions back to Up.\r\n\r\nThe discussion is archived at https://mailarchive.ietf.org/arch/msg/rtg-bfd/yEOx2LTO51zq1he6vChUOVJySqM/ . If a new version of RFC 5880 is prepared in the future, this question should be reopened as part of that process. It would also be possible to offer a standards track document to update RFC 5880 in this respect if WG consensus can be found for a new approach. ", "submit_date": "2022-11-06", "submitter_name": "Jeffrey Haas", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2023-03-10 16:28:55"}, {"errata_id": "6011", "doc-id": "RFC7643", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"members\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of members of the Group.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"Identifier of the member of this Group.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"immutable\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"$ref\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\r\n              \"User\",\r\n              \"Group\"\r\n            ],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The URI corresponding to a SCIM resource\r\nthat is a member of this Group.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"immutable\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"type\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A label indicating the type of resource,\r\ne.g., 'User' or 'Group'.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"canonicalValues\" : [\r\n              \"User\",\r\n              \"Group\"\r\n            ],\r\n            \"mutability\" : \"immutable\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          }\r\n        ],\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\"\r\n      }", "correct_text": "      {\r\n        \"name\" : \"members\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of members of the Group.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"Identifier of the member of this Group.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"immutable\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"$ref\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\r\n              \"User\",\r\n              \"Group\"\r\n            ],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The URI corresponding to a SCIM resource\r\nthat is a member of this Group.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"immutable\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"type\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A label indicating the type of resource,\r\ne.g., 'User' or 'Group'.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"canonicalValues\" : [\r\n              \"User\",\r\n              \"Group\"\r\n            ],\r\n            \"mutability\" : \"immutable\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\": \"display\",\r\n            \"type\": \"string\",\r\n            \"multiValued\": false,\r\n            \"description\": \"A human-readable name for the group member, primarily used for display purposes.\",\r\n            \"required\": false,\r\n            \"caseExact\": false,\r\n            \"mutability\": \"readOnly\",\r\n            \"returned\": \"default\",\r\n            \"uniqueness\": \"none\"\r\n          }\r\n        ],\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\"\r\n      }", "notes": "The group \"members\" attribute should define a \"display\" sub-attribute.\r\n\r\n* Section 2.4 defines a standard multi-valued read-only attribute of \"display\".\r\n* The Group Representation example in Section 8.4 also includes the \"members.display\" sub-attribute.\r\n* This discussion in the SCIM mailing list [1] also indicates that this should be fixed.\r\n\r\n[1] https://mailarchive.ietf.org/arch/msg/scim/EH99Gxn-hDluihMNtWLIekuFCs8/", "submit_date": "2020-03-09", "submitter_name": "Shelley Baker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6012", "doc-id": "RFC8231", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.8.3", "orig_text": "   If the PCC receives a PCUpd message for an LSP object\r\n   identified with a PLSP-ID that does not exist on the PCC, it MUST\r\n   generate a PCErr with Error-type=19 (Invalid Operation), error-value\r\n   3, (Attempted LSP Update Request for an LSP identified by an unknown\r\n   PSP-ID) (see Section 8.5).", "correct_text": "   If the PCC receives a PCUpd message for an LSP object\r\n   identified with a PLSP-ID that does not exist on the PCC, it MUST\r\n   generate a PCErr with Error-type=19 (Invalid Operation), error-value\r\n   3, (Attempted LSP Update Request for an LSP identified by an unknown\r\n   PLSP-ID) (see Section 8.5).", "notes": "s/PSP-ID/PLSP-ID/ \r\n\r\nThanks to Rebecca Vanrheenen from RFC Editor team for spotting this while editing another I-D.", "submit_date": "2020-03-10", "submitter_name": "Dhruv Dhody", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-07-13 20:35:28"}, {"errata_id": "6013", "doc-id": "RFC6381", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "For example, MPEG-4 Visual Simple Profile Level 0 has the value 9, so a complete string for MPEG-4 Visual Simple Profile Level 0 would be \"mp4v.20.9\".\r\n\r\n[...]\r\n\r\nContent-Type: video/3gpp2; codecs=\"mp4v.20.9, mp4a.E1\"\r\n    (MPEG-4 Visual Simple Profile Level 0 plus 13K voice)", "correct_text": "For example, MPEG-4 Part 2 Visual \"Simple Profile\" Level 0 has the value 8, so a complete string for MPEG-4 Part 2 Visual \"Simple Profile\" Level 0 would be \"mp4v.20.8\".\r\n\r\n[...]\r\n\r\nContent-Type: video/3gpp2; codecs=\"mp4v.20.8, mp4a.E1\"\r\n    (MPEG-4 Visual Simple Profile Level 0 plus 13K voice)", "notes": "The MPEG-4 Visual Part 2, Annex G table G.1 lists the \"Simple Profile/Level 0\" profile-and-level indication code as 00001000 (decimal 8), and states that the indication code 00001001 (decimal 9) is Reserved.\r\n\r\nRFC6381 gives an example stating \"MPEG-4 Visual Simple Profile Level 0 has the value 9\" - but this is incorrect because the specification states the value 9 is reserved and that Simple Profile with Level 0 is 8.", "submit_date": "2020-03-10", "submitter_name": "Dai Rees", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6014", "doc-id": "RFC3549", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.3.3.2", "orig_text": "le attributes:", "correct_text": "Applicable attributes:", "notes": "", "submit_date": "2020-03-10", "submitter_name": "Andrea Grisotto", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-07-21 15:11:48"}, {"errata_id": "6015", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "17", "orig_text": "CB_SEQUENCE             | OPT  ", "correct_text": "CB_SEQUENCE             | REQ", "notes": "The section 20.9.3 of CB_SEQUENCE says\r\n\r\n\"In each CB_COMPOUND request, CB_SEQUENCE MUST appear once and MUST be the\r\n   first operation.  The error NFS4ERR_SEQUENCE_POS MUST be returned\r\n   when CB_SEQUENCE is found in any position in a CB_COMPOUND beyond the\r\n   first.  If any other operation is in the first position of CB_COMPOUND, NFS4ERR_OP_NOT_IN_SESSION MUST be returned.\"\r\n\r\nSince CB_RECALL_SLOT is REQ operation in NFSv4.1. This make CB_COMPOUND as REQ procedure. Since CB_COMPOUND require CB_SEQUENCE as its first operation and hence CB_SEQUENCE must be required operation.", "submit_date": "2020-03-12", "submitter_name": "Sushil Agarwal", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-09-04 07:27:05"}, {"errata_id": "6016", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3.5", "orig_text": "holder of the new key to take over the account form the holder of the", "correct_text": "holder of the new key to take over the account from the holder of the", "notes": "Should be \"from\" instead of \"form\"", "submit_date": "2020-03-13", "submitter_name": "Benjamin Wilson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-03-13 15:51:01"}, {"errata_id": "6017", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "Clients in possession of a client password MAY use the HTTP Basic\r\n   authentication scheme as defined in [RFC2617] to authenticate with\r\n   the authorization server.  The client identifier is encoded using the\r\n   \"application/x-www-form-urlencoded\" encoding algorithm per\r\n   Appendix B, and the encoded value is used as the username; the client\r\n   password is encoded using the same algorithm and used as the\r\n   password.", "correct_text": "Clients in possession of a client password MAY use the HTTP Basic\r\n   authentication scheme as defined in [RFC7617] to authenticate with\r\n   the authorization server.", "notes": "RFC 2617 has been superseded by RFC7617 which clearly defines in section 2.1 how a charset can be provided to solve the usecase described with encoding.\r\n\r\nThe original text of this RFC violates the approach described for Basic authentication.", "submit_date": "2020-03-15", "submitter_name": "Michael Osipov", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6018", "doc-id": "RFC7516", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "initialization vector", "correct_text": "initialization value", "notes": "RFCs 7516 through 7520 (inclusive) all used the deprecated (as dictated by RFC 4949) term \"initialization vector\" in place of the newer term \"initialization value\".", "submit_date": "2020-03-16", "submitter_name": "Kinan Diraneyya", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6019", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1.1.1", "orig_text": " A parameter value that matches the token production can be\r\n   transmitted either as a token or within a quoted-string.  The quoted\r\n   and unquoted values are equivalent.  For example, the following\r\n   examples are all equivalent, but the first is preferred for\r\n   consistency:\r\n\r\n     text/html;charset=utf-8\r\n     text/html;charset=UTF-8\r\n     Text/HTML;Charset=\"utf-8\"\r\n     text/html; charset=\"utf-8\"\r\n", "correct_text": " A parameter value that matches the token production can be\r\n   transmitted either as a token or within a quoted-string.  The quoted\r\n   and unquoted values are equivalent.  For example, the following\r\n   examples are all equivalent, but the first is preferred for\r\n   consistency:\r\n\r\n     text/html;charset=utf-8\r\n     text/html;charset=UTF-8\r\n", "notes": "Section 3.1.1.2 defines charset value to be a token. I consider this to be a bad example which might cause confusion. Why should I quote the value if it is defined as token?! You make want to use some other example.\n --VERIFIER NOTES-- \n   What's relevant is the ABNF for *parameter*, and that allows both token and quoted-string.  So the example is correct.", "submit_date": "2020-03-16", "submitter_name": "Michael Osipov", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-07-10 12:48:51"}, {"errata_id": "6022", "doc-id": "RFC4566", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9", "orig_text": "   ; sub-rules of 'e=', see RFC 2822 for definitions\r\n   email-address        = address-and-comment / dispname-and-address\r\n                          / addr-spec\r\n   address-and-comment  = addr-spec 1*SP \"(\" 1*email-safe \")\"\r\n   dispname-and-address = 1*email-safe 1*SP \"<\" addr-spec \">\"\r\n\r\n   ; sub-rules of 'p='\r\n   phone-number =        phone *SP \"(\" 1*email-safe \")\" /\r\n                         1*email-safe \"<\" phone \">\" /\r\n                         phone", "correct_text": "   ; sub-rules of 'e=', see RFC 2822 for definitions\r\n   email-address        = address-and-comment / dispname-and-address\r\n                          / addr-spec\r\n   address-and-comment  = addr-spec 1*SP \"(\" 1*email-safe \")\"\r\n   dispname-and-address = 1*email-safe 1*SP \"<\" addr-spec \">\"\r\n\r\n   ; sub-rules of 'p='\r\n   phone-number =        phone *SP \"(\" 1*email-safe \")\" /\r\n                         1*email-safe 1*SP \"<\" phone \">\" /\r\n                         phone", "notes": "There's an inconsistency between the definitions of dispname-and-address and phone-number. I am not sure if this is intentional or not, and in practice this doesn't change what's matched (as email-safe includes spaces), but I thought it'd be worth mentioning since I myself got tripped up when translating the grammar.\r\n\r\nAlternatively, perhaps 1*SP should be removed from dispname-and-address.", "submit_date": "2020-03-16", "submitter_name": "Megan Ruggiero", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6023", "doc-id": "RFC3240", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1. DICOM Def", "orig_text": "   Individual DICOM objects (such as images) may be encapulsated in\r\n   files and exchanged by e-mail using the Media Type defined herein.\r\n   In addition, a set of DICOM files may be described by an index file,\r\n   DICOMDIR, which may accompany the files that it references.", "correct_text": "   Individual DICOM objects (such as images) may be encapsulated in\r\n   files and exchanged by e-mail using the Media Type defined herein.\r\n   In addition, a set of DICOM files may be described by an index file,\r\n   DICOMDIR, which may accompany the files that it references.", "notes": "encapulsated => encapsulated", "submit_date": "2020-03-17", "submitter_name": "Luu Vinh Phuc", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-03-17 11:59:59"}, {"errata_id": "6024", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "This section provides basic parameter sets that are assumed to cover most relevant applications.  Parameter sets for two classical security levels are defined.  Parameters with n = 32 provide a classical security level of 256 bits.  Parameters with n = 64 provide a classical security level of 512 bits.  Considering quantum-computer-aided attacks, these output sizes yield post-quantum security of 128 and 256 bits, respectively.", "correct_text": "This section provides basic parameter sets that are assumed to cover most relevant applications. Parameter sets for two classical security levels are defined using the cryptographic functions SHA2 and SHAKE.  Parameters with SHA2 and n = 32 provide a classical security level of 256 bits. Parameters with SHA2 and n = 64 provide a classical security level of 512 bits.  Considering quantum-computer-aided attacks, these parameters yield post-quantum security of 128 and 256 bits, respectively. Parameters with SHAKE and n = 32 provide a classical security level of 128 bits.  Parameters with SHAKE and n = 64 provide a classical security level of 256 bits.  Considering quantum-computer-aided attacks, these parameters yield post-quantum security of 86 and 170 bits, respectively. ", "notes": "Traditionally, a hash function with n-bit outputs is assumed to have n-bit security against classical preimage and second-preimage attacks, and n/2-bit security against classical collision attacks. For adversaries with access to a quantum computer, these bounds change to n/2 and n/3 bits when only counting queries to the hash function. This also applies to SHA2 and SHA3. In contrast, SHAKE follows a different reasoning. SHAKE with an internal state of n bits and an output length of n bits achieves n/2 bit security against classical preimage, second-preimage and collision attacks. For quantum attacks security changes to n/3 bits. The reason is that SHAKE allows for meet-in-the-middle preimage attacks that reduce to a collision search on the internal state. \r\n   \r\n In consequence, SHAKE-128 cannot provide more security than NIST post-quantum security level II.\r\n\r\n(Errata submitted by Andreas H\u00fclsing; notes slightly revised after Crypto Forum review by Scott Fluhrer; verified by CFRG Chairs and IRTF Chair)", "submit_date": "2020-03-18", "submitter_name": "Andreas H\u00fclsing", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2020-06-23 08:16:29"}, {"errata_id": "6212", "doc-id": "RFC5545", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.8.5.3", "orig_text": "      Daily until December 24, 1997:\r\n\r\n       DTSTART;TZID=America/New_York:19970902T090000\r\n       RRULE:FREQ=DAILY;UNTIL=19971224T000000Z\r\n\r\n       ==> (1997 9:00 AM EDT) September 2-30;October 1-25\r\n           (1997 9:00 AM EST) October 26-31;November 1-30;December 1-23", "correct_text": "      Daily until December 24, 1997:\r\n\r\n       DTSTART;TZID=America/New_York:19970902T090000\r\n       RRULE:FREQ=DAILY;UNTIL=19971224T140000Z\r\n                                       ^^\r\n       ==> (1997 9:00 AM EDT) September 2-30;October 1-25\r\n           (1997 9:00 AM EST) October 26-31;November 1-30;December 1-24\r\n                                                                     ^^", "notes": "The UNTIL rule part has value type DATE-TIME (same as DTSTART), but the introductory text \"Daily until December 24, 1997\" mentions a DATE only. Assuming that \"until\", like UNTIL, is inclusive, I would expect\r\n\r\n    (1997 9:00 AM EST) December 24\r\n\r\nto be the last instance, i.e. the unstated time is 9:00 AM. Translating to UTC you get\r\n\r\n    19971224T140000Z\r\n\r\nThe same error occurs in all examples of section 3.8.5.3 with \"December 24, 1997\", four in all: pages 123 (above), 125 (twice) and 126. The resulting occurrences are only affected for pages 123 and 125 (second).\n --VERIFIER NOTES-- \nThe example is correct as-is.  UNTIL does not have to match the recurrence pattern.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/calsify/x82GopunVcEh8y5UGSIsEIC3s6M/", "submit_date": "2020-06-23", "submitter_name": "Lars Henriksen", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:31:47"}, {"errata_id": "6025", "doc-id": "RFC8439", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "A constant-time but not optimal approach would be to naively implement the arithmetic operations for 288-bit integers, because even a naive implementation will not exceed 2^288 in the multiplication of (acc+block) and r.\r\n", "correct_text": "It is possible to create a constant-time, but not optimal, implementation by implementing arithmetic operations for 256-bit integers, because even a naive implementation will not exceed 2^256 in the multiplication of (acc+block) and r (note that we have r < 2^124 because r is \"clamped\").\r\n", "notes": "There are two issues 1) 288 bits is too big, and 2) a naive implementation of 288 bit integer arithmetic isn't necessarily constant time.\r\n\r\n#1:  288 seems to be tied to the machine int size and assumes 32-bit integers (288 is nine 32-bit integers).  It is probably better to give a number independent of the machine int size. It is possible to compute Poly1305 using 255 bit arithmetic. Padded blocks of the message are in the range 2^8, 2^8 +1,..., 2^129 -1. Assuming that the partial reduction step always reduces the accumulator to 130 bits, we have acc < 2^130, so acc+block < 2^131. r is a 16 byte value, but some of its bits are \"clampled\", so we have r < 2^124. Thus (acc+block)*r < 2^255; so we can get by with 255 bit big-integer arithmetic (probably 256 bits is more convenient to work with). \r\n\r\n#2:  big-integer arithmetic can be implemented in constant time, but perhaps not in a obvious or naive way.  Keeping things constant time seems to depend on the characteristics of the underlying processor.", "submit_date": "2020-03-21", "submitter_name": "James Muir", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2021-11-17 07:30:55"}, {"errata_id": "6026", "doc-id": "RFC8601", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "     resinfo = [CFWS] \";\" methodspec [ CFWS reasonspec ]\r\n               [ CFWS 1*propspec ]\r\n\r\n", "correct_text": "     resinfo = [CFWS] \";\" methodspec [ CFWS reasonspec ]\r\n               *( CFWS propspec )\r\n\r\n", "notes": "When there is more than one propspec, they are separated by spaces. Every implementation I know puts in the spaces. This was correct in RFC 7601, but see unconfirmed erratum 5435 which introduced the mistake.\r\n\r\nWhile we're at it, take out the [CFWS] at the end of the definition of pvalue which is redundant and confusing.", "submit_date": "2020-03-22", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6027", "doc-id": "RFC8601", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "                  spf=pass smtp.mailfrom=example.net\r\n", "correct_text": "                  spf=pass smtp.mailfrom=sender@example.net\r\n", "notes": "This error appears three places in Appendix B. smtp.mailfrom takes a mailbox, not a domain name. \r\n\r\nThe example in section 2.7.4 at the bottom of page 21 is OK.", "submit_date": "2020-03-22", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6028", "doc-id": "RFC4740", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "\"Digest-QoP\".\r\n", "correct_text": "\"Digest-Qop\".", "notes": "The AVP is referenced in section 9.5.6 from RFC 4590 (obsoleted by RFC 5090) which names the AVP \"Digest-Qop\" (i.e., with a lowercase 'p').\r\n\r\nThe error occurs in various sections, including 9.5.3, 9.5.4, 9.5.5, 9.5.6, 11.", "submit_date": "2020-03-25", "submitter_name": "Luke Mewburn", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 13:38:58"}, {"errata_id": "6029", "doc-id": "RFC7155", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.4", "orig_text": "   QoS-Filter-Rule             4.4.9        |    |     |", "correct_text": "   QoS-Filter-Rule             4.4.9        | M  |  V  |", "notes": "The row \"QoS-Filter-Rule\" does not define AVP Flag Rules for \"M\" or \"V\":\r\n- The V Flag MUST NOT be used for this AVP.\r\n- There may be some debate whether the M Flag can be retrospectively added to the MUST column, versus leaving it out (implied \"MAY\" ?).\r\n\r\nThe changes are consistent with all other AVPs in this RFC.", "submit_date": "2020-03-25", "submitter_name": "Luke Mewburn", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7243", "doc-id": "RFC9286", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.1.  Manifest", "orig_text": "   thisUpdate:\r\n      This field contains the time when the manifest was created.  This\r\n      field has the same format constraints as specified in [RFC5280]\r\n      for the CRL field of the same name.  The issuer MUST ensure that\r\n      the value of this field is more recent than any previously\r\n      generated manifest.  Each RP MUST verify that this field value is\r\n      greater (more recent) than the most recent manifest it has\r\n      validated.  If this field in a purported \"new\" manifest is smaller\r\n      (less recent) than previously validated manifests, the RP SHOULD\r\n      use locally cached versions of objects, as described in\r\n      Section 6.6.", "correct_text": "    thisUpdate:\r\n      This field contains the time when the manifest was created. This\r\n      field has the same format constraints as specified in [RFC5280]\r\n      for the CRL field of the same name. The issuer MUST ensure that\r\n      the value of this field is equal to the current time and higher or\r\n      equal to the thisUpdate of any previously generated manifest. Each\r\n      RP MUST verify that this field value is greater or equal to (as,\r\n      or more recent) than the most recent manifest it has validated.\r\n      Suppose this field in a purported \"new\" manifest is smaller (less\r\n      recent) than previously validated manifests. In that case, the RP\r\n      SHOULD use locally cached versions of objects, as described in\r\n      Section 6.6.\r\n\r\n", "notes": "First of all: The previous text was not explicit that thisUpdate MUST contain the current time.\r\n\r\nSecond, in practice (e.g. multiple calls to a synchronous API) multiple manifests can be issued with the same thisUpdate. Under the previous text this would technically be misissuance. The propose text allows multiple manifests to be issued in the same second.\n --VERIFIER NOTES-- \n   Per the discussion at https://mailarchive.ietf.org/arch/msg/sidrops/nFbjWawZ8R8uulSNCRLBVARtd_s/", "submit_date": "2022-11-07", "submitter_name": "Ties de Kock", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-28 17:50:04"}, {"errata_id": "6030", "doc-id": "RFC8555", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2", "orig_text": "To get a fresh nonce, the client sends a HEAD request to the newNonce\r\nresource on the server.  The server's response MUST include a Replay-\r\nNonce header field containing a fresh nonce and SHOULD have status\r\ncode 200 (OK).  The server MUST also respond to GET requests for this\r\nresource, returning an empty body (while still providing a Replay-\r\nNonce header) with a status code of 204 (No Content).", "correct_text": "To get a fresh nonce, the client sends a HEAD request to the newNonce\r\nresource on the server.  The server's response MUST include a Replay-\r\nNonce header field containing a fresh nonce and SHOULD have status\r\ncode 204 (No Content).  The server MUST also respond to GET requests for this\r\nresource, returning an empty body (while still providing a Replay-\r\nNonce header) with a status code of 204 (No Content).", "notes": "RFC7321 s4.3.2, says \"The server SHOULD send the same header fields in response to a HEAD request as it would have sent if the request had been a GET\".  I can't see any rationale for violating this SHOULD in the discussion in the GH issue which introduced the discrepancy in response code between GET and HEAD (https://github.com/ietf-wg-acme/acme/pull/371), thus (IMHO) it violates the tenets of a SHOULD, as \"the full implications\" do not appear to have \"be[en] understood and carefully weighed before choosing a different course\" (RFC2119, of course).", "submit_date": "2020-03-25", "submitter_name": "Matt Palmer", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-03-22 15:00:45"}, {"errata_id": "6031", "doc-id": "RFC7950", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.9.3", "orig_text": "The \"require-instance\" statement, which is a substatement to the \r\n\"type\" statement, MAY be present if the type is \"instance-identifier\"\r\nor \"leafref\".  It takes as an argument the string \"true\" or \"false\".\r\nIf this statement is not present, it defaults to \"true\".", "correct_text": "The \"require-instance\" statement, which is a substatement to the\r\n\"type\" statement, MAY be present if the type is \"instance-identifier\",\r\n\"leafref\" or a type derived from them.  It takes as an argument the\r\nstring \"true\" or \"false\".  If this statement is not present, it\r\ndefaults to \"true\".", "notes": "The document does not specify whether the \u201crequire-instance\u201d keyword is allowed in typedef refinements derived from the \u201cleafref\u201d or \u201cinstance-identifier\u201d base types, but it is anticipated that a future revision of YANG would allow this.   It is suggested that modules using YANG language versions 1 [RFC 6020] and 1.1 [RFC 7950] avoid using this construct, YANG module validation tools flag a warning if this construct is used, but implementations allow this if possible.", "submit_date": "2020-03-27", "submitter_name": "Radek Krejci", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2020-05-04 10:02:42"}, {"errata_id": "6032", "doc-id": "RFC7997", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4", "orig_text": "1.  Temperature changes in the Temperature Control Protocol are\r\n    indicated by the U+2206 character (\"\u0394\").", "correct_text": "1.  Temperature changes in the Temperature Control Protocol are\r\n    indicated by the U+2206 character (\"\u2206\").", "notes": "This applies to the PDF version only (https://www.rfc-editor.org/rfc/rfc7997.pdf); the issue is repeated in the following lines.\r\n\r\nThe character on display is 'GREEK CAPITAL LETTER DELTA' (U+0394), not 'INCREMENT' (U+2206).\r\n\r\n(found by Henrik Levkowetz, see https://github.com/rfc-format/draft-iab-rfc-nonascii-bis/issues/4#issuecomment-605623783)\r\n\r\nThis was marked \"Held For Document Update\" per discussion with the Temporary RFC Series Project Manager (John Levine).", "submit_date": "2020-03-29", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "John Levine", "update_date": "2020-12-09 17:14:53"}, {"errata_id": "6033", "doc-id": "RFC8484", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "   A DoH client MUST NOT use a different URI simply because it was\r\n   discovered outside of the client's configuration (such as through\r\n   HTTP/2 server push) or because a server offers an unsolicited\r\n   response that appears to be a valid answer to a DNS query. ", "correct_text": "   A DoH client MUST NOT use a different URI that was discovered outside\r\n   of the client's configuration (except via HTTP redirection discussed\r\n   in Section 6.4 of [RFC7231]).  Also, the DoH client MUST ignore an\r\n   unsolicited response (such as through HTTP/2 server push) that\r\n   appears to be a valid answer to a DNS query unless that response\r\n   comes from a configured URI (as described in Section 5.3).", "notes": "(1) The intent of this text is confusing. \r\n\r\n(2) I checked the mailing list and found that the text was updated late in the publication process to address this comment: https://mailarchive.ietf.org/arch/msg/doh/f_V-tBgB-KRsLZhttx9tGt75cps/. \r\n\r\n(3) The example provided in the thread (server push) is related to the second part of the OLD text. It is mistakenly attached to the first part. \r\n\r\n(4) The push example may be interpreted as if server push is disallowed. This is conflicting with Section 5.3.  \r\n\r\nHence, this change:\r\n\r\nAlso, the DoH client MUST ignore an\r\n   unsolicited response (such as through HTTP/2 server push) that\r\n   appears to be a valid answer to a DNS query ** unless that response\r\n   comes from a configured URI (as described in Section 5.3) **.\r\n\r\n(5) An intuitive way to discover the URI outside the configuration is redirection.  RFC8484 indicates clearly the following:\r\n\r\n   The described approach is more than a tunnel over HTTP.  It\r\n   establishes default media formatting types for requests and responses\r\n   but uses normal HTTP content negotiation mechanisms for selecting\r\n   alternatives that endpoints may prefer in anticipation of serving new\r\n   use cases.  In addition to this media type negotiation, it ** aligns\r\n   itself with HTTP features ** such as caching, **redirection**, proxying,\r\n   authentication, and compression.\r\n\r\nForbidding discovery of URI outside the configuration contradicts the above excerpt. The text is as such incorrect.\r\n\r\n(6) Also, I suggest to remove \"simply\" from the text. Not sure what message is supposed to convey.", "submit_date": "2020-03-30", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": null, "update_date": "2020-04-01 19:15:17"}, {"errata_id": "6037", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-AT-DE\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? A: .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? U: DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o: ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb SE '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ss s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  a: A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  u: J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  O: ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-AT-DE\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? A: .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? U: DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o: ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb SE '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ss s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  a: A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  u: J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  O: ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 19:42:01"}, {"errata_id": "6075", "doc-id": "RFC8774", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Abstract", "orig_text": "   This\r\n   will lead to a perceived round-trip time of zero seconds on some\r\n   Internet paths, a capability which was not predicted and so not\r\n   included as a possibility in many protocol specifications.", "correct_text": "Suggested text...\r\n   The\r\n   no communication theorem holds, and there will be no perceived\r\n   round-trip time of zero seconds on some Internet paths, a\r\n   capability which was not predicted and so not included as a\r\n   possibility in many protocol specifications.", "notes": "This report has been marked as \"held for document update\" so that the authors can consider it when a revision to the RFC is made.\r\nAt that time, the authors may want to think about the following points:\r\n- The original text says \"perceived round-trip time of zero seconds\". Of course, the\r\n  perception of a zero round-trip time says nothing about the actual time: none of\r\n  the laws of physics apply to perception.\r\n- The well-known \"no-communication theorem\" is predicated on the assumption\r\n  that the laws of quantum mechanics hold, but that it is clearly not the case on\r\n  March 32nd.\r\n- The proof of the no-communication theorem depends on an understanding of\r\n  Hilbert Space. Mr Space is notably hard to comprehend.\r\n- The no-communication theorem is classically described in relation to\r\n  communications between Alice and Bob, but we know that the Internet is For All,\r\n  and so our concerns should extend wider than just Alice and Bob to include\r\n  Charlie, Daphne, Eustace, and Felicity.\r\n- The proof of the no-communication theorem depends on the Born rule, but while\r\n  there is one Born every minute, it is generally accepted that there is no change\r\n  through the Born identity.", "submit_date": "2020-04-01", "submitter_name": "Pickle Surprise", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-04-01 22:12:49"}, {"errata_id": "9041", "doc-id": "RFC5929", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1", "orig_text": "o  if the certificate's signatureAlgorithm uses no hash functions or\r\n      uses multiple hash functions, then this channel binding type's\r\n      channel bindings are undefined at this time (updates to is channel\r\n      binding type may occur to address this issue if it ever arises).", "correct_text": "o  if no unique suitable hash function could be identified from the\r\n      certificate's signatureAlgorithm, then use the identity function.", "notes": "ML-DSA [FIPS-204] falls into the third category of the original text, as it\r\ndoes not have associated hash, although it uses SHAKE128 & SHAKE256 internally\r\n(there are probably other examples as well). This in turn leads to issues\r\naround channel binding implementation like in [1], where it's not clear how to\r\ncreate the needed digest.\r\n\r\nThe proposal is to close the gap in such a way that does not require any\r\nknownedge of the connection internal state, thus simpy the identity function is\r\nused for the digest.\r\n\r\nAn alternative of similar type would be to use a specified hash instead, e.g.\r\nSHA-256. This would be a bit easier for final implementation, for example\r\nPostgreSQL uses OpenSSL and all what's needed is to pass chosen algorithm to\r\nX509_digest. OpenSSL does not have an \"identity function\" as an algorithm, so\r\nthe main proposed change would be a bit more verbose to implement, but it's\r\nconcidered to be conceptually simpler.\r\n\r\n[1]: https://www.postgresql.org/message-id/CAFjYY+JCCQeh03nzVG6Rs9MUgU_kOvhMbNaaS6kn_c4CcAZkTg@mail.gmail.com", "submit_date": "2026-07-24", "submitter_name": "Dmitrii Dolgov", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-27 20:38:07"}, {"errata_id": "6035", "doc-id": "RFC8028", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "", "correct_text": "In the context of this document, it is clear that the prefix information becomes more associated with the sending router, than with the link as a whole. As such, the PIO lifetimes should be interpreted to indicate the view of the router sending the Router Advertisement, as opposed to absolute information about a prefix.\r\n\r\nFor example, if two routers (say, Router A and Router B), advertise the prefix 2001:db8::/64 as:\r\n\r\n* Router A:\r\nA=1, L=1, PIO: 2001:db8::/64, Valid Lifetime=0, Preferred Lifetime=0\r\n\r\n* Router B:\r\nA=1, L=1, PIO: 2001:db8::/64, Valid Lifetime=X, Preferred Lifetime=Z\r\n\r\nthen, addresses should be configured/maintained with a Valid Lifetime of X, and a Preferred Lifetime of Z. Furthermore, the prefix should be considered on-link with a Valid Lifetime of X.  And Router B should be employed as the preferred next hop for packets sourced from the prefix 2001:db8::/64, since it advertises the prefix with a non-zero Valid Lifetime and non-zero Preferred Lifetime (as opposed to Router A).\r\n\r\nAs long as one router on the local subnet considers a prefix to be Valid (and possibly Preferred), the prefix should be considered Valid (and Preferred, if applicable). Similarly, as long as one router on the local subnet considers the prefix to be on-link and/or usable for auto-configuration, the prefix should be considered as such.\r\n", "notes": "This is not a bug in RFC 8028, but rather a clarification on what's likely a desired behavior. As such, and if considered appropriate, this errata is meant to be \"held for document update\".\r\n\r\nI would like to thank Fred Baker and Brian Carpenter for taking the time to answer my questions on RFC 8028.", "submit_date": "2020-04-01", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-03-21 03:10:07"}, {"errata_id": "6036", "doc-id": "RFC6532", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "A section 3.2bis, \"Syntax Extensions to RFC 2045\", is missing.\r\n", "correct_text": "In particular, Section 5.1 of RFC 2045, \"Syntax of the Content-Type Header Field\", deserves an extension:\r\n\r\n    token /= UTF8-non-ascii\r\n\r\nsimilar to the extensions given to various text types given in Section 3.2.", "notes": "Various header fields are defined in terms of the grammar defined in RFC 2045.  In particular, the missing extension of token was reported for Authentication-Results:\r\nhttps://mailarchive.ietf.org/arch/msg/dmarc/g1U__axJW5I6OenEuwD48nwptzU", "submit_date": "2020-04-01", "submitter_name": "Alessandro Vesely", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6230", "doc-id": "RFC4180", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "The last record in the file may or may not have an ending line break.\r\n\r\nfile = [header CRLF] record *(CRLF record) [CRLF]", "correct_text": "The last record in the file must have an ending line break.\r\n\r\nfile = [header CRLF] record *(CRLF record) CRLF", "notes": "The grammar seems to be ambiguous in the case below:\r\n- Records have just one field;\r\n- The last record may have an empty value.\r\n\r\nFile:\r\n---\r\nheader1CRLF\r\naCRLF\r\nbCRLF\r\nEOF\r\n---\r\n\r\nIn the file above, we do not know if we have four records (header1, a, b and an empty value) with the last record not ending with a line break; or if we have three records (header1, a and b) with the last record ending with a line break.\r\n\r\nThe grammar allows empty fields:\r\nnon-escaped = *TEXTDATA\r\n\r\nAccording to RFC 2234:\r\n\"Default values are 0 and infinity so that *<element> allows any number, including zero;\"", "submit_date": "2020-07-13", "submitter_name": "Marco Diniz Sousa", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:36:34"}, {"errata_id": "6324", "doc-id": "RFC5661", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "18.23.3", "orig_text": "The request's cookieverf field should be set to 0 zero) when the", "correct_text": "The request's cookieverf field should be set to 0 (zero) when the", "notes": "Missing the open parenthesis", "submit_date": "2020-11-04", "submitter_name": "Tigran Mkrtchyan", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-02 21:43:30"}, {"errata_id": "6233", "doc-id": "RFC5681", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "Finally, after all loss in the given window of segments\r\nhas been successfully retransmitted, cwnd MUST be set to no more than\r\nssthresh and congestion avoidance MUST be used to further increase\r\ncwnd.", "correct_text": "Finally, after all loss in the given window of segments\r\nhas been successfully retransmitted, cwnd MUST be set to no less than\r\nssthresh and congestion avoidance MUST be used to further increase\r\ncwnd.", "notes": "if set cwnd no more than ssthresh, it will using slow start algorithm instead of congestion avoidance algorithm. so it should say \"cwnd no less than ...\" instead of \"cwnd no more than ...\".\n --VERIFIER NOTES-- \n   This would be a significant design change in TCP. The original text is as intended by the community.", "submit_date": "2020-07-20", "submitter_name": "Charles Deng", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-07-21 14:04:59"}, {"errata_id": "7244", "doc-id": "RFC3526", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "3072-bit MODP Group\r\n\r\n   This group is assigned id 15.\r\n\r\n   This prime is: 2^3072 - 2^3008 - 1 + 2^64 * { [2^2942 pi] + 1690314 }\r\n\r\n   Its hexadecimal value is:\r\n\r\n      FFFFFFFF FFFFFFFF C90FDAA2 2168C234 C4C6628B 80DC1CD1\r\n      29024E08 8A67CC74 020BBEA6 3B139B22 514A0879 8E3404DD\r\n      EF9519B3 CD3A431B 302B0A6D F25F1437 4FE1356D 6D51C245\r\n      E485B576 625E7EC6 F44C42E9 A637ED6B 0BFF5CB6 F406B7ED\r\n      EE386BFB 5A899FA5 AE9F2411 7C4B1FE6 49286651 ECE45B3D\r\n      C2007CB8 A163BF05 98DA4836 1C55D39A 69163FA8 FD24CF5F\r\n      83655D23 DCA3AD96 1C62F356 208552BB 9ED52907 7096966D\r\n      670C354E 4ABC9804 F1746C08 CA18217C 32905E46 2E36CE3B\r\n      E39E772C 180E8603 9B2783A2 EC07A28F B5C55DF0 6F4C52C9\r\n      DE2BCBF6 95581718 3995497C EA956AE5 15D22618 98FA0510\r\n      15728E5A 8AAAC42D AD33170D 04507A33 A85521AB DF1CBA64\r\n      ECFB8504 58DBEF0A 8AEA7157 5D060C7D B3970F85 A6E1E4C7\r\n      ABF5AE8C DB0933D7 1E8C94E0 4A25619D CEE3D226 1AD2EE6B\r\n      F12FFA06 D98A0864 D8760273 3EC86A64 521F2B18 177B200C\r\n      BBE11757 7A615D6C 770988C0 BAD946E2 08E24FA0 74E5AB31\r\n      43DB5BFC E0FD108E 4B82D120 A93AD2CA FFFFFFFF FFFFFFFF\r\n\r\n   The generator is: 2.", "correct_text": "3072-bit MODP Group\r\n\r\n   This group is assigned id 15.\r\n\r\n   This prime is: 2^3072 - 2^3008 - 1 + 2^64 * { [2^2942 pi] + 1690314 }\r\n\r\n   Its hexadecimal value is:\r\n\r\n      FFFFFFFF FFFFFFFF C90FDAA2 2168C234 C4C6628B 80DC1CD1\r\n      29024E08 8A67CC74 020BBEA6 3B139B22 514A0879 8E3404DD\r\n      EF9519B3 CD3A431B 302B0A6D F25F1437 4FE1356D 6D51C245\r\n      E485B576 625E7EC6 F44C42E9 A637ED6B 0BFF5CB6 F406B7ED\r\n      EE386BFB 5A899FA5 AE9F2411 7C4B1FE6 49286651 ECE45B3D\r\n      C2007CB8 A163BF05 98DA4836 1C55D39A 69163FA8 FD24CF5F\r\n      83655D23 DCA3AD96 1C62F356 208552BB 9ED52907 7096966D\r\n      670C354E 4ABC9804 F1746C08 CA18217C 32905E46 2E36CE3B\r\n      E39E772C 180E8603 9B2783A2 EC07A28F B5C55DF0 6F4C52C9\r\n      DE2BCBF6 95581718 3995497C EA956AE5 15D22618 98FA0510\r\n      15728E5A 8AAAC42D AD33170D 04507A33 A85521AB DF1CBA64\r\n      ECFB8504 58DBEF0A 8AEA7157 5D060C7D B3970F85 A6E1E4C7\r\n      ABF5AE8C DB0933D7 1E8C94E0 4A25619D CEE3D226 1AD2EE6B\r\n      F12FFA06 D98A0864 D8760273 3EC86A64 521F2B18 177B200C\r\n      BBE11757 7A615D6C 770988C0 BAD946E2 08E24FA0 74E5AB31\r\n      43DB5BFC E0FD108E 4B82D120 A93AD2CA FFFFFFFF FFFFFFFF\r\n\r\n   The generator is: 5.", "notes": "we have statement that 2 is a generator for 3072-bit MODP Group, but it's wrong because 2 ^ ((N - 1)/2) = 1 (mod N) where N is 2^3072 - 2^3008 - 1 + 2^64 * { [2^2942 pi] + 1690314 }. I think that the correct value of the generator for this group should be 5.\n --VERIFIER NOTES-- \n        This is for RFC3526 and it says that Generator should not be\r\n        2, but this is incorrect. The group in the RFC is generated\r\n        using the instructions frm the RFC2412 and that explains that\r\n        number 2 is not technically a generator, but there are reasons\r\n        to use it (APPENDIX E The Well-Known Groups of 2412):\r\n\r\n       Using 2 as a generator is efficient for some modular\r\n      exponentiation algorithms. [Note that 2 is technically not a\r\n      generator in the number theory sense, because it omits half of\r\n      the possible residues mod P. From a cryptographic viewpoint,\r\n      this is a virtue.]\r\n\r\n        This change would be break interoperability with old\r\n        implementations", "submit_date": "2022-11-09", "submitter_name": "Igor Krisyuk", "verifier_id": "", "verifier_name": null, "update_date": "2023-08-02 16:58:37"}, {"errata_id": "6038", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-AT-DE-A\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? o: .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? u: U: *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? ss ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? :  A: O: '  =  a:\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ?? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  ?? ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-AT-DE-A\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? o: .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? u: U: *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? ss ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? :  A: O: '  =  a:\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ?? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  ?? ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:19:37"}, {"errata_id": "6039", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-CA-FR\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? a> ?? ?? ?? ?? ?? c, ?? a! .  <  (  +  !\r\n  &  ?? e> e: ?? ?? i> i: ?? ?? '' DO *  )  ;  '>\r\n  -  /  A> ?? A! ?? ?? ?? C, ?? u! ,  %  _  >  ?\r\n  ?? E' E> E: ?? I> I: ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  e' A  B  C  D  E  F  G  H  I  ?? o> ?? ?? ?? ??\r\n  e! J  K  L  M  N  O  P  Q  R  ?? u> u: ?? ?? ??\r\n  ', ?? S  T  U  V  W  X  Y  Z  ?? O> ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? U> U: U! ?? DT", "correct_text": "  &charset EBCDIC-CA-FR\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? a> ?? ?? ?? ?? ?? c, ?? a! .  <  (  +  !\r\n  &  ?? e> e: ?? ?? i> i: ?? ?? '' DO *  )  ;  '>\r\n  -  /  A> ?? A! ?? ?? ?? C, ?? u! ,  %  _  >  ?\r\n  ?? E' E> E: ?? I> I: ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  e' A  B  C  D  E  F  G  H  I  ?? o> ?? ?? ?? ??\r\n  e! J  K  L  M  N  O  P  Q  R  ?? u> u: ?? ?? ??\r\n  ', ?? S  T  U  V  W  X  Y  Z  ?? O> ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? U> U: U! ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:20:01"}, {"errata_id": "6040", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-DK-NO\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Nb .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? Cu AA *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o/ ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  AE O/ '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? u: s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ae A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  aa J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-DK-NO\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Nb .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? Cu AA *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o/ ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  AE O/ '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? u: s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ae A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  aa J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:20:20"}, {"errata_id": "6041", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-DK-NO-A\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? o/ .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? aa AA *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? :  AE O/ '  =  ae\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ?? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  ?? ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-DK-NO-A\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? o/ .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? aa AA *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? :  AE O/ '  =  ae\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ?? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  ?? ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:20:42"}, {"errata_id": "6042", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-FI-SE\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? SE .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? Cu AA *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o: ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? e' :  A: O: '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? u: s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  a: A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  aa J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  E' ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-FI-SE\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? SE .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? Cu AA *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o: ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? e' :  A: O: '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? u: s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  a: A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  aa J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  E' ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:21:00"}, {"errata_id": "6043", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-FI-SE-A\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? o: .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? aa AA *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? :  A: O: '  =  a:\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ?? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  ?? ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-FI-SE-A\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? o: .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? aa AA *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? :  A: O: '  =  a:\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ?? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  ?? ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:21:17"}, {"errata_id": "6044", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-FR\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? DG .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? SE DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? u! ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Pd a! '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  e' A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  e! J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  c, ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-FR\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? DG .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? SE DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? u! ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Pd a! '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  e' A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  e! J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  c, ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:21:36"}, {"errata_id": "6045", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-IT\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? DG .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? e' DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o! ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? u! :  Pd SE '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? i! s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  a! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  e! J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  c, ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-IT\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? DG .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? e' DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o! ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? u! :  Pd SE '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? i! s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  a! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  e! J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  c, ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:21:53"}, {"errata_id": "7246", "doc-id": "RFC9051", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.5.2.", "orig_text": "   BINARY[<section-binary>]<<number>>\r\n      An <nstring> or <literal8> expressing the content of the specified\r\n      section after removing any encoding specified in the corresponding\r\n      Content-Transfer-Encoding header field.  If <number> is present,\r\n      it refers to the offset within the DECODED section data.\r\n", "correct_text": "   BINARY[<section-binary>]\r\n      An <nstring> or <literal8> expressing the content of the specified\r\n      section after removing any encoding specified in the corresponding\r\n      Content-Transfer-Encoding header field.\r\n", "notes": "While a FETCH _request_ can be \"partial\" with <...> for both BODY[] and BINARY[], only a FETCH _response_  for BODY[] can have an optional offset. A FETCH _response_ for BINARY[] cannot have an optional offset. At least according to the ABNF, which I believe is leading.\r\nSee lines 6756 and 6757:  msg-att-static = \"BODY\" section [\"<\" number \">\"] SP nstring / \"BINARY\" section-binary SP (nstring / literal8)\r\nAnd line 6987: section-binary  = \"[\" [section-part] \"]\"\r\n\r\nRFC 3516, IMAP4 Binary Content Extension, from which the original text was probably copied, appears to have the same issue but no errata.", "submit_date": "2022-11-12", "submitter_name": "Mechiel Lukkien", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6046", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-PT\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? <( .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? )> DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o? ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  A? O? '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? c, s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  a? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  '' J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  C, ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-PT\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? <( .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? )> DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? o? ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  A? O? '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? c, s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  a? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  '' J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  C, ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:22:10"}, {"errata_id": "6047", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-ES\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Ct .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  Pt *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? n? ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  N? At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-ES\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Ct .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  Pt *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? n? ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  N? At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:22:27"}, {"errata_id": "6048", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-ES-A\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Ct .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  Pt *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? :  N? At '  =  n?\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ?? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  ?? ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-ES-A\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Ct .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  Pt *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? :  N? At '  =  n?\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ?? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  ?? ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:22:43"}, {"errata_id": "6049", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-ES-S\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Ct .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  DO *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? n? ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  N? At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-ES-S\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Ct .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  DO *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? n? ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  N? At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:22:59"}, {"errata_id": "7254", "doc-id": "RFC9126", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1.1", "orig_text": "POST /as/par HTTP/1.1\r\nHost: as.example.com\r\nContent-Type: application/x-www-form-urlencoded\r\n\r\n&response_type=code\r\n&client_id=CLIENT1234&state=duk681S8n00GsJpe7n9boxdzen\r\n<...>", "correct_text": "POST /as/par HTTP/1.1\r\nHost: as.example.com\r\nContent-Type: application/x-www-form-urlencoded\r\n\r\nresponse_type=code\r\n&client_id=CLIENT1234&state=duk681S8n00GsJpe7n9boxdzen\r\n<...>", "notes": "In the 'Introductory Example', the POST body to the par endpoint contains an unnecessary '&' at the start. (It's perhaps technically valid, but could potentially confuse readers.)", "submit_date": "2022-11-18", "submitter_name": "Joseph Heenan", "verifier_id": "", "verifier_name": null, "update_date": "2022-11-21 21:58:28"}, {"errata_id": "6050", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-UK\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? DO .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  Pd *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '- s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-UK\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? DO .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  Pd *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '- s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:23:15"}, {"errata_id": "6051", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset EBCDIC-US\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Ct .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  DO *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset EBCDIC-US\r\n  &rem source: IBM 3270 Char Set Ref Ch 10, GA27-2837-9, April 1987\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Ct .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  DO *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nFor the sake of completeness I note that the originally listed source [2] only specifies a subset of the character codes in hex range 00-3F (see Figure 10-1), namely:\r\n\r\n  NU ?? ?? ?? ?? HT ?? ?? __ ?? ?? ?? FF CR ?? ??\r\n  ?? D1 D2 D3 ?? NL ?? ?? ?? EM ?? ?? FS GS RS ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? __ __ ?? ?? __ ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? D4 ?? ?? SB\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html\r\n[2]: IBM 3270 Information Display System Character Set Reference, GA27-2837-9 (April 1987) -- copy available at http://bitsavers.trailing-edge.com/pdf/ibm/3270/GA27-2837-9_3270_Character_Set_Reference_Apr87.pdf", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:23:30"}, {"errata_id": "9042", "doc-id": "RFC9846", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.3", "orig_text": "random:  32 bytes generated by a secure random number generator.  See\r\n      Appendix C for additional information.  The last 8 bytes MUST be\r\n      overwritten as described below if negotiating TLS 1.2 or TLS 1.1,\r\n      but the remaining bytes MUST be random.  This structure is\r\n      generated by the server and MUST be generated independently of the\r\n      ClientHello.random.", "correct_text": "random:  32 bytes generated by a secure random number generator.  See\r\n      Appendix C for additional information.  The last 8 bytes MUST be\r\n      overwritten as described below if negotiating TLS 1.2,\r\n      but the remaining bytes MUST be random.  This structure is\r\n      generated by the server and MUST be generated independently of the\r\n      ClientHello.random.", "notes": "TLS 1.1 is deprecated by RFC 8996.", "submit_date": "2026-07-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-29 13:48:25"}, {"errata_id": "6052", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM038\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &alias EBCDIC-INT\r\n  &alias cp038\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? <( .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? )> DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset IBM038\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias EBCDIC-INT\r\n  &alias cp038\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? <( .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? )> DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:23:44"}, {"errata_id": "6053", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM274\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &alias EBCDIC-BE\r\n  &alias CP274\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? <( .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? )> DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? u! ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb a! '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  e' A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  e! J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  c, ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset IBM274\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias EBCDIC-BE\r\n  &alias CP274\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? <( .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? )> DO *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? u! ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb a! '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? ': s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  e' A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  e! J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  c, ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:23:59"}, {"errata_id": "7255", "doc-id": "RFC8294", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "     typedef route-distinguisher {\r\n       type string {\r\n         pattern\r\n           '(0:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|'\r\n         +     '6[0-4][0-9]{3}|'\r\n         +     '[1-5][0-9]{4}|[1-9][0-9]{0,3}|0):(429496729[0-5]|'\r\n         +     '42949672[0-8][0-9]|'\r\n         +     '4294967[01][0-9]{2}|429496[0-6][0-9]{3}|'\r\n         +     '42949[0-5][0-9]{4}|'\r\n         +     '4294[0-8][0-9]{5}|429[0-3][0-9]{6}|'\r\n         +     '42[0-8][0-9]{7}|4[01][0-9]{8}|'\r\n         +     '[1-3][0-9]{9}|[1-9][0-9]{0,8}|0))|'\r\n         + '(1:((([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|'\r\n         +     '25[0-5])\\.){3}([0-9]|[1-9][0-9]|'\r\n         +     '1[0-9]{2}|2[0-4][0-9]|25[0-5])):(6553[0-5]|'\r\n         +     '655[0-2][0-9]|'\r\n         +     '65[0-4][0-9]{2}|6[0-4][0-9]{3}|'\r\n         +     '[1-5][0-9]{4}|[1-9][0-9]{0,3}|0))|'\r\n         + '(2:(429496729[0-5]|42949672[0-8][0-9]|'\r\n         +     '4294967[01][0-9]{2}|'\r\n         +     '429496[0-6][0-9]{3}|42949[0-5][0-9]{4}|'\r\n         +     '4294[0-8][0-9]{5}|'\r\n         +     '429[0-3][0-9]{6}|42[0-8][0-9]{7}|4[01][0-9]{8}|'\r\n         +     '[1-3][0-9]{9}|[1-9][0-9]{0,8}|0):'\r\n         +     '(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|'\r\n         +     '6[0-4][0-9]{3}|'\r\n         +     '[1-5][0-9]{4}|[1-9][0-9]{0,3}|0))|'\r\n         + '(6(:[a-fA-F0-9]{2}){6})|'\r\n         + '(([3-57-9a-fA-F]|[1-9a-fA-F][0-9a-fA-F]{1,3}):'\r\n         +     '[0-9a-fA-F]{1,12})';\r\n       }", "correct_text": "     typedef route-distinguisher {\r\n       type string {\r\n         pattern\r\n           '(0:(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|'\r\n         +     '6[0-4][0-9]{3}|'\r\n         +     '[1-5][0-9]{4}|[1-9][0-9]{0,3}|0):(429496729[0-5]|'\r\n         +     '42949672[0-8][0-9]|'\r\n         +     '4294967[01][0-9]{2}|429496[0-6][0-9]{3}|'\r\n         +     '42949[0-5][0-9]{4}|'\r\n         +     '4294[0-8][0-9]{5}|429[0-3][0-9]{6}|'\r\n         +     '42[0-8][0-9]{7}|4[01][0-9]{8}|'\r\n         +     '[1-3][0-9]{9}|[1-9][0-9]{0,8}|0))|'\r\n         + '(1:((([0-9]|[1-9][0-9]|1[0-9]{2}|2[0-4][0-9]|'\r\n         +     '25[0-5])\\.){3}([0-9]|[1-9][0-9]|'\r\n         +     '1[0-9]{2}|2[0-4][0-9]|25[0-5])):(6553[0-5]|'\r\n         +     '655[0-2][0-9]|'\r\n         +     '65[0-4][0-9]{2}|6[0-4][0-9]{3}|'\r\n         +     '[1-5][0-9]{4}|[1-9][0-9]{0,3}|0))|'\r\n         + '(2:(429496729[0-5]|42949672[0-8][0-9]|'\r\n         +     '4294967[01][0-9]{2}|'\r\n         +     '429496[0-6][0-9]{3}|42949[0-5][0-9]{4}|'\r\n         +     '4294[0-8][0-9]{5}|'\r\n         +     '429[0-3][0-9]{6}|42[0-8][0-9]{7}|4[01][0-9]{8}|'\r\n         +     '[1-3][0-9]{9}|[1-9][0-9]{0,8}|0):'\r\n         +     '(6553[0-5]|655[0-2][0-9]|65[0-4][0-9]{2}|'\r\n         +     '6[0-4][0-9]{3}|'\r\n         +     '[1-5][0-9]{4}|[1-9][0-9]{0,3}|0))';\r\n       }", "notes": "Type 6 route-distinguishers are not defined.  See the registry at IANA:\r\nhttps://www.iana.org/assignments/route-distinguisher-types/route-distinguisher-types.xhtml\r\n\r\n=== AD Notes (Alvaro Retana) ===\r\nThe WG discussed this report: https://mailarchive.ietf.org/arch/msg/rtgwg/o536w2kGqGO-PULTSNTfxyO96ZQ/\r\n\r\nThere is agreement that the report is correct, but the document needs to be updated. \r\n\r\nAlso, a similar error in the string related to the route-origin needs to also be corrected.", "submit_date": "2022-11-18", "submitter_name": "Jeffrey Haas", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2023-02-13 19:06:42"}, {"errata_id": "6054", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM281\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &alias EBCDIC-JP-E\r\n  &alias cp281\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Pd .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  Ye *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '- s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  DO ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset IBM281\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias EBCDIC-JP-E\r\n  &alias cp281\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? Pd .  <  (  +  !!\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? !  Ye *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '- s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  (! A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  DO ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:24:17"}, {"errata_id": "6055", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM290\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &alias cp290\r\n  &alias EBCDIC-JP-kana\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ._ <' >' ,_ .6 Wo a6 i6 u6 Pd .  <  (  +  !!\r\n  &  e6 o6 YA YU YO TU ?? -6 ?? !  Ye *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? A6 I6 U6 E6 O6 Ka Ki Ku Ke Ko ?? Sa Si Su Se\r\n  So Ta Ti Tu Te To Na Ni Nu Ne No ?? ?? Ha Hi Hu\r\n  ?? '- He Ho Ma Mi Mu Me Mo Ya Yu ?? Yo Ra Ri Ru\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? Re Ro Wa N6 \"5 05\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  DO ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset IBM290\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias cp290\r\n  &alias EBCDIC-JP-kana\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ._ <' >' ,_ .6 Wo a6 i6 u6 Pd .  <  (  +  !!\r\n  &  e6 o6 YA YU YO TU ?? -6 ?? !  Ye *  )  ;  NO\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? BB ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? '! :  Nb At '  =  \"\r\n  ?? A6 I6 U6 E6 O6 Ka Ki Ku Ke Ko ?? Sa Si Su Se\r\n  So Ta Ti Tu Te To Na Ni Nu Ne No ?? ?? Ha Hi Hu\r\n  ?? '- He Ho Ma Mi Mu Me Mo Ya Yu ?? Yo Ra Ri Ru\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? Re Ro Wa N6 \"5 05\r\n  ?? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  ?? J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  DO ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:24:34"}, {"errata_id": "6056", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM905\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &alias CP905\r\n  &alias ebcdic-cp-tr\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? a> a: a! a' ?? c. (! n? C, .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss G( I. *  )  ;  '>\r\n  -  /  A> A: A! A' ?? C. <( N? s, ,  %  _  >  ?\r\n  ?? E' E> E: E! I' I> I: I! i. :  O: S, '  =  U:\r\n  '( a  b  c  d  e  f  g  h  i  h/ c> s> u( ?? !!\r\n  DG j  k  l  m  n  o  p  q  r  h> g> j> '; ?? Cu\r\n  My o: s  t  u  v  w  x  y  z  H/ C> S> U( ?? At\r\n  .M Pd z. !) Z. SE )> ?? 12 DO H> G> J> ': '' *X\r\n  c, A  B  C  D  E  F  G  H  I  -- o> '? o! o' g.\r\n  g( J  K  L  M  N  O  P  Q  R  '! u> // u! u' ??\r\n  u: -: S  T  U  V  W  X  Y  Z  2S O> Nb O! O' G.\r\n  0  1  2  3  4  5  6  7  8  9  3S U> \"  U! U' DT", "correct_text": "  &charset IBM905\r\n  &rem source: IBM 3174 Character Set Ref, GA27-3831-02, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP905\r\n  &alias ebcdic-cp-tr\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? a> a: a! a' ?? c. (! n? C, .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss G( I. *  )  ;  '>\r\n  -  /  A> A: A! A' ?? C. <( N? s, ,  %  _  >  ?\r\n  ?? E' E> E: E! I' I> I: I! i. :  O: S, '  =  U:\r\n  '( a  b  c  d  e  f  g  h  i  h/ c> s> u( ?? !!\r\n  DG j  k  l  m  n  o  p  q  r  h> g> j> '; ?? Cu\r\n  My o: s  t  u  v  w  x  y  z  H/ C> S> U( ?? At\r\n  .M Pd z. !) Z. SE )> ?? 12 DO H> G> J> ': '' *X\r\n  c, A  B  C  D  E  F  G  H  I  -- o> '? o! o' g.\r\n  g( J  K  L  M  N  O  P  Q  R  '! u> // u! u' ??\r\n  u: -: S  T  U  V  W  X  Y  Z  2S O> Nb O! O' G.\r\n  0  1  2  3  4  5  6  7  8  9  3S U> \"  U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:24:48"}, {"errata_id": "6057", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM037\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias cp037\r\n  &alias ebcdic-cp-us\r\n  &alias ebcdic-cp-ca\r\n  &alias ebcdic-cp-wt\r\n  &alias ebcdic-cp-nl\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: a! a' a? aa c, n? Ct .  <  (  +  !!\r\n  &  e' e> e: e! i' i> i: i! ss !  DO *  )  ;  NO\r\n  -  /  A> A: A! A' A? AA C, N? BB ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  Nb At '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My '? s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  '> Pd Ye .M Co SE PI 14 12 34 <( )> '- ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  !) J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM037\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias cp037\r\n  &alias ebcdic-cp-us\r\n  &alias ebcdic-cp-ca\r\n  &alias ebcdic-cp-wt\r\n  &alias ebcdic-cp-nl\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: a! a' a? aa c, n? Ct .  <  (  +  !!\r\n  &  e' e> e: e! i' i> i: i! ss !  DO *  )  ;  NO\r\n  -  /  A> A: A! A' A? AA C, N? BB ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  Nb At '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My '? s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  '> Pd Ye .M Co SE PI 14 12 34 <( )> '- ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  !) J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:25:05"}, {"errata_id": "7256", "doc-id": "RFC7807", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "Note that because extensions are effectively put into a namespace by\r\nthe problem type, it is not possible to define new \"standard\" members\r\nwithout defining a new media type.", "correct_text": "Note that because extensions are effectively put into a namespace by\r\nthe problem type, it is not possible to define new \"standard\" members\r\nwithout defining a new problem type.", "notes": "Typo at the end of the sentence, defining extension members require defining new problem types not media types.\n --VERIFIER NOTES-- \nIn rejecting this Errata report I note that the reported error is not a typo, but a deliberate decision of the authors and working group. ", "submit_date": "2022-11-23", "submitter_name": "Ahmed Hussein", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-28 09:09:32"}, {"errata_id": "7257", "doc-id": "RFC7292", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix D.", "orig_text": " -- CRLBag\r\n CRLBag ::= SEQUENCE {\r\n     crlId     BAG-TYPE.&id ({CRLTypes}),\r\n     crltValue [0] EXPLICIT BAG-TYPE.&Type ({CRLTypes}{@crlId})\r\n }", "correct_text": " -- CRLBag\r\n CRLBag ::= SEQUENCE {\r\n     crlId     BAG-TYPE.&id ({CRLTypes}),\r\n     crlValue [0] EXPLICIT BAG-TYPE.&Type ({CRLTypes}{@crlId})\r\n }", "notes": "There's excess `t` in `crlValue`", "submit_date": "2022-11-25", "submitter_name": "Takashi Kato", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-11-28 22:49:07"}, {"errata_id": "7260", "doc-id": "RFC9196", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "   <CODE ENDS>\r\n\r\n   <CODE ENDS>\r\n", "correct_text": "   <CODE ENDS>\r\n\r\n", "notes": "Duplicate line of text", "submit_date": "2022-12-05", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-12-05 21:34:37"}, {"errata_id": "6059", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM275\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias EBCDIC-BR\r\n  &alias cp275\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? E' .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? DO C, *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? c, ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? a? :  O? A? '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  o? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  e' J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? DT", "correct_text": "  &charset IBM275\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias EBCDIC-BR\r\n  &alias cp275\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? ?? ?? ?? ?? ?? ?? ?? ?? E' .  <  (  +  !\r\n  &  ?? ?? ?? ?? ?? ?? ?? ?? ?? DO C, *  )  ;  '>\r\n  -  /  ?? ?? ?? ?? ?? ?? ?? ?? c, ,  %  _  >  ?\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? a? :  O? A? '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  ?? ?? ?? ?? ?? ??\r\n  ?? j  k  l  m  n  o  p  q  r  ?? ?? ?? ?? ?? ??\r\n  ?? '? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  o? A  B  C  D  E  F  G  H  I  ?? ?? ?? ?? ?? ??\r\n  e' J  K  L  M  N  O  P  Q  R  ?? ?? ?? ?? ?? ??\r\n  // ?? S  T  U  V  W  X  Y  Z  ?? ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  ?? ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:25:38"}, {"errata_id": "6060", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM277\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias EBCDIC-CP-DK\r\n  &alias EBCDIC-CP-NO\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: a! a' a? !) c, n? Nb .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss Cu AA *  )  ;  '>\r\n  -  /  A> A: A! A' A? DO C, N? o/ ,  %  _  >  ?\r\n  BB E' E> E: E! I' I> I: I! '! :  AE O/ '  =  \"\r\n  At a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o (! ', <( )>\r\n  My u: s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 NO !! '- ': '' *X\r\n  ae A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  aa J  K  L  M  N  O  P  Q  R  1S u> '? u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM277\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias EBCDIC-CP-DK\r\n  &alias EBCDIC-CP-NO\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: a! a' a? !) c, n? Nb .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss Cu AA *  )  ;  '>\r\n  -  /  A> A: A! A' A? DO C, N? o/ ,  %  _  >  ?\r\n  BB E' E> E: E! I' I> I: I! '! :  AE O/ '  =  \"\r\n  At a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o (! ', <( )>\r\n  My u: s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 NO !! '- ': '' *X\r\n  ae A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  aa J  K  L  M  N  O  P  Q  R  1S u> '? u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:25:53"}, {"errata_id": "6061", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM278\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP278\r\n  &alias ebcdic-cp-fi\r\n  &alias ebcdic-cp-se\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> (! a! a' a? !) c, n? SE .  <  (  +  !\r\n  &  '! e> e: e! i' i> i: i! ss Cu AA *  )  ;  '>\r\n  -  /  A> Nb A! A' A? DO C, N? o: ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! e' :  A: O: '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE )>\r\n  My u: s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co <( PI 14 12 34 NO !! '- ': '' *X\r\n  a: A  B  C  D  E  F  G  H  I  -- o> BB o! o' o?\r\n  aa J  K  L  M  N  O  P  Q  R  1S u> '? u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> At O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM278\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP278\r\n  &alias ebcdic-cp-fi\r\n  &alias ebcdic-cp-se\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> (! a! a' a? !) c, n? SE .  <  (  +  !\r\n  &  '! e> e: e! i' i> i: i! ss Cu AA *  )  ;  '>\r\n  -  /  A> Nb A! A' A? DO C, N? o: ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! e' :  A: O: '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE )>\r\n  My u: s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co <( PI 14 12 34 NO !! '- ': '' *X\r\n  a: A  B  C  D  E  F  G  H  I  -- o> BB o! o' o?\r\n  aa J  K  L  M  N  O  P  Q  R  1S u> '? u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> At O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:26:12"}, {"errata_id": "6062", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM280\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP280\r\n  &alias ebcdic-cp-it\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: (! a' a? aa // n? DG .  <  (  +  !\r\n  &  )> e> e: !) i' i> i: '? ss e' DO *  )  ;  '>\r\n  -  /  A> A: A! A' A? AA C, N? o! ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! u! :  Pd SE '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  <( j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My i! s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Nb Ye .M Co At PI 14 12 34 NO !! '- ': '' *X\r\n  a! A  B  C  D  E  F  G  H  I  -- o> o: BB o' o?\r\n  e! J  K  L  M  N  O  P  Q  R  1S u> u: '! u' y:\r\n  c, -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM280\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP280\r\n  &alias ebcdic-cp-it\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: (! a' a? aa // n? DG .  <  (  +  !\r\n  &  )> e> e: !) i' i> i: '? ss e' DO *  )  ;  '>\r\n  -  /  A> A: A! A' A? AA C, N? o! ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! u! :  Pd SE '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  <( j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My i! s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Nb Ye .M Co At PI 14 12 34 NO !! '- ': '' *X\r\n  a! A  B  C  D  E  F  G  H  I  -- o> o: BB o' o?\r\n  e! J  K  L  M  N  O  P  Q  R  1S u> u: '! u' y:\r\n  c, -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:26:27"}, {"errata_id": "6063", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM284\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP284\r\n  &alias ebcdic-cp-es\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: a! a' a? aa c, BB <( .  <  (  +  !!\r\n  &  e' e> e: e! i' i> i: i! ss )> DO *  )  ;  NO\r\n  -  /  A> A: A! A' A? AA C, Nb n? ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  N? At '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My ': s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 '> !  '- '? '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  !) J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM284\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP284\r\n  &alias ebcdic-cp-es\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: a! a' a? aa c, BB <( .  <  (  +  !!\r\n  &  e' e> e: e! i' i> i: i! ss )> DO *  )  ;  NO\r\n  -  /  A> A: A! A' A? AA C, Nb n? ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  N? At '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My ': s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 '> !  '- '? '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  !) J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:26:42"}, {"errata_id": "6065", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM297\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias cp297\r\n  &alias ebcdic-cp-fr\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: At a' a? aa // n? DG .  <  (  +  !\r\n  &  (! e> e: !) i' i> i: i! ss SE DO *  )  ;  '>\r\n  -  /  A> A: A! A' A? AA C, N? u! ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! My :  Pd a! '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  <( j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  '! ': s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Nb Ye .M Co )> PI 14 12 34 NO !! '- '? '' *X\r\n  e' A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  e! J  K  L  M  N  O  P  Q  R  1S u> u: BB u' y:\r\n  c, -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM297\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias cp297\r\n  &alias ebcdic-cp-fr\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: At a' a? aa // n? DG .  <  (  +  !\r\n  &  (! e> e: !) i' i> i: i! ss SE DO *  )  ;  '>\r\n  -  /  A> A: A! A' A? AA C, N? u! ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! My :  Pd a! '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  <( j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  '! ': s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Nb Ye .M Co )> PI 14 12 34 NO !! '- '? '' *X\r\n  e' A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  e! J  K  L  M  N  O  P  Q  R  1S u> u: BB u' y:\r\n  c, -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:27:13"}, {"errata_id": "6066", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM420\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem IBM NLS RM p 11-11\r\n  &alias cp420\r\n  &alias ebcdic-cp-ar1\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP  NS  3+  3+; ++  ??  H'  aM  aM. aH  Ct  .   <   (   +   !!\r\n  &   aH. wH  ??  ??  yH  a+  a+. b+  b+, !   DO  *   )   ;   NO\r\n  -   /   tm  t+  t+, tk  tk, g+  g+, hk  BB  ,   %   _   >   ?\r\n  hk, x+  x+, d+  dk  r+  z+  s+  s+, ,+  :   Nb  At  '   =   \"\r\n  sn  a   b   c   d   e   f   g   h   i   sn, c+  c+, dd  dd, tj\r\n  zH  j   k   l   m   n   o   p   q   r   e+  e+. e+, e+; i+  i+.\r\n  i+, -:  s   t   u   v   w   x   y   z   i+; f+  f+, q+  q+, k+\r\n  k+, l+  lM- lM. lH- lH. ??  ??  la- la. l+, m+  m+, n+  n+, h+\r\n  ;+  A   B   C   D   E   F   G   H   I   --  h+, ??  h+; ??  w+\r\n  ?+  J   K   L   M   N   O   P   Q   R   j+  j+. y+  y+. y+, 0a\r\n  *X  ??  S   T   U   V   W   X   Y   Z   1a  2a  ??  3a  4a  5a\r\n  0   1   2   3   4   5   6   7   8   9   ??  6a  7a  8a  9a  DT", "correct_text": "  &charset IBM420\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &rem IBM NLS RM p 11-11\r\n  &alias cp420\r\n  &alias ebcdic-cp-ar1\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP  NS  3+  3+; ++  ??  H'  aM  aM. aH  Ct  .   <   (   +   !!\r\n  &   aH. wH  ??  ??  yH  a+  a+. b+  b+, !   DO  *   )   ;   NO\r\n  -   /   tm  t+  t+, tk  tk, g+  g+, hk  BB  ,   %   _   >   ?\r\n  hk, x+  x+, d+  dk  r+  z+  s+  s+, ,+  :   Nb  At  '   =   \"\r\n  sn  a   b   c   d   e   f   g   h   i   sn, c+  c+, dd  dd, tj\r\n  zH  j   k   l   m   n   o   p   q   r   e+  e+. e+, e+; i+  i+.\r\n  i+, -:  s   t   u   v   w   x   y   z   i+; f+  f+, q+  q+, k+\r\n  k+, l+  lM- lM. lH- lH. ??  ??  la- la. l+, m+  m+, n+  n+, h+\r\n  ;+  A   B   C   D   E   F   G   H   I   --  h+, ??  h+; ??  w+\r\n  ?+  J   K   L   M   N   O   P   Q   R   j+  j+. y+  y+. y+, 0a\r\n  *X  ??  S   T   U   V   W   X   Y   Z   1a  2a  ??  3a  4a  5a\r\n  0   1   2   3   4   5   6   7   8   9   ??  6a  7a  8a  9a  __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:27:28"}, {"errata_id": "6067", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM423\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias cp423\r\n  &alias ebcdic-cp-gr\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP A* B* G* D* E* Z* Y* H* I* <( .  <  (  +  !\r\n  &  K* L* M* N* C* O* P* R* S* )> DO *  )  ;  '>\r\n  -  /  T* U* F* X* Q* W* ?? ?? ?? ,  %  _  >  ?\r\n  ?? A% E% Y% ?? I% O% U% W% '! :  Pd SE '  =  \"\r\n  A: a  b  c  d  e  f  g  h  i  a* b* g* d* e* z*\r\n  O: j  k  l  m  n  o  p  q  r  y* h* i* k* l* m*\r\n  U: ': s  t  u  v  w  x  y  z  n* c* o* p* r* *s\r\n  ?? a% e% y% j* i% o% u% v* w% s* t* u* f* x* q*\r\n  %' y= z= s% je sc c% =' JU A= B= C= D= E= F= G=\r\n  ', A  B  C  D  E  F  G  H  I  ?? w* A> a! a: e>\r\n  '' J  K  L  M  N  O  P  Q  R  +- e' e! e: i> i:\r\n  DG ?? S  T  U  V  W  X  Y  Z  12 o: o> u> u! u:\r\n  0  1  2  3  4  5  6  7  8  9  y: c, C, ?? ?? DT", "correct_text": "  &charset IBM423\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias cp423\r\n  &alias ebcdic-cp-gr\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP A* B* G* D* E* Z* Y* H* I* <( .  <  (  +  !\r\n  &  K* L* M* N* C* O* P* R* S* )> DO *  )  ;  '>\r\n  -  /  T* U* F* X* Q* W* ?? ?? ?? ,  %  _  >  ?\r\n  ?? A% E% Y% ?? I% O% U% W% '! :  Pd SE '  =  \"\r\n  A: a  b  c  d  e  f  g  h  i  a* b* g* d* e* z*\r\n  O: j  k  l  m  n  o  p  q  r  y* h* i* k* l* m*\r\n  U: ': s  t  u  v  w  x  y  z  n* c* o* p* r* *s\r\n  ?? a% e% y% j* i% o% u% v* w% s* t* u* f* x* q*\r\n  %' y= z= s% je sc c% =' JU A= B= C= D= E= F= G=\r\n  ', A  B  C  D  E  F  G  H  I  ?? w* A> a! a: e>\r\n  '' J  K  L  M  N  O  P  Q  R  +- e' e! e: i> i:\r\n  DG ?? S  T  U  V  W  X  Y  Z  12 o: o> u> u! u:\r\n  0  1  2  3  4  5  6  7  8  9  y: c, C, ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:27:45"}, {"errata_id": "6068", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM424\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias cp424\r\n  &alias ebcdic-cp-he\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP A+ B+ G+ D+ H+ W+ Z+ X+ Tj Ct .  <  (  +  !!\r\n  &  J+ K% K+ L+ M% M+ N% N+ S+ !  DO *  )  ;  NO\r\n  -  /  E+ P% P+ Zj ZJ Q+ R+ Sh BB ,  %  _  >  ?\r\n  ?? T+ ?? ?? NS ?? ?? ?? == '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  << >> ?? ?? ?? ??\r\n  DG j  k  l  m  n  o  p  q  r  ?? ?? ?? ', ?? Cu\r\n  My '? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? Rg\r\n  '> Pd Ye .M Co SE PI 14 12 34 <( )> '- ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  1S ?? ?? ?? ?? ??\r\n  // -: S  T  U  V  W  X  Y  Z  2S ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  3S ?? ?? ?? ?? DT", "correct_text": "  &charset IBM424\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias cp424\r\n  &alias ebcdic-cp-he\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP A+ B+ G+ D+ H+ W+ Z+ X+ Tj Ct .  <  (  +  !!\r\n  &  J+ K% K+ L+ M% M+ N% N+ S+ !  DO *  )  ;  NO\r\n  -  /  E+ P% P+ Zj ZJ Q+ R+ Sh BB ,  %  _  >  ?\r\n  ?? T+ ?? ?? NS ?? ?? ?? == '! :  Nb At '  =  \"\r\n  ?? a  b  c  d  e  f  g  h  i  << >> ?? ?? ?? ??\r\n  DG j  k  l  m  n  o  p  q  r  ?? ?? ?? ', ?? Cu\r\n  My '? s  t  u  v  w  x  y  z  ?? ?? ?? ?? ?? Rg\r\n  '> Pd Ye .M Co SE PI 14 12 34 <( )> '- ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- ?? ?? ?? ?? ??\r\n  !) J  K  L  M  N  O  P  Q  R  1S ?? ?? ?? ?? ??\r\n  // -: S  T  U  V  W  X  Y  Z  2S ?? ?? ?? ?? ??\r\n  0  1  2  3  4  5  6  7  8  9  3S ?? ?? ?? ?? __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:28:00"}, {"errata_id": "6069", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM500\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP500\r\n  &alias ebcdic-cp-be\r\n  &alias ebcdic-cp-ch\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: a! a' a? aa c, n? <( .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss )> DO *  )  ;  '>\r\n  -  /  A> A: A! A' A? AA C, N? BB ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  Nb At '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My '? s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 NO !! '- ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  !) J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM500\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP500\r\n  &alias ebcdic-cp-be\r\n  &alias ebcdic-cp-ch\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: a! a' a? aa c, n? <( .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss )> DO *  )  ;  '>\r\n  -  /  A> A: A! A' A? AA C, N? BB ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! '! :  Nb At '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> d- y' th +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae ', AE Cu\r\n  My '? s  t  u  v  w  x  y  z  !I ?I D- Y' TH Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 NO !! '- ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: o! o' o?\r\n  !) J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  // -: S  T  U  V  W  X  Y  Z  2S O> O: O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:28:17"}, {"errata_id": "7261", "doc-id": "RFC7946", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "An OPTIONAL third-position element SHALL be the height in meters above or below the \r\nWGS84 reference ellipsoid.", "correct_text": "An OPTIONAL third-position element SHALL be the height in meters above or below the \r\nEGM2008 geoid vertical datum, the height is defined with respect to the EGM2008 \r\nvertical coordinate reference system (providing close approximation to altitude above \r\nglobal mean sea level).", "notes": "Vertical coordinates, where used within GeoJSON shall be interpreted as with respect to the EGM2008 vertical datum.  Transformations from WGS84 vertical coordinate values to EGM2008 coordinate values shall not be implemented (unless by prior arrangement between involved parties) .\r\n\r\nThere is specification information within the EPSG registry on both the EGM2008 vertical datum:\r\nhttps://epsg.org/crs_3855/EGM2008-height.html\r\nand on the compound of WGS84 latitude longitude with EGM2008 altitude\r\nhttps://epsg.org/crs_9518/WGS-84-EGM2008-height.html\r\n\r\nCommon usage of altitude vertical coordinates is with respect to mean sea level. However, the original text within rfc7946 state that a vertical coordinate is with respect to the WGS84 reference ellipsoid.  \r\n\r\nThe WGS84 reference ellipsoid is an oblate spheroid that only partially approximates mean sea level. The EGM2008 (superseding EGM96) vertical  datum provides\r\n\"Zero-height surface resulting from the application of the EGM2008 geoid model to the WGS 84 ellipsoid.\" (https://epsg.org/crs_3855/EGM2008-height.htm)\r\nEGM2008 closely models mean sea level as a global vertical datum.\r\n \r\nDistortions are global position dependent, discrepancies can range from less than a metre to 10s of metres.  For example, at a location of  (50.218 -5.327 (WGS84)) the discrepancy between a WGS84 vertical coordinate and a EGM2008 vertical coordinate is 53.4 metres.\r\nThis is a really significant vertical discrepancy for a positional coordinate.\r\n\r\nThe update within this errata matches the specification to the widespread and common use of vertical position with respect to mean sea level, as measured by national mapping agencies and satellite earth observations.", "submit_date": "2022-12-08", "submitter_name": "mark hedley", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6070", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM870\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP870\r\n  &alias ebcdic-cp-roece\r\n  &alias ebcdic-cp-yu\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS ?? a: ?? a' a( c< c, c' <( .  <  (  +  !\r\n  &  e' ?? e: u0 i' ?? l< l' ss )> DO *  )  ;  '>\r\n  -  /  ?? A: '\" A' ?? C< C, C' !! ,  %  _  >  ?\r\n  '< E' ?? E: U0 I' ?? L< L' '! :  Nb At '  =  \"\r\n  '( a  b  c  d  e  f  g  h  i  s' n< d/ y' r< ??\r\n  DG j  k  l  m  n  o  p  q  r  l/ n' s< ', '; Cu\r\n  a; '? s  t  u  v  w  x  y  z  S' N< D/ Y' R< ??\r\n  .M A; z. ?? Z. SE PI z< z' Z< Z' N' S< ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: r' o' o\"\r\n  !) J  K  L  M  N  O  P  Q  R  E< u\" u: t< u' e<\r\n  // -: S  T  U  V  W  X  Y  Z  d< O> O: R' O' O\"\r\n  0  1  2  3  4  5  6  7  8  9  D< U\" U: T< U' DT", "correct_text": "  &charset IBM870\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP870\r\n  &alias ebcdic-cp-roece\r\n  &alias ebcdic-cp-yu\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS ?? a: ?? a' a( c< c, c' <( .  <  (  +  !\r\n  &  e' ?? e: u0 i' ?? l< l' ss )> DO *  )  ;  '>\r\n  -  /  ?? A: '\" A' ?? C< C, C' !! ,  %  _  >  ?\r\n  '< E' ?? E: U0 I' ?? L< L' '! :  Nb At '  =  \"\r\n  '( a  b  c  d  e  f  g  h  i  s' n< d/ y' r< ??\r\n  DG j  k  l  m  n  o  p  q  r  l/ n' s< ', '; Cu\r\n  a; '? s  t  u  v  w  x  y  z  S' N< D/ Y' R< ??\r\n  .M A; z. ?? Z. SE PI z< z' Z< Z' N' S< ': '' *X\r\n  (! A  B  C  D  E  F  G  H  I  -- o> o: r' o' o\"\r\n  !) J  K  L  M  N  O  P  Q  R  E< u\" u: t< u' e<\r\n  // -: S  T  U  V  W  X  Y  Z  d< O> O: R' O' O\"\r\n  0  1  2  3  4  5  6  7  8  9  D< U\" U: T< U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:28:31"}, {"errata_id": "6071", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM871\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP871\r\n  &alias ebcdic-cp-is\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: a! a' a? aa c, n? th .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss AE DO *  )  ;  O:\r\n  -  /  A> A: A! A' A? AA C, N? BB ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! d- :  Nb D- '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> '! y' (! +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o !) ', )> Cu\r\n  My o: s  t  u  v  w  x  y  z  !I ?I At Y' <( Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 NO !! '- ': // *X\r\n  TH A  B  C  D  E  F  G  H  I  -- o> '? o! o' o?\r\n  ae J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  '' -: S  T  U  V  W  X  Y  Z  2S O> '> O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' DT", "correct_text": "  &charset IBM871\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP871\r\n  &alias ebcdic-cp-is\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: a! a' a? aa c, n? th .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss AE DO *  )  ;  O:\r\n  -  /  A> A: A! A' A? AA C, N? BB ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! d- :  Nb D- '  =  \"\r\n  O/ a  b  c  d  e  f  g  h  i  << >> '! y' (! +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o !) ', )> Cu\r\n  My o: s  t  u  v  w  x  y  z  !I ?I At Y' <( Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 NO !! '- ': // *X\r\n  TH A  B  C  D  E  F  G  H  I  -- o> '? o! o' o?\r\n  ae J  K  L  M  N  O  P  Q  R  1S u> u: u! u' y:\r\n  '' -: S  T  U  V  W  X  Y  Z  2S O> '> O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> U: U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:28:49"}, {"errata_id": "6072", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM880\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias cp880\r\n  &alias EBCDIC-Cyrillic\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP ?? d% g% io ?? ds ii yi j% <( .  <  (  +  !\r\n  &  lj nj ts kj ?? dz =\" N0 D% )> DO *  )  ;  '>\r\n  -  /  G% IO ?? DS II YI J% LJ BB ,  %  _  >  ?\r\n  NJ Ts KJ ?? ?? DZ ju a= b= ?? :  Nb At '  =  \"\r\n  c= a  b  c  d  e  f  g  h  i  d= e= f= g= h= i=\r\n  j= j  k  l  m  n  o  p  q  r  k= l= m= n= o= p=\r\n  ja ?? s  t  u  v  w  x  y  z  r= s= t= u= z% v=\r\n  %' y= z= s% je sc c% =' JU A= B= C= D= E= F= G=\r\n  ?? A  B  C  D  E  F  G  H  I  H= I= J= K= L= M=\r\n  ?? J  K  L  M  N  O  P  Q  R  N= O= P= JA R= S=\r\n  // Cu S  T  U  V  W  X  Y  Z  T= U= Z% V= %\" Y=\r\n  0  1  2  3  4  5  6  7  8  9  Z= S% JE Sc C% DT", "correct_text": "  &charset IBM880\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias cp880\r\n  &alias EBCDIC-Cyrillic\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP ?? d% g% io ?? ds ii yi j% <( .  <  (  +  !\r\n  &  lj nj ts kj ?? dz =\" N0 D% )> DO *  )  ;  '>\r\n  -  /  G% IO ?? DS II YI J% LJ BB ,  %  _  >  ?\r\n  NJ Ts KJ ?? ?? DZ ju a= b= ?? :  Nb At '  =  \"\r\n  c= a  b  c  d  e  f  g  h  i  d= e= f= g= h= i=\r\n  j= j  k  l  m  n  o  p  q  r  k= l= m= n= o= p=\r\n  ja ?? s  t  u  v  w  x  y  z  r= s= t= u= z% v=\r\n  %' y= z= s% je sc c% =' JU A= B= C= D= E= F= G=\r\n  ?? A  B  C  D  E  F  G  H  I  H= I= J= K= L= M=\r\n  ?? J  K  L  M  N  O  P  Q  R  N= O= P= JA R= S=\r\n  // Cu S  T  U  V  W  X  Y  Z  T= U= Z% V= %\" Y=\r\n  0  1  2  3  4  5  6  7  8  9  Z= S% JE Sc C% __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:29:04"}, {"errata_id": "7259", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.2", "orig_text": "   The use of EAP-FAST-GTC as defined in RFC 5421 [RFC5421] is NOT\r\n   RECOMMENDED with TEAPv1 because EAP-FAST-GTC is not compliant with\r\n   EAP-GTC defined in [RFC3748].  Implementations should instead make\r\n   use of the password authentication TLVs defined in this\r\n   specification.  The authentication server initiates password\r\n   authentication by sending a Basic-Password-Auth-Req TLV defined in\r\n   Section 4.2.14.  If the peer wishes to participate in password\r\n   authentication, then it responds with a Basic-Password-Auth-Resp TLV\r\n   as defined in Section 4.2.15 that contains the username and password.\r\n   If it does not wish to perform password authentication, then it\r\n   responds with a NAK TLV indicating the rejection of the Basic-\r\n   Password-Auth-Req TLV.  Upon receiving the response, the server\r\n   indicates the success or failure of the exchange using an\r\n   Intermediate-Result TLV.  Multiple round trips of password\r\n   authentication requests and responses MAY be used to support some\r\n   \"housecleaning\" functions such as a password or pin change before a\r\n   user is authenticated.\r\n", "correct_text": "   The use of EAP-FAST-GTC as defined in RFC 5421 [RFC5421] is NOT\r\n   RECOMMENDED with TEAPv1 because EAP-FAST-GTC is not compliant with\r\n   EAP-GTC defined in [RFC3748].  Implementations should instead make\r\n   use of the password authentication TLVs defined in this\r\n   specification.  The authentication server initiates password\r\n   authentication by sending a Basic-Password-Auth-Req TLV defined in\r\n   Section 4.2.14.  If the peer wishes to participate in password\r\n   authentication, then it responds with a Basic-Password-Auth-Resp TLV\r\n   as defined in Section 4.2.15 that contains the username and password.\r\n   If it does not wish to perform password authentication, then it\r\n   responds with a NAK TLV indicating the rejection of the Basic-\r\n   Password-Auth-Req TLV.  Upon receiving the response, the server\r\n   indicates the success or failure of the exchange using an\r\n   Intermediate-Result TLV.  Multiple round trips of password\r\n   authentication requests and responses MAY be used to support some\r\n   \"housecleaning\" functions such as a password or pin change before a\r\n   user is authenticated.\r\n\r\n   If using EAP-MSCHAPv2 as an inner method, the EAP-FAST-MSCHAPv2\r\n   variant defined in [RFC5422] MUST be used.", "notes": "While RFC 7170 does not really require this and would be technically correct as-is for this area, deployed implementations of EAP-TEAP seem to have used MSK/IMSK derivation for an inner EAP method in a manner that matches what was done with EAP-FAST. This could be called non-compliant, but for the sake of interoperability, it might make more sense to describe what is done in deployed implementation instead. The only technical difference here is in swapping the first and the second 16 octets of EAP-MSCHAPv2 MSK when it is used as the IMSK for EAP-TEAP.", "submit_date": "2022-12-01", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-01 11:36:12"}, {"errata_id": "7535", "doc-id": "RFC9399", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   Consequently, if relying party software accepts a CA, then it should\r\n   be prepared to (unquestioningly) display the associated logotypes to\r\n   its human user, given that it is configured to do so.  Information\r\n   about the logotypes is provided so that the replying party software\r\n   can select the one that will best meet the needs of the human user.\r\n   This choice depends on the abilities of the human user, as well as\r\n   the capabilities of the platform on which the replaying party\r\n   software is running.", "correct_text": "   Consequently, if relying party software accepts a CA, then it should\r\n   be prepared to (unquestioningly) display the associated logotypes to\r\n   its human user, given that it is configured to do so.  Information\r\n   about the logotypes is provided so that the relying party software\r\n   can select the one that will best meet the needs of the human user.\r\n   This choice depends on the abilities of the human user, as well as\r\n   the capabilities of the platform on which the relying party\r\n   software is running.", "notes": "The phrases \"replying party\" and \"replaying party\" are typos and should be \"relying party\"", "submit_date": "2023-06-05", "submitter_name": "Preston Locke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-05 21:10:20"}, {"errata_id": "7536", "doc-id": "RFC9399", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   Care is needed when designing replying party software to ensure that\r\n   an appropriate context of logotype information is provided.", "correct_text": "   Care is needed when designing relying party software to ensure that\r\n   an appropriate context of logotype information is provided.", "notes": "The phrase \"replying party\" is a typo and should be \"relying party\"", "submit_date": "2023-06-05", "submitter_name": "Preston Locke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-05 21:13:07"}, {"errata_id": "6073", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "  &charset IBM918\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP918\r\n  &alias ebcdic-cp-ar2\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP  NS  ,+  ;+  ?+  aH  a+  a+. ??  b+  <(  .   <   (   +   !\r\n  &   b+, p+  ??  tm  t+  t+, ??  ??  tk  )>  DO  *   )   ;   '>\r\n  -   /   tk, g+  g+, ??  ??  hk  hk, x+  '!  ,   %   _   >   ?\r\n  0a  1a  2a  3a  4a  5a  6a  7a  8a  9a  :   Nb  At  '   =   \"\r\n  x+, a   b   c   d   e   f   g   h   i   d+  ??  dk  r+  ??  z+\r\n  ??  j   k   l   m   n   o   p   q   r   s+  s+, sn  sn, c+  c+,\r\n  dd  '?  s   t   u   v   w   x   y   z   dd, tj  zH  e+  e+. e+,\r\n  e+; i+  i+. i+, i+; f+  f+, q+  q+, k+  k+, !!  ??  ??  l+  l+.\r\n  (!  A   B   C   D   E   F   G   H   I   --  ??  m+  m+, ??  n+\r\n  !)  J   K   L   M   N   O   P   Q   R   n+, ??  w+  ??  ??  ??\r\n  //  ??  S   T   U   V   W   X   Y   Z   H'  ??  ??  ??  ??  ??\r\n  0   1   2   3   4   5   6   7   8   9   ??  ??  ??  3+  3+; DT", "correct_text": "  &charset IBM918\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP918\r\n  &alias ebcdic-cp-ar2\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP  NS  ,+  ;+  ?+  aH  a+  a+. ??  b+  <(  .   <   (   +   !\r\n  &   b+, p+  ??  tm  t+  t+, ??  ??  tk  )>  DO  *   )   ;   '>\r\n  -   /   tk, g+  g+, ??  ??  hk  hk, x+  '!  ,   %   _   >   ?\r\n  0a  1a  2a  3a  4a  5a  6a  7a  8a  9a  :   Nb  At  '   =   \"\r\n  x+, a   b   c   d   e   f   g   h   i   d+  ??  dk  r+  ??  z+\r\n  ??  j   k   l   m   n   o   p   q   r   s+  s+, sn  sn, c+  c+,\r\n  dd  '?  s   t   u   v   w   x   y   z   dd, tj  zH  e+  e+. e+,\r\n  e+; i+  i+. i+, i+; f+  f+, q+  q+, k+  k+, !!  ??  ??  l+  l+.\r\n  (!  A   B   C   D   E   F   G   H   I   --  ??  m+  m+, ??  n+\r\n  !)  J   K   L   M   N   O   P   Q   R   n+, ??  w+  ??  ??  ??\r\n  //  ??  S   T   U   V   W   X   Y   Z   H'  ??  ??  ??  ??  ??\r\n  0   1   2   3   4   5   6   7   8   9   ??  ??  ??  3+  3+; __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:29:21"}, {"errata_id": "6074", "doc-id": "RFC1345", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "  &charset IBM1026\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &alias CP1026\r\n  &code 0\r\n  NU SH SX EX ET EQ AK BL BS HT LF VT FF CR SO SI\r\n  DL D1 D2 D3 D4 NK SY EB CN EM SB EC FS GS RS US\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??\r\n  SP NS a> a: a! a' a? aa (! n? C, .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss G( I. *  )  ;  '>\r\n  -  /  A> A: A! A' A? AA <( N? s, ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! i. :  O: S, '  =  U:\r\n  O/ a  b  c  d  e  f  g  h  i  << >> !) '! BB +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae '; AE Cu\r\n  My o: s  t  u  v  w  x  y  z  !I ?I )> DO At Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 NO !! -M ': '' *X\r\n  c, A  B  C  D  E  F  G  H  I  -- o> '? o! o' o?\r\n  g( J  K  L  M  N  O  P  Q  R  1S u> // u! u' y:\r\n  u: -: S  T  U  V  W  X  Y  Z  2S O> Nb O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> \"  U! U' DT", "correct_text": "  &charset IBM1026\r\n  &rem source: IBM NLS RM Vol2 SE09-8002-01, March 1990\r\n  &rem source: IBM Corporate Standard, C-S 3-3220-002\r\n  &alias CP1026\r\n  &code 0\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n  SP NS a> a: a! a' a? aa (! n? C, .  <  (  +  !\r\n  &  e' e> e: e! i' i> i: i! ss G( I. *  )  ;  '>\r\n  -  /  A> A: A! A' A? AA <( N? s, ,  %  _  >  ?\r\n  o/ E' E> E: E! I' I> I: I! i. :  O: S, '  =  U:\r\n  O/ a  b  c  d  e  f  g  h  i  << >> !) '! BB +-\r\n  DG j  k  l  m  n  o  p  q  r  -a -o ae '; AE Cu\r\n  My o: s  t  u  v  w  x  y  z  !I ?I )> DO At Rg\r\n  Ct Pd Ye .M Co SE PI 14 12 34 NO !! -M ': '' *X\r\n  c, A  B  C  D  E  F  G  H  I  -- o> '? o! o' o?\r\n  g( J  K  L  M  N  O  P  Q  R  1S u> // u! u' y:\r\n  u: -: S  T  U  V  W  X  Y  Z  2S O> Nb O! O' O?\r\n  0  1  2  3  4  5  6  7  8  9  3S U> \"  U! U' __\r\n  &duplicate 1F __", "notes": "The EBCDIC character sets do not use the ASCII control codes.\r\nBased on [1] the EBCDIC control codes located at hex 00-3F are\r\n\r\n  NU SH SX EX __ HT __ DT __ __ __ VT FF CR SO SI\r\n  DL D1 D2 D3 __ NL BS __ CN EM __ __ FS GS RS US\r\n  __ __ __ __ __ LF EB EC __ __ __ __ __ EQ AK BL\r\n  ?? ?? SY __ __ __ __ ET __ __ __ __ D4 NK ?? SB\r\n\r\nwith __ marking control codes with no ISO 10646 mapping.\r\nThe control code at hex 1F can depending on context either mean \"Interchange Unit Separator\" or \"Intermediate Transmission Block\" but only the prior has an ISO 10646 mapping (mnemonic US). The \"&duplicate 1F __\" part marks the alternative character with no available mapping. Note that in EBCDIC the \"Delete\" character is located at hex 07 while hex FF is \"Eight Ones\", another character with no ISO 10646 equivalent.\r\n\r\nReferences:\r\n[1]: IBM Corporate Standard, C-S 3-3220-002 (May 1990) -- archived IBM excerpt available at https://web.archive.org/web/20180911044845/https://www-01.ibm.com/software/globalization/cdra/appendix_g1.html", "submit_date": "2020-04-01", "submitter_name": "Philip B\u00f8rgesen", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-03 21:10:07"}, {"errata_id": "6076", "doc-id": "RFC6376", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": ".6", "orig_text": "      domain-name     = sub-domain 1*(\".\" sub-domain)\r\n                        ; from [RFC5321] Domain,\r\n                        ; excluding address-literal\r\n", "correct_text": "      domain-name     = sub-domain 1*(\".\" sub-domain)\r\n                        ; from [RFC5321] Domain\r\n                        \r\n", "notes": "In RFC5321 \"domain\" does not include address-literal. This mistake was copied from RFC4871\r\n(which referred to the [RFC2821] Domain, which does include address-literal). \r\nThis report is just to flag it so we don't put it in the next revision.", "submit_date": "2020-04-01", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-04-01 21:56:07"}, {"errata_id": "6077", "doc-id": "RFC8774", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "time travel will never work (or it would already have been used).", "correct_text": "time travel is still not available in the consumer market.", "notes": "While the introduction section may allow some more leniency, its discarding of RFC6921 based on an unfounded dismissal of time travel shows a lack of the required technical competence that should be cardinal for a serious publication such as this [RFC 3935]. The simplistic \"it would already have been used\" misses any rigorous testing and falls for the fallacy best described by the 19th century aphorism Absence of Evidence Is Not Evidence of Absence [QUOTE-INV]. Not only do we lack any method to detect whether time travel has been used already (with 'already being used' defined as the timestamp of either point of the time travel journey being prior to the current point in time, i.e. satisfying a lesser-than operation when the representations of their TAI [IEEE1588] values are checked with the comparison defined in [RFC2550]) but there are also many sensible reasons for time travel invented in the future not leading (coronavirus-aside) to an interaction with 2020 human beings (much less to a widely known one), as has been thoroughly studied in [WHY-HAVENT].\r\n\r\n\r\n\r\n[RFC6921]  Hinden, R., \"Design Considerations for Faster-Than-Light\r\n          (FTL) Communication\", RFC 6921, DOI 10.17487/RFC6921,\r\n          April 2013, <https://www.rfc-editor.org/info/rfc6921>.\r\n\r\n[QUOTE-INV] Quote Investigator \"Absence of Evidence Is Not Evidence \r\n\t\t\tof Absence\", 17 September 2019\r\n\r\n[IEEE1588] IEEE, \"IEEE Standard for a Precision Clock Synchronization\r\n          Protocol for Networked Measurement and Control Systems\",\r\n          IEEE Std 1588-2008, DOI 10.1109/IEEESTD.2008.4579760, July\r\n          2008.\r\n\r\n[RFC2550] S. Glassman, M. Manasse, J. Mogul, \"Y10K and Beyond\", RFC 2550,\r\n\t\tApril 1999, <https://www.rfc-editor.org/info/rfc2550>\r\n\r\n[WHY-HAVENT] World Building Community, \"If time travel is possible in the \r\n\t\tfuture, no matter how distant, why haven't they come back to \r\n\t\ttell us?\", August 2016\r\n\t\t<https://worldbuilding.stackexchange.com/questions/51210/if-time-travel-is-possible-in-the-future-no-matter-how-distant-why-havent-the/51377>\n --VERIFIER NOTES-- \n   Thank you for your report, but your logic fails the Elon Musk effect, which is that Time Travel would in all likelihood eventually be privatized for rich incompetent tourists who would undoubtedly have been discovered.", "submit_date": "2020-04-01", "submitter_name": "\u00c1ngel", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-11-01 12:46:22"}, {"errata_id": "6085", "doc-id": "RFC8011", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1.4", "orig_text": "The 'keyword' attribute syntax is a sequence of characters, of length\r\n1 to 255, containing only the US-ASCII [RFC20] encoded values for\r\nlowercase letters (\"a\"-\"z\"), digits (\"0\"-\"9\"), hyphen (\"-\"), dot\r\n(\".\"), and underscore (\"_\").  The first character MUST be a lowercase\r\nletter.", "correct_text": "The 'keyword' attribute syntax is a sequence of characters, of length \r\n1 to 255, containing only the US-ASCII [RFC20] encoded values for \r\nuppercase letters (\"A\"-\"Z\"), lowercase letters (\"a\"-\"z\"), digits (\"0\"-\"9\"), \r\nhyphen (\"-\"), dot (\".\"), and underscore (\"_\"). The first character SHOULD be \r\na lowercase letter, and all letters SHOULD be lowercase. ", "notes": "First, the \"keyword\" syntax is applicable to values of enumerations according to Section 5.1.5 stating\r\n\r\n   Each value has an associated 'keyword' name.\r\n\r\nHowever, Section 5.4.15 is declaring some enum-type attribute with names per integer value using uppercase letters in violation of Section 5.1.4. Those names are commonly used all over the specification and thus it is rather common to assume those values are meant to be keyword-compliant names of given enumeration.\r\n\r\nSecond, Section 5.1.4 is stating\r\n\r\n    The first character MUST be a lowercase letter.\r\n\r\nreferring to \"a\"-\"z\" according to enumeration of accepted characters given right before that. In opposition to that statement 5.4.14 is declaring\r\n\r\n    The following standard 'keyword' values are defined in this document:\r\n\r\n    * '1.0' [..]\r\n    * '1.1' [..]\r\n\r\nNeither of the two \"keywords\" start with a lowercase letter.", "submit_date": "2020-04-10", "submitter_name": "Thomas Urban", "verifier_id": "", "verifier_name": null, "update_date": "2020-10-08 21:21:26"}, {"errata_id": "6256", "doc-id": "RFC4271", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.1.3", "orig_text": "3) When sending a message to an external peer X, and the peer is\r\nmultiple IP hops away from the speaker (aka \"multihop EBGP\"):\r\n...\r\n- By default, the BGP speaker SHOULD use the IP address of the interface that the speaker uses in the NEXT_HOP attribute to establish the BGP connection to peer X.", "correct_text": "3) When sending a message to an external peer X, and the peer is\r\nmultiple IP hops away from the speaker (aka \"multihop EBGP\"):\r\n...\r\n- By default, the BGP speaker SHOULD use the IP address of the interface that the speaker uses to establish the BGP connection to peer X in the NEXT_HOP attribute.", "notes": "confusing incorrect word order:\r\nreading the original text, the reader might think that the BGP speaker is using the NEXT_HOP attribute as part of establishing a connection with the peer", "submit_date": "2020-08-12", "submitter_name": "Anton Yushkov", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-08-18 18:00:52"}, {"errata_id": "6257", "doc-id": "RFC8439", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.5.2", "orig_text": "Adding s, we get this number, and serialize if to get the tag:", "correct_text": "Adding s, we get this number, and serialize it to get the tag:", "notes": "It's a trivial typo. Change \"if\" to \"it\".", "submit_date": "2020-08-18", "submitter_name": "Alan Presser", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2021-04-13 12:22:08"}, {"errata_id": "7538", "doc-id": "RFC5054", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": " The version of SRP used here is sometimes referred to as \"SRP-6\"\r\n   [SRP-6].", "correct_text": " The version of SRP used here is sometimes referred to as \"SRP-6a\"\r\n   [SRP-6a].\r\n\r\n\r\n [SRP-6a]: Wu, T., \"SRP Protocol Design\", circa 2005, http://srp.stanford.edu/design.html", "notes": "The protocol described uses a non-constant k, which is an innovation of SRP-6a -- never published formally in a technical report (until this RFC) and dating to ~2005 if we go by the libsrp version history. Actual [SRP-6] of 2002 uses a constant k = 3.\r\n\r\nReference to the [SRP-6] text is still valuable for rationale, but is not accurate. Confusion between these two versions is harmful and may impeded interoperability.", "submit_date": "2023-06-07", "submitter_name": "Mingye Wang", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-10-11 00:33:53"}, {"errata_id": "6081", "doc-id": "RFC6458", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "8.1.26    must indicate that they are\r\n   finished sending a particular record by including the SCTP_EOR flag.\r\n\r\nbut I can not find where to use SCTP_EOR flag.\r\n\r\nbecause\r\n\r\n5.1  The msg_flags are not used when sending a message with sendmsg().\r\n\r\n3.1.4  flags:  No new flags are defined for SCTP at this level.  See\r\n      Section 5 for SCTP-specific flags used in the msghdr structure.\r\n\r\n4.1.8 same with 3.1.4\r\n\r\n9.10, 9.12    flags:  The same flags as used by the sendmsg() call flags (e.g.,\r\n      MSG_DONTROUTE).\r\n\r\n9.7   flags:  The same as sinfo_flags (see Section 5.3.2).\r\n\r\n5.3.2 sinfo_flags not mention about it  ", "correct_text": "maybe msg_flags should be used.", "notes": "Another problem is that, I think it should be discuss about debfine a flag like SCTP_BOR for beginning(init chunk) of a Record, because a stream of this socket(assoc) can still be used after send a SCTP_EOR.\r\n\r\nAnd between  a init chunk and  a STCP_EOR,  if I change SCTP_EXPLICIT_EOR status, what the socket will send the message?\n --VERIFIER NOTES-- \n6111 addresses the same problem and has a more actionable recommendation.", "submit_date": "2020-04-09", "submitter_name": "wanglihe", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 21:53:28"}, {"errata_id": "6082", "doc-id": "RFC8469", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "Thus, if the source MAC address of an Ethernet frame carried over\r\nthe PW without a control word present begins with 0x4 or 0x6, it\r\ncould be mistaken for an IPv4 or IPv6 packet.  This could,\r\ndepending on the configuration and topology of the MPLS network,\r\nlead to a situation where all packets for a given PW do not follow\r\nthe same path.", "correct_text": "Thus, if the destination MAC address of an Ethernet frame carried over\r\nthe PW without a control word present begins with 0x4 or 0x6, it\r\ncould be mistaken for an IPv4 or IPv6 packet.  This could,\r\ndepending on the configuration and topology of the MPLS network,\r\nlead to a situation where all packets for a given PW do not follow\r\nthe same path.", "notes": "The first nibble of an Ethernet frame is the first nibble of the destination MAC address, not the source MAC address.  The erroneous packet reordering occurs for traffic traveling toward the device with the 0x4... or 0x6... MAC address", "submit_date": "2020-04-09", "submitter_name": "Michal Dolegowski", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-04-10 19:00:31"}, {"errata_id": "6083", "doc-id": "RFC7959", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "       +-----+---+---+---+---+--------+--------+--------+---------+\r\n       | No. | C | U | N | R | Name   | Format | Length | Default |\r\n       +-----+---+---+---+---+--------+--------+--------+---------+\r\n       |  23 | C | U | - | - | Block2 | uint   |    0-3 | (none)  |\r\n       |     |   |   |   |   |        |        |        |         |\r\n       |  27 | C | U | - | - | Block1 | uint   |    0-3 | (none)  |\r\n       +-----+---+---+---+---+--------+--------+--------+---------+\r\n\r\n                       Table 1: Block Option Numbers", "correct_text": "       +-----+---+---+---+---+--------+--------+--------+---------+\r\n       | No. | C | U | N | R | Name   | Format | Length | Default |\r\n       +-----+---+---+---+---+--------+--------+--------+---------+\r\n       |  23 | x | x | - |   | Block2 | uint   |    0-3 | (none)  |\r\n       |     |   |   |   |   |        |        |        |         |\r\n       |  27 | x | x | - |   | Block1 | uint   |    0-3 | (none)  |\r\n       +-----+---+---+---+---+--------+--------+--------+---------+\r\n\r\n                       Table 1: Block Option Numbers", "notes": "* This is to align with the conventions in Section 5.10 of RFC7252\r\n* These options are not repeatable as per:\r\n\r\n\"Either Block option MUST NOT occur more than once in a\r\n   single message.\"", "submit_date": "2020-04-09", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-10 14:22:52"}, {"errata_id": "6084", "doc-id": "RFC7868", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.6.2.3.", "orig_text": "   The formula for the conversion for Max-Throughput value directly from\r\n   the interface without consideration of congestion-based effects is as\r\n   follows:\r\n\r\n                                  (EIGRP_BANDWIDTH * EIGRP_WIDE_SCALE)\r\n        Max-Throughput = K1 *     ------------------------------------\r\n                                       Interface Bandwidth (kbps)\r\n\r\n\r\n   If K2 is used, the effect of congestion as a measure of load reported\r\n   by the interface will be used to simulate the \"available Throughput\"\r\n   by adjusting the maximum Throughput according to the formula:\r\n\r\n                                           K2 * Max-Throughput\r\n        Net-Throughput = Max-Throughput + ---------------------\r\n                                              256 - Load\r\n", "correct_text": "   The formula for the conversion for Max-Throughput value directly from\r\n   the interface without consideration of congestion-based effects is as\r\n   follows:\r\n\r\n                           EIGRP_BANDWIDTH * EIGRP_WIDE_SCALE\r\n        Max-Throughput =  ------------------------------------\r\n                               Interface Bandwidth (kbps)\r\n\r\n\r\n   If K2 is used, the effect of congestion as a measure of load reported\r\n   by the interface will be used to simulate the \"available Throughput\"\r\n   by adjusting the maximum Throughput according to the formula:\r\n\r\n                                                K2 * Max-Throughput\r\n        Net-Throughput = K1 * Max-Throughput + ---------------------\r\n                                                     256 - Load\r\n", "notes": "K1 can't be a part of Max-Throughput as it affects Net-Throughput twice. Moreover: in case of K1=0, K2 become ignored as it will be multiplied by 0.\r\n\r\nTogether with errata ID: 5242 which fixes metric formula {metric =[Net-Throughput+Latency+(K6*ExtAttr)] * K5/(K4+Rel) }, results become correct and are same as on live equipment.", "submit_date": "2020-04-10", "submitter_name": "Rafa\u0142 Cygnarowski", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6086", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4.2.", "orig_text": "   Routes learned\r\n   though interfaces that EIGRP is NOT using to reach the destination\r\n   may have the route advertised out those interfaces.", "correct_text": "   Routes learned\r\n   through interfaces that EIGRP is NOT using to reach the destination\r\n   may have the route advertised out those interfaces.", "notes": "Typo in 'through' word.", "submit_date": "2020-04-11", "submitter_name": "Rafa\u0142 Cygnarowski", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2020-04-21 23:06:48"}, {"errata_id": "6087", "doc-id": "RFC20", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "First page", "orig_text": "the attached page, copies from", "correct_text": "the attached pages, copied from", "notes": "It seems certain that the intended meaning was \"the attached pages, which were copied from\" (where it is customary to omit the words \"which were\"). The attachment referred to consists of five sheets photocopied from USAS X3.4-1968, USA Standard Code for Information Interchange.", "submit_date": "2020-04-12", "submitter_name": "Daniel N. Strychalski", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-12 02:54:16"}, {"errata_id": "6088", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.", "orig_text": "   EIGRP IPv4 will transmit HELLO packets using either the unicast\r\n   destination of a neighbor or using a multicast host group address [7]\r\n   with a source address EIGRP IPv4 multicast address [13].", "correct_text": "   EIGRP IPv4 will transmit HELLO packets using either the unicast\r\n   destination of a neighbor or using a multicast host group address [7]\r\n   with a destination address EIGRP IPv4 multicast address [13].", "notes": "Multicast address is a destination address.", "submit_date": "2020-04-12", "submitter_name": "Rafa\u0142 Cygnarowski", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-04-01 14:17:16"}, {"errata_id": "6093", "doc-id": "RFC6265", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   Origin servers SHOULD NOT fold multiple Set-Cookie header fields into\r\n   a single header field.  The usual mechanism for folding HTTP headers\r\n   fields (i.e., as defined in [RFC2616]) might change the semantics of\r\n   the Set-Cookie header field because the %x2C (\",\") character is used\r\n   by Set-Cookie in a way that conflicts with such folding.", "correct_text": "   Origin servers SHOULD NOT combine multiple Set-Cookie header fields into \r\n   a single header field.  The usual mechanism for combining HTTP headers \r\n   fields (i.e., as defined in [RFC2616]) might change the semantics of \r\n   the Set-Cookie header field because the %x2C (\",\") character is used \r\n   by Set-Cookie in a way that conflicts with such actions.", "notes": "RFC 6265 currently uses the verb \"folding\" when it refers to combining multiple header fields into one, which is ambiguous in the context of the HTTP/1 specs (both by RFC2616 and RFC 7230) where \"folding\" consistently refers to line folding, and the verb \"combine\" is used to describe merging same headers. Having a light HTTP knowledge, I naively started looking up \"folding\" in the HTTP specs, and was immediately confused by the results, others will probably be as well (especially is English is not their native tongue).\r\n\r\nExamples to prove this consistency:\r\n+ RFC 2616, Section 4.2, Message Headers, but searching for the for the word \"combine\" will bring up special cases.\r\n+ RFC 7230, Section 3.2.2, Field Order\r\n+ RFC 2616, Section 2.2, Basic Rules\r\n+ RFC 7230, Section 3.2.4, Field Parsing\r\n\r\nThank you!", "submit_date": "2020-04-12", "submitter_name": "Attila Gulyas", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2025-02-12 11:50:21"}, {"errata_id": "6094", "doc-id": "RFC1760", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Overview says:", "orig_text": "One form of attack on computing system connected to the Internet is eavesdropping on network connections", "correct_text": "One form of attack on a computing system connected to the Internet is eavesdropping on network connections", "notes": "An article \"a\" should be added in front of \"computing system\" (i.e. \"a computing system\") for this statement to be grammatically correct.", "submit_date": "2020-04-12", "submitter_name": "Brian Jopling", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-14 22:23:35"}, {"errata_id": "6095", "doc-id": "RFC1760", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Overview says:", "orig_text": "The captured login id and password are, at a later time, used gain access to the system.", "correct_text": "The captured login id and password are, at a later time, used to gain access to the system.", "notes": "Missing \"to\" in \"used to gain access.\"", "submit_date": "2020-04-12", "submitter_name": "Brian Jopling", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-14 22:25:20"}, {"errata_id": "6096", "doc-id": "RFC1760", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "or against active attacks where the potential intruder as able to intercept", "correct_text": "or against active attacks where the potential intruder is able to intercept", "notes": "Changed \"intruder as able\" to \"intruder is able.\"", "submit_date": "2020-04-12", "submitter_name": "Brian Jopling", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-16 17:34:12"}, {"errata_id": "6097", "doc-id": "RFC1760", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Secure Hash Function section says:", "orig_text": "We have chosen to continue to use MD4 due the large number of client programs", "correct_text": "We have chosen to continue to use MD4 due to the large number of client programs", "notes": "Missing \"to\" in \"due to the.\"", "submit_date": "2020-04-12", "submitter_name": "Brian Jopling", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-17 06:27:52"}, {"errata_id": "6098", "doc-id": "RFC1760", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Form of Passwords sections says:", "orig_text": "Interoperability requires at all S/KEY system hosts and calculators \r\nuse the same dictionary.", "correct_text": "Interoperability requires that all S/KEY system hosts and calculators \r\nuse the same dictionary.", "notes": "Changed \"Interoperability requires at all\" to \"Interoperability requires that all.\"", "submit_date": "2020-04-12", "submitter_name": "Brian Jopling", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-17 06:33:48"}, {"errata_id": "6099", "doc-id": "RFC1760", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Verification of One-Time Passwords section says:", "orig_text": "This challenge give the client the current S/KEY parameters", "correct_text": "This challenge gives the client the current S/KEY parameters", "notes": "Changed \"This challenge give\" to \"This challenge gives.\"", "submit_date": "2020-04-12", "submitter_name": "Brian Jopling", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-17 06:35:59"}, {"errata_id": "6100", "doc-id": "RFC1760", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Verification of One-Time Passwords sections says:", "orig_text": "Because the number of hash function applications executed by the \r\nclient decreases by one each time, at some point the user must \r\nreinitialize the system of be unable to login again.", "correct_text": "Because the number of hash function applications executed by the \r\nclient decreases by one each time, at some point the user must \r\nreinitialize the system or be unable to login again.", "notes": "Changed \"must reinitialize the system of be unable to login again\" to \"must reinitialize the system or be unable to login again.\"", "submit_date": "2020-04-12", "submitter_name": "Brian Jopling", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-17 06:39:07"}, {"errata_id": "7539", "doc-id": "RFC9002", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.", "orig_text": "smoothed_rtt = 7/8 * smoothed_rtt + 1/8 * adjusted_rtt\r\nrttvar_sample = abs(smoothed_rtt - adjusted_rtt)\r\nrttvar = 3/4 * rttvar + 1/4 * rttvar_sample\r\n", "correct_text": "rttvar_sample = abs(smoothed_rtt - adjusted_rtt)\r\nrttvar = 3/4 * rttvar + 1/4 * rttvar_sample\r\nsmoothed_rtt = 7/8 * smoothed_rtt + 1/8 * adjusted_rtt\r\n", "notes": "Per Appendix A.7 of this RFC and Section 2 of the referred RFC 6298,\r\nrttvar should be computed before updating smoothed_rtt itself.", "submit_date": "2023-06-07", "submitter_name": "Sergey Kandaurov", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2023-06-13 13:13:04"}, {"errata_id": "6101", "doc-id": "RFC8287", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   The network node that advertised the Node Segment ID is responsible\r\n   for generating a FEC Stack Change sub-TLV with the Post Office\r\n   Protocol (POP) operation type for the Node Segment ID, regardless of\r\n   whether or not Penultimate Hop Popping (PHP) is enabled.\r\n\r\n   The network node that is immediately downstream of the node that\r\n   advertised the Adjacency Segment ID is responsible for generating the\r\n   FEC Stack Change sub-TLV for POP operation for the Adjacency Segment\r\n   ID.", "correct_text": "   The network node that advertised the Node Segment ID is responsible\r\n   for generating a FEC Stack Change sub-TLV with the pop operation type for \r\n   the Node Segment ID, regardless of whether or not penultimate hop popping \r\n   (PHP) is enabled.\r\n\r\n   The network node that is immediately downstream of the node that\r\n   advertised the Adjacency Segment ID is responsible for generating the\r\n   FEC Stack Change sub-TLV for pop operation for the Adjacency Segment\r\n   ID.", "notes": "Expansion of POP to \"Post Office Protocol\" in the context of this document is wrong. It should not be capitalized, it is not an abbreviation, simply the verb, pop. In addition, expansion for PHP should not be with caps.", "submit_date": "2020-04-13", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-04-30 18:28:09"}, {"errata_id": "6102", "doc-id": "RFC7940", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4.2.", "orig_text": "Any \"char\", \"range\", or \"variant\" element in the \"data\" section may contain an OPTIONAL \"comment\" attribute.", "correct_text": "Any \"char\", \"range\", or \"var\" element in the \"data\" section may contain an OPTIONAL \"comment\" attribute.", "notes": "The variant element is <var> not <variant>.", "submit_date": "2020-04-14", "submitter_name": "Michael Bauland", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-14 12:22:37"}, {"errata_id": "6103", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1.", "orig_text": "   o  A \"newAccount\" resource (Section 7.3)\r\n\r\n   o  A \"newOrder\" resource (Section 7.4)", "correct_text": "   o  A \"newAccount\" resource (Section 7.3)\r\n\r\n   o  A \"newAuthz\" resource (Section 7.4)\r\n\r\n   o  A \"newOrder\" resource (Section 7.4)", "notes": "The item for the \"newAuthz\" resource is missing in the list of resources.", "submit_date": "2020-04-14", "submitter_name": "Theodor Nolte", "verifier_id": "", "verifier_name": "Roman Danyliw.com", "update_date": "2024-01-11 15:44:03"}, {"errata_id": "6104", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.7.1", "orig_text": "   in the problem document.\r\n\r\nHTTP/1.1 403 Forbidden\r\nContent-Type: application/problem+json\r\nLink: <https://example.com/acme/directory>;rel=\"index\"\r\n\r\n{\r\n    \"type\": \"urn:ietf:params:acme:error:malformed\",\r\n    \"detail\": \"Some of the identifiers requested were rejected\",\r\n    \"subproblems\": [\r\n        {\r\n            \"type\": \"urn:ietf:params:acme:error:malformed\",\r\n            \"detail\": \"Invalid underscore in DNS name \\\"_example.org\\\"\",\r\n            \"identifier\": {\r\n                \"type\": \"dns\",\r\n                \"value\": \"_example.org\"\r\n            }\r\n        },\r\n        {\r\n            \"type\": \"urn:ietf:params:acme:error:rejectedIdentifier\",\r\n            \"detail\": \"This CA will not issue for \\\"example.net\\\"\",\r\n            \"identifier\": {\r\n                \"type\": \"dns\",\r\n                \"value\": \"example.net\"\r\n            }\r\n        }\r\n    ]\r\n}", "correct_text": "   in the problem document.\r\n\r\n   HTTP/1.1 403 Forbidden\r\n   Content-Type: application/problem+json\r\n   Link: <https://example.com/acme/directory>;rel=\"index\"\r\n\r\n   {\r\n       \"type\": \"urn:ietf:params:acme:error:malformed\",\r\n       \"detail\": \"Some of the identifiers requested were rejected\",\r\n       \"subproblems\": [\r\n           {\r\n               \"type\": \"urn:ietf:params:acme:error:malformed\",\r\n               \"detail\": \"Invalid underscore in DNS name \\\"_example.org\\\"\",\r\n               \"identifier\": {\r\n                   \"type\": \"dns\",\r\n                   \"value\": \"_example.org\"\r\n               }\r\n           },\r\n           {\r\n               \"type\": \"urn:ietf:params:acme:error:rejectedIdentifier\",\r\n               \"detail\": \"This CA will not issue for \\\"example.net\\\"\",\r\n               \"identifier\": {\r\n                   \"type\": \"dns\",\r\n                   \"value\": \"example.net\"\r\n               }\r\n           }\r\n       ]\r\n   }", "notes": "The indenting of the code block of the HTTP reply is not aligned.", "submit_date": "2020-04-14", "submitter_name": "Theodor Nolte", "verifier_id": "", "verifier_name": "Roman Danyliw.com", "update_date": "2024-01-11 14:18:15"}, {"errata_id": "6105", "doc-id": "RFC7940", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2.1.", "orig_text": "A label \"yy\" would have the variants \"xy\", \"yx\", and \"xx\".  Because the variant mapping from \"y\" to \"x\" is of type \"allocatable\" and a mapping from \"y\" to \"y\" is not defined, the labels \"xy\" and \"yx\" trigger the \"any-variant\" condition on the third label.", "correct_text": "A label \"yy\" would have the variants \"xy\", \"yx\", and \"xx\".  Because the variant mapping from \"y\" to \"x\" is of type \"allocatable\" and a mapping from \"y\" to \"y\" is not defined, the labels \"xy\" and \"yx\" trigger the \"any-variant\" condition on the third action.", "notes": "The \"third label\" at the end of the sentence makes no sense in this context, instead it should read that the condition of the \"third action\" is triggered.", "submit_date": "2020-04-14", "submitter_name": "Michael Bauland", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-14 21:04:41"}, {"errata_id": "6106", "doc-id": "RFC7940", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2.1", "orig_text": "Nevertheless, they do participate in the permutation of variant\r\n   labels for n-repertoire labels ", "correct_text": "Nevertheless, they do participate in the permutation of variant\r\n   labels for in-repertoire labels ", "notes": "The intention is the contrast to \"out-of-repertoire\"; no term \"n-repertoire\" is defined.", "submit_date": "2020-04-14", "submitter_name": "Asmus Freytag", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-14 21:06:19"}, {"errata_id": "6107", "doc-id": "RFC8228", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14", "orig_text": "Because no variant label with any code point outside the repertoire\r\n   could ever be allocated, the only logical choice for the non-\r\n   reflexive mappings to out-of-repertoire code points is \"blocked\".", "correct_text": "Because no variant label with any code point outside the repertoire\r\n   would ever be allocated in this example, the only logical choice for the non-\r\n   reflexive mappings to out-of-repertoire code points is \"blocked\".", "notes": "As written the sentence makes an absolute claim that isn't in accordance with RFC7940. While not usual, there are circumstances where allowing allocatable variants for a code point that has a reflexive \"out-of-repertoire-var\" mapping may make sense. Therefore, the statement needs to be read as restricted to the specific scenario or example under discussion.", "submit_date": "2020-04-14", "submitter_name": "Asmus Freytag", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-14 21:08:18"}, {"errata_id": "6108", "doc-id": "RFC5703", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "enclose :subject \"Warning\" :text\r\n", "correct_text": "enclose :subject \"Warning\" text:\r\n", "notes": "The keyword used to signal a multi-line text string is \"text:\", NOT \":text\"", "submit_date": "2020-04-17", "submitter_name": "Ken Murchison", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-18 17:19:30"}, {"errata_id": "7540", "doc-id": "RFC3458", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "8. IANA Considerations\r\n\r\n   Section 8.3 is a registration for a new top-level RFC 2822 [3]\r\n   message header, \"Message-Context\".\r\n\r\n   This document creates an extensible set of context types.  To promote\r\n   interoperability and coherent interpretations of different types, a\r\n   central repository has been established for well-known context types.\r\n\r\n   The IANA has created a repository for context types called \"Internet\r\n   Message Context Types\".  Following the policies outlined in [5], this\r\n   repository is \"Specification Required\" by RFC.  Section 8.1 describes\r\n   the initial values for this registry.\r\n\r\n   To create a new message context type, you MUST publish an RFC to\r\n   document the type.  In the RFC, include a copy of the registration\r\n   template found in Section 8.2 of this document.  Put the template in\r\n   your IANA Considerations section, filling-in the appropriate fields.\r\n   You MUST describe any interoperability and security issues in your\r\n   document.\r\n\r\n8.1. Message Content Type Registrations\r\n\r\n   Internet Message Content Types", "correct_text": "8. IANA Considerations\r\n\r\n   Section 8.3 is a registration for a new top-level RFC 2822 [3]\r\n   message header, \"Message-Context\".\r\n\r\n   This document creates an extensible set of context classes.  To promote\r\n   interoperability and coherent interpretations of different classes, a\r\n   central repository has been established for well-known context classes.\r\n\r\n   The IANA has created a repository for context classes called \"Internet\r\n   Message Context Classes\".  Following the policies outlined in [5], this\r\n   repository is \"Specification Required\" by RFC.  Section 8.1 describes\r\n   the initial values for this registry.\r\n\r\n   To create a new message context class, you MUST publish an RFC to\r\n   document the class.  In the RFC, include a copy of the registration\r\n   template found in Section 8.2 of this document.  Put the template in\r\n   your IANA Considerations section, filling-in the appropriate fields.\r\n   You MUST describe any interoperability and security issues in your\r\n   document.\r\n\r\n8.1. Message Context Class Registrations\r\n\r\n   Internet Message Context Classes", "notes": "This document appears to mix up some terms:\r\n\r\n1) Context vs. Content: While most of the document refers to 'Context', parts of the IANA Considerations Section use 'Content' for the same thing\r\n\r\n2) class vs. type: While most of the document uses 'class', parts of the IANA Considerations Section use 'type' for the same thing\r\n\r\nImportant: The IANA Registry https://www.iana.org/assignments/message-header-types/message-header-types.xhtml also needs to be updated (given this errata is considered valid)", "submit_date": "2023-06-07", "submitter_name": "Bernie Hoeneisen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:13:07"}, {"errata_id": "6117", "doc-id": "RFC8214", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1, 8", "orig_text": "3.1.  EVPN Layer 2 Attributes Extended Community\r\n            0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5\r\n           +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n           |   MBZ                   |C|P|B|  (MBZ = MUST Be Zero)\r\n           +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n         Name     Meaning\r\n         ---------------------------------------------------------------\r\n         P        If set to 1 in multihoming Single-Active scenarios, ...\r\n         B        If set to 1 in multihoming Single-Active scenarios, ...\r\n         C        If set to 1, a control word [RFC4448] MUST be present ...\r\n\r\n8.  IANA Considerations\r\n   Initial registrations are as follows:\r\n\r\n        P      Advertising PE is the primary PE.\r\n        B      Advertising PE is the backup PE.\r\n        C      Control word [RFC4448] MUST be present.\r\n\r\n", "correct_text": "Option 1 : change explicit bitfield\r\n==========\r\n3.1.  EVPN Layer 2 Attributes Extended Community\r\n            0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5\r\n           +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n##<swap>   |   MBZ                   |C|B|P|  (MBZ = MUST Be Zero)\r\n           +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n         Name     Meaning\r\n         ---------------------------------------------------------------\r\n         P        If set to 1 in multihoming Single-Active scenarios, ...\r\n         B        If set to 1 in multihoming Single-Active scenarios, ...\r\n         C        If set to 1, a control word [RFC4448] MUST be present ...\r\n\r\n8.  IANA Considerations\r\n   Initial registrations are as follows:\r\n\r\n        P      Advertising PE is the primary PE.\r\n        B      Advertising PE is the backup PE.\r\n        C      Control word [RFC4448] MUST be present.\r\n\r\n\r\nOption 2 : change implicit order\r\n==========\r\n3.1.  EVPN Layer 2 Attributes Extended Community\r\n            0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5\r\n           +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n           |   MBZ                   |C|P|B|  (MBZ = MUST Be Zero)\r\n           +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n         Name     Meaning\r\n         ---------------------------------------------------------------\r\n##       B        If set to 1 in multihoming Single-Active scenarios, ...\r\n##<swap 'implicit' list order B,P to match bitfield>\r\n##       P        If set to 1 in multihoming Single-Active scenarios, ...\r\n         C        If set to 1, a control word [RFC4448] MUST be present ...\r\n\r\n8.  IANA Considerations\r\n   Initial registrations are as follows:\r\n\r\n##      B      Advertising PE is the backup PE.\r\n##<swap 'implicit' list order B,P to match bitfield>\r\n##      P      Advertising PE is the primary PE.\r\n        C      Control word [RFC4448] MUST be present.\r\n\r\n\r\n\r\n", "notes": "While technically section 8 is not requesting any bit-position from IANA registry, the ordering of requests P-B-C vs. the field definition B-P-C is confusing, or at least inconsistent.\r\n\r\nA clarifying statement is required:\r\n - the field definition is should be swapped; or\r\n - the field definition shall prime over all the places implying order when listing P-B-C\n --VERIFIER NOTES-- \n   This is not a technical errata or at least the reasonable solution to it seems to be editorial (shifting text around) rather than modifying the order of bits on the wire.\r\n", "submit_date": "2020-04-22", "submitter_name": "Luc Andre Burdet", "verifier_id": "", "verifier_name": "Martin Vigourex", "update_date": "2021-02-08 22:13:03"}, {"errata_id": "6111", "doc-id": "RFC6458", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "in Section 5.3.2\r\n\r\n         SCTP_EOF:  Setting this flag invokes the SCTP graceful shutdown\r\n            procedure on the specified association.  Graceful shutdown\r\n            assures that all data queued by both endpoints is\r\n            successfully transmitted before closing the association.\r\n\r\n         SCTP_SENDALL:  This flag, if set, will cause a one-to-many\r\n            style socket to send the message to all associations that\r\n            are currently established on this socket.  For the one-to-\r\n            one style socket, this flag has no effect.\r\n\r\n\r\n\r\nin Section 5.3.4\r\n\r\n      SCTP_EOF:  Setting this flag invokes the SCTP graceful shutdown\r\n         procedures on the specified association.  Graceful shutdown\r\n         assures that all data queued by both endpoints is successfully\r\n         transmitted before closing the association.\r\n\r\n      SCTP_SENDALL:  This flag, if set, will cause a one-to-many style\r\n         socket to send the message to all associations that are\r\n         currently established on this socket.  For the one-to-one style\r\n         socket, this flag has no effect.\r\n\r\n\r\n\r\nin Section 8.1.13\r\n\r\nThe sinfo_flags field is composed of a bitwise OR\r\nof SCTP_UNORDERED, SCTP_EOF, and SCTP_SENDALL.\r\n\r\n\r\n\r\nin Section 8.1.31\r\n\r\nThe snd_flags parameter is composed of a bitwise OR \r\nof SCTP_UNORDERED, SCTP_EOF, and SCTP_SENDALL.\r\n", "correct_text": "in Section 5.3.2\r\n\r\n         SCTP_EOF:  Setting this flag invokes the SCTP graceful shutdown\r\n            procedure on the specified association.  Graceful shutdown\r\n            assures that all data queued by both endpoints is\r\n            successfully transmitted before closing the association.\r\n\r\n         SCTP_EOR: This flag, if set and explicit EOR marking (see\r\n            Section 8.1.26) is enabled , indicates that the user data\r\n            provided is the last part of a user message. If explicit\r\n            EOR marking is disabled, this flag is not relevant, since the\r\n            user data provided is a complete user message.\r\n\r\n         SCTP_SENDALL:  This flag, if set, will cause a one-to-many\r\n            style socket to send the message to all associations that\r\n            are currently established on this socket.  For the one-to-\r\n            one style socket, this flag has no effect.\r\n\r\n\r\n\r\nin Section 5.3.4\r\n\r\n      SCTP_EOF:  Setting this flag invokes the SCTP graceful shutdown\r\n         procedures on the specified association.  Graceful shutdown\r\n         assures that all data queued by both endpoints is successfully\r\n         transmitted before closing the association.\r\n\r\n      SCTP_EOR: This flag, if set and explicit EOR marking (see Section 8.1.26)\r\n         is enabled , indicates that the user data provided is the last part of\r\n         a user message. If explicit EOR marking is disabled, this flag is\r\n         not relevant, since the user data provided is a complete user message.\r\n\r\n      SCTP_SENDALL:  This flag, if set, will cause a one-to-many style\r\n         socket to send the message to all associations that are\r\n         currently established on this socket.  For the one-to-one style\r\n         socket, this flag has no effect.\r\n\r\n\r\n\r\nin Section 8.1.13\r\n\r\nThe sinfo_flags field is composed of a bitwise OR\r\nof SCTP_UNORDERED, SCTP_EOF, SCTP_EOR, and SCTP_SENDALL.\r\n\r\n\r\n\r\nin Section 8.1.31\r\n\r\nThe snd_flags parameter is composed of a bitwise OR\r\nof SCTP_UNORDERED, SCTP_EOF, SCTP_EOR, and SCTP_SENDALL.", "notes": "The text is missing a description of how to use the SCTP_EOR flag in the Socket API. The problem was initially reported by wanglihe in https://www.rfc-editor.org/errata/eid6081", "submit_date": "2020-04-20", "submitter_name": "Michael Tuexen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 21:54:11"}, {"errata_id": "6112", "doc-id": "RFC6458", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "The success or failure of sending the data message (with\r\npossible SCTP_INITMSG ancillary data) will be signaled by the\r\nSCTP_ASSOC_CHANGE event with SCTP_COMM_UP or SCTP_CANT_START_ASSOC.\r\nIf user data could not be sent (due to an SCTP_CANT_START_ASSOC),\r\nthe sender will also receive an SCTP_SEND_FAILED_EVENT event.", "correct_text": "The success or failure of sending the data message (with\r\npossible SCTP_INITMSG ancillary data) will be signaled by the\r\nSCTP_ASSOC_CHANGE event with SCTP_COMM_UP or SCTP_CANT_STR_ASSOC.\r\nIf user data could not be sent (due to an SCTP_CANT_STR_ASSOC),\r\nthe sender will also receive an SCTP_SEND_FAILED_EVENT event.", "notes": "The constant SCTP_CANT_START_ASSOC is not defined. The correct name is SCTP_CANT_STR_ASSOC.", "submit_date": "2020-04-20", "submitter_name": "Michael Tuexen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 22:20:20"}, {"errata_id": "6113", "doc-id": "RFC6458", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1.1", "orig_text": "sac_info:  If sac_state is SCTP_COMM_LOST and an ABORT chunk was\r\n      received for this association, sac_info[] contains the complete\r\n      ABORT chunk as defined in Section 3.3.7 of the SCTP specification\r\n      [RFC4960].", "correct_text": "sac_info:  If sac_state is SCTP_COMM_LOST or SCTP_CANT_STR_ASSOC and\r\n      an ABORT chunk was received for this association, sac_info[]\r\n      contains the complete ABORT chunk as defined in Section 3.3.7\r\n      of the SCTP specification [RFC4960].", "notes": "During association setup, SCTP_CANT_STR_ASSOC is signalled when an ABORT chunk is received. SCTP_COMM_LOST is used after the association has been established.", "submit_date": "2020-04-20", "submitter_name": "Michael Tuexen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 22:24:49"}, {"errata_id": "6114", "doc-id": "RFC6458", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "9.5", "orig_text": "If the id field is set to the value '0', then the locally bound\r\naddresses are returned without regard to any particular association.\r\n", "correct_text": "If the id field is set to the value SCTP_FUTURE_ASSOC, then the locally bound\r\naddresses are returned without regard to any particular association.\r\n", "notes": "Don't use a numeric constant, but the symbolic constant. Its numeric value is implementation specific.", "submit_date": "2020-04-20", "submitter_name": "Michael Tuexen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 22:32:54"}, {"errata_id": "6258", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6.5", "orig_text": "For example, with these modules:\r\n\r\n     module a {\r\n       yang-version 1.1;\r\n       namespace \"urn:example:a\";\r\n       prefix \"a\";\r\n\r\n       import b {\r\n         revision-date 2015-01-01;\r\n       }\r\n       import c;\r\n\r\n       revision 2015-01-01;\r\n", "correct_text": "For example, with these modules:\r\n\r\n     module a {\r\n       yang-version 1.1;\r\n       namespace \"urn:example:a\";\r\n       prefix \"a\";\r\n\r\n       import b {\r\n         revision-date 2015-01-01;\r\n         prefix b;\r\n       }\r\n       import c {\r\n         prefix c;\r\n       }\r\n\r\n       revision 2015-01-01;\r\n", "notes": "As is considered in 7.1.5, The mandatory \"prefix\" substatement assigns a prefix for the imported module that is scoped to the importing module or submodule. \r\n\r\nSo, there should be a prefix substatement in the \"import b\" and \"import c\" statement respectively.", "submit_date": "2020-08-20", "submitter_name": "Fred Gan", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 17:48:38"}, {"errata_id": "9043", "doc-id": "RFC9846", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.3", "orig_text": "random:  32 bytes generated by a secure random number generator.  See\r\n      Appendix C for additional information.  The last 8 bytes MUST be\r\n      overwritten as described below if negotiating TLS 1.2 or TLS 1.1,\r\n      but the remaining bytes MUST be random.  This structure is\r\n      generated by the server and MUST be generated independently of the\r\n      ClientHello.random.", "correct_text": "random:  32 bytes generated by a secure random number generator.  See\r\n      Appendix C for additional information.  The last 8 bytes MUST be\r\n      overwritten as described below if negotiating TLS 1.2,\r\n      but the remaining bytes MUST be random.  This structure is\r\n      generated by the server and MUST be generated independently of the\r\n      ClientHello.random.", "notes": "TLS 1.1 is deprecated by RFC 8996.", "submit_date": "2026-07-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-29 13:48:31"}, {"errata_id": "6116", "doc-id": "RFC6458", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1.2", "orig_text": "   spc_state:  This field holds one of a number of values that\r\n      communicate the event that happened to the address.  They include\r\n\r\n      SCTP_ADDR_AVAILABLE:  This address is now reachable.  This\r\n         notification is provided whenever an address becomes reachable.\r\n\r\n      SCTP_ADDR_UNREACHABLE:  The address specified can no longer be\r\n         reached.  Any data sent to this address is rerouted to an\r\n         alternate until this address becomes reachable.  This\r\n         notification is provided whenever an address becomes\r\n         unreachable.\r\n\r\n      SCTP_ADDR_REMOVED:  The address is no longer part of the\r\n         association.\r\n\r\n      SCTP_ADDR_ADDED:  The address is now part of the association.\r\n\r\n      SCTP_ADDR_MADE_PRIM:  This address has now been made the primary\r\n         destination address.  This notification is provided whenever an\r\n         address is made primary.\r\n", "correct_text": "   spc_state:  This field holds one of a number of values that\r\n      communicate the event that happened to the address.  They include\r\n\r\n      SCTP_ADDR_CONFIRMED:  This address is now confirmed.  This\r\n         notification is provided once an address transitions from\r\n         the UNCONFIRMED state to the CONFIRMED state (see\r\n         Section 5.4 of [RFC 4960]).\r\n\r\n      SCTP_ADDR_AVAILABLE:  This address is now reachable.  This\r\n         notification is provided whenever an address becomes reachable.\r\n\r\n      SCTP_ADDR_UNREACHABLE:  The address specified can no longer be\r\n         reached.  Any data sent to this address is rerouted to an\r\n         alternate until this address becomes reachable.  This\r\n         notification is provided whenever an address becomes\r\n         unreachable.\r\n\r\n      SCTP_ADDR_REMOVED:  The address is no longer part of the\r\n         association.\r\n\r\n      SCTP_ADDR_ADDED:  The address is now part of the association.\r\n\r\n      SCTP_ADDR_MADE_PRIM:  This address has now been made the primary\r\n         destination address.  This notification is provided whenever an\r\n         address is made primary.\r\n", "notes": "A description of the handling of the path verification as specified in Section 5.4 of RFC 4960 was missing.", "submit_date": "2020-04-20", "submitter_name": "Michael Tuexen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 22:38:43"}, {"errata_id": "6118", "doc-id": "RFC7515", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2", "orig_text": "(as permitted by Section 3.2)", "correct_text": "", "notes": "This appears to be a reference to section 3.2 of RFC 4648, but because it is somewhat ambiguous the HTML and PDF versions of the RFC link to section 3.2 of this RFC instead.\n --VERIFIER NOTES-- \n   Errata reports are for the authoritative versions hosted on rfc-editor.org, which for this document is the plain text version.  As such, issues introduced by the \"htmlization\" process do not qualify.", "submit_date": "2020-04-22", "submitter_name": "Jason Heiss", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-04-25 21:36:53"}, {"errata_id": "6119", "doc-id": "RFC7155", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "[Missing sections when RFC 4005 was obsoleted by RFC 7155]", "correct_text": "4.7 AVPs Used Only for Compatibility\r\n\r\n   The AVPs defined in this section SHOULD only be used for backwards\r\n   compatibility when a Diameter/RADIUS translation function is invoked\r\n   and are not typically originated by Diameter systems during normal\r\n   operations.\r\n\r\n                                            +----------+\r\n                                            | AVP Flag |\r\n                                            |  Rules   |\r\n                                            |----+-----|\r\n                                            |MUST| MUST|\r\n   Attribute Name           Section Defined |    |  NOT|\r\n   -----------------------------------------|----+-----|\r\n   Origin-AAA-Protocol      4.7.1           | M  |  V  |\r\n   -----------------------------------------|----+-----|\r\n\r\n4.7.1.  Origin-AAA-Protocol\r\n\r\n   The Origin-AAA-Protocol AVP (AVP Code 408) is of the type Enumerated\r\n   and should be inserted in a Diameter message translated by a gateway\r\n   system from another AAA protocol, such as RADIUS.  It identifies the\r\n   source protocol of the message to the Diameter system receiving the\r\n   message.\r\n\r\n   The supported values are:\r\n\r\n         1       RADIUS\r\n", "notes": "The description of Origin-AAA-Protocol (AVP Code 408) is missing from RFC 7155. The AVP is documented in RFC 4005 section 9.3.6.\r\n\r\nThe proposed corrected text contains RFC 4005 section 9.3 as RFC 7155 section 4.7, and RFC 4005 section 9.3.6 as RFC 7155 section 4.7.1. All other AVPs in RFC 4005 section 9.3.x are not listed because they are documented in their relevant standards already.\r\n\r\nRFC 7155 is listed as the Reference for Origin-AAA-Protocol in multiple locations in https://www.iana.org/assignments/aaa-parameters/aaa-parameters.xhtml\r\n\r\nIt appears that there may be an accidental omission of Origin-AAA-Protocol when RFC 7155 obsoleted RFC 4005.\r\n\r\nThe Origin-AAA-Protocol AVP is referenced in other sections in RFC 7155:\r\n- 3.1.  AA-Request (AAR) Command\r\n- 3.2.  AA-Answer (AAA) Command\r\n- 3.3.  Re-Auth-Request (RAR) Command\r\n- 3.4.  Re-Auth-Answer (RAA) Command\r\n- 3.5.  Session-Termination-Request (STR) Command\r\n- 3.6.  Session-Termination-Answer (STA) Command\r\n- 3.7.  Abort-Session-Request (ASR) Command\r\n- 3.8.  Abort-Session-Answer (ASA) Command\r\n- 3.9.  Accounting-Request (ACR) Command\r\n- 3.10.  Accounting-Answer (ACA) Command\r\n- 5.1.  AA-Request / AA-Answer AVP Table\r\n- 5.2.1.  Framed Access Accounting AVP Table\r\n- 5.2.2.  Non-Framed Access Accounting AVP Table", "submit_date": "2020-04-24", "submitter_name": "Luke Mewburn", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2020-06-19 11:03:34"}, {"errata_id": "6120", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "the underlying transport is a reliable, in-order data stream\r\n\r\n", "correct_text": "the underlying transport layer is a reliable, in-order stream delivery service\r\n\r\nor\r\n\r\nthe underlying transport protocol is a reliable, in-order stream delivery service\r\n\r\nor similar", "notes": "Similar elsewhere\n --VERIFIER NOTES-- \n   rejected by WG.", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:46:02"}, {"errata_id": "6121", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "cryptographic modes", "correct_text": "cryptographic algorithms", "notes": "\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:46:48"}, {"errata_id": "6122", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "The key derivation functions have been redesigned.", "correct_text": "The key derivation function has been redesigned.", "notes": "", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:27:21"}, {"errata_id": "6123", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "The handshake protocol allows peers to negotiate a protocol version, select cryptographic algorithms, optionally authenticate each other, and establish shared secret keying material.", "correct_text": "", "notes": "Only client authentication is optional (albeit, server authentication is implicit for PSK-only key exchange mode)\r\n\r\nPaul Wouters(AD): corrected with the following text:\r\n\r\nThe handshake protocol allows peers to negotiate a protocol version, select cryptographic algorithms, authenticate each other (with client authentication being optional), and establish shared secret keying material.", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-29 00:59:40"}, {"errata_id": "7262", "doc-id": "RFC6455", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.5.1", "orig_text": "Following the 2-byte integer, the body MAY contain UTF-8-encoded data\r\nwith value /reason/, the interpretation of which is not defined by\r\nthis specification.  This data is not necessarily human readable but\r\nmay be useful for debugging or passing information relevant to the\r\nscript that opened the connection.  As the data is not guaranteed to\r\nbe human readable, clients MUST NOT show it to end users.", "correct_text": "> Following the 2-byte integer, the body MAY contain data which MUST\r\nbe UTF-8-encoded with value /reason/, the interpretation of which is\r\nnot defined by this specification.\r\n\r\n> As the interpretation is not defined here, clients MAY show it to\r\nend users.\r\n\r\n----- OR -----\r\n\r\n> Following the 2-byte integer, the body MAY contain arbitrary data,\r\nthe interpretation of which is not defined by this specification.\r\n\r\n> As the interpretation is not defined here, clients MAY hide it\r\nfrom end users.", "notes": "The RFC is unclear on whether or not close-frames can contain binary data for the /reason/.\r\n\r\nIn section 5.2, \"Application data\" is defined as \"arbitrary\".\r\n\r\nSection 5.5.1 also says about the /reason/:\r\n> This data is not necessarily human readable ...\r\n> As the data is not guaranteed to be human readable ...\r\n\r\nOk, but what if it is?\r\n\r\nAs per RFC 2119, The \"MUST NOT show it to end users\" here is not a mere suggestion.\r\nIt implies some sort of inherent danger or contract breaking that would occur if the data were \"shown\" (undefined term), as if passing along UTF-8 text in a controlled manner could cause harm to their application.\r\n\r\nDue to the \"MUST NOT\", the \"MAY contain UTF-8-encoded data\" here is ambiguous. It implies it could be something other than UTF-8, like binary data, which would be unsafe to blindly \"show\" to the \"end user\" (undefined term). There is no clear reason as to why it (emphatically) \"MUST NOT\" be shown to \"end users\".\r\n\r\nWho is the client and who is the \"end user\"? This is the only occurrence of \"end user\" in the RFC. Is the \"client\" the browser, and the \"end user\" the developer trying to debug their application, but \"MUST NOT\" see close /reason/s? In practice, the close reason is of course exposed by browsers. But then is the end user the non-developer who triggers an unexpected error on the server, and has no way to report a bug since the server's error /reason/ MUST NOT be shown to them? Why MUSTN'T it be shown? Is it because it MAY contain binary data?\r\n\r\nClarification is needed on whether or not the /reason/ can contain arbitrary binary data. And the imperative restriction on what the undefined \"end user\" can be \"shown\" should be loosened.", "submit_date": "2022-12-09", "submitter_name": "Demi Y", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6124", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2", "orig_text": "   In the Key Exchange phase, the client sends the ClientHello                  \r\n   (Section 4.1.2) message, which contains a random nonce                       \r\n   (ClientHello.random); its offered protocol versions; a list of               \r\n   symmetric cipher/HKDF hash pairs; either a set of Diffie-Hellman key         \r\n   shares (in the \"key_share\" (Section 4.2.8) extension), a set of              \r\n   pre-shared key labels (in the \"pre_shared_key\" (Section 4.2.11)              \r\n   extension), or both; and potentially additional extensions.   ", "correct_text": "   In the Key Exchange phase, the client sends the ClientHello                  \r\n   (Section 4.1.2) message, which contains a random nonce                       \r\n   (ClientHello.random); its offered protocol versions; a list of               \r\n   symmetric cipher/Hash algorithm pairs; either a set of Diffie-Hellman key         \r\n   shares (in the \"key_share\" (Section 4.2.8) extension), a set of              \r\n   pre-shared key labels (in the \"pre_shared_key\" (Section 4.2.11)              \r\n   extension), or both; and potentially additional extensions.   \r\n\r\nor\r\n\r\n   In the Key Exchange phase, the client sends the ClientHello                  \r\n   (Section 4.1.2) message, which contains a random nonce                       \r\n   (ClientHello.random); its offered protocol versions; a list of               \r\n   symmetric cipher/Hash algorithm (to be used with HKDF) pairs; either a set of Diffie-Hellman key         \r\n   shares (in the \"key_share\" (Section 4.2.8) extension), a set of              \r\n   pre-shared key labels (in the \"pre_shared_key\" (Section 4.2.11)              \r\n   extension), or both; and potentially additional extensions.   ", "notes": "\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:48:22"}, {"errata_id": "6125", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "PSKs are referred to as out-of-band and external", "correct_text": "Referring to PSKs as either out-of-band xor external would help at least one reader", "notes": " This got incorporated into the bis document, but not exactly as suggested.", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:16:30"}, {"errata_id": "6126", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "Note that if the PSK can be used without (EC)DHE, then\r\nnon-overlap in the \"supported_groups\" parameters need not be fatal, \r\nas it is in the non-PSK case discussed in the previous paragraph.", "correct_text": "Note that if the PSK can be used without (EC)DHE, then\r\nnon-overlap in the \"supported_groups\" parameters need not be fatal, \r\nas it is in the non-PSK case discussed in the previous paragraph, \r\nbecause PSK-only key exchange mode does not need supported_groups.", "notes": "If \"the PSK can be used without (EC)DHE\", then PSK-only key exchange mode can be used, which doesn't require supported_groups. This is perhaps worthy of explanation.\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:49:11"}, {"errata_id": "6127", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1.2.", "orig_text": "If a \"key_share\" extension was supplied in the HelloRetryRequest,\r\nreplacing the list of shares with a list containing a single\r\nKeyShareEntry from the indicated group.", "correct_text": "If a \"key_share\" extension was supplied in the HelloRetryRequest,\r\nreplacing the list of shares with a list containing a single\r\nKeyShareEntry from the indicated group. Note: A \"key_share\" \r\nextension may not be supplied in a HelloRetryRequest message \r\nwhen a server receives  an \"early_data\" (Section 4.2.10).", "notes": "\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:49:58"}, {"errata_id": "6128", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "terminate and abort are used interchangeable, but this isn't explained until after such use.\r\n\r\nIn Section 6.2, we have: In the rest of this specification, when the phrases \"terminate the connection\" and \"abort the handshake\" are used without a specific alert it means that the implementation SHOULD send the alert indicated by the\r\ndescriptions below.  ", "correct_text": "Perhaps explain terminology earlier. At the very least, in Section 6.2, open the above sentence with \"Throughout this specification\"\r\n\r\n", "notes": " This got incorporated into the bis document, but not exactly as suggested.", "submit_date": "2020-04-24", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:17:06"}, {"errata_id": "6172", "doc-id": "RFC5234", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "Note that these rules are only valid for ABNF encoded in 7-bit ASCII or in characters sets that are a superset of 7-bit ASCII.", "correct_text": "Note that these rules are only valid for ABNF encoded in 7-bit ASCII or in character sets that are a superset of 7-bit ASCII.", "notes": "Typo.", "submit_date": "2020-05-14", "submitter_name": "Glyn Normington", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-05-14 13:06:43"}, {"errata_id": "6130", "doc-id": "RFC2418", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "[4th paragraph in \u00a73.3]\r\n\r\n...   \r\n   level of consensus.  The most common method used is for the working\r\n   group chair to state what he or she believes to be the consensus view\r\n   and. at the same time, requests comments from the list about the\r\n   stated conclusion.\r\n", "correct_text": "...   \r\n   level of consensus.  The most common method used is for the working\r\n   group chair to state what he or she believes to be the consensus view\r\n   and, at the same time, requests comments from the list about the\r\n   stated conclusion.\r\n\r\n\r\ns/and./and,", "notes": "Nit related to a misplaced \".\" instead of a \",\".", "submit_date": "2020-04-27", "submitter_name": "Alvaro Retana", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 07:29:45"}, {"errata_id": "7263", "doc-id": "RFC8995", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.5", "orig_text": "idevid-issuer:  The Issuer value from the pledge IDevID certificate\r\n  is included to ensure unique interpretation of the serial-number.\r\n  In the case of a nonceless (offline) voucher-request, an\r\n  appropriate value needs to be configured from the same out-of-band\r\n  source as the serial-number.\r\n", "correct_text": "idevid-issuer:  The Issuer value from the pledge IDevID certificate\r\n  SHOULD BE included to ensure unique interpretation of the serial-\r\n  number.\r\n  In the case of a nonceless (offline) voucher-request, an\r\n  appropriate value MUST be configured from the same out-of-band\r\n  source as the serial-number.\r\n", "notes": "The current language is no language according to RFC 2119.\r\n\r\nVerifier Note:\r\n\r\nThe update in rfc8366bis will address this Errata.", "submit_date": "2022-12-09", "submitter_name": "Rufus Buschart", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-01-31 21:29:25"}, {"errata_id": "7264", "doc-id": "RFC9116", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.5.5", "orig_text": "Expires: 2021-12-31T18:37:07z", "correct_text": "Expires: 2021-12-31T18:37:07Z", "notes": "The ISO 8601 zulu indicator MUST be an upper case Z, not a lower case one.", "submit_date": "2022-12-10", "submitter_name": "Michael Osipov", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6131", "doc-id": "RFC6458", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "8.1.26    must indicate that they are\r\n   finished sending a particular record by including the SCTP_EOR flag.\r\n\r\nbut I can not find where to use SCTP_EOR flag.\r\n\r\nbecause\r\n\r\n5.1  The msg_flags are not used when sending a message with sendmsg().\r\n\r\n3.1.4  flags:  No new flags are defined for SCTP at this level.  See\r\n      Section 5 for SCTP-specific flags used in the msghdr structure.\r\n\r\n4.1.8 same with 3.1.4\r\n\r\n9.10, 9.12    flags:  The same flags as used by the sendmsg() call flags (e.g.,\r\n      MSG_DONTROUTE).\r\n\r\n9.7   flags:  The same as sinfo_flags (see Section 5.3.2).\r\n\r\n5.3.2 sinfo_flags not mention about it  ", "correct_text": "maybe msg_flags should be used.", "notes": "Another problem is that, I think it should be discuss about debfine a flag like SCTP_BOR for beginning(init chunk) of a Record, because a stream of this socket(assoc) can still be used after send a SCTP_EOR.\r\n\r\nAnd between  a init chunk and  a STCP_EOR,  if I change SCTP_EXPLICIT_EOR status, what the socket will send the message?\n --VERIFIER NOTES-- \n   This is an accidental duplication; please disregard.", "submit_date": "2020-04-09", "submitter_name": "wanglihe", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 22:03:46"}, {"errata_id": "6132", "doc-id": "RFC6458", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "8.1.26    must indicate that they are\r\n   finished sending a particular record by including the SCTP_EOR flag.\r\n\r\nbut I can not find where to use SCTP_EOR flag.\r\n\r\nbecause\r\n\r\n5.1  The msg_flags are not used when sending a message with sendmsg().\r\n\r\n3.1.4  flags:  No new flags are defined for SCTP at this level.  See\r\n      Section 5 for SCTP-specific flags used in the msghdr structure.\r\n\r\n4.1.8 same with 3.1.4\r\n\r\n9.10, 9.12    flags:  The same flags as used by the sendmsg() call flags (e.g.,\r\n      MSG_DONTROUTE).\r\n\r\n9.7   flags:  The same as sinfo_flags (see Section 5.3.2).\r\n\r\n5.3.2 sinfo_flags not mention about it  ", "correct_text": "maybe msg_flags should be used.", "notes": "Another problem is that, I think it should be discuss about debfine a flag like SCTP_BOR for beginning(init chunk) of a Record, because a stream of this socket(assoc) can still be used after send a SCTP_EOR.\r\n\r\nAnd between  a init chunk and  a STCP_EOR,  if I change SCTP_EXPLICIT_EOR status, what the socket will send the message?\n --VERIFIER NOTES-- \n   Accidental duplication; please disregard.", "submit_date": "2020-04-09", "submitter_name": "wanglihe", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 22:04:25"}, {"errata_id": "6133", "doc-id": "RFC6458", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "8.1.26    must indicate that they are\r\n   finished sending a particular record by including the SCTP_EOR flag.\r\n\r\nbut I can not find where to use SCTP_EOR flag.\r\n\r\nbecause\r\n\r\n5.1  The msg_flags are not used when sending a message with sendmsg().\r\n\r\n3.1.4  flags:  No new flags are defined for SCTP at this level.  See\r\n      Section 5 for SCTP-specific flags used in the msghdr structure.\r\n\r\n4.1.8 same with 3.1.4\r\n\r\n9.10, 9.12    flags:  The same flags as used by the sendmsg() call flags (e.g.,\r\n      MSG_DONTROUTE).\r\n\r\n9.7   flags:  The same as sinfo_flags (see Section 5.3.2).\r\n\r\n5.3.2 sinfo_flags not mention about it  ", "correct_text": "maybe msg_flags should be used.", "notes": "Another problem is that, I think it should be discuss about debfine a flag like SCTP_BOR for beginning(init chunk) of a Record, because a stream of this socket(assoc) can still be used after send a SCTP_EOR.\r\n\r\nAnd between  a init chunk and  a STCP_EOR,  if I change SCTP_EXPLICIT_EOR status, what the socket will send the message?\n --VERIFIER NOTES-- \n   Accidental duplicate, please disregard.", "submit_date": "2020-04-09", "submitter_name": "wanglihe", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-04-27 22:05:05"}, {"errata_id": "6134", "doc-id": "RFC1123", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.2", "orig_text": "5.2.2  Canonicalization: RFC-821 Section 3.1\r\n\r\n         The domain names that a Sender-SMTP sends in MAIL and RCPT\r\n         commands MUST have been  \"canonicalized,\" i.e., they must be\r\n         fully-qualified principal names or domain literals, not\r\n         nicknames or domain abbreviations.  A canonicalized name either\r\n         identifies a host directly or is an MX name; it cannot be a\r\n         CNAME.", "correct_text": "RFC5321 Section 2.3.5.  Domain Names\r\n\r\nOnly resolvable, fully-qualified domain names (FQDNs) are permitted\r\n   when domain names are used in SMTP.  In other words, names that can\r\n   be resolved to MX RRs or address (i.e., A or AAAA) RRs (as discussed\r\n   in Section 5) are permitted, as are CNAME RRs whose targets can be\r\n   resolved, in turn, to MX or address RRs.", "notes": "Section 2.3.5 from RFC 5321 seems to contradict the section 5.2.2 from 1123.\r\n\r\nIn RFC5321 it is implied that you can have a domain CNAME pointing to another that has an MX record that is not a CNAME and it should work. However 1123 states that it's not possible.\n --VERIFIER NOTES-- \nErrata reports are for mistakes in the published document -- errata at the time of publication.  Anything that might have changed since then is appropriate for a new document, but isn't errata in the old one.", "submit_date": "2020-04-28", "submitter_name": "Abel", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-04-28 11:59:56"}, {"errata_id": "6135", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Global", "orig_text": "list, series, set, and vector are seemingly used as synonyms. ", "correct_text": "Using list, series, set, xor vector would help at least one reader. \r\n", "notes": "Additionally, consistent usage is desirable, e.g., page 31 uses \"A list of extensions\" whereas \"A set of \r\nextensions\" is used on page 60. Elsewhere inconsistently usage causes confusion, e.g., \r\nPage 48:\r\n\r\n   client_shares:  A list of offered KeyShareEntry values in descending\r\n      order of client preference.\r\n\r\n   This vector MAY be empty if the client is requesting a\r\n\r\n(Replace \"vector\" with \"list\", or vice versa.)\r\n\r\nPaul Wouters (AD):  This got incorporated into the bis document, but not exactly as suggested.", "submit_date": "2020-04-28", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:20:06"}, {"errata_id": "6136", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.4", "orig_text": "   Upon receipt of a HelloRetryRequest, the client MUST check the\r\n   legacy_version, legacy_session_id_echo, cipher_suite, and     \r\n   legacy_compression_method as specified in Section 4.1.3 ", "correct_text": "", "notes": "Section 4.1.3 defines no checks for legacy_version nor legacy_compression_method\r\n --VERIFIER NOTES-- \r\n   It does have the listed fields and values it should contain (to check) in the previous 4.1.3 section.\r\n\r\nThis is being addressed; see https://github.com/tlswg/tls13-spec/pull/1364/files\r\n\r\n", "submit_date": "2020-04-28", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-18 18:41:57"}, {"errata_id": "6137", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2.10", "orig_text": "symmetric cipher suite", "correct_text": "cipher suite", "notes": "\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-28", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 19:07:04"}, {"errata_id": "7265", "doc-id": "RFC8743", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "C.2.11.", "orig_text": "ConvergenceConfig convergence_config", "correct_text": "ConvergenceConfig convergence_config <1..*>;", "notes": "the \"convergence_config\" field should be an array of ConvergenceConfig. And the description in the schemas of MX UP Setup Configuration Request in Chapter C.3.10 also confirms this point", "submit_date": "2022-12-12", "submitter_name": "Dacheng Huang", "verifier_id": "", "verifier_name": null, "update_date": "2022-12-12 23:39:26"}, {"errata_id": "6138", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.10", "orig_text": "   For externally              \r\n   provisioned PSKs, the associated values are those provisioned along \r\n   with the key.  For PSKs established via a NewSessionTicket message, \r\n   the associated values are those which were negotiated in the        \r\n   connection which established the PSK.  \r\n\r\n   ...\r\n\r\n   For externally established             \r\n   PSKs, the associated values are those provisioned along with the key.\r\n   For PSKs established via a NewSessionTicket message, the associated  \r\n   values are those negotiated in the connection during which the ticket\r\n   was established.                                                     ", "correct_text": "   For externally              \r\n   provisioned PSKs, the associated values are those provisioned along \r\n   with the key.  For PSKs established via a NewSessionTicket message, \r\n   the associated values are those which were negotiated in the        \r\n   connection which established the PSK.  ", "notes": "Drop largely verbatim duplicated text\r\n\r\nPaul Wouters (AD):  This got incorporated into the bis document, but not exactly as suggested.", "submit_date": "2020-04-28", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:21:32"}, {"errata_id": "6139", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4.2.2.", "orig_text": "As servers MAY require the presence of the \"server_name\" extension, clients\r\nSHOULD send this extension, when applicable.", "correct_text": "As servers MAY require the presence of the \"server_name\" extension, client\r\nSHOULD send this extension.", "notes": "Since it is unclear when it is applicable for a server to send the extension, dropping \"when applicable\"\r\nseems appropriate. Alternatively, giving some extra guidance would be useful.\r\n\r\nPaul Wouters(AD): Resolved with alternative Corrected Text:\r\n\r\nAs servers MAY require the presence of the \"server_name\" extension, clients SHOULD send this extension when the server is identified by name.\r\n", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-29 01:11:01"}, {"errata_id": "6140", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4.2.2.", "orig_text": "This fallback chain SHOULD NOT use the deprecated SHA-1 hash\r\nalgorithm in general, but MAY do so if the client's advertisement\r\npermits it, and MUST NOT do so otherwise.", "correct_text": "This fullback chain MUST NOT use the deprecated SHA-1 hash,\r\nexcept if advertised by the client, in which case it MAY.", "notes": "The original text is difficult to read, eliminating the unnecessary \"SHOULD NOT\" seems to make it \r\neasier.\r\n\r\nPaul Wouters(SEC AD): accepted with slightly different text, keeping the SHOULD NOT -> MUST NOT change proposed here", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 19:13:51"}, {"errata_id": "6141", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4.3", "orig_text": "   -  The context string", "correct_text": "   -  The context string (defined below)", "notes": "", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:27:54"}, {"errata_id": "6142", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.1.", "orig_text": "Clients MUST NOT cache tickets for longer than 7 days", "correct_text": "Clients MUST NOT use tickets for longer than 7 days", "notes": "\"MUST NOT cache\" is surely overly zealous and may unnecessarily result in non-compliant implementations", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:24:56"}, {"errata_id": "6143", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.7", "orig_text": "As of TLS 1.3, servers are permitted to send the \"supported_groups\"\r\nextension to the client.", "correct_text": "", "notes": "It is unclear whether servers are permitted to send the \"supported_groups\" extension to \r\nthe client without solicitation, i.e., when the client does not first send the extension to the \r\nserver. Clarification would be useful.\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:58:40"}, {"errata_id": "6144", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2.8.", "orig_text": "Upon receipt of this extension in a HelloRetryRequest, the client\r\nMUST verify that...the selected_group field does not\r\ncorrespond to a group which was provided in the \"key_share\" extension\r\nin the original ClientHello.", "correct_text": "Upon receipt of this extension in a HelloRetryRequest, the client\r\nMUST verify that...a key share was not offered (in the \"key_share\" \r\nextension in the original ClientHello) for the group in the \r\nselected_group field.", "notes": "The original text requires knowledge of the \"key_share\" extension and is rather hard to read,\r\nthe proposed text should be easier to understand.\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 19:17:20"}, {"errata_id": "6145", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.10.", "orig_text": "When a PSK is used and early data is allowed for that PSK", "correct_text": "", "notes": "I couldn't find restrictions that forbid early data for a PSK. Explaining where such restrictions\r\ncould exist would be useful. E.g., PSKs might be associated with data that forbids early data.\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:59:57"}, {"errata_id": "6146", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.10.", "orig_text": "The TLS version number", "correct_text": "The selected TLS version number", "notes": "", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:26:21"}, {"errata_id": "6147", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.10.", "orig_text": "In order to accept early data, the server MUST have accepted a PSK\r\ncipher suite....In addition, it MUST verify that the\r\nfollowing values are the same as those associated with the\r\nselected PSK:\r\n\r\n...\r\n\r\n-  The selected cipher suite", "correct_text": "", "notes": "Accepting the \"PSK cipher suite\" surely implies the PSK is associated with the cipher suite, hence, \r\n\"The selected cipher suite\" can be dropped.\r\n\r\nPaul Wouters(SEC AD): The text was changed a little to solve this issue", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 19:19:36"}, {"errata_id": "6148", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2.10", "orig_text": "The selected ALPN [RFC7301] protocol, if any", "correct_text": "The selected ALPN [RFC7301] protocol, if extension application_layer_protocol_negotiation is present", "notes": "\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 19:21:40"}, {"errata_id": "7266", "doc-id": "RFC8743", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "C.2.12", "orig_text": "Probe Delay: Average delay of probe message, in microseconds.", "correct_text": "null", "notes": "This data type does not include probe latency in the definition described later. This is also confirmed in the description in Chapter 8.6.", "submit_date": "2022-12-12", "submitter_name": "Dacheng Huang", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "9044", "doc-id": "RFC9810", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "In such\r\na case, the senderKID field MUST hold an identifier (i.e., a\r\nreference number) that indicates to the receiver the appropriate\r\nshared secret information to use to verify the message.", "correct_text": "If the sender does not know its own DN and\r\nit protects the message using a shared secret,\r\nthe senderKID field MUST hold an identifier (i.e., a\r\nreference number) that indicates to the receiver the appropriate\r\nshared secret information to use to verify the message.", "notes": "The above extension allows for the following case:\r\nIf the sender does not know its own DN\r\nand does not protect the message, providing a senderKID is not relevant.", "submit_date": "2026-07-28", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-29 13:49:47"}, {"errata_id": "6149", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3.2", "orig_text": "The media type quality factor associated with a given type is\r\ndetermined by finding the media range with the highest precedence\r\nthat matches the type.  For example,\r\n\r\n  Accept: text/*;q=0.3, text/html;q=0.7, text/html;level=1,\r\n          text/html;level=2;q=0.4, */*;q=0.5\r\n\r\nwould cause the following values to be associated:\r\n\r\n+-------------------+---------------+\r\n| Media Type        | Quality Value |\r\n+-------------------+---------------+\r\n| text/html;level=1 | 1             |\r\n| text/html         | 0.7           |\r\n| text/plain        | 0.3           |\r\n| image/jpeg        | 0.5           |\r\n| text/html;level=2 | 0.4           |\r\n| text/html;level=3 | 0.7           |\r\n+-------------------+---------------+", "correct_text": "The media type quality factor associated with a given type is\r\ndetermined by finding the media range with the highest precedence\r\nthat matches the type.  For example,\r\n\r\n  Accept: text/*;q=0.3, text/plain;q=0.7, text/plain;format=flowed,\r\n          text/plain;format=fixed;q=0.4, */*;q=0.5\r\n\r\nwould cause the following values to be associated:\r\n\r\n+--------------------------+---------------+\r\n| Media Type               | Quality Value |\r\n+--------------------------+---------------+\r\n| text/plain;format=flowed | 1             |\r\n| text/plain               | 0.7           |\r\n| text/html                | 0.3           |\r\n| image/jpeg               | 0.5           |\r\n| text/plain;format=fixed  | 0.4           |\r\n| text/plain;delsp=yes     | 0.7           |\r\n+--------------------------+---------------+", "notes": "The optional \"level\" parameter of media type text/html was removed by informational RFC 2854 (The 'text/html' Media Type), [section 2](https://tools.ietf.org/html/rfc2854#section-2) of which states:\r\n\r\n> Note that [HTML20] included an optional \"level\" parameter; in\r\n> practice, this parameter was never used and has been removed from\r\n> this specification.\r\n\r\nMore formally, [the current IANA registration of the text/html media type](https://www.iana.org/assignments/media-types/text/html), which is taken directly from [section 16.1 of the HTML specification](https://html.spec.whatwg.org/multipage/iana.html#text/html), does not include a \"level\" parameter.\r\n\r\nWhilst the example is non-normative, it has given rise to misleading information\u2014e.g. in the [MDN Web Docs glossary definition of \"quality values\"](https://developer.mozilla.org/en-US/docs/Glossary/quality_values), which states:\r\n\r\n> Some syntax, like the one of Accept, allow additional specifiers\r\n> like text/html;level=1. These increase the specificity of the value.\r\n> Their use is extremely rare.\n --VERIFIER NOTES-- \nAs discussed in the mailing list:\r\n\r\n> While it is theoretically possible for media types to no longer define a\r\n> given parameter, it is not possible for them to limit usage of parameters\r\n> in HTTP. This example is still fine.\r\n>\r\n> Note that this example has already been updated in http-core's Accept", "submit_date": "2020-04-29", "submitter_name": "Alan Egerton", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-04-29 09:56:40"}, {"errata_id": "6150", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Note that certificate-based client authentication is not available \r\nin PSK handshake flows (including 0-RTT). ", "correct_text": "Note that certificate-based client authentication is not available \r\nin PSK handshake flows (including 0-RTT), post-handshake \r\ncertificate-based client authentication is possible.", "notes": "\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-04-29", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 19:23:09"}, {"errata_id": "6151", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.4", "orig_text": "   | Post-     | ClientHello ... client  | client_application_traffic_ |\r\n   | Handshake | Finished +              | secret_N                    |\r\n   |           | CertificateRequest      |                             |", "correct_text": "   | Post-     | ClientHello ... client  | [sender]_application_traffic|\r\n   | Handshake | Finished +              | _secret_N                   |\r\n   |           | CertificateRequest      |                             |", "notes": "", "submit_date": "2020-04-30", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:37:19"}, {"errata_id": "6152", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "Clients MUST check for [\"supported_versions\"] prior to\r\nprocessing the rest of the ServerHello (although they will have to \r\nparse the ServerHello in order to read the extension). -- Section 4.2.1.\r\n\r\nUpon receipt of a HelloRetryRequest, the client MUST check the\r\nlegacy_version, legacy_session_id_echo, cipher_suite, and\r\nlegacy_compression_method as specified in Section 4.1.3 and then\r\nprocess the extensions, starting with determining the version using\r\n\"supported_versions\". -- Section 4.1.4\r\n\r\nUpon receiving a message with type server_hello, implementations MUST\r\nfirst examine the Random value... -- Section 4.1.3.\r\n", "correct_text": "", "notes": "These requirements are seemingly conflicting. I suspect checking for \"supported_versions\" must \r\ncome first, since that may influence subsequent steps, e.g., checking legacy_compression_method \r\nand the Random value. It doesn't seem to matter whether legacy_version, legacy_session_id_echo, \r\ncipher_suite, and legacy_compression_method are checked before the Random value, so it doesn't\r\nseem to matter which check is second and which is third. (Noting, as per one of my earlier reports,\r\ndated 28 Apr, Section 4.1.3 defines no checks for legacy_version nor legacy_compression_method. \r\nPerhaps the latter should be checked to be zero, aborting with alert illegal_parameter if it isn't, as per\r\nSection 4.1.2.)\n --VERIFIER NOTES-- \n   rejected by WG", "submit_date": "2020-05-01", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 19:06:00"}, {"errata_id": "6156", "doc-id": "RFC8018", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A.2", "orig_text": "      PBKDF2-PRFs ALGORITHM-IDENTIFIER ::= {\r\n        {NULL IDENTIFIED BY id-hmacWithSHA1},\r\n        {NULL IDENTIFIED BY id-hmacWithSHA224},\r\n        {NULL IDENTIFIED BY id-hmacWithSHA256},\r\n        {NULL IDENTIFIED BY id-hmacWithSHA384},\r\n        {NULL IDENTIFIED BY id-hmacWithSHA512},\r\n        {NULL IDENTIFIED BY id-hmacWithSHA512-224},\r\n        {NULL IDENTIFIED BY id-hmacWithSHA512-256},\r\n        ...\r\n      }", "correct_text": "      PBKDF2-PRFs ALGORITHM-IDENTIFIER ::= {\r\n        {NULL IDENTIFIED BY id-hmacWithSHA1}        |\r\n        {NULL IDENTIFIED BY id-hmacWithSHA224}      |\r\n        {NULL IDENTIFIED BY id-hmacWithSHA256}      |\r\n        {NULL IDENTIFIED BY id-hmacWithSHA384}      |\r\n        {NULL IDENTIFIED BY id-hmacWithSHA512}      |\r\n        {NULL IDENTIFIED BY id-hmacWithSHA512-224}  |\r\n        {NULL IDENTIFIED BY id-hmacWithSHA512-256},\r\n        ...\r\n      }", "notes": "For the ASN.1 Module to compile properly, six commas need to be replaced with \"|\" in the definition of PBKDF2-PRFs.\r\nErrata 5808 targets the complete ASN.1 module, here this is just an extract copied in PBKDF2 description.", "submit_date": "2020-05-03", "submitter_name": "Triton Circonflexe", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2025-05-06 21:12:14"}, {"errata_id": "6157", "doc-id": "RFC7170", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.9", "orig_text": "  Status\r\n\r\n      The Status field is one octet.  This indicates the result if the\r\n      server does not process the action requested by the peer.", "correct_text": "  Status\r\n\r\n      The Status field is one octet.  This indicates the result if the\r\n      party who receives this TLV does not process the action.", "notes": "The status field is carried in the \"Request-Action\" frame.  As is stated at the start of the section, the frame can be sent either by the server or the peer.", "submit_date": "2020-05-04", "submitter_name": "Eliot Lear", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-03-17 23:54:30"}, {"errata_id": "7545", "doc-id": "RFC4880", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "   The format of an Armor Header is that of a key-value pair.  A colon\r\n   (':' 0x38) and a single space (0x20) separate the key and value.\r\n   OpenPGP should consider improperly formatted Armor Headers to be\r\n   corruption of the ASCII Armor.  Unknown keys should be reported to\r\n   the user, but OpenPGP should continue to process the message.", "correct_text": "   The format of an Armor Header is that of a key-value pair.  A colon\r\n   (':' 0x3A) and a single space (0x20) separate the key and value.\r\n   OpenPGP should consider improperly formatted Armor Headers to be\r\n   corruption of the ASCII Armor.  Unknown keys should be reported to\r\n   the user, but OpenPGP should continue to process the message.", "notes": "0x3A is a colon -> ':' , whereas 0x38 is the character for the numeral eight -> '8'", "submit_date": "2023-06-16", "submitter_name": "Raghu Saxena", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-19 20:42:31"}, {"errata_id": "6153", "doc-id": "RFC4443", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "3.1.  Destination Unreachable Message\r\n\r\n   [..]\r\n\r\n   If the reason for the failure to deliver is that the destination is\r\n   beyond the scope of the source address, the Code field is set to 2.\r\n   This condition can occur only when the scope of the source address is\r\n   smaller than the scope of the destination address (e.g., when a\r\n   packet has a link-local source address and a global-scope destination\r\n   address) and the packet cannot be delivered to the destination\r\n   without leaving the scope of the source address.", "correct_text": "3.1.  Destination Unreachable Message\r\n\r\n   [..]\r\n\r\n   If the reason for the failure to deliver is that the destination is\r\n   beyond the scope zone of the source address, the Code field is set to\r\n   2.  The scope zone of the destination address is determined by the\r\n   scope of the address and arrival interface of the packet, as specified\r\n   in [IPv6-SCOPE, Section 9].  Similarly, the scope zone of the source\r\n   address is determined by the scope of the address and arrival\r\n   interface of the packet.  This condition can occur only when\r\n   transmitting the packet on the chosen next-hop interface would cause\r\n   the packet to leave the zone of the source address, i.e., cross a zone\r\n   boundary of the scope of the source address.\r\n\r\n7.1.  Normative References\r\n\r\n   [..]\r\n\r\n   [IPv6-SCOPE] Deering, S., Haberman, B., Jinmei, T., Nordmark, E.,\r\n                and B. Zill, \"IPv6 Scoped Address Architecture\", RFC\r\n                4007, March 2005.   ", "notes": "https://tools.ietf.org/html/rfc4007#section-9\r\n\r\nScope zone is not scope.\r\n\r\nConsider a case when the source IP is link-local and the destination is global, yet the routing happens in the same VLAN. Per RFC 4007, the packet should be transmitted; however, RFC 4443 allows for an ambiguity which is already causing vendors to reject packets in this case.\n --VERIFIER NOTES-- \nI was tempted to mark this HFDU, since it seems like there is always the opportunity to improve clarity around text that deals with IPv6 scope concepts.\r\n\r\nHowever, I'm not sure this specific text is an improvement and some discussion on the mailing list did not seem to come to any consensus as to what should be done.  See also:\r\n\r\n    https://mailarchive.ietf.org/arch/msg/ipv6/pkRo2Bt4hHu9PFJf2BtYPVn4sJk/\r\n\r\nand preceding messages.", "submit_date": "2020-05-01", "submitter_name": "T\u00f6ma Gavrichenkov", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-10-17 04:20:56"}, {"errata_id": "6154", "doc-id": "RFC3579", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   EAP-Start is indicated by sending an EAP-Message attribute with a\r\n   length of 2 (no data).\r\n\r\n", "correct_text": "   EAP-Start is indicated by sending an EAP-Message attribute with a\r\n   length of 3.  The single byte of data SHOULD be set to zero on\r\n   transmission and MUST be ignored on receipt.  RADIUS clients MUST\r\n   NOT send EAP-Message attributes of length 2, as attributes with no\r\n   value are not permitted in RADIUS.  However, for historical reasons\r\n   and for compatibility with existing practice, RADIUS servers MUST\r\n   accept EAP-Messages of length 2, and treat them as EAP-Start.\r\n", "notes": "RFC 2865 Section 5 says that empty attributes must be omitted:\r\n\r\n      text      1-253 octets containing UTF-8 encoded 10646 [7]\r\n                characters.  Text of length zero (0) MUST NOT be sent;\r\n                omit the entire attribute instead.\r\n\r\nSection 3.1 of RFC 3579 also says that the EAP-Message attribute cannot be sent with length 2:\r\n\r\n...\r\n   Type\r\n\r\n      79 for EAP-Message\r\n\r\n   Length\r\n\r\n      >= 3\r\n...\r\n\r\nIn practice, few devices seem to send EAP-Message with Length 2.", "submit_date": "2020-05-01", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2022-04-01 04:45:17"}, {"errata_id": "6155", "doc-id": "RFC8777", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   <CODE BEGINS>\r\n     $ cat translate.py\r\n     #!/usr/bin/env python3\r\n     import sys\r\n     name=sys.argv[1]\r\n     wire=''\r\n     for dn in name.split('.'):\r\n       if len(dn) > 0:\r\n         wire += ('%02x' % len(dn))\r\n         wire += (''.join('%02x'%ord(x) for x in dn))\r\n     print(len(wire)//2) + 2\r\n     print(wire)\r\n\r\n     $ ./translate.py amtrelays.example.com\r\n     24\r\n     09616d7472656c617973076578616d706c6503636f6d\r\n   <CODE ENDS>", "correct_text": "   <CODE BEGINS>\r\n     $ cat translate.py\r\n     #!/usr/bin/env python3\r\n     import sys\r\n     name=sys.argv[1]\r\n     wire=''\r\n     for dn in name.split('.'):\r\n       if len(dn) > 0:\r\n         wire += ('%02x' % len(dn))\r\n         wire += (''.join('%02x'%ord(x) for x in dn))\r\n     print(len(wire)//2 + 2)\r\n     print(wire)\r\n\r\n     $ ./translate.py amtrelays.example.com\r\n     24\r\n     09616d7472656c617973076578616d706c6503636f6d\r\n   <CODE ENDS>", "notes": "The original sample code gives a runtime error when executed.  The +2 should have been inside the parenthesis for the print function.", "submit_date": "2020-05-01", "submitter_name": "Jake Holland", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-04-27 16:34:37"}, {"errata_id": "6158", "doc-id": "RFC7483", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.2.3", "orig_text": "Description: The object instance was transferred from one registrant to another.", "correct_text": "Description: The object instance was transferred from one registrar to another.", "notes": "I believe the corrected text is what was intended for this particular registry value, and is what is being implemented by operators today. Registrant-to-registrant transfers are also possible, but they're not performed using EPP and are not logged as an event action. The text in the RFC should be changed and the description of the action in the IANA registry should also be changed.", "submit_date": "2020-05-06", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 22:08:30"}, {"errata_id": "6159", "doc-id": "RFC8415", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.5", "orig_text": "   Temporary addresses were originally introduced to avoid privacy\r\n   concerns with stateless address autoconfiguration, which based\r\n   64 bits of the address on the EUI-64 (see [RFC4941].", "correct_text": "   Temporary addresses were originally introduced to avoid privacy\r\n   concerns with stateless address autoconfiguration, which based\r\n   64 bits of the address on the EUI-64 (see [RFC4941]).", "notes": "Missing close parenthesis\r\n\r\nAD note: good catch but as it is a typo, it is for \"Held for Document Update\". Thank you.", "submit_date": "2020-05-07", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2020-05-07 08:29:35"}, {"errata_id": "6160", "doc-id": "RFC3501", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Page 89", "orig_text": "search          = \"SEARCH\" [SP \"CHARSET\" SP astring] 1*(SP search-key)\r\n                    ; CHARSET argument to MUST be registered with IANA", "correct_text": "search          = \"SEARCH\" [SP \"CHARSET\" SP astring] 1*(SP search-key)\r\n                    ; CHARSET argument MUST be registered with IANA", "notes": "An errata already exists for the first line above: astring replaced with charset. The 2nd line seems to have an extra word, \"to\".", "submit_date": "2020-05-07", "submitter_name": "Gene Smith", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-05-08 02:57:19"}, {"errata_id": "6163", "doc-id": "RFC7970", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.2", "orig_text": " An example of C2 domains from a given campaign.\r\n\r\n   <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   <!-- A list of C2 domains associated with a campaign -->\r\n   <IODEF-Document version=\"2.00\" xml:lang=\"en\"\r\n      xmlns=\"urn:ietf:params:xml:ns:iodef-2.0\"\r\n      xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\r\n      xsi:schemaLocation=\r\n      \"http://www.iana.org/assignments/xml-registry/schema/\r\n       iodef-2.0.xsd\">\r\n     <Incident purpose=\"watch\" restriction=\"green\">\r\n       <IncidentID name=\"csirt.example.com\">897923</IncidentID>\r\n         <RelatedActivity>\r\n           <ThreatActor>\r\n             <ThreatActorID>\r\n             TA-12-AGGRESSIVE-BUTTERFLY\r\n             </ThreatActorID>\r\n             <Description>Aggressive Butterfly</Description>\r\n           </ThreatActor>\r\n           <Campaign>\r\n             <CampaignID>C-2015-59405</CampaignID>\r\n             <Description>Orange Giraffe</Description>\r\n           </Campaign>\r\n         </RelatedActivity>\r\n         <GenerationTime>2015-10-02T11:18:00-05:00</GenerationTime>\r\n         <Description>Summarizes the Indicators of Compromise\r\n           for the Orange Giraffe campaign of the Aggressive\r\n           Butterfly crime gang.\r\n         </Description>\r\n         <Assessment>\r\n           <BusinessImpact type=\"breach-proprietary\"/>\r\n         </Assessment>\r\n         <Contact type=\"organization\" role=\"creator\">\r\n           <ContactName>CSIRT for example.com</ContactName>\r\n           <Email>\r\n             <EmailTo>contact@csirt.example.com</EmailTo>\r\n           </Email>\r\n         </Contact>\r\n         <IndicatorData>\r\n           <Indicator>\r\n             <IndicatorID name=\"csirt.example.com\" version=\"1\">\r\n             G90823490\r\n             </IndicatorID>\r\n             <Description>C2 domains</Description>\r\n             <StartTime>2014-12-02T11:18:00-05:00</StartTime>\r\n             <Observable>\r\n               <BulkObservable type=\"fqdn\">", "correct_text": " An example of C2 domains from a given campaign.\r\n\r\n   <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   <!-- A list of C2 domains associated with a campaign -->\r\n   <IODEF-Document version=\"2.00\" xml:lang=\"en\"\r\n      xmlns=\"urn:ietf:params:xml:ns:iodef-2.0\"\r\n      xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\"\r\n      xsi:schemaLocation=\r\n      \"http://www.iana.org/assignments/xml-registry/schema/\r\n       iodef-2.0.xsd\">\r\n     <Incident purpose=\"watch\" restriction=\"green\">\r\n       <IncidentID name=\"csirt.example.com\">897923</IncidentID>\r\n         <RelatedActivity>\r\n           <ThreatActor>\r\n             <ThreatActorID>\r\n             TA-12-AGGRESSIVE-BUTTERFLY\r\n             </ThreatActorID>\r\n             <Description>Aggressive Butterfly</Description>\r\n           </ThreatActor>\r\n           <Campaign>\r\n             <CampaignID>C-2015-59405</CampaignID>\r\n             <Description>Orange Giraffe</Description>\r\n           </Campaign>\r\n         </RelatedActivity>\r\n         <GenerationTime>2015-10-02T11:18:00-05:00</GenerationTime>\r\n         <Description>Summarizes the Indicators of Compromise\r\n           for the Orange Giraffe campaign of the Aggressive\r\n           Butterfly crime gang.\r\n         </Description>\r\n         <Assessment>\r\n           <BusinessImpact type=\"breach-proprietary\"/>\r\n         </Assessment>\r\n         <Contact type=\"organization\" role=\"creator\">\r\n           <ContactName>CSIRT for example.com</ContactName>\r\n           <Email>\r\n             <EmailTo>contact@csirt.example.com</EmailTo>\r\n           </Email>\r\n         </Contact>\r\n         <IndicatorData>\r\n           <Indicator>\r\n             <IndicatorID name=\"csirt.example.com\" version=\"1\">\r\n             G90823490\r\n             </IndicatorID>\r\n             <Description>C2 domains</Description>\r\n             <StartTime>2014-12-02T11:18:00-05:00</StartTime>\r\n             <Observable>\r\n               <BulkObservable type=\"domain-name\">", "notes": "Neither the IODEF Data Model (XML Schema) in section 8 nor the main body in section 3.29.3.1 define a type named \"fqdn\" for the BulkObservable class.\r\nInstead, section 3.29.3.1 states that the \"domain-name\" type is used to denote \"A fully qualified domain name or part of a name (e.g., fqdn.example.com, example.com).\". The XML schema agrees with that.\r\n\r\nThe example in section 7.2 was changed to comply with this definition.", "submit_date": "2020-05-10", "submitter_name": "Fran\u00e7ois Poirotte", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6164", "doc-id": "RFC8709", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "6.  Signature Format\r\n\r\n   The \"ssh-ed25519\" key format has the following encoding:\r\n\r\n   string  \"ssh-ed25519\"\r\n\r\n   string  signature\r\n\r\n   Here, 'signature' is the 64-octet signature produced in accordance\r\n   with [RFC8032], Section 5.1.6.\r\n\r\n   The \"ssh-ed448\" key format has the following encoding:\r\n\r\n   string  \"ssh-ed448\"\r\n\r\n   string  signature\r\n\r\n   Here, 'signature' is the 114-octet signature produced in accordance\r\n   with [RFC8032], Section 5.2.6.", "correct_text": "6.  Signature Format\r\n\r\n   The \"ssh-ed25519\" signature format has the following encoding:\r\n\r\n   string  \"ssh-ed25519\"\r\n\r\n   string  signature\r\n\r\n   Here, 'signature' is the 64-octet signature produced in accordance\r\n   with [RFC8032], Section 5.1.6.\r\n\r\n   The \"ssh-ed448\" signature format has the following encoding:\r\n\r\n   string  \"ssh-ed448\"\r\n\r\n   string  signature\r\n\r\n   Here, 'signature' is the 114-octet signature produced in accordance\r\n   with [RFC8032], Section 5.2.6.", "notes": "s/key format/signature format/", "submit_date": "2020-05-11", "submitter_name": "HARUYAMA Seigo", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-05-16 06:32:56"}, {"errata_id": "7267", "doc-id": "RFC8743", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "C.4.8.", "orig_text": "{\r\n\"connection_id\": 0,\r\n\"connection_type\": \"LTE\",\r\n\"udp_port\": 8888,\r\n\"num_delivery_connections\": 2,\r\n\"delivery_connections\": [{\r\n\"connection_id\": 0,\r\n\"connection_type\": \"LTE\"\r\n},\r\n{\r\n\"connection_id\": 1,\r\n\"connection_type\": \"Wi-Fi\",\r\n\"adaptation_method\": \"UDP_without_DTLS\",\r\n\"adaptation_method_param\": {\r\n\"tunnel_ip_addr\": \"192.168.3.3\",\r\n\"tunnel_end_port\": \"6000\"\r\n}\r\n}\r\n]\r\n}", "correct_text": "{\r\n\t\"connection_id\": 0,\r\n\t\"connection_type\": \"LTE\",\r\n\t\"num_active_mx_conf\": 1,\r\n\t\"convergence_config\": [{\r\n\t\t\"mx_configuration_id\": 1,\r\n\t\t\"convergence_method\": \"MPTCP\",\r\n\t\t\"convergence_method_params\": {},\r\n\t\t\"num_delivery_connections\": 2,\r\n\t\t\"delivery_connections\": [{\r\n\t\t\t\t\"connection_id\": 0,\r\n\t\t\t\t\"connection_type\": \"LTE\"\r\n\t\t\t},\r\n\t\t\t{\r\n\t\t\t\t\"connection_id\": 1,\r\n\t\t\t\t\"connection_type\": \"Wi-Fi\",\r\n\t\t\t\t\"adaptation_method\": \"UDP_without_DTLS\",\r\n\t\t\t\t\"adaptation_method_param\": {\r\n\t\t\t\t\t\"tunnel_ip_addr\": \"192.168.3.3\",\r\n\t\t\t\t\t\"tunnel_end_port\": \"6000\"\r\n\t\t\t\t}\r\n\t\t\t}\r\n\t\t]\r\n\t}]\r\n}", "notes": "The \"udp_port\" field should be deleted. And it is missing \"num_active_mx_conf\" field and \"convergence_config\" field.\r\nThe \"num_delivery_connections\" field and \"delivery_connections\" field should be in the item of \"convergence_config\" field", "submit_date": "2022-12-12", "submitter_name": "Dacheng Huang", "verifier_id": "", "verifier_name": null, "update_date": "2022-12-13 00:06:48"}, {"errata_id": "6259", "doc-id": "RFC3579", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "  Where the initial EAP-Request sent by the NAS is for an\r\n  authentication Type (4 or greater), the peer MAY respond with a Nak\r\n  indicating that it would prefer another authentication method that is\r\n  not implemented locally.  \r\n", "correct_text": "  Where the initial EAP-Request sent by the NAS is for an\r\n  authentication Type (4 or greater), the peer MAY respond with a Nak\r\n  indicating that it would prefer another authentication method. In this\r\n  case, the NAS should send an Access-Request encapsulating the\r\n  received EAP-Response/Nak.  This allows a peer to suggest another\r\n  EAP method where the NAS is configured to send a default EAP\r\n  type (such as MD5-Challenge) which may not be appropriate.", "notes": "Clarify what happens when a NAK is received and correct the \"not\" in the original text.", "submit_date": "2020-08-20", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2022-04-01 14:40:15"}, {"errata_id": "6260", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "ID              A 16 bit identifier assigned by the program that\r\n                generates any kind of query.  This identifier is copied\r\n                the corresponding reply and can be used by the requester\r\n                to match up replies to outstanding queries.\r\n", "correct_text": "ID              A 16 bit identifier assigned by the program that\r\n                generates any kind of query.  This identifier is copied\r\n                to the corresponding reply and can be used by the\r\n\t\trequester to match up replies to outstanding queries.\r\n", "notes": "Alternative phrasing coule be \"into the corresponding reply\".", "submit_date": "2020-08-23", "submitter_name": "Merlin B\u00fcge", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-08-24 17:10:18"}, {"errata_id": "6268", "doc-id": "RFC8489", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.1", "orig_text": "        00 01 00 9c      Request type and message length\r\n        21 12 a4 42      Magic cookie\r\n        78 ad 34 33   }\r\n        c6 ad 72 c0   }  Transaction ID\r\n        29 da 41 2e   }\r\n        00 1e 00 20      USERHASH attribute header\r\n        4a 3c f3 8f   }\r\n        ef 69 92 bd   }\r\n        a9 52 c6 78   }\r\n        04 17 da 0f   }  Userhash value (32 bytes)\r\n        24 81 94 15   }\r\n        56 9e 60 b2   }\r\n        05 c4 6e 41   }\r\n        40 7f 17 04   }\r\n        00 15 00 29      NONCE attribute header\r\n        6f 62 4d 61   }\r\n        74 4a 6f 73   }\r\n        32 41 41 41   }\r\n        43 66 2f 2f   }\r\n        34 39 39 6b   }  Nonce value and padding (3 bytes)\r\n        39 35 34 64   }\r\n        36 4f 4c 33   }\r\n        34 6f 4c 39   }\r\n        46 53 54 76   }\r\n        79 36 34 73   }\r\n        41 00 00 00   }\r\n        00 14 00 0b      REALM attribute header\r\n        65 78 61 6d   }\r\n        70 6c 65 2e   }  Realm value (11 bytes) and padding (1 byte)\r\n        6f 72 67 00   }\r\n        00 1c 00 20      MESSAGE-INTEGRITY-SHA256 attribute header\r\n        e4 68 6c 8f   }\r\n        0e de b5 90   }\r\n        13 e0 70 90   }\r\n        01 0a 93 ef   }  HMAC-SHA256 value\r\n        cc bc cc 54   }\r\n        4c 0a 45 d9   }\r\n        f8 30 aa 6d   }\r\n        6f 73 5a 01   }\r\n ", "correct_text": "   Password Algorithm: SHA-256 (0x0002), and parameters len (0)\r\n\r\n      00 01 00 90     Request type and message length\r\n      21 12 a4 42     Magic cookie\r\n      78 ad 34 33  }\r\n      c6 ad 72 c0  }  Transaction ID\r\n      29 da 41 2e  }\r\n      00 1e 00 20     USERHASH attribute header\r\n      4a 3c f3 8f  }\r\n      ef 69 92 bd  }\r\n      a9 52 c6 78  }\r\n      04 17 da 0f  }  Userhash value (32  bytes)\r\n      24 81 94 15  }\r\n      56 9e 60 b2  }\r\n      05 c4 6e 41  }\r\n      40 7f 17 04  }\r\n      00 15 00 29     NONCE attribute header\r\n      6f 62 4d 61  }\r\n      74 4a 6f 73  }\r\n      32 41 41 41  }\r\n      43 66 2f 2f  }\r\n      34 39 39 6b  }  Nonce value and padding (3 bytes)\r\n      39 35 34 64  }\r\n      36 4f 4c 33  }\r\n      34 6f 4c 39  }\r\n      46 53 54 76  }\r\n      79 36 34 73  }\r\n      41 00 00 00  }\r\n      00 14 00 0b     REALM attribute header\r\n      65 78 61 6d  }\r\n      70 6c 65 2e  }  Realm value (11  bytes) and padding (1 byte)\r\n      6f 72 67 00  }\r\n      00 1d 00 04     PASSWORD-ALGORITHM attribute header\r\n      00 02 00 00     PASSWORD-ALGORITHM value (4 bytes)\r\n      00 1c 00 20     MESSAGE-INTEGRITY-SHA256 attribute header\r\n      b5 c7 bf 00  }\r\n      5b 6c 52 a2  }\r\n      1c 51 c5 e8  }\r\n      92 f8 19 24  }  HMAC-SHA256 value\r\n      13 62 96 cb  }\r\n      92 7c 43 14  }\r\n      93 09 27 8c  }\r\n      c6 51 8e 65  }", "notes": "The message length in the test vector (first line, value: 9c) is the absolute length of the whole test vector. However from section 5. STUN Message Structure\r\n\r\n\"The message length MUST contain the size of the message in bytes, not\r\n   including the 20-byte STUN header.\"\r\n\r\nSo the message length in the header should be 20 bytes less than absolute length of the whole message. \r\n\r\n0x9C - 20 = 0x88.\r\n\r\nAlso the section was missing an indication of what password algorithm that was to be used to derive the password. As SHA-256 was used, and is not the default the PASSWORD-ALGORITHM attribute is required. Thus, this corrected message contains that STUN attribute. \r\n\r\nThe corrected message has a recalculated Message-Integrity-SHA256 attribute. ", "submit_date": "2020-08-30", "submitter_name": "Jared Williams", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2020-10-19 08:04:04"}, {"errata_id": "6165", "doc-id": "RFC6960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "---", "correct_text": "   o  Appendix B.1 provides correct KeyHash type processing description. Now SHA-1 hash must be calculated for responder's public key ASN.1 value without tag, length and unused bits.\r\n", "notes": "The RFC6960 changes OCSP protocol in part of KeyHash type calculation. In RFC2560 there is the description:\r\n   KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key\r\n   (excluding the tag and length fields)\r\n\r\nBut in Appendix B.1, which is the major OCSP descriptive module, stated:\r\nKeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key\r\n                         -- (i.e., the SHA-1 hash of the value of the\r\n                         -- BIT STRING subjectPublicKey [excluding\r\n                         -- the tag, length, and number of unused\r\n                         -- bits] in the responder's certificate)\r\n\r\nThe difference is in what would be under SHA-1 hash. In RFC2560 KeyHash would be calculated for entire BIT STRING value, with \"unused bits\" byte (first byte in BIT STRING value), but Appendix B.1 in RFC6960 states that SHA-1 hash must be calculated for BIT STRING value without \"unused bits\".", "submit_date": "2020-05-11", "submitter_name": "Yury Strozhevsky", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-06-04 09:52:18"}, {"errata_id": "6166", "doc-id": "RFC6960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B.2", "orig_text": "KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key\r\n                         -- (excluding the tag and length fields)\r\n", "correct_text": "KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key\r\n                         -- (i.e., the SHA-1 hash of the value of the\r\n                         -- BIT STRING subjectPublicKey [excluding\r\n                         -- the tag, length, and number of unused\r\n                         -- bits] in the responder's certificate)\r\n", "notes": "These two descriptions of KeyHash produce different SHA-1 hashes due to different values: one is pure BIT STRING value block, with \"unused bits\" byte, but other - without \"unused byte\". Also the Appendix B.2 must be aligned with Appendix B.1 information.", "submit_date": "2020-05-11", "submitter_name": "Yury Strozhevsky", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-06-04 09:52:38"}, {"errata_id": "6167", "doc-id": "RFC6960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "   KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key\r\n   (excluding the tag and length fields)\r\n", "correct_text": "KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key\r\n                         -- (i.e., the SHA-1 hash of the value of the\r\n                         -- BIT STRING subjectPublicKey [excluding\r\n                         -- the tag, length, and number of unused\r\n                         -- bits] in the responder's certificate)\r\n", "notes": "Same explanationa as for https://www.rfc-editor.org/errata/eid6166", "submit_date": "2020-05-11", "submitter_name": "Yury Strozhevsky", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-06-04 09:53:00"}, {"errata_id": "6168", "doc-id": "RFC7970", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.17", "orig_text": "There is no original text (new section)", "correct_text": "2.17.  Boolean\r\n\r\nA boolean is represented in the information model by the BOOLEAN\r\ndata type.  \r\n\r\nThe BOOLEAN data type is implemented in the data model as an\r\n\"xs:boolean\" type per Section 3.2.2 of [W3C.SCHEMA.DTYPES].", "notes": "Section 2.16 defines \"boolean\" as a valid value for the \"dtype\" attribute, stating that \"The element content is of type BOOLEAN.\".\r\nThis is reinforced by the definition of \"dtype-type\" inside the XML schema in section 8 where \"boolean\" is indeed listed as a valid value.\r\nHowever, the BOOLEAN type is never actually defined in the RFC.\r\n\r\nThis change adds a new section (tentatively named 2.17) under section 2 which defines the BOOLEAN type based on the definition of other types used by the RFC.\r\n\r\nIt might be preferable to put the new section near the beginning of section 2 with other primitive datatypes like INTEGER and REAL.\r\nPlease note that this change also impacts the table of contents.", "submit_date": "2020-05-11", "submitter_name": "Fran\u00e7ois Poirotte", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6266", "doc-id": "RFC4255", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.1", "orig_text": "   This algorithm number octet describes the algorithm of the public\r\n   key.  The following values are assigned:\r\n\r\n          Value    Algorithm name\r\n          -----    --------------\r\n          0        reserved\r\n          1        RSA\r\n          2        DSS\r\n\r\n   Reserving other types requires IETF consensus [4].", "correct_text": "   This algorithm number octet describes the algorithm of the public\r\n   key.  The following values are assigned:\r\n\r\n          Value    Algorithm name\r\n          -----    --------------\r\n          0        reserved\r\n          1        RSA\r\n          2        DSA\r\n\r\n   Reserving other types requires IETF consensus [4].", "notes": "The algorithm with value 2 is given as DSS in section 3.1.1, but as DSA in section 5", "submit_date": "2020-08-26", "submitter_name": "Jonathan Neusch\u00e4fer", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-08-30 02:25:58"}, {"errata_id": "6267", "doc-id": "RFC4255", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "Updated by: 6594, 7479, 8709", "notes": "RFCs 6594, 7479, 8709 update the IANA registries \"SSHFP RR Types for public key algorithms\" and \"SSHFP RR type for fingerprint types\", that were originally described in RFC 4255. These RFCs thus (arguably) update RFC 4255. It would be helpful to have such an \"Updated by\" noticed in the header of RFC 4255.\n --VERIFIER NOTES-- \nArguably, those RFCs do not update RFC 4255, given that much of the point of having an IANA registry is to be able to allocate new values without updating the original document.  I do not believe there is a convention of using an Updates relationship solely to indicate that a codepoint has been allocated from an IANA registry.", "submit_date": "2020-08-26", "submitter_name": "Jonathan Neusch\u00e4fer", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-08-30 02:25:30"}, {"errata_id": "7271", "doc-id": "RFC6238", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "         result = Integer.toString(otp);\r\n         while (result.length() < codeDigits) {\r\n             result = \"0\" + result;\r\n         }", "correct_text": "         result = Long.toString(10000000000L + otp);\r\n         result = result.substring(11 - codeDigits);", "notes": "The generation of an OTP should run in constant time to ensure that an attacker can't use an observable timing discrepancy to infer the value of any of the generated digits.\r\nThis proposed correction has been applied to the pyotp and rotp implementations in https://github.com/pyauth/pyotp/pull/148 and https://github.com/mdp/rotp/pull/119", "submit_date": "2022-12-14", "submitter_name": "Charly Coste", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7270", "doc-id": "RFC8713", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.7.3", "orig_text": "The IETF LLC Director candidate is reviewed as specified in [RFC8711].", "correct_text": "The IETF LLC Director candidate is reviewed as specified in Section 6.1\r\nof [RFC8711].", "notes": "This document uses \"LLC Director\" which seems to be outdated; LLC Board Member is more common.\r\n\r\nHowever, in the original text, adding a reference to the specific section is very useful.", "submit_date": "2022-12-13", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:18:17"}, {"errata_id": "6169", "doc-id": "RFC7970", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.4", "orig_text": "4.4.  Incompatibilities with v1\r\n\r\n   The IODEF data model in this document makes a number of changes to\r\n   [RFC5070].  These changes were largely additive -- classes and\r\n   enumerated values were added.  However, some incompatibilities\r\n   between [RFC5070] and this new specification were introduced.  These\r\n   incompatibilities are as follows:\r\n\r\n   o  The IODEF-Document@version attribute is set to \"2.0\".", "correct_text": "4.4.  Incompatibilities with v1\r\n\r\n   The IODEF data model in this document makes a number of changes to\r\n   [RFC5070].  These changes were largely additive -- classes and\r\n   enumerated values were added.  However, some incompatibilities\r\n   between [RFC5070] and this new specification were introduced.  These\r\n   incompatibilities are as follows:\r\n\r\n   o  The IODEF-Document@version attribute is set to \"2.00\".", "notes": "The XML schema in section 8, the main text in section  3.1 and every other occurrence in the document state that the IODEF-Document@version attribute has a fixed value of \"2.00\".\r\n\r\nThe impact of this change on the overall technical meaning is limited since the incompatibility with IODEF v1 still remains, plus, every other reference to this attribute is correct.", "submit_date": "2020-05-11", "submitter_name": "Fran\u00e7ois Poirotte", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6170", "doc-id": "RFC7970", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.29.3.1", "orig_text": "   The attributes of the BulkObservable class are:\r\n\r\n   type\r\n      Optional.  ENUM.  The type of the observable listed in the child\r\n      ObservableList class.  These values are maintained in the\r\n      \"BulkObservable-type\" IANA registry per Section 10.2.\r\n\r\n      1.   asn.  Autonomous System Number (per the Address@category\r\n           attribute).\r\n\r\n      2.   atm.  Asynchronous Transfer Mode (ATM) address (per the\r\n           Address@category attribute).\r\n\r\n      3.   e-mail.  Email address (per the Address@category attribute).\r\n\r\n      4.   ipv4-addr.  IPv4 host address in dotted-decimal notation,\r\n           e.g., 192.0.2.1 (per the Address@category attribute).\r\n\r\n      5.   ipv4-net.  IPv4 network address in dotted-decimal notation,\r\n           slash, significant bits, e.g., 192.0.2.0/24 (per the\r\n           Address@category attribute).\r\n\r\n      6.   ipv4-net-mask.  IPv4 network address in dotted-decimal\r\n           notation, slash, network mask in dotted-decimal notation,\r\n           i.e., 192.0.2.0/255.255.255.0 (per the Address@category\r\n           attribute).\r\n\r\n      7.   ipv6-addr.  IPv6 host address, e.g., 2001:DB8::3 (per the\r\n           Address@category attribute).\r\n\r\n      8.   ipv6-net.  IPv6 network address, slash, significant bits,\r\n           e.g., 2001:DB8::/32 (per the Address@category attribute).\r\n\r\n      9.   ipv6-net-mask.  IPv6 network address, slash, network mask\r\n           (per the Address@category attribute).\r\n\r\n      10.  mac.  Media Access Control (MAC) address, i.e., a:b:c:d:e:f\r\n           (per the Address@category attribute).\r\n\r\n      11.  site-uri.  A URL or URI for a resource (per the\r\n           Address@category attribute).\r\n\r\n      12.  domain-name.  A fully qualified domain name or part of a name\r\n           (e.g., fqdn.example.com, example.com).\r\n\r\n      13.  domain-to-ipv4.  A mapping of FQDN to IPv4 address specified\r\n           as a comma-separated list (e.g., \"fqdn.example.com,\r\n           192.0.2.1\").\r\n\r\n      14.  domain-to-ipv6.  A mapping of FQDN to IPv6 address specified\r\n           as a comma-separated list (e.g., \"fqdn.example.com,\r\n           2001:DB8::3\").\r\n\r\n      15.  domain-to-ipv4-timestamp.  Same as domain-to-ipv4 but with a\r\n           timestamp (in the DATETIME format) of the resolution (e.g.,\r\n           \"fqdn.example.com, 192.0.2.1, 2015-06-11T00:38:31-06:00\").\r\n\r\n      16.  domain-to-ipv6-timestamp.  Same as domain-to-ipv6 but with a\r\n           timestamp (in the DATETIME format) of the resolution (e.g.,\r\n           \"fqdn.example.com, 2001:DB8::3, 2015-06-11T00:38:31-06:00\").\r\n\r\n      17.  ipv4-port.  An IPv4 address, port, and protocol tuple (e.g.,\r\n           192.0.2.1, 80, TCP).  The protocol name corresponds to the\r\n           \"Keyword\" column in the \"Assigned Internet Protocol Numbers\"\r\n           registry [IANA.Protocols].\r\n\r\n      18.  ipv6-port.  An IPv6 address, port, and protocol tuple (e.g.,\r\n           2001:DB8::3, 80, TCP).  The protocol name corresponds to the\r\n           \"Keyword\" column in the \"Assigned Internet Protocol Numbers\"\r\n           registry [IANA.Protocols].\r\n\r\n      19.  windows-reg-key.  A Microsoft Windows registry key.\r\n\r\n      20.  file-hash.  A file hash.  The format of this hash is\r\n           described in the Hash class that MUST be present in a sibling\r\n           BulkObservableFormat class.", "correct_text": "   The attributes of the BulkObservable class are:\r\n\r\n   type\r\n      Optional.  ENUM.  The type of the observable listed in the child\r\n      ObservableList class.  These values are maintained in the\r\n      \"BulkObservable-type\" IANA registry per Section 10.2.\r\n\r\n      1.   asn.  Autonomous System Number (per the Address@category\r\n           attribute).\r\n\r\n      2.   atm.  Asynchronous Transfer Mode (ATM) address (per the\r\n           Address@category attribute).\r\n\r\n      3.   e-mail.  Email address (per the Address@category attribute).\r\n\r\n      4.   ipv4-addr.  IPv4 host address in dotted-decimal notation,\r\n           e.g., 192.0.2.1 (per the Address@category attribute).\r\n\r\n      5.   ipv4-net.  IPv4 network address in dotted-decimal notation,\r\n           slash, significant bits, e.g., 192.0.2.0/24 (per the\r\n           Address@category attribute).\r\n\r\n      6.   ipv4-net-mask.  IPv4 network address in dotted-decimal\r\n           notation, slash, network mask in dotted-decimal notation,\r\n           i.e., 192.0.2.0/255.255.255.0 (per the Address@category\r\n           attribute).\r\n\r\n      7.   ipv6-addr.  IPv6 host address, e.g., 2001:DB8::3 (per the\r\n           Address@category attribute).\r\n\r\n      8.   ipv6-net.  IPv6 network address, slash, significant bits,\r\n           e.g., 2001:DB8::/32 (per the Address@category attribute).\r\n\r\n      9.   ipv6-net-mask.  IPv6 network address, slash, network mask\r\n           (per the Address@category attribute).\r\n\r\n      10.  mac.  Media Access Control (MAC) address, i.e., a:b:c:d:e:f\r\n           (per the Address@category attribute).\r\n\r\n      11.  site-uri.  A URL or URI for a resource (per the\r\n           Address@category attribute).\r\n\r\n      12.  domain-name.  A fully qualified domain name or part of a name\r\n           (e.g., fqdn.example.com, example.com).\r\n\r\n      13.  domain-to-ipv4.  A mapping of FQDN to IPv4 address specified\r\n           as a comma-separated list (e.g., \"fqdn.example.com,\r\n           192.0.2.1\").\r\n\r\n      14.  domain-to-ipv6.  A mapping of FQDN to IPv6 address specified\r\n           as a comma-separated list (e.g., \"fqdn.example.com,\r\n           2001:DB8::3\").\r\n\r\n      15.  domain-to-ipv4-timestamp.  Same as domain-to-ipv4 but with a\r\n           timestamp (in the DATETIME format) of the resolution (e.g.,\r\n           \"fqdn.example.com, 192.0.2.1, 2015-06-11T00:38:31-06:00\").\r\n\r\n      16.  domain-to-ipv6-timestamp.  Same as domain-to-ipv6 but with a\r\n           timestamp (in the DATETIME format) of the resolution (e.g.,\r\n           \"fqdn.example.com, 2001:DB8::3, 2015-06-11T00:38:31-06:00\").\r\n\r\n      17.  ipv4-port.  An IPv4 address, port, and protocol tuple (e.g.,\r\n           192.0.2.1, 80, TCP).  The protocol name corresponds to the\r\n           \"Keyword\" column in the \"Assigned Internet Protocol Numbers\"\r\n           registry [IANA.Protocols].\r\n\r\n      18.  ipv6-port.  An IPv6 address, port, and protocol tuple (e.g.,\r\n           2001:DB8::3, 80, TCP).  The protocol name corresponds to the\r\n           \"Keyword\" column in the \"Assigned Internet Protocol Numbers\"\r\n           registry [IANA.Protocols].\r\n\r\n      19.  windows-reg-key.  A Microsoft Windows registry key.\r\n\r\n      20.  file-hash.  A file hash.  The format of this hash is\r\n           described in the Hash class that MUST be present in the child\r\n           BulkObservableFormat class.", "notes": "The description for the \"file-hash\" type implies that the BulkObservableFormat class (3.29.3.1.1) is a sibling of the BulkObservable class (section 3.29.3.1).\r\n\r\nThis is simply not the case:\r\n* BulkObservable only appears as an aggregate class of Observable (3.29.3)\r\n* BulkObservableFormat is not one of Observable's aggregate classes\r\n\r\nSince the BulkObservable class actually has an aggregate class named BulkObservableFormat, the intent was probably to just use that child class to define the hash's format.", "submit_date": "2020-05-11", "submitter_name": "Fran\u00e7ois Poirotte", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6171", "doc-id": "RFC6733", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.3", "orig_text": "A relay or proxy agent MUST check for forwarding loops when receiving\r\nrequests.  A loop is detected if the server finds its own identity in\r\na Route-Record AVP.  When such an event occurs, the agent MUST answer\r\nwith the Result-Code AVP set to DIAMETER_LOOP_DETECTED.", "correct_text": "A relay or proxy agent MUST check for forwarding loops when receiving\r\nrequests. A loop is detected if a relay or proxy agent finds its own\r\nidentity in a Route-Record AVP.  When such an event occurs, the agent\r\nMUST answer with the Result-Code AVP set to DIAMETER_LOOP_DETECTED.", "notes": "The term \"server\" used to identify party which is to detect its own identity as a part of Route-Record AVP is semantically too close to the term Diameter Server. If \"relay or proxy agent MUST check\", the question is what would be the consequence of such action if  the (Diameter) \"server\" is to do the \"detecting\"?\r\n\r\n== Verifier note\r\n\r\nThis section is about relays/proxy agents checks to detect loops. See also Rob's comment at https://mailarchive.ietf.org/arch/msg/dime/4GVvCGAcMOtfRLuPe3amF2xX2E8/\r\n\r\n", "submit_date": "2020-05-13", "submitter_name": "Valentin Micic", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-28 17:57:18"}, {"errata_id": "6173", "doc-id": "RFC5234", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "The operator \"*\" preceding an element indicates repetition. The full form is:\r\n\r\n <a>*<b>element\r\n\r\nwhere <a> and <b> are optional decimal values, indicating at least <a> and at most <b> occurrences of the element.\r\n\r\nDefault values are 0 and infinity so that *<element> allows any number, including zero; 1*<element> requires at least one; 3*3<element> allows exactly 3; and 1*2<element> allows one or two.", "correct_text": "The operator \"*\" preceding an element indicates repetition. The full form is:\r\n\r\n <a>*<b>element\r\n\r\nwhere <a> and <b> are optional decimal values, indicating at least <a> and at most <b> occurrences of the element.\r\n\r\nThe default value of <a> is 0. If <b> is omitted, there is no upper limit to the number of occurrences of the element. Consequently *<element> allows any number, including zero; 1*<element> requires at least one; 3*3<element> allows exactly 3; and 1*2<element> allows one or two.", "notes": "infinity is not a decimal value", "submit_date": "2020-05-14", "submitter_name": "Glyn Normington", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-05-14 13:05:17"}, {"errata_id": "6174", "doc-id": "RFC6594", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Status", "orig_text": "   This document is a product of the Internet Engineering Task Force\r\n   (IETF).  It represents the consensus of the IETF community.  It has\r\n   received public review and has been approved for publication by the\r\n   fInternet Engineering Steering Group (IESG).  Further information on\r\n   Internet Standards is available in Section 2 of RFC 5741.\r\n", "correct_text": "   This document is a product of the Internet Engineering Task Force\r\n   (IETF).  It represents the consensus of the IETF community.  It has\r\n   received public review and has been approved for publication by the\r\n   Internet Engineering Steering Group (IESG).  Further information on\r\n   Internet Standards is available in Section 2 of RFC 5741.\r\n", "notes": "s/fInternet/Internet/\r\n\r\n", "submit_date": "2020-05-15", "submitter_name": "HARUYAMA Seigo", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-05-15 17:13:21"}, {"errata_id": "6175", "doc-id": "RFC2392", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "However, in many systems that store messages,\r\nbody parts are not indexed independently\r\ntheir context (message).", "correct_text": "However, in many systems that store messages,\r\nbody parts are not indexed independently of\r\ntheir context (message).", "notes": "The word \"of\" is missing after \"independently\" in \"independently their context\".", "submit_date": "2020-05-16", "submitter_name": "Michael Witten (mfwitten)", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-05-16 16:59:05"}, {"errata_id": "6177", "doc-id": "RFC7970", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.26", "orig_text": "3.26.  HashData Class\r\n\r\n   The HashData class describes different types of hashes on a given\r\n   object (e.g., file, part of a file, email).\r\n\r\n   +--------------------------+\r\n   | HashData                 |\r\n   +--------------------------+\r\n   | ENUM scope               |<>--{0..1}--[ HashTargetID ]\r\n   |                          |<>--{0..*}--[ Hash         ]\r\n   |                          |<>--{0..*}--[ FuzzyHash    ]\r\n   +--------------------------+\r\n\r\n                       Figure 54: The HashData Class", "correct_text": "3.26.  HashData Class\r\n\r\n   The HashData class describes different types of hashes on a given\r\n   object (e.g., file, part of a file, email).\r\n\r\n   +--------------------------+\r\n   | HashData                 |\r\n   +--------------------------+\r\n   | ENUM scope               |<>--{0..1}--[ HashTargetID ]\r\n   | STRING ext-scope         |<>--{0..*}--[ Hash         ]\r\n   |                          |<>--{0..*}--[ FuzzyHash    ]\r\n   +--------------------------+\r\n\r\n                       Figure 54: The HashData Class", "notes": "Both the main body inside section 3.26 & the XML schema in section 8 mention \"ext-scope\" as a valid attribute of the HashData class, but the attribute was missing from the UML diagram in section 3.26.\r\n\r\n(The attribute is necessary so that the \"scope\" attribute of HashData can be extended using the principles edicted in section 5.1.1)", "submit_date": "2020-05-17", "submitter_name": "Fran\u00e7ois Poirotte", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6178", "doc-id": "RFC7807", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   The ability to convey problem-specific extensions allows more than\r\n   one problem to be conveyed.  For example:\r\n\r\n   HTTP/1.1 400 Bad Request\r\n   Content-Type: application/problem+json\r\n   Content-Language: en\r\n\r\n   {\r\n   \"type\": \"https://example.net/validation-error\",\r\n   \"title\": \"Your request parameters didn't validate.\",\r\n   \"invalid-params\": [ {\r\n                         \"name\": \"age\",\r\n                         \"reason\": \"must be a positive integer\"\r\n                       },\r\n                       {\r\n                         \"name\": \"color\",\r\n                         \"reason\": \"must be 'green', 'red' or 'blue'\"}\r\n                     ]\r\n   }\r\n", "correct_text": "   The ability to convey problem-specific extensions allows more than\r\n   one problem to be conveyed.  For example:\r\n\r\n   HTTP/1.1 400 Bad Request\r\n   Content-Type: application/problem+json\r\n   Content-Language: en\r\n\r\n   {\r\n   \"type\": \"https://example.net/validation-error\",\r\n   \"title\": \"Your request parameters didn't validate.\",\r\n   \"invalid_params\": [ {\r\n                         \"name\": \"age\",\r\n                         \"reason\": \"must be a positive integer\"\r\n                       },\r\n                       {\r\n                         \"name\": \"color\",\r\n                         \"reason\": \"must be 'green', 'red' or 'blue'\"}\r\n                     ]\r\n   }\r\n", "notes": "The \"invalid-params\" member in the example is named incorrectly. According to Section 4, it should contain an \"_\" rather than a \"-\" in its name:\r\n\r\n>   If such additional members are defined, their names SHOULD start with\r\n>   a letter (ALPHA, as per [RFC5234], Appendix B.1) and SHOULD consist\r\n>   of characters from ALPHA, DIGIT ([RFC5234], Appendix B.1), and \"_\"\r\n>   (so that it can be serialized in formats other than JSON), and they\r\n>   SHOULD be three characters or longer.", "submit_date": "2020-05-18", "submitter_name": "Gary Peck", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-05-19 02:34:57"}, {"errata_id": "6179", "doc-id": "RFC7636", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.3", "orig_text": "7.3.  Salting the code_challenge\r\n\r\n   To reduce implementation complexity, salting is not used in the\r\n   production of the code challenge, as the code verifier contains\r\n   sufficient entropy to prevent brute-force attacks.  Concatenating a\r\n   publicly known value to a code verifier (containing 256 bits of\r\n   entropy) and then hashing it with SHA256 to produce a code challenge\r\n   would not increase the number of attempts necessary to brute force a\r\n   valid value for code verifier.\r\n\r\n   While the \"S256\" transformation is like hashing a password, there are\r\n   important differences.  Passwords tend to be relatively low-entropy\r\n   words that can be hashed offline and the hash looked up in a\r\n   dictionary.  By concatenating a unique though public value to each\r\n   password prior to hashing, the dictionary space that an attacker\r\n   needs to search is greatly expanded.\r\n\r\n   Modern graphics processors now allow attackers to calculate hashes in\r\n   real time faster than they could be looked up from a disk.  This\r\n   eliminates the value of the salt in increasing the complexity of a\r\n   brute-force attack for even low-entropy passwords.", "correct_text": "", "notes": "The section misrepresents the information about \"salting\" and the whole idea \r\nof \"salting\" is not applicable to a standalone hash.  I suggest to drop the entire\r\nsection as irrelevant to the rest of the standard.\r\n\r\nFor some reason the section implies that \"salting\" is protecting and increasing\r\nentropy of a single hash, which is not what \"salting\" is about and is not the\r\nreason for the technique.  The section is also making a speculative assumptions\r\nabout the low-entropy tendency in password hashes and makes an incorrect\r\nconclusion on the benefits of \"salting\" for a password hash.\r\n\r\nOne could argue that the entropy and the complexity required to bruteforce a hash\r\nand a salted hash for the same password (where the same hashing algorithm is\r\napplied) are approximately the same in most cases (or just slightly more\r\ncomplex for the salted version if the producer of the hash used a non-standard\r\nroutine in relation of mixing in the salt, e.g. instead of appending the salt\r\nit inserts in in the middle of the password to be hashed).  In any case, that\r\npublic data is already known to the attacker and it is just a matter of the\r\nconfiguration for the bruteforcing tool (such as JohnTheRipper) to incorporate\r\nthe knowledge.\r\n\r\nJust as an illustration: consider an example password ('abc'), an example salt\r\n('123'), and that the hash is generated using a concatinated version of these\r\ntwo (e.g. HASH('abc123')).  Since the salt is included with the hash in plain\r\ntext, the bruteforcer would just need to set their tool up with the \"^.*123$\"\r\npattern making the salt essentially a string terminator which is not affecting\r\nthe bruteforce effort in any way).\r\n\r\nMore and more people I meet are confused about the problem area the \"salting\"\r\ntechnique was invented to address: it is to increase the entropy of a set of\r\npasswords, so the same password would not result in the same hash value, with\r\nthe primary goal is to prevent attackers to be able to re-use pre-calculated\r\nhashes (e.g. rainbow hash tables) or, in the early stages of the attack, to\r\nmake it impossible to quickly assess what hashes the attacker should focus on\r\n(e.g.  when you have 1000 hashes and without salts you can easily spot that\r\nsome hashes are the same, which means breaking these one would gain much more\r\nin comparison to unique hashes in the same set).\r\n\r\nThis being said, I am suggesting to drop section 7.3 completely as irrelevant, \r\nsince what we currently have is very confusing and seeds unnecessary and\r\nwrong ideas that \"salting\" can improve the security of a single hash by itself.", "submit_date": "2020-05-18", "submitter_name": "Dmitry Khlebnikov", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6305", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.9 Page 67", "orig_text": "      fourth check the SYN bit\r\n\r\n        This step should be reached only if the ACK is ok, or there is\r\n        no ACK, and it the segment did not contain a RST.\r\n", "correct_text": "      fourth check the SYN bit\r\n\r\n        This step should be reached only if the ACK is ok, or there is\r\n        no ACK, and the segment did not contain a RST.\r\n", "notes": "In the last sentence, the 'it' in 'and it the segment' is redundant.", "submit_date": "2020-10-12", "submitter_name": "Shuo Chen", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-10-12 21:24:42"}, {"errata_id": "7272", "doc-id": "RFC9171", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.5.1.1", "orig_text": "dtn-hier-part = \"//\" node-name name-delim demux ; a path-rootless\r\n\r\nnode-name = reg-name\r\n\r\ndemux = *VCHAR\r\n", "correct_text": "dtn-hier-part = \"//\" node-name name-delim demux [ \"?\" query ]\r\n\r\nnode-name = reg-name\r\n\r\ndemux = path-rootless / path-empty\r\n", "notes": "The demux portion of an EID should match only URI path segments and not match query or fragment URI parts. A fragment part should not actually be sent as encoded EID to be consistent with other URI uses (e.g. HTTP). The administrative endpoint is the allowed empty demux path.\r\n\r\n--- see also ---\r\n\r\n* https://mailarchive.ietf.org/arch/msg/dtn/7cdgvvfv7Tg3ivLwCW-UFjgvWsc/", "submit_date": "2022-12-12", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-13 00:08:34"}, {"errata_id": "6272", "doc-id": "RFC5952", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "The line\r\n\r\n> The use of the symbol \"::\" MUST be used to its maximum capability.\r\n\r\n\u2026 contradicts the next section, which states that single-0 fields are not reduced.\r\n\r\ni.e., this:\r\n\r\n> 2001:db8:0:1:1:1:1:1\r\n\r\n\u2026 is longer than:\r\n\r\n> 2001:db8::1:1:1:1:1\r\n\r\nThus, the standard does not, in all cases, require that \"::\" be used to its maximum capability.", "correct_text": "The first line of 4.2.1 should be amended to be consistent with section 4.2.2\r\n\r\n> The use of the symbol \"::\" MUST be used to its maximum capability to reduce consecutive 16-bit 0 fields.", "notes": "--- ek@ ---\r\n\r\nIt's possible that swapping 4.2.2 and 4.2.1 would put the recommendations in an order where an exception doesn't follow the general rule and as such might be more orderly for some readers.  Nevertheless, the intent remains clear.", "submit_date": "2020-09-02", "submitter_name": "Felipe Gasper", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-09-04 06:06:07"}, {"errata_id": "6273", "doc-id": "RFC3931", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "See Section 5.4.3 for details on calculation of the Message Digest and construction of the Control Message Authentication Nonce and Message Digest AVPs.", "correct_text": "See Section 5.4.1 for details on calculation of the Message Digest and construction of the Control Message Authentication Nonce and Message Digest AVPs.", "notes": "The explanation of the (HMAC etc.) details is given in 5.4.1, not 5.4.3.\r\n\r\n--- Reviewer / AD note ---\r\nWhile the errata is correct, it does not impact implementation and is not really confusing so the status of 'verified' for IETF steam is not the right state.", "submit_date": "2020-09-02", "submitter_name": "Casper van Eersel", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2020-09-03 07:17:28"}, {"errata_id": "6181", "doc-id": "RFC4226", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "E.4", "orig_text": "   The server accepts if the following are all true, where C-server is\r\n   its own current counter value:\r\n\r\n   1) C-client >= C-server\r\n   2) C-client - C-server <= s\r\n   3) Check that HOTP client is valid HOTP(K,C-Client)\r\n   4) If true, the server sets C to C-client + 1 and client is\r\n      authenticated\r\n\r\n   In this case, there is no need for managing a look-ahead window\r\n   anymore.  The probability of success of the adversary is only v/10^6\r\n   or roughly v in one million.  A side benefit is obviously to be able\r\n   to increase s \"infinitely\" and therefore improve the system usability\r\n   without impacting the security.", "correct_text": "   The server accepts if the following are all true, where C-server is\r\n   its own current counter value:\r\n\r\n   1) C-client >= C-server\r\n   2) Check that HOTP client is valid HOTP(K,C-Client)\r\n   3) If true, the server sets C to C-client + 1 and client is\r\n      authenticated\r\n\r\n   In this case, there is no need for managing a look-ahead window\r\n   anymore.  The probability of success of the adversary is only v/10^6\r\n   or roughly v in one million.  A side benefit is obviously to be able\r\n   to increase C-server \"infinitely\" and therefore improve the system usability\r\n   without impacting the security.", "notes": "1. Resynchronization should be allowed when C-client - C-server > s.\r\n2. The look-ahead window s should not be increased.\n --VERIFIER NOTES-- \nThe proposed new text provides behavior equivalent to the behavior allowed by the old text with respect to the possibility of resynchronization in the face of large C-client/C-server skew.", "submit_date": "2020-05-18", "submitter_name": "Yishuai Li", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-05-30 21:52:46"}, {"errata_id": "6182", "doc-id": "RFC8110", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   +----------+--------+-------------------+-------------+-------------+\r\n   |   OUI    | Suite  |   Authentication  |     Key     |     Key     |\r\n   |          |  Type  |        Type       |  Management |  derivation |\r\n   |          |        |                   |     Type    |     type    |\r\n   +----------+--------+-------------------+-------------+-------------+\r\n   | 00-0F-AC |   18   |   Opportunistic   |     This    |  [RFC5869]  |\r\n   |          |        |      Wireless     |   document  |             |\r\n   |          |        |     Encryption    |             |             |\r\n   +----------+--------+-------------------+-------------+-------------+\r\n\r\n                             Table 1: OWE AKM\r\n", "correct_text": "   +----------+-------+------------------+-------------+---------------+\r\n   |   OUI    | Suite |  Authentication  |     Key     |      Key      |\r\n   |          |  Type |       Type       |  Management |   derivation  |\r\n   |          |       |                  |     Type    |      type     |\r\n   +----------+-------+------------------+-------------+---------------+\r\n   | 00-0F-AC |   18  |  Opportunistic   |     This    | [IEEE802.11], |\r\n   |          |       |     Wireless     |   document  | 12.7.1.7.2    |\r\n   |          |       |    Encryption    |             |               |\r\n   +----------+-------+------------------+-------------+---------------+\r\n\r\n                             Table 1: OWE AKM\r\n", "notes": "The combination of IEEE Std 802.11-2016 and IETF RFC 8110 leaves it\r\nsomewhat vague how the PTK is to be derived from the PMK when using OWE.\r\n\r\nIEEE 802.11 performs PTK derivation as part of the 4-way handshake using\r\na KDF with following parameters: KDF-Hash-Length(K, Label, Context).\r\n\r\nRFC 5869 defines HKDF with HKDF-Extract(salt, IKM) -> PRK,\r\nHKDF-Expand(PRK, info, L) -> OKM. It is not clear what would be \"salt\"\r\nand \"info\" for these functions without mapping from the IEEE 802.11\r\nterms (e.g., those \"Label\" and \"Context\"). Such mapping is missing from\r\nRFC 8110.\r\n\r\nEither the additional needed details for PTK derivation would need to be\r\nprovided for the OWE AKM or the IEEE 802.11 KDF would need to be used\r\ninstead of HKDF for the PTK derivation part (while other key derivations\r\nfor OWE could continue to use HKDF since they are fully defined in the\r\nRFC).\r\n\r\nSince there are already deployed OWE implementations that use the IEEE\r\n802.11 KDF for this, this errata entry is suggesting a change to address\r\nthe alternative that matches such implementations.", "submit_date": "2020-05-19", "submitter_name": "Jouni Malinen", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6183", "doc-id": "RFC8415", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "18.3.8", "orig_text": "   After all the addresses have been processed, the server generates a\r\n   Reply message by setting the \"msg-type\" field to REPLY and copying\r\n   the transaction ID from the Decline message into the \"transaction-id\"\r\n   field.  The client includes a Status Code option (see Section 21.13)\r\n   with the value Success, a Server Identifier option (see Section 21.3)\r\n   with the server's DUID, and a Client Identifier option (see\r\n   Section 21.2) with the client's DUID", "correct_text": "   After all the addresses have been processed, the server generates a\r\n   Reply message by setting the \"msg-type\" field to REPLY and copying\r\n   the transaction ID from the Decline message into the \"transaction-id\"\r\n   field.  The server includes a Status Code option (see Section 21.13)\r\n   with the value Success, a Server Identifier option (see Section 21.3)\r\n   with the server's DUID, and a Client Identifier option (see\r\n   Section 21.2) with the client's DUID", "notes": "The corrected text replaces \"client\" with \"server\".\r\n\r\nI would like to thank Timothy Winters <tim@qacafe.com> for confirming that this is a bug in the specification.", "submit_date": "2020-05-19", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2020-05-21 14:23:29"}, {"errata_id": "6184", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "The fragmentation strategy is designed so than an unfragmented datagram\r\nhas all zero fragmentation information", "correct_text": "The fragmentation strategy is designed so that an unfragmented datagram\r\nhas all zero fragmentation information", "notes": "typo: so than => so that", "submit_date": "2020-05-21", "submitter_name": "Ye Shu", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2024-12-04 16:56:23"}, {"errata_id": "6187", "doc-id": "RFC7800", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   [JWK]      Jones, M., \"JSON Web Key (JWK)\", RFC 7517,\r\n              DOI 10.17487/RFC7157, May 2015,\r\n              <http://www.rfc-editor.org/info/rfc7517>.\r\n", "correct_text": "   [JWK]      Jones, M., \"JSON Web Key (JWK)\", RFC 7517,\r\n              DOI 10.17487/RFC7517, May 2015,\r\n              <http://www.rfc-editor.org/info/rfc7517>.\r\n", "notes": "DOI has a typo: 7157 instead of 7517.", "submit_date": "2020-05-26", "submitter_name": "Pete Resnick", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-05-31 01:34:03"}, {"errata_id": "6274", "doc-id": "RFC3931", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "The integrity check is calculated as in Section 5.4.3, with an empty zero-length shared secret, local nonce, and remote nonce.", "correct_text": "The integrity check is calculated as in Section 5.4.1, with an empty zero-length shared secret, local nonce, and remote nonce.", "notes": "The calculation is covered in section 5.4.1.\r\n\r\n--- Review AD note ---\r\nWhile the errata is correct, it does not impact implementation and is not really confusing so the status of 'verified' for IETF steam is not the right state.", "submit_date": "2020-09-02", "submitter_name": "Casper van Eersel", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2020-09-03 07:16:27"}, {"errata_id": "6275", "doc-id": "RFC3931", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.5", "orig_text": "See Section 4.2 for a description of the keepalive mechanism.", "correct_text": "See Section 4.4 for a description of the keepalive mechanism.", "notes": "Incorrect reference to section 4.2.\r\n\r\n--- Reviewer / AD note ---\r\nWhile the errata is correct, it does not impact implementation and is not really confusing so the status of 'verified' for IETF steam is not the right state.", "submit_date": "2020-09-02", "submitter_name": "Casper van Eersel", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2020-09-03 07:17:08"}, {"errata_id": "6188", "doc-id": "RFC8702", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "When calculating the KMAC output, the variable N is 0xD2B282C2, S is\r\nan empty string, and L (the integer representing the requested output\r\nlength in bits) is 256 or 512 for KmacWithSHAKE128 or\r\nKmacWithSHAKE256, respectively, in this specification.", "correct_text": "When calculating the KMAC output, the variable N is \u201cKMAC\u201d as defined \r\nin NIST SP800-185, S is an empty string, and L (the integer \r\nrepresenting the requested output length in bits) is 256 or 512 for \r\nKmacWithSHAKE128 or KmacWithSHAKE256, respectively, in this \r\nspecification.", "notes": "The originally described 0xD2B282C2 is the hex value of the binary representation (LSB first) of the string \"KMAC\" as defined in SP800-185. As it was pointed out to us, that representation was confusing and incorrect because NIST's KAT values include \"KMAC\" in hex format. Showing \"KMAC\" in binary (LSB first) is different than showing it in hex (MSB first). So, it is more accurate to keep the text generic as \"KMAC\" and point implementers to SP800-185.", "submit_date": "2020-05-26", "submitter_name": "Panos Kampanakis", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:42:08"}, {"errata_id": "6194", "doc-id": "RFC4944", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "However, in the\r\n   resultant interface identifier, the \"Universal/Local\" (U/L) bit SHALL\r\n   be set to zero in keeping with the fact that this is not a globally\r\n   unique value.", "correct_text": "However, in the\r\n   resultant interface identifier, the \"Universal/Local\" (U/L) bit SHALL\r\n   be set to one in keeping with the fact that this is not a globally\r\n   unique value.", "notes": "IEEE (see https://standards.ieee.org/content/dam/ieee-standards/standards/web/documents/tutorials/eui.pdf) states that:\r\n\"the second least significant bit of Octet 0 (the U/L bit) indicates universal (U/L=0) or local (U/L=1) administration of the address.\"\r\n\r\nThus, the U/L bit in the \"pseudo 48-bit address\" shall have its U/L bit set to one, not to zero.", "submit_date": "2020-05-30", "submitter_name": "Tommaso Pecorella", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 08:05:37"}, {"errata_id": "6193", "doc-id": "RFC1321", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.4", "orig_text": "  printf\r\n (\"Speed = %ld bytes/second\\n\",\r\n  (long)TEST_BLOCK_LEN * (long)TEST_BLOCK_COUNT/(endTime-startTime));", "correct_text": " if(endTime-startTime)\r\n printf\r\n (\"Speed = %ld bytes/second\\n\",\r\n  (long)TEST_BLOCK_LEN * (long)TEST_BLOCK_COUNT/(endTime-startTime));", "notes": "The result of endTime-startTime may be zero. The result is a division by zero. This check prevents this.\r\n\r\nAD Note: Technically endTime-startTime is not a bool, so a better fix would be:\r\n                if ((endTime-startTime) !=0)", "submit_date": "2020-05-29", "submitter_name": "User", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-12 19:32:39"}, {"errata_id": "6306", "doc-id": "RFC8032", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.7", "orig_text": "       Decode the first half as a\r\n       point R, and the second half as an integer S, in the range\r\n       0 <= s < L.  Decode the public key A as point A'.  If any of the\r\n       decodings fail (including S being out of range), the signature is\r\n       invalid.\r\n\r\n   2.  Compute SHA512(dom2(F, C) || R || A || PH(M)), and interpret the\r\n       64-octet digest as a little-endian integer k.\r\n\r\n   3.  Check the group equation [8][S]B = [8]R + [8][k]A'.  It's\r\n       sufficient, but not required, to instead check [S]B = R + [k]A'.", "correct_text": "       Decode the first half R as a\r\n       point R', and the second half as an integer S, in the range\r\n       0 <= S < L.  Decode the public key A as point A'.  If any of the\r\n       decodings fail (including S being out of range), the signature is\r\n       invalid.\r\n\r\n   2.  Compute SHA512(dom2(F, C) || R || A || PH(M)), and interpret the\r\n       64-octet digest as a little-endian integer k.\r\n\r\n   3.  Check the group equation [8][S]B = [8]R' + [8][k]A'.  It's\r\n       sufficient, but not required, to instead check [S]B = R' + [k]A'.", "notes": "1)  public key R' and its encoding R are confused\r\n2)  s changed to S (this errata has been reported already)\r\n\r\n\r\nHeld for Document Update: Errata 6306 suggests clarifying variable names in Section 5.1.7's decoding components to reduce ambiguity in signature verification processes. The adjustments are editorial but help improve implementation clarity, particularly for complex protocols that rely on accurate component identification. Suitable for future document updates. - CFRG co-chair", "submit_date": "2020-10-15", "submitter_name": "Dmitry Khovratovich", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:40:30"}, {"errata_id": "6197", "doc-id": "RFC7836", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "When a point on an elliptic curve is given to an input of a hash\r\nfunction, affine coordinates for short Weierstrass form are used (see\r\nSection 5): an x coordinate value is fed first, a y coordinate value\r\nis fed second, both in little-endian format.", "correct_text": "When a point on an elliptic curve is given to an input of a hash\r\nfunction, affine coordinates for short Weierstrass form are used (see\r\nSection 5): an x coordinate value is fed first, a y coordinate value\r\nis fed second, both in little-endian format. If the point to be fed\r\nto the hash function is zero point, the calculation MUST NOT be performed\r\nand an error SHOULD be reported on a protocol level.", "notes": "A new sentence added at the end of the paragraph explicitly defines the processing in case when the zero point is fed to the hash function.", "submit_date": "2020-06-03", "submitter_name": "Billy Brumley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-07-01 10:41:39"}, {"errata_id": "6198", "doc-id": "RFC7836", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "KEK_VKO (x, y, UKM) is calculated using the formulas:\r\n\r\n\u00a0\u00a0\u00a0 KEK_VKO (x, y, UKM) = H_256 (K (x, y, UKM)),\r\n\r\n\u00a0\u00a0\u00a0 K (x, y, UKM) = (m/q*UKM*x mod q)*(y*P),", "correct_text": "KEK_VKO (x, y, UKM) is calculated using the formulas:\r\n\r\n\u00a0\u00a0\u00a0 KEK_VKO (x, y, UKM) = H_256 (K (x, y, UKM)),\r\n\r\n\u00a0\u00a0\u00a0 K (x, y, UKM) = (m/q*(UKM*x mod q))*(y*P),", "notes": "For now the original text may be interpreted in the wrong way that both multiplications inside the brackets should be performed modulo q. However, multiplication by m/q must be a simple integer multiplication, without reduction modulo q, to eliminate small subgroup component of the input elliptic curve point. The proposed text modification clarifies the correct types and order of multiplication.", "submit_date": "2020-06-03", "submitter_name": "Billy Brumley", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-07-01 10:43:24"}, {"errata_id": "7273", "doc-id": "RFC8713", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.7.3", "orig_text": "The IETF LLC Director candidate is reviewed as specified in [RFC8711].", "correct_text": "The IETF LLC Director candidate is reviewed as specified in\r\nSection 6.1 of [RFC8711].", "notes": "The two documents often use different terms for the same thing. Having an explicit section reference will save the reader time.", "submit_date": "2022-12-14", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:18:40"}, {"errata_id": "6205", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.3.2", "orig_text": "   Servers which are authenticating with a PSK MUST NOT send the\r\n   CertificateRequest message in the main handshake, though they MAY\r\n   send it in post-handshake authentication (see Section 4.6.2) provided\r\n   that the client has sent the \"post_handshake_auth\" extension (see\r\n   Section 4.2.6).", "correct_text": "   Servers which are authenticating with a resumption PSK MUST NOT send the\r\n   CertificateRequest message in the main handshake, though they MAY\r\n   send it in post-handshake authentication (see Section 4.6.2) provided\r\n   that the client has sent the \"post_handshake_auth\" extension (see\r\n   Section 4.2.6).  Servers which are authenticating with an external PSK\r\n   MUST NOT send the CertificateRequest message either in the main handshake\r\n   or request post-handshake authentication. Future specifications MAY\r\n   provide an extension to permit this. ", "notes": "The lack of qualification on \"authenticating with a PSK\" implies that the statement applies equally to both external and resumption PSKs.  However, there are two conditions being governed: whether a certificate can be requested during the handshake, and whether a certificate can be requested post-handshake.  The latter of these requires different rules depending on the type of PSK.\r\n\r\nWe know from the analysis of resumption (see https://mailarchive.ietf.org/arch/msg/tls/TugB5ddJu3nYg7chcyeIyUqWSbA/) that combining a PSK handshake of either type with a client certificate is not safe.  Thus, the prohibition on CertificateRequest during the handshake applies equally to both resumption and external PSKs.\r\n\r\nFor post-handshake, Appendix E.1 already discusses the risks of combining PSKs with certificates, citing the same analysis as above.\r\n\r\n   [...]  It is unsafe to use certificate-based client\r\n   authentication when the client might potentially share the same\r\n   PSK/key-id pair with two different endpoints.\r\n\r\nFor this reason an external PSK is not safe to use with post-handshake authentication.  A resumption PSK does not have this property, so the same prohibition doesn't apply.\r\n\r\nSplitting the requirements as proposed makes this split clearer.", "submit_date": "2020-06-04", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 00:59:14"}, {"errata_id": "6206", "doc-id": "RFC2549", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Multicasting is supported, but requires the implementation of a clone\r\ndevice.  Carriers may be lost if they are based on a tree as it is\r\nbeing pruned.  The carriers propagate via an inheritance tree.  The\r\ncarriers have an average TTL of 15 years, so their use in expanding\r\nring searches is limited.\r\n\r\nAdditional quality of service discussion can be found in a Michelin's\r\nguide.", "correct_text": "Multicasting is supported, but requires the implementation of a clone\r\ndevice.  Carriers may be lost if they are based on a tree as it is\r\nbeing pruned.  The carriers propagate via an inheritance tree.  The\r\ncarriers have an average TTL of 15 years, so their use in expanding\r\nring searches is limited.\r\n\r\nNOTE: Geese are for UDP only, as they are indifferent to any query,\r\nregardless of target. Expect all Geese allocated traffic to be one\r\nway only.\r\n\r\nAdditional quality of service discussion can be found in a Michelin's\r\nguide.", "notes": "Geese have not been thoroughly considered for their jerk-ishness and need to be included in the documentation as a warning to anyone considering utilization of aviary modes of data transportation.", "submit_date": "2020-06-07", "submitter_name": "Derek McCullough", "verifier_id": "", "verifier_name": null, "update_date": "2020-07-01 16:47:47"}, {"errata_id": "6207", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.5.5.1", "orig_text": "/*\r\n         * Find the largest contiguous intersection of correctness\r\n         * intervals.  Allow is the number of allowed falsetickers;\r\n         * found is the number of midpoints.  Note that the edge values\r\n         * are limited to the range +-(2 ^ 30) < +-2e9 by the timestamp\r\n         * calculations.\r\n         */\r\n        low = 2e9; high = -2e9;\r\n        for (allow = 0; 2 * allow < n; allow++) {\r\n\r\n                /*\r\n                 * Scan the chime list from lowest to highest to find\r\n                 * the lower endpoint.\r\n                 */\r\n                found = 0;\r\n                chime = 0;\r\n                for (i = 0; i < n; i++) {\r\n                        chime -= s.m[i].type;\r\n                        if (chime >= n - found) {\r\n                                low = s.m[i].edge;\r\n                                break;\r\n                        }\r\n                        if (s.m[i].type == 0)\r\n                                found++;\r\n                }\r\n\r\n                /*\r\n                 * Scan the chime list from highest to lowest to find\r\n                 * the upper endpoint.\r\n                 */\r\n                chime = 0;\r\n                for (i = n - 1; i >= 0; i--) {\r\n                        chime += s.m[i].type;\r\n                        if (chime >= n - found) {\r\n                                high = s.m[i].edge;\r\n                                break;\r\n                        }\r\n                        if (s.m[i].type == 0)\r\n                                found++;\r\n                }\r\n\r\n\r\n\r\n\r\nMills, et al.                Standards Track                   [Page 91]\r\n \r\nRFC 5905                   NTPv4 Specification                 June 2010\r\n\r\n\r\n                /*\r\n                 * If the number of midpoints is greater than the number\r\n                 * of allowed falsetickers, the intersection contains at\r\n                 * least one truechimer with no midpoint.  If so,\r\n                 * increment the number of allowed falsetickers and go\r\n                 * around again.  If not and the intersection is\r\n                 * non-empty, declare success.\r\n                 */\r\n                if (found > allow)\r\n                        continue;\r\n\r\n                if (high > low)\r\n                        break;\r\n        }", "correct_text": "/*\r\n         * Find the largest contiguous intersection of correctness\r\n         * intervals.  Allow is the number of allowed falsetickers;\r\n         * found is the number of midpoints.  Note that the edge values\r\n         * are limited to the range +-(2 ^ 30) < +-2e9 by the timestamp\r\n         * calculations.\r\n         */\r\n        low = 2e9; high = -2e9;\r\n        for (allow = 0; 2 * allow < n; allow++) {\r\n\r\n                /*\r\n                 * Scan the chime list from lowest to highest to find\r\n                 * the lower endpoint.\r\n                 */\r\n                found = 0;\r\n                chime = 0;\r\n                for (i = 0; i < n; i++) {\r\n                        chime -= s.m[i].type;\r\n                        if (chime >= n - allow) {\r\n                                low = s.m[i].edge;\r\n                                break;\r\n                        }\r\n                        if (s.m[i].type == 0)\r\n                                found++;\r\n                }\r\n\r\n                /*\r\n                 * Scan the chime list from highest to lowest to find\r\n                 * the upper endpoint.\r\n                 */\r\n                chime = 0;\r\n                for (i = n - 1; i >= 0; i--) {\r\n                        chime += s.m[i].type;\r\n                        if (chime >= n - allow) {\r\n                                high = s.m[i].edge;\r\n                                break;\r\n                        }\r\n                        if (s.m[i].type == 0)\r\n                                found++;\r\n                }\r\n\r\n\r\n\r\n\r\nMills, et al.                Standards Track                   [Page 91]\r\n \r\nRFC 5905                   NTPv4 Specification                 June 2010\r\n\r\n\r\n                /*\r\n                 * If the number of midpoints is greater than the number\r\n                 * of allowed falsetickers, the intersection contains at\r\n                 * least one truechimer with no midpoint.  If so,\r\n                 * increment the number of allowed falsetickers and go\r\n                 * around again.  If not and the intersection is\r\n                 * non-empty, declare success.\r\n                 */\r\n                if (found > allow)\r\n                        continue;\r\n\r\n                if (high > low)\r\n                        break;\r\n        }", "notes": "The algorithm described in section 11.2.3 is not properly written here; we compare c to n - f in the algorithm, but f != found; f corresponds to the \"allowed\" falsetickers. This algorithm implementation results in the lower and upper bounds unchanging throughout the described loop, but this change should fix the implementation.\r\n\r\n---\r\n\r\n[INT AD notes]\r\n\r\nFor analysis and further discussion see https://mailarchive.ietf.org/arch/msg/ntp/zJNoHvZ08SPX-3kwflMK7PIReFo/ especially the one or two addition issues identified.", "submit_date": "2020-06-08", "submitter_name": "Tam Phan", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-09-26 00:33:25"}, {"errata_id": "6208", "doc-id": "RFC8259", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.1", "orig_text": "In the interests of interoperability, implementations that parse JSON texts MAY ignore the presence of a byte order mark rather than treating it as an error.", "correct_text": "In the interests of interoperability, implementations that parse JSON texts MAY ignore the presence of a byte order mark or MAY interpret a byte order mark to indicate an alternate encoding rather than treating it as an error.", "notes": "The original line is copied from previous RFCs that specifically allowed alternate encodings.  In the context of a new, UTF-8 only restriction, interoperability provisions should also address interpreting legacy formats that predate the restriction.  By omission, readers may conclude that the *only* option for a BOM is to ignore or error.\n --VERIFIER NOTES-- \n   This is asking to revisit what we have consensus on, not a report of an error in the RFC.\r\nThe working group had extensive discussions on BOMs, and chose this particular working purposefully.", "submit_date": "2020-06-10", "submitter_name": "David Golden", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-06-10 14:38:37"}, {"errata_id": "6209", "doc-id": "RFC8152", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "can be used to prove the identity", "correct_text": "cannot be used to prove the identity", "notes": "MACs cannot be used to prove identity to a third party.  There is a missing \"not\" in the sentence.", "submit_date": "2020-06-16", "submitter_name": "JimSchaad", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-06-17 02:48:15"}, {"errata_id": "6211", "doc-id": "RFC8639", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "   A specification for a transport MUST identify any encodings that are\r\n   supported.  If a configured subscription's transport allows different\r\n   encodings, the specification MUST identify the default encoding.\r\n", "correct_text": "   A specification for a transport MUST identify any encodings that are\r\n   supported.  If a configured subscription's transport allows different\r\n   encodings, the specification MUST identify the default encoding, or\r\n   provide a mechanism whereby supported encodings can be discovered.\r\n", "notes": "https://mailarchive.ietf.org/arch/msg/netconf/XBpoFqtRynfc0zaRggMEiEMBW2M/\r\n", "submit_date": "2020-06-22", "submitter_name": "kent watsen", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:54:48"}, {"errata_id": "7274", "doc-id": "RFC8713", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.10", "orig_text": "The call for nominees must include a request for comments regarding the\r\npast performance of incumbents, which will be considered during the\r\ndeliberations of the NomCom.\r\n\r\nThe call must request that a nomination include a valid, working email\r\naddress, a telephone number, or both for the nominee. The nomination\r\nmust include the set of skills or expertise the nominator believes the\r\nnominee has that would be desirable.\r\n\r\n", "correct_text": "Delete them.", "notes": "The last two paragraphs in the section have not been followed by any recent committees. A possible reason for this is use of questionnaires, required by all, to contain contact information; and interviews.  In other words, \"overtaken by events.\"", "submit_date": "2022-12-14", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:17:15"}, {"errata_id": "6215", "doc-id": "RFC8040", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   If a retrieval request for a data resource representing a YANG\r\n   leaf-list or list object identifies more than one instance and XML\r\n   encoding is used in the response, then an error response containing a\r\n   \"400 Bad Request\" status-line MUST be returned by the server.  The\r\n   error-tag value \"invalid-value\" is used in this case.  Note that a\r\n   non-configuration list is not required to define any keys.  In this\r\n   case, the retrieval of a single list instance is not possible.\r\n", "correct_text": "", "notes": "This whole paragraph should be removed because, according to Section 3.5 (Data Resource), the \"list\" and \"leaf-leaf\" themselves are not a data resources:\r\n\r\n   A data resource represents a YANG data node that is a descendant node\r\n   of a datastore resource.  Each YANG-defined data node can be uniquely\r\n   targeted by the request-line of an HTTP method.  Containers, leafs,\r\n   leaf-list entries, list entries, anydata nodes, and anyxml nodes are\r\n   data resources.\r\n\r\nNo GET, PUT, POST, DELETE, or PATCH example in the RFC illustrates an operation on a \"list\" or \"leaf-list\" directly (i.e., without a key, which would then represent an element of the list or leaf-list).", "submit_date": "2020-06-25", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6216", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.4", "orig_text": "ptr._spf.example.com.  SPF  \"v=spf1 -ptr +all\"", "correct_text": "ptr._spf.example.com.  TXT  \"v=spf1 -ptr:example.com +all\"", "notes": "The example in appendix A.4, 'Multiple Requirements Example', does not\r\nwork as intended.\r\n\r\nIn the example, the SPF record at ptr._spf.example.com contains the\r\ndirective '-ptr'.\r\n\r\nWhen this directive is evaluated, the <target-name> is equal to\r\n'ptr._spf.example.com'. An input <ip> such as 192.0.2.10, which has a\r\nPTR record pointing to 'example.com', will fail to match, as that domain\r\nis not equal to nor a subdomain of 'ptr._spf.example.com'. In other\r\nwords, given the DNS setup of appendix A, there are no inputs that\r\nfulfil the requirement for matching this ptr mechanism.\r\n\r\nThe example can be fixed by supplying an appropriate <domain-spec>:\r\nreplace '-ptr' with '-ptr:example.com'.", "submit_date": "2020-06-26", "submitter_name": "David B\u00fcrgin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6217", "doc-id": "RFC4724", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "Since with this proposal a new connection can cause an old one to be\r\nterminated, it might seem to open the door to denial of service\r\nattacks.  However, it is noted that unauthenticated BGP is already\r\nknown to be vulnerable to denials of service through attacks on the\r\nTCP transport.  The TCP transport is commonly protected through use\r\nof [BGP-AUTH].  Such authentication will equally protect against\r\ndenials of service through spurious new connections.\r\n\r\nIf an attacker is able to successfully open a TCP connection\r\nimpersonating a legitimate peer, the attacker's connection will\r\nreplace the legitimate one, potentially enabling the attacker to\r\nadvertise bogus routes.  We note, however, that the window for such a\r\nroute insertion attack is small since through normal operation of the\r\nprotocol the legitimate peer would open a new connection, in turn\r\ncausing the attacker's connection to be terminated.  Thus, this\r\nattack devolves to a form of denial of service.\r\n\r\nIt is thus concluded that this proposal does not change the\r\nunderlying security model (and issues) of BGP-4.\r\n\r\nWe also note that implementations may allow use of graceful restart\r\nto be controlled by configuration.  If graceful restart is not\r\nenabled, naturally the underlying security model of BGP-4 is\r\nunchanged.\r\n", "correct_text": "Since with this proposal a new connection can cause an old one to be\r\nterminated, it might seem to open the door to denial of service\r\nattacks.  However, it is noted that unauthenticated BGP is already\r\nknown to be vulnerable to denials of service through attacks on the\r\nTCP transport.  The TCP transport is commonly protected through use\r\nof [BGP-AUTH].  Such authentication will equally protect against\r\ndenials of service through spurious new connections.\r\n\r\nIf an attacker is able to successfully open a TCP connection\r\nimpersonating a legitimate peer, the attacker's connection will\r\nreplace the legitimate one, potentially enabling the attacker to\r\nadvertise bogus routes.  We note, however, that the window for such a\r\nroute insertion attack is small since through normal operation of the\r\nprotocol the legitimate peer would open a new connection, in turn\r\ncausing the attacker's connection to be terminated.  Thus, this\r\nattack devolves to a form of denial of service.\r\n\r\nHowever, it is possible to downgrade the session so it will be\r\ndevoided of capabilities via the NOTIFICATION message for OPEN\r\nmessages with an Unsupported Optional Parameter subcode.\r\nRFC5492 specifies that if a peer receives this type of NOTIFICATION\r\nmessage, it SHOULD try to re-establish the BGP connection without\r\ncapabilities and, among other things, reduce the use of Graceful\r\nRestart Capability.\r\nTherefore, in this situation, if the attacker is the first to\r\nestablish a BGP connection with the peer, he might secure his route\r\nadvertising position.\r\nThis time, the legitimate peer won't be able to open a new\r\nconnection and terminate the attacker's connection.\r\nThus, this attack devolves into a form of a man-in-the-middle attack.\r\n\r\nIt is thus concluded that this proposal does not change the\r\nunderlying security model (and issues) of BGP-4.\r\n\r\nWe also note that implementations may allow use of graceful restart\r\nto be controlled by configuration.  If graceful restart is not\r\nenabled, naturally the underlying security model of BGP-4 is\r\nunchanged.\r\n", "notes": "The change in this section is the addition of a paragraph between paragraph 2 and paragraph 3 in the original section which describes an attack process where the attacker can gain a permanent grip on the connection", "submit_date": "2020-06-29", "submitter_name": "Nir Chako", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-07-21 14:40:38"}, {"errata_id": "7275", "doc-id": "RFC8713", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.13", "orig_text": "A nominee's consent must be written (email is acceptable) and must\r\ninclude a commitment to provide the resources necessary to fill the open\r\nposition and an assurance that the nominee will perform the duties of\r\nthe position for which they are being considered in the best interests\r\nof the IETF community.", "correct_text": "Delete", "notes": "This third paragraph from 5.13 is not appropriate. Recent nomcom's solicit that information during the interview and questionnaire responses.", "submit_date": "2022-12-14", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:19:07"}, {"errata_id": "7276", "doc-id": "RFC8702", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "... id-KmacWithSHAKE128 ...\r\n\r\n... id-KmacWithSHAKE256 ...", "correct_text": "... id-KMACWithSHAKE128 ...\r\n\r\n... id-KMACWithSHAKE256 ...", "notes": "The ASN.1 Module in RFC 8702 defines id-KMACWithSHAKE128 and id-KMACWithSHAKE256, but the body of the document uses \"Kmac\" instead of \"KMAC\".  The different spelling appears in many places in the document.", "submit_date": "2022-12-15", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:42:46"}, {"errata_id": "7546", "doc-id": "RFC8402", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "The active segment is indicated by the Destination Address (DA) of the packet.\r\nThe next active segment is indicated by the SegmentsLeft (SL) pointer in the SRH.", "correct_text": "Not sure of the exact corrected text but I feel SegmentsLeft (SL) pointer denotes the active segment, not the next active segment.", "notes": "SL is the active segment\n --VERIFIER NOTES-- \nI am rejecting this errata as https://www.rfc-editor.org/rfc/rfc8200#section-4.4 says \u201cNumber of route segments remaining, i.e., number of explicitly listed intermediate nodes still to be visited before reaching the final destination.\u201d. In my opinion, the existing text for RFC 8402 is accurate based on the quoted text of RFC 8200.", "submit_date": "2023-06-19", "submitter_name": "Praveen Kumar", "verifier_id": "", "verifier_name": "James Guichard", "update_date": "2023-06-19 14:12:20"}, {"errata_id": "7547", "doc-id": "RFC6458", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.12", "orig_text": "info:  A pointer to the buffer containing the attribute associated\r\n   with the message to be sent.  The type is indicated by the\r\n   info_type parameter.\r\n", "correct_text": "info:  A pointer to the buffer containing the attribute associated\r\n   with the message to be sent.  The type is indicated by the\r\n   infotype parameter.\r\n", "notes": "The name of the parameter is infotype, not info_type.\r\nThanks to Philipp Stanner for making me aware of this issue.", "submit_date": "2023-06-22", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-22 22:00:36"}, {"errata_id": "6218", "doc-id": "RFC8777", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.2", "orig_text": "10   IN TYPE260  \\# (\r\n       18 ; length\r\n       0a ; precedence=10\r\n       02 ; D=0, relay type=2, an IPv6 address\r\n       20010db800000000000000000000000f ) ; 2001:db8::15\r\n10   IN TYPE260  \\# (\r\n       24 ; length\r\n       80 ; precedence=128\r\n       83 ; D=1, relay type=3, a wire-encoded domain name\r\n       09616d7472656c617973076578616d706c6503636f6d ) ; domain name", "correct_text": "10   IN TYPE260  \\# (\r\n       18 ; length\r\n       0a ; precedence=10\r\n       02 ; D=0, relay type=2, an IPv6 address\r\n       20010db8000000000000000000000015 ) ; 2001:db8::15\r\n10   IN TYPE260  \\# (\r\n       25 ; length\r\n       80 ; precedence=128\r\n       83 ; D=1, relay type=3, a wire-encoded domain name\r\n       09616d7472656c617973076578616d706c6503636f6d00 ) ; domain name", "notes": "In the first example, the IPv6 address is incorrectly encoded.\r\n\r\nIn the second example, the trailing root label of the domain name was not included, and should be.  This also increases the length by 1 byte.", "submit_date": "2020-07-01", "submitter_name": "Brian Wellington", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-07-17 17:06:58"}, {"errata_id": "6219", "doc-id": "RFC3418", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "sysServices", "orig_text": "For example, a node which performs only routing functions would have a value of 4 (2^(3-1)).", "correct_text": "For example, a node which performs only routing functions would have a value of 4 (2^(4-1)).", "notes": "Typo in the example formula.\n --VERIFIER NOTES-- \nThe formula in the original document is correct. The \"3\" in the calculation refers to the OSI layer that routing functions occur at.", "submit_date": "2020-07-02", "submitter_name": "Kevin Seymour", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2020-07-03 13:36:05"}, {"errata_id": "6325", "doc-id": "RFC6125", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "  [X.520]          International Telecommunications Union, \"Information\r\n                    Technology - Open Systems Interconnection - The\r\n                    Directory: Selected attribute types\", ITU-\r\n                    T Recommendation X.509, ISO Standard 9594-6,\r\n                    August 2005.\r\n", "correct_text": "  [X.520]          International Telecommunications Union, \"Information\r\n                    Technology - Open Systems Interconnection - The\r\n                    Directory: Selected attribute types\", ITU-\r\n                    T Recommendation X.520, ISO Standard 9594-6,\r\n                    August 2005.\r\n", "notes": "Selected attribute types is X.520 not X.509", "submit_date": "2020-11-06", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6225", "doc-id": "RFC4122", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "ISO Object IDs (OIDs)", "correct_text": "Object Identifiers (OIDs)", "notes": "An Object Identifier (OID) is an identification mechanism jointly developed by ITU-T and ISO/IEC.\r\n\r\nIt makes no sense saying that it is an \"ISO OID\". Actually, it can be very confusing, because people could think that \"ISO OID\" means an OID which is a descendant of { iso(1) }, which would exclude OIDs descending from { itu-t(0) } and { joint-iso-itu-t(2) }.\r\n\r\nAlso in Appendix C, \"Name string is an ISO OID\" should be changed to \"Name string is an OID\".\r\n\r\nMaybe it would also be good to mention how the OID should be formatted. I guess the intention of the author is the normal dot-notation \"2.999\" which is passed as ASCII text to the name-based UUID generation function.", "submit_date": "2020-07-07", "submitter_name": "Daniel Marschall", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:35:39"}, {"errata_id": "6226", "doc-id": "RFC4684", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4", "orig_text": "   The NLRI field in the MP_REACH_NLRI and MP_UNREACH_NLRI is a prefix\r\n   of 0 to 96 bits, encoded as defined in Section 4 of [5].", "correct_text": "   The NLRI field in the MP_REACH_NLRI and MP_UNREACH_NLRI is a prefix\r\n   of 0 to 96 bits, encoded as defined in Section 5 of [5].", "notes": "Reference [5] points to RFC 4760.\r\nEncoding of prefixes in NLRI is defined in Section 5 \"NLRI Encoding\" of this document and not it Section 4.\n --VERIFIER NOTES-- \n[5] points to rfc2858, and Section 4 in that rfc is the correct section to look into.\r\n", "submit_date": "2020-07-09", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2020-07-09 20:40:29"}, {"errata_id": "6227", "doc-id": "RFC8624", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "   This document has no IANA actions.\r\n", "correct_text": "   This document updates the IANA registry \"Delegation Signer (DS) Resource \r\n   Record (RR) Type Digest Algorithms\". The registry has been updated by\r\n   the following table from section 3.3:\r\n\r\n   +--------+-----------------+-------------------+-------------------+\r\n   | Number | Mnemonics       | DNSSEC Delegation | DNSSEC Validation |\r\n   +--------+-----------------+-------------------+-------------------+\r\n   | 0      | NULL (CDS only) | MUST NOT [*]      | MUST NOT [*]      |\r\n   | 1      | SHA-1           | MUST NOT          | MUST              |\r\n   | 2      | SHA-256         | MUST              | MUST              |\r\n   | 3      | GOST R 34.11-94 | MUST NOT          | MAY               |\r\n   | 4      | SHA-384         | MAY               | RECOMMENDED       |\r\n   +--------+-----------------+-------------------+-------------------+\r\n\r\n   [*] - This is a special type of CDS record signaling removal of DS at\r\n         the parent in [RFC8078].\r\n\r\n\r\n   This document updates the IANA registry \"DNS Security Algorithm Numbers\". \r\n   The registry has been updated by the following table from section 3.1:\r\n\r\n   +--------+--------------------+-----------------+-------------------+\r\n   | Number | Mnemonics          | DNSSEC Signing  | DNSSEC Validation |\r\n   +--------+--------------------+-----------------+-------------------+\r\n   | 1      | RSAMD5             | MUST NOT        | MUST NOT          |\r\n   | 3      | DSA                | MUST NOT        | MUST NOT          |\r\n   | 5      | RSASHA1            | NOT RECOMMENDED | MUST              |\r\n   | 6      | DSA-NSEC3-SHA1     | MUST NOT        | MUST NOT          |\r\n   | 7      | RSASHA1-NSEC3-SHA1 | NOT RECOMMENDED | MUST              |\r\n   | 8      | RSASHA256          | MUST            | MUST              |\r\n   | 10     | RSASHA512          | NOT RECOMMENDED | MUST              |\r\n   | 12     | ECC-GOST           | MUST NOT        | MAY               |\r\n   | 13     | ECDSAP256SHA256    | MUST            | MUST              |\r\n   | 14     | ECDSAP384SHA384    | MAY             | RECOMMENDED       |\r\n   | 15     | ED25519            | RECOMMENDED     | RECOMMENDED       |\r\n   | 16     | ED448              | MAY             | RECOMMENDED       |\r\n   +--------+--------------------+-----------------+-------------------+\r\n\r\n", "notes": "The document clearly has the intention to update the IANA registers, which is also stated in the document, but not in section 6 (\"IANA Considerations\").\n --VERIFIER NOTES-- \nThis document does not have the intention indicated in the erratum. Please see\r\n* https://mailarchive.ietf.org/arch/msg/dnsop/KXEI6RgnkN-S4uKL8DvhwGEsYrI/\r\n* https://mailarchive.ietf.org/arch/msg/dnsop/GdpzvW7nqQ20BkKAchg74Wm398M/\r\n\r\nFWIW, an update of RFC8624 is being finalized (draft-ietf-dnsop-rfc8624-bis) with a set of IANA actions to reflect the changes made in the bis itself, not the original RFC8624. ", "submit_date": "2020-07-10", "submitter_name": "Mats Dufberg", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-06-02 05:22:15"}, {"errata_id": "6222", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "  7.  SYN-SENT    <-- <SEQ=400><ACK=101><CTL=SYN,ACK>  <-- SYN-RECEIVED\r\n\r\n  8.  ESTABLISHED --> <SEQ=101><ACK=401><CTL=ACK>      --> ESTABLISHED\r\n\r\n                    Recovery from Old Duplicate SYN\r\n\r\n                               Figure 9.", "correct_text": "  7.  ESTABLISHED <-- <SEQ=400><ACK=101><CTL=SYN,ACK>  <-- SYN-RECEIVED\r\n\r\n  8.  ESTABLISHED --> <SEQ=101><ACK=401><CTL=ACK>      --> ESTABLISHED\r\n\r\n                    Recovery from Old Duplicate SYN\r\n\r\n                               Figure 9.", "notes": "To align with figure 7 in the same section, after TCP A get the SYN+ACK from TCP B, TCP A should enter ESTABLISHED state instead stay in SYN-SENT state.", "submit_date": "2020-07-06", "submitter_name": "Charles Deng", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-07-07 00:11:22"}, {"errata_id": "6234", "doc-id": "RFC4823", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "   the AUTH command described within [4].  While any authentication\r\n   mechanism based upon [4] MAY be utilized, AUTH TLS (as described in\r\n   [18]) MUST be supported. (Note that [18] relies on TLS Version 1.0\r\n   [13], not Version 1.1 [23].)\r\n", "correct_text": "   the AUTH command described within [4].  While any authentication\r\n   mechanism based upon [4] MAY be utilized, AUTH TLS (as described in\r\n   [18]) MUST be supported. (Note that TLS Version 1.1 [23] is the current\r\n   version of TLS, though [18] references the older Version 1.0 [13].)", "notes": "RFC 4217 (reference [18]) does not specifically require TLS version 1.0.  It references RFC 2246 (TLS 1.0) solely because that was the only version of TLS specified at the time of its publication.  Securing FTP with TLS merely requires a version of TLS, not a specific version of TLS, so this document should refer to the current version of TLS at the time of its own publication.\r\n\r\nNote that [13] is listed as a normative reference and [23] an informative reference; in light of the above correction the normative/informative statuses should be swapped.", "submit_date": "2020-07-23", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-08-04 18:07:53"}, {"errata_id": "6235", "doc-id": "RFC4616", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   The PLAIN mechanism should not be used without adequate data security\r\n   protection as this mechanism affords no integrity or confidentiality\r\n   protections itself.  The mechanism is intended to be used with data\r\n   security protections provided by application-layer protocol,\r\n   generally through its use of Transport Layer Security ([TLS])\r\n   services.", "correct_text": "   The PLAIN mechanism should not be used without adequate data security\r\n   protection as this mechanism affords no integrity or confidentiality\r\n   protections itself.  The mechanism is intended to be used with data\r\n   security protections provided by an application-layer protocol,\r\n   generally through its use of Transport Layer Security ([TLS])\r\n   services.", "notes": "Missing \"an\" in \"an application-layer protocol\".", "submit_date": "2020-07-24", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-19 22:31:41"}, {"errata_id": "6236", "doc-id": "RFC7346", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "5.  Definition of Realm-Local Scope for IEEE 802.15.4\r\n\r\n   When used in an IP-over-IEEE802.15.4 network, scop 3 is defined to\r\n   include all interfaces sharing a Personal Area Network Identifier\r\n   (PAN ID).", "correct_text": "5.  Definition of Realm-Local Scope for IEEE 802.15.4\r\n\r\n   When used in an IP-over-IEEE802.15.4 network, scope 3 is defined to\r\n   include all interfaces sharing a Personal Area Network Identifier\r\n   (PAN ID).", "notes": "missing trailing 'e'\n --VERIFIER NOTES-- \nSection 2.7 of RFC 4291 defines the field in the multicast address as \"scop\". This text is referencing the \"scop\" field.", "submit_date": "2020-07-24", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-16 05:16:41"}, {"errata_id": "6239", "doc-id": "RFC7413", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "produces responses earlier before the handshake completes", "correct_text": "produces responses after the handshake completes", "notes": "Located on last paragraph last line of section on page 16. First line states 'not to respond with data until the handshake finishes' which contradicts the last line.\n --VERIFIER NOTES-- \n   This erratum does not correctly interpret the paragraph.\r\n\r\nThe sentence is:\r\n\"But the potential latency saving from TFO may diminish if the server application\r\n   produces responses earlier before the handshake completes.\"\r\n\r\nThe text refers to when the server response is available, not when it is sent. If the server data isn't yet available, then there is no message to withhold and therefore no performance penalty in waiting for the handshake to complete.", "submit_date": "2020-07-27", "submitter_name": "Simon khng ren hao", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-07-27 22:17:03"}, {"errata_id": "6240", "doc-id": "RFC3031", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.10", "orig_text": "3.10. The Next Hop Label Forwarding Entry (NHLFE)\r\n\r\n   The \"Next Hop Label Forwarding Entry\" (NHLFE) is used when forwarding\r\n   a labeled packet.  It contains the following information:\r\n\r\n   1. the packet's next hop\r\n\r\n   2. the operation to perform on the packet's label stack; this is one\r\n      of the following operations:\r\n\r\n      a) replace the label at the top of the label stack with a\r\n         specified new label\r\n\r\n      b) pop the label stack\r\n\r\n      c) replace the label at the top of the label stack with a\r\n         specified new label, and then push one or more specified new\r\n         labels onto the label stack.\r\n\r\n   It may also contain:\r\n\r\n      d) the data link encapsulation to use when transmitting the packet\r\n\r\n      e) the way to encode the label stack when transmitting the packet\r\n\r\n      f) any other information needed in order to properly dispose of\r\n         the packet.\r\n\r\n   Note that at a given LSR, the packet's \"next hop\" might be that LSR\r\n   itself.  In this case, the LSR would need to pop the top level label,\r\n   and then \"forward\" the resulting packet to itself.  It would then\r\n   make another forwarding decision, based on what remains after the\r\n   label stacked is popped.  This may still be a labeled packet, or it\r\n   may be the native IP packet.\r\n\r\n   This implies that in some cases the LSR may need to operate on the IP\r\n   header in order to forward the packet.\r\n\r\n   If the packet's \"next hop\" is the current LSR, then the label stack\r\n   operation MUST be to \"pop the stack\".", "correct_text": "3.10. The Next Hop Label Forwarding Entry (NHLFE)\r\n\r\n   The \"Next Hop Label Forwarding Entry\" (NHLFE) is used when forwarding\r\n   a labeled packet on an LSR or an unlabeled packet on an Ingress MPLS router. It \r\n   contains the following information:\r\n\r\n   1. the packet's next hop\r\n\r\n   2. the operation to perform on the packet's label stack; this is one\r\n      of the following operations:\r\n\r\n      a) replace the label at the top of the label stack with a\r\n         specified new label\r\n\r\n      b) pop the label stack\r\n\r\n      c) replace the label at the top of the label stack with a\r\n         specified new label, and then push one or more specified new\r\n         labels onto the label stack.\r\n\r\n      d) push a new label on an unlabeled packet\r\n\r\n\r\n   It may also contain:\r\n\r\n      e) the data link encapsulation to use when transmitting the packet\r\n\r\n      f) the way to encode the label stack when transmitting the packet\r\n\r\n      g) any other information needed in order to properly dispose of\r\n         the packet.\r\n\r\n   Note that at a given LSR, the packet's \"next hop\" might be that LSR\r\n   itself.  In this case, the LSR would need to pop the top level label,\r\n   and then \"forward\" the resulting packet to itself.  It would then\r\n   make another forwarding decision, based on what remains after the\r\n   label stacked is popped.  This may still be a labeled packet, or it\r\n   may be the native IP packet.\r\n\r\n   This implies that in some cases the LSR may need to operate on the IP\r\n   header in order to forward the packet.\r\n\r\n   If the packet's \"next hop\" is the current LSR, then the label stack\r\n   operation MUST be to \"pop the stack\".", "notes": "Section 3.10 defines NHLFE, and it sounds from the definition that this piece of information is used by an MPLS router only when packet is already labeled. Now, when section 3.12 (FTN) defines the relationship between FEC and NHLFE, the definition of NHLFE in section 3.10 does not align with FTN definition.", "submit_date": "2020-07-27", "submitter_name": "Jitendra Kumar Sharma", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 21:59:13"}, {"errata_id": "6241", "doc-id": "RFC8460", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix B.", "orig_text": "Appendix B.  Example JSON Report\r\n...\r\n     \"policies\": [{\r\n       \"policy\": {\r\n...\r\n         \"mx-host\": \"*.mail.company-y.example\"\r\n       },\r\n...", "correct_text": "Appendix B.  Example JSON Report\r\n...\r\n     \"policies\": [{\r\n       \"policy\": {\r\n...\r\n         \"mx-host\": [\"*.mail.company-y.example\"]\r\n       },\r\n...", "notes": "\"mx-host-pattern\" is defined as a JSON array\r\n\r\n========== Verifier notes ==========\r\nThis is right on the edge of \"Verified\": the reporter is correct about the error, but the existing implementations don't comply with the proposed fix.  So this really needs to be dealt with in a document update, rather than through an errata report.\r\n", "submit_date": "2020-07-27", "submitter_name": "Kristian Klausen", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-07-29 19:53:00"}, {"errata_id": "6242", "doc-id": "RFC3665", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.9", "orig_text": "SIP/2.0  486 Busy Here", "correct_text": "SIP/2.0 486 Busy Here", "notes": "At three different locations in section 3.9, there are two space characters between the SIP version and the Status Code, instead of one space. \r\n\r\nAccording to RFC 3261, section 7.2, the Status line of a SIP Response, each element is separated by a single SP character.", "submit_date": "2020-07-27", "submitter_name": "Johan Kuuse", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7556", "doc-id": "RFC9218", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1", "orig_text": "The urgency (u) parameter value is Integer (see Section 3.3.1 of\r\n[STRUCTURED-FIELDS]), between 0 and 7 inclusive, in descending order\r\nof priority.", "correct_text": "The urgency (u) parameter value is Integer (see Section 3.3.1 of\r\n[STRUCTURED-FIELDS]), between 0 and 7 inclusive, in ASCENDING order\r\nof priority.", "notes": "The very next paragraph indicates ASCENDING order of priority:\r\n\"The smaller the value, the higher the precedence.\"\r\nMinor nit: It is confusing and unnecessary to use \"precedence\" and \"urgency\" as aliases for \"priority\". Readers can be misled to think these are intended to be distinct properties rather than aliases.\r\n\r\n[AD response] The operative phrase to me is \"between 0 and 7 inclusive, in descending order of priority\".  I read that as a set of ordered values from 0 to 7 where the first value has the highest priority, the second value is down a notch, etc., hence, descending.  The later phrase \"The smaller the value, the higher the precedence\" affirms this interpretation.\n --VERIFIER NOTES-- \n   ", "submit_date": "2023-06-29", "submitter_name": "Mo Zanaty", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-07-17 22:29:53"}, {"errata_id": "6246", "doc-id": "RFC4684", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": " This prefix is structured as follows:\r\n\r\n        +-------------------------------+\r\n        | origin as        (4 octets)   |\r\n        +-------------------------------+\r\n        | route target     (8 octets)   |\r\n        +                               +\r\n        |                               |\r\n        +-------------------------------+", "correct_text": " This prefix is structured as follows:\r\n\r\n        +-------------------------------+\r\n        | origin as       (4 octets)    |\r\n        +-------------------------------+\r\n        | route target   (0-8 octets)   |\r\n        +                               +\r\n        |                               |\r\n        +-------------------------------+", "notes": "The text defines route target as prefix however figure in section 4 does not reflect this correctly. This is editorial change, but apparently causing a lot of confusion in the community.\r\n\r\n-- Verifier note --\r\nThe submitter is one of the author and the original text causes confusion, it is marked as verified.", "submit_date": "2020-07-31", "submitter_name": "Robert Raszuk", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-02-08 08:35:37"}, {"errata_id": "6244", "doc-id": "RFC5246", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2.3.2", "orig_text": "IV\r\nThe Initialization Vector (IV) SHOULD be chosen at random, and\r\nMUST be unpredictable. Note that in versions of TLS prior to 1.1,\r\nthere was no IV field, and the last ciphertext block of the\r\nprevious record (the \"CBC residue\") was used as the IV. This was\r\nchanged to prevent the attacks described in [CBCATT]. For block\r\nciphers, the IV length is of length\r\nSecurityParameters.record_iv_length, which is equal to the\r\nSecurityParameters.block_size.", "correct_text": "IV\r\nThe Initialization Vector (IV) SHOULD be chosen at random, and\r\nMUST be unpredictable. Note that in versions of TLS prior to 1.1,\r\nthere was no IV field, and the last ciphertext block of the\r\nprevious record (the \"CBC residue\") was used as the IV. This was\r\nchanged to prevent the attacks described in [CBCATT]. For block\r\nciphers, the IV length is of length\r\nSecurityParameters.record_iv_length, which is equal to the\r\nSecurityParameters.block_length.", "notes": "This is an error here. The structure SecurityParameters hasn't the element block_size.\r\nIt has the element block_length.\r\nSee in section 6.1:\r\nstruct {\r\nConnectionEnd entity;\r\nPRFAlgorithm prf_algorithm;\r\nBulkCipherAlgorithm bulk_cipher_algorithm;\r\nCipherType cipher_type;\r\nuint8 enc_key_length;\r\nuint8 block_length;\r\nuint8 fixed_iv_length;\r\nuint8 record_iv_length;\r\nMACAlgorithm mac_algorithm;\r\nuint8 mac_length;\r\nuint8 mac_key_length;\r\nCompressionMethod compression_algorithm;\r\nopaque master_secret[48];\r\nopaque client_random[32];\r\nopaque server_random[32];\r\n} SecurityParameters;\r\n\r\n\r\nPaul Wouters (AD): Note this RFC is obsoleted and all of this text already got removed", "submit_date": "2020-07-29", "submitter_name": "Victor S. Osipov", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:51:31"}, {"errata_id": "6245", "doc-id": "RFC7317", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "         leaf-list user-authentication-order {\r\n           type identityref {\r\n             base authentication-method;\r\n           }\r\n           must '(. != \"sys:radius\" or ../../radius/server)' \r\n\r\n", "correct_text": "         leaf-list user-authentication-order {\r\n           type identityref {\r\n             base authentication-method;\r\n           }\r\n           must '(not(. = \"sys:radius\") or ../../radius/server)'\r\n ", "notes": "As indicated in https://www.w3.org/TR/1999/REC-xpath-19991116/#booleans\r\n\r\nthe following expression comparing a node-set with a string\r\n\r\n       . != \"sys:radius\"\r\n\r\nis true if at least one node in the node-set satisfies the boolean expression.\r\n\r\nThis is not the intention of the \"must\" condition.\r\n\r\nIt is necessary to use not(. = \"sys:radius\") to achieve the right intention of the check.\r\n\r\nThis errata has been marked as \"Held for Document Update\" because it requires a new revision of the YANG module to be published, and hence a new RFC.", "submit_date": "2020-07-29", "submitter_name": "Maurizio Brigandi'", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 14:37:38"}, {"errata_id": "7277", "doc-id": "RFC9204", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "In the static table, entry 73 has a value of:\r\n\r\naccess-control-allow-credentials: TRUE\r\n\r\nand entry 74 has a value of:\r\n\r\naccess-control-allow-credentials: FALSE", "correct_text": "Entry 73 should have a value of:\r\n\r\naccess-control-allow-credentials: true\r\n\r\n(note the lower-case value of \"true\")\r\n\r\nand entry 74 should NOT EXIST since \"FALSE\" (in upper-case\r\nor lower-case) is not a valid value for this header.", "notes": "The \"access-control-allow-credentials\" header is a CORS header. It only has one allowed value - \"true\" (without quotes, MUST be in lower-case). Values of \"TRUE\", \"FALSE\" and \"false\" are all invalid values, as is any mixed-case version of \"true\".\r\n\r\nSee the latest WHATWG spec at https://fetch.spec.whatwg.org/#cors-protocol-and-credentials which notes the required case-sensitivity of the \"true\" value and that it is the only valid value.\r\n\r\nAlso see the prior W3C spec at https://www.w3.org/TR/2020/SPSD-cors-20200602/#access-control-allow-credentials-response-header which says the same thing. Note that the W3C spec was superseded by the WHATWG spec.\r\n\r\nNote that there are many instances of \"access-control-allow-credentials: false\" being returned from server responses (which is presumably why these values were added to the table), but they are invalid and the servers that send them are not following the CORS specification.\r\n\r\nThere may be case to be made that the static table is defined to make the QPACK algorithm as performant as possible and therefore it should include not only commonly-used valid values, but also commonly-used invalid values. However, the static table should ideally contain only valid header values.\r\n\r\n-- Verifier notes\r\nSee https://mailarchive.ietf.org/arch/msg/quic/tgmjRvHDPev-mjPQWEM_zqRn5LE/", "submit_date": "2022-12-15", "submitter_name": "Rory Hewitt", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-30 14:27:48"}, {"errata_id": "7278", "doc-id": "RFC3647", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "In particular, representatives of the ISC made changes to the framework to better suite it to the legal environment and make it more accessible to lawyers.", "correct_text": "In particular, representatives of the ISC made changes to the framework to better suit it to the legal environment and make it more accessible to lawyers.", "notes": "r/suite/suit", "submit_date": "2022-12-19", "submitter_name": "Preston Locke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-12-19 22:43:34"}, {"errata_id": "6248", "doc-id": "RFC8200", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.5", "orig_text": "      The Per-Fragment headers must consist of the IPv6 header plus any\r\n      extension headers that must be processed by nodes en route to the\r\n      destination, that is, all headers up to and including the Routing\r\n      header if present, else the Hop-by-Hop Options header if present,\r\n      else no extension headers.", "correct_text": "      The Per-Fragment headers must consist of the IPv6 header plus any\r\n      extension headers that must be processed by nodes en route to the\r\n      destination. In the recommended order of extension headers listed \r\n      in section 4.1, the Per-Fragment headers include all headers up to \r\n      and including the Routing header if present, else the Hop-by-Hop \r\n      Options header if present, else no extension headers. In case the\r\n      order of extension headers is specified, the Per-Fragment headers \r\n      include all headers that is required to be before the Fragment Header.", "notes": "1. As specified in in section 4.1 of RFC8200, the recommended order of existing extension headers could be revised, and there have been some examples in the RFCs that do such revision: RFC7837, RFC6275 and its related RFCs, RFC3775/RFC3776/RFC4784. \r\n2. RFC6275 requires DoH carrying a special option to be placed before Fragmentation header. This gives an example how to support Fragmentation with the order of extension headers revised.\r\n3. As specified in section 4.8 of RFC8200, new extension headers could be defined, and there may be some new Per-fragment header(s) defined requiring en route processing with fragmentation support.", "submit_date": "2020-08-06", "submitter_name": "Jingrong Xie", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-11 00:22:40"}, {"errata_id": "6249", "doc-id": "RFC4948", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "1", "orig_text": "Over one and half days of intensive discussions", "correct_text": "Over one and one half days of intensive discussions", "notes": "missing text", "submit_date": "2020-08-06", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6250", "doc-id": "RFC5652", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.2", "orig_text": "   If the authAttrs field is present, the content-type attribute (as\r\n   described in Section 11.1) and the message-digest attribute (as\r\n   described in Section 11.2) MUST be included, and the input to the MAC\r\n   calculation process is the DER encoding of authAttrs.  A separate\r\n   encoding of the authAttrs field is performed for message digest\r\n   calculation.  The IMPLICIT [2] tag in the authAttrs field is not used\r\n   for the DER encoding, rather an EXPLICIT SET OF tag is used.  That\r\n   is, the DER encoding of the SET OF tag, rather than of the IMPLICIT\r\n   [2] tag, is to be included in the message digest calculation along\r\n   with the length and content octets of the authAttrs value.", "correct_text": "   If the authAttrs field is present, the content-type attribute (as\r\n   described in Section 11.1) and the message-digest attribute (as\r\n   described in Section 11.2) MUST be included, and the input to the MAC\r\n   calculation process is the DER encoding of authAttrs.  A separate\r\n   encoding of the authAttrs field is performed for message digest\r\n   calculation.  The IMPLICIT [2] tag in the authAttrs field is not used\r\n   for the DER encoding, rather an EXPLICIT SET OF tag is used.  That\r\n   is, the DER encoding of the SET OF tag, rather than of the IMPLICIT\r\n   [2] tag, is to be included in the MAC calculation along\r\n   with the length and content octets of the authAttrs value.", "notes": "The paragraph is talking about the input to a MAC calculation, not the input to message digest calculation.", "submit_date": "2020-08-06", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-08-07 05:00:34"}, {"errata_id": "6251", "doc-id": "RFC8349", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "The RPC \"active-route\" is used to retrieve the active route in a RIB.\r\nRFC8349 defined two AFIs (v4/v6).\r\n\r\ndraft-ietf-mpls-base-yang is defining a new RIB AFI for MPLS as per section 3 in RFC8349.\r\n\r\nThe RPC has a \"MUST\" statement that all RIBs must augment input\r\nparameters with a leaf named 'destination-address'.\r\n\r\nFor MPLS RIB, it makes sense to augment with leaf named 'local-label' since MPLS routes are identified by MPLS label.\r\n\r\nWe ask to make the following change:\r\n\r\nOLD:\r\n           action active-route {\r\n             description\r\n               \"Return the active RIB route that is used for the\r\n                destination address.\r\n\r\n                Address-family-specific modules MUST augment input\r\n                parameters with a leaf named 'destination-address'.\";\r\n", "correct_text": "NEW:\r\n           action active-route {\r\n             description\r\n               \"Return the active RIB route that is used for the\r\n                destination address.\r\n\r\n                Address-family-specific modules MUST augment input\r\n                parameters with a suitable leaf that identifies the route.\";\r\n", "notes": "\n --VERIFIER NOTES-- \nAfter discussion between the submitter and authors of the RFC it was agreed that the errata should be rejected.", "submit_date": "2020-08-07", "submitter_name": "Tarek Saad", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2020-08-14 17:41:56"}, {"errata_id": "6276", "doc-id": "RFC8555", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "   o  The CA verifies that the client controls the requested domain\r\n      name(s) by having the ACME client perform some action(s) that can\r\n      only be done with control of the domain name(s).  For example, the\r\n      CA might require a client requesting example.com to provision a\r\n      DNS record under example.com or an HTTP resource under\r\n      http://example.com.\r\n", "correct_text": "   o  The CA verifies that the client controls the requested domain\r\n      name(s) by having the ACME client perform some action(s) that can\r\n      only be done with control of the domain name(s).  For example, the\r\n      CA might require a client requesting example.org to provision a\r\n      DNS record under example.org or an HTTP resource under\r\n      http://example.org.\r\n", "notes": "The spec consistently uses example.com for an ACME CA server, and example.org for a site requesting a certificate -- except in this sentence.", "submit_date": "2020-09-03", "submitter_name": "James Manger", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-09-04 01:15:40"}, {"errata_id": "6277", "doc-id": "RFC8040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.8.5", "orig_text": "The default value is \"last\".", "correct_text": "The default value is \u201clast\u201d, except when used with PUT \r\nand the target resource already exists, in which case the \r\ndefault is to replace the target resource without altering\r\nits position in the \"ordered-by user\u201d list or leaf-list.\r\n", "notes": "The \"last\" default is intended for when creating a new element.  \r\n\r\nA PUT operation that replaces a list or leaf-list entry should not move the entry unless the \"insert\" parameter is explicitly passed.", "submit_date": "2020-09-03", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 13:31:11"}, {"errata_id": "6252", "doc-id": "RFC3659", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "To add a file type to this OS specific registry of OS specific file types, an applicant must send to the IANA a request, in which is specified the OS name, the OS specific file type, a definition of the syntax of the fact value, which must conform to the syntax of a token as given in this document, and a specification of the semantics to be associated with the particular fact and its values.\r\n", "correct_text": "To add a file type to this OS specific registry of OS specific file types, an applicant must send to the IANA a request, in which is specified the OS name, the OS specific file type, and a specification of the semantics to be associated with the particular OS specific file type.\r\n", "notes": "It appears that the text in section 10.2 has been copy/pasted from section 10.1, without applying the necessary adjustments for the differences between OS-specific facts and OS-specific filetypes. While OS-specific facts do have values (see section 7.2), there is no concept of a \"value\" of an OS-specific filetype defined in the RFC (see section 7.5.1.5).\r\n\r\nThis error effectively makes it impossible to register an OS-specific filetype with IANA, were IANA to follow the wording of the RFC to the letter \u2013 IANA must demand a \"definition of the syntax of the fact value\" for every filetype registration, despite the fact that request makes no sense for a filetype as defined in the RFC.", "submit_date": "2020-08-08", "submitter_name": "Simon Kissane", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:29:17"}, {"errata_id": "6253", "doc-id": "RFC8461", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "CRLF-separated key/value pairs", "correct_text": "LF- or CRLF-separated key/value pairs", "notes": "Rationale:\r\n\r\n1. The definition of 'sts-policy-term' in the grammar explicitly allows use of either CRLF or bare LF.\r\n\r\n2. On page 8, one of the example says \"<CRLF>\" explicitly at the end of the first line, while the second line of that example and all lines of the other example have neither \"<CRLF>\" nor \"<LF>\" appended to them.   That makes it ambiguous whether those lines are terminated by LF or by CRLF.", "submit_date": "2020-08-08", "submitter_name": "Daniel Shahaf", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6254", "doc-id": "RFC6376", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.4", "orig_text": "", "correct_text": "", "notes": "The \"INFORMATIVE OPERATIONS NOTE\" early in Section 5.4 appears to be in conflict with Section 5.4.1.  They appear to cover the same issue, namely what header fields to use for the signature, but they seem to give different advice.  (Though not formally an erratum, there is also the matter of thinking that what is shown the the recipient is relevant...) /d", "submit_date": "2020-08-08", "submitter_name": "Dave Crocker", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2021-12-02 16:17:47"}, {"errata_id": "6255", "doc-id": "RFC5531", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "9", "orig_text": "         union reply_body switch (reply_stat stat) {\r\n         case MSG_ACCEPTED:\r\n            accepted_reply areply;\r\n         case MSG_DENIED:\r\n            rejected_reply rreply;\r\n         } reply;", "correct_text": "         union reply_body switch (reply_stat stat) {\r\n         case MSG_ACCEPTED:\r\n            accepted_reply areply;\r\n         case MSG_DENIED:\r\n            rejected_reply rreply;\r\n         };", "notes": "The XDR grammar doesn't allow stating this:\r\n\r\nunion type_name switch (...) { ...} member_name;\r\n\r\nYou only have these two forms:\r\n\r\nunion type_name switch (...) { ...};\r\nunion switch (...) { ...} member_name;", "submit_date": "2020-08-12", "submitter_name": "Ed Schouten", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7411", "doc-id": "RFC4998", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2.", "orig_text": "   4.  Concatenate each h(i) with ha(i) and generate hash values\r\n       h(i)' = H (h(i)+ ha(i)).  For multi-document groups, this is:\r\n       h(i_a)' = H (h(i_a)+ ha(i))\r\n       h(i_b)' = H (h(i_b)+ ha(i)), etc.", "correct_text": "   4.  Concatenate each h(i) with ha(i) in binary ascending order and generate hash values\r\n       h(i)' = H (h(i)+ ha(i)).  For multi-document groups, this is:\r\n       h(i_a)' = H (h(i_a)+ ha(i))\r\n       h(i_b)' = H (h(i_b)+ ha(i)), etc.", "notes": "In RFC 4998 HashTree-Renewal is specified in an ambiguous manner.\r\n\r\nSkipping sorting before concatenating is a deviation from all other steps in RFC 4998 where hashes are concatenated.\r\n\r\nThis conclusion is supported by RFC 4998 \"Figure 4\" that illustrates the steps above and the explanation that follows. The relevant part is this:\r\n\r\nh2a' = H( binary sorted and concatenated (h2a, ha(2)))\r\n\r\n      ...\r\n\r\nh2c' = H( binary sorted and concatenated (h2c, ha(2)))\r\n\r\nSo the illustration and its explanation clearly states the sorting before concatenation.", "submit_date": "2023-03-31", "submitter_name": "Florian Fischer", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7280", "doc-id": "RFC4056", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "The algorithm identifier for RSASAA-PSS signatures is:", "correct_text": "The algorithm identifier for RSASSA-PSS signatures is:", "notes": "Replace RSASAA-PSS with RSASSA-PSS.", "submit_date": "2022-12-20", "submitter_name": "Jaak Ristioja", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-12-20 22:13:57"}, {"errata_id": "7282", "doc-id": "RFC8461", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "sts-policy-max-age-value = 1*10(DIGIT)", "correct_text": "sts-policy-max-age-value = 1*8(DIGIT)", "notes": "As described under 3.2 at point \"max_age\", the maximum lifetime of a policy may only be 31557600 seconds. Therefore 8 digits in the ABNF for \"sts-policy-max-age-value\" would be sufficient.\r\n\r\nOn the other hand, if values larger than 31557600 seconds are allowed, the text under \"max_age\" should be adjusted.", "submit_date": "2022-12-21", "submitter_name": "Benjamin Schwarze", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7283", "doc-id": "RFC8216", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.10", "orig_text": "   #EXTM3U\r\n   ...\r\n   #EXT-X-DATERANGE:ID=\"splice-6FFFFFF0\",START-DATE=\"2014-03-05T11:\r\n   15:00Z\",PLANNED-DURATION=59.993,SCTE35-OUT=0xFC002F0000000000FF0\r\n   00014056FFFFFF000E011622DCAFF000052636200000000000A0008029896F50\r\n   000008700000000\r\n\r\n   ... Media Segment declarations for 60s worth of media\r\n\r\n   #EXT-X-DATERANGE:ID=\"splice-6FFFFFF0\",DURATION=59.993,SCTE35-IN=\r\n   0xFC002A0000000000FF00000F056FFFFFF000401162802E6100000000000A00\r\n   08029896F50000008700000000\r\n   ...", "correct_text": "   #EXTM3U\r\n   ...\r\n   #EXT-X-DATERANGE:ID=\"splice-6FFFFFF0\",START-DATE=\"2014-03-05T11:\r\n   15:00Z\",PLANNED-DURATION=59.993,SCTE35-OUT=0xFC002F000000000000F\r\n   F000014056FFFFFF000E081622DCAFF000052636200000000000A0008029896F\r\n   50000008700000000\r\n\r\n   ... Media Segment declarations for 60s worth of media\r\n\r\n   #EXT-X-DATERANGE:ID=\"splice-6FFFFFF0\",DURATION=59.993,SCTE35-IN=\r\n   0xFC002A000000000000FF00000F056FFFFFF000408162802E6100000000000A\r\n   0008029896F50000008700000000\r\n   ...", "notes": "Both examples contain the same two mistakes. Let's look at the first example and find the first mistake:\r\n\r\n1. 12 bits at offset 12 are section_length, and they equal 0x02F. This indicates that the rest of the section should take up 47 bytes, but actually there is only 46 bytes;\r\n2. 12 bits at offset 92 are splice_command_length, and they equal 0x405. This indicates that there should be 1029 bytes after splice_command_type, which is clearly wrong since there are only 20 bytes there;\r\n3. 8 bits at offset 104 are splice_command_type, and they equal 0x6F. This is not a valid command type. Since this is an SCTE35-IN tag, it's a splice_insert() event and we expect to see 0x05 in those bits. This conjecture is supported by the fact that 0x6F appears to be the first byte of the splice_event_id field.\r\n\r\nIt looks like a byte is missing somewhere between bit positions 24 and 92. In the corrected text, I took the liberty of inserting 0x00 at bit offset 24. This changes the section length to the declared 47 bytes; splice_command_length becomes 0x14 which is the expected 20 bytes; and splice_command_type becomes 0x05 which is the expected splice_insert() type. Accidentally this also changes pts_adjustment from 0xFF to 0x00; this shouldn't hurt because we don't know what PTSes the HLS segments contain, anyway.\r\n\r\nWith this fix applied, we can see the second mistake: the bit at offset 168 is time_specified_flag of the splice_time() contained within splice_insert(), and it's zero. This implies that there is no PTS inside splice_time(), which is clearly wrong, since the #EXT-X-DATERANGE displays the START-DATE. In the corrected text, I flipped this bit to 1. Again, without knowing the PTSes inside the segments, I can't tell if this gives us a correct pts_time, but at least the break_duration() now gives expected duration of 59.993 seconds.\r\n\r\nThe second example contains the same two mistakes, and the corrected text contains the same two fixes:\r\n\r\n1. at bit offset 24, a new 0x00 byte is inserted;\r\n2. at bit offset 168, zero bit is flipped to one.", "submit_date": "2022-12-22", "submitter_name": "Alexander Batischev", "verifier_id": "", "verifier_name": "Eliot Lear (ISE)", "update_date": "2023-01-04 06:03:12"}, {"errata_id": "6261", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "                                    1  1  1  1  1  1\r\n      0  1  2  3  4  5  6  7  8  9  0  1  2  3  4  5\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                      ID                       |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |QR|   Opcode  |AA|TC|RD|RA|   Z    |   RCODE   |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    QDCOUNT                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    ANCOUNT                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    NSCOUNT                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    ARCOUNT                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n", "correct_text": "                                    1  1  1  1  1  1\r\n      0  1  2  3  4  5  6  7  8  9  0  1  2  3  4  5\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                      ID                       |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |QR|   OPCODE  |AA|TC|RD|RA|   Z    |   RCODE   |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    QDCOUNT                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    ANCOUNT                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    NSCOUNT                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n    |                    ARCOUNT                    |\r\n    +--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+--+\r\n", "notes": "\"OPCODE\" is written in all-caps throughout this document.", "submit_date": "2020-08-23", "submitter_name": "Merlin B\u00fcge", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-08-24 17:11:04"}, {"errata_id": "6262", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "OPCODE          A four bit field that specifies kind of query in this\r\n                message.  This value is set by the originator of a query\r\n                and copied into the response.  The values are:\r\n", "correct_text": "OPCODE          A four bit field that specifies the kind of query in\r\n                this message.  This value is set by the originator of a\r\n                query and copied into the response.  The values are:\r\n", "notes": "[WK]: Added 'the' in 'specifies kind of query'...", "submit_date": "2020-08-23", "submitter_name": "Merlin B\u00fcge", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-08-24 17:13:08"}, {"errata_id": "6263", "doc-id": "RFC8410", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "NOTE: There exist some private key import functions that have not picked up the new ASN.1 structure OneAsymmetricKey that is defined in [RFC7748].", "correct_text": "NOTE: There exist some private key import functions that have not picked up the new ASN.1 structure OneAsymmetricKey that is defined in [RFC5958].", "notes": "RFC7748 does not define or even mention OneAsymmetricKey. The correct reference should be RFC5958 \"Asymmetric Key Packages\"", "submit_date": "2020-08-24", "submitter_name": "David Ireland", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-30 10:03:49"}, {"errata_id": "6264", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "amount of new network code which is required.  This scheme can also\r\nallow a group of hosts can share a small number of caches rather than\r\nmaintaining a large number of separate caches, on the premise that the\r\ncentralized caches will have a higher hit ratio.  In either case,\r\n", "correct_text": "amount of new network code which is required.  This scheme can also\r\nallow a group of hosts to share a small number of caches rather than\r\nmaintaining a large number of separate caches, on the premise that the\r\ncentralized caches will have a higher hit ratio.  In either case,\r\n", "notes": "[WK]: s/a group of hosts can share a/a group of hosts to share a/  (I had to use 'dif' to find the change. Commenting here to save others from same. \r\n[EV] Indeed the s/can/to/ is a valid grammar correction.", "submit_date": "2020-08-24", "submitter_name": "Merlin B\u00fcge", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 11:00:28"}, {"errata_id": "6265", "doc-id": "RFC2978", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Proposed charsets are not formally registered and must not be used; the \"x-\" prefix specified in RFC 2045 can be used until registration is complete.", "correct_text": "Proposed charsets are not formally registered and must not be used.", "notes": "This section contains a recommendation for temporary use of charset names with an \"X-\" prefix.  Given the problems those have caused and the general prohibition in RFC 6648, probably that provision should be considered updated and removed by 6648.  Given that the review period is only two weeks, it would seem that there is little reason for for having proposed charsets floating around anyway.\r\n\r\nComment: Despite Alexey's 2018 comment on erratum 5433, perhaps it is time to create a revised document, not only to incorporate the syntax corrections of prior errata and to get rid of the \"X-\" advice, but to put in some text that actively discourages new registrations and uses of charsets that are not based on Unicode.\r\n\r\n===== Verifier notes =====\r\nThis was not incorrect when the RFC was published, so it doesn't fit into \"errata\".  That said, John is correct that (1) we should consider that BCP 178 has changed this as noted, and (2) we probably should do a document update.  I am, therefore, marking this as \"held for document update\".", "submit_date": "2020-08-25", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-08-25 15:28:35"}, {"errata_id": "7284", "doc-id": "RFC4110", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "Solutions will need to chose between flexibility (supporting multiple options) and conciseness (selection of specific options in order to simplify implementation and deployment).", "correct_text": "Solutions will need to choose between flexibility (supporting multiple options) and conciseness (selection of specific options in order to simplify implementation and deployment).", "notes": "In this sentence, \"choose\" is the correct verb to use because it means to select or make a decision between two or more alternatives. \"Chose\" is the past tense of \"choose,\" so it would not be correct to use in this context.", "submit_date": "2022-12-22", "submitter_name": "Raoul Estourgie", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-12-22 22:50:09"}, {"errata_id": "6269", "doc-id": "RFC8415", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "section 16:\r\n   A server MUST discard any Solicit, Confirm, Rebind, or\r\n   Information-request messages it receives with a Layer 3 unicast\r\n   destination address.\r\n\r\nsection 18.2:\r\n   If the client has a source address of sufficient scope that can be\r\n   used by the server as a return address and the client has received a\r\n   Server Unicast option (see Section 21.12) from the server, the client\r\n   SHOULD unicast any Request, Renew, Release, and Decline messages to\r\n   the server.\r\n\r\nAppendix B does not permit a Server Unicast option in a Reconfigure message.", "correct_text": "section 16:\r\n   A server MUST discard any Solicit, Confirm, or Rebind messages \r\n   it receives with a Layer 3 unicast destination address.\r\n\r\nsection 18.2:\r\n   If the client has a source address of sufficient scope that can be \r\n   used by the server as a return address and the client has received a \r\n   Server Unicast option (see Section 21.12) from the server, the client \r\n   SHOULD unicast any Request, Renew, Release, Decline, and Information-\r\n   request messages to the server.\r\n\r\nAppendix B permits a Server Unicast option in a Reconfigure message.", "notes": "Section 18.4 allows transmission of Information-request messages with a unicast destination address, if the client received a message with Server Unicast option. (See also https://mailarchive.ietf.org/arch/msg/dhcwg/x80cmfTN8fpRViiN_RHNXes-zVg/)\r\n\r\n-- Verifier note --\r\nAfter discussions inside the DHC WG (https://mailarchive.ietf.org/arch/msg/dhcwg/oNqBzT7CSOtoV7kQNLkJfSY_73E/), it appears that there is indeed an issue but as a RFC 8415-bis is probably coming and as the errata does not seem to be a couple of sentences to add/modify,  I am selecting 'hold for document update'", "submit_date": "2020-08-30", "submitter_name": "Felix Hamme", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2025-09-19 16:19:42"}, {"errata_id": "6270", "doc-id": "RFC7050", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4", "orig_text": "\"PTR\" query #2 for \"2001:db8:43::192.0.0.170", "correct_text": "\"PTR\" query #2 for \"2001:db8:43::192.0.0.171", "notes": "The second PTR query should be for the reverse of the DNS64 mapped well known address 192.0.0.171.  This looks like a cut-and-paste error where 170 was not changed to 171.\n --VERIFIER NOTES-- \nAfter discussion on Behave mailing list it appears that the example is not in contradiction with what the RFC specifies. There was some additional discussion around this for other potential improvements that should be considered in case the specification is revised. \r\n\r\nMail thread: https://mailarchive.ietf.org/arch/msg/behave/KuvD2ppb9LLD3LnzS-DJ7wVCgvc/", "submit_date": "2020-09-01", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Magnus Westerlund", "update_date": "2021-01-13 15:12:22"}, {"errata_id": "6271", "doc-id": "RFC8040", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.5", "orig_text": "   The \"insert\" (Section 4.8.5) and \"point\" (Section 4.8.6) query\r\n   parameters MUST be supported by the PUT method for data resources.\r\n   These parameters are only allowed if the list or leaf-list is\r\n   \"ordered-by user\".\r\n", "correct_text": "   The \"insert\" (Section 4.8.5) and \"point\" (Section 4.8.6) query\r\n   parameters MUST be supported by the PUT method for data resources.\r\n   These parameters are only allowed if the target resource is a\r\n   non-existent entry of an \"ordered-by user\" list or leaf-list.", "notes": "First, Section 3.5 (Data Resource) says that \"list\" and \"leaf-leaf\" are not a data resources:\r\n\r\n  A data resource represents a YANG data node that is a descendant node\r\n  of a datastore resource. Each YANG-defined data node can be uniquely\r\n  targeted by the request-line of an HTTP method. Containers, leafs,\r\n  leaf-list entries, list entries, anydata nodes, and anyxml nodes are\r\n  data resources.\r\n\r\nSecond, these query parameters only make sense when targeting a non-existent entry.   If the entry does not exist, then PUT is being used like a POST: to create and place an item in an ordered list.  However, if the entry exists, then PUT is being used to both replace the contents and (presumably) re-place the order in the list; but this doesn't make sense because:\r\n\r\n  1) \"insert\" defaults to \"last\".\r\n  2) there is no \"insert\" value to indicate \"keep existing placement\".\r\n  3) having to concoct valid \"insert\" and \"point\" values is hard.\r\n\r\nThus indiscriminate PUTs would move entries to the end, which can't be desired...\n --VERIFIER NOTES-- \nReplaced by errata 6277.", "submit_date": "2020-09-01", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:47:56"}, {"errata_id": "7303", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "This alert notifies the recipient that the sender will not send any more messages on this connection. ", "correct_text": "This alert notifies the recipient that the sender will not send any more messages on this connection. close_notify alerts should be sent with a severity level of WARNING.", "notes": "Apparently, TLS/1.0 specified these should be set to WARNING, not FATAL, but this text got lost somewhere along the way. https://github.com/pion/dtls/issues/195\r\n\r\nOpenSSL/NSS both send as WARNING, and servers that have tried sending as FATAL have encountered compatibility problems with clients which treat FATAL alerts differently than WARNING alerts: e.g. https://source.chromium.org/chromium/chromium/src/+/main:third_party/boringssl/src/ssl/tls_record.cc;l=591;drc=c0872c02015009bf3dbab0a83c0452d141e8e9cf?q=tls_open_record&ss=chromium%2Fchromium%2Fsrc\r\n\r\nPaul Wouters(AD): Resolved but with the following Corrected Text:\r\n\r\nclose_notify:  This alert notifies the recipient that the sender will not send any more messages on this connection.  Any data received after a closure alert has been received MUST be ignored. This alert MUST be sent with AlertLevel=warning.", "submit_date": "2023-01-12", "submitter_name": "Eric Lawrence", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-29 01:04:34"}, {"errata_id": "7301", "doc-id": "RFC8366", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "          \"The Authority Key Identifier OCTET STRING (as defined in\r\n           Section 4.2.1.1 of RFC 5280) from the pledge's IDevID\r\n", "correct_text": "          \"The Authority Key Identifier OCTET STRING (as defined in\r\n           Section 4.2.1.1 of [RFC5280]) from the pledge's IDevID\r\n", "notes": "The YANG module references RFC 5280 normatively, but the document does not include it as a normative reference.\r\n\r\nThis errata requires a new revision of the YANG module that cannot be done by an errata, hence moved to \"Held for Document Update\".  In the update, I would suggesting adding a reference statement to the YANG leaf and also a normative document reference to RFC 5280.", "submit_date": "2023-01-08", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 08:55:45"}, {"errata_id": "7288", "doc-id": "RFC8702", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "If absent, the SHAKE256 output length used in KMAC is \r\n32 or 64 bytes, respectively, \r\n", "correct_text": "If absent, the SHAKE128 or SHAKE256 output length \r\nused in KMAC is 32 or 64 bytes, respectively, \r\n", "notes": "The adverb 'Respectively' requires two parallel structures. SHAKE128=>32, SHAKE256=>64.", "submit_date": "2022-12-26", "submitter_name": "David Ireland", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:43:15"}, {"errata_id": "6279", "doc-id": "RFC7234", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.4", "orig_text": "A cache MUST NOT generate a stale response if it is prohibited by an\r\nexplicit in-protocol directive (e.g., by a \"no-store\" or \"no-cache\"\r\ncache directive, a \"must-revalidate\" cache-response-directive, or an\r\napplicable \"s-maxage\" or \"proxy-revalidate\" cache-response-directive;\r\nsee Section 5.2.2).\r\n\r\n", "correct_text": "A cache MUST NOT generate a stale response if it is prohibited by an\r\nexplicit in-protocol directive (e.g., by a \"no-cache\"\r\ncache directive, a \"must-revalidate\" cache-response-directive, or an\r\napplicable \"s-maxage\" or \"proxy-revalidate\" cache-response-directive;\r\nsee Section 5.2.2).", "notes": "The examples of directives that prohibit stale responses includes \"no-store\", but the definitions of \"no-store\" in 5.2.1.5 and 5.2.2.3 don't prohibit serving stale responses, and there is no other mention in RFC 7234 (or elsewhere) of \"no-store\" prohibiting serving stale responses.\r\n\r\nIf a \"no-store\" request directive is intended to prohibit serving stale responses, 5.2.1.5 should say so. (The question is meaningless for \"no-store\" response directives, since those should never be found in a cache.)", "submit_date": "2020-09-04", "submitter_name": "Todd Greer", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-04-29 09:54:16"}, {"errata_id": "6280", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.5.5.1.", "orig_text": "There is the following comment:\r\n\r\n* First, construct the chime list of tuples (p, type, edge) as\r\n* shown below, then sort the list by edge from lowest to\r\n* highest.\r\n\r\n", "correct_text": "There should be some statements to do the sorting since the comment mentions it. But there are no statements related to sorting in the following code. \r\n\r\nAnd I checked the NTP reference implementation. There is code to do the sorting at https://github.com/ntp-project/ntp/blob/71a962710bfe066f76da9679cf4cfdeffe34e95e/ntpd/ntp_proto.c#L2837\r\n", "notes": "From https://mailarchive.ietf.org/arch/msg/ntp/zJNoHvZ08SPX-3kwflMK7PIReFo/ :\r\n\r\n\"\"\"\r\n... correctly identifies the problem, but it doesn't provide the new\r\ntext. I'd suggest to add \"sort(s.m, n);\" right after the first while\r\nloop in A.5.5.1.\r\n\"\"\"", "submit_date": "2020-09-05", "submitter_name": "Jingguo Yao", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-09-26 00:29:52"}, {"errata_id": "6281", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "  At line 4, TCP A responds with an empty segment containing an ACK for\r\n  TCP B's SYN; and in line 5, TCP A sends some data.  Note that the\r\n  sequence number of the segment in line 5 is the same as in line 4\r\n  because the ACK does not occupy sequence number space (if it did, we\r\n  would wind up ACKing ACK's!).\r\n", "correct_text": "  At line 4, TCP A responds with an empty segment containing an ACK for\r\n  TCP B's SYN; and in line 5, TCP A sends some data.  Note that the\r\n  sequence number of the segment in line 5 is the same as in line 4\r\n  because the ACK does not occupy sequence number space (if it did, we\r\n  would wind up ACKing ACKs!).\r\n", "notes": "last line: \"ACK's\" -> \"ACKs\"", "submit_date": "2020-09-06", "submitter_name": "Merlin B\u00fcge", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-10-12 21:14:02"}, {"errata_id": "6282", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "  To avoid confusion we must prevent segments from one incarnation of a\r\n  connection from being used while the same sequence numbers may still\r\n  be present in the network from an earlier incarnation.  We want to\r\n  assure this, even if a TCP crashes and loses all knowledge of the\r\n  sequence numbers it has been using.  When new connections are created,\r\n  an initial sequence number (ISN) generator is employed which selects a\r\n  new 32 bit ISN.  The generator is bound to a (possibly fictitious) 32\r\n  bit clock whose low order bit is incremented roughly every 4\r\n  microseconds.  Thus, the ISN cycles approximately every 4.55 hours.\r\n  Since we assume that segments will stay in the network no more than\r\n  the Maximum Segment Lifetime (MSL) and that the MSL is less than 4.55\r\n  hours we can reasonably assume that ISN's will be unique.\r\n\r\n  For each connection there is a send sequence number and a receive\r\n  sequence number.  The initial send sequence number (ISS) is chosen by\r\n  the data sending TCP, and the initial receive sequence number (IRS) is\r\n  learned during the connection establishing procedure.\r\n\r\n  For a connection to be established or initialized, the two TCPs must\r\n  synchronize on each other's initial sequence numbers.  This is done in\r\n  an exchange of connection establishing segments carrying a control bit\r\n  called \"SYN\" (for synchronize) and the initial sequence numbers.  As a\r\n  shorthand, segments carrying the SYN bit are also called \"SYNs\".\r\n  Hence, the solution requires a suitable mechanism for picking an\r\n  initial sequence number and a slightly involved handshake to exchange\r\n  the ISN's.\r\n\r\n  The synchronization requires each side to send it's own initial\r\n  sequence number and to receive a confirmation of it in acknowledgment\r\n  from the other side.  Each side must also receive the other side's\r\n  initial sequence number and send a confirming acknowledgment.\r\n\r\n    1) A --> B  SYN my sequence number is X\r\n    2) A <-- B  ACK your sequence number is X\r\n    3) A <-- B  SYN my sequence number is Y\r\n    4) A --> B  ACK your sequence number is Y\r\n\r\n  Because steps 2 and 3 can be combined in a single message this is\r\n  called the three way (or three message) handshake.\r\n\r\n  A three way handshake is necessary because sequence numbers are not\r\n  tied to a global clock in the network, and TCPs may have different\r\n  mechanisms for picking the ISN's.  The receiver of the first SYN has\r\n  no way of knowing whether the segment was an old delayed one or not,\r\n  unless it remembers the last sequence number used on the connection\r\n  (which is not always possible), and so it must ask the sender to\r\n  verify this SYN.  The three way handshake and the advantages of a\r\n  clock-driven scheme are discussed in [3].\r\n", "correct_text": "  To avoid confusion we must prevent segments from one incarnation of a\r\n  connection from being used while the same sequence numbers may still\r\n  be present in the network from an earlier incarnation.  We want to\r\n  assure this, even if a TCP crashes and loses all knowledge of the\r\n  sequence numbers it has been using.  When new connections are created,\r\n  an initial sequence number (ISN) generator is employed which selects a\r\n  new 32 bit ISN.  The generator is bound to a (possibly fictitious) 32\r\n  bit clock whose low order bit is incremented roughly every 4\r\n  microseconds.  Thus, the ISN cycles approximately every 4.55 hours.\r\n  Since we assume that segments will stay in the network no more than\r\n  the Maximum Segment Lifetime (MSL) and that the MSL is less than 4.55\r\n  hours we can reasonably assume that ISNs will be unique.\r\n\r\n  For each connection there is a send sequence number and a receive\r\n  sequence number.  The initial send sequence number (ISS) is chosen by\r\n  the data sending TCP, and the initial receive sequence number (IRS) is\r\n  learned during the connection establishing procedure.\r\n\r\n  For a connection to be established or initialized, the two TCPs must\r\n  synchronize on each other's initial sequence numbers.  This is done in\r\n  an exchange of connection establishing segments carrying a control bit\r\n  called \"SYN\" (for synchronize) and the initial sequence numbers.  As a\r\n  shorthand, segments carrying the SYN bit are also called \"SYNs\".\r\n  Hence, the solution requires a suitable mechanism for picking an\r\n  initial sequence number and a slightly involved handshake to exchange\r\n  the ISNs.\r\n\r\n  The synchronization requires each side to send it's own initial\r\n  sequence number and to receive a confirmation of it in acknowledgment\r\n  from the other side.  Each side must also receive the other side's\r\n  initial sequence number and send a confirming acknowledgment.\r\n\r\n    1) A --> B  SYN my sequence number is X\r\n    2) A <-- B  ACK your sequence number is X\r\n    3) A <-- B  SYN my sequence number is Y\r\n    4) A --> B  ACK your sequence number is Y\r\n\r\n  Because steps 2 and 3 can be combined in a single message this is\r\n  called the three way (or three message) handshake.\r\n\r\n  A three way handshake is necessary because sequence numbers are not\r\n  tied to a global clock in the network, and TCPs may have different\r\n  mechanisms for picking the ISNs.  The receiver of the first SYN has\r\n  no way of knowing whether the segment was an old delayed one or not,\r\n  unless it remembers the last sequence number used on the connection\r\n  (which is not always possible), and so it must ask the sender to\r\n  verify this SYN.  The three way handshake and the advantages of a\r\n  clock-driven scheme are discussed in [3].\r\n", "notes": "The only change: s/ISN's/ISNs/g\r\n\"ISN's\" has three matches in the whole RFC, all of them in this section, and all matches refer to the plural form of ISN.\r\nISN stands for \"initial sequence number\".\r\nSorry for all the bulk text.", "submit_date": "2020-09-06", "submitter_name": "Merlin B\u00fcge", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-10-12 21:18:08"}, {"errata_id": "8996", "doc-id": "RFC9149", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "Servers MUST NOT send the \"ticket_request\" extension in any handshake message, including ServerHello or HelloRetryRequest messages. A client MUST abort the connection with an \"illegal_parameter\" alert if the \"ticket_request\" extension is present in any server handshake message.", "correct_text": "Servers MUST NOT send the \"ticket_request\" extension in any handshake message, including ServerHello or HelloRetryRequest messages. A client MUST abort the connection with an \"unsupported_extension\" alert if the \"ticket_request\" extension is present in any server handshake message.", "notes": "RFC 8446 defines the illegal_parameter alert as used when \"A field in the handshake was incorrect or inconsistent with other fields.  This alert is used for errors which conform to the formal protocol syntax but are otherwise incorrect.\", and the unsupported_extension alert as \"Sent by endpoints receiving any handshake message containing an extension known to be prohibited for inclusion in the given handshake message, or including any extensions in a ServerHello or Certificate not first offered in the corresponding ClientHello or CertificateRequest.\". \r\n\r\nThe unsupported_extension alert seems like a direct mapping to the condition described in Section 3 of RFC 9149: the client endpoint received a handshake message containing an extension that's known to be prohibited for inclusion in the given handshake message. In contrast it's harder to draw a straight-line justification for using illegal_parameter.", "submit_date": "2026-06-09", "submitter_name": "Daniel McCarney", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-10 18:17:33"}, {"errata_id": "6283", "doc-id": "RFC7672", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.2", "orig_text": "3.2.2.  DANE-TA(2) Name Checks\r\n\r\n   To match a server via a TLSA record with certificate usage\r\n   DANE-TA(2), the client MUST perform name checks to ensure that it has\r\n   reached the correct server.  In all DANE-TA(2) cases, the SMTP client\r\n   MUST employ the TLSA base domain as the primary reference identifier\r\n   for matching the server certificate.\r\n\r\n   TLSA records for MX hostnames:  If the TLSA base domain was obtained\r\n      indirectly via a \"secure\" MX lookup (including any CNAME-expanded\r\n      name of an MX hostname), then the original next-hop domain used in\r\n      the MX lookup MUST be included as a second reference identifier.\r\n      The CNAME-expanded original next-hop domain MUST be included as a\r\n      third reference identifier if different from the original next-hop\r\n      domain.  When the client MTA is employing DANE TLS security\r\n      despite \"insecure\" MX redirection, the MX hostname is the only\r\n      reference identifier.", "correct_text": "3.2.2.  DANE-TA(2) Name Checks\r\n\r\n   To match a server via a TLSA record with certificate usage\r\n   DANE-TA(2), the client MUST perform name checks to ensure that it has\r\n   reached the correct server.  In all DANE-TA(2) cases, the SMTP client\r\n   MUST employ the TLSA base domain as the primary reference identifier\r\n   for matching the server certificate.\r\n\r\n   TLSA records for MX hostnames:  If the TLSA base domain was obtained\r\n      indirectly via a \"secure\" MX lookup (including any CNAME-expanded\r\n      name of an MX hostname), then the original next-hop domain used in\r\n      the MX lookup MUST be included as a second reference identifier.\r\n      The CNAME-expanded original next-hop domain MUST be included as a\r\n      third reference identifier if different from the original next-hop\r\n      domain.  When the client MTA is employing DANE TLS security\r\n      despite \"insecure\" MX redirection, the TLSA base domain is the only\r\n      reference identifier.", "notes": "The first paragraph of 3.2.2 makes it clear that the TLSA base domain is the primary reference identifier in all cases.  The last sentence of the second paragraph inadvertently contradicts this  in the case the the TLSA base domain is a CNAME expansion of the input MX hostname.\r\n\r\nThe corrected text replaces \"... the MX hostname is the only reference identifier\" with \"... the TLSA base domain is the only reference identifier\".", "submit_date": "2020-09-08", "submitter_name": "Viktor Dukhovni", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 14:26:10"}, {"errata_id": "6284", "doc-id": "RFC2889", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.8.3", "orig_text": "This test MUST at a minimum be performed in a three-port\r\n   configuration in section 5.9.3.", "correct_text": "This test MUST at a minimum be performed in a three-port\r\n   configuration in section 5.7.3.", "notes": "I thought it means 5.7.3.\r\nIf so, the same incorrect link also happened at 5.8.2.\r\n\r\n\"It is recommended no to exceed the address caching capacity found in section 5.9\" should be \"It is recommended no to exceed the address caching capacity found in section 5.7\"", "submit_date": "2020-09-10", "submitter_name": "Su Yu Lung", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2020-09-10 22:59:58"}, {"errata_id": "6285", "doc-id": "RFC8461", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "sts-field-delim = *WSP \";\" *WSP", "correct_text": "sts-field-delim = \";\" *WSP", "notes": "The following text appears within the same section:\r\n\r\n> If multiple TXT records for \"_mta-sts\" are returned by the resolver, records that do not begin with \"v=STSv1;\" are discarded.\r\n\r\nThe current definition of sts-field-delim is incompatible with that instruction.  Either the instruction needs to be changed, a new delimiter needs to be defined that doesn't permit whitespace before the semicolon, or sts-field-delim needs to be modified.", "submit_date": "2020-09-10", "submitter_name": "Paul Buonopane", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6286", "doc-id": "RFC7432", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.3", "orig_text": "   route.  As described in Section 8.1.1, the route MUST carry an ESI\r\n   Label extended community with a valid ESI label.  The disposition PE\r\n", "correct_text": "   route.  As described in Section 8.2.1, the route MUST carry an ESI\r\n   Label extended community with a valid ESI label.  The disposition PE\r\n", "notes": "8.1.1 is ES route construction, 8.2.1 is the correct cross-ref for ES/EAD route construction.", "submit_date": "2020-09-11", "submitter_name": "Luc Andre Burdet", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-09-11 10:36:50"}, {"errata_id": "6293", "doc-id": "RFC3927", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "7.  Router Considerations\r\n\r\n   A router MUST NOT forward a packet with an IPv4 Link-Local source or\r\n   destination address, irrespective of the router's default route\r\n   configuration or routes obtained from dynamic routing protocols.\r\n\r\n   A router which receives a packet with an IPv4 Link-Local source or\r\n   destination address MUST NOT forward the packet.  This prevents\r\n   forwarding of packets back onto the network segment from which they\r\n   originated, or to any other segment.\r\n", "correct_text": "7.  Router Considerations\r\n\r\n   A router MUST NOT forward a packet with an IPv4 Link-Local \r\n   destination address, irrespective of the router's default route\r\n   configuration or routes obtained from dynamic routing protocols.\r\n\r\n   A router which receives a packet with an IPv4 Link-Local \r\n   destination address MUST NOT forward the packet.  This prevents\r\n   forwarding of packets back onto the network segment from which they\r\n   originated, or to any other segment.\r\n\r\n   A router MAY forward a packet with an IPv4 Link-Local source address if \r\n   the packet is an ICMP unreachable or ICMP time exceeded and the\r\n   destination address is not a link local address.", "notes": "Link-Local IPv4 addressing is these days also often used for router to router link local connections.\r\nAlthough the scope of the document is related to dynamic configuration of link local it makes statements not to forward packets for routers (not on the link local segment).\r\nOnce 169.254 addresses are used on router to router link local interfaces they might send back icmp unreachables for pmtu discovery or ttl expiration. In those cases the source IP might be a 169.254 of the routers link local router to router interface.\n --VERIFIER NOTES-- \nRejecting, per https://www.ietf.org/about/groups/iesg/statements/processing-rfc-errata/, as this appears to \"[propose] a change to the RFC that should be done by publishing a new RFC that replaces [or updates] the current RFC.\"\r\n\r\nAlso, as suggested by Eric Vyncke, consider whether any guidance from RFC 7404 is applicable (by analogy, from IPv6 to IPv4 link-local address usage).", "submit_date": "2020-09-22", "submitter_name": "Markus Hofmann", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2020-12-09 23:29:42"}, {"errata_id": "6294", "doc-id": "RFC5230", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "require \"vacation\";\r\nvacation :mime text:\r\nContent-Type: multipart/alternative; boundary=foo\r\n\r\n--foo\r\n\r\nI'm at the beach relaxing.  Mmmm, surf...\r\n\r\n--foo\r\nContent-Type: text/html; charset=us-ascii\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0//EN\"\r\n \"http://www.w3.org/TR/REC-html40/strict.dtd\">\r\n<HTML><HEAD><TITLE>How to relax</TITLE>\r\n<BASE HREF=\"http://home.example.com/pictures/\"></HEAD>\r\n<BODY><P>I'm at the <A HREF=\"beach.gif\">beach</A> relaxing.\r\nMmmm, <A HREF=\"ocean.gif\">surf</A>...\r\n</BODY></HTML>\r\n\r\n--foo--\r\n.", "correct_text": "require \"vacation\";\r\nvacation :mime text:\r\nContent-Type: multipart/alternative; boundary=foo\r\n\r\n--foo\r\n\r\nI'm at the beach relaxing.  Mmmm, surf...\r\n\r\n--foo\r\nContent-Type: text/html; charset=us-ascii\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0//EN\"\r\n \"http://www.w3.org/TR/REC-html40/strict.dtd\">\r\n<HTML><HEAD><TITLE>How to relax</TITLE>\r\n<BASE HREF=\"http://home.example.com/pictures/\"></HEAD>\r\n<BODY><P>I'm at the <A HREF=\"beach.gif\">beach</A> relaxing.\r\nMmmm, <A HREF=\"ocean.gif\">surf</A>...\r\n</BODY></HTML>\r\n\r\n--foo--\r\n.\r\n;", "notes": "The ';' terminating the vacation action command is missing.", "submit_date": "2020-09-22", "submitter_name": "Ken Murchison", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-10-08 13:10:25"}, {"errata_id": "6295", "doc-id": "RFC8520", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "For example, if one saw the line \"manufacturer\" : \"flobbidy.example.com\",\r\nthen all Things that registered with a MUD URL that contained flobbity.example.com in its authority section would match.", "correct_text": "For example, if one saw the line \"manufacturer\" : \"flobbity.example.com\",\r\nthen all Things that registered with a MUD URL that contained flobbity.example.com in its authority section would match.", "notes": "Taken at face value it implies somehow a MUD Manager knows about a relationship between two different names flobbidy.example.com and flobbity.example.com in an unexplained way, the correction removes this confusion.", "submit_date": "2020-09-23", "submitter_name": "Nick Lamb", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2020-09-24 10:53:32"}, {"errata_id": "6296", "doc-id": "RFC6428", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.7", "orig_text": "In coordinated mode, an implementation SHOULD NOT reset\r\nbfd.RemoteDiscr until it is exiting the DOWN state.", "correct_text": "In coordinated mode, an implementation SHOULD reset\r\nbfd.RemoteDiscr upon transitioning to the DOWN state, \r\ndue to period of a Detection Time passing without the\r\nreceipt of a valid, authenticated BFD packet from the\r\nremote system.", "notes": "This section seems to imply that when a BFD session, running in coordinated mode, experiences Control Detection Timer expiry, then it SHOULD retain the remote discriminator value *and* SHOULD also transmit the same value in Down packets.\r\nHowever, in the case when the remote system, configured in Passive role, has its discriminator gets changed (say, after a system reboot which had caused the Detection Timer expiry), it may reject these packets as the received Your Discriminator value is no longer valid for the current session.\r\nSo the BFD session would never come back to Up state.\r\n\r\nIn a second scenario (unrelated to above one), if the local system is configured in Passive role and experiences Control Detection Timer expiry, it may continue transmitting Down packets since the bfd.RemoteDiscr is not reset to zero.\n --VERIFIER NOTES-- \n   This should be addressed by the working group (e.g., updating or revising the RFC).", "submit_date": "2020-09-29", "submitter_name": "Sudipta Das", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 21:36:24"}, {"errata_id": "6298", "doc-id": "RFC8886", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1.1", "orig_text": "openssl ecparam -out privatekey.key -name prime256v1 -genkey", "correct_text": "openssl ecparam -out key.pem -name prime256v1 -genkey", "notes": "The rest of the appendix expects the name key.pem.", "submit_date": "2020-10-05", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 16:41:00"}, {"errata_id": "6299", "doc-id": "RFC8886", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.2.2", "orig_text": " openssl smime -encrypt -aes-256-cbc -in SN19842256.cfg \\\r\n -out SN19842256.enc \\ \r\n -outform PEM SN19842256.crt", "correct_text": "No corrected text, I think it requires more changes in the previous \r\ncommand.\r\n", "notes": "The command in the RFC fails with:\r\n\r\nError creating PKCS#7 structure\r\n140616744621440:error:21082096:PKCS7 routines:PKCS7_RECIP_INFO_set:encryption not supported for this key type:crypto/pkcs7/pk7_lib.c:487:\r\n140616744621440:error:21073078:PKCS7 routines:PKCS7_encrypt:error adding recipient:crypto/pkcs7/pk7_smime.c:458:\r\n\r\nA rapid glance in some online discussions seem to indicate that you cannot S/MIME encrypt with elliptic curves.\r\n\r\nWith RSA for the key, the command in the RFC works fine.", "submit_date": "2020-10-05", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6300", "doc-id": "RFC8886", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3.2", "orig_text": "   $ openssl smime -decrypt -in SN19842256.enc -inform pkcs7\\\r\n      -out config.cfg -inkey key.pem\r\n", "correct_text": "   $ openssl smime -decrypt -in SN19842256.enc -inform PEM\\\r\n      -out config.cfg -inkey key.pem\r\n", "notes": "Otherwise, OpenSSL fails with:\r\n\r\nsmime: Invalid format \"pkcs7\" for -inform\r\nsmime: Use -help for summary.", "submit_date": "2020-10-05", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 16:36:57"}, {"errata_id": "6301", "doc-id": "RFC8281", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "     <PCE-initiated-lsp-request> ::= (<PCE-initiated-lsp-instantiation>|\r\n                                      <PCE-initiated-lsp-deletion>)\r\n\r\n     <PCE-initiated-lsp-instantiation> ::= <SRP>\r\n                                           <LSP>\r\n                                           [<END-POINTS>]\r\n                                           <ERO>\r\n                                           [<attribute-list>]\r\n\r\n     <PCE-initiated-lsp-deletion> ::= <SRP>\r\n                                      <LSP>\r\n", "correct_text": "     <PCE-initiated-lsp-request> ::= (<PCE-initiated-lsp-instantiation>|\r\n                                      <PCE-initiated-lsp-deletion-or-reclamation>)\r\n\r\n     <PCE-initiated-lsp-instantiation> ::= <SRP>\r\n                                           <LSP>\r\n                                           [<END-POINTS>]\r\n                                           <ERO>\r\n                                           [<attribute-list>]\r\n\r\n     <PCE-initiated-lsp-deletion-or-reclamation> ::= <SRP>\r\n                                                     <LSP>\r\n", "notes": "Update needed to solve ambiguity for any extra object included after SRP and LSP objects in reclaim delegation request, which is coming from:\r\n\r\nhttps://tools.ietf.org/html/rfc8281#section-6\r\nA PCE (either the original or one of its backups) sends a PCInitiate\r\n   message that includes just the SRP and LSP objects and carries the\r\n   PLSP-ID of the LSP it wants to take control of.", "submit_date": "2020-10-06", "submitter_name": "Samuel Sidor", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2020-11-02 17:27:30"}, {"errata_id": "6302", "doc-id": "RFC2631", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.1.1", "orig_text": "3. Set N\u2019= L/1024\r\n", "correct_text": "3. Set N = L/1024", "notes": "The definition of N' is not used in the document. On line 19 of the algorithm, we have \"If counter < (4096 * N) then go to 8.\". Hence, either the definition on line 3 has to be N instead of N', or it should be N' instead of N on line 19.", "submit_date": "2020-10-07", "submitter_name": "Abdullah Talayhan", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-03-07 16:42:33"}, {"errata_id": "6303", "doc-id": "RFC8478", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.1.5", "orig_text": "The newest offset takes the lead in offset history, shifting others\r\nback (up to its previous place if it was already present).  This\r\nmeans that when Repeated_Offset1 (most recent) is used, history is\r\nunmodified.  When Repeated_Offset2 is used, it is swapped with\r\nRepeated_Offset1.  If any other offset is used, it becomes\r\nRepeated_Offset1, and the rest are shifted back by 1.", "correct_text": "The newest offset takes the lead in offset history, shifting others\r\nback (up to its previous place if the new offset is a repeat offset).\r\nThis means that when the new offset is a repeat offset referring to\r\nRepeated_Offset1 (most recent), history is unmodified.\r\nWhen the new offset is a repeat offset referring to Repeated_Offset2,\r\nit is swapped with Repeated_Offset1.  In any other situation, the new\r\noffset becomes Repeated_Offset1 and the rest are shifted back by 1.\r\n\r\nNote that if a non-repeat offset happens to match one of the\r\nRepeated_Offset values, it is treated just like any other non-repeat\r\noffset; all the Repeated_Offset values are shifted back by 1.\r\n\r\nThe following code demonstrates how an offset_value is decoded into\r\na NewOffset and the Repeated_Offset values are updated.\r\n\r\nif offset_value <= 3:\r\n    if literal_length == 0:\r\n        offset_value = offset_value + 1\r\n    if offset_value == 1:\r\n        NewOffset = Repeated_Offset1\r\n    elif offset_value == 2:\r\n        NewOffset = Repeated_Offset2\r\n        Repeated_Offset2 = Repeated_Offset1\r\n        Repeated_Offset1 = NewOffset\r\n    elif offset_value == 3:\r\n        NewOffset = Repeated_Offset3\r\n        Repeated_Offset3 = Repeated_Offset2\r\n        Repeated_Offset2 = Repeated_Offset1\r\n        Repeated_Offset1 = NewOffset\r\n    elif offset_value == 4:\r\n        NewOffset = Repeated_Offset1 - 1\r\n        if NewOffset == 0:\r\n            # corrupted input\r\n            NewOffset = 1\r\n        Repeated_Offset3 = Repeated_Offset2\r\n        Repeated_Offset2 = Repeated_Offset1\r\n        Repeated_Offset1 = NewOffset\r\nelif offset_value > 3:\r\n    NewOffset = offset_value - 3\r\n    Repeated_Offset3 = Repeated_Offset2\r\n    Repeated_Offset2 = Repeated_Offset1\r\n    Repeated_Offset1 = NewOffset", "notes": "Change the explanation of how Repeated_Offset values are updated in order to match the reference implementation. See https://github.com/facebook/zstd/issues/2346", "submit_date": "2020-10-07", "submitter_name": "Sean Bartell", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-10-08 21:08:15"}, {"errata_id": "6314", "doc-id": "RFC8176", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1.", "orig_text": "For context, the \"amr\" (Authentication Methods References) claim is\r\n   defined by Section 2 of the OpenID Connect Core 1.0 specification\r\n   [OpenID.Core] as follows:", "correct_text": "For context, the \"amr\" (Authentication Methods References) claim is\r\n   defined by Section 2 of the OpenID Connect Core 1.0 specification\r\n   [OpenID.Core] as follows:", "notes": "There is no text change but the link on \"Section 2\" points to section 2 in the same RFC rather than section 2 in the OpenID Connect Core 1.0 specification.\n --VERIFIER NOTES-- \nErrata reports are for reporting issues with the authoritative RFC version(s) as published by the RFC Editor.  RFC 8176 predates the usage of the \"v3 XML\" format, so the plain text version is the authoritative one, and thus questions of HTML links are irrelevant for it.", "submit_date": "2020-10-20", "submitter_name": "David Brossaard", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2020-10-20 16:21:44"}, {"errata_id": "6367", "doc-id": "RFC8650", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1.3", "orig_text": "A.1.3.  Deleting Dynamic Subscriptions\r\n\r\n   The following demonstrates deleting a subscription.  This\r\n   subscription may have been to either a stream or a datastore.\r\n\r\n   POST /restconf/operations\r\n        /ietf-subscribed-notifications:delete-subscription\r\n\r\n   {\r\n    \"delete-subscription\": {\r\n       \"id\": \"22\"\r\n    }\r\n   }\r\n", "correct_text": "A.1.3.  Deleting Dynamic Subscriptions\r\n\r\n   The following demonstrates deleting a subscription.  This\r\n   subscription may have been to either a stream or a datastore.\r\n\r\n   POST /restconf/operations\r\n        /ietf-subscribed-notifications:delete-subscription\r\n\r\n   {\r\n    \"ietf-subscribed-notifications:input\": {\r\n       \"id\": \"22\"\r\n    }\r\n   }\r\n", "notes": "Encoding of RPC input parameters should follow RFC 8040 section 3.6.1\r\n\r\nVerifier Notes: See this thread for discussion on the errata - https://mailarchive.ietf.org/arch/msg/netconf/NWKO0OdQMCAnsYvdlxeJutX1sVo/", "submit_date": "2020-12-24", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-02-04 19:53:49"}, {"errata_id": "6391", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   Duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:37:11"}, {"errata_id": "6307", "doc-id": "RFC7235", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "2.1.  Challenge and Response\r\n\r\n   HTTP provides a simple challenge-response authentication framework\r\n   that can be used by a server to challenge a client request and by a\r\n   client to provide authentication information.  It uses a case-\r\n   insensitive token as a means to identify the authentication scheme,\r\n   followed by additional information necessary for achieving\r\n   authentication via that scheme.  The latter can be either a comma-\r\n   separated list of parameters or a single sequence of characters\r\n   capable of holding base64-encoded information.\r\n\r\n   Authentication parameters are name=value pairs, where the name token\r\n   is matched case-insensitively, and each parameter name MUST only\r\n   occur once per challenge.\r\n\r\n     auth-scheme    = token\r\n\r\n     auth-param     = token BWS \"=\" BWS ( token / quoted-string )\r\n", "correct_text": "2.1.  Challenge and Response\r\n\r\n   HTTP provides a simple challenge-response authentication framework\r\n   that can be used by a server to challenge a client request and by a\r\n   client to provide authentication information.  It uses a case-\r\n   insensitive token as a means to identify the authentication scheme,\r\n   followed by additional information necessary for achieving\r\n   authentication via that scheme.  The latter can be either a comma-\r\n   separated list of parameters or a single sequence of characters\r\n   capable of holding base64-encoded information.\r\n\r\n   Authentication parameters are name=value pairs, where the name token\r\n   is matched case-insensitively, and each parameter name MUST only\r\n   occur once per challenge.\r\n\r\n     auth-scheme    = itoken\r\n\r\n     auth-param     = itoken BWS \"=\" BWS ( token / quoted-string )\r\n\r\nN.B. itoken is a restricted subset of token to ensure well defined case insensitivity.\r\n", "notes": "The general token specification allows many characters (including VCHAR) which means that case insensitivity is tricky to define. A more limited subset of token would be sensible, and the distinction between itoken and token is important in understanding the BNF, and matching that to the specification. The section above is a good example of the confusion that can arise, with 3 instances of token in the ABNF, but two of them are to be interpreted in a different way than the third occurence..\r\nConfusion causes incompatibility with NEGOTIATE being rejected by a system that implements the ABNF, but wrongly expects Negotiate.\r\nP.S. My 'corrected text' and my understanding of ABNF are incomplete. I crave assistance in forming a properly written definition of itoken to 'well define' the safe subset.\n --VERIFIER NOTES-- \n   The RFC says exactly what was intended, and changing that is beyond the scope of errata reports, and likely beyond the scope of the document.  If there's an issue to discuss for a future revision of the RFC, an issue can be filed here:\r\n  https://github.com/httpwg/http-core/issues/", "submit_date": "2020-10-15", "submitter_name": "Nick Cullen", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-10-19 04:06:55"}, {"errata_id": "6308", "doc-id": "RFC8881", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "18.32.3", "orig_text": "   *  The server MUST commit the data at a level at least as high as\r\n      that committed.\r\n", "correct_text": "   *  The server MUST commit the data at a level at least as high as\r\n      that requested.\r\n", "notes": "The meaning is probably obvious, but perhaps a MUST ought\r\nto be unambiguous?\r\n\r\n---\r\n\r\neditorial: also, the point above this one uses the word \"stronger\"\r\nwhere this point uses \"high\", both for the stability level.\r\n\r\nThe two lines should probably use the same word.", "submit_date": "2020-10-16", "submitter_name": "Calum Mackay", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6309", "doc-id": "RFC7540", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1", "orig_text": "      Receiving any frame other than HEADERS or PRIORITY on a stream in\r\n      this state MUST be treated as a connection error (Section 5.4.1)\r\n      of type PROTOCOL_ERROR.\r\n\r\n...and similar throughout the section", "correct_text": "      Receiving any frame defined in this document other than HEADERS\r\n      or PRIORITY on a stream in\r\n      this state MUST be treated as a connection error (Section 5.4.1)\r\n      of type PROTOCOL_ERROR.  Frames of unknown types are ignored.", "notes": "Discovered via Chrome's GREASE experiment and discussed on-list, but never filed that I can find.  The HTTP/2 RFC mandates tolerance of any unknown frame type, but also mandates rejection of frames which are not the few listed.  The conservative solution in current deployments is, of course, to restrict sending extension frame types to open (and half-closed (remote)) streams.  The text which should have been in the document to begin with, however, is that only frame types defined in the HTTP/2 specification were to be impacted by that restriction.\r\n\r\nThis is already stated in section 5.1:\r\n\r\n   In the absence of more specific guidance elsewhere in this document,\r\n   implementations SHOULD treat the receipt of a frame that is not\r\n   expressly permitted in the description of a state as a connection\r\n   error (Section 5.4.1) of type PROTOCOL_ERROR.  Note that PRIORITY can\r\n   be sent and received in any stream state.  Frames of unknown types\r\n   are ignored.\r\n\r\nHowever, it's unclear whether the \"any frame other than\" language is to be construed as \"more specific guidance.\"", "submit_date": "2020-10-19", "submitter_name": "Mike Bishop", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-10-27 23:04:48"}, {"errata_id": "6310", "doc-id": "RFC8521", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "RDAP responses that contain values described in this document MUST\r\n   indicate conformance with this specification by including an\r\n   rdapConformance [RFC7483] value of \"rdap_objectTag_level_0\".  The\r\n   information needed to register this value in the \"RDAP Extensions\"\r\n   registry is described in Section 5.2.\r\n\r\n   The following is an example rdapConformance structure with the\r\n   extension specified.\r\n\r\n             \"rdapConformance\" :\r\n             [\r\n               \"rdap_level_0\",\r\n               \"rdap_objectTag_level_0\"\r\n             ]", "correct_text": "RDAP responses that contain values described in this document MUST\r\n   indicate conformance with this specification by including an\r\n   rdapConformance [RFC7483] value of \"rdap_objectTag\".  The\r\n   information needed to register this value in the \"RDAP Extensions\"\r\n   registry is described in Section 5.2.\r\n\r\n   The following is an example rdapConformance structure with the\r\n   extension specified.\r\n\r\n             \"rdapConformance\" :\r\n             [\r\n               \"rdap_level_0\",\r\n               \"rdap_objectTag\"\r\n             ]", "notes": "The value of the rdapConformance tag MUST match the value in the IANA registry, which is \"rdap_objectTag\".", "submit_date": "2020-10-19", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 21:45:32"}, {"errata_id": "6323", "doc-id": "RFC6083", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1.1", "orig_text": "The maximum user message size is 2^14 bytes, which is the DTLS\r\n      limit.", "correct_text": "The maximum user message size is limited by the DTLS implementation.", "notes": "TLS and DTLS handshake messages can be quite large (in theory up to 2^24-1 bytes, in practice many kilobytes). \r\nSee https://datatracker.ietf.org/doc/draft-ietf-tls-dtls13/?include_text=1\r\nsection 3.3 as reference\n --VERIFIER NOTES-- \n   The citation in the note clearly refers to handshake messages, not application data records. RFC 4347 and draft-ietf-tls-dtls13 clearly state that the limit is 2^14.", "submit_date": "2020-11-04", "submitter_name": "Claudio Porfiri", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-11-06 16:54:28"}, {"errata_id": "6312", "doc-id": "RFC6763", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "On the other hand, there are cases where users wish to manage printers specifically, not to discover web pages in general, and it is good accommodate this.", "correct_text": "On the other hand, there are cases where users wish to manage printers specifically, not to discover web pages in general, and it is good to accommodate this.", "notes": "Per \"IESG Processing of RFC Errata for the IETF Stream\", trivial grammar error should be tagged as \"held for document update\".\r\nThank you for reporting.", "submit_date": "2020-10-20", "submitter_name": "Makarand Damle", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2020-10-20 06:26:18"}, {"errata_id": "6313", "doc-id": "RFC6512", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.1", "orig_text": "Since P1 has no root to PE2, PE1 needs to originate an mLDP message with a FEC element that identifies ASBR1 as the root.", "correct_text": "Since P1 has no route to PE2, PE1 needs to originate an mLDP message with a FEC element that identifies ASBR1 as the root.", "notes": "\"no root to PE2\" does not parse and looks as a typo. \r\nAnd it is quite clear from the context that \"no route to PE2\" is intended.", "submit_date": "2020-10-20", "submitter_name": "Alexander Vainshtein", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 22:09:27"}, {"errata_id": "6316", "doc-id": "RFC5545", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.8.5.1", "orig_text": "    Value Type:  The default value type for this property is DATE-TIME.\r\n       The value type can be set to DATE.\r\n", "correct_text": "    Value Type:  The default value type for this property is DATE-TIME.\r\n       The value type can be set to DATE.  This property MUST have the same\r\n       value type as the \"DTSTART\" property contained within the\r\n       recurring component.  Furthermore, this property MUST be specified\r\n       as a date with local time if and only if the \"DTSTART\" property\r\n       contained within the recurring component is specified as a date\r\n       with local time.\r\n", "notes": "EXDATE excludes a specific instance of a recurring event and therefore should have the same value type as DTSTART.  This is analogous to RECURRENCE-ID which overrides a specific instance and has the same value type as DTSTART.\r\n\r\nI will note however that there is iCalendar data in the wild with DTSTART;VALUE=DATE-TIME and EXDATE;VALUE=DATE.  If this errata is rejected as incorrect, then a new errata should be opened with additional text describing how EXDATE;VALUE=DATE is supposed to be handled when DTSTART;VALUE=DATE-TIME.  For instance, does EXDATE;VALUE=DATE exclude ALL instances of a FREQ=HOURLY recurrence on the given day?", "submit_date": "2020-10-22", "submitter_name": "Ken Murchison", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6317", "doc-id": "RFC8555", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.5.1", "orig_text": "The server is said to \"finalize\" the authorization when it has\r\ncompleted one of the validations.", "correct_text": "The server is said to \"finalize\" the authorization when it has\r\nsuccessfully completed one of the validations or failed all of\r\nthem.", "notes": "The current handling of failed challenges is ambiguous, or at least inefficient.\r\n\r\nTo get a certificate, a client creates an Order. The client then has to validate all Authorizations (\"authzs\"). For each Authorization, the client needs to successfully complete one of the offered Challenges. One successful Challenge is sufficient to validate the authz. However, currently in practice, one failed Challenge is sufficient to invalidate the authz, and thus the entire Order. To try another Challenge, the client then has to first deactivate the other Authorizations (expensive) and create a new Order (also expensive), then repeat the whole process, remembering what was already tried.\r\n\r\nIt is proposed that an Authorization MUST NOT be finalized until all possible challenges have failed. The client could then simply try the next Challenge. In other words, a single failed Challenge should not invalidate an authz; an authz should be \"pending\" until all offered challenges have failed or one has succeeded.\r\n\r\nThe spec should be clear that a single failed challenge is not sufficient to finalize an authz which has multiple possible challenges.\r\n\r\nACME servers see many, many failed validations. ACME clients need to keep more state. This change will speed up ACME transactions, lower costs for CAs, reduce code complexity, and make ACME more reliable on the whole.\r\n\r\nReal-world experience: https://github.com/mholt/acmez/commit/80adb6d5e64a3d36a56c58c66965b131ea366b8c\r\nMailing list discussion: https://mailarchive.ietf.org/arch/msg/acme/wIHaqikTCZ59zrWsUUus8lZ4VSg/", "submit_date": "2020-10-23", "submitter_name": "Matthew Holt", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-11 21:31:57"}, {"errata_id": "6318", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.6.1", "orig_text": "Type Low: 1 octet that defines the TLV Opcode; see TLV Definitions in\r\n   Section 3.", "correct_text": "Type Low: 1 octet that defines the TLV Opcode; see TLV Definitions in\r\n   Sections 6.7, 6.8, and 6.9.", "notes": "There are no TLV definitions in Section 3. The TLV Opcodes are defined in Sections 6.7, 6.8, 6.9.", "submit_date": "2020-10-24", "submitter_name": "Stanislav Asanov", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-10-24 22:21:31"}, {"errata_id": "6322", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.9.3.8.2.", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       0x07     |       Offset |         Next-Hop Address      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                                                               |\r\n   |                            (16 octets)                        |\r\n   |                               +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-|\r\n   |                               |       RID (Upper 2 byes)      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        RID (Upper 2 byes)     | Admin Tag (Upper 2 byes)      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Admin Tag (Upper 2 byes)      | Extern Protocol | Flags Field |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       0x07     |       Offset |         Next-Hop Address      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+                               |\r\n   |                                                               |\r\n   |                            (16 octets)                        |\r\n   |                               +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-|\r\n   |                               |       RID (Upper 2 bytes)     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        RID (Lower 2 bytes)    | Admin Tag (Upper 2 bytes)     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Admin Tag (Lower 2 bytes)     | Extern Protocol | Flags Field |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The subfield \"RID (Upper 2 bytes)\" is repeated in the AddPath with IPv6 Next Hop field, and there is no subfield for lower 2 bytes of RID. The same with \"Admin Tag (Upper 2 bytes)\" subfield. Typo in the word \"bytes\".", "submit_date": "2020-10-27", "submitter_name": "Stanislav Asanov", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-10-29 21:58:56"}, {"errata_id": "6334", "doc-id": "RFC8627", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.1.1", "orig_text": "        a=fmtp:98; repair-window=200000\r\n", "correct_text": "        a=fmtp:98 repair-window=200000\r\n", "notes": "The example has invalid syntax for the SDP \"fmtp\" attribute.", "submit_date": "2020-11-16", "submitter_name": "Jonathan Lennox", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6333", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.6 (PDF)", "orig_text": "     tchar          = \"!\" / \"#\" / \"$\" / \"%\" / \"&\" / \"\u2019\" / \"*\"\r\n                    / \"+\" / \"-\" / \".\" / \"^\" / \"_\" / \"\u2018\" / \"|\" / \"~\"", "correct_text": "     tchar          = \"!\" / \"#\" / \"$\" / \"%\" / \"&\" / \"'\" / \"*\"\r\n                    / \"+\" / \"-\" / \".\" / \"^\" / \"_\" / \"`\" / \"|\" / \"~\"", "notes": "The generated PDF contains misleading right and left quotes (U+8217 and U+8216), which are not ASCII characters. The text and html versions of the RFC have the correct apostrophe and grave accent characters (' and `).\n --VERIFIER NOTES-- \n   Errata reports only apply to the canonical version of the published RFCs; in this case, that's the rfc7230.txt file, not the generated PDF.", "submit_date": "2020-11-13", "submitter_name": "Jeff Brower", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-11-13 19:47:52"}, {"errata_id": "6328", "doc-id": "RFC5141", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.1 + AppB", "orig_text": "      docelement    = \":\" ( \"clause\" / \"figure\" / \"table\" / \"term\" ) \":\"\r\n                      elementnumber / elementrange\r\n                      *( \",\" elementnumber / elementrange )", "correct_text": "      docelement    = \":\" ( \"clause\" / \"figure\" / \"table\" / \"term\" ) \":\"\r\n                      ( elementnumber / elementrange )\r\n                      *( \",\" ( elementnumber / elementrange ) )", "notes": "In docelement, \"elementnumber / elementrange\" should be grouped in both places.\r\n", "submit_date": "2020-11-06", "submitter_name": "Jason Polis", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-11-10 15:30:48"}, {"errata_id": "6319", "doc-id": "RFC7997", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5", "orig_text": "   Table 3: A sample of legal passwords\r\n\r\n   +------------------------------------+------------------------------+\r\n   | # | Password                       | Notes                        |\r\n   +------------------------------------+------------------------------+\r\n   | 12| <correct horse battery staple> | ASCII space is allowed       |\r\n   +------------------------------------+------------------------------+\r\n   | 13| <Correct Horse Battery Staple> | Different from example 12    |\r\n   +------------------------------------+------------------------------+\r\n   | 14| <&#x3C0;&#xDF;&#xE5;>          | Non-ASCII letters are OK     |\r\n   |   |                                | (e.g., GREEK SMALL LETTER    |\r\n   |   |                                | PI, U+03C0)                  |\r\n   +------------------------------------+------------------------------+\r\n   | 15| <Jack of &#x2666;s>            | Symbols are OK (e.g., BLACK  |\r\n   |   |                                | DIAMOND SUIT, U+2666)        |\r\n   +------------------------------------+------------------------------+\r\n   | 16| <foo&#x1680;bar>               | OGHAM SPACE MARK, U+1680, is |\r\n   |   |                                | mapped to U+0020 and thus    |\r\n   |   |                                | the full string is mapped to |\r\n   |   |                                | <foo bar>                    |\r\n   +------------------------------------+------------------------------+\r\n\r\n   Preferred text:\r\n\r\n   Table 3: A sample of legal passwords\r\n\r\n   +------------------------------------+------------------------------+\r\n   | # | Password                       | Notes                        |\r\n   +------------------------------------+------------------------------+\r\n   | 12| <correct horse battery staple> | ASCII space is allowed       |\r\n   +------------------------------------+------------------------------+\r\n   | 13| <Correct Horse Battery Staple> | Different from example 12    |\r\n   +------------------------------------+------------------------------+\r\n   | 14| <(See PDF for non-ASCII        | Non-ASCII letters are OK     |\r\n   |   |   character string)>           | (e.g., GREEK SMALL LETTER    |\r\n   |   |                                | PI, U+03C0; LATIN SMALL      |\r\n   |   |                                | LETTER SHARP S, U+00DF; THAI |\r\n   |   |                                | DIGIT SEVEN, U+0E57)         |\r\n   +------------------------------------+------------------------------+\r\n   | 15| <Jack of (See PDF for non-     | Symbols are OK (e.g., BLACK  |\r\n   |   |  ASCII character string)s>     | DIAMOND SUIT, U+2666)        |\r\n   +------------------------------------+------------------------------+\r\n   | 16| <foo(See PDF for non-ASCII     | OGHAM SPACE MARK, U+1680, is |\r\n   |   |  character string)bar>         | mapped to U+0020 and thus    |\r\n   |   |                                | the full string is mapped to |\r\n   |   |                                | <foo bar>                    |\r\n   +------------------------------------+------------------------------+", "correct_text": "   Table 3: A sample of legal passwords\r\n\r\n   +------------------------------------+------------------------------+\r\n   | # | Password                       | Notes                        |\r\n   +------------------------------------+------------------------------+\r\n   | 12| <correct horse battery staple> | ASCII space is allowed       |\r\n   +------------------------------------+------------------------------+\r\n   | 13| <Correct Horse Battery Staple> | Different from example 12    |\r\n   +------------------------------------+------------------------------+\r\n   | 14| <&#x3C0;&#xDF;&#xE5;>          | Non-ASCII letters are OK     |\r\n   |   |                                | (e.g., GREEK SMALL LETTER    |\r\n   |   |                                | PI, U+03C0)                  |\r\n   +------------------------------------+------------------------------+\r\n   | 15| <Jack of &#x2666;s>            | Symbols are OK (e.g., BLACK  |\r\n   |   |                                | DIAMOND SUIT, U+2666)        |\r\n   +------------------------------------+------------------------------+\r\n   | 16| <foo&#x1680;bar>               | OGHAM SPACE MARK, U+1680, is |\r\n   |   |                                | mapped to U+0020 and thus    |\r\n   |   |                                | the full string is mapped to |\r\n   |   |                                | <foo bar>                    |\r\n   +------------------------------------+------------------------------+\r\n\r\n   Preferred text:\r\n\r\n   Table 3: A sample of legal passwords\r\n\r\n   +------------------------------------+------------------------------+\r\n   | # | Password                       | Notes                        |\r\n   +------------------------------------+------------------------------+\r\n   | 12| <correct horse battery staple> | ASCII space is allowed       |\r\n   +------------------------------------+------------------------------+\r\n   | 13| <Correct Horse Battery Staple> | Different from example 12    |\r\n   +------------------------------------+------------------------------+\r\n   | 14| <(See PDF for non-ASCII        | Non-ASCII letters are OK     |\r\n   |   |   character string)>           | (e.g., GREEK SMALL LETTER    |\r\n   |   |                                | PI, U+03C0; LATIN SMALL      |\r\n   |   |                                | LETTER SHARP S, U+00DF;      |\r\n   |   |                                | LATIN SMALL LETTER A WITH    |\r\n   |   |                                | RING ABOVE, U+00E5)          |\r\n   +------------------------------------+------------------------------+\r\n   | 15| <Jack of (See PDF for non-     | Symbols are OK (e.g., BLACK  |\r\n   |   |  ASCII character string)s>     | DIAMOND SUIT, U+2666)        |\r\n   +------------------------------------+------------------------------+\r\n   | 16| <foo(See PDF for non-ASCII     | OGHAM SPACE MARK, U+1680, is |\r\n   |   |  character string)bar>         | mapped to U+0020 and thus    |\r\n   |   |                                | the full string is mapped to |\r\n   |   |                                | <foo bar>                    |\r\n   +------------------------------------+------------------------------+", "notes": "Observe the #14 row of both tables:\r\n\r\nThe Notes column in the second table describes a different third Unicode code point than what appears in the Password column of the first table. As the first table is a direct excerpt from RFC7613, it should not be modified and so the second table should be corrected to contain a proper corresponding example.", "submit_date": "2020-10-26", "submitter_name": "David Paul", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2020-10-27 13:54:50"}, {"errata_id": "6320", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.9.3.8.1", "orig_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       0x07    |       Offset  | Next-Hop Addr. (Upper 2 bytes)|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | IPv4 Address (Lower 2 bytes)  |       RID (Upper 2 bytes)     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        RID (Upper 2 bytes)    | Admin Tag (Upper 2 bytes)     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Admin Tag (Upper 2 bytes)     |Extern Protocol| Flags Field   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "    0                   1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |       0x07    |       Offset  | Next-Hop Addr. (Upper 2 bytes)|\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Next-Hop Addr. (Lower 2 bytes)|       RID (Upper 2 bytes)     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |        RID (Lower 2 bytes)    | Admin Tag (Upper 2 bytes)     |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   | Admin Tag (Lower 2 bytes)     |Extern Protocol| Flags Field   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "1. There is no subfield named \"IPv4 Address\" in AddPath field. The label in the 5th and 6th octets of the AddPath field is a typo, and it should read \"Next-Hop Addr. (Lower 2 bytes)\".\r\n2. The subfield \"RID (Upper 2 bytes)\" is repeated in the AddPath field, and there is no subfield for lower 2 bytes of RID. The same with \"Admin Tag (Upper 2 bytes)\" subfield.", "submit_date": "2020-10-26", "submitter_name": "Stanislav Asanov", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2020-10-27 09:34:02"}, {"errata_id": "6351", "doc-id": "RFC6902", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "If the patch elements included a property \"previous\" that contained the original value in case of an operation such as \"remove\" for instance, it would be easy to create the reverse operation - \"add\". In that way the path elements can be used as audit records and it is easy to revert a path or even a part of a patch, so the document is back to a previous version. All you have to do is apply the reverse patch and also add those elements to the audit trail.\r\nIs this something to consider adding to this document or is it an implementation detail?\n --VERIFIER NOTES-- \n   This is a feature request, not an errata report, so it is rejected as an errata report.  The suggested feature should be discussed on an appropriate mailing list to see if there is interest in adding this feature.", "submit_date": "2020-12-09", "submitter_name": "Palle Cogburn", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-12-09 15:36:54"}, {"errata_id": "6352", "doc-id": "RFC8391", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "The WOTS+ signature and public key formats are formally defined using\r\nXDR [RFC4506] in order to provide an unambiguous, machine readable\r\ndefinition. ", "correct_text": "The WOTS+ signature and public key formats are defined in a syntax similar to XDR [RFC4506].", "notes": "The definition is not machine readable, e.g. github.com/stellar/xdrgen fails. \r\nReason:\r\n- some Identifiers contain \"/\" and \"-\", RFC4506 allows only letter, digits and underbars\r\n- some enum bodies end with  \",}\", RFC4506 requests \"}\" here\r\n- some discriminated union definitions have incomplete declarations in the case-spec, e.g. the union xmss_ots_signature refers to the wotsp-sha2_256 without giving a type. \r\n- The encoding of some unions in the reference implementation is different to the encoding specified in RFC4506. The 4-byte discriminant is missing.\r\n\r\n\r\nHold for document update.\r\n\r\nCFRG co-chair: Errata 6352 addresses XDR syntax alignment for WOTS+ format definitions in Appendix A of RFC 8391. While it does not impact cryptographic functionality, this adjustment clarifies encoding for automated implementations, benefiting future document versions.\r\nBas Westerbaan on CFRG list: changes the text, but doesn't propose to change the format.", "submit_date": "2020-12-09", "submitter_name": "Andreas Kretschmer", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:51:48"}, {"errata_id": "6353", "doc-id": "RFC8235", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2 and 3.2", "orig_text": "-- b -> check 1) A is a valid public key\r\nInformation Flows in Schnorr Identification Scheme over Finite Field\r\n\r\n-- b -> check 1) A is a valid public key\r\nInformation Flows in Schnorr Identification Scheme over Elliptic Curve\r\n\r\n", "correct_text": "-- r -> check 1) A is a valid public key\r\nInformation Flows in Schnorr Identification Scheme over Finite Field\r\n\r\n-- r -> check 1) A is a valid public key\r\nInformation Flows in Schnorr Identification Scheme over Elliptic Curve\r\n\r\n", "notes": "In both diagrams, in the third flow, what Alice sends to Bob should be r (not b). This is a typo, which should be clear from the context of the rest diagram and the main body text. Christoph Egger first informed me of this typo.", "submit_date": "2020-12-10", "submitter_name": "Feng Hao", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-06-01 19:54:54"}, {"errata_id": "8997", "doc-id": "RFC9861", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "...\r\n\r\n     KT128(M=ptn(17**6 bytes), C=`00`^0, 32):\r\n       `3C 39 07 82 A8 A4 E8 9F A6 36 7F 72 FE AA F1 32\r\n        55 C8 D9 58 78 48 1D 3C D8 CE 85 F5 8E 88 0A F8`\r\n\r\n     KT128(`00`^0, C=ptn(1 bytes), 32):\r\n       `FA B6 58 DB 63 E9 4A 24 61 88 BF 7A F6 9A 13 30\r\n        45 F4 6E E9 84 C5 6E 3C 33 28 CA AF 1A A1 A5 83`\r\n\r\n     KT128(`FF`, C=ptn(41 bytes), 32):\r\n       `D8 48 C5 06 8C ED 73 6F 44 62 15 9B 98 67 FD 4C\r\n        20 B8 08 AC C3 D5 BC 48 E0 B0 6B A0 A3 76 2E C4`\r\n\r\n     KT128(`FF FF FF`, C=ptn(41**2 bytes), 32):\r\n       `C3 89 E5 00 9A E5 71 20 85 4C 2E 8C 64 67 0A C0\r\n        13 58 CF 4C 1B AF 89 44 7A 72 42 34 DC 7C ED 74`\r\n\r\n     KT128(`FF FF FF FF FF FF FF`, C=ptn(41**3 bytes), 32):\r\n       `75 D2 F8 6A 2E 64 45 66 72 6B 4F BC FC 56 57 B9\r\n        DB CF 07 0C 7B 0D CA 06 45 0A B2 91 D7 44 3B CF`\r\n\r\n     KT128(M=ptn(8191 bytes), C=`00`^0, 32):\r\n       `1B 57 76 36 F7 23 64 3E 99 0C C7 D6 A6 59 83 74\r\n        36 FD 6A 10 36 26 60 0E B8 30 1C D1 DB E5 53 D6`\r\n\r\n...\r\n\r\n     KT256(M=ptn(17**6 bytes), C=`00`^0, 64):\r\n       `06 52 B7 40 D7 8C 5E 1F 7C 8D CC 17 77 09 73 82\r\n        76 8B 7F F3 8F 9A 7A 20 F2 9F 41 3B B1 B3 04 5B\r\n        31 A5 57 8F 56 8F 91 1E 09 CF 44 74 6D A8 42 24\r\n        A5 26 6E 96 A4 A5 35 E8 71 32 4E 4F 9C 70 04 DA`\r\n\r\n     KT256(`00`^0, C=ptn(1 bytes), 64):\r\n       `92 80 F5 CC 39 B5 4A 5A 59 4E C6 3D E0 BB 99 37\r\n        1E 46 09 D4 4B F8 45 C2 F5 B8 C3 16 D7 2B 15 98\r\n        11 F7 48 F2 3E 3F AB BE 5C 32 26 EC 96 C6 21 86\r\n        DF 2D 33 E9 DF 74 C5 06 9C EE CB B4 DD 10 EF F6`\r\n\r\n     KT256(`FF`, C=ptn(41 bytes), 64):\r\n       `47 EF 96 DD 61 6F 20 09 37 AA 78 47 E3 4E C2 FE\r\n        AE 80 87 E3 76 1D C0 F8 C1 A1 54 F5 1D C9 CC F8\r\n        45 D7 AD BC E5 7F F6 4B 63 97 22 C6 A1 67 2E 3B\r\n        F5 37 2D 87 E0 0A FF 89 BE 97 24 07 56 99 88 53`\r\n\r\n     KT256(`FF FF FF`, C=ptn(41**2 bytes), 64):\r\n       `3B 48 66 7A 50 51 C5 96 6C 53 C5 D4 2B 95 DE 45\r\n        1E 05 58 4E 78 06 E2 FB 76 5E DA 95 90 74 17 2C\r\n        B4 38 A9 E9 1D DE 33 7C 98 E9 C4 1B ED 94 C4 E0\r\n        AE F4 31 D0 B6 4E F2 32 4F 79 32 CA A6 F5 49 69`\r\n\r\n     KT256(`FF FF FF FF FF FF FF`, C=ptn(41**3 bytes), 64):\r\n       `E0 91 1C C0 00 25 E1 54 08 31 E2 66 D9 4A DD 9B\r\n        98 71 21 42 B8 0D 26 29 E6 43 AA C4 EF AF 5A 3A\r\n        30 A8 8C BF 4A C2 A9 1A 24 32 74 30 54 FB CC 98\r\n        97 67 0E 86 BA 8C EC 2F C2 AC E9 C9 66 36 97 24`\r\n\r\n     KT256(M=ptn(8191 bytes), C=`00`^0, 64):\r\n       `30 81 43 4D 93 A4 10 8D 8D 8A 33 05 B8 96 82 CE\r\n        BE DC 7C A4 EA 8A 3C E8 69 FB B7 3C BE 4A 58 EE\r\n        F6 F2 4D E3 8F FC 17 05 14 C7 0E 7A B2 D0 1F 03\r\n        81 26 16 E8 63 D7 69 AF B3 75 31 93 BA 04 5B 20`\r\n\r\n...", "correct_text": "...\r\n\r\n     KT128(M=ptn(17**6 bytes), C=`00`^0, 32):\r\n       `3C 39 07 82 A8 A4 E8 9F A6 36 7F 72 FE AA F1 32\r\n        55 C8 D9 58 78 48 1D 3C D8 CE 85 F5 8E 88 0A F8`\r\n\r\n     KT128(M=`00`^0, C=ptn(1 bytes), 32):\r\n       `FA B6 58 DB 63 E9 4A 24 61 88 BF 7A F6 9A 13 30\r\n        45 F4 6E E9 84 C5 6E 3C 33 28 CA AF 1A A1 A5 83`\r\n\r\n     KT128(M=`FF`, C=ptn(41 bytes), 32):\r\n       `D8 48 C5 06 8C ED 73 6F 44 62 15 9B 98 67 FD 4C\r\n        20 B8 08 AC C3 D5 BC 48 E0 B0 6B A0 A3 76 2E C4`\r\n\r\n     KT128(M=`FF FF FF`, C=ptn(41**2 bytes), 32):\r\n       `C3 89 E5 00 9A E5 71 20 85 4C 2E 8C 64 67 0A C0\r\n        13 58 CF 4C 1B AF 89 44 7A 72 42 34 DC 7C ED 74`\r\n\r\n     KT128(M=`FF FF FF FF FF FF FF`, C=ptn(41**3 bytes), 32):\r\n       `75 D2 F8 6A 2E 64 45 66 72 6B 4F BC FC 56 57 B9\r\n        DB CF 07 0C 7B 0D CA 06 45 0A B2 91 D7 44 3B CF`\r\n\r\n     KT128(M=ptn(8191 bytes), C=`00`^0, 32):\r\n       `1B 57 76 36 F7 23 64 3E 99 0C C7 D6 A6 59 83 74\r\n        36 FD 6A 10 36 26 60 0E B8 30 1C D1 DB E5 53 D6`\r\n\r\n...\r\n\r\n     KT256(M=ptn(17**6 bytes), C=`00`^0, 64):\r\n       `06 52 B7 40 D7 8C 5E 1F 7C 8D CC 17 77 09 73 82\r\n        76 8B 7F F3 8F 9A 7A 20 F2 9F 41 3B B1 B3 04 5B\r\n        31 A5 57 8F 56 8F 91 1E 09 CF 44 74 6D A8 42 24\r\n        A5 26 6E 96 A4 A5 35 E8 71 32 4E 4F 9C 70 04 DA`\r\n\r\n     KT256(M=`00`^0, C=ptn(1 bytes), 64):\r\n       `92 80 F5 CC 39 B5 4A 5A 59 4E C6 3D E0 BB 99 37\r\n        1E 46 09 D4 4B F8 45 C2 F5 B8 C3 16 D7 2B 15 98\r\n        11 F7 48 F2 3E 3F AB BE 5C 32 26 EC 96 C6 21 86\r\n        DF 2D 33 E9 DF 74 C5 06 9C EE CB B4 DD 10 EF F6`\r\n\r\n     KT256(M=`FF`, C=ptn(41 bytes), 64):\r\n       `47 EF 96 DD 61 6F 20 09 37 AA 78 47 E3 4E C2 FE\r\n        AE 80 87 E3 76 1D C0 F8 C1 A1 54 F5 1D C9 CC F8\r\n        45 D7 AD BC E5 7F F6 4B 63 97 22 C6 A1 67 2E 3B\r\n        F5 37 2D 87 E0 0A FF 89 BE 97 24 07 56 99 88 53`\r\n\r\n     KT256(M=`FF FF FF`, C=ptn(41**2 bytes), 64):\r\n       `3B 48 66 7A 50 51 C5 96 6C 53 C5 D4 2B 95 DE 45\r\n        1E 05 58 4E 78 06 E2 FB 76 5E DA 95 90 74 17 2C\r\n        B4 38 A9 E9 1D DE 33 7C 98 E9 C4 1B ED 94 C4 E0\r\n        AE F4 31 D0 B6 4E F2 32 4F 79 32 CA A6 F5 49 69`\r\n\r\n     KT256(M=`FF FF FF FF FF FF FF`, C=ptn(41**3 bytes), 64):\r\n       `E0 91 1C C0 00 25 E1 54 08 31 E2 66 D9 4A DD 9B\r\n        98 71 21 42 B8 0D 26 29 E6 43 AA C4 EF AF 5A 3A\r\n        30 A8 8C BF 4A C2 A9 1A 24 32 74 30 54 FB CC 98\r\n        97 67 0E 86 BA 8C EC 2F C2 AC E9 C9 66 36 97 24`\r\n\r\n     KT256(M=ptn(8191 bytes), C=`00`^0, 64):\r\n       `30 81 43 4D 93 A4 10 8D 8D 8A 33 05 B8 96 82 CE\r\n        BE DC 7C A4 EA 8A 3C E8 69 FB B7 3C BE 4A 58 EE\r\n        F6 F2 4D E3 8F FC 17 05 14 C7 0E 7A B2 D0 1F 03\r\n        81 26 16 E8 63 D7 69 AF B3 75 31 93 BA 04 5B 20`\r\n\r\n...", "notes": "Some of the KangarooTwelve test cases have inconsistently defined parameters. Most are \"<algorithm>(M=<message>, ...)\" but\u00a0KT128 tests 11-14 and KT256 tests 11-14 don't have the \"M=\" label. The argument is just positional, e.g. \"KT128(`00`^0, C=ptn(1 bytes), 32)\".", "submit_date": "2026-06-09", "submitter_name": "Nathaniel Yoon", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-10 18:17:45"}, {"errata_id": "7289", "doc-id": "RFC8366", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   This document only defines the voucher artifact, leaving it to other\r\n   documents to describe specialized protocols for accessing it.  Some\r\n   bootstrapping protocols using the voucher artifact defined in this\r\n   document include: [ZERO-TOUCH], [SECUREJOIN], and [KEYINFRA]).\r\n", "correct_text": "   This document only defines the voucher artifact, leaving it to other\r\n   documents to describe specialized protocols for accessing it.  Some\r\n   bootstrapping protocols using the voucher artifact defined in this\r\n   document include: [ZERO-TOUCH], [SECUREJOIN], and [KEYINFRA].\r\n", "notes": "Unnecessary parenthesis at the end.", "submit_date": "2022-12-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-01-06 21:50:06"}, {"errata_id": "6329", "doc-id": "RFC6090", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "F.1.", "orig_text": "     if P is (@,@),\r\n        R = Q\r\n     else if Q is (@,@),\r\n        R = P\r\n     else if P is not equal to Q and x1 is equal to x2,\r\n        R = (@,@)\r\n     else if P is not equal to Q and x1 is not equal to x2,\r\n        x3 = ((y2-y1)/(x2-x1))^2 - x1 - x2 mod p and\r\n        y3 = (x1-x3)*(y2-y1)/(x2-x1) - y1 mod p\r\n     else if P is equal to Q and y1 is equal to 0,\r\n        R = (@,@)\r\n     else    // P is equal to Q and y1 is not equal to 0\r\n        x3 = ((3*x1^2 + a)/(2*y1))^2 - 2*x1 mod p and\r\n        y3 = (x1-x3)*(3*x1^2 + a)/(2*y1) - y mod p.\r\n", "correct_text": "     if P is (@,@),\r\n        R = Q\r\n     else if Q is (@,@),\r\n        R = P\r\n     else if P is not equal to Q and x1 is equal to x2,\r\n        R = (@,@)\r\n     else if P is not equal to Q and x1 is not equal to x2,\r\n        x3 = ((y2-y1)/(x2-x1))^2 - x1 - x2 mod p and\r\n        y3 = (x1-x3)*(y2-y1)/(x2-x1) - y1 mod p\r\n     else if P is equal to Q and y1 is equal to 0,\r\n        R = (@,@)\r\n     else    // P is equal to Q and y1 is not equal to 0\r\n        x3 = ((3*x1^2 + a)/(2*y1))^2 - 2*x1 mod p and\r\n        y3 = (x1-x3)*(3*x1^2 + a)/(2*y1) - y1 mod p.\r\n", "notes": "In the last case in the pseudocode, there's a typo. It should be \"y1\" mod p instead of \"y mod p\".", "submit_date": "2020-11-06", "submitter_name": "Yannik Klubertanz", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6335", "doc-id": "RFC8627", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.1.2", "orig_text": "        a=fmtp:110; repair-window:200000\r\n", "correct_text": "        a=fmtp:110 repair-window:200000\r\n", "notes": "The example has invalid syntax for the SDP \"fmtp\" attribute.", "submit_date": "2020-11-16", "submitter_name": "Jonathan Lennox", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6336", "doc-id": "RFC8365", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1.5", "orig_text": "8.1.5.  DF Election\r\n...\r\n   EVI, normalized VIDs, and etc., as along the IDs are configured\r\n", "correct_text": "8.1.5.  DF Election\r\n...\r\n   EVI, normalized VIDs, and etc., as long as the IDs are configured\r\n", "notes": "Nit.\r\n=> as long as", "submit_date": "2020-11-16", "submitter_name": "Luc Andre Burdet", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2020-11-17 09:05:17"}, {"errata_id": "6337", "doc-id": "RFC8881", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "18.33.1", "orig_text": "struct gss_cb_handles4 {\r\n        rpc_gss_svc_t       gcbp_service; /* RFC 2203 */\r\n        gsshandle4_t        gcbp_handle_from_server;\r\n        gsshandle4_t        gcbp_handle_from_client;\r\n};", "correct_text": "struct gss_cb_handles4 {\r\n        rpc_gss_service_t   gcbp_service; /* RFC 2203 */\r\n        gsshandle4_t        gcbp_handle_from_server;\r\n        gsshandle4_t        gcbp_handle_from_client;\r\n};", "notes": "RFC 2203 (and its successors) do not define rpc_gss_svc_t. I believe the rpc_gss_service_t type was intended.", "submit_date": "2020-11-16", "submitter_name": "Charles Lever", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6354", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1.2.", "orig_text": "The field value consists of a single URI-reference.  When it has the\r\n   form of a relative reference ([RFC3986], Section 4.2), the final\r\n   value is computed by resolving it against the effective request URI\r\n   ([RFC3986], Section 5).\r\n\r\n   For 201 (Created) responses, the Location value refers to the primary\r\n   resource created by the request.  For 3xx (Redirection) responses,\r\n   the Location value refers to the preferred target resource for\r\n   automatically redirecting the request.\r\n\r\n   If the Location value provided in a 3xx (Redirection) response does\r\n   not have a fragment component, a user agent MUST process the\r\n   redirection as if the value inherits the fragment component of the\r\n   URI reference used to generate the request target (i.e., the\r\n   redirection inherits the original reference's fragment, if any).\r\n\r\n   For example, a GET request generated for the URI reference\r\n   \"http://www.example.org/~tim\" might result in a 303 (See Other)\r\n   response containing the header field:\r\n\r\n     Location: /People.html#tim\r\n\r\n   which suggests that the user agent redirect to\r\n   \"http://www.example.org/People.html#tim\"", "correct_text": "The field value consists of a single URI-reference. Relative forms are not allowed and MUST include the entire redirected URI, even if the base URL part has not changed.", "notes": "Relative URIs in Location redirect headers should not be allowed.\r\nAllowing relative URIs opens up, at best, inconsistent and poor implementations and interpretations, but more importantly it opens serious security holes.\r\nFor example, when the redirect emanates from a URL shortening service (e.g. bitly.com), an attacker can 'chain' multiple relative shortened URIs, effectively obfuscating the final and malicious site.\r\nIf security tools attempt to 'rebuild and resolve', this will have an impact on performance, and itself can be exploited by attackers by creating a circular redirect (this can of course be done with full URIs as well, but then a security monitoring tool can more easily detect such a scenario).\r\nYes, one would expect security tools to only redirect to a small maximum count (say 3), but in a Denial-of-Service attack, many of these can render a security monitoring tool impotent to other attacks happening in parallel.\r\nIn addition, unless *all* User-Agents (and there are a lot of them out there) interpret the relative URL absolutely consistently, this can lead to incorrect navigation at best, and such inconsistencies can be easily exploited by attackers at worst.\r\nAll in all, at a time when the industry is trying to make internet operations safer and more secure, allowing relative URLs does the opposite, and with little to no gain by allowing.\n --VERIFIER NOTES-- \n   The text says what the working group intended it to say, and this is not an erratum.  What's more, it accurately reflects real-world usage.\r\n\r\nThe place to discuss changes such as this proposal, to be considered for future updates, is the HTTP working group's mailing list; see <https://datatracker.ietf.org/wg/httpbis/about/>.", "submit_date": "2020-12-10", "submitter_name": "Peter Sturge", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-12-15 14:52:50"}, {"errata_id": "6355", "doc-id": "RFC2883", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "   The use of D-SACK allows the sender to detect some cases (e.g., when\r\n   no ACK packets have been lost) when a a Fast Retransmit was due to\r\n   packet reordering instead of packet loss.  This allows the TCP sender", "correct_text": "   The use of D-SACK allows the sender to detect some cases (e.g., when\r\n   no ACK packets have been lost) when a Fast Retransmit was due to\r\n   packet reordering instead of packet loss.  This allows the TCP sender", "notes": "redundant word", "submit_date": "2020-12-14", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2020-12-22 16:22:35"}, {"errata_id": "6356", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "(14) THEN TL <- TDL+(IHL*4)", "correct_text": "(14) THEN TL <- TDL+(IHL-Of-First-Fragment*4)", "notes": "IHL could be different between the first fragment and the rest. Only the first fragment's IHL is the same as the one in the original datagram before fragmentation\r\n\r\n--- Verifier note ---\r\nUpdated the type of errata to technical from editorial.\r\n\r\nSection 3.2 of RFC 791 clearly states that \"When fragmentation occurs, some options are copied, but others remain with the first fragment only.\" so IHL varies from fragment to fragment. Therefore when copying the IP header of the F=0 fragment (step 11) all options are rightfully copied and must be counted in the re-assembled fragment total length on step 14 as noted by Patrick Ni.", "submit_date": "2020-12-15", "submitter_name": "Patrick Ni", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-04 08:32:06"}, {"errata_id": "6394", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   Duplicate", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:34:49"}, {"errata_id": "8998", "doc-id": "RFC6376", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.7", "orig_text": "data-hash:  is the output from using the hash-alg algorithm, to hash\r\n               the header including the DKIM-Signature header, and the\r\n               body hash.", "correct_text": "data-hash:  is the output from using the hash-alg algorithm to hash\r\n               the headers including the DKIM-Signature header.", "notes": "The body hash is already included in the DKIM-Signature header and is not added to the hash algorithm input separately. Erratum 5252 already corrects the pseudocode description of data-hash; this corrects the corresponding prose description. I also added a couple of grammatical fixes.", "submit_date": "2026-06-09", "submitter_name": "Roman Donchenko", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-10 18:18:38"}, {"errata_id": "6338", "doc-id": "RFC7711", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "The POSH client MUST NOT cache results (reference or fingerprints)\r\nindefinitely.  If the source domain returns a reference, the POSH\r\nclient MUST use the lower of the two \"expires\" values when\r\ndetermining how long to cache results (i.e., if the reference\r\n\"expires\" value is lower than the fingerprints \"expires\" value, honor\r\nthe reference \"expires\" value).  Once the POSH client considers the\r\nresults stale, it needs to perform the entire POSH operation again,\r\nstarting with the HTTPS GET request to the source domain.  The POSH\r\nclient MAY use a lower value than any provided in the \"expires\"\r\nmember(s), or not cache results at all.", "correct_text": "Add the following:\r\n\r\nIf the source returns an invalid reference, the POSH client SHALL NOT cache the results (reference or fingerprint) and SHALL perform the entire POSH operation again whenever performing any further retry.", "notes": "If reference is lost (eg x509 certificate) and if POSH client does not refresh fingerprint then it fails until expiration of old fingerprints... which will prevent the client to access a service because of caching, although references was updated on source domain.", "submit_date": "2020-11-17", "submitter_name": "Bastien Lacoste", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6339", "doc-id": "RFC8031", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "The public keys are generated from this using the formula in\r\nSection 2:\r\n\r\npub_i = X25519(d_i, G) =\r\n             48 d5 dd d4 06 12 57 ba 16 6f a3 f9 bb db 74 f1\r\n             a4 e8 1c 08 93 84 fa 77 f7 90 70 9f 0d fb c7 66\r\n\r\npub_r = X25519(d_r, G) =\r\n             0b e7 c1 f5 aa d8 7d 7e 44 86 62 67 32 98 a4 43\r\n             47 8b 85 97 45 17 9e af 56 4c 79 c0 ef 6e ee 25\r\n\r\nAnd this is the value of the Key Exchange Data field in the Key\r\nExchange payload described in Section 3.1.  The shared value is\r\ncalculated as in Section 2:\r\n\r\nSHARED_SECRET = X25519(d_i, pub_r) = X25519(d_r, pub_i) =\r\n             c7 49 50 60 7a 12 32 7f-32 04 d9 4b 68 25 bf b0\r\n             68 b7 f8 31 9a 9e 37 08-ed 3d 43 ce 81 30 c9 50\r\n", "correct_text": "The public keys are generated from this using the formula in\r\nSection 2:\r\n\r\npub_i = X25519(d_i, G) =\r\n             a7 07 b3 bc 0f 37 56 fc 0a cf 33 55 85 c5 f7 7b\r\n             9f 29 ff a4 24 70 14 af 84 70 5b eb 50 46 26 29\r\n\r\npub_r = X25519(d_r, G) =\r\n             0e 57 7e 11 5d 6c 08 59 b8 51 36 d2 1b 1c fd 74\r\n             67 9f 91 14 61 1d 79 c6 81 ba d0 8a 7e 1f 0a 04\r\n\r\nAnd this is the value of the Key Exchange Data field in the Key\r\nExchange payload described in Section 3.1.  The shared value is\r\ncalculated as in Section 2:\r\n\r\nSHARED_SECRET = X25519(d_i, pub_r) = X25519(d_r, pub_i) =\r\n             d6 8d 8c ea fd 2c d3 ce 25 34 43 33 c8 9e 35 54\r\n             9e 0f c6 1a 98 87 39 34 b1 8a 18 70 f0 3a 17 0c\r\n", "notes": "The test vector values given both for the public keys and for the shared secret are wrong. It turns out that they were derived from the unchanged random input, instead of d_X. An explanation could be that a first text version did not include the fixing of the random bits and that after inserting the respective paragraph (introducing fixed_X and d_X), it was forgotten to update pub_X and SHARED_SECRET.\r\n\r\nPaul Wouters: endian issue mentioned in notes split into separate errata\n --VERIFIER NOTES-- \nPaul Wouters (AD): As per Tobias Brunner:\r\n\r\nThe original test vector works for us (verified with multiple X25519\r\nimplementations).  I think most of the confusion comes from the\r\ndifferent formatting of the values when compared to the test vectors in\r\nRFC 7749 (in particular d_i/r).\r\n\r\nIn the latter, the values are given as long hex strings.  It states:\r\n\r\n \"The inputs are generally given as 64 or 112 hexadecimal digits that\r\n  need to be decoded as 32 or 56 binary bytes before processing.\"\r\n\r\nSo these values are byte strings, i.e. each two hex digits simply\r\nrepresent a byte.  For the random_i/r, pub_i/r and SHARED_SECRET values\r\nin RFC 8031 this has been made a bit clearer by separating the\r\nindividual bytes.\r\n\r\nBut then there are the d_i and d_r values.  These are given as long hex\r\nstrings, however, unlike those in RFC 7749, they are not byte strings\r\nbut actually the numbers in base 16 after decoding the binary values\r\nfixed_i/r as little-endian.  Note that RFC 7749 also gives the decoded\r\nnumeric values of some of the inputs, but does so in base 10 thus\r\navoiding this confusion.\r\n\r\nSo in RFC 8031 it would have been clearer if these values were either\r\nprefixed with 0x:\r\n\r\nd_i = 0x549D5F4A460900E6D9F63F53586AD1DD8CEAF925739B78B676B4558630B41F70\r\nd_r = 0x4856A039B8F178E9A1550722DCEF01559ECDBA30E0D0ADDD600D295352645408\r\n\r\nor also given in base 10:\r\n\r\nd_i = 38272331938479145686941743521879072306\r\n      324697418955568337792079861743202082672\r\nd_r = 32719579781175365148694953981896303820\r\n      370069993938279311538545124444601603080\r\n", "submit_date": "2020-11-17", "submitter_name": "Christian Tschudin", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 17:54:24"}, {"errata_id": "6938", "doc-id": "RFC8013", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "Caution needs to be exercised on how low the resulting reported link MTU could be: for IPv4 packets, the minimum size is 64 octets [RFC791] and for IPv6 the minimum size is 1280 octets [RFC2460].", "correct_text": "Caution needs to be exercised on how low the resulting reported link MTU could be: for IPv4 the recommended minimum size is 576 octets [RFC1122] and for IPv6 the minimum size is 1280 octets [RFC2460].", "notes": "The original text mixed minimum packet size with minimum MTU size.", "submit_date": "2022-04-19", "submitter_name": "Pedro Tammela", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-04-20 11:01:28"}, {"errata_id": "6939", "doc-id": "RFC4090", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "To report whether bandwidth and/or node protection are provided as requested, we define two new flags in the RRO IPv4 sub-object.", "correct_text": "To report whether bandwidth and/or node protection are provided as requested, we define two new flags in the RRO IPv4 sub-object and RRO IPv6 sub-object.", "notes": "Forgotten IPv6 sub-object. The title of the section implies the usage of both versions of IP protocol. Later in this section (and the document), both sub-objects are also referred to.", "submit_date": "2022-04-20", "submitter_name": "Igor Malyushkin", "verifier_id": "", "verifier_name": "Andrew Alston", "update_date": "2022-05-26 13:45:22"}, {"errata_id": "6340", "doc-id": "RFC8427", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.3", "orig_text": "   o  rdataCNAME - A domain name\r\n\r\n   o  rdataDNAME - A domain name\r\n\r\n   o  rdataNS - A domain name\r\n\r\n   o  rdataPTR - A domain name\r\n\r\n   o  rdataTXT - A text value", "correct_text": "   o  rdataCNAME - A domain name\r\n\r\n   o  rdataDNAME - A domain name\r\n\r\n   o  rdataNS - A domain name\r\n\r\n   o  rdataPTR - A domain name\r\n\r\n   o  rdataTXT - An array of text values", "notes": "Errata 5438 (https://www.rfc-editor.org/errata/eid5438) correctly notes that \u201cA text value\u201d is an improper definition of TXT records\u2019 data; however, that errata incorrectly states that TXT record values are space-separated. While the individual character-strings in a TXT record may be represented as space-separated in an RFC-1035-style zone file, that\u2019s not germane to the RDATA itself.\n --VERIFIER NOTES-- \n   As this report is based on errata report 5438 and that report has been Rejected, this one is also.  They are both discussing a technical change to the document, outside the scope of an errata report.", "submit_date": "2020-11-19", "submitter_name": "Felipe Gasper", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-11-25 19:22:37"}, {"errata_id": "6344", "doc-id": "RFC3412", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.2", "orig_text": "The elements of procedure for the dispatching of PDUs depends on the\r\n   value of sendPduHandle.  If the value of sendPduHandle is <none>,\r\n   then this is a request or notification and the procedures specified\r\n   in Section 4.2.2.1 apply.  If the value of snmpPduHandle is not\r\n   <none>, then this is a response and the procedures specified in\r\n   Section 4.2.2.2 apply.", "correct_text": "The elements of procedure for the dispatching of PDUs depends on the\r\n   value of sendPduHandle.  If the value of sendPduHandle is <none>,\r\n   then this is a request or notification and the procedures specified\r\n   in Section 4.2.2.1 apply.  If the value of sendPduHandle is not\r\n   <none>, then this is a response and the procedures specified in\r\n   Section 4.2.2.2 apply.", "notes": "This seems to be a typo where the word \"snmpPduHandle\" should be \"sendPduHandle\".", "submit_date": "2020-11-30", "submitter_name": "Michel Albert", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 13:30:59"}, {"errata_id": "7290", "doc-id": "RFC4343", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "A scheme has been adopted for \"internationalized domain names\" and \"internationalized labels\" as described in [RFC3490, RFC3454, RFC3491, and RFC3492]. It makes most of [UNICODE] available through a separate application level transformation from internationalized domain name to DNS domain name and from DNS domain name to internationalized domain name. Any case insensitivity that internationalized domain names and labels have varies depending on the script and is handled entirely as part of the transformation described in [RFC3454] and [RFC3491], which should be seen for further details.", "correct_text": "A scheme has been adopted for \"internationalized domain name labels\" (and \"internationalized domain names\" (IDNs) more generally) as described in [RFC5890, RFC5891, RFC5893, RFC5894], and documents that update and clarify them. It makes selected [UNICODE] characters and code point sequences available through a separate application level transformation from internationalized domain name to DNS domain name and from DNS domain name to internationalized domain name. Because of ambiguities among possible definitions of case and case relationships once one moves beyond ASCII, the IDNA specifications prohibit characters that could be interpreted as \"upper case\", making discussions of case insensitivity irrelevant. See the documents cited for further details.", "notes": "In trying to research something else, I reread RFC 4343.  It still references IDNA2003 (RFC 3490ff) as the authority for IDNs and says a few things that are misleading, or worse, under IDNA2008.   In retrospect, RFC 5890 should have updated 4343 and adjusted the language of its Section 5.  The author of 5890 clearly screwed up (i.e., mea culpa) and the WG and broader IETF review, especially by DNS-related groups, did not catch the problem.   \r\n\r\nThe \"corrected\" text above is merely an example of how this might be remedied.  The issue is clearly (at least to me) one to be \"held for document update\" of either RFC 4343 or 5890 but it seems worth inserting a pointer into the errata list to warn those who might want to look for it.", "submit_date": "2022-12-26", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-06-01 15:46:41"}, {"errata_id": "6342", "doc-id": "RFC8040", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.6.1", "orig_text": "To replace just the \"year\" field in the \"album\" resource (instead of\r\nreplacing the entire resource with the PUT method), the client might\r\nsend a plain patch as follows:\r\nPATCH /restconf/data/example-jukebox:jukebox/\\\r\nlibrary/artist=Foo%20Fighters/album=Wasting%20Light HTTP/1.1\r\nHost: example.com\r\nIf-Match: \"b8389233a4c\"\r\nContent-Type: application/yang-data+xml\r\n<album xmlns=\"http://example.com/ns/example-jukebox\">\r\n<year>2011</year>\r\n</album>", "correct_text": "To replace just the \"year\" field in the \"album\" resource (instead of\r\nreplacing the entire resource with the PUT method), the client might\r\nsend a plain patch as follows:\r\nPATCH /restconf/data/example-jukebox:jukebox/\\\r\nlibrary/artist=Foo%20Fighters/album=Wasting%20Light HTTP/1.1\r\nHost: example.com\r\nIf-Match: \"b8389233a4c\"\r\nContent-Type: application/yang-data+xml\r\n<album xmlns=\"http://example.com/ns/example-jukebox\">\r\n<name>Wasting Light</name>\r\n<year>2011</year>\r\n</album>", "notes": "Missing key leaf value in the message-body (<name>Wasting Light</name>)\n --VERIFIER NOTES-- \nAs per this thread, https://mailarchive.ietf.org/arch/msg/netconf/ZlAQl3-YljG4tCDlrHP-PGb-KEY/  the consensus amongst the authors was that the RFC does not specify whether keys must be included in a YANG PATCH operation, and hence the default assumption is that they are not required.\r\n\r\nIt may be helpful for a a future revision of RESTCONF (or possibly YANG) to more explicitly state the required behaviour. ", "submit_date": "2020-11-22", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 14:01:44"}, {"errata_id": "6345", "doc-id": "RFC5804", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.6", "orig_text": "Examples:\r\n[\u2026]\r\n       C: Putscript \"mysievescript\" {110+}\r\n       C: require [\"fileinto\"];\r\n       C:\r\n       C: if envelope :contains \"to\" \"tmartin+sent\" {\r\n       C:   fileinto \"INBOX.sent\";\r\n       C: }\r\n       S: OK\r\n\r\n       C: Putscript \"myforwards\" {190+}\r\n       C: redirect \"111@example.net\";\r\n       C:\r\n       C: if size :under 10k {\r\n       C:     redirect \"mobile@cell.example.com\";\r\n       C: }\r\n       C:\r\n       C: if envelope :contains \"to\" \"tmartin+lists\" {\r\n       C:     redirect \"lists@groups.example.com\";\r\n       C: }\r\n       S: OK (WARNINGS) \"line 8: server redirect action\r\n               limit is 2, this redirect might be ignored\"", "correct_text": "Examples:\r\n[\u2026]\r\n       C: Putscript \"mysievescript\" {99+}\r\n       C: require [\"fileinto\"];\r\n       C:\r\n       C: if envelope :contains \"to\" \"tmartin+sent\" {\r\n       C:   fileinto \"INBOX.sent\";\r\n       C: }\r\n       C:\r\n       S: OK\r\n\r\n       C: Putscript \"myforwards\" {190+}\r\n       C: redirect \"111@example.net\";\r\n       C:\r\n       C: if size :under 10k {\r\n       C:     redirect \"mobile@cell.example.com\";\r\n       C: }\r\n       C:\r\n       C: if envelope :contains \"to\" \"tmartin+lists\" {\r\n       C:     redirect \"lists@groups.example.com\";\r\n       C: }\r\n       C:\r\n       S: OK (WARNINGS) \"line 8: server redirect action\r\n               limit is 2, this redirect might be ignored\"", "notes": "The octet count of the second example is wrong. Additionally, both the second and the third example should have an empty client line after the code like the first example. Otherwise, the octet count of the last example is also wrong.", "submit_date": "2020-11-30", "submitter_name": "Kaspar Etter", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:29:43"}, {"errata_id": "6348", "doc-id": "RFC8032", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "Compute h = H(ENC(R) || ENC(A) || M), and check the group\r\nequation [2^c * S] B = 2^c * R + [2^c * h] A in E.", "correct_text": "Compute h = H(ENC(R) || ENC(A) || M), and check the group\r\nequation [2^c * S] B = [2^c] R + [2^c * h] A in E.", "notes": "Section 2 uses a separate notation, [n]X, for point multiplication, so this operation should use the brackets.\r\n\r\n--VERIFIER NOTE--\r\nVerified. Section 2 defines [n]X notation for point multiplication. The term 2^c * R in Section 3.4 should use brackets [2^c] R for consistency.", "submit_date": "2020-12-02", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 17:44:04"}, {"errata_id": "6347", "doc-id": "RFC7322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.8.6.5", "orig_text": "   The following format is required when a reference to an erratum\r\n   report is necessary:\r\n\r\n      [ErrNumber]  RFC Errata, Erratum ID number, RFC number.\r\n\r\n      [Err1912]  RFC Errata, Erratum ID 1912, RFC 2978.\r\n", "correct_text": "   The following format is required when a reference to an errata\r\n   report is necessary:\r\n\r\n      [ErrNumber]  RFC Errata Report, EID number, RFC number.\r\n\r\n      [Err1912]  RFC Errata Report, EID 1912, RFC 2978.\r\n", "notes": "Errata reports are not errata.  Errata are in the original text.  Errata reports are reports that indicate the reporter believes to have detected errata; there may be no actual errata, or there may actually be multiple errata touched in one report.  As is, the reference is misleading. \r\n\r\nHowever, this hasn't lead to confusion so far and many published RFCs use the current format. As such this is noted as held for document update", "submit_date": "2020-12-01", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind (IAB chair)", "update_date": "2020-12-14 14:08:34"}, {"errata_id": "6349", "doc-id": "RFC5260", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "     require [\"date\", \"relational\", \"index\"];\r\n     if date :value \"gt\" :index 2 :zone \"-0500\" \"received\"\r\n             \"iso8601\" \"2007-02-26T09:00:00-05:00\",\r\n     { redirect \"aftercutoff@example.org\"; }\r\n", "correct_text": "     require [\"date\", \"relational\", \"index\"];\r\n     if date :value \"gt\" :index 2 :zone \"-0500\" \"received\"\r\n             \"iso8601\" \"2007-02-26T09:00:00-05:00\"\r\n     { redirect \"aftercutoff@example.org\"; }\r\n", "notes": "There is a stray comma at the end of the date test.", "submit_date": "2020-12-06", "submitter_name": "Ken Murchison", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:42:53"}, {"errata_id": "6350", "doc-id": "RFC1141", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Description", "orig_text": "ipptr->Checksum = (sum + (sum>>16)) /* add carry */", "correct_text": "ipptr->Checksum = (sum + (sum>>16)); /* add carry */", "notes": "There is a \";\" missing at the end of code line, before comments.", "submit_date": "2020-12-08", "submitter_name": "Shu Xiao", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-28 13:03:15"}, {"errata_id": "6357", "doc-id": "RFC5216", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   [3] Section 5 of BCP 86 [RFC3766] offers advice on the required RSA\r\n   or Diffie-Hellman (DH) module and Digital Signature Algorithm (DSA)\r\n   subgroup size in bits, for a given level of attack resistance in\r\n   bits.  For example, a 2048-bit RSA key is recommended to provide\r\n   128-bit equivalent key strength.  The National Institute of Standards\r\n   and Technology (NIST) also offers advice on appropriate key sizes in\r\n   [SP800-57].", "correct_text": "   [3] Section 5 of BCP 86 [RFC3766] offers advice on the required RSA\r\n   or Diffie-Hellman (DH) modulus and Digital Signature Algorithm (DSA)\r\n   subgroup size in bits, for a given level of attack resistance in\r\n   bits.  For example, a 2048-bit RSA key is recommended to provide\r\n   128-bit equivalent key strength.  The National Institute of Standards\r\n   and Technology (NIST) also offers advice on appropriate key sizes in\r\n   [SP800-57].", "notes": "RSA and DH computations are parameterized by their moduli, with singular \"modulus\" (not \"module\").", "submit_date": "2020-12-16", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-19 22:33:45"}, {"errata_id": "6359", "doc-id": "RFC5031", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2, 7.2", "orig_text": "In section 4.2:\r\n\r\nThe 'sos' service type describes emergency services requiring an\r\nimmediate response, typically offered by various branches of the\r\ngovernment or other public institutions.", "correct_text": "In section 4.2, add a reference:\r\n\r\nThe 'sos' service type describes emergency services requiring an\r\nimmediate response, typically offered by various branches of the\r\ngovernment or other public institutions. [IRC]\r\n\r\nIn section 7.2, add a reference:\r\n\r\n[IRC] Service Regulations annexed to the International Radiotelegraphic\r\nConvention, Berlin, 1906, section 6. a., article XVI.\r\nhttps://babel.hathitrust.org/cgi/pt?id=hvd.32044103239133&view=1up&seq=36\r\n", "notes": "The referenced section of the protocols of the convention is \"Ships in distress make use of the following signal: . . . - - - . . .  repeated at short intervals. ...\".\n --VERIFIER NOTES-- \n   Thanks for suggesting the reference, and it's interesting to have a source that shows where the \"sos\" term started.\r\n\r\nIt's not an error, though: the RFC is correct as published, and there was never an intent to cite a reference there.  So as an errata report, this is rejected... with encouragement for interested readers to look at the historic reference.", "submit_date": "2020-12-19", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2020-12-22 17:38:31"}, {"errata_id": "6360", "doc-id": "RFC7265", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "", "correct_text": "", "notes": "In RFC 5545, one of the allowable values for the VERSION property is a minimum version and a maximum version, separated by a semicolon (;).  The value type is TEXT.  When the jCal value is converted back to iCalendar, the text is subject to escape with a backslash.  This yields a result which is not valid for the VERSION property.\r\n\r\nExample:\r\n\r\n[ \"version\", {}, \"text\", \"2.0;2.9\" ]\r\n\r\nbecomes\r\n\r\nVERSION:2.0\\;2.9\r\n\r\nwhich is invalid because it contains the backslash.", "submit_date": "2020-12-20", "submitter_name": "Julian Cowley", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6361", "doc-id": "RFC4343", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "No \"case conversion\" or \"case folding\" is done during such output operations, thus \"preserving\" case.", "correct_text": "?", "notes": "Whose case is preserved? The case of the label in the DNS query or the case of the label in the DNS database? In other words, if there is a DNS record for ietf.org and I query IETF.org, should the DNS response say ietf.org or IETF.org? I would expect it's the former so that the DNS administrator can inform the DNS requester about the preferred capitalization but I can't figure this out on the basis of the RFC. Does output case preservation refer to something else? All I observe is that tools like dig return the latter when I run 'dig IETF.org'. Maybe an errata is not the right place to ask for clarification but given the name of the RFC, I would expect to find a clear answer to this question in the RFC.\r\n\r\n-- verifier note --\r\nAfter discussion with the RFC author and the errata author, the conclusion is that the RFC isn't wrong but is arguably unclear for some readers.", "submit_date": "2020-12-22", "submitter_name": "Kaspar Etter", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-04 13:41:29"}, {"errata_id": "8087", "doc-id": "RFC5753", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   -- From [CMS-AESCG]\r\n\r\n   id-aes128-CCM, id-aes192-CCM, id-aes256-CCM, CCMParameters\r\n   id-aes128-GCM, id-aes192-GCM, id-aes256-GCM, GCMParameters\r\n     FROM CMS-AES-CCM-and-AES-GCM\r\n       { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n         smime(16) modules(0) id-mod-cms-aes(32) }\r\n\r\n   ;", "correct_text": "   -- From [CMS-AESCG]\r\n\r\n   id-aes128-CCM, id-aes192-CCM, id-aes256-CCM, CCMParameters,\r\n   id-aes128-GCM, id-aes192-GCM, id-aes256-GCM, GCMParameters\r\n     FROM CMS-AES-CCM-and-AES-GCM\r\n       { iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n         smime(16) modules(0) id-mod-cms-aes(32) }\r\n\r\n   ;", "notes": "the missing comma after CCMParameters in the import statement is an ASN.1 syntax error", "submit_date": "2024-08-23", "submitter_name": "Stefan Grundmann", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-08-23 17:47:14"}, {"errata_id": "6366", "doc-id": "RFC8639", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.", "orig_text": "  feature subtree {\r\n    description\r\n      \"This feature indicates support for YANG subtree filtering.\";\r\n    reference\r\n      \"RFC 6241: Network Configuration Protocol (NETCONF),\r\n                 Section 6\";\r\n  }\r\n\r\n  feature supports-vrf {\r\n    description\r\n      \"This feature indicates that a publisher supports VRF\r\n       configuration for configured subscriptions.  VRF support for\r\n       dynamic subscriptions does not require this feature.\";\r\n    reference\r\n      \"RFC 8529: YANG Data Model for Network Instances,\r\n                 Section 6\";\r\n  }", "correct_text": "  feature subtree {\r\n    description\r\n      \"This feature indicates support for YANG subtree filtering.\";\r\n    reference\r\n      \"RFC 6241: Network Configuration Protocol (NETCONF),\r\n                 Section 6\";\r\n  }\r\n\r\n  feature supports-vrf {\r\n    description\r\n      \"This feature indicates that a publisher supports VRF\r\n       configuration for configured subscriptions.  VRF support for\r\n       dynamic subscriptions does not require this feature.\";\r\n    reference\r\n      \"RFC 8529: YANG Data Model for Network Instances,\r\n                 Section 6\";\r\n  }", "notes": "In the HTML version the two hyperlinks \"Section 6\" (for 'subtree' feature and for 'supports-vrf' feature) point to wrong RFCs.\n\n --VERIFIER NOTES-- \nThis is regarding the link generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc8639.txt).  ", "submit_date": "2020-12-24", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-01-19 19:22:56"}, {"errata_id": "6395", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:36:07"}, {"errata_id": "8999", "doc-id": "RFC9114", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.2.4", "orig_text": "An implementation MUST ignore any parameter with an identifier it does not understand.", "correct_text": "An implementation MUST ignore any parameter with an identifier it does not understand, except for reserved setting identifiers as specified in Section 7.2.4.1.", "notes": "Section 7.2.4 states that a receiver MUST ignore any SETTINGS parameter with an identifier it does not understand. However, Section 7.2.4.1 states that reserved setting identifiers (0x00, 0x02-0x05, which were defined in HTTP/2 but have no corresponding HTTP/3 setting) MUST NOT be sent, and their receipt MUST be treated as a connection error of type H3_SETTINGS_ERROR.\r\n\r\nThese two rules contradict each other for reserved identifiers: the general rule says \"ignore\", but the specific rule says \"treat as connection error\". A receiver that does not understand a reserved identifier would follow the general rule and ignore it, when it should actually treat it as a connection error.\r\n\r\nThe suggested fix adds an exception clause to the general rule, making it clear that the reserved identifier handling in Section 7.2.4.1 takes precedence.", "submit_date": "2026-06-10", "submitter_name": "zhangph", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-10 18:19:01"}, {"errata_id": "6362", "doc-id": "RFC8040", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3.", "orig_text": "   The client might request the response header fields for an XML\r\n   representation of a specific \"album\" resource:\r\n\r\n      GET /restconf/data/example-jukebox:jukebox/\\\r\n         library/artist=Foo%20Fighters/album=Wasting%20Light HTTP/1.1\r\n      Host: example.com\r\n      Accept: application/yang-data+xml\r\n\r\n   The server might respond as follows:\r\n\r\n      HTTP/1.1 200 OK\r\n      Date: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Server: example-server\r\n      Content-Type: application/yang-data+xml\r\n      Cache-Control: no-cache\r\n      ETag: \"a74eefc993a2b\"\r\n      Last-Modified: Thu, 26 Jan 2017 14:02:14 GMT", "correct_text": "   The client might request the response header fields for an XML\r\n   representation of a specific \"album\" resource:\r\n\r\n      GET /restconf/data/example-jukebox:jukebox/\\\r\n         library/artist=Foo%20Fighters/album=Wasting%20Light HTTP/1.1\r\n      Host: example.com\r\n      Accept: application/yang-data+xml\r\n\r\n   The server might respond as follows:\r\n\r\n      HTTP/1.1 200 OK\r\n      Date: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Server: example-server\r\n      Content-Type: application/yang-data+xml\r\n      Cache-Control: no-cache\r\n", "notes": "Removed the \"ETag\" and \"Last-Modified\" header fields.\r\n\r\nAccording to Appendix B.3.1. :\r\n   To retrieve only the configuration child resources, the \"content\"\r\n   parameter is set to \"config\".  Note that the \"ETag\" and\r\n   \"Last-Modified\" headers are only returned if the \"content\" parameter\r\n   value is \"config\".\n --VERIFIER NOTES-- \nThis has been discussed at: https://mailarchive.ietf.org/arch/msg/netconf/SIpDoR7W8_na_USDHdMApjW6Wu8/\r\n\r\nThe example is not incorrect because an ETag and Last-Modified header are allowed to be returned if no content parameter has been specified, but only apply to the configuration data.\r\n\r\nNote, the referenced text in Appendix B.3.1 (Note that the \"ETag\" and\r\n\"Last-Modified\" headers are only returned if the \"content\" parameter\r\nvalue is \"config\") looks to be incorrect and should be removed or clarified in a future revision of the protocol.", "submit_date": "2020-12-22", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 14:27:35"}, {"errata_id": "6363", "doc-id": "RFC8040", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.8.2.", "orig_text": "   By default, the server will include all sub-resources within a\r\n   retrieved resource that have the same resource type as the requested\r\n   resource.  The exception is the datastore resource.  If this resource\r\n   type is retrieved, then by default the datastore and all child data\r\n   resources are returned.", "correct_text": "   By default, the server SHOULD include all sub-resources within a\r\n   retrieved resource that have the same resource type as the requested\r\n   resource.  The exception is the datastore resource.  If this resource\r\n   type is retrieved, then by default the datastore and all child data\r\n   resources are returned.", "notes": "Substitute \"will\" by \"SHOULD\".\r\n\r\nUse one of the keywords of RFC2119 to clarify the expected server behavior.\n --VERIFIER NOTES-- \nThe existing text is correct, and could probably be read equivalently to \"the server MUST include\".  Changing \"will\" to \"SHOULD\" would change the meaning of the specification by giving flexibility for servers to not return sub-resources and yet still be compliant.", "submit_date": "2020-12-22", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 13:49:29"}, {"errata_id": "6364", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.4", "orig_text": "   wildcard (optional, boolean):  This field MUST be present and true\r\n      for authorizations created as a result of a newOrder request\r\n      containing a DNS identifier with a value that was a wildcard\r\n      domain name.  For other authorizations, it MUST be absent.\r\n      Wildcard domain names are described in Section 7.1.3.", "correct_text": "   wildcard (optional, boolean):  This field MUST be present and true\r\n      for authorizations created as a result of a newOrder request\r\n      containing a DNS identifier with a value that was a wildcard\r\n      domain name.  For other authorizations, it MUST be absent or\r\n      false.  For pre-authorizations, it MUST be absent or false.\r\n      Wildcard domain names are described in Section 7.1.3.", "notes": "This section states that the wildcard field must be absent for other authorizations, but the example in this section has an explicitly set wildcard field with value false. The proposed change allows both options, either omitting it or explicitly setting it to false. Also a sentence has been added to explicitly describe the behavior for pre-authorizations.", "submit_date": "2020-12-23", "submitter_name": "Evangelos Karatsiolis", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-03-22 14:57:21"}, {"errata_id": "6396", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:39:28"}, {"errata_id": "6397", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:36:51"}, {"errata_id": "6398", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:37:33"}, {"errata_id": "6369", "doc-id": "RFC8650", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.2.1", "orig_text": "A.2.1.  \"subscription-modified\"\r\n\r\n   A \"subscription-modified\" encoded in JSON would look like:\r\n\r\n   {\r\n     \"ietf-restconf:notification\" : {\r\n       \"eventTime\": \"2007-09-01T10:00:00Z\",\r\n       \"ietf-subscribed-notifications:subscription-modified\": {\r\n         \"id\": 39,\r\n         \"uri\": \"https://example.com/restconf/subscriptions/22\"\r\n         \"stream-xpath-filter\": \"/example-module:foo\",\r\n         \"stream\": {\r\n            \"ietf-netconf-subscribed-notifications\" : \"NETCONF\"\r\n         }\r\n       }\r\n     }\r\n   }", "correct_text": "A.2.1.  \"subscription-modified\"\r\n\r\n   A \"subscription-modified\" encoded in JSON would look like:\r\n\r\n   {\r\n     \"ietf-restconf:notification\" : {\r\n       \"eventTime\": \"2007-09-01T10:00:00Z\",\r\n       \"ietf-subscribed-notifications:subscription-modified\": {\r\n         \"id\": 39,\r\n         \"uri\": \"https://example.com/restconf/subscriptions/39\"\r\n         \"stream-xpath-filter\": \"/example-module:foo\",\r\n         \"stream\": {\r\n            \"ietf-netconf-subscribed-notifications\" : \"NETCONF\"\r\n         }\r\n       }\r\n     }\r\n   }", "notes": "Change the URI to match the ID.", "submit_date": "2020-12-24", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 16:33:06"}, {"errata_id": "6370", "doc-id": "RFC8304", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   GET_ECN:  The GET_ECN primitive is a network-layer function that\r\n      returns the value of the ECN field in the IP header of a received\r\n      UDP datagram.  Section 3.1.5 of [RFC8085] states that a UDP\r\n      receiver \"MUST check the ECN field at the receiver for each UDP\r\n      datagram that it receives on this port\", requiring the UDP\r\n      receiver API to pass the received ECN field up to the application\r\n      layer to enable appropriate congestion feedback.", "correct_text": "   GET_ECN:  The GET_ECN primitive is a network-layer function that\r\n      returns the value of the ECN field in the IP header of a received\r\n      UDP datagram.  Section 3.1.7 of [RFC8085] states that a UDP\r\n      receiver \"MUST check the ECN field at the receiver for each UDP\r\n      datagram that it receives on this port\", requiring the UDP\r\n      receiver API to pass the received ECN field up to the application\r\n      layer to enable appropriate congestion feedback.", "notes": "Incorrect reference to RFC 8085", "submit_date": "2020-12-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:42:38"}, {"errata_id": "6371", "doc-id": "RFC8304", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   ERROR_REPORT:  The ERROR_REPORT event informs an application of \"soft\r\n      errors\", including the arrival of an ICMP or ICMPv6 error message.\r\n      Section 4.1.4 of the requirements for Internet hosts [RFC1122]\r\n      states that \"UDP MUST pass to the application layer all ICMP error\r\n      messages that it receives from the IP layer.\"  For example, this\r\n      event is required to implement ICMP-based Path MTU Discovery\r\n      [RFC1191] [RFC8201].  UDP applications must perform a CONNECT to\r\n      receive ICMP errors.\r\n", "correct_text": "   ERROR_REPORT:  The ERROR_REPORT event informs an application of \"soft\r\n      errors\", including the arrival of an ICMP or ICMPv6 error message.\r\n      Section 4.1.3.3 of the requirements for Internet hosts [RFC1122]\r\n      states that \"UDP MUST pass to the application layer all ICMP error\r\n      messages that it receives from the IP layer.\"  For example, this\r\n      event is required to implement ICMP-based Path MTU Discovery\r\n      [RFC1191] [RFC8201].  UDP applications must perform a CONNECT to\r\n      receive ICMP errors.\r\n", "notes": "Incorrect reference to RFC 1122", "submit_date": "2020-12-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:47:13"}, {"errata_id": "6372", "doc-id": "RFC8894", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.3", "orig_text": "   The messageData for this type consists of an\r\n   IssuerAndSubject:\r\n\r\n   issuerAndSubject ::= SEQUENCE {\r\n       issuer     Name,\r\n       subject    Name\r\n       }\r\n", "correct_text": "   The messageData for this type consists of an\r\n   IssuerAndSubject:\r\n\r\n   IssuerAndSubject ::= SEQUENCE {\r\n       issuer     Name,\r\n       subject    Name\r\n       }", "notes": "For the ASN.1 to compile properly, the definition must begin with a capital letter.", "submit_date": "2020-12-28", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-19 22:22:36"}, {"errata_id": "6373", "doc-id": "RFC8303", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  SET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Set_TTL' and 'Set_IPV6_Unicast_Hops'\r\n\r\n      Parameters: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to change the IPv4 TTL of\r\n      IPv6 Hop Count value for outgoing UDP(-Lite) datagrams.\r\n\r\n", "correct_text": "   o  SET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Set_TTL' and 'Set_IPV6_Unicast_Hops'\r\n\r\n      Parameters: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to change the IPv4 TTL or\r\n      IPv6 Hop Count value for outgoing UDP(-Lite) datagrams.\r\n\r\n", "notes": "typo: of instead or", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:32:50"}, {"errata_id": "6374", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:37:52"}, {"errata_id": "6386", "doc-id": "RFC3461", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   NOTE: Although RFC 822 ABNF is used to describe the syntax of these\r\n   parameters, they are not, in the language of that document,\r\n   \"structured field bodies\".  Therefore, while parentheses MAY appear\r\n   within an emstp-value, they are not recognized as comment delimiters.", "correct_text": "   NOTE: Although RFC 822 ABNF is used to describe the syntax of these\r\n   parameters, they are not, in the language of that document,\r\n   \"structured field bodies\".  Therefore, while parentheses MAY appear\r\n   within an esmtp-value, they are not recognized as comment delimiters.", "notes": "\"emstp-value\" should be \"esmtp-value\"", "submit_date": "2021-01-14", "submitter_name": "Mark Johnston", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-01-14 22:14:35"}, {"errata_id": "6399", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:40:01"}, {"errata_id": "6387", "doc-id": "RFC7991", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.48", "orig_text": "   When rendered, source code is always shown in a monospace font.  When\r\n   <sourcecode> is a child of <figure> or <section>, it provides full\r\n   control of horizontal whitespace and line breaks.  When formatted, it\r\n   is indented relative to the left margin of the enclosing element.  It\r\n   is thus useful for source code and formal languages (such as ABNF\r\n   [RFC5234] or the RNC notation used in this document).  (When\r\n   <sourcecode> is a child of other elements, it flows with the text\r\n   that surrounds it.)  Tab characters (U+0009) inside of this element\r\n   are prohibited.", "correct_text": "   When rendered, source code is always shown in a monospace font. \r\n   Furthermore, it provides full\r\n   control of horizontal whitespace and line breaks.\r\n   Tab characters (U+0009) inside of this element\r\n   are prohibited.", "notes": "The text hints at uses of <sourcecode> as inline element, but the grammar does not allow any such use.", "submit_date": "2021-01-18", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewiind (IAB Chair)", "update_date": "2021-02-04 18:53:57"}, {"errata_id": "6388", "doc-id": "RFC2408", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.6.1", "orig_text": "Proof can be provided by encrypting known data in the secret session key during the protocol echange.", "correct_text": "Proof can be provided by encrypting known data in the secret session key during the protocol exchange.", "notes": "", "submit_date": "2021-01-19", "submitter_name": "Sasikumar Mani", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-10 23:44:12"}, {"errata_id": "6389", "doc-id": "RFC8287", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "5.2.  IPv6 IGP-Prefix Segment ID\r\n\r\n   The IPv6 IGP-Prefix Segment ID is defined in [SR].  The format is as\r\n   specified below:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                                                               |\r\n     |                         IPv6 Prefix                           |\r\n     |                                                               |\r\n     |                                                               |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |Prefix Length  |    Protocol   |              Reserved         |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   IPv6 Prefix\r\n\r\n      This field carries the IPv6 prefix to which the Segment ID is\r\n      assigned.  In case of an Anycast Segment ID, this field will carry\r\n      the IPv4 Anycast address.", "correct_text": "5.2.  IPv6 IGP-Prefix Segment ID\r\n\r\n   The IPv6 IGP-Prefix Segment ID is defined in [SR].  The format is as\r\n   specified below:\r\n\r\n      0                   1                   2                   3\r\n      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |                                                               |\r\n     |                         IPv6 Prefix                           |\r\n     |                                                               |\r\n     |                                                               |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n     |Prefix Length  |    Protocol   |              Reserved         |\r\n     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   IPv6 Prefix\r\n\r\n      This field carries the IPv6 prefix to which the Segment ID is\r\n      assigned.  In case of an Anycast Segment ID, this field will carry\r\n      the IPv6 Anycast address.", "notes": "Copy-pasta reusing the IPv4 IGP-Prefix Segment ID description for the IPv6 IGP-Prefix Segment ID description, and in the case of an IPv6 Anycast Segment ID it states that an IPv4 prefix should be entered into the IPv6 Prefix field.", "submit_date": "2021-01-19", "submitter_name": "James Bensley", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 21:23:37"}, {"errata_id": "6378", "doc-id": "RFC8375", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "\"home.arpa.\"", "correct_text": "\"home.arpa\"", "notes": "The domain \"home.arpa.\" is used throughout the document. The domain should, instead, be \"home.arpa\".\n --VERIFIER NOTES-- \n As discussed over email, RFC 1034 specifies that FQDN should terminate with a dot else it is not a FQDN.", "submit_date": "2021-01-02", "submitter_name": "Kulvinder Matharu", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-01-03 08:07:41"}, {"errata_id": "6379", "doc-id": "RFC8650", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.1.1", "orig_text": "   Upon receipt of the successful response, the subscriber does a GET to\r\n   the provided URI to start the flow of notification messages.  When\r\n   the publisher receives this, the subscription is moved to the active\r\n   state (c).\r\n\r\n   GET /restconf/subscriptions/22\r\n\r\n             Figure 5: \"establish-subscription\" Subsequent POST", "correct_text": "   Upon receipt of the successful response, the subscriber does a GET to\r\n   the provided URI to start the flow of notification messages.  When\r\n   the publisher receives this, the subscription is moved to the active\r\n   state (c).\r\n\r\n   GET /restconf/subscriptions/22\r\n\r\n             Figure 5: \"establish-subscription\" Subsequent GET", "notes": "Substitute POST by GET in the figure caption", "submit_date": "2021-01-03", "submitter_name": "Muly Ilan", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2021-01-05 10:06:05"}, {"errata_id": "7291", "doc-id": "RFC5890", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Request for Comments: 5890\r\nObsoletes: 3490\r\nCategory: Standards Track\r\n", "correct_text": "Request for Comments: 5890\r\nObsoletes: 3490\r\nUpdates: 4343\r\nCategory: Standards Track\r\n", "notes": "I have no idea whether this correction is Editorial or Technical , nor what to use as a Section indication.  However...\r\n\r\nRFC 5890 (or IDNA2008 more generally), should have updated RFC 4343 and the IDN discussion in its Section 5.  The latter references the IDNA2003 documents and makes some statements that are, at best, confusing in the context of IDNA2008.\r\n\r\nSee the extended notes for RFC 4343 in https://www.rfc-editor.org/errata/eid7290 for more discussion and details.\r\n\r\nRecommendation: Hold for document update unless this appears to anyone to be a serious problem, in which case a separate RFC, using the notes on Errata ID 7290 as a starting point, may be in order.\r\n\r\n[AD Note:] Marking this as Verified, and will direct the RFC Editor to update the metadata about both documents.", "submit_date": "2022-12-26", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-06-01 15:45:10"}, {"errata_id": "6400", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:40:16"}, {"errata_id": "6401", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.6.2", "orig_text": "When the client has sent the \"post_handshake_auth\" extension (see\r\nSection 4.2.6), a server MAY request client authentication at any\r\ntime after the handshake has completed by sending a\r\nCertificateRequest message.  ", "correct_text": "When the client has sent the \"post_handshake_auth\" extension (see\r\nSection 4.2.6), a server MAY request client authentication during the \r\nmain handshake and/or at any time after the handshake has completed by \r\nsending a CertificateRequest message.  \r\n\r\n", "notes": "4.6.2 is ambiguous as to whether it forbids \"main handshake\" (mid-handshake) client \r\nauthentication when the client has sent  the \"post_handshake_auth\" extension. I think \r\nthe language would be stronger if it were really forbidden, and openssl s_server permits \r\nthis behavior and rfc8740 implies it as well.\r\n\r\nThe \"main handshake\" language is adopted from 4.3.2 but \"main\" could be dropped as \r\n\"handshake\" is not ambiguous in 1.3 due to no renegotiation.", "submit_date": "2021-01-20", "submitter_name": "Eric Covener", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-29 00:54:39"}, {"errata_id": "6380", "doc-id": "RFC2040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11", "orig_text": "  The values for the algorithm field are:\r\n\r\n  RC5_CBC  OBJECT IDENTIFIER ::=\r\n    { iso (1) member-body (2) US (840) rsadsi (113549)\r\n      encryptionAlgorithm (3) RC5CBC (8) }\r\n\r\n  RC5_CBC_Pad OBJECT IDENTIFIER ::=\r\n  { iso (1) member-body (2) US (840) rsadsi (113549)\r\n    encryptionAlgorithm (3) RC5CBCPAD (9) }\r\n\r\n   The structure of the parameters field for these algorithms is given\r\n   below.  NOTE: if the iv field is not included, then the\r\n   initialization vector defaults to a block of zeros whose size depends\r\n   on the blockSizeInBits field.\r\n\r\n  RC5_CBC_Parameters ::= SEQUENCE {\r\n    version           INTEGER (v1_0(16)),\r\n    rounds            INTEGER (8..127),\r\n    blockSizeInBits   INTEGER (64, 128),\r\n    iv                OCTET STRING OPTIONAL\r\n  }\r\n", "correct_text": "  The values for the algorithm field are:\r\n\r\n  rC5-CBC  OBJECT IDENTIFIER ::=\r\n    { iso (1) member-body (2) us (840) rsadsi (113549)\r\n      encryptionAlgorithm (3) rC5CBC (8) }\r\n\r\n  rC5-CBC-Pad OBJECT IDENTIFIER ::=\r\n  { iso (1) member-body (2) us (840) rsadsi (113549)\r\n    encryptionAlgorithm (3) rC5CBCPAD (9) }\r\n\r\n   The structure of the parameters field for these algorithms is given\r\n   below.  NOTE: if the iv field is not included, then the\r\n   initialization vector defaults to a block of zeros whose size depends\r\n   on the blockSizeInBits field.\r\n\r\n  RC5-CBC-Parameters ::= SEQUENCE {\r\n    version           INTEGER {v1-0(16)},\r\n    rounds            INTEGER (8..127),\r\n    blockSizeInBits   INTEGER (64 | 128),\r\n    iv                OCTET STRING OPTIONAL\r\n  }", "notes": "The underscore character cannot be used in the definitions; a hyphen is traditional.\r\n\r\nThe object identifiers need to begin with a lower case letter, and \"us\" is written with both letters lowercase.\r\n\r\nThe constraints on INTEGER values used incorrect syntax.", "submit_date": "2021-01-04", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-01-12 04:26:22"}, {"errata_id": "6381", "doc-id": "RFC1122", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.2.6", "orig_text": "Eff.snd.MSS = min(SendMSS+20, MMS_S) - TCPhdrsize - IPoptionsize", "correct_text": "Eff.snd.MSS = min(SendMSS+20, MMS_S) - TCPhdrsize ", "notes": "In Section 3.3.3 Fragmentation: MMS_S = EMTU_S - <IP header size> .... Note that <IP header size> in this equation will be 20, unless the IP reserves space to insert IP options for its own purposes in addition to any options inserted by the transport layer\r\n\r\nIPoptionsize was already subtracted once when calculating MMS_S.  It is being subtracted again upon calculating Eff.snd.MSS when MMS_S is smaller than sendMSS+20.  In other words, if IP options are in use, its size is subtracted twice.\n --VERIFIER NOTES-- \n   In Section 3.3.3, it says \"Note that <IP header size> in this equation will be 20, unless\r\n         the IP reserves space to insert IP options for its own purposes\r\n         in addition to any options inserted by the transport layer.\"\r\n\r\n4.2.2.6 defines IPoptionsize as \"IPoptionsize is the size of any IP options that TCP\r\n                 will pass to the IP layer with the current message.\"\r\n\r\nSo MMS_S incorporates IP options from the IP layer, but IPoptionsize counts options coming from TCP. The terminology is a little confusing but careful reading of the definitions indicates that the math is correct.", "submit_date": "2021-01-07", "submitter_name": "Patrick Ni", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-08 01:25:12"}, {"errata_id": "6382", "doc-id": "RFC4506", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.3", "orig_text": "      declaration:\r\n           type-specifier identifier\r\n         | type-specifier identifier \"[\" value \"]\"\r\n         | type-specifier identifier \"<\" [ value ] \">\"\r\n         | \"opaque\" identifier \"[\" value \"]\"\r\n         | \"opaque\" identifier \"<\" [ value ] \">\"\r\n         | \"string\" identifier \"<\" [ value ] \">\"\r\n         | type-specifier \"*\" identifier\r\n         | \"void\"\r\n\r\n[...]\r\n\r\n      struct-body:\r\n         \"{\"\r\n            ( declaration \";\" )\r\n            ( declaration \";\" )*\r\n         \"}\"\r\n\r\n[...]\r\n\r\n      type-def:\r\n           \"typedef\" declaration \";\"\r\n         | \"enum\" identifier enum-body \";\"\r\n         | \"struct\" identifier struct-body \";\"\r\n         | \"union\" identifier union-body \";\"", "correct_text": "None", "notes": "This grammar permits statements like:\r\n\r\ntypedef void;\r\nstruct foo { void; };\r\n\r\nrpcgen doesn't allow this, failing with the following error message:\r\n\r\nvoids allowed only inside union and program definitions with one argument", "submit_date": "2021-01-08", "submitter_name": "Ed Schouten", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6402", "doc-id": "RFC5906", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix J", "orig_text": "   CertificateSerialNumber\r\n   SET { ::= INTEGER\r\n           Validity ::= SEQUENCE {\r\n                   notBefore              UTCTime,\r\n                   notAfter               UTCTime\r\n           }\r\n   }", "correct_text": "   CertificateSerialNumber ::= INTEGER\r\n\r\n   Validity ::= SEQUENCE {\r\n                   notBefore              UTCTime,\r\n                   notAfter               UTCTime\r\n   }", "notes": "The original ASN.1 will not compile.", "submit_date": "2021-01-20", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-07-27 15:36:21"}, {"errata_id": "6403", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.3", "orig_text": "      value  The \"id\" of the SCIM resource representing the user's\r\n         manager.  RECOMMENDED.\r\n\r\n      $ref  The URI of the SCIM resource representing the User's\r\n         manager.  RECOMMENDED.", "correct_text": "      value  The \"id\" of the SCIM resource representing the user's\r\n         manager.  REQUIRED.\r\n\r\n      $ref  The URI of the SCIM resource representing the User's\r\n         manager.  REQUIRED.", "notes": "The descriptions of the sub-attributes \"value\" and \"$ref\" on pages 71 and 72 indicate that these two are required, not recommended.\r\n\r\nE.g. \"The id of the SCIM resource representing\r\nthe User's manager.  REQUIRED.\"\r\n\r\nGiven that no other value in the RFC is RECOMMENDED, it would seem likely that these two sub-sttributes should be REQUIRED and not RECOMMENDED.", "submit_date": "2021-01-21", "submitter_name": "Andrew Webb", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:53:21"}, {"errata_id": "6383", "doc-id": "RFC8466", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "container service {\r\n              container svc-bandwidth {\r\n                if-feature \"input-bw\";\r\n                list bandwidth {\r\n                  key \"direction type\";\r\n                  leaf direction {\r\n                    type identityref {\r\n                      base bw-direction;\r\n                    }\r\n                    description\r\n                      \"Indicates the bandwidth direction.  It can be\r\n                       the bandwidth download direction from the SP to\r\n                       the site or the bandwidth upload direction from\r\n                       the site to the SP.\";\r\n                  }", "correct_text": "", "notes": "The svc-bandwidth container is triggered by if-feature \"input-bw\". However, that container can contain input-bw only, output-bw only or both. It might be better to have two separate containers, one for input-bw and the other for output-bw, triggered by if-feature \"input-bw\" and if-feature \"output-bw\" respectively.\r\n\r\nThe bug looks to be valid, but this erratum has been marked as \"Hold For Document Update\" because further discussion is required as to the solution, and it will require a new revision of the YANG module which will require a new RFC to be published.", "submit_date": "2021-01-08", "submitter_name": "Julian Lucek", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 14:59:18"}, {"errata_id": "6384", "doc-id": "RFC8466", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "8", "orig_text": "identity pbb-evpn {\r\n   base service-type;\r\n    description\r\n      \"Provider Backbone Bridge (PBB) service type using\r\n       EVPNs as specified in RFC 7432.\";\r\n}", "correct_text": "identity evpn {\r\n   base service-type;\r\n    description\r\n      \"EVPN service type as specified in RFC 7432.\";\r\n}", "notes": "The mention of PBB is a mistake, it should be normal (non-PBB) EVPN, given that Section 3.1 lists EVPN and not PBB-EVPN among the supported L2VPN types. However, the reference to RFC 7432 in the original text box above is correct, as that RFC deals with EVPN, not PBB-EVPN.\r\n\r\n(n.b. see erratum 5921 that has the \"opposite\" interpretation, i.e. that pbb-evpn is correct but that the RFC number is wrong)\r\n\n --VERIFIER NOTES-- \nI think that this errata report can be regarded as a duplicate of 5922, that I have resolved as \"held for document update\".  Certainly, I don't think that it is possible to infer consensus that the YANG module is wrong by defining pbb-evpn but the accompanying text is correct. ", "submit_date": "2021-01-08", "submitter_name": "Julian Lucek", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 17:40:35"}, {"errata_id": "6385", "doc-id": "RFC8007", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   When a CI/T Trigger Command is accepted, the uCDN MUST create a new\r\n   Trigger Status Resource that will convey a specification of the CI/T\r\n   Command and its current status.  The HTTP response to the dCDN MUST\r\n   have status code 201 and MUST convey the URI of the Trigger Status\r\n   Resource in the Location header field [RFC7231].", "correct_text": "   When a CI/T Trigger Command is accepted, the dCDN MUST create a new\r\n   Trigger Status Resource that will convey a specification of the CI/T\r\n   Command and its current status.  The HTTP response to the uCDN MUST\r\n   have status code 201 and MUST convey the URI of the Trigger Status\r\n   Resource in the Location header field [RFC7231].", "notes": "There has been an accidental switch between \"uCDN\" and \"dCDN\" terms in this statement. If my understanding is correct, when the uCDN post a CI/T command to the dCDN, the latter must create a trigger status resource and returns in the response (HTTP code 201) \u201cLocation\u201d header the URI of that status resource.", "submit_date": "2021-01-12", "submitter_name": "Guillaume Bichot", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-01-22 15:14:26"}, {"errata_id": "6390", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:38:14"}, {"errata_id": "6392", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:38:40"}, {"errata_id": "6393", "doc-id": "RFC8303", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL of the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "correct_text": "   o  GET_TTL.UDP(-Lite) (IPV6_UNICAST_HOPS):\r\n\r\n      Pass 1 primitive/event: 'Get_TTL' and 'Get_IPV6_Unicast_Hops'\r\n\r\n      Returns: IPv4 TTL value or IPv6 Hop Count value\r\n\r\n      Comments: this allows an application to read the IPv4 TTL or the\r\n      IPv6 Hop Count value from a received UDP(-Lite) datagram.\r\n", "notes": "typo: of instead or\n --VERIFIER NOTES-- \n   duplicate of 6373", "submit_date": "2020-12-29", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-19 23:39:04"}, {"errata_id": "7292", "doc-id": "RFC2696", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4. Example", "orig_text": "C: SearchRequest + pagedResultsControl(3,\"\")\r\n   -- Server responds with three entries plus an indication\r\n   -- of 5 total entries in the search result and an opaque\r\n   -- cooking to be used by the client when retrieving subsequent\r\n   -- pages.\r\n   S: SearchResultEntry\r\n   S: SearchResultEntry\r\n   S: SearchResultEntry\r\n   S: SearchResultDone + pagedResultsControl(5, \"opaque\")\r\n   -- Client sends an identical search request (except for\r\n   -- message id), returning the opaque cooking, asking for\r\n   -- the next page.", "correct_text": "C: SearchRequest + pagedResultsControl(3,\"\")\r\n   -- Server responds with three entries plus an indication\r\n   -- of 5 total entries in the search result and an opaque\r\n   -- cookie to be used by the client when retrieving subsequent\r\n   -- pages.\r\n   S: SearchResultEntry\r\n   S: SearchResultEntry\r\n   S: SearchResultEntry\r\n   S: SearchResultDone + pagedResultsControl(5, \"opaque\")\r\n   -- Client sends an identical search request (except for\r\n   -- message id), returning the opaque cookie, asking for\r\n   -- the next page.", "notes": "It's a cookie that's received/sent. Instead of cookie, the RFC says cooking in two places.", "submit_date": "2022-12-28", "submitter_name": "Yogender Bhabhoria", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-01-06 22:52:22"}, {"errata_id": "6404", "doc-id": "RFC6890", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.2", "orig_text": "              +----------------------+----------------------------+\r\n              | Attribute            | Value                      |\r\n              +----------------------+----------------------------+\r\n              | Address Block        | 0.0.0.0/8                  |\r\n              | Name                 | \"This host on this network\"|\r\n              | RFC                  | [RFC1122], Section 3.2.1.3 |\r\n              | Allocation Date      | September 1981             |\r\n              | Termination Date     | N/A                        |\r\n              | Source               | True                       |\r\n              | Destination          | False                      |\r\n              | Forwardable          | False                      |\r\n              | Global               | False                      |\r\n              | Reserved-by-Protocol | True                       |\r\n              +----------------------+----------------------------+\r\n\r\n                    Table 1: \"This host on this network\"", "correct_text": "              +----------------------+----------------------------+\r\n              | Attribute            | Value                      |\r\n              +----------------------+----------------------------+\r\n              | Address Block        | 0.0.0.0/8                  |\r\n              | Name                 | \"This network\"             |\r\n              | RFC                  | [RFC0791], Section 3.2     |\r\n              | Allocation Date      | September 1981             |\r\n              | Termination Date     | N/A                        |\r\n              | Source               | True                       |\r\n              | Destination          | False                      |\r\n              | Forwardable          | False                      |\r\n              | Global               | False                      |\r\n              | Reserved-by-Protocol | True                       |\r\n              +----------------------+----------------------------+\r\n\r\n                          Table 1.a: \"This network\"\r\n\r\n              +----------------------+----------------------------+\r\n              | Attribute            | Value                      |\r\n              +----------------------+----------------------------+\r\n              | Address Block        | 0.0.0.0/32                 |\r\n              | Name                 | \"This host on this network\"|\r\n              | RFC                  | [RFC1122], Section 3.2.1.3 |\r\n              | Allocation Date      | September 1981             |\r\n              | Termination Date     | N/A                        |\r\n              | Source               | True                       |\r\n              | Destination          | False                      |\r\n              | Forwardable          | False                      |\r\n              | Global               | False                      |\r\n              | Reserved-by-Protocol | True                       |\r\n              +----------------------+----------------------------+\r\n\r\n                          Table 1.b: \"This host on this network\"", "notes": "RFC1122 states that 0.0.0.0/32 is \"this host on this network\" while 0.0.0.0/8 is \"this network\".\r\n\r\n---- Verifier note ----\r\nAfter discussions with the authors, the original table must be split into TWO tables one for 0.0.0.0/8 and one for 0.0.0.0/32. IANA registry must also be updated.", "submit_date": "2021-01-21", "submitter_name": "Thomas", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2021-02-01 10:46:06"}, {"errata_id": "6405", "doc-id": "RFC5740", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "For NORM_OBJECT_FILE and NORM_OBJECT_STREAM objects, the data segment length and offset can be calculated using the block partitioning algorithm described in the\r\nFEC Building Block [RFC5052] document. For NORM_OBJECT_STREAM objects, the length and offset is obtained from the segment\u2019s corresponding embedded \"payload_len\" and \"payload_offset\" fields.", "correct_text": "For NORM_OBJECT_FILE and NORM_OBJECT_DATA objects, the data segment length and offset can be calculated using the block partitioning algorithm described in the\r\nFEC Building Block [RFC5052] document. For NORM_OBJECT_STREAM objects, the length and offset is obtained from the segment\u2019s corresponding embedded \"payload_len\" and \"payload_offset\" fields.", "notes": "The partitioning algorithm specified in RFC 5052 and referenced here applies only to NORM_OBJECT_FILE and NORM_OBJECT_DATA objects, not to NORM_OBJECT_STREAM objects. In fact, these sentences at the very end of section 4.2.1 merely try to reiterate what has already been said earlier in the same section with reference to the header fields 'payload_len', 'payload_msg_start' and 'payload_offset': \"For objects of types NORM_OBJECT_FILE and NORM_OBJECT_DATA, these fields are unnecessary since the receiver can calculate the payload length and offset information from the \"fec_payload_id\" using the REQUIRED block partitioning algorithm described in the FEC Building Block [RFC5052] document.\"", "submit_date": "2021-01-21", "submitter_name": "Ronald in 't Velt", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6436", "doc-id": "RFC4330", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "   The roundtrip delay d and system clock offset t are defined as:\r\n\r\n      d = (T4 - T1) - (T3 - T2)     t = ((T2 - T1) + (T3 - T4)) / 2.", "correct_text": "   The roundtrip delay d and system clock offset t are defined as:\r\n\r\n      d = (T4 - T1) - (T3 - T2)     t = ((T2 - T1) + (T4 - T3)) / 2.", "notes": "In the equation for \"t\", the values T3 and T4 are swapped. This can cause the value to be off by over 120 years.\n --VERIFIER NOTES-- \nNote that:\r\n- RFC 4330 has been obsoleted by RFC 5905 so raising errata reports against it is no longer\r\n   valuable\r\n- RFC 5905 contains the same text as reported here\r\n- There is already an errata report (https://www.rfc-editor.org/errata_search.php?eid=5020)\r\n  against RFC 5905 reporting this problem.", "submit_date": "2021-02-22", "submitter_name": "Ellen Marie Dash", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-02-24 15:42:15"}, {"errata_id": "6437", "doc-id": "RFC8843", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "   *  If the packet has a MID, and the packet's extended sequence number\r\n      is greater than that of the last MID update, as discussed in\r\n      [RFC7941], Section 4.2.2, update the MID associated with the RTP\r\n      stream to match the MID carried in the RTP packet, and then update\r\n      the mapping tables to include an entry that maps the SSRC of that\r\n      RTP stream to the \"m=\" section for that MID.", "correct_text": "   *  If the packet has a MID, and the packet's extended sequence number\r\n      is greater than that of the last MID update, as discussed in\r\n      [RFC7941], Section 4.2.6, update the MID associated with the RTP\r\n      stream to match the MID carried in the RTP packet, and then update\r\n      the mapping tables to include an entry that maps the SSRC of that\r\n      RTP stream to the \"m=\" section for that MID.", "notes": "In RFC7941 section \"4.2.2. MTU and Packet Expansion\", it doesn't mention about extended sequence number of packets. Section \"4.2.6. Update Flaps\" describes how to update SDES item using extended sequence number.", "submit_date": "2021-02-23", "submitter_name": "EungRok Lee", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2021-09-01 14:06:39"}, {"errata_id": "6471", "doc-id": "RFC7636", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.1", "orig_text": "The client SHOULD create a \"code_verifier\" with a minimum of 256 bits\r\nof entropy.  This can be done by having a suitable random number\r\ngenerator create a 32-octet sequence.  The octet sequence can then be\r\nbase64url-encoded to produce a 43-octet URL safe string to use as a\r\n\"code_challenge\" that has the required entropy.", "correct_text": "The client SHOULD create a \"code_verifier\" with a minimum of 256 bits\r\nof entropy.  This can be done by having a suitable random number\r\ngenerator create a 32-octet sequence.  The octet sequence can then be\r\nbase64url-encoded to produce a 43-octet URL safe string to use as a\r\n\"code_verifier\" that has the required entropy.", "notes": "The \"32-octet sequence\" referenced in the original text seems to be inconsistent with Section 4.1, which states that the minimum length of the code_verifier is 43 characters. It would be consistent by changing \"code_challenge\" to \"code_verifier\".", "submit_date": "2021-03-10", "submitter_name": "Tom Crossland", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6486", "doc-id": "RFC2865", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": "   The state is the magic cookie from the Access-Challenge packet,\r\n   unchanged.\r\n\r\n      01 03 00 43 b1 22 55 6d 42 8a 13 d0 d6 25 38 07\r\n      c4 57 ec f0 01 07 6d 6f 70 73 79 02 12 69 2c 1f\r\n      20 5f c0 81 b9 19 b9 51 95 f5 61 a5 81 04 06 c0\r\n      a8 01 10 05 06 00 00 00 07 18 10 33 32 37 36 39\r\n      34 33 30\r\n\r\n       1 Code = Access-Request (1)\r\n", "correct_text": "   The state is the magic cookie from the Access-Challenge packet,\r\n   unchanged.\r\n\r\n      01 03 00 43 b1 22 55 6d 42 8a 13 d0 d6 25 38 07\r\n      c4 57 ec f0 01 07 6d 6f 70 73 79 02 12 69 2c 1f\r\n      20 5f c0 81 b9 19 b9 51 95 f5 61 a5 81 04 06 c0\r\n      a8 01 10 05 06 00 00 00 07 18 0a 33 32 37 36 39\r\n      34 33 30\r\n\r\n       1 Code = Access-Request (1)\r\n", "notes": "Mistake is length of last attribute of sample packet on page 70, in penultimate line of hex dump. RFC has 0x10; correct value is 0x0a. (Sample on page 69 shows correct value.)", "submit_date": "2021-03-18", "submitter_name": "Paul Bennett", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2021-03-24 09:45:35"}, {"errata_id": "6406", "doc-id": "RFC5925", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Section 5.1", "orig_text": "In Section 5.1, Figure 6 - TCP IPv6 Pseudoheader\r\n\r\n+--------+--------+--------+--------+\r\n|                                   |\r\n+                                   +\r\n|                                   |\r\n+          Source Address           +\r\n|                                   |\r\n+                                   +\r\n|                                   |\r\n+                                   +\r\n+--------+--------+--------+--------+\r\n|                                   |\r\n+                                   +\r\n|                                   |\r\n+        Destination Address        +\r\n|                                   |\r\n+                                   +\r\n|                                   |\r\n+--------+--------+--------+--------+\r\n|      Upper-Layer Payload Length   |\r\n+--------+--------+--------+--------+\r\n|      Zero       |    Next Header  |\r\n+--------+--------+--------+--------+", "correct_text": "+--------+--------+--------+--------+\r\n|                                   |\r\n+                                   +\r\n|                                   |\r\n+          Source Address           +\r\n|                                   |\r\n+                                   +\r\n|                                   |\r\n+                                   +\r\n+--------+--------+--------+--------+\r\n|                                   |\r\n+                                   +\r\n|                                   |\r\n+        Destination Address        +\r\n|                                   |\r\n+                                   +\r\n|                                   |\r\n+--------+--------+--------+--------+\r\n|      Upper-Layer Payload Length   |\r\n+--------+--------+--------+--------+\r\n|            Zero          |Next Hdr|\r\n+--------+--------+--------+--------+", "notes": "In IPv6 pseudoheader,  Zero field should be 3 bytes and Next header should be 1 byte. \r\nBut in RFC 5925, figure 6, it misleads into Zero field 2 bytes and Next header 2 bytes.", "submit_date": "2021-01-22", "submitter_name": "Ananth Rajadurai", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-25 15:19:42"}, {"errata_id": "6407", "doc-id": "RFC8963", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "   Comparing the final draft and published RFC shows a minor set of copy\r\n   edits, mostly for style.  However, the author recalls a painful\r\n   process.  The RFC includes many charts and graphs that were very\r\n   difficult to format correctly in the author's production process that\r\n   involved conversions from markdown to XML, and then from XML to text.\r\n   The author had to get substantial help from the RFC Editor.", "correct_text": "   Comparing the final draft and published RFC shows a minor set of copy\r\n   edits, mostly for style.  However, the author recalls a painful\r\n   process.  The RFC includes a ladder diagram that the author found\r\n   difficult to format correctly in the author's production process that\r\n   involved conversions from markdown to XML, and then from XML to text.\r\n   The author recalls getting substantial help from the RFC Editor.", "notes": "The RFC actually does not contain any graphs or charts. The only piece of artwork is in an HTTP message exchange (in Section 5.1 of RFC 8441).", "submit_date": "2021-01-22", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-01-23 20:32:46"}, {"errata_id": "6408", "doc-id": "RFC6038", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.3", "orig_text": "   When using the truncation process in TWAMP alone, see Section 4.2.1\r\n   of [RFC5357], the Session-Sender MUST append sufficient Packet\r\n   Padding octets to allow the same IP packet payload lengths to be used\r\n   in each direction of transmission (this is usually desirable).  To\r\n   compensate for the Session-Reflector's larger test packet format, the\r\n   Session-Sender MUST append at least 27 octets of padding in\r\n   Unauthenticated mode, and at least 56 octets in Authenticated and\r\n   Encrypted modes.  The sizes of TWAMP-Test protocol packets and the\r\n   resulting truncated padding to achieve equal packet sizes in both\r\n   directions are shown in the table below:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMorton & Ciavattone          Standards Track                   [Page 11]\r\n\f\r\nRFC 6038             Reflect Octets & Symmetric Size        October 2010\r\n\r\n\r\n    +-------------------+----------------------+---------------------+\r\n    | Octets in:        | Unauthenticated Mode | Auth/Encrypted Mode |\r\n    +-------------------+----------------------+---------------------+\r\n    | Reflector Header  | 41                   | 104                 |\r\n    | Sender Header     | 14                   | 48                  |\r\n    | Truncated Padding | 27                   | 56                  |\r\n    +-------------------+----------------------+---------------------+\r\n\r\n                       TWAMP-Test Padding Truncation\r\n\r\n   When using the Reflect Octets mode simultaneously with the truncation\r\n   process that TWAMP recommends in Section 4.2.1 of [RFC5357], the\r\n   Session-Sender MUST append at least 27 octets of padding plus the\r\n   Length of the padding to reflect octets when operating in\r\n   Unauthenticated mode.  The Session-Sender MUST append at least 56\r\n   octets of padding plus the Length of the padding to reflect octets\r\n   when operating in Authenticated and Encrypted modes.\r\n", "correct_text": "   When using the truncation process in TWAMP alone, see Section 4.2.1\r\n   of [RFC5357], the Session-Sender MUST append sufficient Packet\r\n   Padding octets to allow the same IP packet payload lengths to be used\r\n   in each direction of transmission (this is usually desirable).  To\r\n   compensate for the Session-Reflector's larger test packet format, the\r\n   Session-Sender MUST append at least 27 octets of padding in\r\n   Unauthenticated mode, and at least 64 octets in Authenticated and\r\n   Encrypted modes.  The sizes of TWAMP-Test protocol packets and the\r\n   resulting truncated padding to achieve equal packet sizes in both\r\n   directions are shown in the table below:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nMorton & Ciavattone          Standards Track                   [Page 11]\r\n\f\r\nRFC 6038             Reflect Octets & Symmetric Size        October 2010\r\n\r\n\r\n    +-------------------+----------------------+---------------------+\r\n    | Octets in:        | Unauthenticated Mode | Auth/Encrypted Mode |\r\n    +-------------------+----------------------+---------------------+\r\n    | Reflector Header  | 41                   | 112                 |\r\n    | Sender Header     | 14                   | 48                  |\r\n    | Truncated Padding | 27                   | 64                  |\r\n    +-------------------+----------------------+---------------------+\r\n\r\n                       TWAMP-Test Padding Truncation\r\n\r\n   When using the Reflect Octets mode simultaneously with the truncation\r\n   process that TWAMP recommends in Section 4.2.1 of [RFC5357], the\r\n   Session-Sender MUST append at least 27 octets of padding plus the\r\n   Length of the padding to reflect octets when operating in\r\n   Unauthenticated mode.  The Session-Sender MUST append at least 64\r\n   octets of padding plus the Length of the padding to reflect octets\r\n   when operating in Authenticated and Encrypted modes.\r\n", "notes": "Incorrect header sizes (104 instead of 112) and the required padding size (56 instead of 64) for modes with authentication and encryption.", "submit_date": "2021-01-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-26 01:04:59"}, {"errata_id": "6409", "doc-id": "RFC6038", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   The Padding Length SHOULD be >= 56 octets when specifying a test\r\n   session using the Authenticated or Encrypted TWAMP-Test modes to\r\n   allow for the truncation process that TWAMP recommends, see Section\r\n   4.2.1 of [RFC5357].\r\n\r\n   The Padding Length SHALL be > the Length of padding to reflect when\r\n   specifying a test session using the OPTIONAL Reflect Octets mode.\r\n\r\n   In Unauthenticated TWAMP-Test mode, the Padding Length SHALL be >= 27\r\n   + Length of padding to reflect octets when specifying a test session\r\n   using both the OPTIONAL Reflect Octets mode and the truncation\r\n   process that TWAMP recommends, see Section 4.2.1 of [RFC5357].\r\n\r\n   In Authenticated or Encrypted TWAMP-Test modes, the Padding Length\r\n   SHALL be >= 56 + Length of padding to reflect octets when specifying\r\n   a test session using both the OPTIONAL Reflect Octets mode and the\r\n   truncation process that TWAMP recommends, see Section 4.2.1 of\r\n   [RFC5357].\r\n", "correct_text": "   The Padding Length SHOULD be >= 64 octets when specifying a test\r\n   session using the Authenticated or Encrypted TWAMP-Test modes to\r\n   allow for the truncation process that TWAMP recommends, see Section\r\n   4.2.1 of [RFC5357].\r\n\r\n   The Padding Length SHALL be > the Length of padding to reflect when\r\n   specifying a test session using the OPTIONAL Reflect Octets mode.\r\n\r\n   In Unauthenticated TWAMP-Test mode, the Padding Length SHALL be >= 27\r\n   + Length of padding to reflect octets when specifying a test session\r\n   using both the OPTIONAL Reflect Octets mode and the truncation\r\n   process that TWAMP recommends, see Section 4.2.1 of [RFC5357].\r\n\r\n   In Authenticated or Encrypted TWAMP-Test modes, the Padding Length\r\n   SHALL be >= 64 + Length of padding to reflect octets when specifying\r\n   a test session using both the OPTIONAL Reflect Octets mode and the\r\n   truncation process that TWAMP recommends, see Section 4.2.1 of\r\n   [RFC5357].\r\n", "notes": "Invalid required padding size (56 instead of 64) for modes with authentication and encryption.", "submit_date": "2021-01-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-26 01:05:26"}, {"errata_id": "6461", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "                Networks\",Communications of the ACM, October 1986,", "correct_text": "                Networks\", Communications of the ACM, October 1986,\r\n", "notes": "Missing space.", "submit_date": "2021-03-08", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-08 17:39:34"}, {"errata_id": "6462", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "                Superceeded by this memo.", "correct_text": "                Superseded by this memo.", "notes": "Misspelled \"superseded\".", "submit_date": "2021-03-08", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-08 17:39:49"}, {"errata_id": "6463", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.13", "orig_text": "reason for this provison is to allow future dynamic update facilities to", "correct_text": "reason for this provision is to allow future dynamic update facilities to", "notes": "Mistyped \"provision\".", "submit_date": "2021-03-08", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-03-08 20:42:09"}, {"errata_id": "6464", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "Pointers can only be used for occurances of a domain name where the", "correct_text": "Pointers can only be used for occurrences of a domain name where the", "notes": "Misspelled \"occurrences\".", "submit_date": "2021-03-08", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-03-08 20:42:41"}, {"errata_id": "6465", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "      This condition means the the mailbox was actually a mailing", "correct_text": "      This condition means that the mailbox was actually a mailing", "notes": "Doubling.", "submit_date": "2021-03-08", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-03-08 20:43:12"}, {"errata_id": "6466", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9", "orig_text": "                Superceeded by this memo.", "correct_text": "                Superseded by this memo.", "notes": "Misspelled \"superseded\".", "submit_date": "2021-03-08", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-03-08 20:43:36"}, {"errata_id": "6410", "doc-id": "RFC6038", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.1", "orig_text": "   Section 4.2.1 of [RFC5357] recommends a padding truncation process\r\n   for use in TWAMP.  When using that process in conjunction with the\r\n   Reflect Octets mode, the Session-Reflector MUST reflect the\r\n   designated octets from the Session-Sender's test packet in the Packet\r\n   Padding (from Session-Sender) field, and MAY re-use additional Packet\r\n   Padding from the Session-Sender.  The Session-Reflector MUST truncate\r\n   the padding such that the highest number octets are discarded, and\r\n   the test packet length equals the Session-Sender's packet length.\r\n   When using the recommended truncation process, the Session-Reflector\r\n   MUST truncate exactly 27 octets of padding in Unauthenticated mode,\r\n   and exactly 56 octets in Authenticated and Encrypted modes.\r\n\r\n", "correct_text": "   Section 4.2.1 of [RFC5357] recommends a padding truncation process\r\n   for use in TWAMP.  When using that process in conjunction with the\r\n   Reflect Octets mode, the Session-Reflector MUST reflect the\r\n   designated octets from the Session-Sender's test packet in the Packet\r\n   Padding (from Session-Sender) field, and MAY re-use additional Packet\r\n   Padding from the Session-Sender.  The Session-Reflector MUST truncate\r\n   the padding such that the highest number octets are discarded, and\r\n   the test packet length equals the Session-Sender's packet length.\r\n   When using the recommended truncation process, the Session-Reflector\r\n   MUST truncate exactly 27 octets of padding in Unauthenticated mode,\r\n   and exactly 64 octets in Authenticated and Encrypted modes.\r\n\r\n", "notes": "Invalid required padding size (56 instead of 64) for modes with authentication and encryption.", "submit_date": "2021-01-25", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-01-26 01:05:41"}, {"errata_id": "6411", "doc-id": "RFC8832", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "5.  Message Formats\r\n\r\n   Every Data Channel Establishment Protocol message starts with a one\r\n   byte field called \"Message Type\" which indicates the type of the\r\n   message.  The corresponding values are managed by IANA (see\r\n   Section 8.2.1).", "correct_text": "5.  Message Formats\r\n\r\n   Every Data Channel Establishment Protocol message starts with a one\r\n   byte field called \"Message Type\" which indicates the type of the\r\n   message.  The corresponding values are managed by IANA (see\r\n   Section 8.2.1).\r\n\r\n   All integer fields in an Data Channel Establishment Protocol message\r\n   MUST be transmitted in network byte order, unless otherwise stated.", "notes": "Submitter's note: The byte order of integer fields in the protocol messages is not defined.\r\n---\r\nVerifier's note: the byte order in the protocol messages is defined, since Data Channel Establishment Protocol depends on SCTP, which requires Network Byte Order (RFC 4960, Section 3). However, since this could be considered an omission that might have been corrected if it had been caught at the time of publication, I am marking it \"Hold for document update\".", "submit_date": "2021-01-25", "submitter_name": "Victor Boivie", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-07 10:26:00"}, {"errata_id": "6412", "doc-id": "RFC3855", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "   id-ep-content ::= {joint-iso-itu-t(2) mhs(6) ipms(1) ep(11) 17}\r\n\r\n   id-et-content ::= {joint-iso-itu-t(2) mhs(6) ipms(1) et(4) 17}", "correct_text": "   id-ep-content OBJECT IDENTIFIER ::=\r\n      {joint-iso-itu-t(2) mhs(6) ipms(1) ep(11) 17}\r\n\r\n   id-et-content OBJECT IDENTIFIER ::=\r\n      {joint-iso-itu-t(2) mhs(6) ipms(1) et(4) 17}", "notes": "The \"OBJECT IDENTIFIER\" is needed for correct ASN.1 syntax.", "submit_date": "2021-01-27", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-01-27 21:42:56"}, {"errata_id": "6413", "doc-id": "RFC5926", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.1.2", "orig_text": "In section 3.1.1.2 Page 8, figure 1,\r\n\r\n+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n+                        KDF-AES-128-CMAC                           +\r\n+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n+                                                                   +\r\n+ Input  : MK (Master_Key, the variable-length shared secret)       +\r\n+        : I (Input, i.e., the input data of the PRF)               +\r\n+        : MKlen (length of MK in octets)                           +\r\n+        : len (length of M in octets)                              +\r\n+ Output : TK (Traffic_Key, 128-bit Pseudo-Random Variable)         +\r\n+                                                                   +\r\n+-------------------------------------------------------------------+", "correct_text": "+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n+                        KDF-AES-128-CMAC                           +\r\n+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++\r\n+                                                                   +\r\n+ Input  : MK (Master_Key, the variable-length shared secret)       +\r\n+        : I (Input, i.e., the input data of the PRF)               +\r\n+        : MKlen (length of MK in octets)                           +\r\n+        : len (length of I in octets)                              +\r\n+ Output : TK (Traffic_Key, 128-bit Pseudo-Random Variable)         +\r\n+                                                                   +\r\n+-------------------------------------------------------------------+", "notes": "In Input, \"len\" is described as (length of \"M' in octets), but there is no \"M\" in the input, but it is supposed to mention the length of the Input Data \"I\", so it should be (length of \"I\" in octets)", "submit_date": "2021-01-28", "submitter_name": "Ananth Rajadurai", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-02-02 21:33:31"}, {"errata_id": "6467", "doc-id": "RFC1172", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Link Quality", "orig_text": "In-Rx-Packets   =  10 -   3 =  16", "correct_text": "In-Rx-Packets   =  10 -   3 =  7", "notes": "it is in Example part of link quality page 25\r\n\r\ni am pretty sure that 10 minus 3 is not equal to 16. \r\nHopping that i understood well things here(i'm french :) )\n --VERIFIER NOTES-- \nActually the real error is that in the example the In-Rx-Packets maths should be \"19 - 3 = 16\", since the second report from A to B has In-Rx-Packets = 19 (not 10 as mistakenly entered on the computation line).\r\n\r\nThis RFC has been obsoleted by two others (RFCs 1331, 1332) which do not appear to contain this text.", "submit_date": "2021-03-09", "submitter_name": "bacquet guillaume", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-02-13 08:24:39"}, {"errata_id": "6468", "doc-id": "RFC1122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.1.4", "orig_text": "                      acknowleged data must have been transmitted", "correct_text": "                      acknowledged data must have been transmitted", "notes": "Misspelled \"acknowledged\".", "submit_date": "2021-03-09", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-10 11:54:59"}, {"errata_id": "6469", "doc-id": "RFC1122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.3.5", "orig_text": "            application layer (e.g, so that the application can later", "correct_text": "            application layer (e.g., so that the application can later", "notes": "Missing full stop.", "submit_date": "2021-03-09", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-10 11:54:46"}, {"errata_id": "6470", "doc-id": "RFC1122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.3.4", "orig_text": "                 (1)  if a maximum-sized segment can be sent, i.e, if:", "correct_text": "                 (1)  if a maximum-sized segment can be sent, i.e., if:", "notes": "Missing full stop.", "submit_date": "2021-03-09", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-10 11:54:31"}, {"errata_id": "6414", "doc-id": "RFC5280", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.1.12", "orig_text": "   id-kp-serverAuth             OBJECT IDENTIFIER ::= { id-kp 1 }\r\n   -- TLS WWW server authentication\r\n   -- Key usage bits that may be consistent: digitalSignature,\r\n   -- keyEncipherment or keyAgreement", "correct_text": "   id-kp-serverAuth             OBJECT IDENTIFIER ::= { id-kp 1 }\r\n   -- TLS WWW server authentication\r\n   -- Key usage bits that may be consistent: digitalSignature\r\n   -- and/or (keyEncipherment or keyAgreement)", "notes": "In https://github.com/zmap/zlint/issues/553 there's been some disagreement and confusion about how to correctly interpret the \"or\" in the Original Text.  \"You can only set one of these three bits\" is one interpretation, and it's hard to argue that this interpretation is inconsistent with the Original Text.\r\n\r\nHowever, digitalSignature+keyEncipherment makes sense for an RSA leaf certificate, and digitalSignature+keyAgreement makes sense for an ECC leaf certificate.  Both are widely used, to enable ephemeral and non-ephemeral TLS ciphersuites in conjunction with a single server certificate.\r\n\r\nGiven that RFC5480 section 3 explicitly permits digitalSignature+keyAgreement in an ECC leaf certificate, I think it's likely that my proposed Corrected Text conveys the RFC5280 authors' intended meaning.", "submit_date": "2021-01-28", "submitter_name": "Rob Stradling", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-29 15:27:06"}, {"errata_id": "6415", "doc-id": "RFC5116", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "  Implementations\r\n   SHOULD support 12-octet nonces in which the Counter field is four\r\n   octets long.", "correct_text": "  Implementations\r\n   SHOULD support 12-octet nonces in which the Fixed field is four\r\n   octets long.", "notes": "The ascii diagram given shows the Fixed portion being smaller and the examples given in https://tools.ietf.org/id/draft-mcgrew-iv-gen-01.html also show that the Fixed portion is 4 bytes. \r\n\r\nAlso an 8 byte counter gives 2^64, where a 4 byte counter would only give 2^32", "submit_date": "2021-01-29", "submitter_name": "Jordan Smith", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6416", "doc-id": "RFC6890", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2.2", "orig_text": "              +----------------------+----------------------------+\r\n              | Attribute            | Value                      |\r\n              +----------------------+----------------------------+\r\n              | Address Block        | 0.0.0.0/8                  |\r\n              | Name                 | \"This host on this network\"|\r\n              | RFC                  | [RFC1122], Section 3.2.1.3 |\r\n              | Allocation Date      | September 1981             |\r\n              | Termination Date     | N/A                        |\r\n              | Source               | True                       |\r\n              | Destination          | False                      |\r\n              | Forwardable          | False                      |\r\n              | Global               | False                      |\r\n              | Reserved-by-Protocol | True                       |\r\n              +----------------------+----------------------------+\r\n\r\n                    Table 1: \"This host on this network\"", "correct_text": "              +----------------------+----------------------------+\r\n              | Attribute            | Value                      |\r\n              +----------------------+----------------------------+\r\n              | Address Block        | 0.0.0.0/8                  |\r\n              | Name                 | \"This network\"             |\r\n              | RFC                  | [RFC1122], Section 3.2.1.3 |\r\n              | Allocation Date      | September 1981             |\r\n              | Termination Date     | N/A                        |\r\n              | Source               | True                       |\r\n              | Destination          | False                      |\r\n              | Forwardable          | False                      |\r\n              | Global               | False                      |\r\n              | Reserved-by-Protocol | True                       |\r\n              +----------------------+----------------------------+\r\n\r\n                          Table 1: \"This network\"", "notes": "RFC1122 states that 0.0.0.0/32 is \"this host on this network\" while 0.0.0.0/8 is \"this network\".\n --VERIFIER NOTES-- \n   -- verifier note --\r\nThis errata is a duplicate of errata 6404, which is verified.", "submit_date": "2021-01-21", "submitter_name": "Thomas", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2022-05-06 11:35:40"}, {"errata_id": "6417", "doc-id": "RFC5942", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "In bullet item 4, the behavior for hosts when the default router list is empty is specified in a way that means that no prefix can ever be considered on-link.  4.b says that address resolution (which I take to mean neighbor discovery) should not be performed for any non-link-local address.\r\n\r\nIt is entirely possible for an on-link, non-default router to advertise an on-link prefix. In this case, the prefix should be considered on-link, and address resolution should be permitted. I don't see a way to read the text to allow this.", "correct_text": "I think the confusion is in 4.b, which should read:\r\n\r\nThe host MUST NOT perform address resolution for non-link-local addresses that are not known to be on-link as described in section 3, part 1.", "notes": "I don't know if the problem is that \"non-link-local\" should have been \"non-on-link\" or if the authors just weren't taking RFC4191 into consideration, but in the presence of RFC4191, requiring a default router before a prefix can be considered on-link renders perfectly valid configurations non-functional.\n --VERIFIER NOTES-- \nSome 6MAN mailing list discussion:\r\n\r\n  * https://mailarchive.ietf.org/arch/msg/ipv6/APW-iXBmx6pkdu3iwNspy4TPWVI/\r\n\r\nThe phrase:\r\n\r\n    \"...and there is no other source of on-link information about any\r\n     address or prefix\"\r\n\r\nimplies that a non-default router could include PIOs advertising an on-link prefix.", "submit_date": "2021-01-29", "submitter_name": "Ted Lemon", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-10-18 22:37:01"}, {"errata_id": "6418", "doc-id": "RFC8401", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": " o  When the Prefix Attributes Flags sub-TLV [RFC7794] is present, the\r\n      N flag MUST be set and the R flag MUST NOT be set.", "correct_text": "  o  When the Prefix Attributes Flags sub-TLV [RFC7794] is present, the\r\n      N flag MUST be set.", "notes": "Early versions of the draft did not support leaking of BIER advertisements. At that time the requirement that R-flag be clear made sense. Once leaking was allowed the prohibition against R-bit being set no longer makes sense and should be removed.", "submit_date": "2021-01-31", "submitter_name": "Les Ginsberg", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-02-02 22:25:10"}, {"errata_id": "6420", "doc-id": "RFC2026", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "\"10.1.  General Policy\",\r\n\"10.3.  Rights and Permissions\",\r\n\"10.3.1.  All Contributions\",\r\n\"10.3.2. Standards Track Documents\", or\r\n\"10.4.  Notices\"", "correct_text": "\"10.1   General Policy\",\r\n\"10.3   Rights and Permissions\",\r\n\"10.3.1   All Contributions\",\r\n\"10.3.2  Standards Track Documents\", or\r\n\"10.4   Notices\"", "notes": "When a top-level section is introduced, its number is followed by a period. For example, section 1 begins with \"1.  INTRODUCTION\", and section 14 begins with \"14. DEFINITIONS OF TERMS\". This is consistent.\r\n\r\nWhen a subsection is introduced, its number usually not followed by a period, but it sometimes is. For example, section 3.3 begins with \"3.3  Requirement Levels\", but section 10.1 begins with \"10.1.  General Policy\". This is inconsistent. These inconsistencies are also in the Table of Contents.\r\n\r\n--- VERIFIER NOTES ---\r\nThese slight formatting inconsistencies do not cause any confusion for a reader. If this document is updated, they will be automatically corrected through the use of the xml2rfc toolchain, so this erratum does not need to be held for document update.\r\n\n --VERIFIER NOTES-- \n   ", "submit_date": "2021-02-03", "submitter_name": "Jason Yundt", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-03-11 07:44:28"}, {"errata_id": "6424", "doc-id": "RFC7991", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6", "orig_text": "   o  <list> elements (Section 3.4)\r\n", "correct_text": "", "notes": "The <list> element should be removed in 2.6. as it is deprecated and only occurs under <t>.", "submit_date": "2021-02-09", "submitter_name": "John Levine", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind (IAB Chair)", "update_date": "2021-03-05 17:18:53"}, {"errata_id": "6425", "doc-id": "RFC8976", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.3", "orig_text": "example.      86400  IN  ZONEMD  2018031900 241 1 (\r\n                                 e1846540e33a9e41\r\n                                 89792d18d5d131f6\r\n                                 05fc283e )\r\n", "correct_text": "<A ZONEMD record with a digest of length 48>", "notes": "2.2.3 defines Hash Algorithm 1 as SHA384, and says that \"the size of the Digest field is 48 octets\". There is nothing in 2.2.3 (or 2.2.2, where Scheme is defined) that indicates that Scheme and Hash Algorithm are dependent on each other, so the fact that the Scheme value (241) is private should have no effect on the digest computed by Hash Algorithm 1.\r\n\r\n==Verifier note\r\n\r\nRefer to https://mailarchive.ietf.org/arch/msg/dnsop/_QyYIdFsCw4FaewzYN3NxtVPaUs/", "submit_date": "2021-02-10", "submitter_name": "Brian Wellington", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-05-26 09:06:56"}, {"errata_id": "6426", "doc-id": "RFC8536", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.3", "orig_text": "   | 000    | 54 5a 69 66  | magic            | \"TZif\"                 |\r\n   | 004    | 33           | version          | '3' (3)                |\r\n   | 005    | 00 00 00 00  |                  |                        |\r\n   |        | 00 00 00 00  |                  |                        |\r\n   |        | 00 00 00 00  |                  |                        |\r\n   |        | 00 00 00     |                  |                        |\r\n   | 020    | 00 00 00 00  | isutccnt         | 0                      |\r\n   | 024    | 00 00 00 00  | isstdcnt         | 0                      |\r\n   | 028    | 00 00 00 00  | isleapcnt        | 0                      |\r\n   | 032    | 00 00 00 00  | timecnt          | 0                      |\r\n   | 036    | 00 00 00 00  | typecnt          | 0                      |\r\n   | 040    | 00 00 00 00  | charcnt          | 0                      |\r\n", "correct_text": "Delete this header.", "notes": "According to section 3.1 p. 6, the typecnt and charcnt fields of  the header MUST NOT be zero.\r\n\r\n===== Verifier notes =====\r\nThere are errors in these tables, but the suggested fix is not correct.  There really needs to be a proper update to the document instead.", "submit_date": "2021-02-12", "submitter_name": "Thomas Conner", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-02-21 14:40:06"}, {"errata_id": "6427", "doc-id": "RFC8971", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "00-52-02", "correct_text": "00-00-0E-00-52-02", "notes": "This is a 48-bit unicast MAC address. It starts with the IANA OUI (\"00-00-0E\"). There are two instances that should be corrected if this document is revised or replaced. But I don't think this fix is worth re-issuing the document. If someone one looks this up in the IANA assignment table, it says there that the unicast numbers all actually start with 00-00-0E.", "submit_date": "2021-02-13", "submitter_name": "Donald E. Eastlake, III", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2021-03-02 14:49:24"}, {"errata_id": "6428", "doc-id": "RFC7945", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "This RFC represents the consensus of the <insert_name> Research Group of the Internet Research Task Force (IRTF). ", "correct_text": "This RFC represents the consensus of the Information-Centric Networking Research Group (ICNRG) of the Internet Research Task Force (IRTF). ", "notes": "<insert_name> should be replaced by real name.", "submit_date": "2021-02-14", "submitter_name": "Jie Li", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2021-02-16 23:51:07"}, {"errata_id": "6429", "doc-id": "RFC2759", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.1.2.", "orig_text": "Authenticator authentication failure\r\n\r\n                         <- Authenticator Challenge\r\n       Peer Response/Challenge ->\r\n                         <- Success/Authenticator Response\r\n\r\n   (Authenticator Response verification fails, peer disconnects)", "correct_text": "Authenticator authentication failure\r\n\r\n                         <- Authenticator Challenge\r\n       Peer Response/Challenge ->\r\n                         <- Failure/Authenticator Response\r\n\r\n   (Authenticator Response verification fails, peer disconnects)", "notes": "According to section 6. Failure Packet is identical in format to the standard CHAP Failure packet, but there are different codes for success and for failure so in case of failure the returned code must be 4 thus in section 9.1.2. the line \"<- Success/Authenticator Response\"  the response logic should be Failure, not Succsess.\n --VERIFIER NOTES-- \n   The example is when the authenticator fails authenticate itself to the peer (i.e., it is a rogue authenticator). MS-CHAPv2 is doing piggy-backed mutual authentication.", "submit_date": "2021-02-14", "submitter_name": "Valentin Atanasov", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 13:13:03"}, {"errata_id": "6430", "doc-id": "RFC8216", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.2", "orig_text": "[M3U]      Nullsoft, Inc., \"The M3U Playlist format, originally\r\n           invented for the Winamp media player\",\r\n           <https://en.wikipedia.org/w/\r\n           index.php?title=M3U7amp;oldid=786631666>.\r\n", "correct_text": "[M3U]      \"M3U (MP3 URL)\", <https://en.wikipedia.org/wiki/M3U>.", "notes": "The original reference is to an archived page, and the reference title includes subjective opinion about the reference.\r\nThe new reference is current, stable, and avoids opinion.", "submit_date": "2021-02-14", "submitter_name": "Ahmet Katranci", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-02-16 17:46:53"}, {"errata_id": "6432", "doc-id": "RFC7208", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4", "orig_text": "In accordance with how the records are published (see Section 3\r\nabove), a DNS query needs to be made for the <domain> name, querying\r\nfor type TXT only.", "correct_text": "?", "notes": "Request for clarification: Are CNAME indirections allowed or, in other words, do they have to be followed during record lookup? If yes, do they count towards the DNS lookup limits as defined in section 4.6.4? If yes, the following sentence has to be adapted as well: \"SPF implementations MUST limit the total number of those terms to 10 during SPF evaluation, to avoid unreasonable load on the DNS.\" If the answer to the first question is no, then this should be made clear in section 4.4.\r\n\r\nPlease note that whether using CNAMEs is a good or bad idea is irrelevant to my question. I also know that you can't add a CNAME record to an apex domain but SPF is not limited to such domains. I assume the answer/consensus will be the same for the initial, `a`,  `include`, `exists` and `redirect` lookups. If not, this should also be clarified, of course.\n --VERIFIER NOTES-- \n   Errata reports are not the place to ask questions.  An appropriate mailing list on which to discuss SPF is the <ietf-smtp> list.", "submit_date": "2021-02-17", "submitter_name": "Kaspar Etter", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-02-17 16:12:18"}, {"errata_id": "6431", "doc-id": "RFC8843", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15", "orig_text": "A media recipient informs the media sender about the identification-\r\ntag associated with an \"m=\" section through the use of a 'id'\r\nattribute [RFC5888].", "correct_text": "A media recipient informs the media sender about the identification-\r\ntag associated with an \"m=\" section through the use of a 'mid'\r\nattribute [RFC5888].", "notes": "As you can see In section 2. Terminology, Identification-tag is a unique token value that is used to identify an \"m=\" section.  The SDP **'mid'** attribute [RFC5888] in an \"m=\" section carries the unique identification-tag assigned to that \"m=\" section. I think the 'm' is missing.", "submit_date": "2021-02-16", "submitter_name": "EungRok Lee", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-02-17 16:10:22"}, {"errata_id": "6434", "doc-id": "RFC5654", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "52  An MPLS-TP control plane MUST support operation of the recovery\t\r\n\t       functions described in Section 2.8.\t \t", "correct_text": "52  An MPLS-TP control plane MUST support operation of the recovery\t\r\n\t       functions described in Section 2.5.", "notes": "There is no section 2.8 in this document. During revision, section changed to 2.5.", "submit_date": "2021-02-20", "submitter_name": "Peter Goorts", "verifier_id": "", "verifier_name": "Deborah Brungard", "update_date": "2021-02-26 21:16:44"}, {"errata_id": "6435", "doc-id": "RFC8536", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   >> Response <<\r\n\r\n   HTTP/1.1 200 OK\r\n   Date: Fri, 01 Jun 2018 14:52:23 GMT\r\n   Content-Type: application/json; charset=\"utf-8\"\r\n   Content-Length: xxxx", "correct_text": "   >> Response <<\r\n\r\n   HTTP/1.1 200 OK\r\n   Date: Fri, 01 Jun 2018 14:52:23 GMT\r\n   Content-Type: application/json\r\n   Content-Length: xxxx", "notes": "There is no charset parameter on application/json. See https://tools.ietf.org/html/rfc8259#section-11 (last sentence).", "submit_date": "2021-02-20", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-02-21 14:38:36"}, {"errata_id": "6422", "doc-id": "RFC3461", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.3", "orig_text": "MTA names of type \"dns\" SHOULD be valid Internet domain names.\r\nIf such domain names are not available, a domain-literal\r\ncontaining the internet protocol address is acceptable.  Such\r\ndomain names generally conform to the following syntax:\r\n\r\n        domain = real-domain / domain-literal\r\n\r\n        real-domain = sub-domain *(\".\" sub-domain)\r\n\r\n        sub-domain = atom\r\n\r\n        domain-literal = \"[\" 1*3DIGIT 3(\".\" 1*3DIGIT) \"]\"\r\n\r\nwhere \"atom\" and \"DIGIT\" are defined in [2].\r\n", "correct_text": "MTA names of type \"dns\" SHOULD be valid Internet domain names.\r\nIf such domain names are not available, a domain-literal\r\ncontaining the internet protocol address is acceptable.  Such\r\ndomain names generally conform to the following syntax:\r\n\r\n        domain = real-domain / domain-literal\r\n\r\n        real-domain = sub-domain *(\".\" sub-domain)\r\n\r\n        sub-domain = atom\r\n\r\nwhere \"atom\" and \"domain-literal\" are defined in [2].\r\n", "notes": "Domain literals should not have been restricted to IPv4 addresses. Note that an alternate way to fix this that could be done without a revision or errata would be to published a short RFC that defines a new MTA name type, say \"alit\" that could then be used for address literals.", "submit_date": "2021-02-05", "submitter_name": "Ned Freed", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-02-05 15:41:58"}, {"errata_id": "6423", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "| 1 Jan 1972  | 41,317     | 0   | 2,272,060,800 | First day UTC    |", "correct_text": "| 1 Jan 1972  | 41,317     | 0   | 2,272,060,800 | First day \"modern\" UTC |", "notes": "The initial definition of UTC was introduced in 1963 with CCIR Recommendation 374. The time standard specified that seconds had a varying duration. In 1970, CCIR Recommendation 460 introduced the current definition of UTC, using leap seconds, which was implemented on the first second of 1972. Consult D. McCarthy's \"Note on Coordinated Universal Time\" (numbered CCTF/09-32 by the Consultative Committee for Time and Frequency of the BIPM) for more information.\r\n\r\n---\r\n\r\nThere may perhaps be more precise terminology than \"modern\", but this point should be addressed by a document that updates or replaces this one.", "submit_date": "2021-02-07", "submitter_name": "Stijn van Drongelen", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-07-27 15:30:52"}, {"errata_id": "6438", "doc-id": "RFC7643", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1.", "orig_text": "     version  The version of the resource being returned.  This value\r\n         must be the same as the entity-tag (ETag) HTTP response header\r\n         (see Sections 2.1 and 2.3 of [RFC7232]).  This attribute has\r\n         \"caseExact\" as \"true\".  Service provider support for this\r\n         attribute is optional and subject to the service provider's\r\n         support for versioning (see Section 3.14 of [RFC7644]).  If a\r\n         service provider provides \"version\" (entity-tag) for a\r\n         representation and the generation of that entity-tag does not\r\n         satisfy all of the characteristics of a strong validator (see\r\n         Section 2.1 of [RFC7232]), then the origin server MUST mark the\r\n         \"version\" (entity-tag) as weak by prefixing its opaque value\r\n         with \"W/\" (case sensitive).", "correct_text": "     version  The version of the resource being returned.  This value\r\n         must be the same as the entity-tag (ETag) HTTP response header\r\n         (see Sections 2.1 and 2.3 of [RFC7232]).  This attribute has\r\n         \"caseExact\" as \"true\".  Service provider support for this\r\n         attribute is optional and subject to the service provider's\r\n         support for versioning (see Section 3.14 of [RFC7644]).  If a\r\n         service provider provides \"version\" (entity-tag) for a\r\n         representation and the generation of that entity-tag does not\r\n         satisfy all of the characteristics of a strong validator (see\r\n         Section 2.1 of [RFC7232]), then the origin server MUST mark the\r\n         \"version\" (entity-tag) as weak by prefixing its opaque value\r\n         with \"W/\" (case sensitive).", "notes": "In the original text, the hyperlinks applied to \"2.1\" and \"2.3\" incorrectly link to those sections in RFC 7643, whereas they should link to those sections in RFC 7232.\n --VERIFIER NOTES-- \nErrata reports are for errors in the canonical version, which, for these RFCs, are the plain text versions.  HTML renderings that include heuristically-generated links aren't covered by the errata system.", "submit_date": "2021-02-23", "submitter_name": "Andrew Webb", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-02-23 13:58:02"}, {"errata_id": "6439", "doc-id": "RFC7489", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "For example, if a DMARC policy query for \"blue.example.com\" contained\r\n\"rua=mailto:reports@red.example.net\", the host extracted from the\r\nlatter (\"red.example.net\") does not match \"blue.example.com\", so this\r\nprocedure is enacted.", "correct_text": "For example, if a DMARC policy query for \"blue.example.com\" contained\r\n\"rua=mailto:reports@red.example.net\", the Organizational Domain of the\r\nhost extracted from the latter (\"example.net\") does not match the\r\nOrganizational Domain \"example.com\", so this procedure is enacted.", "notes": "Section 7.1 (third paragraph) is clear that it is the Organizational Domains which are to be compared in order to make a determination on the need to perform validation steps. The example incorrectly makes this determination by comparing the hostnames instead of the Organizational Domains.", "submit_date": "2021-02-23", "submitter_name": "Michael Norton", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-02-24 22:25:35"}, {"errata_id": "6440", "doc-id": "RFC8959", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "2", "orig_text": "   GET /authenticated/stuff HTTP/1.1\r\n   Host: www.example.com\r\n   Authorization: Bearer\r\n     secret-token:E92FB7EB-D882-47A4-A265-A0B6135DC842%20foo", "correct_text": "   POST /authenticated/stuff HTTP/1.1\r\n   Host: www.example.com\r\n   Content-Type: application/x-www-form-urlencoded\r\n\r\n   access_token=secret-token:E92FB7EB-D882-47A4-A265-A0B6135DC842%20foo", "notes": "RFC7235 doesn't allow the ':' character in the token68 version of credentials, so the example given isn't technically allowed by either it or RFC6750 -- although it is known to be interoperable, because no known software enforces that arbitrary restriction.\r\n\r\nThis revised example shows a way to do it that is spec-conformant.", "submit_date": "2021-02-24", "submitter_name": "Mark Nottingham", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6441", "doc-id": "RFC8878", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "A.1.  Literals Length Code Table\r\n\r\n                +=======+========+================+======+\r\n                | State | Symbol | Number_Of_Bits | Base |\r\n                +=======+========+================+======+\r\n                |   0   |   0    |       0        |  0   |\r\n                +-------+--------+----------------+------+\r\n                |   0   |   0    |       4        |  0   |\r\n                +-------+--------+----------------+------+\r\n[...]\r\n\r\nA.2.  Match Length Code Table\r\n\r\n                +=======+========+================+======+\r\n                | State | Symbol | Number_Of_Bits | Base |\r\n                +=======+========+================+======+\r\n                |   0   |   0    |       0        |  0   |\r\n                +-------+--------+----------------+------+\r\n                |   0   |   0    |       6        |  0   |\r\n                +-------+--------+----------------+------+\r\n\r\n[...]\r\n\r\nA.3.  Offset Code Table\r\n\r\n                +=======+========+================+======+\r\n                | State | Symbol | Number_Of_Bits | Base |\r\n                +=======+========+================+======+\r\n                |   0   |   0    |       0        |  0   |\r\n                +-------+--------+----------------+------+\r\n                |   0   |   0    |       5        |  0   |\r\n                +-------+--------+----------------+------+", "correct_text": "A.1.  Literals Length Code Table\r\n\r\n                +=======+========+================+======+\r\n                | State | Symbol | Number_Of_Bits | Base |\r\n                +=======+========+================+======+\r\n                |   0   |   0    |       4        |  0   |\r\n                +-------+--------+----------------+------+\r\n[...]\r\n\r\nA.2.  Match Length Code Table\r\n\r\n                +=======+========+================+======+\r\n                | State | Symbol | Number_Of_Bits | Base |\r\n                +=======+========+================+======+\r\n                |   0   |   0    |       6        |  0   |\r\n                +-------+--------+----------------+------+\r\n\r\n[...]\r\n\r\nA.3.  Offset Code Table\r\n\r\n                +=======+========+================+======+\r\n                | State | Symbol | Number_Of_Bits | Base |\r\n                +=======+========+================+======+\r\n                |   0   |   0    |       5        |  0   |\r\n                +-------+--------+----------------+------+", "notes": "Each of the three tables in Appendix A contain two entries for state 0, the first of which in each case incorrectly reports the Number_Of_Bits as 0. The all-zero rows should be removed.", "submit_date": "2021-02-25", "submitter_name": "Felix Handte", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-08 17:31:31"}, {"errata_id": "6484", "doc-id": "RFC8525", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "     revision 2016-04-09 {\r\n       description\r\n         \"Initial revision.\";\r\n       reference\r\n         \"RFC 7895: YANG Module Library\";\r\n     }", "correct_text": "     revision 2016-06-21 {\r\n       description\r\n         \"Initial revision.\";\r\n       reference\r\n         \"RFC 7895: YANG Module Library\";\r\n     }", "notes": "Initial revision of ietf-yang-library YANG module was 2016-06-21, not 2016-04-09.\r\n\r\nThis is a valid issue but fixing it requires a new version of the YANG module to be published, which cannot be done via the errata process, hence resolved as \"Held for Document Update\".", "submit_date": "2021-03-15", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 18:04:07"}, {"errata_id": "7293", "doc-id": "RFC2324", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3", "orig_text": "coffee-scheme = ( \"koffie\"                      ; Afrikaans, Dutch\r\n                  | \"q%C3%A6hv%C3%A6\"          ; Azerbaijani\r\n                  | \"%D9%82%D9%87%D9%88%D8%A9\" ; Arabic\r\n               | \"akeita\"                   ; Basque\r\n               | \"koffee\"                   ; Bengali\r\n               | \"kahva\"                    ; Bosnian\r\n               | \"kafe\"                     ; Bulgarian, Czech\r\n               | \"caf%C3%E8\"                ; Catalan, French, Galician\r\n                  | \"%E5%92%96%E5%95%A1\"       ; Chinese\r\n                  | \"kava\"                     ; Croatian\r\n               | \"k%C3%A1va                 ; Czech\r\n               | \"kaffe\"                    ; Danish, Norwegian, Swedish\r\n               | \"coffee\"                   ; English\r\n               | \"kafo\"                     ; Esperanto\r\n                  | \"kohv\"                     ; Estonian\r\n               | \"kahvi\"                    ; Finnish\r\n               | \"%4Baffee\"                 ; German\r\n               | \"%CE%BA%CE%B1%CF%86%CE%AD\" ; Greek\r\n               | \"%E0%A4%95%E0%A5%8C%E0%A4%AB%E0%A5%80\" ; Hindi\r\n               | \"%E3%82%B3%E3%83%BC%E3%83%92%E3%83%BC\" ; Japanese\r\n               | \"%EC%BB%A4%ED%94%BC\"       ; Korean\r\n               | \"%D0%BA%D0%BE%D1%84%D0%B5\" ; Russian\r\n               | \"%E0%B8%81%E0%B8%B2%E0%B9%81%E0%B8%9F\" ; Thai\r\n               )", "correct_text": "coffee-scheme = ( \"koffie\"                   ; Afrikaans, Dutch\r\n                | \"q%C3%A6hv%C3%A6\"          ; Azerbaijani\r\n                | \"%D9%82%D9%87%D9%88%D8%A9\" ; Arabic\r\n                | \"akeita\"                   ; Basque\r\n                | \"koffee\"                   ; Bengali\r\n                | \"kahva\"                    ; Bosnian\r\n                | \"kafe\"                     ; Bulgarian, Czech\r\n                | \"caf%C3%E8\"                ; Catalan, French, Galician\r\n                | \"%E5%92%96%E5%95%A1\"       ; Chinese\r\n                | \"kava\"                     ; Croatian\r\n                | \"k%C3%A1va                 ; Czech\r\n                | \"kaffe\"                    ; Danish, Norwegian, Swedish\r\n                | \"coffee\"                   ; English\r\n                | \"kafo\"                     ; Esperanto\r\n                | \"kohv\"                     ; Estonian\r\n                | \"kahvi\"                    ; Finnish\r\n                | \"%4Baffee\"                 ; German\r\n                | \"%CE%BA%CE%B1%CF%86%CE%AD\" ; Greek\r\n                | \"%E0%A4%95%E0%A5%8C%E0%A4%AB%E0%A5%80\" ; Hindi\r\n                | \"caff%C3%A8\"               ; Italian\r\n                | \"%E3%82%B3%E3%83%BC%E3%83%92%E3%83%BC\" ; Japanese\r\n                | \"%EC%BB%A4%ED%94%BC\"       ; Korean\r\n                | \"%D0%BA%D0%BE%D1%84%D0%B5\" ; Russian\r\n                | \"%E0%B8%81%E0%B8%B2%E0%B9%81%E0%B8%9F\" ; Thai\r\n                )", "notes": "Added missing Italian URI \"caff\u00e8\".\r\nFixed indentation with spaces.\r\nSource for spelling: https://www.treccani.it/vocabolario/caffe/\n --VERIFIER NOTES-- \nThank you for the report.  This sort of erratum would normally require an update, but this RFC will not be updated.", "submit_date": "2022-12-29", "submitter_name": "Cristian Antonuccio", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-11-01 12:19:21"}, {"errata_id": "6442", "doc-id": "RFC8878", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.1.5", "orig_text": "   The following table shows the values of the Repeated_Offsets as a\r\n   series of sequences are applied to them:\r\n\r\n   +=======+==========+===========+===========+===========+============+\r\n   |offset_|literals_ | Repeated_ | Repeated_ | Repeated_ |Comment     |\r\n   | value |  length  |  Offset1  |  Offset2  |  Offset3  |            |\r\n   +=======+==========+===========+===========+===========+============+\r\n   |       |          |     1     |     4     |     8     |starting    |\r\n   |       |          |           |           |           |values      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   1114|    11    |    1111   |     1     |     4     |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    22    |    1111   |     1     |     4     |repeat 1; no|\r\n   |       |          |           |           |           |change      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   2225|    22    |    2222   |    1111   |     1     |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   1114|   111    |    1111   |    2222   |    1111   |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   3336|    33    |    3333   |    1111   |    2222   |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      2|    22    |    1111   |    3333   |    2222   |repeat 2;   |\r\n   |       |          |           |           |           |swap 1 & 2  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      3|    33    |    2222   |    1111   |    3333   |repeat 3;   |\r\n   |       |          |           |           |           |rotate 3 to |\r\n   |       |          |           |           |           |1           |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    0     |    2221   |    2222   |    1111   |insert      |\r\n   |       |          |           |           |           |resolved    |\r\n   |       |          |           |           |           |offset      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    0     |    2222   |    2221   |    3333   |repeat 2    |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n\r\n                         Table 18: Repeated_Offsets", "correct_text": "   The following table shows the values of the Repeated_Offsets as a\r\n   series of sequences are applied to them:\r\n\r\n   +=======+==========+===========+===========+===========+============+\r\n   |offset_|literals_ | Repeated_ | Repeated_ | Repeated_ |Comment     |\r\n   | value |  length  |  Offset1  |  Offset2  |  Offset3  |            |\r\n   +=======+==========+===========+===========+===========+============+\r\n   |       |          |     1     |     4     |     8     |starting    |\r\n   |       |          |           |           |           |values      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   1114|    11    |    1111   |     1     |     4     |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    22    |    1111   |     1     |     4     |repeat 1; no|\r\n   |       |          |           |           |           |change      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   2225|    22    |    2222   |    1111   |     1     |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   1114|   111    |    1111   |    2222   |    1111   |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   3336|    33    |    3333   |    1111   |    2222   |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      2|    22    |    1111   |    3333   |    2222   |repeat 2;   |\r\n   |       |          |           |           |           |swap 1 & 2  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      3|    33    |    2222   |    1111   |    3333   |repeat 3;   |\r\n   |       |          |           |           |           |rotate 3 to |\r\n   |       |          |           |           |           |1           |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      3|    0     |    2221   |    2222   |    1111   |insert      |\r\n   |       |          |           |           |           |resolved    |\r\n   |       |          |           |           |           |offset      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    0     |    2222   |    2221   |    3333   |repeat 2    |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n\r\n                         Table 18: Repeated_Offsets", "notes": "The offset_value in the second-to-last line in the table should be 3, not 1. This line intends to demonstrate the property described earlier in the section that when the sequence's literals_length is 0, an offset_value of 3 resolves to Repeated_Offset1 - 1 and is inserted at the head of the Repeated_Offsets. This is the behavior that is reflected in the rest of the row, which an offset_value of 1 would not trigger (the resolved offset would be 2222, not 2221, and the Repeated_Offsets would remain unchanged, as demonstrated in the 3rd row of the table).\r\n\r\n(I wrote this table and it read 3 in the version I provided to the document authors--a typo was introduced somewhere.)", "submit_date": "2021-02-25", "submitter_name": "Felix Handte", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-08 17:31:55"}, {"errata_id": "6443", "doc-id": "RFC3029", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix E", "orig_text": "  ContentInfo FROM CryptographicMessageSyntax {iso(1)\r\n  member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n  smime(16) modules(0) cms(1)}", "correct_text": "  ContentInfo, DigestAlgorithmIdentifier\r\n  FROM CryptographicMessageSyntax\r\n    {iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9)\r\n     smime(16) modules(0) cms(1)}", "notes": "DigestAlgorithmIdentifier is not defined in the ASN.1 Module.  The easiest fix is to IMPORT it from the CMS ASN.1 Module.", "submit_date": "2021-02-26", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-02-26 20:52:50"}, {"errata_id": "6444", "doc-id": "RFC3029", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix E", "orig_text": "  GeneralName, PolicyInformation\r\n  FROM PKIX1Implicit88 {iso(1) identified-organization(3)\r\n  dod(6) internet(1) security(5) mechanisms(5) pkix(7)\r\n  id-mod(0) id-pkix1-implicit-88(2)}", "correct_text": "  GeneralName, GeneralNames, PolicyInformation\r\n  FROM PKIX1Implicit88 {iso(1) identified-organization(3)\r\n  dod(6) internet(1) security(5) mechanisms(5) pkix(7)\r\n  id-mod(0) id-pkix1-implicit-88(2)}", "notes": "The ASN.1 Module uses GeneralName and GeneralNames, but only one of them is IMPORTed.  The suggested fix IMPORTS both of GeneralName and GeneralNames.", "submit_date": "2021-02-26", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-05-10 00:14:45"}, {"errata_id": "6445", "doc-id": "RFC3029", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix E", "orig_text": "Version ::= Integer\r\n", "correct_text": "Version ::= INTEGER\r\n", "notes": "INTEGER must be in all capital letters for the ASN.1 Module to compile.\r\n\r\nPaul Wouters (AD): However \"Version\" does not appear to be reference elsewhere in the module.  The \"version\" fields use an explicit \"INTEGER\"", "submit_date": "2021-02-26", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-12 20:24:16"}, {"errata_id": "6446", "doc-id": "RFC2181", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1, 5, 6, 10", "orig_text": "label", "correct_text": "owner", "notes": "Sections 1, 5, 6, and 10 consistently use the term \"label\" to incorrectly refer to what STD 13 calls an \"owner\". There may also be additional instances of \"label\" being used incorrectly in Section 11.\r\n\r\n-- verifier note --\r\n\r\nIt seems to me that the term \"label\" using in RFC 2181 is consistent with RFC 8499 & STD 13.\n --VERIFIER NOTES-- \n   It seems to me that the term \"label\" using in RFC 2181 is consistent with RFC 8499 & STD 13.", "submit_date": "2021-02-27", "submitter_name": "Robert Edmonds", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:57:02"}, {"errata_id": "6447", "doc-id": "RFC2131", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "a client requests the use of an address for some period of time.  The \r\nallocation mechanism (the collection of DHCP servers) guarantees not \r\nto reallocate that address within the requested time", "correct_text": "a client requests the use of an address for some period of time.  The \r\nallocation mechanism (the collection of DHCP servers) may or may not be able or willing to grant a lease for the requested duration.  Any lease duration it offers it then guarantees not to reallocate within the offered time", "notes": "It is simply ludicrous to imagine that clients are in control of the lease duration, and that servers will simply comply, regardless of resource availability.\n --VERIFIER NOTES-- \n   The text does not say that the DHCP servers must grant the requested leased time. I.e., the current text is OK.", "submit_date": "2021-03-01", "submitter_name": "Adrien de Croy", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 11:06:53"}, {"errata_id": "6448", "doc-id": "RFC5806", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "The following is an extension of tables 4 and 5 in [RFC3261] for the Diversion header:", "correct_text": "The following is an extension of tables 2 and 3 in [RFC3261] for the Diversion header:", "notes": "RFC3261 table 2 & 3 are the \"Summary of header fields\" which is the correct referencing point of the new Diversion header, while table 4 & 5 are for Timers.", "submit_date": "2021-03-02", "submitter_name": "WK Sze", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-03-15 10:36:12"}, {"errata_id": "6449", "doc-id": "RFC8782", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "   The Server Name Indication (SNI) extension [RFC6066] i defines a\r\n   mechanism for a client to tell a (D)TLS server the name of the server\r\n   it wants to contact.", "correct_text": "   The Server Name Indication (SNI) extension [RFC6066] defines a\r\n   mechanism for a client to tell a (D)TLS server the name of the server\r\n   it wants to contact.", "notes": "extra \"i\"", "submit_date": "2021-03-02", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-03-02 16:30:16"}, {"errata_id": "6514", "doc-id": "RFC5684", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Copyright Notice, it says:", "orig_text": "(http:trustee.ietf.org/license-info)", "correct_text": "(http://trustee.ietf.org/license-info)", "notes": "", "submit_date": "2021-04-02", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-04-03 05:30:21"}, {"errata_id": "6515", "doc-id": "RFC5708", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Copyright Notice, it says:", "orig_text": "(http:trustee.ietf.org/license-info)", "correct_text": "(http://trustee.ietf.org/license-info)", "notes": "", "submit_date": "2021-04-02", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-04-03 05:30:23"}, {"errata_id": "6450", "doc-id": "RFC3031", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "2.2. Terminology defines the terms\r\n\r\n        Layer 2         layer 2 the protocol layer under layer 3 \r\n                        (which therefore offers the services used by layer 3)\r\n        Layer 3         the protocol layer at which IP and its associated \r\n                        routing protocols operate\r\n\r\n2.3. Acronyms and Abbreviations defines \r\n\r\n        L2              Layer 2\r\n        L3              Layer 3\r\n\r\nHowever, in 3.14. Scope and Uniqueness of Labels, 4.3. Label Stacks and Implicit Peering, 4.5. LSP Trees as Multipoint-to-Point Entities, and 4.6. LSP Tunneling between BGP Border Routers, L1, L2 and L3 are used as differentiating names for certain labels attached to packets. \r\n\r\nOf course, in 3.23. Time-to-Live (TTL), L2 is used to refer to layer 2 frame header and to a layer 2 switch, which is correct. \r\n\r\nHowever, in 4.3. Label Stacks and Implicit Peering, the term level 1 is used to refer to the LIFO (stack) ordinal number of a label then named L1 and given a protocol layer 2 protocol of layer 2 (L2). Furthermore, labels named L2 and then L1 are pushed onto the stack of labels prefixed to the packet. To top it all off the packet's stack attribute as protocol level 2 (L2). \r\n\r\nOf course, in 3.17. LSP Next Hop, 4.1.5. The Implicit NULL Label, 5.1.1.2. PushConditional, 5.1.1.4. PulledConditional, 5.1.2.2. RequestWhenNeeded, 5.1.3. Upstream LSR: NotAvailable Procedure, 5.1.4. Upstream LSR: Release Procedure, 5.1.4.2. NoReleaseOnChange, 5.1.5. Upstream LSR: labelUse Procedure, 5.2.2. Schemes for LSRs that do not Support Label Merging, refer to L3 meaning level 3, which is correct. \r\n\r\nFurthermore, in 3.1. Labels, 3.2. Upstream and Downstream LSRs, 3.4. Label Assignment and Distribution, 3.5. Attributes of a Label Binding, 3.14. Scope and Uniqueness of Labels, 4.1.2.2. Distributing Labels, 5.1.5. Upstream LSR: labelUse Procedure, 5.1.5.2. UseIfLoopNotDetected, 5.1.6. Downstream LSR: Withdraw Procedure\r\n\r\n * L is used as a name for a certain label attached to packet, and \r\n\r\n * L is used as a arbitrary value assigned to a label attached to a packet\r\n", "correct_text": "I have not provided any corrected text as I've literally \"highlighted\" 44 places in a pdf format file of RFC 3031 that are ambiguous. \r\n\r\nAs there is no facility to attach a file to this Report Errata for RFC3031 form, i will send the file commented pdf file upon request. ", "notes": "My rational for highlighting (no pun intended) these problems is that the overloading of the L2, L3 abbreviations layer 2 and layer 3, with the names L1, L2, L3 and L for labels, plus the use of L1 and L2 as indexed names for the ordinal position of a label prefixed to a payload, then to use L2 and L3 as to actually mean layer 2 and layer is uh ... sloppy. \r\n\r\n\r\nHonestly, I can't understand how RFC 3031 has been posted for twenty years and that it is on the Standards Track and no one has found these problems. \r\n\r\nIts similar to when someone publishes a mathematical treatise and use the same set of variable names {x, y, z, t} over and over again in different contexts spread throughout the paper. Its intractable and practically gibberish. \r\n\r\nI apologize if my criticism is harsh regarding this problem but I spent a considerable amount of my time reading this document trying to make sense of it before I realized that the fault is not mine but it is of the document.\r\n\r\n[Andrew] This seems to wide and generalized to be a simple errata, as such I am marking this as held for document update.", "submit_date": "2021-03-04", "submitter_name": "Duane L. Anderson", "verifier_id": "", "verifier_name": "Andrew Alston", "update_date": "2025-05-06 21:12:26"}, {"errata_id": "6452", "doc-id": "RFC7914", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "     3. for i = 0 to N - 1 do\r\n          j = Integerify (X) mod N\r\n                 where Integerify (B[0] ... B[2 * r - 1]) is defined\r\n                 as the result of interpreting B[2 * r - 1] as a\r\n                 little-endian integer.", "correct_text": "     3. for i = 0 to N - 1 do\r\n          j = Integerify (X) mod N\r\n                 where Integerify (B[0] ... B[2 * r - 1]) is defined\r\n                 as the result of interpreting B[r] ... B[r + 3] as a\r\n                 little-endian integer.", "notes": "The original description of Integerify looks, to a programmer, as though a single byte (the final octet) is being converted to an integer (as with the Python `ord` operation). But that wouldn't make sense with the term \"little-endian\", which has meaning only with multiple-byte words. So the likely conclusion would be that this was a typographical error, and that the entire string X (or B) should be treated as an integer [e.g., Python3 int.from_bytes(b'\\xff\\xff\\xff\\xff\\xff\\xff\\xff\\xff', 'little')]. However, this interpretation of Integerify gives results that do not match the test vectors.\r\n\r\nBy looking at other people's code (https://github.com/ricmoo/pyscrypt in particular) I found that using the 4 bytes beginning halfway through the octet string gives results which do match the test vectors.", "submit_date": "2021-03-05", "submitter_name": "John Comeau", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6487", "doc-id": "RFC8152", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "C.7", "orig_text": "In order the keys are:\r\n\r\n   o  An EC key with a kid of \"meriadoc.brandybuck@buckland.example\"\r\n\r\n   o  An EC key with a kid of \"peregrin.took@tuckborough.example\"\r\n\r\n   o  An EC key with a kid of \"bilbo.baggins@hobbiton.example\"\r\n\r\n   o  An EC key with a kid of \"11\"\r\n", "correct_text": "In order the keys are:\r\n\r\n   o  An EC key with a kid of \"meriadoc.brandybuck@buckland.example\"\r\n\r\n   o  An EC key with a kid of \"11\"\r\n\r\n   o  An EC key with a kid of \"bilbo.baggins@hobbiton.example\"\r\n\r\n   o  An EC key with a kid of \"peregrin.took@tuckborough.example\"\r\n\r\n\r\n", "notes": "The order of this list does not match the actual keys listed subsequently.", "submit_date": "2021-03-18", "submitter_name": "Thomas Fossati", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-07-21 20:30:13"}, {"errata_id": "6455", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "         Ease of implementaion, sharing code, and modular programming\r\n         argue for the second approach.", "correct_text": "         Ease of implementation, sharing code, and modular programming\r\n         argue for the second approach.", "notes": "Typo.", "submit_date": "2021-03-07", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-07 15:05:11"}, {"errata_id": "6456", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "      RFC 354 obsoleted RFCs 264 and 265.  The File Transfer Protocol\r\n      was now defined as a protocol for file transfer between HOSTs on\r\n      the ARPANET, with the primary function of FTP defined as\r\n      transfering files efficiently and reliably among hosts and\r\n      allowing the convenient use of remote file storage capabilities.", "correct_text": "      RFC 354 obsoleted RFCs 264 and 265.  The File Transfer Protocol\r\n      was now defined as a protocol for file transfer between HOSTs on\r\n      the ARPANET, with the primary function of FTP defined as\r\n      transferring files efficiently and reliably among hosts and\r\n      allowing the convenient use of remote file storage capabilities.", "notes": "Misspelled \"transferring\".", "submit_date": "2021-03-07", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-07 16:21:38"}, {"errata_id": "6457", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "      Reuse of the Data Connection:  When using the stream mode of data\r\n      transfer the end of the file must be indicated by closing the\r\n      connection.  This causes a problem if multiple files are to be\r\n      transfered in the session, due to need for TCP to hold the\r\n      connection record for a time out period to guarantee the reliable\r\n      communication.  Thus the connection can not be reopened at once.", "correct_text": "      Reuse of the Data Connection:  When using the stream mode of data\r\n      transfer the end of the file must be indicated by closing the\r\n      connection.  This causes a problem if multiple files are to be\r\n      transferred in the session, due to need for TCP to hold the\r\n      connection record for a time out period to guarantee the reliable\r\n      communication.  Thus the connection can not be reopened at once.", "notes": "Misspelled \"transferred\".", "submit_date": "2021-03-07", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-07 16:22:38"}, {"errata_id": "6458", "doc-id": "RFC792", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "[Page 17]", "orig_text": "      If the time is not available in miliseconds or cannot be provided", "correct_text": "      If the time is not available in milliseconds or cannot be provided", "notes": "Misspelled \"milliseconds\".", "submit_date": "2021-03-07", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-03-07 20:31:03"}, {"errata_id": "6459", "doc-id": "RFC5088", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "   This document provides new capability bit flags, which are present in\r\n   the PCE-CAP-FLAGS TLV referenced in Section 4.1.5.\r\n", "correct_text": "   This document provides new capability bit flags, which are present in\r\n   the PCE-CAP-FLAGS TLV referenced in Section 4.5.\r\n", "notes": "There is no Section 4.1.5.", "submit_date": "2021-03-08", "submitter_name": "tom petch", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2021-03-25 21:59:33"}, {"errata_id": "6460", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "than typical occurances.  This section outlines a recommended basic", "correct_text": "than typical occurrences.  This section outlines a recommended basic", "notes": "Misspelled \"occurrences\".", "submit_date": "2021-03-08", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Barry Leiba", "update_date": "2021-03-08 17:40:09"}, {"errata_id": "6472", "doc-id": "RFC8175", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12.4, para 2", "orig_text": "A Peer Offer Signal MUST be encoded within a UDP packet.  The IP source and destination fields in the packet MUST be set by swapping the values received in the Peer Discovery Signal.  The Peer Offer Signal completes the discovery process; see Section 7.1.", "correct_text": "A Peer Offer Signal MUST be encoded within a UDP packet. The IP source and destination fields (addresses and ports) in the packet MUST be set by swapping the values received in the Peer Discovery Signal, with the exception that the new source address on the Offer Signal, which was the well-known destination address, becomes a local IP from the DLEP modem. The source port remains the well-known port from the Peer Discovery Signal. The Peer Offer signal contains zero or more connection points as described in 13.2 and 13.3 completes the discovery process; see Section 7.1 ", "notes": "The original text will not result in a valid unicast IP packet.\r\n\r\n=====\r\nAD Note:  The original text is clearly wrong.  There has been discussion in the WG about the proper wording for the \"corrected text\".  Given that the current text results in an invalid packet, I am marking this report as Verified.\r\n\r\nhttps://mailarchive.ietf.org/arch/msg/manet/h8Sa924gn6ZmAZ7XNp-5UUrZlAY/", "submit_date": "2021-03-10", "submitter_name": "Rick Taylor", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-05-26 19:31:27"}, {"errata_id": "6473", "doc-id": "RFC8040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.3.2", "orig_text": "   Example 3: depth=3\r\n\r\n   To limit the depth level to the target resource plus two child\r\n   resource layers, the value \"3\" is used.\r\n\r\n      GET /restconf/data/example-jukebox:jukebox?depth=3 HTTP/1.1\r\n      Host: example.com\r\n      Accept: application/yang-data+json\r\n\r\n   The server might respond as follows:\r\n\r\n      HTTP/1.1 200 OK\r\n      Date: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Server: example-server\r\n      Cache-Control: no-cache\r\n      Content-Type: application/yang-data+json\r\n\r\n      {\r\n        \"example-jukebox:jukebox\" : {\r\n          \"library\" : {\r\n            \"artist\" : {}\r\n          },\r\n          \"playlist\" : [\r\n            {\r\n              \"name\" : \"Foo-One\",\r\n              \"description\" : \"example playlist 1\",\r\n              \"song\" : {}\r\n            }\r\n          ],\r\n          \"player\" : {\r\n            \"gap\" : 0.5\r\n          }\r\n        }\r\n      }", "correct_text": "   Example 3: depth=3\r\n\r\n   To limit the depth level to the target resource plus two child\r\n   resource layers, the value \"3\" is used.\r\n\r\n      GET /restconf/data/example-jukebox:jukebox?depth=3 HTTP/1.1\r\n      Host: example.com\r\n      Accept: application/yang-data+json\r\n\r\n   The server might respond as follows:\r\n\r\n      HTTP/1.1 200 OK\r\n      Date: Thu, 26 Jan 2017 20:56:30 GMT\r\n      Server: example-server\r\n      Cache-Control: no-cache\r\n      Content-Type: application/yang-data+json\r\n\r\n      {\r\n        \"example-jukebox:jukebox\" : {\r\n          \"library\" : {\r\n            \"artist\" : []\r\n          },\r\n          \"playlist\" : [\r\n            {\r\n              \"name\" : \"Foo-One\",\r\n              \"description\" : \"example playlist 1\",\r\n              \"song\" : []\r\n            }\r\n          ],\r\n          \"player\" : {\r\n            \"gap\" : 0.5\r\n          }\r\n        }\r\n      }", "notes": "\"artist\" and \"song\" are defined as list.  Therefore, according to RFC 7951, they should be encoded as array instead of object.", "submit_date": "2021-03-10", "submitter_name": "Kyoung-Hwan Yun", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 14:31:17"}, {"errata_id": "6474", "doc-id": "RFC1123", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.3.6", "orig_text": "                 on the the existence of a TXT or WKS RR in most\r\n                 domains.", "correct_text": "                 on the existence of a TXT or WKS RR in most domains.", "notes": "Doubled word.", "submit_date": "2021-03-11", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-03-16 19:46:01"}, {"errata_id": "6475", "doc-id": "RFC1123", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.1", "orig_text": "         option-negotiation loops.  A host MUST refuse (i.e, reply", "correct_text": "         option-negotiation loops.  A host MUST refuse (i.e., reply", "notes": "Missing full stop.", "submit_date": "2021-03-11", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-03-16 19:46:23"}, {"errata_id": "6476", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.8", "orig_text": "        connection.Implementers may want to give the user control of", "correct_text": "        connection. Implementers may want to give the user control of", "notes": "Missing space. 793bis is in progress and this text no longer exists.", "submit_date": "2021-03-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-03-16 23:36:26"}, {"errata_id": "6477", "doc-id": "RFC793", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOSSARY", "orig_text": "          unit of data transfered between a pair of TCP modules.", "correct_text": "          unit of data transferred between a pair of TCP modules.", "notes": "Misspelled \"transferred\".\r\n\r\n(text does not exist in ongoing 793bis)", "submit_date": "2021-03-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-03-16 23:42:28"}, {"errata_id": "6478", "doc-id": "RFC854", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "[Page 12]", "orig_text": "      have defined, but not reguired, meanings.  The actual code", "correct_text": "      have defined, but not required, meanings.  The actual code", "notes": "It should say \"required\" instead of \"reguired\".", "submit_date": "2021-03-12", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-03-15 13:35:25"}, {"errata_id": "6480", "doc-id": "RFC7838", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2", "orig_text": "Formally, an alternative service is identified by the combination of:\r\n\r\n   o  An Application Layer Protocol Negotiation (ALPN) protocol name, as\r\n      per [RFC7301]", "correct_text": "Formally, an alternative service is identified by the combination of:\r\n\r\n   o  An Application-Layer Protocol Negotiation (ALPN) protocol name, as\r\n      per [RFC7301]", "notes": "RFC 7301 seems to formally use the hyphenated version. Most relevant to RFC 7838 is the ALPN ID registry, which RFC 7301 states:\r\n\r\n   This document establishes a registry for protocol identifiers\r\n   entitled \"Application-Layer Protocol Negotiation (ALPN) Protocol IDs\"", "submit_date": "2021-03-12", "submitter_name": "Lucas Pardue", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-03-15 10:56:18"}, {"errata_id": "6516", "doc-id": "RFC8962", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10", "orig_text": "All your networks are belong to us.", "correct_text": "All your network are belong to us.", "notes": "=~ \"all your base are belong to us\"\r\n\r\nThe Protocol Police have launched an investigation and will act when the time is right.", "submit_date": "2021-04-05", "submitter_name": "Ap Ril Fools", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-04-18 11:50:08"}, {"errata_id": "6485", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2.1.1.", "orig_text": "     dmarc-subject = %x52.65.70.6f.72.74 1*FWS       ; \"Report\"\r\n                     %x44.6f.6d.61.69.6e.3a 1*FWS    ; \"Domain:\"\r\n                     domain-name 1*FWS               ; from RFC 6376\r\n                     %x53.75.62.6d.69.74.74.65.72.3a ; \"Submitter:\"\r\n                     1*FWS domain-name 1*FWS\r\n                     %x52.65.70.6f.72.74.2d.49.44.3a ; \"Report-ID:\"\r\n                     msg-id                          ; from RFC 5322", "correct_text": "     dmarc-subject = %x52.65.70.6f.72.74 1*FWS       ; \"Report\"\r\n                     %x44.6f.6d.61.69.6e.3a 1*FWS    ; \"Domain:\"\r\n                     domain-name 1*FWS               ; from RFC 6376\r\n                     %x53.75.62.6d.69.74.74.65.72.3a ; \"Submitter:\"\r\n                     1*FWS domain-name 1*FWS\r\n                     %x52.65.70.6f.72.74.2d.49.44.3a ; \"Report-ID:\"\r\n                     1*FWS %x3c dot-atom-text %x3e   ; from RFC 5322", "notes": "According to RFC 5322, msg-id = [CFWS] \"<\" id-left \"@\" id-right \">\" [CFWS]. The example given in Section 7.2.1.1. (<2002.02.15.1>) does not adhere to this and neither do reports in the wild. Instead of referring to the msg-id ABNF, I suggest that we refer to the dot-atom-text ABNF and include \"<\" and \">\" as ASCII characters. This also has the advantage of getting rid of CFWS. According to RFC 5322, \"comments may be included in structured field bodies\" but \"Subject\" is not a structured header field.", "submit_date": "2021-03-15", "submitter_name": "Kaspar Etter", "verifier_id": "", "verifier_name": "Eliot Lear (ISE)", "update_date": "2022-10-01 05:03:57"}, {"errata_id": "6493", "doc-id": "RFC8341", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.5.2", "orig_text": "All the same rules as an instance-identifier apply,\r\nexcept that predicates for keys are optional.  If a key\r\npredicate is missing, then the node-instance-identifier\r\nrepresents all possible server instances for that key.", "correct_text": "All the same rules as an instance-identifier apply,\r\nexcept that predicates for keys are optional.  If a key\r\npredicate is missing, then the node-instance-identifier\r\nrepresents all possible server instances for that key.\r\n\r\nSpecifying prefixes for the node names is OPTIONAL. If a prefix is not specified the node-instance-identifier represents all possible server instances.", "notes": "For the typedef node-instance-identifier (and the leaf path) it is not clear whether the value should or should not include prefixes?\r\n \r\nhttps://tools.ietf.org/html/rfc7950#section-9.13.2 states\r\n\"All node names in an instance-identifier value MUST be qualified with\r\n   explicit namespace prefixes\"\r\n\r\nhttps://tools.ietf.org/html/rfc7950#section-14 - instance-identifier rule\r\nindicates the prefixes are optional.\r\n\r\nWhichever is the correct answer it should be explicitly stated.\r\nIf prefixes are optional and we have 2 leaves with the same path except the namespace/prefix I assume both are referenced (effected) by the nacm rule. Correct?\r\n\r\nActually this is a bit misleading also in RFC7950.\n --VERIFIER NOTES-- \nThe required behavior is specified via section 9.13.2 of RFC 7950.\r\n\r\nThe ABNF for instance-identifier in RFC 7950 could be clearer to indicate that explicit prefixes are required, but either way the rules in section 9.13.2 of RFC 7950 for instance identifiers cannot be ignored.", "submit_date": "2021-03-24", "submitter_name": "Balazs Lengyel", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2021-04-07 15:21:19"}, {"errata_id": "6494", "doc-id": "RFC3168", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Header", "orig_text": "Updates: 2474, 2401, 793 ", "correct_text": "Updates: 2474, 2401, 793, 791", "notes": "This is the first standards-track RFC to assign the two unused bits of the IP TOS byte to ECN. Granted it was suggested in RFC2481, but that was experimental and unable to update RFC791 because it would create a downref.\n --VERIFIER NOTES-- \n   As several have pointed out on the list, 2474 itself updates 791, so someone following 791 through the tree of its updates will consider 3168.", "submit_date": "2021-03-24", "submitter_name": "Joe Touch", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-03-25 00:00:06"}, {"errata_id": "6495", "doc-id": "RFC8898", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "1.4.2", "orig_text": "   The registrar validates the access token.  If the access token is a\r\n   reference token, the registrar MAY perform an introspection\r\n   [RFC7662], as in steps [4] and [5], in order to obtain more\r\n   information about the access token and its scope, per [RFC7662].\r\n   Otherwise, after the registrar validates the token, it inspects its\r\n   claims and acts upon it.", "correct_text": "   The registrar validates the access token.  If the access token is a\r\n   reference token, the registrar MAY perform an introspection\r\n   [RFC7662], as in steps [3] and [4], in order to obtain more\r\n   information about the access token and its scope, per [RFC7662].\r\n   Otherwise, after the registrar validates the token, it inspects its\r\n   claims and acts upon it.", "notes": "As you can see figure 2, introspection is processed in steps [3] and [4].", "submit_date": "2021-03-26", "submitter_name": "EungRok Lee", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6496", "doc-id": "RFC8783", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3", "orig_text": "   A DOTS client can also issue a GET request with a \"content\" query\r\n   parameter set to 'non-config' to exclusively retrieve non-\r\n   configuration data bound to a given ACL as shown in Figure 30.  A\r\n   response to this GET request is shown in Figure 31.\r\n\r\n     GET /restconf/data/ietf-dots-data-channel:dots-data\\\r\n         /dots-client=paL8p4Zqo4SLv64TLPXrxA/acls\\\r\n         /acl=test-acl-ipv6-udp?content=non-config HTTP/1.1\r\n     Host: example.com\r\n     Accept: application/yang-data+json", "correct_text": "   A DOTS client can also issue a GET request with a \"content\" query\r\n   parameter set to 'nonconfig' to exclusively retrieve non-\r\n   configuration data bound to a given ACL as shown in Figure 30.  A\r\n   response to this GET request is shown in Figure 31.\r\n\r\n     GET /restconf/data/ietf-dots-data-channel:dots-data\\\r\n         /dots-client=paL8p4Zqo4SLv64TLPXrxA/acls\\\r\n         /acl=test-acl-ipv6-udp?content=nonconfig HTTP/1.1\r\n     Host: example.com\r\n     Accept: application/yang-data+json", "notes": "RFC8040 defines this value for the \"content\" Query Parameter (RFC 4.8.1):\r\n\r\n    | nonconfig | Return only non-configuration descendant data nodes |", "submit_date": "2021-03-26", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-19 22:39:52"}, {"errata_id": "7294", "doc-id": "RFC4217", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "The abstract says:", "orig_text": "   This document\r\n   is intended to provide TLS support for FTP in a similar way to that\r\n   provided for SMTP in RFC 2487, \"SMTP Service Extension for Secure\r\n   SMTP over Transport Layer Security\", and HTTP in RFC 2817, \"Upgrading\r\n   to TLS Within HTTP/1.1.\".", "correct_text": "   This document\r\n   is intended to provide TLS support for FTP in a similar way to that\r\n   provided for SMTP in RFC 3207, \"SMTP Service Extension for Secure\r\n   SMTP over Transport Layer Security\", and HTTP in RFC 2817, \"Upgrading\r\n   to TLS Within HTTP/1.1.\".", "notes": "Upgrade?\n --VERIFIER NOTES-- \n   The text was correct at the time of publishing, and the datatracker conveys that RFC 2487 was obsoleted by RFC 3207", "submit_date": "2022-12-31", "submitter_name": "Mikael A", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 21:07:50"}, {"errata_id": "6498", "doc-id": "RFC4271", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.5", "orig_text": "LOCAL_PREF is a well-known attribute that SHALL be included in all UPDATE messages that a given BGP speaker sends to other internal peers. ", "correct_text": "LOCAL_PREF is a well-known discretionary attribute that SHALL be included in all UPDATE messages that a given BGP speaker sends to other internal peers. ", "notes": "It is unclear from the text to which of the four path attribute categories LOCAL_PREF belongs. There was even submitted an errata to create a fifth category for this attribute, but it is clear from the definition of the categories, that this attribute is well known discretionary. All routers must be capable of sending or receiving the LOCAL_PREF attribute, however it is up to a routers discretion whether to include that attribute in an UPDATE message.\r\n\r\n=====\r\n[Verifier notes.]\r\n\r\nThis is a valid report.  The terminology in rfc4271 is not ideal, so using \"discretionary\" with a required action can cause significant confusion, even if that is the correct term for this attribute.  A future version of this RFC should consider updating/cleaning up the terminology.\r\n", "submit_date": "2021-03-27", "submitter_name": "Graham Paasch", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-03-29 17:30:14"}, {"errata_id": "6499", "doc-id": "RFC8224", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "Identity = \"Identity\" HCOLON signed-identity-digest SEMI\r\n          ident-info *( SEMI ident-info-params )\r\nsigned-identity-digest = 1*(base64-char / \".\")\r\nident-info = \"info\" EQUAL ident-info-uri\r\nident-info-uri = LAQUOT absoluteURI RAQUOT\r\nident-info-params = ident-info-alg / ident-type /\r\n    ident-info-extension\r\nident-info-alg = \"alg\" EQUAL token\r\nident-type = \"ppt\" EQUAL token\r\nident-info-extension = generic-param\r\n\r\nbase64-char = ALPHA / DIGIT / \"/\" / \"+\"\r\n", "correct_text": "Identity = \"Identity\" HCOLON signed-identity-digest SEMI\r\n          ident-info *( SEMI ident-info-params )\r\nsigned-identity-digest = 1*(base64url-char / \".\")\r\nident-info = \"info\" EQUAL ident-info-uri\r\nident-info-uri = LAQUOT absoluteURI RAQUOT\r\nident-info-params = ident-info-alg / ident-type /\r\n    ident-info-extension\r\nident-info-alg = \"alg\" EQUAL token\r\nident-type = \"ppt\" EQUAL token\r\nident-info-extension = generic-param\r\n\r\nbase64url-char = ALPHA / DIGIT / \"-\" / \"_\"\r\n", "notes": "RFC 8225 makes it clear that the encoding is BASE4URL, not the standard BASE64 encoding.\r\n\r\nSee also:\r\n- https://datatracker.ietf.org/doc/html/rfc8224#section-4.1.1\r\n- https://datatracker.ietf.org/doc/html/rfc7515#appendix-F\r\n- https://datatracker.ietf.org/doc/html/rfc7515#appendix-C\r\n- https://datatracker.ietf.org/doc/html/rfc4648#section-5\r\n\r\n", "submit_date": "2021-03-27", "submitter_name": "Marc Petit-Huguenin", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 20:44:41"}, {"errata_id": "6500", "doc-id": "RFC8148", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "14.1", "orig_text": "      Change controller:  The IESG <ietf@ietf.org>\r\n", "correct_text": "      Change controller:  The IESG <iesg@ietf.org>\r\n", "notes": "The current text has the email address of the \"IETF discuss\" list for the IESG, which is incorrect.", "submit_date": "2021-03-29", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2022-05-23 04:26:48"}, {"errata_id": "6501", "doc-id": "RFC8089", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6", "orig_text": "   Change Controller:\r\n      IETF <ietf@ietf.org>\r\n", "correct_text": "   Change Controller:\r\n      IESG <iesg@ietf.org>\r\n", "notes": "If \"the IETF\" is supposed to be the change controller, that role is then held by the IESG (which also has a different email address.)", "submit_date": "2021-03-29", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6502", "doc-id": "RFC6270", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4", "orig_text": "      Author/Change controller: IETF <ietf@ietf.org>\r\n", "correct_text": "      Author/Change controller: IESG <iesg@ietf.org>\r\n", "notes": "If \"the IETF\" is supposed to be the change controller, that role is then held by the IESG (which also has a different email address.)", "submit_date": "2021-03-29", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6504", "doc-id": "RFC4038", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4.2", "orig_text": "This memo takes no stance on that approach is best.", "correct_text": "This memo takes no stance on which approach is best.", "notes": "Grammar correction.", "submit_date": "2021-03-30", "submitter_name": "Glenn Adams", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-03-31 00:02:42"}, {"errata_id": "6506", "doc-id": "RFC5185", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.7", "orig_text": "   Multi-area adjacencies are announced as point-to-point links.  Once\r\n   the router's multi-area adjacency reaches the FULL state, it will be\r\n   added as a link type 1 to the Router Link State Advertisement (LSA)\r\n   with:\r\n\r\n      Link ID = Remote's Router ID\r\n\r\n      Link Data = Neighbor's IP Address or IfIndex (if the underlying\r\n      interface is unnumbered).\r\n\r\n   Unlike numbered point-to-point links, no type 3 link is advertised\r\n   for multi-area adjacencies.\r\n", "correct_text": "   Multi-area adjacencies are announced as point-to-point links.  Once\r\n   the router's multi-area adjacency reaches the FULL state, it will be\r\n   added as a link type 1 to the Router Link State Advertisement (LSA)\r\n   with:\r\n\r\n      Link ID = Remote's Router ID\r\n\r\n      Link Data = Router interface's IP Address or IfIndex (if the underlying\r\n      interface is unnumbered).\r\n\r\n   Unlike numbered point-to-point links, no type 3 link is advertised\r\n   for multi-area adjacencies.\r\n", "notes": "The encoding of Link Data as specified in RFC5185 is not consistent with the base OSPF specification in RFC2328. This has resulted in different behaviors in deployed implementations where some follow RFC2328 (i.e. the corrected text) while others follow the Original text of RFC5185 leading to interop issues.\r\n\r\nMore importantly, for implementations of RFC5185, it is not possible to determine the Neighbor's interface IfIndex unless some additional mechanisms (that have not been specified or referenced by RFC5185) are implemented - viz. RFC8510.\r\n\r\nThis topic has been discussed in the LSR WG recently and this errata is being raised to track this issue : https://mailarchive.ietf.org/arch/msg/lsr/iL85WkrqhI17wUrxd-WozMQvKtE/\n --VERIFIER NOTES-- \nAs discussed here (https://mailarchive.ietf.org/arch/msg/lsr/9IAkRCbZN39loWcwKjtNWfUW_qA/) this would be a technical change vs. the WG consensus when the document was progressed, and should be rejected (see https://www.ietf.org/about/groups/iesg/statements/processing-rfc-errata/ #7). The appropriate way to pursue this looks to be an update or bis.\r\n", "submit_date": "2021-04-02", "submitter_name": "Ketan Talaulikar", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2021-05-17 22:08:18"}, {"errata_id": "6525", "doc-id": "RFC8461", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "The certificate presented by the receiving MTA MUST not be expired", "correct_text": "The certificate presented by the receiving MTA MUST NOT be expired", "notes": "NOT should be capitalized.", "submit_date": "2021-04-10", "submitter_name": "Kaspar Etter", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6508", "doc-id": "RFC5402", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Copyright Notice, it says:", "orig_text": "(http:trustee.ietf.org/license-info)", "correct_text": "(http://trustee.ietf.org/license-info)", "notes": "", "submit_date": "2021-04-02", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-04-03 05:30:07"}, {"errata_id": "6509", "doc-id": "RFC5414", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Copyright Notice, it says:", "orig_text": "(http:trustee.ietf.org/license-info)", "correct_text": "(http://trustee.ietf.org/license-info)", "notes": "", "submit_date": "2021-04-02", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-04-03 05:30:10"}, {"errata_id": "6510", "doc-id": "RFC5544", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Copyright Notice, it says:", "orig_text": "(http:trustee.ietf.org/license-info)", "correct_text": "(http://trustee.ietf.org/license-info)", "notes": "", "submit_date": "2021-04-02", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-04-03 05:30:11"}, {"errata_id": "6511", "doc-id": "RFC5569", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Copyright Notice, it says:", "orig_text": "(http:trustee.ietf.org/license-info)", "correct_text": "(http://trustee.ietf.org/license-info)", "notes": "", "submit_date": "2021-04-02", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-04-03 05:30:13"}, {"errata_id": "6512", "doc-id": "RFC5578", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Copyright Notice, it says:", "orig_text": "(http:trustee.ietf.org/license-info)", "correct_text": "(http://trustee.ietf.org/license-info)", "notes": "", "submit_date": "2021-04-02", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-04-03 05:30:16"}, {"errata_id": "6513", "doc-id": "RFC5683", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Copyright Notice, it says:", "orig_text": "(http:trustee.ietf.org/license-info)", "correct_text": "(http://trustee.ietf.org/license-info)", "notes": "", "submit_date": "2021-04-02", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-04-03 05:30:19"}, {"errata_id": "6517", "doc-id": "RFC8214", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   Finally, EVPN may employ data-plane egress link protection mechanisms\r\n   not available in VPWS.  This can be done by the primary PE (on local\r\n   AC down) using the label advertised in the per-EVI Ethernet A-D route\r\n   by the backup PE to encapsulate the traffic and direct it to the\r\n   backup PE.", "correct_text": "   Finally, EVPN may employ data-plane egress link protection mechanisms.\r\n   This can be done by the primary PE (on local AC down) using the label \r\n   advertised in the per-EVI Ethernet A-D route by the backup PE to\r\n   encapsulate the traffic and direct it to the backup PE.  Similar behavior\r\n   for LDP-signaled PWs can be achieved using LDP extensions defined in RFC 8104, \r\n   but the EVPN-based solution is simpler to implement (e.g., does not require \r\n   context-specific label spaces) and operate.\r\n\r\n\r\n\r\n", "notes": "RFC 8104 \"Pseudowire (PW) Endpoint Fast Failure Protection\" defines a solution for egress PW endpoint protection that provides fast local protection against failure of the primary egress PE and failure of the Attachment Circuit of this PE, so that the claim that the data-plane egress link protection mechanisms are not available for LDP-signaled PWs is factually inaccurate. However, the solution defined in RFC 8104is much more complicated both from the POV of implementation and from the operational POV, while the EVPN-based solution is quite straightforward.", "submit_date": "2021-04-05", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-10-30 13:39:31"}, {"errata_id": "6524", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "202,939,144", "correct_text": "202,934,144", "notes": "In Figure 4 The Era Offset of 1 Jan 1 has a typo.\r\n\r\nThe value of 202,939,144 for the Era Offset of 1 Jan 1 should be 202,934,144 because 1 Jan 0 has an Era Offset of 171,311,744 and there are 366 days in year 0, therefore the Era Offset for 1 Jan 1 should be 86400 * 366 (= 31,622,400) greater than that for 1 JAN 0.\r\n\r\n---\r\n\r\n[INT AD notes]\r\n\r\nFrom https://mailarchive.ietf.org/arch/msg/ntp/Cbg3sOhChyfenYoj7UG5wCymFMU/ :\r\n\r\n\"\"\"\r\n... might be correct too, but I find that table confusing with those\r\ndates when the modern definition of the second and UTC didn't exist\r\nyet...\r\n\"\"\"", "submit_date": "2021-04-09", "submitter_name": "Kenneth Duffill", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-09-26 00:27:35"}, {"errata_id": "6519", "doc-id": "RFC8224", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "ident-type = \"ppt\" EQUAL token", "correct_text": "ident-type = \"ppt\" EQUAL DQUOTE token DQUOTE", "notes": "Based on IETF 101 STIR notes ptr= values should always be quoted. Also, ATIS-1000074 is using double quotes around ppt value.\r\n\r\n[AD note] See the minutes of the STIR WG at IETF 116, and https://datatracker.ietf.org/doc/minutes-interim-2021-stir-01-202104141600/.", "submit_date": "2021-04-06", "submitter_name": "Roman Shpount", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-03-29 07:02:54"}, {"errata_id": "6520", "doc-id": "RFC1855", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1.2", "orig_text": "... Although many many mailing ...", "correct_text": "... Although many mailing ...", "notes": "Doubled words", "submit_date": "2021-04-07", "submitter_name": "Adrian Wong", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-04-08 08:07:13"}, {"errata_id": "6521", "doc-id": "RFC1855", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.3.1", "orig_text": "Make sure your Frequestly Asked Questions (FAQ) ...", "correct_text": "Make sure your Frequently Asked Questions (FAQ) ...", "notes": "Typographical error", "submit_date": "2021-04-07", "submitter_name": "Adrian Wong", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2021-04-08 08:07:27"}, {"errata_id": "6546", "doc-id": "RFC5652", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "  -- Imports from Appendix B of this document\r\n           AttributeCertificateV1\r\n              FROM AttributeCertificateVersion1", "correct_text": "  -- Imports from Section 12.2 of this document\r\n           AttributeCertificateV1\r\n              FROM AttributeCertificateVersion1", "notes": "The AttributeCertificateVersion1 is defined in section 12.2; there is no Appendix B in this document.", "submit_date": "2021-04-15", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-04-15 18:32:34"}, {"errata_id": "6552", "doc-id": "RFC3514", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "        Insecure systems MAY chose to crash, be penetrated, etc.", "correct_text": "        Insecure systems MAY choose to crash, be penetrated, etc.", "notes": "'Chose' is the past tense, and what is desired here is the future tense 'choose'.\r\n\r\n-- verifier note --\r\nWhile the submitter SHOULD have posted this on April the 1st for an April Fools' Day RFC. For added fun, the errata is verified by an non-English speaker...", "submit_date": "2021-04-20", "submitter_name": "Joe Peterson", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-04-20 11:03:26"}, {"errata_id": "7295", "doc-id": "RFC3208", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.2.4", "orig_text": "Option Length = 12 octets", "correct_text": "Option Length = 16 octets", "notes": "Every option packet has a certain length including the option header itself. OPT_LENGTH, OPT_NAK_LIST and OPT_JOIN have the length correctly counted WITH the header length (4B) but OPT_FRAGMENT has 4*4B so the total length should be 16 octets.", "submit_date": "2023-01-02", "submitter_name": "Michal Ruprich", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-03-12 22:25:02"}, {"errata_id": "7296", "doc-id": "RFC3279", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.5", "orig_text": "   When the parameters are inherited, the parameters field SHALL contain\r\n   implictlyCA, which is the ASN.1 value NULL.", "correct_text": "   When the parameters are inherited, the parameters field SHALL contain\r\n   implicitlyCA, which is the ASN.1 value NULL.", "notes": "\"implictly\" appears to be missing an i.", "submit_date": "2023-01-03", "submitter_name": "Evan Pottier", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-01-06 23:30:50"}, {"errata_id": "6522", "doc-id": "RFC8126", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.6", "orig_text": "   The intention behind \"permanent and readily available\" is that a\r\n   document can reasonably be expected to be findable and retrievable\r\n   long after IANA assignment of the requested value.  Publication of an\r\n   RFC is an ideal means of achieving this requirement, but\r\n   Specification Required is intended to also cover the case of a\r\n   document published outside of the RFC path, including informal\r\n   documentation.", "correct_text": "   The intention behind \"permanent and readily available\" is that a\r\n   document can reasonably be expected to be findable and retrievable\r\n   long after IANA assignment of the requested value.  Publication of an\r\n   RFC is an ideal means of achieving this requirement, but\r\n   Specification Required is intended to also cover the case of a\r\n   document published outside of the RFC path, including informal\r\n   documentation. Specific versions of Internet-Drafts, specifically\r\n   IETF Working Group documents, that serve as \"work in progress\" \r\n   reference for RFC path documents also achieve this requirement \r\n   subject to Designated Expert review. Upon publication as RFC the\r\n   reference may be updated upon request by Designated Expert.", "notes": "As part of the IESG review of draft-ietf-idr-bgp-ls-registry, the was a debate about whether an Internet-Draft serves the requirement of \"permanent and readily available\" for allocation under Specification Required policy. While IDs are indeed permanent and readily available these days and referencing a specific version does meet the requirements. However, the boiler plate text on IDs indicate that they many not be cited as reference other than work-in-progress.\r\n\r\nFor certain WGs (e.g. IDR) which await at least two implementations, the process of RFC publication takes time and it would have been good if the WG could have requested allocation based on a WG ID instead of following the tedious process of early allocation in RFC7120. The reference in IANA registry can then be update to the RFC upon publication and if not can remain with the reference to the ID.\n --VERIFIER NOTES-- \n ------\r\n\r\nWhile the concerns are valid, this report doesn't target an error in the document but makes a proposal that will require community discussion and consensus.", "submit_date": "2021-04-08", "submitter_name": "Ketan Talaulikar", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-04-08 21:28:26"}, {"errata_id": "6523", "doc-id": "RFC6234", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "   For i = 1 to N\r\n\r\n      1. Prepare the message schedule W:\r\n         For t = 0 to 15\r\n            Wt = M(i)t\r\n         For t = 16 to 79\r\n            Wt = SSIG1(W(t-2)) + W(t-7) + SSIG0(W(t-15)) + W(t-16)\r\n\r\n      2. Initialize the working variables:\r\n         a = H(i-1)0\r\n         b = H(i-1)1\r\n         c = H(i-1)2\r\n         d = H(i-1)3\r\n         e = H(i-1)4\r\n         f = H(i-1)5\r\n         g = H(i-1)6\r\n         h = H(i-1)7\r\n\r\n      3. Perform the main hash computation:\r\n         For t = 0 to 79\r\n            T1 = h + BSIG1(e) + CH(e,f,g) + Kt + Wt\r\n            T2 = BSIG0(a) + MAJ(a,b,c)\r\n            h = g\r\n            g = f\r\n            f = e\r\n            e = d + T1\r\n            d = c\r\n            c = b\r\n            b = a\r\n            a = T1 + T2\r\n\r\n         4. Compute the intermediate hash value H(i)\r\n            H(i)0 = a + H(i-1)0\r\n            H(i)1 = b + H(i-1)1\r\n            H(i)2 = c + H(i-1)2\r\n            H(i)3 = d + H(i-1)3\r\n            H(i)4 = e + H(i-1)4\r\n            H(i)5 = f + H(i-1)5\r\n            H(i)6 = g + H(i-1)6\r\n            H(i)7 = h + H(i-1)7\r\n", "correct_text": "   For i = 1 to N\r\n\r\n      1. Prepare the message schedule W:\r\n         For t = 0 to 15\r\n            Wt = M(i)t\r\n         For t = 16 to 79\r\n            Wt = SSIG1(W(t-2)) + W(t-7) + SSIG0(W(t-15)) + W(t-16)\r\n\r\n      2. Initialize the working variables:\r\n         a = H(i-1)0\r\n         b = H(i-1)1\r\n         c = H(i-1)2\r\n         d = H(i-1)3\r\n         e = H(i-1)4\r\n         f = H(i-1)5\r\n         g = H(i-1)6\r\n         h = H(i-1)7\r\n\r\n      3. Perform the main hash computation:\r\n         For t = 0 to 79\r\n            T1 = h + BSIG1(e) + CH(e,f,g) + Kt + Wt\r\n            T2 = BSIG0(a) + MAJ(a,b,c)\r\n            h = g\r\n            g = f\r\n            f = e\r\n            e = d + T1\r\n            d = c\r\n            c = b\r\n            b = a\r\n            a = T1 + T2\r\n\r\n      4. Compute the intermediate hash value H(i)\r\n         H(i)0 = a + H(i-1)0\r\n         H(i)1 = b + H(i-1)1\r\n         H(i)2 = c + H(i-1)2\r\n         H(i)3 = d + H(i-1)3\r\n         H(i)4 = e + H(i-1)4\r\n         H(i)5 = f + H(i-1)5\r\n         H(i)6 = g + H(i-1)6\r\n         H(i)7 = h + H(i-1)7\r\n", "notes": "Identation correction on point 4. as it may lead to confussion and reader may think that point (4) may be done inside a loop (begining on point (3).", "submit_date": "2021-04-08", "submitter_name": "David \u00d3scar Sol\u00e9 Gonz\u00e1lez", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6526", "doc-id": "RFC8610", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "G.2", "orig_text": "   The escaping rules of JSON strings are applied equivalently for\r\n   text-based byte strings, e.g., \"\\\" stands for a single backslash and\r\n   \"'\" stands for a single quote.  Whitespace is included literally,\r\n   i.e., the previous section does not apply to text-based byte strings.", "correct_text": "   The escaping rules of JSON strings are applied equivalently for\r\n   text-based byte strings, e.g., \"\\\\\" stands for a single backslash and\r\n   \"\\'\" stands for a single quote.  Whitespace is included literally,\r\n   i.e., the previous section does not apply to text-based byte strings.", "notes": "\"\\\" and \"'\" need a backslash to escape them.", "submit_date": "2021-04-11", "submitter_name": "Sean Bartell", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-04-12 12:52:53"}, {"errata_id": "6574", "doc-id": "RFC7991", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5", "orig_text": "   Using escaping:\r\n   <sourcecode>\r\n      allowed-chars = \".\" | \",\" | \"&amp;\" | \"&lt;\" | \"&gt;\" | \"|\"\r\n   </sourcecode>", "correct_text": "   Using escaping:\r\n   <sourcecode>\r\n      allowed-chars = \".\" | \",\" | \"&amp;\" | \"&lt;\" | \">\" | \"|\"\r\n   </sourcecode>", "notes": "The example suggests that \">\" needs to be escaped in absence of CDATA. This is not correct. This is a problem, as the intent of this section is to actually describe escaping *precisely*.", "submit_date": "2021-05-06", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6576", "doc-id": "RFC9013", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "| 3           | Endpoint             | RFC 9013            |", "correct_text": "| 3           | Tunnel Egress Endpoint| RFC 9013           |\r\n ", "notes": "The description of value 3 should have been updated to match updates throughout the text.\r\n\r\n[verified by the RFC Editor per discussion with the authors]", "submit_date": "2021-05-07", "submitter_name": "Sabrina Tanamal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-05-07 20:18:05"}, {"errata_id": "6577", "doc-id": "RFC6351", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "# 6.2.7\r\nproperty-gender = element gender {\r\n    element sex { \"\" | \"M\" | \"F\" | \"O\" | \"N\" | \"U\" },\r\n    element identity { text }?\r\n  }\r\n", "correct_text": "# 6.2.7\r\nproperty-gender = element gender {\r\n    element sex { \"M\" | \"F\" | \"O\" | \"N\" | \"U\" }?,\r\n    element identity { text }?\r\n  }\r\n", "notes": "RFC 6350:  The components correspond, in sequence, to the sex (biological), and gender identity.  Each component is OPTIONAL.", "submit_date": "2021-05-08", "submitter_name": "Sergei S. Betke", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6597", "doc-id": "RFC8152", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "12.5.1.", "orig_text": "The RFC is unclear to whether Concat KDF or HKDF is to be used:\r\n\r\nIn table 20 there is an entry:\r\nECDH-ES +  -31   | HKDF -  | yes        | A256KW | ECDH ES w/    |\r\n   | A256KW    |       | SHA-256 |            |        | Concat KDF    |\r\n   |           |       |         |            |        | and AES Key   |\r\n   |           |       |         |            |        | Wrap w/       |\r\n   |           |       |         |            |        | 256-bit key  \r\n\r\nThat is, the table talks both about Concat and HKDF.\r\n\r\nThe IANA registry for this algorithm says Concat KDF\r\n\r\nJim's sample code for algorithm -31 says HKDF.", "correct_text": "I have no corrected text to offer since I don't have the answer to the question raised.\r\n\r\nConcat is referred to once and without any external references.  In JOSE, Concat denotes a NIST standard which is quite different to HKDF.", "notes": "It is pretty vital for interoperability knowing if Concat KDF or HKDF is to be used.", "submit_date": "2021-06-03", "submitter_name": "Anders Rundgren", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8291", "doc-id": "RFC7680", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.8.1", "orig_text": "The value of Type-P-One-way-Delay could change if the protocol (UDP or TCP), \r\nport number, size, or arrangement for special treatment (e.g., IP DS Field \r\n[RFC2780], Explicit Congestion Notification (ECN) [RFC3168], or RSVP) changes.", "correct_text": "The value of Type-P-One-way-Packet-Loss could change if the protocol (UDP or \r\nTCP), port number, size, or arrangement for special treatment (e.g., IP DS Field \r\n[RFC2780], Explicit Congestion Notification (ECN) [RFC3168], or RSVP) changes.", "notes": "The original text is not incorrect and a change in Type-P-One-way-Delay could also imply a change in Type-P-One-way-Packet-Loss. Therefore, and as this section refers to the Type-P-One-way-Packet-Loss, it would be more accurate to refer to Type-P-One-way-Packet-Loss directly.\r\n\r\n== Verifier note\r\n\r\nPer https://mailarchive.ietf.org/arch/msg/ippm/Jh_XqG4eruyNkY3zgG8TOeVxI7E/", "submit_date": "2025-02-09", "submitter_name": "Pablo Navarro", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-28 17:43:13"}, {"errata_id": "6527", "doc-id": "RFC8610", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B", "orig_text": "text = %x22 *SCHAR %x22\r\nSCHAR = %x20-21 / %x23-5B / %x5D-7E / %x80-10FFFD / SESC\r\nSESC = \"\\\" (%x20-7E / %x80-10FFFD)", "correct_text": "SESC = \"\\\" ( %x22 / \"/\" / \"\\\" /                 ; \\\" \\/ \\\\\r\n             %x62 / %x66 / %x6E / %x72 / %x74 / ; \\b \\f \\n \\r \\t\r\n             (%x75 hexchar) )                   ; \\u\r\nhexchar = non-surrogate / (high-surrogate \"\\\" %x75 low-surrogate)\r\nnon-surrogate = ((DIGIT / \"A\"/\"B\"/\"C\" / \"E\"/\"F\") 3HEXDIG) /\r\n               (\"D\" %x30-37 2HEXDIG )\r\nhigh-surrogate = \"D\" (\"8\"/\"9\"/\"A\"/\"B\") 2HEXDIG\r\nlow-surrogate = \"D\" (\"C\"/\"D\"/\"E\"/\"F\") 2HEXDIG", "notes": "As discussed during the CBOR interim 2021-04-21 and in the mailing list: https://mailarchive.ietf.org/arch/msg/cbor/ljHAiw-WhNqoIKAzkjZa4WIf56Q/ \r\n--\r\nThe ABNF used in [RFC8610] for the content of text string literals is rather permissive:\r\n\r\ntext = %x22 *SCHAR %x22\r\nSCHAR = %x20-21 / %x23-5B / %x5D-7E / %x80-10FFFD / SESC\r\nSESC = \"\\\" (%x20-7E / %x80-10FFFD)\r\n\r\nThis allows almost any non-C0 character to be escaped by a backslash, but critically misses out on the \\uXXXX and \\uHHHH\\uLLLL forms that JSON allows to specify characters in hex. Both can be solved by updating the SESC production to:\r\n\r\nSESC = \"\\\" ( %x22 / \"/\" / \"\\\" /                 ; \\\" \\/ \\\\\r\n             %x62 / %x66 / %x6E / %x72 / %x74 / ; \\b \\f \\n \\r \\t\r\n             (%x75 hexchar) )                   ; \\u\r\nhexchar = non-surrogate / (high-surrogate \"\\\" %x75 low-surrogate)\r\nnon-surrogate = ((DIGIT / \"A\"/\"B\"/\"C\" / \"E\"/\"F\") 3HEXDIG) /\r\n               (\"D\" %x30-37 2HEXDIG )\r\nhigh-surrogate = \"D\" (\"8\"/\"9\"/\"A\"/\"B\") 2HEXDIG\r\nlow-surrogate = \"D\" (\"C\"/\"D\"/\"E\"/\"F\") 2HEXDIG\r\n\r\nNow that SESC is more restrictively formulated, this also requires an update to the BCHAR production used in the ABNF syntax for byte string literals:\r\n\r\nbytes = [bsqual] %x27 *BCHAR %x27\r\nBCHAR = %x20-26 / %x28-5B / %x5D-10FFFD / SESC / CRLF\r\nbsqual = \"h\" / \"b64\"\r\nThe updated version explicit allows \\', which is no longer allowed in the updated SESC:\r\n\r\nBCHAR = %x20-26 / %x28-5B / %x5D-10FFFD / SESC / \"\\'\" / CRLF\r\n", "submit_date": "2021-04-11", "submitter_name": "Sean Bartell", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-04-23 15:29:01"}, {"errata_id": "6528", "doc-id": "RFC8166", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.4", "orig_text": "A Requester MUST NOT send an RPC-over-RDMA header with the RDMA_ERROR\r\nprocedure.  A Responder MUST silently discard RDMA_ERROR procedures", "correct_text": "An RDMA_ERROR header cannot be sent without an assurance that, the receiver \r\nhas posted a receive operation which its sending will satisfy.  In most cases, \r\nthis means that a Requester (i.e. one sending RPC Calls) MUST NOT send an \r\nRPC-over-RDMA header with the RDMA_ERROR procedure.  Similarly, a Responder \r\n(i.e. one sending RPC Replies) MUST silently discard RDMA_ERROR procedures.\r\n\r\nHowever, in the case of providing an RDMA_ERROR headers containing an error \r\ncode of ERR_VERS, such a schema is not realizable, since there is no way for\r\na receiver who does not support a particular version, to determine whether \r\nan RPC Call or Reply is being sent, leaving the receiver uncertain as to whether \r\nit is being Addressed as a Requester or a Responder, leaving it unable to\r\nparticipate in version negotiation.  In the case of version errors, the\r\nimplementation is to rely on the assumption that  forward direction requests \r\nare being done and reserve direction requests only done once the version is\r\nproperly negotiated.   As a result, such messages MUST NOT be sent by the \r\nclient and MUST be silently discarded by servers.", "notes": "Even if one feels that this is not an appropriate correction, the existing text must be fixed somehow.   In assuming that the terms Requester and Responder can be used this way in this context is likely to result in some implementers concluding that version errors can never be sent while other might be unabble to coonclude that given the effort expended in the spec to make such errors be interpretable by anf rpc-over-rdma version.", "submit_date": "2021-04-12", "submitter_name": "David Noveck", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6529", "doc-id": "RFC2535", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.1", "orig_text": "   The syntax of a SIG resource record (signature) is described in\r\n   Section 4.  It cryptographicly binds the RRset being signed to the\r\n   signer and a validity interval.\r\n", "correct_text": "   The syntax of a SIG resource record (signature) is described in\r\n   Section 4.  It cryptographically binds the RRset being signed to the\r\n   signer and a validity interval.\r\n", "notes": "cryptographicly should be cryptographically", "submit_date": "2021-04-12", "submitter_name": "John Samuels", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-04-14 05:47:01"}, {"errata_id": "6598", "doc-id": "RFC5092", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "[URI-GEN] defines four forms of relative URLs: <inetwork-path>,\r\n<iabsolute-path>, <irelative-path>, and <ipath-empty>.  Their syntax\r\nis defined in Section 11.\r\n\r\n\r\n\r\n\r\n", "correct_text": "[URI-GEN] defines four forms of relative URLs: <network-path>,\r\n<absolute-path>, <relative-path>, and <path-empty>.  This document\r\nintroduces more restricted, IMAP-specific syntax corresponding to\r\nthese non-terminals, <inetwork-path>, <iabsolute-path>,\r\n<irelative-path>, and <ipath-empty>.  Their syntax is defined\r\nin Section 11.\r\n", "notes": "[URI-GEN] doesn't define <inetwork-path>, <iabsolute-path>, <irelative-path>, and <ipath-empty>, they are defined in the RFC 5092.\r\n\r\nThe issue was identified by Alfred H\u0153nes <ah@tr-sys.de>, he also suggested the new text.", "submit_date": "2021-06-05", "submitter_name": "queila", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 20:51:39"}, {"errata_id": "6600", "doc-id": "RFC2782", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Fictional ex", "orig_text": "      ; using the sysdmin's box and the server", "correct_text": "      ; using the sysadmin's box and the server", "notes": "A typo in the \"sysdmin's\"", "submit_date": "2021-06-06", "submitter_name": "Oleksandr Chychkan", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-06-06 23:15:47"}, {"errata_id": "6601", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "This timestamp uses the absolute time format previously discussed for RR storage in zones and caches", "correct_text": "This timestamp uses the absolute time format previously discussed for RR storage in caches", "notes": "In section 6.1.3. Time, it says \"while data in the zone stays with constant TTL ... The RRs in zones use relative times; the refresh timers and cache data use absolute times\"", "submit_date": "2021-06-07", "submitter_name": "Patrick Ni", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-06-14 15:24:53"}, {"errata_id": "6543", "doc-id": "RFC8610", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B", "orig_text": "     bytes = [bsqual] %x27 *BCHAR %x27\r\n     BCHAR = %x20-26 / %x28-5B / %x5D-10FFFD / SESC / CRLF", "correct_text": "     bytes = %x27 *BCHAR %x27\r\n           / bsqual %x27 *QCHAR %x27\r\n     BCHAR = %x20-26 / %x28-5B / %x5D-10FFFD / SESC / CRLF\r\n     QCHAR = DIGIT / ALPHA / \"+\" / \"/\" / \"-\" / \"_\" / \"=\" / WS\r\n", "notes": "As discussed during the CBOR interim 2021-04-21 and in the mailing list: https://mailarchive.ietf.org/arch/msg/cbor/ekFn8a4GbUQAk4nyhc-Il-ZRLZc/\r\n--\r\n\r\nThe ABNF used in [RFC8610] for the content of byte string literals lumps together byte strings notated as text with byte strings notated in base16 (hex) or base64 (but see also updated BCHAR production above):\r\n\r\nbytes = [bsqual] %x27 *BCHAR %x27\r\nBCHAR = %x20-26 / %x28-5B / %x5D-10FFFD / SESC / CRLF\r\n\r\nErrata report 6543 proposes to handle the two cases in separate productions (where, with an updated SESC, BCHAR obviously needs to be updated as above):\r\n\r\nbytes = %x27 *BCHAR %x27\r\n      / bsqual %x27 *QCHAR %x27\r\nBCHAR = %x20-26 / %x28-5B / %x5D-10FFFD / SESC / CRLF\r\nQCHAR = DIGIT / ALPHA / \"+\" / \"/\" / \"-\" / \"_\" / \"=\" / WS\r\n\r\nThis potentially causes a subtle change, which is hidden in the WS production:\r\n\r\nWS = SP / NL\r\nSP = %x20\r\nNL = COMMENT / CRLF\r\nCOMMENT = \";\" *PCHAR CRLF\r\nPCHAR = %x20-7E / %x80-10FFFD\r\nCRLF = %x0A / %x0D.0A\r\n\r\nThis allows any non-C0 character in a comment, so this fragment becomes possible:\r\n\r\nfoo = h'\r\n   43424F52 ; 'CBOR'\r\n   0A       ; LF, but don't use CR!\r\n'\r\n\r\nThe current text is not unambiguously saying whether the three apostrophes need to be escaped with a \\ or not, as in:\r\n\r\nfoo = h'\r\n   43424F52 ; \\'CBOR\\'\r\n   0A       ; LF, but don\\'t use CR!\r\n'\r\n... which would be supported by the existing ABNF in [RFC8610].", "submit_date": "2021-04-13", "submitter_name": "Sean Bartell", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-04-23 15:34:23"}, {"errata_id": "6531", "doc-id": "RFC3413", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   4.1.1   Tag Lists .....................,........................   29", "correct_text": "   4.1.1   Tag Lists ..............................................   29", "notes": "Improper punctuation.", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2021-04-13 20:43:29"}, {"errata_id": "6532", "doc-id": "RFC3413", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   4.1.2   Definitions ..................,.........................   30", "correct_text": "   4.1.2   Definitions ............................................   30", "notes": "Improper punctuation,", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2021-04-13 20:44:15"}, {"errata_id": "6533", "doc-id": "RFC3339", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "The Table of Contents says:", "orig_text": "   Appendix D. Leap Seconds ..............................,... 15", "correct_text": "   Appendix D. Leap Seconds .................................. 15", "notes": "comma to period", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-17 01:52:25"}, {"errata_id": "6534", "doc-id": "RFC2367", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "          Acknowledgments ............,............................. 52", "correct_text": "          Acknowledgments .......................................... 52", "notes": "Correct punctuation (stray comma)", "submit_date": "9999-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-04-13 19:20:21"}, {"errata_id": "6535", "doc-id": "RFC1138", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   4.7  IPMS Mappings ....... .................................   48", "correct_text": "   4.7  IPMS Mappings .........................................   48", "notes": "Space vs. punctuation.", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-04-15 00:54:18"}, {"errata_id": "6536", "doc-id": "RFC1148", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   4.7  IPMS Mappings ....... .................................   48", "correct_text": "   4.7  IPMS Mappings .........................................   48", "notes": "Space vs punctuation.", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-04-15 00:55:26"}, {"errata_id": "6537", "doc-id": "RFC1865", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "The Table of Contents says:", "orig_text": "   5.1.  What is a VAN?  ................... .......................  18", "correct_text": "   5.1.  What is a VAN?  ...........................................  18", "notes": "I don't know what a VAN is, but we can replace a space here with a period.", "submit_date": "2021-04-01", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-17 01:46:37"}, {"errata_id": "6538", "doc-id": "RFC3196", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "The Table of Contents says:", "orig_text": "   3.1.2.3.12  What charset to return when an unsupported charset is\r\n               requested (Issue 1.19)?....... ....................... 52", "correct_text": "   3.1.2.3.12  What charset to return when an unsupported charset is\r\n               requested (Issue 1.19)?............................... 52", "notes": "Spaces to full stops.", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-17 01:49:27"}, {"errata_id": "6539", "doc-id": "RFC3474", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "       9.1 Call Capability.........;.................................15", "correct_text": "       9.1 Call Capability...........................................15", "notes": "semicolon is not the expected punctuation here.", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-04-15 00:56:45"}, {"errata_id": "6540", "doc-id": "RFC6295", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "The Table of Contents says:", "orig_text": "   Appendix C. Session Configuration Tools ....... ..................100", "correct_text": "   Appendix C. Session Configuration Tools ..........................100", "notes": "Space to full stop.", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-17 01:50:57"}, {"errata_id": "6541", "doc-id": "RFC4069", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "       2.3.  Structure ..........................  ..................  3", "correct_text": "       2.3.  Structure ..............................................  3", "notes": "This time it was two spaces.", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2021-04-13 20:44:57"}, {"errata_id": "6542", "doc-id": "RFC3278", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   4  AuthenticatedData using ECC ............ ......................  8", "correct_text": "   4  AuthenticatedData using ECC ...................................  8", "notes": "Incorrect space in justification.", "submit_date": "2021-04-13", "submitter_name": "Juli Mallett", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-04-15 00:58:04"}, {"errata_id": "6544", "doc-id": "RFC8162", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "Others to want mitigate the difficulty of finding certificates from outside the enterprise.", "correct_text": "Others want to mitigate the difficulty of finding certificates from outside the enterprise.", "notes": "Wrong order of words.", "submit_date": "2021-04-14", "submitter_name": "Kaspar Etter", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-01-20 01:22:25"}, {"errata_id": "6553", "doc-id": "RFC7105", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "An example of an LLDP measurement is shown in Figure 4.  This shows\r\nan adjacent node (chassis) that is identified by the IP address\r\n192.0.2.45 (hexadecimal c000022d), and the port on that node is\r\nnumbered using an agent circuit ID [RFC3046] of 162 (hexadecimal a2).\r\n\r\n  <measurements xmlns=\"urn:ietf:params:xml:ns:geopriv:lm\"\r\n        time=\"2008-04-29T14:33:58\">\r\n    <lldp xmlns=\"urn:ietf:params:xml:ns:geopriv:lm:lldp\">\r\n      <chassis type=\"4\">c000022d</chassis>\r\n      <port type=\"6\">a2</port>\r\n    </lldp>\r\n  </measurements>", "correct_text": "An example of an LLDP measurement is shown in Figure 4.  This shows\r\nan adjacent node (chassis) that is identified by the IP address\r\n192.0.2.45 (hexadecimal 01c000022d, with the leading octet set to the\r\nIANA Address Family Numbers enumeration value for IPv4 [RFC1700]), and \r\nthe port on that node is numbered using an agent circuit ID [RFC3046] of \r\n162 (hexadecimal a2).\r\n\r\n  <measurements xmlns=\"urn:ietf:params:xml:ns:geopriv:lm\"\r\n        time=\"2008-04-29T14:33:58\">\r\n    <lldp xmlns=\"urn:ietf:params:xml:ns:geopriv:lm:lldp\">\r\n      <chassis type=\"5\">01c000022d</chassis>\r\n      <port type=\"6\">a2</port>\r\n    </lldp>\r\n  </measurements>", "notes": "There are two issues identified with this example.\r\n\r\nFirst, it wasn't clear what the original purpose of the 'type' field was.  Upon further investigation, they were intended to carry the Chassis ID Subtype and Port ID Subtype of the respective elements.  Given that, Chassis ID Subtype of '4' is the incorrect subtype for a Network Address.  The correct Chassis ID Subtype defined in IEEE Std 802.1AB-2016 Table 8-2 ('chassis ID subtype enumeration') is '5'.  The Port ID Subtype enumeration for Network Address is '4' and may be where the incorrect value was copied from.\r\n\r\nSecond, the example encoding of the IP Address 192.168.2.45 is missing the first octet designating the IANA Address Family Number. The example provided should be corrected to '01c000022d'.\r\n\r\nIEEE Std 802.1AB-2016 Table 8-2 (a) notes: \"networkAddress is an octet string that identifies a particular network address family and an associated network address that are encoded in network octet order. An IP address, for > example, would be encoded with the first octet containing the IANA Address Family Numbers enumeration value for the specific address type and octets 2 through n containing the > address value (for example, the encoding for C0-00-02-0A would indicate the IPv4 address 192.0.2.10).\"\r\n\r\nAs it relates to the type of this erratum, Section 5.1 notes:\r\n\r\n>  Values are provided as hexadecimal sequences.  The Device MUST report\r\n>   the values directly as they were provided by the adjacent node.\r\n>   Attempting to adjust or translate the type of identifier is likely to\r\n>   cause the measurement data to be useless.\r\n\r\nSince clients already must hexadecimal encode the value that is reported without adjusting or translating it, only the example should be incorrect.  However because people may have written their code to match the example directly, I'm leaving this as a technical type.", "submit_date": "2021-04-20", "submitter_name": "Andy Brezinsky", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6554", "doc-id": "RFC6550", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.9", "orig_text": "   2.  The node MUST logically construct groupings of its DAO parents\r\n       while populating the Path Control field, where each group\r\n       consists of DAO parents of equal preference.  Those groups MUST\r\n       then be ordered according to preference, which allows for a\r\n       logical mapping of DAO parents onto Path Control subfields (see\r\n       Figure 27).  Groups MAY be repeated in order to extend over the\r\n       entire bit width of the patch control field, but the order,\r\n       including repeated groups, MUST be retained so that preference is\r\n       properly communicated.\r\n", "correct_text": "   2.  The node MUST logically construct groupings of its DAO parents\r\n       while populating the Path Control field, where each group\r\n       consists of DAO parents of equal preference.  Those groups MUST\r\n       then be ordered according to preference, which allows for a\r\n       logical mapping of DAO parents onto Path Control subfields (see\r\n       Figure 27).  Groups MAY be repeated in order to extend over the\r\n       entire bit width of the path control field, but the order,\r\n       including repeated groups, MUST be retained so that preference is\r\n       properly communicated.\r\n", "notes": "Typo - patch instead of path", "submit_date": "2021-04-22", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-04-22 20:55:13"}, {"errata_id": "6555", "doc-id": "RFC8466", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "                container vxlan {\r\n                  when \"derived-from-or-self(../type, \"\r\n                     + \"'l2vpn-svc:vxlan')\" {\r\n                    description\r\n                      \"Only applies when the type of the tagged\r\n                       interface is 'vxlan'.\";\r\n                  }\r\n                  if-feature \"vxlan\";\r\n                  leaf vni-id {\r\n                    type uint32;\r\n                    mandatory true;\r\n                    description\r\n                      \"VXLAN Network Identifier (VNI).\";\r\n                  }\r\n                  leaf peer-mode {\r\n                    type identityref {\r\n                      base vxlan-peer-mode;\r\n                    }\r\n                    default \"static-mode\";\r\n                    description\r\n                      \"Specifies the VXLAN access mode.  By default,\r\n                       the peer mode is set to 'static-mode'.\";\r\n                  }\r\n                  list peer-list {\r\n                    key \"peer-ip\";\r\n                    leaf peer-ip {\r\n                      type inet:ip-address;\r\n                      description\r\n                        \"Peer IP.\";\r\n                    }\r\n                    description\r\n                      \"List of peer IP addresses.\";\r\n                  }\r\n                  description\r\n                    \"QinQ.\";\r\n                }", "correct_text": "                container vxlan {\r\n                  when \"derived-from-or-self(../type, \"\r\n                     + \"'l2vpn-svc:vxlan')\" {\r\n                    description\r\n                      \"Only applies when the type of the tagged\r\n                       interface is 'vxlan'.\";\r\n                  }\r\n                  if-feature \"vxlan\";\r\n                  leaf vni-id {\r\n                    type uint32;\r\n                    mandatory true;\r\n                    description\r\n                      \"VXLAN Network Identifier (VNI).\";\r\n                  }\r\n                  leaf peer-mode {\r\n                    type identityref {\r\n                      base vxlan-peer-mode;\r\n                    }\r\n                    default \"static-mode\";\r\n                    description\r\n                      \"Specifies the VXLAN access mode.  By default,\r\n                       the peer mode is set to 'static-mode'.\";\r\n                  }\r\n                  list peer-list {\r\n                    key \"peer-ip\";\r\n                    leaf peer-ip {\r\n                      type inet:ip-address;\r\n                      description\r\n                        \"Peer IP.\";\r\n                    }\r\n                    description\r\n                      \"List of peer IP addresses.\";\r\n                  }\r\n                  description\r\n                    \"Container for VXLAN.\";\r\n                }", "notes": "The description should refer to VXLAN not QinQ.\r\n\r\nAD Note: This errata is correct, but YANG modules cannot be fixed as part of the errata process.  A new YANG module revision needs to be published so I have put this errata into \"Held for Document Update\" state.", "submit_date": "2021-04-23", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:35:40"}, {"errata_id": "6556", "doc-id": "RFC9010", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "   [RFC6775] also introduces the Address Registration Option (ARO),\r\n   which is carried in the unicast Neighbor Solicitation (NS) and\r\n   Neighbor Advertisement (NA) messages between the 6LoWPAN Node (6LN)\r\n   and the 6LoWPAN router (6LR).  It also defines the Duplicate Address\r\n   Request (DAR) and Duplicate Address Confirmation (DAC) messages\r\n   between the 6LR and the 6LBR).  In an LLN, the 6LBR is the central\r\n   repository of all the Registered Addresses in its domain and the\r\n   source of truth for uniqueness and ownership.", "correct_text": "   [RFC6775] also introduces the Address Registration Option (ARO),\r\n   which is carried in the unicast Neighbor Solicitation (NS) and\r\n   Neighbor Advertisement (NA) messages between the 6LoWPAN Node (6LN)\r\n   and the 6LoWPAN router (6LR).  It also defines the Duplicate Address\r\n   Request (DAR) and Duplicate Address Confirmation (DAC) messages\r\n   between the 6LR and the 6LBR.  In an LLN, the 6LBR is the central\r\n   repository of all the Registered Addresses in its domain and the\r\n   source of truth for uniqueness and ownership.", "notes": "Extra closing parenthesis", "submit_date": "2021-04-23", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-04-23 15:14:03"}, {"errata_id": "6557", "doc-id": "RFC9008", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.1", "orig_text": "DODAG Configuration Option Flag to Indicate the RPI Flag Day", "correct_text": "DODAG Configuration Option Flag to Set the Value of the RPI Option Type ", "notes": "The point of the new flag is to avoid a flag day.\r\n\r\nThis text is as the name for Tables 1 and 26 on sections 4.1.3 and 11.1, respectively.", "submit_date": "2021-04-23", "submitter_name": "Pascal Thubert", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-04-23 15:19:33"}, {"errata_id": "7297", "doc-id": "RFC8878", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.1.3.1.1", "orig_text": "Size_Format == 01:  4 streams.  Both Regenerated_Size and\r\n   Compressed_Size use 10 bits (values 0-1023).\r\n   Literals_Section_Header uses 3 bytes.\r\n\r\nSize_Format == 10:  4 streams.  Both Regenerated_Size and\r\n   Compressed_Size use 14 bits (values 0-16383).\r\n   Literals_Section_Header uses 4 bytes.\r\n\r\nSize_Format == 11:  4 streams.  Both Regenerated_Size and\r\n   Compressed_Size use 18 bits (values 0-262143).\r\n   Literals_Section_Header uses 5 bytes.", "correct_text": "Size_Format == 01:  4 streams.  Both Regenerated_Size and\r\n   Compressed_Size use 10 bits (values 6-1023).\r\n   Literals_Section_Header uses 3 bytes.\r\n\r\nSize_Format == 10:  4 streams.  Both Regenerated_Size and\r\n   Compressed_Size use 14 bits (values 6-16383).\r\n   Literals_Section_Header uses 4 bytes.\r\n\r\nSize_Format == 11:  4 streams.  Both Regenerated_Size and\r\n   Compressed_Size use 18 bits (values 6-262143).\r\n   Literals_Section_Header uses 5 bytes.", "notes": "The calculation for the size of the fourth stream, specified in section 3.1.1.3.1.6, will underflow if the total size of the literals in the block is less than 6 bytes. So the 4-stream mode cannot be used in blocks with fewer than 6 literals. (Nor should it be, since it is strictly less efficient for very small literal sections.)\r\n\r\nThe source for this errata is https://github.com/facebook/zstd/pull/3398.\r\n\r\n[Verifier note: Confirmed with zstd developers.]", "submit_date": "2023-01-03", "submitter_name": "Felix Handte", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2024-08-22 17:58:54"}, {"errata_id": "6558", "doc-id": "RFC7804", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "   C: GET /resource HTTP/1.1\r\n   C: Host: server.example.com\r\n   C: Authorization: SCRAM-SHA-256 sid=AAAABBBBCCCCDDDD,\r\n          data=Yz1iaXdzLHI9ck9wck5HZndFYmVSV2diTkVrcU8laHZZRHBXVWEyUmFUQ\r\n             0FmdXhGSWxqKWhObEYscD1kSHpiWmFwV0lrNGpVaE4rVXRlOXl0YWc5empm\r\n             TUhnc3FtbWl6N0FuZFZRPQo=\r\n   C: [...]\r\n\r\n   S: HTTP/1.1 200 Ok\r\n   S: Authentication-Info: sid=AAAABBBBCCCCDDDD,\r\n          data=dj02cnJpVFJCaTIzV3BSUi93dHVwK21NaFVaVW4vZEI1bkxUSlJzamw5N\r\n             Uc0PQo=\r\n   S: [...Other header fields and resource body...]", "correct_text": "   C: GET /resource HTTP/1.1\r\n   C: Host: server.example.com\r\n   C: Authorization: SCRAM-SHA-256 sid=AAAABBBBCCCCDDDD,\r\n          data=\"Yz1iaXdzLHI9ck9wck5HZndFYmVSV2diTkVrcU8laHZZRHBXVWEyUmFUQ\r\n              0FmdXhGSWxqKWhObEYscD1kSHpiWmFwV0lrNGpVaE4rVXRlOXl0YWc5empm\r\n              TUhnc3FtbWl6N0FuZFZRPQo=\"\r\n   C: [...]\r\n\r\n   S: HTTP/1.1 200 Ok\r\n   S: Authentication-Info: sid=AAAABBBBCCCCDDDD,\r\n          data=\"dj02cnJpVFJCaTIzV3BSUi93dHVwK21NaFVaVW4vZEI1bkxUSlJzamw5N\r\n             Uc0PQo=\"\r\n   S: [...Other header fields and resource body...]", "notes": "The \"data\" parameter values for the example client request and server response are not quoted, even though these values do not comply with the HTTP token syntax (these both contain a final '='). This means that these examples are in fact invalid.\r\n\r\nFound at least one server that implemented their HTTP SCRAM mechanism based on this example, expecting the data parameter to be unquoted and producing it unquoted as well.", "submit_date": "2021-04-24", "submitter_name": "Stephan Bosch", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6559", "doc-id": "RFC4303", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "                  AFTER APPLYING ESP\r\n             -------------------------------------------------\r\n       IPv4  |orig IP hdr  | ESP |     |      |   ESP   | ESP|\r\n             |(any options)| Hdr | TCP | Data | Trailer | ICV|\r\n             -------------------------------------------------", "correct_text": "                  AFTER APPLYING ESP\r\n             ----------------------------------------------------\r\n       IPv4  |updated IP hdr  | ESP |     |      |   ESP   | ESP|\r\n             |(any options)   | Hdr | TCP | Data | Trailer | ICV|\r\n             ----------------------------------------------------", "notes": "\"orig\" implies that the IP header is left as-is, while in fact the \"protocol\" field and the \"total length\" and the checksum must be updated. There IS appropriate text explaining this in RFC 3948 \"The Total Length, Protocol, and Header Checksum (for IPv4) fields in the IP header are edited to match the resulting IP packet.\" but this text is missing here.\r\n\r\nWe have encountered an implementation that does not update the \"total length\" and the implementer claims that this is mandated by RFC 4303.\r\n\r\nPaul / Tero:\r\n\r\nThis is updating the figure in RFC4303 (ESP) and should use \"updated IP hdr\" instead of \"orig IP header\", as the specification does in fact modify the protocol, total length and checksum fields.\r\n\r\nIn any potential future document update, text should be added that explains which fields are updated similar to what is done in the RFC3948:\r\n\r\n       The Total Length, Protocol, and Header Checksum (for IPv4) fields\r\n       in the IP header are edited to match the resulting IP packet.\r\n\r\nAs ESP is still used the IPsecME WG might want to make a RFC4303bis at some point and this fix should then be included. Perhaps the WG should think about moving it from proposed standard to internet standard at one point.\r\n", "submit_date": "2021-04-25", "submitter_name": "Yaakov Stein", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2022-04-10 23:59:04"}, {"errata_id": "6575", "doc-id": "RFC8610", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2.3", "orig_text": "   Where a major type of 6 (Tag) is used, the type\r\n   of the tagged item can be specified by appending it in parentheses.", "correct_text": "   Where a major type of 6 (Tag) is used, the type \r\n   of the tagged item can be specified by appending it in parentheses.\r\n   Additionally, for major type 6 the value of the argument, not the \r\n   additional info is what follows the dot.", "notes": "The text at the top of page 50 is correct. The examples in 2.2.3 are also correct.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/cbor/0fhPGMaG1-TPmKlgKnP7iA2lb9M/ for discussion in the working group.", "submit_date": "2021-05-06", "submitter_name": "Laurence Lundblade", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-06-01 22:03:14"}, {"errata_id": "6561", "doc-id": "RFC5321", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.2.", "orig_text": "Domain         = sub-domain *(\".\" sub-domain)", "correct_text": "Domain         = sub-domain *(\".\" sub-domain)[.]\r\n", "notes": "RFC-1034 section 3.1 say \" Since a complete domain name ends with the root label, this leads to a printed form which ends in a dot.\" and also say 'a character string which represents a complete domain name (often called \"absolute\"). For example, \"poneria.ISI.EDU.\" '.\r\n It is necessary to allow a dot at the end of the domain name.\n --VERIFIER NOTES-- \nAs reported by John C Klensin in https://mailarchive.ietf.org/arch/msg/iesg/sAzZQpgOkD75eKQiS-RlWrmPhDk/ : The syntax used in SMTP predates RFC 1034.   This possible change was discussed in the DRUMS WG when RFC 2821 was being assembled and rejected as likely to cause harm with existing implementations.  If he recalls, that topic was revisited in the YAM WG that developed RFC 5321 with the conclusion to not reopen it.\r\n\r\nSo it is a substantive matter and not an editorial change and hence, as an erratum, it is rejected.", "submit_date": "2021-04-27", "submitter_name": "Seiichi Hamada", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-03-25 09:31:13"}, {"errata_id": "7299", "doc-id": "RFC9321", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Various", "orig_text": "In section A.3.3.\r\n\r\n   The SVT Signature object MUST contain one instance of the \"sig_data\"\r\n   claim (SignedData object) for each <ds:Reference> element in the\r\n   <ds:SignedInfo> element.  The \"sig_data\" claim MUST contain the\r\n   following elements:\r\n\r\nIn Sections B.2.3. and C.2.3.\r\n\r\n   The SVT Signature object MUST contain one instance of the \"sig_data\"\r\n   claim (SignedData object) with the following elements:", "correct_text": "In section A.3.3.\r\n\r\n   The SVT Signature object MUST contain one instance of the\r\n   \"sig_data_ref\" claim (SignedDataReference object) for each\r\n   <ds:Reference> element in the <ds:SignedInfo> element.  The\r\n   \"sig_data_ref\" claim MUST contain the following elements:\r\n\r\nIn Sections B.2.3. and C.2.3.\r\n\r\n   The SVT Signature object MUST contain one instance of the\r\n   \"sig_data_ref\" claim (SignedDataReference object) with the following\r\n   elements:", "notes": "The SignedDataReference Claims Object Class defined in section 3.2.6. has been incorrectly referenced in the appendices of the document\r\n\r\nAs defined in section 3.2.6. the class name of the object is \"SignedDataReference\" and the claims name is \"sig_data_ref\".", "submit_date": "2023-01-04", "submitter_name": "Stefan Santesson", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-11-01 12:52:13"}, {"errata_id": "6562", "doc-id": "RFC2634", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.4", "orig_text": "   The first certificate identified in the sequence of certificate\r\n   identifiers MUST be the certificate used to verify the signature. The\r\n   encoding of the ESSCertID for this certificate SHOULD include the\r\n   issuerSerial field. If other constraints ensure that\r\n   issuerAndSerialNumber will be present in the SignerInfo, the\r\n   issuerSerial field MAY be omitted. The certificate identified is used\r\n   during the signature verification process. If the hash of the\r\n   certificate does not match the certificate used to verify the\r\n   signature, the signature MUST be considered invalid.\r\n\r\n   If more than one certificate is present in the sequence of\r\n   ESSCertIDs, the certificates after the first one limit the set of\r\n   authorization certificates that are used during signature validation.\r\n", "correct_text": "   The sequence of certificate identifiers MUST contain at least one element.\r\n   The first certificate identified MUST be the certificate used to verify the signature.\r\n   The encoding of the ESSCertID for this certificate SHOULD include the\r\n   issuerSerial field. If other constraints ensure that\r\n   issuerAndSerialNumber will be present in the SignerInfo, the\r\n   issuerSerial field MAY be omitted. The certificate identified is used\r\n   during the signature verification process. If the hash of the\r\n   certificate does not match the certificate used to verify the\r\n   signature, the signature MUST be considered invalid.\r\n\r\n   If more than one certificate identifier is present in the sequence of ESSCertIDs,\r\n   all certificates referenced there MUST be part of the signature validation chain.\r\n", "notes": "Some aspects of the 'certs' field of a SigningCertificate attribute:\r\n\r\n   SigningCertificate ::=  SEQUENCE {\r\n       certs        SEQUENCE OF ESSCertID,\r\n       policies     SEQUENCE OF PolicyInformation OPTIONAL\r\n   }\r\n\r\ndescribed in the sentences quoted above are very vague.\r\nThis lead to major confusion and wrong implementations.\r\nAs meanwhile has been clarified, they should be re-phrased;\r\nsee suggested new version above.\r\n\r\n(One may further mandate/clarify that the certificate identifiers must be given in the same order\r\nas they are expected in the validation chain, but I think this is not important because\r\nthe order should not play a critical role and will be determined by the validation chain anyway.)\n --VERIFIER NOTES-- \n   RFC 5035 offers a replacement for Section 5.4 of RFC 2634.", "submit_date": "2021-04-28", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:38:17"}, {"errata_id": "6565", "doc-id": "RFC7230", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "section-6.3", "orig_text": "   o  If the received protocol is HTTP/1.0, the \"keep-alive\" connection\r\n      option is present, the recipient is not a proxy, and the recipient\r\n      wishes to honor the HTTP/1.0 \"keep-alive\" mechanism, the\r\n      connection will persist after the current response; otherwise,\r\n\r\n   o  The connection will close after the current response.", "correct_text": "   o  If the received protocol is HTTP/1.0, the \"keep-alive\" connection\r\n      option is present, the recipient is not a proxy, and the recipient\r\n      wishes to honor the HTTP/1.0 \"keep-alive\" mechanism, the\r\n      connection will persist after the current response; otherwise, the\r\n      connection will close after the current response.\r\n", "notes": "Error on breaking paragraph.\n --VERIFIER NOTES-- \n   This paragraph split into two bullets was meant to be as is in the document, for readability.", "submit_date": "2021-04-29", "submitter_name": "Alissa Tung", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-04-29 10:01:36"}, {"errata_id": "6578", "doc-id": "RFC6351", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "# 6.3.1\r\nparam-label = element label { value-text }?\r\nproperty-adr = element adr {\r\n    element parameters { param-language, param-altid, param-pid,\r\n                         param-pref, param-type, param-geo, param-tz,\r\n                         param-label }?,\r\n    element pobox { text }+,\r\n    element ext { text }+,\r\n    element street { text }+,\r\n    element locality { text }+,\r\n    element region { text }+,\r\n    element code { text }+,\r\n    element country { text }+\r\n  }\r\n", "correct_text": "# 6.3.1\r\nparam-label = element label { value-text }?\r\nproperty-adr = element adr {\r\n    element parameters { param-language, param-altid, param-pid,\r\n                         param-pref, param-type, param-geo, param-tz,\r\n                         param-label }?,\r\n    element pobox { text }?,\r\n    element ext { text }?,\r\n    element street { text }?,\r\n    element locality { text }?,\r\n    element region { text }?,\r\n    element code { text }?,\r\n    element country { text }?\r\n  }\r\n", "notes": "Multiply values for one address component does not allowed!\r\n\r\nRFC 6350: Special notes:  The structured type value consists of a sequence of address components.  The component values MUST be specified in their corresponding position.\r\nWhen a component value is missing, the associated component separator MUST still be specified.", "submit_date": "2021-05-08", "submitter_name": "Sergei S. Betke", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6579", "doc-id": "RFC6652", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.", "orig_text": "spf-rp-tag = \"rp=\" 1*12DIGIT \"/\" 1*12DIGIT", "correct_text": "spf-rp-tag = \"rp=\" \"100\" / 1*2DIGIT", "notes": "As explained in paragraph 3, the value of the \"rp\" modifier should be an integer value between 0 and 100. However, the specified abnf does not fit this requirement.", "submit_date": "2021-05-11", "submitter_name": "Benjamin Schwarze", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 22:17:38"}, {"errata_id": "6582", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "Unrecognized subtypes which also specify an unrecognized charset \r\nshould be treated as \"application/octet- stream\".", "correct_text": "Unrecognized subtypes which also specify an unrecognized charset \r\nshould be treated as \"application/octet-stream\".", "notes": "Extra space in \"application/octet- stream\"", "submit_date": "2021-05-15", "submitter_name": "ojab", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-17 06:57:51"}, {"errata_id": "6583", "doc-id": "RFC2046", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.1.2", "orig_text": "It is essential that such entities be handled correctly when they are\r\nthemselves imbedded inside of another \"multipart\" structure.", "correct_text": "It is essential that such entities be handled correctly when they are \r\nthemselves embedded inside of another \"multipart\" structure.", "notes": "`imbedded` is a typo\n --VERIFIER NOTES-- \n\u201cImbed\u201d is a less common spelling of \u201cembed\u201d (see https://www.merriam-webster.com/dictionary/imbed). It is used in a number of early RFCs (e.g., RFCs 549, 1035, 1258, 1580, 1689, 2567, 3423, and more). It was last used in RFC 5045. Since then, \u201cembed\u201d has been used in the RFC Series.  ", "submit_date": "2021-05-15", "submitter_name": "ojab", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-16 05:28:36"}, {"errata_id": "6595", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.6.4", "orig_text": "As described at the end of Section 11.1, there may be cases where it\r\nis useful to limit the number of \"terms\" for which DNS queries return\r\neither a positive answer (RCODE 0) with an answer count of 0, or a\r\n\"Name Error\" (RCODE 3) answer.  These are sometimes collectively\r\nreferred to as \"void lookups\".  SPF implementations SHOULD limit\r\n\"void lookups\" to two.  An implementation MAY choose to make such a\r\nlimit configurable.  In this case, a default of two is RECOMMENDED.\r\nExceeding the limit produces a \"permerror\" result.", "correct_text": "-- Addition to the original paragraph --\r\n\r\nADMDs should be aware that the void lookup limit can easily be exceeded by using sender-specific macros (\"s\", \"l\", \"o\", \"i\", \"h\") in more than 2 terms.\r\n\r\nThe following example will lead to an permerror in the most implementations if the <ip> is not found in any of the lists:\r\n  v=spf1 exists:%{ir}.list1.example.net exists:%{ir}.list2.example.net exists:%{ir}.list3.example.net -all", "notes": "In addition to the above suggestion, I still see a contradiction between the \"void lookup limit\" and the \"exists\" mechanism. The functionality of \"exists\" includes (in my opinion) the negative response (RCODE 3). But the \"void lookup limit\" allows this to occur only twice. This limits the use of \"exists\" very much.\r\n\r\nAdmittedly: I have no good idea how to solve this. :-)", "submit_date": "2021-06-03", "submitter_name": "Benjamin Schwarze", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6566", "doc-id": "RFC5035", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "   certs\r\n      contains the list of certificates that are to be used in\r\n      validating the message.  The first certificate identified in the\r\n      sequence of certificate identifiers MUST be the certificate used\r\n      to verify the signature.  The encoding of the ESSCertIDv2 for this\r\n      certificate SHOULD include the issuerSerial field.  If other\r\n      constraints ensure that issuerAndSerialNumber will be present in\r\n      the SignerInfo, the issuerSerial field MAY be omitted.  The\r\n      certificate identified is used during the signature verification\r\n      process.  If the hash of the certificate does not match the\r\n      certificate used to verify the signature, the signature MUST be\r\n      considered invalid.\r\n\r\n      If more than one certificate is present, subsequent certificates\r\n      limit the set of certificates that are used during validation.\r\n", "correct_text": "   certs\r\n      contains the list of certificates that are to be used in\r\n      validating the message. It MUST contain at least one element.\r\n      The first certificate identified in the\r\n      sequence of certificate identifiers MUST be the certificate used\r\n      to verify the signature.  The encoding of the ESSCertIDv2 for this\r\n      certificate SHOULD include the issuerSerial field.  If other\r\n      constraints ensure that issuerAndSerialNumber will be present in\r\n      the SignerInfo, the issuerSerial field MAY be omitted.  The\r\n      certificate identified is used during the signature verification\r\n      process.  If the hash of the certificate does not match the\r\n      certificate used to verify the signature, the signature MUST be\r\n      considered invalid.\r\n\r\n      If more than one certificate identifier is present in the sequence of ESSCertIDv2s,\r\n      all certificates referenced there MUST be part of the signature validation chain.", "notes": "Some aspects of the 'certs' field of a SigningCertificateV2 attribute:\r\n\r\n   SigningCertificateV2 ::=  SEQUENCE {\r\n       certs        SEQUENCE OF ESSCertIDv2,\r\n       policies     SEQUENCE OF PolicyInformation OPTIONAL\r\n   }\r\n\r\ndescribed in the sentences quoted above are rather vague.\r\nThis lead to major confusion and wrong implementations.\r\nAs meanwhile has been clarified, they should be re-phrased;\r\nsee suggested new version above.\r\n\r\n(One may further mandate/clarify that the certificate identifiers must be given in the same order\r\nas they are expected in the validation chain, but I think this is not important because\r\nthe order should not play a critical role and will be determined by the validation chain anyway.)", "submit_date": "2021-04-29", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:39:53"}, {"errata_id": "6564", "doc-id": "RFC7012", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2", "orig_text": "   The specification\r\n   of new MPLS label types MUST be published using a well-established\r\n   and persistent publication medium.", "correct_text": "(Deleted)", "notes": "This paragraph envisaged that a new RFC be written to specify new label types in the mplsTopLabelType sub-registry.\r\n\r\nSince the publication of RFC7012, IANA has added 16 other IPFIX IE sub-registries, none of which have the same requirement. See https://www.iana.org/assignments/ipfix/ipfix.xhtml\r\n\r\nPublication in IANA's IPFIX registry should provide a clear and persistent definition. New IPFIX MPLS label type specifications should not be singled out to require persistent publication of an additional document.", "submit_date": "2021-04-28", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 09:55:52"}, {"errata_id": "6567", "doc-id": "RFC5755", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "   GeneralName, GeneralNames, id-ce, AuthorityKeyIdentifier,\r\n   AuthorityInfoAccessSyntax, CRLDistributionPoint\r\n     FROM PKIX1Implicit88", "correct_text": "   GeneralName, GeneralNames, id-ce, AuthorityKeyIdentifier,\r\n   AuthorityInfoAccessSyntax\r\n     FROM PKIX1Implicit88", "notes": "CRLDistributionPoint is part of the IMPORTS statement, but it is not used in the definitions that follow.", "submit_date": "2021-05-01", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:16:22"}, {"errata_id": "6570", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11", "orig_text": "   o  New typedefs, groupings, rpcs, notifications, extensions,\r\n      features, and identities may be added.", "correct_text": "   o  New typedefs, groupings, rpcs, actions, notifications,\r\n      extensions, features, and identities may be added.", "notes": "The original text unintentionally fails to mention actions. A definition in a published module may be revised by adding actions to this definition.", "submit_date": "2021-05-04", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2021-05-10 07:26:33"}, {"errata_id": "6571", "doc-id": "RFC6402", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A.1", "orig_text": "         pendInfo               PendInfo,\r\n         extendedFailInfo       SEQUENCE {", "correct_text": "         pendInfo               PendInfo,\r\n         extendedFailInfo       [1] SEQUENCE {", "notes": "The ASN.1 module will not compile properly without a tag on one of these elements.  The ASN.1 module in Appendix A.2 has a tag in this spot.", "submit_date": "2021-05-04", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-05-10 00:17:07"}, {"errata_id": "6572", "doc-id": "RFC5246", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9", "orig_text": "In the absence of an application profile standard specifying otherwise, a TLS-compliant application MUST implement the cipher suite TLS_RSA_WITH_AES_128_CBC_SHA (see Appendix A.5 for the definition).", "correct_text": "In the absence of an application profile standard specifying otherwise, a TLS-compliant application MUST implement the cipher suite TLS_RSA_WITH_AES_128_GCM_SHA256 (see Appendix A.5 for the definition).", "notes": "A must-be-implement cipher suite should not relay on a bulk encryption algorithm which is vulnerable to plain-text attacks or on a secure hash algorithm which has been proven to be insecure.\n --VERIFIER NOTES-- \nerrata is not the right process for a change such as proposed.\r\nSee also: https://mailarchive.ietf.org/arch/msg/tls/2mKIkvRoQNMEMkT04JAqBifEJSo/", "submit_date": "2021-05-05", "submitter_name": "Johannes G\u00f6rlich", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:47:23"}, {"errata_id": "6569", "doc-id": "RFC8439", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3", "orig_text": "o  A 32-bit block count parameter, treated as a 32-bit little-endian integer.", "correct_text": "o  A 32-bit block count parameter, treated as a 32-bit integer.", "notes": "The block count is not used as a little-endian integer. An example of this can be seen in the example test vector in section 2.3.2, where Block Count = 1, but the block count word of the initial state is 00000001.\r\n\r\n\r\nHold for document update.\r\n\r\nErrata 6569 clarifies that the 32-bit block count is not little-endian, as originally described, improving accuracy in the ChaCha20 and Poly1305 specifications. While minor, this clarification helps developers accurately interpret block counts. Low priority and held for document update. - CFRG co-chair", "submit_date": "2021-05-03", "submitter_name": "David Reed", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:56:43"}, {"errata_id": "6573", "doc-id": "RFC6857", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A", "orig_text": "   From: =?UTF-8?Q?DISPLAY-LOCAL?=\r\n         =?UTF-8?Q?NON-ASCII-LOCAL=40example=2Ecom?= :;", "correct_text": "   From: =?UTF-8?Q?DISPLAY-LOCAL_?=\r\n         =?UTF-8?Q?NON-ASCII-LOCAL=40example=2Ecom?= :;", "notes": "Taking the original text from Errata 3955 (https://www.rfc-editor.org/errata/eid3955), the two encoded-words decode to: DISPLAY-LOCALNON-ASCII-LOCAL@example.com :; (According to section 6.2 of RFC 2047, linear whitespace between adjacent encoded-words is ignored.) This is clearly not desirable and thus a space should be encoded at the end of all display names in appendix A.", "submit_date": "2021-05-05", "submitter_name": "Kaspar Etter", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7300", "doc-id": "RFC8713", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.15", "orig_text": "A nominee may not know they were a candidate. This permits a candidate\r\nto be rejected by a confirming body without the nominee knowing about\r\nthe rejection.\r\n", "correct_text": "Delete.", "notes": "We do not have \"private\" nominees any more. All candidates are posted on the website, comments from the IETF community are solicited multiple times, each cnadidate must have an interview with NomCom and respond to a questionnaire. While there is some interest, scattered, in getting rid of the questionnaire, the concept of \"nominee didn't know they were nominated\" is clearly outdated.", "submit_date": "2023-01-05", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:17:37"}, {"errata_id": "6584", "doc-id": "RFC6333", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3", "orig_text": "   As noted previously, fragmentation and reassembly need to be taken\r\n   care of by the tunnel endpoints.  As such, the AFTR MUST perform\r\n   fragmentation and reassembly if the underlying link MTU cannot\r\n   accommodate the encapsulation overhead.  Fragmentation MUST happen\r\n   after the encapsulation on the IPv6 packet.  Reassembly MUST happen\r\n                           ^^^^^^^^^^^^^^^^^^\r\n   before the decapsulation of the IPv6 header.  A detailed procedure\r\n   has been specified in [RFC2473] Section 7.2.\r\n", "correct_text": "   As noted previously, fragmentation and reassembly need to be taken\r\n   care of by the tunnel endpoints.  As such, the AFTR MUST perform\r\n   fragmentation and reassembly if the underlying link MTU cannot\r\n   accommodate the encapsulation overhead.  Fragmentation MUST happen\r\n   after the IPv6 encapsulation.  Fragmentation MUST happen after the encapsulation of the\r\n   IPv4 packet in the IPv6 packet.  Reassembly of the IPv6 packet MUST happen before the decapsulation of the\r\n   IPv4 packet.  A detailed procedure has been specified in [RFC2473]\r\n   Section 7.2 following point b) and ignoring the DF-bit setting.\r\n", "notes": "The original text is confusing as it seems to assume an extra encapsulation on the IPv6 packet, while this should be about adding an IPv6 header to an IPv4 packet.\r\n\r\n-- verifier notes --\r\nFollowing the discussion in https://mailarchive.ietf.org/arch/msg/softwires/bBQT97R7p1Ho4cUZIP2MFU5ZYJ4/ , the original intent is to avoid fragmenting the IPv4 packet before encapsulation.\r\nSee also errata 5874 on section 5.3 (the submitter's proposal has been updated by the verifier to be consistent with errata 5874).", "submit_date": "2021-05-17", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-05-17 08:42:31"}, {"errata_id": "6586", "doc-id": "RFC8688", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "                         +--------+         +-----------+\r\n                         | Called |         |   Call    |\r\n        +-----+          | Party  |         | Analytics |   +-----+\r\n        | UAC |          | Proxy  |         |  Engine   |   | UAS |\r\n        +-----+          +--------+         +-----------+   +-----+\r\n           |  INVITE         |                    |            |\r\n           | --------------> |  Is call OK?       |            |\r\n           |                 |------------------->|            |\r\n           |                 |                    |            |\r\n           |                 |               Yes  |            |\r\n           |                 |<-------------------|            |\r\n           |                 |                    |            |\r\n           |                 | INVITE             |            |\r\n           |                 | ------------------------------> |\r\n           |                 |                    |            |\r\n           |                 |                    |       607  |\r\n           |                 | <------------------------------ |\r\n           |                 |                    |            |\r\n           |                 |  Unwanted call     |            |\r\n           |            607  | -----------------> |            |\r\n           | <-------------- |  indicators        |            |\r\n           |                 |                    |            |\r\n", "correct_text": "                         +--------+         +-----------+\r\n                         | Called |         |   Call    |\r\n        +-----+          | Party  |         | Analytics |   +-----+\r\n        | UAC |          | Proxy  |         |  Engine   |   | UAS |\r\n        +-----+          +--------+         +-----------+   +-----+\r\n           |  INVITE         |                    |            |\r\n           | --------------> |  Is call OK?       |            |\r\n           |                 |------------------->|            |\r\n           |                 |                    |            |\r\n           |                 |               No   |            |\r\n           |                 |<-------------------|            |\r\n           |                 |                    |            |\r\n           |                 |              \t  |            |\r\n           |                 |                    |            |\r\n           |                 |                    |            |\r\n           |            608  |                    |            |\r\n           | <-------------- |                    |            |\r\n           |                 |                    |            |\r\n", "notes": "\"Figure 4: Rejected (608) Ladder Diagram\" does not depict correct signalling flow.", "submit_date": "2021-05-18", "submitter_name": "Amrita Bhatt", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6587", "doc-id": "RFC7752", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   Mechanisms through which topologies can be aggregated or virtualized\r\n   are outside the scope of this document\r\n", "correct_text": "   Mechanisms through which topologies can be aggregated or virtualized\r\n   are outside the scope of this document.\r\n", "notes": "This sentence has no period.", "submit_date": "2021-05-18", "submitter_name": "Alvaro Retana", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-05-14 01:06:21"}, {"errata_id": "6588", "doc-id": "RFC2622", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "authenticaiton", "correct_text": "authentication", "notes": "The typo appears in section 3 (twice) and section 3.1 (once)", "submit_date": "2021-05-20", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 11:51:55"}, {"errata_id": "6589", "doc-id": "RFC162", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   An alternate possibility is for Host X to use his Telnet to enter our\r\n   system and start NETBUGGER3 himself.  He can then be running\r\n   NETBUGGER3 on one console and his filenet on another.\r\n\r\n   An alternate possibility is for Host X to use his Telnet to enter our\r\n   system and start NETBUGGER3 himself.  He can then be running\r\n   NETBUGGER3 on one console and his filenet on another.", "correct_text": "   An alternate possibility is for Host X to use his Telnet to enter our\r\n   system and start NETBUGGER3 himself.  He can then be running\r\n   NETBUGGER3 on one console and his filenet on another.", "notes": "It looks like the transcription resulted in the duplication of this paragraph.", "submit_date": "2021-05-24", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-05-24 04:15:36"}, {"errata_id": "6591", "doc-id": "RFC8992", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "objective = [\"PrefixManager.Params\", objective-flags, any]", "correct_text": "objective = [\"PrefixManager.Params\", objective-flags, loop-count, any]", "notes": "Clarifying an omission in the original.  All GRASP Objective Options must include a loop-count as required by the format defined in section 2.10 of RFC 8990.", "submit_date": "2021-05-25", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2021-06-08 09:20:12"}, {"errata_id": "7304", "doc-id": "RFC2606", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "example.org, ...", "correct_text": "example.org, example.edu, ...", "notes": "Should mention `example.edu` as one of the reserved names as well, since IANA is doing that according to Kim Davies.  The 6125bis draft uses it in some examples.\n --VERIFIER NOTES-- \nWhile 'example.edu' is indeed operated by IANA, it does appear neither in the \"special-use domain names\" registry of IANA nor in RFC 6761.", "submit_date": "2023-01-13", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:41:05"}, {"errata_id": "6602", "doc-id": "RFC2018", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   This document does not attempt to specify in detail the congestion\r\n   control algorithms for implementations of TCP with SACK.  However,\r\n   the congestion control algorithms present in the de facto standard\r\n   TCP implementations MUST be preserved [Stevens94].  In particular, to\r\n   preserve robustness in the presence of packets reordered by the\r\n   network, recovery is not triggered by a single ACK reporting out-of-\r\n   order packets at the receiver.  Further, during recovery the data\r\n   sender limits the number of segments sent in response to each ACK.\r\n   Existing implementations limit the data sender to sending one segment\r\n   during Reno-style fast recovery, or to two segments during slow-start\r\n   [Jacobson88].  Other aspects of congestion control, such as reducing\r\n   the congestion window in response to congestion, must similarly be\r\n   preserved.", "correct_text": "   This document does not attempt to specify in detail the congestion\r\n   control algorithms for implementations of TCP with SACK.  However,\r\n   the congestion control algorithms present in the de facto standard\r\n   TCP implementations MUST be preserved [Stevens94].  In particular, to\r\n   preserve robustness in the presence of packets reordered by the\r\n   network, recovery is not triggered by a single ACK reporting out-of-\r\n   order packets at the receiver.  Further, during recovery the data\r\n   sender limits the number of segments sent in response to each ACK.\r\n   Existing implementations limit the data sender to sending one segment\r\n   during Reno-style recovery upon a timeout , or to two segments during slow-start\r\n   [Jacobson88].  Other aspects of congestion control, such as reducing\r\n   the congestion window in response to congestion, must similarly be\r\n   preserved.", "notes": "RFC 2581, Section 3.1 sets the cndw to a value of 1:\r\n   ...\r\n   Furthermore, upon a timeout cwnd MUST be set to no more than the loss\r\n   window, LW, which equals 1 full-sized segment (regardless of the\r\n   value of IW).  Therefore, after retransmitting the dropped segment\r\n   the TCP sender uses the slow start algorithm to increase the window\r\n   from 1 full-sized segment to the new value of ssthresh, at which\r\n   point congestion avoidance again takes over.\r\n\r\nWhereas in the Fast Recovery section(3.2) the cwnd is set by the following formula:\r\n   ...\r\n   The fast retransmit and fast recovery algorithms are usually\r\n   implemented together as follows.\r\n\r\n   1.  When the third duplicate ACK is received, set ssthresh to no more\r\n       than the value given in equation 3.\r\n   2.  Retransmit the lost segment and set cwnd to ssthresh plus 3*SMSS.\r\n       This artificially \"inflates\" the congestion window by the number\r\n       of segments (three) that have left the network and which the\r\n       receiver has buffered.\r\n\r\n   3.  For each additional duplicate ACK received, increment cwnd by\r\n       SMSS.  This artificially inflates the congestion window in order\r\n       to reflect the additional segment that has left the network.\r\n\r\n   4.  Transmit a segment, if allowed by the new value of cwnd and the\r\n       receiver's advertised window.\r\n\r\n   5.  When the next ACK arrives that acknowledges new data, set cwnd to\r\n       ssthresh (the value set in step 1).  This is termed \"deflating\"\r\n       the window.\r\n\r\n       This ACK should be the acknowledgment elicited by the\r\n       retransmission from step 1, one RTT after the retransmission\r\n       (though it may arrive sooner in the presence of significant out-\r\n       of-order delivery of data segments at the receiver).\r\n       Additionally, this ACK should acknowledge all the intermediate\r\n       segments sent between the lost segment and the receipt of the\r\n       third duplicate ACK, if none of these were lost.\n --VERIFIER NOTES-- \nThe sentence in question is not describing cwnd adjustment. When in Fast Recovery, a duplicate ack indeed allows the transmission of one packet to replace the one that left the network. In Slow Start, an ack allows for two packets: one to replace the old one, and one to fill the newly expanded cwnd.", "submit_date": "2021-06-07", "submitter_name": "Christian Reusch", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-05-13 18:21:18"}, {"errata_id": "6603", "doc-id": "RFC8620", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.6", "orig_text": "In the \"upToId\" request argument definition:\r\n\r\n      If the sort and\r\n      filter are both only on immutable properties, this allows the\r\n      server to omit changes after this point in the results, which can\r\n      significantly increase efficiency.  If they are not immutable,\r\n      this argument is ignored.\r\n\r\nIn the \"removed\" response argument definition:\r\n\r\n      If the sort and filter are both only on immutable properties and\r\n      an \"upToId\" is supplied and exists in the results, any ids that\r\n      were removed but have a higher index than \"upToId\" SHOULD be\r\n      omitted.\r\n\r\nIn the \"added\" response argument definition:\r\n\r\n      If the sort and filter are both only on immutable properties and\r\n      an \"upToId\" is supplied and exists in the results, any ids that\r\n      were added but have a higher index than \"upToId\" SHOULD be\r\n      omitted.", "correct_text": "In the upToId argument definition:\r\n\r\n      The server may be able to omit added or removed items that are \r\n      after the client's last cached id, making the update more efficient.\r\n\r\nIn the \"removed\" response argument definition:\r\n\r\n      If an \"upToId\" is supplied and existed in the old results, any ids\r\n      that were removed but had a higher index than \"upToId\" in those\r\n      results SHOULD be omitted.  If the server cannot calculate this,\r\n      the \"upToId\" MUST be ignored.\r\n\r\nIn the \"added\" response argument definition:\r\n\r\n      If an \"upToId\" is supplied and exists in the new results, any ids\r\n      that were added but have a higher index than \"upToId\" SHOULD be\r\n      omitted.", "notes": "This errata fixes two issues with the upToId definition:\r\n\r\n1. Using upToId doesn't require immutable properties in some server implementations; this is an implementation detail. The important thing is it's an optional optimisation that the server can ignore if it does not have the data to calculate it. The text has been updated to reflect this.\r\n\r\n2. Clarify that for the \"removed\" argument, the indexes we are comparing for the upToId optimisation are of the ids in the *old* results. The original text is unclear and seems to imply you might compare with the index of the id in the new results, which will give an incorrect result.", "submit_date": "2021-06-09", "submitter_name": "Neil Jenkins", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6609", "doc-id": "RFC8684", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.3", "orig_text": "   initiator                                                    listener\r\n       |                                                           |\r\n       |    S  0(20) <MP_CAPABLE>, <TFO cookie>                    |\r\n       | --------------------------------------------------------> |\r\n       |                                                           |\r\n       |    S. 0(0) ack 21 <MP_CAPABLE>                            |\r\n       | <-------------------------------------------------------- |\r\n       |                                                           |\r\n       |    .  1(100) ack 21 <DSS ack=1 seq=1 ssn=1 dlen=100>      |\r\n       | <-------------------------------------------------------- |\r\n       |                                                           |\r\n       |    .  21(0) ack 1 <MP_CAPABLE>                            |\r\n       | --------------------------------------------------------> |\r\n       |                                                           |\r\n       |    .  21(20) ack 101 <DSS ack=101 seq=1 ssn=1 dlen=20>    |\r\n       | --------------------------------------------------------> |\r\n       |                                                           |\r\n\r\n                    Figure 19: The Listener Supports TFO", "correct_text": "initiator                                                    listener\r\n       |                                                           |\r\n       |    S  0(20) <MP_CAPABLE>, <TFO cookie>                    |\r\n       | --------------------------------------------------------> |\r\n       |                                                           |\r\n       |    S. 0(0) ack 21 <MP_CAPABLE>                            |\r\n       | <-------------------------------------------------------- |\r\n       |                                                           |\r\n       |    .  1(100) ack 21 <DSS seq=1 ssn=1 dlen=100, M=1, A=0>  |\r\n       | <-------------------------------------------------------- |\r\n       |                                                           |\r\n       |    .  21(0) ack 1 <MP_CAPABLE>                            |\r\n       | --------------------------------------------------------> |\r\n       |                                                           |\r\n       |    .  21(20) ack 101 <DSS ack=101 seq=1 ssn=1 dlen=20>    |\r\n       | --------------------------------------------------------> |\r\n       |                                                           |\r\n\r\n                    Figure 19: The Listener Supports TFO", "notes": "The example for TCP Fastopen with MPTCPv1 in RFC8684, Appendix-B.3 shows the listener sending an incorrect data-ack in its first data packet to the initiator sent immediately after its SYN-ACK.\r\nAt this point, the listener has not received the initiator's key, so it cannot generate the data-ack in it's response packets.\r\nThe correct behaviour would be to set flag 'A' to 0 and exclude sending data-ack until the initiator's key is received.", "submit_date": "2021-06-14", "submitter_name": "Krishna Khanal", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-19 15:16:23"}, {"errata_id": "6611", "doc-id": "RFC8881", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "18.37.3", "orig_text": "*                                             Otherwise, the error\r\n   CB_BACK_CHAN_BUSY SHOULD be returned to indicate that there are\r\n   CB_COMPOUNDs that need to be replied to.", "correct_text": "*                                                  Otherwise, the error\r\n   NFS4ERR_BACK_CHAN_BUSY SHOULD be returned to indicate that there are\r\n   CB_COMPOUNDs that need to be replied to.", "notes": "CB_BACK_CHAN_BUSY is not defined in this document.", "submit_date": "2021-06-16", "submitter_name": "Seman.Shen", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6612", "doc-id": "RFC7518", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": ".4", "orig_text": "   2.  Turn R and S into octet sequences in big-endian order, with each\r\n       array being be 32 octets long.  The octet sequence\r\n       representations MUST NOT be shortened to omit any leading zero\r\n       octets contained in the values.\r\n", "correct_text": "   2.  Turn R and S into octet sequences in big-endian order, with each\r\n       array being 32 octets long.  The octet sequence\r\n       representations MUST NOT be shortened to omit any leading zero\r\n       octets contained in the values.\r\n", "notes": "\"being be\" should be changed to \"being\"", "submit_date": "2021-06-16", "submitter_name": "Sebasti\u00e1n Ram\u00edrez", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-06-25 02:40:20"}, {"errata_id": "6613", "doc-id": "RFC6749", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "The value of the scope parameter is expressed as a list of space-delimited, case-sensitive strings", "correct_text": "The value of the scope parameter is expressed as a space-delimited list of case-sensitive strings", "notes": "The original/current seems to be a bit confusing.\r\n\r\nThe value is not a collection of space-delimited strings (whatever a \"space-delimited string\" would be), but it a space-delimited (representation of) a collection of strings.", "submit_date": "2021-06-17", "submitter_name": "Daniel Barclay", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-07-18 23:30:55"}, {"errata_id": "7306", "doc-id": "RFC9110", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14.1.1", "orig_text": "  ranges-specifier = range-unit \"=\" range-set\r\n  range-set        = 1#range-spec\r\n  range-spec       = int-range\r\n                   / suffix-range\r\n                   / other-range", "correct_text": "  ranges-specifier = range-unit \"=\" OWS range-set\r\n  range-set        = 1#range-spec\r\n  range-spec       = int-range\r\n                   / suffix-range\r\n                   / other-range", "notes": "The ABNF is inconsistent with one of the examples given in 14.1.2\r\n\r\n   bytes= 0-999, 4500-5499, -1000\r\n\r\nThe bug in the ABNF was likely introduced when converting away from \"implied linear whitespace\".\r\n\r\nSee also <https://github.com/whatwg/fetch/issues/1070#issuecomment-1361800123>.", "submit_date": "2023-01-13", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-10-23 09:45:18"}, {"errata_id": "6604", "doc-id": "RFC8620", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.6", "orig_text": "   If it *splices out* all ids in the removed array that it has in its\r\n   cached results, then:\r\n\r\n      removed = [ \"id2\", \"id31\", ... ];\r\n      fooIds => [ \"id1\", null, null, \"id3\", \"id4\", null, null, null ]\r\n\r\n   and *splices in* (one by one in order, starting with the lowest\r\n   index) all of the ids in the added array:\r\n\r\n  added = [{ id: \"id5\", index: 0, ... }];\r\n  fooIds => [ \"id5\", \"id1\", null, null, \"id3\", \"id4\", null, null, null ]", "correct_text": "   If it *splices out* all ids in the removed array that it has in its\r\n   cached results, then:\r\n\r\n      removed = [ \"id2\", \"id31\", ... ];\r\n      fooIds => [ \"id1\", null, null, \"id3\", \"id4\", null, null, null ]\r\n\r\n   and if any of the \"removed\" ids were not found, invalidates all\r\n   cached ids after the first gap in the sparse array:\r\n\r\n       fooIds => [ \"id1\", null, null, null, null, null, null, null ]\r\n\r\n   and *splices in* (one by one in order, starting with the lowest\r\n   index) all of the ids in the added array:\r\n\r\n   added = [{ id: \"id5\", index: 0, ... }];\r\n   fooIds => [ \"id5\", \"id1\", null, null, null, null, null, null, null ]", "notes": "Adds a critical step that was omitted from the description for how a client should process a \"/queryUpdates\" response. Without this step, the client could end up with ids in incorrect positions in its cached query results.", "submit_date": "2021-06-09", "submitter_name": "Neil Jenkins", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6605", "doc-id": "RFC8620", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.5", "orig_text": "   o  position: \"UnsignedInt\"\r\n\r\n      The zero-based index of the first result in the \"ids\" array within\r\n      the complete list of query results.", "correct_text": "   o  position: \"UnsignedInt\"\r\n\r\n      The zero-based index of the first result in the \"ids\" array within\r\n      the complete list of query results.  If the \"ids\" array is empty,\r\n      the value is undefined and MUST NOT be used by the client.", "notes": "The position response argument in \"/query\" is only defined when there is at least one id returned in the response. Make it clearer that when there are no ids returned, the client cannot rely on it being any particular value.", "submit_date": "2021-06-09", "submitter_name": "Neil Jenkins", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6606", "doc-id": "RFC8620", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "o  using: \"String[]\"\r\n\r\n      The set of capabilities the client wishes to use.  The client MAY\r\n      include capability identifiers even if the method calls it makes\r\n      do not utilise those capabilities.  The server advertises the set\r\n      of specifications it supports in the Session object (see\r\n      Section 2), as keys on the \"capabilities\" property.", "correct_text": "o  using: \"String[]\"\r\n\r\n      The set of capabilities the client wishes to use.  The client MAY\r\n      include capability identifiers even if the method calls it makes\r\n      do not utilise those capabilities.  The server advertises the set\r\n      of specifications it supports in the Session object (see\r\n      Section 2), as keys on the \"capabilities\" property.  The\r\n      \"urn:ietf:params:jmap:core\" capability represents this document\r\n      and MUST be included in the \"using\" list.  This is to allow a\r\n      smooth upgrade path for future revisions to the core JMAP\r\n      specification with different capability identifiers.", "notes": "The original text was unclear on whether the capability for this document (JMAP core) had to be included in the \"using\" list, or just those of extensions to JMAP core. Clarify that the \"core\" capability must also be included, and give the rationale.", "submit_date": "2021-06-09", "submitter_name": "Neil Jenkins", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6607", "doc-id": "RFC8620", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.3", "orig_text": "   [...]                             In the case of records with\r\n   references to the same type, the server MUST order the creates and\r\n   updates within a single method call so that creates happen before\r\n   their creation ids are referenced by another create/update/destroy in\r\n   the same call.", "correct_text": "   [...]                             In the case of records with\r\n   references to the same type, the server MUST order the creates and\r\n   updates within a single method call so that creates happen before\r\n   their creation ids are referenced by another create/update/destroy in\r\n   the same call.\r\n\r\n   A record may be updated/destroyed in the same request as it is\r\n   created.  The update/destroy arguments may use creation ids as keys\r\n   by prefixing the creation id with a \"#\".", "notes": "Clarify that it's explicitly permitted to update/destroy records created in the same request using the same mechanism as setting foreign keys in records.", "submit_date": "2021-06-09", "submitter_name": "Neil Jenkins", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6608", "doc-id": "RFC819", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "Whenever a name server is called it may be a recursive server or an\r\ninteractive server.", "correct_text": "Whenever a name server is called it may be a recursive server or an\r\niterative server.", "notes": "Wording is changed to reflect the industry-accepted distinction between iterative and recursive name servers.", "submit_date": "2021-06-12", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2021-06-12 11:50:30"}, {"errata_id": "6614", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "... adding the following parameters to the entity-body of the HTTP response ...", "correct_text": "... adding the following parameters as members to the JSON object in the entity-body of the HTTP response ...", "notes": "Saying \"adding the following parameters to the entity-body\" seems to be confusing, \r\nimplying that HTTP entity bodies have parameters (at the level of semantics defined by HTTP), which they don't.\r\n\r\nThe corrected text doesn't necessarily need to be what I proposed in the \"Corrected Text\" field, but it should probably at least refer to the data or (JSON) object inside the entity body instead of just referring to the entity body.", "submit_date": "2021-06-17", "submitter_name": "Daniel Barclay", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6615", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Condition descriptions like \"The authorization server ... validates the authorization grant, and if valid, issues an access token.\"\r\n ", "correct_text": "Adjusted descriptions like \"The authorization server ... validates the authorization grant, and if it is valid, issues an access token.\"\r\n", "notes": "The wording pattern \"A validates B, and if valid, does X\" means \"A validates B, and if A is valid, does X\" and is confusing.\r\n\r\nThose descriptions' wording should be adjusted, probably to the pattern \"A validates B, and if it is valid, does X\" (or whatever else actually says what was meant to be specified).\r\n\r\nThere are many occurrences with literally \"and if valid\"; it looks (from a quick search) like most, but not all, need adjustment. There are also several cases of \"and if\" followed by something other than \"valid\"--some seem correct, but a few might need adjustment.", "submit_date": "2021-06-17", "submitter_name": "Daniel Barclay", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6616", "doc-id": "RFC8572", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.3", "orig_text": "   For device-independent queries, the three bootstrapping artifacts\r\n   defined in Section 3 are encoded into the SVR records as follows.\r\n\r\n   Artifact to SRV Record Mapping:\r\n\r\n      Conveyed Information:  This artifact is not supported directly.\r\n         Instead, the essence of unsigned redirect information is mapped\r\n         to SVR records per [RFC2782].", "correct_text": "   For device-independent queries, the three bootstrapping artifacts\r\n   defined in Section 3 are encoded into the SRV records as follows.\r\n\r\n   Artifact to SRV Record Mapping:\r\n\r\n      Conveyed Information:  This artifact is not supported directly.\r\n         Instead, the essence of unsigned redirect information is mapped\r\n         to SRV records per [RFC2782].", "notes": "In both places \"SVR\" should obviously read \"SRV\".\r\n", "submit_date": "2021-06-18", "submitter_name": "Srihari Ramanathan", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2021-06-21 20:03:08"}, {"errata_id": "6617", "doc-id": "RFC8011", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.2", "orig_text": "   This OPTIONAL operation is identical to the Print-Job operation\r\n   (Section 4.2.1), except that a Client supplies a URI reference to the\r\n   Document data using the \"document-uri\" (uri) operation attribute (in\r\n   Group 1) rather than including the Document data itself.  Before\r\n   returning the response, the Printer MUST validate that the Printer\r\n   supports the retrieval method (e.g., 'http', 'ftp', etc.) implied by\r\n   the URI and MUST check for valid URI syntax.  If the Client-supplied\r\n   URI scheme is not supported, i.e., the value is not in the Printer's\r\n   \"referenced-uri-scheme-supported\" attribute, the Printer MUST reject\r\n   the request and return the 'client-error-uri-scheme-not-supported'\r\n   status-code.\r\n", "correct_text": "   This OPTIONAL operation is identical to the Print-Job operation\r\n   (Section 4.2.1), except that a Client supplies a URI reference to the\r\n   Document data using the \"document-uri\" (uri) operation attribute (in\r\n   Group 1) rather than including the Document data itself.  Before\r\n   returning the response, the Printer MUST validate that the Printer\r\n   supports the retrieval method (e.g., 'http', 'ftp', etc.) implied by\r\n   the URI and MUST check for valid URI syntax.  If the Client-supplied\r\n   URI scheme is not supported, i.e., the value is not in the Printer's\r\n   \"reference-uri-scheme-supported\" attribute, the Printer MUST reject\r\n   the request and return the 'client-error-uri-scheme-not-supported'\r\n   status-code.\r\n", "notes": "'referenced-uri-scheme-supported' --> 'reference-uri-scheme-supported'", "submit_date": "2021-06-22", "submitter_name": "Smith Kennedy", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-06-23 04:34:20"}, {"errata_id": "6618", "doc-id": "RFC2131", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "                Server          Client          Server\r\n            (not selected)                    (selected)\r\n\r\n                  v               v               v\r\n                  |               |               |\r\n                  |     Begins initialization     |\r\n                  |               |               |\r\n                  | _____________/|\\____________  |\r\n                  |/DHCPDISCOVER | DHCPDISCOVER  \\|\r\n                  |               |               |\r\n              Determines          |          Determines\r\n             configuration        |         configuration\r\n                  |               |               |\r\n                  |\\             |  ____________/ |\r\n                  | \\________    | /DHCPOFFER     |\r\n                  | DHCPOFFER\\   |/               |\r\n                  |           \\  |                |\r\n                  |       Collects replies        |\r\n                  |             \\|                |\r\n                  |     Selects configuration     |\r\n                  |               |               |\r\n                  | _____________/|\\____________  |\r\n                  |/ DHCPREQUEST  |  DHCPREQUEST\\ |\r\n                  |               |               |\r\n                  |               |     Commits configuration\r\n                  |               |               |\r\n                  |               | _____________/|\r\n                  |               |/ DHCPACK      |\r\n                  |               |               |\r\n                  |    Initialization complete    |\r\n                  |               |               |\r\n                  .               .               .\r\n                  .               .               .\r\n                  |               |               |\r\n                  |      Graceful shutdown        |\r\n                  |               |               |\r\n                  |               |\\ ____________ |\r\n                  |               | DHCPRELEASE  \\|\r\n                  |               |               |\r\n                  |               |        Discards lease\r\n                  |               |               |\r\n                  v               v               v\r\n     Figure 3: Timeline diagram of messages exchanged between DHCP\r\n               client and servers when allocating a new network address\r\n\r\n\r\n\r\n", "correct_text": "                Server          Client          Server\r\n            (not selected)                    (selected)\r\n\r\n                  v               v               v\r\n                  |               |               |\r\n                  |     Begins initialization     |\r\n                  |               |               |\r\n                  | _____________/|\\_____________ |\r\n                  |/DHCPDISCOVER  | DHCPDISCOVER \\|\r\n                  |               |               |\r\n              Determines          |          Determines\r\n             configuration        |         configuration\r\n                  |               |               |\r\n                  |\\              |  ____________/|\r\n                  | \\_________    | /DHCPOFFER    |\r\n                  |  DHCPOFFER\\   |/              |\r\n                  |            \\  |               |\r\n                  |       Collects replies        |\r\n                  |              \\|               |\r\n                  |     Selects configuration     |\r\n                  |               |               |\r\n                  | _____________/|\\____________  |\r\n                  |/ DHCPREQUEST  |  DHCPREQUEST\\ |\r\n                  |               |               |\r\n                  |               |     Commits configuration\r\n                  |               |               |\r\n                  |               | _____________/|\r\n                  |               |/ DHCPACK      |\r\n                  |               |               |\r\n                  |    Initialization complete    |\r\n                  |               |               |\r\n                  .               .               .\r\n                  .               .               .\r\n                  |               |               |\r\n                  |      Graceful shutdown        |\r\n                  |               |               |\r\n                  |               |\\ ____________ |\r\n                  |               | DHCPRELEASE  \\|\r\n                  |               |               |\r\n                  |               |        Discards lease\r\n                  |               |               |\r\n                  v               v               v\r\n     Figure 3: Timeline diagram of messages exchanged between DHCP\r\n               client and servers when allocating a new network address\r\n", "notes": "alignment", "submit_date": "2021-06-22", "submitter_name": "Rub\u00e9n L.M.", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2022-05-30 05:07:27"}, {"errata_id": "6624", "doc-id": "RFC2739", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.3", "orig_text": "2.3.3  CAPURI Property IANA Registration\r\n\r\n   To: ietf-mime-directory@imc.org\r\n\r\n   Subject: Registration of CAPURI type for application/directory MIME\r\n   type vCard profile.\r\n\r\n   Type name: CAPURI\r\n\r\n   Type purpose: To specify a protocol independent location from which a\r\n   calendaring and scheduling client (i.e., CUA) can communicate with a\r\n   user's entire calendar.\r\n\r\n   Type encoding: 8bit\r\n\r\n   Type value: A single URI value.\r\n\r\n   Type special notes: Where multiple CAPURI properties are specified,\r\n   the default CAPURI property is indicated with the PREF parameter.\r\n\r\n   Intended usage: Refer to section 1.3.", "correct_text": "2.3.3  CAPURI Property IANA Registration\r\n\r\n   To: ietf-mime-directory@imc.org\r\n\r\n   Subject: Registration of CAPURI type for application/directory MIME\r\n   type vCard profile.\r\n\r\n   Type name: CAPURI\r\n\r\n   Type purpose: To specify a protocol independent location from which a\r\n   calendaring and scheduling client (i.e., CUA) can communicate with a\r\n   user's entire calendar.\r\n\r\n   Type encoding: 8bit\r\n\r\n   Type value: A single URI value.\r\n\r\n   Type special notes: Where multiple CAPURI properties are specified,\r\n   the default CAPURI property is indicated with the PREF parameter.\r\n\r\n   Intended usage: Refer to section 1.2.", "notes": "Usage Reference Section was incorrect", "submit_date": "2021-06-30", "submitter_name": "Prakhar Makhija", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-07-06 21:40:04"}, {"errata_id": "6630", "doc-id": "RFC8919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Section 4.2:\r\nOLD\r\n\r\nIf the SABM or UDABM Length in the Application Identifier Bit Mask\r\nis greater than 8, the entire sub-TLV MUST be ignored.\r\n\r\n(Later in Section 4.2)\r\nOLD\r\n\r\nIf link attributes are advertised associated with zero-length\r\nApplication Identifier Bit Masks for both standard applications and\r\nuser-defined applications, then any standard application and/or any\r\nuser-defined application is permitted to use that set of link\r\nattributes so long as there is not another set of attributes\r\nadvertised on that same link that is associated with a non-zero-length\r\nApplication Identifier Bit Mask with a matching Application Identifier\r\nBit set.\r\n\r\nSection 6.2\r\nOLD\r\n\r\nLink attribute advertisements associated with zero-length Application\r\nIdentifier Bit Masks for both standard applications and user-defined\r\napplications are usable by any application, subject to the\r\nrestrictions specified in Section 4.2. If support for a new\r\napplication is introduced on any node in a network in the presence\r\nof such advertisements, these advertisements are permitted to\r\nbe used by the new application. If this is not what is intended,\r\nthen existing advertisements MUST be readvertised with an explicit\r\nset of applications specified before a new application is introduced.\r\n", "correct_text": "Section 4.2\r\nNEW\r\n\r\nIf the SABM or UDABM Length in the Application Identifier Bit Mask\r\nis greater than 8, the entire sub-TLV MUST be ignored.\r\n\r\nWhen SABM or UDABM Length is non-zero and the L-flag is NOT set, all\r\napplications specified in the bit mask MUST use the link attribute\r\nadvertisements in the sub-TLV.\r\n\r\n(Later in Section 4.2)\r\nNEW\r\n\r\nLink attributes MAY be advertised associated with zero-length\r\nApplication Identifier Bit Masks for both standard applications and\r\nuser-defined applications. Such link attribute advertisements MUST be\r\nused by standard applications and/or user defined applications when\r\nno link attribute advertisements with a non-zero-length Application\r\nIdentifier Bit Mask and a matching Application Identifier Bit set are\r\npresent for a given link. Otherwise, such link attribute advertisements\r\nMUST NOT be used.\r\n\r\nSection 6.2\r\nNEW\r\n\r\nLink attributes MAY be advertised associated with zero-length\r\nApplication Identifier Bit Masks for both standard applications and\r\nuser-defined applications. Such link attribute advertisements MUST be\r\nused by standard applications and/or user defined applications when\r\nno link attribute advertisements with a non-zero-length Application\r\nIdentifier Bit Mask and a matching Application Identifier Bit set are\r\npresent for a given link. Otherwise, such link attribute advertisements\r\nMUST NOT be used.", "notes": "RFC 8919 defines advertising link attributes with zero\r\nlength Standard Application Bit Mask (SABM) and zero length User\r\nDefined ApplicationBit Mask (UDABM) as a means of advertising link\r\nattributes that can be used by any application. However, the text uses\r\nthe word \"permitted\", suggesting that the use of such advertisements\r\nis \"optional\". Such an interpretation could lead to interoperability\r\nissues and is not what was intended.\r\n\r\nThe replacement text below makes explicit the specific conditions when\r\nsuch advertisements MUST be used and the specific conditions under\r\nwhich they MUST NOT be used.\n --VERIFIER NOTES-- \nIt would be more appropriate to pursue this as an update or bis RFC, see discussion at https://mailarchive.ietf.org/arch/msg/lsr/_15rAwElfpGLDRxqjUuUJHiGdrQ/", "submit_date": "2021-07-05", "submitter_name": "Les Ginsberg", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-05-14 00:58:08"}, {"errata_id": "6620", "doc-id": "RFC8910", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   A captive portal MAY do content negotiation (Section 3.4 of\r\n   [RFC7231]) and attempt to redirect clients querying without an\r\n   explicit indication of support for the captive portal API content\r\n   type (i.e., without application/capport+json listed explicitly\r\n   anywhere within an Accept header field as described in Section 5.3 of\r\n   [RFC7231]).  In so doing, the captive portal SHOULD redirect the\r\n   client to the value associated with the \"user-portal-url\" API key.\r\n   When performing such content negotiation (Section 3.4 of [RFC7231]),\r\n   implementors of captive portals need to keep in mind that such\r\n   responses might be cached, and therefore SHOULD include an\r\n   appropriate Vary header field (Section 7.1.4 of [RFC7231]) or set the\r\n   Cache-Control header field in any responses to \"private\" or a more\r\n   restrictive value such as \"no-store\" (Section 5.2.2.3 of [RFC7234]).", "correct_text": "   A captive portal MAY do content negotiation (Section 3.4 of\r\n   [RFC7231]) and attempt to redirect clients querying without an\r\n   explicit indication of support for the captive portal API content\r\n   type (i.e., without application/captive+json listed explicitly\r\n   anywhere within an Accept header field as described in Section 5.3 of\r\n   [RFC7231]).  In so doing, the captive portal SHOULD redirect the\r\n   client to the value associated with the \"user-portal-url\" API key.\r\n   When performing such content negotiation (Section 3.4 of [RFC7231]),\r\n   implementors of captive portals need to keep in mind that such\r\n   responses might be cached, and therefore SHOULD include an\r\n   appropriate Vary header field (Section 7.1.4 of [RFC7231]) or set the\r\n   Cache-Control header field in any responses to \"private\" or a more\r\n   restrictive value such as \"no-store\" (Section 5.2.2.3 of [RFC7234]).", "notes": "In RFC8908 the relevant Content-Type is defined as \"application/captive+json\" and not \"application/capport+json\".", "submit_date": "2021-06-23", "submitter_name": "Vittorio Gambaletta (VittGam)", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-06-24 06:32:09"}, {"errata_id": "6621", "doc-id": "RFC4255", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   The RDATA of the presentation format of the SSHFP resource record\r\n   consists of two numbers (algorithm and fingerprint type) followed by\r\n   the fingerprint itself, presented in hex, e.g.:\r\n\r\n       host.example.  SSHFP 2 1 123456789abcdef67890123456789abcdef67890\r\n\r\n   The use of mnemonics instead of numbers is not allowed.", "correct_text": "   The RDATA of the presentation format of the SSHFP resource record\r\n   consists of two numbers (algorithm and fingerprint type) followed by\r\n   the fingerprint itself, presented in hex, e.g.:\r\n\r\n       host.example.  SSHFP 2 1 123456789abcdef67890123456789abcdef67890\r\n\r\n   The use of mnemonics instead of numbers is not allowed. Whitespace is\r\n   allowed within the hexadecimal text.", "notes": "Many (most?) other DNS RFC's, for example RFC 4034, explicitly mention that whitespace is allowed in such encoded fields, whether hex or base64. RFC 4255 does not address this, so can be interpreted either way. For consistency and ease of implementation, I recommend allowing whitespace.\r\n\r\nMy proposed corrected text was copied verbatim from RFC 4034, and could possibly be edited to match the RFC 4255 text better, for example using \"hex\" instead of \"hexadecimal text\".", "submit_date": "2021-06-25", "submitter_name": "Shane Kerr", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-07-19 01:47:17"}, {"errata_id": "6622", "doc-id": "RFC7519", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "11", "orig_text": "All the security considerations in the JWS specification also apply\r\n   to JWT, as do the JWE security considerations when encryption is\r\n   employed.  In particular, Sections <a href=\"#section-10.12\">10.12</a>", "correct_text": "All the security considerations in the JWS specification also apply\r\n   to JWT, as do the JWE security considerations when encryption is\r\n   employed.  In particular, Sections <a href=\"/doc/html/rfc7515#section-10.12\">10.12</a>", "notes": "The link appears to be broken. It is intended to point to rfc7515#section-10.12 whereas it is pointing to the non-existent section of the same document.\n --VERIFIER NOTES-- \nThe \"text\" publication format (the only official format for RFCs prior to 8650) does not include HTML links, so the \"original text\" section of this report does not match the version of the RFC that this tool is used for.  Accordingly, the submission has to be rejected as invalid.", "submit_date": "2021-06-25", "submitter_name": "Padmanarayanan SR", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-07-04 00:54:53"}, {"errata_id": "7307", "doc-id": "RFC8259", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "      null  = %x6e.75.6c.6c      ; null ", "correct_text": "      null  = %x6e.75.6c.6c      ; null without quotation marks for numeric attributes and \"null\" for string attributes.", "notes": "It is not clear how to encode null values in JSON.\r\nSome are encoding all attributes as \"null\".\r\nSome are encoding all attributes as null without quotation marks\r\nSome are encoding string attributes as \"null\" and numeric attributes as null without quotation marks.\r\nhttps://json.org is mentioning \"null\". ECMA 262  is mentioning \"null\" for string and +0F for numeric attributes. However providing zero for a number instead of null is incorrect and provides wrong results (in BI).\n --VERIFIER NOTES-- \nThe original specification is clear as such, and this errata would make a change that breaks the format, and is against the original intent of the text.", "submit_date": "2023-01-13", "submitter_name": "Maxim Iurie", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-01-18 09:39:22"}, {"errata_id": "6637", "doc-id": "RFC3501", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9", "orig_text": "envelope        = \"(\" env-date SP env-subject SP env-from SP\r\n                  env-sender SP env-reply-to SP env-to SP env-cc SP\r\n                  env-bcc SP env-in-reply-to SP env-message-id \")\"", "correct_text": "envelope        = \"(\" env-date SP env-subject SP env-from SP\r\n                  env-sender SP env-reply-to SP env-to SP env-cc SP\r\n                  env-bcc SP env-in-reply-to SP env-message-id SP \r\n                  env-references \")\"", "notes": "Section 2.3.5 says:\r\n\r\n    A parsed representation of the [RFC-2822] header of the message.\r\n    Note that the IMAP Envelope structure is not the same as an\r\n    [SMTP] envelope.\r\n\r\nAlthought RFC-2822 is obsolete by RFC-5322 now, both says that the envelope should inlcude a \"References:\" header-field but the definition of the envelope in section 9 of RFC-3501 (see the part in \"Original Text\" above) doesn't include the \"references\" field.", "submit_date": "2021-07-10", "submitter_name": "TornaxO7", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:39:52"}, {"errata_id": "6625", "doc-id": "RFC2739", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.4", "orig_text": "2.3.4 CALURI Property IANA Registration\r\n\r\n   To: ietf-mime-directory@imc.org\r\n\r\n   Subject: Registration of CALURI type for text/directory MIME type\r\n   vCard profile.\r\n\r\n   Type name: CALURI\r\n\r\n   Type purpose: To specify the URI for a user's calendar in a vCard\r\n   object.\r\n\r\n   Type encoding: 8bit\r\n\r\n   Type value type: A single URI value.\r\n\r\n   Type special notes: Where multiple CALURI properties are specified,\r\n   the default CALURI property is indicated with the PREF parameter. The\r\n   property should contain a URI pointing to an iCalendar object\r\n   associated with a snapshot of the user's calendar store. If the\r\n   iCalendar object is represented as a file or document, it's file type\r\n   should be \"ics\".\r\n\r\n   Intended usage: Refer to section 1.4.\r\n\r\n   Type examples:\r\n\r\n      CALURI;PREF:http://cal.host1.com/calA\r\n      CALURI:ftp://ftp.host1.com/calA.ics", "correct_text": "2.3.4 CALURI Property IANA Registration\r\n\r\n   To: ietf-mime-directory@imc.org\r\n\r\n   Subject: Registration of CALURI type for text/directory MIME type\r\n   vCard profile.\r\n\r\n   Type name: CALURI\r\n\r\n   Type purpose: To specify the URI for a user's calendar in a vCard\r\n   object.\r\n\r\n   Type encoding: 8bit\r\n\r\n   Type value type: A single URI value.\r\n\r\n   Type special notes: Where multiple CALURI properties are specified,\r\n   the default CALURI property is indicated with the PREF parameter. The\r\n   property should contain a URI pointing to an iCalendar object\r\n   associated with a snapshot of the user's calendar store. If the\r\n   iCalendar object is represented as a file or document, it's file type\r\n   should be \"ics\".\r\n\r\n   Intended usage: Refer to section 1.3.\r\n\r\n   Type examples:\r\n\r\n      CALURI;PREF:http://cal.host1.com/calA\r\n      CALURI:ftp://ftp.host1.com/calA.ics", "notes": "Usage Reference Section was incorrect", "submit_date": "2021-06-30", "submitter_name": "Prakhar Makhija", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-07-06 22:12:13"}, {"errata_id": "6626", "doc-id": "RFC2739", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.2", "orig_text": "2.3.2  CALADRURI Property IANA Registration\r\n\r\n   To: ietf-mime-directory@imc.org\r\n\r\n   Subject: Registration of CALADRURI type for application/directory\r\n   MIME type vCard profile.\r\n\r\n   Type name: CALADRURI\r\n\r\n   Type purpose: To specify the location to which an event request\r\n   should be sent for the user.\r\n\r\n   Type encoding: 8bit\r\n\r\n   Type value: A single URI value.\r\n\r\n   Type special notes: Where multiple CALADRURI properties are\r\n   specified, the default CALADRURI property is indicated with the PREF\r\n   parameter.\r\n\r\n   Intended usage: Refer to section 1.2.\r\n\r\n   Type examples:\r\n\r\n      CALADRURI;PREF:mailto:janedoe@host.com\r\n\r\n", "correct_text": "2.3.2  CALADRURI Property IANA Registration\r\n\r\n   To: ietf-mime-directory@imc.org\r\n\r\n   Subject: Registration of CALADRURI type for application/directory\r\n   MIME type vCard profile.\r\n\r\n   Type name: CALADRURI\r\n\r\n   Type purpose: To specify the location to which an event request\r\n   should be sent for the user.\r\n\r\n   Type encoding: 8bit\r\n\r\n   Type value: A single URI value.\r\n\r\n   Type special notes: Where multiple CALADRURI properties are\r\n   specified, the default CALADRURI property is indicated with the PREF\r\n   parameter.\r\n\r\n   Type examples:\r\n\r\n      CALADRURI;PREF:mailto:janedoe@host.com\r\n\r\n", "notes": "Usage Reference Section was wrong\r\n\r\nSection 1 (Calendaring and Scheduling URIs) does not define CALADRURI\r\n\r\nUsage type example is already mentioned in Section 2.3.2", "submit_date": "2021-06-30", "submitter_name": "Prakhar Makhija", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-07-06 22:21:50"}, {"errata_id": "6647", "doc-id": "RFC5424", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.2.1", "orig_text": "4             security/authorization messages\r\n10            security/authorization messages\r\n", "correct_text": "4             security/authorization messages (note 1)\r\n10            security/authorization messages (note 1)\r\n\r\nNote 1 - Various operating systems have been found to utilize\r\n         facilities 4 and 10 for security/authorization\r\n         messages which seem to be similar.\r\n", "notes": "Not including the note (adapted from the one in RFC3164) causes errata like the one with ID 4967 to be erroneously reported.", "submit_date": "2021-07-23", "submitter_name": "Anonymous User", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6648", "doc-id": "RFC8995", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   Use of TLS 1.3 (or newer) is encouraged.  TLS 1.2 or newer is\r\n   REQUIRED on the pledge side.  TLS 1.3 (or newer) SHOULD be available\r\n   on the registrar server interface, and the registrar client\r\n   interface, but TLS 1.2 MAY be used.  TLS 1.3 (or newer) SHOULD be\r\n   available on the MASA server interface, but TLS 1.2 MAY be used.\r\n\r\n", "correct_text": "Use of TLS 1.3 (or newer) is encouraged.  TLS 1.2 or newer is\r\nREQUIRED on the pledge side.  TLS 1.3 (or newer) SHOULD be available\r\non the registrar server interface, and the registrar client\r\ninterface, but TLS 1.2 MAY be used.  When TLS 1.3 is used the use of\r\nServer Name Indicator (SNI, [RFC6066]) is not required, per RFC8446 \r\nsection 9.2, this specification is an application profile specification.\r\n\r\nA pledge connects to the Registrar using only an IP address and it will \r\nnot have any idea of a correct SNI value. \r\nThis also implies that the Registrar interface may not be virtual \\\r\nhosted using SNI.\r\n\r\n\r\n", "notes": "Another errata says that SNI is mandatory on MASA interface, and the distinction between the two is subtle.\r\n\r\nAD Note: See the following thread - https://mailarchive.ietf.org/arch/msg/anima/4S-KwyJucJEsENG0VqtgkIcCSfE/", "submit_date": "2021-07-27", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-01-28 22:20:21"}, {"errata_id": "7311", "doc-id": "RFC8040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "              +-------------------------+------------------+\r\n              | error-tag               | status code      |\r\n              +-------------------------+------------------+\r\n(...)\r\n              | unknown-attribute       | 400              |\r\n              |                         |                  |\r\n              | bad-element             | 400              |\r\n(...)", "correct_text": "              +-------------------------+------------------+\r\n              | error-tag               | status code      |\r\n              +-------------------------+------------------+\r\n(...)\r\n              | unknown-attribute       | 400              |\r\n              |                         |                  |\r\n              | missing-element         | 400              |\r\n              |                         |                  |\r\n              | bad-element             | 400              |\r\n(...)", "notes": "Add missing-element to the table Mapping from <error-tag> to Status Code\r\nin Section 7.\r\n\r\nThe NETCONF error-tag missing-element is not listed in the table mapping\r\nerror-tag to HTTP status code. This seems to be a mistake since all other\r\nerror-tags are listed (even the obsolete partial-operation which should not\r\nbe used according to RFC 6241).", "submit_date": "2023-01-18", "submitter_name": "Per Andersson", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 17:42:50"}, {"errata_id": "6627", "doc-id": "RFC8231", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.4", "orig_text": "  <request>::= <RP>\r\n                      <END-POINTS>\r\n                      [<LSP>]\r\n                      [<LSPA>]\r\n                      [<BANDWIDTH>]\r\n                      [<metric-list>]\r\n                      [<RRO>[<BANDWIDTH>]]\r\n                      [<IRO>]\r\n                      [<LOAD-BALANCING>]", "correct_text": "  <request>::= <RP>\r\n                      <END-POINTS>\r\n                      [<LSP>]\r\n                      [<CLASSTYPE>]\r\n                      [<LSPA>]\r\n                      [<BANDWIDTH>]\r\n                      [<metric-list>]\r\n                      [<RRO>[<BANDWIDTH>]]\r\n                      [<IRO>]\r\n                      [<LOAD-BALANCING>]", "notes": "RFC 5455 defines the CLASSTYPE object and specifies that the CLASSTYPE object MUST\r\n   be inserted after the END-POINT objects. RFC 8231 defines the LSP object and specifies that  the LSP object MUST be inserted after the END-POINTS object. Hence, it is not clear if CLASSTYPE or LSP goes after END-POINTS. Hence, to disambiguate and avoid interoperability issues, the proposal is to include the CLASSTYPE object in the updated grammar. The order would be <END-POINTS>[<LSP>][<CLASSTYPE>]\n --VERIFIER NOTES-- \nSee also the mail thread at https://mailarchive.ietf.org/arch/msg/pce/UmqIZSDtRqe7yC5v0wHU64mrGuI/ for more discussion and detail.\r\n\r\nIn https://mailarchive.ietf.org/arch/msg/pce/VUM5GymISrBiPgoUEVH8IkaM3tU/, the AD at the time (Adrian) rejected erratum 3672, which is similar to this one in that it complains about ambiguous ordering and asks for a fix. Adrian ends his rejection comment with \r\n\r\n\u201cIn rejecting this Errata report I note that the reported error is not a typo,\r\nbut a deliberate decision of the authors and working group. The fix, therefore,\r\nif it is to be applied needs to be achieved through a consensus document.\u201d\r\n\r\nAFAICT this reasoning applies equally in the current case. Actually, it applies even more so, because the WG was offered draft-cmfg-pce-pcep-grammar-02 and didn\u2019t do anything with it, which implies no consensus was demonstrated to go forward with a solution to the identified problem. \r\n\r\nTherefore, I'm also rejecting this erratum. The right way forward is for the WG to take on this problem.", "submit_date": "2021-07-01", "submitter_name": "Oscar Gonzalez de Dios", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2021-10-06 16:49:44"}, {"errata_id": "6629", "doc-id": "RFC8932", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.1.", "orig_text": "One example would be to replace all TCP/UDP port\r\nnumbers with one of two fixed values indicating whether the\r\noriginal port was ephemeral (>=1024) or nonephemeral (>1024).", "correct_text": "One example would be to replace all TCP/UDP port\r\nnumbers with one of two fixed values indicating whether the\r\noriginal port was ephemeral (>=1024) or nonephemeral (<1024).", "notes": "Nonephemeral port numbers are <1024\r\n\r\n--- Verifier note ---\r\nThe errata is indeed a real typo. As it is in appendix, \"held for document update\" was selected.", "submit_date": "2021-07-05", "submitter_name": "Joeri de Ruiter", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-07-05 13:11:18"}, {"errata_id": "6755", "doc-id": "RFC8912", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3.5", "orig_text": "5.3.5.  Runtime Parameters and Data Format\r\n\r\n   Src:  The IP address of the host in the Src Role (format\r\n      ipv4-address-no-zone value for IPv4 or ipv6-address-no-zone value\r\n      for IPv6; see Section 4 of [RFC6991]).\r\n", "correct_text": "5.3.5.  Runtime Parameters and Data Format\r\n\r\n   Runtime Parameters are input factors that must be determined,\r\n   configured into the measurement system, and reported with the results\r\n   for the context to be complete.\r\n\r\n   Src:  The IP address of the host in the Src Role (format\r\n      ipv4-address-no-zone value for IPv4 or ipv6-address-no-zone value\r\n      for IPv6; see Section 4 of [RFC6991]).\r\n", "notes": "Skipped paragraph.\r\n\r\n=======\r\n01/24/22: RFC Editor changed type to technical and asked the TSV ADs to review - nope this is editorial; this explanatory paragraph is in all the counterpart sections, but just missed here.", "submit_date": "2021-11-27", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-05-13 21:31:24"}, {"errata_id": "6756", "doc-id": "RFC4226", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.3", "orig_text": "Let OffsetBits be the low-order 4 bits of String[19]", "correct_text": "Let OffsetBits be the low-order 4 bits of the last byte of String", "notes": "This change does not affect the computation for 20-byte HMAC-SHA-1 digests.  However when using the HMAC-SHA-256 or HMAC-SHA-512 functions as suggested in RFC-6238, the 19th byte and the last byte may differ.\r\n\r\nThe proposed change matches the reference implementations of both RFC-4226 and RFC-6238 and removes potential ambiguity as to whether implementations should use the 19th byte or the last byte of the digest to determine the offset for dynamic truncation.", "submit_date": "2021-11-28", "submitter_name": "Nicholas Gaya", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6757", "doc-id": "RFC8536", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "B.3", "orig_text": "   | 064    | 00 00 00 03  | isutccnt         | 1                      |\r\n   | 068    | 00 00 00 03  | isstdcnt         | 1                      |\r\n   | 072    | 00 00 00 00  | isleapcnt        | 0                      |\r\n   | 076    | 00 00 00 03  | timecnt          | 1                      |\r\n   | 080    | 00 00 00 03  | typecnt          | 1                      |\r\n   | 084    | 00 00 00 08  | charcnt          | 4                      |\r\n", "correct_text": "   | 064    | 00 00 00 01  | isutccnt         | 1                      |\r\n   | 068    | 00 00 00 01  | isstdcnt         | 1                      |\r\n   | 072    | 00 00 00 00  | isleapcnt        | 0                      |\r\n   | 076    | 00 00 00 01  | timecnt          | 1                      |\r\n   | 080    | 00 00 00 01  | typecnt          | 1                      |\r\n   | 084    | 00 00 00 04  | charcnt          | 4                      |\r\n", "notes": "The numbers 1 and 4 are incorrectly encoded as big-endian 32-bit integer values. I'm guessing that the example originally used more data and was then trimmed down (from 3 to 1 for isutccnt, isstdcnt, timecnt, and typecnt, and from 8 to 4 for charcnt) but the integer encodings were never updated.\r\n===\r\nVerifier's notes: The errata is correct, but incomplete, as there are several errors in these tables. An update to the document implementing the fix is being worked on.", "submit_date": "2021-11-28", "submitter_name": "Carl Gay", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-05-02 09:36:00"}, {"errata_id": "6739", "doc-id": "RFC8792", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1.2", "orig_text": "Exceptionally long lines MAY be folded multiple times.", "correct_text": "Exceptionally long lines MAY be folded multiple times.", "notes": "The \"MAY\" in this text lacks a bcp14 XML tag. This is apparent in the non-text renderings.\r\n\r\n--VERIFIER NOTES--\r\nThis also applies to section 8.1.2", "submit_date": "2021-11-18", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-11-19 02:38:55"}, {"errata_id": "6631", "doc-id": "RFC8920", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "OLD\r\n\r\nIf link attributes are advertised with zero-length Application\r\nIdentifier Bit Masks for both standard applications and user-defined\r\napplications, then any standard application and/or any user-defined\r\napplication is permitted to use that set of link attributes. If\r\nsupport for a new application is introduced on any node in a network\r\nin the presence of such advertisements, these advertisements are\r\npermitted to be used by the new application. If this is not what is\r\nintended, then existing advertisements MUST be readvertised with an\r\nexplicit set of applications specified before a new application is\r\nintroduced.\r\n\r\nAn application-specific advertisement (Application Identifier Bit Mask\r\nwith a matching Application Identifier Bit set) for an attribute MUST\r\nalways be preferred over the advertisement of the same attribute with\r\nthe zero-length Application Identifier Bit Masks for both standard\r\napplications and user-defined applications on the same link.", "correct_text": "NEW\r\n\r\nLink attributes MAY be advertised associated with zero-length\r\nApplication Identifier Bit Masks for both standard applications\r\nand user-defined applications. Such link attribute advertisements\r\nMUST be used by standard applications and/or user defined applications\r\nwhen no link attribute advertisements with a non-zero-length\r\nApplication Identifier Bit Mask and a matching Application Identifier\r\nBit set are present for a given link. Otherwise, such link attribute\r\nadvertisements MUST NOT be used.", "notes": "RFC 8920 defines advertising link attributes with zero\r\nlength Standard Application Bit Mask (SABM) and zero length User\r\nDefined ApplicationBit Mask (UDABM) as a means of advertising link\r\nattributes that can be used by any application. However, the text uses\r\nthe word \"permitted\", suggesting that the use of such advertisements\r\nis \"optional\". Such an interpretation could lead to interoperability\r\nissues and is not what was intended.\r\n\r\nThe replacement text below makes explicit the specific conditions when\r\nsuch advertisements MUST be used and the specific conditions under\r\nwhich they MUST NOT be used.\n --VERIFIER NOTES-- \n It would be more appropriate to pursue this as an update or bis RFC. See discussion at https://mailarchive.ietf.org/arch/msg/lsr/Ux9x1Zz9R8p7aZ_7iu1jjU-88E0/\r\nand https://mailarchive.ietf.org/arch/msg/lsr/_15rAwElfpGLDRxqjUuUJHiGdrQ/", "submit_date": "2021-07-05", "submitter_name": "Les Ginsberg", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-05-14 01:00:01"}, {"errata_id": "6633", "doc-id": "RFC7804", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "   This is a simple example of a SCRAM-SHA-256 authentication exchange\r\n   (no support for channel bindings, as this feature is not currently\r\n   supported by HTTP).  Username 'user' and password 'pencil' are used.\r\n   Note that long lines are folded for readability.\r\n\r\n   C: GET /resource HTTP/1.1\r\n   C: Host: server.example.com\r\n   C: [...]\r\n\r\n   S: HTTP/1.1 401 Unauthorized\r\n   S: WWW-Authenticate: Digest realm=\"realm1@example.com\",\r\n          Digest realm=\"realm2@example.com\",\r\n          Digest realm=\"realm3@example.com\",\r\n          SCRAM-SHA-256 realm=\"realm3@example.com\",\r\n          SCRAM-SHA-256 realm=\"testrealm@example.com\"\r\n   S: [...]\r\n\r\n   C: GET /resource HTTP/1.1\r\n   C: Host: server.example.com\r\n   C: Authorization: SCRAM-SHA-256 realm=\"testrealm@example.com\",\r\n          data=biwsbj11c2VyLHI9ck9wck5HZndFYmVSV2diTkVrcU8K\r\n   C: [...]\r\n\r\n   S: HTTP/1.1 401 Unauthorized\r\n   S: WWW-Authenticate: SCRAM-SHA-256\r\n           sid=AAAABBBBCCCCDDDD,\r\n           data=cj1yT3ByTkdmd0ViZVJXZ2JORWtxTyVodllEcFdVYTJSYVRDQWZ1eEZJ\r\n              bGopaE5sRixzPVcyMlphSjBTTlk3c29Fc1VFamI2Z1E9PSxpPTQwOTYK\r\n   S: [...]\r\n\r\n   C: GET /resource HTTP/1.1\r\n   C: Host: server.example.com\r\n   C: Authorization: SCRAM-SHA-256 sid=AAAABBBBCCCCDDDD,\r\n          data=Yz1iaXdzLHI9ck9wck5HZndFYmVSV2diTkVrcU8laHZZRHBXVWEyUmFUQ\r\n             0FmdXhGSWxqKWhObEYscD1kSHpiWmFwV0lrNGpVaE4rVXRlOXl0YWc5empm\r\n             TUhnc3FtbWl6N0FuZFZRPQo=\r\n   C: [...]\r\n\r\n   S: HTTP/1.1 200 Ok\r\n   S: Authentication-Info: sid=AAAABBBBCCCCDDDD,\r\n          data=dj02cnJpVFJCaTIzV3BSUi93dHVwK21NaFVaVW4vZEI1bkxUSlJzamw5N\r\n             Uc0PQo=\r\n   S: [...Other header fields and resource body...]\r\n\r\n\r\n   In the above example, the first client request contains a \"data\"\r\n   attribute that base64 decodes as follows:\r\n\r\n      n,,n=user,r=rOprNGfwEbeRWgbNEkqO\r\n\r\n   The server then responds with a \"data\" attribute that base64 decodes\r\n   as follows:\r\n\r\n      r=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF,s=W22ZaJ0SNY7soE\r\n      sUEjb6gQ==,i=4096\r\n\r\n   The next client request contains a \"data\" attribute that base64\r\n   decodes as follows:\r\n\r\n      c=biws,r=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF,p=dHzbZap\r\n      WIk4jUhN+Ute9ytag9zjfMHgsqmmiz7AndVQ=\r\n\r\n   The final server response contains a \"data\" attribute that base64\r\n   decodes as follows:\r\n\r\n      v=6rriTRBi23WpRR/wtup+mMhUZUn/dB5nLTJRsjl95G4=", "correct_text": "   This is a simple example of a SCRAM-SHA-256 authentication exchange\r\n   (no support for channel bindings, as this feature is not currently\r\n   supported by HTTP).  Username 'user' and password 'pencil' are used.\r\n   Note that long lines are folded for readability.\r\n\r\n   C: GET /resource HTTP/1.1\r\n   C: Host: server.example.com\r\n   C: [...]\r\n\r\n   S: HTTP/1.1 401 Unauthorized\r\n   S: WWW-Authenticate: Digest realm=\"realm1@example.com\",\r\n          Digest realm=\"realm2@example.com\",\r\n          Digest realm=\"realm3@example.com\",\r\n          SCRAM-SHA-256 realm=\"realm3@example.com\",\r\n          SCRAM-SHA-256 realm=\"testrealm@example.com\"\r\n   S: [...]\r\n\r\n   C: GET /resource HTTP/1.1\r\n   C: Host: server.example.com\r\n   C: Authorization: SCRAM-SHA-256 realm=\"testrealm@example.com\",\r\n          data=biwsbj11c2VyLHI9ck9wck5HZndFYmVSV2diTkVrcU8=\r\n   C: [...]\r\n\r\n   S: HTTP/1.1 401 Unauthorized\r\n   S: WWW-Authenticate: SCRAM-SHA-256\r\n           sid=AAAABBBBCCCCDDDD,\r\n           data=cj1yT3ByTkdmd0ViZVJXZ2JORWtxTyVodllEcFdVYTJSYVRDQWZ1eEZJ\r\n              bGopaE5sRixzPVcyMlphSjBTTlk3c29Fc1VFamI2Z1E9PSxpPTQwOTY=\r\n   S: [...]\r\n\r\n   C: GET /resource HTTP/1.1\r\n   C: Host: server.example.com\r\n   C: Authorization: SCRAM-SHA-256 sid=AAAABBBBCCCCDDDD,\r\n          data=Yz1iaXdzLHI9ck9wck5HZndFYmVSV2diTkVrcU8laHZZRHBXVWEyUmFUQ\r\n             0FmdXhGSWxqKWhObEYscD1kSHpiWmFwV0lrNGpVaE4rVXRlOXl0YWc5empm\r\n             TUhnc3FtbWl6N0FuZFZRPQo=\r\n   C: [...]\r\n\r\n   S: HTTP/1.1 200 Ok\r\n   S: Authentication-Info: sid=AAAABBBBCCCCDDDD,\r\n          data=dj02cnJpVFJCaTIzV3BSUi93dHVwK21NaFVaVW4vZEI1bkxUSlJzamw5N\r\n             Uc0PQo=\r\n   S: [...Other header fields and resource body...]\r\n\r\n\r\n   In the above example, the first client request contains a \"data\"\r\n   attribute that base64 decodes as follows:\r\n\r\n      n,,n=user,r=rOprNGfwEbeRWgbNEkqO\r\n\r\n   The server then responds with a \"data\" attribute that base64 decodes\r\n   as follows:\r\n\r\n      r=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF,s=W22ZaJ0SNY7soE\r\n      sUEjb6gQ==,i=4096\r\n\r\n   The next client request contains a \"data\" attribute that base64\r\n   decodes as follows:\r\n\r\n      c=biws,r=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF,p=dHzbZap\r\n      WIk4jUhN+Ute9ytag9zjfMHgsqmmiz7AndVQ=\r\n\r\n   The final server response contains a \"data\" attribute that base64\r\n   decodes as follows:\r\n\r\n      v=6rriTRBi23WpRR/wtup+mMhUZUn/dB5nLTJRsjl95G4=", "notes": "The original base64 encoded values of the client first message and server first message are wrong.\r\nNotice that these values end in K. These values base64 decode to strings that end in new line characters.\r\n\r\nThe original base64 encoded values of the client final message and server final message are correct.\r\nNotice that these values end in =. These values base64 decode to string that do not end in new line characters.\r\n\r\nIt appears that during the base64 encoding of the client first message and server first message, the newline characters were accidentally included.\r\nThe correct base64 encoding is as follows:\r\n\r\nn,,n=user,r=rOprNGfwEbeRWgbNEkqO base64 encodes to biwsbj11c2VyLHI9ck9wck5HZndFYmVSV2diTkVrcU8=\r\n\r\nr=rOprNGfwEbeRWgbNEkqO%hvYDpWUa2RaTCAfuxFIlj)hNlF,s=W22ZaJ0SNY7soEsUEjb6gQ==,i=4096 base64 encodes to cj1yT3ByTkdmd0ViZVJXZ2JORWtxTyVodllEcFdVYTJSYVRDQWZ1eEZJbGopaE5sRixzPVcyMlphSjBTTlk3c29Fc1VFamI2Z1E9PSxpPTQwOTY=", "submit_date": "2021-07-09", "submitter_name": "Ben Hollberg", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6636", "doc-id": "RFC3501", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "   IMAP4rev1 includes operations for creating, deleting, and renaming\r\n   mailboxes, checking for new messages, permanently removing messages,\r\n   setting and clearing flags, RFC 2822 and RFC 2045 parsing, searching,\r\n   and selective fetching of message attributes, texts, and portions\r\n   thereof.", "correct_text": "   IMAP4rev1 includes operations for creating, deleting, and renaming\r\n   mailboxes, checking for new messages, permanently removing messages,\r\n   setting and clearing flags, RFC 5322 and RFC 2045 parsing, searching,\r\n   and selective fetching of message attributes, texts, and portions\r\n   thereof.", "notes": "RFC-3501 still refers to RFC-2822 which is obsoleted by RFC-5322. **One** example can be seen in the \"Original text\" section.\n --VERIFIER NOTES-- \n  Errata reports are for issues that were errors at the time of publication.  RFC 5322 was published after RFC 3501, so RFC 2822 was the correct reference when RFC 3501 was published.", "submit_date": "2021-07-10", "submitter_name": "TornaxO7", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-07-21 00:59:52"}, {"errata_id": "6635", "doc-id": "RFC4301", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "Note that ESP can be used to provide only integrity, without\r\nconfidentiality, making it comparable to AH in most contexts.", "correct_text": "Note that ESP can be used to provide both integrity and\r\nconfidentiality.", "notes": "The original sentence contradicts the following one in the same section:\r\n\r\no The Encapsulating Security Payload (ESP) protocol [Ken05a] offers\r\n    the same set of services, and also offers confidentiality.\n --VERIFIER NOTES-- \n   The original text is conveying the intended sentiment, namely that: despite primarily being a mechanism to provide both confidentiality and integrity protection, ESP can also be configured in a mode that only provides integrity protection and not confidentiality protection.  Such a mode is essentially directly analogous to what AH provides, and thus this statement supports the downgrading of AH support to only a MAY-level requirement.", "submit_date": "2021-07-09", "submitter_name": "Isaac Lewis", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-07-21 00:33:22"}, {"errata_id": "7312", "doc-id": "RFC8519", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   The \"example-newco-acl\" module is an example of a company's\r\n   proprietary model that augments the \"ietf-acl\" module.  It shows how\r\n   to use 'augment' with an XML Path Language (XPath) expression to add\r\n   additional match criteria, actions, and default actions for when no\r\n   ACE matches are found.  All these are company proprietary extensions\r\n   or system feature extensions.  \"example-newco-acl\" is just an\r\n   example, and it is expected that vendors will create their own\r\n   proprietary models.", "correct_text": "   The \"example-newco-acl\" module is an example of a company's\r\n   proprietary model that augments the \"ietf-access-control-list\" module.  It shows how\r\n   to use 'augment' with an XML Path Language (XPath) expression to add\r\n   additional match criteria, actions, and default actions for when no\r\n   ACE matches are found.  All these are company proprietary extensions\r\n   or system feature extensions.  \"example-newco-acl\" is just an\r\n   example, and it is expected that vendors will create their own\r\n   proprietary models.", "notes": "There is no \"ietf-acl\" module in the document.", "submit_date": "2023-01-18", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:26:49"}, {"errata_id": "8745", "doc-id": "RFC9420", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "13.4", "orig_text": "   *  A client adding a new member to a group MUST verify that the\r\n      LeafNode for the new member is compatible with the group's\r\n      extensions.  The capabilities field MUST indicate support for each\r\n      extension in the GroupContext.\r\n", "correct_text": "   *  A client adding a new member to a group MUST verify that the\r\n      LeafNode for the new member is compatible with the group's\r\n      extensions.  The capabilities field MUST indicate support for each\r\n      extension in the GroupContext.\r\n\r\n   *  A client updating a leaf node in the group MUST verify that the\r\n      new LeafNode is compatible with the group's extensions.  The\r\n      capabilities field MUST indicate support for each extension in the\r\n      GroupContext. This applies both to Update proposals and LeafNode\r\n      objects in the update_path in a Commit.", "notes": "The RFC says on the topic of validating LeafNode capabilities:\r\n\r\n> Note that the latter two requirements mean that all\r\n> MLS GroupContext extensions are mandatory, in the\r\n> sense that an extension in use by the group MUST be\r\n> supported by all members of the group.\r\n> --- https://www.rfc-editor.org/rfc/rfc9420.html#section-13.4-6\r\n\r\nTo that end, it requires that we check that the LeafNodes in KeyPackages\r\nthat are added support all extensions in the group context. However, it\r\ndoesn't seem to require that the same check is performed for LeafNodes in\r\nUpdate proposals or update paths.\r\n\r\nAlso see this thread on the mailing list: https://mailarchive.ietf.org/arch/msg/mls/k18P4FP7dfS2cBmP0kL6Uh50-ok/", "submit_date": "2026-02-05", "submitter_name": "Jan Winkelmann", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6640", "doc-id": "RFC6396", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "      |   BGP Path Attributes =\r\n\r\n              40 01 01 00 50 02 00 0e 02 03 00 00 fb f0 00 00\r\n              fb ff 00 00 fb f6 80 0e 2b 00 02 01 20 20 01 0d\r\n              b8 00 0d 00 ff 00 00 00 00 00 00 01 87 fe 80 00\r\n              00 00 00 00 00 02 12 f2 ff fe 9f 1b 00 00 00 20\r\n              20 01 0d b8\r\n\r\n                  Figure 19: MRT RIB_IPV6_UNICAST Example\r\n\r\n   The contents of the BGP Path Attribute field above are as follows:\r\n\r\n   ORIGIN: IGP\r\n   ASPATH: 64496 64511 64502\r\n   MP_REACH_NLRI(IPv6 Unicast)\r\n   NEXT_HOP: 2001:db8:d:ff::187\r\n   NEXT_HOP: fe80::212:f2ff:fe9f:1b00\r\n   NLRI: 2001:0DB8::/32\r\n\r\n                  Figure 20: BGP Path Attribute Contents\r\n", "correct_text": "      |   BGP Path Attributes =\r\n\r\n              40 01 01 00 50 02 00 0e 02 03 00 00 fb f0 00 00\r\n              fb ff 00 00 fb f6 80 0e 21 20 20 01 0d b8 00 0d\r\n              00 ff 00 00 00 00 00 00 01 87 fe 80 00 00 00 00\r\n              00 00 02 12 f2 ff fe 9f 1b 00\r\n\r\n                  Figure 19: MRT RIB_IPV6_UNICAST Example\r\n\r\n   The contents of the BGP Path Attribute field above are as follows:\r\n\r\n   ORIGIN: IGP\r\n   ASPATH: 64496 64511 64502\r\n   MP_REACH_NLRI(IPv6 Unicast)\r\n   NEXT_HOP: 2001:db8:d:ff::187\r\n   NEXT_HOP: fe80::212:f2ff:fe9f:1b00\r\n\r\n                  Figure 20: BGP Path Attribute Contents\r\n", "notes": "The encoding of the MP_REACH_NLRI attribute is not in the form according to Section 4.3.4.  RIB Entries:\r\n\r\n   There is one exception to the encoding of BGP attributes for the BGP\r\n   MP_REACH_NLRI attribute (BGP Type Code 14) [RFC4760].  Since the AFI,\r\n   SAFI, and NLRI information is already encoded in the RIB Entry Header\r\n   or RIB_GENERIC Entry Header, only the Next Hop Address Length and\r\n   Next Hop Address fields are included.  The Reserved field is omitted.\r\n   The attribute length is also adjusted to reflect only the length of\r\n   the Next Hop Address Length and Next Hop Address fields.\r\n\r\nThe example includes a full MP_REACH_NLRI attribute. This is a common issue with TABLE_DUMP_V2 and parsers need to implement a workaround to support the broken form.\r\n\r\nOne way of solving this is to compare the attribute length of MP_REACH_NLRI with the first byte of the attribute.\r\nIf the value of the first byte is equal to the attribute lenght - 1 then it is the RFC encoding else assume that a full MP_REACH_NLRI attribute was dumped in which case the parser needs to skip the first 3 bytes to get to the nexthop.", "submit_date": "2021-07-13", "submitter_name": "Claudio Jeker", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-07-16 20:46:23"}, {"errata_id": "6639", "doc-id": "RFC5322", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   zone            =   (FWS ( \"+\" / \"-\" ) 4DIGIT) / obs-zone", "correct_text": "   zone            =   (FWS ( \"+\" / \"-\" ) 4DIGIT) / [FWS] obs-zone", "notes": "The current syntax does not allow space before an obs-zone. Thus, it rejects header items like:\r\n\r\nDate: Mon, 12 Jul 2021 18:32:01 GMT\r\n\r\nwhich are still being produced today by, for example, mail(1) on FreeBSD.", "submit_date": "2021-07-12", "submitter_name": "Brennan Vincent", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-05-15 08:59:01"}, {"errata_id": "6641", "doc-id": "RFC7667", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "Media Translators, Mesh with independent RTP Sessions, mixers, SFUs,", "correct_text": "Media Translators, Mesh with independent RTP Sessions, mixers, SFMs,", "notes": "The document defines and uses the term \"Selective Forwarding Middlebox\" instead of \"Selective Forwarding Unit\".", "submit_date": "2021-07-13", "submitter_name": "Philipp Hancke", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-07 09:06:44"}, {"errata_id": "6642", "doc-id": "RFC8995", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.4", "orig_text": "Use of TLS 1.3 (or newer) is encouraged.  TLS 1.2 or newer is \r\nREQUIRED.  TLS 1.3 (or newer) SHOULD be available.", "correct_text": "TLS 1.2 [RFC5246] with SNI support [RFC6066] is REQUIRED if \r\nTLS 1.3 is not available.\r\nThe Server Name Indicator (SNI) is required when the Registrar \r\ncommunicates with the MASA in order for the MASA to be hosted in \r\na modern multi-tenant TLS infrastructure.\r\n\r\n", "notes": "https://mailarchive.ietf.org/arch/msg/anima/bqrZXAk7vstWQ3V1-irIATnBKpY/\r\nThis adds new references to the text.", "submit_date": "2021-07-14", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 09:04:36"}, {"errata_id": "6643", "doc-id": "RFC6956", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "The FE model [RFC5812] has specified predefined (built-in) atomic data types: char, uchar, int16, uint16, int32, uint32, int64, uint64, string[N], string, byte[N], boolean, octetstring[N], float16, float32, and float64.", "correct_text": "The FE model [RFC5812] has specified predefined (built-in) atomic data types: char, uchar, int16, uint16, int32, uint32, int64, uint64, string[N], string, byte[N], boolean, octetstring[N], float32, and float64.", "notes": "According to RFC5812, floating data types can only be float32 or float64.", "submit_date": "2021-07-17", "submitter_name": "Argyrios Georgiou", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-08-12 19:23:00"}, {"errata_id": "6645", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "23.3", "orig_text": "Content-Disposition: attachment; filename=smime.p7m\r\n           handling=required", "correct_text": "Content-Disposition: attachment; filename=smime.p7m;\r\n           handling=required", "notes": "The example for Content-Disposition header is incorrectly formatted according to the BNF.\r\nIt is missing a semicolon between each disp-param.\r\n(Relevant section of BNF posted below)\r\n\r\nContent-Disposition   =  \"Content-Disposition\" HCOLON\r\n                         disp-type *( SEMI disp-param )\r\ndisp-type             =  \"render\" / \"session\" / \"icon\" / \"alert\"\r\n                         / disp-extension-token\r\ndisp-param            =  handling-param / generic-param\r\nhandling-param        =  \"handling\" EQUAL\r\n                         ( \"optional\" / \"required\"\r\n                         / other-handling )\r\nother-handling        =  token\r\ndisp-extension-token  =  token\r\n\r\nThis also occurs in 23.4.3", "submit_date": "2021-07-20", "submitter_name": "Matt Hertogs", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:33:06"}, {"errata_id": "6646", "doc-id": "RFC8366", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   {\r\n     \"ietf-voucher:voucher\": {\r\n       \"created-on\": \"2016-10-07T19:31:42Z\",\r\n       \"expires-on\": \"2016-10-21T19:31:42Z\",\r\n       \"assertion\": \"verified\",\r\n       \"serial-number\": \"JADA123456789\",\r\n       \"idevid-issuer\": \"base64encodedvalue==\",\r\n       \"pinned-domain-cert\": \"base64encodedvalue==\",\r\n       \"domain-cert-revocation-checks\": \"true\",\r\n       \"last-renewal-date\": \"2017-10-07T19:31:42Z\"\r\n     }\r\n   }", "correct_text": "   {\r\n     \"ietf-voucher:voucher\": {\r\n       \"created-on\": \"2016-10-07T19:31:42Z\",\r\n       \"expires-on\": \"2016-10-21T19:31:42Z\",\r\n       \"assertion\": \"verified\",\r\n       \"serial-number\": \"JADA123456789\",\r\n       \"idevid-issuer\": \"base64encodedvalue==\",\r\n       \"pinned-domain-cert\": \"base64encodedvalue==\",\r\n       \"domain-cert-revocation-checks\": true,\r\n       \"last-renewal-date\": \"2017-10-07T19:31:42Z\"\r\n     }\r\n   }", "notes": "domain-cert-revocation-checks is defined as boolean in the YANG specification in section 5.3 of the same RFC 8366. Boolean value in JSON are represented using true/false without the quotes.", "submit_date": "2021-07-22", "submitter_name": "Aman Mangal", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 12:04:36"}, {"errata_id": "7565", "doc-id": "RFC8555", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": " The \"Thumbprint\" step indicates the computation specified in\r\n   [RFC7638], using the SHA-256 digest [FIPS180-4].  As noted in\r\n   [RFC7518] any prepended zero octets in the fields of a JWK object\r\n   MUST be stripped before doing the computation.", "correct_text": "The \"Thumbprint\" step indicates the computation specified in\r\n   [RFC7638], using the SHA-256 digest [FIPS180-4].  As noted in\r\n   [RFC7518] any additional prepended zero octets in the fields of a JWK object\r\n   MUST be stripped before doing the computation.  \r\n   Fixed length fields such as found in ECDSA keys should be their natural length and \r\n   leading zero octets should not be stripped.", "notes": "This comment was really aimed at the leading 0 octet sometimes used with RSA, but the comment is not RSA specific. ECDSA keys can have fixed length fields (X,Y) where there can be leading zeros.  This led me astray in implementing an ECDSA thumbprint routine for ACME. The result was that 1/128 ECDSA keys failed to generate t humbp[rint as leading zeros were removed.", "submit_date": "2023-07-13", "submitter_name": "Paul Breed", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-11 18:49:44"}, {"errata_id": "6649", "doc-id": "RFC8995", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.5.4.", "orig_text": "Even when a domain CA is authenticated to the MASA, and there is\r\nstrong sales channel integration to understand who the legitimate\r\nowner is, the above id-kp-cmcRA check prevents arbitrary end-entity\r\ncertificates (such as an LDevID certificate) from having vouchers\r\nissued against them.\r\n", "correct_text": "Even when a domain CA is authenticated to the MASA, and there is\r\nstrong sales channel integration to understand who the legitimate\r\nowner is, the above id-kp-cmcRA check prevents arbitrary end-entity\r\ncertificates (such as an LDevID certificate) from having vouchers\r\nissued against them.\r\n\r\nadd:\r\nThe id-kp-cmcRA is an Extended Key Usage (EKU) attribute.\r\nWhen any EKU attribute it set, then the certificate MUST have all \r\nrelated attributes set.  \r\nThis means that the Registrar certificate MUST also have the \r\nid-kp-clientAuth (for use with the MASA) and the id-kp-serverAuth \r\n(for use with the Pledge) set.\r\n", "notes": "https://mailarchive.ietf.org/arch/msg/anima/H6Xs_f3rQAh9acOEFXEYuoZZGls/", "submit_date": "2021-07-27", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 10:16:18"}, {"errata_id": "6654", "doc-id": "RFC7401", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.3.3", "orig_text": "   If present in the I1 packet, the Initiator MUST include an unmodified\r\n   copy of the R1_COUNTER parameter received in the corresponding R1\r\n   packet into the I2 packet.\r\n", "correct_text": "   If present in the R1 packet, the Initiator MUST include an unmodified\r\n   copy of the R1_COUNTER parameter received in the corresponding R1\r\n   packet into the I2 packet.\r\n", "notes": "Packet name error, must be R1", "submit_date": "2021-08-04", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-08-05 08:55:39"}, {"errata_id": "6652", "doc-id": "RFC20", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "      2 The use of the symbols in 2/2, 2/7, 2/12, 5/14, /6/0, and 7/14", "correct_text": "      2 The use of the symbols in 2/2, 2/7, 2/12, 5/14, 6/0, and 7/14", "notes": "Unnecessary slash.", "submit_date": "2021-07-31", "submitter_name": "Ivan Panchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-08-04 21:07:51"}, {"errata_id": "6653", "doc-id": "RFC7401", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "   | TRANSPORT_FORMAT_LIST  | 2049  | Ordered   | variable             |\r\n   |                        |       | list of   |                      |\r\n   |                        |       | preferred |                      |\r\n   |                        |       | HIP       |                      |\r\n   |                        |       | transport |                      |\r\n   |                        |       | type      |                      |\r\n   |                        |       | numbers   |                      |\r\n   |                        |       |           |                      |\r\n\r\n", "correct_text": "   | TRANSPORT_FORMAT_LIST  | 2049  |  variable | Ordered              |\r\n   |                        |       |           | list of              |\r\n   |                        |       |           | preferred            |\r\n   |                        |       |           | HIP                  |\r\n   |                        |       |           | transport            |\r\n   |                        |       |           | type                 |\r\n   |                        |       |           | numbers              |\r\n   |                        |       |           |                      |", "notes": "The values in the columns are swapped.\r\n\r\n--- Verifier note ---\r\nThe erratum has been verified by Tom Henderson (co-author) https://mailarchive.ietf.org/arch/msg/hipsec/aJSEhRNShc3vXcbtlbd8V39Bfow/\r\n\r\nAs it does not prevent implementation, the erratum status is \"help for document update\"", "submit_date": "2021-08-03", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2021-08-05 07:00:03"}, {"errata_id": "6655", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.6.1.1", "orig_text": "   leaf flags {\r\n       type bits {\r\n         bit UP;\r\n         bit PROMISCUOUS\r\n         bit DISABLED;\r\n       }\r\n      }", "correct_text": "   leaf flags {\r\n       type bits {\r\n         bit UP;\r\n         bit PROMISCUOUS;\r\n         bit DISABLED;\r\n       }\r\n      }", "notes": "The missing semicolon makes the YANG snippet invalid.", "submit_date": "2021-08-06", "submitter_name": "Viktor Leijon", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2021-10-12 13:58:05"}, {"errata_id": "6656", "doc-id": "RFC8588", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "Protected Header\r\n   {\r\n      \"alg\":\"ES256\",\r\n      \"typ\":\"passport\",\r\n      \"ppt\":\"shaken\",\r\n      \"x5u\":\"https://cert.example.org/passport.cer\"\r\n   }\r\n   Payload\r\n   {\r\n      \"attest\":\"A\"\r\n      \"dest\":{\"tn\":[\"12155550131\"]}\r\n      \"iat\":\"1443208345\",\r\n      \"orig\":{\"tn\":\"12155550121\"},\r\n      \"origid\":\"123e4567-e89b-12d3-a456-426655440000\"\r\n   }", "correct_text": "Protected Header\r\n   {\r\n      \"alg\":\"ES256\",\r\n      \"typ\":\"passport\",\r\n      \"ppt\":\"shaken\",\r\n      \"x5u\":\"https://cert.example.org/passport.cer\"\r\n   }\r\n   Payload\r\n   {\r\n      \"attest\":\"A\"\r\n      \"dest\":{\"tn\":[\"12155550131\"]}\r\n      \"iat\":1443208345,\r\n      \"orig\":{\"tn\":\"12155550121\"},\r\n      \"origid\":\"123e4567-e89b-12d3-a456-426655440000\"\r\n   }", "notes": "As per RFC8225 (5.1.1), 'iat' is a NumericDate format, which is a number (commonly referred to as a utime). Section 9.4 also specifies that anything that is numeric must be encoded as a number.", "submit_date": "2021-08-10", "submitter_name": "Rob Thomas", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 20:25:50"}, {"errata_id": "6658", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Status", "orig_text": "This document specifies an Internet Best Current Practices", "correct_text": "This document specifies an Internet Best Current Practice", "notes": "\u201cPractices\u201d should be singular.", "submit_date": "2021-08-15", "submitter_name": "Jason Yundt", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:00:38"}, {"errata_id": "6659", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "   The procedures described in this document are the result of a number\r\n   of years of evolution, driven both by the needs of the growing and\r\n   increasingly diverse Internet community, and by experience.", "correct_text": "   The procedures described in this document are the result of a number\r\n   of years of evolution, driven both by the needs of the growing and\r\n   increasingly diverse Internet community and by experience.", "notes": "The list contains 2 items:\r\n\r\n\u2022  \u201cby the needs of the growing and increasingly diverse Internet community\u201d\r\n\u2022  \u201cby experience\u201d\r\n\r\nSince the list contains 2 items, there shouldn\u2019t be a comma before the word \u201cand\u201d.", "submit_date": "2021-08-15", "submitter_name": "Jason Yundt", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:02:45"}, {"errata_id": "6661", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "In the case\r\nof a meeting, for example, the announcement shall include an agenda\r\nthat specifies the standards- related issues that will be discussed.", "correct_text": "In the case\r\nof a meeting, for example, the announcement shall include an agenda\r\nthat specifies the standards-related issues that will be discussed.", "notes": "Either the hyphen or the space could be removed. I removed the space since the next sentence says \u201cstandards-related\u201d.", "submit_date": "2021-08-16", "submitter_name": "Jason Yundt", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-08-18 20:21:04"}, {"errata_id": "6663", "doc-id": "RFC7009", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "The client constructs the request by including the following\r\n   parameters using the \"application/x-www-form-urlencoded\" format in\r\n   the HTTP request entity-body:\r\n\r\n   token   REQUIRED.  The token that the client wants to get revoked.\r\n\r\n   token_type_hint  OPTIONAL.  A hint about the type of the token\r\n           submitted for revocation.  Clients MAY pass this parameter in\r\n           order to help the authorization server to optimize the token\r\n           lookup.  If the server is unable to locate the token using\r\n           the given hint, it MUST extend its search across all of its\r\n           supported token types.  An authorization server MAY ignore\r\n           this parameter, particularly if it is able to detect the\r\n           token type automatically.  This specification defines two\r\n           such values:\r\n\r\n           * access_token: An access token as defined in [RFC6749],\r\n             Section 1.4\r\n\r\n           * refresh_token: A refresh token as defined in [RFC6749],\r\n             Section 1.5\r\n\r\n           Specific implementations, profiles, and extensions of this\r\n           specification MAY define other values for this parameter\r\n           using the registry defined in Section 4.1.2.\r\n\r\n   The client also includes its authentication credentials as described\r\n   in Section 2.3. of [RFC6749].\r\n\r\n   For example, a client may request the revocation of a refresh token\r\n   with the following request:\r\n\r\n     POST /revoke HTTP/1.1\r\n     Host: server.example.com\r\n     Content-Type: application/x-www-form-urlencoded\r\n     Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW\r\n\r\n     token=45ghiukldjahdnhzdauz&token_type_hint=refresh_token\r\n\r\n   The authorization server first validates the client credentials (in\r\n   case of a confidential client) and then verifies whether the token\r\n   was issued to the client making the revocation request.  If this\r\n   validation fails, the request is refused and the client is informed\r\n   of the error by the authorization server as described below.", "correct_text": "The client calls the revocation endpoint using an HTTP\r\n   POST [RFC7231] request with the following parameters sent as\r\n   \"application/x-www-form-urlencoded\" data in the request body:\r\n\r\n   token   REQUIRED.  The token that the client wants to get revoked.\r\n\r\n   token_type_hint  OPTIONAL.  A hint about the type of the token\r\n           submitted for revocation.  Clients MAY pass this parameter in\r\n           order to help the authorization server to optimize the token\r\n           lookup.  If the server is unable to locate the token using\r\n           the given hint, it MUST extend its search across all of its\r\n           supported token types.  An authorization server MAY ignore\r\n           this parameter, particularly if it is able to detect the\r\n           token type automatically.  This specification defines two\r\n           such values:\r\n\r\n           * access_token: An access token as defined in [RFC6749],\r\n             Section 1.4\r\n\r\n           * refresh_token: A refresh token as defined in [RFC6749],\r\n             Section 1.5\r\n\r\n           Specific implementations, profiles, and extensions of this\r\n           specification MAY define other values for this parameter\r\n           using the registry defined in Section 4.1.2.\r\n\r\n   The client MUST also include in the request, the access token it received \r\n   from the authorization server. It must do so in the same way as it  would  \r\n   when accessing a protected resource, as describe in [RFC6749], Section 7.\r\n\r\n   The following is a non-normative example request in which the client uses \r\n   its access token to revoke the associated refresh token:\r\n\r\n     POST /revoke HTTP/1.1\r\n     Host: server.example.com\r\n     Content-Type: application/x-www-form-urlencoded\r\n     Authorization: Bearer czZCaGRSa3F0MzpnWDFmQmF0M2JW\r\n\r\n     token=45ghiukldjahdnhzdauz&token_type_hint=refresh_token\r\n\r\n   The following is a non-normative example request in which the client uses \r\n   its access token to revoke the same access token:\r\n\r\n     POST /revoke HTTP/1.1\r\n     Host: server.example.com\r\n     Content-Type: application/x-www-form-urlencoded\r\n     Authorization: Bearer czZCaGRSa3F0MzpnWDFmQmF0M2JW\r\n\r\n     token=czZCaGRSa3F0MzpnWDFmQmF0M2JW&token_type_hint=access_token\r\n\r\n   The authorization server MUST validate the access token used by the        \r\n   client to authorize its call to the revocation endpoint, including \r\n   ensuring that it is not expired or revoked. \r\n   Additionally, the authorization server MUST also validate whether the\r\n   access token used for authorization is part of the same grant  as the \r\n   token being revoked. If validation fails, the request is  refused and \r\n   the client is informed of the error by the authorization server. \r\n   In the case of a bearer token, the authorization server SHOULD respond  \r\n   with an HTTP 401 code as described in OAuth 2.0 Bearer Token Usage \r\n   [RFC6750], Section 3. \r\n   Errors based on other types of tokens are beyond the scope of this \r\n   specification.\r\n    ", "notes": "It appears as though the authors of RFC7009 have failed to consider that requests to revoke are likely to come from non-confidential clients and such, would lack authentication credentials. Regardless of the type of client however, authentication should not be required. The OAuth 2.0 specification (RFC6749) does not specify verifying that the access token belongs to the client accessing protected resources, of which revocation is one. It is the role of the access token alone to signify authorization required to make requests to protected resources. If this is an issue for revocation, then it is an issue for all protected resources and counter measures may be proposed in a separate RFC rather than broadening the scope of this particular RFC. As per the original text itself, \"This specification in general does not intend to provide countermeasures against token theft and abuse.\" Additionally, \"If an attacker is able to successfully guess a public client's client_id and one of their tokens, or a private client's credentials and one of their tokens, they could do much worse damage by using the token elsewhere than by revoking it.  If they chose to revoke the token, the legitimate client will lose its authorization grant and will need to prompt the user again.  No further damage is done and the guessed token is now worthless.\"\r\nNote that the client_id is not meant to be private information to begin with, so relying on an attacker \"guessing\" it should not be seen as a security countermeasure. This section of RFC7009 will be referenced in a subsequent errata.", "submit_date": "2021-08-22", "submitter_name": "Ashvin Narayanan", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6664", "doc-id": "RFC7020", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "In cases where LIRs span multiple regions, those LIRs have established relationships with multiple RIRs. ", "correct_text": "In cases where LIRs span multiple regions, those LIRs have often established relationships with multiple RIRs.\r\n\r\nAlternatetively:\r\n\r\nIn cases where LIRs span multiple regions, those LIRs often have established relationships with multiple RIRs.", "notes": "The statement about LIRs in multiple regions using multiple RIRs is remains likely for many instances but not universally - particularly given the inter-RIR transfer policies adopted since RFC7020's initial publication.", "submit_date": "2021-08-23", "submitter_name": "John Currran", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2021-08-24 22:21:49"}, {"errata_id": "6665", "doc-id": "RFC4122", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "static unsigned16 true_random(void);\r\n\r\n/* uuid_create -- generator a UUID */\r\nint uuid_create(uuid_t *uuid)\r\n{\r\n     uuid_time_t timestamp, last_time;", "correct_text": "static unsigned16 true_random(void);\r\n\r\n/* uuid_create -- generate a UUID */\r\nint uuid_create(uuid_t *uuid)\r\n{\r\n     uuid_time_t timestamp, last_time;", "notes": "The comment above the declaration of uuid_create() uses \"generate a UUID\", so the comment above the definition is likely intended to be identical.", "submit_date": "2021-08-25", "submitter_name": "Andrzej Koszela", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:56:01"}, {"errata_id": "6666", "doc-id": "RFC9085", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.1", "orig_text": "   Flags:  1-octet value that should be set as:\r\n\r\n      *  IS-IS Prefix-SID flags as defined in Section 2.1.1 of\r\n         [RFC8667].\r\n\r\n      *  OSPFv2 Prefix-SID flags as defined in Section 5 of [RFC8665].\r\n\r\n      *  OSPFv3 Prefix-SID flags as defined in Section 6 of [RFC8665].", "correct_text": "   Flags:  1-octet value that should be set as:\r\n\r\n      *  IS-IS Prefix-SID flags as defined in Section 2.1.1 of\r\n         [RFC8667].\r\n\r\n      *  OSPFv2 Prefix-SID flags as defined in Section 5 of [RFC8665].\r\n\r\n      *  OSPFv3 Prefix-SID flags as defined in Section 6 of [RFC8666].", "notes": "The reference to the OSPFv3 spec in the text above needs to be corrected to RFC8666 instead of RFC8665.\r\n\r\nThis editorial error seems to have crept in during the RFC publication process. The draft version submitted by the WG and reviewed by the IESG has the correct text : https://datatracker.ietf.org/doc/html/draft-ietf-idr-bgp-ls-segment-routing-ext-18#section-2.3.1", "submit_date": "2021-08-27", "submitter_name": "Ketan Talaulikar", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-09-03 20:17:11"}, {"errata_id": "6667", "doc-id": "RFC7296", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   the different groups.  For example, to propose ESP with (3DES or\r\n   AES-CBC) and (HMAC_MD5 or HMAC_SHA), the ESP proposal would contain\r\n   two Transform Type 1 candidates (one for 3DES and one for AEC-CBC)\r\n   and two Transform Type 3 candidates (one for HMAC_MD5 and one for\r\n   HMAC_SHA).", "correct_text": "   the different groups.  For example, to propose ESP with (3DES or\r\n   AES-CBC) and (HMAC_MD5 or HMAC_SHA), the ESP proposal would contain\r\n   two Transform Type 1 candidates (one for 3DES and one for AES-CBC)\r\n   and two Transform Type 3 candidates (one for HMAC_MD5 and one for\r\n   HMAC_SHA).", "notes": "\"AES\" is misspelled as \"AEC\".", "submit_date": "2021-08-30", "submitter_name": "Qingyuan Gu", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-09-01 15:43:59"}, {"errata_id": "6550", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.5.2", "orig_text": "        for (i = 0; i < NSTAGE; i++) {\r\n                p->disp += f[i].disp / (2 ^ (i + 1));\r\n                p->jitter += SQUARE(f[i].offset - f[0].offset);\r\n        }", "correct_text": "        for (i = 0; i < NSTAGE; i++) {\r\n                p->disp += f[i].disp / (1 << (i + 1));\r\n                p->jitter += SQUARE(f[i].offset - f[0].offset);\r\n        }", "notes": "^ is the xor operator in C, not the exponent operator.  2 xor (i+1) will be zero when i == 1, causing a division by zero error.", "submit_date": "2021-04-17", "submitter_name": "Perry Lorier", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-08-29 23:08:00"}, {"errata_id": "6789", "doc-id": "RFC3782", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "If the Cumulative Acknowledgement field didn\u2019t cover more than\r\n\"recover\", check to see if the congestion window is greater than\r\nSMSS bytes and the difference between highest_ack and\r\nprev_highest_ack is at most 4*SMSS bytes. If true, duplicate\r\nACKs indicate a lost segment (proceed to Step 1A in Section 3).\r\nOtherwise, duplicate ACKs likely result from unnecessary\r\nretransmissions (proceed to Step 1B in Section 3).", "correct_text": "If the Cumulative Acknowledgement field didn\u2019t cover more than\r\n\"recover\", check to see if the congestion window is greater than\r\nSMSS bytes and the difference between highest_ack and\r\nprev_highest_ack is at most 3*SMSS bytes. If true, duplicate\r\nACKs indicate a lost segment (proceed to Step 1A in Section 3).\r\nOtherwise, duplicate ACKs likely result from unnecessary\r\nretransmissions (proceed to Step 1B in Section 3).", "notes": "RFC3782 references to Gur03 and GF04 papers as to the initial sources\r\nof the heuristics both ACK-based and Timestamp-based. Neither of those\r\npapers nor Gur03 nor GF04 defines difference between highest_ack and previous_highest_ack\r\nof at least 4*SMSS bytes upon receiving the third duplicate ACK as an indication \r\nof droped retransmitted segment. Instead, section III of GF04 says:\r\n\r\n\"The acknowledgment heuristic is based on an observation that if the \r\nTCP sender unnecessarily retransmits at least three adjacent packets,\r\nthere will be a jump by at least four segments in a cumulative \r\nacknowledgment field. The sender will have correctly retransmitted at least\r\none packet, to advance the cumulative acknowledgment field, and \r\nunnecessarily retransmitted at least three more to result in three duplicate\r\nacknowledgments. Following the advancement of the cumulative acknowledgment\r\nfield, the sender stores the value of the previous cumulative acknowledgment\r\nas prev_highest_ack and stores the latest cumulative acknowledgment as\r\nhighest_ack. Upon receiving the third duplicate acknowledgment,\r\nthe sender invokes a Fast Retransmit if its congestion window is greater\r\nthan one MSS (Maximum Segment Size), and the difference between highest_ack\r\nand prev_highest_ack is at most three MSS.\"\r\n\r\nAccording to GF04 if TCP sender in absence of any droped acknowledgments upon receiving\r\nthe third duplicate ACK has difference between highest_ack and prev_highest ack values \r\nof at most/i.e. no more than 3*SMSS bytes then this is explicite indication of droped retransmitted\r\nsegment and leads TCP sender to invoke Fast Retransmit, but current description of ACK-based\r\nheuristic in RFC3782 section 6.1 in part of: \"if the congestion window is greater than\r\nSMSS bytes and the difference between highest_ack and\r\nprev_highest_ack is at most 4*SMSS bytes. If true, duplicate\r\nACKs indicate a lost segment (proceed to Step 1A in Section 3)\", makes TCP sender to treat\r\ndifference between highest_ack and prev_highest_ack of 4SMSS bytes upon receiving 3rd\r\nduplicate ACK as indication of lost retransmitted segment but again according to GF04 this is NOT so, \r\nand makes TCP sender to invoke Fast Retransmit when in fact those three duplicate acknowledgments \r\nindicate unnecessarily retransmitted segments and have in their acknowledgment fields sequence \r\nnumber which receiver expects to receive next but which sender has NOT sent yet, so Fast Retransmit \r\nhas no point in this case.\n --VERIFIER NOTES-- \n   RFC 3782 has been obsoleted by RFC 6582.", "submit_date": "2021-12-19", "submitter_name": "Clive Bloom", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-05-13 18:27:51"}, {"errata_id": "7402", "doc-id": "RFC4025", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  precedence   | gateway type  |  algorithm  |     gateway     |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-------------+                 +\r\n      ~                            gateway                            ~\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |  precedence   | gateway type  |   algorithm   |    gateway    |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+---------------+               +\r\n      ~                            gateway                            ~\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Section 2.4 does not explicitly specify a length for the algorithm field (unlike section 2.2 does for the precedence field). But using only 7 bits for it after the preceding two fields used 8 bits is quite unexpected. So this seems like a mistake in this diagram. Note that the BIND DNS server already uses 8 bits for the algorithm field.", "submit_date": "2023-03-23", "submitter_name": "Tobias Brunner", "verifier_id": "", "verifier_name": null, "update_date": "2023-08-02 16:49:24"}, {"errata_id": "6551", "doc-id": "RFC8552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "RFC 8552                      DNS AttrLeaf                    March 2019\r\n\r\n\r\n4.  IANA Considerations\r\n\r\n   IANA has established the \"Underscored and Globally Scoped DNS Node\r\n   Names\" registry.  This section describes the registry, the\r\n   definitions, the initial entries, the use of_ta and _example, and the\r\n   use of [RFC8126] as guidance for expert review.  IANA has also\r\n   updated the \"Enumservices Registrations\" registry with a pointer to\r\n   this document.", "correct_text": "RFC 8552                      DNS AttrLeaf                    March 2019\r\n\r\n\r\n4.  IANA Considerations\r\n\r\n   IANA has established the \"Underscored and Globally Scoped DNS Node\r\n   Names\" registry.  This section describes the registry, the\r\n   definitions, the initial entries, the use of _ta and _example, and the\r\n   use of [RFC8126] as guidance for expert review.  IANA has also\r\n   updated the \"Enumservices Registrations\" registry with a pointer to\r\n   this document.", "notes": "\"the use of_ta and _example\" is missing a single whitespace before `_ta`, corrected it should read:\r\n\r\n\"the use of _ta and _example\"", "submit_date": "2021-04-19", "submitter_name": "Jason Mills", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-04-19 21:14:22"}, {"errata_id": "6669", "doc-id": "RFC2026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.3.1", "orig_text": "l. Some works[\u2026]", "correct_text": "1. Some works[\u2026]", "notes": "This was the only item in the list that used a letter and not a number.", "submit_date": "2021-08-31", "submitter_name": "Jason Yundt", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-27 23:01:39"}, {"errata_id": "6670", "doc-id": "RFC5480", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "   If the keyUsage extension is present in a certificate that indicates\r\n   id-ecDH or id-ecMQV in SubjectPublicKeyInfo, then the following\r\n   values MUST NOT be present:\r\n\r\n     digitalSignature;\r\n     nonRepudiation;\r\n     keyTransport;\r\n     keyCertSign; and\r\n     cRLSign.", "correct_text": "   If the keyUsage extension is present in a certificate that indicates\r\n   id-ecDH or id-ecMQV in SubjectPublicKeyInfo, then the following\r\n   values MUST NOT be present:\r\n\r\n     digitalSignature;\r\n     nonRepudiation;\r\n     keyEncipherment;\r\n     keyCertSign; and\r\n     cRLSign.", "notes": "\"keyTransport\" KU bit name does not exist; I believe \"keyEncipherment\" is intended here instead.\r\n\r\nWhile RFC 8813 makes it clear that \"keyEncipherment\" and \"dataEncipherment\" are prohibited, I'm marking this erratum as \"Technical\" due the reference to a non-existent bit name.", "submit_date": "2021-08-31", "submitter_name": "Corey Bonnell", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-09-01 16:42:42"}, {"errata_id": "7313", "doc-id": "RFC8519", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   The following figure is the tree diagram of example-newco-acl.  In\r\n   this example, /ietf-acl:acls/ietf-acl:acl/ietf-acl:aces/ietf-acl:ace/\r\n   ietf-acl:matches are augmented with two new choices: protocol-\r\n   payload-choice and metadata.  The protocol-payload-choice uses a\r\n   grouping with an enumeration of all supported protocol values.\r\n   Metadata matches apply to fields associated with the packet, that are\r\n   not in the packet header, such as overall packet length.  In another\r\n   example, /ietf-acl:acls/ietf-acl:acl/ietf-acl:aces/ietf-acl:ace/\r\n   ietf-acl:actions are augmented with a new choice of actions.", "correct_text": "   The following figure is the tree diagram of example-newco-acl.  In\r\n   this example, /acl:acls/acl:acl/acl:aces/acl:ace/acl:matches\r\n   are augmented with two new choices: protocol-payload-choice and\r\n   metadata.  The protocol-payload-choice uses a\r\n   grouping with an enumeration of all supported protocol values.\r\n   Metadata matches apply to fields associated with the packet, that are\r\n   not in the packet header, such as overall packet length.  In another\r\n   example, /acl:acls/acl:acl/acl:aces/acl:ace/acl:actions \r\n   are augmented with a new choice of actions.", "notes": "The prefix is \"acl\" not \"ietf-acl\"\r\n\r\n==\r\nmodule ietf-access-control-list {\r\n  yang-version 1.1;\r\n  namespace \"urn:ietf:params:xml:ns:yang:ietf-access-control-list\";\r\n  prefix acl;\r\n  ...\r\n==", "submit_date": "2023-01-18", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:28:11"}, {"errata_id": "6915", "doc-id": "RFC2865", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5", "orig_text": "      The Value field is zero or more octets and contains information\r\n      specific to the Attribute.", "correct_text": "      The Value field is one or more octets and contains information\r\n      specific to the Attribute.", "notes": "Section \"5. Attributes\" is ambiguous when it talks about the attribute value size:\r\n\r\nFirst it says: \"The Value field is zero or more octets\", then it provides 5 possible value data types none of which allows a zero length value. For 'text' type it says: \"Text of length zero (0) MUST NOT be sent; omit the entire attribute instead\" and the same for 'string' type.\r\n\r\nSection \"5.26. Vendor-Specific\" also says about the value of a vendor-specific attribute \"The String field is one or more octets\".\r\n\r\nThus the RFC allows empty values for attributes in general but prohibits for any declared types of the attributes.", "submit_date": "2022-04-02", "submitter_name": "Oleg Pekar", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-02-09 10:42:18"}, {"errata_id": "6923", "doc-id": "RFC1818", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Discussion", "orig_text": "This document creates a new subseries of RFCs, entitled Best Current Practices BCPs).", "correct_text": "This document creates a new subseries of RFCs, entitled Best Current Practices (BCPs).", "notes": "The opening parentheses was clearly forgotten by accident.", "submit_date": "2022-04-05", "submitter_name": "Robin Geuze", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-05 21:23:05"}, {"errata_id": "6926", "doc-id": "RFC5880", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.8.6", "orig_text": "Set bfd.RemoteState to the value of the State (Sta) field.", "correct_text": "Set bfd.RemoteSessionState to the value of the State (Sta) field.", "notes": "The variable bfd.RemoteState is not defined in section 6.8.1 and is only mentioned once in the entire document. It is likely a typo and a similarly named bfd.RemoteSessionState was meant instead.", "submit_date": "2022-04-06", "submitter_name": "Glebs Ivanovskis", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-07 20:09:47"}, {"errata_id": "6921", "doc-id": "RFC5322", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1", "orig_text": "composed of characters with values in the range of 1 through 127 and interpreted as US-ASCII [ANSI.X3-4.1986] characters.", "correct_text": "composed of ASCII characters [RFC20] with values in the range from 0/1 to 7/15.\r\n\r\n   --OR--\r\n\r\ncomposed of octets with decimal values in the range from 1 through 127 and interpreted as US-ASCII [ANSI.X3-4.1986] characters.", "notes": "See previous erratum about \"US-ASCII\" versus \"ASCII\" or \"RFC20\" and apply as needed to the suggested text.  \r\n\r\nWhile there are several ways to fix the problem being reported here, the \"range of 1 through 127\" has no meaning without some qualification as to what the numbers mean.  One could infer from the original form that the range is interpreted according to something in the standard, but that standard, unlike, e.g., Unicode, never uses a linear sequence of numbers to refer to code points, only the Column/Row notation shown above (plus, of course, the actual seven-bit binary coding).", "submit_date": "2022-04-05", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-05-16 13:27:47"}, {"errata_id": "7566", "doc-id": "RFC9022", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.6.3-1", "orig_text": "When the internalized form (\"int\") is provided", "correct_text": "When the internationalized form (\"int\") is provided", "notes": "I believe the word \"internalized\" should be \"internationalized\", as it is elsewhere in the section when referring to \"int\".", "submit_date": "2023-07-18", "submitter_name": "Daniel McCarron", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-07-19 20:19:26"}, {"errata_id": "6671", "doc-id": "RFC2026", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "13", "orig_text": "   [1]  Postel, J., \"Internet Official Protocol Standards\", STD 1,\r\n        USC/Information Sciences Institute, March 1996.\r\n\r\n   [2]  ANSI, Coded Character Set -- 7-Bit American Standard Code for\r\n        Information Interchange, ANSI X3.4-1986.\r\n\r\n   [3]  Reynolds, J., and J. Postel, \"Assigned Numbers\", STD 2,\r\n        USC/Information Sciences Institute, October 1994.\r\n\r\n   [4]  Postel, J., \"Introduction to the STD Notes\", RFC 1311,\r\n        USC/Information Sciences Institute, March 1992.\r\n\r\n   [5]  Postel, J., \"Instructions to RFC Authors\", RFC 1543,\r\n        USC/Information Sciences Institute, October 1993.\r\n\r\n   [6]  Huitema, C., J. Postel, and S. Crocker \"Not All RFCs are\r\n        Standards\", RFC 1796, April 1995.", "correct_text": "   [1]  Postel, J., \"Internet Official Protocol Standards\", STD 1,\r\n        USC/Information Sciences Institute, March 1996.\r\n\r\n   [2]  ANSI, Coded Character Set -- 7-Bit American Standard Code for\r\n        Information Interchange, ANSI X3.4-1986.\r\n\r\n   [3]  Postel, J., \"Introduction to the STD Notes\", RFC 1311,\r\n        USC/Information Sciences Institute, March 1992.\r\n\r\n   [4]  Postel, J., \"Instructions to RFC Authors\", RFC 1543,\r\n        USC/Information Sciences Institute, October 1993.\r\n\r\n   [5]  Huitema, C., J. Postel, and S. Crocker \"Not All RFCs are\r\n        Standards\", RFC 1796, April 1995.", "notes": "Reference number 3 is never used. If this change is made, then the inline citations will also have to be updated.", "submit_date": "2021-08-31", "submitter_name": "Jason Yundt", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:03:41"}, {"errata_id": "6672", "doc-id": "RFC3279", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3.5", "orig_text": "If the keyUsage extension is present in a CA or CRL issuer certificate which conveys an elliptic curve public key, any combination of the following values MAY be present:\r\n\r\ndigitalSignature;\r\nnonRepudiation; and\r\nkeyAgreement.\r\n\r\nIf the keyAgreement value is present, either of the following values MAY be present:\r\n\r\nencipherOnly; and\r\ndecipherOnly.\r\n\r\nThe keyUsage extension MUST NOT assert both encipherOnly and decipherOnly.\r\n\r\nIf the keyUsage extension is present in a CA certificate which conveys an elliptic curve public key, any combination of the following values MAY be present:\r\n\r\ndigitalSignature;\r\nnonRepudiation;\r\nkeyAgreement;\r\nkeyCertSign; and\r\ncRLSign.", "correct_text": "If the keyUsage extension is present in an end entity certificate which conveys an elliptic curve public key, any combination of the following values MAY be present:\r\n\r\ndigitalSignature;\r\nnonRepudiation; and\r\nkeyAgreement.\r\n\r\nIf the keyAgreement value is present, either of the following values MAY be present:\r\n\r\nencipherOnly; and\r\ndecipherOnly.\r\n\r\nThe keyUsage extension MUST NOT assert both encipherOnly and decipherOnly.\r\n\r\nIf the keyUsage extension is present in a CA or CRL issuer certificate which conveys an elliptic curve public key, any combination of the following values MAY be present:\r\n\r\ndigitalSignature;\r\nnonRepudiation;\r\nkeyAgreement;\r\nkeyCertSign; and\r\ncRLSign.\r\n", "notes": "- \"a CA or CRL issuer certificate\" is replaced by \"an end entity certificate\"\r\n- \"CA certificate\" is replaced by \"CA or CRL issuer certificate\"\r\n\r\nThe need for this correction can be confirmed from RFC 5480, \"3. Key Usage Bits\".\r\n\r\nCorrected wording has been copied from the section \"2.3.1 RSA Keys\" of this RFC 3279 itself.\r\n\r\nPaul Wouters (AD): As 5480 updates 3279, this errata is resolved ", "submit_date": "2021-09-01", "submitter_name": "Jaime Hablutzel", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-12 20:21:21"}, {"errata_id": "6673", "doc-id": "RFC5378", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "RFC 5378                   RFC 3978-incoming               November 2008", "correct_text": "RFC 5378             Rights Provided to IETF Trust         November 2008", "notes": "This appears at the top of every page. It looks like a placeholder title from a draft of this document made it into the final version.", "submit_date": "2021-09-01", "submitter_name": "Jason Yundt", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-27 23:13:47"}, {"errata_id": "6679", "doc-id": "RFC2328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "        The area border routers RT3, RT4, RT7, RT10 and RT11 condense\r\n        the routing information of their attached non-backbone areas for\r\n        distribution via the backbone; these are the dashed stubs that\r\n        appear in Figure 8.  Remember that the third area has been\r\n        configured to condense Networks N9-N11 and Host H1 into a single\r\n        route.  This yields a single dashed line for networks N9-N11 and\r\n        Host H1 in Figure 8.  Routers RT5 and RT7 are AS boundary\r\n        routers; their externally derived information also appears on\r\n        the graph in Figure 8 as stubs.\r\n\r\n", "correct_text": "        The area border routers RT3, RT4, RT7, RT10 and RT11 condense\r\n        the routing information of their attached non-backbone areas for\r\n        distribution via the backbone; these are the dashed stubs that\r\n        appear in Figure 6.  Remember that the third area has been\r\n        configured to condense Networks N9-N11 and Host H1 into a single\r\n        route.  This yields a single dashed line for networks N9-N11 and\r\n        Host H1 in Figure 8.  Routers RT5 and RT7 are AS boundary\r\n        routers; their externally derived information also appears on\r\n        the graph in Figure 8 as stubs.\r\n\r\n", "notes": "Incorrect figure number (8 instead 6).", "submit_date": "2021-09-07", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-11 17:51:58"}, {"errata_id": "7555", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "Under the auspices of the\r\n   Metre Convention of 1865, in 1975 the CGPM [CGPM] strongly endorsed\r\n   the use of UTC as the basis for civil time.", "correct_text": "Under the auspices of the\r\n   Metre Convention of 1875, in 1975 the CGPM [CGPM] strongly endorsed\r\n   the use of UTC as the basis for civil time.", "notes": "The Metre convention was signed on 20 May 1875 as stated on https://www.bipm.org/en/metre-convention.", "submit_date": "2023-06-28", "submitter_name": "Sylvain Etienne", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-28 21:30:48"}, {"errata_id": "7567", "doc-id": "RFC8878", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1.1.3.1", "orig_text": "3.1.1.3.1.  Literals_Section_Header", "correct_text": "3.1.1.3.1.  Literals_Section", "notes": "Section 3.1.1.3.1 describes the Literals_Section mentioned in and linked from Section 3.1.1.3 Compressed Blocks. However, the section is labeled as Literals_Section_Header resulting in two sections both labeled Literals_Section_Header (sections 3.1.1.3.1 and 3.1.1.3.1.1).", "submit_date": "2023-07-20", "submitter_name": "Jordan Tucker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7574", "doc-id": "RFC7567", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "also the result of synchronization or other timing effects", "correct_text": "also the result of synchronization or other timing effects.", "notes": "Add sentence-ending period.", "submit_date": "2023-07-26", "submitter_name": "Sean Sarfati", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-07-26 20:43:11"}, {"errata_id": "6674", "doc-id": "RFC6376", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "This results in the file rsa.public containing the key information\r\nsimilar to this:\r\n\r\n-----BEGIN PUBLIC KEY-----\r\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDwIRP/UC3SBsEmGqZ9ZJW3/DkM\r\noGeLnQg1fWn7/zYtIxN2SnFCjxOCKG9v3b4jYfcTNh5ijSsq631uBItLa7od+v/R\r\ntdC2UzJ1lWT947qR+Rcac2gbto/NMqJ0fzfVjH4OuKhitdY9tf6mcwGjaNBcWToI\r\nMmPSPDdQPNUYckcQ2QIDAQAB\r\n-----END PUBLIC KEY-----\r\n\r\nThis public-key data (without the BEGIN and END tags) is placed in\r\nthe DNS:\r\n\r\n$ORIGIN _domainkey.example.org.\r\nbrisbane IN  TXT  (\"v=DKIM1; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQ\"\r\n                   \"KBgQDwIRP/UC3SBsEmGqZ9ZJW3/DkMoGeLnQg1fWn7/zYt\"\r\n                   \"IxN2SnFCjxOCKG9v3b4jYfcTNh5ijSsq631uBItLa7od+v\"\r\n                   \"/RtdC2UzJ1lWT947qR+Rcac2gbto/NMqJ0fzfVjH4OuKhi\"\r\n                   \"tdY9tf6mcwGjaNBcWToIMmPSPDdQPNUYckcQ2QIDAQAB\")\r\n", "correct_text": "This results in the file rsa.public containing the key information\r\nsimilar to this (long output lines truncated):\r\n\r\nopenssl asn1parse -i -inform PEM -in rsa.public\r\n    0:d=0  hl=3 l= 159 cons: SEQUENCE          \r\n    3:d=1  hl=2 l=  13 cons:  SEQUENCE          \r\n    5:d=2  hl=2 l=   9 prim:   OBJECT            :rsaEncryption\r\n   16:d=2  hl=2 l=   0 prim:   NULL              \r\n   18:d=1  hl=3 l= 141 prim:  BIT STRING\r\n\r\nopenssl asn1parse -i -inform PEM -in rsa.public -strparse 18\r\n    0:d=0  hl=3 l= 137 cons: SEQUENCE          \r\n    3:d=1  hl=3 l= 129 prim:  INTEGER           :F02113FF502DD206C126\u2026\r\n  135:d=1  hl=2 l=   3 prim:  INTEGER           :010001\r\n\r\nThe result of\r\n\r\nopenssl asn1parse -i -inform PEM -in rsa.public -offset 22 -out /dev/stdout -noout | openssl base64\r\n\r\nis then placed in the DNS:\r\n\r\n$ORIGIN _domainkey.example.org.\r\nbrisbane IN  TXT  (\"v=DKIM1; p=MIGJAoGBAPAhE/9QLdIGwSYapn1klbf8OQ\"\r\n                   \"ygZ4udCDV9afv/Ni0jE3ZKcUKPE4Iob2/dviNh9xM2HmK\"\r\n                   \"NKyrrfW4Ei0truh36/9G10LZTMnWVZP3jupH5FxpzaBu2\"\r\n                   \"j80yonR/N9WMfg64qGK11j21/qZzAaNo0FxZOggyY9I8N\"\r\n                   \"1A81RhyRxDZAgMBAAE=\")\r\n", "notes": "Empirical evidence suggests that MSPs have taken the command lines in\r\nAppendix C literally, and, by doing so, have deviated from the specification\r\nlaid out in Section 3.6.1. for the k= and p= tags.\r\n\r\nSpecifically, the  openssl rsa  command, used with its  -pubout  option\r\nas demonstrated in Appendix C, produces a SubjectPublicKeyInfo-typed result\r\ninstead of a RSAPublicKey-typed one.  It does so for both  DER  and  PEM\r\narguments to the  -outform  option.\r\n\r\nWhat is more, had Section 3.6.1., p= tag, specified a base64-encoded\r\nSubjectPublicKeyInfo-typed value instead of a RSAPublicKey-typed one,\r\nSection 3.6.1., k= tag, could have been dispensed of entirely, since\r\nthe SubjectPublicKeyInfo type contains an AlgorithmIdentifier-typed\r\nattribute for that purpose.\r\n\r\nThat indeed an RSAPublicKey-typed result for the p= tag was intended\r\nby RFC 6376 can be confirmed by comparison with RFC 8463, Section 4.2.,\r\nwhich specifies that a \"raw\" Ed25519 public key be used, instead of\r\na SubjectPublicKeyInfo-typed one such as defined in RFC 8410,\r\nSection 4. Subject Public Key Fields.\r\n\r\nThe Corrected Text uses the same public key data from the Original Text.", "submit_date": "2021-09-01", "submitter_name": "Christian B\u00f6hme", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6675", "doc-id": "RFC5530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "      ALERT                RFC 3501\r\n      BADCHARSET           RFC 3501", "correct_text": "      HASCHILDREN          RFC 3348\r\n      ALERT                RFC 3501\r\n      BADCHARSET           RFC 3501\r\n      CAPABILITY           RFC 3501", "notes": "When RFC 5530 created the IMAP Response Codes registry it registered all response codes that existed at the time, but missed \u201cCAPABILITY\u201d and \u201cHASCHILDREN\u201d.  This errata report notes that for the record and so IANA may correctly register those two codes.", "submit_date": "2021-09-01", "submitter_name": "Barry Leiba", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2021-09-01 14:07:46"}, {"errata_id": "6687", "doc-id": "RFC3998", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1", "orig_text": "This OPTIONAL operation is a create job operation that allows a\r\nclient to re-process a copy of a job that had been retained in the\r\nqueue after processing was completed, canceled, or aborted (see\r\n[RFC2911], section 4.3.7.2).  This operation is the same as the\r\n", "correct_text": "This DEPRECATED operation is a create job operation that allows a\r\nclient to re-process a copy of a job that had been retained in the\r\nqueue after processing was completed, canceled, or aborted (see\r\n[RFC2911], section 4.3.7.2).  This operation is the same as the\r\n", "notes": "This operation has been deprecated by the IPP workgroup. The recommended replacement is the Resubmit-Job operation defined in PWG 5100.11.\n --VERIFIER NOTES-- \nThis sort of change to update for events since the time of publication is not appropriate for an erratum; errata are intended solely to indicate errors in a document that were errors at the time of publication. A revision of the document or a new document with an \"Updates:\" relationship would be more appropriate ways to indicate that the situation has changed.", "submit_date": "2021-09-16", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-09-17 09:41:09"}, {"errata_id": "6681", "doc-id": "RFC8669", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "In the Acknowledgements, it says:", "orig_text": "   The authors would like to thank Peter Yee, Tony Przygienda, Mirja\r\n   Kuhlewind, Alexey Melnikov, Eric Rescorla, Suresh Krishnan, Warren\r\n   Kumari, Ben Campbell Sue Hares, and Martin Vigoureux for IDR Working\r\n   Group last call, IETF Last Call, directorate, and IESG reviews.", "correct_text": "   The authors would like to thank Peter Yee, Tony Przygienda, Mirja\r\n   Kuhlewind, Alexey Melnikov, Eric Rescorla, Suresh Krishnan, Warren\r\n   Kumari, Ben Campbell, Sue Hares, and Martin Vigoureux for IDR Working\r\n   Group last call, IETF Last Call, directorate, and IESG reviews.", "notes": "missing comma", "submit_date": "2021-09-08", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-10-06 23:07:48"}, {"errata_id": "7314", "doc-id": "RFC9334", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Several. Please see notes ", "correct_text": "Several. Please see notes ", "notes": "There are various ambiguities in the RATS architecture. The text is not always clear about whether the discussion is about an entity or a role. For instance, in the example in \u00a77.1, ``A'' and ``B'' are mentioned as Relying Party and Verifier, respectively, whereas these should be entities. Based on \u00a77.1, as the Relying Party may need to have a built-in verifier for Verifier as well as Relying Party Owner, it is no longer a simple Relying Party role. \r\n\r\nSome of the terms are not well-defined in the standard. For instance, \\textit{environment} (\u00a73.1) is neither defined nor referenced. Specifically, it is not compared and contrasted with \\textit{entity} (\u00a73) and \\textit{sub-entity} (\u00a73.3) as well as Claims. Similarly, the statement ``The Attester role is assigned to entities that create Evidence that is conveyed to a Verifier.'' (cf. \u00a73) applies equally well to the Attesting Environment, so there is a need to compare and contrast Attester with Attesting Environment. Similarly, Reference Values are not precisely compared and contrasted with Endorsements. \r\n\r\nThe solutions presented in the standard are not always complete and precise. For example, in \u00a711, if the Verifier's own Attestation Results are generated by the Verifier's Verifier, it leads to recursive problems. Similarly, the event defined in Table 1 as ``A Relying Party relays an Attestation Result to a Relying Party'' and represented as ``RR'' does not make sense in \u00a7A.2, where it is actually the Attester (not Relying Party) that relays the Attestation Result to the Relying Party in the Passport model. Moreover, some of the presented solutions do not precisely describe the \\textit{clock}, for instance, in Appendix \u00a7A.2. In the context of CC, none of the commercially available TEEs currently provide a trusted clock, and thus the distinction with monotonically increasing counter should be explicit. Sometimes, no solution is presented at all, e.g., recursive problems mentioned in \u00a712.1.2.1.\n --VERIFIER NOTES-- \n   This needs to be properly formatted to be considered. ", "submit_date": "2023-01-20", "submitter_name": "Muhammad Usama Sardar", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:46:40"}, {"errata_id": "6714", "doc-id": "RFC864", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Data Syntax", "orig_text": "   The data may be anything.  It is recommended that a recognizable\r\n   pattern be used in tha data.\r\n\r\n      One popular pattern is 72 chraracter lines of the ASCII printing\r\n      characters.", "correct_text": "   The data may be anything.  It is recommended that a recognizable\r\n   pattern be used in the data.\r\n\r\n      One popular pattern is 72 character lines of the ASCII printing\r\n      characters.", "notes": "Minor spelling errors: \"the\" and \"character\"", "submit_date": "2021-10-17", "submitter_name": "Edwin Balani", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-27 23:32:38"}, {"errata_id": "6715", "doc-id": "RFC6844", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "", "orig_text": "If the domain name holder specifies one or more iodef properties, a\r\ncertificate issuer MAY report invalid certificate requests to that\r\naddress.", "correct_text": "If the domain name holder specifies one or more iodef properties, a\r\ncertificate issuer MAY report invalid certificate requests to those\r\naddresses.", "notes": "\"address\" should be plural.\r\n\r\nNote:  This has been corrected in RFC 8659", "submit_date": "2021-10-18", "submitter_name": "Jaime Hablutzel", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:18:15"}, {"errata_id": "6718", "doc-id": "RFC4842", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "18.1", "orig_text": "   [RTP]           Schulzrinne, H., Casner, S., Frederick, R., and V.\r\n                   Jacobson, \"RTP: A Transport Protocol for Real-Time\r\n                   Applications\", STD 64, RFC 3005, July 2003.", "correct_text": "   [RTP]           Schulzrinne, H., Casner, S., Frederick, R., and V.\r\n                   Jacobson, \"RTP: A Transport Protocol for Real-Time\r\n                   Applications\", STD 64, RFC 3550, July 2003.", "notes": "The RFC number for [RTP] should be 3550, not 3005.", "submit_date": "2021-10-21", "submitter_name": "Lars Eggert", "verifier_id": "", "verifier_name": "Martin Vigoureux", "update_date": "2021-11-03 18:00:56"}, {"errata_id": "6692", "doc-id": "RFC6781", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix D", "orig_text": "    ------------------------------------------------------------\r\n    new DS             |        pre-publish                    |\r\n    ------------------------------------------------------------\r\n    Parent:\r\n     NS_A                            NS_A\r\n     DS_A DS_B                       DS_A DS_B\r\n    ------------------------------------------------------------\r\n    Child at A:            Child at A:        Child at B:\r\n     SOA_A0                 SOA_A1             SOA_B0\r\n     RRSIG_Z_A(SOA)         RRSIG_Z_A(SOA)     RRSIG_Z_B(SOA)\r\n\r\n     NS_A                   NS_A               NS_B\r\n     RRSIG_Z_A(NS)          NS_B               RRSIG_Z_B(NS)\r\n                            RRSIG_Z_A(NS)\r\n\r\n     DNSKEY_Z_A             DNSKEY_Z_A         DNSKEY_Z_A\r\n                            DNSKEY_Z_B         DNSKEY_Z_B\r\n     DNSKEY_K_A             DNSKEY_K_A         DNSKEY_K_B\r\n     RRSIG_K_A(DNSKEY)      RRSIG_K_A(DNSKEY)  RRSIG_K_A(DNSKEY)\r\n                            RRSIG_K_B(DNSKEY)  RRSIG_K_B(DNSKEY)\r\n    ------------------------------------------------------------\r\n", "correct_text": "    ------------------------------------------------------------\r\n    new DS             |        pre-publish                    |\r\n    ------------------------------------------------------------\r\n    Parent:\r\n     NS_A                            NS_A\r\n     DS_A DS_B                       DS_A DS_B\r\n    ------------------------------------------------------------\r\n    Child at A:            Child at A:        Child at B:\r\n     SOA_A0                 SOA_A1             SOA_B0\r\n     RRSIG_Z_A(SOA)         RRSIG_Z_A(SOA)     RRSIG_Z_B(SOA)\r\n\r\n     NS_A                   NS_A               NS_B\r\n     RRSIG_Z_A(NS)          NS_B               RRSIG_Z_B(NS)\r\n                            RRSIG_Z_A(NS)\r\n\r\n     DNSKEY_Z_A             DNSKEY_Z_A         DNSKEY_Z_A\r\n                            DNSKEY_Z_B         DNSKEY_Z_B\r\n     DNSKEY_K_A             DNSKEY_K_A         DNSKEY_K_B\r\n     RRSIG_K_A(DNSKEY)      RRSIG_K_A(DNSKEY)  RRSIG_K_B(DNSKEY)\r\n    ------------------------------------------------------------\r\n", "notes": "Figure 15 in Appendix D is depicting the phases of a double DS KSK rollover operator change.  One rationale for applying this approach is to avoid the exchange of signatures (RRSIGs) between operators, and limit exchanges to the public parts of the ZSKs in use.  In the pre-publish phase in the figure, it is shown that Child A publishes a signature over the DNSKEY RRset generated by Child B's KSK, and that Child B publishes a signature over the DNSKEY RRset generated by Child A's KSK.  This is contrary to the rationale given for this method, and also not required, since the pre-published double DS RRs at the parent zone should enable a validator to validate the signature generated by any of the two KSKs in use, thus one RRSIG RR for the DNSKEY RRset is sufficient at each child.  Therefore, the RRSIG_K_B(DNSKEY) RR should be removed from Child A, and the RRSIG_K_A(DNSKEY) should be removed from Child B.\r\n\r\n\r\n[Warren Kumari, Ops AD]: Marking as Verified, please see the thread at https://mailarchive.ietf.org/arch/msg/dnsop/voplw-sLcS-6u458reknBGQR2T0/ for additional information / justification. ", "submit_date": "2021-09-22", "submitter_name": "Jarle Fredrik Greipsland", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-07-09 16:42:10"}, {"errata_id": "6691", "doc-id": "RFC8572", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   The DHCPv4 server MAY include a single instance of the\r\n   OPTION_V4_SZTP_REDIRECT option in DHCP messages it sends.  Servers\r\n   MUST NOT send more than one instance of the OPTION_V4_SZTP_REDIRECT\r\n   option.\r\n", "correct_text": "The DHCPv4 server MAY include OPTION_V4_SZTP_REDIRECT in DHCP messages it sends.", "notes": "The original text contradicts the statement in the same section:\r\n   \"If the length of the 'bootstrap-server-list' field is too large to\r\n   fit into a single option, then OPTION_V4_SZTP_REDIRECT MUST be split\r\n   into multiple instances of the option according to the process\r\n   described in [RFC3396].\"", "submit_date": "2021-09-22", "submitter_name": "Alex Krichevsky", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6683", "doc-id": "RFC8466", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.10.2.1", "orig_text": "   QoS classification rules are handled by \"qos-classification-policy\".\r\n   qos-classification-policy is an ordered list of rules that match a\r\n   flow or application and set the appropriate target CoS\r\n   (target-class-id).  The user can define the match using a\r\n   more specific flow definition (based on Layer 2 source and\r\n   destination MAC addresses, cos, dscp, cos-id, color-id, etc.).  A\r\n   \"color-id\" will be assigned to a service frame to identify its QoS\r\n   profile conformance.  A service frame is \"green\" if it is conformant\r\n   with the \"committed\" rate of the bandwidth profile.  A service frame\r\n   is \"yellow\" if it exceeds the \"committed\" rate but is conformant with\r\n   the \"excess\" rate of the bandwidth profile.  Finally, a service frame\r\n   is \"red\" if it is conformant with neither the \"committed\" rate nor\r\n   the \"excess\" rate of the bandwidth profile.", "correct_text": "   QoS classification rules are handled by \"qos-classification-policy\".\r\n   qos-classification-policy is an ordered list of rules that match a\r\n   flow or application and set the appropriate target CoS\r\n   (target-class-id).  The user can define the match using a\r\n   more specific flow definition (based on Layer 2 source and\r\n   destination MAC addresses, dscp, color-type, etc.).  A\r\n   \"color-type\" will be assigned to a service frame to identify its QoS\r\n   profile conformance.  A service frame is \"green\" if it is conformant\r\n   with the \"committed\" rate of the bandwidth profile.  A service frame\r\n   is \"yellow\" if it exceeds the \"committed\" rate but is conformant with\r\n   the \"excess\" rate of the bandwidth profile.  Finally, a service frame\r\n   is \"red\" if it is conformant with neither the \"committed\" rate nor\r\n   the \"excess\" rate of the bandwidth profile.", "notes": "There is no \"color-id\" under \"qos-classification-policy\". The text should refer to \"color-type\" given that the \"qos-classification-policy\" substree is as follows:\r\n\r\n        +--rw service\r\n        |  +--rw qos {qos}?\r\n        |  |  +--rw qos-classification-policy\r\n        |  |  |  +--rw rule* [id]\r\n        |  |  |     +--rw id                   string\r\n        |  |  |     +--rw (match-type)?\r\n        |  |  |     |  +--:(match-flow)\r\n        |  |  |     |  |  +--rw match-flow\r\n        |  |  |     |  |     +--rw dscp?           inet:dscp\r\n        |  |  |     |  |     +--rw dot1q?          uint16\r\n        |  |  |     |  |     +--rw pcp?            uint8\r\n        |  |  |     |  |     +--rw src-mac?        yang:mac-address\r\n        |  |  |     |  |     +--rw dst-mac?        yang:mac-address\r\n        |  |  |     |  |     +--rw color-type?     identityref\r\n        |  |  |     |  |     +--rw target-sites*\r\n        |  |  |     |  |     |               svc-id {target-sites}?\r\n        |  |  |     |  |     +--rw any?            empty\r\n        |  |  |     |  |     +--rw vpn-id?         svc-id\r\n        |  |  |     |  +--:(match-application)\r\n        |  |  |     |     +--rw match-application?   identityref\r\n        |  |  |     +--rw target-class-id?     string\r\n\r\nThe same applies for \"cos\" and \"cos-id\". \r\n\r\nThe corrected text uses \"color-type\" instead of \"color-id\" and removes \"cos\" and \"cos-id\" from the flow definition examples.", "submit_date": "2021-09-14", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:33:02"}, {"errata_id": "6684", "doc-id": "RFC8572", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   The DHCPv4 server MAY include a single instance of the\r\n   OPTION_V4_SZTP_REDIRECT option in DHCP messages it sends.  Servers\r\n   MUST NOT send more than one instance of the OPTION_V4_SZTP_REDIRECT\r\n   option.", "correct_text": "   The DHCPv4 server MAY include OPTION_V4_SZTP_REDIRECT in DHCP messages it sends.", "notes": "The original text contradicts the statement in the same section:\r\n   \"If the length of the 'bootstrap-server-list' field is too large to\r\n   fit into a single option, then OPTION_V4_SZTP_REDIRECT MUST be split\r\n   into multiple instances of the option according to the process\r\n   described in [RFC3396].\"", "submit_date": "2021-09-14", "submitter_name": "Alex Krichevsky", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2021-09-22 09:07:47"}, {"errata_id": "6685", "doc-id": "RFC8572", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.3", "orig_text": "   Each URI entry in the bootstrap-server-list is structured as follows:\r\n\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-...-+-+-+-+-+-+-+\r\n    |       uri-length              |          URI                  |\r\n    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-...-+-+-+-+-+-+-+\r\n\r\n    * uri-length: 2 octets long; specifies the length of the URI data.\r\n    * URI: URI of the SZTP bootstrap server.", "correct_text": "Multiple URI entries can be specified in a comma-separated list.", "notes": "Most of DHCP servers can be configured only with ASCII string for options.\n --VERIFIER NOTES-- \nAs discussed with the authors on the NETCONF mailing list the intent is to have one URI entry per uri-data entry (containing URI-length and the associated URI). Multiple instances of uri-data entry are permitted.", "submit_date": "2021-09-14", "submitter_name": "Alex Krichevsky", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 17:55:08"}, {"errata_id": "7317", "doc-id": "RFC4743", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6.", "orig_text": "   S:               <full-name>Charlie Root</full-name>\r\n   S:                 <dept>1</dept>\r\n   S:                 <id>1</id>\r\n   S:               </company-info>", "correct_text": "   S:               <full-name>Charlie Root</full-name>\r\n   S:               <company-info>\r\n   S:                 <dept>1</dept>\r\n   S:                 <id>1</id>\r\n   S:               </company-info>", "notes": "The opening tags for <company-info> seem to be missing in the example.", "submit_date": "2023-01-24", "submitter_name": "Dominik Krappel", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-27 23:38:25"}, {"errata_id": "7316", "doc-id": "RFC6350", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4", "orig_text": "TITLE;ALTID=1;LANGUAGE=fr:Patron\r\nTITLE:LANGUAGE=en:Boss\r\n(Second line should probably have ALTID=1.)", "correct_text": "TITLE;ALTID=1;LANGUAGE=fr:Patron\r\nTITLE;LANGUAGE=en:Boss\r\n(Second line should probably have ALTID=1.)", "notes": "The colon between TITLE and LANGUAGE should be a semicolon.", "submit_date": "2023-01-23", "submitter_name": "Charles Burkitt", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 21:00:10"}, {"errata_id": "6688", "doc-id": "RFC8777", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   +-------+---------------------------------------+\r\n   | 3     | A wire-encoded domain name is present |\r\n   +-------+---------------------------------------+\r\n   | 4-255 | Unassigned                            |\r\n   +-------+---------------------------------------+\r\n\r\n      Table 2: Initial Contents of the \"Relay Type\r\n                    Field\" Registry\r\n\r\n   Values 0, 1, 2, and 3 are further explained in Sections 4.2.3 and\r\n   4.2.4.  Relay type numbers 4 through 255 can be assigned with a\r\n   policy of Specification Required (as described in [RFC8126]).", "correct_text": "   +-------+---------------------------------------+\r\n   | 3     | A wire-encoded domain name is present |\r\n   +-------+---------------------------------------+\r\n   | 4-127 | Unassigned                            |\r\n   +-------+---------------------------------------+\r\n\r\n      Table 2: Initial Contents of the \"Relay Type\r\n                    Field\" Registry\r\n\r\n   Values 0, 1, 2, and 3 are further explained in Sections 4.2.3 and\r\n   4.2.4.  Relay type numbers 4 through 127 can be assigned with a\r\n   policy of Specification Required (as described in [RFC8126]).", "notes": "Relay Type is a 7 bit field, the MS bit of the wire-format  octet contains the D-bit.\r\n\r\n[Update: 2021-10-05 - AD: Confirmed that you can't fit 8 bits into a 7 bit field - see: https://mailarchive.ietf.org/arch/msg/mboned/cdzHm6Uxwuua5zsOONHtK-RmdU8/ ]", "submit_date": "2021-09-19", "submitter_name": "Dick Franks", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-10-05 17:00:02"}, {"errata_id": "6689", "doc-id": "RFC9098", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "  If a forwarding router cannot determine consistent n-tuples for\r\n   calculating flow hashes, data streams are more likely to end up being\r\n   distributed unequally across ECMP and load-shared links.  This may\r\n   lead to packet drops or reduced performance.", "correct_text": "[None]", "notes": "The paragraph seems to belong to 7.1 (ECMP and load blanacing) since it is not related to the subject in 7.2 (ACL and filtering). But there is a very similar paragraph in 7.1 so the best solution is probably to delete the whole paragraph.", "submit_date": "2021-09-20", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-15 22:57:48"}, {"errata_id": "6690", "doc-id": "RFC8572", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.1", "orig_text": "   The DHCPv4 server MAY include a single instance of the\r\n   OPTION_V4_SZTP_REDIRECT option in DHCP messages it sends.  Servers\r\n   MUST NOT send more than one instance of the OPTION_V4_SZTP_REDIRECT\r\n   option.\r\n", "correct_text": "The DHCPv4 server MAY include OPTION_V4_SZTP_REDIRECT in DHCP messages it sends.", "notes": "Duplicate of 6684.\n --VERIFIER NOTES-- \n   Duplicate of 6684.", "submit_date": "2021-09-22", "submitter_name": "Alex Krichevsky", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2021-09-22 09:09:24"}, {"errata_id": "6677", "doc-id": "RFC791", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Protocol:  8 bits\r\n\r\n    This field indicates the next level protocol used in the data\r\n    portion of the internet datagram.  The values for various protocols\r\n    are specified in \"Assigned Numbers\" [9].", "correct_text": "Protocol:  8 bits\r\n\r\n    This field indicates the next upper level protocol used in the data\r\n    portion of the internet datagram.  The values for various protocols\r\n    are specified in \"Assigned Numbers\" [9], section ASSIGNED INTERNET PROTOCOL NUMBERS.", "notes": "The word 'next' is ambiguous in the sense that it does not indicate whether the 'next' protocol is at the next LOWER or UPPER level (referring to Fig. 1). Although it may be obvious to people well versed in this domain that the next UPPER level protocol is meant, as a newcomer I had to think twice to reach at this conclusion.\r\n\r\nAlso, the reference to [9] could be more specific.\n --VERIFIER NOTES-- \nThe description of the Protocol field states that it refers to the protocol \"used in the data portion of the internet datagram\".  In the context of Figure 1, this cannot refer to a lower layer protocol.", "submit_date": "2021-09-06", "submitter_name": "\u00d8yvind Bolme Fredriksen", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2023-06-10 23:49:05"}, {"errata_id": "6678", "doc-id": "RFC7913", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "NA", "correct_text": "NA", "notes": "As per the Introduction section,\r\n\r\n \"As the P-Access-Network-Info header field is mainly used in networks\r\n   defined by the 3rd-Generation Partnership Project (3GPP), where new\r\n   values following the 'generic-param' rule have been defined\r\n   [TS.3GPP.24.229], the update is not considered to cause issues with\r\n   backward compatibility. \"\r\n\r\nThis is not true and there is backward compatibility issue due to change in ABNF form of extension-access-info  from  gen-value to generic-param\r\n\r\nFor eg:\r\n\r\nAs per the old RFC the following header was valid,\r\nP-Access-Network-Info: 3GPP-UTRAN-TDD; utran-cell-id-3gpp=23456789ABCDE; \"a=c\";\r\n\r\nSee the parameter \"a=c\" which was allowed as part of \"gen-value      =  token / host / quoted-string\"\r\n\r\nBut generic-param has to be in the form \r\ngeneric-param  =  token [ EQUAL gen-value ]\r\n\r\ndue to this a simple quoted string become invalid.\r\n\r\nThis causes backward compatibility of new SIP stacks and old networks.", "submit_date": "2021-09-06", "submitter_name": "Dinoop Paloli", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6719", "doc-id": "RFC6265", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "max-age-av        = \"Max-Age=\" non-zero-digit *DIGIT", "correct_text": "max-age-av           = \"Max-Age=\" non-negative-integer\r\nnon-negative-integer = zero-digit / (non-zero-digit *DIGIT)\r\nzero-digit           = %x30", "notes": "In section 5.2.2, there is the following text on the value of the max-age:\r\n\r\n> Let delta-seconds be the attribute-value converted to an integer.\r\n>\r\n>   If delta-seconds is less than or equal to zero (0), let expiry-time\r\n>   be the earliest representable date and time.\r\n\r\nIf max-age is an integer greater than 0, then the entire sentence is meaningless. It is a common practice to use max-age=0 to expire a cookie immediately. I think that the ABNF is incorrect. However, I don't see any reason to permit negative values.\n --VERIFIER NOTES-- \nUser agents and Servers have different requirements and a UA is expected to be able to handle a wider range of inputs than the well-behaved profile for Servers that is defined in Section 4. This erratum is analogous to https://www.rfc-editor.org/errata/eid3430 which was likewise rejected.", "submit_date": "2021-10-22", "submitter_name": "Philip Gladstone", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2025-02-12 11:53:47"}, {"errata_id": "6721", "doc-id": "RFC7208", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.4", "orig_text": "       550 5.7.1 SPF MAIL FROM check failed:\r\n       550 5.7.1 The domain example.com explains:\r\n       550 5.7.1 Please see http://www.example.com/mailpolicy.html\r\n", "correct_text": "       550-5.7.1 SPF MAIL FROM check failed:\r\n       550-5.7.1 The domain example.com explains:\r\n       550 5.7.1 Please see http://www.example.com/mailpolicy.html\r\n", "notes": "In addition, RFC 7208 does not give an example of rejection based on the HELO argument.", "submit_date": "2021-10-25", "submitter_name": "Ale Vesely", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2021-11-09 12:03:44"}, {"errata_id": "6722", "doc-id": "RFC3439", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   his concern is codified in the Principle of Minimum Intervention\r\n   BRYANT]:", "correct_text": "   This concern is codified in the Principle of Minimum Intervention\r\n   [BRYANT]:", "notes": "The symbols T and [ are missing.", "submit_date": "2021-10-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-27 23:39:57"}, {"errata_id": "6699", "doc-id": "RFC8466", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "                  container lacp {\r\n                    if-feature \"lacp\";\r\n                    leaf enabled {\r\n                      type boolean;\r\n                      default \"false\";\r\n                      description\r\n                        \"LACP on/off.  By default, LACP is disabled.\";\r\n                    }\r\n                    leaf mode {\r\n                      type neg-mode;\r\n                      description\r\n                        \"LACP mode.  LACP modes have active mode and\r\n                         passive mode ('false').  'Active mode' means\r\n                         initiating the auto-speed negotiation and\r\n                         trying to form an Ethernet channel with the\r\n                         other end.  'Passive mode' means not initiating\r\n                         the negotiation but responding to LACP packets\r\n                         initiated by the other end (e.g., full duplex\r\n                         or half duplex).\";\r\n                    }\r\n\r\n", "correct_text": "                  container lacp {\r\n                    if-feature \"lacp\";\r\n                    leaf enabled {\r\n                      type boolean;\r\n                      default \"false\";\r\n                      description\r\n                        \"LACP on/off.  By default, LACP is disabled.\";\r\n                    }\r\n                    leaf mode {\r\n                      type identityref {\r\n                        base lacp-mode;\r\n                      }\r\n                      description\r\n                        \"LACP mode. LACP modes have active mode and\r\n                         passive mode ('false').  'Active mode' means\r\n                         initiating the auto-speed negotiation and\r\n                         trying to form an Ethernet channel with the\r\n                         other end.  'Passive mode' means not initiating\r\n                         the negotiation but responding to LACP packets\r\n                         initiated by the other end (e.g., full duplex\r\n                         or half duplex).\";\r\n                    }\r\n\r\n\r\nAlso, make this change: \r\n\r\nOLD:\r\n\r\n           |  +--rw lag-interfaces {lag-interface}?\r\n           |  |  +--rw lag-interface* [index]\r\n           |  |     +--rw index    string\r\n           |  |     +--rw lacp {lacp}?\r\n           |  |        +--rw enabled?           boolean\r\n           |  |        +--rw mode?              neg-mode\r\n\r\nNEW:\r\n\r\n           |  +--rw lag-interfaces {lag-interface}?\r\n           |  |  +--rw lag-interface* [index]\r\n           |  |     +--rw index    string\r\n           |  |     +--rw lacp {lacp}?\r\n           |  |        +--rw enabled?           boolean\r\n           |  |        +--rw mode?              identityref\r\n", "notes": "The LACP mode can be set to active or passive, which is not what neg-mode is supposed to cover. lacp-mode identity should be used, instead.\r\n\r\nThe errata looks valid, but given this requires a new revision of the YANG module a new RFC needs to be published.", "submit_date": "2021-10-01", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 14:47:31"}, {"errata_id": "6697", "doc-id": "RFC8257", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3", "orig_text": "The below pseudocode follows after DCTCP.Alpha is updated on ACK processing. This is wrong as cwnd should only be reduced using DCTCP.Alpha when ECE is received. \r\n\r\n9. Rather than always halving the congestion window as described in\r\n       [RFC3168], the sender SHOULD update cwnd as follows:\r\n\r\n          cwnd = cwnd * (1 - DCTCP.Alpha / 2)", "correct_text": "Instead, a new paragraph for Congestion Response to ECN feedback would be much clearer. First start with RFC 3168's response to ECE and then provide DCTCP's response to ECE.\r\n\r\nI am thinking splitting section 3.3 into two sub-sections - \r\n3.3.1 Computation of DCTCP.Alpha\r\n3.3.2 Congestion Response to ECE at sender\r\n\r\n", "notes": "Although RFC 8257 refers to RFC 3168 congestion window halving at step 9, but it is confusing to put it right after step 8.\r\n\r\nLiterally interpreted, a window with no congestion marks would reduce the cwnd, which is wrong.", "submit_date": "2021-09-28", "submitter_name": "Vidhi Goel", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-05-13 21:27:17"}, {"errata_id": "6703", "doc-id": "RFC8466", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8", "orig_text": "                  leaf pbs {\r\n                    type uint64;\r\n                    units \"bps\";\r\n                    description\r\n                      \"Peak Burst Size.  It is measured in bytes per\r\n                       second.\";\r\n                  }", "correct_text": "                  leaf pbs {\r\n                    type uint64;\r\n                    units \"Bytes per Second\";\r\n                    description\r\n                      \"Peak Burst Size.\";\r\n                  }", "notes": "There is a mismatch between the units statement and the description text. \r\n\r\nThe corrected text assumes that the description reflects the intent. This is the meaning assumed in draft-ietf-opsawg-l2nm", "submit_date": "2021-10-05", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2022-05-19 19:02:22"}, {"errata_id": "7318", "doc-id": "RFC4743", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.6.", "orig_text": "   S:               <full-name>Fred Flintstone</full-name>\r\n   S:                 <dept>2</dept>\r\n   S:                 <id>2</id>\r\n   S:               </company-info>", "correct_text": "   S:               <full-name>Fred Flintstone</full-name>\r\n   S:               <company-info>\r\n   S:                 <dept>2</dept>\r\n   S:                 <id>2</id>\r\n   S:               </company-info>", "notes": "The opening tags for <company-info> seem to be missing in the example.", "submit_date": "2023-01-24", "submitter_name": "Dominik Krappel", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 13:24:58"}, {"errata_id": "7319", "doc-id": "RFC7644", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.4.2.2", "orig_text": "     FILTER    = attrExp / logExp / valuePath / *1\"not\" \"(\" FILTER \")\"\r\n\r\n     valuePath = attrPath \"[\" valFilter \"]\"\r\n                 ; FILTER uses sub-attributes of a parent attrPath\r\n\r\n     valFilter = attrExp / logExp / *1\"not\" \"(\" valFilter \")\"", "correct_text": "     FILTER    = attrExp / logExp / valuePath / *1(\"not\" SP) \"(\" FILTER \")\"\r\n\r\n     valuePath = attrPath \"[\" valFilter \"]\"\r\n                 ; FILTER uses sub-attributes of a parent attrPath\r\n\r\n     valFilter = attrExp / logExp / *1(\"not\" SP) \"(\" valFilter \")\"", "notes": "Note the following example filter listed further down in section 3.4.2.2:\r\n\r\n     filter=userType ne \"Employee\" and not (emails co \"example.com\" or\r\n  emails.value co \"example.org\")\r\n\r\nThere is a space between the \"not\" and the opening parenthesis, which is not allowed in the listed ABNF grammar. The corrected text includes a mandatory space between these two tokens.\r\n\r\nIt may be desired to use `*1(\"not\" *1SP) \"(\"` instead, for backwards compatibility reasons. This would allow for an optional space after a \"not\" keyword. Or, it may be desired to instead edit the example to remove the space, preserving the original intent of the listed grammar.", "submit_date": "2023-01-25", "submitter_name": "James Linnell", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7320", "doc-id": "RFC916", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "Side A                                             Side", "correct_text": "Side A                                             Side B", "notes": "The figure in the section 3.3. \"Detecting a Half-Open Connection\", has one side missing its letter here B.", "submit_date": "2023-01-25", "submitter_name": "Jules Maselbas", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-01-27 00:57:50"}, {"errata_id": "6704", "doc-id": "RFC7616", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "3.4.1", "orig_text": "3.4.1.  Response\r\n\r\n   If the qop value is \"auth\" or \"auth-int\":\r\n\r\n         response = <\"> < KD ( H(A1), unq(nonce)\r\n                                      \":\" nc\r\n                                      \":\" unq(cnonce)\r\n                                      \":\" unq(qop)\r\n                                      \":\" H(A2)\r\n                             ) <\">\r\n\r\n   See below for the definitions for A1 and A2.", "correct_text": "3.4.1.  Response\r\n\r\n   If the qop value is \"auth\" or \"auth-int\":\r\n\r\n         response = <\"> < KD ( H(A1), unq(nonce)\r\n                                      \":\" nc\r\n                                      \":\" unq(cnonce)\r\n                                      \":\" unq(qop)\r\n                                      \":\" H(A2)\r\n                             ) > <\">\r\n\r\n   See below for the definitions for A1 and A2.", "notes": "The open angle bracket following the initial double quote, probably needs a matching close angle bracket before the final double quote. This typographical error appears to have been copied from section 3.2.2.1 of RFC 2617, but the close angle bracket does appear in the corresponding single line of text in section 2.1.2 of RFC 2069 that defines the response-digest production there. However, it's not clear to me that the angle brackets contribute to the clarity of the response production here, so simply removing the unmatched open might be a better solution.", "submit_date": "2021-10-05", "submitter_name": "Bruce Florman", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6705", "doc-id": "RFC2550", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.4.2.4", "orig_text": "Where \"n\" is the number of leading carets and the fig, base26 and y10k functions are defined with the following recurrence relations:", "correct_text": "Where \"n\" is the number of leading carets and the fib, base26 and y10k functions are defined with the following recurrence relations:", "notes": "typo: s/fig/fib/", "submit_date": "2021-10-10", "submitter_name": "Alok Menghrajani", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-27 23:21:05"}, {"errata_id": "6706", "doc-id": "RFC1288", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3", "orig_text": "   The Finger query specification is defined:\r\n\r\n        {Q1}    ::= [{W}|{W}{S}{U}]{C}\r\n\r\n        {Q2}    ::= [{W}{S}][{U}]{H}{C}\r\n\r\n        {U}     ::= username\r\n\r\n        {H}     ::= @hostname | @hostname{H}\r\n\r\n        {W}     ::= /W\r\n\r\n        {S}     ::= <SP> | <SP>{S}\r\n\r\n        {C}     ::= <CRLF>", "correct_text": "   The Finger query specification is defined:\r\n\r\n        {Q1}    ::= [{W}{S}][{U}]{C}\r\n\r\n        {Q2}    ::= [{W}{S}][{U}]{H}{C}\r\n\r\n        {U}     ::= username\r\n\r\n        {H}     ::= @hostname | @hostname{H}\r\n\r\n        {W}     ::= /W\r\n\r\n        {S}     ::= <SP> | <SP>{S}\r\n\r\n        {C}     ::= <CRLF>", "notes": "Query format one is intended to do a FINGER request, optionally supplying a username and optionally supplying a \"/W \". These optional switches are orthogonal; you can specify one or the other or both.\r\n\r\nThe original BNF makes the /W switch mandatory when supplying a user name.\r\n\r\nI've checked the source code for several Finger server implementations; they all accept /W as optional.", "submit_date": "2021-10-11", "submitter_name": "Peter Smith", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6727", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.7.2", "orig_text": "      {\r\n        \"name\" : \"description\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The schema's human-readable name.  When\r\n          applicable, service providers MUST specify the name,\r\n          e.g., 'User'.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "correct_text": "      {\r\n        \"name\" : \"description\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The schema's human-readable description.  When\r\n          applicable, service providers MUST specify the description.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "notes": "The previous description was that for the \"name\" attribute. Updated to the standard text for the \"description\" attribute.", "submit_date": "2021-10-28", "submitter_name": "Will Springer", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:56:29"}, {"errata_id": "6728", "doc-id": "RFC8428", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11", "orig_text": "SenML-Pack = [1* record]\r\n\r\n   record = {\r\n     ? bn => tstr,        ; Base Name\r\n     ? bt => numeric,     ; Base Time\r\n     ? bu => tstr,        ; Base Units\r\n     ? bv => numeric,     ; Base Value\r\n     ? bs => numeric,     ; Base Sum\r\n     ? bver => uint,      ; Base Version\r\n     ? n => tstr,        ; Name\r\n     ? u => tstr,        ; Units\r\n     ? s => numeric,     ; Sum\r\n     ? t => numeric,     ; Time\r\n     ? ut => numeric,    ; Update Time\r\n     ? ( v => numeric // ; Numeric Value\r\n         vs => tstr //   ; String Value\r\n         vb => bool //   ; Boolean Value\r\n         vd => binary-value ) ; Data Value\r\n     * key-value-pair\r\n   }", "correct_text": "SenML-Pack = [1* record]\r\n\r\n   record = {\r\n     ? bn => tstr,        ; Base Name\r\n     ? bt => numeric,     ; Base Time\r\n     ? bu => tstr,        ; Base Units\r\n     ? bv => numeric,     ; Base Value\r\n     ? bs => numeric,     ; Base Sum\r\n     ? bver => uint,      ; Base Version\r\n     ? n => tstr,        ; Name\r\n     ? u => tstr,        ; Units\r\n     ? s => numeric,     ; Sum\r\n     ? t => numeric,     ; Time\r\n     ? ut => numeric,    ; Update Time\r\n     ? ( v => numeric // ; Numeric Value\r\n         vs => tstr //   ; String Value\r\n         vb => bool //   ; Boolean Value\r\n         vd => binary-value ), ; Data Value\r\n     * key-value-pair\r\n   }", "notes": "It would show good style to set the comma even though it's not required.", "submit_date": "2021-11-01", "submitter_name": "Veijo Pesonen", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2021-11-01 15:28:12"}, {"errata_id": "6729", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   3.  Search the public suffix list for the name that matches the\r\n       largest number of labels found in the subject DNS domain.  Let\r\n       that number be \"x\".", "correct_text": "   3.  Search the ICANN DOMAINS section of the public suffix list for\r\n       the name that matches the largest number of labels found in the\r\n       subject DNS domain.  Let that number be \"x\".", "notes": "The PSL includes both public and private domains.  RFC 7489 should have limited name matching to the public, ICANN DOMAINS section of the PSL.  As an example, using the current PSL, the organizational domain for example.s3.dualstack.ap-northeast-1.amazonaws.com is example.s3.dualstack.ap-northeast-1.amazonaws.com, not amazonaws.com since it is listed in the private section of the PSL.  This is clearly the wrong result.", "submit_date": "2021-11-01", "submitter_name": "Scott Kitterman", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-03 07:03:17"}, {"errata_id": "6708", "doc-id": "RFC8484", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "10", "orig_text": "The use of Online Certificate\r\n   Status Protocol (OCSP) [RFC6960] servers or Authority Information\r\n   Access (AIA) for Certificate Revocation List (CRL) fetching (see\r\n   Section 4.2.2.1 of [RFC5280]) are examples of how this deadlock can\r\n   happen.", "correct_text": "The use of Online Certificate Status Protocol (OCSP) [RFC6960] servers, Certificate Revocation List (CRL) distribution points (see Section 4.2.1.13 of [RFC5280]), or Authority Information Access (AIA) to retrieve issuer certificates (see Section 4.2.2.1 of [RFC5280]) are examples of how this deadlock can happen.", "notes": "The OCSP part is fine, but the AIA piece is wrong.\r\n\r\nFor context, there are three different ways (to my knowledge) that a client might make outbound connections in order to validate or build a certification path.\r\n\r\n1. CRL - clients fetch CRLs from the designated location.  This rarely happens any more as it is grossly inefficient, but it does still happen in some usages.\r\n\r\n2. OCSP - clients query OCSP for the status of a certificate.\r\n\r\n3.  AIA chasing - this is where the TLS handshake doesn't include the full set of certificates required to validate the end-entity certificate, but the certificate includes a URL for that certificate.\r\n\r\nAIA itself is a multi-purpose field.  It can include multiple elements, one of which is the identity of an OCSP responder (the same one used in (2) above) and the other being the one used in (3).  It does not include CRL distribution points, as the text implies.", "submit_date": "2021-10-14", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6709", "doc-id": "RFC4862", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Abstract\r\n\r\n   This document specifies the steps a host takes in deciding how to\r\n   autoconfigure its interfaces in IP version 6.  The autoconfiguration\r\n   process includes generating a link-local address, generating global\r\n   addresses via stateless address autoconfiguration, and the Duplicate\r\n   Address Detection procedure to verify the uniqueness of the addresses\r\n   on a link.", "correct_text": "Abstract\r\n\r\n   This document specifies the steps a host takes in deciding how to\r\n   autoconfigure its interfaces in IP version 6.  The autoconfiguration\r\n   process includes generating a link-local address, generating global\r\n   addresses via stateless address autoconfiguration (SLAAC), and the Duplicate\r\n   Address Detection procedure to verify the uniqueness of the addresses\r\n   on a link.", "notes": "IPv6 Stateless Address Autoconfiguration is very widely known by the acronym SLAAC, yet surprisingly that acronym doesn't appear anywhere in RFC4862. It would be best to include and use it in a future update to RFC4862.\r\n\r\n--- notes ---\r\n\r\nPer the erratum guidelines, marking HFDU as technically this \"is not a necessary update to the RFC.\"  Nevertheless, I do agree it's surprising that SLAAC doesn't get a mention.", "submit_date": "2021-10-14", "submitter_name": "Mark Smith", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-10-17 04:01:24"}, {"errata_id": "6710", "doc-id": "RFC8095", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.11.1", "orig_text": "Error detection and verification of the protocol control information\r\nrelies on the on the underlying transport (e.g., UDP checksum).", "correct_text": "Error detection and verification of the protocol control information\r\nrelies on the underlying transport (e.g., UDP checksum).", "notes": "There is a redundant \"on the\".", "submit_date": "2021-10-15", "submitter_name": "Jie Zhang", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-27 23:26:15"}, {"errata_id": "6711", "doc-id": "RFC9126", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.", "orig_text": "   Clients MAY use the \"request\" parameter as defined in JAR [RFC9101]\r\n   to push a Request Object JWT to the authorization server.  The rules\r\n   for processing, signing, and encryption of the Request Object as\r\n   defined in JAR [RFC9101] apply.  Request parameters required by a\r\n   given client authentication method are included in the \"application/\r\n   x-www-form-urlencoded\" request directly and are the only parameters\r\n   other than \"request\" in the form body (e.g., mutual TLS client\r\n   authentication [RFC8705] uses the \"client_id\" HTTP request parameter,\r\n   while JWT assertion-based client authentication [RFC7523] uses\r\n   \"client_assertion\" and \"client_assertion_type\").  All other request\r\n   parameters, i.e., those pertaining to the authorization request\r\n   itself, MUST appear as claims of the JWT representing the\r\n   authorization request.", "correct_text": "  Clients MAY use the request and client_id parameters as defined in \r\n  JAR [RFC9101] to push a Request Object JWT to the authorization \r\n  server. The rules for processing, signing, and encryption of the \r\n  Request Object as defined in JAR [RFC9101] apply. Request parameters\r\n  required by a given client authentication method are included in the\r\n  application/x-www-form-urlencoded request directly and are the only \r\n  parameters other than request and client_id in the form body (e.g.,\r\n  JWT assertion-based client authentication [RFC7523] uses \r\n  \"client_assertion\" and \"client_assertion_type\") HTTP request\r\n  parameters). All authorization request parameters, i.e., those \r\n  pertaining to the authorization request itself, MUST appear as\r\n  claims of the JWT representing the authorization request.", "notes": "That first paragraph of Sec 3 was not properly updated to come inline with JAR (now RFC9101) when it changed in draft -21 to require \"client_id\" in the authorization request in addition to in addition to \"request\" or \"request_uri\" - so is  somewhat ambiguous in maybe suggesting that \"client_id\" isn't required. But it is required based on how PAR works and RFC9101 requiring \"client_id\".", "submit_date": "2021-10-15", "submitter_name": "Brian Campbell", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6716", "doc-id": "RFC8995", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.8.3", "orig_text": "A registrar MAY be configured to ignore (i.e., override\r\nthe above policy) the history of the device, but it is RECOMMENDED\r\nthat this only be configured if hardware-assisted (i.e., Transport\r\nPerformance Metrics (TPM) anchored) Network Endpoint Assessment (NEA)\r\n[RFC5209] is supported.", "correct_text": "A registrar MAY be configured to ignore (i.e., override\r\nthe above policy) the history of the device, but it is RECOMMENDED\r\nthat this only be configured if hardware-assisted (i.e., Trusted \r\nPlatform Module (TPM) anchored) Network Endpoint Assessment (NEA)\r\n [RFC5209] is supported.", "notes": "The logical expansion of 'TPM' in this parenthetical example is the Trusted Platform Module.", "submit_date": "2021-10-19", "submitter_name": "Max Pritikin", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-10-19 23:22:11"}, {"errata_id": "6713", "doc-id": "RFC865", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "TCP Based Character Generator Service\r\n[and]\r\nUDP Based Character Generator Service", "correct_text": "TCP Based Quote of the Day Service\r\n[and]\r\nUDP Based Quote of the Day Service", "notes": "RFC 865 was probably written by taking RFC 864 (for the chargen protocol) and replacing \"Character Generator\" with \"Quote of the Day\", but these two section titles were missed.", "submit_date": "2021-10-17", "submitter_name": "Edwin Balani", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-01-12 12:04:12"}, {"errata_id": "8559", "doc-id": "RFC9292", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.6", "orig_text": "invalid messages.  A recipient MUST treat a message that contains\r\nfield values that would cause an HTTP/2 message to be malformed\r\naccording to Section 8.2.1 of [HTTP/2] as invalid; see Section 4.", "correct_text": "invalid messages.  A recipient MUST treat a message that contains\r\nfield names or values that would cause an HTTP/2 message to be\r\nmalformed according to Section 8.2.1 of [HTTP/2] as invalid; see\r\nSection 4.", "notes": "Calling out field name handling explicitly since encoding and decoding entities might be using different versions of HTTP.\r\n\r\nAn additional section explaining encoder and decoder expectations might be useful as well, something like the following: \"To ensure interoperability where communicating entities use different HTTP versions, encoders MUST convert field names to lowercase upon encoding. Decoders MUST treat any uppercase field names as an error.\"", "submit_date": "2025-08-29", "submitter_name": "Ricardo Perez", "verifier_id": "", "verifier_name": "Mike Bishop", "update_date": "2026-03-10 13:49:28"}, {"errata_id": "6725", "doc-id": "RFC3376", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.4", "orig_text": "8.4. Group Membership Interval\r\n\r\n   The Group Membership Interval is the amount of time that must pass\r\n   before a multicast router decides there are no more members of a\r\n   group or a particular source on a network.\r\n\r\n   This value MUST be ((the Robustness Variable) times (the Query\r\n   Interval)) plus (one Query Response Interval).\r\n\r\n", "correct_text": "8.4. Group Membership Interval\r\n\r\n   The Group Membership Interval is the amount of time that must pass\r\n   before a multicast router decides there are no more members of a\r\n   group or a particular source on a network.\r\n\r\n   This value MUST be ((the Robustness Variable) times (the Query\r\n   Interval)) plus (2 * Query Response Interval).", "notes": "A router resuming querier role (when current querier dies off) waits for other querier timer value to be expired. This value is ((the Robustness Variable) times (the Query Interval)) plus (one half of one Query Response Interval). This value by default comes as (2 * 125 + 10/2) = 255. Whereas GMI comes as (2 * 125 + 10) = 260. A group learnt with this value will have its group timer value set to expire from anywhere from 260 + 10 (min 260, max 270 due to random response from host in the interval of max response time delay after a query). Now a new router resuming a querier role will generate query after 255 sec. At this point of time the group timer left will be in the range of (260 - 255) 5sec to (270 - 255 ) 15sec. Since the query response can come anywhere between 10sec, Groups whose timer value is less will expire and will result in traffic drop. Therefore it is recommended to increase the default GMI value by one extra Query Response Interval. That is - ((the Robustness Variable) times (the Query\r\n   Interval)) plus (2 * Query Response Interval).\r\n\r\n====\r\nAD Notes:\r\n\r\nI am changing the status of this report to Held for Document Update.  The WG is discussing what the best way to address it is:  https://mailarchive.ietf.org/arch/msg/pim/Im8go1fjyVad7jyhGg1bgnW93qM/\r\n", "submit_date": "2021-10-27", "submitter_name": "Nasir Ahmed", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-01-31 13:06:42"}, {"errata_id": "6724", "doc-id": "RFC7117", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2.2.4", "orig_text": "   If the received Inter-AS A-D route carries the PMSI Tunnel attribute\r\n   with the Tunnel Identifier set to RSVP-TE P2MP LSP, then the ASBR\r\n   that originated the route MUST establish an RSVP-TE P2MP LSP with the\r\n   local PE/ASBR as a leaf.  This LSP MAY have been established before\r\n   the local PE/ASBR receives the route, or it MAY be established after\r\n   the local PE receives the route.\r\n", "correct_text": "   If the received Inter-AS A-D route carries the PMSI Tunnel attribute\r\n   with the Tunnel Type set to RSVP-TE P2MP LSP, then the ASBR\r\n   that originated the route MUST establish an RSVP-TE P2MP LSP with the\r\n   local PE/ASBR as a leaf.  This LSP MAY have been established before\r\n   the local PE/ASBR receives the route, or it MAY be established after\r\n   the local PE receives the route.\r\n", "notes": "There is a defined Tunnel Type for RSVP-TE P2MP LSP, whereas the Tunnel Identifier field has a more complicated structure that depends on the Tunnel Type.", "submit_date": "2021-10-26", "submitter_name": "Benjamin Kaduk", "verifier_id": "", "verifier_name": "Andrew Alston", "update_date": "2022-05-26 13:36:15"}, {"errata_id": "7579", "doc-id": "RFC7919", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "The primes in these finite field groups are all safe primes; that is,\r\na prime p is a safe prime when q = (p-1)/2 is also prime.  Where e is\r\nthe base of the natural logarithm and square brackets denote the\r\nfloor operation, the groups that initially populate this registry are\r\nderived for a given bit length b by finding the lowest positive\r\ninteger X that creates a safe prime p where:\r\n\r\n p = 2^b - 2^{b-64} + {[2^{b-130} e] + X } * 2^64 - 1\r\n", "correct_text": "The primes in these finite field groups are all safe primes; that is,\r\na prime p is a safe prime when q = (p-1)/2 is also prime.  Where e is\r\nthe base of the natural logarithm and square brackets denote the\r\nfloor operation, the groups that initially populate this registry are\r\nderived for a given bit length b by finding the lowest positive\r\ninteger X that creates a safe prime p where:\r\n\r\n p = 2^b - 2^{b-64} + {[2^{b-130} * e] + X } * 2^64 - 1\r\n", "notes": "The multiplication sign ('*' in ASCII) is missing in the explanatory introduction of Appendix A that describes the equation used for deriving the primes. It is correct in all five concrete derivations A.1 through A.5", "submit_date": "2023-07-31", "submitter_name": "Tim Geiser", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-21 03:30:27"}, {"errata_id": "6730", "doc-id": "RFC8175", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12.4", "orig_text": "The Peer Offer Signal completes the discovery process; see Section 7.1.", "correct_text": "The UDP source port and destination port MUST be set to the UDP destination port and source port, respectively, of the UDP packet containing the associated Peer Discovery Signal. The Peer Offer Signal completes the discovery process; see Section 7.1.", "notes": "The original text did not specify any requirement about the source or destination UDP port number of the Peer Offer signal.\n --VERIFIER NOTES-- \nWhile this is a valid report, it is a duplicate of Errata ID: 6472.  I am then marking this one as Rejected.", "submit_date": "2021-11-03", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-11-05 21:25:13"}, {"errata_id": "6731", "doc-id": "RFC8175", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "12.4", "orig_text": "The Peer Offer Signal completes the discovery process; see Section 7.1.", "correct_text": "The UDP source port and destination port MUST be set to the UDP destination port and source port, respectively, of the UDP packet containing the associated Peer Discovery Signal. The Peer Offer Signal completes the discovery process; see Section 7.1.", "notes": "The original text did not specify any requirement about the source or destination UDP port number of the Peer Offer signal.\n --VERIFIER NOTES-- \n While this is a valid report, it is a duplicate of Errata ID: 6472.  I am then marking this one as Rejected.", "submit_date": "2021-11-03", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2021-11-05 21:25:36"}, {"errata_id": "6732", "doc-id": "RFC7285", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "15.3.2", "orig_text": "HTTP Digestion Authentication", "correct_text": "HTTP Digest Authentication", "notes": "I'm classifying this as editorial because the correction is so obvious; feel free to reclassify it.", "submit_date": "2021-11-06", "submitter_name": "Samuel Weiler", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-27 23:44:58"}, {"errata_id": "6753", "doc-id": "RFC8664", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "If the F bit is set to zero\r\n      (see below), then the NT field has no meaning and MUST be ignored\r\n      by the receiver. ", "correct_text": "If the F bit is set to one\r\n      (see below), then the NT field has no meaning and MUST be ignored\r\n      by the receiver. ", "notes": "Later it says, when this F bit is set to 1, the NAI value is absent, so the NT field has no meaning. \r\n     F:   When this bit is set to 1, the NAI value in the subobject\r\n           body is absent.  The F bit MUST be set to 1 if NT=0;\r\n           otherwise, it MUST be set to zero.  The S and F bits MUST NOT\r\n           both be set to 1.", "submit_date": "2021-11-25", "submitter_name": "Shuping Peng", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-01-10 21:14:47"}, {"errata_id": "6734", "doc-id": "RFC4470", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "   The first of these NSEC RRs proves that no exact match for\r\n   foo.example.com exists, and the second proves that there is no\r\n   wildcard in example.com.\r\n", "correct_text": "TBD", "notes": "\"the second proves that there is no wildcard in example.com\" is incorrect.\r\n\r\n\\)\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\r\n     \\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\r\n     \\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\r\n     \\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\\255\r\n     \\255\\255.example.com 3600 IN NSEC \\000.*.example.com ( NSEC RRSIG )\r\n\r\nActually proves that *.example.com exists as it is part of the next field.  It is an empty non-terminal wildcard.  '\\000.domain' can only be used to prove no data  exists at 'domain', not that 'domain' doesn't exist.", "submit_date": "2021-11-12", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6743", "doc-id": "RFC8214", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "          Ethernet                                          Ethernet\r\n          Native   |<--------- EVPN Instance ----------->|  Native\r\n          Service  |                                     |  Service\r\n          (AC)     |     |<-PSN1->|       |<-PSN2->|     |  (AC)\r\n             |     V     V        V       V        V     V  |\r\n             |     +-----+      +-----+  +-----+   +-----+  |\r\n      +----+ |     | PE1 |======|ASBR1|==|ASBR2|===| PE3 |  |    +----+\r\n      |    |-------+-----+      +-----+  +-----+   +-----+-------|    |\r\n      | CE1| |                                              |    |CE2 |\r\n      |    |-------+-----+      +-----+  +-----+   +-----+-------|    |\r\n      +----+ |     | PE2 |======|ASBR3|==|ASBR4|===| PE4 |  |    +----+\r\n           ^       +-----+      +-----+  +-----+   +-----+          ^\r\n           |   Provider Edge 1        ^        Provider Edge 2      |\r\n           |                          |                             |\r\n           |                          |                             |\r\n           |              EVPN Inter-provider point                 |\r\n           |                                                        |\r\n           |<---------------- Emulated Service -------------------->|\r\n\r\n                   Figure 3: EVPN-VPWS Deployment Model\r\n", "correct_text": "          Ethernet                                          Ethernet\r\n          Native   |<--------- EVPN Instance ----------->|  Native\r\n          Service  |                                     |  Service\r\n          (AC)     |     |<-PSN1->|       |<-PSN2->|     |  (AC)\r\n             |     V     V        V       V        V     V  |\r\n             |     +-----+      +-----+  +-----+   +-----+  |\r\n      +----+ |     | PE1 |======|ASBR1|==|ASBR2|===| PE3 |  |    +----+\r\n      |    |-------+-----+      +-----+  +-----+   +-----+-------|    |\r\n      | CE1| |                                              |    |CE2 |\r\n      |    |-------+-----+      +-----+  +-----+   +-----+-------|    |\r\n      +----+ |     | PE2 |======|ASBR3|==|ASBR4|===| PE4 |  |    +----+\r\n           ^       +-----+      +-----+  +-----+   +-----+       ^\r\n           |   Provider Edge 1        ^        Provider Edge 2   |\r\n           |                          |                          |\r\n           |                          |                          |\r\n           |              EVPN Inter-provider point              |\r\n           |                                                     |\r\n           |<---------------- Emulated Service ----------------->|\r\n\r\n                   Figure 3: EVPN-VPWS Deployment Model\r\n", "notes": "The right-hand end of the Emulated Service should be aligned with the provider-facing AC port on CE2 and not  placed in the middle of CE2.\r\nAlthough this may appear to be a minor editorial issue, the technical consequences are significant.", "submit_date": "2021-11-19", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Andrew Alston", "update_date": "2022-05-26 14:20:50"}, {"errata_id": "6745", "doc-id": "RFC6555", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.6", "orig_text": "   Web browsers implement a same-origin policy [RFC6454] that causes\r\n   subsequent connections to the same hostname to go to the same IPv4\r\n   (or IPv6) address as the previous successful connection.  This is\r\n   done to prevent certain types of attacks.\r\n\r\n   The same-origin policy harms user-visible responsiveness if a new\r\n   connection fails (e.g., due to a transient event such as router\r\n   failure or load-balancer failure).  While it is tempting to use Happy\r\n   Eyeballs to maintain responsiveness, web browsers MUST NOT change\r\n   their same-origin policy because of Happy Eyeballs, as that would\r\n   create an additional security exposure.", "correct_text": "<This section should be removed>", "notes": "This entire section should be deleted.  Same-Origin policy has nothing to do with what IP connections to the same hostname go to.  Two connections to the same host are same origin even if they're using different IPs.  Happy Eyeballs is free to use whatever IP for a hostname it wants for an origin, and Same-Origin policy will not be violated.\r\n\r\n\r\n[ Edit (WK) ]: I am rejecting  this Errata because this RFC has been Obsoleted by RFC8305 - \"Happy Eyeballs Version 2: Better Connectivity Using Concurrency\", which does not contain this text. \n --VERIFIER NOTES-- \n   ", "submit_date": "2021-11-19", "submitter_name": "Matthew Menke", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-15 19:15:45"}, {"errata_id": "6746", "doc-id": "RFC6350", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "TZ:-0500", "correct_text": "TZ;VALUE=utc-offset:-0500\r\nor\r\nTZ:EST", "notes": "As specified in section 6.5.1.: \"The default is a single text value. It can also be reset to a single URI or utc-offset value.\" Accordingly, the \"utc-offset\" value data-type should be explicitely set or the property value should be interpreted as text.\r\n\r\nThe section 6.5.1. further states that \"utc-offset values SHOULD NOT be used\" so probably using the timezone as an example is more consistent.", "submit_date": "2021-11-19", "submitter_name": "b4D8", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6751", "doc-id": "RFC8913", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   Please note that the backslash ('\\') character near the end of the\r\n   diagram is used for formatting purposes only (i.e.,\r\n   \"reflector-udp-port]\" should be treated as part of the same line as\r\n   \"[sender-ip sender-udp-port reflector-ip\").", "correct_text": "   Please note that the backslash ('\\') character near the end of the\r\n   diagram is used for formatting purposes only (i.e.,\r\n   \"reflector-udp-port]\" should be treated as part of the same line as\r\n   \"[sender-ip sender-udp-port reflector-ip]\").", "notes": "Omitted character ']' at the end of a sentence.\n --VERIFIER NOTES-- \nThe original is correct. It explains how the following entry was broken across two lines due to line-length constraints:\r\n\r\n           +--ro test-session*\r\n                   [sender-ip sender-udp-port reflector-ip \\\r\n                    reflector-udp-port]  ", "submit_date": "2021-11-23", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-21 17:54:22"}, {"errata_id": "7321", "doc-id": "RFC916", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.3", "orig_text": "If SYN was set we assume that the other end crashed and has\r\nattempted to open a new connection.  We respond by sending a\r\nlegal reset:\r\n\r\n   <SN=received AN><AN=received SN+1 modulo 2><CTL=RST, ACK>\r\n\r\nThis will cause the other end, currently in the SYN-SENT state,\r\nto close.  Flush the retransmission queue, inform the user\r\n\"Error: Connection reset\", discard the packet, delete the TCB,\r\nand go to the CLOSED state without any further processing.\r\n\r\nIf neither RST, FIN, nor SYN flags were set it is assumed that\r\nthis packet is a duplicate of one already received.  Send an\r\nACK back:\r\n", "correct_text": "If the SYN flag was set but the ACK was not set then we assume\r\nthat the other end crashed and has attempted to open a new connection.\r\nWe respond by sending a legal reset:\r\n\r\n   <SN=received AN><AN=received SN+1 modulo 2><CTL=RST, ACK>\r\n\r\nThis will cause the other end, currently in the SYN-SENT state,\r\nto close.  Flush the retransmission queue, inform the user\r\n\"Error: Connection reset\", discard the packet, delete the TCB,\r\nand go to the CLOSED state without any further processing.\r\n\r\nIf neither RST nor FIN flags were set, or if SYN and ACK flags\r\nwere set, it is assumed that this packet is a duplicate of one\r\nalready received.  Send an ACK back:\r\n", "notes": "Side A                                             Side B\r\n1. CLOSED                                          LISTEN\r\n2. [OPEN request]\r\n   SYN_SENT    -->  <SN=0><CTL=SYN>            --> SYN_RECEIVED\r\n3. ESTABLISHED <--  <SN=0><AN=1><CTL=SYN,ACK>  <--\r\n4.             -->  <SN=1><AN=0><CTL=ACK>      ...\r\n5.             ...  <SN=0><AN=1><CTL=SYN,ACK>  <-- (retransmit)\r\n6. (packet sent by A at 4. finally arrives to B)\r\n               ...                             --> ESTABLISHED\r\n7. (packet resent by B at 5. finally arrives to A)\r\n   CLOSED (C2) <--                             ...\r\n8.             -->  <SN=1><AN=1><CTL=RST>      --> (connection reset)\r\n\r\nThe Figure above illustrate the current issue RATP can face during the\r\nthree-way handshake, and how behavior C2 can cause a connection to be\r\nclosed immediately after being established.\r\n\r\nIn the Figure above, side A try to establish a connection with side B,\r\nwhich is in the LISTEN state.  Commented line:\r\n 1. side A is in the CLOSED state and side B is in the LISTEN state;\r\n 2. side A open a new connection and send a SYN packet and is received by\r\n    side B which enters the SYN_RECEIVED state and send back a SYN-ACK;\r\n 3. side A receive the SYN-ACK packet from B;\r\n 4. side A respond with an ACK packet and move to the ESTABLISHED state.\r\n    Meanwhile;\r\n 5. side B hasn't received yet the ACK from side A and decide to\r\n    retransmit the SYN-ACK packet;\r\n 6. side B finally receive the ACK from side A and move to the\r\n    ESTABLISHED state;\r\n 7. side A finally receive the duplicated SYN-ACK packet from side B,\r\n    execute behavior C2: the received packet doesn't have the expected\r\n    SN and has the SYN flag set, thus respond by sending a legal reset.\r\n 8. side B receive the reset and close the connection.\r\n\r\nOne solution could be to tweak the initial RTO value of side B in order\r\nto prevent sending a duplicated SYN-ACK packet, however the initial RTT\r\nvalue is likely inaccurate during the handshake.  This solution seems a\r\nbit brittle.\r\n\r\nThe second solution would be to consider that a host has crashed only if\r\nthe packet received has the SYN flag set but not the ACK flag.  The\r\nrational is that the first step during handshake is to send a packet\r\nonly containing the SYN flag, however a packet containing both ACK and\r\nSYN flags must have come after the initial handshake exchange and can\r\nbe considered as a duplicated and be dropped.\r\n\r\nI propose the following changes:\r\n[Page 29]\r\n- If SYN was set we assume that the other end crashed and has\r\n- attempted to open a new connection.  We respond by sending a\r\n- legal reset:\r\n+ If the SYN flag was set but the ACK was not set then we assume\r\n+ that the other end crashed and has attempted to open a new connection.\r\n+ We respond by sending a legal reset:\r\n\r\n[Page 30]\r\n- If neither RST, FIN, nor SYN flags were set it is assumed that\r\n- this packet is a duplicate of one already received.  Send an\r\n- ACK back:\r\n+ If neither RST nor FIN flags were set, or if SYN and ACK flags\r\n+ were set, it is assumed that this packet is a duplicate of one\r\n+ already received.  Send an ACK back:", "submit_date": "2023-01-25", "submitter_name": "Jules Maselbas", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7322", "doc-id": "RFC7644", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.4.2.2", "orig_text": "    valFilter = attrExp / logExp / *1\"not\" \"(\" valFilter \")\"", "correct_text": "    valFilter = attrExp / valLogExp / *1\"not\" \"(\" valFilter \")\"\r\n\r\n    valLogExp = valFilter SP (\"and\" / \"or\") SP valFilter", "notes": "This is a correction to Errata 4690 for this RFC. Errata 4690 introduced the following `valLogExp`:\r\n\r\n    valLogExp = attrExp SP (\"and\" / \"or\") SP attrExp\r\n\r\nHowever, this fails to allow the following filter expression:\r\n\r\n    emails[type eq \"work\" or (type eq \"home\" and value ew \"@example.com\")]\r\n\r\nbecause 4690's `valLogExp`'s recursion into `attrExp` would not allow for the parenthetical expression. The fixed `valLogExp` correctly recurs back into `valFilter` to allow for an `attrExp`, or a joined `logExp`, or a parenthtical.\r\n\r\nWhile this example is not in the list of other exceptions in Section 3.4.2.2, the original use of `logExp` and the recurred `FILTER` would suggest that this example is within the original intent of the document.", "submit_date": "2023-01-26", "submitter_name": "James Linnell", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6752", "doc-id": "RFC9134", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "As specified in [RFC3550] and [RFC4175], the RTP timestamp\r\ndesignates the sampling instant of the first octet of the video\r\nframe to which the RTP packet belongs.  Packets SHALL NOT include\r\ndata from multiple video frames, and all packets belonging to the\r\nsame video frame SHALL have the same timestamp.  Several\r\nsuccessive RTP packets will consequently have equal timestamps if\r\nthey belong to the same video frame (that is until the marker bit\r\nis set to 1, marking the last packet of the video frame), and the\r\ntimestamp is only increased when a new video frame begins.", "correct_text": "As specified in [RFC3550] and [RFC4175], the RTP timestamp\r\ndesignates the sampling instant of the first octet of the video\r\nframe/field to which the RTP packet belongs.  Packets SHALL NOT include\r\ndata from multiple video frames/fields, and all packets belonging to the\r\nsame video frame/field SHALL have the same timestamp.  Several\r\nsuccessive RTP packets will consequently have equal timestamps if\r\nthey belong to the same video frame/field (that is until the marker bit\r\nis set to 1, marking the last packet of the video frame/field), and the\r\ntimestamp is only increased when a new video frame/field begins.", "notes": "This RFC follows RFC4175 (and also SMPTE2110) for timestamping RTP packets. The intent has always been to have unique timestamps per progressive video frame and/or per interlaced video field (two fields of a frame MUST be allowed to have different timestamps). This is correctly reflected by the marker bit (M) that is used to indicate the last packet of a frame/field (which is correctly explained in this RFC). However, the accompanied text about the timestamp in section 4.2 does not properly formulate this for the interlaced mode case (it was an editorial oversight), which can cause confusion to implementers of this RFC.", "submit_date": "2021-11-24", "submitter_name": "Tim Bruylants", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-11-08 08:42:12"}, {"errata_id": "6702", "doc-id": "RFC4226", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "The Key (K), the Counter (C), and Data values are hashed high-order byte first.", "correct_text": "When hashing, the Key (K) value is provided in little-endian format while the Counter (C) value is in big-endian format.", "notes": "This byte reversal for the Counter (movingFactor) value is indeed demonstrated in the RFC's reference implementation code within Appendix C but this fact is not mentioned within RFC text body.\r\n\r\n byte[] text = new byte[8];\r\n           for (int i = text.length - 1; i >= 0; i--) {\r\n               text[i] = (byte) (movingFactor & 0xff);\r\n               movingFactor >>= 8;\r\n           }\r\n\r\n\r\nThis specific issue is called out in a related wikipedia article: \r\nhttps://en.wikipedia.org/wiki/HMAC-based_one-time_password: \"counter must be big endian\"\r\n\r\n\r\nThis can also be verified by looking at archived source of Google Authenticator on GitHub: https://github.com/google/google-authenticator/blob/51781910ae2bb1abf8ac51b290272f86f3651235/mobile/ios/Classes/OTPGenerator.m\r\n\r\nRelated code snippet:\r\n(counter = NSSwapHostLongLongToBig(counter);)\r\n\r\n\r\nFreeOTP also reverses the byte order of the counter\r\nhttps://github.com/freeotp/freeotp-android/blob/eb2f12f33a38235433fd83e0ad3eb15affae871f/app/src/main/java/org/fedorahosted/freeotp/Token.java\r\n\r\ncode comment \"// Encode counter in network byte order\"\r\nThe code uses a Byte buffer which defaults to big_endian order.", "submit_date": "2021-10-03", "submitter_name": "Darian Miller", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6754", "doc-id": "RFC6512", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "PE1 also has this Inter-AS I-PMSI A-D route.", "correct_text": "PE1 also has this Intra-AS I-PMSI A-D route.", "notes": "\"PE1 also has this route\" refers to \"Although ASBR1 does not have a route to PE2, it does have a BGP Intra-AS Inclusive PMSI (I-PMSI) auto-discovery (A-D) route\". Intra-AS mechanisms are used for auto-discovery/binding for Non-Segmented Inter-AS Tunnels.", "submit_date": "2021-11-25", "submitter_name": "Bert Van Ael", "verifier_id": "", "verifier_name": "James N Guichard", "update_date": "2023-05-31 17:58:29"}, {"errata_id": "6758", "doc-id": "RFC8912", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4.2", "orig_text": "   Percent_LossRatio:  The numeric value of the result is expressed in\r\n      units of lost packets to total packets times 100%, as a positive\r\n      value of type decimal64 with fraction digits = 9 (see Section 9.3\r\n      of [RFC6020]) with a resolution of 0.0000000001.\r\n\r\n", "correct_text": "   Percent_LossRatio:  The numeric value of the result is expressed in\r\n      units of lost packets to total packets times 100%, as a positive\r\n      value of type decimal64 with fraction digits = 9 (see Section 9.3\r\n      of [RFC6020]) with a resolution of 0.000000001.\r\n\r\n", "notes": "An extra 0 in the value of the resolution of the loss ratio.\r\n\r\nThe error is repeated in sections 7.4.2.6, 8.4.2.6, 9.4.2.4", "submit_date": "2021-11-28", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-12-01 17:10:56"}, {"errata_id": "6762", "doc-id": "RFC8912", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "10.1.4", "orig_text": "   RTLoss:  This metric assesses the estimated loss count for TCP\r\n      packets constituting a single connection, exchanged between two\r\n      hosts.  We consider the measurement of round-trip delay based on a\r\n      single OP [RFC7011] somewhere in the network.  The output is the\r\n      estimated loss count for the measurement interval.\r\n", "correct_text": "   RTLoss:  This metric assesses the estimated loss count for TCP\r\n      packets constituting a single connection, exchanged between two\r\n      hosts.  We consider the measurement of loss count based on a\r\n      single OP [RFC7011] somewhere in the network.  The output is the\r\n      estimated loss count for the measurement interval.\r\n", "notes": "This is where loss count is measured, not round-trip delay.\n --VERIFIER NOTES-- \nFrom Al Morton: Sorry, but the original text is correct. In this case we have a RT loss *estimate* conducted in the context of (and using the same packets as) the RT Delay measurements described for TCP. We considered this text carefully before publication.", "submit_date": "2021-11-30", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2021-11-30 23:17:01"}, {"errata_id": "7323", "doc-id": "RFC9051", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.4.4.", "orig_text": "        S: B283 NO [BADCHARSET UTF-8] KOI8-R is not supported\r\n", "correct_text": "        S: B283 NO [BADCHARSET (KOI8-R)] KOI8-R is not supported\r\n", "notes": "The BADCHARSET response code is described in 7.1 as \"Optionally followed by a parenthesized list of charsets\", and in the formal syntax as:\r\n\r\n   resp-text-code =/ \"BADCHARSET\" [SP \"(\" charset *(SP charset) \")\" ]\r\n\r\nAlthough a client's parser might use a generic resp-text-code (atom [SP 1*<any TEXT-CHAR except \"]\">]) as a fallback, the server should parenthesize even when only one charset is sent.", "submit_date": "2023-01-26", "submitter_name": "Nicholas Evans", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-07-28 00:16:02"}, {"errata_id": "6761", "doc-id": "RFC7686", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "   5.  Authoritative DNS Servers: Authoritative servers MUST respond to\r\n       queries for .onion with NXDOMAIN.\r\n\r\n   6.  DNS Server Operators: Operators MUST NOT configure an\r\n       authoritative DNS server to answer queries for .onion.  If they\r\n       do so, client software is likely to ignore any results (see\r\n       above).", "correct_text": "   5.  Authoritative DNS Servers: Authoritative servers SHOULD NOT\r\n       recognize .onion names as special and MUST NOT treat queries for\r\n       .onion names differently from other queries.\r\n\r\n   6.  DNS Server Operators: Operators MUST NOT configure an\r\n       authoritative DNS server to answer authoritatively to queries for names in .onion.  If they\r\n       do so, client software is likely to ignore any results (see\r\n       above).", "notes": "The original text for 5 and 6 is conflicting. A name server cannot respond with NXDOMAIN (which is an authoritative answer) without having a zone configured to serve that NXDOMAIN from. Clearly the intent of the text is that clients will not find authoritative answers to .onion queries anywhere in the DNS.\r\n\r\n===Verifier note\r\n\r\nsee https://mailarchive.ietf.org/arch/msg/dnsop/S2mQZ83THHjV0z8A2iXAtG8Vrpc/", "submit_date": "2021-11-29", "submitter_name": "Peter van Dijk", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-06-11 04:24:54"}, {"errata_id": "6763", "doc-id": "RFC8239", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "Last iteration: Ingress port 1 sending line rate to egress\r\nport 2, ingress port 3 sending line rate to egress port 4, etc.\r\nIngress port N-1 and port N will oversubscribe, at 1% of line\r\nrate, egress port N-3 and port N-2, respectively. Measure the\r\nbuffer size value by multiplying the number of extra frames\r\nsent by the frame size for each egress port.", "correct_text": "Last iteration: Ingress port 1 sending line rate to egress\r\nport 2, ingress port 3 sending line rate to egress port 4, etc.\r\nIngress port N-1 and port N will oversubscribe, at 1% of line\r\nrate, egress port N-4 and port N-3, respectively. Measure the\r\nbuffer size value by multiplying the number of extra frames\r\nsent by the frame size for each egress port.", "notes": "If\r\n#1, 1->2, 3->4, 5->6, 7->8, ... and N-1->2, N->3\r\n#2, 1->2, 3->4, 5->6, 7->8, ... and N-1->4, N->5\r\n\r\nThen\r\n#last, 1->2, 3->4, 5->6, 7->8, ... and N-1->N-4, N->N-3\r\n\r\nOtherwise, the general equation won't satisfy #1 and #2\n --VERIFIER NOTES-- \n   Per https://mailarchive.ietf.org/arch/msg/bmwg/gILuO-tG7uTC_ve5kfYyJSo-7h4/", "submit_date": "2021-11-30", "submitter_name": "Leonard Yu", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-28 17:37:04"}, {"errata_id": "6772", "doc-id": "RFC8552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   Only global underscored node names are registered in the \"Underscored\r\n   and Globally Scoped DNS Node Names\" registry.  From the example\r\n   above, that would mean _service1, _service2, _service3, _service 4,\r\n   and _authority would be listed in the IANA registry.", "correct_text": "   Only global underscored node names are registered in the \"Underscored\r\n   and Globally Scoped DNS Node Names\" registry.  From the example\r\n   above, that would mean _service1, _service2, _service3, _service4,\r\n   and _authority would be listed in the IANA registry.", "notes": "Typographical error with an unwanted space character between \"_service\" and \"4\"", "submit_date": "2021-12-03", "submitter_name": "Robert Royals", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-12-06 23:11:24"}, {"errata_id": "7324", "doc-id": "RFC8881", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.3", "orig_text": "   FH4_VOL_RENAME  The filehandle will expire during rename.  This\r\n      includes a rename by the requesting client or a rename by any\r\n      other client.  If FH4_VOL_ANY is set, FH4_VOL_RENAME is redundant.", "correct_text": "   FH4_VOL_RENAME  The filehandle will expire during rename.  This\r\n      includes a rename by the requesting client or a rename by any\r\n      other client.  If FH4_VOLATILE_ANY is set, FH4_VOL_RENAME\r\n      is redundant.", "notes": "FH4_VOL_ANY is not defined in this document. It should be FH4_VOLATILE_ANY", "submit_date": "2023-01-29", "submitter_name": "YangJing", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-01-30 20:37:30"}, {"errata_id": "6800", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.4", "orig_text": "                                    In the case where one of the\r\n   alternatives is itself of type \"multipart\" and contains unrecognized\r\n   sub-parts, the user agent may choose either to show that alternative,\r\n   an earlier alternative, or both.\r\n\r\n", "correct_text": "                                    In the case where one of the\r\n   alternatives is itself of type \"multipart\" and contains unrecognized\r\n   sub-parts, the user agent may choose to either show that alternative,\r\n   show an earlier alternative, or let the user choose which alternative\r\n   to show.\r\n", "notes": "The quoted sentence conflicts with the following sentence later in the same section:\r\n\r\n                  What is most critical, however, is that the user not\r\n   automatically be shown multiple versions of the same data.  Either\r\n   the user should be shown the last recognized version or should be\r\n   given the choice.\r\n\r\nI assume the correction should be as proposed, but other options are conceivable.", "submit_date": "2021-12-27", "submitter_name": "Daniel Shahaf", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 20:38:45"}, {"errata_id": "6807", "doc-id": "RFC8572", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   When unencrypted, the ownership voucher artifact is as defined in\r\n   [RFC8366].  As described, it is a CMS structure whose topmost content\r\n   type MUST be the OID id-signedData (1.2.840.113549.1.7.2), whose\r\n   eContentType MUST be OID id-ct-animaJSONVoucher\r\n   (1.2.840.113549.1.9.16.1), or the OID id-data (1.2.840.113549.1.7.1).\r\n   When the OID id-data is used, the encoding (JSON, XML, etc.) SHOULD\r\n   be communicated externally.  In either case, the associated content\r\n   is an octet string containing ietf-voucher data in the expected\r\n   encoding.\r\n\r\n   When encrypted, the topmost content type of the ownership voucher\r\n   artifact's CMS structure MUST be the OID id-envelopedData\r\n   (1.2.840.113549.1.7.3), and the encryptedContentInfo's content type\r\n   MUST be the OID id-signedData (1.2.840.113549.1.7.2), whose\r\n   eContentType MUST be OID id-ct-animaJSONVoucher\r\n   (1.2.840.113549.1.9.16.1), or the OID id-data (1.2.840.113549.1.7.1).\r\n   When the OID id-data is used, the encoding (JSON, XML, etc.) SHOULD\r\n   be communicated externally.  In either case, the associated content\r\n   is an octet string containing ietf-voucher data in the expected\r\n   encoding.", "correct_text": "   When unencrypted, the ownership voucher artifact is as defined in\r\n   [RFC8366].  As described, it is a CMS structure whose topmost content\r\n   type MUST be the OID id-signedData (1.2.840.113549.1.7.2), whose\r\n   eContentType MUST be OID id-ct-animaJSONVoucher\r\n   (1.2.840.113549.1.9.16.1.40), or the OID id-data (1.2.840.113549.1.7.1).\r\n   When the OID id-data is used, the encoding (JSON, XML, etc.) SHOULD\r\n   be communicated externally.  In either case, the associated content\r\n   is an octet string containing ietf-voucher data in the expected\r\n   encoding.\r\n\r\n   When encrypted, the topmost content type of the ownership voucher\r\n   artifact's CMS structure MUST be the OID id-envelopedData\r\n   (1.2.840.113549.1.7.3), and the encryptedContentInfo's content type\r\n   MUST be the OID id-signedData (1.2.840.113549.1.7.2), whose\r\n   eContentType MUST be OID id-ct-animaJSONVoucher\r\n   (1.2.840.113549.1.9.16.1.40), or the OID id-data (1.2.840.113549.1.7.1).\r\n   When the OID id-data is used, the encoding (JSON, XML, etc.) SHOULD\r\n   be communicated externally.  In either case, the associated content\r\n   is an octet string containing ietf-voucher data in the expected\r\n   encoding.", "notes": "The OID for id-ct-animaJSONVoucher is 1.2.840.113549.1.9.16.1.40.\r\n\r\n --VERIFIER NOTES--\r\nAuthor verified errata is correct and also appears in http://oid-info.com/get/1.2.840.113549.1.9.16.1.40", "submit_date": "2022-01-04", "submitter_name": "Lijun Liao", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-06 21:25:21"}, {"errata_id": "6806", "doc-id": "RFC5912", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   pk-rsa PUBLIC-KEY ::= {\r\n    IDENTIFIER rsaEncryption\r\n    KEY RSAPublicKey\r\n    PARAMS TYPE NULL ARE absent\r\n    -- Private key format not in this module --\r\n    CERT-KEY-USAGE {digitalSignature, nonRepudiation,\r\n    keyEncipherment, dataEncipherment, keyCertSign, cRLSign}\r\n   }", "correct_text": "   pk-rsa PUBLIC-KEY ::= {\r\n    IDENTIFIER rsaEncryption\r\n    KEY RSAPublicKey\r\n    PARAMS TYPE NULL ARE required\r\n    -- Private key format not in this module --\r\n    CERT-KEY-USAGE {digitalSignature, nonRepudiation,\r\n    keyEncipherment, dataEncipherment, keyCertSign, cRLSign}\r\n   }", "notes": "Section 2.3.1 of RFC 3279 states \"(t)he parameters field MUST have ASN.1 type NULL for this algorithm identifier.\"", "submit_date": "2022-01-03", "submitter_name": "Carl Wallace", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2022-01-04 02:27:38"}, {"errata_id": "6768", "doc-id": "RFC8239", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "3) Measure maximum port pair buffer sizes.\r\n\r\n      o  First iteration: Ingress port 1 sending line rate to egress\r\n         port 2, ingress port 3 sending line rate to egress port 4, etc.\r\n         Ingress port N-1 and port N will oversubscribe, at 1% of line\r\n         rate, egress port 2 and port 3, respectively.  Measure the\r\n         buffer size value by multiplying the number of extra frames\r\n         sent by the frame size for each egress port.\r\n\r\n      o  Second iteration: Ingress port 1 sending line rate to egress\r\n         port 2, ingress port 3 sending line rate to egress port 4, etc.\r\n         Ingress port N-1 and port N will oversubscribe, at 1% of line\r\n         rate, egress port 4 and port 5, respectively.  Measure the\r\n         buffer size value by multiplying the number of extra frames\r\n         sent by the frame size for each egress port.\r\n\r\n      o  Last iteration: Ingress port 1 sending line rate to egress\r\n         port 2, ingress port 3 sending line rate to egress port 4, etc.\r\n         Ingress port N-1 and port N will oversubscribe, at 1% of line\r\n         rate, egress port N-3 and port N-2, respectively.  Measure the\r\n         buffer size value by multiplying the number of extra frames\r\n         sent by the frame size for each egress port.", "correct_text": "3) Measure maximum port pair buffer sizes.\r\n\r\n      o  First iteration: Ingress port 1 sending line rate to egress\r\n         port 2, ingress port 3 sending line rate to egress port 4, etc.\r\n         Ingress port N-1 and port N will oversubscribe, at 1% of line\r\n         rate, egress port 1 and port 2, respectively.  Measure the\r\n         buffer size value by multiplying the number of extra frames\r\n         sent by the frame size for each egress port.\r\n\r\n      o  Second iteration: Ingress port 1 sending line rate to egress\r\n         port 2, ingress port 3 sending line rate to egress port 4, etc.\r\n         Ingress port N-1 and port N will oversubscribe, at 1% of line\r\n         rate, egress port 3 and port 4, respectively.  Measure the\r\n         buffer size value by multiplying the number of extra frames\r\n         sent by the frame size for each egress port.\r\n\r\n      o  Last iteration: Ingress port 1 sending line rate to egress\r\n         port 2, ingress port 3 sending line rate to egress port 4, etc.\r\n         Ingress port N-1 and port N will oversubscribe, at 1% of line\r\n         rate, egress port N-3 and port N-2, respectively.  Measure the\r\n         buffer size value by multiplying the number of extra frames\r\n         sent by the frame size for each egress port.", "notes": "The oversubscribed ports are a pair of ingress and egress ports. The oversubscribed ports in the texts describing the first are port 2 & 3, which are incorrect, should be port 1 & 2. The oversubscribed ports in the texts describing the second are port 4 & 5, which are incorrect, should be port 3 & 4.\n --VERIFIER NOTES-- \n   See https://mailarchive.ietf.org/arch/msg/bmwg/LrV7P2Oc7ElYpOCxUtLQu3hxRLU/", "submit_date": "2021-12-01", "submitter_name": "Leonard Yu", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-28 17:33:06"}, {"errata_id": "6769", "doc-id": "RFC6376", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2", "orig_text": "An example of such an attack includes altering the MIME structure,\r\nexploiting lax HTML parsing in the MUA, and defeating duplicate\r\nmessage detection algorithms.\r\n", "correct_text": "In case of MIME structures, the value of l= should cover all of the\r\nbody, including the terminating boundary and the epilogue, so that\r\naltering the structure is not feasible.  In any case, if l= is set and\r\nContent-Type is not signed, an attacker can replace it with a multipart\r\ntype and thus relegate the original body to the role of a MIME preamble.\r\n", "notes": "Duplicate message detection algorithms should consider Message-ID.  When they compare the body, they should be sophisticated enough to recognize specific key fields, for example to avoid accumulating duplicate values of financial transactions.", "submit_date": "2021-12-01", "submitter_name": "Ale Vesely", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2021-12-02 16:13:28"}, {"errata_id": "6770", "doc-id": "RFC5277", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "4.  XML Schema for Event Notification", "correct_text": "Add a new section \"YANG Module for Event Notifications\".\r\n", "notes": "There is no YANG module for the NETCONF <notification> defined anywhere.\r\nThere is no standard YANG module for the <create-subscription> operation.\r\n\r\n1) RFC 5277 predates RFC 6020, so YANG is not normative in RFC 5277.\r\nPlease use the update in RFC 8639.\r\n\r\n2) It is not possible to model the <notification> element in YANG.\r\n\r\n3) A new RFC is required to add new functionality. This is not a bugfix\r\nsuitable for an Errata.\r\n\n --VERIFIER NOTES-- \n   ", "submit_date": "2021-12-01", "submitter_name": "Tetsuya Hasegawa", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2021-12-01 17:25:58"}, {"errata_id": "6773", "doc-id": "RFC2119", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "MAY   This word, or the adjective \"OPTIONAL\", mean that an item is\r\n   truly optional.  One vendor may choose to include the item because a\r\n   particular marketplace requires it or because the vendor feels that\r\n   it enhances the product while another vendor may omit the same item.", "correct_text": "MAY   This word, or the adjective \"OPTIONAL\", mean that an item is\r\n   truly optional. One vendor may choose to include the item because a\r\n   particular marketplace requires it or because the vendor feels that\r\n   it enhances the product while another vendor may omit the same item.", "notes": "There is a double space before \"One vendor may choose to include\".\n --VERIFIER NOTES-- \nThis report doesn't add clarity or improve readabilty.   We don't recommend errata be used to \"correct\" the number of spaces between sentences.", "submit_date": "2021-12-03", "submitter_name": "Micha\u0142 Bie\u0144kowski", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-28 05:52:08"}, {"errata_id": "6774", "doc-id": "RFC3948", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "This protocol specification defines methods to encapsulate and\r\n   decapsulate ESP packets inside UDP packets for traversing Network\r\n   Address Translators (NATs) (see [RFC3715], section 2.2, case i).  The\r\n   UDP port numbers are the same as those used by IKE traffic, as\r\n   defined in [RFC3947].", "correct_text": "This protocol specification defines methods to encapsulate and\r\n   decapsulate ESP packets inside UDP packets for traversing Network\r\n   Address Translators (NATs) (see [RFC3715], section 2.2, case j).  The\r\n   UDP port numbers are the same as those used by IKE traffic, as\r\n   defined in [RFC3947].", "notes": "Original text says:\"(see [RFC3715], section 2.2, case i)\", it should be case j.", "submit_date": "2021-12-04", "submitter_name": "warren.wang", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-28 00:05:07"}, {"errata_id": "6775", "doc-id": "RFC793", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "  Note that when the receive window is zero no segments should be\r\n  acceptable except ACK segments.  Thus, it is be possible for a TCP to\r\n  maintain a zero receive window while transmitting data and receiving\r\n  ACKs.  However, even when the receive window is zero, a TCP must\r\n  process the RST and URG fields of all incoming segments.", "correct_text": "  Note that when the receive window is zero no segments should be\r\n  acceptable except ACK segments.  Thus, it is possible for a TCP to\r\n  maintain a zero receive window while transmitting data and receiving\r\n  ACKs.  However, even when the receive window is zero, a TCP must\r\n  process the RST and URG fields of all incoming segments.", "notes": "s/it is be/it is/", "submit_date": "2021-12-05", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-12-07 01:04:09"}, {"errata_id": "7326", "doc-id": "RFC2231", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   other-sections := \"*\" (\"1\" / \"2\" / \"3\" / \"4\" / \"5\" /\r\n                          \"6\" / \"7\" / \"8\" / \"9\") *DIGIT)\r\n", "correct_text": "   other-sections := \"*\" (\"1\" / \"2\" / \"3\" / \"4\" / \"5\" /\r\n                          \"6\" / \"7\" / \"8\" / \"9\") *DIGIT\r\n", "notes": "There is an extra parenthesis at the end of the other-section rule which does not have a matching start paren.  The intent of this rule is an asterisk followed by an integer without leading zeros.\r\n\r\nSuggested resolution: hold for document update", "submit_date": "2023-01-31", "submitter_name": "Joe Hildebrand", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-01 00:11:22"}, {"errata_id": "7328", "doc-id": "RFC1606", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Applications", "orig_text": "The introduction of body monitors as IPv9 addresseable units injected\r\n\r\n", "correct_text": "The introduction of body monitors as IPv9 addressable units injected\r\n", "notes": "Corrected spelling of addressable", "submit_date": "2023-02-03", "submitter_name": "Carl Cerecke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-04 00:35:43"}, {"errata_id": "7329", "doc-id": "RFC1606", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Applications", "orig_text": "The usage of IPv9 addresseable consumer packaging has been a topic of\r\n", "correct_text": "The usage of IPv9 addressable consumer packaging has been a topic of\r\n", "notes": "Corrected spelling of addressable", "submit_date": "2023-02-03", "submitter_name": "Carl Cerecke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-04 00:41:46"}, {"errata_id": "6776", "doc-id": "RFC2046", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "NOTE:  The CRLF preceding the boundary delimiter line is conceptually\r\n   attached to the boundary so that it is possible to have a part that\r\n   does not end with a CRLF (line  break).  Body parts that must be\r\n   considered to end with line breaks, therefore, must have two CRLFs\r\n   preceding the boundary delimiter line, the first of which is part of\r\n   the preceding body part, and the second of which is part of the\r\n   encapsulation boundary.", "correct_text": "NOTE:  The CRLF preceding the boundary delimiter line is conceptually\r\n   attached to the boundary so that it is possible to have a part that\r\n   does not end with a CRLF (line  break).  Body parts that must be\r\n   considered to end with line breaks, therefore, must have two CRLFs\r\n   preceding the boundary delimiter line, the first of which is part of\r\n   the preceding body part, and the second of which is part of the\r\n   encapsulation boundary.\r\n\r\nThe requirement that the encapsulation boundary begins  with\r\na  CRLF  implies  that  the  body of a multipart entity must\r\nitself begin with a CRLF before the first encapsulation line\r\n--  that  is, if the \"preamble\" area is not used, the entity\r\nheaders must be followed by TWO CRLFs.  This is  indeed  how\r\nsuch  entities  should be composed.  A tolerant mail reading\r\nprogram, however, may interpret a  body  of  type  multipart\r\nthat  begins  with  an encapsulation line NOT initiated by a\r\nCRLF  as  also  being  an  encapsulation  boundary,  but   a\r\ncompliant  mail  sending  program  must  not  generate  such\r\nentities.", "notes": "Recommend re-introducing the wording from the original RFC (1341) regarding preceding CRLF and the first delimiter line. Current RFC is ambiguous about handling the initial line without it.", "submit_date": "2021-12-05", "submitter_name": "Brian Antos", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 20:52:22"}, {"errata_id": "6777", "doc-id": "RFC8552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   IANA has established the \"Underscored and Globally Scoped DNS Node\r\n   Names\" registry.  This section describes the registry, the\r\n   definitions, the initial entries, the use of_ta and _example, and the", "correct_text": "   IANA has established the \"Underscored and Globally Scoped DNS Node\r\n   Names\" registry.  This section describes the registry, the\r\n   definitions, the initial entries, the use of _ta and _example, and the", "notes": "There should be a space character between \"of\" and \"_ta\" in \"of_ta\".", "submit_date": "2021-12-06", "submitter_name": "Robert Royals", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2021-12-06 17:15:25"}, {"errata_id": "6783", "doc-id": "RFC8906", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2.3", "orig_text": "as unknown EDNS options are supposed to be ignored by the\r\n   server (Section 6.1.1 of [RFC6891]).\r\n", "correct_text": "as unknown EDNS options are supposed to be ignored by the\r\n   server (Section 6.1.2 of [RFC6891]).\r\n", "notes": "Reference to the section in RFC 6891 is incorrect. There's no information on what to do with unknown options in RFC 6891 section 6.1.1.", "submit_date": "2021-12-14", "submitter_name": "Mukund Sivaraman", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2021-12-14 21:00:21"}, {"errata_id": "7330", "doc-id": "RFC1606", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Manufacture", "orig_text": "day anything that wished to be could be IPv9 addresseable. It was\r\n", "correct_text": "day anything that wished to be could be IPv9 addressable. It was\r\n", "notes": "Corrected spelling of addressable", "submit_date": "2023-02-03", "submitter_name": "Carl Cerecke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-04 00:44:56"}, {"errata_id": "8746", "doc-id": "RFC8489", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Annex B.1", "orig_text": "   Password: \"The<U+00AD>M<U+00AA>tr<U+2168>\" and \"TheMatrIX\" (without\r\n   quotes) respectively before and after OpaqueString [RFC8265]\r\n   processing", "correct_text": "   Password: \"The<U+00AD>M<U+00AA>tr<U+2168>\" and \"The<U+00AD>MatrIX\" (without\r\n   quotes) respectively before and after OpaqueString [RFC8265]\r\n   processing", "notes": "OpaqueString (as defined in https://datatracker.ietf.org/doc/html/rfc8265#section-4.2) will not remove the unicode code point U+00AD (soft hyphen). Removing U+00AD is only a consequence of SASLprep which contains (https://datatracker.ietf.org/doc/html/rfc4013#section-2.1): \"the \"commonly mapped to nothing\" characters [StringPrep, B.1] that can be mapped to nothing.\". the \"commonly mapped to nothing\" list in https://datatracker.ietf.org/doc/html/rfc3454#section-3.1 does contain U+00AD but this is not something that will be changed by OpaqueString processing.  The SHA256 HMAC will also need to be updated to match.", "submit_date": "2026-02-08", "submitter_name": "Matthew Waters", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6792", "doc-id": "RFC3779", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "   30 3d                       Extension {\r\n      06 08 2b06010505070107     extnID        1.3.6.1.5.5.7.1.7\r\n      01 01 ff                   critical\r\n      04 2e                      extnValue {\r\n         30 2c                     IPAddrBlocks {\r\n            30 10                    IPAddressFamily {\r\n               04 03 0001 01           addressFamily: IPv4 Unicast\r\n                                       IPAddressChoice\r\n               30 09                     addressesOrRanges {\r\n                                           IPAddressOrRange\r\n                  03 02 00 0a                addressPrefix    10/8\r\n                                           IPAddressOrRange\r\n                  03 03 04 b010              addressPrefix    172.16/12\r\n                                         } -- addressesOrRanges\r\n                                     } -- IPAddressFamily\r\n            30 07                    IPAddressFamily {\r\n               04 03 0001 02           addressFamily: IPv4 Multicast\r\n                                       IPAddressChoice\r\n               05 00                     inherit from issuer\r\n                                     } -- IPAddressFamily\r\n            30 0f                    IPAddressFamily {\r\n               04 02 0002              addressFamily: IPv6\r\n                                       IPAddressChoice\r\n               30 09                     addressesOrRanges {\r\n                                           IPAddressOrRange\r\n                  03 07 00 200100000002      addressPrefix   2001:0:2/47\r\n                                         } -- addressesOrRanges\r\n                                     } -- IPAddressFamily\r\n                                   } -- IPAddrBlocks\r\n                                 } -- extnValue\r\n                                  } -- Extension", "correct_text": "   30 3d                       Extension {\r\n      06 08 2b06010505070107     extnID        1.3.6.1.5.5.7.1.7\r\n      01 01 ff                   critical\r\n      04 2e                      extnValue {\r\n         30 2c                     IPAddrBlocks {\r\n            30 10                    IPAddressFamily {\r\n               04 03 0001 01           addressFamily: IPv4 Unicast\r\n                                       IPAddressChoice\r\n               30 09                     addressesOrRanges {\r\n                                           IPAddressOrRange\r\n                  03 02 00 0a                addressPrefix    10/8\r\n                                           IPAddressOrRange\r\n                  03 03 04 ac10              addressPrefix    172.16/12\r\n                                         } -- addressesOrRanges\r\n                                     } -- IPAddressFamily\r\n            30 07                    IPAddressFamily {\r\n               04 03 0001 02           addressFamily: IPv4 Multicast\r\n                                       IPAddressChoice\r\n               05 00                     inherit from issuer\r\n                                     } -- IPAddressFamily\r\n            30 0f                    IPAddressFamily {\r\n               04 02 0002              addressFamily: IPv6\r\n                                       IPAddressChoice\r\n               30 09                     addressesOrRanges {\r\n                                           IPAddressOrRange\r\n                  03 07 00 200100000002      addressPrefix   2001:0:2/48\r\n                                         } -- addressesOrRanges\r\n                                     } -- IPAddressFamily\r\n                                   } -- IPAddrBlocks\r\n                                 } -- extnValue\r\n                                  } -- Extension", "notes": "b010 represents 176.16/12, the hex representation of 172 is ac, so it should be ac10.\r\n\r\nThe IPv6 addressPrefix in question is 2001:0:2/48, not 2001:0:2/47, as explained in the text before the example.", "submit_date": "2021-12-21", "submitter_name": "Theo Buehler", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-12-25 04:15:17"}, {"errata_id": "6793", "doc-id": "RFC3261", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.1.1.5", "orig_text": "The CSeq header field serves as a way to identify and order\r\n   transactions.  It consists of a sequence number and a method.  The\r\n   method MUST match that of the request.  For non-REGISTER requests\r\n   outside of a dialog, the sequence number value is arbitrary.  The\r\n   sequence number value MUST be expressible as a 32-bit unsigned\r\n   integer and MUST be less than 2**31.  As long as it follows the above\r\n   guidelines, a client may use any mechanism it would like to select\r\n   CSeq header field values.", "correct_text": "The CSeq header field serves as a way to identify and order\r\n   transactions.  It consists of a sequence number and a method.  The\r\n   method MUST match that of the request.  For non-REGISTER requests\r\n   outside of a dialog, the sequence number value is arbitrary. For requests with its credentials after receiving a\r\n   401 (Unauthorized) or 407 (Proxy Authentication Required) response,\r\n  the CSeq header field value MUST increment. The\r\n   sequence number value MUST be expressible as a 32-bit unsigned\r\n   integer and MUST be less than 2**31.  As long as it follows the above\r\n   guidelines, a client may use any mechanism it would like to select\r\n   CSeq header field values.", "notes": "For more clarity and more understanding, It would be nice to have a quiet bit of update in RFC 3261 section 8.1.1.5. Because, the word \"arbitrary\" in the CSeq value may be confused with the same value as before.", "submit_date": "2021-12-21", "submitter_name": "Mojtaba Esfandiari.S", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:37:16"}, {"errata_id": "6796", "doc-id": "RFC3533", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "Page_1 consists of the first three segments of\r\npacket_1, page_2 contains the remaining 2 segments from packet_1, and\r\npage_3 contains the first three pages of packet_2.", "correct_text": "Page_1 consists of the first three segments of\r\npacket_1, page_2 contains the remaining 2 segments from packet_1, and\r\npage_3 contains the first three segments of packet_2.", "notes": "The last part of this sentence used \"three pages\" which should be \"three segments\". As package is divided into segments.", "submit_date": "2021-12-25", "submitter_name": "Gang Zhao", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2021-12-27 12:13:42"}, {"errata_id": "6782", "doc-id": "RFC1337", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4", "orig_text": "    3.         ... <SEQ=400><ACK=101><CTL=SYN,ACK><W=800>  <-- SYN-RCVD\r\n\r\n    4.  SYN-SENT    <-- <SEQ=300><ACK=123><CTL=ACK> ... (old duplicate)\r\n\r\n    5.  SYN-SENT    --> <SEQ=123><CTL=RST>                   --> LISTEN\r\n\r\n    6.  ESTABLISHED <-- <SEQ=400><ACK=101><CTL=SYN,ACK><W=900> ...\r\n\r\n[...]\r\n\r\n      The key to the failure in Figure 4 is that the RST segment 5 is\r\n      acceptable to TCP B in SYN-RECEIVED state, because the sequence\r\n      space of the earlier connection that produced this old duplicate\r\n      overlaps the new connection space.  Thus, <SEQ=123> in segment #5\r\n      falls within TCP B's receive window [101,900).", "correct_text": "    3.         ... <SEQ=400><ACK=101><CTL=SYN,ACK><W=800>  <-- SYN-RCVD\r\n\r\n    4.  SYN-SENT    <-- <SEQ=300><ACK=123><CTL=ACK> ... (old duplicate)\r\n\r\n    5.  SYN-SENT    --> <SEQ=123><CTL=RST>                   --> LISTEN\r\n\r\n    6.  ESTABLISHED <-- <SEQ=400><ACK=101><CTL=SYN,ACK><W=800> ...\r\n\r\n[...]\r\n\r\n      The key to the failure in Figure 4 is that the RST segment 5 is\r\n      acceptable to TCP B in SYN-RECEIVED state, because the sequence\r\n      space of the earlier connection that produced this old duplicate\r\n      overlaps the new connection space.  Thus, <SEQ=123> in segment #5\r\n      falls within TCP B's receive window [101,901).\r\n\r\n", "notes": "I see two problems here.\r\n\r\nFirst, line 6 is the arrival of segment sent at line 3, so it should have the same advertised window.\r\n\r\nSecond, in the following paragraph it is said that B's receive window is [101,900), which is consistent neither with line 3 (W=800) nor line 6 (W=900).\r\n\r\nI guess (that's just a guess) the author meant W=800 in both lines 3 and 6, and made an off-by-one error in B receive's window.  If it starts at 101 and has 800 for size, it is [101,901)", "submit_date": "2021-12-11", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-01-28 00:14:59"}, {"errata_id": "6779", "doc-id": "RFC7296", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1.1", "orig_text": "   In this scenario, neither endpoint of the IP connection implements\r\n   IPsec, but network nodes between them protect traffic for part of the\r\n   way.  Protection is transparent to the endpoints, and depends on\r\n   ordinary routing to send packets through the tunnel endpoints for\r\n   processing.  Each endpoint would announce the set of addresses\r\n   \"behind\" it, and packets would be sent in tunnel mode where the inner\r\n   IP header would contain the IP addresses of the actual endpoints.\r\n", "correct_text": "   In this scenario, neither endpoint of the IP connection implements\r\n   IPsec, but network nodes between them protect traffic for part of the\r\n   way.  Protection is transparent to the endpoints, and depends on\r\n   ordinary routing to send packets through the tunnel endpoints for\r\n   processing.  Each tunnel endpoint would announce the set of addresses\r\n   \"behind\" it, and packets would be sent in tunnel mode where the inner\r\n   IP header would contain the IP addresses of the actual endpoints.\r\n", "notes": "\"Each tunnel endpoint\" will make it easy to understand which entity is announcing the set of addresses.", "submit_date": "2021-12-08", "submitter_name": "warren.wang", "verifier_id": "", "verifier_name": "Benjamin Kaduk", "update_date": "2021-12-11 03:07:19"}, {"errata_id": "8749", "doc-id": "RFC9858", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.3", "orig_text": "Test Vector for SHA-256/256", "correct_text": "Test Vector for SHAKE256/256", "notes": "The test vector is compiled with the parameters LMOTS_SHAKE_N32_W8 and LMS_SHAKE_N32_H5.\r\n\r\n--VERIFIER NOTE--\r\nVerified. Section A.3 heading: SHA-256/256 -> SHAKE256/256.\r\nTest vector uses LMOTS_SHAKE_N32_W8 (0x0c) and\r\nLMS_SHAKE_M32_H5 (0x0f). All six figure captions within\r\nthe section correctly say SHAKE256/256.", "submit_date": "2026-02-10", "submitter_name": "Francisco Vial-Prado", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-02-12 22:54:07"}, {"errata_id": "6786", "doc-id": "RFC5549", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   A BGP speaker MUST only advertise to a BGP peer the IPv4 or VPN-IPv4\r\n   NLRI with an IPv6 Next Hop if the BGP speaker has first ascertained\r\n   via BGP Capability Advertisement that the BGP peer supports the\r\n   Extended Next Hop Encoding capability for the relevant AFI/SAFI pair.\r\n", "correct_text": "   A BGP speaker MUST only advertise to a BGP peer the IPv4 or VPN-IPv4\r\n   NLRI with an IPv6 Next Hop if the BGP speaker has first ascertained\r\n   via BGP Capability Advertisement that the BGP peer supports the\r\n   Extended Next Hop Encoding capability for the relevant AFI/SAFI pair.\r\n   \r\n   IPv4 or VPN-IPv4 NLRI with an IPv6 Next Hop SHOULD be treated as \r\n   malformed if it received from a BGP speaker that has not sent BGP \r\n   Capability Advertisement for the relevant AFI/SAFI pair.   \r\n", "notes": "The behavior was not explicitly mentioned.\n --VERIFIER NOTES-- \n   The RFC 5549 has been obsoleted by RFC 8950. Per point 7 of https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/, this errata is rejected.\r\nIt appears to me that RFC 8950 may have the same error and may also require a similar errata.\r\nThanks for the report.", "submit_date": "2021-12-17", "submitter_name": "Mike Dubrovsky", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2023-08-02 14:08:39"}, {"errata_id": "6787", "doc-id": "RFC2418", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix", "orig_text": "The primary purpose of this working group is to develop two such supportive protocols and a frameword document.", "correct_text": "The primary purpose of this working group is to develop two such supportive protocols and a framework document.", "notes": "From \"frameword\" to \"framework\"", "submit_date": "2021-12-18", "submitter_name": "Sky Lian", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:08:20"}, {"errata_id": "6790", "doc-id": "RFC8601", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "   [DKIM]     Crocker, D., Ed., Hansen, T., Ed., and M. Kucherawy, Ed.,\r\n              \"DomainKeys Identified Mail (DKIM) Signatures\", STD 76,\r\n              RFC 6376, DOI 10.17487/RFC6376, September 2011,\r\n              <https://www.rfc-editor.org/info/rfc6376>.", "correct_text": "   [DKIM]     Crocker, D., Ed., Hansen, T., Ed., and M. Kucherawy, Ed.,\r\n              \"DomainKeys Identified Mail (DKIM) Signatures\", STD 76,\r\n              RFC 6376, DOI 10.17487/RFC6376, September 2011,\r\n              <https://www.rfc-editor.org/info/rfc6376>.", "notes": "In the next revision, this reference should be moved from Section 8.2, informative references, to Section 8.1, normative references.  In Section 2.2, formal definition, the definition for domain-name is taken from RFC 6376, so it's not merely informative.", "submit_date": "2021-12-21", "submitter_name": "Scott Kitterman", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7332", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.9", "orig_text": "The period start at 18:00:00 on January 1, 1997 and lasting 5\r\nhours and 30 minutes would be:\r\n\r\n19970101T180000Z/PT5H30M", "correct_text": "The period start at 18:00:00 on January 1, 1997 and lasting 5\r\nhours and 30 minutes would be:\r\n\r\n19970101T180000/PT5H30M", "notes": "I do not know if this is an editorial or technical issue.\r\n\r\nIf I understand the datetime value (Section 3.3.5) correct the last character should only be \"Z\" if the value is in UTC.\r\n\r\nIn the first example in section 3.3.9 UTC is explicitely mentioned but not in the second example.", "submit_date": "2023-02-04", "submitter_name": "Tobias Subklewe", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-16 14:34:14"}, {"errata_id": "6798", "doc-id": "RFC7323", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "The Timestamps option may appear in any data or <ACK> segment, adding\r\n\r\nThe timestamp clock may be derived from a system clock that is\r\n\r\nA random offset may be added to the timestamp clock on a per-", "correct_text": "The Timestamps option MAY appear in any data or <ACK> segment, adding\r\n\r\nThe timestamp clock MAY be derived from a system clock that is\r\n\r\nA random offset MAY be added to the timestamp clock on a per-", "notes": "several \"MAY\"s were incorrectly written as non RFC 2119 \"may\"s\n --VERIFIER NOTES-- \n   These examples are non-normative. The first is explanatory, and the other two are examples of ways to meet the requirement.", "submit_date": "2021-12-26", "submitter_name": "Yaakov Stein", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-05-13 21:13:18"}, {"errata_id": "6811", "doc-id": "RFC9000", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "                                         The sequence number of the\r\n   initial connection ID is 0.  If the preferred_address transport\r\n   parameter is sent, the sequence number of the supplied connection ID\r\n   is 1.\r\n\r\n   Additional connection IDs are communicated to the peer using\r\n   NEW_CONNECTION_ID frames (Section 19.15).  The sequence number on\r\n   each newly issued connection ID MUST increase by 1.  ", "correct_text": "                                         The sequence number of the\r\n   initial connection ID is 0.  If the preferred_address transport\r\n   parameter is sent, the sequence number of the supplied connection ID\r\n   is 1.  The sequence number for NEW_CONNECTION_ID frames starts at 2\r\n   when the preferred_address transport parameter is sent and 1\r\n   otherwise.\r\n\r\n   Additional connection IDs are communicated to the peer using\r\n   NEW_CONNECTION_ID frames (Section 19.15).  The sequence number on\r\n   each newly issued connection ID MUST increase by 1.", "notes": "It is not sufficiently clear that the (implied) sequence number for the preferred_address transport parameter is taken from the sequence only when the transport parameter is present.\r\n\r\nThe original text might be read to imply that the first NEW_CONNECTION_ID frame always starts with 2, though maybe only at a server.  The proposed addition is much more explicit.", "submit_date": "2022-01-06", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2022-02-18 10:18:41"}, {"errata_id": "6812", "doc-id": "RFC6350", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2.7", "orig_text": "   Examples:\r\n\r\n     GENDER:M\r\n     GENDER:F\r\n     GENDER:M;Fellow\r\n     GENDER:F;grrrl\r\n     GENDER:O;intersex\r\n     GENDER:;it's complicated", "correct_text": "   Examples:\r\n\r\n     GENDER:M\r\n     GENDER:F\r\n     GENDER:M;Transgender Man\r\n     GENDER:F;Transfeminine\r\n     GENDER:O;Intersex\r\n     GENDER:;Agender", "notes": "This errata replaces the imaginary gender identities with examples of actual diverse gender identities.", "submit_date": "2022-01-06", "submitter_name": "Emily Love Mills (she/her)", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-02-09 22:55:15"}, {"errata_id": "6814", "doc-id": "RFC7231", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Table of Contents", "orig_text": "noneed", "correct_text": "noneed", "notes": "There is no hyper link to section 7.1.1 in Contents.\n --VERIFIER NOTES-- \nErrata reports are for the authoritative versions hosted on rfc-editor.org, which for this document is the plain text version. As such, issues introduced by the \"htmlization\" process do not qualify. Additionally, the issue with the characters \"ed \" added in the ToC was reported in an errata already, see https://www.rfc-editor.org/errata/eid4072.", "submit_date": "2022-01-10", "submitter_name": "jk", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-01-11 13:55:18"}, {"errata_id": "6818", "doc-id": "RFC5880", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.7.2", "orig_text": "      If the Auth Len field is not equal to the length of the password\r\n      selected by the key ID, plus three, the packet MUST be discarded.\r\n", "correct_text": "      If the Auth Len field is not match to the length of the password\r\n      selected by the key ID, plus three, the packet MUST be discarded.\r\n", "notes": "The value of the Auth Len field is the length of the password plus 3.\n --VERIFIER NOTES-- \n   https://mailarchive.ietf.org/arch/msg/rtg-bfd/ukbCzkS8NkTWdXEPvB9mlFtIiSQ/\r\n\r\nThis erratum proposes changing \u201cis not equal\u201d to \u201cis not match\u201d. As far as I can tell would make the text less, not more, precise. ", "submit_date": "2022-01-15", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-05-09 21:08:38"}, {"errata_id": "6817", "doc-id": "RFC8890", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1, 4.3", "orig_text": "such as (but not limited to) end users, network ...\r\n\r\nincluding (but not limited to) [RFC7754] on filtering, [RFC7258] ...", "correct_text": "such as end users, network ...\r\n\r\nincluding [RFC7754] on filtering, [RFC7258] ...", "notes": "Remove redundant, faux legalese \"(but not limited to)\".  Nothing about \"such as\" and \"including\" indicates that the following list of examples are exhaustive: just that they are members of a set.\n --VERIFIER NOTES-- \nThis is not a correction and it does not affect the readability of the document.", "submit_date": "2022-01-13", "submitter_name": "John Hickinbottom", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-06 21:46:51"}, {"errata_id": "6819", "doc-id": "RFC7193", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "   digestData                  |[RFC5652] | 1.2.840.113549.1.9.16.1.5\r\n   encryptedData               |[RFC5652] | 1.2.840.113549.1.9.16.1.6\r\n   envelopedData               |[RFC5652] | 1.2.840.113549.1.9.16.1.3\r\n   signedData                  |[RFC5652] | 1.2.840.113549.1.9.16.1.2", "correct_text": "   digestData                  |[RFC5652] | 1.2.840.113549.1.7.5\r\n   encryptedData               |[RFC5652] | 1.2.840.113549.1.7.6\r\n   envelopedData               |[RFC5652] | 1.2.840.113549.1.7.3\r\n   signedData                  |[RFC5652] | 1.2.840.113549.1.7.2", "notes": "Four of the object identifiers in the table are incorrect.  The correct ones are provided above.  In addition, IANA has been notified about the error.", "submit_date": "2022-01-18", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6845", "doc-id": "RFC9067", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.2.", "orig_text": "               list prefix-list {\r\n                 key \"ip-prefix mask-length-lower mask-length-upper\";\r\n                 description\r\n                   \"List of prefixes in the prefix set.\";\r\n                 uses prefix;\r\n               }\r\n", "correct_text": "               list prefix {\r\n                 key \"ip-prefix mask-length-lower mask-length-upper\";\r\n                 description\r\n                   \"List of prefixes in the prefix set.\";\r\n                 uses prefix;\r\n               }\r\n", "notes": "The name of this list is not natural and makes instance data hard to read. This is very apparent in the example in Appendix B.  Policy Examples\n --VERIFIER NOTES-- \n   From the WG discussion: \"This is a rather subjective comment since at this YANG data node is, in fact, a list. Also, it is a moot point since changing this would be a non-backward compatible YANG change.\"", "submit_date": "2022-02-10", "submitter_name": "Kris Lambrechts", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-02-11 18:55:44"}, {"errata_id": "7341", "doc-id": "RFC2046", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2.3.7", "orig_text": "provided in the same format but via different accces mechanisms.", "correct_text": "provided in the same format but via different access mechanisms.", "notes": "\"accces\" is a typo", "submit_date": "2023-02-07", "submitter_name": "Viatrix", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-07 23:57:41"}, {"errata_id": "7334", "doc-id": "RFC8727", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "          {iodef-BusinessImpact => BusinessImpact /\r\n", "correct_text": "          {iodef-BusinessImpact => BusinessImpact} /\r\n", "notes": "A closing brace is missing in this line of the rule for \"Assessment\".", "submit_date": "2023-02-06", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2023-03-29 07:43:23"}, {"errata_id": "6820", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2", "orig_text": "unsupported_extension:  Sent by endpoints receiving any handshake\r\n      message containing an extension known to be prohibited for\r\n      inclusion in the given handshake message, or including any\r\n      extensions in a ServerHello or Certificate not first offered in\r\n      the corresponding ClientHello or CertificateRequest. ", "correct_text": "unsupported_extension:  Sent by endpoints receiving any handshake\r\n      message containing an extension in a ServerHello or Certificate\r\n      not first offered in the corresponding ClientHello or \r\n      CertificateRequest.", "notes": "The definition of the unsupported_extension alert in section 6.2 contradicts the statements in section 4.2:\r\n\r\n        If an implementation receives an extension\r\n        which it recognizes and which is not specified for the message in\r\n        which it appears, it MUST abort the handshake with an\r\n   \"illegal_parameter\" alert.\r\n\r\nWhile this might not be inconsistent due to the \"abort the handshake with an X alert\" specification at the beginning of section 6.2, it might lead to confusion. (see https://mailarchive.ietf.org/arch/msg/tls/hGOGWZRMg718mWqOZ06LwjV9360/).\r\n\r\nPaul Wouters(AD): Currently discussed at:\r\n\r\nhttps://github.com/tlswg/tls13-spec/issues/1352\r\nhttps://github.com/tlswg/tls13-spec/pull/1353", "submit_date": "2022-01-21", "submitter_name": "Leander Schwarz", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-05 12:47:15"}, {"errata_id": "6821", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.5", "orig_text": "\"Note that the checksum may reach a maximum integer value of len_1 * (w - 1) * 2^8\"", "correct_text": "\"Note that the checksum may reach a maximum integer value of len_1 * (w - 1)\"", "notes": "The \"* 2^8\" appears to be a mistake. If the checksum integers could reach those values, the checksum field would overflow, which would potentially allow an attacker to forge a message.\r\n\r\nIn reality, the correct maximum is just \"len_1 * (w - 1)\"\r\n\r\n\r\nVerified on CFRG list by Bas Westerbaan.", "submit_date": "2022-01-24", "submitter_name": "Peter Gordon", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:52:27"}, {"errata_id": "6822", "doc-id": "RFC3610", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "First two octets   Followed by       Comment\r\n    -----------------  ----------------  -------------------------------\r\n    0x0000             Nothing           Reserved\r\n    0x0001 ... 0xFEFF  Nothing           For 0 < l(a) < (2^16 - 2^8)\r\n    0xFF00 ... 0xFFFD  Nothing           Reserved\r\n    0xFFFE             4 octets of l(a)  For (2^16 - 2^8) <= l(a) < 2^32\r\n    0xFFFF             8 octets of l(a)  For 2^32 <= l(a) < 2^64", "correct_text": "First two octets   Followed by       Comment\r\n    -----------------  ----------------  -------------------------------\r\n    0x0000             Nothing           Reserved\r\n    0x0001 ... 0xFEFF  Nothing           For 0 < l(a) < (2^16 - 2^8)\r\n    0xFF00 ... 0xFFFD  Nothing           Reserved\r\n    0xFFFE             4 octets of l(a)  For (2^16 - 2^8) <= l(a) < 2^32\r\n    0xFFFF             6 octets of l(a)  For 2^32 <= l(a) < 2^64", "notes": "The total size of the length field encoded according to the table in seciton 2.2 is 8 octets. The first column defines the first two octets. The second column defines the following octets, which in case of the first two octets being 0xFFFF is 6 octets, not 8 octets.\n --VERIFIER NOTES-- \nText a little earlier in Section 2.2 says:\r\n   If 2^32 <= l(a) < 2^64, then the length field is encoded as ten\r\n   octets consisting of the octets 0xff, 0xff, and eight octets encoding\r\n   l(a) in most-significant-byte-first order.\r\nThus, the quoted text is correct at:\r\n    0xFFFF             8 octets of l(a)  For 2^32 <= l(a) < 2^64\r\n\r\nThis resolution may give rise to further issues, but they would warrant a separate errata report.", "submit_date": "2022-01-24", "submitter_name": "Juergen Koeppel", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2022-01-27 18:09:58"}, {"errata_id": "6824", "doc-id": "RFC823", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "[10] Rosen,  E.,  \"Exterior  Gateway  Protocol,\"  IEN-209,   Bolt\r\n          Beranek and Newman Inc., August 1982.", "correct_text": "[10] Rosen,  E.,  \"Exterior  Gateway  Protocol,\"  IEN-209,   Bolt\r\n          Beranek and Newman Inc., August 1982, not issued.", "notes": "RFC823 references IEN-209, which was not issued, and won't be (https://www.rfc-editor.org/ien/scanned/ien209.pdf).  I encourage discussion of whether it should reference RFC827 instead.", "submit_date": "2022-01-28", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6825", "doc-id": "RFC6520", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Overview", "orig_text": "HeartbeartResponse", "correct_text": "HeartbeatResponse", "notes": "There is a typo of an extra 'r' in \"HeartbeatReponse\"", "submit_date": "2022-01-30", "submitter_name": "Shawna Fonua", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-01-31 21:46:12"}, {"errata_id": "6826", "doc-id": "RFC9051", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "   18.  RFC822, RFC822.HEADER, and RFC822.TEXT FETCH data items were\r\n        deprecated.  Clients should use the corresponding BODY[]\r\n        variants instead.", "correct_text": "   18.  RFC822, RFC822.HEADER, and RFC822.TEXT FETCH data items were\r\n        removed. Clients should use the corresponding BODY[]\r\n        variants instead.", "notes": "Contrary to the original text, these data items are not deprecated but they were completely removed from the text of the RFC. As far as I see other deprecated items are not removed completely but moved to a '...obsolete...' token in the formal syntax.", "submit_date": "2022-02-02", "submitter_name": "Hontv\u00e1ri Levente", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-07-28 00:05:20"}, {"errata_id": "6827", "doc-id": "RFC9187", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "The following C code is provided as a verified example of SNE from 16\r\nto 32 bits.", "correct_text": "The following C code is provided as a verified example of SNE from 32\r\nto 64 bits.", "notes": "The code takes 32 bits sequence numbers and extends them to 64 bits.", "submit_date": "2022-02-02", "submitter_name": "Erik Auerswald", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2022-02-06 18:59:42"}, {"errata_id": "6828", "doc-id": "RFC9187", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "char *prompt = \"Input hex numbers only (0x is optional)\\n\\n\")", "correct_text": "char *prompt = \"Input hex numbers only (0x is optional)\\n\\n\"", "notes": "The closing parenthesis at the end of the line is a syntax error for the C programming language:\r\n\r\n$ cc compute_sne.c \r\ncompute_sne.c: In function \u2018main\u2019:\r\ncompute_sne.c:78:64: error: expected \u2018,\u2019 or \u2018;\u2019 before \u2018)\u2019 token", "submit_date": "2022-02-02", "submitter_name": "Erik Auerswald", "verifier_id": "", "verifier_name": "Adrian Farrel", "update_date": "2022-02-06 19:02:36"}, {"errata_id": "6861", "doc-id": "RFC7493", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   Object member names, and string values in arrays and object members,\r\n   MUST NOT include code points that identify Surrogates or\r\n   Noncharacters as defined by [UNICODE].", "correct_text": "   Object member names, and string values,\r\n   MUST NOT include code points that identify Surrogates or\r\n   Noncharacters as defined by [UNICODE].", "notes": "The expression \u201cstring values in arrays and object members\u201d is overly qualified, excluding cases where the *entire message* is a string value, which should clearly be covered also. So the qualification \u201cin arrays and object members\u201d should be removed.\r\n\r\nSupporting citations:\r\n\r\nRFC 7493, section 2: \u201cAn I-JSON message is a JSON text, as defined by RFC 7159.\u201d\r\n\r\nRFC 7159, section 2: \u201cA JSON text is a serialized value.  Note that certain previous specifications of JSON constrained a JSON text to be an object or an array. [\u2026]\u201d\r\n\r\nRFC 7159, section 2:\r\n\r\n      JSON-text = ws value ws\r\n\r\nRFC 7159, section 3:\r\n\r\n      value = false / null / true / object / array / number / string", "submit_date": "2022-02-25", "submitter_name": "Chris Morgan", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6829", "doc-id": "RFC9073", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "      partprop     = *(\r\n                     ;\r\n                     ; The following are REQUIRED\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     participanttype / uid /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     calendaraddress / created / description / dtstamp /\r\n                     geo / last-mod / priority / seq /\r\n                     status / summary / url /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; and MAY occur more than once.\r\n                     ;\r\n                     attach / categories / comment\r\n                     contact / location / rstatus / related /\r\n                     resources / strucloc / strucres /\r\n                     styleddescription / sdataprop / iana-prop\r\n                     ;\r\n                     )\r\n", "correct_text": "      partprop     = *(\r\n                     ;\r\n                     ; The following are REQUIRED\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     participanttype / uid /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     calendaraddress / created / description / dtstamp /\r\n                     geo / last-mod / priority / seq /\r\n                     status / summary / url /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; and MAY occur more than once.\r\n                     ;\r\n                     attach / categories / comment\r\n                     contact / location / rstatus / related /\r\n                     resources /\r\n                     styleddescription / sdataprop / iana-prop\r\n                     ;\r\n                     )\r\n", "notes": "'structloc' and 'structres' are not defined in this document.  These are leftover artifacts from a draft version of this specification and were replaced by 'locationc' and 'resourcec'", "submit_date": "2022-02-02", "submitter_name": "Ken Murchison", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-11-23 08:32:04"}, {"errata_id": "6830", "doc-id": "RFC5280", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A.1", "orig_text": "-- Note - upper bounds on string types, such as TeletexString, are\r\n-- measured in characters.  Excepting PrintableString or IA5String, a\r\n-- significantly greater number of octets will be required to hold\r\n-- such a value.  As a minimum, 16 octets, or twice the specified\r\n-- upper bound, whichever is the larger, should be allowed for\r\n-- TeletexString.  For UTF8String or UniversalString at least four\r\n-- times the upper bound should be allowed.", "correct_text": "-- Note - upper bounds on string types, such as TeletexString, are\r\n-- measured in characters.  Excepting PrintableString or IA5String, a\r\n-- significantly greater number of octets will be required to hold\r\n-- such a value.  As a minimum, 16 octets, or twice the specified\r\n-- upper bound, whichever is the larger, should be allowed for\r\n-- TeletexString.  For UTF8String or UniversalString, four\r\n-- times the upper bound should be allowed.", "notes": "\"at least four times\" is likely a holdover from RFC 3280, as the same text exists in that RFC. In RFC 3280, the definition of UTF-8 in UTF8String was normatively referencing RFC 2279, which allowed for a maximum of 6 octets to represent a single Unicode character in UTF-8. However, RFC 5280 was updated to normatively reference RFC 3629, which restricts the allowed set of characters in a UTF-8 string to match those allowed in UTF-16 (i.e., the BMP and 16 supplementary planes as opposed to all 32k planes). As a result, the maximum length for a single RFC 3629 UTF-8 character is 4 octets, rendering the guidance of \"at least four times\" wholly unnecessary; \"four times\" is sufficient in all cases.\n --VERIFIER NOTES-- \n   Verifier Notes:  'At least four times' includes 'four times'.", "submit_date": "2022-02-02", "submitter_name": "Corey Bonnell", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-29 15:31:51"}, {"errata_id": "6831", "doc-id": "RFC7679", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   The text above constitutes a revision to RFC 2769, which is now an\r\n   Internet Standard.  This section tracks the changes from [RFC2679].", "correct_text": "   The text above constitutes a revision to RFC 2679, which is now an\r\n   Internet Standard.  This section tracks the changes from [RFC2679].", "notes": "Typo in RFC number (2769 instead 2679).", "submit_date": "2022-02-03", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-02-03 22:20:04"}, {"errata_id": "6832", "doc-id": "RFC6733", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.1.4", "orig_text": "DIAMETER_OUT_OF_SPACE 4002\r\n\r\n      A Diameter node received the accounting request but was unable to\r\n      commit it to stable storage due to a temporary lack of space.", "correct_text": "DIAMETER_OUT_OF_SPACE 4002\r\n\r\n      A Diameter node received the request but was unable to\r\n      commit it to stable storage due to a temporary lack of space.", "notes": "Original text signifies accounting application explicitly. It can be any of Accounting or Authorization.", "submit_date": "2022-02-03", "submitter_name": "Kshitij Dutt", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6833", "doc-id": "RFC6733", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.4", "orig_text": "The following Application Id values are defined:\r\n\r\n         Diameter common message       0\r\n         Diameter base accounting      3\r\n         Relay                         0xffffffff", "correct_text": "The following Application Id values are defined:\r\n\r\n         Diameter common message       0\r\n         Diameter base accounting      3\r\n         Relay                         0xffffff", "notes": "I presume relay application ID should be 0xffffff decimal equivalent of which is 16777215.\r\nInstead 0xffffffff decimal translates to 4294967295.\r\n\r\nThis is assumption.\n --VERIFIER NOTES-- \n The Application-ID field in the Diameter header is 32 bits long, hence the exist Application Id for \"Relay\" is correct.", "submit_date": "2022-02-03", "submitter_name": "Kshitij Dutt", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 13:55:24"}, {"errata_id": "6834", "doc-id": "RFC8995", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.5", "orig_text": "   *  version\r\n\r\n   *  Status\r\n\r\n   *  Reason\r\n\r\n   *  reason-context", "correct_text": "   *  version\r\n\r\n   *  status\r\n\r\n   *  reason\r\n\r\n   *  reason-context", "notes": "The CDDL models in section 5.7 and 5.9.4 define the key values with lowercase first character; and the examples in those sections use the same. It seems that during final editing it was forgotten to update Section 8.5.", "submit_date": "2022-02-03", "submitter_name": "Esko Dijk", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 09:01:47"}, {"errata_id": "6842", "doc-id": "RFC8561", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Annex A.3", "orig_text": " \"name\": \"RLT-A:CT-2\",\r\n...\r\n           \"tx-frequency\": 10618000,\r\n", "correct_text": " \"name\": \"RLT-A:CT-2\",\r\n...\r\n           \"tx-frequency\": 10728000,\r\n", "notes": "A.3 describes the XPIC configuration. The tx-frequency for the two CTs under XPIC configuration should be the same, both should be 10728000.\r\n\r\nThis should be a copy&paste error from A.2 2+0 configuration.\r\n\r\nSee also the ccamp mailing list: https://mailarchive.ietf.org/arch/msg/ccamp/_VITOVYwAGg_4M2FHntaLpRTHKs/", "submit_date": "2022-02-08", "submitter_name": "Ye Min", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-04-08 13:51:11"}, {"errata_id": "6837", "doc-id": "RFC3439", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4", "orig_text": "Adding an new Internet service is just a matter of distributing an application to the a few consenting desktops who wish to use it.", "correct_text": "Adding a new Internet service is just a matter of distributing an application to the a few consenting desktops who wish to use it.", "notes": "changing an to a", "submit_date": "2022-02-05", "submitter_name": "David Melkumov", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-02-07 21:34:58"}, {"errata_id": "6850", "doc-id": "RFC4254", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "Requests for assignments of new SSH_MSG_CHANNEL_OPEN 'reason code'\r\nvalues (and associated 'description' text) in the range of 0x00000005\r\nto 0xFDFFFFFF MUST be done through the IETF CONSENSUS method, as\r\ndescribed in [RFC2434].  The IANA will not assign Channel Connection\r\nFailure 'reason code' values in the range of 0xFE000000 to\r\n0xFFFFFFFF.  Channel Connection Failure 'reason code' values in that\r\nrange are left for PRIVATE USE, as described in [RFC2434].\r\n\r\n", "correct_text": "Requests for assignments of new SSH_MSG_CHANNEL_OPEN_FAILURE 'reason code'\r\nvalues (and associated 'description' text) in the range of 0x00000005\r\nto 0xFDFFFFFF MUST be done through the IETF CONSENSUS method, as\r\ndescribed in [RFC2434].  The IANA will not assign Channel Connection\r\nFailure 'reason code' values in the range of 0xFE000000 to\r\n0xFFFFFFFF.  Channel Connection Failure 'reason code' values in that\r\nrange are left for PRIVATE USE, as described in [RFC2434].\r\n", "notes": "The 'reason code' is present on SSH_MSG_CHANNEL_OPEN_FAILURE message to denote cause of the failure while original text attributes it to SSH_MSG_CHANNEL_OPEN by mistake.", "submit_date": "2022-02-14", "submitter_name": "Hamid Nazari", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 18:03:49"}, {"errata_id": "6851", "doc-id": "RFC8032", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.7", "orig_text": "   As an API consideration, this means that any Initialize Update\r\n   Finalize (IFU) verification interface is prone to misuse.", "correct_text": "   As an API consideration, this means that any Initialize Update\r\n   Finalize (IUF) verification interface is prone to misuse.", "notes": "Typo in acronym.", "submit_date": "2022-02-15", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-02-15 20:56:34"}, {"errata_id": "6852", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.8.6.3", "orig_text": "This TLV is used to provide community tags for specific IPv4 destinations.", "correct_text": "This TLV is used to provide community tags for specific IPv6 destinations.", "notes": "It is under the IPv6 section of the RFC. IPv4 and IPv6 sections are really similiar and consecutively written, so its highly probable that after copy pasting the common information for both IPv4 and IPv6 to each other, forget to change that part from IPv4 to IPv6.", "submit_date": "2022-02-15", "submitter_name": "Eren El\u00e7in", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-02-15 21:16:10"}, {"errata_id": "6853", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.9.3.8.1.", "orig_text": "Next-Hop Address: An IPv4 address represented by four 8-bit values\r\n      (total 4 octets).  If the value is zero (0), the IPv6 address from\r\n      the received IPv4 header is used as the next hop for the route.\r\n      Otherwise, the specified IPv4 address will be used.", "correct_text": "Next-Hop Address: An IPv4 address represented by four 8-bit values\r\n      (total 4 octets).  If the value is zero (0), the IPv4 address from\r\n      the received IPv4 header is used as the next hop for the route.\r\n      Otherwise, the specified IPv4 address will be used.", "notes": "The address format in this Packet format at this section of the RFC is made for IPv4 type addresses. So, \"IPv6 address from the received IPv4 header\" should be \"IPv4 address from the received IPv4 header\".", "submit_date": "2022-02-16", "submitter_name": "Eren El\u00e7in", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-06 21:52:59"}, {"errata_id": "6854", "doc-id": "RFC6487", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.8.1", "orig_text": "   The Basic Constraints extension field is a critical extension in the\r\n   resource certificate profile, and MUST be present when the subject is\r\n   a CA, and MUST NOT be present otherwise.\r\n\r\n   The issuer determines whether the \"cA\" boolean is set.", "correct_text": "   The Basic Constraints extension field is critical and MUST be present \r\n   when the \"cA\" field is TRUE, otherwise it MUST NOT be present.", "notes": "See discussion at https://mailarchive.ietf.org/arch/msg/sidrops/dPCiDz_pDR68G4cTC8W7X5LTE5o/\n\nThe original text is tautological -- Since according to RFC 5280 \u00a74.2.1.9 the \"cA\" boolean MUST be set when the subject is a CA, and MUST NOT be set when the subject is not a CA, then it's axiomatic that \n\ncA boolean set <=> Basic Constraints field present <=> subject is a CA\n\nAlthough the original text is not strictly speaking wrong, it's potentially misleading since it could be read as implying that it's possible to have the cA boolean FALSE in a CA certificate, which is not so.", "submit_date": "2022-02-16", "submitter_name": "Corey Bonnell", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-05-24 17:40:38"}, {"errata_id": "6855", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "7.5.  The \"container\" Statement\r\n7.5.7.  XML Encoding Rules\r\n\r\n   A container node is encoded as an XML element.  The element's local\r\n   name is the container's identifier, and its namespace is the module's\r\n   XML namespace (see Section 7.1.3).\r\n\r\n   The container's child nodes are encoded as subelements to the\r\n   container element.  If the container defines RPC or action input or\r\n   output parameters, these subelements are encoded in the same order as\r\n   they are defined within the \"container\" statement.  Otherwise, the\r\n   subelements are encoded in any order.\r\n\r\n7.8. The \"list\" Statement\r\n7.8.5.  XML Encoding Rules\r\n\r\n   The list's key nodes are encoded as subelements to the list's\r\n   identifier element, in the same order as they are defined within the\r\n   \"key\" statement.\r\n\r\n   The rest of the list's child nodes are encoded as subelements to the\r\n   list element, after the keys.  If the list defines RPC or action\r\n   input or output parameters, the subelements are encoded in the same\r\n   order as they are defined within the \"list\" statement.  Otherwise,\r\n   the subelements are encoded in any order.\r\n   . . . . .\r\n\r\n7.14.  The \"rpc\" Statement\r\n7.14.4.  NETCONF XML Encoding Rules\r\n\r\n   . . . . .\r\n\r\n   Input parameters are encoded as child XML elements to the rpc node's\r\n   XML element, in the same order as they are defined within the \"input\"\r\n   statement.\r\n\r\n   If the RPC operation invocation succeeded and no output parameters\r\n   are returned, the <rpc-reply> contains a single <ok/> element defined\r\n   in [RFC6241].  If output parameters are returned, they are encoded as\r\n   child elements to the <rpc-reply> element defined in [RFC6241], in\r\n   the same order as they are defined within the \"output\" statement.\r\n\r\n\r\n7.15.  The \"action\" Statement\r\n7.15.2.  NETCONF XML Encoding Rules\r\n\r\n   . . . . .\r\n\r\n   The <action> element contains a hierarchy of nodes that identifies\r\n   the node in the datastore.  It MUST contain all containers and list\r\n   nodes in the direct path from the top level down to the list or\r\n   container containing the action.  For lists, all key leafs MUST also\r\n   be included.  The innermost container or list contains an XML element\r\n   that carries the name of the defined action.  Within this element,\r\n   the input parameters are encoded as child XML elements, in the same\r\n   order as they are defined within the \"input\" statement.\r\n\r\n   . . . . .\r\n\r\n   If the action operation invocation succeeded and no output parameters\r\n   are returned, the <rpc-reply> contains a single <ok/> element defined\r\n   in [RFC6241].  If output parameters are returned, they are encoded as\r\n   child elements to the <rpc-reply> element defined in [RFC6241], in\r\n   the same order as they are defined within the \"output\" statement.\r\n", "correct_text": "7.5.  The \"container\" Statement\r\n7.5.7.  XML Encoding Rules\r\n\r\n   . . . . .\r\n\r\n   The container's child nodes are encoded as subelements to the\r\n   container element.  If the container defines RPC or action input or\r\n   output parameters, these subelements MUST be encoded in the same order as\r\n   they are defined within the \"container\" statement.  Otherwise, the\r\n   subelements are encoded in any order.\r\n\r\n7.8. The \"list\" Statement\r\n7.8.5.  XML Encoding Rules\r\n\r\n   The list's key nodes MUST be encoded as subelements to the list's\r\n   identifier element, in the same order as they are defined within the\r\n   \"key\" statement.\r\n\r\n   The rest of the list's child nodes are encoded as subelements to the\r\n   list element, after the keys.  If the list defines RPC or action\r\n   input or output parameters, the subelements MUST be encoded in the same\r\n   order as they are defined within the \"list\" statement.  Otherwise,\r\n   the subelements are encoded in any order.\r\n   . . . . .\r\n\r\n7.14.  The \"rpc\" Statement\r\n7.14.4.  NETCONF XML Encoding Rules\r\n\r\n   . . . . .\r\n\r\n   Input parameters MUST be encoded as child XML elements to the rpc node's\r\n   XML element, in the same order as they are defined within the \"input\"\r\n   statement.\r\n\r\n   If the RPC operation invocation succeeded and no output parameters\r\n   are returned, the <rpc-reply> contains a single <ok/> element defined\r\n   in [RFC6241].  If output parameters are returned, they MUST be encoded as\r\n   child elements to the <rpc-reply> element defined in [RFC6241], in\r\n   the same order as they are defined within the \"output\" statement.\r\n\r\n\r\n7.15.  The \"action\" Statement\r\n7.15.2.  NETCONF XML Encoding Rules\r\n\r\n   . . . . .\r\n\r\n   The <action> element contains a hierarchy of nodes that identifies\r\n   the node in the datastore.  It MUST contain all containers and list\r\n   nodes in the direct path from the top level down to the list or\r\n   container containing the action.  For lists, all key leafs MUST also\r\n   be included.  The innermost container or list contains an XML element\r\n   that carries the name of the defined action.  Within this element,\r\n   the input parameters MUST be encoded as child XML elements, in the same\r\n   order as they are defined within the \"input\" statement.\r\n\r\n   . . . . .\r\n\r\n   If the action operation invocation succeeded and no output parameters\r\n   are returned, the <rpc-reply> contains a single <ok/> element defined\r\n   in [RFC6241].  If output parameters are returned, they MUST be encoded as\r\n   child elements to the <rpc-reply> element defined in [RFC6241], in\r\n   the same order as they are defined within the \"output\" statement.", "notes": "The RFC 2119 keywords are missing in description of ordering for XML encoding rules for RPC, actions and references thereto and in additional instance of list keys encoding.\r\n\r\nAlthough the text of RFC suggests reading this as if \"MUST\" was present, without keyword it is open to interpretation if the sentences actually mean \"MUST\" or \"SHOULD\" or may be even \"MAY\".\r\n\r\nIn other places discussing ordering, for example 7.7.8., 7.8.5. and 7.9.5. the \"MUST\" is actually present, hence proposed errata would make ordering description usage of keywords consistent.\n --VERIFIER NOTES-- \nI can see your point of view that MUST is used in other similar places, and I'm sure that in hindsight it would be nice if the language was used consistently in equivalent places.\r\n\r\nHowever, I don't think that the lack of a MUST statement makes the other text any less normative, or ambiguous.  In particular, there is this paragraph of RFC 8174 that updates RFC 2119:\r\n\r\n   o  These words can be used as defined here, but using them is not\r\n      required.  Specifically, normative text does not require the use\r\n      of these key words.  They are used for clarity and consistency\r\n      when that is what's wanted, but a lot of normative text does not\r\n      use them and is still normative.\r\n", "submit_date": "2022-02-17", "submitter_name": "Alexei Sadovnikov", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2022-02-22 15:19:32"}, {"errata_id": "7335", "doc-id": "RFC9054", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "       1 : int / tstr, # Algorithm identifier\r\n       2 : bstr, # Hash value\r\n       ? 3 : tstr, # Location of object that was hashed\r\n       ? 4 : any   # object containing other details and things\r\n", "correct_text": "       1 : int / tstr, ; Algorithm identifier\r\n       2 : bstr, ; Hash value\r\n       ? 3 : tstr, ; Location of object that was hashed\r\n       ? 4 : any   ; object containing other details and things\r\n", "notes": "The comment character for CDDL is a \";\", not a \"#\".", "submit_date": "2023-02-06", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7336", "doc-id": "RFC9115", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   oid = text .regexp \"([0-2])((\\.0)|(\\.[1-9][0-9]*))*\"\r\n", "correct_text": "   oid = text .regexp \"([0-2])((\\\\.0)|(\\\\.[1-9][0-9]*))*\"\r\n", "notes": "Backslashes need to be doubled in CDDL strings (as they are done in Appendix B).\r\n\r\nAn alternative fix would be to replace \\\\. by [.]\r\n\r\nNote that the equivalent fix is not required for\r\n\r\n   regtext = text .regexp \"([^\\*].*)|([\\*][^\\*].*)|([\\*][\\*].+)\"\r\n\r\nas the fact that the single backslashes have no effect is irrelevant here \u2014 the backslashes are not needed in the character classes [...].\r\nAs an editorial enhancement, the backslashes could be entirely removed from this line.", "submit_date": "2023-02-06", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "Roman Danyliw.com", "update_date": "2024-01-11 15:36:08"}, {"errata_id": "8563", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.1", "orig_text": "In HTCPCP, this response code MAY be returned if the operator of the \r\ncoffee pot cannot comply with the Accept-Addition request.", "correct_text": "In HTCPCP, this response code MAY be returned if the operator of the \r\ncoffee pot cannot comply with the Accept-Additions request.", "notes": "Missing an s after Accept-Addition(s) as defined in 2.2.2.1.", "submit_date": "2025-09-04", "submitter_name": "Eric Wang", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-09-04 18:39:37"}, {"errata_id": "6885", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11", "orig_text": "   A definition in a published module may be revised in any of the\r\n   following ways:\r\n\r\n   o  An \"enumeration\" type may have new enums added, provided the old\r\n      enums's values do not change.  Note that inserting a new enum\r\n      before an existing enum or reordering existing enums will result\r\n      in new values for the existing enums, unless they have explicit\r\n      values assigned to them.\r\n\r\n   o  A \"bits\" type may have new bits added, provided the old bit\r\n      positions do not change.  Note that inserting a new bit before an\r\n      existing bit or reordering existing bits will result in new\r\n      positions for the existing bits, unless they have explicit\r\n      positions assigned to them.", "correct_text": "See Notes.", "notes": "When server is exposing updated yang model as mentioned in Section 11, particularly with enums, bits having new items - client systems that are not updated to use the new yang module will not be able to recognize and use the new values.\r\n\r\nThis is problematic when there are multiple clients and those systems are getting updated to catch up with yang changes over time. Updated \"Client A\" recognizing new enum and using it (update datastore with new value using edit-config), will make, old/not-yet-updated \"Client B\" to encounter the new value (received as response of get-config) that it cannot work with.\r\n\r\nSo, the \"backward compatible\" ways of updating a yang module should consider \"multiple clients\" scenario and make recommendations in such a way that clients are not forced to update all at once.\n --VERIFIER NOTES-- \nThe document text accurately represents the consensus of the WG at the time that it was published.  Hence, this errata is beyond the scope of what changes could be considered as part of the errata process, such a change would need to happen via a new or updated RFC.", "submit_date": "2022-03-16", "submitter_name": "R Kaja Mohideen", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2022-03-17 10:10:24"}, {"errata_id": "6860", "doc-id": "RFC9102", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12", "orig_text": "   IANA has made the following assignment in the \"TLS ExtensionType\r\n   Values\" registry:\r\n\r\n      +=======+================+=========+=============+===========+\r\n      | Value | Extension Name | TLS 1.3 | Recommended | Reference |\r\n      +=======+================+=========+=============+===========+\r\n      |    59 | dnssec_chain   | CH      | No          | RFC 9102  |\r\n      +-------+----------------+---------+-------------+-----------+\r\n", "correct_text": "   IANA has made the following assignment in the \"TLS ExtensionType\r\n   Values\" registry:\r\n\r\n      +=======+================+=========+=============+===========+\r\n      | Value | Extension Name | TLS 1.3 | Recommended | Reference |\r\n      +=======+================+=========+=============+===========+\r\n      |    59 | dnssec_chain   | CH, CT  | No          | RFC 9102  |\r\n      +-------+----------------+---------+-------------+-----------+\r\n", "notes": "In TLS1.3, the dnssec_chain extension appears in the Certificate message from the server. Hence \"CT\" needs to be added to the \"TLS 1.3\" column.", "submit_date": "2022-02-24", "submitter_name": "Shumon Huque", "verifier_id": "", "verifier_name": "Eliot Lear (ISE)", "update_date": "2022-03-17 06:23:21"}, {"errata_id": "6862", "doc-id": "RFC2326", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.6", "orig_text": "     The syntax conforms to ISO 8601. The npt-sec notation is optimized\r\n     for automatic generation, the ntp-hhmmss notation for consumption\r\n     by human readers.", "correct_text": "     The syntax conforms to ISO 8601. The npt-sec notation is optimized\r\n     for automatic generation, the npt-hhmmss notation for consumption\r\n     by human readers.", "notes": "A typo, ntp-hhmmss \u2192 npt-hhmmss.\n --VERIFIER NOTES-- \n Already addressed in rfc7826", "submit_date": "2022-02-25", "submitter_name": "Chris Morgan", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-06 22:02:41"}, {"errata_id": "8750", "doc-id": "RFC9763", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A. ASN.1 M", "orig_text": "RequesterCertificate ::= SEQUENCE {\r\n  certID        IssuerAndSerialNumber,\r\n  requestTime   BinaryTime,\r\n  locationInfo  UniformResourceIdentifiers,\r\n  signature     BIT STRING }\r\n\r\nUniformResourceIdentifiers ::= SEQUENCE SIZE (1..MAX) OF URI", "correct_text": "RequesterCertificate ::= SEQUENCE {\r\n  certID        IssuerAndSerialNumber,\r\n  requestTime   BinaryTime,\r\n  locationInfo  UniformResourceIdentifier,\r\n  signature     BIT STRING }\r\n\r\nUniformResourceIdentifier ::= IA5String", "notes": "Or please update Section 3.1, if the structure should be `SEQUENCE SIZE (1..MAX) OF URI`.", "submit_date": "2026-02-10", "submitter_name": "Guiliano Lehmann", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6863", "doc-id": "RFC5910", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3, 5.1.2, 5.2.1", "orig_text": "   <secDNS:dsData>\r\n     <secDNS:keyTag>12345</secDNS:keyTag>\r\n     <secDNS:alg>3</secDNS:alg>\r\n     <secDNS:digestType>1</secDNS:digestType>\r\n     <secDNS:digest>49FD46E6C4B45C55D4AC</secDNS:digest>\r\n     <secDNS:keyData>\r\n       <secDNS:flags>257</secDNS:flags>\r\n       <secDNS:protocol>3</secDNS:protocol>\r\n       <secDNS:alg>1</secDNS:alg>\r\n       <secDNS:pubKey>AQPJ////4Q==</secDNS:pubKey>\r\n     </secDNS:keyData>\r\n    </secDNS:dsData>", "correct_text": "   <secDNS:dsData>\r\n     <secDNS:keyTag>12345</secDNS:keyTag>\r\n     <secDNS:alg>3</secDNS:alg>\r\n     <secDNS:digestType>1</secDNS:digestType>\r\n     <secDNS:digest>49FD46E6C4B45C55D4AC</secDNS:digest>\r\n     <secDNS:keyData>\r\n       <secDNS:flags>257</secDNS:flags>\r\n       <secDNS:protocol>3</secDNS:protocol>\r\n       <secDNS:alg>3</secDNS:alg>\r\n       <secDNS:pubKey>AQPJ////4Q==</secDNS:pubKey>\r\n     </secDNS:keyData>\r\n    </secDNS:dsData>", "notes": "The DS alg value must match the underlying (inside) DNSKEY alg value.\r\n\r\nFrom RFC 5910 respectively:\r\n   -  A <secDNS:alg> element that contains an algorithm value as\r\n      described in Section 5.1.2 of RFC 4034 [RFC4034].\r\nand\r\n   -  A <secDNS:alg> element that contains an algorithm number field\r\n      value as described in Section 2.1.3 of RFC 4034 [RFC4034].\r\n\r\nSection 5.1.2 of RFC 4034 says:\r\nThe algorithm number used by the DS RR is identical to the algorithm\r\n   number used by RRSIG and DNSKEY RRs.\r\n\r\n\r\nThe three occurrences are just examples so do not change the meaning of the specification, yet incorrect examples can create confusion.", "submit_date": "2022-02-25", "submitter_name": "Patrick Mevzek", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:50:41"}, {"errata_id": "6864", "doc-id": "RFC6350", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.1.3", "orig_text": "SOURCE:ldap://ldap.example.com/cn=Babs%20Jensen,%20o=Babsco,%20c=US", "correct_text": "SOURCE:ldap://ldap.example.com/cn=Babs%20Jensen\\,%20o=Babsco\\,%20c=US", "notes": "Section 3.4 states that all property values must have COMMA characters escaped with a BACKSLASH character. The SOURCE property value in the example contains a comma. Therefore it must be escaped with a backslash.", "submit_date": "2022-02-27", "submitter_name": "James Benner", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6865", "doc-id": "RFC8881", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "18.25.4", "orig_text": "The server MUST NOT delete the directory entry if the reply from \r\nOPEN had \r\nthe flag OPEN4_RESULT_PRESERVE_UNLINKED set.", "correct_text": "If the reply from OPEN had the flag OPEN4_RESULT_PRESERVE_UNLINKED set,\r\nThe server \r\nMUST NOI delete the file contents until each directory entry is \r\ndeleted and the file is no longer open.", "notes": "The existing second and third bullets are directly contradictory.", "submit_date": "2022-02-28", "submitter_name": "David Noveck", "verifier_id": "", "verifier_name": null, "update_date": "2022-03-14 22:26:25"}, {"errata_id": "6874", "doc-id": "RFC7285", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14.2", "orig_text": "                   +-------------+---------------------+\r\n                   | Identifier  | Intended Semantics  |\r\n                   +-------------+---------------------+\r\n                   | routingcost | See Section 6.1.1.1 |\r\n                   | priv:       | Private use         |\r\n                   +-------------+---------------------+\r\n\r\n                        Table 3: ALTO Cost Metrics", "correct_text": "                   +-------------+---------------------+\r\n                   | Identifier  | Intended Semantics  |\r\n                   +-------------+---------------------+\r\n                   | routingcost | See Section 6.1.1.1 |\r\n                   +-------------+---------------------+\r\n\r\n                        Table 3: ALTO Cost Metrics\r\n\r\nNote: Identifiers prefixed with \"priv:\" are\r\nreserved for Private Use (see Section 10.6)", "notes": "priv: is not a cost metric but a prefix", "submit_date": "2022-03-08", "submitter_name": "Mohamed BOUCADAIR", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-05-12 22:09:37"}, {"errata_id": "6870", "doc-id": "RFC957", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.1.", "orig_text": "...\r\nre-establish correct time upon rejoining the grrd. In the much more\r\n...", "correct_text": "...\r\nre-establish correct time upon rejoining the grid. In the much more\r\n...", "notes": "The word grid is misspelled as grrd.", "submit_date": "2022-03-07", "submitter_name": "Jim Young", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-14 22:06:16"}, {"errata_id": "6871", "doc-id": "RFC6582", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "If the Cumulative Acknowledgment field didn\u2019t cover more than\r\nrecover, check to see if the congestion window is greater than\r\nSMSS bytes and the difference between highest_ack and\r\nprev_highest_ack is at most 4*SMSS bytes. If true, duplicate\r\nACKs indicate a lost segment (enter fast retransmit).\r\nOtherwise, duplicate ACKs likely result from unnecessary\r\nretransmissions (do not enter fast retransmit).", "correct_text": "If the Cumulative Acknowledgment field didn\u2019t cover more than\r\nrecover, check to see if the congestion window is greater than\r\nSMSS bytes and the difference between highest_ack and\r\nprev_highest_ack is at most 3*SMSS bytes. If true, duplicate\r\nACKs indicate a lost segment (enter fast retransmit).\r\nOtherwise, duplicate ACKs likely result from unnecessary\r\nretransmissions (do not enter fast retransmit).", "notes": "RFC6582 (as well as RFC3782) references to Gur03 and GF04 papers as to the initial sources\r\nof the heuristics both ACK-based and Timestamp-based. Neither of those\r\npapers nor Gur03 nor GF04 defines difference between highest_ack and previous_highest_ack\r\nof at least 4*SMSS bytes upon receiving the third duplicate ACK as an indication \r\nof droped retransmitted segment. Instead, section III of GF04 says:\r\n\r\n\"The acknowledgment heuristic is based on an observation that if the \r\nTCP sender unnecessarily retransmits at least three adjacent packets,\r\nthere will be a jump by at least four segments in a cumulative \r\nacknowledgment field. The sender will have correctly retransmitted at least\r\none packet, to advance the cumulative acknowledgment field, and \r\nunnecessarily retransmitted at least three more to result in three duplicate\r\nacknowledgments. Following the advancement of the cumulative acknowledgment\r\nfield, the sender stores the value of the previous cumulative acknowledgment\r\nas prev_highest_ack and stores the latest cumulative acknowledgment as\r\nhighest_ack. Upon receiving the third duplicate acknowledgment,\r\nthe sender invokes a Fast Retransmit if its congestion window is greater\r\nthan one MSS (Maximum Segment Size), and the difference between highest_ack\r\nand prev_highest_ack is at most three MSS.\"\r\n\r\nAccording to GF04 if TCP sender in absence of any droped acknowledgments upon receiving\r\nthe third duplicate ACK has difference between highest_ack and prev_highest ack values \r\nof at most/i.e. no more than 3*SMSS bytes then this is explicite indication of droped retransmitted\r\nsegment and leads TCP sender to invoke Fast Retransmit, but current description of ACK-based\r\nheuristic in RFC6582 section 4.1 in part of: \"If the Cumulative Acknowledgment field didn\u2019t cover more  than recover, check to see if the congestion window is greater than\r\nSMSS bytes and the difference between highest_ack and prev_highest_ack is at most 4*SMSS bytes. \r\nIf true, duplicate ACKs indicate a lost segment (enter fast retransmit). Otherwise, duplicate ACKs \r\nlikely result from unnecessary retransmissions (do not enter fast retransmit). \", makes TCP sender \r\nto treat difference between highest_ack and prev_highest_ack of 4SMSS bytes upon receiving 3rd\r\nduplicate ACK as indication of lost retransmitted segment but again according to GF04 this is NOT so, \r\nand makes TCP sender to invoke Fast Retransmit when in fact those three duplicate acknowledgments \r\nindicate unnecessarily retransmitted segments and have in their acknowledgment fields sequence \r\nnumber which receiver expects to receive next but which sender has NOT sent yet, so Fast Retransmit \r\nhas no point in this case.", "submit_date": "2022-03-07", "submitter_name": "Clive Bloom", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-03-12 22:20:58"}, {"errata_id": "7337", "doc-id": "RFC9171", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B", "orig_text": "   ; Actual CBOR data embedded in a byte string, with optional tag to\r\n   indicate so.\r\n \r\n...\r\n \r\n   ; Extension block type, which does not specialize other than the\r\n   code/number\r\n\r\n...\r\n\r\n   payload-block = payload-block-structure .within canonical-block-\r\n   structure\r\n", "correct_text": "   ; Actual CBOR data embedded in a byte string, with optional tag to\r\n   ; indicate so.\r\n\r\n... \r\n \r\n   ; Extension block type, which does not specialize other than the\r\n   ; code/number\r\n\r\n...\r\n\r\n   payload-block = payload-block-structure .within\r\n                   canonical-block-structure\r\n", "notes": "Various line breaking events cause syntax errors while parsing Appendix B.\r\n\r\n--- notes ---\r\n\r\nChanged from Technical to Editorial as it seems like this was just a tooling/formatting issue.", "submit_date": "2023-02-06", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-11 17:38:32"}, {"errata_id": "7338", "doc-id": "RFC9338", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "           context : \"CounterSignature\" / \"CounterSignature0\" /\r\n                     \"CounterSignatureV2\" / \"CounterSignature0V2\" /,\r\n", "correct_text": "           context : \"CounterSignature\" / \"CounterSignature0\" /\r\n                     \"CounterSignatureV2\" / \"CounterSignature0V2\",\r\n", "notes": "A spurious slash (choice operator) causes a parsing error and needs to be removed before using the CDDL.", "submit_date": "2023-02-06", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7339", "doc-id": "RFC3376", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "This document obsoletes RFC 2236.\r\n", "correct_text": "This document updates RFC 2236.\r\n", "notes": "Report EID 1501 has been Verified to update the information in the document's header: from Obsoletes to Updates.\r\n\r\nThis sentence in the abstract should be corrected for the same reason.", "submit_date": "2023-02-07", "submitter_name": "Alvaro Retana", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2023-02-08 19:08:06"}, {"errata_id": "7340", "doc-id": "RFC9083", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix F", "orig_text": "   *  Noted that all members of the \"events\" and \"Public IDs\" arrays are\r\n      REQUIRED.", "correct_text": "   *  Noted which members of the \"events\" and \"Public IDs\" arrays are\r\n      REQUIRED.", "notes": "According to the \"events\" array, not all members are REQUIRED.\r\n\r\n===Verifier Notes\r\n\r\nSection 4.5 says:\r\n\r\nThe \"events\" array consists of objects, each with the following members:\r\n\r\n\"eventAction\" -- a REQUIRED string denoting the reason for the event\r\n\"eventActor\" -- an OPTIONAL identifier denoting the actor responsible for the event\r\n\"eventDate\" -- a REQUIRED string containing the time and date the event occurred\r\n\"links\" -- OPTIONAL; see Section 4.2\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/regext/d5OJsmmTTG2T2p_DiuWsqUyK-h4/", "submit_date": "2023-02-07", "submitter_name": "Rudi Floren", "verifier_id": "", "verifier_name": "Mohamed BOUCADAIR", "update_date": "2026-05-05 13:12:21"}, {"errata_id": "6872", "doc-id": "RFC8984", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.3.", "orig_text": "   \"private\":  The details of the object are hidden; only the basic time\r\n      and metadata are shared.  The following properties MAY be shared;\r\n      any other properties MUST NOT be shared:\r\n\r\n      *  @type\r\n\r\n      *  created\r\n\r\n      *  due\r\n\r\n      *  duration\r\n\r\n      *  estimatedDuration\r\n\r\n      *  freeBusyStatus\r\n\r\n      *  privacy\r\n\r\n      *  recurrenceOverrides (Only patches that apply to another\r\n         permissible property are allowed to be shared.)\r\n\r\n      *  sequence\r\n\r\n      *  showWithoutTime\r\n\r\n      *  start\r\n\r\n      *  timeZone\r\n\r\n      *  timeZones\r\n\r\n      *  uid\r\n\r\n      *  updated", "correct_text": "   \"private\":  The details of the object are hidden; only the basic time\r\n      and metadata are shared.  The following properties MAY be shared;\r\n      any other properties MUST NOT be shared:\r\n \r\n      *  @type\r\n \r\n      *  created\r\n \r\n      *  due\r\n \r\n      *  duration\r\n \r\n      *  estimatedDuration\r\n \r\n      *  excluded\r\n \r\n      *  excludedRecurrenceRules\r\n \r\n      *  freeBusyStatus\r\n \r\n      *  privacy\r\n \r\n      *  recurrenceId\r\n \r\n      *  recurrenceIdTimeZone\r\n \r\n      *  recurrenceOverrides (Only patches that apply to another\r\n         permissible property are allowed to be shared.)\r\n \r\n      *  recurrenceRules\r\n \r\n      *  sequence\r\n \r\n      *  showWithoutTime\r\n \r\n      *  start\r\n \r\n      *  timeZone\r\n \r\n      *  timeZones\r\n \r\n      *  uid\r\n \r\n      *  updated", "notes": "Adds the excluded, excludedRecurrenceRules, recurrenceId, recurrenceIdTimeZone and recurrenceRules properties to the list of shared properties of private events.\r\n \r\nOnly the combination of all recurrence properties allows to generate the full recurrence set for the event.\r\n \r\nOmitting the properties was an oversight during the initial publication of this RFC.", "submit_date": "2022-03-07", "submitter_name": "Robert Stepanek", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-03-20 13:07:39"}, {"errata_id": "6873", "doc-id": "RFC8984", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.2.", "orig_text": "Identifies the time zone of the main JSCalendar object, of which this\r\nJSCalendar object is a recurrence instance.  This property MUST be\r\nset if the \"recurrenceId\" property is set.  It MUST NOT be set if the\r\n\"recurrenceId\" property is not set.", "correct_text": "Identifies the time zone of the main JSCalendar object, of which this\r\nJSCalendar object is a recurrence instance.  It MUST NOT be set if the\r\n\"recurrenceId\" property is not set.", "notes": "A recurrence instance may be in floating time, in which case the value of the \"recurrenceIdTimeZone\" property is null. As null is the default value of the \"recurrenceIdTimeZone\" property, it is NOT required to be set if \"recurrenceId\" is set.", "submit_date": "2022-03-07", "submitter_name": "Robert Stepanek", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-03-20 15:51:57"}, {"errata_id": "6876", "doc-id": "RFC7285", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14.3", "orig_text": "                    +------------+--------------------+\r\n                    | Identifier | Intended Semantics |\r\n                    +------------+--------------------+\r\n                    | pid        | See Section 7.1.1  |\r\n                    | priv:      | Private use        |\r\n                    +------------+--------------------+\r\n \r\n                   Table 4: ALTO Endpoint Property Types\r\n", "correct_text": "                    +------------+--------------------+\r\n                    | Identifier | Intended Semantics |\r\n                    +------------+--------------------+\r\n                    | pid        | See Section 7.1.1  |\r\n                    +------------+--------------------+\r\n \r\n                   Table 4: ALTO Endpoint Property Types\r\n\r\n Note: Identifiers prefixed with \"priv:\" are\r\n reserved for Private Use (see Section 10.8.2.)\r\n", "notes": "priv: is not an identifier, but a prefix.", "submit_date": "2022-03-09", "submitter_name": "Mohamed BOUCADAIR", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2022-05-12 22:09:50"}, {"errata_id": "6877", "doc-id": "RFC8175", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.2.", "orig_text": "All status code values less than 100 have a failure mode of 'Continue'; all other status codes have a failure mode of 'Terminate'.", "correct_text": "All status code values less than 128 have a failure mode of 'Continue'; all other status codes have a failure mode of 'Terminate'.", "notes": "\"Table 2: DLEP Status Codes\" indicates that all status code values less than 128 have failure mode 'Continue'.", "submit_date": "2022-03-10", "submitter_name": "Izar", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-03-10 14:40:26"}, {"errata_id": "6878", "doc-id": "RFC8174", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "http://www.rfc-editor.org/info/rfc8174\r\nhttp://trustee.ietf.org/license-info\r\nhttp://www.rfc-editor.org/info/rfc2119\r\nhttp://internetmessagingtechnology.org", "correct_text": "https://www.rfc-editor.org/info/rfc8174\r\nhttps://trustee.ietf.org/documents/trust-legal-provisions\r\nhttps://www.rfc-editor.org/info/rfc2119\r\nhttps://internetmessagingtechnology.org", "notes": "The URLs should be using HTTPS instead of HTTP and should be updated.\n --VERIFIER NOTES-- \nThis is how the URLs were presented when the RFC was published.  ", "submit_date": "2022-03-10", "submitter_name": "Boris", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-05 22:52:13"}, {"errata_id": "6868", "doc-id": "RFC675", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "6. ROWE74", "correct_text": "6. ROWE70", "notes": "[PSN] [ROWE70,\r\n   POUZ73]. \r\n\r\nAFIPS 1970,", "submit_date": "2022-03-05", "submitter_name": "Chuck Craft", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-15 23:06:10"}, {"errata_id": "6879", "doc-id": "RFC20", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "where as UCLA uses X'OD' or 0/13 (carriage return).", "correct_text": "where as UCLA uses X'0D' or 0/13 (carriage return).", "notes": "x'0d', not x'od'", "submit_date": "2022-03-12", "submitter_name": "studentmain", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-14 21:54:01"}, {"errata_id": "6881", "doc-id": "RFC6890", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.2", "orig_text": "   Tables 1 though 16, below, represent entries with which IANA has\r\n   initially populated the IPv4 Special-Purpose Address Registry.", "correct_text": "   Tables 1 through 16, below, represent entries with which IANA has\r\n   initially populated the IPv4 Special-Purpose Address Registry.", "notes": "obvious typo on word \"through\"", "submit_date": "2022-03-14", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-14 21:53:07"}, {"errata_id": "6882", "doc-id": "RFC6890", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.3", "orig_text": "   Tables 17 through 28, below, represent entries with which the IANA\r\n   has initially populated the IPv6 Special-Purpose Address Registry.", "correct_text": "   Tables 17 through 29, below, represent entries with which the IANA\r\n   has initially populated the IPv6 Special-Purpose Address Registry.", "notes": "The last table (29) entry was populated at the same time than some others (loopback for example, RFC 4291)", "submit_date": "2022-03-14", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-14 22:04:02"}, {"errata_id": "6886", "doc-id": "RFC8640", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A. 4.", "orig_text": " <rpc message-id=\"601\" xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n   <establish-subscription\r\n     xmlns=\"urn:ietf:params:xml:ns:yang:ietf-subscribed-notifications\">\r\n     <stream>NETCONF</stream>\r\n     <stream-xpath-filter xmlns=\"urn:ietf:params:xml:ns:yang:ietf-vrrp\">\r\n       /vrrp-protocol-error-event[\r\n          vrrp:protocol-error-reason=\"vrrp:checksum-error\"]\r\n     </stream-xpath-filter>\r\n   </establish-subscription>\r\n </rpc>", "correct_text": " <rpc message-id=\"601\" xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n   <establish-subscription\r\n     xmlns=\"urn:ietf:params:xml:ns:yang:ietf-subscribed-notifications\">\r\n     <stream>NETCONF</stream>\r\n     <stream-xpath-filter xmlns:vrrp=\"urn:ietf:params:xml:ns:yang:ietf-vrrp\">\r\n       /vrrp:vrrp-protocol-error-event[\r\n          derived-from-or-self(vrrp:protocol-error-reason, \"vrrp:checksum-error\")]\r\n     </stream-xpath-filter>\r\n   </establish-subscription>\r\n </rpc>", "notes": "The original example put <stream-xpath-filter> element in a wrong namespace, never defined a namespace binding for prefix \"vrrp\" and checked a value of type identityref by treating it as an XPath string literal (instead of using the XPath function from RFC 7950, which is allowed by type definition of leaf \"stream-xpath-filter\").", "submit_date": "2022-03-16", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6887", "doc-id": "RFC1630", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Reommendations", "orig_text": "Reommendations", "correct_text": "Recommendations", "notes": "minor typo\r\ns/Reommendations/Recommendations/", "submit_date": "2022-03-17", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-17 23:29:51"}, {"errata_id": "6889", "doc-id": "RFC1630", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "OTHER RESERVED CHARACTERS", "orig_text": "      The astersik (\"*\", ASCII 2A hex) and exclamation mark (\"!\" , ASCII\r\n      21 hex) are reserved for use as having special signifiance within\r\n      specific schemes.", "correct_text": "      The asterisk (\"*\", ASCII 2A hex) and exclamation mark (\"!\" , ASCII\r\n      21 hex) are reserved for use as having special significance within\r\n      specific schemes.", "notes": "Errata 6888 was sent too fast, sorry. Minor typos.\r\ns/astersik/asterisk/ \r\ns/signifiance/significance/", "submit_date": "2022-03-17", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-17 23:44:22"}, {"errata_id": "6891", "doc-id": "RFC9124", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.18", "orig_text": "4.3.18.  REQ.SEC.KEY.ROTATION: Protected Storage of Signing Keys", "correct_text": "4.3.18.  REQ.SEC.KEY.ROTATION: Rotation of Signing Keys", "notes": "The current text is duplicated from the heading of 4.3.17.", "submit_date": "2022-03-02", "submitter_name": "\u00d8yvind R\u00f8nningstad", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-24 20:01:55"}, {"errata_id": "6893", "doc-id": "RFC7644", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.5.2", "orig_text": "HTTP/1.1 403 Forbidden\r\n\r\n  {\r\n    \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:Error\"],\r\n    \"detail\":\r\n          \"Query filter involving 'name' is restricted or confidential\",\r\n    \"scimType\": \"sensitive\",\r\n    \"status\": \"404\"\r\n  }\r\n", "correct_text": "HTTP/1.1 403 Forbidden\r\n\r\n  {\r\n    \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:Error\"],\r\n    \"detail\":\r\n          \"Query filter involving 'name' is restricted or confidential\",\r\n    \"scimType\": \"sensitive\",\r\n    \"status\": \"403\"\r\n  }\r\n", "notes": "The error \"status\" value in the figure is wrong. It should be \"403\", consistent with the normative text and the HTTP Status at the start of the figure.", "submit_date": "2022-03-24", "submitter_name": "Phil Hunt", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-03-25 20:49:46"}, {"errata_id": "6899", "doc-id": "RFC8407", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   o  License -- verify that the document contains the Simplified BSD\r\n      License in each YANG module or submodule.  Some guidelines related\r\n      to this requirement are described in Section 3.1.  Make sure that\r\n      the correct year is used in all copyright dates.  Use the approved\r\n      text from the latest TLP document, which can be found at:", "correct_text": "   o  License -- verify that the document contains the Revised BSD\r\n      License in each YANG module or submodule.  Some guidelines related\r\n      to this requirement are described in Section 3.1.  Make sure that\r\n      the correct year is used in all copyright dates.  Use the approved\r\n      text from the latest TLP document, which can be found at:", "notes": "https://trustee.ietf.org/documents/trust-legal-provisions/tlp-5/ says:\r\n\r\n==\r\nNote: in prior versions of these provisions, the software license was erroneously called the \u201cSimplified BSD License\u201d rather than the \u201cRevised BSD License\u201d, and many documents that refer to these provisions copied the erroneous name. The IETF Trust corrected the error on September 21, 2021. The license text itself was always that of the Revised BSD License and has not changed.\r\n==\r\n --VERIFIER NOTES--\r\nVerified per discussion with John Levine and individuals in the netmod WG.  \u201cSimplified\u201d is what was used when RFC 8407 was published.  However, this RFC is providing guidance for authors and reviewers of future documents.", "submit_date": "2022-03-29", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-06 21:00:23"}, {"errata_id": "7808", "doc-id": "RFC7997", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "1", "orig_text": "Please review the PDF version of this draft.", "correct_text": "Please review the \"PDF with images\" version of this draft.", "notes": "This may not be precisely an erratum, but this seems like the right place to report and record it.   While the above statement points to the PDF version (as explained further on, to be able to see the non-ASCII characters),  if one goes to https://www.rfc-editor.org/search/rfc_search_detail.php for this RFC and clicks on \"PDF\" one gets a PDF rendering that is substantially identical to the text version, i.e., the non-ASCII characters do not appear.  \"PDF with images\" works, but that is not what the specification says. \r\n\r\nAnd, while I'm whining, the use of the term \"draft\" in that sentence is inappropriate and should have been caught during editing.", "submit_date": "2024-02-10", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6900", "doc-id": "RFC8345", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "\"network-id\": \"otn-hc\",", "correct_text": "\"network-id\": \"foo:otn-hc\",", "notes": "This is to match the network-id type:\r\n\r\n     typedef network-id {\r\n       type inet:uri;\r\n       description\r\n         \"Identifier for a network.  The precise structure of the\r\n          network-id will be up to the implementation.  The identifier\r\n          SHOULD be chosen such that the same network will always be\r\n          identified through the same identifier, even if the data model\r\n          is instantiated in separate datastores.  An implementation MAY\r\n          choose to capture semantics in the identifier -- for example,\r\n          to indicate the type of network.\";\r\n     }", "submit_date": "2022-03-29", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-06-22 20:19:48"}, {"errata_id": "8752", "doc-id": "RFC9783", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.2", "orig_text": "epoch handle(s)", "correct_text": "Epoch ID(s)", "notes": "\"Epoch handle\" is neither defined nor even used in RFC9334. The mentioned section 10.3 of RFC9334 instead uses the term \"Epoch IDs\". So, there is no need to invent a new term in RFC9783.\r\n\r\n---\r\n\r\nOnly for additional reference: [0-3]\r\n\r\n[0] https://mailarchive.ietf.org/arch/msg/rats/CgvwdtLEEVxQj2Ab5y6RRugS8zk/\r\n\r\n[1]\r\nhttps://datatracker.ietf.org/meeting/124/materials/slides-124-rats-sessb-guideline-for-security-consideration-of-rats-00#page=8\r\n\r\n[2]\r\nhttps://datatracker.ietf.org/meeting/interim-2026-rats-01/materials/slides-interim-2026-rats-01-sessa-relayattacks-00.pdf#page=11\r\n\r\n[3] https://mailarchive.ietf.org/arch/msg/rats/wCM3H2HFXiKMSLgpEAdQG4w4MiE/", "submit_date": "2026-02-11", "submitter_name": "Muhammad Usama Sardar", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-02 21:54:49"}, {"errata_id": "6907", "doc-id": "RFC7517", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "C.7", "orig_text": "C.7.  Additional Authenticated Data\r\n\r\n   Let the Additional Authenticated Data encryption parameter be\r\n   ASCII(BASE64URL(UTF8(JWE Protected Header))).  This value is:\r\n\r\n   [123, 34, 97, 108, 103, 34, 58, 34, 80, 66, 69, 83, 50, 45, 72, 83,\r\n   50, 53, 54, 43, 65, 49, 50, 56, 75, 87, 34, 44, 34, 112, 50, 115, 34,\r\n   58, 34, 50, 87, 67, 84, 99, 74, 90, 49, 82, 118, 100, 95, 67, 74,\r\n   117, 74, 114, 105, 112, 81, 49, 119, 34, 44, 34, 112, 50, 99, 34, 58,\r\n   52, 48, 57, 54, 44, 34, 101, 110, 99, 34, 58, 34, 65, 49, 50, 56, 67,\r\n   66, 67, 45, 72, 83, 50, 53, 54, 34, 44, 34, 99, 116, 121, 34, 58, 34,\r\n   106, 119, 107, 43, 106, 115, 111, 110, 34, 125]", "correct_text": "C.7.  Additional Authenticated Data\r\n\r\n   Let the Additional Authenticated Data encryption parameter be\r\n   ASCII(BASE64URL(UTF8(JWE Protected Header))).  The value is:\r\n\r\n   [101, 121, 74, 104, 98, 71, 99, 105, 79, 105, 74, 81, 81, 107, 86,\r\n   84, 77, 105, 49, 73, 85, 122, 73, 49, 78, 105, 116, 66, 77, 84, 73,\r\n   52, 83, 49, 99, 105, 76, 67, 74, 119, 77, 110, 77, 105, 79, 105, 73,\r\n   121, 86, 48, 78, 85, 89, 48, 112, 97, 77, 86, 74, 50, 90, 70, 57, 68,\r\n   83, 110, 86, 75, 99, 109, 108, 119, 85, 84, 70, 51, 73, 105, 119,\r\n   105, 99, 68, 74, 106, 73, 106, 111, 48, 77, 68, 107, 50, 76, 67, 74,\r\n   108, 98, 109, 77, 105, 79, 105, 74, 66, 77, 84, 73, 52, 81, 48, 74,\r\n   68, 76, 85, 104, 84, 77, 106, 85, 50, 73, 105, 119, 105, 89, 51, 82,\r\n   53, 73, 106, 111, 105, 97, 110, 100, 114, 75, 50, 112, 122, 98, 50,\r\n   52, 105, 102, 81]", "notes": "The array in the original text is the content of JWE Protected Header. The corrected text shows the content of the AAD parameter.", "submit_date": "2022-03-30", "submitter_name": "Weijun Wang", "verifier_id": "", "verifier_name": null, "update_date": "2022-04-01 22:46:49"}, {"errata_id": "6909", "doc-id": "RFC8152", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Generic_Headers = (\r\n    ? 1 => int / tstr,  ; algorithm identifier\r\n    ? 2 => [+label],    ; criticality\r\n    ? 3 => tstr / int,  ; content type\r\n    ? 4 => bstr,        ; key identifier\r\n    ? 5 => bstr,        ; IV\r\n    ? 6 => bstr         ; Partial IV\r\n)", "correct_text": "Generic_Headers = (\r\n    ? 1 => int / tstr,  ; algorithm identifier\r\n    ? 2 => [+label],    ; criticality\r\n    ? 3 => tstr / int,  ; content type\r\n    ? 4 => bstr,        ; key identifier\r\n    ? ( 5 => bstr //    ; IV\r\n        6 => bstr )     ; Partial IV\r\n)", "notes": "Section 3.1 says: \"The \"Initialization Vector\" and \"Partial Initialization Vector\" header parameters MUST NOT both be present in the same security layer.\"", "submit_date": "2022-03-31", "submitter_name": "Thomas Fossati", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-05 20:56:47"}, {"errata_id": "6910", "doc-id": "RFC9225", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4. Best Current", "orig_text": "6. In fact, assume all internal inputs also are the result of bugs.\r\n", "correct_text": "6. In fact, assume all internal inputs also are the result of bugs.\r\n\r\n7. If the bug population increases after each subsequent software \r\nrelease, it is generally RECOMMENDED to deploy a Software Bug [BOMbs],\r\nand return when the air has cleared.\r\n\r\n[BOMbs] National Telecommunications and Information Administration,\r\nUnited States Department of Commerce, 2021, https://ntia.gov/SBOM", "notes": "Extend the RFC to include another best practice, associated with BOMbs.\n --VERIFIER NOTES-- \nThanks for your thoughts.  Follow-ups to this RFC are welcome, but must stand on their own merit.", "submit_date": "2022-04-01", "submitter_name": "Joe Klein", "verifier_id": "", "verifier_name": "Eliot Lear (ISE)", "update_date": "2022-08-21 06:24:31"}, {"errata_id": "6911", "doc-id": "RFC9225", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "4. Best Current Practises", "correct_text": "4. Best Current Practices", "notes": "", "submit_date": "2022-04-01", "submitter_name": "Kyoung-Hwan Yun", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-10-02 17:33:21"}, {"errata_id": "7354", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   The traditional technique [CAM] was to attach a frame-grabber to a\r\n   video camera, and feed the images to a web server. This was an\r\n   appropriate application of ATM networks. In this coffee pot\r\n   installation, the Trojan Room of Cambridge University laboratories\r\n   was used to give a web interface to monitor a common coffee pot.  of\r\n   us involved in related research and, being poor, impoverished\r\n   academics, we only had one coffee filter machine between us, which\r\n   lived in the corridor just outside the Trojan Room. However, being\r\n   highly dedicated and hard-working academics, we got through a lot of\r\n   coffee, and when a fresh pot was brewed, it often didn't last long.", "correct_text": "   The traditional technique [CAM] was to attach a frame-grabber to a\r\n   video camera, and feed the images to a web server. This was an\r\n   appropriate application of ATM networks. In this coffee pot\r\n   installation, the Trojan Room of Cambridge University laboratories\r\n   was used to give a web interface to monitor a common coffee pot.  Of\r\n   us involved in related research and, being poor, impoverished\r\n   academics, we only had one coffee filter machine between us, which\r\n   lived in the corridor just outside the Trojan Room. However, being\r\n   highly dedicated and hard-working academics, we got through a lot of\r\n   coffee, and when a fresh pot was brewed, it often didn't last long.", "notes": "Correct lowercase letter at start of sentence", "submit_date": "2023-02-15", "submitter_name": "Drew DeVault", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-02-15 22:20:08"}, {"errata_id": "7716", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "   For example, the authorization server redirects the user-agent by\r\n   sending the following HTTP response (with extra line breaks for\r\n   display purposes only):\r\n\r\n     HTTP/1.1 302 Found\r\n     Location: http://example.com/cb#access_token=2YotnFZFEjr1zCsicMWpAA\r\n               &state=xyz&token_type=example&expires_in=3600\r\n", "correct_text": "   For example, the authorization server redirects the user-agent by\r\n   sending the following HTTP response (with extra line breaks for\r\n   display purposes only):\r\n\r\n     HTTP/1.1 302 Found\r\n     Location: http://client.example.com/cb?access_token=2YotnFZFEjr1zCsicMWpAA\r\n               &state=xyz&token_type=example&expires_in=3600\r\n", "notes": "- Host example.com should be client.example.com to be consistent with other examples.\r\n- A hash is used for the query parameters when a question mark should have been used.\r\n\r\nRFC Editor Note: The first point above is a duplicate of EID 4819, which is currently still in Reported state (see https://www.rfc-editor.org/errata/eid4819). ", "submit_date": "2023-11-29", "submitter_name": "Alex Wilson", "verifier_id": "", "verifier_name": null, "update_date": "2023-12-01 19:49:41"}, {"errata_id": "7715", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.2.1", "orig_text": "   HTTP/1.1 302 Found\r\n   Location: https://client.example.com/cb#error=access_denied&state=xyz", "correct_text": "   HTTP/1.1 302 Found\r\n   Location: https://client.example.com/cb?error=access_denied&state=xyz", "notes": "For query parameters, the hash should be a question mark.", "submit_date": "2023-11-29", "submitter_name": "Alex Wilson", "verifier_id": "", "verifier_name": null, "update_date": "2023-11-29 19:11:26"}, {"errata_id": "8591", "doc-id": "RFC8972", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "Timestamp In:  A one-octet field that characterizes the method by\r\n   which the ingress of the Session-Reflector obtained the timestamp\r\n   T2.  A timestamp may be obtained with hardware assistance via a\r\n   software API from a local wall clock or from a remote clock (the\r\n   latter is referred to as a \"control plane\").  Table 9 lists the\r\n   possible values.\r\n\r\nSync Src Out:  A one-octet field that characterizes the source of\r\n   clock synchronization at the egress of the Session-Reflector.\r\n   Table 7 lists the possible values.\r\n\r\nTimestamp Out:  A one-octet field that characterizes the method by\r\n   which the egress of the Session-Reflector obtained the timestamp\r\n   T3.  Table 9 lists the possible values.", "correct_text": "Timestamp In:  A one-octet field that characterizes the method by\r\n   which timestamps are obtained at the ingress of the \r\n   Session-Reflector.\r\n   A timestamp may be obtained with hardware assistance via a\r\n   software API from a local wall clock or from a remote clock (the\r\n   latter is referred to as a \"control plane\").  Table 9 lists the\r\n   possible values.\r\n\r\nSync Src Out:  A one-octet field that characterizes the source of\r\n   clock synchronization at the egress of the Session-Reflector.\r\n   Table 7 lists the possible values.\r\n\r\nTimestamp Out:  A one-octet field that characterizes the method by\r\n   which timestamps are obtained at the egress of\r\n   the Session-Reflector. Table 9 lists the possible values.", "notes": "First, and as usual, I sincerely appreciate the technical accuracy of the authors of the STAMP-related RFCs. As an implementer, the writing and specificity make it easy to build compliant software. I hope that this errata report is helpful for future implementers.\r\n\r\nSecond, I apologize for not knowing the best way to refer to two, non contiguous phrases from the same section that both require changes. I hope that what I have included makes it obvious what needs to be changed.\r\n\r\nI have conferred with one of the RFC's authors who indicated that the inclusion of T2 and T3 were simply the result of an error in drafting. We collaborated via email to arrive at the corrected text I have submitted here. I say that only to indicate that I have attempted to do enough research prior to submitting this report so that it is not a waste of time but _not_ to imply that the person with whom I communicated endorses this report.\r\n\r\nThank you again for your work!\r\nWill\r\n\r\n==Verifier Note\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/ippm/t4-ZrPhTKo6JCaApOTfBJUA-w9s/", "submit_date": "2025-10-03", "submitter_name": "William Hawkins", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-10-07 07:56:24"}, {"errata_id": "6927", "doc-id": "RFC5424", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "SD-NAME         = 1*32PRINTUSASCII\r\n                  ; except '=', SP, ']', %d34 (\")\r\n...\r\n\r\nPRINTUSASCII    = %d33-126", "correct_text": "SD-NAME         = 1*32PRINTUSASCII\r\n                  ; except '=', SP, ']', %d34 (\")\r\n...\r\nPRINTUSASCII    = %d32-126", "notes": "When excluding SP %d32 from PRINTUSASCII, then it does not make sense to state \"except ..SP ..\"\r\nThere are more issues with the grammar:\r\nSD_NAME forbids ']', but it should also forbid '['", "submit_date": "2022-04-07", "submitter_name": "Ulrich Windl", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6928", "doc-id": "RFC7801", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   l(a_15,...,a_0) = nabla(148*delta(a_15) + 32*delta(a_15) +\r\n   133*delta(a_13) + 16*delta(a_12) + 194*delta(a_11) +\r\n   192*delta(a_10) + 1*delta(a_9) + 251*delta(a_8) + 1*delta(a_7) +\r\n   192*delta(a_6) + 194*delta(a_5) + 16*delta(a_4) + 133*delta(a_3) +\r\n   32*delta(a_2) + 148*delta(a_1) +1*delta(a_0)),", "correct_text": "   l(a_15,...,a_0) = nabla(148*delta(a_15) + 32*delta(a_14) +\r\n   133*delta(a_13) + 16*delta(a_12) + 194*delta(a_11) +\r\n   192*delta(a_10) + 1*delta(a_9) + 251*delta(a_8) + 1*delta(a_7) +\r\n   192*delta(a_6) + 194*delta(a_5) + 16*delta(a_4) + 133*delta(a_3) +\r\n   32*delta(a_2) + 148*delta(a_1) +1*delta(a_0)),", "notes": "While I do not have access to the original GOST R 34.12-2015, I believe from implementations I've seen that '32*delta(a_15)' on the first line should be '32*delta(a_14)', unless a_15 is meant to be used twice and a_14 is to be discarded.", "submit_date": "2022-04-09", "submitter_name": "Martin Vaaden", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-13 18:34:22"}, {"errata_id": "6933", "doc-id": "RFC8572", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "section-7.2", "orig_text": "   Content-Type: application/yang.data+xml", "correct_text": "   Content-Type: application/yang-data+xml", "notes": "Note the diff: \"yang.data\" vs \"yang-data\"\r\n\r\nThere are 5 occurrences of the same errata in Section7.2.\r\n\r\nAs per RESTCONF Protocol [rfc8040] valid Media Types are:\r\na) application/yang-data+xml\r\nb) application/yang-data+json\r\n\r\nReferences:\r\nhttps://datatracker.ietf.org/doc/html/rfc8040#section-11.3\r\nhttps://www.iana.org/assignments/media-types/media-types.xhtml", "submit_date": "2022-04-14", "submitter_name": "Dimitris Athanasopoulos", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-14 21:46:42"}, {"errata_id": "6930", "doc-id": "RFC6857", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.8", "orig_text": "The <addr-spec> element that contains non-ASCII strings may appear in two forms as:\r\n\r\n   \"<\" addr-spec \">\"\r\n\r\n   or\r\n\r\n   addr-spec\r\n\r\n   Rewrite both as:\r\n\r\n   ENCODED-WORD \" :;\"\r\n", "correct_text": "The <addr-spec> element that contains non-ASCII strings may appear in two forms as:\r\n\r\n   \"<\"  local-part \"@\" domain \">\"\r\n\r\n   or\r\n\r\n   local-part \"@\" domain\r\n\r\n   If the <local-part> contains non-ASCII characters, rewrite both to:\r\n\r\n   ENCODED-WORD \"@\" domain\r\n\r\n   If the <domain> contains non-ASCII characters in any of its labels, they MUST appear in A-label form as described in Section 3.1.6.\r\n\r\nIf the <addr-spec> is part of a <mailbox> specification that contains a <display-name>, the display name should be handled as per the discussion in Section 3.1.5 and the <mailbox> and <addr-spec> containing non-ASCII characters  MUST appear as\r\n\r\n   DISPLAY-NAME \"<\" ENCODED-WORD \"@\" domain \">\"\r\n\r\nfor consistency with RFC 5322.\r\n", "notes": "Recommend \"Hold for document update\" and see the extensive comments on Erratum 6573.\r\n\r\nThe text above, while correct, is fairly horrible and might make the confusion between the requirements of Sections 3.1.5 and 3.1.8 even worse.  A complete rewrite of this section and possibly 3.1.5 would be a better fix.   Note the prohibition on Encoded Words in <addr-spec> in RFC 2047, which requires updating.   Also note that the \" :;\" construction, which is correct in Section 3.1.7, does not belong in the above.\r\n\r\nIt also not clear to me why, under some principle of minimal change, the brackets should not be just left alone if they appear in the original with no adjacent display-name.", "submit_date": "2022-04-10", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:54:36"}, {"errata_id": "7359", "doc-id": "RFC8431", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "     grouping vxlan-header {\r\n       description\r\n         \"The VXLAN encapsulation header information.\";\r\n       choice vxlan-type {\r\n         description\r\n           \"NVGRE can use either an IPv4\r\n            or an IPv6 header for encapsulation.\";\r\n         case ipv4 {\r\n           uses ipv4-header;\r\n         }\r\n         case ipv6 {\r\n           uses ipv6-header;\r\n         }\r\n       }\r\n       leaf vxlan-identifier {\r\n         type uint32;\r\n         mandatory true;\r\n         description\r\n           \"The VXLAN identifier of the VXLAN header.\";\r\n       }\r\n     }\r\n", "correct_text": "     grouping vxlan-header {\r\n       description\r\n         \"The VXLAN encapsulation header information.\";\r\n       choice vxlan-type {\r\n         description\r\n           \"VXLAN can use either an IPv4\r\n            or an IPv6 header for encapsulation.\";\r\n         case ipv4 {\r\n           uses ipv4-header;\r\n         }\r\n         case ipv6 {\r\n           uses ipv6-header;\r\n         }\r\n       }\r\n       leaf vxlan-identifier {\r\n         type uint32;\r\n         mandatory true;\r\n         description\r\n           \"The VXLAN identifier of the VXLAN header.\";\r\n       }\r\n     }\r\n", "notes": "In the description, instead of VXLAN, NVGRE is indicated (page 49)", "submit_date": "2023-02-17", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2023-02-17 15:16:33"}, {"errata_id": "8849", "doc-id": "RFC2119", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "abstract", "orig_text": "3. SHOULD   This word, or the adjective \"RECOMMENDED\", mean that there\r\n   may exist valid reasons in particular circumstances to ignore a\r\n   particular item, but the full implications must be understood and\r\n   carefully weighed before choosing a different course.", "correct_text": "3. SHOULD   This word, or the adjective \"RECOMMENDED\", means that there\r\n   exist valid reasons in particular circumstances to ignore a\r\n   particular item, but that this reason and the full implications of \r\n   ignoring it must be understood and carefully weighed before doing so.", "notes": "When \"may exist\" was used, the authors often acted as if there wwas no obligation to identify and make clear these reasons.  \r\n\r\nAs a result, SHOULD is often used incorrectly when such reasons cannot be clearly idetiied.\r\n\r\nAlthough I would prefer a bigger change requiring the author to make the reasons clear, that could only be done in bis-type revision.  This is the best that can be done with a purely editorial change.", "submit_date": "2026-03-21", "submitter_name": "David Noveck", "verifier_id": "", "verifier_name": null, "update_date": "2026-03-31 19:42:56"}, {"errata_id": "6922", "doc-id": "RFC8466", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5.2.1", "orig_text": "...\r\n             <network-access-id>LA1</network-access-id>\r\n                <service>\r\n                  <svc-bandwidth>\r\n                     <bandwidth>\r\n                       <direction>input-bw</direction>\r\n                        <type>bw-per-cos</type>\r\n                         <cir>450000000</cir>\r\n                         <cbs>20000000</cbs>\r\n                         <eir>1000000000</eir>\r\n                         <ebs>200000000</ebs>\r\n                     </bandwidth>\r\n                    </svc-bandwidth>\r\n...\r\n            <network-access-id>LA2</network-access-id>\r\n                <service>\r\n                  <svc-bandwidth>\r\n                     <bandwidth>\r\n                       <direction>input-bw</direction>\r\n                        <type>bw-per-cos</type>\r\n                         <cir>450000000</cir>\r\n                         <cbs>20000000</cbs>\r\n                         <eir>1000000000</eir>\r\n                         <ebs>200000000</ebs>", "correct_text": "...\r\n             <network-access-id>LA1</network-access-id>\r\n                <service>\r\n                  <svc-bandwidth>\r\n                     <bandwidth>\r\n                       <direction>input-bw</direction>\r\n                        <type>bw-per-cos</type>\r\n                         <cos-id>10</cos-id>\r\n                         <cir>450000000</cir>\r\n                         <cbs>20000000</cbs>\r\n                         <eir>1000000000</eir>\r\n                         <ebs>200000000</ebs>\r\n                     </bandwidth>\r\n                    </svc-bandwidth>\r\n...\r\n            <network-access-id>LA2</network-access-id>\r\n                <service>\r\n                  <svc-bandwidth>\r\n                     <bandwidth>\r\n                       <direction>input-bw</direction>\r\n                        <type>bw-per-cos</type>\r\n                         <cos-id>10</cos-id>\r\n                         <cir>450000000</cir>\r\n                         <cbs>20000000</cbs>\r\n                         <eir>1000000000</eir>\r\n                         <ebs>200000000</ebs>\r\n", "notes": "The cos-id must be included when the bandwidth type is set to \"bw-per-cos\".\r\n", "submit_date": "2022-04-05", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 14:55:17"}, {"errata_id": "6920", "doc-id": "RFC5322", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "and interpreted as US-ASCII [ANSI.X3-4.1986] characters.  For brevity, this document sometimes refers to this range of characters as simply \"US-ASCII characters\".", "correct_text": "and interpreted as ASCII [ANSI.X3-4.1986] characters.  For brevity, this document sometimes refers to this range of characters as simply \"ASCII characters\".", "notes": "The choice of \"US-ASCII\" as a charset name reflected circumstances at the time, but it was not then and has never been the name of a coded character set, much less the one specified in the various versions of what is now ANSI INCITS 4-1986[R2017].  The common name of the latter, both specified in the Standard and in common practice, is \"ASCII\" without any further qualification.   \"For brevity\", \"ASCII\" is not only more accurate, but shorter.   While the correction is being made, it would be wise to change the citation anchor to \"[ASCII]\" or, if necessary for some reason, \"[ASCII1986]\".  The odd punctuation used in \"[ANSI.X3-4.1986]\" to refer to ANSI X3.4-1986 is just unnecessarily confusing.\r\n\r\n(this erratum is being reported more or less at the request of the editor of RFC 5322 and its successor)", "submit_date": "2022-04-05", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:16:44"}, {"errata_id": "6919", "doc-id": "RFC8182", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4.2", "orig_text": "   o  When a Relying Party encounters a \"withdraw\" element, or a\r\n      \"publish\" element where an object is replaced, in a delta that it\r\n      retrieves from a Repository Server, it MUST verify that the object\r\n      to be withdrawn or replaced was retrieved from this same\r\n      Repository Server before applying the appropriate action.  Failing\r\n      to do so will leave the Relying Party vulnerable to malicious\r\n      Repository Servers instructing it to delete or change arbitrary\r\n      objects.\r\n\r\n", "correct_text": "   o  When a Relying Party encounters a \"withdraw\" element, or a\r\n      \"publish\" element where an object is replaced, in a delta that it\r\n      retrieves from a Repository Server, it MUST verify that the object\r\n      to be withdrawn or replaced was retrieved from this same\r\n      Repository Server before applying the appropriate action.  Failing\r\n      to do so will leave the Relying Party vulnerable to malicious\r\n      Repository Servers instructing it to delete or change arbitrary\r\n      objects.\r\n\r\n   o  For a \"publish\" or \"withdraw\" element, the hash MUST be present\r\n      if the publication operation is overwriting an existing object,\r\n      and it MUST NOT be present if this publication operation is writing\r\n      to a new URI where no prior object exists.  Presence of an object\r\n      when no \"hash\" attribute has been specified is an error, as is\r\n      absence of an object or an incorrect hash value when a \"hash\"\r\n      attribute has been specified. In this situation this file MUST be\r\n      rejected.\r\n", "notes": "Text taken from RFC8181. For <publish> elements in RRDP deltas, the same process described in RFC8181 applies; \"the hash of a publish MUST match to overwrite the existing file\"\r\n\r\n(This gap in the specification was independently spotted by C.J. around the same time)", "submit_date": "2022-04-04", "submitter_name": "Ties de Kock", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-04-18 20:37:02"}, {"errata_id": "6931", "doc-id": "RFC8031", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Global", "orig_text": "", "correct_text": "", "notes": "A discrepancy came to my attention when testing the Yubikey 5 hardware and comparing it with the NaCl library and RFC8031. While the NaCl library works as expected, it is disturbing to see that the Yubikey can only be made to produce the desired (above and corrected) shared secret if you let it compute X25519(fixed_i,pub_r). That is, the secret must be presented to the Yubikey in big-endian format which could be \"inspired\" by the (not very detailed) Smartcard spec 3.4.1 that refers to ANSI X9.62 where curve parameters, prefixed with 0x04, are encoded in big-endian order - clearly the ANSI encoding is not useful here as we only need one parameter u. I wonder whether RFC8031 should spell out that input parameters (d_X and pub_X) SHOULD be presented in encoded form (and thus little-endian), hence putting manufacturers in charge of documenting any deviation.", "submit_date": "2020-11-17", "submitter_name": "Christian Tschudin", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 17:56:03"}, {"errata_id": "7357", "doc-id": "RFC9252", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   To achieve efficient packing, this document allows either 1) the\r\n   encoding of the SRv6 Service SID as a whole in the SRv6 Services TLVs\r\n   or 2) the encoding of only the common part of the SRv6 SID (e.g.,\r\n   Locator) in the SRv6 Services TLVs and the encoding of the variable\r\n   (e.g., Function or Argument parts) in the existing label fields\r\n   specific to that service encoding.  This later form of encoding is\r\n   referred to as the Transposition Scheme, where the SRv6 SID Structure\r\n   Sub-Sub-TLV describes the sizes of the parts of the SRv6 SID and also\r\n   indicates the offset of the variable part along with its length in\r\n   the SRv6 SID value.  The use of the Transposition Scheme is\r\n   RECOMMENDED for the specific service encodings that allow it, as\r\n   described further in Sections 5 and 6.\r\n\r\n", "correct_text": "   To achieve efficient packing, this document allows either 1) the\r\n   encoding of the SRv6 Service SID as a whole in the SRv6 Services TLVs\r\n   or 2) the encoding of only the common part of the SRv6 SID (e.g.,\r\n   Locator) in the SRv6 Services TLVs and the encoding of the variable\r\n   (e.g., Function or Argument parts) in the existing label fields\r\n   specific to that service encoding.  This later form of encoding is\r\n   referred to as the Transposition Scheme, where the SRv6 SID Structure\r\n   Sub-Sub-TLV describes the sizes of the parts of the SRv6 SID and also\r\n   indicates the offset of the variable part along with its length in\r\n   the SRv6 SID value.  The use of the Transposition Scheme is\r\n   NOT RECOMMENDED in brownfield deployments where all participating BGP\r\n   speakers may not support SRv6 forwarding, see Appendix X. \r\n   Transposition Scheme MAY be used if all speakers support procedures\r\n   described in this document, for the specific service encodings that \r\n   allow it, and is encoded as described further in Sections 5 and 6.\r\n\r\nAppendix X:\r\n\r\n   Use of Transposition Scheme procedures may cause incorrect routing \r\n   in the following scenario:\r\n\r\n\r\n                         RR1--+\r\n                                \\  +-------R2  [MPLS + SRv6]\r\n                                 \\ |\r\n                         R1--------P-------R3  [MPLS only]\r\n                   [MPLS + SRv6]   |\r\n                                   +-------R4  [SRv6 only]\r\n\r\n                     <---- Bidirectional Traffic ---->\r\n\r\n            Figure: BGP L3VPN Interop between MPLS and SRv6 nodes\r\n\r\n     This example shows a provider network with a mix of devices with\r\n     different forwarding capabilities.  R1 and R2 support forwarding \r\n     both MPLS and SRv6 packets. R3 supports forwarding MPLS packets \r\n     only. R4 supports forwarding SRv6 packets only. All these nodes \r\n     have BGP session with Route Reflector RR1 which reflects routes \r\n     between these nodes with nexthop unchanged. BGP L3VPN (SAFI 128) \r\n     family is negotiated on these sessions.\r\n            \r\n     If SRv6 nodes R2, R1, R4 use Transposition Scheme described in \r\n     Section 4, it will cause misrouting at R3 because of \r\n     misinterpretation of the MPLS label field. Because of Transposition\r\n     scheme, RFC 8277 encoded MPLS label field is not containing a valid\r\n     MPLS label.", "notes": "Ref: https://github.com/ietf-wg-idr/draft-ietf-idr-bgp-ct/issues/5\n --VERIFIER NOTES-- \nThe errata is a substantive change with new normative language. I am rejecting this errata on the basis that a discussion within the WG on these changes seems appropriate and if necessary an updated RFC is the correct vehicle rather than errata (Please see https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/ for guidance on the errata process).", "submit_date": "2023-02-16", "submitter_name": "Kaliraj Vairavakkalai", "verifier_id": "", "verifier_name": "James N Guichard", "update_date": "2023-05-31 17:47:43"}, {"errata_id": "7718", "doc-id": "RFC5359", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "             |           No RTP Sent!        |", "correct_text": "             |           One way RTP         |\r\n             |<==============================|", "notes": "If we follow the explanation next to the diagram, the RTP flow should be 'unidirectionnal' after the hold because F10 is using a=sendonly and F12 a=recvonly.\r\n\r\n[AD Note, forwarded from Robert Sparks:]\r\nThe existing text explains and it is intentional that the diagram claims that no media is sent.\n --VERIFIER NOTES-- \n   ", "submit_date": "2023-12-01", "submitter_name": "Fabien R.", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-12-01 18:53:30"}, {"errata_id": "6936", "doc-id": "RFC8410", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "10.2", "orig_text": "   -----BEGIN CERTIFICATE-----\r\n   MIIBLDCB36ADAgECAghWAUdKKo3DMDAFBgMrZXAwGTEXMBUGA1UEAwwOSUVURiBUZX\r\n   N0IERlbW8wHhcNMTYwODAxMTIxOTI0WhcNNDAxMjMxMjM1OTU5WjAZMRcwFQYDVQQD\r\n   DA5JRVRGIFRlc3QgRGVtbzAqMAUGAytlbgMhAIUg8AmJMKdUdIt93LQ+91oNvzoNJj\r\n   ga9OukqY6qm05qo0UwQzAPBgNVHRMBAf8EBTADAQEAMA4GA1UdDwEBAAQEAwIDCDAg\r\n   BgNVHQ4BAQAEFgQUmx9e7e0EM4Xk97xiPFl1uQvIuzswBQYDK2VwA0EAryMB/t3J5v\r\n   /BzKc9dNZIpDmAgs3babFOTQbs+BolzlDUwsPrdGxO3YNGhW7Ibz3OGhhlxXrCe1Cg\r\n   w1AH9efZBw==\r\n   -----END CERTIFICATE-----\r\n", "correct_text": "(re-encode certificate)", "notes": "The example certificate violates RFC 5280.  Specifically, the\r\ncertificate contains a BasicConstraints extension that explicitly\r\nencodes the cA field with a value of FALSE, but that is the default\r\nvalue of the cA field, and the Extension extnValue is required to be\r\nencoded using DER, which forbids including a field set to its default\r\nvalue.\r\n\r\nIn addition, the PEM-encoded certificate violates RFC 7468, which\r\nrequires lines to be wrapped to 64 characters, but the example is\r\nwrapped to 66-character lines.", "submit_date": "2022-04-16", "submitter_name": "Ryan Culpepper", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6937", "doc-id": "RFC6570", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   literals      =  %x21 / %x23-24 / %x26 / %x28-3B / %x3D / %x3F-5B\r\n                   /  %x5D / %x5F / %x61-7A / %x7E / ucschar / iprivate\r\n                   /  pct-encoded\r\n                        ; any Unicode character except: CTL, SP,\r\n                        ;  DQUOTE, \"'\", \"%\" (aside from pct-encoded),\r\n                        ;  \"<\", \">\", \"\\\", \"^\", \"`\", \"{\", \"|\", \"}\"", "correct_text": "   literals      =  %x21 / %x23-24 / %x26-3B / %x3D / %x3F-5B\r\n                   /  %x5D / %x5F / %x61-7A / %x7E / ucschar / iprivate\r\n                   /  pct-encoded\r\n                        ; any Unicode character except: CTL, SP,\r\n                        ;  DQUOTE, \"%\" (aside from pct-encoded),\r\n                        ;  \"<\", \">\", \"\\\", \"^\", \"`\", \"{\", \"|\", \"}\"\r\n\r\nNote: using single quotes \"'\" in literals could limit the interoperability with content like HTML.", "notes": "Discussed with the RFC authors here https://github.com/uri-templates/uritemplate-test/issues/51", "submit_date": "2022-04-18", "submitter_name": "Vincent Biret", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2022-05-06 11:10:05"}, {"errata_id": "6940", "doc-id": "RFC7296", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": ".10", "orig_text": "o SPI Size (1 octet) - Length in octets of the SPI as defined by the\r\n IPsec protocol ID or zero if no SPI is applicable. For a\r\n notification concerning the IKE SA, the SPI Size MUST be zero and\r\n the field must be empty.\r\n", "correct_text": "o SPI Size (1 octet) - Length in octets of the SPI as defined by the\r\n IPsec protocol ID or zero if no SPI is applicable. For a\r\n notification concerning the IKE SA, the SPI Size MUST be zero and\r\n the SPI field must be empty.\r\n", "notes": "the field must be empty -> the SPI field must be empty\r\n\r\nadditional question: so for a notification concerning the IKE SA, the Protocol ID field still shall be zero?\r\n\r\nYes, for IKE SA notifications the SPI can be seen from the header, thus there is no point of repeating the SPIs in notify payload. The Protocol ID field of the notification payload indicates which type of SPI is inside the notification payload, thus if there is no SPI in there, then there is no point of having Protocol ID either.\r\n", "submit_date": "2022-04-21", "submitter_name": "warren.wang", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-07-28 17:44:55"}, {"errata_id": "6941", "doc-id": "RFC9180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "In many cases, applications encrypt only a single message\r\nto a recipient's public key. This section provides templates\r\nfor HPKE APIs that implement stateless \"single-shot\"\r\nencryption and decryption using APIs specified in\r\nSections 5.1.1 and 5.2:\r\n", "correct_text": "In many cases, applications encrypt only a single message\r\nto a recipient's public key. This section provides templates\r\nfor HPKE APIs that implement stateless \"single-shot\"\r\nencryption and decryption using APIs specified in\r\nSections 5.1 and 5.2:\r\n", "notes": "5.1.1 -> 5.1: I think the description of the single-shot APIs should refer to the entire HPKE modes hence Section 5.1, instead of Section 5.1.1 which is about the base mode only.", "submit_date": "2022-04-21", "submitter_name": "CJ", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2022-05-12 11:02:03"}, {"errata_id": "6942", "doc-id": "RFC3394", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "R[i]          An array of 64-bit registers where\r\n                       i = 0, 1, 2, ..., n\r\nA[t], R[i][t] The contents of registers A and R[i] after encryption\r\n                       step t.", "correct_text": "R[i]          An array of 64-bit registers where\r\n                       i = 1, 2, ..., n\r\nA[t], R[t][i] The contents of registers A and R[i] after encryption\r\n                       step t.", "notes": "1) There are n 64-bit registers indexed R[1] to R[n] in the algorithms in section 2.2.\r\n2) The notation of the algorithms in section 2.2 dereference R[][] using the step as the first index, and the index of the register from 1 to n as the second index\r\n\r\nPaul Wouters(AD): There was some talk of a better fix, but that would require new text for whole sections, which is more that what should be done in an errata.", "submit_date": "2022-04-25", "submitter_name": "Samuel Lee", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-22 16:47:18"}, {"errata_id": "6943", "doc-id": "RFC5649", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "plaintext length may be in range [1, 2^32]", "correct_text": "plaintext length may be in range [1, 2^32), or [1, 2^32-1]\r\n", "notes": "The text is ambiguous about how to handle a plaintext of size 2^32 bytes. The text seems to suggest a plaintext of size 2^32 is permitted, but the description of generation/verification of the AIV does not handle this case.\r\nAs written different implementations could disagree on what constitutes a valid ciphertext.\r\n\r\nI would suggest the simplest solution is to explicitly say the maximum plaintext length is 2^32-1 (which is still much larger than any intended use case, as this should be for encrypting keying material).", "submit_date": "2022-04-25", "submitter_name": "Samuel Lee", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2022-04-25 17:39:33"}, {"errata_id": "6945", "doc-id": "RFC7862", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.2", "orig_text": "+----------------+--------------------------------------------------+\r\n  | COPY           | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,           |\r\n  |                | NFS4ERR_BADXDR, NFS4ERR_BAD_STATEID,             |\r\n  |                | NFS4ERR_DEADSESSION, NFS4ERR_DELAY,              |\r\n  |                | NFS4ERR_DELEG_REVOKED, NFS4ERR_DQUOT,            |\r\n  |                | NFS4ERR_EXPIRED, NFS4ERR_FBIG,                   |\r\n  |                | NFS4ERR_FHEXPIRED, NFS4ERR_GRACE, NFS4ERR_INVAL, |\r\n  |                | NFS4ERR_IO, NFS4ERR_ISDIR, NFS4ERR_LOCKED,       |\r\n  |                | NFS4ERR_MOVED, NFS4ERR_NOFILEHANDLE,             |\r\n  |                | NFS4ERR_NOSPC, NFS4ERR_OFFLOAD_DENIED,           |\r\n  |                | NFS4ERR_OLD_STATEID, NFS4ERR_OPENMODE,           |\r\n  |                | NFS4ERR_OP_NOT_IN_SESSION,                       |\r\n  |                | NFS4ERR_PARTNER_NO_AUTH,                         |\r\n  |                | NFS4ERR_PARTNER_NOTSUPP, NFS4ERR_PNFS_IO_HOLE,   |\r\n  |                | NFS4ERR_PNFS_NO_LAYOUT, NFS4ERR_REP_TOO_BIG,     |\r\n  |                | NFS4ERR_REP_TOO_BIG_TO_CACHE,                    |\r\n  |                | NFS4ERR_REQ_TOO_BIG, NFS4ERR_RETRY_UNCACHED_REP, |\r\n  |                | NFS4ERR_ROFS, NFS4ERR_SERVERFAULT,               |\r\n  |                | NFS4ERR_STALE, NFS4ERR_SYMLINK,                  |\r\n  |                | NFS4ERR_TOO_MANY_OPS, NFS4ERR_WRONG_TYPE         |\r\n  +----------------+--------------------------------------------------+\r\n  | COPY_NOTIFY    | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,           |\r\n  |                | NFS4ERR_BADXDR, NFS4ERR_BAD_STATEID,             |\r\n  |                | NFS4ERR_DEADSESSION, NFS4ERR_DELAY,              |\r\n  |                | NFS4ERR_DELEG_REVOKED, NFS4ERR_EXPIRED,          |\r\n  |                | NFS4ERR_FHEXPIRED, NFS4ERR_GRACE, NFS4ERR_INVAL, |\r\n  |                | NFS4ERR_IO, NFS4ERR_ISDIR, NFS4ERR_LOCKED,       |\r\n  |                | NFS4ERR_MOVED, NFS4ERR_NOFILEHANDLE,             |\r\n  |                | NFS4ERR_OLD_STATEID, NFS4ERR_OPENMODE,           |\r\n  |                | NFS4ERR_OP_NOT_IN_SESSION, NFS4ERR_PNFS_IO_HOLE, |\r\n  |                | NFS4ERR_PNFS_NO_LAYOUT, NFS4ERR_REP_TOO_BIG,     |\r\n  |                | NFS4ERR_REP_TOO_BIG_TO_CACHE,                    |\r\n  |                | NFS4ERR_REQ_TOO_BIG, NFS4ERR_RETRY_UNCACHED_REP, |\r\n  |                | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,              |\r\n  |                | NFS4ERR_SYMLINK, NFS4ERR_TOO_MANY_OPS,           |\r\n  |                | NFS4ERR_WRONG_TYPE                               |\r\n", "correct_text": "+----------------+--------------------------------------------------+\r\n  | COPY           | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,           |\r\n  |                | NFS4ERR_BADXDR, NFS4ERR_BAD_STATEID,             |\r\n  |                | NFS4ERR_DEADSESSION, NFS4ERR_DELAY,              |\r\n  |                | NFS4ERR_DELEG_REVOKED, NFS4ERR_DQUOT,            |\r\n  |                | NFS4ERR_EXPIRED, NFS4ERR_FBIG,                   |\r\n  |                | NFS4ERR_FHEXPIRED, NFS4ERR_GRACE, NFS4ERR_INVAL, |\r\n  |                | NFS4ERR_IO, NFS4ERR_ISDIR, NFS4ERR_LOCKED,       |\r\n  |                | NFS4ERR_MOVED, NFS4ERR_NOFILEHANDLE,             |\r\n  |                | NFS4ERR_NOSPC, NFS4ERR_OFFLOAD_DENIED,           |\r\n  |                | NFS4ERR_OLD_STATEID, NFS4ERR_OPENMODE,           |\r\n  |                | NFS4ERR_OP_NOT_IN_SESSION,                       |\r\n  |                | NFS4ERR_PARTNER_NO_AUTH, NFS4ERR_NOTSUPP                        |\r\n  |                | NFS4ERR_PARTNER_NOTSUPP, NFS4ERR_PNFS_IO_HOLE,   |\r\n  |                | NFS4ERR_PNFS_NO_LAYOUT, NFS4ERR_REP_TOO_BIG,     |\r\n  |                | NFS4ERR_REP_TOO_BIG_TO_CACHE,                    |\r\n  |                | NFS4ERR_REQ_TOO_BIG, NFS4ERR_RETRY_UNCACHED_REP, |\r\n  |                | NFS4ERR_ROFS, NFS4ERR_SERVERFAULT,               |\r\n  |                | NFS4ERR_STALE, NFS4ERR_SYMLINK,                  |\r\n  |                | NFS4ERR_TOO_MANY_OPS, NFS4ERR_WRONG_TYPE         |\r\n  +----------------+--------------------------------------------------+\r\n  | COPY_NOTIFY    | NFS4ERR_ACCESS, NFS4ERR_ADMIN_REVOKED,           |\r\n  |                | NFS4ERR_BADXDR, NFS4ERR_BAD_STATEID,             |\r\n  |                | NFS4ERR_DEADSESSION, NFS4ERR_DELAY,              |\r\n  |                | NFS4ERR_DELEG_REVOKED, NFS4ERR_EXPIRED,          |\r\n  |                | NFS4ERR_FHEXPIRED, NFS4ERR_GRACE, NFS4ERR_INVAL, |\r\n  |                | NFS4ERR_IO, NFS4ERR_ISDIR, NFS4ERR_LOCKED,       |\r\n  |                | NFS4ERR_MOVED, NFS4ERR_NOFILEHANDLE, NFS4ERR_NOTSUPP            |\r\n  |                | NFS4ERR_OLD_STATEID, NFS4ERR_OPENMODE,           |\r\n  |                | NFS4ERR_OP_NOT_IN_SESSION, NFS4ERR_PNFS_IO_HOLE, |\r\n  |                | NFS4ERR_PNFS_NO_LAYOUT, NFS4ERR_REP_TOO_BIG,     |\r\n  |                | NFS4ERR_REP_TOO_BIG_TO_CACHE,                    |\r\n  |                | NFS4ERR_REQ_TOO_BIG, NFS4ERR_RETRY_UNCACHED_REP, |\r\n  |                | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,              |\r\n  |                | NFS4ERR_SYMLINK, NFS4ERR_TOO_MANY_OPS,           |\r\n  |                | NFS4ERR_WRONG_TYPE                               |\r\n", "notes": "Both COPY and COPY_NOTIFY are optional new operations for NFSv4.2. Hence they both should support the NFS4ERR_NOTSUPP error code.", "submit_date": "2022-04-27", "submitter_name": "Thomas Haynes", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6946", "doc-id": "RFC9116", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "   unsigned       =  *line (contact-field eol) ; one or more required\r\n                     *line (expires-field eol) ; exactly one required\r\n                     *line [lang-field eol] *line ; exactly one optional\r\n                     ; order of fields within the file is not important\r\n                     ; except that if contact-field appears more\r\n                     ; than once, the order of those indicates\r\n                     ; priority (see Section 3.5.3)", "correct_text": "   unsigned       =  *line (contact-field eol) ; one or more required\r\n                     *line (expires-field eol) ; exactly one required\r\n                     *line [lang-field eol] *line ; exactly one optional\r\n                     ; order of fields within the file is not important\r\n                     ; except that if contact-field appears more\r\n                     ; than once, the order of those indicates\r\n                     ; priority (see Section 2.5.3)", "notes": "Reference to Section 2.5.3 (describing ordering semantics of the Contact field) mistakenly given in ABNF comments as \"Section 3.5.3\"", "submit_date": "2022-04-28", "submitter_name": "Edwin Balani", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-04-28 20:46:22"}, {"errata_id": "7360", "doc-id": "RFC8431", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "    rpc route-delete {\r\n       description\r\n         \"To delete a route or a list of routes from a RIB\";\r\n       input {\r\n         leaf return-failure-detail {\r\n           type boolean;\r\n           default \"false\";\r\n           description\r\n             \"Whether to return the failure detail.\r\n              true  - return the failure detail\r\n              false - do not return the failure detail\r\n              The default is false.\";\r\n         }\r\n         leaf rib-name {\r\n           type string;\r\n           mandatory true;\r\n           description\r\n             \"A reference to the name of a RIB.\";\r\n         }\r\n         container routes {\r\n           description\r\n             \"The routes to be added to the RIB.\";\r\n           list route-list {\r\n             key \"route-index\";\r\n             description\r\n               \"The list of routes to be deleted.\";\r\n             uses route-prefix;\r\n           }\r\n         }\r\n       }\r\n       output {\r\n         uses route-operation-state;\r\n       }\r\n     }\r\n", "correct_text": "    rpc route-delete {\r\n       description\r\n         \"To delete a route or a list of routes from a RIB\";\r\n       input {\r\n         leaf return-failure-detail {\r\n           type boolean;\r\n           default \"false\";\r\n           description\r\n             \"Whether to return the failure detail.\r\n              true  - return the failure detail\r\n              false - do not return the failure detail\r\n              The default is false.\";\r\n         }\r\n         leaf rib-name {\r\n           type string;\r\n           mandatory true;\r\n           description\r\n             \"A reference to the name of a RIB.\";\r\n         }\r\n         container routes {\r\n           description\r\n             \"The routes to be deleted from the RIB.\";\r\n           list route-list {\r\n             key \"route-index\";\r\n             description\r\n               \"The list of routes to be deleted.\";\r\n             uses route-prefix;\r\n           }\r\n         }\r\n       }\r\n       output {\r\n         uses route-operation-state;\r\n       }\r\n     }\r\n", "notes": "Copy-paste error at page 60.", "submit_date": "2023-02-17", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2023-02-17 15:17:33"}, {"errata_id": "7361", "doc-id": "RFC8431", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "     rpc route-update {\r\n       description\r\n         \"To update a route or a list of routes of a RIB.\r\n          The inputs:\r\n            1. The match conditions, which could be:\r\n              a. route prefix,\r\n              b. route attributes, or\r\n              c. nexthop.\r\n            2. The update parameters to be used:\r\n              a. new nexthop,\r\n              b. new route attributes, or\r\n              c. nexthop.\r\n", "correct_text": "     rpc route-update {\r\n       description\r\n         \"To update a route or a list of routes of a RIB.\r\n          The inputs:\r\n            1. The match conditions, which could be:\r\n              a. route prefix,\r\n              b. route attributes, or\r\n              c. nexthop.\r\n            2. The update parameters to be used:\r\n              a. new nexthop, or\r\n              b. new route attributes", "notes": "Excess item 2.c (page 61)", "submit_date": "2023-02-17", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2023-02-17 15:19:39"}, {"errata_id": "7580", "doc-id": "RFC6531", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Sections 3.3 and 3.7.3 say:", "orig_text": "The <Mailbox> ABNF rule is imported from RFC 5321 and updated in \r\norder to support the internationalized email address.\r\n\r\nThe following ABNF rules imported from RFC 5321, Section 4.1.2, are \r\nupdated directly or indirectly by this document:\r\n\r\nThis document updates <Mailbox> and <Domain> to support non-ASCII \r\ncharacters.", "correct_text": "The <Mailbox> ABNF rule is imported from RFC 5321 and extended in \r\norder to support the internationalized email address.\r\n\r\nThe following ABNF rules imported from RFC 5321, Section 4.1.2, are \r\nextended directly or indirectly by this document:\r\n\r\nThis document extends <Mailbox> and <Domain> to support non-ASCII \r\ncharacters.", "notes": "The original text can be incorrectly interpreted to suggest that the definitions found in RFC 6531 formally update the definitions found in RFC 5321. RFC 6531 does not formally update RFC 5321. As such, a word like \"extends\" may be less prone to misinterpretation than \"updates\".", "submit_date": "2023-07-31", "submitter_name": "Scott Hollenbeck", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-15 21:52:20"}, {"errata_id": "6951", "doc-id": "RFC8944", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "augment \"/nw:networks/nw:network\" {\r\n when '/nw:networks/nw:network/nw:network-types/l2t:l2-topology' {\r\n   description\r\n     \"Augmentation parameters apply only for networks\r\n      with L2 topology.\";\r\n }\r\n description\r\n   \"Configuration parameters for the L2 network\r\n    as a whole.\";\r\n uses l2-topology-attributes;\r\n}\r\naugment \"/nw:networks/nw:network/nw:node\" {\r\n when '/nw:networks/nw:network/nw:network-types/l2t:l2-topology' {\r\n   description\r\n     \"Augmentation parameters apply only for networks\r\n      with L2 topology.\";\r\n }\r\n description\r\n   \"Configuration parameters for L2 at the node\r\n    level.\";\r\n uses l2-node-attributes;\r\n}\r\naugment \"/nw:networks/nw:network/nt:link\" {\r\n when '/nw:networks/nw:network/nw:network-types/l2t:l2-topology' {\r\n   description\r\n     \"Augmentation parameters apply only for networks\r\n      with L2 topology.\";\r\n }\r\n description\r\n   \"Augments L2 topology link information.\";\r\n uses l2-link-attributes;\r\n}\r\naugment \"/nw:networks/nw:network/nw:node/nt:termination-point\" {\r\n when '/nw:networks/nw:network/nw:network-types/l2t:l2-topology' {\r\n   description\r\n     \"Augmentation parameters apply only for networks\r\n      with L2 topology.\";\r\n }\r\n description\r\n   \"Augments L2 topology termination point information.\";\r\n uses l2-termination-point-attributes;\r\n}", "correct_text": "augment \"/nw:networks/nw:network\" {\r\n  when 'nw:network-types/l2t:l2-topology' {\r\n    description\r\n      \"Augmentation parameters apply only for networks\r\n       with L2 topology.\";\r\n  }\r\n  description\r\n    \"Configuration parameters for the L2 network\r\n     as a whole.\";\r\n  uses l2-topology-attributes;\r\n}\r\naugment \"/nw:networks/nw:network/nw:node\" {\r\n  when '../nw:network-types/l2t:l2-topology' {\r\n    description\r\n      \"Augmentation parameters apply only for networks\r\n       with L2 topology.\";\r\n  }\r\n  description\r\n    \"Configuration parameters for L2 at the node\r\n     level.\";\r\n  uses l2-node-attributes;\r\n}\r\naugment \"/nw:networks/nw:network/nt:link\" {\r\n  when '../nw:network-types/l2t:l2-topology' {\r\n    description\r\n      \"Augmentation parameters apply only for networks\r\n       with L2 topology.\";\r\n  }\r\n  description\r\n    \"Augments L2 topology link information.\";\r\n  uses l2-link-attributes;\r\n}\r\naugment \"/nw:networks/nw:network/nw:node/nt:termination-point\" {\r\n  when '../../nw:network-types/l2t:l2-topology' {\r\n    description\r\n      \"Augmentation parameters apply only for networks\r\n       with L2 topology.\";\r\n  }\r\n  description\r\n    \"Augments L2 topology termination point information.\";\r\n  uses l2-termination-point-attributes;\r\n}\r\n", "notes": "With absolute XPaths on the augmentations, the meaning becomes \u201caugment nw:network with l2-topology-attributes if ANY network in the list of networks has l2t:l2-topology\u201d. \r\nWith that meaning, the following json snippet passes validation when it should not. \r\nIt has 2 instances of ietf-network, one at L2 and one at L3. L2 attributes are WRONGLY added to the L3 network and L3 node.\r\n\r\n{\r\n  \"ietf-network:networks\": {\r\n    \"network\": [\r\n      {\r\n        \"network-id\": \"l2-network\",\r\n        \"network-types\": {\r\n          \"ietf-l2-topology:l2-topology\": {}\r\n        },\r\n        \"node\": [\r\n          {\r\n            \"node-id\": \"l2-node\"\r\n          }\r\n        ]\r\n      },\r\n      {\r\n        \"network-id\": \"l3-network\",\r\n        \"network-types\": {\r\n          \"ietf-l3-unicast-topology:l3-unicast-topology\": {}\r\n        },\r\n        \"ietf-l2-topology:l2-topology-attributes\": {\r\n          \"name\": \"L2Topology\"\r\n        },\r\n        \"node\": [\r\n          {\r\n            \"node-id\": \"l3-node\",\r\n            \"ietf-l2-topology:l2-node-attributes\" : {\r\n              \"name\": \"l2-node-name\",\r\n              \"management-address\": [\r\n                \"1.1.1.1\"\r\n              ],\r\n              \"management-mac\": \"11:22:33:aa:bb:cc\"\r\n            }\r\n          }\r\n        ]\r\n      }\r\n    ]\r\n  }\r\n}\r\n\r\nWith relative XPaths as suggested, the meaning becomes \u201caugment only if THIS network has l2t:l2-topology\u201d and the json snippet above fails validation, as it should.", "submit_date": "2022-05-03", "submitter_name": "Mohammed Riyas Valiyapalathingal", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2022-06-22 20:23:03"}, {"errata_id": "8881", "doc-id": "RFC6716", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.3.7", "orig_text": "                                                         2\r\n                          /   /pi      /pi   n + 1/2\\ \\ \\\r\n                   W(n) = |sin|-- * sin|-- * -------| | |\r\n                          \\   \\2       \\2       L   / / /", "correct_text": "                                      2\r\n                             /pi       /pi   n + 1/2\\ \\\r\n                   W(n) = sin|-- * sin |-- * -------| |\r\n                             \\2        \\2       L   / /", "notes": "The Vorbis specification and the Opus reference implementation have the exponent 2 squaring the inner sine function, but RFC 6716 has it squaring the outer sine function.", "submit_date": "2026-04-15", "submitter_name": "Albert Mao", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6950", "doc-id": "RFC8555", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "token (required, string):  A random value that uniquely identifies\r\n      the challenge.  This value MUST have at least 128 bits of entropy.", "correct_text": "token (required, string):  A random value that uniquely identifies\r\n      the challenge.  This value MUST have at least 128 bits of entropy, which in the \r\n      base64url alphabet means a minimum string length of 22 characters if the full\r\n      scope of the base64url alphabet is in use in the token, by:\r\n                        log2(64^22) = 132 bits of entropy\r\n\r\n", "notes": "This standards-track document doesn't specify the string ramifications for entropy; I'd expect it to be called out to implementers, just the once, and then referred to later at other tokens.\r\n\r\nIf entropy is log2 the number of possible characters (64 if full base64url set of chars is in use) then \r\nlog2 (64^21) = 126\r\nlog2 (64^22) = 132\r\n\r\nso a minimum of 22 characters are needed to get a minimum of 128 bits of entropy in the token.\r\n\r\nBut, if the random value is specified using a subset of the base64url, say because the implementer doesn't like or use CAPITALS or (most likely) the punctuation symbols, then the token must necessarily be longer to meet the local implementer entropy requirement (though just losing only the punctuation marks means you're still good and meet the requirement with 22 characters). Not sure that matters so much on the wire.\r\n\r\nI also have editing nits about base64url being defined clearly in ABNF just for Replay-Nonce:, but then both 'base64 alphabet' and 'base64url alphabet' are in use in the document, and base64url references are to RFC4648 via RFC7515, but those are to Base64url, not to base64url... it all seems a bit inconsistent editingwise. So all the references to 'base64 alphabet' should be to 'base64url alphabet' as defined in the doc, but it should really be 'Base64url alphabet' to be consistent with references?\r\n\r\n(I really think that it should have been called 'Base-64_url alphabet' way back when to enphasise the punctuation use, but that ship has sailed.)\r\n\r\nTo me, 'base64 alphabet' is the a-zA-Z subset of base64... I think the document could be much clearer in this regard, and I hope any doc revisions taking into account all the other errata raised consider this too.\r\n\r\nMy thanks to Lee Maguire for pointing much of this out.", "submit_date": "2022-05-02", "submitter_name": "Lloyd Wood", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-03-22 15:01:54"}, {"errata_id": "6948", "doc-id": "RFC5698", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix C and D", "orig_text": "        version          INTEGER               DEFAULT   {v1(1)},", "correct_text": "        version          INTEGER  { v1(1) }    DEFAULT   v1,", "notes": "The syntax for version in the TBSPolicy structure is incorrect.  The replacement line works in both Appendix C (Informative) and Appendix D (Normative).", "submit_date": "2022-04-29", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6952", "doc-id": "RFC7950", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.4.2.1", "orig_text": "       augment \"/interface\" {\r\n         when 'derived-from-or-self(type, \"exif:fast-ethernet\");\r\n         // Fast-Ethernet-specific definitions here\r\n       }", "correct_text": "       augment \"/interface\" {\r\n         when 'derived-from-or-self(type, \"exif:fast-ethernet\")';\r\n         // Fast-Ethernet-specific definitions here\r\n       }", "notes": "single quote to end complete string is missing", "submit_date": "2022-05-03", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-05-04 21:35:37"}, {"errata_id": "7362", "doc-id": "RFC8431", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "       output {\r\n         leaf result {\r\n           type boolean;\r\n           mandatory true;\r\n           description\r\n             \"Return the result of the rib-add operation:\r\n              true  - success\r\n              false - failed\";\r\n         }\r\n         leaf reason {\r\n           type string;\r\n           description\r\n             \"The specific reason that caused the failure.\";\r\n         }\r\n         leaf nexthop-id {\r\n           type uint32;\r\n           description\r\n             \"A nexthop identifier that is allocated to the nexthop.\";\r\n         }\r\n", "correct_text": "       output {\r\n         leaf result {\r\n           type boolean;\r\n           mandatory true;\r\n           description\r\n             \"Return the result of the nh-add operation:\r\n              true  - success\r\n              false - failed\";\r\n         }\r\n         leaf reason {\r\n           type string;\r\n           description\r\n             \"The specific reason that caused the failure.\";\r\n         }\r\n         leaf nexthop-id {\r\n           type uint32;\r\n           description\r\n             \"A nexthop identifier that is allocated to the nexthop.\";\r\n         }\r\n", "notes": "Erroneously specified operation rib-add instead of nh-add on page 64", "submit_date": "2023-02-17", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2023-02-17 15:23:16"}, {"errata_id": "6971", "doc-id": "RFC6724", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "We define the common prefix length CommonPrefixLen(S, D) of a source\r\naddress S and a destination address D as the length of the longest\r\nprefix (looking at the most significant, or leftmost, bits) that the\r\ntwo addresses have in common, up to the length of S's prefix (i.e.,\r\nthe portion of the address not including the interface ID).  For\r\nexample, CommonPrefixLen(fe80::1, fe80::2) is 64.", "correct_text": "We define the common prefix length CommonPrefixLen(S, D) of a source\r\naddress S and a destination address D as the length of the longest\r\nprefix (looking at the most significant, or leftmost, bits) that the\r\ntwo addresses have in common, up to the length of S's prefix (i.e.,\r\nfor most IPv6 addresses,\r\nthe portion of the address not including the interface ID).  For\r\nexample, CommonPrefixLen(fe80::1, fe80::2) is 64. For two IPv4-mapped\r\naddresses in ::ffff:0:0/96, CommonPrefixLen() may be up to 128.", "notes": "1) Not all IPv6 address formats have a well-defined interface prefix.\r\n2) In particular, the original text is inapplicable to IPv4-mapped addresses.\r\n3) N.B.: In practice it seems that some implementations simply do a longest match up to /128 and that works fine.", "submit_date": "2022-05-10", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-03-12 05:45:49"}, {"errata_id": "6953", "doc-id": "RFC2402", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2. (6)", "orig_text": "2.6  Authentication Data\r\n\r\n   This is a variable-length field that contains the Integrity Check\r\n   Value (ICV) for this packet.  The field must be an integral multiple\r\n   of 32 bits in length.  The details of the ICV computation are\r\n   described in Section 3.3.2 below.  This field may include explicit\r\n   padding.  This padding is included to ensure that the length of the\r\n   AH header is an integral multiple of 32 bits (IPv4) or 64 bits\r\n   (IPv6).  All implementations MUST support such padding.  Details of\r\n   how to compute the required padding length are provided below.  The\r\n   authentication algorithm specification MUST specify the length of the\r\n   ICV and the comparison rules and processing steps for validation.\r\n", "correct_text": "2.6  Authentication Data\r\n\r\n   This is a variable-length field that contains the Integrity Check\r\n   Value (ICV) for this packet.  The field must be an integral multiple\r\n   of 32 bits in length.  The details of the ICV computation are\r\n   described in Section 3.3.3 below.  This field may include explicit\r\n   padding.  This padding is included to ensure that the length of the\r\n   AH header is an integral multiple of 32 bits (IPv4) or 64 bits\r\n   (IPv6).  All implementations MUST support such padding.  Details of\r\n   how to compute the required padding length are provided below.  The\r\n   authentication algorithm specification MUST specify the length of the\r\n   ICV and the comparison rules and processing steps for validation.\r\n", "notes": "The section referenced for ICV computation is currently 3.3.2 (Sequence Number Generation). I believe this to be an error, and that 3.3.3 (Integrity Check Value Calculation) was the intended reference.", "submit_date": "2022-05-03", "submitter_name": "J Foster", "verifier_id": "", "verifier_name": null, "update_date": "2023-08-02 16:54:43"}, {"errata_id": "6954", "doc-id": "RFC2119", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6. of all scripts", "orig_text": "6. Guidance in the use of these Imperatives\r\n\r\n   Imperatives of the type defined in this memo must be used with care\r\n   and sparingly.  In particular, they MUST only be used where it is\r\n   actually required for interoperation or to limit behavior which has\r\n   potential for causing harm (e.g., limiting retransmisssions)  For\r\n   example, they must not be used to try to impose a particular method\r\n   on implementors where the method is not required for\r\n   interoperability.\r\n\r\n{This part: (e.g., limiting retransmisssions); is the focus.}", "correct_text": "In-line html has an errata by Davidson, Malcolm about the extra S in retransmission. (Good Job to Malcom! (I would also like to make editors aware that is in only corrected in the, in-line html.  The error of the extra -s in the word retransmissions is still present in all of the other documents.)  \r\n\r\nThe problem I would like to bring to the attention of the minds of the world, is \r\nstill that same word, retransmissions and I'm concerned that it has been looked at and still over looked.   It should be simply \"transmissions\" or, but NOT RECOMENDED; \"re-transmissions\".  (I will explain.) ", "notes": "The base word \"transmission\" (which is already a compound word.) in the plural form, shows more than one, present tense, and also future tense.  Therefore the re- prefix is redundant in the word.  It actually retards the word making it null.  Without the hyphen it is an entirely different compound word that may not even exist yet.  The -s making it plural is plenty to make this sentence complete and accurate.  There is no need for the re- prefix but if you must it should be hyphenated.  Thank you!\n --VERIFIER NOTES-- \nThe word in question (retransmissions) is used as an example, and is a term of art in congestion control.", "submit_date": "2022-05-05", "submitter_name": "aaron wuescher", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:07:37"}, {"errata_id": "6955", "doc-id": "RFC7915", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5", "orig_text": "Calculating an IPv6 checksum and forwarding the packet (which has performance implications).", "correct_text": "Calculating an UDP checksum and forwarding the packet (which has performance implications).", "notes": "IPv6 doesn't have a checksum. The text appears to refer to the UDP checksum", "submit_date": "2022-05-06", "submitter_name": "Dan Gilboa Waizman", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:39:52"}, {"errata_id": "6997", "doc-id": "RFC6455", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.3, 9.1", "orig_text": "      extension-param = token [ \"=\" (token | quoted-string) ]\r\n           ; When using the quoted-string syntax variant, the value\r\n           ; after quoted-string unescaping MUST conform to the\r\n           ; 'token' ABNF.", "correct_text": "      extension-param = token [ \"=\" (token | quoted-string) ]\r\n", "notes": "The text reads as if any quoted-string which was supplied as a value has to follow the same rules as a token. That precludes the use of any token separators inside a quoted-string which is the whole reason why quoted-string exists as explained in RFC 2616:\r\n\r\n   Many HTTP/1.1 header field values consist of words separated by LWS\r\n   or special characters. These special characters MUST be in a quoted\r\n   string to be used within a parameter value (as defined in section\r\n   3.6).", "submit_date": "2022-06-17", "submitter_name": "Daniel Egger", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6998", "doc-id": "RFC1320", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.3", "orig_text": "/* MD4 finalization. Ends an MD4 message-digest operation, writing the\r\n     the message digest and zeroizing the context.\r\n */", "correct_text": "/* MD4 finalization. Ends an MD4 message-digest operation, writing the\r\n   message digest and zeroizing the context.\r\n */", "notes": "\"the the\" grammar mistake", "submit_date": "2022-06-18", "submitter_name": "Alok Menghrajani", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-06-20 20:46:50"}, {"errata_id": "7004", "doc-id": "RFC8276", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "8.4.5", "orig_text": "   | LISTXATTRS  | NFS4ERR_ACCESS, NFS4ERR_DEADSESSION, NFS4ERR_DELAY, |\r\n   |             | NFS4ERR_INVAL, NFS4ERR_IO, NFS4ERR_MOVED,           |\r\n   |             | NFS4ERR_NAMETOOLONG, NFS4ERR_NOFILEHANDLE,          |\r\n   |             | NFS4ERR_NOTSUPP, NFS4ERR_NOXATTR,                   |\r\n   |             | NFS4ERR_OP_NOT_IN_SESSION, NFS4ERR_PERM,            |\r\n   |             | NFS4ERR_REP_TOO_BIG, NFS4ERR_REP_TOO_BIG_TO_CACHE,  |\r\n   |             | NFS4ERR_REQ_TOO_BIG, NFS4ERR_RETRY_UNCACHED_REP,    |\r\n   |             | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,  ", "correct_text": "   | LISTXATTRS  | NFS4ERR_ACCESS, NFS4ERR_DEADSESSION, NFS4ERR_DELAY, |\r\n   |             | NFS4ERR_INVAL, NFS4ERR_IO, NFS4ERR_MOVED,           |\r\n   |             | NFS4ERR_NAMETOOLONG, NFS4ERR_NOFILEHANDLE,          |\r\n   |             | NFS4ERR_NOTSUPP, NFS4ERR_NOXATTR,                   |\r\n   |             | NFS4ERR_OP_NOT_IN_SESSION, NFS4ERR_PERM,            |\r\n   |             | NFS4ERR_REP_TOO_BIG, NFS4ERR_REP_TOO_BIG_TO_CACHE,  |\r\n   |             | NFS4ERR_REQ_TOO_BIG, NFS4ERR_RETRY_UNCACHED_REP,    |\r\n   |             | NFS4ERR_SERVERFAULT, NFS4ERR_STALE, NFS4ERR_TOOSMALL", "notes": "Section 8.4.3.3. DESCRIPTION says about NFS4ERR_TOOSMALL status code:\r\n\r\n\"If the server is unable\r\n   to return a single xattr name within the maxcount limit, the error\r\n   NFS4ERR_TOOSMALL will be returned to the client.\"\r\n   \r\nBut this status code not specified  in section 8.4.5.  Valid Errors for LISTXATTRS operation.", "submit_date": "2022-06-23", "submitter_name": "Yuri Radchenko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6956", "doc-id": "RFC6890", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2.2", "orig_text": "              +----------------------+----------------------------+\r\n              | Attribute            | Value                      |\r\n              +----------------------+----------------------------+\r\n              | Address Block        | 0.0.0.0/8                  |\r\n              | Name                 | \"This host on this network\"|\r\n              | RFC                  | [RFC1122], Section 3.2.1.3 |\r\n              | Allocation Date      | September 1981             |\r\n              | Termination Date     | N/A                        |\r\n              | Source               | True                       |\r\n              | Destination          | False                      |\r\n              | Forwardable          | False                      |\r\n              | Global               | False                      |\r\n              | Reserved-by-Protocol | True                       |\r\n              +----------------------+----------------------------+\r\n\r\n                    Table 1: \"This host on this network\"", "correct_text": "              +----------------------+----------------------------+\r\n              | Attribute            | Value                      |\r\n              +----------------------+----------------------------+\r\n              | Address Block        | 0.0.0.0/8                  |\r\n              | Name                 | \"This network\"             |\r\n              | RFC                  | [RFC1122], Section 3.2.1.3 |\r\n              | Allocation Date      | September 1981             |\r\n              | Termination Date     | N/A                        |\r\n              | Source               | True                       |\r\n              | Destination          | False                      |\r\n              | Forwardable          | False                      |\r\n              | Global               | False                      |\r\n              | Reserved-by-Protocol | True                       |\r\n              +----------------------+----------------------------+\r\n\r\n                          Table 1: \"This network\"", "notes": "RFC1122 states that 0.0.0.0/32 is \"this host on this network\" while 0.0.0.0/8 is \"this network\".\n --VERIFIER NOTES-- \n   This errata is obsolete: it was fixed by errata 6404 by the same errata reporter.", "submit_date": "2021-01-21", "submitter_name": "Thomas", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 11:21:29"}, {"errata_id": "6957", "doc-id": "RFC8668", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "The name of the IANA registry for Sub-TLVs for TLVs 22, 23, 141, 222,\r\nand 223 has been changed to include sub-TLV 25.", "correct_text": "The name of the IANA registry for Sub-TLVs for TLVs 22, 23, 141, 222,\r\nand 223 has been changed to include TLV 25.", "notes": "25 is top-level TLV. By mistake, it is written as sub-TLV.\r\n\r\n(See also https://mailarchive.ietf.org/arch/msg/lsr/LvcOMxMuJW40ThHJeV3nOjl-0HY/)", "submit_date": "2022-05-09", "submitter_name": "Praveen Kumar", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2022-05-10 16:02:59"}, {"errata_id": "6972", "doc-id": "RFC7914", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "At the current time, r=8 and p=1 appears to yield good results, but as memory latency and CPU parallelism increase, it is likely that the optimum values for both r and p will increase.", "correct_text": "At the current time, r=8 and p=1 appears to yield good results, but as memory latency decrease and CPU parallelism increase, it is likely that the optimum values for both r and p will increase.", "notes": "The wording in itself is a bit unclear, but the phrase \"but as memory latency and CPU parallelism increase\" might be interpreted as \"but as memory latency increase and CPU parallelism increase\", which in combination with the following phrase \"it is likely that the optimum values for both r and p will increase\" is inconsistent with how scrypt operates. All other things being equal (including but not limited to the parameters used and CPU or ASIC performance), the scrypt algorithm have an inverse-proportional relationship to memory latency, especially if the low-latency memory can contain all of the temporary computational data the algorithm needs.\r\n\r\nPaul Wouters(AD): This seems correct, but as scrypt has been surpassed by argon2 (RFC9106) marked as Verified as no document update is expected for scrypt.", "submit_date": "2022-05-11", "submitter_name": "Gacel Perfinian", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 01:29:38"}, {"errata_id": "6973", "doc-id": "RFC3961", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2", "orig_text": "6.2.1:\r\n\r\n   key-generation seed      8 bytes\r\n   length\r\n\r\n   random-to-key            des_random_to_key\r\n\r\n6.2.2:\r\n\r\n   key-generation seed      8 bytes\r\n   length\r\n\r\n   random-to-key            copy input, then fix parity bits\r\n\r\n6.2.3:\r\n\r\n   key-generation seed      8 bytes\r\n   length\r\n\r\n   random-to-key            copy input, then fix parity bits", "correct_text": "All sections:\r\n\r\n   key-generation seed      7 bytes\r\n   length\r\n\r\n   random-to-key            des_random_to_key", "notes": "Section 6.2 describes the random-to-key operation as:\r\n\r\n   For generation of a key from a random bitstring, we start with a 56-\r\n   bit string and, as with the string-to-key operation above, insert\r\n   parity bits.  If the result is a weak or semi-weak key, we modify it\r\n   by eXclusive-OR with the constant 0x00000000000000F0:\r\n\r\n        des_random_to_key(bitstring) {\r\n             return key_correction(add_parity_bits(bitstring));\r\n        }\r\n\r\nFor 6.2.1, the input should be 56-bits, not 64.\r\nFor 6.2.2 and 6.2.3, the random-to-key must also correct weak keys and not just the parity as currently described.\r\n\r\nOf course, this is all purely of academic interest as the 10-year anniversary of RFC6649 deprecating single DES is coming up in a couple of weeks. The distinction between a \"weak\" single DES key and a correctly generated random key only matters if your adversary is restricted to using graphing calculators.", "submit_date": "2022-05-12", "submitter_name": "Paul Miller", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-16 01:51:18"}, {"errata_id": "7005", "doc-id": "RFC7616", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.9.1", "orig_text": "uri=\"/dir/index.html\",", "correct_text": "uri=\"http://www.example.org/dir/index.html\",", "notes": "[1] In Section 3.4, uri -> The Effective Request URI (Section 5.5 of [RFC7230]) of the HTTP request;\r\n\r\n[2] In Section 5.5 of [RFC7230]: The components of the effective request URI, once determined as above, can be combined into absolute-URI form by concatenating the scheme, \"://\", authority, and combined path and query component\r\n\r\n[3] uri=\"/dir/index.html\" is an absolute-path, not an Effective Request URI", "submit_date": "2022-06-23", "submitter_name": "Patrick Ni", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7363", "doc-id": "RFC8431", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "       output {\r\n         leaf result {\r\n           type boolean;\r\n           mandatory true;\r\n           description\r\n             \"Return the result of the rib-add operation:\r\n              true  - success;\r\n              false - failed\";\r\n         }\r\n", "correct_text": "       output {\r\n         leaf result {\r\n           type boolean;\r\n           mandatory true;\r\n           description\r\n             \"Return the result of the nh-delete operation:\r\n              true  - success;\r\n              false - failed\";\r\n         }\r\n", "notes": "Erroneously specified operation rib-add instead of nh-delete on page 65", "submit_date": "2023-02-17", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2023-02-17 15:22:51"}, {"errata_id": "6974", "doc-id": "RFC4519", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.13", "orig_text": "3.13.  'residentialPerson'\r\n\r\n   The 'residentialPerson' object class is the basis of an entry that\r\n   includes a person's residence in the representation of the person.\r\n   (Source: X.521 [X.521])\r\n\r\n      ( 2.5.6.10 NAME 'residentialPerson'\r\n         SUP person\r\n         STRUCTURAL\r\n         MUST l\r\n         MAY ( businessCategory $ x121Address $ registeredAddress $\r\n               destinationIndicator $ preferredDeliveryMethod $\r\n               telexNumber $ teletexTerminalIdentifier $\r\n               telephoneNumber $ internationalISDNNumber $\r\n               facsimileTelephoneNumber $ preferredDeliveryMethod $\r\n               street $ postOfficeBox $ postalCode $ postalAddress $\r\n               physicalDeliveryOfficeName $ st $ l ) )", "correct_text": "3.13.  'residentialPerson'\r\n\r\n   The 'residentialPerson' object class is the basis of an entry that\r\n   includes a person's residence in the representation of the person.\r\n   (Source: X.521 [X.521])\r\n\r\n      ( 2.5.6.10 NAME 'residentialPerson'\r\n         SUP person\r\n         STRUCTURAL\r\n         MUST l\r\n         MAY ( businessCategory $ x121Address $ registeredAddress $\r\n               destinationIndicator $ preferredDeliveryMethod $\r\n               telexNumber $ teletexTerminalIdentifier $\r\n               telephoneNumber $ internationalISDNNumber $\r\n               facsimileTelephoneNumber $ preferredDeliveryMethod $\r\n               street $ postOfficeBox $ postalCode $ postalAddress $\r\n               physicalDeliveryOfficeName $ st ) )", "notes": "The \"l\" attributeType (a.k.a \"localityName\", as defined in section 2.16 of this same document) is defined in this class in ambiguous fashion.  \"l\" is declared as both required (MUST) and permitted (MAY). It should be removed from the MAY clause.\r\n\r\nIt is also worth pointing out this flaw is limited solely to this RFC, as the original residentialPerson definition defined within the ITU-T X.521 document (section 6.10) is indeed correct.  The \"localityName\" attribute type is not listed in ambiguous fashion.", "submit_date": "2022-05-17", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 21:21:39"}, {"errata_id": "7000", "doc-id": "RFC7116", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "Section 3.2:\r\nThe CBHE specification [RFC6260] defines concepts of 'Node Number' and 'Service Number' that require registries managed by IANA.\r\n\r\nSection 3.2.1:\r\nIANA has set up a registry to manage CBHE Node Numbers.  This registry, titled \"CBHE Node Numbers\", has been added to the list of registries associated with the Bundle Protocol.\r\n\r\nSection 3.2.2:\r\nIANA has set up a registry to manage CBHE Service Numbers.  This registry, titled   \"CBHE Service Numbers\", has been added to the list of registries associated with the Bundle Protocol.\r\n\r\n", "correct_text": "Section 3.2:\r\nThe CBHE specification [RFC6260] defines concepts of 'Node Number' and 'Service Number' associated with the IPN naming scheme that require registries managed by IANA.\r\n\r\nSection 3.2.1:\r\nIANA has set up a registry to manage IPN Scheme Node Numbers.  This registry, titled \"IPN Node Numbers\", has been added to the list of registries associated with the Bundle Protocol.\r\n\r\nSection 3.2.2:\r\nIANA has set up a registry to manage IPN Scheme Service Numbers.  This registry, titled   \"IPN Service Numbers\", has been added to the list of registries associated with the Bundle Protocol.\r\n", "notes": "The Compressed Bundle Header Encoding (CBHE) RFC6260 defines node numbers and service numbers for the IPN naming scheme. Therefore, the registries created by RFC7116 should have been titled \"IPN Node Numbers\" and \"IPN Service Numbers\" instead of \"CBHE Node Numbers\" and \"CBHE Service Numbers\". \r\n\r\nThe IANA registries should be renamed, replacing CBHE with IPN to reflect this. This clarification is particularly important as BPv7 (RFC9171) can use the IPN naming scheme but does not have a concept of CBHE.\r\n\r\n[Update: addressed by draft-ietf-dtn-ipn-update which will update this RFC when published]", "submit_date": "2022-06-21", "submitter_name": "Ed Birrane", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2024-06-21 20:20:30"}, {"errata_id": "6979", "doc-id": "RFC6092", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   REC-9: Inbound DHCPv6 discovery packets [RFC3315] received on\r\n   exterior interfaces MUST NOT be processed by any integrated DHCPv6\r\n   server or relay agent.\r\n", "correct_text": "   REC-9: Inbound DHCPv6 Solicit messages [RFC3315] received on\r\n   exterior interfaces MUST NOT be processed by any integrated DHCPv6\r\n   server or relay agent.\r\n", "notes": "\"discovery\" packet, more precisely DHCPDISCOVER message, is defined in DHCPv4 but it is not defined in DHCPv6.\r\nDHCPv6 clients send \"Solicit\" messages to discover DHCPv6 servers or relay agents.\r\n\r\n[WK]: RFC3315 seems to use \"discover\" and \"discovery\" in the general sense, but as this recommendation uses RFC2119 MUST NOT language, it seems that being more explicit (Solicit) is more appropriate. ", "submit_date": "2022-05-23", "submitter_name": "Tomoyuki Sahara", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2023-08-31 16:52:06"}, {"errata_id": "6977", "doc-id": "RFC7932", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.3", "orig_text": "      Block type code for next distance block type, appears only if\r\n         NBLTYPESD >= 2 and the previous distance block count is zero\r\n\r\n      Block count code + extra bits for next distance block count,\r\n         appears only if NBLTYPESD >= 2 and the previous distance block\r\n         count is zero", "correct_text": "      Block type code for next distance block type, appears only if\r\n         NBLTYPESD >= 2 and the previous distance block count is zero\r\n         and the distance code is not an implicit 0, as indicated by\r\n         the insert-and-copy length code\r\n\r\n      Block count code + extra bits for next distance block count,\r\n         appears only if NBLTYPESD >= 2 and the previous distance block\r\n         count is zero and the distance code is not an implicit 0, as\r\n         indicated by the insert-and-copy length code", "notes": "Corrected to match section 10 and the reference implementation, which do not update the distance block count when the distance is implicitly 0.", "submit_date": "2022-05-21", "submitter_name": "Sean Bartell", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6978", "doc-id": "RFC8148", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "15.1. Normative Ref", "orig_text": "               <https://www.apcointl.org/\r\n              resources/telematics/aacn-and-veds.html>", "correct_text": "           https://www.apcointl.org/resources/telematics/aacnveds/\r\n           veds-scheme-a-supporting-documentation/", "notes": "The URL was changed during the RFC preparation process.", "submit_date": "2022-05-23", "submitter_name": "Randall Gellens", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7365", "doc-id": "RFC9000", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.4.", "orig_text": "| 0x19       | RETIRE_CONNECTION_ID | Section 19.16 | __01 |      |", "correct_text": "| 0x19       | RETIRE_CONNECTION_ID | Section 19.16 | ___1 |      |", "notes": "Based on the context and section 12.5 ending says:\r\n\r\nNote that it is not possible to send the following frames in 0-RTT\r\n   packets for various reasons: ACK, CRYPTO, HANDSHAKE_DONE, NEW_TOKEN,\r\n   PATH_RESPONSE, and RETIRE_CONNECTION_ID.  A server MAY treat receipt\r\n   of these frames in 0-RTT packets as a connection error of type\r\n   PROTOCOL_VIOLATION.\r\n\r\nSo, I think the RETIRE_CONNECTION_ID frame should not appear in the 0-RTT packet, only contained in the 1-RTT package.", "submit_date": "2023-02-23", "submitter_name": "yongboy", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-30 08:45:57"}, {"errata_id": "6980", "doc-id": "RFC6458", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "The field opt specifies which SCTP socket option to get.  It can get\r\nany socket option currently supported that requests information\r\n(either read/write options or read-only) such as\r\n\r\n   SCTP_RTOINFO\r\n\r\n   SCTP_ASSOCINFO\r\n\r\n   SCTP_PRIMARY_ADDR\r\n\r\n   SCTP_PEER_ADDR_PARAMS\r\n\r\n   SCTP_DEFAULT_SEND_PARAM\r\n\r\n   SCTP_MAX_SEG\r\n\r\n   SCTP_AUTH_ACTIVE_KEY\r\n\r\n   SCTP_DELAYED_SACK\r\n\r\n   SCTP_MAX_BURST\r\n\r\n   SCTP_CONTEXT\r\n\r\n   SCTP_EVENT\r\n\r\n   SCTP_DEFAULT_SNDINFO\r\n\r\n   SCTP_DEFAULT_PRINFO\r\n\r\n   SCTP_STATUS\r\n\r\n   SCTP_GET_PEER_ADDR_INFO\r\n\r\n   SCTP_PEER_AUTH_CHUNKS\r\n\r\n   SCTP_LOCAL_AUTH_CHUNKS\r\n", "correct_text": "The field opt specifies which SCTP socket option to get.  It can get\r\nany socket option currently supported that requests information\r\n(either read/write options or read-only) such as\r\n\r\n   SCTP_RTOINFO\r\n\r\n   SCTP_ASSOCINFO\r\n\r\n   SCTP_PRIMARY_ADDR\r\n\r\n   SCTP_PEER_ADDR_PARAMS\r\n\r\n   SCTP_DEFAULT_SEND_PARAM\r\n\r\n   SCTP_MAXSEG\r\n\r\n   SCTP_AUTH_ACTIVE_KEY\r\n\r\n   SCTP_DELAYED_SACK\r\n\r\n   SCTP_MAX_BURST\r\n\r\n   SCTP_CONTEXT\r\n\r\n   SCTP_EVENT\r\n\r\n   SCTP_DEFAULT_SNDINFO\r\n\r\n   SCTP_DEFAULT_PRINFO\r\n\r\n   SCTP_STATUS\r\n\r\n   SCTP_GET_PEER_ADDR_INFO\r\n\r\n   SCTP_PEER_AUTH_CHUNKS\r\n\r\n   SCTP_LOCAL_AUTH_CHUNKS\r\n", "notes": "The constant SCTP_MAX_SEG is not defined. It should be SCTP_MAXSEG.", "submit_date": "2022-05-24", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-05-24 22:17:42"}, {"errata_id": "6981", "doc-id": "RFC3393", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.7.1", "orig_text": "      It is the claim here (see remarks in section 1.3) that the effects\r\n      of skew are rather small over the time scales that we are\r\n      discussing here, since temperature variations in a system tend to\r\n      be slow relative to packet inter-transmission times and the range\r\n      of drift is so small.\r\n", "correct_text": "      It is the claim here (see remarks in section 1.4) that the effects\r\n      of skew are rather small over the time scales that we are\r\n      discussing here, since temperature variations in a system tend to\r\n      be slow relative to packet inter-transmission times and the range\r\n      of drift is so small.\r\n", "notes": "Incorrect reference - 1.3 instead 1.4", "submit_date": "2022-05-26", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-06-17 00:36:48"}, {"errata_id": "6982", "doc-id": "RFC6891", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "Traditional DNS messages are limited to 512 octets in size when sent over UDP [RFC1035]. Fitting the increasing amounts of data that can be transported in DNS in this 512-byte limit is becoming more difficult. For instance, inclusion of DNSSEC records frequently requires a much larger response than a 512-byte message can hold.", "correct_text": "Traditional DNS messages are limited to 512-bytes in size when sent over UDP [RFC1035]. Fitting the increasing amounts of data that can be transported in DNS in this 512-byte limit is becoming more difficult. For instance, inclusion of DNSSEC records frequently\r\n requires a much larger response than a 512-byte message can hold.", "notes": "In the original text, it says: DNS messages are limited to 512 octets in size, but it should be 512 bytes not octets.\r\n\r\n\n --VERIFIER NOTES-- \n   Most RFCs use \"octets\" and \"bytes\" as equivalent (even if I personally prefer \"octets\").", "submit_date": "2022-05-29", "submitter_name": "Avninder Sran", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2022-05-30 04:56:28"}, {"errata_id": "7374", "doc-id": "RFC9000", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "13.4.1", "orig_text": "                                                               If an\r\n   endpoint does not implement ECN support or does not have access to\r\n   received ECN fields, it does not report ECN counts for packets it\r\n   receives.\r\n\r\n   Even if an endpoint does not set an ECT field in packets it sends,\r\n   the endpoint MUST provide feedback about ECN markings it receives, if\r\n   these are accessible.  ", "correct_text": "                                                               If an\r\n   endpoint does not have access to\r\n   received ECN fields, it does not report ECN counts for packets it\r\n   receives.\r\n\r\n   Even if an endpoint does not set an ECT field in packets it sends,\r\n   the endpoint MUST provide feedback about ECN markings it receives, if\r\n   these are accessible.  ", "notes": "In the second sentence, the only allowed exception to \"MUST provide feedback about received ECN markings\" is inaccessibility. The first sentence contradicts this by allowing two exceptions: inaccessibility and just \"not implementing ECN support\". \r\n\r\nIf \"not implementing ECN support\" was really intended to be an allowed exception, the capitalized \"MUST\" would have been pointless.\r\n\r\nTherefore it is proposed that the words \"does not implement ECN support or \" are deleted from the first paragraph.\r\n\r\nNOTE : Based on discussion in https://mailarchive.ietf.org/arch/msg/quic/lsz4X-cZql71Ba56uQhNQz4NzGc/ , the error type is changed from technical to editorial.", "submit_date": "2023-02-27", "submitter_name": "Bob Briscoe", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2023-05-29 13:52:02"}, {"errata_id": "7719", "doc-id": "RFC7516", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "The key identification methods for this specification are the same as\r\nthose defined in Section 6 of [JWS], except that the key being\r\nidentified is the public key to which the JWE was encrypted.", "correct_text": "??? <I don't know the proper correction.>", "notes": "Section 6 of [JWS] says \"these parameters need not be integrity protected, since changing them in a way that causes a different key to be used will cause the validation to fail.\"\r\n\r\nI don't know if this is true for signature schemes (that is, RFC 7515 might have the same erratum), but this is only true for encryption schemes if the algorithm is key-committing. See https://www.ietf.org/archive/id/draft-irtf-cfrg-aead-properties-02.html#name-key-commitment.", "submit_date": "2023-12-01", "submitter_name": "Jeffrey Yasskin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7720", "doc-id": "RFC7519", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.6", "orig_text": "4.1.6.  \"iat\" (Issued At) Claim\r\n\r\nThe \"iat\" (issued at) claim identifies the time at which the JWT was\r\nissued.  This claim can be used to determine the age of the JWT.  Its\r\nvalue MUST be a number containing a NumericDate value.  Use of this\r\nclaim is OPTIONAL.", "correct_text": "4.1.6.  \"iat\" (Issued At) Claim\r\n\r\nThe \"iat\" (issued at) claim identifies the time at which the JWT was\r\nissued.  This claim can be used to determine the age of the JWT.  Its\r\nvalue MUST be a number containing a NumericDate value.  Use of this\r\nclaim is OPTIONAL. Implementors MUST NOT reject otherwise-valid JWTs\r\nwith \"iat\" claims that appear to be from the future; token issuers\r\ndesiring this behavior may require it by including an \"nbf\" claim.", "notes": "There is substantial confusion and disagreement among JWT library implementors about whether to reject JWTs with `iat` claims that appear to be from the future due to clock drift. This confusion has led to over half a dozen Github issues & PRs over the years in libraries in many different ecosystems, and lots of strong disagreement among library developers and users.\r\n\r\nBased on a sample of the top Google search results for jwt client libraries in 11 different language ecosystems, the majority (7) of the libraries sampled do not reject future `iat` claims, while the remaining 4 *do* reject future `iat` claims by default. Of those 4 who do, *all* of them have had Github issues filed (by different unique users) in which the user was having a JWT unexpectedly rejected by a token validator using the library whose clock had drifted from that of the token issuer enough to trigger `iat`-based rejection.\r\n\r\nI propose we update the spec to explicitly prohibit rejection of future-`iat` JWTs (especially since token issuers have always been able to opt into this behavior using an `nbf` claim). Since this RFC has been published and cannot be edited, a new superseding RFC will have to be published and this one deprecated in order for the suggested change to make it out of the errata and into an actual RFC doc.\r\n\r\nI'm not sure if this merits a full RFC republish -- but as a data point for impact consideration, it's worth noting that this confusion has almost certainly wasted at least multiple hours per person (on average) of *dozens* of developers' time over the years, and led to at least half a dozen production bugs that I've seen mentioned. One of these bugs cropped up in my own organization on 2023-11-31 and has been observed previously but was misunderstood and not resolved; the 2023-11-31 occurence involved 10+ people in discussion. One Github issue I saw described an elongated full web server outage attributed to this confusion which cropped up during a leap-second-related clock drift issue. I'm filing this errata request on calendar day 3+ of discussing this issue in my organization (if you include past times this issue has cropped up).\r\n\r\nThanks for your consideration! I look forward to hearing back.", "submit_date": "2023-12-01", "submitter_name": "Timothy Vergenz", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8444", "doc-id": "RFC9484", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6", "orig_text": "   *  \"ipproto\" MUST represent a decimal integer between 0 and 255\r\n      inclusive or the wildcard value \"*\".", "correct_text": "   *  \"ipproto\" MUST represent a decimal integer between 0 and 255\r\n      inclusive or the wildcard value \"*\".\r\n   *  If the \"target\" or \"ipproto\" variable is set to the wildcard\r\n      value \"*\", it MUST be percent-encoded. It will therefore be\r\n      transmitted as \"%2A\".", "notes": "Sending the value \"*\" without percent-encoding is invalid per the rules from RFC 6570. See the full discussion on the MASQUE list:\r\nhttps://mailarchive.ietf.org/arch/msg/masque/lueN0h94KYPCIVr-SyHAV-xbVDs/\r\n\r\n\r\nSimilarly, the examples in Sections 4.2 and 4.4 need to be corrected:\r\n\r\nOLD s4.2:\r\n   GET https://example.org/.well-known/masque/ip/*/*/ HTTP/1.1\r\n\r\nNEW s4.2:\r\n   GET https://example.org/.well-known/masque/ip/%2A/%2A/ HTTP/1.1\r\n\r\nOLD s4.4:\r\n   :path = /.well-known/masque/ip/*/*/\r\n\r\nNEW s4.4:\r\n   :path = /.well-known/masque/ip/%2A/%2A/", "submit_date": "2025-06-02", "submitter_name": "David Schinazi", "verifier_id": "", "verifier_name": "Mike Bishop", "update_date": "2025-06-02 20:23:39"}, {"errata_id": "6983", "doc-id": "RFC4861", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.1", "orig_text": "   Redirect attacks can also be achieved by any host in order to flood a\r\n   victim or steal its traffic.  A host can send a Neighbor\r\n   Advertisement (in response to a solicitation) that contains its IP\r\n   address and a victim's link-layer address in order to flood the\r\n   victim with unwanted traffic.  Alternatively, the host can send a\r\n   Neighbor Advertisement that includes a victim's IP address and its\r\n   own link-layer address to overwrite an existing entry in the sender's\r\n   destination cache, thereby forcing the sender to forward all of the\r\n   victim's traffic to itself.", "correct_text": "   Redirect attacks can also be achieved by any host in order to flood a\r\n   victim or steal its traffic.  A host can send a Neighbor\r\n   Advertisement (in response to a solicitation) that contains its IP\r\n   address and a victim's link-layer address in order to flood the\r\n   victim with unwanted traffic.  Alternatively, the host can send a\r\n   Neighbor Advertisement that includes a victim's IP address and its\r\n   own link-layer address to overwrite an existing entry in the sender's\r\n   neighbor cache, thereby forcing the sender to forward all of the\r\n   victim's traffic to itself.", "notes": "s/destination cache/neighbor cache/\r\n\r\nNeighbor advertisement affects neighbor cache and not destination cache.", "submit_date": "2022-05-30", "submitter_name": "Ramakrishna Rao DTV", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:46:25"}, {"errata_id": "6984", "doc-id": "RFC3665", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   F5 INVITE Proxy 1 -> Proxy 2\r\n\r\n   INVITE sip:bob@biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TCP ss1.atlanta.example.com:5060;branch=z9hG4bK2d4790.1\r\n   Via: SIP/2.0/TCP client.atlanta.example.com:5060;branch=z9hG4bK74bf9\r\n    ;received=192.0.2.101\r\n   Max-Forwards: 69\r\n\r\n   F7 INVITE Proxy 2 -> Bob\r\n\r\n   INVITE sip:bob@client.biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TCP ss2.biloxi.example.com:5060;branch=z9hG4bK721e4.1\r\n   Via: SIP/2.0/TCP ss1.atlanta.example.com:5060;branch=z9hG4bK2d4790.1\r\n    ;received=192.0.2.111\r\n   Via: SIP/2.0/TCP client.atlanta.example.com:5060;branch=z9hG4bK74bf9\r\n    ;received=192.0.2.101\r\n   Max-Forwards: 68\r\n\r\n   F16 ACK Proxy 1 -> Proxy 2\r\n\r\n   ACK sip:bob@client.biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TCP ss1.atlanta.example.com:5060;branch=z9hG4bK2d4790.1\r\n   Via: SIP/2.0/TCP client.atlanta.example.com:5060;branch=z9hG4bK74b76\r\n    ;received=192.0.2.101\r\n   Max-Forwards: 69\r\n\r\n   F17 ACK Proxy 2 -> Bob\r\n\r\n   ACK sip:bob@client.biloxi.example.com SIP/2.0\r\n   Via: SIP/2.0/TCP ss2.biloxi.example.com:5060;branch=z9hG4bK721e4.1\r\n\r\n   Via: SIP/2.0/TCP ss1.atlanta.example.com:5060;branch=z9hG4bK2d4790.1\r\n    ;received=192.0.2.111\r\n   Via: SIP/2.0/TCP client.atlanta.example.com:5060;branch=z9hG4bK74b76\r\n    ;received=192.0.2.101\r\n   Max-Forwards: 68\r\n   From: Alice <sip:alice@atlanta.example.com>;tag=9fxced76sl\r\n", "correct_text": "the branch id in the topmost Via header(s) in the F16 F17 messages shouldn't be the same as the via headers added in F5 F7 messages.\r\n\r\nthe ACK message shall only copy the same branch id in Via if it's for non-200 ok responses. \r\n\r\nthis example deviates from the description in RFC 3261 chapter 16.6", "notes": "the branch id in the topmost Via header(s) in the F16 F17 messages shouldn't be the same as the via headers added in F5 F7 messages.\r\n\r\nthe ACK message shall only copy the same branch id in Via if it's for non-200 ok responses. \r\n\r\nthis example deviates from the description in RFC 3261 chapter 16.6", "submit_date": "2022-05-31", "submitter_name": "Xiaoxi Li", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6985", "doc-id": "RFC8650", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.1.1.", "orig_text": "HTTP status code - 200\r\n\r\n{\r\n   \"id\": 22,\r\n   \"uri\": \"https://example.com/restconf/subscriptions/22\"\r\n}", "correct_text": "HTTP status code - 200\r\n\r\n{\r\n   \"ietf-subscribed-notifications:output\": {\r\n      \"id\": 22,\r\n      \"ietf-restconf-subscribed-notifications:uri\":\r\n         \"https://example.com/restconf/subscriptions/22\"\r\n   }\r\n   \r\n}", "notes": "Original text for Figure 4 does not comply with RFC8040, Section 3.6.2. Encoding Operation Resource Output Parameters.", "submit_date": "2022-06-01", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "6990", "doc-id": "RFC5237", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "1.  Introduction\r\n\r\n   This document revises the IANA guidelines [RFC2780] for allocating\r\n   new Protocol field values in IPv4 header [RFC0791].", "correct_text": "1.  Introduction\r\n\r\n   This document revises the IANA guidelines [RFC2780] for allocating\r\n   new Protocol field values in IPv4 header [RFC791].", "notes": "Either the link to RFC0791 should point to https://www.rfc-editor.org/rfc/rfc791 (without the zero), or the url to RFC0791 itself is wrong without the zero.\n --VERIFIER NOTES-- \nThis is about a rendering issue in the HTMLized version of the RFC. The reference entry does contain the correct URL.", "submit_date": "2022-06-14", "submitter_name": "Ruder Laplace", "verifier_id": "", "verifier_name": "Lars Eggert", "update_date": "2023-08-11 11:10:05"}, {"errata_id": "6989", "doc-id": "RFC8439", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.8.2", "orig_text": "Poly1305 r =  455e9a4057ab6080f47b42c052bac7b", "correct_text": "Poly1305 r = 8455e9a4057ab6080f47b42c052bac7b", "notes": "fist nibble of r appears to be missing\n --VERIFIER NOTES-- \nr in Section 2.8.2 is the clamped 128-bit little-endian integer derived from the first 16 bytes of the Poly1305 one-time key. Clamping clears the top bits (see Section 2.5.1), so the big-endian hex begins 0x0455..., and when printed as a number the leading zero nibble may be omitted, yielding 455e9a4057ab6080f47b42c052bac7b as shown in the RFC. The 0x8455e9a4 value visible in the preceding table is a pre-clamp ChaCha20 block word, not r itself. This report conflates the pre-clamp word with the post-clamp r.\r\n\r\nRefs: RFC 8439 Section 2.5.1 and Section 2.8.2: http://www.rfc-editor.org/rfc/rfc8439.html\r\n", "submit_date": "2022-06-10", "submitter_name": "Mike Markowitz", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-10-20 22:18:45"}, {"errata_id": "6991", "doc-id": "RFC5806", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.3.6.", "orig_text": ";privacy=\"off", "correct_text": ";privacy=\"off\"", "notes": "Hello,\r\n\r\nIn example or the 9.3.6. Example of SIP to ISDN Translation, an end quote error is present.\r\n\r\n\r\nSincerely,", "submit_date": "2022-06-14", "submitter_name": "R\u00e9my ALEGRI", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-06-14 20:52:08"}, {"errata_id": "6992", "doc-id": "RFC9197", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3", "orig_text": "   Bit:  desired bit to be allocated in the 8-bit flags field of the\r\n      Pre-allocated Trace Option-Type and Incremental Trace Option-Type\r\n", "correct_text": "   Bit:  desired bit to be allocated in the 4-bit flags field of the\r\n      Pre-allocated Trace Option-Type and Incremental Trace Option-Type\r\n", "notes": "The size of the Flags field is 4 bits, not 8.", "submit_date": "2022-06-15", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-06-15 21:38:50"}, {"errata_id": "6993", "doc-id": "RFC9216", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "Email Address:  dna@smime.example", "correct_text": "Email Address:  dana@smime.example", "notes": "Decoding the certificate shoes that the Subject Alternative Name contains an email address of dana@smime.example.", "submit_date": "2022-06-15", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-06-16 21:38:45"}, {"errata_id": "6999", "doc-id": "RFC6787", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.20", "orig_text": "S->C:   MRCP/2.0 ... INTERPRETATION-COMPLETE 543266 200 COMPLETE\r\n           Channel-Identifier:32AECB23433801@speechrecog\r\n           Completion-Cause:000 success\r\n           Content-Type:application/nlsml+xml\r\n           Content-Length:...\r\n\r\n           <?xml version=\"1.0\"?>\r\n           <result xmlns=\"urn:ietf:params:xml:ns:mrcpv2\"\r\n                   xmlns:ex=\"http://www.example.com/example\"\r\n                   grammar=\"session:request1@form-level.store\">\r\n               <interpretation>\r\n                   <instance name=\"Person\">\r\n                       <ex:Person>\r\n                           <ex:Name> Andre Roy </ex:Name>\r\n                       </ex:Person>\r\n                   </instance>\r\n                   <input>   may I speak to Andre Roy </input>\r\n               </interpretation>\r\n           </result>", "correct_text": "S->C:   MRCP/2.0 ... INTERPRETATION-COMPLETE 543266 COMPLETE\r\n           Channel-Identifier:32AECB23433801@speechrecog\r\n           Completion-Cause:000 success\r\n           Content-Type:application/nlsml+xml\r\n           Content-Length:...\r\n\r\n           <?xml version=\"1.0\"?>\r\n           <result xmlns=\"urn:ietf:params:xml:ns:mrcpv2\"\r\n                   xmlns:ex=\"http://www.example.com/example\"\r\n                   grammar=\"session:request1@form-level.store\">\r\n               <interpretation>\r\n                   <instance name=\"Person\">\r\n                       <ex:Person>\r\n                           <ex:Name> Andre Roy </ex:Name>\r\n                       </ex:Person>\r\n                   </instance>\r\n                   <input>   may I speak to Andre Roy </input>\r\n               </interpretation>\r\n           </result>", "notes": "event-line does *not* include a status-code.", "submit_date": "2022-06-20", "submitter_name": "Andreas H\u00e4ber", "verifier_id": "", "verifier_name": null, "update_date": "2022-06-20 21:00:46"}, {"errata_id": "7001", "doc-id": "RFC6376", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "   k= Key type (plain-text; OPTIONAL, default is \"rsa\").  Signers and\r\n      Verifiers MUST support the \"rsa\" key type.  The \"rsa\" key type\r\n      indicates that an ASN.1 DER-encoded [ITU-X660-1997] RSAPublicKey\r\n      (see [RFC3447], Sections 3.1 and A.1.1) is being used in the \"p=\"\r\n      tag.", "correct_text": "   k= Key type (plain-text; OPTIONAL, default is \"rsa\").  Signers and\r\n      Verifiers MUST support the \"rsa\" key type.  The \"rsa\" key type\r\n      indicates that an ASN.1 DER-encoded [ITU-X660-1997] SubjectPublicKeyInfo\r\n      (see [RFC5280], Section 4.1) is being used in the \"p=\"\r\n      tag.", "notes": "The format specified for RSA keys is not what is used\r\neither in the wild, or in the examples in this RFC.\r\n\r\nThe current citation for the RSAPublicKey format is\r\nlisted below for reference:\r\n\r\n   RSAPublicKey ::= SEQUENCE {\r\n       modulus           INTEGER,  -- n\r\n       publicExponent    INTEGER   -- e\r\n   }\r\n \r\nTaking the example public key in this RFC document:\r\n\r\n   -----BEGIN PUBLIC KEY-----\r\n   MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDwIRP/UC3SBsEmGqZ9ZJW3/DkM\r\n   oGeLnQg1fWn7/zYtIxN2SnFCjxOCKG9v3b4jYfcTNh5ijSsq631uBItLa7od+v/R\r\n   tdC2UzJ1lWT947qR+Rcac2gbto/NMqJ0fzfVjH4OuKhitdY9tf6mcwGjaNBcWToI\r\n   MmPSPDdQPNUYckcQ2QIDAQAB\r\n   -----END PUBLIC KEY-----\r\n\r\nWe can decode it as asn.1, and see that it is not in the format\r\nspecified:\r\n\r\n  $  openssl asn1parse -i -inform pem -in /home/ori/ykey.pem  \r\n    0:d=0  hl=3 l= 159 cons: SEQUENCE          \r\n    3:d=1  hl=2 l=  13 cons:  SEQUENCE          \r\n    5:d=2  hl=2 l=   9 prim:   OBJECT            :rsaEncryption\r\n   16:d=2  hl=2 l=   0 prim:   NULL              \r\n   18:d=1  hl=3 l= 141 prim:  BIT STRING        \r\n\r\nThe openssl documentation unhelpfully says that it's generated\r\nin the \"traditional SSLEay format\". Poking around, that seems\r\nto correspond to SubjectPublicKeyInfo in RFC5280:\r\n\r\n  SubjectPublicKeyInfo  ::=  SEQUENCE  {\r\n        algorithm            AlgorithmIdentifier,\r\n        subjectPublicKey     BIT STRING  }\r\n\r\nWhen generating a key that conforms to the RSAPublicKey\r\nencoding, multiple sites (including gmail) reject the key,\r\nclaiming a failure to parse the tag -- this is also the\r\nerror that openssl has when attempting to parse an RSA\r\npublic key in this format; for example:\r\n\r\n   -----BEGIN PUBLIC KEY-----\r\n   MIGJAoGBAOPkeIi7+kBDwxOlfJFeWygu5Txt43ddLdY8AfWxLIHtQObNhgsxuaWh\r\n   UUhlftnJWcafJg6V8HVyvd4i+3D0l/PLHu89bIkGnH0ts/weIvQJ+Rx/hVZtS/H1\r\n   vkHRmiPnO5gaDi/jvfAFWcG4BiJgkEcUovKbmWAxYzGBqe/8um23AgMBAAE=\r\n   -----END PUBLIC KEY-----\r\n\r\n $ openssl asn1parse -i -inform pem -in /home/ori/key.pem   \r\n    0:d=0  hl=3 l= 137 cons: SEQUENCE          \r\n    3:d=1  hl=3 l= 129 prim:  INTEGER           :E3E47888BBFA404\u00b7.\r\n  135:d=1  hl=2 l=   3 prim:  INTEGER           :010001\r\n  $ openssl rsa -pubin -in /home/ori/key.pem  -text             \r\n   unable to load Public Key\r\n   140290635060544:error:0D0680A8:asn1 encoding routines:asn1_check_tlen:wrong tag:../crypto/asn1/tasn_dec.c:1149:\r\n   140290635060544:error:0D07803A:asn1 encoding routines:asn1_item_embed_d2i:nested asn1 error:../crypto/asn1/tasn_dec.c:309:Type=X509_ALGOR\r\n   140290635060544:error:0D08303A:asn1 encoding routines:asn1_template_noexp_d2i:nested asn1 error:../crypto/asn1/tasn_dec.c:646:Field=algor, Type=X509_PUBKEY\r\n   140290635060544:error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib:../crypto/pem/pem_oth.c:33:\r\n\r\nWhile in theory it would be better to fix the examples,\r\nI think that ship has sailed, and it's better instead\r\nto fix the citation in the specification.", "submit_date": "2022-06-21", "submitter_name": "Ori Bernstein", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7002", "doc-id": "RFC9173", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "A.4.4.1", "orig_text": "This BCB has two targets: the payload block and BIB.", "correct_text": "This BCB has two targets: the payload block and BIB. \r\n\r\nNOTE: This example implies using a single Initialization Vector (IV) for\r\ntwo separate encryptions (a BIB and the payload). This violates the \r\nrequirement in Section 4.3.1 that the \"initialization vector ... MUST \r\nNOT be reused for multiple encryptions using the same encryption key.\". \r\nWhen using the BCB-AES-GCM security context containing a specified \r\nInitialization Vector, each BCB should have only one security target.  \r\n", "notes": "This is listed as \"editorial\" and not technical because the error appears in a non-normative portion of the document.", "submit_date": "2022-06-21", "submitter_name": "Ed Birrane", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7003", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.6.1.", "orig_text": "At any time after the server has received the client Finished message, it MAY send a NewSessionTicket message.", "correct_text": "At any time after the server has received both a \"psk_key_exchange_modes\" extension and a Finished message, it MAY send a NewSessionTicket message.\r\n\r\n", "notes": "Section 4.2.9. demands \r\n\r\nIn order to use PSKs, clients MUST also send a \"psk_key_exchange_modes\" extension.\r\n\r\nHence, an additional restriction is needed in Section 4.6.1.", "submit_date": "2022-06-22", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:38:47"}, {"errata_id": "7006", "doc-id": "RFC6030", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "      ValueMAC:  The <ValueMAC> element is populated with a Message\r\n         Authentication Code (MAC) generated from the encrypted value in\r\n         case the encryption algorithm does not support integrity\r\n         checks.  The example shown in Figure 2 illustrates the usage of\r\n         the <Data> element with two child elements, namely <Secret> and\r\n         <Counter>.  Both elements carry a plaintext value within the\r\n         <PlainValue> child element.\r\n", "correct_text": "      ValueMAC:  The <ValueMAC> element is populated with a Message\r\n         Authentication Code (MAC) generated from the encrypted value in\r\n         case the encryption algorithm does not support integrity\r\n         checks.\r\n\r\n      The example shown in Figure 2 illustrates the usage of the <Data>\r\n      element with one child element <Secret>.  This element carries a\r\n      plaintext value within the <PlainValue> child element.\r\n", "notes": "There are two issues:\r\n- the comment about the example should be in a standalone paragraph and not as a continuation of the explanation for ValueMAC\r\n-  the example in Figure 2 does *not* include <Counter>. The correction might be done to Figure 2, adding an XML fragment for <Counter> inside <Data>.", "submit_date": "2022-06-26", "submitter_name": "Flavio Poletti", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7007", "doc-id": "RFC8276", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.4.5", "orig_text": "   | LISTXATTRS  | NFS4ERR_ACCESS, NFS4ERR_DEADSESSION, NFS4ERR_DELAY, |\r\n   |             | NFS4ERR_INVAL, NFS4ERR_IO, NFS4ERR_MOVED,           |\r\n   |             | NFS4ERR_NAMETOOLONG, NFS4ERR_NOFILEHANDLE,          |\r\n   |             | NFS4ERR_NOTSUPP, NFS4ERR_NOXATTR,                   |\r\n   |             | NFS4ERR_OP_NOT_IN_SESSION, NFS4ERR_PERM,            |\r\n   |             | NFS4ERR_REP_TOO_BIG, NFS4ERR_REP_TOO_BIG_TO_CACHE,  |\r\n   |             | NFS4ERR_REQ_TOO_BIG, NFS4ERR_RETRY_UNCACHED_REP,    |\r\n   |             | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,                 |\r\n   |             | NFS4ERR_TOO_MANY_OPS, NFS4ERR_WRONG_TYPE            |", "correct_text": "   | LISTXATTRS  | NFS4ERR_ACCESS, NFS4ERR_DEADSESSION, NFS4ERR_DELAY, |\r\n   |             | NFS4ERR_INVAL, NFS4ERR_IO, NFS4ERR_MOVED,           |\r\n   |             | NFS4ERR_NAMETOOLONG, NFS4ERR_NOFILEHANDLE,          |\r\n   |             | NFS4ERR_NOTSUPP, NFS4ERR_NOXATTR,                   |\r\n   |             | NFS4ERR_OP_NOT_IN_SESSION, NFS4ERR_PERM,            |\r\n   |             | NFS4ERR_REP_TOO_BIG, NFS4ERR_REP_TOO_BIG_TO_CACHE,  |\r\n   |             | NFS4ERR_REQ_TOO_BIG, NFS4ERR_RETRY_UNCACHED_REP,    |\r\n   |             | NFS4ERR_SERVERFAULT, NFS4ERR_STALE,                 |\r\n   |             | NFS4ERR_TOO_MANY_OPS, NFS4ERR_WRONG_TYPE,           |\r\n   |             | NFS4ERR_BAD_COOKIE                                  |", "notes": "rfc says \r\n\"The handling of a cookie is similar to that of the READDIR operation.\" \r\n(8.4.3.4.)\r\n\r\nIt would be useful to include NFS4ERR_BAD_COOKIE status code into the list of LISTXATTRS statuses, 8.4.5.  Valid Errors.\r\n\r\nNFS for Linux included this status code. \r\nsee https://bugzilla.redhat.com/show_bug.cgi?id=2101371", "submit_date": "2022-06-27", "submitter_name": "Yuri Radchenko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7011", "doc-id": "RFC7595", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "[RFC3986] defines the overall syntax for URIs as:\r\n\r\n               URI = scheme \":\" hier-part [ \"?\" query ] [ \"#\" fragment ]\r\n\r\n   A scheme definition cannot override the overall syntax for URIs. ", "correct_text": "[RFC3986] defines the generic syntax for URIs as:\r\n\r\n               URI = scheme \":\" hier-part [ \"?\" query ] [ \"#\" fragment ]\r\n\r\n   A scheme definition cannot override the generic syntax for URIs. ", "notes": "There are two instances here where [RFC3986] is incorrectly referenced by using the word 'overall' and should instead be replaced with the term 'generic' as it is uses the identical example from https://datatracker.ietf.org/doc/html/rfc3986#section-3", "submit_date": "2022-07-01", "submitter_name": "Timothy McSweeney", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2022-08-16 01:34:38"}, {"errata_id": "7009", "doc-id": "RFC8028", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Abstract", "orig_text": "However, the selection of the source address for a\r\npacket is done before the first-hop router for that packet is chosen.", "correct_text": "However, the selection of the source address for a\r\npacket is done in some cases before the first-hop router\r\nfor that packet is chosen.", "notes": "This change recognizes the fact that while server applications commonly\r\nbind to a specific source address before sending a packet, client\r\napplications commonly do not do so. (Also see following erratum.)", "submit_date": "2022-06-30", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-03-21 03:06:16"}, {"errata_id": "7010", "doc-id": "RFC8028", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "There is an interaction with Default Address Selection [RFC6724].", "correct_text": "There is an interaction with Default Address Selection [RFC6724] in the\r\ncase that an application does not explicitly specify the source address\r\nto be used.", "notes": "This change recognizes the fact that while server applications commonly\r\nbind to a specific source address before sending a packet, client\r\napplications commonly do not do so. (See previous erratum)", "submit_date": "2022-06-30", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-03-21 03:06:27"}, {"errata_id": "7012", "doc-id": "RFC8877", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "   Wraparound:\r\n      This time format wraps around every 2^(32) seconds, which is\r\n      roughly 136 years.  The next wraparound will occur in the year\r\n      2036.\r\n", "correct_text": "   Wraparound:\r\n      This time format wraps around every 2^(32) seconds, which is\r\n      roughly 136 years.  The next wraparound will occur in the year\r\n      2106.\r\n", "notes": "1970+136=2106, not 2036\n --VERIFIER NOTES-- \n   The Epoch starts from 1900, not 1970.", "submit_date": "2022-07-04", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2022-07-27 15:34:02"}, {"errata_id": "7013", "doc-id": "RFC9113", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "      |  Note: An endpoint that learns of stream closure after sending\r\n      |  all data can close a stream by sending a STREAM frame with a\r\n      |  zero-length Data field and the END_STREAM flag set.  This is\r\n      |  only possible if the endpoint does not send trailers, as the\r\n      |  END_STREAM flag appears on a HEADERS frame in that case; see\r\n      |  Section 8.1.", "correct_text": "      |  Note: An endpoint that learns of stream closure after sending\r\n      |  all data can close a stream by sending a DATA frame with a\r\n      |  zero-length Data field and the END_STREAM flag set.  This is\r\n      |  only possible if the endpoint does not send trailers, as the\r\n      |  END_STREAM flag appears on a HEADERS frame in that case; see\r\n      |  Section 8.1.", "notes": "Since STREAM frame is not defined in HTTP/2, I assume this is a DATA frame. This is probably a typo, possibly confused with the QUIC specification.", "submit_date": "2022-07-06", "submitter_name": "Moto Ishizawa", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2022-07-06 20:33:28"}, {"errata_id": "7014", "doc-id": "RFC9114", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "   \":path\":  Contains the path and query parts of the target URI (the\r\n      \"path-absolute\" production and optionally a ? character (ASCII\r\n      0x3f) followed by the \"query\" production; see Sections 3.3 and 3.4\r\n      of [URI].", "correct_text": "   \":path\":  Contains the path and query parts of the target URI (the\r\n      \"absolute-path\" production and optionally a ? character (ASCII\r\n      0x3f) followed by the \"query\" production; see Section 4.1 of\r\n      [HTTP] and Section 3.4 of [URI].", "notes": "There is a conflict between RFC 9114 and RFCs 9110,9112,9113. RFC 9114 disallows paths that start with \"//\" whereas the others allow them. Research seems to indicate that this was not intentional. More details on the mailing list discussion: https://lists.w3.org/Archives/Public/ietf-http-wg/2022JulSep/0014.html", "submit_date": "2022-07-06", "submitter_name": "David Schinazi", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2022-09-27 18:27:39"}, {"errata_id": "7376", "doc-id": "RFC9350", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "   One of the limitations of IS-IS [ISO10589] is that the length of a\r\n   TLV/sub-TLV is limited to a maximum of 255 octets.  For the FAD sub-\r\n   TLV, there are a number of sub-sub-TLVs (defined below) that are\r\n   supported.  For a given Flex-Algorithm, it is possible that the total\r\n   number of octets required to completely define a FAD exceeds the\r\n   maximum length supported by a single FAD sub-TLV.  In such cases, the\r\n   FAD MAY be split into multiple such sub-TLVs, and the content of the\r\n   multiple FAD sub-TLVs are combined to provide a complete FAD for the\r\n   Flex-Algorithm.  In such a case, the fixed portion of the FAD (see\r\n   Section 5.1) MUST be identical in all FAD sub-TLVs for a given Flex-\r\n   Algorithm from a given IS.  ", "correct_text": "   One of the limitations of IS-IS [ISO10589] is that the length of a\r\n   TLV/sub-TLV is limited to a maximum of 255 octets.  For the FAD sub-\r\n   TLV, there are a number of sub-sub-TLVs (defined below) that are\r\n   supported.  For a given Flex-Algorithm, it is possible that the total\r\n   number of octets required to completely define a FAD exceeds the\r\n   maximum length supported by a single FAD sub-TLV.  In such cases, the\r\n   FAD MAY be split into multiple such sub-TLVs, and the content of the\r\n   multiple FAD sub-TLVs are combined to provide a complete FAD for the\r\n   Flex-Algorithm.  In such a case, the fixed portion of the FAD (see\r\n   Section 5.1) MUST be identical in all FAD sub-TLVs for a given Flex-\r\n   Algorithm from a given IS (Intermediate System).", "notes": "Although \"IS\" is listed in https://www.rfc-editor.org/materials/abbrev.expansion.txt as well-known, this evidently confused at least one reader, so it seems worth expanding on first use. See also https://mailarchive.ietf.org/arch/msg/lsr/LICQJ8U3cBAY9Z1LHMfAI4v7xRg/", "submit_date": "2023-03-04", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2023-03-06 14:19:44"}, {"errata_id": "7377", "doc-id": "RFC865", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "865", "orig_text": "\"...Once a connection is established \r\n a short message is sent out \r\n the connection...\"\r\n\r\n", "correct_text": "\"...Once a connection is established \r\n a short message is sent out '<via>' <from> <to> <of> \r\n the connection...\"", "notes": "A minor grammatical error, perhaps due to the author thinking in code.", "submit_date": "2023-03-06", "submitter_name": "Conroy Bogle", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7674", "doc-id": "RFC4452", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1", "orig_text": "info-URI        = info-scheme \":\" info-identifier [ \"#\" fragment ]", "correct_text": "info-URI        = info-scheme \":\" info-identifier [ \"#\" Absolute]", "notes": "In practice, it is possible to generate a URI reference to a relative path of a web service.  But in many cases, problems exist in resolving names and reverse name resolution.\r\n\r\nProblems exist in the journal/truncated information of the relative URL (e.g., thomas-signe.co).  \r\n\r\nGood practice/compliance is to use the absolute path and correct reference in the Root Domain and reverse lookup.  ", "submit_date": "2023-10-11", "submitter_name": "Fabian Cohen", "verifier_id": "", "verifier_name": null, "update_date": "2023-10-19 20:55:21"}, {"errata_id": "7684", "doc-id": "RFC9135", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": " This route is advertised along with the following extended community:\r\n\r\n   *  Tunnel Type Extended Community", "correct_text": " This route is advertised along with the following extended community:\r\n\r\n   *  Encapsulation Extended Community", "notes": "I guess that solud be Encapsulation Extended Community (or  maybe Tunnel Encapsulation Attribute)\r\n\r\nVerifier notes:\r\nSee https://mailarchive.ietf.org/arch/msg/bess/TgQR3NHd6wgcYow0B76i7ToBmr0/", "submit_date": "2023-10-19", "submitter_name": "Denis Vrkic", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-02-12 15:31:48"}, {"errata_id": "7381", "doc-id": "RFC9073", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "   Format Definition:  This component is defined by the following\r\n      notation:\r\n\r\n      locationc    = \"BEGIN\" \":\" \"VLOCATION\" CRLF\r\n                     locprop\r\n                     \"END\" \":\" \"VLOCATION\" CRLF\r\n\r\n      locprop      = *(\r\n                     ;\r\n                     ; The following are REQUIRED\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     uid /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     description / geo / loctype / name\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; and MAY occur more than once.\r\n                     ;\r\n                     sdataprop / iana-prop\r\n                  )", "correct_text": "   Format Definition:  This component is defined by the following\r\n      notation:\r\n\r\n      locationc    = \"BEGIN\" \":\" \"VLOCATION\" CRLF\r\n                     locprop\r\n                     \"END\" \":\" \"VLOCATION\" CRLF\r\n\r\n      locprop      = *(\r\n                     ;\r\n                     ; The following are REQUIRED\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     uid /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     description / geo / loctype / name / url /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; and MAY occur more than once.\r\n                     ;\r\n                     sdataprop / iana-prop\r\n                  )", "notes": "The url property is missing or the specification clahes with RFC 9074, where in section 8.2 in the example it reads:\r\n\r\n   BEGIN:VLOCATION\r\n   UID:123456-abcdef-98765432\r\n   NAME:Office\r\n   URL:geo:40.443,-79.945;u=10\r\n   END:VLOCATION\r\n\r\nEither \"geo\" was intended as a geo uri as defined in RFC 5870 (instead of the geographic position from RFC 2445/5545) or \"url\" should be added as a valid property (or RFC 9074 is wrong).\r\n\r\n--\r\n\r\nVerifier's notes: A \"/\" was missing after \"name\" and was added after \"url\" in this same errata.", "submit_date": "2023-03-09", "submitter_name": "Olaf Bartelt", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-09 14:13:00"}, {"errata_id": "7382", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.3", "orig_text": "ccontent        =   ctext / quoted-pair / comment\r\n\r\ncomment         =   \"(\" *([FWS] ccontent) [FWS] \")\"", "correct_text": "ccontent        =   ctext / quoted-pair\r\n\r\ncomment         =   \"(\" *([FWS] ccontent) [FWS] \")\"", "notes": "Trying to getting all possible originator formats a reader can get stuck into a circular dependency between \"comment\" and \"ccontent\" definitions.\r\nSince \"ccontent\" is referenced in the \"comment\" definition only circular dependency should be cut there I suppose.\n --VERIFIER NOTES-- \nThe ABNF for comment is correct in 5322. It is intended to be recursive, allowing for nested comments.", "submit_date": "2023-03-11", "submitter_name": "Paolo Schiro", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-05-15 08:54:32"}, {"errata_id": "7384", "doc-id": "RFC8410", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "    sa-Ed25519 SIGNATURE-ALGORITHM ::= {\r\n       IDENTIFIER id-Ed25519\r\n        PARAMS ARE absent\r\n        PUBLIC-KEYS {pk-Ed25519}\r\n        SMIME-CAPS { IDENTIFIED BY id-Ed25519 }\r\n    }\r\n\r\n    pk-Ed25519 PUBLIC-KEY ::= {\r\n        IDENTIFIER id-Ed25519\r\n        -- KEY no ASN.1 wrapping --\r\n        PARAMS ARE absent\r\n        CERT-KEY-USAGE {digitalSignature, nonRepudiation,\r\n                        keyCertSign, cRLSign}\r\n        PRIVATE-KEY CurvePrivateKey\r\n    }", "correct_text": "    sa-Ed25519 SIGNATURE-ALGORITHM ::= {\r\n       IDENTIFIER id-Ed25519\r\n        PARAMS ARE absent\r\n        PUBLIC-KEYS {pk-Ed25519}\r\n        SMIME-CAPS { IDENTIFIED BY id-Ed25519 }\r\n    }\r\n\r\n    pk-Ed25519 PUBLIC-KEY ::= {\r\n        IDENTIFIER id-Ed25519\r\n        -- KEY no ASN.1 wrapping --\r\n        PARAMS ARE absent\r\n        CERT-KEY-USAGE {digitalSignature, nonRepudiation,\r\n                        keyCertSign, cRLSign}\r\n        PRIVATE-KEY CurvePrivateKey\r\n    }\r\n\r\n   sa-Ed448 SIGNATURE-ALGORITHM ::= {\r\n      IDENTIFIER id-Ed448\r\n       PARAMS ARE absent\r\n       PUBLIC-KEYS {pk-Ed448}\r\n       SMIME-CAPS { IDENTIFIED BY id-Ed448 }\r\n   }\r\n\r\n   pk-Ed448 PUBLIC-KEY ::= {\r\n       IDENTIFIER id-Ed448\r\n       -- KEY no ASN.1 wrapping --\r\n       PARAMS ARE absent\r\n       CERT-KEY-USAGE {digitalSignature, nonRepudiation,\r\n                       keyCertSign, cRLSign}\r\n       PRIVATE-KEY CurvePrivateKey\r\n   }", "notes": "The definitions for sa-Ed448 and pk-Ed448 are missing from RFC 8410.", "submit_date": "2023-03-12", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-04-11 19:56:33"}, {"errata_id": "7385", "doc-id": "RFC7578", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.5", "orig_text": "       --AaB03x\r\n       content-disposition: form-data; name=\"field1\"\r\n       content-type: text/plain;charset=UTF-8\r\n       content-transfer-encoding: quoted-printable\r\n\r\n       Joe owes =E2=82=AC100.\r\n       --AaB03x", "correct_text": "       --AaB03x\r\n       content-disposition: form-data; name=\"field1\"\r\n       content-type: text/plain;charset=UTF-8\r\n\r\n       Joe owes %E2%82%AC100\r\n       --AaB03x", "notes": "Errata ID: 5616 is in status Reported but is failing to correct adequately.\r\nThe Content-Transfer-Encoding is Deprecated so the corresponding line should not appear (section 4.7)\r\nUTF-8 characters are supposed to be percent-encoded (section 2)\r\nThe endoint point is removed as it's not in the quoted phrase\r\nWe can keep the ending boundary as we are not sure if more parameters would follow (Errata ID: 4676).", "submit_date": "2023-03-13", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7386", "doc-id": "RFC8881", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "18.46.3.", "orig_text": "                                                             Operations\r\n   other than SEQUENCE, BIND_CONN_TO_SESSION, EXCHANGE_ID,\r\n   CREATE_SESSION, and DESTROY_SESSION, MUST NOT appear as the first\r\n   operation in a COMPOUND.", "correct_text": "                                                             Operations\r\n   other than SEQUENCE, BIND_CONN_TO_SESSION, EXCHANGE_ID,\r\n   CREATE_SESSION, DESTROY_SESSION, and DESTROY_CLIENTID, MUST NOT\r\n   appear as the first operation in a COMPOUND.", "notes": "Section 18.50.3. DESCRIPTION of DESTROY_CLIENTID says\r\n\r\n\"DESTROY_CLIENTID MAY be preceded with a SEQUENCE\"\r\n\r\nand also says\r\n\r\n\"If DESTROY_CLIENTID is not prefixed by SEQUENCE, it MUST be the only operation in the COMPOUND request\"\r\n\r\nwhich implies that DESTROY_CLIENTID can appear as the first (and the only) operation in a COMPOUND.", "submit_date": "2023-03-13", "submitter_name": "Pali Roh\u00e1r", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-10-30 10:09:27"}, {"errata_id": "7383", "doc-id": "RFC8259", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.  Values", "orig_text": "false = %x66.61.6c.73.65   ; false\r\n\r\n      null  = %x6e.75.6c.6c      ; null", "correct_text": "false = %x66.61.6C.73.65   ; false\r\n\r\n      null  = %x6E.75.6C.6C      ; null", "notes": "Hex values should be capitalized https://www.rfc-editor.org/rfc/rfc5234#appendix-B.1", "submit_date": "2023-03-12", "submitter_name": "Daniel Tegr\u00fcnde", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:35:23"}, {"errata_id": "7910", "doc-id": "RFC8617", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "   arc-ams-info = instance [CFWS] \";\" tag-list\r\n   arc-message-signature = \"ARC-Message-Signature:\" [CFWS] arc-ams-info", "correct_text": "\r\n   arc-ams-info = instance [FWS] \";\" tag-list\r\n   arc-message-signature = \"ARC-Message-Signature:\" [FWS] arc-ams-info\r\n", "notes": "The RFC claims in 4.1.2\r\n\r\n   The AMS header field has the same syntax and semantics as the DKIM-\r\n   Signature field [RFC6376], with three (3) differences:\r\n\r\nbut the three differences do not denote the FWS->CFWS change.\r\n\r\nCFWS is to be parsed very differently than FWS, given its potentially infinite recursion behaviour, and the possibility to use quoted-pair's, ie, \"escapability\", something which (like almost RFC 5322 as such in practice) the DKIM RFC circumvents by using VALCHAR, a corruption of VCHAR as of RFC 5234.\r\nIn effect neither of these standards adhere to neither of RFC 5322 (plain atext, quoted-string, quoted-pair) nor RFC 2045 (K=V without whitespace; quoted-printable or base64 for 7-bit clarity etc etc), making them very hard to parse, to mention my humble opinion.", "submit_date": "2024-04-26", "submitter_name": "Steffen Nurpmeso", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7409", "doc-id": "RFC8554", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Section 6.4, Table 3", "orig_text": "   +---------+------------+---------+-------------+ \r\n   | ParmSet | KeyGenTime | SigSize | KeyLifetime | \r\n   +---------+------------+---------+-------------+ \r\n                         ... \r\n\r\n   | 15/10   | 6 sec      | 3172    | 9 hours     | \r\n   |         |            |         |             | \r\n   | 15/15   | 6 sec      | 3332    | 12 days     | \r\n   |         |            |         |             | \r\n   | 20/10   | 3 min      | 3332    | 12 days     | \r\n   |         |            |         |             | \r\n   | 20/15   | 3 min      | 3492    | 1 year      | \r\n   |         |            |         |             | \r\n   | 25/10   | 1.5 hour   | 3492    | 1 year      | \r\n   |         |            |         |             | \r\n   | 25/15   | 1.5 hour   | 3652    | 34 years    | \r\n   +---------+------------+---------+-------------+ \r\n ", "correct_text": "   +---------+------------+---------+-------------+ \r\n   | ParmSet | KeyGenTime | SigSize | KeyLifetime | \r\n   +---------+------------+---------+-------------+ \r\n                         ... \r\n\r\n   | 15/10   | 6 sec      | 3124    | 9 hours     | \r\n   |         |            |         |             | \r\n   | 15/15   | 6 sec      | 3284    | 12 days     | \r\n   |         |            |         |             | \r\n   | 20/10   | 3 min      | 3284    | 12 days     | \r\n   |         |            |         |             | \r\n   | 20/15   | 3 min      | 3444    | 1 year      | \r\n   |         |            |         |             | \r\n   | 25/10   | 1.5 hour   | 3444    | 1 year      | \r\n   |         |            |         |             | \r\n   | 25/15   | 1.5 hour   | 3604    | 34 years    | \r\n   +---------+------------+---------+-------------+ \r\n", "notes": "The signature sizes for the two-level HSS parameters in Table 3 are all 48 bytes larger than they should be.  It looks like they were computed assuming a 64-byte identifier I in the level-1 LMS public key pub[1],  but the identifier was reduced to 16 bytes in draft -07.  The signature sizes for the single-level HSS parameters are all correct because they do not have intermediate LMS public keys.", "submit_date": "2023-03-29", "submitter_name": "Peter Campbell", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 20:35:57"}, {"errata_id": "7252", "doc-id": "RFC8060", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6", "orig_text": "   RLOC Probe bit (P):  this is the RLOC Probe bit that means the\r\n      Reencap Hop allows RLOC-probe messages to be sent to it.  When the\r\n      R bit is set to 0, RLOC-probes must not be sent.  When a Reencap\r\n      Hop is an anycast address then multiple physical Reencap Hops are\r\n      using the same RLOC address.  In this case, RLOC-probes are not\r\n      needed because when the closest RLOC address is not reachable,\r\n      another RLOC address can be reachable.\r\n\r\n", "correct_text": "   RLOC Probe bit (P):  this is the RLOC Probe bit that means the\r\n      Reencap Hop allows RLOC-probe messages to be sent to it.  When the\r\n      P bit is set to 0, RLOC-probes must not be sent.  When a Reencap\r\n      Hop is an anycast address then multiple physical Reencap Hops are\r\n      using the same RLOC address.  In this case, RLOC-probes are not\r\n      needed because when the closest RLOC address is not reachable,\r\n      another RLOC address can be reachable.\r\n\r\n", "notes": "The R bit is the Revoke bit (see Section 4.7)", "submit_date": "2022-11-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Alvaro Retana", "update_date": "2023-02-08 19:03:19"}, {"errata_id": "7253", "doc-id": "RFC7946", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "Consider a set of point Features within the Fiji archipelago,\r\nstraddling the antimeridian between 16 degrees S and 20 degrees S.\r\nThe southwest corner of the box containing these Features is at 20\r\ndegrees S and 177 degrees E, and the northwest corner is at 16\r\ndegrees S and 178 degrees W.", "correct_text": "Consider a set of point Features within the Fiji archipelago,\r\nstraddling the antimeridian between 16 degrees S and 20 degrees S.\r\nThe southwest corner of the box containing these Features is at 20\r\ndegrees S and 177 degrees E, and the northeast corner is at 16\r\ndegrees S and 178 degrees W.", "notes": "In the antimeridian-crossing example, the text says that the \"northwest\" corner is at 16 degrees S and 178 degrees W.  It should say this is the \"northeast\" corner instead.", "submit_date": "2022-11-18", "submitter_name": "Tim Schaub", "verifier_id": "", "verifier_name": null, "update_date": "2022-11-21 22:09:04"}, {"errata_id": "7251", "doc-id": "RFC9180", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2.1", "orig_text": "The RECOMMENDED limit for these values is 64 bytes. ", "correct_text": "The RECOMMENDED limit for these values is 66 bytes. (To enable\r\nprocessing of all the test vectors in Appendix A.)\r\n", "notes": "Appendix A.6.1 and others have test vectors with an IKM that is 66 octets long. Seems easier to bump the recommended value by 2, rather than invalidate the test vectors, but the latter could also be done if/when 9180 is revised. Meanwhile, no harm for implementers to know this.\r\n\r\n\r\nHold for document update. Errata 7251 recommends adjusting IKM size from 64 to 66 bytes to match HPKE test vectors, ensuring sample accuracy. This is a consistency fix rather than functional change, suitable for document revision. - CFRG Chair", "submit_date": "2022-11-15", "submitter_name": "Stephen Farrell", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:59:45"}, {"errata_id": "7721", "doc-id": "RFC9106", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "   6.  If the number of passes t is larger than 1, we repeat step 5.  We\r\n       compute B[i][0] and B[i][j] for all i raging from (and including)\r\n       0 to (not including) p and for all j ranging from (and including)\r\n       1 to (not including) q.  However, blocks are computed differently\r\n       as the old value is XORed with the new one:\r\n\r\n       B[i][0] = G(B[i][q-1], B[l][z]) XOR B[i][0];\r\n       B[i][j] = G(B[i][j-1], B[l][z]) XOR B[i][j].\r\n", "correct_text": "   6.  If the number of passes t is larger than 1, we repeat step 5.  We\r\n       compute B[i][0] and B[i][j] for all i ranging from (and\r\n       including) 0 to (not including) p and for all j ranging from (and\r\n       including) 1 to (not including) q.  However, blocks are computed\r\n       differently as the old value is XORed with the new one:\r\n\r\n       B[i][0] = G(B[i][q-1], B[l][z]) XOR B[i][0];\r\n       B[i][j] = G(B[i][j-1], B[l][z]) XOR B[i][j].\r\n", "notes": "Firstly: nice, clear RFC. Well done.\r\n\r\nI know it's really minor, and we all like to have \"fun with flags\", but...\"ranging\" rather than \"raging\" :-)", "submit_date": "2023-12-07", "submitter_name": "David Finnie", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-12-07 18:46:36"}, {"errata_id": "7909", "doc-id": "RFC826", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The \"Packet format\" section says:", "orig_text": "        16.bit: (ar$pro) Protocol address space.  For Ethernet\r\n                         hardware, this is from the set of type\r\n                         fields ether_typ$<protocol>.", "correct_text": "        16.bit: (ar$pro) Protocol address space.  For Ethernet\r\n                         hardware, this is from the set of type\r\n                         fields ether_type$<protocol>.", "notes": "In original text last letter \"e\" is missing in \"ether_type$<protocol>\".\r\n\r\n--- Verifier note (Eric Vyncke, INT AD) ---\r\nAfter reclassification into \"editorial\", this erratum is approved.", "submit_date": "2024-04-26", "submitter_name": "Alexander Bondarenko", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-04-26 18:01:17"}, {"errata_id": "7250", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.1", "orig_text": "   The client MAY use this PSK for future handshakes by including the\r\n   ticket value in the \"pre_shared_key\" extension in its ClientHello\r\n   (Section 4.2.11).", "correct_text": "(to add)\r\n\r\n  Where the client does not support session tickets, this extension MUST be ignored.", "notes": "I've seen a TLS implementation which doesn't implement session tickets.  That's fine, but the implementation doesn't *ignore* session tickets it receives.  Instead, it treats reception of the ticket as un recoverable error, and drops the TLS connection.\r\n\r\nIt's also worth adding a note to section 4.2 at the bottom of page 38.  To note that in general, f an extension isn't supported AND doesn't materially affect the TLS exchange, THEN it should be ignored.\r\n\r\ni.e. there's nothing in the spec which mentions Postel's law \"be conservative in what you send, be liberal in what you accept\".  So implementors reading this document are free to do all kinds of odd things.\r\n\r\nIn addition, the text in Section 4.2 at the bottom of page 38 says:\r\n\r\n\"\r\n      Designers\r\n      and implementors should be aware of the fact that until the\r\n      handshake has been authenticated, active attackers can modify\r\n      messages and insert, remove, or replace extensions.\r\n\"\r\n\r\nThe implicit conclusion here is that an implementation receiving extensions must sanity check them.  e.g. an attacker adding an undefined / unknown extension should not cause the entire session to be torn down.\r\n\r\nPaul Wouters(AD): Resolved but with the Corrected Text:\r\n\r\nThe client MAY use this PSK for future handshakes by including the ticket value in the \"pre_shared_key\" extension in its ClientHello (Section 4.2.11). Clients which receive a NewSessionTicket message but do not support resumption MUST silently ignore this message.", "submit_date": "2022-11-14", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-29 01:06:50"}, {"errata_id": "7412", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.6 (Algorithm 1)", "orig_text": "bits += 8;", "correct_text": "bits = 8;", "notes": "\"bits += 8;\" is misleading and results in one useless addition. \r\n\r\nThis is true because this instruction appears after the program ensured that \"bits == 0\".\r\n\r\nTherefore, \"bits = 8;\" is the actual instruction that should be executed here.", "submit_date": "2023-04-02", "submitter_name": "Rafael Misoczki", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2023-04-10 17:11:14"}, {"errata_id": "7413", "doc-id": "RFC7011", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4.1", "orig_text": "Field Count\r\n\r\n      Number of fields in this Template Record.", "correct_text": "Field Count\r\n\r\nNumber of fields in this Template Record. The Field Count MUST NOT be zero, unless used in a Template Withdrawal.", "notes": "If the size of data record corresponding to a template can ever be zero, then  the only valid size for such a data set is the size of the set header.  For normal cases any size greater than that of the set header is a valid size, since records are read from a set until the number of octets remaining is less than the smallest possible record size for that set.  If a record size can be zero, then any number of bytes past the header cannot be padding (is not smaller than the smallest record), and a conforming implementation might return an infinite number of zero-sized records.  As this could cause a denial of service situation, rejecting templates that define zero-sized records seems to be the simplest solution.\r\n\r\nSimilar text may be necessary for Option Template records, though the fact that the scope count MUST be non-zero may negate the necessity.\r\n\r\n---\r\nWK: See thread https://mailarchive.ietf.org/arch/msg/ipfix/AkCZr1jObLt_x9cyQ73qXBlKC2w/ for more info.\r\nWK -  2023-04-26: Update from the original reporter (Michael) and confirmations from authors (Brian and Benoit) that Field Count can be zero in the case of Template Withdrawal. Changing the state from Verified to HFDU, so that this can be better clarified in any future updates. ", "submit_date": "2023-04-02", "submitter_name": "Michael Duggan", "verifier_id": "", "verifier_name": "Wa", "update_date": "2023-04-26 19:02:34"}, {"errata_id": "7426", "doc-id": "RFC6243", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "   When data is retrieved from a server using the 'explicit' basic mode,\r\n   and the <with-defaults> parameter is not present, data nodes MUST be\r\n   reported if explicitly set by the client, even if they contain the\r\n   schema default value.  Non-configuration data nodes containing the\r\n   schema default value MUST be reported.", "correct_text": "   When data is retrieved from a server using the 'explicit' basic mode,\r\n   and the <with-defaults> parameter is not present, data nodes MUST be\r\n   reported if explicitly set by the client, even if they contain the\r\n   schema default value.  A conceptual data node that would be set by\r\n   the server to the schema default value MUST NOT be reported.\r\n   Non-configuration data nodes containing the schema default value MUST\r\n   be reported.", "notes": "This change brings the text and behavior more in alignment between \u2018explicit\u2019 Basic Mode (2.3.1) and \u2018explicit\u2019 Retrieval Mode (3.3).\r\n\r\nThe original errata also proposed that the text be clarified to define the behaviour for configuration explicitly set by a server, but after discussion with members of the WG, the general consensus is that this behaviour is outside the scope of the YANG and related management protocol RFCs that generally define changes to the server datastore contents in terms of explicit client requests to changes to the server\u2019s configuration data.  The terminology definition of \u201cExplicitly set data\u201d in the RFC does give some guidance of the expectations of how server set data should be treated.\r\n\r\nFurther clarification on server behavior absent of explicit client operations should be specified in new RFCs.", "submit_date": "2023-04-18", "submitter_name": "Dylan Sadoun", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 12:55:34"}, {"errata_id": "7416", "doc-id": "RFC8407", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.8", "orig_text": "      revision \"2017-12-11\" {\r\n        description\r\n          \"Added support for YANG 1.1 actions and notifications tied to\r\n           data nodes.  Clarify how NACM extensions can be used by other\r\n           data models.\";\r\n        reference\r\n          \"RFC 8407: Network Configuration Protocol (NETCONF)\r\n                     Access Control Model\";\r\n      }", "correct_text": "      revision \"2017-12-11\" {\r\n        description\r\n          \"Added support for YANG 1.1 actions and notifications tied to\r\n           data nodes.  Clarify how NACM extensions can be used by other\r\n           data models.\";\r\n        reference\r\n          \"RFC UUUU: Network Configuration Access Control Model\";\r\n      }", "notes": "This example is supposed to illustrate the use of revisions in unpublished updates. Having an RFC under  the reference clause is inconsistent:\r\n\r\n   o  published: A stable release of a module or submodule.  For\r\n      example, the \"Request for Comments\" described in Section 2.1 of\r\n      [RFC2026] is considered a stable publication.\r\n\r\n   o  unpublished: An unstable release of a module or submodule.  For\r\n      example the \"Internet-Draft\" described in Section 2.2 of [RFC2026]\r\n      is considered an unstable publication that is a work in progress,\r\n      subject to change at any time. \r\n\r\nI suspect that RFC XXXX in draft-ietf-netmod-rfc6087bis was erroneously replaced by RFC 8407: \r\n\r\n      revision \"2017-12-11\" {\r\n        description\r\n          \"Added support for YANG 1.1 actions and notifications tied to\r\n           data nodes. Clarify how NACM extensions can be used by other\r\n           data models.\";\r\n        reference\r\n          \"RFC XXXX: Network Configuration Protocol (NETCONF)\r\n                     Access Control Model\";\r\n      }", "submit_date": "2023-04-07", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": null, "update_date": "2023-04-26 21:41:13"}, {"errata_id": "7418", "doc-id": "RFC8016", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "If the client's IP address or source port has changed and the client wants to retain the existing allocation, the client includes the MOBILITY-TICKET\r\nattribute received in the Allocate success response in the Refresh\r\nrequest.  If there has been no IP address or source port number\r\nchange, the client MUST NOT include a MOBILITY-TICKET attribute, as\r\nthis would be rejected by the server and the client would need to\r\nretransmit the Refresh request without the MOBILITY-TICKET attribute", "correct_text": "When the client wants to retain the existing allocation, the client includes the MOBILITY-TICKET attribute received in the Allocate success response in the Refresh\r\nrequest.  If there has been no IP address or source port number\r\nchange, the client MUST NOT include a MOBILITY-TICKET attribute, as\r\nthis would be rejected by the server and the client would need to\r\nretransmit the Refresh request without the MOBILITY-TICKET attribute", "notes": "Here client's IP address and port are the STUN-mapped IP address and port.\r\n\r\nHow client will know that its IP address or source port has been changed?\r\n\r\nIt can be changed transparently where the client is not aware of it.\r\n\r\nOne way is to query it by STUN binding request before sending every STUN message\r\nbut this is not a feasible solution because of the huge overhead.\r\n\r\nThe best will be if the turnserver can inform the client about the changes. \r\n\r\nThe RFC should consider this otherwise it will not be very useful.", "submit_date": "2023-04-11", "submitter_name": "Md Nazmus Shakeeb", "verifier_id": "", "verifier_name": null, "update_date": "2023-11-10 22:26:37"}, {"errata_id": "7419", "doc-id": "RFC9110", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3.2", "orig_text": "   In the fields defined by this document, charset names appear either\r\n   in parameters (Content-Type), or, for Accept-Encoding, in the form of\r\n   a plain token.", "correct_text": "   In the fields defined by this document, charset names appear either\r\n   in parameters (Content-Type), or, for Accept-Charset, in the form of\r\n   a plain token.", "notes": "Accept-Encoding is the preferred list of response content codings.  Accept-Charset is the preferred list of response charsets.", "submit_date": "2023-04-11", "submitter_name": "Dave Shawley", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-10-23 09:42:33"}, {"errata_id": "7722", "doc-id": "RFC8667", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1.1.1", "orig_text": "2.1.1.1.  V-Flag and L-Flag\r\n", "correct_text": "2.1.1.1.  V-Flag, L-Flag, and the SID/Index/Label Field\r\n", "notes": "Since the SID/Index/Label field is defined in this subsection, it's misleading for the title to mention only the flags and is a disservice to readers using the document as a reference.\r\n\r\nThis is also discussed in https://mailarchive.ietf.org/arch/msg/lsr/56_LEEZvHDHrnkC98f7BtpOkkY0/ where Acee also suggests a broader clarification. The narrowly-scoped change reflected in this erratum seems sufficient to fix the problem I encountered; in my view, it doesn't preclude an additional erratum for some of the other matters that were mentioned by Acee if there's support for that as well.\r\n\r\nThanks to Tony Li for suggesting the wording.\r\n\r\n<Andrew Note> I agree this helps clarify the text which could easily have otherwise been misread - hence the verification of the errata", "submit_date": "2023-12-07", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Andrew Alston", "update_date": "2023-12-08 13:17:09"}, {"errata_id": "7923", "doc-id": "RFC2126", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "Non-standard TPDU size may be negotiated using the negotiation\r\nmechanism specified in ISO 8073. The maximum TPDU size is 65531\r\noctets. The Default maximum TPDU size is 65531 octets.\r\nPlease refer to 'Notes to Implementors' section 6.4.", "correct_text": "Non-standard TPDU size may be negotiated using the negotiation\r\nmechanism specified in ISO 8073. The maximum TPDU size is 65408\r\noctets. The Default maximum TPDU size is 65408 octets.\r\nPlease refer to 'Notes to Implementors' section 6.4.", "notes": "According to X.224(1995), which is technically aligned with ISO 8073:1997, the maximum TPDU size is specified as a multiple of 128 (ref section 13.3.4.c in X.224). This allows a maximum of 511*128 = 65408. The value of 65531 is the maximum payload in RFC 2126.", "submit_date": "2024-05-05", "submitter_name": "\u00d8yvind Jonsson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7924", "doc-id": "RFC2355", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "15", "orig_text": "   [5] \"3270 Information Display System - Data Stream Programmer's\r\n   Reference\", publication number GA24-0059, IBM Corporation.", "correct_text": "   [5] \"3270 Information Display System - Data Stream Programmer's\r\n   Reference\", publication number GA23-0059, IBM Corporation.", "notes": "RFC 1042 (Telnet 3270 Regime Option) and RFC 6270 (The 'tn3270' URI Scheme) both reference the correct IBM publication number (GA23-0059).", "submit_date": "2024-05-06", "submitter_name": "Charles Weigel", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:14:59"}, {"errata_id": "8456", "doc-id": "RFC1533", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.18", "orig_text": "3.18. Swap Server\r\n\r\n   This specifies the IP address of the client's swap server.\r\n\r\n   The code for this option is 16 and its length is 4.\r\n\r\n    Code   Len    Swap Server Address\r\n   +-----+-----+-----+-----+-----+-----+\r\n   |  16 |  n  |  a1 |  a2 |  a3 |  a4 |\r\n   +-----+-----+-----+-----+-----+-----+", "correct_text": "3.18. Swap Server\r\n\r\n   This specifies the IP address of the client's swap server.\r\n\r\n   The code for this option is 16 and its length is 4.\r\n\r\n    Code   Len    Swap Server Address\r\n   +-----+-----+-----+-----+-----+-----+\r\n   |  16 |  4  |  a1 |  a2 |  a3 |  a4 |\r\n   +-----+-----+-----+-----+-----+-----+", "notes": "The length is static, not dynamic. The length in the diagram  should be 4, not n.\n --VERIFIER NOTES-- \n      This errata is a duplicate of errata 8488", "submit_date": "2025-06-13", "submitter_name": "Jason Giberson", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 07:51:03"}, {"errata_id": "7420", "doc-id": "RFC8391", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "// Generate reduced XMSS private keys\r\n     ADRS = toByte(0, 32);\r\n     for ( layer = 0; layer < d; layer++ ) {\r\n        ADRS.setLayerAddress(layer);\r\n        for ( tree = 0; tree <\r\n              (1 << ((d - 1 - layer) * (h / d)));\r\n              tree++ ) {\r\n           ADRS.setTreeAddress(tree);\r\n           for ( i = 0; i < 2^(h / d); i++ ) {\r\n             wots_sk[i] = WOTS_genSK();\r\n           }\r\n           setXMSS_SK(SK_MT, wots_sk, tree, layer);\r\n        }\r\n     }", "correct_text": "// Generate reduced XMSS private keys\r\n     ADRS = toByte(0, 32);\r\n     for ( layer = 0; layer < d; layer++ ) {\r\n        ADRS.setLayerAddress(layer);\r\n        for ( tree = 0; tree <\r\n              (1 << ((d - 1 - layer) * (h / d)));\r\n              tree++ ) {\r\n           ADRS.setTreeAddress(tree);\r\n           for ( i = 0; i < 2^(h / d); i++ ) {\r\n             wots_sk[i] = WOTS_genSK();\r\n           }\r\n           setXMSS_SK(SK_MT, wots_sk, tree, layer, ADRS);\r\n        }\r\n     }", "notes": "The ADRS variable is created and configured (layer address and tree address fields set) but it is not used anywhere in the for-loop. \r\n\r\nIt would be more precise if the setXMSS_SK function receives the ADRS variable so that implementers understand that both layer address and tree address fields must be set as defined in this for-loop in order to generate the correct XMSS private key in each iteration of this loop.\n --VERIFIER NOTES-- \nThe erratum proposes adding an ADRS parameter to setXMSS_SK, but this function is an abstract storage helper with no defined signature in the RFC. The document does not mandate a specific private-key encoding, so changing an undefined function's parameters is not appropriate for errata.", "submit_date": "2023-04-11", "submitter_name": "Rafael Misoczki", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 19:57:01"}, {"errata_id": "7524", "doc-id": "RFC7770", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.4", "orig_text": "   o  The values are defined in Section 2.6.  All Router Informational\r\n      Capability TLV additions are to be assigned through IETF Review\r\n      [IANA-GUIDE].", "correct_text": "   o  The values are defined in Section 2.5.  All Router Informational\r\n      Capability Bit additions are to be assigned through IETF Review\r\n      [IANA-GUIDE].", "notes": "Router Informational Capabilities bits are defined in section 2.5 of the document and NOT section 2.6, and they are bits, not TLVs.\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/lsr/pc0-mos28aQ7D59ijCBDWLctAXE/", "submit_date": "2023-05-24", "submitter_name": "James N Guichard", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2023-05-24 17:06:47"}, {"errata_id": "7423", "doc-id": "RFC9303", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.9", "orig_text": "ITR MUST set the 'EID HMAC ID' field to 0 before computing the HMAC.", "correct_text": "ITR MUST set the 'EID HMAC' field to 0 before computing the HMAC.", "notes": "0 (zero) must be set in the 'EID HMAC' field, not in the 'EID HMAC ID' field", "submit_date": "2023-04-15", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "James N Guichard", "update_date": "2023-04-19 14:15:42"}, {"errata_id": "7424", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.1.", "orig_text": "The following syntax will result in fewer problems with many\r\n\r\napplications that use domain names (e.g., mail, TELNET).", "correct_text": "The following syntax will result in fewer problems with many\r\napplications that use domain names (e.g., mail, TELNET).", "notes": "In section \"2.3.1. Preferred name syntax\" of RFC 1035, there occures a double newline in the middle of a sentence. This double newline should be replaced by a single newline.", "submit_date": "2023-04-15", "submitter_name": "Wolfgang Keller", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-04-26 23:19:46"}, {"errata_id": "7429", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "Before initiating the protocol, the client registers with the\r\n   authorization server.  The means through which the client registers\r\n   with the authorization server are beyond the scope of this\r\n   specification but typically involve end-user interaction with an HTML\r\n   registration form.", "correct_text": "Before initiating the protocol, the client registers with the\r\n   authorization server.  The means through which the client registers\r\n   with the authorization server are beyond the scope of this\r\n   specification but typically involve client developer interaction with an HTML\r\n   registration form.", "notes": "As described in 1.1 resource owner if person is referred to as end user. Resource owner is not responsible for registering a client with authorization server, but the client developer is.", "submit_date": "2023-04-20", "submitter_name": "Gasan Guseinov", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7581", "doc-id": "RFC1519", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "This plan is primarily directed at the first two problems listed\r\n   above.  We believe that the judicious use of variable-length\r\n   subnetting techniques should help defer the onset of the last problem\r\n   problem, the exhaustion of the 32-bit address space. Note also that\r\n   improved tools for performing address allocation in a \"supernetted\"\r\n   and variably-subnetted world would greatly help the user community in\r\n   accepting these sometimes confusing techniques. Efforts to create\r\n   some simple tools for this purpose should be encouraged by the\r\n   Internet community.", "correct_text": "This plan is primarily directed at the first two problems listed\r\n   above.  We believe that the judicious use of variable-length\r\n   subnetting techniques should help defer the onset of the last problem, \r\n   the exhaustion of the 32-bit address space. Note also that\r\n   improved tools for performing address allocation in a \"supernetted\"\r\n   and variably-subnetted world would greatly help the user community in\r\n   accepting these sometimes confusing techniques. Efforts to create\r\n   some simple tools for this purpose should be encouraged by the\r\n   Internet community.", "notes": "In the phrase \"the onset of the last problem problem,\" word problem appears twice.", "submit_date": "2023-08-01", "submitter_name": "Delton Phillips", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-08-01 22:12:55"}, {"errata_id": "7583", "doc-id": "RFC4561", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "[RSVP-TE] defines the IPv4 and IPv6 RRO sub-objects.  Moreover, two additional flags are defined in [FAST-REROUTE]: the \"Local Protection Available\" and \"Local Protection in Use\" bits.", "correct_text": "[RSVP-TE] defines the IPv4 and IPv6 RRO sub-objects.  Moreover, two additional flags are defined in [FAST-REROUTE]: the \"Bandwidth protection\" and \"Node protection\" bits.", "notes": "The \"Local Protection Available\" and \"Local Protection in Use\" are defined in RFC3209 (Sections 4.4.1.1, 4.4.1.2), not RFC4090. The latter defines \"Bandwidth protection\" and \"Node protection\" in Section 4.4.", "submit_date": "2023-08-01", "submitter_name": "Igor Malyushkin", "verifier_id": "", "verifier_name": "Andrew Alston", "update_date": "2023-11-12 08:57:28"}, {"errata_id": "7427", "doc-id": "RFC6243", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3", "orig_text": "When data is retrieved with a <with-defaults> parameter equal to 'explicit', a data node that was set by a client to its schema default value MUST be reported.  A conceptual data node that would be set by the server to the schema default value MUST NOT be reported. Non-configuration data nodes containing the schema default value MUST be reported.", "correct_text": "When data is retrieved with a <with-defaults> parameter equal to 'explicit', a data node that was set by a client to its schema default value MUST be reported. A conceptual data node that would be set by the server to the schema default value MUST NOT be reported. A conceptual data node that would be set by the server to a value other than its schema default value MUST be reported. Non-configuration data nodes containing the schema default value MUST be reported.", "notes": "The RFC defines \"Explicitly set data\" for the sole purpose of defining the explicit retrieval mode. This definition is clear about when data set by the server should be considered \"explicitly set\" i.e. when not set to the schema default value. However, the 2.3.1 and 3.3 sections are ambiguous and prone to misunderstanding, as they only emphasise the \"set by the client\" case, which leads to think that data set by the server to a value different from its schema default value should not be reported.\r\nThis erratum is for the 3.3 section.\n --VERIFIER NOTES-- \nAfter discussion with the WG, it was agreed that several server implementations would likely behave as your errata suggests.  However, the consensus was that this behavior is beyond what can be clarified as part of an errata without specifying a new RFC.  In particular, it is noted that the current RFC predominantly defines expected behavior for data nodes modified via the external API between the client and server and defining \"conceptual data nodes being set by a server\" is beyond the scope of behavior specified by the RFC.\r\n\r\nPlease also see errata 7426 that helps clarify the behavior for section 2.3.1.", "submit_date": "2023-04-18", "submitter_name": "Dylan Sadoun", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 13:13:05"}, {"errata_id": "7428", "doc-id": "RFC6243", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "A.2.  Example Data Set\r\n\r\n[...]\r\n\r\n  <data xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n    <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n      <interface>\r\n        <name>eth0</name>\r\n        <mtu>8192</mtu>\r\n        <status>up</status>\r\n      </interface>\r\n      <interface>\r\n        <name>eth1</name>\r\n        <mtu>1500</mtu>\r\n        <status>up</status>\r\n      </interface>\r\n      <interface>\r\n        <name>eth2</name>\r\n        <mtu>9000</mtu>\r\n        <status>not feeling so good</status>\r\n      </interface>\r\n      <interface>\r\n        <name>eth3</name>\r\n        <mtu>1500</mtu>\r\n        <status>waking up</status>\r\n      </interface>\r\n    </interfaces>\r\n  </data>\r\n\r\n  In this example, the 'mtu' field for each interface entry is set in\r\n   the following manner:\r\n\r\n              +--------------+--------------+--------------+\r\n              | name         | set by       | mtu          |\r\n              +--------------+--------------+--------------+\r\n              | eth0         | client       | 8192         |\r\n              | eth1         | server       | 1500         |\r\n              | eth2         | client       | 9000         |\r\n              | eth3         | client       | 1500         |\r\n              +--------------+--------------+--------------+\r\n\r\n[...]\r\n\r\nA.3.1.  <with-defaults> = 'report-all'\r\n\r\n   The behavior of the <with-defaults> parameter handling for the value\r\n   'report-all' is demonstrated in this example.\r\n\r\n    <rpc message-id=\"101\"\r\n         xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <get>\r\n        <filter type=\"subtree\">\r\n          <interfaces xmlns=\"http://example.com/ns/interfaces\"/>\r\n        </filter>\r\n        <with-defaults\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults\">\r\n          report-all\r\n        </with-defaults>\r\n      </get>\r\n    </rpc>\r\n\r\n    <rpc-reply message-id=\"101\"\r\n               xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <data>\r\n        <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n          <interface>\r\n            <name>eth0</name>\r\n            <mtu>8192</mtu>\r\n            <status>up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth1</name>\r\n            <mtu>1500</mtu>\r\n            <status>up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth2</name>\r\n            <mtu>9000</mtu>\r\n            <status>not feeling so good</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth3</name>\r\n            <mtu>1500</mtu>\r\n            <status>waking up</status>\r\n          </interface>\r\n        </interfaces>\r\n      </data>\r\n    </rpc-reply>\r\n\r\nA.3.2.  <with-defaults> = 'report-all-tagged'\r\n\r\n[...]\r\n\r\n    <rpc message-id=\"102\"\r\n         xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <get>\r\n        <filter type=\"subtree\">\r\n          <interfaces xmlns=\"http://example.com/ns/interfaces\"/>\r\n        </filter>\r\n        <with-defaults\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults\">\r\n          report-all-tagged\r\n        </with-defaults>\r\n      </get>\r\n    </rpc>\r\n\r\n    <rpc-reply message-id=\"102\"\r\n               xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n               xmlns:wd=\"urn:ietf:params:xml:ns:netconf:default:1.0\">\r\n      <data>\r\n        <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n          <interface>\r\n            <name>eth0</name>\r\n            <mtu>8192</mtu>\r\n            <status wd:default=\"true\">up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth1</name>\r\n            <mtu wd:default=\"true\">1500</mtu>\r\n            <status wd:default=\"true\">up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth2</name>\r\n            <mtu>9000</mtu>\r\n            <status>not feeling so good</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth3</name>\r\n            <mtu wd:default=\"true\">1500</mtu>\r\n            <status>waking up</status>\r\n          </interface>\r\n        </interfaces>\r\n      </data>\r\n    </rpc-reply>\r\n\r\nA.3.3.  <with-defaults> = 'trim'\r\n\r\n   The behavior of the <with-defaults> parameter handling for the value\r\n   'trim' is demonstrated in this example.\r\n\r\n    <rpc message-id=\"103\"\r\n         xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <get>\r\n        <filter type=\"subtree\">\r\n          <interfaces xmlns=\"http://example.com/ns/interfaces\"/>\r\n        </filter>\r\n        <with-defaults\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults\">\r\n          trim\r\n        </with-defaults>\r\n      </get>\r\n    </rpc>\r\n\r\n    <rpc-reply message-id=\"103\"\r\n               xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <data>\r\n        <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n          <interface>\r\n            <name>eth0</name>\r\n            <mtu>8192</mtu>\r\n          </interface>\r\n          <interface>\r\n            <name>eth1</name>\r\n          </interface>\r\n          <interface>\r\n            <name>eth2</name>\r\n            <mtu>9000</mtu>\r\n            <status>not feeling so good</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth3</name>\r\n            <status>waking up</status>\r\n          </interface>\r\n        </interfaces>\r\n      </data>\r\n    </rpc-reply>\r\n\r\nA.3.4.  <with-defaults> = 'explicit'\r\n\r\n   The behavior of the <with-defaults> parameter handling for the value\r\n   'explicit' is demonstrated in this example.\r\n\r\n    <rpc message-id=\"104\"\r\n         xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <get>\r\n        <filter type=\"subtree\">\r\n          <interfaces xmlns=\"http://example.com/ns/interfaces\"/>\r\n        </filter>\r\n        <with-defaults\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults\">\r\n          explicit\r\n        </with-defaults>\r\n      </get>\r\n    </rpc>\r\n\r\n    <rpc-reply message-id=\"104\"\r\n               xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <data>\r\n        <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n          <interface>\r\n            <name>eth0</name>\r\n            <mtu>8192</mtu>\r\n            <status>up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth1</name>\r\n            <status>up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth2</name>\r\n            <mtu>9000</mtu>\r\n            <status>not feeling so good</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth3</name>\r\n            <mtu>1500</mtu>\r\n            <status>waking up</status>\r\n          </interface>\r\n        </interfaces>\r\n      </data>\r\n    </rpc-reply>", "correct_text": "A.2.  Example Data Set\r\n\r\n[...]\r\n\r\n  <data xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n    <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n      <interface>\r\n        <name>eth0</name>\r\n        <mtu>8192</mtu>\r\n        <status>up</status>\r\n      </interface>\r\n      <interface>\r\n        <name>eth1</name>\r\n        <mtu>1500</mtu>\r\n        <status>up</status>\r\n      </interface>\r\n      <interface>\r\n        <name>eth2</name>\r\n        <mtu>9000</mtu>\r\n        <status>not feeling so good</status>\r\n      </interface>\r\n      <interface>\r\n        <name>eth3</name>\r\n        <mtu>1500</mtu>\r\n        <status>waking up</status>\r\n      </interface>\r\n      <interface>\r\n        <name>eth4</name>\r\n        <mtu>9112</mtu>\r\n        <status>better call for help</status>\r\n      </interface>\r\n    </interfaces>\r\n  </data>\r\n\r\n  In this example, the 'mtu' field for each interface entry is set in\r\n   the following manner:\r\n\r\n              +--------------+--------------+--------------+\r\n              | name         | set by       | mtu          |\r\n              +--------------+--------------+--------------+\r\n              | eth0         | client       | 8192         |\r\n              | eth1         | server       | 1500         |\r\n              | eth2         | client       | 9000         |\r\n              | eth3         | client       | 1500         |\r\n              | eth4         | server       | 9112         |\r\n              +--------------+--------------+--------------+\r\n\r\n[...]\r\n\r\nA.3.1.  <with-defaults> = 'report-all'\r\n\r\n   The behavior of the <with-defaults> parameter handling for the value\r\n   'report-all' is demonstrated in this example.\r\n\r\n    <rpc message-id=\"101\"\r\n         xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <get>\r\n        <filter type=\"subtree\">\r\n          <interfaces xmlns=\"http://example.com/ns/interfaces\"/>\r\n        </filter>\r\n        <with-defaults\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults\">\r\n          report-all\r\n        </with-defaults>\r\n      </get>\r\n    </rpc>\r\n\r\n    <rpc-reply message-id=\"101\"\r\n               xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <data>\r\n        <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n          <interface>\r\n            <name>eth0</name>\r\n            <mtu>8192</mtu>\r\n            <status>up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth1</name>\r\n            <mtu>1500</mtu>\r\n            <status>up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth2</name>\r\n            <mtu>9000</mtu>\r\n            <status>not feeling so good</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth3</name>\r\n            <mtu>1500</mtu>\r\n            <status>waking up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth4</name>\r\n            <mtu>9112</mtu>\r\n            <status>better call for help</status>\r\n          </interface>\r\n        </interfaces>\r\n      </data>\r\n    </rpc-reply>\r\n\r\nA.3.2.  <with-defaults> = 'report-all-tagged'\r\n\r\n[...]\r\n\r\n    <rpc message-id=\"102\"\r\n         xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <get>\r\n        <filter type=\"subtree\">\r\n          <interfaces xmlns=\"http://example.com/ns/interfaces\"/>\r\n        </filter>\r\n        <with-defaults\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults\">\r\n          report-all-tagged\r\n        </with-defaults>\r\n      </get>\r\n    </rpc>\r\n\r\n    <rpc-reply message-id=\"102\"\r\n               xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\"\r\n               xmlns:wd=\"urn:ietf:params:xml:ns:netconf:default:1.0\">\r\n      <data>\r\n        <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n          <interface>\r\n            <name>eth0</name>\r\n            <mtu>8192</mtu>\r\n            <status wd:default=\"true\">up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth1</name>\r\n            <mtu wd:default=\"true\">1500</mtu>\r\n            <status wd:default=\"true\">up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth2</name>\r\n            <mtu>9000</mtu>\r\n            <status>not feeling so good</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth3</name>\r\n            <mtu wd:default=\"true\">1500</mtu>\r\n            <status>waking up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth4</name>\r\n            <mtu>9112</mtu>\r\n            <status>better call for help</status>\r\n          </interface>\r\n        </interfaces>\r\n      </data>\r\n    </rpc-reply>\r\n\r\nA.3.3.  <with-defaults> = 'trim'\r\n\r\n   The behavior of the <with-defaults> parameter handling for the value\r\n   'trim' is demonstrated in this example.\r\n\r\n    <rpc message-id=\"103\"\r\n         xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <get>\r\n        <filter type=\"subtree\">\r\n          <interfaces xmlns=\"http://example.com/ns/interfaces\"/>\r\n        </filter>\r\n        <with-defaults\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults\">\r\n          trim\r\n        </with-defaults>\r\n      </get>\r\n    </rpc>\r\n\r\n    <rpc-reply message-id=\"103\"\r\n               xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <data>\r\n        <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n          <interface>\r\n            <name>eth0</name>\r\n            <mtu>8192</mtu>\r\n          </interface>\r\n          <interface>\r\n            <name>eth1</name>\r\n          </interface>\r\n          <interface>\r\n            <name>eth2</name>\r\n            <mtu>9000</mtu>\r\n            <status>not feeling so good</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth3</name>\r\n            <status>waking up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth4</name>\r\n            <mtu>9112</mtu>\r\n            <status>better call for help</status>\r\n          </interface>\r\n        </interfaces>\r\n      </data>\r\n    </rpc-reply>\r\n\r\nA.3.4.  <with-defaults> = 'explicit'\r\n\r\n   The behavior of the <with-defaults> parameter handling for the value\r\n   'explicit' is demonstrated in this example.\r\n\r\n    <rpc message-id=\"104\"\r\n         xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <get>\r\n        <filter type=\"subtree\">\r\n          <interfaces xmlns=\"http://example.com/ns/interfaces\"/>\r\n        </filter>\r\n        <with-defaults\r\n         xmlns=\"urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults\">\r\n          explicit\r\n        </with-defaults>\r\n      </get>\r\n    </rpc>\r\n\r\n    <rpc-reply message-id=\"104\"\r\n               xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n      <data>\r\n        <interfaces xmlns=\"http://example.com/ns/interfaces\">\r\n          <interface>\r\n            <name>eth0</name>\r\n            <mtu>8192</mtu>\r\n            <status>up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth1</name>\r\n            <status>up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth2</name>\r\n            <mtu>9000</mtu>\r\n            <status>not feeling so good</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth3</name>\r\n            <mtu>1500</mtu>\r\n            <status>waking up</status>\r\n          </interface>\r\n          <interface>\r\n            <name>eth4</name>\r\n            <mtu>9112</mtu>\r\n            <status>better call for help</status>\r\n          </interface>\r\n        </interfaces>\r\n      </data>\r\n    </rpc-reply>", "notes": "This erratum expands existing examples to include the case of a server setting data nodes to values other than their default schema values. This echoes the other errata about sections 2.3.1 and 3.3 and the explicit retrieval mode.\n --VERIFIER NOTES-- \nAfter discussion with the WG, it was agreed that several server implementations would likely behave as your errata suggests.  However, the consensus was that this behavior is beyond what can be clarified as part of an errata without specifying a new RFC.  In particular, it is noted that the current RFC predominantly defines expected behavior for data nodes modified via the external API between the client and server and defining \"conceptual data nodes being set by a server\" is beyond the scope of behavior specified by the RFC.\r\n\r\nPlease also see errata 7426 that helps clarify the behavior for section 2.3.1.", "submit_date": "2023-04-18", "submitter_name": "Dylan Sadoun", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-10-02 13:16:30"}, {"errata_id": "7430", "doc-id": "RFC959", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "The direction of the transfer and the port used will be determined by the FTP service command.", "correct_text": "The direction of the transfer will be determined by the FTP service command.", "notes": "Per RFC 1123 (section \"4.1.2.12 Connections\"), the clause \"and the port used\" was a remnant of an earlier version of the standard, and ought to have been removed during the rewrite that produced RFC 959.  Admittedly, RFC 1123 does only use the term \"should\" in saying to ignore the wording, as the behaviour described had been correct at one time -- but that time was meant to have ended 38 years ago.  For the few brave souls who attempt to program FTP support in the modern day, this really ought to explicitly annotate the actual RFC.", "submit_date": "2023-04-02", "submitter_name": "Gordon Steemson", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 19:23:12"}, {"errata_id": "7523", "doc-id": "RFC7959", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   then the block number (NUM), more bit (M), and block size exponent\r\n   (2**(SZX+4)) separated by slashes.  For example, a Block2 Option", "correct_text": "   then the block number (NUM), more bit (M), and block size\r\n   (2**(SZX+4)) separated by slashes.  For example, a Block2 Option", "notes": "The examples are given in the style of \"2:1/1/128\", wher 128 is the size (2**(SZX+4)), not the size exponent -- it contains the size exponent in the expression, but the full expression is the size.\r\n\r\n(Reporting this as an erratum because the use of \"SZX\" for \"size\" instead of \"size exponent\" has some potential for spreading and creating confusion; for example in Wireshark at https://gitlab.com/wireshark/wireshark/-/merge_requests/10763)", "submit_date": "2023-05-24", "submitter_name": "Christian Ams\u00fcss", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2023-07-08 00:14:42"}, {"errata_id": "7589", "doc-id": "RFC3739", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.6.1", "orig_text": "The SementicsInformation component identified by id-qcs-\r\n   pkixQCSyntax-v1 MAY contain a semantics identifier and MAY identify\r\n   one or more name registration authorities.", "correct_text": "The SemanticsInformation component identified by id-qcs-\r\n   pkixQCSyntax-v1 or id-qcs-\r\n   pkixQCSyntax-v2 MAY contain a semantics identifier and MAY identify\r\n   one or more name registration authorities.", "notes": "1. Editorial error: \"SementicsInformation\" should be replaced by \"SemanticsInformation\".\r\n2. Technical error: for consistency with the last paragraph of this chapter that paragraph relates to both statements: qcStatement-1 and qcStatement-2, not only to the qcStatement-1.", "submit_date": "2023-08-03", "submitter_name": "Piotr Popis", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2023-11-10 23:06:55"}, {"errata_id": "7586", "doc-id": "RFC8087", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "The  ECT(0) codepoint '01' and the ECT(1) codepoint '10' both indicate\r\nthat the transport protocol using the IP layer supports the use of\r\nECN.", "correct_text": "The  ECT(0) codepoint '10' and the ECT(1) codepoint '01' both indicate\r\nthat the transport protocol using the IP layer supports the use of\r\nECN.", "notes": "Figure 1, immediately afterwards, has the correct codepoints, which are consistent with RFC 3168.", "submit_date": "2023-08-02", "submitter_name": "Martin Duke", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 23:59:10"}, {"errata_id": "7587", "doc-id": "RFC1035", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1", "orig_text": "ID              A 16 bit identifier assigned by the program that\r\n                generates any kind of query.  This identifier is copied\r\n                the corresponding reply and can be used by the requester\r\n                to match up replies to outstanding queries.", "correct_text": "ID              A 16 bit identifier assigned by the program that\r\n                generates any kind of query.  This identifier is copied\r\n                to the corresponding reply and can be used by the\r\n                requester to match up replies to outstanding queries.", "notes": "There\u2019s a missing preposition.", "submit_date": "2023-08-02", "submitter_name": "Roj", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-08-02 21:32:56"}, {"errata_id": "7588", "doc-id": "RFC8325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "There are mappings provided in [IEEE.802.11-2016], Annex V Tables V-1 and V2,", "correct_text": "There are mappings provided in [IEEE.802.11-2016], Annex R Tables R-1 and R-2,", "notes": "It is Annex R in both the 2016 and 2020 editions", "submit_date": "2023-08-02", "submitter_name": "Stephen [kiwin] PALM", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-01-18 23:56:20"}, {"errata_id": "7522", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "{\r\n        \"name\" : \"schemaExtensions\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"A list of URIs of the resource type's schema\r\n          extensions.\",\r\n        \"required\" : true,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"schema\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\"uri\"],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The URI of a schema extension.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : true,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "correct_text": "{\r\n        \"name\" : \"schemaExtensions\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of URIs of the resource type's schema\r\n          extensions.\",\r\n        \"required\" : true,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"schema\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\"uri\"],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The URI of a schema extension.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : true,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "notes": "The description of \"schemaExtensions\" say that it is a list and also its name is plural. This contradict the value of \"multiValued\" setted to false. I believe that the \"multiValued\" attribute should be setted to \"true\".", "submit_date": "2023-05-23", "submitter_name": "Leonardo Speranzon", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:54:06"}, {"errata_id": "7521", "doc-id": "RFC6215", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "   The Transport Service Interfaces for MPLS-TP are defined in Section\r\n   3.4.3 of [RFC5921].  These definitions are illustrated by showing\r\n   MPLS-TP Provider Edges (PEs) containing a UNI and an NNI.  The\r\n   figures illustrate the UNI and the NNI as a span.  However, it is\r\n   convention to illustrate these interfaces as reference points.\r\n   Furthermore, in the case of a UNI, it is useful to illustrate the\r\n   distribution of UNI functions between the Customer Edge (CE) side and\r\n   the PE side of the UNI, i.e., the UNI-C (User-to-User Interface,\r\n   Client side) and UNI-N (User-to-Network Interface, Network side), in\r\n   order to show their relationship to one another.", "correct_text": "   The Transport Service Interfaces for MPLS-TP are defined in Section\r\n   3.4.3 of [RFC5921].  These definitions are illustrated by showing\r\n   MPLS-TP Provider Edges (PEs) containing a UNI and an NNI.  The\r\n   figures illustrate the UNI and the NNI as a span.  However, it is\r\n   convention to illustrate these interfaces as reference points.\r\n   Furthermore, in the case of a UNI, it is useful to illustrate the\r\n   distribution of UNI functions between the Customer Edge (CE) side and\r\n   the PE side of the UNI, i.e., the UNI-C (User-to-Network Interface,\r\n   Client side) and UNI-N (User-to-Network Interface, Network side), in\r\n   order to show their relationship to one another.", "notes": "This is a very minor nit.\r\n\r\nAs listed in Section 1.2., UNI stands for \"User-to-Network Interface\", not \"User-to-User Interface\".", "submit_date": "2023-05-23", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-05-23 21:01:55"}, {"errata_id": "7590", "doc-id": "RFC3986", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2.4", "orig_text": "N/A", "correct_text": "N/A ", "notes": "The \"1\" in step 1 of the second example for \"remove_dot_segments\" has an unintentional hyperlink to section 1 of the document. The hyperlink should be removed.", "submit_date": "2023-08-06", "submitter_name": "Ben Kallus", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-29 20:44:28"}, {"errata_id": "7594", "doc-id": "RFC2141", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "<reserved>    ::= '%\" | \"/\" | \"?\" | \"#\"", "correct_text": "<reserved>    ::= \"%\" | \"/\" | \"?\" | \"#\"", "notes": "BNF syntax for percentage character was incorrect; used single quote instead of double quote.", "submit_date": "2023-08-09", "submitter_name": "Kim Hermansson", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-08-09 20:57:55"}, {"errata_id": "7592", "doc-id": "RFC3696", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3", "orig_text": "acute accent (\"`\")", "correct_text": "backtick (\"`\")", "notes": "Acute accent would be in the other direction like in \u00c9.\r\nThis accent is usually mentioned as backtick or backquote.\r\n\r\n===RPC Notes===\r\n\r\nA bis doc should consider referring to \"grave accent\", \"backtick\", or \"backquote\".\r\n\r\nFrom John Klensin:\r\n\"grave accent\" is the term used both by Unicode and by the ASCII\r\nstandard (X3.4-1968, RFC 20, INCITS 4-1986[R2017], ISO 646 BV).\r\nIn Unicode-land and the surrounding vicinity, \"backtick\" is\r\noften a combining character, U+0300, and backquote is, even more\r\noften--and preferred by the Standard -- U+301D.  Neither\r\nbacktick or backquote is used by Unicode to identify a\r\ncharacter, probably because of those ambiguities.", "submit_date": "2023-08-07", "submitter_name": "R\u00e9mi Pl\u00e9nat", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-10 00:19:40"}, {"errata_id": "7686", "doc-id": "RFC9135", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "6.1.  Control Plane - Advertising PE\r\n\r\n   When a PE (e.g., PE1 in Figure 4 above) learns the MAC and IP address\r\n   of an attached TS (e.g., via an ARP request or ND Neighbor\r\n   Solicitation), it populates its MAC-VRF/BT, IP-VRF, and ARP table or\r\n   NDP cache just as in the case for symmetric IRB.", "correct_text": "6.1.  Control Plane - Advertising PE\r\n\r\n   When a PE (e.g., PE1 in Figure 4 above) learns the MAC and IP address\r\n   of an attached TS (e.g., via an ARP request or ND Neighbor\r\n   Solicitation), it populates its MAC-VRF/BT and ARP table or\r\n   NDP cache.", "notes": "- advertising PE  (egress PE)  is not advertising Label2 (\"the MPLS Label2 field MUST NOT be included in this route.\")\r\n - so this must be asymmetric egress PE\r\n - in 4.2 is stated that: \"the asymmetric IRB mode simplifies the forwarding model\r\n   and saves space in the IP-VRF route table, since host routes are not   installed in the route table.\"\r\n - so i guess that,  advertising  PE  in asymmetric mode, is NOT leaning/storing local IP to IP-VRF table only ARP (bound to IP-VRF) and MAC into MAC-VRF\n --VERIFIER NOTES-- \n   See https://mailarchive.ietf.org/arch/msg/bess/9pvIR6OysyFKso9rDRb-CJj7we8/", "submit_date": "2023-10-20", "submitter_name": "Denis Vrkic", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-02-12 15:28:26"}, {"errata_id": "7688", "doc-id": "RFC2026", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "Idkf", "orig_text": "Jejf", "correct_text": "Ndjfk", "notes": "Rejecting as junk.\n --VERIFIER NOTES-- \nNdjfk Jejf Idkf... and also asdfasdfasdfasdf!", "submit_date": "2023-10-26", "submitter_name": "Crystal Ball", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-12 18:44:57"}, {"errata_id": "7516", "doc-id": "RFC3995", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.3 page 19", "orig_text": "   For Pull Delivery Methods, a client MUST supply \"notify-recipient-\r\n   uri\" and MAY omit any of the rest of the attributes in column 1 of\r\n   Table 1 in a Subscription Creation Request.  For Push Delivery\r\n   Methods, a client MUST supply \"notify-pull-method\" and MAY omit any\r\n   of the rest of the attributes in column 1 of Table 1 in a\r\n   Subscription Creation Request.  A client MUST NOT supply both\r\n   \"notify-recipient-uri\" and \"notify-pull-method\" attributes in the\r\n   same Subscription Creation Request.", "correct_text": "   For Push Delivery Methods, a client MUST supply \"notify-recipient-\r\n   uri\" and MAY omit any of the rest of the attributes in column 1 of\r\n   Table 1 in a Subscription Creation Request.  For Pull Delivery\r\n   Methods, a client MUST supply \"notify-pull-method\" and MAY omit any\r\n   of the rest of the attributes in column 1 of Table 1 in a\r\n   Subscription Creation Request.  A client MUST NOT supply both\r\n   \"notify-recipient-uri\" and \"notify-pull-method\" attributes in the\r\n   same Subscription Creation Request.", "notes": "notify-recipient-uri is used for Push notification method and notify-pull-method is used for pull notification method based on the paragraph based on the second paragraph in section 5.3 paragraph 2 \"The \"notify-recipient-uri\" attribute is for use with Push Delivery\r\n   Methods.  The \"notify-pull-method\" attribute is for use with Pull\r\n   Delivery Methods.\" \r\nBut in 4th Paragraph for client requirements there is a mistake. It mentions pull requires notification-recipient-uri instead of push requires and similarly verbage is wrong for push as well which indicates clients must use notify-pull-method", "submit_date": "2023-05-15", "submitter_name": "Tarak Parikh", "verifier_id": "", "verifier_name": null, "update_date": "2023-05-15 22:27:09"}, {"errata_id": "7514", "doc-id": "RFC4648", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "If this property do not hold [...]", "correct_text": "If this property does not hold [...]", "notes": "The verb \"do\" in the clause \"If this property do not hold\" is incorrect. The correct verb is \"does,\" as the subject \"this property\" is singular.", "submit_date": "2023-05-09", "submitter_name": "Zachary Collier", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-10-11 21:32:24"}, {"errata_id": "7508", "doc-id": "RFC8823", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1 and 3.2", "orig_text": "Figure 1:\r\n  Message-ID: <A2299BB.FF7788@example.org>\r\n  From: acme-generator@example.org\r\n  To: alexey@example.com\r\n\r\nFigure 2:\r\n   Message-ID: <111-22222-3333333@example.com>\r\n   In-Reply-To: <A2299BB.FF7788@example.org>\r\n   From: alexey@example.com\r\n   To: acme-generator@example.org", "correct_text": "Figure 1:\r\n  Message-ID: <A2299BB.FF7788@example.com>\r\n  From: acme-generator@example.com\r\n  To: alexey@example.org\r\n\r\nFigure 2:\r\n   Message-ID: <111-22222-3333333@example.org>\r\n   In-Reply-To: <A2299BB.FF7788@example.com>\r\n   From: alexey@example.org\r\n   To: acme-generator@example.com", "notes": "Accoording to RFC8555, the domain example.com used for ACME server, the example.org used for the Client.", "submit_date": "2023-05-04", "submitter_name": "Richard Wang", "verifier_id": "", "verifier_name": null, "update_date": "2023-10-10 23:49:10"}, {"errata_id": "7509", "doc-id": "RFC4862", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.3", "orig_text": "A link-local address is formed by combining the well-known link-local prefix FE80::0 [RFC4291] (of appropriate length) with an interface identifier as follows:\r\n", "correct_text": "A link-local address is formed by combining the well-known link-local prefix FE80::/10 [RFC4291] (of appropriate length) with an interface identifier as follows:\r\n", "notes": "The prefix text should be in CIDR notation, as the referenced RFC4921 sec. 2.4 lists it in CIDR notation. Further, FE80::0 describes an address, not a prefix.", "submit_date": "2023-05-05", "submitter_name": "Jonathan Johnson", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-10-18 22:45:30"}, {"errata_id": "7511", "doc-id": "RFC8693", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "Client authentication to the authorization server is done using the \r\nnormal mechanisms provided by OAuth 2.0. Section 2.3.1 of [RFC6749] \r\ndefines password-based authentication of the client, however, client \r\nauthentication is extensible and other mechanisms are possible. For \r\nexample, [RFC7523] defines client authentication using bearer JSON Web \r\nTokens (JWTs) [JWT]. The supported methods of client authentication and \r\nwhether or not to allow unauthenticated or unidentified clients are \r\ndeployment decisions that are at the discretion of the authorization \r\nserver.", "correct_text": "Client authentication to the authorization server is done using the \r\nnormal mechanisms provided by OAuth 2.0. Section 2.3.1 of [RFC6749] \r\ndefines password-based authentication of the client, however, client \r\nauthentication is extensible and other mechanisms are possible. The \r\nsupported methods of client authentication and whether or not to allow \r\nunauthenticated or unidentified clients are deployment decisions that \r\nare at the discretion of the authorization server. ", "notes": "The specific example of authentication with RFC7523 would require \"grant_type\" value of \"urn:ietf:params:oauth:grant-type:jwt-bearer\", however this directly conflicts with RFC8693 as it requires \"grant_type\" value of \"urn:ietf:params:oauth:grant-type:token-exchange\".", "submit_date": "2023-05-08", "submitter_name": "Jesse Estum", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7512", "doc-id": "RFC8059", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   Receiver RLOC:   The RLOC address on which the receiver ETR wishes to\r\n      receiver the unicast-encapsulated flow.", "correct_text": "   Receiver RLOC:   The RLOC address on which the receiver ETR wishes to\r\n      receive the unicast-encapsulated flow.", "notes": "The second \"receiver\" should be \"receive\".", "submit_date": "2023-05-08", "submitter_name": "Alvaro Retana", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-05-08 21:07:06"}, {"errata_id": "7513", "doc-id": "RFC5789", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "PATCH is neither safe nor idempotent as defined by [<a href=\"./rfc2616\" title=\"&quot;Hypertext Transfer Protocol -- HTTP/1.1&quot;\">RFC2616</a>], <a href=\"#section-9.1\">Section</a> <a href=\"#section-9.1\">9.1</a>.", "correct_text": "PATCH is neither safe nor idempotent as defined by [<a href=\"./rfc2616\" title=\"&quot;Hypertext Transfer Protocol -- HTTP/1.1&quot;\">RFC2616</a>], <a href=\"./rfc2616#section-9.1\">Section</a> <a href=\"./rfc2616#section-9.1\">9.1</a>.", "notes": "Having a link to #section-9.1 leads the browser to section 9.1 in the current RFC (5789). The link should, however, point to section 9.1 in RFC 2616.", "submit_date": "2023-05-09", "submitter_name": "Ivan Ivkovi\u0107", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:23:05"}, {"errata_id": "7507", "doc-id": "RFC1122", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.2", "orig_text": " There are two important lessons that vendors of Internet host\r\n software have learned and which a new vendor should consider\r\n seriously.", "correct_text": " There are four important lessons that vendors of Internet host\r\n software have learned and which a new vendor should consider\r\n seriously.", "notes": "I'm suggesting to replace \"two\" with \"four\" because below the 1.2 section there are 4 subsections (1.2.1, 1.2.2, 1.2.3 and 1.2.4) which lead to think that there are 4 \"important lessons\".", "submit_date": "2023-05-04", "submitter_name": "Antonio Cota", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 12:00:45"}, {"errata_id": "7525", "doc-id": "RFC6482", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3", "orig_text": "Within the ROAIPAddressFamily structure, addressFamily contains the Address Family Identifier (AFI) of an IP address family.  This specification only supports IPv4 and IPv6.  Therefore, addressFamily MUST be either 0001 or 0002.\r\n\r\nWithin a ROAIPAddress structure, the addresses field represents prefixes as a sequence of type IPAddress.  (See [RFC3779] for more details).  If present, the maxLength MUST be an integer ...\r\n", "correct_text": "Within the ROAIPAddressFamily structure, addressFamily contains the Address Family Identifier (AFI) of an IP address family.  This specification only supports IPv4 and IPv6.  Therefore, addressFamily MUST be either 0001 or 0002. The addresses field represents prefixes as a sequence of type ROAIPAddress.  \r\n\r\nWithin the ROAIPAddress structure, the address field represents an IPv4 or IPv6 prefix of type IPaddress (See [RFC3779] for more details).  If present, the maxLength MUST be an integer ...", "notes": "Original text contradicts does not align with normative ASN.1 schema.\n --VERIFIER NOTES-- \nSee discussion on the sidrops list at https://mailarchive.ietf.org/arch/msg/sidrops/cFCZREOerU-jGWWG5zh5PdXTLKE/\r\n\r\nThis erratum is filed against RFC 6482. Although RFC 6482 has not yet been marked \"obsolete\", this is only a formality -- draft-ietf-sidrops-rfc6482bis-09 has been approved for publication and is currently in the RFC Editor queue. When editing is complete and rfc6482bis is published as an RFC, 6482 will indeed be obsolete. In that spirit, I'm applying guideline 7 from https://www.ietf.org/about/groups/iesg/statements/processing-errata-ietf-stream/ and rejecting this erratum. Note that in the thread referenced above, Job says the erratum is fixed in the bis. If it's not, a new erratum should be raised against the bis.", "submit_date": "2023-05-26", "submitter_name": "Sacha Boudjema", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-11 22:39:51"}, {"errata_id": "7526", "doc-id": "RFC8445", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "22.2", "orig_text": ".", "correct_text": ".", "notes": "The link to ICE-SIP-SDP is broken. It is a relative link:\r\n\r\n   [<a id=\"ref-ICE-SIP-SDP\">ICE-SIP-SDP</a>]\r\n              Petit-Huguenin, M., Nandakumar, S., and A. Keranen,\r\n              \"Session Description Protocol (SDP) Offer/Answer\r\n              procedures for Interactive Connectivity Establishment\r\n              (ICE)\", Work in Progress,\r\n              <a href=\"./draft-ietf-mmusic-ice-sip-sdp-21\">draft-ietf-mmusic-ice-sip-sdp-21</a>, June 2018.\r\n\r\nBut there is nothing at https://www.rfc-editor.org/rfc/draft-ietf-mmusic-ice-sip-sdp-21", "submit_date": "2023-05-28", "submitter_name": "Eric Rescorla", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7532", "doc-id": "RFC5797", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "sections 3 and 7", "orig_text": "(multiple occurrences of each within Table 1, column \u201cRFC#s/References and Notes\u201d)\r\n2640\r\n3659", "correct_text": "(in section 7.2)\r\n\r\n[RFC2640] Curtin, B., \"Internationalization of the File Transfer Protocol\", RFC 2640, July 1999.\r\n\r\n(and)\r\n\r\n[RFC3659] Hethmon, P., \"Extensions to FTP\", RFC 3659, March 2007.", "notes": "These RFCs are referenced prominently in the table which the remainder of the RFC is centered upon, but were omitted from the actual \u201cReferences\u201d section.  Merely to find out what their topics were, I had to go and query for them on the rfc-editor website.  This is inefficient in both network resources and user time.", "submit_date": "2023-06-02", "submitter_name": "Gordon Steemson", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-01 21:25:57"}, {"errata_id": "7543", "doc-id": "RFC9008", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "As the Rank information in the RPI artifact is changed at each hop, it\r\nwill typically be zero when it arrives at the DODAG root.", "correct_text": "As the Rank information in the RPI artifact is changed at each hop, it\r\nwill typically be non-zero when it arrives at the DODAG root.", "notes": "The SenderRank is 0 if: \r\n- The packet comes from Internet (and has an RPI)\r\n- The packet has not been forwarded (ie. if the source is a direct child of the DODAG root), as RFC 6550 section 11.2 tells to set SenderRank to 0 at the source.\r\n\r\nThe typical case is rather a packet that arrives at the DODAG root from a child node forwarding a packet, in which case SenderRank is set to DAGRank(rank) > 0.", "submit_date": "2023-06-14", "submitter_name": "Mathis Marion", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 22:59:18"}, {"errata_id": "7528", "doc-id": "RFC4119", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Normative References", "orig_text": "[15]  OpenGIS, \"Open Geography Markup Language (GML) Implementation\r\n         Specification\", OGC 02-023r4, January 2003,\r\n         <http://www.opengeospatial.org/specs/?page=specs>.", "correct_text": "[15]  OpenGIS, \"Open Geography Markup Language (GML) Implementation\r\n         Specification\", OGC 02-023r4, January 2003,\r\n         <https://www.ogc.org/standard/gml/>.\r\n\r\n\r\n\r\n         ", "notes": "On clicking the link, now we get \"Page not found\" Error. It is best to avoid links to external website which is not maintained by rfc-editor.", "submit_date": "2023-05-29", "submitter_name": "Shraddha Soni", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-03-25 17:48:20"}, {"errata_id": "7529", "doc-id": "RFC3261", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "25.1", "orig_text": "This is intended to behave exactly as HTTP/1.1 as described in RFC 2616 [8].\r\nThe SWS construct is used when linear white space is optional, generally between tokens and separators.\r\n\r\n      LWS  =  [*WSP CRLF] 1*WSP ; linear whitespace", "correct_text": "This is intended to behave exactly as HTTP/1.1 as described in RFC 2616 [8].\r\nThe SWS construct is used when linear white space is optional, generally between tokens and separators.\r\n\r\n      LWS  =  [CRLF] 1*WSP ; linear whitespace", "notes": "RFC 2616 states \r\nLWS            = [CRLF] 1*( SP | HT )\r\n\r\nRFC 2234 states \r\nWSP            =  SP / HTAB\r\n                               ; white space\r\nRFC 3261 is referencing both for BNF to follow, but looks like a new BNF is stated. So either it should not reference to follow RFC 2616 exactly or follow the same BNF as 2616.", "submit_date": "2023-05-29", "submitter_name": "Shraddha Soni", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 21:47:02"}, {"errata_id": "8457", "doc-id": "RFC7636", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "code-verifier = 43*128unreserved", "correct_text": "code_verifier = 43*128unreserved", "notes": "The ABNF accidentally uses a hyphen/dash rather than an underscore in the code_verifier name in its rule.\n --VERIFIER NOTES-- \nThis is not an error and the errata should be rejected. As per the ABNF definition in https://www.rfc-editor.org/rfc/rfc5234.html#section-21 the name contains \"alphabetics, digits, and hyphens (dashes)\", and not underscores. The commenter may be expecting the ABNF rule name of code-verifier to match the parameter name of code_verifier, but they do not need to be the same. While this is confusing, the text is correct as it stands. ", "submit_date": "2025-06-13", "submitter_name": "Jeff Walden", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:06:48"}, {"errata_id": "7548", "doc-id": "RFC6458", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.1", "orig_text": "info:  A pointer to the buffer to hold the attributes of the received\r\n    message.  The structure type of info is determined by the\r\n    info_type parameter.\r\n\r\ninfolen:  An in/out parameter describing the size of the info buffer.\r\n\r\ninfotype:  On return, *info_type is set to the type of the info\r\n    buffer.  The current defined values are as follows:\r\n\r\n    SCTP_RECVV_NOINFO:  If both SCTP_RECVRCVINFO and SCTP_RECVNXTINFO\r\n       options are not enabled, no attribute will be returned.  If\r\n       only the SCTP_RECVNXTINFO option is enabled but there is no\r\n       next message in the buffer, no attribute will be returned.  In\r\n       these cases, *info_type will be set to SCTP_RECVV_NOINFO.\r\n", "correct_text": "info:  A pointer to the buffer to hold the attributes of the received\r\n    message.  The structure type of info is determined by the\r\n    infotype parameter.\r\n\r\ninfolen:  An in/out parameter describing the size of the info buffer.\r\n\r\ninfotype:  On return, *infotype is set to the type of the info\r\n    buffer.  The current defined values are as follows:\r\n\r\n    SCTP_RECVV_NOINFO:  If both SCTP_RECVRCVINFO and SCTP_RECVNXTINFO\r\n       options are not enabled, no attribute will be returned.  If\r\n       only the SCTP_RECVNXTINFO option is enabled but there is no\r\n       next message in the buffer, no attribute will be returned.  In\r\n       these cases, *infotype will be set to SCTP_RECVV_NOINFO.\r\n", "notes": "The name of the parameter is infotype, not info_type.\r\nThanks to Philipp Stanner for making me aware of this issue.", "submit_date": "2023-06-22", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-22 22:03:10"}, {"errata_id": "7549", "doc-id": "RFC4210", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.2. point 11", "orig_text": "correct RA of CA public key", "correct_text": "correct RA or CA public key", "notes": "From the context it is obvious that there is a typo in the original text. This claim is supported by the fact that the \"r\" and the \"f\" key are next to each other on the keyboard.", "submit_date": "2023-06-23", "submitter_name": "Rufus Buschart", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2023-06-23 14:39:11"}, {"errata_id": "7550", "doc-id": "RFC8894", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Once the messageData has been encrypted, it is signed with the\r\nsender's public key.", "correct_text": "Once the messageData has been encrypted, it is signed with the\r\nsender's private key.", "notes": "The sender should use their private key, rather than their public key, to sign the data.", "submit_date": "2023-06-23", "submitter_name": "Simone Guidi", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 01:01:12"}, {"errata_id": "7551", "doc-id": "RFC1436", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "thus creating a customized view of thethe Gopher information universe;", "correct_text": "thus creating a customized view of the Gopher information universe;", "notes": "Typing error.", "submit_date": "2023-06-23", "submitter_name": "Csaba Csillingh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-23 20:32:11"}, {"errata_id": "7552", "doc-id": "RFC2409", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A", "orig_text": "This is a list of DES Weak and Semi-Weak keys.  The keys come from\r\n   [Sch96].  All keys are listed in hexidecimal.", "correct_text": "This is a list of DES Weak and Semi-Weak keys.  The keys come from\r\n   [Sch96].  All keys are listed in hexadecimal.", "notes": "hexidecimal -> should be hexadecimal", "submit_date": "2023-06-23", "submitter_name": "Nico Mexis", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-06-23 20:51:03"}, {"errata_id": "8458", "doc-id": "RFC7636", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "code-challenge = 43*128unreserved", "correct_text": "code_challenge = 43*128unreserved", "notes": "The ABNF accidentally uses a hyphen/dash rather than an underscore in the code_challenge name in its rule.\n --VERIFIER NOTES-- \nThis is not an error and the errata should be rejected. As per the ABNF definition in https://www.rfc-editor.org/rfc/rfc5234.html#section-21 the name contains \"alphabetics, digits, and hyphens (dashes)\", and not underscores. The commenter may be expecting the ABNF rule name of code challenge to match the parameter name of code challenge but they do not need to be the same. While this is confusing, the text is correct as it stands. ", "submit_date": "2025-06-13", "submitter_name": "Jeff Walden", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:09:35"}, {"errata_id": "8468", "doc-id": "RFC3394", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6", "orig_text": "   AES-WRAP  National Institute of Standards and Technology. AES Key\r\n             Wrap Specification. 17 November 2001.\r\n             [http://csrc.nist.gov/encryption/kms/key-wrap.pdf]", "correct_text": "   AES-WRAP  National Institute of Standards and Technology. AES Key\r\n             Wrap Specification. 17 November 2001.\r\n             [https://web.archive.org/web/20041031122517/http://www.csrc.nist.gov/CryptoToolkit/kms/key-wrap.pdf]", "notes": "Unfortunately, the link is dead.  The original document appears to still be available using the wayback machine.  This is the earliest snapshot:\r\n\r\n  https://web.archive.org/web/20030322033216/http://csrc.nist.gov/encryption/kms/key-wrap.pdf\r\n\r\nThat isn't actually the document, but a redirect to:\r\n\r\n  http://www.csrc.nist.gov/CryptoToolkit/kms/key-wrap.pdf\r\n\r\nThat website does not appear to be available anymore (either via http or https).  But the wayback machine has archived the redirect:\r\n\r\n  https://web.archive.org/web/20041031122517/http://www.csrc.nist.gov/CryptoToolkit/kms/key-wrap.pdf\r\n\r\nLooking at the PDF, the title and date match the bibliographic reference.", "submit_date": "2025-06-20", "submitter_name": "Neal Walfield", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-07-09 13:02:00"}, {"errata_id": "7561", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "  Identification\r\n\r\n    The choice of the Identifier for a datagram is based on the need to\r\n    provide a way to uniquely identify the fragments of a particular\r\n    datagram.  The protocol module assembling fragments judges fragments\r\n    to belong to the same datagram if they have the same source,\r\n    destination, protocol, and Identifier.  Thus, the sender must choose\r\n    the Identifier to be unique for this source, destination pair and\r\n    protocol for the time the datagram (or any fragment of it) could be\r\n    alive in the internet.\r\n\r\n    It seems then that a sending protocol module needs to keep a table\r\n    of Identifiers, one entry for each destination it has communicated\r\n    with in the last maximum packet lifetime for the internet.\r\n\r\n    However, since the Identifier field allows 65,536 different values,\r\n    some host may be able to simply use unique identifiers independent\r\n    of destination.", "correct_text": "  Identification\r\n\r\n    The choice of the Identification for a datagram is based on the need to\r\n    provide a way to uniquely identify the fragments of a particular\r\n    datagram.  The protocol module assembling fragments judges fragments\r\n    to belong to the same datagram if they have the same source,\r\n    destination, protocol, and Identification.  Thus, the sender must choose\r\n    the Identification to be unique for this source, destination pair and\r\n    protocol for the time the datagram (or any fragment of it) could be\r\n    alive in the internet.\r\n\r\n    It seems then that a sending protocol module needs to keep a table\r\n    of Identification values, one entry for each destination it has communicated\r\n    with in the last maximum packet lifetime for the internet.\r\n\r\n    However, since the Identification field allows 65,536 different values,\r\n    some host may be able to simply use unique identifiers independent\r\n    of destination.", "notes": "The field is called \"Identification\", and not \"Identifier\" (please note the capitalization in the text).", "submit_date": "2023-07-10", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2023-08-03 10:56:28"}, {"errata_id": "7558", "doc-id": "RFC8994", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.2.1", "orig_text": "   ACP nodes MUST NOT support certificates with RSA public keys of less\r\n   than a 2048-bit modulus or curves with group order of less than 256\r\n   bits.  They MUST support certificates with RSA public keys with\r\n   2048-bit modulus and MAY support longer RSA keys.  They MUST support\r\n   certificates with ECC public keys using NIST P-256 curves and SHOULD\r\n   support P-384 and P-521 curves.\r\n\r\n   ACP nodes MUST NOT support certificates with RSA public keys whose\r\n   modulus is less than 2048 bits, or certificates whose ECC public keys\r\n   are in groups whose order is less than 256 bits.  RSA signing\r\n   certificates with 2048-bit public keys MUST be supported, and such\r\n   certificates with longer public keys MAY be supported.  ECDSA\r\n   certificates using the NIST P-256 curve MUST be supported, and such\r\n   certificates using the P-384 and P-521 curves SHOULD be supported.", "correct_text": "   ACP nodes MUST NOT support certificates with RSA public keys whose\r\n   modulus is less than 2048 bits, or certificates whose ECC public keys\r\n   are in groups whose order is less than 256 bits.  RSA signing\r\n   certificates with 2048-bit public keys MUST be supported, and such\r\n   certificates with longer public keys MAY be supported.  ECDSA\r\n   certificates using the NIST P-256 curve MUST be supported, and such\r\n   certificates using the P-384 and P-521 curves SHOULD be supported.", "notes": "The second paragraph in the original text appears to be a more carefully-written version of the first paragraph.  Therefore the first paragraph should be deleted and the second paragraph retained.", "submit_date": "2023-07-02", "submitter_name": "J. William Atwood", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 10:57:32"}, {"errata_id": "7560", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1, Line 904", "orig_text": "Bits   5:  0 = Normal Relibility, 1 = High Relibility.", "correct_text": "Bits   5:  0 = Normal Reliability, 1 = High Reliability.", "notes": "Typo", "submit_date": "2023-07-04", "submitter_name": "Simon G\u00fcnther", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-07-06 21:51:59"}, {"errata_id": "7562", "doc-id": "RFC8214", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "In a multihoming All-Active scenario, there is no Designated Forwarder (DF) election, and all the PEs in the ES that are active and ready to forward traffic to/from the CE will set the P Flag.", "correct_text": "In a multihoming All-Active scenario, there is no Designated Forwarder (DF) election, and all the PEs in the ES that are active and ready to forward traffic to/from the CE SHOULD set the P Flag.", "notes": "The original text in the RFC does not express any requirement level (\"will\" is not a recognized IETF term for expressing requirement levels as defined in RFC 2119). The new test replaces \"will\" with \"SHOULD\". \r\n\r\nSHOULD and not MUST is proposed to avoid potential issues with implementations that did not set P flag in the L2 Attributes Extended Community in All-Active multi-homing scenarios (since this was not required) and would suddenly become non-compliant if the text were changed to from \"will\" to MUST.", "submit_date": "2023-07-13", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-10-30 13:42:37"}, {"errata_id": "7564", "doc-id": "RFC2622", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6", "orig_text": "In page 26 of RFC2622\r\nIn the following example 9.9.9.1 imports 128.9.0.0/16 from 9.9.9.2\r\n and 9.9.9.3.\r\n (7) peering-set: prng-bar\r\n peering: AS1 at 9.9.9.1\r\n peering-set: prng-foo\r\n peering: prng-bar\r\n peering: AS2 at 9.9.9.1\r\n aut-num: AS1\r\n import: from prng-foo accept { 128.9.0.0/16 }", "correct_text": "In the following example 9.9.9.1 imports 128.9.0.0/16 from 9.9.9.2\r\n and 9.9.9.3.\r\n (7) peering-set: prng-bar\r\n peering: AS3 at 9.9.9.1\r\n peering-set: prng-foo\r\n peering: prng-bar\r\n peering: AS2 at 9.9.9.1\r\n aut-num: AS1\r\n import: from prng-foo accept { 128.9.0.0/16 }", "notes": "As  \"Figure 22: Example topology consisting of three ASes, AS1, AS2, and\r\n AS3; two exchange points, EX1 and EX2; and six routers.\" shows, the router 9.9.9.1 of AS1 connects to the router 9.9.9.3 of AS3 in exchange point 2.  It states that \"In the following example 9.9.9.1 imports 128.9.0.0/16 from 9.9.9.2 and 9.9.9.3.\", so I think the corresponding AS of 9.9.9.3 should be AS3 instead of AS1.", "submit_date": "2023-07-13", "submitter_name": "Jiang Li", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-15 18:54:47"}, {"errata_id": "7570", "doc-id": "RFC2324", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "coffee-scheme = ( \"koffie\"                   ; Afrikaans, Dutch\r\n                | \"q%C3%A6hv%C3%A6\"          ; Azerbaijani\r\n                | \"%D9%82%D9%87%D9%88%D8%A9\" ; Arabic\r\n                | \"akeita\"                   ; Basque\r\n                | \"koffee\"                   ; Bengali\r\n                | \"kahva\"                    ; Bosnian\r\n                | \"kafe\"                     ; Bulgarian, Czech\r\n                | \"caf%C3%E8\"                ; Catalan, French, Galician\r\n                | \"%E5%92%96%E5%95%A1\"       ; Chinese\r\n                | \"kava\"                     ; Croatian\r\n                | \"k%C3%A1va                 ; Czech\r\n                | \"kaffe\"                    ; Danish, Norwegian, Swedish\r\n                | \"coffee\"                   ; English\r\n                | \"kafo\"                     ; Esperanto\r\n                | \"kohv\"                     ; Estonian\r\n                | \"kahvi\"                    ; Finnish\r\n                | \"%4Baffee\"                 ; German\r\n                | \"%CE%BA%CE%B1%CF%86%CE%AD\" ; Greek\r\n                | \"%E0%A4%95%E0%A5%8C%E0%A4%AB%E0%A5%80\" ; Hindi\r\n                | \"caff%C3%A8\"               ; Italian\r\n                | \"%E3%82%B3%E3%83%BC%E3%83%92%E3%83%BC\" ; Japanese\r\n                | \"%EC%BB%A4%ED%94%BC\"       ; Korean\r\n                | \"%D0%BA%D0%BE%D1%84%D0%B5\" ; Russian\r\n                | \"%E0%B8%81%E0%B8%B2%E0%B9%81%E0%B8%9F\" ; Thai\r\n                )", "correct_text": "coffee-scheme = ( \"koffie\"                               ; Afrikaans, Dutch\r\n                | \"q%C3%A6hv%C3%A6\"                      ; Azerbaijani\r\n                | \"%D9%82%D9%87%D9%88%D8%A9\"             ; Arabic\r\n                | \"akeita\"                               ; Basque\r\n                | \"koffee\"                               ; Bengali\r\n                | \"kahva\"                                ; Bosnian\r\n                | \"kafe\"                                 ; Bulgarian, Czech\r\n                | \"caf%C3%E8\"                            ; Catalan, French, Galician\r\n                | \"%E5%92%96%E5%95%A1\"                   ; Chinese\r\n                | \"kava\"                                 ; Croatian\r\n                | \"k%C3%A1va                             ; Czech\r\n                | \"kaffe\"                                ; Danish, Norwegian, Swedish\r\n                | \"coffee\"                               ; English\r\n                | \"kafo\"                                 ; Esperanto\r\n                | \"kohv\"                                 ; Estonian\r\n                | \"kahvi\"                                ; Finnish\r\n                | \"%4Baffee\"                             ; German\r\n                | \"%CE%BA%CE%B1%CF%86%CE%AD\"             ; Greek\r\n                | \"%E0%A4%95%E0%A5%8C%E0%A4%AB%E0%A5%80\" ; Hindi\r\n                | \"caff%C3%A8\"                           ; Italian\r\n                | \"%E3%82%B3%E3%83%BC%E3%83%92%E3%83%BC\" ; Japanese\r\n                | \"%EC%BB%A4%ED%94%BC\"                   ; Korean\r\n                | \"caf%C3%A9\"                            ; Portuguese\r\n                | \"%D0%BA%D0%BE%D1%84%D0%B5\"             ; Russian\r\n                | \"%E0%B8%81%E0%B8%B2%E0%B9%81%E0%B8%9F\" ; Thai\r\n                )", "notes": "Added missing Portuguese URI (\"caf\u00e9\") in coffe-scheme (techinical);\r\nFix mixed indentation with spaces (editorial);\r\nDepends Editorial Errata ID 7293;\n --VERIFIER NOTES-- \nThank you for the report.  This sort of erratum would normally require an update, but this RFC will not be updated.", "submit_date": "2023-07-22", "submitter_name": "Hugo Heger", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-11-01 12:20:18"}, {"errata_id": "7571", "doc-id": "RFC8956", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8.1", "orig_text": "+======+======================+=========================+==========+\r\n| len  | destination          | source                  | ul-proto |\r\n+======+======================+=========================+==========+\r\n| 0x12 | 01 20 00 20 01 0d bb | 02 68 40 12 34 56 78 9a | 03 81 06 |\r\n+------+----------------------+-------------------------+----------+\r\n                                 Table 1", "correct_text": "+======+======================+=========================+==========+\r\n| len  | destination          | source                  | ul-proto |\r\n+======+======================+=========================+==========+\r\n| 0x12 | 01 20 00 20 01 0d b8 | 02 68 40 12 34 56 78 9a | 03 81 06 |\r\n+------+----------------------+-------------------------+----------+\r\n                                 Table 1", "notes": "The last byte in the \"destination\" column of Table 1 in 3.8.1 should be \"b8\", not \"bb\".", "submit_date": "2023-07-24", "submitter_name": "Pawel Foremski", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 17:44:24"}, {"errata_id": "7572", "doc-id": "RFC4180", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7.2 Informative Ref", "orig_text": "[4]  Repici, J., \"HOW-TO: The Comma Separated Value (CSV) File\r\n        Format\", 2004,\r\n        <http://www.creativyst.com/Doc/Articles/CSV/CSV01.htm>.", "correct_text": "[4]  Repici, J., \"HOW-TO: The Comma Separated Value (CSV) File\r\n        Format\", 2004-2010,\r\n        <https://www.creativyst.com/Doc/Articles/CSV/CSV01.shtml>.", "notes": "Suggested corrected text updates the link which uses the TLS-conforming URL for the creativyst.com site and the date range of publication. It seems that some browsers might not cleanly redirect to the HTTPS address.", "submit_date": "2023-07-24", "submitter_name": "Robert Hairgrove", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:37:49"}, {"errata_id": "7573", "doc-id": "RFC822", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "        inserted.  Thus, the single line\r\n            To:  \"Joe & J. Harvey\" <ddd @Org>, JJV @ BBN\r\n        can be represented as:\r\n            To:  \"Joe & J. Harvey\" <ddd @ Org>,\r\n                    JJV@BBN\r\n        and\r\n            To:  \"Joe & J. Harvey\"\r\n                            <ddd@ Org>, JJV\r\n             @BBN\r\n        and\r\n            To:  \"Joe &\r\n             J. Harvey\" <ddd @ Org>, JJV @ BBN", "correct_text": "        inserted.  Thus, the single line\r\n            To:  \"Joe & J. Harvey\" <ddd @Org>, JJV @ BBN\r\n        can be represented as:\r\n            To:  \"Joe & J. Harvey\" <ddd @ Org>,\r\n             JJV@BBN\r\n        and\r\n            To:  \"Joe & J. Harvey\"\r\n             <ddd@ Org>, JJV\r\n             @BBN\r\n        and\r\n            To:  \"Joe &\r\n             J. Harvey\" <ddd @ Org>, JJV @ BBN", "notes": "Possibly arising from mis-interpreting RFC 733 section III.B.a (Folding and unfolding of headers) which says: \"The general rule is that wherever there can be linear-white-space  (NOT  simply  LWSP-chars), a CRLF immediately followed by AT LEAST one LWSP-char can instead be inserted.\"\r\nThis may be interpreted that when folding at one while space character an arbitrary amount of white space characters may be inserted at the next line, also saying that one white space in a header is equivalent to multiple white space characters.\r\nsubsequent revisions (RFC 2822, RFC 5322) are increasingly more clear on that:\r\n\"The general rule is that wherever this specification allows for folding white space (not simply WSP characters), a CRLF may be inserted before any WSP.\"\n --VERIFIER NOTES-- \nPer https://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20210507/\r\n\r\nIt appears this has been clarified in subsequent revisions (RFC 2822, RFC 5322)\r\n\r\n\r\n\r\n", "submit_date": "2023-07-24", "submitter_name": "Ulrich Windl", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-03 19:11:49"}, {"errata_id": "7575", "doc-id": "RFC3376", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1", "orig_text": "If more changes to the same interface state entry occur before all\r\nthe retransmissions of the State-Change Report for the first change\r\nhave been completed, each such additional change triggers the\r\nimmediate transmission of a new State-Change Report.", "correct_text": "If more changes to the same interface state entry occur before all\r\nthe retransmissions of the State-Change Report for the first change\r\nhave been completed, each such additional change triggers the\r\nimmediate transmission of a new State-Change Report only if the \r\nnew change is of the same type as the current change.", "notes": "Section 5.1 says: \"If the interface reception-state change that triggers the new report is a filter-mode change, then the next [Robustness Variable] State-Change Reports will include a Filter-Mode-Change record. This applies even if any number of source-list changes occur in that period. The host has to maintain retransmission state for the group until the [Robustness Variable] State-Change reports have been sent.\". \r\n\r\nIt is clearly stated that if a source-list changes occur before all the retransmissions of the State-Change Report for the filter-mode change have been completed, The host has to maintain retransmission state for the group until the [Robustness Variable] State-Change reports have been sent. Therefore, in this case it must not immediately send a new State-Change Report.\n --VERIFIER NOTES-- \nRFC 3376 author Bill Fenner said (private email, Feb 9 2024, shared with permission):\r\n\r\nHi Aymen,\r\n\r\nThanks for your interest in IGMPv3.  I don't think your proposed change is correct, because one of the fundamental goals of IGMP is to communicate about changes immediately, so a change to say that you don't notify about a change immediately is against that goal.\r\n\r\nOne thing that makes IGMPv3 a little hard to understand is the complete separation between the interface (see section 2 - the IPMulticastListen() primitives) and the protocol.  When nothing complicated is happening, a call to IPMulticastListen() will be tightly tied with a similar message, which makes it even harder to understand the behavior when something complicated happens.\r\n\r\nLet's start with the API calls that invoke a set of messages: I think a sequence that is covered by the paragraph in question is:\r\n\r\n1. at time T: IPMulticastListen( socket, interface, multicast-address, INCLUDE, { A } );\r\n2. at time T1, where T1-T is less than the robustness interval: IPMulticastListen( socket, interface, multicast-address, INCLUDE, { A, B } )\r\n   (Alternatively, this could be a different socket, IPMulticastListen( socket2, interface, multicast-address, INCLUDE, { B } ) since the socket interface has to create a union of all includes to communicate to the router)\r\n\r\nI think this is the case that you propose not to send - the first one is a filter mode change, and the second one is a source list change, and those changes are of different types.\r\n\r\nHowever, the intent of section 5.1 is that you *do* send a message at time T1; it's just still TO_IN because you're not done with the robustness count of sending the filter mode change.\r\n\r\nA high level view of the processing, assuming a robustness variable of 3, is:\r\nTime T: 3 tramsissions total of IS_IN state scheduled, first one sent as TO_IN(A)\r\nTime T1: 3 transmissions total of \"add B\" scheduled, first one sent as TO_IN(A,B)\r\nTime T2: TO_IN(A,B)\r\nTime T3: ALLOW(B)\r\n\r\nThis results in 3 transmissions of the filter mode change, and also 3 transmissions of the source list change.  They're bundled together in the transmissions at time T1 and T2; that's the goal of section 5.1.\r\n\r\nPlease let us know if you have any more questions.\r\n\r\nThanks,\r\n  Bill", "submit_date": "2023-07-26", "submitter_name": "Aymen Lahouel", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-02-14 21:25:29"}, {"errata_id": "7576", "doc-id": "RFC8995", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   objective-value = text       ; name of the (list of) supported\r\n                                ; protocols: \"EST-TLS\" for RFC 7030.\r\n", "correct_text": "   objective-value = text       ; name of the supported protocol,\r\n                                ; e.g., \"EST-TLS\" for RFC 7030.\r\n", "notes": "This objective does not support a list of supported protocols. \r\nThe comment in the example might lead people to conclude they can do that.", "submit_date": "2023-07-26", "submitter_name": "Michael Richardson", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2023-11-09 16:55:04"}, {"errata_id": "7577", "doc-id": "RFC9190", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.5", "orig_text": "   When an EAP-TLS server has successfully processed the TLS client\r\n   Finished and sent its last handshake message (Finished or a post-\r\n   handshake message), it sends an encrypted TLS record with application\r\n   data 0x00.  The encrypted TLS record with application data 0x00 is a\r\n   protected success result indication, as defined in [RFC3748] ...\r\n", "correct_text": "(append)\r\n\r\nIf the EAP-TLS peer does not see the protected success indication, it\r\nMUST behave as if it had received an EAP Failure instead.", "notes": "This is largely a nit, but it's reasonable to say this.\r\n\r\nThe existing text discussed what the server must do,  But it does not say what the\r\npeer does if the server fails to behave this way,", "submit_date": "2023-07-29", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7578", "doc-id": "RFC9000", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "17.2.1", "orig_text": "                                                       Where QUIC\r\n   might be multiplexed with other protocols (see [RFC7983]), servers\r\n   SHOULD set the most significant bit of this field (0x40) to 1 so that\r\n   Version Negotiation packets appear to have the Fixed Bit field.", "correct_text": "                                                       Unless the\r\n   server has out-of-band knowledge that clients are not\r\n   demultiplexing QUIC with other protocols (see [RFC7983]), it\r\n   SHOULD set the most significant bit of this field (0x40) to 1 so that\r\n   Version Negotiation packets appear to have the Fixed Bit field.", "notes": "Unless operating in a tightly controlled environment, the server has no way of knowing what other protocols the client might be demultiplexing on the same UDP socket. According to the demultiplexing logic defined in RFC 9443, Version Negotiation packets with 0x40 set to 0 would be misclassified as RTP/RTCP.\r\n\r\nLooking at the discussion in https://mailarchive.ietf.org/arch/msg/quic/oR4kxGKY6mjtPC1CZegY1ED4beg/ and IETF118  QUIC working group meeting minutes. This needs more discussion to reach a conclusion on the potential solution.", "submit_date": "2023-07-30", "submitter_name": "Marten Seemann", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-01-29 19:56:10"}, {"errata_id": "8466", "doc-id": "RFC9580", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "11.2", "orig_text": "A point on an elliptic curve will always be represented on the wire \r\nas an MPI.", "correct_text": "TBD", "notes": "This langauge doesn't acknowledge the native encoding of the new Ed/X 25519/448 variants.\r\nVarious language in the following sections of chapter 11 also seem to imply that all EC data is encoded in MPI format.\r\n\r\nIn particular, in 11.3, all three entries in the table \"OpenPGP Elliptic Curve Scalar Encodings Registry\" seem to imply variants of MPI encoding. The case of \"native\" fixed length encoding seems to be missing.\r\n\r\nPaul Wouters (AD): This report is correct: the text is a holdover from RFC 6637 and should have been updated with the new streamlined ECC formats added in RFC 9580.\r\n\r\ndkg proposed corrected text to be prefixed like \"For ECDH (18), ECDSA (19) and EdDSALegacy (22) public key algorithms, \u2026\"\r\n\r\n", "submit_date": "2025-06-18", "submitter_name": "Heiko Schaefer", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-08-28 17:46:42"}, {"errata_id": "7593", "doc-id": "RFC9051", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.3.10", "orig_text": "  C: A001 NAMESPACE\r\n  S: * NAMESPACE ((\"\" \"/\")(\"#mh/\" \"/\" \"X-PARAM\"\r\n      (\"FLAG1\" \"FLAG2\"))) NIL NIL\r\n  S: A001 OK NAMESPACE command completed\r\n\r\n  C: A002 LIST (SPECIAL-USE) \"\" \"*\"\r\n  S: * LIST (\\NonExistent \\Archive) \"/\" Archives\r\n  S: * LIST (\\NonExistent \\Drafts) \"/\" Drafts\r\n  S: * LIST (\\NonExistent \\Junk) \"/\" Junk\r\n  S: * LIST (\\NonExistent \\Sent) \"/\" \"Sent Mail\"\r\n  S: * LIST (\\NonExistent \\Trash) \"/\" \"Deleted Items\"\r\n  S: A002 OK LIST Completed\r\n\r\n  C: A003 LIST (SPECIAL-USE) \"#mh/\" \"*\"\r\n  S: * LIST (\\NonExistent \\Archive) \"/\" \"#mh/Archives\"\r\n  S: * LIST (\\NonExistent \\Drafts) \"/\" \"#mh/Drafts\"\r\n  S: * LIST (\\NonExistent \\Junk) \"/\" \"#mh/Junk\"\r\n  S: * LIST (\\NonExistent \\Sent) \"/\" \"#mh/Sent Mail\"\r\n  S: * LIST (\\NonExistent \\Trash) \"/\" \"#mh/Deleted Items\"\r\n  S: A003 OK LIST Completed\r\n", "correct_text": "  C: A001 NAMESPACE\r\n  S: * NAMESPACE ((\"\" \"/\")(\"#mh/\" \"/\" \"X-PARAM\"\r\n      (\"FLAG1\" \"FLAG2\"))) NIL NIL\r\n  S: A001 OK NAMESPACE command completed\r\n\r\n  C: A002 LIST \"\" \"*\"\r\n  S: * LIST (\\NonExistent \\Archive) \"/\" Archives\r\n  S: * LIST (\\NonExistent \\Drafts) \"/\" Drafts\r\n  S: * LIST (\\NonExistent \\Junk) \"/\" Junk\r\n  S: * LIST (\\NonExistent \\Sent) \"/\" \"Sent Mail\"\r\n  S: * LIST (\\NonExistent \\Trash) \"/\" \"Deleted Items\"\r\n  S: A002 OK LIST Completed\r\n\r\n  C: A003 LIST \"#mh/\" \"*\"\r\n  S: * LIST (\\NonExistent \\Archive) \"/\" \"#mh/Archives\"\r\n  S: * LIST (\\NonExistent \\Drafts) \"/\" \"#mh/Drafts\"\r\n  S: * LIST (\\NonExistent \\Junk) \"/\" \"#mh/Junk\"\r\n  S: * LIST (\\NonExistent \\Sent) \"/\" \"#mh/Sent Mail\"\r\n  S: * LIST (\\NonExistent \\Trash) \"/\" \"#mh/Deleted Items\"\r\n  S: A003 OK LIST Completed\r\n", "notes": "The SPECIAL-USE LIST option is part of the IMAP4rev1 SPECIAL-USE extension, but has not been carried over in IMAP4rev2.", "submit_date": "2023-08-07", "submitter_name": "Simon Ser", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7595", "doc-id": "RFC7530", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "13.1.7", "orig_text": "13.1.7.  Name Errors\r\n\r\n   Names in NFSv4 are UTF-8 strings.  When the strings are not of length\r\n   zero, the error NFS4ERR_INVAL results.  When they are not valid\r\n   UTF-8, the error NFS4ERR_INVAL also results, but servers may\r\n   accommodate file systems with different character formats and not\r\n   return this error.  Besides this, there are a number of other errors\r\n   to indicate specific problems with names.\r\n\r\n13.1.7.1.  NFS4ERR_BADCHAR (Error Code 10040)\r\n\r\n   A UTF-8 string contains a character that is not supported by the\r\n   server in the context in which it is being used.\r\n\r\n13.1.7.2.  NFS4ERR_BADNAME (Error Code 10041)\r\n\r\n   A name string in a request consisted of valid UTF-8 characters\r\n   supported by the server, but the name is not supported by the server\r\n   as a valid name for current operation.  An example might be creating\r\n   a file or directory named \"..\" on a server whose file system uses\r\n   that name for links to parent directories.\r\n\r\n   This error should not be returned due to a normalization issue in a\r\n   string.  When a file system keeps names in a particular normalization\r\n   form, it is the server's responsibility to do the appropriate\r\n   normalization, rather than rejecting the name.\r\n", "correct_text": "13.1.7.  Name Errors\r\n\r\nNames in NFSv4 often are UTF-8 strings. However, in order to provide\r\ncompatibility with NFSv3 and with local filesystems that do not impose any such\r\nrestrictions on the form of name strings, UTF-8-unaware file systems are\r\nsupported.  For such file systems,  the server is, for the most part, unaware of\r\nthe encoding of names chosen by the client and is therefore unable to support\r\nnormalization-related processing or case-insensitivity.  In order to provide\r\nproper support for the errors NFS4ERR_BADCHAR and NFS4ERR_BADNAME, the encoding\r\nused by clients MUST use the same encoding as UTF-8 for all printable ASCII\r\ncharacters.\r\n\r\nFor file systems which are UTF-8-aware,  when strings are not valid UTF-8\r\nstrings,  the error NFS4ERR_INVAL results.  As a result, clients can determine\r\nwhether the current file system is UTF-8-aware by looking up a string which is\r\nnot valid UTF-8 (e..g. the single byte 0x80)  and using an error return of\r\nNFS4ERR_INVAl as indicating that only valid UTF-8 strings may be used.\r\n\r\nWhen a string of length zero is passed, the error NFS4ERR_INVAL also results. \r\nbut servers may accommodate file systems with different character formats and\r\nreturn this error only in this case.  Besides this, there are a number of other\r\nerrors to indicate specific problems with names.\r\n\r\n13.1.7.1.  NFS4ERR_BADCHAR (Error Code 10040)\r\n\r\nA UTF-8 string contains a character that is not supported by the server file\r\nsystem as part of a  file name.  For example, the forward slash is often\r\nreserved for use to indicate multiple names within a path, making the creation\r\nof file or directory names with embedded slashes problematic.\r\n\r\n13.1.7.2.  NFS4ERR_BADNAME (Error Code 10041)\r\n\r\nA name string in a request consists of a valid string supported by the server,\r\nwhether UTF-8 or otherwise, but the name is not supported by the server as a\r\nvalid name for the current operation.  An example might be creating a file or\r\ndirectory named \"..\" on a server whose file system uses that name for links to\r\nparent directories.  This error MUST NOT result in case in which  a \r\n(UTF-8-aware) server file system prefers a particular normalization for strings.\r\nIn such cases, it is the server's responsibility to do the appropriate\r\nnormalization, rather than rejecting the name.\r\n", "notes": "It has been brought to my attention that there is a fundamental contradiction between the idea\r\n(derived from NFSv3) that file name strings can be  opaque, and the existence of the errors\r\nNFS4ERR_BADCHAR and  NFS4ERR_BADNAME, which, by their nature presume at least some\r\nknowledge of the character encoding being used.\r\n\r\nThis has not turned out to be a problem in practice because clients always use encodings that\r\nmeet certain criteria explained in the replacement text.  However, these criteria need to be\r\ndocumented clearly and appropriate warnings given.  These criteria were observed by\r\nimplementers of NFSv3 but are not explicitly mentioned in RFC1813.", "submit_date": "2023-08-10", "submitter_name": "David Noveck", "verifier_id": "", "verifier_name": null, "update_date": "2023-11-10 22:41:50"}, {"errata_id": "7596", "doc-id": "RFC6230", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.1", "orig_text": "ext-header = hname \":\" SP hval CRLF", "correct_text": "ext-header = hname \":\" SP hval", "notes": "Same as errata 1954 (RFC 4975); the rule:\r\n\r\nheaders = header-name CRLF\r\n\r\nalready suffixes every header with a CRLF. The result is that the extension headers are followed by 2 CRLFs, introducing empty lines inside the header segment. This appears to be unintended, since none of the other headers have a terminating CRLF in their production rules, only the ext-header.", "submit_date": "2023-08-11", "submitter_name": "Kim Hermansson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7601", "doc-id": "RFC8250", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "This field is initialized at a random number and incremented\r\nmonotonically for each packet of the session flow of the\r\n5-tuple.  The random-number initialization is intended to make\r\nit harder to spoof and insert such packets.", "correct_text": "This field is initialized at a random number and incremented\r\nsequentially for each packet of the session flow of the\r\n5-tuple.  The random-number initialization is intended to make\r\nit harder to spoof and insert such packets.", "notes": "The term monotonically increasing just means that the value must not decrease; it does not mean that it must increase. For example a monotonically increasing sequence may be: 1,2,2,2,2,2,2,2. On the other hand, a sequentially increasing example would be 1,2,3,4,5,6,7,8. I believe that the authors intended for the value to increase sequentially for each packet.", "submit_date": "2023-08-12", "submitter_name": "Chris Lonvick", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2023-08-29 14:17:14"}, {"errata_id": "7609", "doc-id": "RFC7241", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "(available at <https://datatracker.ietf.org/documents/LIAISON/file41.pdf>)", "correct_text": "(available at <https://www.ietf.org/lib/dt/documents/LIAISON/file41.pdf>)", "notes": "The datatracker location of the liaison statement from IEEE 802 has moved, leaving a dead link in RFC 7241.\n --VERIFIER NOTES-- \n   The link was correct at time of publication. In addition, a redirect is in place so it still works.", "submit_date": "2023-08-19", "submitter_name": "Peter Yee", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-10 01:54:54"}, {"errata_id": "7597", "doc-id": "RFC3264", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   The interpretation of fmtp parameters in an offer depends on the\r\n   parameters.  In many cases, those parameters describe specific\r\n   configurations of the media format, and should therefore be processed\r\n   as the media format value itself would be.  This means that the same\r\n   fmtp parameters with the same values MUST be present in the answer if\r\n   the media format they describe is present in the answer.  Other fmtp\r\n   parameters are more like parameters, for which it is perfectly\r\n   acceptable for each agent to use different values.  In that case, the\r\n   answer MAY contain fmtp parameters, and those MAY have the same\r\n   values as those in the offer, or they MAY be different.  SDP\r\n   extensions that define new parameters SHOULD specify the proper\r\n   interpretation in offer/answer.", "correct_text": "   The interpretation of fmtp parameters in an offer depends on the\r\n   parameters.  In many cases, those parameters describe specific\r\n   configurations of the media format, and should therefore be processed\r\n   as the media format value itself would be.  This means that the same\r\n   fmtp parameters with the same values MUST be present in the answer if\r\n   the media format they describe is present in the offer.  Other fmtp\r\n   parameters are more like parameters, for which it is perfectly\r\n   acceptable for each agent to use different values.  In that case, the\r\n   answer MAY contain fmtp parameters, and those MAY have the same\r\n   values as those in the offer, or they MAY be different.  SDP\r\n   extensions that define new parameters SHOULD specify the proper\r\n   interpretation in offer/answer.", "notes": "This indicated that the same fmtp parameters with the same values MUST be present in the answer if the media format they describe is present in the **answer**.\r\n\r\nI believe the second instance of **answer** should be replace with **offer**, otherwise the quoted text does not makes sense I think.\n --VERIFIER NOTES-- \nSee https://mailarchive.ietf.org/arch/msg/mmusic/jDXva6XmGQ4Z6_PUW_TxhZp0-Hc/", "submit_date": "2023-08-11", "submitter_name": "Hugo Tunius", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-09 20:30:52"}, {"errata_id": "7598", "doc-id": "RFC8773", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "When the \"psk_key_exchange_modes\" extension is included in the\r\nServerHello message, servers MUST select the psk_dhe_ke mode\r\nfor the initial handshake.", "correct_text": "When the \"psk_key_exchange_modes\" extension is included in the\r\nClientHello message, servers MUST select the psk_dhe_ke mode\r\nfor the initial handshake.", "notes": "According to RFC 8446, the \"psk_key_exchange_modes\" extension only appears in the ClientHello message. Further, the slides presented on this topic at IETF 101show the \"psk_key_exchange_modes\" extension in the ClientHello message and no other place.  It is pretty clear that this is an editorial error.\r\n", "submit_date": "2023-08-11", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-10 01:51:09"}, {"errata_id": "7599", "doc-id": "RFC9110", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.4.1", "orig_text": "All 1xx (Informational), 204 (No Content), and 304 (Not Modified)\r\nresponses do not include content.\r\n\r\nAll other responses do include content, although that content might\r\nbe of zero length.", "correct_text": "All 1xx (Informational), 204 (No Content), 205 (Reset Content), \r\nand 304 (Not Modified) responses do not include content.\r\n\r\nAll other responses do include content, although that content might\r\nbe of zero length.", "notes": "Per section 15.3.6 (205 No Content), it says that servers MUST NOT generate a response. Section 6.4.1 says that \"All 1xx, 204, and 304 response don't include content and others do.\" even though 205 response mustn't generate content.\n --VERIFIER NOTES-- \nIn rejecting this Errata report I note that the reported text is not an error, but a deliberate decision of the authors and working group.", "submit_date": "2023-08-11", "submitter_name": "Justine Krejcha", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-10-23 09:39:12"}, {"errata_id": "8564", "doc-id": "RFC7628", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.4", "orig_text": "[Negotiate TLS...]\r\nC: AUTH OAUTHBEARER bix1c2VyPXNvbWV1c2VyQGV4YW1wbGUuY29tLAFhdXRoPUJlYXJl\r\n       ciB2RjlkZnQ0cW1UYzJOdmIzUmxja0JoZEhSaGRtbHpkR0V1WTI5dENnPT0BAQ==\r\nS: 334 eyJzdGF0dXMiOiJpbnZhbGlkX3Rva2VuIiwic2NoZW1lcyI6ImJlYXJlciBtYWMiL\r\n       CJzY29wZSI6Imh0dHBzOi8vbWFpbC5leGFtcGxlLmNvbS8ifQ==\r\n\r\n(...)\r\n\r\n   n,user=someuser@example.com,^A\r\n   auth=Bearer vF9dft4qmTc2Nvb3RlckBhdHRhdmlzdGEuY29tCg==^A^A\r\n", "correct_text": "[Negotiate TLS...]\r\nC: AUTH OAUTHBEARER bixhPXNvbWV1c2VyQGV4YW1wbGUuY29tLAFhdXRoPUJlYXJlciB2\r\n       RjlkZnQ0cW1UYzJOdmIzUmxja0JoZEhSaGRtbHpkR0V1WTI5dENnPT0BAQ==\r\nS: 334 eyJzdGF0dXMiOiJpbnZhbGlkX3Rva2VuIiwic2NoZW1lcyI6ImJlYXJlciBtYWMiL\r\n       CJzY29wZSI6Imh0dHBzOi8vbWFpbC5leGFtcGxlLmNvbS8ifQ==\r\n\r\n(...)\r\n\r\n   n,a=someuser@example.com,^A\r\n   auth=Bearer vF9dft4qmTc2Nvb3RlckBhdHRhdmlzdGEuY29tCg==^A^A\r\n\r\n", "notes": "The gs2-header defined in RFC 5801 has a=authzid, not name=authzid.", "submit_date": "2025-09-04", "submitter_name": "Kim Alvefur", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-09-04 15:37:43"}, {"errata_id": "8565", "doc-id": "RFC9605", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5.1", "orig_text": "using the authenticated counter mode of AES", "correct_text": "using the unauthenticated counter mode of AES", "notes": "AES-CTR is not an authenticated encryption mode.", "submit_date": "2025-09-04", "submitter_name": "Richard Barnes", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 18:48:42"}, {"errata_id": "8566", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.6", "orig_text": "The image reference below cannot be resolved within this\r\n      MIME message, since it contains a reference from an outside\r\n      body part to an inside body part, which is not supported\r\n      by this standard.\r\n      <IMG SRC=images/ietflogo2e.gif\"\r\n      ALT=\"IETF logo with transparent background\">", "correct_text": "The image reference below cannot be resolved within this\r\n      MIME message, since it contains a reference from an outside\r\n      body part to an inside body part, which is not supported\r\n      by this standard.\r\n      <IMG SRC=\"images/ietflogo2e.gif\"\r\n      ALT=\"IETF logo with transparent background\">", "notes": "Unbalanced double qoutes in value for SRC attribute. Both images/ietflogo2e.gif\r\nand \"images/ietflogo2e.gif\" are valid. Quoted version is consistent with other attribute values in this document.", "submit_date": "2025-09-07", "submitter_name": "David Ritchie", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-09-09 15:36:20"}, {"errata_id": "7610", "doc-id": "RFC3552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.5", "orig_text": "Note that it is only necessary to authenticate one side of the\r\n   transaction in order to prevent man-in-the-middle attacks.  In such a\r\n   situation the the peers can establish an association in which only\r\n   one peer is authenticated.  In such a system, an attacker can\r\n   initiate an association posing as the unauthenticated peer but cannot\r\n   transmit or access data being sent on a legitimate connection.  This\r\n   is an acceptable situation in contexts such as Web e-commerce where\r\n   only the server needs to be authenticated (or the client is\r\n   independently authenticated via some non-cryptographic mechanism such\r\n   as a credit card number).", "correct_text": "Note that it is only necessary to authenticate one side of the\r\n   transaction in order to prevent man-in-the-middle attacks.  In such a\r\n   situation the peers can establish an association in which only\r\n   one peer is authenticated.  In such a system, an attacker can\r\n   initiate an association posing as the unauthenticated peer but cannot\r\n   transmit or access data being sent on a legitimate connection.  This\r\n   is an acceptable situation in contexts such as Web e-commerce where\r\n   only the server needs to be authenticated (or the client is\r\n   independently authenticated via some non-cryptographic mechanism such\r\n   as a credit card number).", "notes": "2nd sentence fix \"the the\".", "submit_date": "2023-08-19", "submitter_name": "Pete Jorgensen", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind", "update_date": "2024-01-11 16:43:21"}, {"errata_id": "7604", "doc-id": "RFC6265", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.  Overview", "orig_text": "User agents MAY ignore Set-Cookie headers contained in\r\nresponses with 100-level status codes but MUST process Set-Cookie\r\nheaders contained in other responses (including responses with 400-\r\nand 500-level status codes).", "correct_text": "Cookie-enabled user agents MAY ignore Set-Cookie headers contained in\r\nresponses with 100-level status codes but MUST process Set-Cookie\r\nheaders contained in other responses (including responses with 400-\r\nand 500-level status codes).", "notes": "The concern is that the sentence in its original form may be read to mean that all conforming user agents MUST process Set-Cookie headers contained in non 100-level responses, when, differing behavior is allowed as described in sections 5.2 and 7.2:\r\n\r\nSection 5.2, paragraph 1: \"When a user agent receives a Set-Cookie header field in an HTTP response, the user agent MAY ignore the Set-Cookie header field in its entirety.\"\r\n\r\nSection 7.2, paragraph 2: \"When cookies are disabled, ... the user agent MUST NOT process Set-Cookie headers in inbound HTTP responses.\"\r\n\r\nThe suggested correction is one possible way to alleviate this erratum concern. However, the erratum author does not know if this is the most optimal disambiguation method.", "submit_date": "2023-08-15", "submitter_name": "Ted Zhu", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2025-02-12 11:54:29"}, {"errata_id": "7605", "doc-id": "RFC4645", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "The IANA language subtag registry can be found at\r\n   <http://www.iana.org/numbers.html> under \"Language Tags\".", "correct_text": "The IANA language subtag registry can be found at\r\n   <https://www.iana.org/protocols> under \"Language Tags\", or\r\n    <https://www.iana.org/assignments/language-tags/language-tags.xhtml>", "notes": "Language tags and sub tags are obsolete\n --VERIFIER NOTES-- \n   The current text was correct at the time of writing, and is still correct (with the redirect).", "submit_date": "2023-08-16", "submitter_name": "Timothy McSweeney", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-05-13 11:12:21"}, {"errata_id": "7689", "doc-id": "RFC8906", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.8", "orig_text": "expect: DO=1 to be present if an RRSIG is in the response\r\n", "correct_text": "expect: flag: do to be present if an RRSIG is in the response", "notes": "The same section has `expect: flag: aa to be present`, and when running the suggested command, no `DO=1` is shown, which makes the advice unhelpful.\r\n\r\nSample command:\r\n```\r\n$ dig +nocookie +edns=0 +noad +norec +dnssec soa $zone @$server\r\n\r\n; <<>> DiG 9.16.44-Debian <<>> +nocookie +edns +noad +norec +dnssec soa powerdns.com @2600:3c03::f03c:91ff:fe55:e54d\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 45268\r\n;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\r\n\r\n;; OPT PSEUDOSECTION:\r\n; EDNS: version: 0, flags: do; udp: 1232\r\n;; QUESTION SECTION:\r\n;powerdns.com.\t\t\tIN\tSOA\r\n\r\n;; Query time: 0 msec\r\n;; SERVER: 2600:3c03::f03c:91ff:fe55:e54d#53(2600:3c03::f03c:91ff:fe55:e54d)\r\n;; WHEN: Thu Oct 26 22:26:44 UTC 2023\r\n;; MSG SIZE  rcvd: 41\r\n```\r\n\r\n[ WK: For more info, see thread: https://mailarchive.ietf.org/arch/msg/dnsop/gA71yLWLZ8-eylYgKjNy9emP9hU/ \r\n\r\nIt was also suggested that reminding readers that \"@$server\"  in this case refers to an\r\nauthoritative server, and not a recursive server - See Sec 8 ]", "submit_date": "2023-10-26", "submitter_name": "Josh Soref", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-01-29 17:37:58"}, {"errata_id": "7606", "doc-id": "RFC3711", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "B.3", "orig_text": "   This section provides test data for the default key derivation\r\n   function, which uses AES-128 in Counter Mode.  In the following, we\r\n   walk through the initial key derivation for the AES-128 Counter Mode\r\n   cipher, which requires a 16 octet session encryption key and a 14\r\n   octet session salt, and an authentication function which requires a\r\n   94-octet session authentication key.\r\n\r\n(...)\r\n\r\n   Below, the auth key is shown on the left, while the corresponding AES\r\n   input blocks are shown on the right.\r\n\r\n   auth key                           AES input blocks\r\n   CEBE321F6FF7716B6FD4AB49AF256A15   0EC675AD498AFEEAB6960B3AABE60000\r\n   6D38BAA48F0A0ACF3C34E2359E6CDBCE   0EC675AD498AFEEAB6960B3AABE60001\r\n   E049646C43D9327AD175578EF7227098   0EC675AD498AFEEAB6960B3AABE60002\r\n   6371C10C9A369AC2F94A8C5FBCDDDC25   0EC675AD498AFEEAB6960B3AABE60003\r\n   6D6E919A48B610EF17C2041E47403576   0EC675AD498AFEEAB6960B3AABE60004\r\n   6B68642C59BBFC2F34DB60DBDFB2       0EC675AD498AFEEAB6960B3AABE60005", "correct_text": "   This section provides test data for the default key derivation\r\n   function, which uses AES-128 in Counter Mode.  In the following, we\r\n   walk through the initial key derivation for the AES-128 Counter Mode\r\n   cipher, which requires a 16 octet session encryption key and a 14\r\n   octet session salt, and an authentication function which requires a\r\n   20-octet session authentication key.\r\n\r\n(...)\r\n\r\n   Below, the auth key is shown on the left, while the corresponding AES\r\n   input blocks are shown on the right.\r\n\r\n   auth key blocks                    AES input blocks\r\n   CEBE321F6FF7716B6FD4AB49AF256A15   0EC675AD498AFEEAB6960B3AABE60000\r\n   6D38BAA4                           0EC675AD498AFEEAB6960B3AABE60001\r\n \r\n   auth key: CEBE321F6FF7716B6FD4AB49AF256A156D38BAA4", "notes": "The RFC specifies a 160 bit, 20-octet session authentication key throughout (section 5.2, Section 8.2, Section 9.2 and Section 9.5), but the vectors and derivation in section B.3 specifies the need for a 94-octet session key, and includes test vectors as such.\n --VERIFIER NOTES-- \nThis test vector does not contradict any other section. It explicitly says that it is a test vector for \"an authentication function which requires a 94-octet session authentication key\".\r\n\r\nIn rejecting this Errata report I note that the reported text is not an error, but a deliberate decision of the authors and working group.", "submit_date": "2023-08-17", "submitter_name": "David Satterlee", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-07 09:26:09"}, {"errata_id": "7607", "doc-id": "RFC7662", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "a given token has been issued by this authorization server, has not been revoked by the resource owner, and is within its given time window of validity", "correct_text": "a given token has been issued by this authorization server, has not been revoked by the resource owner or client, and is within its given time window of validity", "notes": "RFC 7009 defined a given token can be revoke by client, so should write client here.", "submit_date": "2023-08-17", "submitter_name": "Fulong Sun", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7642", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1", "orig_text": " Instead, she authenticates directly with a server trusted by the photo-sharing service (authorization server), which issues the printing service delegation-\r\nspecific credentials (access token).", "correct_text": "Instead, she directly authenticates with a trusted server, the authorization server, which issues delegation-specific credentials, known as access tokens, to the printing service for controlled and secure access.", "notes": "The sentence is confusing, and the reader might confuse the Authorization Server with the Resource Server.", "submit_date": "2023-09-17", "submitter_name": "Wilhelm Fast", "verifier_id": "", "verifier_name": null, "update_date": "2023-09-18 22:21:44"}, {"errata_id": "7624", "doc-id": "RFC6241", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3.", "orig_text": "     <rpc-reply xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <rpc-error>\r\n         <error-type>rpc</error-type>\r\n         <error-tag>missing-attribute</error-tag>\r\n         <error-severity>error</error-severity>\r\n         <error-info>\r\n           <bad-attribute>message-id</bad-attribute>\r\n           <bad-element>rpc</bad-element>\r\n         </error-info>\r\n       </rpc-error>\r\n     </rpc-reply>", "correct_text": "     <nc:rpc-reply xmlns:nc=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n       <nc:rpc-error>\r\n         <nc:error-type>rpc</nc:error-type>\r\n         <nc:error-tag>missing-attribute</nc:error-tag>\r\n         <nc:error-severity>error</nc:error-severity>\r\n         <nc:error-info>\r\n           <nc:bad-attribute>message-id</nc:bad-attribute>\r\n           <nc:bad-element>nc:rpc</nc:bad-element>\r\n         </nc:error-info>\r\n       </nc:rpc-error>\r\n     </nc:rpc-reply>", "notes": "The original error response is referring to the NETCONF messages layer attribute \"message-id\", which does not belong to any XML namespace. The response is not properly encoding xs:QName values of elements \"bad-attribute\" and \"bad-element\" by placing them both into the default XML namespace. Proposed new text (while verbose) ensures that the values are placed into their respective proper XML namespaces.\n --VERIFIER NOTES-- \n   The original error response is valid when validated against netconf XSD defined in RFC 4741.", "submit_date": "2023-08-31", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2024-05-10 17:37:28"}, {"errata_id": "7625", "doc-id": "RFC7748", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "swap ^= k_t", "correct_text": "swap = swap XOR k_t", "notes": "The '^' symbol is used inconsistently. In the line `swap ^= k_t` this symbol means the XOR operation, while later, e.g. in line `x_3 = (DA + CB)^2`, it indicates exponentiation. Pseudocode in this document also denotes the XOR operation in the following way: `x_2 = x_2 XOR dummy`. The inconsistent use of the '^' symbol may cause confusion. If one were to perform the operation `swap = swap (to the power of) k_t` instead of `swap = swap XOR k_t`, they would get incorrect results.", "submit_date": "2023-08-31", "submitter_name": "Tomasz Mioduszewski", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2023-09-04 09:05:42"}, {"errata_id": "7643", "doc-id": "RFC9257", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1. Stack Interface", "orig_text": "   *  OpenSSL and BoringSSL: Applications can specify support for\r\n      external PSKs via distinct ciphersuites in TLS 1.2 and below.\r\n      Also, they can then configure callbacks that are invoked for PSK\r\n      selection during the handshake.  These callbacks must provide a\r\n      PSK identity and key.  The exact format of the callback depends on\r\n      the negotiated TLS protocol version, with new callback functions\r\n      added specifically to OpenSSL for TLS 1.3 [RFC8446] PSK support.\r\n      The PSK length is validated to be between 1-256 bytes (inclusive).\r\n      The PSK identity may be up to 128 bytes long.", "correct_text": "   *  OpenSSL and BoringSSL: Applications can specify support for\r\n      external PSKs via distinct ciphersuites in TLS 1.2 and below.\r\n      Also, they can then configure callbacks that are invoked for PSK\r\n      selection during the handshake.  These callbacks must provide a\r\n      PSK identity and key.  The exact format of the callback depends on\r\n      the negotiated TLS protocol version, with new callback functions\r\n      added specifically to OpenSSL for TLS 1.3 [RFC8446] PSK support.\r\n      The PSK length is validated to be between 1-256 bytes (inclusive).\r\n      The PSK identity may be up to 128 bytes long. OpenSSL 3.0\r\n      increased PSK maximum length to 512 bytes and PSK identity maximum\r\n      length to 256 bytes to match existing implementations and\r\n      specifications.", "notes": "OpenSSL PSK length and PSK identity length were increased to 256 and 512 octets, respectively, for OpenSSL 3.0. There appear to be implementations and specifications that require these longer lengths. See here for more information:\r\nhttps://github.com/openssl/openssl/pull/12777\r\nhttps://github.com/openssl/openssl/pull/12771", "submit_date": "2023-09-17", "submitter_name": "Heikki Vatiainen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-11-14 15:45:42"}, {"errata_id": "7622", "doc-id": "RFC3720", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "12.1", "orig_text": "   +---------------------------------------------+\r\n   | Name          | Description     | Generator |\r\n   +---------------------------------------------+\r\n   | CRC32C        | 32 bit CRC      |0x11edc6f41|\r\n   +---------------------------------------------+\r\n   | None          | no digest                   |\r\n   +---------------------------------------------+", "correct_text": "   +---------------------------------------------+\r\n   | Name          | Description     | Generator |\r\n   +---------------------------------------------+\r\n   | CRC32C        | 32 bit CRC      |0x1edc6f41|\r\n   +---------------------------------------------+\r\n   | None          | no digest                   |\r\n   +---------------------------------------------+", "notes": "The polynomial should be 0x1edc6f41, not 0x11edc6f41 (which include more 1)", "submit_date": "2023-08-31", "submitter_name": "Wu Kaiqiang", "verifier_id": "", "verifier_name": null, "update_date": "2024-03-11 19:12:22"}, {"errata_id": "7623", "doc-id": "RFC8824", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Section 7.1", "orig_text": "Table 3 \r\n\r\nField\t        FL\tFP\tDI\tTV\tMO\tCDA\tSent [bits]\r\nCoAP Uri-Path\tvar\t1\tDw\tpath\tequal 1\tnot-sent\t", "correct_text": "Table 3 \r\n\r\nField\t        FL\tFP\tDI\tTV\t    MO\t  CDA\tSent [bits]\r\nCoAP \r\nUri-Path\tvar\t1\tDw    1st. element  equal not-sent\r\n                                      of the path\t\t", "notes": "A MO 'equal 1' has not been defined in the possibilities of SCHC. However, when this table was written and never updated, it was one option to say that we wanted to check only the first element. To comply with the RFC8724, the idea of only matching the first element of the path needs to be expressed in the corrected text way.\r\n\r\n---- verifier note ---\r\nLet's indeed fix this in draft-ietf-schc-8824-update", "submit_date": "2023-08-31", "submitter_name": "Ana Minaburo", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 06:24:02"}, {"errata_id": "7619", "doc-id": "RFC1945", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "Entity-Header fields define optional metainformation about the Entity-Body or", "correct_text": "Entity-Header fields define optional meta information about the Entity-Body or", "notes": "There should be an space between \"meta\" and \"information\"", "submit_date": "2023-08-26", "submitter_name": "Ajay Kumar", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-08-29 20:48:57"}, {"errata_id": "7626", "doc-id": "RFC8295", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1.1.", "orig_text": "0007 Start DS certificate enrollment: Indicates that the client needs\r\n        to begin enrolling its DS certificate.  The PAL entry points to\r\n        a /simpleenroll URI, which is defined in [RFC7030].\r\n", "correct_text": "0007 Start DS certificate enrollment: Indicates that the client needs\r\n        to begin enrolling its DS certificate.  The PAL entry points to\r\n        a /simpleenroll or a /fullcmc URI, both of which are defined in     [RFC7030].\r\n", "notes": "Without this change and taking the 0006 definition into consideration, one might assume that a Simple PKI Request doesn't require the /csrattrs URI to be done beforehand, but the enrollment with a Full PKI Request must be preceded by the /csrattrs URI, which is not required - see the rest of the document, especially Section 9 and [RFC7030].", "submit_date": "2023-09-04", "submitter_name": "Piotr Popis", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7627", "doc-id": "RFC5272", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.7", "orig_text": "See Section 5 of [CRMF] for a detailed discussion of POP.", "correct_text": "See Section 4 of [CRMF] for a detailed discussion of POP.", "notes": "This is a purely editorial change.", "submit_date": "2023-09-04", "submitter_name": "Piotr Popis", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-09-05 23:21:11"}, {"errata_id": "7628", "doc-id": "RFC5272", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1.3.1.", "orig_text": "AuthenticatedData content type is used by this document for:\r\n\r\nThe id-cmc-authData control (Section 6.16), and\r\n\r\nThe top-level wrapper in environments where an encryption-only key is being certified.\r\n", "correct_text": "AuthenticatedData content type is used by this document for:\r\n\r\nThe id-cmc-authData control (Section 6.16), and\r\n\r\nThe top-level wrapper in environments where an encryption-only key is being certified or where a shared-secret exists, but a PKI-based trust (needed for SignedData) has not yet been established.\r\n", "notes": "For consistency with the same paragraph and the rest of the document.", "submit_date": "2023-09-04", "submitter_name": "Piotr Popis", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-19 10:57:07"}, {"errata_id": "7620", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.1", "orig_text": "Each party MUST send a \"close_notify\" alert before closing its write\r\nside of the connection, unless it has already sent some error alert.\r\nThis does not have any effect on its read side of the connection.\r\nNote that this is a change from versions of TLS prior to TLS 1.3 in\r\nwhich implementations were required to react to a \"close_notify\" by\r\ndiscarding pending writes and sending an immediate \"close_notify\"\r\nalert of their own.  That previous requirement could cause truncation\r\nin the read side.  Both parties need not wait to receive a\r\n\"close_notify\" alert before closing their read side of the\r\nconnection, though doing so would introduce the possibility of\r\ntruncation.", "correct_text": "Each party MUST send a \"close_notify\" alert before closing its write\r\nside of the connection, unless it has already sent some error alert.\r\nThis SHOULD NOT have any effect on the read side of the sender's connection;\r\nparties SHOULD receive a \"close_notify\" alert before closing the read side of their connection.\r\nNote that this is a change from versions of TLS prior to TLS 1.3 in\r\nwhich receivers were required to react to a \"close_notify\" by\r\ndiscarding pending writes and sending an immediate \"close_notify\"\r\nalert of their own.  That previous requirement could cause truncation\r\nin the read side.  Both parties need not wait to receive a\r\n\"close_notify\" alert before closing their read side of the\r\nconnection, though doing so would introduce the possibility of\r\ntruncation.", "notes": "As-is there's a specification-level vulnerability: Specification-compliant implementations may be vulnerable to truncation attacks.\r\n\r\nI suggest using SHOULD NOT & SHOULD for better signposting and to avoid specification-level vulnerability.\r\n\r\nI also suggest minor tweaks for readability.\n --VERIFIER NOTES-- \n   Rejected by WG. See https://github.com/tlswg/tls13-spec/pull/1357/commits/d2a36a8029067cb20ff431fcaa8b3a4e537e4bf6", "submit_date": "2023-08-28", "submitter_name": "Ben Smyth", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-17 18:54:03"}, {"errata_id": "7615", "doc-id": "RFC918", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Diagram", "orig_text": "RECV", "correct_text": "RCEV", "notes": "The \"RECV\" in the Diagram section should be changed to \"RCEV\". The \"RECV\" is only used one time, where \"RCEV\" is used 6 times.", "submit_date": "2023-08-24", "submitter_name": "Ben van Hartingsveldt", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-08-25 20:46:12"}, {"errata_id": "7616", "doc-id": "RFC3935", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1", "orig_text": "Technical competence - the issues on which the IETF produces its\r\n      documents are issues where the IETF has the competence needed to\r\n      speak to them, and that the IETF is willing to listen to\r\n      technically competent input from any source.", "correct_text": "Technical competence - the issues on which the IETF produces its\r\n      documents are issues where the IETF has the competence needed to\r\n      speak to them, and where the IETF is willing to listen to\r\n      technically competent input from any source.", "notes": "The word \"that\" was the wrong part of speech and referred to nothing.\r\n(I am reporting this now because this clause has been quoted at https://www.ietf.org/about/introduction/ where it jumped out at me.)\r\n\r\n===RFC Editor Notes===\r\nAnother possible way to update:\r\n\r\nTechnical competence - the IETF produces its documents on issues \r\nfor which it has the competence needed to speak to them and the \r\nwillingness to listen to technically competent input from any source.", "submit_date": "2023-08-25", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-10 02:04:47"}, {"errata_id": "7654", "doc-id": "RFC8955", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   This NLRI information is encoded using MP_REACH_NLRI and\r\n   MP_UNREACH_NLRI attributes, as defined in [RFC4760].  When\r\n   advertising Flow Specifications, the Length of the Next-Hop Network\r\n   Address MUST be set to 0.  The Network Address of the Next-Hop field\r\n   MUST be ignored.\r\n", "correct_text": "   This NLRI information is encoded using MP_REACH_NLRI and\r\n   MP_UNREACH_NLRI attributes, as defined in [RFC4760].  When\r\n   advertising Flow Specifications, the \"Length of Next Hop Network \r\n   Address\" field MUST be set to 0.  The \"Network Address of Next Hop\" \r\n   field MUST be ignored.", "notes": "The fields are named incorrectly in the original text -- they don't match the field names they're referencing in RFC 4760. Most importantly there's no hyphen in the RFC 4760 field definitions, but there are other differences too.", "submit_date": "2023-09-22", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2024-10-09 15:10:08"}, {"errata_id": "7657", "doc-id": "RFC8006", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.10", "orig_text": "   {\r\n     \"metadata\": [\r\n       {\r\n         \"generic-metadata-type\": \"MI.TimeWindowACL\",\r\n         \"generic-metadata-value\": {\r\n           \"times\": [\r\n             \"windows\": [\r\n               {\r\n                 \"start\": \"1213948800\",\r\n                 \"end\": \"1478047392\"\r\n               }\r\n             ],\r\n             \"action\": \"allow\"\r\n           ]\r\n         }\r\n       }\r\n     ]\r\n   }", "correct_text": "   {\r\n     \"metadata\": [\r\n       {\r\n         \"generic-metadata-type\": \"MI.TimeWindowACL\",\r\n         \"generic-metadata-value\": {\r\n           \"times\": [\r\n              {\r\n                \"windows\": [\r\n                  {\r\n                    \"start\": 1213948800,\r\n                    \"end\": 1478047392\r\n                  }\r\n                ],\r\n                \"action\": \"allow\"\r\n              }\r\n           ]\r\n         }\r\n       }\r\n     ]\r\n   }", "notes": "1. The \"times\" property of  the TimeWindowACL object has an array of TimeWindowRule type, so I changed it to \"windows\" and \"action\" are contained in braces.\r\n2. The \"start\" and \"end\" property of the TimeWindow object have a Time type, which is an alias of Integer. So I changed their values (\"1213948800\", \"1478047392\") to Integer (1213948800, 1478047392).\r\n", "submit_date": "2023-09-26", "submitter_name": "Kazuki Takashima", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-07 08:44:44"}, {"errata_id": "7659", "doc-id": "RFC2526", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "Specifically, for IPv6 address types required to have to have 64-bit\r\ninterface identifiers in EUI-64 format, these reserved subnet anycast\r\naddresses are constructed as follows:", "correct_text": "Specifically, for IPv6 address types required to have 64-bit\r\ninterface identifiers in EUI-64 format, these reserved subnet anycast\r\naddresses are constructed as follows:", "notes": "There is a duplicate \"to have\" in the sentence.", "submit_date": "2023-09-28", "submitter_name": "Marc Muehlfeld", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-09-28 23:36:21"}, {"errata_id": "7658", "doc-id": "RFC5280", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1", "orig_text": "The hyperlink to \"Section 2.6.1\" of RFC 4158 in this text is incorrect:\r\n\r\n   *  In step 6, Insignificant Character Removal, perform white space\r\n      compression as specified in Section 2.6.1, Insignificant Space\r\n      Handling, of [RFC4518].\r\n\r\nIt currently points to https://www.rfc-editor.org/rfc/rfc5280#section-2.6.1", "correct_text": "It should point to https://www.rfc-editor.org/rfc/rfc4518#section-2.6.1", "notes": "Simple fix to correct an incorrect hyperlink.", "submit_date": "2023-09-26", "submitter_name": "Sean Mullan", "verifier_id": "", "verifier_name": "Roman Danyliw", "update_date": "2024-01-11 21:39:58"}, {"errata_id": "7629", "doc-id": "RFC5272", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.1.3.4.", "orig_text": "For the PKI Response, SignedData allows the server to sign the returning data, if any exists, and to carry the certificates and CRLs corresponding to the PKI Request.  If no data is being returned beyond the certificates and CRLs, the EncapsulatedInfo and SignerInfo fields are not populated.", "correct_text": "For the PKI Response, SignedData allows the server to sign the returning data, if any exists, and to carry the certificates and CRLs corresponding to the PKI Request.  If no data is being returned beyond the certificates and CRLs, the eContent field in the EncapsulatedContentInfo and SignerInfo fields are not populated.\r\n\r\nOnly if the server is unable to sign the response (and unable to use any RecipientInfo options of the AuthenticatedData content type), and at the same time it should send a negative response, Full PKI Response SignedData type containing a CMC Status Info control MUST be returned using a CMCFailInfo with a value of internalCAError and a bodyPartID of 0, and the eContent field in the EncapsulatedContentInfo as well as SignerInfo fields MUST not be populated.\r\n", "notes": "This change is needed to comply with Errata ID 7379 (the first para) and covers the case (the second para) where the server shall send a negative response (Full PKI Response) as it is unable to sign the certificate and at the same time it is unable to sign the response itself (e.g. due to a loss in connection to the HSM).", "submit_date": "2023-09-04", "submitter_name": "Piotr Popis", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:06:48"}, {"errata_id": "7630", "doc-id": "RFC826", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "The Problem:", "orig_text": "The world is a jungle in general, and the networking game\r\ncontributes many animals.  ", "correct_text": "The world is a jungle in general, and in the networking game\r\ncontribute many animals.  ", "notes": "The original text makes no sense.\n --VERIFIER NOTES-- \nWhile the original text is somewhat idiomatic, it makes perfect sense. The proposed rewrite, on the other hand, doesn't.", "submit_date": "2023-09-05", "submitter_name": "enea eugen", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-12 01:23:15"}, {"errata_id": "7631", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "This protects the client from substitution of the authentication code.", "correct_text": "This protects the client from substitution of the authorization code.", "notes": "It will be a bit confusing to figure out if it is a MAC or an authorization code.", "submit_date": "2023-09-05", "submitter_name": "Daiki Usami", "verifier_id": "", "verifier_name": null, "update_date": "2024-04-10 03:41:37"}, {"errata_id": "7633", "doc-id": "RFC9112", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   Although the line terminator for the start-line and fields is the\r\n   sequence CRLF, a recipient MAY recognize a single LF as a line\r\n   terminator and ignore any preceding CR.", "correct_text": "   Although the line terminator for the start-line, fields, chunk\r\n   and last-chunk is the sequence CRLF, a recipient MAY recognize\r\n   a single LF as a line terminator and ignore any preceding CR.", "notes": "chunked encoding (section 6.3) uses CRLF for line/framing delimiters in the same manner as other HTTP message sections. But these lines are not listed as a possible sites of bare-LF line terminator. Which makes for an unnecessary parser exception and complicates possible request smuggling robustness between implementations.\n --VERIFIER NOTES-- \nThe difference was intentional. A chunked parser is not a start line or field parser (it is a message body parser) and it is supposed to be less forgiving because it does not have to retain backwards compatibility with 1.0 parsers.\r\n\r\nHence, bare LF around the chunk sizes would be invalid and should result in the connection being marked as invalid.\r\n\r\nIn any case, suggestions to further hardening of the chunked parser would have to be defined in that section, and would need to be achieved through a consensus document, not in an errata report.", "submit_date": "2023-09-06", "submitter_name": "Amos Jeffries", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-11-07 10:08:59"}, {"errata_id": "7634", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   Certificate  ::=  SEQUENCE  {\r\n        tbsCertificate       TBSCertificate,\r\n        signatureAlgorithm   AlgorithmIdentifier,\r\n        signatureValue       BIT STRING  }", "correct_text": "   Certificate  ::=  SEQUENCE  {\r\n        tbsCertificate       TBSCertificate,\r\n        signatureAlgorithm   AlgorithmIdentifier,\r\n        signature            BIT STRING  }", "notes": "The definition in section 4.1 disagrees with the definition in appendix A.1 (page 116) on whether the name of the field containing the signature is \"signatureValue\" or \"signature\". This error appears in RFC 3280 and RFC 2459 as well.\r\n\r\nThe versions of X.509 in force when RFCs 2459, 3280, and 5280 were published use neither of those names. (Those versions of X.509 considered a signature to be an encrypted hash and called the field \"encrypted\".) The current version, ITU-T X.509 (10/2019), defines this field to be \"signature\" in section 6.2.1. (X.509 defines the Certificate type using a component type of SIGNATURE, which has two fields named \"algorithmIdentifier\" and \"signature\".)\r\n\r\nIn addition to changing the field name in the definition of the Certificate type in section 4.1, the title and text of subsection 4.1.1.3 should be updated to replace \"signatureValue\" with \"signature\".\r\n\r\nVerifier note:  Hold for document update to avoid changes that potentially break ASN.1", "submit_date": "2023-09-08", "submitter_name": "Nick Harper", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-10-29 15:13:01"}, {"errata_id": "7637", "doc-id": "RFC9450", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "IEEE 802.11 has identified a set of real applications\r\n[IEEE80211RTA], which may use the IEEE802.11 standards.  They\r\ntypically emphasize strict end-to-end delay requirements.", "correct_text": "IEEE 802.11 has identified a set of real-time applications\r\n[IEEE80211RTA], which may use the IEEE 802.11 standards.  They\r\ntypically emphasize strict end-to-end delay requirements.", "notes": "Given both the context and the title of the referenced document, \"real-time\" makes more sense here than \"real\".\n --VERIFIER NOTES-- \n   Authors note that \"real\" is intended, to mean \"not just hypothetical.\" See https://mailarchive.ietf.org/arch/msg/raw/BRwbIzNaNVWgGo-fptJ2ZKAeOBc/", "submit_date": "2023-09-10", "submitter_name": "Peter Yee", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-11 18:13:02"}, {"errata_id": "7638", "doc-id": "RFC5651", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "   Beyond support for congestion control, LCT provides a number of\r\n   fields and supports functionality commonly required by many\r\n   protocols.  For example, LCT provides a Transmission Session ID that\r\n   can be used to identify to which session each received packet\r\n   belongs.  This is important because a receiver may be joined to many\r\n   sessions concurrently, and thus it is very useful to be able to\r\n   demultiplex packets as they arrive according to the session to which\r\n   they belong.  As another example, there are optional fields within\r\n   the LCT packet header for identifying the object about which\r\n   information is carried in the packet payload.", "correct_text": "   Beyond support for congestion control, LCT provides a number of \r\n   fields and supports functionality commonly required by many \r\n   protocols.  For example, LCT provides a Transport Session ID that \r\n   can be used to identify to which session each received packet \r\n   belongs.  This is important because a receiver may be joined to many \r\n   sessions concurrently, and thus it is very useful to be able to \r\n   demultiplex packets as they arrive according to the session to which \r\n   they belong.  As another example, there are optional fields within \r\n   the LCT packet header for identifying the object about which \r\n   information is carried in the packet payload.", "notes": "There is an inconsistency in the definition of the TSI acronym. There are 6 instances of TransPORT session identifier/ID, and 2 instances of TransMISSION session identifier/ID. The other instance is in section 3, paragraph 3 (\"One of the required fields is the TransMISSION Session ID (TSI).\")", "submit_date": "2023-09-11", "submitter_name": "Sam Hurst", "verifier_id": "", "verifier_name": null, "update_date": "2023-11-10 22:12:29"}, {"errata_id": "7639", "doc-id": "RFC8029", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.5", "orig_text": "If the Reply Mode in the echo request is \"Reply via an\r\nIPv4 UDP packet with Router Alert\", then the IP header MUST contain\r\nthe Router Alert IP Option of value 0x0 [RFC2113] for IPv4 or 69\r\n[RFC7506] for IPv6.", "correct_text": "If the Reply Mode in the echo request is \"Reply via an\r\nIPv4/IPv6 UDP packet with Router Alert\", then the IP header MUST contain\r\nthe Router Alert IP Option of value 0x0 [RFC2113] for IPv4 or 69\r\n[RFC7506] for IPv6.", "notes": "The description of the Reply Mode recorded in the IANA \"Reply Modes\" sub-registry of the \"Multiprotocol Label Switching (MPLS) Label Switched Paths (LSPs) Ping Parameters\" registry is \"Reply via an IPv4/IPv6 UDP packet with Router Alert\".", "submit_date": "2023-09-11", "submitter_name": "Greg Mirsky", "verifier_id": "", "verifier_name": "Andrew Alston", "update_date": "2023-11-12 08:59:34"}, {"errata_id": "7644", "doc-id": "RFC5838", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.7", "orig_text": "   Interface MTU\r\n      The size in octets of the largest address family specific datagram\r\n      that can be sent on the associated interface without\r\n      fragmentation.  The MTUs of common Internet link types can be\r\n      found in Table 7-1 of [MTUDISC].  The Interface MTU SHOULD be set\r\n      to 0 in Database Description packets sent over virtual links.\r\n", "correct_text": "   Interface MTU\r\n      The size in octets of the largest address family specific datagram\r\n      that can be sent on the associated interface without\r\n      fragmentation.  The MTUs of common Internet link types can be\r\n      found in Table 7-1 of [MTUDISC].  The Interface MTU SHOULD be set\r\n      to 0 in Database Description packets sent over (OSPF3) virtual links.\r\n      This recommendation MUST NOT be applied to tunnel and other virtual\r\n      or software interfaces which carry traffic other than OSPF protocol packets.", "notes": "Currently, the language is ambiguous and at least one vendor has implemented OSPF3 sending an MTU of zero on GRE interfaces (and possibly others such as IPIP, IPSEC, etc., as I have not tested these). I believe that the intent of the RFC is to refer strictly to OSPF virtual-links which carry only OSPF protocol data and therefore have no meaningful MTU. When this is mistakenly applied to other forms of \"virtual\" interfaces such as tunnels, the results can be quite harmful.\r\n\r\nAs such, I think that clarification is in order, since the vendor in question is unrepentant and claims their current implementation to be compliant with the RFC.\n --VERIFIER NOTES-- \n   See discussion at https://mailarchive.ietf.org/arch/msg/lsr/wXdOtU9H2vIoA1xs10xZ4oh8bwU/", "submit_date": "2023-09-17", "submitter_name": "Owen DeLong", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-11 22:28:43"}, {"errata_id": "7646", "doc-id": "RFC9449", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "When the authentication server or resource server provides a DPoP-Nonce", "correct_text": "When the authorization server or resource server provides a DPoP-Nonce", "notes": "authentication server must be authorization server", "submit_date": "2023-09-18", "submitter_name": "Michiel Albracht", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-09-18 23:13:33"}, {"errata_id": "7647", "doc-id": "RFC6991", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "[...]\r\n\r\ntypedef object-identifier-128 {\r\n       type object-identifier {\r\n\r\n[...]\r\n\r\n(and other typedefs that appear in the latest revisions of the module)", "correct_text": "[...]\r\n\r\ntypedef object-identifier-128 {\r\n       type yang:object-identifier {\r\n\r\n[...]\r\n\r\n(and other typedefs that appear in the latest revisions of the module)", "notes": "In Section 3, the textual definition of the \"ietf-yang-types\" module presents, in my opinion, inconsistencies when defining typedefs that point to other typedefs in the same module: sometimes the value for the \"type\" key contains the prefix of the module and sometimes not. Please, see the example attached. This can also be applied to other typedefs defined in the latest revisions of the module, such as \"date-no-zone\" and \"time-no-zone\". I think this should be addressed to provide clarification and consistency, and thus can be extended to other modules and the YANG standard as well. Thanks for your time.\n --VERIFIER NOTES-- \nAs discussed on the NETMOD mailing list.: This YANG isn't wrong, and generally I don't think that YANG modules use (or should use) prefixes for types defined in the same module that they are used.\r\n\r\nI agree that there is some inconsistency in RFC 6991 in using the \"yang:\" prefix, but that has been fixed by the author for the next revision of this YANG module.", "submit_date": "2023-09-18", "submitter_name": "David Mart\u00ednez Garc\u00eda", "verifier_id": "", "verifier_name": "Robert Wilton", "update_date": "2024-01-12 14:45:08"}, {"errata_id": "7649", "doc-id": "RFC5340", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.3.3 (in part)", "orig_text": "Interface MTU\r\n      The size in bytes of the largest IPv6 datagram that can be sent\r\n      out the associated interface without fragmentation.  The MTUs of\r\n      common Internet link types can be found in Table 7-1 of [MTUDISC].\r\n      Interface MTU should be set to 0 in Database Description packets\r\n      sent over virtual links.\r\n", "correct_text": "Interface MTU\r\n      The size in bytes of the largest IPv6 datagram that can be sent\r\n      out the associated interface without fragmentation.  The MTUs of\r\n      common Internet link types can be found in Table 7-1 of [MTUDISC].\r\n      Interface MTU should be set to 0 in Database Description packets\r\n      sent over OSPF virtual links. This rule should not be applied to tunnel\r\n      or other software interfaces.", "notes": "OSPF Virtual links carry only OSPF packets so MTU negotiation is not needed and this provision makes sense. For interfaces that have an actual MTU, even though they may be \"virtual\" interfaces, they are not \"virtual links\" in the intended meaning of this paragraph. As such, this change will provide clarification and remove ambiguity from the current standard. At least one popular router vendor implements this RFC as MTU = 0 sent on all GRE interfaces which results in incompatibilities with most other router platforms which expect an actual value. The router vendor points to this provision in the RFCs as justification for their implementation. It is (arguably) a legitimate, if nonsensical interpretation of the existing text.\n --VERIFIER NOTES-- \nSee discussion at https://mailarchive.ietf.org/arch/msg/lsr/mrmkQt9ETTYemukBzl6K_FmgHps/\r\n\r\nIt seems as though there is not clear consensus for the proposed change or even to make a similar change; as such the normal WG process (internet draft, WG consensus) is a better way to pursue the goal.", "submit_date": "2023-09-19", "submitter_name": "Owen DeLong", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-11 22:30:50"}, {"errata_id": "7651", "doc-id": "RFC4226", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.3", "orig_text": "   The Truncate function performs Step 2 and Step 3, i.e., the dynamic\r\n   truncation and then the reduction modulo 10^Digit.  The purpose of\r\n   the dynamic offset truncation technique is to extract a 4-byte\r\n   dynamic binary code from a 160-bit (20-byte) HMAC-SHA-1 result.\r\n\r\n    DT(String) // String = String[0]...String[19]\r\n     Let OffsetBits be the low-order 4 bits of String[19]\r\n     Offset = StToNum(OffsetBits) // 0 <= OffSet <= 15\r\n     Let P = String[OffSet]...String[OffSet+3]\r\n     Return the Last 31 bits of P", "correct_text": "   The Truncate function performs Step 2 and Step 3, i.e., the dynamic\r\n   truncation and then the reduction modulo 10^Digit.  The purpose of\r\n   the dynamic offset truncation technique is to extract a 4-byte\r\n   dynamic binary code from a 160-bit (20-byte) HMAC-SHA-1 result.\r\n\r\n    DT(String) // String = String[0]...String[19]\r\n     Let OffsetBits be the low-order 4 bits of String[19]\r\n     Offset = StToNum(OffsetBits) // 0 <= OffSet <= 15\r\n|    Let P = String[Offset*8]...String[Offset*8+31]\r\n     Return the Last 31 bits of P", "notes": "The uncorrected text uses String as a byte string amidst correct uses of it as a bit string. Section 5.1. clearly states, \"A string always means a binary string, meaning a sequence of zeros and ones.\" The RFC seems to intend that either \"string\" or \"String\" is a bit string, not a byte string, so the use of \"String\" as a byte string in the uncorrected text seems incorrect, out of place, as if a typo.\r\n\r\nAnother apparent typo is use of camel case \"OffSet\" instead of simply \"Offset\". There is no distinction within the RFC that camel case \"OffSet\" has any meaning beyond another spelling for \"Offset\".\r\n\r\nThank you for considering this erratum and for this very straightforward, easy to understand, positively impactful RFC.", "submit_date": "2023-09-21", "submitter_name": "Ashley R. Thomas", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7652", "doc-id": "RFC9252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "   Transposition Offset indicates the bit position, and Transposition\r\n   Length indicates the number of bits that are being taken out of the\r\n   SRv6 SID value and encoded in the MPLS Label field.  The bits that\r\n   have been shifted out MUST be set to 0 in the SID value.", "correct_text": "   Transposition Offset indicates the bit position and Transposition\r\n   Length indicates the number of bits that are being taken out of the\r\n   SRv6 SID value and put into high order bits of MPLS label field. The\r\n   bits that have been shifted out MUST be set to 0 in the SID value.", "notes": "This errata reverses an editorial change that was made during the AUTH48 phase and restores the text that came from the WG and IESG review. Refer https://datatracker.ietf.org/doc/html/draft-ietf-bess-srv6-services-15#page-10\r\n\r\nThis change was made during the AUTH48 since the \"high order bits\" was already covered under various subsections of Sec 6. However, readers have reported that there are other places in Sec 6 and Sec 5 where transposition also occurs and that the original text was still required.", "submit_date": "2023-09-22", "submitter_name": "Ketan Talaulikar", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-05-22 06:03:14"}, {"errata_id": "7653", "doc-id": "RFC3779", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2.3", "orig_text": "Section 3.2.3.8:\r\nThe ASRange type is a SEQUENCE consisting of a min and a max element,\r\nand is used to specify a range of AS identifier values.", "correct_text": "Section 3.2.3.8:\r\nThe ASRange type is a SEQUENCE consisting of a min and a max element,\r\nand is used to specify a range of AS identifier values. The min and max\r\nelements MUST specify two distinct AS identifiers.", "notes": "The introduction in section 1 stresses that the objective of the encoding rules in section 2 and section 3\r\nis to produce unique encoding and minimal size encoding of the information.\r\n\r\nAllowing ASRanges where the minimum value is the same as the maximum value clearly violates the\r\nobjective of specifying a canonical form (in order to produce a unique representation); however the\r\nspecification as-is doesn't forbid min & max to be the same value. The corrected text addresses this.\r\n\r\nNote: erratum edited per https://mailarchive.ietf.org/arch/msg/pkix/iZnCd58xgl1C47GSeFemAU9CF1g/", "submit_date": "2023-09-22", "submitter_name": "Job Snijders", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-12 20:44:15"}, {"errata_id": "7697", "doc-id": "RFC7468", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.3", "orig_text": "   This section does not disturb the official application/pkix-cert\r\n   registration [RFC2585] in any way (which states that \"each '.cer'\r\n   file contains exactly one certificate, encoded in DER format\"), but\r\n   merely articulates a widespread, de facto alternative.\r\n", "correct_text": "   This section does not disturb the official application/pkix-cert\r\n   registration [RFC2585] in any way (which states that \"each '.cer'\r\n   file contains exactly one certificate, encoded in DER format\").\r\n   \r\n   PEM encoded certificates should use the application/pkix-cert+pem\r\n   IANA registration. This distinguishes it from plain DER encoded data\r\n   and also denotes it uses an encoding following syntax and semantics\r\n   of the application/pem media type.  ", "notes": "The current statement allows two possible interpretations:\r\n\r\n1. As PEM wraps DER format, a PEM encoded certificate is also DER encoded. Thus application/pkix-cert is the correct media type also for PEM encoded certificates.\r\n\r\n2. \"Exactly one certificate in DER format\" precludes any additional encoding, e.g. PEM. Thus application/pkix-cert is not valid for PEM encoded certificates.\r\n\r\nIn case 2 is the correct interpretation, a distinct media type for PEM encoded data should be registered with IANA. This media type should be used as a structured syntax type for all PEM wrapped key and certificate types. E.g.:\r\n\r\n- application/pem\r\n- application/pkix-cert+pem \r\n- application/x-x509-ca-cert+pem\r\n\r\nThe latter two would be an amendment to RFC 2585 and and RFC 8894 respectively.\r\n\r\nThe \"+pem\" suffix used conforms to RFC 6838 \"structured syntax\".\r\n\r\nOpenPGP ascii armor (RFC 4880) and SSH public key (RFC 4716) are *not* subtypes of PEM.", "submit_date": "2023-11-10", "submitter_name": "Stefan Br\u00fcns", "verifier_id": "", "verifier_name": null, "update_date": "2023-11-10 21:41:53"}, {"errata_id": "7699", "doc-id": "RFC7084", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   L-3:   An IPv6 CE router MUST advertise itself as a router for the\r\n          delegated prefix(es) (and ULA prefix if configured to provide\r\n          ULA addressing) using the \"Route Information Option\" specified\r\n          in Section 2.3 of [RFC4191].  This advertisement is\r\n          independent of having or not having IPv6 connectivity on the\r\n          WAN interface.", "correct_text": "   L-3:   An IPv6 CE router MUST advertise itself as a router for the\r\n          delegated prefix(es) (and ULA prefix if configured to provide\r\n          ULA addressing) using the \"Route Information Option\" specified\r\n          in Section 2.3 of [RFC4191], but only when correspondent \"Prefix \r\n          Information Option\" is not using the entire prefix delegation or\r\n          its on-link flag is unset. This advertisement is independent of\r\n          having or not having IPv6 connectivity on the WAN interface.", "notes": "When both on-link \"Prefix Information Option\"  and \"Route Information Option\" will contain the same prefix, hosts that receive such Router Advertisements will have to add 2 almost identical routes in their routing tables:\r\n- PIO route set to \"PD/64 dev <incoming_interface>\"\r\n- RIO route set to \"PD/64 dev <incoming_interface> nexthop <router_ll_address>\"\r\n\r\nIn best case scenario, PIO will take precedence and RIO will have no effect.\r\n\r\nIn worst case scenario, RIO will take precedence and PIO route will have no effect, which will be equivalent with host ignoring the on-link flag of the PIO.\n --VERIFIER NOTES-- \n   \r\nSee https://mailarchive.ietf.org/arch/msg/v6ops/kEygjVcuk_95fqjpAxmDr1zD2PA/", "submit_date": "2023-11-14", "submitter_name": "Alin Nastac", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-05-27 15:28:51"}, {"errata_id": "7700", "doc-id": "RFC7084", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "   L-14:  The IPv6 CE router MUST send an ICMPv6 Destination Unreachable\r\n          message, code 5 (Source address failed ingress/egress policy)\r\n          for packets forwarded to it that use an address from a prefix\r\n          that has been invalidated.", "correct_text": "   L-14:  The IPv6 CE router MUST send an ICMPv6 Destination Unreachable\r\n          message, code 5 (Source address failed ingress/egress policy)\r\n          for packets forwarded to it that use an address from a prefix\r\n          that has been deprecated.", "notes": "The prefix route still need to exist on CPE to allow sending ICMPv6 errors back to the offending host. \r\n\r\nOnly deprecated prefixes (preferred lifetime=0, valid lifetime > 0) still have such route installed in CPE.\n --VERIFIER NOTES-- \n   \r\n   \r\nSee https://mailarchive.ietf.org/arch/msg/v6ops/kEygjVcuk_95fqjpAxmDr1zD2PA/", "submit_date": "2023-11-14", "submitter_name": "Alin Nastac", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-05-27 15:29:22"}, {"errata_id": "7702", "doc-id": "RFC9114", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "10.7", "orig_text": "   Where HTTP/2 employs PADDING frames and Padding fields in other\r\n   frames to make a connection more resistant to traffic analysis,\r\n   HTTP/3 can either rely on transport-layer padding or employ the\r\n   reserved frame and stream types discussed in Sections 7.2.8 and\r\n   6.2.3.  ", "correct_text": "   Where HTTP/2 employs Padding fields in some types of frame\r\n   to make a connection more resistant to traffic analysis,\r\n   HTTP/3 can either rely on transport-layer padding or employ the\r\n   reserved frame and stream types discussed in Sections 7.2.8 and\r\n   6.2.3.  ", "notes": "HTTP/2 doesn't define PADDING frames", "submit_date": "2023-11-15", "submitter_name": "Lucas Pardue", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-19 02:02:31"}, {"errata_id": "7705", "doc-id": "RFC8689", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.1", "orig_text": "   4.  Establish a TLS-protected SMTP session with its peer SMTP server\r\n       and authenticate the server's certificate as specified in\r\n       [RFC6125] or [RFC7672], as applicable.  The hostname from the MX\r\n       record lookup (or the domain name in the absence of an MX record\r\n       where an A record is used directly) MUST match the DNS-ID or CN-\r\n       ID of the certificate presented by the server.\r\n", "correct_text": "   4.  Establish a TLS-protected SMTP session with its peer SMTP server\r\n       and authenticate the server's certificate as specified in\r\n       [RFC6125] or [RFC7672], as applicable.", "notes": "The second sentence tries to explain/summarize the policies found in the RFCs referenced in the first sentence, about PKIX and DANE. But the explanation seems to accidentally sets new requirements that contradict behaviour specified by DANE: With DANE-EE TLSA records, no specific hostname validation must be done, instead verification is done based on (hash of) SPKI/entire certificate. (DANE-TA hostname verification is also a bit more nuanced). Since the requirements are accurately explained in the RFCs referenced in the first sentence, it seems better to completely remove the second sentence.\r\n\r\nI would also like to point out that implementers may want to take care not to treat the situation where all TLSA records are \"unusable\" (as explained in DANE RFCs) as \"authenticated with DANE\", in line with \"[...] or it MUST be verified successfully using DANE [...]\" on line 197.", "submit_date": "2023-11-20", "submitter_name": "Mechiel Lukkien", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7707", "doc-id": "RFC9505", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "   [Senft-2013]\r\n              , Crete-Nishihata, M., Dalek, J., Hardy, S., Hilts, A.,\r\n              Kleemola, K., Ng, J., Poetranto, I., Senft, A., Sinpeng,\r\n              A., Sonne, B., and G. Wiseman, \"Asia Chats: Analyzing\r\n              Information Controls and Privacy in Asian Messaging\r\n              Applications\", November 2013,\r\n              <https://citizenlab.org/2013/11/asia-chats-analyzing-\r\n              information-controls-privacy-asian-messaging-\r\n              applications/>.\r\n", "correct_text": "   [Senft-2013]\r\n              Crete-Nishihata, M., Dalek, J., Hardy, S., Hilts, A.,\r\n              Kleemola, K., Ng, J., Poetranto, I., Senft, A., Sinpeng,\r\n              A., Sonne, B., and G. Wiseman, \"Asia Chats: Analyzing\r\n              Information Controls and Privacy in Asian Messaging\r\n              Applications\", November 2013,\r\n              <https://citizenlab.org/2013/11/asia-chats-analyzing-\r\n              information-controls-privacy-asian-messaging-\r\n              applications/>.\r\n", "notes": "Unnecessary comma at the beginning.", "submit_date": "2023-11-21", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2023-11-27 09:03:42"}, {"errata_id": "7711", "doc-id": "RFC1071", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "We now present explicit examples of calculating a simple 1's\r\ncomplement sum on a 2's complement machine.  The examples show the\r\nsame sum calculated byte by bye, by 16-bits words in normal and\r\nswapped order, and 32 bits at a time in 3 different orders.  All\r\nnumbers are in hex.", "correct_text": "We now present explicit examples of calculating a simple 1's\r\ncomplement sum on a 2's complement machine.  The examples show the\r\nsame sum calculated byte by byte, by 16-bits words in normal and\r\nswapped order, and 32 bits at a time in 3 different orders.  All\r\nnumbers are in hex.", "notes": "A small typo in line 3 in the second occurrence of the word 'byte'", "submit_date": "2023-11-23", "submitter_name": "Mohammed Amine CHAKIR", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2023-11-28 19:03:03"}, {"errata_id": "7724", "doc-id": "RFC9151", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2", "orig_text": "      If RSASSA-PSS is supported (using rsa_pss_rsae_sha384 for\r\n      example), then the implementation MUST assert rsaEncryption as the\r\n      public key algorithm, the hash algorithm (used for both mask\r\n      generation and signature generation) MUST be SHA-384, the mask\r\n      generation function 1 (MGF1) from [RFC8017] MUST be used, and the\r\n      salt length MUST be 48 octets.", "correct_text": "      If RSASSA-PSS is supported then the hash algorithm (used for both\r\n      mask generation and signature generation) MUST be SHA-384, the \r\n      mask generation function 1 (MGF1) from [RFC8017] MUST be used, \r\n      and the salt length MUST be 48 octets. If rsa_pss_rsae_sha384 is \r\n      used then the implementation MUST assert rsaEncryption as the \r\n      public key algorithm. If rsa_pss_pss_sha384 is used then the \r\n      implementation MUST assert RSASSA-PSS as the public key algorithm.", "notes": "RFC9151 explicitly allows both rsa_pss_pss_sha384 and rsa_pss_rsae_sha384 RSASSA-PSS signatures (Sections 6.2, 6.3, 6.4, 7.1, 7.2). This conflicts with the requirement that \u201cthe implementation MUST assert rsaEncryption as the public key algorithm\u201d because rsa_pss_pss_sha384 uses RSASSA-PSS as the public key algorithm.\r\n\r\nThe proposed corrected text updates the requirement to include the correct public key algorithm for rsa_pss_pss_sha384 signatures. The wording closely follows the language used in Section 4.2.3 of RFC 8446.", "submit_date": "2023-12-08", "submitter_name": "James Mayclin", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-01-04 11:38:34"}, {"errata_id": "7727", "doc-id": "RFC9493", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Security Event Identifier Formats", "correct_text": "Subject Identifier Formats", "notes": "The identifiers described in the RFC are relating to subject fields in Security Event Tokens, and not to the Security Event Tokens as a whole. This is clearly stated in the first sentence of Section 1 (Introduction) and the first sentence of the second paragraph of Section 1 (Introduction).\r\n\r\nTherefore, the registry defined in Section 8.1 should be named \"Subject Identifier Formats\", and not \"Security Event Identifier Formats\".\r\n\r\nPaul Wouters(AD): See https://mailarchive.ietf.org/arch/msg/id-event/-S-MsO2W6PeFF_O5kjP8om-7QNM/", "submit_date": "2023-12-11", "submitter_name": "Atul Tulshibagwale", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-29 17:22:19"}, {"errata_id": "7728", "doc-id": "RFC9487", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.10", "orig_text": "5.1.10.  srhSegmentIPv6LocatorLength\r\n\r\n   ElementID:  501\r\n   Name:  srhSegmentIPv6LocatorLength\r\n   Data Type Semantics:  default\r\n   Description:  The length of the SRH segment IPv6 locator specified as\r\n      the number of significant bits.  Together with srhSegmentIPv6, it\r\n      enables the calculation of the SRv6 Locator.\r\n   Additional Information:  See Section 3.1 of [RFC8986] for more\r\n      details about the SID format.\r\n   Reference:  RFC 9487", "correct_text": "5.1.10.  srhSegmentIPv6LocatorLength\r\n\r\n   ElementID:  501\r\n   Name:  srhSegmentIPv6LocatorLength\r\n   Abstract Data Type:  unsigned8\r\n   Data Type Semantics:  default\r\n   Description:  The length of the SRH segment IPv6 locator specified as\r\n      the number of significant bits.  Together with srhSegmentIPv6, it\r\n      enables the calculation of the SRv6 Locator.\r\n   Additional Information:  See Section 3.1 of [RFC8986] for more\r\n      details about the SID format.\r\n   Reference:  RFC 9487", "notes": "I'm not an expert on RFC8986, I assumed it's unsigned8 but need help to check this is the case indeed", "submit_date": "2023-12-12", "submitter_name": "Ahmed Elhassany", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-01-15 10:11:13"}, {"errata_id": "7731", "doc-id": "RFC9457", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Appendix A says:", "orig_text": "# NOTE: '\\' line wrapping per RFC 8792\r\n{\r\n  \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\r\n  \"title\": \"An RFC 7807 problem object\",\r\n  \"type\": \"object\",\r\n  \"properties\": {\r\n    \"type\": {\r\n      \"type\": \"string\",\r\n      \"format\": \"uri-reference\",\r\n      \"description\": \"A URI reference that identifies the \\\r\nproblem type.\"\r\n    },\r\n    \"title\": {\r\n      \"type\": \"string\",\r\n      \"description\": \"A short, human-readable summary of the \\\r\nproblem type.\"\r\n    },\r\n    \"status\": {\r\n      \"type\": \"integer\",\r\n      \"description\": \"The HTTP status code \\\r\ngenerated by the origin server for this occurrence of the problem.\",\r\n      \"minimum\": 100,\r\n      \"maximum\": 599\r\n    },\r\n    \"detail\": {\r\n      \"type\": \"string\",\r\n      \"description\": \"A human-readable explanation specific to \\\r\nthis occurrence of the problem.\"\r\n    },\r\n    \"instance\": {\r\n      \"type\": \"string\",\r\n      \"format\": \"uri-reference\",\r\n      \"description\": \"A URI reference that identifies the \\\r\nspecific occurrence of the problem. It may or may not yield \\\r\nfurther information if dereferenced.\"\r\n    }\r\n  }\r\n}", "correct_text": "# NOTE: '\\' line wrapping per RFC 8792\r\n{\r\n  \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\r\n  \"title\": \"An RFC 7807 problem object\",\r\n  \"type\": \"object\",\r\n  \"properties\": {\r\n    \"type\": {\r\n      \"type\": \"string\",\r\n      \"format\": \"uri-reference\",\r\n      \"description\": \"A URI reference that identifies the \\\r\nproblem type.\"\r\n    },\r\n    \"title\": {\r\n      \"type\": \"string\",\r\n      \"description\": \"A short, human-readable summary of the \\\r\nproblem type.\"\r\n    },\r\n    \"status\": {\r\n      \"type\": \"integer\",\r\n      \"description\": \"The HTTP status code \\\r\ngenerated by the origin server for this occurrence of the problem.\",\r\n      \"minimum\": 100,\r\n      \"maximum\": 599\r\n    },\r\n    \"detail\": {\r\n      \"type\": \"string\",\r\n      \"description\": \"A human-readable explanation specific to \\\r\nthis occurrence of the problem.\"\r\n    },\r\n    \"instance\": {\r\n      \"type\": \"string\",\r\n      \"format\": \"uri-reference\",\r\n      \"description\": \"A URI reference that identifies the \\\r\nspecific occurrence of the problem. It may or may not yield \\\r\nfurther information if dereferenced.\"\r\n    }\r\n  },\r\n  \"additionalProperties\": true\r\n}\r\n", "notes": "The document is correct, however in the example it would have been nice to have \"additionalProperties\": true explicitly stated.\r\n\r\nSee: https://mailarchive.ietf.org/arch/msg/httpapi/fj9TAH6my-kmw7wA_KOlVKCF_V8/", "submit_date": "2023-12-14", "submitter_name": "Roman Kova\u0159\u00edk", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2023-12-18 17:27:06"}, {"errata_id": "7735", "doc-id": "RFC8365", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.3.1", "orig_text": "Since VXLAN and NVGRE encapsulations do not include the ESI label, \r\nother means of performing the split-horizon filtering function must \r\nbe devised for these encapsulations.", "correct_text": "The \"ESI Label\" field, in the \"ESI Label\" Extended Community, is set \r\nto all zeros in case of VxLAN encapsulation. Since even though the \r\nVXLAN and NVGRE encapsulations send the \"ESI Label\" Extended Community, \r\nyet they do not set the \"ESI label\" field in it. Therefore, other means \r\nof performing the split-horizon filtering function must be devised for \r\nthese encapsulations.", "notes": "It should be mentioned somewhere in this RFC document that the \"ESI Label\" Extended Community is sent with VxLAN encapsulation too, just like it is used with MPLS, but with the \"MPLS Label\" field set to all zeros in case of VxLAN.\r\n\r\nOtherwise, it gives rise to the unanswered question in mind, about the value of that field, given that there are no labels in VxLAN.\n --VERIFIER NOTES-- \nThis change appears to be unneeded in this document, see https://mailarchive.ietf.org/arch/msg/bess/ztIEqCJh23KdAbEaec-zeQBwdSs/\r\n\r\nRelated (and mentioned in the referenced email thread) rfc7432bis does clarify the situation with the note, \"The ESI label value MAY be zero if no split-horizon filtering procedures are required in any of the VLANs of the Ethernet Segment. This is the case in [RFC8214]\".", "submit_date": "2023-12-19", "submitter_name": "Gaurav Sinha", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-02-12 15:17:17"}, {"errata_id": "7737", "doc-id": "RFC9514", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   The IPv6 Prefix matching the locator may also be advertised as prefix\r\n   reachability by the underlying routing protocol.  In this case, the\r\n   Prefix NLRI would also be associated with the Prefix Metric TLV\r\n   [RFC7752] that carries the routing metric for this prefix.  A Prefix\r\n   NLRI that has been advertised with a SRv6 Locator TLV is also\r\n   considered a normal routing prefix (i.e., prefix reachability) only\r\n   when there is also an IGP Metric TLV (TLV 1095) associated it.\r\n   Otherwise, it is only considered an SRv6 Locator advertisement.", "correct_text": "   The IPv6 Prefix matching the locator may also be advertised as prefix\r\n   reachability by the underlying routing protocol.  In this case, the\r\n   Prefix NLRI would also be associated with the Prefix Metric TLV\r\n   [RFC7752] that carries the routing metric for this prefix.  A Prefix\r\n   NLRI that has been advertised with a SRv6 Locator TLV is also\r\n   considered a normal routing prefix (i.e., prefix reachability) only\r\n   when there is also a Prefix Metric TLV (TLV 1155) associated with it.\r\n   Otherwise, it is only considered an SRv6 Locator advertisement.", "notes": "The current text is referring to the wrong BGP-LS TLV. Since the SRv6 Locator TLV is associated with a Prefix NLRI, the \"Prefix Metric TLV (TLV 1155)\" should be referenced here since the \"IGP metric TLV (TLV 1095)\" is associated with a Link NLRI.\r\n\r\nVerifier note: In addition to the fix proposed by Ketan, I added a preposition: \"associated with it\".", "submit_date": "2023-12-20", "submitter_name": "Ketan Talaulikar", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-01-16 18:11:20"}, {"errata_id": "7741", "doc-id": "RFC2606", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Reserved Top Level DNS Names\r\ninvalid DNS names", "correct_text": "Reserved Top Level domain Names\r\ninvalid domain names", "notes": "There is no such concept as a DNS name, nor is it found in any RFC. The correct concept is a domain name.\r\n\r\n\r\n--RFC Editor Note:-- \r\nThe term \u201cDNS name\u201d does appear in a number of RFCs, including recent ones (e.g., RFCs 9498, 9476, and 9178). It also appears in 6761, which updates 2606. \r\n\r\n-- Verifier note --\r\n\r\nThe shortcut \"DNS name\" is indeed not in RFC 8499 (DNS terminology) but is also often used as a short cut.\r\n", "submit_date": "2023-12-25", "submitter_name": "Tromler", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 07:18:23"}, {"errata_id": "7742", "doc-id": "RFC2433", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The IESG Note says:", "orig_text": "The protocol described here has significant vulnerabilities.  People\r\nplanning on implementing or using this protocol should read section\r\n12, \"Security Considerations\".", "correct_text": "The protocol described here has significant vulnerabilities.  People\r\nplanning on implementing or using this protocol should read section\r\n11, \"Security Considerations\".", "notes": "The section number is incorrect.\r\n", "submit_date": "2023-12-28", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-02 20:07:16"}, {"errata_id": "7936", "doc-id": "RFC7616", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   domain\r\n\r\n      A quoted, space-separated list of URIs, as specified in [RFC3986],\r\n      that define the protection space.  If a URI is a path-absolute, it\r\n      is relative to the canonical root URL.  (See Section 2.2 of\r\n", "correct_text": "   domain\r\n\r\n      A quoted, space-separated list of URI-reference strings, as specified in [RFC3986],\r\n      that define the protection space.  If a URI-reference is in a relative form, it\r\n      is relative to the canonical root URL.  (See Section 2.2 of\r\n", "notes": "The definition of the \"domain\" parameter is inconsistent/contradictory - a list of space-separated URIs cannot include a path-absolute, since path-absolute is not a URI - though it is a URI-reference. If the intent was that \"a space-separated list of URI-reference strings\" is allowed, that could be used instead, per my suggested corrected text. \r\n\r\nIt is likely both that the intent was not to allow any URI-reference here, and that current client implementations accept only absolute-URI or path-absolute. So it could instead be clarified as follows:\r\n\r\n    A quoted, space-separated list of either absolute-URI or path-absolute, as specified in [RFC3986], that define the protection space.", "submit_date": "2024-05-13", "submitter_name": "Joe Orton", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7743", "doc-id": "RFC9116", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "   CRLF             =  CR LF\r\n                         ; Internet standard newline", "correct_text": "   CRLF             =  [CR] LF\r\n                         ; Both CRLF and LF line separators can be used\r\n                         ; (see Section 2.2) as long as the entire file\r\n                         ; uses the chosen line separator.", "notes": "RFC 9116 section 2.2 accepts both CRLF and LF line separators. There is a contradiction in the ABNF Grammar as it suggests only CRLF would be allowed elsewhere whereas LF is an option in \"cleartext\" & \"eol\". For consistency, the CRLF should either be mandatory or optional on the entire file, and only CRLF or LF should be used in a single file instead of mixing them.\r\n\r\nThe referenced RFC 2046 (section 4.1.1) and 5198 (section 2) have chosen the CRLF sequence as a MUST. On the other hand, the context is OpenPGP Message Format that canonicalizes the signed text documents by converting LF to CRLF before signing (RFC 4880, 5.4.2), and the receiving software should convert them to native line endings (RFC 4880, 5.9).\r\n\r\nThis report respects the intent of section 2.2 to treat line separators more liberally and recognizes that it is not an issue in the context of RFC 4880. The goal is to describe this in the ABNF Grammar with the smallest possible change, resulting in \"CRLF\" being locally redefined as \"[CR] LF\".", "submit_date": "2023-12-30", "submitter_name": "Esa Jokinen", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7744", "doc-id": "RFC9112", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "obs-text      = <obs-text, see [HTTP], Section 5.6.4>", "correct_text": "obs-text      = <obs-text, see [HTTP], Section 5.5>", "notes": "'obs-text' is used in the rules defined in 5.6.4 but is only defined in 5.5.\r\nThis error also appears in 'Appendix A. Collected ABNF'.", "submit_date": "2023-12-31", "submitter_name": "sequpt", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-03 19:17:30"}, {"errata_id": "7745", "doc-id": "RFC1337", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "   (F3) Use 64-bit Sequence Numbers\r\n\r\n        O'Malley and Peterson [RFC-1264] have suggested expansion of the\r\n        TCP sequence space to 64 bits as an alternative to PAWS for\r\n        avoiding the hazard of wrapped sequence numbers within the same\r\n        incarnation.", "correct_text": "   (F3) Use 64-bit Sequence Numbers\r\n\r\n        O'Malley and Peterson [RFC-1263] have suggested expansion of the\r\n        TCP sequence space to 64 bits as an alternative to PAWS for\r\n        avoiding the hazard of wrapped sequence numbers within the same\r\n        incarnation.", "notes": "S. O'Malley and L. Peterson actually authored [RFC-1263] not [RFC-1264].\r\n", "submit_date": "2024-01-01", "submitter_name": "Garri Djavadyan", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-02 20:20:04"}, {"errata_id": "7746", "doc-id": "RFC2516", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "      Field Check Sequence (FCS) Alternatives,\r\n\r\n      Address-and-Control-Field-Compression (ACFC),\r\n\r\n      Asynchronous-Control-Character-Map (ACCM)\r\n", "correct_text": "      FCS-Alternatives,\r\n\r\n      Address-and-Control-Field-Compression (ACFC),\r\n\r\n      Async-Control-Character-Map (ACCM)\r\n", "notes": "The names used for the first and third options is not the offical one (as defined on https://www.iana.org/assignments/ppp-numbers/ppp-numbers.xhtml#ppp-numbers-4 and in rfc1570 and rfc1662, respectively).  Moreover, if FCS really had to be \"expanded\", it should be Frame (rather than Field) Ckeck Sequence.  This is from common knowledge, and from rfc1570 appendix A.", "submit_date": "2024-01-01", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2024-01-12 06:30:15"}, {"errata_id": "7747", "doc-id": "RFC6174", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.10", "orig_text": "An I-D in this state may be under review by the IESG, it may have been approved and be in the RFC Editor's queue, or it may have been published as an RFC.  Other possibilities exist too.  The document may be \"Dead\" (in the IESG state machine) or in a \"Do Not Publish\" state.", "correct_text": "An I-D in this state may be under review by the IESG, it may be awaiting or in IETF Last Call,  may have been approved and be in the RFC Editor's queue, or it may have been published as an RFC.  Other possibilities, most of which show less progress, exist too.  For example, the document may be \"Dead\" (in the IESG state machine) or in a \"Do Not Publish\" state.", "notes": "I think this is actually an editorial problem in the traditional sense of the term, but it is not \"a spelling, grammar, punctuation, or syntax error\" and hence is probably \"Technical\" as defined above.\r\n\r\nSection 4.2.10 of this document, and hence the description of the corresponding \"WG Status\" entry in the datatracker (<https://datatracker.ietf.org/doc/help/state/draft-stream-ietf/>) leave out the all-important \"In Last Call\" and the states leading up to it.  That is a potential source of confusion for newcomers and even experienced participants who have concentrated more on getting work done than on the intricacies of IETF processes and process-related terminology.    While, because of Appendix A and references to it, the change is less important for this document than for the datatracker excerpt, a change like the above could considerably reduce those opportunities for confusion.\r\n\r\nAt the same time, while I think a fix to the datatracker is fairly important, I believe this change should be relatively low priority unless someone insists that the datatracker material cannot be changed without updating this document.", "submit_date": "2024-01-01", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7752", "doc-id": "RFC8147", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13", "orig_text": "<?xml version=\"1.0\"?>\r\n<xs:schema\r\n    targetNamespace=\"urn:ietf:params:xml:ns:EmergencyCallData:control\"\r\n    xmlns:xs=\"http://www.w3.org/2001/XMLSchema\"\r\n    xmlns:pi=\"urn:ietf:params:xml:ns:EmergencyCallData:control\"\r\n    xmlns:xml=\"http://www.w3.org/XML/1998/namespace\"\r\n    elementFormDefault=\"qualified\"\r\n    attributeFormDefault=\"unqualified\">\r\n    \r\n    <xs:import namespace=\"http://www.w3.org/XML/1998/namespace\"/>\r\n    \r\n    <xs:element name=\"EmergencyCallData.Control\"\r\n        type=\"pi:controlType\"/>\r\n    \r\n    <xs:complexType name=\"controlType\">\r\n        <xs:complexContent>\r\n            <xs:restriction base=\"xs:anyType\">\r\n                <xs:choice>\r\n                    <xs:element name=\"capabilities\"\r\n                        type=\"pi:capabilitiesType\"/>\r\n                    <xs:element name=\"request\" type=\"pi:requestType\"/>\r\n                    <xs:element name=\"ack\" type=\"pi:ackType\"/>\r\n                    <xs:any namespace=\"##any\" processContents=\"lax\"\r\n                        minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                </xs:choice>\r\n                <xs:anyAttribute/>\r\n            </xs:restriction>\r\n        </xs:complexContent>\r\n    </xs:complexType>\r\n    \r\n    <xs:complexType name=\"ackType\">\r\n        <xs:complexContent>\r\n            <xs:restriction base=\"xs:anyType\">\r\n                <xs:sequence minOccurs=\"1\" maxOccurs=\"unbounded\">\r\n                    <xs:element name=\"actionResult\" minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\">\r\n                        <xs:complexType>\r\n                            <xs:attribute name=\"action\"\r\n                                type=\"xs:token\"\r\n                                use=\"required\"/>\r\n                            <xs:attribute name=\"success\"\r\n                                type=\"xs:boolean\"\r\n                                use=\"required\"/>\r\n                            <xs:attribute name=\"reason\"\r\n                                type=\"xs:token\">\r\n                                <xs:annotation>\r\n                                    <xs:documentation>\r\n                                        conditionally mandatory\r\n                                        when @success=\"false\"\r\n                                        to indicate reason code\r\n                                        for a failure\r\n                                    </xs:documentation>\r\n                                </xs:annotation>\r\n                            </xs:attribute>\r\n                            <xs:attribute name=\"details\"\r\n                                type=\"xs:string\"/>\r\n                            <xs:anyAttribute\r\n                                processContents=\"skip\"/>\r\n                        </xs:complexType>\r\n                    </xs:element>\r\n                    <xs:any namespace=\"##any\" processContents=\"lax\"\r\n                        minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                </xs:sequence>\r\n                <xs:attribute name=\"ref\"\r\n                    type=\"xs:anyURI\"\r\n                    use=\"required\"/>\r\n                \r\n                <xs:attribute name=\"received\"\r\n                    type=\"xs:boolean\"/>\r\n                <xs:anyAttribute/>\r\n            </xs:restriction>\r\n        </xs:complexContent>\r\n    </xs:complexType>\r\n    \r\n    <xs:complexType name=\"capabilitiesType\">\r\n        <xs:complexContent>\r\n            <xs:restriction base=\"xs:anyType\">\r\n                <xs:sequence minOccurs=\"1\" maxOccurs=\"unbounded\">\r\n                    <xs:element name=\"request\"\r\n                        type=\"pi:requestType\"\r\n                        minOccurs=\"1\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                    <xs:any namespace=\"##any\" processContents=\"lax\"\r\n                        minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                </xs:sequence>\r\n                <xs:anyAttribute/>\r\n            </xs:restriction>\r\n        </xs:complexContent>\r\n    </xs:complexType>\r\n    \r\n    <xs:complexType name=\"requestType\">\r\n        <xs:complexContent>\r\n            <xs:restriction base=\"xs:anyType\">\r\n                <xs:choice minOccurs=\"1\" maxOccurs=\"unbounded\">\r\n                    <xs:element name=\"text\" minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\">\r\n                        <xs:complexType>\r\n                            <xs:simpleContent>\r\n                                <xs:extension base=\"xs:string\">\r\n                                    <xs:anyAttribute\r\n                                        namespace=\"##any\"\r\n                                        processContents=\"skip\"/>\r\n                                </xs:extension>\r\n                            </xs:simpleContent>\r\n                        </xs:complexType>\r\n                    </xs:element>\r\n                    <xs:any namespace=\"##any\" processContents=\"lax\"\r\n                        minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                </xs:choice>\r\n                <xs:attribute name=\"action\" type=\"xs:token\"\r\n                    use=\"required\"/>\r\n                \r\n                <xs:attribute name=\"int-id\" type=\"xs:unsignedInt\"/>\r\n                <xs:attribute name=\"persistence\"\r\n                    type=\"xs:duration\"/>\r\n                <xs:attribute name=\"datatype\" type=\"xs:token\"/>\r\n                <xs:attribute name=\"supported-values\"\r\n                    type=\"xs:string\"/>\r\n                <xs:attribute name=\"element-id\" type=\"xs:token\"/>\r\n                <xs:attribute name=\"requested-state\"\r\n                    type=\"xs:token\"/>\r\n                <xs:anyAttribute/>\r\n            </xs:restriction>\r\n        </xs:complexContent>\r\n    </xs:complexType>\r\n</xs:schema>", "correct_text": "<?xml version=\"1.0\"?>\r\n<xs:schema\r\n    targetNamespace=\"urn:ietf:params:xml:ns:EmergencyCallData:control\"\r\n    xmlns:xs=\"http://www.w3.org/2001/XMLSchema\"\r\n    xmlns:pi=\"urn:ietf:params:xml:ns:EmergencyCallData:control\"\r\n    xmlns:xml=\"http://www.w3.org/XML/1998/namespace\"\r\n    elementFormDefault=\"qualified\"\r\n    attributeFormDefault=\"unqualified\">\r\n    \r\n    <xs:import namespace=\"http://www.w3.org/XML/1998/namespace\"/>\r\n    \r\n    <xs:element name=\"EmergencyCallData.Control\"\r\n        type=\"pi:controlType\"/>\r\n    \r\n    <xs:complexType name=\"controlType\">\r\n        <xs:complexContent>\r\n            <xs:restriction base=\"xs:anyType\">\r\n                <xs:choice>\r\n                    <xs:element name=\"capabilities\"\r\n                        type=\"pi:capabilitiesType\"/>\r\n                    <xs:element name=\"request\" type=\"pi:requestType\"/>\r\n                    <xs:element name=\"ack\" type=\"pi:ackType\"/>\r\n                    <xs:any namespace=\"##other\" processContents=\"lax\"\r\n                        minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                </xs:choice>\r\n                <xs:anyAttribute/>\r\n            </xs:restriction>\r\n        </xs:complexContent>\r\n    </xs:complexType>\r\n    \r\n    <xs:complexType name=\"ackType\">\r\n        <xs:complexContent>\r\n            <xs:restriction base=\"xs:anyType\">\r\n                <xs:sequence minOccurs=\"1\" maxOccurs=\"unbounded\">\r\n                    <xs:element name=\"actionResult\" minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\">\r\n                        <xs:complexType>\r\n                            <xs:attribute name=\"action\"\r\n                                type=\"xs:token\"\r\n                                use=\"required\"/>\r\n                            <xs:attribute name=\"success\"\r\n                                type=\"xs:boolean\"\r\n                                use=\"required\"/>\r\n                            <xs:attribute name=\"reason\"\r\n                                type=\"xs:token\">\r\n                                <xs:annotation>\r\n                                    <xs:documentation>\r\n                                        conditionally mandatory\r\n                                        when @success=\"false\"\r\n                                        to indicate reason code\r\n                                        for a failure\r\n                                    </xs:documentation>\r\n                                </xs:annotation>\r\n                            </xs:attribute>\r\n                            <xs:attribute name=\"details\"\r\n                                type=\"xs:string\"/>\r\n                            <xs:anyAttribute\r\n                                processContents=\"skip\"/>\r\n                        </xs:complexType>\r\n                    </xs:element>\r\n                    <xs:any namespace=\"##other\" processContents=\"lax\"\r\n                        minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                </xs:sequence>\r\n                <xs:attribute name=\"ref\"\r\n                    type=\"xs:anyURI\"\r\n                    use=\"required\"/>\r\n                \r\n                <xs:attribute name=\"received\"\r\n                    type=\"xs:boolean\"/>\r\n                <xs:anyAttribute/>\r\n            </xs:restriction>\r\n        </xs:complexContent>\r\n    </xs:complexType>\r\n    \r\n    <xs:complexType name=\"capabilitiesType\">\r\n        <xs:complexContent>\r\n            <xs:restriction base=\"xs:anyType\">\r\n                <xs:sequence minOccurs=\"1\" maxOccurs=\"unbounded\">\r\n                    <xs:element name=\"request\"\r\n                        type=\"pi:requestType\"\r\n                        minOccurs=\"1\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                    <xs:any namespace=\"##other\" processContents=\"lax\"\r\n                        minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                </xs:sequence>\r\n                <xs:anyAttribute/>\r\n            </xs:restriction>\r\n        </xs:complexContent>\r\n    </xs:complexType>\r\n    \r\n    <xs:complexType name=\"requestType\">\r\n        <xs:complexContent>\r\n            <xs:restriction base=\"xs:anyType\">\r\n                <xs:choice minOccurs=\"1\" maxOccurs=\"unbounded\">\r\n                    <xs:element name=\"text\" minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\">\r\n                        <xs:complexType>\r\n                            <xs:simpleContent>\r\n                                <xs:extension base=\"xs:string\">\r\n                                    <xs:anyAttribute\r\n                                        namespace=\"##any\"\r\n                                        processContents=\"skip\"/>\r\n                                </xs:extension>\r\n                            </xs:simpleContent>\r\n                        </xs:complexType>\r\n                    </xs:element>\r\n                    <xs:any namespace=\"##other\" processContents=\"lax\"\r\n                        minOccurs=\"0\"\r\n                        maxOccurs=\"unbounded\"/>\r\n                </xs:choice>\r\n                <xs:attribute name=\"action\" type=\"xs:token\"\r\n                    use=\"required\"/>\r\n                \r\n                <xs:attribute name=\"int-id\" type=\"xs:unsignedInt\"/>\r\n                <xs:attribute name=\"persistence\"\r\n                    type=\"xs:duration\"/>\r\n                <xs:attribute name=\"datatype\" type=\"xs:token\"/>\r\n                <xs:attribute name=\"supported-values\"\r\n                    type=\"xs:string\"/>\r\n                <xs:attribute name=\"element-id\" type=\"xs:token\"/>\r\n                <xs:attribute name=\"requested-state\"\r\n                    type=\"xs:token\"/>\r\n                <xs:anyAttribute/>\r\n            </xs:restriction>\r\n        </xs:complexContent>\r\n    </xs:complexType>\r\n</xs:schema>", "notes": "The complex types \"controlType\", \"ackType\", \"capabilitiesType\" and \"requestType\" define extension points by using xs:any with namespace ##any. This violates the \"Unique Particle Attribution\" rule for XSD 1.0 (see: https://www.w3.org/wiki/UniqueParticleAttribution) and shows up as an error in some tools.\r\n\r\nI suggest changing the namespace to ##other like it's done in other schemas (for example, RFC7865 defines extension points in this way: https://datatracker.ietf.org/doc/html/rfc7865#section-9 ).\r\n\r\n[Verifier note:]\r\n\r\nReplace all four occurrences of:\r\n\r\n<xs:any namespace=\"##any\" processContents=\"lax\">\r\n\r\nwith:\r\n\r\n<xs:any namespace=\"##other\" processContents=\"lax\">\r\n", "submit_date": "2024-01-09", "submitter_name": "Andreas Wehrmann", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2024-04-24 05:01:17"}, {"errata_id": "7754", "doc-id": "RFC8907", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1, 5.3, 6.1", "orig_text": "The rem_addr_len indicates the length of the port field, in bytes.", "correct_text": "The rem_addr_len indicates the length of the rem_addr field, in bytes.", "notes": "Substitute \"port field\" with \"rem_addr field\".  The issue exists in both 5.1 and 6.1.\r\n\r\nIn addition, in section 5.3, it should be the user_msg_len field indicating the length of the user_msg field, in bytes.  The diagram should also refer to \"user_msg_len\" rather than \"user_msg len\".", "submit_date": "2024-01-10", "submitter_name": "Joao Fracarolli", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-01-28 22:33:07"}, {"errata_id": "7770", "doc-id": "RFC889", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "     One of the basic features of TCP which allow it to be used on paths\r\nspanning many nets of widely varying delay and packet-loss characteristics is\r\nthe retranansmission-timeout algorithm, sometimes known as the \"RSRE\r\nAlgorithm\" for the original designers.  The algorithm operates by recording\r\nthe time and initial sequence number when a segment is transmitted, then\r\ncomputing the elapsed time for that sequence number to be acknowledged.  There\r\nare various degrees of sophistication in the implementation of the algorithm,\r\nranging from allowing only one such computation to be in progress at a time to\r\nallowing one for each segment outstanding at a time on the connection.\r\n\r\n     The retransmission-timeout algorithm is basically an estimation process.\r\nIt maintains an extimate of the current roundtrip delay time and updates it as\r\nnew delay samples are computed.  The algorithm smooths these samples and then\r\nestablishes a timeout, which if exceeded causes a retransmission.  The\r\nselection of the parameters of this algorithm are vitally important in order\r\nto provide effective data transmission and avoid abuse of the Internet system\r\nby excessive retransmissions.  I have long been suspicious of the parameters\r\nsuggested in the specification and used in some implementations, especially in\r\ncases involving long-delay paths involving lossy nets.  The experiment was\r\ndesigned to simulate the operation of the algorithm using data collected from\r\nreal paths involving some pretty leaky Internet plumbing.", "correct_text": "     One of the basic features of TCP which allows it to be used on paths\r\nspanning many nets of widely varying delay and packet-loss characteristics is\r\nthe retranansmission-timeout algorithm, sometimes known as the \"RSRE\r\nAlgorithm\" by the original designers.  The algorithm operates by recording\r\nthe time and initial sequence number when a segment is transmitted, then\r\ncomputing the elapsed time for that sequence number to be acknowledged.  There\r\nare various degrees of sophistication in the implementation of the algorithm,\r\nranging from allowing only one such computation to be in progress at a time to\r\nallowing one for each segment outstanding at a time on the connection.\r\n     \r\n     The retransmission-timeout algorithm is basically an estimation process.\r\nIt maintains an estimate of the current roundtrip delay time and updates it as\r\nnew delay samples are computed.  The algorithm smooths these samples and then\r\nestablishes a timeout, which if exceeded causes a retransmission.  The\r\nselection of the parameters of this algorithm are vitally important in order\r\nto provide effective data transmission and avoid abuse of the Internet system\r\nby excessive retransmissions.  I have long been suspicious of the parameters\r\nsuggested in the specification and used in some implementations, especially in\r\ncases involving long-delay paths involving lossy nets.  The experiment was\r\ndesigned to simulate the operation of the algorithm using data collected from\r\nreal paths involving some pretty leaky Internet plumbing.", "notes": "The first paragraph contains grammatical errors.  The second contains a spelling error.\r\n\r\n--RFC Editor notes: --\r\nfirst sentence in first paragraph: allow > allows\r\nfirst sentence in first paragraph: for > by\r\nfirst sentence in second paragraph: extimate > estimate", "submit_date": "2024-01-20", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-22 17:58:46"}, {"errata_id": "7769", "doc-id": "RFC8996", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "1.1", "orig_text": "ServerHello.Random", "correct_text": "ServerHello.random ", "notes": "Very pedantic, but RFC 8446 uses all lowercase for \"random\" to match the grammar.\r\n\r\nPaul Wouters (AD): RFC 8446 itself actually also has this problem once in Section 4.1.3", "submit_date": "2021-03-23", "submitter_name": "Martin Thomson", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-01-17 01:17:44"}, {"errata_id": "7774", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.3", "orig_text": "ServerHello.Random", "correct_text": "ServerHello.random", "notes": "Lowercase \"random\".\r\n\r\nThis report was created/verified per Paul Wouter's note at https://www.rfc-editor.org/errata/eid7769.", "submit_date": "2024-01-22", "submitter_name": "Rebecca VanRheenen", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-22 18:43:23"}, {"errata_id": "7801", "doc-id": "RFC3739", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": ".2.6.1", "orig_text": "   If a value of type SemanticsInformation is present in a QCStatement\r\n   where the statementID component is set to id-qcs-pkix-QCSyntax-v1 or\r\n   id-qcs-pkix-QCSyntax-v2, then at least one of the semanticsIdentifier\r\n   or nameRegistrationAuthorities fields must be present, as indicated.\r\n   Note that the statementInfo component need not be present in a\r\n   QCStatement value even if the statementID component is set to id-\r\n   qcs-pkix-QCSyntax-v1 or id-qcs-pkix-QCSyntax-v2.", "correct_text": "   If a value of type SemanticsInformation is present in a QCStatement\r\n   where the statementId component is set to id-qcs-pkix-QCSyntax-v1 or\r\n   id-qcs-pkix-QCSyntax-v2, then at least one of the semanticsIdentifier\r\n   or nameRegistrationAuthorities fields must be present, as indicated.\r\n   Note that the statementInfo component need not be present in a\r\n   QCStatement value even if the statementId component is set to id-\r\n   qcs-pkix-QCSyntax-v1 or id-qcs-pkix-QCSyntax-v2.", "notes": "The name of the statement ID component per the ASN.1 definition is \"statementId\", not \"statementID\".\r\n\r\nThis appears in both sentences above.", "submit_date": "2024-02-07", "submitter_name": "Corey Bonnell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-08 20:02:55"}, {"errata_id": "7772", "doc-id": "RFC6719", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "to covert", "correct_text": "to convert", "notes": "describing the conversion of path cost into a rank value.", "submit_date": "2024-01-22", "submitter_name": "Dominique Barthel", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-22 18:12:04"}, {"errata_id": "7773", "doc-id": "RFC6719", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "If the cost \r\nof the path through the preferred parent and the worst parent is too \r\nlarge, a node MAY keep a smaller parent set than PARENT_SET_SIZE.", "correct_text": "If the difference in cost of the paths through the preferred parent \r\nand the worst parent is too large, a node MAY keep a smaller parent \r\nset than PARENT_SET_SIZE.\r\n\r\n", "notes": "This sentence is meant to explain that there is no benefit in keeping in the parent set neighbors that have too high a path cost compared to that of the preferred parent.\r\nThe original text omits the notion of difference in cost. It also contains a circular reference: indeed, the worst parent is the neighbor within the parent set that has the highest cost.\r\n\r\nVerifier's note: the submitter also included this option:\r\n\r\n```\r\nor better yet\r\n\r\n\"A node MAY keep a parent set smaller than PARENT_SET_SIZE, so that \r\nthe difference in cost of the paths through the preferred parent and \r\nthe worst parent is not too large.\"\r\n```\r\n\r\nI agree this is a clearer way to express the concept and I think it should be considered if there's ever a bis prepared of the spec, however, I elected to verify the first option given because it represents the minimal change needed to make the document correct.", "submit_date": "2024-01-22", "submitter_name": "Dominique Barthel", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-02-07 18:18:18"}, {"errata_id": "7781", "doc-id": "RFC9458", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A says:", "orig_text": "   The AEAD Seal() function is then used to encrypt the response, which\r\n   is added to the randomized nonce value to produce the Encapsulated\r\n   Response:\r\n\r\n   c789e7151fcba46158ca84b04464910d86f9013e404feea014e7be4a441f234f\r\n   857fbd\r\n\r\n   The Oblivious Gateway Resource constructs a response with the same\r\n   content:\r\n\r\n   HTTP/1.1 200 OK\r\n   Date: Wed, 27 Jan 2021 04:45:07 GMT\r\n   Cache-Control: private, no-store\r\n   Content-Type: message/ohttp-res\r\n   Content-Length: 38\r\n\r\n   <content is the Encapsulated Response>", "correct_text": "   The AEAD Seal() function is then used to encrypt the response, which\r\n   is added to the randomized nonce value to produce the Encapsulated\r\n   Response:\r\n\r\n   c789e7151fcba46158ca84b04464910d86f9013e404feea014e7be4a441f234f\r\n   857fbd\r\n\r\n   The Oblivious Gateway Resource constructs a response with the same\r\n   content:\r\n\r\n   HTTP/1.1 200 OK\r\n   Date: Wed, 27 Jan 2021 04:45:07 GMT\r\n   Cache-Control: private, no-store\r\n   Content-Type: message/ohttp-res\r\n   Content-Length: 35\r\n\r\n   <content is the Encapsulated Response>", "notes": "The Content-Length header in the example response is set to 38 while the given Encapsulated Response (c789e7151fcba46158ca84b04464910d86f9013e404feea014e7be4a441f234f\r\n857fbd) has a length of 35", "submit_date": "2024-01-25", "submitter_name": "Dan Gould", "verifier_id": "", "verifier_name": null, "update_date": "2024-01-25 17:31:18"}, {"errata_id": "7780", "doc-id": "RFC9114", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2.6", "orig_text": "The GOAWAY frame applies to the entire connection,\r\nnot a specific stream. A client MUST treat a\r\nGOAWAY frame on a stream other than the control\r\nstream as a connection error of type\r\nH3_FRAME_UNEXPECTED.", "correct_text": "The GOAWAY frame applies to the entire connection,\r\nnot a specific stream. An endpoint MUST treat a\r\nGOAWAY frame on a stream other than the control\r\nstream as a connection error of type\r\nH3_FRAME_UNEXPECTED.", "notes": "HTTP/3 originally only supported GOAWAY from server to client. In this PR we added the ability to also send GOAWAY from client to server https://github.com/quicwg/base-drafts/pull/3129/files. Unfortunately we didn't update the highlighted text to cover the situation where a server receives a GOAWAY on a different stream. \r\n\r\nFWIW the implementation I am responsible for already applies the rule to request streams.", "submit_date": "2024-01-24", "submitter_name": "Lucas Pardue", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-01-29 09:18:06"}, {"errata_id": "7960", "doc-id": "RFC8708", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "   pk-HSS-LMS-HashSig PUBLIC-KEY ::= {\r\n       IDENTIFIER id-alg-hss-lms-hashsig\r\n       KEY HSS-LMS-HashSig-PublicKey\r\n       PARAMS ARE absent\r\n       CERT-KEY-USAGE\r\n           { digitalSignature, nonRepudiation, keyCertSign, cRLSign } }", "correct_text": "   pk-HSS-LMS-HashSig PUBLIC-KEY ::= {\r\n       IDENTIFIER id-alg-hss-lms-hashsig\r\n       -- KEY no ASN.1 wrapping --\r\n       PARAMS ARE absent\r\n       CERT-KEY-USAGE\r\n           { digitalSignature, nonRepudiation, keyCertSign, cRLSign } }", "notes": "At the time RFC 8708 was published, we did not think anyone would put an HSS/LMS public key in a certificate.  We thought the public key would always be distributed by some other means.  We now know that some people plan to put an HSS/LMS public key in a certificate.  This part of the ASN.1 module does not come into play when using HSS/LMS in the CMS, but we want it to be consistent with the yet-to-be-published document that describes the conventions for an HSS/LMS public key in a certificate.  IETF Hackathon experience shows that no ASN.1 wrapping for the public key is the way forward.", "submit_date": "2024-05-28", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-05-28 23:54:46"}, {"errata_id": "7958", "doc-id": "RFC9562", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "     | 0    | x    | x    | x    | 1-7     | Reserved.  Network      |\r\n     |      |      |      |      |         | Computing System (NCS)  |\r\n     |      |      |      |      |         | backward compatibility, |\r\n     |      |      |      |      |         | and includes Nil UUID   |\r\n     |      |      |      |      |         | as per Section 5.9.     |\r\n", "correct_text": "     | 0    | x    | x    | x    | 0-7     | Reserved.  Network      |\r\n     |      |      |      |      |         | Computing System (NCS)  |\r\n     |      |      |      |      |         | backward compatibility, |\r\n     |      |      |      |      |         | and includes Nil UUID   |\r\n     |      |      |      |      |         | as per Section 5.9.     |\r\n", "notes": "This row matches the case where MSB0, MSB1, MSB2, MSB3 are all 0, which would make the variant number 0.", "submit_date": "2024-05-25", "submitter_name": "Roman Donchenko", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-29 15:43:36"}, {"errata_id": "7955", "doc-id": "RFC9562", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1", "orig_text": "time_high:\r\n    The least significant 12 bits from the 60-bit starting timestamp.\r\n    Occupies bits 52 through 63 (octets 6-7).", "correct_text": "time_high:\r\n    The most significant 12 bits from the 60-bit starting timestamp.\r\n    Occupies bits 52 through 63 (octets 6-7).", "notes": "The original text has the least significant 12 bits from the 60-bit starting timestamp duplicated in the UUID. Once as the least significant 12 bits of time_low and again as time_high. The most significant 12 bits of the starting timestamp are omitted from the UUID.\r\n\r\nThe corrected text gives the self-evident intention of the committee.", "submit_date": "2024-05-24", "submitter_name": "Gordon Garmaise", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-29 15:45:45"}, {"errata_id": "7959", "doc-id": "RFC3411", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "   +-----------------------------------------------------------------+\r\n   |  SNMP entity (identified by snmpEngineID, for example:          |\r\n   |  '800002b804616263'H (enterpise 696, string \"abc\")              |", "correct_text": "   +-----------------------------------------------------------------+\r\n   |  SNMP entity (identified by snmpEngineID, for example:          |\r\n   |  '800002b804616263'H (enterprise 696, string \"abc\")             |", "notes": "Word \"enterprise\" is written as \"enterpise\"", "submit_date": "2024-05-28", "submitter_name": "Jean-Francois Dube", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-05-28 15:30:40"}, {"errata_id": "7961", "doc-id": "RFC6960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "This module replaces the modules in Section 12 of [RFC5912]\r\nand Appendix A.1 of [RFC6277].", "correct_text": "This module replaces the modules in Section 4 of [RFC5912]\r\nand Appendix A.1 of [RFC6277]", "notes": "The section \"Appendix B\" actually updates Section-4 of RFC-5912", "submit_date": "2024-05-29", "submitter_name": "himanshu sharma", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-06-01 19:25:47"}, {"errata_id": "7962", "doc-id": "RFC6960", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.2", "orig_text": "IMPORTS\r\n\r\nExtensions{}, EXTENSION, ATTRIBUTE", "correct_text": "IMPORTS\r\n\r\nExtensions{}, EXTENSION", "notes": "It should not include \"ATTRIBUTE\" as it is not being used anywhere.", "submit_date": "2024-05-29", "submitter_name": "himanshu sharma", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-06-04 09:51:39"}, {"errata_id": "7782", "doc-id": "RFC7591", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "client_id\r\n      REQUIRED.  OAuth 2.0 client identifier string.  It SHOULD NOT be\r\n      currently valid for any other registered client, though an\r\n      authorization server MAY issue the same client identifier to\r\n      multiple instances of a registered client at its discretion.", "correct_text": "client_id\r\n      REQUIRED.  OAuth 2.0 client identifier string.  It MUST NOT be\r\n      currently valid for any other registered client, though an\r\n      authorization server MAY issue the same client identifier to\r\n      multiple instances of a registered client at its discretion.", "notes": "Allowing the same client_id for multiple clients is a contradiction to:\r\n\r\n1. This document, Section 1.3, (D), 2nd bullet point: \"a client identifier that is unique at the server\"\r\n\r\n2. This document, Section 3.1: \"The authorization server assigns this client a unique client identifier\"\r\n\r\n3. (normative reference) RFC 6749, Section 2.2: \"The authorization server issues the registered client a client identifier -- a unique string representing the registration information provided by the client. [...] The client identifier is unique to the authorization server.\"\r\n\r\n4. (non-normative reference) OpenID Connect Dynamic Client Registration 1.0 incorporating errata set 2, Section 2: \"Clients have metadata associated with their unique Client Identifier at the Authorization Server.\"; Section 3.1: \"The Authorization Server assigns this Client a unique Client Identifier\"; Section 3.2: \"client_id REQUIRED. Unique Client Identifier. It MUST NOT be currently valid for any other registered Client. \"", "submit_date": "2024-01-25", "submitter_name": "Tim W\u00fcrtele", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7784", "doc-id": "RFC9463", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.5", "orig_text": "dohpath:  Used to supply a relative DoH URI Template (Section 5.1 of\r\n      [RFC9461]).", "correct_text": "dohpath:  Used to supply a relative DoH URI Template (Section 5 of\r\n      [RFC9461]).", "notes": "Just a minor reference correction. There is no Section 5.1 in RFC 9461. The dohpath parameter is defined in Section 5.", "submit_date": "2024-01-25", "submitter_name": "Tomek Mrugalski", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-25 17:40:40"}, {"errata_id": "7785", "doc-id": "RFC9001", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.", "orig_text": "The key and IV for the packet are computed as described in\r\nSection 5.1.  The nonce, N, is formed by combining the packet\r\nprotection IV with the packet number.  The 62 bits of the\r\nreconstructed QUIC packet number in network byte order are left-\r\npadded with zeros to the size of the IV.  The exclusive OR of the\r\npadded packet number and the IV forms the AEAD nonce.", "correct_text": "The key and IV for the packet are computed as described in\r\nSection 5.1.  The nonce, N, is formed by combining the packet\r\nprotection IV with the packet number.  The 32 bits of the\r\nreconstructed QUIC packet number in network byte order are left-\r\npadded with zeros to the size of the IV.  The exclusive OR of the\r\npadded packet number and the IV forms the AEAD nonce.", "notes": "Given the description of packet number reconstruction in RFC9000 section 17.1 and the example in RFC9000 Appendix A3, the length of reconstructed packet number should be 32 bits, not 62 bits.\n --VERIFIER NOTES-- \n The full packet number is 62 bits, although it is never expressed as such in the packet number field of the header. Hence, this errata is rejected.", "submit_date": "2024-01-26", "submitter_name": "Tom Pearson", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-01-29 19:50:46"}, {"errata_id": "8714", "doc-id": "RFC4363", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "            mgmt(5) - the value of the corresponding instance of\r\n                dot1qTpFdbAddress is also the value of an\r\n                existing instance of dot1qStaticAddress.\"", "correct_text": "            mgmt(5) - the value of the corresponding instance of\r\n                dot1qTpFdbAddress is also the value of an\r\n                existing instance of dot1qStaticUnicastAddress.\"", "notes": "The RFC says for dot1qTpFdbStatus:\r\n\r\n            mgmt(5) - the value of the corresponding instance of\r\n                dot1qTpFdbAddress is also the value of an\r\n                existing instance of dot1qStaticAddress.\"\r\n\r\nIt is referring to dot1qStaticAddress. But there is no such object. Instead, it\r\nshould refer to 'dot1qStaticUnicastAddress'.\r\n\r\nVerifier Notes: No objections received on marking this as Verfiied. See the thread - https://mailarchive.ietf.org/arch/msg/netmod/E5lPDoFUfUH6fWNlIY_YPdfemMo/", "submit_date": "2026-01-23", "submitter_name": "Ramakrishna DTV", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-02-17 18:58:14"}, {"errata_id": "8728", "doc-id": "RFC5797", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.4", "orig_text": "      Mandatory commands:\r\n\r\n      ABOR, ACCT, ALLO, APPE, CWD, DELE, HELP, LIST, MODE, NLST, NOOP,\r\n      PASS, PASV, PORT, QUIT, REIN, REST, RETR, RNFR, RNTO, SITE, STAT,\r\n      STOR, STRU, TYPE, USER\r\n\r\n      Optional commands:\r\n\r\n      CDUP, MKD, PWD, RMD, SMNT, STOU, SYST\r\n", "correct_text": "      Mandatory commands:\r\n\r\n      ACCT, APPE, CDUP, CWD, DELE, HELP, LIST, MKD, MODE, NLST, NOOP,\r\n      PASS, PASV, PORT, PWD, QUIT, RETR, RMD, RNFR, RNTO, STAT, STOR,\r\n      STRU, SYST, TYPE, USER\r\n\r\n      Optional commands:\r\n\r\n      ABOR, ALLO, REIN, REST, SITE, SMNT, STOU\r\n", "notes": "For some reason, five commands listed as optional in RFC 1123 (ABOR, ALLO, REIN, REST, and SITE) are marked mandatory here, and five other commands listed as mandatory in RFC 1123 (CDUP, MKD, PWD, RMD, and SYST) are marked optional here.  This error was naturally propagated into the IANA registry established by this RFC, which therefore also needs correction.", "submit_date": "2026-02-01", "submitter_name": "Gordon Steemson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8739", "doc-id": "RFC2865", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "The NAS MAY\r\ninclude the Attributes Service-Type = Framed-User and Framed-Protocol\r\n= PPP as a hint to the RADIUS server that PPP service is expected.\r\n\r\nThe NAS MAY include the Attributes Service-Type = Framed-\r\nUser and Framed-Protocol = PPP as a hint to the RADIUS server that\r\nPPP service is expected.", "correct_text": "The NAS MAY\r\ninclude the Attributes Service-Type = Framed and Framed-Protocol = PPP\r\nas a hint to the RADIUS server that PPP service is expected.\r\n\r\nThe NAS MAY include the Attributes Service-Type = Framed and\r\nFramed-Protocol = PPP as a hint to the RADIUS server that PPP service\r\nis expected.", "notes": "\u00a7 2.2 refers to the \"Service-Type\" value named \"Framed-User\" twice but \u00a7 5.6 refers to this value as \"Framed\" (2)", "submit_date": "2026-02-04", "submitter_name": "Ond\u0159ej Ho\u0161ek", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-04-30 19:09:51"}, {"errata_id": "7793", "doc-id": "RFC8414", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "response_types_supported\r\n      REQUIRED.  JSON array containing a list of the OAuth 2.0\r\n      \"response_type\" values that this authorization server supports.\r\n      The array values used are the same as those used with the\r\n      \"response_types\" parameter defined by \"OAuth 2.0 Dynamic Client\r\n      Registration Protocol\" [RFC7591].", "correct_text": "response_types_supported\r\n      JSON array containing a list of the OAuth 2.0\r\n      \"response_type\" values that this authorization server supports.\r\n      This is REQUIRED unless no grant types are supported\r\n      that use the authorization endpoint. The array values used are\r\n      the same as those used with the \"response_types\" parameter defined by\r\n      \"OAuth 2.0 Dynamic Client Registration Protocol\" [RFC7591].", "notes": "For the authorization servers that only support grant types that do not use authorization endpoint (like client credentials grant), there is no value to put in the required `response_types_supported` parameter. At the same time, section 3.2 says that \"Claims with zero elements MUST be omitted from the response.\" `authorization_endpoint`parameter is already required for the ASs that support grant types that use the authorization endpoint, so it should be the same for the `response_types_supported` parameter.", "submit_date": "2024-01-31", "submitter_name": "Kristina Yasuda", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7789", "doc-id": "RFC9552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3.1.1", "orig_text": "  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |              Type             |             Length            |\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |O|T|E|B|R|V|   |\r\n  +-+-+-+-+-+-+-+-+", "correct_text": "  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |              Type             |             Length            |\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |O|A|E|B|R|V|   |\r\n  +-+-+-+-+-+-+-+-+", "notes": "\"T\" flag should be changed to \"A\" to match the description below", "submit_date": "2024-01-30", "submitter_name": "Long Dao", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-31 19:21:39"}, {"errata_id": "7790", "doc-id": "RFC9180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1.2", "orig_text": "   A detailed computational analysis of HPKE's Auth mode single-shot\r\n   encryption API has been done in [ABHKLR20].  The paper defines\r\n   security notions for authenticated KEMs and for authenticated public\r\n   key encryption, using the outsider and insider security terminology\r\n   known from signcryption [SigncryptionDZ10].  The analysis proves that\r\n   DHKEM's AuthEncap()/AuthDecap() interface fulfills these notions for\r\n   all Diffie-Hellman groups specified in this document. \r\n", "correct_text": "   A detailed computational analysis of HPKE's Auth mode single-shot\r\n   encryption API has been done in [ABHKLR20].  The paper defines\r\n   security notions for authenticated KEMs and for authenticated public\r\n   key encryption, using the outsider and insider security terminology\r\n   known from signcryption [SigncryptionDZ10].  The analysis proves that\r\n   DHKEM's AuthEncap()/AuthDecap() interface fulfills the notions of \r\n   Outsider-CCA, Insider-CCA, and Outsider-Auth for all Diffie-Hellman \r\n   groups specified in this document. It does not fulfill the notion of\r\n   Insider-Auth defined in the paper.", "notes": "The referenced paper defines four notions of security, Outsider-CCA, Insider-CCA, Outsider-Auth, and Insider-Auth. It proves that HPKE meets the first three, but, contrary to the current text of the RFC, it proves that it does *not* meet Insider-Auth security and that this is infeasible for HPKE. This is an important negative security result that should have been highlighted in the RFC.", "submit_date": "2024-01-30", "submitter_name": "Neil Madden", "verifier_id": "", "verifier_name": "Stanislav Smyshlyaev", "update_date": "2024-04-27 09:46:43"}, {"errata_id": "7794", "doc-id": "RFC3325", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "10.2", "orig_text": "The next proxy removes the P-Asserted-Identity \r\nheader field and the request for Privacy before forwarding this \r\nrequest onward to the biloxi.com proxy server which it does not trust.", "correct_text": "The next proxy removes the P-Asserted-Identity \r\nheader field but does not remove the request for Privacy before forwarding this \r\nrequest onward to the biloxi.com proxy server which it does not trust.", "notes": "As stated in ETSI TS 124 607 V17.0.0 (2022-04), \r\nsection 4.3.3 Requirements on the terminating network side:\r\nNOTE 1: The priv-value \"id\" in the Privacy header is not expected be removed when removing any P-Asserted-Identity header as described in 3GPP TS 24.229 subclauses 4.4.2 (The priv-value \"id\" shall not be removed from the Privacy header field when SIP signalling crosses the boundary of the trust domain) and 5.4.3.3.\r\nand also,\r\nsection 4.5.2.9 Actions at the AS serving the terminating UE:\r\nThe priv-value \"id\" in the Privacy header will be used by the terminating UE to distinguish the request of OIR by the originating user.\n --VERIFIER NOTES-- \nThis section was revised in https://www.rfc-editor.org/rfc/rfc5876.txt Section 3.2\r\nIf the errata remains relevant to the revision, a new errata should be filed per https://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20210507/", "submit_date": "2024-02-02", "submitter_name": "Christos Diamantis", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-04 14:12:28"}, {"errata_id": "7791", "doc-id": "RFC8407", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "There are two related items.\r\n\r\n1) Section 3.7.1 \"Security Considerations Section Template\" begins\r\n\r\n   X.  Security Considerations\r\n\r\n   The YANG module specified in this document defines a schema for data\r\n   that is designed to be accessed via network management protocols such\r\n   as NETCONF [RFC6241] or RESTCONF [RFC8040].  The lowest NETCONF layer\r\n   is the secure transport layer, and the mandatory-to-implement secure\r\n   transport is Secure Shell (SSH) [RFC6242].  The lowest RESTCONF layer\r\n   is HTTPS, and the mandatory-to-implement secure transport is TLS\r\n   [RFC8446].\r\n\r\n2) RFC 8470 says \"the latest approved template (available at\r\n<https://trac.ietf.org/trac/ops/wiki/yang-security-guidelines>)\".  But\r\nthe template at that URL says \"the latest approved template (available\r\nat\r\nhttp://trac.tools.ietf.org/area/ops/trac/wiki/yang-security-guidelines).\"\r\n", "correct_text": "1) It would be helpful if the beginning of the template contained a\r\nreference to RFC 8407 to provide a pointer back to where the templated\r\nsection of Yang module definitions was instantiated from.  Perhaps\r\nstarting the template with \"[Instantiated from the template of\r\n[RFC8407] section 3.7.1.]\"\r\n\r\n2) While the URL given in RFC 8407 works, the URL given in the online\r\ntemplate only goes to a generic page, \"Welcome to the IETF Community\r\nWiki\".  Presumably the URL in the online template should be the URL of\r\nthat page itself.\r\n\r\n", "notes": "Item (2) is a straightforward correction.  Item (1) is in service to\r\nhaving better pointers/references in our documents.\r\n\n --VERIFIER NOTES-- \n1) The original text is not broken (including the URL). Text enhancements can be considered as part of https://datatracker.ietf.org/doc/draft-ietf-netmod-rfc8407bis/.\r\n\r\n2) The Secretariat fixed the link.", "submit_date": "2024-01-30", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-08 19:53:51"}, {"errata_id": "7792", "doc-id": "RFC9526", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The Abstract says:", "orig_text": "Home Naming Authority (NHA)", "correct_text": "Homenet Naming Authority (HNA)", "notes": "In the second paragraph of this RFC's Abstract:\r\n\r\n\"Home\" should be corrected to \"Homenet\", and\r\n\"(NHA)\" should be corrected to \"(HNA)\".\r\n\r\nThe rest of this RFC uses\r\n\"Homenet Naming Authority (HNA)\"\r\nas opposed to\r\n\"Home Naming Authority (NHA)\".", "submit_date": "2024-01-30", "submitter_name": "Samuel K. Lam", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-01-31 22:29:57"}, {"errata_id": "7811", "doc-id": "RFC8584", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   Where:\r\n\r\n   o  DF(V) is defined to be the address Si (index i) for which\r\n      Weight(V, Es, Si) is the highest; 0 <= i < N-1.\r\n\r\n   o  BDF(V) is defined as that PE with address Sk for which the\r\n      computed Weight is the next highest after the Weight of the DF.\r\n      j is the running index from 0 to N-1; i and k are selected values.\r\n", "correct_text": "   Where:\r\n\r\n   o  DF(V) is defined to be the address Si (index i) for which\r\n      Weight(V, Es, Si) is the highest; 0 <= i <= N-1.\r\n\r\n   o  BDF(V) is defined as that PE with address Sk for which the\r\n      computed Weight is the next highest after the Weight of the DF.\r\n      j is the running index from 0 to N-1; i and k are selected values.\r\n", "notes": "An observation was made while reviewing EVPN Port-Active draft pointing to a possible algorithm errata in RFC8584 ;\r\n\r\nBasically, when evaluating the DF for HRW, \r\n>      * DF(Es) is defined to be the address Si (index i) for which\r\n>        Weight(Es, Si) is the highest; 0 <= i < N-1.\r\n\r\nHere,\r\n\r\nif N=1, no remotes:  0 <= i < 0    -- ERROR\r\n\r\nif N=2, 1 peer:  0 <= i < 1  -> possible values are only 0 meaning index 1 (the peer)\u2019s weight is not considered.\r\nLogically, this should be 0 <= i <= N-1    or    0 <= i < N ", "submit_date": "2024-02-15", "submitter_name": "Luc Andr\u00e9 Burdet", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2025-04-28 20:54:53"}, {"errata_id": "7815", "doc-id": "RFC9522", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1.3.7", "orig_text": "   IP Flow Information Export (IPFIX) [RFC5470] defines an architecture\r\n   that is very similar to the RTFM architecture and includes Metering,\r\n   Exporting, and Collecting Processes.  [RFC5472] describes the\r\n   applicability of IPFIX and makes a comparison with RTFM, pointing out\r\n   that, architecturally, while RTM talks about devices, IPFIX deals\r\n   with processes to clarify that multiple of those processes may be co-\r\n   located on the same machine.  The IPFIX protocol [RFC7011] is widely\r\n   implemented.", "correct_text": "   IP Flow Information Export (IPFIX) [RFC5470] defines an architecture\r\n   that is very similar to the RTFM architecture and includes Metering,\r\n   Exporting, and Collecting Processes.  [RFC5472] describes the\r\n   applicability of IPFIX and makes a comparison with RTFM, pointing out\r\n   that, architecturally, while RTFM talks about devices, IPFIX deals\r\n   with processes to clarify that multiple of those processes may be co-\r\n   located on the same machine.  The IPFIX protocol [RFC7011] is widely\r\n   implemented.", "notes": "Missing a letter in the acronym RTFM.\r\n\r\nRTM > RTFM", "submit_date": "2024-02-20", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-20 18:37:45"}, {"errata_id": "7813", "doc-id": "RFC2985", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2.6", "orig_text": "  5.2.6 Gender\r\n\r\n   The gender attribute specifies the gender of the subject it is\r\n   associated with.\r\n\r\n   gender ATTRIBUTE ::= {\r\n           WITH SYNTAX PrintableString (SIZE(1) ^\r\n                       FROM (\"M\" | \"F\" | \"m\" | \"f\"))\r\n           EQUALITY MATCHING RULE caseIgnoreMatch\r\n           SINGLE VALUE TRUE\r\n           ID pkcs-9-at-gender\r\n   }\r\n\r\n   The letter \"M\" (or \"m\") represents \"male\" and the letter \"F\" (or \"f\")\r\n   represents \"female\".  gender attributes must be single-valued.", "correct_text": "  5.2.6 Gender\r\n\r\n   The gender attribute specifies the gender of the subject it is\r\n   associated with.\r\n\r\n   gender ATTRIBUTE ::= {\r\n           WITH SYNTAX IA5String (SIZE(1..pkcs-9-ub-gender))\r\n           EQUALITY MATCHING RULE caseIgnoreMatch\r\n           ID pkcs-9-at-gender\r\n   }\r\n\r\n   Attributes of this type need not be single-valued.", "notes": "The original specification restricts the gender attribute to be single-valued. The suggested correction removes the requirement for the attribute to be single-valued, allowing for greater flexibility in representing gender attributes. The suggested correction aligns with the evolving understanding and recognition of gender diversity. By updating the syntax and removing the single value requirement, the revised attribute definition can better accommodate a broader range of gender identities, ensuring inclusivity and accuracy in representing the gender of a subject. This change would introduce a new upper bound pkcs-9-ub-gender with a bound of type INTEGER ::= pkcs-9-ub-pkcs9String. If this correction is to be applied, the RFC should change or remove existing references to the incorrect gender attribute specification throughout the RFC.\n --VERIFIER NOTES-- \nPaul Wouters(AD): While we applaud your intent for improved inclusivity, this modification cannot be done via an errata. We don't have versions of RFCs, so if we were to make a functional change than someone stating they comply to this RFC, you would not know if that includes this new feature or not. The proper way to make this change is to suggest a bis version of this RFC that would obsolete this RFC with the proposed changes. Feel free to reach out to one of the Security Area Directors if you need help on how to start this process. ", "submit_date": "2024-02-18", "submitter_name": "Florian Weber", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-02-22 15:58:51"}, {"errata_id": "7795", "doc-id": "RFC9280", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "   Updates, amendments, and refinements to this document can be produced\r\n   using the process documented herein but shall be published and\r\n   operative only after (a) obtaining the agreement of the IAB and the\r\n   IESG and (b) ensuring that the IETF LLC has no objections regarding\r\n   its ability to implement any proposed changes.", "correct_text": "   Updates, amendments, and refinements to this document can be\r\n   produced using the process documented herein but, unless otherwise\r\n   specified in this document, shall be published and operative only\r\n   after (a) obtaining the agreement of the IAB and the IESG and (b)\r\n   ensuring that the IETF LLC has no objections regarding its ability\r\n   to implement any proposed changes.\r\n", "notes": "Section 7 explicitly states:\r\n\r\n\"Proposals that affect these properties are possible within the processes defined in this document.\"\r\n\r\nAnd it goes on from there to discuss RSWG/RSAB review.\r\n\r\nTherefore, it should not be necessary for the IAB, IESG, and LLC to approve changes in Section 7.  That is just a for-instance.  There may be other examples.\r\n\r\nVerifier Note: Given the text in section 7, the process is clear and this is therefore not an errata. However, this could be further clarified in a document update.", "submit_date": "2024-02-03", "submitter_name": "Eliot Lear", "verifier_id": "", "verifier_name": "Mirja K\u00fchlewind (IAB and RSAB chair)", "update_date": "2024-03-11 19:54:16"}, {"errata_id": "7796", "doc-id": "RFC8996", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "[Bhargavan2016] Bhargavan, K. and G. Leuren,", "correct_text": "[Bhargavan2016] Bhargavan, K. and G. Leurent,", "notes": "The last name \"Leurent\" is misspelt is the references.", "submit_date": "2024-02-03", "submitter_name": "Ga\u00ebtan Leurent", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-05 23:16:00"}, {"errata_id": "7797", "doc-id": "RFC3414", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.3", "orig_text": "   For these protocols, it not possible to obtain data integrity without\r\n   data origin authentication, nor is it possible to obtain data origin\r\n   authentication without data integrity.  Further, there is no\r\n   provision for data confidentiality without both data integrity and\r\n   data origin authentication.", "correct_text": "   For these protocols, it is not possible to obtain data integrity without\r\n   data origin authentication, nor is it possible to obtain data origin\r\n   authentication without data integrity.  Further, there is no\r\n   provision for data confidentiality without both data integrity and\r\n   data origin authentication.", "notes": "The original text is incorrect in grammar.\r\n\r\nmissing \"is\":\r\nit not > it is not\r\n\r\n", "submit_date": "2024-02-05", "submitter_name": "\u674e\u9a8b\u660a", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-05 23:20:12"}, {"errata_id": "7800", "doc-id": "RFC9481", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2.3", "orig_text": "   The KMAC algorithm is defined in [RFC8702] and FIPS SP 800-185\r\n   [NIST.SP.800-185]].", "correct_text": "   The KMAC algorithm is defined in [RFC8702] and NIST SP 800-185\r\n   [NIST.SP.800-185].", "notes": "Correct two errors. First, the referenced document is a Special Publication, not a FIPS. Second, there are two closing brackets, but there should only be one.", "submit_date": "2024-02-07", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-07 17:46:57"}, {"errata_id": "7814", "doc-id": "RFC1321", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A.1 says:", "orig_text": "/* POINTER defines a generic pointer type */\r\ntypedef unsigned char *POINTER;\r\n\r\n/* UINT2 defines a two byte word */\r\ntypedef unsigned short int UINT2;\r\n\r\n/* UINT4 defines a four byte word */\r\ntypedef unsigned long int UINT4;\r\n", "correct_text": "#include <stdint.h>\r\n\r\n/* POINTER defines a generic pointer type */\r\ntypedef unsigned char *POINTER;\r\n\r\n/* UINT2 defines a two byte word */\r\ntypedef uint16_t UINT2;\r\n\r\n/* UINT4 defines a four byte word */\r\ntypedef uint32_t UINT4;", "notes": "On some modern systems like x86-64 Linux, unsigned long int is 8 bytes, which causes the original implementation to be incorrect.\n --VERIFIER NOTES-- \nSec AD(Paul Wouters): At the time of writing, this was correct. As this document is not going to be updated in the future, there is no point updating the C code to modern or future compiler features.", "submit_date": "2024-02-19", "submitter_name": "Nilstrieb", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-03-07 16:47:15"}, {"errata_id": "7818", "doc-id": "RFC3124", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "             The nrecd parameter indicates how many bytes were\r\n   successfully received by the receiver since the last cm_update call,\r\n   while the nrecd parameter identifies how many bytes were received\r\n   were lost during the same time period.  ", "correct_text": "             The nrecd parameter indicates how many bytes were\r\n   successfully received by the receiver since the last cm_update call,\r\n   while the nlost parameter identifies how many bytes were lost during the same time period.  ", "notes": "Wrong nrecd parameter instead of nlost at the beginning of page 10.", "submit_date": "2024-02-21", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-03-05 23:18:13"}, {"errata_id": "7970", "doc-id": "RFC4880", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "13.1.3", "orig_text": "     2. Using the list in Section 5.2.2, produce an ASN.1 DER value for\r\n        the hash function used.  Let T be the full hash prefix from\r\n        Section 5.2.2, and let tLen be the length in octets of T.", "correct_text": "     2. Using the list in Section 5.2.2, produce an ASN.1 DER value for\r\n        the hash function used and the hash digest.  Let T be the full\r\n        hash prefix from Section 5.2.2, concatenated with the hash\r\n        digest H, and let tLen be the length in octets of T.", "notes": "This section is an informational (non-normative) copy of section 9.2 of RFC 3447.\r\nHowever, it mistakenly omits the hash digest from the value T, and thus unintentionally diverges from RFC 3447.\r\nTechnically speaking, this does not affect the rest of RFC 4880 as its other sections refer to RFC 3447 rather than this section, but it is nevertheless incorrect and potentially confusing.\r\nAll implementations implement it correctly, however, so accepting this erratum should not lead to any changes in implementations.", "submit_date": "2024-06-04", "submitter_name": "Daniel Huigens", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7799", "doc-id": "RFC9142", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1.2.1", "orig_text": "+============+=============================+\r\n| Curve Name | Estimated Security Strength |\r\n+============+=============================+\r\n| nistp256   | 128 bits                    |\r\n+------------+-----------------------------+\r\n| nistp384   | 192 bits                    |\r\n+------------+-----------------------------+\r\n| nistp521   | 512 bits                    |\r\n+------------+-----------------------------+\r\n| curve25519 | 128 bits                    |\r\n+------------+-----------------------------+\r\n| curve448   | 224 bits                    |\r\n+------------+-----------------------------+", "correct_text": "+============+=============================+\r\n| Curve Name | Estimated Security Strength |\r\n+============+=============================+\r\n| nistp256   | 128 bits                    |\r\n+------------+-----------------------------+\r\n| nistp384   | 192 bits                    |\r\n+------------+-----------------------------+\r\n| nistp521   | 256 bits                    |\r\n+------------+-----------------------------+\r\n| curve25519 | 128 bits                    |\r\n+------------+-----------------------------+\r\n| curve448   | 224 bits                    |\r\n+------------+-----------------------------+", "notes": "P-521 has approximately 256 bits of security (rather than 512), as per Table 1 of Section 6.1.1 of FIPS 186-5, and Section 9 Paragraph 5 of RFC 5656.", "submit_date": "2024-02-07", "submitter_name": "Ben S", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-02-08 21:44:23"}, {"errata_id": "7802", "doc-id": "RFC3739", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   SemanticsInformation  ::= SEQUENCE {\r\n       semanticsIndentifier        OBJECT IDENTIFIER OPTIONAL,\r\n       nameRegistrationAuthorities NameRegistrationAuthorities OPTIONAL\r\n       } -- At least one field shall be present", "correct_text": "   SemanticsInformation  ::= SEQUENCE {\r\n       semanticsIdentifier         OBJECT IDENTIFIER OPTIONAL,\r\n       nameRegistrationAuthorities NameRegistrationAuthorities OPTIONAL\r\n       } -- At least one field shall be present", "notes": "The body of the document and Appendix A.2 use \"semanticsIdentifier\" for the name of the first item in the SEQUENCE.  This change is needed to the normative ASN.1 module to be consistent.\r\n\r\nNote: the typo is \"Indentifier\" instead of \"Identifier\".", "submit_date": "2024-02-07", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-02-07 21:22:51"}, {"errata_id": "7804", "doc-id": "RFC9463", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "Note that the \"Addr Length\", \"ipv6-address(es)\", and \"Service \r\nParameters (SvcParams)\" fields are not present if the ADN-only mode \r\nis used (Section 3.1.6).", "correct_text": "Note that the \"Addr Length\", \"ipv6-address(es)\", \"SvcParams \r\nLength\", and \"Service Parameters (SvcParams)\" fields are not \r\npresent if the ADN-only mode is used (Section 3.1.6).", "notes": "The paragraph is presumably copied from section 4.1 (DHCPv6 Encrypted DNS Option), and omits the \"SvcParams Length\" field, which is only present in the IPv6 RA Encrypted DNS Option. Mandating the presence of a superfluous length field when using the ADN-only mode seems like an oversight.", "submit_date": "2024-02-09", "submitter_name": "David H\u00e4rdeman", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-03-17 23:39:58"}, {"errata_id": "7805", "doc-id": "RFC8864", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   In order to avoid SCTP Stream identifier collisions, in alignment\r\n   with [RFC8832], the endpoint acting as a DTLS client (for the SCTP\r\n   association used to realize data channels) MUST use even identifier\r\n   values, and the endpoint acting as a DTLS server MUST use odd\r\n   identifier values.\r\n", "correct_text": "[RFC8831] does not restrict the SCTP Stream identifiers for data\r\nchannels negotiated out-of-band. The endpoints are free to assign\r\nany numbers to the negotiated data channels; collisions are handled\r\nby the usual mechanisms used to avoid SDP signalling glare.\r\n\r\n", "notes": "The procedures of [RFC8832] are inappropriate in this case, because DCMAP indicates channels negotiated out-of-band and not via DCEP.\r\n\r\nAt initial offer, the DTLS direction attribute is ACTPASS, so the direction is not known. Thus, the RFC 8832 numbering rule is impossible to apply anyway.", "submit_date": "2024-02-09", "submitter_name": "Harald Alvestrand", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7844", "doc-id": "RFC9380", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.6", "orig_text": "({#hashtofield-expand-xmd}, step 10)", "correct_text": "(Section 5.3.1, step 10)", "notes": "Same issue as Erratum #7144 for RFC 9277:  a typo in the markdown (curly-bracketed entry that should have been converted to an xref entry in the XML) that got through the publication process.", "submit_date": "2024-03-07", "submitter_name": "Lynne Bartholomew", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-08 19:01:44"}, {"errata_id": "7914", "doc-id": "RFC2739", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3", "orig_text": "BEGIN:VCARD\r\nVERSION:3.0\r\nN:Dun;Alec\r\nFN:Alec Dun\r\nORG:Microsoft Corporation\r\nADR;WORK;POSTAL;PARCEL:;;One Microsoft Way;\r\n Redmond;WA;98052-6399;USA\r\nTEL;WORK;MSG:+1-206-936-4544\r\nTEL;WORK;FAX:+1-206-936-7329\r\nEMAIL;INTERNET:user@host1.com\r\nCALADRURI;PREF:mailto:user@host1.com\r\nCALURI;PREF:http://cal.host1.com/user/cal.ics\r\nFBURL;PREF:http://cal.host1.com/user/fb.ifb\r\nCALURI:http://cal.company.com/projectA/pjtA.ics\r\nFBURL:http://cal.company.com/projectA/pjtAfb.ifb\r\nEND:VCARD", "correct_text": "BEGIN:VCARD\r\nVERSION:3.0\r\nN:Dun;Alec\r\nFN:Alec Dun\r\nORG:Microsoft Corporation\r\nADR;TYPE=WORK,POSTAL,PARCEL:;;One Microsoft Way;\r\n Redmond;WA;98052-6399;USA\r\nTEL;TYPE=WORK,MSG:+1-206-936-4544\r\nTEL;TYPE=WORK,FAX:+1-206-936-7329\r\nEMAIL;TYPE=INTERNET:user@host1.com\r\nCALADRURI;TYPE=PREF:mailto:user@host1.com\r\nCALURI;TYPE=PREF:http://cal.host1.com/user/cal.ics\r\nFBURL;TYPE=PREF:http://cal.host1.com/user/fb.ifb\r\nCALURI:http://cal.company.com/projectA/pjtA.ics\r\nFBURL:http://cal.company.com/projectA/pjtAfb.ifb\r\nEND:VCARD", "notes": "The TYPE parameter parameter name was missing. parameter names are not optional, as specified in RFC 2426:\r\n\r\n   param        = param-name \"=\" param-value *(\",\" param-value)\r\n\r\n   param-name   = iana-token / x-name\r\n\r\n   param-value  = ptext / quoted-string", "submit_date": "2024-04-29", "submitter_name": "Tom Sydney Kerckhove", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-29 18:51:32"}, {"errata_id": "7859", "doc-id": "RFC6239", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "The format of the SSH_MSG_KEXECDH_REPLY is:\r\n\r\n      byte      SSH_MSG_KEXECDH_REPLY", "correct_text": "The format of the SSH_MSG_KEXECDH_REPLY is:\r\n\r\n      byte      SSH_MSG_KEXDH_REPLY", "notes": "SSH_MSG_KEXECDH_REPLY is defined nowhere. Similar to SSH_MSG_KEXECDH_INIT with SSH_MSG_KEXDH_INIT, I think SSH_MSG_KEXECDH_REPLY is supposed to reuse SSH_MSG_KEXDH_REPLY.", "submit_date": "2024-03-20", "submitter_name": "Thomas Bailleux", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-03-29 23:09:20"}, {"errata_id": "7971", "doc-id": "RFC5780", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.4", "orig_text": "This will also require at most three tests.\r\n\r\n[...]\r\n\r\nIf\r\nthe client receives a response, the current behavior is Address-\r\nDependent Filtering; if no response is received, the current behavior\r\nis Address and Port-Dependent Filtering.", "correct_text": "This will require at most four tests.\r\n\r\n[...]\r\n\r\nIf the client receives a response, the current behavior is\r\nAddress-Dependent Filtering.\r\n\r\nIf no response is received, test IV must be performed to distinguish\r\nbetween Address and Port-Dependent Filtering and lack of connectivity\r\nwith the STUN server's alternate address.  For example, a server\r\nmight be configured with a private OTHER-ADDRESS or reside behind an\r\ninterfering firewall.  In test IV, the client sends a Binding Request\r\n(without a CHANGE-REQUEST attribute) to the alternate address, but\r\nprimary port.  If the client receives a response, the current\r\nbehavior is Address and Port-Dependent Filtering; if no response is\r\nreceived, the client knows that it does not have UDP connectivity\r\nwith the server's alternate address, and therefore cannot use the\r\ncurrent server to determine the current filtering behavior.", "notes": "I am suggesting this change after encountering several public STUN\r\nservers with an OTHER-ADDRESS (or CHANGED-ADDRESS) set to 0.0.0.0,\r\n10.x.x.x, 172.x.x.x, or 192.168.x.x. With such a server, a client\r\nfollowing this RFC as currently written (version 08) will incorrectly\r\nassume it has discovered Address and Port-Dependent Filtering.\r\n\r\nI would also note in section 4.5 (Combining and Ordering Tests) that\r\nfiltering behavior test IV is the same as the mapping behavior test\r\nII, allowing them to be combined so long as the filtering tests are\r\ndone before the mapping tests (to preserve prior NAT state).\r\n\r\nIn support of that ordering, I would ideally have this RFC present\r\nthe filtering tests before presenting the mapping tests, by swapping\r\nsection 4.4 with 4.3 and swapping 3.2 with 3.1. This would make\r\nthings easier for people implementing the spec, as they would\r\nintuitively follow the optimal ordering simply by following the RFC's\r\npresented order, and would no longer have to mentally reorder the\r\nwritten steps whenever validating or reasoning about their code.\r\nSwapping those sections would, of course, affect external references\r\nto those section numbers; I don't know if that would too disruptive a\r\nchange without assigning a new RFC number.", "submit_date": "2024-06-05", "submitter_name": "Forest", "verifier_id": "", "verifier_name": null, "update_date": "2024-06-07 18:33:16"}, {"errata_id": "7806", "doc-id": "RFC9438", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "* cwndprior: Size of cwnd in segments at the time of setting ssthresh\r\n  most recently, either upon exiting the first slow start or just\r\n  before cwnd was reduced in the last congestion event.\r\n", "correct_text": "* cwndprior: Flight Size as defined in RFC5681 in segments at\r\n  the time of setting ssthresh most recently, either upon exiting\r\n  the first slow start or just before cwnd was reduced in the last\r\n  congestion event.\r\n", "notes": "The implicit assumption appears to be, that only singular, isolated events happen during a cubic congestion control response. However, it is not uncommon that multiple events, such as loss, loss recovery initiation, followed by one or more RTOs happen. In many implementations, cwnd only properly tracks Flight Size while no loss recovery is going on. RFC5681 made it clear, that adjustments to ssthresh should be based off of the (estimated) Flightsize. Similarly, it appears prudent to observe Flight Size and not a potentially adjusted cwnd value here.\r\n\r\nThe observed effect of deriving cwnd_prior directly from cwnd, and not Flight Size is a deflated value for ssthresh, earlier transition from slow-start to congestion avoidance, and less rapid resumption of reasonable bandwidth after e.g. a burst loss event followed by a RTO.\r\n\r\nRFC5681 section 7 has this to say around setting ssthresh:\r\n\r\n   The treatment of ssthresh on retransmission timeout was clarified.\r\n   In particular, ssthresh must be set to half the FlightSize on the\r\n   first retransmission of a given segment and then is held constant on\r\n   subsequent retransmissions of the same segment.\n --VERIFIER NOTES-- \n   The reporter and author agreed that Sec 4.6 is clear in this regard.", "submit_date": "2024-02-09", "submitter_name": "Richard Scheffenegger", "verifier_id": "", "verifier_name": "Martin Duke", "update_date": "2024-02-26 20:34:10"}, {"errata_id": "7807", "doc-id": "RFC2526", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "In particular, for IPv6 address\r\n   types required to have 64-bit interface identifiers in EUI-64 format,\r\n   the universal/local bit MUST be set to 0 (local)", "correct_text": "In particular, for IPv6 address\r\n   types required to have 64-bit interface identifiers in EUI-64 format,\r\n   the universal/local bit MUST be set to 1 (local)", "notes": "local 1 not 0 (https://datatracker.ietf.org/doc/html/rfc4291#section-2.6)\n --VERIFIER NOTES-- \n The section 4 also repeats that the value is 0, notably to make a difference with other IPv6 address types (cfr section 2).", "submit_date": "2024-02-10", "submitter_name": "Phu Dang Kim", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-04-23 12:47:45"}, {"errata_id": "7972", "doc-id": "RFC4035", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2", "orig_text": "   Security-aware resolvers MAY query for missing security RRs in an\r\n   attempt to perform validation; implementations that choose to do so\r\n   must be aware that the answers received may not be sufficient to\r\n   validate the original response.  For example, a zone update may have\r\n   changed (or deleted) the desired information between the original and\r\n   follow-up queries.", "correct_text": "   Security-aware resolvers MAY query for missing security RRs in an\r\n   attempt to perform validation; implementations that choose to do so\r\n   MUST be aware that the answers received may not be sufficient to\r\n   validate the original response.  For example, a zone update may have\r\n   changed (or deleted) the desired information between the original and\r\n   follow-up queries.", "notes": "\"MUST\" is a key word according to RFC 2119/BCP 14 and should be capitalized.\n --VERIFIER NOTES-- \n As it appears to the original authors, remaining members of dnsext mailing list, and myself as INT AD, the \"must\" here is not normative and should be kept in lowercase.\r\n\r\nSee also:\r\nhttps://mailarchive.ietf.org/arch/msg/dnsext/1PZ58ajXFj_RodKgHzus6d6UB-U/", "submit_date": "2024-06-06", "submitter_name": "Nate Choe", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-06-07 20:58:08"}, {"errata_id": "7985", "doc-id": "RFC9083", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "This is an example of the common response body.\r\n\r\n{\r\n  \"errorCode\": 418,\r\n  \"title\": \"Your Beverage Choice is Not Available\",\r\n  \"description\":\r\n  [\r\n    \"I know coffee has more ummppphhh.\",\r\n    \"Sorry, dude!\"\r\n  ]\r\n}", "correct_text": "This is an example of the common response body.\r\n\r\n{\r\n  \"rdapConformance\" :\r\n  [\r\n    \"rdap_level_0\"\r\n  ],\r\n  \"errorCode\": 418,\r\n  \"title\": \"Your Beverage Choice is Not Available\",\r\n  \"description\":\r\n  [\r\n    \"I know coffee has more ummppphhh.\",\r\n    \"Sorry, dude!\"\r\n  ]\r\n}", "notes": "RFC 9083 4.1 states that the rdapConformance data structure MUST appear in the topmost JSON object of RDAP responses. The example error response provided in Figure 28 should include the rdapConformance property but does not.\n --VERIFIER NOTES-- \nThe example cited in Figure 28 is described in the text as a \"common response body\", not a complete RDAP response. The error response body is described in the context of a complete RDAP response in Figure 29, which includes an rdapConformance data structure. As such, the examples in the two figures are fine as-is.", "submit_date": "2024-06-12", "submitter_name": "Gavin Brown", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-06-13 21:30:40"}, {"errata_id": "7999", "doc-id": "RFC9497", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.3", "orig_text": "evaluatedElement = G.ScalarInverse(t) * blindedElement\r\n", "correct_text": "evaluatedElement = t * blindedElement\r\n", "notes": "This appears in def BlindEvaluate(skS, blindedElement, info). It seems that the evaluatedElement=t * blindedElement, which is consistent with tweakedKey = t * G.Generator()\r\n\r\n\r\nVerified on CFRG list by co-author with note: I would also change \"0\" to \"seq = 0\"\r\n\n --VERIFIER NOTES-- \nNo change needed. RFC 9497 defines GenerateProof(k, A, B, C, D) to prove k*A = B and k*C[i] = D[i] (Section 2.2.1). In POPRF BlindEvaluate (Section 3.3.3) the proof is generated as GenerateProof(t, G.Generator(), tweakedKey, evaluatedElements, blindedElements), so the element relation being proven is t*evaluatedElement = blindedElement. This is consistent with evaluatedElement being defined as ScalarInverse(t) * blindedElement, since t*(ScalarInverse(t)*blindedElement) = blindedElement. The likely source of confusion is comparing with VOPRF, where the proof wiring uses the opposite direction for the element lists.", "submit_date": "2024-06-24", "submitter_name": "Quanwei Cai", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 21:40:39"}, {"errata_id": "8003", "doc-id": "RFC5357", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.8", "orig_text": "The procedure and guidelines for stopping test sessions is similar to\r\n   that defined in Section 3.8 of OWAMP", "correct_text": "The procedure and guidelines for stopping test sessions is similar to\r\n   that defined in Section 3.8 of OWAMP", "notes": "The displayed text is the same, but please fix the link so that it points to the respective section of RFC4656 instead of the current one.\r\n\r\n--VERIFIER NOTES-- \r\nThis is regarding the link generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc5357.txt).", "submit_date": "2024-06-26", "submitter_name": "Szabolcs Horv\u00e1th", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-08-12 15:25:46"}, {"errata_id": "7817", "doc-id": "RFC9252", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "   As defined in [RFC8986], the sum of the Locator Block Length (LBL),\r\n   Locator Node Length (LNL), Function Length (FL), and Argument Length\r\n   (AL) fields MUST be less than or equal to 128 and greater than the\r\n   sum of Transposition Offset and Transposition Length.", "correct_text": "   As defined in [RFC8986], the sum of the Locator Block Length (LBL),\r\n   Locator Node Length (LNL), Function Length (FL), and Argument Length\r\n   (AL) fields MUST be less than or equal to 128 and greater than or\r\n   equal to the sum of Transposition Offset and Transposition Length.", "notes": "The sum of Trans Off and Trans Length can be equal to the LBL+LNL+FL+AL when the last part of the SID (function or argument) is getting transposed.\r\n\r\nThis is clear also from the example below in the next paragraph of the same section:\r\n\r\n   As an example, consider that the sum of the Locator Block and the\r\n   Locator Node parts is 64.  For an SRv6 SID where the entire Function\r\n   part of size 16 bits is transposed, the transposition offset is set\r\n   to 64 and the transposition length is set to 16.  While for an SRv6\r\n   SID for which the FL is 24 bits and only the lower order 20 bits are\r\n   transposed (e.g., due to the limit of the MPLS Label field size), the\r\n   transposition offset is set to 68 and the transposition length is set\r\n   to 20.", "submit_date": "2024-02-20", "submitter_name": "Ketan Talaulikar", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-05-22 06:49:18"}, {"errata_id": "7819", "doc-id": "RFC8520", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13.1", "orig_text": "Note: A MUD file may need to be re-signed if the signature expires.", "correct_text": "Note: A MUD file may need to be re-signed if the certificate needed\r\nto validate the signature expires.", "notes": "The signature does not expire, but the certificate does.", "submit_date": "2024-02-23", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Rob Wilton", "update_date": "2024-02-26 09:05:01"}, {"errata_id": "7820", "doc-id": "RFC1034", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.7.1", "orig_text": "The QCLASS field may contain:\r\n\r\n<any class>     matches just that class (e.g., IN, CH).\r\n\r\n*               matches aLL RR classes.", "correct_text": "The QCLASS field may contain:\r\n\r\n<any class>     matches just that class (e.g., IN, CH).\r\n\r\n*               matches all RR classes.", "notes": "Manual inspection of each use of the terms RR and RRs did not reveal any additional incorrectly capitalized adjacent words.\r\n\r\naLL > all", "submit_date": "2024-02-23", "submitter_name": "Ben Buehler", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-02-26 03:54:54"}, {"errata_id": "7822", "doc-id": "RFC9480", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2", "orig_text": "PKIHeader ::= SEQUENCE {\r\n       pvno                INTEGER     { cmp1999(1), cmp2000(2),\r\n                                         cmp2012(3) },", "correct_text": "PKIHeader ::= SEQUENCE {\r\n       pvno                INTEGER     { cmp1999(1), cmp2000(2),\r\n                                         cmp2021(3) },", "notes": "There is a typo in the ASN.1 module regarding the cmp version.  This was noticed in the RFC 4210-bis draft document and has been corrected there, but also affects this document which has already been published.", "submit_date": "2024-02-26", "submitter_name": "John Gray", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-02-27 00:28:23"}, {"errata_id": "8021", "doc-id": "RFC8881", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2.3", "orig_text": "In the case of an\r\nOPEN, the stateid returned for the open file and not the\r\ndelegation is used.", "correct_text": "In the case of an\r\nOPEN, the stateid returned for the open file and not the\r\ndelegation is used, with seqid set to 1 explicitly.", "notes": "There is no guarantee that OPEN always returns an open_stateid with seqid == 1. If the same file already happens to be opened, the file could get upgraded. This means that if the same COMPOUND procedure contains a CLOSE that uses the current stateid (as demonstated in Figure 4), it could end up closing a file unintentionally.\r\n\r\nThe best course of action would be to require that OPEN always sets the current stateid to one having seqid == 1. That way any attempt to call CLOSE will end up returning NFS4ERR_OLD_STATEID if it turned out the OPEN did an upgrade.", "submit_date": "2024-07-08", "submitter_name": "Ed Schouten", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8022", "doc-id": "RFC8881", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "   In making comparisons between seqids, both by the client in\r\n   determining the order of operations and by the server in determining\r\n   whether the NFS4ERR_OLD_STATEID is to be returned, the possibility of\r\n   the seqid being swapped around past the NFS4_UINT32_MAX value needs\r\n   to be taken into account.  When two seqid values are being compared,\r\n   the total count of slots for all sessions associated with the current\r\n   client is used to do this.  When one seqid value is less than this\r\n   total slot count and another seqid value is greater than\r\n   NFS4_UINT32_MAX minus the total slot count, the former is to be\r\n   treated as lower than the latter, despite the fact that it is\r\n   numerically greater.", "correct_text": "Whatever was stated in RFC 7530 (NFSv4.0), section 9.1.3.", "notes": "The number of slots has no relationship with the maximum drift a seqid value may have:\r\n\r\n- A single COMPOUND request could contain many operations that cause the seqid to change. For example, one could craft a single COMPOUND request with many of no-op OPEN_DOWNGRADEs that each increment the seqid.\r\n\r\n- Imagine a session with two slots. One slot is used in a tight loop to repeatedly invoke OPEN on many different paths, which unbeknownst to the client all refer to the same (hardlinked) file. If the other slot is used to call CLOSE against the same file, it is not unlikely that the difference between the seqid becomes larger than two.", "submit_date": "2024-07-08", "submitter_name": "Ed Schouten", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8024", "doc-id": "RFC9076", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1", "orig_text": "Primary request:\r\nThis is the domain name in the URL that the user typed, selected\r\nfrom a bookmark, or chose", "correct_text": "Primary request:\r\nThis is the domain name in the URL that the user typed, selected\r\nfrom a bookmark, or chosen", "notes": "Typo\n --VERIFIER NOTES-- \n   Actually the past tense in English of \"to choose\" is \"chose\".", "submit_date": "2024-07-09", "submitter_name": "Greg Choules", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-07-09 07:06:59"}, {"errata_id": "8787", "doc-id": "RFC9460", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2", "orig_text": "(...)\r\nSvcParamKeys SHALL appear in increasing numeric order.\r\n\r\nClients MUST consider an RR malformed if:\r\n\r\nthe end of the RDATA occurs within a SvcParam.\r\nSvcParamKeys are not in strictly increasing numeric order.\r\n(...)", "correct_text": "(...)\r\nSvcParamKeys MUST appear in increasing numeric order.\r\n\r\nClients MUST consider an RR malformed if:\r\n\r\nthe end of the RDATA occurs within a SvcParam.\r\nSvcParamKeys are not in strictly increasing numeric order.\r\n(...)", "notes": "The protocol will only be successful if the DNS server must provide the SvcParamKeys in increasing numeric order, because the client will consider them malformed otherwise.\r\nUsually the principle \"be strict what you send, but be liberal in what you accept\" seems reversed here.\n --VERIFIER NOTES-- \n\r\nPer RFC2119:\r\n\r\n1. MUST This word, or the terms \"REQUIRED\" or \"SHALL\", mean that the\r\ndefinition is an absolute requirement of the specification.", "submit_date": "2026-02-27", "submitter_name": "Ulrich Windl", "verifier_id": "", "verifier_name": "Mohamed Boucadair (IESG)", "update_date": "2026-02-27 11:10:19"}, {"errata_id": "7823", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "   Confidential clients or other clients issued client credentials MUST\r\n   authenticate with the authorization server as described in\r\n   Section 2.3 when making requests to the token endpoint.  Client\r\n   authentication is used for:\r\n\r\n   o  Enforcing the binding of refresh tokens and authorization codes to\r\n      the client they were issued to.  Client authentication is critical\r\n      when an authorization code is transmitted to the redirection\r\n      endpoint over an insecure channel or when the redirection URI has\r\n      not been registered in full.", "correct_text": "   Confidential clients or other clients issued client credentials MUST\r\n   authenticate with the authorization server as described in\r\n   Section 2.3 when making requests to the token endpoint.  Client\r\n   authentication is used for:\r\n\r\n   o  Enforcing the binding of refresh tokens, authorization codes, and\r\n      (in the case of the Client Credentials Grant as described in\r\n      Section 4.4) the access token to the client they were issued to.\r\n      Client authentication is critical when an authorization code is\r\n      transmitted to the redirection endpoint over an insecure channel\r\n      or when the redirection URI has not been registered in full.", "notes": "Section 4.4.2 requires for the \"client_credentials\" grant type that the client is authenticated to the authorization server according to section 3.2.1. The reason for this authentication is (or so I assume) that the to-be-issued access token shall be bound to the correct (authenticated) client. Otherwise, the client could authenticate with valid credentials as \"client A\" and request a token for \"client B\", and would still be in accordance with the RFC, which is probably not intended.", "submit_date": "2024-02-26", "submitter_name": "Alexander Stumpf", "verifier_id": "", "verifier_name": null, "update_date": "2024-02-27 00:41:51"}, {"errata_id": "7824", "doc-id": "RFC7748", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   Input scalar:\r\n     203d494428b8399352665ddca42f9de8fef600908e0d461cb021f8c5\r\n     38345dd77c3e4806e25f46d3315c44e0a5b4371282dd2c8d5be3095f\r\n   Input scalar as a number (base 10):\r\n     633254335906970592779259481534862372382525155\r\n     252028961056404001332122152890562527156973881\r\n     968934311400345568203929409663925541994577184\r\n   Input u-coordinate:\r\n     0fbcc2f993cd56d3305b0b7d9e55d4c1a8fb5dbb52f8e9a1e9b6201b\r\n     165d015894e56c4d3570bee52fe205e28a78b91cdfbde71ce8d157db\r\n   Input u-coordinate as a number (base 10):\r\n     622761797758325444462922068431234180649590390\r\n     024811299761625153767228042600197997696167956\r\n     134770744996690267634159427999832340166786063\r\n   Output u-coordinate:\r\n     884a02576239ff7a2f2f63b2db6a9ff37047ac13568e1e30fe63c4a7\r\n     ad1b3ee3a5700df34321d62077e63633c575c1c954514e99da7c179d", "correct_text": "   Input scalar:\r\n     203d494428b8399352665ddca42f9de8fef600908e0d461cb021f8c5\r\n     38345dd77c3e4806e25f46d3315c44e0a5b4371282dd2c8d5be3095f\r\n   Input scalar as a number (base 10):\r\n     633254335906970592779259481534862372382525155\r\n     252028961056404001332122152890562527156973881\r\n     968934311400345568203929409663925541994577184\r\n   Input u-coordinate:\r\n     1e37b1e6368991ebce5815bf6b567cedfec0d32246815a6707f02c4a\r\n     61247656f5df569f02613cc5bcedf7a924424ff063c9c0aff5b395ae\r\n   Input u-coordinate as a number (base 10):\r\n     495683502945530038677307449626580741146441879\r\n     406119444019011021926629134928724388368946852\r\n     962833749157931574628774133988199037473470238\r\n   Output u-coordinate:\r\n     d34142faca68f7a3ddf805fa39cc706d5ab3f5633ceff5e6462b775d\r\n     ef45f33083461dcf821cc3f0f74a813277e6895a35d958feef79a5bf", "notes": "Regarding Section 5.2, X448, second vector, the given input u-coordinate is not part of a valid point on the Montgomery form of Curve448.\r\n\r\nI suggest replacing the point with a valid one: (2^447 + 100)*G\r\n\r\nSee the SageMath code (permalink): https://web.archive.org/web/20240227114733/https://pastebin.com/yAuzvEJG\n --VERIFIER NOTES-- \nRejected. The mathematical observation is correct: the u-coordinate is on the quadratic twist, not the main curve. However, RFC author Mike Hamburg confirmed on the CFRG list that this is intentional. X448 is designed to accept both curve and twist points without membership checking (Section 7). The test vector provides coverage for the twist case. Removing it would reduce test coverage.\r\n\r\nCFRG list: http://mailarchive.ietf.org/arch/msg/cfrg/cAYh2Mj29xDEEbNAENbJynhksQk/", "submit_date": "2024-02-27", "submitter_name": "Jose Luis Amador Moreno", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 02:59:15"}, {"errata_id": "7825", "doc-id": "RFC5804", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "response-logout       = response-oknobye\r\n", "correct_text": "response-logout       = response-ok\r\n", "notes": "The client sends the LOGOUT command when it is finished with a\r\n   connection and wishes to terminate it.  The server MUST reply with an\r\n   OK response.  The server MUST ignore commands issued by the client\r\n   after the LOGOUT command.\r\n\r\n[Verifier notes:] Verified by Alexey Melnikov.", "submit_date": "2024-02-27", "submitter_name": "Mauro De Gennaro", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2024-03-18 04:21:49"}, {"errata_id": "8066", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "   DTLS implementations do not use the TLS 1.3 \"compatibility mode\"\r\n   described in Appendix D.4 of [TLS13].  DTLS servers MUST NOT echo the\r\n   \"legacy_session_id\" value from the client and endpoints MUST NOT send\r\n   ChangeCipherSpec messages.\r\n\r\n   With these exceptions, the DTLS message formats, flows, and logic are\r\n   the same as those of TLS 1.3.", "correct_text": "   DTLS implementations do not use the TLS 1.3 \"compatibility mode\"\r\n   described in Appendix D.4 of [TLS13].  DTLS endpoints MUST NOT send\r\n   ChangeCipherSpec messages when negotiating DTLS 1.3.\r\n\r\n   Additionally, the \"legacy_session_id_echo\" field of the ServerHello\r\n   message, described in Section 4.1.3 of [TLS13], MUST be empty in DTLS\r\n   1.3.  DTLS 1.3 servers MUST NOT echo the \"legacy_session_id\" value\r\n   from the ClientHello.  DTLS 1.3 clients MUST abort the handshake with\r\n   an \"illegal_parameter\" alert if the field is not empty.  This applies\r\n   even if the \"legacy_session_id\" field of the ClientHello is non-empty\r\n   due to a cached session ID set by a pre-DTLS 1.3 server (see Section\r\n   5.3).\r\n\r\n   With these exceptions, the DTLS message formats, flows, and logic are\r\n   the same as those of TLS 1.3.", "notes": "DTLS 1.3's continuity with DTLS 1.2 makes this a little subtle. First, a DTLS-1.3-capable endpoint may well need to send ChangeCipherSpec if it negotiates DTLS 1.3, so add a small clarification here.\r\n\r\nMore importantly, the changes described here do more than disable the provisions of Appendix D.4. Compatibility mode is only half-negotiated in TLS 1.3, with the ServerHello provisions being unconditional from Section 4.1.3 of RFC 8446:\r\n\r\n   legacy_session_id_echo:  The contents of the client's\r\n      legacy_session_id field.  Note that this field is echoed even if\r\n      the client's value corresponded to a cached pre-TLS 1.3 session\r\n      which the server has chosen not to resume.  A client which\r\n      receives a legacy_session_id_echo field that does not match what\r\n      it sent in the ClientHello MUST abort the handshake with an\r\n      \"illegal_parameter\" alert.\r\n\r\nIn particular, even if we disable the provisions of D.4, a DTLS 1.3 client may still send a non-empty legacy_session_id if it is offering a DTLS 1.2 session. That means matching legacy_session_id and always being empty aren't *quite* the same.\r\n\r\nThe old text overrode 4.1.3's server text (though without citing the section) but not the client text. Leaving the client text as-is will lead to an interop problem in the 1.2 resumption case above, so let's make that clearer. Best also to cite the section we're overriding.", "submit_date": "2024-08-06", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8067", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.3", "orig_text": "   legacy_session_id:  Versions of TLS and DTLS before version 1.3\r\n      supported a \"session resumption\" feature, which has been merged\r\n      with pre-shared keys (PSK) in version 1.3.  A client which has a\r\n      cached session ID set by a pre-DTLS 1.3 server SHOULD set this\r\n      field to that value.  Otherwise, it MUST be set as a zero-length\r\n      vector (i.e., a zero-valued single byte length field).", "correct_text": "   legacy_session_id:  Versions of TLS and DTLS before version 1.3\r\n      supported a \"session resumption\" feature, which has been merged\r\n      with pre-shared keys (PSK) in version 1.3.  A client which has a\r\n      cached session set by a pre-DTLS 1.3 server SHOULD set this\r\n      field according to that session.  Otherwise, it MUST be set as a\r\n      zero-length vector (i.e., a zero-valued single byte length field).", "notes": "The old text is written as if only ID-based DTLS 1.2 sessions (as opposed to ticket-based DTLS 1.2 sessions) require filling in legacy_session_id. This is not quite true. (D)TLS 1.2 ticket sessions (usually!) also fill in legacy_session_id, but to a random value. See the second paragraph of Section 3.4 of RFC 5077. This is needed because a (D)TLS 1.2 server still indicates resumption by echoing the session ID.\r\n\r\nI say usually because RFC 5077 unhelpfully makes this behavior optional for the client. The client may instead leave session ID empty, in which case the ServerHello is ambiguous on whether resumption happened! Instead, the client must detect resumption based on whether ServerHello is followed by ChangeCipherSpec (resumption) or more cleartext handshake messages (full handshake). This is a mess for the state machine and, as far as I know, no one does this. (Except for RFC 4851. That was a mistake.) Moreover, this alternative does not work for DTLS, where ChangeCipherSpec is not sequenced relative to handshake messages. Although I cannot find any text that says this. It seems DTLS 1.2 implementors needed to figure that out for themselves.\r\n\r\nGiven this mess, I've opted to just be vague and say \"set this field according to that session\". We can't really say \"that value\" because, in the ticket case, you synthesize one. I'd also rather not wade into the mess that is this behavior being de jure optional, but de facto required, for DTLS 1.2.\r\n\r\nThis errata also applies to https://www.rfc-editor.org/errata/eid8066. In the replacement text, \"cached session ID\" should say \"cached session\".", "submit_date": "2024-08-08", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7826", "doc-id": "RFC8555", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2", "orig_text": "The server MUST provide information about its retry state to the \r\nclient via the \"error\" field in the challenge and the Retry-After \r\nHTTP header field in response to requests to the challenge resource.", "correct_text": "In responding to requests to the challenge resource while the status \r\nof the challenge remains \"processing\", the server MUST provide \r\ninformation about its retry state to the client via the \"error\" field \r\nin the challenge and the Retry-After HTTP header field.", "notes": "The current text seems to require the server to include the \"error\" field and Retry-After HTTP header in all responses to requests for a challenge resource, even before that challenge has moved from \"pending\" to \"processing\", and even after that challenge has moved from \"processing\" to \"valid\" or \"invalid\".  However, the \"State Transitions for Challenge Objects\" diagram in Section 7.1.6 shows that it only makes sense for the server to communicate \"its retry state\" to the client when the challenge is \"processing\".\r\n\r\nI've modelled the structure of my suggested Corrected Text on similar language in Section 7.5.1: \"In responding to poll requests while the validation is still in progress, the server MUST...\".", "submit_date": "2024-02-28", "submitter_name": "Rob Stradling", "verifier_id": "", "verifier_name": null, "update_date": "2024-02-28 21:15:45"}, {"errata_id": "7833", "doc-id": "RFC9483", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.6", "orig_text": "-- MUST be 0 for recipientInfo type PasswordRecipientInfo", "correct_text": "-- MUST be 3 for recipientInfo type PasswordRecipientInfo", "notes": "It turns out that we make a mistake interpreting CMS RFC 5652 section 6.1 (https://datatracker.ietf.org/doc/html/rfc5652#section-6.1).\r\n\r\nAFAICS, this was due to a misleadingly formatted condition in that section:\r\n\r\nIF ((originatorInfo is present) AND\r\n___(any version 2 attribute certificates are present)) OR\r\n___(any RecipientInfo structures include pwri) OR\r\n___(any RecipientInfo structures include ori)\r\nTHEN version is 3\r\n\r\nwhere for clarity the indentation of the 2nd line should be one more character to the right:\r\n\r\nIF ((originatorInfo is present) AND\r\n____(any version 2 attribute certificates are present)) OR\r\n___(any RecipientInfo structures include pwri) OR\r\n___(any RecipientInfo structures include ori)\r\nTHEN version is 3\r\n\r\n(I replaced leading space chars by '_' to make sure the indentation comes across.)\r\n\r\nSo this can also be seen as an editorial erratum of RFC 5652.", "submit_date": "2024-03-01", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-11-26 23:18:50"}, {"errata_id": "7831", "doc-id": "RFC9539", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.1", "orig_text": "E-status[X] is success and (T0 - E-last-response[X]) < persistence.", "correct_text": "E-status[X] is success and (T0 - E-last-response[X]) < E-persistence.", "notes": "The formula should reference the persistence value for the protocol in use.", "submit_date": "2024-02-29", "submitter_name": "Kevin P. Fleming", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-04 02:26:49"}, {"errata_id": "7832", "doc-id": "RFC9539", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.3", "orig_text": "*  E-status[X] is either fail or timeout and (T0 - E-completed[X]) >\r\n      damping, or", "correct_text": "*  E-status[X] is either fail or timeout and (T0 - E-completed[X]) >\r\n      E-damping, or", "notes": "The formula should reference the damping value for the protocol in use.", "submit_date": "2024-02-29", "submitter_name": "Kevin P. Fleming", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-03-04 02:25:43"}, {"errata_id": "7834", "doc-id": "RFC6368", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "Using this mechanism isolates the customer network from the\r\nattributes used in the customer network and vice versa.  Attributes\r\nsuch as the route reflection cluster list attribute are segregated\r\nsuch that customer network cluster identifiers won't be considered by\r\nthe customer network route reflectors and vice versa.", "correct_text": "Using this mechanism isolates the customer network from the\r\nattributes used in the provider network and vice versa.  Attributes\r\nsuch as the route reflection cluster list attribute are segregated\r\nsuch that customer network cluster identifiers won't be considered by\r\nthe provider network route reflectors and vice versa.", "notes": "\"customer network\" is used twice instead of \"provider network\"", "submit_date": "2024-03-01", "submitter_name": "Hugues Le Bastard", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-03-07 14:39:49"}, {"errata_id": "8833", "doc-id": "RFC8851", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "The H.264 \"MaxBR\" parameter (and its equivalent \"max-br\" format\r\n   parameter) corresponds to the \"max-bps\" restriction defined in this\r\n   specification, by way of a conversion factor of 1000 or 1200; see\r\n   [RFC6184] for details regarding which factor gets used under\r\n   differing circumstances.", "correct_text": "The H.264 \"MaxBR\" parameter (and its equivalent \"max-br\" format\r\n   parameter) corresponds to the \"max-br\" restriction defined in this\r\n   specification, by way of a conversion factor of 1000 or 1200; see\r\n   [RFC6184] for details regarding which factor gets used under\r\n   differing circumstances.", "notes": "Incorrectly refers to a previous name used for the max-br parameter. There is no value called max-bps in this spec, it is now called max-br.", "submit_date": "2026-03-17", "submitter_name": "Aron Rosenberg", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8810", "doc-id": "RFC9639", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.2.2", "orig_text": "shifting a 14-bit sample right by 2 pads it to a 16-bit sample, which\r\nthen has two zero least-significant bits.", "correct_text": "shifting a 14-bit sample left by 2 pads it to a 16-bit sample, which\r\nthen has two zero least-significant bits.", "notes": "Change right to left", "submit_date": "2026-03-06", "submitter_name": "K\u00e1roly Wikid\u00e1l", "verifier_id": "", "verifier_name": "Charles Eckel", "update_date": "2026-04-28 21:14:08"}, {"errata_id": "8828", "doc-id": "RFC9761", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "7", "orig_text": "{\r\n   \"ietf-mud:mud\": {\r\n      ...\r\n      \"ietf-access-control-list:acls\": {\r\n         ...\r\n      }\r\n   }\r\n}", "correct_text": "{\r\n   \"ietf-mud:mud\": {\r\n      ...\r\n   },\r\n   \"ietf-access-control-list:acls\": {\r\n      ...\r\n   }\r\n}", "notes": "Instead of being nested within \"ietf-mud:mud\", \"ietf-access-control-list:acls\" goes parallel to \"ietf-mud:mud\", both as root objects. This will make it consistent with RFC8520 (see JSON example in Section 9, https://datatracker.ietf.org/doc/html/rfc8520#section-9).", "submit_date": "2026-03-14", "submitter_name": "Wenxi Wang", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7835", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.6.3", "orig_text": "   2.  Records that do not start with a \"v=\" tag that identifies the\r\n       current version of DMARC are discarded.\r\n\r\n   3.  If the set is now empty, the Mail Receiver MUST query the DNS for\r\n       a DMARC TXT record at the DNS domain matching the Organizational\r\n       Domain in place of the RFC5322.From domain in the message (if\r\n       different).  This record can contain policy to be asserted for\r\n       subdomains of the Organizational Domain.  A possibly empty set of\r\n       records is returned.\r\n\r\n   4.  Records that do not start with a \"v=\" tag that identifies the\r\n       current version of DMARC are discarded.", "correct_text": "   2.  Records that do not start with a \"v=\" tag that identifies the\r\n       current version of DMARC are discarded.\r\n\r\n   3.  If the set is now empty, the Mail Receiver MUST query the DNS for\r\n       a DMARC TXT record at the DNS domain matching the Organizational\r\n       Domain in place of the RFC5322.From domain in the message (if\r\n       different).  This record can contain policy to be asserted for\r\n       subdomains of the Organizational Domain.  A possibly empty set of\r\n       records is returned.", "notes": "The intent of the original text is that indeed step 2 should be repeated as follows:\r\n(1) Go get a set of things.\r\n(2) Filter them.\r\n(3) If the set is now empty, go get a set of things from a different location.\r\n(4) Filter them.\r\n\r\nAt the time of this writing, draft-ietf-dmarc-dmarcbis is being developed, and so that text may clarify this point.  As such we will hold this erratum for update.", "submit_date": "2024-03-04", "submitter_name": "Giuseppe Trotta", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-03-11 16:34:11"}, {"errata_id": "7836", "doc-id": "RFC3445", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Updates: RFC2535", "correct_text": "Updates: RFC2535, RFC2931", "notes": "This is based on our experience that when writing draft-ietf-dnssd-srp, we had no idea that the KEY RR format was updated, because there was no reference to the updated format in the datatracker page for RFC2931. I think it makes sense to say that 3445 updates 2931, because it does so explicitly.\r\n\r\n-- Verifier (Eric Vyncke) note --\r\nSee also https://mailarchive.ietf.org/arch/msg/dnsext/bSBYA97VQItwQS26fpVdQocrvnA/\r\n\r\nI will request the IETF secretariat to update the datatracker.", "submit_date": "2024-03-04", "submitter_name": "Ted Lemon", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-04-23 14:03:57"}, {"errata_id": "7837", "doc-id": "RFC8214", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "This document defines a new extended community [RFC4360], to be included with per-EVI Ethernet A-D routes.  This attribute is mandatory if multihoming is enabled.", "correct_text": "This document defines a new extended community [RFC4360], to be included with per-EVI Ethernet A-D routes.  \r\n\r\nIf multihoming is enabled, this attribute is MANDATORY regardless of whether the per-EVI Ethernet A-D route is advertised by an EVPN-VPWS instance or by a \"bridging\" EVPN instance.\r\n\r\n", "notes": "The lower-case \"mandatory\" used in the original text does not represent any form of requirement in IETF documents, therefore replacing with upper-case \"MANDATORY\" is needed.\r\n\r\nThe reference to per-EVI Ethernet A-D routes advertised by both \"bridging\" EVPN and EVPN-VPWS is needed to remove possible doubts about the scope of this requirement since the standard is about EVPN-VPWS.\r\n\r\n--\r\nVerifier note: see also https://mailarchive.ietf.org/arch/msg/bess/vBYU98CJkLvHfvnX_6wIsV2cCFM/", "submit_date": "2024-03-05", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-03-07 14:35:04"}, {"errata_id": "7838", "doc-id": "RFC9520", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "[TuDoor]\r\n...\r\nDOI 10.1109/SP54263.2024.00046, 2024, \r\n<https://doi.ieeecomputersociety.org/10.1109/SP54263.2024.00046>.\r\n", "correct_text": "[TuDoor]\r\n...\r\nDOI 10.1109/SP54263.2024.00172, 2024, \r\n<https://doi.ieeecomputersociety.org/10.1109/SP54263.2024.00172>.\r\n", "notes": "The reference link has changed to 10.1109/SP54263.2024.00172 from 10.1109/SP54263.2024.00046\r\n\r\n====Verifier Note=====\r\n\r\nThe link was valid at the time of publication. However, given that this document provides useful information about an attack discussed in the Security Considerations of RFC9520, the report is marked as Verified. ", "submit_date": "2024-03-06", "submitter_name": "Xiang Li", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-27 13:30:46"}, {"errata_id": "7915", "doc-id": "RFC4724", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "(See corrected text.)", "correct_text": "Please add the \"Updates: 4271\" metadata.\r\n\r\nRFC 4724 updates the BGP Finite State Machine (FSM) for RFC 4271, the base BGP-4 specification.  This RFC should UPDATE RFC 4271.", "notes": "Nick Hilliard points out that we are missing this \"updates\" for the RFC.", "submit_date": "2024-04-29", "submitter_name": "Jeffrey Haas", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-10-09 15:58:01"}, {"errata_id": "8068", "doc-id": "RFC4403", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5", "orig_text": "      ( 1.3.6.1.1.10.6.5 NAME 'uddiBindingTemplate'\r\n        SUP top\r\n        STRUCTURAL\r\n        MUST ( uddiBindingKey )\r\n        MAY ( uddiServiceKey $\r\n              uddiDescription $\r\n              uddiAccessPoint $\r\n              uddiHostingRedirector\r\n              uddiCategoryBag $\r\n              uddiv3BindingKey $\r\n              uddiv3ServiceKey $\r\n              uddiv3DigitalSignature $\r\n              uddiv3EntityCreationTime $\r\n              uddiv3NodeId)\r\n      )", "correct_text": "      ( 1.3.6.1.1.10.6.5 NAME 'uddiBindingTemplate'\r\n        SUP top\r\n        STRUCTURAL\r\n        MUST ( uddiBindingKey )\r\n        MAY ( uddiServiceKey $\r\n              uddiDescription $\r\n              uddiAccessPoint $\r\n              uddiHostingRedirector $\r\n              uddiCategoryBag $\r\n              uddiv3BindingKey $\r\n              uddiv3ServiceKey $\r\n              uddiv3DigitalSignature $\r\n              uddiv3EntityCreationTime $\r\n              uddiv3NodeId)\r\n      )", "notes": "The line containing the required (MUST) \"uddiHostingRedirector\" attribute type lacks the necessary '$' delimiter.", "submit_date": "2024-08-08", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:39:11"}, {"errata_id": "7916", "doc-id": "RFC7644", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.7.3", "orig_text": " containing a human-readable explanation of the error.\r\n\r\n   \"status\": \"201\"\r\n\r\n   The following is an example of a status in a failed operation.\r\n\r\n  \"status\": \"400\",\r\n  \"response\":{\r\n       \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:Error\"],\r\n       \"scimType\":\"invalidSyntax\"\r\n       \"detail\":\r\n  \"Request is unparsable, syntactically incorrect, or violates schema.\",\r\n       \"status\":\"400\"\r\n   }", "correct_text": " containing a human-readable explanation of the error.\r\n\r\n The following is an example of a status in a failed operation.\r\n\r\n  {\r\n     \"status\": \"400\",\r\n     \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:Error\"],\r\n     \"scimType\":\"invalidSyntax\",\r\n     \"detail\":\"Request is unparsable, syntactically incorrect, or violates schema.\",\r\n   }", "notes": "it misses a { at the beginning of the 400 sample \r\nit missies a ,  after invalidSyntax\r\n\r\nthe overall response looks wrong\r\n\r\nNotice that even putting a there can be questionnable as well , and an alternative would be to just drop the content mentionned\r\n\r\nSecAD Summary of the changes (per the authors):\r\n* Remove line: \u201cstatus\u201d: \u201c201\u201d\r\n* Add leading brace \u2018{\u2018\r\n* Add missing comma after \u201cinvalidSyntax\u201d\r\n", "submit_date": "2024-04-29", "submitter_name": "Francois LASNE", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-05-13 18:24:08"}, {"errata_id": "7917", "doc-id": "RFC4517", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3.10", "orig_text": "      subset        = \"baseobject\" / \"oneLevel\" / \"wholeSubtree\"\r\n", "correct_text": "      subset        = \"baseObject\" / \"oneLevel\" / \"wholeSubtree\"\r\n", "notes": "The Enhanced Guide \"subset\" token SHOULD honor the case folding scheme for a search scope, as this  refers to actual ASN.1 ENUMERATED / INTEGER components; see RFC 4511 Section 4.5.1 and ITU-T Rec. X.511 Clause 11.2.1 respectively.\r\n\r\nTherefore, \"baseobject\" SHOULD be \"baseObject\".\r\n\r\nAdditionally, outreach to author failed due to unknown recipient at specified address/domain.", "submit_date": "2024-04-30", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-01 15:21:18"}, {"errata_id": "7918", "doc-id": "RFC1741", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "Appendix A says:", "orig_text": "!\"#$%&'()*+,- 012345689@ABCDEFGHIJKLMNPQRSTUVXYZ[`abcdefhijklmpqr", "correct_text": "!\"#$%&'()*+,-012345689@ABCDEFGHIJKLMNPQRSTUVXYZ[`abcdefhijklmpqr", "notes": "Removed the erroneous ' ' (space) character between the '-' and '0' characters. This makes the available characters for the HexBin 4.0 format more clear. In this reference file (https://www.iana.org/assignments/media-types/application/applefile) they presented it as such:\r\n\r\n!\"#$%&'()*+,-\r\n012345689@ABCDEFGHIJKLMNPQRSTUVXYZ[`abcdefhijklmpqr", "submit_date": "2024-04-30", "submitter_name": "Jugraj Dhillon", "verifier_id": "", "verifier_name": null, "update_date": "2024-05-02 05:49:59"}, {"errata_id": "7919", "doc-id": "RFC6068", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "   1.  A number of characters that can appear in <addr-spec> MUST be\r\n       percent-encoded.  These are the characters that cannot appear in\r\n       a URI according to [STD66] as well as \"%\" (because it is used for\r\n       percent-encoding) and all the characters in gen-delims except \"@\"\r\n       and \":\" (i.e., \"/\", \"?\", \"#\", \"[\", and \"]\").  Of the characters\r\n       in sub-delims, at least the following also have to be percent-\r\n       encoded: \"&\", \";\", and \"=\".  Care has to be taken both when\r\n       encoding as well as when decoding to make sure these operations\r\n       are applied only once.", "correct_text": "   1.  A number of characters that can appear in <addr-spec> MUST be\r\n       percent-encoded.  These are the characters that cannot appear in\r\n       a URI according to [STD66] as well as \"%\" (because it is used for\r\n       percent-encoding) and all the characters in gen-delims except \"@\"\r\n       and \":\" (i.e., \"/\", \"?\", \"#\", \"[\", and \"]\").  Care has to be taken\r\n       both when encoding as well as when decoding to make sure these\r\n       operations are applied only once.", "notes": "RFC 3986 does not require that sub-delimiters used in one component are encoded in other components.  Specifically, RFC 3986 Section 2.1 (https://www.rfc-editor.org/rfc/rfc3986#section-2.1) states that a character requires encoding when it \"is being used as a delimiter of, or within, the component.\"\r\n\r\nAccording to RFC 3986, the mailto URI <mailto:Mike&family@example.org> is unambiguously the single addr-spec \"Mike&family@example.org\" because the path component of the mailto scheme does not use \"&\" as a sub-delimiter.\r\n\r\nMore comprehensively, the mailto URI <mailto:Mike&family@example.org?subject=Use%20of%20%26&body=Should%20be%20fine%20in%20addr-spec> must substitute \"%26\" for \"&\" in the value of the body header field because \"&\" is a query component sub-delimiter in the mailto scheme, but the query is the only component where this is required.", "submit_date": "2024-05-01", "submitter_name": "Mark Slater", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-07-17 19:30:21"}, {"errata_id": "7920", "doc-id": "RFC8785", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "<end of section>", "correct_text": "Since -0 is a valid JSON Number but is serialized as 0, a JSON\r\nparser following this specification SHOULD generate an error\r\ncondition (which in turn SHOULD stop processing) when it\r\nencounters -0, in order to thwart potential attacks on not yet\r\nparsed data. ", "notes": "IEEE 754 includes as distinct values both positive and negative\r\nzero. Section 7.1.12.1 of ECMA-262 says: If m is +0 or -0, return\r\nthe String \"0\".  This may lend itself to erroneous input to \r\nsupporting functions. ", "submit_date": "2024-05-02", "submitter_name": "Peter Patel-Schneider", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-05-15 09:58:52"}, {"errata_id": "7938", "doc-id": "RFC7842", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   The IETF email archive search tool, as specified in [RFC6778]) and\r\n   available at [mailarch], has been in use for nearly two years.", "correct_text": "   The IETF email archive search tool, as specified in [RFC6778] and\r\n   available at [mailarch], has been in use for nearly two years.", "notes": "There is a stray parenthesis after the cite tag.", "submit_date": "2024-05-15", "submitter_name": "Jean Mahoney", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-05-15 17:15:40"}, {"errata_id": "7921", "doc-id": "RFC7643", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.5", "orig_text": "\"authenticationSchemes\": [\r\n      {\r\n        \"name\": \"OAuth Bearer Token\",\r\n        \"description\":\r\n          \"Authentication scheme using the OAuth Bearer Token Standard\",\r\n        \"specUri\": \"http://www.rfc-editor.org/info/rfc6750\",\r\n        \"documentationUri\": \"http://example.com/help/oauth.html\",\r\n        \"type\": \"oauthbearertoken\",\r\n        \"primary\": true\r\n      }", "correct_text": "\"authenticationSchemes\": [\r\n      {\r\n        \"name\": \"OAuth Bearer Token\",\r\n        \"description\":\r\n          \"Authentication scheme using the OAuth Bearer Token Standard\",\r\n        \"specUri\": \"http://www.rfc-editor.org/info/rfc6750\",\r\n        \"documentationUri\": \"http://example.com/help/oauth.html\",\r\n        \"type\": \"oauthbearertoken\"\r\n      }", "notes": "The concept of primary is not authenticationScheme is not defined in the paragraph 5 \r\nit contains only \r\n  authenticationSchemes\r\n      A multi-valued complex type that specifies supported\r\n      authentication scheme properties.  To enable seamless discovery of\r\n      configurations, the service provider SHOULD, with the appropriate\r\n      security considerations, make the authenticationSchemes attribute\r\n      publicly accessible without prior authentication.  REQUIRED.  The\r\n      following sub-attributes are defined:\r\n\r\n      type  The authentication scheme.  This specification defines the\r\n         values \"oauth\", \"oauth2\", \"oauthbearertoken\", \"httpbasic\", and\r\n         \"httpdigest\".  REQUIRED.\r\n\r\n      name  The common authentication scheme name, e.g., HTTP Basic.\r\n         REQUIRED.\r\n\r\n      description  A description of the authentication scheme.\r\n         REQUIRED.\r\n\r\n      specUri  An HTTP-addressable URL pointing to the authentication\r\n         scheme's specification.  OPTIONAL.\r\n\r\n      documentationUri  An HTTP-addressable URL pointing to the\r\n         authentication scheme's usage documentation.  OPTIONAL.\r\n\r\n\r\n\r\n=====> another option would be to add the primary attribute defining that is is the authentication scheme that should be considered first\n --VERIFIER NOTES-- \n   \r\nPrimary is defined as part of complex multi-valued attributes section 2.4.\r\n", "submit_date": "2024-05-03", "submitter_name": "Francois LASNE", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-05-04 22:05:40"}, {"errata_id": "7922", "doc-id": "RFC4890", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "#!/bin/bash\r\n# Set of prefixes on the trusted (\"inner\") side of the firewall\r\nexport INNER_PREFIXES=\"2001:DB8:85::/60\"\r\n# Set of hosts providing services so that they can be made pingable\r\nexport PINGABLE_HOSTS=\"2001:DB8:85::/64\"\r\n# Configuration option: Change this to 1 if errors allowed only for\r\n# existing sessions\r\nexport STATE_ENABLED=0\r\n# Configuration option: Change this to 1 if messages to/from link\r\n# local addresses should be filtered.\r\n# Do not use this if the firewall is a bridge.\r\n# Optional for firewalls that are routers.\r\nexport FILTER_LINK_LOCAL_ADDRS=0\r\n# Configuration option: Change this to 0 if the site does not support\r\n# Mobile IPv6 Home Agents - see Appendix A.14\r\nexport HOME_AGENTS_PRESENT=1\r\n# Configuration option: Change this to 0 if the site does not support\r\n# Mobile IPv6 mobile nodes being present on the site -\r\n# see Appendix A.14\r\nexport MOBILE_NODES_PRESENT=1\r\n\r\nip6tables -N icmpv6-filter\r\nip6tables -A FORWARD -p icmpv6 -j icmpv6-filter\r\n\r\n# Match scope of src and dest else deny\r\n# This capability is not provided for in base ip6tables functionality\r\n# An extension (agr) exists which may support it.\r\n#@TODO@\r\n# ECHO REQUESTS AND RESPONSES\r\n# ===========================\r\n\r\n# Allow outbound echo requests from prefixes which belong to the site\r\nfor inner_prefix in $INNER_PREFIXES\r\ndo\r\n  ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n        --icmpv6-type echo-request -j ACCEPT\r\ndone\r\n\r\n# Allow inbound echo requests towards only predetermined hosts\r\nfor pingable_host in $PINGABLE_HOSTS\r\ndo\r\n  ip6tables -A icmpv6-filter -p icmpv6 -d $pingable_host \\\r\n        --icmpv6-type echo-request -j ACCEPT\r\ndone\r\n\r\nif [ \"$STATE_ENABLED\" -eq \"1\" ]\r\nthen\r\n  # Allow incoming and outgoing echo reply messages\r\n  # only for existing sessions\r\n  ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n        --state ESTABLISHED,RELATED --icmpv6-type \\\r\n      echo-reply -j ACCEPT\r\nelse\r\n  # Allow both incoming and outgoing echo replies\r\n  for pingable_host in $PINGABLE_HOSTS\r\n  do\r\n    # Outgoing echo replies from pingable hosts\r\n    ip6tables -A icmpv6-filter -p icmpv6 -s $pingable_host \\\r\n        --icmpv6-type echo-reply -j ACCEPT\r\n  done\r\n  # Incoming echo replies to prefixes which belong to the site\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n        --icmpv6-type echo-reply -j ACCEPT\r\n  done\r\nfi\r\n\r\n# Deny icmps to/from link local addresses\r\n# If the firewall is a router:\r\n#    These rules should be redundant as routers should not forward\r\n#    link local addresses but to be sure...\r\n# DO NOT ENABLE these rules if the firewall is a bridge\r\nif [ \"$FILTER_LINK_LOCAL_ADDRS\" -eq \"1\" ]\r\nthen\r\n  ip6tables -A icmpv6-filter -p icmpv6 -d fe80::/10 -j DROP\r\n  ip6tables -A icmpv6-filter -p icmpv6 -s fe80::/10 -j DROP\r\nfi\r\n\r\n# Drop echo replies which have a multicast address as a\r\n# destination\r\nip6tables -A icmpv6-filter -p icmpv6 -d ff00::/8 \\\r\n        --icmpv6-type echo-reply -j DROP\r\n\r\n# DESTINATION UNREACHABLE ERROR MESSAGES\r\n# ======================================\r\n\r\nif [ \"$STATE_ENABLED\" -eq \"1\" ]\r\nthen\r\n  # Allow incoming destination unreachable messages\r\n  # only for existing sessions\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n         -d $inner_prefix \\\r\n         --state ESTABLISHED,RELATED --icmpv6-type \\\r\n         destination-unreachable -j ACCEPT\r\n  done\r\nelse\r\n  # Allow incoming destination unreachable messages\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type destination-unreachable -j ACCEPT\r\n  done\r\nfi\r\n\r\n# Allow outgoing destination unreachable messages\r\nfor inner_prefix in $INNER_PREFIXES\r\ndo\r\n  ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type destination-unreachable -j ACCEPT\r\ndone\r\n\r\n# PACKET TOO BIG ERROR MESSAGES\r\n# =============================\r\n\r\nif [ \"$STATE_ENABLED\" -eq \"1\" ]\r\nthen\r\n  # Allow incoming Packet Too Big messages\r\n  # only for existing sessions\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n         -d $inner_prefix \\\r\n         --state ESTABLISHED,RELATED \\\r\n         --icmpv6-type packet-too-big \\\r\n         -j ACCEPT\r\n  done\r\nelse\r\n  # Allow incoming Packet Too Big messages\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type packet-too-big -j ACCEPT\r\n  done\r\nfi\r\n\r\n# Allow outgoing Packet Too Big messages\r\nfor inner_prefix in $INNER_PREFIXES\r\ndo\r\n  ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type packet-too-big -j ACCEPT\r\ndone\r\n\r\n# TIME EXCEEDED ERROR MESSAGES\r\n# ============================\r\n\r\nif [ \"$STATE_ENABLED\" -eq \"1\" ]\r\nthen\r\n  # Allow incoming time exceeded code 0 messages\r\n  # only for existing sessions\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n         -d $inner_prefix \\\r\n         --state ESTABLISHED,RELATED --icmpv6-type packet-too-big \\\r\n         -j ACCEPT\r\n  done\r\nelse\r\n  # Allow incoming time exceeded code 0 messages\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type ttl-zero-during-transit -j ACCEPT\r\n  done\r\nfi\r\n\r\n#@POLICY@\r\n# Allow incoming time exceeded code 1 messages\r\nfor inner_prefix in $INNER_PREFIXES\r\ndo\r\nip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type ttl-zero-during-reassembly -j ACCEPT\r\ndone\r\n\r\n# Allow outgoing time exceeded code 0 messages\r\nfor inner_prefix in $INNER_PREFIXES\r\ndo\r\nip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type ttl-zero-during-transit -j ACCEPT\r\ndone\r\n\r\n#@POLICY@\r\n# Allow outgoing time exceeded code 1 messages\r\nfor inner_prefix in $INNER_PREFIXES\r\ndo\r\nip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type ttl-zero-during-reassembly -j ACCEPT\r\ndone\r\n\r\n# PARAMETER PROBLEM ERROR MESSAGES\r\n# ================================\r\n\r\nif [ \"$STATE_ENABLED\" -eq \"1\" ]\r\nthen\r\n  # Allow incoming parameter problem code 1 and 2 messages\r\n  # for an existing session\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n         -d $inner_prefix \\\r\n         --state ESTABLISHED,RELATED --icmpv6-type \\\r\n         unknown-header-type \\\r\n         -j ACCEPT\r\n    ip6tables -A icmpv6-filter -m state -p icmpv6 \\\r\n         -d $inner_prefix \\\r\n         --state ESTABLISHED,RELATED \\\r\n         --icmpv6-type unknown-option \\\r\n         -j ACCEPT\r\n  done\r\nfi\r\n\r\n# Allow outgoing parameter problem code 1 and code 2 messages\r\nfor inner_prefix in $INNER_PREFIXES\r\ndo\r\n  ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type unknown-header-type -j ACCEPT\r\n  ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type unknown-option -j ACCEPT\r\ndone\r\n\r\n#@POLICY@\r\n# Allow incoming and outgoing parameter\r\n# problem code 0 messages\r\nfor inner_prefix in $INNER_PREFIXES\r\ndo\r\n  ip6tables -A icmpv6-filter -p icmpv6 \\\r\n         --icmpv6-type bad-header \\\r\n         -j ACCEPT\r\ndone\r\n\r\n# NEIGHBOR DISCOVERY MESSAGES\r\n# ===========================\r\n\r\n# Drop NS/NA messages both incoming and outgoing\r\nip6tables -A icmpv6-filter -p icmpv6 \\\r\n         --icmpv6-type neighbor-solicitation -j DROP\r\nip6tables -A icmpv6-filter -p icmpv6 \\\r\n         --icmpv6-type neighbor-advertisement -j DROP\r\n\r\n# Drop RS/RA messages both incoming and outgoing\r\nip6tables -A icmpv6-filter -p icmpv6 \\\r\n         --icmpv6-type router-solicitation -j DROP\r\nip6tables -A icmpv6-filter -p icmpv6 \\\r\n         --icmpv6-type router-advertisement -j DROP\r\n\r\n# Drop Redirect messages both incoming and outgoing\r\nip6tables -A icmpv6-filter -p icmpv6 --icmpv6-type redirect -j DROP\r\n\r\n# MLD MESSAGES\r\n# ============\r\n\r\n# Drop incoming and outgoing\r\n# Multicast Listener queries (MLDv1 and MLDv2)\r\nip6tables -A icmpv6-filter -p icmpv6 --icmpv6-type 130 -j DROP\r\n\r\n# Drop incoming and outgoing Multicast Listener reports (MLDv1)\r\nip6tables -A icmpv6-filter -p icmpv6 --icmpv6-type 131 -j DROP\r\n\r\n# Drop incoming and outgoing Multicast Listener Done messages (MLDv1)\r\nip6tables -A icmpv6-filter -p icmpv6 --icmpv6-type 132 -j DROP\r\n\r\n# Drop incoming and outgoing Multicast Listener reports (MLDv2)\r\nip6tables -A icmpv6-filter -p icmpv6 --icmpv6-type 143 -j DROP\r\n\r\n# ROUTER RENUMBERING MESSAGES\r\n# ===========================\r\n\r\n# Drop router renumbering messages\r\nip6tables -A icmpv6-filter -p icmpv6 --icmpv6-type 138 -j DROP\r\n\r\n# NODE INFORMATION QUERIES\r\n# ========================\r\n\r\n# Drop node information queries (139) and replies (140)\r\nip6tables -A icmpv6-filter -p icmpv6 --icmpv6-type 139 -j DROP\r\nip6tables -A icmpv6-filter -p icmpv6 --icmpv6-type 140 -j DROP\r\n\r\n# MOBILE IPv6 MESSAGES\r\n# ====================\r\n\r\n# If there are mobile ipv6 home agents present on the\r\n# trusted side allow\r\nif [ \"$HOME_AGENTS_PRESENT\" -eq \"1\" ]\r\nthen\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    #incoming Home Agent address discovery request\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type 144 -j ACCEPT\r\n    #outgoing Home Agent address discovery reply\r\n    ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type 145 -j ACCEPT\r\n    #incoming Mobile prefix solicitation\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type 146 -j ACCEPT\r\n    #outgoing Mobile prefix advertisement\r\n    ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type 147 -j ACCEPT\r\n  done\r\nfi\r\n\r\n# If there are roaming mobile nodes present on the\r\n# trusted side allow\r\nif [ \"$MOBILE_NODES_PRESENT\" -eq \"1\" ]\r\nthen\r\n  for inner_prefix in $INNER_PREFIXES\r\n  do\r\n    #outgoing Home Agent address discovery request\r\n    ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type 144 -j ACCEPT\r\n    #incoming Home Agent address discovery reply\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type 145 -j ACCEPT\r\n    #outgoing Mobile prefix solicitation\r\n    ip6tables -A icmpv6-filter -p icmpv6 -s $inner_prefix \\\r\n         --icmpv6-type 146 -j ACCEPT\r\n    #incoming Mobile prefix advertisement\r\n    ip6tables -A icmpv6-filter -p icmpv6 -d $inner_prefix \\\r\n         --icmpv6-type 147 -j ACCEPT\r\n  done\r\nfi\r\n\r\n# DROP EVERYTHING ELSE\r\n# ====================\r\n\r\nip6tables -A icmpv6-filter -p icmpv6 -j DROP\r\n", "correct_text": "#!/bin/bash\r\n\r\n# Prefixes on the trusted (\"inner\") side of the firewall\r\nreadonly inner_prefixes=( \"2001:db8:85::/60\" )\r\n\r\n# Hosts providing services so that they can be made pingable\r\nreadonly pingable_hosts=( \"2001:db8:85::/64\" )\r\n\r\n# 1 - if errors are allowed only for existing sessions\r\nreadonly state_enabled=0\r\n\r\n# 1 - if messages to/from link local addresses should be filtered\r\n# Do not use this if the firewall is a bridge.\r\n# Optional for firewalls that are routers.\r\nreadonly filter_linklocal_addrs=0\r\n\r\n# 0 - if the site does not support Mobile IPv6 Home Agents\r\n# 1 - if there are mobile ipv6 home agents present on the trusted side\r\n# see Appendix A.14\r\nreadonly home_agents_present=1\r\n\r\n# 0 - if the site does not support Mobile IPv6 mobile nodes\r\n# 1 - if there are roaming mobile nodes present on the trusted side\r\n# see Appendix A.14\r\nreadonly mobile_nodes_present=1\r\n\r\nip6tables -N icmpv6-filter\r\nip6tables -A FORWARD -p icmpv6 -j icmpv6-filter\r\n\r\nstate_args=(\r\n\t'--match' 'state'\r\n\t'--state' 'ESTABLISHED,RELATED'\r\n)\r\n(( state_enabled == 0 )) && state_args=()\r\nreadonly state_args\r\n\r\n# Helper functions\r\nfilter() { ip6tables -A icmpv6-filter -p icmpv6\t\"${@}\"; }\r\naccept() { filter \"${@}\" -j ACCEPT; }\r\ndrop()   { filter \"${@}\" -j DROP; }\r\n\r\n# Match scope of src and dest else deny\r\n# This capability is not provided for in base ip6tables functionality\r\n# An extension (agr) exists which may support it.\r\n#@TODO@\r\n\r\n# ECHO REQUESTS AND RESPONSES\r\n# ===========================\r\n\r\n# Outbound echo requests from prefixes belonging to the site\r\nfor inner_prefix in \"${inner_prefixes[@]}\"; do\r\n\taccept \\\r\n\t\t-s \"${inner_prefix}\" \\\r\n\t\t--icmpv6-type echo-request\r\ndone\r\n\r\n# Inbound echo requests only towards predetermined hosts\r\nfor pingable_host in \"${pingable_hosts[@]}\"; do\r\n\taccept \\\r\n\t\t-d \"${pingable_host}\" \\\r\n\t\t--icmpv6-type echo-request\r\ndone\r\n\r\nif (( state_enabled == 1 )); then\r\n\t# Incoming and outgoing messages\r\n\t# only for existing sessions\r\n\taccept \\\r\n\t\t\"${state_args[@]}\" \\\r\n\t\t--icmpv6-type echo-reply\r\nelse\r\n\t# Both incoming and outgoing echo replies\r\n\tfor pingable_host in \"${pingable_hosts[@]}\"; do\r\n\t\t# Outgoing echo replies from pingable hosts\r\n\t\taccept \\\r\n\t\t\t-s \"${pingable_host}\" \\\r\n\t\t\t--icmpv6-type echo-reply\r\n\tdone\r\n\r\n\t# Incoming echo replies to prefixes belonging to the site\r\n\tfor inner_prefix in \"${inner_prefixes[@]}\"; do\r\n\t\taccept \\\r\n\t\t\t-d \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type echo-reply\r\n\tdone\r\nfi\r\n\r\n# Deny icmps to/from link local addresses\r\n# If the firewall is a router:\r\n#    These rules should be redundant as routers should not forward\r\n#    link local addresses but to be sure...\r\n# DO NOT ENABLE these rules if the firewall is a bridge\r\nif (( filter_linklocal_addrs == 1 )); then\r\n\tdrop -d fe80::/10\r\n\tdrop -s fe80::/10\r\nfi\r\n\r\n# No echo replies for multicast destination addresses\r\ndrop \\\r\n\t-d ff00::/8 \\\r\n\t--icmpv6-type echo-reply\r\n\r\nfor inner_prefix in \"${inner_prefixes[@]}\"; do\r\n\t# DESTINATION UNREACHABLE ERROR MESSAGES\r\n\t# ======================================\r\n\r\n\t# incoming\r\n\taccept \\\r\n\t\t-d \"${inner_prefix}\" \\\r\n\t\t\"${state_args[@]}\" \\\r\n\t\t--icmpv6-type destination-unreachable\r\n\r\n\t# outgoing\r\n\taccept \\\r\n\t\t-s \"${inner_prefix}\" \\\r\n\t\t--icmpv6-type destination-unreachable\r\n\r\n\t# PACKET TOO BIG ERROR MESSAGES\r\n\t# =============================\r\n\r\n\t# incoming\r\n\taccept \\\r\n\t\t-d \"${inner_prefix}\" \\\r\n\t\t\"${state_args[@]}\" \\\r\n\t\t--icmpv6-type packet-too-big\r\n\r\n\t# outgoing\r\n\taccept \\\r\n\t\t-s \"${inner_prefix}\" \\\r\n\t\t--icmpv6-type packet-too-big\r\n\r\n\t# TIME EXCEEDED ERROR MESSAGES\r\n\t# ============================\r\n\r\n\t# incoming w/ code 0\r\n\taccept \\\r\n\t\t-d \"${inner_prefix}\" \\\r\n\t\t\"${state_args[@]}\" \\\r\n\t\t--icmpv6-type 3/0\r\n\r\n\t# @POLICY@\r\n\t# incoming w/ code 1\r\n\taccept \\\r\n\t\t-d \"${inner_prefix}\" \\\r\n\t\t--icmpv6-type 3/1\r\n\r\n\t# outgoing w/ code 0\r\n\taccept \\\r\n\t\t-s \"${inner_prefix}\" \\\r\n\t\t--icmpv6-type 3/0\r\n\r\n\t# @POLICY@\r\n\t# outgoing w/ code 1\r\n\taccept \\\r\n\t\t-s \"${inner_prefix}\" \\\r\n\t\t--icmpv6-type 3/1\r\n\r\n\t# PARAMETER PROBLEM ERROR MESSAGES\r\n\t# ================================\r\n\r\n\tif (( state_enabled == 1 )); then\r\n\t\t# incoming\r\n\t\taccept \\\r\n\t\t\t-d \"${inner_prefix}\" \\\r\n\t\t\t\"${state_args[@]}\" \\\r\n\t\t\t--icmpv6-type 4/1\r\n\r\n\t\taccept \\\r\n\t\t\t-d \"${inner_prefix}\" \\\r\n\t\t\t\"${state_args[@]}\" \\\r\n\t\t\t--icmpv6-type 4/2\r\n\tfi\r\n\r\n\t# outgoing\r\n\taccept \\\r\n\t\t-s \"${inner_prefix}\" \\\r\n\t\t--icmpv6-type 4/1\r\n\r\n\taccept \\\r\n\t\t-s \"${inner_prefix}\" \\\r\n\t\t--icmpv6-type 4/2\r\n\r\n\t# @POLICY@\r\n\t# incoming and outgoing\r\n\taccept --icmpv6-type 4/0\r\ndone\r\n\r\n# Drop all these, both incoming and outgoing\r\ntypes=(\r\n\t# NEIGHBOR DISCOVERY MESSAGES\r\n\t# ===========================\r\n\t'135/0' # Neighbor solicitation\r\n\t'136/0' # Neighbor advertisement\r\n\t'133/0' # Router solicitation\r\n\t'134/0' # Router advertisement\r\n\t'137/0' # Rredirect'\r\n\r\n\t# Multicast Listener Discovery messages\r\n\t# =====================================\r\n\t130 # ML queries (MLDv1 and MLDv2)\r\n\t131 # ML reports (MLDv1)\r\n\t132 # ML Done messages (MLDv1)\r\n\t143 # ML reports (MLDv2)\r\n\r\n\t138 # Router renumbering messages\r\n\r\n\t# NODE INFORMATION QUERIES\r\n\t# ========================\r\n\t139 # Node information queries\r\n\t140 # Node information replies\r\n)\r\n\r\nfor type in \"${types[@]}\"; do\r\n\tdrop --icmpv6-type \"${type}\"\r\ndone\r\n\r\n# MOBILE IPv6 MESSAGES\r\n# ====================\r\n\r\nfor inner_prefix in \"${inner_prefixes[@]}\"; do\r\n\tif (( home_agents_present == 1 )); then\r\n\t\t# incoming Home Agent address discovery request\r\n\t\taccept \\\r\n\t\t\t-d \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type 144\r\n\r\n\t\t# outgoing Home Agent address discovery reply\r\n\t\taccept \\\r\n\t\t\t-s \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type 145\r\n\r\n\t\t# incoming Mobile prefix solicitation\r\n\t\taccept \\\r\n\t\t\t-d \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type 146\r\n\r\n\t\t# outgoing Mobile prefix advertisement\r\n\t\taccept \\\r\n\t\t\t-s \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type 147\r\n\tfi\r\n\r\n\tif (( mobile_nodes_present == 1 )); then\r\n\t\t# outgoing Home Agent address discovery request\r\n\t\taccept \\\r\n\t\t\t-s \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type 144\r\n\r\n\t\t# incoming Home Agent address discovery reply\r\n\t\taccept \\\r\n\t\t\t-d \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type 145\r\n\r\n\t\t# outgoing Mobile prefix solicitation\r\n\t\taccept \\\r\n\t\t\t-s \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type 146\r\n\r\n\t\t# incoming Mobile prefix advertisement\r\n\t\taccept \\\r\n\t\t\t-d \"${inner_prefix}\" \\\r\n\t\t\t--icmpv6-type 147\r\n\tfi\r\ndone\r\n\r\n# DROP EVERYTHING ELSE\r\n# ====================\r\n\r\ndrop\r\n", "notes": "- Fix ShellCheck SC2086 warnings\r\n- Code formatting: improve redability\r\n- Remove unnecessary export statements\r\n- Make uppercase variables lowercase constants\r\n- Make pingable_hosts and inner_prefixes arrays, so that for loops make sense\r\n- Use lowercase IPv6 addresses, as commonly accepted\r\n- Remove useless newlines at the beginning of if-checks and for-loops\r\n- Reduce code repetition by using state_args array\r\n- Combine separate loops in sections\r\n-- DESTINATION UNREACHABLE ERROR MESSAGES\r\n-- PACKET TOO BIG ERROR MESSAGES\r\n-- TIME EXCEEDED ERROR MESSAGES\r\n-- PARAMETER PROBLEM ERROR MESSAGES\r\n- Create filter, accept and drop functions to simplify code\r\n- Reduce code repetition by using type array\r\n- Simplify comments. Comments should explain why something is done, not what is done. If code needs explanation about what it does, it is not readable\r\n\r\nNOTE: The original does not seem to address type codes as advised and claimed in the comments. Additionally, there is one pointless loop in the example code. In my errata, I use numerical codes and types to address all this.\r\n\r\nPlease test the code thoroughly.\r\n\r\n=== Verifier note\r\n\r\nMany of the changes in this erratum are not about errors, but more a refresh, better readability, simplification, etc.  See https://mailarchive.ietf.org/arch/msg/v6ops/RnxLhcrAI4JmF8K7BRiW6xwTtkE/", "submit_date": "2024-05-03", "submitter_name": "William N.", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-06-02 05:05:55"}, {"errata_id": "7840", "doc-id": "RFC1332", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The References section says:", "orig_text": "   [1]   Simpson, W., \"The Point-to-Point Protocol\", RFC 1331, May 1992.\r\n\r\n   [2]   Postel, J., \"Internet Protocol\", RFC 791, USC/Information\r\n         Sciences Institute, September 1981.\r\n\r\n   [3]   Jacobson, V., \"Compressing TCP/IP Headers\", RFC 1144, January\r\n         1990.\r\n\r\n   [4]   Postel, J., \"The TCP Maximum Segment Size Option and Related\r\n         Topics\", RFC 879, USC/Information Sciences Institute, November\r\n         1983.\r\n", "correct_text": "   [1]   Simpson, W., \"The Point-to-Point Protocol (PPP) for the\r\n         Transmission of Multi-protocol Datagrams over Point-to-Point\r\n         Links\", RFC 1331, May 1992.\r\n\r\n   [2]   Postel, J., \"Internet Protocol\", RFC 791, USC/Information\r\n         Sciences Institute, September 1981.\r\n\r\n   [3]   Jacobson, V., \"Compressing TCP/IP Headers for Low-Speed Serial\r\n         Links\", RFC 1144, February 1990.\r\n\r\n   [4]   Postel, J., \"The TCP Maximum Segment Size and Related Topics\",\r\n         RFC 879, USC/Information Sciences Institute, November 1983.\r\n", "notes": "In the references section, titles for [1], [3] and [4] are inexact. Publication month for [3] is incorrect as well.", "submit_date": "2024-03-07", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-08 19:28:53"}, {"errata_id": "7841", "doc-id": "RFC3031", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "      label switched path       The path through one or more LSRs at one\r\n                                level of the hierarchy followed by a\r\n                                packets in a particular FEC.", "correct_text": "      label switched path       The path through one or more LSRs at one\r\n                                level of the hierarchy followed by packets\r\n                                in a particular FEC.", "notes": "s/a packets/packets/", "submit_date": "2024-03-07", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-08 19:15:07"}, {"errata_id": "7842", "doc-id": "RFC3031", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "      MPLS edge node            an MPLS node that connects an MPLS\r\n                                domain with a node which is outside of\r\n                                the domain, either because it does not\r\n                                run MPLS, and/or because it is in a\r\n                                different domain.  Note that if an LSR\r\n                                has a neighboring host which is not\r\n                                running MPLS, that that LSR is an MPLS\r\n                                edge node.", "correct_text": "      MPLS edge node            an MPLS node that connects an MPLS\r\n                                domain with a node which is outside of\r\n                                the domain, either because it does not\r\n                                run MPLS, and/or because it is in a\r\n                                different domain.  Note that if an LSR\r\n                                has a neighboring host which is not\r\n                                running MPLS, then that LSR is an MPLS\r\n                                edge node.", "notes": "s/that that/then that/", "submit_date": "2024-03-07", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-08 19:17:23"}, {"errata_id": "7843", "doc-id": "RFC3031", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "      VP merge                  label merging where the MPLS label is\r\n                                carried din the ATM VPI field, so as to\r\n", "correct_text": "      VP merge                  label merging where the MPLS label is\r\n                                carried in the ATM VPI field, so as to", "notes": "s/din/in/", "submit_date": "2024-03-07", "submitter_name": "Christophe Deleuze", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-08 19:20:52"}, {"errata_id": "7850", "doc-id": "RFC2328", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "10.7/A.3.5", "orig_text": "Section 10.7\r\n\r\n        Each LSA specified in the Link State Request packet should be\r\n        located in the router's database, and copied into Link State\r\n        Update packets for transmission to the neighbor.  These LSAs\r\n        should NOT be placed on the Link state retransmission list for\r\n        the neighbor.  If an LSA cannot be found in the database,\r\n        something has gone wrong with the Database Exchange process, and\r\n        neighbor event BadLSReq should be generated.\r\n \r\nSection A.3.5 \r\n\r\n    Link State Update packets are multicast on those physical networks\r\n    that support multicast/broadcast.  In order to make the flooding\r\n    procedure reliable, flooded LSAs are acknowledged in Link State\r\n    Acknowledgment packets.  If retransmission of certain LSAs is\r\n    necessary, the retransmitted LSAs are always sent directly to the\r\n    neighbor.  For more information on the reliable flooding of LSAs,\r\n    consult Section 13.", "correct_text": "Section 10.7\r\n        \r\n        Each LSA specified in the Link State Request packet should be\r\n        located in the router's database, and copied into Link State\r\n        Update packets for transmission directly to the neighbor, \r\n        i.e., unicast on all interface types except point-to-point\r\n        interfaces where all OSPF packets are sent to the address\r\n        AllSPFRouters.  These LSAs should NOT be placed on the Link\r\n        state retransmission list for the neighbor.  If an LSA cannot\r\n        be found in the database, something has gone wrong with the\r\n        Database Exchange process, and neighbor event BadLSReq should\r\n        be generated.\r\n\r\nSection A.3.5 \r\n    \r\n    Link State Update packets are multicast on those physical networks\r\n    that support multicast/broadcast.  In order to make the flooding\r\n    procedure reliable, flooded LSAs are acknowledged in Link State\r\n    Acknowledgment packets.  If retransmission of certain LSAs is\r\n    necessary, the retransmitted LSAs are always sent directly to the\r\n    neighbor.  For more information on the reliable flooding of LSAs,\r\n    consult Section 13. Link State Update packets are also sent\r\n    directly to the neighbor in response to Link State Request\r\n    packets as specified in Section 10.7.\r\n   ", "notes": "Clarification that OSPF Link State Updates sent in response to OSPF Link Requests should be unicast.", "submit_date": "2024-03-15", "submitter_name": "Alfred Lindem", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-10-10 13:04:37"}, {"errata_id": "7847", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "               | \"k%C3%A1va                 ; Czech\r\n", "correct_text": "               | \"k%C3%A1va\"                ; Czech\r\n", "notes": "Missing end-quote on Czech language coffee scheme name.", "submit_date": "2024-03-11", "submitter_name": "Kayla Coyote", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-13 17:37:51"}, {"errata_id": "7848", "doc-id": "RFC8410", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "Certificate  ::=  SEQUENCE  {\r\n           tbsCertificate       TBSCertificate,\r\n           signatureAlgorithm   AlgorithmIdentifier,\r\n           signatureValue       BIT STRING  }\r\n\r\n...\r\n\r\n\r\nFor the Certificate structure, the signature value is\r\n   wrapped in the \"signatureValue\" BIT STRING field.", "correct_text": "Certificate  ::=  SEQUENCE  {\r\n           tbsCertificate       TBSCertificate,\r\n           signatureAlgorithm   AlgorithmIdentifier,\r\n           signature            BIT STRING  }\r\n\r\n...\r\n\r\nFor the Certificate structure, the signature value is\r\n   wrapped in the \"signature\" BIT STRING field.", "notes": "There is no field with the name \"signatureValue\" in the Certificate SEQUENCE. It is instead named \"signature\" according to the ASN.1 module in RFC 5280 A.1 as well as the ASN.1 module in section 14 of RFC 5912.", "submit_date": "2024-03-12", "submitter_name": "Corey Bonnell", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-04-11 19:52:08"}, {"errata_id": "7851", "doc-id": "RFC2328", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.1", "orig_text": "        Retransmissions of Link State Update packets are ALWAYS sent\r\n        directly to the neighbor. On multi-access networks, this means\r\n        that retransmissions should be sent to the neighbor's IP\r\n        address.\r\n\r\n       ", "correct_text": "        Retransmissions of Link State Update packets and Link State\r\n        Update packets sent in response to Link State Request packets\r\n        are ALWAYS sent directly to the neighbor. On multi-access\r\n        networks, this means that retransmissions should be sent to\r\n        the neighbor's IP address.\r\n\r\n       ", "notes": "One more place requiring clarification with respect to the Link State Update packets sent in response to Link State Request packets.", "submit_date": "2024-03-15", "submitter_name": "Acee Lindem", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-10-10 13:07:23"}, {"errata_id": "7852", "doc-id": "RFC9260", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.5", "orig_text": "When receiving an SCTP packet, the endpoint MUST ensure that the\r\nvalue in the Verification Tag field of the received SCTP packet\r\nmatches its own tag.", "correct_text": "When receiving an SCTP packet, the endpoint MUST first ensure that the\r\nvalue in the Verification Tag field of the received SCTP packet\r\nmatches its own tag before processing any chunks or changing its state.", "notes": "State explicitly that the check of the verification tag needs to be done before any processing of the packet.\r\n\r\nThanks to Jake Ginesin, Max von Hippel, and Cristina Nita-Rotaru for reporting issue and discussing it with me.", "submit_date": "2024-03-15", "submitter_name": "Michael T\u00fcxen", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 08:01:23"}, {"errata_id": "7911", "doc-id": "RFC9132", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.3", "orig_text": "uses data-channel:target {\r\n                when \"/dots-signal/scope/conflict-information/\"\r\n                   + \"conflict-cause = 'overlapping-targets'\";\r\n              }", "correct_text": "Uses data+channel:claim\r\n             If \"/signal-information=conflict", "notes": "Original text is outdated in the technical base \r\n\r\nCorrected text is definitely the real core use in the systematic technical decorum\n --VERIFIER NOTES-- \nIncorrect   ", "submit_date": "2024-04-29", "submitter_name": "Wolf mark", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-05-06 17:21:15"}, {"errata_id": "7912", "doc-id": "RFC2425", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.2", "orig_text": "begin:VCARD\r\nsource:ldap://cn=bjorn%20Jensen, o=university%20of%20Michigan, c=US\r\nname:Bjorn Jensen", "correct_text": "begin:VCARD\r\nsource:ldap://cn=bjorn%20Jensen,o=university%20of%20Michigan,c=US\r\nname:Bjorn Jensen", "notes": "Section 6.1 says \"It contains a URI as defined in [RFC-1738]\" and RFC 1738 says in section 2.2:\r\n\"Octets must be encoded [...] if the use of the corresponding character is unsafe [...]\" and \r\n\"The space character is unsafe [...]\".\r\nThis means that the space character in this source uri must be percent-encoded or, in this case, removed.", "submit_date": "2024-04-29", "submitter_name": "Tom Sydney Kerckhove", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-29 18:42:53"}, {"errata_id": "7913", "doc-id": "RFC4770", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "   BEGIN:vCard\r\n   VERSION:3.0\r\n   FN:Alice Doe\r\n   IMPP;TYPE=personal,pref:im:alice@example.com\r\n   END:vCard", "correct_text": "   BEGIN:vCard\r\n   VERSION:3.0\r\n   FN:Alice Doe\r\n   N:Doe;Alice;;;\r\n   IMPP;TYPE=personal,pref:im:alice@example.com\r\n   END:vCard", "notes": "The \"N\" property is required according to RFC2426: \"Type name: N [...] The property MUST be present in the vCard object.\"", "submit_date": "2024-04-29", "submitter_name": "Tom Sydney Kerckhove", "verifier_id": "", "verifier_name": null, "update_date": "2024-05-15 04:13:34"}, {"errata_id": "8124", "doc-id": "RFC8678", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3.2", "orig_text": "Let's consider a scenario in which all uplinks are operational, and\r\nH41 receives two different RAs from R3: one from LLA_A with a PIO for\r\n2001:db8:0:a020::/64 and the default router preference set to 11\r\n(low), and another one from LLA_B with a PIO for\r\n2001:db8:0:a020::/64, the default router preference set to 01 (high),\r\nand a RIO for 2001:db8:0:6666::/64.  As a result, H41 uses\r\n", "correct_text": "Let's consider a scenario in which all uplinks are operational, and\r\nH41 receives two different RAs from R3: one from LLA_A with a PIO for\r\n2001:db8:0:a020::/64 and the default router preference set to 11\r\n(low), and another one from LLA_B with a PIO for\r\n2001:db8:0:b020::/64, the default router preference set to 01 (high),\r\nand a RIO for 2001:db8:0:6666::/64.  As a result, H41 uses\r\n", "notes": "Minor technical fix to paragraph 2, 1st sentence: PIO of 2001:db8:0:a020::/64 is used for both LLA_A and LLA_B.  Based on the remaining contents of the paragraph, the PIO of LLA_B should be 2001:db8:0:b020::/64.", "submit_date": "2024-09-28", "submitter_name": "Scott Shambarger", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2024-10-09 15:13:30"}, {"errata_id": "7876", "doc-id": "RFC9537", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "Figure 13:\r\n\r\n  {\r\n    \"rdapConformance\": [\r\n      \"rdap_level_0\"\r\n    ],\r\n    \"domainSearchResults\":[\r\n      {\r\n        \"objectClassName\": \"domain\",\r\n        \"handle\": \"ABC121\",\r\n        \"ldhName\": \"example1.com\",\r\n        \"links\":[\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"rel\":\"self\",\r\n            \"href\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          },\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"rel\":\"related\",\r\n            \"href\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          }\r\n        ]\r\n      },\r\n      {\r\n        \"objectClassName\": \"domain\",\r\n        \"handle\": \"ABC122\",\r\n        \"ldhName\": \"example2.com\",\r\n        \"links\":[\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"rel\":\"self\",\r\n            \"href\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          },\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"rel\":\"related\",\r\n            \"href\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          }\r\n        ]\r\n      }\r\n    ]\r\n  }\r\n\r\nFigure 14:\r\n\r\n  {\r\n    \"rdapConformance\": [\r\n      \"rdap_level_0\",\r\n      \"redacted\"\r\n    ],\r\n    \"domainSearchResults\":[\r\n      {\r\n        \"objectClassName\": \"domain\",\r\n        \"ldhName\": \"example1.com\",\r\n        \"links\":[\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"rel\":\"self\",\r\n            \"href\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          },\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"rel\":\"related\",\r\n            \"href\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          }\r\n        ],\r\n        \"redacted\": [\r\n          {\r\n            \"name\": {\r\n              \"type\": \"Registry Domain ID\"\r\n            },\r\n            \"prePath\": \"$.domainSearchResults[0].handle\",\r\n            \"pathLang\": \"jsonpath\",\r\n            \"method\": \"removal\",\r\n            \"reason\": {\r\n              \"type\": \"Server policy\"\r\n            }\r\n          }\r\n        ]\r\n      },\r\n      {\r\n        \"objectClassName\": \"domain\",\r\n        \"ldhName\": \"example2.com\",\r\n        \"links\":[\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"rel\":\"self\",\r\n            \"href\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          },\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"rel\":\"related\",\r\n            \"href\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          }\r\n        ],\r\n        \"redacted\": [\r\n          {\r\n            \"name\": {\r\n              \"description\": \"Registry Domain ID\"\r\n            },\r\n            \"prePath\": \"$.domainSearchResults[1].handle\",\r\n            \"pathLang\": \"jsonpath\",\r\n            \"method\": \"removal\",\r\n            \"reason\": {\r\n              \"description\": \"Server policy\"\r\n            }\r\n          }\r\n        ]\r\n      }\r\n    ]\r\n  }", "correct_text": "Figure 13:\r\n\r\n  {\r\n    \"rdapConformance\": [\r\n      \"rdap_level_0\"\r\n    ],\r\n    \"domainSearchResults\":[\r\n      {\r\n        \"objectClassName\": \"domain\",\r\n        \"handle\": \"ABC121\",\r\n        \"ldhName\": \"example1.com\",\r\n        \"links\":[\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"rel\":\"self\",\r\n            \"href\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          },\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"rel\":\"related\",\r\n            \"href\":\"https://example.net/rdap/v1/domain/example1.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          }\r\n        ]\r\n      },\r\n      {\r\n        \"objectClassName\": \"domain\",\r\n        \"handle\": \"ABC122\",\r\n        \"ldhName\": \"example2.com\",\r\n        \"links\":[\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"rel\":\"self\",\r\n            \"href\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          },\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"rel\":\"related\",\r\n            \"href\":\"https://example.net/rdap/v1/domain/example2.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          }\r\n        ]\r\n      }\r\n    ]\r\n  }\r\n\r\nFigure 14:\r\n\r\n  {\r\n    \"rdapConformance\": [\r\n      \"rdap_level_0\",\r\n      \"redacted\"\r\n    ],\r\n    \"domainSearchResults\":[\r\n      {\r\n        \"objectClassName\": \"domain\",\r\n        \"ldhName\": \"example1.com\",\r\n        \"links\":[\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"rel\":\"self\",\r\n            \"href\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          },\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example1.com\",\r\n            \"rel\":\"related\",\r\n            \"href\":\"https://example.net/rdap/v1/domain/example1.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          }\r\n        ],\r\n        \"redacted\": [\r\n          {\r\n            \"name\": {\r\n              \"type\": \"Registry Domain ID\"\r\n            },\r\n            \"prePath\": \"$.domainSearchResults[0].handle\",\r\n            \"pathLang\": \"jsonpath\",\r\n            \"method\": \"removal\",\r\n            \"reason\": {\r\n              \"type\": \"Server policy\"\r\n            }\r\n          }\r\n        ]\r\n      },\r\n      {\r\n        \"objectClassName\": \"domain\",\r\n        \"ldhName\": \"example2.com\",\r\n        \"links\":[\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"rel\":\"self\",\r\n            \"href\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          },\r\n          {\r\n            \"value\":\"https://example.com/rdap/domain/example2.com\",\r\n            \"rel\":\"related\",\r\n            \"href\":\"https://example.net/rdap/v1/domain/example2.com\",\r\n            \"type\":\"application/rdap+json\"\r\n          }\r\n        ],\r\n        \"redacted\": [\r\n          {\r\n            \"name\": {\r\n              \"description\": \"Registry Domain ID\"\r\n            },\r\n            \"prePath\": \"$.domainSearchResults[1].handle\",\r\n            \"pathLang\": \"jsonpath\",\r\n            \"method\": \"removal\",\r\n            \"reason\": {\r\n              \"description\": \"Server policy\"\r\n            }\r\n          }\r\n        ]\r\n      }\r\n    ]\r\n  }", "notes": "Noticed that the \"self\" and \"related\" links in Figure 13 and Figure 14 examples have the same \"href\" value. From RFC 9083: A \"related\" link relation MUST NOT include an \"href\" URI that is the same as the \"self\" link relation \"href\" URI to reduce the risk of infinite client processing loops. (The new \"href\" values for the \"related\" links are per James Gould's earlier suggestion.)", "submit_date": "2024-03-30", "submitter_name": "Jasdip Singh", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-04-12 15:09:01"}, {"errata_id": "7858", "doc-id": "RFC7714", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "17", "orig_text": "   The examples in this section are all based upon the same RTCP packet:\r\n\r\n            81c8000e 4d617273 4e545031 4e545031\r\n            52545020 0000042a 0000eb98 4c756e61\r\n            deadbeef deadbeef deadbeef deadbeef\r\n            deadbeef\r\n\r\n   with 32-bit SRTCP index 000005d4.\r\n", "correct_text": "   The examples in this section are all based upon the same RTCP packet:\r\n\r\n\t    81c8000d 4d617273 4e545031 4e545032\r\n            52545020 0000042a 0000e930 4c756e61\r\n            deadbeef deadbeef deadbeef deadbeef\r\n            deadbeef\r\n\r\n   with 32-bit SRTCP index 000005d4.", "notes": "The text at the beginning of Section 17 presents a sample RTCP packet which it expects to be used in subsequent examples. However, all the examples indicate they are based on the packet in the corrected text.", "submit_date": "2024-03-20", "submitter_name": "Doug Gibbons", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 11:08:07"}, {"errata_id": "7856", "doc-id": "RFC6350", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6.2.7", "orig_text": "   Special notes:  The components correspond, in sequence, to the sex\r\n      (biological), and gender identity.  Each component is optional.", "correct_text": "   Special notes:  The components correspond, in sequence, to the sex\r\n      and gender identity.  Each component is optional.", "notes": "The term \"biological\" in regards to sex does not have a widely agreed upon meaning, and is primarily used to discriminate against transgender people.\r\n\r\nIncluding the \"biological\" qualifier serves no purpose.\n --VERIFIER NOTES-- \nRejected per: https://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20210507/\r\n\r\nNote this topic has been better addressed in recent revisions:\r\n\r\nhttps://datatracker.ietf.org/doc/html/rfc9554#section-3.2", "submit_date": "2024-03-18", "submitter_name": "Ryan Castellucci", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:50:34"}, {"errata_id": "7857", "doc-id": "RFC7761", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.6.5", "orig_text": "     bool lost_assert(S,G,I) {\r\n       if ( RPF_interface(S) == I ) {\r\n          return FALSE\r\n       } else {\r\n          return ( AssertWinner(S,G,I) != NULL AND\r\n                   AssertWinner(S,G,I) != me  AND\r\n                   (AssertWinnerMetric(S,G,I) is better\r\n                      than spt_assert_metric(S,I) )\r\n       }\r\n     }", "correct_text": "     bool lost_assert(S,G,I) {\r\n       if ( RPF_interface(S) == I ) {\r\n          return FALSE\r\n       } else {\r\n          return ( AssertWinner(S,G,I) != NULL AND\r\n                   AssertWinner(S,G,I) != me  AND\r\n                   AssertWinnerMetric(S,G,I) is better\r\n                      than spt_assert_metric(S,I) )\r\n       }\r\n     }", "notes": "Excessive parenthesis before 'AssertWinnerMetric(S,G,I)'.", "submit_date": "2024-03-19", "submitter_name": "Alexander Okonnikov", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-20 21:25:24"}, {"errata_id": "7870", "doc-id": "RFC9110", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.6", "orig_text": "   Likewise, a sender MUST NOT forward a message with a Content-Length\r\n   header field value that does not match the ABNF above, with one\r\n   exception: a recipient of a Content-Length header field value\r\n   consisting of the same decimal value repeated as a comma-separated\r\n   list (e.g, \"Content-Length: 42, 42\") MAY either reject the message as\r\n   invalid or replace that invalid field value with a single instance of\r\n   the decimal value, since this likely indicates that a duplicate was\r\n   generated or combined by an upstream message processor.", "correct_text": "   Likewise, a sender MUST NOT send a message with a Content-Length\r\n   header field value that does not match the ABNF above. A\r\n   recipient of a Content-Length header field value consisting of\r\n   the same decimal value repeated as a comma-separated list (e.g,\r\n   \"Content-Length: 42, 42\") MAY either reject the message as invalid\r\n   or replace that invalid field value with a single instance of the\r\n   decimal value, since this likely indicates that a duplicate was\r\n   generated or combined by an upstream message processor.", "notes": "This change aims to fix 2 issues with the text:\r\n\r\nIssue #1\r\nRecall the following from section 8.6:\r\n> Likewise, a sender MUST NOT forward a message with a Content-Length header field value that does not match the ABNF above, ...\r\n\r\nIt wasn't immediately clear to me which of these was the intended meaning:\r\n1. Upon receipt of a message with an invalid Content-Length value, senders MUST NOT forward the message.\r\n2. Upon receipt of a message with an invalid Content-Length value, senders MUST NOT forward the message with the invalid value intact.\r\n\r\nMark Nottingham confirmed on GitHub that the intended meaning is option 2:\r\nhttps://github.com/httpwg/http-core/issues/1113#issuecomment-1937914210\r\n\r\nI propose that the word \"forward\" be changed to \"send\" to clear up the ambiguity.\r\n\r\nIssue #2\r\nWe've just established that the intended meaning of the first half of the sentence in question is that malformed CL header values MUST NOT be forwarded intact.\r\nAn exception to this rule is (by definition) a situation in which invalid CL header values *are* permitted to be forwarded intact.\r\nThe \"exception\" described in the text does not allow for invalid header values to be forwarded intact, so it is a misuse of the word \"exception.\"\r\n\r\nTo clear this up, I propose that the sentence be split in two, and that the word \"exception\" be removed.\n --VERIFIER NOTES-- \nIssue #1: 'forward' and 'send' are defined terms in the specification, and the previous paragraph covers the 'send' -- this requirement is specific to forwarding. It's specifically there to call out the exception _only_ in the forwarding case.\r\n\r\nFor issue #2, this might be more than an editorial problem, but mostly I disagree about \"exception\" being a misuse. I agree that more extensive editorial work could be done, but that is out of scope for an erratum.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/httpbisa/wYhoNFePlmmj5g58g_70er8pTH4/", "submit_date": "2024-03-24", "submitter_name": "Ben Kallus", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-05-14 08:01:48"}, {"errata_id": "7861", "doc-id": "RFC9000", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.1.2", "orig_text": "If a server receives a client Initial that contains an invalid Retry\r\n   token but is otherwise valid,\r\n", "correct_text": "If a server receives a client Initial that contains a token that is\r\n   identifiable as a Retry token, but the token is invalid or does\r\n   not otherwise validate the client's address,\r\n", "notes": "Valid tokens MUST be a) integrity-protected (Section 8.1.4) and distinguishable as to purpose (Section 8.1.1), i.e. tokens from a Retry packet vs. tokens from NEW_TOKEN frames. To satisfy address validation, they should enable the server to verify the client's transport address. This text does not specify which form of invalidity is being discussed -- failure of integrity protection or a mismatch between the contents of the token and the client's address.\r\n\r\nApplying this text to all \"invalid\" tokens which appear to be Retry tokens does not allow for the scenario where the token was generated by another server / another QUIC implementation and is in fact unreadable. Such tokens, even if they appear to be Retry tokens, are supposed to be handled by the requirements in 8.1.3, i.e. ignore the token and handle the packet as if no token were present.\r\n\r\nThis section should be scoped only to tokens which are correctly formatted and readable by the server, but whose contents are not sufficient to prove the client's transport address is valid. Otherwise, the determination that the token is a Retry token cannot be trusted.\r\n\r\n(This discrepancy appears in a multi-CDN context, where tokens generated by one CDN will sometimes be received by a different CDN; if these tokens appear to be \"invalid Retry tokens\", the connection is closed when the token should simply be ignored.)\r\n\r\nAlso see the discusion here (https://mailarchive.ietf.org/arch/msg/quic/-NcqDysNsU7mSXhKdCdM63MLYOc/)", "submit_date": "2024-03-20", "submitter_name": "Mike Bishop", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 10:53:26"}, {"errata_id": "7862", "doc-id": "RFC6376", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.4.2", "orig_text": "[..]", "correct_text": "[insert after item 2]\r\n\r\nDue to de-facto implementation practice, the term WSP of the following two items, \r\nas well as in the part that refers to after the separating colon (the field body) \r\nin the third, has to be interpreted differently, and must include all US-ASCII \r\nwhitespace characters, namely %d9 (HT), %d10 (LF), %d11 (VT), %d12 (FF), %d12 \r\n(CR) as well as %d32 (SP) [?](the isspace(3) set of characters in the ISO C \"C\" \r\nlocale)[/?]", "notes": "As written.\r\nThe behaviour *could* originate in a partial misunderstanding of the Sendmail milter protocol, which is often used to implement DKIM; this protocol *may* send header continuation lines separated by lone LF bytes, instead of CRLF.\r\n(Thanks to Claus Assmann of esmtp.org for this in-between-the-lines reading.)\n --VERIFIER NOTES-- \n   Withdrawn by submitter.", "submit_date": "2024-03-21", "submitter_name": "Steffen Nurpmeso", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2024-03-22 02:39:17"}, {"errata_id": "7863", "doc-id": "RFC5652", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2", "orig_text": "\"... and the content\r\n   field of the EncapsulatedContentInfo value MUST be omitted.\"", "correct_text": "\"... and the eContent\r\n   field of the EncapsulatedContentInfo value MUST be omitted.\"", "notes": "No 'content' field exists and I do not think this is referring to another structure.", "submit_date": "2024-03-21", "submitter_name": "heasley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-03-22 14:49:17"}, {"errata_id": "7878", "doc-id": "RFC1157", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4.1.3.1", "orig_text": "GetResponse (( ipRouteDest.9.1.2.3 =  \"9.1.2.3\" ),\r\n                         ( ipRouteNextHop.9.1.2.3 = \"99.0.0.3\" ),\r\n                         ( ipRouteMetric1.9.1.2.3 = 3 ))", "correct_text": "GetResponse (( ipRouteDest.9.1.2.3 =  \"9.1.2.3\" ),\r\n                         ( ipRouteNextHop.9.1.2.3 = \"99.0.0.3\" ),\r\n                         ( ipRouteMetric.9.1.2.3 = 3 ))", "notes": "ipRouteMetric1.9.1.2.3 should be ipRouteMetric. 9.1.2.3\n --VERIFIER NOTES-- \n\u201cipRouteMetric1\u201d is the name per Section 4.1.3.1:\r\n\r\n   The management station sends to the SNMP agent a GetNextRequest-PDU\r\n   containing the indicated OBJECT IDENTIFIER values as the requested\r\n   variable names:\r\n\r\n   GetNextRequest ( ipRouteDest, ipRouteNextHop, ipRouteMetric1 )", "submit_date": "2024-04-02", "submitter_name": "neo", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-05-17 17:32:36"}, {"errata_id": "7879", "doc-id": "RFC7748", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "z_2 = E * (AA + a24 * E)", "correct_text": "z_2 = E * (BB + a24 * E)", "notes": "In the for loop on page 8, the variable AA should be replaced with BB in Z_2. This modification is necessary because the mathematical formula for point doubling on the Montgomery curve according to (https://en.wikipedia.org/wiki/Montgomery_curve#Montgomery_arithmetic) indicates that Z2n (equivalent to Z_2 in this case) is calculated as follows: Z2n = 4XnZn((Xn-Zn)^2 + ((A+2)/4)(4XnZn)). It is observed in this equation that the operation in the (Xn-Zn)^2 part involves subtraction similar to the variable B, while the operation in the variable A involves addition. Considering this discrepancy, it is suggested to substitute AA with BB for correctness.\n --VERIFIER NOTES-- \n Duplicate of errata report 5651, rejected on CFRG list", "submit_date": "2024-04-02", "submitter_name": "Nawras Hussein Sabbry", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:37:14"}, {"errata_id": "8125", "doc-id": "RFC7656", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "1 Introduction", "orig_text": "All non-specific references to ControLling mUltiple streams for\r\n   tElepresence (CLUE) in this document map to [CLUE-FRAME], and all\r\n   references to Web Real-time Communications (WebRTC) map to\r\n   [WEBRTC-OVERVIEW].", "correct_text": "All non-specific references to Controlling multiple streams for\r\n   telepresence (CLUE) in this document map to [CLUE-FRAME], and all\r\n   references to Web Real-time Communications (WebRTC) map to\r\n   [WEBRTC-OVERVIEW].", "notes": "The letter should be small.\n --VERIFIER NOTES-- \nThe capital letters indicate the letters used to form the abbreviation CLUE. ", "submit_date": "2024-09-29", "submitter_name": "Dalio Guo", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-09-30 16:55:25"}, {"errata_id": "7865", "doc-id": "RFC7489", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix C says:", "orig_text": "<!-- Credit to Roger L. Costello for IPv4 regex\r\n    http://mailman.ic.ac.uk/pipermail/xml-dev/1999-December/\r\n          018018.html -->\r\n<!-- Credit to java2s.com for IPv6 regex\r\n    http://www.java2s.com/Code/XML/XML-Schema/\r\n          IPv6addressesareeasiertodescribeusingasimpleregex.htm -->\r\n<xs:simpleType name=\"IPAddress\">\r\n  <xs:restriction base=\"xs:string\">\r\n    <xs:pattern value=\"((1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5]).){3}\r\n                (1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5])|\r\n                ([A-Fa-f0-9]{1,4}:){7}[A-Fa-f0-9]{1,4}\"/>\r\n  </xs:restriction>\r\n</xs:simpleType>", "correct_text": "<!-- Credit to Roger L. Costello for IPv4 regex\r\n    http://mailman.ic.ac.uk/pipermail/xml-dev/1999-December/\r\n          018050.html -->\r\n<!-- Credit to java2s.com for IPv6 regex\r\n    http://www.java2s.com/Code/XML/XML-Schema/\r\n          IPv6addressesareeasiertodescribeusingasimpleregex.htm -->\r\n<xs:simpleType name=\"IPAddress\">\r\n  <xs:restriction base=\"xs:string\">\r\n    <xs:pattern value=\"((1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5])\\.){3}\r\n                (1?[0-9]?[0-9]|2[0-4][0-9]|25[0-5])|\r\n                ([A-Fa-f0-9]{1,4}:){7}[A-Fa-f0-9]{1,4}\"/>\r\n  </xs:restriction>\r\n</xs:simpleType>", "notes": "The IPv4 regex contains a period \".\" that should be corrected to an escaped period \"\\.\" As stated in the follow up message of the one referenced in the IPv4 regex credit: \"I just realized that there is a bug [...] The period (.) is a special character meaning 'any character'. To indicate that we want a period and not 'any character' the period must be escaped with a backslash, i.e., \\.\" Following the XML schema provided in the original Appendix C, strings like \"1a1a1a1\" and \"1111111\" are considered valid IPv4 addresses, although they are not usable.", "submit_date": "2024-03-23", "submitter_name": "Fr\u00e4nz Friederes", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-03 06:59:54"}, {"errata_id": "7866", "doc-id": "RFC8040", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Multiple", "orig_text": "Text occurs in three places\r\n\r\n1)    Section 3.5.3\r\n\r\n      The leaf-list value is specified as a string, using the canonical\r\n      representation for the YANG data type.  Any reserved characters\r\n      MUST be percent-encoded, according to Sections 2.1 and 2.5 of\r\n      [RFC3986].\r\n\r\n\r\n2)    Section 3.5.3\r\n\r\n      The key value is specified as a string, using the canonical\r\n      representation for the YANG data type.  Any reserved characters\r\n      MUST be percent-encoded, according to Sections 2.1 and 2.5 of\r\n      [RFC3986]. \r\n\r\n\r\n3)    Section 5.1\r\n\r\n      The contents of any query parameter value MUST be encoded according\r\n      to Section 3.4 of [RFC3986].  Any reserved characters MUST be\r\n      percent-encoded, according to Sections 2.1 and 2.5 of [RFC3986].", "correct_text": "1)    Section 3.5.3\r\n\r\n      The leaf-list value is specified as a string, using the canonical\r\n      representation for the YANG data type.  Any reserved characters\r\n      MUST be percent-encoded, according to Sections 2.1, 2.2, and 2.5 of\r\n      [RFC3986].\r\n\r\n2)    Section 3.5.3\r\n\r\n      The key value is specified as a string, using the canonical\r\n      representation for the YANG data type.  Any reserved characters\r\n      MUST be percent-encoded, according to Sections 2.1, 2.2, and 2.5 of\r\n      [RFC3986]. \r\n\r\n3)    Section 5.1\r\n      \r\n      The contents of any query parameter value MUST be encoded according\r\n      to Section 3.4 of [RFC3986].  Any reserved characters MUST be\r\n      percent-encoded, according to Sections 2.1, 2.2, and 2.5 of [RFC3986].\r\n", "notes": "The reserved character list is defined in section 2.2 of RFC 3986", "submit_date": "2024-03-23", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2024-04-03 17:10:02"}, {"errata_id": "7867", "doc-id": "RFC2698", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   The PBS and the CBS and are measured in bytes and both of them must\r\n   be configured to be greater than 0.  ", "correct_text": "   The PBS and the CBS are measured in bytes and both of them must\r\n   be configured to be greater than 0.  ", "notes": "extra \"and\"", "submit_date": "2024-03-24", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-25 17:12:34"}, {"errata_id": "7868", "doc-id": "RFC4042", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "and codepoints in the range U+1000 - U+10FFFF (remainder of\r\n   [UNICODE]) are represented by three nonets.", "correct_text": "and codepoints in the range U+10000 - U+10FFFF (remainder of\r\n   [UNICODE]) are represented by three nonets.", "notes": "It seems to me that a 0 is lacking in the definition of a range.", "submit_date": "2024-03-24", "submitter_name": "Davide Cavagnino", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2026-03-01 20:19:44"}, {"errata_id": "7869", "doc-id": "RFC4042", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "the range U+E0000 - U+EFFFF are copied as values 0x30000 - 0x3ffff;\r\n   that is, these values are shifted by 0x70000.", "correct_text": "the range U+E0000 - U+EFFFF are copied as values 0x30000 - 0x3ffff;\r\n   that is, these values are shifted by 0xB0000.", "notes": "It seems to me that the difference between the original and mapped ranges is 0xB0000", "submit_date": "2024-03-24", "submitter_name": "Davide Cavagnino", "verifier_id": "", "verifier_name": null, "update_date": "2024-03-25 17:21:03"}, {"errata_id": "7871", "doc-id": "RFC9460", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "D.2", "orig_text": "example.com.   SVCB   1 foo.example.com. key667=\"hello\\210qoo\"\r\n\r\n\\# 32 (\r\n00 01                                              ; priority\r\n03 66 6f 6f 07 65 78 61 6d 70 6c 65 03 63 6f 6d 00 ; target\r\n02 9b                                              ; key 667\r\n00 09                                              ; length 9\r\n68 65 6c 6c 6f d2 71 6f 6f                         ; value\r\n)\r\n\r\n\\x00\\x01                                           # priority\r\n\\x03foo\\x07example\\x03com\\x00                      # target\r\n\\x02\\x9b                                           # key 667\r\n\\x00\\x09                                           # length 9\r\nhello\\xd2qoo                                       # value", "correct_text": "example.com.   SVCB   1 foo.example.com. key667=\"hello\\210qoo\"\r\n\r\n\\# 32 (\r\n00 01                                              ; priority\r\n03 66 6f 6f 07 65 78 61 6d 70 6c 65 03 63 6f 6d 00 ; target\r\n02 9b                                              ; key 667\r\n00 09                                              ; length 9\r\n68 65 6c 6c 6f 88 71 6f 6f                         ; value\r\n)\r\n\r\n\\x00\\x01                                           # priority\r\n\\x03foo\\x07example\\x03com\\x00                      # target\r\n\\x02\\x9b                                           # key 667\r\n\\x00\\x09                                           # length 9\r\nhello\\x88qoo                                       # value", "notes": "Original report:\r\nThe escaped octal number \"\\210\" when encoded to hexadecimal should be \"88\" or \"\\x88\", NOT \"d2\" or \"\\xd2\".\r\n\r\nThe \"d2\" or \"\\xd2\" is hexadecimal value for decimal number \"210\".\r\n\r\n\r\nWK Edit: I am rejecting this Errata -- the display format (key667=\"hello\\210qoo\") is encoded using the DNS RFC1035 syntax, which specifies:\r\n\\DDD            where each D is a digit is the octet corresponding to\r\n                the decimal number described by DDD.\r\n\r\nThis is, um, surprising to many, and a relatively common source of issues in the DNS parsing world. \r\n\r\nI encourage future updates of the RFC to include a \"footnote\" / parenthetical pointing this out...\n --VERIFIER NOTES-- \n   I am rejecting this Errata -- the display format (key667=\"hello\\210qoo\") is encoded using the DNS RFC1035 syntax, which specifies:\r\n\\DDD where each D is a digit is the octet corresponding to\r\nthe decimal number described by DDD.\r\n\r\nThis is, um, surprising to many, and a relatively common source of issues in the DNS parsing world.\r\n\r\nI encourage future updates of the RFC to include a \"footnote\" / parenthetical pointing this out...\r\n\r\n", "submit_date": "2024-03-25", "submitter_name": "Shulhan", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-04-16 08:41:29"}, {"errata_id": "7872", "doc-id": "RFC1766", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "   A prerequisite for any such function is a means of labelling the\r\n   information content with an identifier for the language in which is\r\n   is written.", "correct_text": "   A prerequisite for any such function is a means of labelling the\r\n   information content with an identifier for the language in which it\r\n   is written.", "notes": "Last part of the sentence \"in which is is written\" should be \"in which it is written\".", "submit_date": "2024-03-27", "submitter_name": "Shinichiro Endo", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-03-27 16:02:44"}, {"errata_id": "7873", "doc-id": "RFC6056", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.3", "orig_text": "(this \"separation of the\r\nephemeral port space\" means that transport-protocol instances with\r\ndifferent remote endpoints will not have different sequences of port\r\nnumbers, i.e., will not be part of the same ephemeral port sequence\r\nas in the case of the traditional BSD ephemeral port selection\r\nalgorithm)", "correct_text": "(this \"separation of the\r\nephemeral port space\" means that transport-protocol instances with\r\ndifferent remote endpoints will have different sequences of port\r\nnumbers, i.e., will not be part of the same ephemeral port sequence\r\nas in the case of the traditional BSD ephemeral port selection\r\nalgorithm)", "notes": "Drop the first \"not\", otherwise the two parts of the sentence (before and after \"i.e.\") are contradictory and the whole parenthetical doesn't match the context.", "submit_date": "2024-03-27", "submitter_name": "\u0160t\u011bp\u00e1n N\u011bmec", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 08:00:31"}, {"errata_id": "7874", "doc-id": "RFC8467", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6", "orig_text": "Note that even with encryption and padding, it might be trivial to identify that the observed traffic is DNS.", "correct_text": "Note that even with encryption and padding, it might be easy to identify that the observed traffic is DNS.", "notes": "easy to understand what that means.\n --VERIFIER NOTES-- \nWhile the suggested text*might* be easier to read (and as a non-English speaker easy/trivial are easy to read even if they do not convey the same semantic), it is not worth a verified errata IMHO.", "submit_date": "2024-03-28", "submitter_name": "hello world", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-04-23 12:29:07"}, {"errata_id": "7880", "doc-id": "RFC8439", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.4.1", "orig_text": "encrypted_message |= (block^key_stream)[0..len(plaintext)%64]\r\n", "correct_text": "encrypted_message |= (block^key_stream)[0..(len(plaintext)%64)-1]", "notes": "If the plaintext size is not a multiple of 64 bytes, there is an off-by-one error in appending the final block of the encrypted message. In the original version, the encrypted message would always be one byte larger than the plaintext.\r\n\r\nThe corrected version ensures that the encrypted message size is always equal to the plaintext size.\r\n\r\nFor completeness: If the plaintext size is a multiple of 64 bytes, the second part of the code is skipped. Hence, this off-by-one error is not triggered in that specific case.\r\n\r\n(Non-)relation to correction 5989: The \"original text\", as quoted here, assumes that correction 5989 has already been applied. Correction 5989 deals with a different issue of this line of code, namely, the replacement of \"+=\" by \"|=\". This is completely orthogonal to the off-by-one error described here.\r\n\r\n--VERIFIER NOTES--\r\nFixes an off-by-one in the final partial-block slice. \u00a72.4.1 uses inclusive bounds (e.g., 0..63 for full blocks). For L = len(plaintext)%64, the correct indices are 0..(L-1); 0..L would extract L+1 bytes.\r\nRefs: RFC 8439 \u00a72.4.1: http://datatracker.ietf.org/doc/html/rfc8439#section-2.4.1", "submit_date": "2024-04-03", "submitter_name": "Volker Diels-Grabsch", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-10-20 22:58:10"}, {"errata_id": "7875", "doc-id": "RFC7011", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "   Reduced-size encoding MAY be applied to the following integer types:\r\n   unsigned64, signed64, unsigned32, signed32, unsigned16, and signed16.\r\n   The signed versus unsigned property of the reported value MUST be\r\n   preserved.  The reduction in size can be to any number of octets\r\n   smaller than the original type if the data value still fits, i.e., so\r\n   that only leading zeroes are dropped.  For example, an unsigned64 can\r\n   be reduced in size to 7, 6, 5, 4, 3, 2, or 1 octet(s).", "correct_text": "   Reduced-size encoding MAY be applied to the following integer types:\r\n   unsigned64, signed64, unsigned32, signed32, unsigned16, and signed16.\r\n   The signed versus unsigned property of the reported value MUST be\r\n   preserved. The reduction in size can be to any number of octets\r\n   smaller than the original type if the data value still fits, i.e., so\r\n   that only leading zeroes are dropped (Or, in the case of negative\r\n   signed values, so that only leading ones are dropped). For example,\r\n   an unsigned64 can be reduced in size to 7, 6, 5, 4, 3, 2, or 1 octet(s).", "notes": "As written, the specification suggests that integer values may only be encoded using a reduced-size encoding if they have a run of zeroes at the beginning. However, the specification also describes being able to use reduced-size encoding for signed integer values\u2014and only non-negative values of signed integers have a representation that begins with zeroes.\r\n\r\nEither the text should clarify that negative values may never be expressed using a reduced-size encoding (which is what the strictest reading of the current text would suggest), or it should specify that leading ones may also be dropped for signed values, which makes it clear that they should be interpreted via sign extension of the high bit.\r\n\r\nA quick survey of existing IPFIX implementations suggests that those which decode reduced-size encoding of integers at all produce the semantic equivalent of sign extension when they encounter a reduced-size encoding of a signed integer value.\r\n\r\n-- \r\nWK: Thread (for posterity): https://mailarchive.ietf.org/arch/msg/ipfix/sBsLy-XYH8sQCEjnPSGoEKsRL9Y/\r\n", "submit_date": "2024-03-28", "submitter_name": "Katherine Prevost", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-04-04 13:39:34"}, {"errata_id": "7877", "doc-id": "RFC9564", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "Given that new SHA-256 hashes are not sequential but fully random,\r\nreplay attacks of future predictions are prevented.", "correct_text": "Given that new SHA-256 hashes are not sequential but significantly\r\nhard to predict, replay attacks of future predictions are prevented\r\nunless the attacker has sufficient computing power to fully model all\r\npossible pseudo-random number generators and thereby predict all\r\npossible hashes within a sufficiently short time.", "notes": "Thank you for citing RFC6709. However, I have shown** that the concept of randomness is a fallacy - in fact, what we call \"randomness\" is nothing other than unpredictability by a Turing machine within a finite time. An LLM is subject to this same constraint like any other Turing machine program. I suspect that this observation shows that FLIP is a flop.\r\n\r\n** https://www.cs.auckland.ac.nz/research/groups/CDMTCS/researchreports/view-publication.php?selected-id=835", "submit_date": "2024-04-01", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-11-01 12:22:16"}, {"errata_id": "7881", "doc-id": "RFC9171", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1.1", "orig_text": "   The first element of each bundle status item SHALL be a status\r\n   indicator, a Boolean value indicating whether or not the\r\n   corresponding bundle status is asserted, encoded as a CBOR Boolean\r\n   value.", "correct_text": "   The first element of each bundle status item SHALL be a status\r\n   indicator, a Boolean value indicating whether or not the\r\n   corresponding bundle status is asserted, encoded as a CBOR simple\r\n   value.  A value of 'true' SHALL be encoded as a CBOR simple value\r\n   with additional information 21.  A value of 'false' SHALL be encoded\r\n   as a CBOR simple value with additional information 20.", "notes": "The CBOR spec does not define a 'Boolean' type (RFC8949). It's become common practice to encode boolean values as simple values (major type 7), with additional information 21 indicating 'true' and additional information 20 indicating 'false' (RFC9254, RFC8152). However, this should be explicitly stated for clarity.\r\n\r\n--- comments ---\r\n\r\nThe original text refers to \"Boolean values\" and not to any \"Boolean type\"; it is technically correct as is.\r\n\r\nAs noted, CBOR doesn't have a specific \"type\" per se for a Boolean, but RFC 8948 S3.3 clearly specifies an encoding for `true` and `false`.\r\n\r\nThat said, there might be room here for additional clarity for implementers if there is ever to be a 9171bis.", "submit_date": "2024-04-03", "submitter_name": "John Huff", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2024-04-07 23:12:46"}, {"errata_id": "7883", "doc-id": "RFC9250", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.5", "orig_text": "Implementations SHOULD use the mechanisms defined in Section 5.4 to\r\nmitigate this attack.", "correct_text": "Implementations MUST use the padding mechanisms defined in Section 5.4\r\nto mitigate this attack.", "notes": "Section 5.4 states that \"[i]mplementations MUST protect against the traffic analysis attacks described in Section 7.5\", but Section 7.5 describes that obligation as a \"SHOULD\". \"MUST\" is correct, and the inconsistent \"SHOULD\" in Section 7.5 is an error.\r\n\r\n-- Verifier (Eric Vyncke) note --\r\n\r\nThe short discussion on the DPRIVE WG list has indicated that 2 authors are in favour of verifying this errata.", "submit_date": "2024-04-05", "submitter_name": "Lyra Naeseth", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-04-23 13:14:46"}, {"errata_id": "7884", "doc-id": "RFC8040", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.5.3.", "orig_text": "   The following example shows how reserved characters are\r\n   percent-encoded within a key value.  The value of \"key1\" contains\r\n   a comma, single-quote, double-quote, colon, double-quote, space,\r\n   and forward slash (,'\":\" /).  Note that double-quote is not a\r\n   reserved character and does not need to be percent-encoded.  The\r\n   value of \"key2\" is the empty string, and the value of \"key3\" is the\r\n   string \"foo\".\r\n\r\n   Example URL:\r\n\r\n      /restconf/data/example-top:top/list1=%2C%27\"%3A\"%20%2F,,foo", "correct_text": "   The following example shows how specific characters are\r\n   percent-encoded within a key value.  The value of \"key1\" contains\r\n   a comma, single-quote, double-quote, colon, double-quote, space,\r\n   and forward slash (,'\":\" /).  Note that double-quote and space are\r\n   not reserved characters but also do not correspond to characters in\r\n   the unreserved set and therefore need to be percent-encoded.  The\r\n   value of \"key2\" is the empty string, and the value of \"key3\" is the\r\n   string \"foo\".\r\n\r\n   Example URL:\r\n\r\n      /restconf/data/example-top:top/list1=%2C%27%22%3A%22%20%2F,,foo", "notes": "As explained in RFC3986, the restricted set of URI characters consists of reserved characters, unreserved characters and percent-encodings. If a character does not belong to either reserved characters or unreserved characters it can only appear as a percent-encoding in a valid URI. This restricted set of characters is defined by RFC3986, Appendix A, and does not include double-quote and space characters.", "submit_date": "2024-04-05", "submitter_name": "Jernej Tuljak", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7887", "doc-id": "RFC6274", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": ".8.4", "orig_text": "   The attacker is:\r\n\r\n   o  Four hops away from A.\r\n\r\n   o  Four hops away from B.\r\n\r\n   o  Four hops away from C.\r\n\r\n   o  Four hops away from D.\r\n\r\n   In the network setup of Figure 3, the only system that satisfies all\r\n   these conditions is the one marked as the \"F\".\r\n", "correct_text": "   The attacker is:\r\n\r\n   o  Four hops away from A.\r\n\r\n   o  Four hops away from B.\r\n\r\n   o  Four hops away from C.\r\n\r\n   o  Three hops away from D.\r\n\r\n   In the network setup of Figure 6, the only system that satisfies all\r\n   these conditions is the one marked as the \"F\".\r\n", "notes": "Since the packets that D gets has a TTL of 62 while A,B and C gets packets with TTL of 61, it should be that D is one less hop away than the others. This also seems to be illustrated in Figure 6.\r\n\r\nText that seems to refer to the network setup of Figure 6 references to incorrect figure number 3.", "submit_date": "2024-04-08", "submitter_name": "Niklas Baerveldt", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-09 23:38:42"}, {"errata_id": "7888", "doc-id": "RFC4210", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5.3.2.", "orig_text": "An Initialization response message contains as the PKIBody an\r\nCertRepMessage data structure,", "correct_text": "An Initialization response message contains as the PKIBody a\r\nCertRepMessage data structure,", "notes": "typo (an > a)", "submit_date": "2024-04-09", "submitter_name": "Sylvain Etienne", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-09 23:47:28"}, {"errata_id": "7889", "doc-id": "RFC4880", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.3.23", "orig_text": "Note that any signature may be revoked, including a certification on \r\nsome other person's key.", "correct_text": "Note that any certification may be revoked, including a certification on \r\nsome other person's key.", "notes": "the only three types of revocation that are specified in OpenPGP are:\r\n\r\n0x20: Key revocation signature\r\nThe signature is calculated directly on the key being revoked. A\r\nrevoked key is not to be used. Only revocation signatures by the\r\nkey being revoked, or by an authorized revocation key, should be\r\nconsidered valid revocation signatures.\r\n\r\n0x28: Subkey revocation signature\r\nThe signature is calculated directly on the subkey being revoked.\r\nA revoked subkey is not to be used. Only revocation signatures\r\nby the top-level signature key that is bound to this subkey, or\r\nby an authorized revocation key, should be considered valid\r\nrevocation signatures.\r\n\r\n0x30: Certification revocation signature\r\nThis signature revokes an earlier User ID certification signature\r\n(signature class 0x10 through 0x13) or direct-key signature\r\n(0x1F). It should be issued by the same key that issued the\r\nrevoked signature or an authorized revocation key. The signature\r\nis computed over the same data as the certificate that it\r\nrevokes, and should have a later creation date than that\r\ncertificate.\r\n\r\nThere is no explicit mechanism to revoke a document signature (as opposed to a certification signature), so it makes no sense to claim that \"any signature may be revoked\".\r\n\r\nThis was observed by Andrew Gallagher in https://gitlab.com/dkg/openpgp-revocation/-/issues/15, and is still an issue in the successor to RFC 4880, draft-ietf-openpgp-crypto-refresh \u2639\r\n\r\n", "submit_date": "2024-04-10", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-04-21 02:38:23"}, {"errata_id": "7890", "doc-id": "RFC1006", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "TP0 is is meant to run over a reliable network service", "correct_text": "TP0 is meant to run over a reliable network service", "notes": "There is one 'is' too many", "submit_date": "2024-04-12", "submitter_name": "Fabian Maier", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-12 16:41:51"}, {"errata_id": "7892", "doc-id": "RFC8029", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Detecting Multiprotocol Label Switched (MPLS) Data-Plane Failures\r\n", "correct_text": "Detecting Multiprotocol Label Switched Data-Plane Failures\r\nor \r\nDetecting Multiprotocol Label Switching (MPLS) Data-Plane Failures.", "notes": "MPLS expands to  \"Multiprotocol Label Switching\", not to \"Multiprotocol Label Switched\".\r\n\r\nEither we can remove the abbreviation in the title or s/Switched/Switching, either of the \r\nalternatives work.", "submit_date": "2024-04-15", "submitter_name": "Loa Andersson", "verifier_id": "", "verifier_name": "James Guichard", "update_date": "2024-04-16 12:00:44"}, {"errata_id": "7894", "doc-id": "RFC8888", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   RTCP Congestion Control Feedback Packets SHOULD include a report\r\n   block for every active SSRC.", "correct_text": "   RTCP Congestion Control Feedback Packets SHOULD include a report\r\n   block for every SSRC where packets have been received since the\r\n   previous report was generated.", "notes": "The term \"active\" is ambiguous. Discussion on the avtcore mailing list indicates that this is the intended meaning.", "submit_date": "2024-04-16", "submitter_name": "Harald Tveit Alvestrand", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-05-21 13:44:41"}, {"errata_id": "8315", "doc-id": "RFC5706", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "   The protocol document should make clear the limitations implicit\r\n   within the protocol and the behavior when limits are exceeded.  This\r\n   should be considered in a data-modeling-independent manner -- what\r\n   makes managed-protocol sense, not what makes management-protocol-\r\n   sense.", "correct_text": "   The protocol document should make clear the limitations implicit\r\n   within the protocol and the behavior when limits are exceeded.  This\r\n   should be considered in a data-modeling-independent manner -- what\r\n   makes managed-protocol sense, not what makes data model\r\n   sense.", "notes": "I am not sure what correct wording would be. The existing wording is self contradictory. The above \"corrected\" text is just a guess.\n --VERIFIER NOTES-- \nThe play on words can be confusing, but there is nothing wrong with it as written. In addition, the suggested wording does not help clarify it any better. ", "submit_date": "2025-02-26", "submitter_name": "Donald Eastlake", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-02-28 18:38:41"}, {"errata_id": "8305", "doc-id": "RFC3915", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "When an <info> command has been processed successfully, the EPP\r\n<resData> element MUST contain child elements as described in [2]. In\r\naddition, the EPP <extension> element MUST contain a child\r\n<rgp:infData> element that identifies the registry grace period\r\nnamespace and the location of the registry grace period schema.  The\r\n<rgp:infData> element contains a single <rgp:rgpStatus> element that\r\ncontains a single attribute \"s\" whose value describes the current\r\ngrace period status of the domain.  Possible status values are\r\ndescribed in section Section 3.1.\r\n", "correct_text": "When an <info> command has been processed successfully, the EPP\r\n<resData> element MUST contain child elements as described in [2]. In\r\naddition, the EPP <extension> element MUST contain a child\r\n<rgp:infData> element that identifies the registry grace period\r\nnamespace and the location of the registry grace period schema.  The\r\n<rgp:infData> element contains one or more <rgp:rgpStatus> elements that\r\neach contain a single attribute \"s\" whose value describes one of the the\r\ncurrent grace period status of the domain.  Possible status values are\r\ndescribed in section Section 3.1.\r\n", "notes": "The XML schema in Section 5 sets the maximum number of occurrences of the <rgpStatus> element to be unbounded, meaning that any number of elements may be present.\r\n\r\nThis correction updates the text to reflect the XML schema.", "submit_date": "2025-02-21", "submitter_name": "Gavin Brown", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-03-28 17:52:11"}, {"errata_id": "7902", "doc-id": "RFC9359", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "   Abstract\r\n   \r\n   This document describes a generic format for use in echo request/\r\n   reply mechanisms, which can be used within an IOAM-Domain, allowing\r\n   the IOAM encapsulating node to discover the enabled IOAM capabilities\r\n   of each IOAM transit and IOAM decapsulating node.  The generic format\r\n   is intended to be used with a variety of data planes such as IPv6,\r\n   MPLS, Service Function Chain (SFC), and Bit Index Explicit\r\n   Replication (BIER).", "correct_text": "   Abstract\r\n\r\n   This document describes a generic format for use in echo request/\r\n   reply mechanisms, which can be used within an In Situ Operations, \r\n   Administration, and Maintenance (IOAM) domain (called, IOAM-Domain), \r\n   allowing the IOAM encapsulating node to discover the enabled IOAM \r\n   capabilities of each IOAM transit and IOAM decapsulating node. \r\n   The generic format is intended to be used with a variety of data\r\n   planes such as IPv6, MPLS, Service Function Chain (SFC), and Bit\r\n   Index Explicit Replication (BIER).", "notes": "The Abstract is considered stand-alone, and any not well-known abbreviations need to be \r\nexpanded.\r\nNote: I'm uncertain about the placement of the \"hyphen\" and the parenthesis in\r\n\"In Situ Operations, Administration, and Maintenance (IOAM)-Domain\"\r\n\r\n== Verifier note\r\n\r\nWent with \"(called, IOAM-Domain)\" hack to maintain the OLD intent.", "submit_date": "2024-04-19", "submitter_name": "Loa Andersson", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-27 17:15:23"}, {"errata_id": "7903", "doc-id": "RFC6386", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "13.2", "orig_text": " -dct_cat1, -dct_cat2, /* cat1 =  \"111100\",\r\n                                  cat2 = \"111101\" */\r\n        18, 20,\r\n         -dct_cat3, -dct_cat4, /* cat3 = \"1111100\",\r\n                                  cat4 = \"1111101\" */\r\n         -dct_cat5, -dct_cat6  /* cat4 = \"1111110\",\r\n                                  cat4 = \"1111111\" */", "correct_text": " -dct_cat1, -dct_cat2, /* cat1 =  \"111100\",\r\n                                  cat2 = \"111101\" */\r\n        18, 20,\r\n         -dct_cat3, -dct_cat4, /* cat3 = \"1111100\",\r\n                                  cat4 = \"1111101\" */\r\n         -dct_cat5, -dct_cat6  /* cat5 = \"1111110\",\r\n                                  cat6 = \"1111111\" */", "notes": "The last two bit strings are for categories 5 and 6; only the preceding one is for category 4.", "submit_date": "2024-04-21", "submitter_name": "Felix Pahl", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-02 07:04:03"}, {"errata_id": "7904", "doc-id": "RFC6386", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "19.2", "orig_text": " token_prob_update()                               | Type  |\r\n   | ------------------------------------------------- | ----- |\r\n   | for (i = 0; i < 4; i++) {                         |       |\r\n   |   for (j = 0; j < 8; j++) {                       |       |\r\n   |     for (k = 0; k < 3; k++) {                     |       |\r\n   |       for (l = 0; l < 11; l++) {                  |       |\r\n   |         coeff_prob_update_flag                    | L(1)  |\r\n   |         if (coeff_prob_update_flag)               |       |\r\n   |           coeff_prob                              | L(8)  |\r\n   |       }                                           |       |\r\n   |     }                                             |       |\r\n   |   }                                               |       |\r\n   | }                                                 |       |\r\n", "correct_text": " token_prob_update()                               | Type  |\r\n   | ------------------------------------------------- | ----- |\r\n   | for (i = 0; i < 4; i++) {                         |       |\r\n   |   for (j = 0; j < 8; j++) {                       |       |\r\n   |     for (k = 0; k < 3; k++) {                     |       |\r\n   |       for (l = 0; l < 11; l++) {                  |       |\r\n   |         coeff_prob_update_flag                    | B(p)  |\r\n   |         if (coeff_prob_update_flag)               |       |\r\n   |           coeff_prob                              | L(8)  |\r\n   |       }                                           |       |\r\n   |     }                                             |       |\r\n   |   }                                               |       |\r\n   | }                                                 |       |\r\n", "notes": "The type of the flag coeff_prob_update_flag is given as L(1), which, according to the table in Section 8 on p. 25, means that this is a single literal bit that should be read with a 50/50 probability coded as 128.\r\n\r\nBut other parts of the RFC say that these flags are actually read with predetermined probabilities other than 128: Section 13.4 (\u201cToken Probability Updates\u201d) on p. 68 specifies these probabilities in the array coeff_update_probs, and the function decode_entropy_header in the reference implementation (file dixie.c, p. 138/139) uses them (in the array k_coeff_entropy_update_probs) to decode these flags. The current version of libwebp follows the reference implementation and uses these predetermined probabilities.\r\n\r\n According to the table on p. 25, the type of such a flag should be specified as B(p), not as L(1).", "submit_date": "2024-04-21", "submitter_name": "Felix Pahl", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7906", "doc-id": "RFC2869", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.14", "orig_text": "When the checksum is calculated the signature string should be\r\nconsidered to be sixteen octets of zero.  The shared secret is\r\nused as the key for the HMAC-MD5 hash.  The is calculated and\r\ninserted in the packet before the Response Authenticator is\r\ncalculated.", "correct_text": "When the checksum is calculated the signature string should be\r\nconsidered to be sixteen octets of zero.  The shared secret is\r\nused as the key for the HMAC-MD5 hash.  The checksum is calculated and\r\ninserted in the packet before the Response Authenticator is\r\ncalculated.", "notes": "The last sentence was missing a \"checksum\"", "submit_date": "2024-04-24", "submitter_name": "Jan-Frederik Rieckers", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-04-26 18:08:06"}, {"errata_id": "7907", "doc-id": "RFC6787", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "13.1.3", "orig_text": "   Content-ID                         Generic\r\n                             [RFC2392], [RFC2046], and [RFC5322]\r\n", "correct_text": "   Content-ID                         Generic          [RFC2046]\r\n", "notes": "Content-ID is defined in 2046, not in 2392 or 5322. IANA asked about this when 5322 was being obsoleted and wanted to update the reference. IANA needs to simply remove 2392 and 5322 from the registry entry for Content-ID. That said, there are a bunch of other items in this registry where the reference seems to be to HTTP rather than to 6787 itself, but I'm not clear on the intent here. If someone wants to make this a bigger erratum, feel free.", "submit_date": "2024-04-25", "submitter_name": "Pete Resnick", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7925", "doc-id": "RFC9497", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3", "orig_text": "HashToScalar():  Use hash_to_field from [RFC9380] using L = 48,\r\n         expand_message_xmd with SHA-256, DST = \"HashToScalar-\" ||\r\n         contextString, and a prime modulus equal to Group.Order().", "correct_text": "HashToScalar():  Compute uniform_bytes using expand_message =\r\n         expand_message_xmd, DST = \"HashToScalar-\" || contextString, and\r\n         an output length of 48 bytes, interpret uniform_bytes as a\r\n         384-bit integer in little-endian order, and reduce the integer\r\n         modulo Group.Order().", "notes": "It is incorrect to refer to the hash_to_filed operation of RFC 9380 because the implementation of hash_to_field, as described in section 5.2 of RFC 9380 reduces the result integer mod Field order (not Group order).\r\n\r\n 7.     e_j = OS2IP(tv) mod p\r\n\r\nWhere p is the characteristic of field F.\r\n\r\nThe current text imply that the existing hash_to_field implementation for P-256 can be used. But using this will cause a false result due to the mod field order operation.\r\n\r\nThe a better, and accurate way to describe this is by using the same explanation as for other curve types and specify the use of expand_message_xmd directly modulus Group.Order().\n --VERIFIER NOTES-- \nDiscussed on CFRG list. The original text is correct, see https://mailarchive.ietf.org/arch/msg/cfrg/YLqRy76LFlVzeOofGyQiYeDhAuM/", "submit_date": "2024-05-07", "submitter_name": "Stefan Santesson", "verifier_id": "", "verifier_name": "Colin Perkins", "update_date": "2024-05-20 22:51:25"}, {"errata_id": "7926", "doc-id": "RFC3647", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   1.4.1.  Appropriate certificate uses", "correct_text": "   1.4.1  Appropriate certificate uses", "notes": "There was an extra period trailing the subsection header number.", "submit_date": "2024-05-07", "submitter_name": "Philip Porada", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-05-09 21:17:14"}, {"errata_id": "7927", "doc-id": "RFC8532", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "            reference\r\n              \"RFC 8029: Detecting Multiprotocol Label\r\n               Switched (MPLS) Data-Plane Failures\";", "correct_text": "            reference\r\n              \"RFC 8029: Detecting Multiprotocol Label\r\n               Switching (MPLS) Data-Plane Failures\";", "notes": "Errata 7892 is updating the title of RFC 8029. Reflecting that change here. Note, there are 10 occurrences of the string.", "submit_date": "2024-05-07", "submitter_name": "Mahesh Jethanandani", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2024-11-03 14:46:40"}, {"errata_id": "7929", "doc-id": "RFC9562", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.2", "orig_text": "custom_c  62   0b00, 0x38a375d0df1fbf6", "correct_text": "custom_c  62   0b01, 0x38a375d0df1fbf6", "notes": "As shown as -938a- in Figure 30.\r\n\r\nB: xxxxxxxx-xxxx-Mxxx-Nxxx-xxxxxxxxxxxx\r\nC: 5c146b14-3c52-8afd-938a-375d0df1fbf6\r\n\r\nSee also: https://mailarchive.ietf.org/arch/msg/uuidrev/2wJLek182NMv4xQZf8TIos6XrD0/", "submit_date": "2024-05-09", "submitter_name": "KIM Jaesuck a.k.a. gim tcaesvk", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-10 20:33:12"}, {"errata_id": "7930", "doc-id": "RFC8463", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.3", "orig_text": "It is about the DKIM signature, baby, it is\r\n\r\n/gCrinpcQOoIfuHNQIbq4pgh9kyIK3AQUdt9OdqQehSwhEIug4D11BusFa3bT3FY5OsU7ZbnKELq+eXdp1Q1Dw==\r\n\r\n(even though this pastes terribly in this HTML)", "correct_text": "The signature should be\r\n\r\nQGeDV9CRdXSybek0z54GoycZ4/kl1PsNnGoOsCZ0ZOOwiGYFE8Ft0SZpy1XLW/fwlwNFC1k6VaxsnQAH8+9cAA==", "notes": "On the DKIM list i wrote\r\n\r\n>I come here because alongside the above i had a look at RFC 8463\r\n>again, and its example in \"A.3.  Signed Message\".\r\n>And if i use its \"A.1.  Secret Keys\", and (manually) normalize the\r\n>example message header of A.3 via \"relaxed\"\r\n[.]\r\n>and pass that through RFC 8032 code:\r\n\r\n>  privkey: b'nWGxne/9WmC6hEr0kuwsxERJxWl7MmkZcDusAxyuf2A=\\n'\r\n>  pubkey : b'11qYAYKxCrfVS/7TyWQHOg7hcvPapiMlrwIaaPcHURo=\\n'\r\n>  The message is:\r\n>  >>>b'from:Joe SixPack <joe@football.example.com>\\r\\nto:Suzie Q <suzie@shopping.example.net>\\r\\nsubject:Is dinner ready?\\r\\ndate:Fri, 11 Jul 2003 21:00:37 -0700 (PDT)\\r\\nmessage-id:<20030712040037.46341.5F8J@football.example.com>\\r\\ndkim-signature:v=1; a=ed25519-sha256; c=relaxed/relaxed; d=football.example.com; i=@football.example.com; q=dns/txt; s=brisbane; t=1528637909; h=from : to : subject : date : message-id : from : subject : date; bh=2jUSOH9NhtVGCQWNr9BrIAPreKQjO6Sn7XIkfJVOzv8=; b='<<<\r\n>\r\n>then i get\r\n>\r\n>  Signature: b'QGeDV9CRdXSybek0z54GoycZ4/kl1PsNnGoOsCZ0ZOOwiGYFE8Ft0SZpy1XLW/fwlwNFC1k6VaxsnQAH8+9cAA==\\n'\r\n>  Signature verifies: True\n --VERIFIER NOTES-- \nThe RFC is correct as-is.  The process applied by the erratum author deviates from the algorithm used by DKIM.", "submit_date": "2024-05-09", "submitter_name": "Steffen Nurpmeso", "verifier_id": "", "verifier_name": "Murray Kucherawy", "update_date": "2024-05-13 15:01:14"}, {"errata_id": "7931", "doc-id": "RFC9562", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "1", "orig_text": "applications such as the Mozilla Web browser;", "correct_text": "applications such as the Firefox web browser;", "notes": "to reflect this RFC's time and place; as a consequence, for this errata I've replaced the now-discontinued Mozilla Suite with the more modern Firefox, as well as a lowercase \"web\"", "submit_date": "2024-05-10", "submitter_name": "Nicole (Darby Smurf) Ortizo", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7932", "doc-id": "RFC9180", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "(In the pseudocode below,", "correct_text": "(In the pseudocode above,", "notes": "The Context<ROLE>.IncrementSeq() pseudocode has already been provided before the last paragraph of section 5.2.", "submit_date": "2024-05-10", "submitter_name": "Raul Siles", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-05-15 04:52:40"}, {"errata_id": "7933", "doc-id": "RFC9180", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.1", "orig_text": "return Context<ROLE>(key, base_nonce, 0, exporter_secret)\r\n\r\nThe ROLE template parameter is either S or R, depending on the role \r\nof sender or recipient, respectively. See Section 5.2 for a discussion \r\nof the key schedule output, including the role-specific Context \r\nstructure and its API.\r\n", "correct_text": "return Context<ROLE>(key, base_nonce, 0, exporter_secret)\r\n\r\nThe ROLE template parameter is either S or R, depending on the role \r\nof sender or recipient, respectively. The third field in the \r\nContext<ROLE> refers to the sequence number, that is initialised with \r\na 0 value. See Section 5.2 for a discussion of the key schedule output,\r\nincluding the role-specific Context structure and its API, and the \r\nusage of the sequence number.\r\n", "notes": "In Section 5.1 the return value of KeySchedule<ROLE> reflects:\r\n\r\nreturn Context<ROLE>(key, base_nonce, 0, exporter_secret)\r\n\r\nI'm assuming the \"0\" value (in the third field of the Context<ROLE>) refers to the sequence number, with an initialisation value of 0, that is mentioned in Section 5.2, but the RFCs does not include details about the meaning of this third field and value.\r\n\r\nI suggest to clarify in section 5.1 the meaning of that 0 value and field, and add a reference to section 5.2 with all the details about the sequence number.\r\n\r\n\r\nHold for document update.\r\n\r\nErrata 7933 clarifies sequence initialization in KeySchedule<ROLE>, improving implementer understanding of sequence usage. While low impact, this clarification prevents misunderstandings and supports accurate usage. - CFRG co-chair", "submit_date": "2024-05-12", "submitter_name": "Raul Siles", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 19:01:13"}, {"errata_id": "7934", "doc-id": "RFC9180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Sections 5.1 and 7.2.1 say:", "orig_text": "- Section 5.1:\r\n\r\nThe psk and psk_id fields MUST appear together or not at all.\r\n\r\nThe psk, psk_id, and info fields have maximum lengths that depend\r\non the KDF itself,...\r\n\r\n- Section 7.2.1:\r\n\r\nThe following table lists the maximum allowed lengths of these\r\nfields for the KDFs defined in this document,...\r\n", "correct_text": "- Section 5.1:\r\n\r\n[Add a new note]\r\n\r\nThe info parameter used by HPKE is not related to the optional\r\nstring info used by the LabeledExpand or Expand functions detailed\r\nin section 4.\r\n\r\nThe psk and psk_id parameters MUST appear together or not at all.\r\n\r\nThe psk, psk_id, and info parameters have maximum lengths that depend\r\non the KDF itself,...\r\n\r\n- Section 7.2.1:\r\n\r\nThe following table lists the maximum allowed lengths of these\r\nparameters for the KDFs defined in this document,...\r\n", "notes": "The reference to the \"info\" parameter in sections 5.1 and 7.2.1 might be confusing. Thus, I suggest to clearly differentiate between the optional string \"info\" for the LabeledExpand or Expand functions, whose value is clearly defined by the RFC for each LabeledExpand function used in DHKEM or KeySchedule, and the \"info\" parameter used by HPKE.\r\n\r\nVerified by co-author on CFRG list with additional note: Moreover, I would change all instances of \"field\" to \"parameter\", except for those referring to a mathematical field (e.g., \"field element\").\r\n\r\nIt seems section 7.2.1 refers to the \"info\" parameter used by HPKE, as it is referenced from section 5.1. This is the \"info\" parameter that is used specifically as the key for the \"info_hash\" LabeledExtract function in KeySchedule.\r\n\r\nIn section 5.1 the third bullet refer to the HPKE \"info\" parameter, but the 3rd paragraph after the bullets, as it uses the term \"fields\", might be confused with the \"info\" string (or field) used by the LabeledExpand and Expand functions.\r\n\r\nPerhaps it would be useful to always use two separate terms along RFC 9180:\r\n- the \"info\" parameter used by HPKE.\r\n- the \"info\" string used by the LabeledExpand and Expand functions.\r\n\r\nAs a result, I would remove the term \"field(s)\" from sections 5.1 and 7.2.1, and replace it by parameter(s).\r\n\r\nAdditionally, I suggest to add a note in section 5.1 to differentiate both, and clarify that section 5.1 and 7.2.1, with the input length restrictions, refer to the \"info\" parameter, and not to the \"info\" string.\r\n\r\n\r\nVerified on CFRG list by co-author with additional note: Moreover, I would change all instances of \"field\" to \"parameter\", except for those referring to a mathematical field (e.g., \"field element\").", "submit_date": "2024-05-12", "submitter_name": "Raul Siles", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:46:55"}, {"errata_id": "7937", "doc-id": "RFC9180", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1.3", "orig_text": "For X25519 and X448, the DeriveKeyPair() function applies \r\na KDF to the input:\r\n\r\n<function()>\r\n", "correct_text": "For X25519 and X448, the DeriveKeyPair() function applies \r\na KDF to the input:\r\n\r\n<function()>\r\n\r\nThe suite_id used implicitly in LabeledExtract() and LabeledExpand()\r\nfor DeriveKeyPair(ikm) is derived from the KEM identifier of the \r\nDHKEM in use (see Section 7.1), that is, based on the type of key \r\npair been generated for that DHKEM type.", "notes": "RFC 9180 dos not specify all the internal values for LabeledExtract(\u2026) and LabeledExpand(\u2026) for DeriveKeyPair(ikm), specifically the suite_id value. These values are required to standardise the DeriveKeyPair(ikm) function, as it is reference in other IETF drafts, such as https://www.ietf.org/archive/id/draft-westerbaan-cfrg-hpke-xyber768d00-02.html#name-derivekeypair-2, and because it is also used in the RFC 9180 KATs: see Appendix A.\r\n\r\n\r\nVerified on CFRG list by co-author with notes:   I looked at MLSpp and mls-rs, and both of those implementations compute `suite_id`, and they both do it in the way this erratum suggests. And since they interoperate with a bunch of other MLS stacks (including on HPKE), I assume this is how people are reading what's there now.  But it would be good to be explicit.", "submit_date": "2024-05-13", "submitter_name": "Raul Siles", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:47:43"}, {"errata_id": "7939", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1.1", "orig_text": "- ICMP length (derived from the IP length) is 24 or more octets.", "correct_text": "- IPv6 Payload Length is 24 or more octets.", "notes": "this can be confusing as the ICMPv6 Option Length is a different field and there is no specific ICMPv6 Length field in the ICMPv6 Extension Header. This clearly means the IPv6 Payload Length field in the IPv6 Header - not ICMPv6 Extension Header.\r\n\r\n--- AD Notes ---\r\n\r\n* there is no ICMPv6 \"Extension\" Header\r\n* the text should probably read:\r\n\r\n- ICMP message length (derived from the IPv6 Payload Length) is 24 or more octets.\r\n\r\nperhaps s/message/contents/ or s/message/payload/", "submit_date": "2024-05-17", "submitter_name": "Jeremy Duncan", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-11-06 14:16:29"}, {"errata_id": "7940", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7.1.2", "orig_text": "- ICMP length (derived from the IP length) is 24 or more octets.", "correct_text": "- IPv6 Payload Length is 24 or more octets.", "notes": "same as sec 7.1.1. This can be confusing as the ICMPv6 Option Length is a different field and there is no specific ICMPv6 Length field in the ICMPv6 Extension Header. This clearly means the IPv6 Payload Length field in the IPv6 Header - not ICMPv6 Extension Header.\r\n\r\n--- AD Notes ---\r\n\r\n* there is no ICMPv6 \"Extension\" Header\r\n* the text should probably be something like:\r\n\r\n- ICMP message length (derived from the IPv6 Payload Length) is 24 or more octets.\r\n\r\nperhaps s/message/payload/ or s/message/contents/ ...", "submit_date": "2024-05-17", "submitter_name": "Jeremy Duncan", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-11-06 14:18:31"}, {"errata_id": "7941", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1.1", "orig_text": "- ICMP length (derived from the IP length) is 8 or more octets.", "correct_text": "- IPv6 Payload Length is 8 or more octets.", "notes": "same as sec 7.1.1 and 7.1.2. This can be confusing as the ICMPv6 Option Length is a different field and there is no specific ICMPv6 Length field in the ICMPv6 Extension Header. This clearly means the IPv6 Payload Length field in the IPv6 Header - not ICMPv6 Extension Header.\r\n\r\n--- AD ---\r\n* there is no ICMPv6 \"Extension\" Header\r\n* the text should probably read:\r\n\r\n- ICMP message length (derived from the IPv6 Payload Length) is 8 or more octets.", "submit_date": "2024-05-17", "submitter_name": "Jeremy Duncan", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-11-06 16:49:15"}, {"errata_id": "7942", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1.2", "orig_text": "- ICMP length (derived from the IP length) is 16 or more octets.", "correct_text": "- IPv6 Payload Length is 16 or more octets.", "notes": "same as sec 6.1.1, 7.1.1 and 7.1.2. This can be confusing as the ICMPv6 Option Length is a different field and there is no specific ICMPv6 Length field in the ICMPv6 Extension Header. This clearly means the IPv6 Payload Length field in the IPv6 Header - not ICMPv6 Extension Header.\r\n\r\n--- AD notes ---\r\n\r\n* There is no ICMPv6 \"Extension\" Header\r\n* the text should probably read:\r\n\r\n- ICMP message length (derived from the IPv6 Payload Length) is 16 or more octets.", "submit_date": "2024-05-17", "submitter_name": "Jeremy Duncan", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-11-06 16:46:24"}, {"errata_id": "7943", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "- ICMP length (derived from the IP length) is 40 or more octets.", "correct_text": "- IPv6 Payload Length is 40 or more octets.", "notes": "same as sec 6.1.1, 6.1.2, 7.1.1 and 7.1.2. This can be confusing as the ICMPv6 Option Length is a different field and there is no specific ICMPv6 Length field in the ICMPv6 Extension Header. This clearly means the IPv6 Payload Length field in the IPv6 Header - not ICMPv6 Extension Header.\r\n\r\n--- AD Notes ---\r\n\r\n* there is no ICMPv6 \"Extension\" Header\r\n* the text should probably something closer to:\r\n\r\n- ICMP message length (derived from the IPv6 Payload Length) is 40 or more octets.\r\n\r\nor perhaps s/message/contents/, s/message/payload/, ...", "submit_date": "2024-05-17", "submitter_name": "Jeremy Duncan", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-11-06 14:21:21"}, {"errata_id": "7944", "doc-id": "RFC8960", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.5", "orig_text": "  grouping nhlfe-single-contents {\r\n    description\r\n      \"A grouping that describes a single Next Hop Label Forwarding\r\n       Entry (NHLFE) and its associated parameters as described in\r\n       the MPLS architecture.  This grouping is specific to the case\r\n       when a single next hop is associated with the route.\";\r\n    uses rt-types:mpls-label-stack;\r\n  }", "correct_text": "  grouping nhlfe-single-contents {\r\n    description\r\n      \"A grouping that describes a single Next Hop Label Forwarding\r\n       Entry (NHLFE) and its associated parameters as described in\r\n       the MPLS architecture.  This grouping is specific to the case\r\n       when a single next hop is associated with the route.\";\r\n    <some reference to an mpls-operations-type>\r\n    uses rt-types:mpls-label-stack;\r\n  }\r\n", "notes": "Section 2.2 states that the NHLFE contains the packet's next hop and \"[t]he operation to perform on the packet's label stack.\"\r\n\r\nSection 2.5 defines an mpls-operations-type typedef, but then it is never referenced by anything else in the YANG module.\r\n\r\nI *think* it should be associated with nhlfe-single-contents, alongside the rt-types:mpls-label-stack used there.  My YANG skills are too poor to craft any plausibly correct syntax, though.\n --VERIFIER NOTES-- \nSee https://mailarchive.ietf.org/arch/msg/mpls/hzb3iO0Mn_Z4eyaPiUkMig_8JkE/", "submit_date": "2024-05-19", "submitter_name": "Erik Kline", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2025-03-17 02:00:17"}, {"errata_id": "7945", "doc-id": "RFC5545", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.8.8.3", "orig_text": "rstatus    = \"REQUEST-STATUS\" rstatparam \":\"\r\n             statcode \";\" statdesc [\";\" extdata]", "correct_text": "rstatus    = \"REQUEST-STATUS\" rstatparam \":\"\r\n             statcode \";\" statdesc [\";\" extdata] CRLF", "notes": "All other properties are specified to end with a CRLF. There seems to be no reason for this property to be an exception.", "submit_date": "2024-05-19", "submitter_name": "Maximilian Bauer", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-05-29 19:39:22"}, {"errata_id": "7950", "doc-id": "RFC6386", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "12.3", "orig_text": "B[2][0] = B[3][2] = svg2p(E + 1); /* ( 3/2, -1) */", "correct_text": "B[2][0] = B[3][2] = avg2p(E + 1); /* ( 3/2, -1) */", "notes": "This is a typo; the call to avg2p computes the desired value, and svg2p is not defined.", "submit_date": "2024-05-22", "submitter_name": "Felix Pahl", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7947", "doc-id": "RFC9568", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.1", "orig_text": "         o  For each IPv4 address associated with the Virtual Router,\r\n            broadcast a gratuitous ARP message containing the Virtual\r\n            Router MAC address and with the target link-layer address\r\n            set to the Virtual Router MAC address.\r\n\r\n", "correct_text": "         o  For each IPv4 address associated with the Virtual Router,\r\n            broadcast a gratuitous ARP message containing the Virtual\r\n            Router IPv4 address and with the target link-layer address\r\n            set to the Virtual Router MAC address.\r\n\r\n", "notes": "The MAC address is specified instead of the IPv4 address.", "submit_date": "2024-05-21", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "James Guichard", "update_date": "2024-06-27 14:01:11"}, {"errata_id": "7949", "doc-id": "RFC9568", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.2", "orig_text": "         o  For each IPv4 address associated with the Virtual Router,\r\n            broadcast a gratuitous ARP message containing the Virtual\r\n            Router MAC address and with the target link-layer address\r\n            set to the Virtual Router MAC address.\r\n", "correct_text": "         o  For each IPv4 address associated with the Virtual Router,\r\n            broadcast a gratuitous ARP message containing the Virtual\r\n            Router IPv4 address and with the target link-layer address\r\n            set to the Virtual Router MAC address.\r\n", "notes": "The MAC address is specified instead of the IPv4 address.", "submit_date": "2024-05-21", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "James Guichard", "update_date": "2024-06-27 14:01:46"}, {"errata_id": "7951", "doc-id": "RFC9470", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2", "orig_text": "     \"exp\": 1639528912,\r\n     \"iat\": 1618354090,\r\n     \"auth_time\": 1646340198,", "correct_text": "     \"exp\": 1639528912,\r\n     \"iat\": 1618354090,\r\n     \"auth_time\": 1618354090,", "notes": "I noticed a small inconsistency in the example \"Figure 7: Introspection Response\". It seems that the time for the user-authentication event should be less than or equal to the time of token issuance to ensure logical coherence.", "submit_date": "2024-05-22", "submitter_name": "Tomasz Kuczy\u0144ski", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7952", "doc-id": "RFC9542", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   For global addresses, X = 0 and a MAC address begins with 3 octets or\r\n   a larger initial prefix indicating the assignee of the block of MAC\r\n   addresses.  This prefix is followed by a sequence of additional\r\n   octets so as to add up to the total MAC address length.  For example,\r\n   the IEEE assigns MAC Address Block Small (MA-S), where the first four\r\n   and a half octets (36 bits) are assigned, giving the holder of the\r\n   MA-S one and a half octets (12 bits) they can control in constructing\r\n   48-bit MAC addresses; other prefix lengths are also available\r\n   [IEEEtutorials].", "correct_text": "   For global addresses, X = 0 and a MAC address begins with 3 octets or\r\n   a larger initial prefix indicating the assignee of the block of MAC\r\n   addresses.  This prefix is followed by a sequence of additional\r\n   bits so as to add up to the total MAC address length.  For example,\r\n   the IEEE assigns MAC Address Block Small (MA-S), where the first four\r\n   and a half octets (36 bits) are assigned, giving the holder of the\r\n   MA-S one and a half octets (12 bits) they can control in constructing\r\n   48-bit MAC addresses; other prefix lengths are also available\r\n   [IEEEtutorials].", "notes": "It is incorrect to talk about additional octets here, since the prefix size may not be an integer number of octets. It is appropriate to speak about additional bits.", "submit_date": "2024-05-23", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-05-24 06:10:31"}, {"errata_id": "7963", "doc-id": "RFC8708", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "      pk-HSS-LMS-HashSig PUBLIC-KEY ::= {\r\n          IDENTIFIER id-alg-hss-lms-hashsig\r\n          KEY HSS-LMS-HashSig-PublicKey\r\n          PARAMS ARE absent\r\n          CERT-KEY-USAGE\r\n            { digitalSignature, nonRepudiation, keyCertSign, cRLSign } }\r\n\r\n      HSS-LMS-HashSig-PublicKey ::= OCTET STRING\r\n\r\n   Note that the id-alg-hss-lms-hashsig algorithm identifier is also\r\n   referred to as id-alg-mts-hashsig.  This synonym is based on the\r\n   terminology used in an early draft version of the document that\r\n   became [HASHSIG].\r\n\r\n   The public key value is an OCTET STRING.  Like the signature format,\r\n   it is designed for easy parsing.  The value is the number of levels\r\n   in the public key, L, followed by the LMS public key.", "correct_text": "      pk-HSS-LMS-HashSig PUBLIC-KEY ::= {\r\n          IDENTIFIER id-alg-hss-lms-hashsig\r\n          -- KEY no ASN.1 wrapping --\r\n          PARAMS ARE absent\r\n          CERT-KEY-USAGE\r\n            { digitalSignature, nonRepudiation, keyCertSign, cRLSign } }\r\n\r\n      HSS-LMS-HashSig-PublicKey ::= OCTET STRING\r\n\r\n   Note that the id-alg-hss-lms-hashsig algorithm identifier is also\r\n   referred to as id-alg-mts-hashsig.  This synonym is based on the\r\n   terminology used in an early draft version of the document that\r\n   became [HASHSIG].\r\n\r\n   When the public key appears outside a certificate, it is an \r\n   OCTET STRING.  Like the signature format, it is designed for easy\r\n   parsing.  The value is the number of levels in the public key, L,\r\n   followed by the LMS public key.", "notes": "At the time RFC 8708 was published, we did not think anyone would put an HSS/LMS public key in a certificate. We thought the public key would always be distributed by some other means. We now know that some people plan to put an HSS/LMS public key in a certificate. This part of the ASN.1 module does not come into play when using HSS/LMS in the CMS, but we want it to be consistent with the yet-to-be-published document that describes the conventions for an HSS/LMS public key in a certificate. IETF Hackathon experience shows that no ASN.1 wrapping for the public key is the way forward.", "submit_date": "2024-05-29", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-05-30 21:50:16"}, {"errata_id": "7964", "doc-id": "RFC9424", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.3", "orig_text": "At its simplest, this indicates that\r\n   the receiver may share with anyone (TLP:CLEAR), share within the\r\n   defined sharing community (TLP:GREEN), share within their\r\n   organisation and their clients (TLP:AMBER+STRICT), share just within\r\n   their organisation (TLP:AMBER), or not share with anyone outside the\r\n   original specific IoC exchange (TLP:RED).\r\n", "correct_text": "At its simplest, this indicates that\r\n   the receiver may share with anyone (TLP:CLEAR), share within the\r\n   defined sharing community (TLP:GREEN), share within their\r\n   organisation and their clients (TLP:AMBER), share just within\r\n   their organisation (TLP:AMBER+STRICT), or not share with anyone \r\n   outside the original specific IoC exchange (TLP:RED).\r\n", "notes": "The definitions of TLP:AMBER and TLP:AMBER+STRICT are the wrong way round in the original text.\r\n", "submit_date": "2024-05-30", "submitter_name": "Andrew Shaw", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-06-05 18:35:10"}, {"errata_id": "7969", "doc-id": "RFC7591", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3", "orig_text": "   For example, a software statement could contain the following claims:\r\n\r\n     {\r\n      \"software_id\": \"4NRB1-0XZABZI9E6-5SM3R\",\r\n      \"client_name\": \"Example Statement-based Client\",\r\n      \"client_uri\": \"https://client.example.net/\"\r\n     }\r\n\r\n   The following non-normative example JWT includes these claims and has\r\n   been asymmetrically signed using \"RS256\" (with line breaks for\r\n   display purposes only):\r\n\r\n     eyJhbGciOiJSUzI1NiJ9.\r\n     eyJzb2Z0d2FyZV9pZCI6IjROUkIxLTBYWkFCWkk5RTYtNVNNM1IiLCJjbGll\r\n     bnRfbmFtZSI6IkV4YW1wbGUgU3RhdGVtZW50LWJhc2VkIENsaWVudCIsImNs\r\n     aWVudF91cmkiOiJodHRwczovL2NsaWVudC5leGFtcGxlLm5ldC8ifQ.\r\n     GHfL4QNIrQwL18BSRdE595T9jbzqa06R9BT8w409x9oIcKaZo_mt15riEXHa\r\n     zdISUvDIZhtiyNrSHQ8K4TvqWxH6uJgcmoodZdPwmWRIEYbQDLqPNxREtYn0\r\n     5X3AR7ia4FRjQ2ojZjk5fJqJdQ-JcfxyhK-P8BAWBd6I2LLA77IG32xtbhxY\r\n     fHX7VhuU5ProJO8uvu3Ayv4XRhLZJY4yKfmyjiiKiPNe-Ia4SMy_d_QSWxsk\r\n     U5XIQl5Sa2YRPMbDRXttm2TfnZM1xx70DoYi8g6czz-CPGRi4SW_S2RKHIJf\r\n     IjoI3zTJ0Y2oe0_EJAiXbL6OyF9S5tKxDXV8JIndSA", "correct_text": "   For example, a software statement could contain the following claims:\r\n\r\n     {\r\n      \"iss\": \"https://example.com\",\r\n      \"software_id\": \"4NRB1-0XZABZI9E6-5SM3R\",\r\n      \"client_name\": \"Example Statement-based Client\",\r\n      \"client_uri\": \"https://client.example.net/\"\r\n     }\r\n\r\n   The following non-normative example JWT includes these claims and has\r\n   been asymmetrically signed using \"RS256\" (with line breaks for\r\n   display purposes only):\r\n\r\n     eyJhbGciOiJSUzI1NiJ9.<updatedPayloadWithIss>.<updatedSignature>", "notes": "Section 2.3 Software Statement says, \"the software statement ... MUST contain an \"iss\" (issuer) claim denoting the party attesting to the claims in the software statement.\" It would be useful to readers if the sample software statement in the same section adheres to this condition. \r\n\r\nIf this change is reasonable, the signed JWT in section 3.1.1.  Client Registration Request Using a Software Statement should also be updated.", "submit_date": "2024-06-03", "submitter_name": "Ivan Mok", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7973", "doc-id": "RFC7239", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "       Forwarded: for=\"_gazonk\"\r\n       Forwarded: For=\"[2001:db8:cafe::17]:4711\"", "correct_text": "       Forwarded: for=\"_gazonk\"\r\n       Forwarded: for=\"[2001:db8:cafe::17]:4711\"", "notes": "having an example that shows the parameter capitalized indicates that this would be acceptable usage, but nowhere else in the document indicates or implies that this parameter can be capitalized.\n --VERIFIER NOTES-- \n>    The top-level list is represented as a list of HTTP header\r\n>    field-values as defined in Section 3.2 of [RFC7230].  The first\r\n>    element in this list holds information added by the first proxy that\r\n>    implements and uses this header field, and each subsequent element\r\n>    holds information added by each subsequent proxy.  Because this\r\n>    header field is optional, any proxy in the chain may choose not to\r\n>    update this header field.  Each field-value is a semicolon-separated\r\n>    list; this sublist consists of parameter-identifier pairs.\r\n>    Parameter-identifier pairs are grouped together by an equals sign.\r\n>    Each parameter MUST NOT occur more than once per field-value.  The\r\n>    parameter names are case-insensitive.  The header field value can be\r\n>    defined in ABNF syntax as:\r\n\r\n\"The parameter names are case-insensitive\".", "submit_date": "2024-06-07", "submitter_name": "Kevin W. Finkenbinder", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-06-19 14:32:40"}, {"errata_id": "7974", "doc-id": "RFC9579", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   As documented in Appendix B.1 of [RFC7292], the handling of password\r\n   encoding in the underlying standards is underspecified.  However,\r\n   just as with PBES1 and PBES2 when used in the context of PKCS #12\r\n   objects, all passwords used with PBMAC1 MUST be created from\r\n   BMPStrings with a NULL terminator.", "correct_text": "   As documented in Appendix B.1 of [RFC7292], the handling of password\r\n   encoding in the underlying standards is underspecified.  However,\r\n   unlike with PBES1 and PBES2 when used in the context of PKCS #12\r\n   objects, all passwords used with PBMAC1 MUST be created from\r\n   UTF-8 encoding without a NULL terminator or Byte Order Mark (BOM).", "notes": "Turns out that in the implementation we used for creating the test vectors, the conversion between the user-provided password and the BMPStrings used for encryption happened in a different place in the call stack than we expected, and the way we generated them, the passwords stayed in UTF-8 format instead of being converted to big-endian UTF-16.\r\n\r\nGiven that we already have the UTF-8 code implemented in GnuTLS (https://gitlab.com/gnutls/gnutls/-/merge_requests/1833), NSS (https://phabricator.services.mozilla.com/D201833), and that the test-vectors are self-consistent otherwise, I think it will be easier to just redefine how the passwords are passed in to the KDF in the PBMAC1 than to change all the implementations and test vectors.\r\n\r\nThanks space88man on github for noticing this: https://github.com/openssl/openssl/issues/24546#issuecomment-2154729339", "submit_date": "2024-06-07", "submitter_name": "Hubert Kario", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:44:05"}, {"errata_id": "7981", "doc-id": "RFC9543", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "4", "orig_text": "IETF Network Slice:  The realization of the service in the provider's\r\n   network achieved by partitioning network resources and by applying\r\n   certain tools and techniques within the network (see Sections 4.1\r\n   and 7).\r\n\r\n", "correct_text": "IETF Network Slice:  The realization of the service in the provider's\r\n   network achieved both by partitioning network resources and by \r\n   applying certain tools and techniques within the network\r\n   (see Sections 4.1 and 7).\r\n\r\n\r\n", "notes": "There is a confusion in the TEAS WG whether the \"and\" is to be interpreted as \"both ..and\" or \"or\".\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/teas/xejJJtuNtCeCZniUEhQkadb1i3k/ for more context. \r\n\r\nThe NEW text makes the intent explicit.\n --VERIFIER NOTES-- \nRejected per discussion on the teas list; see https://mailarchive.ietf.org/arch/msg/teas/lb2QilbMlon5kXctsJV4TQ3swkw/", "submit_date": "2024-06-11", "submitter_name": "Mohamed BOUCADAIR", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-07-29 15:02:03"}, {"errata_id": "7982", "doc-id": "RFC8392", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.2.2", "orig_text": "     / kid /  4: h'53796d6d6574726963323536' / 'Symmetric256' /,", "correct_text": "     / kid /  2: h'53796d6d6574726963323536' / 'Symmetric256' /,", "notes": "The hex above the diagnostic notation encodes for index 2 before the 'Symmetric256' value. The use of CBOR value 2 to mean \"kid\" is also consistent with the examples around it.\r\n\r\nAs this is a mix-up between the \"kid\" key from COSE Key Common Parameters and COSE Header parameters, a check through the whole document for whether the right numeric values are used might be due. The use of 2 here and 4 in A.3 and A.4 seems right to me -- but I keep mixing those up myself, which was why I was looking into this example in the first place.", "submit_date": "2024-06-11", "submitter_name": "Christian Ams\u00fcss", "verifier_id": "", "verifier_name": null, "update_date": "2024-06-11 16:39:34"}, {"errata_id": "7983", "doc-id": "RFC8945", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "If the TSIG RR cannot be interpreted, the server MUST regard the\r\nmessage as corrupt and return a FORMERR to the server.", "correct_text": "If the TSIG RR cannot be interpreted, the server MUST regard the\r\nmessage as corrupt and return a FORMERR to the client.", "notes": "Server send an error to the client, not to itself.", "submit_date": "2024-06-11", "submitter_name": "Terts Diepraam", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-06-11 13:50:20"}, {"errata_id": "7986", "doc-id": "RFC9083", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9", "orig_text": "The following is an elided example of an entity truncated data.\r\n\r\n{\r\n  \"objectClassName\" : \"entity\",\r\n  \"handle\" : \"ANENTITY\",\r\n  \"roles\" : [ \"registrant\" ],\r\n  ...\r\n  \"entities\" :\r\n  [\r\n    {\r\n      \"objectClassName\" : \"entity\",\r\n      \"handle\": \"ANEMBEDDEDENTITY\",\r\n      \"roles\" : [ \"technical\" ],\r\n      ...\r\n    },\r\n    ...\r\n  ],\r\n  \"networks\" :\r\n  [\r\n    ...\r\n  ],\r\n  ...\r\n  \"remarks\" :\r\n  [\r\n    {\r\n      \"title\" : \"Data Policy\",\r\n      \"type\" : \"object truncated due to unexplainable reason\",\r\n      \"description\" :\r\n      [\r\n        \"Some of the data in this object has been removed.\"\r\n      ],\r\n      \"links\" :\r\n      [\r\n        {\r\n          \"value\" : \"https://example.net/help\",\r\n          \"rel\" : \"alternate\",\r\n          \"type\" : \"text/html\",\r\n          \"href\" : \"https://www.example.com/data_policy.html\"\r\n        }\r\n      ]\r\n    }\r\n  ]\r\n}\r\n", "correct_text": "The following is an elided example of an entity truncated data.\r\n\r\n{\r\n  \"rdapConformance\" :\r\n  [\r\n    \"rdap_level_0\"\r\n  ],\r\n  \"objectClassName\" : \"entity\",\r\n  \"handle\" : \"ANENTITY\",\r\n  \"roles\" : [ \"registrant\" ],\r\n  ...\r\n  \"entities\" :\r\n  [\r\n    {\r\n      \"objectClassName\" : \"entity\",\r\n      \"handle\": \"ANEMBEDDEDENTITY\",\r\n      \"roles\" : [ \"technical\" ],\r\n      ...\r\n    },\r\n    ...\r\n  ],\r\n  \"networks\" :\r\n  [\r\n    ...\r\n  ],\r\n  ...\r\n  \"remarks\" :\r\n  [\r\n    {\r\n      \"title\" : \"Data Policy\",\r\n      \"type\" : \"object truncated due to unexplainable reason\",\r\n      \"description\" :\r\n      [\r\n        \"Some of the data in this object has been removed.\"\r\n      ],\r\n      \"links\" :\r\n      [\r\n        {\r\n          \"value\" : \"https://example.net/help\",\r\n          \"rel\" : \"alternate\",\r\n          \"type\" : \"text/html\",\r\n          \"href\" : \"https://www.example.com/data_policy.html\"\r\n        }\r\n      ]\r\n    }\r\n  ]\r\n}\r\n", "notes": "RFC 9083 4.1 states that the rdapConformance data structure MUST appear in the topmost JSON object of RDAP responses. The example error response provided in Figure 33 should include the rdapConformance property but does not.", "submit_date": "2024-06-12", "submitter_name": "Gavin Brown", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-06-13 21:27:42"}, {"errata_id": "7987", "doc-id": "RFC7866", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "application/rs-metadata", "correct_text": "application/rs-metadata+xml", "notes": "RFC 7865 specifies \"The other metadata attributes, such as participant details, are represented in a new recording-specific XML document of type 'application/rs-metadata+xml'.\" RFC 7866 refers to RFC 7865 but does not specify the whole string but only the truncated 'application/rs-metadata' which is incomplete regarding how a XML-based Media Types are typcally formated. Unfortunately neither RFCs registered the Media Type to define what it should be normatively.", "submit_date": "2024-06-12", "submitter_name": "Dan Mongrain", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-06-20 12:48:11"}, {"errata_id": "7988", "doc-id": "RFC9260", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": ".3.2.  Initiation", "orig_text": "not clearly specified  sending IP Address for INIT", "correct_text": "INIT can be accepted from either the Primary or Secondary IP Address", "notes": "Based on the dicussion here (https://mailarchive.ietf.org/arch/msg/tsvwg/KmARqJ0C3lDnyrv9Wz_IH0Rwqyc/) this errata is rejected.\n --VERIFIER NOTES-- \nBased on the dicussion here (https://mailarchive.ietf.org/arch/msg/tsvwg/KmARqJ0C3lDnyrv9Wz_IH0Rwqyc/) this errata is rejected.", "submit_date": "2024-06-01", "submitter_name": "Milen Hristov", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 07:46:19"}, {"errata_id": "7977", "doc-id": "RFC7117", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "Furthermore, if the local PE uses RSVP-TE P2MP LSP for sending\r\n(multicast) traffic, originated by VPLS sites connected to the PE, to\r\nthe sites attached to other PEs, then the local PE MUST use the\r\nOriginating Router\u2019s IP Address information carried in the Intra-AS\r\nA-D route to add the PE, that originated the route, as a leaf node to\r\nthe LSP. This MUST be done irrespective of whether or not the\r\nreceived Intra-AS A-D route carries the PMSI Tunnel attribute.", "correct_text": "Furthermore, if the local PE uses RSVP-TE P2MP LSP for sending\r\n(multicast) traffic, originated by VPLS sites connected to the PE, to\r\nthe sites attached to other PEs, then the local PE MUST use the\r\nBGP Next-Hop IP Address carried in the Intra-AS\r\nA-D route to add the PE, that originated the route, as a leaf node to\r\nthe LSP. This MUST be done irrespective of whether or not the\r\nreceived Intra-AS A-D route carries the PMSI Tunnel attribute.", "notes": "There is no such field as the Origination Router's IP Address in any VPLS A-D routes (RFC4761, RFC6074). For Intra-AS cases the BGP NH IP address can be used for the leaf tracking.", "submit_date": "2024-06-09", "submitter_name": "Igor Malyushkin", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2025-02-10 10:30:37"}, {"errata_id": "7997", "doc-id": "RFC7344", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2.1", "orig_text": "When a Parent operates in \"calculate DS\" mode, it can operate in one\r\n   of two sub-modes:\r\n\r\n   full:  The Parent only publishes DS records it calculates from DNSKEY\r\n      records.", "correct_text": "When a Parent operates in \"calculate DS\" mode, it can operate in one\r\n   of two sub-modes:\r\n\r\n   full:  The Parent only publishes DS records it calculates from CDNSKEY\r\n      records.", "notes": "In the last sentence, \"DNSKEY\" should be \"CDNSKEY\".  That is, the Parent calculates DS records from the CDNSKEY records, not from the DNSKEY records.\r\n\r\nPaul Wouters (AD): Verifying as the regular AD is an author on the doc :)", "submit_date": "2024-06-21", "submitter_name": "Casey Deccio", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-06-25 21:53:46"}, {"errata_id": "7998", "doc-id": "RFC7565", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7", "orig_text": "      userpart     = unreserved / sub-delims\r\n                     0*( unreserved / pct-encoded / sub-delims )", "correct_text": "      userpart     = 1*( unreserved / pct-encoded / sub-delims )", "notes": "The original text would require the first character to be in one of the unreserved or sub-delims sets, but internationalized URIs use percent-encoded UTF-8. The correction allows the userpart to begin with percent-encoded UTF-8, in accordance with section 6.", "submit_date": "2024-06-24", "submitter_name": "Soni Lasso Terense", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7990", "doc-id": "RFC9485", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "5.1.  Multi-Character Escapes\r\n\r\n   I-Regexp does not support common multi-character escapes (MCEs) and\r\n   character classes built around them.  These can usually be replaced\r\n   as shown by the examples in Table 1.\r\n\r\n                      +============+===============+\r\n                      | MCE/class: | Replace with: |\r\n                      +============+===============+\r\n                      | \\S         | [^ \\t\\n\\r]    |\r\n                      +------------+---------------+\r\n                      | [\\S ]      | [^\\t\\n\\r]     |\r\n                      +------------+---------------+\r\n                      | \\d         | [0-9]         |\r\n                      +------------+---------------+", "correct_text": "5.1.  Multi-Character Escapes\r\n\r\n   I-Regexp does not support common multi-character escapes (MCEs) and\r\n   character classes built around them.  These can usually be replaced\r\n   as shown by the examples in Table 1.\r\n\r\n                      +============+===============+\r\n                      | MCE/class: | Replace with: |\r\n                      +============+===============+\r\n                      | \\d         | [0-9]         |\r\n                      +------------+---------------+", "notes": "`\\S` excludes the form feed and vertical tabulation characters in Perl, ECMAScript, and other implementations, while the suggested replacement includes them. Given the entire document is about interoperable regular expressions, misrepresentation of the common definition of `\\S` runs counter to that. Including form feed and vertical tabulation literally in the replacement expression is not likely to be helpful, so removing the misleading rows seems to be the best option.", "submit_date": "2024-06-13", "submitter_name": "Bjoern Hoehrmann", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "7991", "doc-id": "RFC5216", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1.3 page 10", "orig_text": "   Authenticating Peer     Authenticator\r\n   -------------------     -------------\r\n                           <- EAP-Request/\r\n                           Identity\r\n   EAP-Response/\r\n   Identity (MyID) ->\r\n                           <- EAP-Request/\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS Start)\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS\r\n   (TLS client_hello)->\r\n                           <- EAP-Request/\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS server_hello,\r\n                             TLS certificate,\r\n                    [TLS server_key_exchange,]\r\n               TLS certificate_request,\r\n                 TLS server_hello_done)\r\n\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS\r\n   (TLS certificate,\r\n    TLS client_key_exchange,\r\n    TLS certificate_verify,\r\n    TLS change_cipher_spec,\r\n    TLS finished) ->\r\n\r\n                           <- EAP-Request/\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS change_cipher_spec,\r\n                           TLS finished)\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS ->\r\n                           <- EAP-Request\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS Alert message)\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS ->\r\n                           <- EAP-Failure\r\n                           (User Disconnected)", "correct_text": "   Authenticating Peer     Authenticator\r\n   -------------------     -------------\r\n                           <- EAP-Request/\r\n                           Identity\r\n   EAP-Response/\r\n   Identity (MyID) ->\r\n                           <- EAP-Request/\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS Start)\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS\r\n   (TLS client_hello)->\r\n                           <- EAP-Request/\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS server_hello,\r\n                             TLS certificate,\r\n                    [TLS server_key_exchange,]\r\n               TLS certificate_request,\r\n                 TLS server_hello_done)\r\n\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS\r\n   (TLS certificate,\r\n    TLS client_key_exchange,\r\n    TLS certificate_verify,\r\n    TLS change_cipher_spec,\r\n    TLS finished) ->\r\n\r\n                           <- EAP-Request\r\n                           EAP-Type=EAP-TLS\r\n                           (TLS Alert message)\r\n   EAP-Response/\r\n   EAP-Type=EAP-TLS ->\r\n                           <- EAP-Failure\r\n                           (User Disconnected)", "notes": "The message which has to be sent after server fails to authenticate the peer is ,TLS alert message, The TLS change cipher spec and the TLS finished cannot be sent from the server side if the server fails to authenticate the peer. Instead the server has to send TLS alert message after the peer sends change cipher spec.", "submit_date": "2024-06-14", "submitter_name": "E Vashist Kumar", "verifier_id": "", "verifier_name": null, "update_date": "2024-06-14 17:26:01"}, {"errata_id": "7996", "doc-id": "RFC9312", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1 and 8", "orig_text": "Operators should expect to observe packets with other version numbers \r\nas a result of various Internet experiments, future standards, and \r\ngreasing [RFC7801].\r\n\r\n...\r\n\r\n[RFC7801]\r\nDolmatov, V., Ed., \"GOST R 34.12-2015: Block Cipher \"Kuznyechik\"\", \r\nRFC 7801, DOI 10.17487/RFC7801, March 2016, \r\n<https://www.rfc-editor.org/info/rfc7801>", "correct_text": "Operators should expect to observe packets with other version numbers \r\nas a result of various Internet experiments, future standards, and \r\ngreasing [RFC8701].\r\n\r\n...\r\n\r\n[RFC 8701]\r\nBenjamin, D.,\"Applying Generate Random Extensions And Sustain \r\nExtensibility (GREASE) to TLS Extensibility\", RFC 8701, \r\nDOI 10.17487/RFC8701, January 2020, \r\n<https://www.rfc-editor.org/info/rfc8701>.", "notes": "Typo, should be RFC8701 instead of RFC7801", "submit_date": "2024-06-20", "submitter_name": "No No", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-06-21 16:19:39"}, {"errata_id": "7994", "doc-id": "RFC8554", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   /* leighton-micali signatures (lms) */\r\n\r\n   union lms_path switch (lms_algorithm_type type) {\r\n    case lms_sha256_n32_h5:\r\n      bytestring32 path_n32_h5[5];\r\n    case lms_sha256_n32_h10:\r\n      bytestring32 path_n32_h10[10];\r\n    case lms_sha256_n32_h15:\r\n      bytestring32 path_n32_h15[15];\r\n    case lms_sha256_n32_h20:\r\n      bytestring32 path_n32_h20[20];\r\n    case lms_sha256_n32_h25:\r\n      bytestring32 path_n32_h25[25];\r\n    default:\r\n      void;     /* error condition */\r\n   };\r\n\r\n   struct lms_signature {\r\n     unsigned int q;\r\n     lmots_signature lmots_sig;\r\n     lms_path nodes;\r\n   };\r\n\r\n   struct lms_key_n32 {\r\n     lmots_algorithm_type ots_alg_type;\r\n     opaque I[16];\r\n     opaque K[32];\r\n   };\r\n\r\n   union lms_public_key switch (lms_algorithm_type type) {\r\n    case lms_sha256_n32_h5:\r\n    case lms_sha256_n32_h10:\r\n    case lms_sha256_n32_h15:\r\n    case lms_sha256_n32_h20:\r\n    case lms_sha256_n32_h25:\r\n         lms_key_n32 z_n32;", "correct_text": "   /* leighton-micali signatures (lms) */\r\n\r\n   union lms_path switch (lms_algorithm_type type) {\r\n    case lms_sha256_m32_h5:\r\n      bytestring32 path_m32_h5[5];\r\n    case lms_sha256_m32_h10:\r\n      bytestring32 path_m32_h10[10];\r\n    case lms_sha256_m32_h15:\r\n      bytestring32 path_m32_h15[15];\r\n    case lms_sha256_m32_h20:\r\n      bytestring32 path_m32_h20[20];\r\n    case lms_sha256_m32_h25:\r\n      bytestring32 path_m32_h25[25];\r\n    default:\r\n      void;     /* error condition */\r\n   };\r\n\r\n   struct lms_signature {\r\n     unsigned int q;\r\n     lmots_signature lmots_sig;\r\n     lms_path nodes;\r\n   };\r\n\r\n   struct lms_key_m32 {\r\n     lmots_algorithm_type ots_alg_type;\r\n     opaque I[16];\r\n     opaque K[32];\r\n   };\r\n\r\n   union lms_public_key switch (lms_algorithm_type type) {\r\n    case lms_sha256_m32_h5:\r\n    case lms_sha256_m32_h10:\r\n    case lms_sha256_m32_h15:\r\n    case lms_sha256_m32_h20:\r\n    case lms_sha256_m32_h25:\r\n         lms_key_m32 z_m32;\r\n", "notes": "While \"n\" is the parameter used in LMOTS, \"m\" is the parameter used in LMS. In order to be consistent with the other parts of RFC 8554 and with the IANA registry, the LMS parameter set names need to be changed from \"_n32_\" to \"_m32_\". For consistency, all other references to the number of bytes in each node should changed from \"n32\" to \"m32\".\r\n\r\nHold for document update.\r\n\r\nErrata 7994 changes LMS parameter names to _m32_ in Section 3.3 for consistency with IANA registry terminology, which is primarily an editorial fix for accurate reference. - CFRG co-chair", "submit_date": "2024-06-17", "submitter_name": "David Cooper", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2025-01-18 18:57:49"}, {"errata_id": "7995", "doc-id": "RFC9309", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "path-pattern = \"/\" *UTF8-char-noctl ; valid URI path pattern", "correct_text": "path-pattern = (\"/\" / \"*\") *UTF8-char-noctl ; valid URI path pattern", "notes": "The `path-pattern` rule requires that `/` be the first character, but the Simple Example in section 5.1 has `Disallow: *.gif$`, where the path pattern starts with a `*`. The notes preceding the example explicitly say: The \"*\" character designates any character, including the otherwise-required forward slash; see Section 2.2.\r\n\r\nThis seems to indicate that either the formal syntax is wrong or the guidance in section 5.1 is wrong. I assume the formal syntax is wrong.", "submit_date": "2024-06-18", "submitter_name": "Shawn Tice", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8004", "doc-id": "RFC9537", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "This document describes a Registration Data Access Protocol (RDAP)\r\nextension for specifying methods of redaction of RDAP responses and\r\nexplicitly identifying redacted RDAP response fields, using JSONPath\r\nas the default expression language.\r\n\r\n", "correct_text": "This document describes a Registration Data Access Protocol (RDAP)\r\nextension for specifying methods of redaction of RDAP responses and\r\nexplicitly identifying redacted RDAP response fields.\r\n", "notes": "The Abstract and the first sentence of the Introduction is \"This document describes a Registration Data Access Protocol (RDAP) extension for specifying methods of redaction of RDAP responses and explicitly identifying redacted RDAP response fields, using JSONPath as the default expression language.\".  This sentence is combining two aspects into a single sentence (\"explicitly identifying redacted RDAP response fields\" and \"using JSONPath as the default expression language\") incorrectly.  It is true that the extension is \"explicitly identifying redacted RDAP response fields\" and it's true that extension is \"using JSONPath as the default expression language\", but the expression languages are optional and the use of JSONPath as the default expression language is not relevant for the Abstract and first sentence of the Introduction.  The recommended change is to remove the  \", using JSONPath as the default expression language\" from the sentences to correct it, resulting in:\r\n\r\n\"This document describes a Registration Data Access Protocol (RDAP) extension for specifying methods of redaction of RDAP responses and explicitly identifying redacted RDAP response fields.\"\n --VERIFIER NOTES-- \n Per https://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20210507/\r\n\r\nI considered HFDU based on:\r\n\r\n>Technical items that have a clear resolution in line with the original intent should be classified as Verified. If the resolution is not clear or requires further discussion, the report should be classified as Hold for Document Update. In both cases, only items that are clearly wrong should be considered.\r\n\r\nHowever, it is not obvious to me that this is \"clearly wrong\".\r\n\r\n>The erratum is invalid or proposes a significant change to the RFC that should be done by publishing a new RFC that replaces or updates the current one. In the latter case, if the change is to be considered for future updates of the document, it should be proposed using channels other than the errata process, such as a WG mailing list.\r\n\r\nIt seems to me that the correct solution is a -bis document, especially if the intention is to clarify mandatory or optional implementation details that impact interoperability.", "submit_date": "2024-06-26", "submitter_name": "James Gould", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-08-12 17:47:23"}, {"errata_id": "8001", "doc-id": "RFC9051", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix E", "orig_text": "   1.   Support for 64-bit message and body part sizes.\r\n...\r\n   30.  Loosened requirements on servers when closing connections to be\r\n        more aligned with existing practices.", "correct_text": "   1.  Support for 64-bit message and body part sizes.\r\n...\r\n   30.  Loosened requirements on servers\r\n        when closing connections to be more aligned with existing practices.\r\n   31.  Response of the SUBSCRIBE command and the UNSUBSCRIBE command\r\n        is changed from tagged NO to tagged OK\r\n        if the mailbox is already subscribed/unsubscribed.", "notes": "RFC3501 6.3.6 says:\r\n\r\nThe SUBSCRIBE command adds the specified mailbox name to the server's set of \"active\" or \"subscribed\" mailboxes as returned by the LSUB command. This command returns a tagged OK response only if the subscription is successful.\r\n\r\nAccording to this, SUBSCRIBE command returns a tagged NO response if the mailbox is already subscribed.\r\nhowever, RFC 9501 6.3.7 says:\r\n\r\nThe SUBSCRIBE command adds the specified mailbox name to the server's set of \"active\" or \"subscribed\" mailboxes as returned by the LIST (SUBSCRIBED) command. This command returns a tagged OK response if the subscription is successful or if the mailbox is already subscribed.\r\n\r\nThis can be said that there are not compatible between IMAP4rev1 and IMAP4rev2.\r\nThis problem also occurs in UNSUBSCRIBE command.\r\nI think this should be written in Appendix E.", "submit_date": "2024-06-25", "submitter_name": "Yasumasa Shimizu", "verifier_id": "", "verifier_name": null, "update_date": "2024-06-25 19:41:04"}, {"errata_id": "8002", "doc-id": "RFC8678", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.2.3", "orig_text": "   In this example, we could arrange things so that SERb1 drops the\r\n   packet with S=2001:db8:0:b010::31 and D=2001:db8:0:1234::101, and\r\n   then sends to H31 an ICMPv6 Destination Unreachable message with Code\r\n   5 (Source address failed ingress/egress policy).  When H31 receives\r\n   this packet, it would then be expected to try another source address\r\n   to reach the destination.  In this example, H31 would then send a\r\n   packet with S=2001:db8:0:a010::31 and D=2001:db8:0:1234::101, which\r\n   will reach SERa and be forwarded out the uplink to ISP-A.\r\n\r\n", "correct_text": "   In this example, we could arrange things so that SERb1 drops the\r\n   packet with S=2001:db8:0:b010::31 and D=2001:db8:0:1234::101, and\r\n   then sends to H31 an ICMPv6 Destination Unreachable message with Code\r\n   5 (Source address failed ingress/egress policy).  When H31 receives\r\n   this packet, an application running on it could then try another\r\n   source address to reach the destination if it was specifically\r\n   programmed to do so.  In this example, H31 would then send a packet\r\n   with S=2001:db8:0:a010::31 and D=2001:db8:0:1234::101, which will\r\n   reach SERa and be forwarded out the uplink to ISP-A.", "notes": "The approach with ICMPv6 Destination Unreachable message with Code 5 (Source address failed ingress/egress policy) is, in fact, unsound, as it is possible to force the OS kernel to perform an (uninformed) address selection using the standard socket API without sending any packets and thus without giving any router a chance to react with ICMPv6 Destination Unreachable messages. For example, consider the following Python code:\r\n\r\nimport socket\r\ns = socket.socket(socket.AF_INET6, socket.SOCK_DGRAM)\r\ns.connect((\"2001:4860:4860::8888\", 53))   # no packets are sent, this is a datagram socket\r\nmy_addr = s.getsockname()\r\n\r\nAt this point, one can print my_addr; therefore, it's too late to change behind the scenes the decision on the source address that was made in the second line if it happens to be incorrect. So, it's crucial that the source address selection can happen without any post-factum feedback, which leaves router advertisements with the effective routing policy as the only viable mechanism for controlling source address selection.\r\n\r\nPerhaps this mandatory requirement for an application (not an operating system!) to handle ICMPv6 Destination Unreachable messages with Code 5 explicitly (that is, in practice, not implemented) could also be added as a drawback to section 6.2.4 and mentioned in section 6.3.4 instead of referring to the unclear understanding of the host operating system behavior.\r\n\r\n----\r\nVerifier note: see also https://mailarchive.ietf.org/arch/msg/rtgwg/2G3oA5PPsnCAnRqSFuevxTlMQcY/", "submit_date": "2024-06-25", "submitter_name": "Alexander Patrakov", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2025-03-10 18:37:58"}, {"errata_id": "8006", "doc-id": "RFC9537", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2", "orig_text": "The \"postPath\" member MUST be set when the redacted field does exist\r\nin the redacted response for the Redaction by Empty Value Method\r\n(Section 3.2), the Redaction by Partial Value Method\r\n(Section 3.3), and the Redaction by Replacement Value Method\r\n(Section 3.4).", "correct_text": "The \"postPath\" member MAY be set when the redacted field does exist\r\nin the redacted response for the Redaction by Empty Value Method\r\n(Section 3.2), the Redaction by Partial Value Method\r\n(Section 3.3), and the Redaction by Replacement Value Method\r\n(Section 3.4).", "notes": "The \u201cpostPath\u201d member is an OPTIONAL member and this MUST can provide confusion.  The intent of this sentence was to outline which of the path members (\u201cprePath\u201d, \u201cpostPath\u201d, and \u201creplacementPath\u201d) to use when using path expressions and not to conflict with the OPTIONAL definition.  All of the path expression members are defined as OPTIONAL in the RFC, so this MUST needs be changed to a MAY to correct the confusion.\n --VERIFIER NOTES-- \nPer https://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20210507/\r\n\r\n> The erratum is invalid or proposes a significant change to the RFC that should be done by publishing a new RFC that replaces or updates the current one. \r\n\r\nI believe it would be harmful to mark this as HFDU, because the normative requirements for implementations would be less clear, and the document might never be updated.\r\n\r\n", "submit_date": "2024-06-27", "submitter_name": "James Gould", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-08-12 17:52:33"}, {"errata_id": "8007", "doc-id": "RFC2640", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.2.1 & B.2.3", "orig_text": "The first step in the process can be performed by maintaining a\r\nmapping table that includes the local character set code and the\r\ncorresponding UCS code. For instance the ISO/IEC 8859-8 [ISO-8859]\r\ncode for the Hebrew letter \"VAV\" is 0xE4. The corresponding 4 byte\r\nISO/IEC 10646 code is 0x000005D5.\r\n\r\n=====================================================================\r\n\r\nThis example demonstrates mapping ISO/IEC 8859-8 character set to\r\nUTF-8 and back to ISO/IEC 8859-8. As noted earlier, the Hebrew letter\r\n\"VAV\" is convertd from the ISO/IEC 8859-8 character code 0xE4 to the\r\ncorresponding 4 byte ISO/IEC 10646 code of 0x000005D5 by a simple\r\nlookup of a conversion/mapping file.\r\n\r\n=====================================================================\r\n\r\nFinally, the UCS-4 character code is converted to ISO/IEC 8859-8\r\ncharacter code (using the mapping table which matches ISO/IEC 8859-8\r\nto UCS-4 ) to produce the original 0xE4 code for the Hebrew letter\r\n\"VAV\".", "correct_text": "The first step in the process can be performed by maintaining a\r\nmapping table that includes the local character set code and the\r\ncorresponding UCS code. For instance the ISO/IEC 8859-8 [ISO-8859]\r\ncode for the Hebrew letter \"VAV\" is 0xE5. The corresponding 4 byte\r\nISO/IEC 10646 code is 0x000005D5.\r\n\r\n=====================================================================\r\n\r\nThis example demonstrates mapping ISO/IEC 8859-8 character set to\r\nUTF-8 and back to ISO/IEC 8859-8. As noted earlier, the Hebrew letter\r\n\"VAV\" is convertd from the ISO/IEC 8859-8 character code 0xE5 to the\r\ncorresponding 4 byte ISO/IEC 10646 code of 0x000005D5 by a simple\r\nlookup of a conversion/mapping file.\r\n\r\n=====================================================================\r\n\r\nFinally, the UCS-4 character code is converted to ISO/IEC 8859-8\r\ncharacter code (using the mapping table which matches ISO/IEC 8859-8\r\nto UCS-4 ) to produce the original 0xE5 code for the Hebrew letter\r\n\"VAV\".", "notes": "The ISO-8859-8 encoding for the Hebrew letter \"VAV\" is 0xE5, not 0xE4.\r\nThe Unicode U+05D5 (0x000005D5) is the Hebrew letter \"VAV\" so everything else about these examples are correct. If you actually try converting 0xE4 you'll get Hebrew letter \"HE\" (U+05D4).", "submit_date": "2024-06-27", "submitter_name": "Tim Geiser", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:31:49"}, {"errata_id": "8013", "doc-id": "RFC7413", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "   PendingFastOpenRequests: tracks the number of TFO connections in SYN-\r\n      RCVD state.  If this variable goes over a preset system limit, the\r\n      server MUST disable TFO for all new connection requests until\r\n      PendingFastOpenRequests drops below the system limit.  This\r\n      variable is used for defending some vulnerabilities discussed in\r\n      the \"Security Considerations\" section (Section 5).", "correct_text": "   PendingFastOpenRequests: tracks the number of TFO connections in SYN-\r\n      RCVD state.  If this variable goes over a preset system limit, the\r\n      server MUST disable TFO for all new connection requests until\r\n      PendingFastOpenRequests drops below the system limit.  This\r\n      variable is used for defending against some vulnerabilities \r\n      discussed in the \"Security Considerations\" section (Section 5).", "notes": "The original text seems to suggest defending (the existence of) some vulnerabilities", "submit_date": "2024-07-02", "submitter_name": "Bart Overkamp", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-08-16 19:14:54"}, {"errata_id": "8011", "doc-id": "RFC7643", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "      {\r\n        \"name\" : \"authenticationSchemes\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A complex type that specifies supported\r\n          authentication scheme properties.\",\r\n        \"required\" : true,\r\n        \"returned\" : \"default\",\r\n        \"mutability\" : \"readOnly\",\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"name\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The common authentication scheme name,\r\n              e.g., HTTP Basic.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"description\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A description of the authentication\r\n              scheme.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"specUri\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\"external\"],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"An HTTP-addressable URL pointing to the\r\n              authentication scheme's specification.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"documentationUri\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\"external\"],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"An HTTP-addressable URL pointing to the\r\n              authentication scheme's usage documentation.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          }\r\n        ]\r\n      }", "correct_text": "      {\r\n        \"name\" : \"authenticationSchemes\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A complex type that specifies supported\r\n          authentication scheme properties.\",\r\n        \"required\" : true,\r\n        \"returned\" : \"default\",\r\n        \"mutability\" : \"readOnly\",\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"type\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The authentication scheme.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : false,\r\n            \"canonicalValues\" : [\r\n              \"oauth\",\r\n              \"oauth2\",\r\n              \"oauthbearertoken\",\r\n              \"httpbasic\",\r\n              \"httpdigest\"\r\n            ],\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"name\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The common authentication scheme name,\r\n              e.g., HTTP Basic.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"description\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A description of the authentication\r\n              scheme.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"specUri\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\"external\"],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"An HTTP-addressable URL pointing to the\r\n              authentication scheme's specification.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"documentationUri\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\"external\"],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"An HTTP-addressable URL pointing to the\r\n              authentication scheme's usage documentation.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          }\r\n        ]\r\n      }", "notes": "\u00a75 explicitly defines a `type` attribute for ServiceProviderConfig, with canonical values (\"oauth\", \"oauth2\", \"oauthbearertoken\", \"httpbasic\", \"httpdigest\"). The canonical values should appear in the schema representation, thus the whole `type` attribute should be part of the schema representation.\r\n\r\nIn addition this would made the `readOnly` mutability explicit.", "submit_date": "2024-06-30", "submitter_name": "\u00c9loi Rivard", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8012", "doc-id": "RFC9608", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "The Certification Authority (CA) that issues these short-lived \r\ncertificates do not publish revocation information because the \r\ncertificate lifespan that is shorter than the time needed to detect,\r\nreport, and distribute revocation information.", "correct_text": "The Certification Authority (CA) that issues these short-lived \r\ncertificates do not publish revocation information because the \r\ncertificate lifespan is shorter than the time needed to detect,\r\nreport, and distribute revocation information.", "notes": "In all formats, the abstract has a grammar typo - the \"that is\"\r\nin the cited sentence should just be \"is\". It looks possibly like\r\nan editing artifact from prior versions of the sentence.", "submit_date": "2024-07-01", "submitter_name": "Eric Mill", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-01 15:57:33"}, {"errata_id": "8014", "doc-id": "RFC7413", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.2.1", "orig_text": "                                                            <...> We\r\n   RECOMMEND both the client and the server to retransmit SYN and SYN-\r\n   ACK packets without the cookie options on timeouts.  This ensures the\r\n   connections of cookie requests will go through and lowers the latency\r\n   penalty (of dropped SYN/SYN-ACK packets).", "correct_text": "                                                            <...> We\r\n   RECOMMEND both the client and the server to retransmit SYN and SYN-\r\n   ACK packets without the cookie options on timeouts.  This ensures the\r\n   connection requests will go through.", "notes": "With a retransmitted SYN or SYN-ACK packet without cookie options it does not follow that 'cookie requests' will go through, however 'normal' TCP connection flow does continue. This comes with a latency penalty.\r\n\r\nThis seems like editorial and does not impact the fucntion of the protocol, hence, held for document update to cosider better wordings.", "submit_date": "2024-07-02", "submitter_name": "Bart Overkamp", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-10-30 12:06:55"}, {"errata_id": "8015", "doc-id": "RFC7413", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "      b. Otherwise, include the Fast Open option with the cookie of the\r\n         server.  Include any data up to the cached server MSS or\r\n         default 536 bytes.", "correct_text": "      b. Otherwise, include the Fast Open option with the cookie of the\r\n         server.  Include any data up to the cached server MSS or\r\n         default: 536 bytes for IPv4 or 1220 bytes for IPv6.", "notes": "default MSS is IP protocol-version-specific.\r\n\r\nBased on the discussion https://mailarchive.ietf.org/arch/msg/tcpm/mJC7Lz5GE8RmkJ_cJWaiRIn-sC8/, this is HFDU.", "submit_date": "2024-07-02", "submitter_name": "Bart Overkamp", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 08:35:06"}, {"errata_id": "8016", "doc-id": "RFC7413", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3.3", "orig_text": "    <...> In fact, power has become such a prominent issue in\r\n   modern Long Term Evolution (LTE) devices that mobile browsers close\r\n   HTTP connections within seconds or even immediately [SOUDERS11].\r\n", "correct_text": "    <...> In fact, power has become such a prominent issue in\r\n   3G mobile devices that mobile browsers close HTTP connections\r\n   within seconds or even immediately [SOUDERS11].\r\n", "notes": "Reading the reference: It mentions 3G exclusively.\r\n3G data networks are circuit-switched so energy consumption on idle connections is an issue.\r\n4G/5G (LTE) networks are packet-switched, and radio energy consumption (active carrier?) might not be an issue. 4G and 5G are not mentioned in the reference.", "submit_date": "2024-07-02", "submitter_name": "Bart Overkamp", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 08:30:58"}, {"errata_id": "8017", "doc-id": "RFC7413", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.", "orig_text": "   Performing TCP Fast Open in connection 2:\r\n\r\n   TCP A (Client)                                      TCP B (Server)\r\n   ______________                                      ______________\r\n   CLOSED                                                      LISTEN\r\n\r\n   #1 SYN-SENT       ----- <SYN=x,CookieOpt=C,DATA_A> ---->  SYN-RCVD\r\n\r\n   #2 ESTABLISHED    <---- <SYN=y,ACK=x+len(DATA_A)+1> ----  SYN-RCVD\r\n\r\n   #3 ESTABLISHED    <---- <ACK=x+len(DATA_A)+1,DATA_B>----  SYN-RCVD\r\n\r\n   #4 ESTABLISHED    ----- <ACK=y+1>--------------------> ESTABLISHED\r\n\r\n   #5 ESTABLISHED    --- <ACK=y+len(DATA_B)+1>----------> ESTABLISHED", "correct_text": "   Performing TCP Fast Open in connection 2:\r\n\r\n   TCP A (Client)                                      TCP B (Server)\r\n   ______________                                      ______________\r\n   CLOSED                                                      LISTEN\r\n\r\n   #1 SYN-SENT       ----- <SYN=x,CookieOpt=C,DATA_A> ---->  SYN-RCVD\r\n\r\n   #2 ESTABLISHED    <---- <SYN=y,ACK=x+len(DATA_A)+1> ----  SYN-RCVD\r\n\r\n   #3 ESTABLISHED    <---- <ACK=x+len(DATA_A)+1,DATA_B>----  SYN-RCVD\r\n\r\n   #4 ESTABLISHED    ----- <ACK=y+1>--------------------> ESTABLISHED\r\n\r\n   #5 ESTABLISHED    --- <ACK=y+len(DATA_B)+1>----------> ESTABLISHED\r\n\r\n                                       OR\r\n\r\n   #2 ESTABLISHED    <- <SYN=y,ACK=x+len(DATA_A)+1,DATA_B>-  SYN-RCVD\r\n\r\n   #3 ESTABLISHED    --- <ACK=y+len(DATA_B)+1>----------> ESTABLISHED", "notes": "To include illustration of the flow resulting from step 5 in\r\nsection 4.2.2. \u00a7 Server: Receiving SYN and responding with SYN-ACK\r\n\r\n                   ...\"The server MAY include data in the SYN-ACK packet\r\n      if the response data is readily available.  Some applications may\r\n      favor delaying the SYN-ACK, allowing the application to process\r\n      the request in order to produce a response, but this is left up to\r\n      the implementation.\"\r\n\r\nIt would be good to illustrate this alternative handshake in further updated document but this ack of illustration does not fault the protocol function, hence, this \"technical\" errata type is changed to \"editorial\" and status is set to held for document update.  ", "submit_date": "2024-07-02", "submitter_name": "Bart Overkamp", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-10-30 16:17:38"}, {"errata_id": "8018", "doc-id": "RFC9481", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "10", "orig_text": "   [NIST.FIPS.180-4]\r\n              Dang, Q. H. and NIST, \"Secure Hash Standard\", NIST Federal\r\n              Information Processing Standards Publications 180-4,\r\n              DOI 10.6028/NIST.FIPS.180-4, July 2015,\r\n              <https://nvlpubs.nist.gov/nistpubs/FIPS/\r\n              NIST.FIPS.180-4.pdf>.\r\n", "correct_text": "   [NIST.FIPS.180-4]\r\n              Dang, Q. H., \"Secure Hash Standard\", NIST Federal\r\n              Information Processing Standards Publications 180-4,\r\n              DOI 10.6028/NIST.FIPS.180-4, July 2015,\r\n              <https://nvlpubs.nist.gov/nistpubs/FIPS/\r\n              NIST.FIPS.180-4.pdf>.\r\n", "notes": "The references section contains several references (the given one is just the first example) that treat NIST like a human author under several.\r\nIn this example, the mistake is directly imported from bib.ietf.org for NIST.FIPS.180-4\r\n\r\n(This should become \"Hold for Document Update\", as it is unlikely to cause confusion, just a few raised eyebrows.)\r\n\r\n--VERIFIER NOTES-- \r\nSee:\r\nhttps://github.com/ietf-tools/bibxml-service/issues/262\r\nhttps://github.com/ietf-tools/bibxml-service/issues/418", "submit_date": "2024-07-03", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-09 23:04:26"}, {"errata_id": "8027", "doc-id": "RFC5272", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "recipientInfos.riid.issuerSerialNumber = <NULL, 201>", "correct_text": "recipientInfos.riid.issuerSerialNumber = <NULL-DN, 201>", "notes": "In ASN.1, NULL is a type that is encoded as 0x0500. NULL is not appropriate in this context because the corresponding field is defined as a Name. NULL-DN is defined in RFC4210 as \"a zero-length SEQUENCE OF RelativeDistinguishedNames\". A NULL-DN is encoded as 0x3000. This is almost certainly what was intended here. Note, RFC4210 is not referenced by RFC5272 currently, so that would need to be changed as well to reference NULL-DN.", "submit_date": "2024-07-11", "submitter_name": "Carl Wallace", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-19 10:57:31"}, {"errata_id": "8020", "doc-id": "RFC9487", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2", "orig_text": "Figure 7:\r\n\r\n   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|         Set ID = 3            |          Length = 24          |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|       Template ID 259         |        Field Count = 3        |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|     Scope Field Count = 1     |0| srhActiveSegmentIPv6 = 495  |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|   Scope 1 Field Length = 4    |0|srhSegmentIPv6End.Behav = 502|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|       Field Length = 1        |0|srhSegmentIPv6Lo.Length = 501|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|       Field Length = 4        |           Padding             |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\nFigure 8:\r\n\r\n 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|         SET ID = 259          |           Length = 28         |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|               srhActiveSegmentIPv6 = 2001:db8::1              |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|srhSegmentIPv6EndpointBehavior |srhSegmentIPv6LocatorLength= 48|\r\n|= End [1]                      |                               |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|               srhActiveSegmentIPv6 = 2001:db8::4              |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|srhSegmentIPv6EndpointBehavior |srhSegmentIPv6LocatorLength= 48|\r\n|= End with NEXT-CSID [43]      |                               |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|               srhActiveSegmentIPv6 = 2001:db8::6              |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|srhSegmentIPv6EndpointBehavior |srhSegmentIPv6LocatorLength= 48|\r\n|= End.DX6 [16]                 |                               |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\n", "correct_text": "Figure 7:\r\n\r\n 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|         Set ID = 3            |          Length = 24          |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|       Template ID 259         |        Field Count = 3        |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|     Scope Field Count = 1     |0|     srhSegmentIPv6 = 494    |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|   Scope 1 Field Length = 4    |0|srhSegmentIPv6End.Behav = 502|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|       Field Length = 1        |0|srhSegmentIPv6Lo.Length = 501|\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|       Field Length = 4        |           Padding             |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n\r\nFigure 8:\r\n\r\n 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|         SET ID = 259          |           Length = 28         |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|                  srhSegmentIPv6 = 2001:db8::1                 |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|srhSegmentIPv6EndpointBehavior |srhSegmentIPv6LocatorLength= 48|\r\n|= End [1]                      |                               |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|                  srhSegmentIPv6 = 2001:db8::4                 |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|srhSegmentIPv6EndpointBehavior |srhSegmentIPv6LocatorLength= 48|\r\n|= End with NEXT-CSID [43]      |                               |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|                  srhSegmentIPv6 = 2001:db8::6                 |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|srhSegmentIPv6EndpointBehavior |srhSegmentIPv6LocatorLength= 48|\r\n|= End.DX6 [16]                 |                               |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "Example in Appendix A.2 should state IE494 srhSegmentIPv6  instead of IE495 srhActiveSegmentIPv6 for mapping the IE510 srhSegmentIPv6LocatorLength and IE502 srhSegmentIPv6EndpointBehavior in IPFIX option-template as described in Section 6.2.\r\n\r\nErrata has been reported to me by a software developer of a major vendor working on implementation.\r\n\r\nAlso, the first two lines of Figure 7 are two characters to the right from the correct place. This was reported by Carsten Bormann.", "submit_date": "2024-07-06", "submitter_name": "Thomas Graf", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2024-07-11 17:06:09"}, {"errata_id": "8026", "doc-id": "RFC5480", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "---------+----------+------------+-----------\r\n80       | 160-223  | SHA-1      | sect163k1\r\n         |          | SHA-224    | secp163r2\r\n         |          | SHA-256    | secp192r1\r\n         |          | SHA-384    |\r\n         |          | SHA-512    |\r\n---------+----------+------------+-----------", "correct_text": "---------+----------+------------+-----------\r\n80       | 160-223  | SHA-1      | sect163k1\r\n         |          | SHA-224    | sect163r2\r\n         |          | SHA-256    | secp192r1\r\n         |          | SHA-384    |\r\n         |          | SHA-512    |\r\n---------+----------+------------+-----------", "notes": "Misspelling: secp163r2 is not defined, whereas sect163r2 is.", "submit_date": "2024-07-10", "submitter_name": "Lo\u00efc Etienne", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-10 17:39:22"}, {"errata_id": "8028", "doc-id": "RFC8984", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3", "orig_text": "{\r\n     \"@type\": \"Group\",\r\n     \"uid\": \"bf0ac22b-4989-4caf-9ebd-54301b4ee51a\",\r\n     \"updated\": \"2020-01-15T18:00:00Z\",\r\n     \"name\": \"A simple group\",\r\n     \"entries\": [{\r\n       \"@type\": \"Event\",\r\n       \"uid\": \"a8df6573-0474-496d-8496-033ad45d7fea\",\r\n       \"updated\": \"2020-01-02T18:23:04Z\",\r\n       \"title\": \"Some event\",\r\n       \"start\": \"2020-01-15T13:00:00\",\r\n       \"timeZone\": \"America/New_York\",\r\n       \"duration\": \"PT1H\"\r\n     },\r\n     {\r\n       \"@type\": \"Task\",\r\n       \"uid\": \"2a358cee-6489-4f14-a57f-c104db4dc2f2\",\r\n       \"updated\": \"2020-01-09T14:32:01Z\",\r\n       \"title\": \"Do something\"\r\n     }]\r\n   }", "correct_text": "{\r\n     \"@type\": \"Group\",\r\n     \"uid\": \"bf0ac22b-4989-4caf-9ebd-54301b4ee51a\",\r\n     \"updated\": \"2020-01-15T18:00:00Z\",\r\n     \"title\": \"A simple group\",\r\n     \"entries\": [{\r\n       \"@type\": \"Event\",\r\n       \"uid\": \"a8df6573-0474-496d-8496-033ad45d7fea\",\r\n       \"updated\": \"2020-01-02T18:23:04Z\",\r\n       \"title\": \"Some event\",\r\n       \"start\": \"2020-01-15T13:00:00\",\r\n       \"timeZone\": \"America/New_York\",\r\n       \"duration\": \"PT1H\"\r\n     },\r\n     {\r\n       \"@type\": \"Task\",\r\n       \"uid\": \"2a358cee-6489-4f14-a57f-c104db4dc2f2\",\r\n       \"updated\": \"2020-01-09T14:32:01Z\",\r\n       \"title\": \"Do something\"\r\n     }]\r\n   }", "notes": "There is no \"name\" property specified for a Group. \"name\" should be \"title\".\r\nSee Section 5.3 of RFC8984.", "submit_date": "2024-07-12", "submitter_name": "Jonathan K Porter", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-05-08 15:08:09"}, {"errata_id": "8029", "doc-id": "RFC3810", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   Both Multicast Address Specific Queries and Multicast Address and\r\n   Source Specific Queries are only sent in response to State Change\r\n   Reports, never in response to Current State Reports.  This\r\n   distinction between the two types of reports is needed to avoid the\r\n   router treating all Multicast Listener Reports as potential changes\r\n   in state.  By doing so, the fast leave mechanism of MLDv2, described\r\n   in more detail in section 2.2, might not be effective if a State\r\n   Change Report is lost, and only the following Current State Report is\r\n   received by the router.  Nevertheless, it avoids an increased\r\n   processing at the router and it reduces the MLD traffic on the link.\r\n   More details on the necessity of distinguishing between the two\r\n   report types can be found in Appendix A1.", "correct_text": "   Both Multicast Address Specific Queries and Multicast Address and\r\n   Source Specific Queries are only sent in response to State Change\r\n   Reports, never in response to Current State Reports.  This\r\n   distinction between the two types of reports is needed to avoid the\r\n   router treating all Multicast Listener Reports as potential changes\r\n   in state.  By doing so, the fast leave mechanism of MLDv2, described\r\n   in more detail in section 2.3, might not be effective if a State\r\n   Change Report is lost, and only the following Current State Report is\r\n   received by the router.  Nevertheless, it avoids an increased\r\n   processing at the router and it reduces the MLD traffic on the link.\r\n   More details on the necessity of distinguishing between the two\r\n   report types can be found in Appendix A1.", "notes": "IIUC the fast leave mechanism is not explain in section 2.2 but in 2.3", "submit_date": "2024-07-12", "submitter_name": "Marco Seravalli", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-12 19:57:20"}, {"errata_id": "8030", "doc-id": "RFC9051", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.3.10", "orig_text": "The client is designed so that it keeps two 'Deleted Items' mailboxes,\r\none for each namespace\r\n\r\nC: A005 CREATE \"Delete Items\"\r\nS: A005 OK CREATE command completed\r\nC: A006 CREATE \"#mh/Deleted Items\"\r\nS: A006 OK CREATE command completed", "correct_text": "The client is designed so that it keeps two 'Deleted Items' mailboxes,\r\none for each namespace\r\n\r\nC: A005 CREATE \"Deleted Items\"\r\nS: A005 OK CREATE command completed\r\nC: A006 CREATE \"#mh/Deleted Items\"\r\nS: A006 OK CREATE command completed", "notes": "Simple typographic error in mailbox name. \"Delete Items\" should be \"Deleted Items\".", "submit_date": "2024-07-14", "submitter_name": "David Harris", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-15 17:26:36"}, {"errata_id": "8032", "doc-id": "RFC9420", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.9.2", "orig_text": "... is equal to the resolution of C with D removed.", "correct_text": "... is equal to the resolution of C with C removed.", "notes": "I think it should be C instead of D, since C is not a leaf node at all and D is an unmerged leaf.\n --VERIFIER NOTES-- \n   As per Richard Barnes:\r\n\"The resolution of C with C removed\" is nonsensical.  The only reason C would appear in its own resolution is if the resolution is just [C], in which case removing C yields the empty list.  The intent here is correct.  If D is non-blank, as this section presumes, then the resolution of C will be [D, D.unmerged_leaves..., stuff_outside_of_subtree_D].  So what this says is that P and D agree on the unmerged leaves under D.", "submit_date": "2024-07-15", "submitter_name": "Stefan Schaubeck", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-07-16 01:46:07"}, {"errata_id": "8031", "doc-id": "RFC9420", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.9", "orig_text": "   The parent_hash field in ParentHashInput captures\r\n   information about the nodes above P. the original_sibling_tree_hash\r\n   captures ...", "correct_text": "   The parent_hash field in ParentHashInput captures\r\n   information about the nodes above P. The original_sibling_tree_hash\r\n   captures ...", "notes": "capital letter needed for first word of second sentence (i.e., \"The\" not \"the\").", "submit_date": "2024-07-15", "submitter_name": "Stefan Schaubeck", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-15 17:38:04"}, {"errata_id": "8033", "doc-id": "RFC2342", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "< The client is designed so that it keeps two \u2019Deleted Items\u2019\r\nmailboxes, one for each namespace. >\r\n\r\nC: A003 CREATE \"Delete Items\"\r\nS: A003 OK CREATE command completed\r\nC: A004 CREATE \"#mh/Deleted Items\"\r\nS: A004 OK CREATE command completed\r\n", "correct_text": "< The client is designed so that it keeps two \u2019Deleted Items\u2019\r\nmailboxes, one for each namespace. >\r\n\r\nC: A003 CREATE \"Deleted Items\"\r\nS: A003 OK CREATE command completed\r\nC: A004 CREATE \"#mh/Deleted Items\"\r\nS: A004 OK CREATE command completed\r\n", "notes": "Simple typographic error in mailbox name - \"Delete\" should be \"Deleted\".", "submit_date": "2024-07-16", "submitter_name": "David Harris", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-18 21:44:20"}, {"errata_id": "8034", "doc-id": "RFC9615", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "Fully qualified signaling names must by valid DNS names.", "correct_text": "Fully qualified signaling names must be valid DNS names.", "notes": "Minor typo - \"by\" should say \"be\".", "submit_date": "2024-07-17", "submitter_name": "Alexander Robohm", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-18 22:08:17"}, {"errata_id": "8047", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "   As with TLS 1.3, DTLS 1.3 implementations send a KeyUpdate message to\r\n   indicate that they are updating their sending keys.  As with other\r\n   handshake messages with no built-in response, KeyUpdates MUST be\r\n   acknowledged.  In order to facilitate epoch reconstruction\r\n   (Section 4.2.2), implementations MUST NOT send records with the new\r\n   keys or send a new KeyUpdate until the previous KeyUpdate has been\r\n   acknowledged (this avoids having too many epochs in active use).", "correct_text": "   As with TLS 1.3, DTLS 1.3 implementations send a KeyUpdate message to\r\n   indicate that they are updating their sending keys. As with other\r\n   handshake messages with no built-in response, KeyUpdates MUST be\r\n   acknowledged. Acknowledgements are used to both control\r\n   retransmission and transition to the next epoch. Implementations MUST\r\n   NOT send records with the new keys until the KeyUpdate and all\r\n   preceding messages have been acknowledged. This facilitates epoch\r\n   reconstruction (Section 4.2.2) and avoids too many epochs in active\r\n   use, by ensuring the peer has processed the KeyUpdate and started\r\n   receiving at the new epoch.\r\n\r\n   A KeyUpdate message terminates the post-handshake stream in an epoch.\r\n   After sending KeyUpdate in an epoch, implementations MUST NOT send\r\n   any new post-handshake messages in that epoch. Note that, if the\r\n   implementation has sent KeyUpdate but is waiting for an ACK, the next\r\n   epoch is not yet active. In this case, subsequent post-handshake\r\n   messages may not be sent until receiving the ACK.", "notes": "See https://mailarchive.ietf.org/arch/msg/tls/_ku3-YDcroNmG_QKZsYTtqYzC0M/ for discussion. This is option 7 from that discussion, as well as the fix for the other issue described at the top of https://mailarchive.ietf.org/arch/msg/tls/GYX_teYy5CTFiGCBgbQJQwv_Fj4/", "submit_date": "2024-07-25", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8048", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   The first message each side transmits in each association always has\r\n   message_seq = 0.  Whenever a new message is generated, the\r\n   message_seq value is incremented by one.  When a message is\r\n   retransmitted, the old message_seq value is reused, i.e., not\r\n   incremented.  From the perspective of the DTLS record layer, the\r\n   retransmission is a new record.  This record will have a new\r\n   DTLSPlaintext.sequence_number value.", "correct_text": "   The first message each side transmits in each association always has\r\n   message_seq = 0.  Whenever a new message is generated, the\r\n   message_seq value is incremented by one.  Implementations MUST NOT\r\n   allow message_seq to wrap, but instead MUST establish a new\r\n   association, terminating the old association.  When a message is\r\n   retransmitted, the old message_seq value is reused, i.e., not\r\n   incremented.  From the perspective of the DTLS record layer, the\r\n   retransmission is a new record.  This record will have a new\r\n   DTLSPlaintext.sequence_number value.", "notes": "While pondering what to do about https://mailarchive.ietf.org/arch/msg/tls/6y8wTv8Q_IPM-PCcbCAmDOYg6bM/, I noticed that we don't say anything about message_seq wrapping. Since we don't reset that counter, it's not only possible for it to wrap, but for the peer to induce you to wrap it. This seems warrant some text. I borrowed the \"MUST NOT allow ... to wrap, but instead ...\" phrasing from Section 4.2.1.", "submit_date": "2024-07-26", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8036", "doc-id": "RFC9141", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "NEW:\r\n\r\nThose archives are located\r\n at https://www.ietf.org/ietf-ftp/ietf-\u2060mail-archive/.\r\n", "correct_text": "NEW:\r\n\r\nThose archives are located\r\n at https://www.ietf.org/ietf-ftp/ietf-mail-archive/.\r\n", "notes": "There's a word joiner (WJ) (U+2060) between \"ietf-\" and \"mail-archive/\" in the URL which translates to https://www.ietf.org/ietf-ftp/ietf-%E2%81%A0mail-archive/", "submit_date": "2024-07-17", "submitter_name": "Kesara Rathnayake", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-25 18:43:44"}, {"errata_id": "8037", "doc-id": "RFC4035", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.3.1.", "orig_text": "   [...] the validator cannot predetermine which DNSKEY\r\n   RR to use to authenticate the signature, and it MUST try each\r\n   matching DNSKEY RR until either the signature is validated or the\r\n   validator has run out of matching public keys to try.", "correct_text": "   [...] the validator cannot predetermine which DNSKEY\r\n   RR to use to authenticate the signature, and it SHOULD try each\r\n   matching DNSKEY RR until either the signature is validated or the\r\n   validator has run out of matching public keys to try.", "notes": "The original text requires validators to invest an unreasonable amount of work to validate a given signature in case there are many such DNSKEY RRs. The issue was exploited in the construction of CPU resource exhaustion attacks (CVE-2023-50387). For more details see our publication with ACM CCS'24 on the KeyTrap denial of service vulnerabilities.\r\n\r\n-- verifier note --\r\nWhile the concern is valid, this erratum does not represent the DNSEXT WG consensus at the time of writing, i.e., it cannot be \"verified\"", "submit_date": "2024-07-18", "submitter_name": "Elias Heftrig", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-08-07 15:37:24"}, {"errata_id": "8038", "doc-id": "RFC6840", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2.", "orig_text": "   When validating a response to QTYPE=*, all received RRsets that match\r\n   QNAME and QCLASS MUST be validated.  If any of those RRsets fail\r\n   validation, the answer is considered Bogus.", "correct_text": "   When validating a response to QTYPE=*, all received RRsets that match\r\n   QNAME and QCLASS SHOULD be validated.  If any of those RRsets fail\r\n   validation, the answer is considered Bogus.", "notes": "The original text requires validators to invest an unreasonable amount of work to validate the signatures over the RRsets in case there are many such RRsets. The issue was exploited in the construction of CPU resource exhaustion attacks (CVE-2023-50387). For more details see our publication with ACM CCS'24 on the KeyTrap denial of service vulnerabilities.\r\n\r\n-- verifier note --\r\nWhile the concern is valid (and has been addressed by more recent RFC), this erratum does not represent the DNSEXT WG consensus at the time of writing, i.e., it cannot be \"verified\".\r\n\r\nNote that further elaboration is required to clarify the implications of not following the recommendation. We suggest to also update the second sentence along the lines of:\r\n>  If any of those RRsets fail validation or the response contains more such RRsets than the validator is willing to process, the answer is considered Bogus.", "submit_date": "2024-07-18", "submitter_name": "Elias Heftrig", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-08-07 15:39:59"}, {"errata_id": "8039", "doc-id": "RFC9074", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.1", "orig_text": "acknowledged = \"ACKNOWLEDGED\" *acknowledgedparam \":\" datetime CRLF", "correct_text": "acknowledged = \"ACKNOWLEDGED\" *acknowledgedparam \":\" date-time CRLF", "notes": "to match the \"date-type\" defined as value type above, and the name of the ABNF definition in RFC5545", "submit_date": "2024-07-21", "submitter_name": "Dominique Haza\u00ebl-Massieux", "verifier_id": "", "verifier_name": null, "update_date": "2024-07-25 18:47:17"}, {"errata_id": "8040", "doc-id": "RFC9073", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.3", "orig_text": "      resprop      = *(\r\n                     ;\r\n                     ; The following are REQUIRED\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     uid /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     description / geo / name / restype /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; and MAY occur more than once.\r\n                     ;\r\n                     sdataprop / iana-prop\r\n                   )", "correct_text": "      resprop      = *(\r\n                     ;\r\n                     ; The following are REQUIRED\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     uid /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; but MUST NOT occur more than once.\r\n                     ;\r\n                     description / geo / name / restypeprop /\r\n                     ;\r\n                     ; The following are OPTIONAL\r\n                     ; and MAY occur more than once.\r\n                     ;\r\n                     sdataprop / iana-prop\r\n                   )", "notes": "restype is not defined anywhere, whereas restypeprop is", "submit_date": "2024-07-21", "submitter_name": "Dominique Haza\u00ebl-Massieux", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8041", "doc-id": "RFC9239", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "Source goal sources SHOULD be encoded as UTF-8", "correct_text": "Script goal sources SHOULD be encoded as UTF-8", "notes": "Section 3 says there are only two goals: Module and Script. That \"Source goal\" is a typo and should read \"Script goal\".", "submit_date": "2024-07-22", "submitter_name": "Thomas Broyer", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-25 17:52:58"}, {"errata_id": "8042", "doc-id": "RFC9347", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "3-255 \tReserved", "correct_text": "2-255 \tUnassigned", "notes": "The same section, in the previous line, states \"1 \tCongestion Control Format \tRFC 9347\" so 2 is not covered in the registry. It's likely meant to be \"Unassigned\"?", "submit_date": "2024-07-22", "submitter_name": "Antony Antony", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-07-23 00:30:39"}, {"errata_id": "8043", "doc-id": "RFC9171", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.3.1", "orig_text": "   CRC:  A CRC SHALL be present in the primary block unless the bundle\r\n      includes a BPSec Block Integrity Block [BPSEC] whose target is the\r\n      primary block, in which case a CRC MAY be present in the primary\r\n      block.  The length and nature of the CRC SHALL be as indicated by\r\n      the CRC type.  The CRC SHALL be computed over the concatenation of\r\n      all bytes (including CBOR \"break\" characters) of the primary block\r\n      including the CRC field itself, which, for this purpose, SHALL be\r\n      temporarily populated with all bytes set to zero.", "correct_text": "   CRC:  A CRC SHALL be present in the primary block unless the bundle\r\n      includes a BPSec Block Integrity Block [BPSEC] whose target is the\r\n      primary block, in which case a CRC MAY be present in the primary\r\n      block.  The length and nature of the CRC SHALL be as indicated by\r\n      the CRC type.  The CRC SHALL be computed over the concatenation of\r\n      all bytes (including CBOR \"break\" characters) of the primary block\r\n      including the CRC field itself, which, for this purpose, SHALL be\r\n      temporarily populated with all value bytes set to zero. The\r\n      initial byte of the CBOR encoded CRC field SHALL remain unchanged.", "notes": "There was some confusion about the wording of \"temporarily populated with all bytes set to zero\" when talking about the CRC field in the CBOR encoded primary block. An implementer thought this might mean to also zeroize the intial byte(s) of the CBOR encoded byte string that represents the CRC field. This correction makes it clear that only the bytes that represent the value of the CRC field should be zeroized when calculating the CRC.\r\n\r\nMy correction uses \"initial byte\" because the current CRC types will only ever have a single intial byte when encoding the CRC value as a CBOR byte string. However, technically CBOR byte strings can byte more than 1 initial byte so it may be better to use \"initial byte(s)\".\r\n\r\n--- see also ---\r\n\r\n* https://mailarchive.ietf.org/arch/msg/dtn/3JAFDy9xJXIZNOItbnoqXkjlons/", "submit_date": "2024-07-22", "submitter_name": "John Huff", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-11 00:09:13"}, {"errata_id": "8044", "doc-id": "RFC9062", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3", "orig_text": "EVPN allows for three different models of unicast label\r\nassignment: label per EVI, label per <ESI, Ethernet Tag>, and\r\nlabel per MAC address.  ", "correct_text": "EVPN allows for four different models of unicast label assignment: \r\n\r\n* label per EVI\r\n* label per <EVI, Ethernet Tag>\r\n* label per <ESI, Ethernet Tag> \r\n* label per MAC address. \r\n", "notes": "Section 9.1.1 of RFC 7432 defines four label allocation models for labels advertised in the Label1 field of MAC/IP Advertisement (EVPN Type 2 routes).\r\n\r\nOne of these models is missing in the original text f the RFC.", "submit_date": "2024-07-23", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2025-02-10 10:42:04"}, {"errata_id": "8046", "doc-id": "RFC7946", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "Example of a 2D bbox member on a Feature:\r\n\r\n   {\r\n       \"type\": \"Feature\",\r\n       \"bbox\": [-10.0, -10.0, 10.0, 10.0],\r\n       \"geometry\": {\r\n           \"type\": \"Polygon\",\r\n           \"coordinates\": [\r\n               [\r\n                   [-10.0, -10.0],\r\n                   [10.0, -10.0],\r\n                   [10.0, 10.0],\r\n                   [-10.0, -10.0]\r\n               ]\r\n           ]\r\n       }\r\n       //...\r\n   }", "correct_text": "Example of a 2D bbox member on a Feature:\r\n\r\n   {\r\n       \"type\": \"Feature\",\r\n       \"bbox\": [-10.0, -10.0, 10.0, 10.0],\r\n       \"geometry\": {\r\n           \"type\": \"Polygon\",\r\n           \"coordinates\": [\r\n               [\r\n                   [-10.0, -10.0],\r\n                   [10.0, -10.0],\r\n                   [10.0, 10.0],\r\n                   [-10.0, 10.0],\r\n                   [-10.0, -10.0]\r\n               ]\r\n           ]\r\n       }\r\n       //...\r\n   }", "notes": "The bounding box as a polygon is currently missing a corner.", "submit_date": "2024-07-24", "submitter_name": "John Andrea", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8052", "doc-id": "RFC8364", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |1|         Type = 1              |          Length             |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |1|         Type = 1            |           Length              |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The field boundary is off by one bit in the first row of the diagram for Group Source Holdtime TLV. The bar between the Type and Length fields is supposed to be 1 bit further left, matching the 3rd row in the diagram in section 3.1.\r\n\r\nThe fact that this 1-bit-off boundary makes the type field very oddly bit-aligned will likely cause implementers to double check the two diagrams against each other and also conclude the one in 3.1 is correct.  The IANA table in section 7 also has Type as a 15-bit field going up to 32767; the shift in boundary would make it a 16-bit field.\r\n\r\nThe reporting was originally done as technical errata since the text does not specify the actual encoding, the diagram is the \"source\" of actual encoding definition, however the errata reported is the result of a editorial table alignment glitch ", "submit_date": "2024-07-27", "submitter_name": "David 'equinox' Lamparter", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-10-30 13:46:22"}, {"errata_id": "8050", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "   With a 128-bit key as in AES-128, rekeying 2^64 times has a high\r\n   probability of key reuse within a given connection.  Note that even\r\n   if the key repeats, the IV is also independently generated.  In order\r\n   to provide an extra margin of security, sending implementations MUST\r\n   NOT allow the epoch to exceed 2^48-1.  In order to allow this value\r\n   to be changed later, receiving implementations MUST NOT enforce this\r\n   rule.  If a sending implementation receives a KeyUpdate with\r\n   request_update set to \"update_requested\", it MUST NOT send its own\r\n   KeyUpdate if that would cause it to exceed these limits and SHOULD\r\n   instead ignore the \"update_requested\" flag.  Note: this overrides the\r\n   requirement in TLS 1.3 to always send a KeyUpdate in response to\r\n   \"update_requested\".", "correct_text": "   With a 128-bit key as in AES-128, rekeying 2^64 times has a high\r\n   probability of key reuse within a given connection.  Note that even\r\n   if the key repeats, the IV is also independently generated.  In order\r\n   to provide an extra margin of security, sending implementations MUST\r\n   NOT allow the epoch to exceed 2^48-1.  If a sending implementation\r\n   receives a KeyUpdate with request_update set to \"update_requested\",\r\n   it MUST NOT send its own KeyUpdate if that would cause it to exceed\r\n   these limits and SHOULD instead ignore the \"update_requested\" flag.\r\n   Note: this overrides the requirement in TLS 1.3 to always send a\r\n   KeyUpdate in response to \"update_requested\".\r\n\r\n   Exceeding the above limit is not possible with the key update\r\n   mechanisms defined in this document.  After the handshake, each epoch\r\n   change consumes a message_seq value, which is limited to 2^16-1. Both\r\n   sending and receiving implementations MAY instead enforce an epoch\r\n   limit of 2^16-1.  In this case, the implementation MUST check for\r\n   this limit, if reached, terminate the association. In some cases, it\r\n   is otherwise possible for the epoch number to reach 2^16+1.", "notes": "See https://mailarchive.ietf.org/arch/msg/tls/6y8wTv8Q_IPM-PCcbCAmDOYg6bM/ for details. Strictly speaking, as noted in the corrected text, the maximum epoch value does not *quite* fit in 2^16. However, bumping the implementation's size just to accommodate two more epochs seems pointless.\r\n\r\nThe 2^16-1 value comes from the minimum number of messages in the sending side of a handshake, 2 (ClientHello + Finished as a client). Post-handshake, epochs begin at 3. From there, we can send at most 2^16-2 KeyUpdates, ending at epoch 2^16-2+3 = 2^16+1.\r\n\r\nIn particular, I believe NSS stores the epoch as 16-bit in DTLS 1.3. We plan to do so in BoringSSL as well. It is a natural choice because epochs are 16-bit in DTLS 1.2. Without this erratum, I believe NSS, and any other implementation making this choice, is non-compliant because the spec says the receiver \"MUST NOT enforce this rule\".\r\n\r\nTo that end, I've deleted that sentence because we cannot *actually* change this value. DTLS 1.3 tried, but failed, to enable a larger epoch space. Maybe we can try again in DTLS 1.4, or decide we don't care and properly revert to 16-bit.", "submit_date": "2024-07-26", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8051", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.1", "orig_text": "   *  Epoch value (2) is used for messages protected using keys derived\r\n      from [sender]_handshake_traffic_secret.  Messages transmitted\r\n      during the initial handshake, such as EncryptedExtensions,\r\n      CertificateRequest, Certificate, CertificateVerify, and Finished,\r\n      belong to this category.  Note, however, that post-handshake\r\n      messages are protected under the appropriate application traffic\r\n      key and are not included in this category.", "correct_text": "   *  Epoch value (2) is used for messages protected using keys derived\r\n      from [sender]_handshake_traffic_secret.  Messages transmitted\r\n      during the handshake, such as EncryptedExtensions,\r\n      CertificateRequest, Certificate, CertificateVerify, and Finished,\r\n      belong to this category.  Note, however, that post-handshake\r\n      messages are protected under the appropriate application traffic\r\n      key and are not included in this category.", "notes": "The discussion of \"initial handshake\" appears to be a remnant of DTLS 1.2, where a single connection may have multiple handshakes via renegotiation. In (D)TLS 1.3, there is only one handshake per connection.\r\n\r\nLooking to RFC 8446, the only references to \"initial handshake\" refer to resumption, talking about the handshake in the initial connection, vs the handshake in resumption connections. This reference is not trying to distinguish initial vs resumption handshakes, so the use of \"initial handshake\" is a bit confusing. I believe plain \"handshake\" is the right terminology.\r\n\r\nNB: There are two other references to \"initial handshake\", one in the diagram in Section 8, and another in Section 11. I believe they too should be switched to \"handshake\".", "submit_date": "2024-07-26", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": "2024-07-26 17:38:07"}, {"errata_id": "8053", "doc-id": "RFC7901", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.3", "orig_text": "8.3.  Nonexistent Data\r\n\r\n   A recursive resolver receives a query for the A record for\r\n   \"ipv6.toronto.redhat.ca\".  It includes the CHAIN option with the\r\n   following parameters:\r\n\r\n   o  Option-code, set to 13\r\n\r\n   o  Option-length, set to 0x00 0x03\r\n\r\n   o  The closest trust point set to \"ca.\"", "correct_text": "8.3.  Nonexistent Data\r\n\r\n   A recursive resolver receives a query for the A record for\r\n   \"ipv6.toronto.redhat.ca\".  It includes the CHAIN option with the\r\n   following parameters:\r\n\r\n   o  Option-code, set to 13\r\n\r\n   o  Option-length, set to 0x00 0x04\r\n\r\n   o  The closest trust point set to \"ca.\"", "notes": "The value of the option is 0x02 0x63 0x61 0x00 which has length 4 not 3.", "submit_date": "2024-07-27", "submitter_name": "Mark Andrews", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-07-29 22:04:21"}, {"errata_id": "8054", "doc-id": "RFC2223", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3b", "orig_text": "These PostScript rules are likely to changed and expanded as\r\nexperience is gained.", "correct_text": "These PostScript rules are likely to be changed and expanded as\r\nexperience is gained.", "notes": "Missing word: \"be\"", "submit_date": "2024-07-29", "submitter_name": "Jos\u00e9-Nicolas Binette", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-07-29 15:14:07"}, {"errata_id": "8852", "doc-id": "RFC3507", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.5", "orig_text": "If the preview is 1024 bytes and the origin response is 1025 bytes (and the ICAP server responds with 100-continue), then these chunks would appear on the wire:\r\n\r\n      200\\r\\n\r\n      <512 bytes of data>\\r\\n\r\n      200\\r\\n\r\n      <512 bytes of data>\\r\\n\r\n      0\\r\\n\r\n\r\n      <100 Continue Message>\r\n\r\n      1\\r\\n\r\n      <1 byte of data>\\r\\n\r\n      0\\r\\n\\r\\n  <no ieof because we are no longer in preview mode>", "correct_text": "If the preview is 1024 bytes and the origin response is 1025 bytes (and the ICAP server responds with 100-continue), then these chunks would appear on the wire:\r\n\r\n      200\\r\\n\r\n      <512 bytes of data>\\r\\n\r\n      200\\r\\n\r\n      <512 bytes of data>\\r\\n\r\n      0\\r\\n\\r\\n\r\n\r\n      <100 Continue Message>\r\n\r\n      1\\r\\n\r\n      <1 byte of data>\\r\\n\r\n      0\\r\\n\\r\\n  <no ieof because we are no longer in preview mode>", "notes": "The end of preview mode should be indicated by the chunk body terminator string, which would be \"0\\r\\n\\r\\n\" (essentially an empty final chunk).", "submit_date": "2026-03-24", "submitter_name": "Timothy Fu", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8863", "doc-id": "RFC9051", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "IMAPrev", "correct_text": "IMAP4rev", "notes": "In the document, there are two instances of \"IMAPrev1\" and one instance of \"IMAPrev2\". These are presumably misspellings of \"IMAP4rev1\" and \"IMAP4rev2\", respectively. Note the missing \"4\" between \"IMAP\" and \"rev\". These misspellings occur in section 9 and appendix A.", "submit_date": "2026-04-01", "submitter_name": "Seth McDonald", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-04-15 19:21:33"}, {"errata_id": "8055", "doc-id": "RFC4861", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.2", "orig_text": "Note: If neither M nor O flags are set, this indicates that no \r\ninformation is available via DHCPv6.\r\n", "correct_text": "Note: If neither M nor O flags are set, this indicates that no \r\ninformation is available via DHCPv6 from the router, or from \r\nother nodes that the router has been made aware of.\r\n", "notes": "M=0 does not prevent a node from attempting DHCPv6. \r\n\r\nThe router cannot definitively know that no other DHCPv6 servers exist.\r\n\r\nRFC 8415 does not require M=1, with \u00a718 providing other examples that may trigger a DHCP exchange.\r\n\r\n--- AD notes ---\r\n\r\nRight, the advertising router can only know about the things with which is was configured, ergo no unimpeachable statement about the availability or lack thereof of DHCPv6 can be made with protocol-guaranteed perfect correctness.\r\n\r\nOne possible revision that a future -bis document could consider might be as follows:\r\n\r\nOLD:\r\n\r\n        Note: If neither M nor O flags are set, this indicates that no\r\n        information is available via DHCPv6.\r\n\r\nNEW:\r\n\r\n        Note: If neither M nor O flags are set, this indicates that the advertising router,\r\n        and by extension its administrator(s), are neither aware of nor party to any\r\n        other information available via DHCPv6.\r\n\r\n(or words to that effect).\r\n", "submit_date": "2024-07-29", "submitter_name": "Richard Patterson", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-05-13 06:05:51"}, {"errata_id": "8063", "doc-id": "RFC7599", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "5", "orig_text": "The MAP-T algorithmic mapping rules are identical to those in\r\nSection 5(link #1) of the MAP-E specification [RFC7597](link #2), with the following\r\nexception: the forwarding of traffic to and from IPv4 destinations\r\noutside a MAP-T domain is to be performed as described in this\r\ndocument, instead of Section 5.4(link #3) of the MAP-E specification.\r\n\r\nlink #1: https://datatracker.ietf.org/doc/html/rfc7599#section-5\r\nlink #2: https://datatracker.ietf.org/doc/html/rfc7597\r\nlink #3: https://datatracker.ietf.org/doc/html/rfc7599#section-5.4", "correct_text": "The MAP-T algorithmic mapping rules are identical to those in\r\nSection 5(link #1) of the MAP-E specification [RFC7597](link #2), with the following\r\nexception: the forwarding of traffic to and from IPv4 destinations\r\noutside a MAP-T domain is to be performed as described in this\r\ndocument, instead of Section 5.4(link #3) of the MAP-E specification.\r\n\r\nlink #1: https://datatracker.ietf.org/doc/html/rfc7597#section-5\r\nlink #2: https://datatracker.ietf.org/doc/html/rfc7597\r\nlink #3: https://datatracker.ietf.org/doc/html/rfc7597#section-5.4", "notes": "The text in section 5 is correct, but 2 of the URL links are incorrect.\r\nAll links in section 5 should point to RFC7597.\r\n\r\n--VERIFIER NOTES-- \r\nThis is regarding the link generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc7599.txt).", "submit_date": "2024-08-02", "submitter_name": "Scott Freemire", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-15 19:19:06"}, {"errata_id": "8069", "doc-id": "RFC4403", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.7", "orig_text": "      ( 1.3.6.1.1.10.6.7 NAME 'uddiTModel'\r\n        SUP top\r\n        STRUCTURAL\r\n        MUST ( uddiTModelKey $\r\n               uddiName )\r\n        MAY ( uddiAuthorizedName $\r\n              uddiOperator $\r\n              uddiDescription $\r\n              uddiOverviewDescription $\r\n              uddiOverviewURL $\r\n              uddiIdentifierBag $\r\n              uddiCategoryBag $\r\n              uddiIsHidden\r\n              uddiv3TModelKey $\r\n              uddiv3DigitalSignature $\r\n              uddiv3NodeId)\r\n      )", "correct_text": "      ( 1.3.6.1.1.10.6.7 NAME 'uddiTModel'\r\n        SUP top\r\n        STRUCTURAL\r\n        MUST ( uddiTModelKey $\r\n               uddiName )\r\n        MAY ( uddiAuthorizedName $\r\n              uddiOperator $\r\n              uddiDescription $\r\n              uddiOverviewDescription $\r\n              uddiOverviewURL $\r\n              uddiIdentifierBag $\r\n              uddiCategoryBag $\r\n              uddiIsHidden $\r\n              uddiv3TModelKey $\r\n              uddiv3DigitalSignature $\r\n              uddiv3NodeId)\r\n      )", "notes": "The line containing the optional (MAY) \"uddiIsHidden\" attribute type lacks the necessary '$' delimiter.", "submit_date": "2024-08-08", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-02 19:39:59"}, {"errata_id": "8070", "doc-id": "RFC8460", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "A receiver MAY opt to only attempt delivery to one of the endpoints;", "correct_text": "The reporter MAY opt to only attempt delivery to one of the endpoints;", "notes": "The reporter is the entity that delivers the report, not the receiver.", "submit_date": "2024-08-09", "submitter_name": "Freddie Leeman", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-08-12 17:12:34"}, {"errata_id": "8075", "doc-id": "RFC3227", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6. References", "orig_text": "http://www.fish.com/forensics/", "correct_text": "http://www.fish2.com/forensics/class.html", "notes": "www.fish.com is no longer the site where this information is held\n --VERIFIER NOTES-- \n\r\nThe link was valid at the time of publication. This reference is only about an example.", "submit_date": "2024-08-12", "submitter_name": "Gemma Leah", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-27 13:34:31"}, {"errata_id": "8079", "doc-id": "RFC8590", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "Registration for the changePoll XML schema:\r\n\r\n   URI: urn:ietf:params:xml:ns:changePoll-1.0\r\n\r\n   Registrant Contact: IESG\r\n\r\n   XML: See the \"Formal Syntax\" section of this document.", "correct_text": "Registration for the changePoll XML schema:\r\n\r\n   URI: urn:ietf:params:xml:schema:changePoll-1.0\r\n\r\n   Registrant Contact: IESG\r\n\r\n   XML: See the \"Formal Syntax\" section of this document.", "notes": "The wrong URN for the XML schema is written in the RFC. However, despite that, the IANA registered it correctly: https://www.iana.org/assignments/xml-registry/xml-registry.xhtml#schema", "submit_date": "2024-08-16", "submitter_name": "Ben van Hartingsveldt", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-08-19 15:45:00"}, {"errata_id": "8060", "doc-id": "RFC7519", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.2", "orig_text": "   5.   Verify that the resulting JOSE Header includes only parameters\r\n        and values whose syntax and semantics are both understood and\r\n        supported or that are specified as being ignored when not\r\n        understood.", "correct_text": "   5.   Verify that the resulting JOSE Header according to RFC7515 or RFC7516.", "notes": "Validation step 5 in section 7.2 of RFC 7519 states that header parameters should only be ignored if they are explicitly specified as needing to be ignored. \r\n\r\nThis is contrary to step 7 in section 7.2 which requires that the processing rules of RFC 1515 be used if the JWT is a JWS (defined in RFC 1515). RFC 7515 does not include any special provisions for only ignoring header parameters if they are specified as being ignored, but instead requires all header parameters to be ignored if they are not understood (repeated below for convenience). \r\n\r\n\"Unless listed as a critical Header Parameter, per\r\n   Section 4.1.11, all Header Parameters not defined by this\r\n   specification MUST be ignored when not understood.\"\r\n\r\nA discussion with the authors at IETF 120 confirmed that all header parameters that are not understood must be ignored.\r\n\r\nThe proposed errata aims to clarify that if the JWT is a JWS, the processing rules of RFC 7151 should apply (including ignoring header parameters that are not understood). This is consistent with point 7.2, which requires that RFC 7515 [JWS] rules applies and avoids the impression that a new requirement on when parameters are ignored is being introduced in (i.e. the need to be explicitly defined as needing to be ignored).", "submit_date": "2024-07-31", "submitter_name": "Pieter Kasselman", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:29:08"}, {"errata_id": "8061", "doc-id": "RFC9053", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "(This is an addition to the beginning of section 4)", "correct_text": "While this document defines no IDs for non-AEAD ciphers, they are\r\npermitted in COSE. When considering support for a non-AEAD cipher,\r\nthe security considerations in [RFC9459] should be thoroughly reviewed.\r\nAdditionally, consideration should be given to the AEAD downgrade\r\nattack described in [AEAD-Downgrade], which is applicable to COSE\r\nand can be avoided by never performing decryption with a non-AEAD\r\ncipher.\r\n\r\n[AEAD-Downgrade] Falko Strenzke and Johannes Roth, \r\n    \u201cLegacy Encryption Downgrade Attacks against LibrePGP and CMS\u201d,\r\n    Cryptology ePrint Archive, 2024 <https://eprint.iacr.org/2024/1110>\r\n\r\n[RFC9459] Housley, R. and H. Tschofenig, \r\n    \"CBOR Object Signing and Encryption (COSE): AES-CTR and AES-CBC\",\r\n     RFC 9459, DOI 10.17487/RFC9459, September 2023,\r\n     <https://www.rfc-editor.org/rfc/rfc9459>.", "notes": "This is basically a vulnerability disclosure.  The AEAD downgrade\r\nattack was not known at the time of publication. RFC 9459 was\r\nnot published. This does not change the meaning of RFC 9053,\r\n just warns about some use of it.\r\n\r\nGiven the weight we usually put on security considerations (for\r\nexample, those in RFC9459), it seems disclosing this is something\r\nthat should be done.", "submit_date": "2024-08-01", "submitter_name": "Laurence Lundblade", "verifier_id": "", "verifier_name": null, "update_date": "2024-08-02 16:21:02"}, {"errata_id": "8057", "doc-id": "RFC7644", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.4.2.2", "orig_text": "The following are examples of valid filters.  Some attributes (e.g.,\r\n   rooms and rooms.number) are hypothetical extensions and are not part\r\n   of the SCIM core schema:", "correct_text": "The following are examples of valid filters.", "notes": "The mentioned hypothetical extensions \"rooms\" and \"rooms.number\" cannot be found in the examples in Figure 2. It makes it a bit confusing when reading it because it takes some time to see that actually all attributes in the examples can be found in RFC7643. Only the filter for schema with the Enterprise user extension is outside the core schema, but that is also not a hypothetical extension. Therefore, I think it is more clear to remove that sentence since all filters in the examples are valid.", "submit_date": "2024-07-30", "submitter_name": "Andreas H\u00e4ber", "verifier_id": "", "verifier_name": null, "update_date": "2024-07-30 18:50:54"}, {"errata_id": "8062", "doc-id": "RFC7599", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "In the case of an IPv4 prefix, the IPv4 address field is right-padded\r\nwith zeros up to 32 bits.  The PSID is left-padded with zeros to\r\ncreate a 16-bit field.  For an IPv4 prefix or a complete IPv4\r\naddress, the PSID field is zero.", "correct_text": "In the case of an IPv4 prefix, the IPv4 address field is right-padded\r\nwith zeros up to 32 bits.  The PSID is left-padded with zeros to\r\ncreate a 16-bit field.  For an IPv4 prefix the PSID field is zero.", "notes": "When there is a complete IPv4 address, the PSID field should contain the PSID. This is shown in Appendix A, Example 1. It shows an End-user IPv6 prefix and BMR that result in a complete IPv4 address. The resulting \"IPv6 address of MAP CE\" includes the PSID value in the the IPv6 Interface Identifier field.\r\n\r\n---- verifier note ----\r\n\r\nSee also the verified errata 5225 on the same paragraph. Clarity will need to be added if ever this document is updated.", "submit_date": "2024-08-01", "submitter_name": "Scott Freemire", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 08:23:23"}, {"errata_id": "8064", "doc-id": "RFC2812", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "   Numeric Replies:\r\n\r\n           ERR_NEEDMOREPARAMS              ERR_ALREADYREGISTRED", "correct_text": "   Numeric Replies:\r\n\r\n           ERR_NEEDMOREPARAMS              ERR_ALREADYREGISTRED\r\n           ERR_PASSWDMISMATCH", "notes": "Numeric reply list for the PASS message should include ERR_PASSWDMISMATCH as defined in section 5.2: Returned to indicate a failed attempt at registering a connection for which a password was required and was either not given or incorrect.", "submit_date": "2024-08-04", "submitter_name": "Mikhail Klimenko", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:33:35"}, {"errata_id": "8093", "doc-id": "RFC8717", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "Where Appropriate, Replacement of the IETF Executive Director\r\nPosition with the Managing Director, IETF Secretariat", "correct_text": "TBD", "notes": "Do we even have a \"Managing Director, IETF Secretariat\"?\r\n\r\nSection 2 calls out a number of places where the name should be changed. I think\r\nthat has proven to be wrong, and that leaving Exec Director, or *just removing it,*\r\nis the right thing to do.", "submit_date": "2024-09-04", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8094", "doc-id": "RFC9190", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1.1", "orig_text": "Certificates can be of any type supported by TLS including raw\r\npublic keys.", "correct_text": "Certificates can be of any type supported by TLS. Raw public keys may\r\nalso be used.", "notes": "A raw public key specifically is **not** a certificate.", "submit_date": "2024-09-04", "submitter_name": "Eliot Lear", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8077", "doc-id": "RFC5227", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2", "orig_text": "[none]", "correct_text": "Handling ARP Probe on a Router with Local Proxy ARP configured:\r\n\r\nHost A with IP X is learnt on Router R on which Local Proxy ARP \r\nis configured. When another Host B is configured with same IP X \r\nconnected to same Router R, there would be a ARP Probe sent from \r\nHost B received on Router R.\r\n\r\nRouter R with Local Proxy ARP configuration would respond to the \r\nARP Probe indicating the IP X is already in use. In this case \r\nRouter R wouldn't perform validity of IP X based on the ARP Probe. \r\nIf the validity of the IP address is performed for every ARP Probe \r\nthen there would be large amount of ARP request packets in the \r\nnetwork.\r\n\r\nAs Local Proxy ARP functionality is to perform a \"proxy\" on behalf \r\nof the intended host, it would take preference over flooding of \r\nARP Probes.", "notes": "There is this above explained issue on how DAD ARP works with Local Proxy ARP enabled. There has to be a clarification from the RFC on what is the mandated behavior when Local Proxy ARP is configured and there is a DAD ARP packet received on it.\r\n\r\n--- verifier note ---\r\nWhile the concern is valid, the use of errata is limited to errors in the text conflicting wuth the WG / IETF consensus. In this case, ARP proxy are not in scope.\n --VERIFIER NOTES-- \n   \r\n--- verifier note ---\r\nWhile the concern is valid, the use of errata is limited to errors in the text conflicting wuth the WG / IETF consensus. In this case, ARP proxy are not in scope.", "submit_date": "2024-08-14", "submitter_name": "Gopinatha Rao P", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 06:48:03"}, {"errata_id": "8080", "doc-id": "RFC8252", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6 and 7.1", "orig_text": "   Any redirect URI that allows\r\n   the app to receive the URI and inspect its parameters is viable.\r\n\r\nand\r\n\r\n   When choosing a URI scheme to associate with the app, apps MUST use a\r\n   URI scheme based on a domain name under their control, expressed in\r\n   reverse order, as recommended by Section 3.8 of [RFC7595] for\r\n   private-use URI schemes.", "correct_text": "   Any redirect URI that allows\r\n   the app to receive the URI and inspect its parameters is viable.\r\n\r\nand\r\n\r\n   When choosing a URI scheme to associate with the app, apps SHOULD use a\r\n   URI scheme based on a domain name under their control, expressed in\r\n   reverse order, as recommended by Section 3.8 of [RFC7595] for", "notes": "These two statements appear to conflict. Suggest downgrading the section 7.1 text from MUST to SHOULD to resolve the conflict.", "submit_date": "2024-08-16", "submitter_name": "Bryce Thomas", "verifier_id": "", "verifier_name": null, "update_date": "2024-08-19 15:49:26"}, {"errata_id": "8081", "doc-id": "RFC9435", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "A common set of DSCPs are defined for both IPv4 and IPv6", "correct_text": "A common set of DSCPs is defined for both IPv4 and IPv6", "notes": "The subject of the sentence (\"A common set\") is singular, but the verb is plural.", "submit_date": "2024-08-17", "submitter_name": "Angelos Vassiliou", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-08-20 16:14:32"}, {"errata_id": "8082", "doc-id": "RFC5657", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "BCP 9", "correct_text": "Informational", "notes": "At the time 5657 was adopted, there was such a thing as a Draft Standard, a category that was eliminated by RFC 6410.  Hence, when it was published, this was appropriately a BCP.  However, RFC 6410 not only eliminated the Draft Standard status but explicitly says, in Section 3.2, \r\n\r\n\"Although no longer required by the IETF Standards Processes, RFC 5657  [2] can be helpful to conduct interoperability testing.\"\r\n\r\nWhile it is still appropriate to say that it updates RFC 2026, that statement appears to me to make 5657 purely advisory, i.e., an Informational document and it should be considered and reclassified accordingly.", "submit_date": "2024-08-17", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": null, "update_date": "2024-09-17 19:31:18"}, {"errata_id": "8083", "doc-id": "RFC6410", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Updates: 2026", "correct_text": "Updates: 2026, 5657", "notes": "RFC 5657 was addressed to the requirement for an implementation report for specifications progressing to Draft Standard.  RFC  6410 not only eliminates Draft Standards but quite explicitly eliminates the requirement for implementation reports.  It even goes on to say, in Section 3.2, that the advice in RFC 5657 \"can be helpful to conduct interoperability testing\".    In spite of there being no other discussion of 5657 in 6410, that constitutes an update to 5657 that changes its status and the interpretation of every normative statement in it\r\n\r\nCf errata report 8082.", "submit_date": "2024-08-17", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": null, "update_date": "2024-09-17 19:31:44"}, {"errata_id": "8084", "doc-id": "RFC7644", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4.3", "orig_text": "   {\r\n     \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:ListResponse\"],\r\n     \"totalResults\":100,\r\n     \"itemsPerPage\":10,\r\n     \"startIndex\":1,\r\n     \"Resources\":[\r\n       {\r\n         \"id\":\"2819c223-7f76-413861904646\",\r\n         \"userName\":\"jsmith\",\r\n         \"displayName\":\"Smith, James\"\r\n       },\r\n       {\r\n         \"id\":\"c8596b90-7539-4f20968d1908\",\r\n         \"displayName\":\"Smith Family\"\r\n       },\r\n        ...\r\n     ]\r\n   }", "correct_text": "   {\r\n     \"schemas\": [\"urn:ietf:params:scim:api:messages:2.0:ListResponse\"],\r\n     \"totalResults\":100,\r\n     \"itemsPerPage\":10,\r\n     \"startIndex\":1,\r\n     \"Resources\":[\r\n       {\r\n         \"id\":\"2819c223-7f76-413861904646\",\r\n         \"schemas\": [\"urn:ietf:params:scim:schemas:core:2.0:User\"],\r\n         \"userName\":\"jsmith\",\r\n         \"displayName\":\"Smith, James\"\r\n       },\r\n       {\r\n         \"id\":\"c8596b90-7539-4f20968d1908\",\r\n         \"schemas\": [\"urn:ietf:params:scim:schemas:core:2.0:Group\"],\r\n         \"displayName\":\"Smith Family\"\r\n       },\r\n        ...\r\n     ]\r\n   }", "notes": "RFC7643 \u00a73 indicates that the schema attribute is needed for all the representations:\r\n\r\n      The \"schemas\" attribute is a REQUIRED attribute and is an array of\r\n      Strings containing URIs that are used to indicate the namespaces\r\n      of the SCIM schemas that define the attributes present in the\r\n      current JSON structure. [...]\r\n      All representations of SCIM schemas MUST include a\r\n      non-empty array with value(s) of the URIs supported by that\r\n      representation.", "submit_date": "2024-08-19", "submitter_name": "\u00c9loi Rivard", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 22:11:36"}, {"errata_id": "8085", "doc-id": "RFC8878", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1.1.5", "orig_text": "   +=======+==========+===========+===========+===========+============+\r\n   |offset_|literals_ | Repeated_ | Repeated_ | Repeated_ |Comment     |\r\n   | value |  length  |  Offset1  |  Offset2  |  Offset3  |            |\r\n   +=======+==========+===========+===========+===========+============+\r\n   |       |          |     1     |     4     |     8     |starting    |\r\n   |       |          |           |           |           |values      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   1114|    11    |    1111   |     1     |     4     |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    22    |    1111   |     1     |     4     |repeat 1; no|\r\n   |       |          |           |           |           |change      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   2225|    22    |    2222   |    1111   |     1     |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   1114|   111    |    1111   |    2222   |    1111   |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   3336|    33    |    3333   |    1111   |    2222   |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      2|    22    |    1111   |    3333   |    2222   |repeat 2;   |\r\n   |       |          |           |           |           |swap 1 & 2  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      3|    33    |    2222   |    1111   |    3333   |repeat 3;   |\r\n   |       |          |           |           |           |rotate 3 to |\r\n   |       |          |           |           |           |1           |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    0     |    2221   |    2222   |    1111   |insert      |\r\n   |       |          |           |           |           |resolved    |\r\n   |       |          |           |           |           |offset      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    0     |    2222   |    2221   |    3333   |repeat 2    |\r\n   +-------+----------+-----------+-----------+-----------+------------+", "correct_text": "   +=======+==========+===========+===========+===========+============+\r\n   |offset_|literals_ | Repeated_ | Repeated_ | Repeated_ |Comment     |\r\n   | value |  length  |  Offset1  |  Offset2  |  Offset3  |            |\r\n   +=======+==========+===========+===========+===========+============+\r\n   |       |          |     1     |     4     |     8     |starting    |\r\n   |       |          |           |           |           |values      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   1114|    11    |    1111   |     1     |     4     |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    22    |    1111   |     1     |     4     |repeat 1; no|\r\n   |       |          |           |           |           |change      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   2225|    22    |    2222   |    1111   |     1     |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   1114|   111    |    1111   |    2222   |    1111   |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |   3336|    33    |    3333   |    1111   |    2222   |non-repeat  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      2|    22    |    1111   |    3333   |    2222   |repeat 2;   |\r\n   |       |          |           |           |           |swap 1 & 2  |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      3|    33    |    2222   |    1111   |    3333   |repeat 3;   |\r\n   |       |          |           |           |           |rotate 3 to |\r\n   |       |          |           |           |           |1           |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      3|    0     |    2221   |    2222   |    1111   |insert      |\r\n   |       |          |           |           |           |resolved    |\r\n   |       |          |           |           |           |offset      |\r\n   +-------+----------+-----------+-----------+-----------+------------+\r\n   |      1|    0     |    2222   |    2221   |    1111   |repeat 2    |\r\n   +-------+----------+-----------+-----------+-----------+------------+", "notes": "According to the description in 3.1.1.5, an offset value 1 with literal length 0 shall use Repeated Offset 2. However, in the last row of the example table, this is not the case. Since the second-to-last row has no \"3333\" value, I believe that the fifth column in the last row should be \"1111\".", "submit_date": "2024-08-19", "submitter_name": "Nianqi Tang", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8088", "doc-id": "RFC3565", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "-- AES information object identifiers --\r\n\r\naes OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840)\r\n               organization(1) gov(101) csor(3)_ nistAlgorithms(4)  1 }", "correct_text": "-- AES information object identifiers --\r\n\r\naes OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840)\r\n               organization(1) gov(101) csor(3) nistAlgorithms(4)  1 }", "notes": "underscore in aes OID is an ANS.1 syntax error.", "submit_date": "2024-08-23", "submitter_name": "Stefan Grundmann", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-08-23 13:31:05"}, {"errata_id": "8089", "doc-id": "RFC6347", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "   struct {\r\n     HandshakeType msg_type;\r\n     uint24 length;\r\n     uint16 message_seq;                               // New field\r\n     uint24 fragment_offset;                           // New field\r\n     uint24 fragment_length;                           // New field\r\n     select (HandshakeType) {\r\n       case hello_request: HelloRequest;\r\n       case client_hello:  ClientHello;\r\n       case hello_verify_request: HelloVerifyRequest;  // New type\r\n       case server_hello:  ServerHello;\r\n       case certificate:Certificate;\r\n       case server_key_exchange: ServerKeyExchange;\r\n       case certificate_request: CertificateRequest;\r\n       case server_hello_done:ServerHelloDone;\r\n       case certificate_verify:  CertificateVerify;\r\n       case client_key_exchange: ClientKeyExchange;\r\n       case finished: Finished;\r\n     } body;\r\n   } Handshake;", "correct_text": "   struct {\r\n     HandshakeType msg_type;\r\n     uint24 length;\r\n     uint16 message_seq;                               // New field\r\n     uint24 fragment_offset;                           // New field\r\n     uint24 fragment_length;                           // New field\r\n     select (HandshakeType) {\r\n       case hello_request: HelloRequest;\r\n       case client_hello:  ClientHello;\r\n       case server_hello:  ServerHello;\r\n       case hello_verify_request: HelloVerifyRequest;  // New field\r\n       case certificate:Certificate;\r\n       case server_key_exchange: ServerKeyExchange;\r\n       case certificate_request: CertificateRequest;\r\n       case server_hello_done:ServerHelloDone;\r\n       case certificate_verify:  CertificateVerify;\r\n       case client_key_exchange: ClientKeyExchange;\r\n       case finished: Finished;\r\n     } body; } Handshake;", "notes": "Change the order of cases inside select field to keep it:\r\n1. In ascending order\r\n2. Consistent with the structure in 4.3.2", "submit_date": "2024-08-23", "submitter_name": "Kamil Milewski", "verifier_id": "", "verifier_name": null, "update_date": "2024-10-30 22:13:05"}, {"errata_id": "8090", "doc-id": "RFC9276", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "  [ZONEENUM] Wang, Z., Xiao, L., and R. Wang, \"An efficient DNSSEC zone\r\n              enumeration algorithm\", DOI 10.2495/MIIT130591, April\r\n              2014, <https://doi.org/10.2495/MIIT130591>.", "correct_text": "No alternative, the link above does not work (redirects to the \r\nhome page  of a publisher) and I did not find this article \r\nonline.", "notes": "So much for the marketing \"DOI provides stable identifiers\".\n --VERIFIER NOTES-- \n The link was valid at the publication time. Also, no alternative link is provided.", "submit_date": "2024-08-26", "submitter_name": "St\u00e9phane Bortzmeyer", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-27 17:06:19"}, {"errata_id": "8091", "doc-id": "RFC8789", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "The IETF MUST NOT publish RFCs on the IETF Stream without establishing\r\nrough consensus for publication.", "correct_text": "Add: \"This includes reclassifying as a standard or BCP action.\"", "notes": "Does changing something from proposed->internet, or changing something to a BCP\r\ncount as republishing?", "submit_date": "2024-08-27", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8092", "doc-id": "RFC6350", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2", "orig_text": "(none - missing)", "correct_text": "(See notes)", "notes": "This RFC does not provide guidance nor an example of how to specify names for the N and FN Identification Properties when these contain special characters, for example as in my name Gast\u00f3n Mascare\u00f1as.", "submit_date": "2024-09-03", "submitter_name": "Gast\u00f3n Mascare\u00f1as", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8095", "doc-id": "RFC6218", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "            For responses (e.g., CoA-ACK [RFC5176], Accounting-Response\r\n            [RFC2866], etc.), the value of the MAC field is a hash of\r\n            the entire packet except the Response Authenticator in the\r\n            header of the RADIUS packet using a shared secret as the\r\n            key, as follows.\r\n\r\n            MAC = HASH-ALG(Key, Type + Identifier + Length + Attributes)", "correct_text": "            For responses (e.g., CoA-ACK [RFC5176], Accounting-Response\r\n            [RFC2866], etc.), the value of the MAC field is a hash\r\n            calculated using the Request Authenticator from the request\r\n            this packet is in reply to and a shared secret as the key\r\n            as follows.\r\n\r\n            MAC = HASH-ALG(Key, Type + Identifier + Length + Request\r\n               Authenticator + Attributes)", "notes": "Parity with RFC 3579 section 3.2\r\n\r\n      For Access-Challenge, Access-Accept, and Access-Reject packets,\r\n      the Message-Authenticator is calculated as follows, using the\r\n      Request-Authenticator from the Access-Request this packet is in\r\n      reply to:\r\n\r\n      Message-Authenticator = HMAC-MD5 (Type, Identifier, Length,\r\n      Request Authenticator, Attributes)", "submit_date": "2024-09-06", "submitter_name": "Manjiri Gadagkar", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8096", "doc-id": "RFC7644", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.5.2.1", "orig_text": " {\r\n     \"schemas\":\r\n       [\"urn:ietf:params:scim:api:messages:2.0:PatchOp\"],\r\n     \"Operations\":[{\r\n       \"op\":\"add\",\r\n       \"value\":{\r\n         \"emails\":[\r\n           {\r\n             \"value\":\"babs@jensen.org\",\r\n             \"type\":\"home\"\r\n           }\r\n         ],\r\n         \"nickname\":\"Babs\"\r\n     }]\r\n   }\r\n", "correct_text": "{\r\n     \"schemas\":\r\n       [\"urn:ietf:params:scim:api:messages:2.0:PatchOp\"],\r\n     \"Operations\":[{\r\n       \"op\":\"add\",\r\n       \"value\":{\r\n         \"emails\":[\r\n           {\r\n             \"value\":\"babs@jensen.org\",\r\n             \"type\":\"home\"\r\n           }\r\n         ],\r\n         \"nickname\":\"Babs\"\r\n        }\r\n     }]\r\n   }\r\n", "notes": "missing one closing curly bracket", "submit_date": "2024-09-07", "submitter_name": "Siqing Zheng", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 22:10:17"}, {"errata_id": "8097", "doc-id": "RFC7644", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5.2.1", "orig_text": "  o  If the target location does not exist, the attribute and value are\r\n      added.\r\n\r\n   o  If the target location specifies a complex attribute, a set of\r\n      sub-attributes SHALL be specified in the \"value\" parameter.\r\n\r\n   o  If the target location specifies a multi-valued attribute, a new\r\n      value is added to the attribute.", "correct_text": "N/A\r\nPlease see Notes.", "notes": "Looks Microsoft Azure had a different understanding about the patch 'add' operation, in which they add an additional element to the multi-value attribute by the filter in the path. \r\nFor example, \r\n{\r\n...\r\n       \"op\":\"add\",\r\n       \"path\":\"emails[type eq \\\"work\\\"].value\"\r\n       \"value\":\"example@email.com\"\r\n...\r\n  } \r\nMicrosoft Azure expects to add a new email with value \"example@email.com\" and type \"work\". \r\nHowever, I think it's a pretty hacky way to do it and may not be the RFC intent. I also found there was a discussion about it, which they claim the RFC is not very clear about the patch 'add' part. \r\nLink to discussion on Microsoft platform: https://learn.microsoft.com/en-us/answers/questions/708183/scim-patch-of-complex-multi-valued-attribute-inclu#:~:text=are%20relevant%20here%3A-,If%20the%20target%20location%20does%20not%20exist,-%2C%20the%20attribute%20and\r\n\r\nCould we please clarify if such 'add' patch by filter is expected or not? or may be add an extra example? \r\n\r\nThanks!", "submit_date": "2024-09-08", "submitter_name": "Siqing Zheng", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 22:09:23"}, {"errata_id": "8101", "doc-id": "RFC1035", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "QNAME           a domain name represented as a sequence of labels, where\r\n                each label consists of a length octet followed by that\r\n                number of octets.  The domain name terminates with the\r\n                zero length octet for the null label of the root.  Note\r\n                that this field may be an odd number of octets; no\r\n                padding is used.", "correct_text": "QNAME           a domain name represented as a sequence of labels, where\r\n                each label consists of a length octet followed by that\r\n                number of octets.  The domain name terminates with the\r\n                zero length octet for the null label of the root.  Note\r\n                that this field may be an odd number of octets; no\r\n                padding is used.\r\n\r\n                For example:\r\n                - example.com is encoded as \\x07example\\x03com\\x00 (in hex: \r\n                  07 65 78 61 6d 70 6c 65 03 63 6f 6d 00).\r\n                  - \\x07example is the first label:\r\n                    - \\x07 is a single byte that indicates the length of the \r\n                      label (7 characters).\r\n                    - example is the content of the label.\r\n                  - \\x03com is the second label:\r\n                    - \\x03 is a single byte that indicates the length of the \r\n                      label (3 characters).\r\n                    - com is the content of the label.\r\n                  - \\x00 is the null byte that terminates the domain name.\r\n", "notes": "To better understand the QNAME field in DNS queries, it's helpful to know how domain names are encoded. The QNAME field represents domain names as a series of labels, where each label starts with a byte indicating its length, followed by the label's content. The entire domain name ends with a null byte (\\x00). For instance, example.com is encoded as \\x07example\\x03com\\x00, where \\x07 indicates the length of the first label example, \\x03 indicates the length of the second label com, and \\x00 marks the end of the domain name. This encoding format allows DNS servers to correctly interpret and process domain names in queries and responses.\r\n\r\nAdding an example improves the understanding of QNAME field in DNS Question Section\r\n\r\n--- verifier note (Eric Vyncke) ---\r\n\r\nWhile the example would help the reader, it is not fixing an error in the document. ", "submit_date": "2024-09-01", "submitter_name": "Vishal Sharma", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2024-10-03 06:25:39"}, {"errata_id": "8102", "doc-id": "RFC9421", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2.8", "orig_text": "\"@status\": 200\r\n\"content-digest\": \\\r\n  sha-256=:X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE=:\r\n\"@signature-input\": (\"@status\" \"content-digest\")", "correct_text": "\"@status\": 200\r\n\"content-digest\": \\\r\n  sha-256=:X48E9qOokqqrvdts8nOJRJN3OWDUoyWxBf7kbu9DBPE=:\r\n\"@signature-params\": (\"@status\" \"content-digest\")", "notes": "\"@signature-input\" should be changed to \"@signature-params\".", "submit_date": "2024-09-15", "submitter_name": "Takahiko Kawasaki", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-29 14:46:28"}, {"errata_id": "8103", "doc-id": "RFC9421", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.5.3", "orig_text": "Several parts of this specification rely on the parsing of Structured\r\nField values [STRUCTURED-FIELDS] -- in particular, strict\r\nserialization of HTTP Structured Field values (Section 2.1.1),\r\nreferencing members of a Dictionary Structured Field (Section 2.1.2),\r\nand processing the @signature-input value when verifying a signature\r\n(Section 3.2).  While Structured Field values are designed to be\r\nrelatively simple to parse, a naive or broken implementation of such\r\na parser could lead to subtle attack surfaces being exposed in the\r\nimplementation.\r\n\r\nFor example, if a buggy parser of the @signature-input value does not\r\nenforce proper closing of quotes around string values within the list\r\nof component identifiers, an attacker could take advantage of this\r\nand inject additional content into the signature base through\r\nmanipulating the Signature-Input field value on a message.", "correct_text": "Several parts of this specification rely on the parsing of Structured\r\nField values [STRUCTURED-FIELDS] -- in particular, strict\r\nserialization of HTTP Structured Field values (Section 2.1.1),\r\nreferencing members of a Dictionary Structured Field (Section 2.1.2),\r\nand processing the @signature-params value when verifying a signature\r\n(Section 3.2).  While Structured Field values are designed to be\r\nrelatively simple to parse, a naive or broken implementation of such\r\na parser could lead to subtle attack surfaces being exposed in the\r\nimplementation.\r\n\r\nFor example, if a buggy parser of the @signature-params value does not\r\nenforce proper closing of quotes around string values within the list\r\nof component identifiers, an attacker could take advantage of this\r\nand inject additional content into the signature base through\r\nmanipulating the Signature-Input field value on a message.", "notes": "\"@signature-input\" should be changed to \"@signature-params\". There is one such error in both the first and second paragraphs of Section 7.5.3.", "submit_date": "2024-09-15", "submitter_name": "Takahiko Kawasaki", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-29 14:40:21"}, {"errata_id": "8104", "doc-id": "RFC7684", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   Route Type\r\n      The type of the OSPFv2 route.  If the route type is 0\r\n      (Unspecified), the information inside the OSPFv2 External Prefix\r\n      TLV applies to the prefix regardless of prefix's route type.  This\r\n      is useful when prefix-specific attributes are advertised by an\r\n      external entity that is not aware of the route type associated\r\n      with the prefix.  Supported types are:", "correct_text": "   Route Type\r\n      The type of the OSPFv2 route.  If the route type is 0\r\n      (Unspecified), the information inside the OSPFv2 Extended Prefix\r\n      TLV applies to the prefix regardless of prefix's route type.  This\r\n      is useful when prefix-specific attributes are advertised by an\r\n      external entity that is not aware of the route type associated\r\n      with the prefix.  Supported types are:", "notes": "s/External Prefix/Extended Prefix/", "submit_date": "2024-09-16", "submitter_name": "Kris Michielsen", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2024-09-16 14:34:38"}, {"errata_id": "8105", "doc-id": "RFC7542", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4", "orig_text": "Examples of valid Network Access Identifiers include the following:\r\n[...]\r\n        \\(user\\)@example.net", "correct_text": "Examples of invalid Network Access Identifiers include the following:\r\n[...]\r\n        \\(user\\)@example.net", "notes": "\\(user\\)@example.net is listed as a valid example, but neither backslashes nor parentheses are allowed in the ABNF rules (sections 2.1 and 2.2).  Obsoleted RFC 4282 had ABNF rules to allow for backslash escapes, but RFC 7542 does not.  These are the only backslashes in the entire document.\r\n\r\nPerhaps this example should be moved to the invalid examples list?\r\n\r\nOr perhaps the ABNF rules should be extended to allow some forms of backslash escapes, although probably not to the same wide-open extent as RFC 4282?", "submit_date": "2024-09-16", "submitter_name": "Matthew Ogilvie", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-24 12:32:15"}, {"errata_id": "8109", "doc-id": "RFC6350", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "                / iana-token  ; registered as described in section 12", "correct_text": "                / iana-token  ; registered as described in section 10.2", "notes": "I am uncertain of whether this should be a \"technical\" or \"editorial\" report. \r\n\r\nThe currently referenced section 12 is the References section.\r\n\r\nThe reference should instead be to section 10.2 (or maybe 10.2.5).", "submit_date": "2024-09-19", "submitter_name": "Einhard Leichtfu\u00df", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8110", "doc-id": "RFC5841", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "All the simple emotions described as expressible\r\n   via this mechanism can be displayed with two or three 7-bit, ASCII-\r\n   encoded characters.", "correct_text": "All the simple emotions described as expressible \r\n   via this mechanism MAY be displayed with two or three 7-bit, ASCII-\r\n   encoded characters.", "notes": "can to MAY, as to align better with RFC2119", "submit_date": "2024-09-20", "submitter_name": "Dinhero21", "verifier_id": "", "verifier_name": null, "update_date": "2024-09-23 20:47:40"}, {"errata_id": "8864", "doc-id": "RFC9594", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.4.1", "orig_text": "      -  The arrays 'role_filter' and 'id_filter' MUST NOT both be\r\n         empty, i.e., in CDDL notation: [ bool, [ ], [ ] ].  If the\r\n         'get_creds' parameter has such a format, the request MUST be\r\n         considered malformed, and the KDC MUST reply with a 4.00 (Bad\r\n         Request) error response.", "correct_text": "      -  The arrays 'role_filter' and 'id_filter' MUST NOT both be\r\n         empty, i.e., in CBOR diagnostic notation: [ true, [ ], [ ] ]\r\n         or [ false, [ ], [ ] ].  If the 'get_creds' parameter has such\r\n         a format, the request MUST be considered malformed, and the\r\n         KDC MUST reply with a 4.00 (Bad Request) error response.", "notes": "In the original text, the CDDL notation is not valid CDDL, but rather a hybrid of CDDL and CBOR diagnostic notation.\r\n\r\nThe new text uses the intended and valid CBOR diagnostic notation, separately covering the two cases where the first element of the outer array is true or false.", "submit_date": "2026-04-01", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8111", "doc-id": "RFC9328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.3", "orig_text": "The FU header consists of an S bit, an E bit, an R bit, and a 5-bit\r\n   FuType field, as shown in Figure 10.", "correct_text": "The FU header consists of an S bit, an E bit, an P bit, and a 5-bit\r\n   FuType field, as shown in Figure 10.", "notes": "The figure 10 and the explanation to Figure 10 calls it the P bit:\r\n\r\n\r\n                             +---------------+\r\n                             |0|1|2|3|4|5|6|7|\r\n                             +-+-+-+-+-+-+-+-+\r\n                             |S|E|P|  FuType |\r\n                             +---------------+\r\n\r\n                 Figure 10: The Structure of the FU Header\r\n\r\n   The semantics of the FU header fields are as follows:\r\n\r\n   S: 1 bit\r\n      When set to 1, the S bit indicates the start of a fragmented NAL\r\n      unit, i.e., the first byte of the FU payload is also the first\r\n      byte of the payload of the fragmented NAL unit.  When the FU\r\n      payload is not the start of the fragmented NAL unit payload, the S\r\n      bit MUST be set to 0.\r\n\r\n   E: 1 bit\r\n      When set to 1, the E bit indicates the end of a fragmented NAL\r\n      unit, i.e., the last byte of the payload is also the last byte of\r\n      the fragmented NAL unit.  When the FU payload is not the last\r\n      fragment of a fragmented NAL unit, the E bit MUST be set to 0.\r\n\r\n   P: 1 bit\r\n      When set to 1, the P bit indicates the last FU of the last VCL NAL\r\n      unit of a coded picture, i.e., the last byte of the FU payload is\r\n      also the last byte of the last VCL NAL unit of the coded picture.\r\n      When the FU payload is not the last fragment of the last VCL NAL\r\n      unit of a coded picture, the P bit MUST be set to 0.", "submit_date": "2024-09-20", "submitter_name": "Magnus Westerlund", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-09-23 21:13:53"}, {"errata_id": "8112", "doc-id": "RFC8325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.5", "orig_text": "The primary media type typically carried within the Multimedia\r\nStreaming service class is video; as such, it is RECOMMENDED to map\r\nthis class into the Video Access Category (AC_VI), which it will by\r\ndefault (as described in Section 2.3).  Specifically, it is\r\nRECOMMENDED to map AF31, AF32, and AF33 to UP 4, thereby admitting\r\nMultimedia Streaming into the Video Access Category (AC_VI).", "correct_text": "The primary media type typically carried within the Multimedia\r\nStreaming service class is video; as such, it is RECOMMENDED to map\r\nthis class into the Video Access Category (AC_VI);\r\nhowever, by default (as described in Section 2.3), this\r\nservice class will map to UP 3 and, thus, the Best Effort Access\r\nCategory (AC_BE).  Therefore, a non-default mapping is RECOMMENDED,\r\nsuch that AF31, AF32, and AF33 map to UP 4, thereby admitting\r\nMultimedia Streaming into the Video Access Category (AC_VI).", "notes": "This correction addresses an inconsistent mapping in Section 2.3, specifically:\r\n\"Multimedia Streaming (AF3-011xx0) will be mapped to UP 3 (011) and treated in the Best Effort Access Category (AC_BE) rather than the Video Access Category (AC_VI), for which it is intended\".  It does not seek to endorse or change any mappings. ", "submit_date": "2024-09-21", "submitter_name": "Mo Zanaty", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-02-16 13:55:09"}, {"errata_id": "8113", "doc-id": "RFC8325", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.6", "orig_text": "Therefore, a non-default mapping is RECOMMENDED,\r\nsuch that CS4 maps to UP 4, thereby admitting Broadcast Video into\r\nthe Video Access Category (AC_VI).", "correct_text": "Therefore, a non-default mapping is RECOMMENDED,\r\nsuch that CS3 maps to UP 4, thereby admitting Broadcast Video into\r\nthe Video Access Category (AC_VI).", "notes": "Section 2.3 notes \"inconsistent QoS mappings, specifically:\"\r\n\"Broadcast Video (CS3-011000) will be mapped to UP 3 (011)\"\r\nNote CS3 not CS4.", "submit_date": "2024-09-21", "submitter_name": "Mo Zanaty", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-01-20 10:20:20"}, {"errata_id": "8114", "doc-id": "RFC2377", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.6.1", "orig_text": "   ( 1.3.6.1.1.2.1\r\n     NAME domainNameForm\r\n     OC domain\r\n     MUST dc )\r\n", "correct_text": "   ( 1.3.6.1.1.2.1\r\n     NAME 'domainNameForm'\r\n     OC domain\r\n     MUST dc )\r\n", "notes": "The name form's NAME clause contains an unquoted value (domainNameForm), which violates Section 4.1 of RFC 4512 (\"qdescr\").  The subsequent updates via RFC 4519 do not cover this issue, as no name forms were ported from RFC 2377.", "submit_date": "2024-09-23", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:20:25"}, {"errata_id": "8115", "doc-id": "RFC2377", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.6.2", "orig_text": "   ( 1.3.6.1.1.2.2\r\n     NAME dcOrganizationNameForm\r\n     OC organization\r\n     MUST dc )", "correct_text": "   ( 1.3.6.1.1.2.2\r\n     NAME 'dcOrganizationNameForm'\r\n     OC organization\r\n     MUST dc )", "notes": "The name form's NAME clause contains an unquoted value (dcOrganizationNameForm), which violates Section 4.1 of RFC 4512 (\"qdescr\").  The subsequent updates via RFC 4519 do not cover this issue, as no name forms were ported from RFC 2377.", "submit_date": "2024-09-23", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:21:31"}, {"errata_id": "8116", "doc-id": "RFC2377", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.6.3", "orig_text": "   ( 1.3.6.1.1.2.3\r\n     NAME dcOrganizationalUnitNameForm\r\n     OC organizationalUnit\r\n     MUST dc )", "correct_text": "   ( 1.3.6.1.1.2.3\r\n     NAME 'dcOrganizationalUnitNameForm'\r\n     OC organizationalUnit\r\n     MUST dc )", "notes": "The name form's NAME clause contains an unquoted value (dcOrganizationalUnitNameForm), which violates Section 4.1 of RFC 4512 (\"qdescr\"). The subsequent updates via RFC 4519 do not cover this issue, as no name forms were ported from RFC 2377.", "submit_date": "2024-09-23", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:22:46"}, {"errata_id": "8117", "doc-id": "RFC2377", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.6.4", "orig_text": "   ( 1.3.6.1.1.2.4\r\n     NAME dcLocalityNameForm\r\n     OC locality\r\n     MUST dc )", "correct_text": "   ( 1.3.6.1.1.2.4\r\n     NAME 'dcLocalityNameForm'\r\n     OC locality\r\n     MUST dc )", "notes": "The name form's NAME clause contains an unquoted value (dcLocalityNameForm), which violates Section 4.1 of RFC 4512 (\"qdescr\"). The subsequent updates via RFC 4519 do not cover this issue, as no name forms were ported from RFC 2377", "submit_date": "2024-09-23", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:23:22"}, {"errata_id": "8118", "doc-id": "RFC2377", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.2.6.5", "orig_text": "   ( 1.3.6.1.1.2.5\r\n     NAME uidOrganizationalPersonNameForm\r\n     OC organizationalPerson\r\n     MUST uid )", "correct_text": "   ( 1.3.6.1.1.2.5\r\n     NAME 'uidOrganizationalPersonNameForm'\r\n     OC organizationalPerson\r\n     MUST uid )", "notes": "The name form's NAME clause contains an unquoted value (uidOrganizationalPersonNameForm), which violates Section 4.1 of RFC 4512 (\"qdescr\"). The subsequent updates via RFC 4519 do not cover this issue, as no name forms were ported from RFC 2377", "submit_date": "2024-09-23", "submitter_name": "Jesse Coretta", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:23:54"}, {"errata_id": "8120", "doc-id": "RFC2782", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Fictional example", "orig_text": "      ; foobar - use old-slow-box or new-fast-box if either is\r\n      ; available, make three quarters of the logins go to\r\n      ; new-fast-box.\r\n      _foobar._tcp    SRV 0 1 9 old-slow-box.example.com.\r\n                       SRV 0 3 9 new-fast-box.example.com.", "correct_text": "      ; foobar - use old-slow-box or new-fast-box if either is\r\n      ; available, make approximately three quarters of the logins\r\n      ; go to new-fast-box. The actual ratio will be between 3/5\r\n      ; and 4/5 due to how the weighing algorithm is specified.\r\n      _foobar._tcp    SRV 0 1 9 old-slow-box.example.com.\r\n                       SRV 0 3 9 new-fast-box.example.com.", "notes": "The comment in the fictional example does not match the weighing algorithm described in the Weight section. Because the running sum is used to generate a random number from 0 to the sum (inclusive), there are (sum + 1) possibilities of the outcome. In the absence of 0-weight records, the first record receives increased pick-chance. A similar concern was brought up in the (rejected) Errata ID: 2984 for RFC2782, which was for the weight section. This errata is for the example only.\r\n\r\nThe ordering of the records is not specified, for non-zero weight records it is explicitly \"any order\". Thus, for weights 3 and 1, a conforming implementation may:\r\n1) always sort the 1-weight record first, and obtain 2/5 and 3/5 probabilities for 1 and 3 respectively\r\n2) always sort the 3-weight record first, and obtain 1/5 and 4/5 probabilities for 1 and 3 respectively\r\n3) have an random sorting method, obtaining probabilities anywhere between the two above. If a fair random shuffle is used, the probabilities will be 3/10 and 7/10 (the average of 1 and 2 above).\r\n\r\nIt is unlikely for the distribution of results for weights 1 and 3 to be 1/4 and 3/4. This quirk of the algorithm is not obvious, and the example could do better at indicating the factual state. As it is, it is misleading. It is significant in that it may lead someone to believe an implementation is incorrect (not achieving the expected 1/4-3/4 split) when it is implementing the weights algorithm exactly as in the Weights section.", "submit_date": "2024-09-25", "submitter_name": "Tomasz \u015aniatowski", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 07:57:36"}, {"errata_id": "8121", "doc-id": "RFC6908", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.2", "orig_text": "Operators should assign the same IPv4\r\n   address (e.g., 192.0.0.2/32 [RFC6333]) to all AFTRs.  \r\n", "correct_text": "Operators should assign the same IPv4 \r\n   address (e.g., 192.0.0.1/32 [RFC6333]) to all AFTRs.", "notes": "In RFC6333 6.5:\r\n\r\n    The AFTR SHOULD use the well-known IPv4 address 192.0.0.1 reserved by\r\n    IANA to configure the IPv4-in-IPv6 tunnel.\r\n\r\nIn RFC6333 5.7:\r\n\r\n    ..., and 192.0.0.2 is reserved for the B4 element.\r\n\r\nI think this is Editorial because the IP address here is just an example.", "submit_date": "2024-09-27", "submitter_name": "Tomoyuki Sahara", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-05-25 21:53:59"}, {"errata_id": "8126", "doc-id": "RFC9293", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.1", "orig_text": "the sequence space labeled 3 in Figure 3", "correct_text": "the sequence space labeled 2 and 3 in Figure 3", "notes": "In Figure 3, the send window shoud be 2(sequence numbers of unacknowledged data) and 3(sequence numbers allowed for new data transmission).", "submit_date": "2024-10-01", "submitter_name": "zhihua.li", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 08:36:20"}, {"errata_id": "8131", "doc-id": "RFC9656", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1", "orig_text": "   {\r\n     \"ietf-network:networks\": {\r\n       \"network\": [\r\n         {\r\n           \"network-id\": \"L2-network\",\r\n           \"network-types\": {\r\n             \"ietf-te-topology:te-topology\": {}\r\n           },\r\n           \"supporting-network\": [\r\n             {\r\n               \"network-ref\": \"mw-network\"\r\n             }\r\n           ],\r\n           \"node\": [\r\n             {\r\n               \"node-id\": \"L2-N1\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"node-ref\": \"mw-N1\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"L2-N1-TP1\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N1\",\r\n                       \"tp-ref\": \"mw-N1-RLTP1\"\r\n                     }\r\n                   ]\r\n                 }\r\n               ]\r\n             },\r\n             {\r\n               \"node-id\": \"L2-N2\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"node-ref\": \"mw-N2\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"L2-N2-TP2\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N2\",\r\n                       \"tp-ref\": \"mw-N2-RLTP2\"\r\n                     }\r\n                   ]\r\n                 }\r\n               ]\r\n             }\r\n           ],\r\n           \"ietf-network-topology:link\": [\r\n             {\r\n               \"link-id\": \"L2-N1-N2\",\r\n               \"source\": {\r\n                 \"source-node\": \"L2-N1\",\r\n                 \"source-tp\": \"L2-N1-TP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"L2-N2\",\r\n                 \"dest-tp\": \"L2-N2-TP2\"\r\n               },\r\n               \"supporting-link\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"link-ref\": \"mwrl-N1-N2\"\r\n                 }\r\n               ]\r\n             }\r\n           ]\r\n         },\r\n         {\r\n           \"network-id\": \"mw-network\",\r\n           \"network-types\": {\r\n             \"ietf-te-topology:te-topology\": {\r\n               \"ietf-microwave-topology:mw-topology\": {}\r\n             }\r\n           },\r\n           \"supporting-network\": [\r\n             {\r\n               \"network-ref\": \"mw-network\"\r\n             }\r\n           ],\r\n           \"node\": [\r\n             {\r\n               \"node-id\": \"mw-N1\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"node-ref\": \"mw-N1\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"mw-N1-RLTP1\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N1\",\r\n                       \"tp-ref\": \"mw-N1-CTP1\"\r\n                     },\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N1\",\r\n                       \"tp-ref\": \"mw-N1-CTP3\"\r\n                     }\r\n                   ],\r\n                   \"ietf-te-topology:te-tp-id\": \"192.0.2.3\",\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-rltp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"mw-N1-CTP1\",\r\n                   \"ietf-te-topology:te-tp-id\": 1,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"mw-N1-CTP3\",\r\n                   \"ietf-te-topology:te-tp-id\": 2,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 }\r\n               ]\r\n             },\r\n             {\r\n               \"node-id\": \"mw-N2\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"node-ref\": \"mw-N2\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"mw-N2-RLTP2\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N2\",\r\n                       \"tp-ref\": \"mw-N2-CTP2\"\r\n                     },\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N2\",\r\n                       \"tp-ref\": \"mw-N2-CTP4\"\r\n                     }\r\n                   ],\r\n                   \"ietf-te-topology:te-tp-id\": \"192.0.2.4\",\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-rltp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"mw-N2-CTP2\",\r\n                   \"ietf-te-topology:te-tp-id\": 1,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"mw-N2-CTP4\",\r\n                   \"ietf-te-topology:te-tp-id\": 2,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 }\r\n               ]\r\n             }\r\n           ],\r\n           \"ietf-network-topology:link\": [\r\n             {\r\n               \"link-id\": \"mwrl-N1-N2\",\r\n               \"source\": {\r\n                 \"source-node\": \"mw-N1\",\r\n                 \"source-tp\": \"mw-N1-RLTP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"mw-N2\",\r\n                 \"dest-tp\": \"mw-N2-RLTP2\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"bundled-links\": {\r\n                   \"bundled-link\": [\r\n                     {\r\n                       \"sequence\": 1,\r\n                       \"src-tp-ref\": \"mw-N1-CTP1\",\r\n                       \"des-tp-ref\": \"mw-N2-CTP2\"\r\n                     },\r\n                     {\r\n                       \"sequence\": 2,\r\n                       \"src-tp-ref\": \"mw-N1-CTP3\",\r\n                       \"des-tp-ref\": \"mw-N2-CTP4\"\r\n                     }\r\n                   ]\r\n                 },\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-radio-link\": {\r\n                       \"rlt-mode\": {\r\n                         \"num-bonded-carriers\": 2,\r\n                         \"num-protecting-carriers\": 0\r\n                       }\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             },\r\n             {\r\n               \"link-id\": \"mwc-N1-N2-A\",\r\n               \"source\": {\r\n                 \"source-node\": \"mw-N1\",\r\n                 \"source-tp\": \"mw-N1-CTP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"mw-N2\",\r\n                 \"dest-tp\": \"mw-N2-CTP2\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-carrier\": {\r\n                       \"tx-frequency\": 10728000,\r\n                       \"channel-separation\": 28000\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             },\r\n             {\r\n               \"link-id\": \"mwc-N1-N2-B\",\r\n               \"source\": {\r\n                 \"source-node\": \"mw-N1\",\r\n                 \"source-tp\": \"mw-N1-CTP3\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"mw-N2\",\r\n                 \"dest-tp\": \"mw-N2-CTP4\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-carrier\": {\r\n                       \"tx-frequency\": 10528000,\r\n                       \"channel-separation\": 28000\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             }\r\n           ]\r\n         }\r\n       ]\r\n     }\r\n   }", "correct_text": "   {\r\n     \"ietf-network:networks\": {\r\n       \"network\": [\r\n         {\r\n           \"network-id\": \"example:L2-network\",\r\n           \"network-types\": {\r\n             \"ietf-te-topology:te-topology\": {}\r\n           },\r\n           \"supporting-network\": [\r\n             {\r\n               \"network-ref\": \"example:mw-network\"\r\n             }\r\n           ],\r\n           \"node\": [\r\n             {\r\n               \"node-id\": \"example:L2-N1\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"node-ref\": \"example:mw-N1\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"example:L2-N1-TP1\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N1\",\r\n                       \"tp-ref\": \"example:mw-N1-RLTP1\"\r\n                     }\r\n                   ]\r\n                 }\r\n               ]\r\n             },\r\n             {\r\n               \"node-id\": \"example:L2-N2\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"node-ref\": \"example:mw-N2\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"example:L2-N2-TP2\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N2\",\r\n                       \"tp-ref\": \"example:mw-N2-RLTP2\"\r\n                     }\r\n                   ]\r\n                 }\r\n               ]\r\n             }\r\n           ],\r\n           \"ietf-network-topology:link\": [\r\n             {\r\n               \"link-id\": \"example:L2-N1-N2\",\r\n               \"source\": {\r\n                 \"source-node\": \"example:L2-N1\",\r\n                 \"source-tp\": \"example:L2-N1-TP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"example:L2-N2\",\r\n                 \"dest-tp\": \"example:L2-N2-TP2\"\r\n               },\r\n               \"supporting-link\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"link-ref\": \"example:mwrl-N1-N2\"\r\n                 }\r\n               ]\r\n             }\r\n           ]\r\n         },\r\n         {\r\n           \"network-id\": \"example:mw-network\",\r\n           \"network-types\": {\r\n             \"ietf-te-topology:te-topology\": {\r\n               \"ietf-microwave-topology:mw-topology\": {}\r\n             }\r\n           },\r\n           \"supporting-network\": [\r\n             {\r\n               \"network-ref\": \"example:mw-network\"\r\n             }\r\n           ],\r\n           \"node\": [\r\n             {\r\n               \"node-id\": \"example:mw-N1\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"node-ref\": \"example:mw-N1\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"example:mw-N1-RLTP1\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N1\",\r\n                       \"tp-ref\": \"example:mw-N1-CTP1\"\r\n                     },\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N1\",\r\n                       \"tp-ref\": \"example:mw-N1-CTP3\"\r\n                     }\r\n                   ],\r\n                   \"ietf-te-topology:te-tp-id\": \"192.0.2.3\",\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-rltp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"example:mw-N1-CTP1\",\r\n                   \"ietf-te-topology:te-tp-id\": 1,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"example:mw-N1-CTP3\",\r\n                   \"ietf-te-topology:te-tp-id\": 2,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 }\r\n               ]\r\n             },\r\n             {\r\n               \"node-id\": \"example:mw-N2\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"node-ref\": \"example:mw-N2\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"example:mw-N2-RLTP2\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N2\",\r\n                       \"tp-ref\": \"example:mw-N2-CTP2\"\r\n                     },\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N2\",\r\n                       \"tp-ref\": \"example:mw-N2-CTP4\"\r\n                     }\r\n                   ],\r\n                   \"ietf-te-topology:te-tp-id\": \"192.0.2.4\",\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-rltp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"example:mw-N2-CTP2\",\r\n                   \"ietf-te-topology:te-tp-id\": 1,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"example:mw-N2-CTP4\",\r\n                   \"ietf-te-topology:te-tp-id\": 2,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 }\r\n               ]\r\n             }\r\n           ],\r\n           \"ietf-network-topology:link\": [\r\n             {\r\n               \"link-id\": \"example:mwrl-N1-N2\",\r\n               \"source\": {\r\n                 \"source-node\": \"example:mw-N1\",\r\n                 \"source-tp\": \"example:mw-N1-RLTP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"example:mw-N2\",\r\n                 \"dest-tp\": \"example:mw-N2-RLTP2\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"bundled-links\": {\r\n                   \"bundled-link\": [\r\n                     {\r\n                       \"sequence\": 1,\r\n                       \"src-tp-ref\": \"example:mw-N1-CTP1\",\r\n                       \"des-tp-ref\": \"example:mw-N2-CTP2\"\r\n                     },\r\n                     {\r\n                       \"sequence\": 2,\r\n                       \"src-tp-ref\": \"example:mw-N1-CTP3\",\r\n                       \"des-tp-ref\": \"example:mw-N2-CTP4\"\r\n                     }\r\n                   ]\r\n                 },\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-radio-link\": {\r\n                       \"rlt-mode\": {\r\n                         \"num-bonded-carriers\": 2,\r\n                         \"num-protecting-carriers\": 0\r\n                       }\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             },\r\n             {\r\n               \"link-id\": \"example:mwc-N1-N2-A\",\r\n               \"source\": {\r\n                 \"source-node\": \"example:mw-N1\",\r\n                 \"source-tp\": \"example:mw-N1-CTP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"example:mw-N2\",\r\n                 \"dest-tp\": \"example:mw-N2-CTP2\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-carrier\": {\r\n                       \"tx-frequency\": 10728000,\r\n                       \"channel-separation\": 28000\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             },\r\n             {\r\n               \"link-id\": \"example:mwc-N1-N2-B\",\r\n               \"source\": {\r\n                 \"source-node\": \"example:mw-N1\",\r\n                 \"source-tp\": \"example:mw-N1-CTP3\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"example:mw-N2\",\r\n                 \"dest-tp\": \"example:mw-N2-CTP4\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-carrier\": {\r\n                       \"tx-frequency\": 10528000,\r\n                       \"channel-separation\": 28000\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             }\r\n           ]\r\n         }\r\n       ]\r\n     }\r\n   }", "notes": "Fixed URI names to follow RFC8407bis guidelines.\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/ccamp/OQ-oLx2smsmdC4dcn6aB9i-hWE8/", "submit_date": "2024-10-08", "submitter_name": "Scott Mansfield", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-10-09 14:58:16"}, {"errata_id": "8865", "doc-id": "RFC9953", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "8.2. DNS SVBC Service Parameter Keys (SvcParamKeys) Registry", "correct_text": "8.2. DNS SVCB Service Parameter Keys (SvcParamKeys) Registry", "notes": "There is a typo in the heading of section 8.2: \"SVCB\" is mistakenly written as \"SVBC\".\r\nThis refers to the Service Parameter Keys of DNS Service Binding, so the correct term is \"SVCB\".", "submit_date": "2026-04-01", "submitter_name": "Taketo Takashima", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-04-15 19:22:55"}, {"errata_id": "8866", "doc-id": "RFC3952", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "The way to determine the number of iLBC frames is to count the total number of octets within the RTP packet, and divide the octet count by the number of expected octets per frame (32/50 per frame).", "correct_text": "The way to determine the number of iLBC frames is to count the total number of octets within the RTP packet, and divide the octet count by the number of expected octets per frame (38/50 per frame).", "notes": "Sections 2 and 3.1 both note that the octets per frame for the 20 ms frame length is 38, but section 3.2 incorrectly states 32. https://webrtc.github.io/webrtc-org/license/ilbc-freeware/ supports 38 being the correct packetized size for the 20 ms frame length.", "submit_date": "2026-04-03", "submitter_name": "John Thacker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8867", "doc-id": "RFC1928", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "The BIND request is used in protocols which require the client to accept connections from the server.", "correct_text": "The BIND request is used for protocols that require the client to accept connections from the server.", "notes": "\"in\" is incorrect here because it implies that protocols such as FTP (that require the client to accept connections from the server) themselves have BIND requests, which is not true; rather, BIND requests to SOCKS servers are used _for_ such protocols. Also, \"that\" is better than \"which\" in this context, because it's used in a restrictive manner.", "submit_date": "2026-04-03", "submitter_name": "David Tyas", "verifier_id": "", "verifier_name": null, "update_date": "2026-04-15 19:29:03"}, {"errata_id": "8868", "doc-id": "RFC2251", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.5.2", "orig_text": "-- may also have zero elements (if types only was requested, or\r\n-- all values were excluded from the result.)", "correct_text": "-- may also have zero elements (if typesOnly was requested, or\r\n-- all values were excluded from the result.)", "notes": "The phrase \"types only\" appears to refer to the typesOnly field defined in Section 4.5.1. Using the field name directly improves clarity and avoids ambiguity.", "submit_date": "2026-04-06", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 15:14:48"}, {"errata_id": "8128", "doc-id": "RFC9656", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.1.", "orig_text": "           \"network-id\": \"L2-network\",", "correct_text": "           \"network-id\": \"example:L2-network\",", "notes": "(1) The use of strings here is not consistent with RFC8345 which says the following\r\n\r\n* \"The current data model defines identifiers of nodes, networks, links,\r\n   and termination points as URIs.  Alternatively, they could have been\r\n   defined as strings.\r\n\r\n   The case for strings is that they will be easier to implement.  The\r\n   reason for choosing URIs is that the topology / node / termination\r\n   point exists in a larger context; hence, it is useful to be able to\r\n   correlate identifiers across systems.  Although strings -- being the\r\n   universal data type -- are easier for human beings, they also muddle\r\n   things.  What typically happens is that strings have some structure\r\n   that is magically assigned, and the knowledge of this structure has\r\n   to be communicated to each system working with the data.  A URI makes\r\n   the structure explicit and also attaches additional semantics: the\r\n   URI, unlike a free-form string, can be fed into a URI resolver, which\r\n   can point to additional resources associated with the URI.  This\r\n   property is important when the topology data is integrated into a\r\n   larger and more complex system.\"\r\n\r\nand \r\n\r\n     typedef network-id {\r\n       type inet:uri;\r\n       description\r\n         \"Identifier for a network.  The precise structure of the\r\n          network-id will be up to the implementation.  The identifier\r\n          SHOULD be chosen such that the same network will always be\r\n          identified through the same identifier, even if the data model\r\n          is instantiated in separate datastores.  An implementation MAY\r\n          choose to capture semantics in the identifier -- for example,\r\n          to indicate the type of network.\";\r\n     }\r\n\r\n(2) Overall, almost all the examples that include the following should be fixed: \r\n\r\n* nw:node-id\r\n* nw:network-id\r\n* nt:link-id\r\n* nt:tp-id\r\n* tet:node-ref\n --VERIFIER NOTES-- \nThe issue identified is correct, but following discussion of this erratum (see https://mailarchive.ietf.org/arch/msg/ccamp/OQ-oLx2smsmdC4dcn6aB9i-hWE8/), four other errata reports were opened instead, one per affected subsection. Errata 8131-8134 have been verified and address the issue identified here.", "submit_date": "2024-10-01", "submitter_name": "Mohamed BOUCADAIR", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-10-09 15:02:30"}, {"errata_id": "8129", "doc-id": "RFC8179", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "m. \"Reasonably and personally known\": something an individual knows", "correct_text": "n. \"Reasonably and personally known\": something an individual knows", "notes": "The list has items a through m, then m repeats, then skips directly to the final item, o. From context it\u2019s clear the quoted item should have been n, continuing the sequence in the usual way.", "submit_date": "2024-10-02", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-10-07 18:58:03"}, {"errata_id": "8130", "doc-id": "RFC9519", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "Registration requests sent to the mailing list for review", "correct_text": "Registration requests send to IANA for review", "notes": "Section 3 describes a workflow that is not typical of most/all other registries. Applicants should mail IANA, or use their Web form, and they will inform the experts, enforce the SLA, etc.\r\n\r\nSee RFC 8126/BCP 26 for more information.\r\n\r\nPaul Wouters (SEC AD): note: technically, this is not an errata but a process change (and should be rejected as such). And there are more process changes needed for this RFC. Since this will be looked at by the WG in a bis document, I moved it to HFDU as a reminder.", "submit_date": "2024-10-03", "submitter_name": "Rich Salz", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-07 19:05:55"}, {"errata_id": "8132", "doc-id": "RFC9656", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2", "orig_text": "   {\r\n     \"ietf-network:networks\": {\r\n       \"network\": [\r\n         {\r\n           \"network-id\": \"L2-network\",\r\n           \"network-types\": {\r\n             \"ietf-te-topology:te-topology\": {}\r\n           },\r\n           \"supporting-network\": [\r\n             {\r\n               \"network-ref\": \"mw-network\"\r\n             }\r\n           ],\r\n           \"node\": [\r\n             {\r\n               \"node-id\": \"L2-N1\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"node-ref\": \"mw-N1\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"L2-N1-TP1\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N1\",\r\n                       \"tp-ref\": \"mw-N1-RLTP1\"\r\n                     }\r\n                   ]\r\n                 }\r\n               ]\r\n             },\r\n             {\r\n               \"node-id\": \"L2-N2\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"node-ref\": \"mw-N2\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"L2-N2-TP2\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N2\",\r\n                       \"tp-ref\": \"mw-N2-RLTP2\"\r\n                     }\r\n                   ]\r\n                 }\r\n               ]\r\n             }\r\n           ],\r\n           \"ietf-network-topology:link\": [\r\n             {\r\n               \"link-id\": \"L2-N1-N2\",\r\n               \"source\": {\r\n                 \"source-node\": \"L2-N1\",\r\n                 \"source-tp\": \"L2-N1-TP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"L2-N2\",\r\n                 \"dest-tp\": \"L2-N2-TP2\"\r\n               },\r\n               \"supporting-link\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"link-ref\": \"mwrl-N1-N2\"\r\n                 }\r\n               ]\r\n             }\r\n           ]\r\n         },\r\n         {\r\n           \"network-id\": \"mw-network\",\r\n           \"network-types\": {\r\n             \"ietf-te-topology:te-topology\": {\r\n               \"ietf-microwave-topology:mw-topology\": {}\r\n             }\r\n           },\r\n           \"supporting-network\": [\r\n             {\r\n               \"network-ref\": \"mw-network\"\r\n             }\r\n           ],\r\n           \"node\": [\r\n             {\r\n               \"node-id\": \"mw-N1\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"node-ref\": \"mw-N1\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"mw-N1-RLTP1\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N1\",\r\n                       \"tp-ref\": \"mw-N1-CTP1\"\r\n                     },\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N1\",\r\n                       \"tp-ref\": \"mw-N1-CTP3\"\r\n                     }\r\n                   ],\r\n                   \"ietf-te-topology:te-tp-id\": \"192.0.2.3\",\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-rltp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"mw-N1-CTP1\",\r\n                   \"ietf-te-topology:te-tp-id\": 1,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"mw-N1-CTP3\",\r\n                   \"ietf-te-topology:te-tp-id\": 2,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 }\r\n               ]\r\n             },\r\n             {\r\n               \"node-id\": \"mw-N2\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"mw-network\",\r\n                   \"node-ref\": \"mw-N2\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"mw-N2-RLTP2\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N2\",\r\n                       \"tp-ref\": \"mw-N2-CTP2\"\r\n                     },\r\n                     {\r\n                       \"network-ref\": \"mw-network\",\r\n                       \"node-ref\": \"mw-N2\",\r\n                       \"tp-ref\": \"mw-N2-CTP4\"\r\n                     }\r\n                   ],\r\n                   \"ietf-te-topology:te-tp-id\": \"192.0.2.4\",\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-rltp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"mw-N2-CTP2\",\r\n                   \"ietf-te-topology:te-tp-id\": 1,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"mw-N2-CTP4\",\r\n                   \"ietf-te-topology:te-tp-id\": 2,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 }\r\n               ]\r\n             }\r\n           ],\r\n           \"ietf-network-topology:link\": [\r\n             {\r\n               \"link-id\": \"mwrl-N1-N2\",\r\n               \"source\": {\r\n                 \"source-node\": \"mw-N1\",\r\n                 \"source-tp\": \"mw-N1-RLTP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"mw-N2\",\r\n                 \"dest-tp\": \"mw-N2-RLTP2\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"bundled-links\": {\r\n                   \"bundled-link\": [\r\n                     {\r\n                       \"sequence\": 1,\r\n                       \"src-tp-ref\": \"mw-N1-CTP1\",\r\n                       \"des-tp-ref\": \"mw-N2-CTP2\"\r\n                     },\r\n                     {\r\n                       \"sequence\": 2,\r\n                       \"src-tp-ref\": \"mw-N1-CTP3\",\r\n                       \"des-tp-ref\": \"mw-N2-CTP4\"\r\n                     }\r\n                   ]\r\n                 },\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-radio-link\": {\r\n                       \"rlt-mode\": {\r\n                         \"num-bonded-carriers\": 1,\r\n                         \"num-protecting-carriers\": 1\r\n                       }\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             },\r\n             {\r\n               \"link-id\": \"mwc-N1-N2-A\",\r\n               \"source\": {\r\n                 \"source-node\": \"mw-N1\",\r\n                 \"source-tp\": \"mw-N1-CTP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"mw-N2\",\r\n                 \"dest-tp\": \"mw-N2-CTP2\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-carrier\": {\r\n                       \"tx-frequency\": 10728000,\r\n                       \"channel-separation\": 28000\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             },\r\n             {\r\n               \"link-id\": \"mwc-N1-N2-B\",\r\n               \"source\": {\r\n                 \"source-node\": \"mw-N1\",\r\n                 \"source-tp\": \"mw-N1-CTP3\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"mw-N2\",\r\n                 \"dest-tp\": \"mw-N2-CTP4\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-carrier\": {\r\n                       \"tx-frequency\": 10728000,\r\n                       \"channel-separation\": 28000\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             }\r\n           ]\r\n         }\r\n       ]\r\n     }\r\n   }", "correct_text": "   {\r\n     \"ietf-network:networks\": {\r\n       \"network\": [\r\n         {\r\n           \"network-id\": \"example:L2-network\",\r\n           \"network-types\": {\r\n             \"ietf-te-topology:te-topology\": {}\r\n           },\r\n           \"supporting-network\": [\r\n             {\r\n               \"network-ref\": \"example:mw-network\"\r\n             }\r\n           ],\r\n           \"node\": [\r\n             {\r\n               \"node-id\": \"example:L2-N1\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"node-ref\": \"example:mw-N1\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"example:L2-N1-TP1\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N1\",\r\n                       \"tp-ref\": \"example:mw-N1-RLTP1\"\r\n                     }\r\n                   ]\r\n                 }\r\n               ]\r\n             },\r\n             {\r\n               \"node-id\": \"example:L2-N2\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"node-ref\": \"example:mw-N2\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"example:L2-N2-TP2\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N2\",\r\n                       \"tp-ref\": \"example:mw-N2-RLTP2\"\r\n                     }\r\n                   ]\r\n                 }\r\n               ]\r\n             }\r\n           ],\r\n           \"ietf-network-topology:link\": [\r\n             {\r\n               \"link-id\": \"example:L2-N1-N2\",\r\n               \"source\": {\r\n                 \"source-node\": \"example:L2-N1\",\r\n                 \"source-tp\": \"example:L2-N1-TP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"example:L2-N2\",\r\n                 \"dest-tp\": \"example:L2-N2-TP2\"\r\n               },\r\n               \"supporting-link\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"link-ref\": \"example:mwrl-N1-N2\"\r\n                 }\r\n               ]\r\n             }\r\n           ]\r\n         },\r\n         {\r\n           \"network-id\": \"example:mw-network\",\r\n           \"network-types\": {\r\n             \"ietf-te-topology:te-topology\": {\r\n               \"ietf-microwave-topology:mw-topology\": {}\r\n             }\r\n           },\r\n           \"supporting-network\": [\r\n             {\r\n               \"network-ref\": \"example:mw-network\"\r\n             }\r\n           ],\r\n           \"node\": [\r\n             {\r\n               \"node-id\": \"example:mw-N1\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"node-ref\": \"example:mw-N1\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"example:mw-N1-RLTP1\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N1\",\r\n                       \"tp-ref\": \"example:mw-N1-CTP1\"\r\n                     },\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N1\",\r\n                       \"tp-ref\": \"example:mw-N1-CTP3\"\r\n                     }\r\n                   ],\r\n                   \"ietf-te-topology:te-tp-id\": \"192.0.2.3\",\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-rltp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"example:mw-N1-CTP1\",\r\n                   \"ietf-te-topology:te-tp-id\": 1,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"example:mw-N1-CTP3\",\r\n                   \"ietf-te-topology:te-tp-id\": 2,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 }\r\n               ]\r\n             },\r\n             {\r\n               \"node-id\": \"example:mw-N2\",\r\n               \"supporting-node\": [\r\n                 {\r\n                   \"network-ref\": \"example:mw-network\",\r\n                   \"node-ref\": \"example:mw-N2\"\r\n                 }\r\n               ],\r\n               \"ietf-network-topology:termination-point\": [\r\n                 {\r\n                   \"tp-id\": \"example:mw-N2-RLTP2\",\r\n                   \"supporting-termination-point\": [\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N2\",\r\n                       \"tp-ref\": \"example:mw-N2-CTP2\"\r\n                     },\r\n                     {\r\n                       \"network-ref\": \"example:mw-network\",\r\n                       \"node-ref\": \"example:mw-N2\",\r\n                       \"tp-ref\": \"example:mw-N2-CTP4\"\r\n                     }\r\n                   ],\r\n                   \"ietf-te-topology:te-tp-id\": \"192.0.2.4\",\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-rltp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"example:mw-N2-CTP2\",\r\n                   \"ietf-te-topology:te-tp-id\": 1,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 },\r\n                 {\r\n                   \"tp-id\": \"example:mw-N2-CTP4\",\r\n                   \"ietf-te-topology:te-tp-id\": 2,\r\n                   \"ietf-te-topology:te\": {\r\n                     \"ietf-microwave-topology:mw-tp\": {\r\n                       \"microwave-ctp\": {}\r\n                     }\r\n                   }\r\n                 }\r\n               ]\r\n             }\r\n           ],\r\n           \"ietf-network-topology:link\": [\r\n             {\r\n               \"link-id\": \"example:mwrl-N1-N2\",\r\n               \"source\": {\r\n                 \"source-node\": \"example:mw-N1\",\r\n                 \"source-tp\": \"example:mw-N1-RLTP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"example:mw-N2\",\r\n                 \"dest-tp\": \"example:mw-N2-RLTP2\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"bundled-links\": {\r\n                   \"bundled-link\": [\r\n                     {\r\n                       \"sequence\": 1,\r\n                       \"src-tp-ref\": \"example:mw-N1-CTP1\",\r\n                       \"des-tp-ref\": \"example:mw-N2-CTP2\"\r\n                     },\r\n                     {\r\n                       \"sequence\": 2,\r\n                       \"src-tp-ref\": \"example:mw-N1-CTP3\",\r\n                       \"des-tp-ref\": \"example:mw-N2-CTP4\"\r\n                     }\r\n                   ]\r\n                 },\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-radio-link\": {\r\n                       \"rlt-mode\": {\r\n                         \"num-bonded-carriers\": 1,\r\n                         \"num-protecting-carriers\": 1\r\n                       }\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             },\r\n             {\r\n               \"link-id\": \"example:mwc-N1-N2-A\",\r\n               \"source\": {\r\n                 \"source-node\": \"example:mw-N1\",\r\n                 \"source-tp\": \"example:mw-N1-CTP1\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"example:mw-N2\",\r\n                 \"dest-tp\": \"example:mw-N2-CTP2\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-carrier\": {\r\n                       \"tx-frequency\": 10728000,\r\n                       \"channel-separation\": 28000\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             },\r\n             {\r\n               \"link-id\": \"example:mwc-N1-N2-B\",\r\n               \"source\": {\r\n                 \"source-node\": \"example:mw-N1\",\r\n                 \"source-tp\": \"example:mw-N1-CTP3\"\r\n               },\r\n               \"destination\": {\r\n                 \"dest-node\": \"example:mw-N2\",\r\n                 \"dest-tp\": \"example:mw-N2-CTP4\"\r\n               },\r\n               \"ietf-te-topology:te\": {\r\n                 \"te-link-attributes\": {\r\n                   \"ietf-microwave-topology:mw-link\": {\r\n                     \"microwave-carrier\": {\r\n                       \"tx-frequency\": 10728000,\r\n                       \"channel-separation\": 28000\r\n                     }\r\n                   }\r\n                 }\r\n               }\r\n             }\r\n           ]\r\n         }\r\n       ]\r\n     }\r\n   }", "notes": "Fixed URI names to follow RFC8407bis guidelines.\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/ccamp/OQ-oLx2smsmdC4dcn6aB9i-hWE8/", "submit_date": "2024-10-08", "submitter_name": "Scott Mansfield", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-10-09 14:58:56"}, {"errata_id": "8133", "doc-id": "RFC9656", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.1", "orig_text": "   {\r\n    \"ietf-interfaces:interfaces\": {\r\n     \"interface\": [\r\n      {\r\n       \"name\": \"L2Interface1\",\r\n       \"description\": \"'Ethernet Interface 1'\",\r\n       \"type\": \"iana-if-type:ethernetCsmacd\"\r\n      },\r\n      {\r\n       \"name\": \"L2Interface2\",\r\n       \"description\": \"'Ethernet Interface 2'\",\r\n       \"type\": \"iana-if-type:ethernetCsmacd\"\r\n      },\r\n      {\r\n       \"name\": \"RLT-1\",\r\n       \"description\": \"'Radio Link Terminal 1'\",\r\n       \"type\": \"iana-if-type:microwaveRadioLinkTerminal\",\r\n       \"ietf-microwave-radio-link:mode\":\r\n         \"ietf-microwave-types:two-plus-zero\",\r\n       \"ietf-microwave-radio-link:carrier-terminations\": [\r\n        \"CT-1\",\r\n        \"CT-3\"\r\n       ]\r\n      },\r\n      {\r\n       \"name\": \"RLT-2\",\r\n       \"description\": \"'Radio Link Terminal 2'\",\r\n       \"type\": \"iana-if-type:microwaveRadioLinkTerminal\",\r\n       \"ietf-microwave-radio-link:mode\":\r\n          \"ietf-microwave-types:two-plus-zero\",\r\n       \"ietf-microwave-radio-link:carrier-terminations\": [\r\n        \"CT-2\",\r\n        \"CT-4\"\r\n       ]\r\n      },\r\n      {\r\n       \"name\": \"CT-1\",\r\n       \"description\": \"'Carrier Termination 1'\",\r\n       \"type\": \"iana-if-type:microwaveCarrierTermination\",\r\n       \"ietf-microwave-radio-link:tx-frequency\": 10728000,\r\n       \"ietf-microwave-radio-link:duplex-distance\": 113000,\r\n       \"ietf-microwave-radio-link:channel-separation\": 28000,\r\n       \"ietf-microwave-radio-link:rtpc\": {\r\n        \"maximum-nominal-power\": \"20.0\"\r\n       },\r\n       \"ietf-microwave-radio-link:single\": {\r\n        \"selected-cm\": \"ietf-microwave-types:qam-512\"\r\n       }\r\n      },\r\n      {\r\n       \"name\": \"CT-3\",\r\n       \"description\": \"'Carrier Termination 3'\",\r\n       \"type\": \"iana-if-type:microwaveCarrierTermination\",\r\n       \"ietf-microwave-radio-link:tx-frequency\": 10528000,\r\n       \"ietf-microwave-radio-link:duplex-distance\": 113000,\r\n       \"ietf-microwave-radio-link:channel-separation\": 28000,\r\n       \"ietf-microwave-radio-link:rtpc\": {\r\n        \"maximum-nominal-power\": \"20.0\"\r\n       },\r\n       \"ietf-microwave-radio-link:single\": {\r\n        \"selected-cm\": \"ietf-microwave-types:qam-512\"\r\n       }\r\n      },\r\n      {\r\n       \"name\": \"CT-2\",\r\n       \"description\": \"'Carrier Termination 2'\",\r\n       \"type\": \"iana-if-type:microwaveCarrierTermination\",\r\n       \"ietf-microwave-radio-link:tx-frequency\": 10615000,\r\n       \"ietf-microwave-radio-link:duplex-distance\": 113000,\r\n       \"ietf-microwave-radio-link:channel-separation\": 28000,\r\n       \"ietf-microwave-radio-link:rtpc\": {\r\n        \"maximum-nominal-power\": \"20.0\"\r\n       },\r\n       \"ietf-microwave-radio-link:single\": {\r\n        \"selected-cm\": \"ietf-microwave-types:qam-512\"\r\n       }\r\n      },\r\n      {\r\n       \"name\": \"CT-4\",\r\n       \"description\": \"'Carrier Termination 4'\",\r\n       \"type\": \"iana-if-type:microwaveCarrierTermination\",\r\n       \"ietf-microwave-radio-link:tx-frequency\": 10415000,\r\n       \"ietf-microwave-radio-link:duplex-distance\": 113000,\r\n       \"ietf-microwave-radio-link:channel-separation\": 28000,\r\n       \"ietf-microwave-radio-link:rtpc\": {\r\n        \"maximum-nominal-power\": \"20.0\"\r\n       },\r\n       \"ietf-microwave-radio-link:single\": {\r\n        \"selected-cm\": \"ietf-microwave-types:qam-512\"\r\n       }\r\n      }\r\n     ]\r\n    },\r\n    \"ietf-network:networks\": {\r\n     \"network\": [\r\n      {\r\n       \"network-id\": \"L2-network\",\r\n       \"network-types\": {\r\n        \"ietf-te-topology:te-topology\": {\r\n         \"ietf-eth-te-topology:eth-tran-topology\": {}\r\n        }\r\n       },\r\n       \"supporting-network\": [\r\n        {\r\n         \"network-ref\": \"mw-network\"\r\n        }\r\n       ],\r\n       \"node\": [\r\n        {\r\n         \"node-id\": \"L2-N1\",\r\n         \"supporting-node\": [\r\n          {\r\n           \"network-ref\": \"mw-network\",\r\n           \"node-ref\": \"mw-N1\"\r\n          }\r\n         ],\r\n         \"ietf-network-topology:termination-point\": [\r\n          {\r\n           \"tp-id\": \"L2-N1-TP1\",\r\n           \"supporting-termination-point\": [\r\n            {\r\n             \"network-ref\": \"mw-network\",\r\n             \"node-ref\": \"mw-N1\",\r\n             \"tp-ref\": \"mw-N1-RLTP1\"\r\n            }\r\n           ]\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te-node-id\": \"192.0.2.1\",\r\n         \"ietf-te-topology:te\": {\r\n          \"te-node-attributes\": {\r\n           \"ietf-eth-te-topology:eth-node\": {}\r\n          }\r\n         }\r\n        },\r\n        {\r\n         \"node-id\": \"L2-N2\",\r\n         \"supporting-node\": [\r\n          {\r\n           \"network-ref\": \"mw-network\",\r\n           \"node-ref\": \"mw-N2\"\r\n          }\r\n         ],\r\n         \"ietf-network-topology:termination-point\": [\r\n          {\r\n           \"tp-id\": \"L2-N2-TP2\",\r\n           \"supporting-termination-point\": [\r\n            {\r\n             \"network-ref\": \"mw-network\",\r\n             \"node-ref\": \"mw-N2\",\r\n             \"tp-ref\": \"mw-N2-RLTP2\"\r\n            }\r\n           ]\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te-node-id\": \"192.0.2.2\",\r\n         \"ietf-te-topology:te\": {\r\n          \"te-node-attributes\": {\r\n           \"ietf-eth-te-topology:eth-node\": {}\r\n          }\r\n         }\r\n        }\r\n       ],\r\n       \"ietf-network-topology:link\": [\r\n        {\r\n         \"link-id\": \"L2-N1-N2\",\r\n         \"source\": {\r\n          \"source-node\": \"L2-N1\",\r\n          \"source-tp\": \"L2-N1-TP1\"\r\n         },\r\n         \"destination\": {\r\n          \"dest-node\": \"L2-N2\",\r\n          \"dest-tp\": \"L2-N2-TP2\"\r\n         },\r\n         \"supporting-link\": [\r\n          {\r\n           \"network-ref\": \"mw-network\",\r\n           \"link-ref\": \"mwrl-N1-N2\"\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te\": {\r\n          \"te-link-attributes\": {\r\n           \"interface-switching-capability\": [\r\n            {\r\n             \"switching-capability\": \"ietf-te-types:switching-l2sc\",\r\n             \"encoding\": \"ietf-te-types:lsp-encoding-ethernet\"\r\n            }\r\n           ]\r\n          }\r\n         }\r\n        }\r\n       ]\r\n      },\r\n      {\r\n       \"network-id\": \"mw-network\",\r\n       \"network-types\": {\r\n        \"ietf-te-topology:te-topology\": {\r\n         \"ietf-microwave-topology:mw-topology\": {}\r\n        }\r\n       },\r\n       \"supporting-network\": [\r\n        {\r\n         \"network-ref\": \"mw-network\"\r\n        }\r\n       ],\r\n       \"node\": [\r\n        {\r\n         \"node-id\": \"mw-N1\",\r\n         \"supporting-node\": [\r\n          {\r\n           \"network-ref\": \"mw-network\",\r\n           \"node-ref\": \"mw-N1\"\r\n          }\r\n         ],\r\n         \"ietf-network-topology:termination-point\": [\r\n          {\r\n           \"tp-id\": \"mw-N1-RLTP1\",\r\n           \"supporting-termination-point\": [\r\n            {\r\n             \"network-ref\": \"mw-network\",\r\n             \"node-ref\": \"mw-N1\",\r\n             \"tp-ref\": \"mw-N1-CTP1\"\r\n            },\r\n            {\r\n             \"network-ref\": \"mw-network\",\r\n             \"node-ref\": \"mw-N1\",\r\n             \"tp-ref\": \"mw-N1-CTP3\"\r\n            }\r\n           ],\r\n           \"ietf-te-topology:te-tp-id\": \"192.0.2.3\",\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-rltp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n            \"RLT-1\"\r\n           }\r\n          },\r\n          {\r\n           \"tp-id\": \"mw-N1-CTP1\",\r\n           \"ietf-te-topology:te-tp-id\": 1,\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-ctp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n            \"CT-1\"\r\n           }\r\n          },\r\n          {\r\n           \"tp-id\": \"mw-N1-CTP3\",\r\n           \"ietf-te-topology:te-tp-id\": 2,\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-ctp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n            \"CT-3\"\r\n           }\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te-node-id\": \"192.0.2.1\",\r\n         \"ietf-te-topology:te\": {\r\n          \"te-node-attributes\": {\r\n           \"ietf-microwave-topology:mw-node\": {}\r\n          }\r\n         }\r\n        },\r\n        {\r\n         \"node-id\": \"mw-N2\",\r\n         \"supporting-node\": [\r\n          {\r\n           \"network-ref\": \"mw-network\",\r\n           \"node-ref\": \"mw-N2\"\r\n          }\r\n         ],\r\n         \"ietf-network-topology:termination-point\": [\r\n          {\r\n           \"tp-id\": \"mw-N2-RLTP2\",\r\n           \"supporting-termination-point\": [\r\n            {\r\n             \"network-ref\": \"mw-network\",\r\n             \"node-ref\": \"mw-N2\",\r\n             \"tp-ref\": \"mw-N2-CTP2\"\r\n            },\r\n            {\r\n             \"network-ref\": \"mw-network\",\r\n             \"node-ref\": \"mw-N2\",\r\n             \"tp-ref\": \"mw-N2-CTP4\"\r\n            }\r\n           ],\r\n           \"ietf-te-topology:te-tp-id\": \"192.0.2.4\",\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-rltp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n            \"RLT-2\"\r\n           }\r\n          },\r\n          {\r\n           \"tp-id\": \"mw-N2-CTP2\",\r\n           \"ietf-te-topology:te-tp-id\": 1,\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-ctp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n            \"CT-2\"\r\n           }\r\n          },\r\n          {\r\n           \"tp-id\": \"mw-N2-CTP4\",\r\n           \"ietf-te-topology:te-tp-id\": 2,\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-ctp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n            \"CT-4\"\r\n           }\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te-node-id\": \"192.0.2.1\",\r\n         \"ietf-te-topology:te\": {\r\n          \"te-node-attributes\": {\r\n           \"ietf-microwave-topology:mw-node\": {}\r\n          }\r\n         }\r\n        }\r\n       ],\r\n       \"ietf-network-topology:link\": [\r\n        {\r\n         \"link-id\": \"mwrl-N1-N2\",\r\n         \"source\": {\r\n          \"source-node\": \"mw-N1\",\r\n          \"source-tp\": \"mw-N1-RLTP1\"\r\n         },\r\n         \"destination\": {\r\n          \"dest-node\": \"mw-N2\",\r\n          \"dest-tp\": \"mw-N2-RLTP2\"\r\n         },\r\n         \"ietf-te-topology:te\": {\r\n          \"bundled-links\": {\r\n           \"bundled-link\": [\r\n            {\r\n             \"sequence\": 1,\r\n             \"src-tp-ref\": \"mw-N1-CTP1\",\r\n             \"des-tp-ref\": \"mw-N2-CTP2\"\r\n            },\r\n            {\r\n             \"sequence\": 2,\r\n             \"src-tp-ref\": \"mw-N1-CTP3\",\r\n             \"des-tp-ref\": \"mw-N2-CTP4\"\r\n            }\r\n           ]\r\n          },\r\n          \"te-link-attributes\": {\r\n           \"ietf-microwave-topology:mw-link\": {\r\n            \"microwave-radio-link\": {\r\n             \"rlt-mode\": {\r\n              \"num-bonded-carriers\": 2,\r\n              \"num-protecting-carriers\": 0\r\n             }\r\n            }\r\n           }\r\n          }\r\n         }\r\n        },\r\n        {\r\n         \"link-id\": \"mwc-N1-N2-A\",\r\n         \"source\": {\r\n          \"source-node\": \"mw-N1\",\r\n          \"source-tp\": \"mw-N1-CTP1\"\r\n         },\r\n         \"destination\": {\r\n          \"dest-node\": \"mw-N2\",\r\n          \"dest-tp\": \"mw-N2-CTP2\"\r\n         },\r\n         \"ietf-te-topology:te\": {\r\n          \"te-link-attributes\": {\r\n           \"ietf-bandwidth-availability-topology:link-availability\": [\r\n            {\r\n             \"availability\": \"0.99\",\r\n             \"link-bandwidth\": \"998423\"\r\n            },\r\n            {\r\n             \"availability\": \"0.95\",\r\n             \"link-bandwidth\": \"1048576\"\r\n            }\r\n           ],\r\n           \"ietf-microwave-topology:mw-link\": {\r\n            \"microwave-carrier\": {\r\n             \"tx-frequency\": 10728000,\r\n             \"channel-separation\": 28000\r\n            }\r\n           }\r\n          }\r\n         }\r\n        },\r\n        {\r\n         \"link-id\": \"mwc-N1-N2-B\",\r\n         \"source\": {\r\n          \"source-node\": \"mw-N1\",\r\n          \"source-tp\": \"mw-N1-CTP3\"\r\n         },\r\n         \"destination\": {\r\n          \"dest-node\": \"mw-N2\",\r\n          \"dest-tp\": \"mw-N2-CTP4\"\r\n         },\r\n         \"ietf-te-topology:te\": {\r\n          \"te-link-attributes\": {\r\n           \"ietf-microwave-topology:mw-link\": {\r\n            \"microwave-carrier\": {\r\n             \"tx-frequency\": 10528000,\r\n             \"channel-separation\": 28000\r\n            }\r\n           }\r\n          }\r\n         }\r\n        }\r\n       ]\r\n      }\r\n     ]\r\n    }\r\n   }", "correct_text": "   {\r\n    \"ietf-interfaces:interfaces\": {\r\n     \"interface\": [\r\n      {\r\n       \"name\": \"L2Interface1\",\r\n       \"description\": \"'Ethernet Interface 1'\",\r\n       \"type\": \"iana-if-type:ethernetCsmacd\"\r\n      },\r\n      {\r\n       \"name\": \"L2Interface2\",\r\n       \"description\": \"'Ethernet Interface 2'\",\r\n       \"type\": \"iana-if-type:ethernetCsmacd\"\r\n      },\r\n      {\r\n       \"name\": \"RLT-1\",\r\n       \"description\": \"'Radio Link Terminal 1'\",\r\n       \"type\": \"iana-if-type:microwaveRadioLinkTerminal\",\r\n       \"ietf-microwave-radio-link:mode\":\r\n         \"ietf-microwave-types:two-plus-zero\",\r\n       \"ietf-microwave-radio-link:carrier-terminations\": [\r\n        \"CT-1\",\r\n        \"CT-3\"\r\n       ]\r\n      },\r\n      {\r\n       \"name\": \"RLT-2\",\r\n       \"description\": \"'Radio Link Terminal 2'\",\r\n       \"type\": \"iana-if-type:microwaveRadioLinkTerminal\",\r\n       \"ietf-microwave-radio-link:mode\":\r\n          \"ietf-microwave-types:two-plus-zero\",\r\n       \"ietf-microwave-radio-link:carrier-terminations\": [\r\n        \"CT-2\",\r\n        \"CT-4\"\r\n       ]\r\n      },\r\n      {\r\n       \"name\": \"CT-1\",\r\n       \"description\": \"'Carrier Termination 1'\",\r\n       \"type\": \"iana-if-type:microwaveCarrierTermination\",\r\n       \"ietf-microwave-radio-link:tx-frequency\": 10728000,\r\n       \"ietf-microwave-radio-link:duplex-distance\": 113000,\r\n       \"ietf-microwave-radio-link:channel-separation\": 28000,\r\n       \"ietf-microwave-radio-link:rtpc\": {\r\n        \"maximum-nominal-power\": \"20.0\"\r\n       },\r\n       \"ietf-microwave-radio-link:single\": {\r\n        \"selected-cm\": \"ietf-microwave-types:qam-512\"\r\n       }\r\n      },\r\n      {\r\n       \"name\": \"CT-3\",\r\n       \"description\": \"'Carrier Termination 3'\",\r\n       \"type\": \"iana-if-type:microwaveCarrierTermination\",\r\n       \"ietf-microwave-radio-link:tx-frequency\": 10528000,\r\n       \"ietf-microwave-radio-link:duplex-distance\": 113000,\r\n       \"ietf-microwave-radio-link:channel-separation\": 28000,\r\n       \"ietf-microwave-radio-link:rtpc\": {\r\n        \"maximum-nominal-power\": \"20.0\"\r\n       },\r\n       \"ietf-microwave-radio-link:single\": {\r\n        \"selected-cm\": \"ietf-microwave-types:qam-512\"\r\n       }\r\n      },\r\n      {\r\n       \"name\": \"CT-2\",\r\n       \"description\": \"'Carrier Termination 2'\",\r\n       \"type\": \"iana-if-type:microwaveCarrierTermination\",\r\n       \"ietf-microwave-radio-link:tx-frequency\": 10615000,\r\n       \"ietf-microwave-radio-link:duplex-distance\": 113000,\r\n       \"ietf-microwave-radio-link:channel-separation\": 28000,\r\n       \"ietf-microwave-radio-link:rtpc\": {\r\n        \"maximum-nominal-power\": \"20.0\"\r\n       },\r\n       \"ietf-microwave-radio-link:single\": {\r\n        \"selected-cm\": \"ietf-microwave-types:qam-512\"\r\n       }\r\n      },\r\n      {\r\n       \"name\": \"CT-4\",\r\n       \"description\": \"'Carrier Termination 4'\",\r\n       \"type\": \"iana-if-type:microwaveCarrierTermination\",\r\n       \"ietf-microwave-radio-link:tx-frequency\": 10415000,\r\n       \"ietf-microwave-radio-link:duplex-distance\": 113000,\r\n       \"ietf-microwave-radio-link:channel-separation\": 28000,\r\n       \"ietf-microwave-radio-link:rtpc\": {\r\n        \"maximum-nominal-power\": \"20.0\"\r\n       },\r\n       \"ietf-microwave-radio-link:single\": {\r\n        \"selected-cm\": \"ietf-microwave-types:qam-512\"\r\n       }\r\n      }\r\n     ]\r\n    },\r\n    \"ietf-network:networks\": {\r\n     \"network\": [\r\n      {\r\n       \"network-id\": \"example:L2-network\",\r\n       \"network-types\": {\r\n        \"ietf-te-topology:te-topology\": {\r\n         \"ietf-eth-te-topology:eth-tran-topology\": {}\r\n        }\r\n       },\r\n       \"supporting-network\": [\r\n        {\r\n         \"network-ref\": \"example:mw-network\"\r\n        }\r\n       ],\r\n       \"node\": [\r\n        {\r\n         \"node-id\": \"example:L2-N1\",\r\n         \"supporting-node\": [\r\n          {\r\n           \"network-ref\": \"example:mw-network\",\r\n           \"node-ref\": \"example:mw-N1\"\r\n          }\r\n         ],\r\n         \"ietf-network-topology:termination-point\": [\r\n          {\r\n           \"tp-id\": \"example:L2-N1-TP1\",\r\n           \"supporting-termination-point\": [\r\n            {\r\n             \"network-ref\": \"example:mw-network\",\r\n             \"node-ref\": \"example:mw-N1\",\r\n             \"tp-ref\": \"example:mw-N1-RLTP1\"\r\n            }\r\n           ]\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te-node-id\": \"192.0.2.1\",\r\n         \"ietf-te-topology:te\": {\r\n          \"te-node-attributes\": {\r\n           \"ietf-eth-te-topology:eth-node\": {}\r\n          }\r\n         }\r\n        },\r\n        {\r\n         \"node-id\": \"example:L2-N2\",\r\n         \"supporting-node\": [\r\n          {\r\n           \"network-ref\": \"example:mw-network\",\r\n           \"node-ref\": \"example:mw-N2\"\r\n          }\r\n         ],\r\n         \"ietf-network-topology:termination-point\": [\r\n          {\r\n           \"tp-id\": \"example:L2-N2-TP2\",\r\n           \"supporting-termination-point\": [\r\n            {\r\n             \"network-ref\": \"example:mw-network\",\r\n             \"node-ref\": \"example:mw-N2\",\r\n             \"tp-ref\": \"example:mw-N2-RLTP2\"\r\n            }\r\n           ]\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te-node-id\": \"192.0.2.2\",\r\n         \"ietf-te-topology:te\": {\r\n          \"te-node-attributes\": {\r\n           \"ietf-eth-te-topology:eth-node\": {}\r\n          }\r\n         }\r\n        }\r\n       ],\r\n       \"ietf-network-topology:link\": [\r\n        {\r\n         \"link-id\": \"example:L2-N1-N2\",\r\n         \"source\": {\r\n          \"source-node\": \"example:L2-N1\",\r\n          \"source-tp\": \"example:L2-N1-TP1\"\r\n         },\r\n         \"destination\": {\r\n          \"dest-node\": \"example:L2-N2\",\r\n          \"dest-tp\": \"example:L2-N2-TP2\"\r\n         },\r\n         \"supporting-link\": [\r\n          {\r\n           \"network-ref\": \"example:mw-network\",\r\n           \"link-ref\": \"example:mwrl-N1-N2\"\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te\": {\r\n          \"te-link-attributes\": {\r\n           \"interface-switching-capability\": [\r\n            {\r\n             \"switching-capability\": \"ietf-te-types:switching-l2sc\",\r\n             \"encoding\": \"ietf-te-types:lsp-encoding-ethernet\"\r\n            }\r\n           ]\r\n          }\r\n         }\r\n        }\r\n       ]\r\n      },\r\n      {\r\n       \"network-id\": \"example:mw-network\",\r\n       \"network-types\": {\r\n        \"ietf-te-topology:te-topology\": {\r\n         \"ietf-microwave-topology:mw-topology\": {}\r\n        }\r\n       },\r\n       \"supporting-network\": [\r\n        {\r\n         \"network-ref\": \"example:mw-network\"\r\n        }\r\n       ],\r\n       \"node\": [\r\n        {\r\n         \"node-id\": \"example:mw-N1\",\r\n         \"supporting-node\": [\r\n          {\r\n           \"network-ref\": \"example:mw-network\",\r\n           \"node-ref\": \"example:mw-N1\"\r\n          }\r\n         ],\r\n         \"ietf-network-topology:termination-point\": [\r\n          {\r\n           \"tp-id\": \"example:mw-N1-RLTP1\",\r\n           \"supporting-termination-point\": [\r\n            {\r\n             \"network-ref\": \"example:mw-network\",\r\n             \"node-ref\": \"example:mw-N1\",\r\n             \"tp-ref\": \"example:mw-N1-CTP1\"\r\n            },\r\n            {\r\n             \"network-ref\": \"example:mw-network\",\r\n             \"node-ref\": \"example:mw-N1\",\r\n             \"tp-ref\": \"example:mw-N1-CTP3\"\r\n            }\r\n           ],\r\n           \"ietf-te-topology:te-tp-id\": \"192.0.2.3\",\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-rltp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n   \t \"RLT-1\"\r\n           }\r\n          },\r\n          {\r\n           \"tp-id\": \"example:mw-N1-CTP1\",\r\n           \"ietf-te-topology:te-tp-id\": 1,\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-ctp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n   \t \"CT-1\"\r\n           }\r\n          },\r\n          {\r\n           \"tp-id\": \"example:mw-N1-CTP3\",\r\n           \"ietf-te-topology:te-tp-id\": 2,\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-ctp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n   \t \"CT-3\"\r\n           }\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te-node-id\": \"192.0.2.1\",\r\n         \"ietf-te-topology:te\": {\r\n          \"te-node-attributes\": {\r\n           \"ietf-microwave-topology:mw-node\": {}\r\n          }\r\n         }\r\n        },\r\n        {\r\n         \"node-id\": \"example:mw-N2\",\r\n         \"supporting-node\": [\r\n          {\r\n           \"network-ref\": \"example:mw-network\",\r\n           \"node-ref\": \"example:mw-N2\"\r\n          }\r\n         ],\r\n         \"ietf-network-topology:termination-point\": [\r\n          {\r\n           \"tp-id\": \"example:mw-N2-RLTP2\",\r\n           \"supporting-termination-point\": [\r\n            {\r\n             \"network-ref\": \"example:mw-network\",\r\n             \"node-ref\": \"example:mw-N2\",\r\n             \"tp-ref\": \"example:mw-N2-CTP2\"\r\n            },\r\n            {\r\n             \"network-ref\": \"example:mw-network\",\r\n             \"node-ref\": \"example:mw-N2\",\r\n             \"tp-ref\": \"example:mw-N2-CTP4\"\r\n            }\r\n           ],\r\n           \"ietf-te-topology:te-tp-id\": \"192.0.2.4\",\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-rltp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n   \t \"RLT-2\"\r\n           }\r\n          },\r\n          {\r\n           \"tp-id\": \"example:mw-N2-CTP2\",\r\n           \"ietf-te-topology:te-tp-id\": 1,\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-ctp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n   \t \"CT-2\"\r\n           }\r\n          },\r\n          {\r\n           \"tp-id\": \"example:mw-N2-CTP4\",\r\n           \"ietf-te-topology:te-tp-id\": 2,\r\n           \"ietf-te-topology:te\": {\r\n            \"ietf-microwave-topology:mw-tp\": {\r\n             \"microwave-ctp\": {}\r\n            },\r\n            \"ietf-tp-interface-reference-topology:tp-to-interface-path\":\r\n   \t \"CT-4\"\r\n           }\r\n          }\r\n         ],\r\n         \"ietf-te-topology:te-node-id\": \"192.0.2.1\",\r\n         \"ietf-te-topology:te\": {\r\n          \"te-node-attributes\": {\r\n           \"ietf-microwave-topology:mw-node\": {}\r\n          }\r\n         }\r\n        }\r\n       ],\r\n       \"ietf-network-topology:link\": [\r\n        {\r\n         \"link-id\": \"example:mwrl-N1-N2\",\r\n         \"source\": {\r\n          \"source-node\": \"example:mw-N1\",\r\n          \"source-tp\": \"example:mw-N1-RLTP1\"\r\n         },\r\n         \"destination\": {\r\n          \"dest-node\": \"example:mw-N2\",\r\n          \"dest-tp\": \"example:mw-N2-RLTP2\"\r\n         },\r\n         \"ietf-te-topology:te\": {\r\n          \"bundled-links\": {\r\n           \"bundled-link\": [\r\n            {\r\n             \"sequence\": 1,\r\n             \"src-tp-ref\": \"example:mw-N1-CTP1\",\r\n             \"des-tp-ref\": \"example:mw-N2-CTP2\"\r\n            },\r\n            {\r\n             \"sequence\": 2,\r\n             \"src-tp-ref\": \"example:mw-N1-CTP3\",\r\n             \"des-tp-ref\": \"example:mw-N2-CTP4\"\r\n            }\r\n           ]\r\n          },\r\n          \"te-link-attributes\": {\r\n           \"ietf-microwave-topology:mw-link\": {\r\n            \"microwave-radio-link\": {\r\n             \"rlt-mode\": {\r\n              \"num-bonded-carriers\": 2,\r\n              \"num-protecting-carriers\": 0\r\n             }\r\n            }\r\n           }\r\n          }\r\n         }\r\n        },\r\n        {\r\n         \"link-id\": \"example:mwc-N1-N2-A\",\r\n         \"source\": {\r\n          \"source-node\": \"example:mw-N1\",\r\n          \"source-tp\": \"example:mw-N1-CTP1\"\r\n         },\r\n         \"destination\": {\r\n          \"dest-node\": \"example:mw-N2\",\r\n          \"dest-tp\": \"example:mw-N2-CTP2\"\r\n         },\r\n         \"ietf-te-topology:te\": {\r\n          \"te-link-attributes\": {\r\n           \"ietf-bandwidth-availability-topology:link-availability\": [\r\n            {\r\n             \"availability\": \"0.99\",\r\n             \"link-bandwidth\": \"998423\"\r\n            },\r\n            {\r\n             \"availability\": \"0.95\",\r\n             \"link-bandwidth\": \"1048576\"\r\n            }\r\n           ],\r\n           \"ietf-microwave-topology:mw-link\": {\r\n            \"microwave-carrier\": {\r\n             \"tx-frequency\": 10728000,\r\n             \"channel-separation\": 28000\r\n            }\r\n           }\r\n          }\r\n         }\r\n        },\r\n        {\r\n         \"link-id\": \"example:mwc-N1-N2-B\",\r\n         \"source\": {\r\n          \"source-node\": \"example:mw-N1\",\r\n          \"source-tp\": \"example:mw-N1-CTP3\"\r\n         },\r\n         \"destination\": {\r\n          \"dest-node\": \"example:mw-N2\",\r\n          \"dest-tp\": \"example:mw-N2-CTP4\"\r\n         },\r\n         \"ietf-te-topology:te\": {\r\n          \"te-link-attributes\": {\r\n           \"ietf-microwave-topology:mw-link\": {\r\n            \"microwave-carrier\": {\r\n             \"tx-frequency\": 10528000,\r\n             \"channel-separation\": 28000\r\n            }\r\n           }\r\n          }\r\n         }\r\n        }\r\n       ]\r\n      }\r\n     ]\r\n    }\r\n   }", "notes": "Fixed URI names to follow RFC8407bis guidelines.\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/ccamp/OQ-oLx2smsmdC4dcn6aB9i-hWE8/", "submit_date": "2024-10-08", "submitter_name": "Scott Mansfield", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-10-09 14:59:20"}, {"errata_id": "8134", "doc-id": "RFC9656", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.2", "orig_text": "            \"node-id\": \"mw-N1\",", "correct_text": "            \"node-id\": \"example:mw-N1\",", "notes": "Fixed URI name to follow RFC8407bis guidelines.\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/ccamp/OQ-oLx2smsmdC4dcn6aB9i-hWE8/", "submit_date": "2024-10-08", "submitter_name": "Scott Mansfield", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2024-10-09 14:59:41"}, {"errata_id": "8135", "doc-id": "RFC9662", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Abstract", "orig_text": "RFC 5245 (TLS Transport Mapping for Syslog) ", "correct_text": "RFC 5425 (TLS Transport Mapping for Syslog) ", "notes": "In other words s/RFC 5245/RFC 5425 in the 2nd sentence.\r\nThe correct reference for TLS Transport Mapping for Syslog is RFC 5425; like it is in the header, the 1st sentence of the abstract, and the rest of the document.", "submit_date": "2024-10-09", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-10-09 13:55:11"}, {"errata_id": "8136", "doc-id": "RFC8599", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.4", "orig_text": "Example of a SIP REGISTER response including a 'sip.pnsreg'\r\n     media feature tag and a 'sip.pnsreq' feature-capability indicator:\r\n\r\nIf the UA receives a 2xx response to the REGISTER request that\r\n   contains a Feature-Caps header field with a 'sip.pnsreq' feature-\r\n   capability indicator,\r\n\r\nIf the UA receives a 2xx response to the REGISTER request that does\r\n   not contain a Feature-Caps header field with a 'sip.pnsreq' feature-\r\n   capability indicator,\r\n\r\n", "correct_text": "Example of a SIP REGISTER response including a 'sip.pnsreg'\r\n     media feature tag and a 'sip.pnsreg' feature-capability indicator:\r\n\r\nIf the UA receives a 2xx response to the REGISTER request that\r\n   contains a Feature-Caps header field with a 'sip.pnsreg' feature-\r\n   capability indicator,\r\n\r\nIf the UA receives a 2xx response to the REGISTER request that does\r\n   not contain a Feature-Caps header field with a 'sip.pnsreg' feature-\r\n   capability indicator,", "notes": "\u201csip.pnsreq\u201d should be \u201csip.pnsreg\u201d in the three sentences in this report.", "submit_date": "2024-10-12", "submitter_name": "Babar", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-10-24 18:09:31"}, {"errata_id": "8137", "doc-id": "RFC5272", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "C.1", "orig_text": "NoSignatureValue contains the hash of the certification request. ", "correct_text": "NoSignatureValue contains the SHA-1 hash value of the certification request. \r\nThe hash value given by NoSignatureValue SHOULD be ignored.", "notes": "This has been fixed in RFC 6402\r\n\r\nThe hash value was not sufficiently defined because the choice of the hash algorithm was not specified.\r\nAt that time presumably the use of SHA-1 was implied.\r\n\r\nI suggest requiring SHA-1 here simply for backward compatibility.\r\nFrom today's perspective more flexibility may be demanded and SHA-1 likely no more is the best choice.\r\n\r\nAnyway I see no real value in NoSignatureValue (pun intended), so it should not matter.\r\nFor this reason I propose ignoring the hash value.", "submit_date": "2024-10-12", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-17 13:44:53"}, {"errata_id": "8138", "doc-id": "RFC9110", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "15.4", "orig_text": "   5.  If the request method has been changed to GET or HEAD, remove\r\n       content-specific header fields, including (but not limited to)\r\n       Content-Encoding, Content-Language, Content-Location,\r\n       Content-Type, Content-Length, Digest, Last-Modified.", "correct_text": "6.If a redirect request includes a target uri of \r\nredirect link (a recursive redirect request) \r\nsuch as: http://example.com/reditectto=\r\n\"\"http://example.com/redirecto=\"http://bad.examaple.com\"\" \r\na redirect to http://example.com/redirecto=\"http://bad.examaple.com\" \r\nshould be made and than to \r\nhttp://bad.examaple.com that way the security \r\nmessures to redirect to another domain may take place", "notes": "currently the rfc doesn't indicate how web server and \r\nbrowsers should handle recursive rerdirect such as \r\nhttp://example.com/reditectto=\"http://example.com/redirecto=\"http://bad.examaple.com\"\" \r\ntherefore i was able to abuse this behavior to gain \r\ncve and exploitation on web server for 2 main resoans \r\n1. redirect allowed only to same domain logic : with regex on \r\nthe parameter \"gooddomain.com/.*\" which works as intended for the escape of the domain part in the uri but doesnt handle a case where there is a recursive request which is handled by server side.\r\n2. out of domain control which gives the user a choice to know and \r\napprove the moving to another domain because the server views the \r\nrequest as to the same domain\r\n\r\nthe correct text should come after number 5\n --VERIFIER NOTES-- \n\r\nIn rejecting this errata report, I note that the aim of this erratum is not to fix an apparent error, but an addition to the current tex. This sort of text change is not in scope for errata reports, which are meant to collect errors in the documents, things that were actual errors at publication and that would have been fixed at that time had the working group or document authors noticed them -- they were just missed. This is not the case here.\r\n\r\nAdditionally, cyclical redirections are already addressed for clients, and are not relevant for servers, see: https://mailarchive.ietf.org/arch/msg/httpbisa/o3-eUDiKUiC_nWi-5s1wOOmMesU/ for details.", "submit_date": "2024-10-12", "submitter_name": "Roy Yosef Barkay, Tomer Yair", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-29 15:02:19"}, {"errata_id": "8139", "doc-id": "RFC4890", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "         *  Ensuring that neighbors remain reachable using the same IP\r\n            and link layer addresses after initial discovery (Neighbor\r\n            Unreachability Discovery - NUD) and notifying neighbors of\r\n            changes to link layer addresses.  Uses NS and NA [RFC2461].\r\n", "correct_text": "         *  Ensuring that neighbors remain reachable using the same IP\r\n            and link layer addresses after initial discovery (Neighbor\r\n            Unreachability Detection - NUD) and notifying neighbors of\r\n            changes to link layer addresses.  Uses NS and NA [RFC2461].\r\n", "notes": "\"Discovery\" should be \"Detection\" as defined in RFC2461 \u00a7 7.3.\r\n\r\nWK: Doh!  Thank you for the clear errata report.", "submit_date": "2024-10-13", "submitter_name": "Nikolaos Chatzikonstantinou", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-10-14 15:17:29"}, {"errata_id": "8140", "doc-id": "RFC9399", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10", "orig_text": "In addition, the use of an encrypted DNS mechanism, such as DNS over\r\nTLS (DoT) [RFC7858] or DNS over HTTPS (DoH) [RFC9230], hides the name\r\nresolution traffic, which is usually a first step in fetching remote\r\nlogotype objects.", "correct_text": "In addition, the use of an encrypted DNS mechanism, such as DNS over\r\nTLS (DoT) [RFC7858] or DNS over HTTPS (DoH) [RFC8484], hides the name\r\nresolution traffic, which is usually a first step in fetching remote\r\nlogotype objects.", "notes": "RFC 9399 mentions DNS over HTTPS (DoH) in an example. For this purpose it\r\nincludes an informative reference for DoH. Except the reference is wrong.\r\nRFC 9399 incorrectly references RFC 9230 (ODoH) instead of RFC 8484 (DoH).", "submit_date": "2024-10-14", "submitter_name": "David Schinazi", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-10-24 18:17:11"}, {"errata_id": "8141", "doc-id": "RFC9147", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "   This 128-bit value is used in the ACK message as well as in the\r\n   \"record_sequence_number\" input to the Authenticated Encryption with\r\n   Associated Data (AEAD) function.", "correct_text": "   This 128-bit value is used in the ACK message.", "notes": "The end of this paragraph contradicts this by saying \"In DTLS 1.3 the 64-bit sequence_number is used as the sequence number for the AEAD computation\". If the 128-bit value was used as the \"record sequence number\" as described in RFC 8446 section 5.3, it appears that would require the AEAD to have an N_MAX of at least 16 bytes to fit all of the 128 bits, and none of the TLS 1.3 AEADs have an N_MAX that big. Thus, I assume the end of the paragraph is correct and the opening is incorrect.", "submit_date": "2024-10-15", "submitter_name": "Nick Harper", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8142", "doc-id": "RFC2003", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2", "orig_text": "The encapuslated (inner) datagram includes an IP Authentication header.\r\n", "correct_text": "The encapsulated (inner) datagram includes an IP Authentication header.\r\n", "notes": "Typo: \u201cencapuslated\u201d should be \u201cencapsulated\u201d. ", "submit_date": "2024-10-16", "submitter_name": "Gorka Zamorano Or\u00f3", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-10-24 18:56:13"}, {"errata_id": "8143", "doc-id": "RFC9620", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.11", "orig_text": "   With proper authentication, the scenario would be as follows:\r\n\r\n   Alice wants to communicate with Bob.  Alice sends data to Bob.\r\n   Corinne intercepts the data sent to Bob.  Corinne reads and alters\r\n   the message to Bob.  Bob is unable to verify whether that the data\r\n   came from Alice.\r\n", "correct_text": "   With proper authentication, the scenario would be as follows:\r\n\r\n   Alice wants to communicate with Bob.  Alice sends data to Bob.\r\n   Corinne intercepts the data sent to Bob.  Corinne reads and alters\r\n   the message to Bob.  Bob is able to verify whether that the data\r\n   came from Alice.\r\n", "notes": "With proper authentication, Bob can check if the data came from Alice.", "submit_date": "2024-10-16", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8870", "doc-id": "RFC9312", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "3.8", "orig_text": "The round-trip time (RTT) of QUIC flows can be inferred by\r\nobservation once per flow during the handshake in passive TCP\r\nmeasurement;", "correct_text": "The round-trip time (RTT) of QUIC flows can be inferred by\r\nobservation once per flow during the handshake, as in passive TCP\r\nmeasurement;", "notes": "The \"as\" got dropped from -18 to RFC9312.\r\nThe earlier wording is clearer because it refers to passive TCP measurement only as an analogy, avoiding the incorrect implication that QUIC RTT inference involves TCP.", "submit_date": "2026-04-07", "submitter_name": "Ike Kunze", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-04-09 19:09:10"}, {"errata_id": "8144", "doc-id": "RFC8624", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3", "orig_text": " This document updates the IANA registry \"Delegation Signer (DS) Resource\r\n   Record (RR) Type Digest Algorithms\". The registry has been updated by\r\n   the following table from section 3.3:\r\n\r\n   +--------+-----------------+-------------------+-------------------+\r\n   | Number | Mnemonics       | DNSSEC Delegation | DNSSEC Validation |\r\n   +--------+-----------------+-------------------+-------------------+\r\n   | 0      | NULL (CDS only) | MUST NOT [*]      | MUST NOT [*]      |\r\n   | 1      | SHA-1           | MUST NOT          | MUST              |\r\n   | 2      | SHA-256         | MUST              | MUST              |\r\n   | 3      | GOST R 34.11-94 | MUST NOT          | MAY               |\r\n   | 4      | SHA-384         | MAY               | RECOMMENDED       |\r\n   +--------+-----------------+-------------------+-------------------+\r\n", "correct_text": "This document updates the IANA registry \"Delegation Signer (DS) Resource\r\n   Record (RR) Type Digest Algorithms\". The registry has been updated by\r\n   the following table from section 3.3:\r\n\r\n   +--------+-----------------+-------------------+-------------------+\r\n   | Number | Mnemonics       | DNSSEC Delegation | DNSSEC Validation |\r\n   +--------+-----------------+-------------------+-------------------+\r\n   | 0      | NULL (CDS only) | MUST NOT [*]      | MUST NOT [*]      |\r\n   | 1      | SHA-1           | MUST NOT          | MUST              |\r\n   | 2      | SHA-256         | MUST              | MUST              |\r\n   | 3      | GOST R 34.11-94 | MUST NOT          | MAY               |\r\n   | 4      | SHA-384         | MAY               | RECOMMENDED       |\r\n   | 5      | SHA-512         | MAY               | MAY               |\r\n   +--------+-----------------+-------------------+-------------------+\r\n", "notes": "Requesting DNSSEC be allowed to fully support the \r\nCommercial National Security Algorithm Suite 2.0 - series of hashes.  \r\nThis is part of NISTs Post Quantum Cryptography effort\n --VERIFIER NOTES-- \nPlease see \r\n* https://mailarchive.ietf.org/arch/msg/dnsop/KXEI6RgnkN-S4uKL8DvhwGEsYrI/\r\n* https://mailarchive.ietf.org/arch/msg/dnsop/EgKunMFXJ_0ZxHvhRNQTPBvccIY/", "submit_date": "2024-10-16", "submitter_name": "Robert Wagner", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-06-02 05:14:04"}, {"errata_id": "8148", "doc-id": "RFC1123", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "           If a dotted-decimal number can be entered without such\r\n           identifying delimiters, then a full syntactic check must be\r\n           made, because a segment of a host domain name is now allowed\r\n           to begin with a digit and could legally be entirely numeric\r\n           (see Section 6.1.2.4).", "correct_text": "           If a dotted-decimal number can be entered without such\r\n           identifying delimiters, then a full syntactic check must be\r\n           made, because a segment of a host domain name is now allowed\r\n           to begin with a digit and could legally be entirely numeric.", "notes": "The text says \"see Section 6.1.2.4\", but section 6.1.2.4 is about compression and is not related to section 2.1 at all.\r\n\r\n--VERIFIER NOTES--\r\nPerhaps Section 6.1.3.5 was intended.", "submit_date": "2024-10-17", "submitter_name": "Hirotaka Yamamoto", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-10-24 19:52:53"}, {"errata_id": "8356", "doc-id": "RFC5083", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "generation of public/private key pairs relies on a random numbers.\r\n", "correct_text": "generation of public/private key pairs relies on random numbers.\r\n", "notes": "A simple typo.", "submit_date": "2025-03-30", "submitter_name": "Roman Donchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-04-02 16:40:43"}, {"errata_id": "8357", "doc-id": "RFC8617", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2.2", "orig_text": "5.2.2.  Responding to ARC Validation Failures during the SMTP\r\n        Transaction\r\n\r\n   If an ARC Validator determines that the incoming message fails ARC\r\n   validation, the Validator MAY signal the breakage through the\r\n   extended SMTP response code 5.7.29 (\"ARC validation failure\") and the\r\n   corresponding SMTP basic response code.", "correct_text": "The text is fine, but an SMTP RFC is not cited.", "notes": "Cite RFC 5321 or a replacement.", "submit_date": "2025-03-30", "submitter_name": "Robert Sayre", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8358", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "          {\r\n            \"name\" : \"display\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A human-readable name, primarily used\r\nfor display purposes.  READ-ONLY.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "correct_text": "          {\r\n            \"name\" : \"display\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A human-readable name, primarily used\r\nfor display purposes.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "notes": "The description of all \"display\" sub-attributes in the schema for User describes them as \"READ-ONLY\", but they are actually defined with \"mutability\" : \"readWrite\" in all cases except for the sub-attribute of \"groups\".", "submit_date": "2025-03-31", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:24:19"}, {"errata_id": "8174", "doc-id": "RFC6920", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9.4", "orig_text": "the hash algorithm name string", "correct_text": "the case-(in)sensitive hash algorithm name string", "notes": "The RFC does not specify whether the Hash Name String is considered to be case-sensitive or not. According to RFC 8126, section 2.2., it should be clearly stated whether case matters, like in RFC 7518, section 7.1.1. Does this mean one should interpret them as case-insensitive?\r\n\r\nVerifier notes:\r\n\r\nhttps://www.rfc-editor.org/rfc/rfc6920#section-2\r\nhttps://www.rfc-editor.org/rfc/rfc2234#section-6.1\r\n\r\nalg            = 1*unreserved\r\nunreserved  = ALPHA / DIGIT / \"-\" / \".\" / \"_\" / \"~\"\r\nALPHA          =  %x41-5A / %x61-7A   ; A-Z / a-z\r\n\r\nIts clear that algorithm name's can contain uppercase characters.\r\n\r\nIn the discussion regarding this errata, there was no objection to the following comment\r\n\r\n> this should have been case sensitive and restricted to lower-case only in the ABNF (now it\u2019s \u201cunreserved\u201d).\r\n\r\nSuch a change cannot be made through the errata process, and requires an update.\r\n\r\nNone the less the current registry contains no uppercase character based algorithm names, and hopefully won't in the future.\r\n", "submit_date": "2024-11-12", "submitter_name": "Henry Jalonen", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-11-19 14:26:44"}, {"errata_id": "8183", "doc-id": "RFC9483", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.6.1", "orig_text": "              rid             REQUIRED\r\n    -- MUST contain the subjectKeyIdentifier of the CMP protection\r\n    --   certificate, if available, in the rKeyId choice, and the\r\n    --   subjectKeyIdentifier MUST equal the senderKID in the\r\n    --   PKIHeader.\r\n    -- If the CMP protection certificate does not contain a\r\n    --   subjectKeyIdentifier, the issuerAndSerialNumber choice MUST\r\n    --   be used.\r\n", "correct_text": "              rid             REQUIRED\t\r\n-- MUST contain the subjectKeyIdentifier of the CMP protection\r\n--   certificate of the request message, if available. The\r\n--   subjectKeyIdentifier is equal the senderKID in the\r\n--   PKIHeader of that message.\r\n-- If the CMP protection certificate of the request message does\r\n--   not contain a subjectKeyIdentifier, the issuerAndSerialNumber\r\n--   choice MUST be used.\r\n\r\n", "notes": "1. rKeyId choice is wrongly used here as Section 6.2.1 of RFC 5652 does not have rKeyId choice. \r\n2. rid value must be taken from CMP protection certificate of request message as it is used to specify the recipient.", "submit_date": "2024-11-20", "submitter_name": "Rajeev Ranjan", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-11-21 22:24:49"}, {"errata_id": "8156", "doc-id": "RFC9253", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2", "orig_text": "   linkparam      = (\";\" \"VALUE\" \"=\" (\"XML-REFERENCE\" /\r\n                                \"URI\" /\r\n                                \"UID\"))\r\n                    1*(\";\" linkrelparam)\r\n                    1*(\";\" fmttypeparam)\r\n                    1*(\";\" labelparam)\r\n                    1*(\";\" languageparam)\r\n                    *(\";\" other-param)\r\n                    ; the elements herein may appear in any order,\r\n                    ; and the order is not significant.", "correct_text": "   linkparam      = (\";\" \"VALUE\" \"=\" (\"XML-REFERENCE\" /\r\n                                \"URI\" /\r\n                                \"UID\"))\r\n                    1*(\";\" linkrelparam)\r\n                    [\";\" fmttypeparam]\r\n                    [\";\" labelparam]\r\n                    [\";\" languageparam]\r\n                    *(\";\" other-param)\r\n                    ; the elements herein may appear in any order,\r\n                    ; and the order is not significant.", "notes": "The original text defines that all of the LINKREL, FMTTYPE, LABEL, LANGUAGE parameters MUST be set at least once. However, the examples do not adhere to this rule. Instead they suggest that only LINKREL and VALUE are mandatory.\r\n\r\nThe corrected text defines the FMTTYPE, LABEL, and LANGUAGE parameters to be optional and that they only should be set at most once.\r\n\r\nThe linkparam definition still allows the LINKREL parameter to be set multiple times. This might not have been the original intent. The ABNF might also get updated to restrict it to be set exactly once.", "submit_date": "2024-10-24", "submitter_name": "Robert Stepanek", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8155", "doc-id": "RFC2822", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.1.1", "orig_text": "Again, even though this limitation is put on\r\n   messages, it is encumbant upon implementations which display messages\r\n   to handle an arbitrarily large number of characters in a line\r\n   (certainly at least up to the 998 character limit) for the sake of\r\n   robustness.", "correct_text": "Again, even though this limitation is put on \r\n   messages, it is incumbent upon implementations which display messages\r\n   to handle an arbitrarily large number of characters in a line \r\n   (certainly at least up to the 998 character limit) for the sake of \r\n   robustness.", "notes": "\"encumbant\" seems to be a typo of \"incumbent\".\n --VERIFIER NOTES-- \nRFC 2822 is obsoleted by RFC 5322, and this typo was corrected in RFC 5322. The RFC Editor is thus rejecting this erratum per #7 on the \u201cIESG Processing of RFC Errata for the IETF Stream\u201d (https://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20210507/).   ", "submit_date": "2024-10-23", "submitter_name": "\u6797\u535a\u4ec1(Buo-ren Lin)", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-10-24 18:37:09"}, {"errata_id": "8162", "doc-id": "RFC9328", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "   A single NAL unit packet contains exactly one NAL unit and consists\r\n   of a payload header, as defined in Table 5 of [VVC]", "correct_text": "   A single NAL unit packet contains exactly one NAL unit and consists\r\n   of a payload header, as defined in Section 7.3.1.2 of [VVC]", "notes": "Table 5 of T-REC-H.266-202309 lists NAL unit type codes, but the text here discusses the NAL unit header format, which is defined in Section 7.3.1.2.\r\n\r\nThe same happens in sections 4.3.2 and 4.3.3.\r\n", "submit_date": "2024-10-31", "submitter_name": "Carlos Falgueras Garc\u00eda", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-19 07:11:16"}, {"errata_id": "8210", "doc-id": "RFC8894", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "If the key being certified allows encryption, then the CA's\r\nCertResp will use the same certificate's public key when\r\nencrypting the response.\r\n", "correct_text": "If the key being certified allows encryption, then the CA's\r\nCertRep will use the same certificate's public key when\r\nencrypting the response.", "notes": "There is no \"CertResp\" defined in the document. I believe this is supposed to be \"CertRep\".", "submit_date": "2024-12-10", "submitter_name": "Angelica Semenec", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-12-11 16:49:25"}, {"errata_id": "8212", "doc-id": "RFC9347", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   As the use of the AGGFRAG_PAYLOAD payload is currently only defined\r\n   for non-transport-mode tunnels, the USE_AGGFRAG notification MUST NOT\r\n   be combined with the USE_TRANSPORT notification.\r\n", "correct_text": "   As the use of the AGGFRAG_PAYLOAD payload is currently only defined\r\n   for non-transport-mode tunnels, the USE_AGGFRAG notification MUST NOT\r\n   be combined with the USE_TRANSPORT_MODE notification.\r\n", "notes": "There is no \"USE_TRANSPORT\" notification in IKEv2. The correct name is \"USE_TRANSPORT_MODE \"(note, that in the other place of this Section the correct name was used).", "submit_date": "2024-12-18", "submitter_name": "Valery Smyslov", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8872", "doc-id": "RFC9907", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.19.2", "orig_text": "   This practice is not safe for identities defined in a common module\r\n   such as \"iana-if-type\" because the client is not required to know\r\n   about \"my-module\" just because it knows about the \"iana-if-type\"\r\n   module.", "correct_text": "   This practice is not safe for identities defined in a common module\r\n   such as \"iana-if-type\" because the client is not required to know\r\n   about \"example-module\" just because it knows about the \"iana-if-type\"\r\n   module.", "notes": "The module in that section is called \"example-module\". Maybe \"my-module\" was used previously but the text in the last paragraph wasn't changed.", "submit_date": "2026-04-08", "submitter_name": "Reshad Rahman", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-04-09 17:09:44"}, {"errata_id": "8874", "doc-id": "RFC8259", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "6.  Numbers\r\n\r\n   The representation of numbers is similar to that used in most\r\n   programming languages.  A number is represented in base 10 using\r\n   decimal digits.  It contains an integer component that may be\r\n   prefixed with an optional minus sign, which may be followed by a\r\n   fraction part and/or an exponent part.  Leading zeros are not\r\n   allowed.\r\n\r\n   A fraction part is a decimal point followed by one or more digits.\r\n\r\n   An exponent part begins with the letter E in uppercase or lowercase,\r\n   which may be followed by a plus or minus sign.  The E and optional\r\n   sign are followed by one or more digits.\r\n\r\n   Numeric values that cannot be represented in the grammar below (such\r\n   as Infinity and NaN) are not permitted.\r\n\r\n      number = [ minus ] int [ frac ] [ exp ]\r\n\r\n      decimal-point = %x2E       ; .\r\n\r\n      digit1-9 = %x31-39         ; 1-9\r\n\r\n      e = %x65 / %x45            ; e E\r\n\r\n      exp = e [ minus / plus ] 1*DIGIT\r\n\r\n      frac = decimal-point 1*DIGIT\r\n\r\n      int = zero / ( digit1-9 *DIGIT )\r\n\r\n      minus = %x2D               ; -\r\n\r\n      plus = %x2B                ; +\r\n\r\n      zero = %x30                ; 0\r\n\r\n   This specification allows implementations to set limits on the range\r\n   and precision of numbers accepted.  Since software that implements\r\n   IEEE 754 binary64 (double precision) numbers [IEEE754] is generally\r\n   available and widely used, good interoperability can be achieved by\r\n   implementations that expect no more precision or range than these\r\n   provide, in the sense that implementations will approximate JSON\r\n   numbers within the expected precision.  A JSON number such as 1E400\r\n   or 3.141592653589793238462643383279 may indicate potential\r\n   interoperability problems, since it suggests that the software that\r\n   created it expects receiving software to have greater capabilities\r\n   for numeric magnitude and precision than is widely available.\r\n\r\n   Note that when such software is used, numbers that are integers and\r\n   are in the range [-(2**53)+1, (2**53)-1] are interoperable in the\r\n   sense that implementations will agree exactly on their numeric\r\n   values.", "correct_text": "...\r\nTODO something like\r\nhttps://github.com/adligo/ten10b_v1.adligo.org\r\nalso see\r\nhttps://www.ietf.org/archive/id/draft-morgan-ten64-00.html#commentary\r\n...", "notes": "Since JSON is based on ECMAScript now, it should be explicit in how ECMAScript's (decimal) numbers are serialized and deserialized.  It should include which algorithms should be used, when, and why.  It should be exceedingly specific about rounding, if and when rounding should ever be used!  Without being explicit, various implementations will not be able to communicate apples to apples.\n --VERIFIER NOTES-- \n JSON is not based on ECMAScript.\r\n\r\nSee email thread: https://mailarchive.ietf.org/arch/msg/json/gucVG-EN3b2XJsKBsOJBU_6-LLI/", "submit_date": "2026-04-09", "submitter_name": "Scott Morgan", "verifier_id": "", "verifier_name": "Andrew Newton", "update_date": "2026-04-13 20:07:33"}, {"errata_id": "8876", "doc-id": "RFC4949", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "In some schemes, the signature is appended to the signed object as stated by definition 2, but in other it, schemes is not.", "correct_text": "In some schemes, the signature is appended to the signed object as stated by definition 2, but in other schemes, it is not.", "notes": "'it' and 'schemes' are erroneously switched in definition (2) of 'digital signature'.", "submit_date": "2026-04-11", "submitter_name": "Waldo Luis Ribeiro", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-06-30 15:16:28"}, {"errata_id": "8160", "doc-id": "RFC2324", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.2.2.1", "orig_text": "        addition-type   = ( \"*\"\r\n                          | milk-type\r\n                          | syrup-type\r\n                          | sweetener-type\r\n                          | spice-type\r\n                          | alcohol-type\r\n                          ) *( \";\" parameter )\r\n        milk-type       = ( \"Cream\" | \"Half-and-half\" | \"Whole-milk\"\r\n                          | \"Part-Skim\" | \"Skim\" | \"Non-Dairy\" )\r\n        syrup-type      = ( \"Vanilla\" | \"Almond\" | \"Raspberry\"\r\n                          | \"Chocolate\" )\r\n        alcohol-type    = ( \"Whisky\" | \"Rum\" | \"Kahlua\" | \"Aquavit\" )", "correct_text": "        addition-type   = ( \"*\"\r\n                          | milk-type\r\n                          | syrup-type\r\n                          | sweetener-type\r\n                          | spice-type\r\n                          | alcohol-type\r\n                          ) *( \";\" parameter )\r\n        milk-type       = ( \"Cream\" | \"Half-and-half\" | \"Whole-milk\"\r\n                          | \"Part-Skim\" | \"Skim\" | \"Non-Dairy\" )\r\n        sweetener-type  = ( \"Sugar\" | \"Saccharine\" | \"Cyclamate\"\r\n                          | \"Neotame\" | \"Aspartame\" )\r\n        spice-type      = ( \"Chicory\" | \"Cocoa\" | \"Cinnamon\"\r\n                          | \"Cardamom\" )\r\n        syrup-type      = ( \"Vanilla\" | \"Almond\" | \"Raspberry\"\r\n                          | \"Chocolate\" )\r\n        alcohol-type    = ( \"Whisky\" | \"Rum\" | \"Kahlua\" | \"Aquavit\" )", "notes": "two nonterminal symbols referenced as`additition-type` alternatives are undefined: `sweetener-type` and `spice-type`. in the absence of enumerated sweetener and spice values for so many years, users, authors, and implementers who needed or needed to support spices and (non-syrup) sweeteners were forced to improvise, leading to widespread interoperability issues, especially due to the use of brand name molecules. obviously this madness must end.\n --VERIFIER NOTES-- \n   Thank you for your submission.  While I fully agree with the sentiment, the change would require a document update, and this RFC will not be updated.", "submit_date": "2024-10-29", "submitter_name": "bathos whitespace", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-10-29 16:41:58"}, {"errata_id": "8163", "doc-id": "RFC2157", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "           encoding [1] IA5String OPTIONAl -- e.g. quoted-printable\r\n", "correct_text": "           encoding [1] IA5String OPTIONAL -- e.g. quoted-printable\r\n", "notes": "The word OPTIONAL has a lower case l at the end instead of an upper case L", "submit_date": "2024-10-31", "submitter_name": "Wes Hardaker", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-11-01 18:21:43"}, {"errata_id": "8164", "doc-id": "RFC9673", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.", "orig_text": "This is consistent with [RFC6564].  This is consistent with [RFC6564].", "correct_text": "This is consistent with [RFC6564].", "notes": "Same sentence is repeated back to back.", "submit_date": "2024-11-01", "submitter_name": "Fernando Gont", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-11-01 18:18:35"}, {"errata_id": "8295", "doc-id": "RFC3365", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "We often say that Security is a MUST implement.  It is worth noting that \r\nthere is a significant different between MUST implement and MUST use.", "correct_text": "We often say that Security is a MUST implement.  It is worth noting that \r\nthere is a significant difference between MUST implement and MUST use.", "notes": "Grammar mistake: \"different\" should be \"difference\"", "submit_date": "2025-02-12", "submitter_name": "Robert Sayre", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-07 21:50:49"}, {"errata_id": "8297", "doc-id": "RFC8410", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "   -----BEGIN PRIVATE KEY-----\r\n   MHICAQEwBQYDK2VwBCIEINTuctv5E1hK1bbY8fdp+K06/nwoy/HU++CXqI9EdVhC\r\n   oB8wHQYKKoZIhvcNAQkJFDEPDA1DdXJkbGUgQ2hhaXJzgSEAGb9ECWmEzf6FQbrB\r\n   Z9w7lshQhqowtrbLDFw4rXAxZuE=\r\n   -----END PRIVATE KEY------\r\n", "correct_text": "(re-encoded with correct attribute OID, see notes)", "notes": "This encoded private key contains an attribute with OID \"1 2 840 113549 1 9 9 20\", which is not assigned to anything. Likely, the intent was to use \"1 2 840 113549 1 9 20\" (one fewer 9), which is pkcs-9-at-friendlyName from RFC 2985.\r\n\r\nThe same private key also appears in section 10.3.", "submit_date": "2025-02-16", "submitter_name": "Roman Donchenko", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-04-03 17:33:46"}, {"errata_id": "8298", "doc-id": "RFC9568", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": "    It MUST verify that the VRID is configured on the receiving\r\n    interface and the local router is not the IPvX address owner\r\n    (Priority = 255 (decimal)).\r\n\r\nIf any one of the above checks fails, the receiver MUST discard the\r\npacket, SHOULD log the event (subject to rate-limiting), and MAY\r\nindicate via network management that an error occurred.", "correct_text": "    It MUST verify that the VRID is configured on the receiving\r\n    interface.\r\n\r\nIf any one of the above checks fails, the receiver MUST discard the\r\npacket, SHOULD log the event (subject to rate-limiting), and MAY\r\nindicate via network management that an error occurred.\r\n\r\nIt SHOULD verify that the local router is not the IPvX address owner\r\n(Priority = 255 (decimal)) and log the event (subject to\r\nrate-limiting) and MAY indicate via network management that a\r\nmisconfiguration was detected.", "notes": "Although it is clearly a configuration error, if two (or more) VRRP routers are configured as the address owner for the same VRID, if received VRRP packets are just dropped (as specified in section 7.1), all such routers will remain in Active state, will continue sending VRRP adverts, and will respond to ARP/ND requests. This will make communication with any VIP unachievable, or at best unreliable.\r\n\r\nIf the VRRP packets are not dropped, but processed in the normal way, in section 6.4.3 - \"Active\", following \"If an ADVERTISEMENT is received\", then:\r\n   . If the Priority in the ADVERTISEMENT is greater than the\r\n     local Priority or the Priority in the ADVERTISEMENT is equal\r\n     to the local Priority and the primary IPvX address of the\r\n     sender is greater than the local primary IPvX address (based\r\n     on an unsigned integer comparison of the IPvX addresses in\r\n     network byte order), then:\r\n         ...\r\n         Transition to the {Backup} state\r\n\r\nwill cause all except one of the VRRP routers to revert to Backup state, and the VRRP instance will be stable.", "submit_date": "2025-02-17", "submitter_name": "Quentin Armitage", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2025-03-06 13:15:17"}, {"errata_id": "8299", "doc-id": "RFC9568", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": " * It MUST verify that the VRID is configured on the receiving\r\n   interface and the local router is not the IPvX address owner\r\n   (Priority = 255 (decimal)).\r\n\r\nIf any one of the above checks fails, the receiver MUST discard the\r\npacket, SHOULD log the event (subject to rate-limiting), and MAY\r\nindicate via network management that an error occurred.", "correct_text": " * It MUST verify that the VRID is configured on the receiving\r\n   interface and the local router is not the IPvX address owner\r\n   (Priority = 255 (decimal)).\r\n\r\n * It MUST verify that IPvX Addr Count is non zero.\r\n\r\nIf any one of the above checks fails, the receiver MUST discard the\r\npacket, SHOULD log the event (subject to rate-limiting), and MAY\r\nindicate via network management that an error occurred.", "notes": "The only change above is adding:\r\n  * It MUST verify that IPvX Addr Count is non zero.\r\n\r\nThis is due to section 5.2.5 requiring it:\r\n\r\n5.2.5. IPvX Addr Count\r\n\r\nThe IPvX Addr Count field is the number of either IPv4 addresses or IPv6 addresses contained in this VRRP advertisement. The minimum value is 1. If the received count is 0, the VRRP advertisement MUST be ignored.", "submit_date": "2025-02-17", "submitter_name": "Quentin Armitage", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2025-03-06 13:19:10"}, {"errata_id": "8300", "doc-id": "RFC9568", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.1", "orig_text": " * It MUST verify that the VRID is configured on the receiving\r\n   interface and the local router is not the IPvX address owner\r\n   (Priority = 255 (decimal)).\r\n\r\nIf any one of the above checks fails, the receiver MUST discard the\r\npacket, SHOULD log the event (subject to rate-limiting), and MAY\r\nindicate via network management that an error occurred.", "correct_text": " * It MUST verify that the VRID is configured on the receiving\r\n   interface and the local router is not the IPvX address owner\r\n   (Priority = 255 (decimal)).\r\n\r\n * If the received packet is an IPv6 packet, then:\r\n    - It MUST verify that the first address in the IPvX Address(es)\r\n      field is an IPv6 link-local address.\r\n\r\nIf any one of the above checks fails, the receiver MUST discard the\r\npacket, SHOULD log the event (subject to rate-limiting), and MAY\r\nindicate via network management that an error occurred.", "notes": "The change only adds checking that the first IPv6 address is link-local.\r\n\r\nSection 5.2.9 states:\r\nFor IPv6, the first address MUST be the IPv6 link-local address associated with the Virtual Router.\r\n\r\nSection 6.1 also states (although this may relate to the configuration rather than the VRRP packet contents):\r\nIPv6_Addresses    One or more IPv6 addresses associated with this Virtual Router. Configured list of addresses with no default. The first address MUST be the Link-Local address associated with the Virtual Router.", "submit_date": "2025-02-17", "submitter_name": "Quentin Armitage", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2025-03-06 13:18:36"}, {"errata_id": "8319", "doc-id": "RFC8666", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "   Example 1: If the following router addresses (loopback addresses)\r\n   need to be mapped into the corresponding Prefix-SID indexes:\r\n\r\n             Router-A: 2001:DB8::1/128, Prefix-SID: Index 1\r\n             Router-B: 2001:DB8::2/128, Prefix-SID: Index 2\r\n             Router-C: 2001:DB8::3/128, Prefix-SID: Index 3\r\n             Router-D: 2001:DB8::4/128, Prefix-SID: Index 4\r\n\r\n   then the Address Prefix field in the OSPFv3 Extended Prefix Range TLV\r\n   would be set to 2001:DB8::1, the Prefix Length would be set to 128,\r\n   the Range Size would be set to 4, and the Index value in the Prefix-\r\n   SID sub-TLV would be set to 1.\r\n\r\n   Example 2: If the following prefixes need to be mapped into the\r\n   corresponding Prefix-SID indexes:\r\n\r\n             2001:DB8:1::0/120,   Prefix-SID: Index 51\r\n             2001:DB8:1::100/120, Prefix-SID: Index 52\r\n             2001:DB8:1::200/120, Prefix-SID: Index 53\r\n             2001:DB8:1::300/120, Prefix-SID: Index 54\r\n             2001:DB8:1::400/120, Prefix-SID: Index 55\r\n             2001:DB8:1::500/120, Prefix-SID: Index 56\r\n             2001:DB8:1::600/120, Prefix-SID: Index 57\r\n\r\n   then the Prefix field in the OSPFv3 Extended Prefix Range TLV would\r\n   be set to 2001:DB8:1::0, the Prefix Length would be set to 120, the\r\n   Range Size would be set to 7, and the Index value in the Prefix-SID\r\n   sub-TLV would be set to 51.", "correct_text": "   Example 1: If the following router addresses (loopback addresses)\r\n   need to be mapped into the corresponding Prefix-SID indexes:\r\n\r\n             Router-A: 2001:db8::1/128, Prefix-SID: Index 1\r\n             Router-B: 2001:db8::2/128, Prefix-SID: Index 2\r\n             Router-C: 2001:db8::3/128, Prefix-SID: Index 3\r\n             Router-D: 2001:db8::4/128, Prefix-SID: Index 4\r\n\r\n   then the Address Prefix field in the OSPFv3 Extended Prefix Range TLV\r\n   would be set to 2001:db8::1, the Prefix Length would be set to 128,\r\n   the Range Size would be set to 4, and the Index value in the Prefix-\r\n   SID sub-TLV would be set to 1.\r\n\r\n   Example 2: If the following prefixes need to be mapped into the\r\n   corresponding Prefix-SID indexes:\r\n\r\n             2001:db8:1::0/120,   Prefix-SID: Index 51\r\n             2001:db8:1::100/120, Prefix-SID: Index 52\r\n             2001:db8:1::200/120, Prefix-SID: Index 53\r\n             2001:db8:1::300/120, Prefix-SID: Index 54\r\n             2001:db8:1::400/120, Prefix-SID: Index 55\r\n             2001:db8:1::500/120, Prefix-SID: Index 56\r\n             2001:db8:1::600/120, Prefix-SID: Index 57\r\n\r\n   then the Prefix field in the OSPFv3 Extended Prefix Range TLV would\r\n   be set to 2001:DB8:1::0, the Prefix Length would be set to 120, the\r\n   Range Size would be set to 7, and the Index value in the Prefix-SID\r\n   sub-TLV would be set to 51.", "notes": "The OLD does not follow this recommendation from rfc5952#section-4.3\r\n\r\n   The characters \"a\", \"b\", \"c\", \"d\", \"e\", and \"f\" in an IPv6 address\r\n   MUST be represented in lowercase.", "submit_date": "2025-03-02", "submitter_name": "Mohamed BOUCADAIR", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2025-03-07 19:40:03"}, {"errata_id": "8321", "doc-id": "RFC9605", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4.3", "orig_text": "def encrypt(CTR, KID, metadata, plaintext):\r\nsframe_key, sframe_salt = key_store[KID]\r\n# encode_big_endian(x, n) produces an n-byte string encoding the\r\n# integer x in big-endian byte order.\r\nctr = encode_big_endian(CTR, AEAD.Nn)\r\nnonce = xor(sframe_salt, CTR)\r\n# encode_sframe_header produces a byte string encoding the\r\n# provided KID and CTR values into an SFrame header.\r\nheader = encode_sframe_header(CTR, KID)\r\naad = header + metadata\r\nciphertext = AEAD.Encrypt(sframe_key, nonce, aad, plaintext)\r\nreturn header + ciphertext", "correct_text": "def encrypt(CTR, KID, metadata, plaintext):\r\nsframe_key, sframe_salt = key_store[KID]\r\n# encode_big_endian(x, n) produces an n-byte string encoding the\r\n# integer x in big-endian byte order.\r\nctr = encode_big_endian(CTR, AEAD.Nn)\r\nnonce = xor(sframe_salt, ctr)\r\n# encode_sframe_header produces a byte string encoding the\r\n# provided KID and CTR values into an SFrame header.\r\nheader = encode_sframe_header(CTR, KID)\r\naad = header + metadata\r\nciphertext = AEAD.Encrypt(sframe_key, nonce, aad, plaintext)\r\nreturn header + ciphertext", "notes": "The formation of the nonce states to xor the sframe_salt with CTR, which is the original counter value, not the encoded big endian representation created on the line above, which I believe is the intention.", "submit_date": "2025-03-03", "submitter_name": "Rich Logan", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-03-25 14:39:17"}, {"errata_id": "8337", "doc-id": "RFC8928", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "Figure 1: Enhanced Address Registration Option", "correct_text": "Figure 1: Extended Address Registration Option", "notes": "E stands for Extended instead of Enhanced, as per the initial standard RFC 8505. The name should remain the same as shown in RFCs 8505, 9685, and other related RFCs.", "submit_date": "2025-03-18", "submitter_name": "Adnan Rashid", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-19 13:48:49"}, {"errata_id": "8336", "doc-id": "RFC2986", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "certificateRequestInfo is the \"certification request information.\"", "correct_text": "certificationRequestInfo is the \"certification request information.\"", "notes": "There is no other reference to \"certificateRequestInfo\" and the ASN.1 definition specifies \"certificationRequestInfo\".", "submit_date": "2025-03-17", "submitter_name": "Angelica Semenec", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-18 18:41:40"}, {"errata_id": "8301", "doc-id": "RFC9568", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1", "orig_text": "Advertisement_Interval  Time interval between VRRP Advertisements\r\n   (centiseconds) sent by this Virtual Router. Default is 100\r\n   centiseconds (1 second).\r\n\r\n\r\n and section 7.1 says:\r\n\r\n * It MUST verify that the VRID is configured on the receiving\r\n   interface and the local router is not the IPvX address owner\r\n   (Priority = 255 (decimal)).\r\n\r\nIf any one of the above checks fails, the receiver MUST discard the\r\npacket, SHOULD log the event (subject to rate-limiting), and MAY\r\nindicate via network management that an error occurred.", "correct_text": "Advertisement_Interval  Time interval between VRRP Advertisements\r\n   (centiseconds) sent by this Virtual Router. Configurable value\r\n   in the range 1-4095 (centiseconds). Default is 100 centiseconds\r\n   (1 second).\r\n\r\n and section 7.1 should say:\r\n\r\n * It MUST verify that the VRID is configured on the receiving\r\n   interface and the local router is not the IPvX address owner\r\n   (Priority = 255 (decimal)).\r\n\r\n *  It MUST verify that the Max Advertise Interval is non zero.\r\n\r\nIf any one of the above checks fails, the receiver MUST discard the\r\npacket, SHOULD log the event (subject to rate-limiting), and MAY\r\nindicate via network management that an error occurred.", "notes": "The Skew_Time and Active_Down_Time are calculated by multiplying by Active_Adver_Interval which is the Advertisement_Interval of the current active virtual router. A value of 0 for the Active_Adver_Interval will result in Skew_Time and Active_Down_Interval being 0 (centiseconds). The consequence of this is that all backup routers will immediately time out the Active_Down_Interval and transition to Active state. All but the lowest priority virtual router will send an advert, all virtual routes will keep timing out and sending VRRP adverts and the LAN will be flooded with VRRP packets.\r\n\r\nIt causes mayhem (I have tried it)!", "submit_date": "2025-02-17", "submitter_name": "Quentin Armitage", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2025-03-06 13:17:26"}, {"errata_id": "8302", "doc-id": "RFC8341", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.3", "orig_text": "   Not all RESTCONF methods are subject to access control.  The\r\n   following table specifies how each method is mapped to NETCONF\r\n   protocol operations.  The value \"none\" indicates that the NACM is not\r\n   applied at all to the specific RESTCONF method.\r\n\r\n   +---------+-----------------+---------------------+-----------------+\r\n   | Method  | Resource class  | NETCONF operation   | Access          |\r\n   |         |                 |                     | operation       |\r\n   +---------+-----------------+---------------------+-----------------+\r\n   | OPTIONS | all             | none                | none            |\r\n   | HEAD    | all             | <get>, <get-config> | read            |\r\n   | GET     | all             | <get>, <get-config> | read            |\r\n   | POST    | datastore, data | <edit-config>       | create          |\r\n   | POST    | operation       | specified operation | execute         |\r\n   | PUT     | data            | <edit-config>       | create, update  |\r\n   | PUT     | datastore       | <copy-config>       | update          |\r\n   | PATCH   | data, datastore | <edit-config>       | update          |\r\n   | DELETE  | data            | <edit-config>       | delete          |\r\n   +---------+-----------------+---------------------+-----------------+\r\n\r\n               Table 1: Mapping RESTCONF Methods to NETCONF", "correct_text": "   o   For GET requests on event stream resources (i.e. subscriptions),\r\n       map access control to the <create-subscription> RPC in NETCONF\r\n       Notifications [RFC5277]. See Section 3.4.6 for details when\r\n       authorizing notifications.\r\n\r\n   Not all RESTCONF methods are subject to access control.  The\r\n   following table specifies how each method is mapped to NETCONF\r\n   protocol operations.  The value \"none\" indicates that the NACM is not\r\n   applied at all to the specific RESTCONF method.\r\n\r\n   +---------+-----------------+-----------------------+-----------------+\r\n   | Method  | Resource class  | NETCONF operation     | Access          |\r\n   |         |                 |                       | operation       |\r\n   +---------+-----------------+-----------------------+-----------------+\r\n   | OPTIONS | all             | none                  | none            |\r\n   | HEAD    | all             | <get>, <get-config>   | read            |\r\n   | GET     | all             | <get>, <get-config>   | read            |\r\n   | GET     | event stream    | <create-subscription> | execute, read   |\r\n   | POST    | datastore, data | <edit-config>         | create          |\r\n   | POST    | operation       | specified operation   | execute         |\r\n   | PUT     | data            | <edit-config>         | create, update  |\r\n   | PUT     | datastore       | <copy-config>         | update          |\r\n   | PATCH   | data, datastore | <edit-config>         | update          |\r\n   | DELETE  | data            | <edit-config>         | delete          |\r\n   +---------+-----------------+-----------------------+-----------------+\r\n\r\n               Table 1: Mapping RESTCONF Methods to NETCONF", "notes": "It seems to have been an oversight when the document was\r\nwritten to map RESTCONF Event Streams [0] to the correct\r\ncorresponding NETCONF resource class.\r\n\r\nNETCONF Notifications are handled by checking the \"action\"\r\nleaf in the matching rule. [1]\r\n\r\n   8.   If a matching rule is found, then the \"action\" leaf is checked.\r\n        If it is equal to \"permit\", then permit the notification;\r\n        otherwise, drop the notification for the associated\r\n        subscription.\r\n\r\nIt is not specified anywhere that the corresponding functionality\r\nshould work the same for RESTCONF, although it is the intention\r\nin RFC 8040 and RFC 8341. This can however be inferred\r\nand understood as such.\r\n\r\nHowever, the resource class mapping is wrong for RESTCONF\r\nevent stream resource the mapping would use GET, and hence\r\ncheck only the \"read\" leaf. This is wrong and does not align with\r\nthe instructions on how to handle notifications in Section 3.4.6;\r\nwhich is to first check the \"execute\" leaf, then check the\r\n\"read-default\" leaf.\r\n\r\n[0] RFC 8040 Sections 3.8 and 6\r\n[1] RFC 8341 Section 3.4.6", "submit_date": "2025-02-20", "submitter_name": "Per Andersson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8303", "doc-id": "RFC8460", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "The DKIM TXT record SHOULD contain the appropriate service type declaration, \"s=tlsrpt\"\r\n\r\n", "correct_text": "Section 6 does not request IANA to update the DKIM service type list\r\nhttps://www.iana.org/assignments/dkim-parameters/dkim-parameters.xhtml#dkim-parameters-8 still does not list \"tlsrpt\" as a valid service type.", "notes": "It seems, the request to IANA to update the list was just forgotten.", "submit_date": "2025-02-20", "submitter_name": "Andreas Schulze", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8333", "doc-id": "RFC8960", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   2.  The operation to perform on the packet's label stack.  This can\r\n       be one of the following operations:\r\n", "correct_text": "    2.  The operation to perform on the packet's label stack which \r\n        is implicitly derived from the mpls-label-stack container \r\n        (in nhlfe-single-contents/nhlfe-multiple-contents) and the \r\n        \"mpls-local-label\" leaf.  This can be one of the following\r\n        operations:\r\n", "notes": "A previous erratum, number 7944, was opened and ultimately closed as erroneous. In the discussion of that erratum, https://mailarchive.ietf.org/arch/msg/mpls/hzb3iO0Mn_Z4eyaPiUkMig_8JkE/ the clarification found in this report was suggested.", "submit_date": "2025-03-17", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2025-03-17 02:14:46"}, {"errata_id": "8334", "doc-id": "RFC4408", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Network Working Group                                            M. Wong\r\nRequest for Comments: 4408                                    W. Schlitt\r\nCategory: Experimental                                        April 2006\r\n\r\n", "correct_text": "Network Working Group                                            M. Wong\r\nRequest for Comments: 4408                                    W. Schlitt\r\nCategory: Experimental                                        April 2006\r\nOBSOLETED BY: 7208\r\n", "notes": "I saw recent discussions mentioning RFC 4408 and copying the phrase \"it does not specify an Internet standard of any kind\", which implies the authors browsed the RFC but didn't see a link to the actual version of SPF.\n --VERIFIER NOTES-- \nCurrently, \u201cObsoleted by\u201d appears on the info page, html format, and Datatracker page for each RFC, but not in the txt or pdf formats.", "submit_date": "2025-03-17", "submitter_name": "Alessandro Vesely", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-21 20:37:17"}, {"errata_id": "8306", "doc-id": "RFC3915", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.5", "orig_text": "When an extended <update> command without a restore report has been\r\nprocessed successfully, the EPP response is as described in the EPP\r\ndomain mapping [2] except that an extension element is added to\r\ndescribe grace period status as a result of processing the <update>\r\ncommand.  The extension element contains a single child element\r\n(<upData>) that itself contains a single child element (<rgpStatus>)\r\nthat contains a single attribute \"s\" whose value MUST be\r\n\"pendingRestore\" if the <restore> request has been accepted.\r\n", "correct_text": "When an extended <update> command without a restore report has been\r\nprocessed successfully, the EPP response is as described in the EPP\r\ndomain mapping [2] except that an extension element is added to\r\ndescribe grace period status as a result of processing the <update>\r\ncommand.  The extension element contains a single child element\r\n(<upData>) that itself contains one more <rgpStatus> child elements,\r\neach of which contain a single attribute \"s\" whose value describes\r\none of the current grace period status of the domain. Possible status\r\nvalues are described in section Section 3.1. At least one <rgpStatus>\r\nelement MUST have an \"s\" attribute with a value of \"pendingRestore\"\r\nif the <restore> request has been accepted.\r\n", "notes": "The XML schema in Section 5 sets the maximum number of occurrences of the <rgpStatus> element to be unbounded, meaning that any number of elements may be present.\r\n\r\nThis correction updates the text to reflect the XML schema.\n --VERIFIER NOTES-- \nOfflist discussions concluded that the <update> response could only contain a single <rgpStatus> element.", "submit_date": "2025-02-21", "submitter_name": "Gavin Brown", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-03-28 17:51:08"}, {"errata_id": "8307", "doc-id": "RFC6488", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "The content-type is the signed-data type of id-data, namely the id-signedData OID [RFC5652], 1.2.840.113549.1.7.2.", "correct_text": "The content-type is the id-signedData OID [RFC5652], 1.2.840.113549.1.7.2.", "notes": "id-data (OID 1.2.840.113549.1.7.1) and id-signedData are siblings in the pkcs7 arc, so the latter is not a type of the former.\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/sidrops/_FuWIR0d5V53VGGGSh-6MKlqLxI/\r\n\r\nVerifier note:\r\n\r\nSee also also, https://mailarchive.ietf.org/arch/msg/sidr/wIwQ1bsGCKC6V9sPNtRoJ3gntxo/\r\n\r\nVerifier note:\r\n\r\nSee also also, https://mailarchive.ietf.org/arch/msg/sidr/wIwQ1bsGCKC6V9sPNtRoJ3gntxo/", "submit_date": "2025-02-21", "submitter_name": "Theo Buehler", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2025-02-22 20:14:42"}, {"errata_id": "8308", "doc-id": "RFC6492", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "The content-type is the signed-data type of id-data, namely id-signedData, OID = 1.2.840.113549.1.7.2.  [RFC5652]", "correct_text": "The content-type is the id-signedData OID 1.2.840.113549.1.7.2.  [RFC5652]", "notes": "id-data (OID 1.2.840.113549.1.7.1) and id-signedData are siblings in the pkcs7 arc, so the latter is not a type of the former.\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/sidrops/_FuWIR0d5V53VGGGSh-6MKlqLxI/\r\n\r\nVerifier note:\r\n\r\nSee also also, https://mailarchive.ietf.org/arch/msg/sidr/wIwQ1bsGCKC6V9sPNtRoJ3gntxo/", "submit_date": "2025-02-21", "submitter_name": "Theo Buehler", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2025-02-22 20:13:57"}, {"errata_id": "8323", "doc-id": "RFC5927", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "Appendix D of [RFC4301] provides information about which ICMPv4 error\r\nmessages are produced by hosts, intermediate routers, or both.\r\n...\r\nAppendix D of [RFC4301] provides information about which ICMPv6 error\r\nmessages are produced by hosts, intermediate routers, or both.", "correct_text": "[Text sections are removed - see the notes]", "notes": "Text deleted as they are not necessary, since the \r\ncorrect references to ICMPv4 (RFC792) and ICMPv6 (RFC2460) are already \r\npresent.\r\n\r\nSee the discussions here (https://mailarchive.ietf.org/arch/msg/tcpm/OkmxfectGJJ92thymY-CS375fzQ/).", "submit_date": "2025-03-10", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-19 02:19:17"}, {"errata_id": "8346", "doc-id": "RFC2832", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.3.9.2", "orig_text": "   Examples\r\n\r\n   The current registrar of a name server queries the name server:\r\n\r\n   C:status<crlf>\r\n   C:EntityName:NameServer<crlf>\r\n   C:NameServer:ns1.registrarA.com<crlf>\r\n   C:.<crlf>\r\n   S:200 Command completed successfully<crlf>\r\n   S:ipaddress:198.42.1.11<crlf>\r\n   S:registrar:registrarA<crlf>\r\n   S:registrar transfer date:1999-09-22 10:27:00.0<crlf>\r\n   S:CreatedDate:1998-09-22 10:27:00.0<crlf>\r\n   S:CreatedBy:registrarA<crlf>\r\n   S:UpdatedDate:2002-09-22 10:27:00.0<crlf>\r\n   S:UpdatedBy:registrarA<crlf>\r\n   S:.<crlf>", "correct_text": "   Examples\r\n\r\n   The current registrar of a name server queries the name server:\r\n\r\n   C:status<crlf>\r\n   C:EntityName:NameServer<crlf>\r\n   C:NameServer:ns1.registrarA.com<crlf>\r\n   C:.<crlf>\r\n   S:200 Command completed successfully<crlf>\r\n   S:ipaddress:198.42.1.11<crlf>\r\n   S:registrar:registrarA<crlf>\r\n   S:registrar transfer date:1999-09-22 10:27:00.0<crlf>\r\n   S:created date:1998-09-22 10:27:00.0<crlf>\r\n   S:created by:registrarA<crlf>\r\n   S:updated date:2002-09-22 10:27:00.0<crlf>\r\n   S:updated by:registrarA<crlf>\r\n   S:.<crlf>", "notes": "In the example, some of the attributes are written in Pascal Case, when those are described in the section WITH a space and being in lowercase.", "submit_date": "2025-03-25", "submitter_name": "Ben van Hartingsveldt", "verifier_id": "", "verifier_name": null, "update_date": "2025-03-26 18:04:33"}, {"errata_id": "8348", "doc-id": "RFC6891", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.1.2", "orig_text": "   The fixed part of an OPT RR is structured as follows:\r\n\r\n       +------------+--------------+------------------------------+\r\n       | Field Name | Field Type   | Description                  |\r\n       +------------+--------------+------------------------------+\r\n       | NAME       | domain name  | MUST be 0 (root domain)      |\r\n       | TYPE       | u_int16_t    | OPT (41)                     |\r\n       | CLASS      | u_int16_t    | requestor's UDP payload size |\r\n       | TTL        | u_int32_t    | extended RCODE and flags     |\r\n       | RDLEN      | u_int16_t    | length of all RDATA          |\r\n       | RDATA      | octet stream | {attribute,value} pairs      |\r\n       +------------+--------------+------------------------------+", "correct_text": "   The fixed part of an OPT RR is structured as follows:\r\n\r\n       +------------+--------------+------------------------------+\r\n       | Field Name | Field Type   | Description                  |\r\n       +------------+--------------+------------------------------+\r\n       | NAME       | domain name  | MUST be 0 (root domain)      |\r\n       | TYPE       | u_int16_t    | OPT (41)                     |\r\n       | CLASS      | u_int16_t    | sender's UDP payload size    |\r\n       | TTL        | u_int32_t    | extended RCODE and flags     |\r\n       | RDLEN      | u_int16_t    | length of all RDATA          |\r\n       | RDATA      | octet stream | {attribute,value} pairs      |\r\n       +------------+--------------+------------------------------+", "notes": "This restores the definition of EDNS0's OPT CLASS field as \"sender's UDP payload size\" as it appeared in RFC 2671 rather than \"requestor's UDP payload size\" which appeared in RFC 6891 (specifically it appears to have been introduced in draft-ietf-dnsext-rfc2671bis-edns0-02).\r\n\r\nThe requestor is not the same as the sender. The requestor is the protocol endpoint that sends the DNS query message and receives the DNS response message, while the responder is the protocol endpoint that receives the DNS query message and sends the DNS response message. The requestor is the sender when it sends its DNS query message to the responder, and the responder is the sender when it sends its DNS response message to the requestor.\r\n\r\n6891 specifically defines requestor/responder as:\r\n\r\n   \"Requestor\" refers to the side that sends a request.  \"Responder\"\r\n   refers to an authoritative, recursive resolver or other DNS component\r\n   that responds to questions.\r\n\r\n6891's definition of the OPT CLASS field as the \"requestor's UDP payload size\" thus literally means that the responder should copy the requestor's UDP payload size into the OPT CLASS field in the response message that the responder sends. There would then be no place in the packet for the responder to place the responder's UDP payload size, and besides, the requestor doesn't need this information since it already knows its own payload size. This is not consistent with the EDNS0 protocol as a whole, which involves the protocol endpoints (requestor and responder) learning each other's maximum UDP payload sizes, for instance 6891 section 6.2.4:\r\n\r\n   The responder's maximum payload size can change over time but can\r\n   reasonably be expected to remain constant between two closely spaced\r\n   sequential transactions, for example, an arbitrary QUERY used as a\r\n   probe to discover a responder's maximum UDP payload size, followed\r\n   immediately by an UPDATE that takes advantage of this size.\r\n\r\nIn practice, I believe modern EDNS0 responder implementations follow the earlier definition from 2671 and the \"requestor's UDP payload size\" definition in 6891 is a drafting mistake.\r\n\r\nThanks!", "submit_date": "2025-03-27", "submitter_name": "Robert Edmonds", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-07-01 12:16:24"}, {"errata_id": "8310", "doc-id": "RFC5589", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.3", "orig_text": "F5 REFER Transferor -> Transferee\r\n\r\n   REFER sips:3ld812adkjw@biloxi.example.com;gr=3413kj2ha SIP/2.0\r\n   Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bKnashds9\r\n   Max-Forwards: 70\r\n   To: <sips:3ld812adkjw@biloxi.example.com;gr=3413kj2ha>\r\n   From: <sips:transferor@atlanta.example.com>;tag=1928301774\r\n   Call-ID: a84b4c76e66710\r\n   CSeq: 314159 REFER\r\n   Require: tdialog\r\n   <allOneLine>\r\n   Refer-To: <sips:482n4z24kdg@chicago.example.com;gr=8594958?\r\n   Replaces=592435881734450904%3Bto-tag%3D9m2n3wq%3Bfrom-tag3D763231>\r\n   </allOneLine>\r\n   Target-Dialog: 592435881734450904;local-tag=9m2n3wq\r\n    ;remote-tag=763231\r\n   Contact: <sips:4889445d8kjtk3@atlanta.example.com;gr=723jd2d>\r\n   Content-Length: 0", "correct_text": "F5 REFER Transferor -> Transferee\r\n\r\n   REFER sips:3ld812adkjw@biloxi.example.com;gr=3413kj2ha SIP/2.0\r\n   Via: SIP/2.0/TLS pc33.atlanta.example.com;branch=z9hG4bKnashds9\r\n   Max-Forwards: 70\r\n   To: <sips:3ld812adkjw@biloxi.example.com;gr=3413kj2ha>\r\n   From: <sips:transferor@atlanta.example.com>;tag=1928301774\r\n   Call-ID: a84b4c76e66710\r\n   CSeq: 314159 REFER\r\n   Require: tdialog\r\n   <allOneLine>\r\n   Refer-To: <sips:482n4z24kdg@chicago.example.com;gr=8594958?\r\n   Replaces=592435881734450904%3Bto-tag%3D9m2n3wq%3Bfrom-tag3D763231>\r\n   </allOneLine>\r\n   Target-Dialog: 090459243588173445;local-tag=7553452\r\n    ;remote-tag=31431\r\n   Contact: <sips:4889445d8kjtk3@atlanta.example.com;gr=723jd2d>\r\n   Content-Length: 0\r\n", "notes": "In 7.3.  Attended Transfer, message F5 REFER Transferor -> Transferee has a Target-Dialog header that contains the dialog identifying information from the call to the Transfer Target when it should have the ones from the call from the Transferee.", "submit_date": "2025-02-24", "submitter_name": "Julien Rousseau", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8311", "doc-id": "RFC3934", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "BCP: 94", "correct_text": "BCP: 25", "notes": "The IESG decided in December 2011 that RFC 3934 should have been added to BCP 25, instead of being added to a new BCP (BCP 94). At the IESG's request, the RFC Editor moved RFC 3934 to BCP 25 (see https://www.rfc-editor.org/info/bcp25 for the list of RFCs in BCP 25). This leaves BCP 94 empty.", "submit_date": "2025-02-24", "submitter_name": "Jean Mahoney", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-02-24 20:20:48"}, {"errata_id": "8312", "doc-id": "RFC9172", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.6", "orig_text": "/none/", "correct_text": "Any fields of the ASB, including the Security Source, MAY be treated \r\nas untrusted input for key material lookup in support of processing \r\na security operation as a validator or acceptor.\r\nAny fields of the ASB SHALL NOT be used for making other decisions \r\non a node unless they are covered as additional authenticated data \r\nby an successfully validated or accepted integrity or confidentiality \r\noperation on that node.", "notes": "There was no original text restricting how the fields of the ASB can be used by a node. This errata explicitly restricts untrusted inputs in the ASB from influencing node processing, including logic or telemetry based on the Security Source. The default security contexts of RFC 9173 do not yet have the possibility to include the Security Source as additional authenticated data.", "submit_date": "2025-02-24", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8349", "doc-id": "RFC5440", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.14", "orig_text": "         The OVERLOADED-DURATION TLV is compliant with the PCEP TLV\r\n         format defined in Section 7.1 and is comprised of 2 bytes for\r\n         the type, 2 bytes specifying the TLV length (length of the\r\n         value portion in bytes), followed by a fixed-length value field\r\n         of a 32-bit flags field.\r\n\r\n         Type:   2\r\n         Length: 4 bytes\r\n         Value:  32-bit flags field indicates the estimated PCE\r\n                 congestion duration in seconds.", "correct_text": "         The OVERLOADED-DURATION TLV is compliant with the PCEP TLV\r\n         format defined in Section 7.1 and is comprised of 2 bytes for\r\n         the type, 2 bytes specifying the TLV length (length of the\r\n         value portion in bytes), followed by a fixed-length value field\r\n         of 4 bytes.\r\n\r\n         Type:   2\r\n         Length: 4 bytes\r\n         Value:  4 bytes field indicates the estimated PCE\r\n                 congestion duration in seconds.", "notes": "TLV value field marked as 32-bit flags field which needs to be corrected to 4 bytes field.", "submit_date": "2025-03-27", "submitter_name": "Mrinmoy Das", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-04-01 12:10:43"}, {"errata_id": "8350", "doc-id": "RFC8519", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1", "orig_text": "      \"The source and destination port range definitions\r\n       can be further qualified using an operator.  An\r\n       operator is needed only if the lower-port is specified\r\n       and the upper-port is not specified.  The operator\r\n       therefore further qualifies the lower-port only.\";", "correct_text": "      \"A port number definition can be further qualified\r\n       using an operator.\";", "notes": "The operator isn't used with port-ranges because these are defined in distinct cases:\r\n\r\n===\r\n        |        |  |  |     |     +--:(range-or-operator)\r\n        |        |  |  |     |        +--rw (port-range-or-operator)?\r\n        |        |  |  |     |           +--:(range)\r\n        |        |  |  |     |           |  +--rw lower-port\r\n        |        |  |  |     |           |  |       inet:port-number\r\n        |        |  |  |     |           |  +--rw upper-port\r\n        |        |  |  |     |           |          inet:port-number\r\n        |        |  |  |     |           +--:(operator)\r\n        |        |  |  |     |              +--rw operator?     operator\r\n        |        |  |  |     |              +--rw port\r\n==", "submit_date": "2025-03-27", "submitter_name": "Mohamed BOUCADAIR", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8313", "doc-id": "RFC7011", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   E\r\n\r\n      Enterprise bit.  This is the first bit of the Field Specifier.  If\r\n      this bit is zero, the Information Element identifier identifies an\r\n      Information Element in [IANA-IPFIX], and the four-octet Enterprise\r\n      Number field MUST NOT be present.  If this bit is one, the\r\n      Information Element identifier identifies an enterprise-specific\r\n      Information Element, and the Enterprise Number field MUST be\r\n      present.\r\n\r\n   Information Element identifier\r\n\r\n      A numeric value that represents the Information Element.  Refer to\r\n      [IANA-IPFIX].", "correct_text": "   E\r\n\r\n      Enterprise bit.  This is the first bit of the Field Specifier.  If\r\n      this bit is zero, the Information Element identifier identifies an\r\n      Information Element in [IANA-IPFIX], and the four-octet Enterprise\r\n      Number field MUST NOT be present.  If this bit is one, the\r\n      Information Element identifier identifies an enterprise-specific\r\n      Information Element, and the Enterprise Number field MUST be\r\n      present.\r\n\r\n   Information Element identifier\r\n\r\n      A numeric value that represents the Information Element. This field\r\n      takes a value in [IANA-IPFIX] when the E bit is set to zero.", "notes": "Makes it explicit that the values in [IANA-IPFIX] only applies when the is E-bit is unset. \r\n\r\nAn alternative would be to simply delete \"Refer to [IANA-IPFIX].\" as the exact behavior is already mentioned under the E bit description.", "submit_date": "2025-02-25", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-03-12 15:43:58"}, {"errata_id": "8314", "doc-id": "RFC6901", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "    \"/i\\\\j\"      5\r\n    \"/k\\\"l\"      6\r\n  ", "correct_text": "    \"/i\\\\\\\\j\"      5\r\n    \"/k\\\\\"l\"       6\r\n", "notes": "RFC 6901 uses obsolete RFC 4627, when referring to JSON. RFC 4627 has been obsoleted by RFC 7158 -> RFC 7159 -> RFC 8259. Under RFC 8259 the \"/i\\\\j\" and \"/k\\\"l\" are no longer valid JSON Strings. This errata provides a clarification how JSON Strings used in this RFC 6901 need to be defined to be parsable by RFC 8259 implementation.", "submit_date": "2025-02-25", "submitter_name": "Vladim\u00edr Gorej", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8318", "doc-id": "RFC8018", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "A.5", "orig_text": "Examples of underlying encryption schemes are given in \r\nAppendix B.3.\r\n", "correct_text": "Examples of underlying message authentication schemes are \r\ngiven in Appendix B.3.\r\n", "notes": "The paragraph this sentence is in describes the messageAuthScheme field, and the referenced appendix covers message authentication schemes.", "submit_date": "2025-02-28", "submitter_name": "Roman Donchenko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-07 15:54:24"}, {"errata_id": "8335", "doc-id": "RFC2579", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "(Page 18)\r\n\r\nDateAndTime ::= TEXTUAL-CONVENTION\r\n    DISPLAY-HINT \"2d-1d-1d,1d:1d:1d.1d,1a1d:1d\"\r\n    STATUS       current\r\n    DESCRIPTION\r\n            \"A date-time specification.\r\n\r\n            field  octets  contents                  range\r\n            -----  ------  --------                  -----\r\n              1      1-2   year*                     0..65536\r\n              2       3    month                     1..12\r\n              3       4    day                       1..31\r\n              4       5    hour                      0..23\r\n              5       6    minutes                   0..59\r\n              6       7    seconds                   0..60\r\n                           (use 60 for leap-second)\r\n              7       8    deci-seconds              0..9\r\n              8       9    direction from UTC        '+' / '-'\r\n              9      10    hours from UTC*           0..13\r\n             10      11    minutes from UTC          0..59\r\n\r\n            * Notes:\r\n            - the value of year is in network-byte order\r\n            - daylight saving time in New Zealand is +13\r\n", "correct_text": "DateAndTime ::= TEXTUAL-CONVENTION\r\n    DISPLAY-HINT \"2d-1d-1d,1d:1d:1d.1d,1a1d:1d\"\r\n    STATUS       current\r\n    DESCRIPTION\r\n            \"A date-time specification.\r\n\r\n            field  octets  contents                  range\r\n            -----  ------  --------                  -----\r\n              1      1-2   year*                     0..65536\r\n              2       3    month                     1..12\r\n              3       4    day                       1..31\r\n              4       5    hour                      0..23\r\n              5       6    minutes                   0..59\r\n              6       7    seconds                   0..60\r\n                           (use 60 for leap-second)\r\n              7       8    deci-seconds              0..9\r\n              8       9    direction from UTC        '+' / '-'\r\n              9      10    hours from UTC*           0..14\r\n             10      11    minutes from UTC          0..59\r\n\r\n            * Notes:\r\n            - the value of year is in network-byte order\r\n            - Line Islands region of Kiribata is +14\r\n", "notes": "Line Islands region of Kiribata has a UTC+14 time zone, need to increase upper bound to support this area.\r\n\r\n--- verifier note ----\r\n\r\nPer RFC editor FAQ `Errata reports should only be filed for issues that would have been considered errors at the time the RFC was published. `", "submit_date": "2025-03-17", "submitter_name": "Michael Sweet", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-07-01 12:36:54"}, {"errata_id": "8338", "doc-id": "RFC6775", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3", "orig_text": "   Reserved:                   This field is unused.  It MUST be\r\n                               initialized to zero by the sender and\r\n                               MUST be ignored by the receiver.", "correct_text": "This text must be removed because there are no Reserved bits exist in ABRO.", "notes": "This text must be removed because there are no Reserved bits exist in ABRO.", "submit_date": "2025-03-18", "submitter_name": "Adnan Rashid", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-21 20:38:49"}, {"errata_id": "8341", "doc-id": "RFC7946", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "The latitude of the northeast corner is always greater than the latitude of \r\nthe southwest corner, but bounding boxes that cross the antimeridian have a\r\nnortheast corner longitude that is less than the longitude of the southwest\r\ncorner.", "correct_text": "The longitude of the northeast corner is always greater than the longitude of\r\nthe southwest corner, but bounding boxes that cross the antimeridian have a\r\nnortheast corner longitude that is less than the longitude of the southwest\r\ncorner.", "notes": "Judging by the example in the same section and the second part of the paragraph, it probably intended to refer to longitude, not latitude.", "submit_date": "2025-03-20", "submitter_name": "Danil Petrov", "verifier_id": "", "verifier_name": null, "update_date": "2025-03-21 16:10:15"}, {"errata_id": "8343", "doc-id": "RFC9535", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.4", "orig_text": "function-argument   = literal /\r\n                      filter-query / ; (includes singular-query)\r\n                      logical-expr /\r\n                      function-expr", "correct_text": "function-argument   = logical-expr /\r\n                      filter-query / ; (includes singular-query)\r\n                      function-expr /\r\n                      literal", "notes": "The ABNF grammars in RFC 9535 were designed to be directly usable with PEG (Parsing Expression Grammar) parsers.\r\n\r\nHowever, PEG parsers will fail to parse $[?blt(1==1)] or $[?true(1)==0] with the grammar as given, as they employ prioritized choice, where the order matters.\r\n\r\nIn the order given, they will try to match the `literal` rule in `function-argument` with the input `1==1`, and find that the `1` indeed matches a `number`, completing the match for `function-argument` and preempting the other choices.  The intended rest of the `function-argument`, `==1` does not match anything, and the rule fails.\r\nBy putting the more complex `logical-expr` first, the whole `1==1` matches, and the rule succeeds as intended.\r\n\r\nSimilary, the function name `true` matches as the literal `true` instead, and preempts parsing `true(1)` as the more complex `function-expr`.  Putting the `literal` choice last prevents the preemptive match.\r\n", "submit_date": "2025-03-24", "submitter_name": "Vladim\u00edr Gorej", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-02-25 19:02:18"}, {"errata_id": "8344", "doc-id": "RFC5440", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.15", "orig_text": "   IANA created a registry for the PCEP TLVs.\r\n\r\n    Value         Meaning                    Reference\r\n\r\n      1          NO-PATH-VECTOR TLV         This document\r\n      2          OVERLOAD-DURATION TLV      This document\r\n      3          REQ-MISSING TLV            This document", "correct_text": "   IANA created a registry for the PCEP TLVs.\r\n\r\n    Value         Meaning                    Reference\r\n\r\n      1          NO-PATH-VECTOR TLV         This document\r\n      2          OVERLOADED-DURATION TLV    This document\r\n      3          REQ-MISSING TLV            This document", "notes": "As per RFC 5440, the name of PCEP TLV type 2 will be OVERLOADED-DURATION TLV. So, the TLV name needs to be corrected in Section 9.15 of RFC 5440. Also, the IANA registry page needs to be reflected with the same.", "submit_date": "2025-03-24", "submitter_name": "Mrinmoy Das", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-26 13:49:31"}, {"errata_id": "8345", "doc-id": "RFC6356", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "The first-page header says:", "orig_text": "M. Handly", "correct_text": "M. Handley", "notes": "This is an error in the front page of RFC 6356. The list of authors is presented as:\r\n\r\nInternet Engineering Task Force (IETF)                         C. Raiciu\r\nRequest for Comments: 6356                Univ. Politehnica of Bucharest\r\nCategory: Experimental                                         M. Handly\r\nISSN: 2070-1721                                             D. Wischik\r\n                                                    Univ. College London\r\n                                                            October 2011\r\n\r\nNotice the misspelled author name \"M. Handly\". The author name is listed correctly in the Authors' Addresses section as:\r\n\r\n   Mark Handley\r\n   University College London\r\n   Gower Street\r\n   London  WC1E 6BT\r\n   UK\r\n\r\n   EMail: m.handley@cs.ucl.ac.uk\r\n\r\n-- VERIFIER NOTES --\r\nNote that this hasn\u2019t affected the XML citation library entry (https://www.rfc-editor.org/refs/bibxml/reference.RFC.6356.xml) or the text reference entry listed at https://www.rfc-editor.org/rfc-index.txt.", "submit_date": "2025-03-24", "submitter_name": "Christian Huitema", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-26 17:56:45"}, {"errata_id": "8287", "doc-id": "RFC4647", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   3.  Lookup (Section 3.4) matches a language priority list consisting\r\n       of basic language ranges to sets of language tags to find the one\r\n       exact language tag that best matches the range.", "correct_text": "   3.  Lookup (Section 3.4) matches a language priority list consisting\r\n       of basic and/or extended language ranges to sets of language tags\r\n       to find the one exact language tag that best matches the range.", "notes": "The original text illustrated above states that the 'lookup' matching scheme operates using 'basic language ranges' as opposed to 'extended language ranges'. However, the description of the 'lookup' matching scheme in section 3.4, in its last two paragraphs (beginning with \"In some cases,\"), describes how extended language ranges are processed by the 'lookup' matching scheme. Thus, section 3.1 indicates that 'extended language ranges' are not supported by the 'lookup' matching scheme, while section 3.4 indicates the opposite and describes how they are to be supported.\r\n\r\nThis contradiction can lead to confusion for the reader and compliance ambiguity for the implementor.", "submit_date": "2025-02-08", "submitter_name": "Randall Edward Cotton", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8351", "doc-id": "RFC3581", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3", "orig_text": " The client behavior specified here affects the transport processing\r\n   defined in Section 18.1 of SIP (RFC 3261) [1].\r\n\r\n   A client, compliant to this specification (clients include UACs and\r\n   proxies), MAY include an \"rport\" parameter in the top Via header\r\n   field value of requests it generates.  This parameter MUST have no\r\n   value; it serves as a flag to indicate to the server that this\r\n   extension is supported and requested for the transaction.\r\n\r\n   When the client sends the request, if the request is sent using UDP,\r\n   the client MUST be prepared to receive the response on the same IP\r\n   address and port it used to populate the source IP address and source\r\n   port of the request.  For backwards compatibility, the client MUST\r\n   still be prepared to receive a response on the port indicated in the\r\n   sent-by field of the topmost Via header field value, as specified in\r\n   Section 18.1.1 of SIP [1].", "correct_text": " The client behavior specified here affects the transport processing\r\n   defined in Section 18.1 of SIP (RFC 3261) [1].\r\n\r\n   A client, compliant to this specification (clients include UACs and\r\n   proxies), MAY include an \"rport\" parameter in the top Via header\r\n   field value of requests it generates.  This parameter MUST have no\r\n   value; it serves as a flag to indicate to the server that this\r\n   extension is supported and requested for the transaction.\r\n\r\n   When the client sends the request, if the request is sent using UDP,\r\n   the client MUST be prepared to receive the response on the same IP\r\n   address and port it used to populate the source IP address and source\r\n   port of the request.  For backwards compatibility, the client MUST\r\n   still be prepared to receive a response on the port indicated in the\r\n   sent-by field of the topmost Via header field value, as specified in\r\n   Section 18.1.1 of SIP [1].", "notes": "would like to report an error in RFC 3581, \"An Extension to the Session Initiation Protocol (SIP) for Symmetric Response Routing\".\r\n\r\nIn Section 3, \"Client Behavior\", the following sentence contains an incorrect references:\r\n\"processing defined in Section 18.1 of SIP\"\r\n\"As specified in Section 18.1.1 of SIP [1].\"\r\n\r\nThe reference points to RFC 3581, but RFC 3581 does not contain a Section 18.1.1. The correct reference should point to Section 18.1.1 of RFC 3261, which is the core SIP specification.\r\n\r\nCorrect reference:\r\nhttps://datatracker.ietf.org/doc/html/rfc3261#section-18.1.1\r\n\r\nPlease consider updating the RFC to correct this error.\n --VERIFIER NOTES-- \nThis is regarding the link generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc3581.txt). Please add an issue here: https://github.com/ietf-tools/rfc2html.   ", "submit_date": "2025-03-27", "submitter_name": "Roman", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-04-03 00:06:01"}, {"errata_id": "8352", "doc-id": "RFC9535", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3.5.1", "orig_text": "comparable          = literal /\r\n                      singular-query / ; singular query value\r\n                      function-expr    ; ValueType\r\n", "correct_text": "comparable          = singular-query / ; singular query value\r\n                      function-expr /  ; ValueType\r\n                      literal", "notes": "The ABNF grammars in RFC 9535 were designed to be directly usable with PEG (Parsing Expression Grammar) parsers.\r\n\r\nHowever, PEG parsers will fail to parse $[?blt(1==1)] or $[?true(1)==0] with the grammar as given, as they employ prioritized choice, where the order matters.\r\n\r\nIn the order given, they will try to match the `literal` rule in `function-argument` with the input `1==1`, and find that the `1` indeed matches a `number`, completing the match for `function-argument` and preempting the other choices.  The intended rest of the `function-argument`, `==1` does not match anything, and the rule fails.\r\nBy putting the more complex `logical-expr` first, the whole `1==1` matches, and the rule succeeds as intended.\r\n\r\nSimilary, the function name `true` matches as the literal `true` instead, and preempts parsing `true(1)` as the more complex `function-expr`.  Putting the `literal` choice last prevents the preemptive match.\r\n", "submit_date": "2025-03-24", "submitter_name": "Vladim\u00edr Gorej", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-02-25 19:02:39"}, {"errata_id": "8353", "doc-id": "RFC9535", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A says:", "orig_text": "comparable          = literal /\r\n                      singular-query / ; singular query value\r\n                      function-expr    ; ValueType", "correct_text": "comparable          = singular-query / ; singular query value\r\n                      function-expr /  ; ValueType\r\n                      literal", "notes": "The ABNF grammars in RFC 9535 were designed to be directly usable with PEG (Parsing Expression Grammar) parsers.\r\n\r\nHowever, PEG parsers will fail to parse $[?blt(1==1)] or $[?true(1)==0] with the grammar as given, as they employ prioritized choice, where the order matters.\r\n\r\nIn the order given, they will try to match the `literal` rule in `function-argument` with the input `1==1`, and find that the `1` indeed matches a `number`, completing the match for `function-argument` and preempting the other choices.  The intended rest of the `function-argument`, `==1` does not match anything, and the rule fails.\r\nBy putting the more complex `logical-expr` first, the whole `1==1` matches, and the rule succeeds as intended.\r\n\r\nSimilary, the function name `true` matches as the literal `true` instead, and preempts parsing `true(1)` as the more complex `function-expr`.  Putting the `literal` choice last prevents the preemptive match.\r\n", "submit_date": "2025-03-24", "submitter_name": "Vladim\u00edr Gorej", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-02-25 19:03:01"}, {"errata_id": "8354", "doc-id": "RFC9535", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A says:", "orig_text": "function-argument   = literal /\r\n                      filter-query / ; (includes singular-query)\r\n                      logical-expr /\r\n                      function-expr", "correct_text": "function-argument   = logical-expr /\r\n                      filter-query / ; (includes singular-query)\r\n                      function-expr /\r\n                      literal", "notes": "The ABNF grammars in RFC 9535 were designed to be directly usable with PEG (Parsing Expression Grammar) parsers.\r\n\r\nHowever, PEG parsers will fail to parse $[?blt(1==1)] or $[?true(1)==0] with the grammar as given, as they employ prioritized choice, where the order matters.\r\n\r\nIn the order given, they will try to match the `literal` rule in `function-argument` with the input `1==1`, and find that the `1` indeed matches a `number`, completing the match for `function-argument` and preempting the other choices.  The intended rest of the `function-argument`, `==1` does not match anything, and the rule fails.\r\nBy putting the more complex `logical-expr` first, the whole `1==1` matches, and the rule succeeds as intended.\r\n\r\nSimilary, the function name `true` matches as the literal `true` instead, and preempts parsing `true(1)` as the more complex `function-expr`.  Putting the `literal` choice last prevents the preemptive match.\r\n", "submit_date": "2025-03-24", "submitter_name": "Vladim\u00edr Gorej", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-02-23 15:06:36"}, {"errata_id": "8355", "doc-id": "RFC7868", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6.2.4", "orig_text": "   Transmission times derived from physical interfaces MUST be n units\r\n   of picoseconds, converted to picoseconds prior to being exchanged\r\n   between neighbors, or used in the composite metric determination.\r\n\r\n   This includes delay values present in configuration-based commands\r\n   (i.e., interface delay, redistribute, default-metric, route-map,\r\n   etc.).\r\n\r\n   The delay value is then converted to a \"latency\" using the formula:\r\n\r\n                          Delay * EIGRP_WIDE_SCALE\r\n        Latency = K3 *   --------------------------\r\n                             EIGRP_DELAY_PICO", "correct_text": "   Transmission times derived from physical interfaces MUST be n units\r\n   of picoseconds, converted to picoseconds prior to being exchanged\r\n   between neighbors, or used in the composite metric determination.\r\n\r\n   This includes delay values present in configuration-based commands\r\n   (i.e., interface delay, redistribute, default-metric, route-map,\r\n   etc.).\r\n\r\n   The sum of the delay values are then converted to a \"latency\" using the formula:\r\n\r\n                          Delay * EIGRP_WIDE_SCALE\r\n        Latency = K3 *   --------------------------\r\n                             EIGRP_DELAY_PICO\r\n\r\n", "notes": "It is perhaps useful to reference the point at which the delay values should be summed.", "submit_date": "2025-03-28", "submitter_name": "Mike Harding", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-04-01 12:35:47"}, {"errata_id": "8293", "doc-id": "RFC9644", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.5", "orig_text": "return the private clear in cleartext form.", "correct_text": "return the private key in cleartext form.", "notes": "typo", "submit_date": "2025-02-12", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-02-13 01:15:35"}, {"errata_id": "8294", "doc-id": "RFC9645", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "return the private clear in cleartext form.", "correct_text": "return the private key in cleartext form.", "notes": "typo", "submit_date": "2025-02-12", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-02-13 01:14:12"}, {"errata_id": "8296", "doc-id": "RFC2104", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "[BCK1]  M. Bellare, R. Canetti, and H. Krawczyk,\r\n           \"Keyed Hash Functions and Message Authentication\",\r\n           Proceedings of Crypto'96, LNCS 1109, pp. 1-15.\r\n           (http://www.research.ibm.com/security/keyed-md5.html)", "correct_text": "[BCK1]  M. Bellare, R. Canetti, and H. Krawczyk,\r\n           \"Keyed Hash Functions and Message Authentication\",\r\n           Proceedings of Crypto'96, LNCS 1109, pp. 1-15.", "notes": "The link is dead.\n --VERIFIER NOTES-- \nThe link was valid at the time of publication.   ", "submit_date": "2025-02-14", "submitter_name": "Andreas Johannessen", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-04 07:20:28"}, {"errata_id": "8340", "doc-id": "RFC9685", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.1", "orig_text": "   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |     Type      |     Length    |    Status     |    Opaque     |\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |Rsv| P | I |R|T|     TID       |     Registration Lifetime     |\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |                                                               |\r\n ...          Registration Ownership Verifier (ROVR)              ...\r\n  |                                                               |\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "   0                   1                   2                   3\r\n   0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |     Type      |     Length    |    Status     |    Opaque     |\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |R| P |C| I |R|T|     TID       |     Registration Lifetime     |\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n  |                                                               |\r\n ...          Registration Ownership Verifier (ROVR)              ...\r\n  |                                                               |\r\n  +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The EARO format in RFC 9685  (Figure 5) omits the C-flag, which was previously defined in RFC 8928. This inconsistency could lead to issues in implementation and interoperability. It is important to ensure that newer standards respect and align with existing conventions.\r\nsmall \"R\" is a single unused/Reserved bit.\n --VERIFIER NOTES-- \nWhile the problem description is correct, the suggested way to fix the problem is rejected. Indeed, authors, chairs, and AD prefer to have another RFC updating RFC 8928 and fixing the IANA registry.", "submit_date": "2025-03-20", "submitter_name": "Adnan Rashid", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2025-04-14 07:04:19"}, {"errata_id": "8324", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.3.1", "orig_text": "   This return code is normally interpreted as \"The resource identified\r\n   by the request is only capable of generating response entities which\r\n   have content characteristics not acceptable according to the accept\r\n   headers sent in the request. In HTCPCP, this response code MAY be\r\n   returned if the operator of the coffee pot cannot comply with the\r\n   Accept-Addition request. Unless the request was a HEAD request, the\r\n   response SHOULD include an entity containing a list of available\r\n   coffee additions.", "correct_text": "   This return code is normally interpreted as \"The resource identified\r\n   by the request is only capable of generating response entities which\r\n   have content characteristics not acceptable according to the accept\r\n   headers sent in the request.\" In HTCPCP, this response code MAY be\r\n   returned if the operator of the coffee pot cannot comply with the\r\n   Accept-Addition request. Unless the request was a HEAD request, the\r\n   response SHOULD include an entity containing a list of available\r\n   coffee additions.", "notes": "The quoted portion was missing a closing quotation mark.", "submit_date": "2025-03-10", "submitter_name": "Eric Spishak-Thomas", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-11 14:06:57"}, {"errata_id": "8325", "doc-id": "RFC4042", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   UINT9 *UCS4_to_UTF9 (UINT9 *utf9P,UINT31 ucs4)\r\n   {\r\n     if (ucs4 > 0x100) {\r\n       if (ucs4 > 0x10000) {\r\n         if (ucs4 > 0x1000000)\r\n   /* ... */", "correct_text": "   UINT9 *UCS4_to_UTF9 (UINT9 *utf9P,UINT31 ucs4)\r\n   {\r\n     if (ucs4 >= 0x100) {\r\n       if (ucs4 >= 0x10000) {\r\n         if (ucs4 >= 0x1000000)\r\n   /* ... */", "notes": "Errors in the conditionals in the C code.", "submit_date": "2025-03-10", "submitter_name": "Kang-Che Sung", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8326", "doc-id": "RFC7642", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "CSP-1 then pushes the new CSU joiner push\r\n   request downstream to CSU-2 and gets confirmation that the account\r\n   was successfully created.", "correct_text": "CSP-1 then pushes the new CSU joiner push\r\n   request downstream to CSP-2 and gets confirmation that the account\r\n   was successfully created.", "notes": "CSU-2 makes no sense to me, and it's not even defined in the previous line, AFAIU.", "submit_date": "2025-03-13", "submitter_name": "Emmanuel Lecharny", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:34:12"}, {"errata_id": "8327", "doc-id": "RFC7331", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "bfdSessUp NOTIFICATION-TYPE\r\n     OBJECTS {\r\n         bfdSessDiag, -- low range value\r\n         bfdSessDiag  -- high range value\r\n     }\r\n     STATUS     current\r\n     DESCRIPTION\r\n         \"This notification is generated when the\r\n          bfdSessState object for one or more contiguous\r\n          entries in bfdSessTable are about to enter the up(4)\r\n          state from some other state.  The included values of\r\n          bfdSessDiag MUST both be set equal to this\r\n          new state (i.e., up(4)).  The two instances of\r\n          bfdSessDiag in this notification indicate the range\r\n          of indexes that are affected.  Note that all the indexes\r\n          of the two ends of the range can be derived from the\r\n          instance identifiers of these two objects.  For the\r\n          cases where a contiguous range of sessions\r\n          have transitioned into the up(4) state at roughly\r\n          the same time, the device SHOULD issue a single\r\n          notification for each range of contiguous indexes in\r\n          an effort to minimize the emission of a large number\r\n          of notifications.  If a notification has to be\r\n          issued for just a single bfdSessEntry, then\r\n          the instance identifier (and values) of the two\r\n          bfdSessDiag objects MUST be identical.\"\r\n     ::= { bfdNotifications 1 }\r\n\r\n bfdSessDown NOTIFICATION-TYPE\r\n     OBJECTS {\r\n         bfdSessDiag, -- low range value\r\n         bfdSessDiag  -- high range value\r\n     }\r\n     STATUS     current\r\n     DESCRIPTION\r\n         \"This notification is generated when the\r\n          bfdSessState object for one or more contiguous\r\n          entries in bfdSessTable are about to enter the down(2)\r\n          or adminDown(1) states from some other state.  The included\r\n          values of bfdSessDiag MUST both be set equal to this new\r\n          state (i.e., down(2) or adminDown(1)).  The two instances\r\n          of bfdSessDiag in this notification indicate the range\r\n          of indexes that are affected.  Note that all the indexes\r\n          of the two ends of the range can be derived from the\r\n          instance identifiers of these two objects.  For\r\n          cases where a contiguous range of sessions\r\n          have transitioned into the down(2) or adminDown(1) states\r\n          at roughly the same time, the device SHOULD issue a single\r\n          notification for each range of contiguous indexes in\r\n          an effort to minimize the emission of a large number\r\n          of notifications.  If a notification has to be\r\n          issued for just a single bfdSessEntry, then\r\n          the instance identifier (and values) of the two\r\n          bfdSessDiag objects MUST be identical.\"\r\n", "correct_text": "bfdSessUp NOTIFICATION-TYPE\r\n     OBJECTS {\r\n         bfdSessDiag, -- low range value\r\n         bfdSessDiag  -- high range value\r\n     }\r\n     STATUS     current\r\n     DESCRIPTION\r\n         \"This notification is generated when the\r\n          bfdSessState object for one or more contiguous\r\n          entries in bfdSessTable are about to enter the up(4)\r\n          state from some other state.  The current values of\r\n          bfdSessDiag MUST be included. The two instances of\r\n          bfdSessDiag in this notification indicate the range\r\n          of indexes that are affected.  Note that all the indexes\r\n          of the two ends of the range can be derived from the\r\n          instance identifiers of these two objects.  For the\r\n          state from some other state.  The current values of\r\n          bfdSessDiag MUST be included. The two instances of\r\n          the same time, the device SHOULD issue a single\r\n          notification for each range of contiguous indexes in\r\n          an effort to minimize the emission of a large number\r\n          of notifications.  If a notification has to be\r\n          issued for just a single bfdSessEntry, then\r\n          the instance identifier (and values) of the two\r\n          bfdSessDiag objects MUST be identical.\"\r\n     ::= { bfdNotifications 1 }\r\n\r\n bfdSessDown NOTIFICATION-TYPE\r\n     OBJECTS {\r\n         bfdSessDiag, -- low range value\r\n         bfdSessDiag  -- high range value\r\n     }\r\n     STATUS     current\r\n     DESCRIPTION\r\n         \"This notification is generated when the\r\n          bfdSessState object for one or more contiguous\r\n          entries in bfdSessTable are about to enter the down(2)\r\n          or adminDown(1) states from some other state.  The current\r\n          values of bfdSessDiag MUST be included.  The two instances\r\n          of bfdSessDiag in this notification indicate the range\r\n          of indexes that are affected.  Note that all the indexes\r\n          of the two ends of the range can be derived from the\r\n          instance identifiers of these two objects.  For\r\n          cases where a contiguous range of sessions\r\n          have transitioned into the down(2) or adminDown(1) states\r\n          at roughly the same time, the device SHOULD issue a single\r\n          notification for each range of contiguous indexes in\r\n          an effort to minimize the emission of a large number\r\n          of notifications.  If a notification has to be\r\n          issued for just a single bfdSessEntry, then\r\n          the instance identifier (and values) of the two\r\n          bfdSessDiag objects MUST be identical.\"\r\n", "notes": "See discussion at https://mailarchive.ietf.org/arch/msg/rtg-bfd/TGQZeib-j2NAZL2PFPrTykfSLoE/\r\n\r\nThe changes are \r\n\r\nOLD:\r\n          state from some other state.  The included values of\r\n          bfdSessDiag MUST both be set equal to this\r\n          new state (i.e., up(4)).  The two instances of\r\n\r\nNEW:\r\n          state from some other state.  The current values of\r\n          bfdSessDiag MUST be included. The two instances of\r\n\r\nand \r\n\r\nOLD:\r\n          or adminDown(1) states from some other state.  The included\r\n          values of bfdSessDiag MUST both be set equal to this new\r\n          state (i.e., down(2) or adminDown(1)).  The two instances\r\n\r\nNEW:\r\n          or adminDown(1) states from some other state.  The current\r\n          values of bfdSessDiag MUST be included.  The two instances\r\n\r\n(The up(4), down(2), and adminDown(1) states are not defined for bfdSessDiag.)", "submit_date": "2025-03-01", "submitter_name": "Goutham Jain", "verifier_id": "", "verifier_name": "John Scudder", "update_date": "2025-03-18 07:35:41"}, {"errata_id": "8328", "doc-id": "RFC2986", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1", "orig_text": "subjectPublicKeyInfo contains information about the public key being certified.", "correct_text": "subjectPKInfo contains information about the public key being certified.", "notes": "This section describes top-level components of CertificationRequestInfo. \"subjectPublicKeyInfo\" should be labeled as \"subjectPKInfo\".", "submit_date": "2025-03-14", "submitter_name": "Angelica Semenec", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-18 18:35:26"}, {"errata_id": "8339", "doc-id": "RFC8972", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.7", "orig_text": "The Session-Reflector MUST validate the Length value of the STAMP test\r\npacket.", "correct_text": "The Session-Reflector MUST validate the Length value of the\r\nFollow-Up Telemetry TLV in that STAMP test packet.\r\n", "notes": "--- Verifier note ---\r\nUpdated the type of errata to technical from editorial.\r\n\r\nThere is no length field discussed for the test packet. The behavior is about checking the length of a Follow-Up Telemetry TLV included in a test packet.", "submit_date": "2025-03-18", "submitter_name": "William Hawkins", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-03-25 06:41:37"}, {"errata_id": "8330", "doc-id": "RFC9595", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "   2.  The list of items is sorted in alphabetical order.  'namespace'\r\n       entries are sorted in descending order, and 'identifier' entries\r\n       are sorted in ascending order.  ", "correct_text": "   2.  The list of items is sorted in alphabetical order.  'namespace'\r\n       entries are sorted in ascending order, and 'identifier' entries\r\n       are sorted in ascending order.  ", "notes": "Examples and all tools follow ascending order.\r\nYANG lists are usually sorting in ascending order.", "submit_date": "2025-03-14", "submitter_name": "Andrew Bierman", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8157", "doc-id": "RFC9253", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2", "orig_text": "LINK;LINKREL=SOURCE;LABEL=Venue;VALUE=URI:\r\n  https://example.com/events", "correct_text": "LINK;LINKREL=ABOUT;LABEL=Venue;VALUE=URI:\r\n  https://example.com/events", "notes": "This section defines the \"link relation type [to be] defined in Section 2.1 of [RFC8288]\". But the SOURCE link relation in the example is not a valid link relation type according to RFC8288, as it is not registered at IANA (https://www.iana.org/assignments/link-relations/link-relations.xhtml).\r\n\r\nThe example should be updated to either:\r\n1. replace SOURCE in the example with a registered link relation type (as depicted in the corrected text), or\r\n2. register the SOURCE relation type at IANA according to RFC 8288, or\r\n3. replace SOURCE in the example with an extension link relation type, e.g. https://example.com/rel/source", "submit_date": "2024-10-24", "submitter_name": "Robert Stepanek", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8158", "doc-id": "RFC9530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.2", "orig_text": "Figure 14: Response with Both Content-Digest\r\n and Digest (Empty Content)\r\n\r\n", "correct_text": "Figure 14: Response with Both Content-Digest \r\n and Repr-Digest (Empty Content)\r\n\r\n", "notes": "Minor Editorial correction", "submit_date": "2024-10-24", "submitter_name": "Hugo Gonzalez Labrador", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-29 14:24:45"}, {"errata_id": "8283", "doc-id": "RFC2549", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "The following quality of service levels are available: Concorde,\r\nFirst, Business, and Coach.  Concorde class offers expedited data\r\ndelivery.  One major benefit to using Avian Carriers is that this is\r\nthe only networking technology that earns frequent flyer miles, plus\r\nthe Concorde and First classes of service earn 50% bonus miles per\r\npacket.\r\n", "correct_text": "The following quality of service levels are available: First, Business, \r\nand Coach. One major benefit to using Avian Carriers is that this is\r\nthe only networking technology that earns frequent flyer miles, plus\r\nFirst class service earn 50% bonus miles per packet.\r\n", "notes": "Concorde service levels have been unavailable since 2003.\n --VERIFIER NOTES-- \nThank you for your report.\r\n\r\nWhile the Concorde itself hasn't flown *commercially* for quite some time, nothing prevents that from happening in the future, and Informational documents do not require implementations.", "submit_date": "2025-02-05", "submitter_name": "Peter Shirley", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-02-06 09:16:44"}, {"errata_id": "8153", "doc-id": "RFC6797", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.1.1", "orig_text": "8.1.1.  Noting an HSTS Host - Storage Model\r\n\r\n   If the substring matching the host production from the Request-URI\r\n   (of the message to which the host responded) syntactically matches\r\n   the IP-literal or IPv4address productions from Section 3.2.2 of\r\n   [RFC3986], then the UA MUST NOT note this host as a Known HSTS Host.\r\n\r\n   Otherwise, if the substring does not congruently match a Known HSTS\r\n   Host's domain name, per the matching procedure specified in\r\n   Section 8.2 (\"Known HSTS Host Domain Name Matching\"), then the UA\r\n   MUST note this host as a Known HSTS Host, caching the HSTS Host's\r\n   domain name and noting along with it the expiry time of this\r\n   information, as effectively stipulated per the given max-age value,\r\n   as well as whether the includeSubDomains directive is asserted or\r\n   not.  See also Section 11.2 (\"HSTS Policy Expiration Time\r\n   Considerations\").\r\n\r\n   The UA MUST NOT modify the expiry time or the includeSubDomains\r\n   directive of any superdomain matched Known HSTS Host.\r\n\r\n   A Known HSTS Host is \"expired\" if its cache entry has an expiry date\r\n   in the past.  The UA MUST evict all expired Known HSTS Hosts from its\r\n   cache if, at any time, an expired Known HSTS Host exists in the\r\n   cache.", "correct_text": "8.1.1.  Noting an HSTS Host - Storage Model\r\n\r\n   If the substring matching the host production from the Request-URI\r\n   (of the message to which the host responded) syntactically matches\r\n   the IP-literal or IPv4address productions from Section 3.2.2 of\r\n   [RFC3986], then the UA MUST NOT note this host as a Known HSTS Host.\r\n\r\n   If the substring matching the host production from the Request-URI\r\n   (of the message to which the host responded) syntactically matches\r\n   the string \"localhost\" or ends with \".localhost\", then the UA MAY\r\n   choose not to note this host as a Known HSTS host.\r\n\r\n   Otherwise, if the substring does not congruently match a Known HSTS\r\n   Host's domain name, per the matching procedure specified in\r\n   Section 8.2 (\"Known HSTS Host Domain Name Matching\"), then the UA\r\n   MUST note this host as a Known HSTS Host, caching the HSTS Host's\r\n   domain name and noting along with it the expiry time of this\r\n   information, as effectively stipulated per the given max-age value,\r\n   as well as whether the includeSubDomains directive is asserted or\r\n   not.  See also Section 11.2 (\"HSTS Policy Expiration Time\r\n   Considerations\").\r\n\r\n   The UA MUST NOT modify the expiry time or the includeSubDomains\r\n   directive of any superdomain matched Known HSTS Host.\r\n\r\n   A Known HSTS Host is \"expired\" if its cache entry has an expiry date\r\n   in the past.  The UA MUST evict all expired Known HSTS Hosts from its\r\n   cache if, at any time, an expired Known HSTS Host exists in the\r\n   cache.", "notes": "Localhost is already a secure context and unambiguously refers to the local machine, for which transport-level security is not required. Because multiple software packages from independent vendors commonly run on localhost (and web developers commonly use localhost for testing), but HSTS is applied to ALL ports on a given host, the setting of HSTS rules for localhost can cause unexpected and difficult to avoid functional errors.\r\n\r\nFirefox does not apply HSTS to Localhost requests and a corresponding change is pending for Chromium (see https://crbug.com/41251622)\n --VERIFIER NOTES-- \nYour proposed change is not in scope for errata reports, which are meant to collect errors in the documents, things that were actual errors at publication and that would have been fixed at that time had the working group or document authors noticed them -- they were just missed. \r\n\r\nWhat you've reported changes the intended behaviour (adding normative text), and is not an erratum. This sort of change needs to be achieved through a consensus document, possibly an update to this document. I would suggest that you re-formulate this suggestion and post it to the websec mailing list, which is still open: <websec@ietf.org>.", "submit_date": "2024-10-18", "submitter_name": "Eric Matthew Lawrence", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2024-10-29 10:09:03"}, {"errata_id": "8167", "doc-id": "RFC9293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.10.7.3", "orig_text": "o  A potential blind reset attack is described in RFC 5961 [9].\r\n            The mitigation described in that document has specific\r\n            applicability explained therein, and is not a substitute for\r\n            cryptographic protection (e.g., IPsec or TCP-AO).  A TCP\r\n            implementation that supports the mitigation described in RFC\r\n            5961 SHOULD first check that the sequence number exactly\r\n            matches RCV.NXT prior to executing the action in the next\r\n            paragraph.\r\n", "correct_text": "[ The text is removed - see notes]\r\n", "notes": "This entire bullet is removed as RFC 5961 adds no rules to the handling\r\nof RST segments in the SYN-SENT state.\r\n\r\nSee the discussion here (https://mailarchive.ietf.org/arch/msg/tcpm/Y5feX5f1YA00gCUyb4yP4iNfdXs/)", "submit_date": "2024-11-04", "submitter_name": "Christopher Williams", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-19 02:39:16"}, {"errata_id": "8168", "doc-id": "RFC9460", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2.3", "orig_text": "This record would indicate that \"foo://api.example.com:8443\" is\r\n   aliased to \"svc4.example.net\".  The owner of \"example.net\", in turn,\r\n   could publish this record:\r\n\r\n   svc4.example.net.  7200  IN SVCB 3 svc4.example.net. (\r\n       alpn=\"bar\" port=\"8004\" )\r\n\r\n   This record would indicate that these services are served on port\r\n   number 8004, which supports the protocol \"bar\" and its associated\r\n   transport in addition to the default transport protocol for \"foo://\".", "correct_text": "This record would indicate that \"foo://api.example.com:8443\" is\r\n   aliased to \"svc4.example.net\".  The owner of \"example.net\", in turn,\r\n   could publish this record:\r\n\r\n   svc4.example.net.  7200  IN SVCB 3 svc4.example.net. (\r\n       alpn=\"bar\" port=8004 )\r\n\r\n   This record would indicate that these services are served on port\r\n   number 8004, which supports the protocol \"bar\" and its associated\r\n   transport in addition to the default transport protocol for \"foo://\".", "notes": "As far as I understand the rest of the RFC as well as the other examples provided, the port must not be quoted as stated in 7.2 (\"port\"):\r\nThe presentation value of the SvcParamValue is a single decimal integer between 0 and 65535 in ASCII.\r\n\r\n\r\n[WK: Rejecting this errata with a note from the DNSOP list: https://mailarchive.ietf.org/arch/msg/dnsop/BHLZtTaDLiHcMWe2NDnl_HJ0RwM/\r\n\r\nText: \r\n\"This report is incorrect.  SvcParamValues always are presented via a char-string encoding as defined in Appendix A, so quotes are always allowed.  The \"single decimal integer\" applies to the \"value\" which is derived by reversing the escaping of the char-string, producing a *OCTET in ABNF.\r\n\r\nThanks for the close read!\r\nBen Schwartz\"\n --VERIFIER NOTES-- \n Thank you for the Errata report. \r\n\r\nI'm rejecting it as per: https://mailarchive.ietf.org/arch/msg/dnsop/BHLZtTaDLiHcMWe2NDnl_HJ0RwM/\r\n\r\nThanks again,\r\nWarren (Ops AD)", "submit_date": "2024-11-04", "submitter_name": "Julian Keck", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-12-02 18:15:46"}, {"errata_id": "8169", "doc-id": "RFC2080", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.2", "orig_text": "- This protocol uses fixed \"metrics\" to compare alternative routes.\r\n     It is not appropriate for situations where routes need to be chosen\r\n     based on real-time parameters such a measured delay, reliability,\r\n     or load.  The obvious extensions to allow metrics of this type are\r\n     likely to introduce instabilities of a sort that the protocol is\r\n     not designed to handle.", "correct_text": "- This protocol uses fixed \"metrics\" to compare alternative routes.\r\n     It is not appropriate for situations where routes need to be chosen\r\n     based on real-time parameters such as measured delay, reliability,\r\n     or load.  The obvious extensions to allow metrics of this type are\r\n     likely to introduce instabilities of a sort that the protocol is\r\n     not designed to handle.", "notes": "It should be 'such as' instead of 'such a'.", "submit_date": "2024-11-05", "submitter_name": "Ze-en Xiong", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-11-05 16:29:46"}, {"errata_id": "8171", "doc-id": "RFC9293", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "    +-----------------+---------+------+--------+-----+--------+------+\r\n    | *  Dest Unreach | SHLD-25 |  X   |        |     |        |      |\r\n    |    (0,1,5) =>   |         |      |        |     |        |      |\r\n    |    inform ALP   |         |      |        |     |        |      |\r\n    +-----------------+---------+------+--------+-----+--------+------+\r\n", "correct_text": "    +-----------------+---------+------+--------+-----+--------+------+\r\n    | *  Dest Unreach | SHLD-25 |      |   X    |     |        |      |\r\n    |    (0,1,5) =>   |         |      |        |     |        |      |\r\n    |    inform ALP   |         |      |        |     |        |      |\r\n    +-----------------+---------+------+--------+-----+--------+------+\r\n", "notes": "This requirement has an X in the \"MUST\" column, but the X should be in the \"SHOULD\" column.\r\n\r\nThe relevant text for this requirement is \"a TCP implementation ... SHOULD make the information available to the application (SHLD-25).\"", "submit_date": "2024-11-06", "submitter_name": "Christopher Williams", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 08:39:14"}, {"errata_id": "8173", "doc-id": "RFC9525", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "6.1.2", "orig_text": "With regard to the third example", "correct_text": "With regard to the fourth example", "notes": "The third example refers to the email service, which is unrelated to the SIP.", "submit_date": "2024-11-11", "submitter_name": "Shushang Wen", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2024-11-28 15:30:56"}, {"errata_id": "8179", "doc-id": "RFC8422", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.4.  Server Key Exc", "orig_text": "   The ServerKeyExchange message is extended as follows.\r\n\r\n           enum {\r\n               ec_diffie_hellman\r\n           } KeyExchangeAlgorithm;\r\n\r\n   o  ec_diffie_hellman: Indicates the ServerKeyExchange message\r\n      contains an ECDH public key.\r\n\r\n      select (KeyExchangeAlgorithm) {\r\n          case ec_diffie_hellman:\r\n              ServerECDHParams    params;\r\n              Signature           signed_params;\r\n      } ServerKeyExchange;\r\n\r\n.....................................................\r\n\r\n        enum {\r\n            ecdsa(3),\r\n            ed25519(7)\r\n            ed448(8)\r\n        } SignatureAlgorithm;\r\n        select (SignatureAlgorithm) {\r\n           case ecdsa:\r\n                digitally-signed struct {\r\n                    opaque sha_hash[sha_size];\r\n                };\r\n           case ed25519,ed448:\r\n                digitally-signed struct {\r\n                    opaque rawdata[rawdata_size];\r\n                };\r\n        } Signature;\r\n      ServerKeyExchange.signed_params.sha_hash\r\n          SHA(ClientHello.random + ServerHello.random +\r\n                                 ServerKeyExchange.params);\r\n      ServerKeyExchange.signed_params.rawdata\r\n          ClientHello.random + ServerHello.random +\r\n                                 ServerKeyExchange.params;\r\n\r\n   NOTE: SignatureAlgorithm is \"rsa\" for the ECDHE_RSA key exchange\r\n   algorithm and \"anonymous\" for ECDH_anon.  These cases are defined in\r\n   TLS.  SignatureAlgorithm is \"ecdsa\" or \"eddsa\" for ECDHE_ECDSA.", "correct_text": "The extended ServerKeyExchange message seems just for tls version 1.0 and version 1.1, not for 1.2, because tls version 1.2 ServerKeyExchange message format is different from version 1.0 and 1.1. The following is tls version 1.2 ServerKeyExchange message format:\r\n\r\n struct {\r\n select (KeyExchangeAlgorithm) {\r\n case dh_anon:\r\n ServerDHParams params;\r\n case dhe_dss:\r\n case dhe_rsa:\r\n ServerDHParams params;\r\n digitally-signed struct {\r\n opaque client_random[32];\r\n opaque server_random[32];\r\n ServerDHParams params;\r\n } signed_params;\r\n case rsa:\r\n case dh_dss:\r\n case dh_rsa:\r\n struct {} ;\r\n /* message is omitted for rsa, dh_dss, and dh_rsa */\r\n /* may be extended, e.g., for ECDH -- see [TLSECC] */\r\n };\r\n } ServerKeyExchange;\r\n\r\nit does not specify the message format for ECDH_RSA and ECDH_anon, the \"NOTE\" in original text does not apply to tls version 1.2, because it doesn't have the \"Signature\" field.", "notes": "the ServerKeyExchange for ECDH_RSA and ECDH_anon should be specified for tls version 1.2.", "submit_date": "2024-11-16", "submitter_name": "warren.wang", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8181", "doc-id": "RFC6585", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Updates: 2616", "correct_text": "Updates: 9110", "notes": "The semantics defined in 9110 are independent of the protocol version. 2616 defined HTTP v1.1.\r\nMoreover, 9110 already mentions 6585 as a way to extend available status codes.\r\n\r\nNow that 9110 exists, tying 6585 to 9110 rather than to 2616 might be more relevant.", "submit_date": "2024-11-19", "submitter_name": "Bernard Rosset", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8281", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "      required  A Boolean value that specifies whether or not the\r\n         attribute is required.", "correct_text": "      required  A Boolean value that specifies whether or not the\r\n         attribute is required. If an attribute is \"required\", \r\n         clients MUST specify the attribute in the PUT request, \r\n         see section 3.5.1 of RFC7644.", "notes": "The definition of the \"required\" characteristic is recursive and has no explanatory value. A reference to RFC7644 makes it much clearer.", "submit_date": "2025-02-05", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:23:54"}, {"errata_id": "8282", "doc-id": "RFC3393", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.4.", "orig_text": "T1 is the wire-time at which Scr sent the first bit of the first packet, \r\nand T2 is the wire-time at which Src sent the first bit of the second packet.", "correct_text": "T1 is the wire-time at which Src sent the first bit of the first packet, \r\nand T2 is the wire-time at which Src sent the first bit of the second packet.", "notes": "The first mention of Scr is misspelled. It should be Src.", "submit_date": "2025-02-05", "submitter_name": "Pablo Navarro", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-02-06 16:14:53"}, {"errata_id": "8184", "doc-id": "RFC9483", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.6.2", "orig_text": "          rid           REQUIRED\r\n-- MUST contain the subjectKeyIdentifier of the CMP protection\r\n--   certificate, if available, in the rKeyId choice, and the\r\n--   subjectKeyIdentifier MUST equal the senderKID in the\r\n--   PKIHeader.\r\n-- If the CMP protection certificate does not contain a\r\n--   subjectKeyIdentifier, the issuerAndSerialNumber choice MUST\r\n--   be used\r\n", "correct_text": "          rid           REQUIRED\r\n-- MUST contain the subjectKeyIdentifier of the CMP protection\r\n--   certificate of the request message, if available, in the\r\n--   rKeyId choice. The subjectKeyIdentifier is equal\r\n--   the senderKID in the PKIHeader of that message.\r\n-- If the CMP protection certificate of the request message does\r\n--   not contain a subjectKeyIdentifier, the issuerAndSerialNumber\r\n--   choice MUST be used.\r\n", "notes": "1. rid value must be taken from CMP protection certificate of request message as it is used to identify the recipient using key agreement.\r\n2. senderKID refer to value in request message, and here we are preparing the response message. So MUST is removed.", "submit_date": "2024-11-20", "submitter_name": "Rajeev Ranjan", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2024-11-21 22:25:17"}, {"errata_id": "8185", "doc-id": "RFC2104", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "5", "orig_text": "length t be not less than", "correct_text": "length to be not less than", "notes": "typo on what I assume should be 'to'\r\n\n --VERIFIER NOTES-- \nWe assume that \"the output length t\" refers to the t bits of output in the previous sentence:\r\n\r\n\"Applications of HMAC can choose to truncate the output of HMAC by outputting the t leftmost bits of the HMAC computation for some parameter t (namely, the computation is carried in the normal way as defined in section 2 above but the end result is truncated to t bits). We recommend that the output length t be not less than half the length of the hash output (to match the birthday attack bound) and not less than 80 bits (a suitable lower bound on the number of bits that need to be\r\npredicted by an attacker).\"", "submit_date": "2024-11-22", "submitter_name": "ev", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-11-25 16:06:18"}, {"errata_id": "8186", "doc-id": "RFC6797", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "     directive-value           = token | quoted-string", "correct_text": "     directive-value           = token / quoted-string", "notes": "The \"directive-value\" production should use a \"/\" for alternatives, not a \"|\".  See RFC 5234, which should be referenced by this spec but isn't.  This is an editorial nitpick.\r\n\r\n\n --VERIFIER NOTES-- \nRFC6797 relies on the BNF from RFC2616 which uses the \"|\" for alternatives,\r\nsee https://datatracker.ietf.org/doc/html/rfc2616#section-2.1", "submit_date": "2024-11-22", "submitter_name": "Joe Hildebrand", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2024-12-02 21:50:26"}, {"errata_id": "8188", "doc-id": "RFC2308", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1 - Terminology", "orig_text": "   \"NODATA\" - a pseudo RCODE which indicates that the name is valid, for\r\n   the given class, but are no records of the given type.  A NODATA\r\n   response has to be inferred from the answer.", "correct_text": "   \"NODATA\" - a pseudo RCODE which indicates that the name is valid, for\r\n   the given class, but there are no records of the given type.  A NODATA\r\n   response has to be inferred from the answer.", "notes": "Added missing \"there\" which impacts readability.", "submit_date": "2024-11-26", "submitter_name": "Ari Cooper-Davis", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-12-04 21:36:35"}, {"errata_id": "8189", "doc-id": "RFC9499", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2-11", "orig_text": "See notes", "correct_text": "See notes", "notes": "Definitions must be alphabetized in all sections in order to facilitate their lookup by the reader.  It's \"impossible\" to infer if a term was actually \"defined\" when its location is random among other terms.\r\n\r\n[WK: In general having definitions alphabetized makes sense, but in this particular case the WG decided to keep the current design (\"This document contains a collection of a wide variety of DNS-related terms, organized loosely by topic.\" ] \n --VERIFIER NOTES-- \n   [WK: In general having definitions alphabetized makes sense, but in this particular case the WG decided to keep the current design (\"This document contains a collection of a wide variety of DNS-related terms, organized loosely by topic.\" ]", "submit_date": "2024-11-26", "submitter_name": "Tony Lawrence", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-11-27 15:10:54"}, {"errata_id": "8190", "doc-id": "RFC9114", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.2.6", "orig_text": "   The GOAWAY frame is always sent on the control stream.  In the\r\n   server-to-client direction, it carries a QUIC stream ID for a client-\r\n   initiated bidirectional stream encoded as a variable-length integer.\r\n   A client MUST treat receipt of a GOAWAY frame containing a stream ID\r\n   of any other type as a connection error of type H3_ID_ERROR.\r\n\r\n   In the client-to-server direction, the GOAWAY frame carries a push ID\r\n   encoded as a variable-length integer.\r\n", "correct_text": "   The GOAWAY frame is always sent on the control stream.  In the\r\n   server-to-client direction, it carries a QUIC stream ID for a client-\r\n   initiated bidirectional stream encoded as a variable-length integer.\r\n   A client MUST treat receipt of a GOAWAY frame containing a stream ID\r\n   of any other type as a connection error of type H3_ID_ERROR.\r\n\r\n   In the client-to-server direction, the GOAWAY frame carries a push ID\r\n   encoded as a variable-length integer. A server MUST treat receipt of\r\n   a GOAWAY frame containing a stream ID of any other type as a\r\n   connection error of type H3_ID_ERROR.", "notes": "The MUST requiring a stream error on an invalid stream ID was missing in the client-to-server direction. This is related to erratum 7780, and likely entered the spec for the same reason.\n --VERIFIER NOTES-- \n In H3 push IDs are their own namespace. There is no concept of using a wrong stream ID for push IDs. When a push promise is fulfilled, a server initiates a new unidirectional stream with a stream type header indicating its of push type, then followed by the push ID.", "submit_date": "2024-11-28", "submitter_name": "Cory Benfield", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 10:36:24"}, {"errata_id": "8191", "doc-id": "RFC5934", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "TAMP messages may be exchanged in real time over a network, such as\r\n   via HTTP as described in Appendix A, or may be stored and transferred\r\n   using other means.", "correct_text": "TAMP messages may be exchanged in real time over a network, such as\r\n   via HTTP as described in Appendix C, or may be stored and transferred\r\n   using other means.", "notes": "The appendix reference is incorrect. Appendix A defines the ASN.1 module whereas Appendix C defines the protocol over HTTP.", "submit_date": "2024-11-29", "submitter_name": "Corey Bonnell", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-12-04 21:48:55"}, {"errata_id": "8192", "doc-id": "RFC9557", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.4", "orig_text": "In case of an inconsistency between time-offset and time zone suffix, \r\nif the critical flag is used on the time zone suffix, an application\r\nMUST act on the inconsistency. If the critical flag is not used,\r\nit MAY act on the inconsistency. Acting on the inconsistency \r\nmay involve rejecting the timestamp or resolving the inconsistency\r\nvia additional information, such as user input and/or programmed\r\nbehavior.\r\n\r\n", "correct_text": "In case of an inconsistency between time-offset and time zone suffix, \r\nif the critical-flag is used on the time zone suffix, an application\r\nMUST act on the inconsistency. If the critical-flag is not used,\r\nit MAY act on the inconsistency. Acting on the inconsistency \r\nmay involve rejecting the timestamp or resolving the inconsistency\r\nvia additional information, such as user input and/or programmed\r\nbehavior.\r\n", "notes": "\"critical flag\" missing hyphen\n --VERIFIER NOTES-- \nRejecting per explanation from Carsten Bormann (author):\r\n\r\nThe hyphenated form (\u201ccritical-flag\u201d) occurs only as the name of the ABNF rule (which cannot have a space inside and therefore uses a hyphen to separate the two words).\r\n\r\nI don\u2019t see a reason to hyphenate the English text usages of \u201ccritical flag\u201d.\r\nMaybe it could have been (talking about the ABNF rule), but then also would have been set in typewriter face and probably without a definite article (similar to the way `time-offset` has been set/phrased in the first sentence). However, the way the critical-flag ABNF rule is defined (namely, as an *optional* exclamation mark), it is actually present whether or not the critical flag (the exclamation mark) is.\r\n\r\nSo I believe we made the right choice in setting/phrasing this different from the ABNF rule name.", "submit_date": "2024-12-01", "submitter_name": "Robert Wishlaw", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-12-11 16:43:33"}, {"errata_id": "8193", "doc-id": "RFC7589", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "The well-known TCP port number 6513 is used by NETCONF servers to listen for TCP connections established by NETCONF over TLS clients.", "correct_text": "The registered TCP port number 6513 is used by NETCONF servers to listen for TCP connections established by NETCONF over TLS clients.", "notes": "Section 10 of that same RFC correctly states: \"Per RFC 5539, IANA assigned TCP port number (6513) in the 'Registered Port Numbers' range with the service name 'netconf-tls'. This port is the default port for NETCONF over TLS, as defined in Section 2.\" With that said, wouldn't the sentence concerned be more correct in the suggested form? Thanks!", "submit_date": "2024-12-01", "submitter_name": "Ryan", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-01-04 06:47:15"}, {"errata_id": "8194", "doc-id": "RFC1123", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1.5", "orig_text": "Use QCLASS=* unnecessarily                     |6.1.2.2    | |x| | | |", "correct_text": "Use QCLASS=* unnecessarily                     |6.1.2.2    | | | |x| |", "notes": "In the summary for Section 6.1.2.2, the directive for \"Use QCLASS=* unnecessarily\" is marked as \"SHOULD\". This contradicts the guidance in Section 6.1.2.2 which states that QCLASS=* \"SHOULD NOT be used unless the requestor is seeking data from more than one class.\"\r\n\r\nThe table entry should be updated to \"SHOULD NOT\" for consistency with the main text", "submit_date": "2024-12-01", "submitter_name": "Constantinos Psomadakis", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-12-04 21:59:35"}, {"errata_id": "8195", "doc-id": "RFC8878", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "For example, if the literal sequence \"0145\" was encoded using the\r\n   above prefix code, it would be encoded (in reverse order) as:\r\n\r\n                           +=========+==========+\r\n                           |  Symbol | Encoding |\r\n                           +=========+==========+\r\n                           |    5    |   0000   |\r\n                           +---------+----------+\r\n                           |    4    |   0001   |\r\n                           +---------+----------+\r\n                           |    1    |    01    |\r\n                           +---------+----------+\r\n                           |    0    |    1     |\r\n                           +---------+----------+\r\n                           | Padding |  00001   |\r\n                           +---------+----------+\r\n\r\n                             Table 26: Literal\r\n                              Sequence \"0145\"\r\n\r\n   This results in the following 2-byte bitstream:\r\n\r\n     00010000 00001101\r\n\r\n   Here is an alternative representation with the symbol codes separated\r\n   by underscores:\r\n\r\n     0001_0000 00001_1_01", "correct_text": "For example, if the literal sequence \"0145\" was encoded using the\r\n   above prefix code, it would be encoded (in reverse order) as:\r\n\r\n                           +=========+==========+\r\n                           |  Symbol | Encoding |\r\n                           +=========+==========+\r\n                           |    5    |   0001   |\r\n                           +---------+----------+\r\n                           |    4    |   0000   |\r\n                           +---------+----------+\r\n                           |    1    |    01    |\r\n                           +---------+----------+\r\n                           |    0    |    1     |\r\n                           +---------+----------+\r\n                           | Padding |  00001   |\r\n                           +---------+----------+\r\n\r\n                             Table 26: Literal\r\n                              Sequence \"0145\"\r\n\r\n   This results in the following 2-byte bitstream:\r\n\r\n     00000001 00001101\r\n\r\n   Here is an alternative representation with the symbol codes separated\r\n   by underscores:\r\n\r\n     0000_0001 00001_1_01", "notes": "Assuming that `using the above prefix code` refers to the codes in the `Table 25: Sorting by Weight`.", "submit_date": "2024-12-02", "submitter_name": "Maciej Dudek", "verifier_id": "", "verifier_name": null, "update_date": "2024-12-06 21:26:50"}, {"errata_id": "8196", "doc-id": "RFC8409", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "It is RECOMMENDED that http:-scheme or https:-scheme URIs are used;\r\nit is further RECOMMENDED that a category URI resolves to a human-\r\nreadable document defining the category.", "correct_text": "The category URI might also be a URL that resolves to a human-\r\nreadable document defining the category.  Because domain ownership\r\nmay change hands over time, implementations MUST NOT resolve the\r\nURI for any purpose. Resolution is purely for human documentation\r\nconsiderations. Even then, caution is advised when readers\r\nclick on URIs shown in this specification, just as one domain\r\nhas changed hands since its original publication.", "notes": "(Reported on behalf of Alfonso Alongi <alfonso.alongi.it@gmail.com>. \r\nReaders are advised to not make use of macedir.org, as the domain has changed hands.\r\n", "submit_date": "2024-12-02", "submitter_name": "Jean Mahoney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-06 12:54:31"}, {"errata_id": "8197", "doc-id": "RFC8032", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.1.4", "orig_text": "However, using the formulas described in Section 3.2 of [Edwards-revisited] and in [EFD-TWISTED-DBL] saves a few smaller operations.", "correct_text": "However, using the formulas described in Section 3.3 of [Edwards-revisited] and in [EFD-TWISTED-DBL] saves a few smaller operations.", "notes": "In RFC 8032 Section 5.1.4, the reference to \"formulas described in Section 3.2 of [Edwards-revisited]\" is incorrect. Section 3.2 of [Edwards-revisited] discusses Dedicated Addition, not doubling. The doubling formulas mentioned in RFC 8032 actually appear in Section 3.3 of [Edwards-revisited], under Dedicated Doubling.\r\n\r\n--VERIFIER NOTE--\r\nVerified. Section 5.1.4 discusses doubling formulas from Edwards-revisited. Section 3.2 of that paper covers addition formulas; Section 3.3 covers doubling formulas. The reference should be Section 3.3. Confirmed via Explicit Formulas Database at hyperelliptic.org.", "submit_date": "2024-12-03", "submitter_name": "Nawras H. Sabbry", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 17:43:20"}, {"errata_id": "8198", "doc-id": "RFC9635", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.3.3.", "orig_text": "   The signer presents the signed object in compact form [RFC7515] in\r\n   the Detached-JWS header field.\r\n\r\n   In the following non-normative example, the JOSE header contains the\r\n   following parameters:\r\n\r\n   {\r\n       \"alg\": \"RS256\",\r\n       \"kid\": \"gnap-rsa\",\r\n       \"uri\": \"https://server.example.com/gnap\",\r\n       \"htm\": \"POST\",\r\n       \"typ\": \"gnap-binding-jwsd\",\r\n       \"created\": 1618884475\r\n   }\r\n\r\n   The request content is the following JSON object:\r\n\r\n   NOTE: '\\' line wrapping per RFC 8792\r\n\r\n   {\r\n       \"access_token\": {\r\n           \"access\": [\r\n               \"dolphin-metadata\"\r\n           ]\r\n       },\r\n       \"interact\": {\r\n           \"start\": [\"redirect\"],\r\n           \"finish\": {\r\n               \"method\": \"redirect\",\r\n               \"uri\": \"https://client.foo/callback\",\r\n               \"nonce\": \"VJLO6A4CAYLBXHTR0KRO\"\r\n           }\r\n       },\r\n       \"client\": {\r\n         \"key\": {\r\n           \"proof\": \"jwsd\",\r\n           \"jwk\": {\r\n               \"kid\": \"gnap-rsa\",\r\n               \"kty\": \"RSA\",\r\n               \"e\": \"AQAB\",\r\n               \"alg\": \"RS256\",\r\n               \"n\": \"hYOJ-XOKISdMMShn_G4W9m20mT0VWtQBsmBBkI2cmRt4Ai8Bf\\\r\n     YdHsFzAtYKOjpBR1RpKpJmVKxIGNy0g6Z3ad2XYsh8KowlyVy8IkZ8NMwSrcUIBZG\\\r\n     YXjHpwjzvfGvXH_5KJlnR3_uRUp4Z4Ujk2bCaKegDn11V2vxE41hqaPUnhRZxe0jR\\\r\n     ETddzsE3mu1SK8dTCROjwUl14mUNo8iTrTm4n0qDadz8BkPo-uv4BC0bunS0K3bA_\\\r\n     3UgVp7zBlQFoFnLTO2uWp_muLEWGl67gBq9MO3brKXfGhi3kOzywzwPTuq-cVQDyE\\\r\n     N7aL0SxCb3Hc4IdqDaMg8qHUyObpPitDQ\"\r\n           }\r\n         }\r\n         \"display\": {\r\n           \"name\": \"My Client Display Name\",\r\n           \"uri\": \"https://client.foo/\"\r\n         },\r\n       }\r\n   }\r\n\r\n   This is hashed to the following base64-encoded value:\r\n\r\n   PGiVuOZUcN1tRtUS6tx2b4cBgw9mPgXG3IPB3wY7ctc\r\n\r\n   This leads to the following full HTTP request message:\r\n\r\n   NOTE: '\\' line wrapping per RFC 8792\r\n\r\n   POST /gnap HTTP/1.1\r\n   Host: server.example.com\r\n   Content-Type: application/json\r\n   Content-Length: 983\r\n   Detached-JWS: eyJhbGciOiJSUzI1NiIsImNyZWF0ZWQiOjE2MTg4ODQ0NzUsImh0b\\\r\n     SI6IlBPU1QiLCJraWQiOiJnbmFwLXJzYSIsInR5cCI6ImduYXAtYmluZGluZytqd3\\\r\n     NkIiwidXJpIjoiaHR0cHM6Ly9zZXJ2ZXIuZXhhbXBsZS5jb20vZ25hcCJ9.PGiVuO\\\r\n     ZUcN1tRtUS6tx2b4cBgw9mPgXG3IPB3wY7ctc.fUq-SV-A1iFN2MwCRW_yolVtT2_\\\r\n     TZA2h5YeXUoi5F2Q2iToC0Tc4drYFOSHIX68knd68RUA7yHqCVP-ZQEd6aL32H69e\\\r\n     9zuMiw6O_s4TBKB3vDOvwrhYtDH6fX2hP70cQoO-47OwbqP-ifkrvI3hVgMX9TfjV\\\r\n     eKNwnhoNnw3vbu7SNKeqJEbbwZfpESaGepS52xNBlDNMYBQQXxM9OqKJaXffzLFEl\\\r\n     -Xe0UnfolVtBraz3aPrPy1C6a4uT7wLda3PaTOVtgysxzii3oJWpuz0WP5kRujzDF\\\r\n     wX_EOzW0jsjCSkL-PXaKSpZgEjNjKDMg9irSxUISt1C1T6q3SzRgfuQ\r\n\r\n\r\n   {\r\n       \"access_token\": {\r\n           \"access\": [\r\n               \"dolphin-metadata\"\r\n           ]\r\n       },\r\n       \"interact\": {\r\n           \"start\": [\"redirect\"],\r\n           \"finish\": {\r\n               \"method\": \"redirect\",\r\n               \"uri\": \"https://client.foo/callback\",\r\n               \"nonce\": \"VJLO6A4CAYLBXHTR0KRO\"\r\n           }\r\n       },\r\n       \"client\": {\r\n         \"key\": {\r\n           \"proof\": \"jwsd\",\r\n           \"jwk\": {\r\n               \"kid\": \"gnap-rsa\",\r\n               \"kty\": \"RSA\",\r\n               \"e\": \"AQAB\",\r\n               \"alg\": \"RS256\",\r\n               \"n\": \"hYOJ-XOKISdMMShn_G4W9m20mT0VWtQBsmBBkI2cmRt4Ai8Bf\\\r\n     YdHsFzAtYKOjpBR1RpKpJmVKxIGNy0g6Z3ad2XYsh8KowlyVy8IkZ8NMwSrcUIBZG\\\r\n     YXjHpwjzvfGvXH_5KJlnR3_uRUp4Z4Ujk2bCaKegDn11V2vxE41hqaPUnhRZxe0jR\\\r\n     ETddzsE3mu1SK8dTCROjwUl14mUNo8iTrTm4n0qDadz8BkPo-uv4BC0bunS0K3bA_\\\r\n     3UgVp7zBlQFoFnLTO2uWp_muLEWGl67gBq9MO3brKXfGhi3kOzywzwPTuq-cVQDyE\\\r\n     N7aL0SxCb3Hc4IdqDaMg8qHUyObpPitDQ\"\r\n           }\r\n         }\r\n         \"display\": {\r\n           \"name\": \"My Client Display Name\",\r\n           \"uri\": \"https://client.foo/\"\r\n         },\r\n       }\r\n   }\r\n\r\n   When the verifier receives the Detached-JWS header, it MUST parse and\r\n   validate the JWS object.  The signature MUST be validated against the\r\n   expected key of the signer.  If the HTTP message request contains\r\n   content, the verifier MUST calculate the hash of the content just as\r\n   the signer does, with no normalization or transformation of the\r\n   request.  All required fields MUST be present, and their values MUST\r\n   be valid.  All fields MUST match the corresponding portions of the\r\n   HTTP message.  For example, the htm field of the JWS header has to be\r\n   the same as the HTTP verb used in the request.\r\n\r\n   Note that this proofing method depends on a specific cryptographic\r\n   algorithm, SHA-256, in two ways: 1) the ath hash algorithm is\r\n   hardcoded and 2) the payload of the detached/attached signature is\r\n   computed using a hardcoded hash.  A future version of this document\r\n   may address crypto-agility for both these uses by replacing ath with\r\n   a new header that upgrades the algorithm and possibly defining a new\r\n   JWS header that indicates the HTTP content's hash method.\r\n\r\n7.3.3.1.  Key Rotation Using Detached JWS\r\n\r\n   When rotating a key using detached JWS, the message, which includes\r\n   the new public key value or reference, is first signed with the old\r\n   key as described above using a JWS object with typ header value\r\n   \"gnap-binding-rotation-jwsd\".  The value of the JWS object is then\r\n   taken as the payload of a new JWS object, to be signed by the new key\r\n   using the parameters above.\r\n\r\n   The value of the new JWS object is sent in the Detached-JWS header.\r\n", "correct_text": "N/A", "notes": "This section standardises the use of the Detached-JWS HTTP header. This header was not registered in  the IANA Considerations section and is not a registered HTTP header.\r\n\r\nI am unsure what the best way to correct this ommission is.\n --VERIFIER NOTES-- \n   This was indeed an issue.  We fixed it another way.", "submit_date": "2024-12-04", "submitter_name": "Erin Shepherd", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:44:28"}, {"errata_id": "8199", "doc-id": "RFC8972", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.4", "orig_text": "Also, the Session-Reflector MUST copy the value of the DSCP and ECN\r\nfields of the IP header of the received STAMP test packet into the\r\nDSCP2 field in the reflected test packet.", "correct_text": "Also, the Session-Reflector MUST copy the value of the DSCP and ECN\r\nfields of the IP header of the received STAMP test packet into the\r\nDSCP2 and ECN fields, respectively, in the reflected test packet.", "notes": "First, thank you to all the IETF contributors who do such amazing work to keep the Internet going (seriously!). I noticed this minor omission while implementing the specification. I spoke with Mr. Mirsky (one of the authors) who suggested I file this report. Of course, the authors' intent is not in doubt, but he suggested that I submit this report nonetheless. Besides this very minor misstatement, as someone writing an implementation who was completely uninvolved in drafting the RFC, I have found this document to be incredibly readable and easy to follow -- thank you!\r\n\r\n[Edit: WK (Ops AD): Thanks for the Errata (and the kind note) ].", "submit_date": "2024-12-04", "submitter_name": "William Hawkins", "verifier_id": "", "verifier_name": "Warren Kumari (Ops AD)", "update_date": "2024-12-04 18:59:56"}, {"errata_id": "8200", "doc-id": "RFC5222", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "15 & Apdx A", "orig_text": "In section 15:\r\n  ##\r\n  ##         Any element not in the LoST namespace.\r\n  ##\r\n  notLost = element * - (ns1:* | ns1:*) { anyElement }\r\n\r\nAnd in Appendix A:\r\n       <define name=\"notLost\">\r\n         <a:documentation>\r\n           Any element not in the LoST namespace.\r\n         </a:documentation>\r\n         <element>\r\n           <anyName>\r\n             <except>\r\n               <nsName ns=\"urn:ietf:params:xml:ns:lost1\"/>\r\n               <nsName/>\r\n             </except>\r\n           </anyName>\r\n           <ref name=\"anyElement\"/>\r\n         </element>\r\n       </define>", "correct_text": "In section 15:\r\n  ##\r\n  ##         Any element having a namespace other than the LoST namespace.\r\n  ##\r\n  notLost = element * - (ns1:* | local:*) { anyElement }\r\n\r\nAnd in Appendix A:\r\n       <define name=\"notLost\">\r\n         <a:documentation>\r\n           Any element having a namespace other than the LoST namespace.\r\n         </a:documentation>\r\n         <element>\r\n           <anyName>\r\n             <except>\r\n               <nsName ns=\"urn:ietf:params:xml:ns:lost1\"/>\r\n               <nsName ns=\"\"/>\r\n             </except>\r\n           </anyName>\r\n           <ref name=\"anyElement\"/>\r\n         </element>\r\n       </define>", "notes": "The schema, in both the compact and XML versions, uses the \"notLost\" name-class to implement extension points.  Both definitions, as they appear in the original text, exclude the LoST namespace twice.  This appears to be a mistake.\r\n\r\nSome of the included comments suggest that the intent was to include only elements from other namespaces, implying that elements without a namespace would be excluded.  The patterns used are quite similar to examples appearing in the Name Classes sections of the RELAX NG tutorials that do exactly that.\r\n\r\nThe proposed correction fixes the schemas to exclude elements without a namespace and eliminates the redundancy with respect to the LoST namespace itself.  The comment text is also changed to be consistent with the result and other comments.", "submit_date": "2024-12-04", "submitter_name": "Dan Banks", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8201", "doc-id": "RFC8409", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "It is RECOMMENDED that http:-scheme or https:-scheme URLs are used;\r\nit is further RECOMMENDED that each such value resolves to a human-\r\nreadable document defining the value's semantics.", "correct_text": "Each such value might resolve to a human-readable document.  The same\r\nprecautions and restrictions about URIs discussed in the erratum to\r\nSection 3.1 apply here as well.\r\n", "notes": "(Reported on behalf of Alfonso Alongi <alfonso.alongi.it@gmail.com>. \r\n", "submit_date": "2024-12-02", "submitter_name": "Jean Mahoney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-06 12:55:46"}, {"errata_id": "8202", "doc-id": "RFC8409", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "(Top of Section)", "correct_text": "Add to top of Section 6:\r\n\r\nPlease note that the macedir.org domain used in the names of\r\nthe two SAML Attributes defined in this specification has been\r\ntaken over by a third party that is not affiliated with the\r\noriginal owner of the domain at the time this specification\r\nwas authored.  As discussed in the erratum to Section 3.1, \r\nimplementations MUST NOT attempt to resolve\r\nthose names as URLs, and readers are advised that doing so\r\nwill yield no information related to this work.", "notes": "Reported on behalf of Alfonso Alongi <alfonso.alongi.it@gmail.com>. \r\n", "submit_date": "2024-12-02", "submitter_name": "Jean Mahoney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2024-12-06 12:57:55"}, {"errata_id": "8204", "doc-id": "RFC5906", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Table of Contents", "orig_text": "   13. IANA Considerations ...........................................42\r\n   13. References ....................................................42\r\n      13.1. Normative References .....................................42\r\n      13.2. Informative References ...................................43", "correct_text": "   13. IANA Considerations ...........................................42\r\n   14. References ....................................................42\r\n      14.1. Normative References .....................................42\r\n      14.2. Informative References ...................................43", "notes": "Repeated Section 13 in the Table of Contents. (14 is correctly numbered in the body of the document.)", "submit_date": "2024-12-06", "submitter_name": "RFC Editor", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-12-06 18:03:41"}, {"errata_id": "8207", "doc-id": "RFC5248", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.4", "orig_text": "| X.5.3  | 451           |", "correct_text": "| X.5.3  | 452           |", "notes": "Section 4.5.3.1.10 of RFC 5321 states the following:                  \r\n                                                                                                \r\n   \"If an SMTP server has an implementation limit on the number of RCPT commands and this limit is exhausted, it MUST use a response code of 452 (but the client SHOULD also be prepared for a 552, as noted above).\" \r\n\r\nThe \"451\" Associated Basic Status Code in the Enhanced Status Codes Registry entry for X.5.3 should be \"452\" given what is stated in RFC 5321.", "submit_date": "2024-12-07", "submitter_name": "S. Moonesamy", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8211", "doc-id": "RFC9420", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "7.4", "orig_text": "   If member B subsequently generates an UpdatePath based on a secret\r\n   \"leaf_secret\", then it would generate the following sequence of path\r\n   secrets:", "correct_text": "   If member B subsequently generates an UpdatePath based on a secret\r\n   \"path_secret[0]\", then it would generate the following sequence of\r\n   path secrets:", "notes": "This text is a vestige of an early method of computing path secrets, which started with a fresh leaf_secret instead of a fresh path_secret[0], the latter being clearly specified just above this text.\r\n\r\nFigure 14 should also be updated to remove the leaf_secret and the two arrows emerging from it.", "submit_date": "2024-12-11", "submitter_name": "Richard Barnes", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8213", "doc-id": "RFC9242", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.2", "orig_text": "                        1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ^ ^\r\n   |                       IKE SA Initiator's SPI                  | | |\r\n   |                                                               | | |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ I |\r\n   |                       IKE SA Responder's SPI                  | K |\r\n   |                                                               | E |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+   |\r\n   |  Next Payload | MjVer | MnVer | Exchange Type |     Flags     | H |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ d |\r\n   |                          Message ID                           | r A\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | |\r\n   |                       Adjusted Length                         | | |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ v |\r\n   |                                                               |   |\r\n   ~                 Unencrypted payloads (if any)                 ~   |\r\n   |                                                               |   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ^ |\r\n   | Next Payload  |C|  RESERVED   |    Adjusted Payload Length    | | |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | v\r\n   |                                                               | |\r\n   ~                     Initialization Vector                     ~ E\r\n   |                                                               | E\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ c ^\r\n   |                                                               | r |\r\n   ~             Inner payloads (not yet encrypted)                ~   P\r\n   |                                                               | P |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ l v\r\n   |              Padding (0-255 octets)           |  Pad Length   | d\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |\r\n   |                                                               | |\r\n   ~                    Integrity Checksum Data                    ~ |\r\n   |                                                               | |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ v", "correct_text": "                        1                   2                   3\r\n    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ^ ^\r\n   |                       IKE SA Initiator's SPI                  | | |\r\n   |                                                               | | |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ I |\r\n   |                       IKE SA Responder's SPI                  | K |\r\n   |                                                               | E |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+   |\r\n   |  Next Payload | MjVer | MnVer | Exchange Type |     Flags     | H |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ d |\r\n   |                          Message ID                           | r A\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | |\r\n   |                       Adjusted Length                         | | |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ v |\r\n   |                                                               |   |\r\n   ~                 Unencrypted payloads (if any)                 ~   |\r\n   |                                                               |   |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ^ |\r\n   | Next Payload  |C|  RESERVED   |    Adjusted Payload Length    | | |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | v\r\n   |                                                               | |\r\n   ~                     Initialization Vector                     ~ E\r\n   |                                                               | n\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ c ^\r\n   |                                                               | r |\r\n   ~             Inner payloads (not yet encrypted)                ~   P\r\n   |                                                               | P |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ l v\r\n   |              Padding (0-255 octets)           |  Pad Length   | d\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |\r\n   |                                                               | |\r\n   ~                    Integrity Checksum Data                    ~ |\r\n   |                                                               | |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ v", "notes": "Typo in the figure: the vertical sidebar right to the Encrypted Payload should be marked as \"Encr pld\", currently it is marked \"EEcr pld\".", "submit_date": "2024-12-18", "submitter_name": "Valery Smyslov", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2024-12-18 21:23:31"}, {"errata_id": "8214", "doc-id": "RFC5905", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.5.5.7", "orig_text": "  /*\r\n   * rstclock() - clock state machine\r\n   */\r\n  void\r\n  rstclock(\r\n          int     state,          /* new state */\r\n          double  offset,         /* new offset */\r\n          double  t               /* new update time */\r\n          )\r\n  {\r\n          /*\r\n           * Enter new state and set state variables.  Note, we use the\r\n           * time of the last clock filter sample, which must be earlier\r\n           * than the current time.\r\n           */\r\n          c.state = state;\r\n          c.last = c.offset = offset;\r\n          s.t = t;\r\n  }", "correct_text": "  /*\r\n   * rstclock() - clock state machine\r\n   */\r\n  void\r\n  rstclock(\r\n          int     state,          /* new state */\r\n          double  t,              /* new update time */\r\n          double  offset          /* new offset */\r\n          )\r\n  {\r\n          /*\r\n           * Enter new state and set state variables.  Note, we use the\r\n           * time of the last clock filter sample, which must be earlier\r\n           * than the current time.\r\n           */\r\n          c.state = state;\r\n          c.last = c.offset = offset;\r\n          s.t = t;\r\n  }", "notes": "These are all the calls of rstclock in the example code:\r\n\r\n- rstclock(FSET, 0, 0); inside main(), pg 71\r\n- rstclock(NSET, 0, 0); inside main(), pg 71\r\n- rstclock(FREQ, p->t, 0); inside local_clock(), pg 100\r\n- rstclock(SYNC, p->t, 0); inside local_clock(), pg 100\r\n- rstclock(FREQ, p->t, offset); inside local_clock(), pg 100\r\n- rstclock(SYNC, p->t, offset); inside local_clock(), pg 101\r\n- rstclock(SYNC, p->t, offset); inside local_clock(), pg 102\r\n\r\nAll calls use the new update time as the second argument and the new offset as the third argument, or set both to zero. But the definition of rstclock expects the new offset as the second argument and the new update time as the third, i.e. the order of the parameters is flipped.", "submit_date": "2024-12-18", "submitter_name": "Manuel Bergler", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-11 00:33:40"}, {"errata_id": "8215", "doc-id": "RFC5905", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "A.5.5.4", "orig_text": "        /*\r\n         * Combine the survivor offsets and update the system clock; the\r\n         * local_clock() routine will tell us the good or bad news.\r\n         */\r\n        s.t = p->t;\r\n        clock_combine();\r\n        switch (local_clock(p, s.offset)) {\r\n.....\r\n        }", "correct_text": "        /*\r\n         * Combine the survivor offsets and update the system clock; the\r\n         * local_clock() routine will tell us the good or bad news.\r\n         */\r\n        clock_combine();\r\n        switch (local_clock(p, s.offset)) {\r\n.....\r\n        }\r\n        s.t = p->t;", "notes": "The `clock_update` function sets `s.t` to the value of `p->t` before calling `local_clock`. This causes the assignment `mu =  p->t - s.t;` inside the `local_clock` function to always set `mu` to zero, which in turn causes a division by zero when evaluating `freq = (offset - c.offset) / mu;`\r\n\r\nLuckily, neither `clock_combine()` nor any code inside the switch's cases make use of `s.t`, neither directly nor indirectly. Moreover, the only way to return early from the `clock_update` function is by exiting the program entirely. Moving the assignment to after the `switch` thus cannot cause bugs due to using an outdated value in `clock_combine`, any of the cases and anything happening after `clock_update` returns.\r\n\r\nAll that is left to do to verify that the suggested correction fixes the problem without introducing other bugs is to ensure that moving the assignment doesn't unintentionally change the behavior of the `local_clock` function. There are three distinct cases how `s.t` is used inside `local_clock`:\r\n\r\n- Its value is used in the (currently problematic) calculation of `mu`\r\n- Its value is updated through calls of `rstclock`\r\n- Its value is used in the condition of the `if` statement `if (c.t - s.t < WATCH) return (IGNORE);` in the `FREQ` case on pg 101\r\n\r\nThe change of behavior of the computation of `mu` is the intended effect of this erratum, so that is fine.\r\nThe calls to `rstclock` all set the value of `s.t` to the value of `p->t` (assuming erratum 8214 [0] is correct) , so having the assignment `s.t = p->t;` at the end of `clock_update` fortunately doesn't conflict with the value set by `rstclock`.\r\n\r\nSince I haven't fully grasped how the clock discipline is supposed to work I'm unsure about what to do with the `c.t - s.t < WATCH` condition, though. It might be the case that the condition should've used the old value of `s.t` just like the computation of `mu`, in which case there is nothing to do. If, however, the current behavior is correct, the condition has to be replaced by `c.t - p->t < WATCH`.\r\n\r\n\r\n[0] https://www.rfc-editor.org/errata/eid8214\r\n\r\n\r\n--- notes ---\r\n\r\nMarking as HFDU, but noting here that my preferred \"document update\" strategy would be to DELETE ALL CODE from the document.", "submit_date": "2024-12-18", "submitter_name": "Manuel Bergler", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-10-18 23:10:55"}, {"errata_id": "8217", "doc-id": "RFC3516", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7", "orig_text": "   msg-att-static =/  \"BINARY\" section-binary SP (nstring / literal8)\r\n                      / \"BINARY.SIZE\" section-binary SP number", "correct_text": "   msg-att-static =/  \"BINARY\" section-binary [\"<\" number \">\"] SP (nstring / literal8)\r\n                      / \"BINARY.SIZE\" section-binary SP number", "notes": "Section 4.3 describes the response as:\r\n\r\n    BINARY<section-binary>[<<number>>]\r\n\r\nBut the number is missing from the ABNF.\r\n\r\nIt seems like Dovecot sends the number in the response, and imaptest expects it.", "submit_date": "2024-12-21", "submitter_name": "Simon Ser", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8222", "doc-id": "RFC127", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Listen for Connection on L                RTS, U, L, l\r\n     STR, L, U, 32                                    A", "correct_text": "Listen for Connection on L\r\n                                            RTS, U, L, l\r\n                                                        A\r\nSTR, L, U, 32\r\n\r\n\r\n\r\n", "notes": "I do not have a scan of the original printed RFC to check, but I believe there may have been\r\na transcription error when the ASCII text version of this RFC was prepared. (Either that, or\r\nthe typed original contained a formatting error.)\r\n\r\nThe issue is that there is a time delay (perhaps a considerable one) between the \"Listen\" and\r\nthe sending of the STR (which is necessarily a reply to the RTS message).\r\nThe inclusion of the blank line makes this timing/ordering clear(er).", "submit_date": "2024-12-27", "submitter_name": "Noel Chiappa", "verifier_id": "", "verifier_name": null, "update_date": "2025-01-21 18:07:43"}, {"errata_id": "8223", "doc-id": "RFC9606", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "Each key/value pair is encoded using the format rules defined\r\nin Section 6.3 of [RFC6763].", "correct_text": "Each key/value pair is encoded as its own constituent string\r\nusing the format rules defined in Section 6.3 of [RFC6763].", "notes": "Although the example in section 6 indicates that each key/value pair inhabits its own string,\r\nthe requirement is stated indirectly by reference to RFC6763(6.3).\r\n\r\nThis requirement need to be explicitly included in section 4.\r\n\r\nI am aware of one implementation which mistakenly encodes three attributes within a single string.\n --VERIFIER NOTES-- \nSee the author's reply at https://mailarchive.ietf.org/arch/msg/add/czP4qw0XdeZ38tDqUk7adHj51A4/ and the verifier agrees with the author.", "submit_date": "2024-12-28", "submitter_name": "Dick Franks", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 08:10:44"}, {"errata_id": "8224", "doc-id": "RFC3461", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2", "orig_text": "If an addr-type is\r\n   defined for addresses which use characters outside of this\r\n   repertoire, the specification for that addr-type MUST define the\r\n   means of encoding those addresses in printable US-ASCII characters\r\n   when are then encoded as xtext.", "correct_text": "If an addr-type is \r\n   defined for addresses which use characters outside of this \r\n   repertoire, the specification for that addr-type MUST define the \r\n   means of encoding those addresses in printable US-ASCII characters \r\n   which are then encoded as xtext.", "notes": "\"characters when are then\" should be \"characters which are then\".", "submit_date": "2024-12-30", "submitter_name": "Alan Haggai Alavi", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-06 16:55:55"}, {"errata_id": "8225", "doc-id": "RFC7519", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.2", "orig_text": "   7.   Depending upon whether the JWT is a JWS or JWE, there are two\r\n        cases:\r\n\r\n        *  If the JWT is a JWS, follow the steps specified in [JWS] for\r\n           validating a JWS.  Let the Message be the result of base64url\r\n           decoding the JWS Payload.\r\n\r\n        *  Else, if the JWT is a JWE, follow the steps specified in\r\n           [JWE] for validating a JWE.  Let the Message be the resulting\r\n           plaintext.\r\n\r\n   8.   If the JOSE Header contains a \"cty\" (content type) value of\r\n        \"JWT\", then the Message is a JWT that was the subject of nested\r\n        signing or encryption operations.  In this case, return to Step\r\n        1, using the Message as the JWT.\r\n\r\n   9.   Otherwise, base64url decode the Message following the\r\n        restriction that no line breaks, whitespace, or other additional\r\n        characters have been used.\r\n\r\n   10.  Verify that the resulting octet sequence is a UTF-8-encoded\r\n        representation of a completely valid JSON object conforming to\r\n        RFC 7159 [RFC7159]; let the JWT Claims Set be this JSON object.", "correct_text": "   7.   Depending upon whether the JWT is a JWS or JWE, there are two\r\n        cases:\r\n\r\n        *  If the JWT is a JWS, follow the steps specified in [JWS] for\r\n           validating a JWS.  Let the Message be the result of base64url\r\n           decoding the JWS Payload.\r\n\r\n        *  Else, if the JWT is a JWE, follow the steps specified in\r\n           [JWE] for validating a JWE.  Let the Message be the resulting\r\n           plaintext.\r\n\r\n   8.   If the JOSE Header contains a \"cty\" (content type) value of\r\n        \"JWT\", then the Message is a JWT that was the subject of nested\r\n        signing or encryption operations.  In this case, return to Step\r\n        1, using the Message as the JWT.\r\n\r\n   9.   Verify that the resulting octet sequence is a UTF-8-encoded\r\n        representation of a completely valid JSON object conforming to\r\n        RFC 7159 [RFC7159]; let the JWT Claims Set be this JSON object.", "notes": "If the JWT is a JWS, then the Message, as defined in step (7), is already base64url decoded.\r\n\r\nIf the JWT is a JWE, then the Message, defined as the resulting plaintext in step (7) is not base64url encoded at all per [JWE].\r\n\r\nRepeating the base64url decode operation here would yield a bad octet sequence.\r\n\r\nThe decoding instructions regarding line breaks, whitespace, and other characters, are also already part of the validations steps in [JWS] and may be redundant here. Otherwise, they could be moved to the relevant passage about base64url decryption in step (7).", "submit_date": "2024-12-31", "submitter_name": "Alex Giannakakos", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8226", "doc-id": "RFC761", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "Control Bits:  8 bits (from left to right):\r\n\r\n    URG:  Urgent Pointer field significant\r\n    ACK:  Acknowledgment field significant\r\n    EOL:  End of Letter\r\n    RST:  Reset the connection\r\n    SYN:  Synchronize sequence numbers\r\n    FIN:  No more data from sender", "correct_text": "Control Bits:  6 bits (from left to right):\r\n\r\n    URG:  Urgent Pointer field significant\r\n    ACK:  Acknowledgment field significant\r\n    EOL:  End of Letter\r\n    RST:  Reset the connection\r\n    SYN:  Synchronize sequence numbers\r\n    FIN:  No more data from sender", "notes": "The \"control bits\" field includes 6 bits as listed, while the line says they are 8 bits.\r\nI might be mistaken, if so please tell me, but I assume it is a typing error due to distraction.", "submit_date": "2025-01-01", "submitter_name": "Mattia Marchese", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-06 17:14:28"}, {"errata_id": "8235", "doc-id": "RFC9200", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "F.2", "orig_text": "The AS responds with a CoAP 2.05 Content response, containing as\r\npayload the Access Information, including the access token and the\r\n\r\n...\r\n\r\n    |         |\r\nB:  |<--------+ Header: 2.05 Content\r\n    |         | Content-Format: application/ace+cbor\r\n    |  2.05   | Payload: <Response-Payload>\r\n    |         |\r\n\r\n...", "correct_text": "The AS responds with a CoAP 2.01 Created response, containing as\r\npayload the Access Information, including the access token and the\r\n\r\n...\r\n\r\n    |         |\r\nB:  |<--------+ Header: 2.01 Created\r\n    |         | Content-Format: application/ace+cbor\r\n    |  2.01   | Payload: <Response-Payload>\r\n    |         |\r\n\r\n...", "notes": "The quoted text and the example in Figure 16 consider a response with CoAP response code 2.05 (Content). However, as defined in Section 5.8.2, a successful response from the /token endpoint has CoAP response code 2.01 (Created).\r\n\r\nMoreover, 2.05 (Content) is not a valid CoAP response code for a response to a POST request, see Section 10.1.4 of RFC 7252.", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8236", "doc-id": "RFC9200", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "F.2", "orig_text": "The AS provides the introspection response (2.05 Content) containing\r\nparameters about the token.\r\n\r\n...\r\n\r\n    |         |          |\r\n    |      E: |<---------+ Header: 2.05 Content\r\n    |         |  2.05    | Content-Format: application/ace+cbor\r\n    |         |          | Payload: <Response-Payload>\r\n    |         |          |\r\n\r\n...", "correct_text": "The AS provides the introspection response (2.01 Created) containing\r\nparameters about the token.\r\n\r\n...\r\n\r\n    |         |          |\r\n    |      E: |<---------+ Header: 2.01 Created\r\n    |         |  2.01    | Content-Format: application/ace+cbor\r\n    |         |          | Payload: <Response-Payload>\r\n    |         |          |\r\n\r\n...", "notes": "The quoted text and the example in Figure 18 consider a response with CoAP response code 2.05 (Content). However, as defined in Section 5.9.2, a successful response from the /introspect endpoint has CoAP response code 2.01 (Created).\r\n\r\nMoreover, 2.05 (Content) is not a valid CoAP response code for a response to a POST request, see Section 10.1.4 of RFC 7252.", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8237", "doc-id": "RFC9200", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.8.5", "orig_text": "+-------------------+----------+-------------+---------------+\r\n| ace_profile       | 38       | integer     | RFC 9200      |\r\n+-------------------+----------+-------------+---------------+", "correct_text": "+-------------------+----------+-------------+---------------+\r\n| ace_profile       | 38       | Null or     | RFC 9200      |\r\n|                   |          | integer     |               |\r\n+-------------------+----------+-------------+---------------+", "notes": "As defined in Section 5.8.1, the parameter \"ace_profile\" can be included with CBOR Simple Value `null` (0xf6) in Access Token Requests. Therefore, the entry for the parameter \"ace_profile\" in Table 5 should not say \"integer\" as Value Type, but instead \"Null or integer\".\r\n\r\nThe entry for \"ace_profile\" in the IANA registry at [1] should be updated accordingly.\r\n\r\n[1] https://www.iana.org/assignments/ace/ace.xhtml#oauth-parameters-cbor-mappings", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8238", "doc-id": "RFC9200", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.9", "orig_text": "Parameter Usage Location: token response", "correct_text": "Parameter Usage Location: token request, token response", "notes": "As defined in Section 5.8.1, the parameter \"ace_profile\" can be included with CBOR Simple Value `null` (0xf6) in Access Token Requests. Therefore, \"ace_profile\" as an OAuth parameter is intended for both token requests and token responses.\r\n\r\nThe entry for \"ace_profile\" in the IANA registry at [2] should be updated accordingly.\r\n\r\n[1] https://www.iana.org/assignments/oauth-parameters/oauth-parameters.xhtml#parameters", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8243", "doc-id": "RFC2622", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "5.3 Predefined Set Objects\r\n\r\n   In a context that expects a route set (e.g.  members attribute of the\r\n   route-set class), an AS number ASx defines the set of routes that are\r\n   originated by ASx; and an as-set AS-X defines the set of routes that\r\n   are originated by the ASes in AS-X. A route p is said to be\r\n   originated by ASx if there is a route object for p with ASx as the\r\n   value of the origin attribute.  For example, in Figure 15, the route\r\n   set rs-special contains 128.9.0.0/16, routes of AS1 and AS2, and\r\n   routes of the ASes in AS set AS-FOO.\r\n\r\n   route-set: rs-special\r\n   members: 128.9.0.0/16, AS1, AS2, AS-FOO\r\n\r\n\r\n          Figure 15:  Use of AS numbers and AS sets in route sets.\r\n\r\n   The set rs-any contains all routes registered in IRR. The set as-any\r\n   contains all ASes registered in IRR.\r\n\r\n", "correct_text": "   In a context that expects a route set (e.g.  members attribute of the\r\n   route-set class), an AS number ASx defines the set of routes that are\r\n   originated by ASx; and an as-set AS-X defines the set of routes that\r\n   are originated by the ASes in AS-X. A route p is said to be\r\n   originated by ASx if there is a route object for p with ASx as the\r\n   value of the origin attribute.  For example, in Figure 15, the route\r\n   set rs-special contains 128.9.0.0/16, routes of AS1 and AS2, and\r\n   routes of the ASes in AS set AS-FOO.\r\n\r\n   route-set: rs-special\r\n   members: 128.9.0.0/16, AS1, AS2, AS-FOO\r\n\r\n\r\n          Figure 15:  Use of AS numbers and AS sets in route sets.\r\n\r\n5.3 Predefined Set Objects\r\n\r\n   The set rs-any contains all routes registered in IRR. The set as-any\r\n   contains all ASes registered in IRR.\r\n", "notes": "The section header for 5.3 is misplaced. It breaks 5.2 (definition and examples of route-set) at a place that does not make sense in context. The section break should be after the caption for Figure 15. The last two sentences (beginning with \"The set rs-any\") are the only text referring to predefined set objects.", "submit_date": "2025-01-06", "submitter_name": "Michael Lambert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-07 16:14:49"}, {"errata_id": "8229", "doc-id": "RFC8613", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.3", "orig_text": "Note that the message binding does not guarantee that a misbehaving\r\nserver created the response before receiving the request, i.e., it\r\ndoes not verify server aliveness.", "correct_text": "Note that the message binding does not prevent a misbehaving\r\nserver from creating the response before receiving the request, i.e.,\r\nOSCORE does not verify server aliveness.", "notes": "The original text should have said \"does not guarantee that a misbehaving server did not create\", so a negation was missing. The new text addresses that, using \"prevent\" instead of \"guarantee\" in order to avoid a double negation.", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-03 15:22:31"}, {"errata_id": "8230", "doc-id": "RFC8613", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.4", "orig_text": "If either the decompression or the COSE message fails to decode,\r\nthen go to 8.", "correct_text": "If the decompression fails, or the Recipient Context is\r\nunusable or invalid, or the COSE message fails to decode,\r\nthen go to 8.", "notes": "There is currently no definition of \"invalid\" Security Context. Any later update on this can build on https://datatracker.ietf.org/doc/draft-ietf-core-oscore-key-limits/", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Francesca Palombini", "update_date": "2025-03-12 13:11:02"}, {"errata_id": "8231", "doc-id": "RFC9202", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3.2", "orig_text": "The client then needs to indicate during the DTLS handshake which\r\npreviously uploaded access token it intends to use. To do so, it MUST\r\ncreate a COSE_Key structure with the kid that was conveyed in the\r\nrs_cnf claim in the token response from the authorization server and\r\nthe key type symmetric.", "correct_text": "The client then needs to indicate during the DTLS handshake which\r\npreviously uploaded access token it intends to use. To do so, it MUST\r\ncreate a COSE_Key structure with the kid that was conveyed in the\r\ncnf parameter in the token response from the authorization server and\r\nthe key type symmetric.", "notes": "The token response includes parameters, not claims.\r\n\r\nAlso, per Section 3.2 of RFC 9201, the rs_cnf parameter is \"OPTIONAL if the token type is \"pop\" and asymmetric keys are used\", while it \"MUST NOT be present otherwise.\" At the same time, the cnf parameter is \"REQUIRED if the token type is \"pop\" and a symmetric key is used.\"\r\n\r\nThe quoted paragraph from Section 3.3.2 of RFC 9202 refers to the PSK mode. Hence, per Section 3.2 of RFC 9201, the cnf parameter should be included in the token response from the authorization server (not the rs_cnf parameter).\r\n\r\nThis is also consistent with the last paragraph in the same Section 3.3.2.", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8232", "doc-id": "RFC9200", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.8.2", "orig_text": "/ ace_profile / 38 : \"coap_dtls\",", "correct_text": "/ ace_profile / 38 : 1 / coap_dtls /,", "notes": "The example in Figure 7 shows a response with Content-Format \"application/ace+cbor\". Therefore, the value of the parameter 'ace_profile' must be encoded as a CBOR integer, consistent with Section 5.8.4.3 that says:\r\n\r\n> A profile MUST specify an identifier that MUST be used to uniquely identify itself in the ace_profile parameter. The textual representation of the profile identifier is intended for human readability and for JSON-based interactions; it MUST NOT be used for CBOR-based interactions.", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8233", "doc-id": "RFC9200", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "F.1", "orig_text": "The AS responds with a 2.05 (Content) response containing the\r\nAccess Information, including the access token. The PoP access\r\n\r\n...\r\n\r\n\r\n    |         |\r\nB:  |<--------+ Header: 2.05 Content\r\n    |  2.05   | Content-Format: application/ace+cbor\r\n    |         | Payload: <Response-Payload>\r\n    |         |\r\n\r\n...", "correct_text": "The AS responds with a 2.01 (Created) response containing the\r\nAccess Information, including the access token. The PoP access\r\n\r\n...\r\n\r\n    |         |\r\nB:  |<--------+ Header: 2.01 Created\r\n    |  2.01   | Content-Format: application/ace+cbor\r\n    |         | Payload: <Response-Payload>\r\n    |         |\r\n\r\n...", "notes": "The quoted text and the example in Figure 11 consider a response with CoAP response code 2.05 (Content). However, as defined in Section 5.8.2, a successful response from the /token endpoint has CoAP response code 2.01 (Created).\r\n\r\nMoreover, 2.05 (Content) is not a valid CoAP response code for a response to a POST request, see Section 10.1.4 of RFC 7252.", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8234", "doc-id": "RFC9200", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "F.1", "orig_text": "    |         |\r\n    |<--------+ Header: 2.04 Changed\r\n    |  2.04   |\r\n    |         |\r\n", "correct_text": "    |         |\r\n    |<--------+ Header: 2.01 Created\r\n    |  2.01   |\r\n    |         |\r\n", "notes": "The example in Figure 14 shows a response with CoAP response code 2.04 (Changed). However, as defined in Section 5.9.2, a successful response from the /authz-info endpoint has CoAP response code 2.01 (Created).", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8239", "doc-id": "RFC9594", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.4.1.1", "orig_text": "Payload (in CBOR diagnostic notation):\r\n{\r\n  / creds /            13: [h'a2026008a101a5010202410320012158", "correct_text": "Payload (in CBOR diagnostic notation):\r\n{\r\n  / num /               9: 12,\r\n  / creds /            13: [h'a2026008a101a5010202410320012158", "notes": "The reported Figure 17 shows an example of 2.05 (Content) response to a FETCH request sent to the resource /ace-group/GROUPNAME/creds at the KDC.\r\n\r\nIn that example, the parameter 'num' is missing in the response, while the parameter has to be included according to the format of that response as defined in Section 4.4.1, i.e.:\r\n\r\n> If all verifications succeed, the handler returns a 2.05 (Content) message response with the payload formatted as a CBOR map, containing only the following parameters from Section 4.3.1.\r\n> \r\n> * 'num': encoding the version number of the current group keying material.\r\n> * 'creds': encoding the list of authentication credentials of the selected group members.\r\n> * 'peer_roles': encoding the role(s) that each of the selected group members has in the group. This parameter SHOULD be present, and it MAY be omitted according to the same criteria defined for the Join Response (see Section 4.3.1).\r\n> * 'peer_identifiers': encoding the node identifier that each of the selected group members has in the group.", "submit_date": "2025-01-03", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8240", "doc-id": "RFC9000", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12.4", "orig_text": "0x1c-0x1d   CONNECTION_CLOSE  Section 19.19  ih01  N", "correct_text": "0x1c-0x1d   CONNECTION_CLOSE  Section 19.19  ih01  NC", "notes": "QUIC congestion control RFC 9002 (https://www.rfc-editor.org/rfc/rfc9002) section 3 states:\r\n\r\n\"The types of frames contained in a packet affect recovery and congestion control logic:\r\n...\r\nPackets containing frames besides ACK or CONNECTION_CLOSE frames count toward congestion control limits and are considered to be in flight.\"\r\n\r\nSo as per RFC-9002, it means that ACK and CONNECTION_CLOSE frames do not contribute to congestion control limits.\r\n\r\nOn the other hand, RFC-9000, section 12.4 has a Table 3 (https://www.rfc-editor.org/rfc/rfc9000#frame-types) which states:\r\n\r\n\"The \"Spec\" column in Table 3 summarizes any special rules governing the processing or generation of the frame type, as indicated by the following characters:\r\n...\r\nC: Packets containing only frames with this marking do not count toward bytes in flight for congestion control purposes; see [QUIC-RECOVERY].\"\r\n\r\nHowever, in that table, the CONNECTION_CLOSE frame isn't marked with the \"C\" character and only the ACK frame is. This appears to be an oversight in that table in RFC-9000.\r\n\r\n\r\nSee related discussions here ( https://mailarchive.ietf.org/arch/msg/quic/M3j4UsFxXPS6A8EX1d2zW_ZQrMQ/ )\r\n", "submit_date": "2025-01-06", "submitter_name": "Jaikiran Pai", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2025-03-18 10:39:39"}, {"errata_id": "8242", "doc-id": "RFC6265", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.1", "orig_text": "cookie-value      = *cookie-octet / ( DQUOTE *cookie-octet DQUOTE )", "correct_text": "cookie-value      = ( DQUOTE *cookie-octet DQUOTE ) / *cookie-octet", "notes": "Many parsers process ABNF alternatives left-to-right and do not backtrack if an alternative partially matches but ultimately fails. This is why placing *cookie-octet first can cause issues.\r\n\r\nThe quoted pattern ( DQUOTE *cookie-octet DQUOTE ) is more specific than the unquoted pattern *cookie-octet. Placing it first ensures that the parser prioritizes correctly. Quoted values are matched as a whole first. If the value isn\u2019t quoted, the parser safely falls back to checking for unquoted *cookie-octet.", "submit_date": "2025-01-06", "submitter_name": "Vladim\u00edr Gorej", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-01-14 15:32:42"}, {"errata_id": "8244", "doc-id": "RFC2324", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "All HTCPCP servers should be referred to with the \"coffee:\" URI scheme \r\n(Section 4).", "correct_text": "All HTCPCP servers should be referred to with the \"coffee:\" URI scheme \r\n(Section 3).", "notes": "The coffee: URI scheme is described in Section 3, not Section 4.", "submit_date": "2025-01-07", "submitter_name": "Robert Sayre", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-07 16:17:27"}, {"errata_id": "8245", "doc-id": "RFC8894", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "    signerInfo {\r\n      signedAttrs {\r\n        transactionID,\r\n        messageType,\r\n        pkiStatus,\r\n        failInfo,          -- Optional\r\n        senderNonce / recipientNonce,\r\n        },\r\n      signature\r\n      }\r\n    }", "correct_text": "    signerInfo {\r\n      authenticatedAttributes {\r\n        transactionID,\r\n        messageType,\r\n        pkiStatus,\r\n        failInfo,          -- Optional\r\n        senderNonce / recipientNonce,\r\n        },\r\n      signature\r\n      }", "notes": "There is no reference to \"signedAttrs\" in the RFC other than once Figure 6. I believe this is supposed to be \"authenticatedAttributes\" based on the information in section 3.2 and 3.2.1\n --VERIFIER NOTES-- \n   See text in Errata 8247 for rejection rationale", "submit_date": "2025-01-07", "submitter_name": "Angelica Semenec", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-17 13:35:57"}, {"errata_id": "8562", "doc-id": "RFC1055", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "                   /* if it's the same code as an ESC character, wait\r\n                    * and get another character and then figure out\r\n                    * what to store in the packet based on that.\r\n                    */\r\n                   case ESC:\r\n                           c = recv_char();\r\n\r\n                           /* if \"c\" is not one of these two, then we\r\n                            * have a protocol violation.  The best bet\r\n                            * seems to be to leave the byte alone and\r\n                            * just stuff it into the packet\r\n                            */\r\n                           switch(c) {\r\n                           case ESC_END:\r\n                                   c = END;\r\n                                   break;\r\n                           case ESC_ESC:\r\n                                   c = ESC;\r\n                                   break;\r\n                                   }", "correct_text": "                   /* if it's the same code as an ESC character, wait\r\n                    * and get another character and then figure out\r\n                    * what to store in the packet based on that.\r\n                    */\r\n                   case ESC:\r\n                           c = recv_char();\r\n\r\n                           /* if \"c\" is not one of these two, then we\r\n                            * have a protocol violation.  The best bet\r\n                            * seems to be to leave the byte alone and\r\n                            * just stuff it into the packet. If \"c\" is\r\n                            * an END character, the packet must end.\r\n                            * The proper way to escape an END character\r\n                            * is to prepend an ESC_END byte with an ESC.\r\n                            */\r\n                           switch(c) {\r\n                           case ESC_END:\r\n                                   c = END;\r\n                                   break;\r\n                           case ESC_ESC:\r\n                                   c = ESC;\r\n                                   break;\r\n                           case END:\r\n                                   return received;\r\n                                   }", "notes": "The example implementation (function recv_packet()) would fail to terminate the packet if an ESC END (0333 0300) sequence were received. While the RFC doesn't address such a sequence, leaving its meaning ambiguous, this behavior ought to be considered erroneous, as the proper way to escape an END character is to produce an ESC ESC_END (0333 0334) sequence. An END character is used exclusively to terminate a packet; this behavior has a higher importance for the protocol than a non-standard way to escape an END byte.\r\n\r\nInspection of a relevant implementation of SLIP in the Linux kernel (see slip_unesc() in drivers/net/slip/slip.c as of commit e6b9dce0aeeb91dfc0974ab87f02454e24566182) shows the expected behavior, supporting this interpretation.\r\n\r\nI am unaware of any implementation that encodes an escaped END byte sequence as ESC END.\r\n\r\nIn view of this, I have modified the example implementation of the protocol in the SLIP DRIVERS sections to handle this erroneous sequence correctly. This should help prevent bugs in any future implementations written based on the example in the RFC.\r\n\r\nNote: A modern revision of the SLIP specification should explicitly address invalid escape sequences. While there is no consensus on handling improperly escaped arbitrary bytes (other than ESC_END, ESC_ESC, and END), handling ESC END as described is obvious and widely implemented.\r\n\r\nNote to RFC Editor: I tried to input \"SLIP DRIVERS\" into the Section field on this erratum, but the editor didn't accept it. RFC 1055 doesn't have numbered sections.\r\n", "submit_date": "2025-09-03", "submitter_name": "Micha\u0142 K. K\u0142osowski", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-09-04 05:49:04"}, {"errata_id": "8246", "doc-id": "RFC8572", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.3", "orig_text": "          container boot-image {\r\n            description\r\n              \"Specifies criteria for the boot image the device MUST\r\n               be running, as well as information enabling the device\r\n               to install the required boot image.\";\r\n            leaf os-name {\r\n              type string;\r\n              description\r\n                \"The name of the operating system software the device\r\n                 MUST be running in order to not require a software\r\n                 image upgrade (e.g., VendorOS).\";\r\n            }\r\n            leaf os-version {\r\n              type string;\r\n              description\r\n                \"The version of the operating system software the\r\n                 device MUST be running in order to not require a\r\n                 software image upgrade (e.g., 17.3R2.1).\";\r\n            }\r\n", "correct_text": "          container boot-image {\r\n            presence\r\n              \"Indicates that boot-image information has been configured.\r\n               This statement is present so the mandatory descendant\r\n               nodes do not imply that this node must be configured.\";\r\n            description\r\n              \"Specifies criteria for the boot image the device MUST\r\n               be running, as well as information enabling the device\r\n               to install the required boot image.\";\r\n            leaf os-name {\r\n              type string;\r\n              mandatory true;\r\n              description\r\n                \"The name of the operating system software the device\r\n                 MUST be running in order to not require a software\r\n                 image upgrade (e.g., VendorOS).\";\r\n            }\r\n            leaf os-version {\r\n              type string;\r\n              mandatory true;\r\n              description\r\n                \"The version of the operating system software the\r\n                 device MUST be running in order to not require a\r\n                 software image upgrade (e.g., 17.3R2.1).\";\r\n            }\r\n", "notes": "The \"os-name\" and \"os-version\" fields MUST be specified, as stated in their \"description\" statements, and hence should be \"mandatory true\", when the boot image criteria is specified.\r\n\r\nThe \"boot-image\" container is optional, as indicated in Section 5.6 by both the \"(if any)\" in the 2nd paragraph and the \"If boot image criteria are specified\" in the 9th paragraph, and hence a \"presence\" container is used to prevent the \"boot-image\" from becoming mandatory.", "submit_date": "2025-01-10", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-01-10 12:27:33"}, {"errata_id": "8247", "doc-id": "RFC8894", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "authenticated attributes\r\n\r\nand\r\n\r\nauthenticatedAttributes", "correct_text": "signed attributes\r\n\r\nand\r\n\r\nsignedAttrs", "notes": "Throughout the document it refers to \"authenticated attributes\" and the \"authenticatedAttributes\" set.  However, SCEP uses the SignedData content type which doesn't have an authenticatedAttributes field (other content types do have this field, e.g. the RFC 2630 version of AuthenticatedData). It should refer to signed attributes instead.  This aligns with Figure 6 which includes the signerInfo.signedAttrs field.\r\n\r\nNote, if this errata is correct then errata 8245 is incorrect.", "submit_date": "2025-01-10", "submitter_name": "Daniel Van Geest", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-01-17 13:33:41"}, {"errata_id": "8250", "doc-id": "RFC8441", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4", "orig_text": "   o  On requests bearing the :protocol pseudo-header field, the\r\n      :authority pseudo-header field is interpreted according to\r\n      Section 8.1.2.3 of [RFC7540] instead of Section 8.3 of that\r\n      document.  \r\n", "correct_text": "   o  On requests bearing the :protocol pseudo-header field, the\r\n      :authority pseudo-header field is interpreted according to\r\n      Section 8.1.2.3 of [RFC7540] instead of Section 8.3 of [RFC7540].\r\n", "notes": "\"Section 8.3\" is incorrectly linked to the non-existing section 8.3 of RFC 8441 rather than section 8.3 of RFC 7540\r\n\r\n--VERIFIER NOTES-- \r\nThis is regarding the link generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc8441.txt).", "submit_date": "2025-01-14", "submitter_name": "Christoph G\u00f6pfert", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-21 18:32:25"}, {"errata_id": "8253", "doc-id": "RFC4647", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2 and 2.3", "orig_text": "   For example,\r\n   HTTP/1.1 [RFC2616] describes one such mechanism in its discussion of\r\n   the Accept-Language header (Section 14.4), which is used when\r\n   selecting content from servers based on the language of that content.\r\n...\r\n   One well-known example of such a list is the\r\n   \"Accept-Language\" header defined in RFC 2616 [RFC2616] (see Section\r\n   14.4) and RFC 3282 [RFC3282].", "correct_text": "n/a", "notes": "In the HTML version, the hyperlinks for \"Section 14.4\u201d in the sentences above should go to Section 14.4 of RFC 2616.\r\n\r\nCurrent:\r\n<a href=\"#section-14.4\u201d>\r\n\r\nShould be:\r\n<a href=\"/doc/html/rfc2616#section-14.4\">\r\n\r\n--VERIFIER NOTES-- \r\nThis is regarding the links generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc4647.txt).", "submit_date": "2025-01-17", "submitter_name": "Jia Hongchao", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-01-22 22:46:18"}, {"errata_id": "8561", "doc-id": "RFC5280", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.2.8", "orig_text": "   This profile RECOMMENDS that names not be reused for\r\n   different entities and that Internet certificates not make use of\r\n   unique identifiers.", "correct_text": "   It is RECOMMENDED that names not be reused for\r\n   different entities and that Internet certificates not make use of\r\n   unique identifiers.", "notes": "RECOMMENDS is not a normative language per: \r\n\r\n   The key words \"MUST\", \"MUST NOT\", \"REQUIRED\", \"SHALL\", \"SHALL NOT\",\r\n   \"SHOULD\", \"SHOULD NOT\", \"RECOMMENDED\", \"MAY\", and \"OPTIONAL\" in this\r\n   document are to be interpreted as described in [RFC2119].\r\n\r\nThere are other similar uses of RECOMMENDS in the document.", "submit_date": "2025-09-03", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-09-03 13:26:42"}, {"errata_id": "8263", "doc-id": "RFC9553", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2.1.1. Figure 20", "orig_text": "{\r\n     \"@type\": \"Card\",\r\n     \"language\": \"zh-Hant\",\r\n     \"name\": {\r\n       \"components\": [\r\n         { \"kind\": \"surname\", \"value\": \"\u5b6b\" },\r\n         { \"kind\": \"given\", \"value\": \"\u4e2d\u5c71\" },\r\n         { \"kind\": \"given2\", \"value\": \"\u6587\" },\r\n         { \"kind\": \"given2\", \"value\": \"\u9038\u4ed9\" }\r\n       ]\r\n     },\r\n     \"localizations\": {\r\n       \"yue\": {\r\n         \"name/phoneticSystem\": \"jyut\",\r\n         \"name/phoneticScript\": \"Latn\",\r\n         \"name/components/0/phonetic\": \"syun1\",\r\n         \"name/components/1/phonetic\": \"zung1saan1\",\r\n         \"name/components/2/phonetic\": \"man4\",\r\n         \"name/components/3/phonetic\": \"jat6sin1\"\r\n       }\r\n     }\r\n   }", "correct_text": "\"language\": \"zh-Hant\",\r\n\"name\": {\r\n  \"components\": [\r\n    { \"kind\": \"surname\", \"value\": \"\u5b6b\" },\r\n    { \"kind\": \"given\", \"value\": \"\u4e2d\u5c71\" },\r\n    { \"kind\": \"given2\", \"value\": \"\u6587\" },\r\n    { \"kind\": \"given2\", \"value\": \"\u9038\u4ed9\" }\r\n  ]\r\n},\r\n\"localizations\": {\r\n  \"yue\": {\r\n    \"name/phoneticSystem\": \"jyut\",\r\n    \"name/phoneticScript\": \"Latn\",\r\n    \"name/components/0/phonetic\": \"syun1\",\r\n    \"name/components/1/phonetic\": \"zung1saan1\",\r\n    \"name/components/2/phonetic\": \"man4\",\r\n    \"name/components/3/phonetic\": \"jat6sin1\"\r\n  }\r\n}", "notes": "The figure 20 is not following the RFC because some mandatory fields are not present: version, uid\r\n\r\nTwo possible solutions\r\n\r\n- adding missing fields. Note that this is not *my* preferred solution\r\n\r\n\r\n```json\r\n{\r\n     \"@type\": \"Card\",\r\n     \"version\": \"1.0\",\r\n     \"uid\": \"22B2C7DF-9120-4969-8460-05956FE6B065\",\r\n     \"language\": \"zh-Hant\",\r\n     \"name\": {\r\n       \"components\": [\r\n         { \"kind\": \"surname\", \"value\": \"\u5b6b\" },\r\n         { \"kind\": \"given\", \"value\": \"\u4e2d\u5c71\" },\r\n         { \"kind\": \"given2\", \"value\": \"\u6587\" },\r\n         { \"kind\": \"given2\", \"value\": \"\u9038\u4ed9\" }\r\n       ]\r\n     },\r\n     \"localizations\": {\r\n       \"yue\": {\r\n         \"name/phoneticSystem\": \"jyut\",\r\n         \"name/phoneticScript\": \"Latn\",\r\n         \"name/components/0/phonetic\": \"syun1\",\r\n         \"name/components/1/phonetic\": \"zung1saan1\",\r\n         \"name/components/2/phonetic\": \"man4\",\r\n         \"name/components/3/phonetic\": \"jat6sin1\"\r\n       }\r\n     }\r\n   }\r\n```\r\n\r\n- only show the useful properties - like in others figures (for example, figure 24)\r\n\r\n```json\r\n\"language\": \"zh-Hant\",\r\n\"name\": {\r\n  \"components\": [\r\n    { \"kind\": \"surname\", \"value\": \"\u5b6b\" },\r\n    { \"kind\": \"given\", \"value\": \"\u4e2d\u5c71\" },\r\n    { \"kind\": \"given2\", \"value\": \"\u6587\" },\r\n    { \"kind\": \"given2\", \"value\": \"\u9038\u4ed9\" }\r\n  ]\r\n},\r\n\"localizations\": {\r\n  \"yue\": {\r\n    \"name/phoneticSystem\": \"jyut\",\r\n    \"name/phoneticScript\": \"Latn\",\r\n    \"name/components/0/phonetic\": \"syun1\",\r\n    \"name/components/1/phonetic\": \"zung1saan1\",\r\n    \"name/components/2/phonetic\": \"man4\",\r\n    \"name/components/3/phonetic\": \"jat6sin1\"\r\n  }\r\n}\r\n```", "submit_date": "2025-01-27", "submitter_name": "n4n5", "verifier_id": "", "verifier_name": null, "update_date": "2025-01-27 21:06:20"}, {"errata_id": "8264", "doc-id": "RFC9553", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.7.1. Figure 39", "orig_text": "{\r\n    \"name\": {\r\n        \"components\": [\r\n            { \"kind\": \"title\", \"value\": \"Mr.\" },\r\n            { \"kind\": \"given\", \"value\": \"Ivan\" },\r\n            { \"kind\": \"given2\", \"value\": \"Petrovich\" },\r\n            { \"kind\": \"surname\", \"value\": \"Vasiliev\" }\r\n        ]\r\n    },\r\n    \"localizations\": {\r\n        \"uk-Cyrl\": {\r\n            \"name\": {\r\n                \"components\": [\r\n                    { \"kind\": \"title\", \"value\": \"\u0433-\u043d\" },\r\n                    { \"kind\": \"given\", \"value\": \"\u0418\u0432\u0430\u043d\" },\r\n                    { \"kind\": \"given2\", \"value\": \"\u041f\u0435\u0442\u0440\u043e\u0432\u0438\u0447\" },\r\n                    { \"kind\": \"surname\", \"value\": \"\u0412\u0430\u0441\u0438\u043b\u044c\u0435\u0432\" }\r\n                ]\r\n            }\r\n        }\r\n    }\r\n}", "correct_text": "\"name\": {\r\n    \"components\": [\r\n        { \"kind\": \"title\", \"value\": \"Mr.\" },\r\n        { \"kind\": \"given\", \"value\": \"Ivan\" },\r\n        { \"kind\": \"given2\", \"value\": \"Petrovich\" },\r\n        { \"kind\": \"surname\", \"value\": \"Vasiliev\" }\r\n    ]\r\n},\r\n\"localizations\": {\r\n    \"uk-Cyrl\": {\r\n        \"name\": {\r\n            \"components\": [\r\n                { \"kind\": \"title\", \"value\": \"\u0433-\u043d\" },\r\n                { \"kind\": \"given\", \"value\": \"\u0418\u0432\u0430\u043d\" },\r\n                { \"kind\": \"given2\", \"value\": \"\u041f\u0435\u0442\u0440\u043e\u0432\u0438\u0447\" },\r\n                { \"kind\": \"surname\", \"value\": \"\u0412\u0430\u0441\u0438\u043b\u044c\u0435\u0432\" }\r\n            ]\r\n        }\r\n    }\r\n}\r\n", "notes": "This errata is just for consistency\r\n\r\nAll others figures are not using open and end brackets, for example figure 24, 40, etc...\r\n\r\nTechnically if bracket are used, that could means we are in a closed struct, so in a card and the card is not valid as the RFC spec\r\n\r\nBy just remove first and last bracket, the figure is cleaner", "submit_date": "2025-01-27", "submitter_name": "n4n5", "verifier_id": "", "verifier_name": null, "update_date": "2025-01-27 21:09:22"}, {"errata_id": "8265", "doc-id": "RFC9553", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2.1.1. Figure 18", "orig_text": "\"full\": \"Mr. John Q. Public, Esq.\"", "correct_text": "\"name\": {\r\n    \"full\": \"Mr. John Q. Public, Esq.\"\r\n}", "notes": "This errata is for consistency\r\n\r\nIn section 2.2.1.1 The Name object is defined.\r\nIn figure 16,17,18,19 we give example of Name object\r\nBut the figure 18 is only the subpart of the Name object\r\n\r\nWith this update, all figures will be described the Name object consistently", "submit_date": "2025-01-27", "submitter_name": "n4n5", "verifier_id": "", "verifier_name": null, "update_date": "2025-01-27 21:10:47"}, {"errata_id": "8266", "doc-id": "RFC9553", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.6.2. Figure 36", "orig_text": "\"directories\": {\r\n     \"dir1\": {\r\n       \"kind\": \"entry\",\r\n       \"uri\": \"https://dir.example.com/addrbook/jdoe/Jean%20Dupont.vcf\"\r\n     },\r\n     \"dir2\": {\r\n       \"kind\": \"directory\",\r\n       \"uri\": \"ldap://ldap.example/o=Example%20Tech,ou=Engineering\",\r\n       \"pref\": 1\r\n     }", "correct_text": "\"directories\": {\r\n     \"dir1\": {\r\n       \"kind\": \"entry\",\r\n       \"uri\": \"https://dir.example.com/addrbook/jdoe/Jean%20Dupont.vcf\"\r\n     },\r\n     \"dir2\": {\r\n       \"kind\": \"directory\",\r\n       \"uri\": \"ldap://ldap.example/o=Example%20Tech,ou=Engineering\",\r\n       \"pref\": 1\r\n     }\r\n}", "notes": "Missing end bracket", "submit_date": "2025-01-27", "submitter_name": "n4n5", "verifier_id": "", "verifier_name": null, "update_date": "2025-01-27 21:11:49"}, {"errata_id": "8267", "doc-id": "RFC9553", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.6.1. cryptoKeys", "orig_text": "A CryptoKey object has all properties of the Resource (Section 1.4.4)\r\ndata type, with the following additional definition:\r\n\r\nThe @type property value MUST be \"CryptoKey\", if set.", "correct_text": "A CryptoKey object has all properties of the Resource (Section 1.4.4)\r\ndata type, with the following additional definition:\r\n\r\n- The @type property value MUST be \"CryptoKey\", if set.\r\n\r\n- The kind property is optional. Its enumerated (Section 1.7.5) values\r\n   are:\r\n\r\n  - link\r\n  - embed\r\n", "notes": "I've noticed that CryptoKey is defined as a Resource but the CryptoKey \"kind\" is never defined.\r\n\r\nThe Resource specify that for kind: \"The allowed values are defined in the property definition that makes use of the Resource type. Some property definitions may change this property from being optional to mandatory.\"\r\n\r\n\r\nThe proposed values in the corrected text are only suggestion from the example of the RFC\r\n\r\nAs values of \"kind\" type are registered with IANA we can see that the CryptoKey kind is not present at \r\nhttps://www.iana.org/assignments/jscontact/jscontact.xhtml#jscontact-enum-values\r\n\r\n\r\nIf the CryptoKey kind is missing, I guess iana should also update the enum (email from the RFC: iana@iana.org)", "submit_date": "2025-01-28", "submitter_name": "n4n5", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8268", "doc-id": "RFC9110", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "B.2", "orig_text": "The priority of the absolute form of the request URI over the Host\r\nheader field by origin servers has been made explicit to align with\r\nproxy handling. (Section 7.2)", "correct_text": " ", "notes": "This text should be in RFC 9112, Appendix C.3 instead. \r\n\r\nAfter the referred text was moved between RFC-to-be 9110 and 9112 [1], this item from \"Changes from 7230\" was not caught up.\r\n\r\n[1] https://github.com/httpwg/http-core/commit/e47483b5 \r\n\r\nSee also https://www.rfc-editor.org/errata/eid8268.", "submit_date": "2025-01-28", "submitter_name": "Sergey Kandaurov", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-02-06 18:31:25"}, {"errata_id": "8285", "doc-id": "RFC3464", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix D", "orig_text": "A registration for a DSN address-type MUST include the following information:", "correct_text": "A registration for a DSN diagnostic-type MUST include the following information:", "notes": "Section for \"IANA registration form for diagnostic-type\" accidentally uses 'address-type' instead of 'diagnostic-type', incorrectly indicating that diagnostic-type information should be used for address-type registrations.", "submit_date": "2025-02-07", "submitter_name": "Mason K", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-03-07 16:48:08"}, {"errata_id": "8270", "doc-id": "RFC8824", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3", "orig_text": " +---------------+---+--+--+----------------+-------+---------+======+\r\n |CoAP OSCORE_kid|var|1 |Up| 0x636c69656e70 |MSB(52)|LSB      |KKKK  |\r\n +---------------+---+--+--+----------------+-------+---------+======+", "correct_text": " +---------------+---+--+--+----------------+-------+---------+======+\r\n |CoAP OSCORE_kid|var|1 |Up| 0x636c69656e70 |MSB(44)|LSB      |KKKK  |\r\n +---------------+---+--+--+----------------+-------+---------+======+", "notes": "In Section 7.3, the example in Figure 12 considers the OSCORE kid 0x636c69656e74, with length 6 bytes (48 bits).\r\n\r\nAlso in Section 7.3, the Field Descriptor \"CoAP OSCORE_kid\" of the SCHC Compression Rule in Table 5 has the intent to send only the 4 least significant bits 0b0100, as reflected by \"KKKK\" in the column \"Sent [bits]\".\r\n\r\nA successful matching with the Field Descriptor for compressing the corresponding field \"CoAP OSCORE_kid\" requires that the 44 (not 52) most significant bits produce a match, so that the remaining 4 least significant bits are sent.\r\n\r\nTherefore, as per the corrected text above, the MO for the Field Descriptor about \"CoAP OSCORE_kid\" should be MSB(44).\r\n\r\n---- Verifier note ----\r\nSee also https://mailarchive.ietf.org/arch/msg/lp-wan/b8va8LzRwLogWmXAuATJtiEHZII/", "submit_date": "2025-01-29", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2025-07-23 10:14:47"}, {"errata_id": "8271", "doc-id": "RFC8824", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7.3", "orig_text": "   Compressed message:\r\n   ==================\r\n   0x001489458a9fc3686852f6c4 (12 bytes)\r\n   0x00 RuleID\r\n       1489 Compression Residue\r\n           458a9fc3686852f6c4 Padded payload\r\n\r\n   Compression Residue:\r\n   0b 0001 010 0100 0100 (15 bits -> 2 bytes with padding)\r\n       mid tkn piv  kid\r\n\r\n   Payload\r\n   0xa2c54fe1b434297b62 (9 bytes)\r\n\r\n   Compressed message length: 12 bytes", "correct_text": "   Compressed message:\r\n   ==================\r\n   0x00148889458a9fc3686852f6c4 (13 bytes)\r\n   0x00 RuleID\r\n       148889 Compression Residue\r\n             458a9fc3686852f6c4 padded payload\r\n\r\n   Compression Residue:\r\n   0b 0001 010\r\n       mid tkn\r\n       \r\n      0100 0100\r\n            piv (residue size and residue)\r\n\r\n      0100 0100\r\n            kid (residue size and residue)\r\n       \r\n      (23 bits -> 3 bytes with padding)\r\n\r\n   Payload\r\n   0xa2c54fe1b434297b62 (9 bytes)\r\n\r\n   Compressed message length: 13 bytes", "notes": "In Section 7.3, the Rule in Table 5 is used to perform the OSCORE outer compression of the message shown in Figure 12, in order to produce the SCHC compressed message in Figure 14.\r\n\r\nThe residue shown in Figure 14 is not correct, with respect to what is sent on the wire for the fields of the OSCORE option identified as \"CoAP OSCORE_piv\" and \"CoAP OSCORE_kid\". Hence, the whole compressed message shown in Figure 14 is not correct.\r\n\r\nPer Section 7.4.2 of RFC 8724:\r\n\r\n> If the field is ... of variable length, then applying the CDA to compress this field may result in a value ... of variable size (e.g., value-sent or LSB). ..., the residue for that field is the bits that result from applying the CDA to the field, preceded with the size of the value.\r\n\r\nIn the considered Rule of Table 5, both \"CoAP OSCORE_piv\" and \"CoAP OSCORE_kid\" have FL=var. However, the old text for the SCHC-OSCORE Compressed GET Request of Figure 14 shows that the residue sent on the wire for the two fields is not prepended by the respective residue length (in bits).\r\n\r\nSuch a residue length has to be encoded as per Section 7.4.2 of RFC 8724, i.e.:\r\n\r\n> The size (using the unit defined in the FL) is encoded on 4, 12, or 28 bits as follows:\r\n> * If the size is between 0 and 14, it is encoded as a 4-bit unsigned integer.\r\n> * Sizes between 15 and 254 are encoded as 0b1111 followed by the 8-bit unsigned integer.\r\n> * Larger sizes are encoded as 0xfff followed by the 16-bit unsigned integer.\n --VERIFIER NOTES-- \n After discussion on the list and at IETF-123, this is not an erratum per se even if the text needs to be fixed and will be fixed in a -bis RFC.", "submit_date": "2025-01-29", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2025-07-23 10:17:48"}, {"errata_id": "8272", "doc-id": "RFC9528", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.4.2", "orig_text": "The Initiator SHOULD NOT persistently store PRK_out or application keys\r\nuntil the Initiator has verified message_4 or a message protected with\r\na derived application key, such as an OSCORE message, from the Responder\r\nand the application has authenticated the Responder. ", "correct_text": "The Initiator SHOULD NOT persistently store\r\nC_I, C_R, PRK_out or application keys\r\nuntil the Initiator has verified message_4 or a message protected with\r\na derived application key, such as an OSCORE message, from the Responder\r\nand the application has authenticated the Responder. ", "notes": "This applies to the connection identifiers C_I, C_R equally as to the keys.", "submit_date": "2025-01-29", "submitter_name": "John Mattsson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8273", "doc-id": "RFC9530", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "These examples a not exhaustive.", "correct_text": "These examples are not exhaustive.", "notes": "This is a simple grammatical editorial issue.", "submit_date": "2025-01-30", "submitter_name": "Lucas Pardue", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-02-06 15:43:19"}, {"errata_id": "8274", "doc-id": "RFC7539", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.3.2", "orig_text": " ChaCha state with the key setup.\r\n\r\n       61707865  3320646e  79622d32  6b206574\r\n       03020100  07060504  0b0a0908  0f0e0d0c\r\n       13121110  17161514  1b1a1918  1f1e1d1c\r\n       00000001  09000000  4a000000  00000000", "correct_text": " ChaCha state with the key setup.\r\n\r\n       61707865  3320646e  79622d32  6b206574\r\n       03020100  07060504  0b0a0908  0f0e0d0c\r\n       13121110  17161514  1b1a1918  1f1e1d1c\r\n       01000000  09000000  4a000000  00000000", "notes": "Section 2.3 says: \"A 32-bit block count parameter, treated as a 32-bit little-endian integer\". In Section 2.3.2 the initial block counter is set to 1 which is 00000001 in big-endian hex. So I think, the corresponding entry in the state matrix (index 12) should be 01000000.\r\n\r\nNote from CFRG Chair: this change also applies to RFC 8439, which supercedes RFC 7539\n --VERIFIER NOTES-- \nRejected. The submitter correctly notes the \"little-endian\" description in Section 2.3, but this refers to parsing bytes into words and serializing words to bytes, not how values appear in the state matrix. The matrix displays 32-bit word values: the block counter is an integer placed into word 12, so value 1 displays as 00000001. If the proposed change were applied, the matrix would show 01000000 (integer 16,777,216), contradicting Block Count = 1. See also EID 6569 on RFC 8439 (similar confusion).", "submit_date": "2025-01-30", "submitter_name": "Alina Obst", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 04:05:51"}, {"errata_id": "8275", "doc-id": "RFC6620", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.3", "orig_text": "The DAD_NS messages are not\r\nsent through any of the ports configured as Validating Ports.  The\r\nDAD_NSOL messages are sent through Trusted Ports (but, of course,\r\nsubject to usual switch behavior and possible MLD snooping\r\noptimizations).", "correct_text": "The DAD_NS messages are not\r\nsent through any of the ports configured as Validating Ports.  The\r\nDAD_NS messages are sent through Trusted Ports (but, of course,\r\nsubject to usual switch behavior and possible MLD snooping\r\noptimizations).", "notes": "DAD_NSOL is the term used in SEND-SAVI but is not used anywhere else in FCFS-SAVI. The current phrasing might lead to believe that DAD_NSOL is different from DAD_NS.\r\n\r\n--- Verifier note ---\r\n\r\nThis indeed appears to be typo, borrowing a different shorthand for the same thing from a related document.", "submit_date": "2025-02-01", "submitter_name": "Olivier Paul", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-02-10 00:45:05"}, {"errata_id": "8284", "doc-id": "RFC9112", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "C.3", "orig_text": "", "correct_text": "   The priority of the absolute form of the request URI over the Host\r\n   header field by origin servers has been made explicit to align with\r\n   proxy handling. (Section 3.2.2)", "notes": "This text should be added after the second paragraph.\r\n\r\nAfter the referred text was moved between RFC-to-be 9110 and 9112 [1], this item from \"Changes from 7230\" was not caught up.\r\n \r\n[1] https://github.com/httpwg/http-core/commit/e47483b5 \r\n\r\nSee also https://www.rfc-editor.org/errata/eid8268 for the erratum in RFC 9110 (ack Sergey Kandaurov)", "submit_date": "2025-02-06", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-02-06 19:30:34"}, {"errata_id": "8278", "doc-id": "RFC9462", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4", "orig_text": "   DNS resolvers that support DDR by responding to queries for\r\n   _dns.resolver.arpa. MUST treat resolver.arpa as a locally served zone\r\n   per [RFC6303].  In practice, this means that resolvers SHOULD respond\r\n   to queries of any type other than SVCB for _dns.resolver.arpa. with\r\n   NODATA and queries of any type for any domain name under\r\n   resolver.arpa with NODATA.", "correct_text": "   DNS resolvers that support DDR by responding to queries for\r\n   _dns.resolver.arpa. MUST treat resolver.arpa as a locally served zone\r\n   per [RFC6303].  In practice, this means that resolvers SHOULD respond\r\n   to queries of any type other than SVCB for _dns.resolver.arpa. with\r\n   NODATA and queries of any type for any domain name under\r\n   resolver.arpa (other than _dns.resolver.arpa) with NXDOMAIN.", "notes": "Ordinary DNS zones generally return NXDOMAIN for names that have no data of any type and that are not empty non-terminals. The behavior described in 9462 where \"resolvers SHOULD respond to [...] queries of any type for any domain name under resolver.arpa with NODATA\" is a special kind of behavior that requires odd configuration to achieve (e.g. https://github.com/NLnetLabs/unbound/issues/1016#issuecomment-2630681753) or handled as a special case if implemented in code. I also noticed that at least one implementation ignores this SHOULD (e.g. \"dig x.y.z.resolver.arpa @8.8.8.8\" returns an NXDOMAIN response (not NODATA) while \"dig -t SVCB _dns.resolver.arpa @8.8.8.8\" returns a DDR response).\r\n\r\nI do not see a rationale in the document for this special requirement. I searched the ADD mailing list and came up with the following references that touch on this issue but do not seem to specifically address why a NODATA response is needed for domain names below resolver.arpa (other than _dns.resolver.arpa):\r\n\r\nhttps://mailarchive.ietf.org/arch/msg/add/wV4Q8xDLV_5ys6uHrjFD2jLSaVI/\r\nhttps://mailarchive.ietf.org/arch/msg/add/b59f7wQI-3s2K-5o9MTAEFBIY7Q/\r\nhttps://github.com/ietf-wg-add/draft-ietf-add-ddr/issues/58\r\nhttps://github.com/ietf-wg-add/draft-ietf-add-ddr/pull/61\r\n\r\nSo I suspect this is a drafting error and something like the corrected text suggested in this erratum was meant instead.\r\n\r\nThere is a similar reference to NODATA rather than NXDOMAIN in Section 4 in the case where no Designated Resolver exists which also requires special configuration or implementation to achieve. I suspect that that text should say NXDOMAIN rather than NODATA.\r\n\r\nThanks!\r\n\r\n--- verifier note ---\r\nAlso note that this is a SHOULD and not a MUST", "submit_date": "2025-02-03", "submitter_name": "Robert Edmonds", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-10-07 15:31:08"}, {"errata_id": "8495", "doc-id": "RFC9171", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.2", "orig_text": "Step 2:\r\nProcessing proceeds from Step 1 of Section 5.4.\r\n", "correct_text": "Step 2:\r\nProcessing proceeds from Step 1 of Section 5.3.\r\n", "notes": "The original text requires bundles transmitted from local endpoints to pass through the forwarding process even if the destination EID is registered by a local application and is expected to result in delivery. This can result in logical confusion for a BPA, because it might be forwarding-to-self which is specifically disallowed in other sections.\r\n\r\nThe corrected text proceeds to the disposition process which allows transmitted bundles to be delivered locally, as necessary, just the same as received bundles. This avoids possible forwarding-to-self confusion and allows for efficient local-to-local delivery.\r\n\r\n--- see also ---\r\n\r\n* https://mailarchive.ietf.org/arch/msg/dtn/2hea7LjMlr0CQ6VIR2qhfXq6UiU/\n --VERIFIER NOTES-- \n   See discussion in: https://mailarchive.ietf.org/arch/msg/dtn/2hea7LjMlr0CQ6VIR2qhfXq6UiU/", "submit_date": "2025-07-02", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-11 00:12:27"}, {"errata_id": "8499", "doc-id": "RFC6919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "   For example: \"Verifiers MAY wish to track testing mode results to\r\n   assist the Signer.\"  [RFC6376]", "correct_text": "   For example: \"Verifiers MAY WISH TO track testing mode results to\r\n   assist the Signer.\"  [RFC6376]", "notes": "Similar to the logic in RFC8174, all the the examples SHOULD use all capitals\n --VERIFIER NOTES-- \nThanks for the report.  The examples quote actual RFCs.  Maybe the wording should have been thought about at the time.", "submit_date": "2025-07-03", "submitter_name": "Josh McKinney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-04 10:00:25"}, {"errata_id": "8500", "doc-id": "RFC6919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "   For example: \"An implementation could mitigate this race condition,\r\n   for example, using timers.\"  [RFC6733]", "correct_text": "   For example: \"An implementation COULD mitigate this race condition,\r\n   for example, using timers.\"  [RFC6733]", "notes": "Similar to the logic in RFC8174, all the the examples SHOULD use all capitals\n --VERIFIER NOTES-- \n Thanks for the report.  The examples quote actual RFCs.  Maybe the wording should have been thought about at the time.", "submit_date": "2025-07-03", "submitter_name": "Josh McKinney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-04 10:00:54"}, {"errata_id": "8279", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "         server  The value SHOULD be unique within the context of the\r\n            current SCIM endpoint (or tenancy) and MAY be globally\r\n            unique (e.g., a \"username\", email address, or other\r\n            server-generated key or counter).  No two resources on the\r\n            same server SHOULD possess the same value.", "correct_text": "         server  The value for the attribute SHOULD be different from \r\n            all other values for the attribute in any resource on the \r\n            same server which use the same schema definition. Uniqueness \r\n            MAY be restricted to resources accessible to the same tenant.", "notes": "The definition is highly ambiguous. Assume a service provider offering the two endpoints /Users and /BusinessUsers. Assume that both resource types use the schema \"urn:ietf:params:scim:schemas:core:2.0:User\". Further, assume that the service provider serves two tenants, each having access to only a fraction of the resources.\r\n\r\nUniqueness within the context of the SCIM endpoint means that a User and a BusinessUser *can* have the same \"userName\", but two Users *cannot* exist on the server with the same \"userName\".\r\nUniqueness within the context of the tenancy means that a User and a BusinessUser *cannot* have the same \"userName\" if accessible to the same tenant, but two Users *can* exist on the server with the same \"userName\" if they are not accessible to the same tenant.\r\nFinally, the uniqueness in the sense of the second sentence means that a User and a BusinessUser *cannot* have the same \"userName\" and two Users *cannot* exist on the server with the same \"userName\" irrespective of the tenancy.\r\n\r\nBecause the option is named \"server\" and not \"endpoint\", I assume it is not intended to be restricted endpoints, but rather applies to all resource types using the schema. I also assume a restriction to tenancy is intended. Without this restriction it would be possible for a tenant to determine values of not accessible resources by a brute-force attack.\r\n\r\nLet me note that the usage of SHOULD instead of MUST does not make much sense here, because a service provider offering the schema to clients will always know for sure if it enforces uniqueness or not. On the other hand, changing SHOULD to MUST is beyond the scope of errata.", "submit_date": "2025-02-05", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:23:34"}, {"errata_id": "8280", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "1.1", "orig_text": "---- Section 1.1 ----\r\n   The key words \"REQUIRED\" and \"OPTIONAL\" are used throughout this\r\n   document to indicate whether an attribute or schema element is\r\n   required or optional.  These key words may be used alone (e.g.,\r\n   \"REQUIRED.\") or in a sentence.  If not specified, an attribute is\r\n   considered to be optional.\r\n\r\n---- Section 2.2 ----\r\n   o  \"required\" is \"false\" (i.e., not REQUIRED),", "correct_text": "---- Section 1.1 ----\r\n   The key words \"REQUIRED\" and \"OPTIONAL\" are used throughout this\r\n   document to indicate whether an attribute or schema element is\r\n   required to have a value or not.  These key words may be used alone (e.g.,\r\n   \"REQUIRED.\") or in a sentence.  If not specified, an attribute value is\r\n   considered to be optional.\r\n\r\n---- Section 2.2 ----\r\n   o  \"required\" is \"false\",", "notes": "There are three ways in which an attribute can be required. The correction makes clear which one is meant.\r\n\r\n1) Support is REQUIRED: It must be possible that the attribute has a value, i.e. it cannot be omitted from the schema.\r\n2) A value is REQUIRED: The server must make sure that the attribute always has a value.\r\n3) The attribute characteristic \"required\" is set to \"true\": If an attribute is \"required\", clients MUST specify the attribute in the PUT request. [RFC7644]\r\n\r\nAnalogous interpretations are possible for OPTIONAL.\r\n\r\nWhile almost all usages of REQUIRED and OPTIONAL are compatible to the second interpretation, one usage in section 2.2 clearly refers to the third one and should be removed.", "submit_date": "2025-02-05", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:23:06"}, {"errata_id": "8501", "doc-id": "RFC6919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8", "orig_text": "   For example: \"It is also possible for the server to send a completion\r\n   response for some other command (if multiple commands are in\r\n   progress), or untagged data.\"  [RFC3501]", "correct_text": "   For example: \"It is also POSSIBLE for the server to send a completion\r\n   response for some other command (if multiple commands are in\r\n   progress), or untagged data.\"  [RFC3501]", "notes": "Similar to the logic in RFC8174, all the the examples SHOULD use all capitals\n --VERIFIER NOTES-- \nThanks for the report.  The examples quote actual RFCs.  Maybe the wording should have been thought about at the time.", "submit_date": "2025-07-03", "submitter_name": "Josh McKinney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-04 10:01:22"}, {"errata_id": "8502", "doc-id": "RFC6919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9", "orig_text": "   For example: \"In the case of audio and different \"m\" lines for\r\n   different codecs, an implementation might decide to act as a mixer\r\n   with the different incoming RTP sessions, which is the correct\r\n   behavior.\"  [RFC5888]", "correct_text": "   For example: \"In the case of audio and different \"m\" lines for\r\n   different codecs, an implementation MIGHT decide to act as a mixer\r\n   with the different incoming RTP sessions, which is the correct\r\n   behavior.\"  [RFC5888]", "notes": "Similar to the logic in RFC8174, all the the examples SHOULD use all capitals\n --VERIFIER NOTES-- \n Thanks for the report.  The examples quote actual RFCs.  Maybe the wording should have been thought about at the time.", "submit_date": "2025-07-03", "submitter_name": "Josh McKinney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-04 10:01:44"}, {"errata_id": "8503", "doc-id": "RFC6919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "   For example: \"If a decision might affect semantic transparency, the\r\n   implementor ought to err on the side of maintaining transparency\r\n   unless a careful and complete analysis shows significant benefits in\r\n   breaking transparency.\"  [RFC2616]\r\n", "correct_text": "   For example: \"If a decision might affect semantic transparency, the\r\n   implementor OUGHT TO err on the side of maintaining transparency\r\n   unless a careful and complete analysis shows significant benefits in\r\n   breaking transparency.\"  [RFC2616]\r\n", "notes": "Similar to the logic in RFC8174, all the the examples SHOULD use all capitals\n --VERIFIER NOTES-- \nThanks for the report.  The examples quote actual RFCs.  Maybe the wording should have been thought about at the time.", "submit_date": "2025-07-03", "submitter_name": "Josh McKinney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-04 10:02:18"}, {"errata_id": "8166", "doc-id": "RFC8888", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "         Following this, the report block contains a\r\n   16-bit packet metric block for each RTP packet that has a sequence\r\n   number in the range begin_seq to begin_seq+num_reports inclusive\r\n   (calculated using arithmetic modulo 65536 to account for possible\r\n   sequence number wrap-around).", "correct_text": "         Following this, the report block contains a\r\n   16-bit packet metric block for each RTP packet that has a sequence\r\n   number in the range begin_seq up to, but not including,\r\n   begin_seq+num_reports\r\n   (calculated using arithmetic modulo 65536 to account for possible\r\n   sequence number wrap-around).", "notes": "The text can be read as the range being [begin_seq, begin_seq+num_reports].\r\n\r\nIf \"begin_seq\" is taken as the first sequence number you are reporting on, the original text means that you would have to have num_reports be 0 when you are reporting on a single packet. This seems very strange.\r\n\r\nAlternatively, if \"begin_seq\" is taken as the sequence number before the one you are reporting on, the num_reports is consistent, but you are then reporting on the range <begin_seq, begin_seq+num_reports], which also seems strange.\r\n\r\nThe suggested clarification would report on the sequence [begin_seq, begin_seq + num_reports>, which seems like the most natural interpretation.\r\n\r\nThis is also consistent with the format of an empty report, which is explicit that begin_seq is the sequence number of the last RTP packet received.", "submit_date": "2024-11-04", "submitter_name": "Harald Alvestrand", "verifier_id": "", "verifier_name": "Zaheduzzaman Sarker", "update_date": "2024-12-25 12:20:17"}, {"errata_id": "8359", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"manager\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The User's manager.  A complex type that\r\noptionally allows service providers to represent organizational\r\nhierarchy by referencing the 'id' attribute of another User.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The id of the SCIM resource representing\r\nthe User's manager.  REQUIRED.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"$ref\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\r\n              \"User\"\r\n            ],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The URI of the SCIM resource\r\nrepresenting the User's manager.  REQUIRED.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"displayName\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The displayName of the User's manager.\r\nOPTIONAL and READ-ONLY.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          }\r\n        ],\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\"\r\n      }", "correct_text": "      {\r\n        \"name\" : \"manager\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The User's manager.  A complex type that\r\noptionally allows service providers to represent organizational\r\nhierarchy by referencing the 'id' attribute of another User.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The id of the SCIM resource representing\r\nthe User's manager.  REQUIRED.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"$ref\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\r\n              \"User\"\r\n            ],\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The URI of the SCIM resource\r\nrepresenting the User's manager.  REQUIRED.\",\r\n            \"required\" : true,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"displayName\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The displayName of the User's manager.\r\nOPTIONAL and READ-ONLY.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          }\r\n        ],\r\n        \"mutability\" : \"readWrite\",\r\n        \"returned\" : \"default\"\r\n      }", "notes": "The discription indicates that the sub-attributes \"value\" and \"$ref\" of \"manager\" in urn:ietf:params:scim:schemas:extension:enterprise:2.0:User should have \"required\": true instead of false.", "submit_date": "2025-03-31", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:22:42"}, {"errata_id": "8360", "doc-id": "RFC7643", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "          {\r\n            \"name\" : \"description\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A human-readable description of the\r\n              attribute.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : true,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n", "correct_text": "          {\r\n            \"name\" : \"description\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A human-readable description of the\r\n              attribute.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n", "notes": "In the schema definition for \"Schema\" the sub-attribute \"description\" of the complex attributes \"attributes\" and \"subAttributes\" is defined with \"caseExact\": true. This does not make much sense for a human-readable description. I believe it should be \"caseExact\": false, like it is for all other \"description\" attributes.\n --VERIFIER NOTES-- \nThis would represent a normative change that might impact interoperability.  Description is not usually used in filters for human use. ", "submit_date": "2025-03-31", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 10:53:11"}, {"errata_id": "8361", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1", "orig_text": "3.1.  Common Attributes\r\n\r\n   Each SCIM resource (Users, Groups, etc.) includes the following\r\n   common attributes.  With the exception of the \"ServiceProviderConfig\"\r\n   and \"ResourceType\" server discovery endpoints and their associated\r\n   resources, these attributes MUST be defined for all resources,\r\n   including any extended resource types.", "correct_text": "3.1.  Common Attributes\r\n\r\n   Each SCIM resource (Users, Groups, etc.) includes the following\r\n   common attributes.  With the exception of the \"/ServiceProviderConfig\"\r\n   and \"/ResourceTypes\" server discovery endpoints and their associated\r\n   resources, these attributes MUST be defined for all resources,\r\n   including any extended resource types.", "notes": "The endpoint is named \"/ResourceTypes\" (with \"s\"), not \"/ResourceType\". Also, all endpoints include a leading \"/\" in sections 1.2, in the schema definitions in section 8.6, and also in RFC7644.", "submit_date": "2025-03-31", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 10:55:03"}, {"errata_id": "8523", "doc-id": "RFC9482", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2", "orig_text": "PKIMessages", "correct_text": "PKIMessage structures", "notes": "This pertains to all three occurrences of the word \"PKIMessages\" in sections 2, 2.3, and 2.5.\r\n\r\n\"PKIMessages\" can be misinterpreted as the ASN.1 type \"PKIMessages\", defined as:\r\n\r\n    PKIMessages ::= SEQUENCE SIZE (1..MAX) OF PKIMessage\r\n\r\nYet what is meant in all three occurrences in this RFC is simply: PKIMessage structures \r\n(i.e., one ore more structures of type PKIMessage), not a list/sequence of PKIMessage.\r\n\r\nNote: The same disambiguation has already been done in RFC 9811 \r\n(as mentioned in https://datatracker.ietf.org/doc/draft-ietf-lamps-rfc6712bis/10/).", "submit_date": "2025-08-01", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2026-02-02 15:41:49"}, {"errata_id": "8362", "doc-id": "RFC7643", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6", "orig_text": "   id\r\n      The resource type's server unique id.  This is often the same\r\n      value as the \"name\" attribute.  OPTIONAL.\r\n\r\n   name\r\n      The resource type name.  When applicable, service providers MUST\r\n      specify the name, e.g., \"User\" or \"Group\".  This name is\r\n      referenced by the \"meta.resourceType\" attribute in all resources.\r\n      REQUIRED.\r\n", "correct_text": "   id\r\n      The resource type's server unique id.  This is often the same\r\n      value as the \"name\" attribute.  OPTIONAL.\r\n\r\n   name\r\n      The resource type name.  When applicable, service providers MUST\r\n      specify the name, e.g., \"User\" or \"Group\".  This name is\r\n      referenced by the \"meta.resourceType\" attribute in all resources.\r\n      REQUIRED. The resource type name must be unique within the server.\r\n", "notes": "ResourceTypes are not referenced by their \"id\" in the meta.resourceType attribute, but by their \"name\".\r\nSection 3.3 states:\r\n   In order to determine which URI value in the \"schemas\" attribute is\r\n   the base schema and which is an extended schema for any given\r\n   resource, the resource's \"resourceType\" attribute value MAY be used\r\n   to retrieve the resource's \"ResourceType\" schema (see Section 6).\r\n\r\nThis would not work if there were numerous ResourceType resources with the same name. The name must therefore be unique within the server.\r\n\r\nThis also applies to the schema definition in section 8.7.2 where it should be defined with \"uniqueness\": \"server\" instead of \"none\".\n --VERIFIER NOTES-- \nResource types are referenced by their ID. ALWAYS.\r\n\r\nIt often occurs that name and id are the same.  The scenario you describe would not occur because it would point by ID.", "submit_date": "2025-03-31", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 10:56:52"}, {"errata_id": "8363", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "      {\r\n        \"name\" : \"id\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The unique URI of the schema.\r\n          When applicable, service providers MUST specify the URI.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n\r\nand\r\n\r\n      {\r\n        \"name\" : \"id\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type's server unique id.\r\n          May be the same as the 'name' attribute.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "correct_text": "      {\r\n        \"name\" : \"id\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The unique URI of the schema.\r\n          When applicable, service providers MUST specify the URI.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"server\"\r\n      },\r\n\r\nand\r\n\r\n      {\r\n        \"name\" : \"id\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type's server unique id.\r\n          May be the same as the 'name' attribute.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"server\"\r\n      },", "notes": "The \"id\" attributes of \"Schema\" and \"ResourceType\" resources should have \"uniqueness\": \"server\", like their description says, instead of \"uniqueness\": \"none\".", "submit_date": "2025-03-31", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:22:15"}, {"errata_id": "8364", "doc-id": "RFC7377", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "   C: tag1 UID ESEARCH FROM \"frobozz\" 1:100\r\n\r\n   ... followed later by this:\r\n\r\n   C: tag1 UID ESEARCH FROM \"frobozz\" 101:200\r\n", "correct_text": "   C: tag1 ESEARCH FROM \"frobozz\" 1:100\r\n\r\n   ... followed later by this:\r\n\r\n   C: tag1 ESEARCH FROM \"frobozz\" 101:200\r\n", "notes": "There is no \"UID ESEARCH\" command. The document defines the \"ESEARCH\" command. It is unlike the other commands with a UID and non-UID version, such as fetch, store, search, etc. Understandable, because message sequence numbers aren't returned for multimailbox search results. Just above it says: \"it is worth pointing out that with ESEARCH, as with any SEARCH or UID SEARCH command\", so there is no confusion about uid vs non-uid commands. The ABNF also only adds an \"ESEARCH\" command, not a \"UID ESEARCH\".\r\n\r\nThe example seems to imply message sequence numbers can be used in the search program with ESEARCH, for pagination. This can work if you know the number of messages in each mailbox you're searching. Presumably also for mailboxes that aren't selected which is what this document is about. But it doesn't make it explicit, there is no \"IN (...)\" in the example.\r\n\r\nThe same example is present in RFC 6237.", "submit_date": "2025-03-31", "submitter_name": "Mechiel Lukkien", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-04-07 19:58:51"}, {"errata_id": "8365", "doc-id": "RFC7644", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "   /ResourceTypes\r\n      An HTTP GET to this endpoint is used to discover the types of\r\n      resources available on a SCIM service provider (e.g., Users and\r\n      Groups).  Each resource type defines the endpoints, the core\r\n      schema URI that defines the resource, and any supported schema\r\n      extensions.", "correct_text": "   /ResourceTypes\r\n      An HTTP GET to this endpoint is used to discover the types of\r\n      resources available on a SCIM service provider (e.g., Users and\r\n      Groups).  Each resource type defines the endpoint, the core\r\n      schema URI that defines the resource, and any supported schema\r\n      extensions.", "notes": "The word \"endpoint\" should be in singular. Each ResourceType can only define one endpoint because the attribute \"endpoint\" is single-valued in RFC7643 section 6.", "submit_date": "2025-04-01", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 10:58:03"}, {"errata_id": "8535", "doc-id": "RFC8888", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "When the SDP BUNDLE extension [RFC8843] is used for multiplexing, the\r\n\"a=rtcp-fb:\" attribute has multiplexing category IDENTICAL-PER-PT\r\n[RFC8859].", "correct_text": "When the SDP BUNDLE extension [RFC8843] is used for multiplexing, the\r\n\"a=rtcp-fb:\" attribute has multiplexing category IDENTICAL-PER-PT\r\n[RFC8859].\r\n\r\nWhen using BUNDLE, all media sections in the bundle MUST have the same\r\nvalue for \"a=rtcp-fb:*:ack ccfb\" - it must either be present in all\r\nsections or in none of the sections.", "notes": "Since 8888 is transport-wide, bundled audio and video must be consistent in CCFB. But IDENTICAL-PER-PT does not enforce this, since audio and video do not share payload types.", "submit_date": "2025-08-21", "submitter_name": "Harald Alvestrand", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8366", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "      {\r\n        \"name\" : \"endpoint\",\r\n        \"type\" : \"reference\",\r\n        \"referenceTypes\" : [\"uri\"],\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type's HTTP-addressable\r\n          endpoint relative to the Base URL, e.g., '/Users'.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "correct_text": "      {\r\n        \"name\" : \"endpoint\",\r\n        \"type\" : \"reference\",\r\n        \"referenceTypes\" : [\"uri\"],\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type's HTTP-addressable\r\n          endpoint relative to the Base URL, e.g., '/Users'.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"server\"\r\n      },", "notes": "For \"endpoint\" the property \"uniqueness\" should be \"server\" instead of \"none\".\r\nI believe endpoints are thought to be unique within a server, i.e. each endpoint should offer exactly one type of resources. Though I don't see any point in RFC7644 or RFC7643 that currently forbids using the same endpoint for several resource types, it would make processing much harder for clients. Also, clients cannot specify which resource type they want to create. They can only specify endpoint and schema.", "submit_date": "2025-04-01", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 10:59:03"}, {"errata_id": "8367", "doc-id": "RFC7644", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.4.1", "orig_text": "3.4.1.  Retrieving a Known Resource\r\n\r\n   To retrieve a known resource, clients send GET requests to the\r\n   resource endpoint, e.g., \"/Users/{id}\", \"/Groups/{id}\", or\r\n   \"/Schemas/{id}\", where \"{id}\" is a resource identifier (for example,\r\n   the value of the \"id\" attribute).", "correct_text": "3.4.1.  Retrieving a Known Resource\r\n\r\n   To retrieve a known resource, clients send GET requests to the\r\n   resource endpoint, e.g., \"/Users/{id}\", \"/Groups/{id}\", or\r\n   \"/Schemas/{id}\", where \"{id}\" is the value of the \"id\" attribute\r\n   of the resource.", "notes": "The change clearifies that \"{id}\" is the value of the \"id\" attribute.\r\n\r\nIn the original text, the value of the \"id\" attribute is only mentioned as an example. It remains unclear if the value of the \"id\" attribute always is a \"resource identifier\" or if there may be exceptions. It also remains unclear, which other attribute values are considered \"resource identifiers\", e.g. the values of \"externalId\", \"userName\" for User resources, \"name\" for Resource Type resources, and so on.\r\n\r\nRFC6743 specifies for example:\r\n* \"id\" as \"A unique identifier for a SCIM resource\" (section 3.1)\r\n* \"externalId\" as \"identifier for the resource\" (section 3.1)\r\n* \"userName\" as \"unique identifier for the user\" (section 4.1.1)\r\nBut as a client I would rather not expect a GET call on \"/Users/{userName}\" or \"/Users/{externalId}\" to work. It is also unclear which object would be returned if the \"{externalId}\" or \"{userName}\" matches the \"{id}\" of a different user.", "submit_date": "2025-04-01", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:32:14"}, {"errata_id": "8372", "doc-id": "RFC8718", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "   Tourism:\r\n      Variety in site-seeing experiences.\r\n", "correct_text": "   Tourism:\r\n      Variety in sightseeing experiences.\r\n", "notes": "There must be a more authoritative citation available for why it's \"sightseeing\" and not \"site-seeing\" but this was the first I came upon, and it explains it well enough. https://writingexplained.org/site-seeing-or-sightseeing", "submit_date": "2025-04-03", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-04-08 15:46:30"}, {"errata_id": "8373", "doc-id": "RFC4291", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.5.6", "orig_text": "   Routers must not forward any packets with Link-Local source or\r\n   destination addresses to other links.", "correct_text": "Routers MUST not forward any packets with Link-Local source or destination addresses to other links.  Hop-limit MUST be set to 1.", "notes": "I believe it would be reasonable for someone to override the behavior via setsockopt() call but that the default behavior of an internet connected host should set hlimit=1", "submit_date": "2025-04-04", "submitter_name": "Jared Mauch", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8369", "doc-id": "RFC9759", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8", "orig_text": "This RFC strongly recommends immediate implementation.", "correct_text": "This RFC strongly recommends implementation in two weeks.", "notes": "\u00af\\_(\u30c4)_/\u00af", "submit_date": "2025-04-01", "submitter_name": "John Scudder", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-06-01 12:26:42"}, {"errata_id": "8370", "doc-id": "RFC8231", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3.4", "orig_text": "   Length (16 bits): indicates the total length of the TLV in octets.\r\n   The TLV MUST be zero-padded so that the TLV is 4-octet aligned.", "correct_text": "   Length (16 bits): indicates the length of the value portion of the TLV in octets. The TLV MUST be zero-padded so that the TLV is 4-octet aligned.", "notes": "The \"total length of the TLV\" is incorrect, as in PCEP the TLV formatting is as per RFC 5440 which requires the length to be of the value portion only (https://datatracker.ietf.org/doc/html/rfc5440#section-7.1).\r\n\r\nSimilar mistake was already fixed for different TLV in same RFC as part of:\r\nhttps://www.rfc-editor.org/errata/eid6289", "submit_date": "2025-04-03", "submitter_name": "Samuel Sidor", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-05-02 09:02:38"}, {"errata_id": "8371", "doc-id": "RFC7826", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Obsoletes: RFC 2326", "correct_text": "Blank", "notes": "The document claims to make RFC 2326 (RTSP 1.0) obsolete.  RFC 7826 only describes the RTSP 2.0 specification which is incompatible with RTSP 1.0 and although differences between the standards are listed, this document does not describe RTSP 1.0.\r\n\r\nRFC 2326 remains the sole specification for RTSP 1.0, and it should not be obsolete.\n --VERIFIER NOTES-- \n   Reclassifying an RFC as not obsolete requires IETF consensus.", "submit_date": "2025-04-03", "submitter_name": "Andy Henson", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-04-04 13:26:32"}, {"errata_id": "8525", "doc-id": "RFC9171", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.1", "orig_text": "as described in Section 4.2.5.1.1.", "correct_text": "as described in Section 4.2.5.1.1. or Section 4.2.5.1.2.\r\n\r\n--- or ---\r\n\r\nas described in Section 4.2.5.1 and its subsections.\r\n", "notes": "Node IDs may be expressed using either the dtn or ipn URI scheme. The original sentence could be mistakenly read as allowing only the dtn scheme for the source node ID in a Bundle Status Report. The revised wording clarifies that both schemes\u2014dtn (Section 4.2.5.1.1) and ipn (Section 4.2.5.1.2)\u2014are valid, keeping this requirement consistent with the rest of the specification.", "submit_date": "2025-08-05", "submitter_name": "Huiung Park", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-10 23:51:54"}, {"errata_id": "8376", "doc-id": "RFC9171", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.8", "orig_text": "If the fragmented bundle is not a fragment or is the fragment with\r\noffset zero, then all extension blocks of the fragmented bundle \r\nMUST be replicated in the fragment whose offset is zero.", "correct_text": "All extension blocks of the fragmented bundle MUST be represented \r\nin at least one fragment.", "notes": "Requiring that the \"first fragment\" of a bundle contain every extension block of the fragmented bundle can lead to situations where the \"first fragment\" bundle is, itself, larger than some reasonable MTU.\r\n\r\nMore generally, more thought needs to be put into the way in which extension blocks from the fragmented bundle are placed into bundles representing fragments.  This is particularly an issue if the bundle holding the fragment will also have extension blocks added to it, as there is no evident way to distinguish between extension blocks in a bundle holding a fragment that were part of the fragmented bundle versus extension blocks in a bundle holding a fragment that are not associated with the fragmented bundle.\r\n\r\n--- AD notes ---\r\n\r\nRFC 9171 ADU Fragmentation has issues with extension blocks and fragmented bundle size.  It requires a thorough and consistent update via a separate document (too large for an erratum).\r\n\r\nFor more context see:\r\n    * https://mailarchive.ietf.org/arch/msg/dtn/2lY2RE_onIXCbO-IAPdylsf819s/\r\n    * other discussion ongoing on the mailing list", "submit_date": "2025-04-07", "submitter_name": "Ed Birrane", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-11 17:33:27"}, {"errata_id": "8375", "doc-id": "RFC9135", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3", "orig_text": "The ingress PE gets the destination TS's MAC address for that TS's IP \r\naddress from its ARP table or NDP cache. It encapsulates the packet \r\nwith that destination MAC address and a source MAC address \r\ncorresponding to that IRB interface and sends the packet to its \r\ndestination subnet MAC-VRF/BT.\r\n\r\n", "correct_text": "The ingress PE gets the destination TS's MAC address for that TS's IP \r\naddress from its ARP table or NDP cache. It encapsulates the packet \r\nwith that destination MAC address and a source MAC address \r\ncorresponding to that IRB interface. \r\nIn addition, if all following conditions for the EVPN instance in \r\nquestion are met:\r\n\r\n- uses MPLS encapsulation\r\n- implements VLAN-aware bundle service interface as defined in \r\n  Section 6.3 of RFC 7432\r\n\r\nthen the VLAN tag with the \"normalized VID\" of the corresponding BT \r\nis pushed on the customer IP packet.\r\n\r\nThe resulting packet is sent to its destination subnet MAC-VRF/BT.\r\n\r\n", "notes": "Section 6.3 of RFC 743 OPTIONALLY allows a MAC-VRF that implements VLAN-aware bundle service interface and uses MPLS encapsulation to advertise the same label for all its broadcast domains. This option is only allowed when each broadcast domain in such a MAC-VRF is represented by the same VID in all the PEs. With this option, a VLAN tag with the \"normalized\" VID of the specific ingress domain MUST be present when the packet crosses the underlay, and MUST be used for identification of the specific broadcast domain in the egress PE.\r\n\r\nIn the case of inter-subnet forwarding, the original VLAN tag of IP packets undergoing such forwarding does not identify the broadcast domain to which the packet would be sent.", "submit_date": "2025-04-06", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2025-05-02 08:45:17"}, {"errata_id": "8526", "doc-id": "RFC7518", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4.5", "orig_text": "|  Compression of RTCP: No IETF-defined header compression method\r\n      compress RTCP; however, if such methods are developed in the\r\n|     future, these methods must take Reduced-Size RTCP in account.\r\n", "correct_text": "|Compression of RTCP: No IETF-defined header compression methods\r\n      compress RTCP; however, if such methods are developed in the\r\n|     future, these methods must take Reduced-Size RTCP into account.\r\n", "notes": "Note: this also applies to any changes to files in [RFC2119]", "submit_date": "2025-08-05", "submitter_name": "Benjamin Hurst", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:05:35"}, {"errata_id": "8532", "doc-id": "RFC3958", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2.4", "orig_text": "\"As shown in the example set above, it is possible to have multiple \r\npossible targets for a single application service+protocol pair.\"", "correct_text": "\"It is possible to have multiple possible targets for a single \r\napplication service+protocol pair.\"", "notes": "The example in section 2.2 does not contain multiple targets for a single application service+protocol pair.", "submit_date": "2025-08-18", "submitter_name": "Marc Petit-Huguenin", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-08-19 13:56:30"}, {"errata_id": "8533", "doc-id": "RFC3958", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2.4", "orig_text": "\"Failure\" is declared, and backtracking must be used, when\"", "correct_text": "\"Failure\" is declared, and backtracking must be used, when\r\n\r\n o  a direct or indirect loop is detected;\"", "notes": "If the target is identical to the domain name of the NAPTR record, or is identical to one of the previous domain names  used to reached that target, then a client will potentially loop forever.", "submit_date": "2025-08-18", "submitter_name": "Marc Petit-Huguenin", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-08-19 13:57:39"}, {"errata_id": "8569", "doc-id": "RFC6242", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "   S: <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   S: <hello xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n   S:   <capabilities>\r\n   S:     <capability>\r\n   S:       urn:ietf:params:netconf:base:1.1\r\n   S:     </capability>\r\n   S:     <capability>\r\n   S:       urn:ietf:params:ns:netconf:capability:startup:1.0\r\n   S:     </capability>\r\n   S:   </capabilities>\r\n   S:   <session-id>4</session-id>\r\n   S: </hello>\r\n   S: ]]>]]>\r\n", "correct_text": "   S: <?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n   S: <hello xmlns=\"urn:ietf:params:xml:ns:netconf:base:1.0\">\r\n   S:   <capabilities>\r\n   S:     <capability>\r\n   S:       urn:ietf:params:netconf:base:1.1\r\n   S:     </capability>\r\n   S:     <capability>\r\n   S:       urn:ietf:params:netconf:capability:startup:1.0\r\n   S:     </capability>\r\n   S:   </capabilities>\r\n   S:   <session-id>4</session-id>\r\n   S: </hello>\r\n   S: ]]>]]>\r\n", "notes": "Correct the startup capability in accordance with the URN defined in RFC 6241 Section 10.4 and registered in IANA.", "submit_date": "2025-09-11", "submitter_name": "Ahmed Elhassany", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-09-14 03:40:07"}, {"errata_id": "8377", "doc-id": "RFC9171", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.7", "orig_text": "If the received bundle is a fragment, the ADU \r\nReassembly procedure described in Section 5.9 MUST \r\nbe followed. If this procedure results in reassembly \r\nof the entire original ADU, processing of the \r\nfragmentary bundle whose payload has been replaced \r\nby the reassembled ADU (whether this bundle or a \r\npreviously received fragment) proceeds from Step 2; ", "correct_text": "If the received bundle is a fragment, the ADU \r\nReassembly procedure described in Section 5.9 MUST \r\nbe followed. If this procedure results in reassembly \r\nof the entire original ADU, \r\n\r\nthen the original primary block of the fragmented \r\nbundle whose ADU has been reassembled must replace \r\nthe primary block of the fragmentary bundle whose\r\npayload has been replaced by the reassembled ADU.\r\n\r\nProcessing of this fragmentary bundle proceeds \r\nfrom Step 2; ", "notes": "When performing bundle fragmentation, the original bundle is never fully reconstituted because the original bundle primary block is never recreated upon reassembly.  This means that any extension blocks that require the original bundle primary block to be intact (such as security blocks) cannot verify the reassembled bundle.\r\n\r\nA solution to bundle reassembly that allows for the original bundle to be secured and then verified/decrypted upon reassembly needs to be put in place as the text in 9171 currently cannot support this.\r\n\r\n--- AD notes ---\r\n\r\nRFC 9171 ADU Fragmentation has issues with extension blocks and fragmented bundle size.  It requires a thorough and consistent update via a separate document (too large for an erratum).\r\n\r\nFor more context see:\r\n    * https://mailarchive.ietf.org/arch/msg/dtn/2lY2RE_onIXCbO-IAPdylsf819s/\r\n    * other discussion ongoing on the mailing list", "submit_date": "2025-04-07", "submitter_name": "Ed Birrane", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-11 17:35:57"}, {"errata_id": "8378", "doc-id": "RFC1025", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "1.  The John Nagel Procedures (RFC-896).", "correct_text": "1.  The John Nagle Procedures (RFC-896).", "notes": "Spelling correction of John Nagle's name.", "submit_date": "2025-04-08", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-04-08 23:04:57"}, {"errata_id": "8379", "doc-id": "RFC9413", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "This scenario excludes those cases where a the specification explicitly\r\ndefines how a faulty message is handled.", "correct_text": "This scenario excludes those cases where the specification explicitly\r\ndefines how a faulty message is handled.", "notes": "Typo fix.", "submit_date": "2025-04-12", "submitter_name": "Ben Kallus", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-04-16 18:19:26"}, {"errata_id": "8382", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.4", "orig_text": "Input: WOTS+ private key sk, address ADRS, seed SEED", "correct_text": "Input: WOTS+ private key sk, seed SEED, address ADRS", "notes": "When `WOTS_genPK` is called in `treeHash`, it is called as `WOTS_genPK (getWOTS_SK(SK, s + i), SEED, ADRS)`. By swapping the `SEED` and `ADRS` arguments in `WOTS_genPK` this aligns with the API change from Errata ID 5572.\r\n\r\n--VERIFIER NOTES--\r\nThe function signature in Section 3.1.4 lists parameters as (sk, ADRS, SEED) but the function is called with (sk, SEED, ADRS) in treeHash. RFC author Andreas Huelsing confirmed the erratum on the CFRG list: https://mailarchive.ietf.org/arch/msg/cfrg/-Ejf1RbEitLsDNxd_5qgGGIguPk/", "submit_date": "2025-04-16", "submitter_name": "Alex J Malozemoff", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 19:40:35"}, {"errata_id": "8381", "doc-id": "RFC8555", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.3", "orig_text": "   3.  Dereference the URL using an HTTP GET request.  This request MUST\r\n       be sent to TCP port 80 on the HTTP server.", "correct_text": "   3.  Dereference the URL using an HTTP GET request.  This request MUST\r\n       be sent to TCP port 80 on the HTTP server.  (The HTTP client must\r\n       not resolve and/or must ignore any HTTPS DNS RRs [RFC 9460].)", "notes": "Doing a DNS lookup of an HTTPS DNS RR [RFC 9460] might force the client to switch from HTTP to HTTPS scheme which would break HTTP-01 lookups.  The RFC8555 text is clear that \"request MUST be sent to TCP port 80 on the HTTP server\" which would be violated if the validating client did an HTTPS RR lookup in the DNS and followed the instructions in RFC 9460 section 9.5.", "submit_date": "2025-04-15", "submitter_name": "Erik Nygren", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8383", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.1.5", "orig_text": "Input: Message M, WOTS+ private key sk, address ADRS, seed SEED", "correct_text": "Input: private key sk, Message M, WOTS+ seed SEED, address ADRS", "notes": "When used in Algorithm 11 it is called as `WOTS_sign(getWOTS_SK(SK, idx_sig), M', getSEED(SK), ADRS);` that is, the secret key comes first, then the message, then the seed, then finally the address.\r\n\r\n--VERIFIER NOTES--\r\nThe function signature in Section 3.1.5 lists parameters as (M, sk, ADRS, SEED) but Algorithm 11 calls it with (sk, M', SEED, ADRS). RFC author Andreas Huelsing confirmed the erratum on the CFRG list: https://mailarchive.ietf.org/arch/msg/cfrg/jbfQBMyibkKiQsT4MwOUW1x6lTI/", "submit_date": "2025-04-16", "submitter_name": "Alex J Malozemoff", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 19:44:54"}, {"errata_id": "8392", "doc-id": "RFC9497", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "RandomScalar():  Implemented by returning a uniformly random\r\n         Scalar in the range [0, G.Order() - 1].", "correct_text": "RandomScalar():  Implemented by returning a uniformly random\r\n         Scalar in the range [1, G.Order() - 1].", "notes": "Section 2.1 (https://www.rfc-editor.org/rfc/rfc9497#section-2.1-4.12) states:\r\n> Chooses at random a nonzero element in GF(p).\r\n\r\nSo `RandomScalar()` implementations can't return 0.\r\n\r\n--VERIFIER NOTE--\r\nVerified. Section 2.1 requires nonzero; this fix aligns Section 4 with that requirement. EID 8393 addresses related Section 4.7 implementation guidance (held pending fix text revision).", "submit_date": "2025-04-25", "submitter_name": "daxpedda", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 20:38:25"}, {"errata_id": "8385", "doc-id": "RFC6402", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.8", "orig_text": "      ChangeSubjectName ::= SEQUENCE {\r\n          subject             Name OPTIONAL,\r\n          subjectAlt          SubjectAltName OPTIONAL\r\n      }\r\n      (WITH COMPONENTS {..., subject PRESENT} |\r\n            COMPONENTS {..., subjectAlt PRESENT} )", "correct_text": "      ChangeSubjectName ::= SEQUENCE {\r\n          subject             Name OPTIONAL,\r\n          subjectAlt          [1] SubjectAltName OPTIONAL\r\n      }\r\n      (WITH COMPONENTS {..., subject PRESENT} |\r\n       WITH COMPONENTS {..., subjectAlt PRESENT} )", "notes": "The missing \"WITH\" is necessary for the ASN.1 to compile properly.  The \"WITH\" is present in the ASN.1 module in Appendix A.2.\r\n\r\nIn addition, the tag is added.  See errata 3943 about that change.", "submit_date": "2025-04-18", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-06-27 16:52:50"}, {"errata_id": "8387", "doc-id": "RFC9260", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3.10.6", "orig_text": "Unrecognized Chunk: variable length\r\n   The Unrecognized Chunk field contains the unrecognized chunk from\r\n   the SCTP packet complete with Chunk Type, Chunk Flags, and Chunk\r\n   Length.", "correct_text": "Unrecognized Chunk: variable length\r\n   The Unrecognized Chunk field contains the unrecognized chunk from\r\n   the SCTP packet complete with Chunk Type, Chunk Flags, Chunk Length,\r\n   and Chunk Value.", "notes": "If the Unrecognized Chunk field of the Unrecognized Chunk Type (6) error cause only contained \"Chunk Type, Chunk Flags, and Chunk Length\" (as the RFC says) then the Cause Length would have fixed value 8. However, Unrecognized Chunk is defined as variable length, meaning that it must contain the entire unrecognized Chunk including its Chunk Value field.\n --VERIFIER NOTES-- \nThe suggested text from the reporter would require the sender of the error cause to include the complete chunk with all of its chunk value. It is correct that a chunk consists of a Chunk Type, Chunk Flag, Chunk Length, and Chunk Value. However, requiring a complete chunk value might result in a packet being too large and thus requiring IP level fragmentation. The proposed text was not intended in RFC 9260, and therfore this Erratum is not applied in this form, because the specification cannot be changed. ", "submit_date": "2025-04-20", "submitter_name": "I\u00f1aki Baz Castillo", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-02-12 08:13:16"}, {"errata_id": "8388", "doc-id": "RFC7519", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "13.2", "orig_text": "   [POSIX.1]  IEEE, \"The Open Group Base Specifications Issue 7\", IEEE\r\n              Std 1003.1, 2013 Edition, 2013,\r\n              <http://pubs.opengroup.org/onlinepubs/9699919799/\r\n              basedefs/V1_chap04.html#tag_04_15>.\r\n", "correct_text": "   [POSIX.1]  IEEE, \"The Open Group Base Specifications Issue 7\", IEEE\r\n              Std 1003.1, 2013 Edition, 2013,\r\n              <https://pubs.opengroup.org/onlinepubs/9699919799.2013edition/\r\n              basedefs/V1_chap04.html#tag_04_15>.\r\n", "notes": "The link points to the 2018 edition \"4.15 Scheduling Policy\", in that edition the section number changed from 4.15 to 4.16.  But the reference text is for the 2013 edition.\r\n\r\nThe 2013 edition is in 4.15:\r\nhttps://pubs.opengroup.org/onlinepubs/9699919799.2013edition/basedefs/V1_chap04.html#tag_04_15\r\n\r\nThe 2018 edition is in 4.16:\r\nhttps://pubs.opengroup.org/onlinepubs/9699919799/basedefs/V1_chap04.html#tag_04_16\r\n\r\nThe 2024 edition is in 4.19:\r\nhttps://pubs.opengroup.org/onlinepubs/9799919799/basedefs/V1_chap04.html#tag_04_19", "submit_date": "2025-04-21", "submitter_name": "Robert Wallis", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-06-27 16:56:17"}, {"errata_id": "8389", "doc-id": "RFC5870", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6.4", "orig_text": "The URIs <geo:22.300;-118.44> and <geo:22.3;-118.4400> are equal", "correct_text": "The URIs <geo:22.300,-118.44> and <geo:22.3,-118.4400> are equal", "notes": "The correct coordinate separator is \",\", not \";\".", "submit_date": "2025-04-22", "submitter_name": "Anton Khorev", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-04-23 12:53:57"}, {"errata_id": "8390", "doc-id": "RFC9679", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.4", "orig_text": "as the \"x5t\" (X.509 certificate SHA-1 thumbprint) [RFC9360] \r\nvalue defined for X.509 certificate objects does.", "correct_text": "as the \"x5t\" (X.509 certificate thumbprint) [RFC9360] \r\nvalue defined for X.509 certificate objects does.", "notes": "The hash function name \"SHA-1\" is spurious here.\r\nRFC 9360 calls \"x5t\" a \"Hash of an X.509 certificate\" or goes into more detail by saying \"x5t:\r\nThis header parameter identifies the end-entity X.509 certificate by a hash value (a thumbprint). \".\r\nSo calling \"x5t\" an \"X.509 certificate thumbprint\" is not wrong.\r\nHowever, there is nothing in RFC 9360 about SHA-1, and SHA-1 is outdated enough that this misreference borders on a technical mistake.", "submit_date": "2025-04-22", "submitter_name": "Carsten Bormann", "verifier_id": "", "verifier_name": null, "update_date": "2025-04-29 21:50:18"}, {"errata_id": "8391", "doc-id": "RFC4211", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2", "orig_text": "         challengeResponse indicates that a challenge message is to be\r\n         sent from the CA/RA to the requestor.", "correct_text": "         challengeResp indicates that a challenge message is to be\r\n         sent from the CA/RA to the requestor.", "notes": "Earlier in the section, SubsequentMessage is defined with two possible values: encrCert (0) and challengeResp (1).  This aligns with that definition.", "submit_date": "2025-04-23", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-04-23 19:51:17"}, {"errata_id": "8568", "doc-id": "RFC7518", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "(This requirement is based on Section 5.3.4 (Security Effect of the HMAC Key) of \r\nNIST SP 800-117 [NIST.800-107], which states that the effective security \r\nstrength is the minimum of the security strength of the key and two times the \r\nsize of the internal hash value.)", "correct_text": "(This requirement is based on Section 5.3.4 (Security Effect of the HMAC Key) of \r\nNIST SP 800-107 [NIST.800-107], which states that the effective security \r\nstrength is the minimum of the security strength of the key and two times the \r\nsize of the internal hash value.)", "notes": "NIST SP 800-117 was SCAP, 800-107 is the correct one (as linked).", "submit_date": "2025-09-08", "submitter_name": "S\u00f6ren Spr\u00f6\u00dfig", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-09-12 15:46:11"}, {"errata_id": "8393", "doc-id": "RFC9497", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.7", "orig_text": "4.7.1.  Rejection Sampling\r\n\r\n   Generate a random byte array with Ns bytes and attempt to map to a\r\n   Scalar by calling DeserializeScalar in constant time.\r\n   ...\r\n\r\n4.7.2.  Random Number Generation Using Extra Random Bits\r\n\r\n   Generate a random byte array with L = ceil(((3 *\r\n   ceil(log2(G.Order()))) / 2) / 8) bytes, and interpret it as an\r\n   integer; reduce the integer modulo G.Order(), and return the result.", "correct_text": "4.7.1.  Rejection Sampling\r\n\r\n   Generate a random byte array with Ns bytes and attempt to map to a\r\n   Scalar by calling DeserializeScalar and checking for a nonzero Scalar\r\n   in constant time.\r\n   ...\r\n\r\n4.7.2.  Random Number Generation Using Extra Random Bits\r\n\r\n   Generate a random byte array with L = ceil(((3 *\r\n   ceil(log2(G.Order()))) / 2) / 8) bytes, and interpret it as an\r\n   integer; reduce the integer modulo G.Order() - 1, 1, and return the\r\n   result.", "notes": "Section 2.1 states: \"Chooses at random a nonzero element\r\nin GF(p).\" So RandomScalar() implementations can't return 0.\r\n\r\nFor rejection sampling I recommend changing DeserializeScalar()\r\nto check for nonzero Scalar and decline those. My suggested\r\nerrata is a compromise to keep the change specific.\r\n\r\nFor \"Random Number Generation Using Extra Random Bits\" my\r\nsuggestion follows FIPS 186-5 A.2.1.\r\n\r\n--VERIFIER NOTE--\r\nHeld for document update. The underlying issue (RandomScalar\r\nmust exclude zero) is valid and addressed by EID 8392, which\r\nfixes the Section 4 range to [1, G.Order()-1]. This erratum's\r\nproposed text for Section 4.7 is unclear (\"modulo G.Order() -\r\n1, 1\"). For implementers: the correct approach per FIPS 186-5\r\nA.2.1 is (random mod (G.Order()-1)) + 1, producing scalars in\r\n[1, G.Order()-1].", "submit_date": "2025-04-25", "submitter_name": "daxpedda", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 20:47:35"}, {"errata_id": "8400", "doc-id": "RFC8955", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.2, 5.1", "orig_text": "4.2.2.1. Type 1 - Destination Prefix\r\n\r\nEncoding: <type (1 octet), length (1 octet), prefix (variable)>\r\nDefines the destination prefix to match. The length and prefix fields\r\nare encoded as in BGP UPDATE messages [RFC4271].\r\n\r\n4.2.2.2. Type 2 - Source Prefix\r\n\r\nEncoding: <type (1 octet), length (1 octet), prefix (variable)>\r\nDefines the source prefix to match. The length and prefix fields are \r\nencoded as in BGP UPDATE messages [RFC4271].\r\n[...]\r\n\r\n5.1. Ordering of Flow Specifications \r\n[...]\r\nFor IP prefix values (IP destination or source prefix), if one of the\r\ntwo prefixes to compare is a more specific prefix of the other, the more\r\nspecific prefix has higher precedence. Otherwise, the one with the\r\nlowest IP value has higher precedence.\r\n", "correct_text": "No correction offered, see notes.", "notes": "No corrected text is supplied since the resolution of this issue is somewhat ambiguous.\r\nIn RFC 4271 Section 4.3, the definition of a prefix is:\r\n         b) Prefix:\r\n\r\n            The Prefix field contains an IP address prefix, followed by\r\n            the minimum number of trailing bits needed to make the end\r\n            of the field fall on an octet boundary.  Note that the value\r\n            of trailing bits is irrelevant.\r\n\r\nRFC 8955 doesn't quite address the \"trailing bits\" consideration.  Following the advice from RFC 4271, irrelevant would primarily impact ignoring the trailing bits for purposes of installing firewall rules generated from flowspec routes.  For the ordering procedures, comparing two equivalent prefixes that differ in trailing bits should result in them being considered equal.\r\n\r\nImplementations of flowspec that don't ignore trailing bits may treat routes with components that differ only in trailing bits for their source or destination prefixes as different flowspec routes.\r\n\r\nFor updates to RFC 8955, including the upcoming flowspec v2, more normative text to zero out the trailing bits should be considered.\n --VERIFIER NOTES-- \nFollowing is a summary of the discussion thread on IDR WG and my reading of RFC8955:\r\n1) RFC8955 removes the opaqueness aspect of FSv1 components encoded in the NLRI.\r\n2) Drawing upon the prefix encoding of RFC4271, implies that the trailing bits of the prefix beyond what is indicated by the prefix length are ignored. And since there is no opaqueness, there is technically no issue in creating a correct entry in the BGP RIB (and as an extension the firewall rules that are downloaded).\r\n3) If some implementation of RFC8955 has erred on this, then it seems like an implementation issue.\r\n4) Prudent software engineering dictates that the \"to be ignored\" parts are set to zero and putting that into a spec would only improve it. John has captured this well and I am not repeating.\r\n5) In summary, this is not a bug in RFC8955 but there is scope for clarity and improvement in this aspect.\r\n\r\nAfter discussions on the WG mailer, this erratum is rejected and the WG participants may pursue improvements via document actions that have WG consensus.\r\n\r\nFor further details, refer the discussion thread here: https://mailarchive.ietf.org/arch/msg/idr/0BhDnIq-ZrqNu5D8_lAP3R7BvQU/", "submit_date": "2025-04-30", "submitter_name": "Jeffrey Haas", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-05-09 06:18:34"}, {"errata_id": "8401", "doc-id": "RFC9711", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "1", "orig_text": "For attestation, the keys are associated with\r\nspecific devices and are configured by device manufacturers. ", "correct_text": "The quoted text is inaccurate and just an opinion of the editors. \r\nIt should preferably be removed from the RFC.", "notes": "In SGX, the keys are not configured by the manufacturer alone. The platform owner can provide a random value called OWNER_EPOCH.\r\n\r\nSee this for technical details: https://mailarchive.ietf.org/arch/msg/rats/4V2zZHhk5IuxwcUMNWpPBpnzpaM/\n --VERIFIER NOTES-- \n   Incorrectly specified errata.  The corrected text is not actually correct.", "submit_date": "2025-05-01", "submitter_name": "Muhammad Usama Sardar", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-06-27 17:00:06"}, {"errata_id": "8396", "doc-id": "RFC8391", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.10", "orig_text": "pk_ots = WOTS_pkFromSig(sig_ots, M', SEED, ADRS);", "correct_text": "pk_ots = WOTS_pkFromSig(M', sig_ots, ADRS, SEED);", "notes": "The call to `WOTS_pkFromSig` in `XMSS_rootFromSig` does not match the signature of Algorithm 6 (Section 3.1.6).\r\n\r\n--VERIFIER NOTES--\r\nSection 4.1.10 calls WOTS_pkFromSig with (sig, M', SEED, ADRS) but Algorithm 6 defines it as (M, sig, ADRS, SEED). RFC author Andreas Huelsing confirmed the erratum on the CFRG list: https://mailarchive.ietf.org/arch/msg/cfrg/_rNMOiIzKQS28hyN9USauZVwM54/", "submit_date": "2025-04-28", "submitter_name": "Alex J Malozemoff", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 19:45:03"}, {"errata_id": "8397", "doc-id": "RFC7030", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3", "orig_text": "   +--------------+--------------------+-------------------------------+\r\n   | EST server   | A CA               | Presented by the EST server   |\r\n   | certificate  | authenticatable by | during the TLS handshake.     |\r\n   |              | a third-party TA,  |                               |\r\n   |              | e.g., a web server | Section 3.3.1 and             |\r\n   |              | CA                 | Security Considerations       |\r\n   +--------------+--------------------+-------------------------------+", "correct_text": "   +--------------+--------------------+-------------------------------+\r\n   | Third-party  | A CA               | Presented by the EST server   |\r\n   | EST server   | authenticatable by | during the TLS handshake.     |\r\n   | certificate  | a third-party TA,  |                               |\r\n   |              | e.g., a web server | Section 3.3.1 and             |\r\n   |              | CA                 | Security Considerations       |\r\n   +--------------+--------------------+-------------------------------+", "notes": "In Figure 3, second row under the header should specify this information is for the \"Third-party\" EST server certificate (similar to row 3 for \"Third-party EST client certificate\")", "submit_date": "2025-04-28", "submitter_name": "Angelica Semenec", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-06-27 16:58:32"}, {"errata_id": "8398", "doc-id": "RFC5545", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.6.5", "orig_text": "       tzprop     = *(\r\n                    ;\r\n                    ; The following are REQUIRED,\r\n                    ; but MUST NOT occur more than once.\r\n                    ;\r\n                    dtstart / tzoffsetto / tzoffsetfrom /\r\n                    ;\r\n                    ; The following is OPTIONAL,\r\n                    ; but SHOULD NOT occur more than once.\r\n                    ;\r\n                    rrule /\r\n                    ;\r\n                    ; The following are OPTIONAL,\r\n                    ; and MAY occur more than once.\r\n                    ;\r\n                    comment / rdate / tzname / x-prop / iana-prop\r\n                    ;\r\n                    )", "correct_text": "       tzprop     = *(\r\n                    ;\r\n                    ; The following are REQUIRED,\r\n                    ; but MUST NOT occur more than once.\r\n                    ;\r\n                    dtstart / tzoffsetto / tzoffsetfrom /\r\n                    ;\r\n                    ; The following is OPTIONAL,\r\n                    ; but SHOULD NOT occur more than once.\r\n                    ;\r\n                    rrule /\r\n                    ;\r\n                    ; The following are OPTIONAL,\r\n                    ; and MAY occur more than once.\r\n                    ;\r\n                    comment / exdate / rdate / tzname / x-prop / iana-prop\r\n                    ;\r\n                    )", "notes": "This proposal adds exdate to STANDARD and DAYLIGHT\r\n\r\ntzprop does not include \"exdate\"\r\nHowever, the exdate documentation states:\r\n\r\nConformance:  This property can be specified in recurring \"VEVENT\",\r\n      \"VTODO\", and \"VJOURNAL\" calendar components as well as in the\r\n      \"STANDARD\" and \"DAYLIGHT\" sub-components of the \"VTIMEZONE\"\r\n      calendar component.", "submit_date": "2025-04-29", "submitter_name": "Nicco Kunzmann", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8399", "doc-id": "RFC7030", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "The EST server MUST authenticate the client, as specified in\r\nSection 3.3.2 if certificate-based authenticated is used or", "correct_text": "The EST server MUST authenticate the client, as specified in\r\nSection 3.3.2, if certificate-based authentication is used or", "notes": "\"authenticated\" should be \"authentication\".", "submit_date": "2025-04-29", "submitter_name": "Angelica Semenec", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-04-30 15:01:16"}, {"errata_id": "8404", "doc-id": "RFC9711", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.4", "orig_text": "The nonce claim is based on a value usually derived\r\n   remotely (outside of the entity).", "correct_text": "See notes", "notes": "Attester-generated nonce does not provide any replay protection since the Attester can pre-generate an Evidence that might not reflect the actual system state, but a past one.\r\n\r\nSee the attack trace for Attester-generated nonce at: \r\nhttps://mailarchive.ietf.org/arch/msg/rats/jcAv9FKbYSIVtUNQ8ggEHL8lrmM/  \r\n\r\nFor replay protection, nonce should *always* be derived remotely (for example, by the Relying Party).\n --VERIFIER NOTES-- \n   Incorrectly formatted errata.  The corrected text is not correct.", "submit_date": "2025-05-04", "submitter_name": "Muhammad Usama Sardar", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-06-27 17:01:20"}, {"errata_id": "8405", "doc-id": "RFC9268", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "It does not replace PMTUD [RFC8201], Packetization Layer Path MTU\r\nDiscovery (PLPMTUD) [RFC4821], or Datagram Packetization Layer PMTU\r\nDiscovery (DPLPMTUD) [RFC8899] but rather is designed to compliment\r\nthese methods.", "correct_text": "It does not replace PMTUD [RFC8201], Packetization Layer Path MTU\r\nDiscovery (PLPMTUD) [RFC4821], or Datagram Packetization Layer PMTU\r\nDiscovery (DPLPMTUD) [RFC8899] but rather is designed to complement\r\nthese methods.", "notes": "\"compliment\" should be written as \"complement\".", "submit_date": "2025-05-06", "submitter_name": "LEdoian", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-05-08 20:53:01"}, {"errata_id": "8406", "doc-id": "RFC4271", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.8", "orig_text": "If a pair of BGP speakers try to establish a BGP connection with each\r\nother simultaneously, then two parallel connections well be formed.", "correct_text": "If a pair of BGP speakers try to establish a BGP connection with each\r\nother simultaneously, then two parallel connections will be formed.", "notes": "small typo: \"well\" -> \"will\"", "submit_date": "2025-05-06", "submitter_name": "David Naylor", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-05-08 20:55:11"}, {"errata_id": "8407", "doc-id": "RFC7296", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.15.", "orig_text": "InitiatorSignedOctets = RealMessage1 | NonceRData | MACedIDForI\r\n\r\nNonceRPayload = PayloadHeader | NonceRData", "correct_text": "InitiatorSignedOctets = RealMessage1 | Nr| MACedIDForI\r\n\r\nNonceRPayload = PayloadHeader | Nr", "notes": "I'm not sure whether \"NonceRData\" and \"NonceIData \" refers to Nr and Ni? I searched \"NonceRData\" but I cannot find its definition. \r\n\r\nBTW, because we have already included \"MACedIDForI\" that is generated from Nonce in InitiatorSignedOctets, can we remove \"NonceRData\" from InitiatorSignedOctets (assuming NonceRData is Nr)?\n --VERIFIER NOTES-- \nThe proposed change is wrong. Nr in the RFC7296 diagrams\r\nrepresents the whole Nonce payload, including payload header,\r\nwhile only its content is included in to the authentication data.\r\n\r\nThis is expressed by the line:\r\n\r\nNonceRPayload = PayloadHeader | NonceRData\r\n\r\nThe correct change would be:\r\n\r\nNr = PayloadHeader | NonceRData\r\n\r\nHowever, while terms NonceRPayload, InitiatorIDPayload,\r\nRealMessage1, etc., are not formally defined in the RFC,\r\nthe explanation text above makes it clear what is meant.", "submit_date": "2025-05-07", "submitter_name": "Yan Jia", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:03:06"}, {"errata_id": "8408", "doc-id": "RFC4271", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "9.1.1", "orig_text": "The Phase 1 decision function is a separate process,f which completes\r\n   when it has no further work to do.", "correct_text": "The Phase 1 decision function is a separate process, f, which completes\r\n   when it has no further work to do.", "notes": "Extra space and comma needed around function \"f\"\n --VERIFIER NOTES-- \nDuplicate of https://www.rfc-editor.org/errata/eid150", "submit_date": "2025-05-07", "submitter_name": "David Naylor", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-05-19 07:15:48"}, {"errata_id": "8409", "doc-id": "RFC7940", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.4.3.", "orig_text": "       <char cp=\"30FB\" when=\"japanese-in-label\"/>\r\n       <rule name=\"japanese-in-label\">\r\n           <union>\r\n               <class property=\"sc:Hani\"/>\r\n               <class property=\"sc:Kata\"/>\r\n               <class property=\"sc:Hira\"/>\r\n           </union>\r\n       </rule>", "correct_text": "       <char cp=\"30FB\" when=\"japanese-in-label\"/>\r\n       <rule name=\"japanese-in-label\">\r\n           <union>\r\n               <class property=\"sc:Hani\"/>\r\n               <class property=\"sc:Kana\"/>\r\n               <class property=\"sc:Hira\"/>\r\n           </union>\r\n       </rule>", "notes": "ISO 15924 code for Katakana is Kana, not Kata", "submit_date": "2025-05-07", "submitter_name": "Julien Bernard", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-05-07 20:49:52"}, {"errata_id": "8410", "doc-id": "RFC9204", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C", "orig_text": "base = dynamicTable.getInsertCount()\r\nrequiredInsertCount = 0\r\nfor line in fieldLines:\r\n  staticIndex = staticTable.findIndex(line)\r\n  if staticIndex is not None:\r\n    encodeStaticIndexReference(streamBuffer, staticIndex)\r\n    continue\r\n\r\n  dynamicIndex = dynamicTable.findIndex(line)\r\n  if dynamicIndex is None:\r\n    # No matching entry.  Either insert+index or encode literal\r\n    staticNameIndex = staticTable.findName(line.name)\r\n    if staticNameIndex is None:\r\n       dynamicNameIndex = dynamicTable.findName(line.name)\r\n\r\n    if shouldIndex(line) and dynamicTable.canIndex(line):\r\n      encodeInsert(encoderBuffer, staticNameIndex,\r\n                   dynamicNameIndex, line)\r\n      dynamicIndex = dynamicTable.add(line)\r\n\r\n  if dynamicIndex is None:\r\n    # Could not index it, literal\r\n    if dynamicNameIndex is not None:\r\n      # Encode literal with dynamic name, possibly above Base\r\n      encodeDynamicLiteral(streamBuffer, dynamicNameIndex,\r\n                           base, line)\r\n      requiredInsertCount = max(requiredInsertCount,\r\n                                dynamicNameIndex)\r\n    else:\r\n      # Encodes a literal with a static name or literal name\r\n      encodeLiteral(streamBuffer, staticNameIndex, line)\r\n  else:\r\n    # Dynamic index reference\r\n    assert(dynamicIndex is not None)\r\n    requiredInsertCount = max(requiredInsertCount, dynamicIndex)\r\n    # Encode dynamicIndex, possibly above Base\r\n    encodeDynamicIndexReference(streamBuffer, dynamicIndex, base)\r\n\r\n# encode the prefix\r\nif requiredInsertCount == 0:\r\n  encodeInteger(prefixBuffer, 0x00, 0, 8)\r\n  encodeInteger(prefixBuffer, 0x00, 0, 7)\r\nelse:\r\n  wireRIC = (\r\n    requiredInsertCount\r\n    % (2 * getMaxEntries(maxTableCapacity))\r\n  ) + 1;\r\n  encodeInteger(prefixBuffer, 0x00, wireRIC, 8)\r\n  if base >= requiredInsertCount:\r\n    encodeInteger(prefixBuffer, 0x00,\r\n                  base - requiredInsertCount, 7)\r\n  else:\r\n    encodeInteger(prefixBuffer, 0x80,\r\n                  requiredInsertCount - base - 1, 7)\r\n\r\nreturn encoderBuffer, prefixBuffer + streamBuffer", "correct_text": "base = dynamicTable.getInsertCount()\r\nrequiredInsertCount = 0\r\nfor line in fieldLines:\r\n  staticIndex = staticTable.findIndex(line)\r\n  if staticIndex is not None:\r\n    encodeStaticIndexReference(streamBuffer, staticIndex)\r\n    continue\r\n\r\n  dynamicIndex = dynamicTable.findIndex(line)\r\n  if dynamicIndex is None:\r\n    # No matching entry.  Either insert+index or encode literal\r\n    staticNameIndex = staticTable.findName(line.name)\r\n    if staticNameIndex is None:\r\n       dynamicNameIndex = dynamicTable.findName(line.name)\r\n\r\n    if shouldIndex(line) and dynamicTable.canIndex(line):\r\n      encodeInsert(encoderBuffer, staticNameIndex,\r\n                   dynamicNameIndex, line)\r\n      dynamicIndex = dynamicTable.add(line)\r\n\r\n  if dynamicIndex is None:\r\n    # Could not index it, literal\r\n    if dynamicNameIndex is not None:\r\n      # Encode literal with dynamic name, possibly above Base\r\n      encodeDynamicLiteral(streamBuffer, dynamicNameIndex,\r\n                           base, line)\r\n      requiredInsertCount = max(requiredInsertCount,\r\n                                dynamicNameIndex + 1)\r\n    else:\r\n      # Encodes a literal with a static name or literal name\r\n      encodeLiteral(streamBuffer, staticNameIndex, line)\r\n  else:\r\n    # Dynamic index reference\r\n    assert(dynamicIndex is not None)\r\n    requiredInsertCount = max(requiredInsertCount, dynamicIndex + 1)\r\n    # Encode dynamicIndex, possibly above Base\r\n    encodeDynamicIndexReference(streamBuffer, dynamicIndex, base)\r\n\r\n# encode the prefix\r\nif requiredInsertCount == 0:\r\n  encodeInteger(prefixBuffer, 0x00, 0, 8)\r\n  encodeInteger(prefixBuffer, 0x00, 0, 7)\r\nelse:\r\n  wireRIC = (\r\n    requiredInsertCount\r\n    % (2 * getMaxEntries(maxTableCapacity))\r\n  ) + 1;\r\n  encodeInteger(prefixBuffer, 0x00, wireRIC, 8)\r\n  if base >= requiredInsertCount:\r\n    encodeInteger(prefixBuffer, 0x00,\r\n                  base - requiredInsertCount, 7)\r\n  else:\r\n    encodeInteger(prefixBuffer, 0x80,\r\n                  requiredInsertCount - base - 1, 7)\r\n\r\nreturn encoderBuffer, prefixBuffer + streamBuffer\r\n", "notes": "\"Sample Single-Pass Encoding Algorithm\" in Appendix C has a bug that Count is equel to the index. Count must be one higher than index.\r\n\r\nReasoning the code:\r\n\r\nrequiredInsertCount is initialized with 0:\r\n\r\n    requiredInsertCount = 0\r\n\r\ndynamicIndex can be 0 if it is the first entry of the dynamic table:\r\n\r\n    dynamicIndex = dynamicTable.findIndex(line)\r\n\r\nIn this case, requiredInsertCount stay with 0:\r\n\r\n   requiredInsertCount = max(requiredInsertCount, dynamicIndex)\r\n\r\nThis results in a wrong prefix:\r\n\r\n    if requiredInsertCount == 0:\r\n      encodeInteger(prefixBuffer, 0x00, 0, 8)\r\n      encodeInteger(prefixBuffer, 0x00, 0, 7)\r\n\r\nThe following code is correct:\r\n\r\n    requiredInsertCount = max(requiredInsertCount, dynamicIndex + 1)", "submit_date": "2025-05-08", "submitter_name": "Kazu Yamamoto", "verifier_id": "", "verifier_name": "Mike Bishop", "update_date": "2025-06-02 15:41:38"}, {"errata_id": "8411", "doc-id": "RFC8446", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.2.7", "orig_text": "struct {\r\n    NamedGroup named_group_list<2..2^16-1>;\r\n} NamedGroupList;", "correct_text": "struct {\r\n    NamedGroup named_group_list<2..2^16-2>;\r\n} NamedGroupList;", "notes": "The specified maximum legal length of the named_group_list vector in the NamedGroupList structure is 2^16-1 bytes. This is invalid because NamedGroup is an enum that occupies two bytes, but 2^16-1 is not an exact multiple of the element size (2 bytes), as required in Section 3.4. It appears that the intended upper bound should be 2^16-2 bytes instead.\r\n\r\nAD note: This is scheduled for the bis document via https://github.com/tlswg/tls13-spec/pull/1380 \n --VERIFIER NOTES-- \n   see https://github.com/tlswg/tls13-spec/pull/1380", "submit_date": "2025-05-08", "submitter_name": "Albin Johansson", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:28:05"}, {"errata_id": "8412", "doc-id": "RFC3", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "V2.1.0", "orig_text": "Gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg", "correct_text": "Ggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg", "notes": "Gggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggggg", "submit_date": "2025-05-10", "submitter_name": "Vit\u00f3ria Martins De Oliveira", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8413", "doc-id": "RFC2", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "I need the issue fix", "correct_text": "Fix the problem no", "notes": "Tired of this issue", "submit_date": "2025-05-11", "submitter_name": "William Sexton", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8414", "doc-id": "RFC8588", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "https://access.atis.org/apps/group_public/download.php/32237/ATIS-1000074.pdf", "correct_text": "https://access.atis.org/apps/group_public/download.php/67436/ATIS-1000074.v003.pdf", "notes": "Updating an outdated link to the v003 version of ATIS-1000074, the original link is no longer active as well.", "submit_date": "2025-05-13", "submitter_name": "Chris Wendt", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8415", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "            \"name\" : \"subAttributes\",\r\n            \"type\" : \"complex\",\r\n            \"multiValued\" : true,\r\n            \"description\" : \"Used to define the sub-attributes of a\r\n              complex attribute.\",\r\n            \"required\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"subAttributes\" : [\r\n              {\r\n                \"name\" : \"name\",\r\n                \"type\" : \"string\",\r\n                \"multiValued\" : false,\r\n                \"description\" : \"The attribute's name.\",\r\n                \"required\" : true,\r\n                \"caseExact\" : true,\r\n                \"mutability\" : \"readOnly\",\r\n                \"returned\" : \"default\",\r\n                \"uniqueness\" : \"none\"\r\n              },\r\n              {\r\n                \"name\" : \"type\",\r\n                \"type\" : \"string\",\r\n                \"multiValued\" : false,\r\n                \"description\" : \"The attribute's data type.\r\n                  Valid values include 'string', 'complex', 'boolean',\r\n                  'decimal', 'integer', 'dateTime', 'reference'.\",\r\n                \"required\" : true,\r\n                \"caseExact\" : false,\r\n                \"mutability\" : \"readOnly\",\r\n                \"returned\" : \"default\",\r\n                \"uniqueness\" : \"none\",\r\n                \"canonicalValues\" : [\r\n                  \"string\",\r\n                  \"complex\",\r\n                  \"boolean\",\r\n                  \"decimal\",\r\n                  \"integer\",\r\n                  \"dateTime\",\r\n                  \"reference\"\r\n                ]\r\n              },\r\n", "correct_text": "            \"name\" : \"subAttributes\",\r\n            \"type\" : \"complex\",\r\n            \"multiValued\" : true,\r\n            \"description\" : \"Used to define the sub-attributes of a\r\n              complex attribute.\",\r\n            \"required\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"subAttributes\" : [\r\n              {\r\n                \"name\" : \"name\",\r\n                \"type\" : \"string\",\r\n                \"multiValued\" : false,\r\n                \"description\" : \"The attribute's name.\",\r\n                \"required\" : true,\r\n                \"caseExact\" : true,\r\n                \"mutability\" : \"readOnly\",\r\n                \"returned\" : \"default\",\r\n                \"uniqueness\" : \"none\"\r\n              },\r\n              {\r\n                \"name\" : \"type\",\r\n                \"type\" : \"string\",\r\n                \"multiValued\" : false,\r\n                \"description\" : \"The attribute's data type.\r\n                  Valid values include 'string', 'boolean',\r\n                  'decimal', 'integer', 'dateTime', 'reference', 'binary'.\",\r\n                \"required\" : true,\r\n                \"caseExact\" : false,\r\n                \"mutability\" : \"readOnly\",\r\n                \"returned\" : \"default\",\r\n                \"uniqueness\" : \"none\",\r\n                \"canonicalValues\" : [\r\n                  \"string\",\r\n                  \"boolean\",\r\n                  \"decimal\",\r\n                  \"integer\",\r\n                  \"dateTime\",\r\n                  \"reference\",\r\n                  \"binary\"\r\n                ]\r\n              },\r\n", "notes": "As in erratum 5606, the valid value 'binary' is also missing for the subAttributes on page 88. Furthermore, complex attributes must not contain complex subAttributes (section 2.3.8). Thus, the data type 'complex' should not be listed as valid value for subAttributes.", "submit_date": "2025-05-14", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:32:50"}, {"errata_id": "8416", "doc-id": "RFC6146", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.5.1.1", "orig_text": "In all cases, the allocated IPv4 transport address (T,t) MUST NOT be in use in another entry in the same BIB, but can be in use in other BIBs (e.g., the UDP and TCP BIBs).", "correct_text": "In all cases, the allocated IPv4 transport address (T,t) MUST NOT be in use in another entry in the same BIB, but can be in use in other BIBs (e.g., the TCP and ICMP BIBs).", "notes": "The confusing wording appears in section 3.5.1.1 (regarding UDP BIB) and 3.5.2.3 (regarding TCP BIB).\r\n\r\nIt's possible and reasonable to interpret section 3.5.1.1's text\r\n\r\n    \"but can be in use in other BIBs (e.g., the UDP and TCP BIBs)\"\r\n\r\nas if the text were:\r\n\r\n    \"but can be in use in other BIBs (i.e., can be in use in the other BIBs, which in this case are the UDP and TCP BIBs).\"\r\n\r\nThis looks like an error, because when *this* BIB is the UDP BIB, the *other* BIBs are the TCP and ICMP BIBs, not the UDP and TCP BIBs.\r\n\r\nThis interpretation is reasonable because use of the Latin \"e.g.\" (\"for example\") makes it seem like the given BIBs are examples of \"other BIBs.\"\r\n\r\nSimilarly, in section 3.5.2.3, *this* BIB is the TCP BIB, the *other* BIBs are the UDP and ICMP BIBs, but the text mentions UDP and TCP BIBs in the parenthetical example, and again looks like an error.\r\n\r\nIf this is the correct interpretation, then each section simply requires the correct *other* example BIBs in the parenthetical. [Section 3.5.1.1 corrected text given above; section 3.5.2.3 would be corrected in a similar manner.]\r\n\r\nHowever, there is another possible interpretation, in which the given BIBs are correctly stated, but the wording is unclear as to what is denoted by the parenthetical example. In this interpretation, section 3.5.1.1 is intended as if the text were:\r\n\r\n    \"but can be in use in other BIBs (i.e., the same address can be used in entries in both the UDP and TCP BIBs),\"\r\n\r\nor\r\n\r\n    \"\"but can be in use in other BIBs (i.e., the UDP and TCP BIBs can have an entry using the same address).\"\r\n\r\nIf this interpretation is intended, then it should be made clearer, and probably should use the Latin \"i.e.\" (\"that is\") for the clarifying situation. [Again, in sections 3.5.1.1 and 3.5.2.3.]\r\n\r\nEither way, because interpretation of the text is ambiguous in a way that affects its normative meaning, it should be clarified.", "submit_date": "2025-05-15", "submitter_name": "Marc Lepage", "verifier_id": "", "verifier_name": null, "update_date": "2025-05-28 14:17:37"}, {"errata_id": "8417", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "[\r\n  {\r\n    \"id\" :\r\n      \"urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig\",\r\n    \"name\" : \"Service Provider Configuration\",\r\n\r\n...\r\n\r\n  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:ResourceType\",\r\n    \"name\" : \"ResourceType\",\r\n\r\n...\r\n\r\n  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:Schema\",\r\n    \"name\" : \"Schema\",", "correct_text": "[\r\n  {\r\n    \"schemas\": [\"urn:ietf:params:scim:schemas:core:2.0:Schema\"],\r\n    \"id\" :\r\n      \"urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig\",\r\n    \"meta\" : {\r\n      \"resourceType\" : \"Schema\",\r\n      \"location\" : \"/v2/Schemas/urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig\"\r\n    },\r\n    \"name\" : \"Service Provider Configuration\",\r\n\r\n...\r\n\r\n  {\r\n    \"schemas\": [\"urn:ietf:params:scim:schemas:core:2.0:Schema\"],\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:ResourceType\",\r\n    \"meta\" : {\r\n      \"resourceType\" : \"Schema\",\r\n      \"location\" : \"/v2/Schemas/urn:ietf:params:scim:schemas:core:2.0:ResourceType\"\r\n    },\r\n    \"name\" : \"ResourceType\",\r\n\r\n...\r\n\r\n  {\r\n    \"schemas\": [\"urn:ietf:params:scim:schemas:core:2.0:Schema\"],\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:Schema\",\r\n    \"meta\" : {\r\n      \"resourceType\" : \"Schema\",\r\n      \"location\" : \"/v2/Schemas/urn:ietf:params:scim:schemas:core:2.0:Schema\"\r\n    },\r\n    \"name\" : \"Schema\",", "notes": "The JSON representation of the Schema resources for ServiceProviderConfig, ResourceType, and Schema are missing the \"schemas\" attribute and the \"meta\" attribute. See also Erratum 5999.", "submit_date": "2025-05-16", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:33:17"}, {"errata_id": "8418", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:Schema\",\r\n    \"name\" : \"Schema\",\r\n    \"description\" : \"Specifies the schema that describes a\r\n      SCIM schema\",\r\n    \"attributes\" : [\r\n      {\r\n        \"name\" : \"id\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The unique URI of the schema.\r\n          When applicable, service providers MUST specify the URI.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n      {\r\n        \"name\" : \"name\",\r\n", "correct_text": "  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:Schema\",\r\n    \"name\" : \"Schema\",\r\n    \"description\" : \"Specifies the schema that describes a\r\n      SCIM schema\",\r\n    \"attributes\" : [\r\n      {\r\n        \"name\" : \"name\",\r\n", "notes": "The JSON representation of the schema resource for \"Schema\" specifies an \"id\" attribute. It should not be listed because it is part of the common attributes from section 3.1. \r\nThe attribute characteristics listed in section 3.1 for \"id\" would override the definitions given in the schema resource anyway. Therefore, \"caseExact\" will be true, \"returned\" will be \"always\", and \"uniqueness\" will be \"server\".", "submit_date": "2025-05-16", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:33:47"}, {"errata_id": "8425", "doc-id": "RFC9606", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3, paragraph 2", "orig_text": "A DNS client can retrieve the resolver information using\r\nthe RESINFO RR  type and the QNAME of the domain name that\r\nis used to authenticate the DNS resolver (referred to as\r\nthe Authentication Domain Name (ADN) in DNR [RFC9463]).\r\n", "correct_text": "A DNS client can retrieve the resolver information using\r\nthe RESINFO RR  type and the QNAME of the domain name that\r\nis used to authenticate the DNS resolver (referred to as\r\nthe Authentication Domain Name (ADN) in DNR [RFC9463])", "notes": "The link to RFC9463 at the end of the paragraph has an Anchor of  \r\n   https://www.rfc-editor.org/rfc/rfc9606.html#RFC9463\r\nwhich just pointspback to itself, instead of to the actual RFC946 document\r\n\r\nThe correct link should IMHO be\r\n  https://www.rfc-editor.org/rfc/rfc9463\r\n\r\n(or maybe it should point to the relevant line in Section 9 References that has details of the RFCs)?\n --VERIFIER NOTES-- \nThe link points to the reference entry where the full link is provided. This convention is present throughout the RFC Series.", "submit_date": "2025-05-20", "submitter_name": "Mathias Koerber", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-05-28 14:28:02"}, {"errata_id": "8426", "doc-id": "RFC9619", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "1", "orig_text": "clarify the allowable values of the QDCODE parameter", "correct_text": "clarify the allowable values of the QDCOUNT parameter", "notes": "The name of the parameter is QDCOUNT.\r\n\r\n====Verifier note\r\n\r\nSee also https://mailarchive.ietf.org/arch/msg/dnsop/kAo0l-GOO2CsbLXRBXxIqj0y47w/", "submit_date": "2025-05-20", "submitter_name": "Yixin Sun", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-05-20 17:40:02"}, {"errata_id": "7650", "doc-id": "RFC8259", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "7", "orig_text": "string = quotation-mark *char quotation-mark\r\n\r\n      char = unescaped /\r\n          escape (\r\n              %x22 /          ; \"    quotation mark  U+0022\r\n              %x5C /          ; \\    reverse solidus U+005C\r\n              %x2F /          ; /    solidus         U+002F\r\n              %x62 /          ; b    backspace       U+0008\r\n              %x66 /          ; f    form feed       U+000C\r\n              %x6E /          ; n    line feed       U+000A\r\n              %x72 /          ; r    carriage return U+000D\r\n              %x74 /          ; t    tab             U+0009\r\n              %x75 4HEXDIG )  ; uXXXX                U+XXXX", "correct_text": "string = quotation-mark *json-char quotation-mark\r\n\r\n      json-char = unescaped /\r\n          escape (\r\n              %x22 /          ; \"    quotation mark  U+0022\r\n              %x5C /          ; \\    reverse solidus U+005C\r\n              %x2F /          ; /    solidus         U+002F\r\n              %x62 /          ; b    backspace       U+0008\r\n              %x66 /          ; f    form feed       U+000C\r\n              %x6E /          ; n    line feed       U+000A\r\n              %x72 /          ; r    carriage return U+000D\r\n              %x74 /          ; t    tab             U+0009\r\n              %x75 4HEXDIG )  ; uXXXX                U+XXXX", "notes": "RFC 5234 Section 2.1 \"Rule Naming\" notes that \"rule names are case insensitive\". It is explained that literal text strings enclosed in quotation marks are case insensitive, and have later been clarified by RFC 7405.\r\nIn RFC 5234 Appendix B, Section B.1 \"Core Rules\", the rule \"CHAR\" is already defined such that it constitutes the core of ABNF, thus no grammar can use those names regarding the previous explanation.\r\n\r\nThe goal of this errata is to propose an alternative for the \"char\" rule such that RFC 8259 can provide a valid grammar regarding the ABNF RFCs.", "submit_date": "2023-09-20", "submitter_name": "Lucas Tesson", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:39:27"}, {"errata_id": "8419", "doc-id": "RFC7643", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:ResourceType\",\r\n    \"name\" : \"ResourceType\",\r\n    \"description\" : \"Specifies the schema that describes a SCIM\r\n      resource type\",\r\n    \"attributes\" : [\r\n      {\r\n        \"name\" : \"id\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type's server unique id.\r\n          May be the same as the 'name' attribute.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n      {\r\n        \"name\" : \"name\",\r\n", "correct_text": "  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:ResourceType\",\r\n    \"name\" : \"ResourceType\",\r\n    \"description\" : \"Specifies the schema that describes a SCIM\r\n      resource type\",\r\n    \"attributes\" : [\r\n      {\r\n        \"name\" : \"name\",\r\n", "notes": "The JSON representation of the schema resource for \"ResourceType\" specifies an \"id\" attribute. It should not be listed because it is part of the common attributes from section 3.1. \r\nThe attribute characteristics listed in section 3.1 for \"id\" would override the definitions given in the schema resource anyway. Therefore, \"caseExact\" will be true, \"returned\" will be \"always\", and \"uniqueness\" will be \"server\".\r\n\r\nSection 3.1 says that for \"ResourceType\" and \"ServiceProviderConfig\" resources the common attributes do not need to be \"defined\", but they are still considered part of the base schema. This is stated explicitly in section 5 for \"ServiceProviderConfig\". All examples for \"ResourceType\" resource representations also include the attribute \"meta\" which is not defined in the schema in section 8.7.2.", "submit_date": "2025-05-16", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 21:34:20"}, {"errata_id": "8429", "doc-id": "RFC1951", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.7", "orig_text": "         A code length of 0 indicates that the corresponding symbol in\r\n         the literal/length or distance alphabet will not occur in the\r\n         block, and should not participate in the Huffman code\r\n         construction algorithm given earlier.  If only one distance\r\n         code is used, it is encoded using one bit, not zero bits; in\r\n         this case there is a single code length of one, with one unused\r\n         code.  One distance code of zero bits means that there are no\r\n         distance codes used at all (the data is all literals).", "correct_text": "         A code length of 0 indicates that the corresponding symbol in\r\n         the literal/length or distance alphabet will not occur in the\r\n         block, and should not participate in the Huffman code\r\n         construction algorithm given earlier.  If only one distance\r\n         code is used, it is encoded using one bit, not zero bits; in\r\n         this case there is a single code length of one, with one unused\r\n         code.  One distance code length of zero means that there are no\r\n         distance codes used at all (the data is all literals).", "notes": "The RFC's construction does not allow for a 0-bit Huffman code to be defined for a symbol. Therefore, \"one distance code of zero bits\" can only mean a single distance code length of 0, which does not correspond to any code.", "submit_date": "2025-05-25", "submitter_name": "Matthew House", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8423", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": " struct {\r\n      \tProtocolVersion legacy_version = 0x0303;\t/* TLS v1.2 */\r\n      \tRandom random;\r\n      \topaque legacy_session_id<0..32>;\r\n      \tCipherSuite cipher_suites<2..2^16-2>;\r\n      \topaque legacy_compression_methods<1..2^8-1>;\r\n      \tExtension extensions<8..2^16-1>;\r\n } ClientHello;", "correct_text": "struct {\r\n      \tProtocolVersion legacy_version = 0x0303;\t/* TLS v1.2 */\r\n      \tRandom random;\r\n      \topaque legacy_session_id<0..32>;\r\n      \tCipherSuite cipher_suites<2..2^16-2>;\r\n      \topaque legacy_compression_methods<1..2^8-1>;\r\n      \tExtension extensions<7..2^16-1>;\r\n} ClientHello;", "notes": "The minimum size of the ClientHello\u2019s extensions is 7 as the bytes of the SupportedVersions field are at least:\r\n- 2 bytes for the type of extension;\r\n- 2 bytes for the length of the extension;\r\n- 1 byte for the length of the following versions;\r\n- 2 bytes per version (and there is at least 1 version).\r\n\r\nThe typo is also present in the section B.3.1.\r\n\r\nThis has been fixed in 8446bis here:  https://github.com/tlswg/tls13-spec/pull/1420", "submit_date": "2025-05-19", "submitter_name": "Nizar Nadif", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 18:35:57"}, {"errata_id": "8424", "doc-id": "RFC8391", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1.3", "orig_text": "An XMSS private key SK contains 2^h WOTS+ private keys, ...", "correct_text": "An XMSS private key SK contains an algorithm OID, 2^h WOTS+ private keys, ...", "notes": "Section 4.1.3 makes no mention of an OID; however, the reference spec includes one with the following comment: \"For an implementation that uses runtime parameters, it is crucial that the OID is part of the secret key as well; i.e. not just for interoperability, but also for internal use.\" This would suggest that an OID should be included as part of the private key in Section 4.1.3.\r\n\r\n--VERIFIER NOTES--\r\nThe erratum correctly notes that Section 4.1.3 omits OID from the private key while Section 4.1.7 includes it in the public key. However, RFC authors expressed concern that adding OID would break existing implementations. Huelsing called it \"undecided\" and Gazdag said it's \"not a MUST kind of default\": https://mailarchive.ietf.org/arch/msg/cfrg/mE9Ll7bC3I5YXKw7-NgW9QGkYJo/ https://mailarchive.ietf.org/arch/msg/cfrg/ccsjAtPz_IPUO1N3BkPSyng9WOw/", "submit_date": "2025-05-19", "submitter_name": "Alex J Malozemoff", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 19:45:12"}, {"errata_id": "8638", "doc-id": "RFC8636", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.1", "orig_text": "ticket: Length =  55 bytes, Hex Representation =\r\n61353033 A0030201 05A1071B 0553552E 5345A210 300EA003 020101A1 0730051B\r\n036C6861 A311300F A0030201 12A20804 0668656A 68656A\r\n", "correct_text": "<no new text>", "notes": "This RFC was published based on draft-ietf-kitten-pkinit-alg-agility, which replaced draft-ietf-krb-wg-pkinit-alg-agility.  Versions of draft-ietf-krb-wg-pkinit-alg-agility through -04, inclusive, had a field in the OtherInfo type called 'ticket', and this is why the test vectors in section 8 still refer to 'ticket': it used to be an input to the KDF in an old version of the draft, but later it was dropped.  When the 'ticket' field of the OtherInfo type was dropped an oversight caused the 'ticket' input in section 8 not to also be dropped.", "submit_date": "2025-11-16", "submitter_name": "Nico Williams", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-11-17 16:32:06"}, {"errata_id": "8427", "doc-id": "RFC8639", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4", "orig_text": "    uses subscription-policy-modifiable {\r\n      augment \"target/stream\" {\r\n        description\r\n          \"Adds additional objects that can be modified by an RPC.\";\r\n        leaf stream {\r\n          type stream-ref {\r\n            require-instance false;\r\n          }\r\n          mandatory true;\r\n          description\r\n            \"Indicates the event stream to be considered for\r\n             this subscription.\";\r\n        }", "correct_text": "    uses subscription-policy-modifiable {\r\n      augment \"target/stream\" {\r\n        description\r\n          \"Adds additional objects that can be modified by an RPC.\";\r\n        leaf stream {\r\n          when \"/sn:streams/sn:stream\";\r\n          type stream-ref {\r\n            require-instance false;\r\n          }\r\n          mandatory true;\r\n          description\r\n            \"Indicates the event stream to be considered for\r\n             this subscription.\";\r\n        }", "notes": "The mandatory leaf \"stream\" is an augmentation on \"target/stream\".\r\n\r\nSection 7.17 of RFC7950 states that any augmentation of mandatory leaves need a \"when\" statement:\r\n   If the augmentation adds mandatory nodes (see Section 3) that\r\n   represent configuration to a target node in another module, the\r\n   augmentation MUST be made conditional with a \"when\" statement.  Care\r\n   must be taken when defining the \"when\" expression so that clients\r\n   that do not know about the augmenting module do not break.\r\n\r\nOr else, the \"mandatory\" statement needs to be removed.\r\n\r\nNo objections received from the WG to mark it for \"Held for Document Update\". In addition Andy wrote:\r\n\r\n\"I am not sure this augment-when rule from RFC 7950 really applies here.\r\nThe augmenting leaf is in the same module, and all the objects were produced as a first release.\r\nThe added when-stmt is needed if the mandatory node is added in a new release of the same module\r\nor if it is defined in a separate module.\r\n\r\nIMO this should be held for document update for clarification.\"", "submit_date": "2025-05-22", "submitter_name": "Alex Huang Feng", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-07-29 10:48:21"}, {"errata_id": "8430", "doc-id": "RFC7515", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.1.1", "orig_text": "Encoding this JWS Signature as BASE64URL(JWS Signature) gives this value:\r\n     dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk", "correct_text": "[ I don't know what the signature is. dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk is not base64url. ]", "notes": "Maybe it was the signature in ascii and needed to be converted to base4url?\n --VERIFIER NOTES-- \n   This does not appear to be broken (or incorrect).  Add == to the end for padding to allow proper decoding.", "submit_date": "2025-05-26", "submitter_name": "Panos Kampanakis", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-06-27 17:05:59"}, {"errata_id": "8431", "doc-id": "RFC9445", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "Challenge", "correct_text": "Access-Challenge", "notes": "The column header in Table 1 (Table of Attributes) says \"Challenge\", which should be Access-Challenge to reflect the name of the RADIUS message and avoid other interpretations.", "submit_date": "2025-05-26", "submitter_name": "Wenxi Wang", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-05-31 12:04:00"}, {"errata_id": "8432", "doc-id": "RFC9580", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "16.1", "orig_text": "   [SP800-56A]\r\n              NIST, \"Recommendation for Pair-Wise Key Establishment\r\n              Schemes Using Discrete Logarithm Cryptography\", NIST\r\n              Special Publication 800-56A Revision 3,\r\n              DOI 10.6028/NIST.SP.800-56Ar, April 2018,\r\n              <https://nvlpubs.nist.gov/nistpubs/SpecialPublications/\r\n              nist.sp.800-56Ar3.pdf>.", "correct_text": "   [SP800-56A]\r\n              NIST, \"Recommendation for Pair-Wise Key Establishment\r\n              Schemes Using Discrete Logarithm Cryptography\", NIST\r\n              Special Publication 800-56A Revision 3,\r\n              DOI 10.6028/NIST.SP.800-56Ar, April 2018,\r\n              <https://nvlpubs.nist.gov/nistpubs/SpecialPublications/nist.sp.800-56Ar3.pdf>.", "notes": "I noticed that Section 16.1 of RFC 9580 contains a broken link.\r\n\r\nhttps://www.rfc-editor.org/rfc/rfc9580.html#section-16.1\r\n\r\nSpecifically, this entry is broken:\r\n\r\n  [SP800-56A] NIST, \"Recommendation for Pair-Wise Key Establishment\r\n  Schemes Using Discrete Logarithm Cryptography\", NIST Special\r\n  Publication 800-56A Revision 3, DOI 10.6028/NIST.SP.800-56Ar, April\r\n  2018, <https://nvlpubs.nist.gov/nistpubs/SpecialPublications/ \r\n  nist.sp.800-56Ar3.pdf>.\r\n\r\nThe URL should be:\r\n\r\nhttps://nvlpubs.nist.gov/nistpubs/SpecialPublications/nist.sp.800-56Ar3.pdf\r\n\r\nThat is, the link contains an extra space.\r\n\r\nI've checked, and this error exists in both the HTML and the PDF\r\nversions of the document.", "submit_date": "2025-05-27", "submitter_name": "Neal Walfield", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-06-10 19:33:20"}, {"errata_id": "8433", "doc-id": "RFC8505", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5", "orig_text": "If the Registered Node is reachable over a route-over configuration \r\nfrom the Registering Node, the SLLA in the NS(ARO) is that of the Registering Node.", "correct_text": "If the Registered Node is reachable over a route-over configuration \r\nfrom the Registering Node, the SLLA in the NS(EARO) is that of the Registering Node.", "notes": "RFC8505 uses the EARO, which is an upgraded version of the ARO.", "submit_date": "2025-05-27", "submitter_name": "Adnan Rashid", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-07-01 12:14:00"}, {"errata_id": "8434", "doc-id": "RFC8489", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2.2", "orig_text": "    o has no plans to use any resources (such as a mapped address\r\n      (MAPPED-ADDRESS or XOR-MAPPED-ADDRESS) or relayed address\r\n      [RFC5766]) that were learned though STUN requests sent over that\r\n      connection,", "correct_text": "    o has no plans to use any resources (such as a mapped address\r\n      (MAPPED-ADDRESS or XOR-MAPPED-ADDRESS) or relayed address\r\n      [RFC5766]) that were learned through STUN requests sent over that\r\n      connection,", "notes": "Simple spelling correction: \"though\" should be \"through\" in the phrase \"learned though STUN requests\".", "submit_date": "2025-05-27", "submitter_name": "Jose Nicolas Frati", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-05-28 14:40:25"}, {"errata_id": "8435", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "type  The attribute's data type.  Valid values are \"string\",\r\n   \"boolean\", \"decimal\", \"integer\", \"dateTime\", \"reference\", and\r\n   \"complex\".  When an attribute is of type \"complex\", there\r\n   SHOULD be a corresponding schema attribute \"subAttributes\"\r\n   defined, listing the sub-attributes of the attribute.", "correct_text": "type  The attribute's data type.  Valid values are \"string\",\r\n   \"boolean\", \"decimal\", \"integer\", \"dateTime\", \"reference\", \r\n   \"binary\", and \"complex\".  When an attribute is of type \r\n   \"complex\", there SHOULD be a corresponding schema attribute \r\n   \"subAttributes\" defined, listing the sub-attributes of the \r\n   attribute.", "notes": "binary is missing from the possible values a attribute can have. It's documented everywhere else as a type that can be used, but not when you are explaining the actual property.", "submit_date": "2025-05-27", "submitter_name": "Philip Meholm", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-06-17 17:37:53"}, {"errata_id": "8670", "doc-id": "RFC9162", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "2.1.3.2", "orig_text": "           ii.  If LSB(fn) is not set, then right-shift both fn and sn\r\n                equally until either LSB(fn) is set or fn is 0.", "correct_text": "           ii.  If LSB(fn) is not set, then right-shift both fn and sn\r\n                equally until LSB(fn) is set.\r\n", "notes": "This even case can happen only when fn == sn > 0, which means that the shifting loop always terminates with fn odd (and hence non-zero).\r\n\r\nSuggesting that fn == 0 can happen is confusing, since in this case the preceding update of r, using a path element as *left* sibling, makes no sense. Not sure if it would be helpful to also add a comment explaining why the loop terminates.\r\n\r\nThe same correction applies to 2.1.4.2, algorithm step 6.b.iii.", "submit_date": "2025-12-04", "submitter_name": "Niels M\u00f6ller", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:11:48"}, {"errata_id": "8464", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.4", "orig_text": "obs-angle-addr  =   [CFWS] \"<\" obs-route addr-spec \">\" [CFWS]", "correct_text": "obs-angle-addr  =   [CFWS] \"<\" [obs-route] addr-spec \">\" [CFWS]", "notes": "If I understand correctly, according to RFC 822 (the RFC 5322 'obsolete syntax'), an email address enclosed in angle brackets may or may not have a prepended route. If correct, the obs-route particle of the ABNF declaration should be labeled optional in brackets [].\r\n\r\nRFC 5322 states that \r\n\"mailbox addresses were allowed to have a route portion before the addr-spec when enclosed in \"<\" and \">\"\", which suggests that they were also allowed to not have a route portion.\r\n\r\nRFC 822 Section 6.1 defines the route is optional in an angle bracketed address:\r\nroute-addr  =  \"<\" [route] addr-spec \">\"\r\n\r\nand RFC 2822 Section 4.4, where the section in question seems to be copied from, does indeed label the route portion as optional in the ABNF:\r\nobs-angle-addr  =       [CFWS] \"<\" [obs-route] addr-spec \">\" [CFWS]\n --VERIFIER NOTES-- \nFrom Pete Resnick:\r\nThis is a bit obscure, but the current text is correct. The only place\r\nthat obs-angle-addr is used in the syntax is section 3.4:\r\n\r\n    angle-addr      =   [CFWS] \"<\" addr-spec \">\" [CFWS] /\r\n                        obs-angle-addr\r\n\r\nIf you do the substitution, you get:\r\n\r\n    angle-addr      =   [CFWS] \"<\" addr-spec \">\" [CFWS] /\r\n                        [CFWS] \"<\" obs-route addr-spec \">\" [CFWS]\r\n\r\nWhat that says is that angle-addr is either without a route, or with an\r\nobs-route. Making the obs-route in there as optional would be redundant.\r\nWe could have made angle-addr this way:\r\n\r\n    angle-addr      =   [CFWS] \"<\" [obs-route] addr-spec \">\" [CFWS]\r\n\r\nbut that breaks the pattern of having an obs- replacement as a final\r\nalternative, and I think it would probably be more confusing.", "submit_date": "2025-06-17", "submitter_name": "Mason K", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 18:45:07"}, {"errata_id": "8439", "doc-id": "RFC8295", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "   The ContentInfo is a PKIData:\r\n\r\n     PKIData ::= SEQUENCE {\r\n       reqSequence        SEQUENCE SIZE(0..MAX) OF TaggedRequest\r\n       }", "correct_text": "   The ContentInfo is a PKIData:\r\n\r\n     ct-PKIData CONTENT-TYPE ::=\r\n       { PKIData IDENTIFIED BY id-cct-PKIData }\r\n\r\n     id-cct-PKIData OBJECT IDENTIFIER ::= { iso(1)\r\n       identified-organization(3) dod(6) internet(1) security(5)\r\n       mechanisms(5) pkix(7) cct(12) 2 }\r\n\r\n     PKIData ::= SEQUENCE {\r\n       reqSequence        SEQUENCE SIZE(0..MAX) OF TaggedRequest\r\n       }", "notes": "Make it clear which object identifier is associated with PIKData.", "submit_date": "2025-05-29", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-06-04 16:15:54"}, {"errata_id": "8441", "doc-id": "RFC9642", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1.3.6.", "orig_text": "   Comments:\r\n\r\n   *  The \"inline-or-keystore-end-entity-cert-with-key-grouping\"\r\n      grouping is provided solely as convenience to consuming modules\r\n      that wish to offer an option for a symmetric key that is defined\r\n      either inline or as a reference to a symmetric key in the\r\n      keystore.", "correct_text": "   Comments:\r\n\r\n   *  The \"inline-or-keystore-end-entity-cert-with-key-grouping\"\r\n      grouping is provided solely as convenience to consuming modules\r\n      that wish to offer an option for an asymmetric key and certificate\r\n      pair that is defined either inline or as a reference to an\r\n      asymmetric key and certificate in the keystore.", "notes": "The comment incorrectly describes the grouping \"inline-or-keystore-end-entity-cert-with-key-grouping\" as a reference to a symmetric key instead of an asymmetric key/certificate pair.\r\n\r\nThis probably was a result of a copy/paste of the \"inline-or-keystore-symmetric-key-grouping\" grouping comments.", "submit_date": "2025-05-30", "submitter_name": "Liam Brady", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-06-18 14:07:36"}, {"errata_id": "8437", "doc-id": "RFC7159", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "      object = begin-object [ member *( value-separator member ) ]\r\n               end-object\r\n", "correct_text": "      object = begin-object { member *( value-separator member ) }\r\n               end-object\r\n", "notes": "It seems that if this is not fixed, initialization of arrays and objects will look the same..\n --VERIFIER NOTES-- \n The corrected text given in this errata is attempting to modify ABNF with invalid ABNF. Additionally, the RFC has been obsoleted by RFC 8259.", "submit_date": "2025-05-28", "submitter_name": "Mikhail", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-05-29 19:16:02"}, {"errata_id": "8438", "doc-id": "RFC8259", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "14.1", "orig_text": "14.1.  Normative References\r\n\r\n   [ECMA-404] Ecma International, \"The JSON Data Interchange Format\",\r\n              Standard ECMA-404,\r\n              <http://www.ecma-international.org/publications/\r\n              standards/Ecma-404.htm>.", "correct_text": "14.1.  Normative References\r\n\r\n   [ECMA-404] Ecma International, \"The JSON Data Interchange Format\",\r\n              Standard ECMA-404,\r\n              <https://ecma-international.org/publications-and-standards/\r\n              standards/ecma-404/>.", "notes": "Link to ECMA-404 should be updated", "submit_date": "2025-05-28", "submitter_name": "vitya-ne", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-05-29 19:10:14"}, {"errata_id": "8442", "doc-id": "RFC3986", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1", "orig_text": "Readers familiar with regular expressions should see Appendix B for an example of a non-validating URI-reference parser that will take any given string and extract the URI components.", "correct_text": "\"any given string\" is the problem here.  You can come up with the corrected text yourself.", "notes": "The original statement is false.\n --VERIFIER NOTES-- \n The reporter has not supplied actual corrected text nor notes with sufficient explanation of the issue. This errata was discussed on the art@ietf.org list with the conclusion to reject this errata as too vague.", "submit_date": "2025-06-01", "submitter_name": "Timothy McSweeney", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-06-03 12:18:34"}, {"errata_id": "8447", "doc-id": "RFC4212", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "      OptionalAttCertValidity  ::= SEQUENCE {\r\n         notBeforeTime  GeneralizedTime  OPTIONAL,\r\n         notAfterTime   GeneralizedTime  OPTIONAL\r\n      } -- at least one must be present", "correct_text": "      OptionalAttCertValidity  ::= SEQUENCE {\r\n         notBeforeTime  [0] GeneralizedTime  OPTIONAL,\r\n         notAfterTime   [1] GeneralizedTime  OPTIONAL\r\n      } -- at least one must be present", "notes": "A SEQUENCE cannot contain two optional components with the same tag, so a tag must be provided for at least one of them.  This correction provides tags for both of the optional components.", "submit_date": "2025-06-04", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-06-08 11:50:46"}, {"errata_id": "8448", "doc-id": "RFC4212", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.1", "orig_text": "      AttCertTemplate ::= SEQUENCE {\r\n         version                 AttCertVersion            OPTIONAL,\r\n         holder                  Holder                    OPTIONAL,\r\n         issuer                  AttCertIssuer             OPTIONAL,\r\n         signature               AlgorithmIdentifier       OPTIONAL,\r\n         serialNumber            CertificateSerialNumber   OPTIONAL,\r\n         attrCertValidityPeriod  OptionalAttCertValidity   OPTIONAL,\r\n         attributes              SEQUENCE OF Attribute     OPTIONAL,\r\n         issuerUniqueID          UniqueIdentifier          OPTIONAL,\r\n         extensions              Extensions                OPTIONAL\r\n      }", "correct_text": "      AttCertTemplate ::= SEQUENCE {\r\n         version                 [0] AttCertVersion            OPTIONAL,\r\n         holder                  [1] Holder                    OPTIONAL,\r\n         issuer                  [2] AttCertIssuer             OPTIONAL,\r\n         signature               [3] AlgorithmIdentifier       OPTIONAL,\r\n         serialNumber            [4] CertificateSerialNumber   OPTIONAL,\r\n         attrCertValidityPeriod  [5] OptionalAttCertValidity   OPTIONAL,\r\n         attributes              [6] SEQUENCE OF Attribute     OPTIONAL,\r\n         issuerUniqueID          [7] UniqueIdentifier          OPTIONAL,\r\n         extensions              [8] Extensions                OPTIONAL\r\n      }", "notes": "A SEQUENCE cannot contain two optional components with the same tag, so a tag must be provided for at least one of them. This correction provides tags for both of the optional components.", "submit_date": "2025-06-04", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-06-08 11:51:15"}, {"errata_id": "8446", "doc-id": "RFC3108", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6.3.2", "orig_text": "When present, the 'silenceSupp' attribute is used to indicate the use\r\nor non-use of silence suppression.  The format of the 'silenceSupp'\r\nmedia attribute line is as follows:\r\n\r\na=silenceSupp: <silenceSuppEnable> <silenceTimer> <suppPref> <sidUse> <fxnslevel>", "correct_text": "When present, the 'silenceSupp' attribute is used to indicate the use\r\nor non-use of silence suppression.  The format of the 'silenceSupp'\r\nmedia attribute line is as follows:\r\n\r\na=silenceSupp:<silenceSuppEnable> <silenceTimer> <suppPref> <sidUse> <fxnslevel>", "notes": "There is a space after the colon in the format of the 'silenceSupp' attribute. This does not match the a=<attribute>:<value> format specified in RFC2327 (which would have been normative at the time) or the two RFCs that superceded it, or the corresponding ABNF. \r\n\r\nIt also does not match the ABNF given for the attribute itself in section 9 of the RFC (RFC3108), which is \"silenceSupp\" \":\" silenceSuppEnable space silenceTimer space suppPref space sidUse space fxnslevel / .\r\n\r\nWhile I am submitting this errata as an example of the issue for review, a considerable number of other attributes in the document also exhibit this same issue in their format definitions. If this errata is accepted I can file matching errata for all other similar errors.", "submit_date": "2025-06-03", "submitter_name": "Robert Hanton", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 18:38:37"}, {"errata_id": "8449", "doc-id": "RFC9580", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "5.11", "orig_text": "   A User ID packet consists of UTF-8 text that is intended to represent\r\n   the name and email address of the keyholder.  By convention, it\r\n   includes a mail name-addr as described in [RFC2822], but there are no\r\n   restrictions on its content.  The packet length in the header\r\n   specifies the length of the User ID.\r\n", "correct_text": "   A User ID packet consists of UTF-8 text that is intended to represent\r\n   the name and email address of the keyholder.  By convention, it\r\n   includes a mailbox as described in [RFC2822], but there are no\r\n   restrictions on its content.  The packet length in the header\r\n   specifies the length of the User ID.\r\n", "notes": "A name-addr requires angled brackets around the mail address, which in practice are left off when there is no display name.\r\n`mailbox` in rfc2822 (and 5322) is defined as `name-addr / addr-spec` so it can be either the original name-addr, or a bare address which does occur in the wild.\r\n\r\nPaul Wouters (SEC AD): Note that the corrected text also does not fully address the problem. See further https://mailarchive.ietf.org/arch/msg/openpgp/PNluQWUlkABlJ5Er4hA9P6zCADk/", "submit_date": "2025-06-05", "submitter_name": "Jasper Spaans", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-06-09 20:45:39"}, {"errata_id": "8467", "doc-id": "RFC5412", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "   The Mobile Configuration Response is used to acknowledge a previously\r\n   received Mobile Configuration Request, and includes a Result Code\r\n   message element that indicates whether an error occurred on the WTP.\r\n\r\n   This message requires no special processing and is only used to\r\n   acknowledge the Mobile Configuration Request.\r\n\r\n   The Data Transfer Request message MUST contain the message elements\r\n   described in the next subsection.", "correct_text": "   The Mobile Config Response is used to acknowledge a previously\r\n   received Mobile Config Request, and includes a Result Code\r\n   message element that indicates whether an error occurred on the WTP.\r\n\r\n   This message requires no special processing and is only used to\r\n   acknowledge the Mobile Config Request.\r\n\r\n   The Mobile Config Response message MUST contain the message element\r\n   described in the next subsection.", "notes": "Section 9.2 describes \"Mobile Config Response\", not \"Mobile Configuration Response\" (incorrect spelling) or \"Data Transfer Request\" (an entirely different message type). \"Mobile Config Response\" is an acknowledgement of \"Mobile Config Request\", not \"Mobile Configuration Request\" (incorrect spelling). The next subsection describes exactly one message element.", "submit_date": "2025-06-19", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-06-25 20:54:56"}, {"errata_id": "8671", "doc-id": "RFC8044", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.17", "orig_text": "... We note that the EVS-Data field may be of data type \"tlv\".", "correct_text": "The \"evs\" data type SHOULD contain a sequence of \"tlv\"\r\ndata types.  The interpretation of the TLV-Type and TLV-Data\r\nfields is dependent on the vendor's definition of that\r\nattribute.", "notes": "The \"vsa\" data type uses a \"SHOULD\" to recommend the \"tlv\" format.  For some reason, the \"evs\" data type does not have the same recommendation.\r\n\r\nThe corrected text copies the same recommendation from the \"vsa\" data type.", "submit_date": "2025-12-06", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8450", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.1.", "orig_text": "password\r\n      This attribute is intended to be used as a means to set, replace,\r\n      or compare (i.e., filter for equality) a password.  The cleartext\r\n      value or the hashed value of a password SHALL NOT be returnable by\r\n      a service provider.  If a service provider holds the value\r\n      locally, the value SHOULD be hashed.  When a password is set or\r\n      changed by the client, the cleartext password SHOULD be processed\r\n      by the service provider as follows:\r\n\r\n      *  Prepare the cleartext value for international language\r\n         comparison.  See Section 7.8 of [RFC7644].\r\n\r\n      *  Validate the value against server password policy.  Note: The\r\n         definition and enforcement of password policy are beyond the\r\n         scope of this document.\r\n\r\n      *  Ensure that the value is encrypted (e.g., hashed).  See\r\n         Section 9.2 for acceptable hashing and encryption handling when\r\n         storing or persisting for provisioning workflow reasons.", "correct_text": "password\r\n      This attribute is intended to be used as a means to set, replace,\r\n      or compare (i.e., filter for equality) a password.  The cleartext\r\n      value or the hashed value of a password SHALL NOT be returnable by\r\n      a service provider.  If a service provider holds the value\r\n      locally, the value SHOULD be hashed.  When a password is set or\r\n      changed by the client, the cleartext password SHOULD be processed\r\n      by the service provider as follows:\r\n\r\n      *  Prepare the cleartext value for international language\r\n         comparison.  See Section 7.8 of [RFC7644].\r\n\r\n      *  Validate the value against server password policy.  Note: The\r\n         definition and enforcement of password policy are beyond the\r\n         scope of this document.\r\n\r\n      *  Ensure that the value is hashed or encrypted.  See\r\n         Section 9.2 for acceptable hashing and encryption handling when\r\n         storing or persisting for provisioning workflow reasons.", "notes": "it was confusing that the text stated encrypted (e.g., hashed) .", "submit_date": "2025-06-05", "submitter_name": "Guillaume Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:04:22"}, {"errata_id": "8451", "doc-id": "RFC9573", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": " 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n| 0x03 or 0x43  |      8        |      ID-Type                  |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|                         ID-Value                              |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "correct_text": " 0                   1                   2                   3\r\n 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|     0x03      |     0x08      |      ID-Type                  |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n|                         ID-Value                              |\r\n+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n", "notes": "Text describes the EC as Transitive Opaque only - 0x03\r\n(Also minor change to '8' -> 0x08 resembling format in IANA's allocation table)\r\n\r\nIndeed also IANA has NOT allocated non-transitive EC subtype:\r\n\r\nhttps://www.iana.org/assignments/bgp-extended-communities/bgp-extended-communities.xhtml#trans-opaque\r\n\r\nhttps://www.iana.org/assignments/bgp-extended-communities/bgp-extended-communities.xhtml#non-trans-opaque", "submit_date": "2025-06-05", "submitter_name": "Luc Andr\u00e9 Burdet", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2025-06-10 10:54:52"}, {"errata_id": "8452", "doc-id": "RFC3108", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "9", "orig_text": "See detailed discussion below.\r\n", "correct_text": "See detailed discussion below.", "notes": "This is an extension of erratum 8446.\r\n\r\nThere seems to be a technical problem with some of the ABNF.  In\r\nsection 9, the definition of \"atm-attribute\" includes these clauses,\r\nwhich generate trailing spaces in the a-lines.  I doubt that this is\r\nintended.\r\n\r\n      \"profileDesc\" \":\" aal2-transport space profile space\r\n         1*(profile-row) /\r\n      \"vsel\" \":\" 1*(encoding-name space packet-length space\r\n                                  packet-time space) /\r\n      \"dsel\" \":\" fxIncl space\r\n                 1*(encoding-name space packet-length space\r\n                                  packet-time space) /\r\n      \"fsel\" \":\" 1*(encoding-name space packet-length space\r\n                                  packet-time space) /\r\n      \"onewaySel\" \":\" serviceType space directionFlag space\r\n                 1*(encoding-name space packet-length space\r\n                                  packet-time space) /\r\n\r\nThe clause for \"profileDesc\" refers to this definition:\r\n\r\nprofile-row  = uuiCodeRange space encoding-name space packet-length\r\n                   space packet-time space\r\n\r\nThese revisions seem to be unexceptionable:\r\n\r\n      \"profileDesc\" \":\" aal2-transport space profile\r\n         1*(profile-row) /\r\n\r\nprofile-row  = space uuiCodeRange space encoding-name space packet-length\r\n                   space packet-time\r\n\r\n      \"dsel\" \":\" fxIncl\r\n                 1*(space encoding-name space packet-length space\r\n                                  packet-time) /\r\n      \"onewaySel\" \":\" serviceType space directionFlag\r\n                 1*(space encoding-name space packet-length space\r\n                                  packet-time) /\r\n\r\nThe rules for vsel and fsel require a little more care:\r\n\r\n      \"vsel\" \":\" encoding-name space packet-length space\r\n                                  packet-time\r\n                 0*(space encoding-name space packet-length space\r\n                                  packet-time) /\r\n      \"fsel\" \":\" encoding-name space packet-length space\r\n                                  packet-time\r\n\t\t 0*(space encoding-name space packet-length space\r\n                                  packet-time) /\r\n\r\nbut perhaps we want to break out a separate nonterminal for the\r\nrepeated parts of vsel and fsel.  Indeed, \"space encoding-name space\r\npacket-length space packet-time\" appears in dsel, onewaySel, vsel, and\r\nfsel.  That would give\r\n\r\nsel-encoding = encoding-name space packet-length space packet-time\r\n\r\n      \"vsel\" \":\" sel-encoding 0*(space sel-encoding) /\r\n      \"dsel\" \":\" fxIncl 1*(space sel-encoding) /\r\n      \"fsel\" \":\" sel-encoding 0*(space sel-encoding) /\r\n      \"onewaySel\" \":\" serviceType space directionFlag\r\n                 1*(space sel-encoding) /\r\n\r\nIn addition, there are some editorial problems with the illustrations\r\nof the attributes.  In some of them, there is an extraneous space\r\nshown after the initial colon.  In others, a mandatory space between\r\nfields is not shown.  Specifically, these lines should be revised,\r\neither to remove the space shown after the colon, or to add spaces\r\nbetween fields:\r\n\r\n   a=atmQOSparms:<directionFlag><cdvType><acdv><ccdv><eetd><cmtd><aclr>\r\n\r\n      a=atmTrfcDesc:<directionFlag><clpLvl>\r\n                <pcr><scr><mbs><cdvt><mcr><mfs><fd><te>\r\n\r\n      a=abrParms:<directionFlag><nrm><trm><cdf><adtf>\r\n\r\n   a=abrSetup:<ficr><bicr><ftbe><btbe><crmrtt><frif><brif><frdf><brdf>\r\n\r\n      a=bearerType: <bearerType> <localInitiation>\r\n\r\n      a=lij: <sci><lsn>\r\n\r\n      a=anycast: <atmGroupAddress> <cdStd> <conScpTyp> <conScpSel>\r\n\r\n      a=cache:<cacheEnable><cacheTimer>\r\n\r\n      a=bearerSigIE: <bearerSigIEType> <bearerSigIELng> <bearerSigIEVal>\r\n\r\n      a=aalApp: <appClass> <oui> <appId>\r\n\r\n      a=cbrRate: <cbrRate>\r\n\r\n      a=structure: <structureEnable> <blksz>\r\n\r\n      a=cpsSDUsize:<directionFlag><cpcs>\r\n\r\n   a=aal2CPS:<cidLowerLimit><cidUpperLimit><timerCU> <simplifiedCPS>\r\n\r\n      a=aal2CPSSDUrate: <fSDUrate><bSDUrate>\r\n\r\n      a=aal2sscs3661unassured: <ted> <rastimer> <fsssar> <bsssar>\r\n\r\n      a=aal2sscs3661assured: <rastimer> <fsssar> <bsssar> <fsscopsdu>\r\n                             <bsscopsdu><fsscopuu> <bsscopuu>\r\n\r\n      a=aal2sscs3662: <sap> <circuitMode> <frameMode> <faxDemod>\r\n                      <cas> <dtmf> <mfall> <mfr1> <mfr2>\r\n                      <PCMencoding> <fmaxFrame> <bmaxFrame>\r\n\r\n      a=aal5sscop: <fsscopsdu> <bsscopsdu> <fsscopuu> <bsscopuu>\r\n\r\n   a=silenceSupp: <silenceSuppEnable> <silenceTimer> <suppPref> <sidUse>\r\n                   <fxnslevel>\r\n\r\n      a=ecan:<directionFlag><ecanEnable><ecanType>\r\n\r\n      a=gc:<directionFlag><gcEnable><gcLvl>\r\n\r\n      a=profileDesc: <aal2transport> <profile>  <uuiCodeRange#1>\r\n        <encodingName#1> <packetLength#1> <packetTime#1>\r\n        <uuiCodeRange#2> <encodingName#2> <packetLength#2>\r\n        <packetTime#2>... <uuiCodeRange#N> <encodingName#N>\r\n        <packetLength#N> <packetTime#N>\r\n\r\n      a=vsel:<encodingName #1> <packetLength #1><packetTime #1>\r\n                <encodingName #2> <packetLength #2><packetTime #2>\r\n                ...\r\n               <encodingName #N> <packetLength #N><packetTime #N>\r\n\r\n      a=dsel:<fxIncl> <encodingName #1> <packetLength #1><packetTime #1>\r\n                <encodingName #2> <packetLength #2><packetTime #2>\r\n                ...\r\n               <encodingName #N> <packetLength #N><packetTime #N>\r\n\r\n      a=fsel:<encodingName #1> <packetLength #1><packetTime #1>\r\n                <encodingName #2> <packetLength #2><packetTime #2>\r\n                ...\r\n               <encodingName #N> <packetLength #N><packetTime #N>\r\n\r\n      a=onewaySel:<serviceType> <directionFlag>\r\n                <encodingName #1> <packetLength #1><packetTime #1>\r\n                <encodingName #2> <packetLength #2><packetTime #2>\r\n                ...\r\n                <encodingName #N> <packetLength #N><packetTime #N>\r\n\r\nAnd this line has extraneous single-quotes:\r\n\r\n      a='uiLayer1_Prot':<uiLayer1Prot>", "submit_date": "2025-06-05", "submitter_name": "Dale R. Worley", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 18:42:22"}, {"errata_id": "8453", "doc-id": "RFC5322", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2.2, 3.2.4", "orig_text": "This is a bit related to erratas 3135 and 4692.\r\n\r\nThe standard says in 3.2.2\r\n\r\n   Runs of FWS, comment, or CFWS that occur between lexical tokens in a\r\n   structured header field are semantically interpreted as a single\r\n   space character.\r\n\r\nThis seems to have evaluated from RFC 822 which said\r\n\r\n     3.4.2.  WHITE SPACE\r\n\r\n        Note:  In structured field bodies, multiple linear space ASCII\r\n               characters  (namely  HTABs  and  SPACEs) are treated as\r\n               single spaces[.]\r\n\r\nRFC 822 is pretty clear that a (RFC 5322) quoted-string defined as\r\n\r\n   ((1*([FWS] qcontent) [FWS])\r\n\r\nand stating that is shall be treated \"as an atom\", in a context of\r\n\r\n   Bat  \" \\t from \\t \"  hell < b  \" \\t l \\t \"  a  @exam.ple>\r\n\r\neffectively reduces to\r\n\r\n   Bat \" from \" hell <\"b l a\">@exam.ple>\r\n\r\n(Or is that already\r\n   Bat \" from \" hell <b \" l \" a@examp.ple>\r\nor even (that not me thinks)\r\n   Bat \"from\" hell <b\"  l  \"a@exampl.ple>\r\ni struggle.)\r\n\r\nHowever, with RFC 5322 words, and with the meaning of \"atom\", it seems to me, the effective reduction would be\r\n\r\n   Bat \"  from  \" hell <b \" \\t l \\t \" a@exam.ple>\r\nor\r\n   Bat \"  from  \" hell <b \"   l   \" a@exam.ple>\r\n\r\nif HTAB reduces to SP (i think that yes, anyway).\r\n\r\nIt is not clear, and in practice everybody does its thing the one or the other way, that much is plain!\r\n(This also applies to anything \"consecutive\" btw, does this stack up in a single-pass parser, or does it require a multi-pass parser?)", "correct_text": "I have no idea.\r\nI would reintroduce the RFC 822 wording somehow, so that the result is\r\n\r\n   Bat \" from \" hell <\"b l a\"@exam.ple>", "notes": "My own parser formerly reduced to\r\n\r\n   \"Bat from hell\" <\"bla\"@exam.ple>\r\n\r\nand i changed it to\r\n\r\n   \"Bat__from__hell\" <\"b l a\"@exam.ple>\r\n \r\n(__ means twice space, thanks to this web editor, if i saw this correctly :)\r\nbecause we requote the entire thing no matter what, resulting in two adjacent space characters.\r\nI am a bit sad, but looking around it is not bad.  (To make it a rhyme.)\n --VERIFIER NOTES-- \nThis report was reviewed by both Pete Resnick and Dave Crocker, concluding that 5322 and  5322bis (at the moment in the RFC editor's queue) addresses the matter of this report: whitespace in the local-part is in the so-called \"obsolete\" syntax in 5322 because it's not clear what a parser is meant to do in the scenario presented in this report.", "submit_date": "2025-06-06", "submitter_name": "Steffen Nurpmeso", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-07 12:54:30"}, {"errata_id": "8454", "doc-id": "RFC9580", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.2.3", "orig_text": "One or more MPIs comprising the signature. This portion is\r\nalgorithm specific.", "correct_text": "One or more MPIs comprising the signature, or plain octets with no\r\nMPI header. This portion is algorithm specific.", "notes": "The final bullet point of 5.2.3 is not, strictly speaking, correct. Ed25519 and Ed448 have signatures that are not MPIs but rather \"native\" octet strings. These algorithms do not have \"one or more MPIs\" - they have zero MPIs and only the octet string (of length 64 or 114). Prior to the introduction of these algorithms that statement was correct - every other signature algorithm uses MPI(s).", "submit_date": "2025-06-07", "submitter_name": "Tim Geiser", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-06-13 13:26:20"}, {"errata_id": "8455", "doc-id": "RFC7990", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "[RFC7992]  Hildebrand, J., Ed. and P. Hoffman, \"HTML Format for\r\n           RFCs\", RFC 7992, DOI 10.17487/RFC7992, December 2016,\r\n           <http://www.rfc-editor.org/info/rfc792>.", "correct_text": "[RFC7992]  Hildebrand, J., Ed. and P. Hoffman, \"HTML Format for\r\n           RFCs\", RFC 7992, DOI 10.17487/RFC7992, December 2016,\r\n           <http://www.rfc-editor.org/info/rfc7992>.", "notes": "The link for RFC 7992 is linked to RFC 792.", "submit_date": "2025-06-11", "submitter_name": "Robert Sayre", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-06-17 20:34:42"}, {"errata_id": "7673", "doc-id": "RFC8259", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "7", "orig_text": "The representation of strings is similar to conventions used in the C family\r\nof programming languages.  A string begins and ends with quotation marks. All\r\nUnicode characters may be placed within the quotation marks, except for the\r\ncharacters that MUST be escaped: quotation mark, reverse solidus, and the\r\ncontrol characters (U+0000 through U+001F).", "correct_text": "The representation of strings is similar to conventions used in the C family\r\nof programming languages.  A string begins and ends with quotation marks.  All\r\nUnicode characters may be placed within the quotation marks, except for the\r\ncharacters that MUST be escaped: quotation mark, reverse solidus, and the\r\ncontrol characters (U+0000 through U+001F, U+007F, and U+0080 through\r\nU+009F).", "notes": "There are 33 7-bit control characters, but the JSON RFC only listed 32 by\r\nomitting the inclusion of the last control character in the 7-bit ASCII range,\r\n'del.'  However, JSON is not limited to 7-bit ASCII; it is Unicode.  Unicode\r\nencompasses 65 control characters from U+0080 to U+009F, totaling an additional\r\n32 characters.  The section that currently reads \"U+0000 through U+001F\" should\r\ninclude these additional control characters reading as \"U+0000 through U+001F,\r\nU+007F, and U+0080 through U+009F\"", "submit_date": "2023-10-11", "submitter_name": "Zachary Collier (Zamicol)", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:39:56"}, {"errata_id": "8459", "doc-id": "RFC9110", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "15", "orig_text": "The status code of a response is a three-digit integer code that \r\ndescribes the result of the request and the semantics of the \r\nresponse, including whether the request was successful and what \r\ncontent is enclosed (if any). All valid status codes are within \r\nthe range of 100 to 599, inclusive.", "correct_text": "The status code of a response is a three-digit integer code that \r\ndescribes the result of the request and the semantics of the \r\nresponse, including whether the request was successful and what \r\ncontent is enclosed (if any). All valid status codes are within \r\nthe range of 100 to 999, inclusive.", "notes": "In the initial RFC 7231 which was obsoleted by this one, we had simple definition of a status code which was used to build http servers, clients and libraries that are being used now \"The status-code element is a three-digit integer code giving the result of the attempt to understand and satisfy the request.\".\r\n\r\nA lot of old systems are based on RFC 7231 and are using status codes that are in rage of 600 - 999. Those codes are mainly used to describe errors that aren't covered in previous status codes.\r\n\r\nFor example we have payment system that can return e.g. \"677 Invalid card number\" and no body. Now we'd probably return \"400 Bad request\" with e.g. json body in which we have error message.\r\n\r\nThis RFC should be backward compatible, and not to define breaking changes. If breaking changes are defined, it should be promoted more and talked about it between the community, give developers of old systems a time to align with new RFC, etc.\r\n\r\nDue to all of this, I'm suggesting that we omit all parts in this section that are limiting status codes to be only in range from 100 to 599, and update it accordingly so it support status codes from 100 to 999.\n --VERIFIER NOTES-- \nSection 6 of RFC 7231 also says \"There are five values for the first digit\" and lists 1xx through 5xx. Going further back, RFC 2616 contains identical language in Section 6.1.1; RFC 2068 contains identical language in its Section 6.1.1. This is not only not a recent change, it's not a change at all. This is the way HTTP has operated for decades, the reporter's noncompliant systems notwithstanding.", "submit_date": "2025-06-13", "submitter_name": "Bosko Stupar", "verifier_id": "", "verifier_name": "Mike Bishop (WIT AD)", "update_date": "2025-06-13 18:04:51"}, {"errata_id": "8460", "doc-id": "RFC5412", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.4", "orig_text": "7.4.11.  Add Static Blacklist Entry\r\n[...]\r\nType:   70 for Delete Blacklist Entry\r\n[...]\r\n7.4.12.  Delete Static Blacklist Entry\r\n[...]\r\nType:   71 for Delete Blacklist Entry", "correct_text": "7.4.11.  Add Static Blacklist Entry\r\n[...]\r\nType:   70 for Add Static Blacklist Entry\r\n[...]\r\n7.4.12.  Delete Static Blacklist Entry\r\n[...]\r\nType:   71 for Delete Static Blacklist Entry", "notes": "The message element numbers do not immediately look incorrect, but the names clearly have been repeated with no change from Section 7.4.10.", "submit_date": "2025-06-13", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-07-10 15:14:26"}, {"errata_id": "8461", "doc-id": "RFC8984", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.2.6", "orig_text": " +--------------------+-----------------+----------------+-----------+\r\n |offsetFrom          |UTCDateTime      |TimeZoneRule    |Section    |\r\n |                    |                 |                |4.7.2      |\r\n +--------------------+-----------------+----------------+-----------+\r\n |offsetTo            |UTCDateTime      |TimeZoneRule    |Section    |\r\n |                    |                 |                |4.7.2      |\r\n +--------------------+-----------------+----------------+-----------+", "correct_text": " +--------------------+-----------------+----------------+-----------+\r\n |offsetFrom          |String           |TimeZoneRule    |Section    |\r\n |                    |                 |                |4.7.2      |\r\n +--------------------+-----------------+----------------+-----------+\r\n |offsetTo            |String           |TimeZoneRule    |Section    |\r\n |                    |                 |                |4.7.2      |\r\n +--------------------+-----------------+----------------+-----------+", "notes": "In the table in Section 8.2.6, the property type of both the 'offsetFrom' and 'offsetTo' properties should be String. The current property type UTCDateTime is inconsistent with both the explanations in Section 4.7.2 and iCalendar (RFC 5545), which defined 'TZOFFSETFROM' and 'TZOFFSETTO', the templates of 'offsetFrom' and 'offsetTo' as UTC offset Strings, not as instants of time.", "submit_date": "2025-06-14", "submitter_name": "Lennart Stallmann", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8462", "doc-id": "RFC7852", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "<svc:ServiceType>VOIP</svc:ServiceType>", "correct_text": "<svc:ServiceType>OTT</svc:ServiceType>", "notes": "The value \"VOIP\" is not registered. The value \"OTT\" seems appropriate for VoIP providers.", "submit_date": "2025-06-16", "submitter_name": "Randall Gellens", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-06-18 15:52:38"}, {"errata_id": "8463", "doc-id": "RFC9793", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   When BFR2 receives the route, it calculates its BIFT entries.\r\n   Because the route from BFER1 does not include a BIER Nexthop, BFR2\r\n   uses BFR1's BFR-prefix as the next hop.", "correct_text": "   When BFR2 receives the route, it calculates its BIFT entries.\r\n   Because the route from BFER1 does not include a BIER Nexthop, BFR2\r\n   uses BFER1's BFR-prefix as the next hop.", "notes": "The original text mistakenly says \"BFR1's BFR-prefix\". Given that the route is explicitly stated to be \"from BFER1\", the next hop should logically be \"BFER1's BFR-prefix\". This correction ensures consistency and technical accuracy in describing how BFR2 determines the next hop.", "submit_date": "2025-06-17", "submitter_name": "Haibo Wang", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-06-19 11:49:11"}, {"errata_id": "8465", "doc-id": "RFC9580", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.5.3", "orig_text": "A point on an elliptic curve will always be represented on the wire\r\nas an MPI.", "correct_text": "TBD", "notes": "This and the following paragraphs don't mention the case of \"native\" secret key representations. The text should acknowledge the existence of MPIs as well as natively encoded points.", "submit_date": "2025-06-18", "submitter_name": "Heiko Schaefer", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-06-18 17:14:33"}, {"errata_id": "8484", "doc-id": "RFC8505", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "9.1", "orig_text": "                +-------------+--------------+------------+\r\n                |  ARO Status | Description  | Reference  |\r\n                +-------------+--------------+------------+\r\n                |     0-5     | Unassigned   |            |\r\n                |             |              |            |\r\n                |      6      | R Flag       | RFC 8505   |\r\n                |             |              |            |\r\n                |      7      | T Flag       | RFC 8505   |\r\n                +-------------+--------------+------------+\r\n\r\n              Table 2: New Address Registration Option Flags", "correct_text": "                +-------------+--------------+------------+\r\n                |  Bit number | Description  | Reference  |\r\n                +-------------+--------------+------------+\r\n                |     0-3     | Unassigned   |            |\r\n                |             |              |            |\r\n                |     4-5     |\tI Field      | RFC 8505   |\r\n                |             |              |            | \r\n                |      6      | R Flag       | RFC 8505   |\r\n                |             |              |            |\r\n                |      7      | T Flag       | RFC 8505   |\r\n                +-------------+--------------+------------+\r\n\r\n              Table 2: New Address Registration Option Flags", "notes": "Table 2 must use 'ARO Flags' or 'ARO Flags Field' instead of 'ARO Status,' avoiding conflict with the Status field. Additionally, the 2-bit I-Field (bits 4 and 5) defined in Section 4 is missing, making bits 0-3 unassigned instead of 0-5.\r\n\r\n---- Verifier's notes ----\r\nThe table should have the same headings as the IANA registry https://www.iana.org/assignments/icmpv6-parameters/icmpv6-parameters.xhtml#icmpv6-adress-registration-option-flags (i.e., 'bit number').", "submit_date": "2025-06-26", "submitter_name": "Adnan Rashid", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 06:22:49"}, {"errata_id": "8485", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.2.1", "orig_text": "Numeric Replies:\r\n\r\n           ERR_NEEDMOREPARAMS              ERR_BANNEDFROMCHAN\r\n           ERR_INVITEONLYCHAN              ERR_BADCHANNELKEY\r\n           ERR_CHANNELISFULL               ERR_BADCHANMASK\r\n           ERR_NOSUCHCHANNEL               ERR_TOOMANYCHANNELS\r\n           ERR_TOOMANYTARGETS              ERR_UNAVAILRESOURCE\r\n           RPL_TOPIC", "correct_text": "Numeric Replies:\r\n\r\n           ERR_NEEDMOREPARAMS              ERR_BANNEDFROMCHAN\r\n           ERR_INVITEONLYCHAN              ERR_BADCHANNELKEY\r\n           ERR_CHANNELISFULL               ERR_BADCHANMASK\r\n           ERR_NOSUCHCHANNEL               ERR_TOOMANYCHANNELS\r\n           ERR_TOOMANYTARGETS              ERR_UNAVAILRESOURCE\r\n           RPL_TOPIC                       RPL_NAMREPLY", "notes": "Numeric reply list for the JOIN message should include RPL_NAMREPLY as it is stated by Section 3.2.1 : \"If a JOIN is successful, the user receives a JOIN message as confirmation and is then sent the channel's topic (using RPL_TOPIC) and the list of users who are on the channel (using RPL_NAMREPLY), which MUST include the user joining.\"", "submit_date": "2025-06-27", "submitter_name": "Ildiko Cseri", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-07-29 14:46:03"}, {"errata_id": "8471", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"groups\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of groups to which the user belongs,\r\neither through direct membership, through nested groups, or\r\ndynamically calculated.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The identifier of the User's group.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"$ref\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\r\n              \"User\",\r\n              \"Group\"\r\n            ],", "correct_text": "      {\r\n        \"name\" : \"groups\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of groups to which the user belongs,\r\neither through direct membership, through nested groups, or\r\ndynamically calculated.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The identifier of the User's group.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },\r\n          {\r\n            \"name\" : \"$ref\",\r\n            \"type\" : \"reference\",\r\n            \"referenceTypes\" : [\r\n              \"Group\"\r\n            ],", "notes": "The 'groups.$ref' sub-attribute of the core User schema should not contain \"User\" in its referenceTypes. According to section 4.1.2 it is \"A list of groups to which the user belongs\".", "submit_date": "2025-06-20", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:10:23"}, {"errata_id": "8541", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2.7", "orig_text": "   The AC List message element is used to configure a WTP with the\r\n   latest list of ACs in a cluster.  This message element MUST be\r\n   included if the Join Response returns a failure indicating that the\r\n   AC cannot handle the WTP at this time, allowing the WTP to find an\r\n   alternate AC to which to connect.\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       AC IP Address[]                         |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       AC IP Address[]                         |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       AC IP Address[]                         |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       AC IP Address[]                         |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   141 for AC List\r\n\r\n   Length:   >= 4\r\n\r\n   AC IP Address:   An array of 32-bit integers containing an AC's IPv6\r\n      Address.\r\n", "correct_text": "   The AC IPv6 List message element is used to configure a WTP with the\r\n   latest list of ACs in a cluster.  This message element MUST be\r\n   included if the Join Response returns a failure indicating that the\r\n   AC cannot handle the WTP at this time, allowing the WTP to find an\r\n   alternate AC to which to connect.\r\n\r\n       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       AC IP Address...                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       AC IP Address...                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       AC IP Address...                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                       AC IP Address[]                         |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   141 for AC IPv6 List\r\n\r\n   Length:   >= 16\r\n\r\n   AC IP Address:   An array of IPv6 addresses for the ACs.\r\n", "notes": "The message element diagram specifies a multiple of 16 octets. IP Address is one array of IPv6 addresses rather than four arrays of IPv4 addresses. The name of the message element is \"AC IPv6 List\".", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8542", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.2.3", "orig_text": "   Length:   5\r\n", "correct_text": "   Length:   >= 2\r\n", "notes": "The message element diagram specifies a variable length. Assuming the minimum length of the AC Name field is 1, the minimum length of the message element is 2.", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8543", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.1.2", "orig_text": "   Length:   >= 5\r\n", "correct_text": "   Length:   >= 3\r\n", "notes": "The message element diagram and the description indicate that in some cases the Image Data field may be absent from the Image Data message element, in which case the minimum length of the data element is 3.", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8508", "doc-id": "RFC7515", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Sec 2, Appendix C", "orig_text": "2.  Terminology\r\n\r\n   These terms are defined by this specification:\r\n\r\n   Base64url Encoding\r\n      Base64 encoding using the URL- and filename-safe character set\r\n      defined in Section 5 of RFC 4648 [RFC4648], with all trailing '='\r\n      characters omitted (as permitted by Section 3.2) and without the\r\n      inclusion of any line breaks, whitespace, or other additional\r\n      characters.  Note that the base64url encoding of the empty octet\r\n      sequence is the empty string.  (See Appendix C for notes on\r\n      implementing base64url encoding without padding.)\r\n\r\n\r\nAppendix C.  Notes on Implementing base64url Encoding without Padding\r\n\r\n   This appendix describes how to implement base64url encoding and\r\n   decoding functions without padding based upon standard base64\r\n   encoding and decoding functions that do use padding.\r\n\r\n   To be concrete, example C# code implementing these functions is shown\r\n   below.  Similar code could be used in other languages.\r\n\r\n   ...\r\n\r\n     static byte [] base64urldecode(string arg)\r\n     {\r\n       string s = arg;\r\n       s = s.Replace('-', '+'); // 62nd char of encoding\r\n       s = s.Replace('_', '/'); // 63rd char of encoding\r\n       switch (s.Length % 4) // Pad with trailing '='s\r\n       {\r\n         case 0: break; // No pad chars in this case\r\n         case 2: s += \"==\"; break; // Two pad chars\r\n         case 3: s += \"=\"; break; // One pad char\r\n         default: throw new System.Exception(\r\n           \"Illegal base64url string!\");\r\n       }\r\n       return Convert.FromBase64String(s); // Standard base64 decoder\r\n     }\r\n\r\n   As per the example code above, the number of '=' padding characters\r\n   that needs to be added to the end of a base64url-encoded string\r\n   without padding to turn it into one with padding is a deterministic\r\n   function of the length of the encoded string.  Specifically, if the\r\n   length mod 4 is 0, no padding is added; if the length mod 4 is 2, two\r\n   '=' padding characters are added; if the length mod 4 is 3, one '='\r\n   padding character is added; if the length mod 4 is 1, the input is\r\n   malformed.", "correct_text": "2.  Terminology\r\n\r\n   These terms are defined by this specification:\r\n\r\n   Base64url Encoding\r\n      Base64 encoding using the URL- and filename-safe character set\r\n      defined in Section 5 of RFC 4648 [RFC4648], all trailing '='\r\n      characters SHOULD be omitted (as permitted by Section 3.2) and\r\n      any line breaks, whitespace, or other additional characters SHALL\r\n      be excluded.  Note that the base64url encoding of the empty octet\r\n      sequence is the empty string.  (See Appendix C for notes on\r\n      implementing base64url encoding without padding.)\r\n\r\n\r\nAppendix C.  Notes on Implementing base64url Encoding without Padding\r\n\r\n      ...\r\n\r\n      NOTE: The decoding function allows padded input, which is not recommended.", "notes": "The definition for Base64url is more strict than RFC4648, but doesn't qualify that with keyword from RFC 2119.  The corrected text uses RFC 2119 keywords to be more specific and consistent.  I do propose allowing but discouraging extraneous padding, which is currently ambiguous.  An alternate solution would be using SHALL be omitted in the definition and either adding a note in appendix C or a conditional to throw an exception for non-compliant input.\n --VERIFIER NOTES-- \nThe term definition clearly says what \u201cBase64url Encoding\u201d means in this specification.\r\nAmong other things, it meaning of that term includes the detail \"with all trailing '=' characters omitted\u201d \u2014 unconditionally so.\r\n\r\nThe proposed replacement text would replace this clear definition with a \u201cSHOULD\u201d, which is incorrect \u2014 there is no circumstance in which a \u201c=\u201c is permitted in RFC 7515 \u201cBase64url Encoding\u201d.\r\n\r\nThe proposed change would be a deviation from the WG intent.", "submit_date": "2025-07-11", "submitter_name": "Ryan Desmond", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:17:16"}, {"errata_id": "8487", "doc-id": "RFC1533", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.18", "orig_text": "3.18. Swap Server\r\n\r\n   This specifies the IP address of the client's swap server.\r\n\r\n   The code for this option is 16 and its length is 4.\r\n\r\n    Code   Len    Swap Server Address\r\n   +-----+-----+-----+-----+-----+-----+\r\n   |  16 |  n  |  a1 |  a2 |  a3 |  a4 |\r\n   +-----+-----+-----+-----+-----+-----+", "correct_text": "3.18. Swap Server\r\n\r\n   This specifies the IP address of the client's swap server.\r\n\r\n   The code for this option is 16 and its length is 4.\r\n\r\n    Code   Len    Swap Server Address\r\n   +-----+-----+-----+-----+-----+-----+\r\n   |  16 |  4  |  a1 |  a2 |  a3 |  a4 |\r\n   +-----+-----+-----+-----+-----+-----+", "notes": "The length is static, not dynamic. The length in the diagram  should be 4, not n.\n --VERIFIER NOTES-- \n   This errata is a duplicate of errata 8488", "submit_date": "2025-06-13", "submitter_name": "Jason Giberson", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 07:50:35"}, {"errata_id": "8470", "doc-id": "RFC7642", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"x509Certificates\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of certificates issued to the User.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"binary\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The value of an X.509 certificate.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\",\r\n            \"uniqueness\" : \"none\"\r\n          },", "correct_text": "      {\r\n        \"name\" : \"x509Certificates\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A list of certificates issued to the User.\",\r\n        \"required\" : false,\r\n        \"caseExact\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"binary\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The value of an X.509 certificate.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : true,\r\n            \"mutability\" : \"readWrite\",\r\n            \"returned\" : \"default\"\r\n          },", "notes": "Section 2.3.6 indicates that \"binary [...] has no uniqueness.\" The \"x509Certificates\" binary \"value\" subattribute currently lists a \"uniqueness\" property which should be removed. (See also Errata ID: 6000 - Binary attributes are case-exact)", "submit_date": "2025-06-20", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:33:27"}, {"errata_id": "8490", "doc-id": "RFC5958", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "   --  [[2: publicKey       [1] BIT STRING (CONTAINING\r\n   --                             PUBLIC-KEY.&Params({PublicKeySet}\r\n   --                             {@privateKeyAlgorithm.algorithm})\r\n   --                             OPTIONAL,", "correct_text": "   --  [[2: publicKey       [1] BIT STRING (CONTAINING\r\n   --                             PUBLIC-KEY.&Params({PublicKeySet}\r\n   --                             {@privateKeyAlgorithm.algorithm}))\r\n   --                             OPTIONAL ]],", "notes": "The ASN.1 exhibit in Appendix A is missing a closing \"]]\" for the version.", "submit_date": "2025-06-27", "submitter_name": "Sean Turner", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-06-27 16:43:29"}, {"errata_id": "8491", "doc-id": "RFC6455", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.1", "orig_text": "   is exactly equivalent to\r\n\r\n         Sec-WebSocket-Extensions: foo, bar; baz=2", "correct_text": "   is exactly equivalent to\r\n\r\n         Sec-WebSocket-Extensions: foo; bar; baz=2", "notes": "Should be semicolon-separated\n --VERIFIER NOTES-- \nRFC 6455 defines this field in Section 9.1 as:\r\n\r\n         extension-list = 1#extension\r\n         extension = extension-token *( \";\" extension-param )\r\n\r\nWhile the reporter is noting the \";\" between extension-token and extension-param, the separator between two extension elements is found in the definition of \"#\" from RFC 2616:\r\n\r\n   #rule\r\n      A construct \"#\" is defined, similar to \"*\", for defining lists of\r\n      elements. The full form is \"<n>#<m>element\" indicating at least\r\n      <n> and at most <m> elements, each separated by one or more commas\r\n      (\",\") and OPTIONAL linear white space (LWS). This makes the usual\r\n      form of lists very easy; a rule such as\r\n         ( *LWS element *( *LWS \",\" *LWS element ))\r\n\r\nThus, as is typical in HTTP fields other than Cookie, the delimiter between outermost elements is \",\" and \";\" is an internal separator within an element.", "submit_date": "2025-06-28", "submitter_name": "YuSheng Chen", "verifier_id": "", "verifier_name": "Mike Bishop (WIT AD)", "update_date": "2025-07-19 08:36:48"}, {"errata_id": "8497", "doc-id": "RFC6919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3", "orig_text": "   For example: \"This command really should not be used\" [RFC0493]", "correct_text": "   For example: \"This command REALLY SHOULD NOT be used\" [RFC0493]", "notes": "Similar to the logic in RFC8174, all the the examples SHOULD use all capitals\n --VERIFIER NOTES-- \n   Thanks for the report.  The examples quote actual RFCs.  Maybe the wording should have been thought about at the time.", "submit_date": "2025-07-03", "submitter_name": "Josh McKinney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-04 09:59:08"}, {"errata_id": "8472", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.7.1", "orig_text": "      {\r\n        \"name\" : \"manager\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The User's manager.  A complex type that\r\noptionally allows service providers to represent organizational\r\nhierarchy by referencing the 'id' attribute of another User.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The id of the SCIM resource representing\r\nthe User's manager.  REQUIRED.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : false,", "correct_text": "      {\r\n        \"name\" : \"manager\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The User's manager.  A complex type that\r\noptionally allows service providers to represent organizational\r\nhierarchy by referencing the 'id' attribute of another User.\",\r\n        \"required\" : false,\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"value\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"The id of the SCIM resource representing\r\nthe User's manager.  REQUIRED.\",\r\n            \"required\" : false,\r\n            \"caseExact\" : true,", "notes": "In the Enterprise User, the sub-attribute \"value\" of the attribute \"manager\" is defined as 'The \"id\" of the SCIM resource representing the user's manager.' (section 4.3). The \"id\" is case-exact (section 3.1). Therefore, \"manager.value\" must also be case-exact.", "submit_date": "2025-06-20", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:11:11"}, {"errata_id": "8473", "doc-id": "RFC5412", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.5", "orig_text": "When an AC receives a WTP Event Request, it will respond with a WTP\r\nEvent Request.\r\n", "correct_text": "When an AC receives a WTP Event Request, it will respond with a WTP\r\nEvent Response.\r\n", "notes": "This statement tries to rephrase what the immediately following Section 8.6 says. The second instance of \"Request\" in the original text should be \"Response\".", "submit_date": "2025-06-20", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-06-25 20:48:33"}, {"errata_id": "5210", "doc-id": "RFC8259", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Internet Engineering Task Force (IETF)                      T. Bray, Ed.\r\nRequest for Comments: 8259                                    Textuality\r\nObsoletes: 7159                                            December 2017\r\nCategory: Standards Track\r\nISSN: 2070-1721", "correct_text": "Internet Engineering Task Force (IETF)                      T. Bray, Ed.\r\nRequest for Comments: 8259                                    Textuality\r\nSTD: 90                                                    December 2017\r\nObsoletes: 7159\r\nCategory: Standards Track\r\nISSN: 2070-1721", "notes": "Missing \"STD\" entry in boilerplate.", "submit_date": "2017-12-16", "submitter_name": "Julian Reschke", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:40:19"}, {"errata_id": "8474", "doc-id": "RFC9136", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1", "orig_text": "   An example of inter-subnet forwarding between subnet SN1, which uses\r\n   a 24-bit IP prefix (written as SN1/24 in the future), and a subnet\r\n   sitting in the WAN is described below.  NVE2, NVE3, DGW1, and DGW2\r\n   are running BGP EVPN.  TS2 and TS3 do not participate in dynamic\r\n   routing protocols, and they only have a static route to forward the\r\n   traffic to the WAN.  SN1/24 is dual-homed to NVE2 and NVE3.", "correct_text": "   An example of inter-subnet forwarding between subnet SN1, which uses\r\n   a 24-bit IP prefix (hereafter referred to as SN1/24), and a subnet\r\n   sitting in the WAN is described below.  NVE2, NVE3, DGW1, and DGW2\r\n   are running BGP EVPN.  TS2 and TS3 do not participate in dynamic\r\n   routing protocols, and they only have a static route to forward the\r\n   traffic to the WAN.  SN1/24 is dual-homed to NVE2 and NVE3.", "notes": "In the original text, the phrase:\r\n\r\n\"(written as SN1/24 in the future)\"\r\n\r\nmay be misinterpreted. The intended meaning is that the notation SN1/24, referring to subnet SN1 with a 24-bit IP prefix, will be used throughout the remainder of the document for brevity. However, the wording could be ambiguously perceived as either (a) suggesting that this notation will be adopted in future revisions or drafts, or (b) implying a forward-looking change in nomenclature.", "submit_date": "2025-06-20", "submitter_name": "Zhaohui (Jeffrey) Zhang", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2025-07-07 09:36:04"}, {"errata_id": "8475", "doc-id": "RFC7643", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "Section 6.  ResourceType Schema\r\n\r\n   name\r\n      The resource type name.  When applicable, service providers MUST\r\n      specify the name, e.g., \"User\" or \"Group\".  This name is\r\n      referenced by the \"meta.resourceType\" attribute in all resources.\r\n      REQUIRED.\r\n\r\n...\r\n\r\n   endpoint\r\n      The resource type's HTTP-addressable endpoint relative to the Base\r\n      URL of the service provider, e.g., \"Users\".  REQUIRED.\r\n\r\n---\r\n\r\nSection 8.7.2.  Service Provider Schema Representation\r\n\r\n  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:ResourceType\",\r\n    \"name\" : \"ResourceType\",\r\n    \"description\" : \"Specifies the schema that describes a SCIM\r\n      resource type\",\r\n    \"attributes\" : [\r\n...\r\n      {\r\n        \"name\" : \"name\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type name.  When applicable,\r\n          service providers MUST specify the name, e.g., 'User'.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },\r\n...\r\n      {\r\n        \"name\" : \"endpoint\",\r\n        \"type\" : \"reference\",\r\n        \"referenceTypes\" : [\"uri\"],\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type's HTTP-addressable\r\n          endpoint relative to the Base URL, e.g., '/Users'.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : false,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"none\"\r\n      },", "correct_text": "Section 6.  ResourceType Schema\r\n\r\n   name\r\n      The resource type name.  When applicable, service providers MUST\r\n      specify the name, e.g., \"User\" or \"Group\".  This name is\r\n      referenced by the \"meta.resourceType\" attribute in all resources.\r\n      This attribute has a \"uniqueness\" of \"server\" and is case-exact.\r\n      REQUIRED\r\n\r\n...\r\n\r\n   endpoint\r\n      The resource type's HTTP-addressable endpoint relative to the Base\r\n      URL of the service provider, e.g., \"Users\".  This attribute has a\r\n      \"uniqueness\" of \"server\" and is case-exact.  REQUIRED\r\n\r\n---\r\n\r\nSection 8.7.2.  Service Provider Schema Representation\r\n\r\n  {\r\n    \"id\" : \"urn:ietf:params:scim:schemas:core:2.0:ResourceType\",\r\n    \"name\" : \"ResourceType\",\r\n    \"description\" : \"Specifies the schema that describes a SCIM\r\n      resource type\",\r\n    \"attributes\" : [\r\n      {\r\n        \"name\" : \"name\",\r\n        \"type\" : \"string\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type name.  Service providers MUST\r\n          specify the name, e.g., \"User\" or \"Group\".\",\r\n        \"required\" : true,\r\n        \"caseExact\" : true,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"server\"\r\n      },\r\n...\r\n      {\r\n        \"name\" : \"endpoint\",\r\n        \"type\" : \"reference\",\r\n        \"referenceTypes\" : [\"uri\"],\r\n        \"multiValued\" : false,\r\n        \"description\" : \"The resource type's HTTP-addressable\r\n          endpoint relative to the Base URL, e.g., '/Users'.\",\r\n        \"required\" : true,\r\n        \"caseExact\" : true,\r\n        \"mutability\" : \"readOnly\",\r\n        \"returned\" : \"default\",\r\n        \"uniqueness\" : \"server\"\r\n      },", "notes": "The attributes \"name\" and \"endpoint\" in the ResourceType schema must have a \"uniqueness\" of \"server\" and be case-exact.\r\n\r\nCase-exact:\r\nThe attributes \"name\" and \"endpoint\" are both used in references (e.g. \"{base-url}/ResourceTypes/{name}\" and \"{base-url}/{endpoint}/{id}\"). References are defined as case-exact in section 2.3.7. Therefore, both attributes must also be case-exact.\r\nThis should also be reflected in section 8.7.2\r\n\r\nUniqueness:\r\nFor the uniqueness of \"name\" see Errata ID: 8362.\r\nFor \"endpoint\" the change makes it explicit that each endpoint should provide exactly one type of resource. I do not see any point in RFC 7644 or RFC 7643 that currently forbids using the same endpoint for several resource types, but this would not work when creating resources. Clients cannot specify which resource type they want to create; they can only specify the endpoint and schema.\r\nThis should also be reflected in section 8.7.2 (see Errata ID: 8366)", "submit_date": "2025-06-20", "submitter_name": "Matthias Winter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:11:53"}, {"errata_id": "8476", "doc-id": "RFC5730", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.9.2.3.", "orig_text": "   An \"op\" attribute (with value\r\n   \"ack\") and a \"msgID\" attribute (whose value corresponds to the value\r\n   of the \"id\" attribute copied from the <msg> element in the message\r\n   being acknowledged) are REQUIRED to acknowledge receipt of a message.", "correct_text": "   An \"op\" attribute (with value\r\n   \"ack\") and a \"msgID\" attribute (whose value corresponds to the value\r\n   of the \"id\" attribute copied from the <msgQ> element in the message\r\n   being acknowledged) are REQUIRED to acknowledge receipt of a message.", "notes": "\"msgQ\" contains the \"id\" - \"msg\" is just the human-readable message.", "submit_date": "2025-06-23", "submitter_name": "Rafael Gallani", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8498", "doc-id": "RFC6919", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5", "orig_text": "   For example: \"A SMTP client would probably only want to authenticate\r\n   an SMTP server whose server certificate has a domain name that is the\r\n   domain name that the client thought it was connecting to.\"  [RFC3207]", "correct_text": "   For example: \"A SMTP client WOULD PROBABLY only want to authenticate\r\n   an SMTP server whose server certificate has a domain name that is the\r\n   domain name that the client thought it was connecting to.\"  [RFC3207]", "notes": "Similar to the logic in RFC8174, all the the examples SHOULD use all capitals\n --VERIFIER NOTES-- \n Thanks for the report.  The examples quote actual RFCs.  Maybe the wording should have been thought about at the time.", "submit_date": "2025-07-03", "submitter_name": "Josh McKinney", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-04 09:59:34"}, {"errata_id": "8477", "doc-id": "RFC9426", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   function DegreeSampler(j, DD)\r\n       Let CDF be an array\r\n       CDF[0] = 0\r\n       for i = 1, ..., MAX_DEG do\r\n           CDF[i] = CDF[i - 1] + DD[i]\r\n       Rand_Init(j)\r\n       r = Rand() % CDF[MAX_DEG]\r\n       for d = 1, ..., MAX_DEG do\r\n           if r >= CDF[d] do\r\n               return min(d, K)\r\n       return min(MAX_DEG, K)\r\n\r\n                     Figure 7: Degree Sampler Function", "correct_text": "   function DegreeSampler(j, DD)\r\n       Let CDF be an array\r\n       CDF[0] = 0\r\n       for i = 1, ..., MAX_DEG do\r\n           CDF[i] = CDF[i - 1] + DD[i]\r\n       Rand_Init(j)\r\n       r = Rand() % CDF[MAX_DEG]\r\n       for d = 1, ..., MAX_DEG do\r\n           if r < CDF[d] do\r\n               return min(d, K)\r\n       return min(MAX_DEG, K)\r\n\r\n                     Figure 7: Degree Sampler Function", "notes": "- if r >= CDF[d] do\r\n+ if r < CDF[d] do\r\n\r\nWhen sampling a degree from the degree distribution using the CDF, you should check that the random number is *less than* the CDF at that degree. As an example, assume the CDF is [0, 10, 100], and r is from [0,100). This means that d=1 should be chosen 10% of the time. The old code would choose d=1 90% of the time. It would also never choose any other value besides d=1, as later CDF values are guaranteed larger. If r was smaller than CDF[1] it is guaranteed to be smaller than CDF[2]", "submit_date": "2025-06-23", "submitter_name": "Marco Munizaga", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8478", "doc-id": "RFC9135", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "IP-VRF is identified by its corresponding Route Target and Route \r\nDistinguisher, and MAC-VRF is also identified by its corresponding Route\r\nTarget and Route Distinguisher. If operating in EVPN VLAN-based mode, \r\nthen a receiving PE that receives an EVPN route with a MAC-VRF Route \r\nTarget can identify the corresponding bridge table; however, if \r\noperating in EVPN VLAN-aware bundle mode, then the receiving PE needs \r\nboth the MAC-VRF Route Target and VLAN ID in order to identify the \r\ncorresponding bridge table.", "correct_text": "IP-VRF is identified by its corresponding Route Target and Route \r\nDistinguisher, and MAC-VRF is also identified by its corresponding Route\r\nTarget and Route Distinguisher. If operating in EVPN VLAN-based mode, \r\nthen a receiving PE that receives an EVPN route with a MAC-VRF Route \r\nTarget can identify the corresponding bridge table; however, if \r\noperating in EVPN VLAN-aware bundle mode, then the receiving PE needs \r\nboth the MAC-VRF Route Target and Ethernet Tag ID in the NLRI of \r\nthe route in order to identify the corresponding bridge table. ", "notes": "MAC/IP Advertisement (EVPN Type 2) routes for IP-->MAC pairs do not carry any information about VLAN IDs used in encapsulation of ARP (or NA) messages that trigger their advertisement.\r\nInstead, they carry  Ethernet Tag IDs of Broadcast Domains in which these messages have been received which may represent the original VLAN ID or the so-called \"normalized\" VLAN ID of the Broadcast Domain as defined in Section 6.3 of RFC 7432.", "submit_date": "2025-06-24", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2025-06-26 12:09:41"}, {"errata_id": "8482", "doc-id": "RFC2083", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "The abstract says \"This document describes PNG (Portable Network Graphics)\" and \"This specification defines the Internet Media Type image/png.\"", "correct_text": "The publication of RFC 2083 has been overtaken by further work in the W3C. The latest specification for PNG can be found at https://www.w3.org/TR/png-3/", "notes": "Someone who finds the RFC might think it is the current PNG spec.\n --VERIFIER NOTES-- \nWhile true, an erratum indicates that the RFC was incorrect at the time of publication. A request to mark RFC 2083 Historic for that reason would be in order; an erratum is not.\r\n", "submit_date": "2025-06-26", "submitter_name": "Paul Hoffman", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-06-27 21:16:58"}, {"errata_id": "8480", "doc-id": "RFC9095", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "<import namespace=\"urn:iana:xml:ns:eppcom-1.0\"/>\r\n", "correct_text": "<import namespace=\"urn:ietf:params:xml:ns:eppcom-1.0\"/>\r\n", "notes": "The namespace parameter has been corrected to reflect what is listed in the IANA registry.", "submit_date": "2025-06-24", "submitter_name": "Gavin Brown", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2025-07-01 12:23:54"}, {"errata_id": "8481", "doc-id": "RFC2784", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4", "orig_text": "The IPv4 protocol 47 [RFC1700] is used when GRE packets are\r\nenapsulated in IPv4. See [RFC1122] for requirements relating to the\r\ndelivery of packets over IPv4 networks.", "correct_text": "The IPv4 protocol 47 [RFC1700] is used when GRE packets are\r\nencapsulated in IPv4. See [RFC1122] for requirements relating to the\r\ndelivery of packets over IPv4 networks.", "notes": "s/enapsulated/encapsulated/", "submit_date": "2025-06-25", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-07-01 12:02:41"}, {"errata_id": "8488", "doc-id": "RFC1533", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.18", "orig_text": "3.18. Swap Server\r\n\r\n   This specifies the IP address of the client's swap server.\r\n\r\n   The code for this option is 16 and its length is 4.\r\n\r\n    Code   Len    Swap Server Address\r\n   +-----+-----+-----+-----+-----+-----+\r\n   |  16 |  n  |  a1 |  a2 |  a3 |  a4 |\r\n   +-----+-----+-----+-----+-----+-----+", "correct_text": "3.18. Swap Server\r\n\r\n   This specifies the IP address of the client's swap server.\r\n\r\n   The code for this option is 16 and its length is 4.\r\n\r\n    Code   Len    Swap Server Address\r\n   +-----+-----+-----+-----+-----+-----+\r\n   |  16 |  4  |  a1 |  a2 |  a3 |  a4 |\r\n   +-----+-----+-----+-----+-----+-----+", "notes": "The length is static, not dynamic. The length in the diagram  should be 4, not n.\n --VERIFIER NOTES-- \nWhile the correct is valid, this RFC has been obsoleted by RFC 2132 and a errata 487 has already been filed against the same error in RFC 2132.\r\nSee also: https://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20210507/", "submit_date": "2025-06-13", "submitter_name": "Jason Giberson", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-06-27 07:47:16"}, {"errata_id": "8489", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.6.2", "orig_text": "Numeric Replies:\r\n\r\n           ERR_NOSUCHSERVER              ERR_NONICKNAMEGIVEN\r\n           RPL_WHOISUSER                 RPL_WHOISCHANNELS\r\n           RPL_WHOISCHANNELS             RPL_WHOISSERVER\r\n           RPL_AWAY                      RPL_WHOISOPERATOR\r\n           RPL_WHOISIDLE                 ERR_NOSUCHNICK\r\n           RPL_ENDOFWHOIS", "correct_text": "Numeric Replies:\r\n\r\n           ERR_NOSUCHSERVER              ERR_NONICKNAMEGIVEN\r\n           RPL_WHOISUSER                 RPL_WHOISCHANNELS\r\n           RPL_AWAY                      RPL_WHOISSERVER\r\n           RPL_WHOISIDLE                 RPL_WHOISOPERATOR\r\n           RPL_ENDOFWHOIS                ERR_NOSUCHNICK", "notes": "RPL_WHOISCHANNELS is duplicated", "submit_date": "2025-06-27", "submitter_name": "Ildiko Cseri", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-07-29 14:41:30"}, {"errata_id": "8504", "doc-id": "RFC6648", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Title 'Deprecating the \"X-\" Prefix and Similar Constructs in Application Protocols\" and body of the document.'", "correct_text": "See discussion below.", "notes": "A recent (July 2025) discussion [1][2] on the dispatch@ietf.org list strongly suggests that \"deprecating the 'X-' prefix\" can be understood in two different ways.  One is that it should not be used at all.  The other is that it should not be treated as having any special interpretation but that its use is not prohibited or even discouraged.  Different statements in the document can be interpreted by reasonable people as supporting one view or the other, creating some ambiguity even if not an outright contradiction.  Several protocol specifications published on the standards track, superseding earlier ones, have adopted the second view by simply removing any rules specific to the \"X-\" construction and its variations.\r\n\r\nThe issue, and specific text pointers, are provided in much more detail in one of those on-list messages [2].\r\n\r\nIt seems important to flag this in the errata system but, since the BCP has existed for well over a decade without evidence of harm, and fixing this would probably require a rewrite (or at least a re-title), there does not seem to be a strong argument for changes to the document itself.\r\n\r\n[1] https://mailarchive.ietf.org/arch/msg/dispatch/D3sWMPavpL-50VakJ-aDncN2g30\r\n[2] https://mailarchive.ietf.org/arch/msg/dispatch/ylwvUeu-ztuBRr6LXMHOCwqh6Jg\n --VERIFIER NOTES-- \nhttps://datatracker.ietf.org/doc/statement-iesg-iesg-processing-of-rfc-errata-for-the-ietf-stream-20210507/\r\n\r\n> It seems important to flag this in the errata system but, since the BCP has existed for well over a decade without evidence of harm, and fixing this would probably require a rewrite (or at least a re-title), there does not seem to be a strong argument for changes to the document itself.\r\n", "submit_date": "2025-07-04", "submitter_name": "John Klensin", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-07-08 12:43:26"}, {"errata_id": "8505", "doc-id": "RFC9485", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "   The construct \\p{IsBasicLatin} is essentially a reference to legacy\r\n   ASCII; it can be replaced by the character class [\\u0000-\\u007f].\r\n", "correct_text": "Three possible approaches in the Notes section.", "notes": "Neither \"\\p{IsBasicLatin}\" nor \"[\\u0000-\\u007f]\" are valid i-regexp's.  I see three possible approaches:\r\n\r\n1) The implication of this section is that the sense of this sentence is how to convert an existing regexp that works in an existing regex engine to i-regexp.  If that is the actual intent, then the best fix is for the SingleCharEsc ABNF rule to support unicode character escapes.  That will be pulled in to the charClassExpr rule to make this example correct.  When this is fixed, some thought should be given to non-BMP characters that would either need to be escaped as two UTF-16 code points or with one escape of the form \\u{xxxxx}.\r\n\r\n2) If the intent of this section is to describe how to convert an i-regexp to the syntax of an existing regexp engine, then the charProp rule will need to be expanded to support \"IsBasicLatin\", which it currently does not.  This will be difficult to get correct and have it stay correct over time as Unicode adds new properties.  It also places a relatively difficult burden on implementers.\r\n\r\n3) Remove this sentence entirely.  Presumably this was added because \\p{IsBasicLatin} comes up often enough that this would otherwise be a frequently-asked question.  That means that the spec should be fixed for this important use case, rather than ignoring the problem, in my opinion.\r\n\r\nI believe the first option is correct, and will fix a hole in the RFC, which currently has inadequate support for the many Unicode characters that are difficult to enter, visualize, and document in their unescaped forms.  As an example, getting the suggested \\u0000 into a string without escaping is difficult on systems that use null-terminated strings.\r\n\r\nFurthermore, if even the *authors* of the spec believe that the i-regexp variant should have had Unicode escapes, this feels like a mistake in the ABNF that warrants a -bis version of this RFC.", "submit_date": "2025-07-05", "submitter_name": "Joe Hildebrand", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8506", "doc-id": "RFC6487", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "6.1.  PCKS#10 Profile", "correct_text": "6.1.  PKCS#10 Profile", "notes": "Typo in initialism for Public Key Cryptography Standards #10 (RFC 2986)", "submit_date": "2025-07-06", "submitter_name": "Theo Buehler", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-07-09 13:59:41"}, {"errata_id": "8509", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.1.1", "orig_text": "   The Image Download message element is sent by the WTP to the AC and\r\n   contains the image filename.  The value is a variable-length byte\r\n   string.  The string is NOT zero terminated.", "correct_text": "   The Image Download message element is sent by the WTP to the AC and\r\n   contains the image filename.  The value is a variable-length byte\r\n   string.  The string is NOT zero terminated.  Note that this document\r\n   does not assign a Type value to this message element.", "notes": "This seems to be the only message element in this document without an assigned code point.", "submit_date": "2025-07-12", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": "2025-08-01 18:50:14"}, {"errata_id": "8510", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.2", "orig_text": "   The message element is used to carry information pertinent to a\r\n   control message.  Every message element is identified by the Type\r\n   field, whose numbering space is managed via IANA (see Section 16).\r\n", "correct_text": "   The message element is used to carry information pertinent to a\r\n   control message.  Every message element is identified by the Type\r\n   field, whose numbering space is not managed via IANA.\r\n", "notes": "This document does not have an \"IANA Considerations\" section (Section 16 is \"Acknowledgements\"). IANA does not define a registry for LWAPP.", "submit_date": "2025-07-12", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8511", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.1.1", "orig_text": "   The Message Type field identifies the function of the LWAPP control\r\n   message.  The valid values for a Message Type are the following:\r\n", "correct_text": "   The Message Type field identifies the function of the LWAPP control\r\n   message.  This document does not assign a Message Type value to the\r\n   following messages: Key Update ACK (Section 6.9), Key Update Confirm\r\n   (Section 6.10), Key Update Trigger (Section 6.11) and IEEE 802.11 WTP\r\n   Event (Section 11.8.3).  For all other messages the valid values for\r\n   a Message Type are the following:\r\n", "notes": "This document defines a few message types that do not have an assigned code point.", "submit_date": "2025-07-12", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": "2025-08-01 18:59:33"}, {"errata_id": "8512", "doc-id": "RFC7599", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.1", "orig_text": " A MAP-T CE receiving IPv4 packets SHOULD perform NAPT44 processing\r\n   and create any necessary NAPT44 bindings.  The source address and\r\n   source port range of packets resulting from the NAPT44 processing\r\n   MUST correspond to the source IPv4 address and source transport port\r\n   range assigned to the CE by means of the MAP Basic Mapping Rule\r\n   (BMR).\r\n\r\n   The IPv4 packet is subject to a longest IPv4 destination address +\r\n   port match MAP Rule selection, which then determines the parameters\r\n   for the subsequent NAT64 operation.  By default, all traffic is\r\n   matched to the DMR and is subject to the stateless NAT64 operation\r\n   using the DMR parameters for NAT64 (Section 5.1).  Packets that are\r\n   matched to (optional) Forwarding Mapping Rules (FMRs) are subject to\r\n   the stateless NAT64 operation using the FMR parameters (Section 5)\r\n   for the MAP algorithm.  In all cases, the CE's MAP IPv6 address\r\n   (Section 6) is used as a source address.\r\n\r\n   A MAP-T CE MUST support a Default Mapping Rule and SHOULD support one\r\n   or more Forwarding Mapping Rules.", "correct_text": "Append new paragraph:\r\nSome older IPv4 hosts may send UDP datagrams with the UDP checksum set to \r\nzero, however a zero checksum is not allowed for IPv6. To avoid datagram \r\ndrops, the CE SHOULD calculate valid IPv6 UDP checksums for any IPv4 UDP \r\ndatagrams where the checksum is zero as described in Section 4.5 of [RFC7915]. ", "notes": "Also add normative reference to RFC 7915 in the references section.\r\n\r\n--- Verifier note (\u00c9ric Vyncke) ---\r\n\r\nThe appended text is correct (as verified in real life deployments), but does not reflect the status of the Working Group at time of publication, i.e., it is not stricto sensu an errata.", "submit_date": "2025-07-14", "submitter_name": "Michael Overcash", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-11-06 14:08:55"}, {"errata_id": "8513", "doc-id": "RFC7599", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.4", "orig_text": "A MAP-T BR receiving IPv4 packets uses a longest match IPv4 +\r\n   transport-layer port lookup to identify the target MAP-T domain and\r\n   select the FMR and DMR rules.  The MAP-T BR MUST then compute and\r\n   apply the IPv6 destination addresses from the IPv4 destination\r\n   address and port as per the selected FMR.  The MAP-T BR MUST also\r\n   compute and apply the IPv6 source addresses from the IPv4 source\r\n   address as per Section 5.1 (i.e., using the IPv4 source and the BR's\r\n   IPv6 prefix, it forms an IPv6-embedded IPv4 address).  The generic\r\n   IPv4-to-IPv6 header translation procedures outlined in [RFC6145]\r\n   apply throughout.  The resulting IPv6 packets are then passed to\r\n   regular IPv6 forwarding.\r\n\r\n   Note that the operation of a BR, when forwarding to/from MAP-T\r\n   domains that are defined without IPv4 address sharing, is the same as\r\n   that of stateless NAT64 IPv4/IPv6 translation.", "correct_text": "Some older IPv4 hosts may send UDP datagrams with the UDP checksum set to \r\nzero, however a zero checksum is not allowed for IPv6. To avoid datagram \r\ndrops, the BR MAY calculate valid IPv6 UDP checksums for any IPv4 UDP \r\ndatagrams where the checksum is zero as described in Section 4.5 of [RFC7915]. ", "notes": "This is list as MAY since this could be an unreasonable burden on the BR as opposed to the CE.\r\n\r\n--- Verifier Note (\u00c9ric Vyncke) ---\r\n\r\nWhile the appended text is correct (as exhibited in real life deployment) and should have been added in the original document; this does not reflect the view of the Working Group at time of publication, i.e., this is not stricto sensu an errata.", "submit_date": "2025-07-14", "submitter_name": "Michael Overcash", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-11-06 14:12:30"}, {"errata_id": "8514", "doc-id": "RFC2616", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1.3 Terminology", "orig_text": "variant\r\n      A resource may have one, or more than one, representation(s)\r\n      associated with it at any given instant. Each of these\r\n      representations is termed a `varriant'.  Use of the term `variant'\r\n      does not necessarily imply that the resource is subject to content\r\n      negotiation.", "correct_text": "variant\r\n      A resource may have one, or more than one, representation(s)\r\n      associated with it at any given instant. Each of these\r\n      representations is termed a 'variant'.  Use of the term 'variant'\r\n      does not necessarily imply that the resource is subject to content\r\n      negotiation.", "notes": "`varriant' --> 'variant'", "submit_date": "2025-07-16", "submitter_name": "Logan Stottle", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-07-28 15:16:03"}, {"errata_id": "8515", "doc-id": "RFC4643", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.4.2", "orig_text": "To ensure interoperability, client and server implementations of this\r\nextension MUST implement the [DIGEST-MD5] SASL mechanism.", "correct_text": "To ensure interoperability, client and server implementations of this\r\nextension MUST implement the [SCRAM-SHA-256] SASL mechanism.", "notes": "The DIGEST-MD5 mechanism was marked as obsolete more than a decade ago, in 2011, by RFC 6331 (\"Moving DIGEST-MD5 to Historic\") because of several flaws.  The new recommendation is to use SCRAM:\r\n\r\n   The Salted Challenge Response Authentication Mechanism (SCRAM) family\r\n   of SASL mechanisms [RFC5802] has been developed to provide similar\r\n   features as DIGEST-MD5 but with a better design.\r\n\r\nSASL libraries begin to retire DIGEST-MD5 so it may no longer be available in current software implementations.  I believe another mechanism should be mentioned in RFC 4643 for interoperability.  Either SCRAM-SHA-256 or SCRAM-SHA-512 (which may last some more years) for instance.\r\n\r\nDIGEST-MD5 should also be removed from all the examples it appears in RFC 4643.", "submit_date": "2025-07-16", "submitter_name": "Julien \u00c9LIE", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8518", "doc-id": "RFC8762", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.3.1-4.5", "orig_text": "The Session-Sender TTL field is one octet long, and its value is\r\nthe copy of the TTL field in IPv4 (or Hop Limit in IPv6) from the\r\nreceived STAMP-Test packet.", "correct_text": "The Session-Sender TTL field is one octet long, and its value is\r\nthe copy of the TTL field in IPv4 (or Hop Limit in IPv6) from the\r\nreceived STAMP-Test packet. If an implementation cannot fetch the\r\nactual TTL value from the TTL field (or Hop Limit) in the IP\r\nheader of the received STAMP-Test packet, it MUST set the Session-\r\nSender TTL value as 255.", "notes": "The RFC contains no language describing the value that the reflector should include in the Session Sender TTL field of a reflected STAMP packet if the TTL value cannot be read from the IP header of the test packet. The language seems to presume that fetching the TTL is always possible. Having a description for the behavior of an implementation when that is not the case would help the life of the implementer. \r\n\r\nAs an added benefit of defining the behavior in the \"error case\", there would be an increase in the compatibility between STAMP and TWAMP Light. TWAMP Light, as a result of its reliance on TWAMP, specifies the behavior of an implementation that cannot fetch the TTL value from a test packet (and is the source of the suggested language given above).\n --VERIFIER NOTES-- \nPer the discussion at https://mailarchive.ietf.org/arch/msg/ippm/QhoDmae-983IKn_HFF1XCADWP0s/, filling an erratum is not appropriate here given that there is nothing wrong with the existing text. In addition, the new update require the WG consensus . This is better handled in a document that updates this RFC. ", "submit_date": "2025-07-22", "submitter_name": "Will Hawkins", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-08-05 06:20:23"}, {"errata_id": "8519", "doc-id": "RFC7852", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "     <!--\r\n       6.1.3\r\n     -->\r\n     <xs:element name=\"source\">\r\n       <xs:complexType>\r\n         <xs:sequence>\r\n           <xs:element name=\"parameters\">", "correct_text": "     <!--\r\n       6.1.3\r\n     -->\r\n     <xs:element name=\"source\">\r\n       <xs:complexType>\r\n         <xs:sequence>\r\n           <xs:element name=\"parameters\" minOccurs=\"0\">", "notes": "The XML schema in Appendix A is based on the Relax NG schema defined in RFC 6351. There already is a verified errata 2994 for RFC 6351 which updates the Relax NG schema to define the parameters of the SOURCE property to be optional. The XML schema in RFC 7852 should be updated accordingly.\r\n\r\nNote that RFC 7852, Section 11.6. registers the XML schema in the IANA XML Registry, so the XML schema at IANA should be updated as well.\r\n\r\nThe contents of this errata were originally highlighted by John Scott on the vcarddav and the ecrit mailing lists. See https://mailarchive.ietf.org/arch/msg/ecrit/JPCturATh0WN1rQfyF4M6EAkar0/\r\n\r\nErrata for RFC 6351: https://www.rfc-editor.org/errata/eid2994\r\nIANA XML Registry: https://www.iana.org/assignments/xml-registry/xml-registry.xhtml\r\nvCard 4.0 XML Schema at IANA: https://www.iana.org/assignments/xml-registry/schema/vcard-4.0.xsd", "submit_date": "2025-07-23", "submitter_name": "Robert Stepanek", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8520", "doc-id": "RFC8929", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1", "orig_text": "insert an SLLAO in the EDAR to the 6LBR....", "correct_text": "This document updates EDAR format, adding Options field.", "notes": "As per RFC8505, there is no room for Options in EDAR. The RFC8929 updates RFC8505 in Section 3.1, but does not specify the updated format of EDAR with the Option field. The said document must follow the latest format of EDAR as defined in the Prefix Registration draft (https://datatracker.ietf.org/doc/html/draft-ietf-6lo-prefix-registration-15) and update the Section. The Numbering of all other figures will be changed accordingly.\r\n\r\n--- Verifier note ---\r\n\r\nWhile the erratum is correct in the lights of draft-ietf-6lo-prefix-registration, this RFC predates the draft. I.e., it cannot represent the 6LO WG consensus at the time of approving RFC 8929.", "submit_date": "2025-07-27", "submitter_name": "Adnan Rashid", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2025-07-31 11:01:24"}, {"errata_id": "8521", "doc-id": "RFC8532", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "    anydata root {\r\n      yangmnt:mount-point \"root\";\r\n      description\r\n        \"Root for models supported per test point.\";\r\n    }\r\n", "correct_text": "    container root {\r\n      description\r\n        \"Root for models supported per test point.\";\r\n      yangmnt:mount-point \"root\";\r\n    }\r\n", "notes": "The following error is displayed against the module (e.g., https://www.yangcatalog.org/yangvalidator?rfc=8532):\r\n\r\n=\r\nlibyang err : Ext plugin \"ly2 schema mount v1\": Extension \"yangmnt:mount-point\" instance allowed only in container or list statement. (Path \"/ietf-connectionless-oam:test-point-location-info/root/{extension='yangmnt:mount-point'}/root\".)\r\n==\r\n\r\nPer RFC 8528:\r\n\r\n   o  mount point: A container or a list node whose definition contains\r\n      the \"mount-point\" extension statement.\r\n\r\nAdding a surrounding container or simply changing \"anydata root\" into \"container root\" would fix the issue.", "submit_date": "2025-07-29", "submitter_name": "Mohamed Boucadair", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8522", "doc-id": "RFC7991", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "A.1.2.4", "orig_text": "   The special value \"none\" was also used back then; it denied the IETF\r\n   any rights beyond publication as an Internet-Draft.", "correct_text": "Remove from A.1.2.4. Should be its own section under A.1.1, and have this text:\r\n\r\n\r\nThe special value \"none\" is available to produce documents not intended \r\nfor submission to the Internet-Drafts system or the RFC Editor system.  \r\nIt omits any publication IPR boilerplate related to the IETF and RFC process.", "notes": "The xml2rfc tool still supports the 'ipr=\"none\"' attribute for the \"rfc\" element, and its original designed use was not to deny the IETF publication rights, but to re-use a set of code and tools for other documents that could make use of similar formatting.   \r\n\r\nRegardless of whether \"none\" is obsolete or not, either the original text or the corrected text needs to be moved out from under A.1.2.4.\r\n\r\n --VERIFIER NOTES--\r\n\r\nThe erratum is rejected.\r\n\r\nRFC 7991 accurately reflects the historical meaning of ipr=\"none\". The proposed text describes tool usage, which is not a valid correction to the RFC.\n --VERIFIER NOTES-- \n   ", "submit_date": "2025-07-30", "submitter_name": "Michael StJohns", "verifier_id": "", "verifier_name": "Dhruv Dhody", "update_date": "2026-04-07 11:36:28"}, {"errata_id": "8534", "doc-id": "RFC8391", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "Choices of w are limited to the values 4 and 16 since these values yield \r\noptimal trade-offs and easy implementation.", "correct_text": "Choices of w are limited to the values 4 and 16 since these values yield \r\noptimal trade-offs and easy implementation.\r\n\r\nNOTE: Instantiating w and n with values not specified here may require changes\r\nto the algorithms as they are described in this RFC, for correctness and\r\nsecurity. In particular, Algorithm 1 (Section 2.6) is incorrect for values of w\r\nlarger than 256. Algorithms 5 and 6 (Sections 3.1.5 and 3.1.6) yield an insecure \r\nsignature scheme when instantiated with parameters n and w such that len_2 *\r\nlg(w) is divisible by 8 (for example, with w = 256 and any value of n).", "notes": "This additional note aims at future-proofing the RFC against unchecked extensions to the parameter set. Algorithm 1 when w > 256 may lead to an insecure instantiation. Instantiating Algorithms 5 and 6 with w = 256 (and any value of n) or some other (n, w) pair such that len_2 * lg(w) is divisible by 8 leads to immediate forgery attacks: the value of csum gets multiplied by 2^8 (shifted left by 8), but its big-endian encoding (with toByte) does not take this into account and drops the most significant base w word(s) of the checksum.\r\n\r\n--VERIFIER NOTES--\r\nThe erratum proposes adding a cautionary note about parameter values outside the specified range (w not in {4,16}). RFC author Huelsing agrees the content is correct, but this adds new guidance rather than correcting an error, so it belongs in a document revision: https://mailarchive.ietf.org/arch/msg/cfrg/i-p4Up1VvZ40loKThQNHsURbYJg/", "submit_date": "2025-08-19", "submitter_name": "Fran\u00e7ois Dupressoir", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 19:45:22"}, {"errata_id": "8528", "doc-id": "RFC9711", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "/ eat_nonce /       10: h'48df7b172d70b5a18935d0460a73dd71',\r\n/ eat_nonce /       10: h'e253cabedc9eec24ac4e25bcbeaf7765',\r\n/ eat_nonce /       10: h'd79b964ddd5471c1393c8888',\r\n/ eat_nonce /       10: h'99b67438dba40743266f70bf75feb1026d5134\r\n                              97a229bfe8',\r\n/ eat_nonce /         10: h'8b0b28782a23d3f6',\r\n/ eat_nonce / 10: h'5e19fba4483c7896',\r\n/ eat_nonce /       10: h'3515744961254b41a6cf9c02',", "correct_text": "/ Nonce /      10: h'48df7b172d70b5a18935d0460a73dd71',\r\n/ Nonce /      10: h'e253cabedc9eec24ac4e25bcbeaf7765',\r\n/ Nonce /      10: h'd79b964ddd5471c1393c8888',\r\n/ Nonce /      10: h'99b67438dba40743266f70bf75feb1026d5134\r\n                              97a229bfe8',\r\n/ Nonce /         10: h'8b0b28782a23d3f6',\r\n/ Nonce / 10: h'5e19fba4483c7896',\r\n/ Nonce /      10: h'3515744961254b41a6cf9c02',", "notes": "For all the CWT examples in Appendix A, where the claim name is \"eat_nonce\" it should be changed to \"Nonce\", as \"eat_nonce\" is only for JWT.", "submit_date": "2025-08-09", "submitter_name": "Steven Bellock", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:19:28"}, {"errata_id": "8531", "doc-id": "RFC4867", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8.2", "orig_text": "      ptime: see RFC 2327 [11].", "correct_text": "      ptime: see RFC 4566 [11].", "notes": "The same reference is correctly titled in section 8.1.", "submit_date": "2025-08-12", "submitter_name": "Jan Tojnar", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-08-13 16:19:59"}, {"errata_id": "8536", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2.2", "orig_text": "   Length:   17\r\n", "correct_text": "   Length:   18\r\n", "notes": "The message element diagram specifies exactly 18 octets.", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8537", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2.5", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |           WTP Count           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   137 for WTP Manager Control IPv6 Address\r\n\r\n   Length:   6\r\n\r\n   IP Address:   The IP address of an interface.\r\n", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address...                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address...                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address...                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |           WTP Count           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   137 for WTP Manager Control IPv6 Address\r\n\r\n   Length:   18\r\n\r\n   IP Address:   The IPv6 address of an interface.\r\n", "notes": "The message element diagram specifies exactly 18 octets. IP Address is a single IPv6 address rather than four IPv4 addresses.", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8538", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2.1", "orig_text": "   Type:   2 for Result Code\r\n", "correct_text": "   Type:   [unspecified] for Result Code\r\n", "notes": "Message element type 2 is assigned to AC Address (Section 5.2.1).", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8539", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2.5", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   139 for WTP Manager Data IPv6 Address\r\n\r\n   Length:   4\r\n\r\n   IP Address:   The IP address of an interface.\r\n", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address...                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address...                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address...                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                           IP Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   139 for WTP Manager Data IPv6 Address\r\n\r\n   Length:   16\r\n\r\n   IP Address:   The IPv6 address of an interface.\r\n", "notes": "The message element diagram specifies exactly 16 octets. IP Address is a single IPv6 address rather than four IPv4 addresses.", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8540", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2.6", "orig_text": "   The AC List message element is used to configure a WTP with the\r\n[...]\r\n   Type:   59 for AC List\r\n", "correct_text": "   The AC IPv4 List message element is used to configure a WTP with the\r\n[...]\r\n   Type:   59 for AC IPv4 List\r\n", "notes": "The name of the message element is \"AC IPv4 List\".", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": "2025-09-03 13:33:47"}, {"errata_id": "8556", "doc-id": "RFC9057", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3", "orig_text": "author = \"Author:\" mailbox-list CRLF", "correct_text": "author = \"Author:\" (mailbox-list / address-list) CRLF", "notes": "RFC 6854 updates RFC 5322, relaxing the syntax of the From: header field to admit group syntax.\r\nThe definition in this RFC 9057 is based on the earlier syntax from RFC 5322.  The processing rules\r\nalso specified by this RFC require that the value of the Author: field when created MUST BE identical\r\nthe the value of the From: field.  This condition cannot be satisfied in general, because the From: \r\nfield (per RFC 6854) admits values that the Author: field does not admit.\r\n\r\nThis RFC should be updated to follow the RFC 6854 syntax and include RFC 6854 in the normative references.", "submit_date": "2025-08-27", "submitter_name": "Fraser Tweedale", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2026-03-01 16:56:59"}, {"errata_id": "8557", "doc-id": "RFC7591", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "2", "orig_text": "As required by [Section 2](https://datatracker.ietf.org/doc/html/rfc7591#section-2) of OAuth 2.0 [[RFC6749](https://datatracker.ietf.org/doc/html/rfc6749)]", "correct_text": "As required by [Section 2](https://datatracker.ietf.org/doc/html/rfc6749#section-2) of OAuth 2.0 [[RFC6749](https://datatracker.ietf.org/doc/html/rfc6749)]", "notes": "In section 2 of RFC 7591, the links to sections 2, 2.1, 2.3.1, 4.1, 4.2, 4.3, 4.4, 4.5, and 6 are incorrectly pointing to sections within RFC7591. They should be pointing to the corresponding sections in RFC 6749. The link to sections 2.3.1, 4.3, and 4.4 are actually broken, because those sections do not exist in RFC 7591\n --VERIFIER NOTES-- \nThis is regarding the links generated in the rfc2html output, not the RFC itself (https://www.rfc-editor.org/rfc/rfc7591.txt). Please add an issue here: https://github.com/ietf-tools/rfc2html.   ", "submit_date": "2025-08-27", "submitter_name": "Atul Tulshibagwale", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-08-28 16:24:30"}, {"errata_id": "8560", "doc-id": "RFC8765", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.5", "orig_text": "For other types of DNS server, the RECONFIRM operation is currently\r\nundefined and SHOULD result in a NOERROR response, but it need not\r\ncause any other action to occur.", "correct_text": "For other types of DNS server, the RECONFIRM operation is currently\r\nundefined and MUST be silently ignored on reception.", "notes": "RECONFIRM TLV is only allowed as a Primary TLV in a Unidirectional DSO message. Per RFC 8490, no response must be generated for Unidirectional DSO messages: server either processes, ignores or aborts the connection. Therefore it's wrong to recommend to \"a NOERROR response\".\r\n\r\n--- Verifier note (\u00c9ric Vyncke) ---\r\n\r\nSee also: https://mailarchive.ietf.org/arch/msg/dnssd/FP00REBOxT0PsxuqKZmQ1XvbaNw/", "submit_date": "2025-08-31", "submitter_name": "Ilya Kulakov", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-11-06 20:10:49"}, {"errata_id": "8544", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.5.3", "orig_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          IP Address                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          IP Address                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          IP Address                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          IP Address                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          MAC Address                          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |          MAC Address          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   77 for Duplicate IPv6 Address\r\n\r\n   Length:   10\r\n\r\n   IP Address:   The IP address currently used by the WTP.\r\n", "correct_text": "       0                   1                   2                   3\r\n       0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          IP Address...                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          IP Address...                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          IP Address...                        |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          IP Address                           |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |                          MAC Address...                       |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n      |          MAC Address          |\r\n      +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n\r\n   Type:   [unspecified] for Duplicate IPv6 Address\r\n\r\n   Length:   22\r\n\r\n   IP Address:   The IPv6 address currently used by the WTP.\r\n", "notes": "The message element diagram specifies exactly 22 octets. Message element type 77 is assigned to Duplicate IPv4 Address (Section 8.5.2). IP Address is a single IPv6 address rather than four IPv4 addresses. MAC Address is a single 6-octet field.", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8545", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.7.1.3", "orig_text": "   Length:   12\r\n", "correct_text": "   Length:   8\r\n", "notes": "The message element diagram specifies exactly 8 octets.", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8546", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.7.2.1", "orig_text": "   The Statistics message element is sent by the WTP to transmit its\r\n   current statistics.  The value contains the following fields:\r\n[...]\r\n   Type:   38 for Statistics\r\n", "correct_text": "   The IEEE 802.11 Statistics message element is sent by the WTP to\r\n   transmit its current statistics.  The value contains the following\r\n   fields:\r\n[...]\r\n   Type:   [unspecified] for IEEE 802.11 Statistics\r\n", "notes": "Message element type 38 is assigned to Decryption Error Report Period (Section 7.3.1). The name of the message element is \"IEEE 802.11 Statistics\".", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8547", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.9.1", "orig_text": "   The WTP WLAN radio configuration is used by the AC to configure a\r\n[...]\r\n   Length:   20\r\n", "correct_text": "   The IEEE 802.11 WTP WLAN Radio Configuration message element is\r\n   used by the AC to configure a\r\n[...]\r\n   Length:   21\r\n", "notes": "The message element diagram specifies exactly 21 octets. The name of the message element is \"IEEE 802.11 WTP WLAN Radio Configuration\".", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8548", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.9.10", "orig_text": "   Type:   16 for IEEE 802.11 Supported Rates\r\n", "correct_text": "   Type:   [unspecified] for IEEE 802.11 Supported Rates\r\n", "notes": "Message element type 16 is assigned to IEEE 802.11 Rate Set (Section 11.9.2).", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8549", "doc-id": "RFC5412", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.9.14", "orig_text": "   The WTP Quality of Service message element value is sent by the AC to\r\n   the WTP to communicate quality-of-service configuration information.\r\n[...]\r\n   Length:   12\r\n", "correct_text": "   The IEEE 802.11 WTP Quality of Service message element value is sent\r\n   by the AC to the WTP to communicate quality-of-service configuration\r\n   information.\r\n[...]\r\n   Length:   52\r\n", "notes": "The message element diagrams specify exactly 52 octets (a 2-octet header followed by 5 instances of a 10-octet structure). The name of the message element is \"IEEE 802.11 WTP Quality of Service\".", "submit_date": "2025-08-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8550", "doc-id": "RFC2544", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": " First-page header", "orig_text": "Network Working Group", "correct_text": "Benchmarking Working Group", "notes": "In the header of the RFC, \"Network Working Group\" appears. However, RFC 2544 is one of the most famous products of the Benchmarking Working Group. \r\nLikely because of this error, RFC 2544 is not listed among the documents of BMWG: https://datatracker.ietf.org/group/bmwg/documents/\n --VERIFIER NOTES-- \nFor many years, RFCs showed \u201cNetwork Working Group\u201d in the header, regardless of their source. See https://www.rfc-editor.org/faq/#wg. The actual source of a given RFC is displayed on its info page, and for RFC 2544, that has been corrected from \u201cLegacy\u201d to \u201cbmwg (ops)\u201c. See https://www.rfc-editor.org/info/rfc2544.   ", "submit_date": "2025-08-22", "submitter_name": "Gabor Lencse", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-09-04 16:40:37"}, {"errata_id": "8551", "doc-id": "RFC867", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "global", "orig_text": "Example:\r\n\r\n   Tuesday, February 22, 1982 17:37:43-PST", "correct_text": "Example:\r\n\r\n   Monday, February 22, 1982 17:37:43-PST", "notes": "The address returned by the daytime protocol should be self-consistent and valid.", "submit_date": "2025-08-22", "submitter_name": "David Garfield", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-08-29 19:28:36"}, {"errata_id": "8552", "doc-id": "RFC6874", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Updates: 3986", "correct_text": "n/a", "notes": "This was found unimplementable and no longer updates RFC 3986. Please see 9844 <https://www.rfc-editor.org/rfc/rfc9844.html> for more info.", "submit_date": "2025-08-23", "submitter_name": "RFC Production Center", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-08-23 06:52:49"}, {"errata_id": "8553", "doc-id": "RFC4007", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "11.2", "orig_text": "[global within this section]", "correct_text": "[no specific correction]", "notes": "The RFC completely fails to specify the character set or any restrictions or limits on the <zone_id> part. More details are given in the Security Considerations of RFC 9844.", "submit_date": "2025-08-24", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-10-17 04:07:31"}, {"errata_id": "8554", "doc-id": "RFC5952", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "[none]", "correct_text": "An extension to the format defined here to represent scoped addresses, such as link-local addresses, is defined in [RFC4007].", "notes": "This omission was noticed while drafting RFC 9844.\r\n\r\n--- ek@ ---\r\n\r\nA future revision might also include reference to RFC 9844 for the reader/implementer to note.", "submit_date": "2025-08-24", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-09-04 05:54:31"}, {"errata_id": "8555", "doc-id": "RFC9555", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3.1", "orig_text": "ADR;JSCOMPS=\"s,\\, ;11;s, ;10;3\":\r\n ;;54321 Oak St;Reston;;;;;;;Oak St;54321;;;;;;\r\n", "correct_text": "ADR;JSCOMPS=\"s,\\, ;10;s, ;11;3\":\r\n ;;54321,Oak St;Reston;;;;;;;54321;Oak St;;;;;;\r\n", "notes": "\u2018number' should be position 10 and \u2018name' position 11 according to RFC9554.", "submit_date": "2025-08-26", "submitter_name": "Mauro De Gennaro", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8572", "doc-id": "RFC1866", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.2.2", "orig_text": "To process a form whose action URL is an HTTP URL and whose method is\r\n`GET', the user agent starts with the action URI and appends a `?'\r\nand the form data set (...)", "correct_text": "To process a form whose action URL is an HTTP URL and whose method is\r\n`GET', the user agent adds the form data set to the [query of] action URI.", "notes": "I think the original authors had in mind to \"add\" the form data set to the action URI, but as specified it \"replaces\" any existing query parameters.\r\nMaybe the authors focused on the syntax of specifying the query part more than on the aspect of how to add query parameters semantically.\r\nProbably 30 years ago nobody had in mind that the action URI could be a parameter-driven CGI script like http://server.domain.org/example/api?fn=10&um=1 where the \"fn\" parameter specifies the action to take (and other parameters specify further details).\r\nHaving to add hidden form fields just to carry parameters to the action URL seems ugly today.\r\nI'm aware that this change will cause incompatibilities also affecting https://www.w3.org/TR/html401/interact/forms.html#h-17.13.3.4, but if the form action is an URI it should be a complete URI. Section 8.1.1 also states \" ACTION specifies the action URI for the form.\". It does not specify that the query part might be ignored.\r\nAt least some clarification should be added.\r\nSee also https://stackoverflow.com/q/1116019/6607497", "submit_date": "2025-09-12", "submitter_name": "Ulrich Windl", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:07:15"}, {"errata_id": "8576", "doc-id": "RFC6206", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.8", "orig_text": "A consistency occurs when a node hears an older or equal version\r\nnumber.  When hearing an older version number, rather than reset its\r\nown Trickle timer, the node sends an update. ", "correct_text": "A consistency occurs when a node hears an older or equal version\r\nnumber.  When hearing an older version number, rather than reset its\r\nown Trickle timer, the node sends an update through another protocol.", "notes": "I had been thinking of the version as a sort of epoch counter, rather than a full software change.  \r\n\r\nWithout the clarification that the update is sent Out Of Band (with respect to trickle), my initial interpretation was that the \"update\" would consist of sending the newer version number -- and this would not actually happen, unless the counter c were still less than k when the node reached time t.\n --VERIFIER NOTES-- \nAs discussed over the ROLL WG mailing list, the proposed changes do not reflect the intentions of the RFC based on WG participant inputs. Please check for more details : https://mailarchive.ietf.org/arch/msg/roll/9Zi8tFqBFZvON8mgzqmNVq4l4p8/\r\n", "submit_date": "2025-09-15", "submitter_name": "Jim J Jewett", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-09-30 04:50:18"}, {"errata_id": "8575", "doc-id": "RFC9497", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "\"EvaluatedElement\":  The evaluated element output by BlindEvaluate(),\r\n      a serialized Element of Ne bytes long.", "correct_text": "\"EvaluationElement\":  The evaluated element output by BlindEvaluate(),\r\n      a serialized Element of Ne bytes long.", "notes": "To match the identifier used in all subsequent test vectors. There is still a slight inconsistency, as \"EvaluatedElement\" is used throughout the RFC and \"EvaluationElement\" is used uniquely in \"Appendix A. Test Vectors\".\n --VERIFIER NOTES-- \nRejected. The proposed fix changes the header definition to match the test vector data, but the data itself is inconsistent with the RFC body, which uses \"evaluatedElement\" throughout the protocol specification. The correct fix is to change the test vector field names from \"EvaluationElement\" to \"EvaluatedElement\" to align with the protocol specification. A new erratum will be filed with the correct fix.", "submit_date": "2025-09-12", "submitter_name": "Charles Edward Gagnon", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-27 17:44:27"}, {"errata_id": "8609", "doc-id": "RFC8777", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "  #!/usr/bin/env python3\r\n  import sys\r\n  name=sys.argv[1]\r\n  wire=''\r\n  for dn in name.split('.'):\r\n    if len(dn) > 0:\r\n      wire += ('%02x' % len(dn))\r\n      wire += (''.join('%02x'%ord(x) for x in dn))\r\n  print(len(wire)//2) + 2\r\n  print(wire)", "correct_text": "  #!/usr/bin/env python3\r\n  import sys\r\n  name=sys.argv[1]\r\n  wire=''\r\n  for dn in name.split('.'):\r\n    if len(dn) > 0:\r\n      wire += ('%02x' % len(dn))\r\n      wire += (''.join('%02x'%ord(x) for x in dn))\r\n  wire += '00'\r\n  print(len(wire)//2 + 2)\r\n  print(wire)", "notes": "Given erratum 6218 (<https://www.rfc-editor.org/errata/eid6218>: missing final empty root label), already verified, the Python code should also produce the correct output.\r\n\r\n======Verifier Notes\r\n\r\nAfter discussion with Jim Reid (DNSDIR Chair) in Shenzhen, I was convinced that more discussion is needed to agree on the exact changes and that the fix may concern several places in the document. The situation is even complicated because this erratum  concerns the same code as EID 6155 [1], which was verified in 2021 (thanks Rebecca VanRheenen for the note).\r\n\r\nSee more details at https://mailarchive.ietf.org/arch/msg/mboned/F_bgq3YO4B1p_ajTaofOZzixNwQ/", "submit_date": "2025-10-18", "submitter_name": "Viktor Dukhovni", "verifier_id": "", "verifier_name": "Mohamed BOUCADAIR", "update_date": "2026-04-30 07:34:05"}, {"errata_id": "8610", "doc-id": "RFC9758", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "2^(32-1)", "correct_text": "2^32-1", "notes": "2^(32-1) = 2^31 = 0x80000000, but the intended value is 2^32-1 = 0xFFFFFFFF.\r\n\r\nThe Registration Procedures for the 'ipn' Scheme URI Allocator Identifiers Registry and the Registration Procedures for the 'ipn' Scheme URI Default Allocator Node Numbers Registry use >=0x100000000 instead of >=0x80000001 as the largest range. Other parts of the text show that 0xFFFFFFFF is the intended value:\r\n\r\n* Section 4 says 4294967295\r\n* Section 6.3 says\r\n     allocator-identifier: uint .lt 4294967296,\r\n     node-number: uint .lt 4294967296,\r\n\r\nAlso note that Section 3.4.2 shows 0xFFFFFFFFF = 2^36-1 (nine F's instead of eight).", "submit_date": "2025-10-20", "submitter_name": "Nathan Luu", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-11-29 23:11:16"}, {"errata_id": "8583", "doc-id": "RFC9832", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "Original Text 1:\r\n\r\n   Figure 1 depicts the intra-AS and inter-AS application of these\r\n   constructs.  Interactions between SN1 and PE11 describe the intra-AS\r\n   usage.  Interactions between PE21 and PE11 describe the inter-AS\r\n   usage.\r\n\r\n\r\nOriginal Text 2:\r\n\r\n   For the intra-AS case, SN1 maps this intra-AS route on RSVP-TE\r\n   tunnels with TC ID 100 by using the Resolution Scheme for\r\n   color:0:100.\r\n\r\nOriginal Text 3:\r\n\r\n   PE21 maps the inter-AS service routes received with color:0:100 from\r\n   AS1 on BGP CT tunnel with TC ID 100 by using the Resolution Scheme\r\n   for color:0:100.  Note that this procedure is same as that followed\r\n   by SN1 in the intra-AS case.", "correct_text": "Corrected Text 1:\r\n\r\n   Figure 1 depicts the intra-AS and inter-AS application of these\r\n   constructs.  Interactions between SN11 and PE11 describe the intra-AS\r\n   usage.  Interactions between PE21 and PE11 describe the inter-AS\r\n   usage.\r\n\r\n\r\nCorrected Text 2:\r\n\r\n   For the intra-AS case, SN11 maps this intra-AS route on RSVP-TE\r\n   tunnels with TC ID 100 by using the Resolution Scheme for\r\n   color:0:100.\r\n\r\nCorrected Text 3:\r\n\r\n   PE21 maps the inter-AS service routes received with color:0:100 from\r\n   AS1 on BGP CT tunnel with TC ID 100 by using the Resolution Scheme\r\n   for color:0:100.  Note that this procedure is same as that followed\r\n   by SN11 in the intra-AS case.", "notes": "In Section 3, Architecture Overview, the diagram shows \"SN11\" as a service node in AS1. In this section, there are 3 occurrences of \"SN11\" wrongly labeled as \"SN1\" in Section 3 text. I kindly request that this editorial misrepresentation be corrected. Original and Corrected text have been added for all the three occurrences.", "submit_date": "2025-09-25", "submitter_name": "Natrajan Venkataraman", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-09-30 04:51:43"}, {"errata_id": "8581", "doc-id": "RFC9514", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.", "orig_text": "If the SRv6 SIDs had been advertised within the BGP-\r\n   LS Link Attribute associated with the existing Node NLRI, the BGP-LS\r\n   update would have grown rather large ...", "correct_text": "If the SRv6 SIDs had been advertised within the BGP-\r\n   LS Attribute associated with the existing Node NLRI, the BGP-LS\r\n   update would have grown rather large ...", "notes": "According to RFC 7752, Link Attribute is associated with the Link NLRI, not the Node NLRI. The correct term to be used should be \"BGP-LS Attribute\", or perhaps \"BGP-LS Node Attribute\".", "submit_date": "2025-09-02", "submitter_name": "Long Dao", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-09-30 04:51:14"}, {"errata_id": "8582", "doc-id": "RFC8460", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1 (and 4.4)", "orig_text": "filename        = sender \"!\" policy-domain \"!\" begin-timestamp\r\n                      \"!\" end-timestamp [ \"!\" unique-id ] \".\" extension", "correct_text": "filename        = sender \"!\" recipient-domain \"!\" begin-timestamp\r\n                      \"!\" end-timestamp [ \"!\" unique-id ] \".\" extension", "notes": "Section 5.1 currently mandates that the TLSRPT filename be constructed with policy-domain. The policy-domain as defined in Section 1.1 may differ from the recipient domain (MX host for DANE and undefined for no-policy-found cases) and is already included in the JSON.\r\n\r\nIn practice, TLSRPT filenames almost always contain the recipient domain, which is defined earlier in the RFC but never included in the JSON itself. Implementing Section 5.1 literally (using the policy-domain instead of the recipient domain) would break TLSRPT for shared report mailboxes. For example:\r\n\r\n- Multiple customer domains sharing an MX provider\r\n- External MX smart hosts implementing DANE, where the policy-domain is the MX hostname providing TLSA records\r\n\r\nIn these cases, the report recipient cannot reliably determine which recipient domain the report is aimed at if only the policy-domain is used in the filename.\r\n\r\nSuggested correction:\r\n\r\n1. Update the filename ABNF to use the recipient domain instead of the policy-domain to reflect the status quo.\r\n\r\n2. Include a consistent recipient-domain field in the TLSRPT JSON for unambiguous identification.\r\n\r\nThis ensures parsers can reliably determine which recipient domain the report is intended for, preserves TLSRPT\u2019s usefulness for shared mailboxes, and allows easier and standardized implementation across different reporting environments.\n --VERIFIER NOTES-- \nThe MIME filename hint does not have semantic\r\nsignificance.  This is a RECOMMENDED value, and a receiving system\r\nshould generally ignore this entirely, and process the report JSON\r\npayload without regard to the filename.\r\n\r\nFor obvious security reasons the filename must not be trusted, and the\r\nreport might never be stored as a separate file, with results stored in\r\na database or transformed into an API call.\r\n\r\nThe recipient domain is not a better choice, but it\r\nreally should not matter, the filename is a nonce, it has no semantic\r\nvalue.", "submit_date": "2025-09-23", "submitter_name": "\u00d6mer G\u00fcven", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:10:51"}, {"errata_id": "8585", "doc-id": "RFC9401", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "A notable example is a solider in a trench. ", "correct_text": "A notable example is a soldier in a trench. ", "notes": "Typo; self-explanatory.", "submit_date": "2025-09-28", "submitter_name": "Gertjan Haaijer", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-09-29 13:56:37"}, {"errata_id": "8586", "doc-id": "RFC9225", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3", "orig_text": "The commute was deemed infeasible\r\n   due to a lack of reasonably priced commercial transport options in\r\n   that region of the solar system.", "correct_text": "The commute was deemed infeasible\r\n   due to a lack of reasonably priced commercial \r\ntransportation options in that region of the solar system.", "notes": "As hinted at in errata 6911, document uses US spelling.\r\nhttps://grammar.collinsdictionary.com/english-usage/what-is-the-difference-between-transport-and-transportation\n --VERIFIER NOTES-- \nThe use of \u201ctransport\u201d aligns with the definition in the Merriam Webster Dictionary (see https://www.merriam-webster.com/dictionary/transport).", "submit_date": "2025-09-28", "submitter_name": "Gertjan Haaijer", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-10-02 17:34:58"}, {"errata_id": "8588", "doc-id": "RFC6068", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "7", "orig_text": "Some header fields are inherently unsafe to include in a message generated from\r\na URI.  For details, please see Section 3.", "correct_text": "Some header fields are inherently unsafe to include in a message generated from \r\na URI.  For details, please see Sections 3 and 4.", "notes": "Section 3 is \"Semantics and Operations\" which does indeed discuss some unsafe header fields.\r\n\r\nBut Section 4 is titled \"Unsafe Header Fields\" and deserves to also be referenced from section 7, Security Considerations.", "submit_date": "2025-09-30", "submitter_name": "Daniel Kahn Gillmor", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-10-22 20:15:38"}, {"errata_id": "8589", "doc-id": "RFC8949", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.6.1", "orig_text": "   ...for the\r\n   purpose of map key equivalence, NaN values are equivalent if they\r\n   have the same significand after zero-extending both significands at\r\n   the right to 64 bits.", "correct_text": "   ...for the\r\n   purpose of map key equivalence, NaN values are equivalent if they\r\n   have the same significand after zero-extending both significands at\r\n   the right to 64 bits, and if they both have the same sign bit.", "notes": "   This is a mathematical description of equivalence, but implementors\r\n   may use whatever means they deem appropriate to detect this equivalence.", "submit_date": "2025-10-01", "submitter_name": "Joe Hildebrand", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-07 13:09:38"}, {"errata_id": "8590", "doc-id": "RFC9704", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.2", "orig_text": "performs full DNSSEC validation locally [RFC6698]", "correct_text": "performs full DNSSEC validation locally [RFC4033]", "notes": "Wrong RFC reference. The correct reference is RFC 4033 for DNSSEC and \"Validating Stub Resolver\" definition.\r\n\r\n--- Verifier note (Eric Vyncke) ----\r\nThanks for Dan Wing for the verification.", "submit_date": "2025-10-01", "submitter_name": "Mrigank Pawagi", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2025-10-02 08:47:19"}, {"errata_id": "8613", "doc-id": "RFC9242", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.2.", "orig_text": "   Note that it is possible to avoid actual reconstruction of the\r\n   message by incrementally calculating prf on decrypted (or ready to be\r\n   encrypted) fragments.  However, care must be taken to properly\r\n   replace the content of the Next Header and the Length fields so that\r\n   the result of computing the prf is the same as if it were computed on\r\n   the reconstructed message.\r\n", "correct_text": "   Note that it is possible to avoid actual reconstruction of the\r\n   message by incrementally calculating prf on decrypted (or ready to be\r\n   encrypted) fragments.  However, care must be taken to properly\r\n   replace the content of the Next Payload and the Length fields so that\r\n   the result of computing the prf is the same as if it were computed on\r\n   the reconstructed message.\r\n", "notes": "s/Next Header/Next Payload/", "submit_date": "2025-10-23", "submitter_name": "Andrew Cagney", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-10-28 11:20:48"}, {"errata_id": "8615", "doc-id": "RFC9559", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1.4.1.24", "orig_text": "   path:  \\Segment\\Tracks\\TrackEntry\\AttachmentLink\r\n   maxOccurs:  1\r\n   maxver:  3", "correct_text": "   path:  \\Segment\\Tracks\\TrackEntry\\AttachmentLink\r\n   maxver:  3", "notes": "The \"maxOccurs\" set to 1 is bogus. There can more more than one AttachmentLink in a TrackEntry. It should be removed to allow any number of AttachmentLink per TrackEntry.\r\n\r\nThis corresponds to this fix: https://github.com/ietf-wg-cellar/matroska-specification/pull/932", "submit_date": "2025-10-27", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8592", "doc-id": "RFC8972", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.7", "orig_text": "A Session-Reflector might be able to put only an \"SW Local\" (see\r\nTable 9) timestamp in the Follow-Up Timestamp field.", "correct_text": "A Session-Reflector might be able to put only an \"SW Local\" (see\r\nTable 9) timestamp in the Timestamp field of the reflected STAMP\r\npacket (Figure 2).", "notes": "Sorry for the back-to-back submissions -- I had these queued up and had delayed submission.\r\n\r\nIn an earlier version of the RFC, the sentence quoted in the Original Text read\r\n\r\n\"A Session-Reflector might be able to put in the Timestamp field only a \"SW Local\" (see Table 6) timestamp.\" \r\n\r\n(see, inter alia, https://datatracker.ietf.org/doc/html/draft-ietf-ippm-stamp-option-tlv-02#section-4.7)\r\n\r\nI have confirmed with one of the draft's original authors that a simple copy editing error was the cause of this tiny mistake. The sentence at the beginning of section 4.7 is meant to refer to the Timestamp field in the STAMP packet transmitted by the Session Reflector.\r\n\r\nThe earlier draft of this RFC specified that what is currently named the Follow-Up Timestamp field should be named the Timestamp field. The name collision resulted in an overzealous search/replace hiccup. I hope that having the record reflect the correct field name will save future developers from having to scratch their head like I did.\r\n\r\nAs usual, I sincerely appreciate the technical accuracy of the authors of the STAMP-related RFCs. As an implementer, the writing and specificity make it easy to build compliant software. I hope that this errata report is helpful for future implementers.\r\n\r\n==Verifier note\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/ippm/_sK9708NnI79IRif4AFN8LmmkZs/", "submit_date": "2025-10-04", "submitter_name": "William Hawkins", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2025-10-07 07:51:03"}, {"errata_id": "8593", "doc-id": "RFC8689", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Abstract", "orig_text": "If the REQUIRETLS option or TLS-Required message header field is used \r\nwhen sending a message, it asserts a request on the part of the message \r\nsender to override the default negotiation of TLS, either by requiring \r\nthat TLS be negotiated when the message is relayed or by requesting \r\nthat recipient-side policy mechanisms such as MTA-STS and DNS-Based \r\nAuthentication of Named Entities (DANE) be ignored when relaying a \r\nmessage for which security is unimportant.", "correct_text": "If the REQUIRETLS option or TLS-Required message header field is used\r\nwhen sending a message, it indicates the sender's preference for\r\ntransport-level encryption: REQUIRETLS mandates that the message be\r\nrelayed over a TLS-protected session, whereas the TLS-Required header\r\nfield allows the sender to request that recipient-side policy\r\nmechanisms, such as MTA-STS and DNS-based Authentication of Named\r\nEntities (DANE), be temporarily ignored \u2013 for example, so as to overcome\r\nconfiguration errors when delivery takes precedence and the\r\nsecurity of the message is unimportant.", "notes": "This wording is slightly misleading as the 'TLS-Required: No' header field is intended to ignore recipient-side policies, prioritizing delivery. However, it is not meant for messages \"for which security is unimportant\", but rather for cases like misconfigured recipient servers. The wording could be misinterpreted as allowing insecure delivery for convenience.\r\n\r\nThe corrected text clarifies the distinction between REQUIRETLS and TLS-Required.Emphasizes that TLS-Required is for exceptional cases (not general insecurity).\n --VERIFIER NOTES-- \n   It\u2019s important to say what the REQUIRETLS mechanisms do rather than to focus on how they might be used. Misconfigured recipient servers might be one example, but there might be other examples where security is indeed unimportant and the sender would rather that the message be potentially misdelivered than deal with bounce messages.\r\n\r\nThe focus of the standard is on the protocol itself vs how the mechanisms are used. Furthermore, this is only the document abstract it doesn't need to focus on use cases.", "submit_date": "2025-10-04", "submitter_name": "Liam W", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:14:38"}, {"errata_id": "8595", "doc-id": "RFC9754", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "If the client is not aware that the file is offline, it might\r\ninadvertently open the file to determine what type of file it is\r\naccessing.  By interrogating the new attribute fattr4_offline, a\r\nclient can predetermine the availability of the file, avoiding the\r\nneed to open it at all.  Being offline might also involve situations\r\nin which the file is archived in the cloud, i.e., there can be an\r\nexpense in both retrieving the file to bring it online and in sending\r\nthe file back to offline status.", "correct_text": "If the client is not aware that the file is offline, it might\r\ninadvertently open the file to determine what type of file it is\r\naccessing.  By interrogating the new attribute fattr4_offline, a\r\nclient can predetermine the availability of the file, avoiding the\r\nneed to open it at all.  Being offline might also involve situations\r\nin which the file is archived in the cloud, i.e., there can be an\r\nexpense in both retrieving the file to bring it online and in sending\r\nthe file back to offline status.\r\n\r\nWhen a client reads file content, the file's OFFLINE attribute may\r\nchange from \"offline\" to \"online\". The NFSv4 protocol does not\r\nprovide a mechanism to change the attribute value from \"online\" to\r\n\"offline\".", "notes": "Section 2 is missing a clear indication that, via the NFSv4 protocol, the OFFLINE attribute is read-only. A table, similar to Table 4 in RFC 8881, should be added to the document.", "submit_date": "2025-10-08", "submitter_name": "Chuck Lever", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8596", "doc-id": "RFC7208", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.5", "orig_text": "The <ip>'s name is looked up using this procedure:\r\n\r\n   o  Perform a DNS reverse-mapping for <ip>: Look up the corresponding\r\n      PTR record in \"in-addr.arpa.\" if the address is an IPv4 address\r\n      and in \"ip6.arpa.\" if it is an IPv6 address.\r\n\r\n   o  For each record returned, validate the domain name by looking up\r\n      its IP addresses.  To prevent DoS attacks, the PTR processing\r\n      limits defined in Section 4.6.4 MUST be applied.  If they are\r\n      exceeded, processing is terminated and the mechanism does not\r\n      match.\r\n\r\n   o  If <ip> is among the returned IP addresses, then that domain name\r\n      is validated.\r\n\r\n   Check all validated domain names to see if they either match the\r\n   <target-name> domain or are a subdomain of the <target-name> domain.\r\n   If any do, this mechanism matches.  If no validated domain name can\r\n   be found, or if none of the validated domain names match or are a\r\n   subdomain of the <target-name>, this mechanism fails to match.  If a\r\n   DNS error occurs while doing the PTR RR lookup, then this mechanism\r\n   fails to match.  If a DNS error occurs while doing an A RR lookup,\r\n   then that domain name is skipped and the search continues.\r\n\r\n   This mechanism matches if\r\n\r\n   o  the <target-name> is a subdomain of a validated domain name, or\r\n\r\n   o  the <target-name> and a validated domain name are the same.\r\n\r\n   For example, \"mail.example.com\" is within the domain \"example.com\",\r\n   but \"mail.bad-example.com\" is not.", "correct_text": "The <ip>'s name is looked up using this procedure:\r\n\r\n   o  Perform a DNS reverse-mapping for <ip>: Look up the corresponding\r\n      PTR record in \"in-addr.arpa.\" if the address is an IPv4 address\r\n      and in \"ip6.arpa.\" if it is an IPv6 address.\r\n\r\n   o  For each record returned, filter the domain which either match\r\n      or are subdomain of <target-name> domain, validate the domain name\r\n      by looking up its IP addresses. To prevent DoS attacks, the PTR\r\n      processing limits defined in Section 4.6.4 MUST be applied.  If they are\r\n      exceeded, processing is terminated and the mechanism does not\r\n      match.\r\n\r\n   o  If <ip> is among the returned IP addresses, then that domain name\r\n      is validated.\r\n\r\n   Filter resolved domain names to see if they either match the\r\n   <target-name> domain or are a subdomain of the <target-name> domain.\r\n   If any do, validate the domain by looking up its IP address if any\r\n   of the IP match this mechanism matches.  If no domain name can\r\n   be found by reverse-mapping, or if none of the resolved domain\r\n   names match or are a subdomain of the <target-name>, this mechanism\r\n   fails to match.  If a DNS error occurs while doing the PTR RR lookup,\r\n   then this mechanism fails to match.  If a DNS error occurs while\r\n   doing an A RR lookup, then that domain name is skipped and the search continues.\r\n\r\n   This mechanism performs lookup if: \r\n\r\n   o  the resolved domain is subdomain of <target-name> domain, or\r\n\r\n   o  the <target-name> and a resolved domain name are the same.\r\n\r\n   For example, \"mail.example.com\" is within the domain \"example.com\",\r\n   but \"mail.bad-example.com\" is not.\r\n\r\n   The mechanism matches if any of the filtered domains has an <ip> among the returned IP addresses.\r\n\r\n   ", "notes": "As Errata: https://www.rfc-editor.org/errata/eid4751 points-out there is a conflict in description of ptr mechanism and later bullet point.\r\nAnd its efficient to filter out subdomains first and then perform lookup instead of other way around as recommended in the RFC.", "submit_date": "2025-10-10", "submitter_name": "Utkarsh Jaiswal", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8597", "doc-id": "RFC2812", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.3.1", "orig_text": "               =/ 14( SPACE middle ) [ SPACE [ \":\" ] trailing ]", "correct_text": "    params     =/ 14( SPACE middle ) [ SPACE [ \":\" ] trailing ]", "notes": "To comply with the ABNF specification and to be consistent with the other 'incremental alternative' rule definitions in the remainder of section 2.3.1, the <params> identifier should be present at the beginning of the rule definition.", "submit_date": "2025-10-11", "submitter_name": "John DeSilva", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:36:24"}, {"errata_id": "8622", "doc-id": "RFC8259", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4", "orig_text": "...The names within an object SHOULD be unique.", "correct_text": "Unknown, this contradicts the ECMA-404 specification.", "notes": "In both the ECMA-404 and the RFC 8259 specifications, it is stated that both descriptions should be considered equal. However, in RFC 8259 it is stated that names in an object should be unique, whereas in ECMA-404 it says in section 6 : \"The JSON syntax does not impose any restrictions on\r\nthe strings used as names, does not require that name strings be unique...\"\r\n\r\nThis seems to expose a contradiction between the two, expectedly equal specifications.\n --VERIFIER NOTES-- \n Consensus is to reject.\r\n\r\nsee https://mailarchive.ietf.org/arch/msg/json/reBGZ98FYQeyvfi-bWkFtzJPrdk/", "submit_date": "2025-10-31", "submitter_name": "F\u00f3ty\u00e9k R\u00f3bert", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 17:25:58"}, {"errata_id": "8600", "doc-id": "RFC9686", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.6.1", "orig_text": "   Whenever the network changes the Valid Lifetime of an existing\r\n   address by more than 1%, for example, by sending a Prefix Information\r\n   Option (PIO) [RFC4861] with a new Valid Lifetime, the client\r\n   calculates a new AddrRegRefreshInterval.\r\n\r\n---\r\n\r\n   *  The 1% tolerance ensures that the client will not refresh or\r\n      reschedule refreshes if the Valid Lifetime experiences minor\r\n      changes due to transmission delays or clock skew between the\r\n      client and the router(s) sending the RA.\r\n", "correct_text": "   Whenever the network changes the Valid Lifetime of an existing\r\n   address by more than 3s, for example, by sending a Prefix Information\r\n   Option (PIO) [RFC4861] with a new Valid Lifetime, the client\r\n   calculates a new AddrRegRefreshInterval.\r\n\r\n---\r\n\r\n   *  The 3s tolerance ensures that the client will not refresh or\r\n      reschedule refreshes if the Valid Lifetime experiences minor\r\n      changes due to transmission delays or clock skew between the\r\n      client and the router(s) sending the RA.", "notes": "Replace 1% tolerance with 3s tolerance.\r\n\r\nRationale: As the remaining lifetime approaches zero, the 1% tolerance also approaches zero which can trigger redundant address refreshes. This problem is exacerbated by potential integer rounding, where 1% of 99s could be rounded down to 0s.\r\nAndroid's implementation of this mechanism uses a 3s tolerance instead. Since both clock skew and transmission delays are independent from the address lifetime, using a static tolerance is more consistent and still follows the original intent of this mechanism.\r\n\r\n--- Verifier note (Eric Vyncke) ---\r\nSee the thread at https://mailarchive.ietf.org/arch/msg/dhcwg/j1XxAx2yNlmq_EA2M0Uc_pjIxMA/", "submit_date": "2025-10-14", "submitter_name": "Patrick Rohr", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2025-10-15 09:08:20"}, {"errata_id": "8601", "doc-id": "RFC6154", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "N/A", "correct_text": "Updates: 3501", "notes": "This RFC updates RFC 3501 (IMAP4rev1) by allowing servers to send LIST responses including flags such as \\Trash. That was previously forbidden (page 86): \"Server implementations MUST NOT generate flag-extension flags except as defined by future standard or standards-track revisions of this specification.\"\n --VERIFIER NOTES-- \nPer notes from the RFC authors, 6154 does not update 3501.", "submit_date": "2025-10-14", "submitter_name": "Jakob Kramer", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-10-14 23:29:54"}, {"errata_id": "8602", "doc-id": "RFC2418", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "Note that 51% of the working group does not qualify as \"rough consensus\" and 99% is better than rough.", "correct_text": "[nothing]", "notes": "This sentence is highly subject to misinterpretation and adds no concrete information of value.", "submit_date": "2025-10-14", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8603", "doc-id": "RFC2557", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14", "orig_text": "   [MIDCID]        Levinson, E., \"Content-ID and Message-ID Uniform\r\n                   Resource Locators\", RFC 2387, August 1998.", "correct_text": "   [MIDCID]        Levinson, E., \"Content-ID and Message-ID Uniform\r\n                   Resource Locators\", RFC 2392, August 1998.", "notes": "The RFC number was mixed up.", "submit_date": "2025-10-15", "submitter_name": "Jakob Kramer", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-01 19:26:20"}, {"errata_id": "8604", "doc-id": "RFC7989", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.4", "orig_text": "Each user in this example\r\n   goes through a two-step process of signaling to gain entry onto their\r\n   conference call, which the conference focus identifies as \"M\".", "correct_text": "Each user in this example\r\n   goes through a two-step process of signaling to gain entry onto their\r\n   conference call, which the conference focus identifies as \"M'\".", "notes": "Both Figure 4 and the subsequent paragraphs use M'.", "submit_date": "2025-10-16", "submitter_name": "Marc Petit-Huguenin", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-10-17 16:31:49"}, {"errata_id": "8607", "doc-id": "RFC3552", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "[In the metadata]\r\n<stream>IAB</stream>", "correct_text": "<stream>IETF</stream>", "notes": "BCPs, by definition, can only be in the IETF Stream. The fact that the IAB is an *author* of this document seems to have confused the RFC Editor when the \"stream\" metadata was retrofitted to the RFC index, some years after the RFC was published.", "submit_date": "2025-10-17", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8608", "doc-id": "RFC2850", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "[in metadata]\r\n<stream>IAB</stream>", "correct_text": "<stream>IETF</stream>", "notes": "The draft was sent for IETF Last Call in January 2000 [1], so there was clearly an IETF consensus process, and RFC 2026 makes it clear that BCPs are IETF community documents [2]. The fact that the IAB created the document [3] is beside the point.\r\n\r\n[1] https://mailarchive.ietf.org/arch/msg/ietf-announce-old/B7yoX03qpnS157ERkRE1taiHwTk/\r\n[2] https://www.rfc-editor.org/rfc/rfc2026.html#section-5\r\n[3] https://mailarchive.ietf.org/arch/msg/ietf-announce-old/dyt3ERlzLjaYi-P7WycSIyhCHL8/", "submit_date": "2025-10-17", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8623", "doc-id": "RFC9052", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "C.5.1", "orig_text": "MAC: AES-CMAC, ...", "correct_text": "MAC: AES-CBC-MAC, ...", "notes": "The actual message diagnostic uses the correct algorithm name, but the descriptive text calls it \"AES-CMAC\" which is a different algorithm (and one not currently in the IANA registry).\r\n\r\nSection C.6.1 has an identical typo.", "submit_date": "2025-10-31", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8616", "doc-id": "RFC9559", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "22", "orig_text": "   (via the CueClusterPosition element). Additional non-mandated\r\n   elements are part of the CuePoint element, such as CueDuration,\r\n   CueRelativePosition, CueCodecState, and others that provide any\r\n   Matroska Reader with additional information to use in the\r\n   optimization of seeking performance.", "correct_text": "   (via the CueClusterPosition element). Additional non-mandated\r\n   elements are part of the CuePoint element, such as CueDuration,\r\n   CueRelativePosition, CueCodecState, and others that provide any\r\n   Matroska Reader with additional information to use in the\r\n   optimization of seeking performance.\r\n\r\n   The absolute timestamp stored in CueTime corresponds to the sum of\r\n   the Cluster Timestamp and the Block Timestamp.  The CodecDelay,\r\n   DiscardPadding and SeekPreRoll are not taken in account.", "notes": "The CueTime was under specified. It wasn't clear what time elements should be included and excluded from that value.\r\n\r\nThis new chapter adds the missing part. It corresponds to this fix: https://github.com/ietf-wg-cellar/matroska-specification/pull/946", "submit_date": "2025-10-27", "submitter_name": "Steve Lhomme", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8617", "doc-id": "RFC8392", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "   NumericDate\r\n      The \"NumericDate\" term in this specification has the same meaning\r\n      and processing rules as the JWT \"NumericDate\" term defined in\r\n      Section 2 of [RFC7519], except that it is represented as a CBOR\r\n      numeric date (from Section 2.4.1 of [RFC7049]) instead of a JSON\r\n      number.  The encoding is modified so that the leading tag 1\r\n      (epoch-based date/time) MUST be omitted.\r\n", "correct_text": "   NumericDate\r\n      The \"NumericDate\" term in this specification has the same meaning\r\n      and processing rules as the JWT \"NumericDate\" term defined in\r\n      Section 2 of [RFC7519], except that it is represented as a finite\r\n      CBOR numeric date (from Section 2.4.1 of [RFC7049]) instead of a\r\n      JSON number.  The encoding is modified so that the leading tag 1\r\n      (epoch-based date/time) MUST be omitted.", "notes": "Section 2.4.1 of RFC7049 says that the value is a negative or positive integer or a floating point *number* (which does not include NaN floating pointing point values), but it does not say anything about floating point positive and negative infinity. This is likely to be missed by most implementers of RFC 8392.\r\n\r\n\r\nA JWT \"NumericDate\" was intended to mimic a value which can be expressed in JSON. JSON does not allow infinite values.\r\n\r\nIn addition, exp, nbf, and iat all share the same type. The iat is the \"issued at\" date. The idea of a creation date with an infinite value is nonsensical.", "submit_date": "2025-10-29", "submitter_name": "Rohan Mahy", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8619", "doc-id": "RFC9622", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.1.5", "orig_text": "      TransportProperties := ...\r\n      SecurityParameters  := ...\r\n\r\n      Preconnection := NewPreconnection(LocalSpecifier,\r\n                                        RemoteSpecifier,\r\n                                        TransportProperties,\r\n                                        SecurityProperties)\r\n      Listener := Preconnection.Listen()", "correct_text": "      TransportProperties := ...\r\n      SecurityParameters  := ...\r\n\r\n      Preconnection := NewPreconnection(LocalSpecifier,\r\n                                        RemoteSpecifier,\r\n                                        TransportProperties,\r\n                                        SecurityParameters)\r\n      Listener := Preconnection.Listen()", "notes": "There were four occurances in pseudocode of the variable name \"SecurityParameters\". The RFC is updated to replace each of these with the variable name \"SecurityParameters\", as used elsewhere in  this RFC.", "submit_date": "2025-10-30", "submitter_name": "Ingebrigt Hovind", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-01-20 10:29:33"}, {"errata_id": "8620", "doc-id": "RFC8188", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   The encrypted data in this example is the UTF-8-encoded string \"I am\r\n   the walrus\".  The input-keying material is the value \"yqdlZ-\r\n   tYemfogSmv7Ws5PQ\" (in base64url).  The 54-octet content body contains\r\n   a single record and is shown here using 71 base64url characters for\r\n   presentation reasons.\r\n\r\n   HTTP/1.1 200 OK\r\n   Content-Type: application/octet-stream\r\n   Content-Length: 54\r\n   Content-Encoding: aes128gcm\r\n\r\n   I1BsxtFttlv3u_Oo94xnmwAAEAAA-NAVub2qFgBEuQKRapoZu-IxkIva3MEB1PD-\r\n   ly8Thjg", "correct_text": "   The encrypted data in this example is the UTF-8-encoded string \"I am\r\n   the walrus\".  The input-keying material is the value \"yqdlZ-\r\n   tYemfogSmv7Ws5PQ\" (in base64url).  The 54-octet content body contains\r\n   a single record and is shown here using 72 base64url characters for\r\n   presentation reasons.\r\n\r\n   HTTP/1.1 200 OK\r\n   Content-Type: application/octet-stream\r\n   Content-Length: 54\r\n   Content-Encoding: aes128gcm\r\n\r\n   I1BsxtFttlv3u_Oo94xnmwAAEAAA-NAVub2qFgBEuQKRapoZu_ul1ATXXzhZ8IY\r\n   2l5S6w8cG", "notes": "The example is missing the padding delimiter octet.\r\n\r\nThe paragraph directly above this explicitly says it should have it.\r\n\r\n>   [...] This uses a\r\n>   record size of 4096 octets and no padding (just the single-octet\r\n>   padding delimiter), so only a partial record is present.\r\n\r\nAlso, without that the delimiter, the body is only 53 octets, not the 54 the description says it should be.\n --VERIFIER NOTES-- \nSee thread at https://mailarchive.ietf.org/arch/msg/httpbisa/7Qxw6sKj4kZGnyyGWQBbYjYDxNc/", "submit_date": "2025-10-30", "submitter_name": "Patrick Barrett", "verifier_id": "", "verifier_name": "Mike Bishop", "update_date": "2026-03-10 13:47:10"}, {"errata_id": "8621", "doc-id": "RFC8188", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "   HTTP/1.1 200 OK\r\n   Content-Length: 73\r\n   Content-Encoding: aes128gcm\r\n\r\n   uNCkWiNYzKTnBN9ji3-qWAAAABkCYTHOG8chz_gnvgOqdGYovxyjuqRyJFjEDyoF\r\n   1Fvkj6hQPdPHI51OEUKEpgz3SsLWIqS_uA", "correct_text": "   HTTP/1.1 200 OK\r\n   Content-Length: 74\r\n   Content-Encoding: aes128gcm\r\n\r\n   uNCkWiNYzKTnBN9ji3-qWAAAABkCYTHOG8chz_gnvgOqdGYovxyjuqRyJFjEDyoF\r\n   1Fvkj6hQPdPHfNE6ZBBGizjWQMll3XVvzJ8", "notes": "This is the same issue as Erata ID 8620 (https://www.rfc-editor.org/errata/eid8620), but for the next example.\r\n\r\nThis one I'm less sure about. The RFC never explicitly says whether the final padding delimiter is required or not, but, by my reading at least, does strongly imply it is required in several places.\r\n\r\nAssuming the final padding delimiter is required, this example should include it.\n --VERIFIER NOTES-- \nSee thread at https://mailarchive.ietf.org/arch/msg/httpbisa/7Qxw6sKj4kZGnyyGWQBbYjYDxNc/", "submit_date": "2025-10-30", "submitter_name": "Patrick Barrett", "verifier_id": "", "verifier_name": "Mike Bishop", "update_date": "2026-03-10 13:46:35"}, {"errata_id": "8631", "doc-id": "RFC8765", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.3.1", "orig_text": "n/a\r\n\r\nSee notes below", "correct_text": "n/a", "notes": "Hello,\r\n\r\nThis concerns the text in section 6.3.1. PUSH Message in the RFC. I'm puzzled about the text concerning the compression. I'll layout my concerns (without providing alternative text) and then point out some factual mistakes (I think) in this section.\r\n\r\nRFC 3597 section 4 states that only well-known RRs may be compressed, those are the RRs from 1035.\r\n\r\nSpecifically:\r\n\r\n> Future specifications for new RR types that contain domain names\r\n> within their RDATA MUST NOT allow the use of name compression for\r\n> those names, and SHOULD explicitly state that the embedded domain\r\n> names MUST NOT be compressed.\r\n\r\n> As noted in [RFC1123], the owner name of an RR is always eligible for compression.\r\n\r\nTaking this in consideration and the DSO is defining new \"RR\" types, where other RRs are the RDATA, the case can be made no compression should be allowed. RFC 6762 doesn't says it's updating RFC 3597, so that can not apply here.\r\n\r\nTaking this to the extreme I believe no compression should be allowed for any of these news types.\r\n\r\nSome factial observations:\r\n\r\nThe list of RR that require compressions is not correct:\r\n\r\n> NS, CNAME, PTR, DNAME, SOA, MX, AFSDB, RT, KX, RP, PX, SRV, NSEC\r\n\r\nDNAME, NSEC should not be in this list. SRV is doubtful, but I guess also not.\r\n\r\n\r\nAnd later, and more worrying:\r\n\r\n> Servers may generate PUSH messages up to a maximum DNS message length of 16,382 bytes,\r\n\r\nA DNS message has 16 bits for the length, giving it 64K of maximum length, compression is only up to 14 bits I think the two are confused here.\r\n\r\nKind Regards,\r\nMiek GIeben", "submit_date": "2025-11-12", "submitter_name": "Miek Gieben", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8634", "doc-id": "RFC8806", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "B.1", "orig_text": "view root {\r\n    match-destinations { 127.12.12.12; };\r\n    zone \".\" {\r\n        type slave;\r\n        file \"rootzone.db\";\r\n        notify no;\r\n        masters {\r\n            199.9.14.201;         # b.root-servers.net\r\n            192.33.4.12;          # c.root-servers.net\r\n            199.7.91.13;          # d.root-servers.net\r\n            192.5.5.241;          # f.root-servers.net\r\n            192.112.36.4;         # g.root-servers.net\r\n            193.0.14.129;         # k.root-servers.net\r\n            192.0.47.132;         # xfr.cjr.dns.icann.org\r\n            192.0.32.132;         # xfr.lax.dns.icann.org\r\n            2001:500:200::b;      # b.root-servers.net\r\n            2001:500:2::c;        # c.root-servers.net\r\n            2001:500:2d::d;       # d.root-servers.net\r\n            2001:500:2f::f;       # f.root-servers.net\r\n            2001:500:12::d0d;     # g.root-servers.net\r\n            2001:7fd::1;          # k.root-servers.net\r\n            2620:0:2830:202::132; # xfr.cjr.dns.icann.org\r\n            2620:0:2d0:202::132;  # xfr.lax.dns.icann.org\r\n        };\r\n    };\r\n};\r\n\r\nview recursive {\r\n    dnssec-validation auto;\r\n    allow-recursion { any; };\r\n    recursion yes;\r\n    zone \".\" {\r\n        type static-stub;\r\n        server-addresses { 127.12.12.12; };\r\n    };\r\n};", "correct_text": "// Warning:\r\n// Error handling and transitional states of a server with this\r\n// configuration do not conform to the requirements given in\r\n// this document.\r\n\r\nview root {\r\n    match-destinations { 127.12.12.12; };\r\n    zone \".\" {\r\n        type slave;\r\n        file \"rootzone.db\";\r\n        notify no;\r\n        masters {\r\n            199.9.14.201;         # b.root-servers.net\r\n            192.33.4.12;          # c.root-servers.net\r\n            199.7.91.13;          # d.root-servers.net\r\n            192.5.5.241;          # f.root-servers.net\r\n            192.112.36.4;         # g.root-servers.net\r\n            193.0.14.129;         # k.root-servers.net\r\n            192.0.47.132;         # xfr.cjr.dns.icann.org\r\n            192.0.32.132;         # xfr.lax.dns.icann.org\r\n            2001:500:200::b;      # b.root-servers.net\r\n            2001:500:2::c;        # c.root-servers.net\r\n            2001:500:2d::d;       # d.root-servers.net\r\n            2001:500:2f::f;       # f.root-servers.net\r\n            2001:500:12::d0d;     # g.root-servers.net\r\n            2001:7fd::1;          # k.root-servers.net\r\n            2620:0:2830:202::132; # xfr.cjr.dns.icann.org\r\n            2620:0:2d0:202::132;  # xfr.lax.dns.icann.org\r\n        };\r\n    };\r\n};\r\n\r\nview recursive {\r\n    dnssec-validation auto;\r\n    allow-recursion { any; };\r\n    recursion yes;\r\n    zone \".\" {\r\n        type static-stub;\r\n        server-addresses { 127.12.12.12; };\r\n    };\r\n};", "notes": "This requirement is not met by the listed configuration:\r\nIn a resolver that is using an internal service for the root zone, if the contents of the root zone cannot be refreshed before the expire time in the SOA, the resolver MUST immediately switch to using non-local root servers.\r\n\r\nThat is a feature (= intended behavior) of the listed configuration, not a bug in implementation.\r\n\r\nAlso, resolution will fail during server startup - before root zone is transferred for the first time. I would not be surprised if other edge cases are also non-conformant.\r\n\r\n==Verifier note===\r\n\r\nRefer to the authors check at: https://mailarchive.ietf.org/arch/msg/dnsop/wDPwMG-_6GElzDqS7IdzK5C_8dM/", "submit_date": "2025-11-14", "submitter_name": "Petr \u0160pa\u010dek", "verifier_id": "", "verifier_name": "Mohamed BOUCADAIR", "update_date": "2025-11-17 16:39:22"}, {"errata_id": "8635", "doc-id": "RFC9698", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5", "orig_text": "   S: * OK [CAPABILITY IMAP4rev2 JMAPACCESS] done\r\n   S: 2 OK done\r\n   C: 2b JMAPACCESS\r\n   S: * JMAPACCESS \"https://example.com/.well-known/jmap\"\r\n   S: 2b OK done", "correct_text": "   S: * OK [CAPABILITY IMAP4rev2 JMAPACCESS] done\r\n   S: 2 OK done\r\n   C: 2b GETJMAPACCESS\r\n   S: * JMAPACCESS \"https://example.com/.well-known/jmap\"\r\n   S: 2b OK done", "notes": "Example 2 incorrectly uses \"JMAPACCESS\" as the command when it should be \"GETJMAPACCESS\".", "submit_date": "2025-11-14", "submitter_name": "Matt Diephouse", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2025-11-21 18:46:42"}, {"errata_id": "8655", "doc-id": "RFC8392", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.2.2", "orig_text": "a4205820403697de87af64611c1d32a05dab0fe1fcb715a86ab435f1ec99192d\r\n795693880104024c53796d6d6574726963323536030a", "correct_text": "a4205820403697de87af64611c1d32a05dab0fe1fcb715a86ab435f1ec99192d\r\n795693880104024c53796d6d65747269633235360304", "notes": "The key advertises algorithm number 10 (AES-CCM-16-64-128) instead of 4 (HMAC 256/64). The last byte needs to change from 0a to 04 to match the \"/ alg /  3: 4 / HMAC 256/64 /\" CBOR diagnostic.", "submit_date": "2025-11-25", "submitter_name": "Dridi Boukelmoune", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8658", "doc-id": "RFC8794", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11.1.6.12", "orig_text": "The recurring attribute is OPTIONAL. If the recurring attribute is not\r\npresent, then the EBML Element is not an Identically Recurring Element.", "correct_text": "The recurring attribute is OPTIONAL. If the recurring attribute is\r\nnot set to true, then the EBML Element is not an Identically Recurring\r\nElement.", "notes": "The recurring attribute is OPTIONAL. If recurring is present and set to false, then \r\nthe EBML Element is not an Identically Recurring Element.\n --VERIFIER NOTES-- \nIf the attribute is present, the recurring aspect of the element is the value set in the attribute. The text  does not need to mention it.\r\n\r\nThe original text covers the case that the attribute is not present, in which case the default needs to be specified, as it is in the original text. This follows the same construction used for most of the other attributes in this section.", "submit_date": "2025-11-26", "submitter_name": "P\u00e9tur Ingi Egilsson", "verifier_id": "", "verifier_name": "Charles Eckel", "update_date": "2026-04-29 14:49:48"}, {"errata_id": "8657", "doc-id": "RFC6664", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "English ", "correct_text": "Old English ", "notes": "old school English", "submit_date": "2025-11-26", "submitter_name": "Paul Rodriguez", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8668", "doc-id": "RFC8878", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1.1.3.1.4", "orig_text": "[...] For Treeless_Literals_Block, the Huffman table comes from\r\nthe previously compressed literals block, or from a dictionary; [...]", "correct_text": "[...] For Treeless_Literals_Block, the Huffman table comes from\r\nthe previous Compressed_Literals_Block, or from a dictionary; [...]", "notes": "The corrected text follows the description of Treeless_Literals_Block in section \"3.1.1.3.1.1. Literals_Section_Header\":\r\n\r\n\"Treeless_Literals_Block:\r\n    This is a Huffman-compressed block, using the Huffman tree from the previous\r\n    Compressed_Literals_Block or a dictionary if there is no previous Huffman-compressed\r\n    literals block. [...]\"\r\n\r\nAt the very least, the \"previously\" in the original text should be replaced by \"previous\".", "submit_date": "2025-12-03", "submitter_name": "Dominic Etienne Charrier", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8642", "doc-id": "RFC8636", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "8.4.2", "orig_text": "OLD:\r\n\r\n   key-material: Length = 24 bytes, Hex Representation =\r\n   D3C78A79 D65213EF E9A826F7 5DFB01F7 2362FB16 FB01DAD6\r\n\r\n   key: Length = 32 bytes, Hex Representation =\r\n   D3C78A79 D65213EF E9A826F7 5DFB01F7 2362FB16 FB01DAD6", "correct_text": "NEW:\r\n\r\n   key-material: Length = 21 bytes, Hex Representation =\r\n   D3C78B78 D75313E9 A926F75D FB012363 FA17FA01 DB\r\n\r\n   key: Length = 24 bytes, Hex Representation =\r\n   D3C78A79 D65213EF E9A826F7 5DFB01F7 2362FB16 FB01DAD6", "notes": "This erratum supersedes https://www.rfc-editor.org/errata/eid8640.", "submit_date": "2025-11-18", "submitter_name": "Nico Williams", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-11-19 16:52:27"}, {"errata_id": "8643", "doc-id": "RFC8636", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "9.  Security Considerations\r\n", "correct_text": "Section 8.5 Test Vector for SHA-384, enctype 16\r\n\r\n8.5.1.  Specific Inputs\r\n\r\n   algorithm-id: (id-pkinit-kdf-ah-sha384) Length = 8 bytes, Hex\r\n   Representation = 2B060105 02030604\r\n\r\n   enctype: (aes256-cts-hmac-sha1-96) Length = 1 byte, Decimal\r\n   Representation = 18\r\n\r\n8.5.2.  Outputs\r\n\r\n   key-material: Length = 32 bytes, Hex Representation =\r\n   2DA9824C A429CCDA EB553A09 72734673 0A0A6C6A 89A01B3C 2E4987FC 70800DA2\r\n\r\n   key: Length = 32 bytes, Hex Representation =\r\n   2DA9824C A429CCDA EB553A09 72734673 0A0A6C6A 89A01B3C 2E4987FC 70800DA2\r\n\r\n9.  Security Considerations\r\n", "notes": "RFC 8636 specifies several KDFs, but for one of them it provides no test vectors.  This erratum corrects that oversight.  See posts on the KITTEN WG mailing list for confirmation that two implementations agree on this new test vector.\r\n\r\nPerhaps an erratum is not an acceptable way to add test vectors to an RFC, in which case feel free to reject this erratum.", "submit_date": "2025-11-18", "submitter_name": "Nico Williams", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-11-19 16:53:25"}, {"errata_id": "8645", "doc-id": "RFC9171", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.8", "orig_text": "4.2.8.  Block-Type-Specific Data\r\n\r\n   Block-type-specific data in each block (other than the primary block)\r\n   SHALL be the applicable CBOR encoding of the content of the block.\r\n   Details of this representation are included in the specification\r\n   defining the block type.\r\n\r\n", "correct_text": "4.2.8.  Block-Type-Specific Data\r\n\r\nBlock-type-specific data in each block (other than the primary block) \r\nSHALL be represented as a single definite-length CBOR byte string \r\nencoding the block-specific content of the block. Details of this \r\nencoding are included in the specification defining the block type \r\nand may use CBOR or any other form of encoding.\r\n", "notes": "According to 4.3.2 the only applicable CBOR representation for block-type-specific data is a definite-length byte string. The current text has lead to some misunderstandings that any CBOR item could be used as block-type-specific data. This is especially problematic for BPSEC which is assuming a CBOR byte string. The CDDL in Appendix B of RFC 9171 correctly describes block-type-specific-data as CBOR byte string.", "submit_date": "2025-11-19", "submitter_name": "Felix Flentge", "verifier_id": "", "verifier_name": null, "update_date": "2025-11-21 16:43:16"}, {"errata_id": "8654", "doc-id": "RFC9293", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.1", "orig_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Data |       |C|E|U|A|P|R|S|F|                               |\r\n   | Offset| Rsrvd |W|C|R|C|S|S|Y|I|            Window             |\r\n   |       |       |R|E|G|K|H|T|N|N|                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n[...]\r\n   Reserved (Rsrvd):  4 bits\r\n", "correct_text": "   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Data |R|R|R|R|C|E|U|A|P|R|S|F|                               |\r\n   | Offset|4|5|6|7|W|C|R|C|S|S|Y|I|            Window             |\r\n   |       | | | | |R|E|G|K|H|T|N|N|                               |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n[...]\r\n   R4, R5, R6, R7:  1 bit each\r\n", "notes": "The packet diagram does not match the prose: this document in Section 6 \"IANA Considerations\" defines bits 4-7 as distinct bits rather than a single 4-bit field.\r\n\r\nThis definition as distinct bits is new to this document compared to the two previous TCP specifications (RFC 3168 and RFC 793), each of which defines the Reserved field of the TCP header as a single field, 4-bit and 6-bit respectively, and does not define any data structure for it.  Likewise, RFC 3168 Section 6.1 \"TCP\" says: \"This specification of the ECN Field leaves the Reserved field as a 4-bit field using bits 4-7.\"\r\n\r\nThis way, when the packet diagram shows the reserved part of the TCP header as a single field, it is consistent with the prose in RFC 3168 and RFC 793, but is an error in this document.\n --VERIFIER NOTES-- \nThis  does not impact the functioning of the protocol, or ability to implement properly. Other RFCs might continue to update the field.", "submit_date": "2025-11-22", "submitter_name": "Denis Ovsienko", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-01-20 10:17:47"}, {"errata_id": "8651", "doc-id": "RFC8636", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.4.2", "orig_text": "   key-material: Length = 24 bytes, Hex Representation =\r\n   D3C78A79 D65213EF E9A826F7 5DFB01F7 2362FB16 FB01DAD6\r\n\r\n   key: Length = 32 bytes, Hex Representation =\r\n   D3C78A79 D65213EF E9A826F7 5DFB01F7 2362FB16 FB01DAD6\r\n", "correct_text": "   key-material: Length = 24 bytes, Hex Representation =\r\n   D3C78B78 D75313E9 A926F75D FB012363 FA17FA01 DB20F24E\r\n\r\n   key: Length = 32 bytes, Hex Representation =\r\n   D3C78A79 D65213EF E9A826F7 5DFB01F7 2362FB16 FB01DAD6\r\n", "notes": "The Kerberos random2key function (see RFCs 3961 and 3962) is the identity function for the AES enctypes, but for 3DES it is not.  The \"key-material\" output is supposed to the output of the KDF prior to application of the Kerberos random2key function.  The third test vector in section 8 (\"Test Vector for SHA-512, enctype 16\"), the one in section 8.4, is for the 3DES enctype because enctype 16 is the KRB5_ENCTYPE_DES3_CBC_SHA1 enctype (see RFCs 4120 and 3961), and as you can see the expected key length is 24 bytes (as expected for a 3DES-based enctype).\r\n\r\nTherefore the \"key-material\" output in section 8.4.2 can be expected to differ from the \"key\" output.  And in my (work in progress) code in Heimdal for implementing RFC 8636 so it is.  The key-material in the corrected text is the correct key material, though I should also check this in MIT Kerberos.", "submit_date": "2025-11-17", "submitter_name": "Nico Williams", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8637", "doc-id": "RFC7628", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1", "orig_text": "[Negotiate TLS...]\r\nC: t1 AUTH OAUTHBEARER bixhPXVzZXJAZXhhbXBsZS5jb20sAWhvc3Q9c2Vy\r\n      dmVyLmV4YW1wbGUuY29tAXBvcnQ9NTg3AWF1dGg9QmVhcmVyIHZGOWRmd\r\n      DRxbVRjMk52YjNSbGNrQmhiSFJoZG1semRHRXVZMjl0Q2c9PQEB\r\nS: 235 Authentication successful.", "correct_text": "[Negotiate TLS...]\r\nC: AUTH OAUTHBEARER bixhPXVzZXJAZXhhbXBsZS5jb20sAWhvc3Q9c2VydmV\r\n      yLmV4YW1wbGUuY29tAXBvcnQ9NTg3AWF1dGg9QmVhcmVyIHZGOWRmdDRx\r\n      bVRjMk52YjNSbGNrQmhiSFJoZG1semRHRXVZMjl0Q2c9PQEB\r\nS: 235 Authentication successful.", "notes": "Unlike IMAP, in SMTP a command is not prefixed with a tag.\r\n", "submit_date": "2025-11-16", "submitter_name": "Ziqin Wang", "verifier_id": "", "verifier_name": null, "update_date": "2025-11-17 15:14:12"}, {"errata_id": "8639", "doc-id": "RFC8636", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6", "orig_text": "   o  The algorithm identifier (algorithmID) input parameter is the\r\n      identifier of the respective KDF.  For example, this is id-pkinit-\r\n      kdf-ah-sha1 if the KDF uses SHA-1 as the hash.", "correct_text": "   o  The algorithm identifier (algorithmID) input parameter is the\r\n      identifier of the respective KDF with absent parameters.  For\r\n      example, this is id-pkinit-kdf-ah-sha1 if the KDF uses SHA-1\r\n      as the hash.", "notes": "The negotiation of KDF in PKINIT as of RFC 8636 uses an exchange of OBJECT IDENTIFIER values, not AlgorithmIdentifier values, but when a value of the OtherInfo type is created and serialized we need to know what parameters to use for the algorithmID member of the OtherInfo value, and this is not specified anywhere.\r\n\r\nElsewhere in RFC 8636 we see this text:\r\n\r\n   The KDFAlgorithmId structure contains an object identifier that\r\n   identifies a KDF.  The algorithm of the KDF and its parameters are\r\n   defined by the corresponding specification of that KDF.\r\n\r\nbut the KDFs are all specified in RFC 8636 itself and no parameters are specified for the KDFs.  There is an reference to NIST.SP.800-56Ar3 in section 6 of RFC 8636:\r\n\r\n   The KDF algorithm described in this document (based on [SP80056A])\r\n   can be implemented using any cryptographic hash function.\r\n\r\nbut NIST.SP.800-56Ar3 does not specify parameters to the KDFs either.\r\n\r\nThe question then is: what shall the parameters be set to in the OtherInfo algorithmID identifying the KDF?  There are two options: exclude the parameters member (it is OPTIONAL after all), or include it with the DER encoding of NULL (common for some algorithms)?\r\n\r\nLooking at MIT Kerberos I believe the parameters member is left absent, therefore that is what implementators should do.", "submit_date": "2025-11-16", "submitter_name": "Nico Williams", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2025-11-17 17:07:38"}, {"errata_id": "8652", "doc-id": "RFC9554", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.9", "orig_text": "Example(s):\r\n\r\n    SOCIALPROFILE;SERVICE-TYPE=Mastodon:https://example.com/@foo\r\n", "correct_text": "Example(s):\r\n\r\n    SOCIALPROFILE;SERVICE-TYPE=\"Mastodon\":https://example.com/@foo\r\n", "notes": "The description of the SERVICE-TYPE parameter states that its value is case-sensitive. RFC 6350 allows case-sensitive, unquoted parameter values but its exemplifies the only case-sensitive parameter SORT-AS with a quoted parameter value. Doing so for the SERVICE-TYPE parameter too indicates to implementers to use quoted strings and is likely to improve interoperability.", "submit_date": "2025-11-21", "submitter_name": "Robert Stepanek", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-12-03 00:19:25"}, {"errata_id": "8653", "doc-id": "RFC8209", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "Encoding options for the common name that are supported are printableString and UTF8String.", "correct_text": "The common name attribute is encoded as PrintableString (RFC 6487, Section 4.5).", "notes": "In all other RPKI object profiles a restricted character string type (PrintableString) is used in both issuer & subject name attributes, with the exception of the BGPsec certificate profile where an unjustified exception seems to have slipped in. In this context it is an unnecessary complication for implementers to have to make special accommodations for multibyte characters in some aspects of the BGPsec certificate profile.\r\n\r\nVerification Notes: This looks to be correct. Refer - https://mailarchive.ietf.org/arch/msg/sidr/40DYwygOL2TMzBV6NA70rXzkoPk/\r\n", "submit_date": "2025-11-21", "submitter_name": "Job Snijders", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2025-12-01 07:00:48"}, {"errata_id": "8660", "doc-id": "RFC8636", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "5.  X.509 Certificate Signer Algorithm Agility\r\n\r\n   Section 3.2.2 of [RFC4556] is updated to add optional typed data to\r\n   the KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED error.  When a KDC conforming\r\n   to this specification returns this error, it MAY send a list of\r\n   digest algorithms acceptable to the KDC for use by the certification\r\n   authority (CA) in signing the client's X.509 certificate in\r\n   decreasing order of preference.  This is accomplished by including a\r\n   TD_CERT_DIGEST_ALGORITHMS typed data element in the error data.  The\r\n   corresponding data contains the ASN.1 DER encoding of the TD-CERT-\r\n   DIGEST-ALGORITHMS-DATA structure defined as follows:\r\n\r\n   td-cert-digest-algorithms INTEGER ::= 112\r\n\r\n   TD-CERT-DIGEST-ALGORITHMS-DATA ::= SEQUENCE {\r\n           allowedAlgorithms [0] SEQUENCE OF AlgorithmIdentifier,\r\n                      -- Contains the list of CMS algorithm [RFC5652]\r\n                      -- identifiers indicating the digest algorithms\r\n                      -- that are used by the CA to sign the client's\r\n                      -- X.509 certificate and are acceptable to the KDC\r\n                      -- in the process of validating the client's X.509\r\n                      -- certificate in decreasing order of\r\n                      -- preference.\r\n           rejectedAlgorithm [1] AlgorithmIdentifier OPTIONAL,\r\n                      -- This identifies the digest algorithm that was\r\n                      -- used to sign the client's X.509 certificate and\r\n                      -- has been rejected by the KDC in the process of\r\n                      -- validating the client's X.509 certificate\r\n                      -- [RFC5280].\r\n           ...\r\n   }\r\n\r\n   The KDC fills in the allowedAlgorithm field with the list of\r\n   algorithm [RFC5652] identifiers indicating digest algorithms that are\r\n   used by the CA to sign the client's X.509 certificate and are\r\n   acceptable to the KDC in the process of validating the client's X.509\r\n   certificate in decreasing order of preference.  The rejectedAlgorithm\r\n   field identifies the signing algorithm for use in signing the\r\n   client's X.509 certificate that has been rejected by the KDC in the\r\n   process of validating the client's certificate [RFC5280].\r\n", "correct_text": "5.  X.509 Certificate Signer Algorithm Agility\r\n\r\n   Section 3.2.2 of [RFC4556] is updated to add optional typed data to\r\n   the KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED error.  When a KDC conforming\r\n   to this specification returns this error, it MAY send a list of\r\n   signature and/or digest algorithms acceptable to the KDC for use by the certification\r\n   authority (CA) in signing the client's X.509 certificate in\r\n   decreasing order of preference.  This is accomplished by including a\r\n   TD_CERT_DIGEST_ALGORITHMS typed data element in the error data.  The\r\n   corresponding data contains the ASN.1 DER encoding of the TD-CERT-\r\n   DIGEST-ALGORITHMS-DATA structure defined as follows:\r\n\r\n   td-cert-digest-algorithms INTEGER ::= 112\r\n\r\n   TD-CERT-DIGEST-ALGORITHMS-DATA ::= SEQUENCE {\r\n           allowedAlgorithms [0] SEQUENCE OF AlgorithmIdentifier,\r\n                      -- Contains the list of CMS algorithm [RFC5652]\r\n                      -- identifiers indicating the signature and/or digest algorithms\r\n                      -- that are used by the CA to sign the client's\r\n                      -- X.509 certificate and are acceptable to the KDC\r\n                      -- in the process of validating the client's X.509\r\n                      -- certificate in decreasing order of\r\n                      -- preference.\r\n           rejectedAlgorithm [1] AlgorithmIdentifier OPTIONAL,\r\n                      -- This identifies the signature or digest algorithm that was\r\n                      -- used to sign the client's X.509 certificate and\r\n                      -- has been rejected by the KDC in the process of\r\n                      -- validating the client's X.509 certificate\r\n                      -- [RFC5280].\r\n           ...\r\n   }\r\n\r\n   The KDC fills in the allowedAlgorithm field with the list of\r\n   algorithm [RFC5652] identifiers indicating signature and/or digest algorithms that are\r\n   used by the CA to sign the client's X.509 certificate and are\r\n   acceptable to the KDC in the process of validating the client's X.509\r\n   certificate in decreasing order of preference.  The rejectedAlgorithm\r\n   field identifies the signing algorithm for use in signing the\r\n   client's X.509 certificate that has been rejected by the KDC in the\r\n   process of validating the client's certificate [RFC5280].\r\n", "notes": "Not all signature algorithms involve a digest algorithm!  At least one PQ algorithm, and also EdDSA (ED25519, Ed448), do not.  This is a problem we're also facing with RFC 5929's tls-server-end-point channel bindings type as well.  Here fortunately we have an easy fix: just allow the KDC to list not just _disgest_ algorithms but also _signature_ algorithms.\r\n\r\nPerhaps this is too much change to make via errata, but it's very small, and I don't think we should have to publish a new RFC for this.  Also, this is quite an obvious change, and it's certainly backwards-compatible and interoperable since a PKINIT client wouldn't refuse to continue due to seeing AlgorithmIdentifiers for algorithms other than digests in the KDC's TD-CERT-DIGEST-ALGORITHMS-DATA e-data.  Currently neither MIT Kerberos nor Heimdal have any support for this part of RFC 8636 anyways (they ignore the TD-CERT-DIGEST-ALGORITHMS-DATA e-data), but this functionality would be useful in the event that the user has multiple certificates to choose from, all with different signature algorithms yet all for the same user ID, and this could easily become a critical feature in due time.", "submit_date": "2025-11-28", "submitter_name": "Nico Williams", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8661", "doc-id": "RFC8789", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "The IETF MUST NOT publish RFCs on the IETF Stream without establishing\r\nrough consensus for publication.", "correct_text": "Add: \"This includes reclassifying as a standard, BCP or Historic.\"", "notes": "This is a friendly amendment to Erratum 8091", "submit_date": "2025-11-28", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8848", "doc-id": "RFC8832", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "   This message is sent in response to a DATA_CHANNEL_OPEN_RESPONSE\r\n   message.  It is sent on the stream used for user messages using the\r\n   data channel.  Reception of this message tells the opener that the\r\n   data channel setup handshake is complete.", "correct_text": "   This message is sent in response to a DATA_CHANNEL_OPEN message.  \r\n   It is sent on the stream used for user messages using the data \r\n   channel. Reception of this message tells the opener that the\r\n   data channel setup handshake is complete.", "notes": "RFC 8832 defines only two message types: DATA_CHANNEL_OPEN (0x03) and DATA_CHANNEL_ACK (0x02). There is no DATA_CHANNEL_OPEN_RESPONSE message defined anywhere in the document. The reference appears in early drafts of the protocol (draft-jesup-rtcweb-data-protocol-00, March 2012), which defined a DATA_CHANNEL_OPEN_RESPONSE (msg_type 1) as a separate message. This seems to have been replaced with DATA_CHANNEL_ACK. Section 6 (Procedures) correctly describes the ACK as a response to the OPEN message, confirming this is an editorial oversight.", "submit_date": "2026-03-20", "submitter_name": "JC Yan", "verifier_id": "", "verifier_name": null, "update_date": "2026-03-31 19:42:15"}, {"errata_id": "8662", "doc-id": "RFC8186", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   o  The Control-Client MUST set the PTPv2 Timestamp flag value to 1 in\r\n      the Modes field in the Set-Up-Response message if the Server\r\n      advertised that the Session-Reflector has the ability to use the\r\n      PTPv2 format for timestamps.  Otherwise, the flag MUST be set to\r\n      0.", "correct_text": "   o  The Control-Client MUST set the PTPv2 Timestamp flag value to 1 in\r\n      the Modes field in the Set-Up-Response message if the Server\r\n      advertised that the Session-Reflector has the ability to use the\r\n      PTPv2 format for timestamps and the Session-Sender can also support\r\n      and wish to use this format. Otherwise, the flag MUST be set to 0.", "notes": "According to the original text, the Control-Client HAVE TO respond with a Timestamp flag of 1 in the Set-Up-Response message if it received that flag from the Server, regardless of whether the Session-Sender support the PTP format or not. This should not be the case, and the Control-Client should be allowed to reject using the PTP format (by setting its Timestamp flag to 0) if the Session-Sender doesn't support or doesn't wish to use it.", "submit_date": "2025-12-01", "submitter_name": "Long Dao", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2025-12-08 23:58:41"}, {"errata_id": "8663", "doc-id": "RFC9483", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.1.4", "orig_text": "The prerequisites are the same as given in Section 4.1.2.", "correct_text": "The prerequisites are the same as given in Sections 4.1.1 to 4.1.3.", "notes": "For the PKCS#10 variants for section 4.1.1 & 4.1.3 it does not make sense to have the same prerequisites as 4.1.2.", "submit_date": "2025-12-01", "submitter_name": "Thomas van der Burgt", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:13:07"}, {"errata_id": "8664", "doc-id": "RFC2418", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "Note that 51%\r\nof the working group does not qualify as \"rough consensus\" and 99% is\r\nbetter than rough.  It is up to the Chair to determine if rough\r\nconsensus has been reached.", "correct_text": "Note that 51%\r\nof those expressing as a view may not qualify as \"rough consensus\" and 99% is\r\nbetter than rough.  It is up to the Chair to determine if rough\r\nconsensus has been reached.", "notes": "Only those who have a point of view are ever counted in the consensus process, and 51% MAY be rough consensus, depending on the circumstances.", "submit_date": "2025-12-01", "submitter_name": "Eliot Lear", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8665", "doc-id": "RFC9750", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.3.3", "orig_text": "   In that case, the compromised endpoint needs to refresh its\r\n   credentials and invalidate the old credentials before the attacker\r\n   will be unable to authenticate messages.", "correct_text": "   In that case, the compromised endpoint needs to refresh its\r\n   credentials and invalidate the old credentials before the attacker\r\n   will be unable to authenticate messages.", "notes": "Logical error - the current text contradicts the intended meaning", "submit_date": "2025-12-01", "submitter_name": "Damian", "verifier_id": "", "verifier_name": null, "update_date": "2026-01-12 22:25:36"}, {"errata_id": "8666", "doc-id": "RFC9014", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.4.1.", "orig_text": "- The Ethernet-tag value will be kept from the received NLRI the\r\n  received NLRI.", "correct_text": "- The Ethernet-tag value will be kept from the received NLRI.", "notes": "\"the received NLRI\" got repeated twice", "submit_date": "2025-12-02", "submitter_name": "Long Dao", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2025-12-03 15:37:12"}, {"errata_id": "8667", "doc-id": "RFC2046", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.2", "orig_text": "   The complete US-ASCII character set is listed in ANSI X3.4- 1986.", "correct_text": "   In US-ASCII octet sequences, the highest order bit (most significant\r\n   bit) in each octet is always zero.  The correct interpretation of the\r\n   remaining 7 bits in each octet is listed in ANSI X3.4-1986.", "notes": "Section 2.2 of RFC 2045 defines the term \u201ccharacter set\u201d:\r\n\r\n>    The term \"character set\" is used in MIME to refer to a method of\r\n>    converting a sequence of octets into a sequence of characters.\r\n\r\nRFC 2046 says that US-ASCII is a character set and points to ANSI X3.4-1986 for the definition of that character set. Unfortunately, ANSI X3.4-1986 does not give a complete definition of a character set because ANSI X3.4-1986 is not about sequences of octets. Section 4 of ANSI X3.4-1986 says:\r\n\r\n> The bits of the bit combinations of the 7-bit code are\r\n> identified by b\u2087, b\u2086, b\u2085, b\u2084, b\u2083, b\u2082, and b\u2081, where\r\n> b\u2087 is the highest order bit (most significant bit), and\r\n> b\u2081 is the lowest order bit (least significant bit).\r\n\r\nANSI X3.4-1986 never mentions a b\u2088 bit, or what to do if you want to decode a stream of octets. It only alludes to octets in passing. Section 2.1.1 of ANSI X3.4-1986 says:\r\n\r\n>   2.1.1 Conforming Interchange. The data stream\r\n> comprising the exchange of information using the\r\n> coding of this standard is subject to the following rules.\r\n> Conforming interchange:\r\n>   (1) Shall be a sequence of 7-bit or 8-bit bit combin-\r\n> ations.\r\n>   (2) Shall use the names of all control characters as\r\n> specified in this standard.\r\n>   (3) Shall not include any bit combinations allo-\r\n> cated by this standard for any purpose other than that\r\n> defined in this standard, unless they represent func-\r\n> tions or elements of other coded character sets that\r\n> have been invoked by code extension in accordance\r\n> with ANSI X3.41-1974, subject to mutual agreement\r\n> between the interchange parties.\r\n\r\n(An 8-bit bit combination is an octet that contains character data. See section 3.2 of ANSI X3.4-1986.)\r\n\r\nUnfortunately, the rest of ANSI X3.4-1986 doesn\u2019t tell us how to handle sequences of 8-bit bit combinations. It only tells us how to handle 7-bit bit combinations. Section 9.2 of ANSI X3.41-1974 specifies that the highest order bit should be zero when storing ASCII in 8-bit bit combinations, but you don\u2019t have to implement anything from ANSI X3.41-1974 in order to properly implement ANSI X3.4-1986. In fact, ANSI X3.41-1974 is mostly about shift and escape sequences so most of it must not be implemented for US-ASCII. As section 4.1.2 of RFC 2046 says:\r\n\r\n>    All of these character sets are used as pure 7bit or 8bit sets\r\n>    without any shift or escape functions.\r\n\r\nAdditionally, there shouldn\u2019t have been a space after the hyphen in \u201cANSI X3.4- 1986\u201d.\r\n\r\nSee also: RFC 20.", "submit_date": "2025-12-02", "submitter_name": "Jason Yundt", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8669", "doc-id": "RFC4648", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "   The encoding process represents 24-bit groups of input bits as output\r\n   strings of 4 encoded characters.  Proceeding from left to right, a\r\n   24-bit input group is formed by concatenating 3 8-bit input groups.\r\n   These 24 bits are then treated as 4 concatenated 6-bit groups, each\r\n   of which is translated into a single character in the base 64\r\n   alphabet.", "correct_text": "   The encoding process represents 24-bit groups of input bits as output\r\n   strings of 4 encoded characters.  Proceeding from left to right, a\r\n   24-bit input group is formed by concatenating 3 8-bit input groups.\r\n   These 24 bits are then treated as 4 concatenated 6-bit groups, each\r\n   of which is translated into a single character in the base 64\r\n   alphabet. When an octet stream is encoded via the base 64 encoding, the\r\n   octet stream must be presumed to be ordered with the most-significant-\r\n   bit first.  That is, the first bit in the stream will be the high-\r\n   order bit in the first octet, the eighth bit will be the low-\r\n   order bit in the first octet, and so on.", "notes": "Section 6 (Base 32 Encoding) defines the bit order of an octet stream, while Section 4 does not.", "submit_date": "2025-12-03", "submitter_name": "Park Jaeon", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8672", "doc-id": "RFC6238", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2. Description", "orig_text": "The implementation of this algorithm MUST support a time value T larger than a 32-bit integer when it is beyond the year 2038.", "correct_text": "The implementation of this algorithm MUST feed the time value T as a 64-bit big-endian integer into the HMAC algorithm. Also the calculation \"T = (Current Unix time - T0) / X\" must be performed on 64-bit integers the prevent the year-2106-bug or year-2038-bug.\r\n\r\nor just\r\n\r\nThe implementation of this algorithm MUST feed the time value T as a 64-bit big-endian integer into the HMAC algorithm.", "notes": "The wording \"larger than a 32-bit integer\" is useless in the context. Using anything else than 64-bit big-endian integer results in bogus output and failure to login. The mention of the year 2038 is confusing and essentially off-topic in the light of above ie the fact that not using 64-bit big-endian integer breaks the thing immediately.\r\n\r\nAlso code line\r\n\r\nint offset = hash[hash.length - 1] & 0xf;\r\n\r\ndoes something presumably correct but not mentioned anywhere in RFC6238 nor in the linked RFC4226. In the light of the substantial number of severe faults beyond simple typo, it would be best to publish a new RFC fully replacing both RFC6238 and RFC4226.", "submit_date": "2025-12-06", "submitter_name": "Taylor H", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8673", "doc-id": "RFC2506", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.4 Registration tem", "orig_text": "3.4 Registration template\r\n\r\n   To: media-feature-tags@apps.ietf.org (Media feature tags mailing list)\r\n", "correct_text": "3.4 Registration template\r\n\r\n   To: media-feature-tags@ietf.org (Media feature tags mailing list)\r\n", "notes": "This is neither Editorial nor Technical but procedural.\r\n\r\nI am the owner of the media-feature-tags@ietf.org mailing list for many years, though I never hosted or created it.  The list is still available for media feature tag registration, but not at the apps.ietf.org domain any more, only at the ietf.org domain.\r\n\r\nNote: As of the processing of this errata, mail sent to media-feature-tags@apps.ietf.org will be redirected to the media-features-tags@ietf.org mailing list.", "submit_date": "2025-12-08", "submitter_name": "Lisa Dusseault", "verifier_id": "", "verifier_name": "Orie Steele", "update_date": "2025-12-09 14:50:20"}, {"errata_id": "8674", "doc-id": "RFC1480", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "APPENDIX-I", "orig_text": "                     APPENDIX-I:  US DOMAIN NAMES BNF\r\n                     ================================\r\n\r\n   <us-domain-name>    ::= <us-name><dot><us>\r\n\r\n   <us-name>           ::= <state-name><dot><state-code> |\r\n                           <fed-name><dot><fed>\r\n                           <dni-name><dot><dni>\r\n\r\n   <state-code>        ::= <the two-letter code of a state from the\r\n                            zip code directory>", "correct_text": "                     APPENDIX-I:  US DOMAIN NAMES BNF\r\n                     ================================\r\n\r\n   <us-domain-name>    ::= <us-name><dot><us>\r\n\r\n   <us-name>           ::= <state-name><dot><state-code> |\r\n                           <fed-name><dot><fed> |\r\n                           <dni-name><dot><dni>\r\n\r\n   <state-code>        ::= <the two-letter code of a state from the\r\n                            zip code directory>", "notes": "Missing a pipe after <fed-name><dot><fed>\r\n", "submit_date": "2025-12-10", "submitter_name": "Peter Briggs", "verifier_id": "", "verifier_name": "Mohamed BOUCADAIR", "update_date": "2025-12-17 08:56:43"}, {"errata_id": "8692", "doc-id": "RFC2142", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "   NNTP (see [[10]RFC977]), and <WEBMASTER@domain> for HTTP (see [[11]HTTP]).\r\n[\u2026]\r\n   WEBMASTER      HTTP                [[23]RFC 2068]\r\n   WWW            HTTP                Synonym for WEBMASTER   \r\n[\u2026]\r\n   [HTTP] Berners-Lee, T., et al, \"Hypertext Transfer Protocol --\r\n   HTTP/1.0\", [56]RFC 1945, May 1996.\r\n", "correct_text": "   NNTP (see [[10]RFC977]).\r\n[\u2026]\r\n[ \u2026 delete the other content shown \u2026]\r\n", "notes": "The authors mis-interpreted both RFC 1945 (HTTP 1.0) and 2068 (HTTP 1.1), in both which there is only one single mention of \u201cwebmaster@\u201d, and it is:\r\n\r\n- an example\r\n- for the HTTP From header\r\n- which is a *request* header, not a response header\r\n- and as such shown by the HTTP *client*, not server\r\n- to submit information about the bot to the webserver operator\r\n\r\nSo, the webmaster@ address example is rather an example for a contact point for a bot operator (e.g. search engine\u200a\u2014\u200aand Yandex at least is currently using it for this purpose).\r\n\r\nOh, and, the form title is wrong, it must be \u201cSubmit new RFC erratum\u201d. \u201cErrata\u201d is plural of the singular word \u201cerratum\u201d.", "submit_date": "2026-01-02", "submitter_name": "mirabilos", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8693", "doc-id": "RFC8527", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2.2", "orig_text": "   Data in the operational state datatstore can come from multiple\r\n   sources.  The server should return the \"origin\" metadata annotation\r\n   value that most accurately indicates the source of the operational\r\n   value, as specified in Section 5.3.4 of [RFC8342].\r\n", "correct_text": "   Data in the operational state datastore can come from multiple\r\n   sources.  The server should return the \"origin\" metadata annotation\r\n   value that most accurately indicates the source of the operational\r\n   value, as specified in Section 5.3.4 of [RFC8342].\r\n", "notes": "Typo of datastore.", "submit_date": "2026-01-04", "submitter_name": "Per Andersson", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-01-05 02:26:12"}, {"errata_id": "8681", "doc-id": "RFC9172", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "   If an encrypted payload block cannot be decrypted (i.e., the\r\n   ciphertext cannot be authenticated), then the bundle MUST be\r\n   discarded and processed no further.  If an encrypted security target\r\n   other than the payload block cannot be decrypted, then the associated\r\n   security target and all security blocks associated with that target\r\n   MUST be discarded and processed no further.  In both cases, requested\r\n   status reports (see [RFC9171]) MAY be generated to reflect bundle or\r\n   block deletion.", "correct_text": "   If an encrypted payload block cannot be decrypted (i.e., the \r\n   ciphertext cannot be authenticated), then the bundle MUST be deleted\r\n   and processed no further. If requested, a deletion status report (see\r\n   [RFC9171]) MAY be generated using the appropriate Bundle Status \r\n   Report Reason Codes (see Section 11.2) to report bundle deletion. If \r\n   an encrypted security target other than the payload block cannot be \r\n   decrypted, then the associated security target and all security \r\n   blocks associated with that target MUST be discarded and processed \r\n   no further.", "notes": "There exists no block deletion status report in RFC9171.", "submit_date": "2025-12-17", "submitter_name": "Lukas Holst", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8675", "doc-id": "RFC9807", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "6.3.2.3", "orig_text": "concat(server_public_key, envelope) =\r\n    xor(credential_response_pad, response.masked_response)", "correct_text": "concat(server_public_key, envelope) = unknown?", "notes": "I believe the equation does not make sense, the ouput of a concatenation being equal to the XOR function, it seems something is missing, or sentence is a leftover? I don't know what the correct text should be\n --VERIFIER NOTES-- \nRejected. The submitter correctly identifies that the notation is confusing: having a function call on the left side of an assignment looks backwards. The equation is mathematically correct (XOR with the same pad recovers the concatenated data), but clearer notation would compute the XOR first, then parse the result. A future revision could address this. However, the proposed correction (\"= unknown?\") does not provide actionable replacement text.", "submit_date": "2025-12-11", "submitter_name": "paul esteban", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 04:05:37"}, {"errata_id": "8676", "doc-id": "RFC7516", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "14.  Compute the Encoded Protected Header value BASE64URL(UTF8(JWE\r\n     Protected Header)).  If the JWE Protected Header is not present\r\n     (which can only happen when using the JWE JSON Serialization and\r\n     no \"protected\" member is present), let this value be the empty\r\n     string.", "correct_text": "14.  Compute the Encoded Protected Header value BASE64URL(UTF8(JWE\r\n     Protected Header)).  If the JWE Protected Header is not present\r\n     (which can only happen when using the JWE JSON Serialization and\r\n     no \"protected\" member is present), let this value be the empty\r\n     string. Instead of serializing the JWE Protected Header JSON\r\n     object, use the Base64url decoded representation of JWE\r\n     Protected Header.", "notes": "Step 3 says:\r\n\r\n    3.   Verify that the octet sequence resulting from decoding the\r\n         encoded JWE Protected Header is a UTF-8-encoded representation\r\n         of a completely valid JSON object conforming to RFC 7159\r\n         [RFC7159]; let the JWE Protected Header be this JSON object.\r\n\r\nSince JWE Protected Header is the JSON object, the serialized value might often end up different than the Base64url representation of the input value, this is because JSON is not canonical. So in step 14, instead of serializing the JSON object of the JWE Protected Header, the Base64url decoded value must be used to obtain the same value.", "submit_date": "2025-12-12", "submitter_name": "Burak Can Kus", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8677", "doc-id": "RFC6672", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "<missing text>", "correct_text": "DNAME redirects can be used to amplify the impact of successfully spoofing a\r\nsingle DNS response. An attacker can generate an arbitrary query name in the\r\nform of \"$random.example.\" and simultaneously try to spoof a response. The\r\n\"$random\" label provides the attacker with an unlimited number of spoof\r\nattempts. A successful spoofing can include a DNAME RR with a QNAME's parent\r\nname. Such a spoofed RR can redirect the whole parent zone to a malicious\r\ntarget, or create a resolution loop.\r\n\r\nConsumers of DNS responses might consider the trustworthiness of DNAME RRs: Are\r\nthey DNSSEC-secure? Were they received via a non-spoofable transport (TCP, TLS,\r\nUDP with DNS cookies, etc.)? Depending on security posture, consumers might\r\nchoose to not use untrustworthy DNAME RRs, or choose to re-query using a secure\r\ntransport like TCP.\r\n", "notes": "I believe Security Considerations should mention higher risk associated with DNAME spoofing. Hardening described in the proposed text was deployed as (part of) fix for CVE-2025-40778 in BIND 9.", "submit_date": "2025-12-12", "submitter_name": "Petr \u0160pa\u010dek", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8678", "doc-id": "RFC9203", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2", "orig_text": "As specified in Section 5.8.3 of [RFC9200], the RS must notify the\r\nclient with an error response with code 4.01 (Unauthorized) for any\r\nlong running request before terminating the session, when the access\r\ntoken expires.", "correct_text": "As specified in Section 5.10.3 of [RFC9200], the RS must notify the\r\nclient with an error response with code 4.01 (Unauthorized) for any\r\nlong running request before terminating the session, when the access\r\ntoken expires.", "notes": "The quoted text from Section 4.2 of RFC 9203 defines interactions between the client and the RS.\r\n\r\nHowever, the referred Section 5.8.3 of RFC 9200 is about error responses for interactions with the AS.\r\n\r\nThe right section of RFC 9200 to refer to is instead 5.10.3, which says:\r\n\r\n\"If a token that authorizes a long-running request, such as a CoAP Observe [RFC7641], expires, the RS MUST send an error response with the response code equivalent to the CoAP code 4.01 (Unauthorized) to the client and then terminate processing the long-running request.\"", "submit_date": "2025-12-16", "submitter_name": "Marco Tiloca", "verifier_id": "", "verifier_name": null, "update_date": "2026-01-12 22:05:02"}, {"errata_id": "8679", "doc-id": "RFC4511", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "4.4", "orig_text": "   One unsolicited notification (Notice of Disconnection) is defined in\r\n   this document.  The specification of an unsolicited notification\r\n   consists of:\r\n\r\n   - the OBJECT IDENTIFIER assigned to the notification (to be specified\r\n     in the responseName,\r\n\r\n   - the format of the contents of the responseValue (if any),\r\n\r\n   - the circumstances which will cause the notification to be sent, and\r\n\r\n   - the semantics of the message.", "correct_text": "   The specification of an unsolicited notification consists of:\r\n\r\n   - the OBJECT IDENTIFIER assigned to the notification (to be specified\r\n     in the responseName,\r\n\r\n   - the format of the contents of the responseValue (if any),\r\n\r\n   - the circumstances which will cause the notification to be sent, and\r\n\r\n   - the semantics of the message.\r\n\r\nOne unsolicited notification (Notice of Disconnection) is defined in this \r\ndocument, defined in section 4.4.1.", "notes": "It looks like there are two separate paragrahs that were merged at a some point.\r\nThe fact the RFC defines one unsolicited notification (in section 4.4.1) is a separate item from the definition of the contents of any unsolicited notification.\r\nAs it is, it looks like the definition of the contents only applies or relates to the defined notification of section 4.4.1", "submit_date": "2025-12-16", "submitter_name": "Fabio Pistolesi", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-01-12 22:21:52"}, {"errata_id": "8680", "doc-id": "RFC9578", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "Each \"token-keys\" JSON object may also contain the optional field\r\n\"not-before\".  The value of this field is the UNIX timestamp (number\r\nof seconds since January 1, 1970, UTC -- see Section 4.2.1 of\r\n[TIMESTAMP]) at which the key can be used.", "correct_text": "Each \"token-keys\" JSON object may also contain the optional field\r\n\"not-before\".  The value of this field is the UNIX timestamp (number\r\nof seconds since January 1, 1970, UTC -- see [IEEE1003.1]) at which\r\nthe key can be used. It is represented as a JSON number\r\n([RFC8259], Section 6).", "notes": "The reference is incorrect, it points to an unrelated time format where the epoch is 1900-01-01 instead of 1970-01-01. Also, the JSON number format is implied but not actually specified.", "submit_date": "2025-12-16", "submitter_name": "David Schinazi", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8682", "doc-id": "RFC9810", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "The encryptedValue choice has been deprecated in favor of encryptedData.", "correct_text": "The encryptedValue choice has been deprecated in favor of envelopedData.", "notes": "EnvelopedData should be used instead of the deprecated EncryptedValue, through the introduction of the EncryptedKey (https://datatracker.ietf.org/doc/html/rfc9810#section-5.3.19.9).\r\n   EncryptedKey ::= CHOICE {\r\n      encryptedValue        EncryptedValue, -- deprecated\r\n      envelopedData     [0] EnvelopedData }", "submit_date": "2025-12-19", "submitter_name": "Yixin Sun", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:07:39"}, {"errata_id": "8683", "doc-id": "RFC9810", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix C.4", "orig_text": "crc[1].status.       present if and only if\r\n   failInfo          crc[0].status.status is \"rejection\"\r\ncrc[1].              present if and only if\r\n   certifiedKeyPair  crc[0].status.status is \"accepted\"\r\n                     or \"grantedWithMods\"", "correct_text": "crc[1].status.       present if and only if\r\n   failInfo          crc[1].status.status is \"rejection\"\r\ncrc[1].              present if and only if\r\n   certifiedKeyPair  crc[1].status.status is \"accepted\"\r\n                     or \"grantedWithMods\"", "notes": "This is under Initialization Response. It should be crc[1].status.status to correspond to the crc[1] on the left. This error is inherited from RFC 4210 (https://datatracker.ietf.org/doc/html/rfc4210#appendix-D.4).", "submit_date": "2025-12-19", "submitter_name": "Lize Shao", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:08:48"}, {"errata_id": "8684", "doc-id": "RFC9810", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix D.5", "orig_text": "genr (GenReqContent)", "correct_text": "genm (GenMsgContent)", "notes": "This is under the genM block, for the \"body\" field. This error is inherited from RFC 4210 (https://datatracker.ietf.org/doc/html/rfc4210#appendix-E.5).", "submit_date": "2025-12-19", "submitter_name": "Hyeonmin Lee", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:09:43"}, {"errata_id": "8688", "doc-id": "RFC3977", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2", "orig_text": "The terms \"NUL\", \"TAB\", \"LF\", \"CR, and \"space\" refer to the octets %x00, %x09, \r\n%x0A, %x0D, and %x20, respectively (that is, the octets with those codes in US-\r\nASCII [ANSI1986] and thus in UTF-8 [RFC3629]).", "correct_text": "The terms \"NUL\", \"TAB\", \"LF\", \"CR\", and \"space\" refer to the octets %x00, %x09, \r\n%x0A, %x0D, and %x20, respectively (that is, the octets with those codes in US-\r\nASCII [ANSI1986] and thus in UTF-8 [RFC3629]).", "notes": "The right quotation mark after CR is missing.", "submit_date": "2025-12-24", "submitter_name": "Maximilian Lorlacks", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-01-12 20:56:52"}, {"errata_id": "8687", "doc-id": "RFC9883", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "The components of the PrivateKeyStatement SEQUENCE", "correct_text": "The components of the PrivateKeyPossessionStatement SEQUENCE", "notes": "The correct name is PrivateKeyPossessionStatement.", "submit_date": "2025-12-22", "submitter_name": "Wenxi Wang", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2025-12-28 15:10:52"}, {"errata_id": "8689", "doc-id": "RFC6143", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Normative references", "orig_text": "L", "correct_text": "P", "notes": "The first initial of the first author (Peter Deutsch?) of the first normative reference (rfc1950?) disagrees with the author listing in that rfc.\n --VERIFIER NOTES-- \n  After discussion with the authors, this inconsistency has not caused any issues.", "submit_date": "2025-12-28", "submitter_name": "Jim J Jewett", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-01-05 21:43:20"}, {"errata_id": "8691", "doc-id": "RFC791", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1.3", "orig_text": "The ARPANET address would be derived from the internet address by the local network interface", "correct_text": "The ARPANET address would be derived from the internet address by the internet module", "notes": "This sentence claims the local net interface translates an IP address into a local net address. The local net interface knows nothing about internet addresses. This translation is the responsibility of layers above the local net.\r\n\r\nThe later section 2.3, subsection Addressing, makes this explicit:\r\n\r\n>The internet module maps internet addresses to local net addresses.", "submit_date": "2026-01-01", "submitter_name": "Alan Shultz", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8698", "doc-id": "RFC8200", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.5", "orig_text": "If insufficient fragments are received to complete reassembly\r\n         of a packet within 60 seconds of the reception of the first-\r\n         arriving fragment of that packet, reassembly of that packet\r\n         must be abandoned and all the fragments that have been received\r\n         for that packet must be discarded.  If the first fragment\r\n         (i.e., the one with a Fragment Offset of zero) has been\r\n         received, an ICMP Time Exceeded -- Fragment Reassembly Time\r\n         Exceeded message should be sent to the source of that fragment.", "correct_text": "If insufficient fragments are received to complete reassembly\r\n         of a packet by 60 seconds after the reception of the first-\r\n         arriving fragment of that packet, reassembly of that packet\r\n         must be abandoned and all the fragments that have been received\r\n         for that packet must be discarded.  If the first fragment\r\n         (i.e., the one with a Fragment Offset of zero) has been\r\n         received, an ICMP Time Exceeded -- Fragment Reassembly Time\r\n         Exceeded message should be sent to the source of that fragment.", "notes": "There is some confusion that \"within 60 seconds\" allows for nodes to drop the connection before the 60 seconds is up. Therefore by stating \"by 60 seconds\" it is definitive is stating that the connection should not be dropped until the 60 seconds timer has run out.", "submit_date": "2026-01-07", "submitter_name": "Jeremy Duncan", "verifier_id": "", "verifier_name": null, "update_date": "2026-01-12 22:03:46"}, {"errata_id": "8699", "doc-id": "RFC9881", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "ML-DSA-87-PublicKey ::= OCTET STRING (SIZE (2602))", "correct_text": "ML-DSA-87-PublicKey ::= OCTET STRING (SIZE (2592))", "notes": "The size value should be 2592, based on the definitions elsewhere in the document (e.g., Section 4).\u00a0", "submit_date": "2026-01-09", "submitter_name": "Mrigank Pawagi", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-02-11 17:42:30"}, {"errata_id": "8700", "doc-id": "RFC9881", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "nistAlgorithms OBJECT IDENTIFIER ::= { joint-iso-itu-t(2)\r\n  country(16) us(840) organization(1) gov(101) csor(3)\r\n  nistAlgorithms(4) }", "correct_text": "nistAlgorithms OBJECT IDENTIFIER ::= { joint-iso-itu-t(2)\r\n  country(16) us(840) organization(1) gov(101) csor(3)\r\n  nistAlgorithm(4) }", "notes": "The term inside the object should be 'nistAlgorithm(4)' (i.e., without a trailing 's') to be consistent with the NIST definition (https://csrc.nist.gov/projects/computer-security-objects-register/algorithm-registration).", "submit_date": "2026-01-09", "submitter_name": "Mrigank Pawagi", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2026-01-13 15:11:37"}, {"errata_id": "8709", "doc-id": "RFC9857", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.1", "orig_text": "   In the case of an SRv6, the SR Binding SID sub-TLV does not have the\r\n   ability to signal the SRv6 Endpoint behavior [RFC8986] or the\r\n   structure of the SID.  Therefore, the SR Binding SID sub-TLV SHOULD\r\n   NOT be used for the advertisement of an SRv6 Binding SID.  Instead,\r\n   the SRv6 Binding SID TLV defined in Section 5.2 SHOULD be used for\r\n   the signaling of an SRv6 Binding SID.  The use of the SR Binding SID\r\n   sub-TLV for advertisement of the SRv6 Binding SID has been\r\n   deprecated, and it is documented here only for backward compatibility\r\n   with implementations that followed early draft versions of this\r\n   specification.", "correct_text": "   In the case of an SRv6, the SR Binding SID TLV does not have the\r\n   ability to signal the SRv6 Endpoint behavior [RFC8986] or the\r\n   structure of the SID.  Therefore, the SR Binding SID TLV SHOULD\r\n   NOT be used for the advertisement of an SRv6 Binding SID.  Instead,\r\n   the SRv6 Binding SID TLV defined in Section 5.2 SHOULD be used for\r\n   the signaling of an SRv6 Binding SID.  The use of the SR Binding SID\r\n   TLV for advertisement of the SRv6 Binding SID has been\r\n   deprecated, and it is documented here only for backward compatibility\r\n   with implementations that followed early draft versions of this\r\n   specification.", "notes": "The incorrect term `SR Binding SID sub-TLV' appears three times in the last paragraph of Section 5.1. The correct term is `SR Binding SID TLV'.", "submit_date": "2026-01-19", "submitter_name": "Hyeonmin Lee", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-01-27 15:24:47"}, {"errata_id": "8703", "doc-id": "RFC9605", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "C.2.", "orig_text": "*  auth_key: The encryption subkey produced by the derive_subkeys()\r\n      algorithm\r\n\r\n", "correct_text": "*  auth_key: The authentication subkey produced by the derive_subkeys()\r\n      algorithm\r\n\r\n", "notes": "Copy/paste error on the description of the auth_key description string. It is the authentication subkey.", "submit_date": "2026-01-15", "submitter_name": "Aron Rosenberg", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-01-16 19:07:46"}, {"errata_id": "8705", "doc-id": "RFC8881", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "16.2.3.", "orig_text": "   It is possible that the server receives a request that contains an\r\n   operation that is less than the first legal operation (OP_ACCESS) or\r\n   greater than the last legal operation (OP_RELEASE_LOCKOWNER).  In", "correct_text": "   It is possible that the server receives a request that contains an\r\n   operation that is less than the first legal operation (OP_ACCESS) or\r\n   greater than the last legal operation (OP_RECLAIM_COMPLETE).  In", "notes": "The last legal operation in RFC 8881 (NFSv4.1) is the OP_RECLAIM_COMPLETE.\r\nThe OP_RELEASE_LOCKOWNER operation was the last one in RFC 7530 (NFSv4.0).", "submit_date": "2026-01-16", "submitter_name": "Pali Roh\u00e1r", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8708", "doc-id": "RFC9868", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "11.4", "orig_text": "Figure 11: UDP Non-Terminal FRAG Option Format", "correct_text": "Figure 11: UDP Terminal FRAG Option Format", "notes": "Figure 11 has the wrong caption. It shows the format for terminal fragments and the caption should be corrected as such.", "submit_date": "2026-01-17", "submitter_name": "Lize Shao", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-01-20 10:07:40"}, {"errata_id": "8710", "doc-id": "RFC9293", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3.2, Fig. 5", "orig_text": "Figure 5:\r\nrcv RST (note 1)\r\n\r\nNote 1:\r\nThe transition from SYN-RECEIVED to LISTEN on receiving a RST is \r\nconditional on having reached SYN-RECEIVED after a passive OPEN.", "correct_text": "Figure 5:\r\nrcv RST/SYN (note 1)\r\n\r\nNote 1:\r\nWhen a connection in SYN-RECEIVED was reached through a passive OPEN, \r\nthe connection returns to LISTEN in two cases, as specified in Section \r\n3.10.7.4:\r\n(1) when a RST is received, and (2) when a SYN is received.", "notes": "Rationale:\r\nSection 3.10.7.4 specifies two cases in which a connection in SYN-RECEIVED, reached via a passive OPEN, returns to LISTEN: when a RST is received and when a SYN is received. Figure 5's edge label and Note 1 currently mention only the RST-based case. This change does not introduce new behavior; it aligns the label and Note 1 with the existing normative text.", "submit_date": "2026-01-21", "submitter_name": "Noga H. Rotman", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-02-11 16:18:54"}, {"errata_id": "8717", "doc-id": "RFC6386", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "20.4", "orig_text": "           if (dqf->quant_idx != q || quant_hdr->delta_update)", "correct_text": "           /* if (dqf->quant_idx != q || quant_hdr->delta_update) */", "notes": "In the reference decoder as-provided, in the event that the decoder has previously decoded a frame with a given yac_qi (`vp8_quant_hdr.q_index` in the code) and non-zero deltas, and in the next frame, `yac_qi` remains the same, but all deltas are not provided or are 0, then `quant_idx` will equal q and `delta_update` will be 0, so the table update will not be applied, leading to the previously decoded deltas being used.\r\n\r\nlibvpx v1.15.2 `vp8/decoder/decodeframe.c` lines 1083 and following (and the equivalent location in the first commit of libvpx) handles a similar optimization; however, the delta values are compared to their previous values in the 'get_delta_q' function.\r\n\r\nI believe the error in the reference decoder stems from a misoptimization attempting to 'lay the groundwork' for the same prevention of rebuilding of optimized dequantization tables.\r\n\r\nThese tables do not exist in the reference decoder, so the code being guarded here is relatively trivial.\r\n\r\nI have tested this change on a personal stripped-down fork of the libvpx 'dixie' branch (the closest 'relative' to the reference decoder that can easily be compiled) in order to confirm it does not immediately break decoding, but my test vector library is not particularly extensive, and the bug is one that would likely have to be triggered by chance in a normal encoding.\r\nStill, I believe the evidence in libvpx points to this errata being correct.\r\n\r\nlibvpx's interpretation appears to better align with the specification (section 9.6. Dequantization Indices), but not with the reference code; as it is the major shipping implementation, and as the behaviour doesn't really make sense, I'm inclined to believe libvpx is correct.\r\n\r\nThe `get_delta_q` function's use and behaviour is present in the optimized decoder since the 'Initial WebM release' commit, which indicates that the 'non-sticky' behaviour appears to have superseded the reference decoder.\r\n\r\nPlease note that only removing/commenting this line creates unused code which would not be correctable without a deeper series of changes.\r\nThe effects of disabling this optimization in this decoder appear to be trivial (simple once-per-frame logic), but in the 'full' decoder the process is a little more expensive for what appears to be dequantizer optimization reasons.", "submit_date": "2026-01-23", "submitter_name": "20kdc", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8718", "doc-id": "RFC9803", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8", "orig_text": "  <element name=\"create\" type=\"ttl:commandContainer\">\r\n    <unique name=\"uniqueRRTypeForCreate\">\r\n      <selector xpath=\"ttl:ttl\"/>\r\n      <field xpath=\"@for\"/>\r\n    </unique>\r\n  </element>\r\n\r\n  <element name=\"update\" type=\"ttl:commandContainer\">\r\n    <unique name=\"uniqueRRTypeForUpdate\">\r\n      <selector xpath=\"ttl:ttl\"/>\r\n      <field xpath=\"@for\"/>\r\n    </unique>\r\n  </element>\r\n\r\n  <element name=\"infData\" type=\"ttl:responseContainer\">\r\n    <unique name=\"uniqueRRTypeForInfo\">\r\n      <selector xpath=\"ttl:ttl\"/>\r\n      <field xpath=\"@for\"/>\r\n    </unique>\r\n  </element>", "correct_text": "  <element name=\"create\" type=\"ttl:commandContainer\">\r\n    <unique name=\"uniqueRRTypeForCreate\">\r\n      <selector xpath=\"ttl:ttl\"/>\r\n      <field xpath=\"@custom\"/>\r\n      <field xpath=\"@for\"/>\r\n    </unique>\r\n  </element>\r\n\r\n  <element name=\"update\" type=\"ttl:commandContainer\">\r\n    <unique name=\"uniqueRRTypeForUpdate\">\r\n      <selector xpath=\"ttl:ttl\"/>\r\n      <field xpath=\"@custom\"/>\r\n      <field xpath=\"@for\"/>\r\n    </unique>\r\n  </element>\r\n\r\n  <element name=\"infData\" type=\"ttl:responseContainer\">\r\n    <unique name=\"uniqueRRTypeForInfo\">\r\n      <selector xpath=\"ttl:ttl\"/>\r\n      <field xpath=\"@custom\"/>\r\n      <field xpath=\"@for\"/>\r\n    </unique>\r\n  </element>", "notes": "There may exist multiple custom record types, e.g., \r\n<ttl:ttl for=\"custom\" custom=\"NEWRRTYPE1\">3600</ttl:ttl>\r\n<ttl:ttl for=\"custom\" custom=\"NEWRRTYPE2\">3600</ttl:ttl>\r\nBoth \"for\" and \"custom\" attributes are needed to uniquely identify the record type. Therefore, the <unique> elements in the XML syntax should be updated as such.", "submit_date": "2026-01-24", "submitter_name": "Yixin Sun", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-01-26 17:10:18"}, {"errata_id": "8719", "doc-id": "RFC2131", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "If the client detects that the\r\n     address is already in use (e.g., through the use of ARP), the\r\n     client MUST send a DHCPDECLINE message to the server and restarts\r\n     the configuration process.\r\n\r\n...\r\n\r\n      If the client detects that the IP address in the DHCPACK message\r\n      is already in use, the client MUST send a DHCPDECLINE message to the\r\n      server and restarts the configuration process by requesting a\r\n      new network address.\r\n", "correct_text": "If the client detects that the\r\n     address is already in use (e.g., through the use of ARP), the\r\n     client MUST send a DHCPDECLINE message to the server and restart\r\n     the configuration process.\r\n\r\n...\r\n\r\n      If the client detects that the IP address in the DHCPACK message\r\n      is already in use, the client MUST send a DHCPDECLINE message to the\r\n      server and restart the configuration process by requesting a\r\n      new network address.\r\n\r\n", "notes": "2 occurences of the same minor typo (restarts instead of restart) at 3.1 number 5, and 3.2 number 3\r\n\r\ns/and restarts/and restart/", "submit_date": "2026-01-25", "submitter_name": "Eugene Adell", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2026-02-02 07:34:32"}, {"errata_id": "8727", "doc-id": "RFC1123", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "4.1.2.13", "orig_text": "                 Commands:\r\n                    USER, PASS, ACCT,\r\n                    PORT, PASV,\r\n                    TYPE, MODE, STRU,\r\n                    RETR, STOR, APPE,\r\n                    RNFR, RNTO, DELE,\r\n                    CWD,  CDUP, RMD,  MKD,  PWD,\r\n                    LIST, NLST,\r\n                    SYST, STAT,\r\n                    HELP, NOOP, QUIT.\r\n", "correct_text": "                 Commands:\r\n                    USER, PASS, ACCT,\r\n                    PORT, PASV,\r\n                    TYPE, MODE, STRU,\r\n                    RETR, STOR, APPE,\r\n                    RNFR, RNTO, DELE,\r\n                    CWD,  CDUP, RMD,  MKD,  PWD,\r\n                    LIST, NLST,\r\n                    SITE, STAT,\r\n                    HELP, NOOP, QUIT.\r\n", "notes": "There is no such command as \u201cSYST\u201d, but section 4.1.2.8 does urge the use of the SITE command, which seems like it was probably the intent here.\r\n\r\n---- Verifier note ----\r\n\r\nAs noted later by the erratum reporter, section 4.1.3 of RFC 959 (FTP) has indeed a SYST command.\n --VERIFIER NOTES-- \n   ---- Verifier note ----\r\n\r\nAs noted later by the erratum reporter, section 4.1.3 of RFC 959 (FTP) has indeed a SYST command.", "submit_date": "2026-02-01", "submitter_name": "Gordon Steemson", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2026-02-02 07:31:41"}, {"errata_id": "8720", "doc-id": "RFC9497", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix A", "orig_text": "EvaluationElement", "correct_text": "EvaluatedElement", "notes": "The test vector field name \"EvaluationElement\" is inconsistent with the RFC body, which uses \"evaluatedElement\" throughout (Sections 3.3.1-3.3.3). The Appendix A header correctly defines \"EvaluatedElement\" but the test vector data entries use \"EvaluationElement\" instead.\r\n\r\nAffected locations (all within Appendix A test vectors):\r\n- A.1.1.1, A.1.1.2 (ristretto255-SHA512 OPRF): 2 occurrences\r\n- A.1.2.1, A.1.2.2, A.1.2.3 (ristretto255-SHA512 VOPRF): 4 occurrences\r\n- A.1.3.1, A.1.3.2, A.1.3.3 (ristretto255-SHA512 POPRF): 3 occurrences\r\n- A.2.1.1, A.2.1.2 (decaf448-SHAKE256 OPRF): 2 occurrences\r\n- A.2.2.1, A.2.2.2, A.2.2.3 (decaf448-SHAKE256 VOPRF): 4 occurrences\r\n- A.2.3.1, A.2.3.2, A.2.3.3 (decaf448-SHAKE256 POPRF): 3 occurrences\r\n- A.3.1.1, A.3.1.2 (P256-SHA256 OPRF): 2 occurrences\r\n- A.3.2.1, A.3.2.2, A.3.2.3 (P256-SHA256 VOPRF): 4 occurrences\r\n- A.3.3.1, A.3.3.2, A.3.3.3 (P256-SHA256 POPRF): 3 occurrences\r\n- A.4.1.1, A.4.1.2 (P384-SHA384 OPRF): 2 occurrences\r\n- A.4.2.1, A.4.2.2, A.4.2.3 (P384-SHA384 VOPRF): 4 occurrences\r\n- A.4.3.1, A.4.3.2, A.4.3.3 (P384-SHA384 POPRF): 3 occurrences\r\n- A.5.1.1, A.5.1.2 (P521-SHA512 OPRF): 2 occurrences\r\n- A.5.2.1, A.5.2.2, A.5.2.3 (P521-SHA512 VOPRF): 4 occurrences\r\n- A.5.3.1, A.5.3.2, A.5.3.3 (P521-SHA512 POPRF): 3 occurrences\r\n\r\nTotal: 45 occurrences across all test vectors.\r\n\r\nSupersedes EID 8575 (rejected) which proposed fixing the header instead of the data.\r\n\r\n--VERIFIER NOTE--\r\nVerified. Test vector field names should match RFC body terminology.", "submit_date": "2026-01-27", "submitter_name": "Nick Sullivan", "verifier_id": "", "verifier_name": "Nick Sullivan", "update_date": "2026-01-28 04:10:56"}, {"errata_id": "8721", "doc-id": "RFC9802", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2 and 4.3", "orig_text": "registered in the \"Leighton-Micali Signatures (LMS)\" registry [IANA-XMSS].", "correct_text": "registered in the \"XMSS: Extended Hash-Based Signatures\" registry [IANA-XMSS].", "notes": "Typo that appears both in section 4.2 and 4.3.", "submit_date": "2026-01-27", "submitter_name": "Jim Goodman", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-02-23 16:36:48"}, {"errata_id": "8722", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1.5", "orig_text": "If the authorization server issues a refresh token, it is included when issuing an access token (i.e., step (D) in Figure 1).\r\n", "correct_text": "If the authorization server issues a refresh token, it is included when issuing an access token (i.e., step (D) in Figure 1 above).\r\n", "notes": "This clarifies which diagram is the proper one.", "submit_date": "2026-01-28", "submitter_name": "Martin Ottenwaelter", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-02-11 17:39:36"}, {"errata_id": "8723", "doc-id": "RFC9172", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   *  None of the security operations conflict with security operations\r\n      already present in the bundle.", "correct_text": "   *  None of the security operations conflict with security operations\r\n      already present in the bundle.\r\n\r\n   *  In a set of integrity security operations, none of the operations\r\n      target the security block metadata with their associated \r\n      authenticated data, as this interferes with the processing of BIB\r\n      encryption.", "notes": "Combining two or more integrity operations in a single security block, while the associated authenticated data targets the security block metadata, can lead to invalidation of a security result when following the rules of Section 3.9. When a BIB result is moved into a new BIB, then the security block number changes, thereby invalidating the BIB result. This additional constraint for combining security results prevents this invalidation.", "submit_date": "2026-01-29", "submitter_name": "Lukas Holst", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8725", "doc-id": "RFC8639", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.5.1", "orig_text": " .........\r\n : start :-.\r\n :.......: |\r\n      create  .---modify-----.----------------------------------.\r\n           |  |              |                                  |\r\n           V  V          .-------.         .......         .---------.\r\n  .----[evaluate]--no--->|invalid|-delete->: end :<-delete-|concluded|\r\n  |                      '-------'         :.....:         '---------'\r\n  |-[evaluate]--no-(2).      ^                ^                 ^\r\n  |        ^          |      |                |                 |\r\n yes       |          '->unsupportable      delete           stop-time\r\n  |      modify         (subscription-   (subscription-   (subscription-\r\n  |        |             terminated*)     terminated*)      concluded*)\r\n  |        |                 |                |                 |\r\n (1)       |                (3)              (4)               (5)\r\n  |   .---------------------------------------------------------------.\r\n  '-->|                         valid                                 |\r\n      '---------------------------------------------------------------'\r\n\r\n Legend:\r\n   Dotted boxes: subscription added or removed via configuration\r\n   Dashed boxes: states for a subscription\r\n   [evaluate]: decision point on whether the subscription\r\n               is supportable\r\n   (*): resulting subscription state change notification\r\n\r\n     Figure 8: Publisher's State Machine for a Configured Subscription\r\n\r\n   A subscription in the \"valid\" state may move to the \"invalid\" state\r\n   in one of two ways.  First, it may be modified in a way that fails a\r\n   re-evaluation.  See (2) in the diagram.  Second, the publisher might\r\n   determine that the subscription is no longer supportable.  This could\r\n   be because of an unexpected but sustained increase in an event\r\n   stream's event records, degraded CPU capacity, a more complex\r\n   referenced filter, or other subscriptions that have usurped\r\n   resources.  See (3) in the diagram.  No matter the case, a\r\n   \"subscription-terminated\" notification is sent to any receivers in\r\n   the \"active\" or \"suspended\" state.  A subscription in the\r\n   \"valid\" state may also transition to the \"concluded\" state via (5) if\r\n   a configured stop time has been reached.  In this case, a\r\n   \"subscription-concluded\" notification is sent to any receivers in the\r\n   \"active\" or \"suspended\" state.  Finally, a subscription may be\r\n   deleted by configuration (4).", "correct_text": " .........\r\n : start :-.\r\n :.......: |\r\n      create  .---modify-----.----------------------------------.\r\n           |  |              |                                  |\r\n           V  V          .-------.         .......         .---------.\r\n  .----[evaluate]--no--->|invalid|-delete->: end :<-delete-|concluded|\r\n  |                      '-------'         :.....:         '---------'\r\n  |-[evaluate]--no-(2).      ^                ^                 ^\r\n  |        ^          |      |                |                 |\r\n yes       |          '->unsupportable      delete           stop-time\r\n  |      modify         (subscription-   (subscription-   (subscription-\r\n  |        |             terminated*)     terminated*)      completed*)\r\n  |        |                 |                |                 |\r\n (1)       |                (3)              (4)               (5)\r\n  |   .---------------------------------------------------------------.\r\n  '-->|                         valid                                 |\r\n      '---------------------------------------------------------------'\r\n\r\n Legend:\r\n   Dotted boxes: subscription added or removed via configuration\r\n   Dashed boxes: states for a subscription\r\n   [evaluate]: decision point on whether the subscription\r\n               is supportable\r\n   (*): resulting subscription state change notification\r\n\r\n     Figure 8: Publisher's State Machine for a Configured Subscription\r\n\r\n   A subscription in the \"valid\" state may move to the \"invalid\" state\r\n   in one of two ways.  First, it may be modified in a way that fails a\r\n   re-evaluation.  See (2) in the diagram.  Second, the publisher might\r\n   determine that the subscription is no longer supportable.  This could\r\n   be because of an unexpected but sustained increase in an event\r\n   stream's event records, degraded CPU capacity, a more complex\r\n   referenced filter, or other subscriptions that have usurped\r\n   resources.  See (3) in the diagram.  No matter the case, a\r\n   \"subscription-terminated\" notification is sent to any receivers in\r\n   the \"active\" or \"suspended\" state.  A subscription in the\r\n   \"valid\" state may also transition to the \"concluded\" state via (5) if\r\n   a configured stop time has been reached.  In this case, a\r\n   \"subscription-completed\" notification is sent to any receivers in the\r\n   \"active\" or \"suspended\" state.  Finally, a subscription may be\r\n   deleted by configuration (4).", "notes": "Figure 8 and the accompanying text incorrectly refer to a notification named \"subscription-concluded\". This notification is not defined in the document.\r\n\r\nThe correct notification name is \"subscription-completed\", as formally defined in the YANG module (Section 4) and described in Section 2.7.6 (\"subscription-completed\"). The text and diagram in Section 2.5.1 are updated to match the YANG definition.\r\n\r\nVerifier Notes: No objections received for the Errata. See https://mailarchive.ietf.org/arch/msg/netconf/HJX-xHpnx1uY9g3-8UvQBoe8EQ0/", "submit_date": "2026-01-30", "submitter_name": "Roman Janota", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-02-10 23:33:46"}, {"errata_id": "8726", "doc-id": "RFC959", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix II", "orig_text": "         CWD /usr/dm\r\n         200 directory changed to /usr/dm\r\n         MKD pathname\r\n         521-\"/usr/dm/pathname\" directory already exists;\r\n         521 taking no action.\r\n", "correct_text": "         CWD /usr/dm\r\n         200 directory changed to /usr/dm\r\n         MKD pathname\r\n         553-Requested action not taken.\r\n         553 Name already exists.", "notes": "There is no reply code \"521\".  Per the tables of permitted result codes, this should have been some variation on \"553 File name not allowed.\"", "submit_date": "2026-01-31", "submitter_name": "Gordon Steemson", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8753", "doc-id": "RFC8879", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "   uncompressed_length:  The length of the Certificate message once it\r\n      is uncompressed.  If, after decompression, the specified length\r\n      does not match the actual length, the party receiving the invalid\r\n      message MUST abort the connection with the \"bad_certificate\"\r\n      alert.  The presence of this field allows the receiver to\r\n      preallocate the buffer for the uncompressed Certificate message\r\n      and enforce limits on the message size before performing\r\n      decompression.\r\n\r\n   compressed_certificate_message:  The result of applying the indicated\r\n      compression algorithm to the encoded Certificate message that\r\n      would have been sent if certificate compression was not in use.\r\n      The compression algorithm defines how the bytes in the\r\n      compressed_certificate_message field are converted into the\r\n      Certificate message.", "correct_text": "   uncompressed_length:  The length of the Certificate message once it\r\n      is uncompressed.  This is the length of the encoded Certificate\r\n      structure, without a four-byte handshake header.  If, after\r\n      decompression, the specified length does not match the actual\r\n      length, the party receiving the invalid message MUST abort the\r\n      connection with the \"bad_certificate\" alert.  The presence of this\r\n      field allows the receiver to preallocate the buffer for the\r\n      uncompressed Certificate message and enforce limits on the message\r\n      size before performing decompression.\r\n\r\n   compressed_certificate_message:  The result of applying the indicated\r\n      compression algorithm to the encoded Certificate message that\r\n      would have been sent if certificate compression was not in use.\r\n      The compression algorithm defines how the bytes in the\r\n      compressed_certificate_message field are converted into the\r\n      Certificate message.  The input to the compression algorithm is\r\n      the encoded Certificate structure, without a four-byte handshake\r\n      header.", "notes": "We're often a bit sloppy about whether a \"Certificate message\" means the literal bytes of the Certificate structure, or also the four-byte header when wrapped in a Handshake structure. Since this is important for interop, explicitly say which we mean. Skimming BoringSSL, NSS, and OpenSSL, we all took this interpretation. This interpretation is also the marginally more size-efficient one.", "submit_date": "2026-02-11", "submitter_name": "David Benjamin", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8747", "doc-id": "RFC7518", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.1.1", "orig_text": "Algorithm Analysis Documents(s):", "correct_text": "Algorithm Analysis Document(s):", "notes": "This is a typo in the registration template. The template is shared between JWS and JWE and the JWS document does not have this typo. The IANA registry itself does not contain this typo either.", "submit_date": "2026-02-08", "submitter_name": "Filip Skokan", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-02 20:39:05"}, {"errata_id": "8738", "doc-id": "RFC8879", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "After decompression, the Certificate message MUST be processed as if\r\nit were encoded without being compressed. This way, the parsing and\r\nthe verification have the same security properties as they would have\r\nin TLS normally.", "correct_text": "After decompression, the Certificate message MUST be processed as if\r\nit were encoded without being compressed, with the exception of the\r\nhandshake transcript. The CompressedCertificate message is hashed into\r\nthe handshake transcript (Section 4.4.3 of [RFC8446]) in place of a\r\nCertificate message.\r\n", "notes": "The corrected text is suggested by Martin Thomson.", "submit_date": "2026-02-04", "submitter_name": "Kazu Yamamoto", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8748", "doc-id": "RFC3092", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3", "orig_text": "FOO:\r\n\r\n      Forward Observation Observer.\r\n", "correct_text": "FOO:\r\n\r\n      Forward Observation Officer.\r\n", "notes": "Earlier text in this RFC mentions that FOO can refer to \u201c Forward Observation Officer\u201d. This makes more sense than \u201c Forward Observation Observer\u201d.\r\n\r\n-- VERIFIER NOTES --\r\nThe reference entry [JARGON] points to a glossary with this entry: http://www.catb.org/~esr/jargon/html/F/foo.html. It uses \u201cForward Observation Officer\u201d.", "submit_date": "2026-02-08", "submitter_name": "Sander Steffann", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-02 21:54:04"}, {"errata_id": "8757", "doc-id": "RFC6296", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.7", "orig_text": "   Although any 16-bit portion of an IPv6 IID could contain 0xFFFF, an\r\n   IID of all-ones is a reserved anycast identifier that should not be\r\n   used on the network [RFC2526].  If an NPTv6 Translator discovers a\r\n   datagram with an IID of all-zeros while performing address mapping,\r\n   that datagram MUST be dropped, and an ICMPv6 Parameter Problem error\r\n   SHOULD be generated [RFC4443].", "correct_text": "   Although any 16-bit portion of an IPv6 IID could contain 0xFFFF, an\r\n   IID of all-ones forms a reserved anycast address that should not be\r\n   used on the network [RFC2526].  If an NPTv6 Translator discovers a\r\n   datagram with an IID of all-ones while performing address mapping,\r\n   that datagram MUST be dropped, and an ICMPv6 Parameter Problem error\r\n   SHOULD be generated [RFC4443].", "notes": "0x0000 and 0xFFFF have the same effect on the ones'-complement sum, so in defining the one-to-one mapping, one of them needs to be disallowed from making up the entire 64-bit IID (leaving no adjustable word). All-ones was chosen to be excluded from the mapping, since RFC 2526 reserved it as a (non-EUI-64) anycast address, so a datagram with an IID of all-ones (not all-zeros) MUST be dropped. Note that \"anycast identifier\", as defined in RFC 2526, refers to the last 7 bits (not the entire IID).", "submit_date": "2026-02-12", "submitter_name": "Kevin Israel", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8759", "doc-id": "RFC9129", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.9", "orig_text": "2.9. OSPF RPC Operations \r\n\r\nThe \"ietf-ospf\" module defines two RPC operations:\r\n\r\nclear-database:\r\n    Resets the contents of a particular OSPF LSDB, forces neighbor\r\n adjacencies to the 'DOWN' state, and reoriginates self-originated\r\n LSAs. \r\nclear-neighbor:\r\n    Resets a particular OSPF neighbor or group of neighbors\r\n associated with an OSPF interface. \r\n\r\n  rpcs:\r\n    +---x clear-neighbor\r\n    |  +---w input\r\n    |     +---w routing-protocol-name\r\n    |     +     -> /rt:routing/control-plane-protocols/\r\n    |     +         control-plane-protocol/name\r\n    |     +---w interface?               if:interface-ref\r\n    +---x clear-database\r\n       +---w input\r\n          +---w routing-protocol-name\r\n                -> /rt:routing/control-plane-protocols/\r\n                    control-plane-protocol/name\r\n", "correct_text": "For OSPF RPC operations, besides routing-protocol-name - which is in\r\nfact the OSPF instance name and could be named as instance-name -\r\nwe would need to specify the instance-type (ospfv2 or ospfv3) too.\r\nWithout this, RPC cannot handle the situation of having an OSPFv2\r\nand OSPFv3 process with the same name. Using the same name is\r\nnot restricted by config part of the yang OSPF tree, as type/name\r\nare the keys of an OSPF instance.", "notes": "For OSPF RPC operations, besides routing-protocol-name - which is in\r\nfact the OSPF instance name and could be named as instance-name -\r\nwe would need to specify the instance-type (ospfv2 or ospfv3) too.\r\nWithout this, RPC cannot handle the situation of having an OSPFv2\r\nand OSPFv3 process with the same name. Using the same name is\r\nnot restricted by config part of the yang OSPF tree, as type/name\r\nare the keys of an OSPF instance.\r\n\r\nThere could be ambiguity if the same name is used since both \"type\" and \"name\". Adding the optional 'w type?'  seems to be feasible and backward compatible augmentation to resolve the Errata.", "submit_date": "2026-02-13", "submitter_name": "Tam\u00e1s Juh\u00e1sz", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2026-02-17 16:29:14"}, {"errata_id": "8760", "doc-id": "RFC9293", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.6.1", "orig_text": "When a connection is closed actively, it MUST linger in the TIME-WAIT\r\nstate for a time 2xMSL (Maximum Segment Lifetime) (MUST-13). However,\r\nit MAY accept a new SYN from the remote TCP endpoint to reopen the\r\nconnection directly from TIME-WAIT state (MAY-2), if it:\r\n\r\n(1)\r\nassigns its initial sequence number for the new connection to be larger\r\nthan the largest sequence number it used on the previous connection\r\nincarnation, and\r\n(2)\r\nreturns to TIME-WAIT state if the SYN turns out to be an old duplicate.\r\nWhen the TCP Timestamp Options are available, an improved algorithm is\r\ndescribed in [40] in order to support higher connection establishment\r\nrates. This algorithm for reducing TIME-WAIT is a Best Current Practice\r\nthat SHOULD be implemented since Timestamp Options are commonly used,\r\nand using them to reduce TIME-WAIT provides benefits for busy Internet\r\nservers (SHLD-4).", "correct_text": "(1)\r\nuses the Timestamp-based algorithm described in [40] when reopening a\r\nconnection directly from the TIME-WAIT state; and\r\n(2)\r\nreturns to TIME-WAIT state if the SYN turns out to be an old duplicate.\r\n\r\nIf TCP Timestamps are not available, the endpoint MUST NOT reopen the\r\nconnection directly from the TIME-WAIT state.", "notes": "Rationale / Implementability:\r\nItem (1) currently requires choosing an ISN \u201clarger than the largest sequence number used on the previous connection incarnation.\u201d On widely deployed systems (e.g., Linux), TCP does not maintain a per-connection persistent record of the \u201clargest sequence number used\u201d from the prior incarnation in a way that can be reliably applied to a subsequent connection reopened from TIME-WAIT. In practice, it may happen for a newly established connection to use an ISN that is smaller than the largest sequence number observed on a previous incarnation of the same 4-tuple, especially under rapid reconnect / port reuse and high-rate workloads.\r\n\r\nInteroperability:\r\nMany middleboxes (firewalls/load balancers/NAT devices) enforce sequence/window validity based on their own view of the prior flow and may drop segments they consider out-of-window or anomalous during/after fast reuse. This makes reopening directly from TIME-WAIT without a robust anti-duplicate mechanism prone to interoperability failures.\r\n\r\nProposed fix:\r\nReplace the \u201clargest sequence number\u201d requirement with an explicit requirement to use the Timestamp-based Best Current Practice described in [40] (RFC 6191) when reopening directly from TIME-WAIT. If TCP Timestamps are not available, the endpoint MUST NOT reopen directly from TIME-WAIT and should follow the normal TIME-WAIT behavior (2xMSL).\n --VERIFIER NOTES-- \nThis proposed chnage is more than a correction and changes the mechanism. Such a change needs to be discussed in TCPM, and is more than permitted by an Errata,", "submit_date": "2026-02-14", "submitter_name": "Murat genc", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-02-15 15:12:45"}, {"errata_id": "8761", "doc-id": "RFC4791", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.8.2", "orig_text": "   <C:calendar-query xmlns:D=\"DAV:\"\r\n                     xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:prop>\r\n       <C:calendar-data>", "correct_text": "   <C:calendar-query xmlns:D=\"DAV:\"\r\n                     xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:prop>\r\n       <D:getetag/>\r\n       <C:calendar-data>", "notes": "D:getetag is part of the response but missing in the request", "submit_date": "2026-02-15", "submitter_name": "Benjamin Raison", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8762", "doc-id": "RFC4791", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.8.3", "orig_text": "   <C:calendar-query xmlns:D=\"DAV:\"\r\n                     xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:prop>\r\n       <C:calendar-data>\r\n", "correct_text": "   <C:calendar-query xmlns:D=\"DAV:\"\r\n                     xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:prop>\r\n       <D:getetag/>\r\n       <C:calendar-data>\r\n", "notes": "D:getetag is part of the response but missing in the request", "submit_date": "2026-02-15", "submitter_name": "Benjamin Raison", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8763", "doc-id": "RFC4791", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.8.4", "orig_text": "   <C:calendar-query xmlns:D=\"DAV:\"\r\n                 xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:prop>\r\n       <C:calendar-data>", "correct_text": "   <C:calendar-query xmlns:D=\"DAV:\"\r\n                 xmlns:C=\"urn:ietf:params:xml:ns:caldav\">\r\n     <D:prop>\r\n       <D:getetag/>\r\n       <C:calendar-data>", "notes": "D:getetag is part of the response but missing in the request", "submit_date": "2026-02-15", "submitter_name": "Benjamin Raison", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8764", "doc-id": "RFC4254", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4", "orig_text": "      byte      SSH_MSG_GLOBAL_REQUEST\r\n      string    request name in US-ASCII only\r\n      boolean   want reply\r\n      ....      request-specific data follows\r\n\r\n   The value of 'request name' follows the DNS extensibility naming\r\n   convention outlined in [SSH-ARCH].\r\n\r\n   The recipient will respond to this message with\r\n   SSH_MSG_REQUEST_SUCCESS or SSH_MSG_REQUEST_FAILURE if 'want reply' is\r\n   TRUE.\r\n\r\n      byte      SSH_MSG_REQUEST_SUCCESS\r\n      ....     response specific data\r\n\r\n   Usually, the 'response specific data' is non-existent.\r\n\r\n   If the recipient does not recognize or support the request, it simply\r\n   responds with SSH_MSG_REQUEST_FAILURE.\r\n\r\n      byte      SSH_MSG_REQUEST_FAILURE\r\n", "correct_text": "      byte      SSH_MSG_GLOBAL_REQUEST\r\n      string    request name in US-ASCII only\r\n      boolean   want reply\r\n      ....      request-specific data follows\r\n\r\n   The value of 'request name' follows the DNS extensibility naming\r\n   convention outlined in [SSH-ARCH].\r\n\r\n   The recipient will respond to this message with\r\n   SSH_MSG_REQUEST_SUCCESS or SSH_MSG_REQUEST_FAILURE if 'want reply' is\r\n   TRUE.  If 'want reply' is false, the recipient MUST NOT send a response,\r\n   even if the request is not recognized or supported.\r\n\r\n      byte      SSH_MSG_REQUEST_SUCCESS\r\n      ....     response specific data\r\n\r\n   Usually, the 'response specific data' is non-existent.\r\n\r\n   If the recipient does not recognize or support the request, it simply\r\n   responds with SSH_MSG_REQUEST_FAILURE if 'want reply' is true.\r\n\r\n      byte      SSH_MSG_REQUEST_FAILURE\r\n", "notes": "The original wording was unclear on whether a response could be sent if 'want reply' was false, especially in the case where the request was not recognized or supported.\r\n\r\nThis is important because both sides depend on the order of responses to match response with request in the event that multiple requests are sent, so it needs to be possible to deterministically know whether a response will be sent.  Therefore, if 'want reply' is false, the recipient MUST NOT send a response in any circumstances.", "submit_date": "2026-02-16", "submitter_name": "Joseph Galbraith", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:19:52"}, {"errata_id": "8804", "doc-id": "RFC9293", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.10.7.4", "orig_text": "      -  Do not process the FIN if the state is CLOSED, LISTEN, or SYN-\r\n         SENT since the SEG.SEQ cannot be validated; drop the segment\r\n         and return.\r\n", "correct_text": "[See notes.]", "notes": "Clarify that 3.10.7.4, noting that this procedure for a segment arriving in the CLOSED, LISTEN, or SYN-SENT state is handled in sections 3.10.7.1, 3.10.7.2, or 3.10.7.3 (or consider removal if not needed).\r\n", "submit_date": "2026-03-04", "submitter_name": "Christopher Williams", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-03-23 08:56:18"}, {"errata_id": "8805", "doc-id": "RFC9293", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.10.7.4", "orig_text": "         o  FIN-WAIT-1 STATE\r\n\r\n            +  If our FIN has been ACKed (perhaps in this segment), then\r\n               enter TIME-WAIT, start the time-wait timer, turn off the\r\n               other timers; otherwise, enter the CLOSING state.\r\n", "correct_text": "         o  FIN-WAIT-1 STATE\r\n\r\n            +  Enter the CLOSING state.\r\n", "notes": "This original text is in the eighth step (check the FIN bit). In the fifth step (check the ACK field) if the state is FIN-WAIT-1 and \"if the FIN segment is now acknowledged, then enter FIN-WAIT-2 and continue processing in that state.\"\r\n\r\nSo in the eighth step we know that our FIN cannot possibly be ACKed if we're still in the FIN-WAIT-1 state; if our FIN were ACKed then we would be in the FIN-WAIT-2 state instead.", "submit_date": "2026-03-04", "submitter_name": "Christopher Williams", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-03-23 08:53:37"}, {"errata_id": "8806", "doc-id": "RFC9483", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.4", "orig_text": "2. The certReqId in the cp message MUST be -1.", "correct_text": "2. The certReqId in the cp message MUST be -1.\r\n3. The certReqId in the certConf message, if used, MUST also be -1.", "notes": "For better readability, is change 2 also included.", "submit_date": "2026-03-05", "submitter_name": "Guiliano Lehmann", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8790", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1", "orig_text": "Request and response parameters MUST NOT be included more than once.", "correct_text": "Request and response parameters defined by this specification MUST NOT be included more than once. This requirement also applies to parameters defined by extensions unless the extension explicitly defines otherwise for a specific parameter.", "notes": "This builds upon verified erratum 5708 (https://www.rfc-editor.org/errata/eid5708) which added \"defined by this specification\" to scope the restriction to parameters defined in RFC 6749 and not to extension-defined parameters. However, that change left ambiguity about what rules apply to extension parameters. Several extensions explicitly allow repeated parameters, e.g., the \"resource\" parameter in RFC 8707 Section 2 (\"Multiple resource parameters MAY be used to indicate that the requested token is intended to be used at multiple resources.\") and the \"resource\" and \"audience\" parameters in RFC 8693 Section 2.1. The added sentence makes clear that extension parameters default to not being repeated, unless the extension defining them explicitly allows it. See also: https://mailarchive.ietf.org/arch/msg/oauth/l3Yp2W4QXHdCXgO3NVpC6syUMws/", "submit_date": "2026-03-01", "submitter_name": "Filip Skokan", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8786", "doc-id": "RFC9555", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3.1", "orig_text": "ADR;JSCOMPS=\"s,\\, ;11;s, ;10;3\":\r\n ;;54321 Oak St;Reston;;;;;;;Oak St;54321;;;;;;", "correct_text": "ADR;JSCOMPS=\"s,\\, ;10;s, ;11;3\":\r\n ;;54321 Oak St;Reston;;;;;;;54321;Oak St;;;;;;", "notes": "\u2018number' should be position 10 and \u2018name' position 11 according to RFC9554.", "submit_date": "2026-02-26", "submitter_name": "Mauro De Gennaro", "verifier_id": "", "verifier_name": null, "update_date": "2026-03-02 14:44:50"}, {"errata_id": "8826", "doc-id": "RFC9249", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "  grouping key {\r\n    description\r\n      \"The key\";\r\n    nacm:default-deny-all;\r\n    choice key-string-style {\r\n      description\r\n        \"Key string styles\";\r\n", "correct_text": "  grouping key {\r\n    description\r\n      \"The key\";\r\n    choice key-string-style {\r\n      nacm:default-deny-all;\r\n      description\r\n        \"Key string styles\";\r\n", "notes": "A grouping-stmt is not a data-def-stmt.\r\nOnly the data-def-stmts within a grouping get expanded.\r\nThe data-def-stmts do not inherit other sub-statements of grouping-stmt.\r\nThe external 'nacm' statement appears as a sub-statement of grouping-stmt here.\r\n\r\nFrom RFC 8341\r\n         The 'default-deny-all' extension MAY appear within a data\r\n          definition statement, 'rpc' statement, or 'notification'\r\n          statement.  It is ignored otherwise.", "submit_date": "2026-03-13", "submitter_name": "Andy Bierman", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8791", "doc-id": "RFC6749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "Request and response parameters MUST NOT be included more than once.", "correct_text": "Request and response parameters defined by this specification MUST NOT be included more than once. This requirement also applies to parameters defined by extensions unless the extension explicitly defines otherwise for a specific parameter.", "notes": "Section 3.2 (Token Endpoint) contains the same text as Section 3.1 (Authorization Endpoint). Verified erratum 5708 (https://www.rfc-editor.org/errata/eid5708) addressed the identical text in Section 3.1 by adding \"defined by this specification\" but did not correct the same text in Section 3.2. This erratum applies both that same scoping fix and the additional extension-parameter clarification to Section 3.2. Several extensions explicitly allow repeated parameters at the token endpoint, e.g., the \"resource\" parameter in RFC 8707 Section 2 (\"Multiple resource parameters MAY be used to indicate that the requested token is intended to be used at multiple resources.\") and the \"resource\" and \"audience\" parameters in RFC 8693 Section 2.1. The added text makes clear that extension parameters default to not being repeated, unless the extension defining them explicitly allows it. See also: https://mailarchive.ietf.org/arch/msg/oauth/l3Yp2W4QXHdCXgO3NVpC6syUMws/", "submit_date": "2026-03-01", "submitter_name": "Filip Skokan", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8766", "doc-id": "RFC9552", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2.2", "orig_text": "If interface and neighbor addresses are not present and the link\r\nlocal/remote identifiers are present, then the Link Local/Remote\r\nIdentifiers TLV MUST be included in the Link Descriptor. The Link\r\nLocal/Remote identifiers MUST be included in the Link Descriptor\r\nand in the case of links having only IPv6 link-local addressing on\r\nthem.", "correct_text": "If interface and neighbor addresses are not present and the link\r\nlocal/remote identifiers are present, then the Link Local/Remote\r\nIdentifiers TLV MUST be included in the Link Descriptor. The Link\r\nLocal/Remote identifiers MUST be included in the Link Descriptor\r\nin the case of links having only IPv6 link-local addressing on\r\nthem.", "notes": "It looks like the word \"and\" in the second sentence should not be there.", "submit_date": "2026-02-18", "submitter_name": "Francois Clad", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-02-20 15:47:20"}, {"errata_id": "8770", "doc-id": "RFC9174", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2.2.", "orig_text": "Once a transfer of a bundle has commenced, the entity MUST only send\r\nsegments containing sequential portions of that bundle until it sends\r\na segment with the END flag set to 1.", "correct_text": "Once a transfer of a bundle has commenced, the entity MUST only send\r\nsegments containing sequential portions of that bundle until it sends\r\na segment with the END flag set to 1 or until the sender chooses to\r\ncancel the transfer.\r\n\r\nUpon reception of a data segment containing a new Transfer ID before\r\nreception of a data segment with the END flag set for any other\r\nearlier Transfer ID, the receiving entity SHALL consider the earlier\r\nTransfer to have failed. The failure of an individual transfer due to\r\nmissed data segment with END flag set SHOULD NOT cause the receiver to\r\nterminate the TCPCL session.", "notes": "There was no specific mechanism for a sender to cancel a transfer after it has started. For large bundle PDUs this is a large commitment by the sender which could only be resolved by finishing the transfer or performing an unclean session termination, possibly interrupting transfers in the other direction in the same session. While this mechanism of transfer cancelation is not ideal because it is implied from the lack of messaging, presumably the reason why the sending entity chooses to cancel a transfer without terminating the session is that there are subsequent transfers needing to be sent. It is still completely valid and backward-compatible for an entity to simply never cancel a transfer.\r\n\r\nSeparately, there was no requirement on how a receiver needs to handle this case of a transfer simply having no more data segments received but still seeing other messages received.", "submit_date": "2026-02-19", "submitter_name": "Brian Sipos", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8771", "doc-id": "RFC9711", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1.7", "orig_text": "\"secboot\": true,", "correct_text": "\"oemboot\": true,", "notes": "secboot was renamed to oemboot in https://github.com/ietf-rats-wg/eat/pull/340. The example was renamed in https://github.com/ietf-rats-wg/eat/pull/342 but somehow the final RFC did not include the change.", "submit_date": "2026-02-19", "submitter_name": "Steven Bellock", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:22:13"}, {"errata_id": "8772", "doc-id": "RFC9260", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": ".3.4", "orig_text": "This section missed a description for 'Chunk Length' field.", "correct_text": "   Chunk Length: 16 bits (unsigned integer)\r\n\r\n      Set to the size of the chunk in bytes, including the chunk header\r\n      and the SACK Information field.", "notes": "There is generic text that describes the Chunk Length in the current section 3.2, which ought to define this for all the following subsections.", "submit_date": "2026-02-20", "submitter_name": "Zhao, Gang", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-03-05 08:25:32"}, {"errata_id": "8773", "doc-id": "RFC3645", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7", "orig_text": "   This document describes a protocol for DNS security using GSS-API.\r\n   The security provided by this protocol is only as effective as the\r\n   security provided by the underlying GSS mechanisms.\r\n\r\n   All the security considerations from RFC 2845, RFC 2930 and RFC 2743\r\n   apply to the protocol described in this document.", "correct_text": "   This document describes a protocol for DNS security using GSS-API.\r\n   The security provided by this protocol is only as effective as the\r\n   security provided by the underlying GSS mechanisms.\r\n\r\n   All the security considerations from RFC 2845, RFC 2930 and RFC 2743\r\n   apply to the protocol described in this document.\r\n\r\n   The mechanism in Section 4.1.1 effectively allows pre-authentication\r\n   oracle.  This allow a pre-authentication information disclosure in\r\n   GSS-API TKEY negotiation.  An unauthenticated attacker can determine\r\n   which GSSAPI session keynames are currently active in the server's\r\n   dynamic keyring by observing differential error codes in TKEY responses.", "notes": "The other angle would be to change the section 4.1.1 to disallow reporting the BADNAME error and handle everything uniformly.", "submit_date": "2026-02-20", "submitter_name": "Ond\u0159ej Sur\u00fd", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8774", "doc-id": "RFC9260", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "3.3.2 and 3.3.3", "orig_text": "Also 3.3.9 3.3.12\r\n\r\nThese sections missed definition of 'Chunk Length' field.", "correct_text": "   Chunk Length: 16 bits (unsigned integer)\r\n\r\n      Set to the size of the chunk in bytes, including the chunk header.", "notes": "The definition of Chunk Length in 'Corrected Text' is just a sample. Those definitions should be added by people who are more familiar with the protocol.\n --VERIFIER NOTES-- \nA previous Erratum records that the Chunk Length definition should be clarified to apply to all chunks.", "submit_date": "2026-02-20", "submitter_name": "Zhao, Gang", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-03-05 08:28:07"}, {"errata_id": "8817", "doc-id": "RFC9761", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": "prefix acl-tls", "correct_text": "prefix ietf-acl-tls", "notes": "The correct prefix name is ietf-acl-tls (see Section 11.1 in RFC9761).", "submit_date": "2026-03-11", "submitter_name": "Lize Shao", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-03-11 05:01:12"}, {"errata_id": "8775", "doc-id": "RFC8784", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "6", "orig_text": "In addition, the policy SHOULD be set to negotiate only quantum-\r\nsecure symmetric algorithms; while this RFC doesn't claim to give\r\nadvice as to what algorithms are secure (as that may change based on\r\nfuture cryptographical results), below is a list of defined IKEv2 and\r\nIPsec algorithms that should not be used, as they are known to\r\nprovide less than 128 bits of post-quantum security:\r\n\r\n*  Any IKEv2 encryption algorithm, PRF, or integrity algorithm with a\r\n   key size less than 256 bits.\r\n\r\n*  Any ESP transform with a key size less than 256 bits.\r\n\r\n*  PRF_AES128_XCBC and PRF_AES128_CBC: even though they can use as\r\n   input a key of arbitrary size, such input keys are converted into\r\n   a 128-bit key for internal use.", "correct_text": "In general, the discussion on Grover's algorithm in the security\r\nconsiderations needs to be revisited. Since the document was published,\r\nthe cryptographic community has come to the wide agreement that Grover's\r\nalgorithm has extremely large implementation cost which practically\r\nnegates its theoretical advantage over classical computers. \r\n\r\nAs such, using (good) 128-bit secure algorithms is just fine.", "notes": "This also transitively affects RFC 9867 which points to this RFC's security considerations.", "submit_date": "2026-02-20", "submitter_name": "Thom Wiggers", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:20:59"}, {"errata_id": "8776", "doc-id": "RFC9711", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7.3.1", "orig_text": "? heading => number,", "correct_text": "? heading => number / null", "notes": "From 4.2.10, \"If the entity is stationary, the heading is 'null'.\"", "submit_date": "2026-02-20", "submitter_name": "Steven Bellock", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:22:28"}, {"errata_id": "8777", "doc-id": "RFC9711", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.1", "orig_text": "A 64-bit integer representation of the CBOR epoch-based time [RFC8949] used by \r\nthis claim can represent a range of +/- 500 billion years, so the only point of \r\na floating-point timestamp is to have precession greater than one second. ", "correct_text": "A 64-bit integer representation of the CBOR epoch-based time [RFC8949] used by \r\nthis claim can represent a range of +/- 500 billion years, so the only point of \r\na floating-point timestamp is to have precision greater than one second. ", "notes": "NA", "submit_date": "2026-02-20", "submitter_name": "Steven Bellock", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-02 20:38:04"}, {"errata_id": "8779", "doc-id": "RFC9535", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "ERRATUM 8354", "orig_text": ";; N.B. This text is from the Erratum 8534 and not from the original RFC\r\n\r\nfunction-argument   = logical-expr /\r\n                      filter-query / ; (includes singular-query)\r\n                      function-expr /\r\n                      literal", "correct_text": "function-argument   = filter-query / ; (includes singular-query)\r\n                      logical-expr /\r\n                      function-expr /\r\n                      literal", "notes": "Accepting the affirmations of ERRATUM 8354, especially that the ABNF grammars are designed for PEG (Parsing Expression Grammar) parsers.\r\n\r\nWhereas Erratum 8354 proposes making the logical-expr a higher priority than literal (i.e. for PEG parser, earlier in the list of alternative elements) for the function-argument rule, it causes a new problem by placing logical-expr before the filter-query element, an ordering that will break the parsing of a JSONPATH query such as $[?value(@.*)==4] because the function argument @.* will be recognized as a logical-expr instead of a filter-query and, subsequently, as per section 2.4.3 Well Typedness of Function Expressions subsection 2, the sole formal parameter for the value() function extension is of NodesType and hence requires a filter-query for type correctness.\r\n\r\nNOTE: The RFC Editor has been asked to reclassify Errata ID 8354 as Hold For Document Update.", "submit_date": "2026-02-22", "submitter_name": "Alan Painter", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-02-23 12:02:29"}, {"errata_id": "8782", "doc-id": "RFC9711", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.1.7", "orig_text": "\"ueid\": \"AJj1Ck_2wFhhyIYNE6Y46g==\",", "correct_text": "\"ueid\": \"AJj1Ck_2wFhhyIYNE6Y46g\",", "notes": "Per the definition of base64url encoding in https://www.rfc-editor.org/rfc/rfc9711.html#section-2-5.2.1, all trailing '=' characters are omitted. In addition, the regular expression for base64-url-text does not include the '=' character.", "submit_date": "2026-02-25", "submitter_name": "Steven Bellock", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:22:47"}, {"errata_id": "8783", "doc-id": "RFC9711", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.2.3", "orig_text": "oemid-random-json = base64-url-text .size 24", "correct_text": "oemid-random-json = base64-url-text .size 22", "notes": "16 bytes encoded into base64url, with padding, results in 24 bytes. However, the two padding characters, '==', are removed as per the definition of base64url encoding in https://www.rfc-editor.org/rfc/rfc9711.html#section-2-5.2.1, resulting in 22 bytes.", "submit_date": "2026-02-25", "submitter_name": "Steven Bellock", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:23:01"}, {"errata_id": "8818", "doc-id": "RFC9761", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "\"matches\": {\r\n  ...\r\n  \"actions\": {\r\n     \"forwarding\": \"accept\"\r\n  }\r\n}", "correct_text": "\"matches\": {\r\n  ...\r\n},\r\n\"actions\": {\r\n   \"forwarding\": \"accept\"\r\n}", "notes": "\"actions\" is nested within \"matches\" in the original text, while they should be in parallel based on RFC8520 (https://www.rfc-editor.org/rfc/rfc8520.html).\r\n\r\nVerifier Notes: In consultation with the authors, this was agreed to be Verified.", "submit_date": "2026-03-11", "submitter_name": "Lize Shao", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-03-11 18:43:24"}, {"errata_id": "8793", "doc-id": "RFC8498", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7", "orig_text": "P-Served-User: <sip:bob@example.com>; term; regstate=reg", "correct_text": "P-Served-User: <sip:bob@example.com>; sescase=term; regstate=reg", "notes": "P-Served-User header across call flow examples in section 7 is formed incorrectly - according to grammar in section 6.2, session case should be expressed by \"sescase\" param with \"orig\" / \"term\" value ; using just \"term\" as a valueless param is inconsistent with the rest of the spec and with RFC 5502.\r\n\r\nEach incorrect occurrence in the examples should be fixed accordingly.", "submit_date": "2026-03-02", "submitter_name": "Przemys\u0142aw O\u0142tarzewski", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8819", "doc-id": "RFC6337", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.1.1", "orig_text": "The following two statements in Section 3.1.1 appear to offer differing guidance that readers may find difficult to reconcile:\r\n\r\nStatement A (paragraph following Figure 1):\r\n\r\n\"However, offer/answer exchange is not completed yet and the UAC must not send a new offer until it receives the same SDP in a reliable non-failure response, which is the real answer.\"\r\n\r\nStatement B (UAC behavior, point 3):\r\n\r\n\"If the second and subsequent SDP (including a real answer) is different from the first SDP, the UAC should consider that the SDP is equal to the first SDP. Therefore, the UAC should not switch to the new SDP.\"", "correct_text": "--N/A--\r\nclarification requested (see Notes).", "notes": "Statement A appears to suggest that the offer/answer exchange completes only when the SDP received in the reliable provisional response is identical to the SDP previously received in the unreliable provisional response (the \"preview\"). The phrase \"until it receives the same SDP\" seems to establish identity of SDP content as a condition for completion of the offer/answer exchange. Under this reading, if the reliable response were to carry a different SDP, the condition would not be met, and the offer/answer exchange would remain incomplete -- potentially leading to session establishment failure.\r\n\r\nStatement B, on the other hand, appears to provide a robustness consideration: if the SDP in the reliable response happens to differ from the preview, the UAC \"should consider that the SDP is equal to the first SDP.\" This could be read as suggesting that the UAC should treat the offer/answer exchange as complete and continue with the session using the first (preview) SDP.\r\n\r\nWe appreciate that the UAS behavior (point 1) already clarifies that \"[RFC3261] requires all SDP in the responses to the INVITE request to be identical,\" making such a mismatch a protocol violation on the UAS side. However, it would be very helpful to the reader community to understand the intended UAC behavior when such a violation is encountered.\r\n\r\nIn particular, implementers and conformance testers may benefit from clarity on whether:\r\n\r\n(a) The offer/answer exchange should be considered incomplete when the SDP in the reliable response differs from the unreliable preview, aligning with the strict reading of Statement A, or\r\n\r\n(b) The offer/answer exchange should be considered complete, with the UAC continuing to use the first (preview) SDP while disregarding the difference, aligning with the robustness guidance in Statement B, or\r\n\r\n(c) This is intentionally left as an implementation decision, in which case an explicit note to that effect would be greatly appreciated by readers.\r\n\r\nThis ambiguity has practical impact on SIP/IMS implementations and conformance testing, as it leads to divergent behavior across different SIP stacks for the same network condition.", "submit_date": "2026-03-11", "submitter_name": "Charan Deep Singh", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8821", "doc-id": "RFC9915", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "18.2.7", "orig_text": "The client MUST include a Server Identifier option (see Section 21.3) in the \r\nRenew message, identifying the server that allocated the lease(s).\r\n", "correct_text": "The client MUST include a Server Identifier option (see Section 21.3) in the \r\nRelease message, identifying the server that allocated the lease(s).\r\n", "notes": "The sentence should refer to the Release message since this subsection is about Release messages.", "submit_date": "2026-03-11", "submitter_name": "Mrigank Pawagi", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-12 17:45:19"}, {"errata_id": "8877", "doc-id": "RFC6265", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "       3.  If the found-month flag is not set and the date-token matches\r\n           the month production, set the found-month flag and set the\r\n           month-value to the month denoted by the date-token.  Skip the\r\n           remaining sub-steps and continue to the next date-token.\r\n", "correct_text": "       3.  If the found-month flag is not set and the date-token case-\r\n           insensitively matches the month production, set the found-month\r\n           flag and set the month-value to the month denoted by the date-token.\r\n           Skip the remaining sub-steps and continue to the next date-token.\r\n", "notes": "The grammar for the `month` production only contains lower case month names, like `\"jan\"`. Nothing (that I have been able to find) says that the input text is converted to lower case, nor that mathcing or grammar terminals are case insensitive.\r\n\r\nThe examples in section 3.1 includes this date: \"Expires=Sun, 06 Nov 1994 08:49:37 GMT\", which suggests that being case insensitive was intended.\r\n\r\n(I'm not sure the \"case-insensitively matches\" defined in section 2.3 can be applied to a grammar production, and not just a pair of strings. If it cannot be used in this way, then a different approach is needed.)", "submit_date": "2026-04-13", "submitter_name": "Lasse Nielsen", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8903", "doc-id": "RFC5905", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "11.2.1", "orig_text": "This results in three tuples, lowpoint (p, -1, theta -\r\n   lambda), midpoint (p, 0, theta), and highpoint (p, +1, theta +\r\n   lambda), where lambda is the root synchronization distance.", "correct_text": "This results in three tuples, lowpoint (p, -1, theta -\r\n   LAMBDA), midpoint (p, 0, theta), and highpoint (p, +1, theta +\r\n   LAMBDA), where LAMBDA is the root synchronization distance.", "notes": "Two distinct quantities are inconsistently referred to as either \"lambda\" or \"LAMBDA\": the peer synchronisation distance, and the root synchronisation distance.\r\nIn Section 10, the peer synchronisation distance is defined as (delta / 2) + epsilon and denoted by the minuscule lambda.\r\nIn section 11.2.3, the root synchronisation distance is defined as EPSILON + DELTA / 2 and denoted by the majuscule LAMBDA. The root synchronisation distance is also referred to as LAMBDA in Section 4.\r\nHowever, in sections 11.2.1 and 11.2.2, the root synchronisation distance is referred to with the minuscule lambda, leading to an editorial inconsistency between the identifiers for peer and root synchronisation distances.", "submit_date": "2026-05-06", "submitter_name": "Aidan R", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8794", "doc-id": "RFC8446", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.3", "orig_text": "         Client                                               Server\r\n\r\n         ClientHello\r\n         + early_data\r\n         + key_share*\r\n         + psk_key_exchange_modes\r\n         + pre_shared_key\r\n         (Application Data*)     -------->\r\n                                                         ServerHello\r\n                                                    + pre_shared_key\r\n                                                        + key_share*\r\n                                               {EncryptedExtensions}\r\n                                                       + early_data*\r\n                                                          {Finished}\r\n                                 <--------       [Application Data*]\r\n         (EndOfEarlyData)\r\n         {Finished}              -------->\r\n         [Application Data]      <------->        [Application Data]", "correct_text": "         Client                                               Server\r\n\r\n         ClientHello\r\n         + early_data\r\n         + key_share*\r\n         + psk_key_exchange_modes\r\n         + pre_shared_key\r\n         (Application Data*)     -------->\r\n                                                         ServerHello\r\n                                                    + pre_shared_key\r\n                                                        + key_share*\r\n                                               {EncryptedExtensions}\r\n                                                       + early_data*\r\n                                                          {Finished}\r\n                                 <--------       [Application Data*]\r\n         (EndOfEarlyData*)\r\n         {Finished}              -------->\r\n         [Application Data]      <------->        [Application Data]", "notes": "Section 4.5 reads: \"If the server sent an \"early_data\" extension in EncryptedExtensions, the client MUST send an EndOfEarlyData message after receiving the server Finished.  If the server does not send an \"early_data\" extension in EncryptedExtensions, then the client MUST NOT send an EndOfEarlyData message.\"\r\nTherefore, EndOfEarlyData is sent only if the server sends an \"early_data\" extension and should be marked as situation-dependent.\r\n\r\nSEC AD (Paul Wouters) note: this is now filed against the 8446bis doc: https://github.com/tlswg/tls13-spec/issues/1409", "submit_date": "2026-03-02", "submitter_name": "Lo\u00efc Ferreira", "verifier_id": "", "verifier_name": "Paul Wouters", "update_date": "2026-03-02 17:50:00"}, {"errata_id": "8795", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "4.6.2", "orig_text": "A client that receives a CertificateRequest message without having sent the \r\n\"post_handshake_auth\" extension MUST send an \"unexpected_message\" fatal alert.", "correct_text": "A client that receives a CertificateRequest message encrypted with the \r\nserver_application_traffic_secret_N without having sent the \r\n\"post_handshake_auth\" extension MUST send an \"unexpected_message\" fatal alert.", "notes": "This sentence is to be understood in the context of a possible post-handshake authentication. During a main handshake, a CertificateRequest message (encrypted with the server_handshake_traffic_secret) may be sent by the server (without need for the client to send a \"post_handshake_auth\" extension).\r\n\r\nThis has been fixed in 8446bis here:  https://github.com/tlswg/tls13-spec/pull/1424", "submit_date": "2026-03-02", "submitter_name": "Lo\u00efc Ferreira", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 18:37:58"}, {"errata_id": "8796", "doc-id": "RFC9945", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1", "orig_text": "(none)", "correct_text": "This memo...\r\n\r\n* Obsoletes [RFC4633] as the experimental procedure it defines\r\nis replaced by processes defined herein;", "notes": "The WG simply failed to consider RFC 4633, which clearly is now irrelevant.", "submit_date": "2026-03-02", "submitter_name": "Brian Carpenter", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8839", "doc-id": "RFC1309", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.2", "orig_text": "Now that we've seen what kinds of information can be kept in the Directory, we \r\nshould look at how the Directory stores this information and how a Directory \r\nusers accesses the information.", "correct_text": "Now that we've seen what kinds of information can be kept in the Directory, we \r\nshould look at how the Directory stores this information and how a Directory \r\nuser accesses the information.", "notes": "The first sentence in the section ends \"...how a Directory users accesses the information.\" It should be \"...how a Directory user accesses the information.\"", "submit_date": "2026-03-17", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-18 21:11:48"}, {"errata_id": "8840", "doc-id": "RFC1309", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.1.2", "orig_text": "An given object class A may be a subclass of another class B, in which case \r\nobject class A inherits all the mandatory and optional attributes of B in \r\naddition to its own.", "correct_text": "A given object class A may be a subclass of another class B, in which case \r\nobject class A inherits all the mandatory and optional attributes of B in \r\naddition to its own.", "notes": "The last sentence of the second paragraph begins like \"An given object...\" which should be replaced by \"A given object...\"", "submit_date": "2026-03-17", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-18 21:13:00"}, {"errata_id": "8842", "doc-id": "RFC9825", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "8", "orig_text": "ietf-ospf-admin-tag", "correct_text": "ietf-ospf-admin-tags", "notes": "The correct YANG module name is \"ietf-ospf-admin-tags\" as defined in section 7.1.", "submit_date": "2026-03-18", "submitter_name": "Mrigank Pawagi", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-18 21:14:32"}, {"errata_id": "8843", "doc-id": "RFC9729", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "concealed-integer-param-value =  %x31-39 1*4( DIGIT ) / \"0\"", "correct_text": "concealed-integer-param-value =  %x31-39 *4( DIGIT ) / \"0\"", "notes": "The original ABNF syntax requires at least two digits (or \"0\"), excluding 1-9. Updating this to be compatible with the integer parameter descriptions, i.e., the \"s\" parameter that goes in the range of 0-65535. \r\n\r\nThis should not cause any problems in current implementations as the bigger 0x0000-0x0200 range is reserved for backward compatibility (see IANA \"TLS SignatureScheme\" registry https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-signaturescheme), but it will still be good to fix the syntax.", "submit_date": "2026-03-18", "submitter_name": "Yixin Sun", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8844", "doc-id": "RFC2251", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.3", "orig_text": "f the bind was successful, the resultCode will be success, therwise it will be \r\none of:", "correct_text": "If the bind was successful, the resultCode will be success, otherwise it will be \r\none of:", "notes": "The sentence is missing an 'I' for 'If' and an 'o' for 'otherwise'.", "submit_date": "2026-03-18", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-18 21:16:53"}, {"errata_id": "8845", "doc-id": "RFC2251", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.11", "orig_text": "The MessageID MUST be that of a an operation which was requested earlier in \r\nthis connection.", "correct_text": "The MessageID MUST be that of an operation which was requested earlier in \r\nthis connection.", "notes": "The sentence has \"a an operation\" which should be \"an operation\".", "submit_date": "2026-03-18", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-18 21:18:00"}, {"errata_id": "8846", "doc-id": "RFC9208", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "quota-list =       \"(\" quota-resource *(SP quota-resource) \")\"\r\n", "correct_text": "quota-list =       \"(\" [quota-resource *(SP quota-resource)] \")\"\r\n", "notes": "The definition of the QUOTA response, in section 4.2.1, states that the \"list contains zero or more triplets\" and \"an empty list means there are no administrative resource limits in the quota root.\"\r\n\r\nTherefore, the formal syntax for \"quota-list\" should allow an empty list.", "submit_date": "2026-03-18", "submitter_name": "Nicholas Evans", "verifier_id": "", "verifier_name": "Andrew Newton", "update_date": "2026-04-13 20:04:41"}, {"errata_id": "8799", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "2.2", "orig_text": "         Client                                               Server\r\n\r\n   Initial Handshake:\r\n          ClientHello\r\n          + key_share               -------->\r\n                                                          ServerHello\r\n                                                          + key_share\r\n                                                {EncryptedExtensions}\r\n                                                {CertificateRequest*}\r\n                                                       {Certificate*}\r\n                                                 {CertificateVerify*}\r\n                                                           {Finished}\r\n                                    <--------     [Application Data*]\r\n          {Certificate*}\r\n          {CertificateVerify*}\r\n          {Finished}                -------->\r\n                                    <--------      [NewSessionTicket]\r\n          [Application Data]        <------->      [Application Data]", "correct_text": "         Client                                               Server\r\n\r\n   Initial Handshake:\r\n          ClientHello\r\n          + key_share\r\n          + psk_key_exchange_modes  -------->\r\n                                                          ServerHello\r\n                                                          + key_share\r\n                                                {EncryptedExtensions}\r\n                                                {CertificateRequest*}\r\n                                                       {Certificate*}\r\n                                                 {CertificateVerify*}\r\n                                                           {Finished}\r\n                                    <--------     [Application Data*]\r\n          {Certificate*}\r\n          {CertificateVerify*}\r\n          {Finished}                -------->\r\n                                    <--------      [NewSessionTicket]\r\n          [Application Data]        <------->      [Application Data]", "notes": "According to Errata ID 7003, Section 4.6.1 should say: \"At any time after the server has received both a \"psk_key_exchange_modes\" extension and a Finished message, it MAY send a NewSessionTicket message.\"\r\n\r\nFixed in 8446bis here:  https://github.com/tlswg/tls13-spec/pull/1345", "submit_date": "2026-03-03", "submitter_name": "Lo\u00efc Ferreira", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 18:41:29"}, {"errata_id": "8803", "doc-id": "RFC8446", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "E.1", "orig_text": "The PSK binder value forms a binding between a PSK and the current handshake, as \r\nwell as between the session where the PSK was established and the current \r\nsession. This binding transitively includes the original handshake transcript, \r\nbecause that transcript is digested into the values which produce the resumption \r\nmaster secret.", "correct_text": "The PSK binder value forms a binding between a PSK and the current handshake, as \r\nwell as between the session where the PSK was established (if established via a \r\nNewSessionTicket message) and the current session. This binding transitively \r\nincludes the original handshake transcript, because that transcript is digested \r\ninto the values which produce the resumption master secret.", "notes": "The last sentence is not correct since it does not hold for an external PSK (computed independently from the resumption master secret).\r\n\r\nNB: section 4.2.11.2 adds this precision: \"The PSK binder value forms a binding between a PSK and the current handshake, as well as a binding between the handshake in which the PSK was generated (if via a NewSessionTicket message) and the current handshake.\"\r\n\r\nFixed in 8446bis here:  https://github.com/tlswg/tls13-spec/pull/1423", "submit_date": "2026-03-04", "submitter_name": "Lo\u00efc Ferreira", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 18:40:34"}, {"errata_id": "8800", "doc-id": "RFC1184", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "Regardless of what mode has been negotiated, the server side is\r\nresponsible for doing all output processing.  Specificly, it should\r\nsend \"CR LF\" when it wants the \"newline\" function, \"CR NUL\" when it\r\nwants just a carriage return, and \"LF\" when it wants just a linefeed.", "correct_text": "Regardless of what mode has been negotiated, the server side is\r\nresponsible for doing all output processing.  Specifically, it should\r\nsend \"CR LF\" when it wants the \"newline\" function, \"CR NUL\" when it\r\nwants just a carriage return, and \"LF\" when it wants just a linefeed.", "notes": "Changed the word specificly to specifically.", "submit_date": "2026-03-03", "submitter_name": "Dag Henrik Fj\u00e6r", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-06 19:22:38"}, {"errata_id": "8802", "doc-id": "RFC9068", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "iss  REQUIRED - as defined in Section 4.1.1 of [RFC7519].\r\n", "correct_text": "iss  OPTIONAL - as defined in Section 4.1.1 of [RFC7519].\r\n", "notes": "rfc7519:\r\n4.1.1.  \"iss\" (Issuer) Claim\r\n\r\n   The \"iss\" (issuer) claim identifies the principal that issued the\r\n   JWT.  The processing of this claim is generally application specific.\r\n   The \"iss\" value is a case-sensitive string containing a StringOrURI\r\n   value.  Use of this claim is OPTIONAL.", "submit_date": "2026-03-04", "submitter_name": "David Hermo Blanco", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8807", "doc-id": "RFC9729", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "3.3", "orig_text": "48545450205369676E61747572652041757468656E7469636174696F6E", "correct_text": "4854545020436F6E6365616C65642041757468656E7469636174696F6E", "notes": "The original hex in Figure 3 corresponds to \"HTTP Signature Authentication\", which is the wrong context string. Thus, it should be updated to the correct hex to reflect \"HTTP Concealed Authentication\" as specified in Section 3.3.", "submit_date": "2026-03-05", "submitter_name": "Radowan Redoy", "verifier_id": "", "verifier_name": "Mike Bishop", "update_date": "2026-03-10 13:44:21"}, {"errata_id": "8847", "doc-id": "RFC9580", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9.1", "orig_text": "32 octets, size octet, encoded key [Section 5.1.6]\r\n\r\n56 octets, size octet, encoded key [Section 5.1.7]", "correct_text": "32 octets, size octet, [sym. algo ID if v3 PKESK,]\r\nencoded key [Section 5.1.6]\r\n\r\n56 octets, size octet, [sym. algo ID if v3 PKESK,]\r\nencoded key [Section 5.1.7]", "notes": "In Table 18 (OpenPGP Public Key Algorithms Registry), the last column (PKESK Format) is missing a value for the X25519 and X448 rows in the case of v3 PKESKs. See the referenced sections 5.1.6 and 5.1.7.\r\n\r\nThis also affects the corresponding IANA registry (OpenPGP Public Key Algorithms), which will need to be updated as well.", "submit_date": "2026-03-18", "submitter_name": "Daniel Huigens", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8801", "doc-id": "RFC9910", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.2", "orig_text": "The relation searches defined in this document rely on the syntax\r\ndescribed above.  Each search works in the same way for each object\r\nclass.", "correct_text": "The relation searches defined in this document rely on the syntax\r\ndescribed above.  The search for IP addresses works as described\r\nin the section below. The search for reverse domain names works as\r\nthe relationship between the reverse domain name and the \r\ncorresponding IP address(es) used to provision them, where that \r\nrelationship is defined in the section below. The search for \r\nautnums is defined by server policy.", "notes": "Autnums have no natural hierarchy in the numbers themselves, and therefore the search semantics for the relationships is depends on server policy.\r\n\r\n==Verifier Note\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/regext/2KGWwSGmizVGfdYTTLSR_opPo6I/", "submit_date": "2026-03-03", "submitter_name": "Andy Newton", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2026-05-22 17:41:43"}, {"errata_id": "8880", "doc-id": "RFC9907", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.30.3.2", "orig_text": "IANA is requested to add this note to the registry:\r\n\r\n    New values must not be directly added to the \"iana-foo\" YANG\r\n    module.  They must instead be added to the \"foo\" registry.", "correct_text": "IANA is requested to add this note to the registry:\r\n\r\n    New values must not be directly added to the \"iana-foo\" YANG\r\n    module.  They must instead be added to the \"foo\" registry.\r\n\r\nIANA is requested to add this note to [reference-to-the-iana-foo-\r\nregistry]:\r\n\r\n   When this registry is modified, the YANG module \"iana-foo\"\r\n   [IANA_FOO_URL] must be updated as defined in RFC IIII.", "notes": "* The note was present in the approved draft, but was lost during editing of that section. The note was at the button of the template but, as can be seen in Section 4.30.3.1, it was moved upper to group both notes.\r\n\r\n* Section 5.3.1 (Requirements for All Modules) says:\r\n\r\nCURRENT:\r\n\r\n   In addition, when the module is published, IANA must add the\r\n   following notes to:\r\n\r\n   The YANG Module Names registry:\r\n      New values must not be directly added to the \"iana-foo\" YANG\r\n      module.  They must instead be added to the \"foo\" registry.\r\n\r\n   The underlying registry:\r\n      When this registry is modified, the YANG module \"iana-foo\"\r\n      [IANA_FOO_URL] must be updated as defined in RFC IIII.\r\n\r\n* IANA will always implement these two actions per 5.3.1, but better to have the templates in 4.30.3.1/4.30.3.2 consistent.\r\n\r\nVerifier Note: Please see the following thread for any discussion related to this Errata - https://mailarchive.ietf.org/arch/msg/netmod/ZCuhdmxX_RyIKFwtu9RLpiQ1izE/", "submit_date": "2026-04-15", "submitter_name": "Mohamed BOUCADAIR", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-04-29 23:27:27"}, {"errata_id": "8814", "doc-id": "RFC9580", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.6", "orig_text": "A ZLIB-compressed series of packets is compressed with raw ZLIB-style\r\nblocks [RFC1950].", "correct_text": "A ZLIB-compressed series of packets is compressed using the ZLIB\r\ncompressed data format [RFC1950].\r\n\r\nor\r\n\r\nA ZLIB-compressed series of packets is compressed with ZLIB-style\r\nblocks [RFC1950].\r\n\r\n(Or other words to that effect \u2014 the intent is to remove the\r\nword \"raw\").", "notes": "In OpenPGP, only ZIP compression uses raw blocks. The ZLIB and BZip2 algorithms both have headers present. A ZLIB stream without headers would be noncompliant to RFC-1950, section 2.3 (\"A compliant compressor must produce streams with correct CMF, FLG and ADLER32...\").\r\n\r\nThe \"raw\" was not present in RFC-4880. I believe it came in via https://gitlab.com/openpgp-wg/rfc4880bis/-/commit/c326b8d4b946b2d51eb9885677e0521fb0ecf1a9", "submit_date": "2026-03-08", "submitter_name": "Daphne Shaw", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8815", "doc-id": "RFC9420", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "12.2", "orig_text": "For a regular, i.e., not external, Commit, the list is invalid if any\r\nof the following occurs:\r\n\r\n*  It contains an individual proposal that is invalid as specified in\r\n   Section 12.1.", "correct_text": "For a regular, i.e., not external, Commit, the list is invalid if any\r\nof the following occurs:\r\n\r\n*  It contains a reference to a proposal that was not previously\r\n   received by the group member.\r\n\r\n*  It contains an individual proposal that is invalid as specified in\r\n   Section 12.1.", "notes": "According to section 12.4, the proposals vector in a Commit message may contain references to proposals. Moreover, this vector should be validated according to the rules in Section 12.2. However, in the published RFC, these rules do not refer to proposal references and as a result do not verify whether such references are valid. Our modification addresses this problem.", "submit_date": "2026-03-09", "submitter_name": "Ludovic Paillat", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8824", "doc-id": "RFC3533", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6", "orig_text": "7. CRC_checksum: a 4 Byte field containing a 32 bit CRC checksum of\r\n   the page (including header with zero CRC field and page content).\r\n   The generator polynomial is 0x04c11db7.", "correct_text": "7. CRC_checksum: a 4 Byte field containing a 32 bit CRC checksum\r\n   (using the \"unreflected\" CRC32 algorithm) of the page (including\r\n   header with zero CRC field and page content). The generator\r\n   polynomial is 0x04c11db7 in normal (MSB-first) representation.", "notes": "I believe this to be under-specified since the exact use of CRC32 is undefined and pages should be verifiable across implementations. I tested several implementations in Go and found that they did not generate checksums compatible with libogg (which is what I looked at to determine which algorithm to use in the corrected text, assuming libogg to e standard). It may also be worth having a reference pointing to information about the CRC32 algorithm being used.\r\n\r\nIt's not clear to me that the proposed text fully resolves the issue, instead it may be better to mention the CRC32 parameters used as well, as I'm not sure that \"unreflected\" fully tells you which algorithm to use.", "submit_date": "2026-03-12", "submitter_name": "Sam Whited", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8825", "doc-id": "RFC3533", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6", "orig_text": "7. CRC_checksum: a 4 Byte field containing a 32 bit CRC checksum of\r\n   the page (including header with zero CRC field and page content).\r\n   The generator polynomial is 0x04c11db7.", "correct_text": "7. CRC_checksum: a 4 Byte field containing a 32 bit CRC checksum of\r\n   the page (including page content as well as the header with a\r\n   zeroed CRC field).  The generator polynomial is 0x04c11db7.\r\n", "notes": "The current text is ambiguous and makes it unclear whether you are calculating the checksum with a zeroed CRC field and zeroed page content or the zeroed CRC field and including the full page content (ie. are you using it to verify that the header was written correctly or the page content and header were both written correctly). The point of the CRC is to verify both, so perhaps it's obvious that it should be the latter, but I briefly considered that the CRC may only apply to the page header so it seems worth clarifying the ambiguous language.", "submit_date": "2026-03-12", "submitter_name": "Sam Whited", "verifier_id": "", "verifier_name": "Eliot Lear", "update_date": "2026-03-31 19:59:20"}, {"errata_id": "8850", "doc-id": "RFC2119", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6", "orig_text": "Guidance in the use of these Imperatives\r\n\r\n   Imperatives of the type defined in this memo must be used with care\r\n   and sparingly. ", "correct_text": "Guidance in the use of these Keywords\r\n\r\n   Keywords of the type defined in this memo must be used with care\r\n   and sparingly. ", "notes": "These terms are not imperative bud are modal auxiliaries and partiples.  While some have an imperative-like force that s true of oly a few while the intention of this section is to refer to all of these keywords,", "submit_date": "2026-03-21", "submitter_name": "David Noveck", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8851", "doc-id": "RFC6513", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.3.2", "orig_text": "In the remainder this section, we provide an example of how this works, \r\nalong with an informal description of the procedures.", "correct_text": "In the remainder of this section, we provide an example of how this works, \r\nalong with an informal description of the procedures.", "notes": "just added 'of'.", "submit_date": "2026-03-23", "submitter_name": "Eric Osborne", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-31 19:54:19"}, {"errata_id": "8822", "doc-id": "RFC9886", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2.2, Figure 21", "orig_text": "{\r\n    0: 0,\r\n    1: [4, h'012001003FFE000A05130824699A4BC6B2'],\r\n    2: [\r\n        5,\r\n        h'01FADEF6670AEDF6672001003FFE0000\r\n        055E60A1571E91A0B79990D5B04B72A180\r\n        66D4092B52C7D4994FB7C16BD7E8C1F440\r\n        FFA8D04FF1E13F2001003FFE0000055E60\r\n        A1571E91A0B7BC2F66D4982EBD7B7B5B6A\r\n        38C313EE99A4F520FDD340DDDF40FDBC86\r\n        922748896C4B0ABC5023639B669DEE9753\r\n        BE6D84A9F38940D3CA0A5BD1666E2A4CEE\r\n        450C',\r\n        5,\r\n        h'0197E0F667A7EEF6672001003FFE000A\r\n        056615EE45D42709A0CE681E36E1141AEB\r\n        560D6E76BC796B7B7CB454E463CCB1F12D\r\n        E30A380101803F2001003FFE0000055E60\r\n        A1571E91A0B7EFDEAFA62D1077C9AE539A\r\n        363CFB70B37680D94FD459F97A4DE610E2\r\n        03A272CB1049BD47B0C4BCCF3614D7429F\r\n        2F103EF55C013CDAD326B777C1E336F358\r\n        D40B',\r\n        5,\r\n        h'010AE1F6671AEFF6672001003FFE000A\r\n        05260ED4376B256E288233FDAEB5068BC1\r\n        4859D113A0EDFCF8DC07814E3DD2765E6B\r\n        5B82E04D0705972001003FFE000A056615\r\n        EE45D42709A088F20AB8890B10320164CE\r\n        1CF9A51CBD3630A4A9B07BE2893CDEAB00\r\n        47F4AFD1AF3E350988B1F476B300838064\r\n        EF0571F53933E58B2C96686905811E731B\r\n        4D0C',\r\n        5,\r\n        h'01DCE2F667ECF0F6672001003FFE000A\r\n        05130824699A4BC6B2C92E2F9D97E8960F\r\n        9B5F1654F8B09039F9DADC5BCF061EAC4F\r\n        0CEA79E8E877FA2001003FFE000A05260E\r\n        D4376B256E2880E7DCF234E29982E64CE3\r\n        B2159A14C768CE3B0B41D639EA509AFA6D\r\n        86B03283EB4773252860465AC573D725CD\r\n        A94511A02A98770B187BAD6F7798BA609A\r\n        A701'\r\n    ]\r\n}", "correct_text": "{\r\n    0: 0,\r\n    1: [[4, h'012001003FFE000A05130824699A4BC6B2']],\r\n    2: [\r\n        [5,\r\n        h'01FADEF6670AEDF6672001003FFE0000\r\n        055E60A1571E91A0B79990D5B04B72A180\r\n        66D4092B52C7D4994FB7C16BD7E8C1F440\r\n        FFA8D04FF1E13F2001003FFE0000055E60\r\n        A1571E91A0B7BC2F66D4982EBD7B7B5B6A\r\n        38C313EE99A4F520FDD340DDDF40FDBC86\r\n        922748896C4B0ABC5023639B669DEE9753\r\n        BE6D84A9F38940D3CA0A5BD1666E2A4CEE\r\n        450C'],\r\n        [5,\r\n        h'0197E0F667A7EEF6672001003FFE000A\r\n        056615EE45D42709A0CE681E36E1141AEB\r\n        560D6E76BC796B7B7CB454E463CCB1F12D\r\n        E30A380101803F2001003FFE0000055E60\r\n        A1571E91A0B7EFDEAFA62D1077C9AE539A\r\n        363CFB70B37680D94FD459F97A4DE610E2\r\n        03A272CB1049BD47B0C4BCCF3614D7429F\r\n        2F103EF55C013CDAD326B777C1E336F358\r\n        D40B'],\r\n        [5,\r\n        h'010AE1F6671AEFF6672001003FFE000A\r\n        05260ED4376B256E288233FDAEB5068BC1\r\n        4859D113A0EDFCF8DC07814E3DD2765E6B\r\n        5B82E04D0705972001003FFE000A056615\r\n        EE45D42709A088F20AB8890B10320164CE\r\n        1CF9A51CBD3630A4A9B07BE2893CDEAB00\r\n        47F4AFD1AF3E350988B1F476B300838064\r\n        EF0571F53933E58B2C96686905811E731B\r\n        4D0C'],\r\n        [5,\r\n        h'01DCE2F667ECF0F6672001003FFE000A\r\n        05130824699A4BC6B2C92E2F9D97E8960F\r\n        9B5F1654F8B09039F9DADC5BCF061EAC4F\r\n        0CEA79E8E877FA2001003FFE000A05260E\r\n        D4376B256E2880E7DCF234E29982E64CE3\r\n        B2159A14C768CE3B0B41D639EA509AFA6D\r\n        86B03283EB4773252860465AC573D725CD\r\n        A94511A02A98770B187BAD6F7798BA609A\r\n        A701']\r\n    ]\r\n}", "notes": "The original Figure 21 was erroneously left unaltered after a change to the CDDL in Section 5.2.2. For the \"uas_ids\" (key 1) and \"auths\" (key 2) element. Each entry for these keys is a list with a list of two items. This erratum corrects Figure 21 by adding the missing opening/closing array markers for each entry in these two keys to align with the CDDL of Section 5.2.2. Another erratum is filed to update the base64 encoding of Figure 18 to properly encode this CBOR data with the changes made. Thank you to Assistant Professor Yixin Sun from University of Virginia for bringing this error to the attention of the authors.", "submit_date": "2026-03-12", "submitter_name": "Adam Wiethuechter", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2026-03-30 12:36:43"}, {"errata_id": "8823", "doc-id": "RFC9886", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "A.2.2, Figure 18", "orig_text": "2.b.6.c.b.4.a.9.9.6.4.2.8.0.3.1. IN BRID (\r\n    owAAAYIEUQEgAQA//gAKBRMIJGmaS8ay\r\n    AogFWIkB+t72Zwrt9mcgAQA//gAABV5g\r\n    oVcekaC3mZDVsEtyoYBm1AkrUsfUmU+3\r\n    wWvX6MH0QP+o0E/x4T8gAQA//gAABV5g\r\n    oVcekaC3vC9m1JguvXt7W2o4wxPumaT1\r\n    IP3TQN3fQP28hpInSIlsSwq8UCNjm2ad\r\n    7pdTvm2EqfOJQNPKClvRZm4qTO5FDAVY\r\n    iQGX4PZnp+72ZyABAD/+AAoFZhXuRdQn\r\n    CaDOaB424RQa61YNbna8eWt7fLRU5GPM\r\n    sfEt4wo4AQGAPyABAD/+AAAFXmChVx6R\r\n    oLfv3q+mLRB3ya5TmjY8+3CzdoDZT9RZ\r\n    +XpN5hDiA6JyyxBJvUewxLzPNhTXQp8v\r\n    ED71XAE82tMmt3fB4zbzWNQLBViJAQrh\r\n    9mca7/ZnIAEAP/4ACgUmDtQ3ayVuKIIz\r\n    /a61BovBSFnRE6Dt/PjcB4FOPdJ2Xmtb\r\n    guBNBwWXIAEAP/4ACgVmFe5F1CcJoIjy\r\n    CriJCxAyAWTOHPmlHL02MKSpsHviiTze\r\n    qwBH9K/Rrz41CYix9HazAIOAZO8FcfU5\r\n    M+WLLJZoaQWBHnMbTQwFWIkB3OL2Z+zw\r\n    9mcgAQA//gAKBRMIJGmaS8ayyS4vnZfo\r\n    lg+bXxZU+LCQOfna3FvPBh6sTwzqeejo\r\n    d/ogAQA//gAKBSYO1DdrJW4ogOfc8jTi\r\n    mYLmTOOyFZoUx2jOOwtB1jnqUJr6bYaw\r\n    MoPrR3MlKGBGWsVz1yXNqUURoCqYdwsY\r\n    e61vd5i6YJqnAQ==\r\n)", "correct_text": "2.b.6.c.b.4.a.9.9.6.4.2.8.0.3.1. IN BRID (\r\n    owAAAYGCBFEBIAEAP/4ACgUTCCRpmkvG\r\n    sgKEggVYiQH63vZnCu32ZyABAD/+AAAF\r\n    XmChVx6RoLeZkNWwS3KhgGbUCStSx9SZ\r\n    T7fBa9fowfRA/6jQT/HhPyABAD/+AAAF\r\n    XmChVx6RoLe8L2bUmC69e3tbajjDE+6Z\r\n    pPUg/dNA3d9A/byGkidIiWxLCrxQI2Ob\r\n    Zp3ul1O+bYSp84lA08oKW9FmbipM7kUM\r\n    ggVYiQGX4PZnp+72ZyABAD/+AAoFZhXu\r\n    RdQnCaDOaB424RQa61YNbna8eWt7fLRU\r\n    5GPMsfEt4wo4AQGAPyABAD/+AAAFXmCh\r\n    Vx6RoLfv3q+mLRB3ya5TmjY8+3CzdoDZ\r\n    T9RZ+XpN5hDiA6JyyxBJvUewxLzPNhTX\r\n    Qp8vED71XAE82tMmt3fB4zbzWNQLggVY\r\n    iQEK4fZnGu/2ZyABAD/+AAoFJg7UN2sl\r\n    biiCM/2utQaLwUhZ0ROg7fz43AeBTj3S\r\n    dl5rW4LgTQcFlyABAD/+AAoFZhXuRdQn\r\n    CaCI8gq4iQsQMgFkzhz5pRy9NjCkqbB7\r\n    4ok83qsAR/Sv0a8+NQmIsfR2swCDgGTv\r\n    BXH1OTPliyyWaGkFgR5zG00MggVYiQHc\r\n    4vZn7PD2ZyABAD/+AAoFEwgkaZpLxrLJ\r\n    Li+dl+iWD5tfFlT4sJA5+drcW88GHqxP\r\n    DOp56Oh3+iABAD/+AAoFJg7UN2slbiiA\r\n    59zyNOKZguZM47IVmhTHaM47C0HWOepQ\r\n    mvpthrAyg+tHcyUoYEZaxXPXJc2pRRGg\r\n    Kph3Cxh7rW93mLpgmqcB\r\n)", "notes": "The original Figure 21 was erroneously left unaltered after a change to the CDDL in Section 5.2.2. For the \"uas_ids\" (key 1) and \"auths\" (key 2) element. Each entry for these keys is a list with a list of two items. Erratum 8822 corrects Figure 21 by adding the missing opening/closing array markers for each entry in these two keys to align with the CDDL of Section 5.2.2. This erratum is filed to update the base64 encoding of Figure 18 to properly encode the corrected CBOR data of Figure 21. Thank you to Assistant Professor Yixin Sun from University of Virginia for bringing this error to the attention of the authors.", "submit_date": "2026-03-12", "submitter_name": "Adam Wiethuechter", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2026-03-30 12:38:55"}, {"errata_id": "8834", "doc-id": "RFC9868", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "14", "orig_text": "Any options whose length exceeds that of the UDP packet (i.e.,\r\nintending to use data that would have been beyond the surplus area)\r\nSHOULD be silently ignored (again to model legacy behavior).", "correct_text": "The procedure for processing options whose length exceeds that of the \r\nUDP packet (i.e., intending to use data that would have been beyond \r\nthe surplus area) is specified in Section 10.", "notes": "General, procedures for handling of an invalid length are defined in Section 10 (https://www.rfc-editor.org/rfc/rfc9868.html#section-10-22). The procedure in the final clause of Section 14 was therefore already constrained by the procedure in Section 10, requiring all invalid length options to be silently ignored.", "submit_date": "2026-03-17", "submitter_name": "Yixin Sun", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-03-23 09:18:26"}, {"errata_id": "8835", "doc-id": "RFC9815", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "6.3", "orig_text": "For unnumbered links to match during the IPv4 or IPv6\r\nSPF computation, the Current-Link and Remote-Link's\r\nAddress Family Link Descriptor TLV must match the\r\naddress family of the IPv4 or IPv6 SPF computation, the\r\nCurrent-Link's Remote Identifier MUST match the Remote-\r\nLink's Local Identifier, and the Current-Link's Remote\r\nIdentifier MUST match the Remote-Link's Local\r\nIdentifier. ", "correct_text": "For unnumbered links to match during the IPv4 or IPv6\r\nSPF computation, the Current-Link and Remote-Link's\r\nAddress Family Link Descriptor TLV must match the\r\naddress family of the IPv4 or IPv6 SPF computation, the\r\nCurrent-Link's Remote Identifier MUST match the Remote-\r\nLink's Local Identifier, and the Current-Link's Local\r\nIdentifier MUST match the Remote-Link's Remote\r\nIdentifier. ", "notes": "The same sentence is repeated twice in the original text. The second half should indicate the other side of matching, i.e., Current-Link's Local matching with Remote-Link's Remote.", "submit_date": "2026-03-17", "submitter_name": "Mrigank Pawagi", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-03-19 15:07:08"}, {"errata_id": "8836", "doc-id": "RFC9815", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.5", "orig_text": "TIME_TO_LEARN", "correct_text": "TIME_TO_LEARN_INTERVAL", "notes": "The correct terminology is TIME_TO_LEARN_INTERVAL based on RFC8405 (https://www.rfc-editor.org/rfc/rfc8405).", "submit_date": "2026-03-17", "submitter_name": "Mrigank Pawagi", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-18 21:02:42"}, {"errata_id": "8837", "doc-id": "RFC1777", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.9", "orig_text": "6.9.  Abandon Operation", "correct_text": "4.9.  Abandon Operation", "notes": "Under Section 4 Elements of Protocol, following Section 4.8 (Compare Operation), the next section is labeled \u201c6.9 Abandon Operation.\u201d\r\n\r\nThis appears inconsistent with the numbering of preceding sections and overlaps with Section 6 (Security Considerations).\r\n\r\nIt should be labeled \u201c4.9 Abandon Operation.\u201d", "submit_date": "2026-03-17", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-31 19:33:32"}, {"errata_id": "8838", "doc-id": "RFC4647", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2", "orig_text": "However, wildcards outside the first position are ignored by Extended Filtering \r\n(see Section 3.2.2).", "correct_text": "However, wildcards outside the first position are ignored by Extended Filtering \r\n(see Section 3.3.2).", "notes": "The document refers to the Section 3.2.2 as a description of Extended Filtering but there is no such section. The correct section is 3.3.2.", "submit_date": "2026-03-17", "submitter_name": "Mandrusov Roman", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-18 21:09:06"}, {"errata_id": "8854", "doc-id": "RFC8794", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11.1.6.5.", "orig_text": "Within an EBML Schema, the XPath of the \"@maxOccurs\" attribute is\r\n\"/EBMLSchema/element/@maxOccurs\".\r\n\r\n\"maxOccurs\" is a nonnegative integer expressing the maximum permitted\r\nnumber of occurrences of this EBML Element within its Parent Element.\r\n\r\nEach instance of the Parent Element MUST contain at most this many\r\ninstances of this EBML Element, including the unwritten mandatory\r\nelement with a default value; see Section 11.1.19.  If the EBML\r\nElement has an empty EBMLParentPath, then \"maxOccurs\" refers to\r\nconstraints on the occurrence of the EBML Element within the EBML\r\nDocument.\r\n\r\nThe \"maxOccurs\" attribute is OPTIONAL.  If the \"maxOccurs\" attribute\r\nis not present, then there is no upper bound for the permitted number\r\nof occurrences of this EBML Element within its Parent Element or\r\nwithin the EBML Document, depending on whether or not the\r\nEBMLParentPath of the EBML Element is empty.\r\n\r\nThe semantic meaning of \"maxOccurs\" within an EBML Schema is\r\nanalogous to the meaning of \"maxOccurs\" within an XML Schema; when it\r\nis not present, it's similar to xml:maxOccurs=\"unbounded\" in an XML\r\nSchema.", "correct_text": "Within an EBML Schema, the XPath of the \"@maxOccurs\" attribute is\r\n\"/EBMLSchema/element/@maxOccurs\".\r\n\r\n\"maxOccurs\" is a nonnegative integer, or the term \"unbounded\"\r\nexpressing the maximum permitted number of occurrences of this\r\nEBML Element within its Parent Element.\r\n\r\nEach instance of the Parent Element MUST contain at most this many\r\ninstances of this EBML Element, including the unwritten mandatory\r\nelement with a default value; see Section 11.1.19.  If the EBML\r\nElement has an empty EBMLParentPath, then \"maxOccurs\" refers to\r\nconstraints on the occurrence of the EBML Element within the EBML\r\nDocument.\r\n\r\nWhen the value of \"maxOccurs\" is \"unbounded\", then there is no upper\r\nbound for the permitted number of occurrences of this EBML Element\r\nwithin its Parent Element or within the EBML Document, depending on\r\nwhether or not the EBMLParentPath of the EBML Element is empty.\r\n\r\nThe \"maxOccurs\" attribute is OPTIONAL. The default value of \"maxOccurs\"\r\nis \"unbounded\". Therefore, when \"maxOccurs\" attribute is not present\r\nthe maximum occurence of this EBML Element is not limited.\r\n\r\nThe semantic meaning of \"maxOccurs\" within an EBML Schema is\r\nanalogous to the meaning of \"maxOccurs\" within an XML Schema.\r\nThe only difference is their default value.", "notes": "maxOccurs doesn't have a defined default value and has no upper bound. The XSD was updated in errate 7185, but the text was not changed.\r\n\r\nSee https://github.com/ietf-wg-cellar/ebml-specification/issues/395 and https://www.rfc-editor.org/errata/eid7185\n --VERIFIER NOTES-- \nThis errata is not wrong per se, but the value \u201cunbounded\u201d should not be written in any XML file or EBML specification. This is just an XML schema description.\r\nThe proper way to say that an element has no maximum occurrence is to not write the maxOccurs attribute. As explained in the Original Text quoted here. It even says that not being present is equivalent to being unbounded.[1]\r\n\r\n[1] https://mailarchive.ietf.org/arch/msg/cellar/K6i0yD1i32C_O8JqIUNTp2ILR_k/\r\n", "submit_date": "2026-03-25", "submitter_name": "Laszlo Gorog", "verifier_id": "", "verifier_name": "Charles Eckel", "update_date": "2026-04-29 14:58:17"}, {"errata_id": "8858", "doc-id": "RFC9457", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "     \"title\": \"An RFC 7807 problem object\",", "correct_text": "     \"title\": \"An RFC 9457 problem object\",", "notes": "I suppose this could be either Editorial or Technical, depending on if EID7731 is taken into account or not, but I'm going to lean towards Technical. \r\n\r\nAppendix A is correctly describing an RFC 7807 compliant schema, but it is out of context and quite likely in error, given that EID7731 is in Verified status.\r\n\r\nThe schema is used by various repositories downstream, regardless of the \"text of the specification\" being superior to the schema, and that can mask RFC 7807 being obsolete.", "submit_date": "2026-03-28", "submitter_name": "dylan", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8859", "doc-id": "RFC1309", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.1", "orig_text": "If two or more people have listings for the same name in the same locality, \r\nthere is no additional information which with to select the correct number.", "correct_text": "If two or more people have listings for the same name in the same locality, \r\nthere is no additional information with which to select the correct number.", "notes": "The third line in the second paragraph of Section 2.1 ends \"....information which with to select the correct number.\" It should be \"...information with which to select the correct number\"", "submit_date": "2026-03-28", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-31 19:55:27"}, {"errata_id": "8860", "doc-id": "RFC1309", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.1.2", "orig_text": "\"top\" has one mandatory attribute \"objectClass\", and nooptional attributes", "correct_text": "\"top\" has one mandatory attribute \"objectClass\", and no optional attributes", "notes": "In the given diagram, the text beside the \"top\" box says \"... and nooptional attributes\". It should be \"...and no optional attributes\"", "submit_date": "2026-03-28", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-31 19:57:57"}, {"errata_id": "8861", "doc-id": "RFC1309", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3", "orig_text": "Despite this, however, X.500 is very good at what it was designed to do; i.e., \r\nto provide primary directory services and \"resource location\" for a wide band \r\noftypes of information.", "correct_text": "Despite this, however, X.500 is very good at what it was designed to do; i.e., \r\nto provide primary directory services and \"resource location\" for a wide band of \r\ntypes of information.", "notes": "The last line in section 3.3 ends \"...for a wide band oftypes of information.\" It should be \"..for a wide band of types of information.\"", "submit_date": "2026-03-28", "submitter_name": "Shreyas Rajagopal", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-03-31 19:58:34"}, {"errata_id": "8862", "doc-id": "RFC4541", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2", "orig_text": " [IETF56]     Briefing by Dave Thaler, Microsoft, presented to the\r\n                MAGMA WG at the 56'th IETF meeting in San Francisco,\r\n                http://www.ietf.org/proceedings/03mar/index.html", "correct_text": " [IETF56]     Briefing by Dave Thaler, Microsoft, presented to the\r\n                MAGMA WG at the 56'th IETF meeting in San Francisco,\r\n                https://www.ietf.org/proceedings/56/148.htm", "notes": "URL resolves to 404 not found.\r\nThe URL in corrected text seems to be correct, but cannot be sure, so flagging as technical error.\r\n\r\nCold possibly use this url as the link, highlighting the relevant section:\r\n https://www.ietf.org/proceedings/56/148.htm#:~:text=call%2E%20%2D%2D%2D-,Dave,problem%2E", "submit_date": "2026-03-29", "submitter_name": "Robert North", "verifier_id": "", "verifier_name": "Eric Vyncke", "update_date": "2026-03-30 12:30:15"}, {"errata_id": "8883", "doc-id": "RFC8555", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "7.5", "orig_text": "\r\n     \"challenges\": [\r\n       {\r\n         \"type\": \"http-01\",\r\n         \"url\": \"https://example.com/acme/chall/prV_B7yEyA4\",\r\n         \"token\": \"DGyRejmCefe7v4NfDGDKfA\"\r\n       },\r\n       {\r\n         \"type\": \"dns-01\",\r\n         \"url\": \"https://example.com/acme/chall/Rg5dV14Gh1Q\",\r\n         \"token\": \"DGyRejmCefe7v4NfDGDKfA\"\r\n       }\r\n     ]", "correct_text": "\r\n     \"challenges\": [\r\n       {\r\n         \"type\": \"http-01\",\r\n         \"url\": \"https://example.com/acme/chall/prV_B7yEyA4\",\r\n         \"token\": \"DGyRejmCefe7v4NfDGDKfA\",\r\n         \"status\": \"pending\"\r\n       },\r\n       {\r\n         \"type\": \"dns-01\",\r\n         \"url\": \"https://example.com/acme/chall/Rg5dV14Gh1Q\",\r\n         \"token\": \"DGyRejmCefe7v4NfDGDKfA\",\r\n         \"status\": \"pending\"\r\n       }\r\n     ]", "notes": "Section 8 says:\r\n\r\n   Challenge objects all contain the following basic fields:\r\n\r\n...\r\n\r\n   status (required, string):  The status of this challenge.  Possible\r\n      values are \"pending\", \"processing\", \"valid\", and \"invalid\" (see\r\n      Section 7.1.6).\r\n\r\nBut section 7.5 is missing the challenge statuses.", "submit_date": "2026-04-16", "submitter_name": "Shirom Makkad", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8884", "doc-id": "RFC5925", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "6.2", "orig_text": "The implementation of SNEs is not specified in this document, but one\r\n   possible way is described here that can be used for either RCV.SNE,\r\n   SND.SNE, or both.\r\n\r\n   Consider an implementation with two SNEs as required (SND.SNE, RCV.\r\n   SNE), and additional variables as listed below, all initialized to\r\n   zero, as well as a current TCP segment field (SEG.SEQ):\r\n\r\n   o  SND.PREV_SEQ, needed to detect rollover of SND.SEQ\r\n\r\n   o  RCV.PREV_SEQ, needed to detect rollover of RCV.SEQ\r\n\r\n   o  SND.SNE_FLAG, which indicates when to increment the SND.SNE\r\n\r\n   o  RCV.SNE_FLAG, which indicates when to increment the RCV.SNE\r\n\r\n   When a segment is received, the following algorithm (in C-like\r\n   pseudocode) computes the SNE used in the MAC; this is the \"RCV\" side,\r\n   and an equivalent algorithm can be applied to the \"SND\" side:\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\nTouch, et al.                Standards Track                   [Page 25]\r\n\r\nRFC 5925              The TCP Authentication Option            June 2010\r\n\r\n\r\n      /* set the flag when the SEG.SEQ first rolls over */\r\n      if ((RCV.SNE_FLAG == 0)\r\n         && (RCV.PREV_SEQ > 0x7fff) && (SEG.SEQ < 0x7fff)) {\r\n            RCV.SNE = RCV.SNE + 1;\r\n            RCV.SNE_FLAG = 1;\r\n      }\r\n      /* decide which SNE to use after incremented */\r\n      if ((RCV.SNE_FLAG == 1) && (SEG.SEQ > 0x7fff)) {\r\n         SNE = RCV.SNE - 1; # use the pre-increment value\r\n      } else {\r\n         SNE = RCV.SNE; # use the current value\r\n      }\r\n      /* reset the flag in the *middle* of the window */\r\n      if ((RCV.PREV_SEQ < 0x7fff) && (SEG.SEQ > 0x7fff)) {\r\n         RCV.SNE_FLAG = 0;\r\n      }\r\n      /* save the current SEQ for the next time through the code */\r\n      RCV.PREV_SEQ = SEG.SEQ;\r\n\r\n   In the above code, the first time the sequence number rolls over,\r\n   i.e., when the new number is low (in the bottom half of the number\r\n   space) and the old number is high (in the top half of the number\r\n   space), the SNE is incremented and a flag is set.\r\n\r\n   If the flag is set and a high number is seen, it must be a reordered\r\n   segment, so use the pre-increment SNE; otherwise, use the current\r\n   SNE.\r\n\r\n   The flag will be cleared by the time the number rolls all the way\r\n   around.\r\n\r\n   The flag prevents the SNE from being incremented again until the flag\r\n   is reset, which happens in the middle of the window (when the old\r\n   number is in the bottom half and the new is in the top half).\r\n   Because the receive window is never larger than half of the number\r\n   space, it is impossible to both set and reset the flag at the same\r\n   time -- outstanding segments, regardless of reordering, cannot\r\n   straddle both regions simultaneously.", "correct_text": "The implementation of SNEs is not specified in this document, but one possible way is described in RFC 9817.", "notes": "The deleted text includes a buggy version of the SNE algorithm. RFC 9817 specifies a better SNE algorithm.\r\n\r\nImplementations that use the RFC 9817 SNE algorithm will be mostly, but not 100% backwards compatible with implementations that implement the deleted RFC 5925 version.\r\n\r\nThanks to Pig Chen for raising this issue.", "submit_date": "2026-04-17", "submitter_name": "Ron Bonica", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-04-20 14:09:35"}, {"errata_id": "8885", "doc-id": "RFC9341", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": ".2", "orig_text": "   Note that, for all the one-way delay alternatives described in the\r\n   next sections, by summing the one-way delays of the two directions of\r\n   a path, it is always possible to measure the two-way delay (round-\r\n   trip \"virtual\" delay).  The Network Time Protocol (NTP) [RFC5905] or\r\n   the IEEE 1588 Precision Time Protocol (PTP) [IEEE-1588] (as discussed\r\n   in the previous section) can be used for the timestamp formats\r\n   depending on the needed precision.\r\n", "correct_text": "   Note that, for all the one-way delay alternatives described in the\r\n   next sections, by summing the one-way delays of the two directions of\r\n   a path, it is always possible to measure the two-way delay (round-\r\n   trip \"virtual\" delay).  The Network Time Protocol (NTP) [RFC5905] or\r\n   the IEEE 1588 Precision Time Protocol (PTP) [IEEE-1588] can be used \r\n   for the timestamp formats depending on the needed precision.\r\n", "notes": "The previous section does not discuss timestamps.\r\n\r\n====Verifier Notes=======\r\n\r\nThe change was made here: https://author-tools.ietf.org/iddiff?url1=draft-ietf-ippm-rfc8321bis-02&url2=draft-ietf-ippm-rfc8321bis-03&difftype=--html. Interestingly, \"(As discussed in the previous\t   section, )\" appears like a truncated text. \r\n\r\n\"s/previous/next\" would be correct as well.\r\n\r\nSee https://mailarchive.ietf.org/arch/msg/ippm/T0aOYdVp-Ha3Sn-CQnTKFNLJllQ/", "submit_date": "2026-04-18", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Mohamed BOUCADAIR", "update_date": "2026-04-30 07:25:47"}, {"errata_id": "8888", "doc-id": "RFC8773", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "7", "orig_text": "Early Secret = HKDF-Extract(External PSK, 0)", "correct_text": "Early Secret = HKDF-Extract(0, External PSK)", "notes": "As discussed in https://mailarchive.ietf.org/arch/msg/tls/6Wk82oBGd61rTK23DgfYb7BmRKM/ and https://github.com/tlswg/rfc8773bis/pull/2", "submit_date": "2026-04-24", "submitter_name": "Muhammad Usama Sardar", "verifier_id": "", "verifier_name": "Deb Cooley", "update_date": "2026-05-07 19:25:53"}, {"errata_id": "6596", "doc-id": "RFC4291", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2.2", "orig_text": "   2. Due to some methods of allocating certain styles of IPv6\r\n      addresses, it will be common for addresses to contain long strings\r\n      of zero bits.  In order to make writing addresses containing zero\r\n      bits easier, a special syntax is available to compress the zeros.\r\n      The use of \"::\" indicates one or more groups of 16 bits of zeros.\r\n      The \"::\" can only appear once in an address.  The \"::\" can also be\r\n      used to compress leading or trailing zeros in an address.", "correct_text": "EITHER\r\n\r\n   2. Due to some methods of allocating certain styles of IPv6\r\n      addresses, it will be common for addresses to contain long strings\r\n      of zero bits.  In order to make writing addresses containing zero\r\n      bits easier, a special syntax is available to compress the zeros.\r\n      The use of \"::\" indicates one or more \"0\" pieces, or two or more when\r\n      leading or trailing. The \"::\" can only appear once in an address.\r\n\r\nOR\r\n\r\n   2. Due to some methods of allocating certain styles of IPv6\r\n      addresses, it will be common for addresses to contain long strings\r\n      of zero bits.  In order to make writing addresses containing zero\r\n      bits easier, a special syntax is available to compress the zeros.\r\n      The use of \"::\" indicates one or more pieces of 16 bits of zeros,\r\n      or two or more when leading or trailing. The \"::\" can only appear\r\n      once in an address.\r\n", "notes": "1. The existing wording would permit \"::\" to be used in leading or trailing position to compress a single 16-bit piece, leading to the conclusion that \"::0:0:0:0:0:0:1\" is a valid way to write the loopback address, with eight colons.\r\n\r\nMany consumers of textual IPv6 addresses would reject this out of hand as \"too many colons\", and it seems questionable that such an interpretation was ever intended. Enforcing this on producers would improve interoperability.\r\n\r\n2. The preceding paragraphs defines \"piece\", but the undefined term \"group\" is used in this paragraph, so by changing that term I hope to clarify that this is a textual substitution, necessarily aligned to a multiple of 16 bits.\r\n\r\nI am uncomfortable with the phrasing \"pieces of 16 bits of zeros\", but I offer it as a single-word change to effect my point (2); I leave it to the discretion of the editor which of my alternatives to adopt.\r\n\r\n--->8 INT AD notes 8<---\r\n\r\nReaders of this RFC and this erratum are directed to RFC 5952, specifically section 4.*.", "submit_date": "2021-06-03", "submitter_name": "Martin D Kealey", "verifier_id": "", "verifier_name": "Erik Kline", "update_date": "2025-12-27 02:44:23"}, {"errata_id": "8889", "doc-id": "RFC9621", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.", "orig_text": "+-----------------------------------------------------+\r\n     |                    Application                      |\r\n     +-+----------------+------^-------+--------^----------+\r\n       |                |      |       |        |\r\n     pre-               |     data     |      events\r\n     establishment      |   transfer   |        |\r\n       |        establishment  |   termination  |\r\n       |                |      |       |        |\r\n       |             +--v------v-------v+       |\r\n     +-v-------------+   Connection(s)  +-------+----------+\r\n     |  Transport    +--------+---------+                  |\r\n     |  Services              |                            |\r\n     |  API                   |  +-------------+           |\r\n     +------------------------+--+  Framer(s)  |-----------+\r\n                              |  +-------------+\r\n     +------------------------|----------------------------+\r\n     |  Transport             |                            |\r\n     |  System                |        +-----------------+ |\r\n     |  Implementation        |        |     Cached      | |\r\n     |                        |        |      State      | |\r\n     |  (Candidate Gathering) |        +-----------------+ |\r\n     |                        |                            |\r\n     |  (Candidate Racing)    |        +-----------------+ |\r\n     |                        |        |     System      | |\r\n     |                        |        |     Policy      | |\r\n     |             +----------v-----+  +-----------------+ |\r\n     |             |    Protocol    |                      |\r\n     +-------------+    Stack(s)    +----------------------+\r\n                   +-------+--------+\r\n                           V\r\n   +-----------------------------------------------------+\r\n   |               Network-Layer Interface               |\r\n   +-----------------------------------------------------+", "correct_text": "+-----------------------------------------------------+\r\n     |                    Application                      |\r\n     +-+----------------+------^-------+--------^----------+\r\n       |                |      |       |        |\r\n     pre-               |     data     |      events\r\n     establishment      |   transfer   |        |\r\n       |        establishment  |   termination  |\r\n       |                |      |       |        |\r\n       |             +--v------v-------v+       |\r\n     +-v-------------+   Connection(s)  +-------+----------+\r\n     |  Transport    +--------+---------+                  |\r\n     |  Services              |                            |\r\n     |  API                   |  +-------------+           |\r\n     +------------------------+--+  Framer(s)  |-----------+\r\n                              |  +-------------+\r\n     +------------------------|----------------------------+\r\n     |  Transport             |                            |\r\n     |  Services              |        +-----------------+ |\r\n     |  Implementation        |        |     Cached      | |\r\n     |                        |        |      State      | |\r\n     |  (Candidate Gathering) |        +-----------------+ |\r\n     |                        |                            |\r\n     |  (Candidate Racing)    |        +-----------------+ |\r\n     |                        |        |     System      | |\r\n     |                        |        |     Policy      | |\r\n     |             +----------v-----+  +-----------------+ |\r\n     |             |    Protocol    |                      |\r\n     +-------------+    Stack(s)    +----------------------+\r\n                   +-------+--------+\r\n                           V\r\n   +-----------------------------------------------------+\r\n   |               Network-Layer Interface               |\r\n   +-----------------------------------------------------+", "notes": "In figure 3, the internal implementation is referred to as a \"Transport System Implementation\" instead of a \"Transport Services Implementation\" as in the rest of the document", "submit_date": "2026-04-25", "submitter_name": "Ingbrigt Hovind", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-06-30 14:58:24"}, {"errata_id": "8890", "doc-id": "RFC9530", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "B.4.", "orig_text": "8B 08 80 7B 22 68 65 6C 6C 6F\r\n22 3A 20 22 77 6F 72 6C 64 22\r\n7D 0A 03", "correct_text": "0B 09 80 7B 22 68 65 6C 6C 6F\r\n22 3A 20 22 77 6F 72 6C 64 22\r\n7D 0A 03", "notes": "The Brotli representation provided in the examples in B.4 (Figure 18) and B.6 (Figure 21) aren't valid. Trying to decompress them via Node.js' zlib package and the brotli CLI fails:\r\n\r\n```\r\n$ node -e \"require('zlib').brotliDecompressSync(Buffer.from('8b08807b2268656c6c6f223a2022776f726c64227d0a03','hex'))\"\r\nnode:zlib:432\r\n      throw self[kError];\r\n      ^\r\n\r\nError: unexpected end of file\r\n  [...]\r\n  code: 'Z_BUF_ERROR'\r\n}\r\n```\r\n\r\n```\r\n$ echo 8b08807b2268656c6c6f223a2022776f726c64227d0a03 | xxd -r -p | brotli -d -c\r\ncorrupt input [con]\r\n```\r\n\r\nIn addition, the SHA-256 over the bytes in the original text is MklYnI/SsUF/5X7enJ2TU+DFjodRObdKLFaPPLe/Kcw=, not d435Qo+nKZ+gLcUHn7GQtQ72hiBVAgqoLsZnZPiTGPk= as used by the RFC in the Repr-Digest header field. The SHA-512 digest in Figure 21 is similarly incorrect.\r\n\r\nThe correct text only differs in the first two bytes. With this change, the response content is a valid Brotli compression of `{\"hello\": \"world\"}\\n`. The SHA-256 and SHA-512 digests in the Repr-Digest header fields then also match the representation's digests.", "submit_date": "2026-04-25", "submitter_name": "Marius Kleidl", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8915", "doc-id": "RFC6031", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2.6 and A.2", "orig_text": "FriendlyName ::= SEQUENCE {\r\n     friendlyName        UTF8String,\r\n     friendlyNameLangTag UTF8String OPTIONAL }\r\n", "correct_text": "FriendlyName ::= SEQUENCE {\r\n     friendlyName        UTF8String,\r\n     friendlyNameLangTag UTF8String DEFAULT \"en\"\r\n        (CONSTRAINED BY { -- MUST be a language tag per RFC5646 --}) \r\n  }\r\n", "notes": "The text in 3.2.6 implies this corrected definition. Changes to both the body of the document and the ASN.1 module appendix.\r\n\r\n\"When the\r\n   friendlyNameLangTag field is absent, English, whose associated\r\n   language tag is \"en\", is used.  The value of the friendlyNameLangTag\r\n   field MUST be a language tag, as described in [RFC5646].\"\r\n\r\nRecommend HFDU if verified.", "submit_date": "2026-05-16", "submitter_name": "Michael StJohns", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8895", "doc-id": "RFC9309", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3.1.5", "orig_text": "Crawlers MUST try to parse each line of the robots.txt file. Crawlers \r\nMUST use the  parseable rules.", "correct_text": "Crawlers MUST try to parse each line of the robots.txt file. Crawlers \r\nMUST use the  parseable rules.\r\n\r\nTo improve maintainability of robots.txt files and reduce duplication \r\nof rule groups, implementations MAY support a comma-separated list of \r\nuser-agent tokens within a single \"User-agent\" field.\r\n\r\nFor example:\r\n    User-agent: agent1, agent2, agent3\r\n\r\nis interpreted as equivalent to:\r\n    User-agent: agent1\r\n    User-agent: agent2\r\n    User-agent: agent3\r\n\r\nWhen such a construct is encountered:\r\n\r\n- Parsers that support this extension SHOULD split the value on comma\r\n  separators, trim optional whitespace, and treat each token as an \r\n  independent User-agent field belonging to the same group.\r\n\r\n- Parsers that do not support this extension will interpret the full \r\n  value as a single user-agent token. As per this specification, \r\n  unmatched user-agent tokens simply result in the group being ignored\r\n  for that crawler, preserving backward compatibility.\r\n\r\n- Implementations SHOULD NOT treat comma-separated user-agent values \r\n  as a parsing error.\r\n\r\nThis extension is OPTIONAL and intended as a best practice to reduce \r\nrepetition of identical rule groups across multiple user-agents.", "notes": "About 0.3% of robots.txt have an comma in the user-agent fields already. Including http://queue.tickets.fifa.com/robots.txt  and  http://www.rsn-msk.ru/robots.txt", "submit_date": "2026-04-28", "submitter_name": "Fabrice Canel", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8891", "doc-id": "RFC9909", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3", "orig_text": "csor(3) 4", "correct_text": "csor(3) nistAlgorithm(4)", "notes": "It is suggested that the definition\r\n\u201cnistAlgorithms OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) 4 }\u201d\r\nbe revised to\r\n\u201cnistAlgorithms OBJECT IDENTIFIER ::= { joint-iso-ccitt(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) }\u201d\r\nin order to improve consistency with NIST terminology. In particular, replacing the numeric identifier \u201c4\u201d with the named identifier \u201cnistAlgorithm(4)\u201d is recommended to align with the naming convention used in the NIST Computer Security Objects Register (CSOR) and to enhance clarity and readability.\r\nFor reference, the NIST CSOR is available at: https://csrc.nist.gov/projects/computer-security-objects-register/algorithm-registration", "submit_date": "2026-04-27", "submitter_name": "Abel C. H. Chen", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 14:59:28"}, {"errata_id": "8892", "doc-id": "RFC9909", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "csor(3) 4", "correct_text": "csor(3) nistAlgorithm(4)", "notes": "It is suggested that the definition\r\n\u201cnistAlgorithms OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) 4 }\u201d\r\nbe revised to\r\n\u201cnistAlgorithms OBJECT IDENTIFIER ::= { joint-iso-ccitt(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) }\u201d\r\nin order to improve consistency with NIST terminology. In particular, replacing the numeric identifier \u201c4\u201d with the named identifier \u201cnistAlgorithm(4)\u201d is recommended to align with the naming convention used in the NIST Computer Security Objects Register (CSOR) and to enhance clarity and readability.\r\nFor reference, the NIST CSOR is available at: https://csrc.nist.gov/projects/computer-security-objects-register/algorithm-registration", "submit_date": "2026-04-27", "submitter_name": "Abel C. H. Chen", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 15:08:44"}, {"errata_id": "8894", "doc-id": "RFC1812", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.2.2", "orig_text": "Before a router can process any IP packet, it MUST perform a the\r\n   following basic validity checks on the packet's IP header to ensure\r\n   that the header is meaningful.", "correct_text": "Before a router can process any IP packet, it MUST perform the\r\n   following basic validity checks on the packet's IP header to ensure\r\n   that the header is meaningful.", "notes": "\"a the\" is incorrect", "submit_date": "2026-04-27", "submitter_name": "tbo", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-06-30 15:10:43"}, {"errata_id": "8914", "doc-id": "RFC8986", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.2", "orig_text": "This SID is advertised in the control plane as\r\n         2001:db8:bbbb:3:100:: with an SRv6 Endpoint Behavior codepoint\r\n         value of 5.", "correct_text": "This SID is advertised in the control plane as\r\n         2001:db8:bbbb:3:100:: with an SRv6 Endpoint Behavior codepoint\r\n         value of 4.", "notes": "100 -> is value 4\r\n\r\nRejection notes: This erratum is wrong. The reporter seems to be mistaken that the endpoint behavior is encoded within the SID. The SRv6 Endpoint Behavior for End.X is 5 per https://www.iana.org/assignments/segment-routing/segment-routing.xhtml#srv6-endpoint-behaviors", "submit_date": "2026-05-14", "submitter_name": "chiennan_lin", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-07-16 05:47:30"}, {"errata_id": "8896", "doc-id": "RFC9858", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "A.1\r\nMessage     54657374206d65737361676520666f72  |Test message for|\r\n            205348413235362d3139320a          | SHA-256/192.|\r\n\r\nA.2\r\nMessage     54657374206d65737361676520666f72  |Test message for|\r\n            205348414b453235362d3139320a      | SHAKE256/192.|\r\n\r\nA.3\r\nMessage     54657374206d657361676520666f7220  |Test message for|\r\n            5348414b453235362d3235360a        |SHAKE256/256.|", "correct_text": "A.1\r\nMessage     54657374206d65737361676520666f72  |Test message for|\r\n            205348413235362d3139320a          | SHA256-192.|\r\n\r\nA.2\r\nMessage     54657374206d65737361676520666f72  |Test message for|\r\n            205348414b453235362d3139320a      | SHAKE256-192.|\r\n\r\nA.3\r\nMessage     54657374206d657361676520666f7220  |Test message for|\r\n            5348414b453235362d3235360a        |SHAKE256-256.|", "notes": "The ascii text is incorrect, hex encoding is correct.\r\n\r\nI've checked with https://github.com/pornin/crrl/blob/main/src/lms.rs (\"KAT_MSG\"). The values haven't changed since draft 9 mentioned in that file. Have also checked A.1 using another work-in-progress implementation.\r\n\r\nCase A.4 doesn't need changing, the hex and ascii match.", "submit_date": "2026-04-29", "submitter_name": "Matt Johnston", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8898", "doc-id": "RFC8520", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix B", "orig_text": "       \"ietf-mud-detext-example:is-detnet-required\": \"false\",\r\n       \"is-supported\": true,", "correct_text": "       \"ietf-mud-detext-example:is-detnet-required\": false,\r\n       \"is-supported\": true,", "notes": "is-detnet-required is defined as a boolean in that same Section. The rule defined in rfc7951#section-6.3 should be followed for JSON representation.", "submit_date": "2026-04-30", "submitter_name": "Mohamed BOUCADAIR", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8901", "doc-id": "RFC8656", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "18.13 Figure 11", "orig_text": "    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Reserved                     |  ICMP Type  |  ICMP Code      |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Error Data                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "correct_text": "    0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |  Reserved                     |  ICMP Type    |  ICMP Code    |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+\r\n   |                          Error Data                           |\r\n   +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+", "notes": "The diagram in Figure 11 has a misplaced \"|\" that shows these fields as being 7, and 9 bits respectively. Both ICMP and ICMPv6 are specified to have an 8-bit ICMP Type and an 8-bit ICMP Code.", "submit_date": "2026-05-04", "submitter_name": "Evan", "verifier_id": "", "verifier_name": "G Fairhurst", "update_date": "2026-05-13 16:05:35"}, {"errata_id": "8911", "doc-id": "RFC2459", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Table of Contents", "orig_text": "T\bT\bT\bTa\ba\ba\bab\bb\bb\bbl\bl\bl\ble\be\be\be o\bo\bo\bof\bf\bf\bf C\bC\bC\bCo\bo\bo\bon\bn\bn\bnt\bt\bt\bte\be\be\ben\bn\bn\bnt\bt\bt\bts\bs\bs\bs", "correct_text": "Table of Contents", "notes": "the letters of \"Table of Contents\" are quadrupled and there are backspace characters (^H\r\n(ASCII 0x08)) between most of the letters", "submit_date": "2026-05-12", "submitter_name": "Jean Mahoney", "verifier_id": "", "verifier_name": "RFC Editor", "update_date": "2026-05-12 20:04:49"}, {"errata_id": "8900", "doc-id": "RFC8489", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "<CODE BEGINS>\r\n   int type(int method, int cls) {\r\n     return (method & 0x1F80) << 2 | (method & 0x0070) << 1\r\n       | (method & 0x000F) | (cls & 0x0002) << 7\r\n       | (cls & 0x0001) << 4;\r\n     }\r\n   <CODE ENDS>", "correct_text": "<CODE BEGINS>\r\n   int type(int method, int cls) {\r\n     return (method & 0xF80) << 2 | (method & 0x070) << 1\r\n       | (method & 0x00F) | (cls & 0x0002) << 7\r\n       | (cls & 0x0001) << 4;\r\n     }\r\n   <CODE ENDS>", "notes": "The STUN method is 12 bits with a max value of 0x0FFF.  The mask 0x1F80 covers an extra bit.  Perhaps shortening the masks to 3 digits could make things more clear?", "submit_date": "2026-05-04", "submitter_name": "Evan", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 15:11:40"}, {"errata_id": "8906", "doc-id": "RFC346", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "+34672811480", "orig_text": "Nonda c\u00f3digo acceso Gmail me dice cobran por mensajes \r\nA Gmail compa\u00f1\u00eda mibil de Lebara .\r\nNo dando c\u00f3digo haceso a Gmail de teodororomeroi47@gmail.com \r\nN\u00famero m\u00f3vil Lebara 672811480\r\nEspa\u00f1a .ciudad.  Rota .\r\nNombre Ignacio apellido Teodoro romero \r\nDNI 75787416 r\r\nAn echo demora Gmail sin dar acceso a correo electr\u00f3nico Gmail\r\nPor qu\u00e9 dice compa\u00f1\u00eda Lebara de tarjeta sim cobra por \r\nMensaje a Gmail Google .\r\nSin darme acceso a c\u00f3digo entra Gmail ", "correct_text": "No recibo c\u00f3digo acceso a Gmail Google aver\u00eda o por\r\nAlgo m\u00e1s no se ", "notes": "No da c\u00f3digo acceso la Gmail", "submit_date": "2026-05-07", "submitter_name": "Ignacio Teodoro romero", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8907", "doc-id": "RFC8554", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.3", "orig_text": "   struct lms_key_n32 {\r\n     lmots_algorithm_type ots_alg_type;\r\n     opaque I[16];\r\n     opaque K[32];\r\n   };\r\n", "correct_text": "   struct lms_key_n32 {\r\n     lms_algorithm_type lms_alg_type;\r\n     lmots_algorithm_type ots_alg_type;\r\n     opaque I[16];\r\n     opaque K[32];\r\n   };\r\n", "notes": "As section 5.3 reads:\r\n   The LMS public key can be represented as the byte string\r\n     u32str(type) || u32str(otstype) || I || T[1]\r\n\r\nBut the definition of \"u32str(type)\" is missing in chapter 3.3 in the above defined structure.", "submit_date": "2026-05-07", "submitter_name": "Olaf St\u00fccker", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8909", "doc-id": "RFC790", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Page 9", "orig_text": "65 101 TACACS Database Service [SGC]\r\n65 101 UNASSIGNED [JBP]\r\n69 105 Unassigned [JBP]\r\n69 105 Trivial File Transfer [47,KRS]", "correct_text": "65 101 TACACS Database Service [SGC]\r\n69 105 Trivial File Transfer [47,KRS]", "notes": "There are duplicate/redundant entries in the \"Host Specific Functions\" table on page 9. \r\n\r\n1. Decimal port 65 is listed twice: once as assigned to \"TACACS Database Service\" and once as \"UNASSIGNED.\" \r\n2. Decimal port 69 is listed twice: once as \"Unassigned\" and once as \"Trivial File Transfer.\" \r\n\r\nThese are logical contradictions in the registry that likely occurred during manual clerical updates to the document in 1981.", "submit_date": "2026-05-08", "submitter_name": "Anish Kumar Patel", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "8921", "doc-id": "RFC5882", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.3.2.2", "orig_text": "Control protocols that cannot signal a planned restart depend on the\r\n   recently restarted system to signal the Graceful Restart prior to the\r\n   control protocol adjacency timeout.  In most cases, whether the\r\n   restart is planned or unplanned, it is likely that the BFD session\r\n   will time out prior to the onset of Graceful Restart, in which case a\r\n   topology change SHOULD be signaled in the control protocol as\r\n   specified in Section 3.2.", "correct_text": "Control protocols that cannot signal a planned restart depend on the\r\n   recently restarted system to signal the Graceful Restart prior to the\r\n   control protocol adjacency timeout.  In most cases, whether the\r\n   restart is planned or unplanned, it is likely that the BFD session\r\n   will time out prior to the onset of Graceful Restart, in which case a\r\n   topology change SHOULD be signaled in the control protocol as\r\n   specified in Section 4.2.", "notes": "In this paragraph Section 3.2 should read as Section 4.2. From the history of this document, it can be seen that draft-ietf-bfd-generic-04 introduced a new section 3 while the reference to the original section 3.2 was not updated.", "submit_date": "2026-05-19", "submitter_name": "Xiao Min", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-07-16 05:59:01"}, {"errata_id": "8922", "doc-id": "RFC5882", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.1.2", "orig_text": "The basic mechanisms are covered in Section 3 above.  At this time,\r\n   OSPFv2 and OSPFv3 carry routing information for a single data\r\n   protocol (IPv4 and IPv6, respectively) so when it is desired to\r\n   signal a topology change after a BFD session failure, this should be\r\n   done by tearing down the corresponding OSPF neighbor.\r\n\r\n   IS-IS may be used to support only one data protocol, or multiple data\r\n   protocols.  [ISIS] specifies a common topology for multiple data\r\n   protocols, but work is under way to support multiple topologies.  If\r\n   multiple topologies are used to support multiple data protocols (or\r\n   multiple classes of service of the same data protocol), the topology-\r\n   specific path associated with a failing BFD session should no longer\r\n   be advertised in IS-IS Label Switched Paths (LSPs) in order to signal\r\n   a lack of connectivity.  Otherwise, a failing BFD session should be\r\n   signaled by simulating an IS-IS adjacency failure.\r\n\r\n   OSPF has a planned restart signaling mechanism, whereas IS-IS does\r\n   not.  The appropriate mechanisms outlined in Section 3.3 should be\r\n   used.", "correct_text": "The basic mechanisms are covered in Section 4 above.  At this time,\r\n   OSPFv2 and OSPFv3 carry routing information for a single data\r\n   protocol (IPv4 and IPv6, respectively) so when it is desired to\r\n   signal a topology change after a BFD session failure, this should be\r\n   done by tearing down the corresponding OSPF neighbor.\r\n\r\n   IS-IS may be used to support only one data protocol, or multiple data\r\n   protocols.  [ISIS] specifies a common topology for multiple data\r\n   protocols, but work is under way to support multiple topologies.  If\r\n   multiple topologies are used to support multiple data protocols (or\r\n   multiple classes of service of the same data protocol), the topology-\r\n   specific path associated with a failing BFD session should no longer\r\n   be advertised in IS-IS Label Switched Paths (LSPs) in order to signal\r\n   a lack of connectivity.  Otherwise, a failing BFD session should be\r\n   signaled by simulating an IS-IS adjacency failure.\r\n\r\n   OSPF has a planned restart signaling mechanism, whereas IS-IS does\r\n   not.  The appropriate mechanisms outlined in Section 4.3 should be\r\n   used.", "notes": "In this section, Section 3 should read as Section 4 and Section 3.3 should read as Section 4.3. From the history of this document, it can be seen that draft-ietf-bfd-generic-04 introduced a new section 3 while the references to the original section 3 and section 3.3 were not updated.", "submit_date": "2026-05-19", "submitter_name": "Xiao Min", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-07-16 05:59:20"}, {"errata_id": "8923", "doc-id": "RFC5882", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "10.2", "orig_text": "[BGP-GRACE] describes a Graceful Restart mechanism for BGP.  If\r\n   Graceful Restart is not taking place on an EBGP session, and the\r\n   corresponding BFD session fails, the EBGP session should be torn down\r\n   in accordance with Section 3.2.", "correct_text": "[BGP-GRACE] describes a Graceful Restart mechanism for BGP.  If\r\n   Graceful Restart is not taking place on an EBGP session, and the\r\n   corresponding BFD session fails, the EBGP session should be torn down\r\n   in accordance with Section 4.2.", "notes": "In this paragraph Section 3.2 should read as Section 4.2. From the history of this document, it can be seen that draft-ietf-bfd-generic-04 introduced a new section 3 while the reference to the original section 3.2 was not updated.", "submit_date": "2026-05-19", "submitter_name": "Xiao Min", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-07-16 05:59:42"}, {"errata_id": "8924", "doc-id": "RFC7643", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "   Attribute names MUST conform to the following ABNF rules:\r\n\r\n               ATTRNAME   = ALPHA *(nameChar)\r\n               nameChar   = \"$\" / \"-\" / \"_\" / DIGIT / ALPHA\r\n\r\n                    Figure 1: ABNF for Attribute Names", "correct_text": "   Attribute names MUST conform to the following ABNF rules:\r\n\r\n               ATTRNAME   = [\"$\"] ALPHA *(nameChar)\r\n               nameChar   = \"$\" / \"-\" / \"_\" / DIGIT / ALPHA\r\n\r\n                    Figure 1: ABNF for Attribute Names", "notes": "The ABNF rules specifies that attribute names must start with an alphabetical character. However, field \"$ref\" does not comply with these rules as it starts with a dollar sign ($). Because \"$ref\" is referenced multiple times in both RFC 7643 and RFC 7644, this is most likely intended behaviour and the ATTRNAME is missing an optional dollar sign at the front.", "submit_date": "2026-05-19", "submitter_name": "Saku Heiskanen", "verifier_id": "", "verifier_name": null, "update_date": null}, {"errata_id": "5318", "doc-id": "RFC8259", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7", "orig_text": "string = quotation-mark *char quotation-mark\r\n\r\n      char = unescaped /\r\n          escape (\r\n              %x22 /          ; \"    quotation mark  U+0022\r\n              %x5C /          ; \\    reverse solidus U+005C\r\n              %x2F /          ; /    solidus         U+002F\r\n              %x62 /          ; b    backspace       U+0008\r\n              %x66 /          ; f    form feed       U+000C\r\n              %x6E /          ; n    line feed       U+000A\r\n              %x72 /          ; r    carriage return U+000D\r\n              %x74 /          ; t    tab             U+0009\r\n              %x75 4HEXDIG )  ; uXXXX                U+XXXX\r\n\r\n      escape = %x5C              ; \\\r\n\r\n      quotation-mark = %x22      ; \"\r\n\r\n      unescaped = %x20-21 / %x23-5B / %x5D-10FFFF", "correct_text": "string = quotation-mark *char quotation-mark\r\n\r\n      char = unescaped /\r\n          escape (\r\n              %x22 /          ; \"    quotation mark  U+0022\r\n              %x5C /          ; \\    reverse solidus U+005C\r\n              %x2F /          ; /    solidus         U+002F\r\n              %x62 /          ; b    backspace       U+0008\r\n              %x66 /          ; f    form feed       U+000C\r\n              %x6E /          ; n    line feed       U+000A\r\n              %x72 /          ; r    carriage return U+000D\r\n              %x74 /          ; t    tab             U+0009\r\n              %x75 4HEXDIG )  ; uXXXX                U+XXXX\r\n\r\n      escape = %x5C              ; \\\r\n\r\n      quotation-mark = %x22      ; \"\r\n\r\n      unescaped = %x20-21 / %x23-2E / %x30-5B / %x5D-10FFFF", "notes": "The solidus U+002F is listed as being escaped above, but is not excluded in the 'unescaped' sequence.", "submit_date": "2018-04-04", "submitter_name": "Joakim Erdfelt", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-05-28 18:40:55"}, {"errata_id": "9045", "doc-id": "RFC8410", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9", "orig_text": "pk-X25519 PUBLIC-KEY ::= {\r\n        IDENTIFIER id-X25519\r\n        -- KEY no ASN.1 wrapping --\r\n        PARAMS ARE absent\r\n        CERT-KEY-USAGE { keyAgreement }\r\n        PRIVATE-KEY CurvePrivateKey\r\n    }\r\n\r\n    KeyWrapAlgorithms KEY-WRAP ::= {\r\n        kwa-aes128-wrap | kwa-aes256-wrap,\r\n        ...\r\n    }\r\n\r\n    kaa-X448 KEY-AGREE ::= {\r\n        IDENTIFIER id-X448\r\n        PARAMS ARE absent\r\n        PUBLIC-KEYS {pk-X448}\r\n        UKM -- TYPE no ASN.1 wrapping  -- ARE preferredPresent\r\n        SMIME-CAPS {\r\n           TYPE AlgorithmIdentifier{KEY-WRAP, {KeyWrapAlgorithms}}\r\n           IDENTIFIED BY id-X448 }\r\n    }\r\n\r\n    pk-X448 PUBLIC-KEY ::= {\r\n        IDENTIFIER id-X448\r\n        -- KEY no ASN.1 wrapping --\r\n        PARAMS ARE absent\r\n        CERT-KEY-USAGE { keyAgreement }\r\n        PRIVATE-KEY CurvePrivateKey\r\n    }", "correct_text": "pk-X25519 PUBLIC-KEY ::= {\r\n        IDENTIFIER id-X25519\r\n        -- KEY no ASN.1 wrapping --\r\n        PARAMS ARE absent\r\n        CERT-KEY-USAGE { keyAgreement, encipherOnly, decipherOnly }\r\n        PRIVATE-KEY CurvePrivateKey\r\n    }\r\n\r\n    KeyWrapAlgorithms KEY-WRAP ::= {\r\n        kwa-aes128-wrap | kwa-aes256-wrap,\r\n        ...\r\n    }\r\n\r\n    kaa-X448 KEY-AGREE ::= {\r\n        IDENTIFIER id-X448\r\n        PARAMS ARE absent\r\n        PUBLIC-KEYS {pk-X448}\r\n        UKM -- TYPE no ASN.1 wrapping  -- ARE preferredPresent\r\n        SMIME-CAPS {\r\n           TYPE AlgorithmIdentifier{KEY-WRAP, {KeyWrapAlgorithms}}\r\n           IDENTIFIED BY id-X448 }\r\n    }\r\n\r\n    pk-X448 PUBLIC-KEY ::= {\r\n        IDENTIFIER id-X448\r\n        -- KEY no ASN.1 wrapping --\r\n        PARAMS ARE absent\r\n        CERT-KEY-USAGE { keyAgreement, encipherOnly, decipherOnly }\r\n        PRIVATE-KEY CurvePrivateKey\r\n    }", "notes": "This erratum remains applicable after RFC 9295. RFC 9295 Section 3\r\nreplaces RFC 8410 Section 5 and normatively requires keyAgreement while\r\npermitting either encipherOnly or decipherOnly to also be present for\r\ncertificates whose SubjectPublicKeyInfo identifies X25519 or X448. RFC\r\n9295 does not update the ASN.1 module in RFC 8410 Section 9, where both\r\npk-X25519 and pk-X448 continue to omit these two permitted bits.\r\n\r\nRFC 5912 defines PUBLIC-KEY.&keyUsage as the set of bits legal for the\r\nkey type and explicitly states that this set does not express how bits\r\nmay be paired. Adding encipherOnly and decipherOnly to CERT-KEY-USAGE\r\ntherefore does not permit both bits to be asserted together; RFC 9295\r\nSection 3 continues to govern valid combinations.\r\n\r\nThe correction is also consistent with RFC 5280 Section 4.2.1.3, which\r\ndefines encipherOnly and decipherOnly only in conjunction with\r\nkeyAgreement, and with the Diffie-Hellman, KEA, and elliptic-curve key\r\nagreement PUBLIC-KEY definitions in RFC 5912, which list keyAgreement,\r\nencipherOnly, and decipherOnly as legal key-usage bits.", "submit_date": "2026-07-29", "submitter_name": "Kaj Kowalski", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-29 13:50:15"}, {"errata_id": "9000", "doc-id": "RFC9135", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.1 and 5.2", "orig_text": "In Section 5.1:\r\nThis route MUST be advertised with two Route Targets, one corresponding to the MAC-VRF of the tenant's subnet \r\nand another corresponding to the tenant's IP-VRF.\r\n\r\nIn Section 5.2:\r\nWhen a PE (e.g., PE2 in Figure 4 above) receives this EVPN MAC/IP Advertisement route, it performs the following:\r\n\r\nThe MAC-VRF Route Target and Ethernet Tag, if the latter is non-zero, are used to identify the correct MAC-VRF and bridge table, \r\nand if they are found, the MAC address is imported. \r\nThe IP-VRF Route Target is used to identify the correct IP-VRF, and if it is found, the IP address is imported.", "correct_text": "In Section 5,1:\r\nThis route MUST be advertised with two Route Targets, one corresponding to the MAC-VRF of the tenant's subnet and another corresponding to the tenant's IP-VRF. \r\nThe Route Targets corresponding to the tenants IP-VRF SHOULD be omitted if the IP address the NLRI of teh route is a link-local IPv6 address.\r\n\r\nIn Section 5.2:\r\nWhen a PE (e.g., PE2 in Figure 4 above) receives this EVPN MAC/IP Advertisement route, it performs the following:\r\n\r\nThe MAC-VRF Route Target and Ethernet Tag, if the latter is non-zero, are used to identify the correct MAC-VRF and bridge table, \r\nand if they are found, the MAC address is imported. \r\nIf the IP address in the NLRI of the route is not an IPv6 link-local address, the IP-VRF Route Target is used to identify the correct IP-VRF, and if it is found, the IP address is imported.", "notes": "Claim by submitter\r\n============\r\nAs per Section 2.5.6 of RFC 4291, \"Routers must not forward any packets with Link-Local source or destination addresses to other links\". \r\n\r\nTherefore, these addresses MUST NOT be in the IP-VRF in ingress PE, and there is no need to attach Route Targets of the IP-VRF in the egress PE because they are used solely for identification of the importing IP-VRF in the ingress PE.\r\n\r\nAD Review\r\n=======\r\nI agree with the underlying observation that an IPv6 link-local address must not become an inter-subnet forwarding route. However, I do not think the proposed correction can be verified as written.\r\n\r\nRFC 4291 prohibits forwarding packets with link-local source or destination addresses to another link, but this does not mean that link-local addresses cannot appear as interface- or zone-scoped state within an IP-VRF.\r\n\r\nMore importantly, the proposed correction conflicts with RFC 9135 itself. Section 4.2 uses the presence of both Label2 and an IP-VRF Route Target to identify symmetric IRB. Section 9.1.1 also says that an RT-2 carrying both Label1 and Label2 but only a MAC-VRF Route Target MUST be treated as withdrawn. Omitting only the IP-VRF Route Target would therefore cause compliant receivers to discard the route.\r\n\r\nThere may be a valid clarification or protocol update here: a link-local MAC/IP binding could perhaps be advertised only for MAC-VRF and Proxy-ND purposes, without Label2 or IP-VRF import. However, that would require coordinated changes to several sections and discussion in BESS.\r\n\r\nI therefore recommend rejecting this erratum as written and taking the underlying IPv6 link-local handling question to the BESS working group.", "submit_date": "2026-06-10", "submitter_name": "Alexander (\"Sasha\") Vainshtein", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2026-08-18 10:25:12"}, {"errata_id": "8928", "doc-id": "RFC5711", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "2.2.  Behavior at Receiving Nodes", "orig_text": "In accordance with Section 3.7.1 of\r\n[RFC2205], a node receiving a PathErr message takes no action upon\r\nit, and consequently the node must not clear Path or Resv control-\r\nplane or data-plane state.", "correct_text": "In accordance with Section 3.1.7 of\r\n[RFC2205], a node receiving a PathErr message takes no action upon\r\nit, and consequently the node must not clear Path or Resv control-\r\nplane or data-plane state.", "notes": "The document contains an incorrect reference to the \"Path Error Messages\" chapter of RFC2205", "submit_date": "2026-05-29", "submitter_name": "Mikhail Gladii", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-06-30 15:28:49"}, {"errata_id": "9046", "doc-id": "RFC3647", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.5.4", "orig_text": "*  Frequency with which audit logs are processed or archived, for example, weekly, \r\nfollowing an alarm or anomalous event, or when ever the audit log is n% full;", "correct_text": "*  Frequency with which audit logs are processed or archived, for example, weekly, \r\nfollowing an alarm or anomalous event, or whenever the audit log is n% full;", "notes": "r/when ever/whenever", "submit_date": "2026-07-28", "submitter_name": "Peng Yuan", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-03 16:47:54"}, {"errata_id": "9092", "doc-id": "RFC826", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Packet Reception", "orig_text": "?Is the opcode ares_op$REQUEST?  (NOW look at the opcode!!)\r\n      Yes:\r\n\tSwap hardware and protocol fields, putting the local\r\n\t    hardware and protocol addresses in the sender fields.", "correct_text": "?Is the opcode ares_op$REQUEST?  (NOW look at the opcode!!)\r\n      Yes:\r\n        Putting the local hardware address in the sender hardware\r\n        field and the local protocol address in the sender protocol\r\n        field. For completeness, the target hardware field may be set\r\n        to the original request's sender hardware address, and the\r\n        target protocol address field may be set to the original\r\n        request's protocol address.", "notes": "The instruction to \"Swap hardware and protocol fields\" is ambiguous\r\nand can lead to conflicting interpretations. This correction is\r\nstrictly a clarification of the protocol's intended behavior and does\r\nnot alter the actual implementation requirements of RFC 826.\r\n\r\nPossible interpretations include:\r\n1. Exchanging the hardware and protocol fields themselves (which does not make sense), e.g.,\r\nar$sha <--> ar$spa and ar$tha <--> ar$tpa.\r\n2. Exchanging the sender and target hardware and protocol fields, e.g.,\r\nar$sha <--> ar$tha and ar$spa <--> ar$tpa.\r\n\r\nThe second interpretation is closer to the intended behavior, but it is still problematic\r\nbecause in an ARP request ar$tha is typically all zeros (unknown). Copying ar$tha into\r\nar$sha would therefore produce an invalid sender hardware address.\r\n\r\nThe essential operation is to place the local hardware address in ar$sha and the local\r\nprotocol address in ar$spa when forming the reply.\r\n\r\nRFC 826 indicates that the target protocol address and target hardware address are\r\nincluded primarily for completeness and monitoring. It also notes that the target protocol\r\naddress is not strictly required in replies and that the target hardware address may be\r\nused by some implementations as the packet\u2019s hardware destination address.\r\n\r\nSince RFC 826 predates RFC 2119 and does not define strict requirement levels for\r\nthese fields, this errata uses the wording \u201cmay\u201d when describing the population of\r\nar$tha and ar$tpa.", "submit_date": "2026-08-05", "submitter_name": "August Frank Lee", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-10 16:33:44"}, {"errata_id": "9132", "doc-id": "RFC9920", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "1", "orig_text": "Under this version, various responsibilities of the RFC Editor function are performed alone \r\nor in combination by the RFC Series Working Group (RSWG), RFC Series Advisory Board (RSAB), \r\nRFC Production Center (RPC), RFC Series Consulting Editor (RSCE), and IETF Administration Limited \r\nLiability Company (IETF LLC) [RFC8711], which collectively comprise the RFC Editor function.", "correct_text": "Under this version, various responsibilities of the RFC Editor function are performed alone \r\nor in combination by the RFC Series Working Group (RSWG), RFC Series Approval Board (RSAB), \r\nRFC Production Center (RPC), RFC Series Consulting Editor (RSCE), and IETF Administration Limited \r\nLiability Company (IETF LLC) [RFC8711], which collectively comprise the RFC Editor function.", "notes": "\"RFC Series Advisory Board (RSAB)\" appears in only one location in the RFC, leading my suspicion that \"RFC Series Approval Board (RSAB)\" is the actual intended term.", "submit_date": "2026-08-12", "submitter_name": "John Curran", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-12 19:11:10"}, {"errata_id": "9047", "doc-id": "RFC3647", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.9", "orig_text": "This ordering is intended help lawyers review CPs, CPSs, and other documents \r\nadhering to this framework.", "correct_text": "This ordering is intended to help lawyers review CPs, CPSs, and other documents \r\nadhering to this framework.", "notes": "r/intended help/intended to help", "submit_date": "2026-07-28", "submitter_name": "Peng Yuan", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-03 16:48:45"}, {"errata_id": "9093", "doc-id": "RFC1191", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "PTMU estimate", "correct_text": "PMTU estimate", "notes": "This is a spelling correction.", "submit_date": "2026-08-05", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-11 21:15:49"}, {"errata_id": "9133", "doc-id": "RFC1752", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.1", "orig_text": "The criteria described in this document include: (from Kasten94)\r\n\r\n   * complete specification - The proposal must completely describe the\r\n     proposed protocol.  We must select an IPng by referencing specific\r\n     documents, not to future work.\r\n   * architectural simplicity - The IP-layer protocol should be as\r\n     simple as possible with functions located elsewhere that are more\r\n     appropriately performed at protocol layers other than the IP layer.\r\n   * scale - The IPng Protocol must allow identifying and addressing at\r\n     least 10**9 leaf-networks (and preferably much more)\r\n   * topological flexibility - The routing architecture and protocols\r\n     ofIPng must allow for many different network topologies.  They must\r\n     not assume that the network's physical structure is a tree.\r\n[...]", "correct_text": "The criteria described in this document include: (from Kasten94)\r\n\r\n   * complete specification - The proposal must completely describe the\r\n     proposed protocol.  We must select an IPng by referencing specific\r\n     documents, not to future work.\r\n   * architectural simplicity - The IP-layer protocol should be as\r\n     simple as possible with functions located elsewhere that are more\r\n     appropriately performed at protocol layers other than the IP layer.\r\n   * scale - The IPng Protocol must allow identifying and addressing at\r\n     least 10**9 leaf-networks (and preferably much more)\r\n   * topological flexibility - The routing architecture and protocols\r\n     of IPng must allow for many different network topologies.  They must\r\n     not assume that the network's physical structure is a tree.\r\n[...]", "notes": "Missing space between \"of\" and \"IPng\".", "submit_date": "2026-08-13", "submitter_name": "Elia Nitsche", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-14 18:50:04"}, {"errata_id": "8929", "doc-id": "RFC8175", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "12.18", "orig_text": "The Link Characteristics Request Message MUST also contain at least\r\n   one of each of the following Data Items:", "correct_text": "The Link Characteristics Request Message MUST also contain at least\r\n   one of the following Data Items:", "notes": "The following paragraph makes it clear that there can be only one or two of the three listed items. Thus \"of each\" should be removed. (Errata originally reported on the MANET mailing list by Henning Rogge https://mailarchive.ietf.org/arch/msg/manet/Hy4W-0awcEh73S_bxx-H4Bhc3nQ/ )", "submit_date": "2026-06-02", "submitter_name": "Donald Eastlake", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2026-08-25 17:07:40"}, {"errata_id": "9003", "doc-id": "RFC9000", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "12.5", "orig_text": "Note that it is not possible to send the following frames in 0-RTT\r\npackets for various reasons: ACK, CRYPTO, HANDSHAKE_DONE, NEW_TOKEN,\r\nPATH_RESPONSE, and RETIRE_CONNECTION_ID.  A server MAY treat receipt\r\nof these frames in 0-RTT packets as a connection error of type\r\nPROTOCOL_VIOLATION.", "correct_text": "Note that it is not possible to send the following frames in 0-RTT\r\npackets for various reasons: ACK, CRYPTO, HANDSHAKE_DONE, NEW_TOKEN,\r\nPATH_RESPONSE, and RETIRE_CONNECTION_ID.  A server MAY treat receipt\r\nof these frames in 0-RTT packets as a connection error of type\r\nPROTOCOL_VIOLATION.  Note that receipt of a NEW_TOKEN frame is always\r\na connection error of type PROTOCOL_VIOLATION, as specified in\r\nSection 19.7, and is not subject to the MAY above.", "notes": "Section 19.7 states unconditionally that \"a server MUST treat receipt of a NEW_TOKEN frame as a connection error of type PROTOCOL_VIOLATION\", because NEW_TOKEN is a server-to-client frame. Section 12.5 lists NEW_TOKEN among the frames for which a server MAY treat receipt in 0-RTT packets as a connection error. For the specific case of a server receiving a NEW_TOKEN frame in a 0-RTT packet, the permissive MAY in Section 12.5 reads as if it could override the unconditional MUST in Section 19.7. While Section 19.7 (being specific to NEW_TOKEN) would normally govern, the spec does not explicitly state this precedence, leaving an apparent normative-strength overlap. This is submitted as Editorial: the proposed note in Section 12.5 clarifies that Section 19.7's MUST takes precedence for NEW_TOKEN in all packet number spaces, removing the ambiguity. (No change to intended behavior is requested, only clarification of the relationship between the two sections.)\r\n\r\n- It complicates the section to mention NEW_TOKEN this way. The text should be changed when the document is next updated.", "submit_date": "2026-06-11", "submitter_name": "zhangph", "verifier_id": "", "verifier_name": "Gorry Fairhurst", "update_date": "2026-06-15 07:28:12"}, {"errata_id": "9048", "doc-id": "RFC4518", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B.", "orig_text": "In particular, the statements should be taken to mean that if an assertion value and \r\nattribute value match without any consideration to insignificant characters, then that \r\nassertion value should also match any attribute value that differs only by inclusion nor \r\nremoval of insignificant characters.", "correct_text": "In particular, the statements should be taken to mean that if an assertion value and \r\nattribute value match without any consideration to insignificant characters, then that \r\nassertion value should also match any attribute value that differs only by inclusion or \r\nremoval of insignificant characters.", "notes": "r/nor/or", "submit_date": "2026-07-28", "submitter_name": "Peng Yuan", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-03 16:49:12"}, {"errata_id": "9134", "doc-id": "RFC9907", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.30.3.2.", "orig_text": "\"value\":       Contains the decimal value of the IANA-assigned\r\n               value.", "correct_text": "\"value\":       Is included only if a registration contains an explicit value.\r\n               Contains the decimal value of the IANA-assigned value.", "notes": "RFC 9907 refers to the enum's substatement \"value\", described in https://datatracker.ietf.org/doc/html/rfc7950#section-9.6.4.2.  \r\nIn YANG, the \"value\" statement is optional and typically not specified when the YANG-assigned value is the correct value.  \r\nA \"value\" substatement shouldn't be required.", "submit_date": "2026-08-15", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-17 16:44:14"}, {"errata_id": "9004", "doc-id": "RFC9111", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.5", "orig_text": "A shared cache MUST NOT use a cached response to a request with an\r\nAuthorization header field (Section 11.6.2 of [HTTP]) to satisfy any\r\nsubsequent request unless the response contains a Cache-Control field\r\nwith a response directive (Section 5.2.2) that allows it to be stored\r\nby a shared cache, and the cache conforms to the requirements of that\r\ndirective for that response.  In this specification, the following\r\nresponse directives have such an effect: must-revalidate\r\n(Section 5.2.2.2), public (Section 5.2.2.9), and s-maxage\r\n(Section 5.2.2.10).", "correct_text": "A shared cache MUST NOT use a cached response to a request with an\r\nAuthorization header field (Section 11.6.2 of [HTTP]) to satisfy any\r\nsubsequent request unless the response contains a Cache-Control field\r\nwith a response directive (Section 5.2.2) that allows it to be stored\r\nby a shared cache, and the cache conforms to the requirements of that\r\ndirective for that response.  In this specification, the following\r\nresponse directives have such an effect: must-revalidate\r\n(Section 5.2.2.2), public (Section 5.2.2.9), and s-maxage\r\n(Section 5.2.2.10).  Note that proxy-revalidate (Section 5.2.2.8) is\r\nnot included here: although Section 5.2.2.8 states it is analogous to\r\nmust-revalidate, it governs revalidation behavior after a response\r\nbecomes stale and does not itself authorize a shared cache to store a\r\nresponse to an authenticated request.", "notes": "Section 5.2.2.8 states that proxy-revalidate \"is analogous to must-revalidate (Section 5.2.2.2), except that proxy-revalidate does not apply to private caches\" \u2014 i.e., proxy-revalidate is the shared-cache-specific counterpart of must-revalidate. However, the list in Section 3.5 of response directives that allow a shared cache to store a response to an authenticated request includes must-revalidate but omits proxy-revalidate. This creates an apparent inconsistency between Sections 3.5 and 5.2.2.8. This is submitted as Editorial. The proposed corrected text adds a clarifying note explaining why proxy-revalidate is excluded (it governs revalidation after staleness, not storage authorization), so the relationship between the two sections is made explicit and reader confusion is removed. No change to caching behavior is requested.", "submit_date": "2026-06-11", "submitter_name": "zhangph", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-11 18:06:23"}, {"errata_id": "9049", "doc-id": "RFC6125", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "6.2.1", "orig_text": "Implementers are advised to monitor the state of the art with regard to \r\ncertificate issuance policies and migrate away from support CN-IDs in the\r\nfuture if possible.", "correct_text": "Implementers are advised to monitor the state of the art with regard to \r\ncertificate issuance policies and migrate away from support for CN-IDs in the \r\nfuture if possible.", "notes": "r/support/support for", "submit_date": "2026-07-28", "submitter_name": "Peng Yuan", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-03 16:51:45"}, {"errata_id": "9095", "doc-id": "RFC8259", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11", "orig_text": "<iesg@ietf.org>\r\n\r\nNote:  No \"charset\" parameter is defined for this registration.\r\n      Adding one really has no effect on compliant recipients.", "correct_text": "<iesg@ietf.org>", "notes": "The first sentence of the note first repeats and \r\nwith the second sentence contradicts the statement made a few lines earlier\r\nin the section: `Optional parameters:  n/a` that there are no media type parameters allowed.\r\n\r\nDisallowing the \"charset\" parameter is in line with the change from RFC7159 \r\nthat `Section 8.1 was changed to require the use of UTF-8 when transmitted over a network.` \r\nThe \"no effect\" statement in the note was understandable for the obsolete standards \r\nwhere other encodings were allowed. \r\nBut the rationale for it in RFC8259 is not obvious nor given. \r\nAs argument to the contrary: Security aware applications over the last years increasingly implement \r\nstrict whitelisting of allowed variations. Seeing a charset parameter where non is allowed will not pass\r\nby a strictly whitelisting, compliant recipient implementation. \r\nAnd thus it will have a negative effect on those compliant recipients - which makes the note wrong. \r\n(If the WG would have wished for interoperability with the old standards at this point, it would\r\nhave allowed \"charset\"  as optional and then added a note that only \"utf-8\" is compatible with this RFC.)\r\n(This errata report has some similarities with Errata-ID: 5853 but is different in that it suggests to\r\nfully remove the wrong note.)\r\n\r\nSuggestion: remove the wrong note (and the then superfluous repetition)", "submit_date": "2026-08-06", "submitter_name": "Bernhard E. Reiter", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-10 16:38:45"}, {"errata_id": "9135", "doc-id": "RFC1042", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Interoperation with Ethernet", "orig_text": "Note that the MTU for the Ethernet allows a 1500 octet IP datagram,\r\nwith the MTU for the 802.3 network allows only a 1492 octet IP\r\ndatagram.", "correct_text": "Note that the MTU for the Ethernet allows a 1500 octet IP datagram,\r\nwhile the MTU for the 802.3 network allows only a 1492 octet IP\r\ndatagram.", "notes": "Replace \"with\" by \"while\".", "submit_date": "2026-08-16", "submitter_name": "Aur\u00e9lien G\u00e9r\u00f4me", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-17 16:47:35"}, {"errata_id": "8925", "doc-id": "RFC9343", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1", "orig_text": "The following figure shows the data fields format for enhanced Alternate-Marking TLV (AltMark). This AltMark data can be encapsulated in the IPv6 Options Headers (Hop-by-Hop or Destination Option).", "correct_text": "The following figure shows the data fields format for Alternate-Marking TLV (AltMark). This AltMark data can be encapsulated in the IPv6 Options Headers (Hop-by-Hop or Destination Option).", "notes": "See the OPSAWG email archive at https://mailarchive.ietf.org/arch/msg/opsawg/U_E2jSyR2aBoFdipMIQZ-wV3xZc/\r\n\r\n[Benoit Claise] I am confused because there are mutliple flavors of AltMark, and I recall one being called \"enhanced\" (IIRC, in the context of RFC 9947). However, \"enhanced\" is mentioned a single time in RFC9343. Is this a leftover? Worth an editorial errata?\r\n\r\n[Giuseppe Foccola]: Yes, it is an editorial errata. Feel free to report it.", "submit_date": "2026-05-26", "submitter_name": "Benoit Claise", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2026-06-23 15:31:59"}, {"errata_id": "9050", "doc-id": "RFC8555", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "o  A \"newAccount\" resource (Section 7.3)\r\n\r\no  A \"newOrder\" resource (Section 7.4)", "correct_text": "o  A \"newAccount\" resource (Section 7.3)\r\n\r\no  A \"newAuthz\" resource (Section 7.4)", "notes": "The item for the \"newAuthz\" resource is missing in the list of resources", "submit_date": "2026-07-28", "submitter_name": "Sask", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-03 16:32:18"}, {"errata_id": "9096", "doc-id": "RFC9639", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "8.6", "orig_text": "If this number is non-zero, it is\r\n   followed by the fields themselves, each of which is stored with a\r\n   4-byte length.", "correct_text": "If this number is non-zero, it is followed by the fields themselves.", "notes": "According to the next sentence, it is the field length that is stored with a 4-byte length, not the field itself.", "submit_date": "2026-08-07", "submitter_name": "mengshitia", "verifier_id": "", "verifier_name": "Charles Eckel", "update_date": "2026-08-11 23:55:58"}, {"errata_id": "9136", "doc-id": "RFC9954", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.2", "orig_text": "Recall that, in TLS 1.3 ([TLS13], Section 4.2.8), a KEM public key or\r\nKEM ciphertext is represented as a KeyShareEntry:\r\n\r\n       struct {\r\n           NamedGroup group;\r\n           opaque key_exchange<1..2^16-1>;\r\n       } KeyShareEntry;\r\n\r\n   These are transmitted in the extension_data fields of\r\n   KeyShareClientHello and KeyShareServerHello extensions:\r\n\r\n       struct {\r\n           KeyShareEntry client_shares<0..2^16-1>;\r\n       } KeyShareClientHello;\r\n\r\n       struct {\r\n           KeyShareEntry server_share;\r\n       } KeyShareServerHello;\r\n\r\n   The client's shares are listed in descending order of client\r\n   preference; the server selects one algorithm and sends its\r\n   corresponding share.\r\n\r\n   For a hybrid key exchange, the key_exchange field of a KeyShareEntry\r\n   is the concatenation of the key_exchange field for each of the\r\n   constituent algorithms.  The order of shares in the concatenation\r\n   MUST be the same as the order of algorithms indicated in the\r\n   definition of the NamedGroup.\r\n\r\n   For the client's share, the key_exchange value contains the\r\n   concatenation of the pk outputs of the corresponding KEMs' KeyGen\r\n   algorithms if that algorithm corresponds to a KEM or the (EC)DH\r\n   ephemeral key share if that algorithm corresponds to an (EC)DH group.\r\n   For the server's share, the key_exchange value contains the\r\n   concatenation of the ct outputs of the corresponding KEMs' Encaps\r\n   algorithms if that algorithm corresponds to a KEM or the (EC)DH\r\n   ephemeral key share if that algorithm corresponds to an (EC)DH group.\r\n\r\n   Section 4.2.8 of [TLS13] requires that \"The key_exchange values for\r\n   each KeyShareEntry MUST be generated independently.\"  In the context\r\n   of this document, the same algorithm may appear in multiple named\r\n   groups; thus, this document relaxes the above requirement to allow\r\n   the same key_exchange value for the same algorithm to be reused in\r\n   multiple KeyShareEntry records sent within the same ClientHello.\r\n   However, key_exchange values for different algorithms MUST be\r\n   generated independently.  Explicitly, if the NamedGroup is the hybrid\r\n   key exchange MyECDHMyPQKEM, the KeyShareEntry.key_exchange values\r\n   MUST be generated in one of the following two ways:", "correct_text": "Recall that, in TLS 1.3 ([TLS13], Section 4.3.8), a KEM public key or\r\nKEM ciphertext is represented as a KeyShareEntry:\r\n\r\n       struct {\r\n           NamedGroup group;\r\n           opaque key_exchange<1..2^16-1>;\r\n       } KeyShareEntry;\r\n\r\n   These are transmitted in the extension_data fields of\r\n   KeyShareClientHello and KeyShareServerHello extensions:\r\n\r\n       struct {\r\n           KeyShareEntry client_shares<0..2^16-1>;\r\n       } KeyShareClientHello;\r\n\r\n       struct {\r\n           KeyShareEntry server_share;\r\n       } KeyShareServerHello;\r\n\r\n   The client's shares are listed in descending order of client\r\n   preference; the server selects one algorithm and sends its\r\n   corresponding share.\r\n\r\n   For a hybrid key exchange, the key_exchange field of a KeyShareEntry\r\n   is the concatenation of the key_exchange field for each of the\r\n   constituent algorithms.  The order of shares in the concatenation\r\n   MUST be the same as the order of algorithms indicated in the\r\n   definition of the NamedGroup.\r\n\r\n   For the client's share, the key_exchange value contains the\r\n   concatenation of the pk outputs of the corresponding KEMs' KeyGen\r\n   algorithms if that algorithm corresponds to a KEM or the (EC)DH\r\n   ephemeral key share if that algorithm corresponds to an (EC)DH group.\r\n   For the server's share, the key_exchange value contains the\r\n   concatenation of the ct outputs of the corresponding KEMs' Encaps\r\n   algorithms if that algorithm corresponds to a KEM or the (EC)DH\r\n   ephemeral key share if that algorithm corresponds to an (EC)DH group.\r\n\r\n   Section 4.3.8 of [TLS13] requires that \"The key_exchange values for\r\n   each KeyShareEntry MUST be generated independently.\"  In the context\r\n   of this document, the same algorithm may appear in multiple named\r\n   groups; thus, this document relaxes the above requirement to allow\r\n   the same key_exchange value for the same algorithm to be reused in\r\n   multiple KeyShareEntry records sent within the same ClientHello.\r\n   However, key_exchange values for different algorithms MUST be\r\n   generated independently.  Explicitly, if the NamedGroup is the hybrid\r\n   key exchange MyECDHMyPQKEM, the KeyShareEntry.key_exchange values\r\n   MUST be generated in one of the following two ways:", "notes": "There is a typo in the section number - 4.2.8 instead of 4.3.8", "submit_date": "2026-08-17", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-17 16:52:42"}, {"errata_id": "9051", "doc-id": "RFC9810", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2.8.3.3", "orig_text": "witness             OCTET STRING,\r\n   -- the result of applying the OWF to a\r\n   -- randomly generated INTEGER, A.", "correct_text": "witness             OCTET STRING,\r\n   -- the result of applying the OWF to the DER encoding of a\r\n   -- randomly generated INTEGER, A.", "notes": "So far it has not been specified how to encode the INTEGER before hashing it.", "submit_date": "2026-07-30", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-03 16:32:54"}, {"errata_id": "9097", "doc-id": "RFC3280", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.1.2.2", "orig_text": "The serial number MUST be a positive integer assigned by the CA to\r\n   each certificate.  It MUST be unique for each certificate issued by a\r\n   given CA (i.e., the issuer name and serial number identify a unique\r\n   certificate).  CAs MUST force the serialNumber to be a non-negative\r\n   integer.", "correct_text": "The serial number MUST be a positive integer assigned by the CA to\r\n   each certificate.  It MUST be unique for each certificate issued by\r\n   a given CA (i.e., the issuer name and serial number identify a\r\n   unique certificate).  CAs MUST force the serialNumber to be\r\n   positive integer.", "notes": "r/non-negative/positive\r\nThe text contains inconsistent requirements for the certificate\r\nserialNumber. The first sentence requires the serial number to be a\r\npositive integer, which excludes zero. However, the last sentence\r\nrequires CAs to force the serialNumber to be a non-negative integer,\r\nwhich permits zero. These two requirements are contradictory and may\r\ncause ambiguity for certificate issuers regarding whether a serial\r\nnumber of zero is permitted. The last sentence should use \"positive\r\ninteger\" instead of \"non-negative integer\" to maintain consistency\r\nwithin this section.", "submit_date": "2026-08-07", "submitter_name": "Peng Yuan", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-10 16:42:10"}, {"errata_id": "9137", "doc-id": "RFC10031", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.2", "orig_text": "For example, a constraint that specifies that the acceptable names must all be within an\r\nOrganizationally Unique Identifier (OUI) of '00-00-5e' for an EUI-48 address would have\r\na value part of '00005E000000'H, a mask part of 'FFFFFFFF000000'H, and would be\r\nencoded as OCTET STRING '00005E000000FFFFFF000000'H.", "correct_text": "For example, a constraint that specifies that the acceptable names must all be within an\r\nOrganizationally Unique Identifier (OUI) of '00-00-5e' for an EUI-48 address would have\r\na value part of '00005E000000'H, a mask part of 'FFFFFF000000'H, and would be\r\nencoded as OCTET STRING '00005E000000FFFFFF000000'H.", "notes": "The mask contains one too many octets (seven rather than six). There are too many FF's.", "submit_date": "2026-08-16", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-17 17:00:04"}, {"errata_id": "9005", "doc-id": "RFC7950", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "8.1", "orig_text": "o  All referential integrity constraints defined via the \"path\" statement MUST be satisfied.", "correct_text": "o All referential integrity constraints defined by the value of a leaf with the \"instance-identifier\" or \"leafref\" types MUST be satisfied if the \"require-instance\" property for that type is true.", "notes": "The original bullet item has two problems:\r\n\r\n1. Its formulation was adopted from RFC 6020 without taking into account that the \"require-instance\" statement was added to the \"leafref\" type in YANG 1.1.\r\n\r\n2. The \"instance-identifier\" type defines another referential integrity constraint that should be treated the same as the \"leafref\" constraint.\r\n\r\nVerifier's Note: See the mail thread at https://mailarchive.ietf.org/arch/msg/netmod/9mTZaCpBBNL4a5s9Hzf2w8HlA_k/", "submit_date": "2026-06-22", "submitter_name": "Ladislav Lhotka", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-06-24 16:43:44"}, {"errata_id": "9052", "doc-id": "RFC9483", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2", "orig_text": "crlEntryDetails           REQUIRED\r\n    -- MUST contain a sequence of one reasonCode of type CRLReason\r\n    --   (see [RFC5280], Section 5.3.1)\r\n    -- If the reason for this revocation is not known or shall not\r\n    --   be published, the reasonCode MUST be 0 (unspecified)", "correct_text": "crlEntryDetails           RECOMMENDED\r\n    -- MUST contain a sequence of one reasonCode of type CRLReason\r\n    --   (see [RFC5280], Section 5.3.1) if the reason \r\n    --   for this revocation is known and shall be published.\r\n    -- SHOULD be omitted otherwise.", "notes": "This resolves a conflict with RFC 5280 section 5.3.1, which says: \r\nthe reason code CRL entry extension SHOULD be absent instead of using the unspecified (0) reasonCode value.", "submit_date": "2026-07-30", "submitter_name": "David von Oheimb", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-03 16:33:04"}, {"errata_id": "9138", "doc-id": "RFC10026", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "7.2", "orig_text": "The registry can retrieve information about an intended DS provisioning request\r\nautomatically from the Child DNS operator and apply the it directly;", "correct_text": "The registry can retrieve information about an intended DS provisioning request\r\nautomatically from the Child DNS operator and apply it directly;", "notes": "\"apply the it\" --> \"apply it\"", "submit_date": "2026-08-16", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-17 17:01:59"}, {"errata_id": "9098", "doc-id": "RFC8029", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "2.1", "orig_text": "The 127/8 range for IPv4 and that same range embedded in an\r\n   IPv4-mapped IPv6 address for IPv6 was chosen for a number of reasons.", "correct_text": "The 127/8 range for IPv4 and the Dummy IPv6 Prefix 100:0:0:1::/64 [RFC9780]\r\nfor IPv6 were chosen for a number of reasons, including the requirements\r\nlisted above.", "notes": "The IPv4-mapped IPv6 loopback address block doesn't conform to the\r\nfollowing requirements put forward in Section 2.1:\r\n2.  If an LSP is broken in such a way that it prematurely terminates,\r\n       the diagnostic packet MUST NOT be IP forwarded.\r\n\r\nBecause, unlike the IPv4 loopback range, it is a routable\r\naddress. IANA allocated the Dummy IPv6 Prefix to match the\r\nfunctionality provided by the IPv4 loopback address range.", "submit_date": "2026-08-09", "submitter_name": "Greg Mirsky", "verifier_id": "", "verifier_name": "Jim Guichard", "update_date": "2026-08-25 17:02:47"}, {"errata_id": "9006", "doc-id": "RFC1174", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Overview", "orig_text": "Included in this second recommendation is the explict suggestion that any registered network may be \r\nentered into the DNS database without regard to connected status.", "correct_text": "Included in this second recommendation is the explicit suggestion that any registered network may be \r\nentered into the DNS database without regard to connected status.", "notes": "This is a spelling correction.", "submit_date": "2026-06-21", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-06-22 19:22:17"}, {"errata_id": "9053", "doc-id": "RFC6750", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "Content-Type: application/json;charset=UTF-8", "correct_text": "Content-Type: application/json", "notes": "JSON\u2019s media type does not allow parameters (RFC 8259).\r\nThe example in RFC 6750 incorrectly uses:\r\n\r\nCode\r\napplication/json;charset=UTF-8\r\nStrict OAuth clients perform exact string equality when validating token responses. Because JSON forbids parameters, the charset version is treated as an unknown media type, causing token parsing to fail.\r\n\r\nThis behavior matches the failure mode described in Errata 6161.", "submit_date": "2026-08-02", "submitter_name": "Jen Kinder", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-03 16:35:07"}, {"errata_id": "9099", "doc-id": "RFC4106", "errata_status_code": "Rejected", "errata_type_code": "Editorial", "section": "14", "orig_text": "[GCM]      McGrew, D. and J. Viega, \"The Galois/Counter Mode of\r\n              Operation (GCM)\", Submission to NIST. http://\r\n              csrc.nist.gov/CryptoToolkit/modes/proposedmodes/gcm/\r\n              gcm-spec.pdf, January 2004.", "correct_text": "[GCM] Dworkin, M. \"Recommendation for Block Cipher Modes\r\nof Operation: Galois/Counter Mode (GCM) and GMAC\", NIST Special\r\nPublication 800-38D, November 2007. https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-38d.pdf", "notes": "Included the URL for reference since update did not include it\r\n\r\n--\r\nAlready captured by https://errata.rfc-editor.org/eid1919/", "submit_date": "2026-08-10", "submitter_name": "Valerie Diaz", "verifier_id": "", "verifier_name": "Alice Russo", "update_date": "2026-08-10 17:08:38"}, {"errata_id": "9139", "doc-id": "RFC10018", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.1.1.1.1. and 4.2.1.", "orig_text": "4.1.1.1.1.) \"When an SR P2MP P-tunnel is not shared across MVPNs, i.e., there is one-to-one association between an EVI and an SR P2MP P-tunnel, the MPLS Label field is set to zero as per [RFC6514]. In this case, the SR-MPLS Tree-SID of the PTI of the SR P2MP Policy advertised in the P-tunnel is sufficient to identify the MVPN instance for delivering the payload.\"\r\n\r\n4.2.1.) \"PE1 will encapsulate the MVPN payload into the MPLS label stack <L1, L2, L3, L10> with L10 as the BoS label.\"", "correct_text": "4.1.1.1.1.) \"When an SR P2MP P-tunnel is not shared across EVIs, i.e., there is one-to-one association between an EVI and an SR P2MP P-tunnel, the MPLS Label field is set to zero as per [RFC6514]. In this case, the SR-MPLS Tree-SID of the PTI of the SR P2MP Policy advertised in the P-tunnel is sufficient to identify the EVI for delivering the payload.\"\r\n\r\n4.2.1.) \"PE1 will encapsulate the EVPN payload into the MPLS label stack <L1, L2, L3, L10> with L10 as the BoS label.\"", "notes": "Claim from Submitter:\r\n==============\r\nIn section 4.1.1.1.1, two occurrences of \"MVPN\" appear to be copied from Section 3.2.1.1.\r\nIn section 4.2.1, \"MVPN payload\" should be \"EVPN payload\" (copied from 3.3.1).\r\n\r\nAD Review Notes:\r\n============\r\n* In Section 4.1.1.1.1, the two uses of \u201cMVPN\u201d are inconsistent with the EVPN context and with the remainder of the section, which describes sharing the P-tunnel across EVIs and using the label to identify the corresponding EVI.\r\n* Similarly, Section 4.2.1 describes EVPN ingress replication, including an IMET A-D route and an EVPN BUM label. The payload is therefore an EVPN payload, not an MVPN payload.\r\n* The proposed corrections accurately resolve these copy-and-paste errors and do not change the specified protocol behavior.", "submit_date": "2026-08-17", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2026-08-18 10:41:44"}, {"errata_id": "9007", "doc-id": "RFC6572", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "1       1      1      1        80  Message-Authenticator\r\n...\r\n0       0-1    0      0       145  Mobile-Node-Identifier", "correct_text": "1       1      1      1        80  Message-Authenticator [1]\r\n...\r\n0       1      0      0       145  Mobile-Node-Identifier [2]\r\n\r\n[Note 1] This specification does not change the requirements for Message-Authenticator in all Access-* packets.  Instead, it \r\nrequires that Message-Authenticator is present for users of this specification\r\n\r\n[Note 2] The presence of Mobile-Node-Identifier indicates that this specification is being used.", "notes": "The text for [Note 1] and [Note 2] can largely be copied from the notes in the recent errata for RFC 5090.  I didn't save a copy of that text.\r\n\r\nThis errata is mainly for implementers.  We do not expect to update this specification.", "submit_date": "2026-06-21", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-22 19:30:24"}, {"errata_id": "9054", "doc-id": "RFC6750", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "Code\r\nContent-Type: application/json;charset=UTF-8", "correct_text": "Code\r\nContent-Type: application/json", "notes": "JSON\u2019s media type does not allow parameters (RFC 8259).\r\nThe example in RFC 6750 incorrectly uses:\r\n\r\nCode\r\napplication/json;charset=UTF-8\r\nStrict OAuth clients perform exact string equality when validating token responses. \r\nBecause JSON forbids parameters, the charset version is treated as an unknown \r\nmedia type, causing token parsing to fail.\r\n\r\nThis behavior matches the failure mode described in Errata 6161.", "submit_date": "2026-08-02", "submitter_name": "Jen Kinder", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-03 16:37:57"}, {"errata_id": "9094", "doc-id": "RFC9580", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "12.1", "orig_text": "This specification makes use of the PKCS#1 functions EME-PKCS1-v1_5\r\n   and EMSA-PKCS1-v1_5.  However, the calling conventions of these\r\n   functions have changed in the past.  To avoid potential confusion and\r\n   interoperability problems, we are including local copies in this\r\n   document, adapted from those in PKCS#1 v2.1 [RFC8017].  [RFC8017]\r\n   should be treated as the ultimate authority on PKCS#1 for OpenPGP.\r\n   Nonetheless, we believe that there is value in having a self-\r\n   contained document that avoids problems in the future with needed\r\n   changes in the conventions.", "correct_text": "This specification makes use of the PKCS#1 functions EME-PKCS1-v1_5\r\n   and EMSA-PKCS1-v1_5.  However, the calling conventions of these\r\n   functions have changed in the past.  To avoid potential confusion and\r\n   interoperability problems, we are including local copies in this\r\n   document, adapted from those in PKCS#1 v2.2 [RFC8017].  [RFC8017]\r\n   should be treated as the ultimate authority on PKCS#1 for OpenPGP.\r\n   Nonetheless, we believe that there is value in having a self-\r\n   contained document that avoids problems in the future with needed\r\n   changes in the conventions.", "notes": "RFC 8017 describes PKCS#1 v2.2, not PKCS#1 v2.1", "submit_date": "2026-08-06", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-11 21:20:05"}, {"errata_id": "9140", "doc-id": "RFC791", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "3.3. Page 32", "orig_text": "SEND (src, dst, prot, TOS, TTL, BufPTR, len, Id, DF, opt => result)", "correct_text": "SEND (src, dst, prot, TOS, TTL, BufPTR, len, Id, DF, opt, => result)", "notes": "Missing a comma after \"opt\" argument.", "submit_date": "2026-08-15", "submitter_name": "Aur\u00e9lien G\u00e9r\u00f4me", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2026-08-17 20:47:56"}, {"errata_id": "9008", "doc-id": "RFC5090", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "1        1      1      1          0-1  80  Message-Authenticator\r\n...\r\n 1        0      0      0          0-1 108  Digest-Method", "correct_text": "1        1      1      1          0-1  80  Message-Authenticator [5]\r\n...\r\n 0-1      0      0      0          0-1 108  Digest-Method [6]\r\n\r\n...\r\n\r\n[Note 5] This specification does not require that all Access-* packets contain Message-Authenticator.  Instead, it requires that \r\nMessage-Authenticator is present when Digest authentication is used.\r\n\r\n[Note 6] The Digest-Method attribute is not required for all Access-Request packets.  Instead, if Access-Request contains \r\nDigest-Method, then Digest authentication is being used, and the rest of this specification applies.", "notes": "Clarify the list in the Table of Attributes.\r\n\r\nThis errata is mainly a note for implementers.  While the errata should likely be held for document update, we do not expect to update this document.", "submit_date": "2026-06-21", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-22 19:31:03"}, {"errata_id": "9055", "doc-id": "RFC9749", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5", "orig_text": "When destroying push subscriptions that include the data type PushSubscription, \r\nthe server MAY issue one final StateChange push notification using the old URL and \r\napplication server key to notify the client of changes to the PushSubscription data type. \r\nThis prompts the client to make a PushSubscription/changes method call. The response \r\nto this call will contain an updated sessionState, which refers to a session object that \r\ncontains the new VAPID key.", "correct_text": "(Delete the paragraph.)", "notes": "The PushSubscription object is not associated with an account id, and so cannot appear in \r\nthe StateChange object as specified in RFC8620. Additionally, there is no \r\n\"PushSubscription/changes\" method call defined in RFC8620 \u2014 only \"PushSubscription/get\" \r\nand \"PushSubscription/set\".\r\n\r\nSuggested fix is to remove this paragraph. There is no good way of doing this right now, \r\nand it was a MAY anyway, not essential. Session state changes are likely to be picked up \r\nvery quickly by a client anyway as they will get it as soon as they make any API call.", "submit_date": "2026-07-31", "submitter_name": "Neil Jenkins", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-03 16:40:08"}, {"errata_id": "9141", "doc-id": "RFC10022", "errata_status_code": "Held for Document Update", "errata_type_code": "Editorial", "section": "A.1", "orig_text": "where M is the number of messages in the mailbox and N is the requested\r\nbatch count.", "correct_text": "where M is the number of messages in the mailbox and N is the requested\r\nbatch size.", "notes": "\"batch count\" --> \"batch size\"\r\n\r\nThe rest of the document uses the term \"batch size\" (eg, #3.1.3).", "submit_date": "2026-08-17", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-17 20:24:38"}, {"errata_id": "9009", "doc-id": "RFC9727", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1", "orig_text": "\"api-catalog\": \"https://www.example.net/.well-known/api-catalog\"", "correct_text": "\"api-catalog\": [\r\n {\r\n  \"href\": \"https://www.example.net/.well-known/api-catalog\"\r\n }\r\n]", "notes": "Section 4.2.2 of RFC 9264 says:\r\n- \"The value of the \"linkset\" member is an array in which a distinct JSON object -- the \"link context object\" (see Section 4.2.2) -- is used \r\nto represent links that have the same link context.\"\r\n- \"Even if there is only one link target object, it MUST be wrapped in an array.\"", "submit_date": "2026-06-21", "submitter_name": "Ben van Hartingsveldt", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-22 19:31:59"}, {"errata_id": "9001", "doc-id": "RFC9721", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "Abstract", "orig_text": "The extensions are backward compatible with existing EVPN-IRB implementations and aim to optimize network performance in scenarios involving frequent IP address mobility.", "correct_text": "The extensions while backwards incompatible, allow EVPN-IRB implementations to deterministically handle scenarios involving frequent IP address mobility", "notes": "Claim by submitter\r\n============\r\n\r\nThe mobility procedures defined in RFC9721 does not seem backwards compatible with the procedures defined in RFC7432. \r\n\r\nExample:\r\n\r\nPremise: \r\n\r\n1. An RFC7432 speaker has MAC Mx with sequence number = 1\r\n2. An RFC9721 speaker has MAC My with sequence number = 2\r\n\r\nSequence of Events:\r\n\r\n1. The RFC9721 speaker learns a local ARP for IPx-My, and advertised MAC-IP route with sequence number 2\r\n2. IPx moves to be behind RFC7432 speaker\r\n3. RFC7432 speaker would simply advertise IPx-Mx with sequence number 1\r\n4. When RFC9721 speaker receives the MAC-IP route advertised by RFC7432 for IPx-Mx, it will be unable to remove it's local ARP binding because the remote route has an inferior sequence number.\r\n\r\nThis makes the schemes not compatible with each other.\r\n\r\nAD Review\r\n=======\r\nI agree that the sequence of events identifies a limitation in a mixed RFC 7432/RFC 9721 deployment. RFC 7432 assigns mobility sequence numbers per MAC address, so a legacy PE learning IPx-Mx is not required to make the Mx sequence number higher than the sequence number previously advertised for IPx-My. RFC 9721 Section 6.1 adds that requirement, but an RFC 7432-only PE naturally does not implement it.\r\n\r\nI do not think this establishes that RFC 9721 is backward incompatible, however. The example exercises the new IP-to-different-MAC mobility behavior at a legacy PE, which RFC 7432 never specified. Lack of the new behavior in an old implementation is not, by itself, backward incompatibility. The existing route encoding remains usable, and the previously supported mobility behavior continues to interoperate. The proposed corrected text therefore overstates the issue.\r\n\r\nMy recommendation is to reject this erratum as submitted. A future update could usefully clarify that the extended mobility behavior requires the relevant PEs to implement RFC 9721.", "submit_date": "2026-06-11", "submitter_name": "Anand Narayanan", "verifier_id": "", "verifier_name": "Gunter Van de Velde", "update_date": "2026-08-18 10:22:57"}, {"errata_id": "9010", "doc-id": "RFC4675", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2", "orig_text": "Value\r\n\r\n      The Value field is four octets.  Supported values include:\r\n\r\n      1 - Enabled\r\n      2 - Disabled", "correct_text": "(unchanged).", "notes": "This is really an update for IANA.\r\n\r\nThe \"Ingress-Filters\" is of data type \"emum\", which should mean that it has a \"Values for attribute ...\" registry in the RADIUS \r\nregistry (https://www.iana.org/assignments/radius-types/radius-types.xhtml).  However, no such table exists.", "submit_date": "2026-06-20", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-22 19:39:29"}, {"errata_id": "9142", "doc-id": "RFC791", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.3. Page 32", "orig_text": "RECV (BufPTR, prot, => result, src, dst, TOS, len, opt)", "correct_text": "RECV (BufPTR, prot => result, src, dst, TOS, len, opt)", "notes": "Remove comma between \"prot\" and \"=>\", as per \u00c9ric Vyncke's suggestion after rejecting erratum #9140.", "submit_date": "2026-08-17", "submitter_name": "Aur\u00e9lien G\u00e9r\u00f4me", "verifier_id": "", "verifier_name": "\u00c9ric Vyncke", "update_date": "2026-08-18 15:15:33"}, {"errata_id": "9011", "doc-id": "RFC8366", "errata_status_code": "Verified", "errata_type_code": "Technical", "section": "5.4", "orig_text": "An eContentType of 40 indicates that the content is a JSON-encoded voucher.", "correct_text": "An eContentType of 1.2.840.113549.1.9.16.1.40 indicates that the content is a JSON-encoded voucher.", "notes": "Provided the whole OID value, not just the last component.\r\n\r\nVerifier Note: Please see discussion of this on the mailing list at https://mailarchive.ietf.org/arch/msg/anima/z_THm5rmewf47mwfDhYUiHLZPDQ/.", "submit_date": "2026-06-17", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-06-25 15:28:47"}, {"errata_id": "9143", "doc-id": "RFC7314", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4", "orig_text": "If a secondary receives an EDNS EXPIRE option in a response to an SOA query, it SHALL update its expire timer \r\nto be the maximum of the value returned in the EDNS EXPIRE option and the current timer value.", "correct_text": "If a secondary receives an EDNS EXPIRE option in a response to an SOA query that indicated the secondary is up \r\nto date (serial matches current serial), it SHALL update its expire timer to be the maximum of the value returned in \r\nthe EDNS EXPIRE option and the current timer value.", "notes": "Currently, it reads as if the expiry timer should be updated every time we receive a response to an SOA query regardless of the serial number. This could lead to a weird situation where:\r\n1. secondary receives new serial\r\n2. secondary updates the expiry timer\r\n3. secondary starts XFR that fails\r\n4. secondary keeps serving the old zone contents", "submit_date": "2026-08-18", "submitter_name": "Ond\u0159ej Sur\u00fd", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-18 14:29:24"}, {"errata_id": "9012", "doc-id": "RFC9645", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "2", "orig_text": "Thus, in order to support both TLS 1.2 and TLS 1.3, the cipher suites\r\n   part of the \"hello-params-grouping\" grouping should include the\r\n   following three parameters for configuring its permitted TLS\r\n   algorithms: TLS Cipher Suites, TLS SignatureScheme, and TLS Supported\r\n   Groups.", "correct_text": "Thus, in order to support both TLS 1.2 and TLS 1.3, the cipher suites\r\n   part of the \"hello-params-grouping\" grouping should include the\r\n   following three parameters for configuring its permitted TLS\r\n   algorithms: TLS Cipher Suites, TLS SignatureScheme, and TLS Supported\r\n   Groups. Only TLS Cipher Suites is supported in this version.", "notes": "The current text in RFC 9645 describes that the hello-params-grouping includes three parameters: TLS Cipher Suites, \r\nTLS SignatureScheme, and TLS Supported Groups. However, the YANG definition of hello-params-grouping does not \r\ninclude all of these parameters. In particular, only TLS Cipher Suites are currently represented.\r\n\r\nAs a result, the text cannot be realised by implementations using the published YANG model. This has been observed \r\nin practice when attempting to configure TLS 1.3 PSK\u2011DHE (psk_dhe_ke), where control over supported groups (e.g., named \r\ngroups such as P\u2011256) is required but not expressible through the existing model.\r\n\r\nBecause modules such as ietf-system-tacacs-plus reuse hello-params-grouping, this limitation propagates to dependent models \r\nand prevents operators from configuring TLS parameters that are required for interoperability and policy enforcement.\r\n\r\nThis erratum clarifies the specification by updating the descriptive text to match the actual contents of the YANG grouping, thereby \r\navoiding ambiguity for implementers and readers.\r\n\r\nVerifier Notes:\r\n\r\nMy observation:\r\n\r\nThe discrepancy you have identified is real. The prose in Section 2 states that hello-params-grouping \"should include the following three parameters for configuring its permitted TLS algorithms: TLS Cipher Suites, TLS SignatureScheme, and TLS Supported Groups,\" while the normative YANG definition in ietf-tls-common defines only two containers \u2014 tls-versions and cipher-suites. There are no data nodes for SignatureScheme or Supported Groups.\r\n\r\nMy intended Disposition: Hold for Document Update\r\n\r\nI cannot mark this errata Verified, for two reasons.\r\n\r\nFirst, the proposed correction is self-contradictory. Appending \"Only TLS Cipher Suites is supported in this version\" leaves the original sentence intact, which still asserts the grouping should include three parameters. \r\n\r\nSecond, and more fundamentally, the errata mechanism cannot fix the underlying problem. If the original intent was for hello-params-grouping to expose all three TLS algorithm parameter categories \u2014 which the prose implies, and which would be necessary for complete TLS 1.3 negotiation control \u2014 the correct remedy is to add the missing YANG data nodes (signature-algorithms and supported-groups) to ietf-tls-common. That is a normative change to the data model and must go through the normal document update process. Errata cannot add YANG nodes to a published RFC.\r\n\r\nThe question for the authors and WG before I finalise the disposition I would like clarification on the original intent, as it determines the appropriate follow-on action:\r\n\r\nWas the omission unintentional? If hello-params-grouping was always meant to include nodes for SignatureScheme and Supported Groups but they were inadvertently omitted, the right path is a document update that adds those nodes and makes the prose accurate.\r\n\r\nWas the scope intentionally limited to cipher suites? If so, the prose needs to be revised more substantially \u2014 not just have a disclaimer appended \u2014 to remove the misleading \"should include three parameters\" framing.\r\n\r\nEither way, I note that the absence of these nodes has real operational consequences: operators cannot use this module to constrain signature algorithms or named groups, limiting their ability to enforce TLS 1.3 policies in deployments such as TACACS+ over TLS. The WG should consider whether a document update is warranted regardless of which answer applies above. The authors might consider the VELOCE process to make this change :-)\r\n\r\nPlease respond within two weeks. Absent guidance from the authors or WG, I will mark the errata Hold for Document Update so that it is tracked and any future revision of RFC 9645 addresses it.", "submit_date": "2026-06-17", "submitter_name": "Rod Persky", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-07-12 18:32:22"}, {"errata_id": "9144", "doc-id": "RFC6211", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "id-aa-cmsAlgorithmProtect OBJECT IDENTIFIER ::= {\r\n        iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)\r\n        pkcs9(9) 52 }", "correct_text": "id-aa-cmsAlgorithmProtect OBJECT IDENTIFIER ::= {\r\n        iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1)\r\n        pkcs9(9) smime(16) aa(2) 52 }", "notes": "The OID value needs to match the IANA registry: https://www.iana.org/assignments/smi-numbers#security-smime-2", "submit_date": "2026-08-19", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-19 19:28:52"}, {"errata_id": "9013", "doc-id": "RFC10008", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.5", "orig_text": "QUERY /rfc-index.xml HTTP/1.1\r\nHost: example.org\r\nDate: Mon, 8, Sep 2025, 11:00:00 GMT\r\nContent-Type: application/sql\r\nAccept: text/csv\r\nIf-Modified-Since: Sun, 31 Aug 2025, 08:44:00 GMT\r\nVary: Accept-Query, Content-Type\r\n\r\n...Same query, but using SQL...", "correct_text": "QUERY /rfc-index.xml HTTP/1.1\r\nHost: example.org\r\nDate: Mon, 8, Sep 2025, 11:00:00 GMT\r\nContent-Type: application/sql\r\nAccept: text/csv\r\nIf-Modified-Since: Sun, 31 Aug 2025, 08:44:00 GMT\r\n\r\n...Same query, but using SQL...", "notes": "The conditional QUERY request shown in Appendix A.5 contains a \"Vary\"\r\nheader field. \"Vary\" is defined as a response header field\r\n(Section 12.5.5 of RFC 9110); it has no defined semantics when sent in\r\na request. Its appearance in this request message appears to be a\r\ncopy-paste artifact from the corresponding 304 response shown just\r\nbelow, which legitimately carries the same field value. The corrected\r\ntext removes the \"Vary\" line from the request. The \"Vary\" field in the\r\n304 (Not Modified) response is correct and is left unchanged.", "submit_date": "2026-06-23", "submitter_name": "Fatih Serdar \u00c7akmak", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-24 20:51:43"}, {"errata_id": "9145", "doc-id": "RFC6211", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2", "orig_text": "id-aa-CMSAlgorithmProtection OBJECT IDENTIFIER ::= { iso(1)\r\n            member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9) 52 }", "correct_text": "id-aa-cmsAlgorithmProtection OBJECT IDENTIFIER ::= { iso(1)\r\n            member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs9(9)\r\n            smime(16) aa(2) 52 }", "notes": "The ASN.1 module in appendix A has a lower case \"CMS\", and the two need to match.\r\n\r\nThe OID value needs to match the IANA registry: https://www.iana.org/assignments/smi-numbers#security-smime-2", "submit_date": "2026-08-19", "submitter_name": "Russ Housley", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-19 19:28:57"}, {"errata_id": "9014", "doc-id": "RFC8945", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "5.4", "orig_text": "Instead, the client SHOULD log an error and continue to wait for a signed response until the request times out.", "correct_text": "Instead, the client SHOULD log an error and MUST regard the message as corrupt and discard it.", "notes": "The previous sentence says that the response might have been spoofed or manipulated.\r\n\r\n> Regardless of the RCODE, a message containing a TSIG RR that is unsigned as specified in Section 5.3.2 or that fails verification SHOULD NOT be considered an acceptable response, as it may have been spoofed or manipulated.\r\n\r\nIf the connection between client and server is under attack than waiting for more spoofed or manipulated responses is the worst thing that the client can do is to wait for more spoofed responses to come.\r\n\r\nThere are basically two scenarios:\r\n- off-path attacker guessed port+id -> and we certainly don't want to wait for more spoofed responses to come\r\n- on-path attacker -> all is lost anyway, waiting will not help\r\n\r\n--\r\nVerifier's note:\r\n\r\nFilling an errata is not appropriate here. See the reasoning at: https://mailarchive.ietf.org/arch/msg/dnsop/9KbAVhPffxDzKV4hyA4HF2l1ZhI/\r\n\r\nA new draft was edited with the proposed changes: https://datatracker.ietf.org/doc/draft-sury-dnsop-tsig-clarify/.\r\n--", "submit_date": "2026-06-24", "submitter_name": "Ond\u0159ej Sur\u00fd", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2026-06-29 14:44:37"}, {"errata_id": "9146", "doc-id": "RFC9065", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Acknowledgements", "orig_text": "The authors would like to thank Mohamed Boucadair, Spencer Dawkins, Tom Herbert, Jana Iyengar, Mirja K\u00fchlewind, Kyle Rose, Kathleen Moriarty, Al Morton, Chris Seal, Joe Touch, Brian Trammell, Chris Wood, Thomas Fossati, Mohamed Boucadair, Martin Thomson, David Black, Martin Duke, Joel Halpern, and members of TSVWG for their comments and feedback.", "correct_text": "The authors would like to thank Mohamed Boucadair, Spencer Dawkins, Tom Herbert, Jana Iyengar, Mirja K\u00fchlewind, Kyle Rose, Kathleen Moriarty, Al Morton, Chris Seal, Joe Touch, Brian Trammell, Chris Wood, Thomas Fossati, Martin Thomson, David Black, Martin Duke, Joel Halpern, and members of TSVWG for their comments and feedback.", "notes": "Duplicate of acknowledgement for Mohamed Boucadair.", "submit_date": "2026-08-20", "submitter_name": "Aur\u00e9lien G\u00e9r\u00f4me", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-20 16:51:30"}, {"errata_id": "9015", "doc-id": "RFC994", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.5", "orig_text": "(b)  initial PDU --- a protocol data unit carrying the whole of the\r\n          userq data from an N-UNITDATA request.", "correct_text": "(b)  initial PDU --- a protocol data unit carrying the whole of the\r\n          user data from an N-UNITDATA request.", "notes": "This is a spelling correction.", "submit_date": "2026-06-23", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-06-24 20:56:42"}, {"errata_id": "9147", "doc-id": "RFC3986", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.3", "orig_text": "Characters that are allowed in a URI but do not have a reserved purpose are called unreserved.  These include uppercase and lowercase letters, decimal digits, hyphen, period, underscore, and tilde.\r\n\r\n      unreserved  = ALPHA / DIGIT / \"-\" / \".\" / \"_\" / \"~\"", "correct_text": "Characters that are allowed in a URI but do not have a reserved purpose are called unreserved.  These include uppercase and lowercase letters, decimal digits, hyphen, period, underscore, tilde, and backslash\r\n\r\n      unreserved  = ALPHA / DIGIT / \"-\" / \".\" / \"_\" / \"~\" | \"\\\"", "notes": "The ASCII backslash character seems to have been left out of the set of unreserved characters.\r\n\r\nThe backslash character doesn't have any reserved use (per its not appearing in the reserved EBNF production and not being used anywhere else in URI-reference syntax).\r\n\r\nTherefore, backslash appears to be an unreserved character, per section 2.3's text \"Characters that are allowed in a URI but do not have a reserved purpose are called unreserved.\"\r\n\r\nHowever, backslash is not mentioned explicitly in section 2.3, neither in the the text referring to several individual characters by name nor in the grammar production specifying those characters.\r\n\r\nSo the current text is _unclear_ regarding whether backslashes are allowed in URLs (e.g., within a path segment (between segment-separating (forward) slashes)).\r\n\r\nSO ... that should be clarified. Either backslash should be added to the text (prose and EBNF) of section 2.3, or there should be a clear mention that backslash is not allowed.\r\n\r\nAlthough using backslashes in a URI reference might be unusual, it's not clear that there's any reason to exclude them. (If a server/URI authority wants to use backslashes in (non-reserved parts of) URLs, is there any reason that it should be blocked from doing so?)\r\n\r\nTherefore, it seems that the choice should be to specify backslashes as allowed.", "submit_date": "2026-08-27", "submitter_name": "Daniel Barclay", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-27 16:41:46"}, {"errata_id": "9016", "doc-id": "RFC10008", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.4.2", "orig_text": "HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nLast-Modified: Sun, 17 November 2024, 16:12:01 GMT\r\nETag: \"42-1\"\r\nDate: Sun, 17 Nov 2024, 16:13:17 GMT", "correct_text": "HTTP/1.1 200 OK\r\nContent-Type: application/json\r\nLast-Modified: Sun, 17 Nov 2024 16:12:01 GMT\r\nETag: \"42-1\"\r\nDate: Sun, 17 Nov 2024 16:13:17 GMT", "notes": "The Last-Modified field in this example uses \"November\" spelled out in\r\nfull. The IMF-fixdate format required for HTTP dates (Section 5.6.7 of\r\nRFC 9110) uses a three-letter month abbreviation, i.e. \"Nov\". A strict\r\nparser would reject the full month name. The corrected text uses \"Nov\",\r\nmatching the abbreviation already used in the Date field of the same\r\nresponse and throughout the rest of the document.\r\n\r\n(Note: the same example also contains a stray comma after the year in\r\nboth the Last-Modified and Date fields  \"2024, 16:12:01\" rather than\r\n\"2024 16:12:01\"  which is likewise non-conformant with IMF-fixdate.\r\nThe corrected text removes these as well, since they appear in the same\r\nlines being corrected. This stray-comma pattern recurs in several other\r\nexamples but is not enumerated here.)", "submit_date": "2026-06-23", "submitter_name": "Fatih Serdar \u00c7akmak", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-24 20:55:59"}, {"errata_id": "9148", "doc-id": "RFC10006", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.3", "orig_text": "The capability set document SHOULD be formatted as a JSON file.", "correct_text": "The capability set document MUST be formatted as a JSON file.", "notes": "Section 4.6 says \"Capability set documents MUST be formatted in JSON\" but Section 11.3 says \"The capability set document SHOULD be formatted as a JSON file.\"\r\n\r\nSince Section 4.6 is the normative specification and Section 11.3 is providing context in the Security Considerations, the SHOULD in 11.3 looks like it should be MUST to match.", "submit_date": "2026-08-27", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-27 16:42:01"}, {"errata_id": "7021", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "11", "orig_text": "A definition in a published module may be revised in any of the\r\n   following ways:\r\n\r\n   o  An \"enumeration\" type may have new enums added, provided the old\r\n      enums's values do not change.  Note that inserting a new enum\r\n      before an existing enum or reordering existing enums will result\r\n      in new values for the existing enums, unless they have explicit\r\n      values assigned to them.", "correct_text": "A definition in a published module may be revised in any of the\r\n   following ways:\r\n\r\n   o  The \"revision-date\" substatement of an existing \"import\" statement \r\n      may get a changed argument.\r\n\r\n\r\n   o  An \"enumeration\" type may have new enums added, provided the old\r\n      enums's values do not change.  Note that inserting a new enum\r\n      before an existing enum or reordering existing enums will result\r\n      in new values for the existing enums, unless they have explicit\r\n      values assigned to them.", "notes": "In section 5.1.1 it is stated that a module may be republished with an updated \"import\" \r\nstatement. This is needed, otherwise a user of the revision-date statement (inside an import) would never be able to migrate to a newer version of the imported module.\r\n\r\nHowever in section 11.  Updating a Module   this change is not listed in the list of allowed updates, thus it is forbidden.\r\n\r\nVerifier's Note: \u00a75.1.1 already explicitly covers republishing a module with an updated import statement. The omission from \u00a711 does not prohibit this action, and the claim (in the Notes section) that it prevents migration is incorrect \u2014 unpinned imports resolve automatically to the latest revision (which contains the new enum definition), and pinned imports are updated as a deliberate new publication already sanctioned by \u00a75.1.1. No gap exists that requires correction.", "submit_date": "2022-07-12", "submitter_name": "Balazs Lengyel", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-06-26 20:44:24"}, {"errata_id": "9149", "doc-id": "RFC10006", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.3", "orig_text": "Therefore, there are no particularly sensitive writable data nodes.\r\n\r\nThere are no particularly sensitive writable data nodes.", "correct_text": "There are no particularly sensitive writable data nodes.", "notes": "Remove the duplicate sentence.", "submit_date": "2026-08-27", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-08-27 16:44:03"}, {"errata_id": "8784", "doc-id": "RFC7950", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "9.12.4", "orig_text": "If the second member type in the union had been of type \"string\"\r\n   instead of an enumeration, the current value would have matched, and\r\n   the resulting configuration would have been valid.", "correct_text": "If the second member type in the union had been of type \"string\"\r\n   instead of an enumeration, the current value would have matched, and\r\n   the resulting configuration would have been valid. However, the leaf's\r\n   value must then be reinterpreted if a matching instance is added later.", "notes": "From the example wording, it looks like that the event-to-be-watched is only target instance removal for a successfully resolved leafref. Yet from the specification, one can infer that one indeed needs to watch also for creation of a target instance for unsuccessfully resolved possible leafref, and therefore the example is misleading.\r\n\r\nVerifier's Note: \r\n\r\nThe concern expressed as part of this Errata does not survive scrutiny of YANG's validation model. Per RFC 7950, validation is holistic: it is triggered by any change to the intended configuration and evaluates the entire datastore without reference to its prior state. Consequently, when a leafref target is created, the same validation pass that validates the new instance also re-evaluates all outstanding leafref constraints, including those nested within union types. No implementation-level asymmetry exists; no special monitoring of target-creation events is required beyond normal change-triggered validation.\r\n\r\nThe existing text in Section 9.12.4 correctly describes the behavior illustrated by its specific example. It does not purport to enumerate all events that trigger re-evaluation \u2014 that is a function of the general validation model defined elsewhere in the RFC.\r\n\r\nAdditionally, the sentence at issue sits within a paragraph addressing schema-node concerns while itself speaking to data-node behavior. This is a presentation issue in an example section, not a normative deficiency. If the example text causes implementor confusion, that is appropriate material for a future revision (e.g., yang-next) rather than an erratum to the current specification.", "submit_date": "2026-02-25", "submitter_name": "Maria Matejka", "verifier_id": "", "verifier_name": "Mahesh Jethanandani", "update_date": "2026-06-26 22:06:57"}, {"errata_id": "9150", "doc-id": "RFC9989", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11.6 (also Appendix B.2.3, B.2.4)", "orig_text": "Section 11.6:\r\n   To avoid abuse by bad actors, reporting addresses generally have to\r\n   be inside the domains about which reports are requested.  To\r\n   accommodate special cases, such as a need to get reports about\r\n   domains that cannot actually receive mail, Section 3 of [RFC9990]\r\n   describes a DNS-based mechanism for validating approved external\r\n   reporting.\r\n\r\nAppendix B.2.3:\r\n   Because the address used in the \"ruf\" tag is outside the\r\n   Organizational Domain in which this record is published, conforming\r\n   Mail Receivers MUST implement additional checks as described in\r\n   Section 3 of [RFC9990].\r\n\r\nAppendix B.2.4:\r\n   Intermediaries and other third parties should refer to Section 3 of\r\n   [RFC9990] for the full details of this mechanism.", "correct_text": "Section 11.6:\r\n   ... Section 4 of [RFC9990] describes a DNS-based mechanism for\r\n   validating approved external reporting.\r\n\r\nAppendix B.2.3:\r\n   ... conforming Mail Receivers MUST implement additional checks as\r\n   described in Section 4 of [RFC9990].\r\n\r\nAppendix B.2.4:\r\n   Intermediaries and other third parties should refer to Section 4 of\r\n   [RFC9990] for the full details of this mechanism.", "notes": "In RFC 9990, Section 3 is \"DMARC Feedback\" (report format and delivery). The DNS-based verification mechanism for external reporting addresses is Section 4, \"Verifying External Destinations\". All three cross-references intend the verification mechanism, so each should read \"Section 4 of [RFC9990]\". The reference in Appendix B.2.3 is normative (MUST), so the incorrect pointer misdirects implementers.", "submit_date": "2026-08-27", "submitter_name": "VENKAT NOOKALA", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-09-02 19:06:13"}, {"errata_id": "9017", "doc-id": "RFC826", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "Related issue:", "orig_text": "each station will be get the new hardware address", "correct_text": "each station will get the new hardware address", "notes": "This looks like a straightforward typo", "submit_date": "2026-06-26", "submitter_name": "Mike Higginbottom", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 14:24:44"}, {"errata_id": "9151", "doc-id": "RFC10004", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5.3", "orig_text": "See Section 3.2.1.3.3 of [CMC-STRUCT] and Section 3.2.1.3.3 of [CMC-STRUCT] for alternative methods.", "correct_text": "(Unknown)", "notes": "Duplicate reference to \"Section 3.2.1.3.3 of [CMC-STRUCT]\". It's unclear what this was intended to point to.", "submit_date": "2026-08-27", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-09-02 19:05:16"}, {"errata_id": "9018", "doc-id": "RFC7643", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8.7.2", "orig_text": "...\r\n{\r\n        \"name\" : \"sort\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"A complex type that specifies sort result\r\n          options.\",\r\n        \"required\" : true,\r\n        \"returned\" : \"default\",\r\n        \"mutability\" : \"readOnly\",\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"supported\",\r\n            \"type\" : \"boolean\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A Boolean value specifying whether or not\r\n              the operation is supported.\",\r\n            \"required\" : true,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\"\r\n          }\r\n        ]\r\n      },\r\n      {\r\n        \"name\" : \"authenticationSchemes\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A complex type that specifies supported\r\n          authentication scheme properties.\",\r\n        \"required\" : true,\r\n        \"returned\" : \"default\",\r\n        \"mutability\" : \"readOnly\",\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"name\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n...", "correct_text": "...\r\n{\r\n        \"name\" : \"sort\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : false,\r\n        \"description\" : \"A complex type that specifies sort result\r\n          options.\",\r\n        \"required\" : true,\r\n        \"returned\" : \"default\",\r\n        \"mutability\" : \"readOnly\",\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"supported\",\r\n            \"type\" : \"boolean\",\r\n            \"multiValued\" : false,\r\n            \"description\" : \"A Boolean value specifying whether or not\r\n              the operation is supported.\",\r\n            \"required\" : true,\r\n            \"mutability\" : \"readOnly\",\r\n            \"returned\" : \"default\"\r\n          }\r\n        ]\r\n      },\r\n{\r\n      \"name\": \"etag\",\r\n      \"type\": \"complex\",\r\n      \"subAttributes\": [\r\n        {\r\n          \"name\": \"supported\",\r\n          \"type\": \"boolean\",\r\n          \"multiValued\": false,\r\n          \"description\": \"A Boolean value specifying whether or not the operation is supported.\",\r\n          \"required\": true,\r\n          \"caseExact\": false,\r\n          \"mutability\": \"readOnly\",\r\n          \"returned\": \"default\"\r\n        }\r\n      ],\r\n      \"multiValued\": false,\r\n      \"description\": \"A complex type that specifies ETag configuration options.\",\r\n      \"required\": true,\r\n      \"caseExact\": false,\r\n      \"mutability\": \"readOnly\",\r\n      \"returned\": \"default\"\r\n    },\r\n      {\r\n        \"name\" : \"authenticationSchemes\",\r\n        \"type\" : \"complex\",\r\n        \"multiValued\" : true,\r\n        \"description\" : \"A complex type that specifies supported\r\n          authentication scheme properties.\",\r\n        \"required\" : true,\r\n        \"returned\" : \"default\",\r\n        \"mutability\" : \"readOnly\",\r\n        \"subAttributes\" : [\r\n          {\r\n            \"name\" : \"name\",\r\n            \"type\" : \"string\",\r\n            \"multiValued\" : false,\r\n...", "notes": "Section 5 marks etag as REQUIRED. The example in section 8.5 also contains the field. \r\n\r\nHowever, section \"8.7.2 - Service Provider Schema Representation\" omits it.", "submit_date": "2026-06-29", "submitter_name": "Thomas Plantin", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 14:25:00"}, {"errata_id": "9152", "doc-id": "RFC9711", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "4.2.15", "orig_text": "The second item is MUST be the actual manifest.", "correct_text": "The second item MUST be the actual manifest.", "notes": "Editorial fix.", "submit_date": "2026-08-28", "submitter_name": "Steven Bellock", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-09-02 19:00:12"}, {"errata_id": "9019", "doc-id": "RFC20", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "6.4", "orig_text": "In specific applications, it may be desirable to employ distinctive styling of individual graphics to facilitate their use for specific purposes as,\r\nfor example, to stylize the graphics in code positions 2/1 and 5/15 into those frequently associated with logical OR (|) and logical NOT\r\n(252), respectively.", "correct_text": "In specific applications, it may be desirable to employ distinctive styling of individual graphics to facilitate their use for specific purposes as,\r\nfor example, to stylize the graphics in code positions 2/1 and 5/14 into those frequently associated with logical OR (|) and logical NOT\r\n(\u00ac), respectively.", "notes": "Corrected text taken from USA Standard Code for Information Interchange, USAS X3.4-1968 (https://archive.org/details/enf-ascii-1968-1970/mode/2up).", "submit_date": "2026-06-29", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 14:29:43"}, {"errata_id": "9153", "doc-id": "RFC10003", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Figure 3", "orig_text": "Content-Type: application/pkcs7-mime; smime-type=CMC-Request;\r\n    name=smime.p7c", "correct_text": "Content-Type: application/pkcs7-mime; smime-type=CMC-Request;\r\n    name=smime.p7m", "notes": "Correct \"p7c\" to \"p7m\" per the preceding prose. \"p7c\" may be a copy-paste error from Figure 2.", "submit_date": "2026-08-28", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-31 15:14:40"}, {"errata_id": "9020", "doc-id": "RFC9935", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9", "orig_text": "For more detailed ML-KEM specific security considerations regarding this, randomness, misbinding properties, \r\ndecapsulation failures, key reuse, and key checks, refer to [ML-KEM-SEC-CONS].", "correct_text": "For more detailed ML-KEM specific security considerations regarding this, randomness, misbinding properties, \r\ndecapsulation failures, key reuse, and key checks, refer to [ML-KEM-SEC-CONS]. In the X.509 certificate, the \r\ndigital signature should provide a security level equal to or higher than that of the KEM public key.", "notes": "I have observed a potential issue in some application scenarios, where the public key in the certificate may use an ML-KEM-1024 public key, \r\nwhile the corresponding signature is generated using ML-DSA-44. This could lead to a situation in which a lower-security-level digital signature is \r\nused to sign or endorse a higher-security-level public key.\r\n\r\nIn light of this, I would respectfully suggest considering an additional clarification in Section 9. Specifically, after the sentence: \u201cFor more detailed \r\nML-KEM specific security considerations regarding this, randomness, misbinding properties, decapsulation failures, key reuse, and key checks, refer \r\nto [ML-KEM-SEC-CONS].\u201d\r\n\r\nIt may be helpful to add the following statement: \u201cIn the X.509 certificate, the digital signature should provide a security level equal to or higher than that of the KEM public key.\u201d", "submit_date": "2026-06-25", "submitter_name": "Abel C. H. Chen", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 14:30:47"}, {"errata_id": "9154", "doc-id": "RFC10003", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "8", "orig_text": "IANA has assigned a TCP port number in the \"Dynamic and/or Private Ports Range\" of the \"Service Name and Transport Protocol Port Number Registry\" for the use of CMC.", "correct_text": "IANA has assigned a TCP port number in the \"User Ports Range\" of the \"Service Name and Transport Protocol Port Number Registry\" for the use of CMC.", "notes": "Correct \"Dynamic and/or Private Ports Range\" to \"User Ports Range\".\r\n\r\nPer the registry, port number 5318 is in the \"User Ports\" range:\r\n\r\n  Port numbers are assigned in various ways, based on three ranges:\r\n  System Ports (0-1023),\r\n  User Ports (1024-49151),\r\n  and the Dynamic and/or Private Ports (49152-65535);\r\n\r\nThe distinction is important because:\r\n\r\n1. \"Dynamic Ports are not assigned.\"\r\n2. The ranges have different review and approval processes.", "submit_date": "2026-08-28", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-31 15:14:52"}, {"errata_id": "9021", "doc-id": "RFC9935", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "9", "orig_text": "For more detailed ML-KEM specific security considerations regarding this, randomness, misbinding properties, decapsulation failures, key reuse, and \r\nkey checks, refer to [ML-KEM-SEC-CONS].", "correct_text": "For more detailed ML-KEM specific security considerations regarding this, randomness, misbinding properties, decapsulation failures, key reuse, and \r\nkey checks, refer to [ML-KEM-SEC-CONS]. In the X.509 certificate, the digital signature should provide a security level equal to or higher than that of \r\nthe ML-KEM public key.", "notes": "I have observed a potential issue in some application scenarios, where the public key in the certificate may use an ML-KEM-1024 public key, while the \r\ncorresponding signature is generated using ML-DSA-44. This could lead to a situation in which a lower-security-level digital signature is used to sign \r\nor endorse a higher-security-level public key. \r\n\r\nIn light of this, I would respectfully suggest considering an additional clarification in Section 9.\r\n\r\nIt may be helpful to add the following statement: \u201cIn the X.509 certificate, the digital signature should provide a security level equal to or higher than that of the ML-KEM public key.\u201d", "submit_date": "2026-06-25", "submitter_name": "Abel C. H. Chen", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 14:31:19"}, {"errata_id": "9155", "doc-id": "RFC10002", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.1. ASN.1 Module for CMC", "orig_text": "unsuportedExt   (5),", "correct_text": "unsupportedExt   (5),", "notes": "Typo in the ASN.1 Module. Disagrees with the definition in \"6.1.4. CMCFailInfo\" and several points in the prose which all correctly use \"unsupportedExt\".", "submit_date": "2026-08-28", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-31 15:14:57"}, {"errata_id": "8887", "doc-id": "RFC2326", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "10.8", "orig_text": "S->C: GET_PARAMETER rtsp://example.com/fizzle/foo RTSP/1.0\r\n      CSeq: 431\r\n      Content-Type: text/parameters\r\n      Session: 12345678\r\n      Content-Length: 15\r\n\r\n      packets_received\r\n      jitter\r\n\r\nC->S: RTSP/1.0 200 OK\r\n      CSeq: 431\r\n      Content-Length: 46\r\n      Content-Type: text/parameters\r\n\r\n      packets_received: 10\r\n      jitter: 0.3838", "correct_text": "C->S: GET_PARAMETER rtsp://example.com/fizzle/foo RTSP/1.0\r\n      CSeq: 431\r\n      Content-Type: text/parameters\r\n      Session: 12345678\r\n      Content-Length: 15\r\n\r\n      packets_received\r\n      jitter\r\n\r\n\r\nS->C: RTSP/1.0 200 OK\r\n      CSeq: 431\r\n      Content-Length: 46\r\n      Content-Type: text/parameters\r\n\r\n      packets_received: 10\r\n      jitter: 0.3838", "notes": "In RFC 2326 (RTSP 1.0), the example for GET_PARAMETER appears to contain an incorrect message direction annotation.\r\n\r\nThe specification shows:\r\n\r\n    S->C: GET_PARAMETER rtsp://example.com/fizzle/foo RTSP/1.0\r\n          CSeq: 431\r\n          Content-Type: text/parameters\r\n          Session: 12345678\r\n          Content-Length: 15\r\n\r\n          packets_received\r\n          jitter\r\n\r\nHowever, GET_PARAMETER is a request method and should be sent from client to server (C->S), not server to client.\r\n\r\nThe message format shown is also clearly a Request-Line, not a response.\r\n\r\nTherefore, the correct direction should likely be:\r\n\r\n    C->S: GET_PARAMETER ...\r\n\r\nThis appears to be an editorial error in the example.\r\n\r\nPlease confirm whether this is a typo.", "submit_date": "2026-04-22", "submitter_name": "Zhang Tianyi", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 14:55:22"}, {"errata_id": "9156", "doc-id": "RFC10002", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.1. ASN.1 Module for CMC", "orig_text": "RevokeRequest ::= SEQUENCE {\r\n      issuerName            Name,\r\n      serialNumber          INTEGER,\r\n      reason                CRLReason,\r\n      invalidityDate        GeneralizedTime OPTIONAL,\r\n      passphrase            OCTET STRING OPTIONAL,\r\n      comment               UTF8String OPTIONAL }", "correct_text": "RevokeRequest ::= SEQUENCE {\r\n      issuerName            Name,\r\n      serialNumber          INTEGER,\r\n      reason                CRLReason,\r\n      invalidityDate        GeneralizedTime OPTIONAL,\r\n      sharedSecret          OCTET STRING OPTIONAL,\r\n      comment               UTF8String OPTIONAL }", "notes": "In RevokeRequest, correct \"passphrase\" to \"sharedSecret\".\r\n\r\nSection 6.11 defines RevokeRequest with a sharedSecret, and sharedSecret is mentioned in the prose.\r\nThe ASN.1 module defines RevokeRequest with a passphrase which is not mentioned anywhere else.", "submit_date": "2026-08-28", "submitter_name": "Paul Aitken", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-31 15:15:04"}, {"errata_id": "8904", "doc-id": "RFC5905", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "11.2.2", "orig_text": "The candidates of the majority clique are placed on the survivor list\r\n   v in the form of tuples (p, theta_p, psi_p, lambda_p), where p is an\r\n   association identifier, theta_p, psi_p, and stratum_p the current\r\n   offset, jitter and stratum of association p, respectively, and\r\n   lambda_p is a merit factor equal to stratum_p * MAXDIST + lambda,\r\n   where lambda is the root synchronization distance for association p.", "correct_text": "The candidates of the majority clique are placed on the survivor list\r\n   v in the form of tuples (p, theta_p, psi_p, lambda_p), where p is an\r\n   association identifier, theta_p, psi_p, and stratum_p the current\r\n   offset, jitter and stratum of association p, respectively, and\r\n   lambda_p is a merit factor equal to stratum_p * MAXDIST + LAMBDA,\r\n   where LAMBDA is the root synchronization distance for association p.", "notes": "Two distinct quantities are inconsistently referred to as either \"lambda\" or \"LAMBDA\": the peer synchronisation distance, and the root synchronisation distance.\r\nIn Section 10, the peer synchronisation distance is defined as (delta / 2) + epsilon and denoted by the minuscule lambda.\r\nIn section 11.2.3, the root synchronisation distance is defined as EPSILON + DELTA / 2 and denoted by the majuscule LAMBDA. The root synchronisation distance is also referred to as LAMBDA in Section 4.\r\nHowever, in sections 11.2.1 and 11.2.2, the root synchronisation distance is referred to with the minuscule lambda, leading to an editorial inconsistency between the identifiers for peer and root synchronisation distances.", "submit_date": "2026-05-06", "submitter_name": "Aidan R", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 15:14:05"}, {"errata_id": "9157", "doc-id": "RFC9846", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "Appendix F.1", "orig_text": "derived from the main secret", "correct_text": "derived from the Main Secret", "notes": "\"the main secret\" is undefined in RFC9846. Figure 5 (https://www.rfc-editor.org/rfc/rfc9846.html#figure-5) defines Main Secret. Please note that the original text appears twice within Appendix F.1.", "submit_date": "2026-08-30", "submitter_name": "Muhammad Usama Sardar", "verifier_id": "", "verifier_name": null, "update_date": "2026-08-31 15:15:08"}, {"errata_id": "8919", "doc-id": "RFC5939", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2-4.4", "orig_text": "t=0 0\r\n      c=IN IP4 192.0.2.1", "correct_text": "c=IN IP4 192.0.2.1\r\n      t=0 0", "notes": "Examples 4.2-4.4 and 3.6.2.1 all have the SDP time before the connection line.  SDP ordering is important and requires t= after c= line.", "submit_date": "2026-05-18", "submitter_name": "Scott Godin", "verifier_id": "", "verifier_name": null, "update_date": "2026-06-30 15:17:54"}, {"errata_id": "9158", "doc-id": "RFC9513", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "11", "orig_text": "Table 1: SRv6 Endpoint Behaviors in OSPFv3\r\n\r\n| End.DT64 | 20 | Y | N | N |", "correct_text": "Table 1: SRv6 Endpoint Behaviors in OSPFv3\r\n\r\n| End.DT46 | 20 | Y | N | N |", "notes": "The endpoint behavior name \"End.DT64\" is a typographical error. The correct name is \"End.DT46\".\r\n\r\nRFC 8986, Section 4.8, defines the End.DT46 behavior, and the IANA \"SRv6 Endpoint Behaviors\" registry assigns code point 20 (0x0014) to End.DT46. No End.DT64 behavior is defined in RFC 8986 or registered by IANA.\r\n\r\nRFC 9513 itself also uses the correct name End.DT46 in Section 4.4. Therefore, the entry in Table 1 of Section 11 should read \"End.DT46\" rather than \"End.DT64\". The endpoint behavior code point and the applicability columns remain unchanged.", "submit_date": "2026-09-01", "submitter_name": "Carlo Pio Luigi Ciciriello", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-09-02 18:41:53"}, {"errata_id": "9022", "doc-id": "RFC9370", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A.1", "orig_text": "The updated SKEYSEED value is then used to derive the following\r\nkeying materials.\r\n\r\n   {SK_d(1) | SK_ai(1) | SK_ar(1) | SK_ei(1) | SK_er(1) | SK_pi(1) |\r\n    SK_pr(1)} = prf+ (SKEYSEED(1), Ni | Nr | SPIi | SPIr)\r\n\r\nAs per [RFC9242], both peers compute IntAuth_i1 and IntAuth_r1 using\r\nthe SK_pi(1) and SK_pr(1) keys, respectively.  These values are\r\nrequired in the IKE_AUTH phase of the exchange.", "correct_text": "The updated SKEYSEED value is then used to derive the following\r\nkeying materials.\r\n\r\n   {SK_d(1) | SK_ai(1) | SK_ar(1) | SK_ei(1) | SK_er(1) | SK_pi(1) |\r\n    SK_pr(1)} = prf+ (SKEYSEED(1), Ni | Nr | SPIi | SPIr)\r\n\r\nAs per [RFC9242], both peers compute IntAuth_i1 and IntAuth_r1 using\r\nthe SK_pi and SK_pr keys from IKE_SA_INIT (i.e., the value preceding the exchange),\r\nrespectively.  These values are required in the IKE_AUTH phase of the exchange.", "notes": "RFC 9242 states that the keys used during epoch i are the keys from epoch (i-1). From RFC 9242, section 3.3.2: \r\n\r\nEach calculation of IntAuth_[i/r]* uses its own keys SK_p[i/r]*,\r\nwhich are the most recently updated SK_p[i/r] keys available before\r\nthe corresponded IKE_INTERMEDIATE exchange is started.", "submit_date": "2026-07-07", "submitter_name": "Thom Wiggers", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-08 19:28:46"}, {"errata_id": "9159", "doc-id": "RFC10042", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.1", "orig_text": "If any of these checks fail, the client\r\nMUST abort using a disconnect message (SSH_MSG_DISCONNECT) with a\r\nSSH_DISCONNECT_KEY_EXCHANGE_FAILED as the reason.", "correct_text": "If any of these checks fail, the server\r\nMUST abort using a disconnect message (SSH_MSG_DISCONNECT) with a\r\nSSH_DISCONNECT_KEY_EXCHANGE_FAILED as the reason.", "notes": "The client has no information about the results of the server-side check.\r\n\r\nRFC EDITOR: Edited Original/Corrected text to only include sentence that is affected.", "submit_date": "2026-09-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": null, "update_date": "2026-09-02 18:53:21"}, {"errata_id": "9023", "doc-id": "RFC9980", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "4.2.4", "orig_text": "4.   Parse the ecdhSecretKey and mlkemSecretKey from the algorithm-\r\n        specific data of the own secret key encoded in the format\r\n        specified in Section 4.3.2", "correct_text": "4.   Parse the ecdhSecretKey and mlkemSecretKey from the algorithm-\r\n        specific data of the own secret key, and the ecdhPublicKey from\r\n        the algorithm-specific data of the own public key, encoded in\r\n        the format specified in Section 4.3.2", "notes": "Step 9 of the decryption procedure in Section 4.2.4 uses ecdhPublicKey as\r\nan input to multiKeyCombine():\r\n\r\n   9.   Compute KEK = multiKeyCombine(mlkemKeyShare, ecdhKeyShare,\r\n        ecdhCipherText, ecdhPublicKey, algId) as defined in\r\n        Section 4.2.1\r\n\r\nHowever, no step of the decryption procedure (steps 1-8) obtains\r\necdhPublicKey. Step 4 parses only the secret components (ecdhSecretKey and\r\nmlkemSecretKey). By contrast, the encryption procedure in Section 4.2.3\r\nextracts this value explicitly in its step 3 (\"Extract the ecdhPublicKey\r\nand mlkemPublicKey components ... from ... pkComposite\"); the decryption\r\nprocedure was written as a mirror of the encryption procedure but omits\r\nthe corresponding extraction step.\r\n\r\nThe value is uniquely determined and always available to the decryptor:\r\nthe recipient's ECDH public key is present in the public-key portion of\r\nits own key material (Section 4.3.2.1) and can equivalently be recomputed\r\nfrom ecdhSecretKey. There is therefore no ambiguity and no interoperability\r\nimpact; the numbered procedure is simply incomplete as written. The\r\ncorrected step 4 obtains ecdhPublicKey from the recipient's own public key\r\nalongside the secret components it already parses, so that the value\r\nreferenced in step 9 is defined.\r\n\r\n(Only ecdhPublicKey is required on the decryption side; mlkemPublicKey is\r\nnot, since neither ML-KEM.Decaps nor the key combiner in Section 4.2.1\r\nconsumes it.)", "submit_date": "2026-07-05", "submitter_name": "Gefei Li", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-08 19:32:30"}, {"errata_id": "9160", "doc-id": "RFC10042", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "The security considerations given in [RFC5656] and [RFC8731] also\r\n   apply to the ECDH part of the P/T Hybrid key exchange schemes defined\r\n   in this document.", "correct_text": "The security considerations given in [RFC5656] and [RFC8731] also\r\n   apply to the ECDH part of the PQ/T Hybrid key exchange schemes defined\r\n   in this document.", "notes": "Typo", "submit_date": "2026-09-01", "submitter_name": "Nikolai Malykh", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-09-02 19:00:32"}, {"errata_id": "9024", "doc-id": "RFC8288", "errata_status_code": "Rejected", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "The Link header field provides a means of describing relationships between resources.", "correct_text": "The Link header field provides a means of describing relationships between resources and requires proper HTTP server header implementation for agent discovery.", "notes": "Shopify and similar hosted platforms do not natively support Link HTTP headers, making it impossible for site owners to implement RFC 8288 fully for AI agent discovery without a proxy like Cloudflare.", "submit_date": "2026-07-04", "submitter_name": "samiullah stanikzai", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-07-08 19:49:25"}, {"errata_id": "9161", "doc-id": "RFC9846", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "1.2", "orig_text": "Correct the lower bound on CertificateRequest.extensions to be 0 bytes.  This was an error \r\nin the syntax as it is possible to send no extensions, which results in length 0.", "correct_text": "Correct the lower bound on CertificateRequest.extensions to be 0 bytes.  This corrects the presentation \r\nsyntax to represent an empty vector; Section 4.4.2 nevertheless requires the \"signature_algorithms\" extension in a conforming CertificateRequest.", "notes": "The presentation-language bound and the message-specific sender requirement address different layers. Extension extensions<0..2^16-1> makes a zero-length vector syntactically representable. However, Section 4.4.2 requires the \"signature_algorithms\" extension in every conforming CertificateRequest under the base specification. The existing Section 1.2 sentence conflates syntactic representability with permitted sender behavior. The corrected text changes no wire rule or sender requirement.", "submit_date": "2026-09-01", "submitter_name": "Antun Jurkovikj", "verifier_id": "", "verifier_name": null, "update_date": "2026-09-02 18:57:39"}, {"errata_id": "9025", "doc-id": "RFC9989", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Appendix B.2.5.", "orig_text": "The Domain Owner desires only that an actor performing a DMARC validation check apply any special handling rules it might have in place, \r\nsuch as rewriting the RFC53322.From header field;", "correct_text": "The Domain Owner desires only that an actor performing a DMARC validation check apply any special handling rules it might have in place,\r\nsuch as rewriting the RFC5322.From header field;", "notes": "There is an extra \"3\" in \"RFC53322.From\". It should read \"RFC5322.From\".", "submit_date": "2026-07-04", "submitter_name": "Isamu Koga", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-07-08 19:38:32"}, {"errata_id": "9162", "doc-id": "RFC9110", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.2", "orig_text": "When a field name is repeated within a section, its combined\r\n   field value consists of the list of corresponding field line values\r\n   within that section, concatenated in order, with each field line\r\n   value separated by a comma.\r\n\r\n   For example, this section:\r\n\r\n   Example-Field: Foo, Bar\r\n   Example-Field: Baz\r\n\r\n   contains two field lines, both with the field name \"Example-Field\".\r\n   The first field line has a field line value of \"Foo, Bar\", while the\r\n   second field line value is \"Baz\".  The field value for \"Example-\r\n   Field\" is the list \"Foo, Bar, Baz\".", "correct_text": "When a field name is repeated within a section, its combined\r\n   field value consists of the list of corresponding field line values\r\n   within that section, concatenated in order, with each field line\r\n   value separated by a comma SP (\", \").\r\n\r\n   For example, this section:\r\n\r\n   Example-Field: Foo, Bar\r\n   Example-Field: Baz\r\n\r\n   contains two field lines, both with the field name \"Example-Field\".\r\n   The first field line has a field line value of \"Foo, Bar\", while the\r\n   second field line value is \"Baz\".  The field value for \"Example-\r\n   Field\" is the list \"Foo, Bar, Baz\".", "notes": "The original text says, \"with each field line value separated by a comma\", but in the example, it shows the field line values being separated by a comma SP (\", \") instead of just a comma (\",\"). Hence, either the given definition of \"combined field value\" is incorrect, or the example intended to demonstrate it is incorrect.", "submit_date": "2026-09-01", "submitter_name": "Julian Shepherd", "verifier_id": "", "verifier_name": null, "update_date": "2026-09-02 18:59:03"}, {"errata_id": "9026", "doc-id": "RFC5890", "errata_status_code": "Reported", "errata_type_code": "Editorial", "section": "2.3.2.1", "orig_text": "It is also subject to the constraints about permitted\r\n      characters that are specified in Section 4.2 of the Protocol\r\n      document and the rules in the Sections 2 and 3 of the Tables\r\n      document,", "correct_text": "It is also subject to the constraints about permitted \r\ncharacters that are specified in Section 4.2 of RFC 5891 (the Protocol document) \r\nand the rules in the Sections 2 and 3 of RFC 5892 (the Tables document),", "notes": "The section auto-linker in the HTML view detects the section references, but assumes that they are internal section references inside RFC 5890, leading to reader confusion. I hope that this small editorial change can fix the issue and correct the cross-document links. (I'm aware that the HTML version is not normative, but it is very useful nevertheless).", "submit_date": "2026-07-10", "submitter_name": "Georg Lukas", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-13 21:02:56"}, {"errata_id": "9163", "doc-id": "RFC7192", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Section 2", "orig_text": "Implementations can also choose the to support Elliptic Curve Digital Signature Algorithm (ECDSA) [RFC5753] and [RFC6090].", "correct_text": "Implementations can also choose to support Elliptic Curve Digital Signature Algorithm (ECDSA) [RFC5753] and [RFC6090].", "notes": "Typo", "submit_date": "2026-09-03", "submitter_name": "Divyesh Gobiraj", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-09-04 20:22:23"}, {"errata_id": "9027", "doc-id": "RFC7296", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.21.1", "orig_text": "Note that some error notifications such as COOKIE,\r\nINVALID_KE_PAYLOAD or INVALID_MAJOR_VERSION may lead to a subsequent\r\nsuccessful exchange.", "correct_text": "Note that some error notifications such as INVALID_KE_PAYLOAD or \r\nINVALID_MAJOR_VERSION and status notifications such as COOKIE may lead to a subsequent\r\nsuccessful exchange.\r\n\r\nAlternative text:\r\n\r\nNote that some failure notifications such as COOKIE, INVALID_KE_PAYLOAD or\r\nINVALID_MAJOR_VERSION may lead to a subsequent successful exchange.", "notes": "COOKIE is listed under \"NOTIFY messages: status types\"\r\n  COOKIE                                   16390", "submit_date": "2026-07-09", "submitter_name": "Andrew Cagney", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-13 21:06:13"}, {"errata_id": "9028", "doc-id": "RFC9636", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "9.2", "orig_text": "Required parameters: none \r\nOptional parameters: none", "correct_text": "Required parameters: N/A \r\nOptional parameters: N/A", "notes": "RFC 6838 (section 5.6) explicitly states that you should \"not use 'none'\" and \"N/A\" should be used instead.", "submit_date": "2026-07-06", "submitter_name": "Stan Ulbrych", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-07-20 13:55:33"}, {"errata_id": "8855", "doc-id": "RFC8663", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "3.1.1", "orig_text": "-  If the No-PHP (NP) Flag in OSPF or the Persistent (P) Flag in\r\n         IS-IS is clear:\r\n\r\n            pop the top label\r\n\r\n      -  If the No-PHP (NP) Flag in OSPF or the Persistent (P) Flag in\r\n         IS-IS is set:\r\n\r\n            swap the top label to a value equal to SID(E) plus the lower\r\n            bound of the SRGB of E", "correct_text": "-  If No-PHP, the NP Flag in OSPF or the P Flag in\r\n         IS-IS, is clear:\r\n\r\n            pop the top label\r\n\r\n      -  If No-PHP, the NP Flag in OSPF or the P Flag in\r\n         IS-IS, is set:\r\n\r\n            swap the top label to a value equal to SID(E) plus the lower\r\n            bound of the SRGB of E", "notes": "The original text mentions Persistent flag in the context of IS-IS but persistent flag has nothing to do with PHP operation of the labels. Refer sec 2.1.1. in https://www.rfc-editor.org/rfc/rfc8667.html#name-flags\r\n\r\nVerifier notes: This is an editorial issue since it has been introduced during the AUTH48 phase. The corrected text provided is something that aligns with the v07 that was approved by the IESG.", "submit_date": "2026-03-25", "submitter_name": "Imtiyaz Mohammad", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-07-16 05:43:12"}, {"errata_id": "8788", "doc-id": "RFC8029", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "GLOBAL", "orig_text": "Section 3.4\r\n   Address Type\r\n\r\n      The Address Type indicates if the interface is numbered or\r\n      unnumbered.  It also determines the length of the Downstream IP\r\n      Address and Downstream Interface fields.  The Address Type is set\r\n      to one of the following values:\r\n\r\n       Type #        Address Type\r\n       ------        ------------\r\n            1        IPv4 Numbered\r\n            2        IPv4 Unnumbered\r\n            3        IPv6 Numbered\r\n            4        IPv6 Unnumbered\r\n\r\nSection 3.4\r\n   Downstream Address and Downstream Interface Address\r\n\r\n      IPv4 addresses and interface indices are encoded in 4 octets; IPv6\r\n      addresses are encoded in 16 octets.\r\n\r\n      If the interface to the downstream LSR is numbered, then the\r\n      Address Type MUST be set to IPv4 or IPv6, the Downstream Address\r\n      MUST be set to either the downstream LSR's Router ID or the\r\n      interface address of the downstream LSR, and the Downstream\r\n      Interface Address MUST be set to the downstream LSR's interface\r\n      address.\r\n\r\n      If the interface to the downstream LSR is unnumbered, the Address\r\n      Type MUST be IPv4 Unnumbered or IPv6 Unnumbered, the Downstream\r\n      Address MUST be the downstream LSR's Router ID, and the Downstream\r\n      Interface Address MUST be set to the index assigned by the\r\n      upstream LSR to the interface.\r\n\r\n      If an LSR does not know the IP address of its neighbor, then it\r\n      MUST set the Address Type to either IPv4 Unnumbered or IPv6\r\n      Unnumbered.  For IPv4, it must set the Downstream Address to\r\n      127.0.0.1; for IPv6, the address is set to 0::1.  In both cases,\r\n      the interface index MUST be set to 0.  If an LSR receives an Echo\r\n      Request packet with either of these addresses in the Downstream\r\n      Address field, this indicates that it MUST bypass interface\r\n      verification but continue with label validation.\r\n\r\n      If the originator of an echo request packet wishes to obtain\r\n      Downstream Detailed Mapping information but does not know the\r\n      expected label stack, then it SHOULD set the Address Type to\r\n      either IPv4 Unnumbered or IPv6 Unnumbered.  For IPv4, it MUST set\r\n      the Downstream Address to 224.0.0.2; for IPv6, the address MUST be\r\n      set to FF02::2.  In both cases, the interface index MUST be set to\r\n      0.  If an LSR receives an echo request packet with the all-routers\r\n      multicast address, then this indicates that it MUST bypass both\r\n      interface and label stack validation but return Downstream Mapping\r\n      TLVs using the information provided.\r\n\r\nSection 3.7\r\n   Address Type\r\n\r\n      The Address Type indicates if the interface is numbered or\r\n      unnumbered.  It also determines the length of the IP Address and\r\n      Interface fields.  The resulting total for the initial part of the\r\n      TLV is listed in the table below as \"K Octets\".  The Address Type\r\n      is set to one of the following values:\r\n\r\n         Type #        Address Type           K Octets\r\n         ------        ------------           --------\r\n              0        Reserved                      4\r\n              1        IPv4 Numbered                12\r\n              2        IPv4 Unnumbered              12\r\n              3        IPv6 Numbered                36\r\n              4        IPv6 Unnumbered              24\r\n          5-250        Unassigned\r\n        251-254        Reserved for Experimental Use\r\n            255        Reserved\r\n\r\n\r\nSection 3.7\r\n   IP Address and Interface\r\n\r\n      IPv4 addresses and interface indices are encoded in 4 octets; IPv6\r\n      addresses are encoded in 16 octets.\r\n\r\n      If the interface upon which the echo request message was received\r\n      is numbered, then the Address Type MUST be set to IPv4 or IPv6,\r\n      the IP Address MUST be set to either the LSR's Router ID or the\r\n      interface address, and the Interface MUST be set to the interface\r\n      address.\r\n\r\n      If the interface is unnumbered, the Address Type MUST be either\r\n      IPv4 Unnumbered or IPv6 Unnumbered, the IP Address MUST be the\r\n      LSR's Router ID, and the Interface MUST be set to the index\r\n      assigned to the interface.\r\n\r\nSection 6.2.4\r\n      Type #     Address Type      K Octets    Reference\r\n      ------     ------------      --------    ---------\r\n           1     IPv4 Numbered           16    [RFC8029]\r\n           2     IPv4 Unnumbered         16    [RFC8029]\r\n           3     IPv6 Numbered           40    [RFC8029]\r\n           4     IPv6 Unnumbered         28    [RFC8029]\r\n           5     Non IP                  12    [RFC6426]\r\n\r\n             Downstream Detailed Mapping Address Type Registry\r\n\r\nSection 6.2.8\r\n    Value      Meaning                                  Reference\r\n    ---------- ---------------------------------------- ---------\r\n          0    Reserved                                 [RFC8029]\r\n          1    IPv4 Numbered                            [RFC8029]\r\n          2    IPv4 Unnumbered                          [RFC8029]\r\n          3    IPv6 Numbered                            [RFC8029]\r\n          4    IPv6 Unnumbered                          [RFC8029]\r\n      5-250    Unassigned\r\n    251-254    Experimental Use                         [RFC8029]\r\n        255    Reserved                                 [RFC8029]\r\n\r\nSection A.2\r\n   Address Type\r\n\r\n      The Address Type indicates if the interface is numbered or\r\n      unnumbered.  It also determines the length of the Downstream IP\r\n      Address and Downstream Interface fields.  The resulting total for\r\n      the initial part of the TLV is listed in the table below as \"K\r\n      Octets\".  The Address Type is set to one of the following values:\r\n\r\n       Type #        Address Type           K Octets\r\n       ------        ------------           --------\r\n            1        IPv4 Numbered                16\r\n            2        IPv4 Unnumbered              16\r\n            3        IPv6 Numbered                40\r\n            4        IPv6 Unnumbered              28\r\n            5        Non IP                       12\r\n\r\nSection A.2\r\n   Downstream IP Address and Downstream Interface Address\r\n\r\n      IPv4 addresses and interface indices are encoded in 4 octets; IPv6\r\n      addresses are encoded in 16 octets.\r\n\r\n      If the interface to the downstream LSR is numbered, then the\r\n      Address Type MUST be set to IPv4 or IPv6, the Downstream IP\r\n      Address MUST be set to either the downstream LSR's Router ID or\r\n      the interface address of the downstream LSR, and the Downstream\r\n      Interface Address MUST be set to the downstream LSR's interface\r\n      address.\r\n\r\n      If the interface to the downstream LSR is unnumbered, the Address\r\n      Type MUST be IPv4 Unnumbered or IPv6 Unnumbered, the Downstream IP\r\n      Address MUST be the downstream LSR's Router ID, and the Downstream\r\n      Interface Address MUST be set to the index assigned by the\r\n      upstream LSR to the interface.\r\n\r\n      If an LSR does not know the IP address of its neighbor, then it\r\n      MUST set the Address Type to either IPv4 Unnumbered or IPv6\r\n      Unnumbered.  For IPv4, it must set the Downstream IP Address to\r\n      127.0.0.1; for IPv6, the address is set to 0::1.  In both cases,\r\n      the interface index MUST be set to 0.  If an LSR receives an Echo\r\n      Request packet with either of these addresses in the Downstream IP\r\n      Address field, this indicates that it MUST bypass interface\r\n      verification but continue with label validation.\r\n\r\n      If the originator of an echo request packet wishes to obtain\r\n      Downstream Mapping information but does not know the expected\r\n      label stack, then it SHOULD set the Address Type to either IPv4\r\n      Unnumbered or IPv6 Unnumbered.  For IPv4, it MUST set the\r\n      Downstream IP Address to 224.0.0.2; for IPv6, the address MUST be\r\n      set to FF02::2.  In both cases, the interface index MUST be set to\r\n      0.  If an LSR receives an echo request packet with the all-routers\r\n      multicast address, then this indicates that it MUST bypass both\r\n      interface and label stack validation, but return Downstream\r\n      Mapping TLVs using the information provided.", "correct_text": "Section 3.4\r\n   Address Type\r\n\r\n      The Address Type indicates if the interface is numbered or\r\n      unnumbered.  It also determines the length of the Downstream IP\r\n      Address and Downstream Interface fields.  The Address Type is set\r\n      to one of the following values:\r\n\r\n       Type #        Address Type\r\n       ------        ------------\r\n            1        IPv4 Numbered\r\n            2        IPv4 Unnumbered\r\n            3        IPv6 Numbered (with GUA or ULA)\r\n            4        IPv6 Link-Local-only\r\n\r\nSection 3.4\r\n   Downstream Address and Downstream Interface Address\r\n\r\n      IPv4 addresses and interface indices are encoded in 4 octets; IPv6\r\n      addresses are encoded in 16 octets.\r\n\r\n      If the interface to the downstream LSR is numbered, then the\r\n      Address Type MUST be set to IPv4 or IPv6, the Downstream Address\r\n      MUST be set to either the downstream LSR's Router ID or the\r\n      interface address of the downstream LSR, and the Downstream\r\n      Interface Address MUST be set to the downstream LSR's interface\r\n      address.\r\n\r\n      If the interface to the downstream LSR is IPv4 unnumbered or \r\n      only with IPv6 Link-Local address, the Downstream Address \r\n      MUST be the downstream LSR's Router ID, and the Downstream\r\n      Interface Address MUST be set to the index assigned by the\r\n      upstream LSR to the interface.\r\n\r\n      If an LSR does not know the IP address of its neighbor, then it\r\n      MUST set the Address Type to either IPv4 Unnumbered or IPv6\r\n      Link-Local-Only.  For IPv4, it must set the Downstream Address to\r\n      127.0.0.1; for IPv6, the address is set to 0::1.  In both cases,\r\n      the interface index MUST be set to 0.  If an LSR receives an Echo\r\n      Request packet with either of these addresses in the Downstream\r\n      Address field, this indicates that it MUST bypass interface\r\n      verification but continue with label validation.\r\n\r\n      If the originator of an echo request packet wishes to obtain\r\n      Downstream Detailed Mapping information but does not know the\r\n      expected label stack, then it SHOULD set the Address Type to\r\n      either IPv4 Unnumbered or IPv6 Link-Local-Only.  For IPv4, it MUST set\r\n      the Downstream Address to 224.0.0.2; for IPv6, the address MUST be\r\n      set to FF02::2.  In both cases, the interface index MUST be set to\r\n      0.  If an LSR receives an echo request packet with the all-routers\r\n      multicast address, then this indicates that it MUST bypass both\r\n      interface and label stack validation but return Downstream Mapping\r\n      TLVs using the information provided.\r\n\r\nSection 3.7\r\n   Address Type\r\n\r\n      The Address Type indicates if the interface is numbered or\r\n      unnumbered.  It also determines the length of the IP Address and\r\n      Interface fields.  The resulting total for the initial part of the\r\n      TLV is listed in the table below as \"K Octets\".  The Address Type\r\n      is set to one of the following values:\r\n\r\n         Type #        Address Type           K Octets\r\n         ------        ------------           --------\r\n              0        Reserved                      4\r\n              1        IPv4 Numbered                12\r\n              2        IPv4 Unnumbered              12\r\n              3        IPv6 Numbered (with GUA or ULA)  36\r\n              4        IPv6 Link-Local-only              24\r\n          5-250        Unassigned\r\n        251-254        Reserved for Experimental Use\r\n            255        Reserved\r\n\r\n\r\nSection 3.7\r\n   IP Address and Interface\r\n\r\n      IPv4 addresses and interface indices are encoded in 4 octets; IPv6\r\n      addresses are encoded in 16 octets.\r\n\r\n      If the interface upon which the echo request message was received\r\n      is numbered, then the Address Type MUST be set to IPv4 or IPv6,\r\n      the IP Address MUST be set to either the LSR's Router ID or the\r\n      interface address, and the Interface MUST be set to the interface\r\n      address.\r\n\r\n      If the interface is IPv4 unnumbered or only with IPv6 Link-Local\r\n      address, the IP Address MUST be the LSR's Router ID, and the \r\n      Interface MUST be set to the index  assigned to the interface.\r\n\r\nSection 6.2.4\r\n      Type #     Address Type      K Octets    Reference\r\n      ------     ------------      --------    ---------\r\n           1     IPv4 Numbered           16    [RFC8029]\r\n           2     IPv4 Unnumbered         16    [RFC8029]\r\n           3     IPv6 Numbered (with GUA or ULA)    40    [RFC8029]\r\n           4     IPv6 Link-Local-only        28    [RFC8029]\r\n           5     Non IP                  12    [RFC6426]\r\n\r\n             Downstream Detailed Mapping Address Type Registry\r\n\r\nSection 6.2.8\r\n    Value      Meaning                                  Reference\r\n    ---------- ---------------------------------------- ---------\r\n          0    Reserved                                 [RFC8029]\r\n          1    IPv4 Numbered                            [RFC8029]\r\n          2    IPv4 Unnumbered                          [RFC8029]\r\n          3    IPv6 Numbered (with GUA or ULA)  [RFC8029]\r\n          4    IPv6 Link-Local-only                          [RFC8029]\r\n      5-250    Unassigned\r\n    251-254    Experimental Use                         [RFC8029]\r\n        255    Reserved                                 [RFC8029]\r\n\r\nSection A.2\r\n   Address Type\r\n\r\n      The Address Type indicates if the interface is numbered or\r\n      unnumbered.  It also determines the length of the Downstream IP\r\n      Address and Downstream Interface fields.  The resulting total for\r\n      the initial part of the TLV is listed in the table below as \"K\r\n      Octets\".  The Address Type is set to one of the following values:\r\n\r\n       Type #        Address Type           K Octets\r\n       ------        ------------           --------\r\n            1        IPv4 Numbered                16\r\n            2        IPv4 Unnumbered              16\r\n            3        IPv6 Numbered (with GUA or ULA)   40\r\n            4        IPv6 Link-Local-only            28\r\n            5        Non IP                       12\r\n\r\nSection A.2\r\n   Downstream IP Address and Downstream Interface Address\r\n\r\n      IPv4 addresses and interface indices are encoded in 4 octets; IPv6\r\n      addresses are encoded in 16 octets.\r\n\r\n      If the interface to the downstream LSR is numbered, then the\r\n      Address Type MUST be set to IPv4 or IPv6, the Downstream IP\r\n      Address MUST be set to either the downstream LSR's Router ID or\r\n      the interface address of the downstream LSR, and the Downstream\r\n      Interface Address MUST be set to the downstream LSR's interface\r\n      address.\r\n\r\n      If the interface to the downstream LSR is IPv4 unnumbered or only with\r\n      IPv6 Link-Local address, the Downstream Address MUST be the downstream\r\n      LSR's Router ID, and the Downstream Interface Address MUST be set to the \r\n      index assigned by the  upstream LSR to the interface.\r\n\r\n      If an LSR does not know the IP address of its neighbor, then it\r\n      MUST set the Address Type to either IPv4 Unnumbered or IPv6\r\n      Link-Local-Only.  For IPv4, it must set the Downstream Address to\r\n      127.0.0.1; for IPv6, the address is set to 0::1.  In both cases,\r\n      the interface index MUST be set to 0.  If an LSR receives an Echo\r\n      Request packet with either of these addresses in the Downstream\r\n      Address field, this indicates that it MUST bypass interface\r\n      verification but continue with label validation.\r\n\r\n      If the originator of an echo request packet wishes to obtain\r\n      Downstream Detailed Mapping information but does not know the\r\n      expected label stack, then it SHOULD set the Address Type to\r\n      either IPv4 Unnumbered or IPv6 Link-Local-Only.  For IPv4, it MUST set\r\n      the Downstream Address to 224.0.0.2; for IPv6, the address MUST be\r\n      set to FF02::2.  In both cases, the interface index MUST be set to\r\n      0.  If an LSR receives an echo request packet with the all-routers\r\n      multicast address, then this indicates that it MUST bypass both\r\n      interface and label stack validation but return Downstream Mapping\r\n      TLVs using the information provided.", "notes": "There is no such thing as an \"IPv6 unnumbered interface\".\r\nVarious updates were discussed with participants on the MPLS and 6MAN WG mailing lists. The proposed text is where the discussion concluded.\r\n\r\nPointers to some of the discussion threads:\r\nhttps://mailarchive.ietf.org/arch/msg/mpls/Cvop4My8RBsrrl7cWshb5YF_coo/\r\nhttps://mailarchive.ietf.org/arch/msg/mpls/KFIQdqaty4sde5KBzkGR4eRFIS0/\r\nhttps://mailarchive.ietf.org/arch/msg/ipv6/xd_E_LlYNm9D8CW0iXX8T1ubQUY/\r\n\r\nObviously (?) this report can only be \"Held for Document Update\" and it is for the WG to decide on any changes/improvements when this RFC gets updated.", "submit_date": "2026-02-27", "submitter_name": "Adrian Farrel", "verifier_id": "", "verifier_name": "Ketan Talaulikar", "update_date": "2026-07-16 08:33:34"}, {"errata_id": "8626", "doc-id": "RFC9554", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "3.5", "orig_text": "Property parameters:\r\n    [...] In either case, it MUST NOT be assigned more than once.\r\n\r\n\r\nFormat definition:\r\n\r\nsocialpr-param = \"VALUE=uri\" / \"VALUE=text\" /\r\n                 service-type-param / any-param", "correct_text": "Property parameters:\r\n    [...] In either case, it MUST NOT be assigned more than once.\r\n    The USERNAME parameter MAY be assigned if the value type is URI.\r\n\r\n\r\nFormat definition:\r\n\r\nsocialpr-param = \"VALUE=uri\" / \"VALUE=text\" /\r\n                 service-type-param / username-param /\r\n                 any-param", "notes": "This clarifies that the USERNAME parameter is likely to be set on the SOCIALPROFILE property. The USERNAME parameter definition in section 4.10 does explicitly describe this relation. The SOCIALPROFILE property definition should do, too.", "submit_date": "2025-11-03", "submitter_name": "Robert Stepanek", "verifier_id": "", "verifier_name": "Andy Newton", "update_date": "2026-07-16 14:55:42"}, {"errata_id": "9029", "doc-id": "RFC9886", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "A", "orig_text": "In A.1.1.: 7.b.0.a.1.9.e.1.7.5.1.a.0.6.e.5. IN HHIT (\r\nIn A.1.2.: a.0.0. IN NS ns1.hda-10.example.com\r\nIn A.2.1.: 0.a.9.0.7.2.4.d.5.4.e.e.5.1.6.6.5.0. IN HHIT (\r\nand      : 8.2.e.6.5.2.b.6.7.3.4.d.e.0.6.2.5.0. IN HHIT (\r\nIn A.2.2.:    2.b.6.c.b.4.a.9.9.6.4.2.8.0.3.1. IN HHIT (\r\nand      :    2.b.6.c.b.4.a.9.9.6.4.2.8.0.3.1. IN BRID (", "correct_text": "7.b.0.a.1.9.e.1.7.5.1.a.0.6.e.5 IN HHIT (\r\na.0.0 IN NS ns1.hda-10.example.com\r\n0.a.9.0.7.2.4.d.5.4.e.e.5.1.6.6.5.0 IN HHIT (\r\n8.2.e.6.5.2.b.6.7.3.4.d.e.0.6.2.5.0 IN HHIT (\r\n2.b.6.c.b.4.a.9.9.6.4.2.8.0.3.1 IN HHIT (\r\n2.b.6.c.b.4.a.9.9.6.4.2.8.0.3.1 IN BRID (", "notes": "Throughout section A, the owner names of the HHIT and BRID resource records are fully qualified domain names, ending in a dot \".\", but the $ORIGIN statement preceding these names indicate that the intention was for them to be partly qualified domain names, or relative names, without the dot at the end.", "submit_date": "2026-07-14", "submitter_name": "Willem Toorop", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-20 13:50:46"}, {"errata_id": "9030", "doc-id": "RFC4648", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "5", "orig_text": "The pad character \"=\" is typically percent-encoded when used in an\r\nURI [9], but if the data length is known implicitly, this can be\r\navoided by skipping the padding; see section 3.2.", "correct_text": "The pad character \"=\" is typically percent-encoded when used in a\r\nURI [9], but if the data length is known implicitly, this can be\r\navoided by skipping the padding; see section 3.2.", "notes": "The more generally accepted indefinite article when referring to a URI is \"a,\" both in this use case and when the acronym is expanded to \"Uniform Resource Identifier.\"", "submit_date": "2026-07-18", "submitter_name": "Tyler Morgan", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-07-20 13:55:54"}, {"errata_id": "9031", "doc-id": "RFC9175", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.4.", "orig_text": "For actuator applications with low delay tolerance, to avoid additional round trips for multiple requests in rapid sequence, the server may send preemptive Echo option values in successful requests, irrespectively of whether or not the request contained an Echo option. The client then uses the Echo option with the new value in the next actuation request, and the server compares the receive time accordingly.", "correct_text": "For actuator applications with low delay tolerance, to avoid additional round trips for multiple requests in rapid sequence, the server may send preemptive Echo option values in successful responses, irrespectively of whether or not the request contained an Echo option. The client then uses the Echo option with the new value in the next actuation request, and the server compares the receive time accordingly.", "notes": "I think this paragraph refers to positive responses, not requests.", "submit_date": "2026-07-20", "submitter_name": "Karol Witusik", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-20 14:01:12"}, {"errata_id": "9032", "doc-id": "RFC7578", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "5.1.1", "orig_text": "The field names in the underlying need not match what the user sees on the screen.", "correct_text": "The field names in the underlying form need not match what the user sees on the screen.", "notes": "There seems to be a word (or more) missing after the word 'underlying'. I guessed it should be 'underlying form', though the original intention may have been the underlying form, markup, HTML, header, transport, or something else.", "submit_date": "2026-07-20", "submitter_name": "Amichai Rothman", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-20 13:54:55"}, {"errata_id": "9033", "doc-id": "RFC8808", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Request for Comments: 8808\r\nCategory: Standards Track\r\nISSN: 2070-1721", "correct_text": "Request for Comments: 8808\r\nUpdates: 8342\r\nCategory: Standards Track\r\nISSN: 2070-1721", "notes": "RFC 8808 Section 3 formally defines the \"Factory-Default\" datastore, and the YANG in Section 4 \r\nshows the identity \"factory-default\" extending the base identity \"ds:datastore\", which is defined in \r\nRFC 8342.  Thus, it seems accurate that RFC 8808 updates RFC8342.\r\n\r\nCurrently, due to RFC 8342 not having the \"Updated by\" line, it seems many NMDA\r\nimplementations are unaware that the <factory-default> datastore exists, and hence the NMDA\r\nsolution appears lacking.\r\n\r\nIt would be good if the RFC Editor could update the metadata about both documents.", "submit_date": "2026-07-23", "submitter_name": "Kent Watsen", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-07-23 14:38:09"}, {"errata_id": "9034", "doc-id": "RFC2865", "errata_status_code": "Held for Document Update", "errata_type_code": "Technical", "section": "4.1", "orig_text": "Upon receipt of an Access-Request from a valid client, an\r\n      appropriate reply MUST be transmitted.", "correct_text": "Access-Request packets MUST contain a Message-Authenticator attribute.\r\n\r\n      Upon receipt of an Access-Request from a valid client, an\r\n      appropriate reply MUST be transmitted.", "notes": "This errata is a note for readers of RFC 2865, to indicate that the existing definition is subject to attacks.  The issue of CVEs was brought up in the plenary in IETF 126.\r\n\r\nThe CVE in question is https://nvd.nist.gov/vuln/detail/cve-2024-3596\r\n\r\nRFC2865 will be updated by https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/.  We do not expect to rev 2865.  But it's still useful to note errata directly in RFC 2865, until such time as the update is published.", "submit_date": "2026-07-22", "submitter_name": "Alan DeKok", "verifier_id": "", "verifier_name": "Mohamed Boucadair", "update_date": "2026-08-26 12:56:48"}, {"errata_id": "9035", "doc-id": "RFC7265", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "Appendix A", "orig_text": "param-value = string / param-multi\r\nparam-multi = begin-array\r\n              [ string *(value-separator string) ]\r\n              end-array", "correct_text": "param-value = string / param-multi\r\nparam-multi = begin-array\r\n              string *(value-separator string)\r\n              end-array", "notes": "The current syntax allows empty parameter arrays, however, iCalendar\r\n(RFC 5545) doesn't support empty arrays, instead treating it as a\r\nsingle empty string. This breaks the one-to-one mapping between\r\niCalendar and jCal.\r\n\r\nCompare with the excerpt from RFC 5545\r\n\r\n     param         = param-name \"=\" param-value *(\",\" param-value)\r\n     param-value   = paramtext / quoted-string\r\n     paramtext     = *SAFE-CHAR", "submit_date": "2026-07-22", "submitter_name": "Hugo H\u00f6rnquist", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-24 16:12:06"}, {"errata_id": "9036", "doc-id": "RFC9370", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "2.2.4-5", "orig_text": "The responder MUST include this notification in a CREATE_CHILD_SA or IKE_FOLLOWUP_KE response message in case the next IKE_FOLLOWUP_KE exchange is expected, filling it with some data that would allow linking the current exchange to the next one. The initiator MUST send back this notification intact in the request message of the next IKE_FOLLOWUP_KE exchange.", "correct_text": "Suspect the text was meant to say something like:\r\n\r\n  The responder MUST include this notification in a CREATE_CHILD_SA or IKE_FOLLOWUP_KE response message in the case of a further IKE_FOLLOWUP_KE exchange is expected, ...\r\n\r\nBut better text would something like:\r\n\r\n The responder MUST include this notification in the CREATE_CHILD_SA response message, and in all but the final IKE_FOLLOWUP_KE response message, ...", "notes": "To my reading, the current sentence states that an ADDITIONAL_KEY_EXCHANGE notification payload MUST be included in all IKE_FOLLOW_UP response messages, just \"in case\" a further IKE_FOLLOW_UP exchange is needed (we're not sure so we're hedging our bets).", "submit_date": "2026-07-21", "submitter_name": "Andrew Cagney", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-24 16:12:29"}, {"errata_id": "9037", "doc-id": "RFC703", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "GLOBAL", "orig_text": "Host  Number   Host            Socket  Socket   New-Prot, Options\r\n(Oct)    (Dec)    Name               1            27       Implementated (if any)", "correct_text": "Host  Number   Host            Socket  Socket   New-Prot, Options\r\n(Oct)    (Dec)   Name                1            27       Implemented (if any)", "notes": "This is a spelling correction.", "submit_date": "2026-07-21", "submitter_name": "Greg Skinner", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-07-24 16:18:28"}, {"errata_id": "9038", "doc-id": "RFC6376", "errata_status_code": "Reported", "errata_type_code": "Technical", "section": "3.5", "orig_text": "t= Signature Timestamp (plain-text unsigned decimal integer;\r\n      RECOMMENDED, default is an unknown creation time).  The time that\r\n      this signature was created.  The format is the number of seconds\r\n      since 00:00:00 on January 1, 1970 in the UTC time zone.  The value\r\n      is expressed as an unsigned integer in decimal ASCII.  This value\r\n      is not constrained to fit into a 31- or 32-bit integer.\r\n      Implementations SHOULD be prepared to handle values up to at least\r\n      10^12 (until approximately AD 200,000; this fits into 40 bits).", "correct_text": "Ditto, but 10^12 a.k.a. 40 bits is not AD 200,000.\r\n(Unless this goes in line with Paul McCartney's \"three thousand or fouurr thouuuusand\" in the Cavern Club appearance in 1999, the first after his wife died.)\r\n\r\nIt rather is\r\n\r\n$ xa '  10**12  / 60 / 60 / 24 / 365'\r\n0b 00000000 00000000 00000000 00000000 00000000 00000000 01111011 11011101\r\n075735 | 0x7BDD | 31709\r\n\r\n(with 40 bits really being\r\n$ xa '  ((2**40) - 1)  / 60 / 60 / 24 / 365'\r\n0b 00000000 00000000 00000000 00000000 00000000 00000000 10001000 00110001\r\n0104061 | 0x8831 | 34865)\r\n\r\nSo \"approximately AD 32000\".", "notes": "Maybe an iterated DKIMv1 needs this clarification.", "submit_date": "2026-07-20", "submitter_name": "Steffen", "verifier_id": "", "verifier_name": null, "update_date": "2026-07-24 16:13:24"}, {"errata_id": "9039", "doc-id": "RFC9958", "errata_status_code": "Verified", "errata_type_code": "Editorial", "section": "Table 4", "orig_text": "| 5        | ML-KEM-1024 | 1568       | 3168       | 1588           |", "correct_text": "| 5        | ML-KEM-1024 | 1568       | 3168       | 1568           |", "notes": "Table 4 states that ML-KEM-1024 'Ciphertext/signature size (in bytes)' is 1588. The correct value appears to be 1568.\r\nSource: NIST FIPS 203 https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf", "submit_date": "2026-07-21", "submitter_name": "Heikki Vatiainen", "verifier_id": "", "verifier_name": "Madison Church", "update_date": "2026-07-24 16:19:16"}]